From 3ddf7b22b1c99dc0aee1c536ecc19debca795d19 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Beatrice=20Dellac=C3=A0?= <hello@beatrice.wtf>
Date: Sat, 5 Apr 2025 23:51:35 +0200
Subject: [PATCH] update nexus deploy

---
 deploy/sonatype-nexus/nexus-deploy.yaml | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/deploy/sonatype-nexus/nexus-deploy.yaml b/deploy/sonatype-nexus/nexus-deploy.yaml
index bfba838..509ea11 100644
--- a/deploy/sonatype-nexus/nexus-deploy.yaml
+++ b/deploy/sonatype-nexus/nexus-deploy.yaml
@@ -2,8 +2,6 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: sonatype-nexus
-  labels:
-    app: sonatype-nexus
 spec:
   replicas: 1
   selector:
@@ -14,9 +12,14 @@ spec:
       labels:
         app: sonatype-nexus
     spec:
+      securityContext:
+        fsGroup: 200 # Set the fsGroup so that volume directories are writable by the Nexus process
       containers:
         - name: nexus
           image: sonatype/nexus3
+          securityContext:
+            runAsUser: 200 # Ensure the container runs as the nexus user
+            runAsGroup: 200
           ports:
             - containerPort: 8081
           volumeMounts: