From 223221c31e1d030d70c26956b776edbfa632423f Mon Sep 17 00:00:00 2001
From: Ilya Kreymer <ikreymer@users.noreply.github.com>
Date: Tue, 10 Jun 2025 22:20:18 +0000
Subject: [PATCH] Add securityContext for Redis pod (#2640)

It seems the latest redis image changed security settings so
root-mounted volumes no longer work.
This change:
- mount redis volumes as redis user/group 999
- needed to run with redis >=8.0.2
---
 chart/app-templates/redis.yaml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/chart/app-templates/redis.yaml b/chart/app-templates/redis.yaml
index e366fbca..341f861b 100644
--- a/chart/app-templates/redis.yaml
+++ b/chart/app-templates/redis.yaml
@@ -42,6 +42,11 @@ metadata:
 spec:
   hostname: {{ name }}
   subdomain: redis
+  securityContext:
+    runAsNonRoot: true
+    runAsUser: 999
+    runAsGroup: 999
+    fsGroup: 999
 
   terminationGracePeriodSeconds: 10
   volumes: