feat: update fsGroupChangePolicy

joryirving · Jan 10, 2025 · f215d7b · f215d7b
1 parent 30ba288
commit f215d7b
Show file tree

Hide file tree

Showing 10 changed files with 10 additions and 0 deletions.
diff --git a/kubernetes/main/apps/database/dragonfly/app/helmrelease.yaml b/kubernetes/main/apps/database/dragonfly/app/helmrelease.yaml
@@ -72,6 +72,7 @@ spec:
         runAsNonRoot: true
         runAsUser: 1000
         runAsGroup: 100
+        fsGroupChangePolicy: OnRootMismatch
         seccompProfile: { type: RuntimeDefault }
       topologySpreadConstraints:
         - maxSkew: 1

diff --git a/kubernetes/main/apps/downloads/qbittorrent/tools/helmrelease.yaml b/kubernetes/main/apps/downloads/qbittorrent/tools/helmrelease.yaml
@@ -59,4 +59,5 @@ spec:
         runAsNonRoot: true
         runAsUser: 1000
         runAsGroup: 100
+        fsGroupChangePolicy: OnRootMismatch
         seccompProfile: { type: RuntimeDefault }
diff --git a/kubernetes/main/apps/kube-tools/system-upgrade-controller/app/helmrelease.yaml b/kubernetes/main/apps/kube-tools/system-upgrade-controller/app/helmrelease.yaml
@@ -58,6 +58,7 @@ spec:
         runAsNonRoot: true
         runAsUser: 1000
         runAsGroup: 100
+        fsGroupChangePolicy: OnRootMismatch
         seccompProfile: { type: RuntimeDefault }
       affinity:
         nodeAffinity:

diff --git a/kubernetes/main/apps/network/cloudflared/app/helmrelease.yaml b/kubernetes/main/apps/network/cloudflared/app/helmrelease.yaml
@@ -74,6 +74,7 @@ spec:
         runAsNonRoot: true
         runAsUser: 1000
         runAsGroup: 100
+        fsGroupChangePolicy: OnRootMismatch
         seccompProfile: { type: RuntimeDefault }
       topologySpreadConstraints:
         - maxSkew: 1

diff --git a/kubernetes/main/apps/network/echo-server/app/helmrelease.yaml b/kubernetes/main/apps/network/echo-server/app/helmrelease.yaml
@@ -65,6 +65,7 @@ spec:
         runAsNonRoot: true
         runAsUser: 1000
         runAsGroup: 100
+        fsGroupChangePolicy: OnRootMismatch
         seccompProfile: { type: RuntimeDefault }
       topologySpreadConstraints:
         - maxSkew: 1

diff --git a/kubernetes/main/apps/observability/karma/app/helmrelease.yaml b/kubernetes/main/apps/observability/karma/app/helmrelease.yaml
@@ -50,6 +50,7 @@ spec:
         runAsNonRoot: true
         runAsUser: 1000
         runAsGroup: 100
+        fsGroupChangePolicy: OnRootMismatch
         seccompProfile: { type: RuntimeDefault }
       topologySpreadConstraints:
         - maxSkew: 1

diff --git a/kubernetes/main/apps/self-hosted/lubelog/app/helmrelease.yaml b/kubernetes/main/apps/self-hosted/lubelog/app/helmrelease.yaml
@@ -53,6 +53,7 @@ spec:
         runAsNonRoot: true
         runAsUser: 1000
         runAsGroup: 100
+        fsGroupChangePolicy: OnRootMismatch
         seccompProfile: { type: RuntimeDefault }
     service:
       app:

diff --git a/kubernetes/utility/apps/kube-tools/system-upgrade-controller/app/helmrelease.yaml b/kubernetes/utility/apps/kube-tools/system-upgrade-controller/app/helmrelease.yaml
@@ -58,6 +58,7 @@ spec:
         runAsNonRoot: true
         runAsUser: 1000
         runAsGroup: 100
+        fsGroupChangePolicy: OnRootMismatch
         seccompProfile: { type: RuntimeDefault }
       affinity:
         nodeAffinity:

diff --git a/kubernetes/utility/apps/network/cloudflared/app/helmrelease.yaml b/kubernetes/utility/apps/network/cloudflared/app/helmrelease.yaml
@@ -71,6 +71,7 @@ spec:
         runAsNonRoot: true
         runAsUser: 1000
         runAsGroup: 100
+        fsGroupChangePolicy: OnRootMismatch
         seccompProfile: { type: RuntimeDefault }
       topologySpreadConstraints:
         - maxSkew: 1

diff --git a/kubernetes/utility/apps/network/echo-server/app/helmrelease.yaml b/kubernetes/utility/apps/network/echo-server/app/helmrelease.yaml
@@ -66,6 +66,7 @@ spec:
         runAsNonRoot: true
         runAsUser: 1000
         runAsGroup: 100
+        fsGroupChangePolicy: OnRootMismatch
         seccompProfile: { type: RuntimeDefault }
       topologySpreadConstraints:
         - maxSkew: 1