runAsUser missing on several apps (#605)

* mealie and theloung only runAsRoot

* Add missing runAsUser and runAsNonRoot

* Remove podSecurityContext on  and

* Enable 568 user in values.yaml

charts/incubator/haste-server/Chart.yaml

@@ -21,4 +21,4 @@ name: haste-server
 sources:
 - https://github.com/seejohnrun/haste-server
 - https://github.com/k8s-at-home/container-images
-version: 1.1.7
+version: 1.1.8

charts/incubator/haste-server/SCALE/questions.yaml

@@ -500,6 +500,17 @@ questions:
     schema:
       type: dict
       attrs:
+        - variable: runAsNonRoot
+          label: "runAsNonRoot"
+          schema:
+            type: boolean
+            default: true
+        - variable: runAsUser
+          label: "runAsUser"
+          description: "The UserID of the user running the application"
+          schema:
+            type: int
+            default: 568
         - variable: runAsGroup
           label: "runAsGroup"
           description: The groupID this App of the user running the application"

charts/incubator/haste-server/values.yaml

@@ -16,6 +16,11 @@ image:
 strategy:
   type: Recreate
 
+podSecurityContext:
+  runAsNonRoot: true
+  runAsUser: 568
+  runAsGroup: 568
+
 # -- environment variables. See [image docs](https://github.com/seejohnrun/haste-server) for more details.
 # @default -- See below
 env:

charts/incubator/mealie/Chart.yaml

@@ -19,4 +19,4 @@ maintainers:
 name: mealie
 sources:
 - https://github.com/hay-kot/mealie
-version: 1.1.8
+version: 1.1.9

charts/incubator/mealie/SCALE/questions.yaml

@@ -489,28 +489,6 @@ questions:
             type: boolean
             default: false
 
-  - variable: podSecurityContext
-    group: "Security and Permissions"
-    label: "Pod Security Context"
-    schema:
-      type: dict
-      attrs:
-        - variable: runAsGroup
-          label: "runAsGroup"
-          description: The groupID this App of the user running the application"
-          schema:
-            type: int
-            default: 568
-        - variable: fsGroupChangePolicy
-          label: "When should we take ownership?"
-          schema:
-            type: string
-            default: "OnRootMismatch"
-            enum:
-              - value: "OnRootMismatch"
-                description: "OnRootMismatch"
-              - value: "Always"
-                description: "Always"
   - variable: resources
     group: "Resources and Devices"
     label: ""

charts/incubator/prowlarr/Chart.yaml

@@ -21,4 +21,4 @@ name: prowlarr
 sources:
 - https://github.com/Prowlarr/Prowlarr
 - https://github.com/k8s-at-home/container-images
-version: 1.1.10
+version: 1.1.11

charts/incubator/prowlarr/SCALE/questions.yaml

@@ -502,6 +502,17 @@ questions:
     schema:
       type: dict
       attrs:
+        - variable: runAsNonRoot
+          label: "runAsNonRoot"
+          schema:
+            type: boolean
+            default: true
+        - variable: runAsUser
+          label: "runAsUser"
+          description: "The UserID of the user running the application"
+          schema:
+            type: int
+            default: 568
         - variable: runAsGroup
           label: "runAsGroup"
           description: The groupID this App of the user running the application"

charts/incubator/prowlarr/values.yaml

@@ -13,6 +13,11 @@ image:
   # -- image pull policy
   pullPolicy: IfNotPresent
 
+podSecurityContext:
+  runAsNonRoot: true
+  runAsUser: 568
+  runAsGroup: 568
+
 # -- environment variables.
 # @default -- See below
 env:

charts/incubator/reg/Chart.yaml

@@ -19,4 +19,4 @@ name: reg
 sources:
 - https://github.com/genuinetools/reg
 - https://github.com/k8s-at-home/container-images/
-version: 1.1.7
+version: 1.1.8

charts/incubator/reg/SCALE/questions.yaml

@@ -490,6 +490,17 @@ questions:
     schema:
       type: dict
       attrs:
+        - variable: runAsNonRoot
+          label: "runAsNonRoot"
+          schema:
+            type: boolean
+            default: true
+        - variable: runAsUser
+          label: "runAsUser"
+          description: "The UserID of the user running the application"
+          schema:
+            type: int
+            default: 568
         - variable: runAsGroup
           label: "runAsGroup"
           description: The groupID this App of the user running the application"

charts/incubator/reg/values.yaml

@@ -13,6 +13,11 @@ image:
   # -- image tag
   tag: v0.16.1
 
+podSecurityContext:
+  runAsNonRoot: true
+  runAsUser: 568
+  runAsGroup: 568
+
 # -- environment variables. See more environment variables in the [reg documentation](https://github.com/genuinetools/reg).
 env:
   # -- Set the container timezone

charts/incubator/thelounge/Chart.yaml

@@ -21,4 +21,4 @@ maintainers:
 name: thelounge
 sources:
 - https://github.com/thelounge/thelounge
-version: 1.1.7
+version: 1.1.8

charts/incubator/thelounge/SCALE/questions.yaml

@@ -489,28 +489,6 @@ questions:
             type: boolean
             default: false
 
-  - variable: podSecurityContext
-    group: "Security and Permissions"
-    label: "Pod Security Context"
-    schema:
-      type: dict
-      attrs:
-        - variable: runAsGroup
-          label: "runAsGroup"
-          description: The groupID this App of the user running the application"
-          schema:
-            type: int
-            default: 568
-        - variable: fsGroupChangePolicy
-          label: "When should we take ownership?"
-          schema:
-            type: string
-            default: "OnRootMismatch"
-            enum:
-              - value: "OnRootMismatch"
-                description: "OnRootMismatch"
-              - value: "Always"
-                description: "Always"
   - variable: resources
     group: "Resources and Devices"
     label: ""