feat(ztcuui-aio): Fix scale permission (#3314)

* add ztcuui-aio

* space

* readonly filesystem

* Permission

* add readme

* add question

* fix port

* add env

* fix some miss

* fix scale permission

* update ui

Co-authored-by: Stavros kois <s.kois@outlook.com>

charts/incubator/ztcuui-aio/Chart.yaml

@@ -17,7 +17,7 @@ maintainers:
 name: ztcuui-aio
 sources:
   - https://github.com/key-networks/ztncui-aio
-version: 0.0.2
+version: 0.0.3
 annotations:
   truecharts.org/catagories: |
     - network

charts/incubator/ztcuui-aio/questions.yaml

@@ -74,9 +74,9 @@ questions:
                     - value: "OnDelete"
                       description: "(Legacy) OnDelete: ignore .spec.template changes"
 # Include{controllerExpert}
-  - variable: env
+  - variable: secretEnv
     group: "Container Configuration"
-    label: "Image Environment"
+    label: "Image Secrets"
     schema:
       additional_attrs: true
       type: dict
@@ -87,7 +87,20 @@ questions:
           schema:
             type: string
             private: true
-            default: "CHANGEME"
+            default: ""
+  - variable: env
+    group: "Container Configuration"
+    label: "Image Environment"
+    schema:
+      additional_attrs: true
+      type: dict
+      attrs:
+        - variable: MYDOMAIN
+          label: "MYDOMAIN"
+          description: "MYDOMAIN"
+          schema:
+            type: string
+            default: ""
 # Include{containerConfig}
 
   - variable: service
@@ -129,7 +142,7 @@ questions:
                                   label: "Port Type"
                                   schema:
                                     type: string
-                                    default: "HTTPS"
+                                    default: "HTTP"
                                     enum:
                                       - value: HTTP
                                         description: "HTTP"
@@ -357,7 +370,7 @@ questions:
                 label: "ReadOnly Root Filesystem"
                 schema:
                   type: boolean
-                  default: true
+                  default: false
               - variable: allowPrivilegeEscalation
                 label: "Allow Privilege Escalation"
                 schema:
@@ -367,7 +380,7 @@ questions:
                 label: "runAsNonRoot"
                 schema:
                   type: boolean
-                  default: true
+                  default: false
 # Include{securityContextAdvanced}
 
   - variable: podSecurityContext
@@ -382,13 +395,13 @@ questions:
           description: "The UserID of the user running the application"
           schema:
             type: int
-            default: 568
+            default: 0
         - variable: runAsGroup
           label: "runAsGroup"
           description: "The groupID this App of the user running the application"
           schema:
             type: int
-            default: 568
+            default: 0
         - variable: fsGroup
           label: "fsGroup"
           description: "The group that should own ALL storage."

charts/incubator/ztcuui-aio/values.yaml

@@ -11,10 +11,12 @@ podSecurityContext:
   runAsUser: 0
   runAsGroup: 0
 
+secretEnv:
+  ZTNCUI_PASSWD: "CHANGEME"
+
 env:
   HTTP_PORT: "{{ .Values.service.main.ports.main.port }}"
   HTTP_ALL_INTERFACES: "yes"
-  ZTNCUI_PASSWD: "CHANGEME"
   NODE_ENV: "production"
   MYDOMAIN: "test.truecharts.org"
 
@@ -23,7 +25,7 @@ service:
     ports:
       main:
         port: 10258
-        protocol: "HTTPS"
+        # protocol: "HTTPS"
   other:
     enabled: true
     ports: