From e35e82b9a4643b5d11dd9a8202559c1a6593abba Mon Sep 17 00:00:00 2001
From: TasdidurRahman <tasdid@appscode.com>
Date: Wed, 4 Sep 2024 15:50:34 +0600
Subject: [PATCH] fix db-gate chart

Signed-off-by: TasdidurRahman <tasdid@appscode.com>
---
 charts/dbgate/templates/deployment.yaml | 4 ++++
 charts/dbgate/values.yaml               | 6 ++++--
 2 files changed, 8 insertions(+), 2 deletions(-)

diff --git a/charts/dbgate/templates/deployment.yaml b/charts/dbgate/templates/deployment.yaml
index f8aed483..24708b71 100644
--- a/charts/dbgate/templates/deployment.yaml
+++ b/charts/dbgate/templates/deployment.yaml
@@ -108,6 +108,10 @@ spec:
             - name: PASSWORD_MODE_PRIMARY
               value: askPassword
           {{- end }}
+          {{- if .Values.app.tls.enabled }}
+            - name: USE_SSL_PRIMARY
+              value: "1"
+          {{- end }}
           ports:
             - name: http
               containerPort: 3000
diff --git a/charts/dbgate/values.yaml b/charts/dbgate/values.yaml
index b91d5589..04b6c667 100644
--- a/charts/dbgate/values.yaml
+++ b/charts/dbgate/values.yaml
@@ -133,6 +133,8 @@ app:
     namespace: ""
   authSecret:
     name: ""
+  tls:
+    enabled: false
 bind:
   name: ""
   namespace: ""
@@ -148,9 +150,9 @@ authzproxy:
     allowPrivilegeEscalation: false
     capabilities:
       drop: ["ALL"]
-    readOnlyRootFilesystem: true
+    readOnlyRootFilesystem: false
     runAsNonRoot: true
-    runAsUser: 65534
+    runAsUser: 1000
     seccompProfile:
       type: RuntimeDefault
   # Compute Resources required by this container