github-personal/helm-charts
1
0
Fork 0
mirror of https://github.com/shadoll/helm-charts.git synced 2026-10-12 21:59:18 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix garage secret file permissions

Browse Source 
The secret volume's default file mode (0644) is world-readable, and
Garage refuses to start with rpc_secret_file/admin_token_file/
metrics_token_file at anything looser than 0600. Set defaultMode:
0600 on the secrets volume.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_014ZA4cJygj4VPCYVms4TDrH
This commit is contained in:
sha
2026-09-13 13:14:08 +03:00
co-authored by Claude Sonnet 5
parent 4a47d523fe
commit ea613ef03a
2 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
garage/Chart.yaml
+1 -1
View File
@@ -4,5 +4,5 @@ description: A Helm chart for Garage, a lightweight S3-compatible object store
type: application type: application
annotations: annotations:
version-source: dockerhub-tags-pattern:dxflrs/garage:^v[0-9]+\.[0-9]+\.[0-9]+$ version-source: dockerhub-tags-pattern:dxflrs/garage:^v[0-9]+\.[0-9]+\.[0-9]+$
version: 0.1.1 version: 0.1.2
appVersion: "v2.4.1" appVersion: "v2.4.1"
garage/templates/deployment.yaml
+1
View File
@@ -72,6 +72,7 @@ spec:
- name: secrets - name: secrets
secret: secret:
secretName: {{ .Values.existingSecret }} secretName: {{ .Values.existingSecret }}
defaultMode: 0600
items: items:
- key: {{ .Values.secretKeys.rpcSecret }} - key: {{ .Values.secretKeys.rpcSecret }}
path: rpc-secret path: rpc-secret