From 90b5bf526fb927674bb1b127ecad6cd380cc12ff Mon Sep 17 00:00:00 2001
From: Dmitry Dunaev <dmitry@opsfleet.com>
Date: Mon, 2 Aug 2021 18:08:50 +0300
Subject: [PATCH] [WIFI-3332] Fix: add securityContext to make mounted volumes
 accessible by the application user

---
 helm/templates/deployment.yaml | 5 +++++
 helm/values.yaml               | 3 +++
 2 files changed, 8 insertions(+)

diff --git a/helm/templates/deployment.yaml b/helm/templates/deployment.yaml
index 0c67a19..9405489 100644
--- a/helm/templates/deployment.yaml
+++ b/helm/templates/deployment.yaml
@@ -83,6 +83,11 @@ spec:
             {{- toYaml . | nindent 12 }}
           {{- end }}
 
+      {{- with .Values.securityContext }}
+      securityContext:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
+
       imagePullSecrets:
       {{- range $image, $imageValue := .Values.images }}
         {{- if $imageValue.regcred }}
diff --git a/helm/values.yaml b/helm/values.yaml
index 2e22a09..5ca041f 100644
--- a/helm/values.yaml
+++ b/helm/values.yaml
@@ -85,6 +85,9 @@ resources: {}
   #  cpu: 100m
   #  memory: 128Mi
 
+securityContext:
+  fsGroup: 101
+
 nodeSelector: {}
 
 tolerations: []