One the primary ways in which applications work on other distros and not on openshift is that they are given write access inside the container and can create files. To get around this, we should have folks get an empty dir mounted for the information they need to update. This is on a resource/application basis, therefore the UX being easy to see would be nice.

It would also be nice if by looking at a particular Security Context we could tell if this was potentially needed and let users know about this.