From c4a39d39461529eaf1c897ee2ced54b72d8ac875 Mon Sep 17 00:00:00 2001
From: Lewis John McGibbney <lewis.mcgibbney@gmail.com>
Date: Sat, 22 Jan 2022 17:27:05 -0800
Subject: [PATCH] Release branch for tika-helm 2.2.1-full

---
 Chart.yaml                | 6 +++---
 README.md                 | 2 +-
 templates/deployment.yaml | 6 ++++++
 values.yaml               | 5 +++--
 4 files changed, 13 insertions(+), 6 deletions(-)

diff --git a/Chart.yaml b/Chart.yaml
index 60fdec4..19a9784 100644
--- a/Chart.yaml
+++ b/Chart.yaml
@@ -19,7 +19,7 @@
 ---
 apiVersion: v2
 name: tika
-version: "1.26"
+version: "2.2.1-full"
 #kubeVersion:
 description: A Helm chart to deploy Apache Tika on Kubernetes
 type: application
@@ -38,7 +38,7 @@ maintainers:
     email: dev@tika.apache.org
     url: https://tika.apache.org
 icon: https://tika.apache.org/tika.png
-appVersion: "1.26"
+appVersion: "2.2.1-full"
 deprecated: false
 annotations:
   # artifacthub.io/changes: |
@@ -46,7 +46,7 @@ annotations:
   artifacthub.io/containsSecurityUpdates: "true"
   artifacthub.io/images: |
     - name: tika
-      image: apache/tika:1.26
+      image: apache/tika:2.2.1-full
   artifacthub.io/license: Apache-2.0
   artifacthub.io/links: |
     - name: Apache Tika
diff --git a/README.md b/README.md
index 9e47c6b..d6d69f4 100644
--- a/README.md
+++ b/README.md
@@ -57,7 +57,7 @@ in which case you may need to augment the commands below.
 * Install it:
   - with Helm 3: `helm install tika tika/tika --version ${release_version}`, you will see something like
 ```
-% helm install tika tika/tika --version 1.26 -n tika-test
+% helm install tika tika/tika --version 2.1.0-full -n tika-test
 NAME: tika
 LAST DEPLOYED: Wed Apr 21 12:15:50 2021
 NAMESPACE: tika-test
diff --git a/templates/deployment.yaml b/templates/deployment.yaml
index 57bc0e9..5eeb618 100644
--- a/templates/deployment.yaml
+++ b/templates/deployment.yaml
@@ -45,12 +45,18 @@ spec:
       serviceAccountName: {{ include "tika-helm.serviceAccountName" . }}
       securityContext:
         {{- toYaml .Values.podSecurityContext | nindent 8 }}
+      volumes:
+      - name: sec-ctx-vol
+        emptyDir: {}
       containers:
         - name: {{ .Chart.Name }}
           securityContext:
             {{- toYaml .Values.securityContext | nindent 12 }}
           image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}"
           imagePullPolicy: {{ .Values.image.pullPolicy }}
+          volumeMounts:
+          - name: sec-ctx-vol
+            mountPath: /tmp
           ports:
             - name: http
               containerPort: 9998
diff --git a/values.yaml b/values.yaml
index 0a69d1e..c5856d9 100644
--- a/values.yaml
+++ b/values.yaml
@@ -23,7 +23,7 @@ image:
   repository: apache/tika
   pullPolicy: IfNotPresent
   # Overrides the image tag whose default is the chart appVersion.
-  tag: "1.26"
+  tag: "2.2.1-full"
 
 imagePullSecrets: []
 nameOverride: ""
@@ -44,10 +44,11 @@ podSecurityContext: {}
   # fsGroup: 2000
 
 securityContext:
+  allowPrivilegeEscalation: false
   capabilities:
     drop:
     - ALL
-  readOnlyRootFilesystem: true
+  readOnlyRootFilesystem: false
   runAsNonRoot: true
   runAsUser: 35002
   runAsGroup: 35002