fix(snipe-it): permissions (#2267)

* fix(snipe-it): permissions

* redis

* redis

* redis

* check persm

* ls

* cleanup

* 1000:50

* fs0

* fs 1000

* 0:1000

* 0:50

* 0:50:50
This commit is contained in:
Stavros Kois
2022-03-24 17:08:37 +02:00
committed by GitHub
parent 96d6f942c6
commit d9ceb37e52
3 changed files with 61 additions and 76 deletions
+1 -1
View File
@@ -29,7 +29,7 @@ name: snipe-it
sources: sources:
- https://snipeitapp.com/ - https://snipeitapp.com/
- https://hub.docker.com/r/linuxserver/ - https://hub.docker.com/r/linuxserver/
version: 2.0.0 version: 2.0.1
annotations: annotations:
truecharts.org/catagories: | truecharts.org/catagories: |
- management - management
+56 -19
View File
@@ -282,25 +282,6 @@ questions:
default: false default: false
show_subquestions_if: true show_subquestions_if: true
subquestions: subquestions:
- variable: LOG
label: "LOG"
description: "Whether to use a single log file, or multiple date-based log files for your app error logs."
schema:
type: string
default: "daily"
required: true
enum:
- value: "single"
description: "Single File"
- value: "daily"
description: "Daily Files"
- variable: APP_LOG_MAX_FILES
label: "APP_LOG_MAX_FILES"
description: "Max number of daily app log files to retain."
schema:
type: int
default: 10
required: true
- variable: ALLOW_IFRAMING - variable: ALLOW_IFRAMING
label: "ALLOW_IFRAMING" label: "ALLOW_IFRAMING"
description: "Set this to true if you need to run Snipe-IT within an iframe." description: "Set this to true if you need to run Snipe-IT within an iframe."
@@ -542,6 +523,62 @@ questions:
schema: schema:
type: string type: string
default: "" default: ""
- variable: loggingsettings
label: "Logging Settings"
schema:
type: boolean
default: false
show_subquestions_if: true
subquestions:
- variable: LOG
label: "LOG"
description: "Whether to use a single log file, or multiple date-based log files for your app error logs."
schema:
type: string
default: "daily"
required: true
enum:
- value: "single"
description: "Single File"
- value: "daily"
description: "Daily Files"
- variable: APP_LOG_MAX_FILES
label: "APP_LOG_MAX_FILES"
description: "Max number of daily app log files to retain."
schema:
type: int
default: 10
required: true
- variable: APP_DEBUG
label: "APP_DEBUG"
description: "Enables App Debug."
schema:
type: boolean
default: false
- variable: APP_LOG_LEVEL
label: "APP_LOG_LEVEL"
description: "Laravel will log all levels greater than or equal to the specified severity."
schema:
type: string
default: "error"
required: true
enum:
- value: "debug"
description: "debug"
- value: "info"
description: "info"
- value: "notice"
description: "notice"
- value: "warning"
description: "warning"
- value: "error"
description: "error"
- value: "critical"
description: "critical"
- value: "alert"
description: "alert"
- value: "emergency"
description: "emergency"
# Include{containerConfig} # Include{containerConfig}
- variable: service - variable: service
+4 -56
View File
@@ -9,22 +9,22 @@ securityContext:
podSecurityContext: podSecurityContext:
runAsUser: 0 runAsUser: 0
runAsGroup: 0 runAsGroup: 50
fsGroup: 50
env: env:
APP_ENV: "production" APP_ENV: "production"
APP_DEBUG: false
DB_CONNECTION: "mysql" DB_CONNECTION: "mysql"
DB_USERNAME: "{{ .Values.mariadb.mariadbUsername }}" DB_USERNAME: "{{ .Values.mariadb.mariadbUsername }}"
DB_DATABASE: "{{ .Values.mariadb.mariadbDatabase }}" DB_DATABASE: "{{ .Values.mariadb.mariadbDatabase }}"
DB_PORT: "3306" DB_PORT: "3306"
REDIS_PORT: "6379" REDIS_PORT: "6379"
SESSION_DRIVER: "redis" SESSION_DRIVER: "redis"
CACHE_DRIVER: "redis"
QUEUE_DRIVER: "redis"
APP_TIMEZONE: "{{ .Values.TZ }}" APP_TIMEZONE: "{{ .Values.TZ }}"
FILESYSTEM_DISK: "local" FILESYSTEM_DISK: "local"
# User Defined # User Defined
APP_DEBUG: true
APP_LOG_LEVEL: "debug"
APP_URL: "http://localhost:80" APP_URL: "http://localhost:80"
APP_LOCALE: "en" APP_LOCALE: "en"
MAX_RESULTS: 500 MAX_RESULTS: 500
@@ -84,55 +84,3 @@ mariadb:
redis: redis:
enabled: true enabled: true
existingSecret: "rediscreds" existingSecret: "rediscreds"
upgradeContainers:
migratedb:
image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
volumeMounts:
- name: logs
mountPath: "/var/www/html/storage/logs"
env:
- name: APP_ENV
value: "production"
- name: REDIS_PORT
value: "6379"
- name: SESSION_DRIVER
value: "redis"
- name: QUEUE_DRIVER
value: "redis"
- name: APP_ENV
value: "redis"
- name: DB_CONNECTION
value: "mysql"
- name: DB_PORT
value: "3306"
- name: DB_USERNAME
value: "{{ .Values.mariadb.mariadbUsername }}"
- name: DB_DATABASE
value: "{{ .Values.mariadb.mariadbDatabase }}"
- name: DB_HOST
valueFrom:
secretKeyRef:
name: mariadbcreds
key: plainhost
- name: DB_PASSWORD
valueFrom:
secretKeyRef:
name: mariadbcreds
key: mariadb-password
- name: REDIS_HOST
valueFrom:
secretKeyRef:
name: rediscreds
key: plainhost
- name: REDIS_PASSWORD
valueFrom:
secretKeyRef:
name: rediscreds
key: redis-password
- name: APP_KEY
valueFrom:
secretKeyRef:
name: snipeit-secrets
key: APP_KEY
command: ["php", "artisan", "migrate"]