jklein
24d3366e8b
No ingress gate: this chart has no Ingress at all (SMB and NetBIOS are exposed via NodePort), and ingress.domain appears neither in its templates nor in its values. 1. values.schema.json (#68): additionalProperties: false on every chart-owned object level, including the entries of the samba.shares list. 2. Null-safety for hardening, probes and resources (#99). This chart's hardening is a documented deviation forced by the ghcr.io/dockur/samba image, and the fallbacks reproduce it exactly instead of restoring the repo standard: no runAs* values (the entrypoint creates Unix users and smbd impersonates the share user per session, both requiring a root start), readOnlyRootFilesystem stays false (the entrypoint writes /etc/passwd, /etc/group, the healthcheck symlink and the Samba TDBs), and capabilities.add keeps the six entries a multi-user root file server needs. Restoring the standard here would stop the file server from working. The probes target the SMB TCP port directly, because SMB is not HTTP. The users.conf / checksum-config limitation from #82 is untouched: Helm never sees the Secret content, so it cannot be hashed, and the comment in values.yaml documenting the manual rollout restart stays as it is. Rendering with normal values is byte-identical to 5.0.0.
11 lines
184 B
YAML
11 lines
184 B
YAML
apiVersion: v2
|
|
name: samba
|
|
description: A Helm chart for Samba
|
|
icon: https://avatars.githubusercontent.com/u/13281359
|
|
|
|
type: application
|
|
|
|
version: 6.0.0+up4.23.10
|
|
|
|
appVersion: 4.23.10
|