wip: Thu Nov 14 20:28:10 +03 2024

charts/cf-runtime/values-rootless.yaml

@@ -1,6 +1,7 @@
 volumeProvisioner:
   env:
     IS_ROOTLESS: true
+  # -- Only if local volumes are used as backend storage (ignored for ebs/ebs-csi disks)
   dind-lv-monitor:
     image:
       tag: 1.30.0-rootless
@@ -9,6 +10,7 @@ volumeProvisioner:
       enabled: true
       runAsUser: 1000
       fsGroup: 1000
+    # -- Enable initContainer to run chmod for /var/lib/codefresh/dind-volumes on host nodes
     volumePermissions:
       enabled: false
 
@@ -31,6 +33,8 @@ runtime:
       enabled: true
       runAsUser: 1000
       fsGroup: 1000
+      # Ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#configure-volume-permission-and-ownership-change-policy-for-pods
       fsGroupChangePolicy: "OnRootMismatch"
+    # -- Enable initContainer to run chmod for /home/rootless in DinD pod
     volumePermissions:
       enabled: false