From 304bede5d5bc6705ad2d083fa3ccb662e264f18d Mon Sep 17 00:00:00 2001
From: Ruben Hensen <ruben.hensen@protonmail.com>
Date: Wed, 26 Feb 2025 15:10:11 +0100
Subject: [PATCH] Add additional group 6

---
 apps/templates/mbgwp-helm.yaml | 22 +++++++++++++++++++---
 1 file changed, 19 insertions(+), 3 deletions(-)

diff --git a/apps/templates/mbgwp-helm.yaml b/apps/templates/mbgwp-helm.yaml
index fbbd42e..73d7de9 100644
--- a/apps/templates/mbgwp-helm.yaml
+++ b/apps/templates/mbgwp-helm.yaml
@@ -72,10 +72,26 @@ spec:
           ##
           annotations: {}
         allowEmptyPassword: true
-        volumePermissions:
-          ## @param volumePermissions.enabled Enable init container that changes the owner/group of the PV mount point to `runAsUser:fsGroup`
-          ##
+        containerSecurityContext:
           enabled: true
+          seLinuxOptions: {}
+          runAsUser: 1001
+          runAsGroup: 0
+          runAsNonRoot: true
+          privileged: false
+          readOnlyRootFilesystem: true
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop: ["ALL"]
+          seccompProfile:
+            type: "RuntimeDefault
+        podSecurityContext:
+          enabled: true
+          fsGroupChangePolicy: Always
+          sysctls: []
+          supplementalGroups:
+            - 6
+          fsGroup: 1001
 
   syncPolicy:
     syncOptions: