fix(apps): sync securityContext from values to questions (#1323)

* fix(apps): sync securityContext from values to questions

* sync oscam runAsGroup

* sync whoogle runAsUser and runAsGroup

* readwrite fs whoogle

charts/stable/gotify/questions.yaml

@@ -538,7 +538,7 @@ questions:
                 label: "ReadOnly Root Filesystem"
                 schema:
                   type: boolean
-                  default: false
+                  default: true
               - variable: allowPrivilegeEscalation
                 label: "Allow Privilege Escalation"
                 schema:

charts/stable/icantbelieveitsnotvaletudo/questions.yaml

@@ -355,7 +355,7 @@ questions:
                 label: "ReadOnly Root Filesystem"
                 schema:
                   type: boolean
-                  default: false
+                  default: true
               - variable: allowPrivilegeEscalation
                 label: "Allow Privilege Escalation"
                 schema:

charts/stable/miniflux/questions.yaml

@@ -493,7 +493,7 @@ questions:
                 label: "ReadOnly Root Filesystem"
                 schema:
                   type: boolean
-                  default: false
+                  default: true
               - variable: allowPrivilegeEscalation
                 label: "Allow Privilege Escalation"
                 schema:

charts/stable/odoo/questions.yaml

@@ -626,7 +626,7 @@ questions:
                 label: "ReadOnly Root Filesystem"
                 schema:
                   type: boolean
-                  default: false
+                  default: true
               - variable: allowPrivilegeEscalation
                 label: "Allow Privilege Escalation"
                 schema:

charts/stable/oscam/questions.yaml

@@ -327,7 +327,7 @@ questions:
           description: The groupID this App of the user running the application"
           schema:
             type: int
-            default: 0
+            default: 20
         - variable: fsGroup
           label: "fsGroup"
           description: "The group that should own ALL storage."

charts/stable/statping/questions.yaml

@@ -516,7 +516,7 @@ questions:
                 label: "ReadOnly Root Filesystem"
                 schema:
                   type: boolean
-                  default: false
+                  default: true
               - variable: allowPrivilegeEscalation
                 label: "Allow Privilege Escalation"
                 schema:

charts/stable/teedy/questions.yaml

@@ -518,7 +518,7 @@ questions:
                 label: "ReadOnly Root Filesystem"
                 schema:
                   type: boolean
-                  default: false
+                  default: true
               - variable: allowPrivilegeEscalation
                 label: "Allow Privilege Escalation"
                 schema:

charts/stable/traccar/questions.yaml

@@ -476,7 +476,7 @@ questions:
                 label: "ReadOnly Root Filesystem"
                 schema:
                   type: boolean
-                  default: false
+                  default: true
               - variable: allowPrivilegeEscalation
                 label: "Allow Privilege Escalation"
                 schema:

charts/stable/whoogle/questions.yaml

@@ -360,13 +360,13 @@ questions:
           description: "The UserID of the user running the application"
           schema:
             type: int
-            default: 568
+            default: 0
         - variable: runAsGroup
           label: "runAsGroup"
           description: The groupID this App of the user running the application"
           schema:
             type: int
-            default: 568
+            default: 0
         - variable: fsGroup
           label: "fsGroup"
           description: "The group that should own ALL storage."

charts/stable/whoogle/values.yaml

@@ -31,6 +31,7 @@ service:
         targetPort: 5000
 
 securityContext:
+  readOnlyRootFilesystem: false
   runAsNonRoot: false
 
 podSecurityContext:

charts/stable/zigbee2mqtt/questions.yaml

@@ -278,7 +278,7 @@ questions:
                 label: "ReadOnly Root Filesystem"
                 schema:
                   type: boolean
-                  default: false
+                  default: true
               - variable: allowPrivilegeEscalation
                 label: "Allow Privilege Escalation"
                 schema: