diff --git a/charts/librefrontier/Chart.yaml b/charts/librefrontier/Chart.yaml index f91d4ad..2ae8af0 100644 --- a/charts/librefrontier/Chart.yaml +++ b/charts/librefrontier/Chart.yaml @@ -15,10 +15,10 @@ type: application # This is the chart version. This version number should be incremented each time you make changes # to the chart and its templates, including the app version. # Versions are expected to follow Semantic Versioning (https://semver.org/) -version: 0.3.3-alpha.1 +version: 0.4.0-alpha.1 # This is the version number of the application being deployed. This version number should be # incremented each time you make changes to the application. Versions are not expected to # follow Semantic Versioning. They should reflect the version the application is using. # It is recommended to use it with quotes. -appVersion: "0.0.1-dev" +appVersion: "v0.0.2-dev" diff --git a/charts/librefrontier/README.md b/charts/librefrontier/README.md index 3167105..f613b4f 100644 --- a/charts/librefrontier/README.md +++ b/charts/librefrontier/README.md @@ -5,7 +5,7 @@ Custom Helm-Chart for Librefrontier > [!IMPORTANT] > Only configured for Traefik-Ingress, since **IngressRoute** is being used. -![Version: 0.3.3-alpha.1](https://img.shields.io/badge/Version-0.3.3--alpha.1-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 0.0.1-dev](https://img.shields.io/badge/AppVersion-0.0.1--dev-informational?style=flat-square) +![Version: 0.4.0-alpha.1](https://img.shields.io/badge/Version-0.4.0--alpha.1-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: v0.0.2-dev](https://img.shields.io/badge/AppVersion-v0.0.2--dev-informational?style=flat-square) ## Values @@ -18,7 +18,7 @@ Custom Helm-Chart for Librefrontier | nodeSelector | object | `{}` | Kubernetes only schedules the Pod onto nodes that have each of the labels you specify | | podAnnotations | object | `{}` | Additional Pod-annotations | | podLabels | object | `{}` | Additional Pod-Labels | -| podSecurityContext | object | `{}` | Pod Security Context | +| podSecurityContext | object | `{"fsGroup":101,"fsGroupChangePolicy":"OnRootMismatch","runAsGroup":101,"runAsNonRoot":true,"runAsUser":100}` | Pod Security Context | | replicaCount | int | `1` | Number of Pods | | strategy | object | `{"type":"RollingUpdate"}` | The strategy used to replace old Pods by new ones https://kubernetes.io/docs/concepts/workloads/controllers/deployment/#strategy | | tolerations | list | `[]` | Tolerations allow the scheduler to schedule pods with matching taints | @@ -32,9 +32,9 @@ Custom Helm-Chart for Librefrontier | containers.librefrontier.additionalVolumeMounts | object | `{}` | Additional Volume-Mounts for Container | | containers.librefrontier.image.pullPolicy | string | `"IfNotPresent"` | Container-Image pull-policy | | containers.librefrontier.image.repository | string | `"ghcr.io/lukas-fichtner/librefrontier"` | Container-Image-Repository | -| containers.librefrontier.image.tag | string | `"v0.0.1-dev"` | Container-Image-Tag (by default `.Chart.AppVersion` will be used) | +| containers.librefrontier.image.tag | string | `""` | Container-Image-Tag (by default `.Chart.AppVersion` will be used) | | containers.librefrontier.resources | object | `{}` | Container resource requests and limits | -| containers.librefrontier.securityContext | object | `{"allowPrivilegeEscalation":false,"privileged":false,"runAsGroup":0,"runAsUser":0}` | Container Security Context | +| containers.librefrontier.securityContext | object | `{"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]},"privileged":false,"runAsGroup":101,"runAsUser":100}` | Container Security Context | ### Librefrontier-Container-Probes specifications diff --git a/charts/librefrontier/values.yaml b/charts/librefrontier/values.yaml index f7f427b..5f399d0 100644 --- a/charts/librefrontier/values.yaml +++ b/charts/librefrontier/values.yaml @@ -20,11 +20,12 @@ strategy: # # -- Pod Security Context # @section -- Pod specifications -podSecurityContext: {} -# runAsUser: 10000 -# runAsGroup: 10000 -# fsGroup: 10000 -# runAsNonRoot: true +podSecurityContext: + runAsUser: 100 + runAsGroup: 101 + fsGroup: 101 + runAsNonRoot: true + fsGroupChangePolicy: "OnRootMismatch" # # -- Additional Pod-annotations # @section -- Pod specifications @@ -71,7 +72,7 @@ containers: # # -- Container-Image-Tag (by default `.Chart.AppVersion` will be used) # @section -- Librefrontier-Container specifications - tag: v0.0.1-dev + tag: '' # # -- Container-Image pull-policy # @section -- Librefrontier-Container specifications @@ -80,10 +81,12 @@ containers: # -- Container Security Context # @section -- Librefrontier-Container specifications securityContext: - runAsUser: 0 - runAsGroup: 0 + runAsUser: 100 + runAsGroup: 101 allowPrivilegeEscalation: false privileged: false + capabilities: + drop: ["ALL"] # # -- Container resource requests and limits # @section -- Librefrontier-Container specifications