add securityContext fsGroup

src/main/helm/templates/deployment.yaml

@@ -183,9 +183,6 @@ spec:
           {{- with (.Values.securityContext).runAsGroup }}
           runAsGroup: {{ . }}
           {{- end }}
-          {{- with (.Values.securityContext).fsGroup }}
-          fsGroup: {{ . }}
-          {{- end }}
           {{- with (.Values.securityContext).capabilities }}
           capabilities:
 {{ toYaml . | indent 12 }}
@@ -240,5 +237,10 @@ spec:
 {{ toYaml . | indent 8 }}
       {{- end }}
       schedulerName: default-scheduler
+      {{- if (.Values.securityContext).fsGroup }}
+      securityContext:
+        fsGroup: {{ (.Values.securityContext).fsGroup }}
+      {{- else }}
       securityContext: {}
+      {{- end }}
       terminationGracePeriodSeconds: 30
\ No newline at end of file

src/test/helm/deployment_container_security_context_test.yaml

@@ -57,7 +57,7 @@ tests:
       - isNull:
           path: spec.template.spec.containers[0].securityContext.runAsGroup
       - isNull:
-          path: spec.template.spec.containers[0].securityContext.fsGroup
+          path: spec.template.spec.securityContext.fsGroup
       - isNull:
           path: spec.template.spec.containers[0].securityContext.capabilities
   - it: check runAsUser
@@ -79,7 +79,7 @@ tests:
       securityContext.fsGroup: 1000
     asserts:
       - equal:
-          path: spec.template.spec.containers[0].securityContext.fsGroup
+          path: spec.template.spec.securityContext.fsGroup
           value: 1000
   - it: check capabilities
     set: