Add readonlyRootFilesystem to container_definition (#64)

Add readonlyRootFilesystem Co-authored-by: Maor Davidov <[email protected]>
umotif-public · Jan 31, 2023 · 65873d0 · 65873d0
1 parent 2d3a019
commit 65873d0
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 1 deletion.
diff --git a/main.tf b/main.tf
@@ -256,7 +256,8 @@ resource "aws_ecs_task_definition" "task" {
   "pseudoTerminal": ${var.task_pseudo_terminal},
   %{~endif}
   "environment": ${jsonencode(local.task_environment)},
-  "environmentFiles": ${jsonencode(local.task_environment_files)}
+  "environmentFiles": ${jsonencode(local.task_environment_files)},
+  "readonlyRootFilesystem": ${var.readonlyRootFilesystem ? true : false}
 }]
 EOF
 

diff --git a/variables.tf b/variables.tf
@@ -333,3 +333,8 @@ variable "cpu_architecture" {
   default     = "X86_64"
   type        = string
 }
+
+variable "readonlyRootFilesystem" {
+  default     = false
+  description = "When this parameter is true, the container is given read-only access to its root file system"
+}