Create new permission and customStorage system on the individual apps (#343)

.tools/fixfolders.sh

@@ -1,5 +1,5 @@
 #!/bin/sh
-for chart in staging/*; do
+for chart in incubator/*; do
 	if [ -d "${chart}" ]; then
       maxfolderversion=$(ls -l ${chart} | grep ^d | awk '{print $9}' | tail -n 1)
       maxchartversion=$(cat ${chart}/${maxfolderversion}/Chart.yaml | grep "^version: " | awk -F" " '{ print $2 }')

dev/phpmyadmin/0.2.2/questions.yaml

@@ -17,7 +17,6 @@ groups:
     description: "Advanced Configuration"
   - name: "WARNING"
     description: "WARNING"
-
 portals:
   web_portal:
     protocols:
@@ -26,9 +25,7 @@ portals:
       - "$kubernetes-resource_configmap_portal_host"
     ports:
       - "$kubernetes-resource_configmap_portal_port"
-
 questions:
-
   - variable: portal
     group: "Container Image"
     label: "Configure Portal Button"
@@ -44,7 +41,6 @@ questions:
             editable: false
             type: boolean
             default: true
-
   # Update Policy
   - variable: strategyType
     group: "Container Image"
@@ -57,8 +53,6 @@ questions:
           description: "Create new pods and then kill old ones"
         - value: "Recreate"
           description: "Kill existing pods before creating new ones"
-
-  # Configure Time Zone
   # Configure Time Zone
   - variable: timezone
     group: "Container Image"
@@ -69,30 +63,6 @@ questions:
       $ref:
         - "definitions/timezone"
 
-  - variable: PUID
-    group: "Container Image"
-    label: "PUID"
-    description: "The UserID of the user running the application and owning the files"
-    schema:
-      type: int
-      default: 568
-
-  - variable: PGID
-    group: "Container Image"
-    label: "PGID"
-    description: "The groupID of the user/group running the application and owning the files"
-    schema:
-      type: int
-      default: 568
-
-  - variable: UMASK
-    group: "Container Image"
-    label: "UMASK (advanced)"
-    description: "The UMASK used if supported by the application"
-    schema:
-      type: string
-      default: "002"
-
   - variable: env
     group: "Configuration"
     label: "Configure Application"
@@ -104,7 +74,6 @@ questions:
           schema:
             type: string
             default: "true"
-
   # Configure Enviroment Variables
   - variable: environmentVariables
     label: "Image environment"
@@ -126,7 +95,6 @@ questions:
                 label: "Value"
                 schema:
                   type: string
-
   # Enable Host Networking
   - variable: hostNetwork
     group: "Networking"
@@ -134,7 +102,6 @@ questions:
     schema:
       type: boolean
       default: false
-
   - variable: services
     group: "Networking"
     label: "Configure Service"
@@ -204,11 +171,9 @@ questions:
                         max: 65535
                         default: 36052
                         required: true
-
 ## TrueCharts Specific
 
-
+  - variable: customStorage
-  - variable: additionalAppVolumeMounts
     label: "Custom app storage"
     group: "Storage and Devices"
     schema:
@@ -268,7 +233,6 @@ questions:
                 schema:
                   type: hostpath
                   required: true
-
   - variable: ingress
     label: ""
     group: "Reverse Proxy Configuration"
@@ -358,3 +322,75 @@ questions:
                       schema:
                         type: string
                         default: ""
+
+  - variable: UMASK
+    group: "Advanced"
+    label: "UMASK"
+    description: "Sets the UMASK env var for LinuxServer.io (compatible) containers"
+    schema:
+      type: string
+      default: "002"
+  # Enable privileged
+  - variable: securityContext
+    group: "Advanced"
+    label: "Security Context"
+    schema:
+      type: dict
+      attrs:
+        - variable: privileged
+          label: "Enable privileged mode for Common-Chart based charts"
+          schema:
+            type: boolean
+            default: false
+  # Set Pod Security Policy
+  - variable: podSecurityContext
+    group: "Advanced"
+    label: "Pod Security Context"
+    schema:
+      type: dict
+      attrs:
+        - variable: runAsNonRoot
+          label: "runAsNonRoot"
+          schema:
+            type: boolean
+            default: true
+        - variable: runAsUser
+          label: "runAsUser"
+          description: "The UserID of the user running the application"
+          schema:
+            type: int
+            default: 568
+        - variable: runAsGroup
+          label: "runAsGroup"
+          description: The groupID this App of the user running the application"
+          schema:
+            type: int
+            default: 568
+        - variable: supplementalGroups
+          label: "supplementalGroups"
+          description: "Additional groups this App needs access to"
+          schema:
+            type: list
+            default: []
+            items:
+              - variable: Group
+                label: "Group"
+                schema:
+                  type: int
+                  default: 568
+        - variable: fsGroup
+          label: "fsGroup"
+          description: "The group that should own ALL storage."
+          schema:
+            type: int
+            default: 568
+        - variable: fsGroupChangePolicy
+          label: "When should we take ownership?"
+          schema:
+            type: string
+            default: "OnRootMismatch"
+            enum:
+              - value: "OnRootMismatch"
+                description: "OnRootMismatch"
+              - value: "Always"
+                description: "Always"

dev/placeholder/6.6.6/questions.yaml

@@ -2,5 +2,4 @@ groups:
   - name: "Container Image"
     description: "Image to be used for container"
 
-
 questions: []

dev/postgres-operator/0.2.2/.helmignore

@@ -1,24 +0,0 @@
-# Patterns to ignore when building packages.
-# This supports shell glob matching, relative path matching, and
-# negation (prefixed with !). Only one pattern per line.
-.DS_Store
-# Common VCS dirs
-.git/
-.gitignore
-.bzr/
-.bzrignore
-.hg/
-.hgignore
-.svn/
-# Common backup files
-*.swp
-*.bak
-*.tmp
-*~
-# Various IDEs
-.project
-.idea/
-*.tmproj
-.vscode/
-# OWNERS file for Kubernetes
-OWNERS

dev/postgres-operator/0.2.2/CONFIG.md

@@ -1,9 +0,0 @@
-# Configuration Options
-
-##### Connecting to other apps
-If you need to connect this App to other Apps on TrueNAS SCALE, please refer to our "Linking Apps Together" guide:
-https://truecharts.org/manual/linking/
-
-
-##### Available config options
-In the future this page is going to contain an automated list of options available in the installation/edit UI.

dev/postgres-operator/0.2.2/Chart.lock

@@ -1,12 +0,0 @@
-dependencies:
-- name: common
-  repository: https://truecharts.org/
-  version: 2.2.2
-- name: postgres-operator-ui
-  repository: https://raw.githubusercontent.com/zalando/postgres-operator/master/charts/postgres-operator-ui/
-  version: 1.6.2
-- name: postgres-operator
-  repository: https://raw.githubusercontent.com/zalando/postgres-operator/master/charts/postgres-operator/
-  version: 1.6.2
-digest: sha256:02775c4ac5a34caaaad240be40a9beae267db7c7402db331ea1924dc63d8958f
-generated: "2021-04-12T17:37:01.42258593Z"

dev/postgres-operator/0.2.2/Chart.yaml

@@ -1,44 +0,0 @@
-apiVersion: v2
-kubeVersion: ">=1.16.0-0"
-name: postgres-operator
-version: 0.2.2
-upstream_version: 1.6.2
-appVersion: "auto"
-description: Postgres Operator creates and manages PostgreSQL clusters running in Kubernetes
-type: application
-deprecated: false
-home: https://github.com/truecharts/apps/tree/master/incubator/postgres-operator
-icon: https://truecharts.org/_static/img/postgres-operator-icon.png
-keywords:
-  - database
-  - HA
-  - postgresql
-  - SQL
-  - postgres
-  - operator
-  - cloud-native
-  - patroni
-  - spilo
-sources:
-  - https://github.com/zalando/postgres-operator
-dependencies:
-  - name: common
-    repository: https://truecharts.org/
-    version: 2.2.2
-    # condition:
-  - name: postgres-operator-ui
-    repository: https://raw.githubusercontent.com/zalando/postgres-operator/master/charts/postgres-operator-ui/
-    version: 1.6.2
-    # condition:
-  - name: postgres-operator
-    repository: https://raw.githubusercontent.com/zalando/postgres-operator/master/charts/postgres-operator/
-    version: 1.6.2
-    # condition:
-maintainers:
-  - name: TrueCharts
-    email: info@truecharts.org
-    url: truecharts.org
-  - name: Ornias1993
-    email: kjeld@schouten-lebbing.nl
-    url: truecharts.org
-# annotations:

dev/postgres-operator/0.2.2/README.md

@@ -1,56 +0,0 @@
-# Introduction
-
-![Version: 0.0.1](https://img.shields.io/badge/Version-0.0.1-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: auto](https://img.shields.io/badge/AppVersion-auto-informational?style=flat-square)
-
-Postgres Operator creates and manages PostgreSQL clusters running in Kubernetes
-
-TrueCharts are designed to be installed as TrueNAS SCALE app only. We can not guarantee this charts works as a stand-alone helm installation.
-**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/apps/issues/new/choose)**
-
-## Source Code
-
-* <https://github.com/zalando/postgres-operator>
-
-## Requirements
-
-Kubernetes: `>=1.16.0-0`
-
-## Dependencies
-
-| Repository | Name | Version |
-|------------|------|---------|
-| https://raw.githubusercontent.com/zalando/postgres-operator/master/charts/postgres-operator-ui/ | postgres-operator-ui | 1.6.2 |
-| https://raw.githubusercontent.com/zalando/postgres-operator/master/charts/postgres-operator/ | postgres-operator | 1.6.2 |
-| https://truecharts.org/ | common | 2.0.0 |
-
-## Installing the Chart
-
-To install the chart with the release name `postgresql`
-
-- Open TrueNAS SCALE
-- Go to Apps
-- Click "Install" for this specific Apps
-- Fill out the configuration form
-
-## Uninstalling the Chart
-
-To uninstall the `postgresql` deployment
-
-- Open TrueNAS SCALE
-- Go to Apps
-- Go to "Installed Apps"
-- Expand the menu in the top-right corner of this App
-- Click "Remove" for this specific Apps
-
-The command removes all the Kubernetes components associated with the chart **including storage volumes** _(Except hostPath Storage)_ and deletes the release.
-
-## Support
-
-- See the [Wiki](https://truecharts.org)
-- Open a [issue](https://github.com/truecharts/apps/issues/new/choose)
-- Ask a [question](https://github.com/truecharts/apps/discussions)
-
-
-----------------------------------------------
-Autogenerated from chart metadata using [helm-docs v1.5.0](https://github.com/norwoodj/helm-docs/releases/v1.5.0)
-All Rights Reserved - The TrueCharts Project

dev/postgres-operator/0.2.2/app-readme.md

@@ -1,2 +0,0 @@
-Postgres Operator creates and manages PostgreSQL clusters running in Kubernetes
-This App is supplied by TrueCharts, for more information please visit https://truecharts.org

dev/postgres-operator/0.2.2/ix_values.yaml

@@ -1,12 +0,0 @@
-image:
-  registry: registry.opensource.zalan.do
-  repository: acid/postgres-operator
-  tag: v1.6.2
-  pullPolicy: "IfNotPresent"
-
-postgres-operator-ui:
-  # configure UI ENVs
-  envs:
-    targetNamespace: "*"
-    teams:
-      - "apps"

dev/postgres-operator/0.2.2/questions.yaml

@@ -1,317 +0,0 @@
-groups:
-  - name: "Container Image"
-    description: "Image to be used for container"
-  - name: "Workload Configuration"
-    description: "Configure workload deployment"
-  - name: "Configuration"
-    description: "additional container configuration"
-  - name: "Networking"
-    description: "Configure / service for container"
-  - name: "Storage and Devices"
-    description: "Persist and share data that is separate from the lifecycle of the container"
-  - name: "Resource Reservation"
-    description: "Specify resources to be allocated to workload"
-  - name: "Reverse Proxy Configuration"
-    description: "Reverse Proxy configuration"
-  - name: "Advanced"
-    description: "Advanced Configuration"
-  - name: "WARNING"
-    description: "WARNING"
-
-portals:
-  web_portal:
-    protocols:
-      - "$kubernetes-resource_configmap_portal_protocol"
-    host:
-      - "$kubernetes-resource_configmap_portal_host"
-    ports:
-      - "$kubernetes-resource_configmap_portal_port"
-
-questions:
-
-  - variable: portal
-    group: "Container Image"
-    label: "Configure Portal Button"
-    schema:
-      type: dict
-      hidden: true
-      attrs:
-        - variable: enabled
-          label: "Enable"
-          description: "enable the portal button"
-          schema:
-            hidden: true
-            editable: false
-            type: boolean
-            default: true
-
-  # Update Policy
-  - variable: strategyType
-    group: "Container Image"
-    label: "Update Strategy"
-    schema:
-      type: string
-      default: "Recreate"
-      enum:
-        - value: "RollingUpdate"
-          description: "Create new pods and then kill old ones"
-        - value: "Recreate"
-          description: "Kill existing pods before creating new ones"
-
-  # Configure Time Zone
-  # Configure Time Zone
-  - variable: timezone
-    group: "Container Image"
-    label: "Timezone"
-    schema:
-      type: string
-      default: "Etc/UTC"
-      $ref:
-        - "definitions/timezone"
-
-  - variable: postgres-operator
-    label: "Postgres-Operator Settings"
-    description: "These settings can be used to customise the postgres-operator"
-    group: "Configuration"
-    schema:
-      type: dict
-      attrs:
-        - variable: fullnameOverride
-          label: "fullnameOverride"
-          schema:
-            hidden: true
-            type: string
-            default: "postgres-operator"
-        - variable: configUsers
-          label: ""
-          schema:
-            hidden: true
-            type: dict
-            attrs:
-              - variable: replication_username
-                label: "replication_username"
-                schema:
-                  hidden: true
-                  type: string
-                  default: "postgres"
-        - variable: configMajorVersionUpgrade
-          label: ""
-          schema:
-            hidden: true
-            type: dict
-            attrs:
-              - variable: major_version_upgrade_mode
-                label: "major_version_upgrade_mode"
-                schema:
-                  hidden: true
-                  type: string
-                  default: "full"
-        - variable: configKubernetes
-          label: ""
-          schema:
-            hidden: true
-            type: dict
-            attrs:
-              - variable: watched_namespace
-                label: "watched_namespace"
-                schema:
-                  hidden: true
-                  type: string
-                  default: "*"
-              - variable: inherited_labels
-                label: "inherited_labels"
-                schema:
-                  hidden: true
-                  type: string
-                  default: "application, environment"
-              - variable: pod_environment_configmap
-                label: "pod_environment_configmap"
-                schema:
-                  hidden: true
-                  type: string
-                  default: "default/envconfig"
-
-        - variable: configGeneral
-          label: ""
-          schema:
-            hidden: true
-            type: dict
-            attrs:
-              - variable: kubernetes_use_configmaps
-                label: "kubernetes_use_configmaps"
-                schema:
-                  hidden: false
-                  type: string
-                  default: "false"
-        - variable: securityContext
-          label: ""
-          schema:
-            type: dict
-            attrs:
-              - variable: runAsUser
-                label: "runAsUser"
-                description: "The UserID of the user running the application"
-                schema:
-                  type: int
-                  default: 568
-        - variable: configLogicalBackup
-          label: "Setup Logical Backup (s3)"
-          schema:
-            type: dict
-            attrs:
-              - variable: logical_backup_s3_access_key_id
-                label: "S3 Access Key ID"
-                schema:
-                  type: string
-                  default: ""
-              - variable: logical_backup_s3_bucket
-                label: "S3 bucket"
-                schema:
-                  type: string
-                  default: "my-bucket-url"
-              - variable: logical_backup_s3_endpoint
-                label: "S3 Endpoint"
-                schema:
-                  type: string
-                  default: ""
-              - variable: logical_backup_s3_region
-                label: "S3 Region"
-                schema:
-                  type: string
-                  default: ""
-              - variable: logical_backup_s3_secret_access_key
-                label: "S3 Secret Access Key"
-                schema:
-                  type: string
-                  default: ""
-              - variable: logical_backup_s3_sse
-                label: "S3 SSE"
-                schema:
-                  type: string
-                  default: "AES256"
-              - variable: logical_backup_schedule
-                label: "Cron format Schedule"
-                schema:
-                  type: string
-                  default: "30 00 * * *"
-
-  # Configure Enviroment Variables
-  - variable: environmentVariables
-    label: "Image environment"
-    group: "Configuration"
-    schema:
-      type: list
-      default: []
-      items:
-        - variable: environmentVariable
-          label: "Environment Variable"
-          schema:
-            type: dict
-            attrs:
-              - variable: name
-                label: "Name"
-                schema:
-                  type: string
-              - variable: value
-                label: "Value"
-                schema:
-                  type: string
-
-## TrueCharts Specific
-
-  - variable: ingress
-    label: ""
-    group: "Reverse Proxy Configuration"
-    schema:
-      type: dict
-      attrs:
-        - variable: main
-          label: "WebUI"
-          schema:
-            type: dict
-            attrs:
-              - variable: enabled
-                label: "Enable Web Reverse Proxy"
-                schema:
-                  type: boolean
-                  default: false
-                  show_subquestions_if: true
-                  subquestions:
-                    - variable: type
-                      label: "Reverse Proxy Type"
-                      schema:
-                        type: string
-                        default: "HTTP"
-                        hidden: true
-                        editable: false
-                        required: true
-                    - variable: dynamicServiceName
-                      label: "Service name to proxy to"
-                      schema:
-                        hidden: true
-                        editable: false
-                        type: string
-                        default: "postgres-operator-ui"
-                    - variable: servicePort
-                      label: "Service port to proxy to"
-                      schema:
-                        hidden: true
-                        editable: false
-                        type: int
-                        default: 80
-                    - variable: entrypoint
-                      label: "Select Entrypoint"
-                      schema:
-                        type: string
-                        default: "websecure"
-                        required: true
-                        enum:
-                          - value: "websecure"
-                            description: "Websecure: HTTPS/TLS port 443"
-                    - variable: hosts
-                      label: "Hosts"
-                      schema:
-                        type: list
-                        default: []
-                        items:
-                          - variable: host
-                            label: "Host"
-                            schema:
-                              type: dict
-                              attrs:
-                                - variable: host
-                                  label: "Domain Name"
-                                  required: true
-                                  schema:
-                                    type: string
-                                - variable: path
-                                  label: "path"
-                                  schema:
-                                    type: string
-                                    required: true
-                                    hidden: true
-                                    default: "/"
-                    - variable: certType
-                      label: "Select Certificate Type"
-                      schema:
-                        type: string
-                        default: "selfsigned"
-                        enum:
-                          - value: ""
-                            description: "No Encryption/TLS/Certificates"
-                          - value: "selfsigned"
-                            description: "Self-Signed Certificate"
-                          - value: "ixcert"
-                            description: "TrueNAS SCALE Certificate"
-                    - variable: certificate
-                      label: "Select TrueNAS SCALE Certificate"
-                      schema:
-                        type: int
-                        show_if: [["certType", "=", "ixcert"]]
-                        $ref:
-                          - "definitions/certificate"
-                    - variable: authForwardURL
-                      label: "Forward Authentication URL"
-                      schema:
-                        type: string
-                        default: ""

dev/postgres-operator/0.2.2/templates/common.yaml

@@ -1,2 +0,0 @@
-{{ include "common.ingress" . }}
-{{ include "common.resources.portal" . }}

dev/postgres-operator/0.2.2/templates/envconfig.yaml

@@ -1,7 +0,0 @@
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: envconfig
-  namespace: default
-data:
-  KUBERNETES_BYPASS_API_SERVICE: "false"

dev/postgres-operator/0.2.2/test_values.yaml

@@ -1,37 +0,0 @@
-image:
-  registry: registry.opensource.zalan.do
-  repository: acid/postgres-operator
-  tag: v1.6.2
-  pullPolicy: "IfNotPresent"
-
-postgres-operator:
-  fullnameOverride: "postgres-operator"
-  configUsers:
-    # postgres username used for replication between instances
-    replication_username: postgres
-  configMajorVersionUpgrade:
-    # "off": no upgrade, "manual": manifest triggers action, "full": minimal version violation triggers too
-    major_version_upgrade_mode: "full"
-  configKubernetes:
-    # enable_pod_antiaffinity: true
-    # pod_environment_configmap: "postgres-pod-config"
-    watched_namespace: "*"
-    # list of labels that can be inherited from the cluster manifest
-    inherited_labels: application, environment
-
-ingress:
-  main:
-    enabled: true
-    type: "HTTP"
-    entrypoint: "websecure"
-    certType: "selfsigned"
-    dynamicServiceName: "postgres-operator-ui"
-    servicePort: 8081
-    annotations: {}
-    labels: {}
-    hosts:
-      - host: chart-example.local
-        paths:
-          - path: /
-            # Ignored if not kubeVersion >= 1.14-0
-            pathType: Prefix

dev/postgres-operator/0.2.2/values.yaml

@@ -1 +0,0 @@
-# This file is empty on purpose, as it should not be used with TrueNAS SCALE

dev/postgres-operator/item.yaml

@@ -1,3 +0,0 @@
-categories:
-  - media
-icon_url: https://truecharts.org/_static/img/postgres-operator-icon.png

docs/development/app development/questions-yaml.md

@@ -1,15 +1,10 @@
 # Questions.yaml
-
 Questions.yaml is the file which get rendered by TrueNAS to create the UI. When not creating new charts, most of what this project does is stitching together questions.yaml files to turn existing Helm Charts into Apps.
 
-
 ### Syntax
-
 In this document we give you a short reference guide (ported from IX Official) which lays out the settings available in questions.yaml.
 
-
 #### Question Variable Reference
-
 | Variable  | Type | Required | Description |
 | ------------- | ------------- | --- |------------- |
 | 	variable                    | string        | true       |  define the variable name specified in the `values.yaml`file. |
@@ -34,13 +29,9 @@ In this document we give you a short reference guide (ported from IX Official) w
 | 	schema.private              | bool          | false      | specified for declaring information sensitive fields. |
 | 	schema.null                 | bool          | false      | specifies if the value for the variable can be null. defaults to false. |
 
-
 ##### Subquestions
-
 `subquestions[]` cannot contain `subquestions` or `show_subquestions_if` keys, but all other keys in the above table are supported. Also variables having `schema.type` list do not support `subquestions`.
-
 ##### Special Questions
-
 There are some novel cases where we would like to provide ability to configure / manage resources for workloads with getting some data from system dynamically.
 So a chart can specify certain actions to be performed by the system for a variable by defining a reference. An example better illustrates this concept:
 ```
@@ -63,15 +54,12 @@ label: "Dataset Name"
           type: string
           required: true
 ```
-
 In the above variable we define a `$ref` in schema which specifies that the system should take some action for normalising the value specified for the variable.
 In this specific case, `ix_volume` is a concept introduced where we recommend using a volume which we are able to rollback automatically on chart release rollback. In essence,
 it is just a `hostPath` volume for which the system automatically creates the dataset specified.
-
 We have following types of actions supported in `$ref` right now:
 1) definitions
 2) normalize
-
 For (1), system will automatically update schema for a particular definition. For example,
 ```
 - variable: hostInterface
@@ -84,20 +72,13 @@ label: "Host Interface"
       - "definitions/interface"
 ```
 System will automatically populate available interfaces for the user based on what interfaces are available on the system.
-
 For (2), system will normalize values or perform some actions as discussed above.
 
-
 ### Standardised questions.yaml sections
-
 To minimise the maintenance load of our App collection, we always aim to standardise as much as possible. The same goes for questions.yaml. Included here are some code standardised code-snippets that are expected to be included in every App.
-
 Be aware that sometimes specific functions might or might not completely function. Leaving them out would, however, everely increase the maintenance load and often said functionality will be added in the common-chart later on anyway.
-
 ##### Groups
-
 To make sure all apps stay somewhat the same, we use a standardised `groups:` section. Please make sure to use this in your Apps:
-
 ```
 groups:
   - name: "Container Image"
@@ -118,13 +99,10 @@ groups:
     description: "WARNING"
 ```
 
-
 ##### General Configuration options
-
 These options are always included because almost every chart (eventually) has a use for them and/or other parts of the common chart depend on them.
 They are called general options, because they affect the basic functionalities of a chart. For example: Custom User environment variables, permissions and timezones.
 
-
 ```
   - variable: timezone
     group: "Configuration"
@@ -135,30 +113,6 @@ They are called general options, because they affect the basic functionalities o
       $ref:
         - "definitions/timezone"
 
-  - variable: PUID
-    group: "Configuration"
-    label: "PUID"
-    description: "The UserID of the user running the application and owning the files"
-    schema:
-      type: int
-      default: 568
-
-  - variable: PGID
-    group: "Configuration"
-    label: "PGID"
-    description: "The groupID of the user/group running the application and owning the files"
-    schema:
-      type: int
-      default: 568
-
-  - variable: UMASK
-    group: "Configuration"
-    label: "UMASK (advanced)"
-    description: "The UMASK used if supported by the application"
-    schema:
-      type: string
-      default: "002"
-
   # Configure Custom Enviroment Variables
   - variable: environmentVariables
     label: "Image environment"
@@ -181,3 +135,41 @@ They are called general options, because they affect the basic functionalities o
                 schema:
                   type: string
 ```
+
+And at the bottom some advanced settings:
+```
+  - variable: PUID
+    group: "Advanced"
+    label: "Common Group ID"
+    description: "The UserID of the user running any included common chart-based pods"
+    schema:
+      type: int
+      default: 568
+
+  - variable: PGID
+    group: "Advanced"
+    label: "Storage and Common Group ID"
+    description: "The groupID of the user/group running any included common chart-based pods and owning the files!"
+    schema:
+      type: int
+      default: 568
+  - variable: UMASK
+    group: "Advanced"
+    label: "UMASK (Common Chart)"
+    description: "The UMASK used (if supported) by any included common chart-based pod"
+    schema:
+      type: string
+      default: "002"
+  # Enable privileged
+  - variable: securityContext
+    group: "Advanced"
+    label: "Security Context"
+    schema:
+      type: dict
+      attrs:
+        - variable: privileged
+          label: "Enable privileged mode for Common-Chart based charts"
+          schema:
+            type: boolean
+            default: false
+```

incubator/bazarr/3.0.0/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: common
   repository: https://truecharts.org/
-  version: 2.2.2
+  version: 3.0.1
-digest: sha256:82ffcab0ecb2e23d6a8a775fb2408906a40bcde3379d5575cb54542ed16aa596
+digest: sha256:872003df28f67815271ff4716b856a152b06a170fe98bdbceebf29dbe6c229a5
-generated: "2021-04-12T17:36:58.971307339Z"
+generated: "2021-04-14T20:31:45.0158237+02:00"

incubator/bazarr/3.0.0/Chart.yaml

@@ -24,7 +24,7 @@ sources:
 dependencies:
   - name: common
     repository: https://truecharts.org/
-    version: 2.2.2
+    version: 3.0.1
     # condition:
 maintainers:
   - name: TrueCharts

incubator/bazarr/3.0.0/questions.yaml

@@ -17,7 +17,6 @@ groups:
     description: "Advanced Configuration"
   - name: "WARNING"
     description: "WARNING"
-
 portals:
   web_portal:
     protocols:
@@ -26,9 +25,7 @@ portals:
       - "$kubernetes-resource_configmap_portal_host"
     ports:
       - "$kubernetes-resource_configmap_portal_port"
-
 questions:
-
   - variable: portal
     group: "Container Image"
     label: "Configure Portal Button"
@@ -45,7 +42,6 @@ questions:
             type: boolean
             default: true
 
-
   # Update Policy
   - variable: strategyType
     group: "Container Image"
@@ -58,8 +54,6 @@ questions:
           description: "Create new pods and then kill old ones"
         - value: "Recreate"
           description: "Kill existing pods before creating new ones"
-
-  # Configure Time Zone
   # Configure Time Zone
   - variable: timezone
     group: "Container Image"
@@ -70,30 +64,6 @@ questions:
       $ref:
         - "definitions/timezone"
 
-  - variable: PUID
-    group: "Container Image"
-    label: "PUID"
-    description: "The UserID of the user running the application and owning the files"
-    schema:
-      type: int
-      default: 568
-
-  - variable: PGID
-    group: "Container Image"
-    label: "PGID"
-    description: "The groupID of the user/group running the application and owning the files"
-    schema:
-      type: int
-      default: 568
-
-  - variable: UMASK
-    group: "Container Image"
-    label: "UMASK (advanced)"
-    description: "The UMASK used if supported by the application"
-    schema:
-      type: string
-      default: "002"
-
   # Configure Enviroment Variables
   - variable: environmentVariables
     label: "Image environment"
@@ -115,7 +85,6 @@ questions:
                 label: "Value"
                 schema:
                   type: string
-
   # Enable Host Networking
   - variable: hostNetwork
     group: "Networking"
@@ -123,7 +92,6 @@ questions:
     schema:
       type: boolean
       default: false
-
   - variable: services
     group: "Networking"
     label: "Configure Service"
@@ -193,9 +161,7 @@ questions:
                         max: 65535
                         default: 36052
                         required: true
-
 ## TrueCharts Specific
-
   - variable: persistence
     label: "Integrated Persistent Storage"
     description: "Websocket Service"
@@ -255,8 +221,7 @@ questions:
                 schema:
                   type: string
                   default: "100Gi"
-
+  - variable: customStorage
-  - variable: additionalAppVolumeMounts
     label: "Custom app storage"
     group: "Storage"
     schema:
@@ -316,7 +281,6 @@ questions:
                 schema:
                   type: hostpath
                   required: true
-
   - variable: ingress
     label: ""
     group: "Reverse Proxy Configuration"
@@ -406,3 +370,75 @@ questions:
                       schema:
                         type: string
                         default: ""
+
+  - variable: UMASK
+    group: "Advanced"
+    label: "UMASK"
+    description: "Sets the UMASK env var for LinuxServer.io (compatible) containers"
+    schema:
+      type: string
+      default: "002"
+  # Enable privileged
+  - variable: securityContext
+    group: "Advanced"
+    label: "Security Context"
+    schema:
+      type: dict
+      attrs:
+        - variable: privileged
+          label: "Enable privileged mode for Common-Chart based charts"
+          schema:
+            type: boolean
+            default: false
+  # Set Pod Security Policy
+  - variable: podSecurityContext
+    group: "Advanced"
+    label: "Pod Security Context"
+    schema:
+      type: dict
+      attrs:
+        - variable: runAsNonRoot
+          label: "runAsNonRoot"
+          schema:
+            type: boolean
+            default: true
+        - variable: runAsUser
+          label: "runAsUser"
+          description: "The UserID of the user running the application"
+          schema:
+            type: int
+            default: 568
+        - variable: runAsGroup
+          label: "runAsGroup"
+          description: The groupID this App of the user running the application"
+          schema:
+            type: int
+            default: 568
+        - variable: supplementalGroups
+          label: "supplementalGroups"
+          description: "Additional groups this App needs access to"
+          schema:
+            type: list
+            default: []
+            items:
+              - variable: Group
+                label: "Group"
+                schema:
+                  type: int
+                  default: 568
+        - variable: fsGroup
+          label: "fsGroup"
+          description: "The group that should own ALL storage."
+          schema:
+            type: int
+            default: 568
+        - variable: fsGroupChangePolicy
+          label: "When should we take ownership?"
+          schema:
+            type: string
+            default: "OnRootMismatch"
+            enum:
+              - value: "OnRootMismatch"
+                description: "OnRootMismatch"
+              - value: "Always"
+                description: "Always"

incubator/calibre-web/3.0.0/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: common
   repository: https://truecharts.org/
-  version: 2.2.2
+  version: 3.0.1
-digest: sha256:82ffcab0ecb2e23d6a8a775fb2408906a40bcde3379d5575cb54542ed16aa596
+digest: sha256:872003df28f67815271ff4716b856a152b06a170fe98bdbceebf29dbe6c229a5
-generated: "2021-04-12T17:36:56.536227173Z"
+generated: "2021-04-14T20:31:48.8911283+02:00"

incubator/calibre-web/3.0.0/Chart.yaml

@@ -21,7 +21,7 @@ sources:
 dependencies:
   - name: common
     repository: https://truecharts.org/
-    version: 2.2.2
+    version: 3.0.1
     # condition:
 maintainers:
   - name: TrueCharts

incubator/calibre-web/3.0.0/ix_values.yaml

@@ -9,7 +9,6 @@ image:
   pullPolicy: IfNotPresent
   tag: version-0.6.11
 
-startAsRoot: true
 
 ##
 # Most other defaults are set in questions.yaml

incubator/calibre-web/3.0.0/questions.yaml

@@ -17,7 +17,6 @@ groups:
     description: "Advanced Configuration"
   - name: "WARNING"
     description: "WARNING"
-
 portals:
   web_portal:
     protocols:
@@ -26,9 +25,7 @@ portals:
       - "$kubernetes-resource_configmap_portal_host"
     ports:
       - "$kubernetes-resource_configmap_portal_port"
-
 questions:
-
   - variable: portal
     group: "Container Image"
     label: "Configure Portal Button"
@@ -44,7 +41,6 @@ questions:
             editable: false
             type: boolean
             default: true
-
   # Update Policy
   - variable: strategyType
     group: "Container Image"
@@ -57,8 +53,6 @@ questions:
           description: "Create new pods and then kill old ones"
         - value: "Recreate"
           description: "Kill existing pods before creating new ones"
-
-  # Configure Time Zone
   # Configure Time Zone
   - variable: timezone
     group: "Container Image"
@@ -69,30 +63,6 @@ questions:
       $ref:
         - "definitions/timezone"
 
-  - variable: PUID
-    group: "Container Image"
-    label: "PUID"
-    description: "The UserID of the user running the application and owning the files"
-    schema:
-      type: int
-      default: 568
-
-  - variable: PGID
-    group: "Container Image"
-    label: "PGID"
-    description: "The groupID of the user/group running the application and owning the files"
-    schema:
-      type: int
-      default: 568
-
-  - variable: UMASK
-    group: "Container Image"
-    label: "UMASK (advanced)"
-    description: "The UMASK used if supported by the application"
-    schema:
-      type: string
-      default: "002"
-
   # Configure Enviroment Variables
   - variable: environmentVariables
     label: "Image environment"
@@ -114,7 +84,6 @@ questions:
                 label: "Value"
                 schema:
                   type: string
-
   # Enable Host Networking
   - variable: hostNetwork
     group: "Networking"
@@ -122,7 +91,6 @@ questions:
     schema:
       type: boolean
       default: false
-
   - variable: services
     group: "Networking"
     label: "Configure Service"
@@ -192,9 +160,7 @@ questions:
                         max: 65535
                         default: 36052
                         required: true
-
 ## TrueCharts Specific
-
   - variable: persistence
     label: "Integrated Persistent Storage"
     description: "Websocket Service"
@@ -254,8 +220,7 @@ questions:
                 schema:
                   type: string
                   default: "100Gi"
-
+  - variable: customStorage
-  - variable: additionalAppVolumeMounts
     label: "Custom app storage"
     group: "Storage"
     schema:
@@ -315,7 +280,6 @@ questions:
                 schema:
                   type: hostpath
                   required: true
-
   - variable: ingress
     label: ""
     group: "Reverse Proxy Configuration"
@@ -405,3 +369,89 @@ questions:
                       schema:
                         type: string
                         default: ""
+  - variable: PUID
+    group: "Advanced"
+    label: "PUID"
+    description: "Sets the PUID env var for LinuxServer.io (compatible) containers"
+    schema:
+      type: int
+      default: 568
+
+  - variable: PGID
+    group: "Advanced"
+    label: "PGID"
+    description: "Sets the PGID env var for LinuxServer.io (compatible) containers"
+    schema:
+      type: int
+      default: 568
+  - variable: UMASK
+    group: "Advanced"
+    label: "UMASK"
+    description: "Sets the UMASK env var for LinuxServer.io (compatible) containers"
+    schema:
+      type: string
+      default: "002"
+  # Enable privileged
+  - variable: securityContext
+    group: "Advanced"
+    label: "Security Context"
+    schema:
+      type: dict
+      attrs:
+        - variable: privileged
+          label: "Enable privileged mode for Common-Chart based charts"
+          schema:
+            type: boolean
+            default: false
+  # Set Pod Security Policy
+  - variable: podSecurityContext
+    group: "Advanced"
+    label: "Pod Security Context"
+    schema:
+      type: dict
+      attrs:
+        - variable: runAsNonRoot
+          label: "runAsNonRoot"
+          schema:
+            type: boolean
+            default: false
+        - variable: runAsUser
+          label: "runAsUser"
+          description: "The UserID of the user running the application"
+          schema:
+            type: int
+            default: 0
+        - variable: runAsGroup
+          label: "runAsGroup"
+          description: The groupID this App of the user running the application"
+          schema:
+            type: int
+            default: 0
+        - variable: supplementalGroups
+          label: "supplementalGroups"
+          description: "Additional groups this App needs access to"
+          schema:
+            type: list
+            default: []
+            items:
+              - variable: Group
+                label: "Group"
+                schema:
+                  type: int
+                  default: 568
+        - variable: fsGroup
+          label: "fsGroup"
+          description: "The group that should own ALL storage."
+          schema:
+            type: int
+            default: 568
+        - variable: fsGroupChangePolicy
+          label: "When should we take ownership?"
+          schema:
+            type: string
+            default: "OnRootMismatch"
+            enum:
+              - value: "OnRootMismatch"
+                description: "OnRootMismatch"
+              - value: "Always"
+                description: "Always"

incubator/calibre-web/3.0.0/templates/NOTES.txt

@@ -1 +0,0 @@
-{{- include "common.notes.defaultNotes" . -}}

incubator/calibre-web/3.0.0/test_values.yaml

@@ -8,7 +8,12 @@ image:
 strategy:
   type: Recreate
 
-startAsRoot: true
+# Configure the Security Context for the Pod
+podSecurityContext:
+  runAsNonRoot: false
+  runAsUser: 0
+  runAsGroup: 0
+  fsGroup: 0
 
 services:
   main:

incubator/deluge/3.0.0/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: common
   repository: https://truecharts.org/
-  version: 2.2.2
+  version: 3.0.1
-digest: sha256:82ffcab0ecb2e23d6a8a775fb2408906a40bcde3379d5575cb54542ed16aa596
+digest: sha256:872003df28f67815271ff4716b856a152b06a170fe98bdbceebf29dbe6c229a5
-generated: "2021-04-12T17:36:53.244051716Z"
+generated: "2021-04-14T20:31:52.2231949+02:00"

incubator/deluge/3.0.0/Chart.yaml

@@ -19,7 +19,7 @@ sources:
 dependencies:
   - name: common
     repository: https://truecharts.org/
-    version: 2.2.2
+    version: 3.0.1
     # condition:
 maintainers:
   - name: TrueCharts

incubator/deluge/3.0.0/ix_values.yaml

@@ -9,7 +9,6 @@ image:
   pullPolicy: IfNotPresent
   tag: version-2.0.3-2201906121747ubuntu18.04.1
 
-startAsRoot: true
 
 ##
 # Most other defaults are set in questions.yaml

incubator/deluge/3.0.0/questions.yaml

@@ -15,7 +15,6 @@ groups:
     description: "Reverse Proxy configuration"
   - name: "Advanced"
     description: "Advanced Configuration"
-
 portals:
   web_portal:
     protocols:
@@ -24,9 +23,7 @@ portals:
       - "$kubernetes-resource_configmap_portal_host"
     ports:
       - "$kubernetes-resource_configmap_portal_port"
-
 questions:
-
 ## Portal Button
   - variable: portal
     group: "Container Image"
@@ -43,7 +40,6 @@ questions:
             editable: false
             type: boolean
             default: true
-
 ## Update Policy
   - variable: strategyType
     group: "Container Image"
@@ -56,7 +52,6 @@ questions:
           description: "Create new pods and then kill old ones"
         - value: "Recreate"
           description: "Kill existing pods before creating new ones"
-
 ## Configure Time Zone
   - variable: timezone
     group: "Container Image"
@@ -67,30 +62,6 @@ questions:
       $ref:
         - "definitions/timezone"
 
-  - variable: PUID
-    group: "Container Image"
-    label: "PUID"
-    description: "The UserID of the user running the application and owning the files"
-    schema:
-      type: int
-      default: 568
-
-  - variable: GUID
-    group: "Container Image"
-    label: "GUID"
-    description: "The groupID of the user/group running the application and owning the files"
-    schema:
-      type: int
-      default: 568
-
-  - variable: UMASK
-    group: "Container Image"
-    label: "UMASK (advanced)"
-    description: "The UMASK used if supported by the application"
-    schema:
-      type: string
-      default: "002"
-
 ## Configure Enviroment Variables
   - variable: environmentVariables
     label: "Image environment"
@@ -112,7 +83,6 @@ questions:
                 label: "Value"
                 schema:
                   type: string
-
 ## Enable Host Network
   - variable: hostNetwork
     group: "Networking"
@@ -120,7 +90,6 @@ questions:
     schema:
       type: boolean
       default: false
-
   - variable: persistence
     label: "Integrated Persistent Storage"
     description: "Websocket Service"
@@ -180,8 +149,7 @@ questions:
                 schema:
                   type: string
                   default: "100Gi"
-
+  - variable: customStorage
-  - variable: additionalAppVolumeMounts
     label: "Custom app storage"
     group: "Storage"
     schema:
@@ -241,7 +209,6 @@ questions:
                 schema:
                   type: hostpath
                   required: true
-
   - variable: services
     group: "Networking"
     label: "Configure Service"
@@ -434,7 +401,6 @@ questions:
                         default: 51413
                         required: false
 
-
 ## Ingres
   - variable: ingress
     label: ""
@@ -525,3 +491,89 @@ questions:
                       schema:
                         type: string
                         default: ""
+  - variable: PUID
+    group: "Advanced"
+    label: "PUID"
+    description: "Sets the PUID env var for LinuxServer.io (compatible) containers"
+    schema:
+      type: int
+      default: 568
+
+  - variable: PGID
+    group: "Advanced"
+    label: "PGID"
+    description: "Sets the PGID env var for LinuxServer.io (compatible) containers"
+    schema:
+      type: int
+      default: 568
+  - variable: UMASK
+    group: "Advanced"
+    label: "UMASK"
+    description: "Sets the UMASK env var for LinuxServer.io (compatible) containers"
+    schema:
+      type: string
+      default: "002"
+  # Enable privileged
+  - variable: securityContext
+    group: "Advanced"
+    label: "Security Context"
+    schema:
+      type: dict
+      attrs:
+        - variable: privileged
+          label: "Enable privileged mode for Common-Chart based charts"
+          schema:
+            type: boolean
+            default: false
+  # Set Pod Security Policy
+  - variable: podSecurityContext
+    group: "Advanced"
+    label: "Pod Security Context"
+    schema:
+      type: dict
+      attrs:
+        - variable: runAsNonRoot
+          label: "runAsNonRoot"
+          schema:
+            type: boolean
+            default: false
+        - variable: runAsUser
+          label: "runAsUser"
+          description: "The UserID of the user running the application"
+          schema:
+            type: int
+            default: 0
+        - variable: runAsGroup
+          label: "runAsGroup"
+          description: The groupID this App of the user running the application"
+          schema:
+            type: int
+            default: 0
+        - variable: supplementalGroups
+          label: "supplementalGroups"
+          description: "Additional groups this App needs access to"
+          schema:
+            type: list
+            default: []
+            items:
+              - variable: Group
+                label: "Group"
+                schema:
+                  type: int
+                  default: 568
+        - variable: fsGroup
+          label: "fsGroup"
+          description: "The group that should own ALL storage."
+          schema:
+            type: int
+            default: 568
+        - variable: fsGroupChangePolicy
+          label: "When should we take ownership?"
+          schema:
+            type: string
+            default: "OnRootMismatch"
+            enum:
+              - value: "OnRootMismatch"
+                description: "OnRootMismatch"
+              - value: "Always"
+                description: "Always"

incubator/deluge/3.0.0/test_values.yaml

@@ -8,7 +8,12 @@ image:
 strategy:
   type: Recreate
 
-startAsRoot: true
+# Configure the Security Context for the Pod
+podSecurityContext:
+  runAsNonRoot: false
+  runAsUser: 0
+  runAsGroup: 0
+  fsGroup: 0
 
 services:
   main:

incubator/freshrss/3.0.0/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: common
   repository: https://truecharts.org/
-  version: 2.2.2
+  version: 3.0.1
-digest: sha256:82ffcab0ecb2e23d6a8a775fb2408906a40bcde3379d5575cb54542ed16aa596
+digest: sha256:872003df28f67815271ff4716b856a152b06a170fe98bdbceebf29dbe6c229a5
-generated: "2021-04-12T17:36:50.794695939Z"
+generated: "2021-04-14T20:31:55.5380348+02:00"

incubator/freshrss/3.0.0/Chart.yaml

@@ -20,7 +20,7 @@ sources:
 dependencies:
   - name: common
     repository: https://truecharts.org/
-    version: 2.2.2
+    version: 3.0.1
     # condition:
 maintainers:
   - name: TrueCharts

incubator/freshrss/3.0.0/ix_values.yaml

@@ -9,7 +9,6 @@ image:
   pullPolicy: IfNotPresent
   tag: version-1.18.0
 
-startAsRoot: true
 
 ##
 # Most other defaults are set in questions.yaml

incubator/freshrss/3.0.0/questions.yaml

@@ -17,7 +17,6 @@ groups:
     description: "Advanced Configuration"
   - name: "WARNING"
     description: "WARNING"
-
 portals:
   web_portal:
     protocols:
@@ -26,9 +25,7 @@ portals:
       - "$kubernetes-resource_configmap_portal_host"
     ports:
       - "$kubernetes-resource_configmap_portal_port"
-
 questions:
-
   - variable: portal
     group: "Container Image"
     label: "Configure Portal Button"
@@ -45,7 +42,6 @@ questions:
             type: boolean
             default: true
 
-
   # Update Policy
   - variable: strategyType
     group: "Container Image"
@@ -58,8 +54,6 @@ questions:
           description: "Create new pods and then kill old ones"
         - value: "Recreate"
           description: "Kill existing pods before creating new ones"
-
-  # Configure Time Zone
   # Configure Time Zone
   - variable: timezone
     group: "Container Image"
@@ -70,30 +64,6 @@ questions:
       $ref:
         - "definitions/timezone"
 
-  - variable: PUID
-    group: "Container Image"
-    label: "PUID"
-    description: "The UserID of the user running the application and owning the files"
-    schema:
-      type: int
-      default: 568
-
-  - variable: PGID
-    group: "Container Image"
-    label: "PGID"
-    description: "The groupID of the user/group running the application and owning the files"
-    schema:
-      type: int
-      default: 568
-
-  - variable: UMASK
-    group: "Container Image"
-    label: "UMASK (advanced)"
-    description: "The UMASK used if supported by the application"
-    schema:
-      type: string
-      default: "002"
-
   # Configure Enviroment Variables
   - variable: environmentVariables
     label: "Image environment"
@@ -115,7 +85,6 @@ questions:
                 label: "Value"
                 schema:
                   type: string
-
   # Enable Host Networking
   - variable: hostNetwork
     group: "Networking"
@@ -123,7 +92,6 @@ questions:
     schema:
       type: boolean
       default: false
-
   - variable: services
     group: "Networking"
     label: "Configure Service"
@@ -193,9 +161,7 @@ questions:
                         max: 65535
                         default: 36052
                         required: true
-
 ## TrueCharts Specific
-
   - variable: persistence
     label: "Integrated Persistent Storage"
     description: "Websocket Service"
@@ -256,9 +222,7 @@ questions:
                   type: string
                   default: "100Gi"
 
-
+  - variable: customStorage
-
-  - variable: additionalAppVolumeMounts
     label: "Custom app storage"
     group: "Storage"
     schema:
@@ -318,7 +282,6 @@ questions:
                 schema:
                   type: hostpath
                   required: true
-
   - variable: ingress
     label: ""
     group: "Reverse Proxy Configuration"
@@ -408,3 +371,89 @@ questions:
                       schema:
                         type: string
                         default: ""
+  - variable: PUID
+    group: "Advanced"
+    label: "PUID"
+    description: "Sets the PUID env var for LinuxServer.io (compatible) containers"
+    schema:
+      type: int
+      default: 568
+
+  - variable: PGID
+    group: "Advanced"
+    label: "PGID"
+    description: "Sets the PGID env var for LinuxServer.io (compatible) containers"
+    schema:
+      type: int
+      default: 568
+  - variable: UMASK
+    group: "Advanced"
+    label: "UMASK"
+    description: "Sets the UMASK env var for LinuxServer.io (compatible) containers"
+    schema:
+      type: string
+      default: "002"
+  # Enable privileged
+  - variable: securityContext
+    group: "Advanced"
+    label: "Security Context"
+    schema:
+      type: dict
+      attrs:
+        - variable: privileged
+          label: "Enable privileged mode for Common-Chart based charts"
+          schema:
+            type: boolean
+            default: false
+  # Set Pod Security Policy
+  - variable: podSecurityContext
+    group: "Advanced"
+    label: "Pod Security Context"
+    schema:
+      type: dict
+      attrs:
+        - variable: runAsNonRoot
+          label: "runAsNonRoot"
+          schema:
+            type: boolean
+            default: false
+        - variable: runAsUser
+          label: "runAsUser"
+          description: "The UserID of the user running the application"
+          schema:
+            type: int
+            default: 0
+        - variable: runAsGroup
+          label: "runAsGroup"
+          description: The groupID this App of the user running the application"
+          schema:
+            type: int
+            default: 0
+        - variable: supplementalGroups
+          label: "supplementalGroups"
+          description: "Additional groups this App needs access to"
+          schema:
+            type: list
+            default: []
+            items:
+              - variable: Group
+                label: "Group"
+                schema:
+                  type: int
+                  default: 568
+        - variable: fsGroup
+          label: "fsGroup"
+          description: "The group that should own ALL storage."
+          schema:
+            type: int
+            default: 568
+        - variable: fsGroupChangePolicy
+          label: "When should we take ownership?"
+          schema:
+            type: string
+            default: "OnRootMismatch"
+            enum:
+              - value: "OnRootMismatch"
+                description: "OnRootMismatch"
+              - value: "Always"
+                description: "Always"

incubator/freshrss/3.0.0/templates/NOTES.txt

@@ -1 +0,0 @@
-{{- include "common.notes.defaultNotes" . -}}

incubator/freshrss/3.0.0/test_values.yaml

@@ -8,7 +8,12 @@ image:
 strategy:
   type: Recreate
 
-startAsRoot: true
+# Configure the Security Context for the Pod
+podSecurityContext:
+  runAsNonRoot: false
+  runAsUser: 0
+  runAsGroup: 0
+  fsGroup: 0
 
 services:
   main:

incubator/gaps/3.0.0/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: common
   repository: https://truecharts.org/
-  version: 2.2.2
+  version: 3.0.1
-digest: sha256:82ffcab0ecb2e23d6a8a775fb2408906a40bcde3379d5575cb54542ed16aa596
+digest: sha256:872003df28f67815271ff4716b856a152b06a170fe98bdbceebf29dbe6c229a5
-generated: "2021-04-12T17:36:48.368410137Z"
+generated: "2021-04-14T20:31:59.0406923+02:00"

incubator/gaps/3.0.0/Chart.yaml

@@ -20,7 +20,7 @@ sources:
 dependencies:
   - name: common
     repository: https://truecharts.org/
-    version: 2.2.2
+    version: 3.0.1
     # condition:
 maintainers:
   - name: TrueCharts

incubator/gaps/3.0.0/questions.yaml

@@ -17,7 +17,6 @@ groups:
     description: "Advanced Configuration"
   - name: "WARNING"
     description: "WARNING"
-
 portals:
   web_portal:
     protocols:
@@ -26,9 +25,7 @@ portals:
       - "$kubernetes-resource_configmap_portal_host"
     ports:
       - "$kubernetes-resource_configmap_portal_port"
-
 questions:
-
   - variable: portal
     group: "Container Image"
     label: "Configure Portal Button"
@@ -45,7 +42,6 @@ questions:
             type: boolean
             default: true
 
-
   # Update Policy
   - variable: strategyType
     group: "Container Image"
@@ -58,8 +54,6 @@ questions:
           description: "Create new pods and then kill old ones"
         - value: "Recreate"
           description: "Kill existing pods before creating new ones"
-
-  # Configure Time Zone
   # Configure Time Zone
   - variable: timezone
     group: "Container Image"
@@ -70,30 +64,6 @@ questions:
       $ref:
         - "definitions/timezone"
 
-  - variable: PUID
-    group: "Container Image"
-    label: "PUID"
-    description: "The UserID of the user running the application and owning the files"
-    schema:
-      type: int
-      default: 568
-
-  - variable: PGID
-    group: "Container Image"
-    label: "PGID"
-    description: "The groupID of the user/group running the application and owning the files"
-    schema:
-      type: int
-      default: 568
-
-  - variable: UMASK
-    group: "Container Image"
-    label: "UMASK (advanced)"
-    description: "The UMASK used if supported by the application"
-    schema:
-      type: string
-      default: "002"
-
   # Configure Enviroment Variables
   - variable: environmentVariables
     label: "Image environment"
@@ -115,7 +85,6 @@ questions:
                 label: "Value"
                 schema:
                   type: string
-
   # Enable Host Networking
   - variable: hostNetwork
     group: "Networking"
@@ -123,7 +92,6 @@ questions:
     schema:
       type: boolean
       default: false
-
   - variable: services
     group: "Networking"
     label: "Configure Service"
@@ -193,7 +161,6 @@ questions:
                         max: 65535
                         default: 36052
                         required: true
-
   - variable: persistence
     label: "Integrated Persistent Storage"
     description: "Websocket Service"
@@ -255,9 +222,7 @@ questions:
                   default: "100Gi"
 
 
-
+  - variable: customStorage
-
-  - variable: additionalAppVolumeMounts
     label: "Custom app storage"
     group: "Storage"
     schema:
@@ -317,7 +282,6 @@ questions:
                 schema:
                   type: hostpath
                   required: true
-
   - variable: ingress
     label: ""
     group: "Reverse Proxy Configuration"
@@ -407,3 +371,75 @@ questions:
                       schema:
                         type: string
                         default: ""
+
+  - variable: UMASK
+    group: "Advanced"
+    label: "UMASK"
+    description: "Sets the UMASK env var for LinuxServer.io (compatible) containers"
+    schema:
+      type: string
+      default: "002"
+  # Enable privileged
+  - variable: securityContext
+    group: "Advanced"
+    label: "Security Context"
+    schema:
+      type: dict
+      attrs:
+        - variable: privileged
+          label: "Enable privileged mode for Common-Chart based charts"
+          schema:
+            type: boolean
+            default: false
+  # Set Pod Security Policy
+  - variable: podSecurityContext
+    group: "Advanced"
+    label: "Pod Security Context"
+    schema:
+      type: dict
+      attrs:
+        - variable: runAsNonRoot
+          label: "runAsNonRoot"
+          schema:
+            type: boolean
+            default: true
+        - variable: runAsUser
+          label: "runAsUser"
+          description: "The UserID of the user running the application"
+          schema:
+            type: int
+            default: 568
+        - variable: runAsGroup
+          label: "runAsGroup"
+          description: The groupID this App of the user running the application"
+          schema:
+            type: int
+            default: 568
+        - variable: supplementalGroups
+          label: "supplementalGroups"
+          description: "Additional groups this App needs access to"
+          schema:
+            type: list
+            default: []
+            items:
+              - variable: Group
+                label: "Group"
+                schema:
+                  type: int
+                  default: 568
+        - variable: fsGroup
+          label: "fsGroup"
+          description: "The group that should own ALL storage."
+          schema:
+            type: int
+            default: 568
+        - variable: fsGroupChangePolicy
+          label: "When should we take ownership?"
+          schema:
+            type: string
+            default: "OnRootMismatch"
+            enum:
+              - value: "OnRootMismatch"
+                description: "OnRootMismatch"
+              - value: "Always"
+                description: "Always"

incubator/gaps/3.0.0/templates/NOTES.txt

@@ -1 +0,0 @@
-{{- include "common.notes.defaultNotes" . -}}

incubator/grocy/3.0.0/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: common
   repository: https://truecharts.org/
-  version: 2.2.2
+  version: 3.0.1
-digest: sha256:82ffcab0ecb2e23d6a8a775fb2408906a40bcde3379d5575cb54542ed16aa596
+digest: sha256:872003df28f67815271ff4716b856a152b06a170fe98bdbceebf29dbe6c229a5
-generated: "2021-04-12T17:36:42.776541998Z"
+generated: "2021-04-14T20:32:02.5856293+02:00"

incubator/grocy/3.0.0/Chart.yaml

@@ -18,7 +18,7 @@ sources:
 dependencies:
   - name: common
     repository: https://truecharts.org/
-    version: 2.2.2
+    version: 3.0.1
     # condition:
 maintainers:
   - name: TrueCharts

incubator/grocy/3.0.0/ix_values.yaml

@@ -9,7 +9,6 @@ image:
   tag: version-v2.7.1
   pullPolicy: IfNotPresent
 
-startAsRoot: true
 
 ##
 # Most other defaults are set in questions.yaml

incubator/grocy/3.0.0/questions.yaml

@@ -17,7 +17,6 @@ groups:
     description: "Advanced Configuration"
   - name: "WARNING"
     description: "WARNING"
-
 portals:
   web_portal:
     protocols:
@@ -26,9 +25,7 @@ portals:
       - "$kubernetes-resource_configmap_portal_host"
     ports:
       - "$kubernetes-resource_configmap_portal_port"
-
 questions:
-
   - variable: portal
     group: "Container Image"
     label: "Configure Portal Button"
@@ -45,7 +42,6 @@ questions:
             type: boolean
             default: true
 
-
   # Update Policy
   - variable: strategyType
     group: "Container Image"
@@ -58,8 +54,6 @@ questions:
           description: "Create new pods and then kill old ones"
         - value: "Recreate"
           description: "Kill existing pods before creating new ones"
-
-  # Configure Time Zone
   # Configure Time Zone
   - variable: timezone
     group: "Container Image"
@@ -70,30 +64,6 @@ questions:
       $ref:
         - "definitions/timezone"
 
-  - variable: PUID
-    group: "Container Image"
-    label: "PUID"
-    description: "The UserID of the user running the application and owning the files"
-    schema:
-      type: int
-      default: 568
-
-  - variable: PGID
-    group: "Container Image"
-    label: "PGID"
-    description: "The groupID of the user/group running the application and owning the files"
-    schema:
-      type: int
-      default: 568
-
-  - variable: UMASK
-    group: "Container Image"
-    label: "UMASK (advanced)"
-    description: "The UMASK used if supported by the application"
-    schema:
-      type: string
-      default: "002"
-
   # Configure Enviroment Variables
   - variable: environmentVariables
     label: "Image environment"
@@ -115,7 +85,6 @@ questions:
                 label: "Value"
                 schema:
                   type: string
-
   # Enable Host Networking
   - variable: hostNetwork
     group: "Networking"
@@ -123,7 +92,6 @@ questions:
     schema:
       type: boolean
       default: false
-
   - variable: services
     group: "Networking"
     label: "Configure Service"
@@ -193,7 +161,6 @@ questions:
                         max: 65535
                         default: 36052
                         required: true
-
   - variable: persistence
     label: "Integrated Persistent Storage"
     description: "Websocket Service"
@@ -253,8 +220,7 @@ questions:
                 schema:
                   type: string
                   default: "100Gi"
-
+  - variable: customStorage
-  - variable: additionalAppVolumeMounts
     label: "Custom app storage"
     group: "Storage"
     schema:
@@ -314,7 +280,6 @@ questions:
                 schema:
                   type: hostpath
                   required: true
-
   - variable: ingress
     label: ""
     group: "Reverse Proxy Configuration"
@@ -404,3 +369,89 @@ questions:
                       schema:
                         type: string
                         default: ""
+  - variable: PUID
+    group: "Advanced"
+    label: "PUID"
+    description: "Sets the PUID env var for LinuxServer.io (compatible) containers"
+    schema:
+      type: int
+      default: 568
+
+  - variable: PGID
+    group: "Advanced"
+    label: "PGID"
+    description: "Sets the PGID env var for LinuxServer.io (compatible) containers"
+    schema:
+      type: int
+      default: 568
+  - variable: UMASK
+    group: "Advanced"
+    label: "UMASK"
+    description: "Sets the UMASK env var for LinuxServer.io (compatible) containers"
+    schema:
+      type: string
+      default: "002"
+  # Enable privileged
+  - variable: securityContext
+    group: "Advanced"
+    label: "Security Context"
+    schema:
+      type: dict
+      attrs:
+        - variable: privileged
+          label: "Enable privileged mode for Common-Chart based charts"
+          schema:
+            type: boolean
+            default: false
+  # Set Pod Security Policy
+  - variable: podSecurityContext
+    group: "Advanced"
+    label: "Pod Security Context"
+    schema:
+      type: dict
+      attrs:
+        - variable: runAsNonRoot
+          label: "runAsNonRoot"
+          schema:
+            type: boolean
+            default: false
+        - variable: runAsUser
+          label: "runAsUser"
+          description: "The UserID of the user running the application"
+          schema:
+            type: int
+            default: 0
+        - variable: runAsGroup
+          label: "runAsGroup"
+          description: The groupID this App of the user running the application"
+          schema:
+            type: int
+            default: 0
+        - variable: supplementalGroups
+          label: "supplementalGroups"
+          description: "Additional groups this App needs access to"
+          schema:
+            type: list
+            default: []
+            items:
+              - variable: Group
+                label: "Group"
+                schema:
+                  type: int
+                  default: 568
+        - variable: fsGroup
+          label: "fsGroup"
+          description: "The group that should own ALL storage."
+          schema:
+            type: int
+            default: 568
+        - variable: fsGroupChangePolicy
+          label: "When should we take ownership?"
+          schema:
+            type: string
+            default: "OnRootMismatch"
+            enum:
+              - value: "OnRootMismatch"
+                description: "OnRootMismatch"
+              - value: "Always"
+                description: "Always"

incubator/grocy/3.0.0/test_values.yaml

@@ -8,7 +8,12 @@ image:
 strategy:
   type: Recreate
 
-startAsRoot: true
+# Configure the Security Context for the Pod
+podSecurityContext:
+  runAsNonRoot: false
+  runAsUser: 0
+  runAsGroup: 0
+  fsGroup: 0
 
 services:
   main:

incubator/heimdall/3.0.0/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: common
   repository: https://truecharts.org/
-  version: 2.2.2
+  version: 3.0.1
-digest: sha256:82ffcab0ecb2e23d6a8a775fb2408906a40bcde3379d5575cb54542ed16aa596
+digest: sha256:872003df28f67815271ff4716b856a152b06a170fe98bdbceebf29dbe6c229a5
-generated: "2021-04-12T17:36:40.372893142Z"
+generated: "2021-04-14T20:32:06.1243975+02:00"

incubator/heimdall/3.0.0/Chart.yaml

@@ -17,7 +17,7 @@ sources:
 dependencies:
   - name: common
     repository: https://truecharts.org/
-    version: 2.2.2
+    version: 3.0.1
     # condition:
 maintainers:
   - name: TrueCharts

incubator/heimdall/3.0.0/ix_values.yaml

@@ -9,7 +9,6 @@ image:
   tag: version-2.2.2
   pullPolicy: IfNotPresent
 
-startAsRoot: true
 
 ##
 # Most other defaults are set in questions.yaml

incubator/heimdall/3.0.0/questions.yaml

@@ -17,7 +17,6 @@ groups:
     description: "Advanced Configuration"
   - name: "WARNING"
     description: "WARNING"
-
 portals:
   web_portal:
     protocols:
@@ -26,9 +25,7 @@ portals:
       - "$kubernetes-resource_configmap_portal_host"
     ports:
       - "$kubernetes-resource_configmap_portal_port"
-
 questions:
-
   - variable: portal
     group: "Container Image"
     label: "Configure Portal Button"
@@ -45,7 +42,6 @@ questions:
             type: boolean
             default: true
 
-
   # Update Policy
   - variable: strategyType
     group: "Container Image"
@@ -58,8 +54,6 @@ questions:
           description: "Create new pods and then kill old ones"
         - value: "Recreate"
           description: "Kill existing pods before creating new ones"
-
-  # Configure Time Zone
   # Configure Time Zone
   - variable: timezone
     group: "Container Image"
@@ -70,30 +64,6 @@ questions:
       $ref:
         - "definitions/timezone"
 
-  - variable: PUID
-    group: "Container Image"
-    label: "PUID"
-    description: "The UserID of the user running the application and owning the files"
-    schema:
-      type: int
-      default: 568
-
-  - variable: PGID
-    group: "Container Image"
-    label: "PGID"
-    description: "The groupID of the user/group running the application and owning the files"
-    schema:
-      type: int
-      default: 568
-
-  - variable: UMASK
-    group: "Container Image"
-    label: "UMASK (advanced)"
-    description: "The UMASK used if supported by the application"
-    schema:
-      type: string
-      default: "002"
-
   # Configure Enviroment Variables
   - variable: environmentVariables
     label: "Image environment"
@@ -115,7 +85,6 @@ questions:
                 label: "Value"
                 schema:
                   type: string
-
   # Enable Host Networking
   - variable: hostNetwork
     group: "Networking"
@@ -123,7 +92,6 @@ questions:
     schema:
       type: boolean
       default: false
-
   - variable: services
     group: "Networking"
     label: "Configure Service"
@@ -193,9 +161,7 @@ questions:
                         max: 65535
                         default: 36052
                         required: true
-
 ## TrueCharts Specific
-
   - variable: persistence
     label: "Integrated Persistent Storage"
     description: "Websocket Service"
@@ -255,8 +221,7 @@ questions:
                 schema:
                   type: string
                   default: "100Gi"
-
+  - variable: customStorage
-  - variable: additionalAppVolumeMounts
     label: "Custom app storage"
     group: "Storage"
     schema:
@@ -316,7 +281,6 @@ questions:
                 schema:
                   type: hostpath
                   required: true
-
   - variable: ingress
     label: ""
     group: "Reverse Proxy Configuration"
@@ -406,3 +370,89 @@ questions:
                       schema:
                         type: string
                         default: ""
+  - variable: PUID
+    group: "Advanced"
+    label: "PUID"
+    description: "Sets the PUID env var for LinuxServer.io (compatible) containers"
+    schema:
+      type: int
+      default: 568
+
+  - variable: PGID
+    group: "Advanced"
+    label: "PGID"
+    description: "Sets the PGID env var for LinuxServer.io (compatible) containers"
+    schema:
+      type: int
+      default: 568
+  - variable: UMASK
+    group: "Advanced"
+    label: "UMASK"
+    description: "Sets the UMASK env var for LinuxServer.io (compatible) containers"
+    schema:
+      type: string
+      default: "002"
+  # Enable privileged
+  - variable: securityContext
+    group: "Advanced"
+    label: "Security Context"
+    schema:
+      type: dict
+      attrs:
+        - variable: privileged
+          label: "Enable privileged mode for Common-Chart based charts"
+          schema:
+            type: boolean
+            default: false
+  # Set Pod Security Policy
+  - variable: podSecurityContext
+    group: "Advanced"
+    label: "Pod Security Context"
+    schema:
+      type: dict
+      attrs:
+        - variable: runAsNonRoot
+          label: "runAsNonRoot"
+          schema:
+            type: boolean
+            default: false
+        - variable: runAsUser
+          label: "runAsUser"
+          description: "The UserID of the user running the application"
+          schema:
+            type: int
+            default: 0
+        - variable: runAsGroup
+          label: "runAsGroup"
+          description: The groupID this App of the user running the application"
+          schema:
+            type: int
+            default: 0
+        - variable: supplementalGroups
+          label: "supplementalGroups"
+          description: "Additional groups this App needs access to"
+          schema:
+            type: list
+            default: []
+            items:
+              - variable: Group
+                label: "Group"
+                schema:
+                  type: int
+                  default: 568
+        - variable: fsGroup
+          label: "fsGroup"
+          description: "The group that should own ALL storage."
+          schema:
+            type: int
+            default: 568
+        - variable: fsGroupChangePolicy
+          label: "When should we take ownership?"
+          schema:
+            type: string
+            default: "OnRootMismatch"
+            enum:
+              - value: "OnRootMismatch"
+                description: "OnRootMismatch"
+              - value: "Always"
+                description: "Always"

incubator/heimdall/3.0.0/test_values.yaml

@@ -8,7 +8,12 @@ image:
 strategy:
   type: Recreate
 
-startAsRoot: true
+# Configure the Security Context for the Pod
+podSecurityContext:
+  runAsNonRoot: false
+  runAsUser: 0
+  runAsGroup: 0
+  fsGroup: 0
 
 services:
   main:

incubator/lazylibrarian/3.0.0/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: common
   repository: https://truecharts.org/
-  version: 2.2.2
+  version: 3.0.1
-digest: sha256:82ffcab0ecb2e23d6a8a775fb2408906a40bcde3379d5575cb54542ed16aa596
+digest: sha256:872003df28f67815271ff4716b856a152b06a170fe98bdbceebf29dbe6c229a5
-generated: "2021-04-12T17:36:37.976599369Z"
+generated: "2021-04-14T20:32:09.6789331+02:00"

incubator/lazylibrarian/3.0.0/Chart.yaml

@@ -20,7 +20,7 @@ sources:
 dependencies:
   - name: common
     repository: https://truecharts.org/
-    version: 2.2.2
+    version: 3.0.1
     # condition:
 maintainers:
   - name: TrueCharts

incubator/lazylibrarian/3.0.0/ix_values.yaml

@@ -9,7 +9,6 @@ image:
   pullPolicy: IfNotPresent
   tag: latest
 
-startAsRoot: true
 
 ##
 # Most other defaults are set in questions.yaml

incubator/lazylibrarian/3.0.0/questions.yaml

@@ -17,7 +17,6 @@ groups:
     description: "Advanced Configuration"
   - name: "WARNING"
     description: "WARNING"
-
 portals:
   web_portal:
     protocols:
@@ -26,9 +25,7 @@ portals:
       - "$kubernetes-resource_configmap_portal_host"
     ports:
       - "$kubernetes-resource_configmap_portal_port"
-
 questions:
-
   - variable: portal
     group: "Container Image"
     label: "Configure Portal Button"
@@ -45,7 +42,6 @@ questions:
             type: boolean
             default: true
 
-
   # Update Policy
   - variable: strategyType
     group: "Container Image"
@@ -58,8 +54,6 @@ questions:
           description: "Create new pods and then kill old ones"
         - value: "Recreate"
           description: "Kill existing pods before creating new ones"
-
-  # Configure Time Zone
   # Configure Time Zone
   - variable: timezone
     group: "Container Image"
@@ -70,30 +64,6 @@ questions:
       $ref:
         - "definitions/timezone"
 
-  - variable: PUID
-    group: "Container Image"
-    label: "PUID"
-    description: "The UserID of the user running the application and owning the files"
-    schema:
-      type: int
-      default: 568
-
-  - variable: PGID
-    group: "Container Image"
-    label: "PGID"
-    description: "The groupID of the user/group running the application and owning the files"
-    schema:
-      type: int
-      default: 568
-
-  - variable: UMASK
-    group: "Container Image"
-    label: "UMASK (advanced)"
-    description: "The UMASK used if supported by the application"
-    schema:
-      type: string
-      default: "002"
-
   # Configure Enviroment Variables
   - variable: environmentVariables
     label: "Image environment"
@@ -115,7 +85,6 @@ questions:
                 label: "Value"
                 schema:
                   type: string
-
   # Enable Host Networking
   - variable: hostNetwork
     group: "Networking"
@@ -123,7 +92,6 @@ questions:
     schema:
       type: boolean
       default: false
-
   - variable: services
     group: "Networking"
     label: "Configure Service"
@@ -193,9 +161,7 @@ questions:
                         max: 65535
                         default: 36052
                         required: true
-
 ## TrueCharts Specific
-
   - variable: persistence
     label: "Integrated Persistent Storage"
     description: "Websocket Service"
@@ -256,8 +222,7 @@ questions:
                   type: string
                   default: "100Gi"
 
-
+  - variable: customStorage
-  - variable: additionalAppVolumeMounts
     label: "Custom app storage"
     group: "Storage"
     schema:
@@ -317,7 +282,6 @@ questions:
                 schema:
                   type: hostpath
                   required: true
-
   - variable: ingress
     label: ""
     group: "Reverse Proxy Configuration"
@@ -407,3 +371,89 @@ questions:
                       schema:
                         type: string
                         default: ""
+  - variable: PUID
+    group: "Advanced"
+    label: "PUID"
+    description: "Sets the PUID env var for LinuxServer.io (compatible) containers"
+    schema:
+      type: int
+      default: 568
+
+  - variable: PGID
+    group: "Advanced"
+    label: "PGID"
+    description: "Sets the PGID env var for LinuxServer.io (compatible) containers"
+    schema:
+      type: int
+      default: 568
+  - variable: UMASK
+    group: "Advanced"
+    label: "UMASK"
+    description: "Sets the UMASK env var for LinuxServer.io (compatible) containers"
+    schema:
+      type: string
+      default: "002"
+  # Enable privileged
+  - variable: securityContext
+    group: "Advanced"
+    label: "Security Context"
+    schema:
+      type: dict
+      attrs:
+        - variable: privileged
+          label: "Enable privileged mode for Common-Chart based charts"
+          schema:
+            type: boolean
+            default: false
+  # Set Pod Security Policy
+  - variable: podSecurityContext
+    group: "Advanced"
+    label: "Pod Security Context"
+    schema:
+      type: dict
+      attrs:
+        - variable: runAsNonRoot
+          label: "runAsNonRoot"
+          schema:
+            type: boolean
+            default: false
+        - variable: runAsUser
+          label: "runAsUser"
+          description: "The UserID of the user running the application"
+          schema:
+            type: int
+            default: 0
+        - variable: runAsGroup
+          label: "runAsGroup"
+          description: The groupID this App of the user running the application"
+          schema:
+            type: int
+            default: 0
+        - variable: supplementalGroups
+          label: "supplementalGroups"
+          description: "Additional groups this App needs access to"
+          schema:
+            type: list
+            default: []
+            items:
+              - variable: Group
+                label: "Group"
+                schema:
+                  type: int
+                  default: 568
+        - variable: fsGroup
+          label: "fsGroup"
+          description: "The group that should own ALL storage."
+          schema:
+            type: int
+            default: 568
+        - variable: fsGroupChangePolicy
+          label: "When should we take ownership?"
+          schema:
+            type: string
+            default: "OnRootMismatch"
+            enum:
+              - value: "OnRootMismatch"
+                description: "OnRootMismatch"
+              - value: "Always"
+                description: "Always"

incubator/lazylibrarian/3.0.0/test_values.yaml

@@ -8,7 +8,12 @@ image:
 strategy:
   type: Recreate
 
-startAsRoot: true
+# Configure the Security Context for the Pod
+podSecurityContext:
+  runAsNonRoot: false
+  runAsUser: 0
+  runAsGroup: 0
+  fsGroup: 0
 
 services:
   main:

incubator/lychee/3.0.0/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: common
   repository: https://truecharts.org/
-  version: 2.2.2
+  version: 3.0.1
-digest: sha256:82ffcab0ecb2e23d6a8a775fb2408906a40bcde3379d5575cb54542ed16aa596
+digest: sha256:872003df28f67815271ff4716b856a152b06a170fe98bdbceebf29dbe6c229a5
-generated: "2021-04-12T17:36:35.666356764Z"
+generated: "2021-04-14T20:32:13.1997849+02:00"

incubator/lychee/3.0.0/Chart.yaml

@@ -21,7 +21,7 @@ sources:
 dependencies:
   - name: common
     repository: https://truecharts.org/
-    version: 2.2.2
+    version: 3.0.1
     # condition:
 maintainers:
   - name: TrueCharts

incubator/lychee/3.0.0/ix_values.yaml

@@ -9,7 +9,6 @@ image:
   pullPolicy: IfNotPresent
   tag: v4.2.2
 
-startAsRoot: true
 
 ##
 # Most other defaults are set in questions.yaml

incubator/lychee/3.0.0/questions.yaml

@@ -17,7 +17,6 @@ groups:
     description: "Advanced Configuration"
   - name: "WARNING"
     description: "WARNING"
-
 portals:
   web_portal:
     protocols:
@@ -26,9 +25,7 @@ portals:
       - "$kubernetes-resource_configmap_portal_host"
     ports:
       - "$kubernetes-resource_configmap_portal_port"
-
 questions:
-
   - variable: portal
     group: "Container Image"
     label: "Configure Portal Button"
@@ -45,7 +42,6 @@ questions:
             type: boolean
             default: true
 
-
   # Update Policy
   - variable: strategyType
     group: "Container Image"
@@ -58,8 +54,6 @@ questions:
           description: "Create new pods and then kill old ones"
         - value: "Recreate"
           description: "Kill existing pods before creating new ones"
-
-  # Configure Time Zone
   # Configure Time Zone
   - variable: timezone
     group: "Container Image"
@@ -70,30 +64,6 @@ questions:
       $ref:
         - "definitions/timezone"
 
-  - variable: PUID
-    group: "Container Image"
-    label: "PUID"
-    description: "The UserID of the user running the application and owning the files"
-    schema:
-      type: int
-      default: 568
-
-  - variable: PGID
-    group: "Container Image"
-    label: "PGID"
-    description: "The groupID of the user/group running the application and owning the files"
-    schema:
-      type: int
-      default: 568
-
-  - variable: UMASK
-    group: "Container Image"
-    label: "UMASK (advanced)"
-    description: "The UMASK used if supported by the application"
-    schema:
-      type: string
-      default: "002"
-
   # Configure Enviroment Variables
   - variable: environmentVariables
     label: "Image environment"
@@ -115,7 +85,6 @@ questions:
                 label: "Value"
                 schema:
                   type: string
-
   # Enable Host Networking
   - variable: hostNetwork
     group: "Networking"
@@ -123,7 +92,6 @@ questions:
     schema:
       type: boolean
       default: false
-
   - variable: services
     group: "Networking"
     label: "Configure Service"
@@ -193,9 +161,7 @@ questions:
                         max: 65535
                         default: 36052
                         required: true
-
 ## TrueCharts Specific
-
   - variable: persistence
     label: "Integrated Persistent Storage"
     description: "Websocket Service"
@@ -255,8 +221,7 @@ questions:
                 schema:
                   type: string
                   default: "100Gi"
-
+  - variable: customStorage
-  - variable: additionalAppVolumeMounts
     label: "Custom app storage"
     group: "Storage"
     schema:
@@ -316,7 +281,6 @@ questions:
                 schema:
                   type: hostpath
                   required: true
-
   - variable: ingress
     label: ""
     group: "Reverse Proxy Configuration"
@@ -406,3 +370,89 @@ questions:
                       schema:
                         type: string
                         default: ""
+  - variable: PUID
+    group: "Advanced"
+    label: "PUID"
+    description: "Sets the PUID env var for LinuxServer.io (compatible) containers"
+    schema:
+      type: int
+      default: 568
+
+  - variable: PGID
+    group: "Advanced"
+    label: "PGID"
+    description: "Sets the PGID env var for LinuxServer.io (compatible) containers"
+    schema:
+      type: int
+      default: 568
+  - variable: UMASK
+    group: "Advanced"
+    label: "UMASK"
+    description: "Sets the UMASK env var for LinuxServer.io (compatible) containers"
+    schema:
+      type: string
+      default: "002"
+  # Enable privileged
+  - variable: securityContext
+    group: "Advanced"
+    label: "Security Context"
+    schema:
+      type: dict
+      attrs:
+        - variable: privileged
+          label: "Enable privileged mode for Common-Chart based charts"
+          schema:
+            type: boolean
+            default: false
+  # Set Pod Security Policy
+  - variable: podSecurityContext
+    group: "Advanced"
+    label: "Pod Security Context"
+    schema:
+      type: dict
+      attrs:
+        - variable: runAsNonRoot
+          label: "runAsNonRoot"
+          schema:
+            type: boolean
+            default: false
+        - variable: runAsUser
+          label: "runAsUser"
+          description: "The UserID of the user running the application"
+          schema:
+            type: int
+            default: 0
+        - variable: runAsGroup
+          label: "runAsGroup"
+          description: The groupID this App of the user running the application"
+          schema:
+            type: int
+            default: 0
+        - variable: supplementalGroups
+          label: "supplementalGroups"
+          description: "Additional groups this App needs access to"
+          schema:
+            type: list
+            default: []
+            items:
+              - variable: Group
+                label: "Group"
+                schema:
+                  type: int
+                  default: 568
+        - variable: fsGroup
+          label: "fsGroup"
+          description: "The group that should own ALL storage."
+          schema:
+            type: int
+            default: 568
+        - variable: fsGroupChangePolicy
+          label: "When should we take ownership?"
+          schema:
+            type: string
+            default: "OnRootMismatch"
+            enum:
+              - value: "OnRootMismatch"
+                description: "OnRootMismatch"
+              - value: "Always"
+                description: "Always"

incubator/lychee/3.0.0/templates/NOTES.txt

@@ -1 +0,0 @@
-{{- include "common.notes.defaultNotes" . -}}

incubator/lychee/3.0.0/test_values.yaml

@@ -8,7 +8,12 @@ image:
 strategy:
   type: Recreate
 
-startAsRoot: true
+# Configure the Security Context for the Pod
+podSecurityContext:
+  runAsNonRoot: false
+  runAsUser: 0
+  runAsGroup: 0
+  fsGroup: 0
 
 services:
   main:

incubator/navidrome/3.0.0/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: common
   repository: https://truecharts.org/
-  version: 2.2.2
+  version: 3.0.1
-digest: sha256:82ffcab0ecb2e23d6a8a775fb2408906a40bcde3379d5575cb54542ed16aa596
+digest: sha256:872003df28f67815271ff4716b856a152b06a170fe98bdbceebf29dbe6c229a5
-generated: "2021-04-12T17:36:33.374965933Z"
+generated: "2021-04-14T20:32:16.6633794+02:00"

incubator/navidrome/3.0.0/Chart.yaml

@@ -21,7 +21,7 @@ sources:
 dependencies:
   - name: common
     repository: https://truecharts.org/
-    version: 2.2.2
+    version: 3.0.1
     # condition:
 maintainers:
   - name: TrueCharts

incubator/navidrome/3.0.0/questions.yaml

@@ -17,7 +17,6 @@ groups:
     description: "Advanced Configuration"
   - name: "WARNING"
     description: "WARNING"
-
 portals:
   web_portal:
     protocols:
@@ -26,9 +25,7 @@ portals:
       - "$kubernetes-resource_configmap_portal_host"
     ports:
       - "$kubernetes-resource_configmap_portal_port"
-
 questions:
-
   - variable: portal
     group: "Container Image"
     label: "Configure Portal Button"
@@ -45,7 +42,6 @@ questions:
             type: boolean
             default: true
 
-
   # Update Policy
   - variable: strategyType
     group: "Container Image"
@@ -58,8 +54,6 @@ questions:
           description: "Create new pods and then kill old ones"
         - value: "Recreate"
           description: "Kill existing pods before creating new ones"
-
-  # Configure Time Zone
   # Configure Time Zone
   - variable: timezone
     group: "Container Image"
@@ -70,30 +64,6 @@ questions:
       $ref:
         - "definitions/timezone"
 
-  - variable: PUID
-    group: "Container Image"
-    label: "PUID"
-    description: "The UserID of the user running the application and owning the files"
-    schema:
-      type: int
-      default: 568
-
-  - variable: PGID
-    group: "Container Image"
-    label: "PGID"
-    description: "The groupID of the user/group running the application and owning the files"
-    schema:
-      type: int
-      default: 568
-
-  - variable: UMASK
-    group: "Container Image"
-    label: "UMASK (advanced)"
-    description: "The UMASK used if supported by the application"
-    schema:
-      type: string
-      default: "002"
-
   # Configure Enviroment Variables
   - variable: environmentVariables
     label: "Image environment"
@@ -115,7 +85,6 @@ questions:
                 label: "Value"
                 schema:
                   type: string
-
   # Enable Host Networking
   - variable: hostNetwork
     group: "Networking"
@@ -123,7 +92,6 @@ questions:
     schema:
       type: boolean
       default: false
-
   - variable: services
     group: "Networking"
     label: "Configure Service"
@@ -193,9 +161,7 @@ questions:
                         max: 65535
                         default: 36052
                         required: true
-
 ## TrueCharts Specific
-
   - variable: persistence
     label: "Integrated Persistent Storage"
     description: "Websocket Service"
@@ -255,8 +221,7 @@ questions:
                 schema:
                   type: string
                   default: "100Gi"
-
+  - variable: customStorage
-  - variable: additionalAppVolumeMounts
     label: "Custom app storage"
     group: "Storage"
     schema:
@@ -316,7 +281,6 @@ questions:
                 schema:
                   type: hostpath
                   required: true
-
   - variable: ingress
     label: ""
     group: "Reverse Proxy Configuration"
@@ -406,3 +370,75 @@ questions:
                       schema:
                         type: string
                         default: ""
+
+  - variable: UMASK
+    group: "Advanced"
+    label: "UMASK"
+    description: "Sets the UMASK env var for LinuxServer.io (compatible) containers"
+    schema:
+      type: string
+      default: "002"
+  # Enable privileged
+  - variable: securityContext
+    group: "Advanced"
+    label: "Security Context"
+    schema:
+      type: dict
+      attrs:
+        - variable: privileged
+          label: "Enable privileged mode for Common-Chart based charts"
+          schema:
+            type: boolean
+            default: false
+  # Set Pod Security Policy
+  - variable: podSecurityContext
+    group: "Advanced"
+    label: "Pod Security Context"
+    schema:
+      type: dict
+      attrs:
+        - variable: runAsNonRoot
+          label: "runAsNonRoot"
+          schema:
+            type: boolean
+            default: true
+        - variable: runAsUser
+          label: "runAsUser"
+          description: "The UserID of the user running the application"
+          schema:
+            type: int
+            default: 568
+        - variable: runAsGroup
+          label: "runAsGroup"
+          description: The groupID this App of the user running the application"
+          schema:
+            type: int
+            default: 568
+        - variable: supplementalGroups
+          label: "supplementalGroups"
+          description: "Additional groups this App needs access to"
+          schema:
+            type: list
+            default: []
+            items:
+              - variable: Group
+                label: "Group"
+                schema:
+                  type: int
+                  default: 568
+        - variable: fsGroup
+          label: "fsGroup"
+          description: "The group that should own ALL storage."
+          schema:
+            type: int
+            default: 568
+        - variable: fsGroupChangePolicy
+          label: "When should we take ownership?"
+          schema:
+            type: string
+            default: "OnRootMismatch"
+            enum:
+              - value: "OnRootMismatch"
+                description: "OnRootMismatch"
+              - value: "Always"
+                description: "Always"

incubator/navidrome/3.0.0/templates/NOTES.txt

@@ -1 +0,0 @@
-{{- include "common.notes.defaultNotes" . -}}

incubator/node-red/3.0.0/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: common
   repository: https://truecharts.org/
-  version: 2.2.2
+  version: 3.0.1
-digest: sha256:82ffcab0ecb2e23d6a8a775fb2408906a40bcde3379d5575cb54542ed16aa596
+digest: sha256:872003df28f67815271ff4716b856a152b06a170fe98bdbceebf29dbe6c229a5
-generated: "2021-04-12T17:36:30.997616532Z"
+generated: "2021-04-14T20:32:19.974847+02:00"

incubator/node-red/3.0.0/Chart.yaml

@@ -19,7 +19,7 @@ sources:
 dependencies:
   - name: common
     repository: https://truecharts.org/
-    version: 2.2.2
+    version: 3.0.1
     # condition:
 maintainers:
   - name: TrueCharts

incubator/node-red/3.0.0/questions.yaml

@@ -17,7 +17,6 @@ groups:
     description: "Advanced Configuration"
   - name: "WARNING"
     description: "WARNING"
-
 portals:
   web_portal:
     protocols:
@@ -26,9 +25,7 @@ portals:
       - "$kubernetes-resource_configmap_portal_host"
     ports:
       - "$kubernetes-resource_configmap_portal_port"
-
 questions:
-
   - variable: portal
     group: "Container Image"
     label: "Configure Portal Button"
@@ -45,7 +42,6 @@ questions:
             type: boolean
             default: true
 
-
   # Update Policy
   - variable: strategyType
     group: "Container Image"
@@ -58,8 +54,6 @@ questions:
           description: "Create new pods and then kill old ones"
         - value: "Recreate"
           description: "Kill existing pods before creating new ones"
-
-  # Configure Time Zone
   # Configure Time Zone
   - variable: timezone
     group: "Container Image"
@@ -70,30 +64,6 @@ questions:
       $ref:
         - "definitions/timezone"
 
-  - variable: PUID
-    group: "Container Image"
-    label: "PUID"
-    description: "The UserID of the user running the application and owning the files"
-    schema:
-      type: int
-      default: 568
-
-  - variable: PGID
-    group: "Container Image"
-    label: "PGID"
-    description: "The groupID of the user/group running the application and owning the files"
-    schema:
-      type: int
-      default: 568
-
-  - variable: UMASK
-    group: "Container Image"
-    label: "UMASK (advanced)"
-    description: "The UMASK used if supported by the application"
-    schema:
-      type: string
-      default: "002"
-
   # Configure Enviroment Variables
   - variable: environmentVariables
     label: "Image environment"
@@ -115,7 +85,6 @@ questions:
                 label: "Value"
                 schema:
                   type: string
-
   # Enable Host Networking
   - variable: hostNetwork
     group: "Networking"
@@ -123,7 +92,6 @@ questions:
     schema:
       type: boolean
       default: false
-
   - variable: services
     group: "Networking"
     label: "Configure Service"
@@ -193,9 +161,7 @@ questions:
                         max: 65535
                         default: 36052
                         required: true
-
 ## TrueCharts Specific
-
   - variable: persistence
     label: "Integrated Persistent Storage"
     description: "Websocket Service"
@@ -255,8 +221,7 @@ questions:
                 schema:
                   type: string
                   default: "100Gi"
-
+  - variable: customStorage
-  - variable: additionalAppVolumeMounts
     label: "Custom app storage"
     group: "Storage"
     schema:
@@ -316,7 +281,6 @@ questions:
                 schema:
                   type: hostpath
                   required: true
-
   - variable: ingress
     label: ""
     group: "Reverse Proxy Configuration"
@@ -406,3 +370,75 @@ questions:
                       schema:
                         type: string
                         default: ""
+
+  - variable: UMASK
+    group: "Advanced"
+    label: "UMASK"
+    description: "Sets the UMASK env var for LinuxServer.io (compatible) containers"
+    schema:
+      type: string
+      default: "002"
+  # Enable privileged
+  - variable: securityContext
+    group: "Advanced"
+    label: "Security Context"
+    schema:
+      type: dict
+      attrs:
+        - variable: privileged
+          label: "Enable privileged mode for Common-Chart based charts"
+          schema:
+            type: boolean
+            default: false
+  # Set Pod Security Policy
+  - variable: podSecurityContext
+    group: "Advanced"
+    label: "Pod Security Context"
+    schema:
+      type: dict
+      attrs:
+        - variable: runAsNonRoot
+          label: "runAsNonRoot"
+          schema:
+            type: boolean
+            default: true
+        - variable: runAsUser
+          label: "runAsUser"
+          description: "The UserID of the user running the application"
+          schema:
+            type: int
+            default: 568
+        - variable: runAsGroup
+          label: "runAsGroup"
+          description: The groupID this App of the user running the application"
+          schema:
+            type: int
+            default: 568
+        - variable: supplementalGroups
+          label: "supplementalGroups"
+          description: "Additional groups this App needs access to"
+          schema:
+            type: list
+            default: []
+            items:
+              - variable: Group
+                label: "Group"
+                schema:
+                  type: int
+                  default: 568
+        - variable: fsGroup
+          label: "fsGroup"
+          description: "The group that should own ALL storage."
+          schema:
+            type: int
+            default: 568
+        - variable: fsGroupChangePolicy
+          label: "When should we take ownership?"
+          schema:
+            type: string
+            default: "OnRootMismatch"
+            enum:
+              - value: "OnRootMismatch"
+                description: "OnRootMismatch"
+              - value: "Always"
+                description: "Always"

incubator/nzbget/3.0.0/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: common
   repository: https://truecharts.org/
-  version: 2.2.2
+  version: 3.0.1
-digest: sha256:82ffcab0ecb2e23d6a8a775fb2408906a40bcde3379d5575cb54542ed16aa596
+digest: sha256:872003df28f67815271ff4716b856a152b06a170fe98bdbceebf29dbe6c229a5
-generated: "2021-04-12T17:36:28.642330077Z"
+generated: "2021-04-14T20:32:23.5053331+02:00"

incubator/nzbget/3.0.0/Chart.yaml

@@ -20,7 +20,7 @@ sources:
 dependencies:
   - name: common
     repository: https://truecharts.org/
-    version: 2.2.2
+    version: 3.0.1
     # condition:
 maintainers:
   - name: TrueCharts

incubator/nzbget/3.0.0/questions.yaml

@@ -17,7 +17,6 @@ groups:
     description: "Advanced Configuration"
   - name: "WARNING"
     description: "WARNING"
-
 portals:
   web_portal:
     protocols:
@@ -26,9 +25,7 @@ portals:
       - "$kubernetes-resource_configmap_portal_host"
     ports:
       - "$kubernetes-resource_configmap_portal_port"
-
 questions:
-
   - variable: portal
     group: "Container Image"
     label: "Configure Portal Button"
@@ -45,7 +42,6 @@ questions:
             type: boolean
             default: true
 
-
   # Update Policy
   - variable: strategyType
     group: "Container Image"
@@ -58,8 +54,6 @@ questions:
           description: "Create new pods and then kill old ones"
         - value: "Recreate"
           description: "Kill existing pods before creating new ones"
-
-  # Configure Time Zone
   # Configure Time Zone
   - variable: timezone
     group: "Container Image"
@@ -70,30 +64,6 @@ questions:
       $ref:
         - "definitions/timezone"
 
-  - variable: PUID
-    group: "Container Image"
-    label: "PUID"
-    description: "The UserID of the user running the application and owning the files"
-    schema:
-      type: int
-      default: 568
-
-  - variable: PGID
-    group: "Container Image"
-    label: "PGID"
-    description: "The groupID of the user/group running the application and owning the files"
-    schema:
-      type: int
-      default: 568
-
-  - variable: UMASK
-    group: "Container Image"
-    label: "UMASK (advanced)"
-    description: "The UMASK used if supported by the application"
-    schema:
-      type: string
-      default: "002"
-
   # Configure Enviroment Variables
   - variable: environmentVariables
     label: "Image environment"
@@ -115,7 +85,6 @@ questions:
                 label: "Value"
                 schema:
                   type: string
-
   # Enable Host Networking
   - variable: hostNetwork
     group: "Networking"
@@ -123,7 +92,6 @@ questions:
     schema:
       type: boolean
       default: false
-
   - variable: services
     group: "Networking"
     label: "Configure Service"
@@ -193,9 +161,7 @@ questions:
                         max: 65535
                         default: 36052
                         required: true
-
 ## TrueCharts Specific
-
   - variable: persistence
     label: "Integrated Persistent Storage"
     description: "Websocket Service"
@@ -255,8 +221,7 @@ questions:
                 schema:
                   type: string
                   default: "100Gi"
-
+  - variable: customStorage
-  - variable: additionalAppVolumeMounts
     label: "Custom app storage"
     group: "Storage"
     schema:
@@ -316,7 +281,6 @@ questions:
                 schema:
                   type: hostpath
                   required: true
-
   - variable: ingress
     label: ""
     group: "Reverse Proxy Configuration"
@@ -406,3 +370,75 @@ questions:
                       schema:
                         type: string
                         default: ""
+
+  - variable: UMASK
+    group: "Advanced"
+    label: "UMASK"
+    description: "Sets the UMASK env var for LinuxServer.io (compatible) containers"
+    schema:
+      type: string
+      default: "002"
+  # Enable privileged
+  - variable: securityContext
+    group: "Advanced"
+    label: "Security Context"
+    schema:
+      type: dict
+      attrs:
+        - variable: privileged
+          label: "Enable privileged mode for Common-Chart based charts"
+          schema:
+            type: boolean
+            default: false
+  # Set Pod Security Policy
+  - variable: podSecurityContext
+    group: "Advanced"
+    label: "Pod Security Context"
+    schema:
+      type: dict
+      attrs:
+        - variable: runAsNonRoot
+          label: "runAsNonRoot"
+          schema:
+            type: boolean
+            default: true
+        - variable: runAsUser
+          label: "runAsUser"
+          description: "The UserID of the user running the application"
+          schema:
+            type: int
+            default: 568
+        - variable: runAsGroup
+          label: "runAsGroup"
+          description: The groupID this App of the user running the application"
+          schema:
+            type: int
+            default: 568
+        - variable: supplementalGroups
+          label: "supplementalGroups"
+          description: "Additional groups this App needs access to"
+          schema:
+            type: list
+            default: []
+            items:
+              - variable: Group
+                label: "Group"
+                schema:
+                  type: int
+                  default: 568
+        - variable: fsGroup
+          label: "fsGroup"
+          description: "The group that should own ALL storage."
+          schema:
+            type: int
+            default: 568
+        - variable: fsGroupChangePolicy
+          label: "When should we take ownership?"
+          schema:
+            type: string
+            default: "OnRootMismatch"
+            enum:
+              - value: "OnRootMismatch"
+                description: "OnRootMismatch"
+              - value: "Always"
+                description: "Always"

incubator/nzbget/3.0.0/templates/NOTES.txt

@@ -1 +0,0 @@
-{{- include "common.notes.defaultNotes" . -}}