fix: readonly system and console tls secretName (#1861)

* fix charts

fix charts

* Focus on console deployment

---------

Co-authored-by: guozhi.li <guozhi.li@daocloud.io>
Co-authored-by: Ubuntu <ubuntu@operator-1861.lxd>

helm/operator/values.yaml

@@ -291,7 +291,9 @@ console:
   # An array of `Volumes <https://kubernetes.io/docs/concepts/storage/volumes/>`__ which the Operator Console can mount to pods.
   #
   # The volumes must exist *and* be accessible to the Console pods.
-  volumes: [ ]
+  volumes:
+    - name: tmp
+      emptyDir: {}
   ###
   # An array of volume mount points associated to each Operator Console container.
   # 
@@ -304,4 +306,7 @@ console:
   #      mountPath: /path/to/mount
   #
   # The ``name`` field must correspond to an entry in the ``volumes`` array.
-  volumeMounts: [ ]
+  volumeMounts:
+    - name: tmp
+      readOnly: false
+      mountPath: /tmp/certs/CAs

resources/base/console-ui.yaml

@@ -304,6 +304,8 @@ spec:
           volumeMounts:
             - mountPath: /tmp/certs
               name: tls-certificates
+            - mountPath: /tmp/certs/CAs
+              name: tmp
       volumes:
         - name: tls-certificates
           projected:
@@ -322,6 +324,8 @@ spec:
                       path: CAs/tls.crt
                     - key: tls.key
                       path: tls.key
-                  name: operator-console-tls
+                  name: console-tls
                   optional: true
+        - name: tmp
+          emptyDir: {}
       serviceAccountName: console-sa