fix: StatefulSet Tweak

InformaticsMatters · Feb 20, 2025 · d65e7a2 · d65e7a2
1 parent afd9b4c
commit d65e7a2
Showing 1 changed file with 5 additions and 10 deletions.
diff --git a/roles/graph/templates/statefulset.yaml.j2 b/roles/graph/templates/statefulset.yaml.j2
@@ -18,6 +18,11 @@ spec:
     spec:
       serviceAccountName: {{ graph_sa }}
 
+      securityContext:
+        runAsUser: 7474
+        runAsGroup: 7474
+        fsGroup: 7474
+
 {% if graph_node_affinity_value %}
       # We must have a 'core' node
       affinity:
@@ -92,11 +97,6 @@ spec:
           requests:
             cpu: 1000m
             memory: 1Gi
-        securityContext:
-          runAsUser: 7474
-          runAsGroup: 7474
-          fsGroup: 7474
-          allowPrivilegeEscalation: false
         volumeMounts:
         - mountPath: /data
           name: graph-volume
@@ -173,11 +173,6 @@ spec:
           requests:
             cpu: "{{ graph_core_request }}"
             memory: "{{ graph_mem_request_g }}Gi"
-        securityContext:
-          runAsUser: 7474
-          runAsGroup: 7474
-          fsGroup: 7474
-          allowPrivilegeEscalation: false
         volumeMounts:
         - mountPath: /data
           name: graph-volume