fix: all containers will abide by helm configured security context (#48)

openfga · Jul 7, 2023 · b4028f8 · b4028f8
1 parent cbdc905
commit b4028f8
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 1 deletion.
diff --git a/charts/openfga/Chart.yaml b/charts/openfga/Chart.yaml
@@ -3,7 +3,7 @@ name: openfga
 description: A Kubernetes Helm chart for the OpenFGA project.
 
 type: application
-version: 0.1.18
+version: 0.1.19
 appVersion: "v1.1.1"
 
 home: "https://openfga.github.io/helm-charts/charts/openfga"

diff --git a/charts/openfga/templates/deployment.yaml b/charts/openfga/templates/deployment.yaml
@@ -37,6 +37,8 @@ spec:
  {{- if and (has .Values.datastore.engine (list "postgres" "mysql")) .Values.datastore.applyMigrations }}
  initContainers:
  - name: wait-for-migration
+ securityContext:
+ {{- toYaml .Values.securityContext | nindent 12 }}
  image: groundnuty/k8s-wait-for:v1.6
  args: ["job", '{{ include "openfga.fullname" . }}-migrate']
  {{- end }}

diff --git a/charts/openfga/templates/job.yaml b/charts/openfga/templates/job.yaml
@@ -10,6 +10,8 @@ spec:
  spec:
  containers:
  - name: migrate-database
+ securityContext:
+ {{- toYaml .Values.securityContext | nindent 12 }}
  image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}"
  args: ["migrate"]
  env: