Run as PUID/PGID by default and add startAsRoot option (#246)

2021-03-08 14:32:58 +01:00
parent 048161293c
commit 4e6ceee3cb
104 changed files with 182 additions and 99 deletions
@@ -26,8 +26,12 @@ imagePullSecrets:
  {{- toYaml . | nindent 2 }}
 {{- end }}
 serviceAccountName: {{ include "common.names.serviceAccountName" . }}
-{{- with .Values.podSecurityContext }}
 securityContext:
+{{- if not .Values.startAsRoot }}
+  runAsUser: {{ .Values.PUID }}
+  runAsGroup: {{ .Values.PGID }}
+{{- end }}
+{{- with .Values.podSecurityContext }}
  {{- toYaml . | nindent 2 }}
 {{- end }}
 {{- with .Values.priorityClassName }}
@@ -302,6 +302,7 @@ resources: {}
 PUID: 568
 PGID: 568
 UMASK: "002"
+startAsRoot: false
 fixMountPermissions: true

 # appVolumeMounts: