When i try to add readOnlyRootFilesystem: true in aks deployment pods are retsrting

Question

getting below error and the pods are restarting fed-apim-self-hosted-gateway-6bbf5bb9fb-6l99q fed-apim-self-hosted-gateway Get CA certs enabled flag

fed-apim-self-hosted-gateway-6bbf5bb9fb-6l99q fed-apim-self-hosted-gateway CA certs enabled:

fed-apim-self-hosted-gateway-6bbf5bb9fb-6l99q fed-apim-self-hosted-gateway Bootstrapping gateway...

fed-apim-self-hosted-gateway-6bbf5bb9fb-6l99q fed-apim-self-hosted-gateway Local CA certs are not enabled. If you want to enable local CA certs, set certificates.local.ca.enabled to true

fed-apim-self-hosted-gateway-6bbf5bb9fb-6l99q fed-apim-self-hosted-gateway Starting gateway...

fed-apim-self-hosted-gateway-6bbf5bb9fb-6l99q fed-apim-self-hosted-gateway Failed to create CoreCLR, HRESULT: 0x80004005

Answer 1

Hi @Vyshnavi Gadiparthi

Thank you for reaching out to the Microsoft Q&A platform.

From what I could find it seems your app is unable to start due to the fact is unable to write on the /tmp since you're setting the roof fs as read-only.

Check this bellow articles:

https://learn.microsoft.com/en-us/answers/questions/1192807/how-to-fix-exception-failed-to-initialize-coreclr
https://github.com/dotnet/runtime/issues/3168

If you have any questions, please drop a comment by tagging my userid @anrodrigues-MSFT

If this does answer your question, please accept it as the answer as a token of appreciation.