renamed: k3s_config/Planka/postgres.yaml -> k3s_config/Planka/postgres_deployment.yaml

new file:   k3s_config/Planka/postgres_pvc.yaml

k3s_config/Planka/postgres_deployment.yaml

@@ -23,6 +23,8 @@ spec:
       labels:
         app: postgres
     spec:
+      securityContext:
+        fsGroup: 999
       containers:
         - name: postgres
           image: postgres:13
@@ -33,24 +35,18 @@ spec:
               value: "plankauser"
             - name: POSTGRES_PASSWORD
               value: "8148"
+            - name: PGDATA
+              value: "/var/lib/postgresql/data/pgdata"
           ports:
             - containerPort: 5432
           volumeMounts:
             - name: postgres-storage
-              mountPath: /var/lib/postgresql/data
+              mountPath: "/var/lib/postgresql/data"
+          securityContext:
+            runAsUser: 999  # Пользователь, от имени которого запускается процесс
+            runAsGroup: 999  # Группа, от имени которой запускается процесс
+            allowPrivilegeEscalation: false
       volumes:
         - name: postgres-storage
           persistentVolumeClaim:
             claimName: postgres-pvc
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: postgres-pvc
-  namespace: planka
-spec:
-  accessModes:
-    - ReadWriteOnce
-  resources:
-    requests:
-      storage: 1Gi

k3s_config/Planka/postgres_pvc.yaml

@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: postgres-pvc
+  namespace: planka
+spec:
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: 10Gi
+  storageClassName: longhorn