fix: remove initContainer and work with runAsUser and fsGroup (#107)

* fix: remove initContainer and work with runAsUser and fsGroup

Signed-off-by: Engin Diri <engin.diri@mail.schwarz>

charts/node-red/Chart.yaml

@@ -9,7 +9,7 @@ icon: https://nodered.org/about/resources/media/node-red-icon-2.png
 
 type: application
 
-version: 0.16.0
+version: 0.17.0
 appVersion: 2.2.2
 
 keywords:
@@ -29,7 +29,7 @@ maintainers:
 annotations:
   artifacthub.io/containsSecurityUpdates: "false"
   artifacthub.io/changes: |
-    - adding basic-auth support for servicemonitor
+    - remove initContainer and work with runAsUser and fsGroup
   artifacthub.io/images: |
     - name: node-red
       image: docker.io/nodered/node-red:2.2.2

charts/node-red/templates/deployment.yaml

@@ -35,23 +35,11 @@ spec:
       securityContext:
         {{- toYaml .Values.podSecurityContext | nindent 8 }}
       {{- end }}
-      {{- if or .Values.persistence.enabled .Values.initContainers  }}
+      {{- if .Values.initContainers  }}
       initContainers:
       {{- with .Values.initContainers }}
         {{- toYaml . | nindent 6 }}
       {{- end }}
-      {{- if .Values.persistence.enabled }}
-      - name: permission-fix
-        image: busybox
-        command: ['sh', '-c']
-        args: ['chmod -R 777 /data']
-        volumeMounts:
-          - name: data
-            mountPath: /data
-            {{- if .Values.persistence.subPath}}
-            subPath: {{ .Values.persistence.subPath }}
-            {{- end }}
-      {{- end }}
       {{- end }}
       containers:
         {{- if .Values.extraSidecars }}

charts/node-red/values.yaml

@@ -62,8 +62,11 @@ podAnnotations: {}
 deploymentAnnotations: {}
 
 # -- Pod Security Context see [values.yaml](values.yaml)
-podSecurityContext: {}
-  # fsGroup: 2000
+podSecurityContext:
+  # -- node-red group is 1000
+  fsGroup: 1000
+  # -- node-red user is 1000
+  runAsUser: 1000
 
 # -- Security Context see [values.yaml](values.yaml)
 securityContext: {}