From 08be42645878fb34b8126450a067ac8585051c64 Mon Sep 17 00:00:00 2001
From: Stefan Lobbenmeier <stefan.lobbenmeier@objego.de>
Date: Sun, 9 Jun 2024 00:22:14 +0200
Subject: [PATCH] Fix tempo permissions after update to v1.9.0

Signed-off-by: Stefan Lobbenmeier <stefan.lobbenmeier@objego.de>
---
 charts/tempo/Chart.yaml  |  2 +-
 charts/tempo/README.md   |  4 ++--
 charts/tempo/values.yaml | 10 +++++-----
 3 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/charts/tempo/Chart.yaml b/charts/tempo/Chart.yaml
index 55feb9b940..352a07e83e 100644
--- a/charts/tempo/Chart.yaml
+++ b/charts/tempo/Chart.yaml
@@ -2,7 +2,7 @@ apiVersion: v2
 name: tempo
 description: Grafana Tempo Single Binary Mode
 type: application
-version: 1.10.2
+version: 1.10.3
 appVersion: 2.5.0
 engine: gotpl
 home: https://grafana.net
diff --git a/charts/tempo/README.md b/charts/tempo/README.md
index 71e82844f5..e34b011ff1 100644
--- a/charts/tempo/README.md
+++ b/charts/tempo/README.md
@@ -1,6 +1,6 @@
 # tempo
 
-![Version: 1.10.2](https://img.shields.io/badge/Version-1.10.2-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 2.5.0](https://img.shields.io/badge/AppVersion-2.5.0-informational?style=flat-square)
+![Version: 1.10.3](https://img.shields.io/badge/Version-1.10.3-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 2.5.0](https://img.shields.io/badge/AppVersion-2.5.0-informational?style=flat-square)
 
 Grafana Tempo Single Binary Mode
 
@@ -36,7 +36,7 @@ Grafana Tempo Single Binary Mode
 | podLabels | object | `{}` | Pod (extra) Labels |
 | priorityClassName | string | `nil` | The name of the PriorityClass |
 | replicas | int | `1` | Define the amount of instances |
-| securityContext | object | `{}` | securityContext for container |
+| securityContext | object | `{"fsGroup":10001,"runAsGroup":10001,"runAsNonRoot":true,"runAsUser":10001}` | securityContext for container |
 | service.annotations | object | `{}` |  |
 | service.labels | object | `{}` |  |
 | service.targetPort | string | `""` |  |
diff --git a/charts/tempo/values.yaml b/charts/tempo/values.yaml
index d268bad3d5..91bebb1685 100644
--- a/charts/tempo/values.yaml
+++ b/charts/tempo/values.yaml
@@ -235,11 +235,11 @@ tempoQuery:
     # readOnlyRootFilesystem: false # fails if true, do not enable
 
 # -- securityContext for container
-securityContext: {}
-  # runAsUser: 65532
-  # runAsGroup: 65532
-  # fsGroup: 65532
-  # runAsNonRoot: true
+securityContext:
+  runAsUser: 10001
+  runAsGroup: 10001
+  fsGroup: 10001
+  runAsNonRoot: true
 
 serviceAccount:
   # -- Specifies whether a ServiceAccount should be created