fixed owncloud chart permission

owncloud/templates/deployment.yaml

@@ -20,22 +20,10 @@ spec:
       {{- end }}
       securityContext:
         {{- toYaml .Values.podSecurityContext | nindent 8 }}
-      {{- if .Values.initContainers.permissions.enabled }}
-      initContainers:
-        - name: permissions-init
-          image: "{{ .Values.initContainers.permissions.image }}:{{ .Values.initContainers.permissions.tag }}"
-          command: {{ .Values.initContainers.permissions.command | toYaml | nindent 12 }}
-          securityContext:
-            runAsUser: 0
-            runAsGroup: 0
-          volumeMounts:
-            - name: config
-              mountPath: /var/www/owncloud/config
-            - name: files
-              mountPath: /var/www/owncloud/data
-      {{- end }}
       containers:
         - name: {{ .Chart.Name }}
+          securityContext:
+            {{- toYaml .Values.containerSecurityContext | nindent 12 }}
           image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}"
           imagePullPolicy: {{ .Values.image.pullPolicy }}
           env:

owncloud/values.yaml

@@ -11,28 +11,13 @@ image:
 
 # Security context for the container
 podSecurityContext:
-  runAsUser: 33
-  runAsGroup: 33
   fsGroup: 33
 
-# Init container for setting up permissions
-initContainers:
-  permissions:
-    enabled: true
-    image: busybox
-    tag: latest
-    command:
-      - sh
-      - -c
-      - |
-        # Create directories if they don't exist
-        mkdir -p /var/www/owncloud/config /var/www/owncloud/data
-        # Set permissions but preserve mount points
-        find /var/www/owncloud/config -exec chown 33:33 {} \;
-        find /var/www/owncloud/data -exec chown 33:33 {} \;
-        # Ensure base directories have correct permissions
-        chown 33:33 /var/www/owncloud/config
-        chown 33:33 /var/www/owncloud/data
+containerSecurityContext:
+  runAsUser: 33
+  runAsGroup: 33
+  allowPrivilegeEscalation: false
+
 
 # Database configuration
 database: