Configure SecurityContext for restic-maintain-job

[cfigueiredo-hv]

I'm using velero 1.16.2 (installed with velero install) and it's not possible to configure securityContext for restic maintain jobs.
It seems that in the main branch the securityContext is being copied from the Velero server deployment. Any idea if these changes will be included in the next release? What is the date of the next release?

https://github.com/vmware-tanzu/velero/blob/5d9ea761d48189e97ab636bdb68c748f264ff3e3/pkg/repository/maintenance/maintenance.go#L604

[blackpiglet]

Could you explain why you need to customize the security context for the maintenance job?

[cfigueiredo-hv]

due to folder permissions, I need that maintenance job has the same fsGroup as velero server

[blackpiglet]

The current code copies the Container's SecurityContext from Velero Deployment, but you also need to copy the PodSecurityContext, right?

If so, please create an issue to address the request.

[cfigueiredo-hv]

No.
The current code in main is coping security context to both container and pod: That's correct!
Code in branch release-1.16 isn't do the same.

• My question is to understand when is the next release of velero?
• And if it will be released from main in order to incorporate the mentioned changes related with securityContext?

[blackpiglet]

• The next release will come out next month.
• Yes, the next release is cut from the main branch.