fix(webgrabplus): allow r/w on rootfs (#4906)

This commit is contained in:
Stavros Kois
2022-11-28 00:06:35 +02:00
committed by GitHub
parent a50729f4f8
commit 17e7bd842d
3 changed files with 18 additions and 18 deletions
+2 -3
View File
@@ -1,7 +1,7 @@
apiVersion: v2 apiVersion: v2
kubeVersion: ">=1.16.0-0" kubeVersion: ">=1.16.0-0"
name: webgrabplus name: webgrabplus
version: 4.0.1 version: 4.0.2
appVersion: "5.0.1" appVersion: "5.0.1"
description: Webgrabplus is a multi-site incremental xmltv epg grabber. description: Webgrabplus is a multi-site incremental xmltv epg grabber.
type: application type: application
@@ -17,13 +17,12 @@ dependencies:
- name: common - name: common
repository: https://library-charts.truecharts.org repository: https://library-charts.truecharts.org
version: 11.0.3 version: 11.0.3
# condition:
maintainers: maintainers:
- email: info@truecharts.org - email: info@truecharts.org
name: TrueCharts name: TrueCharts
url: https://truecharts.org url: https://truecharts.org
annotations: annotations:
truecharts.org/catagories: | truecharts.org/catagories: |
- incubator - media
truecharts.org/SCALE-support: "true" truecharts.org/SCALE-support: "true"
truecharts.org/grade: U truecharts.org/grade: U
+15 -15
View File
@@ -13,16 +13,16 @@ questions:
# Include{serviceList} # Include{serviceList}
# Include{persistenceRoot} # Include{persistenceRoot}
- variable: config - variable: config
label: "App Config Storage" label: App Config Storage
description: "Stores the Application Configuration." description: Stores the Application Configuration.
schema: schema:
additional_attrs: true additional_attrs: true
type: dict type: dict
attrs: attrs:
# Include{persistenceBasic} # Include{persistenceBasic}
- variable: data - variable: data
label: "App Data Storage" label: App Data Storage
description: "Stores the Application Data." description: Stores the Application Data.
schema: schema:
additional_attrs: true additional_attrs: true
type: dict type: dict
@@ -32,41 +32,41 @@ questions:
# Include{security} # Include{security}
# Include{securityContextAdvancedRoot} # Include{securityContextAdvancedRoot}
- variable: privileged - variable: privileged
label: "Privileged mode" label: Privileged mode
schema: schema:
type: boolean type: boolean
default: false default: false
- variable: readOnlyRootFilesystem - variable: readOnlyRootFilesystem
label: "ReadOnly Root Filesystem" label: ReadOnly Root Filesystem
schema: schema:
type: boolean type: boolean
default: true default: false
- variable: allowPrivilegeEscalation - variable: allowPrivilegeEscalation
label: "Allow Privilege Escalation" label: Allow Privilege Escalation
schema: schema:
type: boolean type: boolean
default: false default: false
- variable: runAsNonRoot - variable: runAsNonRoot
label: "runAsNonRoot" label: runAsNonRoot
schema: schema:
type: boolean type: boolean
default: false default: false
# Include{podSecurityContextRoot} # Include{podSecurityContextRoot}
- variable: runAsUser - variable: runAsUser
label: "runAsUser" label: runAsUser
description: "The UserID of the user running the application" description: The UserID of the user running the application
schema: schema:
type: int type: int
default: 0 default: 0
- variable: runAsGroup - variable: runAsGroup
label: "runAsGroup" label: runAsGroup
description: "The groupID this App of the user running the application" description: The groupID this App of the user running the application
schema: schema:
type: int type: int
default: 0 default: 0
- variable: fsGroup - variable: fsGroup
label: "fsGroup" label: fsGroup
description: "The group that should own ALL storage." description: The group that should own ALL storage.
schema: schema:
type: int type: int
default: 568 default: 568
+1
View File
@@ -5,6 +5,7 @@ image:
securityContext: securityContext:
runAsNonRoot: false runAsNonRoot: false
readOnlyRootFilesystem: false
podSecurityContext: podSecurityContext:
runAsUser: 0 runAsUser: 0