diff --git a/charts/invy-chart/templates/db-statefulset.yaml b/charts/invy-chart/templates/db-statefulset.yaml index 6321063..fa134f4 100644 --- a/charts/invy-chart/templates/db-statefulset.yaml +++ b/charts/invy-chart/templates/db-statefulset.yaml @@ -18,6 +18,10 @@ spec: {{- include "invy.selectorLabels" . | nindent 8 }} app.kubernetes.io/component: database spec: + securityContext: + runAsUser: 999 + runAsNonRoot: true + fsGroup: 999 containers: - name: postgres image: "{{ .Values.postgres.image.repository }}:{{ .Values.postgres.image.tag }}"