From 8a47a6bddf134620152704d3223d0c49f80c4923 Mon Sep 17 00:00:00 2001 From: Stavros Kois <47820033+stavros-k@users.noreply.github.com> Date: Mon, 18 Apr 2022 09:29:33 +0300 Subject: [PATCH] feat(apps): add 5 apps, fix babybuddy rofs (#2501) * feat(audiobookshelf): add audiobookshelf * root * remove audiobookshelf from dev * image * feat(fluidd): add fluidd * rootless audiobook * feat(rss-brdige): add rss-bridge * feat(nocodb): add nocodb * root rss-brdige * nocodb add redis * ui and fix configmap * change db url * remove probe paths * comment jwt for now * add jwt_token * other url * db url * other way for db url * try different port * whoops * quote * printf * quotes * feat(ddns-updater): add ddns-updater * cleanups * fix(babybuddy): rofs instead of allopriv esca * skip installint storj-node, needs identity file to be created before * whoops --- .github/ct-install.yaml | 1 + charts/dev/audiobookshelf/.helmignore | 26 -- charts/dev/audiobookshelf/CHANGELOG.md | 19 - charts/dev/audiobookshelf/Chart.yaml | 36 -- charts/dev/audiobookshelf/README.md | 38 -- charts/dev/audiobookshelf/icon.png | Bin 9231 -> 0 bytes charts/dev/audiobookshelf/readme.md | 0 charts/dev/audiobookshelf/security.md | 116 ----- .../dev/audiobookshelf/templates/common.yaml | 2 - charts/dev/audiobookshelf/values.yaml | 30 -- charts/incubator/audiobookshelf/Chart.yaml | 26 ++ .../audiobookshelf/questions.yaml | 38 +- .../audiobookshelf/templates/_secrets.tpl | 20 + .../audiobookshelf/templates/common.yaml | 8 + charts/incubator/audiobookshelf/values.yaml | 32 ++ charts/incubator/ddns-updater/Chart.yaml | 26 ++ charts/incubator/ddns-updater/questions.yaml | 418 +++++++++++++++++ .../ddns-updater/templates/common.yaml | 1 + charts/incubator/ddns-updater/values.yaml | 18 + charts/incubator/fluidd/Chart.yaml | 26 ++ charts/incubator/fluidd/questions.yaml | 256 +++++++++++ charts/incubator/fluidd/templates/common.yaml | 1 + charts/incubator/fluidd/values.yaml | 19 + charts/incubator/nocodb/Chart.yaml | 34 ++ charts/incubator/nocodb/questions.yaml | 421 ++++++++++++++++++ .../incubator/nocodb/templates/_configmap.tpl | 14 + .../incubator/nocodb/templates/_secrets.tpl | 20 + charts/incubator/nocodb/templates/common.yaml | 11 + charts/incubator/nocodb/values.yaml | 55 +++ charts/incubator/rss-bridge/Chart.yaml | 25 ++ charts/incubator/rss-bridge/questions.yaml | 308 +++++++++++++ .../rss-bridge/templates/common.yaml | 1 + charts/incubator/rss-bridge/values.yaml | 26 ++ charts/stable/babybuddy/Chart.yaml | 5 +- charts/stable/babybuddy/questions.yaml | 18 +- charts/stable/babybuddy/values.yaml | 5 +- 36 files changed, 1800 insertions(+), 300 deletions(-) delete mode 100644 charts/dev/audiobookshelf/.helmignore delete mode 100644 charts/dev/audiobookshelf/CHANGELOG.md delete mode 100644 charts/dev/audiobookshelf/Chart.yaml delete mode 100644 charts/dev/audiobookshelf/README.md delete mode 100644 charts/dev/audiobookshelf/icon.png delete mode 100644 charts/dev/audiobookshelf/readme.md delete mode 100644 charts/dev/audiobookshelf/security.md delete mode 100644 charts/dev/audiobookshelf/templates/common.yaml delete mode 100644 charts/dev/audiobookshelf/values.yaml create mode 100644 charts/incubator/audiobookshelf/Chart.yaml rename charts/{dev => incubator}/audiobookshelf/questions.yaml (95%) create mode 100644 charts/incubator/audiobookshelf/templates/_secrets.tpl create mode 100644 charts/incubator/audiobookshelf/templates/common.yaml create mode 100644 charts/incubator/audiobookshelf/values.yaml create mode 100644 charts/incubator/ddns-updater/Chart.yaml create mode 100644 charts/incubator/ddns-updater/questions.yaml create mode 100644 charts/incubator/ddns-updater/templates/common.yaml create mode 100644 charts/incubator/ddns-updater/values.yaml create mode 100644 charts/incubator/fluidd/Chart.yaml create mode 100644 charts/incubator/fluidd/questions.yaml create mode 100644 charts/incubator/fluidd/templates/common.yaml create mode 100644 charts/incubator/fluidd/values.yaml create mode 100644 charts/incubator/nocodb/Chart.yaml create mode 100644 charts/incubator/nocodb/questions.yaml create mode 100644 charts/incubator/nocodb/templates/_configmap.tpl create mode 100644 charts/incubator/nocodb/templates/_secrets.tpl create mode 100644 charts/incubator/nocodb/templates/common.yaml create mode 100644 charts/incubator/nocodb/values.yaml create mode 100644 charts/incubator/rss-bridge/Chart.yaml create mode 100644 charts/incubator/rss-bridge/questions.yaml create mode 100644 charts/incubator/rss-bridge/templates/common.yaml create mode 100644 charts/incubator/rss-bridge/values.yaml diff --git a/.github/ct-install.yaml b/.github/ct-install.yaml index 85082ff3b86..25a51c57b51 100644 --- a/.github/ct-install.yaml +++ b/.github/ct-install.yaml @@ -27,6 +27,7 @@ excluded-charts: - charts/stable/zigbee2mqtt - charts/stable/wireguard - charts/stable/alertmanager-bot +- charts/stable/storj-node - charts/incubator/amcrest2mqtt - charts/library/common - charts/stable/foundryvtt diff --git a/charts/dev/audiobookshelf/.helmignore b/charts/dev/audiobookshelf/.helmignore deleted file mode 100644 index 4379e2b3014..00000000000 --- a/charts/dev/audiobookshelf/.helmignore +++ /dev/null @@ -1,26 +0,0 @@ -# Patterns to ignore when building packages. -# This supports shell glob matching, relative path matching, and -# negation (prefixed with !). Only one pattern per line. -.DS_Store -# Common VCS dirs -.git/ -.gitignore -.bzr/ -.bzrignore -.hg/ -.hgignore -.svn/ -# Common backup files -*.swp -*.bak -*.tmp -*~ -# Various IDEs -.project -.idea/ -*.tmproj -.vscode/ -# OWNERS file for Kubernetes -OWNERS -# helm-docs templates -*.gotmpl diff --git a/charts/dev/audiobookshelf/CHANGELOG.md b/charts/dev/audiobookshelf/CHANGELOG.md deleted file mode 100644 index d54f19ecb33..00000000000 --- a/charts/dev/audiobookshelf/CHANGELOG.md +++ /dev/null @@ -1,19 +0,0 @@ -# Changelog
- - - -### [audiobookshelf-0.0.2](https://github.com/truecharts/apps/compare/audiobookshelf-0.0.1...audiobookshelf-0.0.2) (2022-04-12) - -#### Chore - -* Auto-update chart README [skip ci] -* update helm general non-major helm releases ([#2480](https://github.com/truecharts/apps/issues/2480)) - - - - -### audiobookshelf-0.0.1 (2022-04-08) - -#### Feat - -* Unraid Port - A ([#2438](https://github.com/truecharts/apps/issues/2438)) diff --git a/charts/dev/audiobookshelf/Chart.yaml b/charts/dev/audiobookshelf/Chart.yaml deleted file mode 100644 index b42a23c055d..00000000000 --- a/charts/dev/audiobookshelf/Chart.yaml +++ /dev/null @@ -1,36 +0,0 @@ -annotations: - truecharts.org/SCALE-support: 'true' - truecharts.org/catagories: | - - MediaApp-Books - - MediaServer-Books - truecharts.org/grade: U -apiVersion: v2 -appVersion: "latest" -dependencies: -- name: common - repository: https://library-charts.truecharts.org - version: 9.2.8 -deprecated: false -description: Audiobook manager and player. Saves your progress, supports multiple - accounts, stream all audio formats on the fly. No more switching between dozens - of audio files for a single audiobook, Audiobookshelf shows you one audio track - with skipping, seeking and adjustable playback speed. Free & open source mobile - apps under construction, consider contributing by posting feedback, suggestions, - feature requests on github or the forums. -home: https://github.com/truecharts/apps/tree/master/charts/stable/audiobookshelf -icon: https://truecharts.org/_static/img/appicons/audiobookshelf.png -keywords: -- audiobookshelf -- MediaApp-Books -- MediaServer-Books -kubeVersion: '>=1.16.0-0' -maintainers: -- email: info@truecharts.org - name: TrueCharts - url: https://truecharts.org -name: audiobookshelf -sources: -- https://github.com/advplyr/audiobookshelf -- https://hub.docker.com/r/advplyr/audiobookshelf/ -type: application -version: 0.0.2 diff --git a/charts/dev/audiobookshelf/README.md b/charts/dev/audiobookshelf/README.md deleted file mode 100644 index 6ce4f960a73..00000000000 --- a/charts/dev/audiobookshelf/README.md +++ /dev/null @@ -1,38 +0,0 @@ -# Introduction - -Audiobook manager and player. Saves your progress, supports multiple accounts, stream all audio formats on the fly. No more switching between dozens of audio files for a single audiobook, Audiobookshelf shows you one audio track with skipping, seeking and adjustable playback speed. Free & open source mobile apps under construction, consider contributing by posting feedback, suggestions, feature requests on github or the forums. - -TrueCharts are designed to be installed as TrueNAS SCALE app only. We can not guarantee this charts works as a stand-alone helm installation. -**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/apps/issues/new/choose)** - -## Source Code - -* -* - -## Requirements - -Kubernetes: `>=1.16.0-0` - -## Dependencies - -| Repository | Name | Version | -|------------|------|---------| -| https://library-charts.truecharts.org | common | 9.2.8 | - -## Installing the Chart - -To install this App on TrueNAS SCALE check our [Quick-Start Guide](https://truecharts.org/manual/Quick-Start%20Guides/02-Installing-an-App/). - -## Upgrading, Rolling Back and Uninstalling the Chart - -To upgrade, rollback or delete this App from TrueNAS SCALE check our [Quick-Start Guide](https://truecharts.org/manual/Quick-Start%20Guides/04-Upgrade-rollback-delete-an-App/). - -## Support - -- Please check our [quick-start guides](https://truecharts.org/manual/Quick-Start%20Guides/01-Adding-TrueCharts/) first. -- See the [Wiki](https://truecharts.org) -- Check our [Discord](https://discord.gg/tVsPTHWTtr) -- Open a [issue](https://github.com/truecharts/apps/issues/new/choose) ---- -All Rights Reserved - The TrueCharts Project diff --git a/charts/dev/audiobookshelf/icon.png b/charts/dev/audiobookshelf/icon.png deleted file mode 100644 index 24e03a64ac6dedbe06c0224787986f7e163e484e..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 9231 zcmb7|byO6lrBNQ1VK_jLSP9M5u_!B zrKD3jAK&-RJLmoW{LMdi?%dDJx%W<-GdITAP>YhBl^g&-siUoK0s!=~3k9UGOVR%R zN+$r2U&i{kH7?bQ|IgO*QYYE@>W5&N!oV9PPi0>}k?u%S@6Of!o~fDdEtz)zT3f1G z97d=zOd;{E@Q-Y*a-94-|LeJ)64jA6-}p&aMJOgX3gtW!ua8x3PE<{Gy;ks8sx(9{ z>7GbqJo;OP#!D{=e6niS3$0SDeD*`JF9|BO(Knl(t9*`8ig6IkbQg`b7idgC|DEXW zs>xiL`n5LGdwR6HIp5#+=Jv*H-^N_u_Co(E;n&XJfu%n^e}BCluk}0nw>${%Hh^{=7&k1@1bx9v0&9;^%%97pxjU*JIlI!)lmjMmAUNeI&t+|eSYk#`yU;TP(SDEaX;UQDtr#Mvo^lP?p zUXa1=>f}OySyimzWMk;g;=rRjqotQSihOKhXbSLKC^WKwfE7>b!+2I0w>|T22Y{QP zqpot>e|&AysQk4!5_no8g<}m{OxoXlI3?>R9YcEXi#@wIX&8HeY$f^fj=?p=h5AMI zFMX~4fyg;o2)9z;RzYeMXRvDMcfD&)95;R?C&|zA`jgUlKfaMssa;EltPUevLz1yi zNM^M8M#o{iJNfu2|9UhY&=ALn?;P0t%;G*-;x#5Z(lSN-z01a~Xxyzp^q#)EH3LP# z6-pybULSXgqF6X{Dn(w9^eXh- z8lXg++T9M&4iWAa@#4xN6%_Y*#bYxaru2nAK(#RC_Urk+pZ^S`k~T(}&IIYq^zTKB zBx^Luc~(>0uNB>hdCF;0-}XfeQQ^LVHn3V)JP>|c+%fzz$G#wqW38F2x${F{Jz*=) z#kq}aomvWUUT{Tr?V1y`Hu06skm$)u#PH2fnTkhU_=|Dgr3?m%mvME3En>-g=(ZV` zh4Nmmv-evTKlE9$GJO2$&SHO=?un96{S|q$y+2j;`r;{-|9iUlDsF#V|3xOO4^H>* zX}@tTg5z-Q`1~XQ>sLfc1GHu{O z_$rU98bAD7xU$XcOu1RM4(`n}1tRTWh}@^;g$<_)U~xwFbx;UxM+(sPH$%^kOKp{4$elTQ9^YQi?b zAHtLkXv3=w+-UG3$4yxXBTE%Ny=Idvdtq8(D+py-4VCYk(?W^#6<=qR-s9$5A5xtE zZkT(qd5SC2?2e_pzF2e{3qT)J@*u(P!25U0E2t3(g z!uJ`!x$uDllir+c>1RkZPM&280aUhC-gpl0!#73_^vz{C ziEy_Uf#3z-5lI>3B2t`3XjXf#24xDAm%x) z0_H*PJlVRtNs(&T!*mRH?)XC%`G}QbiMr%`d0OnrNPJ8)- z7Xxc;O7Ao{o}W}{Yg@e=n%?sNuJ1%Ei~V6quuwf47OXcGaU)UOaV23_IdP~Vos(_4 z^U-IBN*2*usoeq74#^o_-;7hSCV5L8MzY-{Re2scxW3tF{+6na)F?&Ja}`F2unfuD z%z7~>hw-x^kdgqkk`}isMywhu;9-g;&cQy!ptwaZ|7==KfrjUOz>^$t@<}HsrhMo0 zn3@B2XtdglT8Q#rNHz(%t}``CV0bLaY1H=b4Qk$(gbdrz^XA}y=Bb_>2PYjvD8m)t zn!35&GAkV4p^hs?wU=Yhl4)2%C(Nu0bjsTSqSce6Vpx*%$?t_}R)Iu`_4l3}ty|>i zZr%WL&86Uq@H-WS_Edr*+K|zb^(C=)eDP3TFXg4I*WmW)&kHm=ktPnYjMjW`tvmcc6%oznj!uPtoJj3B)JbvKc6TFo3hZd5sI zf^~L*Q)2=U1~)#02qL-*BtaJZC;98xKgQ=aKKJMd$gj?=yl-KBA4*raJh9ODhyts= zUaXNMk6|$QywF>OfC}K{$a5(&gE~nullap`81c?4Y=||fFHkh$00P;{k%0;wT+kvI zA$tXg%XMF&imP@4eQACgOej zAfGZN9>@ZJw_=CX;BPfy!rF+6qn}epYd6SYcWe#D-zQkRP46gXh|x%(hMxtUDC=0=m4a;yZb@`a`;>^Z6x3;MI>G4Qy~osI3B}-x}xb$8xF5n47WXg?ByYi z`~A|0R0;!^BgvECbu@(IE9SDjRCON`C)ohifoCSXrpgfQ2LWaUBI_{?P{pKLtk+}g z3rXXz6DA`#vUzsqM~=Fn;V-4}4t@0#!p*<(f4-&z;)W@XPKvt1T~J;PMOs1ordh-w zTDr&h@a8&E3{hZY>hCkywj+1#oL zrA9=PbmokSLF&qg)7VW(L{F~}X#O4TL@Qz@M3m>!9^B7kt0H>(B{nbh{^G3k&{`5eyNw1q^{6oEIRu^gd>{7SxeD4Ar5sIiY|1{C})ED z0?j!pfh!rd#o64St<8^_I+{rWflefn79^|t#{djHV_njNuq(#Z*ClOsiL5k+~05KmSJ_Xy+4l~ZpkTj<=PK~mTFy^$!^J;^t z!+kV6KQtxm3c*Vf+V@S4_*D0g3tV3fY7E84F&}_))jdl{Y7#aIz7+DqQ4aCjh_x7L z!g~PCGrq*9V8qST1IZ;S2xFJ7xTPTcbXoyB#@CL~ummsYBO14U6&vFt$fvJ$jkMf& zBREI|LZUf)eJ#T#!4p@Wn>DZ$`dyQui%RbKRv2BD9MkuI=m(wc-LMAQB-tFamSOi% z2IRazmBrDmL*(cT`w4{B5_tg?c8AteHr95Gjqb`bvyUUyET3>t{iYV@cC!?Yi(5gy*8I!sxE6NFjdf zQH=>xVv$&%)xyql%sau}rc6v#=vcq@j_X(gf1rRTn}>?Mm6GfRiv@J&Q#o}m!a1(% zRlmBJ!gRzx4eOtNKR(_njkdzVXD-TVSOTO8aM!2M-^%>U^~oymIgH z4Bf-`I5XVeK&N}@5JR@Wv>ETu6k^$IOyx^mA`O$HUJ|xwwm>R*5=(Xx8aA*NG`0SE zI$PufnA+rS+Ku`NQ*1}(d>`@HmYZ8&e+tE;b)kQ zwWilbdHv>xWSyPU7d?|OloZ;n!Km~Q!+M}^dmiR0^6bS550EFJ*ast&*sj|T$53O; zr?20+R8!jQGt6^sIaN^me-lbNYJ6WoQPA=|CShitX`MH2!eQ-?L1L;gJu%^sLBMTp zj9Z7v&TqIc1WhO49LnFJQF`T*z$wI>c=X2Aas7~TO)<{c#ew}BkAglNj2(I9dizUF z27yHwo_7<5w*Xc|u0s%N#@lQ}HWc8T6>ou^h2aBMUmD$=U9}qC9vhCjCia<{z8tdi zlJH#)yP+FsTQjC}cvs~~OK(FNYU^_jQ+S z@aJM~Of$i9uk@u6U7Tm#Q> zMq_~1_PxEnPK^H!M>8gS7iPmYgOMp5R!@!iH?9>a74YAh52IJ4%*X_ZO5q5siUU&D zo~Y9lI~nB(5nn=tejz0Y;ZqZ5pqM_U=;*X$MfjG4Euc7t-rBl?ZlEzfX4c|Z%A9BV zufOEs6_=}Z_=?BfY(Mu$S3tnKNbWngxYiK5x(Q5epMVJ0 zd>`(&L}kU=(3B=9PO?nqT0(TkrX94wW-6(@31}|0ak|B46W54PiT91Nb`RhY)Qbt? z#9hwfS5D4c_@0#hJ9BGK#i-Pzlz%8$TSw^gCxmM2IHQ_KtZDZIFozJrzv-&wRYZ3r z>j1MW@f+nn=_@J{PVLla{ZR3jcHE#|oIG$O9_K8346{phZLbNVMr*u&V&ve-V={I2 ziTJ9s_%W)wsy1?$OE0)G*aY}Qy-A+PNwW)@n^_= zGQU<^XGqyYrRJFOUqX5|v?Sm8eVHE^Fm_HM9BF+}9QQ+-Fz!-BU z9A6CXvSWWUqp*^0j(y^aWS6)1H;J(#sVf{shP4GB$?@+wup>-l=vk;|iZohxd^0+= ziV`d74Usiq1n-6}IsA|OPB`IqoFe`{oWQ39a*}L;A(ID`IgjX!68~MO>$(25_muyA zdWvPLa$c)vBJle$wm|<{t!aEBJC^1KSdO&?-K7IUYDAchFuahe&O8+DVwr9l&h>Wk z4s0v6Nx}RfJ87G2Ge6l4Dy@C)40xjs(}V^&16e@idN`src^}`&+|E%)W1H-`8C3Y` zqt&c*_DgQI-LppePmycXHYpK%ju7nMfTnJSKz?AV0m@tXHMsN=zZ_A#zn^DSFbCkk z^jH`pIxU6(I>6PX8pHIX6UmEdj;4?WNY{|mWLzQ??x_85z`+xCEi4BG*?uy*p`YV-nE<+8#794cb z>k{{scT9%=Cz?O{|A%J2g8j>mU)7ffu0QF(A9~%-5xs9=*xGJLd=Dvzq`(jX&!(t118cRgT4#_Y%I`UuXN+%0M+-XFmC)n{4Ssam#f}{96Bd5 zAddb|V4su93-V(ciLl(TIwGtJ)KUu!*%O2D9U=@F7IHZ%PE_DKJJvz&S4`+}5jXg^ zmg`RmDbV_sW+;2<9u59=JQs@;6#EL|8Fi4yTKl980(uJRbN$VTu%dAJZE}!wBvu5; zQV08nU#SNP(moHXq6-)mPaWzA^yV zD`18&&kHR08)%1QBVJqwmd_N@4TRQ(27UjW-3m-t;elY4zy41O`g-s=*_U4f z!5=I30^#zA2aOeW_La^gfXj8nzsW6VrR}uWH{JddIZ!%V+8oXKgqEiq^&fu00Z#92 zJ`Z?D6e^3&*G%YDd_wDCL%X(o2*zm?*y7eZ8KfCA9~eWqrNi3}ARDW?v$LXd#Pr_n z>>K6N>SGrOsZT$HCN2*Bx>V@;0yI(@4OgHQM~NYeY_8>093|B8XEs5{yN{^*H?K_+ z5tk(I9X5PxsTo~?Mm@xa1igC<$wK*D?62`-Mv3Xq*BP=AU`638m9#ls!OhJHkgsY| z58}lFc7(1J+*Ee`D~&JQ{v6d&xi@aj<6LoEK9cX9ANiEFpb0lEnXjF!%Y=nwGb$yI zpL$@YoTjnIcVBeF@hJ>S*>tXnQByG2uEN0%QDFW1@G<=^CshbG<1j5{6kb3#sI>Q+ zmB_&icOUJ}5B2J^sUxE>?=4MC#s1c&bS=iqqcTnpAlgvJ?I)D3&6G*46inDgYOM4$ z5wkNRv%U|c?f_6MVqY9-DpEUNK7av0_usv`b-U>#A}L$2p$J%9H>o1)nXTc~c^KV& zE+RC%+VHPx(fXZ|5Nd+HMc_0<`;IQUgqaOCMiTl^U9T-%apk`g_NFMDtT5VKNtT?Q z1^zV7^{e=+F%3YQWvo>#DMid0*mR4>6#v7O2@;J_W$Bl<8fpC&hvnfJ24zz^zzyA} z>`_f5u7T$4mxl;X>i}=G8BHmz5M)gUtt|qNr$~s%!DF6i=_t-|mj(utV~n78wGkom z_g#a-`IICrZ?brQP_-U-0mW#b=>~NBqdw(;0&X!iYchLi)*M#)O5|ou@{=TVj-&8T>u4FGWbF+XLGlY?gU&T+t>-K4@ zKNVyouC*{*{wLq=ykwp5nt}5@Pma5+wg~U~aGZ6_OE|hHQ5%;BK1h{p{H0?;e$@};{{lz{quxU%41s9vd*b$?Pss_kwr(&_kvcoF84TP~ zjebd7@FvBOw>EjkfUxCVN58hl2Xay@nA$4uU_|P?AeQAd-?56*5K-{?ZVO~%gM$D? zZxL5S;!3}Fw;5n6UL^QFposoM{zK8(7MTAm+YBX;s17)NgJZ7o^{5~>aH|S z?)wD}ffsg2me|@ABzVua!!ZfOEYR+BoR*R;_>I;@cS}XyD?s4M`!idgY&Bkm*#Yy* zQlV!p#cAN(OFDwi1o|rzXQU-+3o_g*X+4`MPLFVL|2Y_Y`$|rHs0|L+Olti)aMc&` zfIK<~GJfE&Hc{y@i$)R?C~?4LLoywaS)fhtk@P%+MEi5qJc;=GnhL~8>=z&{Fm*^D zQDfjm{>e!(E~`ABXM1UStTJ0cl@)JI_RZMtA%(;4Wx#tgx5+l+! z1rd7`8n{7xAL#Yax)zA@d)DSFsIX$$0bPWIBu&LrpEiY2f4_nkR&;Q}$s^DiIgoomZ~S){#M@u}P>*|IvU;H< za{WNddhg{8v=oFY&rE>7hn-pc1734T=ZSiebJB8I88$&8Hyx5n^njhcXyXsfw!85u zyCspLWJR)q@t@ByXJ|(+u2GRd1Di^I^&$xK%ddzGsZ3(tIy~Bo?TA@S4UWn8@qGbN!*UHTG$7Fo*t4LStmR(4>wj6^QkflGndY8?nr1+T$#I3S$1As= zC<_mfgH00Vud!MU5vv_S4tp7^M_gc=1GSDEeaWb}LtA!h;d4cCf34va0w|%zQ33n1yGAv!RwnNp%DkEhrM*Qm-mhL|ra_Gm8qZz5IP- zPU+mpi{wJ3i1K|gla#oxz|P_EQW3Z3fN{=;yf4z+{Jr`0Fvp^%qA7n&nmaV$JfF%v zl-4b;?adNCy} zgpQ+_Z8R<6vs{h)pK@*>!y&;El}Ank!LutcEh_CvS?&mz(YVA;Rn=M5Xr3YakFf~a z+p5Mw)RXUp_C+CWW%suO7c*r#gWa8-5B~TV{p^*X$)!;2le%_$|BbHKJ&Pp5uI(|zAi(rJnR)YFI^L!ow=$$O|pI zEb>aDZ_39(Cot;uHW5mTtiWt*%GBZOl@5o1B4sDaC4Q`E*woYEGG*4QB-M22k=Br{ zn6W*VHG3I|I}%fBcM+69m*)Xp(m{$3l(l^KR?|fn;E##6ZWW-)_b!sK=Mf<)$cZLO z|M;-D3!8wli#yQU@tk)`xF!mi7cUHSHrckEt2jqpZ<0aR|2a4Y%pIFRJJWyc9oS_k zq+vsZITyd2dqe%%liXtiHdc+uw8yMMzD?572D2r(TY0_JtuJj+q;zCRTD9cv{WrZ# zbX8%Vm6&+g!4UsZttyAbEJO|xrxSHoDu$w@<*`D15^YkCd$juVjgVe<)Ymzxeu3v9 z^#K>#^^svj4%cJK7>J%r>}A@=Lc{p`KdJC=Z7Pddl%Q%xug5g}friH3+RGeiBX!78 zH)C&$-rE!^i=q#?PkUXA9ok!Wd|^&<9XfskIh>u$ic}vWwe?_X?cCm66BmD;GcRf5 z;c+4+a)P{?GfxYPK9!WpTE+cUS?F!qUe7NghvfVI2r#9BeZE+nltWT9&gW99|Kbn< z^)#gU4fAP*6=>xPC^fWsEoCkP>y>%2G7^TC-b_jSOQYX(dScrXg$;R>tfohm{Ag=8 zB;F=U5m_7U%Bf-^^Yr*+sWn*v$0!$Y`jW&Py+Au}SfKHo>%!z#!-bkz^kId@6a{xl zRa@~9GGdT1`}wV4+L;a`O1#Oaya;*=MAI8Ge={MP!MOq{7x>M-3{{Tj^wII|r8!L{_^hBC|n42u8Si;4&AS1Cr>$4NCWB(7m%o2H2F z-KjWrsw5pBxcMBCqZ&o}Q<;ZKUUOZ9@@^Nv?4C5h1*?~fgV)ro?k}M$PaR4lb1mGs zCJtndz1F2#L;a&}Vg{L{J(m@3aZXxLpPF-}PKPV%1O;Mz0t!Cviml7A%0#syAjc)zCf(>%JNL^s|VGtFRmxgr}JaU zQ!Y{JqbK - -## Helm-Chart - -##### Scan Results - -#### Chart Object: audiobookshelf/templates/common.yaml - - - -| Type | Misconfiguration ID | Check | Severity | Explaination | Links | -|:----------------|:------------------:|:-----------:|:------------------:|-----------------------------------------|-----------------------------------------| -| Kubernetes Security Check | KSV001 | Process can elevate its own privileges | MEDIUM |
Expand... A program inside the container can elevate its own privileges and run as root, which might give the program control over the container and node.

Container 'hostpatch' of Deployment 'RELEASE-NAME-audiobookshelf' should set 'securityContext.allowPrivilegeEscalation' to false
|
Expand...https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted
https://avd.aquasec.com/appshield/ksv001
| -| Kubernetes Security Check | KSV003 | Default capabilities not dropped | LOW |
Expand... The container should drop all default capabilities and add only those that are needed for its execution.

Container 'RELEASE-NAME-audiobookshelf' of Deployment 'RELEASE-NAME-audiobookshelf' should add 'ALL' to 'securityContext.capabilities.drop'
|
Expand...https://kubesec.io/basics/containers-securitycontext-capabilities-drop-index-all/
https://avd.aquasec.com/appshield/ksv003
| -| Kubernetes Security Check | KSV003 | Default capabilities not dropped | LOW |
Expand... The container should drop all default capabilities and add only those that are needed for its execution.

Container 'hostpatch' of Deployment 'RELEASE-NAME-audiobookshelf' should add 'ALL' to 'securityContext.capabilities.drop'
|
Expand...https://kubesec.io/basics/containers-securitycontext-capabilities-drop-index-all/
https://avd.aquasec.com/appshield/ksv003
| -| Kubernetes Security Check | KSV011 | CPU not limited | LOW |
Expand... Enforcing CPU limits prevents DoS via resource exhaustion.

Container 'hostpatch' of Deployment 'RELEASE-NAME-audiobookshelf' should set 'resources.limits.cpu'
|
Expand...https://cloud.google.com/blog/products/containers-kubernetes/kubernetes-best-practices-resource-requests-and-limits
https://avd.aquasec.com/appshield/ksv011
| -| Kubernetes Security Check | KSV012 | Runs as root user | MEDIUM |
Expand... 'runAsNonRoot' forces the running image to run as a non-root user to ensure least privileges.

Container 'RELEASE-NAME-audiobookshelf' of Deployment 'RELEASE-NAME-audiobookshelf' should set 'securityContext.runAsNonRoot' to true
|
Expand...https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted
https://avd.aquasec.com/appshield/ksv012
| -| Kubernetes Security Check | KSV012 | Runs as root user | MEDIUM |
Expand... 'runAsNonRoot' forces the running image to run as a non-root user to ensure least privileges.

Container 'autopermissions' of Deployment 'RELEASE-NAME-audiobookshelf' should set 'securityContext.runAsNonRoot' to true
|
Expand...https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted
https://avd.aquasec.com/appshield/ksv012
| -| Kubernetes Security Check | KSV012 | Runs as root user | MEDIUM |
Expand... 'runAsNonRoot' forces the running image to run as a non-root user to ensure least privileges.

Container 'hostpatch' of Deployment 'RELEASE-NAME-audiobookshelf' should set 'securityContext.runAsNonRoot' to true
|
Expand...https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted
https://avd.aquasec.com/appshield/ksv012
| -| Kubernetes Security Check | KSV013 | Image tag ':latest' used | LOW |
Expand... It is best to avoid using the ':latest' image tag when deploying containers in production. Doing so makes it hard to track which version of the image is running, and hard to roll back the version.

Container 'RELEASE-NAME-audiobookshelf' of Deployment 'RELEASE-NAME-audiobookshelf' should specify an image tag
|
Expand...https://kubernetes.io/docs/concepts/configuration/overview/#container-images
https://avd.aquasec.com/appshield/ksv013
| -| Kubernetes Security Check | KSV014 | Root file system is not read-only | LOW |
Expand... An immutable root file system prevents applications from writing to their local disk. This can limit intrusions, as attackers will not be able to tamper with the file system or write foreign executables to disk.

Container 'RELEASE-NAME-audiobookshelf' of Deployment 'RELEASE-NAME-audiobookshelf' should set 'securityContext.readOnlyRootFilesystem' to true
|
Expand...https://kubesec.io/basics/containers-securitycontext-readonlyrootfilesystem-true/
https://avd.aquasec.com/appshield/ksv014
| -| Kubernetes Security Check | KSV014 | Root file system is not read-only | LOW |
Expand... An immutable root file system prevents applications from writing to their local disk. This can limit intrusions, as attackers will not be able to tamper with the file system or write foreign executables to disk.

Container 'autopermissions' of Deployment 'RELEASE-NAME-audiobookshelf' should set 'securityContext.readOnlyRootFilesystem' to true
|
Expand...https://kubesec.io/basics/containers-securitycontext-readonlyrootfilesystem-true/
https://avd.aquasec.com/appshield/ksv014
| -| Kubernetes Security Check | KSV014 | Root file system is not read-only | LOW |
Expand... An immutable root file system prevents applications from writing to their local disk. This can limit intrusions, as attackers will not be able to tamper with the file system or write foreign executables to disk.

Container 'hostpatch' of Deployment 'RELEASE-NAME-audiobookshelf' should set 'securityContext.readOnlyRootFilesystem' to true
|
Expand...https://kubesec.io/basics/containers-securitycontext-readonlyrootfilesystem-true/
https://avd.aquasec.com/appshield/ksv014
| -| Kubernetes Security Check | KSV015 | CPU requests not specified | LOW |
Expand... When containers have resource requests specified, the scheduler can make better decisions about which nodes to place pods on, and how to deal with resource contention.

Container 'hostpatch' of Deployment 'RELEASE-NAME-audiobookshelf' should set 'resources.requests.cpu'
|
Expand...https://cloud.google.com/blog/products/containers-kubernetes/kubernetes-best-practices-resource-requests-and-limits
https://avd.aquasec.com/appshield/ksv015
| -| Kubernetes Security Check | KSV016 | Memory requests not specified | LOW |
Expand... When containers have memory requests specified, the scheduler can make better decisions about which nodes to place pods on, and how to deal with resource contention.

Container 'hostpatch' of Deployment 'RELEASE-NAME-audiobookshelf' should set 'resources.requests.memory'
|
Expand...https://kubesec.io/basics/containers-resources-limits-memory/
https://avd.aquasec.com/appshield/ksv016
| -| Kubernetes Security Check | KSV017 | Privileged container | HIGH |
Expand... Privileged containers share namespaces with the host system and do not offer any security. They should be used exclusively for system containers that require high privileges.

Container 'hostpatch' of Deployment 'RELEASE-NAME-audiobookshelf' should set 'securityContext.privileged' to false
|
Expand...https://kubernetes.io/docs/concepts/security/pod-security-standards/#baseline
https://avd.aquasec.com/appshield/ksv017
| -| Kubernetes Security Check | KSV018 | Memory not limited | LOW |
Expand... Enforcing memory limits prevents DoS via resource exhaustion.

Container 'hostpatch' of Deployment 'RELEASE-NAME-audiobookshelf' should set 'resources.limits.memory'
|
Expand...https://kubesec.io/basics/containers-resources-limits-memory/
https://avd.aquasec.com/appshield/ksv018
| -| Kubernetes Security Check | KSV020 | Runs with low user ID | MEDIUM |
Expand... Force the container to run with user ID > 10000 to avoid conflicts with the host’s user table.

Container 'RELEASE-NAME-audiobookshelf' of Deployment 'RELEASE-NAME-audiobookshelf' should set 'securityContext.runAsUser' > 10000
|
Expand...https://kubesec.io/basics/containers-securitycontext-runasuser/
https://avd.aquasec.com/appshield/ksv020
| -| Kubernetes Security Check | KSV020 | Runs with low user ID | MEDIUM |
Expand... Force the container to run with user ID > 10000 to avoid conflicts with the host’s user table.

Container 'autopermissions' of Deployment 'RELEASE-NAME-audiobookshelf' should set 'securityContext.runAsUser' > 10000
|
Expand...https://kubesec.io/basics/containers-securitycontext-runasuser/
https://avd.aquasec.com/appshield/ksv020
| -| Kubernetes Security Check | KSV020 | Runs with low user ID | MEDIUM |
Expand... Force the container to run with user ID > 10000 to avoid conflicts with the host’s user table.

Container 'hostpatch' of Deployment 'RELEASE-NAME-audiobookshelf' should set 'securityContext.runAsUser' > 10000
|
Expand...https://kubesec.io/basics/containers-securitycontext-runasuser/
https://avd.aquasec.com/appshield/ksv020
| -| Kubernetes Security Check | KSV021 | Runs with low group ID | MEDIUM |
Expand... Force the container to run with group ID > 10000 to avoid conflicts with the host’s user table.

Container 'RELEASE-NAME-audiobookshelf' of Deployment 'RELEASE-NAME-audiobookshelf' should set 'securityContext.runAsGroup' > 10000
|
Expand...https://kubesec.io/basics/containers-securitycontext-runasuser/
https://avd.aquasec.com/appshield/ksv021
| -| Kubernetes Security Check | KSV021 | Runs with low group ID | MEDIUM |
Expand... Force the container to run with group ID > 10000 to avoid conflicts with the host’s user table.

Container 'autopermissions' of Deployment 'RELEASE-NAME-audiobookshelf' should set 'securityContext.runAsGroup' > 10000
|
Expand...https://kubesec.io/basics/containers-securitycontext-runasuser/
https://avd.aquasec.com/appshield/ksv021
| -| Kubernetes Security Check | KSV021 | Runs with low group ID | MEDIUM |
Expand... Force the container to run with group ID > 10000 to avoid conflicts with the host’s user table.

Container 'hostpatch' of Deployment 'RELEASE-NAME-audiobookshelf' should set 'securityContext.runAsGroup' > 10000
|
Expand...https://kubesec.io/basics/containers-securitycontext-runasuser/
https://avd.aquasec.com/appshield/ksv021
| -| Kubernetes Security Check | KSV023 | hostPath volumes mounted | MEDIUM |
Expand... HostPath volumes must be forbidden.

Deployment 'RELEASE-NAME-audiobookshelf' should not set 'spec.template.volumes.hostPath'
|
Expand...https://kubernetes.io/docs/concepts/security/pod-security-standards/#baseline
https://avd.aquasec.com/appshield/ksv023
| -| Kubernetes Security Check | KSV029 | A root primary or supplementary GID set | LOW |
Expand... Containers should be forbidden from running with a root primary or supplementary GID.

Deployment 'RELEASE-NAME-audiobookshelf' should set 'spec.securityContext.runAsGroup', 'spec.securityContext.supplementalGroups[*]' and 'spec.securityContext.fsGroup' to integer greater than 0
|
Expand...https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted
https://avd.aquasec.com/appshield/ksv029
| - -## Containers - -##### Detected Containers - - tccr.io/truecharts/alpine:v3.15.2@sha256:29ed3480a0ee43f7af681fed5d4fc215516abf1c41eade6938b26d8c9c2c7583 - tccr.io/truecharts/alpine:v3.15.2@sha256:29ed3480a0ee43f7af681fed5d4fc215516abf1c41eade6938b26d8c9c2c7583 - tccr.io/truecharts/audiobookshelf:latest - -##### Scan Results - - -#### Container: tccr.io/truecharts/alpine:v3.15.2@sha256:29ed3480a0ee43f7af681fed5d4fc215516abf1c41eade6938b26d8c9c2c7583 (alpine 3.15.2) - - -**alpine** - - -| Package | Vulnerability | Severity | Installed Version | Fixed Version | Links | -|:----------------|:------------------:|:-----------:|:------------------:|:-------------:|-----------------------------------------| -| busybox | CVE-2022-28391 | UNKNOWN | 1.34.1-r4 | 1.34.1-r5 |
Expand...https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch
https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch
https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661
| -| ssl_client | CVE-2022-28391 | UNKNOWN | 1.34.1-r4 | 1.34.1-r5 |
Expand...https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch
https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch
https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661
| -| zlib | CVE-2018-25032 | HIGH | 1.2.11-r3 | 1.2.12-r0 |
Expand...http://www.openwall.com/lists/oss-security/2022/03/25/2
http://www.openwall.com/lists/oss-security/2022/03/26/1
https://access.redhat.com/security/cve/CVE-2018-25032
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25032
https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531
https://github.com/madler/zlib/compare/v1.2.11...v1.2.12
https://github.com/madler/zlib/issues/605
https://github.com/sparklemotion/nokogiri/releases/tag/v1.13.4
https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-v6gp-9mmm-c6p5
https://groups.google.com/g/ruby-security-ann/c/vX7qSjsvWis/m/TJWN4oOKBwAJ
https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html
https://nvd.nist.gov/vuln/detail/CVE-2018-25032
https://ubuntu.com/security/notices/USN-5355-1
https://ubuntu.com/security/notices/USN-5355-2
https://ubuntu.com/security/notices/USN-5359-1
https://www.debian.org/security/2022/dsa-5111
https://www.openwall.com/lists/oss-security/2022/03/24/1
https://www.openwall.com/lists/oss-security/2022/03/28/1
https://www.openwall.com/lists/oss-security/2022/03/28/3
| - - -#### Container: tccr.io/truecharts/alpine:v3.15.2@sha256:29ed3480a0ee43f7af681fed5d4fc215516abf1c41eade6938b26d8c9c2c7583 (alpine 3.15.2) - - -**alpine** - - -| Package | Vulnerability | Severity | Installed Version | Fixed Version | Links | -|:----------------|:------------------:|:-----------:|:------------------:|:-------------:|-----------------------------------------| -| busybox | CVE-2022-28391 | UNKNOWN | 1.34.1-r4 | 1.34.1-r5 |
Expand...https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch
https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch
https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661
| -| ssl_client | CVE-2022-28391 | UNKNOWN | 1.34.1-r4 | 1.34.1-r5 |
Expand...https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch
https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch
https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661
| -| zlib | CVE-2018-25032 | HIGH | 1.2.11-r3 | 1.2.12-r0 |
Expand...http://www.openwall.com/lists/oss-security/2022/03/25/2
http://www.openwall.com/lists/oss-security/2022/03/26/1
https://access.redhat.com/security/cve/CVE-2018-25032
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25032
https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531
https://github.com/madler/zlib/compare/v1.2.11...v1.2.12
https://github.com/madler/zlib/issues/605
https://github.com/sparklemotion/nokogiri/releases/tag/v1.13.4
https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-v6gp-9mmm-c6p5
https://groups.google.com/g/ruby-security-ann/c/vX7qSjsvWis/m/TJWN4oOKBwAJ
https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html
https://nvd.nist.gov/vuln/detail/CVE-2018-25032
https://ubuntu.com/security/notices/USN-5355-1
https://ubuntu.com/security/notices/USN-5355-2
https://ubuntu.com/security/notices/USN-5359-1
https://www.debian.org/security/2022/dsa-5111
https://www.openwall.com/lists/oss-security/2022/03/24/1
https://www.openwall.com/lists/oss-security/2022/03/28/1
https://www.openwall.com/lists/oss-security/2022/03/28/3
| - - -#### Container: tccr.io/truecharts/audiobookshelf:latest (alpine 3.15.0) - - -**alpine** - - -| Package | Vulnerability | Severity | Installed Version | Fixed Version | Links | -|:----------------|:------------------:|:-----------:|:------------------:|:-------------:|-----------------------------------------| -| busybox | CVE-2022-28391 | UNKNOWN | 1.34.1-r3 | 1.34.1-r5 |
Expand...https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch
https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch
https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661
| -| expat | CVE-2022-25235 | CRITICAL | 2.4.4-r0 | 2.4.5-r0 |
Expand...http://www.openwall.com/lists/oss-security/2022/02/19/1
https://access.redhat.com/security/cve/CVE-2022-25235
https://blog.hartwork.org/posts/expat-2-4-5-released/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25235
https://github.com/libexpat/libexpat/pull/562
https://github.com/libexpat/libexpat/pull/562/commits/367ae600b48d74261bbc339b17e9318424049791 (fix)
https://github.com/libexpat/libexpat/pull/562/commits/97cfdc3fa7dca759880d81e371901f4620279106 (tests)
https://linux.oracle.com/cve/CVE-2022-25235.html
https://linux.oracle.com/errata/ELSA-2022-1069.html
https://lists.debian.org/debian-lts-announce/2022/03/msg00007.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3UFRBA3UQVIQKXTBUQXDWQOVWNBKLERU/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Y27XO3JMKAOMQZVPS3B4MJGEAHCZF5OM/
https://nvd.nist.gov/vuln/detail/CVE-2022-25235
https://security.netapp.com/advisory/ntap-20220303-0008/
https://ubuntu.com/security/notices/USN-5288-1
https://www.debian.org/security/2022/dsa-5085
| -| expat | CVE-2022-25236 | CRITICAL | 2.4.4-r0 | 2.4.5-r0 |
Expand...http://www.openwall.com/lists/oss-security/2022/02/19/1
https://access.redhat.com/security/cve/CVE-2022-25236
https://blog.hartwork.org/posts/expat-2-4-5-released/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25236
https://github.com/libexpat/libexpat/pull/561
https://github.com/libexpat/libexpat/pull/561/commits/2de077423fb22750ebea599677d523b53cb93b1d (test)
https://github.com/libexpat/libexpat/pull/561/commits/a2fe525e660badd64b6c557c2b1ec26ddc07f6e4 (fix)
https://github.com/libexpat/libexpat/pull/577
https://linux.oracle.com/cve/CVE-2022-25236.html
https://linux.oracle.com/errata/ELSA-2022-1069.html
https://lists.debian.org/debian-lts-announce/2022/03/msg00007.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3UFRBA3UQVIQKXTBUQXDWQOVWNBKLERU/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Y27XO3JMKAOMQZVPS3B4MJGEAHCZF5OM/
https://nvd.nist.gov/vuln/detail/CVE-2022-25236
https://security.netapp.com/advisory/ntap-20220303-0008/
https://ubuntu.com/security/notices/USN-5288-1
https://www.debian.org/security/2022/dsa-5085
| -| expat | CVE-2022-25315 | CRITICAL | 2.4.4-r0 | 2.4.5-r0 |
Expand...http://www.openwall.com/lists/oss-security/2022/02/19/1
https://access.redhat.com/security/cve/CVE-2022-25315
https://blog.hartwork.org/posts/expat-2-4-5-released/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25315
https://github.com/libexpat/libexpat/pull/559
https://linux.oracle.com/cve/CVE-2022-25315.html
https://linux.oracle.com/errata/ELSA-2022-1069.html
https://lists.debian.org/debian-lts-announce/2022/03/msg00007.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3UFRBA3UQVIQKXTBUQXDWQOVWNBKLERU/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Y27XO3JMKAOMQZVPS3B4MJGEAHCZF5OM/
https://nvd.nist.gov/vuln/detail/CVE-2022-25315
https://security.netapp.com/advisory/ntap-20220303-0008/
https://ubuntu.com/security/notices/USN-5320-1
https://www.debian.org/security/2022/dsa-5085
| -| expat | CVE-2022-25314 | HIGH | 2.4.4-r0 | 2.4.5-r0 |
Expand...http://www.openwall.com/lists/oss-security/2022/02/19/1
https://access.redhat.com/security/cve/CVE-2022-25314
https://blog.hartwork.org/posts/expat-2-4-5-released/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25314
https://github.com/libexpat/libexpat/pull/560
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3UFRBA3UQVIQKXTBUQXDWQOVWNBKLERU/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Y27XO3JMKAOMQZVPS3B4MJGEAHCZF5OM/
https://nvd.nist.gov/vuln/detail/CVE-2022-25314
https://security.netapp.com/advisory/ntap-20220303-0008/
https://ubuntu.com/security/notices/USN-5320-1
https://www.debian.org/security/2022/dsa-5085
| -| expat | CVE-2022-25313 | MEDIUM | 2.4.4-r0 | 2.4.5-r0 |
Expand...http://www.openwall.com/lists/oss-security/2022/02/19/1
https://access.redhat.com/security/cve/CVE-2022-25313
https://blog.hartwork.org/posts/expat-2-4-5-released/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25313
https://github.com/libexpat/libexpat/pull/558
https://lists.debian.org/debian-lts-announce/2022/03/msg00007.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3UFRBA3UQVIQKXTBUQXDWQOVWNBKLERU/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Y27XO3JMKAOMQZVPS3B4MJGEAHCZF5OM/
https://nvd.nist.gov/vuln/detail/CVE-2022-25313
https://security.netapp.com/advisory/ntap-20220303-0008/
https://ubuntu.com/security/notices/USN-5320-1
https://www.debian.org/security/2022/dsa-5085
| -| libblkid | CVE-2022-0563 | MEDIUM | 2.37.3-r0 | 2.37.4-r0 |
Expand...https://access.redhat.com/security/cve/CVE-2022-0563
https://lore.kernel.org/util-linux/20220214110609.msiwlm457ngoic6w@ws.net.home/T/#u
https://nvd.nist.gov/vuln/detail/CVE-2022-0563
https://security.netapp.com/advisory/ntap-20220331-0002/
| -| libcrypto1.1 | CVE-2022-0778 | HIGH | 1.1.1l-r7 | 1.1.1n-r0 |
Expand...https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-0778.json
https://access.redhat.com/security/cve/CVE-2022-0778
https://crates.io/crates/openssl-src
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246
https://linux.oracle.com/cve/CVE-2022-0778.html
https://linux.oracle.com/errata/ELSA-2022-9272.html
https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html
https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/
https://nvd.nist.gov/vuln/detail/CVE-2022-0778
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002
https://rustsec.org/advisories/RUSTSEC-2022-0014.html
https://security.netapp.com/advisory/ntap-20220321-0002/
https://ubuntu.com/security/notices/USN-5328-1
https://ubuntu.com/security/notices/USN-5328-2
https://www.debian.org/security/2022/dsa-5103
https://www.openssl.org/news/secadv/20220315.txt
https://www.tenable.com/security/tns-2022-06
https://www.tenable.com/security/tns-2022-07
https://www.tenable.com/security/tns-2022-08
| -| libmount | CVE-2022-0563 | MEDIUM | 2.37.3-r0 | 2.37.4-r0 |
Expand...https://access.redhat.com/security/cve/CVE-2022-0563
https://lore.kernel.org/util-linux/20220214110609.msiwlm457ngoic6w@ws.net.home/T/#u
https://nvd.nist.gov/vuln/detail/CVE-2022-0563
https://security.netapp.com/advisory/ntap-20220331-0002/
| -| libretls | CVE-2022-0778 | HIGH | 3.3.4-r2 | 3.3.4-r3 |
Expand...https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-0778.json
https://access.redhat.com/security/cve/CVE-2022-0778
https://crates.io/crates/openssl-src
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246
https://linux.oracle.com/cve/CVE-2022-0778.html
https://linux.oracle.com/errata/ELSA-2022-9272.html
https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html
https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/
https://nvd.nist.gov/vuln/detail/CVE-2022-0778
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002
https://rustsec.org/advisories/RUSTSEC-2022-0014.html
https://security.netapp.com/advisory/ntap-20220321-0002/
https://ubuntu.com/security/notices/USN-5328-1
https://ubuntu.com/security/notices/USN-5328-2
https://www.debian.org/security/2022/dsa-5103
https://www.openssl.org/news/secadv/20220315.txt
https://www.tenable.com/security/tns-2022-06
https://www.tenable.com/security/tns-2022-07
https://www.tenable.com/security/tns-2022-08
| -| libssl1.1 | CVE-2022-0778 | HIGH | 1.1.1l-r7 | 1.1.1n-r0 |
Expand...https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-0778.json
https://access.redhat.com/security/cve/CVE-2022-0778
https://crates.io/crates/openssl-src
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246
https://linux.oracle.com/cve/CVE-2022-0778.html
https://linux.oracle.com/errata/ELSA-2022-9272.html
https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html
https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/
https://nvd.nist.gov/vuln/detail/CVE-2022-0778
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002
https://rustsec.org/advisories/RUSTSEC-2022-0014.html
https://security.netapp.com/advisory/ntap-20220321-0002/
https://ubuntu.com/security/notices/USN-5328-1
https://ubuntu.com/security/notices/USN-5328-2
https://www.debian.org/security/2022/dsa-5103
https://www.openssl.org/news/secadv/20220315.txt
https://www.tenable.com/security/tns-2022-06
https://www.tenable.com/security/tns-2022-07
https://www.tenable.com/security/tns-2022-08
| -| libuuid | CVE-2022-0563 | MEDIUM | 2.37.3-r0 | 2.37.4-r0 |
Expand...https://access.redhat.com/security/cve/CVE-2022-0563
https://lore.kernel.org/util-linux/20220214110609.msiwlm457ngoic6w@ws.net.home/T/#u
https://nvd.nist.gov/vuln/detail/CVE-2022-0563
https://security.netapp.com/advisory/ntap-20220331-0002/
| -| ssl_client | CVE-2022-28391 | UNKNOWN | 1.34.1-r3 | 1.34.1-r5 |
Expand...https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch
https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch
https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661
| -| zlib | CVE-2018-25032 | HIGH | 1.2.11-r3 | 1.2.12-r0 |
Expand...http://www.openwall.com/lists/oss-security/2022/03/25/2
http://www.openwall.com/lists/oss-security/2022/03/26/1
https://access.redhat.com/security/cve/CVE-2018-25032
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25032
https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531
https://github.com/madler/zlib/compare/v1.2.11...v1.2.12
https://github.com/madler/zlib/issues/605
https://github.com/sparklemotion/nokogiri/releases/tag/v1.13.4
https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-v6gp-9mmm-c6p5
https://groups.google.com/g/ruby-security-ann/c/vX7qSjsvWis/m/TJWN4oOKBwAJ
https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html
https://nvd.nist.gov/vuln/detail/CVE-2018-25032
https://ubuntu.com/security/notices/USN-5355-1
https://ubuntu.com/security/notices/USN-5355-2
https://ubuntu.com/security/notices/USN-5359-1
https://www.debian.org/security/2022/dsa-5111
https://www.openwall.com/lists/oss-security/2022/03/24/1
https://www.openwall.com/lists/oss-security/2022/03/28/1
https://www.openwall.com/lists/oss-security/2022/03/28/3
| - -**node-pkg** - - -| Package | Vulnerability | Severity | Installed Version | Fixed Version | Links | -|:----------------|:------------------:|:-----------:|:------------------:|:-------------:|-----------------------------------------| -| ansi-regex | CVE-2021-3807 | MEDIUM | 3.0.0 | 3.0.1, 4.1.1, 5.0.1, 6.0.1 |
Expand...https://access.redhat.com/security/cve/CVE-2021-3807
https://app.snyk.io/vuln/SNYK-JS-ANSIREGEX-1583908
https://github.com/advisories/GHSA-93q8-gq69-wqmw
https://github.com/chalk/ansi-regex/commit/8d1d7cdb586269882c4bdc1b7325d0c58c8f76f9
https://github.com/chalk/ansi-regex/issues/38#issuecomment-924086311
https://github.com/chalk/ansi-regex/issues/38#issuecomment-925924774
https://github.com/chalk/ansi-regex/releases/tag/v6.0.1
https://huntr.dev/bounties/5b3cf33b-ede0-4398-9974-800876dfd994
https://linux.oracle.com/cve/CVE-2021-3807.html
https://linux.oracle.com/errata/ELSA-2022-0350.html
https://nvd.nist.gov/vuln/detail/CVE-2021-3807
| -| ansi-regex | CVE-2021-3807 | MEDIUM | 4.1.0 | 3.0.1, 4.1.1, 5.0.1, 6.0.1 |
Expand...https://access.redhat.com/security/cve/CVE-2021-3807
https://app.snyk.io/vuln/SNYK-JS-ANSIREGEX-1583908
https://github.com/advisories/GHSA-93q8-gq69-wqmw
https://github.com/chalk/ansi-regex/commit/8d1d7cdb586269882c4bdc1b7325d0c58c8f76f9
https://github.com/chalk/ansi-regex/issues/38#issuecomment-924086311
https://github.com/chalk/ansi-regex/issues/38#issuecomment-925924774
https://github.com/chalk/ansi-regex/releases/tag/v6.0.1
https://huntr.dev/bounties/5b3cf33b-ede0-4398-9974-800876dfd994
https://linux.oracle.com/cve/CVE-2021-3807.html
https://linux.oracle.com/errata/ELSA-2022-0350.html
https://nvd.nist.gov/vuln/detail/CVE-2021-3807
| -| axios | CVE-2021-3749 | HIGH | 0.21.1 | 0.21.2 |
Expand...https://access.redhat.com/security/cve/CVE-2021-3749
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3749
https://github.com/advisories/GHSA-cph5-m8f7-6c5x
https://github.com/axios/axios/commit/5b457116e31db0e88fede6c428e969e87f290929
https://github.com/axios/axios/pull/3980
https://huntr.dev/bounties/1e8f07fc-c384-4ff9-8498-0690de2e8c31
https://huntr.dev/bounties/1e8f07fc-c384-4ff9-8498-0690de2e8c31/
https://lists.apache.org/thread.html/r075d464dce95cd13c03ff9384658edcccd5ab2983b82bfc72b62bb10@%3Ccommits.druid.apache.org%3E
https://lists.apache.org/thread.html/r216f0fd0a3833856d6a6a1fada488cadba45f447d87010024328ccf2@%3Ccommits.druid.apache.org%3E
https://lists.apache.org/thread.html/r3ae6d2654f92c5851bdb73b35e96b0e4e3da39f28ac7a1b15ae3aab8@%3Ccommits.druid.apache.org%3E
https://lists.apache.org/thread.html/r4bf1b32983f50be00f9752214c1b53738b621be1c2b0dbd68c7f2391@%3Ccommits.druid.apache.org%3E
https://lists.apache.org/thread.html/r7324ecc35b8027a51cb6ed629490fcd3b2d7cf01c424746ed5744bf1@%3Ccommits.druid.apache.org%3E
https://lists.apache.org/thread.html/r74d0b359408fff31f87445261f0ee13bdfcac7d66f6b8e846face321@%3Ccommits.druid.apache.org%3E
https://lists.apache.org/thread.html/ra15d63c54dc6474b29f72ae4324bcb03038758545b3ab800845de7a1@%3Ccommits.druid.apache.org%3E
https://lists.apache.org/thread.html/rc263bfc5b53afcb7e849605478d73f5556eb0c00d1f912084e407289@%3Ccommits.druid.apache.org%3E
https://lists.apache.org/thread.html/rfa094029c959da0f7c8cd7dc9c4e59d21b03457bf0cedf6c93e1bb0a@%3Cdev.druid.apache.org%3E
https://lists.apache.org/thread.html/rfc5c478053ff808671aef170f3d9fc9d05cc1fab8fb64431edc66103@%3Ccommits.druid.apache.org%3E
https://nvd.nist.gov/vuln/detail/CVE-2021-3749
https://www.npmjs.com/package/axios
| -| engine.io | CVE-2022-21676 | HIGH | 5.1.1 | 6.1.1, 5.2.1, 4.1.2 |
Expand...https://github.com/advisories/GHSA-273r-mgr4-v34f
https://github.com/socketio/engine.io/commit/66f889fc1d966bf5bfa0de1939069153643874ab
https://github.com/socketio/engine.io/commit/a70800d7e96da32f6e6622804ef659ebc58659db
https://github.com/socketio/engine.io/commit/c0e194d44933bd83bf9a4b126fca68ba7bf5098c
https://github.com/socketio/engine.io/releases/tag/4.1.2
https://github.com/socketio/engine.io/releases/tag/5.2.1
https://github.com/socketio/engine.io/releases/tag/6.1.1
https://github.com/socketio/engine.io/security/advisories/GHSA-273r-mgr4-v34f
https://nvd.nist.gov/vuln/detail/CVE-2022-21676
| -| follow-redirects | CVE-2022-0155 | HIGH | 1.14.1 | 1.14.7 |
Expand...https://access.redhat.com/security/cve/CVE-2022-0155
https://github.com/advisories/GHSA-74fj-2j2h-c42q
https://github.com/follow-redirects/follow-redirects/commit/8b347cbcef7c7b72a6e9be20f5710c17d6163c22
https://huntr.dev/bounties/fc524e4b-ebb6-427d-ab67-a64181020406
https://nvd.nist.gov/vuln/detail/CVE-2022-0155
| -| follow-redirects | CVE-2022-0536 | MEDIUM | 1.14.1 | 1.14.8 |
Expand...https://access.redhat.com/security/cve/CVE-2022-0536
https://github.com/advisories/GHSA-pw2r-vq6v-hr8c
https://github.com/follow-redirects/follow-redirects/commit/62e546a99c07c3ee5e4e0718c84a6ca127c5c445
https://huntr.dev/bounties/7cf2bf90-52da-4d59-8028-a73b132de0db
https://nvd.nist.gov/vuln/detail/CVE-2022-0536
| -| minimist | CVE-2021-44906 | CRITICAL | 1.2.5 | 1.2.6 |
Expand...https://access.redhat.com/security/cve/CVE-2021-44906
https://github.com/Marynk/JavaScript-vulnerability-detection/blob/main/minimist%20PoC.zip
https://github.com/advisories/GHSA-xvch-5gv4-984h
https://github.com/substack/minimist/blob/master/index.js#L69
https://github.com/substack/minimist/issues/164
https://nvd.nist.gov/vuln/detail/CVE-2021-44906
https://snyk.io/vuln/SNYK-JS-MINIMIST-559764
https://stackoverflow.com/questions/8588563/adding-custom-properties-to-a-function/20278068#20278068
| -| moment | CVE-2022-24785 | HIGH | 2.29.1 | 2.29.2 |
Expand...https://access.redhat.com/security/cve/CVE-2022-24785
https://github.com/advisories/GHSA-8hfj-j24r-96c4
https://github.com/moment/moment/commit/4211bfc8f15746be4019bba557e29a7ba83d54c5
https://github.com/moment/moment/security/advisories/GHSA-8hfj-j24r-96c4
https://nvd.nist.gov/vuln/detail/CVE-2022-24785
| diff --git a/charts/dev/audiobookshelf/templates/common.yaml b/charts/dev/audiobookshelf/templates/common.yaml deleted file mode 100644 index f6d3b6d3a08..00000000000 --- a/charts/dev/audiobookshelf/templates/common.yaml +++ /dev/null @@ -1,2 +0,0 @@ -{{/* Render the templates */}} -{{ include "common.all" . }} diff --git a/charts/dev/audiobookshelf/values.yaml b/charts/dev/audiobookshelf/values.yaml deleted file mode 100644 index 3dd9d2655fc..00000000000 --- a/charts/dev/audiobookshelf/values.yaml +++ /dev/null @@ -1,30 +0,0 @@ -env: {} -image: - pullPolicy: IfNotPresent - repository: tccr.io/truecharts/audiobookshelf - tag: latest -persistence: - audiobooks: - enabled: true - mountPath: /audiobooks - config: - enabled: true - mountPath: /config - metadata: - enabled: true - mountPath: /metadata -podSecurityContext: - runAsGroup: 0 - runAsUser: 0 -securityContext: - readOnlyRootFilesystem: false - runAsNonRoot: false -service: - main: - enabled: true - ports: - main: - enabled: true - port: 13378 - protocol: TCP - targetPort: 80 diff --git a/charts/incubator/audiobookshelf/Chart.yaml b/charts/incubator/audiobookshelf/Chart.yaml new file mode 100644 index 00000000000..63583cc3e2a --- /dev/null +++ b/charts/incubator/audiobookshelf/Chart.yaml @@ -0,0 +1,26 @@ +apiVersion: v2 +appVersion: "10.6.2" +dependencies: +- name: common + repository: https://library-charts.truecharts.org + version: 9.2.8 +description: Audiobookshelf is a self-hosted audiobook server for managing and playing your audiobooks. +home: https://github.com/truecharts/apps/tree/master/charts/stable/audiobookshelf +icon: https://truecharts.org/_static/img/appicons/audiobookshelf.png +keywords: +- audiobookshelf +kubeVersion: '>=1.16.0-0' +maintainers: +- email: info@truecharts.org + name: TrueCharts + url: https://truecharts.org +name: audiobookshelf +sources: +- https://hub.docker.com/r/advplyr/audiobookshelf +- https://github.com/advplyr/audiobookshelf +version: 0.0.1 +annotations: + truecharts.org/catagories: | + - media + truecharts.org/SCALE-support: "true" + truecharts.org/grade: U diff --git a/charts/dev/audiobookshelf/questions.yaml b/charts/incubator/audiobookshelf/questions.yaml similarity index 95% rename from charts/dev/audiobookshelf/questions.yaml rename to charts/incubator/audiobookshelf/questions.yaml index 20adced1209..a5655e29a52 100644 --- a/charts/dev/audiobookshelf/questions.yaml +++ b/charts/incubator/audiobookshelf/questions.yaml @@ -24,7 +24,6 @@ questions: type: boolean default: true # Include{global} - - variable: controller group: "Controller" label: "" @@ -76,7 +75,6 @@ questions: description: "(Legacy) OnDelete: ignore .spec.template changes" # Include{controllerExpert} - # Include{containerConfig} - variable: service @@ -105,7 +103,7 @@ questions: description: "This port exposes the container port on the service" schema: type: int - default: 13378 + default: 10223 required: true - variable: advanced label: "Show Advanced settings" @@ -118,7 +116,7 @@ questions: label: "Port Type" schema: type: string - default: TCP + default: "HTTP" enum: - value: HTTP description: "HTTP" @@ -140,9 +138,7 @@ questions: description: "The internal(!) port on the container the Application runs on" schema: type: int - default: 80 - - + default: 10223 - variable: serviceexpert group: "Networking and Services" @@ -171,10 +167,9 @@ questions: additional_attrs: true type: dict attrs: - - - variable: audiobooks - label: "audiobooks Storage" - description: "Container Path audiobooks" + - variable: config + label: "App Config Storage" + description: "Stores the Application Configuration." schema: additional_attrs: true type: dict @@ -215,9 +210,9 @@ questions: - value: "Memory" description: "Memory" # Include{persistenceAdvanced} - - variable: config - label: "config Storage" - description: "Container Path config" + - variable: audiobooks + label: "App Audiobooks Storage" + description: "Stores the Application Audiobooks." schema: additional_attrs: true type: dict @@ -259,8 +254,8 @@ questions: description: "Memory" # Include{persistenceAdvanced} - variable: metadata - label: "metadata Storage" - description: "Container Path metadata" + label: "App Metadata Storage" + description: "Stores the Application Metadata." schema: additional_attrs: true type: dict @@ -302,10 +297,8 @@ questions: description: "Memory" # Include{persistenceAdvanced} - # Include{persistenceList} - - variable: ingress label: "" group: "Ingress" @@ -354,7 +347,7 @@ questions: label: "ReadOnly Root Filesystem" schema: type: boolean - default: false + default: true - variable: allowPrivilegeEscalation label: "Allow Privilege Escalation" schema: @@ -364,7 +357,7 @@ questions: label: "runAsNonRoot" schema: type: boolean - default: false + default: true # Include{securityContextAdvanced} - variable: podSecurityContext @@ -379,13 +372,13 @@ questions: description: "The UserID of the user running the application" schema: type: int - default: 0 + default: 568 - variable: runAsGroup label: "runAsGroup" description: The groupID this App of the user running the application" schema: type: int - default: 0 + default: 568 - variable: fsGroup label: "fsGroup" description: "The group that should own ALL storage." @@ -394,7 +387,6 @@ questions: default: 568 # Include{podSecurityContextAdvanced} - # Include{resources} # Include{advanced} diff --git a/charts/incubator/audiobookshelf/templates/_secrets.tpl b/charts/incubator/audiobookshelf/templates/_secrets.tpl new file mode 100644 index 00000000000..c37dca46e84 --- /dev/null +++ b/charts/incubator/audiobookshelf/templates/_secrets.tpl @@ -0,0 +1,20 @@ +{{/* Define the secrets */}} +{{- define "audiobookshelf.secrets" -}} +--- + +apiVersion: v1 +kind: Secret +type: Opaque +metadata: + name: audiobookshelf-secrets +{{- $audiobookshelfprevious := lookup "v1" "Secret" .Release.Namespace "audiobookshelf-secrets" }} +{{- $token_secret := "" }} +data: + {{- if $audiobookshelfprevious}} + TOKEN_SECRET: {{ index $audiobookshelfprevious.data "TOKEN_SECRET" }} + {{- else }} + {{- $token_secret := randAlphaNum 32 }} + TOKEN_SECRET: {{ $token_secret | b64enc }} + {{- end }} + +{{- end -}} diff --git a/charts/incubator/audiobookshelf/templates/common.yaml b/charts/incubator/audiobookshelf/templates/common.yaml new file mode 100644 index 00000000000..5eee2f50806 --- /dev/null +++ b/charts/incubator/audiobookshelf/templates/common.yaml @@ -0,0 +1,8 @@ +{{/* Make sure all variables are set properly */}} +{{- include "common.setup" . }} + +{{/* Render secrets for audiobookshelf */}} +{{- include "audiobookshelf.secrets" . }} + +{{/* Render the templates */}} +{{ include "common.postSetup" . }} diff --git a/charts/incubator/audiobookshelf/values.yaml b/charts/incubator/audiobookshelf/values.yaml new file mode 100644 index 00000000000..8c8fdc85237 --- /dev/null +++ b/charts/incubator/audiobookshelf/values.yaml @@ -0,0 +1,32 @@ +image: + repository: tccr.io/truecharts/audiobookshelf + tag: v1.7.2@sha256:8722272af210eed4ddbca512f0171d1042ccc445a72113dc21eddf07aad4204c + pullPolicy: IfNotPresent + +env: + AUDIOBOOKSHELF_UID: "{{ .Values.security.PUID }}" + AUDIOBOOKSHELF_GID: "{{ .Values.podSecurityContext.fsGroup }}" + PORT: "{{ .Values.service.main.ports.main.port }}" + +envValueFrom: + TOKEN_SECRET: + secretKeyRef: + name: audiobookshelf-secrets + key: TOKEN_SECRET + +service: + main: + ports: + main: + port: 10223 + +persistence: + config: + enabled: true + mountPath: "/config" + audiobooks: + enabled: true + mountPath: "/audiobooks" + metadata: + enabled: true + mountPath: "/metadata" diff --git a/charts/incubator/ddns-updater/Chart.yaml b/charts/incubator/ddns-updater/Chart.yaml new file mode 100644 index 00000000000..56c7dddc9b6 --- /dev/null +++ b/charts/incubator/ddns-updater/Chart.yaml @@ -0,0 +1,26 @@ +apiVersion: v2 +appVersion: "10.6.2" +dependencies: +- name: common + repository: https://library-charts.truecharts.org + version: 9.2.8 +description: Light container updating DNS A and/or AAAA records periodically for multiple DNS providers +home: https://github.com/truecharts/apps/tree/master/charts/stable/ddns-updater +icon: https://truecharts.org/_static/img/appicons/ddns-updater.png +keywords: +- ddns-updater +kubeVersion: '>=1.16.0-0' +maintainers: +- email: info@truecharts.org + name: TrueCharts + url: https://truecharts.org +name: ddns-updater +sources: +- https://github.com/qdm12/ddns-updater +- https://hub.docker.com/r/qmcgaw/ddns-updater +version: 0.0.1 +annotations: + truecharts.org/catagories: | + - network + truecharts.org/SCALE-support: "true" + truecharts.org/grade: U diff --git a/charts/incubator/ddns-updater/questions.yaml b/charts/incubator/ddns-updater/questions.yaml new file mode 100644 index 00000000000..9bc6118cba6 --- /dev/null +++ b/charts/incubator/ddns-updater/questions.yaml @@ -0,0 +1,418 @@ +# Include{groups} +portals: + open: + protocols: + - "$kubernetes-resource_configmap_portal_protocol" + host: + - "$kubernetes-resource_configmap_portal_host" + ports: + - "$kubernetes-resource_configmap_portal_port" +questions: + - variable: portal + group: "Container Image" + label: "Configure Portal Button" + schema: + type: dict + hidden: true + attrs: + - variable: enabled + label: "Enable" + description: "enable the portal button" + schema: + hidden: true + editable: false + type: boolean + default: true +# Include{global} + - variable: controller + group: "Controller" + label: "" + schema: + additional_attrs: true + type: dict + attrs: + - variable: advanced + label: "Show Advanced Controller Settings" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: type + description: "Please specify type of workload to deploy" + label: "(Advanced) Controller Type" + schema: + type: string + default: "deployment" + required: true + enum: + - value: "deployment" + description: "Deployment" + - value: "statefulset" + description: "Statefulset" + - value: "daemonset" + description: "Daemonset" + - variable: replicas + description: "Number of desired pod replicas" + label: "Desired Replicas" + schema: + type: int + default: 1 + required: true + - variable: strategy + description: "Please specify type of workload to deploy" + label: "(Advanced) Update Strategy" + schema: + type: string + default: "Recreate" + required: true + enum: + - value: "Recreate" + description: "Recreate: Kill existing pods before creating new ones" + - value: "RollingUpdate" + description: "RollingUpdate: Create new pods and then kill old ones" + - value: "OnDelete" + description: "(Legacy) OnDelete: ignore .spec.template changes" +# Include{controllerExpert} + - variable: env + group: "Container Configuration" + label: "Image Environment" + schema: + additional_attrs: true + type: dict + attrs: + - variable: CONFIG + label: "CONFIG" + description: "One line JSON object containing the entire config." + schema: + type: string + default: "" + - variable: PERIOD + label: "PERIOD" + description: "Default period of IP address check." + schema: + type: string + default: "5m" + - variable: IPV6_PREFIX + label: "IPV6_PREFIX" + description: "IPv6 prefix used to mask your public IPv6 address and your record IPv6 address. Ranges from /0 to /128 depending on your ISP." + schema: + type: string + default: "/128" + - variable: PUBLICIP_FETCHERS + label: "PUBLICIP_FETCHERS" + description: "Comma separated fetcher types to obtain the public IP address from http and dns." + schema: + type: string + default: "all" + - variable: PUBLICIP_HTTP_PROVIDERS + label: "PUBLICIP_HTTP_PROVIDERS" + description: "Comma separated providers to obtain the public IP address (ipv4 or ipv6)." + schema: + type: string + default: "all" + - variable: PUBLICIPV4_HTTP_PROVIDERS + label: "PUBLICIPV4_HTTP_PROVIDERS" + description: "Comma separated providers to obtain the public IPv4 address only." + schema: + type: string + default: "all" + - variable: PUBLICIPV6_HTTP_PROVIDERS + label: "PUBLICIPV6_HTTP_PROVIDERS" + description: "Comma separated providers to obtain the public IPv6 address only." + schema: + type: string + default: "all" + - variable: PUBLICIP_DNS_PROVIDERS + label: "PUBLICIP_DNS_PROVIDERS" + description: "Comma separated providers to obtain the public IP address (IPv4 and/or IPv6)." + schema: + type: string + default: "all" + - variable: PUBLICIP_DNS_TIMEOUT + label: "PUBLICIP_DNS_TIMEOUT" + description: "Public IP DNS query timeout." + schema: + type: string + default: "3s" + - variable: UPDATE_COOLDOWN_PERIOD + label: "UPDATE_COOLDOWN_PERIOD" + description: "Duration to cooldown between updates for each record. This is useful to avoid being rate limited or banned." + schema: + type: string + default: "5m" + - variable: HTTP_TIMEOUT + label: "HTTP_TIMEOUT" + description: "Timeout for all HTTP requests." + schema: + type: string + default: "10s" + - variable: BACKUP_PERIOD + label: "BACKUP_PERIOD" + description: "Set to a period (i.e. 72h15m) to enable zip backups of data/config.json and data/updates.json in a zip file." + schema: + type: string + default: "0" + - variable: LOG_LEVEL + label: "LOG_LEVEL" + description: "Level of logging, debug, info, warning or error." + schema: + type: string + default: "info" + enum: + - value: "info" + description: "info" + - value: "debug" + description: "debug" + - value: "warning" + description: "warning" + - value: "error" + description: "error" + - variable: LOG_CALLER + label: "LOG_CALLER" + description: "Show caller per log line, hidden or short." + schema: + type: string + default: "hidden" + enum: + - value: "hidden" + description: "hidden" + - value: "short" + description: "short" + - variable: SHOUTRRR_ADDRESSES + label: "SHOUTRRR_ADDRESSES" + description: "(optional) Comma separated list of Shoutrrr addresses (notification services)" + schema: + type: string + default: "" +# Include{containerConfig} + + - variable: service + group: "Networking and Services" + label: "Configure Service(s)" + schema: + additional_attrs: true + type: dict + attrs: + - variable: main + label: "Main Service" + description: "The Primary service on which the healthcheck runs, often the webUI" + schema: + additional_attrs: true + type: dict + attrs: +# Include{serviceSelector} + - variable: main + label: "Main Service Port Configuration" + schema: + additional_attrs: true + type: dict + attrs: + - variable: port + label: "Port" + description: "This port exposes the container port on the service" + schema: + type: int + default: 10227 + required: true + - variable: advanced + label: "Show Advanced settings" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: protocol + label: "Port Type" + schema: + type: string + default: "HTTP" + enum: + - value: HTTP + description: "HTTP" + - value: "HTTPS" + description: "HTTPS" + - value: TCP + description: "TCP" + - value: "UDP" + description: "UDP" + - variable: nodePort + label: "Node Port (Optional)" + description: "This port gets exposed to the node. Only considered when service type is NodePort, Simple or LoadBalancer" + schema: + type: int + min: 9000 + max: 65535 + - variable: targetPort + label: "Target Port" + description: "The internal(!) port on the container the Application runs on" + schema: + type: int + default: 10227 + + - variable: serviceexpert + group: "Networking and Services" + label: "Show Expert Config" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: hostNetwork + group: "Networking and Services" + label: "Host-Networking (Complicated)" + schema: + type: boolean + default: false + +# Include{serviceExpert} + +# Include{serviceList} + + - variable: persistence + label: "Integrated Persistent Storage" + description: "Integrated Persistent Storage" + group: "Storage and Persistence" + schema: + additional_attrs: true + type: dict + attrs: + - variable: data + label: "App Data Storage" + description: "Stores the Application Data." + schema: + additional_attrs: true + type: dict + attrs: + - variable: type + label: "Type of Storage" + description: "Sets the persistence type, Anything other than PVC could break rollback!" + schema: + type: string + default: "simplePVC" + enum: + - value: "simplePVC" + description: "PVC (simple)" + - value: "simpleHP" + description: "HostPath (simple)" + - value: "emptyDir" + description: "emptyDir" + - value: "pvc" + description: "pvc" + - value: "hostPath" + description: "hostPath" +# Include{persistenceBasic} + - variable: hostPath + label: "hostPath" + description: "Path inside the container the storage is mounted" + schema: + show_if: [["type", "=", "hostPath"]] + type: hostpath + - variable: medium + label: "EmptyDir Medium" + schema: + show_if: [["type", "=", "emptyDir"]] + type: string + default: "" + enum: + - value: "" + description: "Default" + - value: "Memory" + description: "Memory" +# Include{persistenceAdvanced} + +# Include{persistenceList} + + - variable: ingress + label: "" + group: "Ingress" + schema: + additional_attrs: true + type: dict + attrs: + - variable: main + label: "Main Ingress" + schema: + additional_attrs: true + type: dict + attrs: +# Include{ingressDefault} + +# Include{ingressTLS} + +# Include{ingressTraefik} + +# Include{ingressExpert} + +# Include{ingressList} + +# Include{security} + + - variable: advancedSecurity + label: "Show Advanced Security Settings" + group: "Security and Permissions" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: securityContext + label: "Security Context" + schema: + additional_attrs: true + type: dict + attrs: + - variable: privileged + label: "Privileged mode" + schema: + type: boolean + default: false + - variable: readOnlyRootFilesystem + label: "ReadOnly Root Filesystem" + schema: + type: boolean + default: true + - variable: allowPrivilegeEscalation + label: "Allow Privilege Escalation" + schema: + type: boolean + default: false + - variable: runAsNonRoot + label: "runAsNonRoot" + schema: + type: boolean + default: true +# Include{securityContextAdvanced} + + - variable: podSecurityContext + group: "Security and Permissions" + label: "Pod Security Context" + schema: + additional_attrs: true + type: dict + attrs: + - variable: runAsUser + label: "runAsUser" + description: "The UserID of the user running the application" + schema: + type: int + default: 568 + - variable: runAsGroup + label: "runAsGroup" + description: The groupID this App of the user running the application" + schema: + type: int + default: 568 + - variable: fsGroup + label: "fsGroup" + description: "The group that should own ALL storage." + schema: + type: int + default: 568 +# Include{podSecurityContextAdvanced} + +# Include{resources} + +# Include{advanced} + +# Include{addons} diff --git a/charts/incubator/ddns-updater/templates/common.yaml b/charts/incubator/ddns-updater/templates/common.yaml new file mode 100644 index 00000000000..a6613c2ce21 --- /dev/null +++ b/charts/incubator/ddns-updater/templates/common.yaml @@ -0,0 +1 @@ +{{ include "common.all" . }} diff --git a/charts/incubator/ddns-updater/values.yaml b/charts/incubator/ddns-updater/values.yaml new file mode 100644 index 00000000000..c8b577451e0 --- /dev/null +++ b/charts/incubator/ddns-updater/values.yaml @@ -0,0 +1,18 @@ +image: + repository: qmcgaw/ddns-updater + tag: v2.4.1@sha256:7cfcb227e982b4fe835966503da77457537a9f9b6a3a699ae7b8994080b3857f + pullPolicy: IfNotPresent + +env: + LISTENING_PORT: "{{ .Values.service.main.ports.main.port }}" + +service: + main: + ports: + main: + port: 10227 + +persistence: + data: + enabled: true + mountPath: "/updater/data" diff --git a/charts/incubator/fluidd/Chart.yaml b/charts/incubator/fluidd/Chart.yaml new file mode 100644 index 00000000000..5ee27126253 --- /dev/null +++ b/charts/incubator/fluidd/Chart.yaml @@ -0,0 +1,26 @@ +apiVersion: v2 +appVersion: "10.6.2" +dependencies: +- name: common + repository: https://library-charts.truecharts.org + version: 9.2.8 +description: Fluidd is a free and open-source Klipper web interface for managing your 3d printer. +home: https://github.com/truecharts/apps/tree/master/charts/stable/fluidd +icon: https://truecharts.org/_static/img/appicons/fluidd.png +keywords: +- fluidd +kubeVersion: '>=1.16.0-0' +maintainers: +- email: info@truecharts.org + name: TrueCharts + url: https://truecharts.org +name: fluidd +sources: +- https://github.com/fluidd-core/fluidd +- https://hub.docker.com/r/cadriel/fluidd +version: 0.0.1 +annotations: + truecharts.org/catagories: | + - utilities + truecharts.org/SCALE-support: "true" + truecharts.org/grade: U diff --git a/charts/incubator/fluidd/questions.yaml b/charts/incubator/fluidd/questions.yaml new file mode 100644 index 00000000000..e0cf11953cb --- /dev/null +++ b/charts/incubator/fluidd/questions.yaml @@ -0,0 +1,256 @@ +# Include{groups} +portals: + open: + protocols: + - "$kubernetes-resource_configmap_portal_protocol" + host: + - "$kubernetes-resource_configmap_portal_host" + ports: + - "$kubernetes-resource_configmap_portal_port" +questions: + - variable: portal + group: "Container Image" + label: "Configure Portal Button" + schema: + type: dict + hidden: true + attrs: + - variable: enabled + label: "Enable" + description: "enable the portal button" + schema: + hidden: true + editable: false + type: boolean + default: true +# Include{global} + - variable: controller + group: "Controller" + label: "" + schema: + additional_attrs: true + type: dict + attrs: + - variable: advanced + label: "Show Advanced Controller Settings" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: type + description: "Please specify type of workload to deploy" + label: "(Advanced) Controller Type" + schema: + type: string + default: "deployment" + required: true + enum: + - value: "deployment" + description: "Deployment" + - value: "statefulset" + description: "Statefulset" + - value: "daemonset" + description: "Daemonset" + - variable: replicas + description: "Number of desired pod replicas" + label: "Desired Replicas" + schema: + type: int + default: 1 + required: true + - variable: strategy + description: "Please specify type of workload to deploy" + label: "(Advanced) Update Strategy" + schema: + type: string + default: "RollingUpdate" + required: true + enum: + - value: "Recreate" + description: "Recreate: Kill existing pods before creating new ones" + - value: "RollingUpdate" + description: "RollingUpdate: Create new pods and then kill old ones" + - value: "OnDelete" + description: "(Legacy) OnDelete: ignore .spec.template changes" +# Include{controllerExpert} + +# Include{containerConfig} + + - variable: service + group: "Networking and Services" + label: "Configure Service(s)" + schema: + additional_attrs: true + type: dict + attrs: + - variable: main + label: "Main Service" + description: "The Primary service on which the healthcheck runs, often the webUI" + schema: + additional_attrs: true + type: dict + attrs: +# Include{serviceSelector} + - variable: main + label: "Main Service Port Configuration" + schema: + additional_attrs: true + type: dict + attrs: + - variable: port + label: "Port" + description: "This port exposes the container port on the service" + schema: + type: int + default: 10224 + required: true + - variable: advanced + label: "Show Advanced settings" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: protocol + label: "Port Type" + schema: + type: string + default: "HTTP" + enum: + - value: HTTP + description: "HTTP" + - value: "HTTPS" + description: "HTTPS" + - value: TCP + description: "TCP" + - value: "UDP" + description: "UDP" + - variable: nodePort + label: "Node Port (Optional)" + description: "This port gets exposed to the node. Only considered when service type is NodePort, Simple or LoadBalancer" + schema: + type: int + min: 9000 + max: 65535 + - variable: targetPort + label: "Target Port" + description: "The internal(!) port on the container the Application runs on" + schema: + type: int + default: 80 + + - variable: serviceexpert + group: "Networking and Services" + label: "Show Expert Config" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: hostNetwork + group: "Networking and Services" + label: "Host-Networking (Complicated)" + schema: + type: boolean + default: false + +# Include{serviceExpert} + +# Include{serviceList} + +# Include{persistenceList} + + - variable: ingress + label: "" + group: "Ingress" + schema: + additional_attrs: true + type: dict + attrs: + - variable: main + label: "Main Ingress" + schema: + additional_attrs: true + type: dict + attrs: +# Include{ingressDefault} + +# Include{ingressTLS} + +# Include{ingressTraefik} + +# Include{ingressExpert} + +# Include{ingressList} + +# Include{security} + + - variable: advancedSecurity + label: "Show Advanced Security Settings" + group: "Security and Permissions" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: securityContext + label: "Security Context" + schema: + additional_attrs: true + type: dict + attrs: + - variable: privileged + label: "Privileged mode" + schema: + type: boolean + default: false + - variable: readOnlyRootFilesystem + label: "ReadOnly Root Filesystem" + schema: + type: boolean + default: false + - variable: allowPrivilegeEscalation + label: "Allow Privilege Escalation" + schema: + type: boolean + default: false + - variable: runAsNonRoot + label: "runAsNonRoot" + schema: + type: boolean + default: false +# Include{securityContextAdvanced} + + - variable: podSecurityContext + group: "Security and Permissions" + label: "Pod Security Context" + schema: + additional_attrs: true + type: dict + attrs: + - variable: runAsUser + label: "runAsUser" + description: "The UserID of the user running the application" + schema: + type: int + default: 0 + - variable: runAsGroup + label: "runAsGroup" + description: The groupID this App of the user running the application" + schema: + type: int + default: 0 + - variable: fsGroup + label: "fsGroup" + description: "The group that should own ALL storage." + schema: + type: int + default: 568 +# Include{podSecurityContextAdvanced} + +# Include{resources} + +# Include{advanced} + +# Include{addons} diff --git a/charts/incubator/fluidd/templates/common.yaml b/charts/incubator/fluidd/templates/common.yaml new file mode 100644 index 00000000000..a6613c2ce21 --- /dev/null +++ b/charts/incubator/fluidd/templates/common.yaml @@ -0,0 +1 @@ +{{ include "common.all" . }} diff --git a/charts/incubator/fluidd/values.yaml b/charts/incubator/fluidd/values.yaml new file mode 100644 index 00000000000..4fde30d969f --- /dev/null +++ b/charts/incubator/fluidd/values.yaml @@ -0,0 +1,19 @@ +image: + repository: cadriel/fluidd + tag: v1.17.2@sha256:d494da14703f260b273b2c87d50605c88ca286d143199e113e7b1934c1a8ecd8 + pullPolicy: IfNotPresent + +securityContext: + readOnlyRootFilesystem: false + runAsNonRoot: false + +podSecurityContext: + runAsUser: 0 + runAsGroup: 0 + +service: + main: + ports: + main: + port: 10224 + targetPort: 80 diff --git a/charts/incubator/nocodb/Chart.yaml b/charts/incubator/nocodb/Chart.yaml new file mode 100644 index 00000000000..875e33b50cb --- /dev/null +++ b/charts/incubator/nocodb/Chart.yaml @@ -0,0 +1,34 @@ +apiVersion: v2 +appVersion: "10.6.2" +dependencies: +- name: common + repository: https://library-charts.truecharts.org + version: 9.2.8 +- condition: postgresql.enabled + name: postgresql + repository: https://charts.truecharts.org/ + version: 7.0.42 +- condition: redis.enabled + name: redis + repository: https://charts.truecharts.org + version: 2.0.34 +description: Turns any MySQL, PostgreSQL, SQL Server, SQLite & MariaDB into a smart-spreadsheet. +home: https://github.com/truecharts/apps/tree/master/charts/stable/nocodb +icon: https://truecharts.org/_static/img/appicons/nocodb.png +keywords: +- nocodb +kubeVersion: '>=1.16.0-0' +maintainers: +- email: info@truecharts.org + name: TrueCharts + url: https://truecharts.org +name: nocodb +sources: +- https://hub.docker.com/r/nocodb/nocodb +- https://github.com/nocodb/nocodb +version: 0.0.1 +annotations: + truecharts.org/catagories: | + - productivity + truecharts.org/SCALE-support: "true" + truecharts.org/grade: U diff --git a/charts/incubator/nocodb/questions.yaml b/charts/incubator/nocodb/questions.yaml new file mode 100644 index 00000000000..1bcd1245126 --- /dev/null +++ b/charts/incubator/nocodb/questions.yaml @@ -0,0 +1,421 @@ +# Include{groups} +portals: + open: + protocols: + - "$kubernetes-resource_configmap_portal_protocol" + host: + - "$kubernetes-resource_configmap_portal_host" + ports: + - "$kubernetes-resource_configmap_portal_port" +questions: + - variable: portal + group: "Container Image" + label: "Configure Portal Button" + schema: + type: dict + hidden: true + attrs: + - variable: enabled + label: "Enable" + description: "enable the portal button" + schema: + hidden: true + editable: false + type: boolean + default: true +# Include{global} + - variable: controller + group: "Controller" + label: "" + schema: + additional_attrs: true + type: dict + attrs: + - variable: advanced + label: "Show Advanced Controller Settings" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: type + description: "Please specify type of workload to deploy" + label: "(Advanced) Controller Type" + schema: + type: string + default: "deployment" + required: true + enum: + - value: "deployment" + description: "Deployment" + - value: "statefulset" + description: "Statefulset" + - value: "daemonset" + description: "Daemonset" + - variable: replicas + description: "Number of desired pod replicas" + label: "Desired Replicas" + schema: + type: int + default: 1 + required: true + - variable: strategy + description: "Please specify type of workload to deploy" + label: "(Advanced) Update Strategy" + schema: + type: string + default: "Recreate" + required: true + enum: + - value: "Recreate" + description: "Recreate: Kill existing pods before creating new ones" + - value: "RollingUpdate" + description: "RollingUpdate: Create new pods and then kill old ones" + - value: "OnDelete" + description: "(Legacy) OnDelete: ignore .spec.template changes" +# Include{controllerExpert} + - variable: secret + group: "Container Configuration" + label: "Image Secrets" + schema: + additional_attrs: true + type: dict + attrs: + - variable: AWS_ACCESS_KEY_ID + label: "AWS Access Key ID" + description: "For Litestream - S3 access key id." + schema: + type: string + private: true + default: "" + - variable: AWS_SECRET_ACCESS_KEY + label: "AWS Secret Access Key" + description: For Litestream - S3 secret access key." + schema: + type: string + private: true + default: "" + - variable: AWS_BUCKET + label: "AWS Bucket" + description: "For Litestream - S3 bucket." + schema: + type: string + default: "" + - variable: AWS_BUCKET_PATH + label: "AWS Bucket Path" + description: "For Litestream - S3 bucket path (like folder within S3 bucket)." + schema: + type: string + default: "" + - variable: NC_GOOGLE_CLIENT_ID + label: "Google Client ID" + description: "Google client id to enable google authentication." + schema: + type: string + default: "" + - variable: NC_GOOGLE_CLIENT_SECRET + label: "Google Client Secret" + description: "Google client secret to enable google authentication." + schema: + type: string + default: "" + + - variable: env + group: "Container Configuration" + label: "Image Environment" + schema: + additional_attrs: true + type: dict + attrs: + - variable: NC_PUBLIC_URL + label: "Public URL" + description: "Used for sending Email invitations." + schema: + type: string + default: "" + - variable: NC_JWT_EXPIRES_IN + label: "JWT Expires in" + description: "JWT token expiry time." + schema: + type: string + default: "10h" + - variable: DISABLE_SPLASH_SCREEN + label: "Disable Splash Screen" + description: "Disables the default splash screen(initial welcome animation) and matrix screensaver will disable." + schema: + type: boolean + default: true + - variable: NC_INVITE_ONLY_SIGNUP + label: "Invite Only Signup" + description: "Allow users to signup only via invite url, value should be any non-empty string." + schema: + type: boolean + default: true + - variable: NC_DISABLE_CACHE + label: "Disable Cache" + description: "If it is set to true, then meta data will not be cached." + schema: + type: boolean + default: true + - variable: NC_DISABLE_TELE + label: "Disable Telemetry" + description: "Disable telemetry." + schema: + type: boolean + default: true + - variable: NC_DISABLE_ERR_REPORT + label: "Disable Error Report" + description: "Disable Error Reporting." + schema: + type: boolean + default: true + - variable: NC_REQUEST_BODY_SIZE + label: "Request Body Size" + description: "Request body size limit." + schema: + type: int + default: 1048576 + - variable: NC_EXPORT_MAX_TIMEOUT + label: "Export Max Timeout" + description: "After timeout, csv gets downloaded in batches." + schema: + type: int + default: 5000 + - variable: NC_SENTRY_DSN + label: "Sentry DSN" + description: "For Sentry monitoring." + schema: + type: string + default: "" + +# Include{containerConfig} + + - variable: service + group: "Networking and Services" + label: "Configure Service(s)" + schema: + additional_attrs: true + type: dict + attrs: + - variable: main + label: "Main Service" + description: "The Primary service on which the healthcheck runs, often the webUI" + schema: + additional_attrs: true + type: dict + attrs: +# Include{serviceSelector} + - variable: main + label: "Main Service Port Configuration" + schema: + additional_attrs: true + type: dict + attrs: + - variable: port + label: "Port" + description: "This port exposes the container port on the service" + schema: + type: int + default: 10226 + required: true + - variable: advanced + label: "Show Advanced settings" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: protocol + label: "Port Type" + schema: + type: string + default: "HTTP" + enum: + - value: HTTP + description: "HTTP" + - value: "HTTPS" + description: "HTTPS" + - value: TCP + description: "TCP" + - value: "UDP" + description: "UDP" + - variable: nodePort + label: "Node Port (Optional)" + description: "This port gets exposed to the node. Only considered when service type is NodePort, Simple or LoadBalancer" + schema: + type: int + min: 9000 + max: 65535 + - variable: targetPort + label: "Target Port" + description: "The internal(!) port on the container the Application runs on" + schema: + type: int + default: 10226 + + - variable: serviceexpert + group: "Networking and Services" + label: "Show Expert Config" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: hostNetwork + group: "Networking and Services" + label: "Host-Networking (Complicated)" + schema: + type: boolean + default: false + +# Include{serviceExpert} + +# Include{serviceList} + + - variable: persistence + label: "Integrated Persistent Storage" + description: "Integrated Persistent Storage" + group: "Storage and Persistence" + schema: + additional_attrs: true + type: dict + attrs: + - variable: data + label: "App Data Storage" + description: "Stores the Application Data." + schema: + additional_attrs: true + type: dict + attrs: + - variable: type + label: "Type of Storage" + description: "Sets the persistence type, Anything other than PVC could break rollback!" + schema: + type: string + default: "simplePVC" + enum: + - value: "simplePVC" + description: "PVC (simple)" + - value: "simpleHP" + description: "HostPath (simple)" + - value: "emptyDir" + description: "emptyDir" + - value: "pvc" + description: "pvc" + - value: "hostPath" + description: "hostPath" +# Include{persistenceBasic} + - variable: hostPath + label: "hostPath" + description: "Path inside the container the storage is mounted" + schema: + show_if: [["type", "=", "hostPath"]] + type: hostpath + - variable: medium + label: "EmptyDir Medium" + schema: + show_if: [["type", "=", "emptyDir"]] + type: string + default: "" + enum: + - value: "" + description: "Default" + - value: "Memory" + description: "Memory" +# Include{persistenceAdvanced} + +# Include{persistenceList} + + - variable: ingress + label: "" + group: "Ingress" + schema: + additional_attrs: true + type: dict + attrs: + - variable: main + label: "Main Ingress" + schema: + additional_attrs: true + type: dict + attrs: +# Include{ingressDefault} + +# Include{ingressTLS} + +# Include{ingressTraefik} + +# Include{ingressExpert} + +# Include{ingressList} + +# Include{security} + + - variable: advancedSecurity + label: "Show Advanced Security Settings" + group: "Security and Permissions" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: securityContext + label: "Security Context" + schema: + additional_attrs: true + type: dict + attrs: + - variable: privileged + label: "Privileged mode" + schema: + type: boolean + default: false + - variable: readOnlyRootFilesystem + label: "ReadOnly Root Filesystem" + schema: + type: boolean + default: false + - variable: allowPrivilegeEscalation + label: "Allow Privilege Escalation" + schema: + type: boolean + default: false + - variable: runAsNonRoot + label: "runAsNonRoot" + schema: + type: boolean + default: false +# Include{securityContextAdvanced} + + - variable: podSecurityContext + group: "Security and Permissions" + label: "Pod Security Context" + schema: + additional_attrs: true + type: dict + attrs: + - variable: runAsUser + label: "runAsUser" + description: "The UserID of the user running the application" + schema: + type: int + default: 0 + - variable: runAsGroup + label: "runAsGroup" + description: The groupID this App of the user running the application" + schema: + type: int + default: 0 + - variable: fsGroup + label: "fsGroup" + description: "The group that should own ALL storage." + schema: + type: int + default: 568 +# Include{podSecurityContextAdvanced} + +# Include{resources} + +# Include{advanced} + +# Include{addons} diff --git a/charts/incubator/nocodb/templates/_configmap.tpl b/charts/incubator/nocodb/templates/_configmap.tpl new file mode 100644 index 00000000000..37f485acfab --- /dev/null +++ b/charts/incubator/nocodb/templates/_configmap.tpl @@ -0,0 +1,14 @@ +{{- define "nocodb.configmap" -}} + +{{- $pgPass := .Values.postgresql.postgresqlPassword | trimAll "\"" }} +{{- $pgUser := .Values.postgresql.postgresqlUsername }} +{{- $pgDB := .Values.postgresql.postgresqlDatabase }} +--- +apiVersion: v1 +kind: ConfigMap +metadata: + name: nocodb-configmap +data: + NC_DB: "{{ printf "pg://%v-postgresql:5432?u=%v&p=%v&d=%v" .Release.Name $pgUser $pgPass $pgDB }}" + NC_MIN: "{{ ternary "true" "" .Values.env.DISABLE_SPLASH_SCREEN }}" +{{- end -}} diff --git a/charts/incubator/nocodb/templates/_secrets.tpl b/charts/incubator/nocodb/templates/_secrets.tpl new file mode 100644 index 00000000000..fa77fcdcbdf --- /dev/null +++ b/charts/incubator/nocodb/templates/_secrets.tpl @@ -0,0 +1,20 @@ +{{/* Define the secrets */}} +{{- define "nocodb.secrets" -}} +--- + +apiVersion: v1 +kind: Secret +type: Opaque +metadata: + name: nocodb-secrets +{{- $nocodbprevious := lookup "v1" "Secret" .Release.Namespace "nocodb-secrets" }} +{{- $auth_jwt_token := "" }} +data: + {{- if $nocodbprevious}} + NC_AUTH_JWT_SECRET: {{ index $nocodbprevious.data "NC_AUTH_JWT_SECRET" }} + {{- else }} + {{- $auth_jwt_token := randAlphaNum 32 }} + NC_AUTH_JWT_SECRET: {{ $auth_jwt_token | b64enc }} + {{- end }} + +{{- end -}} diff --git a/charts/incubator/nocodb/templates/common.yaml b/charts/incubator/nocodb/templates/common.yaml new file mode 100644 index 00000000000..fbaa7698de4 --- /dev/null +++ b/charts/incubator/nocodb/templates/common.yaml @@ -0,0 +1,11 @@ +{{/* Make sure all variables are set properly */}} +{{- include "common.setup" . }} + +{{/* Render configmap for nocodb */}} +{{- include "nocodb.configmap" . }} + +{{/* Render secrets for nocodb */}} +{{- include "nocodb.secrets" . }} + +{{/* Render the templates */}} +{{ include "common.postSetup" . }} diff --git a/charts/incubator/nocodb/values.yaml b/charts/incubator/nocodb/values.yaml new file mode 100644 index 00000000000..5bf91ec8de1 --- /dev/null +++ b/charts/incubator/nocodb/values.yaml @@ -0,0 +1,55 @@ +image: + repository: nocodb/nocodb + tag: 0.90.2@sha256:cdcd01cf9d0748ed4ad18aded465728681ae059d38beffb287987881b861323e + pullPolicy: IfNotPresent + +securityContext: + readOnlyRootFilesystem: false + runAsNonRoot: false + +podSecurityContext: + runAsUser: 0 + runAsGroup: 0 + +env: + NC_MIN: "" + PORT: "{{ .Values.service.main.ports.main.port }}" + # User Defined + NC_PUBLIC_URL: "http://localhost:10226" + NC_DISABLE_TELE: true + DISABLE_SPLASH_SCREEN: false + +envValueFrom: + NC_REDIS_URL: + secretKeyRef: + name: rediscreds + key: url + NC_AUTH_JWT_SECRET: + secretKeyRef: + name: nocodb-secrets + key: NC_AUTH_JWT_SECRET + +envFrom: + - configMapRef: + name: nocodb-configmap + +service: + main: + ports: + main: + port: 10226 + +persistence: + data: + enabled: true + mountPath: "/usr/app/data" + +postgresql: + enabled: true + existingSecret: "dbcreds" + postgresqlUsername: nocodb + postgresqlDatabase: nocodb + +redis: + enabled: true + existingSecret: "rediscreds" diff --git a/charts/incubator/rss-bridge/Chart.yaml b/charts/incubator/rss-bridge/Chart.yaml new file mode 100644 index 00000000000..74451c3b861 --- /dev/null +++ b/charts/incubator/rss-bridge/Chart.yaml @@ -0,0 +1,25 @@ +apiVersion: v2 +appVersion: "10.6.2" +dependencies: +- name: common + repository: https://library-charts.truecharts.org + version: 9.2.8 +description: RSS-Bridge is a PHP project capable of generating RSS and Atom feeds for websites that don't have one. +home: https://github.com/truecharts/apps/tree/master/charts/stable/rss-bridge +icon: https://truecharts.org/_static/img/appicons/rss-bridge.png +keywords: +- rss-bridge +kubeVersion: '>=1.16.0-0' +maintainers: +- email: info@truecharts.org + name: TrueCharts + url: https://truecharts.org +name: rss-bridge +sources: +- https://github.com/RSS-Bridge/rss-bridge +version: 0.0.1 +annotations: + truecharts.org/catagories: | + - media + truecharts.org/SCALE-support: "true" + truecharts.org/grade: U diff --git a/charts/incubator/rss-bridge/questions.yaml b/charts/incubator/rss-bridge/questions.yaml new file mode 100644 index 00000000000..81458ed0cb9 --- /dev/null +++ b/charts/incubator/rss-bridge/questions.yaml @@ -0,0 +1,308 @@ +# Include{groups} +portals: + open: + protocols: + - "$kubernetes-resource_configmap_portal_protocol" + host: + - "$kubernetes-resource_configmap_portal_host" + ports: + - "$kubernetes-resource_configmap_portal_port" +questions: + - variable: portal + group: "Container Image" + label: "Configure Portal Button" + schema: + type: dict + hidden: true + attrs: + - variable: enabled + label: "Enable" + description: "enable the portal button" + schema: + hidden: true + editable: false + type: boolean + default: true +# Include{global} + - variable: controller + group: "Controller" + label: "" + schema: + additional_attrs: true + type: dict + attrs: + - variable: advanced + label: "Show Advanced Controller Settings" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: type + description: "Please specify type of workload to deploy" + label: "(Advanced) Controller Type" + schema: + type: string + default: "deployment" + required: true + enum: + - value: "deployment" + description: "Deployment" + - value: "statefulset" + description: "Statefulset" + - value: "daemonset" + description: "Daemonset" + - variable: replicas + description: "Number of desired pod replicas" + label: "Desired Replicas" + schema: + type: int + default: 1 + required: true + - variable: strategy + description: "Please specify type of workload to deploy" + label: "(Advanced) Update Strategy" + schema: + type: string + default: "Recreate" + required: true + enum: + - value: "Recreate" + description: "Recreate: Kill existing pods before creating new ones" + - value: "RollingUpdate" + description: "RollingUpdate: Create new pods and then kill old ones" + - value: "OnDelete" + description: "(Legacy) OnDelete: ignore .spec.template changes" +# Include{controllerExpert} + +# Include{containerConfig} + + - variable: service + group: "Networking and Services" + label: "Configure Service(s)" + schema: + additional_attrs: true + type: dict + attrs: + - variable: main + label: "Main Service" + description: "The Primary service on which the healthcheck runs, often the webUI" + schema: + additional_attrs: true + type: dict + attrs: +# Include{serviceSelector} + - variable: main + label: "Main Service Port Configuration" + schema: + additional_attrs: true + type: dict + attrs: + - variable: port + label: "Port" + description: "This port exposes the container port on the service" + schema: + type: int + default: 10225 + required: true + - variable: advanced + label: "Show Advanced settings" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: protocol + label: "Port Type" + schema: + type: string + default: "HTTP" + enum: + - value: HTTP + description: "HTTP" + - value: "HTTPS" + description: "HTTPS" + - value: TCP + description: "TCP" + - value: "UDP" + description: "UDP" + - variable: nodePort + label: "Node Port (Optional)" + description: "This port gets exposed to the node. Only considered when service type is NodePort, Simple or LoadBalancer" + schema: + type: int + min: 9000 + max: 65535 + - variable: targetPort + label: "Target Port" + description: "The internal(!) port on the container the Application runs on" + schema: + type: int + default: 10225 + + - variable: serviceexpert + group: "Networking and Services" + label: "Show Expert Config" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: hostNetwork + group: "Networking and Services" + label: "Host-Networking (Complicated)" + schema: + type: boolean + default: false + +# Include{serviceExpert} + +# Include{serviceList} + + - variable: persistence + label: "Integrated Persistent Storage" + description: "Integrated Persistent Storage" + group: "Storage and Persistence" + schema: + additional_attrs: true + type: dict + attrs: + - variable: config + label: "App Config Storage" + description: "Stores the Application Configuration." + schema: + additional_attrs: true + type: dict + attrs: + - variable: type + label: "Type of Storage" + description: "Sets the persistence type, Anything other than PVC could break rollback!" + schema: + type: string + default: "simplePVC" + enum: + - value: "simplePVC" + description: "PVC (simple)" + - value: "simpleHP" + description: "HostPath (simple)" + - value: "emptyDir" + description: "emptyDir" + - value: "pvc" + description: "pvc" + - value: "hostPath" + description: "hostPath" +# Include{persistenceBasic} + - variable: hostPath + label: "hostPath" + description: "Path inside the container the storage is mounted" + schema: + show_if: [["type", "=", "hostPath"]] + type: hostpath + - variable: medium + label: "EmptyDir Medium" + schema: + show_if: [["type", "=", "emptyDir"]] + type: string + default: "" + enum: + - value: "" + description: "Default" + - value: "Memory" + description: "Memory" +# Include{persistenceAdvanced} + +# Include{persistenceList} + + - variable: ingress + label: "" + group: "Ingress" + schema: + additional_attrs: true + type: dict + attrs: + - variable: main + label: "Main Ingress" + schema: + additional_attrs: true + type: dict + attrs: +# Include{ingressDefault} + +# Include{ingressTLS} + +# Include{ingressTraefik} + +# Include{ingressExpert} + +# Include{ingressList} + +# Include{security} + + - variable: advancedSecurity + label: "Show Advanced Security Settings" + group: "Security and Permissions" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: securityContext + label: "Security Context" + schema: + additional_attrs: true + type: dict + attrs: + - variable: privileged + label: "Privileged mode" + schema: + type: boolean + default: false + - variable: readOnlyRootFilesystem + label: "ReadOnly Root Filesystem" + schema: + type: boolean + default: false + - variable: allowPrivilegeEscalation + label: "Allow Privilege Escalation" + schema: + type: boolean + default: false + - variable: runAsNonRoot + label: "runAsNonRoot" + schema: + type: boolean + default: false +# Include{securityContextAdvanced} + + - variable: podSecurityContext + group: "Security and Permissions" + label: "Pod Security Context" + schema: + additional_attrs: true + type: dict + attrs: + - variable: runAsUser + label: "runAsUser" + description: "The UserID of the user running the application" + schema: + type: int + default: 0 + - variable: runAsGroup + label: "runAsGroup" + description: The groupID this App of the user running the application" + schema: + type: int + default: 0 + - variable: fsGroup + label: "fsGroup" + description: "The group that should own ALL storage." + schema: + type: int + default: 568 +# Include{podSecurityContextAdvanced} + +# Include{resources} + +# Include{advanced} + +# Include{addons} diff --git a/charts/incubator/rss-bridge/templates/common.yaml b/charts/incubator/rss-bridge/templates/common.yaml new file mode 100644 index 00000000000..a6613c2ce21 --- /dev/null +++ b/charts/incubator/rss-bridge/templates/common.yaml @@ -0,0 +1 @@ +{{ include "common.all" . }} diff --git a/charts/incubator/rss-bridge/values.yaml b/charts/incubator/rss-bridge/values.yaml new file mode 100644 index 00000000000..42cdb99685b --- /dev/null +++ b/charts/incubator/rss-bridge/values.yaml @@ -0,0 +1,26 @@ +image: + repository: rssbridge/rss-bridge + tag: 2022-01-20@sha256:2bb513b247fcd630abc8ab982bf4dd970a4d281b78db3d1c8dc859a587ea9f77 + pullPolicy: IfNotPresent + +securityContext: + readOnlyRootFilesystem: false + runAsNonRoot: false + +podSecurityContext: + runAsUser: 0 + runAsGroup: 0 + +env: + HTTP_PORT: "{{ .Values.service.main.ports.main.port }}" + +service: + main: + ports: + main: + port: 10225 + +persistence: + config: + enabled: true + mountPath: "/config" diff --git a/charts/stable/babybuddy/Chart.yaml b/charts/stable/babybuddy/Chart.yaml index 9470a0fd26e..dae1303a94e 100644 --- a/charts/stable/babybuddy/Chart.yaml +++ b/charts/stable/babybuddy/Chart.yaml @@ -1,11 +1,11 @@ apiVersion: v2 appVersion: "1.10.2" kubeVersion: '>=1.16.0-0' -version: 6.0.18 +version: 6.0.19 name: babybuddy description: Helps caregivers track sleep, feedings, diaper changes, tummy time and more to learn about and predict baby's needs without (as much) guess work. type: application -home: "https://github.com/truecharts/apps/tree/main/charts/babybuddy" +home: https://github.com/truecharts/apps/tree/stable/charts/babybuddy icon: https://truecharts.org/_static/img/appicons/babybuddy.png keywords: - baby @@ -15,7 +15,6 @@ keywords: - parenting sources: - https://github.com/babybuddy/babybuddy - - https://github.com/nicholaswilde/docker-babybuddy dependencies: - name: common repository: https://library-charts.truecharts.org diff --git a/charts/stable/babybuddy/questions.yaml b/charts/stable/babybuddy/questions.yaml index 30140387355..cec2b41779f 100644 --- a/charts/stable/babybuddy/questions.yaml +++ b/charts/stable/babybuddy/questions.yaml @@ -74,7 +74,19 @@ questions: - value: "OnDelete" description: "(Legacy) OnDelete: ignore .spec.template changes" # Include{controllerExpert} - + - variable: env + group: "Container Configuration" + label: "Image Environment" + schema: + additional_attrs: true + type: dict + attrs: + - variable: CSRF_TRUSTED_ORIGINS + label: "CSRF_TRUSTED_ORIGINS" + description: "Add any address you'd like to access babybuddy at (comma separated, no spaces)" + schema: + type: string + default: "" # Include{containerConfig} - variable: service @@ -258,12 +270,12 @@ questions: label: "ReadOnly Root Filesystem" schema: type: boolean - default: true + default: false - variable: allowPrivilegeEscalation label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: diff --git a/charts/stable/babybuddy/values.yaml b/charts/stable/babybuddy/values.yaml index d7ed7f6fc84..e9a8b1754bd 100644 --- a/charts/stable/babybuddy/values.yaml +++ b/charts/stable/babybuddy/values.yaml @@ -3,8 +3,6 @@ image: pullPolicy: IfNotPresent tag: v1.10.2@sha256:d16aaf39d206365955dda896efdb59ef652fcd40efa99ddb82db09fecca8d8ee -# See more environment variables in the babybuddy documentation -# https://github.com/linuxserver/docker-babybuddy#parameters env: DB_ENGINE: "django.db.backends.postgresql" DB_NAME: "{{ .Values.postgresql.postgresqlDatabase }}" @@ -22,7 +20,7 @@ envValueFrom: key: plainhost securityContext: - allowPrivilegeEscalation: true + readOnlyRootFilesystem: false runAsNonRoot: false podSecurityContext: @@ -43,7 +41,6 @@ persistence: varrun: enabled: true -# Enabled postgres postgresql: enabled: true existingSecret: "dbcreds"