jklein
69111ae470
- Add securityContext.pod/container values with hardened defaults; the dockur/samba image requires root and a writable root filesystem, so the remaining deviations from the baseline are documented in values.yaml (caps reduced to CHOWN, DAC_OVERRIDE, FOWNER, NET_BIND_SERVICE, SETGID, SETUID; allowPrivilegeEscalation: false) - Make the NodePorts configurable (samba.smbNodePort/netbiosNodePort, defaults 30445/30139 as published before) - Rename secrets.sambaUsersRef to secrets.sambaUsersSecretRef (breaking) - Rename the ConfigMap from -config-cfm to -configmap - Add the tpl-rendered env value convention (value, secretKeyRef, configMapKeyRef forms) - Fix the CI users.conf fixture to the username:uid:groupname:gid:password format the pinned image actually parses - Bump chart to 4.0.0+up4.23.10 Part of #32
29 lines
708 B
YAML
29 lines
708 B
YAML
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: {{ .Release.Name }}-{{ .Chart.Name }}-configmap
|
|
data:
|
|
smb.conf: |-
|
|
[global]
|
|
server string = cluster-samba
|
|
security = user
|
|
server signing = mandatory
|
|
server min protocol = SMB3
|
|
server smb encrypt = required
|
|
|
|
# disable printing services
|
|
load printers = no
|
|
printing = bsd
|
|
printcap name = /dev/null
|
|
disable spoolss = yes
|
|
|
|
{{- range $index, $value := .Values.samba.shares }}
|
|
|
|
[{{ $value.name }}]
|
|
path = /shares/{{ $value.name }}
|
|
comment = {{ $value.description }}
|
|
valid users = {{ $value.validUsers }}
|
|
writable = yes
|
|
vfs objects = streams_xattr
|
|
|
|
{{- end }} |