fix(webgrabplus): allow r/w on rootfs (#4906)
This commit is contained in:
@@ -1,7 +1,7 @@
|
|||||||
apiVersion: v2
|
apiVersion: v2
|
||||||
kubeVersion: ">=1.16.0-0"
|
kubeVersion: ">=1.16.0-0"
|
||||||
name: webgrabplus
|
name: webgrabplus
|
||||||
version: 4.0.1
|
version: 4.0.2
|
||||||
appVersion: "5.0.1"
|
appVersion: "5.0.1"
|
||||||
description: Webgrabplus is a multi-site incremental xmltv epg grabber.
|
description: Webgrabplus is a multi-site incremental xmltv epg grabber.
|
||||||
type: application
|
type: application
|
||||||
@@ -17,13 +17,12 @@ dependencies:
|
|||||||
- name: common
|
- name: common
|
||||||
repository: https://library-charts.truecharts.org
|
repository: https://library-charts.truecharts.org
|
||||||
version: 11.0.3
|
version: 11.0.3
|
||||||
# condition:
|
|
||||||
maintainers:
|
maintainers:
|
||||||
- email: info@truecharts.org
|
- email: info@truecharts.org
|
||||||
name: TrueCharts
|
name: TrueCharts
|
||||||
url: https://truecharts.org
|
url: https://truecharts.org
|
||||||
annotations:
|
annotations:
|
||||||
truecharts.org/catagories: |
|
truecharts.org/catagories: |
|
||||||
- incubator
|
- media
|
||||||
truecharts.org/SCALE-support: "true"
|
truecharts.org/SCALE-support: "true"
|
||||||
truecharts.org/grade: U
|
truecharts.org/grade: U
|
||||||
|
|||||||
@@ -13,16 +13,16 @@ questions:
|
|||||||
# Include{serviceList}
|
# Include{serviceList}
|
||||||
# Include{persistenceRoot}
|
# Include{persistenceRoot}
|
||||||
- variable: config
|
- variable: config
|
||||||
label: "App Config Storage"
|
label: App Config Storage
|
||||||
description: "Stores the Application Configuration."
|
description: Stores the Application Configuration.
|
||||||
schema:
|
schema:
|
||||||
additional_attrs: true
|
additional_attrs: true
|
||||||
type: dict
|
type: dict
|
||||||
attrs:
|
attrs:
|
||||||
# Include{persistenceBasic}
|
# Include{persistenceBasic}
|
||||||
- variable: data
|
- variable: data
|
||||||
label: "App Data Storage"
|
label: App Data Storage
|
||||||
description: "Stores the Application Data."
|
description: Stores the Application Data.
|
||||||
schema:
|
schema:
|
||||||
additional_attrs: true
|
additional_attrs: true
|
||||||
type: dict
|
type: dict
|
||||||
@@ -32,41 +32,41 @@ questions:
|
|||||||
# Include{security}
|
# Include{security}
|
||||||
# Include{securityContextAdvancedRoot}
|
# Include{securityContextAdvancedRoot}
|
||||||
- variable: privileged
|
- variable: privileged
|
||||||
label: "Privileged mode"
|
label: Privileged mode
|
||||||
schema:
|
schema:
|
||||||
type: boolean
|
type: boolean
|
||||||
default: false
|
default: false
|
||||||
- variable: readOnlyRootFilesystem
|
- variable: readOnlyRootFilesystem
|
||||||
label: "ReadOnly Root Filesystem"
|
label: ReadOnly Root Filesystem
|
||||||
schema:
|
schema:
|
||||||
type: boolean
|
type: boolean
|
||||||
default: true
|
default: false
|
||||||
- variable: allowPrivilegeEscalation
|
- variable: allowPrivilegeEscalation
|
||||||
label: "Allow Privilege Escalation"
|
label: Allow Privilege Escalation
|
||||||
schema:
|
schema:
|
||||||
type: boolean
|
type: boolean
|
||||||
default: false
|
default: false
|
||||||
- variable: runAsNonRoot
|
- variable: runAsNonRoot
|
||||||
label: "runAsNonRoot"
|
label: runAsNonRoot
|
||||||
schema:
|
schema:
|
||||||
type: boolean
|
type: boolean
|
||||||
default: false
|
default: false
|
||||||
# Include{podSecurityContextRoot}
|
# Include{podSecurityContextRoot}
|
||||||
- variable: runAsUser
|
- variable: runAsUser
|
||||||
label: "runAsUser"
|
label: runAsUser
|
||||||
description: "The UserID of the user running the application"
|
description: The UserID of the user running the application
|
||||||
schema:
|
schema:
|
||||||
type: int
|
type: int
|
||||||
default: 0
|
default: 0
|
||||||
- variable: runAsGroup
|
- variable: runAsGroup
|
||||||
label: "runAsGroup"
|
label: runAsGroup
|
||||||
description: "The groupID this App of the user running the application"
|
description: The groupID this App of the user running the application
|
||||||
schema:
|
schema:
|
||||||
type: int
|
type: int
|
||||||
default: 0
|
default: 0
|
||||||
- variable: fsGroup
|
- variable: fsGroup
|
||||||
label: "fsGroup"
|
label: fsGroup
|
||||||
description: "The group that should own ALL storage."
|
description: The group that should own ALL storage.
|
||||||
schema:
|
schema:
|
||||||
type: int
|
type: int
|
||||||
default: 568
|
default: 568
|
||||||
|
|||||||
@@ -5,6 +5,7 @@ image:
|
|||||||
|
|
||||||
securityContext:
|
securityContext:
|
||||||
runAsNonRoot: false
|
runAsNonRoot: false
|
||||||
|
readOnlyRootFilesystem: false
|
||||||
|
|
||||||
podSecurityContext:
|
podSecurityContext:
|
||||||
runAsUser: 0
|
runAsUser: 0
|
||||||
|
|||||||
Reference in New Issue
Block a user