From f94cdfd4fce40a3e3d269246a1f7cebdcedb33dd Mon Sep 17 00:00:00 2001 From: Alex Manning Date: Wed, 21 Aug 2024 19:17:41 +0100 Subject: [PATCH] Update mealie. --- charts/mealie/Chart.yaml | 4 ++-- charts/mealie/templates/deployment.yaml | 5 ++++- charts/mealie/templates/secret.yaml | 9 +++++++++ charts/mealie/values.yaml | 9 ++++++--- 4 files changed, 21 insertions(+), 6 deletions(-) create mode 100644 charts/mealie/templates/secret.yaml diff --git a/charts/mealie/Chart.yaml b/charts/mealie/Chart.yaml index 1fe288c..44ed8cc 100644 --- a/charts/mealie/Chart.yaml +++ b/charts/mealie/Chart.yaml @@ -3,5 +3,5 @@ apiVersion: v2 name: mealie description: A Helm chart for Kubernetes type: application -version: 0.1.0 -appVersion: "v1.10.1" +version: 0.2.0 +appVersion: "v1.12.0" diff --git a/charts/mealie/templates/deployment.yaml b/charts/mealie/templates/deployment.yaml index 6fb9a21..5be83ac 100644 --- a/charts/mealie/templates/deployment.yaml +++ b/charts/mealie/templates/deployment.yaml @@ -33,7 +33,7 @@ spec: imagePullPolicy: {{ .Values.image.pullPolicy }} ports: - name: http - containerPort: 9091 + containerPort: 9000 protocol: TCP livenessProbe: httpGet: @@ -48,6 +48,9 @@ spec: volumeMounts: - name: data mountPath: /app/data/ + envFrom: + - secretRef: + name: {{ include "mealie.fullname" . }} {{- with .Values.nodeSelector }} nodeSelector: {{- toYaml . | nindent 8 }} diff --git a/charts/mealie/templates/secret.yaml b/charts/mealie/templates/secret.yaml new file mode 100644 index 0000000..caa5c19 --- /dev/null +++ b/charts/mealie/templates/secret.yaml @@ -0,0 +1,9 @@ +--- +apiVersion: v1 +kind: Secret +metadata: + name: {{ include "mealie.fullname" . }} + labels: + {{- include "mealie.labels" . | nindent 4 }} +stringData: + {{- .Values.config | toYaml | nindent 2}} diff --git a/charts/mealie/values.yaml b/charts/mealie/values.yaml index 0f7122f..72781f1 100644 --- a/charts/mealie/values.yaml +++ b/charts/mealie/values.yaml @@ -13,8 +13,8 @@ fullnameOverride: "" podAnnotations: {} -podSecurityContext: {} - # fsGroup: 2000 +podSecurityContext: + fsGroup: 911 securityContext: capabilities: @@ -22,7 +22,7 @@ securityContext: - ALL readOnlyRootFilesystem: true runAsNonRoot: true - # runAsUser: 1000 + runAsUser: 911 service: type: ClusterIP @@ -65,3 +65,6 @@ affinity: {} pvc: storageClassName: "" storage: 1Gi + +config: + ALLOW_SIGNUP: "false"