Skip to content

Have the initContainer use user provided UID and GID #7

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
perfectra1n wants to merge 6 commits into
base: main
Choose a base branch
from
Open

Have the initContainer use user provided UID and GID #7

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
d87cbd0
make env example commented out
perfectra1n Oct 8, 2024
640da43
allow the initContainer to use uid and gid user provides
perfectra1n Oct 8, 2024
b856841
increment Chart version
perfectra1n Oct 8, 2024
c9bcf4c
tweak the permissions some more
perfectra1n Oct 8, 2024
2cb6773
yaml whitespace is fun
perfectra1n Oct 8, 2024
2ad6c44
move these settings to env vars
perfectra1n Oct 9, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion charts/trilium/Chart.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ description: |-
Build your personal knowledge base with Trilium Notes. A hierarchical note taking application with focus on building large personal knowledge bases.
annotations:
category: Notes
version: 1.2.0
version: 1.2.1
appVersion: 0.90.4
kubeVersion: ">= 1.19"
dependencies:
Expand Down
12 changes: 10 additions & 2 deletions charts/trilium/templates/release.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@ controllers:
image:
repository: busybox
tag: latest
args: ["sh", "-c", "chown -R 1000:1000 /home/node/trilium-data"]
args: ["sh", "-c", "chown -R {{ .Values.permissions.runAsUser }}:{{ .Values.permissions.runAsGroup }} /home/node/trilium-data"]
securityContext:
runAsUser: 0
runAsGroup: 0
Expand All @@ -16,6 +16,9 @@ controllers:
repository: triliumnext/notes
tag: v0.90.4
pullPolicy: IfNotPresent
env:
USER_UID: {{ .Values.permissions.runAsUser }}
USER_GID: {{ .Values.permissions.runAsGroup }}

probes:
startup:
Expand All @@ -41,7 +44,12 @@ controllers:
httpGet: *probesPath

liveness: *probes

# Defines what user and group the container should run as
# Trilium needs to run as root initially to allow the start-docker.sh to
# change the user/group permissions that we set
securityContext:
fsGroup: {{ .Values.permissions.fsGroup }}
fsGroupChangePolicy: {{ .Values.permissions.fsGroupChangePolicy }}


persistence:
Expand Down
11 changes: 9 additions & 2 deletions charts/trilium/values.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -11,15 +11,22 @@ controllers:
repository: triliumnext/notes
tag: v0.90.4
pullPolicy: IfNotPresent
env:
key: "value"
#env:
# key: "value"

persistence:
data:
enabled: true
type: persistentVolumeClaim
existingClaim:

# Define permissions for the containers (the UID and GID of the user running the container)
permissions:
runAsUser: 1000
runAsGroup: 1000
fsGroup: 1000
fsGroupChangePolicy: OnRootMismatch

# This is used to modify the config.ini of the Trilium instance
configini:
general:
Expand Down