feat(dashdot): move to stable (#2942)
* add gpu options * remove gpu options, it only works if its build from source * sync values with questions * feat(dashdot): move to stable * bump
This commit is contained in:
Stavros Kois
@@ -1,63 +0,0 @@
|
||||
# Changelog<br>
|
||||
|
||||
|
||||
<a name="dashdot-0.0.7"></a>
|
||||
### [dashdot-0.0.7](https://github.com/truecharts/apps/compare/dashdot-0.0.6...dashdot-0.0.7) (2022-06-17)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update docker general non-major ([#2917](https://github.com/truecharts/apps/issues/2917))
|
||||
|
||||
|
||||
|
||||
<a name="dashdot-0.0.6"></a>
|
||||
### [dashdot-0.0.6](https://github.com/truecharts/apps/compare/dashdot-0.0.5...dashdot-0.0.6) (2022-06-16)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update image refs ([#2912](https://github.com/truecharts/apps/issues/2912))
|
||||
|
||||
|
||||
|
||||
<a name="dashdot-0.0.5"></a>
|
||||
### [dashdot-0.0.5](https://github.com/truecharts/apps/compare/dashdot-0.0.4...dashdot-0.0.5) (2022-06-16)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update docker general non-major ([#2904](https://github.com/truecharts/apps/issues/2904))
|
||||
|
||||
|
||||
|
||||
<a name="dashdot-0.0.4"></a>
|
||||
### [dashdot-0.0.4](https://github.com/truecharts/apps/compare/dashdot-0.0.3...dashdot-0.0.4) (2022-06-15)
|
||||
|
||||
#### Fix
|
||||
|
||||
* run privileged ([#2901](https://github.com/truecharts/apps/issues/2901))
|
||||
|
||||
|
||||
|
||||
<a name="dashdot-0.0.3"></a>
|
||||
### [dashdot-0.0.3](https://github.com/truecharts/apps/compare/dashdot-0.0.2...dashdot-0.0.3) (2022-06-15)
|
||||
|
||||
#### Fix
|
||||
|
||||
* add cap and memory mapping ([#2897](https://github.com/truecharts/apps/issues/2897))
|
||||
|
||||
|
||||
|
||||
<a name="dashdot-0.0.2"></a>
|
||||
### [dashdot-0.0.2](https://github.com/truecharts/apps/compare/dashdot-0.0.1...dashdot-0.0.2) (2022-06-15)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update docker general non-major ([#2890](https://github.com/truecharts/apps/issues/2890))
|
||||
|
||||
|
||||
|
||||
<a name="dashdot-0.0.1"></a>
|
||||
### dashdot-0.0.1 (2022-06-14)
|
||||
|
||||
#### Feat
|
||||
|
||||
* add dashdot and jump ([#2867](https://github.com/truecharts/apps/issues/2867))
|
||||
@@ -1,27 +0,0 @@
|
||||
apiVersion: v2
|
||||
appVersion: "3.5.2"
|
||||
dependencies:
|
||||
- name: common
|
||||
repository: https://library-charts.truecharts.org
|
||||
version: 10.0.9
|
||||
description: dash. (or dashdot) is a modern server dashboard, running on the latest tech, designed with glassmorphism in mind.
|
||||
home: https://github.com/truecharts/apps/tree/master/charts/stable/dashdot
|
||||
icon: https://truecharts.org/_static/img/appicons/dashdot.png
|
||||
keywords:
|
||||
- dashboard
|
||||
- dashdot
|
||||
kubeVersion: '>=1.16.0-0'
|
||||
maintainers:
|
||||
- email: info@truecharts.org
|
||||
name: TrueCharts
|
||||
url: https://truecharts.org
|
||||
name: dashdot
|
||||
sources:
|
||||
- https://github.com/MauriceNino/dashdot
|
||||
- https://hub.docker.com/r/mauricenino/dashdot
|
||||
version: 0.0.7
|
||||
annotations:
|
||||
truecharts.org/catagories: |
|
||||
- media
|
||||
truecharts.org/SCALE-support: "true"
|
||||
truecharts.org/grade: U
|
||||
@@ -1,38 +0,0 @@
|
||||
# Introduction
|
||||
|
||||
dash. (or dashdot) is a modern server dashboard, running on the latest tech, designed with glassmorphism in mind.
|
||||
|
||||
TrueCharts are designed to be installed as TrueNAS SCALE app only. We can not guarantee this charts works as a stand-alone helm installation.
|
||||
**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/apps/issues/new/choose)**
|
||||
|
||||
## Source Code
|
||||
|
||||
* <https://github.com/MauriceNino/dashdot>
|
||||
* <https://hub.docker.com/r/mauricenino/dashdot>
|
||||
|
||||
## Requirements
|
||||
|
||||
Kubernetes: `>=1.16.0-0`
|
||||
|
||||
## Dependencies
|
||||
|
||||
| Repository | Name | Version |
|
||||
|------------|------|---------|
|
||||
| https://library-charts.truecharts.org | common | 10.0.9 |
|
||||
|
||||
## Installing the Chart
|
||||
|
||||
To install this App on TrueNAS SCALE check our [Quick-Start Guide](https://truecharts.org/manual/Quick-Start%20Guides/02-Installing-an-App/).
|
||||
|
||||
## Upgrading, Rolling Back and Uninstalling the Chart
|
||||
|
||||
To upgrade, rollback or delete this App from TrueNAS SCALE check our [Quick-Start Guide](https://truecharts.org/manual/Quick-Start%20Guides/04-Upgrade-rollback-delete-an-App/).
|
||||
|
||||
## Support
|
||||
|
||||
- Please check our [quick-start guides](https://truecharts.org/manual/Quick-Start%20Guides/01-Adding-TrueCharts/) first.
|
||||
- See the [Wiki](https://truecharts.org)
|
||||
- Check our [Discord](https://discord.gg/tVsPTHWTtr)
|
||||
- Open a [issue](https://github.com/truecharts/apps/issues/new/choose)
|
||||
---
|
||||
All Rights Reserved - The TrueCharts Project
|
||||
@@ -1,582 +0,0 @@
|
||||
# Include{groups}
|
||||
portals:
|
||||
open:
|
||||
protocols:
|
||||
- "$kubernetes-resource_configmap_portal_protocol"
|
||||
host:
|
||||
- "$kubernetes-resource_configmap_portal_host"
|
||||
ports:
|
||||
- "$kubernetes-resource_configmap_portal_port"
|
||||
questions:
|
||||
- variable: portal
|
||||
group: "Container Image"
|
||||
label: "Configure Portal Button"
|
||||
schema:
|
||||
type: dict
|
||||
hidden: true
|
||||
attrs:
|
||||
- variable: enabled
|
||||
label: "Enable"
|
||||
description: "enable the portal button"
|
||||
schema:
|
||||
hidden: true
|
||||
editable: false
|
||||
type: boolean
|
||||
default: true
|
||||
# Include{global}
|
||||
- variable: controller
|
||||
group: "Controller"
|
||||
label: ""
|
||||
schema:
|
||||
additional_attrs: true
|
||||
type: dict
|
||||
attrs:
|
||||
- variable: advanced
|
||||
label: "Show Advanced Controller Settings"
|
||||
schema:
|
||||
type: boolean
|
||||
default: false
|
||||
show_subquestions_if: true
|
||||
subquestions:
|
||||
- variable: type
|
||||
description: "Please specify type of workload to deploy"
|
||||
label: "(Advanced) Controller Type"
|
||||
schema:
|
||||
type: string
|
||||
default: "deployment"
|
||||
required: true
|
||||
enum:
|
||||
- value: "deployment"
|
||||
description: "Deployment"
|
||||
- value: "statefulset"
|
||||
description: "Statefulset"
|
||||
- value: "daemonset"
|
||||
description: "Daemonset"
|
||||
- variable: replicas
|
||||
description: "Number of desired pod replicas"
|
||||
label: "Desired Replicas"
|
||||
schema:
|
||||
type: int
|
||||
default: 1
|
||||
required: true
|
||||
- variable: strategy
|
||||
description: "Please specify type of workload to deploy"
|
||||
label: "(Advanced) Update Strategy"
|
||||
schema:
|
||||
type: string
|
||||
default: "Recreate"
|
||||
required: true
|
||||
enum:
|
||||
- value: "Recreate"
|
||||
description: "Recreate: Kill existing pods before creating new ones"
|
||||
- value: "RollingUpdate"
|
||||
description: "RollingUpdate: Create new pods and then kill old ones"
|
||||
- value: "OnDelete"
|
||||
description: "(Legacy) OnDelete: ignore .spec.template changes"
|
||||
# Include{controllerExpert}
|
||||
- variable: env
|
||||
group: "Container Configuration"
|
||||
label: "Image Environment"
|
||||
schema:
|
||||
additional_attrs: true
|
||||
type: dict
|
||||
attrs:
|
||||
# General
|
||||
- variable: DASHDOT_WIDGET_LIST
|
||||
label: "DASHDOT_WIDGET_LIST"
|
||||
description: "Change the order of the elements in the list, to change the position on the page, or remove an item from the list, to remove it from the page. Storage Widget does not work correctly with ZFS"
|
||||
schema:
|
||||
type: string
|
||||
required: true
|
||||
default: "os,cpu,storage,ram,network"
|
||||
- variable: DASHDOT_ACCEPT_OOKLA_EULA
|
||||
label: "DASHDOT_ACCEPT_OOKLA_EULA"
|
||||
description: "Use the newer and more accurate speedtest tool from Ookla, instead of the old speedtest-cli for your speedtests. "
|
||||
schema:
|
||||
type: boolean
|
||||
default: false
|
||||
- variable: oswidgetsettings
|
||||
label: "OS Widget Settings"
|
||||
schema:
|
||||
type: boolean
|
||||
default: false
|
||||
show_subquestions_if: true
|
||||
subquestions:
|
||||
- variable: DASHDOT_DISABLE_HOST
|
||||
label: "DASHDOT_DISABLE_HOST"
|
||||
description: "If you want to hide the host part in the server widget"
|
||||
schema:
|
||||
type: boolean
|
||||
default: false
|
||||
- variable: DASHDOT_OS_LABEL_LIST
|
||||
label: "DASHDOT_OS_LABEL_LIST"
|
||||
description: "Change the order of the labels in the list, to change the position in the widget, or remove an item from the list, to remove it from the widget"
|
||||
schema:
|
||||
type: string
|
||||
default: "os,arch,up_since"
|
||||
- variable: DASHDOT_OS_WIDGET_GROW
|
||||
label: "DASHDOT_OS_WIDGET_GROW"
|
||||
description: "To adjust the relative size of the OS widget"
|
||||
schema:
|
||||
type: string
|
||||
default: "1.5"
|
||||
- variable: DASHDOT_OS_WIDGET_MIN_WIDTH
|
||||
label: "DASHDOT_OS_WIDGET_MIN_WIDTH"
|
||||
description: "To adjust the minimum width of the OS widget (in px)"
|
||||
schema:
|
||||
type: string
|
||||
default: "300"
|
||||
- variable: cpuwidgetsettings
|
||||
label: "CPU Widget Settings"
|
||||
schema:
|
||||
type: boolean
|
||||
default: false
|
||||
show_subquestions_if: true
|
||||
subquestions:
|
||||
- variable: DASHDOT_ENABLE_CPU_TEMPS
|
||||
label: "DASHDOT_ENABLE_CPU_TEMPS"
|
||||
description: "If you want to show the CPU temperature in the graph."
|
||||
schema:
|
||||
type: boolean
|
||||
default: false
|
||||
- variable: DASHDOT_CPU_LABEL_LIST
|
||||
label: "DASHDOT_CPU_LABEL_LIST"
|
||||
description: "Change the order of the labels in the list, to change the position in the widget, or remove an item from the list, to remove it from the widget"
|
||||
schema:
|
||||
type: string
|
||||
default: "brand,model,cores,threads,frequency"
|
||||
- variable: DASHDOT_CPU_WIDGET_GROW
|
||||
label: "DASHDOT_CPU_WIDGET_GROW"
|
||||
description: "To adjust the relative size of the Processor widget"
|
||||
schema:
|
||||
type: string
|
||||
default: "4"
|
||||
- variable: DASHDOT_CPU_WIDGET_MIN_WIDTH
|
||||
label: "DASHDOT_CPU_WIDGET_MIN_WIDTH"
|
||||
description: "To adjust the minimum width of the Processor widget (in px)"
|
||||
schema:
|
||||
type: string
|
||||
default: "500"
|
||||
- variable: DASHDOT_CPU_DATAPOINTS
|
||||
label: "DASHDOT_CPU_DATAPOINTS"
|
||||
description: "To adjust the minimum width of the Processor widget (in px)"
|
||||
schema:
|
||||
type: string
|
||||
default: "20"
|
||||
- variable: DASHDOT_CPU_POLL_INTERVAL
|
||||
label: "DASHDOT_CPU_POLL_INTERVAL"
|
||||
description: "To adjust the minimum width of the Processor widget (in px)"
|
||||
schema:
|
||||
type: string
|
||||
default: "1000"
|
||||
- variable: storagewidgetsettings
|
||||
label: "Storage Widget Settings"
|
||||
schema:
|
||||
type: boolean
|
||||
default: false
|
||||
show_subquestions_if: true
|
||||
subquestions:
|
||||
- variable: DASHDOT_STORAGE_LABEL_LIST
|
||||
label: "DASHDOT_STORAGE_LABEL_LIST"
|
||||
description: "Change the order of the labels in the list, to change the position in the widget, or remove an item from the list, to remove it from the widget"
|
||||
schema:
|
||||
type: string
|
||||
default: "brand,size,type"
|
||||
- variable: DASHDOT_STORAGE_WIDGET_GROW
|
||||
label: "DASHDOT_STORAGE_WIDGET_GROW"
|
||||
description: "To adjust the relative size of the Storage widget"
|
||||
schema:
|
||||
type: string
|
||||
default: "3.5"
|
||||
- variable: DASHDOT_STORAGE_WIDGET_MIN_WIDTH
|
||||
label: "DASHDOT_STORAGE_WIDGET_MIN_WIDTH"
|
||||
description: "To adjust the minimum width of the Storage widget (in px)"
|
||||
schema:
|
||||
type: string
|
||||
default: "500"
|
||||
- variable: DASHDOT_STORAGE_POLL_INTERVAL
|
||||
label: "DASHDOT_STORAGE_POLL_INTERVAL"
|
||||
description: "Read the Storage load every x milliseconds"
|
||||
schema:
|
||||
type: string
|
||||
default: "60000"
|
||||
- variable: ramwidgetsettings
|
||||
label: "RAM Widget Settings"
|
||||
schema:
|
||||
type: boolean
|
||||
default: false
|
||||
show_subquestions_if: true
|
||||
subquestions:
|
||||
- variable: DASHDOT_RAM_LABEL_LIST
|
||||
label: "DASHDOT_RAM_LABEL_LIST"
|
||||
description: "Change the order of the labels in the list, to change the position in the widget, or remove an item from the list, to remove it from the widget."
|
||||
schema:
|
||||
type: string
|
||||
default: "brand,size,type,frequency"
|
||||
- variable: DASHDOT_RAM_WIDGET_GROW
|
||||
label: "DASHDOT_RAM_WIDGET_GROW"
|
||||
description: "To adjust the relative size of the Memory widget"
|
||||
schema:
|
||||
type: string
|
||||
default: "4"
|
||||
- variable: DASHDOT_RAM_WIDGET_MIN_WIDTH
|
||||
label: "DASHDOT_RAM_WIDGET_MIN_WIDTH"
|
||||
description: "To adjust the minimum width of the Memory widget (in px)"
|
||||
schema:
|
||||
type: string
|
||||
default: "500"
|
||||
- variable: DASHDOT_RAM_DATAPOINTS
|
||||
label: "DASHDOT_RAM_DATAPOINTS"
|
||||
description: "The amount of datapoints in the Memory graph"
|
||||
schema:
|
||||
type: string
|
||||
default: "20"
|
||||
- variable: DASHDOT_RAM_POLL_INTERVAL
|
||||
label: "DASHDOT_RAM_POLL_INTERVAL"
|
||||
description: "Read the Memory load every x milliseconds"
|
||||
schema:
|
||||
type: string
|
||||
default: "1000"
|
||||
- variable: netwidgetsettings
|
||||
label: "Network Widget Settings"
|
||||
schema:
|
||||
type: boolean
|
||||
default: false
|
||||
show_subquestions_if: true
|
||||
subquestions:
|
||||
- variable: DASHDOT_USE_NETWORK_INTERFACE
|
||||
label: "DASHDOT_USE_NETWORK_INTERFACE"
|
||||
description: "If dashdot detects the wrong gateway as your default interface, you can provide a name here that is used instead"
|
||||
schema:
|
||||
type: string
|
||||
default: ""
|
||||
- variable: DASHDOT_SPEED_TEST_INTERVAL
|
||||
label: "DASHDOT_SPEED_TEST_INTERVAL"
|
||||
description: "At which interval the network speed-test should be rerun (in minutes)"
|
||||
schema:
|
||||
type: string
|
||||
default: "60"
|
||||
- variable: DASHDOT_NETWORK_LABEL_LIST
|
||||
label: "DASHDOT_NETWORK_LABEL_LIST"
|
||||
description: "Change the order of the labels in the list, to change the position in the widget, or remove an item from the list, to remove it from the widget"
|
||||
schema:
|
||||
type: string
|
||||
default: "type,speed_up,speed_down,interface_speed"
|
||||
- variable: DASHDOT_NETWORK_WIDGET_GROW
|
||||
label: "DASHDOT_NETWORK_WIDGET_GROW"
|
||||
description: "To adjust the relative size of the Network widget"
|
||||
schema:
|
||||
type: string
|
||||
default: "6"
|
||||
- variable: DASHDOT_NETWORK_WIDGET_MIN_WIDTH
|
||||
label: "DASHDOT_NETWORK_WIDGET_MIN_WIDTH"
|
||||
description: "To adjust the minimum width of the Network widget (in px)"
|
||||
schema:
|
||||
type: string
|
||||
default: "500"
|
||||
- variable: DASHDOT_NETWORK_DATAPOINTS
|
||||
label: "DASHDOT_NETWORK_DATAPOINTS"
|
||||
description: "The amount of datapoints in each of the Network graphs"
|
||||
schema:
|
||||
type: string
|
||||
default: "20"
|
||||
- variable: DASHDOT_NETWORK_POLL_INTERVAL
|
||||
label: "DASHDOT_NETWORK_POLL_INTERVAL"
|
||||
description: "Read the Network load every x milliseconds"
|
||||
schema:
|
||||
type: string
|
||||
default: "1000"
|
||||
- variable: overridesettings
|
||||
label: "Overrides"
|
||||
schema:
|
||||
type: boolean
|
||||
default: false
|
||||
show_subquestions_if: true
|
||||
subquestions:
|
||||
- variable: DASHDOT_OVERRIDE_OS
|
||||
label: "DASHDOT_OVERRIDE_OS"
|
||||
description: "Override OS"
|
||||
schema:
|
||||
type: string
|
||||
default: ""
|
||||
- variable: DASHDOT_OVERRIDE_ARCH
|
||||
label: "DASHDOT_OVERRIDE_ARCH"
|
||||
description: "Override ARCH"
|
||||
schema:
|
||||
type: string
|
||||
default: ""
|
||||
- variable: DASHDOT_OVERRIDE_CPU_BRAND
|
||||
label: "DASHDOT_OVERRIDE_CPU_BRAND"
|
||||
description: "Override CPU BRAND"
|
||||
schema:
|
||||
type: string
|
||||
default: ""
|
||||
- variable: DASHDOT_OVERRIDE_CPU_MODEL
|
||||
label: "DASHDOT_OVERRIDE_CPU_MODEL"
|
||||
description: "Override CPU MODEL"
|
||||
schema:
|
||||
type: string
|
||||
default: ""
|
||||
- variable: DASHDOT_OVERRIDE_CPU_CORES
|
||||
label: "DASHDOT_OVERRIDE_CPU_CORES"
|
||||
description: "Override CPU CORES"
|
||||
schema:
|
||||
type: string
|
||||
default: ""
|
||||
- variable: DASHDOT_OVERRIDE_CPU_THREADS
|
||||
label: "DASHDOT_OVERRIDE_CPU_THREADS"
|
||||
description: "Override CPU THREADS"
|
||||
schema:
|
||||
type: string
|
||||
default: ""
|
||||
- variable: DASHDOT_OVERRIDE_CPU_FREQUENCY
|
||||
label: "DASHDOT_OVERRIDE_CPU_FREQUENCY"
|
||||
description: "Override CPU FREQUENCY. Number needs to be passed in GHz (e.g. 2.8)"
|
||||
schema:
|
||||
type: string
|
||||
default: ""
|
||||
- variable: DASHDOT_OVERRIDE_RAM_BRAND
|
||||
label: "DASHDOT_OVERRIDE_RAM_BRAND"
|
||||
description: "Override RAM BRAND"
|
||||
schema:
|
||||
type: string
|
||||
default: ""
|
||||
- variable: DASHDOT_OVERRIDE_RAM_SIZE
|
||||
label: "DASHDOT_OVERRIDE_RAM_SIZE"
|
||||
description: "Override RAM SIZE. Number needs to be passed in bytes (e.g. 34359738368 for 32 GB)"
|
||||
schema:
|
||||
type: string
|
||||
default: ""
|
||||
- variable: DASHDOT_OVERRIDE_RAM_TYPE
|
||||
label: "DASHDOT_OVERRIDE_RAM_TYPE"
|
||||
description: "Override RAM TYPE"
|
||||
schema:
|
||||
type: string
|
||||
default: ""
|
||||
- variable: DASHDOT_OVERRIDE_RAM_FREQUENCY
|
||||
label: "DASHDOT_OVERRIDE_RAM_FREQUENCY"
|
||||
description: "Override RAM FREQUENCY"
|
||||
schema:
|
||||
type: string
|
||||
default: ""
|
||||
- variable: DASHDOT_OVERRIDE_NETWORK_SPEED_UP
|
||||
label: "DASHDOT_OVERRIDE_NETWORK_SPEED_UP"
|
||||
description: "Override NETWORK SPEED UP. Number needs to be passed in bit (e.g. 100000000 for 100 Mb/s"
|
||||
schema:
|
||||
type: string
|
||||
default: ""
|
||||
- variable: DASHDOT_OVERRIDE_NETWORK_SPEED_DOWN
|
||||
label: "DASHDOT_OVERRIDE_NETWORK_SPEED_DOWN"
|
||||
description: "Override NETWORK SPEED DOWN. Number needs to be passed in bit (e.g. 100000000 for 100 Mb/s)"
|
||||
schema:
|
||||
type: string
|
||||
default: ""
|
||||
- variable: DASHDOT_OVERRIDE_NETWORK_INTERFACE_SPEED
|
||||
label: "DASHDOT_OVERRIDE_NETWORK_INTERFACE_SPEED"
|
||||
description: "Override NETWORK INTERFACE SPEED. Number needs to be passed in Megabit (e.g. 10000 for 10 GB/s)"
|
||||
schema:
|
||||
type: string
|
||||
default: ""
|
||||
- variable: DASHDOT_OVERRIDE_NETWORK_PUBLIC_IP
|
||||
label: "DASHDOT_OVERRIDE_NETWORK_PUBLIC_IP"
|
||||
description: "Override NETWORK PUBLIC IP"
|
||||
schema:
|
||||
type: string
|
||||
default: ""
|
||||
- variable: DASHDOT_OVERRIDE_STORAGE_BRANDS
|
||||
label: "DASHDOT_OVERRIDE_STORAGE_BRANDS"
|
||||
description: "Pass a comma-separated list of brands of your drives. You can skip correct drives, by passing empty values for it"
|
||||
schema:
|
||||
type: string
|
||||
default: ""
|
||||
- variable: DASHDOT_OVERRIDE_STORAGE_SIZES
|
||||
label: "DASHDOT_OVERRIDE_STORAGE_SIZES"
|
||||
description: "Pass a comma-separated list of sizes of your drives. You can skip correct drives, by passing empty values for it"
|
||||
schema:
|
||||
type: string
|
||||
default: ""
|
||||
- variable: DASHDOT_OVERRIDE_STORAGE_TYPES
|
||||
label: "DASHDOT_OVERRIDE_STORAGE_TYPES"
|
||||
description: "Pass a comma-separated list of types of your drives. You can skip correct drives, by passing empty values for it"
|
||||
schema:
|
||||
type: string
|
||||
default: ""
|
||||
# Include{containerConfig}
|
||||
|
||||
- variable: service
|
||||
group: "Networking and Services"
|
||||
label: "Configure Service(s)"
|
||||
schema:
|
||||
additional_attrs: true
|
||||
type: dict
|
||||
attrs:
|
||||
- variable: main
|
||||
label: "Main Service"
|
||||
description: "The Primary service on which the healthcheck runs, often the webUI"
|
||||
schema:
|
||||
additional_attrs: true
|
||||
type: dict
|
||||
attrs:
|
||||
# Include{serviceSelector}
|
||||
- variable: main
|
||||
label: "Main Service Port Configuration"
|
||||
schema:
|
||||
additional_attrs: true
|
||||
type: dict
|
||||
attrs:
|
||||
- variable: port
|
||||
label: "Port"
|
||||
description: "This port exposes the container port on the service"
|
||||
schema:
|
||||
type: int
|
||||
default: 10044
|
||||
required: true
|
||||
- variable: advanced
|
||||
label: "Show Advanced settings"
|
||||
schema:
|
||||
type: boolean
|
||||
default: false
|
||||
show_subquestions_if: true
|
||||
subquestions:
|
||||
- variable: protocol
|
||||
label: "Port Type"
|
||||
schema:
|
||||
type: string
|
||||
default: "HTTP"
|
||||
enum:
|
||||
- value: HTTP
|
||||
description: "HTTP"
|
||||
- value: "HTTPS"
|
||||
description: "HTTPS"
|
||||
- value: TCP
|
||||
description: "TCP"
|
||||
- value: "UDP"
|
||||
description: "UDP"
|
||||
- variable: nodePort
|
||||
label: "Node Port (Optional)"
|
||||
description: "This port gets exposed to the node. Only considered when service type is NodePort, Simple or LoadBalancer"
|
||||
schema:
|
||||
type: int
|
||||
min: 9000
|
||||
max: 65535
|
||||
- variable: targetPort
|
||||
label: "Target Port"
|
||||
description: "The internal(!) port on the container the Application runs on"
|
||||
schema:
|
||||
type: int
|
||||
default: 10044
|
||||
|
||||
- variable: serviceexpert
|
||||
group: "Networking and Services"
|
||||
label: "Show Expert Config"
|
||||
schema:
|
||||
type: boolean
|
||||
default: false
|
||||
show_subquestions_if: true
|
||||
subquestions:
|
||||
- variable: hostNetwork
|
||||
group: "Networking and Services"
|
||||
label: "Host-Networking (Complicated)"
|
||||
schema:
|
||||
type: boolean
|
||||
default: false
|
||||
|
||||
# Include{serviceExpert}
|
||||
|
||||
# Include{serviceList}
|
||||
|
||||
# Include{persistenceList}
|
||||
|
||||
- variable: ingress
|
||||
label: ""
|
||||
group: "Ingress"
|
||||
schema:
|
||||
additional_attrs: true
|
||||
type: dict
|
||||
attrs:
|
||||
- variable: main
|
||||
label: "Main Ingress"
|
||||
schema:
|
||||
additional_attrs: true
|
||||
type: dict
|
||||
attrs:
|
||||
# Include{ingressDefault}
|
||||
|
||||
# Include{ingressTLS}
|
||||
|
||||
# Include{ingressTraefik}
|
||||
|
||||
# Include{ingressExpert}
|
||||
|
||||
# Include{ingressList}
|
||||
|
||||
# Include{security}
|
||||
|
||||
- variable: advancedSecurity
|
||||
label: "Show Advanced Security Settings"
|
||||
group: "Security and Permissions"
|
||||
schema:
|
||||
type: boolean
|
||||
default: false
|
||||
show_subquestions_if: true
|
||||
subquestions:
|
||||
- variable: securityContext
|
||||
label: "Security Context"
|
||||
schema:
|
||||
additional_attrs: true
|
||||
type: dict
|
||||
attrs:
|
||||
- variable: privileged
|
||||
label: "Privileged mode"
|
||||
schema:
|
||||
type: boolean
|
||||
default: true
|
||||
- variable: readOnlyRootFilesystem
|
||||
label: "ReadOnly Root Filesystem"
|
||||
schema:
|
||||
type: boolean
|
||||
default: false
|
||||
- variable: allowPrivilegeEscalation
|
||||
label: "Allow Privilege Escalation"
|
||||
schema:
|
||||
type: boolean
|
||||
default: true
|
||||
- variable: runAsNonRoot
|
||||
label: "runAsNonRoot"
|
||||
schema:
|
||||
type: boolean
|
||||
default: false
|
||||
# Include{securityContextAdvanced}
|
||||
|
||||
- variable: podSecurityContext
|
||||
group: "Security and Permissions"
|
||||
label: "Pod Security Context"
|
||||
schema:
|
||||
additional_attrs: true
|
||||
type: dict
|
||||
attrs:
|
||||
- variable: runAsUser
|
||||
label: "runAsUser"
|
||||
description: "The UserID of the user running the application"
|
||||
schema:
|
||||
type: int
|
||||
default: 0
|
||||
- variable: runAsGroup
|
||||
label: "runAsGroup"
|
||||
description: "The groupID this App of the user running the application"
|
||||
schema:
|
||||
type: int
|
||||
default: 0
|
||||
- variable: fsGroup
|
||||
label: "fsGroup"
|
||||
description: "The group that should own ALL storage."
|
||||
schema:
|
||||
type: int
|
||||
default: 568
|
||||
# Include{podSecurityContextAdvanced}
|
||||
|
||||
# Include{resources}
|
||||
|
||||
# Include{advanced}
|
||||
|
||||
# Include{addons}
|
||||
@@ -1,85 +0,0 @@
|
||||
---
|
||||
hide:
|
||||
- toc
|
||||
---
|
||||
|
||||
# Security Overview
|
||||
|
||||
<link href="https://truecharts.org/_static/trivy.css" type="text/css" rel="stylesheet" />
|
||||
|
||||
## Helm-Chart
|
||||
|
||||
##### Scan Results
|
||||
|
||||
#### Chart Object: dashdot/templates/common.yaml
|
||||
|
||||
|
||||
|
||||
| Type | Misconfiguration ID | Check | Severity | Explaination | Links |
|
||||
|:----------------|:------------------:|:-----------:|:------------------:|-----------------------------------------|-----------------------------------------|
|
||||
| Kubernetes Security Check | KSV001 | Process can elevate its own privileges | MEDIUM | <details><summary>Expand...</summary> A program inside the container can elevate its own privileges and run as root, which might give the program control over the container and node. <br> <hr> <br> Container 'RELEASE-NAME-dashdot' of Deployment 'RELEASE-NAME-dashdot' should set 'securityContext.allowPrivilegeEscalation' to false </details>| <details><summary>Expand...</summary><a href="https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted">https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted</a><br><a href="https://avd.aquasec.com/appshield/ksv001">https://avd.aquasec.com/appshield/ksv001</a><br></details> |
|
||||
| Kubernetes Security Check | KSV001 | Process can elevate its own privileges | MEDIUM | <details><summary>Expand...</summary> A program inside the container can elevate its own privileges and run as root, which might give the program control over the container and node. <br> <hr> <br> Container 'autopermissions' of Deployment 'RELEASE-NAME-dashdot' should set 'securityContext.allowPrivilegeEscalation' to false </details>| <details><summary>Expand...</summary><a href="https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted">https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted</a><br><a href="https://avd.aquasec.com/appshield/ksv001">https://avd.aquasec.com/appshield/ksv001</a><br></details> |
|
||||
| Kubernetes Security Check | KSV003 | Default capabilities not dropped | LOW | <details><summary>Expand...</summary> The container should drop all default capabilities and add only those that are needed for its execution. <br> <hr> <br> Container 'RELEASE-NAME-dashdot' of Deployment 'RELEASE-NAME-dashdot' should add 'ALL' to 'securityContext.capabilities.drop' </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-securitycontext-capabilities-drop-index-all/">https://kubesec.io/basics/containers-securitycontext-capabilities-drop-index-all/</a><br><a href="https://avd.aquasec.com/appshield/ksv003">https://avd.aquasec.com/appshield/ksv003</a><br></details> |
|
||||
| Kubernetes Security Check | KSV003 | Default capabilities not dropped | LOW | <details><summary>Expand...</summary> The container should drop all default capabilities and add only those that are needed for its execution. <br> <hr> <br> Container 'autopermissions' of Deployment 'RELEASE-NAME-dashdot' should add 'ALL' to 'securityContext.capabilities.drop' </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-securitycontext-capabilities-drop-index-all/">https://kubesec.io/basics/containers-securitycontext-capabilities-drop-index-all/</a><br><a href="https://avd.aquasec.com/appshield/ksv003">https://avd.aquasec.com/appshield/ksv003</a><br></details> |
|
||||
| Kubernetes Security Check | KSV005 | SYS_ADMIN capability added | HIGH | <details><summary>Expand...</summary> SYS_ADMIN gives the processes running inside the container privileges that are equivalent to root. <br> <hr> <br> Container 'RELEASE-NAME-dashdot' of Deployment 'RELEASE-NAME-dashdot' should not include 'SYS_ADMIN' in 'securityContext.capabilities.add' </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-securitycontext-capabilities-add-index-sys-admin/">https://kubesec.io/basics/containers-securitycontext-capabilities-add-index-sys-admin/</a><br><a href="https://avd.aquasec.com/appshield/ksv005">https://avd.aquasec.com/appshield/ksv005</a><br></details> |
|
||||
| Kubernetes Security Check | KSV012 | Runs as root user | MEDIUM | <details><summary>Expand...</summary> 'runAsNonRoot' forces the running image to run as a non-root user to ensure least privileges. <br> <hr> <br> Container 'RELEASE-NAME-dashdot' of Deployment 'RELEASE-NAME-dashdot' should set 'securityContext.runAsNonRoot' to true </details>| <details><summary>Expand...</summary><a href="https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted">https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted</a><br><a href="https://avd.aquasec.com/appshield/ksv012">https://avd.aquasec.com/appshield/ksv012</a><br></details> |
|
||||
| Kubernetes Security Check | KSV012 | Runs as root user | MEDIUM | <details><summary>Expand...</summary> 'runAsNonRoot' forces the running image to run as a non-root user to ensure least privileges. <br> <hr> <br> Container 'autopermissions' of Deployment 'RELEASE-NAME-dashdot' should set 'securityContext.runAsNonRoot' to true </details>| <details><summary>Expand...</summary><a href="https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted">https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted</a><br><a href="https://avd.aquasec.com/appshield/ksv012">https://avd.aquasec.com/appshield/ksv012</a><br></details> |
|
||||
| Kubernetes Security Check | KSV014 | Root file system is not read-only | LOW | <details><summary>Expand...</summary> An immutable root file system prevents applications from writing to their local disk. This can limit intrusions, as attackers will not be able to tamper with the file system or write foreign executables to disk. <br> <hr> <br> Container 'RELEASE-NAME-dashdot' of Deployment 'RELEASE-NAME-dashdot' should set 'securityContext.readOnlyRootFilesystem' to true </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-securitycontext-readonlyrootfilesystem-true/">https://kubesec.io/basics/containers-securitycontext-readonlyrootfilesystem-true/</a><br><a href="https://avd.aquasec.com/appshield/ksv014">https://avd.aquasec.com/appshield/ksv014</a><br></details> |
|
||||
| Kubernetes Security Check | KSV014 | Root file system is not read-only | LOW | <details><summary>Expand...</summary> An immutable root file system prevents applications from writing to their local disk. This can limit intrusions, as attackers will not be able to tamper with the file system or write foreign executables to disk. <br> <hr> <br> Container 'autopermissions' of Deployment 'RELEASE-NAME-dashdot' should set 'securityContext.readOnlyRootFilesystem' to true </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-securitycontext-readonlyrootfilesystem-true/">https://kubesec.io/basics/containers-securitycontext-readonlyrootfilesystem-true/</a><br><a href="https://avd.aquasec.com/appshield/ksv014">https://avd.aquasec.com/appshield/ksv014</a><br></details> |
|
||||
| Kubernetes Security Check | KSV017 | Privileged container | HIGH | <details><summary>Expand...</summary> Privileged containers share namespaces with the host system and do not offer any security. They should be used exclusively for system containers that require high privileges. <br> <hr> <br> Container 'RELEASE-NAME-dashdot' of Deployment 'RELEASE-NAME-dashdot' should set 'securityContext.privileged' to false </details>| <details><summary>Expand...</summary><a href="https://kubernetes.io/docs/concepts/security/pod-security-standards/#baseline">https://kubernetes.io/docs/concepts/security/pod-security-standards/#baseline</a><br><a href="https://avd.aquasec.com/appshield/ksv017">https://avd.aquasec.com/appshield/ksv017</a><br></details> |
|
||||
| Kubernetes Security Check | KSV017 | Privileged container | HIGH | <details><summary>Expand...</summary> Privileged containers share namespaces with the host system and do not offer any security. They should be used exclusively for system containers that require high privileges. <br> <hr> <br> Container 'autopermissions' of Deployment 'RELEASE-NAME-dashdot' should set 'securityContext.privileged' to false </details>| <details><summary>Expand...</summary><a href="https://kubernetes.io/docs/concepts/security/pod-security-standards/#baseline">https://kubernetes.io/docs/concepts/security/pod-security-standards/#baseline</a><br><a href="https://avd.aquasec.com/appshield/ksv017">https://avd.aquasec.com/appshield/ksv017</a><br></details> |
|
||||
| Kubernetes Security Check | KSV020 | Runs with low user ID | MEDIUM | <details><summary>Expand...</summary> Force the container to run with user ID > 10000 to avoid conflicts with the host’s user table. <br> <hr> <br> Container 'RELEASE-NAME-dashdot' of Deployment 'RELEASE-NAME-dashdot' should set 'securityContext.runAsUser' > 10000 </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-securitycontext-runasuser/">https://kubesec.io/basics/containers-securitycontext-runasuser/</a><br><a href="https://avd.aquasec.com/appshield/ksv020">https://avd.aquasec.com/appshield/ksv020</a><br></details> |
|
||||
| Kubernetes Security Check | KSV020 | Runs with low user ID | MEDIUM | <details><summary>Expand...</summary> Force the container to run with user ID > 10000 to avoid conflicts with the host’s user table. <br> <hr> <br> Container 'autopermissions' of Deployment 'RELEASE-NAME-dashdot' should set 'securityContext.runAsUser' > 10000 </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-securitycontext-runasuser/">https://kubesec.io/basics/containers-securitycontext-runasuser/</a><br><a href="https://avd.aquasec.com/appshield/ksv020">https://avd.aquasec.com/appshield/ksv020</a><br></details> |
|
||||
| Kubernetes Security Check | KSV021 | Runs with low group ID | MEDIUM | <details><summary>Expand...</summary> Force the container to run with group ID > 10000 to avoid conflicts with the host’s user table. <br> <hr> <br> Container 'RELEASE-NAME-dashdot' of Deployment 'RELEASE-NAME-dashdot' should set 'securityContext.runAsGroup' > 10000 </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-securitycontext-runasuser/">https://kubesec.io/basics/containers-securitycontext-runasuser/</a><br><a href="https://avd.aquasec.com/appshield/ksv021">https://avd.aquasec.com/appshield/ksv021</a><br></details> |
|
||||
| Kubernetes Security Check | KSV021 | Runs with low group ID | MEDIUM | <details><summary>Expand...</summary> Force the container to run with group ID > 10000 to avoid conflicts with the host’s user table. <br> <hr> <br> Container 'autopermissions' of Deployment 'RELEASE-NAME-dashdot' should set 'securityContext.runAsGroup' > 10000 </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-securitycontext-runasuser/">https://kubesec.io/basics/containers-securitycontext-runasuser/</a><br><a href="https://avd.aquasec.com/appshield/ksv021">https://avd.aquasec.com/appshield/ksv021</a><br></details> |
|
||||
| Kubernetes Security Check | KSV022 | Non-default capabilities added | MEDIUM | <details><summary>Expand...</summary> Adding NET_RAW or capabilities beyond the default set must be disallowed. <br> <hr> <br> Container 'RELEASE-NAME-dashdot' of Deployment 'RELEASE-NAME-dashdot' should not set 'securityContext.capabilities.add' </details>| <details><summary>Expand...</summary><a href="https://kubernetes.io/docs/concepts/security/pod-security-standards/#baseline">https://kubernetes.io/docs/concepts/security/pod-security-standards/#baseline</a><br><a href="https://avd.aquasec.com/appshield/ksv022">https://avd.aquasec.com/appshield/ksv022</a><br></details> |
|
||||
| Kubernetes Security Check | KSV023 | hostPath volumes mounted | MEDIUM | <details><summary>Expand...</summary> HostPath volumes must be forbidden. <br> <hr> <br> Deployment 'RELEASE-NAME-dashdot' should not set 'spec.template.volumes.hostPath' </details>| <details><summary>Expand...</summary><a href="https://kubernetes.io/docs/concepts/security/pod-security-standards/#baseline">https://kubernetes.io/docs/concepts/security/pod-security-standards/#baseline</a><br><a href="https://avd.aquasec.com/appshield/ksv023">https://avd.aquasec.com/appshield/ksv023</a><br></details> |
|
||||
| Kubernetes Security Check | KSV029 | A root primary or supplementary GID set | LOW | <details><summary>Expand...</summary> Containers should be forbidden from running with a root primary or supplementary GID. <br> <hr> <br> Deployment 'RELEASE-NAME-dashdot' should set 'spec.securityContext.runAsGroup', 'spec.securityContext.supplementalGroups[*]' and 'spec.securityContext.fsGroup' to integer greater than 0 </details>| <details><summary>Expand...</summary><a href="https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted">https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted</a><br><a href="https://avd.aquasec.com/appshield/ksv029">https://avd.aquasec.com/appshield/ksv029</a><br></details> |
|
||||
|
||||
## Containers
|
||||
|
||||
##### Detected Containers
|
||||
|
||||
tccr.io/truecharts/alpine:v3.15.2@sha256:29ed3480a0ee43f7af681fed5d4fc215516abf1c41eade6938b26d8c9c2c7583
|
||||
tccr.io/truecharts/dashdot:v3.5.2@sha256:f396205662cb44b55eb52ec3e3a1b8bcfdaf5ca5b58c1be5f65b565fde36006a
|
||||
|
||||
##### Scan Results
|
||||
|
||||
|
||||
#### Container: tccr.io/truecharts/alpine:v3.15.2@sha256:29ed3480a0ee43f7af681fed5d4fc215516abf1c41eade6938b26d8c9c2c7583 (alpine 3.15.2)
|
||||
|
||||
|
||||
**alpine**
|
||||
|
||||
|
||||
| Package | Vulnerability | Severity | Installed Version | Fixed Version | Links |
|
||||
|:----------------|:------------------:|:-----------:|:------------------:|:-------------:|-----------------------------------------|
|
||||
| busybox | CVE-2022-28391 | CRITICAL | 1.34.1-r4 | 1.34.1-r5 | <details><summary>Expand...</summary><a href="https://access.redhat.com/security/cve/CVE-2022-28391">https://access.redhat.com/security/cve/CVE-2022-28391</a><br><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28391">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28391</a><br><a href="https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch">https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch</a><br><a href="https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch">https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch</a><br><a href="https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661">https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661</a><br><a href="https://nvd.nist.gov/vuln/detail/CVE-2022-28391">https://nvd.nist.gov/vuln/detail/CVE-2022-28391</a><br></details> |
|
||||
| curl | CVE-2022-22576 | HIGH | 7.80.0-r0 | 7.80.0-r1 | <details><summary>Expand...</summary><a href="https://access.redhat.com/security/cve/CVE-2022-22576">https://access.redhat.com/security/cve/CVE-2022-22576</a><br><a href="https://curl.se/docs/CVE-2022-22576.html">https://curl.se/docs/CVE-2022-22576.html</a><br><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576</a><br><a href="https://hackerone.com/reports/1526328">https://hackerone.com/reports/1526328</a><br><a href="https://nvd.nist.gov/vuln/detail/CVE-2022-22576">https://nvd.nist.gov/vuln/detail/CVE-2022-22576</a><br><a href="https://security.netapp.com/advisory/ntap-20220609-0008/">https://security.netapp.com/advisory/ntap-20220609-0008/</a><br><a href="https://ubuntu.com/security/notices/USN-5397-1">https://ubuntu.com/security/notices/USN-5397-1</a><br></details> |
|
||||
| curl | CVE-2022-27775 | HIGH | 7.80.0-r0 | 7.80.0-r1 | <details><summary>Expand...</summary><a href="https://access.redhat.com/security/cve/CVE-2022-27775">https://access.redhat.com/security/cve/CVE-2022-27775</a><br><a href="https://curl.se/docs/CVE-2022-27775.html">https://curl.se/docs/CVE-2022-27775.html</a><br><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775</a><br><a href="https://hackerone.com/reports/1546268">https://hackerone.com/reports/1546268</a><br><a href="https://nvd.nist.gov/vuln/detail/CVE-2022-27775">https://nvd.nist.gov/vuln/detail/CVE-2022-27775</a><br><a href="https://security.netapp.com/advisory/ntap-20220609-0008/">https://security.netapp.com/advisory/ntap-20220609-0008/</a><br><a href="https://ubuntu.com/security/notices/USN-5397-1">https://ubuntu.com/security/notices/USN-5397-1</a><br></details> |
|
||||
| curl | CVE-2022-27774 | MEDIUM | 7.80.0-r0 | 7.80.0-r1 | <details><summary>Expand...</summary><a href="https://access.redhat.com/security/cve/CVE-2022-27774">https://access.redhat.com/security/cve/CVE-2022-27774</a><br><a href="https://curl.se/docs/CVE-2022-27774.html">https://curl.se/docs/CVE-2022-27774.html</a><br><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774</a><br><a href="https://hackerone.com/reports/1543773">https://hackerone.com/reports/1543773</a><br><a href="https://nvd.nist.gov/vuln/detail/CVE-2022-27774">https://nvd.nist.gov/vuln/detail/CVE-2022-27774</a><br><a href="https://security.netapp.com/advisory/ntap-20220609-0008/">https://security.netapp.com/advisory/ntap-20220609-0008/</a><br><a href="https://ubuntu.com/security/notices/USN-5397-1">https://ubuntu.com/security/notices/USN-5397-1</a><br></details> |
|
||||
| curl | CVE-2022-27776 | MEDIUM | 7.80.0-r0 | 7.80.0-r1 | <details><summary>Expand...</summary><a href="https://access.redhat.com/security/cve/CVE-2022-27776">https://access.redhat.com/security/cve/CVE-2022-27776</a><br><a href="https://curl.se/docs/CVE-2022-27776.html">https://curl.se/docs/CVE-2022-27776.html</a><br><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776</a><br><a href="https://hackerone.com/reports/1547048">https://hackerone.com/reports/1547048</a><br><a href="https://nvd.nist.gov/vuln/detail/CVE-2022-27776">https://nvd.nist.gov/vuln/detail/CVE-2022-27776</a><br><a href="https://security.netapp.com/advisory/ntap-20220609-0008/">https://security.netapp.com/advisory/ntap-20220609-0008/</a><br><a href="https://ubuntu.com/security/notices/USN-5397-1">https://ubuntu.com/security/notices/USN-5397-1</a><br></details> |
|
||||
| libcurl | CVE-2022-22576 | HIGH | 7.80.0-r0 | 7.80.0-r1 | <details><summary>Expand...</summary><a href="https://access.redhat.com/security/cve/CVE-2022-22576">https://access.redhat.com/security/cve/CVE-2022-22576</a><br><a href="https://curl.se/docs/CVE-2022-22576.html">https://curl.se/docs/CVE-2022-22576.html</a><br><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22576</a><br><a href="https://hackerone.com/reports/1526328">https://hackerone.com/reports/1526328</a><br><a href="https://nvd.nist.gov/vuln/detail/CVE-2022-22576">https://nvd.nist.gov/vuln/detail/CVE-2022-22576</a><br><a href="https://security.netapp.com/advisory/ntap-20220609-0008/">https://security.netapp.com/advisory/ntap-20220609-0008/</a><br><a href="https://ubuntu.com/security/notices/USN-5397-1">https://ubuntu.com/security/notices/USN-5397-1</a><br></details> |
|
||||
| libcurl | CVE-2022-27775 | HIGH | 7.80.0-r0 | 7.80.0-r1 | <details><summary>Expand...</summary><a href="https://access.redhat.com/security/cve/CVE-2022-27775">https://access.redhat.com/security/cve/CVE-2022-27775</a><br><a href="https://curl.se/docs/CVE-2022-27775.html">https://curl.se/docs/CVE-2022-27775.html</a><br><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775</a><br><a href="https://hackerone.com/reports/1546268">https://hackerone.com/reports/1546268</a><br><a href="https://nvd.nist.gov/vuln/detail/CVE-2022-27775">https://nvd.nist.gov/vuln/detail/CVE-2022-27775</a><br><a href="https://security.netapp.com/advisory/ntap-20220609-0008/">https://security.netapp.com/advisory/ntap-20220609-0008/</a><br><a href="https://ubuntu.com/security/notices/USN-5397-1">https://ubuntu.com/security/notices/USN-5397-1</a><br></details> |
|
||||
| libcurl | CVE-2022-27774 | MEDIUM | 7.80.0-r0 | 7.80.0-r1 | <details><summary>Expand...</summary><a href="https://access.redhat.com/security/cve/CVE-2022-27774">https://access.redhat.com/security/cve/CVE-2022-27774</a><br><a href="https://curl.se/docs/CVE-2022-27774.html">https://curl.se/docs/CVE-2022-27774.html</a><br><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27774</a><br><a href="https://hackerone.com/reports/1543773">https://hackerone.com/reports/1543773</a><br><a href="https://nvd.nist.gov/vuln/detail/CVE-2022-27774">https://nvd.nist.gov/vuln/detail/CVE-2022-27774</a><br><a href="https://security.netapp.com/advisory/ntap-20220609-0008/">https://security.netapp.com/advisory/ntap-20220609-0008/</a><br><a href="https://ubuntu.com/security/notices/USN-5397-1">https://ubuntu.com/security/notices/USN-5397-1</a><br></details> |
|
||||
| libcurl | CVE-2022-27776 | MEDIUM | 7.80.0-r0 | 7.80.0-r1 | <details><summary>Expand...</summary><a href="https://access.redhat.com/security/cve/CVE-2022-27776">https://access.redhat.com/security/cve/CVE-2022-27776</a><br><a href="https://curl.se/docs/CVE-2022-27776.html">https://curl.se/docs/CVE-2022-27776.html</a><br><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776</a><br><a href="https://hackerone.com/reports/1547048">https://hackerone.com/reports/1547048</a><br><a href="https://nvd.nist.gov/vuln/detail/CVE-2022-27776">https://nvd.nist.gov/vuln/detail/CVE-2022-27776</a><br><a href="https://security.netapp.com/advisory/ntap-20220609-0008/">https://security.netapp.com/advisory/ntap-20220609-0008/</a><br><a href="https://ubuntu.com/security/notices/USN-5397-1">https://ubuntu.com/security/notices/USN-5397-1</a><br></details> |
|
||||
| ssl_client | CVE-2022-28391 | CRITICAL | 1.34.1-r4 | 1.34.1-r5 | <details><summary>Expand...</summary><a href="https://access.redhat.com/security/cve/CVE-2022-28391">https://access.redhat.com/security/cve/CVE-2022-28391</a><br><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28391">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28391</a><br><a href="https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch">https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch</a><br><a href="https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch">https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch</a><br><a href="https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661">https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661</a><br><a href="https://nvd.nist.gov/vuln/detail/CVE-2022-28391">https://nvd.nist.gov/vuln/detail/CVE-2022-28391</a><br></details> |
|
||||
| zlib | CVE-2018-25032 | HIGH | 1.2.11-r3 | 1.2.12-r0 | <details><summary>Expand...</summary><a href="http://seclists.org/fulldisclosure/2022/May/33">http://seclists.org/fulldisclosure/2022/May/33</a><br><a href="http://seclists.org/fulldisclosure/2022/May/35">http://seclists.org/fulldisclosure/2022/May/35</a><br><a href="http://seclists.org/fulldisclosure/2022/May/38">http://seclists.org/fulldisclosure/2022/May/38</a><br><a href="http://www.openwall.com/lists/oss-security/2022/03/25/2">http://www.openwall.com/lists/oss-security/2022/03/25/2</a><br><a href="http://www.openwall.com/lists/oss-security/2022/03/26/1">http://www.openwall.com/lists/oss-security/2022/03/26/1</a><br><a href="https://access.redhat.com/security/cve/CVE-2018-25032">https://access.redhat.com/security/cve/CVE-2018-25032</a><br><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25032">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25032</a><br><a href="https://errata.almalinux.org/8/ALSA-2022-2201.html">https://errata.almalinux.org/8/ALSA-2022-2201.html</a><br><a href="https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531">https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531</a><br><a href="https://github.com/madler/zlib/compare/v1.2.11...v1.2.12">https://github.com/madler/zlib/compare/v1.2.11...v1.2.12</a><br><a href="https://github.com/madler/zlib/issues/605">https://github.com/madler/zlib/issues/605</a><br><a href="https://github.com/sparklemotion/nokogiri/releases/tag/v1.13.4">https://github.com/sparklemotion/nokogiri/releases/tag/v1.13.4</a><br><a href="https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-v6gp-9mmm-c6p5">https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-v6gp-9mmm-c6p5</a><br><a href="https://groups.google.com/g/ruby-security-ann/c/vX7qSjsvWis/m/TJWN4oOKBwAJ">https://groups.google.com/g/ruby-security-ann/c/vX7qSjsvWis/m/TJWN4oOKBwAJ</a><br><a href="https://linux.oracle.com/cve/CVE-2018-25032.html">https://linux.oracle.com/cve/CVE-2018-25032.html</a><br><a href="https://linux.oracle.com/errata/ELSA-2022-2213.html">https://linux.oracle.com/errata/ELSA-2022-2213.html</a><br><a href="https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html">https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html</a><br><a href="https://lists.debian.org/debian-lts-announce/2022/05/msg00008.html">https://lists.debian.org/debian-lts-announce/2022/05/msg00008.html</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/</a><br><a href="https://nvd.nist.gov/vuln/detail/CVE-2018-25032">https://nvd.nist.gov/vuln/detail/CVE-2018-25032</a><br><a href="https://security.netapp.com/advisory/ntap-20220526-0009/">https://security.netapp.com/advisory/ntap-20220526-0009/</a><br><a href="https://support.apple.com/kb/HT213255">https://support.apple.com/kb/HT213255</a><br><a href="https://support.apple.com/kb/HT213256">https://support.apple.com/kb/HT213256</a><br><a href="https://support.apple.com/kb/HT213257">https://support.apple.com/kb/HT213257</a><br><a href="https://ubuntu.com/security/notices/USN-5355-1">https://ubuntu.com/security/notices/USN-5355-1</a><br><a href="https://ubuntu.com/security/notices/USN-5355-2">https://ubuntu.com/security/notices/USN-5355-2</a><br><a href="https://ubuntu.com/security/notices/USN-5359-1">https://ubuntu.com/security/notices/USN-5359-1</a><br><a href="https://ubuntu.com/security/notices/USN-5359-2">https://ubuntu.com/security/notices/USN-5359-2</a><br><a href="https://www.debian.org/security/2022/dsa-5111">https://www.debian.org/security/2022/dsa-5111</a><br><a href="https://www.openwall.com/lists/oss-security/2022/03/24/1">https://www.openwall.com/lists/oss-security/2022/03/24/1</a><br><a href="https://www.openwall.com/lists/oss-security/2022/03/28/1">https://www.openwall.com/lists/oss-security/2022/03/28/1</a><br><a href="https://www.openwall.com/lists/oss-security/2022/03/28/3">https://www.openwall.com/lists/oss-security/2022/03/28/3</a><br></details> |
|
||||
|
||||
|
||||
#### Container: tccr.io/truecharts/dashdot:v3.5.2@sha256:f396205662cb44b55eb52ec3e3a1b8bcfdaf5ca5b58c1be5f65b565fde36006a (alpine 3.16.0)
|
||||
|
||||
|
||||
**alpine**
|
||||
|
||||
|
||||
| No Vulnerabilities found |
|
||||
|:---------------------------------|
|
||||
|
||||
|
||||
|
||||
**node-pkg**
|
||||
|
||||
|
||||
| No Vulnerabilities found |
|
||||
|:---------------------------------|
|
||||
@@ -1 +0,0 @@
|
||||
{{ include "tc.common.loader.all" . }}
|
||||
@@ -1,47 +0,0 @@
|
||||
image:
|
||||
repository: tccr.io/truecharts/dashdot
|
||||
tag: v3.5.2@sha256:f396205662cb44b55eb52ec3e3a1b8bcfdaf5ca5b58c1be5f65b565fde36006a
|
||||
pullPolicy: IfNotPresent
|
||||
|
||||
securityContext:
|
||||
runAsNonRoot: false
|
||||
readOnlyRootFilesystem: false
|
||||
privileged: true
|
||||
allowPrivilegeEscalation: true
|
||||
capabilities:
|
||||
add:
|
||||
- SYS_ADMIN
|
||||
- SYS_RAWIO
|
||||
|
||||
podSecurityContext:
|
||||
runAsUser: 0
|
||||
runAsGroup: 0
|
||||
|
||||
env:
|
||||
DASHDOT_PORT: "{{ .Values.service.main.ports.main.port}}"
|
||||
|
||||
service:
|
||||
main:
|
||||
ports:
|
||||
main:
|
||||
port: 10044
|
||||
|
||||
persistence:
|
||||
os:
|
||||
enabled: true
|
||||
type: hostPath
|
||||
hostPath: "/etc/os-release"
|
||||
mountPath: "/etc/os-release"
|
||||
readOnly: true
|
||||
net:
|
||||
enabled: true
|
||||
type: hostPath
|
||||
hostPath: "/proc/1/ns/net"
|
||||
mountPath: "/mnt/proc/1/ns/net"
|
||||
readOnly: true
|
||||
mem:
|
||||
enabled: true
|
||||
type: hostPath
|
||||
hostPath: "/dev/mem"
|
||||
mountPath: "/dev/mem"
|
||||
readOnly: true
|
||||
Reference in New Issue
Block a user