From 0f241ca5fb1897f0f063d78f04e2bf464bcb8600 Mon Sep 17 00:00:00 2001
From: Kingdon Barrett <kingdon@weave.works>
Date: Mon, 14 Mar 2022 15:02:35 -0400
Subject: [PATCH] add fsgroup for securityContext

Signed-off-by: Kingdon Barrett <kingdon@weave.works>
---
 config/manager/deployment.yaml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/config/manager/deployment.yaml b/config/manager/deployment.yaml
index 5fef221e9..0b9f1e39c 100644
--- a/config/manager/deployment.yaml
+++ b/config/manager/deployment.yaml
@@ -18,6 +18,10 @@ spec:
         prometheus.io/port: "8080"
     spec:
       terminationGracePeriodSeconds: 600
+      securityContext:
+        # Required for AWS IAM Role bindings
+        # https://docs.aws.amazon.com/eks/latest/userguide/iam-roles-for-service-accounts-technical-overview.html
+        fsGroup: 1337
       containers:
       - name: manager
         image: fluxcd/helm-controller