Merge pull request lsst-sqre#3604 from lsst-sqre/u/ajt/ff-pvc-ownership

Add security context info for Firefly at IDF sites
lsst-uk · Aug 8, 2024 · 3bb8f0e · 3bb8f0e
2 parents 9119f14 + eb9afdd
commit 3bb8f0e
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 2 deletions.
diff --git a/applications/portal/README.md b/applications/portal/README.md
@@ -42,5 +42,5 @@ Rubin Science Platform Portal Aspect
 | redis.tolerations | list | `[]` | Tolerations for the Redis pod |
 | replicaCount | int | `1` | Number of pods to start |
 | resources | object | See `values.yaml` | Resource limits and requests. The Portal will use (by default) 93% of container RAM.  This is a smallish Portal; tweak it as you need to in instance definitions in Phalanx. |
-| securityContext | object | `{}` | Security context for the Portal pod |
+| securityContext | object | See `values.yaml` | Security context for the Portal pod |
 | tolerations | list | `[]` | Tolerations for the Portal pod |
diff --git a/applications/portal/values.yaml b/applications/portal/values.yaml
@@ -50,7 +50,11 @@ tolerations: []
 affinity: {}
 
 # -- Security context for the Portal pod
-securityContext: {}
+# @default -- See `values.yaml`
+securityContext:
+  runAsUser: 91
+  runAsGroup: 91
+  fsGroup: 91
 
 config:
   # -- Set to `TRUE` to enable service debugging