charts: magout: support migrationJob

ushitora-anqou · Jan 18, 2025 · b52bd6e · b52bd6e
1 parent 7223a9e
commit b52bd6e
Show file tree

Hide file tree

Showing 2 changed files with 21 additions and 0 deletions.
diff --git a/charts/magout/templates/mastodonserver.yaml b/charts/magout/templates/mastodonserver.yaml
@@ -102,3 +102,12 @@ spec:
     securityContext:
       {{- toYaml . | nindent 6 }}
     {{- end }}
+  migrationJob:
+    {{- with .Values.mastodonServer.migrationJob.podSecurityContext }}
+    podSecurityContext:
+      {{- toYaml . | nindent 6 }}
+    {{- end }}
+    {{- with .Values.mastodonServer.migrationJob.securityContext }}
+    securityContext:
+      {{- toYaml . | nindent 6 }}
+    {{- end }}
diff --git a/charts/magout/values.yaml b/charts/magout/values.yaml
@@ -68,6 +68,18 @@ mastodonServer:
       capabilities:
         drop:
           - ALL
+  migrationJob:
+    podSecurityContext:
+      runAsNonRoot: true
+      runAsUser: 991
+      runAsGroup: 991
+      seccompProfile:
+        type: RuntimeDefault
+    securityContext:
+      allowPrivilegeEscalation: false
+      capabilities:
+        drop:
+          - ALL
 
 serviceAccount:
   # Specifies whether a service account should be created