Skip to content

Headlamp does not start when securityContext.readOnlyRootFilesystem = true #4830

@wkbrd

Description

@wkbrd

Describe the bug

The values.yaml shows readOnlyRootFilesystem: true, though it seems to not be supported. As a security best practice, applications should be able to run with the root filesystem read-only.

To Reproduce

Provide securityContext.readOnlyRootFilesystem=true as a Helm install setting

App fails to install and outputs these error messages:

{"level":"error","source":"/headlamp/backend/pkg/config/config.go","line":505,"error":"mkdir /home/headlamp/.config: read-only file system","time":"2026-03-05T18:15:51Z","message":"creating plugins directory"}
{"level":"error","source":"/headlamp/backend/pkg/config/config.go","line":539,"error":"mkdir /home/headlamp/.config: read-only file system","time":"2026-03-05T18:15:51Z","message":"creating user-plugins directory"}
{"level":"info","level":"info","time":"2026-03-05T18:15:51Z","message":"Log level set from HEADLAMP_CONFIG_LOG_LEVEL"}
{"level":"error","source":"/headlamp/backend/cmd/headlamp.go","line":1153,"error":"mkdir /tmp/.headlamp1129714917: read-only file system","time":"2026-03-05T18:15:51Z","message":"Failed to create static dir"}

Environment (please provide info about your environment):

N/A

Are you able to fix this issue?

I looked at the Helm chart and I do not see options that should allow for this to easily tweaked.

Additional Context

Metadata

Metadata

Assignees

No one assigned

    Labels

    kind/bugCategorizes issue or PR as related to a bug.

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions