Justin L.

So it definitely works, but the docs could be out-of-sync or unclear

Could you follow the Helm instructions as is and let me know how those go? We're using Helm and we've deployed using RDS, a standalone Postgres Operator, and using the built-in SQLite (via PVC)

I am much more familiar with the pure Helm deployment, so I'd have to defer to someone else.

Are you using Helm or Kustomize?

The branch already has a few validators specifically for the persistence values, so adding a few more for security context shouldn't be too much of an issue IMO

Oh I like that idea a lot! If no security contexts are set, and/or for some reason the user allows root user, then there shouldn't be any issues generally speaking; however, I totally understand if someone does set some security settings that don't allow the Phoenix container to start due to the SQLite DB not being able to create the .phoneix DB at the mountpoint.

I just updated the PR branch. Let me know if you don't like the validators or new comments regarding workingDir!

Oh, as in similar to the _helper.tpl validators I added?

A strict securityContext would cause errors in Phoenix, since it can't write to directories it doesn't own as nonroot.