From 0ac0a6654787dbeaf49ab433e6a2d80127051a1a Mon Sep 17 00:00:00 2001
From: Stavros Kois <47820033+stavros-k@users.noreply.github.com>
Date: Wed, 30 Nov 2022 21:29:29 +0200
Subject: [PATCH] fix(wireshark): probe type (#5005)

* fix(wireshark): probe type

* add caps and remove privs
---
 charts/stable/wireshark/questions.yaml |  4 ++--
 charts/stable/wireshark/values.yaml    | 20 +++++++++++++++-----
 2 files changed, 17 insertions(+), 7 deletions(-)

diff --git a/charts/stable/wireshark/questions.yaml b/charts/stable/wireshark/questions.yaml
index 0430e78dea5..199e7f72b2b 100644
--- a/charts/stable/wireshark/questions.yaml
+++ b/charts/stable/wireshark/questions.yaml
@@ -63,7 +63,7 @@ questions:
                 label: Privileged mode
                 schema:
                   type: boolean
-                  default: true
+                  default: false
               - variable: readOnlyRootFilesystem
                 label: ReadOnly Root Filesystem
                 schema:
@@ -73,7 +73,7 @@ questions:
                 label: Allow Privilege Escalation
                 schema:
                   type: boolean
-                  default: true
+                  default: false
               - variable: runAsNonRoot
                 label: runAsNonRoot
                 schema:
diff --git a/charts/stable/wireshark/values.yaml b/charts/stable/wireshark/values.yaml
index a2bd225a83e..c3f84fa1792 100644
--- a/charts/stable/wireshark/values.yaml
+++ b/charts/stable/wireshark/values.yaml
@@ -6,28 +6,38 @@ image:
 securityContext:
   readOnlyRootFilesystem: false
   runAsNonRoot: false
-  allowPrivilegeEscalation: true
-  privileged: true
-
-hostNetwork: true
+  capabilities:
+    add:
+      - NET_ADMIN
 
 podSecurityContext:
   runAsUser: 0
   runAsGroup: 0
 
+hostNetwork: true
+
 service:
   main:
     ports:
       main:
         targetPort: 3000
+        protocol: HTTP
         port: 3000
 
+probes:
+  liveness:
+    path: /
+  readiness:
+    path: /
+  startup:
+    path: /
+
 persistence:
   varrun:
     enabled: true
   config:
     enabled: true
-    mountPath: "/config"
+    mountPath: /config
 
 portal:
   enabled: true