configure security context for db

charts/supabase/values.yaml

@@ -107,15 +107,17 @@ db:
     # If not set and create is true, a name is generated using the fullname template
     name: ""
   podAnnotations: {}
-  podSecurityContext: {}
-    # fsGroup: 2000
-  securityContext: {}
+  podSecurityContext:
+    enabled: true
+    fsGroup: 106
+    runAsNonRoot: true
+  securityContext:
     # capabilities:
     #   drop:
     #   - ALL
-    # readOnlyRootFilesystem: true
-    # runAsNonRoot: true
-    # runAsUser: 1000
+      enabled: true
+      runAsUser: 105
+      runAsNonRoot: true
   service:
     type: ClusterIP
     port: 5432