(fix) patch some mistakes in HomeAssistant and run it as root (#1129)

This commit is contained in:
Kjeld Schouten-Lebbing 2021-10-13 12:33:41 +02:00 committed by GitHub
parent c2ee1066cf
commit 1640f5f743
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
4 changed files with 22 additions and 22 deletions

View File

@ -29,4 +29,4 @@ sources:
- https://github.com/home-assistant/home-assistant - https://github.com/home-assistant/home-assistant
- https://github.com/cdr/code-server - https://github.com/cdr/code-server
type: application type: application
version: 8.1.0 version: 8.1.1

View File

@ -26,6 +26,12 @@ postgresql:
enabled: true enabled: true
postgresqlUsername: home-assistant postgresqlUsername: home-assistant
postgresqlDatabase: home-assistant postgresqlDatabase: home-assistant
existingSecret: "dbcreds"
persistence:
db:
storageClass: "SCALE-ZFS"
dbbackups:
storageClass: "SCALE-ZFS"
## ##
# Most other defaults are set in questions.yaml # Most other defaults are set in questions.yaml

View File

@ -227,18 +227,6 @@ questions:
schema: schema:
type: dict type: dict
attrs: attrs:
- variable: varrun
label: "varrun override for S6 Readonly Root"
schema:
type: dict
hidden: true
attrs:
- variable: enabled
label: ""
schema:
type: boolean
default: true
hidden: true
- variable: config - variable: config
label: "App Config Storage" label: "App Config Storage"
description: "Stores the Application Configuration." description: "Stores the Application Configuration."
@ -387,7 +375,7 @@ questions:
label: "ReadOnly Root Filesystem" label: "ReadOnly Root Filesystem"
schema: schema:
type: boolean type: boolean
default: true default: false
- variable: allowPrivilegeEscalation - variable: allowPrivilegeEscalation
label: "Allow Privilege Escalation" label: "Allow Privilege Escalation"
schema: schema:
@ -397,7 +385,7 @@ questions:
label: "runAsNonRoot" label: "runAsNonRoot"
schema: schema:
type: boolean type: boolean
default: true default: false
- variable: podSecurityContext - variable: podSecurityContext
group: "Security and Permissions" group: "Security and Permissions"
@ -410,13 +398,13 @@ questions:
description: "The UserID of the user running the application" description: "The UserID of the user running the application"
schema: schema:
type: int type: int
default: 568 default: 0
- variable: runAsGroup - variable: runAsGroup
label: "runAsGroup" label: "runAsGroup"
description: The groupID this App of the user running the application" description: The groupID this App of the user running the application"
schema: schema:
type: int type: int
default: 568 default: 0
- variable: fsGroup - variable: fsGroup
label: "fsGroup" label: "fsGroup"
description: "The group that should own ALL storage." description: "The group that should own ALL storage."

View File

@ -5,8 +5,16 @@ image:
pullPolicy: IfNotPresent pullPolicy: IfNotPresent
tag: v2021.10.4@sha256:6f5892e307edd0b135f4ccab1ecee70518e0418b26e6264c23c67d1982eece86 tag: v2021.10.4@sha256:6f5892e307edd0b135f4ccab1ecee70518e0418b26e6264c23c67d1982eece86
env: {} env:
# TZ: PUID: 568
securityContext:
readOnlyRootFilesystem: false
runAsNonRoot: false
podSecurityContext:
runAsUser: 0
runAsGroup: 0
service: service:
main: main:
@ -16,7 +24,7 @@ service:
initContainers: initContainers:
init-db: init-db:
image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}" image: "{{ .Values.alpineImage.repository }}:{{ .Values.alpineImage.tag }}"
command: ["/config/init/init.sh"] command: ["/config/init/init.sh"]
volumeMounts: volumeMounts:
- name: init - name: init
@ -51,8 +59,6 @@ persistence:
type: pvc type: pvc
accessMode: ReadWriteOnce accessMode: ReadWriteOnce
size: "100Gi" size: "100Gi"
varrun:
enabled: true
# -- Enable and configure postgresql database subchart under this key. # -- Enable and configure postgresql database subchart under this key.
# For more options see [postgresql chart documentation](https://github.com/bitnami/charts/tree/master/bitnami/postgresql) # For more options see [postgresql chart documentation](https://github.com/bitnami/charts/tree/master/bitnami/postgresql)