diff --git a/stable/duckdns/1.0.12/CHANGELOG.md b/stable/duckdns/1.0.13/CHANGELOG.md similarity index 91% rename from stable/duckdns/1.0.12/CHANGELOG.md rename to stable/duckdns/1.0.13/CHANGELOG.md index 314980466bd..bd84105a7f7 100644 --- a/stable/duckdns/1.0.12/CHANGELOG.md +++ b/stable/duckdns/1.0.13/CHANGELOG.md @@ -1,6 +1,15 @@ # Changelog
+ +### [duckdns-1.0.13](https://github.com/truecharts/apps/compare/duckdns-1.0.12...duckdns-1.0.13) (2022-04-24) + +#### Fix + +* rofs false ([#2546](https://github.com/truecharts/apps/issues/2546)) + + + ### [duckdns-1.0.12](https://github.com/truecharts/apps/compare/duckdns-1.0.11...duckdns-1.0.12) (2022-04-20) @@ -88,12 +97,3 @@ * remove PUID from per-app env-vars if set to 568 * update helm general major helm releases ([#2021](https://github.com/truecharts/apps/issues/2021)) -#### Fix - -* BREAKING CHANGE Move some env-vars outside of env section ([#2010](https://github.com/truecharts/apps/issues/2010)) - - - - -### [duckdns-0.0.23](https://github.com/truecharts/apps/compare/duckdns-0.0.22...duckdns-0.0.23) (2022-03-02) - diff --git a/stable/duckdns/1.0.12/CONFIG.md b/stable/duckdns/1.0.13/CONFIG.md similarity index 100% rename from stable/duckdns/1.0.12/CONFIG.md rename to stable/duckdns/1.0.13/CONFIG.md diff --git a/stable/duckdns/1.0.12/Chart.lock b/stable/duckdns/1.0.13/Chart.lock similarity index 80% rename from stable/duckdns/1.0.12/Chart.lock rename to stable/duckdns/1.0.13/Chart.lock index aeb34e5a62d..5c18acd8c1b 100644 --- a/stable/duckdns/1.0.12/Chart.lock +++ b/stable/duckdns/1.0.13/Chart.lock @@ -3,4 +3,4 @@ dependencies: repository: https://library-charts.truecharts.org version: 9.2.9 digest: sha256:a85b7b0cfb97dbbbe2d725f347e04669e63b233a35e17c9d699ee4567899064d -generated: "2022-04-20T20:49:19.948696251Z" +generated: "2022-04-24T10:40:54.489713412Z" diff --git a/stable/duckdns/1.0.12/Chart.yaml b/stable/duckdns/1.0.13/Chart.yaml similarity index 97% rename from stable/duckdns/1.0.12/Chart.yaml rename to stable/duckdns/1.0.13/Chart.yaml index 7dc5ceb3d31..0b47061811c 100644 --- a/stable/duckdns/1.0.12/Chart.yaml +++ b/stable/duckdns/1.0.13/Chart.yaml @@ -1,7 +1,7 @@ apiVersion: v2 kubeVersion: ">=1.16.0-0" name: duckdns -version: 1.0.12 +version: 1.0.13 appVersion: "latest" description: Duckdns is a free service which will point a DNS (sub domains of duckdns.org) to an IP of your choice. type: application diff --git a/stable/duckdns/1.0.12/README.md b/stable/duckdns/1.0.13/README.md similarity index 100% rename from stable/duckdns/1.0.12/README.md rename to stable/duckdns/1.0.13/README.md diff --git a/stable/duckdns/1.0.12/app-readme.md b/stable/duckdns/1.0.13/app-readme.md similarity index 100% rename from stable/duckdns/1.0.12/app-readme.md rename to stable/duckdns/1.0.13/app-readme.md diff --git a/stable/duckdns/1.0.12/charts/common-9.2.9.tgz b/stable/duckdns/1.0.13/charts/common-9.2.9.tgz similarity index 100% rename from stable/duckdns/1.0.12/charts/common-9.2.9.tgz rename to stable/duckdns/1.0.13/charts/common-9.2.9.tgz diff --git a/stable/duckdns/1.0.12/helm-values.md b/stable/duckdns/1.0.13/helm-values.md similarity index 100% rename from stable/duckdns/1.0.12/helm-values.md rename to stable/duckdns/1.0.13/helm-values.md diff --git a/stable/duckdns/1.0.12/ix_values.yaml b/stable/duckdns/1.0.13/ix_values.yaml similarity index 93% rename from stable/duckdns/1.0.12/ix_values.yaml rename to stable/duckdns/1.0.13/ix_values.yaml index e79e45eaf90..a6c5798d423 100644 --- a/stable/duckdns/1.0.12/ix_values.yaml +++ b/stable/duckdns/1.0.13/ix_values.yaml @@ -5,6 +5,7 @@ image: securityContext: runAsNonRoot: false + readOnlyRootFilesystem: false podSecurityContext: runAsUser: 0 diff --git a/stable/duckdns/1.0.12/questions.yaml b/stable/duckdns/1.0.13/questions.yaml similarity index 99% rename from stable/duckdns/1.0.12/questions.yaml rename to stable/duckdns/1.0.13/questions.yaml index fbe10b7418a..646ba263c7d 100644 --- a/stable/duckdns/1.0.12/questions.yaml +++ b/stable/duckdns/1.0.13/questions.yaml @@ -1141,7 +1141,7 @@ questions: label: "ReadOnly Root Filesystem" schema: type: boolean - default: true + default: false - variable: allowPrivilegeEscalation label: "Allow Privilege Escalation" schema: diff --git a/stable/duckdns/1.0.12/security.md b/stable/duckdns/1.0.13/security.md similarity index 96% rename from stable/duckdns/1.0.12/security.md rename to stable/duckdns/1.0.13/security.md index 328264b0b9b..f0b0b0110f1 100644 --- a/stable/duckdns/1.0.12/security.md +++ b/stable/duckdns/1.0.13/security.md @@ -24,6 +24,7 @@ hide: | Kubernetes Security Check | KSV012 | Runs as root user | MEDIUM |
Expand... 'runAsNonRoot' forces the running image to run as a non-root user to ensure least privileges.

Container 'RELEASE-NAME-duckdns' of Deployment 'RELEASE-NAME-duckdns' should set 'securityContext.runAsNonRoot' to true
|
Expand...https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted
https://avd.aquasec.com/appshield/ksv012
| | Kubernetes Security Check | KSV012 | Runs as root user | MEDIUM |
Expand... 'runAsNonRoot' forces the running image to run as a non-root user to ensure least privileges.

Container 'autopermissions' of Deployment 'RELEASE-NAME-duckdns' should set 'securityContext.runAsNonRoot' to true
|
Expand...https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted
https://avd.aquasec.com/appshield/ksv012
| | Kubernetes Security Check | KSV012 | Runs as root user | MEDIUM |
Expand... 'runAsNonRoot' forces the running image to run as a non-root user to ensure least privileges.

Container 'hostpatch' of Deployment 'RELEASE-NAME-duckdns' should set 'securityContext.runAsNonRoot' to true
|
Expand...https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted
https://avd.aquasec.com/appshield/ksv012
| +| Kubernetes Security Check | KSV014 | Root file system is not read-only | LOW |
Expand... An immutable root file system prevents applications from writing to their local disk. This can limit intrusions, as attackers will not be able to tamper with the file system or write foreign executables to disk.

Container 'RELEASE-NAME-duckdns' of Deployment 'RELEASE-NAME-duckdns' should set 'securityContext.readOnlyRootFilesystem' to true
|
Expand...https://kubesec.io/basics/containers-securitycontext-readonlyrootfilesystem-true/
https://avd.aquasec.com/appshield/ksv014
| | Kubernetes Security Check | KSV014 | Root file system is not read-only | LOW |
Expand... An immutable root file system prevents applications from writing to their local disk. This can limit intrusions, as attackers will not be able to tamper with the file system or write foreign executables to disk.

Container 'autopermissions' of Deployment 'RELEASE-NAME-duckdns' should set 'securityContext.readOnlyRootFilesystem' to true
|
Expand...https://kubesec.io/basics/containers-securitycontext-readonlyrootfilesystem-true/
https://avd.aquasec.com/appshield/ksv014
| | Kubernetes Security Check | KSV014 | Root file system is not read-only | LOW |
Expand... An immutable root file system prevents applications from writing to their local disk. This can limit intrusions, as attackers will not be able to tamper with the file system or write foreign executables to disk.

Container 'hostpatch' of Deployment 'RELEASE-NAME-duckdns' should set 'securityContext.readOnlyRootFilesystem' to true
|
Expand...https://kubesec.io/basics/containers-securitycontext-readonlyrootfilesystem-true/
https://avd.aquasec.com/appshield/ksv014
| | Kubernetes Security Check | KSV015 | CPU requests not specified | LOW |
Expand... When containers have resource requests specified, the scheduler can make better decisions about which nodes to place pods on, and how to deal with resource contention.

Container 'hostpatch' of Deployment 'RELEASE-NAME-duckdns' should set 'resources.requests.cpu'
|
Expand...https://cloud.google.com/blog/products/containers-kubernetes/kubernetes-best-practices-resource-requests-and-limits
https://avd.aquasec.com/appshield/ksv015
| diff --git a/stable/duckdns/1.0.12/templates/common.yaml b/stable/duckdns/1.0.13/templates/common.yaml similarity index 100% rename from stable/duckdns/1.0.12/templates/common.yaml rename to stable/duckdns/1.0.13/templates/common.yaml diff --git a/stable/duckdns/1.0.12/values.yaml b/stable/duckdns/1.0.13/values.yaml similarity index 100% rename from stable/duckdns/1.0.12/values.yaml rename to stable/duckdns/1.0.13/values.yaml