fix(crafty-4) fix the webGUI access (#4210)

* fix(crafty-4) fix the webGUI access

* remove link path

* add default credentials

* rootless

* set readOnlyRootFilesystem false

* change perms to 1000

* try 568

* rofs

* run 100

* update chartyaml

* probe

Co-authored-by: Stavros Kois <47820033+stavros-k@users.noreply.github.com>
This commit is contained in:
Xstar97
2022-10-28 13:35:34 +03:00
committed by GitHub
co-authored by Stavros Kois
parent e644bdf5c8
commit ee69529d02
4 changed files with 167 additions and 115 deletions
+8 -8
View File
@@ -1,8 +1,3 @@
annotations:
truecharts.org/SCALE-support: "true"
truecharts.org/catagories: |
- GameServers
- Other
apiVersion: v2 apiVersion: v2
appVersion: "latest" appVersion: "latest"
dependencies: dependencies:
@@ -10,7 +5,7 @@ dependencies:
repository: https://library-charts.truecharts.org repository: https://library-charts.truecharts.org
version: 10.7.7 version: 10.7.7
deprecated: false deprecated: false
description: "Crafty 4 is the next iteration of our Minecraft Server Wrapper / Controller / Launcher. Boasting a clean new look, rebuilt from the ground up. Crafty 4 brings a whole host of new features such as Bedrock support. With SteamCMD support on the way!" description: Crafty 4 is the next iteration of our Minecraft Server Wrapper / Controller / Launcher.
home: https://truecharts.org/docs/charts/incubator/crafty-4 home: https://truecharts.org/docs/charts/incubator/crafty-4
icon: https://truecharts.org/img/hotlink-ok/chart-icons/crafty-4.png icon: https://truecharts.org/img/hotlink-ok/chart-icons/crafty-4.png
keywords: keywords:
@@ -26,6 +21,11 @@ name: crafty-4
sources: sources:
- https://github.com/truecharts/charts/tree/master/charts/incubator/crafty-4 - https://github.com/truecharts/charts/tree/master/charts/incubator/crafty-4
- https://craftycontrol.com/ - https://craftycontrol.com/
- https://registry.hub.docker.com/r/registry.gitlab.com/crafty-controller/crafty-4 - https://gitlab.com/crafty-controller/crafty-4
type: application type: application
version: 0.0.39 annotations:
truecharts.org/SCALE-support: "true"
truecharts.org/catagories: |
- GameServers
- minecraft
version: 0.0.40
@@ -0,0 +1,4 @@
# Default Credentials
- Username: `admin`
- Password: `crafty`
+92 -63
View File
@@ -15,8 +15,8 @@ questions:
# Include{containerConfig} # Include{containerConfig}
# Include{serviceRoot} # Include{serviceRoot}
- variable: main - variable: main
label: "Main Service" label: Main Service
description: "The Primary service on which the healthcheck runs, often the webUI" description: The Primary service on which the healthcheck runs, often the webUI
schema: schema:
additional_attrs: true additional_attrs: true
type: dict type: dict
@@ -24,109 +24,138 @@ questions:
# Include{serviceSelectorLoadBalancer} # Include{serviceSelectorLoadBalancer}
# Include{serviceSelectorExtras} # Include{serviceSelectorExtras}
- variable: main - variable: main
label: "Main Service Port Configuration" label: Main Service Port Configuration
schema: schema:
additional_attrs: true additional_attrs: true
type: dict type: dict
attrs: attrs:
- variable: port - variable: port
label: "Port" label: Port
description: "This port exposes the container port on the service" description: This port exposes the container port on the service
schema: schema:
type: int type: int
default: 8443 default: 10586
required: true required: true
# Include{advancedPortHTTP} # Include{advancedPortHTTP}
- variable: targetPort - variable: targetPort
label: "Target Port" label: Target Port
description: "The internal(!) port on the container the Application runs on" description: The internal(!) port on the container the Application runs on
schema:
type: int
default: 8000
- variable: sub
label: Sub Service
description: The Sub service on which the healthcheck runs, often the webUI
schema:
additional_attrs: true
type: dict
attrs:
# Include{serviceSelectorLoadBalancer}
# Include{serviceSelectorExtras}
- variable: sub
label: Sub Service Port Configuration
schema:
additional_attrs: true
type: dict
attrs:
- variable: port
label: Port
description: This port exposes the container port on the service
schema: schema:
type: int type: int
default: 8443 default: 8443
- variable: minecraftports required: true
label: 'minecraftports service' # Include{advancedPortHTTPS}
description: "Container Port 25500-25600 yes, 100 ports for 100 possible Servers" - variable: targetPort
label: Target Port
description: The internal(!) port on the container the Application runs on
schema:
type: int
default: 8443
- variable: minecraft
label: Minecraft Service
description: Container Port 25500
schema: schema:
additional_attrs: true additional_attrs: true
type: dict type: dict
attrs: attrs:
# Include{serviceSelectorLoadBalancer} # Include{serviceSelectorLoadBalancer}
# Include{serviceSelectorExtras} # Include{serviceSelectorExtras}
- variable: minecraftports - variable: minecraft
label: "minecraftports Service Port Configuration" label: Minecraft Service Port Configuration
schema: schema:
additional_attrs: true additional_attrs: true
type: dict type: dict
attrs: attrs:
- variable: port - variable: port
label: "Port" label: Port
description: "This port exposes the container port on the service" description: This port exposes the container port on the service
schema: schema:
type: int type: int
default: 25500 default: 25500
required: true required: true
# Include{advancedPortTCP} # Include{advancedPortTCP}
- variable: targetPort - variable: targetPort
label: "Target Port" label: Target Port
description: "The internal(!) port on the container the Application runs on" description: The internal(!) port on the container the Application runs on
schema: schema:
type: int type: int
default: 25500 default: 25500
- variable: portfordynmap - variable: dynmap
label: 'portfordynmap service' label: DynMap service
description: "Dynmap Port" description: DynMap Port
schema: schema:
additional_attrs: true additional_attrs: true
type: dict type: dict
attrs: attrs:
# Include{serviceSelectorLoadBalancer} # Include{serviceSelectorLoadBalancer}
# Include{serviceSelectorExtras} # Include{serviceSelectorExtras}
- variable: portfordynmap - variable: dynmap
label: "portfordynmap Service Port Configuration" label: DynMap Service Port Configuration
schema: schema:
additional_attrs: true additional_attrs: true
type: dict type: dict
attrs: attrs:
- variable: port - variable: port
label: "Port" label: Port
description: "This port exposes the container port on the service" description: This port exposes the container port on the service
schema: schema:
type: int type: int
default: 8123 default: 8123
required: true required: true
# Include{advancedPortTCP} # Include{advancedPortTCP}
- variable: targetPort - variable: targetPort
label: "Target Port" label: Target Port
description: "The internal(!) port on the container the Application runs on" description: The internal(!) port on the container the Application runs on
schema: schema:
type: int type: int
default: 8123 default: 8123
- variable: portforbedrock - variable: bedrock
label: 'portforbedrock service' label: Bedrock Service
description: "Bedrock server port" description: Bedrock Server Port
schema: schema:
additional_attrs: true additional_attrs: true
type: dict type: dict
attrs: attrs:
# Include{serviceSelectorLoadBalancer} # Include{serviceSelectorLoadBalancer}
# Include{serviceSelectorExtras} # Include{serviceSelectorExtras}
- variable: portforbedrock - variable: bedrock
label: "portforbedrock Service Port Configuration" label: Bedrock Service Port Configuration
schema: schema:
additional_attrs: true additional_attrs: true
type: dict type: dict
attrs: attrs:
- variable: port - variable: port
label: "Port" label: Port
description: "This port exposes the container port on the service" description: This port exposes the container port on the service
schema: schema:
type: int type: int
default: 19132 default: 19132
required: true required: true
# Include{advancedPortUDP} # Include{advancedPortUDP}
- variable: targetPort - variable: targetPort
label: "Target Port" label: Target Port
description: "The internal(!) port on the container the Application runs on" description: The internal(!) port on the container the Application runs on
schema: schema:
type: int type: int
default: 19132 default: 19132
@@ -135,18 +164,18 @@ questions:
# Include{serviceExpert} # Include{serviceExpert}
# Include{serviceList} # Include{serviceList}
# Include{persistenceRoot} # Include{persistenceRoot}
- variable: serverfiles - variable: config
label: "serverfiles Storage" label: Config Storage
description: "Path to the minecraft server folders" description: Path to the persistent Crafty files
schema: schema:
additional_attrs: true additional_attrs: true
type: dict type: dict
attrs: attrs:
# Include{persistenceBasic} # Include{persistenceBasic}
# Include{persistenceAdvanced} # Include{persistenceAdvanced}
- variable: backupfiles - variable: serverfiles
label: "backupfiles Storage" label: Server Files Storage
description: "Server Backups" description: Path to the minecraft server folders
schema: schema:
additional_attrs: true additional_attrs: true
type: dict type: dict
@@ -154,26 +183,26 @@ questions:
# Include{persistenceBasic} # Include{persistenceBasic}
# Include{persistenceAdvanced} # Include{persistenceAdvanced}
- variable: serverlogs - variable: serverlogs
label: "serverlogs Storage" label: Server Logs Storage
description: "Logs" description: Logs
schema: schema:
additional_attrs: true additional_attrs: true
type: dict type: dict
attrs: attrs:
# Include{persistenceBasic} # Include{persistenceBasic}
# Include{persistenceAdvanced} # Include{persistenceAdvanced}
- variable: config - variable: import
label: "config Storage" label: Import Folder Storage
description: "Path to the persistent Crafty files" description: Import existing Mincecraft Servers
schema: schema:
additional_attrs: true additional_attrs: true
type: dict type: dict
attrs: attrs:
# Include{persistenceBasic} # Include{persistenceBasic}
# Include{persistenceAdvanced} # Include{persistenceAdvanced}
- variable: importfolder - variable: backup
label: "importfolder Storage" label: Backup Storage
description: "Import existing Mincecraft Servers" description: Server Backups
schema: schema:
additional_attrs: true additional_attrs: true
type: dict type: dict
@@ -183,7 +212,7 @@ questions:
# Include{persistenceList} # Include{persistenceList}
# Include{ingressRoot} # Include{ingressRoot}
- variable: main - variable: main
label: "Main Ingress" label: Main Ingress
schema: schema:
additional_attrs: true additional_attrs: true
type: dict type: dict
@@ -196,42 +225,42 @@ questions:
# Include{security} # Include{security}
# Include{securityContextAdvancedRoot} # Include{securityContextAdvancedRoot}
- variable: privileged - variable: privileged
label: "Privileged mode" label: Privileged mode
schema: schema:
type: boolean type: boolean
default: false default: false
- variable: readOnlyRootFilesystem - variable: readOnlyRootFilesystem
label: "ReadOnly Root Filesystem" label: ReadOnly Root Filesystem
schema: schema:
type: boolean type: boolean
default: false default: false
- variable: allowPrivilegeEscalation - variable: allowPrivilegeEscalation
label: "Allow Privilege Escalation" label: Allow Privilege Escalation
schema: schema:
type: boolean type: boolean
default: false default: false
- variable: runAsNonRoot - variable: runAsNonRoot
label: "runAsNonRoot" label: runAsNonRoot
schema: schema:
type: boolean type: boolean
default: false default: true
# Include{securityContextAdvanced} # Include{securityContextAdvanced}
# Include{podSecurityContextRoot} # Include{podSecurityContextRoot}
- variable: runAsUser - variable: runAsUser
label: "runAsUser" label: runAsUser
description: "The UserID of the user running the application" description: The UserID of the user running the application
schema: schema:
type: int type: int
default: 0 default: 1000
- variable: runAsGroup - variable: runAsGroup
label: "runAsGroup" label: runAsGroup
description: The groupID this App of the user running the application" description: The groupID this App of the user running the application
schema: schema:
type: int type: int
default: 0 default: 1000
- variable: fsGroup - variable: fsGroup
label: "fsGroup" label: fsGroup
description: "The group that should own ALL storage." description: The group that should own ALL storage.
schema: schema:
type: int type: int
default: 568 default: 568
+62 -43
View File
@@ -1,61 +1,80 @@
env: {}
image: image:
pullPolicy: IfNotPresent pullPolicy: IfNotPresent
repository: tccr.io/truecharts/crafty-4 repository: tccr.io/truecharts/crafty-4
tag: latest@sha256:ab9217bf6fc3a8e2a660c65ba72d39d904497cb8770be07bb519a581bb665932 tag: 4.0.16@sha256:6325ffbb4ee84693dc571f714a43ca0620e70d7f718771360599bd0bfc99b650
persistence:
backupfiles: podSecurityContext:
runAsGroup: 1000
runAsUser: 1000
securityContext:
readOnlyRootFilesystem: false
probes:
liveness:
type: HTTP
path: /
readiness:
type: HTTP
path: /
startup:
type: HTTP
path: /
service:
main:
ports:
main:
port: 10586
protocol: HTTP
targetPort: 8000
sub:
enabled: true enabled: true
mountPath: /crafty/backups ports:
sub:
enabled: true
port: 8443
protocol: HTTPS
targetPort: 8443
bedrock:
enabled: true
ports:
bedrock:
enabled: true
port: 19132
protocol: UDP
targetPort: 19132
dynmap:
enabled: true
ports:
dynmap:
enabled: true
port: 8123
targetPort: 8123
minecraft:
enabled: true
ports:
minecraft:
enabled: true
port: 25500
targetPort: 25500
persistence:
config: config:
enabled: true enabled: true
mountPath: /crafty/app/config mountPath: /crafty/app/config
importfolder:
enabled: true
mountPath: /crafty/import
serverfiles: serverfiles:
enabled: true enabled: true
mountPath: /crafty/servers mountPath: /crafty/servers
serverlogs: serverlogs:
enabled: true enabled: true
mountPath: /crafty/logs mountPath: /crafty/logs
podSecurityContext: import:
runAsGroup: 0
runAsUser: 0
securityContext:
readOnlyRootFilesystem: false
runAsNonRoot: false
service:
main:
ports:
main:
port: 8443
protocol: HTTP
targetPort: 8443
minecraftports:
enabled: true enabled: true
ports: mountPath: /crafty/import
minecraftports: backup:
enabled: true enabled: true
port: 25500 mountPath: /crafty/backups
protocol: TCP
targetPort: 25500
portforbedrock:
enabled: true
ports:
portforbedrock:
enabled: true
port: 19132
protocol: UDP
targetPort: 19132
portfordynmap:
enabled: true
ports:
portfordynmap:
enabled: true
port: 8123
protocol: TCP
targetPort: 8123
portal: portal:
enabled: true enabled: true