diff --git a/charts/stable/guacd/Chart.yaml b/charts/stable/guacd/Chart.yaml index 5521c7fdfd0..0ca50887617 100644 --- a/charts/stable/guacd/Chart.yaml +++ b/charts/stable/guacd/Chart.yaml @@ -1,7 +1,7 @@ apiVersion: v2 kubeVersion: ">=1.16.0-0" name: guacd -version: 0.0.12 +version: 0.0.13 appVersion: "1.4.0" description: Guacd - Apache Guacamole is a clientless remote desktop gateway. type: application @@ -10,8 +10,11 @@ home: https://github.com/truecharts/apps/tree/master/charts/stable/guacd icon: https://truecharts.org/_static/img/appicons/guacd-icon.png keywords: - guacd + - guacamole + - remote sources: - - https://hub.docker.com/r/linuxserver/guacd + - https://hub.docker.com/r/guacamole/guacd + - https://github.com/apache/guacamole-server dependencies: - name: common repository: https://truecharts.org diff --git a/charts/stable/guacd/questions.yaml b/charts/stable/guacd/questions.yaml index 2b9a139fb6e..bc4f1a538e6 100644 --- a/charts/stable/guacd/questions.yaml +++ b/charts/stable/guacd/questions.yaml @@ -191,7 +191,7 @@ questions: label: "ReadOnly Root Filesystem" schema: type: boolean - default: true + default: false - variable: allowPrivilegeEscalation label: "Allow Privilege Escalation" schema: @@ -201,7 +201,7 @@ questions: label: "runAsNonRoot" schema: type: boolean - default: true + default: false - variable: podSecurityContext group: "Security and Permissions" @@ -214,13 +214,13 @@ questions: description: "The UserID of the user running the application" schema: type: int - default: 568 + default: 0 - variable: runAsGroup label: "runAsGroup" description: The groupID this App of the user running the application" schema: type: int - default: 568 + default: 0 - variable: fsGroup label: "fsGroup" description: "The group that should own ALL storage." diff --git a/charts/stable/guacd/values.yaml b/charts/stable/guacd/values.yaml index 3f059aff737..70152ccd7c4 100644 --- a/charts/stable/guacd/values.yaml +++ b/charts/stable/guacd/values.yaml @@ -3,6 +3,14 @@ image: pullPolicy: IfNotPresent tag: v1.4.0@sha256:6b67e159e4e24524bf025a419062249763967085f6111d73d9f3d9ee7b0c13ee +securityContext: + readOnlyRootFilesystem: false + runAsNonRoot: false + +podSecurityContext: + runAsUser: 0 + runAsGroup: 0 + service: main: ports: