diff --git a/charts/trilium/Chart.yaml b/charts/trilium/Chart.yaml index 5111298..23c596b 100644 --- a/charts/trilium/Chart.yaml +++ b/charts/trilium/Chart.yaml @@ -8,7 +8,7 @@ description: |- Build your personal knowledge base with Trilium Notes. A hierarchical note taking application with focus on building large personal knowledge bases. annotations: category: Notes -version: 1.2.0 +version: 1.2.1 appVersion: 0.90.4 kubeVersion: ">= 1.19" dependencies: diff --git a/charts/trilium/templates/release.yaml b/charts/trilium/templates/release.yaml index 8cd462f..c1e6c2f 100644 --- a/charts/trilium/templates/release.yaml +++ b/charts/trilium/templates/release.yaml @@ -6,7 +6,7 @@ controllers: image: repository: busybox tag: latest - args: ["sh", "-c", "chown -R 1000:1000 /home/node/trilium-data"] + args: ["sh", "-c", "chown -R {{ .Values.permissions.runAsUser }}:{{ .Values.permissions.runAsGroup }} /home/node/trilium-data"] securityContext: runAsUser: 0 runAsGroup: 0 @@ -16,6 +16,9 @@ controllers: repository: triliumnext/notes tag: v0.90.4 pullPolicy: IfNotPresent + env: + USER_UID: {{ .Values.permissions.runAsUser }} + USER_GID: {{ .Values.permissions.runAsGroup }} probes: startup: @@ -41,7 +44,12 @@ controllers: httpGet: *probesPath liveness: *probes - + # Defines what user and group the container should run as + # Trilium needs to run as root initially to allow the start-docker.sh to + # change the user/group permissions that we set + securityContext: + fsGroup: {{ .Values.permissions.fsGroup }} + fsGroupChangePolicy: {{ .Values.permissions.fsGroupChangePolicy }} persistence: diff --git a/charts/trilium/values.yaml b/charts/trilium/values.yaml index 48a5578..519c526 100644 --- a/charts/trilium/values.yaml +++ b/charts/trilium/values.yaml @@ -11,8 +11,8 @@ controllers: repository: triliumnext/notes tag: v0.90.4 pullPolicy: IfNotPresent - env: - key: "value" + #env: + # key: "value" persistence: data: @@ -20,6 +20,13 @@ persistence: type: persistentVolumeClaim existingClaim: +# Define permissions for the containers (the UID and GID of the user running the container) +permissions: + runAsUser: 1000 + runAsGroup: 1000 + fsGroup: 1000 + fsGroupChangePolicy: OnRootMismatch + # This is used to modify the config.ini of the Trilium instance configini: general: