marker/shuffle-cracked
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge branch 'nightly' of https://github.com/shuffle/shuffle into nightly

Browse Source
This commit is contained in:
Frikky
2025-03-31 00:08:13 +02:00
parent 8c6f36bfd7 16421c2745
commit 7bfa99f63e
3 changed files with 22 additions and 20 deletions
Download Patch File Download Diff File Expand all files Collapse all files
functions/kubernetes/charts/shuffle/README.md
+7 -6
View File
@@ -185,8 +185,8 @@ SHUFFLE_ENCRYPTION_MODIFIER: "MyShuffleEncryptionModifier"
| `backend.podSecurityContext.fsGroup` | Set fsGroup in backend pods' Security Context | `1001` | | `backend.podSecurityContext.fsGroup` | Set fsGroup in backend pods' Security Context | `1001` |
| `backend.containerSecurityContext.enabled` | Enabled backend container' Security Context | `true` | | `backend.containerSecurityContext.enabled` | Enabled backend container' Security Context | `true` |
| `backend.containerSecurityContext.seLinuxOptions` | Set SELinux options in backend container | `{}` | | `backend.containerSecurityContext.seLinuxOptions` | Set SELinux options in backend container | `{}` |
| `backend.containerSecurityContext.runAsUser` | Set runAsUser in backend container' Security Context | `1000` | | `backend.containerSecurityContext.runAsUser` | Set runAsUser in backend container' Security Context | `1001` |
| `backend.containerSecurityContext.runAsGroup` | Set runAsGroup in backend container' Security Context | `1000` | | `backend.containerSecurityContext.runAsGroup` | Set runAsGroup in backend container' Security Context | `1001` |
| `backend.containerSecurityContext.runAsNonRoot` | Set runAsNonRoot in backend container' Security Context | `true` | | `backend.containerSecurityContext.runAsNonRoot` | Set runAsNonRoot in backend container' Security Context | `true` |
| `backend.containerSecurityContext.readOnlyRootFilesystem` | Set readOnlyRootFilesystem in backend container' Security Context | `true` | | `backend.containerSecurityContext.readOnlyRootFilesystem` | Set readOnlyRootFilesystem in backend container' Security Context | `true` |
| `backend.containerSecurityContext.privileged` | Set privileged in backend container' Security Context | `false` | | `backend.containerSecurityContext.privileged` | Set privileged in backend container' Security Context | `false` |
@@ -300,8 +300,8 @@ SHUFFLE_ENCRYPTION_MODIFIER: "MyShuffleEncryptionModifier"
| `frontend.podSecurityContext.fsGroup` | Set fsGroup in frontend pods' Security Context | `1001` | | `frontend.podSecurityContext.fsGroup` | Set fsGroup in frontend pods' Security Context | `1001` |
| `frontend.containerSecurityContext.enabled` | Enabled frontend container' Security Context | `false` | | `frontend.containerSecurityContext.enabled` | Enabled frontend container' Security Context | `false` |
| `frontend.containerSecurityContext.seLinuxOptions` | Set SELinux options in frontend container | `{}` | | `frontend.containerSecurityContext.seLinuxOptions` | Set SELinux options in frontend container | `{}` |
| `frontend.containerSecurityContext.runAsUser` | Set runAsUser in frontend container' Security Context | `101` | | `frontend.containerSecurityContext.runAsUser` | Set runAsUser in frontend container' Security Context | `1001` |
| `frontend.containerSecurityContext.runAsGroup` | Set runAsGroup in frontend container' Security Context | `101` | | `frontend.containerSecurityContext.runAsGroup` | Set runAsGroup in frontend container' Security Context | `1001` |
| `frontend.containerSecurityContext.runAsNonRoot` | Set runAsNonRoot in frontend container' Security Context | `true` | | `frontend.containerSecurityContext.runAsNonRoot` | Set runAsNonRoot in frontend container' Security Context | `true` |
| `frontend.containerSecurityContext.readOnlyRootFilesystem` | Set readOnlyRootFilesystem in frontend container' Security Context | `true` | | `frontend.containerSecurityContext.readOnlyRootFilesystem` | Set readOnlyRootFilesystem in frontend container' Security Context | `true` |
| `frontend.containerSecurityContext.privileged` | Set privileged in frontend container' Security Context | `false` | | `frontend.containerSecurityContext.privileged` | Set privileged in frontend container' Security Context | `false` |
@@ -404,8 +404,8 @@ SHUFFLE_ENCRYPTION_MODIFIER: "MyShuffleEncryptionModifier"
| `orborus.podSecurityContext.fsGroup` | Set fsGroup in orborus pods' Security Context | `1001` | | `orborus.podSecurityContext.fsGroup` | Set fsGroup in orborus pods' Security Context | `1001` |
| `orborus.containerSecurityContext.enabled` | Enabled orborus container' Security Context | `true` | | `orborus.containerSecurityContext.enabled` | Enabled orborus container' Security Context | `true` |
| `orborus.containerSecurityContext.seLinuxOptions` | Set SELinux options in orborus container | `{}` | | `orborus.containerSecurityContext.seLinuxOptions` | Set SELinux options in orborus container | `{}` |
| `orborus.containerSecurityContext.runAsUser` | Set runAsUser in orborus container' Security Context | `101` | | `orborus.containerSecurityContext.runAsUser` | Set runAsUser in orborus container' Security Context | `1001` |
| `orborus.containerSecurityContext.runAsGroup` | Set runAsGroup in orborus container' Security Context | `101` | | `orborus.containerSecurityContext.runAsGroup` | Set runAsGroup in orborus container' Security Context | `1001` |
| `orborus.containerSecurityContext.runAsNonRoot` | Set runAsNonRoot in orborus container' Security Context | `true` | | `orborus.containerSecurityContext.runAsNonRoot` | Set runAsNonRoot in orborus container' Security Context | `true` |
| `orborus.containerSecurityContext.readOnlyRootFilesystem` | Set readOnlyRootFilesystem in orborus container' Security Context | `true` | | `orborus.containerSecurityContext.readOnlyRootFilesystem` | Set readOnlyRootFilesystem in orborus container' Security Context | `true` |
| `orborus.containerSecurityContext.privileged` | Set privileged in orborus container' Security Context | `false` | | `orborus.containerSecurityContext.privileged` | Set privileged in orborus container' Security Context | `false` |
@@ -598,3 +598,4 @@ SHUFFLE_ENCRYPTION_MODIFIER: "MyShuffleEncryptionModifier"
### Other Parameters ### Other Parameters
functions/kubernetes/charts/shuffle/values.schema.json
+6 -6
View File
@@ -372,12 +372,12 @@
"runAsUser": { "runAsUser": {
"type": "number", "type": "number",
"description": "Set runAsUser in backend container' Security Context", "description": "Set runAsUser in backend container' Security Context",
"default": 1000 "default": 1001
}, },
"runAsGroup": { "runAsGroup": {
"type": "number", "type": "number",
"description": "Set runAsGroup in backend container' Security Context", "description": "Set runAsGroup in backend container' Security Context",
"default": 1000 "default": 1001
}, },
"runAsNonRoot": { "runAsNonRoot": {
"type": "boolean", "type": "boolean",
@@ -1051,12 +1051,12 @@
"runAsUser": { "runAsUser": {
"type": "number", "type": "number",
"description": "Set runAsUser in frontend container' Security Context", "description": "Set runAsUser in frontend container' Security Context",
"default": 101 "default": 1001
}, },
"runAsGroup": { "runAsGroup": {
"type": "number", "type": "number",
"description": "Set runAsGroup in frontend container' Security Context", "description": "Set runAsGroup in frontend container' Security Context",
"default": 101 "default": 1001
}, },
"runAsNonRoot": { "runAsNonRoot": {
"type": "boolean", "type": "boolean",
@@ -1660,12 +1660,12 @@
"runAsUser": { "runAsUser": {
"type": "number", "type": "number",
"description": "Set runAsUser in orborus container' Security Context", "description": "Set runAsUser in orborus container' Security Context",
"default": 101 "default": 1001
}, },
"runAsGroup": { "runAsGroup": {
"type": "number", "type": "number",
"description": "Set runAsGroup in orborus container' Security Context", "description": "Set runAsGroup in orborus container' Security Context",
"default": 101 "default": 1001
}, },
"runAsNonRoot": { "runAsNonRoot": {
"type": "boolean", "type": "boolean",
functions/kubernetes/charts/shuffle/values.yaml
+9 -8
View File
@@ -235,8 +235,8 @@ backend:
containerSecurityContext: containerSecurityContext:
enabled: true enabled: true
seLinuxOptions: {} seLinuxOptions: {}
runAsUser: 1000 runAsUser: 1001
runAsGroup: 1000 runAsGroup: 1001
runAsNonRoot: true runAsNonRoot: true
readOnlyRootFilesystem: true readOnlyRootFilesystem: true
privileged: false privileged: false
@@ -664,11 +664,12 @@ frontend:
## @param frontend.podSecurityContext.fsGroup Set fsGroup in frontend pods' Security Context ## @param frontend.podSecurityContext.fsGroup Set fsGroup in frontend pods' Security Context
## ##
podSecurityContext: podSecurityContext:
enabled: false enabled: false # The default shuffle frontend image does not support running as non-root, because /etc/nginx/nginx.conf is written on startup
fsGroupChangePolicy: Always fsGroupChangePolicy: Always
sysctls: [] sysctls: []
supplementalGroups: [] supplementalGroups: []
fsGroup: 1001 fsGroup: 1001
## Configure Container Security Context ## Configure Container Security Context
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-container ## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-container
## @param frontend.containerSecurityContext.enabled Enabled frontend container' Security Context ## @param frontend.containerSecurityContext.enabled Enabled frontend container' Security Context
@@ -683,10 +684,10 @@ frontend:
## @param frontend.containerSecurityContext.seccompProfile.type Set seccomp profile in frontend container ## @param frontend.containerSecurityContext.seccompProfile.type Set seccomp profile in frontend container
## ##
containerSecurityContext: containerSecurityContext:
enabled: false enabled: false # The default shuffle frontend image does not support running as non-root, because /etc/nginx/nginx.conf is written on startup
seLinuxOptions: {} seLinuxOptions: {}
runAsUser: 101 runAsUser: 1001
runAsGroup: 101 runAsGroup: 1001
runAsNonRoot: true runAsNonRoot: true
readOnlyRootFilesystem: true readOnlyRootFilesystem: true
privileged: false privileged: false
@@ -1068,8 +1069,8 @@ orborus:
containerSecurityContext: containerSecurityContext:
enabled: true enabled: true
seLinuxOptions: {} seLinuxOptions: {}
runAsUser: 101 runAsUser: 1001
runAsGroup: 101 runAsGroup: 1001
runAsNonRoot: true runAsNonRoot: true
readOnlyRootFilesystem: true readOnlyRootFilesystem: true
privileged: false privileged: false