diff --git a/charts/incubator/portalexample/.helmignore b/charts/incubator/portalexample/.helmignore deleted file mode 100644 index e559de0a012..00000000000 --- a/charts/incubator/portalexample/.helmignore +++ /dev/null @@ -1,24 +0,0 @@ -# Patterns to ignore when building packages. -# This supports shell glob matching, relative path matching, and -# negation (prefixed with !). Only one pattern per line. -.DS_Store -# Common VCS dirs -.git/ -.gitignore -.bzr/ -.bzrignore -.hg/ -.hgignore -.svn/ -# Common backup files -*.swp -*.bak -*.tmp -*~ -# Various IDEs -.project -.idea/ -*.tmproj -.vscode/ -# OWNERS file for Kubernetes -OWNERS diff --git a/charts/incubator/portalexample/CHANGELOG.md b/charts/incubator/portalexample/CHANGELOG.md deleted file mode 100644 index 51663f9d381..00000000000 --- a/charts/incubator/portalexample/CHANGELOG.md +++ /dev/null @@ -1,62 +0,0 @@ -# Changelog
- - - -### [portalexample-0.0.2](https://github.com/truecharts/apps/compare/portalexample-0.0.1...portalexample-0.0.2) (2021-09-21) - -#### Chore - -* update non-major deps helm releases ([#1014](https://github.com/truecharts/apps/issues/1014)) - - - - -### portalexample-0.0.1 (2021-09-16) - - - - -### [pihole-2.0.5](https://github.com/truecharts/apps/compare/pihole-2.0.4...pihole-2.0.5) (2021-09-16) - - - - -### [pihole-2.0.4](https://github.com/truecharts/apps/compare/pihole-2.0.3...pihole-2.0.4) (2021-09-16) - - - - -### [pihole-2.0.3](https://github.com/truecharts/apps/compare/pihole-2.0.2...pihole-2.0.3) (2021-09-14) - -#### Fix - -* update pihole digest and versioning to mirror - - - - -### [pihole-2.0.2](https://github.com/truecharts/apps/compare/pihole-2.0.1...pihole-2.0.2) (2021-09-14) - -#### Fix - -* update pihole versioning to 2021 scheme - - - - -### [pihole-2.0.1](https://github.com/truecharts/apps/compare/pihole-1.0.7...pihole-2.0.1) (2021-09-13) - -#### Chore - -* move most remaining Apps to GHCR mirror ([#959](https://github.com/truecharts/apps/issues/959)) -* update non-major ([#962](https://github.com/truecharts/apps/issues/962)) - -#### Feat - -* add new GUI and VPN support to all Apps ([#977](https://github.com/truecharts/apps/issues/977)) -* Add VPN addon and move some config to includes ([#973](https://github.com/truecharts/apps/issues/973)) -* pin all container references to digests ([#963](https://github.com/truecharts/apps/issues/963)) -* Move some common containers to our own containers - - -## [pihole-1.0.7](https://github.com/truecharts/apps/compare/pihole-1.0.6...pihole-1.0.7) (2021-09-08) diff --git a/charts/incubator/portalexample/Chart.yaml b/charts/incubator/portalexample/Chart.yaml deleted file mode 100644 index 001af07d098..00000000000 --- a/charts/incubator/portalexample/Chart.yaml +++ /dev/null @@ -1,24 +0,0 @@ -apiVersion: v2 -appVersion: "2021.09" -dependencies: -- name: common - repository: https://truecharts.org/ - version: 7.0.14 -deprecated: false -description: portal example -home: https://github.com/truecharts/apps/tree/master/charts/stable/pihole -icon: https://upload.wikimedia.org/wikipedia/en/thumb/1/15/Pi-hole_vector_logo.svg/1200px-Pi-hole_vector_logo.svg.png -keywords: -- DNS -kubeVersion: '>=1.16.0-0' -maintainers: -- email: info@truecharts.org - name: TrueCharts - url: truecharts.org -name: portalexample -sources: -- https://pi-hole.net/ -- https://github.com/pi-hole -- https://github.com/pi-hole/docker-pi-hole -type: application -version: 0.0.2 diff --git a/charts/incubator/portalexample/README.md b/charts/incubator/portalexample/README.md deleted file mode 100644 index af87394e02c..00000000000 --- a/charts/incubator/portalexample/README.md +++ /dev/null @@ -1,39 +0,0 @@ -# Introduction - -portal example - -TrueCharts are designed to be installed as TrueNAS SCALE app only. We can not guarantee this charts works as a stand-alone helm installation. -**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/apps/issues/new/choose)** - -## Source Code - -* -* -* - -## Requirements - -Kubernetes: `>=1.16.0-0` - -## Dependencies - -| Repository | Name | Version | -|------------|------|---------| -| https://truecharts.org/ | common | 7.0.14 | - -## Installing the Chart - -To install this App on TrueNAS SCALE check our [Quick-Start Guide](https://truecharts.org/manual/Quick-Start%20Guides/03-Installing-an-App/). - -## Uninstalling the Chart - -To remove this App from TrueNAS SCALE check our [Quick-Start Guide](https://truecharts.org/manual/Quick-Start%20Guides/07-Deleting-an-App/). - -## Support - -- Please check our [quick-start guides](https://truecharts.org/manual/Quick-Start%20Guides/01-Open-Apps/) first. -- See the [Wiki](https://truecharts.org) -- Check our [Discord](https://discord.gg/tVsPTHWTtr) -- Open a [issue](https://github.com/truecharts/apps/issues/new/choose) ---- -All Rights Reserved - The TrueCharts Project diff --git a/charts/incubator/portalexample/SCALE/CHANGELOG.md b/charts/incubator/portalexample/SCALE/CHANGELOG.md deleted file mode 100644 index 187d3b1fada..00000000000 --- a/charts/incubator/portalexample/SCALE/CHANGELOG.md +++ /dev/null @@ -1,7 +0,0 @@ - - -### [portalexample-0.0.2](https://github.com/truecharts/apps/compare/portalexample-0.0.1...portalexample-0.0.2) (2021-09-21) - -#### Chore - -* update non-major deps helm releases ([#1014](https://github.com/truecharts/apps/issues/1014)) diff --git a/charts/incubator/portalexample/SCALE/item.yaml b/charts/incubator/portalexample/SCALE/item.yaml deleted file mode 100644 index 5baf68f09c7..00000000000 --- a/charts/incubator/portalexample/SCALE/item.yaml +++ /dev/null @@ -1,3 +0,0 @@ -categories: - - networking -icon_url: https://upload.wikimedia.org/wikipedia/en/thumb/1/15/Pi-hole_vector_logo.svg/1200px-Pi-hole_vector_logo.svg.png diff --git a/charts/incubator/portalexample/SCALE/ix_values.yaml b/charts/incubator/portalexample/SCALE/ix_values.yaml deleted file mode 100644 index 30d1119f39b..00000000000 --- a/charts/incubator/portalexample/SCALE/ix_values.yaml +++ /dev/null @@ -1,19 +0,0 @@ -## -# This file contains Values.yaml content that gets added to the output of questions.yaml -# It's ONLY meant for content that the user is NOT expected to change. -# Example: Everything under "image" is not included in questions.yaml but is included here. -## - -image: - repository: ghcr.io/truecharts/pihole - pullPolicy: IfNotPresent - tag: v2021.09@sha256:e043ab188da4c36abb11d70d82bbfb394ef5054abff21dafbaf54bc21861bd1e - -envFrom: - - configMapRef: - name: pihole-env - -## -# Most other defaults are set in questions.yaml -# For other options please refer to the wiki, default_values.yaml or the common library chart -## diff --git a/charts/incubator/portalexample/SCALE/questions.yaml b/charts/incubator/portalexample/SCALE/questions.yaml deleted file mode 100644 index 6cea15f4090..00000000000 --- a/charts/incubator/portalexample/SCALE/questions.yaml +++ /dev/null @@ -1,1073 +0,0 @@ -# Include{groups} -portals: - open: - protocols: - - "$kubernetes-resource_configmap_portal_protocol" - host: - - "$kubernetes-resource_configmap_portal_host" - ports: - - "$kubernetes-resource_configmap_portal_port" - path: "/" - admin: - protocols: - - "$kubernetes-resource_configmap_portal_protocol" - host: - - "$kubernetes-resource_configmap_portal_host" - ports: - - "$kubernetes-resource_configmap_portal_port" - path: "/admin/" -questions: - - variable: portal - group: "Container Image" - label: "Configure Portal Button" - schema: - type: dict - hidden: true - attrs: - - variable: enabled - label: "Enable" - description: "enable the portal button" - schema: - hidden: true - editable: false - type: boolean - default: true - - variable: controller - group: "Controller" - label: "" - schema: - type: dict - attrs: - - variable: type - description: "Please specify type of workload to deploy" - label: "(Advanced) Controller Type" - schema: - type: string - default: "deployment" - required: true - enum: - - value: "deployment" - description: "Deployment" - - value: "statefulset" - description: "Statefulset" - - value: "daemonset" - description: "Daemonset" - - variable: replicas - description: "Number of desired pod replicas" - label: "Desired Replicas" - schema: - type: int - default: 1 - required: true - - variable: strategy - description: "Please specify type of workload to deploy" - label: "(Advanced) Update Strategy" - schema: - type: string - default: "Recreate" - required: true - enum: - - value: "Recreate" - description: "Recreate: Kill existing pods before creating new ones" - - value: "RollingUpdate" - description: "RollingUpdate: Create new pods and then kill old ones" - - value: "OnDelete" - description: "(Legacy) OnDelete: ignore .spec.template changes" -# Include{controllerExpert} - - - variable: env - group: "Container Configuration" - label: "Image Environment" - schema: - type: dict - attrs: - - variable: TZ - label: "Timezone" - schema: - type: string - default: "Etc/UTC" - $ref: - - "definitions/timezone" - - variable: UMASK - label: "UMASK" - description: "Sets the UMASK env var for LinuxServer.io (compatible) containers" - schema: - type: string - default: "002" - -# Include{containerConfig} - - - variable: pihole - group: "App Configuration" - label: "Pi-Hole Configuration" - schema: - type: dict - attrs: - - variable: WEBPASSWORD - label: "WEBPASSWORD" - description: "Sets admin password for the GUI" - schema: - type: string - default: "" - required: true - - variable: DNS1 - label: "DNS1" - description: "Sets the first DNS server (use #port suffix for ports)" - schema: - type: string - default: "9.9.9.9" - - variable: DNS2 - label: "DNS2" - description: "Sets the second DNS server (use #port suffix for ports), only if DNS1 is entered" - schema: - type: string - default: "149.112.112.112" - - - - - - variable: service - group: "Networking and Services" - label: "Configure Service(s)" - schema: - type: dict - attrs: - - variable: main - label: "Main Service" - description: "The Primary service on which the healthcheck runs, often the webUI" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the service" - schema: - type: boolean - default: true - hidden: true - - variable: type - label: "Service Type" - description: "ClusterIP's are only internally available, nodePorts expose the container to the host node System, Loadbalancer exposes the service using the system loadbalancer" - schema: - type: string - default: "NodePort" - enum: - - value: "NodePort" - description: "NodePort" - - value: "ClusterIP" - description: "ClusterIP" - - value: "LoadBalancer" - description: "LoadBalancer" - - variable: loadBalancerIP - label: "LoadBalancer IP" - description: "LoadBalancerIP" - schema: - show_if: [["type", "=", "LoadBalancer"]] - type: string - default: "" - - variable: externalIPs - label: "External IP's" - description: "External IP's" - schema: - show_if: [["type", "=", "LoadBalancer"]] - type: list - default: [] - items: - - variable: externalIP - label: "External IP" - schema: - type: string - - variable: ports - label: "Service's Port(s) Configuration" - schema: - type: dict - attrs: - - variable: main - label: "Main Service Port Configuration" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the port" - schema: - type: boolean - default: true - hidden: true - - variable: protocol - label: "Port Type" - schema: - type: string - default: "HTTP" - enum: - - value: HTTP - description: "HTTP" - - value: "HTTPS" - description: "HTTPS" - - value: TCP - description: "TCP" - - value: "UDP" - description: "UDP" - - variable: targetPort - label: "Target Port" - description: "This port exposes the container port on the service" - schema: - type: int - default: 80 - editable: false - hidden: true - - variable: port - label: "Container Port" - schema: - type: int - default: 80 - editable: true - required: true - - variable: nodePort - label: "Node Port (Optional)" - description: "This port gets exposed to the node. Only considered when service type is NodePort" - schema: - type: int - min: 9000 - max: 65535 - default: 36101 - - variable: dns - label: "DNS Service" - description: "The Primary service on which the healthcheck runs, often the webUI" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the service" - schema: - type: boolean - default: true - hidden: true - - variable: type - label: "Service Type" - description: "ClusterIP's are only internally available, nodePorts expose the container to the host node System, Loadbalancer exposes the service using the system loadbalancer" - schema: - type: string - default: "LoadBalancer" - enum: - - value: "NodePort" - description: "NodePort" - - value: "ClusterIP" - description: "ClusterIP" - - value: "LoadBalancer" - description: "LoadBalancer" - - variable: loadBalancerIP - label: "LoadBalancer IP" - description: "LoadBalancerIP" - schema: - show_if: [["type", "=", "LoadBalancer"]] - type: string - default: "" - - variable: externalIPs - label: "External IP's" - description: "External IP's" - schema: - show_if: [["type", "=", "LoadBalancer"]] - type: list - default: [] - items: - - variable: externalIP - label: "External IP" - schema: - type: string - - variable: ports - label: "Service's Port(s) Configuration" - schema: - type: dict - attrs: - - variable: dns - label: "DNS Service Port Configuration" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the port" - schema: - type: boolean - default: true - hidden: true - - variable: protocol - label: "Port Type" - schema: - type: string - default: "UDP" - enum: - - value: HTTP - description: "HTTP" - - value: "HTTPS" - description: "HTTPS" - - value: TCP - description: "TCP" - - value: "UDP" - description: "UDP" - - variable: targetPort - label: "Target Port" - description: "This port exposes the container port on the service" - schema: - type: int - default: 53 - editable: false - hidden: true - - variable: port - label: "Container Port" - schema: - type: int - default: 53 - editable: true - required: true - - variable: nodePort - label: "Node Port (Optional)" - description: "This port gets exposed to the node. Only considered when service type is NodePort" - schema: - type: int - min: 9000 - max: 65535 - - variable: dns-tcp - label: "DNS-TCP Service" - description: "The Primary service on which the healthcheck runs, often the webUI" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the service" - schema: - type: boolean - default: true - hidden: true - - variable: type - label: "Service Type" - description: "ClusterIP's are only internally available, nodePorts expose the container to the host node System, Loadbalancer exposes the service using the system loadbalancer" - schema: - type: string - default: "LoadBalancer" - enum: - - value: "NodePort" - description: "NodePort" - - value: "ClusterIP" - description: "ClusterIP" - - value: "LoadBalancer" - description: "LoadBalancer" - - variable: loadBalancerIP - label: "LoadBalancer IP" - description: "LoadBalancerIP" - schema: - show_if: [["type", "=", "LoadBalancer"]] - type: string - default: "" - - variable: externalIPs - label: "External IP's" - description: "External IP's" - schema: - show_if: [["type", "=", "LoadBalancer"]] - type: list - default: [] - items: - - variable: externalIP - label: "External IP" - schema: - type: string - - variable: ports - label: "Service's Port(s) Configuration" - schema: - type: dict - attrs: - - variable: dns-tcp - label: "DNS-TCP Service Port Configuration" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the port" - schema: - type: boolean - default: true - hidden: true - - variable: protocol - label: "Port Type" - schema: - type: string - default: "TCP" - enum: - - value: HTTP - description: "HTTP" - - value: "HTTPS" - description: "HTTPS" - - value: TCP - description: "TCP" - - value: "UDP" - description: "UDP" - - variable: targetPort - label: "Target Port" - description: "This port exposes the container port on the service" - schema: - type: int - default: 53 - editable: false - hidden: true - - variable: port - label: "Container Port" - schema: - type: int - default: 53 - editable: true - required: true - - variable: nodePort - label: "Node Port (Optional)" - description: "This port gets exposed to the node. Only considered when service type is NodePort" - schema: - type: int - min: 9000 - max: 65535 - - - variable: serviceexpert - group: "Networking and Services" - label: "Show Expert Config" - schema: - type: boolean - default: false - show_subquestions_if: true - subquestions: - - variable: hostNetwork - group: "Networking and Services" - label: "Host-Networking (Complicated)" - schema: - type: boolean - default: false - - - variable: dnsPolicy - group: "Networking and Services" - label: "dnsPolicy" - schema: - type: string - default: "" - enum: - - value: "" - description: "Default" - - value: "ClusterFirst" - description: "ClusterFirst" - - value: "ClusterFirstWithHostNet" - description: "ClusterFirstWithHostNet" - - value: "None" - description: "None" - - - variable: dnsConfig - label: "DNS Configuration" - group: "Networking and Services" - description: "Specify custom DNS configuration which will be applied to the pod" - schema: - type: dict - attrs: - - variable: nameservers - label: "Nameservers" - schema: - default: [] - type: list - items: - - variable: nameserver - label: "Nameserver" - schema: - type: string - - variable: options - label: "options" - schema: - default: [] - type: list - items: - - variable: option - label: "Option Entry" - schema: - type: string - - variable: searches - label: "Searches" - schema: - default: [] - type: list - items: - - variable: search - label: "Search Entry" - schema: - type: string - -# Include{serviceList} - - - variable: persistence - label: "Integrated Persistent Storage" - group: "Storage and Persistence" - schema: - type: dict - attrs: - - variable: config - label: "App Config Storage" - description: "Stores the Application Configuration." - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the storage" - schema: - type: boolean - default: true - - variable: type - label: "(Advanced) Type of Storage" - description: "Sets the persistence type" - schema: - type: string - default: "pvc" - enum: - - value: "pvc" - description: "pvc" - - value: "emptyDir" - description: "emptyDir" - - value: "hostPath" - description: "hostPath" - - variable: storageClass - label: "(Advanced) storageClass" - description: " Warning: Anything other than SCALE-ZFS will break rollback!" - schema: - show_if: [["type", "=", "pvc"]] - type: string - default: "SCALE-ZFS" - - variable: labelsList - label: "Labels" - schema: - type: list - default: [] - items: - - variable: labelItem - label: "Label" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - - variable: value - label: "Value" - schema: - type: string - - variable: annotationsList - label: "Annotations" - schema: - type: list - default: [] - items: - - variable: annotationItem - label: "Label" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - - variable: value - label: "Value" - schema: - type: string - - variable: setPermissions - label: "Automatic Permissions" - description: "Automatically set permissions on install" - schema: - show_if: [["type", "=", "hostPath"]] - type: boolean - default: true - - variable: readOnly - label: "readOnly" - schema: - type: boolean - default: false - - variable: hostPath - label: "hostPath" - description: "Path inside the container the storage is mounted" - schema: - show_if: [["type", "=", "hostPath"]] - type: hostpath - - variable: hostPathType - label: "hostPath Type" - schema: - show_if: [["type", "=", "hostPath"]] - type: string - default: "" - enum: - - value: "" - description: "Default" - - value: "DirectoryOrCreate" - description: "DirectoryOrCreate" - - value: "Directory" - description: "Directory" - - value: "FileOrCreate" - description: "FileOrCreate" - - value: "File" - description: "File" - - value: "Socket" - description: "Socket" - - value: "CharDevice" - description: "CharDevice" - - value: "BlockDevice" - description: "BlockDevice" - - variable: mountPath - label: "mountPath" - description: "Path inside the container the storage is mounted" - schema: - type: string - default: "/etc/pihole" - hidden: true - - variable: medium - label: "EmptyDir Medium" - schema: - show_if: [["type", "=", "emptyDir"]] - type: string - default: "" - enum: - - value: "" - description: "Default" - - value: "Memory" - description: "Memory" - - variable: accessMode - label: "Access Mode (Advanced)" - description: "Allow or disallow multiple PVC's writhing to the same PV" - schema: - show_if: [["type", "=", "pvc"]] - type: string - default: "ReadWriteOnce" - enum: - - value: "ReadWriteOnce" - description: "ReadWriteOnce" - - value: "ReadOnlyMany" - description: "ReadOnlyMany" - - value: "ReadWriteMany" - description: "ReadWriteMany" - - variable: size - label: "Size quotum of storage" - schema: - show_if: [["type", "=", "pvc"]] - type: string - default: "100Gi" - - variable: dnsmasq - label: "App dnsmasq.d Storage" - description: "Stores the Application dnsmasq.d." - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the storage" - schema: - type: boolean - default: true - - variable: type - label: "(Advanced) Type of Storage" - description: "Sets the persistence type" - schema: - type: string - default: "pvc" - enum: - - value: "pvc" - description: "pvc" - - value: "emptyDir" - description: "emptyDir" - - value: "hostPath" - description: "hostPath" - - variable: storageClass - label: "(Advanced) storageClass" - description: " Warning: Anything other than SCALE-ZFS will break rollback!" - schema: - show_if: [["type", "=", "pvc"]] - type: string - default: "SCALE-ZFS" - - variable: labelsList - label: "Labels" - schema: - type: list - default: [] - items: - - variable: labelItem - label: "Label" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - - variable: value - label: "Value" - schema: - type: string - - variable: annotationsList - label: "Annotations" - schema: - type: list - default: [] - items: - - variable: annotationItem - label: "Label" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - - variable: value - label: "Value" - schema: - type: string - - variable: setPermissions - label: "Automatic Permissions" - description: "Automatically set permissions on install" - schema: - show_if: [["type", "=", "hostPath"]] - type: boolean - default: true - - variable: readOnly - label: "readOnly" - schema: - type: boolean - default: false - - variable: hostPath - label: "hostPath" - description: "Path inside the container the storage is mounted" - schema: - show_if: [["type", "=", "hostPath"]] - type: hostpath - - variable: hostPathType - label: "hostPath Type" - schema: - show_if: [["type", "=", "hostPath"]] - type: string - default: "" - enum: - - value: "" - description: "Default" - - value: "DirectoryOrCreate" - description: "DirectoryOrCreate" - - value: "Directory" - description: "Directory" - - value: "FileOrCreate" - description: "FileOrCreate" - - value: "File" - description: "File" - - value: "Socket" - description: "Socket" - - value: "CharDevice" - description: "CharDevice" - - value: "BlockDevice" - description: "BlockDevice" - - variable: mountPath - label: "mountPath" - description: "Path inside the container the storage is mounted" - schema: - type: string - default: "/etc/dnsmasq.d" - hidden: true - - variable: medium - label: "EmptyDir Medium" - schema: - show_if: [["type", "=", "emptyDir"]] - type: string - default: "" - enum: - - value: "" - description: "Default" - - value: "Memory" - description: "Memory" - - variable: accessMode - label: "Access Mode (Advanced)" - description: "Allow or disallow multiple PVC's writhing to the same PV" - schema: - show_if: [["type", "=", "pvc"]] - type: string - default: "ReadWriteOnce" - enum: - - value: "ReadWriteOnce" - description: "ReadWriteOnce" - - value: "ReadOnlyMany" - description: "ReadOnlyMany" - - value: "ReadWriteMany" - description: "ReadWriteMany" - - variable: size - label: "Size quotum of storage" - schema: - show_if: [["type", "=", "pvc"]] - type: string - default: "100Gi" -# Include{persistenceList} - - - variable: ingress - label: "" - group: "Ingress" - schema: - type: dict - attrs: - - variable: main - label: "Main Ingress" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable Ingress" - schema: - type: boolean - default: false - show_subquestions_if: true - subquestions: - - variable: hosts - label: "Hosts" - schema: - type: list - default: [] - items: - - variable: hostEntry - label: "Host" - schema: - type: dict - attrs: - - variable: host - label: "HostName" - schema: - type: string - default: "" - required: true - - variable: paths - label: "Paths" - schema: - type: list - default: [] - items: - - variable: pathEntry - label: "Host" - schema: - type: dict - attrs: - - variable: path - label: "path" - schema: - type: string - required: true - default: "/" - - variable: pathType - label: "pathType" - schema: - type: string - required: true - default: "Prefix" - - variable: tls - label: "TLS-Settings" - schema: - type: list - default: [] - items: - - variable: tlsEntry - label: "Host" - schema: - type: dict - attrs: - - variable: hosts - label: "Certificate Hosts" - schema: - type: list - default: [] - items: - - variable: host - label: "Host" - schema: - type: string - default: "" - required: true - - variable: scaleCert - label: "Select TrueNAS SCALE Certificate" - schema: - type: int - $ref: - - "definitions/certificate" - - variable: entrypoint - label: "(Advanced) Traefik Entrypoint" - description: "Entrypoint used by Traefik when using Traefik as Ingress Provider" - schema: - type: string - default: "websecure" - required: true - - variable: middlewares - label: "Traefik Middlewares" - description: "Add previously created Traefik Middlewares to this Ingress" - schema: - type: list - default: [] - items: - - variable: name - label: "Name" - schema: - type: string - default: "" - required: true - - - variable: expert - label: "Show Expert Configuration Options" - schema: - type: boolean - default: false - show_subquestions_if: true - subquestions: - - variable: ingressClassName - label: "IngressClass Name" - schema: - type: string - default: "" - - variable: labelsList - label: "Labels" - schema: - type: list - default: [] - items: - - variable: labelItem - label: "Label" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - - variable: value - label: "Value" - schema: - type: string - - variable: annotationsList - label: "Annotations" - schema: - type: list - default: [] - items: - - variable: annotationItem - label: "Label" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - - variable: value - label: "Value" - schema: - type: string - - - - -# Include{ingressList} - - - variable: securityContext - group: "Security and Permissions" - label: "Security Context" - schema: - type: dict - attrs: - - variable: privileged - label: "Privileged mode" - schema: - type: boolean - default: false - - variable: readOnlyRootFilesystem - label: "ReadOnly Root Filesystem" - schema: - type: boolean - default: false - - variable: allowPrivilegeEscalation - label: "Allow Privilege Escalation" - schema: - type: boolean - default: true - - variable: runAsNonRoot - label: "runAsNonRoot" - schema: - type: boolean - default: false - - - variable: resources - group: "Resources and Devices" - label: "Resource Limits" - schema: - type: dict - attrs: - - variable: limits - label: "Advanced Limit Resource Consumption" - schema: - type: dict - attrs: - - variable: cpu - label: "CPU" - schema: - type: string - default: "2000m" - valid_chars: '^([0-9]+)(\.[0-9]?|m?)$' - - variable: memory - label: "Memory RAM" - schema: - type: string - default: "2Gi" - valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: requests - label: "Advanced Request minimum resources required" - schema: - type: dict - attrs: - - variable: cpu - label: "CPU" - schema: - type: string - default: "10m" - valid_chars: '^([0-9]+)(\.[0-9]?|m?)$' - - variable: memory - label: "Memory RAM" - schema: - type: string - default: "50Mi" - valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - - - variable: autoscaling - group: "Resources and Devices" - label: "(Advanced) Horizontal Pod Autoscaler" - schema: - type: dict - attrs: - - variable: enabled - label: "enabled" - schema: - type: boolean - default: false - show_subquestions_if: true - subquestions: - - variable: target - label: "Target" - description: "deployment name, defaults to main deployment" - schema: - type: string - default: "" - - variable: minReplicas - label: "Minimum Replicas" - schema: - type: int - default: 1 - - variable: maxReplicas - label: "Maximum Replicas" - schema: - type: int - default: 5 - - variable: targetCPUUtilizationPercentage - label: "Target CPU Utilization Percentage" - schema: - type: int - default: 80 - - variable: targetMemoryUtilizationPercentage - label: "Target Memory Utilization Percentage" - schema: - type: int - default: 80 - -# Include{addons} diff --git a/charts/incubator/portalexample/app-readme.md b/charts/incubator/portalexample/app-readme.md deleted file mode 100644 index 13a8fed001c..00000000000 --- a/charts/incubator/portalexample/app-readme.md +++ /dev/null @@ -1,3 +0,0 @@ -portal example - -This App is supplied by TrueCharts, for more information please visit https://truecharts.org diff --git a/charts/incubator/portalexample/helm-values.md b/charts/incubator/portalexample/helm-values.md deleted file mode 100644 index 38de80055cc..00000000000 --- a/charts/incubator/portalexample/helm-values.md +++ /dev/null @@ -1,40 +0,0 @@ -# Default Helm-Values - -TrueCharts is primarily build to supply TrueNAS SCALE Apps. -However, we also supply all Apps as standard Helm-Charts. In this document we aim to document the default values in our values.yaml file. - -Most of our Apps also consume our "common" Helm Chart. -If this is the case, this means that all values.yaml values are set to the common chart values.yaml by default. This values.yaml file will only contain values that deviate from the common chart. -You will, however, be able to use all values referenced in the common chart here, besides the values listed in this document. - -## Values - -| Key | Type | Default | Description | -|-----|------|---------|-------------| -| envFrom[0].configMapRef.name | string | `"pihole-env"` | | -| image.pullPolicy | string | `"IfNotPresent"` | | -| image.repository | string | `"ghcr.io/truecharts/pihole"` | | -| image.tag | string | `"v2021.09@sha256:e043ab188da4c36abb11d70d82bbfb394ef5054abff21dafbaf54bc21861bd1e"` | | -| persistence.config.accessMode | string | `"ReadWriteOnce"` | | -| persistence.config.enabled | bool | `true` | | -| persistence.config.mountPath | string | `"/etc/pihole"` | | -| persistence.config.size | string | `"100Gi"` | | -| persistence.config.type | string | `"pvc"` | | -| persistence.dnsmasq.accessMode | string | `"ReadWriteOnce"` | | -| persistence.dnsmasq.enabled | bool | `true` | | -| persistence.dnsmasq.mountPath | string | `"/etc/dnsmasq.d"` | | -| persistence.dnsmasq.size | string | `"100Gi"` | | -| persistence.dnsmasq.type | string | `"pvc"` | | -| pihole.DNS1 | string | `"9.9.9.9"` | | -| pihole.DNS2 | string | `"149.112.112.112"` | | -| pihole.WEBPASSWORD | string | `"somepassword"` | | -| service.dns-tcp.enabled | bool | `true` | | -| service.dns-tcp.ports.https.enabled | bool | `true` | | -| service.dns-tcp.ports.https.port | int | `53` | | -| service.dns.enabled | bool | `true` | | -| service.dns.ports.dns.enabled | bool | `true` | | -| service.dns.ports.dns.port | int | `53` | | -| service.main.enabled | bool | `true` | | -| service.main.ports.main.port | int | `80` | | - -All Rights Reserved - The TrueCharts Project diff --git a/charts/incubator/portalexample/templates/_configmap.tpl b/charts/incubator/portalexample/templates/_configmap.tpl deleted file mode 100644 index f39ca5c60b0..00000000000 --- a/charts/incubator/portalexample/templates/_configmap.tpl +++ /dev/null @@ -1,13 +0,0 @@ -{{/* Define the configmap */}} -{{- define "pihole.configmap" -}} ---- -apiVersion: v1 -kind: ConfigMap -metadata: - name: pihole-env -data: - WEBPASSWORD: {{ .Values.pihole.WEBPASSWORD | squote }} - {{- if .Values.pihole.DNS1 }} - "PIHOLE_DNS_": {{ if .Values.pihole.DNS2 }}{{ ( printf "%v;%v" .Values.pihole.DNS1 .Values.pihole.DNS2 ) | squote }}{{ else }}{{ .Values.pihole.DNS1 | squote }}{{ end }} - {{- end }} -{{- end -}} diff --git a/charts/incubator/portalexample/templates/common.yaml b/charts/incubator/portalexample/templates/common.yaml deleted file mode 100644 index 795166e50a2..00000000000 --- a/charts/incubator/portalexample/templates/common.yaml +++ /dev/null @@ -1,8 +0,0 @@ -{{/* Make sure all variables are set properly */}} -{{- include "common.values.setup" . }} - -{{/* Render configmap for pihole */}} -{{- include "pihole.configmap" . }} - -{{/* Render the templates */}} -{{ include "common.all" . }} diff --git a/charts/incubator/portalexample/values.yaml b/charts/incubator/portalexample/values.yaml deleted file mode 100644 index 01a96e5f237..00000000000 --- a/charts/incubator/portalexample/values.yaml +++ /dev/null @@ -1,49 +0,0 @@ -# Default values for Jackett. - -image: - repository: ghcr.io/truecharts/pihole - pullPolicy: IfNotPresent - tag: v2021.09@sha256:e043ab188da4c36abb11d70d82bbfb394ef5054abff21dafbaf54bc21861bd1e - -envFrom: - - configMapRef: - name: pihole-env - -service: - main: - enabled: true - ports: - main: - port: 80 - dns-tcp: - enabled: true - ports: - https: - enabled: true - port: 53 - dns: - enabled: true - ports: - dns: - enabled: true - port: 53 - -pihole: - WEBPASSWORD: "somepassword" - DNS1: "9.9.9.9" - DNS2: "149.112.112.112" - - -persistence: - config: - enabled: true - mountPath: "/etc/pihole" - type: pvc - accessMode: ReadWriteOnce - size: "100Gi" - dnsmasq: - enabled: true - mountPath: "/etc/dnsmasq.d" - type: pvc - accessMode: ReadWriteOnce - size: "100Gi" diff --git a/charts/incubator/sogo/Chart.yaml b/charts/incubator/sogo/Chart.yaml index 2c7cdda06c4..9325a69ef79 100644 --- a/charts/incubator/sogo/Chart.yaml +++ b/charts/incubator/sogo/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "5.2.0" +appVersion: 5.2.0 dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.7 - condition: postgresql.enabled name: postgresql repository: https://truecharts.org/ @@ -27,4 +27,4 @@ name: sogo sources: - https://www.sogo.nu/ type: application -version: 3.0.6 +version: 4.0.0 diff --git a/charts/incubator/sogo/SCALE/questions.yaml b/charts/incubator/sogo/SCALE/questions.yaml index b0ea17a3740..0fe8e8354c8 100644 --- a/charts/incubator/sogo/SCALE/questions.yaml +++ b/charts/incubator/sogo/SCALE/questions.yaml @@ -66,7 +66,6 @@ questions: description: "(Legacy) OnDelete: ignore .spec.template changes" # Include{controllerExpert} - - variable: env group: "Container Configuration" label: "Image Environment" @@ -88,7 +87,6 @@ questions: default: "002" # Include{containerConfig} - - variable: sogo group: "App Configuration" label: "SOGo Configuration " @@ -659,6 +657,17 @@ questions: schema: type: dict attrs: + - variable: varrun + label: "varrun override" + schema: + type: dict + attrs: + - variable: enabled + label: "Enable the storage" + schema: + type: boolean + default: false + hidden: true - variable: data label: "App Data Storage" description: "Stores the Application Data." @@ -1151,8 +1160,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext group: "Security and Permissions" @@ -1174,13 +1181,58 @@ questions: label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: type: boolean default: false + - variable: podSecurityContext + group: "Security and Permissions" + label: "Pod Security Context" + schema: + type: dict + attrs: + - variable: runAsUser + label: "runAsUser" + description: "The UserID of the user running the application" + schema: + type: int + default: 0 + - variable: runAsGroup + label: "runAsGroup" + description: The groupID this App of the user running the application" + schema: + type: int + default: 0 + - variable: fsGroup + label: "fsGroup" + description: "The group that should own ALL storage." + schema: + type: int + default: 568 + - variable: supplementalGroups + label: "supplemental Groups" + schema: + type: list + default: [] + items: + - variable: supplementalGroupsEntry + label: "supplemental Group" + schema: + type: int + - variable: fsGroupChangePolicy + label: "When should we take ownership?" + schema: + type: string + default: "OnRootMismatch" + enum: + - value: "OnRootMismatch" + description: "OnRootMismatch" + - value: "Always" + description: "Always" + - variable: resources group: "Resources and Devices" label: "" diff --git a/charts/incubator/sogo/values.yaml b/charts/incubator/sogo/values.yaml index ffd1328fb7f..b00c8477f54 100644 --- a/charts/incubator/sogo/values.yaml +++ b/charts/incubator/sogo/values.yaml @@ -4,6 +4,14 @@ image: pullPolicy: IfNotPresent tag: v5.2.0@sha256:8fc7bb87b77d76d929bcd36403d4f27878fa3e99f5448fb05ed64829078665a4 +securityContext: + readOnlyRootFilesystem: false + runAsNonRoot: false + +podSecurityContext: + runAsUser: 0 + runAsGroup: 0 + postgresqlImage: repository: bitnami/postgresql pullPolicy: IfNotPresent @@ -51,7 +59,8 @@ persistence: enabled: true mountPath: "/mimetmp" type: emptyDir - + varrun: + enabled: false # -- postgres dependency settings postgresql: diff --git a/charts/incubator/teamspeak3/CONFIG.md b/charts/incubator/teamspeak3/CONFIG.md deleted file mode 100644 index fc9b2fa2d5f..00000000000 --- a/charts/incubator/teamspeak3/CONFIG.md +++ /dev/null @@ -1,8 +0,0 @@ -# Configuration Options - -##### Connecting to other apps -If you need to connect this App to other Apps on TrueNAS SCALE, please refer to our "Linking Apps Internally" quick-start guide: -https://truecharts.org/manual/Quick-Start%20Guides/14-linking-apps/ - -##### Available config options -In the future this page is going to contain an automated list of options available in the installation/edit UI. diff --git a/charts/library/common/values.yaml b/charts/library/common/values.yaml index 01d92453e57..991d00f1473 100644 --- a/charts/library/common/values.yaml +++ b/charts/library/common/values.yaml @@ -8,7 +8,6 @@ openvpnImage: # -- Specify the openvpn client image pull policy pullPolicy: IfNotPresent - # -- WireGuard specific configuration # @default -- See below wireguardImage: @@ -27,7 +26,6 @@ promtailImage: # -- Specify the promtail image pull policy pullPolicy: IfNotPresent - netshootImage: # -- Specify the netshoot image repository: nicolaka/netshoot @@ -261,7 +259,6 @@ securityContext: allowPrivilegeEscalation: false runAsNonRoot: true - # -- Configure the lifecycle for the main container lifecycle: {} @@ -358,7 +355,6 @@ termination: # -- [[ref](https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/pod-v1/#lifecycle)] gracePeriodSeconds: 10 - # -- Configure additional services for the chart here. # @default -- See below serviceList: [] @@ -426,7 +422,6 @@ service: # [[ref]](https://kubernetes.io/docs/concepts/services-networking/service/#type-nodeport) nodePort: - # -- Configure ingressList for the chart here. # Additional items can be added by adding a items similar to ingress # @default -- [] @@ -608,7 +603,6 @@ persistence: # specify a size for memory backed volumes. sizeLimit: # 1Gi - # -- Example of a hostPath mount # [[ref]]https://kubernetes.io/docs/concepts/storage/volumes/#hostpath) # @default -- See below @@ -737,7 +731,6 @@ addons: # name: someenv # value: somevalue - # -- Provide a customized vpn configuration file to be used by the VPN. configFile: enabled: true @@ -749,7 +742,6 @@ addons: # See Kubernetes documentation for options. hostPathType: "File" - # -- The common library supports adding a code-server add-on to access files. It can be configured under this key. # For more info, check out [our docs](http://docs.k8s-at-home.com/our-helm-charts/common-library-add-ons/#code-server) # @default -- See values.yaml diff --git a/charts/stable/airsonic/Chart.yaml b/charts/stable/airsonic/Chart.yaml index 89cc43e7218..ff95074bdb7 100644 --- a/charts/stable/airsonic/Chart.yaml +++ b/charts/stable/airsonic/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "10.6.2" +appVersion: 10.6.2 dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.7 description: Airsonic is a Free and Open Source community driven media server home: https://github.com/truecharts/apps/tree/master/charts/incubator/airsonic icon: https://raw.githubusercontent.com/linuxserver/docker-templates/master/linuxserver.io/img/airsonic-logo.png @@ -19,4 +19,4 @@ sources: - https://github.com/airsonic/airsonic - https://github.com/linuxserver/docker-airsonic - https://github.com/k8s-at-home/charts/tree/master/charts/airsonic -version: 2.0.3 +version: 3.0.0 diff --git a/charts/stable/airsonic/SCALE/questions.yaml b/charts/stable/airsonic/SCALE/questions.yaml index bcb151040cf..14727cbe680 100644 --- a/charts/stable/airsonic/SCALE/questions.yaml +++ b/charts/stable/airsonic/SCALE/questions.yaml @@ -99,8 +99,6 @@ questions: default: "002" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -555,8 +553,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext @@ -579,13 +575,58 @@ questions: label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: type: boolean default: false + - variable: podSecurityContext + group: "Security and Permissions" + label: "Pod Security Context" + schema: + type: dict + attrs: + - variable: runAsUser + label: "runAsUser" + description: "The UserID of the user running the application" + schema: + type: int + default: 0 + - variable: runAsGroup + label: "runAsGroup" + description: The groupID this App of the user running the application" + schema: + type: int + default: 0 + - variable: fsGroup + label: "fsGroup" + description: "The group that should own ALL storage." + schema: + type: int + default: 568 + - variable: supplementalGroups + label: "supplemental Groups" + schema: + type: list + default: [] + items: + - variable: supplementalGroupsEntry + label: "supplemental Group" + schema: + type: int + - variable: fsGroupChangePolicy + label: "When should we take ownership?" + schema: + type: string + default: "OnRootMismatch" + enum: + - value: "OnRootMismatch" + description: "OnRootMismatch" + - value: "Always" + description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -627,7 +668,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/airsonic/values.yaml b/charts/stable/airsonic/values.yaml index cf46446ea46..71862b55d92 100644 --- a/charts/stable/airsonic/values.yaml +++ b/charts/stable/airsonic/values.yaml @@ -13,6 +13,14 @@ image: # -- image pull policy pullPolicy: IfNotPresent +securityContext: + readOnlyRootFilesystem: false + runAsNonRoot: false + +podSecurityContext: + runAsUser: 0 + runAsGroup: 0 + # -- environment variables. See [image docs](https://docs.linuxserver.io/images/docker-airsonic#environment-variables-e) for more details. # @default -- See below env: diff --git a/charts/stable/appdaemon/Chart.yaml b/charts/stable/appdaemon/Chart.yaml index fc1ec87cd12..7cc862aa197 100644 --- a/charts/stable/appdaemon/Chart.yaml +++ b/charts/stable/appdaemon/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "4.1.0" +appVersion: 4.1.0 dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.7 deprecated: false description: AppDaemon is a loosely coupled, multithreaded, sandboxed python execution environment for writing automation apps for Home Assistant home automation software. @@ -26,4 +26,4 @@ name: appdaemon sources: - https://github.com/AppDaemon/appdaemon type: application -version: 4.0.2 +version: 5.0.0 diff --git a/charts/stable/appdaemon/SCALE/questions.yaml b/charts/stable/appdaemon/SCALE/questions.yaml index 358a3d3f134..16da38292ea 100644 --- a/charts/stable/appdaemon/SCALE/questions.yaml +++ b/charts/stable/appdaemon/SCALE/questions.yaml @@ -131,8 +131,6 @@ questions: default: "002" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -427,7 +425,6 @@ questions: default: "100Gi" # Include{persistenceList} - # Include{ingressList} - variable: securityContext @@ -445,12 +442,12 @@ questions: label: "ReadOnly Root Filesystem" schema: type: boolean - default: false + default: true - variable: allowPrivilegeEscalation label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: @@ -480,7 +477,7 @@ questions: description: "The group that should own ALL storage." schema: type: int - default: 0 + default: 568 - variable: supplementalGroups label: "supplemental Groups" schema: @@ -501,6 +498,7 @@ questions: description: "OnRootMismatch" - value: "Always" description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -542,7 +540,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/appdaemon/values.yaml b/charts/stable/appdaemon/values.yaml index 7fa167ea46d..195adecad25 100644 --- a/charts/stable/appdaemon/values.yaml +++ b/charts/stable/appdaemon/values.yaml @@ -4,17 +4,11 @@ image: tag: v4.1.0@sha256:209ee1c83b4c0794dd6f50333f60a212d0df7c4205e7e374ac78d988ffc3d8fd securityContext: - privileged: false - readOnlyRootFilesystem: false - allowPrivilegeEscalation: true runAsNonRoot: false podSecurityContext: runAsUser: 0 runAsGroup: 0 - fsGroup: 0 - supplementalGroups: [] - fsGroupChangePolicy: "OnRootMismatch" env: TZ: "America/Chicago" diff --git a/charts/stable/authelia/Chart.yaml b/charts/stable/authelia/Chart.yaml index 822749c32be..829f1ecebf1 100644 --- a/charts/stable/authelia/Chart.yaml +++ b/charts/stable/authelia/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "4.31.0" +appVersion: 4.31.0 dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.7 - condition: postgresql.enabled name: postgresql repository: https://truecharts.org/ @@ -38,4 +38,4 @@ sources: - https://github.com/authelia/chartrepo - https://github.com/authelia/authelia type: application -version: 3.0.9 +version: 4.0.0 diff --git a/charts/stable/authelia/SCALE/ix_values.yaml b/charts/stable/authelia/SCALE/ix_values.yaml index 7e557606e22..2581f43d481 100644 --- a/charts/stable/authelia/SCALE/ix_values.yaml +++ b/charts/stable/authelia/SCALE/ix_values.yaml @@ -250,8 +250,6 @@ identity_providers: ## The algorithm used to sign userinfo endpoint responses for this client, either none or RS256. # userinfo_signing_algorithm: none - - ## # Most other defaults are set in questions.yaml # For other options please refer to the wiki, default_values.yaml or the common library chart diff --git a/charts/stable/authelia/SCALE/questions.yaml b/charts/stable/authelia/SCALE/questions.yaml index c7d574ef0dd..86457a43ef1 100644 --- a/charts/stable/authelia/SCALE/questions.yaml +++ b/charts/stable/authelia/SCALE/questions.yaml @@ -66,7 +66,6 @@ questions: description: "(Legacy) OnDelete: ignore .spec.template changes" # Include{controllerExpert} - - variable: env group: "Container Configuration" label: "Image Environment" @@ -283,7 +282,6 @@ questions: default: "5m" required: true - - variable: authentication_backend group: "App Configuration" label: "Authentication Backend Provider" @@ -519,7 +517,6 @@ questions: default: 8 required: true - - variable: notifier group: "App Configuration" label: "Notifier Configuration" @@ -793,8 +790,6 @@ questions: default: "" required: true - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -1250,8 +1245,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext group: "Security and Permissions" @@ -1323,6 +1316,7 @@ questions: description: "OnRootMismatch" - value: "Always" description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -1364,8 +1358,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/authelia/values.yaml b/charts/stable/authelia/values.yaml index c41b5c6e037..6511fcf87c8 100644 --- a/charts/stable/authelia/values.yaml +++ b/charts/stable/authelia/values.yaml @@ -5,19 +5,6 @@ image: pullPolicy: IfNotPresent tag: 4.31.0@sha256:6036f2b1fa3214fdcf189a8f28f40a856372413984b08f15ba4fb5891d77bc0a -securityContext: - privileged: false - readOnlyRootFilesystem: true - allowPrivilegeEscalation: false - runAsNonRoot: true - -podSecurityContext: - runAsUser: 568 - runAsGroup: 568 - fsGroup: 568 - supplementalGroups: [] - fsGroupChangePolicy: "OnRootMismatch" - postgresqlImage: repository: bitnami/postgresql pullPolicy: IfNotPresent @@ -534,7 +521,6 @@ regulation: ## See: https://www.authelia.com/docs/configuration/index.html#duration-notation-format ban_time: 5m - ## ## Storage Provider Configuration ## diff --git a/charts/stable/bazarr/Chart.yaml b/charts/stable/bazarr/Chart.yaml index 738340b6985..ca6bc719d3a 100644 --- a/charts/stable/bazarr/Chart.yaml +++ b/charts/stable/bazarr/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "0.9.9" +appVersion: 0.9.9 dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.7 deprecated: false description: Bazarr is a companion application to Bazarr and Radarr. It manages and downloads subtitles based on your requirements @@ -29,4 +29,4 @@ sources: - https://github.com/Bazarr/Bazarr - https://hub.docker.com/r/linuxserver/bazarr type: application -version: 7.0.2 +version: 8.0.0 diff --git a/charts/stable/bazarr/SCALE/questions.yaml b/charts/stable/bazarr/SCALE/questions.yaml index 8de0e4bb536..140967504b5 100644 --- a/charts/stable/bazarr/SCALE/questions.yaml +++ b/charts/stable/bazarr/SCALE/questions.yaml @@ -86,8 +86,6 @@ questions: default: "002" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -192,7 +190,6 @@ questions: max: 65535 default: 36025 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -542,8 +539,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext @@ -561,12 +556,12 @@ questions: label: "ReadOnly Root Filesystem" schema: type: boolean - default: false + default: true - variable: allowPrivilegeEscalation label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: @@ -617,6 +612,7 @@ questions: description: "OnRootMismatch" - value: "Always" description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -658,7 +654,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/bazarr/values.yaml b/charts/stable/bazarr/values.yaml index 9976ab817dd..fdfa7c85330 100644 --- a/charts/stable/bazarr/values.yaml +++ b/charts/stable/bazarr/values.yaml @@ -5,19 +5,6 @@ image: pullPolicy: IfNotPresent tag: v0.9.9@sha256:889f97670f5af6b39896a89c76652e346693b446bc9097988ff8eb32141fc38f -securityContext: - privileged: false - readOnlyRootFilesystem: false - allowPrivilegeEscalation: true - runAsNonRoot: true - -podSecurityContext: - runAsUser: 568 - runAsGroup: 568 - fsGroup: 568 - supplementalGroups: [] - fsGroupChangePolicy: "OnRootMismatch" - service: main: ports: diff --git a/charts/stable/booksonic-air/Chart.yaml b/charts/stable/booksonic-air/Chart.yaml index ab63af88d70..6602e9fd561 100644 --- a/charts/stable/booksonic-air/Chart.yaml +++ b/charts/stable/booksonic-air/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "2009.1.0" +appVersion: 2009.1.0 dependencies: - name: common repository: https://truecharts.org - version: 7.0.14 + version: 8.0.7 description: Booksonic is a platform for accessing the audibooks you own wherever you are home: https://github.com/truechartsapps/tree/master/charts/incubator/booksonic-air @@ -20,4 +20,4 @@ name: booksonic-air sources: - https://github.com/popeen/Booksonic-Air - https://hub.docker.com/r/linuxserver/booksonic-air -version: 2.0.3 +version: 3.0.0 diff --git a/charts/stable/booksonic-air/SCALE/questions.yaml b/charts/stable/booksonic-air/SCALE/questions.yaml index e6d7a24a0a3..4a41c38ff20 100644 --- a/charts/stable/booksonic-air/SCALE/questions.yaml +++ b/charts/stable/booksonic-air/SCALE/questions.yaml @@ -98,8 +98,6 @@ questions: default: "002" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -204,7 +202,6 @@ questions: max: 65535 default: 36052 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -553,8 +550,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext @@ -577,13 +572,58 @@ questions: label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: type: boolean default: false + - variable: podSecurityContext + group: "Security and Permissions" + label: "Pod Security Context" + schema: + type: dict + attrs: + - variable: runAsUser + label: "runAsUser" + description: "The UserID of the user running the application" + schema: + type: int + default: 0 + - variable: runAsGroup + label: "runAsGroup" + description: The groupID this App of the user running the application" + schema: + type: int + default: 0 + - variable: fsGroup + label: "fsGroup" + description: "The group that should own ALL storage." + schema: + type: int + default: 568 + - variable: supplementalGroups + label: "supplemental Groups" + schema: + type: list + default: [] + items: + - variable: supplementalGroupsEntry + label: "supplemental Group" + schema: + type: int + - variable: fsGroupChangePolicy + label: "When should we take ownership?" + schema: + type: string + default: "OnRootMismatch" + enum: + - value: "OnRootMismatch" + description: "OnRootMismatch" + - value: "Always" + description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -625,7 +665,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/booksonic-air/values.yaml b/charts/stable/booksonic-air/values.yaml index c3bb2cf8eb9..5ecd31316c2 100644 --- a/charts/stable/booksonic-air/values.yaml +++ b/charts/stable/booksonic-air/values.yaml @@ -13,6 +13,14 @@ image: # -- image tag tag: version-v2009.1.0@sha256:e05e9b40b03ad4f7468c297f4282cd9a713de9513968b0872abf90b10cce00e7 +securityContext: + readOnlyRootFilesystem: false + runAsNonRoot: false + +podSecurityContext: + runAsUser: 0 + runAsGroup: 0 + # See more environment variables in the [booksonic-air documentation](https://github.com/linuxserver/docker-booksonic-air#parameters) # @default -- See below env: @@ -33,7 +41,6 @@ service: main: port: 4040 - # -- Configure persistence settings for the chart under this key. # @default -- See values.yaml persistence: diff --git a/charts/stable/calibre-web/Chart.yaml b/charts/stable/calibre-web/Chart.yaml index ca1f7dc5baf..62450423c1c 100644 --- a/charts/stable/calibre-web/Chart.yaml +++ b/charts/stable/calibre-web/Chart.yaml @@ -2,8 +2,8 @@ apiVersion: v2 appVersion: 0.6.12 dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.7 deprecated: false description: Calibre-Web is a web app providing a clean interface for browsing, reading and downloading eBooks using an existing Calibre database. @@ -23,4 +23,4 @@ sources: - https://hub.docker.com/r/linuxserver/calibre-web/ - https://github.com/janeczku/calibre-web type: application -version: 7.0.4 +version: 8.0.0 diff --git a/charts/stable/calibre-web/SCALE/questions.yaml b/charts/stable/calibre-web/SCALE/questions.yaml index b1476f68538..39d6c85b98f 100644 --- a/charts/stable/calibre-web/SCALE/questions.yaml +++ b/charts/stable/calibre-web/SCALE/questions.yaml @@ -98,8 +98,6 @@ questions: default: "002" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -204,7 +202,6 @@ questions: max: 65535 default: 36015 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -554,8 +551,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext group: "Security and Permissions" @@ -577,12 +572,58 @@ questions: label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: type: boolean default: false + + - variable: podSecurityContext + group: "Security and Permissions" + label: "Pod Security Context" + schema: + type: dict + attrs: + - variable: runAsUser + label: "runAsUser" + description: "The UserID of the user running the application" + schema: + type: int + default: 0 + - variable: runAsGroup + label: "runAsGroup" + description: The groupID this App of the user running the application" + schema: + type: int + default: 0 + - variable: fsGroup + label: "fsGroup" + description: "The group that should own ALL storage." + schema: + type: int + default: 568 + - variable: supplementalGroups + label: "supplemental Groups" + schema: + type: list + default: [] + items: + - variable: supplementalGroupsEntry + label: "supplemental Group" + schema: + type: int + - variable: fsGroupChangePolicy + label: "When should we take ownership?" + schema: + type: string + default: "OnRootMismatch" + enum: + - value: "OnRootMismatch" + description: "OnRootMismatch" + - value: "Always" + description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -624,7 +665,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/calibre-web/values.yaml b/charts/stable/calibre-web/values.yaml index 1e6e48c4d7a..5748a40707e 100644 --- a/charts/stable/calibre-web/values.yaml +++ b/charts/stable/calibre-web/values.yaml @@ -5,6 +5,14 @@ image: pullPolicy: IfNotPresent tag: version-0.6.12@sha256:938810eca3d3137221308afe9095773c8552a457dc0943abd0aec5613242b0b6 +securityContext: + readOnlyRootFilesystem: false + runAsNonRoot: false + +podSecurityContext: + runAsUser: 0 + runAsGroup: 0 + service: main: ports: diff --git a/charts/stable/calibre/Chart.yaml b/charts/stable/calibre/Chart.yaml index 24b4ae45785..91bb7e2aeb6 100644 --- a/charts/stable/calibre/Chart.yaml +++ b/charts/stable/calibre/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "5.26.0" +appVersion: 5.26.0 dependencies: - name: common repository: https://truecharts.org - version: 7.0.14 + version: 8.0.7 description: Calibre is a powerful and easy to use e-book manager. home: https://github.com/truechartsapps/tree/master/charts/incubator/calibre icon: https://github.com/kovidgoyal/calibre/raw/master/resources/images/lt.png @@ -18,4 +18,4 @@ name: calibre sources: - https://hub.docker.com/r/linuxserver/calibre/ - https://github.com/kovidgoyal/calibre/ -version: 2.0.2 +version: 3.0.0 diff --git a/charts/stable/calibre/SCALE/questions.yaml b/charts/stable/calibre/SCALE/questions.yaml index fc7c787a88e..4abc067a096 100644 --- a/charts/stable/calibre/SCALE/questions.yaml +++ b/charts/stable/calibre/SCALE/questions.yaml @@ -116,8 +116,6 @@ questions: default: "002" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -319,7 +317,6 @@ questions: max: 65535 default: 36054 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -668,8 +665,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext @@ -687,18 +682,63 @@ questions: label: "ReadOnly Root Filesystem" schema: type: boolean - default: false + default: true - variable: allowPrivilegeEscalation label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: type: boolean default: false + - variable: podSecurityContext + group: "Security and Permissions" + label: "Pod Security Context" + schema: + type: dict + attrs: + - variable: runAsUser + label: "runAsUser" + description: "The UserID of the user running the application" + schema: + type: int + default: 0 + - variable: runAsGroup + label: "runAsGroup" + description: The groupID this App of the user running the application" + schema: + type: int + default: 0 + - variable: fsGroup + label: "fsGroup" + description: "The group that should own ALL storage." + schema: + type: int + default: 568 + - variable: supplementalGroups + label: "supplemental Groups" + schema: + type: list + default: [] + items: + - variable: supplementalGroupsEntry + label: "supplemental Group" + schema: + type: int + - variable: fsGroupChangePolicy + label: "When should we take ownership?" + schema: + type: string + default: "OnRootMismatch" + enum: + - value: "OnRootMismatch" + description: "OnRootMismatch" + - value: "Always" + description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -740,7 +780,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/calibre/values.yaml b/charts/stable/calibre/values.yaml index f3d580acd3b..07112c45bfc 100644 --- a/charts/stable/calibre/values.yaml +++ b/charts/stable/calibre/values.yaml @@ -16,6 +16,13 @@ image: # -- image pull policy pullPolicy: IfNotPresent +securityContext: + runAsNonRoot: false + +podSecurityContext: + runAsUser: 0 + runAsGroup: 0 + # -- environment variables. See [image docs](https://docs.linuxserver.io/images/docker-calibre#environment-variables-e) for more details. # @default -- See below env: diff --git a/charts/stable/collabora-online/Chart.yaml b/charts/stable/collabora-online/Chart.yaml index 29a71cc7892..7eee77ada3f 100644 --- a/charts/stable/collabora-online/Chart.yaml +++ b/charts/stable/collabora-online/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "6.4.11.3" +appVersion: 6.4.11.3 dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.7 deprecated: false description: "Collabora Online Development Edition \u2013 an awesome, Online Office\ \ suite image suitable for home use." @@ -25,4 +25,4 @@ sources: - https://sdk.collaboraonline.com/contents.html - https://github.com/CollaboraOnline/online/tree/master/kubernetes/helm type: application -version: 7.0.3 +version: 8.0.0 diff --git a/charts/stable/collabora-online/SCALE/questions.yaml b/charts/stable/collabora-online/SCALE/questions.yaml index 03598d1b7d1..87041c342a2 100644 --- a/charts/stable/collabora-online/SCALE/questions.yaml +++ b/charts/stable/collabora-online/SCALE/questions.yaml @@ -132,8 +132,6 @@ questions: valid_chars: '^[a-z]{1,}\\{1}\.{1}[a-z]{1,}\\{1}\.{1}[a-z]{1,}$' # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -238,7 +236,6 @@ questions: max: 65535 default: 36004 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -471,8 +468,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext group: "Security and Permissions" @@ -494,12 +489,58 @@ questions: label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: type: boolean default: false + + - variable: podSecurityContext + group: "Security and Permissions" + label: "Pod Security Context" + schema: + type: dict + attrs: + - variable: runAsUser + label: "runAsUser" + description: "The UserID of the user running the application" + schema: + type: int + default: 104 + - variable: runAsGroup + label: "runAsGroup" + description: The groupID this App of the user running the application" + schema: + type: int + default: 0 + - variable: fsGroup + label: "fsGroup" + description: "The group that should own ALL storage." + schema: + type: int + default: 568 + - variable: supplementalGroups + label: "supplemental Groups" + schema: + type: list + default: [] + items: + - variable: supplementalGroupsEntry + label: "supplemental Group" + schema: + type: int + - variable: fsGroupChangePolicy + label: "When should we take ownership?" + schema: + type: string + default: "OnRootMismatch" + enum: + - value: "OnRootMismatch" + description: "OnRootMismatch" + - value: "Always" + description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -541,7 +582,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/collabora-online/values.yaml b/charts/stable/collabora-online/values.yaml index 35dd4eeac13..9dc639fd5fc 100644 --- a/charts/stable/collabora-online/values.yaml +++ b/charts/stable/collabora-online/values.yaml @@ -3,6 +3,14 @@ image: tag: v6.4.11.3@sha256:30eab5f9807e006b90b2533ad3a60b84c6e744a6fed8a3be2bd3f1a839715456 pullPolicy: IfNotPresent +securityContext: + readOnlyRootFilesystem: false + runAsNonRoot: false + +podSecurityContext: + runAsUser: 104 + runAsGroup: 0 + service: main: type: NodePort diff --git a/charts/stable/custom-app/Chart.yaml b/charts/stable/custom-app/Chart.yaml index 4416a72f5aa..12a46a8bc5b 100644 --- a/charts/stable/custom-app/Chart.yaml +++ b/charts/stable/custom-app/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "0.18.773" +appVersion: 0.18.773 dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.7 deprecated: false description: Advanced tool to create your own TrueCharts-based App home: https://github.com/truecharts/apps/tree/master/charts/stable/custom-app @@ -19,4 +19,4 @@ name: custom-app sources: - https://github.com/truecharts/apps/tree/master/charts/stable/custom-app type: application -version: 1.0.4 +version: 2.0.0 diff --git a/charts/stable/custom-app/SCALE/questions.yaml b/charts/stable/custom-app/SCALE/questions.yaml index d3d194eced1..ba12d139245 100644 --- a/charts/stable/custom-app/SCALE/questions.yaml +++ b/charts/stable/custom-app/SCALE/questions.yaml @@ -113,8 +113,6 @@ questions: - "definitions/timezone" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -500,9 +498,6 @@ questions: schema: type: string - - - # Include{ingressList} - variable: securityContext @@ -525,13 +520,12 @@ questions: label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: type: boolean default: true - - variable: podSecurityContext group: "Security and Permissions" label: "Pod Security Context" @@ -557,13 +551,13 @@ questions: type: int default: 568 - variable: supplementalGroups - label: "supplementalGroups" + label: "supplemental Groups" schema: type: list default: [] items: - variable: supplementalGroupsEntry - label: "supplementalGroup" + label: "supplemental Group" schema: type: int - variable: fsGroupChangePolicy diff --git a/charts/stable/custom-app/values.yaml b/charts/stable/custom-app/values.yaml index d7de45f52c0..16dbb42c897 100644 --- a/charts/stable/custom-app/values.yaml +++ b/charts/stable/custom-app/values.yaml @@ -6,17 +6,7 @@ image: tag: v0.18.773@sha256:288d33f51df057ba91a8f4586e7b47082984c66f21ccfa09a39339402aebcbad securityContext: - privileged: false readOnlyRootFilesystem: false - allowPrivilegeEscalation: true - runAsNonRoot: true - -podSecurityContext: - runAsUser: 568 - runAsGroup: 568 - fsGroup: 568 - supplementalGroups: [] - fsGroupChangePolicy: "OnRootMismatch" service: main: @@ -42,7 +32,6 @@ env: {} # PUID: 1001 # PGID: 1001 - persistence: config: enabled: true diff --git a/charts/stable/deconz/Chart.yaml b/charts/stable/deconz/Chart.yaml index 4e901d014c4..230fbb58341 100644 --- a/charts/stable/deconz/Chart.yaml +++ b/charts/stable/deconz/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "2.12.06" +appVersion: 2.12.06 dependencies: - name: common repository: https://truecharts.org - version: 7.0.14 + version: 8.0.7 description: deCONZ is an easy to use control software, with which you can set up and control Zigbee networks of any size without further programming effort. home: https://github.com/truechartsapps/tree/master/charts/incubator/deconz @@ -22,4 +22,4 @@ name: deconz sources: - https://github.com/dresden-elektronik/deconz-rest-plugin - https://github.com/marthoc/docker-deconz -version: 2.0.2 +version: 3.0.0 diff --git a/charts/stable/deconz/SCALE/questions.yaml b/charts/stable/deconz/SCALE/questions.yaml index e737c0a5d4e..54c893f9337 100644 --- a/charts/stable/deconz/SCALE/questions.yaml +++ b/charts/stable/deconz/SCALE/questions.yaml @@ -123,8 +123,6 @@ questions: default: "" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -423,7 +421,6 @@ questions: max: 65535 default: 36057 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -772,8 +769,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext @@ -796,13 +791,58 @@ questions: label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: type: boolean default: false + - variable: podSecurityContext + group: "Security and Permissions" + label: "Pod Security Context" + schema: + type: dict + attrs: + - variable: runAsUser + label: "runAsUser" + description: "The UserID of the user running the application" + schema: + type: int + default: 0 + - variable: runAsGroup + label: "runAsGroup" + description: The groupID this App of the user running the application" + schema: + type: int + default: 0 + - variable: fsGroup + label: "fsGroup" + description: "The group that should own ALL storage." + schema: + type: int + default: 568 + - variable: supplementalGroups + label: "supplemental Groups" + schema: + type: list + default: [] + items: + - variable: supplementalGroupsEntry + label: "supplemental Group" + schema: + type: int + - variable: fsGroupChangePolicy + label: "When should we take ownership?" + schema: + type: string + default: "OnRootMismatch" + enum: + - value: "OnRootMismatch" + description: "OnRootMismatch" + - value: "Always" + description: "Always" + - variable: resources group: "Resources and Devices" label: "" diff --git a/charts/stable/deconz/values.yaml b/charts/stable/deconz/values.yaml index 4855b07413c..fafe7da29ee 100644 --- a/charts/stable/deconz/values.yaml +++ b/charts/stable/deconz/values.yaml @@ -13,6 +13,14 @@ image: # -- image pull policy pullPolicy: IfNotPresent +securityContext: + readOnlyRootFilesystem: false + runAsNonRoot: false + +podSecurityContext: + runAsUser: 0 + runAsGroup: 0 + # -- environment variables. See [image docs](https://github.com/marthoc/docker-deconz/blob/master/README.md) for more details. # @default -- See below env: @@ -48,10 +56,6 @@ service: enabled: true port: 5900 -securityContext: - # -- (bool) Privileged securityContext may be required if USB controller is accessed directly through the host machine - privileged: # true - # -- Configure persistence settings for the chart under this key. # @default -- See values.yaml persistence: diff --git a/charts/stable/deepstack-cpu/Chart.yaml b/charts/stable/deepstack-cpu/Chart.yaml index d35fec55c72..eef671647ac 100644 --- a/charts/stable/deepstack-cpu/Chart.yaml +++ b/charts/stable/deepstack-cpu/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "cpu-2021.0" +appVersion: cpu-2021.0 dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.7 deprecated: false description: DeepStack AI provides AI features including Face Recognition, Object Detection, Scene Recognition and custom AI Models @@ -25,4 +25,4 @@ sources: - https://hub.docker.com/r/deepquestai/deepstack - https://www.deepstack.cc/ type: application -version: 5.0.2 +version: 6.0.0 diff --git a/charts/stable/deepstack-cpu/SCALE/questions.yaml b/charts/stable/deepstack-cpu/SCALE/questions.yaml index 764a4d9e447..76542c056c8 100644 --- a/charts/stable/deepstack-cpu/SCALE/questions.yaml +++ b/charts/stable/deepstack-cpu/SCALE/questions.yaml @@ -153,8 +153,6 @@ questions: required: true # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -259,7 +257,6 @@ questions: max: 65535 default: 36005 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -608,8 +605,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext group: "Security and Permissions" @@ -626,17 +621,63 @@ questions: label: "ReadOnly Root Filesystem" schema: type: boolean - default: false + default: true - variable: allowPrivilegeEscalation label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: type: boolean - default: false + default: true + + - variable: podSecurityContext + group: "Security and Permissions" + label: "Pod Security Context" + schema: + type: dict + attrs: + - variable: runAsUser + label: "runAsUser" + description: "The UserID of the user running the application" + schema: + type: int + default: 568 + - variable: runAsGroup + label: "runAsGroup" + description: The groupID this App of the user running the application" + schema: + type: int + default: 568 + - variable: fsGroup + label: "fsGroup" + description: "The group that should own ALL storage." + schema: + type: int + default: 568 + - variable: supplementalGroups + label: "supplemental Groups" + schema: + type: list + default: [] + items: + - variable: supplementalGroupsEntry + label: "supplemental Group" + schema: + type: int + - variable: fsGroupChangePolicy + label: "When should we take ownership?" + schema: + type: string + default: "OnRootMismatch" + enum: + - value: "OnRootMismatch" + description: "OnRootMismatch" + - value: "Always" + description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -678,7 +719,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/deluge/Chart.yaml b/charts/stable/deluge/Chart.yaml index 7a491cba442..61fbd5a28f2 100644 --- a/charts/stable/deluge/Chart.yaml +++ b/charts/stable/deluge/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "2.0.3-2201" +appVersion: 2.0.3-2201 dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.7 deprecated: false description: Deluge App for TrueNAS SCALE home: https://github.com/truecharts/apps/tree/master/charts/incubator/deluge @@ -21,4 +21,4 @@ name: deluge sources: - https://github.com/deluge-torrent/deluge type: application -version: 7.0.2 +version: 8.0.0 diff --git a/charts/stable/deluge/SCALE/questions.yaml b/charts/stable/deluge/SCALE/questions.yaml index 83290fd4fee..2a9b3054324 100644 --- a/charts/stable/deluge/SCALE/questions.yaml +++ b/charts/stable/deluge/SCALE/questions.yaml @@ -698,8 +698,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext group: "Security and Permissions" @@ -716,17 +714,63 @@ questions: label: "ReadOnly Root Filesystem" schema: type: boolean - default: false + default: true - variable: allowPrivilegeEscalation label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: type: boolean default: false + + - variable: podSecurityContext + group: "Security and Permissions" + label: "Pod Security Context" + schema: + type: dict + attrs: + - variable: runAsUser + label: "runAsUser" + description: "The UserID of the user running the application" + schema: + type: int + default: 0 + - variable: runAsGroup + label: "runAsGroup" + description: The groupID this App of the user running the application" + schema: + type: int + default: 0 + - variable: fsGroup + label: "fsGroup" + description: "The group that should own ALL storage." + schema: + type: int + default: 568 + - variable: supplementalGroups + label: "supplemental Groups" + schema: + type: list + default: [] + items: + - variable: supplementalGroupsEntry + label: "supplemental Group" + schema: + type: int + - variable: fsGroupChangePolicy + label: "When should we take ownership?" + schema: + type: string + default: "OnRootMismatch" + enum: + - value: "OnRootMismatch" + description: "OnRootMismatch" + - value: "Always" + description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -768,7 +812,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/deluge/values.yaml b/charts/stable/deluge/values.yaml index 29d30c5bad0..f3c7e6c5912 100644 --- a/charts/stable/deluge/values.yaml +++ b/charts/stable/deluge/values.yaml @@ -5,6 +5,13 @@ image: pullPolicy: IfNotPresent tag: version-2.0.3-2201906121747ubuntu18.04.1@sha256:a32d8680e315932b799c8267e2c0d630185aaf8b542d56a134c74c9a5c957c36 +securityContext: + runAsNonRoot: false + +podSecurityContext: + runAsUser: 0 + runAsGroup: 0 + service: main: ports: diff --git a/charts/stable/dizquetv/Chart.yaml b/charts/stable/dizquetv/Chart.yaml index 675f1b7948c..331571d62b9 100644 --- a/charts/stable/dizquetv/Chart.yaml +++ b/charts/stable/dizquetv/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "1.4.5" +appVersion: 1.4.5 dependencies: - name: common repository: https://truecharts.org - version: 7.0.14 + version: 8.0.7 description: Create live TV channel streams from media on your Plex servers. home: https://github.com/truechartsapps/tree/master/charts/incubator/dizquetv icon: https://github.com/vexorian/dizquetv/raw/main/resources/dizquetv.png?raw=true @@ -19,4 +19,4 @@ name: dizquetv sources: - https://github.com/vexorian/dizquetv - https://hub.docker.com/r/vexorian/dizquetv -version: 2.0.3 +version: 3.0.0 diff --git a/charts/stable/dizquetv/SCALE/questions.yaml b/charts/stable/dizquetv/SCALE/questions.yaml index 36be90bd736..e0b23e1ab74 100644 --- a/charts/stable/dizquetv/SCALE/questions.yaml +++ b/charts/stable/dizquetv/SCALE/questions.yaml @@ -98,8 +98,6 @@ questions: default: "002" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -204,7 +202,6 @@ questions: max: 65535 default: 36058 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -553,8 +550,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext @@ -572,17 +567,62 @@ questions: label: "ReadOnly Root Filesystem" schema: type: boolean - default: false + default: true - variable: allowPrivilegeEscalation label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: type: boolean - default: false + default: true + + - variable: podSecurityContext + group: "Security and Permissions" + label: "Pod Security Context" + schema: + type: dict + attrs: + - variable: runAsUser + label: "runAsUser" + description: "The UserID of the user running the application" + schema: + type: int + default: 568 + - variable: runAsGroup + label: "runAsGroup" + description: The groupID this App of the user running the application" + schema: + type: int + default: 568 + - variable: fsGroup + label: "fsGroup" + description: "The group that should own ALL storage." + schema: + type: int + default: 568 + - variable: supplementalGroups + label: "supplemental Groups" + schema: + type: list + default: [] + items: + - variable: supplementalGroupsEntry + label: "supplemental Group" + schema: + type: int + - variable: fsGroupChangePolicy + label: "When should we take ownership?" + schema: + type: string + default: "OnRootMismatch" + enum: + - value: "OnRootMismatch" + description: "OnRootMismatch" + - value: "Always" + description: "Always" - variable: resources group: "Resources and Devices" @@ -625,7 +665,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/dizquetv/values.yaml b/charts/stable/dizquetv/values.yaml index 6e8b0917b85..45c20986749 100644 --- a/charts/stable/dizquetv/values.yaml +++ b/charts/stable/dizquetv/values.yaml @@ -31,7 +31,6 @@ service: main: port: 8000 - # -- Configure persistence settings for the chart under this key. # @default -- See values.yaml persistence: diff --git a/charts/stable/duplicati/Chart.yaml b/charts/stable/duplicati/Chart.yaml index 97c44172f09..ac7363eaedd 100644 --- a/charts/stable/duplicati/Chart.yaml +++ b/charts/stable/duplicati/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "latest" +appVersion: latest dependencies: - name: common repository: https://truecharts.org - version: 7.0.14 + version: 8.0.7 description: Store securely encrypted backups on cloud storage services! home: https://github.com/truechartsapps/tree/master/charts/incubator/duplicati icon: https://avatars.githubusercontent.com/u/8270231?s=200&v=4 @@ -18,4 +18,4 @@ name: duplicati sources: - https://hub.docker.com/r/linuxserver/duplicati/ - https://github.com/duplicati/duplicati -version: 2.0.3 +version: 3.0.0 diff --git a/charts/stable/duplicati/SCALE/questions.yaml b/charts/stable/duplicati/SCALE/questions.yaml index 92a88c2c7a4..2f5055f78ac 100644 --- a/charts/stable/duplicati/SCALE/questions.yaml +++ b/charts/stable/duplicati/SCALE/questions.yaml @@ -98,8 +98,6 @@ questions: default: "002" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -204,7 +202,6 @@ questions: max: 65535 default: 36059 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -553,8 +550,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext @@ -577,13 +572,58 @@ questions: label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: type: boolean default: false + - variable: podSecurityContext + group: "Security and Permissions" + label: "Pod Security Context" + schema: + type: dict + attrs: + - variable: runAsUser + label: "runAsUser" + description: "The UserID of the user running the application" + schema: + type: int + default: 0 + - variable: runAsGroup + label: "runAsGroup" + description: The groupID this App of the user running the application" + schema: + type: int + default: 0 + - variable: fsGroup + label: "fsGroup" + description: "The group that should own ALL storage." + schema: + type: int + default: 568 + - variable: supplementalGroups + label: "supplemental Groups" + schema: + type: list + default: [] + items: + - variable: supplementalGroupsEntry + label: "supplemental Group" + schema: + type: int + - variable: fsGroupChangePolicy + label: "When should we take ownership?" + schema: + type: string + default: "OnRootMismatch" + enum: + - value: "OnRootMismatch" + description: "OnRootMismatch" + - value: "Always" + description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -625,7 +665,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/duplicati/values.yaml b/charts/stable/duplicati/values.yaml index abdcaba1a98..60f56590528 100644 --- a/charts/stable/duplicati/values.yaml +++ b/charts/stable/duplicati/values.yaml @@ -13,6 +13,14 @@ image: # -- image pull policy pullPolicy: IfNotPresent +securityContext: + readOnlyRootFilesystem: false + runAsNonRoot: false + +podSecurityContext: + runAsUser: 0 + runAsGroup: 0 + # See more environment variables in the [duplicati documentation](https://github.com/linuxserver/docker-duplicati#parameters) # @default -- See below env: @@ -31,7 +39,6 @@ service: main: port: 8200 - # -- Configure persistence settings for the chart under this key. # @default -- See values.yaml persistence: diff --git a/charts/stable/emby/Chart.yaml b/charts/stable/emby/Chart.yaml index 0739acff25d..013f69c9964 100644 --- a/charts/stable/emby/Chart.yaml +++ b/charts/stable/emby/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "4.6.4.0" +appVersion: 4.6.4.0 dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.7 deprecated: false description: Emby Server is a home media server home: https://github.com/truecharts/apps/master/stable/emby @@ -25,4 +25,4 @@ sources: - https://hub.docker.com/r/linuxserver/emby - https://github.com/linuxserver/docker-emby.git type: application -version: 7.0.2 +version: 8.0.0 diff --git a/charts/stable/emby/SCALE/questions.yaml b/charts/stable/emby/SCALE/questions.yaml index f466b552768..78aeecad657 100644 --- a/charts/stable/emby/SCALE/questions.yaml +++ b/charts/stable/emby/SCALE/questions.yaml @@ -86,8 +86,6 @@ questions: default: "002" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -192,7 +190,6 @@ questions: max: 65535 default: 36006 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -541,8 +538,6 @@ questions: schema: type: string - - # Include{ingressList} # Specify GPU configuration - variable: scaleGPU @@ -574,7 +569,7 @@ questions: label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: @@ -625,6 +620,7 @@ questions: description: "OnRootMismatch" - value: "Always" description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -666,7 +662,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/emby/values.yaml b/charts/stable/emby/values.yaml index 174153865aa..46235fc95ab 100644 --- a/charts/stable/emby/values.yaml +++ b/charts/stable/emby/values.yaml @@ -6,18 +6,7 @@ image: tag: v4.6.4.0@sha256:3921a37cfd43abbc5be6fd6a2141488573c64f70d628b4a4731415713cbb12cd securityContext: - privileged: false readOnlyRootFilesystem: false - allowPrivilegeEscalation: true - runAsNonRoot: true - -# 44=video 107=render -podSecurityContext: - runAsUser: 568 - runAsGroup: 568 - fsGroup: 568 - supplementalGroups: [44, 107] - fsGroupChangePolicy: "OnRootMismatch" service: main: diff --git a/charts/stable/esphome/Chart.yaml b/charts/stable/esphome/Chart.yaml index c4a852db8ff..8574db61643 100644 --- a/charts/stable/esphome/Chart.yaml +++ b/charts/stable/esphome/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "2021.9.1" +appVersion: 2021.9.1 dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.7 deprecated: false description: ESPHome is a system to control your ESP8266/ESP32 by simple yet powerful configuration files and control them remotely through Home Automation systems. @@ -24,4 +24,4 @@ sources: - https://github.com/esphome/esphome - https://hub.docker.com/u/esphome type: application -version: 7.0.3 +version: 8.0.0 diff --git a/charts/stable/esphome/SCALE/questions.yaml b/charts/stable/esphome/SCALE/questions.yaml index 3a33406c1db..75d22cfc036 100644 --- a/charts/stable/esphome/SCALE/questions.yaml +++ b/charts/stable/esphome/SCALE/questions.yaml @@ -80,8 +80,6 @@ questions: - "definitions/timezone" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -645,8 +643,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext @@ -664,12 +660,12 @@ questions: label: "ReadOnly Root Filesystem" schema: type: boolean - default: false + default: true - variable: allowPrivilegeEscalation label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: @@ -720,6 +716,7 @@ questions: description: "OnRootMismatch" - value: "Always" description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -761,7 +758,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/esphome/values.yaml b/charts/stable/esphome/values.yaml index af3ed1db7b0..f3f8c08766d 100644 --- a/charts/stable/esphome/values.yaml +++ b/charts/stable/esphome/values.yaml @@ -5,19 +5,6 @@ image: pullPolicy: IfNotPresent tag: v2021.9.1@sha256:f50cafe66793653fb2fd22ac436f9dea83535f0cca599400c2d76f09845a6e44 -securityContext: - privileged: false - readOnlyRootFilesystem: false - allowPrivilegeEscalation: true - runAsNonRoot: true - -podSecurityContext: - runAsUser: 568 - runAsGroup: 568 - fsGroup: 568 - supplementalGroups: [] - fsGroupChangePolicy: "OnRootMismatch" - service: main: ports: diff --git a/charts/stable/external-service/Chart.yaml b/charts/stable/external-service/Chart.yaml index 4470c0d7986..f268e77a3cb 100644 --- a/charts/stable/external-service/Chart.yaml +++ b/charts/stable/external-service/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "0.66.6" +appVersion: 0.66.6 dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.7 deprecated: false description: Allow external services to be used like Apps. home: https://github.com/truecharts/apps/tree/master/charts/stable/external-service @@ -23,4 +23,4 @@ name: external-service sources: - https://github.com/truecharts/apps/tree/master/charts/stable/external-service type: application -version: 2.0.2 +version: 3.0.0 diff --git a/charts/stable/fireflyiii/Chart.yaml b/charts/stable/fireflyiii/Chart.yaml index 4553a519b8d..92fc681642a 100644 --- a/charts/stable/fireflyiii/Chart.yaml +++ b/charts/stable/fireflyiii/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "5.5.12" +appVersion: 5.5.12 dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.7 - condition: postgresql.enabled name: postgresql repository: https://truecharts.org/ @@ -27,4 +27,4 @@ name: fireflyiii sources: - https://github.com/firefly-iii/firefly-iii/ type: application -version: 8.0.6 +version: 9.0.0 diff --git a/charts/stable/fireflyiii/SCALE/questions.yaml b/charts/stable/fireflyiii/SCALE/questions.yaml index e28d89f901c..1afa2c3675c 100644 --- a/charts/stable/fireflyiii/SCALE/questions.yaml +++ b/charts/stable/fireflyiii/SCALE/questions.yaml @@ -97,8 +97,6 @@ questions: default: "002" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -553,8 +551,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext @@ -577,12 +573,12 @@ questions: label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: type: boolean - default: false + default: true - variable: podSecurityContext group: "Security and Permissions" @@ -595,19 +591,19 @@ questions: description: "The UserID of the user running the application" schema: type: int - default: 0 + default: 568 - variable: runAsGroup label: "runAsGroup" description: The groupID this App of the user running the application" schema: type: int - default: 0 + default: 568 - variable: fsGroup label: "fsGroup" description: "The group that should own ALL storage." schema: type: int - default: 0 + default: 568 - variable: supplementalGroups label: "supplemental Groups" schema: @@ -628,6 +624,7 @@ questions: description: "OnRootMismatch" - value: "Always" description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -669,7 +666,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/fireflyiii/values.yaml b/charts/stable/fireflyiii/values.yaml index eafad503b8a..bc6c7c985da 100644 --- a/charts/stable/fireflyiii/values.yaml +++ b/charts/stable/fireflyiii/values.yaml @@ -5,25 +5,14 @@ image: pullPolicy: IfNotPresent tag: version-5.5.12@sha256:9a1f87a8ad38694675390756be9686fe9d8ba941fe1f145641626135c7eb5e4b +securityContext: + readOnlyRootFilesystem: false postgresqlImage: repository: bitnami/postgresql pullPolicy: IfNotPresent tag: 13.4.0@sha256:abfb7efd31afc36a8b16aa077bb9dd165c4f635412affef37c7859605fda762c -securityContext: - privileged: false - readOnlyRootFilesystem: false - allowPrivilegeEscalation: true - runAsNonRoot: false - -podSecurityContext: - runAsUser: 0 - runAsGroup: 0 - fsGroup: 0 - supplementalGroups: [] - fsGroupChangePolicy: "OnRootMismatch" - service: main: ports: @@ -80,7 +69,6 @@ persistence: accessMode: ReadWriteOnce size: "100Gi" - # Enabled postgres postgresql: enabled: true diff --git a/charts/stable/flaresolverr/Chart.yaml b/charts/stable/flaresolverr/Chart.yaml index 1d3d734a079..318cbd61938 100644 --- a/charts/stable/flaresolverr/Chart.yaml +++ b/charts/stable/flaresolverr/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "1.2.9" +appVersion: 1.2.9 dependencies: - name: common repository: https://truecharts.org - version: 7.0.14 + version: 8.0.7 description: FlareSolverr is a proxy server to bypass Cloudflare protection home: https://github.com/truechartsapps/tree/master/charts/incubator/flaresolverr icon: https://raw.githubusercontent.com/FlareSolverr/FlareSolverr/master/resources/flaresolverr_logo.svg @@ -19,4 +19,4 @@ name: flaresolverr sources: - https://github.com/FlareSolverr/FlareSolverr - https://hub.docker.com/r/flaresolverr/flaresolverr -version: 2.0.2 +version: 3.0.0 diff --git a/charts/stable/flaresolverr/SCALE/questions.yaml b/charts/stable/flaresolverr/SCALE/questions.yaml index 5b228c18f27..89693663351 100644 --- a/charts/stable/flaresolverr/SCALE/questions.yaml +++ b/charts/stable/flaresolverr/SCALE/questions.yaml @@ -86,8 +86,6 @@ questions: default: "002" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -192,7 +190,6 @@ questions: max: 65535 default: 36060 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -541,8 +538,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext @@ -565,7 +560,7 @@ questions: label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: @@ -616,6 +611,7 @@ questions: description: "OnRootMismatch" - value: "Always" description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -657,7 +653,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/flaresolverr/values.yaml b/charts/stable/flaresolverr/values.yaml index 3263d62a868..5841dace94a 100644 --- a/charts/stable/flaresolverr/values.yaml +++ b/charts/stable/flaresolverr/values.yaml @@ -14,17 +14,7 @@ image: tag: v1.2.9@sha256:6f93f3359a8b2cbd268286ce460ff5ffa79a6f1d8c19097ed49097fbfab6a786 securityContext: - privileged: false readOnlyRootFilesystem: false - allowPrivilegeEscalation: true - runAsNonRoot: true - -podSecurityContext: - runAsUser: 568 - runAsGroup: 568 - fsGroup: 568 - supplementalGroups: [] - fsGroupChangePolicy: "OnRootMismatch" # -- environment variables. See more environment variables in the [flaresolverr documentation](https://github.com/FlareSolverr/FlareSolverr#environment-variables). # @default -- See below diff --git a/charts/stable/flood/Chart.yaml b/charts/stable/flood/Chart.yaml index f1790835879..f631acb224a 100644 --- a/charts/stable/flood/Chart.yaml +++ b/charts/stable/flood/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "4.6.1" +appVersion: 4.6.1 dependencies: - name: common repository: https://truecharts.org - version: 7.0.14 + version: 8.0.7 description: Flood is a monitoring service for various torrent clients home: https://github.com/truechartsapps/tree/master/charts/incubator/flood icon: https://raw.githubusercontent.com/jesec/flood/master/flood.svg @@ -21,4 +21,4 @@ name: flood sources: - https://github.com/jesec/flood - https://hub.docker.com/r/jesec/flood -version: 2.0.2 +version: 3.0.0 diff --git a/charts/stable/flood/SCALE/questions.yaml b/charts/stable/flood/SCALE/questions.yaml index d6f26550089..c5039872bf6 100644 --- a/charts/stable/flood/SCALE/questions.yaml +++ b/charts/stable/flood/SCALE/questions.yaml @@ -93,8 +93,6 @@ questions: # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -199,7 +197,6 @@ questions: max: 65535 default: 36061 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -548,8 +545,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext @@ -567,12 +562,12 @@ questions: label: "ReadOnly Root Filesystem" schema: type: boolean - default: false + default: true - variable: allowPrivilegeEscalation label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: @@ -623,6 +618,7 @@ questions: description: "OnRootMismatch" - value: "Always" description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -664,7 +660,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/flood/values.yaml b/charts/stable/flood/values.yaml index 5a825c3d5a6..cce97777f37 100644 --- a/charts/stable/flood/values.yaml +++ b/charts/stable/flood/values.yaml @@ -13,19 +13,6 @@ image: # -- image tag tag: v4.6.1@sha256:268dc4b4eff08c6c5563b779a1b41370c5c509ff190fe38886a65f65c4174f85 -securityContext: - privileged: false - readOnlyRootFilesystem: false - allowPrivilegeEscalation: true - runAsNonRoot: true - -podSecurityContext: - runAsUser: 568 - runAsGroup: 568 - fsGroup: 568 - supplementalGroups: [] - fsGroupChangePolicy: "OnRootMismatch" - # -- environment variables. See more environment variables in the [flood documentation] (https://github.com/jesec/flood/blob/v4.6.0/config.ts) # Note: The environmental variables are not case sensitive (e.g. FLOOD_OPTION_port=FLOOD_OPTION_PORT). # @default -- See below @@ -41,7 +28,6 @@ service: main: port: 3000 - # -- Configure persistence settings for the chart under this key. # @default -- See values.yaml persistence: diff --git a/charts/stable/focalboard/Chart.yaml b/charts/stable/focalboard/Chart.yaml index 82c7b94e6dd..f2b945d3cb2 100644 --- a/charts/stable/focalboard/Chart.yaml +++ b/charts/stable/focalboard/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "0.8.0" +appVersion: 0.8.0 dependencies: - name: common repository: https://truecharts.org - version: 7.0.14 + version: 8.0.7 description: Focalboard is an open source, self-hosted alternative to Trello, Notion, and Asana. home: https://github.com/truechartsapps/tree/master/charts/incubator/focalboard @@ -22,4 +22,4 @@ sources: - https://www.focalboard.com/ - https://github.com/mattermost/focalboard - https://github.com/FlipEnergy/container-images/blob/main/focalboard -version: 2.0.2 +version: 3.0.0 diff --git a/charts/stable/focalboard/SCALE/questions.yaml b/charts/stable/focalboard/SCALE/questions.yaml index 16046ab8f3f..6192a74d104 100644 --- a/charts/stable/focalboard/SCALE/questions.yaml +++ b/charts/stable/focalboard/SCALE/questions.yaml @@ -86,8 +86,6 @@ questions: default: "002" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -192,7 +190,6 @@ questions: max: 65535 default: 36049 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -541,8 +538,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext @@ -565,7 +560,7 @@ questions: label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: @@ -616,6 +611,7 @@ questions: description: "OnRootMismatch" - value: "Always" description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -657,7 +653,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/focalboard/values.yaml b/charts/stable/focalboard/values.yaml index 6cfe005d056..ad85ba244dd 100644 --- a/charts/stable/focalboard/values.yaml +++ b/charts/stable/focalboard/values.yaml @@ -14,17 +14,7 @@ image: tag: v0.8.0@sha256:c8a81de85722b1d8ce728222cd5b77ea9f8e4ca33c91787a8a3eb0a49f6fa432 securityContext: - privileged: false readOnlyRootFilesystem: false - allowPrivilegeEscalation: true - runAsNonRoot: true - -podSecurityContext: - runAsUser: 568 - runAsGroup: 568 - fsGroup: 568 - supplementalGroups: [] - fsGroupChangePolicy: "OnRootMismatch" # -- environment variables. See more environment variables in the [image entrypoint script](https://github.com/FlipEnergy/container-images/blob/main/focalboard/entrypoint.sh) # @default -- See below @@ -41,7 +31,6 @@ service: main: port: 8000 - # -- Configure persistence settings for the chart under this key. # @default -- See values.yaml persistence: diff --git a/charts/stable/freeradius/Chart.yaml b/charts/stable/freeradius/Chart.yaml index 7438b25761d..2af4da58b18 100644 --- a/charts/stable/freeradius/Chart.yaml +++ b/charts/stable/freeradius/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "3.0.23" +appVersion: 3.0.23 dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.7 deprecated: false description: OpenSource Radius implementation home: https://www.openldap.org @@ -24,4 +24,4 @@ sources: - https://hub.docker.com/r/freeradius/freeradius-server/ - https://freeradius.org/ type: application -version: 2.0.2 +version: 3.0.0 diff --git a/charts/stable/freeradius/SCALE/questions.yaml b/charts/stable/freeradius/SCALE/questions.yaml index 11255673075..f041bb9cb15 100644 --- a/charts/stable/freeradius/SCALE/questions.yaml +++ b/charts/stable/freeradius/SCALE/questions.yaml @@ -78,11 +78,8 @@ questions: type: string default: "002" - # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -282,7 +279,6 @@ questions: min: 9000 max: 65535 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -475,7 +471,6 @@ questions: # Include{persistenceList} - # Include{ingressList} - variable: securityContext @@ -498,13 +493,58 @@ questions: label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: type: boolean default: false + - variable: podSecurityContext + group: "Security and Permissions" + label: "Pod Security Context" + schema: + type: dict + attrs: + - variable: runAsUser + label: "runAsUser" + description: "The UserID of the user running the application" + schema: + type: int + default: 0 + - variable: runAsGroup + label: "runAsGroup" + description: The groupID this App of the user running the application" + schema: + type: int + default: 0 + - variable: fsGroup + label: "fsGroup" + description: "The group that should own ALL storage." + schema: + type: int + default: 568 + - variable: supplementalGroups + label: "supplemental Groups" + schema: + type: list + default: [] + items: + - variable: supplementalGroupsEntry + label: "supplemental Group" + schema: + type: int + - variable: fsGroupChangePolicy + label: "When should we take ownership?" + schema: + type: string + default: "OnRootMismatch" + enum: + - value: "OnRootMismatch" + description: "OnRootMismatch" + - value: "Always" + description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -546,7 +586,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/freeradius/values.yaml b/charts/stable/freeradius/values.yaml index 1e4d2bd4940..142530465fe 100644 --- a/charts/stable/freeradius/values.yaml +++ b/charts/stable/freeradius/values.yaml @@ -5,6 +5,14 @@ image: pullPolicy: IfNotPresent tag: v3.0.23@sha256:21454da0a4f4950dd9b97e82de5b56556fdf2bf38f60ae427852b74a2622c972 +securityContext: + readOnlyRootFilesystem: false + runAsNonRoot: false + +podSecurityContext: + runAsUser: 0 + runAsGroup: 0 + service: main: ports: diff --git a/charts/stable/freshrss/Chart.yaml b/charts/stable/freshrss/Chart.yaml index 7bea279b7f4..c65dba0a5c5 100644 --- a/charts/stable/freshrss/Chart.yaml +++ b/charts/stable/freshrss/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "1.18.1" +appVersion: 1.18.1 dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.7 deprecated: false description: FreshRSS is a self-hosted RSS feed aggregator home: https://github.com/truecharts/apps/tree/master/charts/incubator/freshrss @@ -21,4 +21,4 @@ sources: - https://github.com/FreshRSS/FreshRSS - https://hub.docker.com/r/linuxserver/freshrss type: application -version: 7.0.3 +version: 8.0.0 diff --git a/charts/stable/freshrss/SCALE/questions.yaml b/charts/stable/freshrss/SCALE/questions.yaml index 9258804b205..897c51ff42e 100644 --- a/charts/stable/freshrss/SCALE/questions.yaml +++ b/charts/stable/freshrss/SCALE/questions.yaml @@ -98,8 +98,6 @@ questions: default: "002" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -204,7 +202,6 @@ questions: max: 65535 default: 36029 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -554,8 +551,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext group: "Security and Permissions" @@ -577,12 +572,56 @@ questions: label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: type: boolean default: false + - variable: podSecurityContext + group: "Security and Permissions" + label: "Pod Security Context" + schema: + type: dict + attrs: + - variable: runAsUser + label: "runAsUser" + description: "The UserID of the user running the application" + schema: + type: int + default: 0 + - variable: runAsGroup + label: "runAsGroup" + description: The groupID this App of the user running the application" + schema: + type: int + default: 0 + - variable: fsGroup + label: "fsGroup" + description: "The group that should own ALL storage." + schema: + type: int + default: 568 + - variable: supplementalGroups + label: "supplemental Groups" + schema: + type: list + default: [] + items: + - variable: supplementalGroupsEntry + label: "supplemental Group" + schema: + type: int + - variable: fsGroupChangePolicy + label: "When should we take ownership?" + schema: + type: string + default: "OnRootMismatch" + enum: + - value: "OnRootMismatch" + description: "OnRootMismatch" + - value: "Always" + description: "Always" - variable: resources group: "Resources and Devices" label: "" @@ -624,7 +663,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/freshrss/values.yaml b/charts/stable/freshrss/values.yaml index 9218d3153e7..e569b9f5eda 100644 --- a/charts/stable/freshrss/values.yaml +++ b/charts/stable/freshrss/values.yaml @@ -5,6 +5,14 @@ image: pullPolicy: IfNotPresent tag: version-1.18.1@sha256:08fbb9de9f6c0292fc4334375ae0e7b7c618a0dac2a946306f57c64e9508e6b1 +securityContext: + readOnlyRootFilesystem: false + runAsNonRoot: false + +podSecurityContext: + runAsUser: 0 + runAsGroup: 0 + service: main: ports: diff --git a/charts/stable/gaps/Chart.yaml b/charts/stable/gaps/Chart.yaml index b65fde28abe..9c8ee58c225 100644 --- a/charts/stable/gaps/Chart.yaml +++ b/charts/stable/gaps/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "0.8.8" +appVersion: 0.8.8 dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.7 deprecated: false description: Gaps searches through your Plex Server or local folders for all movies, then queries for known movies in the same collection. @@ -22,4 +22,4 @@ name: gaps sources: - https://github.com/JasonHHouse/gaps type: application -version: 7.0.2 +version: 8.0.0 diff --git a/charts/stable/gaps/SCALE/questions.yaml b/charts/stable/gaps/SCALE/questions.yaml index f14cb7f1d3e..ade970a3650 100644 --- a/charts/stable/gaps/SCALE/questions.yaml +++ b/charts/stable/gaps/SCALE/questions.yaml @@ -86,8 +86,6 @@ questions: default: "002" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -541,8 +539,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext @@ -565,7 +561,7 @@ questions: label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: @@ -657,7 +653,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/gaps/values.yaml b/charts/stable/gaps/values.yaml index d219302cf5e..d84344464d8 100644 --- a/charts/stable/gaps/values.yaml +++ b/charts/stable/gaps/values.yaml @@ -6,17 +6,7 @@ image: tag: v0.8.8@sha256:2e4b3b4e677be68b947517b0077aec719db8c382dad2952421b746060bbd6513 securityContext: - privileged: false readOnlyRootFilesystem: false - allowPrivilegeEscalation: true - runAsNonRoot: true - -podSecurityContext: - runAsUser: 568 - runAsGroup: 568 - fsGroup: 568 - supplementalGroups: [] - fsGroupChangePolicy: "OnRootMismatch" service: main: diff --git a/charts/stable/gonic/Chart.yaml b/charts/stable/gonic/Chart.yaml index 85e19567c8d..a1a15a886b4 100644 --- a/charts/stable/gonic/Chart.yaml +++ b/charts/stable/gonic/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "0.13.1" +appVersion: 0.13.1 dependencies: - name: common repository: https://truecharts.org - version: 7.0.14 + version: 8.0.7 description: Music streaming server / subsonic server API implementation home: https://github.com/truechartsapps/tree/master/charts/incubator/gonic icon: https://raw.githubusercontent.com/sentriz/gonic/master/.github/logo.png @@ -19,4 +19,4 @@ name: gonic sources: - https://github.com/sentriz/gonic - https://hub.docker.com/r/sentriz/gonic -version: 2.0.2 +version: 3.0.0 diff --git a/charts/stable/gonic/SCALE/questions.yaml b/charts/stable/gonic/SCALE/questions.yaml index 3d1e1920ca4..381030e8d6c 100644 --- a/charts/stable/gonic/SCALE/questions.yaml +++ b/charts/stable/gonic/SCALE/questions.yaml @@ -86,8 +86,6 @@ questions: default: "002" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -192,7 +190,6 @@ questions: max: 65535 default: 36062 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -541,8 +538,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext @@ -560,12 +555,12 @@ questions: label: "ReadOnly Root Filesystem" schema: type: boolean - default: false + default: true - variable: allowPrivilegeEscalation label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: @@ -595,7 +590,7 @@ questions: description: "The group that should own ALL storage." schema: type: int - default: 0 + default: 568 - variable: supplementalGroups label: "supplemental Groups" schema: @@ -657,7 +652,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/gonic/values.yaml b/charts/stable/gonic/values.yaml index cd63a46ed92..abd823b4214 100644 --- a/charts/stable/gonic/values.yaml +++ b/charts/stable/gonic/values.yaml @@ -14,17 +14,11 @@ image: tag: v0.13.1@sha256:14d01b4a1a90991097656975d0c8643a755323961bc5b5c657a5c96372024d5c securityContext: - privileged: false - readOnlyRootFilesystem: false - allowPrivilegeEscalation: true runAsNonRoot: false podSecurityContext: runAsUser: 0 runAsGroup: 0 - fsGroup: 0 - supplementalGroups: [] - fsGroupChangePolicy: "OnRootMismatch" # -- environment variables. See more environment variables in the [gonic documentation](https://github.com/sentriz/gonic#configuration-options) # @default -- See below @@ -43,7 +37,6 @@ service: main: port: 80 - # -- Configure persistence settings for the chart under this key. # @default -- See values.yaml persistence: diff --git a/charts/stable/grocy/Chart.yaml b/charts/stable/grocy/Chart.yaml index 21e551227bb..b598de1a9f0 100644 --- a/charts/stable/grocy/Chart.yaml +++ b/charts/stable/grocy/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "3.1.1" +appVersion: 3.1.1 dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.7 deprecated: false description: ERP beyond your fridge - grocy is a web-based self-hosted groceries & household management solution for your home @@ -20,4 +20,4 @@ name: grocy sources: - https://github.com/grocy/grocy type: application -version: 7.0.3 +version: 8.0.0 diff --git a/charts/stable/grocy/SCALE/questions.yaml b/charts/stable/grocy/SCALE/questions.yaml index 722a8d80a90..b4d1ffc14af 100644 --- a/charts/stable/grocy/SCALE/questions.yaml +++ b/charts/stable/grocy/SCALE/questions.yaml @@ -98,8 +98,6 @@ questions: default: "002" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -553,8 +551,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext group: "Security and Permissions" @@ -576,12 +572,58 @@ questions: label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: type: boolean default: false + + - variable: podSecurityContext + group: "Security and Permissions" + label: "Pod Security Context" + schema: + type: dict + attrs: + - variable: runAsUser + label: "runAsUser" + description: "The UserID of the user running the application" + schema: + type: int + default: 0 + - variable: runAsGroup + label: "runAsGroup" + description: The groupID this App of the user running the application" + schema: + type: int + default: 0 + - variable: fsGroup + label: "fsGroup" + description: "The group that should own ALL storage." + schema: + type: int + default: 568 + - variable: supplementalGroups + label: "supplemental Groups" + schema: + type: list + default: [] + items: + - variable: supplementalGroupsEntry + label: "supplemental Group" + schema: + type: int + - variable: fsGroupChangePolicy + label: "When should we take ownership?" + schema: + type: string + default: "OnRootMismatch" + enum: + - value: "OnRootMismatch" + description: "OnRootMismatch" + - value: "Always" + description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -623,7 +665,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/grocy/values.yaml b/charts/stable/grocy/values.yaml index fc5d0e6727e..afb42f2b82a 100644 --- a/charts/stable/grocy/values.yaml +++ b/charts/stable/grocy/values.yaml @@ -5,6 +5,14 @@ image: tag: version-v3.1.1@sha256:26537103c844e83316d64c4c42f11ea2225f878930c590d1c9048b49ad902188 pullPolicy: IfNotPresent +securityContext: + readOnlyRootFilesystem: false + runAsNonRoot: false + +podSecurityContext: + runAsUser: 0 + runAsGroup: 0 + service: main: ports: diff --git a/charts/stable/handbrake/Chart.yaml b/charts/stable/handbrake/Chart.yaml index 1d3e9e6b458..1d61e8772f6 100644 --- a/charts/stable/handbrake/Chart.yaml +++ b/charts/stable/handbrake/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "1.24.1" +appVersion: 1.24.1 dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.7 deprecated: false description: HandBrake is a tool for converting video from nearly any format to a selection of modern, widely supported codecs. @@ -27,4 +27,4 @@ sources: - https://hub.docker.com/r/jlesage/handbrake/ - https://handbrake.fr/ type: application -version: 7.0.2 +version: 8.0.0 diff --git a/charts/stable/handbrake/SCALE/questions.yaml b/charts/stable/handbrake/SCALE/questions.yaml index 60447939ba7..529f521f3c8 100644 --- a/charts/stable/handbrake/SCALE/questions.yaml +++ b/charts/stable/handbrake/SCALE/questions.yaml @@ -171,8 +171,6 @@ questions: required: true # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -374,7 +372,6 @@ questions: max: 65535 default: 36003 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -745,12 +742,58 @@ questions: label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: type: boolean default: false + + - variable: podSecurityContext + group: "Security and Permissions" + label: "Pod Security Context" + schema: + type: dict + attrs: + - variable: runAsUser + label: "runAsUser" + description: "The UserID of the user running the application" + schema: + type: int + default: 0 + - variable: runAsGroup + label: "runAsGroup" + description: The groupID this App of the user running the application" + schema: + type: int + default: 0 + - variable: fsGroup + label: "fsGroup" + description: "The group that should own ALL storage." + schema: + type: int + default: 568 + - variable: supplementalGroups + label: "supplemental Groups" + schema: + type: list + default: [] + items: + - variable: supplementalGroupsEntry + label: "supplemental Group" + schema: + type: int + - variable: fsGroupChangePolicy + label: "When should we take ownership?" + schema: + type: string + default: "OnRootMismatch" + enum: + - value: "OnRootMismatch" + description: "OnRootMismatch" + - value: "Always" + description: "Always" + - variable: resources group: "Resources and Devices" label: "" diff --git a/charts/stable/handbrake/values.yaml b/charts/stable/handbrake/values.yaml index 94144677027..bee710aaa37 100644 --- a/charts/stable/handbrake/values.yaml +++ b/charts/stable/handbrake/values.yaml @@ -3,6 +3,14 @@ image: tag: v1.24.1@sha256:465f3116359c0b40497f0f2249cb1326047208d2aa70c0822df73e3d6e49eee7 pullPolicy: IfNotPresent +securityContext: + readOnlyRootFilesystem: false + runAsNonRoot: false + +podSecurityContext: + runAsUser: 0 + runAsGroup: 0 + service: main: ports: diff --git a/charts/stable/haste-server/Chart.yaml b/charts/stable/haste-server/Chart.yaml index 47790a29c5c..0d03bcf583b 100644 --- a/charts/stable/haste-server/Chart.yaml +++ b/charts/stable/haste-server/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "latest" +appVersion: latest dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.7 description: Simple text sharing home: https://github.com/truecharts/apps/tree/master/charts/incubator/haste icon: https://raw.githubusercontent.com/nicholaswilde/helm-charts/main/images/haste.png @@ -21,4 +21,4 @@ name: haste-server sources: - https://github.com/seejohnrun/haste-server - https://github.com/k8s-at-home/container-images -version: 2.0.2 +version: 3.0.0 diff --git a/charts/stable/haste-server/SCALE/questions.yaml b/charts/stable/haste-server/SCALE/questions.yaml index 6a38d4cdfa1..3a9664fcaa1 100644 --- a/charts/stable/haste-server/SCALE/questions.yaml +++ b/charts/stable/haste-server/SCALE/questions.yaml @@ -97,8 +97,6 @@ questions: default: "002" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -553,8 +551,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext @@ -572,12 +568,12 @@ questions: label: "ReadOnly Root Filesystem" schema: type: boolean - default: false + default: true - variable: allowPrivilegeEscalation label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: @@ -602,6 +598,12 @@ questions: schema: type: int default: 568 + - variable: fsGroup + label: "fsGroup" + description: "The group that should own ALL storage." + schema: + type: int + default: 568 - variable: supplementalGroups label: "supplemental Groups" schema: @@ -622,6 +624,7 @@ questions: description: "OnRootMismatch" - value: "Always" description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -663,7 +666,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/haste-server/values.yaml b/charts/stable/haste-server/values.yaml index 6cb7df20fda..e39e1ef3b6f 100644 --- a/charts/stable/haste-server/values.yaml +++ b/charts/stable/haste-server/values.yaml @@ -13,19 +13,6 @@ image: # -- image tag tag: latest@sha256:827aa2f2389d94a522e333080fa8cbc0e0a487c5681173caca785b3b6b9e5b01 -securityContext: - privileged: false - readOnlyRootFilesystem: false - allowPrivilegeEscalation: true - runAsNonRoot: true - -podSecurityContext: - runAsUser: 568 - runAsGroup: 568 - fsGroup: 568 - supplementalGroups: [] - fsGroupChangePolicy: "OnRootMismatch" - # -- environment variables. See [image docs](https://github.com/seejohnrun/haste-server) for more details. # @default -- See below env: diff --git a/charts/stable/healthchecks/Chart.yaml b/charts/stable/healthchecks/Chart.yaml index 92efb0d47c4..988fc921ba0 100644 --- a/charts/stable/healthchecks/Chart.yaml +++ b/charts/stable/healthchecks/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "1.22.0" +appVersion: 1.22.0 dependencies: - name: common repository: https://truecharts.org - version: 7.0.14 + version: 8.0.7 description: Healthchecks is a cron job monitoring service. It listens for HTTP requests and email messages ("pings") from your cron jobs and scheduled tasks ("checks"). When a ping does not arrive on time, Healthchecks sends out alerts. @@ -22,4 +22,4 @@ name: healthchecks sources: - https://github.com/healthchecks/healthchecks - https://hub.docker.com/r/linuxserver/healthchecks -version: 2.0.3 +version: 3.0.0 diff --git a/charts/stable/healthchecks/SCALE/questions.yaml b/charts/stable/healthchecks/SCALE/questions.yaml index 80b37a33ff3..ef62117afc5 100644 --- a/charts/stable/healthchecks/SCALE/questions.yaml +++ b/charts/stable/healthchecks/SCALE/questions.yaml @@ -121,8 +121,6 @@ questions: default: "" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -227,7 +225,6 @@ questions: max: 65535 default: 36063 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -576,8 +573,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext @@ -600,13 +595,58 @@ questions: label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: type: boolean default: false + - variable: podSecurityContext + group: "Security and Permissions" + label: "Pod Security Context" + schema: + type: dict + attrs: + - variable: runAsUser + label: "runAsUser" + description: "The UserID of the user running the application" + schema: + type: int + default: 0 + - variable: runAsGroup + label: "runAsGroup" + description: The groupID this App of the user running the application" + schema: + type: int + default: 0 + - variable: fsGroup + label: "fsGroup" + description: "The group that should own ALL storage." + schema: + type: int + default: 568 + - variable: supplementalGroups + label: "supplemental Groups" + schema: + type: list + default: [] + items: + - variable: supplementalGroupsEntry + label: "supplemental Group" + schema: + type: int + - variable: fsGroupChangePolicy + label: "When should we take ownership?" + schema: + type: string + default: "OnRootMismatch" + enum: + - value: "OnRootMismatch" + description: "OnRootMismatch" + - value: "Always" + description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -648,7 +688,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/healthchecks/values.yaml b/charts/stable/healthchecks/values.yaml index ad85d9b4cef..3f0fb770ad4 100644 --- a/charts/stable/healthchecks/values.yaml +++ b/charts/stable/healthchecks/values.yaml @@ -8,6 +8,14 @@ image: # -- image pull policy pullPolicy: IfNotPresent +securityContext: + readOnlyRootFilesystem: false + runAsNonRoot: false + +podSecurityContext: + runAsUser: 0 + runAsGroup: 0 + # -- Configures service settings for the chart. # @default -- See values.yaml service: diff --git a/charts/stable/heimdall/Chart.yaml b/charts/stable/heimdall/Chart.yaml index e57915e43a6..310fea015a8 100644 --- a/charts/stable/heimdall/Chart.yaml +++ b/charts/stable/heimdall/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "2.2.2" +appVersion: 2.2.2 dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.7 deprecated: false description: An Application dashboard and launcher home: https://github.com/truecharts/apps/tree/master/charts/incubator/heimdall @@ -18,4 +18,4 @@ maintainers: name: heimdall sources: null type: application -version: 7.0.3 +version: 8.0.0 diff --git a/charts/stable/heimdall/SCALE/questions.yaml b/charts/stable/heimdall/SCALE/questions.yaml index 8ceb2d8c7cd..b88a01892fa 100644 --- a/charts/stable/heimdall/SCALE/questions.yaml +++ b/charts/stable/heimdall/SCALE/questions.yaml @@ -98,8 +98,6 @@ questions: default: "002" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -204,7 +202,6 @@ questions: max: 65535 default: 36033 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -554,8 +551,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext group: "Security and Permissions" @@ -577,12 +572,58 @@ questions: label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: type: boolean default: false + + - variable: podSecurityContext + group: "Security and Permissions" + label: "Pod Security Context" + schema: + type: dict + attrs: + - variable: runAsUser + label: "runAsUser" + description: "The UserID of the user running the application" + schema: + type: int + default: 0 + - variable: runAsGroup + label: "runAsGroup" + description: The groupID this App of the user running the application" + schema: + type: int + default: 0 + - variable: fsGroup + label: "fsGroup" + description: "The group that should own ALL storage." + schema: + type: int + default: 568 + - variable: supplementalGroups + label: "supplemental Groups" + schema: + type: list + default: [] + items: + - variable: supplementalGroupsEntry + label: "supplemental Group" + schema: + type: int + - variable: fsGroupChangePolicy + label: "When should we take ownership?" + schema: + type: string + default: "OnRootMismatch" + enum: + - value: "OnRootMismatch" + description: "OnRootMismatch" + - value: "Always" + description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -624,7 +665,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/heimdall/values.yaml b/charts/stable/heimdall/values.yaml index a99bedba4ef..90802d5bf94 100644 --- a/charts/stable/heimdall/values.yaml +++ b/charts/stable/heimdall/values.yaml @@ -5,6 +5,14 @@ image: tag: version-2.2.2@sha256:823ce3c0e05b9bd7c011c03cea3af33b71efd726514d22b2d5b1d6989cefd5a7 pullPolicy: IfNotPresent +securityContext: + readOnlyRootFilesystem: false + runAsNonRoot: false + +podSecurityContext: + runAsUser: 0 + runAsGroup: 0 + service: main: ports: diff --git a/charts/stable/home-assistant/Chart.yaml b/charts/stable/home-assistant/Chart.yaml index 859ed35512c..fa468319358 100644 --- a/charts/stable/home-assistant/Chart.yaml +++ b/charts/stable/home-assistant/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "2021.9.7" +appVersion: 2021.9.7 dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.7 deprecated: false description: home-assistant App for TrueNAS SCALE home: https://github.com/truecharts/apps/tree/master/charts/stable/home-assistant @@ -25,4 +25,4 @@ sources: - https://github.com/home-assistant/home-assistant - https://github.com/cdr/code-server type: application -version: 7.0.3 +version: 8.0.0 diff --git a/charts/stable/home-assistant/SCALE/questions.yaml b/charts/stable/home-assistant/SCALE/questions.yaml index cf02f1e949c..b3b6161c3d0 100644 --- a/charts/stable/home-assistant/SCALE/questions.yaml +++ b/charts/stable/home-assistant/SCALE/questions.yaml @@ -114,8 +114,6 @@ questions: default: "002" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -220,7 +218,6 @@ questions: max: 65535 default: 36008 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -586,17 +583,63 @@ questions: label: "ReadOnly Root Filesystem" schema: type: boolean - default: false + default: true - variable: allowPrivilegeEscalation label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: type: boolean - default: false + default: true + + - variable: podSecurityContext + group: "Security and Permissions" + label: "Pod Security Context" + schema: + type: dict + attrs: + - variable: runAsUser + label: "runAsUser" + description: "The UserID of the user running the application" + schema: + type: int + default: 568 + - variable: runAsGroup + label: "runAsGroup" + description: The groupID this App of the user running the application" + schema: + type: int + default: 568 + - variable: fsGroup + label: "fsGroup" + description: "The group that should own ALL storage." + schema: + type: int + default: 568 + - variable: supplementalGroups + label: "supplemental Groups" + schema: + type: list + default: [] + items: + - variable: supplementalGroupsEntry + label: "supplemental Group" + schema: + type: int + - variable: fsGroupChangePolicy + label: "When should we take ownership?" + schema: + type: string + default: "OnRootMismatch" + enum: + - value: "OnRootMismatch" + description: "OnRootMismatch" + - value: "Always" + description: "Always" + - variable: resources group: "Resources and Devices" label: "" diff --git a/charts/stable/home-assistant/values.yaml b/charts/stable/home-assistant/values.yaml index eb0949b09c6..48ffaf20c36 100644 --- a/charts/stable/home-assistant/values.yaml +++ b/charts/stable/home-assistant/values.yaml @@ -20,10 +20,6 @@ service: # # When hostNetwork is true set dnsPolicy to ClusterFirstWithHostNet # dnsPolicy: ClusterFirstWithHostNet -# # Enable passing thru a USB device to Home Assistant -# securityContext: -# privileged: true - # Allow access a Git repository by passing in a private SSH key git: # Raw SSH private key @@ -46,7 +42,6 @@ persistence: accessMode: ReadWriteOnce size: "100Gi" - # # Path to your Z-Wave / Zigbee device in the container # additionalVolumeMounts: # - name: zwave-usb diff --git a/charts/stable/hyperion-ng/Chart.yaml b/charts/stable/hyperion-ng/Chart.yaml index 17277805aa9..8c9572fa887 100644 --- a/charts/stable/hyperion-ng/Chart.yaml +++ b/charts/stable/hyperion-ng/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "2.0.0-alph" +appVersion: 2.0.0-alph dependencies: - name: common repository: https://truecharts.org - version: 7.0.14 + version: 8.0.7 description: Hyperion is an opensource Bias or Ambient Lighting implementation home: https://github.com/truechartsapps/tree/master/charts/incubator/hyperion-ng icon: https://avatars.githubusercontent.com/u/17778452?s=200&v=4 @@ -19,4 +19,4 @@ name: hyperion-ng sources: - https://github.com/hyperion-project/hyperion.ng - https://hub.docker.com/r/sirfragalot/hyperion.ng -version: 2.0.2 +version: 3.0.0 diff --git a/charts/stable/hyperion-ng/SCALE/questions.yaml b/charts/stable/hyperion-ng/SCALE/questions.yaml index d883529b0f3..7a10af85d41 100644 --- a/charts/stable/hyperion-ng/SCALE/questions.yaml +++ b/charts/stable/hyperion-ng/SCALE/questions.yaml @@ -98,8 +98,6 @@ questions: default: "002" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -495,7 +493,6 @@ questions: max: 65535 default: 36098 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -844,8 +841,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext @@ -863,12 +858,12 @@ questions: label: "ReadOnly Root Filesystem" schema: type: boolean - default: false + default: true - variable: allowPrivilegeEscalation label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: @@ -898,7 +893,7 @@ questions: description: "The group that should own ALL storage." schema: type: int - default: 0 + default: 568 - variable: supplementalGroups label: "supplemental Groups" schema: @@ -960,7 +955,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/hyperion-ng/values.yaml b/charts/stable/hyperion-ng/values.yaml index 4f4dd6ce6b3..e2d74568480 100644 --- a/charts/stable/hyperion-ng/values.yaml +++ b/charts/stable/hyperion-ng/values.yaml @@ -14,17 +14,11 @@ image: pullPolicy: IfNotPresent securityContext: - privileged: false - readOnlyRootFilesystem: false - allowPrivilegeEscalation: true runAsNonRoot: false podSecurityContext: runAsUser: 0 runAsGroup: 0 - fsGroup: 0 - supplementalGroups: [] - fsGroupChangePolicy: "OnRootMismatch" # -- environment variables. See [image docs](https://docs.linuxserver.io/images/docker-airsonic#environment-variables-e) for more details. # @default -- See below @@ -59,7 +53,6 @@ service: protocol: TCP targetPort: 19333 - persistence: config: enabled: true diff --git a/charts/stable/jackett/Chart.yaml b/charts/stable/jackett/Chart.yaml index 806e6510c17..79ed6ce43be 100644 --- a/charts/stable/jackett/Chart.yaml +++ b/charts/stable/jackett/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "0.18.773" +appVersion: 0.18.773 dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.7 deprecated: false description: API Support for your favorite torrent trackers. home: https://github.com/truecharts/apps/tree/master/charts/stable/jackett @@ -24,4 +24,4 @@ name: jackett sources: - https://github.com/Jackett/Jackett type: application -version: 7.0.4 +version: 8.0.0 diff --git a/charts/stable/jackett/SCALE/questions.yaml b/charts/stable/jackett/SCALE/questions.yaml index 394f298275e..2c5149ccf3e 100644 --- a/charts/stable/jackett/SCALE/questions.yaml +++ b/charts/stable/jackett/SCALE/questions.yaml @@ -87,8 +87,6 @@ questions: default: "002" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -579,9 +577,6 @@ questions: schema: type: string - - - # Include{ingressList} - variable: securityContext @@ -604,7 +599,7 @@ questions: label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: @@ -636,13 +631,13 @@ questions: type: int default: 568 - variable: supplementalGroups - label: "supplementalGroups" + label: "supplemental Groups" schema: type: list default: [] items: - variable: supplementalGroupsEntry - label: "supplementalGroup" + label: "supplemental Group" schema: type: int - variable: fsGroupChangePolicy @@ -655,6 +650,7 @@ questions: description: "OnRootMismatch" - value: "Always" description: "Always" + - variable: resources group: "Resources and Devices" label: "Resource Limits" @@ -696,7 +692,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/jackett/values.yaml b/charts/stable/jackett/values.yaml index bf7f10ae2a3..a47e2e901d4 100644 --- a/charts/stable/jackett/values.yaml +++ b/charts/stable/jackett/values.yaml @@ -6,17 +6,7 @@ image: tag: v0.18.773@sha256:288d33f51df057ba91a8f4586e7b47082984c66f21ccfa09a39339402aebcbad securityContext: - privileged: false readOnlyRootFilesystem: false - allowPrivilegeEscalation: true - runAsNonRoot: true - -podSecurityContext: - runAsUser: 568 - runAsGroup: 568 - fsGroup: 568 - supplementalGroups: [] - fsGroupChangePolicy: "OnRootMismatch" service: main: @@ -40,7 +30,6 @@ env: {} # PUID: 1001 # PGID: 1001 - persistence: config: enabled: true diff --git a/charts/stable/jdownloader2/Chart.yaml b/charts/stable/jdownloader2/Chart.yaml index acd0f84e1d1..a65db85ad5b 100644 --- a/charts/stable/jdownloader2/Chart.yaml +++ b/charts/stable/jdownloader2/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "1.7.1" +appVersion: 1.7.1 dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.7 deprecated: false description: JDownloader is a free, open-source download management tool with a huge community of developers that makes downloading as easy and fast as it should be. @@ -23,4 +23,4 @@ sources: - https://hub.docker.com/r/jlesage/jdownloader-2 - https://jdownloader.org/ type: application -version: 2.0.3 +version: 3.0.0 diff --git a/charts/stable/jdownloader2/SCALE/questions.yaml b/charts/stable/jdownloader2/SCALE/questions.yaml index 12dcb1fdf20..796b5ba8958 100644 --- a/charts/stable/jdownloader2/SCALE/questions.yaml +++ b/charts/stable/jdownloader2/SCALE/questions.yaml @@ -785,8 +785,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext group: "Security and Permissions" @@ -795,7 +793,7 @@ questions: type: dict attrs: - variable: privileged - label: Privileged mode + label: "Privileged mode" schema: type: boolean default: false @@ -808,7 +806,58 @@ questions: label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false + - variable: runAsNonRoot + label: "runAsNonRoot" + schema: + type: boolean + default: false + + - variable: podSecurityContext + group: "Security and Permissions" + label: "Pod Security Context" + schema: + type: dict + attrs: + - variable: runAsUser + label: "runAsUser" + description: "The UserID of the user running the application" + schema: + type: int + default: 0 + - variable: runAsGroup + label: "runAsGroup" + description: The groupID this App of the user running the application" + schema: + type: int + default: 0 + - variable: fsGroup + label: "fsGroup" + description: "The group that should own ALL storage." + schema: + type: int + default: 568 + - variable: supplementalGroups + label: "supplemental Groups" + schema: + type: list + default: [] + items: + - variable: supplementalGroupsEntry + label: "supplemental Group" + schema: + type: int + - variable: fsGroupChangePolicy + label: "When should we take ownership?" + schema: + type: string + default: "OnRootMismatch" + enum: + - value: "OnRootMismatch" + description: "OnRootMismatch" + - value: "Always" + description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -850,8 +899,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/jdownloader2/values.yaml b/charts/stable/jdownloader2/values.yaml index 82d888b9ec3..e0a688f50bb 100644 --- a/charts/stable/jdownloader2/values.yaml +++ b/charts/stable/jdownloader2/values.yaml @@ -5,6 +5,14 @@ image: pullPolicy: IfNotPresent tag: v1.7.1@sha256:ed3299aa7037a99aed5978c30e504ce3daa470d11b6af9533355592c64c3cced +securityContext: + readOnlyRootFilesystem: false + runAsNonRoot: false + +podSecurityContext: + runAsUser: 0 + runAsGroup: 0 + service: main: ports: diff --git a/charts/stable/jellyfin/Chart.yaml b/charts/stable/jellyfin/Chart.yaml index 4c014635444..63eb00ea085 100644 --- a/charts/stable/jellyfin/Chart.yaml +++ b/charts/stable/jellyfin/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "10.7.7" +appVersion: 10.7.7 dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.7 deprecated: false description: Jellyfin is a Free Software Media System home: https://github.com/truecharts/apps/tree/master/charts/stable/jellyfin @@ -24,4 +24,4 @@ name: jellyfin sources: - https://github.com/jellyfin/jellyfin type: application -version: 7.0.2 +version: 8.0.0 diff --git a/charts/stable/jellyfin/SCALE/questions.yaml b/charts/stable/jellyfin/SCALE/questions.yaml index 5ec136833dc..bf53184c8b0 100644 --- a/charts/stable/jellyfin/SCALE/questions.yaml +++ b/charts/stable/jellyfin/SCALE/questions.yaml @@ -86,8 +86,6 @@ questions: default: "002" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -192,7 +190,6 @@ questions: max: 65535 default: 36010 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -541,8 +538,6 @@ questions: schema: type: string - - # Include{ingressList} # Specify GPU configuration - variable: scaleGPU @@ -574,7 +569,7 @@ questions: label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: @@ -625,6 +620,7 @@ questions: description: "OnRootMismatch" - value: "Always" description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -666,7 +662,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/jellyfin/values.yaml b/charts/stable/jellyfin/values.yaml index 05ee32deeda..96f9084c4e3 100644 --- a/charts/stable/jellyfin/values.yaml +++ b/charts/stable/jellyfin/values.yaml @@ -6,18 +6,7 @@ image: tag: v10.7.7@sha256:2fa78e734903d95f8b530d2f3203f5ce5d9ff891cc8a70c0e80e828e336b4abb securityContext: - privileged: false readOnlyRootFilesystem: false - allowPrivilegeEscalation: true - runAsNonRoot: true - -# 44=video 107=render -podSecurityContext: - runAsUser: 568 - runAsGroup: 568 - fsGroup: 568 - supplementalGroups: [44, 107] - fsGroupChangePolicy: "OnRootMismatch" service: main: diff --git a/charts/stable/k8s-gateway/Chart.yaml b/charts/stable/k8s-gateway/Chart.yaml index 0af4c0e55c7..efe8f51b7c3 100644 --- a/charts/stable/k8s-gateway/Chart.yaml +++ b/charts/stable/k8s-gateway/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "0.1.8" +appVersion: 0.1.8 dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.7 deprecated: false description: A Helm chart for the k8s_gateway CoreDNS plugin home: https://github.com/truecharts/apps/tree/master/charts/stable/k8s-gateway @@ -20,4 +20,4 @@ name: k8s-gateway sources: - https://github.com/ori-edge/k8s_gateway type: application -version: 2.0.2 +version: 3.0.0 diff --git a/charts/stable/k8s-gateway/SCALE/questions.yaml b/charts/stable/k8s-gateway/SCALE/questions.yaml index 04881ca3431..98fd50d76de 100644 --- a/charts/stable/k8s-gateway/SCALE/questions.yaml +++ b/charts/stable/k8s-gateway/SCALE/questions.yaml @@ -168,8 +168,6 @@ questions: required: true default: "" - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -344,11 +342,8 @@ questions: # Include{serviceList} - # Include{persistenceList} - - - variable: securityContext group: "Security and Permissions" label: "Security Context" @@ -364,18 +359,63 @@ questions: label: "ReadOnly Root Filesystem" schema: type: boolean - default: false + default: true - variable: allowPrivilegeEscalation label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: type: boolean default: false + - variable: podSecurityContext + group: "Security and Permissions" + label: "Pod Security Context" + schema: + type: dict + attrs: + - variable: runAsUser + label: "runAsUser" + description: "The UserID of the user running the application" + schema: + type: int + default: 0 + - variable: runAsGroup + label: "runAsGroup" + description: The groupID this App of the user running the application" + schema: + type: int + default: 0 + - variable: fsGroup + label: "fsGroup" + description: "The group that should own ALL storage." + schema: + type: int + default: 568 + - variable: supplementalGroups + label: "supplemental Groups" + schema: + type: list + default: [] + items: + - variable: supplementalGroupsEntry + label: "supplemental Group" + schema: + type: int + - variable: fsGroupChangePolicy + label: "When should we take ownership?" + schema: + type: string + default: "OnRootMismatch" + enum: + - value: "OnRootMismatch" + description: "OnRootMismatch" + - value: "Always" + description: "Always" + - variable: resources group: "Resources and Devices" label: "Resource Limits" @@ -417,7 +457,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/k8s-gateway/values.yaml b/charts/stable/k8s-gateway/values.yaml index ca7300261e5..7a9f71c0742 100644 --- a/charts/stable/k8s-gateway/values.yaml +++ b/charts/stable/k8s-gateway/values.yaml @@ -5,12 +5,18 @@ image: pullPolicy: IfNotPresent tag: v0.1.8@sha256:4937e28bb5dc4bd9c700a72d28e50d43929b4a9e8f64b4a306346426e6ed01e2 +securityContext: + runAsNonRoot: false + +podSecurityContext: + runAsUser: 0 + runAsGroup: 0 + args: ["-conf", "/etc/coredns/Corefile"] # -- TTL for non-apex responses (in seconds) ttl: 300 - # -- Limit what kind of resources to watch, e.g. watchedResources: ["Ingress"] watchedResources: [] @@ -101,7 +107,6 @@ probes: successThreshold: 1 failureThreshold: 5 - startup: custom: true spec: diff --git a/charts/stable/kms/Chart.yaml b/charts/stable/kms/Chart.yaml index 5403aa93e16..397577e0cd9 100644 --- a/charts/stable/kms/Chart.yaml +++ b/charts/stable/kms/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "minimal" +appVersion: minimal dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.7 deprecated: false description: Private Windows Activation Server for development and testing home: https://github.com/truecharts/apps/tree/master/charts/stable/kms @@ -22,4 +22,4 @@ name: kms sources: - https://github.com/SystemRage/py-kms type: application -version: 7.0.2 +version: 8.0.0 diff --git a/charts/stable/kms/SCALE/questions.yaml b/charts/stable/kms/SCALE/questions.yaml index d3099f5d1b9..eb3d32c9d94 100644 --- a/charts/stable/kms/SCALE/questions.yaml +++ b/charts/stable/kms/SCALE/questions.yaml @@ -90,8 +90,6 @@ questions: default: "002" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -196,7 +194,6 @@ questions: max: 65535 default: 36011 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -270,7 +267,6 @@ questions: # Include{persistenceList} - # Include{ingressList} - variable: securityContext @@ -293,12 +289,58 @@ questions: label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: type: boolean default: false + + - variable: podSecurityContext + group: "Security and Permissions" + label: "Pod Security Context" + schema: + type: dict + attrs: + - variable: runAsUser + label: "runAsUser" + description: "The UserID of the user running the application" + schema: + type: int + default: 0 + - variable: runAsGroup + label: "runAsGroup" + description: The groupID this App of the user running the application" + schema: + type: int + default: 0 + - variable: fsGroup + label: "fsGroup" + description: "The group that should own ALL storage." + schema: + type: int + default: 568 + - variable: supplementalGroups + label: "supplemental Groups" + schema: + type: list + default: [] + items: + - variable: supplementalGroupsEntry + label: "supplemental Group" + schema: + type: int + - variable: fsGroupChangePolicy + label: "When should we take ownership?" + schema: + type: string + default: "OnRootMismatch" + enum: + - value: "OnRootMismatch" + description: "OnRootMismatch" + - value: "Always" + description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -340,7 +382,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/kms/values.yaml b/charts/stable/kms/values.yaml index 3649eac80cf..26f74fa9161 100644 --- a/charts/stable/kms/values.yaml +++ b/charts/stable/kms/values.yaml @@ -5,6 +5,14 @@ image: pullPolicy: IfNotPresent tag: minimal@sha256:f60edd7b3e7d59b5a2759584a3bf844cf41a3f1a1346186bb77409e0cb0a143c +securityContext: + readOnlyRootFilesystem: false + runAsNonRoot: false + +podSecurityContext: + runAsUser: 0 + runAsGroup: 0 + service: main: ports: diff --git a/charts/stable/komga/Chart.yaml b/charts/stable/komga/Chart.yaml index cc765bcc39d..1997e556889 100644 --- a/charts/stable/komga/Chart.yaml +++ b/charts/stable/komga/Chart.yaml @@ -3,7 +3,7 @@ appVersion: 0.128.2 dependencies: - name: common repository: https://truecharts.org - version: 7.0.14 + version: 8.0.7 description: A comics/mangas server to serve/stream pages via API home: https://github.com/truechartsapps/tree/master/charts/incubator/komga icon: https://komga.org/assets/media/logo.svg @@ -21,4 +21,4 @@ name: komga sources: - https://komga.org/ - https://github.com/gotson/komga -version: 2.0.5 +version: 3.0.0 diff --git a/charts/stable/komga/SCALE/questions.yaml b/charts/stable/komga/SCALE/questions.yaml index 6870ea90484..79d2d91d655 100644 --- a/charts/stable/komga/SCALE/questions.yaml +++ b/charts/stable/komga/SCALE/questions.yaml @@ -86,8 +86,6 @@ questions: default: "002" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -192,7 +190,6 @@ questions: max: 65535 default: 36065 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -651,8 +648,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext @@ -670,12 +665,12 @@ questions: label: "ReadOnly Root Filesystem" schema: type: boolean - default: false + default: true - variable: allowPrivilegeEscalation label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: @@ -726,6 +721,7 @@ questions: description: "OnRootMismatch" - value: "Always" description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -767,7 +763,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/komga/values.yaml b/charts/stable/komga/values.yaml index b9fdccfe548..4aed989412c 100644 --- a/charts/stable/komga/values.yaml +++ b/charts/stable/komga/values.yaml @@ -13,19 +13,6 @@ image: # -- image pull policy pullPolicy: IfNotPresent -securityContext: - privileged: false - readOnlyRootFilesystem: false - allowPrivilegeEscalation: true - runAsNonRoot: true - -podSecurityContext: - runAsUser: 568 - runAsGroup: 568 - fsGroup: 568 - supplementalGroups: [] - fsGroupChangePolicy: "OnRootMismatch" - # -- environment variables. See more environment variables in the [komga documentation](https://komga.org/installation/configuration.html#optional-configuration). # @default -- See below env: {} @@ -38,7 +25,6 @@ service: main: port: 8080 - # -- Configure persistence settings for the chart under this key. # @default -- See values.yaml persistence: diff --git a/charts/stable/lazylibrarian/Chart.yaml b/charts/stable/lazylibrarian/Chart.yaml index 9abf605a8ab..7f8e45e0f85 100644 --- a/charts/stable/lazylibrarian/Chart.yaml +++ b/charts/stable/lazylibrarian/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "latest" +appVersion: latest dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.7 deprecated: false description: Get all your books, like series with Sonarr... home: https://github.com/truecharts/apps/tree/master/charts/incubator/lazylibrarian @@ -24,4 +24,4 @@ sources: - https://gitlab.com/LazyLibrarian/LazyLibrarian.git - https://lazylibrarian.gitlab.io type: application -version: 7.0.4 +version: 8.0.0 diff --git a/charts/stable/lazylibrarian/SCALE/questions.yaml b/charts/stable/lazylibrarian/SCALE/questions.yaml index 388a7469106..e88a200b1b4 100644 --- a/charts/stable/lazylibrarian/SCALE/questions.yaml +++ b/charts/stable/lazylibrarian/SCALE/questions.yaml @@ -98,8 +98,6 @@ questions: default: "002" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -204,7 +202,6 @@ questions: max: 65535 default: 36033 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -554,8 +551,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext group: "Security and Permissions" @@ -572,17 +567,63 @@ questions: label: "ReadOnly Root Filesystem" schema: type: boolean - default: false + default: true - variable: allowPrivilegeEscalation label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: type: boolean default: false + + - variable: podSecurityContext + group: "Security and Permissions" + label: "Pod Security Context" + schema: + type: dict + attrs: + - variable: runAsUser + label: "runAsUser" + description: "The UserID of the user running the application" + schema: + type: int + default: 0 + - variable: runAsGroup + label: "runAsGroup" + description: The groupID this App of the user running the application" + schema: + type: int + default: 0 + - variable: fsGroup + label: "fsGroup" + description: "The group that should own ALL storage." + schema: + type: int + default: 568 + - variable: supplementalGroups + label: "supplemental Groups" + schema: + type: list + default: [] + items: + - variable: supplementalGroupsEntry + label: "supplemental Group" + schema: + type: int + - variable: fsGroupChangePolicy + label: "When should we take ownership?" + schema: + type: string + default: "OnRootMismatch" + enum: + - value: "OnRootMismatch" + description: "OnRootMismatch" + - value: "Always" + description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -624,7 +665,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/lazylibrarian/values.yaml b/charts/stable/lazylibrarian/values.yaml index ab1cf25ca07..73120ffa56e 100644 --- a/charts/stable/lazylibrarian/values.yaml +++ b/charts/stable/lazylibrarian/values.yaml @@ -5,6 +5,13 @@ image: pullPolicy: IfNotPresent tag: latest@sha256:148eb92d265fc31b3fcd39759ed65d608b7ffdf4ffac530ec1ba33aa1f717c2b +securityContext: + runAsNonRoot: false + +podSecurityContext: + runAsUser: 0 + runAsGroup: 0 + service: main: ports: diff --git a/charts/stable/librespeed/Chart.yaml b/charts/stable/librespeed/Chart.yaml index d4670242cc1..20d370a5ba9 100644 --- a/charts/stable/librespeed/Chart.yaml +++ b/charts/stable/librespeed/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "5.2.4" +appVersion: 5.2.4 dependencies: - name: common repository: https://truecharts.org - version: 7.0.14 + version: 8.0.7 description: Librespeed is a HTML5 webpage to test upload and download speeds home: https://github.com/truechartsapps/tree/master/charts/incubator/librespeed icon: https://github.com/librespeed/speedtest/blob/master/.logo/icon_huge.png?raw=true @@ -20,4 +20,4 @@ sources: - https://github.com/librespeed/speedtest - https://hub.docker.com/r/linuxserver/librespeed - https://github.com/truechartsapps/tree/master/charts/librespeed -version: 2.0.3 +version: 3.0.0 diff --git a/charts/stable/librespeed/SCALE/questions.yaml b/charts/stable/librespeed/SCALE/questions.yaml index a1a60a5dd0d..634791e215d 100644 --- a/charts/stable/librespeed/SCALE/questions.yaml +++ b/charts/stable/librespeed/SCALE/questions.yaml @@ -98,8 +98,6 @@ questions: default: "002" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -204,7 +202,6 @@ questions: max: 65535 default: 36066 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -553,8 +550,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext @@ -577,13 +572,58 @@ questions: label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: type: boolean default: false + - variable: podSecurityContext + group: "Security and Permissions" + label: "Pod Security Context" + schema: + type: dict + attrs: + - variable: runAsUser + label: "runAsUser" + description: "The UserID of the user running the application" + schema: + type: int + default: 0 + - variable: runAsGroup + label: "runAsGroup" + description: The groupID this App of the user running the application" + schema: + type: int + default: 0 + - variable: fsGroup + label: "fsGroup" + description: "The group that should own ALL storage." + schema: + type: int + default: 568 + - variable: supplementalGroups + label: "supplemental Groups" + schema: + type: list + default: [] + items: + - variable: supplementalGroupsEntry + label: "supplemental Group" + schema: + type: int + - variable: fsGroupChangePolicy + label: "When should we take ownership?" + schema: + type: string + default: "OnRootMismatch" + enum: + - value: "OnRootMismatch" + description: "OnRootMismatch" + - value: "Always" + description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -625,7 +665,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/librespeed/values.yaml b/charts/stable/librespeed/values.yaml index 814be720f30..ae292178ecb 100644 --- a/charts/stable/librespeed/values.yaml +++ b/charts/stable/librespeed/values.yaml @@ -13,6 +13,14 @@ image: # -- image pull policy pullPolicy: IfNotPresent +securityContext: + readOnlyRootFilesystem: false + runAsNonRoot: false + +podSecurityContext: + runAsUser: 0 + runAsGroup: 0 + # -- environment variables. See [image docs](https://hub.docker.com/r/linuxserver/librespeed) for more details. # @default -- See below env: diff --git a/charts/stable/lidarr/Chart.yaml b/charts/stable/lidarr/Chart.yaml index 016dbd13e36..eb8c9f4a63c 100644 --- a/charts/stable/lidarr/Chart.yaml +++ b/charts/stable/lidarr/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "1.0.0.2255" +appVersion: 1.0.0.2255 dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.7 deprecated: false description: Looks and smells like Sonarr but made for music home: https://github.com/truecharts/apps/tree/master/charts/stable/lidarr @@ -24,4 +24,4 @@ name: lidarr sources: - https://github.com/Lidarr/Lidarr type: application -version: 7.0.2 +version: 8.0.0 diff --git a/charts/stable/lidarr/SCALE/questions.yaml b/charts/stable/lidarr/SCALE/questions.yaml index b7d29968288..e16be57f0b9 100644 --- a/charts/stable/lidarr/SCALE/questions.yaml +++ b/charts/stable/lidarr/SCALE/questions.yaml @@ -86,8 +86,6 @@ questions: default: "002" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -192,7 +190,6 @@ questions: max: 65535 default: 36012 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -541,8 +538,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext @@ -565,7 +560,7 @@ questions: label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: @@ -616,6 +611,7 @@ questions: description: "OnRootMismatch" - value: "Always" description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -657,7 +653,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/lidarr/values.yaml b/charts/stable/lidarr/values.yaml index b7335765dcb..f306fe7ec90 100644 --- a/charts/stable/lidarr/values.yaml +++ b/charts/stable/lidarr/values.yaml @@ -6,17 +6,7 @@ image: tag: v1.0.0.2255@sha256:54ebc1f90963b16889e9e1b915eced4efd45ae489805aa996faf519430a4322f securityContext: - privileged: false readOnlyRootFilesystem: false - allowPrivilegeEscalation: true - runAsNonRoot: true - -podSecurityContext: - runAsUser: 568 - runAsGroup: 568 - fsGroup: 568 - supplementalGroups: [] - fsGroupChangePolicy: "OnRootMismatch" service: main: diff --git a/charts/stable/littlelink/Chart.yaml b/charts/stable/littlelink/Chart.yaml index d57537c150a..755262e745e 100644 --- a/charts/stable/littlelink/Chart.yaml +++ b/charts/stable/littlelink/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "latest" +appVersion: latest dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.7 deprecated: false description: Easy platform to combine all your social links home: https://github.com/truecharts/apps/tree/master/charts/stable/littlelink @@ -23,4 +23,4 @@ sources: - https://github.com/techno-tim/littlelink-server - https://github.com/sethcottle/littlelink type: application -version: 2.0.2 +version: 3.0.0 diff --git a/charts/stable/littlelink/SCALE/questions.yaml b/charts/stable/littlelink/SCALE/questions.yaml index 92ce8ad1e6a..d943d4b1cef 100644 --- a/charts/stable/littlelink/SCALE/questions.yaml +++ b/charts/stable/littlelink/SCALE/questions.yaml @@ -288,8 +288,6 @@ questions: type: string default: "" - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -394,7 +392,6 @@ questions: max: 65535 default: 36092 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -627,8 +624,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext group: "Security and Permissions" @@ -645,17 +640,62 @@ questions: label: "ReadOnly Root Filesystem" schema: type: boolean - default: false + default: true - variable: allowPrivilegeEscalation label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: type: boolean - default: false + default: true + - variable: podSecurityContext + group: "Security and Permissions" + label: "Pod Security Context" + schema: + type: dict + attrs: + - variable: runAsUser + label: "runAsUser" + description: "The UserID of the user running the application" + schema: + type: int + default: 568 + - variable: runAsGroup + label: "runAsGroup" + description: The groupID this App of the user running the application" + schema: + type: int + default: 568 + - variable: fsGroup + label: "fsGroup" + description: "The group that should own ALL storage." + schema: + type: int + default: 568 + - variable: supplementalGroups + label: "supplemental Groups" + schema: + type: list + default: [] + items: + - variable: supplementalGroupsEntry + label: "supplemental Group" + schema: + type: int + - variable: fsGroupChangePolicy + label: "When should we take ownership?" + schema: + type: string + default: "OnRootMismatch" + enum: + - value: "OnRootMismatch" + description: "OnRootMismatch" + - value: "Always" + description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -697,7 +737,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/littlelink/values.yaml b/charts/stable/littlelink/values.yaml index 30de3acd23c..1f3e3f069a2 100644 --- a/charts/stable/littlelink/values.yaml +++ b/charts/stable/littlelink/values.yaml @@ -5,7 +5,6 @@ image: pullPolicy: IfNotPresent tag: latest@sha256:10dafadbf081fe014799f028024ccb4da2ba566d0413c3d6ebce6fc051a9f3f3 - service: main: enabled: true diff --git a/charts/stable/lychee/Chart.yaml b/charts/stable/lychee/Chart.yaml index 2459a5406d8..243b3639dc7 100644 --- a/charts/stable/lychee/Chart.yaml +++ b/charts/stable/lychee/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "4.3.4" +appVersion: 4.3.4 dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.7 deprecated: false description: Lychee is a free photo-management tool, which runs on your server or web-space @@ -23,4 +23,4 @@ sources: - https://github.com/LycheeOrg/Lychee - https://hub.docker.com/r/lycheeorg/lychee type: application -version: 7.0.2 +version: 8.0.0 diff --git a/charts/stable/lychee/SCALE/questions.yaml b/charts/stable/lychee/SCALE/questions.yaml index 66b601483e0..acf0677fc87 100644 --- a/charts/stable/lychee/SCALE/questions.yaml +++ b/charts/stable/lychee/SCALE/questions.yaml @@ -98,8 +98,6 @@ questions: default: "002" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -204,7 +202,6 @@ questions: max: 65535 default: 36034 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -554,8 +551,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext group: "Security and Permissions" @@ -577,12 +572,58 @@ questions: label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: type: boolean default: false + + - variable: podSecurityContext + group: "Security and Permissions" + label: "Pod Security Context" + schema: + type: dict + attrs: + - variable: runAsUser + label: "runAsUser" + description: "The UserID of the user running the application" + schema: + type: int + default: 0 + - variable: runAsGroup + label: "runAsGroup" + description: The groupID this App of the user running the application" + schema: + type: int + default: 0 + - variable: fsGroup + label: "fsGroup" + description: "The group that should own ALL storage." + schema: + type: int + default: 568 + - variable: supplementalGroups + label: "supplemental Groups" + schema: + type: list + default: [] + items: + - variable: supplementalGroupsEntry + label: "supplemental Group" + schema: + type: int + - variable: fsGroupChangePolicy + label: "When should we take ownership?" + schema: + type: string + default: "OnRootMismatch" + enum: + - value: "OnRootMismatch" + description: "OnRootMismatch" + - value: "Always" + description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -624,7 +665,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/lychee/values.yaml b/charts/stable/lychee/values.yaml index ad13e9edd0f..4673c6ba798 100644 --- a/charts/stable/lychee/values.yaml +++ b/charts/stable/lychee/values.yaml @@ -5,6 +5,14 @@ image: pullPolicy: IfNotPresent tag: v4.3.4@sha256:b6ce78acde58c303b4c91d78d899317ee4de6a9c44343b263155497c1bcd762c +securityContext: + readOnlyRootFilesystem: false + runAsNonRoot: false + +podSecurityContext: + runAsUser: 0 + runAsGroup: 0 + service: main: ports: diff --git a/charts/stable/mealie/Chart.yaml b/charts/stable/mealie/Chart.yaml index 011276c84bd..41bd4585bd2 100644 --- a/charts/stable/mealie/Chart.yaml +++ b/charts/stable/mealie/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "0.5.2" +appVersion: 0.5.2 dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.7 description: Mealie is a self hosted recipe manager and meal planner with a RestAPI backend and a reactive frontend application built in Vue for a pleasant user experience for the whole family. @@ -19,4 +19,4 @@ maintainers: name: mealie sources: - https://github.com/hay-kot/mealie -version: 2.0.2 +version: 3.0.0 diff --git a/charts/stable/mealie/SCALE/questions.yaml b/charts/stable/mealie/SCALE/questions.yaml index 25f61fa961a..65fe6f53490 100644 --- a/charts/stable/mealie/SCALE/questions.yaml +++ b/charts/stable/mealie/SCALE/questions.yaml @@ -92,8 +92,6 @@ questions: default: "002" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -548,8 +546,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext @@ -572,13 +568,58 @@ questions: label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: type: boolean default: false + - variable: podSecurityContext + group: "Security and Permissions" + label: "Pod Security Context" + schema: + type: dict + attrs: + - variable: runAsUser + label: "runAsUser" + description: "The UserID of the user running the application" + schema: + type: int + default: 0 + - variable: runAsGroup + label: "runAsGroup" + description: The groupID this App of the user running the application" + schema: + type: int + default: 0 + - variable: fsGroup + label: "fsGroup" + description: "The group that should own ALL storage." + schema: + type: int + default: 568 + - variable: supplementalGroups + label: "supplemental Groups" + schema: + type: list + default: [] + items: + - variable: supplementalGroupsEntry + label: "supplemental Group" + schema: + type: int + - variable: fsGroupChangePolicy + label: "When should we take ownership?" + schema: + type: string + default: "OnRootMismatch" + enum: + - value: "OnRootMismatch" + description: "OnRootMismatch" + - value: "Always" + description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -620,7 +661,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/mealie/values.yaml b/charts/stable/mealie/values.yaml index 1ca5eee3001..fd85d71e465 100644 --- a/charts/stable/mealie/values.yaml +++ b/charts/stable/mealie/values.yaml @@ -13,6 +13,14 @@ image: # -- image pull policy pullPolicy: IfNotPresent +securityContext: + readOnlyRootFilesystem: false + runAsNonRoot: false + +podSecurityContext: + runAsUser: 0 + runAsGroup: 0 + # -- environment variables. See [image docs](https://hay-kot.github.io/mealie/getting-started/install/#env-variables) for more details. # @default -- See below env: diff --git a/charts/stable/mosquitto/Chart.yaml b/charts/stable/mosquitto/Chart.yaml index e4120c965d4..f451f6667ba 100644 --- a/charts/stable/mosquitto/Chart.yaml +++ b/charts/stable/mosquitto/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "2.0.12" +appVersion: 2.0.12 dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.7 deprecated: false description: Eclipse Mosquitto - An open source MQTT broker home: https://github.com/truecharts/apps/tree/master/charts/incubator/mosquitto @@ -21,4 +21,4 @@ name: mosquitto sources: - https://github.com/eclipse/mosquitto type: application -version: 2.0.2 +version: 3.0.0 diff --git a/charts/stable/mosquitto/SCALE/questions.yaml b/charts/stable/mosquitto/SCALE/questions.yaml index ff5cd0b5eda..9554461b729 100644 --- a/charts/stable/mosquitto/SCALE/questions.yaml +++ b/charts/stable/mosquitto/SCALE/questions.yaml @@ -98,8 +98,6 @@ questions: default: false # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -204,7 +202,6 @@ questions: max: 65535 default: 36068 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -663,8 +660,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext @@ -682,12 +677,12 @@ questions: label: "ReadOnly Root Filesystem" schema: type: boolean - default: false + default: true - variable: allowPrivilegeEscalation label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: @@ -738,6 +733,7 @@ questions: description: "OnRootMismatch" - value: "Always" description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -779,7 +775,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/mosquitto/values.yaml b/charts/stable/mosquitto/values.yaml index 032c099da8a..892d8387edf 100644 --- a/charts/stable/mosquitto/values.yaml +++ b/charts/stable/mosquitto/values.yaml @@ -8,19 +8,6 @@ image: # -- image pull policy pullPolicy: IfNotPresent -securityContext: - privileged: false - readOnlyRootFilesystem: false - allowPrivilegeEscalation: true - runAsNonRoot: true - -podSecurityContext: - runAsUser: 568 - runAsGroup: 568 - fsGroup: 568 - supplementalGroups: [] - fsGroupChangePolicy: "OnRootMismatch" - # -- Configures service settings for the chart. Normally this does not need to be modified. # @default -- See values.yaml service: diff --git a/charts/stable/mylar/Chart.yaml b/charts/stable/mylar/Chart.yaml index e857325a034..e3d63a07da1 100644 --- a/charts/stable/mylar/Chart.yaml +++ b/charts/stable/mylar/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "0.5.3" +appVersion: 0.5.3 dependencies: - name: common repository: https://truecharts.org - version: 7.0.14 + version: 8.0.7 description: Mylar is the automated Comic Book downloader (cbr/cbz) for use with various download clients. home: https://github.com/truechartsapps/tree/master/charts/incubator/mylar @@ -19,4 +19,4 @@ sources: - https://github.com/mylar3/mylar3 - https://github.com/linuxserver/docker-mylar3 - https://github.com/truechartsapps/tree/master/charts/mylar -version: 2.0.2 +version: 3.0.0 diff --git a/charts/stable/mylar/SCALE/questions.yaml b/charts/stable/mylar/SCALE/questions.yaml index 5a3ad9bfb69..45049616deb 100644 --- a/charts/stable/mylar/SCALE/questions.yaml +++ b/charts/stable/mylar/SCALE/questions.yaml @@ -98,8 +98,6 @@ questions: default: "002" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -204,7 +202,6 @@ questions: max: 65535 default: 36069 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -553,8 +550,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext @@ -572,12 +567,12 @@ questions: label: "ReadOnly Root Filesystem" schema: type: boolean - default: false + default: true - variable: allowPrivilegeEscalation label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: @@ -607,7 +602,7 @@ questions: description: "The group that should own ALL storage." schema: type: int - default: 0 + default: 568 - variable: supplementalGroups label: "supplemental Groups" schema: @@ -628,6 +623,7 @@ questions: description: "OnRootMismatch" - value: "Always" description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -669,7 +665,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/mylar/values.yaml b/charts/stable/mylar/values.yaml index 13b995344df..459032d7a19 100644 --- a/charts/stable/mylar/values.yaml +++ b/charts/stable/mylar/values.yaml @@ -14,17 +14,11 @@ image: pullPolicy: IfNotPresent securityContext: - privileged: false - readOnlyRootFilesystem: false - allowPrivilegeEscalation: true runAsNonRoot: false podSecurityContext: runAsUser: 0 runAsGroup: 0 - fsGroup: 0 - supplementalGroups: [] - fsGroupChangePolicy: "OnRootMismatch" # -- environment variables. See [image docs](https://docs.linuxserver.io/images/docker-mylar3#environment-variables-e) for more details. # @default -- See below @@ -44,7 +38,6 @@ service: main: port: 8090 - # -- Configure persistence settings for the chart under this key. # @default -- See values.yaml persistence: diff --git a/charts/stable/navidrome/Chart.yaml b/charts/stable/navidrome/Chart.yaml index 9abf10fce25..8b9a93a435e 100644 --- a/charts/stable/navidrome/Chart.yaml +++ b/charts/stable/navidrome/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "0.45.1" +appVersion: 0.45.1 dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.7 deprecated: false description: Navidrome is an open source web-based music collection server and streamer home: https://github.com/truecharts/apps/tree/master/charts/incubator/navidrome @@ -22,4 +22,4 @@ sources: - https://github.com/deluan/navidrome - https://hub.docker.com/r/deluan/navidrome type: application -version: 7.0.2 +version: 8.0.0 diff --git a/charts/stable/navidrome/SCALE/questions.yaml b/charts/stable/navidrome/SCALE/questions.yaml index 24c2431d434..1cbb4f2eb9f 100644 --- a/charts/stable/navidrome/SCALE/questions.yaml +++ b/charts/stable/navidrome/SCALE/questions.yaml @@ -86,8 +86,6 @@ questions: default: "002" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -192,7 +190,6 @@ questions: max: 65535 default: 36027 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -542,8 +539,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext @@ -561,12 +556,12 @@ questions: label: "ReadOnly Root Filesystem" schema: type: boolean - default: false + default: true - variable: allowPrivilegeEscalation label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: @@ -617,6 +612,7 @@ questions: description: "OnRootMismatch" - value: "Always" description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -658,7 +654,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/navidrome/values.yaml b/charts/stable/navidrome/values.yaml index 62679d2949a..b1e5b563bdc 100644 --- a/charts/stable/navidrome/values.yaml +++ b/charts/stable/navidrome/values.yaml @@ -5,19 +5,6 @@ image: pullPolicy: IfNotPresent tag: v0.45.1@sha256:2600dc55b2ac7ae31d5c3a657e731a4fde56d76903a6b6e4fb0cfc7007091a0e -securityContext: - privileged: false - readOnlyRootFilesystem: false - allowPrivilegeEscalation: true - runAsNonRoot: true - -podSecurityContext: - runAsUser: 568 - runAsGroup: 568 - fsGroup: 568 - supplementalGroups: [] - fsGroupChangePolicy: "OnRootMismatch" - service: main: ports: diff --git a/charts/stable/nextcloud/Chart.yaml b/charts/stable/nextcloud/Chart.yaml index e709aa76952..64b5bf9bd8f 100644 --- a/charts/stable/nextcloud/Chart.yaml +++ b/charts/stable/nextcloud/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "22.1.1" +appVersion: 22.1.1 dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.7 - condition: postgresql.enabled name: postgresql repository: https://truecharts.org/ @@ -33,4 +33,4 @@ sources: - https://github.com/nextcloud/docker - https://github.com/nextcloud/helm type: application -version: 5.0.6 +version: 6.0.0 diff --git a/charts/stable/nextcloud/SCALE/questions.yaml b/charts/stable/nextcloud/SCALE/questions.yaml index e61cc495e4c..0fc161ead3a 100644 --- a/charts/stable/nextcloud/SCALE/questions.yaml +++ b/charts/stable/nextcloud/SCALE/questions.yaml @@ -113,11 +113,8 @@ questions: $ref: - "definitions/nodeIP" - # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -587,18 +584,68 @@ questions: type: string # Include{ingressList} + + - variable: securityContext + group: "Security and Permissions" + label: "Security Context" + schema: + type: dict + attrs: + - variable: privileged + label: "Privileged mode" + schema: + type: boolean + default: false + - variable: readOnlyRootFilesystem + label: "ReadOnly Root Filesystem" + schema: + type: boolean + default: false + - variable: allowPrivilegeEscalation + label: "Allow Privilege Escalation" + schema: + type: boolean + default: false + - variable: runAsNonRoot + label: "runAsNonRoot" + schema: + type: boolean + default: false + - variable: podSecurityContext group: "Security and Permissions" label: "Pod Security Context" schema: type: dict attrs: + - variable: runAsUser + label: "runAsUser" + description: "The UserID of the user running the application" + schema: + type: int + default: 0 + - variable: runAsGroup + label: "runAsGroup" + description: The groupID this App of the user running the application" + schema: + type: int + default: 0 - variable: fsGroup label: "fsGroup" description: "The group that should own ALL storage." schema: type: int default: 33 + - variable: supplementalGroups + label: "supplemental Groups" + schema: + type: list + default: [] + items: + - variable: supplementalGroupsEntry + label: "supplemental Group" + schema: + type: int - variable: fsGroupChangePolicy label: "When should we take ownership?" schema: @@ -609,6 +656,7 @@ questions: description: "OnRootMismatch" - value: "Always" description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -650,8 +698,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/nextcloud/values.yaml b/charts/stable/nextcloud/values.yaml index 4c86b21d2dd..6318847c1b6 100644 --- a/charts/stable/nextcloud/values.yaml +++ b/charts/stable/nextcloud/values.yaml @@ -5,12 +5,14 @@ image: pullPolicy: IfNotPresent tag: 22.1.1@sha256:99d94124b2024c9f7f38dc12144a92bc0d68d110bcfd374169ebb7e8df0adf8e +securityContext: + readOnlyRootFilesystem: false + runAsNonRoot: false + podSecurityContext: runAsUser: 0 runAsGroup: 0 fsGroup: 33 - supplementalGroups: [] - fsGroupChangePolicy: "OnRootMismatch" postgresqlImage: repository: bitnami/postgresql @@ -148,7 +150,6 @@ probes: timeoutSeconds: 2 failureThreshold: 5 - ## Cronjob to execute Nextcloud background tasks ## ref: https://docs.nextcloud.com/server/latest/admin_manual/configuration_server/background_jobs_configuration.html#webcron ## diff --git a/charts/stable/node-red/Chart.yaml b/charts/stable/node-red/Chart.yaml index 9976ae0803d..c661a6a91df 100644 --- a/charts/stable/node-red/Chart.yaml +++ b/charts/stable/node-red/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "2.0.6" +appVersion: 2.0.6 dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.7 deprecated: false description: Node-RED is low-code programming for event-driven applications home: https://github.com/truecharts/apps/tree/master/charts/incubator/node-red @@ -20,4 +20,4 @@ name: node-red sources: - https://github.com/node-red/node-red-docker type: application -version: 7.0.2 +version: 8.0.0 diff --git a/charts/stable/node-red/SCALE/questions.yaml b/charts/stable/node-red/SCALE/questions.yaml index eb6b1849d7b..26fec138ab2 100644 --- a/charts/stable/node-red/SCALE/questions.yaml +++ b/charts/stable/node-red/SCALE/questions.yaml @@ -86,8 +86,6 @@ questions: default: "002" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -192,7 +190,6 @@ questions: max: 65535 default: 36028 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -542,8 +539,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext @@ -561,12 +556,12 @@ questions: label: "ReadOnly Root Filesystem" schema: type: boolean - default: false + default: true - variable: allowPrivilegeEscalation label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: @@ -617,6 +612,7 @@ questions: description: "OnRootMismatch" - value: "Always" description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -658,7 +654,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/node-red/values.yaml b/charts/stable/node-red/values.yaml index d0a491f0ef2..0f9c061d7c3 100644 --- a/charts/stable/node-red/values.yaml +++ b/charts/stable/node-red/values.yaml @@ -5,19 +5,6 @@ image: pullPolicy: IfNotPresent tag: v2.0.6@sha256:b772bf702782d81b124453477846b15ddef0253c67ac6135a8c3d96128d9f9a3 -securityContext: - privileged: false - readOnlyRootFilesystem: false - allowPrivilegeEscalation: true - runAsNonRoot: true - -podSecurityContext: - runAsUser: 568 - runAsGroup: 568 - fsGroup: 568 - supplementalGroups: [] - fsGroupChangePolicy: "OnRootMismatch" - # See more environment varaibles in the node-red documentation # https://nodered.org/docs/getting-started/docker env: {} diff --git a/charts/stable/nullserv/Chart.yaml b/charts/stable/nullserv/Chart.yaml index e41534a1d8f..57576769a5d 100644 --- a/charts/stable/nullserv/Chart.yaml +++ b/charts/stable/nullserv/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "1.3.0" +appVersion: 1.3.0 dependencies: - name: common repository: https://truecharts.org - version: 7.0.14 + version: 8.0.7 description: A simple null file http and https server home: https://github.com/truechartsapps/tree/master/charts/incubator/nullserv icon: https://miro.medium.com/max/800/1*UL9RWkTUtJlyHW7kGm20hQ.png @@ -17,4 +17,4 @@ maintainers: name: nullserv sources: - https://github.com/bmrzycki/nullserv -version: 2.0.2 +version: 3.0.0 diff --git a/charts/stable/nullserv/SCALE/questions.yaml b/charts/stable/nullserv/SCALE/questions.yaml index 5bcad8fb58e..271f54ca75a 100644 --- a/charts/stable/nullserv/SCALE/questions.yaml +++ b/charts/stable/nullserv/SCALE/questions.yaml @@ -86,8 +86,6 @@ questions: default: "002" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -295,7 +293,6 @@ questions: max: 65535 default: 36070 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -644,8 +641,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext @@ -663,12 +658,12 @@ questions: label: "ReadOnly Root Filesystem" schema: type: boolean - default: false + default: true - variable: allowPrivilegeEscalation label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: @@ -698,7 +693,7 @@ questions: description: "The group that should own ALL storage." schema: type: int - default: 0 + default: 568 - variable: supplementalGroups label: "supplemental Groups" schema: @@ -719,6 +714,7 @@ questions: description: "OnRootMismatch" - value: "Always" description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -760,7 +756,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/nullserv/values.yaml b/charts/stable/nullserv/values.yaml index abab4e40909..3b68968d6a4 100644 --- a/charts/stable/nullserv/values.yaml +++ b/charts/stable/nullserv/values.yaml @@ -18,17 +18,11 @@ image: pullPolicy: IfNotPresent securityContext: - privileged: false - readOnlyRootFilesystem: false - allowPrivilegeEscalation: true runAsNonRoot: false podSecurityContext: runAsUser: 0 runAsGroup: 0 - fsGroup: 0 - supplementalGroups: [] - fsGroupChangePolicy: "OnRootMismatch" # -- environment variables. See more environment variables in the [nullserv documentation](https://github.com/bmrzycki/nullserv/blob/master/README.md). # @default -- See below @@ -49,7 +43,6 @@ service: enabled: true port: 443 - # -- Configures the probes for the main Pod. # @default -- See values.yaml probes: diff --git a/charts/stable/nzbget/Chart.yaml b/charts/stable/nzbget/Chart.yaml index 38fb853a965..fed8e112de1 100644 --- a/charts/stable/nzbget/Chart.yaml +++ b/charts/stable/nzbget/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "21.1" +appVersion: '21.1' dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.7 deprecated: false description: NZBGet is a Usenet downloader client home: https://github.com/truecharts/apps/tree/master/charts/incubator/nzbget @@ -20,4 +20,4 @@ name: nzbget sources: - https://nzbget.net/ type: application -version: 7.0.2 +version: 8.0.0 diff --git a/charts/stable/nzbget/SCALE/questions.yaml b/charts/stable/nzbget/SCALE/questions.yaml index 1f2a10275c9..c786d99a127 100644 --- a/charts/stable/nzbget/SCALE/questions.yaml +++ b/charts/stable/nzbget/SCALE/questions.yaml @@ -86,8 +86,6 @@ questions: default: "002" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -192,7 +190,6 @@ questions: max: 65535 default: 36021 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -542,8 +539,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext @@ -561,12 +556,12 @@ questions: label: "ReadOnly Root Filesystem" schema: type: boolean - default: false + default: true - variable: allowPrivilegeEscalation label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: @@ -617,6 +612,7 @@ questions: description: "OnRootMismatch" - value: "Always" description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -658,7 +654,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/nzbget/values.yaml b/charts/stable/nzbget/values.yaml index a5f2eba71cd..03e2189b52d 100644 --- a/charts/stable/nzbget/values.yaml +++ b/charts/stable/nzbget/values.yaml @@ -5,19 +5,6 @@ image: pullPolicy: IfNotPresent tag: v21.1@sha256:258c97cb99fea70b236b2f509bdb9bcad1a74658bdba441200d5e13c46c1437c -securityContext: - privileged: false - readOnlyRootFilesystem: false - allowPrivilegeEscalation: true - runAsNonRoot: true - -podSecurityContext: - runAsUser: 568 - runAsGroup: 568 - fsGroup: 568 - supplementalGroups: [] - fsGroupChangePolicy: "OnRootMismatch" - service: main: ports: diff --git a/charts/stable/nzbhydra/Chart.yaml b/charts/stable/nzbhydra/Chart.yaml index b42e63270d3..4c7955fa954 100644 --- a/charts/stable/nzbhydra/Chart.yaml +++ b/charts/stable/nzbhydra/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "3.15.2" +appVersion: 3.15.2 dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.6 deprecated: true description: Usenet meta search home: https://github.com/truecharts/apps/tree/master/charts/incubator/nzbhydra @@ -17,4 +17,4 @@ name: nzbhydra sources: - https://github.com/theotherp/nzbhydra2 type: application -version: 7.0.2 +version: 8.0.0 diff --git a/charts/stable/nzbhydra/SCALE/questions.yaml b/charts/stable/nzbhydra/SCALE/questions.yaml index ab3853fcaca..354b34281cd 100644 --- a/charts/stable/nzbhydra/SCALE/questions.yaml +++ b/charts/stable/nzbhydra/SCALE/questions.yaml @@ -86,8 +86,6 @@ questions: default: "002" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -192,7 +190,6 @@ questions: max: 65535 default: 36041 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -542,8 +539,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext @@ -566,7 +561,7 @@ questions: label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: @@ -617,6 +612,7 @@ questions: description: "OnRootMismatch" - value: "Always" description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -658,7 +654,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/nzbhydra/values.yaml b/charts/stable/nzbhydra/values.yaml index 1421628bdb2..aedbb9f0b18 100644 --- a/charts/stable/nzbhydra/values.yaml +++ b/charts/stable/nzbhydra/values.yaml @@ -6,17 +6,7 @@ image: tag: v3.15.2@sha256:3bad273e062a950fbc1ac8ab40f00c39efcb16f30abf5db7b5d2086777384362 securityContext: - privileged: false readOnlyRootFilesystem: false - allowPrivilegeEscalation: true - runAsNonRoot: true - -podSecurityContext: - runAsUser: 568 - runAsGroup: 568 - fsGroup: 568 - supplementalGroups: [] - fsGroupChangePolicy: "OnRootMismatch" service: main: @@ -64,7 +54,6 @@ probes: periodSeconds: 10 timeoutSeconds: 10 - persistence: config: enabled: true diff --git a/charts/stable/octoprint/Chart.yaml b/charts/stable/octoprint/Chart.yaml index 9933534907d..269f6916c69 100644 --- a/charts/stable/octoprint/Chart.yaml +++ b/charts/stable/octoprint/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "1.6.1" +appVersion: 1.6.1 dependencies: - name: common repository: https://truecharts.org - version: 7.0.14 + version: 8.0.7 description: OctoPrint is the snappy web interface for your 3D printer home: https://github.com/truechartsapps/tree/master/charts/incubator/octoprint icon: https://avatars3.githubusercontent.com/u/5982294?s=400&v=4 @@ -20,4 +20,4 @@ name: octoprint sources: - https://github.com/OctoPrint/OctoPrint - https://hub.docker.com/r/octoprint/octoprint -version: 2.0.2 +version: 3.0.0 diff --git a/charts/stable/octoprint/SCALE/questions.yaml b/charts/stable/octoprint/SCALE/questions.yaml index 78237e9080a..50d5eb93096 100644 --- a/charts/stable/octoprint/SCALE/questions.yaml +++ b/charts/stable/octoprint/SCALE/questions.yaml @@ -104,8 +104,6 @@ questions: default: "" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -210,7 +208,6 @@ questions: max: 65535 default: 36071 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -559,8 +556,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext @@ -578,18 +573,63 @@ questions: label: "ReadOnly Root Filesystem" schema: type: boolean - default: false + default: true - variable: allowPrivilegeEscalation label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: type: boolean default: false + - variable: podSecurityContext + group: "Security and Permissions" + label: "Pod Security Context" + schema: + type: dict + attrs: + - variable: runAsUser + label: "runAsUser" + description: "The UserID of the user running the application" + schema: + type: int + default: 0 + - variable: runAsGroup + label: "runAsGroup" + description: The groupID this App of the user running the application" + schema: + type: int + default: 0 + - variable: fsGroup + label: "fsGroup" + description: "The group that should own ALL storage." + schema: + type: int + default: 568 + - variable: supplementalGroups + label: "supplemental Groups" + schema: + type: list + default: [] + items: + - variable: supplementalGroupsEntry + label: "supplemental Group" + schema: + type: int + - variable: fsGroupChangePolicy + label: "When should we take ownership?" + schema: + type: string + default: "OnRootMismatch" + enum: + - value: "OnRootMismatch" + description: "OnRootMismatch" + - value: "Always" + description: "Always" + - variable: deviceList label: "Mount USB devices" group: "Resources and Devices" @@ -672,7 +712,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/octoprint/values.yaml b/charts/stable/octoprint/values.yaml index 5639ec271c0..5d9c24e7dd1 100644 --- a/charts/stable/octoprint/values.yaml +++ b/charts/stable/octoprint/values.yaml @@ -13,6 +13,13 @@ image: # -- image pull policy pullPolicy: IfNotPresent +securityContext: + runAsNonRoot: false + +podSecurityContext: + runAsUser: 0 + runAsGroup: 0 + # -- environment variables. # @default -- See below env: @@ -34,11 +41,6 @@ service: main: port: 80 - -securityContext: - # -- (bool) Privileged securityContext may be required if USB devics are accessed directly through the host machine - privileged: true - # -- Configure persistence settings for the chart under this key. # @default -- See values.yaml persistence: diff --git a/charts/stable/omada-controller/Chart.yaml b/charts/stable/omada-controller/Chart.yaml index 6a6bd6af862..76a06fa0687 100644 --- a/charts/stable/omada-controller/Chart.yaml +++ b/charts/stable/omada-controller/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "4.4" +appVersion: '4.4' dependencies: - name: common repository: https://truecharts.org - version: 7.0.14 + version: 8.0.7 description: Omada enables the network administrators to monitor and manage all the Omada products in the network with a centralized management platform. home: https://github.com/truechartsapps/tree/master/charts/incubator/omada-controller @@ -19,4 +19,4 @@ name: omada-controller sources: - https://github.com/mbentley/docker-omada-controller - https://github.com/truechartsapps/tree/master/charts/omada-controller -version: 2.0.4 +version: 3.0.0 diff --git a/charts/stable/omada-controller/SCALE/questions.yaml b/charts/stable/omada-controller/SCALE/questions.yaml index 9a3c88023ce..09929fd866d 100644 --- a/charts/stable/omada-controller/SCALE/questions.yaml +++ b/charts/stable/omada-controller/SCALE/questions.yaml @@ -86,8 +86,6 @@ questions: default: "002" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -192,7 +190,6 @@ questions: max: 65535 default: 36072 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -541,8 +538,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext @@ -565,7 +560,7 @@ questions: label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: @@ -595,7 +590,7 @@ questions: description: "The group that should own ALL storage." schema: type: int - default: 0 + default: 568 - variable: supplementalGroups label: "supplemental Groups" schema: @@ -616,6 +611,7 @@ questions: description: "OnRootMismatch" - value: "Always" description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -657,7 +653,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/omada-controller/values.yaml b/charts/stable/omada-controller/values.yaml index 6795e95ccef..22d2e21bbf4 100644 --- a/charts/stable/omada-controller/values.yaml +++ b/charts/stable/omada-controller/values.yaml @@ -14,17 +14,12 @@ image: pullPolicy: IfNotPresent securityContext: - privileged: false readOnlyRootFilesystem: false - allowPrivilegeEscalation: true runAsNonRoot: false podSecurityContext: runAsUser: 0 runAsGroup: 0 - fsGroup: 0 - supplementalGroups: [] - fsGroupChangePolicy: "OnRootMismatch" # -- environment variables. See [image docs](https://github.com/mbentley/docker-omada-controller) for more details. # @default -- See below @@ -40,7 +35,6 @@ service: main: port: 8043 - # -- Configure persistence settings for the chart under this key. # @default -- See values.yaml persistence: diff --git a/charts/stable/ombi/Chart.yaml b/charts/stable/ombi/Chart.yaml index 95da5eb9246..66ebaf69e51 100644 --- a/charts/stable/ombi/Chart.yaml +++ b/charts/stable/ombi/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "4.0.1482" +appVersion: 4.0.1482 dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.7 deprecated: false description: Want a Movie or TV Show on Plex or Emby? Use Ombi! home: https://github.com/truecharts/apps/tree/master/charts/stable/ombi @@ -27,4 +27,4 @@ name: ombi sources: - https://github.com/tidusjar/Ombi type: application -version: 7.0.2 +version: 8.0.0 diff --git a/charts/stable/ombi/SCALE/questions.yaml b/charts/stable/ombi/SCALE/questions.yaml index 2d906fb813f..32e7ce023f6 100644 --- a/charts/stable/ombi/SCALE/questions.yaml +++ b/charts/stable/ombi/SCALE/questions.yaml @@ -86,8 +86,6 @@ questions: default: "002" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -192,7 +190,6 @@ questions: max: 65535 default: 36013 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -541,8 +538,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext @@ -565,7 +560,7 @@ questions: label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: @@ -616,6 +611,7 @@ questions: description: "OnRootMismatch" - value: "Always" description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -657,7 +653,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/ombi/values.yaml b/charts/stable/ombi/values.yaml index dc610822d60..71d2371ce43 100644 --- a/charts/stable/ombi/values.yaml +++ b/charts/stable/ombi/values.yaml @@ -6,17 +6,7 @@ image: tag: v4.0.1482@sha256:0fa4e81029d9adef9d773ce99db13ff3039fd087d58d7266cbcfd7462e7afc56 securityContext: - privileged: false readOnlyRootFilesystem: false - allowPrivilegeEscalation: true - runAsNonRoot: true - -podSecurityContext: - runAsUser: 568 - runAsGroup: 568 - fsGroup: 568 - supplementalGroups: [] - fsGroupChangePolicy: "OnRootMismatch" service: main: @@ -37,7 +27,6 @@ persistence: accessMode: ReadWriteOnce size: "100Gi" - # Enabled mariadb # ... for more options see https://github.com/bitnami/charts/tree/master/bitnami/mariadb mariadb: diff --git a/charts/stable/openldap/Chart.yaml b/charts/stable/openldap/Chart.yaml index 3c2a57d5fc4..9f65d2e61a7 100644 --- a/charts/stable/openldap/Chart.yaml +++ b/charts/stable/openldap/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "1.5.0" +appVersion: 1.5.0 dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.7 deprecated: false description: Community developed LDAP software home: https://www.openldap.org @@ -26,4 +26,4 @@ sources: - https://github.com/jp-gouin/helm-openldap - https://github.com/osixia/docker-openldap type: application -version: 2.0.2 +version: 3.0.0 diff --git a/charts/stable/openldap/SCALE/ix_values.yaml b/charts/stable/openldap/SCALE/ix_values.yaml index c453aaf7582..0529ffbe896 100644 --- a/charts/stable/openldap/SCALE/ix_values.yaml +++ b/charts/stable/openldap/SCALE/ix_values.yaml @@ -43,6 +43,10 @@ replication: starttls: "critical" tls_reqcert: "never" +persistence: + varrun: + enabled: false + ## # Most other defaults are set in questions.yaml diff --git a/charts/stable/openldap/SCALE/questions.yaml b/charts/stable/openldap/SCALE/questions.yaml index 8fb0667be07..20311d8e561 100644 --- a/charts/stable/openldap/SCALE/questions.yaml +++ b/charts/stable/openldap/SCALE/questions.yaml @@ -206,8 +206,6 @@ questions: # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -409,7 +407,6 @@ questions: max: 65535 default: 36100 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -724,12 +721,57 @@ questions: label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: type: boolean default: false + + - variable: podSecurityContext + group: "Security and Permissions" + label: "Pod Security Context" + schema: + type: dict + attrs: + - variable: runAsUser + label: "runAsUser" + description: "The UserID of the user running the application" + schema: + type: int + default: 0 + - variable: runAsGroup + label: "runAsGroup" + description: The groupID this App of the user running the application" + schema: + type: int + default: 0 + - variable: fsGroup + label: "fsGroup" + description: "The group that should own ALL storage." + schema: + type: int + default: 568 + - variable: supplementalGroups + label: "supplemental Groups" + schema: + type: list + default: [] + items: + - variable: supplementalGroupsEntry + label: "supplemental Group" + schema: + type: int + - variable: fsGroupChangePolicy + label: "When should we take ownership?" + schema: + type: string + default: "OnRootMismatch" + enum: + - value: "OnRootMismatch" + description: "OnRootMismatch" + - value: "Always" + description: "Always" - variable: resources group: "Resources and Devices" label: "" @@ -771,7 +813,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/openldap/values.yaml b/charts/stable/openldap/values.yaml index afe34a120cd..a300a4e7e87 100644 --- a/charts/stable/openldap/values.yaml +++ b/charts/stable/openldap/values.yaml @@ -5,6 +5,14 @@ image: pullPolicy: IfNotPresent tag: v1.5.0@sha256:fd870eecad0a5a5097ec7377a4441aa77171b4e10d8336f63698144dc3a51a4b +securityContext: + readOnlyRootFilesystem: false + runAsNonRoot: false + +podSecurityContext: + runAsUser: 0 + runAsGroup: 0 + controller: # -- Set the controller type. # Valid options are deployment, daemonset or statefulset @@ -26,6 +34,10 @@ controller: # -- ReplicaSet revision history limit revisionHistoryLimit: 3 +persistence: + varrun: + enabled: false + service: main: ports: diff --git a/charts/stable/organizr/Chart.yaml b/charts/stable/organizr/Chart.yaml index 7cf7c566b2c..236463bd9de 100644 --- a/charts/stable/organizr/Chart.yaml +++ b/charts/stable/organizr/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "latest" +appVersion: latest dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.7 deprecated: false description: HTPC/Homelab Services Organizer home: https://github.com/truecharts/apps/tree/master/charts/incubator/organizr @@ -20,4 +20,4 @@ sources: - https://github.com/causefx/Organizr - https://hub.docker.com/r/organizr/organizr type: application -version: 7.0.2 +version: 8.0.0 diff --git a/charts/stable/organizr/SCALE/questions.yaml b/charts/stable/organizr/SCALE/questions.yaml index 5eb03c11759..fdf495bb9fa 100644 --- a/charts/stable/organizr/SCALE/questions.yaml +++ b/charts/stable/organizr/SCALE/questions.yaml @@ -98,8 +98,6 @@ questions: default: "002" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -204,7 +202,6 @@ questions: max: 65535 default: 36046 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -664,8 +661,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext group: "Security and Permissions" @@ -687,12 +682,58 @@ questions: label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: type: boolean default: false + + - variable: podSecurityContext + group: "Security and Permissions" + label: "Pod Security Context" + schema: + type: dict + attrs: + - variable: runAsUser + label: "runAsUser" + description: "The UserID of the user running the application" + schema: + type: int + default: 0 + - variable: runAsGroup + label: "runAsGroup" + description: The groupID this App of the user running the application" + schema: + type: int + default: 0 + - variable: fsGroup + label: "fsGroup" + description: "The group that should own ALL storage." + schema: + type: int + default: 568 + - variable: supplementalGroups + label: "supplemental Groups" + schema: + type: list + default: [] + items: + - variable: supplementalGroupsEntry + label: "supplemental Group" + schema: + type: int + - variable: fsGroupChangePolicy + label: "When should we take ownership?" + schema: + type: string + default: "OnRootMismatch" + enum: + - value: "OnRootMismatch" + description: "OnRootMismatch" + - value: "Always" + description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -734,7 +775,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/organizr/values.yaml b/charts/stable/organizr/values.yaml index ce3ea105c74..33c86d054f8 100644 --- a/charts/stable/organizr/values.yaml +++ b/charts/stable/organizr/values.yaml @@ -5,6 +5,14 @@ image: pullPolicy: Always tag: latest@sha256:009e291af3b3fc1e071757e94cdfd66557136945360ac8e041632e5f1e60615c +securityContext: + readOnlyRootFilesystem: false + runAsNonRoot: false + +podSecurityContext: + runAsUser: 0 + runAsGroup: 0 + service: main: ports: diff --git a/charts/stable/oscam/Chart.yaml b/charts/stable/oscam/Chart.yaml index 3f85b79bc0f..9354bb8a65d 100644 --- a/charts/stable/oscam/Chart.yaml +++ b/charts/stable/oscam/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "11693" +appVersion: '11693' dependencies: - name: common repository: https://truecharts.org - version: 7.0.14 + version: 8.0.7 deprecated: false description: Open Source Conditional Access Module software home: https://github.com/truecharts/apps/tree/master/charts/stable/oscam @@ -19,4 +19,4 @@ name: oscam sources: - https://trac.streamboard.tv/oscam/browser/trunk type: application -version: 2.0.2 +version: 3.0.0 diff --git a/charts/stable/oscam/SCALE/questions.yaml b/charts/stable/oscam/SCALE/questions.yaml index 4d4b302b593..d58d3e6d49e 100644 --- a/charts/stable/oscam/SCALE/questions.yaml +++ b/charts/stable/oscam/SCALE/questions.yaml @@ -565,18 +565,63 @@ questions: label: "ReadOnly Root Filesystem" schema: type: boolean - default: false + default: true - variable: allowPrivilegeEscalation label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: type: boolean default: false + - variable: podSecurityContext + group: "Security and Permissions" + label: "Pod Security Context" + schema: + type: dict + attrs: + - variable: runAsUser + label: "runAsUser" + description: "The UserID of the user running the application" + schema: + type: int + default: 0 + - variable: runAsGroup + label: "runAsGroup" + description: The groupID this App of the user running the application" + schema: + type: int + default: 0 + - variable: fsGroup + label: "fsGroup" + description: "The group that should own ALL storage." + schema: + type: int + default: 568 + - variable: supplementalGroups + label: "supplemental Groups" + schema: + type: list + default: [] + items: + - variable: supplementalGroupsEntry + label: "supplemental Group" + schema: + type: int + - variable: fsGroupChangePolicy + label: "When should we take ownership?" + schema: + type: string + default: "OnRootMismatch" + enum: + - value: "OnRootMismatch" + description: "OnRootMismatch" + - value: "Always" + description: "Always" + - variable: resources group: "Resources and Devices" label: "" diff --git a/charts/stable/oscam/values.yaml b/charts/stable/oscam/values.yaml index 21f4836b510..03bfb4ca084 100644 --- a/charts/stable/oscam/values.yaml +++ b/charts/stable/oscam/values.yaml @@ -5,6 +5,13 @@ image: pullPolicy: IfNotPresent tag: version-11693@sha256:e97f9929c3a6caed6ee24ed9f1efdd4a8c29b4b2ba52205d3f8daebdaf7a9ea2 +securityContext: + runAsNonRoot: false + +podSecurityContext: + runAsUser: 0 + runAsGroup: 0 + env: TZ: UTC PUID: "568" diff --git a/charts/stable/overseerr/Chart.yaml b/charts/stable/overseerr/Chart.yaml index eafb7166dee..cb9e5456fbd 100644 --- a/charts/stable/overseerr/Chart.yaml +++ b/charts/stable/overseerr/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "1.26.1" +appVersion: 1.26.1 dependencies: - name: common repository: https://truecharts.org - version: 7.0.14 + version: 8.0.7 description: Overseerr is a free and open source software application for managing requests for your media library. It integrates with your existing services such as Sonarr, Radarr and Plex! @@ -23,4 +23,4 @@ name: overseerr sources: - https://github.com/sct/overseerr - https://hub.docker.com/r/sctx/overseerr -version: 2.0.3 +version: 3.0.0 diff --git a/charts/stable/overseerr/SCALE/questions.yaml b/charts/stable/overseerr/SCALE/questions.yaml index 28202f92157..96a434fb2ae 100644 --- a/charts/stable/overseerr/SCALE/questions.yaml +++ b/charts/stable/overseerr/SCALE/questions.yaml @@ -92,8 +92,6 @@ questions: default: "info" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -198,7 +196,6 @@ questions: max: 65535 default: 36073 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -547,8 +544,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext @@ -571,7 +566,7 @@ questions: label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: @@ -622,6 +617,7 @@ questions: description: "OnRootMismatch" - value: "Always" description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -663,7 +659,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/overseerr/values.yaml b/charts/stable/overseerr/values.yaml index 8e148eea64a..b6980752f63 100644 --- a/charts/stable/overseerr/values.yaml +++ b/charts/stable/overseerr/values.yaml @@ -14,17 +14,7 @@ image: pullPolicy: IfNotPresent securityContext: - privileged: false readOnlyRootFilesystem: false - allowPrivilegeEscalation: true - runAsNonRoot: true - -podSecurityContext: - runAsUser: 568 - runAsGroup: 568 - fsGroup: 568 - supplementalGroups: [] - fsGroupChangePolicy: "OnRootMismatch" # -- environment variables. # @default -- See below @@ -42,7 +32,6 @@ service: main: port: 5055 - # -- Configure persistence settings for the chart under this key. # @default -- See values.yaml persistence: diff --git a/charts/stable/owncast/Chart.yaml b/charts/stable/owncast/Chart.yaml index 692fa7e3315..e33db3220a3 100644 --- a/charts/stable/owncast/Chart.yaml +++ b/charts/stable/owncast/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "0.0.8" +appVersion: 0.0.8 dependencies: - name: common repository: https://truecharts.org - version: 7.0.14 + version: 8.0.7 description: Take control over your live stream video by running it yourself. Streaming + chat out of the box. home: https://github.com/truechartsapps/tree/master/charts/incubator/owncast @@ -22,4 +22,4 @@ name: owncast sources: - https://owncast.online/ - https://github.com/owncast/owncast -version: 2.0.2 +version: 3.0.0 diff --git a/charts/stable/owncast/SCALE/questions.yaml b/charts/stable/owncast/SCALE/questions.yaml index ca858789ba6..b70b6165dfe 100644 --- a/charts/stable/owncast/SCALE/questions.yaml +++ b/charts/stable/owncast/SCALE/questions.yaml @@ -86,8 +86,6 @@ questions: default: "002" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -289,7 +287,6 @@ questions: max: 65535 default: 36075 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -638,8 +635,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext @@ -662,13 +657,58 @@ questions: label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: type: boolean default: false + - variable: podSecurityContext + group: "Security and Permissions" + label: "Pod Security Context" + schema: + type: dict + attrs: + - variable: runAsUser + label: "runAsUser" + description: "The UserID of the user running the application" + schema: + type: int + default: 0 + - variable: runAsGroup + label: "runAsGroup" + description: The groupID this App of the user running the application" + schema: + type: int + default: 0 + - variable: fsGroup + label: "fsGroup" + description: "The group that should own ALL storage." + schema: + type: int + default: 568 + - variable: supplementalGroups + label: "supplemental Groups" + schema: + type: list + default: [] + items: + - variable: supplementalGroupsEntry + label: "supplemental Group" + schema: + type: int + - variable: fsGroupChangePolicy + label: "When should we take ownership?" + schema: + type: string + default: "OnRootMismatch" + enum: + - value: "OnRootMismatch" + description: "OnRootMismatch" + - value: "Always" + description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -710,7 +750,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/owncast/values.yaml b/charts/stable/owncast/values.yaml index a1a27048d7e..4fa2accda4e 100644 --- a/charts/stable/owncast/values.yaml +++ b/charts/stable/owncast/values.yaml @@ -13,6 +13,13 @@ image: # -- image pull policy pullPolicy: IfNotPresent +securityContext: + readOnlyRootFilesystem: false + runAsNonRoot: false + +podSecurityContext: + runAsUser: 0 + runAsGroup: 0 # -- Configures service settings for the chart. # @default -- See values.yaml @@ -32,7 +39,6 @@ service: protocol: TCP targetPort: 1935 - # -- Configure persistence settings for the chart under this key. # @default -- See values.yaml persistence: diff --git a/charts/stable/owncloud-ocis/Chart.yaml b/charts/stable/owncloud-ocis/Chart.yaml index fb0565ec9e7..d5c28ebcea2 100644 --- a/charts/stable/owncloud-ocis/Chart.yaml +++ b/charts/stable/owncloud-ocis/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "1.12.0" +appVersion: 1.12.0 dependencies: - name: common repository: https://truecharts.org - version: 7.0.14 + version: 8.0.7 description: ownCloud Infinite Scale is a self-hosted file sync and share server. home: https://github.com/truechartsapps/tree/master/charts/incubator/owncloud-ocis icon: https://avatars.githubusercontent.com/u/1645051?s=200&v=4 @@ -25,4 +25,4 @@ name: owncloud-ocis sources: - https://hub.docker.com/r/owncloud/ocis - https://owncloud.dev/ocis/ -version: 2.0.3 +version: 3.0.0 diff --git a/charts/stable/owncloud-ocis/SCALE/questions.yaml b/charts/stable/owncloud-ocis/SCALE/questions.yaml index 95eccdc6181..1ef0ad12ed7 100644 --- a/charts/stable/owncloud-ocis/SCALE/questions.yaml +++ b/charts/stable/owncloud-ocis/SCALE/questions.yaml @@ -86,8 +86,6 @@ questions: default: "002" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -192,7 +190,6 @@ questions: max: 65535 default: 36076 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -541,8 +538,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext @@ -565,7 +560,7 @@ questions: label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: @@ -616,6 +611,7 @@ questions: description: "OnRootMismatch" - value: "Always" description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -657,7 +653,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/owncloud-ocis/values.yaml b/charts/stable/owncloud-ocis/values.yaml index 6a0a2655a73..82b0cf3dad5 100644 --- a/charts/stable/owncloud-ocis/values.yaml +++ b/charts/stable/owncloud-ocis/values.yaml @@ -14,17 +14,7 @@ image: pullPolicy: IfNotPresent securityContext: - privileged: false readOnlyRootFilesystem: false - allowPrivilegeEscalation: true - runAsNonRoot: true - -podSecurityContext: - runAsUser: 568 - runAsGroup: 568 - fsGroup: 568 - supplementalGroups: [] - fsGroupChangePolicy: "OnRootMismatch" # -- environment variables. See more environment variables in the [owncloud-ocis documentation](https://owncloud.dev/ocis/configuration/#environment-variables). # @default -- See below @@ -40,7 +30,6 @@ service: main: port: 9200 - # -- Configure persistence settings for the chart under this key. # @default -- See values.yaml persistence: diff --git a/charts/stable/pgadmin/Chart.yaml b/charts/stable/pgadmin/Chart.yaml index 64b0f99271b..5c0e12cc242 100644 --- a/charts/stable/pgadmin/Chart.yaml +++ b/charts/stable/pgadmin/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "5.7" +appVersion: '5.7' dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.7 deprecated: false description: Web-Based postgresql database management utility home: https://github.com/truecharts/apps/tree/master/charts/stable/pgadmin @@ -24,4 +24,4 @@ name: pgadmin sources: - https://www.pgadmin.org/ type: application -version: 2.0.2 +version: 3.0.0 diff --git a/charts/stable/pgadmin/SCALE/questions.yaml b/charts/stable/pgadmin/SCALE/questions.yaml index abafb71b92e..0cc9293c288 100644 --- a/charts/stable/pgadmin/SCALE/questions.yaml +++ b/charts/stable/pgadmin/SCALE/questions.yaml @@ -110,8 +110,6 @@ questions: default: "" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -216,8 +214,6 @@ questions: max: 65535 default: 36093 - - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -567,8 +563,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext @@ -591,7 +585,7 @@ questions: label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: @@ -604,6 +598,18 @@ questions: schema: type: dict attrs: + - variable: runAsUser + label: "runAsUser" + description: "The UserID of the user running the application" + schema: + type: int + default: 0 + - variable: runAsGroup + label: "runAsGroup" + description: The groupID this App of the user running the application" + schema: + type: int + default: 0 - variable: fsGroup label: "fsGroup" description: "The group that should own ALL storage." @@ -630,6 +636,7 @@ questions: description: "OnRootMismatch" - value: "Always" description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -671,7 +678,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/pgadmin/values.yaml b/charts/stable/pgadmin/values.yaml index 3cf87bd8960..04817eeeb48 100644 --- a/charts/stable/pgadmin/values.yaml +++ b/charts/stable/pgadmin/values.yaml @@ -6,17 +6,13 @@ image: tag: 5.7@sha256:64475197fc11cb8169de7e59cd4ea15872b3edafe22f87ea7bc23ba7f00bbe96 securityContext: - privileged: false - readOnlyRootFilesystem: false - allowPrivilegeEscalation: true runAsNonRoot: false + readOnlyRootFilesystem: false podSecurityContext: runAsUser: 0 runAsGroup: 0 fsGroup: 5050 - supplementalGroups: [] - fsGroupChangePolicy: "OnRootMismatch" service: main: diff --git a/charts/stable/photoprism/Chart.yaml b/charts/stable/photoprism/Chart.yaml index 0d8988bedef..1e5ada52ea9 100644 --- a/charts/stable/photoprism/Chart.yaml +++ b/charts/stable/photoprism/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "20210523" +appVersion: '20210523' dependencies: - name: common repository: https://truecharts.org - version: 7.0.14 + version: 8.0.7 description: "PhotoPrism\xC2\xAE is a server-based application for browsing, organizing\ \ and sharing your personal photo collection" home: https://github.com/truechartsapps/tree/master/charts/incubator/photoprism @@ -22,4 +22,4 @@ name: photoprism sources: - https://github.com/photoprism/photoprism - https://hub.docker.com/r/photoprism/photoprism -version: 2.0.2 +version: 3.0.0 diff --git a/charts/stable/photoprism/SCALE/questions.yaml b/charts/stable/photoprism/SCALE/questions.yaml index 09d9d8c24ae..77da69302f5 100644 --- a/charts/stable/photoprism/SCALE/questions.yaml +++ b/charts/stable/photoprism/SCALE/questions.yaml @@ -123,8 +123,6 @@ questions: default: false # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -229,7 +227,6 @@ questions: max: 65535 default: 36077 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -578,8 +575,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext @@ -597,12 +592,12 @@ questions: label: "ReadOnly Root Filesystem" schema: type: boolean - default: false + default: true - variable: allowPrivilegeEscalation label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: @@ -653,6 +648,7 @@ questions: description: "OnRootMismatch" - value: "Always" description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -694,7 +690,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/photoprism/values.yaml b/charts/stable/photoprism/values.yaml index d67ae520115..1f75725019e 100644 --- a/charts/stable/photoprism/values.yaml +++ b/charts/stable/photoprism/values.yaml @@ -13,19 +13,6 @@ image: # -- image pull policy pullPolicy: IfNotPresent -securityContext: - privileged: false - readOnlyRootFilesystem: false - allowPrivilegeEscalation: true - runAsNonRoot: true - -podSecurityContext: - runAsUser: 568 - runAsGroup: 568 - fsGroup: 568 - supplementalGroups: [] - fsGroupChangePolicy: "OnRootMismatch" - # -- environment variables. See [image docs](https://docs.photoprism.org/getting-started/config-options/) for more details. # @default -- See below env: @@ -54,7 +41,6 @@ service: main: port: 2342 - # -- Configure persistence settings for the chart under this key. # @default -- See values.yaml persistence: diff --git a/charts/stable/phpldapadmin/Chart.yaml b/charts/stable/phpldapadmin/Chart.yaml index 201206d15fc..94c80c7d18c 100644 --- a/charts/stable/phpldapadmin/Chart.yaml +++ b/charts/stable/phpldapadmin/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "0.9.0" +appVersion: 0.9.0 dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.7 deprecated: false description: Web-based LDAP browser to manage your LDAP server home: https://github.com/truecharts/apps/tree/master/charts/stable/phpldapadmin @@ -24,4 +24,4 @@ name: phpldapadmin sources: - https://gitlab.v2.rancher.geohub.space/g3s/i3s/i3s-helm-catalog type: application -version: 2.0.2 +version: 3.0.0 diff --git a/charts/stable/phpldapadmin/SCALE/questions.yaml b/charts/stable/phpldapadmin/SCALE/questions.yaml index b0e166c657e..7be2117af12 100644 --- a/charts/stable/phpldapadmin/SCALE/questions.yaml +++ b/charts/stable/phpldapadmin/SCALE/questions.yaml @@ -98,8 +98,6 @@ questions: default: "true" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -204,7 +202,6 @@ questions: max: 65535 default: 36093 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -437,8 +434,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext @@ -461,12 +456,12 @@ questions: label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: type: boolean - default: true + default: false - variable: podSecurityContext group: "Security and Permissions" @@ -479,13 +474,13 @@ questions: description: "The UserID of the user running the application" schema: type: int - default: 568 + default: 0 - variable: runAsGroup label: "runAsGroup" description: The groupID this App of the user running the application" schema: type: int - default: 568 + default: 0 - variable: fsGroup label: "fsGroup" description: "The group that should own ALL storage." @@ -512,6 +507,7 @@ questions: description: "OnRootMismatch" - value: "Always" description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -553,7 +549,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/phpldapadmin/values.yaml b/charts/stable/phpldapadmin/values.yaml index ec17e60ae7f..7aa77450bc7 100644 --- a/charts/stable/phpldapadmin/values.yaml +++ b/charts/stable/phpldapadmin/values.yaml @@ -5,6 +5,13 @@ image: pullPolicy: IfNotPresent tag: v0.9.0@sha256:e633aefd9a89e9c1492bef151eb81d718b5b9ecc7bf1bc80e64b36e5ac480158 +securityContext: + readOnlyRootFilesystem: false + runAsNonRoot: false + +podSecurityContext: + runAsUser: 0 + runAsGroup: 0 service: main: diff --git a/charts/stable/piaware/Chart.yaml b/charts/stable/piaware/Chart.yaml index 5335cd5df1f..a2cf0c8d8c1 100644 --- a/charts/stable/piaware/Chart.yaml +++ b/charts/stable/piaware/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "6.1" +appVersion: '6.1' dependencies: - name: common repository: https://truecharts.org - version: 7.0.14 + version: 8.0.7 description: Program for forwarding ADS-B data to FlightAware home: https://github.com/truechartsapps/tree/master/charts/incubator/piaware icon: https://pbs.twimg.com/profile_images/964269455483088897/mr2UgvfG_400x400.jpg @@ -19,4 +19,4 @@ maintainers: name: piaware sources: - https://github.com/flightaware/piaware -version: 2.0.2 +version: 3.0.0 diff --git a/charts/stable/piaware/SCALE/questions.yaml b/charts/stable/piaware/SCALE/questions.yaml index e450d6befe1..72e2aa42ab2 100644 --- a/charts/stable/piaware/SCALE/questions.yaml +++ b/charts/stable/piaware/SCALE/questions.yaml @@ -86,8 +86,6 @@ questions: default: "002" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -192,7 +190,6 @@ questions: max: 65535 default: 36078 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -541,8 +538,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext @@ -565,7 +560,7 @@ questions: label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: @@ -595,7 +590,7 @@ questions: description: "The group that should own ALL storage." schema: type: int - default: 0 + default: 568 - variable: supplementalGroups label: "supplemental Groups" schema: @@ -616,6 +611,7 @@ questions: description: "OnRootMismatch" - value: "Always" description: "Always" + - variable: deviceList label: "Mount USB devices" group: "Resources and Devices" @@ -697,7 +693,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/piaware/values.yaml b/charts/stable/piaware/values.yaml index 360eaac52d4..c250cc82b43 100644 --- a/charts/stable/piaware/values.yaml +++ b/charts/stable/piaware/values.yaml @@ -14,17 +14,12 @@ image: pullPolicy: IfNotPresent securityContext: - privileged: true readOnlyRootFilesystem: false - allowPrivilegeEscalation: true runAsNonRoot: false podSecurityContext: runAsUser: 0 runAsGroup: 0 - fsGroup: 0 - supplementalGroups: [] - fsGroupChangePolicy: "OnRootMismatch" # -- environment variables. See [application docs](https://flightaware.com/adsb/piaware/advanced_configuration) for more details. # @default -- See below diff --git a/charts/stable/pihole/Chart.yaml b/charts/stable/pihole/Chart.yaml index 9500c8ae082..3e300c3bbe4 100644 --- a/charts/stable/pihole/Chart.yaml +++ b/charts/stable/pihole/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "2021.09" +appVersion: '2021.09' dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.7 deprecated: false description: DNS and Ad-filtering for your network home: https://github.com/truecharts/apps/tree/master/charts/stable/pihole @@ -21,4 +21,4 @@ sources: - https://github.com/pi-hole - https://github.com/pi-hole/docker-pi-hole type: application -version: 2.0.6 +version: 3.0.0 diff --git a/charts/stable/pihole/SCALE/questions.yaml b/charts/stable/pihole/SCALE/questions.yaml index 94c71b54dfa..9f2012fbd62 100644 --- a/charts/stable/pihole/SCALE/questions.yaml +++ b/charts/stable/pihole/SCALE/questions.yaml @@ -123,9 +123,6 @@ questions: type: string default: "149.112.112.112" - - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -956,9 +953,6 @@ questions: schema: type: string - - - # Include{ingressList} - variable: securityContext @@ -981,13 +975,58 @@ questions: label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: type: boolean default: false + - variable: podSecurityContext + group: "Security and Permissions" + label: "Pod Security Context" + schema: + type: dict + attrs: + - variable: runAsUser + label: "runAsUser" + description: "The UserID of the user running the application" + schema: + type: int + default: 0 + - variable: runAsGroup + label: "runAsGroup" + description: The groupID this App of the user running the application" + schema: + type: int + default: 0 + - variable: fsGroup + label: "fsGroup" + description: "The group that should own ALL storage." + schema: + type: int + default: 568 + - variable: supplementalGroups + label: "supplemental Groups" + schema: + type: list + default: [] + items: + - variable: supplementalGroupsEntry + label: "supplemental Group" + schema: + type: int + - variable: fsGroupChangePolicy + label: "When should we take ownership?" + schema: + type: string + default: "OnRootMismatch" + enum: + - value: "OnRootMismatch" + description: "OnRootMismatch" + - value: "Always" + description: "Always" + - variable: resources group: "Resources and Devices" label: "Resource Limits" @@ -1029,7 +1068,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/pihole/values.yaml b/charts/stable/pihole/values.yaml index 01a96e5f237..9ef5e5511ee 100644 --- a/charts/stable/pihole/values.yaml +++ b/charts/stable/pihole/values.yaml @@ -5,6 +5,14 @@ image: pullPolicy: IfNotPresent tag: v2021.09@sha256:e043ab188da4c36abb11d70d82bbfb394ef5054abff21dafbaf54bc21861bd1e +securityContext: + readOnlyRootFilesystem: false + runAsNonRoot: false + +podSecurityContext: + runAsUser: 0 + runAsGroup: 0 + envFrom: - configMapRef: name: pihole-env @@ -33,7 +41,6 @@ pihole: DNS1: "9.9.9.9" DNS2: "149.112.112.112" - persistence: config: enabled: true diff --git a/charts/stable/plex/Chart.yaml b/charts/stable/plex/Chart.yaml index 1b54759b048..bed3e527d8e 100644 --- a/charts/stable/plex/Chart.yaml +++ b/charts/stable/plex/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "1.24.3.503" +appVersion: 1.24.3.503 dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.7 deprecated: false description: Plex Media Server home: https://github.com/truecharts/apps/tree/master/charts/stable/plex @@ -22,4 +22,4 @@ maintainers: name: plex sources: null type: application -version: 6.0.3 +version: 7.0.0 diff --git a/charts/stable/plex/SCALE/questions.yaml b/charts/stable/plex/SCALE/questions.yaml index 211f22b1cf8..6fec2c5e466 100644 --- a/charts/stable/plex/SCALE/questions.yaml +++ b/charts/stable/plex/SCALE/questions.yaml @@ -105,8 +105,6 @@ questions: default: "002" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -211,7 +209,6 @@ questions: max: 65535 default: 32400 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -560,8 +557,6 @@ questions: schema: type: string - - # Include{ingressList} # Specify GPU configuration - variable: scaleGPU @@ -588,12 +583,12 @@ questions: label: "ReadOnly Root Filesystem" schema: type: boolean - default: false + default: true - variable: allowPrivilegeEscalation label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: @@ -644,6 +639,7 @@ questions: description: "OnRootMismatch" - value: "Always" description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -685,7 +681,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/plex/values.yaml b/charts/stable/plex/values.yaml index b6bffa04c90..a5fe52d17f2 100644 --- a/charts/stable/plex/values.yaml +++ b/charts/stable/plex/values.yaml @@ -5,20 +5,6 @@ image: pullPolicy: IfNotPresent tag: v1.24.3.5033-757abe6b4@sha256:23a65cc78a0aab38f26a60d38f65eefcb2db7dc4e5d99c4ac7ad8f722c677654 -securityContext: - privileged: false - readOnlyRootFilesystem: false - allowPrivilegeEscalation: true - runAsNonRoot: true - -# 44=video 107=render -podSecurityContext: - runAsUser: 568 - runAsGroup: 568 - fsGroup: 568 - supplementalGroups: [44, 107] - fsGroupChangePolicy: "OnRootMismatch" - service: main: ports: diff --git a/charts/stable/podgrab/Chart.yaml b/charts/stable/podgrab/Chart.yaml index 499270baaef..18c87dd110c 100644 --- a/charts/stable/podgrab/Chart.yaml +++ b/charts/stable/podgrab/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "1.0.0" +appVersion: 1.0.0 dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.7 deprecated: false description: A self-hosted podcast manager to download episodes as soon as they become live. @@ -24,4 +24,4 @@ sources: - https://github.com/akhilrex/podgrab - https://hub.docker.com/r/akhilrex/podgrab type: application -version: 5.0.2 +version: 6.0.0 diff --git a/charts/stable/podgrab/SCALE/questions.yaml b/charts/stable/podgrab/SCALE/questions.yaml index e7409348ffc..48470bd0660 100644 --- a/charts/stable/podgrab/SCALE/questions.yaml +++ b/charts/stable/podgrab/SCALE/questions.yaml @@ -94,8 +94,6 @@ questions: required: true # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -200,7 +198,6 @@ questions: max: 65535 default: 36047 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -550,8 +547,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext @@ -569,12 +564,12 @@ questions: label: "ReadOnly Root Filesystem" schema: type: boolean - default: false + default: true - variable: allowPrivilegeEscalation label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: @@ -625,6 +620,7 @@ questions: description: "OnRootMismatch" - value: "Always" description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -666,7 +662,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/podgrab/values.yaml b/charts/stable/podgrab/values.yaml index 0bfb2a0e069..99368247085 100644 --- a/charts/stable/podgrab/values.yaml +++ b/charts/stable/podgrab/values.yaml @@ -5,19 +5,6 @@ image: pullPolicy: Always tag: v1.0.0@sha256:17a92f111c5840f1fb78f216e4191ec1f5eeeb04ad5a1a5bdde0df35fdbe8910 -securityContext: - privileged: false - readOnlyRootFilesystem: false - allowPrivilegeEscalation: true - runAsNonRoot: true - -podSecurityContext: - runAsUser: 568 - runAsGroup: 568 - fsGroup: 568 - supplementalGroups: [] - fsGroupChangePolicy: "OnRootMismatch" - service: main: ports: @@ -44,7 +31,6 @@ persistence: accessMode: ReadWriteOnce size: "100Gi" - hostPathMounts: - name: assets enabled: true diff --git a/charts/stable/postgresql/Chart.yaml b/charts/stable/postgresql/Chart.yaml index fd4500eaa4b..fe03b89ef2c 100644 --- a/charts/stable/postgresql/Chart.yaml +++ b/charts/stable/postgresql/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "13.4.0" +appVersion: 13.4.0 dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.7 deprecated: false description: PostgresSQL home: https://github.com/truecharts/apps/tree/master/stable/postgres @@ -25,4 +25,4 @@ name: postgresql sources: - https://www.postgresql.org/ type: application -version: 2.2.5 +version: 3.0.0 diff --git a/charts/stable/postgresql/SCALE/ix_values.yaml b/charts/stable/postgresql/SCALE/ix_values.yaml index de780f79864..9dc59f94541 100644 --- a/charts/stable/postgresql/SCALE/ix_values.yaml +++ b/charts/stable/postgresql/SCALE/ix_values.yaml @@ -16,7 +16,7 @@ initContainers: securityContext: runAsUser: 0 privileged: true - allowPrivilegeEscalation: true + runAsNonRoot: false command: - /bin/sh diff --git a/charts/stable/postgresql/SCALE/questions.yaml b/charts/stable/postgresql/SCALE/questions.yaml index 56db68fdc8d..58d6ba580a3 100644 --- a/charts/stable/postgresql/SCALE/questions.yaml +++ b/charts/stable/postgresql/SCALE/questions.yaml @@ -96,8 +96,6 @@ questions: default: "" required: true - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -202,7 +200,6 @@ questions: max: 65535 default: 36009 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -615,7 +612,6 @@ questions: # Include{persistenceList} - # Include{ingressList} - variable: securityContext @@ -638,12 +634,12 @@ questions: label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: type: boolean - default: false + default: true - variable: podSecurityContext group: "Security and Permissions" @@ -662,7 +658,7 @@ questions: description: The groupID this App of the user running the application" schema: type: int - default: 0 + default: 568 - variable: fsGroup label: "fsGroup" description: "The group that should own ALL storage." @@ -689,6 +685,7 @@ questions: description: "OnRootMismatch" - value: "Always" description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -730,7 +727,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/postgresql/values.yaml b/charts/stable/postgresql/values.yaml index 8a45769ac0e..14512f54e7a 100644 --- a/charts/stable/postgresql/values.yaml +++ b/charts/stable/postgresql/values.yaml @@ -3,6 +3,8 @@ image: pullPolicy: IfNotPresent tag: 13.4.0@sha256:abfb7efd31afc36a8b16aa077bb9dd165c4f635412affef37c7859605fda762c +securityContext: + readOnlyRootFilesystem: false service: main: @@ -20,7 +22,7 @@ initContainers: securityContext: runAsUser: 0 privileged: true - allowPrivilegeEscalation: true + runAsNonRoot: false command: - /bin/sh @@ -38,19 +40,8 @@ initContainers: - name: data mountPath: /bitnami/postgresql - -securityContext: - privileged: false - readOnlyRootFilesystem: false - allowPrivilegeEscalation: true - runAsNonRoot: false - podSecurityContext: - runAsUser: 568 runAsGroup: 0 - fsGroup: 568 - supplementalGroups: [] - fsGroupChangePolicy: "OnRootMismatch" persistence: db: @@ -77,7 +68,6 @@ postgresqlUsername: "test" postgresqlDatabase: "test" existingSecret: "" - envValueFrom: POSTGRES_PASSWORD: secretKeyRef: diff --git a/charts/stable/pretend-youre-xyzzy/Chart.yaml b/charts/stable/pretend-youre-xyzzy/Chart.yaml index 15173c3a8ac..492f7d43995 100644 --- a/charts/stable/pretend-youre-xyzzy/Chart.yaml +++ b/charts/stable/pretend-youre-xyzzy/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "4" +appVersion: '4' dependencies: - name: common repository: https://truecharts.org - version: 7.0.14 + version: 8.0.7 description: pretend-youre-xyzzy, a cards against humanity clone home: https://github.com/truechartsapps/tree/master/charts/incubator/pretend-youre-xyzzy icon: https://apk-google.com/wp-content/uploads/2020/12/Client-for-Pretend-Youre-Xyzzy-open-source-5.0.1.png @@ -21,4 +21,4 @@ name: pretend-youre-xyzzy sources: - https://github.com/ajanata/PretendYoureXyzzy - https://github.com/emcniece/DockerYourXyzzy -version: 2.0.2 +version: 3.0.0 diff --git a/charts/stable/pretend-youre-xyzzy/SCALE/questions.yaml b/charts/stable/pretend-youre-xyzzy/SCALE/questions.yaml index 7952add088e..9273c07ca52 100644 --- a/charts/stable/pretend-youre-xyzzy/SCALE/questions.yaml +++ b/charts/stable/pretend-youre-xyzzy/SCALE/questions.yaml @@ -86,8 +86,6 @@ questions: default: "002" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -424,8 +422,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext @@ -448,7 +444,7 @@ questions: label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: @@ -478,7 +474,7 @@ questions: description: "The group that should own ALL storage." schema: type: int - default: 0 + default: 568 - variable: supplementalGroups label: "supplemental Groups" schema: @@ -540,7 +536,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/pretend-youre-xyzzy/values.yaml b/charts/stable/pretend-youre-xyzzy/values.yaml index 238f6bfae13..b03a647ad13 100644 --- a/charts/stable/pretend-youre-xyzzy/values.yaml +++ b/charts/stable/pretend-youre-xyzzy/values.yaml @@ -14,17 +14,12 @@ image: pullPolicy: IfNotPresent securityContext: - privileged: false readOnlyRootFilesystem: false - allowPrivilegeEscalation: true runAsNonRoot: false podSecurityContext: runAsUser: 0 runAsGroup: 0 - fsGroup: 0 - supplementalGroups: [] - fsGroupChangePolicy: "OnRootMismatch" # -- Configures service settings for the chart. # @default -- See values.yaml diff --git a/charts/stable/protonmail-bridge/Chart.yaml b/charts/stable/protonmail-bridge/Chart.yaml index d560d635506..b0efc8825a6 100644 --- a/charts/stable/protonmail-bridge/Chart.yaml +++ b/charts/stable/protonmail-bridge/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "1.8.9-1" +appVersion: 1.8.9-1 dependencies: - name: common repository: https://truecharts.org - version: 7.0.14 + version: 8.0.7 description: Container for protonmail bridge to work on the network. home: https://github.com/truechartsapps/tree/master/charts/incubator/protonmail-bridge icon: https://raw.githubusercontent.com/ProtonMail/proton-bridge/master/icon.iconset/icon_256x256.png @@ -19,4 +19,4 @@ name: protonmail-bridge sources: - https://github.com/shenxn/protonmail-bridge-docker - https://hub.docker.com/r/shenxn/protonmail-bridge -version: 2.0.3 +version: 3.0.0 diff --git a/charts/stable/protonmail-bridge/SCALE/questions.yaml b/charts/stable/protonmail-bridge/SCALE/questions.yaml index c47f05ed3e0..4e6fe3c9da0 100644 --- a/charts/stable/protonmail-bridge/SCALE/questions.yaml +++ b/charts/stable/protonmail-bridge/SCALE/questions.yaml @@ -86,8 +86,6 @@ questions: default: "002" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -204,7 +202,6 @@ questions: min: 9000 max: 65535 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -553,8 +550,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext @@ -577,7 +572,7 @@ questions: label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: @@ -607,7 +602,7 @@ questions: description: "The group that should own ALL storage." schema: type: int - default: 0 + default: 568 - variable: supplementalGroups label: "supplemental Groups" schema: @@ -628,6 +623,7 @@ questions: description: "OnRootMismatch" - value: "Always" description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -669,7 +665,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/protonmail-bridge/values.yaml b/charts/stable/protonmail-bridge/values.yaml index 6d6bb6fb654..93bf8b98a90 100644 --- a/charts/stable/protonmail-bridge/values.yaml +++ b/charts/stable/protonmail-bridge/values.yaml @@ -14,17 +14,12 @@ image: pullPolicy: IfNotPresent securityContext: - privileged: false readOnlyRootFilesystem: false - allowPrivilegeEscalation: true runAsNonRoot: false podSecurityContext: runAsUser: 0 runAsGroup: 0 - fsGroup: 0 - supplementalGroups: [] - fsGroupChangePolicy: "OnRootMismatch" # -- environment variables. # @default -- See below @@ -44,7 +39,6 @@ service: protocol: TCP port: 25 - # -- Configure persistence settings for the chart under this key. # @default -- See values.yaml persistence: diff --git a/charts/stable/prowlarr/Chart.yaml b/charts/stable/prowlarr/Chart.yaml index fb40dbd10f0..a69717e2377 100644 --- a/charts/stable/prowlarr/Chart.yaml +++ b/charts/stable/prowlarr/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "0.1.1.946" +appVersion: 0.1.1.946 dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.7 description: Indexer manager/proxy built on the popular arr net base stack to integrate with your various PVR apps. home: https://github.com/truecharts/apps/tree/master/charts/incubator/prowlarr @@ -21,4 +21,4 @@ name: prowlarr sources: - https://github.com/Prowlarr/Prowlarr - https://github.com/k8s-at-home/container-images -version: 2.0.3 +version: 3.0.0 diff --git a/charts/stable/prowlarr/SCALE/questions.yaml b/charts/stable/prowlarr/SCALE/questions.yaml index cb702a3a6b9..5dee5a28242 100644 --- a/charts/stable/prowlarr/SCALE/questions.yaml +++ b/charts/stable/prowlarr/SCALE/questions.yaml @@ -87,8 +87,6 @@ questions: default: "002" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -543,8 +541,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext @@ -567,7 +563,7 @@ questions: label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: @@ -618,6 +614,7 @@ questions: description: "OnRootMismatch" - value: "Always" description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -659,7 +656,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/prowlarr/values.yaml b/charts/stable/prowlarr/values.yaml index b6a1aabe648..704a23a5e72 100644 --- a/charts/stable/prowlarr/values.yaml +++ b/charts/stable/prowlarr/values.yaml @@ -14,17 +14,7 @@ image: pullPolicy: IfNotPresent securityContext: - privileged: false readOnlyRootFilesystem: false - allowPrivilegeEscalation: true - runAsNonRoot: true - -podSecurityContext: - runAsUser: 568 - runAsGroup: 568 - fsGroup: 568 - supplementalGroups: [] - fsGroupChangePolicy: "OnRootMismatch" # -- environment variables. # @default -- See below diff --git a/charts/stable/pyload/Chart.yaml b/charts/stable/pyload/Chart.yaml index 40adfd834f1..9d8ce840f9e 100644 --- a/charts/stable/pyload/Chart.yaml +++ b/charts/stable/pyload/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "5de90278" +appVersion: 5de90278 dependencies: - name: common repository: https://truecharts.org - version: 7.0.14 + version: 8.0.7 description: pyLoad is a Free and Open Source download manager written in Python and designed to be extremely lightweight, easily extensible and fully manageable via web. @@ -21,4 +21,4 @@ name: pyload sources: - https://github.com/pyload/pyload - https://hub.docker.com/r/linuxserver/pyload -version: 2.0.2 +version: 3.0.0 diff --git a/charts/stable/pyload/SCALE/questions.yaml b/charts/stable/pyload/SCALE/questions.yaml index 596da3460b1..08f3cf5d65d 100644 --- a/charts/stable/pyload/SCALE/questions.yaml +++ b/charts/stable/pyload/SCALE/questions.yaml @@ -98,8 +98,6 @@ questions: default: "002" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -204,7 +202,6 @@ questions: max: 65535 default: 36082 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -553,8 +550,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext @@ -572,12 +567,12 @@ questions: label: "ReadOnly Root Filesystem" schema: type: boolean - default: false + default: true - variable: allowPrivilegeEscalation label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: @@ -607,7 +602,7 @@ questions: description: "The group that should own ALL storage." schema: type: int - default: 0 + default: 568 - variable: supplementalGroups label: "supplemental Groups" schema: @@ -628,6 +623,7 @@ questions: description: "OnRootMismatch" - value: "Always" description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -669,7 +665,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/pyload/values.yaml b/charts/stable/pyload/values.yaml index 0159dd6cb2e..a55122d1f27 100644 --- a/charts/stable/pyload/values.yaml +++ b/charts/stable/pyload/values.yaml @@ -14,17 +14,11 @@ image: pullPolicy: IfNotPresent securityContext: - privileged: false - readOnlyRootFilesystem: false - allowPrivilegeEscalation: true runAsNonRoot: false podSecurityContext: runAsUser: 0 runAsGroup: 0 - fsGroup: 0 - supplementalGroups: [] - fsGroupChangePolicy: "OnRootMismatch" # -- environment variables. See [image docs](https://docs.linuxserver.io/images/docker-pyload#environment-variables-e) for more details. # @default -- See below diff --git a/charts/stable/qbittorrent/Chart.yaml b/charts/stable/qbittorrent/Chart.yaml index ba79d470f64..368eba73613 100644 --- a/charts/stable/qbittorrent/Chart.yaml +++ b/charts/stable/qbittorrent/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "4.3.7" +appVersion: 4.3.7 dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.7 deprecated: false description: qBittorrent is a cross-platform free and open-source BitTorrent client home: https://github.com/truecharts/apps/tree/master/charts/incubator/qbittorrent @@ -19,4 +19,4 @@ maintainers: name: qbittorrent sources: null type: application -version: 7.0.2 +version: 8.0.0 diff --git a/charts/stable/qbittorrent/SCALE/questions.yaml b/charts/stable/qbittorrent/SCALE/questions.yaml index 03846bbb824..7c1554981a7 100644 --- a/charts/stable/qbittorrent/SCALE/questions.yaml +++ b/charts/stable/qbittorrent/SCALE/questions.yaml @@ -86,8 +86,6 @@ questions: default: "002" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -337,7 +335,6 @@ questions: max: 65535 default: 36040 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -687,8 +684,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext @@ -711,7 +706,7 @@ questions: label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: @@ -762,6 +757,7 @@ questions: description: "OnRootMismatch" - value: "Always" description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -803,7 +799,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/qbittorrent/values.yaml b/charts/stable/qbittorrent/values.yaml index acbe8bf1bc6..5ccfdbf26b1 100644 --- a/charts/stable/qbittorrent/values.yaml +++ b/charts/stable/qbittorrent/values.yaml @@ -6,17 +6,7 @@ image: tag: v4.3.7@sha256:a51b97508cfd5ec81e6693e7203490d275e76eaa0d7772d40512dea8d8509f45 securityContext: - privileged: false readOnlyRootFilesystem: false - allowPrivilegeEscalation: true - runAsNonRoot: true - -podSecurityContext: - runAsUser: 568 - runAsGroup: 568 - fsGroup: 568 - supplementalGroups: [] - fsGroupChangePolicy: "OnRootMismatch" env: {} # TZ: UTC @@ -50,7 +40,6 @@ persistence: accessMode: ReadWriteOnce size: "100Gi" - additionalVolumes: - name: qbittorrent-scripts emptyDir: {} diff --git a/charts/stable/radarr/Chart.yaml b/charts/stable/radarr/Chart.yaml index ce70b41792d..2e2586ea660 100644 --- a/charts/stable/radarr/Chart.yaml +++ b/charts/stable/radarr/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "3.2.2.5080" +appVersion: 3.2.2.5080 dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.7 deprecated: false description: "A fork of Sonarr to work with movies \xE0 la Couchpotato" home: https://github.com/truecharts/apps/tree/master/charts/stable/radarr @@ -24,4 +24,4 @@ name: radarr sources: - https://github.com/Radarr/Radarr type: application -version: 7.0.2 +version: 8.0.0 diff --git a/charts/stable/radarr/SCALE/questions.yaml b/charts/stable/radarr/SCALE/questions.yaml index cb5ea118fd9..b5c0b6656a3 100644 --- a/charts/stable/radarr/SCALE/questions.yaml +++ b/charts/stable/radarr/SCALE/questions.yaml @@ -86,8 +86,6 @@ questions: default: "002" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -192,7 +190,6 @@ questions: max: 65535 default: 36016 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -541,8 +538,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext @@ -565,7 +560,7 @@ questions: label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: @@ -616,6 +611,7 @@ questions: description: "OnRootMismatch" - value: "Always" description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -657,7 +653,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/radarr/values.yaml b/charts/stable/radarr/values.yaml index c0772fe2ac6..ca0dae49092 100644 --- a/charts/stable/radarr/values.yaml +++ b/charts/stable/radarr/values.yaml @@ -6,17 +6,7 @@ image: tag: v3.2.2.5080@sha256:b03562bacb117ab654dca5c6bcc61d013a40fe54e9fa1f563cd1c72899f77137 securityContext: - privileged: false readOnlyRootFilesystem: false - allowPrivilegeEscalation: true - runAsNonRoot: true - -podSecurityContext: - runAsUser: 568 - runAsGroup: 568 - fsGroup: 568 - supplementalGroups: [] - fsGroupChangePolicy: "OnRootMismatch" service: main: diff --git a/charts/stable/readarr/Chart.yaml b/charts/stable/readarr/Chart.yaml index f002f8e5882..189bb3e3946 100644 --- a/charts/stable/readarr/Chart.yaml +++ b/charts/stable/readarr/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "0.1.0.968" +appVersion: 0.1.0.968 dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.7 deprecated: false description: A fork of Radarr to work with Books & AudioBooks home: https://github.com/truecharts/apps/tree/master/charts/incubator/readarr @@ -27,4 +27,4 @@ sources: - https://github.com/Readarr/Readarr - https://readarr.com type: application -version: 7.0.3 +version: 8.0.0 diff --git a/charts/stable/readarr/SCALE/questions.yaml b/charts/stable/readarr/SCALE/questions.yaml index 3ae0c60d24f..eb18cc058ab 100644 --- a/charts/stable/readarr/SCALE/questions.yaml +++ b/charts/stable/readarr/SCALE/questions.yaml @@ -86,8 +86,6 @@ questions: default: "002" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -192,7 +190,6 @@ questions: max: 65535 default: 36038 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -542,8 +539,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext @@ -566,7 +561,7 @@ questions: label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: @@ -617,6 +612,7 @@ questions: description: "OnRootMismatch" - value: "Always" description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -658,7 +654,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/readarr/values.yaml b/charts/stable/readarr/values.yaml index 09556f3d50a..73d5e7fb737 100644 --- a/charts/stable/readarr/values.yaml +++ b/charts/stable/readarr/values.yaml @@ -6,17 +6,7 @@ image: tag: v0.1.0.968@sha256:83baf69d209958ef0a60f20906b568c6a265c36b7ae468a63a52fffeaa32e1b6 securityContext: - privileged: false readOnlyRootFilesystem: false - allowPrivilegeEscalation: true - runAsNonRoot: true - -podSecurityContext: - runAsUser: 568 - runAsGroup: 568 - fsGroup: 568 - supplementalGroups: [] - fsGroupChangePolicy: "OnRootMismatch" service: main: diff --git a/charts/stable/reg/Chart.yaml b/charts/stable/reg/Chart.yaml index 18ec0c9f9c3..15f4a06b578 100644 --- a/charts/stable/reg/Chart.yaml +++ b/charts/stable/reg/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "0.16.1" +appVersion: 0.16.1 dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.7 description: Docker registry v2 command line client and repo listing generator with security checks. home: https://github.com/truecharts/apps/tree/master/charts/incubator/reg @@ -19,4 +19,4 @@ name: reg sources: - https://github.com/genuinetools/reg - https://github.com/k8s-at-home/container-images/ -version: 2.0.2 +version: 3.0.0 diff --git a/charts/stable/reg/SCALE/questions.yaml b/charts/stable/reg/SCALE/questions.yaml index 4c2d3814b92..be23f853198 100644 --- a/charts/stable/reg/SCALE/questions.yaml +++ b/charts/stable/reg/SCALE/questions.yaml @@ -87,8 +87,6 @@ questions: default: "002" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -543,8 +541,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext @@ -562,12 +558,12 @@ questions: label: "ReadOnly Root Filesystem" schema: type: boolean - default: false + default: true - variable: allowPrivilegeEscalation label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: @@ -592,6 +588,12 @@ questions: schema: type: int default: 568 + - variable: fsGroup + label: "fsGroup" + description: "The group that should own ALL storage." + schema: + type: int + default: 568 - variable: supplementalGroups label: "supplemental Groups" schema: @@ -612,6 +614,7 @@ questions: description: "OnRootMismatch" - value: "Always" description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -653,7 +656,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/reg/values.yaml b/charts/stable/reg/values.yaml index bbaa2a09661..2f08b8bd10d 100644 --- a/charts/stable/reg/values.yaml +++ b/charts/stable/reg/values.yaml @@ -13,19 +13,6 @@ image: # -- image tag tag: v0.16.1@sha256:ae581387764a23c62c1386389e27358bac5088790904938264cb0bcd4e8c946c -securityContext: - privileged: false - readOnlyRootFilesystem: false - allowPrivilegeEscalation: true - runAsNonRoot: true - -podSecurityContext: - runAsUser: 568 - runAsGroup: 568 - fsGroup: 568 - supplementalGroups: [] - fsGroupChangePolicy: "OnRootMismatch" - # -- environment variables. See more environment variables in the [reg documentation](https://github.com/genuinetools/reg). env: # -- Set the container timezone diff --git a/charts/stable/resilio-sync/Chart.yaml b/charts/stable/resilio-sync/Chart.yaml index e18fa3b22e6..03d40dad21c 100644 --- a/charts/stable/resilio-sync/Chart.yaml +++ b/charts/stable/resilio-sync/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "2.7.2.1375" +appVersion: 2.7.2.1375 dependencies: - name: common repository: https://truecharts.org - version: 7.0.14 + version: 8.0.7 description: Resilio Sync is a fast, reliable, and simple file sync and share solution, powered by P2P technology home: https://github.com/truechartsapps/tree/master/charts/incubator/resio-sync @@ -21,4 +21,4 @@ maintainers: name: resilio-sync sources: - https://github.com/orgs/linuxserver/packages/container/package/resilio-sync -version: 2.0.2 +version: 3.0.0 diff --git a/charts/stable/resilio-sync/SCALE/questions.yaml b/charts/stable/resilio-sync/SCALE/questions.yaml index 344893bcf1e..9aea5e91312 100644 --- a/charts/stable/resilio-sync/SCALE/questions.yaml +++ b/charts/stable/resilio-sync/SCALE/questions.yaml @@ -98,8 +98,6 @@ questions: default: "002" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -398,7 +396,6 @@ questions: max: 65535 default: 36090 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -747,8 +744,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext @@ -766,12 +761,12 @@ questions: label: "ReadOnly Root Filesystem" schema: type: boolean - default: false + default: true - variable: allowPrivilegeEscalation label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: @@ -784,6 +779,18 @@ questions: schema: type: dict attrs: + - variable: runAsUser + label: "runAsUser" + description: "The UserID of the user running the application" + schema: + type: int + default: 0 + - variable: runAsGroup + label: "runAsGroup" + description: The groupID this App of the user running the application" + schema: + type: int + default: 0 - variable: fsGroup label: "fsGroup" description: "The group that should own ALL storage." @@ -810,6 +817,7 @@ questions: description: "OnRootMismatch" - value: "Always" description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -851,7 +859,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/resilio-sync/values.yaml b/charts/stable/resilio-sync/values.yaml index 3e477ca59b3..909843b5bc8 100644 --- a/charts/stable/resilio-sync/values.yaml +++ b/charts/stable/resilio-sync/values.yaml @@ -14,17 +14,11 @@ image: pullPolicy: IfNotPresent securityContext: - privileged: false - readOnlyRootFilesystem: false - allowPrivilegeEscalation: true runAsNonRoot: false podSecurityContext: runAsUser: 0 runAsGroup: 0 - fsGroup: 568 - supplementalGroups: [] - fsGroupChangePolicy: "OnRootMismatch" # -- environment variables. See [image docs](https://docs.linuxserver.io/images/docker-resilio-sync#environment-variables-e) for more details. # @default -- See below @@ -64,7 +58,6 @@ service: protocol: UDP targetPort: 55555 - # -- Configure persistence settings for the chart under this key. # @default -- See values.yaml persistence: diff --git a/charts/stable/sabnzbd/Chart.yaml b/charts/stable/sabnzbd/Chart.yaml index bab04b5b3e7..2aba07f6b81 100644 --- a/charts/stable/sabnzbd/Chart.yaml +++ b/charts/stable/sabnzbd/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "3.3.1" +appVersion: 3.3.1 dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.7 deprecated: false description: Free and easy binary newsreader home: https://github.com/truecharts/apps/tree/master/charts/incubator/sabnzbd @@ -20,4 +20,4 @@ name: sabnzbd sources: - https://sabnzbd.org/ type: application -version: 7.0.2 +version: 8.0.0 diff --git a/charts/stable/sabnzbd/SCALE/questions.yaml b/charts/stable/sabnzbd/SCALE/questions.yaml index c9d6560696c..9ab11bbd1e2 100644 --- a/charts/stable/sabnzbd/SCALE/questions.yaml +++ b/charts/stable/sabnzbd/SCALE/questions.yaml @@ -93,8 +93,6 @@ questions: default: "002" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -199,7 +197,6 @@ questions: max: 65535 default: 36045 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -549,8 +546,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext @@ -568,12 +563,12 @@ questions: label: "ReadOnly Root Filesystem" schema: type: boolean - default: false + default: true - variable: allowPrivilegeEscalation label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: @@ -624,6 +619,7 @@ questions: description: "OnRootMismatch" - value: "Always" description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -665,7 +661,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/sabnzbd/values.yaml b/charts/stable/sabnzbd/values.yaml index 55cc64169a0..bbb60f8285c 100644 --- a/charts/stable/sabnzbd/values.yaml +++ b/charts/stable/sabnzbd/values.yaml @@ -5,19 +5,6 @@ image: pullPolicy: IfNotPresent tag: v3.3.1@sha256:c2d6e775db5a75dbc37efb7a948ad520b7b69cfa288a0588a24a659c332b5baf -securityContext: - privileged: false - readOnlyRootFilesystem: false - allowPrivilegeEscalation: true - runAsNonRoot: true - -podSecurityContext: - runAsUser: 568 - runAsGroup: 568 - fsGroup: 568 - supplementalGroups: [] - fsGroupChangePolicy: "OnRootMismatch" - service: main: ports: diff --git a/charts/stable/ser2sock/Chart.yaml b/charts/stable/ser2sock/Chart.yaml index 96653661994..569d7f7aa64 100644 --- a/charts/stable/ser2sock/Chart.yaml +++ b/charts/stable/ser2sock/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "latest" +appVersion: latest dependencies: - name: common repository: https://truecharts.org - version: 7.0.14 + version: 8.0.7 description: Serial to Socket Redirector home: https://github.com/truechartsapps/tree/master/charts/incubator/ser2sock icon: https://i.imgur.com/GfZ7McO.png @@ -18,4 +18,4 @@ name: ser2sock sources: - https://github.com/nutechsoftware/ser2sock - https://github.com/tenstartups/ser2sock -version: 2.0.2 +version: 3.0.0 diff --git a/charts/stable/ser2sock/SCALE/questions.yaml b/charts/stable/ser2sock/SCALE/questions.yaml index 46acfc57bd0..b841c7a553e 100644 --- a/charts/stable/ser2sock/SCALE/questions.yaml +++ b/charts/stable/ser2sock/SCALE/questions.yaml @@ -106,8 +106,6 @@ questions: default: "{{ .Values.service.main.ports.main.port }}" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -212,7 +210,6 @@ questions: max: 65535 default: 36084 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -561,8 +558,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext @@ -580,12 +575,12 @@ questions: label: "ReadOnly Root Filesystem" schema: type: boolean - default: false + default: true - variable: allowPrivilegeEscalation label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: @@ -718,7 +713,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/ser2sock/values.yaml b/charts/stable/ser2sock/values.yaml index 823b429789d..49c665fde70 100644 --- a/charts/stable/ser2sock/values.yaml +++ b/charts/stable/ser2sock/values.yaml @@ -13,19 +13,6 @@ image: # -- image pull policy pullPolicy: Always -securityContext: - privileged: false - readOnlyRootFilesystem: false - allowPrivilegeEscalation: true - runAsNonRoot: true - -podSecurityContext: - runAsUser: 568 - runAsGroup: 568 - fsGroup: 568 - supplementalGroups: [] - fsGroupChangePolicy: "OnRootMismatch" - # -- environment variables. See [image docs](https://github.com/tenstartups/ser2sock) for more details. # @default -- See below env: @@ -48,7 +35,6 @@ service: protocol: TCP port: 10000 - # -- Configure persistence settings for the chart under this key. # @default -- See values.yaml persistence: diff --git a/charts/stable/sonarr/Chart.yaml b/charts/stable/sonarr/Chart.yaml index ef5281fbeeb..35f8d38b64c 100644 --- a/charts/stable/sonarr/Chart.yaml +++ b/charts/stable/sonarr/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "3.0.6.1265" +appVersion: 3.0.6.1265 dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.7 deprecated: false description: Smart PVR for newsgroup and bittorrent users home: https://github.com/truecharts/apps/tree/master/charts/stable/sonarr @@ -24,4 +24,4 @@ name: sonarr sources: - https://github.com/Sonarr/Sonarr type: application -version: 7.0.2 +version: 8.0.0 diff --git a/charts/stable/sonarr/SCALE/questions.yaml b/charts/stable/sonarr/SCALE/questions.yaml index 66571b34f96..6d09606426b 100644 --- a/charts/stable/sonarr/SCALE/questions.yaml +++ b/charts/stable/sonarr/SCALE/questions.yaml @@ -86,8 +86,6 @@ questions: default: "002" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -192,7 +190,6 @@ questions: max: 65535 default: 36017 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -541,8 +538,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext @@ -560,12 +555,12 @@ questions: label: "ReadOnly Root Filesystem" schema: type: boolean - default: false + default: true - variable: allowPrivilegeEscalation label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: @@ -616,6 +611,7 @@ questions: description: "OnRootMismatch" - value: "Always" description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -657,7 +653,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/sonarr/values.yaml b/charts/stable/sonarr/values.yaml index d6317733378..51a38d6ac37 100644 --- a/charts/stable/sonarr/values.yaml +++ b/charts/stable/sonarr/values.yaml @@ -5,19 +5,6 @@ image: pullPolicy: IfNotPresent tag: v3.0.6.1265@sha256:90ded1799623b6480cf7f5c894158aedad8395832740aae2e4e9d9048888b736 -securityContext: - privileged: false - readOnlyRootFilesystem: false - allowPrivilegeEscalation: true - runAsNonRoot: true - -podSecurityContext: - runAsUser: 568 - runAsGroup: 568 - fsGroup: 568 - supplementalGroups: [] - fsGroupChangePolicy: "OnRootMismatch" - service: main: ports: diff --git a/charts/stable/stash/Chart.yaml b/charts/stable/stash/Chart.yaml index 6cd55f2d522..5cbae52c0c3 100644 --- a/charts/stable/stash/Chart.yaml +++ b/charts/stable/stash/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "0.9.0" +appVersion: 0.9.0 dependencies: - name: common repository: https://truecharts.org - version: 7.0.14 + version: 8.0.7 description: An organizer for your porn, written in Go home: https://github.com/truechartsapps/tree/master/charts/incubator/stash icon: https://raw.githubusercontent.com/stashapp/website/master/images/stash.svg @@ -18,4 +18,4 @@ name: stash sources: - https://github.com/stashapp/stash - https://hub.docker.com/r/stashapp/stash -version: 2.0.2 +version: 3.0.0 diff --git a/charts/stable/stash/SCALE/questions.yaml b/charts/stable/stash/SCALE/questions.yaml index 4b10524c8e8..9fb72f93212 100644 --- a/charts/stable/stash/SCALE/questions.yaml +++ b/charts/stable/stash/SCALE/questions.yaml @@ -91,8 +91,6 @@ questions: default: "9999" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -197,7 +195,6 @@ questions: max: 65535 default: 36085 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -546,8 +543,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext @@ -565,18 +560,63 @@ questions: label: "ReadOnly Root Filesystem" schema: type: boolean - default: false + default: true - variable: allowPrivilegeEscalation label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: type: boolean default: false + - variable: podSecurityContext + group: "Security and Permissions" + label: "Pod Security Context" + schema: + type: dict + attrs: + - variable: runAsUser + label: "runAsUser" + description: "The UserID of the user running the application" + schema: + type: int + default: 0 + - variable: runAsGroup + label: "runAsGroup" + description: The groupID this App of the user running the application" + schema: + type: int + default: 0 + - variable: fsGroup + label: "fsGroup" + description: "The group that should own ALL storage." + schema: + type: int + default: 568 + - variable: supplementalGroups + label: "supplemental Groups" + schema: + type: list + default: [] + items: + - variable: supplementalGroupsEntry + label: "supplemental Group" + schema: + type: int + - variable: fsGroupChangePolicy + label: "When should we take ownership?" + schema: + type: string + default: "OnRootMismatch" + enum: + - value: "OnRootMismatch" + description: "OnRootMismatch" + - value: "Always" + description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -618,7 +658,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/stash/values.yaml b/charts/stable/stash/values.yaml index 475d29dbfa8..b87c6b8bfa1 100644 --- a/charts/stable/stash/values.yaml +++ b/charts/stable/stash/values.yaml @@ -13,6 +13,13 @@ image: # -- image pull policy pullPolicy: IfNotPresent +securityContext: + runAsNonRoot: false + +podSecurityContext: + runAsUser: 0 + runAsGroup: 0 + # -- environment variables. See more environment variables in the [stashapp documentation](https://raw.githubusercontent.com/stashapp/stash/master/docker/production/docker-compose.yml) # @default -- See below env: @@ -31,7 +38,6 @@ service: main: port: 9999 - # -- Configure persistence settings for the chart under this key. # @default -- See values.yaml persistence: diff --git a/charts/stable/syncthing/Chart.yaml b/charts/stable/syncthing/Chart.yaml index d758cab903c..595687686c0 100644 --- a/charts/stable/syncthing/Chart.yaml +++ b/charts/stable/syncthing/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "1.18.2" +appVersion: 1.18.2 dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.7 deprecated: false description: P2P file synchronization application home: https://github.com/truecharts/apps/tree/master/charts/stable/syncthing @@ -24,4 +24,4 @@ sources: - https://github.com/syncthing/syncthing - https://hub.docker.com/r/syncthing/syncthing type: application -version: 7.0.3 +version: 8.0.0 diff --git a/charts/stable/syncthing/SCALE/questions.yaml b/charts/stable/syncthing/SCALE/questions.yaml index da0693459bb..225054aa5f6 100644 --- a/charts/stable/syncthing/SCALE/questions.yaml +++ b/charts/stable/syncthing/SCALE/questions.yaml @@ -80,8 +80,6 @@ questions: - "definitions/timezone" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -450,7 +448,6 @@ questions: max: 65535 default: 21027 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -799,8 +796,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext @@ -818,12 +813,12 @@ questions: label: "ReadOnly Root Filesystem" schema: type: boolean - default: false + default: true - variable: allowPrivilegeEscalation label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: @@ -874,6 +869,7 @@ questions: description: "OnRootMismatch" - value: "Always" description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -915,7 +911,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/syncthing/values.yaml b/charts/stable/syncthing/values.yaml index fff10733e7d..7cd096dc766 100644 --- a/charts/stable/syncthing/values.yaml +++ b/charts/stable/syncthing/values.yaml @@ -5,19 +5,6 @@ image: pullPolicy: IfNotPresent tag: v1.18.2@sha256:780c4924c4739d707295bd74fd21a186a640bd71f15efc2fcbc9fb9b05162a0d -securityContext: - privileged: false - readOnlyRootFilesystem: false - allowPrivilegeEscalation: true - runAsNonRoot: true - -podSecurityContext: - runAsUser: 568 - runAsGroup: 568 - fsGroup: 568 - supplementalGroups: [] - fsGroupChangePolicy: "OnRootMismatch" - service: main: ports: diff --git a/charts/stable/tautulli/Chart.yaml b/charts/stable/tautulli/Chart.yaml index 1b4b11c9f27..54338df7fd4 100644 --- a/charts/stable/tautulli/Chart.yaml +++ b/charts/stable/tautulli/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "2.7.6" +appVersion: 2.7.6 dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.7 deprecated: false description: A Python based monitoring and tracking tool for Plex Media Server home: https://github.com/truecharts/apps/tree/master/charts/stable/tautulli @@ -23,4 +23,4 @@ name: tautulli sources: - https://github.com/Tautulli/Tautulli type: application -version: 7.0.2 +version: 8.0.0 diff --git a/charts/stable/tautulli/SCALE/questions.yaml b/charts/stable/tautulli/SCALE/questions.yaml index 00d30bc3f1e..8dda3b9faf5 100644 --- a/charts/stable/tautulli/SCALE/questions.yaml +++ b/charts/stable/tautulli/SCALE/questions.yaml @@ -86,8 +86,6 @@ questions: default: "002" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -192,7 +190,6 @@ questions: max: 65535 default: 36018 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -541,8 +538,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext @@ -560,12 +555,12 @@ questions: label: "ReadOnly Root Filesystem" schema: type: boolean - default: false + default: true - variable: allowPrivilegeEscalation label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: @@ -616,6 +611,7 @@ questions: description: "OnRootMismatch" - value: "Always" description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -657,7 +653,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/tautulli/values.yaml b/charts/stable/tautulli/values.yaml index f83bd32f65c..d25058069d7 100644 --- a/charts/stable/tautulli/values.yaml +++ b/charts/stable/tautulli/values.yaml @@ -5,19 +5,6 @@ image: pullPolicy: IfNotPresent tag: v2.7.6@sha256:228d77ccde9af6a33f94bd99c5c59aed093f2e35bd90e296dc0a51b62954395d -securityContext: - privileged: false - readOnlyRootFilesystem: false - allowPrivilegeEscalation: true - runAsNonRoot: true - -podSecurityContext: - runAsUser: 568 - runAsGroup: 568 - fsGroup: 568 - supplementalGroups: [] - fsGroupChangePolicy: "OnRootMismatch" - service: main: ports: diff --git a/charts/incubator/teamspeak3/CHANGELOG.md b/charts/stable/teamspeak3/CHANGELOG.md similarity index 100% rename from charts/incubator/teamspeak3/CHANGELOG.md rename to charts/stable/teamspeak3/CHANGELOG.md diff --git a/charts/incubator/portalexample/CONFIG.md b/charts/stable/teamspeak3/CONFIG.md similarity index 100% rename from charts/incubator/portalexample/CONFIG.md rename to charts/stable/teamspeak3/CONFIG.md diff --git a/charts/incubator/teamspeak3/Chart.yaml b/charts/stable/teamspeak3/Chart.yaml similarity index 87% rename from charts/incubator/teamspeak3/Chart.yaml rename to charts/stable/teamspeak3/Chart.yaml index 2bac74f591e..b6ed3bf8f4f 100644 --- a/charts/incubator/teamspeak3/Chart.yaml +++ b/charts/stable/teamspeak3/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "3.13.6" +appVersion: 3.13.6 dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.0 deprecated: false description: TeamSpeak is software for quality voice communication via the Internet. home: https://github.com/truecharts/apps/tree/master/charts/stable/teamspeak3 @@ -23,4 +23,4 @@ sources: - https://hub.docker.com/_/teamspeak - https://www.teamspeak.com/en/ type: application -version: 0.0.3 +version: 1.0.0 diff --git a/charts/incubator/teamspeak3/README.md b/charts/stable/teamspeak3/README.md similarity index 100% rename from charts/incubator/teamspeak3/README.md rename to charts/stable/teamspeak3/README.md diff --git a/charts/incubator/teamspeak3/SCALE/CHANGELOG.md b/charts/stable/teamspeak3/SCALE/CHANGELOG.md similarity index 100% rename from charts/incubator/teamspeak3/SCALE/CHANGELOG.md rename to charts/stable/teamspeak3/SCALE/CHANGELOG.md diff --git a/charts/incubator/teamspeak3/SCALE/item.yaml b/charts/stable/teamspeak3/SCALE/item.yaml similarity index 100% rename from charts/incubator/teamspeak3/SCALE/item.yaml rename to charts/stable/teamspeak3/SCALE/item.yaml diff --git a/charts/incubator/teamspeak3/SCALE/ix_values.yaml b/charts/stable/teamspeak3/SCALE/ix_values.yaml similarity index 100% rename from charts/incubator/teamspeak3/SCALE/ix_values.yaml rename to charts/stable/teamspeak3/SCALE/ix_values.yaml diff --git a/charts/incubator/teamspeak3/SCALE/questions.yaml b/charts/stable/teamspeak3/SCALE/questions.yaml similarity index 94% rename from charts/incubator/teamspeak3/SCALE/questions.yaml rename to charts/stable/teamspeak3/SCALE/questions.yaml index 2251771963d..fd4a2611c19 100644 --- a/charts/incubator/teamspeak3/SCALE/questions.yaml +++ b/charts/stable/teamspeak3/SCALE/questions.yaml @@ -580,7 +580,7 @@ questions: type: dict attrs: - variable: privileged - label: Privileged mode + label: "Privileged mode" schema: type: boolean default: false @@ -593,12 +593,58 @@ questions: label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: type: boolean default: false + + - variable: podSecurityContext + group: "Security and Permissions" + label: "Pod Security Context" + schema: + type: dict + attrs: + - variable: runAsUser + label: "runAsUser" + description: "The UserID of the user running the application" + schema: + type: int + default: 0 + - variable: runAsGroup + label: "runAsGroup" + description: The groupID this App of the user running the application" + schema: + type: int + default: 0 + - variable: fsGroup + label: "fsGroup" + description: "The group that should own ALL storage." + schema: + type: int + default: 568 + - variable: supplementalGroups + label: "supplemental Groups" + schema: + type: list + default: [] + items: + - variable: supplementalGroupsEntry + label: "supplemental Group" + schema: + type: int + - variable: fsGroupChangePolicy + label: "When should we take ownership?" + schema: + type: string + default: "OnRootMismatch" + enum: + - value: "OnRootMismatch" + description: "OnRootMismatch" + - value: "Always" + description: "Always" + - variable: resources group: "Resources and Devices" label: "" diff --git a/charts/incubator/teamspeak3/app-readme.md b/charts/stable/teamspeak3/app-readme.md similarity index 100% rename from charts/incubator/teamspeak3/app-readme.md rename to charts/stable/teamspeak3/app-readme.md diff --git a/charts/incubator/teamspeak3/helm-values.md b/charts/stable/teamspeak3/helm-values.md similarity index 100% rename from charts/incubator/teamspeak3/helm-values.md rename to charts/stable/teamspeak3/helm-values.md diff --git a/charts/incubator/teamspeak3/templates/common.yaml b/charts/stable/teamspeak3/templates/common.yaml similarity index 100% rename from charts/incubator/teamspeak3/templates/common.yaml rename to charts/stable/teamspeak3/templates/common.yaml diff --git a/charts/incubator/teamspeak3/values.yaml b/charts/stable/teamspeak3/values.yaml similarity index 86% rename from charts/incubator/teamspeak3/values.yaml rename to charts/stable/teamspeak3/values.yaml index a72c294a4b2..fdca3d60580 100644 --- a/charts/incubator/teamspeak3/values.yaml +++ b/charts/stable/teamspeak3/values.yaml @@ -5,6 +5,14 @@ image: pullPolicy: IfNotPresent tag: 3.13.6@sha256:a88d61887cbfa78012ce8bf69e6fad5988d853b7b72a9483000b1af8a6083ff8 +securityContext: + readOnlyRootFilesystem: false + runAsNonRoot: false + +podSecurityContext: + runAsUser: 0 + runAsGroup: 0 + # 9987 default voice # 10011 server query # 30033 file transport diff --git a/charts/stable/thelounge/Chart.yaml b/charts/stable/thelounge/Chart.yaml index 05747c347d4..af281497117 100644 --- a/charts/stable/thelounge/Chart.yaml +++ b/charts/stable/thelounge/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "4.2.0" +appVersion: 4.2.0 dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.7 description: The Lounge, modern web IRC client designed for self-hosting home: https://github.com/truecharts/apps/tree/master/charts/incubator/thelounge icon: https://avatars.githubusercontent.com/u/14336958?s=200&v=4 @@ -21,4 +21,4 @@ maintainers: name: thelounge sources: - https://github.com/thelounge/thelounge -version: 2.0.2 +version: 3.0.0 diff --git a/charts/stable/thelounge/SCALE/questions.yaml b/charts/stable/thelounge/SCALE/questions.yaml index 45d6d04ee63..6634458892a 100644 --- a/charts/stable/thelounge/SCALE/questions.yaml +++ b/charts/stable/thelounge/SCALE/questions.yaml @@ -92,8 +92,6 @@ questions: default: "002" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -548,8 +546,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext @@ -567,18 +563,63 @@ questions: label: "ReadOnly Root Filesystem" schema: type: boolean - default: false + default: true - variable: allowPrivilegeEscalation label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: type: boolean default: false + - variable: podSecurityContext + group: "Security and Permissions" + label: "Pod Security Context" + schema: + type: dict + attrs: + - variable: runAsUser + label: "runAsUser" + description: "The UserID of the user running the application" + schema: + type: int + default: 0 + - variable: runAsGroup + label: "runAsGroup" + description: The groupID this App of the user running the application" + schema: + type: int + default: 0 + - variable: fsGroup + label: "fsGroup" + description: "The group that should own ALL storage." + schema: + type: int + default: 568 + - variable: supplementalGroups + label: "supplemental Groups" + schema: + type: list + default: [] + items: + - variable: supplementalGroupsEntry + label: "supplemental Group" + schema: + type: int + - variable: fsGroupChangePolicy + label: "When should we take ownership?" + schema: + type: string + default: "OnRootMismatch" + enum: + - value: "OnRootMismatch" + description: "OnRootMismatch" + - value: "Always" + description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -620,7 +661,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/thelounge/values.yaml b/charts/stable/thelounge/values.yaml index 14e02c53d51..03cea39e46a 100644 --- a/charts/stable/thelounge/values.yaml +++ b/charts/stable/thelounge/values.yaml @@ -13,6 +13,13 @@ image: # -- image tag tag: v4.2.0@sha256:1f879027a346429012acdb46fbd133b1627585e29d8bbfd915936b79cc04324b +securityContext: + runAsNonRoot: false + +podSecurityContext: + runAsUser: 0 + runAsGroup: 0 + # -- environment variables. See [image docs](https://hub.docker.com/r/thelounge/thelounge/) for more details. # @default -- See below env: diff --git a/charts/stable/traefik/Chart.yaml b/charts/stable/traefik/Chart.yaml index 8ac289e5137..208d9174fbd 100644 --- a/charts/stable/traefik/Chart.yaml +++ b/charts/stable/traefik/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "2.5.3" +appVersion: 2.5.3 dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.7 deprecated: false description: Test App for Traefik home: https://github.com/truecharts/apps/tree/master/charts/stable/traefik @@ -22,4 +22,4 @@ sources: - https://github.com/traefik/traefik-helm-chart - https://traefik.io/ type: application -version: 8.0.4 +version: 9.0.0 diff --git a/charts/stable/traefik/SCALE/ix_values.yaml b/charts/stable/traefik/SCALE/ix_values.yaml index c718059c2d5..36666dd2c41 100644 --- a/charts/stable/traefik/SCALE/ix_values.yaml +++ b/charts/stable/traefik/SCALE/ix_values.yaml @@ -79,8 +79,6 @@ tlsOptions: - TLS_CHACHA20_POLY1305_SHA256 - - probes: # -- Liveness probe configuration # @default -- See below diff --git a/charts/stable/traefik/SCALE/questions.yaml b/charts/stable/traefik/SCALE/questions.yaml index 09dcc497697..88892d63fab 100644 --- a/charts/stable/traefik/SCALE/questions.yaml +++ b/charts/stable/traefik/SCALE/questions.yaml @@ -66,7 +66,6 @@ questions: description: "(Legacy) OnDelete: ignore .spec.template changes" # Include{controllerExpert} - - variable: env group: "Container Configuration" label: "Image Environment" @@ -282,7 +281,6 @@ questions: required: true default: "" - - variable: forwardAuth label: "forwardAuth" schema: @@ -517,9 +515,6 @@ questions: default: "" - - - - variable: service group: "Networking and Services" label: "Configure Service Entrypoint" @@ -993,7 +988,7 @@ questions: label: "runAsNonRoot" schema: type: boolean - default: false + default: true - variable: podSecurityContext group: "Security and Permissions" @@ -1040,7 +1035,6 @@ questions: - value: "Always" description: "Always" - - variable: resources group: "Resources and Devices" label: "" diff --git a/charts/stable/traefik/values.yaml b/charts/stable/traefik/values.yaml index 75e4639de1a..1bc8a874a7e 100644 --- a/charts/stable/traefik/values.yaml +++ b/charts/stable/traefik/values.yaml @@ -5,23 +5,6 @@ image: tag: v2.5.3@sha256:f40028d9771cb29a35392b4cbdd655625596a319b915061e306c503059d0b6f4 pullPolicy: IfNotPresent -# -- Set the container security context -# To run the container with ports below 1024 this will need to be adjust to run as root -securityContext: - capabilities: - drop: [ALL] - privileged: false - readOnlyRootFilesystem: true - allowPrivilegeEscalation: false - runAsNonRoot: false - -podSecurityContext: - runAsUser: 568 - runAsGroup: 568 - fsGroup: 568 - supplementalGroups: [] - fsGroupChangePolicy: "OnRootMismatch" - # -- Use ingressClass. Ignored if Traefik version < 2.3 / kubernetes < 1.18.x ingressClass: # true is not unit-testable yet, pending https://github.com/rancher/helm-unittest/pull/12 @@ -65,7 +48,6 @@ providers: # By default this Traefik service # pathOverride: "" - # -- Logs # https://docs.traefik.io/observability/logs/ logs: @@ -132,7 +114,6 @@ additionalArguments: - "--serverstransport.insecureskipverify=true" - "--providers.kubernetesingress.allowexternalnameservices=true" - # -- TLS Options to be created as TLSOption CRDs # https://doc.traefik.io/traefik/https/tls/#tls-options # Example: @@ -200,7 +181,6 @@ service: udp: enabled: false - probes: # -- Liveness probe configuration # @default -- See below @@ -212,7 +192,6 @@ probes: # @default -- "/" path: "/ping" - # -- Redainess probe configuration # @default -- See below readiness: @@ -223,7 +202,6 @@ probes: # @default -- "/" path: "/ping" - # -- Startup probe configuration # @default -- See below startup: @@ -234,7 +212,6 @@ probes: # @default -- "/" path: "/ping" - # -- Whether Role Based Access Control objects like roles and rolebindings should be created rbac: enabled: true @@ -283,7 +260,6 @@ rbac: - list - watch - # -- The service account the pods will use to interact with the Kubernetes API serviceAccount: enabled: true diff --git a/charts/stable/transmission/Chart.yaml b/charts/stable/transmission/Chart.yaml index d13c0c6b464..9df9934109a 100644 --- a/charts/stable/transmission/Chart.yaml +++ b/charts/stable/transmission/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "3.00" +appVersion: '3.00' dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.7 deprecated: false description: API Support for your favorite torrent trackers. home: https://github.com/truecharts/apps/tree/master/charts/stable/transmission @@ -25,4 +25,4 @@ sources: - https://github.com/transmission/transmission - https://hub.docker.com/r/linuxserver/transmission type: application -version: 7.0.2 +version: 8.0.0 diff --git a/charts/stable/transmission/SCALE/questions.yaml b/charts/stable/transmission/SCALE/questions.yaml index 76b08b2ddd0..bf08738a1b4 100644 --- a/charts/stable/transmission/SCALE/questions.yaml +++ b/charts/stable/transmission/SCALE/questions.yaml @@ -428,8 +428,6 @@ questions: default: false # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -679,7 +677,6 @@ questions: max: 65535 default: 36020 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -1028,8 +1025,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext @@ -1047,12 +1042,12 @@ questions: label: "ReadOnly Root Filesystem" schema: type: boolean - default: false + default: true - variable: allowPrivilegeEscalation label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: @@ -1103,6 +1098,7 @@ questions: description: "OnRootMismatch" - value: "Always" description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -1144,7 +1140,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/transmission/values.yaml b/charts/stable/transmission/values.yaml index 46fb692c067..145592ddcf6 100644 --- a/charts/stable/transmission/values.yaml +++ b/charts/stable/transmission/values.yaml @@ -5,19 +5,6 @@ image: pullPolicy: IfNotPresent tag: v3.00@sha256:355f4036c53c782df1957de0e16c63f4298f5b596ae5e621fea8f9ef02dd09e6 -securityContext: - privileged: false - readOnlyRootFilesystem: false - allowPrivilegeEscalation: true - runAsNonRoot: true - -podSecurityContext: - runAsUser: 568 - runAsGroup: 568 - fsGroup: 568 - supplementalGroups: [] - fsGroupChangePolicy: "OnRootMismatch" - service: main: ports: diff --git a/charts/stable/truecommand/Chart.yaml b/charts/stable/truecommand/Chart.yaml index 07ebe0097ab..5193070409c 100644 --- a/charts/stable/truecommand/Chart.yaml +++ b/charts/stable/truecommand/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "2.0.2" +appVersion: 2.0.2 dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.7 deprecated: false description: Aggregated management of TrueNAS devices home: https://github.com/truecharts/apps/tree/master/charts/incubator/truecommand @@ -22,4 +22,4 @@ name: truecommand sources: - https://hub.docker.com/r/ixsystems/truecommand type: application -version: 7.0.2 +version: 8.0.0 diff --git a/charts/stable/truecommand/SCALE/questions.yaml b/charts/stable/truecommand/SCALE/questions.yaml index 322270194ce..dd097dc034b 100644 --- a/charts/stable/truecommand/SCALE/questions.yaml +++ b/charts/stable/truecommand/SCALE/questions.yaml @@ -98,8 +98,6 @@ questions: default: "002" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -204,7 +202,6 @@ questions: max: 65535 default: 36044 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -554,8 +551,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext group: "Security and Permissions" @@ -577,12 +572,58 @@ questions: label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: type: boolean default: false + + - variable: podSecurityContext + group: "Security and Permissions" + label: "Pod Security Context" + schema: + type: dict + attrs: + - variable: runAsUser + label: "runAsUser" + description: "The UserID of the user running the application" + schema: + type: int + default: 0 + - variable: runAsGroup + label: "runAsGroup" + description: The groupID this App of the user running the application" + schema: + type: int + default: 0 + - variable: fsGroup + label: "fsGroup" + description: "The group that should own ALL storage." + schema: + type: int + default: 568 + - variable: supplementalGroups + label: "supplemental Groups" + schema: + type: list + default: [] + items: + - variable: supplementalGroupsEntry + label: "supplemental Group" + schema: + type: int + - variable: fsGroupChangePolicy + label: "When should we take ownership?" + schema: + type: string + default: "OnRootMismatch" + enum: + - value: "OnRootMismatch" + description: "OnRootMismatch" + - value: "Always" + description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -624,7 +665,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/truecommand/values.yaml b/charts/stable/truecommand/values.yaml index e762ec07c20..569bede9c3c 100644 --- a/charts/stable/truecommand/values.yaml +++ b/charts/stable/truecommand/values.yaml @@ -5,6 +5,14 @@ image: pullPolicy: IfNotPresent tag: v2.0.2@sha256:7b9ccdab38c82efd0a04e0bef8b99877c1efd25d88e319d1188fd3686ae29c22 +securityContext: + readOnlyRootFilesystem: false + runAsNonRoot: false + +podSecurityContext: + runAsUser: 0 + runAsGroup: 0 + service: main: ports: diff --git a/charts/stable/tvheadend/Chart.yaml b/charts/stable/tvheadend/Chart.yaml index 475313da1b6..d5cf2a52074 100644 --- a/charts/stable/tvheadend/Chart.yaml +++ b/charts/stable/tvheadend/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "63784405" +appVersion: '63784405' dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.7 deprecated: false description: TVheadend - a TV streaming server and digital video recorder home: https://github.com/truecharts/apps/tree/master/charts/incubator/tvheadend @@ -22,4 +22,4 @@ name: tvheadend sources: - https://github.com/tvheadend/tvheadend type: application -version: 8.0.2 +version: 9.0.0 diff --git a/charts/stable/tvheadend/SCALE/questions.yaml b/charts/stable/tvheadend/SCALE/questions.yaml index fb189dcad90..812ffc1b390 100644 --- a/charts/stable/tvheadend/SCALE/questions.yaml +++ b/charts/stable/tvheadend/SCALE/questions.yaml @@ -98,8 +98,6 @@ questions: default: "002" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -650,8 +648,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext group: "Security and Permissions" @@ -668,17 +664,63 @@ questions: label: "ReadOnly Root Filesystem" schema: type: boolean - default: false + default: true - variable: allowPrivilegeEscalation label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: type: boolean default: false + + - variable: podSecurityContext + group: "Security and Permissions" + label: "Pod Security Context" + schema: + type: dict + attrs: + - variable: runAsUser + label: "runAsUser" + description: "The UserID of the user running the application" + schema: + type: int + default: 0 + - variable: runAsGroup + label: "runAsGroup" + description: The groupID this App of the user running the application" + schema: + type: int + default: 0 + - variable: fsGroup + label: "fsGroup" + description: "The group that should own ALL storage." + schema: + type: int + default: 568 + - variable: supplementalGroups + label: "supplemental Groups" + schema: + type: list + default: [] + items: + - variable: supplementalGroupsEntry + label: "supplemental Group" + schema: + type: int + - variable: fsGroupChangePolicy + label: "When should we take ownership?" + schema: + type: string + default: "OnRootMismatch" + enum: + - value: "OnRootMismatch" + description: "OnRootMismatch" + - value: "Always" + description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -720,7 +762,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/tvheadend/values.yaml b/charts/stable/tvheadend/values.yaml index f78269f8408..dbe8d937234 100644 --- a/charts/stable/tvheadend/values.yaml +++ b/charts/stable/tvheadend/values.yaml @@ -5,6 +5,13 @@ image: pullPolicy: IfNotPresent tag: version-63784405@sha256:ae47a3f6a7d2d7efefb68087da7cbed786f801cb87c7c93b1e6b989c0021aefa +securityContext: + runAsNonRoot: false + +podSecurityContext: + runAsUser: 0 + runAsGroup: 0 + # See https://github.com/linuxserver/docker-tvheadend#parameters env: {} # PUID: 1000 diff --git a/charts/stable/unifi/Chart.yaml b/charts/stable/unifi/Chart.yaml index 3cc05cb1483..46c4dd551fc 100644 --- a/charts/stable/unifi/Chart.yaml +++ b/charts/stable/unifi/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "6.4.54" +appVersion: 6.4.54 dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.7 deprecated: false description: Ubiquiti Network's Unifi Controller home: https://github.com/truecharts/apps/tree/master/charts/incubator/unifi @@ -21,4 +21,4 @@ sources: - https://github.com/jacobalberty/unifi-docker - https://unifi-network.ui.com type: application -version: 7.0.3 +version: 8.0.0 diff --git a/charts/stable/unifi/SCALE/questions.yaml b/charts/stable/unifi/SCALE/questions.yaml index 54b3fbbec63..c5dab3d856d 100644 --- a/charts/stable/unifi/SCALE/questions.yaml +++ b/charts/stable/unifi/SCALE/questions.yaml @@ -98,8 +98,6 @@ questions: default: "002" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -633,7 +631,6 @@ questions: min: 9000 max: 65535 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -983,8 +980,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext group: "Security and Permissions" @@ -1001,17 +996,62 @@ questions: label: "ReadOnly Root Filesystem" schema: type: boolean - default: false + default: true - variable: allowPrivilegeEscalation label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: type: boolean - default: false + default: true + - variable: podSecurityContext + group: "Security and Permissions" + label: "Pod Security Context" + schema: + type: dict + attrs: + - variable: runAsUser + label: "runAsUser" + description: "The UserID of the user running the application" + schema: + type: int + default: 568 + - variable: runAsGroup + label: "runAsGroup" + description: The groupID this App of the user running the application" + schema: + type: int + default: 568 + - variable: fsGroup + label: "fsGroup" + description: "The group that should own ALL storage." + schema: + type: int + default: 568 + - variable: supplementalGroups + label: "supplemental Groups" + schema: + type: list + default: [] + items: + - variable: supplementalGroupsEntry + label: "supplemental Group" + schema: + type: int + - variable: fsGroupChangePolicy + label: "When should we take ownership?" + schema: + type: string + default: "OnRootMismatch" + enum: + - value: "OnRootMismatch" + description: "OnRootMismatch" + - value: "Always" + description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -1053,7 +1093,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/unpackerr/Chart.yaml b/charts/stable/unpackerr/Chart.yaml index 89ad274454e..d6f2150e755 100644 --- a/charts/stable/unpackerr/Chart.yaml +++ b/charts/stable/unpackerr/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "0.9.8" +appVersion: 0.9.8 dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.7 deprecated: false description: This application runs as a daemon on your download host. It checks for completed downloads and extracts them so Radarr, Lidarr, Sonarr, and Readarr may @@ -26,4 +26,4 @@ sources: - https://github.com/davidnewhall/unpackerr - https://hub.docker.com/r/golift/unpackerr type: application -version: 2.0.2 +version: 3.0.0 diff --git a/charts/stable/unpackerr/SCALE/ix_values.yaml b/charts/stable/unpackerr/SCALE/ix_values.yaml index d5ab762f2a8..bc63d3edbb2 100644 --- a/charts/stable/unpackerr/SCALE/ix_values.yaml +++ b/charts/stable/unpackerr/SCALE/ix_values.yaml @@ -24,8 +24,6 @@ probes: startup: enabled: false - - ## # Most other defaults are set in questions.yaml # For other options please refer to the wiki, default_values.yaml or the common library chart diff --git a/charts/stable/unpackerr/SCALE/questions.yaml b/charts/stable/unpackerr/SCALE/questions.yaml index 1cb2e11b790..5ecbfc2716f 100644 --- a/charts/stable/unpackerr/SCALE/questions.yaml +++ b/charts/stable/unpackerr/SCALE/questions.yaml @@ -64,9 +64,6 @@ questions: default: "002" # Include{containerConfig} - - - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -415,8 +412,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext @@ -434,12 +429,12 @@ questions: label: "ReadOnly Root Filesystem" schema: type: boolean - default: false + default: true - variable: allowPrivilegeEscalation label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: @@ -490,6 +485,7 @@ questions: description: "OnRootMismatch" - value: "Always" description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -531,7 +527,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/unpackerr/values.yaml b/charts/stable/unpackerr/values.yaml index 2b00f4ae281..74688a651f5 100644 --- a/charts/stable/unpackerr/values.yaml +++ b/charts/stable/unpackerr/values.yaml @@ -5,19 +5,6 @@ image: pullPolicy: IfNotPresent tag: v0.9.8@sha256:2bf65067fea86c36438b741bfea1cec69faeea02dd4811c0d58e12243a263b24 -securityContext: - privileged: false - readOnlyRootFilesystem: false - allowPrivilegeEscalation: true - runAsNonRoot: true - -podSecurityContext: - runAsUser: 568 - runAsGroup: 568 - fsGroup: 568 - supplementalGroups: [] - fsGroupChangePolicy: "OnRootMismatch" - service: main: enabled: false @@ -41,7 +28,6 @@ probes: startup: enabled: false - persistence: downloads: enabled: true diff --git a/charts/stable/vaultwarden/Chart.yaml b/charts/stable/vaultwarden/Chart.yaml index 369734b6bc3..7afd48a8423 100644 --- a/charts/stable/vaultwarden/Chart.yaml +++ b/charts/stable/vaultwarden/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "1.22.2" +appVersion: 1.22.2 dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.7 - condition: postgresql.enabled name: postgresql repository: https://truecharts.org/ @@ -31,4 +31,4 @@ name: vaultwarden sources: - https://github.com/dani-garcia/vaultwarden type: application -version: 8.0.6 +version: 9.0.0 diff --git a/charts/stable/vaultwarden/SCALE/questions.yaml b/charts/stable/vaultwarden/SCALE/questions.yaml index cbca53f6c70..93746b61779 100644 --- a/charts/stable/vaultwarden/SCALE/questions.yaml +++ b/charts/stable/vaultwarden/SCALE/questions.yaml @@ -381,9 +381,6 @@ questions: type: string default: "" - - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -585,7 +582,6 @@ questions: max: 65535 default: 36001 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -936,8 +932,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext @@ -955,12 +949,12 @@ questions: label: "ReadOnly Root Filesystem" schema: type: boolean - default: false + default: true - variable: allowPrivilegeEscalation label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: @@ -1011,6 +1005,7 @@ questions: description: "OnRootMismatch" - value: "Always" description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -1052,7 +1047,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/vaultwarden/values.yaml b/charts/stable/vaultwarden/values.yaml index cdec2950361..b866c7e559b 100644 --- a/charts/stable/vaultwarden/values.yaml +++ b/charts/stable/vaultwarden/values.yaml @@ -5,25 +5,11 @@ image: pullPolicy: IfNotPresent tag: v1.22.2@sha256:8693c057298731f507128a395395172d60093be9b299f6bf9e5c35512a74d457 -securityContext: - privileged: false - readOnlyRootFilesystem: false - allowPrivilegeEscalation: true - runAsNonRoot: true - -podSecurityContext: - runAsUser: 568 - runAsGroup: 568 - fsGroup: 568 - supplementalGroups: [] - fsGroupChangePolicy: "OnRootMismatch" - postgresqlImage: repository: bitnami/postgresql pullPolicy: IfNotPresent tag: 13.4.0@sha256:abfb7efd31afc36a8b16aa077bb9dd165c4f635412affef37c7859605fda762c - service: main: ports: diff --git a/charts/stable/xteve/Chart.yaml b/charts/stable/xteve/Chart.yaml index efd73617429..e62bcddb3ce 100644 --- a/charts/stable/xteve/Chart.yaml +++ b/charts/stable/xteve/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "2.2.0.200" +appVersion: 2.2.0.200 dependencies: - name: common repository: https://truecharts.org - version: 7.0.14 + version: 8.0.7 description: M3U Proxy for Plex DVR and Emby Live TV. home: https://github.com/truechartsapps/tree/master/charts/incubator/xteve icon: https://raw.githubusercontent.com/xteve-project/xTeVe/master/html/img/logo_b_880x200.jpg @@ -21,4 +21,4 @@ name: xteve sources: - https://github.com/xteve-project/xTeVe - https://github.com/k8s-at-home/container-images -version: 2.0.2 +version: 3.0.0 diff --git a/charts/stable/xteve/SCALE/questions.yaml b/charts/stable/xteve/SCALE/questions.yaml index 3f6f0de0143..a9a723ff1ce 100644 --- a/charts/stable/xteve/SCALE/questions.yaml +++ b/charts/stable/xteve/SCALE/questions.yaml @@ -86,8 +86,6 @@ questions: default: "002" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -192,7 +190,6 @@ questions: max: 65535 default: 36087 - - variable: serviceexpert group: "Networking and Services" label: "Show Expert Config" @@ -541,8 +538,6 @@ questions: schema: type: string - - # Include{ingressList} - variable: securityContext @@ -565,7 +560,7 @@ questions: label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: @@ -616,6 +611,7 @@ questions: description: "OnRootMismatch" - value: "Always" description: "Always" + - variable: resources group: "Resources and Devices" label: "" @@ -657,7 +653,6 @@ questions: default: "50Mi" valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$' - - variable: autoscaling group: "Resources and Devices" label: "(Advanced) Horizontal Pod Autoscaler" diff --git a/charts/stable/xteve/values.yaml b/charts/stable/xteve/values.yaml index 0d7b4bf30d7..e481df10af6 100644 --- a/charts/stable/xteve/values.yaml +++ b/charts/stable/xteve/values.yaml @@ -14,17 +14,7 @@ image: pullPolicy: IfNotPresent securityContext: - privileged: false readOnlyRootFilesystem: false - allowPrivilegeEscalation: true - runAsNonRoot: true - -podSecurityContext: - runAsUser: 568 - runAsGroup: 568 - fsGroup: 568 - supplementalGroups: [] - fsGroupChangePolicy: "OnRootMismatch" # -- environment variables. # @default -- See below @@ -38,7 +28,6 @@ service: main: port: 34400 - # -- Configure persistence settings for the chart under this key. # @default -- See values.yaml persistence: diff --git a/charts/stable/zwavejs2mqtt/Chart.yaml b/charts/stable/zwavejs2mqtt/Chart.yaml index 87d51dfae87..d16321755fb 100644 --- a/charts/stable/zwavejs2mqtt/Chart.yaml +++ b/charts/stable/zwavejs2mqtt/Chart.yaml @@ -1,9 +1,9 @@ apiVersion: v2 -appVersion: "5.6.0" +appVersion: 5.6.0 dependencies: - name: common - repository: https://truecharts.org/ - version: 7.0.14 + repository: https://truecharts.org + version: 8.0.7 deprecated: false description: Fully configurable Zwave to MQTT gateway and Control Panel using NodeJS and Vue @@ -27,4 +27,4 @@ sources: - https://github.com/zwave-js/zwavejs2mqtt - https://hub.docker.com/r/zwavejs/zwavejs2mqtt type: application -version: 7.0.3 +version: 8.0.0 diff --git a/charts/stable/zwavejs2mqtt/SCALE/questions.yaml b/charts/stable/zwavejs2mqtt/SCALE/questions.yaml index e80c9fbebfd..43582f233a1 100644 --- a/charts/stable/zwavejs2mqtt/SCALE/questions.yaml +++ b/charts/stable/zwavejs2mqtt/SCALE/questions.yaml @@ -80,8 +80,6 @@ questions: - "definitions/timezone" # Include{containerConfig} - - - variable: service group: "Networking and Services" label: "Configure Service(s)" @@ -631,11 +629,8 @@ questions: schema: type: string - - # Include{ingressList} - - variable: securityContext group: "Security and Permissions" label: "Security Context" @@ -656,7 +651,7 @@ questions: label: "Allow Privilege Escalation" schema: type: boolean - default: true + default: false - variable: runAsNonRoot label: "runAsNonRoot" schema: diff --git a/charts/stable/zwavejs2mqtt/values.yaml b/charts/stable/zwavejs2mqtt/values.yaml index d56119ef42f..80e57db1dcc 100644 --- a/charts/stable/zwavejs2mqtt/values.yaml +++ b/charts/stable/zwavejs2mqtt/values.yaml @@ -8,18 +8,7 @@ image: tag: v5.6.0@sha256:469de8c0d224549bb051263603276a78a3c9281579d21ac3f71611cc17281457 securityContext: - privileged: false readOnlyRootFilesystem: false - allowPrivilegeEscalation: true - runAsNonRoot: true - -# 5=tty 20=dialout 24=cdrom -podSecurityContext: - runAsUser: 568 - runAsGroup: 568 - fsGroup: 568 - supplementalGroups: [5, 20, 24] - fsGroupChangePolicy: "OnRootMismatch" # # See more environment variables in the zwavejs2mqtt documentation # https://zwave-js.github.io/zwavejs2mqtt/#/guide/env-vars @@ -84,10 +73,6 @@ service: port: 3000 protocol: TCP -# Privileged may be required if USB controller is accessed directly through the host machine -# securityContext: -# privileged: true - persistence: config: enabled: true @@ -96,7 +81,6 @@ persistence: accessMode: ReadWriteOnce size: "100Gi" - # affinity: # nodeAffinity: # requiredDuringSchedulingIgnoredDuringExecution: diff --git a/templates/app/values.yaml b/templates/app/values.yaml index 777a5bff06b..c7b5606e779 100644 --- a/templates/app/values.yaml +++ b/templates/app/values.yaml @@ -10,19 +10,6 @@ image: pullPolicy: IfNotPresent tag: 1.0.0@sha256:42 -securityContext: - privileged: false - readOnlyRootFilesystem: false - allowPrivilegeEscalation: true - runAsNonRoot: true - -podSecurityContext: - runAsUser: 568 - runAsGroup: 568 - fsGroup: 568 - supplementalGroups: [] - fsGroupChangePolicy: "OnRootMismatch" - # See more environment variables in the ${CHARTNAME} documentation # https://${CHARTNAME}.org/docs env: {}