From d33dc097e9e02518e860f9a05fc4762bd44f2010 Mon Sep 17 00:00:00 2001 From: Stavros Kois <47820033+stavros-k@users.noreply.github.com> Date: Mon, 18 Oct 2021 23:14:40 +0300 Subject: [PATCH] fix(Firefly III): Change default permissions (#1170) --- charts/stable/fireflyiii/SCALE/questions.yaml | 6 +++--- charts/stable/fireflyiii/values.yaml | 5 +++++ 2 files changed, 8 insertions(+), 3 deletions(-) diff --git a/charts/stable/fireflyiii/SCALE/questions.yaml b/charts/stable/fireflyiii/SCALE/questions.yaml index d9983ffbdc0..76ce5f1a189 100644 --- a/charts/stable/fireflyiii/SCALE/questions.yaml +++ b/charts/stable/fireflyiii/SCALE/questions.yaml @@ -376,7 +376,7 @@ questions: label: "runAsNonRoot" schema: type: boolean - default: true + default: false - variable: podSecurityContext group: "Security and Permissions" @@ -389,13 +389,13 @@ questions: description: "The UserID of the user running the application" schema: type: int - default: 568 + default: 0 - variable: runAsGroup label: "runAsGroup" description: The groupID this App of the user running the application" schema: type: int - default: 568 + default: 0 - variable: fsGroup label: "fsGroup" description: "The group that should own ALL storage." diff --git a/charts/stable/fireflyiii/values.yaml b/charts/stable/fireflyiii/values.yaml index fe12d8a9a6a..a75f0928250 100644 --- a/charts/stable/fireflyiii/values.yaml +++ b/charts/stable/fireflyiii/values.yaml @@ -7,6 +7,11 @@ image: securityContext: readOnlyRootFilesystem: false + runAsNonRoot: false + +podSecurityContext: + runAsUser: 0 + runAsGroup: 0 service: main: