(fix) patch some mistakes in HomeAssistant and run it as root (#1129)
This commit is contained in:
parent
c2ee1066cf
commit
1640f5f743
|
@ -29,4 +29,4 @@ sources:
|
||||||
- https://github.com/home-assistant/home-assistant
|
- https://github.com/home-assistant/home-assistant
|
||||||
- https://github.com/cdr/code-server
|
- https://github.com/cdr/code-server
|
||||||
type: application
|
type: application
|
||||||
version: 8.1.0
|
version: 8.1.1
|
||||||
|
|
|
@ -26,6 +26,12 @@ postgresql:
|
||||||
enabled: true
|
enabled: true
|
||||||
postgresqlUsername: home-assistant
|
postgresqlUsername: home-assistant
|
||||||
postgresqlDatabase: home-assistant
|
postgresqlDatabase: home-assistant
|
||||||
|
existingSecret: "dbcreds"
|
||||||
|
persistence:
|
||||||
|
db:
|
||||||
|
storageClass: "SCALE-ZFS"
|
||||||
|
dbbackups:
|
||||||
|
storageClass: "SCALE-ZFS"
|
||||||
|
|
||||||
##
|
##
|
||||||
# Most other defaults are set in questions.yaml
|
# Most other defaults are set in questions.yaml
|
||||||
|
|
|
@ -227,18 +227,6 @@ questions:
|
||||||
schema:
|
schema:
|
||||||
type: dict
|
type: dict
|
||||||
attrs:
|
attrs:
|
||||||
- variable: varrun
|
|
||||||
label: "varrun override for S6 Readonly Root"
|
|
||||||
schema:
|
|
||||||
type: dict
|
|
||||||
hidden: true
|
|
||||||
attrs:
|
|
||||||
- variable: enabled
|
|
||||||
label: ""
|
|
||||||
schema:
|
|
||||||
type: boolean
|
|
||||||
default: true
|
|
||||||
hidden: true
|
|
||||||
- variable: config
|
- variable: config
|
||||||
label: "App Config Storage"
|
label: "App Config Storage"
|
||||||
description: "Stores the Application Configuration."
|
description: "Stores the Application Configuration."
|
||||||
|
@ -387,7 +375,7 @@ questions:
|
||||||
label: "ReadOnly Root Filesystem"
|
label: "ReadOnly Root Filesystem"
|
||||||
schema:
|
schema:
|
||||||
type: boolean
|
type: boolean
|
||||||
default: true
|
default: false
|
||||||
- variable: allowPrivilegeEscalation
|
- variable: allowPrivilegeEscalation
|
||||||
label: "Allow Privilege Escalation"
|
label: "Allow Privilege Escalation"
|
||||||
schema:
|
schema:
|
||||||
|
@ -397,7 +385,7 @@ questions:
|
||||||
label: "runAsNonRoot"
|
label: "runAsNonRoot"
|
||||||
schema:
|
schema:
|
||||||
type: boolean
|
type: boolean
|
||||||
default: true
|
default: false
|
||||||
|
|
||||||
- variable: podSecurityContext
|
- variable: podSecurityContext
|
||||||
group: "Security and Permissions"
|
group: "Security and Permissions"
|
||||||
|
@ -410,13 +398,13 @@ questions:
|
||||||
description: "The UserID of the user running the application"
|
description: "The UserID of the user running the application"
|
||||||
schema:
|
schema:
|
||||||
type: int
|
type: int
|
||||||
default: 568
|
default: 0
|
||||||
- variable: runAsGroup
|
- variable: runAsGroup
|
||||||
label: "runAsGroup"
|
label: "runAsGroup"
|
||||||
description: The groupID this App of the user running the application"
|
description: The groupID this App of the user running the application"
|
||||||
schema:
|
schema:
|
||||||
type: int
|
type: int
|
||||||
default: 568
|
default: 0
|
||||||
- variable: fsGroup
|
- variable: fsGroup
|
||||||
label: "fsGroup"
|
label: "fsGroup"
|
||||||
description: "The group that should own ALL storage."
|
description: "The group that should own ALL storage."
|
||||||
|
|
|
@ -5,8 +5,16 @@ image:
|
||||||
pullPolicy: IfNotPresent
|
pullPolicy: IfNotPresent
|
||||||
tag: v2021.10.4@sha256:6f5892e307edd0b135f4ccab1ecee70518e0418b26e6264c23c67d1982eece86
|
tag: v2021.10.4@sha256:6f5892e307edd0b135f4ccab1ecee70518e0418b26e6264c23c67d1982eece86
|
||||||
|
|
||||||
env: {}
|
env:
|
||||||
# TZ:
|
PUID: 568
|
||||||
|
|
||||||
|
securityContext:
|
||||||
|
readOnlyRootFilesystem: false
|
||||||
|
runAsNonRoot: false
|
||||||
|
|
||||||
|
podSecurityContext:
|
||||||
|
runAsUser: 0
|
||||||
|
runAsGroup: 0
|
||||||
|
|
||||||
service:
|
service:
|
||||||
main:
|
main:
|
||||||
|
@ -16,7 +24,7 @@ service:
|
||||||
|
|
||||||
initContainers:
|
initContainers:
|
||||||
init-db:
|
init-db:
|
||||||
image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
|
image: "{{ .Values.alpineImage.repository }}:{{ .Values.alpineImage.tag }}"
|
||||||
command: ["/config/init/init.sh"]
|
command: ["/config/init/init.sh"]
|
||||||
volumeMounts:
|
volumeMounts:
|
||||||
- name: init
|
- name: init
|
||||||
|
@ -51,8 +59,6 @@ persistence:
|
||||||
type: pvc
|
type: pvc
|
||||||
accessMode: ReadWriteOnce
|
accessMode: ReadWriteOnce
|
||||||
size: "100Gi"
|
size: "100Gi"
|
||||||
varrun:
|
|
||||||
enabled: true
|
|
||||||
|
|
||||||
# -- Enable and configure postgresql database subchart under this key.
|
# -- Enable and configure postgresql database subchart under this key.
|
||||||
# For more options see [postgresql chart documentation](https://github.com/bitnami/charts/tree/master/bitnami/postgresql)
|
# For more options see [postgresql chart documentation](https://github.com/bitnami/charts/tree/master/bitnami/postgresql)
|
||||||
|
|
Loading…
Reference in New Issue