[stable/rocketchat] Bring it back to the present (#7463)

* [stable/rocketchat] Update to latest version, upgrade mongodb to latest version, make sure it installs when using podsecuritypolicies Signed-off-by: Bart Verwilst <bart@verwilst.be> * Add OWNERS file Signed-off-by: Bart Verwilst <bart@verwilst.be> * Update Chart.yaml Signed-off-by: Bart Verwilst <bart@verwilst.be> * Make user and group configurable Signed-off-by: Bart Verwilst <bart@verwilst.be> * Add serviceaccount Signed-off-by: Bart Verwilst <bart@verwilst.be> * fix sa Signed-off-by: Bart Verwilst <bart@verwilst.be> * improve security context Signed-off-by: Bart Verwilst <bart@verwilst.be>
2026-08-23 22:37:45 +00:00 · 2018-09-03 01:08:34 -07:00
parent 1edb7906f8
commit 388c9815c3
8 changed files with 52 additions and 7 deletions
@@ -1,6 +1,6 @@
 name: rocketchat
-version: 0.1.3
-appVersion: 0.56
+version: 0.1.4
+appVersion: 0.68.5
 description: Prepare to take off with the ultimate chat platform, experience the next
  level of team communications
 keywords:
@@ -0,0 +1,4 @@
+approvers:
+- verwilst
+reviewers:
+- verwilst
@@ -1,6 +1,6 @@
 dependencies:
 - name: mongodb
  repository: https://kubernetes-charts.storage.googleapis.com/
-  version: 0.4.15
-digest: sha256:1a4e23d283ae090cf7595d7e255a0804b66a20f94620a4063b1271b2aa8b0879
-generated: 2017-09-03T14:24:37.770010325-04:00
+  version: 4.2.2
+digest: sha256:e0861bef41fadbe3d9f213bd1d103f0e266faf2c2a06d58ab11199d0dc4cfcf9
+generated: 2018-08-31T09:39:11.558129592Z
@@ -1,4 +1,4 @@
 dependencies:
 - name: mongodb
-  version: 0.4.15
+  version: 4.2.2
  repository: https://kubernetes-charts.storage.googleapis.com/
@@ -22,3 +22,15 @@ We truncate at 63 chars because some Kubernetes name fields are limited to this
 {{- define "rocketchat.mongodb.fullname" -}}
 {{- printf "%s-%s" .Release.Name "mongodb" | trunc 63 | trimSuffix "-" -}}
 {{- end -}}
+
+{{/*
+Create the name of the service account to use
+*/}}
+{{- define "rocketchat.serviceAccountName" -}}
+{{- if .Values.serviceAccount.create -}}
+    {{ default (include "rocketchat.fullname" .) .Values.serviceAccount.name }}
+{{- else -}}
+    {{ default "default" .Values.serviceAccount.name }}
+{{- end -}}
+{{- end -}}
+
@@ -15,6 +15,11 @@ spec:
        app: {{ template "rocketchat.name" . }}
        release: "{{ .Release.Name }}"
    spec:
+      {{- if .Values.securityContext.enabled }}
+      securityContext:
+        fsGroup: {{ .Values.securityContext.fsGroup }}
+        runAsUser: {{ .Values.securityContext.runAsUser }}
+      {{- end }}
      containers:
      - name: {{ template "rocketchat.fullname" . }}
        image: "{{ .Values.image }}"
@@ -0,0 +1,11 @@
+{{ if .Values.serviceAccount.create }}
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app: {{ template "rocketchat.name" . }}
+    chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
+    heritage: {{ .Release.Service }}
+    release: {{ .Release.Name }}
+  name: {{ template "rocketchat.serviceAccountName" . }}
+{{- end -}}
@@ -1,7 +1,7 @@
 ## Rocket Chat image version
 ## ref: https://hub.docker.com/r/library/rocket.chat/tags/
 ##
-image: rocket.chat:0.56
+image: rocket.chat:0.68.5

 ## Specify a imagePullPolicy
 ## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
@@ -85,6 +85,19 @@ persistence:
 #     memory: 512Mi
 #     cpu: 300m

+securityContext:
+  enabled: true
+  runAsUser: 999
+  fsGroup: 999
+
+serviceAccount:
+  # Specifies whether a ServiceAccount should be created
+  create: true
+
+  # The name of the ServiceAccount to use.
+  # If not set and create is true, a name is generated using the fullname template
+  name:
+
 ## Configure the ingress object to hook into existing infastructure
 ### ref : http://kubernetes.io/docs/user-guide/ingress/
 ###