diff --git a/library/ix-dev/charts/pihole/Chart.yaml b/library/ix-dev/charts/pihole/Chart.yaml index 551520cd28..fca2f6c1e7 100644 --- a/library/ix-dev/charts/pihole/Chart.yaml +++ b/library/ix-dev/charts/pihole/Chart.yaml @@ -3,7 +3,7 @@ description: DNS and Ad-filtering for your network. annotations: title: Pi-hole type: application -version: 2.0.3 +version: 2.0.4 apiVersion: v2 appVersion: 2023.11.0 kubeVersion: '>=1.16.0-0' diff --git a/library/ix-dev/charts/pihole/metadata.yaml b/library/ix-dev/charts/pihole/metadata.yaml index e2a8f0a118..c03dbc8811 100644 --- a/library/ix-dev/charts/pihole/metadata.yaml +++ b/library/ix-dev/charts/pihole/metadata.yaml @@ -23,6 +23,8 @@ capabilities: description: Pi-hole is able to perform various network-related operations. - name: NET_BIND_SERVICE description: Pi-hole is able to bind to a privileged port. + - name: NET_RAW + description: Pi-hole is able to use raw sockets. - name: KILL description: Pi-hole is able to kill processes. hostMounts: [] diff --git a/library/ix-dev/charts/pihole/migrations/migrate b/library/ix-dev/charts/pihole/migrations/migrate index 12a1927377..f3879298c1 100755 --- a/library/ix-dev/charts/pihole/migrations/migrate +++ b/library/ix-dev/charts/pihole/migrations/migrate @@ -81,11 +81,11 @@ def migrate_common_lib(values): def migrate(values): # If this missing, we have already migrated if not 'appVolumeMounts' in values.keys(): - return values + # Handle typo for users that already gone through the migration + if 'cache' in values['piholeStorage'].keys(): + values['piholeStorage']['dnsmasq'] = values['piholeStorage'].pop('cache') - # Handle typo for users that already gone through the migration - if 'cache' in values['piholeStorage'].keys(): - values['piholeStorage']['dnsmasq'] = values['piholeStorage'].pop('cache') + return values return migrate_common_lib(values) diff --git a/library/ix-dev/charts/pihole/templates/_pihole.tpl b/library/ix-dev/charts/pihole/templates/_pihole.tpl index 76f57c1dba..e8d484279a 100644 --- a/library/ix-dev/charts/pihole/templates/_pihole.tpl +++ b/library/ix-dev/charts/pihole/templates/_pihole.tpl @@ -20,6 +20,7 @@ workload: capabilities: add: - NET_ADMIN + - NET_RAW - NET_BIND_SERVICE - CHOWN - DAC_OVERRIDE