From 2c2fcf704276563bf732c5e0d319145eacca8b46 Mon Sep 17 00:00:00 2001
From: Michael Thomson <michael@michaelthomson.dev>
Date: Thu, 30 May 2024 16:04:04 -0400
Subject: [PATCH] init container

---
 onedev/helmrelease-onedev.yaml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/onedev/helmrelease-onedev.yaml b/onedev/helmrelease-onedev.yaml
index 477f0ce..72b93b4 100644
--- a/onedev/helmrelease-onedev.yaml
+++ b/onedev/helmrelease-onedev.yaml
@@ -16,6 +16,18 @@ spec:
   timeout: 5m
   releaseName: onedev
   values:
+    securityContext:
+      runAsUser: 1000
+      runAsGroup: 1000
+    initContainers:
+    - name: fix-ownership
+      image: busybox
+      command: ["chown", "-R", "1000:1000", "/opt/onedev"]
+      volumeMounts:
+          - name: data
+            mountPath: /opt/onedev
+          - name: trust-certs
+            mountPath: /opt/onedev/conf/trust-certs
     # Configure Ingress resource
     ingress:
       enabled: true