[stable/rabbitmq-ha] Added volume permissions (#21344)

* Changing init container to run as root to ensure permissions are intact for rabbit container

Signed-off-by: skirsch <skirsch@cardlytics.com>

* Bumping version

Signed-off-by: skirsch <skirsch@cardlytics.com>

* Moved to only touch the piece the init container is affecting (cookie)

Signed-off-by: skirsch <skirsch@cardlytics.com>

* fixing to fsGroup and checking for non-null/empty values first

Signed-off-by: skirsch <skirsch@cardlytics.com>

* Adding recursive to /var/lib/rabbitmq

Signed-off-by: skirsch <skirsch@cardlytics.com>

* version bump

Signed-off-by: skirsch <skirsch@cardlytics.com>

Co-authored-by: skirsch <skirsch@cardlytics.com>

stable/rabbitmq-ha/Chart.yaml

@@ -1,7 +1,7 @@
 name: rabbitmq-ha
 apiVersion: v1
 appVersion: 3.8.0
-version: 1.42.0
+version: 1.43.0
 description: Highly available RabbitMQ cluster, the open source message broker
   software that implements the Advanced Message Queuing Protocol (AMQP).
 keywords:

stable/rabbitmq-ha/templates/statefulset.yaml

@@ -69,6 +69,11 @@ spec:
         - name: bootstrap
           image: {{ .Values.busyboxImage.repository}}:{{ .Values.busyboxImage.tag}}
           imagePullPolicy: {{ .Values.busyboxImage.pullPolicy }}
+          securityContext:
+            fsGroup: 0
+            runAsGroup: 0
+            runAsNonRoot: false
+            runAsUser: 0
           command: ['sh']
           args:
           - "-c"
@@ -81,6 +86,10 @@ spec:
               touch "${RABBITMQ_MNESIA_DIR}/force_load"
             fi
             {{- end }}
+            {{- if and (.Values.securityContext.runAsUser) (.Values.securityContext.fsGroup) }}
+            chown -R {{ .Values.securityContext.runAsUser }}:{{ .Values.securityContext.fsGroup }} /var/lib/rabbitmq/
+            chown -R {{ .Values.securityContext.runAsUser }}:{{ .Values.securityContext.fsGroup }} /etc/rabbitmq
+            {{- end }}
           env:
           - name: POD_NAME
             valueFrom: