From 6408e471c39ce7306fb16808472b3177d8ad7df7 Mon Sep 17 00:00:00 2001 From: bp99 Date: Sun, 25 Aug 2024 23:39:36 +0200 Subject: [PATCH] chart-unifi_network_application: allow setting security context of app as well --- charts/unifi-network-application/templates/deployment.yaml | 2 ++ charts/unifi-network-application/values.yaml | 5 +++++ 2 files changed, 7 insertions(+) diff --git a/charts/unifi-network-application/templates/deployment.yaml b/charts/unifi-network-application/templates/deployment.yaml index 14169cc..1fc6d9a 100644 --- a/charts/unifi-network-application/templates/deployment.yaml +++ b/charts/unifi-network-application/templates/deployment.yaml @@ -76,6 +76,8 @@ spec: labels: name: {{ include "template.fullname" . }}-app spec: + securityContext: + {{ .Values.podSecurityContext | toYaml | nindent 8 }} volumes: - name: {{ include "template.fullname" . }}-app-config-volume persistentVolumeClaim: diff --git a/charts/unifi-network-application/values.yaml b/charts/unifi-network-application/values.yaml index 42a51b0..a92bb31 100644 --- a/charts/unifi-network-application/values.yaml +++ b/charts/unifi-network-application/values.yaml @@ -61,6 +61,11 @@ persistence: # -- size limit for the PVC size: 128Mi +podSecurityContext: {} + # Settings for NFS running as nobody(65534): + # runAsUser: 65534 + # runAsGroup: 65534 + mongodb: # -- image to pull and use; for arm64 (eg Raspberry Pi 4), use "arm64v8/mongo" image: mongo