stable/unifi: Replace "addSetfcap" option with simply adding that capability when "runAsRoot" is not set to true (#10359)

Signed-off-by: Mike Cronce <mike@quadra-tec.net>
This commit is contained in:
Mike Cronce 2019-01-03 14:52:03 -05:00 committed by Kubernetes Prow Robot
parent 9e94cc3124
commit 23167d43ad
4 changed files with 3 additions and 5 deletions

View File

@ -2,7 +2,7 @@ apiVersion: v1
appVersion: 5.9.29
description: Ubiquiti Network's Unifi Controller
name: unifi
version: 0.2.5
version: 0.2.6
keywords:
- ubiquiti
- unifi

View File

@ -74,10 +74,9 @@ The following tables lists the configurable parameters of the Unifi chart and th
| `ingress.hosts` | Ingress accepted hostnames | `chart-example.local` |
| `ingress.tls` | Ingress TLS configuration | `[]` |
| `timezone` | Timezone the Unifi controller should run as, e.g. 'America/New York' | `UTC` |
| `runAsRoot` | Run the controller as UID0 (root user) | `false` |
| `runAsRoot` | Run the controller as UID0 (root user); if set to false, will give container SETFCAP instead | `false` |
| `UID` | Run the controller as user UID | `999` |
| `GID` | Run the controller as group GID | `999` |
| `addSetfcap` | Give the controller container the SETFCAP capability; this is necessary when not running as root | `true` |
| `mongodb.enabled` | Use external MongoDB for data storage | `false` |
| `mongodb.dbUri` | external MongoDB URI | `mongodb://mongo/unifi` |
| `mongodb.statDbUri` | external MongoDB statdb URI | `mongodb://mongo/unifi_stat` |

View File

@ -42,7 +42,7 @@ spec:
- name: stun
containerPort: 3478
protocol: UDP
{{- if .Values.addSetfcap }}
{{- if not .Values.runAsRoot }}
securityContext:
capabilities:
add:

View File

@ -109,7 +109,6 @@ ingress:
timezone: UTC
runAsRoot: false
addSetfcap: true
UID: 999
GID: 999