diff --git a/Chart.yaml b/Chart.yaml index 21a2c6b..1578e2f 100644 --- a/Chart.yaml +++ b/Chart.yaml @@ -1,7 +1,7 @@ apiVersion: v2 name: puppetserver version: 10.1.1 -appVersion: 8.13.0 +appVersion: 8.14.0 description: OpenVox automates the delivery and operation of software. keywords: ["OpenVox", "OpenVoxserver", "automation", "iac", "infrastructure", "cm", "ci", "cd"] home: https://puppet.com/ diff --git a/templates/puppetdb-deployment.yaml b/templates/puppetdb-deployment.yaml index 5d9d30f..139040a 100644 --- a/templates/puppetdb-deployment.yaml +++ b/templates/puppetdb-deployment.yaml @@ -363,8 +363,8 @@ spec: - name: metrics containerPort: {{ .Values.metrics.prometheus.puppetdb.port }} securityContext: - runAsUser: 999 - runAsGroup: 999 + runAsUser: 64604 + runAsGroup: 64604 runAsNonRoot: true allowPrivilegeEscalation: false capabilities: diff --git a/templates/puppetserver-deployment-compilers.yaml b/templates/puppetserver-deployment-compilers.yaml index 28230fe..3d2b43c 100644 --- a/templates/puppetserver-deployment-compilers.yaml +++ b/templates/puppetserver-deployment-compilers.yaml @@ -542,8 +542,8 @@ spec: mountPath: /jmx_exporter.yaml subPath: jmx_exporter.yaml securityContext: - runAsUser: 999 - runAsGroup: 999 + runAsUser: 64604 + runAsGroup: 64604 runAsNonRoot: true allowPrivilegeEscalation: false capabilities: @@ -570,7 +570,7 @@ spec: {{ toYaml . }} {{- end }} securityContext: - fsGroup: 999 # "puppet" GID + fsGroup: 64604 # "puppet" GID volumes: - name: puppet-code-storage persistentVolumeClaim: diff --git a/templates/puppetserver-deployment-masters.yaml b/templates/puppetserver-deployment-masters.yaml index 7acdd48..4cec349 100644 --- a/templates/puppetserver-deployment-masters.yaml +++ b/templates/puppetserver-deployment-masters.yaml @@ -138,11 +138,13 @@ spec: {{- if .Values.puppetserver.extraInitArgs }} {{- .Values.puppetserver.extraInitArgs | nindent 14 }} {{- end }} + mkdir -p /opt/puppetlabs/server/data/puppetserver/.puppetlabs/etc/puppet mkdir -p /opt/puppetlabs/server/data/puppetserver/dropsonde/bin/; touch /opt/puppetlabs/server/data/puppetserver/dropsonde/bin/dropsonde; chown puppet:puppet -R /opt/puppetlabs/server/data/puppetserver/; {{- if eq .Values.puppetserver.persistence.confd.enabled true }} cp -rp /etc/puppetlabs/puppetserver/conf.d/* /conf.d/; + chown puppet:puppet -R /conf.d/; {{- end}} securityContext: runAsUser: 0 @@ -577,8 +579,8 @@ spec: mountPath: /jmx_exporter.yaml subPath: jmx_exporter.yaml securityContext: - runAsUser: 999 - runAsGroup: 999 + runAsUser: 64604 + runAsGroup: 64604 runAsNonRoot: true allowPrivilegeEscalation: false capabilities: @@ -604,7 +606,7 @@ spec: {{ toYaml . }} {{- end }} securityContext: - fsGroup: 999 # "puppet" GID + fsGroup: 64604 # "puppet" GID volumes: {{- if (not .Values.puppetserver.compilers.enabled) }} - name: puppet-code-storage diff --git a/templates/puppetserver-statefulset-compilers.yaml b/templates/puppetserver-statefulset-compilers.yaml index 2b64e6f..eee5057 100644 --- a/templates/puppetserver-statefulset-compilers.yaml +++ b/templates/puppetserver-statefulset-compilers.yaml @@ -505,8 +505,8 @@ spec: mountPath: /jmx_exporter.yaml subPath: jmx_exporter.yaml securityContext: - runAsUser: 999 - runAsGroup: 999 + runAsUser: 64604 + runAsGroup: 64604 runAsNonRoot: true allowPrivilegeEscalation: false capabilities: @@ -532,7 +532,7 @@ spec: {{ toYaml . }} {{- end }} securityContext: - fsGroup: 999 # "puppet" GID + fsGroup: 64604 # "puppet" GID volumes: {{- if .Values.hiera.config }} - name: hiera-volume diff --git a/tests/__snapshot__/jmx-servicemonitor_test.yaml.snap b/tests/__snapshot__/jmx-servicemonitor_test.yaml.snap index d122b4f..d732c5d 100644 --- a/tests/__snapshot__/jmx-servicemonitor_test.yaml.snap +++ b/tests/__snapshot__/jmx-servicemonitor_test.yaml.snap @@ -8,7 +8,7 @@ manifest should match snapshot: app.kubernetes.io/instance: puppetserver app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: puppetserver - app.kubernetes.io/version: 8.13.0 + app.kubernetes.io/version: 8.14.0 helm.sh/chart: puppetserver-10.1.1 release: kube-prometheus-stack name: puppetserver-jmx diff --git a/tests/__snapshot__/openvoxview-ingress_test.yaml.snap b/tests/__snapshot__/openvoxview-ingress_test.yaml.snap index f8139d5..a15928a 100644 --- a/tests/__snapshot__/openvoxview-ingress_test.yaml.snap +++ b/tests/__snapshot__/openvoxview-ingress_test.yaml.snap @@ -8,7 +8,7 @@ should create openvoxview ingress when enabled: app.kubernetes.io/instance: puppetserver app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: puppetserver - app.kubernetes.io/version: 8.13.0 + app.kubernetes.io/version: 8.14.0 helm.sh/chart: puppetserver-10.1.1 name: puppetserver-puppetdb-openvoxview spec: diff --git a/tests/__snapshot__/puppetdb-deployment.openvoxview_test.yaml.snap b/tests/__snapshot__/puppetdb-deployment.openvoxview_test.yaml.snap index 561dff2..80ca295 100644 --- a/tests/__snapshot__/puppetdb-deployment.openvoxview_test.yaml.snap +++ b/tests/__snapshot__/puppetdb-deployment.openvoxview_test.yaml.snap @@ -8,7 +8,7 @@ should include openvoxview sidecar when enabled: app.kubernetes.io/instance: puppetserver app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: puppetserver - app.kubernetes.io/version: 8.13.0 + app.kubernetes.io/version: 8.14.0 helm.sh/chart: puppetserver-10.1.1 name: puppetserver-puppetdb spec: @@ -26,7 +26,7 @@ should include openvoxview sidecar when enabled: app.kubernetes.io/instance: puppetserver app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: puppetserver - app.kubernetes.io/version: 8.13.0 + app.kubernetes.io/version: 8.14.0 helm.sh/chart: puppetserver-10.1.1 spec: containers: @@ -52,7 +52,7 @@ should include openvoxview sidecar when enabled: - name: PUPPETDB_JAVA_ARGS value: "" envFrom: null - image: ghcr.io/openvoxproject/openvoxdb:8.13.0-main + image: ghcr.io/openvoxproject/openvoxdb:8.14.0-main imagePullPolicy: IfNotPresent name: puppetdb ports: @@ -110,9 +110,9 @@ should include openvoxview sidecar when enabled: capabilities: drop: - all - runAsGroup: 999 + runAsGroup: 64604 runAsNonRoot: true - runAsUser: 999 + runAsUser: 64604 volumeMounts: - mountPath: /opt/puppetlabs/server/data/puppetdb name: puppetdb-storage diff --git a/tests/__snapshot__/puppetdb-pvc_test.yaml.snap b/tests/__snapshot__/puppetdb-pvc_test.yaml.snap index ef5d0eb..8fa09dd 100644 --- a/tests/__snapshot__/puppetdb-pvc_test.yaml.snap +++ b/tests/__snapshot__/puppetdb-pvc_test.yaml.snap @@ -9,7 +9,7 @@ manifest should match snapshot: app.kubernetes.io/instance: puppetserver app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: puppetserver - app.kubernetes.io/version: 8.13.0 + app.kubernetes.io/version: 8.14.0 helm.sh/chart: puppetserver-10.1.1 name: puppetserver-puppetdb-claim spec: diff --git a/tests/__snapshot__/puppetdb-service.openvoxview_test.yaml.snap b/tests/__snapshot__/puppetdb-service.openvoxview_test.yaml.snap index e22085d..e45143a 100644 --- a/tests/__snapshot__/puppetdb-service.openvoxview_test.yaml.snap +++ b/tests/__snapshot__/puppetdb-service.openvoxview_test.yaml.snap @@ -8,7 +8,7 @@ should expose openvoxview port when enabled: app.kubernetes.io/instance: puppetserver app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: puppetserver - app.kubernetes.io/version: 8.13.0 + app.kubernetes.io/version: 8.14.0 helm.sh/chart: puppetserver-10.1.1 name: puppetserver-puppetdb spec: diff --git a/tests/__snapshot__/puppetdb-servicemonitor_test.yaml.snap b/tests/__snapshot__/puppetdb-servicemonitor_test.yaml.snap index a2d568d..9b1b8e4 100644 --- a/tests/__snapshot__/puppetdb-servicemonitor_test.yaml.snap +++ b/tests/__snapshot__/puppetdb-servicemonitor_test.yaml.snap @@ -8,7 +8,7 @@ manifest should match snapshot: app.kubernetes.io/instance: puppetserver app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: puppetserver - app.kubernetes.io/version: 8.13.0 + app.kubernetes.io/version: 8.14.0 helm.sh/chart: puppetserver-10.1.1 release: kube-prometheus-stack name: puppetserver-puppetdb diff --git a/tests/__snapshot__/puppetdb.networkpolicy_test.yaml.snap b/tests/__snapshot__/puppetdb.networkpolicy_test.yaml.snap index d0adda5..d2bef6b 100644 --- a/tests/__snapshot__/puppetdb.networkpolicy_test.yaml.snap +++ b/tests/__snapshot__/puppetdb.networkpolicy_test.yaml.snap @@ -8,7 +8,7 @@ manifest should match snapshot: app.kubernetes.io/instance: puppetserver app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: puppetserver - app.kubernetes.io/version: 8.13.0 + app.kubernetes.io/version: 8.14.0 helm.sh/chart: puppetserver-10.1.1 name: puppetserver-puppetdb spec: diff --git a/tests/__snapshot__/puppetserver-ca-pvc_test.yaml.snap b/tests/__snapshot__/puppetserver-ca-pvc_test.yaml.snap index b6f66a1..857a87e 100644 --- a/tests/__snapshot__/puppetserver-ca-pvc_test.yaml.snap +++ b/tests/__snapshot__/puppetserver-ca-pvc_test.yaml.snap @@ -3,13 +3,14 @@ manifest should match snapshot: apiVersion: v1 kind: PersistentVolumeClaim metadata: - annotations: null + annotations: + helm.sh/hook: pre-install labels: app.kubernetes.io/component: puppetserver app.kubernetes.io/instance: puppetserver app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: puppetserver - app.kubernetes.io/version: 8.13.0 + app.kubernetes.io/version: 8.14.0 helm.sh/chart: puppetserver-10.1.1 name: puppetserver-ca-claim spec: diff --git a/tests/__snapshot__/puppetserver-compilers.deployment_test.yaml.snap b/tests/__snapshot__/puppetserver-compilers.deployment_test.yaml.snap index 39c6b94..b89f269 100644 --- a/tests/__snapshot__/puppetserver-compilers.deployment_test.yaml.snap +++ b/tests/__snapshot__/puppetserver-compilers.deployment_test.yaml.snap @@ -8,7 +8,7 @@ manifest should match snapshot: app.kubernetes.io/instance: puppetserver app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: puppetserver - app.kubernetes.io/version: 8.13.0 + app.kubernetes.io/version: 8.14.0 helm.sh/chart: puppetserver-10.1.1 name: puppetserver-puppetserver-compiler spec: @@ -30,27 +30,18 @@ manifest should match snapshot: app.kubernetes.io/instance: puppetserver app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: puppetserver - app.kubernetes.io/version: 8.13.0 + app.kubernetes.io/version: 8.14.0 helm.sh/chart: puppetserver-10.1.1 spec: containers: - - env: - - name: OPENVOXSERVER_PORT - value: "8140" - - name: DNS_ALT_NAMES - value: puppet,puppetserver-agents-to-puppet,puppetserver-puppet,,puppetserver-puppet-compilers, - - name: OPENVOXDB_SERVER_URLS - value: https://puppetserver-puppetdb:8081 - - name: CA_ENABLED - value: "false" - - name: CA_ALLOW_SUBJECT_ALT_NAMES - value: "true" - - name: CA_HOSTNAME - value: puppetserver-puppet - - name: CA_PORT - value: "8140" + - args: + - exec /opt/puppetlabs/bin/puppetserver foreground + command: + - /bin/bash + - -c + env: null envFrom: null - image: ghcr.io/openvoxproject/openvoxserver:8.13.0-main + image: ghcr.io/openvoxproject/openvoxserver:8.14.0-main imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 3 @@ -75,21 +66,11 @@ manifest should match snapshot: securityContext: allowPrivilegeEscalation: false capabilities: - add: - - CAP_CHOWN - - CAP_SETUID - - CAP_SETGID - - CAP_DAC_OVERRIDE - - CAP_AUDIT_WRITE - - CAP_FOWNER - - CHOWN - - SETUID - - SETGID - - DAC_OVERRIDE - - AUDIT_WRITE - - FOWNER drop: - all + runAsGroup: 64604 + runAsNonRoot: true + runAsUser: 64604 startupProbe: failureThreshold: 30 periodSeconds: 15 @@ -100,61 +81,12 @@ manifest should match snapshot: name: puppet-code-storage - mountPath: /etc/puppetlabs/puppet/ name: puppet-puppet-storage - - mountPath: /opt/puppetlabs/server/data/puppetserver/ - name: puppet-serverdata-storage - - mountPath: /etc/puppetlabs/puppetserver/conf.d/ - name: puppet-confd + - mountPath: /etc/puppetlabs/puppetserver/ + name: puppet-puppetserver hostname: puppet imagePullSecrets: null - initContainers: - - args: - - mkdir -p /etc/puppetlabs/puppet/eyaml/keys; mkdir -p /etc/puppetlabs/code/environments; mkdir -p /etc/puppetlabs/puppet/manifests; chown -R puppet:puppet /etc/puppetlabs; cp /tmp/puppet/configmap/site.pp /etc/puppetlabs/puppet/manifests/site.pp; chown puppet:puppet /etc/puppetlabs/puppet/manifests/site.pp; mkdir -p /opt/puppetlabs/server/data/puppetserver/dropsonde/bin/; touch /opt/puppetlabs/server/data/puppetserver/dropsonde/bin/dropsonde; chown puppet:puppet -R /opt/puppetlabs/server/data/puppetserver/; - command: - - sh - - -c - env: null - envFrom: null - image: ghcr.io/openvoxproject/openvoxserver:8.13.0-main - imagePullPolicy: IfNotPresent - name: perms-and-dirs - resources: - limits: - cpu: 300m - memory: 256Mi - requests: - cpu: 200m - memory: 128Mi - securityContext: - capabilities: - add: - - CAP_CHOWN - - CAP_SETUID - - CAP_SETGID - - CAP_DAC_OVERRIDE - - CAP_AUDIT_WRITE - - CAP_FOWNER - - CHOWN - - SETUID - - SETGID - - DAC_OVERRIDE - - AUDIT_WRITE - - FOWNER - drop: - - all - runAsNonRoot: false - runAsUser: 0 - volumeMounts: - - mountPath: /etc/puppetlabs/puppet/ - name: puppet-puppet-storage - - mountPath: /etc/puppetlabs/code/ - name: puppet-code-storage - - mountPath: /tmp/puppet/configmap/site.pp - name: manifests-volume - subPath: site.pp - - mountPath: /opt/puppetlabs/server/data/puppetserver/ - name: puppet-serverdata-storage securityContext: - fsGroup: 999 + fsGroup: 64604 volumes: - name: puppet-code-storage persistentVolumeClaim: @@ -162,12 +94,9 @@ manifest should match snapshot: - name: puppet-puppet-storage persistentVolumeClaim: claimName: puppetserver-puppet-claim - - name: puppet-serverdata-storage - persistentVolumeClaim: - claimName: puppetserver-serverdata-claim - configMap: name: puppetserver-manifests-config name: manifests-volume - - name: puppet-confd + - name: puppet-puppetserver persistentVolumeClaim: - claimName: puppetserver-confd-claim + claimName: puppetserver-puppetserver-claim diff --git a/tests/__snapshot__/puppetserver-compilers.networkpolicy_test.yaml.snap b/tests/__snapshot__/puppetserver-compilers.networkpolicy_test.yaml.snap index 1af785a..585fd74 100644 --- a/tests/__snapshot__/puppetserver-compilers.networkpolicy_test.yaml.snap +++ b/tests/__snapshot__/puppetserver-compilers.networkpolicy_test.yaml.snap @@ -8,7 +8,7 @@ manifest should match snapshot: app.kubernetes.io/instance: puppetserver app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: puppetserver - app.kubernetes.io/version: 8.13.0 + app.kubernetes.io/version: 8.14.0 helm.sh/chart: puppetserver-10.1.1 name: puppetserver-puppetserver-compilers spec: diff --git a/tests/__snapshot__/puppetserver-compilers.pdb_test.yaml.snap b/tests/__snapshot__/puppetserver-compilers.pdb_test.yaml.snap index 59ca579..573c6e4 100644 --- a/tests/__snapshot__/puppetserver-compilers.pdb_test.yaml.snap +++ b/tests/__snapshot__/puppetserver-compilers.pdb_test.yaml.snap @@ -8,7 +8,7 @@ manifest should match snapshot: app.kubernetes.io/instance: puppetserver app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: puppetserver - app.kubernetes.io/version: 8.13.0 + app.kubernetes.io/version: 8.14.0 helm.sh/chart: puppetserver-10.1.1 name: puppetserver-compilers spec: diff --git a/tests/__snapshot__/puppetserver-compilers.statefulset_test.yaml.snap b/tests/__snapshot__/puppetserver-compilers.statefulset_test.yaml.snap index bde0c8e..db52372 100644 --- a/tests/__snapshot__/puppetserver-compilers.statefulset_test.yaml.snap +++ b/tests/__snapshot__/puppetserver-compilers.statefulset_test.yaml.snap @@ -8,7 +8,7 @@ manifest should match snapshot: app.kubernetes.io/instance: puppetserver app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: puppetserver - app.kubernetes.io/version: 8.13.0 + app.kubernetes.io/version: 8.14.0 helm.sh/chart: puppetserver-10.1.1 name: puppetserver-puppetserver-compiler spec: @@ -31,7 +31,7 @@ manifest should match snapshot: app.kubernetes.io/instance: puppetserver app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: puppetserver - app.kubernetes.io/version: 8.13.0 + app.kubernetes.io/version: 8.14.0 helm.sh/chart: puppetserver-10.1.1 spec: containers: @@ -53,7 +53,7 @@ manifest should match snapshot: - name: CA_PORT value: "8140" envFrom: null - image: ghcr.io/openvoxproject/openvoxserver:8.13.0-main + image: ghcr.io/openvoxproject/openvoxserver:8.14.0-main imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 3 @@ -112,7 +112,7 @@ manifest should match snapshot: - -c env: null envFrom: null - image: ghcr.io/openvoxproject/openvoxserver:8.13.0-main + image: ghcr.io/openvoxproject/openvoxserver:8.14.0-main imagePullPolicy: IfNotPresent name: perms-and-dirs resources: @@ -150,7 +150,7 @@ manifest should match snapshot: name: manifests-volume subPath: site.pp securityContext: - fsGroup: 999 + fsGroup: 64604 volumes: - configMap: name: puppetserver-manifests-config diff --git a/tests/__snapshot__/puppetserver-data-pvc_test.yaml.snap b/tests/__snapshot__/puppetserver-data-pvc_test.yaml.snap deleted file mode 100644 index 0967ef4..0000000 --- a/tests/__snapshot__/puppetserver-data-pvc_test.yaml.snap +++ /dev/null @@ -1 +0,0 @@ -{} diff --git a/tests/__snapshot__/puppetserver-masters.networkpolicy_test.yaml.snap b/tests/__snapshot__/puppetserver-masters.networkpolicy_test.yaml.snap index ab4b91e..dd0a9c2 100644 --- a/tests/__snapshot__/puppetserver-masters.networkpolicy_test.yaml.snap +++ b/tests/__snapshot__/puppetserver-masters.networkpolicy_test.yaml.snap @@ -8,7 +8,7 @@ manifest should match snapshot: app.kubernetes.io/instance: puppetserver app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: puppetserver - app.kubernetes.io/version: 8.13.0 + app.kubernetes.io/version: 8.14.0 helm.sh/chart: puppetserver-10.1.1 name: puppetserver-puppetserver spec: diff --git a/tests/__snapshot__/puppetserver-masters.pdb_test.yaml.snap b/tests/__snapshot__/puppetserver-masters.pdb_test.yaml.snap index 7ac3d9b..dfcc3f8 100644 --- a/tests/__snapshot__/puppetserver-masters.pdb_test.yaml.snap +++ b/tests/__snapshot__/puppetserver-masters.pdb_test.yaml.snap @@ -8,7 +8,7 @@ manifest should match snapshot: app.kubernetes.io/instance: puppetserver app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: puppetserver - app.kubernetes.io/version: 8.13.0 + app.kubernetes.io/version: 8.14.0 helm.sh/chart: puppetserver-10.1.1 name: puppetserver-masters spec: diff --git a/tests/__snapshot__/puppetserver-pvc_test.yaml.snap b/tests/__snapshot__/puppetserver-pvc_test.yaml.snap index baea4e8..c7d6483 100644 --- a/tests/__snapshot__/puppetserver-pvc_test.yaml.snap +++ b/tests/__snapshot__/puppetserver-pvc_test.yaml.snap @@ -3,13 +3,14 @@ manifest should match snapshot: apiVersion: v1 kind: PersistentVolumeClaim metadata: - annotations: null + annotations: + helm.sh/hook: pre-install labels: app.kubernetes.io/component: puppetserver app.kubernetes.io/instance: puppetserver app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: puppetserver - app.kubernetes.io/version: 8.13.0 + app.kubernetes.io/version: 8.14.0 helm.sh/chart: puppetserver-10.1.1 name: puppetserver-puppet-claim spec: diff --git a/tests/__snapshot__/puppetserver-statefulset.compilers_test.yaml.snap b/tests/__snapshot__/puppetserver-statefulset.compilers_test.yaml.snap index 47cc54c..fc38e4c 100644 --- a/tests/__snapshot__/puppetserver-statefulset.compilers_test.yaml.snap +++ b/tests/__snapshot__/puppetserver-statefulset.compilers_test.yaml.snap @@ -150,7 +150,7 @@ manifest should match snapshot: name: manifests-volume subPath: site.pp securityContext: - fsGroup: 999 + fsGroup: 64604 volumes: - configMap: name: puppetserver-manifests-config diff --git a/tests/puppetserver-data-pvc_test.yaml b/tests/puppetserver-data-pvc_test.yaml deleted file mode 100644 index 988463a..0000000 --- a/tests/puppetserver-data-pvc_test.yaml +++ /dev/null @@ -1,22 +0,0 @@ -suite: test puppet data volume creation -templates: - - puppetserver-data-pvc.yaml -release: - name: puppetserver - namespace: puppet -tests: - - it: manifest should match snapshot - set: - puppetserver.persistence.data.existingClaim: dummy - asserts: - - matchSnapshot: {} - - it: should not create the volume if "puppetserver.persistence.data.existingClaim" is non-empty - set: - puppetserver.persistence.data.existingClaim: dummy - asserts: - - hasDocuments: - count: 0 - - it: should create the volume by default - asserts: - - isKind: - of: PersistentVolumeClaim diff --git a/values.yaml b/values.yaml index 75b02a9..67e5b61 100644 --- a/values.yaml +++ b/values.yaml @@ -6,7 +6,7 @@ ## --- global: - runAsNonRoot: false + runAsNonRoot: true imagePullSecrets: @@ -50,9 +50,9 @@ global: ## Define the security context (not apply to all pod for now) securityContext: - runAsUser: 999 # "puppet" UID - runAsGroup: 999 # "puppet" GID - fsGroup: 999 # "puppet" GID + runAsUser: 1001 # "puppet" UID + runAsGroup: 1001 # "puppet" GID + fsGroup: 1001 # "puppet" GID extraEnv: {} extraEnvSecret: "" @@ -64,7 +64,7 @@ global: puppetserver: name: puppetserver image: ghcr.io/openvoxproject/openvoxserver - tag: 8.13.0-main + tag: 8.14.0-main pullPolicy: IfNotPresent ## Configure persistence for Puppet Server @@ -110,7 +110,7 @@ puppetserver: data: ## The data of this volume is overwritten on each start, so persistence can be disabled marking ## this variable to false - enabled: true + enabled: false ## If an existing Persistent Volume Claim needs to be used, specify the name here. ## If not specified the PVC is created by this chart using the informations below or the `storage` values. existingClaim: '' @@ -766,7 +766,7 @@ puppetdb: enabled: true name: puppetdb image: ghcr.io/openvoxproject/openvoxdb - tag: 8.13.0-main + tag: 8.14.0-main pullPolicy: IfNotPresent resources: {} # requests: