Merge pull request #152 from small-hack/add-security-context-to-db-migrate

clean up security context for db migrate jobs

Author: jessebot

charts/mastodon/Chart.yaml

@@ -9,7 +9,7 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 11.0.2
+version: 11.0.3
 
 # renovate: image=ghcr.io/mastodon/mastodon
 appVersion: v4.4.4

charts/mastodon/README.md

@@ -1,6 +1,6 @@
 # mastodon
 
-![Version: 11.0.1](https://img.shields.io/badge/Version-11.0.1-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: v4.4.4](https://img.shields.io/badge/AppVersion-v4.4.4-informational?style=flat-square)
+![Version: 11.0.3](https://img.shields.io/badge/Version-11.0.3-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: v4.4.4](https://img.shields.io/badge/AppVersion-v4.4.4-informational?style=flat-square)
 
 Mastodon is a free, open-source social network server based on ActivityPub.
 

charts/mastodon/templates/_db-migrate.tpl

@@ -39,6 +39,10 @@ spec:
       {{- end }}
     spec:
       restartPolicy: Never
+      {{- with (default .Values.podSecurityContext .Values.mastodon.web.podSecurityContext) }}
+      securityContext:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
       {{- if .Values.mastodon.extraVolumes }}
       volumes:
         {{- if gt (len .Values.mastodon.extraVolumes) 0 }}
@@ -47,6 +51,10 @@ spec:
       {{- end }}
       containers:
         - name: {{ include "mastodon.fullname" . }}-db-migrate
+          {{- with (default .Values.securityContext .Values.mastodon.web.securityContext) }}
+          securityContext:
+            {{- toYaml . | nindent 12 }}
+          {{- end }}
           image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}"
           imagePullPolicy: {{ .Values.image.pullPolicy }}
           command: