(fix) correct Unifi permissions
This commit is contained in:
@@ -21,4 +21,4 @@ sources:
|
|||||||
- https://github.com/jacobalberty/unifi-docker
|
- https://github.com/jacobalberty/unifi-docker
|
||||||
- https://unifi-network.ui.com
|
- https://unifi-network.ui.com
|
||||||
type: application
|
type: application
|
||||||
version: 8.0.1
|
version: 8.0.2
|
||||||
|
|||||||
@@ -996,7 +996,7 @@ questions:
|
|||||||
label: "ReadOnly Root Filesystem"
|
label: "ReadOnly Root Filesystem"
|
||||||
schema:
|
schema:
|
||||||
type: boolean
|
type: boolean
|
||||||
default: true
|
default: false
|
||||||
- variable: allowPrivilegeEscalation
|
- variable: allowPrivilegeEscalation
|
||||||
label: "Allow Privilege Escalation"
|
label: "Allow Privilege Escalation"
|
||||||
schema:
|
schema:
|
||||||
@@ -1006,7 +1006,7 @@ questions:
|
|||||||
label: "runAsNonRoot"
|
label: "runAsNonRoot"
|
||||||
schema:
|
schema:
|
||||||
type: boolean
|
type: boolean
|
||||||
default: true
|
default: false
|
||||||
- variable: podSecurityContext
|
- variable: podSecurityContext
|
||||||
group: "Security and Permissions"
|
group: "Security and Permissions"
|
||||||
label: "Pod Security Context"
|
label: "Pod Security Context"
|
||||||
@@ -1018,13 +1018,13 @@ questions:
|
|||||||
description: "The UserID of the user running the application"
|
description: "The UserID of the user running the application"
|
||||||
schema:
|
schema:
|
||||||
type: int
|
type: int
|
||||||
default: 568
|
default: 0
|
||||||
- variable: runAsGroup
|
- variable: runAsGroup
|
||||||
label: "runAsGroup"
|
label: "runAsGroup"
|
||||||
description: The groupID this App of the user running the application"
|
description: The groupID this App of the user running the application"
|
||||||
schema:
|
schema:
|
||||||
type: int
|
type: int
|
||||||
default: 568
|
default: 0
|
||||||
- variable: fsGroup
|
- variable: fsGroup
|
||||||
label: "fsGroup"
|
label: "fsGroup"
|
||||||
description: "The group that should own ALL storage."
|
description: "The group that should own ALL storage."
|
||||||
|
|||||||
@@ -54,6 +54,14 @@ service:
|
|||||||
targetPort: 8843
|
targetPort: 8843
|
||||||
protocol: HTTPS
|
protocol: HTTPS
|
||||||
|
|
||||||
|
securityContext:
|
||||||
|
readOnlyRootFilesystem: false
|
||||||
|
runAsNonRoot: false
|
||||||
|
|
||||||
|
podSecurityContext:
|
||||||
|
runAsGroup: 0
|
||||||
|
runAsUser: 0
|
||||||
|
|
||||||
env:
|
env:
|
||||||
# TZ:
|
# TZ:
|
||||||
PUID: "568"
|
PUID: "568"
|
||||||
|
|||||||
Reference in New Issue
Block a user