Merge branch 'update-mattermost-tag-9.10.1-bb.2' into 'master'

SKIP UPGRADE CHECK mattermost update to 9.10.1-bb.2

Closes big-bang/product/packages/mattermost#155

See merge request !4912

chart/templates/mattermost/secret-database.yaml

@@ -14,6 +14,8 @@ metadata:
 stringData:
   DB_CONNECTION_CHECK_URL: "postgres://{{ .username }}:{{ .password }}@{{ .host }}:{{ .port }}/{{ .database }}?connect_timeout=10&sslmode={{ .ssl_mode | default "disable" }}"
   DB_CONNECTION_STRING: "postgres://{{ .username }}:{{ .password }}@{{ .host }}:{{ .port }}/{{ .database }}?connect_timeout=10&sslmode={{ .ssl_mode | default "disable" }}"
+  username: "{{ .username }}"
+  password: "{{ .password }}"
 {{- end }}
 {{- end }}
 {{- end }}
\ No newline at end of file

chart/templates/mattermost/values.yaml

@@ -88,16 +88,42 @@ enterprise:
 {{- if and .username .password .host .port .database }}
 database:
   secret: "mattermost-database-secret"
+postgresql:
+  secret: "mattermost-database-secret"
 {{- else }}
 postgresql:
   image:
     pullSecrets:
       - private-registry
+  {{- if and .username .password .host .port .database }}
+  secret: "mattermost-database-secret"
+  {{- else }}
+  secret: "mattermost-dbcreds"
+  {{- end }}
   install: true
   {{- if $istioInjection }}
   primary:
     podAnnotations:
       {{ include "istioAnnotation" $ }}
+    podSecurityContext:
+      enabled: true
+      fsGroup: 1001
+      runAsUser: 1001
+      runAsGroup: 1001
+    containerSecurityContext:
+      enabled: true
+      runAsUser: 1001
+      runAsGroup: 1001
+      runAsNonRoot: true
+      capabilities:
+        drop:
+          - ALL
+    #permissions for initContainers
+    volumePermissions:
+      securityContext:
+        capabilities:
+          drop:
+            - ALL
   readReplicas:
     podAnnotations:
       {{ include "istioAnnotation" $ }}

chart/values.yaml

@@ -1648,11 +1648,11 @@ addons:
     git:
       repo: https://repo1.dso.mil/big-bang/product/packages/mattermost.git
       path: "./chart"
-      tag: "9.10.1-bb.1"
+      tag: "9.10.1-bb.2"
     helmRepo:
       repoName: "registry1"
       chartName: "mattermost"
-      tag: "9.10.1-bb.1"
+      tag: "9.10.1-bb.2"
 
     # -- Flux reconciliation overrides specifically for the Mattermost Package
     flux: {}