diff --git a/charts/airbyte-keycloak/templates/statefulset.yaml b/charts/airbyte-keycloak/templates/statefulset.yaml index 22b673452d5..7374bcd3063 100644 --- a/charts/airbyte-keycloak/templates/statefulset.yaml +++ b/charts/airbyte-keycloak/templates/statefulset.yaml @@ -87,17 +87,6 @@ spec: {{- if .Values.extraInitContainers }} {{- toYaml .Values.extraInitContainers | nindent 8 }} {{- end }} - {{- if and .Values.containerSecurityContext.runAsUser .Values.containerSecurityContext.runAsGroup }} - - name: fix-volume-permissions - image: busybox - command: ["sh", "-c", "chown -R {{ .Values.containerSecurityContext.runAsUser }}:{{ .Values.containerSecurityContext.runAsGroup }} /opt/keycloak/data/infinispan"] - securityContext: - runAsUser: 0 - privileged: true - volumeMounts: - - name: keycloak-storage - mountPath: /opt/keycloak/data/infinispan - {{- end }} containers: - name: airbyte-keycloak image: {{ printf "%s:%s" .Values.image.repository (include "keycloak.imageTag" .) }} diff --git a/charts/airbyte/values.yaml b/charts/airbyte/values.yaml index f68dd23547b..c46343bcedf 100644 --- a/charts/airbyte/values.yaml +++ b/charts/airbyte/values.yaml @@ -1750,8 +1750,8 @@ keycloak: # -- Security context for the container podSecurityContext: - # gid=1000(airbyte) - fsGroup: 1000 + # gid=0(root) + fsGroup: 0 initContainerSecurityContext: allowPrivilegeEscalation: false @@ -1769,10 +1769,10 @@ keycloak: containerSecurityContext: allowPrivilegeEscalation: false runAsNonRoot: true - # uid=1000(airbyte) + # uid=1000(keycloak) runAsUser: 1000 - # gid=1000(airbyte) - runAsGroup: 1000 + # gid=0(root) + runAsGroup: 0 readOnlyRootFilesystem: false capabilities: drop: ["ALL"]