Create new permission and customStorage system on the individual apps (#343)

stable/traefik/3.0.0/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: common
   repository: https://truecharts.org/
-  version: 2.2.2
+  version: 3.0.1
 - name: traefik
   repository: https://helm.traefik.io/traefik
-  version: 9.18.2
-digest: sha256:6b35ece9e9b02d121fc91ac0508f54dfcb1afc5d1684a56e2a2a51f08feef89a
-generated: "2021-04-13T15:07:05.720180137Z"
+  version: v9.18.2
+digest: sha256:41c0c9cdf2ea362e6a745858ad77e058d0fdf29cc52e263894de701f16de48e1
+generated: "2021-04-14T20:27:14.6120164+02:00"

stable/traefik/3.0.0/Chart.yaml

@@ -19,7 +19,7 @@ sources:
 dependencies:
   - name: common
     repository: https://truecharts.org/
-    version: 2.2.2
+    version: 3.0.1
     # condition:
   - name: traefik
     repository: https://helm.traefik.io/traefik

stable/traefik/3.0.0/questions.yaml

@@ -17,7 +17,6 @@ groups:
     description: "Advanced Configuration"
   - name: "WARNING"
     description: "WARNING"
-
 portals:
   web_portal:
     protocols:
@@ -26,9 +25,7 @@ portals:
       - "$kubernetes-resource_configmap_portal_host"
     ports:
       - "443"
-
 questions:
-
   - variable: portal
     group: "Container Image"
     label: "Configure Portal Button"
@@ -44,7 +41,6 @@ questions:
             editable: false
             type: boolean
             default: true
-
   # Configure Time Zone
   - variable: timezone
     group: "Container Image"
@@ -55,30 +51,6 @@ questions:
       $ref:
         - "definitions/timezone"
 
-  - variable: PUID
-    group: "Container Image"
-    label: "PUID"
-    description: "The UserID of the user running the application and owning the files"
-    schema:
-      type: int
-      default: 568
-
-  - variable: PGID
-    group: "Container Image"
-    label: "PGID"
-    description: "The groupID of the user/group running the application and owning the files"
-    schema:
-      type: int
-      default: 568
-
-  - variable: UMASK
-    group: "Container Image"
-    label: "UMASK (advanced)"
-    description: "The UMASK used if supported by the application"
-    schema:
-      type: string
-      default: "002"
-
   - variable: ingress
     label: ""
     group: "Reverse Proxy Configuration"
@@ -175,7 +147,6 @@ questions:
                       schema:
                         type: string
                         default: ""
-
   - variable: traefik
     label: "(Advanced) Traefik Settings"
     group: "Advanced"
@@ -219,7 +190,6 @@ questions:
                       schema:
                         type: string
                         default: "TCP"
-
               - variable: web
                 label: "web"
                 schema:
@@ -655,7 +625,6 @@ questions:
                         required: true
                         default: "TCP"
                         hidden: true
-
   - variable: externalServices
     label: "(Advanced) Add External Services"
     group: "Advanced"
@@ -774,6 +743,77 @@ questions:
                   type: string
                   default: ""
 
+  - variable: UMASK
+    group: "Advanced"
+    label: "UMASK"
+    description: "Sets the UMASK env var for LinuxServer.io (compatible) containers"
+    schema:
+      type: string
+      default: "002"
+  # Enable privileged
+  - variable: securityContext
+    group: "Advanced"
+    label: "Security Context"
+    schema:
+      type: dict
+      attrs:
+        - variable: privileged
+          label: "Enable privileged mode for Common-Chart based charts"
+          schema:
+            type: boolean
+            default: false
+  # Set Pod Security Policy
+  - variable: podSecurityContext
+    group: "Advanced"
+    label: "Pod Security Context"
+    schema:
+      type: dict
+      attrs:
+        - variable: runAsNonRoot
+          label: "runAsNonRoot"
+          schema:
+            type: boolean
+            default: true
+        - variable: runAsUser
+          label: "runAsUser"
+          description: "The UserID of the user running the application"
+          schema:
+            type: int
+            default: 568
+        - variable: runAsGroup
+          label: "runAsGroup"
+          description: The groupID this App of the user running the application"
+          schema:
+            type: int
+            default: 568
+        - variable: supplementalGroups
+          label: "supplementalGroups"
+          description: "Additional groups this App needs access to"
+          schema:
+            type: list
+            default: []
+            items:
+              - variable: Group
+                label: "Group"
+                schema:
+                  type: int
+                  default: 568
+        - variable: fsGroup
+          label: "fsGroup"
+          description: "The group that should own ALL storage."
+          schema:
+            type: int
+            default: 568
+        - variable: fsGroupChangePolicy
+          label: "When should we take ownership?"
+          schema:
+            type: string
+            default: "OnRootMismatch"
+            enum:
+              - value: "OnRootMismatch"
+                description: "OnRootMismatch"
+              - value: "Always"
+                description: "Always"
   - variable: warning
     label: "This App binds to the same ports as the defaults for TrueNAS SCALE UI (80 and 443). This means you may not be able to access the TrueNAS SCALE UI after starting the App."
     description: "Please be sure to set the UI to a different port or adapter"