Files
chart/library/common/templates/app_functions/_permissions.tpl
Stavros Kois 929e60d801 NAS-121003 / 23.10 / Adapt charts CI and improve/fix common (#1011)
* Adapt charts CI and improve/fix common

* add check on permissions contaienr

* add postgres template

* update comments

* Update create_app.sh

* add check

* update script

* auto gen item.yaml from Chart,yaml

* rename readme on dest

* duplicate readme from the same source

* correct comment

* reoder

* remove extra space

* keep both README and app-readme

* update regex, to also allow 2 letter names, which is also valid

* No need to check host network if there aren't any pod values

* use same pattern as the pod.name label (not prepending release-name

* update deps

* add chart dirs to ci

* Add a validation to check if there is any yaml errors after merging files

* update charts path on ci

* common/1.0.0/ -> common/

* update common-test dep path

* temp update create_app script

* make permissions container name configurable, incase we want to change order of execution

* update naming convention

* fix typo and a missed name change

* do not allow `--` in names
2023-03-16 17:36:19 +02:00

55 lines
1.6 KiB
Smarty

{{/* Returns an init container that fixes permissions */}}
{{/* Call this template:
{{ include "ix.v1.common.app.permissions" (dict "UID" 568 "GID" 568 "type" "init") }}
type (optional): init or install (default: install)
UID: UID to change permissions to
GID: GID to change permissions to
*/}}
{{- define "ix.v1.common.app.permissions" -}}
{{- $type := .type | default "install" -}}
{{- $containerName := .containerName | default "permissions" -}}
{{- $UID := .UID -}}
{{- $GID := .GID -}}
{{- if (kindIs "invalid" $type) -}}
{{- fail "Permissions Container - [type] cannot be empty" -}}
{{- end -}}
{{- if (kindIs "invalid" $containerName) -}}
{{- fail "Permissions Container - [containerName] cannot be empty" -}}
{{- end -}}
{{- if (kindIs "invalid" $GID) -}}
{{- fail "Permissions Container - [GID] cannot be empty" -}}
{{- end -}}
{{- if (kindIs "invalid" $UID) -}}
{{- fail "Permissions Container - [UID] cannot be empty" -}}
{{- end }}
{{ $containerName }}:
enabled: true
type: {{ $type }}
imageSelector: bashImage
resources:
limits:
cpu: 1000m
memory: 512Mi
securityContext:
runAsUser: 0
runAsGroup: 0
runAsNonRoot: false
readOnlyRootFilesystem: false
capabilities:
add:
- CHOWN
command: bash
args:
- -c
- |
echo "Changing ownership to {{ $UID }}:{{ $GID }} on the following directories:"
ls -la /mnt/directories
chown -R {{ $UID }}:{{ $GID }} /mnt/directories
echo "Finished changing ownership"
echo "Permissions after changing ownership:"
ls -la /mnt/directories
{{- end -}}