chore(psql): add securityContext to run as nonRoot

eclipse-tractusx · Jul 20, 2023 · 2277098 · 2277098
1 parent 719eb1a
commit 2277098
Showing 1 changed file with 16 additions and 0 deletions.
diff --git a/charts/umbrella/values.yaml b/charts/umbrella/values.yaml
@@ -169,6 +169,14 @@ edcconsumer:
       username: psql-consumer-user
       password: psql-consumer-password
 
+    primary:
+      podSecurityContext:
+        enabled: true
+        runAsNonRoot: true
+        runAsGroup: 65534 # nogroup
+        runAsUser: 1001
+        fsGroup: 65534 # nogroup
+
   vault:
     hashicorp:
       token: *edcVaultToken
@@ -228,6 +236,14 @@ edcprovider:
       username: psql-provider-user
       password: psql-provider-password
 
+    primary:
+      podSecurityContext:
+        enabled: true
+        runAsNonRoot: true
+        runAsGroup: 65534 # nogroup
+        runAsUser: 1001
+        fsGroup: 65534 # nogroup
+
   vault:
     hashicorp:
       token: *edcVaultToken