fix(wireshark): probe type (#5005)
* fix(wireshark): probe type * add caps and remove privs
This commit is contained in:
@@ -63,7 +63,7 @@ questions:
|
|||||||
label: Privileged mode
|
label: Privileged mode
|
||||||
schema:
|
schema:
|
||||||
type: boolean
|
type: boolean
|
||||||
default: true
|
default: false
|
||||||
- variable: readOnlyRootFilesystem
|
- variable: readOnlyRootFilesystem
|
||||||
label: ReadOnly Root Filesystem
|
label: ReadOnly Root Filesystem
|
||||||
schema:
|
schema:
|
||||||
@@ -73,7 +73,7 @@ questions:
|
|||||||
label: Allow Privilege Escalation
|
label: Allow Privilege Escalation
|
||||||
schema:
|
schema:
|
||||||
type: boolean
|
type: boolean
|
||||||
default: true
|
default: false
|
||||||
- variable: runAsNonRoot
|
- variable: runAsNonRoot
|
||||||
label: runAsNonRoot
|
label: runAsNonRoot
|
||||||
schema:
|
schema:
|
||||||
|
|||||||
@@ -6,28 +6,38 @@ image:
|
|||||||
securityContext:
|
securityContext:
|
||||||
readOnlyRootFilesystem: false
|
readOnlyRootFilesystem: false
|
||||||
runAsNonRoot: false
|
runAsNonRoot: false
|
||||||
allowPrivilegeEscalation: true
|
capabilities:
|
||||||
privileged: true
|
add:
|
||||||
|
- NET_ADMIN
|
||||||
hostNetwork: true
|
|
||||||
|
|
||||||
podSecurityContext:
|
podSecurityContext:
|
||||||
runAsUser: 0
|
runAsUser: 0
|
||||||
runAsGroup: 0
|
runAsGroup: 0
|
||||||
|
|
||||||
|
hostNetwork: true
|
||||||
|
|
||||||
service:
|
service:
|
||||||
main:
|
main:
|
||||||
ports:
|
ports:
|
||||||
main:
|
main:
|
||||||
targetPort: 3000
|
targetPort: 3000
|
||||||
|
protocol: HTTP
|
||||||
port: 3000
|
port: 3000
|
||||||
|
|
||||||
|
probes:
|
||||||
|
liveness:
|
||||||
|
path: /
|
||||||
|
readiness:
|
||||||
|
path: /
|
||||||
|
startup:
|
||||||
|
path: /
|
||||||
|
|
||||||
persistence:
|
persistence:
|
||||||
varrun:
|
varrun:
|
||||||
enabled: true
|
enabled: true
|
||||||
config:
|
config:
|
||||||
enabled: true
|
enabled: true
|
||||||
mountPath: "/config"
|
mountPath: /config
|
||||||
|
|
||||||
portal:
|
portal:
|
||||||
enabled: true
|
enabled: true
|
||||||
|
|||||||
Reference in New Issue
Block a user