Update filesystem permissions in PostgreSQL app (#2760)

* Update filesystem permissions in postgresql app * Run gofmt on the file --------- Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
kanisterio · Mar 18, 2024 · 530d05b · 530d05b
1 parent e288993
commit 530d05b
Showing 1 changed file with 11 additions and 9 deletions.
diff --git a/pkg/app/postgresql.go b/pkg/app/postgresql.go
@@ -50,15 +50,17 @@ func NewPostgresDB(name string, subPath string) App {
 			RepoURL:  helm.BitnamiRepoURL,
 			Chart:    "postgresql",
 			Values: map[string]string{
-				"image.pullPolicy":                                     "Always",
-				"auth.postgresPassword":                                "test@54321",
-				"volumePermissions.enabled":                            "true",
-				"persistence.subPath":                                  subPath,
-				"primary.networkPolicy.enabled":                        "false",
-				"primary.containerSecurityContext.seccompProfile.type": "Unconfined",
-				"primary.containerSecurityContext.capabilities.add[0]": "CHOWN",
-				"primary.containerSecurityContext.capabilities.add[1]": "FOWNER",
-				"primary.containerSecurityContext.capabilities.add[2]": "DAC_OVERRIDE",
+				"image.pullPolicy":      "Always",
+				"auth.postgresPassword": "test@54321",
+				"persistence.subPath":   subPath,
+				// The following values are customized to allow snapshot/restore operations.
+				"volumePermissions.enabled":                               "true",
+				"primary.networkPolicy.enabled":                           "false",
+				"primary.containerSecurityContext.seccompProfile.type":    "Unconfined",
+				"primary.containerSecurityContext.capabilities.add[0]":    "CHOWN",
+				"primary.containerSecurityContext.capabilities.add[1]":    "FOWNER",
+				"primary.containerSecurityContext.capabilities.add[2]":    "DAC_OVERRIDE",
+				"primary.containerSecurityContext.readOnlyRootFilesystem": "false",
 			},
 		},
 	}