1.33 release, update ps image, no root container

Author: Georg Martin Weber

azure-pipelines-gated.yml

@@ -25,6 +25,11 @@ jobs:
       - version: "3.10.3"
       - version: "3.11.3"
       - version: "3.12.3"
-      - version: "3.13.2"
+      - version: "3.13.3"
+      - version: "3.14.4"
+      - version: "3.15.4"
+      - version: "3.16.4"
+      - version: "3.17.3"
+
 
 

azure-pipelines.yml

@@ -28,8 +28,11 @@ jobs:
       - version: "3.10.3"
       - version: "3.11.3"
       - version: "3.12.3"
-      - version: "3.13.2"
-
+      - version: "3.13.3"
+      - version: "3.14.4"
+      - version: "3.15.4"
+      - version: "3.16.4"
+      - version: "3.17.3"
 
 - job: CreateRelease
   dependsOn: RunTests

hull-vidispine-addon/Chart.yaml

@@ -1,6 +1,6 @@
 # Basic chart description and version
 apiVersion: v1
-appVersion: 1.31.0
+appVersion: 1.33.0
 description: hull-vidispine-addon
 name: hull-vidispine-addon
-version: 1.31.2
+version: 1.33.0

hull-vidispine-addon/hull-vidispine-addon.yaml

@@ -267,6 +267,15 @@ hull:
                     register: true
                     remove: false
 
+  templates:
+    pod: 
+      global: {}
+      no-root:
+        securityContext:
+          runAsNonRoot: true
+          runAsUser: 1001
+    container:
+      global: {}
 ###################################################
 
   objects:
@@ -377,6 +386,8 @@ hull:
         annotations:
           "helm.sh/hook-delete-policy": before-hook-creation
         pod:
+          sources:
+          - no-root
           containers:
             installation:
               command: ["/bin/sh", "-c"]
@@ -420,7 +431,7 @@ hull:
             installation:
               image:
                 repository: hull/hull-integration
-                tag: <HULL-VIDISPINE-ADDON-VERSION>
+                tag: <HULL-VIDISPINE-ADDON-VERSION>-noroot
               args: _HT![
                 {{ if (or (index . "$").Values.hull.config.general.data.installation.config.customCaCertificates (index . "$").Values.hull.config.general.data.installation.config.certificateSecrets) }}
                 echo Updating Certificates;
@@ -448,7 +459,7 @@ hull:
             installation:
               image:
                 repository: hull/hull-integration
-                tag: <HULL-VIDISPINE-ADDON-VERSION>
+                tag: <HULL-VIDISPINE-ADDON-VERSION>-noroot
               args: _HT![
                 {{ if (or (index . "$").Values.hull.config.general.data.installation.config.customCaCertificates (index . "$").Values.hull.config.general.data.installation.config.certificateSecrets) }}
                 echo Updating Certificates;

images/hull-integration/Dockerfile

@@ -1,4 +1,4 @@
-FROM mcr.microsoft.com/powershell:7.3-ubuntu-22.04
+FROM mcr.microsoft.com/dotnet/sdk:9.0.203-noble-amd64
 RUN pwsh -NonInteractive -Command Install-Module -Force -Scope AllUsers powershell-yaml
 RUN apt-get update
 RUN apt-get -y install curl

images/hull-integration/Dockerfile-noroot

@@ -1,4 +1,4 @@
-FROM mcr.microsoft.com/powershell:7.3-ubuntu-22.04
+FROM mcr.microsoft.com/dotnet/sdk:9.0.203-noble-amd64
 RUN pwsh -NonInteractive -Command Install-Module -Force -Scope AllUsers powershell-yaml
 RUN apt-get update
 RUN apt-get -y install curl