martyn/infra4talos
1
0
Fork 0
Code Issues Pull requests 10 Projects Releases Packages Wiki Activity

Sprinkle fsGroupChangePolicy on like magic!

Browse source 
Signed-off-by: Martyn Ranyard <m@rtyn.berlin>
This commit is contained in:
Martyn 2025-06-20 09:30:26 +00:00
parent 926a6047d5
commit 92b454a88a
3 changed files with 3 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
apps-helm/code-server/templates/deployment.yaml
View file

@ -32,6 +32,7 @@ spec:
{{- if .Values.securityContext.enabled }} {{- if .Values.securityContext.enabled }}
securityContext: securityContext:
fsGroup: {{ .Values.securityContext.fsGroup }} fsGroup: {{ .Values.securityContext.fsGroup }}
fsGroupChangePolicy: "OnRootMismatch" # There's a chmod already, and no other setup is using this volume!
{{- end }} {{- end }}
{{- if and .Values.volumePermissions.enabled .Values.persistence.enabled }} {{- if and .Values.volumePermissions.enabled .Values.persistence.enabled }}
initContainers: initContainers:

1
apps-helm/samba4/values.yaml
View file

@ -21,6 +21,7 @@ fullnameOverride: ""
podSecurityContext: podSecurityContext:
fsGroup: 1000 fsGroup: 1000
fsGroupChangePolicy: "OnRootMismatch"
samba: samba:
global: global:

1
apps-kustomized/nextcloud/deploy.yaml
View file

@ -102,6 +102,7 @@ spec:
schedulerName: default-scheduler schedulerName: default-scheduler
securityContext: securityContext:
fsGroup: 33 fsGroup: 33
fsGroupChangePolicy: OnRootMismatch
terminationGracePeriodSeconds: 30 terminationGracePeriodSeconds: 30
volumes: volumes:
- name: nextcloud-main - name: nextcloud-main