fix(dashdot): run privileged (#2901)

* fix(dashdot): run privileged

* add storage widget

* caps

* lint

* no priv

* Needs priv
This commit is contained in:
Stavros Kois 2022-06-15 23:11:29 +03:00 committed by GitHub
parent 914bd331d0
commit 62ba3072b7
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
3 changed files with 63 additions and 10 deletions

View File

@ -19,7 +19,7 @@ name: dashdot
sources:
- https://github.com/MauriceNino/dashdot
- https://hub.docker.com/r/mauricenino/dashdot
version: 0.0.3
version: 0.0.4
annotations:
truecharts.org/catagories: |
- media

View File

@ -88,7 +88,7 @@ questions:
schema:
type: string
required: true
default: "os,cpu,ram,network"
default: "os,cpu,storage,ram,network"
- variable: DASHDOT_ACCEPT_OOKLA_EULA
label: "DASHDOT_ACCEPT_OOKLA_EULA"
description: "Use the newer and more accurate speedtest tool from Ookla, instead of the old speedtest-cli for your speedtests. "
@ -169,6 +169,37 @@ questions:
schema:
type: string
default: "1000"
- variable: storagewidgetsettings
label: "Storage Widget Settings"
schema:
type: boolean
default: false
show_subquestions_if: true
subquestions:
- variable: DASHDOT_STORAGE_LABEL_LIST
label: "DASHDOT_STORAGE_LABEL_LIST"
description: "Change the order of the labels in the list, to change the position in the widget, or remove an item from the list, to remove it from the widget"
schema:
type: string
default: "brand,size,type"
- variable: DASHDOT_STORAGE_WIDGET_GROW
label: "DASHDOT_STORAGE_WIDGET_GROW"
description: "To adjust the relative size of the Storage widget"
schema:
type: string
default: "3.5"
- variable: DASHDOT_STORAGE_WIDGET_MIN_WIDTH
label: "DASHDOT_STORAGE_WIDGET_MIN_WIDTH"
description: "To adjust the minimum width of the Storage widget (in px)"
schema:
type: string
default: "500"
- variable: DASHDOT_STORAGE_POLL_INTERVAL
label: "DASHDOT_STORAGE_POLL_INTERVAL"
description: "Read the Storage load every x milliseconds"
schema:
type: string
default: "60000"
- variable: ramwidgetsettings
label: "RAM Widget Settings"
schema:
@ -213,6 +244,12 @@ questions:
default: false
show_subquestions_if: true
subquestions:
- variable: DASHDOT_USE_NETWORK_INTERFACE
label: "DASHDOT_USE_NETWORK_INTERFACE"
description: "If dashdot detects the wrong gateway as your default interface, you can provide a name here that is used instead"
schema:
type: string
default: ""
- variable: DASHDOT_SPEED_TEST_INTERVAL
label: "DASHDOT_SPEED_TEST_INTERVAL"
description: "At which interval the network speed-test should be rerun (in minutes)"
@ -346,6 +383,24 @@ questions:
schema:
type: string
default: ""
- variable: DASHDOT_OVERRIDE_STORAGE_BRANDS
label: "DASHDOT_OVERRIDE_STORAGE_BRANDS"
description: "Pass a comma-separated list of brands of your drives. You can skip correct drives, by passing empty values for it"
schema:
type: string
default: ""
- variable: DASHDOT_OVERRIDE_STORAGE_SIZES
label: "DASHDOT_OVERRIDE_STORAGE_SIZES"
description: "Pass a comma-separated list of sizes of your drives. You can skip correct drives, by passing empty values for it"
schema:
type: string
default: ""
- variable: DASHDOT_OVERRIDE_STORAGE_TYPES
label: "DASHDOT_OVERRIDE_STORAGE_TYPES"
description: "Pass a comma-separated list of types of your drives. You can skip correct drives, by passing empty values for it"
schema:
type: string
default: ""
# Include{containerConfig}
- variable: service
@ -475,7 +530,7 @@ questions:
label: "Privileged mode"
schema:
type: boolean
default: false
default: true
- variable: readOnlyRootFilesystem
label: "ReadOnly Root Filesystem"
schema:
@ -485,7 +540,7 @@ questions:
label: "Allow Privilege Escalation"
schema:
type: boolean
default: false
default: true
- variable: runAsNonRoot
label: "runAsNonRoot"
schema:

View File

@ -1,14 +1,16 @@
image:
repository: mauricenino/dashdot
tag: 3.3.3@sha256:5cb60d5ab847f5e15ace2290381622cb359d153415958d6e39ed04df7bb9bf2c
tag: 3.4.0@sha256:54a11e6475529da60057255095e265f21f366c81bfcbbcc3e956f7af01978c61
pullPolicy: IfNotPresent
securityContext:
runAsNonRoot: false
readOnlyRootFilesystem: false
privileged: true
allowPrivilegeEscalation: true
capabilities:
add:
- SYS_PTRACE
- SYS_ADMIN
- SYS_RAWIO
podSecurityContext:
@ -17,10 +19,6 @@ podSecurityContext:
env:
DASHDOT_PORT: "{{ .Values.service.main.ports.main.port}}"
# User Defined
# There is a storage widget, but currently it can't extract ZFS usage accurately
# https://github.com/MauriceNino/dashdot/issues/40
DASHDOT_WIDGET_LIST: "os,cpu,ram,network"
service:
main: