From 3dd146bc1577c4b3cdb836eb1062b0281677be83 Mon Sep 17 00:00:00 2001
From: Ruben Hensen <ruben.hensen@protonmail.com>
Date: Wed, 26 Feb 2025 15:03:25 +0100
Subject: [PATCH] Add volumepermisssion enabled

---
 apps/templates/mbgwp-helm.yaml | 15 +++------------
 1 file changed, 3 insertions(+), 12 deletions(-)

diff --git a/apps/templates/mbgwp-helm.yaml b/apps/templates/mbgwp-helm.yaml
index fcbe8c6..fbbd42e 100644
--- a/apps/templates/mbgwp-helm.yaml
+++ b/apps/templates/mbgwp-helm.yaml
@@ -72,19 +72,10 @@ spec:
           ##
           annotations: {}
         allowEmptyPassword: true
-        containerSecurityContext:
+        volumePermissions:
+          ## @param volumePermissions.enabled Enable init container that changes the owner/group of the PV mount point to `runAsUser:fsGroup`
+          ##
           enabled: true
-          seLinuxOptions: {}
-          runAsUser: 1001
-          runAsGroup: 0
-          runAsNonRoot: true
-          privileged: false
-          readOnlyRootFilesystem: true
-          allowPrivilegeEscalation: false
-          capabilities:
-            drop: ["ALL"]
-          seccompProfile:
-            type: "RuntimeDefault"
 
   syncPolicy:
     syncOptions: