fix(crafty-4) fix the webGUI access (#4210)
* fix(crafty-4) fix the webGUI access * remove link path * add default credentials * rootless * set readOnlyRootFilesystem false * change perms to 1000 * try 568 * rofs * run 100 * update chartyaml * probe Co-authored-by: Stavros Kois <47820033+stavros-k@users.noreply.github.com>
This commit is contained in:
@@ -1,8 +1,3 @@
|
|||||||
annotations:
|
|
||||||
truecharts.org/SCALE-support: "true"
|
|
||||||
truecharts.org/catagories: |
|
|
||||||
- GameServers
|
|
||||||
- Other
|
|
||||||
apiVersion: v2
|
apiVersion: v2
|
||||||
appVersion: "latest"
|
appVersion: "latest"
|
||||||
dependencies:
|
dependencies:
|
||||||
@@ -10,7 +5,7 @@ dependencies:
|
|||||||
repository: https://library-charts.truecharts.org
|
repository: https://library-charts.truecharts.org
|
||||||
version: 10.7.7
|
version: 10.7.7
|
||||||
deprecated: false
|
deprecated: false
|
||||||
description: "Crafty 4 is the next iteration of our Minecraft Server Wrapper / Controller / Launcher. Boasting a clean new look, rebuilt from the ground up. Crafty 4 brings a whole host of new features such as Bedrock support. With SteamCMD support on the way!"
|
description: Crafty 4 is the next iteration of our Minecraft Server Wrapper / Controller / Launcher.
|
||||||
home: https://truecharts.org/docs/charts/incubator/crafty-4
|
home: https://truecharts.org/docs/charts/incubator/crafty-4
|
||||||
icon: https://truecharts.org/img/hotlink-ok/chart-icons/crafty-4.png
|
icon: https://truecharts.org/img/hotlink-ok/chart-icons/crafty-4.png
|
||||||
keywords:
|
keywords:
|
||||||
@@ -26,6 +21,11 @@ name: crafty-4
|
|||||||
sources:
|
sources:
|
||||||
- https://github.com/truecharts/charts/tree/master/charts/incubator/crafty-4
|
- https://github.com/truecharts/charts/tree/master/charts/incubator/crafty-4
|
||||||
- https://craftycontrol.com/
|
- https://craftycontrol.com/
|
||||||
- https://registry.hub.docker.com/r/registry.gitlab.com/crafty-controller/crafty-4
|
- https://gitlab.com/crafty-controller/crafty-4
|
||||||
type: application
|
type: application
|
||||||
version: 0.0.39
|
annotations:
|
||||||
|
truecharts.org/SCALE-support: "true"
|
||||||
|
truecharts.org/catagories: |
|
||||||
|
- GameServers
|
||||||
|
- minecraft
|
||||||
|
version: 0.0.40
|
||||||
|
|||||||
@@ -0,0 +1,4 @@
|
|||||||
|
# Default Credentials
|
||||||
|
|
||||||
|
- Username: `admin`
|
||||||
|
- Password: `crafty`
|
||||||
@@ -15,8 +15,8 @@ questions:
|
|||||||
# Include{containerConfig}
|
# Include{containerConfig}
|
||||||
# Include{serviceRoot}
|
# Include{serviceRoot}
|
||||||
- variable: main
|
- variable: main
|
||||||
label: "Main Service"
|
label: Main Service
|
||||||
description: "The Primary service on which the healthcheck runs, often the webUI"
|
description: The Primary service on which the healthcheck runs, often the webUI
|
||||||
schema:
|
schema:
|
||||||
additional_attrs: true
|
additional_attrs: true
|
||||||
type: dict
|
type: dict
|
||||||
@@ -24,109 +24,138 @@ questions:
|
|||||||
# Include{serviceSelectorLoadBalancer}
|
# Include{serviceSelectorLoadBalancer}
|
||||||
# Include{serviceSelectorExtras}
|
# Include{serviceSelectorExtras}
|
||||||
- variable: main
|
- variable: main
|
||||||
label: "Main Service Port Configuration"
|
label: Main Service Port Configuration
|
||||||
schema:
|
schema:
|
||||||
additional_attrs: true
|
additional_attrs: true
|
||||||
type: dict
|
type: dict
|
||||||
attrs:
|
attrs:
|
||||||
- variable: port
|
- variable: port
|
||||||
label: "Port"
|
label: Port
|
||||||
description: "This port exposes the container port on the service"
|
description: This port exposes the container port on the service
|
||||||
schema:
|
schema:
|
||||||
type: int
|
type: int
|
||||||
default: 8443
|
default: 10586
|
||||||
required: true
|
required: true
|
||||||
# Include{advancedPortHTTP}
|
# Include{advancedPortHTTP}
|
||||||
- variable: targetPort
|
- variable: targetPort
|
||||||
label: "Target Port"
|
label: Target Port
|
||||||
description: "The internal(!) port on the container the Application runs on"
|
description: The internal(!) port on the container the Application runs on
|
||||||
|
schema:
|
||||||
|
type: int
|
||||||
|
default: 8000
|
||||||
|
- variable: sub
|
||||||
|
label: Sub Service
|
||||||
|
description: The Sub service on which the healthcheck runs, often the webUI
|
||||||
|
schema:
|
||||||
|
additional_attrs: true
|
||||||
|
type: dict
|
||||||
|
attrs:
|
||||||
|
# Include{serviceSelectorLoadBalancer}
|
||||||
|
# Include{serviceSelectorExtras}
|
||||||
|
- variable: sub
|
||||||
|
label: Sub Service Port Configuration
|
||||||
|
schema:
|
||||||
|
additional_attrs: true
|
||||||
|
type: dict
|
||||||
|
attrs:
|
||||||
|
- variable: port
|
||||||
|
label: Port
|
||||||
|
description: This port exposes the container port on the service
|
||||||
schema:
|
schema:
|
||||||
type: int
|
type: int
|
||||||
default: 8443
|
default: 8443
|
||||||
- variable: minecraftports
|
required: true
|
||||||
label: 'minecraftports service'
|
# Include{advancedPortHTTPS}
|
||||||
description: "Container Port 25500-25600 yes, 100 ports for 100 possible Servers"
|
- variable: targetPort
|
||||||
|
label: Target Port
|
||||||
|
description: The internal(!) port on the container the Application runs on
|
||||||
|
schema:
|
||||||
|
type: int
|
||||||
|
default: 8443
|
||||||
|
- variable: minecraft
|
||||||
|
label: Minecraft Service
|
||||||
|
description: Container Port 25500
|
||||||
schema:
|
schema:
|
||||||
additional_attrs: true
|
additional_attrs: true
|
||||||
type: dict
|
type: dict
|
||||||
attrs:
|
attrs:
|
||||||
# Include{serviceSelectorLoadBalancer}
|
# Include{serviceSelectorLoadBalancer}
|
||||||
# Include{serviceSelectorExtras}
|
# Include{serviceSelectorExtras}
|
||||||
- variable: minecraftports
|
- variable: minecraft
|
||||||
label: "minecraftports Service Port Configuration"
|
label: Minecraft Service Port Configuration
|
||||||
schema:
|
schema:
|
||||||
additional_attrs: true
|
additional_attrs: true
|
||||||
type: dict
|
type: dict
|
||||||
attrs:
|
attrs:
|
||||||
- variable: port
|
- variable: port
|
||||||
label: "Port"
|
label: Port
|
||||||
description: "This port exposes the container port on the service"
|
description: This port exposes the container port on the service
|
||||||
schema:
|
schema:
|
||||||
type: int
|
type: int
|
||||||
default: 25500
|
default: 25500
|
||||||
required: true
|
required: true
|
||||||
# Include{advancedPortTCP}
|
# Include{advancedPortTCP}
|
||||||
- variable: targetPort
|
- variable: targetPort
|
||||||
label: "Target Port"
|
label: Target Port
|
||||||
description: "The internal(!) port on the container the Application runs on"
|
description: The internal(!) port on the container the Application runs on
|
||||||
schema:
|
schema:
|
||||||
type: int
|
type: int
|
||||||
default: 25500
|
default: 25500
|
||||||
- variable: portfordynmap
|
- variable: dynmap
|
||||||
label: 'portfordynmap service'
|
label: DynMap service
|
||||||
description: "Dynmap Port"
|
description: DynMap Port
|
||||||
schema:
|
schema:
|
||||||
additional_attrs: true
|
additional_attrs: true
|
||||||
type: dict
|
type: dict
|
||||||
attrs:
|
attrs:
|
||||||
# Include{serviceSelectorLoadBalancer}
|
# Include{serviceSelectorLoadBalancer}
|
||||||
# Include{serviceSelectorExtras}
|
# Include{serviceSelectorExtras}
|
||||||
- variable: portfordynmap
|
- variable: dynmap
|
||||||
label: "portfordynmap Service Port Configuration"
|
label: DynMap Service Port Configuration
|
||||||
schema:
|
schema:
|
||||||
additional_attrs: true
|
additional_attrs: true
|
||||||
type: dict
|
type: dict
|
||||||
attrs:
|
attrs:
|
||||||
- variable: port
|
- variable: port
|
||||||
label: "Port"
|
label: Port
|
||||||
description: "This port exposes the container port on the service"
|
description: This port exposes the container port on the service
|
||||||
schema:
|
schema:
|
||||||
type: int
|
type: int
|
||||||
default: 8123
|
default: 8123
|
||||||
required: true
|
required: true
|
||||||
# Include{advancedPortTCP}
|
# Include{advancedPortTCP}
|
||||||
- variable: targetPort
|
- variable: targetPort
|
||||||
label: "Target Port"
|
label: Target Port
|
||||||
description: "The internal(!) port on the container the Application runs on"
|
description: The internal(!) port on the container the Application runs on
|
||||||
schema:
|
schema:
|
||||||
type: int
|
type: int
|
||||||
default: 8123
|
default: 8123
|
||||||
- variable: portforbedrock
|
- variable: bedrock
|
||||||
label: 'portforbedrock service'
|
label: Bedrock Service
|
||||||
description: "Bedrock server port"
|
description: Bedrock Server Port
|
||||||
schema:
|
schema:
|
||||||
additional_attrs: true
|
additional_attrs: true
|
||||||
type: dict
|
type: dict
|
||||||
attrs:
|
attrs:
|
||||||
# Include{serviceSelectorLoadBalancer}
|
# Include{serviceSelectorLoadBalancer}
|
||||||
# Include{serviceSelectorExtras}
|
# Include{serviceSelectorExtras}
|
||||||
- variable: portforbedrock
|
- variable: bedrock
|
||||||
label: "portforbedrock Service Port Configuration"
|
label: Bedrock Service Port Configuration
|
||||||
schema:
|
schema:
|
||||||
additional_attrs: true
|
additional_attrs: true
|
||||||
type: dict
|
type: dict
|
||||||
attrs:
|
attrs:
|
||||||
- variable: port
|
- variable: port
|
||||||
label: "Port"
|
label: Port
|
||||||
description: "This port exposes the container port on the service"
|
description: This port exposes the container port on the service
|
||||||
schema:
|
schema:
|
||||||
type: int
|
type: int
|
||||||
default: 19132
|
default: 19132
|
||||||
required: true
|
required: true
|
||||||
# Include{advancedPortUDP}
|
# Include{advancedPortUDP}
|
||||||
- variable: targetPort
|
- variable: targetPort
|
||||||
label: "Target Port"
|
label: Target Port
|
||||||
description: "The internal(!) port on the container the Application runs on"
|
description: The internal(!) port on the container the Application runs on
|
||||||
schema:
|
schema:
|
||||||
type: int
|
type: int
|
||||||
default: 19132
|
default: 19132
|
||||||
@@ -135,18 +164,18 @@ questions:
|
|||||||
# Include{serviceExpert}
|
# Include{serviceExpert}
|
||||||
# Include{serviceList}
|
# Include{serviceList}
|
||||||
# Include{persistenceRoot}
|
# Include{persistenceRoot}
|
||||||
- variable: serverfiles
|
- variable: config
|
||||||
label: "serverfiles Storage"
|
label: Config Storage
|
||||||
description: "Path to the minecraft server folders"
|
description: Path to the persistent Crafty files
|
||||||
schema:
|
schema:
|
||||||
additional_attrs: true
|
additional_attrs: true
|
||||||
type: dict
|
type: dict
|
||||||
attrs:
|
attrs:
|
||||||
# Include{persistenceBasic}
|
# Include{persistenceBasic}
|
||||||
# Include{persistenceAdvanced}
|
# Include{persistenceAdvanced}
|
||||||
- variable: backupfiles
|
- variable: serverfiles
|
||||||
label: "backupfiles Storage"
|
label: Server Files Storage
|
||||||
description: "Server Backups"
|
description: Path to the minecraft server folders
|
||||||
schema:
|
schema:
|
||||||
additional_attrs: true
|
additional_attrs: true
|
||||||
type: dict
|
type: dict
|
||||||
@@ -154,26 +183,26 @@ questions:
|
|||||||
# Include{persistenceBasic}
|
# Include{persistenceBasic}
|
||||||
# Include{persistenceAdvanced}
|
# Include{persistenceAdvanced}
|
||||||
- variable: serverlogs
|
- variable: serverlogs
|
||||||
label: "serverlogs Storage"
|
label: Server Logs Storage
|
||||||
description: "Logs"
|
description: Logs
|
||||||
schema:
|
schema:
|
||||||
additional_attrs: true
|
additional_attrs: true
|
||||||
type: dict
|
type: dict
|
||||||
attrs:
|
attrs:
|
||||||
# Include{persistenceBasic}
|
# Include{persistenceBasic}
|
||||||
# Include{persistenceAdvanced}
|
# Include{persistenceAdvanced}
|
||||||
- variable: config
|
- variable: import
|
||||||
label: "config Storage"
|
label: Import Folder Storage
|
||||||
description: "Path to the persistent Crafty files"
|
description: Import existing Mincecraft Servers
|
||||||
schema:
|
schema:
|
||||||
additional_attrs: true
|
additional_attrs: true
|
||||||
type: dict
|
type: dict
|
||||||
attrs:
|
attrs:
|
||||||
# Include{persistenceBasic}
|
# Include{persistenceBasic}
|
||||||
# Include{persistenceAdvanced}
|
# Include{persistenceAdvanced}
|
||||||
- variable: importfolder
|
- variable: backup
|
||||||
label: "importfolder Storage"
|
label: Backup Storage
|
||||||
description: "Import existing Mincecraft Servers"
|
description: Server Backups
|
||||||
schema:
|
schema:
|
||||||
additional_attrs: true
|
additional_attrs: true
|
||||||
type: dict
|
type: dict
|
||||||
@@ -183,7 +212,7 @@ questions:
|
|||||||
# Include{persistenceList}
|
# Include{persistenceList}
|
||||||
# Include{ingressRoot}
|
# Include{ingressRoot}
|
||||||
- variable: main
|
- variable: main
|
||||||
label: "Main Ingress"
|
label: Main Ingress
|
||||||
schema:
|
schema:
|
||||||
additional_attrs: true
|
additional_attrs: true
|
||||||
type: dict
|
type: dict
|
||||||
@@ -196,42 +225,42 @@ questions:
|
|||||||
# Include{security}
|
# Include{security}
|
||||||
# Include{securityContextAdvancedRoot}
|
# Include{securityContextAdvancedRoot}
|
||||||
- variable: privileged
|
- variable: privileged
|
||||||
label: "Privileged mode"
|
label: Privileged mode
|
||||||
schema:
|
schema:
|
||||||
type: boolean
|
type: boolean
|
||||||
default: false
|
default: false
|
||||||
- variable: readOnlyRootFilesystem
|
- variable: readOnlyRootFilesystem
|
||||||
label: "ReadOnly Root Filesystem"
|
label: ReadOnly Root Filesystem
|
||||||
schema:
|
schema:
|
||||||
type: boolean
|
type: boolean
|
||||||
default: false
|
default: false
|
||||||
- variable: allowPrivilegeEscalation
|
- variable: allowPrivilegeEscalation
|
||||||
label: "Allow Privilege Escalation"
|
label: Allow Privilege Escalation
|
||||||
schema:
|
schema:
|
||||||
type: boolean
|
type: boolean
|
||||||
default: false
|
default: false
|
||||||
- variable: runAsNonRoot
|
- variable: runAsNonRoot
|
||||||
label: "runAsNonRoot"
|
label: runAsNonRoot
|
||||||
schema:
|
schema:
|
||||||
type: boolean
|
type: boolean
|
||||||
default: false
|
default: true
|
||||||
# Include{securityContextAdvanced}
|
# Include{securityContextAdvanced}
|
||||||
# Include{podSecurityContextRoot}
|
# Include{podSecurityContextRoot}
|
||||||
- variable: runAsUser
|
- variable: runAsUser
|
||||||
label: "runAsUser"
|
label: runAsUser
|
||||||
description: "The UserID of the user running the application"
|
description: The UserID of the user running the application
|
||||||
schema:
|
schema:
|
||||||
type: int
|
type: int
|
||||||
default: 0
|
default: 1000
|
||||||
- variable: runAsGroup
|
- variable: runAsGroup
|
||||||
label: "runAsGroup"
|
label: runAsGroup
|
||||||
description: The groupID this App of the user running the application"
|
description: The groupID this App of the user running the application
|
||||||
schema:
|
schema:
|
||||||
type: int
|
type: int
|
||||||
default: 0
|
default: 1000
|
||||||
- variable: fsGroup
|
- variable: fsGroup
|
||||||
label: "fsGroup"
|
label: fsGroup
|
||||||
description: "The group that should own ALL storage."
|
description: The group that should own ALL storage.
|
||||||
schema:
|
schema:
|
||||||
type: int
|
type: int
|
||||||
default: 568
|
default: 568
|
||||||
|
|||||||
@@ -1,61 +1,80 @@
|
|||||||
env: {}
|
|
||||||
image:
|
image:
|
||||||
pullPolicy: IfNotPresent
|
pullPolicy: IfNotPresent
|
||||||
repository: tccr.io/truecharts/crafty-4
|
repository: tccr.io/truecharts/crafty-4
|
||||||
tag: latest@sha256:ab9217bf6fc3a8e2a660c65ba72d39d904497cb8770be07bb519a581bb665932
|
tag: 4.0.16@sha256:6325ffbb4ee84693dc571f714a43ca0620e70d7f718771360599bd0bfc99b650
|
||||||
persistence:
|
|
||||||
backupfiles:
|
podSecurityContext:
|
||||||
|
runAsGroup: 1000
|
||||||
|
runAsUser: 1000
|
||||||
|
|
||||||
|
securityContext:
|
||||||
|
readOnlyRootFilesystem: false
|
||||||
|
|
||||||
|
probes:
|
||||||
|
liveness:
|
||||||
|
type: HTTP
|
||||||
|
path: /
|
||||||
|
readiness:
|
||||||
|
type: HTTP
|
||||||
|
path: /
|
||||||
|
startup:
|
||||||
|
type: HTTP
|
||||||
|
path: /
|
||||||
|
|
||||||
|
service:
|
||||||
|
main:
|
||||||
|
ports:
|
||||||
|
main:
|
||||||
|
port: 10586
|
||||||
|
protocol: HTTP
|
||||||
|
targetPort: 8000
|
||||||
|
sub:
|
||||||
enabled: true
|
enabled: true
|
||||||
mountPath: /crafty/backups
|
ports:
|
||||||
|
sub:
|
||||||
|
enabled: true
|
||||||
|
port: 8443
|
||||||
|
protocol: HTTPS
|
||||||
|
targetPort: 8443
|
||||||
|
bedrock:
|
||||||
|
enabled: true
|
||||||
|
ports:
|
||||||
|
bedrock:
|
||||||
|
enabled: true
|
||||||
|
port: 19132
|
||||||
|
protocol: UDP
|
||||||
|
targetPort: 19132
|
||||||
|
dynmap:
|
||||||
|
enabled: true
|
||||||
|
ports:
|
||||||
|
dynmap:
|
||||||
|
enabled: true
|
||||||
|
port: 8123
|
||||||
|
targetPort: 8123
|
||||||
|
minecraft:
|
||||||
|
enabled: true
|
||||||
|
ports:
|
||||||
|
minecraft:
|
||||||
|
enabled: true
|
||||||
|
port: 25500
|
||||||
|
targetPort: 25500
|
||||||
|
|
||||||
|
persistence:
|
||||||
config:
|
config:
|
||||||
enabled: true
|
enabled: true
|
||||||
mountPath: /crafty/app/config
|
mountPath: /crafty/app/config
|
||||||
importfolder:
|
|
||||||
enabled: true
|
|
||||||
mountPath: /crafty/import
|
|
||||||
serverfiles:
|
serverfiles:
|
||||||
enabled: true
|
enabled: true
|
||||||
mountPath: /crafty/servers
|
mountPath: /crafty/servers
|
||||||
serverlogs:
|
serverlogs:
|
||||||
enabled: true
|
enabled: true
|
||||||
mountPath: /crafty/logs
|
mountPath: /crafty/logs
|
||||||
podSecurityContext:
|
import:
|
||||||
runAsGroup: 0
|
|
||||||
runAsUser: 0
|
|
||||||
securityContext:
|
|
||||||
readOnlyRootFilesystem: false
|
|
||||||
runAsNonRoot: false
|
|
||||||
service:
|
|
||||||
main:
|
|
||||||
ports:
|
|
||||||
main:
|
|
||||||
port: 8443
|
|
||||||
protocol: HTTP
|
|
||||||
targetPort: 8443
|
|
||||||
minecraftports:
|
|
||||||
enabled: true
|
enabled: true
|
||||||
ports:
|
mountPath: /crafty/import
|
||||||
minecraftports:
|
backup:
|
||||||
enabled: true
|
enabled: true
|
||||||
port: 25500
|
mountPath: /crafty/backups
|
||||||
protocol: TCP
|
|
||||||
targetPort: 25500
|
|
||||||
portforbedrock:
|
|
||||||
enabled: true
|
|
||||||
ports:
|
|
||||||
portforbedrock:
|
|
||||||
enabled: true
|
|
||||||
port: 19132
|
|
||||||
protocol: UDP
|
|
||||||
targetPort: 19132
|
|
||||||
portfordynmap:
|
|
||||||
enabled: true
|
|
||||||
ports:
|
|
||||||
portfordynmap:
|
|
||||||
enabled: true
|
|
||||||
port: 8123
|
|
||||||
protocol: TCP
|
|
||||||
targetPort: 8123
|
|
||||||
|
|
||||||
portal:
|
portal:
|
||||||
enabled: true
|
enabled: true
|
||||||
|
|||||||
Reference in New Issue
Block a user