From f08ca032dd504a30bd8f5be03a8d92dcd34b8769 Mon Sep 17 00:00:00 2001
From: SeanOMik <seanomik@gmail.com>
Date: Thu, 1 Jun 2023 23:29:03 -0400
Subject: [PATCH] fix download ns

---
 cluster/apps/download/prowlarr/helm-release.yaml  |  8 ++++++++
 cluster/apps/download/radarr/helm-release.yaml    | 10 ++++++++--
 cluster/apps/download/readarr/audiobook-helm.yaml |  8 ++++++++
 cluster/apps/download/readarr/ebook-helm.yaml     |  8 ++++++++
 cluster/apps/download/sonarr/helm-release.yaml    | 10 ++++++++--
 5 files changed, 40 insertions(+), 4 deletions(-)

diff --git a/cluster/apps/download/prowlarr/helm-release.yaml b/cluster/apps/download/prowlarr/helm-release.yaml
index 3edb778..6a0dc41 100644
--- a/cluster/apps/download/prowlarr/helm-release.yaml
+++ b/cluster/apps/download/prowlarr/helm-release.yaml
@@ -43,9 +43,17 @@ spec:
         - name: config
           mountPath: /config
           readOnly: true
+        securityContext:
+          runAsNonRoot: true
+          runAsUser: 10000
+          runAsGroup: 10000
+          fsGroup: 10000
+          fsGroupChangePolicy: OnRootMismatch
 
     env:
       TZ: America/New_York
+      PUID: "10000"
+      PGID: "10000"
 
     service:
       main:
diff --git a/cluster/apps/download/radarr/helm-release.yaml b/cluster/apps/download/radarr/helm-release.yaml
index d1cdc36..e4e2e8e 100644
--- a/cluster/apps/download/radarr/helm-release.yaml
+++ b/cluster/apps/download/radarr/helm-release.yaml
@@ -43,11 +43,17 @@ spec:
         - name: config
           mountPath: /config
           readOnly: true
+        securityContext:
+          runAsNonRoot: true
+          runAsUser: 10000
+          runAsGroup: 10000
+          fsGroup: 10000
+          fsGroupChangePolicy: OnRootMismatch
       
     env:
       TZ: America/New_York
-      PGID: "1000"
-      PUID: "1000"
+      PGID: "10000"
+      PUID: "10000"
 
     service:
       main:
diff --git a/cluster/apps/download/readarr/audiobook-helm.yaml b/cluster/apps/download/readarr/audiobook-helm.yaml
index b7de5b8..b5c9b79 100644
--- a/cluster/apps/download/readarr/audiobook-helm.yaml
+++ b/cluster/apps/download/readarr/audiobook-helm.yaml
@@ -43,9 +43,17 @@ spec:
         - name: config
           mountPath: /config
           readOnly: true
+        securityContext:
+          runAsNonRoot: true
+          runAsUser: 10000
+          runAsGroup: 10000
+          fsGroup: 10000
+          fsGroupChangePolicy: OnRootMismatch
 
     env:
       TZ: America/New_York
+      PUID: "10000"
+      PGID: "10000"
 
     service:
       main:
diff --git a/cluster/apps/download/readarr/ebook-helm.yaml b/cluster/apps/download/readarr/ebook-helm.yaml
index 9ef32ae..99f2315 100644
--- a/cluster/apps/download/readarr/ebook-helm.yaml
+++ b/cluster/apps/download/readarr/ebook-helm.yaml
@@ -43,9 +43,17 @@ spec:
         - name: config
           mountPath: /config
           readOnly: true
+        securityContext:
+          runAsNonRoot: true
+          runAsUser: 10000
+          runAsGroup: 10000
+          fsGroup: 10000
+          fsGroupChangePolicy: OnRootMismatch
 
     env:
       TZ: America/New_York
+      PUID: "10000"
+      PGID: "10000"
 
     service:
       main:
diff --git a/cluster/apps/download/sonarr/helm-release.yaml b/cluster/apps/download/sonarr/helm-release.yaml
index 6b1c546..d8f5da4 100644
--- a/cluster/apps/download/sonarr/helm-release.yaml
+++ b/cluster/apps/download/sonarr/helm-release.yaml
@@ -43,11 +43,17 @@ spec:
         - name: config
           mountPath: /config
           readOnly: true
+        securityContext:
+          runAsNonRoot: true
+          runAsUser: 10000
+          runAsGroup: 10000
+          fsGroup: 10000
+          fsGroupChangePolicy: OnRootMismatch
 
     env:
       TZ: America/New_York
-      PGID: "1000"
-      PUID: "1000"
+      PUID: "10000"
+      PGID: "10000"
 
     service:
       main: