diff --git a/charts/unifi/Chart.yaml b/charts/unifi/Chart.yaml index 2b1a2772..60da052c 100644 --- a/charts/unifi/Chart.yaml +++ b/charts/unifi/Chart.yaml @@ -2,7 +2,7 @@ apiVersion: v1 appVersion: 5.9.29 description: Ubiquiti Network's Unifi Controller name: unifi -version: 0.2.5 +version: 0.2.6 keywords: - ubiquiti - unifi diff --git a/charts/unifi/README.md b/charts/unifi/README.md index 72ce24ee..dda6bd06 100644 --- a/charts/unifi/README.md +++ b/charts/unifi/README.md @@ -74,10 +74,9 @@ The following tables lists the configurable parameters of the Unifi chart and th | `ingress.hosts` | Ingress accepted hostnames | `chart-example.local` | | `ingress.tls` | Ingress TLS configuration | `[]` | | `timezone` | Timezone the Unifi controller should run as, e.g. 'America/New York' | `UTC` | -| `runAsRoot` | Run the controller as UID0 (root user) | `false` | +| `runAsRoot` | Run the controller as UID0 (root user); if set to false, will give container SETFCAP instead | `false` | | `UID` | Run the controller as user UID | `999` | | `GID` | Run the controller as group GID | `999` | -| `addSetfcap` | Give the controller container the SETFCAP capability; this is necessary when not running as root | `true` | | `mongodb.enabled` | Use external MongoDB for data storage | `false` | | `mongodb.dbUri` | external MongoDB URI | `mongodb://mongo/unifi` | | `mongodb.statDbUri` | external MongoDB statdb URI | `mongodb://mongo/unifi_stat` | diff --git a/charts/unifi/templates/deployment.yaml b/charts/unifi/templates/deployment.yaml index 33dc6ed8..1b1fc2eb 100644 --- a/charts/unifi/templates/deployment.yaml +++ b/charts/unifi/templates/deployment.yaml @@ -42,7 +42,7 @@ spec: - name: stun containerPort: 3478 protocol: UDP - {{- if .Values.addSetfcap }} + {{- if not .Values.runAsRoot }} securityContext: capabilities: add: diff --git a/charts/unifi/values.yaml b/charts/unifi/values.yaml index a6bd34f6..817b99b1 100644 --- a/charts/unifi/values.yaml +++ b/charts/unifi/values.yaml @@ -109,7 +109,6 @@ ingress: timezone: UTC runAsRoot: false -addSetfcap: true UID: 999 GID: 999