Skip to content

Commit d020997

Browse files
rajsinghtechrajsinghtech
committed
Enhance security context in deployment and values files by adding seccomp profile. Remove deprecated leader election parameters from deployment configuration. Update sample dashboard configuration with improved layout, additional links, and comprehensive service catalog.
1 parent cf076ed commit d020997

File tree

4 files changed

+186
-66
lines changed

4 files changed

+186
-66
lines changed

‎charts/homer-operator/templates/deployment.yaml‎

Lines changed: 2 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -51,9 +51,6 @@ spec:
5151
- --health-probe-bind-address={{ .Values.operator.healthProbe.bindAddress }}
5252
{{- if .Values.operator.leaderElection.enabled }}
5353
- --leader-elect
54-
- --leader-elect-lease-duration={{ .Values.operator.leaderElection.leaseDuration }}
55-
- --leader-elect-renew-deadline={{ .Values.operator.leaderElection.renewDeadline }}
56-
- --leader-elect-retry-period={{ .Values.operator.leaderElection.retryPeriod }}
5754
{{- end }}
5855
env:
5956
{{- include "homer-operator.env" . | nindent 8 }}
@@ -104,6 +101,8 @@ spec:
104101
securityContext:
105102
allowPrivilegeEscalation: false
106103
readOnlyRootFilesystem: true
104+
seccompProfile:
105+
type: RuntimeDefault
107106
capabilities:
108107
drop:
109108
- "ALL"

‎charts/homer-operator/values.yaml‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -87,6 +87,8 @@ podSecurityContext:
8787
securityContext:
8888
allowPrivilegeEscalation: false
8989
readOnlyRootFilesystem: true
90+
seccompProfile:
91+
type: RuntimeDefault
9092
capabilities:
9193
drop:
9294
- ALL

‎config/samples/homer_v1alpha1_dashboard.yaml‎

Lines changed: 182 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -2,26 +2,195 @@ apiVersion: homer.rajsingh.info/v1alpha1
22
kind: Dashboard
33
metadata:
44
name: dashboard-sample
5+
labels:
6+
app: homer-dashboard
7+
tier: frontend
58
spec:
69
replicas: 2
10+
11+
# Enhanced Homer Configuration with supported features
712
homerConfig:
8-
title: "Raj's Dashboard"
9-
subtitle: "Raj's Subtitle"
10-
# theme: default
11-
header: "false"
12-
footer: '<p>Homer-Operator</p>'
13-
# columns: "3"
13+
title: "Modern Homer Dashboard"
14+
subtitle: "Enterprise Service Discovery & Monitoring"
1415
logo: "https://raw.githubusercontent.com/rajsinghtech/homer-operator/main/homer/Homer-Operator.png"
16+
header: true
17+
footer: '<p>Powered by <strong>Homer-Operator</strong> | <a href="https://github.com/rajsinghtech/homer-operator">GitHub</a></p>'
18+
19+
# Default layout settings
1520
defaults:
16-
layout: list # Either 'columns', or 'list'
17-
colorTheme: auto
21+
layout: "columns"
22+
colorTheme: "auto"
23+
24+
# Enhanced links with targets
1825
links:
19-
- name: "Homer-Operator Github"
26+
- name: "Homer-Operator GitHub"
2027
icon: "fab fa-github"
2128
url: "https://github.com/rajsinghtech/homer-operator"
22-
- name: "Homer Github"
23-
icon: "fab fa-github"
29+
target: "_blank"
30+
- name: "Homer Documentation"
31+
icon: "fas fa-book"
2432
url: "https://github.com/bastienwirtz/homer"
33+
target: "_blank"
34+
- name: "Kubernetes Dashboard"
35+
icon: "fas fa-dharmachakra"
36+
url: "https://kubernetes.io/docs/tasks/access-application-cluster/web-ui-dashboard/"
37+
target: "_blank"
38+
39+
# Comprehensive service catalog
40+
services:
41+
- name: "Infrastructure Services"
42+
icon: "fas fa-server"
43+
items:
44+
- name: "Kubernetes Dashboard"
45+
logo: "https://raw.githubusercontent.com/kubernetes/kubernetes/master/logo/logo.png"
46+
subtitle: "Cluster Management"
47+
tag: "k8s"
48+
tagstyle: "is-info"
49+
url: "https://kubernetes.example.com"
50+
target: "_blank"
51+
keywords: "kubernetes cluster management"
52+
- name: "Grafana"
53+
logo: "https://grafana.com/static/assets/img/grafana_icon.svg"
54+
subtitle: "Monitoring & Dashboards"
55+
tag: "monitoring"
56+
tagstyle: "is-warning"
57+
url: "https://grafana.example.com"
58+
target: "_blank"
59+
type: "Grafana"
60+
- name: "Prometheus"
61+
logo: "https://prometheus.io/assets/prometheus_logo_grey.svg"
62+
subtitle: "Metrics Collection"
63+
tag: "metrics"
64+
tagstyle: "is-danger"
65+
url: "https://prometheus.example.com"
66+
target: "_blank"
67+
type: "Prometheus"
68+
69+
- name: "Development Tools"
70+
icon: "fas fa-code"
71+
items:
72+
- name: "GitLab"
73+
logo: "https://about.gitlab.com/images/press/logo/svg/gitlab-icon-rgb.svg"
74+
subtitle: "Git Repository & CI/CD"
75+
tag: "git"
76+
tagstyle: "is-primary"
77+
url: "https://gitlab.example.com"
78+
target: "_blank"
79+
- name: "Jenkins"
80+
logo: "https://www.jenkins.io/images/logos/jenkins/jenkins.svg"
81+
subtitle: "Build Automation"
82+
tag: "ci/cd"
83+
tagstyle: "is-success"
84+
url: "https://jenkins.example.com"
85+
target: "_blank"
86+
- name: "SonarQube"
87+
logo: "https://www.sonarqube.org/images/downloads/picto.svg"
88+
subtitle: "Code Quality"
89+
tag: "quality"
90+
tagstyle: "is-info"
91+
url: "https://sonar.example.com"
92+
target: "_blank"
93+
type: "SonarQube"
94+
95+
- name: "Smart Services"
96+
icon: "fas fa-microchip"
97+
items:
98+
- name: "Proxmox VE"
99+
logo: "https://www.proxmox.com/images/proxmox/Proxmox_symbol_standard_hex_400px.png"
100+
subtitle: "Virtualization Platform"
101+
tag: "virtualization"
102+
tagstyle: "is-warning"
103+
url: "https://pve.example.com"
104+
target: "_blank"
105+
type: "Proxmox"
106+
node: "pve-node1"
107+
- name: "Radarr"
108+
logo: "https://github.com/Radarr/Radarr/raw/develop/Logo/256.png"
109+
subtitle: "Movie Management"
110+
tag: "media"
111+
tagstyle: "is-primary"
112+
url: "https://radarr.example.com"
113+
target: "_blank"
114+
type: "Radarr"
115+
- name: "Sonarr"
116+
logo: "https://github.com/Sonarr/Sonarr/raw/develop/Logo/256.png"
117+
subtitle: "TV Series Management"
118+
tag: "media"
119+
tagstyle: "is-success"
120+
url: "https://sonarr.example.com"
121+
target: "_blank"
122+
type: "Sonarr"
123+
124+
- name: "Security & Networking"
125+
icon: "fas fa-shield-alt"
126+
items:
127+
- name: "pfSense"
128+
logo: "https://www.pfsense.org/images/pfsense_logo.png"
129+
subtitle: "Firewall & Router"
130+
tag: "network"
131+
tagstyle: "is-danger"
132+
url: "https://pfsense.example.com"
133+
target: "_blank"
134+
type: "pfSense"
135+
- name: "Pi-hole"
136+
logo: "https://pi-hole.github.io/graphics/Vortex/Vortex_with_Wordmark.svg"
137+
subtitle: "DNS Ad Blocker"
138+
tag: "dns"
139+
tagstyle: "is-info"
140+
url: "https://pihole.example.com"
141+
target: "_blank"
142+
type: "PiHole"
143+
- name: "Vault"
144+
logo: "https://www.vaultproject.io/img/logo-hashicorp.svg"
145+
subtitle: "Secrets Management"
146+
tag: "security"
147+
tagstyle: "is-warning"
148+
url: "https://vault.example.com"
149+
target: "_blank"
150+
151+
# Custom assets configuration (requires external ConfigMap)
152+
# assets:
153+
# configMapRef:
154+
# name: "dashboard-assets"
155+
# namespace: "default"
156+
# icons:
157+
# favicon: "custom-favicon.ico"
158+
# appleTouchIcon: "custom-apple-touch-icon.png"
159+
# pwaIcon192: "custom-pwa-192.png"
160+
# pwaIcon512: "custom-pwa-512.png"
161+
# pwa:
162+
# enabled: true
163+
# name: "Homer Enterprise Dashboard"
164+
# shortName: "Homer"
165+
# description: "Enterprise service discovery and monitoring dashboard"
166+
# themeColor: "#3367d6"
167+
# backgroundColor: "#ffffff"
168+
# display: "standalone"
169+
# startUrl: "/"
170+
171+
# Smart card secrets for sensitive data (requires external Secret)
172+
# secrets:
173+
# apiKey:
174+
# name: "dashboard-secrets"
175+
# key: "api-key"
176+
# token:
177+
# name: "dashboard-secrets"
178+
# key: "auth-token"
179+
# password:
180+
# name: "dashboard-secrets"
181+
# key: "password"
182+
# username:
183+
# name: "dashboard-secrets"
184+
# key: "username"
185+
# headers:
186+
# "X-API-Key":
187+
# name: "dashboard-secrets"
188+
# key: "custom-api-key"
189+
# "Authorization":
190+
# name: "dashboard-secrets"
191+
# key: "bearer-token"
192+
193+
# ConfigMap for Homer configuration
25194
configMap:
26-
name: "raj-config"
27-
key: "raj-key"
195+
name: "enterprise-homer-config"
196+
key: "config.yaml"

‎config/samples/homer_v1alpha1_dashboard_multi.yaml‎

Lines changed: 0 additions & 50 deletions
This file was deleted.

0 commit comments

Comments
 (0)