add a writeable $HOME for the nonroot cosigned user

Signed-off-by: Jake Sanders <jsand@google.com>
sigstore · Dec 14, 2021 · de0a245 · de0a245
1 parent 4d4c830
commit de0a245
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/config/webhook.yaml b/config/webhook.yaml
@@ -71,6 +71,13 @@ spec:
             drop:
             - all
 
+        volumeMounts:
+        - mountPath: /home/nonroot
+          name: writable-home
+        volumes:
+        - emptyDir: {}
+          name: writable-home
+
         readinessProbe: &probe
           failureThreshold: 6
           initialDelaySeconds: 20