master-group/charts
2
0
Fork 0
mirror of https://github.com/k8s-at-home/charts.git synced 2025-01-24 07:59:02 +00:00
Code Issues Packages Projects Releases Wiki Activity

stable/unifi: Replace "addSetfcap" option with simply adding that capability when "runAsRoot" is not set to true (#10359)

Browse Source 
Signed-off-by: Mike Cronce <mike@quadra-tec.net>
This commit is contained in:
Mike Cronce 2019-01-03 14:52:03 -05:00 committed by Jeff Billimek
parent 1a67cf9070
commit ac0202a0c4
No known key found for this signature in database
GPG Key ID: 214B3EF39B4956B7
4 changed files with 3 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
charts/unifi/Chart.yaml
View File

@ -2,7 +2,7 @@ apiVersion: v1
appVersion: 5.9.29 appVersion: 5.9.29
description: Ubiquiti Network's Unifi Controller description: Ubiquiti Network's Unifi Controller
name: unifi name: unifi
version: 0.2.5 version: 0.2.6
keywords: keywords:
- ubiquiti - ubiquiti
- unifi - unifi

3
charts/unifi/README.md
View File

@ -74,10 +74,9 @@ The following tables lists the configurable parameters of the Unifi chart and th
| `ingress.hosts` | Ingress accepted hostnames | `chart-example.local` | | `ingress.hosts` | Ingress accepted hostnames | `chart-example.local` |
| `ingress.tls` | Ingress TLS configuration | `[]` | | `ingress.tls` | Ingress TLS configuration | `[]` |
| `timezone` | Timezone the Unifi controller should run as, e.g. 'America/New York' | `UTC` | | `timezone` | Timezone the Unifi controller should run as, e.g. 'America/New York' | `UTC` |
| `runAsRoot` | Run the controller as UID0 (root user) | `false` | | `runAsRoot` | Run the controller as UID0 (root user); if set to false, will give container SETFCAP instead | `false` |
| `UID` | Run the controller as user UID | `999` | | `UID` | Run the controller as user UID | `999` |
| `GID` | Run the controller as group GID | `999` | | `GID` | Run the controller as group GID | `999` |
| `addSetfcap` | Give the controller container the SETFCAP capability; this is necessary when not running as root | `true` |
| `mongodb.enabled` | Use external MongoDB for data storage | `false` | | `mongodb.enabled` | Use external MongoDB for data storage | `false` |
| `mongodb.dbUri` | external MongoDB URI | `mongodb://mongo/unifi` | | `mongodb.dbUri` | external MongoDB URI | `mongodb://mongo/unifi` |
| `mongodb.statDbUri` | external MongoDB statdb URI | `mongodb://mongo/unifi_stat` | | `mongodb.statDbUri` | external MongoDB statdb URI | `mongodb://mongo/unifi_stat` |

2
charts/unifi/templates/deployment.yaml
View File

@ -42,7 +42,7 @@ spec:
- name: stun - name: stun
containerPort: 3478 containerPort: 3478
protocol: UDP protocol: UDP
{{- if .Values.addSetfcap }} {{- if not .Values.runAsRoot }}
securityContext: securityContext:
capabilities: capabilities:
add: add:

1
charts/unifi/values.yaml
View File

@ -109,7 +109,6 @@ ingress:
timezone: UTC timezone: UTC
runAsRoot: false runAsRoot: false
addSetfcap: true
UID: 999 UID: 999
GID: 999 GID: 999