fix(docker-compose): remove /mnt and /root (#4115)
Signed-off-by: Stavros Kois <47820033+stavros-k@users.noreply.github.com>
This commit is contained in:
@@ -21,7 +21,7 @@ sources:
|
|||||||
- https://github.com/truecharts/charts/tree/master/charts/stable/docker-compose
|
- https://github.com/truecharts/charts/tree/master/charts/stable/docker-compose
|
||||||
- https://hub.docker.com/_/docker
|
- https://hub.docker.com/_/docker
|
||||||
type: application
|
type: application
|
||||||
version: 2.0.52
|
version: 2.1.0
|
||||||
annotations:
|
annotations:
|
||||||
truecharts.org/catagories: |
|
truecharts.org/catagories: |
|
||||||
- docker
|
- docker
|
||||||
|
|||||||
@@ -11,17 +11,18 @@ questions:
|
|||||||
# Include{controllerExpert}
|
# Include{controllerExpert}
|
||||||
# Include{controllerExpertExtraArgs}
|
# Include{controllerExpertExtraArgs}
|
||||||
- variable: env
|
- variable: env
|
||||||
group: "Container Configuration"
|
group: Container Configuration
|
||||||
label: "Image Environment"
|
label: Image Environment
|
||||||
schema:
|
schema:
|
||||||
additional_attrs: true
|
additional_attrs: true
|
||||||
type: dict
|
type: dict
|
||||||
attrs:
|
attrs:
|
||||||
- variable: COMPOSE_FILE
|
- variable: COMPOSE_FILE
|
||||||
label: "COMPOSE_FILE"
|
label: Docker Compose File
|
||||||
description: "Path on the host of the composefile you want to load. Supported are paths inside /mnt, /root and /cluster"
|
description: Path on the host of the compose file you want to load. You MUST mount the storage yourself
|
||||||
schema:
|
schema:
|
||||||
type: string
|
type: string
|
||||||
|
default: ""
|
||||||
# Include{containerConfig}
|
# Include{containerConfig}
|
||||||
# Include{serviceExpertRoot}
|
# Include{serviceExpertRoot}
|
||||||
default: true
|
default: true
|
||||||
@@ -32,42 +33,42 @@ questions:
|
|||||||
# Include{security}
|
# Include{security}
|
||||||
# Include{securityContextAdvancedRoot}
|
# Include{securityContextAdvancedRoot}
|
||||||
- variable: privileged
|
- variable: privileged
|
||||||
label: "Privileged mode"
|
label: Privileged mode
|
||||||
schema:
|
schema:
|
||||||
type: boolean
|
type: boolean
|
||||||
default: true
|
default: true
|
||||||
- variable: readOnlyRootFilesystem
|
- variable: readOnlyRootFilesystem
|
||||||
label: "ReadOnly Root Filesystem"
|
label: ReadOnly Root Filesystem
|
||||||
schema:
|
schema:
|
||||||
type: boolean
|
type: boolean
|
||||||
default: false
|
default: false
|
||||||
- variable: allowPrivilegeEscalation
|
- variable: allowPrivilegeEscalation
|
||||||
label: "Allow Privilege Escalation"
|
label: Allow Privilege Escalation
|
||||||
schema:
|
schema:
|
||||||
type: boolean
|
type: boolean
|
||||||
default: true
|
default: true
|
||||||
- variable: runAsNonRoot
|
- variable: runAsNonRoot
|
||||||
label: "runAsNonRoot"
|
label: runAsNonRoot
|
||||||
schema:
|
schema:
|
||||||
type: boolean
|
type: boolean
|
||||||
default: false
|
default: false
|
||||||
# Include{securityContextAdvanced}
|
# Include{securityContextAdvanced}
|
||||||
# Include{podSecurityContextRoot}
|
# Include{podSecurityContextRoot}
|
||||||
- variable: runAsUser
|
- variable: runAsUser
|
||||||
label: "runAsUser"
|
label: runAsUser
|
||||||
description: "The UserID of the user running the application"
|
description: The UserID of the user running the application
|
||||||
schema:
|
schema:
|
||||||
type: int
|
type: int
|
||||||
default: 0
|
default: 0
|
||||||
- variable: runAsGroup
|
- variable: runAsGroup
|
||||||
label: "runAsGroup"
|
label: runAsGroup
|
||||||
description: "The groupID this App of the user running the application"
|
description: The groupID this App of the user running the application
|
||||||
schema:
|
schema:
|
||||||
type: int
|
type: int
|
||||||
default: 0
|
default: 0
|
||||||
- variable: fsGroup
|
- variable: fsGroup
|
||||||
label: "fsGroup"
|
label: fsGroup
|
||||||
description: "The group that should own ALL storage."
|
description: The group that should own ALL storage.
|
||||||
schema:
|
schema:
|
||||||
type: int
|
type: int
|
||||||
default: 0
|
default: 0
|
||||||
|
|||||||
@@ -46,26 +46,26 @@ service:
|
|||||||
type: HTTPS
|
type: HTTPS
|
||||||
|
|
||||||
env:
|
env:
|
||||||
DOCKER_TLS_CERTDIR: "/certs"
|
DOCKER_TLS_CERTDIR: /certs
|
||||||
COMPOSE_FILE: ""
|
COMPOSE_FILE: ""
|
||||||
|
|
||||||
lifecycle:
|
lifecycle:
|
||||||
postStart:
|
postStart:
|
||||||
exec:
|
exec:
|
||||||
command:
|
command:
|
||||||
- "/bin/bash"
|
- /bin/bash
|
||||||
- "-c"
|
- -c
|
||||||
- |
|
- |
|
||||||
if [ "${COMPOSE_FILE}" ]; then
|
if [ "${COMPOSE_FILE}" ]; then
|
||||||
counter=0;
|
counter=0;
|
||||||
while ! docker info > /dev/null 2>&1 && [[ ${counter} -lt 10 ]]; do
|
while ! docker info > /dev/null 2>&1 && [[ ${counter} -lt 10 ]]; do
|
||||||
echo "docker not running yet. Waiting..." >> /proc/1/fd/1;
|
echo "docker not running yet. Waiting..." >> /proc/1/fd/1;
|
||||||
sleep 5;
|
sleep 5;
|
||||||
counter=$((counter+1));
|
counter=$((counter+1));
|
||||||
done
|
done
|
||||||
docker-compose -f "${COMPOSE_FILE}" up -d && echo "Loading COMPOSE_FILE at location ${COMPOSE_FILE}" >> /proc/1/fd/1;
|
docker-compose -f "${COMPOSE_FILE}" up -d && echo "Loading COMPOSE_FILE at location ${COMPOSE_FILE}" >> /proc/1/fd/1;
|
||||||
else
|
else
|
||||||
echo "COMPOSE_FILE not set, not auto-loading compose-file" >> /proc/1/fd/1;
|
echo "COMPOSE_FILE not set, not auto-loading compose-file" >> /proc/1/fd/1;
|
||||||
fi
|
fi
|
||||||
probes:
|
probes:
|
||||||
liveness:
|
liveness:
|
||||||
@@ -81,24 +81,17 @@ probes:
|
|||||||
persistence:
|
persistence:
|
||||||
varrun:
|
varrun:
|
||||||
enabled: false
|
enabled: false
|
||||||
root:
|
|
||||||
enabled: true
|
|
||||||
type: hostPath
|
|
||||||
hostPath: /root
|
|
||||||
mountPath: /root
|
|
||||||
hostPathType: ""
|
|
||||||
readOnly: false
|
|
||||||
docker-certs-ca:
|
docker-certs-ca:
|
||||||
enabled: true
|
enabled: true
|
||||||
mountPath: "/config"
|
mountPath: /config
|
||||||
|
|
||||||
volumeClaimTemplates:
|
volumeClaimTemplates:
|
||||||
docker-certs-client:
|
docker-certs-client:
|
||||||
enabled: true
|
enabled: true
|
||||||
mountPath: "/certs/client"
|
mountPath: /certs/client
|
||||||
docker:
|
docker:
|
||||||
enabled: true
|
enabled: true
|
||||||
mountPath: "/var/lib/docker"
|
mountPath: /var/lib/docker
|
||||||
|
|
||||||
portal:
|
portal:
|
||||||
enabled: false
|
enabled: false
|
||||||
|
|||||||
Reference in New Issue
Block a user