From fe6b1ca1eca8b2033ac9d205acde5ffda3d41584 Mon Sep 17 00:00:00 2001
From: Kjeld Schouten <info@kjeldschouten.nl>
Date: Thu, 8 May 2025 00:39:32 +0200
Subject: [PATCH] ark unhardening

---
 charts/stable/arksurvivalevolved/Chart.yaml             | 2 +-
 charts/stable/arksurvivalevolved/values.yaml            | 6 +++++-
 clusters/main/kubernetes/apps/ark/app/helm-release.yaml | 2 +-
 3 files changed, 7 insertions(+), 3 deletions(-)

diff --git a/charts/stable/arksurvivalevolved/Chart.yaml b/charts/stable/arksurvivalevolved/Chart.yaml
index 248539b0565..52cd2839423 100644
--- a/charts/stable/arksurvivalevolved/Chart.yaml
+++ b/charts/stable/arksurvivalevolved/Chart.yaml
@@ -36,4 +36,4 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/stable/arksurvivalevolved
   - https://hub.docker.com/r/drpsychick/arkserver
 type: application
-version: 10.0.14
+version: 10.0.15
diff --git a/charts/stable/arksurvivalevolved/values.yaml b/charts/stable/arksurvivalevolved/values.yaml
index 24010e8f5bf..ae56275be1e 100644
--- a/charts/stable/arksurvivalevolved/values.yaml
+++ b/charts/stable/arksurvivalevolved/values.yaml
@@ -5,9 +5,13 @@ securityContext:
   pod:
     fsGroup: 1001
   container:
+    capabilities:
+      add: ["AUDIT_WRITE", "CHOWN", "FOWNER", "DAC_OVERRIDE", "SETGID", "SETUID"]
     runAsUser: 1001
     runAsGroup: 1001
-
+    runAsNonRoot: false
+    readOnlyRootFilesystem: false
+    allowPrivilegeEscalation: true
 service:
   main:
     enabled: true
diff --git a/clusters/main/kubernetes/apps/ark/app/helm-release.yaml b/clusters/main/kubernetes/apps/ark/app/helm-release.yaml
index fc95fd956ef..59bfd6891e9 100644
--- a/clusters/main/kubernetes/apps/ark/app/helm-release.yaml
+++ b/clusters/main/kubernetes/apps/ark/app/helm-release.yaml
@@ -10,7 +10,7 @@ spec:
   chart:
     spec:
       chart: arksurvivalevolved
-      version: 10.0.14
+      version: 10.0.15
       sourceRef:
         kind: HelmRepository
         name: truecharts