diff --git a/charts/supabase/values.yaml b/charts/supabase/values.yaml index 5eddc13c1509391aed452da9cb44b4dd67c974eb..78a65ec7d3cd6d79fe50c3785e40f1891fccce27 100644 --- a/charts/supabase/values.yaml +++ b/charts/supabase/values.yaml @@ -270,7 +270,8 @@ auth: # If not set and create is true, a name is generated using the fullname template name: "" podAnnotations: {} - podSecurityContext: {} + podSecurityContext: + runAsUser: 1000 # fsGroup: 2000 securityContext: # capabilities: @@ -529,15 +530,16 @@ meta: # If not set and create is true, a name is generated using the fullname template name: "" podAnnotations: {} - podSecurityContext: {} + podSecurityContext: + runAsUser: 1000 # fsGroup: 2000 - securityContext: {} + securityContext: # capabilities: # drop: # - ALL # readOnlyRootFilesystem: true # runAsNonRoot: true - # runAsUser: 1000 + runAsUser: 1000 service: type: ClusterIP port: 8080 @@ -604,15 +606,16 @@ storage: # If not set and create is true, a name is generated using the fullname template name: "" podAnnotations: {} - podSecurityContext: {} + podSecurityContext: + runAsUser: 1000 # fsGroup: 2000 - securityContext: {} + securityContext: # capabilities: # drop: # - ALL # readOnlyRootFilesystem: true # runAsNonRoot: true - # runAsUser: 1000 + runAsUser: 1000 service: type: ClusterIP port: 5000 @@ -779,15 +782,16 @@ kong: # If not set and create is true, a name is generated using the fullname template name: "" podAnnotations: {} - podSecurityContext: {} + podSecurityContext: + runAsUser: 100 # fsGroup: 2000 - securityContext: {} + securityContext: # capabilities: # drop: # - ALL # readOnlyRootFilesystem: true # runAsNonRoot: true - # runAsUser: 1000 + runAsUser: 100 service: type: ClusterIP port: 8000