Create new permission and customStorage system on the individual apps (#343)

This commit is contained in:
Kjeld Schouten-Lebbing
2021-04-14 22:24:09 +02:00
committed by GitHub
parent f3af8caa9b
commit 809f3215ab
265 changed files with 3624 additions and 2529 deletions
+3 -3
View File
@@ -1,9 +1,9 @@
dependencies:
- name: common
repository: https://truecharts.org/
version: 2.2.2
version: 3.0.1
- name: postgresql
repository: https://charts.bitnami.com/bitnami
version: 10.3.15
digest: sha256:693741fa9c74107c6ce226bd406fc886dafd4b115c82e4db68a90e46cb5f2f68
generated: "2021-04-12T17:54:54.6605766+02:00"
digest: sha256:a1826963dcf7cbf3c46933119236631135bb07dc3ba492daa115ab0f9591b69a
generated: "2021-04-14T20:26:18.2011359+02:00"
+1 -1
View File
@@ -22,7 +22,7 @@ sources:
dependencies:
- name: common
repository: https://truecharts.org/
version: 2.2.2
version: 3.0.1
# condition:
- name: postgresql
version: 10.3.15
Binary file not shown.
Binary file not shown.
+73 -47
View File
@@ -17,7 +17,6 @@ groups:
description: "Advanced Configuration"
- name: "WARNING"
description: "WARNING"
portals:
web_portal:
protocols:
@@ -26,9 +25,7 @@ portals:
- "$kubernetes-resource_configmap_portal_host"
ports:
- "$kubernetes-resource_configmap_portal_port"
questions:
- variable: portal
group: "Container Image"
label: "Configure Portal Button"
@@ -44,7 +41,6 @@ questions:
editable: false
type: boolean
default: true
# Update Policy
- variable: strategyType
group: "Container Image"
@@ -57,7 +53,6 @@ questions:
description: "Create new pods and then kill old ones"
- value: "Recreate"
description: "Kill existing pods before creating new ones"
# Configure Time Zone
- variable: timezone
group: "Container Image"
@@ -67,33 +62,7 @@ questions:
default: "Etc/UTC"
$ref:
- "definitions/timezone"
- variable: PUID
group: "Container Image"
label: "PUID"
description: "The UserID of the user running the application and owning the files"
schema:
type: int
default: 568
- variable: PGID
group: "Container Image"
label: "PGID"
description: "The groupID of the user/group running the application and owning the files"
schema:
type: int
default: 568
- variable: UMASK
group: "Container Image"
label: "UMASK (advanced)"
description: "The UMASK used if supported by the application"
schema:
type: string
default: "002"
# Configure Bitwarden:
- variable: bitwardenrs
label: ""
group: "Configuration"
@@ -129,7 +98,6 @@ questions:
schema:
type: string
default: ""
- variable: admin
label: "Admin Portal"
schema:
@@ -153,7 +121,6 @@ questions:
schema:
type: string
default: ""
- variable: icons
label: "Icon Download Settings"
schema:
@@ -177,7 +144,6 @@ questions:
schema:
type: int
default: 2592000
- variable: log
label: "Logging"
schema:
@@ -208,7 +174,6 @@ questions:
type: string
default: ""
- variable: smtp
label: "SMTP Settings (Email)"
schema:
@@ -292,7 +257,6 @@ questions:
type: boolean
default: false
- variable: allowSignups
label: "Allow Signup"
description: "Allow any user to sign-up: https://github.com/dani-garcia/bitwarden_rs/wiki/Disable-registration-of-new-users"
@@ -312,7 +276,6 @@ questions:
type: string
default: ""
- variable: showPasswordHint
label: "Show password hints"
description: "https://github.com/dani-garcia/bitwarden_rs/wiki/Password-hint-display"
@@ -320,8 +283,6 @@ questions:
type: boolean
default: true
- variable: signupwhitelistenable
label: "Enable Signup Whitelist"
description: "allowSignups is ignored if set"
@@ -399,7 +360,6 @@ questions:
schema:
type: string
default: ""
# Configure Enviroment Variables
- variable: environmentVariables
label: "Image environment"
@@ -421,7 +381,6 @@ questions:
label: "Value"
schema:
type: string
# Enable Host Networking
- variable: hostNetwork
group: "Networking"
@@ -430,7 +389,6 @@ questions:
type: boolean
default: false
hidden: true
- variable: services
group: "Networking"
label: "Configure Service"
@@ -563,9 +521,7 @@ questions:
required: true
hidden: true
## TrueCharts Specific
- variable: persistence
label: "Integrated Persistent Storage"
description: "Websocket Service"
@@ -736,8 +692,7 @@ questions:
schema:
type: string
default: "100Gi"
- variable: additionalAppVolumeMounts
- variable: customStorage
label: "Custom app storage"
group: "Storage"
schema:
@@ -797,7 +752,6 @@ questions:
schema:
type: hostpath
required: true
- variable: ingress
label: ""
group: "Reverse Proxy Configuration"
@@ -886,3 +840,75 @@ questions:
schema:
type: string
default: ""
- variable: UMASK
group: "Advanced"
label: "UMASK"
description: "Sets the UMASK env var for LinuxServer.io (compatible) containers"
schema:
type: string
default: "002"
# Enable privileged
- variable: securityContext
group: "Advanced"
label: "Security Context"
schema:
type: dict
attrs:
- variable: privileged
label: "Enable privileged mode for Common-Chart based charts"
schema:
type: boolean
default: false
# Set Pod Security Policy
- variable: podSecurityContext
group: "Advanced"
label: "Pod Security Context"
schema:
type: dict
attrs:
- variable: runAsNonRoot
label: "runAsNonRoot"
schema:
type: boolean
default: true
- variable: runAsUser
label: "runAsUser"
description: "The UserID of the user running the application"
schema:
type: int
default: 568
- variable: runAsGroup
label: "runAsGroup"
description: The groupID this App of the user running the application"
schema:
type: int
default: 568
- variable: supplementalGroups
label: "supplementalGroups"
description: "Additional groups this App needs access to"
schema:
type: list
default: []
items:
- variable: Group
label: "Group"
schema:
type: int
default: 568
- variable: fsGroup
label: "fsGroup"
description: "The group that should own ALL storage."
schema:
type: int
default: 568
- variable: fsGroupChangePolicy
label: "When should we take ownership?"
schema:
type: string
default: "OnRootMismatch"
enum:
- value: "OnRootMismatch"
description: "OnRootMismatch"
- value: "Always"
description: "Always"