From 7cab27ba10736e37e521601c77adad3df148e8dd Mon Sep 17 00:00:00 2001 From: Claude Date: Sun, 14 Jun 2026 09:50:34 +0000 Subject: [PATCH 1/2] fix(redis-ha): run hostpath-chown init container as root and set uid:gid ownership https://claude.ai/code/session_015PLT3F82jivLQrxjfV9Hgg --- charts/redis-ha/templates/redis-ha-statefulset.yaml | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/charts/redis-ha/templates/redis-ha-statefulset.yaml b/charts/redis-ha/templates/redis-ha-statefulset.yaml index eeb54c2..bab5ea7 100644 --- a/charts/redis-ha/templates/redis-ha-statefulset.yaml +++ b/charts/redis-ha/templates/redis-ha-statefulset.yaml @@ -129,11 +129,13 @@ spec: {{- if and .Values.hostPath.path .Values.hostPath.chown }} - name: hostpath-chown image: {{ .Values.image.repository }}:{{ .Values.image.tag }} - securityContext: {{- include "compatibility.renderSecurityContext" (dict "secContext" .Values.containerSecurityContext "context" $) | nindent 10 }} + securityContext: + runAsUser: 0 + runAsNonRoot: false resources: {{ toYaml .Values.init.resources | nindent 10 }} command: - chown - - "{{ .Values.containerSecurityContext.runAsUser }}" + - "{{ .Values.containerSecurityContext.runAsUser }}:{{ .Values.securityContext.fsGroup }}" - /data volumeMounts: - name: data From 83d381602f7f526d51a61307493062de44aba674 Mon Sep 17 00:00:00 2001 From: Aaron Layfield Date: Sun, 14 Jun 2026 22:38:41 +0900 Subject: [PATCH 2/2] Upgrade Chart.yaml Signed-off-by: Aaron Layfield --- charts/redis-ha/Chart.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/charts/redis-ha/Chart.yaml b/charts/redis-ha/Chart.yaml index 8d505e2..25cb88b 100644 --- a/charts/redis-ha/Chart.yaml +++ b/charts/redis-ha/Chart.yaml @@ -5,7 +5,7 @@ keywords: - redis - keyvalue - database -version: 4.36.1 +version: 4.36.2 appVersion: 8.2.4 description: This Helm chart provides a highly available Redis implementation with a master/slave configuration and uses Sentinel sidecars for failover management icon: https://img.icons8.com/external-tal-revivo-shadow-tal-revivo/24/external-redis-an-in-memory-data-structure-project-implementing-a-distributed-logo-shadow-tal-revivo.png