diff --git a/charts/stable/trilium-notes/Chart.yaml b/charts/stable/trilium-notes/Chart.yaml index 09d144589cd..cc791d39f5e 100644 --- a/charts/stable/trilium-notes/Chart.yaml +++ b/charts/stable/trilium-notes/Chart.yaml @@ -23,7 +23,7 @@ sources: - https://hub.docker.com/r/zadam/trilium - https://github.com/zadam/trilium type: application -version: 3.0.3 +version: 4.0.0 annotations: truecharts.org/catagories: | - media diff --git a/charts/stable/trilium-notes/questions.yaml b/charts/stable/trilium-notes/questions.yaml index b2f6e40f980..a00197fb8aa 100644 --- a/charts/stable/trilium-notes/questions.yaml +++ b/charts/stable/trilium-notes/questions.yaml @@ -238,7 +238,7 @@ questions: label: "ReadOnly Root Filesystem" schema: type: boolean - default: true + default: false - variable: allowPrivilegeEscalation label: "Allow Privilege Escalation" schema: @@ -248,7 +248,7 @@ questions: label: "runAsNonRoot" schema: type: boolean - default: true + default: false # Include{securityContextAdvanced} - variable: podSecurityContext @@ -263,19 +263,19 @@ questions: description: "The UserID of the user running the application" schema: type: int - default: 568 + default: 0 - variable: runAsGroup label: "runAsGroup" description: "The groupID this App of the user running the application" schema: type: int - default: 568 + default: 0 - variable: fsGroup label: "fsGroup" description: "The group that should own ALL storage." schema: type: int - default: 568 + default: 1000 # Include{podSecurityContextAdvanced} # Include{resources} diff --git a/charts/stable/trilium-notes/values.yaml b/charts/stable/trilium-notes/values.yaml index 3ec2a32286e..a68cd0195d0 100644 --- a/charts/stable/trilium-notes/values.yaml +++ b/charts/stable/trilium-notes/values.yaml @@ -3,6 +3,15 @@ image: pullPolicy: IfNotPresent tag: v0.52.2@sha256:848715471d8f09800f56c48aef30c419d8f2150e645ad37562ad2bd1d76699a8 +securityContext: + runAsNonRoot: false + readOnlyRootFilesystem: false + +podSecurityContext: + runAsUser: 0 + runAsGroup: 0 + fsGroup: 1000 + service: main: ports: