var: volumePermissions.runAsNonRoot volumePermissions.runAsUser

Um values-openshift.yaml (#11 - closed) erstellen zu können müssten folgende festen Werte parametrisierbar sein

$ git diff
diff --git a/templates/deployment.yaml b/templates/deployment.yaml
old mode 100644
new mode 100755
index a36352d..3074519
--- a/templates/deployment.yaml
+++ b/templates/deployment.yaml
@@ -68,8 +68,8 @@ spec:
           resources:
             {{- toYaml .Values.volumePermissions.resources | nindent 12 }}
           securityContext:
-            runAsNonRoot: false
-            runAsUser: 0
+            runAsNonRoot: {{ $.Values.volumePermissions.runAsNonRoot }}
+            runAsUser: {{ $.Values.volumePermissions.runAsUser }}
           volumeMounts:
             - name: media
               mountPath: /synapse/data
diff --git a/templates/worker-deployment.yaml b/templates/worker-deployment.yaml
old mode 100644
new mode 100755
index cfdd0d4..e2bbc05
--- a/templates/worker-deployment.yaml
+++ b/templates/worker-deployment.yaml
@@ -57,8 +57,8 @@ spec:
           image: "{{ $.Values.volumePermissions.image.repository }}:{{ $.Values.volumePermissions.image.tag }}"
           imagePullPolicy: {{ $.Values.volumePermissions.image.pullPolicy }}
           securityContext:
-            runAsNonRoot: false
-            runAsUser: 0
+            runAsNonRoot: {{ $.Values.volumePermissions.runAsNonRoot }}
+            runAsUser: {{ $.Values.volumePermissions.runAsUser }}
           resources: {{ $.Values.volumePermissions.resources | toYaml | nindent 12 }}
           volumeMounts:
             - name: media
diff --git a/values.yaml b/values.yaml
   # -- (string) Tag zum überschreiben, standardmäßig wird die Anwendungsversion (Chart.yaml) verwendet
   # @default -- wird im Chart.yaml gesetzt
@@ -915,6 +917,8 @@ volumePermissions:
   # -- (int) Nutzer-ID
   # Notwendig für policy 'require-uid-greater-2000'
   gid: 2666
+  runAsNonRoot: false
+  runAsUser: 0

   image:
     # -- (string) das Repository für das zu nutzende Image zur Rechtebereinigung
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information