From 73060f27a1bf78d6cc380e79dee1bb4d3cf95892 Mon Sep 17 00:00:00 2001 From: sagit <36596628+Sagit-chu@users.noreply.github.com> Date: Mon, 7 Mar 2022 16:26:49 +0800 Subject: [PATCH] fix(ddns-go): Change permission (#2050) * fix read-only file system * update version * change permission * Update values.yaml * Update values.yaml * lint * empty line Co-authored-by: Stavros Kois <47820033+stavros-k@users.noreply.github.com> --- charts/stable/ddns-go/Chart.yaml | 2 +- charts/stable/ddns-go/questions.yaml | 8 ++++---- charts/stable/ddns-go/values.yaml | 8 +++++++- 3 files changed, 12 insertions(+), 6 deletions(-) diff --git a/charts/stable/ddns-go/Chart.yaml b/charts/stable/ddns-go/Chart.yaml index 7098e082258..70880754214 100644 --- a/charts/stable/ddns-go/Chart.yaml +++ b/charts/stable/ddns-go/Chart.yaml @@ -1,7 +1,7 @@ apiVersion: v2 kubeVersion: ">=1.16.0-0" name: ddns-go -version: 1.0.1 +version: 1.0.2 appVersion: "3.5.0" description: Automatically obtain your public network IPv4 or IPv6 address and resolve it to the corresponding domain name service type: application diff --git a/charts/stable/ddns-go/questions.yaml b/charts/stable/ddns-go/questions.yaml index 9d5806108a6..7b2ee29ce1b 100644 --- a/charts/stable/ddns-go/questions.yaml +++ b/charts/stable/ddns-go/questions.yaml @@ -260,7 +260,7 @@ questions: label: "ReadOnly Root Filesystem" schema: type: boolean - default: true + default: false - variable: allowPrivilegeEscalation label: "Allow Privilege Escalation" schema: @@ -270,7 +270,7 @@ questions: label: "runAsNonRoot" schema: type: boolean - default: true + default: false # Include{securityContextAdvanced} - variable: podSecurityContext @@ -285,13 +285,13 @@ questions: description: "The UserID of the user running the application" schema: type: int - default: 568 + default: 0 - variable: runAsGroup label: "runAsGroup" description: The groupID this App of the user running the application" schema: type: int - default: 568 + default: 0 - variable: fsGroup label: "fsGroup" description: "The group that should own ALL storage." diff --git a/charts/stable/ddns-go/values.yaml b/charts/stable/ddns-go/values.yaml index 755865726c4..83688fbc539 100644 --- a/charts/stable/ddns-go/values.yaml +++ b/charts/stable/ddns-go/values.yaml @@ -3,7 +3,13 @@ image: pullPolicy: IfNotPresent tag: v3.5.0@sha256:58e341b102ea4ae6d7ab554cbd0727b41accf1175d9113edeacd3275c9e90550 -env: {} +securityContext: + readOnlyRootFilesystem: false + runAsNonRoot: false + +podSecurityContext: + runAsUser: 0 + runAsGroup: 0 service: main: