eightball/all-in-one
1
0
Fork 0
mirror of https://github.com/nextcloud/all-in-one.git synced 2025-12-20 06:26:57 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 10

fix permissions?

Browse source 
Signed-off-by: Simon L <szaimen@e.mail.de>
This commit is contained in:
Simon L 2023-01-28 22:08:43 +01:00
parent 405162e103
commit 83c68da0a0
11 changed files with 32 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

3
helm-chart/templates/nextcloud-aio-apache-deployment.yaml
View file

@ -21,6 +21,9 @@ spec:
io.kompose.network/nextcloud-aio: "true" io.kompose.network/nextcloud-aio: "true"
io.kompose.service: nextcloud-aio-apache io.kompose.service: nextcloud-aio-apache
spec: spec:
securityContext:
fsGroup: 65534
fsGroupChangePolicy: "OnRootMismatch"
containers: containers:
- env: - env:
- name: APACHE_MAX_SIZE - name: APACHE_MAX_SIZE

3
helm-chart/templates/nextcloud-aio-clamav-deployment.yaml
View file

@ -22,6 +22,9 @@ spec:
io.kompose.network/nextcloud-aio: "true" io.kompose.network/nextcloud-aio: "true"
io.kompose.service: nextcloud-aio-clamav io.kompose.service: nextcloud-aio-clamav
spec: spec:
securityContext:
fsGroup: 65534
fsGroupChangePolicy: "OnRootMismatch"
containers: containers:
- env: - env:
- name: CLAMD_STARTUP_TIMEOUT - name: CLAMD_STARTUP_TIMEOUT

3
helm-chart/templates/nextcloud-aio-collabora-deployment.yaml
View file

@ -22,6 +22,9 @@ spec:
io.kompose.network/nextcloud-aio: "true" io.kompose.network/nextcloud-aio: "true"
io.kompose.service: nextcloud-aio-collabora io.kompose.service: nextcloud-aio-collabora
spec: spec:
securityContext:
fsGroup: 65534
fsGroupChangePolicy: "OnRootMismatch"
containers: containers:
- env: - env:
- name: TZ - name: TZ

3
helm-chart/templates/nextcloud-aio-database-deployment.yaml
View file

@ -21,6 +21,9 @@ spec:
io.kompose.network/nextcloud-aio: "true" io.kompose.network/nextcloud-aio: "true"
io.kompose.service: nextcloud-aio-database io.kompose.service: nextcloud-aio-database
spec: spec:
securityContext:
fsGroup: 65534
fsGroupChangePolicy: "OnRootMismatch"
containers: containers:
- env: - env:
- name: PGTZ - name: PGTZ

3
helm-chart/templates/nextcloud-aio-fulltextsearch-deployment.yaml
View file

@ -22,6 +22,9 @@ spec:
io.kompose.network/nextcloud-aio: "true" io.kompose.network/nextcloud-aio: "true"
io.kompose.service: nextcloud-aio-fulltextsearch io.kompose.service: nextcloud-aio-fulltextsearch
spec: spec:
securityContext:
fsGroup: 65534
fsGroupChangePolicy: "OnRootMismatch"
containers: containers:
- env: - env:
- name: ES_JAVA_OPTS - name: ES_JAVA_OPTS

3
helm-chart/templates/nextcloud-aio-imaginary-deployment.yaml
View file

@ -22,6 +22,9 @@ spec:
io.kompose.network/nextcloud-aio: "true" io.kompose.network/nextcloud-aio: "true"
io.kompose.service: nextcloud-aio-imaginary io.kompose.service: nextcloud-aio-imaginary
spec: spec:
securityContext:
fsGroup: 65534
fsGroupChangePolicy: "OnRootMismatch"
containers: containers:
- env: - env:
- name: TZ - name: TZ

3
helm-chart/templates/nextcloud-aio-nextcloud-deployment.yaml
View file

@ -21,6 +21,9 @@ spec:
io.kompose.network/nextcloud-aio: "true" io.kompose.network/nextcloud-aio: "true"
io.kompose.service: nextcloud-aio-nextcloud io.kompose.service: nextcloud-aio-nextcloud
spec: spec:
securityContext:
fsGroup: 65534
fsGroupChangePolicy: "OnRootMismatch"
containers: containers:
- env: - env:
- name: ADDITIONAL_APKS - name: ADDITIONAL_APKS

3
helm-chart/templates/nextcloud-aio-onlyoffice-deployment.yaml
View file

@ -22,6 +22,9 @@ spec:
io.kompose.network/nextcloud-aio: "true" io.kompose.network/nextcloud-aio: "true"
io.kompose.service: nextcloud-aio-onlyoffice io.kompose.service: nextcloud-aio-onlyoffice
spec: spec:
securityContext:
fsGroup: 65534
fsGroupChangePolicy: "OnRootMismatch"
containers: containers:
- env: - env:
- name: JWT_ENABLED - name: JWT_ENABLED

3
helm-chart/templates/nextcloud-aio-redis-deployment.yaml
View file

@ -21,6 +21,9 @@ spec:
io.kompose.network/nextcloud-aio: "true" io.kompose.network/nextcloud-aio: "true"
io.kompose.service: nextcloud-aio-redis io.kompose.service: nextcloud-aio-redis
spec: spec:
securityContext:
fsGroup: 65534
fsGroupChangePolicy: "OnRootMismatch"
containers: containers:
- env: - env:
- name: REDIS_HOST_PASSWORD - name: REDIS_HOST_PASSWORD

3
helm-chart/templates/nextcloud-aio-talk-deployment.yaml
View file

@ -22,6 +22,9 @@ spec:
io.kompose.network/nextcloud-aio: "true" io.kompose.network/nextcloud-aio: "true"
io.kompose.service: nextcloud-aio-talk io.kompose.service: nextcloud-aio-talk
spec: spec:
securityContext:
fsGroup: 65534
fsGroupChangePolicy: "OnRootMismatch"
containers: containers:
- env: - env:
- name: JANUS_API_KEY - name: JANUS_API_KEY

2
helm-chart/update-helm.sh
View file

@ -46,6 +46,8 @@ find ./ -name '*service.yaml' -exec sed -i "/^status:/,$ d" \{} \;
# shellcheck disable=SC1083 # shellcheck disable=SC1083
find ./ -name '*deployment.yaml' -exec sed -i "s|manual-install-nextcloud-aio|nextcloud-aio|" \{} \; find ./ -name '*deployment.yaml' -exec sed -i "s|manual-install-nextcloud-aio|nextcloud-aio|" \{} \;
# shellcheck disable=SC1083 # shellcheck disable=SC1083
find ./ -name '*deployment.yaml' -exec sed -i "/^ spec:/a\ \ \ \ \ \ securityContext:\n\ \ \ \ \ \ \ \ fsGroup: 65534\n\ \ \ \ \ \ \ \ fsGroupChangePolicy: \"OnRootMismatch\"" \{} \;
# shellcheck disable=SC1083
find ./ -name '*persistentvolumeclaim.yaml' -exec sed -i "s|storage: 100Mi|storage: 1Gi|" \{} \; find ./ -name '*persistentvolumeclaim.yaml' -exec sed -i "s|storage: 100Mi|storage: 1Gi|" \{} \;
# shellcheck disable=SC1083 # shellcheck disable=SC1083
find ./ -name '*persistentvolumeclaim.yaml' -exec sed -i "s|ReadOnlyMany|ReadWriteOnce|" \{} \; find ./ -name '*persistentvolumeclaim.yaml' -exec sed -i "s|ReadOnlyMany|ReadWriteOnce|" \{} \;