From ec43d3c83c453e42f5822fc3bfafb5b963cd6ce0 Mon Sep 17 00:00:00 2001
From: Stavros Kois <47820033+stavros-k@users.noreply.github.com>
Date: Sun, 10 Jul 2022 11:43:14 +0300
Subject: [PATCH] fix(guacd): run rootless (#3114)

* fix(guacd): run rootless

* no message

* update gui
---
 charts/stable/guacd/Chart.yaml     | 2 +-
 charts/stable/guacd/questions.yaml | 8 ++++----
 charts/stable/guacd/values.yaml    | 8 ++------
 3 files changed, 7 insertions(+), 11 deletions(-)

diff --git a/charts/stable/guacd/Chart.yaml b/charts/stable/guacd/Chart.yaml
index 32c83f494fd..d80540ea5dd 100644
--- a/charts/stable/guacd/Chart.yaml
+++ b/charts/stable/guacd/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v2
 kubeVersion: ">=1.16.0-0"
 name: guacd
-version: 2.0.9
+version: 2.0.10
 appVersion: "1.4.0"
 description: Guacd - Apache Guacamole is a clientless remote desktop gateway.
 type: application
diff --git a/charts/stable/guacd/questions.yaml b/charts/stable/guacd/questions.yaml
index f54701b8de8..e3cf9d3044e 100644
--- a/charts/stable/guacd/questions.yaml
+++ b/charts/stable/guacd/questions.yaml
@@ -192,7 +192,7 @@ questions:
                 label: "ReadOnly Root Filesystem"
                 schema:
                   type: boolean
-                  default: false
+                  default: true
               - variable: allowPrivilegeEscalation
                 label: "Allow Privilege Escalation"
                 schema:
@@ -202,7 +202,7 @@ questions:
                 label: "runAsNonRoot"
                 schema:
                   type: boolean
-                  default: false
+                  default: true
 # Include{securityContextAdvanced}
 
   - variable: podSecurityContext
@@ -217,13 +217,13 @@ questions:
           description: "The UserID of the user running the application"
           schema:
             type: int
-            default: 0
+            default: 1000
         - variable: runAsGroup
           label: "runAsGroup"
           description: "The groupID this App of the user running the application"
           schema:
             type: int
-            default: 0
+            default: 1000
         - variable: fsGroup
           label: "fsGroup"
           description: "The group that should own ALL storage."
diff --git a/charts/stable/guacd/values.yaml b/charts/stable/guacd/values.yaml
index 70152ccd7c4..9ff0b7d6fd8 100644
--- a/charts/stable/guacd/values.yaml
+++ b/charts/stable/guacd/values.yaml
@@ -3,13 +3,9 @@ image:
   pullPolicy: IfNotPresent
   tag: v1.4.0@sha256:6b67e159e4e24524bf025a419062249763967085f6111d73d9f3d9ee7b0c13ee
 
-securityContext:
-  readOnlyRootFilesystem: false
-  runAsNonRoot: false
-
 podSecurityContext:
-  runAsUser: 0
-  runAsGroup: 0
+  runAsUser: 1000
+  runAsGroup: 1000
 
 service:
   main: