Set user and group in security context (#1083)

* Set user and group in security context

manifests/complete-postgres-manifest.yaml

@@ -68,6 +68,8 @@ spec:
 #          name: my-config-map
 
   enableShmVolume: true
+#  spiloRunAsUser: 101
+#  spiloRunAsGroup: 103
 #  spiloFSGroup: 103
 #  podAnnotations:
 #    annotation.key: value

manifests/configmap.yaml

@@ -99,6 +99,8 @@ data:
   secret_name_template: "{username}.{cluster}.credentials"
   # sidecar_docker_images: ""
   # set_memory_request_to_limit: "false"
+  # spilo_runasuser: 101
+  # spilo_runasgroup: 103
   # spilo_fsgroup: 103
   spilo_privileged: "false"
   # storage_resize_mode: "off"

manifests/operatorconfiguration.crd.yaml

@@ -196,6 +196,10 @@ spec:
                   type: string
                 secret_name_template:
                   type: string
+                spilo_runasuser:
+                  type: integer
+                spilo_runasgroup:
+                  type: integer
                 spilo_fsgroup:
                   type: integer
                 spilo_privileged:

manifests/postgresql-operator-default-configuration.yaml

@@ -68,6 +68,8 @@ configuration:
     # pod_service_account_role_binding_definition: ""
     pod_terminate_grace_period: 5m
     secret_name_template: "{username}.{cluster}.credentials.{tprkind}.{tprgroup}"
+    # spilo_runasuser: 101
+    # spilo_runasgroup: 103
     # spilo_fsgroup: 103
     spilo_privileged: false
     storage_resize_mode: ebs

manifests/postgresql.crd.yaml

@@ -370,6 +370,10 @@ spec:
               items:
                 type: object
                 additionalProperties: true
+            spiloRunAsUser:
+              type: integer
+            spiloRunAsGroup:
+              type: integer
             spiloFSGroup:
               type: integer
             standby: