fix(venona-helm-chart/ci): add rootless check

codefresh-io · Nov 18, 2024 · f4b0dfe · f4b0dfe
1 parent 468de3e
commit f4b0dfe
Show file tree

Hide file tree

Showing 4 changed files with 8 additions and 8 deletions.
diff --git a/charts/cf-runtime/.ci/values-rootless.yaml b/charts/cf-runtime/.ci/values-rootless.yaml
@@ -5,10 +5,11 @@ volumeProvisioner:
     image:
       tag: 1.30.0-rootless
       digest: sha256:712e549e6e843b04684647f17e0973f8047e0d60e6e8b38a693ea64dc75b0479
-    podSecurityContext:
-      enabled: true
+    containerSecurityContext:
       runAsUser: 1000
+    podSecurityContext:
       fsGroup: 1000
+      fsGroupChangePolicy: "OnRootMismatch"
     volumePermissions:
       enabled: true
 
@@ -20,12 +21,11 @@ runtime:
     userVolumeMounts:
       dind:
         name: dind
-        mountPath: /home/rootless/
+        mountPath: /home/rootless/.local/share/docker
     containerSecurityContext:
       privileged: true
-    podSecurityContext:
-      enabled: true
       runAsUser: 1000
+    podSecurityContext:
       fsGroup: 1000
       fsGroupChangePolicy: "OnRootMismatch"
     volumePermissions:

diff --git a/charts/cf-runtime/README.md b/charts/cf-runtime/README.md
@@ -745,7 +745,7 @@ runtime:
     userVolumeMounts:
       dind:
         name: dind
-        mountPath: /home/rootless/
+        mountPath: /home/rootless/.local/share/docker
     containerSecurityContext:
       privileged: true
       runAsUser: 1000

diff --git a/charts/cf-runtime/README.md.gotmpl b/charts/cf-runtime/README.md.gotmpl
@@ -747,7 +747,7 @@ runtime:
     userVolumeMounts:
       dind:
         name: dind
-        mountPath: /home/rootless/
+        mountPath: /home/rootless/.local/share/docker
     containerSecurityContext:
       privileged: true
       runAsUser: 1000

diff --git a/charts/cf-runtime/values-rootless.yaml b/charts/cf-runtime/values-rootless.yaml
@@ -24,7 +24,7 @@ runtime:
     userVolumeMounts:
       dind:
         name: dind
-        mountPath: /home/rootless/
+        mountPath: /home/rootless/.local/share/docker
     containerSecurityContext:
       privileged: true
       runAsUser: 1000