From 8fe14d1368b947d0bcfe33bdd3b613edb2810737 Mon Sep 17 00:00:00 2001
From: Dennis Witt <94747795+wittdennis@users.noreply.github.com>
Date: Thu, 16 Oct 2025 21:24:41 +0200
Subject: [PATCH] fix(helm): set securitycontext for idx move initcontainer if
 enabled (#7331)

---
 k8s/charts/seaweedfs/templates/volume/volume-statefulset.yaml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/k8s/charts/seaweedfs/templates/volume/volume-statefulset.yaml b/k8s/charts/seaweedfs/templates/volume/volume-statefulset.yaml
index 197401608..29a035a2b 100644
--- a/k8s/charts/seaweedfs/templates/volume/volume-statefulset.yaml
+++ b/k8s/charts/seaweedfs/templates/volume/volume-statefulset.yaml
@@ -88,6 +88,9 @@ spec:
             - name: {{ $dir.name }}
               mountPath: /{{ $dir.name }}
           {{- end }}
+          {{- if $volume.containerSecurityContext.enabled }}
+          securityContext: {{- omit $volume.containerSecurityContext "enabled" | toYaml | nindent 12 }}
+          {{- end }}
         {{- end }}
         {{- if $volume.initContainers }}
         {{ tpl (printf "{{ $volumeName := \"%s\" }}%s" $volumeName $volume.initContainers) $ | indent 8 | trim }}