DevOps/truecharts
2
0
Fork 0
Code Issues Pull Requests Actions 35 Packages Projects Releases 1 Wiki Activity

Create new permission and customStorage system on the individual apps (#343)

Browse Source
This commit is contained in:
Kjeld Schouten-Lebbing
2021-04-14 22:24:09 +02:00
committed by GitHub
parent f3af8caa9b
commit 809f3215ab
265 changed files with 3624 additions and 2529 deletions
Download Patch File Download Diff File Expand all files Collapse all files
incubator/truecommand/3.0.0/Chart.lock
+3 -3
View File
@@ -1,6 +1,6 @@
dependencies:
- name: common
repository: https://truecharts.org/
version: 2.2.2
digest: sha256:82ffcab0ecb2e23d6a8a775fb2408906a40bcde3379d5575cb54542ed16aa596
generated: "2021-04-12T17:36:12.739248771Z"
version: 3.0.1
digest: sha256:872003df28f67815271ff4716b856a152b06a170fe98bdbceebf29dbe6c229a5
generated: "2021-04-14T20:32:44.3941884+02:00"
incubator/truecommand/3.0.0/Chart.yaml
+1 -1
View File
@@ -17,7 +17,7 @@ sources:
dependencies:
- name: common
repository: https://truecharts.org/
version: 2.2.2
version: 3.0.1
# condition:
maintainers:
- name: TrueCharts
incubator/truecommand/3.0.0/charts/common-2.2.2.tgz
BIN
View File
Binary file not shown.
incubator/truecommand/3.0.0/charts/common-3.0.1.tgz
BIN
View File
Binary file not shown.
incubator/truecommand/3.0.0/ix_values.yaml
-2
View File
@@ -9,8 +9,6 @@ image:
pullPolicy: IfNotPresent
tag: nightly
startAsRoot: true
##
# Most other defaults are set in questions.yaml
# For other options please refer to the wiki, default_values.yaml or the common library chart
incubator/truecommand/3.0.0/questions.yaml
+88 -38
View File
@@ -17,7 +17,6 @@ groups:
description: "Advanced Configuration"
- name: "WARNING"
description: "WARNING"
portals:
web_portal:
protocols:
@@ -26,9 +25,7 @@ portals:
- "$kubernetes-resource_configmap_portal_host"
ports:
- "$kubernetes-resource_configmap_portal_port"
questions:
- variable: portal
group: "Container Image"
label: "Configure Portal Button"
@@ -45,7 +42,6 @@ questions:
type: boolean
default: true
# Update Policy
- variable: strategyType
group: "Container Image"
@@ -58,8 +54,6 @@ questions:
description: "Create new pods and then kill old ones"
- value: "Recreate"
description: "Kill existing pods before creating new ones"
# Configure Time Zone
# Configure Time Zone
- variable: timezone
group: "Container Image"
@@ -70,30 +64,6 @@ questions:
$ref:
- "definitions/timezone"
- variable: PUID
group: "Container Image"
label: "PUID"
description: "The UserID of the user running the application and owning the files"
schema:
type: int
default: 568
- variable: PGID
group: "Container Image"
label: "PGID"
description: "The groupID of the user/group running the application and owning the files"
schema:
type: int
default: 568
- variable: UMASK
group: "Container Image"
label: "UMASK (advanced)"
description: "The UMASK used if supported by the application"
schema:
type: string
default: "002"
# Configure Enviroment Variables
- variable: environmentVariables
label: "Image environment"
@@ -116,7 +86,6 @@ questions:
schema:
type: string
# Enable Host Networking
- variable: hostNetwork
group: "Networking"
@@ -124,7 +93,6 @@ questions:
schema:
type: boolean
default: false
- variable: services
group: "Networking"
label: "Configure Service"
@@ -194,9 +162,7 @@ questions:
max: 65535
default: 36052
required: true
## TrueCharts Specific
- variable: persistence
label: "Integrated Persistent Storage"
description: "Websocket Service"
@@ -257,9 +223,7 @@ questions:
type: string
default: "100Gi"
- variable: additionalAppVolumeMounts
- variable: customStorage
label: "Custom app storage"
group: "Storage"
schema:
@@ -319,7 +283,6 @@ questions:
schema:
type: hostpath
required: true
- variable: ingress
label: ""
group: "Reverse Proxy Configuration"
@@ -409,3 +372,90 @@ questions:
schema:
type: string
default: ""
- variable: PUID
group: "Advanced"
label: "PUID"
description: "Sets the PUID env var for LinuxServer.io (compatible) containers"
schema:
type: int
default: 568
- variable: PGID
group: "Advanced"
label: "PGID"
description: "Sets the PGID env var for LinuxServer.io (compatible) containers"
schema:
type: int
default: 568
- variable: UMASK
group: "Advanced"
label: "UMASK"
description: "Sets the UMASK env var for LinuxServer.io (compatible) containers"
schema:
type: string
default: "002"
# Enable privileged
- variable: securityContext
group: "Advanced"
label: "Security Context"
schema:
type: dict
attrs:
- variable: privileged
label: "Enable privileged mode for Common-Chart based charts"
schema:
type: boolean
default: false
# Set Pod Security Policy
- variable: podSecurityContext
group: "Advanced"
label: "Pod Security Context"
schema:
type: dict
attrs:
- variable: runAsNonRoot
label: "runAsNonRoot"
schema:
type: boolean
default: false
- variable: runAsUser
label: "runAsUser"
description: "The UserID of the user running the application"
schema:
type: int
default: 0
- variable: runAsGroup
label: "runAsGroup"
description: The groupID this App of the user running the application"
schema:
type: int
default: 0
- variable: supplementalGroups
label: "supplementalGroups"
description: "Additional groups this App needs access to"
schema:
type: list
default: []
items:
- variable: Group
label: "Group"
schema:
type: int
default: 568
- variable: fsGroup
label: "fsGroup"
description: "The group that should own ALL storage."
schema:
type: int
default: 568
- variable: fsGroupChangePolicy
label: "When should we take ownership?"
schema:
type: string
default: "OnRootMismatch"
enum:
- value: "OnRootMismatch"
description: "OnRootMismatch"
- value: "Always"
description: "Always"
incubator/truecommand/3.0.0/templates/NOTES.txt
-3
View File
@@ -1,3 +0,0 @@
1. Get the application URL by running these commands:
http://$node_ip/
incubator/truecommand/3.0.0/test_values.yaml
+6 -1
View File
@@ -8,7 +8,12 @@ image:
strategy:
type: Recreate
startAsRoot: true
# Configure the Security Context for the Pod
podSecurityContext:
runAsNonRoot: false
runAsUser: 0
runAsGroup: 0
fsGroup: 0
services:
main: