fixed podSecurityContext (#675)

3 years ago · f6f9404cb6
parent 6be7b014cb
commit f6f9404cb6
6 changed files with 11 additions and 3 deletions
--- a/rust/helm/optics-agent/templates/configmap.yaml
+++ b/rust/helm/optics-agent/templates/configmap.yaml
@ -12,7 +12,7 @@ data:
  AWS_SECRET_ACCESS_KEY: {{ .Values.optics.aws.secretAccessKey }}
  {{- end }}
  RUST_BACKTRACE: {{ .Values.optics.rustBacktrace }}
-  OPT_BASE_DBPATH: {{ .Values.optics.dbPath }}
+  OPT_BASE_DB: {{ .Values.optics.dbPath }}
  OPT_BASE_TRACING_FMT: {{ .Values.optics.tracing.format }}
  OPT_BASE_TRACING_LEVEL: {{ .Values.optics.tracing.level }}
  {{- if .Values.optics.homeChain.connectionUrl }}
--- a/rust/helm/optics-agent/templates/kathy-statefulset.yaml
+++ b/rust/helm/optics-agent/templates/kathy-statefulset.yaml
@ -38,6 +38,8 @@ spec:
        {{- toYaml . | nindent 8 }}
      {{- end }}
      terminationGracePeriodSeconds: 10
+      securityContext:
+        {{- toYaml .Values.podSecurityContext | nindent 8 }}
      containers:
      - name: {{ .Chart.Name }}
        securityContext:
--- a/rust/helm/optics-agent/templates/processor-statefulset.yaml
+++ b/rust/helm/optics-agent/templates/processor-statefulset.yaml
@ -38,6 +38,8 @@ spec:
        {{- toYaml . | nindent 8 }}
      {{- end }}
      terminationGracePeriodSeconds: 10
+      securityContext:
+        {{- toYaml .Values.podSecurityContext | nindent 8 }}
      containers:
      - name: agent
        securityContext:
--- a/rust/helm/optics-agent/templates/relayer-statefulset.yaml
+++ b/rust/helm/optics-agent/templates/relayer-statefulset.yaml
@ -38,6 +38,8 @@ spec:
        {{- toYaml . | nindent 8 }}
      {{- end }}
      terminationGracePeriodSeconds: 10
+      securityContext:
+        {{- toYaml .Values.podSecurityContext | nindent 8 }}
      containers:
      - name: agent
        securityContext:
--- a/rust/helm/optics-agent/templates/updater-statefulset.yaml
+++ b/rust/helm/optics-agent/templates/updater-statefulset.yaml
@ -38,6 +38,8 @@ spec:
        {{- toYaml . | nindent 8 }}
      {{- end }}
      terminationGracePeriodSeconds: 10
+      securityContext:
+        {{- toYaml .Values.podSecurityContext | nindent 8 }}
      containers:
      - name: agent
        securityContext:
--- a/rust/helm/optics-agent/values.yaml
+++ b/rust/helm/optics-agent/values.yaml
@ -174,8 +174,8 @@ optics:
      recipient: # "recipient"
      type: # "static"

-podSecurityContext: {}
-  # fsGroup: 2000
+podSecurityContext:
+  fsGroup: 2000

 securityContext: {}
  # capabilities: