bump volume provisioner (#322)

Author: roi-codefresh

.deploy/cf-runtime/Chart.yaml

@@ -2,5 +2,5 @@ apiVersion: v2
 name: cf-runtime
 description: A Helm chart for Codefresh Runner
 type: application
-version: 1.9.3
-appVersion: "1.9.3"
+version: 1.9.4
+appVersion: "1.9.4"

.deploy/cf-runtime/templates/volume-provisioner/deployment.dind-volume-provisioner.vp.yaml

@@ -25,7 +25,13 @@ spec:
       tolerations:
       {{- if .Values.volumeProvisioner.tolerations }}
 {{ toYaml .Values.volumeProvisioner.tolerations | indent 8 }}
-      {{- end }}      
+      {{- end }}
+      {{- if .Values.volumeProvisioner.securityContext.enabled }}
+      securityContext:
+        runAsUser: 3000
+        runAsGroup: 3000
+        fsGroup: 3000
+      {{- end }}
       containers:
         - name: dind-volume-provisioner
           {{- if .Values.volumeProvisioner.resources }}

.deploy/cf-runtime/values.yaml

@@ -62,6 +62,9 @@ volumeProvisioner: # Volume-Provisioner Deployment
   nodeSelector: {}
   resources: {}
   tolerations: []
+  # Running as non root user is supported since version 1.32.0
+  securityContext:
+    enabled: true
   env: {}
   ## e.g:
   # env:

venona/VERSION

@@ -1 +1 @@
-1.9.2
+1.9.4

venonactl/VERSION

@@ -1 +1 @@
-1.9.2
+1.9.4

venonactl/pkg/store/store.go

@@ -174,7 +174,7 @@ func (s *Values) BuildValues() map[string]interface{} {
 			"AwsAccessKeyId":       "",
 			"AwsSecretAccessKey":   "",
 			"VolumeProvisioner": map[string]interface{}{
-				"Image":          "codefresh/dind-volume-provisioner:1.31.9",
+				"Image":          "codefresh/dind-volume-provisioner:1.32.0",
 				"NodeSelector":   s.KubernetesAPI.NodeSelector,
 				"Resources":      s.VolumeProvisioner.Resources,
 				"MountAzureJson": false,

venonactl/pkg/templates/kubernetes/deployment.dind-volume-provisioner.vp.yaml

@@ -22,6 +22,10 @@ spec:
 {{ .Storage.VolumeProvisioner.NodeSelector | nodeSelectorParamToYaml | indent 8 | unescape}}
       {{ end }}
       serviceAccount: volume-provisioner-{{ .AppName }}
+      securityContext:
+        runAsUser: 3000
+        runAsGroup: 3000
+        fsGroup: 3000
       tolerations:
         - effect: NoSchedule
           key: node-role.kubernetes.io/master