DevOps/truecharts
2
0
Fork 0
Code Issues Pull Requests Actions 32 Packages Projects Releases 1 Wiki Activity

Create new permission and customStorage system on the individual apps (#343)

Browse Source
This commit is contained in:
Kjeld Schouten-Lebbing
2021-04-14 22:24:09 +02:00
committed by GitHub
parent f3af8caa9b
commit 809f3215ab
265 changed files with 3624 additions and 2529 deletions
Download Patch File Download Diff File Expand all files Collapse all files
stable/zwavejs2mqtt/3.0.0/Chart.lock
+3 -3
View File
@@ -1,6 +1,6 @@
dependencies:
- name: common
repository: https://truecharts.org/
version: 2.2.2
digest: sha256:82ffcab0ecb2e23d6a8a775fb2408906a40bcde3379d5575cb54542ed16aa596
generated: "2021-04-12T17:35:11.084516091Z"
version: 3.0.1
digest: sha256:872003df28f67815271ff4716b856a152b06a170fe98bdbceebf29dbe6c229a5
generated: "2021-04-14T20:27:23.1480335+02:00"
stable/zwavejs2mqtt/3.0.0/Chart.yaml
+1 -1
View File
@@ -22,7 +22,7 @@ sources:
dependencies:
- name: common
repository: https://truecharts.org/
version: 2.2.2
version: 3.0.1
# condition:
maintainers:
- name: TrueCharts
stable/zwavejs2mqtt/3.0.0/charts/common-2.2.2.tgz
BIN
View File
Binary file not shown.
stable/zwavejs2mqtt/3.0.0/charts/common-3.0.1.tgz
BIN
View File
Binary file not shown.
stable/zwavejs2mqtt/3.0.0/ix_values.yaml
-4
View File
@@ -9,9 +9,6 @@ image:
pullPolicy: IfNotPresent
tag: 2.4.1
# 5=tty 20=dailout 24=cdrom
supplementalGroups: 5,20,24
probes:
liveness:
enabled: true
@@ -56,7 +53,6 @@ probes:
# periodSeconds: 10
# timeoutSeconds: 10
##
# Most other defaults are set in questions.yaml
# For other options please refer to the wiki, default_values.yaml or the common library chart
stable/zwavejs2mqtt/3.0.0/questions.yaml
+66 -51
View File
@@ -17,7 +17,6 @@ groups:
description: "Advanced Configuration"
- name: "WARNING"
description: "WARNING"
portals:
web_portal:
protocols:
@@ -26,9 +25,7 @@ portals:
- "$kubernetes-resource_configmap_portal_host"
ports:
- "$kubernetes-resource_configmap_portal_port"
questions:
- variable: portal
group: "Container Image"
label: "Configure Portal Button"
@@ -44,7 +41,6 @@ questions:
editable: false
type: boolean
default: true
# Update Policy
- variable: strategyType
group: "Container Image"
@@ -58,8 +54,6 @@ questions:
- value: "Recreate"
description: "Kill existing pods before creating new ones"
# Configure Time Zone
# Configure Time Zone
- variable: timezone
group: "Container Image"
@@ -70,43 +64,6 @@ questions:
$ref:
- "definitions/timezone"
- variable: PUID
group: "Container Image"
label: "PUID"
description: "The UserID of the user running the application and owning the files"
schema:
type: int
default: 568
# Enable privileged
- variable: securityContext
group: "Container Image"
label: "Security Context"
schema:
type: dict
attrs:
- variable: privileged
label: "Enable privileged to pass thru a USB device"
schema:
type: boolean
default: false
- variable: PGID
group: "Container Image"
label: "PGID"
description: "The groupID of the user/group running the application and owning the files"
schema:
type: int
default: 568
- variable: UMASK
group: "Container Image"
label: "UMASK (advanced)"
description: "The UMASK used if supported by the application"
schema:
type: string
default: "002"
# Service Configuration
# Enable Host Networking
- variable: hostNetwork
@@ -115,7 +72,6 @@ questions:
schema:
type: boolean
default: false
- variable: services
group: "Networking"
label: "Configure Service"
@@ -248,9 +204,7 @@ questions:
max: 65535
default: 36052
required: true
# Configure app volumes
- variable: persistence
label: "Integrated Persistent Storage"
group: "Storage"
@@ -309,8 +263,7 @@ questions:
schema:
type: string
default: "100Gi"
- variable: additionalAppVolumeMounts
- variable: customStorage
label: "Custom app storage"
group: "Storage"
schema:
@@ -370,8 +323,7 @@ questions:
schema:
type: hostpath
required: true
- variable: appVolumeMounts
- variable: deviceMounts
group: "Resource Reservation"
label: "USB devices"
schema:
@@ -423,7 +375,6 @@ questions:
type: path
default: "/dev/ttyACM0"
required: true
- variable: ingress
label: ""
group: "Reverse Proxy Configuration"
@@ -513,3 +464,67 @@ questions:
schema:
type: string
default: ""
# Enable privileged
- variable: securityContext
group: "Advanced"
label: "Security Context"
schema:
type: dict
attrs:
- variable: privileged
label: "Enable privileged mode for Common-Chart based charts"
schema:
type: boolean
default: false
# Set Pod Security Policy
- variable: podSecurityContext
group: "Advanced"
label: "Pod Security Context"
schema:
type: dict
attrs:
- variable: runAsNonRoot
label: "runAsNonRoot"
schema:
type: boolean
default: true
- variable: runAsUser
label: "runAsUser"
description: "The UserID of the user running the application"
schema:
type: int
default: 568
- variable: runAsGroup
label: "runAsGroup"
description: The groupID this App of the user running the application"
schema:
type: int
default: 568
- variable: supplementalGroups
label: "supplementalGroups"
description: "Additional groups this App needs access to"
schema:
type: list
default: [5, 20, 24]
items:
- variable: Group
label: "Group"
schema:
type: int
default: 568
- variable: fsGroup
label: "fsGroup"
description: "The group that should own ALL storage."
schema:
type: int
default: 568
- variable: fsGroupChangePolicy
label: "When should we take ownership?"
schema:
type: string
default: "OnRootMismatch"
enum:
- value: "OnRootMismatch"
description: "OnRootMismatch"
- value: "Always"
description: "Always"
stable/zwavejs2mqtt/3.0.0/test_values.yaml
+7 -1
View File
@@ -10,6 +10,13 @@ image:
strategy:
type: Recreate
podSecurityContext:
runAsNonRoot: true
runAsUser: 568
runAsGroup: 568
fsGroup: 568
supplementalGroups:[5, 20, 24]
# # See more environment variables in the zwavejs2mqtt documentation
# https://zwave-js.github.io/zwavejs2mqtt/#/guide/env-vars
env: {}
@@ -71,7 +78,6 @@ services:
protocol: TCP
targetPort: 3000
# Privileged may be required if USB controller is accessed directly through the host machine
# securityContext:
# privileged: true