diff --git a/library/ix-dev/community/dashy/ci/basic-values.yaml b/library/ix-dev/community/dashy/ci/basic-values.yaml index 5d4fe5e5f7..07bcfe995e 100644 --- a/library/ix-dev/community/dashy/ci/basic-values.yaml +++ b/library/ix-dev/community/dashy/ci/basic-values.yaml @@ -1,7 +1,7 @@ dashyNetwork: webPort: 31000 -dashyRunAs: +dashyID: user: 1000 group: 1000 diff --git a/library/ix-dev/community/dashy/ci/hostNet-values.yaml b/library/ix-dev/community/dashy/ci/hostNet-values.yaml new file mode 100644 index 0000000000..2e2e2f92c2 --- /dev/null +++ b/library/ix-dev/community/dashy/ci/hostNet-values.yaml @@ -0,0 +1,7 @@ +dashyNetwork: + webPort: 31000 + hostNetwork: true + +dashyStorage: + config: + type: pvc diff --git a/library/ix-dev/community/dashy/templates/_dashy.tpl b/library/ix-dev/community/dashy/templates/_dashy.tpl index 3fce23d247..a20d94dc92 100644 --- a/library/ix-dev/community/dashy/templates/_dashy.tpl +++ b/library/ix-dev/community/dashy/templates/_dashy.tpl @@ -6,6 +6,8 @@ workload: type: Deployment podSpec: hostNetwork: {{ .Values.dashyNetwork.hostNetwork }} + securityContext: + fsGroup: {{ .Values.dashyID.group }} containers: dashy: enabled: true @@ -15,6 +17,8 @@ workload: runAsUser: 0 runAsGroup: 0 runAsNonRoot: false + fixedEnv: + PUID: {{ .Values.dashyID.user }} env: NODE_ENV: production IS_DOCKER: "true" @@ -54,6 +58,8 @@ workload: runAsUser: 0 runAsGroup: 0 runAsNonRoot: false + fixedEnv: + PUID: {{ .Values.dashyID.user }} command: - /bin/sh args: diff --git a/library/ix-dev/community/dashy/values.yaml b/library/ix-dev/community/dashy/values.yaml index 0443e68c89..f4afc8a244 100644 --- a/library/ix-dev/community/dashy/values.yaml +++ b/library/ix-dev/community/dashy/values.yaml @@ -15,7 +15,7 @@ dashyNetwork: webPort: 31003 hostNetwork: false -dashyRunAs: +dashyID: user: 568 group: 568