diff --git a/charts/stable/rsshub/Chart.yaml b/charts/stable/rsshub/Chart.yaml index c078ac4e687..604800f57b6 100644 --- a/charts/stable/rsshub/Chart.yaml +++ b/charts/stable/rsshub/Chart.yaml @@ -1,7 +1,7 @@ apiVersion: v2 kubeVersion: ">=1.16.0-0" name: rsshub -version: 3.0.9 +version: 3.0.10 appVersion: "latest" description: RSSHub can generate RSS feeds from pretty much everything type: application diff --git a/charts/stable/rsshub/questions.yaml b/charts/stable/rsshub/questions.yaml index cbe732adc24..36e4461caab 100644 --- a/charts/stable/rsshub/questions.yaml +++ b/charts/stable/rsshub/questions.yaml @@ -282,7 +282,7 @@ questions: label: "ReadOnly Root Filesystem" schema: type: boolean - default: true + default: false - variable: allowPrivilegeEscalation label: "Allow Privilege Escalation" schema: @@ -292,7 +292,7 @@ questions: label: "runAsNonRoot" schema: type: boolean - default: true + default: false # Include{securityContextAdvanced} - variable: podSecurityContext @@ -307,13 +307,13 @@ questions: description: "The UserID of the user running the application" schema: type: int - default: 568 + default: 0 - variable: runAsGroup label: "runAsGroup" description: "The groupID this App of the user running the application" schema: type: int - default: 568 + default: 0 - variable: fsGroup label: "fsGroup" description: "The group that should own ALL storage." diff --git a/charts/stable/rsshub/values.yaml b/charts/stable/rsshub/values.yaml index 2e0613f6411..2bd80a9cda9 100644 --- a/charts/stable/rsshub/values.yaml +++ b/charts/stable/rsshub/values.yaml @@ -7,6 +7,14 @@ browserlessImage: repository: tccr.io/truecharts/browserless-chrome tag: v1.53.0-chrome@sha256:bba7c84a5c8c3c2b9518d8543f08b3669eeeda16837af4dc4c8065b7d87be08e +securityContext: + runAsNonRoot: false + readOnlyRootFilesystem: false + +podSecurityContext: + runAsUser: 0 + runAsGroup: 0 + secretEnv: HTTP_BASIC_AUTH_NAME: "" HTTP_BASIC_AUTH_PASS: ""