From ea61f1b9d8831ab7ad9db4671455151753f3b27c Mon Sep 17 00:00:00 2001 From: Felix Mumme Date: Tue, 14 Jan 2025 03:18:06 +0100 Subject: [PATCH] fixed owncloud chart permission --- .packaged/index.yaml | 18 +++++++++--------- .packaged/owncloud-0.1.0.tgz | Bin 4404 -> 4178 bytes owncloud/templates/deployment.yaml | 16 ++-------------- owncloud/values.yaml | 25 +++++-------------------- 4 files changed, 16 insertions(+), 43 deletions(-) diff --git a/.packaged/index.yaml b/.packaged/index.yaml index f7352ec..1696c26 100644 --- a/.packaged/index.yaml +++ b/.packaged/index.yaml @@ -3,7 +3,7 @@ entries: jackett: - apiVersion: v2 appVersion: 1.16.0 - created: "2025-01-14T03:14:36.429948+01:00" + created: "2025-01-14T03:18:00.88141+01:00" description: A Helm chart for Kubernetes digest: cb583d90a982e50cb0028e2d8d2afce93ef8f64dc202ddffd59262a74ff33fe1 name: jackett @@ -14,7 +14,7 @@ entries: overseerr: - apiVersion: v2 appVersion: 1.16.0 - created: "2025-01-14T03:14:36.430444+01:00" + created: "2025-01-14T03:18:00.882043+01:00" description: A Helm chart for Kubernetes digest: ac634ebbb7000644e02606157bedbc8ab6e3dd59d22d8ee699093d0f683a2899 name: overseerr @@ -25,9 +25,9 @@ entries: owncloud: - apiVersion: v2 appVersion: 1.16.0 - created: "2025-01-14T03:14:36.430711+01:00" + created: "2025-01-14T03:18:00.883894+01:00" description: A Helm chart for Kubernetes - digest: ca3beef6cf7d9bdd9f17d78b4d5f6d81bab4615a487767cf3cd594176db8993b + digest: 33d88f1a169848d2bff11f85ac02714845eb5d34d4f9062a1275b93a351786f5 name: owncloud type: application urls: @@ -36,7 +36,7 @@ entries: plex: - apiVersion: v2 appVersion: 1.16.0 - created: "2025-01-14T03:14:36.431415+01:00" + created: "2025-01-14T03:18:00.884384+01:00" description: A Helm chart for Kubernetes digest: 565cd7f5ab705d99bb9d5c81b6e8b0e9168be4cf442e1e5daba18bfcf0b5d882 name: plex @@ -47,7 +47,7 @@ entries: qbittorrent: - apiVersion: v2 appVersion: 1.16.0 - created: "2025-01-14T03:14:36.431705+01:00" + created: "2025-01-14T03:18:00.884685+01:00" description: A Helm chart for Kubernetes digest: 962463c2a27832ad6dc9709a3be008f242e1b039d9da7579becfa0bb96f6e063 name: qbittorrent @@ -58,7 +58,7 @@ entries: radarr: - apiVersion: v2 appVersion: 1.16.0 - created: "2025-01-14T03:14:36.431994+01:00" + created: "2025-01-14T03:18:00.884989+01:00" description: A Helm chart for Kubernetes digest: 78b75bd7d472fadde70016881f54f3359293b39d6ea964344131cc5572bb2b2f name: radarr @@ -69,7 +69,7 @@ entries: sonarr: - apiVersion: v2 appVersion: 1.16.0 - created: "2025-01-14T03:14:36.43228+01:00" + created: "2025-01-14T03:18:00.885292+01:00" description: A Helm chart for Kubernetes digest: ba9b24a526270d72b33d1918755baa182095f97fb4f38df16b5a833c8138d6dc name: sonarr @@ -77,4 +77,4 @@ entries: urls: - sonarr-0.1.0.tgz version: 0.1.0 -generated: "2025-01-14T03:14:36.429433+01:00" +generated: "2025-01-14T03:18:00.880745+01:00" diff --git a/.packaged/owncloud-0.1.0.tgz b/.packaged/owncloud-0.1.0.tgz index 865bf4ef6676386883a93f3ab33b8d0a7dc2c5d7..6e5aa25911913b91f2f60b74fc52ea40975a87d5 100644 GIT binary patch delta 4158 zcmV-E5W(-XBGMp`JAZs%bKADEc%Jzw_DAPTll&@5vgM@1nLN0*+j<(y8rw;y?PNR< zxsp&*00V%sRmb@F6I#qMHZe#L@_Ct-JgMuhT~WF9?x z=+^7?danlq^M9|`tN-8Yzu9@#AG{g#cLsyqo&K|4f2X&z{eKL456($TOQa&=S?{Z9 z)d%+<(nw4{ppcX^9~RpViR1jS@AY4MJtssN2pTK%ZV!IJXbyo^7MO4Wzb0c83>8X; zkvaO1DU_p@G5SE_IHCd3y`4pdx##u0p7X7T{?wj5dzP>N1&I=r|A+y&WBm_$uLt$@ zzx`(CY5hM&+kb)soRB0^U=_eD>P#s-XA90}R05Si;P<`bcby3rbD|W6Frg7@fCCI7 zA`litP%@5Cg5oenh>4UK0%eNBk|zQb&f|zEl%C@VG-hF+CrtU!cN{t=Q}i7Gfiag< zaj`6HNmrs+pl|@?K7Cec4*x7NM9JmEgBy3NM3FI(hOG&mCc+xaFnz7*SX1i8Q~4=!0k$9@%!pXO04`v@ zl%FC;e}6f=Rwx*WAZ$kqfGLDV41i3}S(q`TU(L8wKDe%Vh`CTc><)Ie&123LxY^`b zxI}8C^X3OL4+2#tb;_n@5_0~uo?LMeT6V6fRFq9^pPY;8>tAuHrIGeCbG;YNDKkve z#!K`EJ=79|=AG-T=FI?<8Ea+h4yLru(x5bd`+rd)6^f&glZo|*-VZ&^{UKXW!Py*{ zDwdIhY@s`!|KWrC{(RpuycdR44~#^BZM}d_fFXvc**^Jgxc~0t{lUe-$?@LN&xc&=a?1ecr|-|s4>Q2CHIS!=2S;ZYhr_)e-yI(K;2OQLyp4VtfkdTcA|23=7srRk zCx55EU%WdyK05co-R*B5yXmL*qjx8J2enVm7L2r)AQiHpuDfyZMGMA$tf{dQiPd7M zxFA#9kBF4H9+4nGDUW%GKAa*6e-l*U2@BFL^l$WG_h)LJ=Gr!mh?@D(T@cZ|y1MG- z2FcP+75pT&GvdR0iMd+9=)-dSA-AL)lcIG`u%# zN1!<#+C|2ulwE7q31eKD36wtE+@^#tbHCA}yqhBR0y|{Ww-r!DvO@wxK#MCgF{Xo; zVX1bB1;1W)#ynhhtdz8>&2>+0=+a5(q*kw__2xZ5Ow=p|vVgIbYW~K8oSP*+5`Q?M znsXINAO8GkmIZV`8WSedp$;qa6+JgAE!p!<%jhaC>VY1YuKz=i0b||F!{bjGl%CD4;!K zZ|&QeQt{1=CiJ}CS4A2|-rN8(P0#OkZ*D9pgBNaZZ*DBIf`SEg>OUiintw*>14?j* zJj4+f%FS6$eK}7%auy$6YZnfNCkKZYqm$F~x6fbbZ6{C>Oi@9nqkT;olK??8a*7cW ziQX`OdwUBV4u46`G?Q=L8&Ad6Mf_2PbAQ8{R754xBVnlL0?oVh;np<_1T$`C&+m4hr)>Dob6Kqr z`#Vm;A4x=5fMT8K0YIB5AC45v$r2Q~L?AH1E0|N3s5FSxDqThiN24?{B@03$t*KsV z6Nle{uH#hFhO}YwSP!{4fWHTL=#F#BX=)E+H%rh&^t|#}lW&Vqi_?p++w3@-LT#0$e zw82swog7>Y_l^&1@``!5sk%qtk~prpkGkXAR#_Hu{Jz&2xYI zjo0&fUf3#T9M`k9cm4ABl&A!#70NmbwbetV; zMUtnnk!DE|FH6#tw^YNlHbL0P@sJ89O)Tk_=&uFJmLfpTuD>2_PCw(WMWoGMUnbrb z(KJP!TamK3D65I9q9_Bel5wESW;o640KmSPFIey>sST`@jqvQOdU@2H(*H?E`FHg- zseo!%=O->;&VNOP9Ux<#C^)%d``Y|eHR*eZ&Ef%p6BMAh@91?Y{cbnpftTB?fX~xp zYS-xN#hkE&MBNIq?o)*KU(;IRzl#}0T0uP(Kg?0k9r54Jpx3L#f4hV2{!{$-813e! z`^q`IjtL8m&ua`bpV)H}Qxf33>Zbl#h!e`19#E(FY<~`tJX=a&oSn?zX~>fW3PD4J z&!9xY0(iY+e$x3_GMUh8a64`-K64Cv`vSFxN^%O?i(SH}ghX^gG1Lx*Vcc_mLyOzM zD@{QULc$mWqWuxc=U6(kw!@uJj6w-SpiQn}sNEMeqY_?>mqru^!!r%5w-fCuz4V-; z2?*=3SbrqB(`wJg%{!{#ibj!+ITES)lsZmHqA2BdwPXuFJ(F(9OUORv0!=|ye&0mk z>8`1NKR3+#Z#SROg2!A87D?UpwR~1y-jlglP^Ko}{!4cLCEXe>OLTMnYX4c$y3%y& zHImja=&3YQn(BvzipUtFb<=9ViaD*1r7ULqJAW<4fX^T>j{le4a2+i#C3(;<15XbXT$^UCj1#9m2T(oyc^RVVseGnmQ?N3;vo z=<*ppC0t=`)J-gN!pIcE&Uoop;*B#KQMO7gON!quxB4(UtvuxJ@w#xbrC%0K`i)3w zoqz7u4SE_o0|^4{Zl*!n+CiBPdlr7U${uYJvi3(=#O2k)@Z|+S68?Pb|raPRmYGHxc2 z??LMQ+2QFIlFKvC_YvUU+1YO=rw481eiD4{*FHd+yZ#lIr#NYTE$yK9NNu;Exy0qY zu>6Y4Hhr$x{}p1`J2*ZXZZ7!RDaxk8wp1QL-YZUOHjr^!&lb5hhE^$>ynmnJt8~3f zmi3a$jY!oyZ9=46yty%va;J78=FG8u%bO_`*Cv0cWA~VW(GtiBVAFHQKNJ@>hW*r2iqDmZ~v}*5Z=p zkSlypt8guTaYN5)o=1yvwYnZTocdr$**e~JK200uauIM{bp!o!ShukE#Zo)BU4i|s zh_lnOJX^Q8c5*n6)$)Lfyh?c`hE?lzjV$dV{Rbu~Mf`Phv;mR_nt!6EiTej;s1ZJw z>zfO(O4ak%gv||lS-Erpk{3`vD4kN7b^%qc-TpFa-#RJv)E=$1M7kTt+rJQqS{PQ)RrYl=3^ALf3|X)E?F^UPsgeMCtAz?A1{K3{WB1E z?f=`oe&hbv?$iGNC@tL`2n#n!F1%n|Z5-skgxUt5Z|9@7i1*7*nTweJ0S=psJJ$KN z;Ppw3qC<5DxqmyUQoiGz9$}Z>Y?4r^U}#V;HpgnVs(L9nr+Ozb`Zum9wCZ#^&K+7* zO@6FYqLwVgY3Q-@AiB?`i*kjMi#f(~8({S@)&#@Mz_|&(dLGCx1Qbx$_865ivzIsviusod`CL z9ZQ?s3;fj1SaEl}QP7&-=&mN9SDsxq!7FyTTJd)Oy0d`|*IL%U()Qi_tDP%`fufv! zjWxJy{qNS-|8{SCcks0SAEUMVRy=H3`|c*LR84K%uT97`(rj*aDPhL>rR#$xm|Kl{ ztzmXhcYifSl`f*R=5L(H<(OZmFVnwl;lrQbY0&RJW~Vk{D)q|^M!x29yFn*VE1Jq` z0Ef6h@o$hW$=AQ9sXeu)_HW((HvjEyr)FMU?NF0aMCwjCq&mi~Rf!lY!_SB!+vuDq8{hyOCLHV~BfHnHRH`snt*Z=J| z+fVxc7;OsJEqKheROE ziJ)X0q6EcZj1UtkF#yUGhXqdrD2(EeD3q?_2sCElfG13OFmN0iktuo(fWVkbs<>Db zwxlOf%uzT1aT10j9#Vhd!SQ6s)kvU3rW^o8rXF+*0)N$UoGmylhQY53yv981yF-VqEeJiA&DVI z5mBiPpL8gr>LBYVHLlWI{S^S2W@6xh5(%0omNhU= zLC*4zU4K9S_$mDaumuMKi9!gdKwoh|Q39Q4_ADUa>>CAmLsRIwMOOh8(2b!tC!%+K zecj6!$LDN9r!6l6qDTqjIjZt>VVo$4_40{1LZl@DVosTo`Irf1!E%IMyg?uQ8NX(* zv*YdT!0jFU@BgeDt*Kf&b_fi9zc!_J0*TE&PW zh7dbC5q3Wf(#Lw)?QYwNr}AUi(e(R-87+DwNsVXb7XAxeur z^-Jq_5GGQgI376}Tfggn*Voh^u{jl-MaWcPX&q#9J^11`4?6EJ4lKd@K|uAyNC?2L++EXQ|@qa_Wu0hDC>B>qUYJs;qm$9 z(QyC!cSnaFbd20s+D1Q(GTW#%X7tnO^5p2`^z7HmcgH8k7anx>2HPi{^ws;(yVL!{ z+AC)ZM%s~-3YlM*-MDz88Dn2AGptf^L8f>R5-D>zBEFAOp6~!YI71TrBB;Vs=6|O{ z=wIl;-jCFLGe&Df)XZD0>059b+ZFNPy~JEBVD#ajBD@D7p;1bT-d~sQ37<{+px@tw z_}p}V2I&rEQ-RXZ-mo3Mrg&(Tj7=%K(WDc`xH1bUJ-EF~5ntt@g-dxa1?u{C%4Te9 zM-|F0@eKmauFS-k0d5ARIwThSW`EHg^I*}nT+*Tz>5?Q&sMd?au}HRURl9{m1?Q476e8xt|C#86!oO8dS<$ySD?Oo$^;@t4O5);j7qj0bp*q1gw`B7Z3!qR1BQ z_dgsmnP~TBVP1Z1xAv)R*m8}}z4PAi^y28;RX6IPaIA~}`rEH-@!#&=&hAtE_ZV&9 z!jGt|OH-t3;QiS<7%z0>lX*PGO*B!4^qkwoC#S=H3q!`+?fAqblyJlB>B zytj?s#-i!I07Y-t7*qRnrhim?d#e#Wua8xs?jvt+0hz|<^?J9r7L|bucXzk97FdD7 zc6I6>Lx~zk>flM}40(VfE>tHcId#-r?WI|Gc%%I@7@i&;U5-xAF5W(Wq4yMDg)l`0 z-L7^dWlVeoO~@IBNF=(${OR2tbUFMfInzYG?cBODM&H#?Hm9dP09?q!X(<57(=4Oe~^eN>CMde2ibyyrQumazRDC&Bk5B+N&#iuC}XO_T@63L>%qMXnGCOz;{a$`X|(F|>FsLDMx+{>+TF^8`LAtHL+;US>J>p?kf_;(b#r-ucnl zhvS2m^)t{mLAwDy=yo%+51rfF&h2fgg)b-z@CLG#4ohszR1o?vjgq-W)2u#q?poHr zn2D!ptu3pW>{3n4fJ04keZuO8nAotyAHcdPBV4a zn`5gHKiu8@;W#_)k_=8`Bh4}%ZkB;5Z>ff8ZGy0oz#$b%no!a$(OcOmQ$>KBTyHhl z9Dhb#3rm}$K99XEtZA}3w<2YBQC4GDMNoF#N;-iun}6Xps{;TBHrF`kVN#n|Db?WG zRdw@_I>rBk4&m30HF17*sPh9C5OGl<2gsNw3Qn)tfi^!?N%|IIqdXvRf&vux9Icnq z>-7TeySdHsd6Xv8dq!R_Bf=6A_A0=7PvP5tOlyh%E@v2O0d-aUFh_xF;=i5Ue!mv~ z?d=ZUJb%T1kI`;#d#{|Mo0zb`_`Jq2^NBqtGbJI;t6u7#1vsIs=>c_%*XAJ6wWTD+ z*~tu^?s+;#A!vZ`36w~f53hI3M;e_clL@_nPPbEw&m2QudQ?Sn4BCrbz{iAybV4!E z4u&Dzb$&q$+w@l&gPw$hG5SRNBa%m0s#&npoqtda0|`W+&75JN-4`{Z5?+iKh82gy zbKO^OC)!nd={m;~5Y}O_Kys(m)<&3TRKYb3LmhJ@Qqw7QoRWlLO6_va7Jhoh-IAA( zz04V!c3Jv<6Naa|rvCig5bwR+d_@Zyb2eBYb=TL@S$TL*;$lIWnn33tvilF&sll>H zH-DF}_Ky{*D=nwik+gqlhz0qFh0u?Oty#%1B8*NBu>$!^`Cr?E2--#5qYHb`4JDKlW-_8%@YNY!qxZ?V_5g%>Nc5igek zW92!P>_7&#lYVGq2wDL&bp31ZzhAqx_bz8>uDJ%9Os zkI~BYpCpcDZ$5CYC<{C|%*DXT(o#AiUSYwi$wdcJqiGKpjmc;X3G+?i6EMmGWD0im zVC`k4eEfEv56*qPb2-L>atnObmeuwBf5<&x-Ds#NSZU!+Bf+CKky%_J3i^>-l$zF;-n`bU{HY!TRb16h9m}Xxp4xy{ z)UHc7fXf)r!0}f?6B1F^XE5*!^(T25&yE?=LTY z9UZMjmM4+T>CqDC_sq$!q<`wC)ANhXsjBAd?=g9E{BeIYCgXn(G{gOqd+@kv&nO zn%xLheb6RI%JsJ!BPkDRM`BKv+qb-#QgIDa<@mXRv0g(^9Ty9(xX(imE)GTy>H^*G z5U>G$jZ?JwF<~)0q;q5_Zx06b`@eg;J5T5TkJ8pua%YD<&$WUN z(_`V)>Yophb6>k`<bUWmEU+JA3Yz<)V)*S?!7Fg0?SBI=3ZW zQ-+kTDA}InJAX^g3fEnaq-c%*U*gB?SQkI~x74+#nqp;forb=F8xH7s5#L@n{@|U|U)rz6mjNAXXPF3I)Z)qJH>#sxk!jYjq&Jy99GpWyg>>90RXy|9lJB_VzeLac%^u9AJ^d&9D(9?M02&kjDv8r$-dC=? zj-6NTm|QupTovihT+pfW>i?WA_&@~ZiG<_BBk8!Y;D4g89G3=2dbYdZe>(15`WrmJ cr)$(t?WsMrf9m%C0RRC1|2ksOgaBXw0EtV>!2kdN diff --git a/owncloud/templates/deployment.yaml b/owncloud/templates/deployment.yaml index b728e2e..0cb2168 100644 --- a/owncloud/templates/deployment.yaml +++ b/owncloud/templates/deployment.yaml @@ -20,22 +20,10 @@ spec: {{- end }} securityContext: {{- toYaml .Values.podSecurityContext | nindent 8 }} - {{- if .Values.initContainers.permissions.enabled }} - initContainers: - - name: permissions-init - image: "{{ .Values.initContainers.permissions.image }}:{{ .Values.initContainers.permissions.tag }}" - command: {{ .Values.initContainers.permissions.command | toYaml | nindent 12 }} - securityContext: - runAsUser: 0 - runAsGroup: 0 - volumeMounts: - - name: config - mountPath: /var/www/owncloud/config - - name: files - mountPath: /var/www/owncloud/data - {{- end }} containers: - name: {{ .Chart.Name }} + securityContext: + {{- toYaml .Values.containerSecurityContext | nindent 12 }} image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}" imagePullPolicy: {{ .Values.image.pullPolicy }} env: diff --git a/owncloud/values.yaml b/owncloud/values.yaml index e29049b..6baacce 100644 --- a/owncloud/values.yaml +++ b/owncloud/values.yaml @@ -11,28 +11,13 @@ image: # Security context for the container podSecurityContext: - runAsUser: 33 - runAsGroup: 33 fsGroup: 33 -# Init container for setting up permissions -initContainers: - permissions: - enabled: true - image: busybox - tag: latest - command: - - sh - - -c - - | - # Create directories if they don't exist - mkdir -p /var/www/owncloud/config /var/www/owncloud/data - # Set permissions but preserve mount points - find /var/www/owncloud/config -exec chown 33:33 {} \; - find /var/www/owncloud/data -exec chown 33:33 {} \; - # Ensure base directories have correct permissions - chown 33:33 /var/www/owncloud/config - chown 33:33 /var/www/owncloud/data +containerSecurityContext: + runAsUser: 33 + runAsGroup: 33 + allowPrivilegeEscalation: false + # Database configuration database: