You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@beam.apache.org by vt...@apache.org on 2025/09/29 13:26:43 UTC
(beam) 01/01: Fix permission issue
This is an automated email from the ASF dual-hosted git repository.
vterentev pushed a commit to branch fix-postgres
in repository https://gitbox.apache.org/repos/asf/beam.git
commit c35515d4fb870b90a69814908e2ac0277697b53e
Author: Vitaly Terentyev <vi...@akvelon.com>
AuthorDate: Mon Sep 29 17:26:29 2025 +0400
Fix permission issue
---
.../kubernetes/postgres/postgres-service-for-local-dev.yml | 13 +++++++++++++
1 file changed, 13 insertions(+)
diff --git a/.test-infra/kubernetes/postgres/postgres-service-for-local-dev.yml b/.test-infra/kubernetes/postgres/postgres-service-for-local-dev.yml
index 7ba106a73d3..955b795f94b 100644
--- a/.test-infra/kubernetes/postgres/postgres-service-for-local-dev.yml
+++ b/.test-infra/kubernetes/postgres/postgres-service-for-local-dev.yml
@@ -43,6 +43,8 @@ spec:
labels:
name: postgres
spec:
+ securityContext:
+ fsGroup: 999
containers:
- name: postgres
image: postgres
@@ -53,3 +55,14 @@ spec:
value: /var/lib/postgresql/data/pgdata
ports:
- containerPort: 5432
+ securityContext:
+ runAsNonRoot: true
+ runAsUser: 999
+ runAsGroup: 999
+ allowPrivilegeEscalation: false
+ volumeMounts:
+ - name: pgdata
+ mountPath: /var/lib/postgresql/data
+ volumes:
+ - name: pgdata
+ emptyDir: {}