fix: use correct securityContext for Alpine based helm-repository Pod

Author: dkoshkin

charts/cluster-api-runtime-extensions-nutanix/README.md

@@ -35,6 +35,9 @@ A Helm chart for cluster-api-runtime-extensions-nutanix
 | helmRepositoryImage.pullPolicy | string | `"IfNotPresent"` |  |
 | helmRepositoryImage.repository | string | `"ghcr.io/nutanix-cloud-native/caren-helm-reg"` |  |
 | helmRepositoryImage.tag | string | `""` |  |
+| helmRepositorySecurityContext.fsGroup | int | `100` |  |
+| helmRepositorySecurityContext.runAsGroup | int | `100` |  |
+| helmRepositorySecurityContext.runAsUser | int | `405` |  |
 | hooks.ccm.aws.helmAddonStrategy.defaultValueTemplateConfigMap.create | bool | `true` |  |
 | hooks.ccm.aws.helmAddonStrategy.defaultValueTemplateConfigMap.name | string | `"default-aws-ccm-helm-values-template"` |  |
 | hooks.ccm.aws.k8sMinorVersionToCCMVersion."1.27" | string | `"v1.27.9"` |  |

charts/cluster-api-runtime-extensions-nutanix/templates/helm-repository.yaml

@@ -101,7 +101,7 @@ spec:
           periodSeconds: 1
       priorityClassName: {{ .Values.priorityClassName }}
       securityContext:
-        {{ with .Values.securityContext }}
+        {{ with .Values.helmRepositorySecurityContext }}
         {{- toYaml . | nindent 8}}
         {{- end }}
       volumes:

charts/cluster-api-runtime-extensions-nutanix/values.yaml

@@ -156,8 +156,16 @@ resources:
   requests:
     cpu: 100m
     memory: 128Mi
+
 securityContext:
   runAsUser: 65532
+
+# The helm-repository containers are based on an Alpine image with a different nonroot user
+helmRepositorySecurityContext:
+  runAsUser: 405
+  runAsGroup: 100
+  fsGroup: 100
+
 service:
   annotations: {}
   type: ClusterIP