Run as fsGroup: 65535 (#8)

stashed · Aug 27, 2019 · 478817b · 478817b
1 parent 366a4f5
commit 478817b
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/chart/stash/templates/deployment.yaml b/chart/stash/templates/deployment.yaml
@@ -112,6 +112,8 @@ spec:
         secret:
           defaultMode: 420
           secretName: {{ template "stash.fullname" . }}-apiserver-cert
+      securityContext:
+        fsGroup: 65535
 {{- if or .Values.tolerations (and .Values.criticalAddon (eq .Release.Namespace "kube-system")) }}
       tolerations:
 {{- if .Values.tolerations }}

diff --git a/deploy/operator.yaml b/deploy/operator.yaml
@@ -91,6 +91,8 @@ spec:
         secret:
           defaultMode: 420
           secretName: stash-apiserver-cert
+      securityContext:
+        fsGroup: 65535
       tolerations:
       - key: CriticalAddonsOnly
         operator: Exists