From 77a031eaa3d6acf12ea00a3dce91eaa84a0fcd25 Mon Sep 17 00:00:00 2001
From: Dmitry Dunaev <dmitry@opsfleet.com>
Date: Mon, 2 Aug 2021 18:07:37 +0300
Subject: [PATCH] [WIFI-3332] Fix: add securityContext to make mounted volumes
 accessible by the application user

---
 helm/templates/deployment.yaml | 5 +++++
 helm/values.yaml               | 3 +++
 2 files changed, 8 insertions(+)

diff --git a/helm/templates/deployment.yaml b/helm/templates/deployment.yaml
index 4f1d4f2b..33281342 100644
--- a/helm/templates/deployment.yaml
+++ b/helm/templates/deployment.yaml
@@ -83,6 +83,11 @@ spec:
             {{- toYaml . | nindent 12 }}
           {{- end }}
 
+      {{- with .Values.securityContext }}
+      securityContext:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
+
       imagePullSecrets:
       {{- range $image, $imageValue := .Values.images }}
         {{- if $imageValue.regcred }}
diff --git a/helm/values.yaml b/helm/values.yaml
index 1cf4b8a5..efe3834f 100644
--- a/helm/values.yaml
+++ b/helm/values.yaml
@@ -109,6 +109,9 @@ resources: {}
   #  cpu: 100m
   #  memory: 128Mi
 
+securityContext:
+  fsGroup: 101
+
 nodeSelector: {}
 
 tolerations: []