fix: add JWT_SECRET_KEY to migrate init container; run postgres as uid 70 to avoid NFS chown failure

helm/shorefront/templates/backend-deployment.yaml

@@ -26,6 +26,11 @@ spec:
                 secretKeyRef:
                   name: shorefront-secret
                   key: POSTGRES_PASSWORD
+            - name: JWT_SECRET_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: shorefront-secret
+                  key: JWT_SECRET_KEY
             - name: DATABASE_URL
               value: "postgresql://{{ .Values.postgres.user }}:$(POSTGRES_PASSWORD)@postgres:5432/{{ .Values.postgres.database }}"
       containers:

helm/shorefront/templates/postgres-deployment.yaml

@@ -16,6 +16,10 @@ spec:
       labels:
         app: postgres
     spec:
+      securityContext:
+        runAsUser: 70
+        runAsGroup: 70
+        fsGroup: 70
       containers:
         - name: postgres
           image: "{{ .Values.postgres.image }}:{{ .Values.postgres.tag }}"
@@ -35,6 +39,8 @@ spec:
                 secretKeyRef:
                   name: shorefront-secret
                   key: POSTGRES_PASSWORD
+            - name: PGDATA
+              value: /var/lib/postgresql/data/pgdata
           ports:
             - containerPort: 5432
           volumeMounts: