feat(apps): add dashdot and jump (#2867)

* feat(dashdot): add dashdot

* update common incluide and keywords

* feat(jump): add jump

* perms jump

* jump rofs false

* root jump

* update jump questiosn

* fix questiosn
This commit is contained in:
Stavros Kois
2022-06-15 00:27:03 +03:00
committed by GitHub
parent 8dedc5918b
commit 4195fb2e4e
8 changed files with 1051 additions and 0 deletions
+27
View File
@@ -0,0 +1,27 @@
apiVersion: v2
appVersion: "10.6.2"
dependencies:
- name: common
repository: https://library-charts.truecharts.org
version: 10.0.9
description: dash. (or dashdot) is a modern server dashboard, running on the latest tech, designed with glassmorphism in mind.
home: https://github.com/truecharts/apps/tree/master/charts/stable/dashdot
icon: https://truecharts.org/_static/img/appicons/dashdot.png
keywords:
- dashboard
- dashdot
kubeVersion: '>=1.16.0-0'
maintainers:
- email: info@truecharts.org
name: TrueCharts
url: https://truecharts.org
name: dashdot
sources:
- https://github.com/MauriceNino/dashdot
- https://hub.docker.com/r/mauricenino/dashdot
version: 0.0.1
annotations:
truecharts.org/catagories: |
- media
truecharts.org/SCALE-support: "true"
truecharts.org/grade: U
+521
View File
@@ -0,0 +1,521 @@
# Include{groups}
portals:
open:
protocols:
- "$kubernetes-resource_configmap_portal_protocol"
host:
- "$kubernetes-resource_configmap_portal_host"
ports:
- "$kubernetes-resource_configmap_portal_port"
questions:
- variable: portal
group: "Container Image"
label: "Configure Portal Button"
schema:
type: dict
hidden: true
attrs:
- variable: enabled
label: "Enable"
description: "enable the portal button"
schema:
hidden: true
editable: false
type: boolean
default: true
# Include{global}
- variable: controller
group: "Controller"
label: ""
schema:
additional_attrs: true
type: dict
attrs:
- variable: advanced
label: "Show Advanced Controller Settings"
schema:
type: boolean
default: false
show_subquestions_if: true
subquestions:
- variable: type
description: "Please specify type of workload to deploy"
label: "(Advanced) Controller Type"
schema:
type: string
default: "deployment"
required: true
enum:
- value: "deployment"
description: "Deployment"
- value: "statefulset"
description: "Statefulset"
- value: "daemonset"
description: "Daemonset"
- variable: replicas
description: "Number of desired pod replicas"
label: "Desired Replicas"
schema:
type: int
default: 1
required: true
- variable: strategy
description: "Please specify type of workload to deploy"
label: "(Advanced) Update Strategy"
schema:
type: string
default: "Recreate"
required: true
enum:
- value: "Recreate"
description: "Recreate: Kill existing pods before creating new ones"
- value: "RollingUpdate"
description: "RollingUpdate: Create new pods and then kill old ones"
- value: "OnDelete"
description: "(Legacy) OnDelete: ignore .spec.template changes"
# Include{controllerExpert}
- variable: env
group: "Container Configuration"
label: "Image Environment"
schema:
additional_attrs: true
type: dict
attrs:
# General
- variable: DASHDOT_WIDGET_LIST
label: "DASHDOT_WIDGET_LIST"
description: "Change the order of the elements in the list, to change the position on the page, or remove an item from the list, to remove it from the page. Storage Widget does not work correctly with ZFS"
schema:
type: string
required: true
default: "os,cpu,ram,network"
- variable: oswidgetsettings
label: "OS Widget"
schema:
type: boolean
default: false
show_subquestions_if: true
subquestions:
- variable: DASHDOT_DISABLE_HOST
label: "DASHDOT_DISABLE_HOST"
description: "If you want to hide the host part in the server widget"
schema:
type: boolean
default: false
- variable: DASHDOT_OS_LABEL_LIST
label: "DASHDOT_OS_LABEL_LIST"
description: "Change the order of the labels in the list, to change the position in the widget, or remove an item from the list, to remove it from the widget"
schema:
type: string
default: "os,arch,up_since"
- variable: DASHDOT_OS_WIDGET_GROW
label: "DASHDOT_OS_WIDGET_GROW"
description: "To adjust the relative size of the OS widget"
schema:
type: string
default: "1.5"
- variable: DASHDOT_OS_WIDGET_MIN_WIDTH
label: "DASHDOT_OS_WIDGET_MIN_WIDTH"
description: "To adjust the minimum width of the OS widget (in px)"
schema:
type: string
default: "300"
- variable: cpuwidgetsettings
label: "CPU Widget"
schema:
type: boolean
default: false
show_subquestions_if: true
subquestions:
- variable: DASHDOT_ENABLE_CPU_TEMPS
label: "DASHDOT_ENABLE_CPU_TEMPS"
description: "If you want to show the CPU temperature in the graph."
schema:
type: boolean
default: false
- variable: DASHDOT_CPU_LABEL_LIST
label: "DASHDOT_CPU_LABEL_LIST"
description: "Change the order of the labels in the list, to change the position in the widget, or remove an item from the list, to remove it from the widget"
schema:
type: string
default: "brand,model,cores,threads,frequency"
- variable: DASHDOT_CPU_WIDGET_GROW
label: "DASHDOT_CPU_WIDGET_GROW"
description: "To adjust the relative size of the Processor widget"
schema:
type: string
default: "4"
- variable: DASHDOT_CPU_WIDGET_MIN_WIDTH
label: "DASHDOT_CPU_WIDGET_MIN_WIDTH"
description: "To adjust the minimum width of the Processor widget (in px)"
schema:
type: string
default: "500"
- variable: DASHDOT_CPU_DATAPOINTS
label: "DASHDOT_CPU_DATAPOINTS"
description: "To adjust the minimum width of the Processor widget (in px)"
schema:
type: string
default: "20"
- variable: DASHDOT_CPU_POLL_INTERVAL
label: "DASHDOT_CPU_POLL_INTERVAL"
description: "To adjust the minimum width of the Processor widget (in px)"
schema:
type: string
default: "1000"
- variable: ramwidgetsettings
label: "RAM Widget"
schema:
type: boolean
default: false
show_subquestions_if: true
subquestions:
- variable: DASHDOT_RAM_LABEL_LIST
label: "DASHDOT_RAM_LABEL_LIST"
description: "Change the order of the labels in the list, to change the position in the widget, or remove an item from the list, to remove it from the widget."
schema:
type: string
default: "brand,size,type,frequency"
- variable: DASHDOT_RAM_WIDGET_GROW
label: "DASHDOT_RAM_WIDGET_GROW"
description: "To adjust the relative size of the Memory widget"
schema:
type: string
default: "4"
- variable: DASHDOT_RAM_WIDGET_MIN_WIDTH
label: "DASHDOT_RAM_WIDGET_MIN_WIDTH"
description: "To adjust the minimum width of the Memory widget (in px)"
schema:
type: string
default: "500"
- variable: DASHDOT_RAM_DATAPOINTS
label: "DASHDOT_RAM_DATAPOINTS"
description: "The amount of datapoints in the Memory graph"
schema:
type: string
default: "20"
- variable: DASHDOT_RAM_POLL_INTERVAL
label: "DASHDOT_RAM_POLL_INTERVAL"
description: "Read the Memory load every x milliseconds"
schema:
type: string
default: "1000"
- variable: netwidgetsettings
label: "Network Widget"
schema:
type: boolean
default: false
show_subquestions_if: true
subquestions:
- variable: DASHDOT_SPEED_TEST_INTERVAL
label: "DASHDOT_SPEED_TEST_INTERVAL"
description: "At which interval the network speed-test should be rerun (in minutes)"
schema:
type: string
default: "60"
- variable: DASHDOT_NETWORK_LABEL_LIST
label: "DASHDOT_NETWORK_LABEL_LIST"
description: "Change the order of the labels in the list, to change the position in the widget, or remove an item from the list, to remove it from the widget"
schema:
type: string
default: "type,speed_up,speed_down,interface_speed"
- variable: DASHDOT_NETWORK_WIDGET_GROW
label: "DASHDOT_NETWORK_WIDGET_GROW"
description: "To adjust the relative size of the Network widget"
schema:
type: string
default: "6"
- variable: DASHDOT_NETWORK_WIDGET_MIN_WIDTH
label: "DASHDOT_NETWORK_WIDGET_MIN_WIDTH"
description: "To adjust the minimum width of the Network widget (in px)"
schema:
type: string
default: "500"
- variable: DASHDOT_NETWORK_DATAPOINTS
label: "DASHDOT_NETWORK_DATAPOINTS"
description: "The amount of datapoints in each of the Network graphs"
schema:
type: string
default: "20"
- variable: DASHDOT_NETWORK_POLL_INTERVAL
label: "DASHDOT_NETWORK_POLL_INTERVAL"
description: "Read the Network load every x milliseconds"
schema:
type: string
default: "1000"
- variable: overridesettings
label: "Overrides"
schema:
type: boolean
default: false
show_subquestions_if: true
subquestions:
- variable: DASHDOT_OVERRIDE_OS
label: "DASHDOT_OVERRIDE_OS"
description: "Override OS"
schema:
type: string
default: ""
- variable: DASHDOT_OVERRIDE_ARCH
label: "DASHDOT_OVERRIDE_ARCH"
description: "Override ARCH"
schema:
type: string
default: ""
- variable: DASHDOT_OVERRIDE_CPU_BRAND
label: "DASHDOT_OVERRIDE_CPU_BRAND"
description: "Override CPU BRAND"
schema:
type: string
default: ""
- variable: DASHDOT_OVERRIDE_CPU_MODEL
label: "DASHDOT_OVERRIDE_CPU_MODEL"
description: "Override CPU MODEL"
schema:
type: string
default: ""
- variable: DASHDOT_OVERRIDE_CPU_CORES
label: "DASHDOT_OVERRIDE_CPU_CORES"
description: "Override CPU CORES"
schema:
type: string
default: ""
- variable: DASHDOT_OVERRIDE_CPU_THREADS
label: "DASHDOT_OVERRIDE_CPU_THREADS"
description: "Override CPU THREADS"
schema:
type: string
default: ""
- variable: DASHDOT_OVERRIDE_CPU_FREQUENCY
label: "DASHDOT_OVERRIDE_CPU_FREQUENCY"
description: "Override CPU FREQUENCY. Number needs to be passed in GHz (e.g. 2.8)"
schema:
type: string
default: ""
- variable: DASHDOT_OVERRIDE_RAM_BRAND
label: "DASHDOT_OVERRIDE_RAM_BRAND"
description: "Override RAM BRAND"
schema:
type: string
default: ""
- variable: DASHDOT_OVERRIDE_RAM_SIZE
label: "DASHDOT_OVERRIDE_RAM_SIZE"
description: "Override RAM SIZE. Number needs to be passed in bytes (e.g. 34359738368 for 32 GB)"
schema:
type: string
default: ""
- variable: DASHDOT_OVERRIDE_RAM_TYPE
label: "DASHDOT_OVERRIDE_RAM_TYPE"
description: "Override RAM TYPE"
schema:
type: string
default: ""
- variable: DASHDOT_OVERRIDE_RAM_FREQUENCY
label: "DASHDOT_OVERRIDE_RAM_FREQUENCY"
description: "Override RAM FREQUENCY"
schema:
type: string
default: ""
- variable: DASHDOT_OVERRIDE_NETWORK_SPEED_UP
label: "DASHDOT_OVERRIDE_NETWORK_SPEED_UP"
description: "Override NETWORK SPEED UP. Number needs to be passed in bit (e.g. 100000000 for 100 Mb/s"
schema:
type: string
default: ""
- variable: DASHDOT_OVERRIDE_NETWORK_SPEED_DOWN
label: "DASHDOT_OVERRIDE_NETWORK_SPEED_DOWN"
description: "Override NETWORK SPEED DOWN. Number needs to be passed in bit (e.g. 100000000 for 100 Mb/s)"
schema:
type: string
default: ""
- variable: DASHDOT_OVERRIDE_NETWORK_INTERFACE_SPEED
label: "DASHDOT_OVERRIDE_NETWORK_INTERFACE_SPEED"
description: "Override NETWORK INTERFACE SPEED. Number needs to be passed in Megabit (e.g. 10000 for 10 GB/s)"
schema:
type: string
default: ""
- variable: DASHDOT_OVERRIDE_NETWORK_PUBLIC_IP
label: "DASHDOT_OVERRIDE_NETWORK_PUBLIC_IP"
description: "Override NETWORK PUBLIC IP"
schema:
type: string
default: ""
# Include{containerConfig}
- variable: service
group: "Networking and Services"
label: "Configure Service(s)"
schema:
additional_attrs: true
type: dict
attrs:
- variable: main
label: "Main Service"
description: "The Primary service on which the healthcheck runs, often the webUI"
schema:
additional_attrs: true
type: dict
attrs:
# Include{serviceSelector}
- variable: main
label: "Main Service Port Configuration"
schema:
additional_attrs: true
type: dict
attrs:
- variable: port
label: "Port"
description: "This port exposes the container port on the service"
schema:
type: int
default: 10044
required: true
- variable: advanced
label: "Show Advanced settings"
schema:
type: boolean
default: false
show_subquestions_if: true
subquestions:
- variable: protocol
label: "Port Type"
schema:
type: string
default: "HTTP"
enum:
- value: HTTP
description: "HTTP"
- value: "HTTPS"
description: "HTTPS"
- value: TCP
description: "TCP"
- value: "UDP"
description: "UDP"
- variable: nodePort
label: "Node Port (Optional)"
description: "This port gets exposed to the node. Only considered when service type is NodePort, Simple or LoadBalancer"
schema:
type: int
min: 9000
max: 65535
- variable: targetPort
label: "Target Port"
description: "The internal(!) port on the container the Application runs on"
schema:
type: int
default: 10044
- variable: serviceexpert
group: "Networking and Services"
label: "Show Expert Config"
schema:
type: boolean
default: false
show_subquestions_if: true
subquestions:
- variable: hostNetwork
group: "Networking and Services"
label: "Host-Networking (Complicated)"
schema:
type: boolean
default: false
# Include{serviceExpert}
# Include{serviceList}
# Include{persistenceList}
- variable: ingress
label: ""
group: "Ingress"
schema:
additional_attrs: true
type: dict
attrs:
- variable: main
label: "Main Ingress"
schema:
additional_attrs: true
type: dict
attrs:
# Include{ingressDefault}
# Include{ingressTLS}
# Include{ingressTraefik}
# Include{ingressExpert}
# Include{ingressList}
# Include{security}
- variable: advancedSecurity
label: "Show Advanced Security Settings"
group: "Security and Permissions"
schema:
type: boolean
default: false
show_subquestions_if: true
subquestions:
- variable: securityContext
label: "Security Context"
schema:
additional_attrs: true
type: dict
attrs:
- variable: privileged
label: "Privileged mode"
schema:
type: boolean
default: false
- variable: readOnlyRootFilesystem
label: "ReadOnly Root Filesystem"
schema:
type: boolean
default: false
- variable: allowPrivilegeEscalation
label: "Allow Privilege Escalation"
schema:
type: boolean
default: false
- variable: runAsNonRoot
label: "runAsNonRoot"
schema:
type: boolean
default: false
# Include{securityContextAdvanced}
- variable: podSecurityContext
group: "Security and Permissions"
label: "Pod Security Context"
schema:
additional_attrs: true
type: dict
attrs:
- variable: runAsUser
label: "runAsUser"
description: "The UserID of the user running the application"
schema:
type: int
default: 0
- variable: runAsGroup
label: "runAsGroup"
description: "The groupID this App of the user running the application"
schema:
type: int
default: 0
- variable: fsGroup
label: "fsGroup"
description: "The group that should own ALL storage."
schema:
type: int
default: 568
# Include{podSecurityContextAdvanced}
# Include{resources}
# Include{advanced}
# Include{addons}
@@ -0,0 +1 @@
{{ include "tc.common.loader.all" . }}
+44
View File
@@ -0,0 +1,44 @@
image:
repository: mauricenino/dashdot
tag: 3.2.1@sha256:0b1fb7b078b6865bb3c13363cc00f2d336b2cbd8cfb065e10d75f6c979af7fb5
pullPolicy: IfNotPresent
securityContext:
runAsNonRoot: false
readOnlyRootFilesystem: false
capabilities:
add:
- SYS_PTRACE
# Test without it first
# - SYS_ADMIN
podSecurityContext:
runAsUser: 0
runAsGroup: 0
env:
DASHDOT_PORT: "{{ .Values.service.main.ports.main.port}}"
# User Defined
# There is a storage widget, but currently it can't extract ZFS usage accurately
# https://github.com/MauriceNino/dashdot/issues/40
DASHDOT_WIDGET_LIST: "os,cpu,ram,network"
service:
main:
ports:
main:
port: 10044
persistence:
os:
enabled: true
type: hostPath
hostPath: "/etc/os-release"
mountPath: "/etc/os-release"
readOnly: true
net:
enabled: true
type: hostPath
hostPath: "/proc/1/ns/net"
mountPath: "/mnt/proc/1/ns/net"
readOnly: true
+27
View File
@@ -0,0 +1,27 @@
apiVersion: v2
appVersion: "10.6.2"
dependencies:
- name: common
repository: https://library-charts.truecharts.org
version: 10.0.9
description: Jump is yet another self-hosted startpage for your server designed to be simple, stylish, fast and secure.
home: https://github.com/truecharts/apps/tree/master/charts/stable/jump
icon: https://truecharts.org/_static/img/appicons/jump.png
keywords:
- dashboard
- jump
kubeVersion: '>=1.16.0-0'
maintainers:
- email: info@truecharts.org
name: TrueCharts
url: https://truecharts.org
name: jump
sources:
- https://github.com/daledavies/jump
- https://hub.docker.com/r/daledavies/jump
version: 0.0.1
annotations:
truecharts.org/catagories: |
- media
truecharts.org/SCALE-support: "true"
truecharts.org/grade: U
+397
View File
@@ -0,0 +1,397 @@
# Include{groups}
portals:
open:
protocols:
- "$kubernetes-resource_configmap_portal_protocol"
host:
- "$kubernetes-resource_configmap_portal_host"
ports:
- "$kubernetes-resource_configmap_portal_port"
questions:
- variable: portal
group: "Container Image"
label: "Configure Portal Button"
schema:
type: dict
hidden: true
attrs:
- variable: enabled
label: "Enable"
description: "enable the portal button"
schema:
hidden: true
editable: false
type: boolean
default: true
# Include{global}
- variable: controller
group: "Controller"
label: ""
schema:
additional_attrs: true
type: dict
attrs:
- variable: advanced
label: "Show Advanced Controller Settings"
schema:
type: boolean
default: false
show_subquestions_if: true
subquestions:
- variable: type
description: "Please specify type of workload to deploy"
label: "(Advanced) Controller Type"
schema:
type: string
default: "deployment"
required: true
enum:
- value: "deployment"
description: "Deployment"
- value: "statefulset"
description: "Statefulset"
- value: "daemonset"
description: "Daemonset"
- variable: replicas
description: "Number of desired pod replicas"
label: "Desired Replicas"
schema:
type: int
default: 1
required: true
- variable: strategy
description: "Please specify type of workload to deploy"
label: "(Advanced) Update Strategy"
schema:
type: string
default: "Recreate"
required: true
enum:
- value: "Recreate"
description: "Recreate: Kill existing pods before creating new ones"
- value: "RollingUpdate"
description: "RollingUpdate: Create new pods and then kill old ones"
- value: "OnDelete"
description: "(Legacy) OnDelete: ignore .spec.template changes"
# Include{controllerExpert}
- variable: secretEnv
group: "Container Configuration"
label: "Image Secrets"
schema:
additional_attrs: true
type: dict
attrs:
- variable: UNSPLASHAPIKEY
label: "UNSPLASHAPIKEY"
description: " An API key for Unsplash, enables fetching random background images from Unsplash."
schema:
type: string
private: true
default: ""
- variable: UNSPLASHCOLLECTIONS
label: "UNSPLASHCOLLECTIONS"
description: "List of Unsplash collection ID's (separated by commas) to select random images from."
schema:
type: string
default: ""
- variable: OWMAPIKEY
label: "OWMAPIKEY"
description: "An API key for Open Weather Map, LATLONG (below) must also be defined."
schema:
type: string
private: true
default: ""
- variable: LATLONG
label: "LATLONG"
description: "A latitude and longitude for the default location (e.g. '51.509865,-0.118092')."
schema:
type: string
default: ""
- variable: env
group: "Container Configuration"
label: "Image Environment"
schema:
additional_attrs: true
type: dict
attrs:
- variable: SITENAME
label: "SITENAME"
description: "Custom site name."
schema:
type: string
default: ""
- variable: SHOWCLOCK
label: "SHOWCLOCK"
description: "Hide the clock."
schema:
type: boolean
default: false
- variable: AMPMCLOCK
label: "AMPMCLOCK"
description: "Show 12 hour clock format if checked."
schema:
type: boolean
default: false
- variable: SHOWGREETING
label: "SHOWGREETING"
description: "Show the label #home instead of a friendly greeting message."
schema:
type: boolean
default: false
- variable: SHOWSEARCH
label: "SHOWSEARCH"
description: "Hide the search button (disable search)."
schema:
type: boolean
default: true
- variable: ALTLAYOUT
label: "ALTLAYOUT"
description: "Display list of sites using an alternative layout."
schema:
type: boolean
default: true
- variable: METRICTEMP
label: "METRICTEMP"
description: "Metric (C) or imperial (F) temperature units."
schema:
type: boolean
default: true
- variable: NOINDEX
label: "NOINDEX"
description: "Include a robots noindex meta tag in site header."
schema:
type: boolean
default: true
- variable: CACHEBYPASS
label: "CACHEBYPASS"
description: "Bypass all caches, useful for testing changes."
schema:
type: boolean
default: true
- variable: BGBLUR
label: "BGBLUR"
description: "Background image blur percentage."
schema:
type: int
default: 50
- variable: BGBRIGHT
label: "BGBRIGHT"
description: "Background image brightness percentage."
schema:
type: int
default: 90
# Include{containerConfig}
- variable: service
group: "Networking and Services"
label: "Configure Service(s)"
schema:
additional_attrs: true
type: dict
attrs:
- variable: main
label: "Main Service"
description: "The Primary service on which the healthcheck runs, often the webUI"
schema:
additional_attrs: true
type: dict
attrs:
# Include{serviceSelector}
- variable: main
label: "Main Service Port Configuration"
schema:
additional_attrs: true
type: dict
attrs:
- variable: port
label: "Port"
description: "This port exposes the container port on the service"
schema:
type: int
default: 10108
required: true
- variable: advanced
label: "Show Advanced settings"
schema:
type: boolean
default: false
show_subquestions_if: true
subquestions:
- variable: protocol
label: "Port Type"
schema:
type: string
default: "HTTP"
enum:
- value: HTTP
description: "HTTP"
- value: "HTTPS"
description: "HTTPS"
- value: TCP
description: "TCP"
- value: "UDP"
description: "UDP"
- variable: nodePort
label: "Node Port (Optional)"
description: "This port gets exposed to the node. Only considered when service type is NodePort, Simple or LoadBalancer"
schema:
type: int
min: 9000
max: 65535
- variable: targetPort
label: "Target Port"
description: "The internal(!) port on the container the Application runs on"
schema:
type: int
default: 8080
- variable: serviceexpert
group: "Networking and Services"
label: "Show Expert Config"
schema:
type: boolean
default: false
show_subquestions_if: true
subquestions:
- variable: hostNetwork
group: "Networking and Services"
label: "Host-Networking (Complicated)"
schema:
type: boolean
default: false
# Include{serviceExpert}
# Include{serviceList}
- variable: persistence
label: "Integrated Persistent Storage"
description: "Integrated Persistent Storage"
group: "Storage and Persistence"
schema:
additional_attrs: true
type: dict
attrs:
- variable: backgrounds
label: "App Background Storage"
description: "Stores the Application Backgrounds."
schema:
additional_attrs: true
type: dict
attrs:
# Include{persistenceBasic}
# Include{persistenceAdvanced}
- variable: sites
label: "App Sites Storage"
description: "Stores the Application Sites."
schema:
additional_attrs: true
type: dict
attrs:
# Include{persistenceBasic}
# Include{persistenceAdvanced}
- variable: search
label: "App Search Storage"
description: "Stores the Application Search."
schema:
additional_attrs: true
type: dict
attrs:
# Include{persistenceBasic}
# Include{persistenceAdvanced}
# Include{persistenceList}
- variable: ingress
label: ""
group: "Ingress"
schema:
additional_attrs: true
type: dict
attrs:
- variable: main
label: "Main Ingress"
schema:
additional_attrs: true
type: dict
attrs:
# Include{ingressDefault}
# Include{ingressTLS}
# Include{ingressTraefik}
# Include{ingressExpert}
# Include{ingressList}
# Include{security}
- variable: advancedSecurity
label: "Show Advanced Security Settings"
group: "Security and Permissions"
schema:
type: boolean
default: false
show_subquestions_if: true
subquestions:
- variable: securityContext
label: "Security Context"
schema:
additional_attrs: true
type: dict
attrs:
- variable: privileged
label: "Privileged mode"
schema:
type: boolean
default: false
- variable: readOnlyRootFilesystem
label: "ReadOnly Root Filesystem"
schema:
type: boolean
default: false
- variable: allowPrivilegeEscalation
label: "Allow Privilege Escalation"
schema:
type: boolean
default: false
- variable: runAsNonRoot
label: "runAsNonRoot"
schema:
type: boolean
default: false
# Include{securityContextAdvanced}
- variable: podSecurityContext
group: "Security and Permissions"
label: "Pod Security Context"
schema:
additional_attrs: true
type: dict
attrs:
- variable: runAsUser
label: "runAsUser"
description: "The UserID of the user running the application"
schema:
type: int
default: 0
- variable: runAsGroup
label: "runAsGroup"
description: "The groupID this App of the user running the application"
schema:
type: int
default: 0
- variable: fsGroup
label: "fsGroup"
description: "The group that should own ALL storage."
schema:
type: int
default: 568
# Include{podSecurityContextAdvanced}
# Include{resources}
# Include{advanced}
# Include{addons}
@@ -0,0 +1 @@
{{ include "tc.common.loader.all" . }}
+33
View File
@@ -0,0 +1,33 @@
image:
repository: daledavies/jump
tag: v1.2.1@sha256:d7726d922000400e58c47555a5a6b6ac74bf04c435e526682bb07c0de6d35c75
pullPolicy: IfNotPresent
securityContext:
readOnlyRootFilesystem: false
runAsNonRoot: false
podSecurityContext:
runAsUser: 0
runAsGroup: 0
env:
SITENAME: "My Site"
service:
main:
ports:
main:
port: 10108
targetPort: 8080
persistence:
backgrounds:
enabled: true
mountPath: "/backgrounds"
search:
enabled: true
mountPath: "/search"
sites:
enabled: true
mountPath: "/sites"