diff --git a/helm/shorefront/templates/backend-deployment.yaml b/helm/shorefront/templates/backend-deployment.yaml index c36772a..455e8e0 100644 --- a/helm/shorefront/templates/backend-deployment.yaml +++ b/helm/shorefront/templates/backend-deployment.yaml @@ -26,6 +26,11 @@ spec: secretKeyRef: name: shorefront-secret key: POSTGRES_PASSWORD + - name: JWT_SECRET_KEY + valueFrom: + secretKeyRef: + name: shorefront-secret + key: JWT_SECRET_KEY - name: DATABASE_URL value: "postgresql://{{ .Values.postgres.user }}:$(POSTGRES_PASSWORD)@postgres:5432/{{ .Values.postgres.database }}" containers: diff --git a/helm/shorefront/templates/postgres-deployment.yaml b/helm/shorefront/templates/postgres-deployment.yaml index 86defea..6bd21cd 100644 --- a/helm/shorefront/templates/postgres-deployment.yaml +++ b/helm/shorefront/templates/postgres-deployment.yaml @@ -16,6 +16,10 @@ spec: labels: app: postgres spec: + securityContext: + runAsUser: 70 + runAsGroup: 70 + fsGroup: 70 containers: - name: postgres image: "{{ .Values.postgres.image }}:{{ .Values.postgres.tag }}" @@ -35,6 +39,8 @@ spec: secretKeyRef: name: shorefront-secret key: POSTGRES_PASSWORD + - name: PGDATA + value: /var/lib/postgresql/data/pgdata ports: - containerPort: 5432 volumeMounts: