truecharts.local
/
catalog
mirror of https://github.com/truecharts/catalog.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Commit new App releases for TrueCharts 

Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
This commit is contained in:
TrueCharts-Bot 2022-04-03 15:41:15 +00:00
parent 48e6d07be8
commit b69e2b7025
30 changed files with 5974 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

37
stable/ferdi-server/1.0.0/CHANGELOG.md Normal file
View File

@ -0,0 +1,37 @@
# Changelog<br>
<a name="ferdi-server-1.0.0"></a>
### [ferdi-server-1.0.0](https://github.com/truecharts/apps/compare/ferdi-server-0.0.3...ferdi-server-1.0.0) (2022-04-03)
#### Feat
* move to stable ([#2415](https://github.com/truecharts/apps/issues/2415))
<a name="ferdi-server-1.0.0"></a>
### [ferdi-server-1.0.0](https://github.com/truecharts/apps/compare/ferdi-server-0.0.3...ferdi-server-1.0.0) (2022-04-03)
#### Feat
* move to stable ([#2415](https://github.com/truecharts/apps/issues/2415))
<a name="ferdi-server-0.0.3"></a>
### [ferdi-server-0.0.3](https://github.com/truecharts/apps/compare/ferdi-server-0.0.2...ferdi-server-0.0.3) (2022-04-03)
#### Chore
* Auto-update chart README [skip ci]
* update image refs ([#2411](https://github.com/truecharts/apps/issues/2411))
<a name="ferdi-server-0.0.1"></a>
### ferdi-server-0.0.1 (2022-04-01)
#### Feat
* Add ferdi-server ([#2367](https://github.com/truecharts/apps/issues/2367))

7
stable/ferdi-server/1.0.0/CONFIG.md Normal file
View File

@ -0,0 +1,7 @@
# Configuration Options
##### Connecting to other apps
If you need to connect this App to other Apps on TrueNAS SCALE, please refer to our [Linking Apps Internally](https://truecharts.org/manual/Quick-Start%20Guides/06-linking-apps/) quick-start guide.
##### Available config options
In the future this page is going to contain an automated list of options available in the installation/edit UI.

9
stable/ferdi-server/1.0.0/Chart.lock Normal file
View File

@ -0,0 +1,9 @@
dependencies:
- name: common
repository: https://library-charts.truecharts.org
version: 9.2.6
- name: postgresql
repository: https://charts.truecharts.org/
version: 7.0.27
digest: sha256:18badf2ec625ddadfd4348a1e7ce332adffcdf08c4b787e14d024f01bca60b19
generated: "2022-04-03T15:36:28.256667121Z"

29
stable/ferdi-server/1.0.0/Chart.yaml Normal file
View File

@ -0,0 +1,29 @@
apiVersion: v2
appVersion: "1.3.2"
dependencies:
- name: common
repository: https://library-charts.truecharts.org
version: 9.2.6
- condition: postgresql.enabled
name: postgresql
repository: https://charts.truecharts.org/
version: 7.0.27
description: Server for Ferdi that you can re-use to run your own
home: https://github.com/truecharts/apps/tree/master/charts/stable/ferdi-server
icon: https://truecharts.org/_static/img/appicons/ferdi-server.png
keywords:
- ferdi
kubeVersion: '>=1.16.0-0'
maintainers:
- email: info@truecharts.org
name: TrueCharts
url: https://truecharts.org
name: ferdi-server
sources:
- https://github.com/getferdi/server
version: 1.0.0
annotations:
truecharts.org/catagories: |
- media
truecharts.org/SCALE-support: "true"
truecharts.org/grade: U

38
stable/ferdi-server/1.0.0/README.md Normal file
View File

@ -0,0 +1,38 @@
# Introduction
Server for Ferdi that you can re-use to run your own
TrueCharts are designed to be installed as TrueNAS SCALE app only. We can not guarantee this charts works as a stand-alone helm installation.
**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/apps/issues/new/choose)**
## Source Code
* <https://github.com/getferdi/server>
## Requirements
Kubernetes: `>=1.16.0-0`
## Dependencies
| Repository | Name | Version |
|------------|------|---------|
| https://charts.truecharts.org/ | postgresql | 7.0.27 |
| https://library-charts.truecharts.org | common | 9.2.6 |
## Installing the Chart
To install this App on TrueNAS SCALE check our [Quick-Start Guide](https://truecharts.org/manual/Quick-Start%20Guides/02-Installing-an-App/).
## Upgrading, Rolling Back and Uninstalling the Chart
To upgrade, rollback or delete this App from TrueNAS SCALE check our [Quick-Start Guide](https://truecharts.org/manual/Quick-Start%20Guides/04-Upgrade-rollback-delete-an-App/).
## Support
- Please check our [quick-start guides](https://truecharts.org/manual/Quick-Start%20Guides/01-Adding-TrueCharts/) first.
- See the [Wiki](https://truecharts.org)
- Check our [Discord](https://discord.gg/tVsPTHWTtr)
- Open a [issue](https://github.com/truecharts/apps/issues/new/choose)
---
All Rights Reserved - The TrueCharts Project

3
stable/ferdi-server/1.0.0/app-readme.md Normal file
View File

@ -0,0 +1,3 @@
Server for Ferdi that you can re-use to run your own
This App is supplied by TrueCharts, for more information please visit https://truecharts.org

BIN
stable/ferdi-server/1.0.0/charts/common-9.2.6.tgz Normal file
View File

Binary file not shown.

BIN
stable/ferdi-server/1.0.0/charts/postgresql-7.0.27.tgz Normal file
View File

Binary file not shown.

60
stable/ferdi-server/1.0.0/helm-values.md Normal file
View File

@ -0,0 +1,60 @@
# Default Helm-Values
TrueCharts is primarily build to supply TrueNAS SCALE Apps.
However, we also supply all Apps as standard Helm-Charts. In this document we aim to document the default values in our values.yaml file.
Most of our Apps also consume our "common" Helm Chart.
If this is the case, this means that all values.yaml values are set to the common chart values.yaml by default. This values.yaml file will only contain values that deviate from the common chart.
You will, however, be able to use all values referenced in the common chart here, besides the values listed in this document.
## Values
| Key | Type | Default | Description |
|-----|------|---------|-------------|
| env.APP_URL | string | `"http://localhost:3333"` | |
| env.CONNECT_WITH_FRANZ | bool | `true` | |
| env.DATA_DIR | string | `"/app/data"` | |
| env.DB_CONNECTION | string | `"pg"` | |
| env.DB_DATABASE | string | `"{{ .Values.postgresql.postgresqlDatabase }}"` | |
| env.DB_PORT | string | `"5432"` | |
| env.DB_SSL | bool | `false` | |
| env.DB_USER | string | `"{{ .Values.postgresql.postgresqlUsername }}"` | |
| env.IS_CREATION_ENABLED | bool | `true` | |
| env.IS_DASHBOARD_ENABLED | bool | `true` | |
| env.IS_REGISTRATION_ENABLED | bool | `true` | |
| env.NODE_ENV | string | `"production"` | |
| envValueFrom.DB_HOST.secretKeyRef.key | string | `"plainhost"` | |
| envValueFrom.DB_HOST.secretKeyRef.name | string | `"dbcreds"` | |
| envValueFrom.DB_PASSWORD.secretKeyRef.key | string | `"postgresql-password"` | |
| envValueFrom.DB_PASSWORD.secretKeyRef.name | string | `"dbcreds"` | |
| image.pullPolicy | string | `"IfNotPresent"` | |
| image.repository | string | `"tccr.io/truecharts/ferdi-server"` | |
| image.tag | string | `"v1.3.2@sha256:9cd5863593eb1f8aa6ddf695d4984f6691fff7d453e2f608a30d67bda4c58c27"` | |
| installContainers.1-create-key-file.args[0] | string | `"keyfile=\"/app/data/FERDI_APP_KEY.txt\"; if [ ! -f ${keyfile} ]; then\n echo \"No APP_KEY File...\";\n echo \"Creating APP_KEY file...\";\n echo \"${APP_KEY}\" > ${keyfile};\n if [ -f ${keyfile} ];\n then\n echo \"Success!\";\n else\n echo \"Failed.\";\n fi;\nelse\n echo \"APP_KEY File exists. Skipping...\";\nfi;\n"` | |
| installContainers.1-create-key-file.command[0] | string | `"sh"` | |
| installContainers.1-create-key-file.command[1] | string | `"-c"` | |
| installContainers.1-create-key-file.env[0].name | string | `"APP_KEY"` | |
| installContainers.1-create-key-file.env[0].valueFrom.secretKeyRef.key | string | `"APP_KEY"` | |
| installContainers.1-create-key-file.env[0].valueFrom.secretKeyRef.name | string | `"ferdi-server-secrets"` | |
| installContainers.1-create-key-file.image | string | `"{{ .Values.image.repository }}:{{ .Values.image.tag }}"` | |
| installContainers.1-create-key-file.volumeMounts[0].mountPath | string | `"/app/data"` | |
| installContainers.1-create-key-file.volumeMounts[0].name | string | `"data"` | |
| persistence.data.enabled | bool | `true` | |
| persistence.data.mountPath | string | `"/app/data"` | |
| persistence.recipes.enabled | bool | `true` | |
| persistence.recipes.mountPath | string | `"/app/recipes"` | |
| podSecurityContext.runAsGroup | int | `0` | |
| podSecurityContext.runAsUser | int | `0` | |
| postgresql.enabled | bool | `true` | |
| postgresql.existingSecret | string | `"dbcreds"` | |
| postgresql.postgresqlDatabase | string | `"ferdi-server"` | |
| postgresql.postgresqlUsername | string | `"ferdi-server"` | |
| probes.liveness.path | string | `"/health"` | |
| probes.readiness.path | string | `"/health"` | |
| probes.startup.path | string | `"/health"` | |
| securityContext.readOnlyRootFilesystem | bool | `false` | |
| securityContext.runAsNonRoot | bool | `false` | |
| service.main.ports.main.port | int | `10206` | |
| service.main.ports.main.targetPort | int | `3333` | |
All Rights Reserved - The TrueCharts Project

110
stable/ferdi-server/1.0.0/ix_values.yaml Normal file
View File

@ -0,0 +1,110 @@
image:
repository: tccr.io/truecharts/ferdi-server
tag: v1.3.2@sha256:9cd5863593eb1f8aa6ddf695d4984f6691fff7d453e2f608a30d67bda4c58c27
pullPolicy: IfNotPresent
securityContext:
readOnlyRootFilesystem: false
runAsNonRoot: false
podSecurityContext:
runAsUser: 0
runAsGroup: 0
env:
NODE_ENV: "production"
DATA_DIR: "/app/data"
DB_CONNECTION: "pg"
DB_PORT: "5432"
DB_SSL: false
DB_USER: "{{ .Values.postgresql.postgresqlUsername }}"
DB_DATABASE: "{{ .Values.postgresql.postgresqlDatabase }}"
# User Defined
APP_URL: "http://localhost:3333"
IS_CREATION_ENABLED: true
IS_DASHBOARD_ENABLED: true
IS_REGISTRATION_ENABLED: true
CONNECT_WITH_FRANZ: true
# MAIL_CONNECTION: "smtp"
# SMTP_HOST: "localhost"
# SMTP_PORT: 587
# MAIL_SSL: true
# MAIL_USERNAME: "username@example.com"
# MAIL_PASSWORD: "password"
# MAIL_SENDER: "noreply@example.com"
# SPARKPOST_API_KEY: ""
# MAILGUN_DOMAIN: ""
# MAILGUN_API_REGION: ""
# MAILGUN_API_KEY: ""
envValueFrom:
DB_HOST:
secretKeyRef:
name: dbcreds
key: plainhost
DB_PASSWORD:
secretKeyRef:
name: dbcreds
key: postgresql-password
probes:
liveness:
path: "/health"
readiness:
path: "/health"
startup:
path: "/health"
service:
main:
ports:
main:
port: 10206
targetPort: 3333
persistence:
data:
enabled: true
mountPath: "/app/data"
recipes:
enabled: true
mountPath: "/app/recipes"
postgresql:
enabled: true
existingSecret: "dbcreds"
postgresqlUsername: ferdi-server
postgresqlDatabase: ferdi-server
installContainers:
1-create-key-file:
image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
volumeMounts:
- name: data
mountPath: "/app/data"
env:
- name: APP_KEY
valueFrom:
secretKeyRef:
name: ferdi-server-secrets
key: APP_KEY
command: ["sh", "-c"]
args:
- >
keyfile="/app/data/FERDI_APP_KEY.txt";
if [ ! -f ${keyfile} ];
then
echo "No APP_KEY File...";
echo "Creating APP_KEY file...";
echo "${APP_KEY}" > ${keyfile};
if [ -f ${keyfile} ];
then
echo "Success!";
else
echo "Failed.";
fi;
else
echo "APP_KEY File exists. Skipping...";
fi;

2677
stable/ferdi-server/1.0.0/questions.yaml Normal file
View File

File diff suppressed because it is too large Load Diff

263
stable/ferdi-server/1.0.0/security.md Normal file
View File

File diff suppressed because one or more lines are too long

20
stable/ferdi-server/1.0.0/templates/_secrets.tpl Normal file
View File

@ -0,0 +1,20 @@
{{/* Define the secrets */}}
{{- define "ferdi-server.secrets" -}}
---
apiVersion: v1
kind: Secret
type: Opaque
metadata:
name: ferdi-server-secrets
{{- $ferdiprevious := lookup "v1" "Secret" .Release.Namespace "ferdi-server-secrets" }}
{{- $app_key := "" }}
data:
{{- if $ferdiprevious}}
APP_KEY: {{ index $ferdiprevious.data "APP_KEY" }}
{{- else }}
{{- $app_key := randAlphaNum 32 }}
APP_KEY: {{ $app_key | b64enc }}
{{- end }}
{{- end -}}

8
stable/ferdi-server/1.0.0/templates/common.yaml Normal file
View File

@ -0,0 +1,8 @@
{{/* Make sure all variables are set properly */}}
{{- include "common.setup" . }}
{{/* Render secrets for ferdi-server */}}
{{- include "ferdi-server.secrets" . }}
{{/* Render the templates */}}
{{ include "common.postSetup" . }}

0
stable/ferdi-server/1.0.0/values.yaml Normal file
View File

4
stable/ferdi-server/item.yaml Normal file
View File

@ -0,0 +1,4 @@
icon_url: https://truecharts.org/_static/img/appicons/ferdi-server.png
categories:
- media

32
stable/picoshare/1.0.0/CHANGELOG.md Normal file
View File

@ -0,0 +1,32 @@
# Changelog<br>
<a name="picoshare-1.0.0"></a>
### [picoshare-1.0.0](https://github.com/truecharts/apps/compare/picoshare-0.0.3...picoshare-1.0.0) (2022-04-03)
#### Feat
* move to stable ([#2415](https://github.com/truecharts/apps/issues/2415))
<a name="picoshare-1.0.0"></a>
### [picoshare-1.0.0](https://github.com/truecharts/apps/compare/picoshare-0.0.3...picoshare-1.0.0) (2022-04-03)
#### Feat
* move to stable ([#2415](https://github.com/truecharts/apps/issues/2415))
<a name="picoshare-0.0.3"></a>
### [picoshare-0.0.3](https://github.com/truecharts/apps/compare/picoshare-0.0.2...picoshare-0.0.3) (2022-04-03)
<a name="picoshare-0.0.1"></a>
### picoshare-0.0.1 (2022-04-01)
#### Feat
* add picoshare ([#2381](https://github.com/truecharts/apps/issues/2381))

7
stable/picoshare/1.0.0/CONFIG.md Normal file
View File

@ -0,0 +1,7 @@
# Configuration Options
##### Connecting to other apps
If you need to connect this App to other Apps on TrueNAS SCALE, please refer to our [Linking Apps Internally](https://truecharts.org/manual/Quick-Start%20Guides/06-linking-apps/) quick-start guide.
##### Available config options
In the future this page is going to contain an automated list of options available in the installation/edit UI.

6
stable/picoshare/1.0.0/Chart.lock Normal file
View File

@ -0,0 +1,6 @@
dependencies:
- name: common
repository: https://library-charts.truecharts.org
version: 9.2.6
digest: sha256:a567b53fc3d0d618567f328d9fbb09695895b8e15d6ca178bf4a198c58080cac
generated: "2022-04-03T15:36:26.775765612Z"

26
stable/picoshare/1.0.0/Chart.yaml Normal file
View File

@ -0,0 +1,26 @@
apiVersion: v2
appVersion: "1.0.5"
dependencies:
- name: common
repository: https://library-charts.truecharts.org
version: 9.2.6
description: PicoShare is a minimalist service that allows you to share files easily.
home: https://github.com/truecharts/apps/tree/master/charts/stable/picoshare
icon: https://truecharts.org/_static/img/appicons/picoshare.png
keywords:
- picoshare
kubeVersion: '>=1.16.0-0'
maintainers:
- email: info@truecharts.org
name: TrueCharts
url: https://truecharts.org
name: picoshare
sources:
- https://github.com/mtlynch/picoshare
- https://hub.docker.com/r/mtlynch/picoshare
version: 1.0.0
annotations:
truecharts.org/catagories: |
- media
truecharts.org/SCALE-support: "true"
truecharts.org/grade: U

38
stable/picoshare/1.0.0/README.md Normal file
View File

@ -0,0 +1,38 @@
# Introduction
PicoShare is a minimalist service that allows you to share files easily.
TrueCharts are designed to be installed as TrueNAS SCALE app only. We can not guarantee this charts works as a stand-alone helm installation.
**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/apps/issues/new/choose)**
## Source Code
* <https://github.com/mtlynch/picoshare>
* <https://hub.docker.com/r/mtlynch/picoshare>
## Requirements
Kubernetes: `>=1.16.0-0`
## Dependencies
| Repository | Name | Version |
|------------|------|---------|
| https://library-charts.truecharts.org | common | 9.2.6 |
## Installing the Chart
To install this App on TrueNAS SCALE check our [Quick-Start Guide](https://truecharts.org/manual/Quick-Start%20Guides/02-Installing-an-App/).
## Upgrading, Rolling Back and Uninstalling the Chart
To upgrade, rollback or delete this App from TrueNAS SCALE check our [Quick-Start Guide](https://truecharts.org/manual/Quick-Start%20Guides/04-Upgrade-rollback-delete-an-App/).
## Support
- Please check our [quick-start guides](https://truecharts.org/manual/Quick-Start%20Guides/01-Adding-TrueCharts/) first.
- See the [Wiki](https://truecharts.org)
- Check our [Discord](https://discord.gg/tVsPTHWTtr)
- Open a [issue](https://github.com/truecharts/apps/issues/new/choose)
---
All Rights Reserved - The TrueCharts Project

3
stable/picoshare/1.0.0/app-readme.md Normal file
View File

@ -0,0 +1,3 @@
PicoShare is a minimalist service that allows you to share files easily.
This App is supplied by TrueCharts, for more information please visit https://truecharts.org

BIN
stable/picoshare/1.0.0/charts/common-9.2.6.tgz Normal file
View File

Binary file not shown.

27
stable/picoshare/1.0.0/helm-values.md Normal file
View File

@ -0,0 +1,27 @@
# Default Helm-Values
TrueCharts is primarily build to supply TrueNAS SCALE Apps.
However, we also supply all Apps as standard Helm-Charts. In this document we aim to document the default values in our values.yaml file.
Most of our Apps also consume our "common" Helm Chart.
If this is the case, this means that all values.yaml values are set to the common chart values.yaml by default. This values.yaml file will only contain values that deviate from the common chart.
You will, however, be able to use all values referenced in the common chart here, besides the values listed in this document.
## Values
| Key | Type | Default | Description |
|-----|------|---------|-------------|
| env.PORT | string | `"{{ .Values.service.main.ports.main.port }}"` | |
| image.pullPolicy | string | `"IfNotPresent"` | |
| image.repository | string | `"tccr.io/truecharts/picoshare"` | |
| image.tag | string | `"v1.0.5@sha256:abccdd7d31a61788859b926a9eacbcd18494e996269f03dc4ff32d07f0b6a576"` | |
| persistence.data.enabled | bool | `true` | |
| persistence.data.mountPath | string | `"/data"` | |
| secret.LITESTREAM_ACCESS_KEY_ID | string | `""` | |
| secret.LITESTREAM_BUCKET | string | `""` | |
| secret.LITESTREAM_ENDPOINT | string | `""` | |
| secret.LITESTREAM_SECRET_ACCESS_KEY | string | `""` | |
| secret.PS_SHARED_SECRET | string | `"somesecretcode"` | |
| service.main.ports.main.port | int | `10209` | |
All Rights Reserved - The TrueCharts Project

25
stable/picoshare/1.0.0/ix_values.yaml Normal file
View File

@ -0,0 +1,25 @@
image:
repository: tccr.io/truecharts/picoshare
tag: v1.0.5@sha256:abccdd7d31a61788859b926a9eacbcd18494e996269f03dc4ff32d07f0b6a576
pullPolicy: IfNotPresent
secret:
PS_SHARED_SECRET: "somesecretcode"
LITESTREAM_BUCKET: ""
LITESTREAM_ENDPOINT: ""
LITESTREAM_ACCESS_KEY_ID: ""
LITESTREAM_SECRET_ACCESS_KEY: ""
env:
PORT: "{{ .Values.service.main.ports.main.port }}"
service:
main:
ports:
main:
port: 10209
persistence:
data:
enabled: true
mountPath: "/data"

2445
stable/picoshare/1.0.0/questions.yaml Normal file
View File

File diff suppressed because it is too large Load Diff

95
stable/picoshare/1.0.0/security.md Normal file
View File

@ -0,0 +1,95 @@
---
hide:
- toc
---
# Security Overview
<link href="https://truecharts.org/_static/trivy.css" type="text/css" rel="stylesheet" />
## Helm-Chart
##### Scan Results
#### Chart Object: picoshare/templates/common.yaml
| Type | Misconfiguration ID | Check | Severity | Explaination | Links |
|:----------------|:------------------:|:-----------:|:------------------:|-----------------------------------------|-----------------------------------------|
| Kubernetes Security Check | KSV001 | Process can elevate its own privileges | MEDIUM | <details><summary>Expand...</summary> A program inside the container can elevate its own privileges and run as root, which might give the program control over the container and node. <br> <hr> <br> Container &#39;hostpatch&#39; of Deployment &#39;RELEASE-NAME-picoshare&#39; should set &#39;securityContext.allowPrivilegeEscalation&#39; to false </details>| <details><summary>Expand...</summary><a href="https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted">https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted</a><br><a href="https://avd.aquasec.com/appshield/ksv001">https://avd.aquasec.com/appshield/ksv001</a><br></details> |
| Kubernetes Security Check | KSV003 | Default capabilities not dropped | LOW | <details><summary>Expand...</summary> The container should drop all default capabilities and add only those that are needed for its execution. <br> <hr> <br> Container &#39;RELEASE-NAME-picoshare&#39; of Deployment &#39;RELEASE-NAME-picoshare&#39; should add &#39;ALL&#39; to &#39;securityContext.capabilities.drop&#39; </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-securitycontext-capabilities-drop-index-all/">https://kubesec.io/basics/containers-securitycontext-capabilities-drop-index-all/</a><br><a href="https://avd.aquasec.com/appshield/ksv003">https://avd.aquasec.com/appshield/ksv003</a><br></details> |
| Kubernetes Security Check | KSV003 | Default capabilities not dropped | LOW | <details><summary>Expand...</summary> The container should drop all default capabilities and add only those that are needed for its execution. <br> <hr> <br> Container &#39;hostpatch&#39; of Deployment &#39;RELEASE-NAME-picoshare&#39; should add &#39;ALL&#39; to &#39;securityContext.capabilities.drop&#39; </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-securitycontext-capabilities-drop-index-all/">https://kubesec.io/basics/containers-securitycontext-capabilities-drop-index-all/</a><br><a href="https://avd.aquasec.com/appshield/ksv003">https://avd.aquasec.com/appshield/ksv003</a><br></details> |
| Kubernetes Security Check | KSV011 | CPU not limited | LOW | <details><summary>Expand...</summary> Enforcing CPU limits prevents DoS via resource exhaustion. <br> <hr> <br> Container &#39;hostpatch&#39; of Deployment &#39;RELEASE-NAME-picoshare&#39; should set &#39;resources.limits.cpu&#39; </details>| <details><summary>Expand...</summary><a href="https://cloud.google.com/blog/products/containers-kubernetes/kubernetes-best-practices-resource-requests-and-limits">https://cloud.google.com/blog/products/containers-kubernetes/kubernetes-best-practices-resource-requests-and-limits</a><br><a href="https://avd.aquasec.com/appshield/ksv011">https://avd.aquasec.com/appshield/ksv011</a><br></details> |
| Kubernetes Security Check | KSV012 | Runs as root user | MEDIUM | <details><summary>Expand...</summary> &#39;runAsNonRoot&#39; forces the running image to run as a non-root user to ensure least privileges. <br> <hr> <br> Container &#39;autopermissions&#39; of Deployment &#39;RELEASE-NAME-picoshare&#39; should set &#39;securityContext.runAsNonRoot&#39; to true </details>| <details><summary>Expand...</summary><a href="https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted">https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted</a><br><a href="https://avd.aquasec.com/appshield/ksv012">https://avd.aquasec.com/appshield/ksv012</a><br></details> |
| Kubernetes Security Check | KSV012 | Runs as root user | MEDIUM | <details><summary>Expand...</summary> &#39;runAsNonRoot&#39; forces the running image to run as a non-root user to ensure least privileges. <br> <hr> <br> Container &#39;hostpatch&#39; of Deployment &#39;RELEASE-NAME-picoshare&#39; should set &#39;securityContext.runAsNonRoot&#39; to true </details>| <details><summary>Expand...</summary><a href="https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted">https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted</a><br><a href="https://avd.aquasec.com/appshield/ksv012">https://avd.aquasec.com/appshield/ksv012</a><br></details> |
| Kubernetes Security Check | KSV014 | Root file system is not read-only | LOW | <details><summary>Expand...</summary> An immutable root file system prevents applications from writing to their local disk. This can limit intrusions, as attackers will not be able to tamper with the file system or write foreign executables to disk. <br> <hr> <br> Container &#39;autopermissions&#39; of Deployment &#39;RELEASE-NAME-picoshare&#39; should set &#39;securityContext.readOnlyRootFilesystem&#39; to true </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-securitycontext-readonlyrootfilesystem-true/">https://kubesec.io/basics/containers-securitycontext-readonlyrootfilesystem-true/</a><br><a href="https://avd.aquasec.com/appshield/ksv014">https://avd.aquasec.com/appshield/ksv014</a><br></details> |
| Kubernetes Security Check | KSV014 | Root file system is not read-only | LOW | <details><summary>Expand...</summary> An immutable root file system prevents applications from writing to their local disk. This can limit intrusions, as attackers will not be able to tamper with the file system or write foreign executables to disk. <br> <hr> <br> Container &#39;hostpatch&#39; of Deployment &#39;RELEASE-NAME-picoshare&#39; should set &#39;securityContext.readOnlyRootFilesystem&#39; to true </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-securitycontext-readonlyrootfilesystem-true/">https://kubesec.io/basics/containers-securitycontext-readonlyrootfilesystem-true/</a><br><a href="https://avd.aquasec.com/appshield/ksv014">https://avd.aquasec.com/appshield/ksv014</a><br></details> |
| Kubernetes Security Check | KSV015 | CPU requests not specified | LOW | <details><summary>Expand...</summary> When containers have resource requests specified, the scheduler can make better decisions about which nodes to place pods on, and how to deal with resource contention. <br> <hr> <br> Container &#39;hostpatch&#39; of Deployment &#39;RELEASE-NAME-picoshare&#39; should set &#39;resources.requests.cpu&#39; </details>| <details><summary>Expand...</summary><a href="https://cloud.google.com/blog/products/containers-kubernetes/kubernetes-best-practices-resource-requests-and-limits">https://cloud.google.com/blog/products/containers-kubernetes/kubernetes-best-practices-resource-requests-and-limits</a><br><a href="https://avd.aquasec.com/appshield/ksv015">https://avd.aquasec.com/appshield/ksv015</a><br></details> |
| Kubernetes Security Check | KSV016 | Memory requests not specified | LOW | <details><summary>Expand...</summary> When containers have memory requests specified, the scheduler can make better decisions about which nodes to place pods on, and how to deal with resource contention. <br> <hr> <br> Container &#39;hostpatch&#39; of Deployment &#39;RELEASE-NAME-picoshare&#39; should set &#39;resources.requests.memory&#39; </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-resources-limits-memory/">https://kubesec.io/basics/containers-resources-limits-memory/</a><br><a href="https://avd.aquasec.com/appshield/ksv016">https://avd.aquasec.com/appshield/ksv016</a><br></details> |
| Kubernetes Security Check | KSV017 | Privileged container | HIGH | <details><summary>Expand...</summary> Privileged containers share namespaces with the host system and do not offer any security. They should be used exclusively for system containers that require high privileges. <br> <hr> <br> Container &#39;hostpatch&#39; of Deployment &#39;RELEASE-NAME-picoshare&#39; should set &#39;securityContext.privileged&#39; to false </details>| <details><summary>Expand...</summary><a href="https://kubernetes.io/docs/concepts/security/pod-security-standards/#baseline">https://kubernetes.io/docs/concepts/security/pod-security-standards/#baseline</a><br><a href="https://avd.aquasec.com/appshield/ksv017">https://avd.aquasec.com/appshield/ksv017</a><br></details> |
| Kubernetes Security Check | KSV018 | Memory not limited | LOW | <details><summary>Expand...</summary> Enforcing memory limits prevents DoS via resource exhaustion. <br> <hr> <br> Container &#39;hostpatch&#39; of Deployment &#39;RELEASE-NAME-picoshare&#39; should set &#39;resources.limits.memory&#39; </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-resources-limits-memory/">https://kubesec.io/basics/containers-resources-limits-memory/</a><br><a href="https://avd.aquasec.com/appshield/ksv018">https://avd.aquasec.com/appshield/ksv018</a><br></details> |
| Kubernetes Security Check | KSV020 | Runs with low user ID | MEDIUM | <details><summary>Expand...</summary> Force the container to run with user ID &gt; 10000 to avoid conflicts with the host’s user table. <br> <hr> <br> Container &#39;RELEASE-NAME-picoshare&#39; of Deployment &#39;RELEASE-NAME-picoshare&#39; should set &#39;securityContext.runAsUser&#39; &gt; 10000 </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-securitycontext-runasuser/">https://kubesec.io/basics/containers-securitycontext-runasuser/</a><br><a href="https://avd.aquasec.com/appshield/ksv020">https://avd.aquasec.com/appshield/ksv020</a><br></details> |
| Kubernetes Security Check | KSV020 | Runs with low user ID | MEDIUM | <details><summary>Expand...</summary> Force the container to run with user ID &gt; 10000 to avoid conflicts with the host’s user table. <br> <hr> <br> Container &#39;autopermissions&#39; of Deployment &#39;RELEASE-NAME-picoshare&#39; should set &#39;securityContext.runAsUser&#39; &gt; 10000 </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-securitycontext-runasuser/">https://kubesec.io/basics/containers-securitycontext-runasuser/</a><br><a href="https://avd.aquasec.com/appshield/ksv020">https://avd.aquasec.com/appshield/ksv020</a><br></details> |
| Kubernetes Security Check | KSV020 | Runs with low user ID | MEDIUM | <details><summary>Expand...</summary> Force the container to run with user ID &gt; 10000 to avoid conflicts with the host’s user table. <br> <hr> <br> Container &#39;hostpatch&#39; of Deployment &#39;RELEASE-NAME-picoshare&#39; should set &#39;securityContext.runAsUser&#39; &gt; 10000 </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-securitycontext-runasuser/">https://kubesec.io/basics/containers-securitycontext-runasuser/</a><br><a href="https://avd.aquasec.com/appshield/ksv020">https://avd.aquasec.com/appshield/ksv020</a><br></details> |
| Kubernetes Security Check | KSV021 | Runs with low group ID | MEDIUM | <details><summary>Expand...</summary> Force the container to run with group ID &gt; 10000 to avoid conflicts with the host’s user table. <br> <hr> <br> Container &#39;RELEASE-NAME-picoshare&#39; of Deployment &#39;RELEASE-NAME-picoshare&#39; should set &#39;securityContext.runAsGroup&#39; &gt; 10000 </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-securitycontext-runasuser/">https://kubesec.io/basics/containers-securitycontext-runasuser/</a><br><a href="https://avd.aquasec.com/appshield/ksv021">https://avd.aquasec.com/appshield/ksv021</a><br></details> |
| Kubernetes Security Check | KSV021 | Runs with low group ID | MEDIUM | <details><summary>Expand...</summary> Force the container to run with group ID &gt; 10000 to avoid conflicts with the host’s user table. <br> <hr> <br> Container &#39;autopermissions&#39; of Deployment &#39;RELEASE-NAME-picoshare&#39; should set &#39;securityContext.runAsGroup&#39; &gt; 10000 </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-securitycontext-runasuser/">https://kubesec.io/basics/containers-securitycontext-runasuser/</a><br><a href="https://avd.aquasec.com/appshield/ksv021">https://avd.aquasec.com/appshield/ksv021</a><br></details> |
| Kubernetes Security Check | KSV021 | Runs with low group ID | MEDIUM | <details><summary>Expand...</summary> Force the container to run with group ID &gt; 10000 to avoid conflicts with the host’s user table. <br> <hr> <br> Container &#39;hostpatch&#39; of Deployment &#39;RELEASE-NAME-picoshare&#39; should set &#39;securityContext.runAsGroup&#39; &gt; 10000 </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-securitycontext-runasuser/">https://kubesec.io/basics/containers-securitycontext-runasuser/</a><br><a href="https://avd.aquasec.com/appshield/ksv021">https://avd.aquasec.com/appshield/ksv021</a><br></details> |
| Kubernetes Security Check | KSV023 | hostPath volumes mounted | MEDIUM | <details><summary>Expand...</summary> HostPath volumes must be forbidden. <br> <hr> <br> Deployment &#39;RELEASE-NAME-picoshare&#39; should not set &#39;spec.template.volumes.hostPath&#39; </details>| <details><summary>Expand...</summary><a href="https://kubernetes.io/docs/concepts/security/pod-security-standards/#baseline">https://kubernetes.io/docs/concepts/security/pod-security-standards/#baseline</a><br><a href="https://avd.aquasec.com/appshield/ksv023">https://avd.aquasec.com/appshield/ksv023</a><br></details> |
| Kubernetes Security Check | KSV029 | A root primary or supplementary GID set | LOW | <details><summary>Expand...</summary> Containers should be forbidden from running with a root primary or supplementary GID. <br> <hr> <br> Deployment &#39;RELEASE-NAME-picoshare&#39; should set &#39;spec.securityContext.runAsGroup&#39;, &#39;spec.securityContext.supplementalGroups[*]&#39; and &#39;spec.securityContext.fsGroup&#39; to integer greater than 0 </details>| <details><summary>Expand...</summary><a href="https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted">https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted</a><br><a href="https://avd.aquasec.com/appshield/ksv029">https://avd.aquasec.com/appshield/ksv029</a><br></details> |
## Containers
##### Detected Containers
tccr.io/truecharts/alpine:v3.15.2@sha256:29ed3480a0ee43f7af681fed5d4fc215516abf1c41eade6938b26d8c9c2c7583
tccr.io/truecharts/alpine:v3.15.2@sha256:29ed3480a0ee43f7af681fed5d4fc215516abf1c41eade6938b26d8c9c2c7583
tccr.io/truecharts/picoshare:v1.0.5@sha256:abccdd7d31a61788859b926a9eacbcd18494e996269f03dc4ff32d07f0b6a576
##### Scan Results
#### Container: tccr.io/truecharts/alpine:v3.15.2@sha256:29ed3480a0ee43f7af681fed5d4fc215516abf1c41eade6938b26d8c9c2c7583 (alpine 3.15.2)
**alpine**
| Package | Vulnerability | Severity | Installed Version | Fixed Version | Links |
|:----------------|:------------------:|:-----------:|:------------------:|:-------------:|-----------------------------------------|
| zlib | CVE-2018-25032 | HIGH | 1.2.11-r3 | 1.2.12-r0 | <details><summary>Expand...</summary><a href="http://www.openwall.com/lists/oss-security/2022/03/25/2">http://www.openwall.com/lists/oss-security/2022/03/25/2</a><br><a href="http://www.openwall.com/lists/oss-security/2022/03/26/1">http://www.openwall.com/lists/oss-security/2022/03/26/1</a><br><a href="https://access.redhat.com/security/cve/CVE-2018-25032">https://access.redhat.com/security/cve/CVE-2018-25032</a><br><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25032">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25032</a><br><a href="https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531">https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531</a><br><a href="https://github.com/madler/zlib/compare/v1.2.11...v1.2.12">https://github.com/madler/zlib/compare/v1.2.11...v1.2.12</a><br><a href="https://github.com/madler/zlib/issues/605">https://github.com/madler/zlib/issues/605</a><br><a href="https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html">https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html</a><br><a href="https://nvd.nist.gov/vuln/detail/CVE-2018-25032">https://nvd.nist.gov/vuln/detail/CVE-2018-25032</a><br><a href="https://ubuntu.com/security/notices/USN-5355-1">https://ubuntu.com/security/notices/USN-5355-1</a><br><a href="https://ubuntu.com/security/notices/USN-5355-2">https://ubuntu.com/security/notices/USN-5355-2</a><br><a href="https://ubuntu.com/security/notices/USN-5359-1">https://ubuntu.com/security/notices/USN-5359-1</a><br><a href="https://www.debian.org/security/2022/dsa-5111">https://www.debian.org/security/2022/dsa-5111</a><br><a href="https://www.openwall.com/lists/oss-security/2022/03/24/1">https://www.openwall.com/lists/oss-security/2022/03/24/1</a><br><a href="https://www.openwall.com/lists/oss-security/2022/03/28/1">https://www.openwall.com/lists/oss-security/2022/03/28/1</a><br><a href="https://www.openwall.com/lists/oss-security/2022/03/28/3">https://www.openwall.com/lists/oss-security/2022/03/28/3</a><br></details> |
#### Container: tccr.io/truecharts/alpine:v3.15.2@sha256:29ed3480a0ee43f7af681fed5d4fc215516abf1c41eade6938b26d8c9c2c7583 (alpine 3.15.2)
**alpine**
| Package | Vulnerability | Severity | Installed Version | Fixed Version | Links |
|:----------------|:------------------:|:-----------:|:------------------:|:-------------:|-----------------------------------------|
| zlib | CVE-2018-25032 | HIGH | 1.2.11-r3 | 1.2.12-r0 | <details><summary>Expand...</summary><a href="http://www.openwall.com/lists/oss-security/2022/03/25/2">http://www.openwall.com/lists/oss-security/2022/03/25/2</a><br><a href="http://www.openwall.com/lists/oss-security/2022/03/26/1">http://www.openwall.com/lists/oss-security/2022/03/26/1</a><br><a href="https://access.redhat.com/security/cve/CVE-2018-25032">https://access.redhat.com/security/cve/CVE-2018-25032</a><br><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25032">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25032</a><br><a href="https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531">https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531</a><br><a href="https://github.com/madler/zlib/compare/v1.2.11...v1.2.12">https://github.com/madler/zlib/compare/v1.2.11...v1.2.12</a><br><a href="https://github.com/madler/zlib/issues/605">https://github.com/madler/zlib/issues/605</a><br><a href="https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html">https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html</a><br><a href="https://nvd.nist.gov/vuln/detail/CVE-2018-25032">https://nvd.nist.gov/vuln/detail/CVE-2018-25032</a><br><a href="https://ubuntu.com/security/notices/USN-5355-1">https://ubuntu.com/security/notices/USN-5355-1</a><br><a href="https://ubuntu.com/security/notices/USN-5355-2">https://ubuntu.com/security/notices/USN-5355-2</a><br><a href="https://ubuntu.com/security/notices/USN-5359-1">https://ubuntu.com/security/notices/USN-5359-1</a><br><a href="https://www.debian.org/security/2022/dsa-5111">https://www.debian.org/security/2022/dsa-5111</a><br><a href="https://www.openwall.com/lists/oss-security/2022/03/24/1">https://www.openwall.com/lists/oss-security/2022/03/24/1</a><br><a href="https://www.openwall.com/lists/oss-security/2022/03/28/1">https://www.openwall.com/lists/oss-security/2022/03/28/1</a><br><a href="https://www.openwall.com/lists/oss-security/2022/03/28/3">https://www.openwall.com/lists/oss-security/2022/03/28/3</a><br></details> |
#### Container: tccr.io/truecharts/picoshare:v1.0.5@sha256:abccdd7d31a61788859b926a9eacbcd18494e996269f03dc4ff32d07f0b6a576 (alpine 3.15.2)
**alpine**
| Package | Vulnerability | Severity | Installed Version | Fixed Version | Links |
|:----------------|:------------------:|:-----------:|:------------------:|:-------------:|-----------------------------------------|
| zlib | CVE-2018-25032 | HIGH | 1.2.11-r3 | 1.2.12-r0 | <details><summary>Expand...</summary><a href="http://www.openwall.com/lists/oss-security/2022/03/25/2">http://www.openwall.com/lists/oss-security/2022/03/25/2</a><br><a href="http://www.openwall.com/lists/oss-security/2022/03/26/1">http://www.openwall.com/lists/oss-security/2022/03/26/1</a><br><a href="https://access.redhat.com/security/cve/CVE-2018-25032">https://access.redhat.com/security/cve/CVE-2018-25032</a><br><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25032">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25032</a><br><a href="https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531">https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531</a><br><a href="https://github.com/madler/zlib/compare/v1.2.11...v1.2.12">https://github.com/madler/zlib/compare/v1.2.11...v1.2.12</a><br><a href="https://github.com/madler/zlib/issues/605">https://github.com/madler/zlib/issues/605</a><br><a href="https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html">https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html</a><br><a href="https://nvd.nist.gov/vuln/detail/CVE-2018-25032">https://nvd.nist.gov/vuln/detail/CVE-2018-25032</a><br><a href="https://ubuntu.com/security/notices/USN-5355-1">https://ubuntu.com/security/notices/USN-5355-1</a><br><a href="https://ubuntu.com/security/notices/USN-5355-2">https://ubuntu.com/security/notices/USN-5355-2</a><br><a href="https://ubuntu.com/security/notices/USN-5359-1">https://ubuntu.com/security/notices/USN-5359-1</a><br><a href="https://www.debian.org/security/2022/dsa-5111">https://www.debian.org/security/2022/dsa-5111</a><br><a href="https://www.openwall.com/lists/oss-security/2022/03/24/1">https://www.openwall.com/lists/oss-security/2022/03/24/1</a><br><a href="https://www.openwall.com/lists/oss-security/2022/03/28/1">https://www.openwall.com/lists/oss-security/2022/03/28/1</a><br><a href="https://www.openwall.com/lists/oss-security/2022/03/28/3">https://www.openwall.com/lists/oss-security/2022/03/28/3</a><br></details> |
**gobinary**
| Package | Vulnerability | Severity | Installed Version | Fixed Version | Links |
|:----------------|:------------------:|:-----------:|:------------------:|:-------------:|-----------------------------------------|
| golang.org/x/text | CVE-2021-38561 | UNKNOWN | v0.3.5 | 0.3.7 | <details><summary>Expand...</summary><a href="https://go-review.googlesource.com/c/text/+/340830">https://go-review.googlesource.com/c/text/+/340830</a><br><a href="https://go.googlesource.com/text/+/383b2e75a7a4198c42f8f87833eefb772868a56f">https://go.googlesource.com/text/+/383b2e75a7a4198c42f8f87833eefb772868a56f</a><br><a href="https://pkg.go.dev/vuln/GO-2021-0113">https://pkg.go.dev/vuln/GO-2021-0113</a><br></details> |
**gobinary**
| No Vulnerabilities found |
|:---------------------------------|

1
stable/picoshare/1.0.0/templates/common.yaml Normal file
View File

@ -0,0 +1 @@
{{- include "common.all" . }}

0
stable/picoshare/1.0.0/values.yaml Normal file
View File

4
stable/picoshare/item.yaml Normal file
View File

@ -0,0 +1,4 @@
icon_url: https://truecharts.org/_static/img/appicons/picoshare.png
categories:
- media