Skip to content

fix: add empty dir for /.ratify to allow nonroot directory permission#2514

Closed
fseldow wants to merge 1 commit into
notaryproject:mainfrom
fseldow:emptydir
Closed

fix: add empty dir for /.ratify to allow nonroot directory permission#2514
fseldow wants to merge 1 commit into
notaryproject:mainfrom
fseldow:emptydir

Conversation

@fseldow
Copy link
Copy Markdown
Contributor

@fseldow fseldow commented May 11, 2026

Description

Which issue(s) does this PR resolve?

Fixes #

Type of change

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to not work as expected)
  • Helm chart change (any edit/addition/update that is necessary for changes merged to the main branch)
  • This change requires a documentation update

Testing and verification

Checklist

  • Does the affected code have corresponding tests?
  • Are the changes documented, not just with inline documentation, but also with conceptual documentation such as an overview of a new feature, or task-based documentation like a tutorial? Consider if this change should be announced on your project blog.
  • Does this introduce breaking changes that would require an announcement or bumping the major version?
  • Do all new files have appropriate license header?

Post merge requirements

  • MAINTAINERS: manually trigger the "Publish Package" workflow after merging any PR that indicates Helm Chart Change

Copilot AI review requested due to automatic review settings May 11, 2026 10:46
Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates the Ratify Gatekeeper Provider Helm chart to support running with a read-only root filesystem / non-root user by ensuring a writable /.ratify directory is available via a pod volume.

Changes:

  • Mount a new emptyDir volume at /.ratify in the Gatekeeper Provider Deployment.
  • Bump the Helm chart version and appVersion to 2.0.1-dev.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.

File Description
deployments/ratify-gatekeeper-provider/templates/deployment.yaml Adds an emptyDir volume and mounts it at /.ratify to provide a writable directory.
deployments/ratify-gatekeeper-provider/Chart.yaml Bumps chart metadata version fields.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

version: 2.0.0-dev
appVersion: "2.0.0-dev"
version: 2.0.1-dev
appVersion: "2.0.1-dev"
@codecov
Copy link
Copy Markdown

codecov Bot commented May 11, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 77.10%. Comparing base (dec8a6e) to head (9cc40bd).

Additional details and impacted files
@@            Coverage Diff             @@
##             main    #2514      +/-   ##
==========================================
- Coverage   77.15%   77.10%   -0.05%     
==========================================
  Files         105      105              
  Lines        4657     4657              
==========================================
- Hits         3593     3591       -2     
- Misses        916      917       +1     
- Partials      148      149       +1     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@fseldow fseldow closed this May 11, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants