From d65e7a294c38d3365486c0f4d0f860894cd375ca Mon Sep 17 00:00:00 2001
From: Alan Christie <alan.christie@matildapeak.com>
Date: Thu, 20 Feb 2025 15:23:30 +0000
Subject: [PATCH] fix: StatefulSet Tweak

---
 roles/graph/templates/statefulset.yaml.j2 | 15 +++++----------
 1 file changed, 5 insertions(+), 10 deletions(-)

diff --git a/roles/graph/templates/statefulset.yaml.j2 b/roles/graph/templates/statefulset.yaml.j2
index 42c9e16..65f26ce 100644
--- a/roles/graph/templates/statefulset.yaml.j2
+++ b/roles/graph/templates/statefulset.yaml.j2
@@ -18,6 +18,11 @@ spec:
     spec:
       serviceAccountName: {{ graph_sa }}
 
+      securityContext:
+        runAsUser: 7474
+        runAsGroup: 7474
+        fsGroup: 7474
+
 {% if graph_node_affinity_value %}
       # We must have a 'core' node
       affinity:
@@ -92,11 +97,6 @@ spec:
           requests:
             cpu: 1000m
             memory: 1Gi
-        securityContext:
-          runAsUser: 7474
-          runAsGroup: 7474
-          fsGroup: 7474
-          allowPrivilegeEscalation: false
         volumeMounts:
         - mountPath: /data
           name: graph-volume
@@ -173,11 +173,6 @@ spec:
           requests:
             cpu: "{{ graph_core_request }}"
             memory: "{{ graph_mem_request_g }}Gi"
-        securityContext:
-          runAsUser: 7474
-          runAsGroup: 7474
-          fsGroup: 7474
-          allowPrivilegeEscalation: false
         volumeMounts:
         - mountPath: /data
           name: graph-volume