fix: grant rights on database pod ephemeral volume

InseeFr · Sep 26, 2024 · 5db4ed2 · 5db4ed2
1 parent 39e192f
commit 5db4ed2
Showing 1 changed file with 9 additions and 1 deletion.
diff --git a/.../fr/insee/arc/core/service/kubernetes/configuration/ExecutorDatabaseStatefulTemplate.java b/.../fr/insee/arc/core/service/kubernetes/configuration/ExecutorDatabaseStatefulTemplate.java
@@ -28,6 +28,14 @@ private ExecutorDatabaseStatefulTemplate() {
         }
       },
       "spec": {
+        "securityContext": {
+          "fsGroupChangePolicy": "Always",
+          "fsGroup": 1001,
+          "supplementalGroups": [
+            1001
+          ],
+          "runAsUser": 1001
+		},
         "containers": [
           {
             "env": [
@@ -175,7 +183,7 @@ private ExecutorDatabaseStatefulTemplate() {
                 "name": "custom-init-scripts"
               },
               {
-                "mountPath": "/bitnami/postgresql",
+                "mountPath": "/bitnami",
                 "name": "tmp-volume"
               }
             ]