move fsGroupChangePolicy

shiny-server/Chart.yaml

@@ -15,7 +15,7 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 0.7.3
+version: 0.7.4
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to

shiny-server/templates/deployment.yaml

@@ -29,6 +29,9 @@ spec:
       imagePullSecrets:
       - name: {{ include "chart.fullname" . }}
       {{- end }}
+      securityContext:
+        runAsNonRoot: true
+        fsGroupChangePolicy: OnRootMismatch
       containers:
         - name: rshiny-pod
           image: {{ .Values.imageFullNameAndTag }}
@@ -36,7 +39,6 @@ spec:
             runAsGroup: 999
             runAsUser: 999
             fsGroup: 999
-            fsGroupChangePolicy: OnRootMismatch
           ports:
             - name: http
               containerPort: 3838