pub/charts
1
0
Fork 0
Code Issues Pull requests Releases Packages 19 Activity Actions

fix(penpot) Comment out securityContext for now since it seems like it is causing issues with the filesystem

Browse source
This commit is contained in:
Tommy 2023-12-26 00:49:52 +01:00
parent 2987ae970c
commit 871e6927da
No known key found for this signature in database
4 changed files with 31 additions and 31 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
charts/penpot/Chart.yaml
View file

@ -4,7 +4,7 @@ maintainers:
email: tommy@skaug.me email: tommy@skaug.me
apiVersion: v2 apiVersion: v2
appVersion: 1.19.3 appVersion: 1.19.3
version: 2.0.0 version: 2.0.1
description: Penpot is a design and prototyping platform for teams and individuals. description: Penpot is a design and prototyping platform for teams and individuals.
home: https://github.com/tommy-skaug/charts home: https://github.com/tommy-skaug/charts
icon: https://avatars.githubusercontent.com/u/30179644?s=200&v=4 icon: https://avatars.githubusercontent.com/u/30179644?s=200&v=4

20
charts/penpot/templates/deployment-backend.yaml
View file

@ -16,21 +16,21 @@ spec:
app: {{ include "penpot.fullname" . }}-backend app: {{ include "penpot.fullname" . }}-backend
spec: spec:
serviceAccountName: {{ include "penpot.serviceAccountName" . }} serviceAccountName: {{ include "penpot.serviceAccountName" . }}
securityContext: # securityContext:
fsGroup: 1001 # fsGroup: 1001
containers: containers:
- name: {{ .Chart.Name }}-backend - name: {{ .Chart.Name }}-backend
image: "penpotapp/backend:{{ .Values.penpotVersion }}" image: "penpotapp/backend:{{ .Values.penpotVersion }}"
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
securityContext: # securityContext:
runAsUser: 1001 # runAsUser: 1001
allowPrivilegeEscalation: false # allowPrivilegeEscalation: false
capabilities: # capabilities:
drop: # drop:
- all # - all
readOnlyRootFilesystem: false # readOnlyRootFilesystem: false
runAsNonRoot: true # runAsNonRoot: true
volumeMounts: volumeMounts:
- mountPath: /opt/data - mountPath: /opt/data
name: app-data name: app-data

20
charts/penpot/templates/deployment-exporter.yaml
View file

@ -16,21 +16,21 @@ spec:
app: {{ include "penpot.fullname" . }}-exporter app: {{ include "penpot.fullname" . }}-exporter
spec: spec:
serviceAccountName: {{ include "penpot.serviceAccountName" . }} serviceAccountName: {{ include "penpot.serviceAccountName" . }}
securityContext: # securityContext:
fsGroup: 1001 # fsGroup: 1001
containers: containers:
- name: {{ .Chart.Name }}-exporter - name: {{ .Chart.Name }}-exporter
image: "penpotapp/exporter:{{ .Values.penpotVersion }}" image: "penpotapp/exporter:{{ .Values.penpotVersion }}"
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
securityContext: # securityContext:
runAsUser: 1001 # runAsUser: 1001
allowPrivilegeEscalation: false # allowPrivilegeEscalation: false
capabilities: # capabilities:
drop: # drop:
- all # - all
readOnlyRootFilesystem: false # readOnlyRootFilesystem: false
runAsNonRoot: true # runAsNonRoot: true
env: env:
- name: PENPOT_PUBLIC_URI - name: PENPOT_PUBLIC_URI
value: {{ .Values.publicURL | quote }} value: {{ .Values.publicURL | quote }}

20
charts/penpot/templates/deployment-frontend.yaml
View file

@ -16,20 +16,20 @@ spec:
app: {{ include "penpot.fullname" . }}-frontend app: {{ include "penpot.fullname" . }}-frontend
spec: spec:
serviceAccountName: {{ include "penpot.serviceAccountName" . }} serviceAccountName: {{ include "penpot.serviceAccountName" . }}
securityContext: # securityContext:
fsGroup: 1001 # fsGroup: 1001
containers: containers:
- name: {{ .Chart.Name }}-frontend - name: {{ .Chart.Name }}-frontend
image: "penpotapp/frontend:{{ .Values.penpotVersion }}" image: "penpotapp/frontend:{{ .Values.penpotVersion }}"
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
securityContext: # securityContext:
runAsUser: 1001 # runAsUser: 1001
allowPrivilegeEscalation: false # allowPrivilegeEscalation: false
capabilities: # capabilities:
drop: # drop:
- all # - all
readOnlyRootFilesystem: false # readOnlyRootFilesystem: false
runAsNonRoot: true # runAsNonRoot: true
env: env:
- name: PENPOT_PUBLIC_URI - name: PENPOT_PUBLIC_URI
value: {{ .Values.publicURL | quote }} value: {{ .Values.publicURL | quote }}