#2609: set fsGroup for pods with persistent storage pods, partially r…

…everts #2566
uselagoon · Apr 15, 2021 · e8a6e3a · e8a6e3a
1 parent 3f4b0d7
commit e8a6e3a
Show file tree

Hide file tree

Showing 3 changed files with 7 additions and 7 deletions.
diff --git a/images/kubectl-build-deploy-dind/helmcharts/mariadb-single/values.yaml b/images/kubectl-build-deploy-dind/helmcharts/mariadb-single/values.yaml
@@ -23,8 +23,8 @@ serviceAccount:
   # If not set and create is true, a name is generated using the fullname template
   name:
 
-podSecurityContext: {}
-  # fsGroup: 2000
+podSecurityContext:
+  fsGroup: 0
 
 securityContext: {}
   # capabilities:
@@ -72,4 +72,4 @@ inPodCronjobs: ""
 tls_acme: false
 routesAutogenerateInsecure: Allow
 
-configMapSha: ""
+configMapSha: ""
diff --git a/images/kubectl-build-deploy-dind/helmcharts/mongodb-single/values.yaml b/images/kubectl-build-deploy-dind/helmcharts/mongodb-single/values.yaml
@@ -23,8 +23,8 @@ serviceAccount:
   # If not set and create is true, a name is generated using the fullname template
   name:
 
-podSecurityContext: {}
-  # fsGroup: 2000
+podSecurityContext:
+  fsGroup: 0
 
 securityContext: {}
   # capabilities:

diff --git a/images/kubectl-build-deploy-dind/helmcharts/postgres-single/values.yaml b/images/kubectl-build-deploy-dind/helmcharts/postgres-single/values.yaml
@@ -23,8 +23,8 @@ serviceAccount:
   # If not set and create is true, a name is generated using the fullname template
   name:
 
-podSecurityContext: {}
-  # fsGroup: 2000
+podSecurityContext:
+  fsGroup: 0
 
 securityContext: {}
   # capabilities: