chore(deps): update docker.io/volkerraschek/helm docker tag to v4

.gitea/workflows/generate-readme.yaml

@@ -15,14 +15,14 @@ on:
 jobs:
   generate-parameters:
     container:
-      image: docker.io/library/node:26.10.0-alpine
+      image: docker.io/library/node:26.8.2-alpine
     runs-on: ubuntu-latest
     steps:
     - name: Install tooling
       run: |
         apk update
         apk add git npm
-    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+    - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
     - name: Generate parameter section in README
       run: |
         npm install

.gitea/workflows/helm.yaml

@@ -14,7 +14,7 @@ jobs:
   helm-lint:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+    - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
     - uses: azure/setup-helm@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310 # v5.0.1
       with:
         version: v4.3.0 # renovate: datasource=github-releases depName=helm/helm
@@ -25,7 +25,7 @@ jobs:
   helm-unittest:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+    - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
     - uses: azure/setup-helm@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310 # v5.0.1
       with:
         version: v4.3.0 # renovate: datasource=github-releases depName=helm/helm

.gitea/workflows/markdown-linters.yaml

@@ -15,14 +15,14 @@ on:
 jobs:
   markdown-link-checker:
     container:
-      image: docker.io/library/node:26.10.0-alpine
+      image: docker.io/library/node:26.8.2-alpine
     runs-on: ubuntu-latest
     steps:
     - name: Install tooling
       run: |
         apk update
         apk add git npm
-    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+    - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
     - name: Verify links in markdown files
       run: |
         npm install
@@ -30,14 +30,14 @@ jobs:
 
   markdown-lint:
     container:
-      image: docker.io/library/node:26.10.0-alpine
+      image: docker.io/library/node:26.8.2-alpine
     runs-on: ubuntu-latest
     steps:
     - name: Install tooling
       run: |
         apk update
         apk add git
-    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+    - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
     - name: Lint markdown files
       run: |
         npm install

.gitea/workflows/release.yaml

@@ -8,7 +8,7 @@ on:
 jobs:
   publish-chart:
     container:
-      image: docker.io/volkerraschek/helm:3.19.2
+      image: docker.io/volkerraschek/helm:4.3.0
     runs-on: ubuntu-latest
     steps:
       - name: Install packages via apk
@@ -16,7 +16,7 @@ jobs:
           apk update
           apk add git npm jq yq
 
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
         with:
           fetch-depth: 0
 

README.md

@@ -271,7 +271,7 @@ spec:
 ### Deployment
 
 | Name                                               | Description                                                                                                | Value                                       |
-| ------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------- | ------------------------------------------- |
+| -------------------------------------------------- | ---------------------------------------------------------------------------------------------------------- | ------------------------------------------- |
 | `deployment.annotations`                           | Additional deployment annotations.                                                                         | `{}`                                        |
 | `deployment.labels`                                | Additional deployment labels.                                                                              | `{}`                                        |
 | `deployment.additionalContainers`                  | List of additional containers.                                                                             | `[]`                                        |
@@ -300,8 +300,6 @@ spec:
 | `deployment.pluginContainer.image.repository`      | Image repository, eg. `curlimages/curl`.                                                                   | `curlimages/curl`                           |
 | `deployment.pluginContainer.image.tag`             | Custom image tag, eg. `0.1.0`.                                                                             | `8.22.0`                                    |
 | `deployment.pluginContainer.image.pullPolicy`      | Image pull policy.                                                                                         | `IfNotPresent`                              |
-| `deployment.pluginContainer.securityContext.runAsGroup` | Group id of the plugin container.                                                                          | `977`                                       |
-| `deployment.pluginContainer.securityContext.runAsUser`  | User id of the plugin container.                                                                           | `977`                                       |
 | `deployment.priorityClassName`                     | PriorityClassName of the Reposilite deployment.                                                            | `""`                                        |
 | `deployment.replicas`                              | Number of replicas for the Reposilite deployment.                                                          | `1`                                         |
 | `deployment.restartPolicy`                         | Restart policy of the Reposilite deployment.                                                               | `""`                                        |

templates/_deployment.tpl

@@ -71,11 +71,7 @@
 {{- if eq (include "reposilite.plugins.prometheus.enabled" $) "true" }}
 {{- $fileName := splitList "/" (tpl .Values.config.plugins.prometheus.url $) | last }}
 {{- $individualArgs := concat $pluginContainerArgs (list "--output" $fileName (tpl .Values.config.plugins.prometheus.url $)) }}
-{{- $pluginContainer := dict "args" $individualArgs "name" "download-prometheus-plugin" "image" $pluginContainerImage "volumeMounts" $pluginContainerVolumeMounts }}
-{{- with .Values.deployment.pluginContainer.securityContext }}
-{{- $_ := set $pluginContainer "securityContext" . }}
-{{- end }}
-{{- $initContainers = concat $initContainers (list $pluginContainer) }}
+{{- $initContainers = concat $initContainers (list (dict "args" $individualArgs "name" "download-prometheus-plugin" "image" $pluginContainerImage "volumeMounts" $pluginContainerVolumeMounts)) }}
 {{- end }}
 
 {{ toYaml (dict "initContainers" $initContainers) }}

unittests/deployment/configPlugins.yaml

@@ -30,9 +30,6 @@ tests:
         - https://reposilite.com/plugins/prometheus.jar
         name: download-prometheus-plugin
         image: docker.io/curlimages/curl:0.1.0
-        securityContext:
-          runAsGroup: 977
-          runAsUser: 977
         volumeMounts:
         - mountPath: /app/data/plugins
           name: plugins

values.yaml

@@ -178,15 +178,6 @@ deployment:
       tag: "8.22.0"
       pullPolicy: IfNotPresent
 
-    ## @param deployment.pluginContainer.securityContext.runAsGroup Group id of the plugin container.
-    ## @param deployment.pluginContainer.securityContext.runAsUser User id of the plugin container.
-    # Reposilite chowns /app to 977:977 when its entrypoint starts as root. Downloading the plugin as a
-    # different user leaves behind a file the plugin container can no longer overwrite, which breaks every
-    # restart that reuses the emptyDir. Align this with PUID/PGID when those are overridden.
-    securityContext:
-      runAsGroup: 977
-      runAsUser: 977
-
   ## @param deployment.priorityClassName PriorityClassName of the Reposilite deployment.
   priorityClassName: ""