Replace overlay containers (#249)

* move jackett to k8s-container

* move sonarr to k8s container

* move radarr to k8s container

* move qbittorrent to k8s container

* move tautulli to k8s container

* move sabnzbd to k8s container

* nzbget

* lidarr

* bazarr

* nzbhydra

* jellyfin

* cleanup gpu mounting on common

* update common

* add gpu selector to jellyfin

* add GPU selector to Emby

* enable securityContext.runAsNonRoot

library/common/templates/lib/controller/_container.tpl

@@ -98,16 +98,12 @@ The main container included in the controller.
   {{- end }}
   {{- end }}
   {{- include "common.controller.probes" . | nindent 2 }}
-  {{- with .Values.resources }}
   resources:
+  {{- with .Values.resources }}
     {{- toYaml . | nindent 4 }}
   {{- end }}
-  {{- if and .Values.gpuConfiguration .Values.resources }}
+  {{- if and .Values.gpuConfiguration }}
     limits:
-      {{- toYaml .Values.gpuConfiguration | nindent 14 }}
-  {{- else if .Values.gpuConfiguration }}
-  resources:
-    limits:
-      {{- toYaml .Values.gpuConfiguration | nindent 14 }}
+      {{- toYaml .Values.gpuConfiguration | nindent 6 }}
   {{- end }}
 {{- end -}}

library/common/templates/lib/controller/_pod.tpl

@@ -30,6 +30,7 @@ securityContext:
 {{- if not .Values.startAsRoot }}
   runAsUser: {{ .Values.PUID }}
   runAsGroup: {{ .Values.PGID }}
+  runAsNonRoot: true
 {{- end }}
 {{- with .Values.podSecurityContext }}
   {{- toYaml . | nindent 2 }}