diff --git a/charts/trino/README.md b/charts/trino/README.md index e47c340a..d36c1437 100644 --- a/charts/trino/README.md +++ b/charts/trino/README.md @@ -295,6 +295,7 @@ Fast distributed SQL query engine for big data analytics that helps you explore ``` * `securityContext.runAsUser` - int, default: `1000` * `securityContext.runAsGroup` - int, default: `1000` +* `securityContext.fsGroup` - int, default: `1000` * `containerSecurityContext` - object, default: `{"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]}}` [Container security context](https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-container) configuration. diff --git a/charts/trino/templates/deployment-coordinator.yaml b/charts/trino/templates/deployment-coordinator.yaml index 2ed54b69..887c4cd2 100644 --- a/charts/trino/templates/deployment-coordinator.yaml +++ b/charts/trino/templates/deployment-coordinator.yaml @@ -35,6 +35,7 @@ spec: securityContext: runAsUser: {{ .runAsUser }} runAsGroup: {{ .runAsGroup }} + fsGroup: {{ .fsGroup }} {{- end }} {{- if .Values.shareProcessNamespace.coordinator }} shareProcessNamespace: {{ .Values.shareProcessNamespace.coordinator }} diff --git a/charts/trino/templates/deployment-worker.yaml b/charts/trino/templates/deployment-worker.yaml index 6868a9ea..2b8f5189 100644 --- a/charts/trino/templates/deployment-worker.yaml +++ b/charts/trino/templates/deployment-worker.yaml @@ -37,6 +37,7 @@ spec: securityContext: runAsUser: {{ .runAsUser }} runAsGroup: {{ .runAsGroup }} + fsGroup: {{ .fsGroup }} {{- end }} {{- if .Values.shareProcessNamespace.worker }} shareProcessNamespace: {{ .Values.shareProcessNamespace.worker }} diff --git a/charts/trino/values.yaml b/charts/trino/values.yaml index 2a2c5a50..24acbe67 100644 --- a/charts/trino/values.yaml +++ b/charts/trino/values.yaml @@ -330,6 +330,7 @@ sidecarContainers: {} securityContext: runAsUser: 1000 runAsGroup: 1000 + fsGroup: 1000 # -- [Container security context](https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-container) configuration. containerSecurityContext: