change security context

2024-07-07 17:24:46 -05:00
parent c0fb95aaa3
commit c389fc43a4
6 changed files with 60 additions and 0 deletions
--- a/clusters/cl01tl/applications/prowlarr/templates/replication-source.yaml
+++ b/clusters/cl01tl/applications/prowlarr/templates/replication-source.yaml
@@ -22,6 +22,16 @@ spec:
      weekly: 3
      monthly: 2
      yearly: 4
+    moverSecurityContext:
+      runAsUser: 568
+      runAsGroup: 568
+      fsGroup: 568
+      fsGroupChangePolicy: OnRootMismatch
+      supplementalGroups:
+        - 44
+        - 100
+        - 109
+        - 65539
    copyMethod: Snapshot
    storageClassName: ceph-block
    volumeSnapshotClassName: ceph-blockpool-snapshot
--- a/clusters/cl01tl/applications/radarr5-4k/templates/replication-source.yaml
+++ b/clusters/cl01tl/applications/radarr5-4k/templates/replication-source.yaml
@@ -22,6 +22,16 @@ spec:
      weekly: 3
      monthly: 2
      yearly: 4
+    moverSecurityContext:
+      runAsUser: 568
+      runAsGroup: 568
+      fsGroup: 568
+      fsGroupChangePolicy: OnRootMismatch
+      supplementalGroups:
+        - 44
+        - 100
+        - 109
+        - 65539
    copyMethod: Snapshot
    storageClassName: ceph-block
    volumeSnapshotClassName: ceph-blockpool-snapshot
--- a/clusters/cl01tl/applications/radarr5/templates/replication-source.yaml
+++ b/clusters/cl01tl/applications/radarr5/templates/replication-source.yaml
@@ -22,6 +22,16 @@ spec:
      weekly: 3
      monthly: 2
      yearly: 4
+    moverSecurityContext:
+      runAsUser: 568
+      runAsGroup: 568
+      fsGroup: 568
+      fsGroupChangePolicy: OnRootMismatch
+      supplementalGroups:
+        - 44
+        - 100
+        - 109
+        - 65539
    copyMethod: Snapshot
    storageClassName: ceph-block
    volumeSnapshotClassName: ceph-blockpool-snapshot
--- a/clusters/cl01tl/applications/readarr-books/templates/replication-source.yaml
+++ b/clusters/cl01tl/applications/readarr-books/templates/replication-source.yaml
@@ -22,6 +22,16 @@ spec:
      weekly: 3
      monthly: 2
      yearly: 4
+    moverSecurityContext:
+      runAsUser: 568
+      runAsGroup: 568
+      fsGroup: 568
+      fsGroupChangePolicy: OnRootMismatch
+      supplementalGroups:
+        - 44
+        - 100
+        - 109
+        - 65539
    copyMethod: Snapshot
    storageClassName: ceph-block
    volumeSnapshotClassName: ceph-blockpool-snapshot
--- a/clusters/cl01tl/applications/sonarr4-4k/templates/replication-source.yaml
+++ b/clusters/cl01tl/applications/sonarr4-4k/templates/replication-source.yaml
@@ -22,6 +22,16 @@ spec:
      weekly: 3
      monthly: 2
      yearly: 4
+    moverSecurityContext:
+      runAsUser: 568
+      runAsGroup: 568
+      fsGroup: 568
+      fsGroupChangePolicy: OnRootMismatch
+      supplementalGroups:
+        - 44
+        - 100
+        - 109
+        - 65539
    copyMethod: Snapshot
    storageClassName: ceph-block
    volumeSnapshotClassName: ceph-blockpool-snapshot
--- a/clusters/cl01tl/applications/sonarr4/templates/replication-source.yaml
+++ b/clusters/cl01tl/applications/sonarr4/templates/replication-source.yaml
@@ -22,6 +22,16 @@ spec:
      weekly: 3
      monthly: 2
      yearly: 4
+    moverSecurityContext:
+      runAsUser: 568
+      runAsGroup: 568
+      fsGroup: 568
+      fsGroupChangePolicy: OnRootMismatch
+      supplementalGroups:
+        - 44
+        - 100
+        - 109
+        - 65539
    copyMethod: Snapshot
    storageClassName: ceph-block
    volumeSnapshotClassName: ceph-blockpool-snapshot