✏️ typo: set fsGroupChangePolicy to OnRootMismatch by defualt (#21032)

Signed-off-by: Muhammed Hussein Karimi <info@karimi.dev>
This commit is contained in:
Muhammed Hussein karimi
2023-11-22 16:13:28 +03:30
committed by GitHub
parent 0ba581cc11
commit 60d729992f
2 changed files with 4 additions and 1 deletions

View File

@@ -152,6 +152,7 @@ The command removes all the Kubernetes components associated with the chart and
| `containerPorts.console` | MinIO&reg; container port to open for MinIO&reg; Console | `9001` |
| `podSecurityContext.enabled` | Enable pod Security Context | `true` |
| `podSecurityContext.fsGroup` | Group ID for the container | `1001` |
| `podSecurityContext.fsGroupChangePolicy` | When K8s should preform chown on attached volumes | `OnRootMismatch` |
| `containerSecurityContext.enabled` | Enabled containers' Security Context | `true` |
| `containerSecurityContext.runAsUser` | Set containers' Security Context runAsUser | `1001` |
| `containerSecurityContext.runAsNonRoot` | Set container's Security Context runAsNonRoot | `true` |
@@ -540,4 +541,4 @@ Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
limitations under the License.

View File

@@ -436,10 +436,12 @@ containerPorts:
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod
## @param podSecurityContext.enabled Enable pod Security Context
## @param podSecurityContext.fsGroup Group ID for the container
## @param podSecurityContext.fsGroupChangePolicy When K8s should preform chown on attached volumes
##
podSecurityContext:
enabled: true
fsGroup: 1001
fsGroupChangePolicy: "OnRootMismatch"
## MinIO&reg; container Security Context
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-container
## @param containerSecurityContext.enabled Enabled containers' Security Context