feat(watchyourlan): Run as root (#4415)

* feat(watchyourlan): Run as root

* rorootfs: false

* more fixes
This commit is contained in:
StevenMcElligott
2022-11-14 09:05:06 +02:00
committed by GitHub
parent 6ac1219e30
commit 24d8c730b1
3 changed files with 13 additions and 5 deletions
+1 -1
View File
@@ -19,7 +19,7 @@ name: watchyourlan
sources: sources:
- https://github.com/truecharts/charts/tree/master/charts/incubator/watchyourlan - https://github.com/truecharts/charts/tree/master/charts/incubator/watchyourlan
- https://github.com/aceberg/WatchYourLAN - https://github.com/aceberg/WatchYourLAN
version: 1.0.4 version: 2.0.0
annotations: annotations:
truecharts.org/catagories: | truecharts.org/catagories: |
- network - network
+4 -4
View File
@@ -114,7 +114,7 @@ questions:
label: ReadOnly Root Filesystem label: ReadOnly Root Filesystem
schema: schema:
type: boolean type: boolean
default: true default: false
- variable: allowPrivilegeEscalation - variable: allowPrivilegeEscalation
label: Allow Privilege Escalation label: Allow Privilege Escalation
schema: schema:
@@ -124,20 +124,20 @@ questions:
label: runAsNonRoot label: runAsNonRoot
schema: schema:
type: boolean type: boolean
default: true default: false
# Include{podSecurityContextRoot} # Include{podSecurityContextRoot}
- variable: runAsUser - variable: runAsUser
label: runAsUser label: runAsUser
description: The UserID of the user running the application description: The UserID of the user running the application
schema: schema:
type: int type: int
default: 568 default: 0
- variable: runAsGroup - variable: runAsGroup
label: runAsGroup label: runAsGroup
description: The groupID this App of the user running the application description: The groupID this App of the user running the application
schema: schema:
type: int type: int
default: 568 default: 0
- variable: fsGroup - variable: fsGroup
label: fsGroup label: fsGroup
description: The group that should own ALL storage. description: The group that should own ALL storage.
@@ -5,6 +5,14 @@ image:
hostNetwork: true hostNetwork: true
podSecurityContext:
runAsGroup: 0
runAsUser: 0
securityContext:
readOnlyRootFilesystem: false
runAsNonRoot: false
watchyourlan: watchyourlan:
gui_ip: "0.0.0.0" gui_ip: "0.0.0.0"
interfaces: interfaces: