--- charts-original/values.yaml +++ charts/values.yaml @@ -1,9 +1,23 @@ +global: + cattle: + systemDefaultRegistry: "" + rbac: create: true ## Use an existing ClusterRole/Role (depending on rbac.namespaced false/true) # useExistingRole: name-of-some-(cluster)role pspEnabled: true - pspUseAppArmor: true + pspAnnotations: {} + ## Specify pod annotations + ## Ref: https://kubernetes.io/docs/concepts/policy/pod-security-policy/#apparmor + ## Ref: https://kubernetes.io/docs/concepts/policy/pod-security-policy/#seccomp + ## Ref: https://kubernetes.io/docs/concepts/policy/pod-security-policy/#sysctl + ## + # seccomp.security.alpha.kubernetes.io/allowedProfileNames: 'docker/default,runtime/default' + # seccomp.security.alpha.kubernetes.io/defaultProfileName: 'docker/default' + # apparmor.security.beta.kubernetes.io/allowedProfileNames: 'runtime/default' + # apparmor.security.beta.kubernetes.io/defaultProfileName: 'runtime/default' + namespaced: false extraRoleRules: [] # - apiGroups: [] @@ -69,8 +83,8 @@ # schedulerName: "default-scheduler" image: - repository: grafana/grafana - tag: 8.2.1 + repository: rancher/mirrored-grafana-grafana + tag: 7.5.11 sha: "" pullPolicy: IfNotPresent @@ -82,13 +96,16 @@ # - myRegistrKeySecretName testFramework: - enabled: true - image: "bats/bats" + enabled: false + image: "rancher/mirrored-bats-bats" tag: "v1.1.0" imagePullPolicy: IfNotPresent - securityContext: {} + securityContext: + runAsNonRoot: true + runAsUser: 1000 securityContext: + runAsNonRoot: true runAsUser: 472 runAsGroup: 472 fsGroup: 472 @@ -116,8 +133,8 @@ # priorityClassName: downloadDashboardsImage: - repository: curlimages/curl - tag: 7.73.0 + repository: rancher/mirrored-curlimages-curl + tag: 7.77.0 sha: "" pullPolicy: IfNotPresent @@ -189,7 +206,7 @@ labels: {} path: / - # pathType is only for k8s >= 1.1= + # pathType is only for k8s >= 1.18 pathType: Prefix hosts: @@ -303,7 +320,7 @@ ## initChownData container image ## image: - repository: busybox + repository: rancher/mirrored-library-busybox tag: "1.31.1" sha: "" pullPolicy: IfNotPresent @@ -614,7 +631,7 @@ ## Requires at least Grafana 5 to work and can't be used together with parameters dashboardProviders, datasources and dashboards sidecar: image: - repository: quay.io/kiwigrid/k8s-sidecar + repository: rancher/mirrored-kiwigrid-k8s-sidecar tag: 1.12.3 sha: "" imagePullPolicy: IfNotPresent @@ -702,9 +719,9 @@ replicas: 1 image: # image-renderer Image repository - repository: grafana/grafana-image-renderer + repository: rancher/mirrored-grafana-grafana-image-renderer # image-renderer Image tag - tag: latest + tag: 3.0.1 # image-renderer Image sha (optional) sha: "" # image-renderer ImagePullPolicy