diff --git a/charts/stable/unifi/Chart.yaml b/charts/stable/unifi/Chart.yaml index a9084597b75..7d1e2b1e99b 100644 --- a/charts/stable/unifi/Chart.yaml +++ b/charts/stable/unifi/Chart.yaml @@ -21,4 +21,4 @@ sources: - https://github.com/jacobalberty/unifi-docker - https://unifi-network.ui.com type: application -version: 8.0.1 +version: 8.0.2 diff --git a/charts/stable/unifi/SCALE/questions.yaml b/charts/stable/unifi/SCALE/questions.yaml index dc61691c0df..8c0648c49e6 100644 --- a/charts/stable/unifi/SCALE/questions.yaml +++ b/charts/stable/unifi/SCALE/questions.yaml @@ -996,7 +996,7 @@ questions: label: "ReadOnly Root Filesystem" schema: type: boolean - default: true + default: false - variable: allowPrivilegeEscalation label: "Allow Privilege Escalation" schema: @@ -1006,7 +1006,7 @@ questions: label: "runAsNonRoot" schema: type: boolean - default: true + default: false - variable: podSecurityContext group: "Security and Permissions" label: "Pod Security Context" @@ -1018,13 +1018,13 @@ questions: description: "The UserID of the user running the application" schema: type: int - default: 568 + default: 0 - variable: runAsGroup label: "runAsGroup" description: The groupID this App of the user running the application" schema: type: int - default: 568 + default: 0 - variable: fsGroup label: "fsGroup" description: "The group that should own ALL storage." diff --git a/charts/stable/unifi/values.yaml b/charts/stable/unifi/values.yaml index 8e228363c78..ce1e4d2bd77 100644 --- a/charts/stable/unifi/values.yaml +++ b/charts/stable/unifi/values.yaml @@ -54,6 +54,14 @@ service: targetPort: 8843 protocol: HTTPS +securityContext: + readOnlyRootFilesystem: false + runAsNonRoot: false + +podSecurityContext: + runAsGroup: 0 + runAsUser: 0 + env: # TZ: PUID: "568"