From 12fe7cc5c9be8b845b0fbea60583a2f3f687dad7 Mon Sep 17 00:00:00 2001
From: sagit <36596628+Sagit-chu@users.noreply.github.com>
Date: Wed, 15 Jun 2022 16:24:53 +0800
Subject: [PATCH] fix(rsshub): fix permission (#2889)

* fix(rsshub): fix permission

* bump

* bump again

Co-authored-by: Stavros Kois <47820033+stavros-k@users.noreply.github.com>
---
 charts/stable/rsshub/Chart.yaml     | 2 +-
 charts/stable/rsshub/questions.yaml | 8 ++++----
 charts/stable/rsshub/values.yaml    | 8 ++++++++
 3 files changed, 13 insertions(+), 5 deletions(-)

diff --git a/charts/stable/rsshub/Chart.yaml b/charts/stable/rsshub/Chart.yaml
index c078ac4e687..604800f57b6 100644
--- a/charts/stable/rsshub/Chart.yaml
+++ b/charts/stable/rsshub/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v2
 kubeVersion: ">=1.16.0-0"
 name: rsshub
-version: 3.0.9
+version: 3.0.10
 appVersion: "latest"
 description: RSSHub can generate RSS feeds from pretty much everything
 type: application
diff --git a/charts/stable/rsshub/questions.yaml b/charts/stable/rsshub/questions.yaml
index cbe732adc24..36e4461caab 100644
--- a/charts/stable/rsshub/questions.yaml
+++ b/charts/stable/rsshub/questions.yaml
@@ -282,7 +282,7 @@ questions:
                 label: "ReadOnly Root Filesystem"
                 schema:
                   type: boolean
-                  default: true
+                  default: false
               - variable: allowPrivilegeEscalation
                 label: "Allow Privilege Escalation"
                 schema:
@@ -292,7 +292,7 @@ questions:
                 label: "runAsNonRoot"
                 schema:
                   type: boolean
-                  default: true
+                  default: false
 # Include{securityContextAdvanced}
 
   - variable: podSecurityContext
@@ -307,13 +307,13 @@ questions:
           description: "The UserID of the user running the application"
           schema:
             type: int
-            default: 568
+            default: 0
         - variable: runAsGroup
           label: "runAsGroup"
           description: "The groupID this App of the user running the application"
           schema:
             type: int
-            default: 568
+            default: 0
         - variable: fsGroup
           label: "fsGroup"
           description: "The group that should own ALL storage."
diff --git a/charts/stable/rsshub/values.yaml b/charts/stable/rsshub/values.yaml
index 2e0613f6411..2bd80a9cda9 100644
--- a/charts/stable/rsshub/values.yaml
+++ b/charts/stable/rsshub/values.yaml
@@ -7,6 +7,14 @@ browserlessImage:
   repository: tccr.io/truecharts/browserless-chrome
   tag: v1.53.0-chrome@sha256:bba7c84a5c8c3c2b9518d8543f08b3669eeeda16837af4dc4c8065b7d87be08e
 
+securityContext:
+  runAsNonRoot: false
+  readOnlyRootFilesystem: false
+
+podSecurityContext:
+  runAsUser: 0
+  runAsGroup: 0
+
 secretEnv:
   HTTP_BASIC_AUTH_NAME: ""
   HTTP_BASIC_AUTH_PASS: ""