fix(dashdot): run privileged (#2901)
* fix(dashdot): run privileged * add storage widget * caps * lint * no priv * Needs priv
This commit is contained in:
@@ -19,7 +19,7 @@ name: dashdot
|
|||||||
sources:
|
sources:
|
||||||
- https://github.com/MauriceNino/dashdot
|
- https://github.com/MauriceNino/dashdot
|
||||||
- https://hub.docker.com/r/mauricenino/dashdot
|
- https://hub.docker.com/r/mauricenino/dashdot
|
||||||
version: 0.0.3
|
version: 0.0.4
|
||||||
annotations:
|
annotations:
|
||||||
truecharts.org/catagories: |
|
truecharts.org/catagories: |
|
||||||
- media
|
- media
|
||||||
|
|||||||
@@ -88,7 +88,7 @@ questions:
|
|||||||
schema:
|
schema:
|
||||||
type: string
|
type: string
|
||||||
required: true
|
required: true
|
||||||
default: "os,cpu,ram,network"
|
default: "os,cpu,storage,ram,network"
|
||||||
- variable: DASHDOT_ACCEPT_OOKLA_EULA
|
- variable: DASHDOT_ACCEPT_OOKLA_EULA
|
||||||
label: "DASHDOT_ACCEPT_OOKLA_EULA"
|
label: "DASHDOT_ACCEPT_OOKLA_EULA"
|
||||||
description: "Use the newer and more accurate speedtest tool from Ookla, instead of the old speedtest-cli for your speedtests. "
|
description: "Use the newer and more accurate speedtest tool from Ookla, instead of the old speedtest-cli for your speedtests. "
|
||||||
@@ -169,6 +169,37 @@ questions:
|
|||||||
schema:
|
schema:
|
||||||
type: string
|
type: string
|
||||||
default: "1000"
|
default: "1000"
|
||||||
|
- variable: storagewidgetsettings
|
||||||
|
label: "Storage Widget Settings"
|
||||||
|
schema:
|
||||||
|
type: boolean
|
||||||
|
default: false
|
||||||
|
show_subquestions_if: true
|
||||||
|
subquestions:
|
||||||
|
- variable: DASHDOT_STORAGE_LABEL_LIST
|
||||||
|
label: "DASHDOT_STORAGE_LABEL_LIST"
|
||||||
|
description: "Change the order of the labels in the list, to change the position in the widget, or remove an item from the list, to remove it from the widget"
|
||||||
|
schema:
|
||||||
|
type: string
|
||||||
|
default: "brand,size,type"
|
||||||
|
- variable: DASHDOT_STORAGE_WIDGET_GROW
|
||||||
|
label: "DASHDOT_STORAGE_WIDGET_GROW"
|
||||||
|
description: "To adjust the relative size of the Storage widget"
|
||||||
|
schema:
|
||||||
|
type: string
|
||||||
|
default: "3.5"
|
||||||
|
- variable: DASHDOT_STORAGE_WIDGET_MIN_WIDTH
|
||||||
|
label: "DASHDOT_STORAGE_WIDGET_MIN_WIDTH"
|
||||||
|
description: "To adjust the minimum width of the Storage widget (in px)"
|
||||||
|
schema:
|
||||||
|
type: string
|
||||||
|
default: "500"
|
||||||
|
- variable: DASHDOT_STORAGE_POLL_INTERVAL
|
||||||
|
label: "DASHDOT_STORAGE_POLL_INTERVAL"
|
||||||
|
description: "Read the Storage load every x milliseconds"
|
||||||
|
schema:
|
||||||
|
type: string
|
||||||
|
default: "60000"
|
||||||
- variable: ramwidgetsettings
|
- variable: ramwidgetsettings
|
||||||
label: "RAM Widget Settings"
|
label: "RAM Widget Settings"
|
||||||
schema:
|
schema:
|
||||||
@@ -213,6 +244,12 @@ questions:
|
|||||||
default: false
|
default: false
|
||||||
show_subquestions_if: true
|
show_subquestions_if: true
|
||||||
subquestions:
|
subquestions:
|
||||||
|
- variable: DASHDOT_USE_NETWORK_INTERFACE
|
||||||
|
label: "DASHDOT_USE_NETWORK_INTERFACE"
|
||||||
|
description: "If dashdot detects the wrong gateway as your default interface, you can provide a name here that is used instead"
|
||||||
|
schema:
|
||||||
|
type: string
|
||||||
|
default: ""
|
||||||
- variable: DASHDOT_SPEED_TEST_INTERVAL
|
- variable: DASHDOT_SPEED_TEST_INTERVAL
|
||||||
label: "DASHDOT_SPEED_TEST_INTERVAL"
|
label: "DASHDOT_SPEED_TEST_INTERVAL"
|
||||||
description: "At which interval the network speed-test should be rerun (in minutes)"
|
description: "At which interval the network speed-test should be rerun (in minutes)"
|
||||||
@@ -346,6 +383,24 @@ questions:
|
|||||||
schema:
|
schema:
|
||||||
type: string
|
type: string
|
||||||
default: ""
|
default: ""
|
||||||
|
- variable: DASHDOT_OVERRIDE_STORAGE_BRANDS
|
||||||
|
label: "DASHDOT_OVERRIDE_STORAGE_BRANDS"
|
||||||
|
description: "Pass a comma-separated list of brands of your drives. You can skip correct drives, by passing empty values for it"
|
||||||
|
schema:
|
||||||
|
type: string
|
||||||
|
default: ""
|
||||||
|
- variable: DASHDOT_OVERRIDE_STORAGE_SIZES
|
||||||
|
label: "DASHDOT_OVERRIDE_STORAGE_SIZES"
|
||||||
|
description: "Pass a comma-separated list of sizes of your drives. You can skip correct drives, by passing empty values for it"
|
||||||
|
schema:
|
||||||
|
type: string
|
||||||
|
default: ""
|
||||||
|
- variable: DASHDOT_OVERRIDE_STORAGE_TYPES
|
||||||
|
label: "DASHDOT_OVERRIDE_STORAGE_TYPES"
|
||||||
|
description: "Pass a comma-separated list of types of your drives. You can skip correct drives, by passing empty values for it"
|
||||||
|
schema:
|
||||||
|
type: string
|
||||||
|
default: ""
|
||||||
# Include{containerConfig}
|
# Include{containerConfig}
|
||||||
|
|
||||||
- variable: service
|
- variable: service
|
||||||
@@ -475,7 +530,7 @@ questions:
|
|||||||
label: "Privileged mode"
|
label: "Privileged mode"
|
||||||
schema:
|
schema:
|
||||||
type: boolean
|
type: boolean
|
||||||
default: false
|
default: true
|
||||||
- variable: readOnlyRootFilesystem
|
- variable: readOnlyRootFilesystem
|
||||||
label: "ReadOnly Root Filesystem"
|
label: "ReadOnly Root Filesystem"
|
||||||
schema:
|
schema:
|
||||||
@@ -485,7 +540,7 @@ questions:
|
|||||||
label: "Allow Privilege Escalation"
|
label: "Allow Privilege Escalation"
|
||||||
schema:
|
schema:
|
||||||
type: boolean
|
type: boolean
|
||||||
default: false
|
default: true
|
||||||
- variable: runAsNonRoot
|
- variable: runAsNonRoot
|
||||||
label: "runAsNonRoot"
|
label: "runAsNonRoot"
|
||||||
schema:
|
schema:
|
||||||
|
|||||||
@@ -1,14 +1,16 @@
|
|||||||
image:
|
image:
|
||||||
repository: mauricenino/dashdot
|
repository: mauricenino/dashdot
|
||||||
tag: 3.3.3@sha256:5cb60d5ab847f5e15ace2290381622cb359d153415958d6e39ed04df7bb9bf2c
|
tag: 3.4.0@sha256:54a11e6475529da60057255095e265f21f366c81bfcbbcc3e956f7af01978c61
|
||||||
pullPolicy: IfNotPresent
|
pullPolicy: IfNotPresent
|
||||||
|
|
||||||
securityContext:
|
securityContext:
|
||||||
runAsNonRoot: false
|
runAsNonRoot: false
|
||||||
readOnlyRootFilesystem: false
|
readOnlyRootFilesystem: false
|
||||||
|
privileged: true
|
||||||
|
allowPrivilegeEscalation: true
|
||||||
capabilities:
|
capabilities:
|
||||||
add:
|
add:
|
||||||
- SYS_PTRACE
|
- SYS_ADMIN
|
||||||
- SYS_RAWIO
|
- SYS_RAWIO
|
||||||
|
|
||||||
podSecurityContext:
|
podSecurityContext:
|
||||||
@@ -17,10 +19,6 @@ podSecurityContext:
|
|||||||
|
|
||||||
env:
|
env:
|
||||||
DASHDOT_PORT: "{{ .Values.service.main.ports.main.port}}"
|
DASHDOT_PORT: "{{ .Values.service.main.ports.main.port}}"
|
||||||
# User Defined
|
|
||||||
# There is a storage widget, but currently it can't extract ZFS usage accurately
|
|
||||||
# https://github.com/MauriceNino/dashdot/issues/40
|
|
||||||
DASHDOT_WIDGET_LIST: "os,cpu,ram,network"
|
|
||||||
|
|
||||||
service:
|
service:
|
||||||
main:
|
main:
|
||||||
|
|||||||
Reference in New Issue
Block a user