From db6f1ed377f4eb56f8b5121dc56f6080bd79c203 Mon Sep 17 00:00:00 2001 From: TrueCharts-Bot Date: Sat, 20 Aug 2022 13:31:06 +0000 Subject: [PATCH] Commit new Chart releases for TrueCharts Signed-off-by: TrueCharts-Bot --- .../0.0.3/templates/_privelegednet.tpl | 15 ----------- .../tailscale/{0.0.3 => 0.0.4}/CHANGELOG.md | 9 +++++++ .../tailscale/{0.0.3 => 0.0.4}/Chart.lock | 2 +- .../tailscale/{0.0.3 => 0.0.4}/Chart.yaml | 2 +- .../tailscale/{0.0.3 => 0.0.4}/README.md | 2 +- .../tailscale/{0.0.3 => 0.0.4}/app-readme.md | 0 .../charts/common-10.4.12.tgz | Bin .../tailscale/{0.0.3 => 0.0.4}/ix_values.yaml | 24 +++++++++++++----- .../tailscale/{0.0.3 => 0.0.4}/questions.yaml | 13 +++++++--- .../{0.0.3 => 0.0.4}/templates/_configmap.tpl | 3 +++ .../{0.0.3 => 0.0.4}/templates/_secret.tpl | 0 .../{0.0.3 => 0.0.4}/templates/common.yaml | 5 ---- .../tailscale/{0.0.3 => 0.0.4}/values.yaml | 0 13 files changed, 41 insertions(+), 34 deletions(-) delete mode 100644 incubator/tailscale/0.0.3/templates/_privelegednet.tpl rename incubator/tailscale/{0.0.3 => 0.0.4}/CHANGELOG.md (73%) rename incubator/tailscale/{0.0.3 => 0.0.4}/Chart.lock (80%) rename incubator/tailscale/{0.0.3 => 0.0.4}/Chart.yaml (98%) rename incubator/tailscale/{0.0.3 => 0.0.4}/README.md (98%) rename incubator/tailscale/{0.0.3 => 0.0.4}/app-readme.md (100%) rename incubator/tailscale/{0.0.3 => 0.0.4}/charts/common-10.4.12.tgz (100%) rename incubator/tailscale/{0.0.3 => 0.0.4}/ix_values.yaml (77%) rename incubator/tailscale/{0.0.3 => 0.0.4}/questions.yaml (99%) rename incubator/tailscale/{0.0.3 => 0.0.4}/templates/_configmap.tpl (89%) rename incubator/tailscale/{0.0.3 => 0.0.4}/templates/_secret.tpl (100%) rename incubator/tailscale/{0.0.3 => 0.0.4}/templates/common.yaml (55%) rename incubator/tailscale/{0.0.3 => 0.0.4}/values.yaml (100%) diff --git a/incubator/tailscale/0.0.3/templates/_privelegednet.tpl b/incubator/tailscale/0.0.3/templates/_privelegednet.tpl deleted file mode 100644 index 72f14e48f7..0000000000 --- a/incubator/tailscale/0.0.3/templates/_privelegednet.tpl +++ /dev/null @@ -1,15 +0,0 @@ -{{- define "tailscale.tun" -}} ---- -enabled: true -type: hostPath -hostPath: /dev/net/tun -mountPath: /dev/net/tun -hostPathType: "" -readOnly: false -{{- end }} - -{{- define "tailscale.caps" -}} ---- -add: - - NET_ADMIN -{{- end }} diff --git a/incubator/tailscale/0.0.3/CHANGELOG.md b/incubator/tailscale/0.0.4/CHANGELOG.md similarity index 73% rename from incubator/tailscale/0.0.3/CHANGELOG.md rename to incubator/tailscale/0.0.4/CHANGELOG.md index 2f4173bc66..dbc0032119 100644 --- a/incubator/tailscale/0.0.3/CHANGELOG.md +++ b/incubator/tailscale/0.0.4/CHANGELOG.md @@ -2,6 +2,15 @@ +## [tailscale-0.0.4](https://github.com/truecharts/charts/compare/tailscale-0.0.3...tailscale-0.0.4) (2022-08-20) + +### Fix + +- adds tun device and runs as root by default ([#3519](https://github.com/truecharts/charts/issues/3519)) + + + + ## [tailscale-0.0.3](https://github.com/truecharts/charts/compare/tailscale-0.0.2...tailscale-0.0.3) (2022-08-18) ### Chore diff --git a/incubator/tailscale/0.0.3/Chart.lock b/incubator/tailscale/0.0.4/Chart.lock similarity index 80% rename from incubator/tailscale/0.0.3/Chart.lock rename to incubator/tailscale/0.0.4/Chart.lock index acd6a1d716..7aa68961bd 100644 --- a/incubator/tailscale/0.0.3/Chart.lock +++ b/incubator/tailscale/0.0.4/Chart.lock @@ -3,4 +3,4 @@ dependencies: repository: https://library-charts.truecharts.org version: 10.4.12 digest: sha256:2b926ab794b2ebae2ba0c898ffe38320266e86eafebe44d869c8f0721f5dac27 -generated: "2022-08-18T22:22:12.693581967Z" +generated: "2022-08-20T13:23:15.800748754Z" diff --git a/incubator/tailscale/0.0.3/Chart.yaml b/incubator/tailscale/0.0.4/Chart.yaml similarity index 98% rename from incubator/tailscale/0.0.3/Chart.yaml rename to incubator/tailscale/0.0.4/Chart.yaml index 63b3133eb7..bffc522945 100644 --- a/incubator/tailscale/0.0.3/Chart.yaml +++ b/incubator/tailscale/0.0.4/Chart.yaml @@ -20,7 +20,7 @@ sources: - https://github.com/truecharts/charts/tree/master/charts/incubator/tailscale - https://hub.docker.com/r/tailscale/tailscale - https://github.com/tailscale/tailscale/blob/main/docs/k8s/run.sh -version: 0.0.3 +version: 0.0.4 annotations: truecharts.org/catagories: | - network diff --git a/incubator/tailscale/0.0.3/README.md b/incubator/tailscale/0.0.4/README.md similarity index 98% rename from incubator/tailscale/0.0.3/README.md rename to incubator/tailscale/0.0.4/README.md index 374dbc64f1..32a51ffa19 100644 --- a/incubator/tailscale/0.0.3/README.md +++ b/incubator/tailscale/0.0.4/README.md @@ -1,6 +1,6 @@ # tailscale -![Version: 0.0.3](https://img.shields.io/badge/Version-0.0.3-informational?style=flat-square) ![AppVersion: 1.29.125](https://img.shields.io/badge/AppVersion-1.29.125-informational?style=flat-square) +![Version: 0.0.4](https://img.shields.io/badge/Version-0.0.4-informational?style=flat-square) ![AppVersion: 1.29.125](https://img.shields.io/badge/AppVersion-1.29.125-informational?style=flat-square) Tailscale lets you connect your devices and users together in your own secure virtual private network diff --git a/incubator/tailscale/0.0.3/app-readme.md b/incubator/tailscale/0.0.4/app-readme.md similarity index 100% rename from incubator/tailscale/0.0.3/app-readme.md rename to incubator/tailscale/0.0.4/app-readme.md diff --git a/incubator/tailscale/0.0.3/charts/common-10.4.12.tgz b/incubator/tailscale/0.0.4/charts/common-10.4.12.tgz similarity index 100% rename from incubator/tailscale/0.0.3/charts/common-10.4.12.tgz rename to incubator/tailscale/0.0.4/charts/common-10.4.12.tgz diff --git a/incubator/tailscale/0.0.3/ix_values.yaml b/incubator/tailscale/0.0.4/ix_values.yaml similarity index 77% rename from incubator/tailscale/0.0.3/ix_values.yaml rename to incubator/tailscale/0.0.4/ix_values.yaml index fa928d823e..319a31e88c 100644 --- a/incubator/tailscale/0.0.3/ix_values.yaml +++ b/incubator/tailscale/0.0.4/ix_values.yaml @@ -7,14 +7,16 @@ command: ["ash", "/tailscale/run.sh"] tty: true -# Only un-comment this if you are going to have `userspace: false` -# securityContext: -# readOnlyRootFilesystem: false -# runAsNonRoot: false +securityContext: + readOnlyRootFilesystem: false + runAsNonRoot: false + capabilities: + add: + - NET_ADMIN -# podSecurityContext: -# runAsUser: 0 -# runAsGroup: 0 +podSecurityContext: + runAsUser: 0 + runAsGroup: 0 serviceAccount: main: @@ -52,6 +54,7 @@ tailscale: dest_ip: "" sock5_server: "" extra_args: "" + daemon_extra_args: "" probes: liveness: @@ -72,6 +75,13 @@ persistence: config: enabled: true mountPath: "/var/lib" + tun: + enabled: true + type: hostPath + hostPath: /dev/net/tun + mountPath: /dev/net/tun + hostPathType: "" + readOnly: false portal: enabled: false diff --git a/incubator/tailscale/0.0.3/questions.yaml b/incubator/tailscale/0.0.4/questions.yaml similarity index 99% rename from incubator/tailscale/0.0.3/questions.yaml rename to incubator/tailscale/0.0.4/questions.yaml index c6641ce7be..11ac65d3ee 100644 --- a/incubator/tailscale/0.0.3/questions.yaml +++ b/incubator/tailscale/0.0.4/questions.yaml @@ -205,6 +205,11 @@ questions: schema: type: string default: "" + - variable: daemon_extra_args + label: "Tailscale Daemon Extra Args" + schema: + type: string + default: "" - variable: TZ label: Timezone group: Container Configuration @@ -1498,7 +1503,7 @@ questions: label: "ReadOnly Root Filesystem" schema: type: boolean - default: true + default: false - variable: allowPrivilegeEscalation label: "Allow Privilege Escalation" schema: @@ -1508,7 +1513,7 @@ questions: label: "runAsNonRoot" schema: type: boolean - default: true + default: false - variable: capabilities label: Capabilities schema: @@ -1547,13 +1552,13 @@ questions: description: "The UserID of the user running the application" schema: type: int - default: 568 + default: 0 - variable: runAsGroup label: "runAsGroup" description: "The groupID this App of the user running the application" schema: type: int - default: 568 + default: 0 - variable: fsGroup label: "fsGroup" description: "The group that should own ALL storage." diff --git a/incubator/tailscale/0.0.3/templates/_configmap.tpl b/incubator/tailscale/0.0.4/templates/_configmap.tpl similarity index 89% rename from incubator/tailscale/0.0.3/templates/_configmap.tpl rename to incubator/tailscale/0.0.4/templates/_configmap.tpl index e7e1d45acb..f701c133db 100644 --- a/incubator/tailscale/0.0.3/templates/_configmap.tpl +++ b/incubator/tailscale/0.0.4/templates/_configmap.tpl @@ -27,4 +27,7 @@ data: {{- with .Values.tailscale.extra_args }} TS_EXTRA_ARGS: {{ . | quote }} {{- end }} + {{- with .Values.tailscale.daemon_extra_args }} + TS_TAILSCALED_EXTRA_ARGS: {{ . | quote }} + {{- end }} {{- end }} diff --git a/incubator/tailscale/0.0.3/templates/_secret.tpl b/incubator/tailscale/0.0.4/templates/_secret.tpl similarity index 100% rename from incubator/tailscale/0.0.3/templates/_secret.tpl rename to incubator/tailscale/0.0.4/templates/_secret.tpl diff --git a/incubator/tailscale/0.0.3/templates/common.yaml b/incubator/tailscale/0.0.4/templates/common.yaml similarity index 55% rename from incubator/tailscale/0.0.3/templates/common.yaml rename to incubator/tailscale/0.0.4/templates/common.yaml index 0e3f9e2f8c..961e2db343 100644 --- a/incubator/tailscale/0.0.3/templates/common.yaml +++ b/incubator/tailscale/0.0.4/templates/common.yaml @@ -7,10 +7,5 @@ {{/* Render config */}} {{- include "tailscale.config" . }} -{{- if not .Values.tailscale.userspace }} -{{- $_ := set .Values.persistence "tun" (include "tailscale.tun" . | fromYaml) -}} -{{- $_ := set .Values.securityContext "capabilities" (include "tailscale.caps" . | fromYaml) -}} -{{- end }} - {{/* Render the templates */}} {{ include "tc.common.loader.apply" . }} diff --git a/incubator/tailscale/0.0.3/values.yaml b/incubator/tailscale/0.0.4/values.yaml similarity index 100% rename from incubator/tailscale/0.0.3/values.yaml rename to incubator/tailscale/0.0.4/values.yaml