Merge pull request #154 from rancherfederal/main

Run nats as nonroot.
rancherfederal · Nov 27, 2023 · 9924a7b · 9924a7b
2 parents 1715646 + d7b0add
commit 9924a7b
Show file tree

Hide file tree

Showing 2 changed files with 14 additions and 3 deletions.
diff --git a/charts/stigatron/Chart.yaml b/charts/stigatron/Chart.yaml
@@ -2,14 +2,14 @@ apiVersion: v2
 name: stigatron
 description: Rancher Government Stigatron Extension
 icon: https://raw.githubusercontent.com/rancherfederal/carbide-docs/main/static/img/carbide-logo.svg
-version: "0.2.4"
-appVersion: "0.2.1"
+version: "0.2.5"
+appVersion: "0.2.2"
 dependencies:
   - name: heimdall2
     version: "0.1.41"
     repository: "https://rancherfederal.github.io/carbide-charts"
     alias: heimdall2
   - name: nats
-    version: "1.1.4"
+    version: "1.1.5"
     repository: https://nats-io.github.io/k8s/helm/charts/
     alias: nats
diff --git a/charts/stigatron/values.yaml b/charts/stigatron/values.yaml
@@ -58,8 +58,19 @@ nats:
     jetstream:
       enabled: true
       fileStore:
+        enabled: true
+        dir: /tmp/jetstream
         pvc:
           enabled: false
+  podTemplate:
+    configChecksumAnnotation: true
+    merge:
+      spec:
+        securityContext:
+          runAsNonRoot: true
+          fsGroup: 65534
+          runAsUser: 65534
+          runAsGroup: 65534
 global:
   cattle:
     systemDefaultRegistry: "rgcrprod.azurecr.us"