From 01c1436b8f7d8f5b4607154bff50017a79cec41a Mon Sep 17 00:00:00 2001 From: SeanOMik Date: Fri, 2 Jun 2023 00:15:26 -0400 Subject: [PATCH] forgot to give readarr-ebook security policy, set sonarr auth method to external --- cluster/apps/download/readarr/ebook-helm.yaml | 7 +++++++ cluster/apps/download/sonarr/helm-release.yaml | 1 + 2 files changed, 8 insertions(+) diff --git a/cluster/apps/download/readarr/ebook-helm.yaml b/cluster/apps/download/readarr/ebook-helm.yaml index 015db45..e65ef39 100644 --- a/cluster/apps/download/readarr/ebook-helm.yaml +++ b/cluster/apps/download/readarr/ebook-helm.yaml @@ -105,6 +105,13 @@ spec: hostPath: /mnt/MainPool/Media mountPath: /storage + podSecurityContext: + runAsNonRoot: true + runAsUser: 10000 + runAsGroup: 10000 + fsGroup: 10000 + fsGroupChangePolicy: OnRootMismatch + resources: requests: cpu: 1m diff --git a/cluster/apps/download/sonarr/helm-release.yaml b/cluster/apps/download/sonarr/helm-release.yaml index ad7e84c..2e4014a 100644 --- a/cluster/apps/download/sonarr/helm-release.yaml +++ b/cluster/apps/download/sonarr/helm-release.yaml @@ -46,6 +46,7 @@ spec: env: TZ: America/New_York + SONARR__AUTHENTICATION_METHOD: "External" service: main: