cnieg / helm-charts Goto Github PK

We can't run current Version of the HelmChart in a secured Kubernetes cluster, where Pods aren't allowed to run as non-root:

Warning Failed 24s (x12 over 2m38s) kubelet Error: container has runAsNonRoot and image has non-numeric user (www-data), cannot verify user is non-root (pod: "passbolt-85bf5c9df8-58gj8(94d9756b-3f75-4e4b-a953-390349b1d5a2)", container: passbolt)

Even if setting the userUID like this:

securityContext:
  runAsUser: 33

When starting with the userUID we receive a PermissionDenied:

gpg: revocation certificate stored as '/var/lib/passbolt/.gnupg/openpgp-revocs.d/923714B3CD2AEA700C276C2B874E2B3AC639A947.rev'
/docker-entrypoint.sh: line 60: /etc/passbolt/gpg/serverkey_private.asc: Permission denied

This happens because the Container - even the ce-non-root one - is started as root. Later on it will change to the user www-data.

You could solve this problem using a dedicated ServiceAccount for Passbolt and giving it higher Privileges through PSPs, Roles and RoleBindings to this ServiceAccount.

Hello, how to use passbolt helm chart? There is no EMAIL configuration and I don't know how to use without this? Am I missing something?

This values must be overriden in values.yaml cause startup can take more time

`

We encountered some errors while scanning the packages in repository cnieg for security vulnerabilities.

Errors log

error scanning image castlemock/castlemock:1.49: image not found (package castlemock:0.1.5)

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Rate-Limited

These updates are currently rate-limited. Click on a checkbox below to force their creation now.

• chore(deps): update helm release clamav to v2.7.1

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• chore(deps): update httpd docker tag to v2.4.57
• chore(deps): update dependencytrack/apiserver docker tag to v4.8.2
• chore(deps): update dependencytrack/frontend docker tag to v4.8.1
• chore(deps): update helm release mariadb to v11.5.7
• chore(deps): update helm/chart-releaser-action action to v1.5.0
• chore(deps): update helm/chart-testing-action action to v2.4.0
• chore(deps): update helm/kind-action action to v1.7.0
• chore(deps): update nginx docker tag to v1.24.0
• chore(deps): update ghcr.io/mailu/clamav docker tag to v2
• chore(deps): update helm release mariadb to v12
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

• Check this box to trigger a request for Renovate to run again on this repository

not receiving mail (passbolt notifications) through SMTP external host though test email sent