213 Commits
Author SHA1 Message Date
Kjeld Schouten-LebbingandGitHub f0ff577857 feat(common): allow for custom selector labels on services. (#1374) 2021-11-22 00:34:59 +01:00
Kjeld Schouten-LebbingandGitHub f718d002da fix(common): correct some mistakes in configMap handling in common (#1369)
* add test for configmap

* fix runtests and mistakes in configmap handling

* bump

* hmmm

* small fix
2021-11-21 20:20:24 +01:00
Kjeld Schouten-LebbingandGitHub 3378258a3b feat(common): add configmap and secret persistence objects (#1368)
* feat(common): add configmap and secret persistence objects

* also port configmap layer

* add values.yaml for integrated configmap
2021-11-21 18:45:03 +01:00
Kjeld Schouten-LebbingandGitHub e2c09231d8 fix(common): correctly set defaults for volumeclaimtemplates and pvc's (#1334)
* fix(common): correctly set defaults for volumeclaimtemplates and pvc's

* polish

* more polish

* hmmm

* whoops

* hmm

* hmm

* again....

* different

* fixes
2021-11-15 19:30:09 +01:00
kjeld Schouten-Lebbing 408e562e4b feat(common): add mariadb support layer 2021-11-15 17:52:37 +01:00
Kjeld Schouten-LebbingandGitHub f76ba0ae92 feat(Redis): add redis App (#1309)
* feat(Redis): add redis App

* Fixup questions.yaml for redis and add common injector

* fix lint
2021-11-12 18:28:36 +01:00
kjeld Schouten-Lebbing 0a0945d19e fix(openldap): fix release.name issues when installing 2021-11-10 17:14:22 +01:00
kjeld Schouten-Lebbing 7e08a5f591 feat(postgresql): also set and remember postgresql root password 2021-11-08 17:40:48 +01:00
Kjeld Schouten-LebbingandGitHub 610bff68ec Chore(Apps): Simplify GUI for deployment, persistence and securityContext (#1289)
* update deployment settings

* hide securityContext by default

* replace bottom persistence section with include

* temporaryly remove hostPathType

* Cleanup basic persistence settings

* Allow simplePVC to also be used for volumeClaimTemplates
2021-11-06 21:41:31 +01:00
Kjeld Schouten-LebbingandGitHub 32c6f11de4 chore(common): add additional aliasses for simple hostpath persistence (#1287)
* chore(common): add additional aliasses for simple hostpath persistence

* hmm

* mountpath, dont use null

* use correct type

* whoops

* bump testrc2
2021-11-06 18:56:41 +01:00
Kjeld Schouten-LebbingandGitHub b832ea9c80 feat(common): introduce simplePVC and simplyHP aliasses for persistence types (#1286)
* feat(common): introduce simplePVC and simplyHP aliasses for persistence types

* correct a mistake

* more fixes
2021-11-06 16:38:54 +01:00
Kjeld Schouten-LebbingandGitHub 6a54105c7a feat(common): Add simple servicetype as a LoadBalancer Alias (#1284)
* feat(common): Add simple servicetype as a LoadBalancer Alias

* add serviceList UI tweak

* Fix typo

* bump

* move servicetype selection code to include

* Clearly flag NodePort and LoadBalancer as advanced

As NodePort does require advanced settings to be checked now
2021-11-06 11:29:34 +01:00
Kjeld Schouten-LebbingandGitHub 5c11bc8fb0 fix(Postgresql): use correct PVC storageClass when using postgresql as a dependency on SCALE (#1212)
* fix db persistence

* Add global isSCALE flag to every questions.yaml file

* bump common
2021-10-20 19:39:05 +02:00
Kjeld Schouten-LebbingandGitHub 834479f0db security(Apps): Improve Snyk hardening advisory (#1208)
* Harden postgresql by removing the migration initcontainer

* Harden initcontainers

* Harden serviceaccounts and RBAC

* hmm

* fix
2021-10-20 13:45:00 +02:00
kjeld Schouten-Lebbing 36723f774c fix(Common): correct SCALE detection on statefullset 2021-10-19 21:42:28 +02:00
kjeld Schouten-Lebbing b98f8ded87 fix(common): Copy ixChartContext.storageClassName to child charts 2021-10-18 20:24:26 +02:00
Kjeld Schouten-LebbingandGitHub dde9cc9e24 feat(common): set SCALE-ZFS as a default storageClassName for SCALE when nothing is given. (#1169) 2021-10-18 19:59:05 +02:00
Kjeld Schouten-LebbingandGitHub f9c3530e36 fix(common): Just provide warning when chmod fails on autopermissions (#1157)
* fix(common): Just provide warning when chmod fails on autopermissions due to nfsv4acl's

* single comma

* tests

* whoop

* zucht
2021-10-17 16:53:46 +02:00
kjeld Schouten-Lebbing 12cd5352c0 chore(common): add varlog storage and streamline db urls again 2021-10-15 18:38:21 +02:00
kjeld Schouten-Lebbing d44637edbe add jdbc type postgres url support to common 2021-10-15 17:19:06 +02:00
Kjeld Schouten-LebbingandGitHub eaf70889a2 feat(common): simplify postgresql url generator (#1146) 2021-10-15 13:42:20 +02:00
kjeld Schouten-Lebbing 0e44b3bd97 (fix) add Nextcloud's prefered database url to common 2021-10-10 00:32:53 +02:00
kjeld Schouten-Lebbing 799baea4dc seperate setup and post-setup to prevent double setup runs on common chart 2021-10-10 00:03:07 +02:00
kjeld Schouten-Lebbing fbb340e2d0 (chore) restructure common setup templates 2021-10-09 23:43:48 +02:00
Kjeld Schouten-LebbingandGitHub 2679fc1108 (feat) move postgresql init and password-generator to common (#1113)
* Move Postgresql initcontainer to common

* bump common

* Handle postgres password generation in common and inject into values.yaml for use in Apps

* (refactor) adapt apps using postgresql to common init and password generator

* no message
2021-10-09 19:24:45 +02:00
Kjeld Schouten-LebbingandGitHub 6b96a3662c (feat) allow for the default middlewares to be disabled on ingress. (#1096)
* Edit common to allow for the default middlewares to be disabled on ingress.

* add it on all apps as an expert option

* fix hostPath mistake in tests while at it
2021-10-05 00:39:13 +02:00
Kjeld Schouten-LebbingandGitHub 308ba8accf (feat) Dynamically set PGID, GID and GROUP_ID (#1091)
* base PGID on fsGroup

* also remove PGID from questions.yaml

* remove mistake

* small fix

* fix first test

* fix linting

* always set PUID to 568

* use quotes for env vars (obviously)
2021-10-04 12:31:56 +02:00
Kjeld Schouten-LebbingandGitHub f3c62cd686 remove crooked test (+1 squashed commits) (#1087)
Squashed commits:

[a5217867f] (fix) ensure that ports are valid before trying to use them for setting the capability
2021-10-03 16:29:41 +02:00
Kjeld Schouten-LebbingandGitHub 0c3e9d2baa (feat) automaticly set NET_BIND_SERVICE based on (target)port in services (#1085) 2021-10-03 15:17:55 +02:00
kjeld Schouten-Lebbing 7600caaba0 (fix) simplify and correct openvpn VPN_AUTH envvar generation 2021-09-29 17:32:24 +02:00
Kjeld Schouten-LebbingandGitHub cfdffdb3be (feat) add CodeServer addon and addon improvements (#1059)
* simplify addons to not require manually entered volumemounts, just mount them all.

* simplify addons

* cleanup promtail and codeserver

* fix mistake in codeserver

* try to add codeserver runtest

* add netshoot runtest

* fix codeserver ports

* different codeserver port for integrationt est

* bump common
2021-09-29 15:10:26 +02:00
Kjeld Schouten-LebbingandGitHub 2b5fe533f6 (feat) Add Promtail and Netshoot addons (#1058)
* add promtail addon

* Add Netshoot addon

* update common to include envList for addons

* Add basic promtail and netshoot unittests
2021-09-29 14:18:57 +02:00
Kjeld Schouten-LebbingandGitHub 88b1719d32 done (+42 squashed commit) (#1053)
Squashed commit:

[8058e6aba] 1 error left

[b0157b252] 2 errors

[7fa494907] 4 errors

[03139391e]  6 failures, 4 errors

[7f017ea23] 12 errors

[3e9ad758d] 0 failures, 13 errors

[e24a3cb3e] 3 failures, 13 errors

[6edcaa655] 4 failures 14 errors

[9623bda57] 6 failures, 13 errors

[04c35c995] 4 failed 22 errors

[5f5335c15] 9 failures

[9a33540e2] down to 20 failures

[0e7b73b49] remove old tests

[5cc6d11b7] fixup the resources

[8c508d45a] some more progress

[4acef3c3b] some more work

[85cdb5d06] some ports cleanup

[1987ac2ec] lint before unit

[6fa221789] enable unit tests

[c212b695d] other name

[b78594518] common test name fix

[ef6597e79] indent

[8cbcfb5e4] common test rename

[1ca838c16] seperate common tests

[ef052b022] create two seperate job for common testing

[67eb0e9b3] use devcontainer for release shizzle

[0c47c482b] make it a sudo

[4d8900b16] force install jq

[9660cdd47] try something else

[e2b611917] bump common to run tests (to fix them)

[277241bbf] only use the new devcontainer for the release tests for now...

[9c7b68e0f] Revert "remove setup chart testing action"

This reverts commit 6987914587a58ab5a52a05b836d60ef91f1619d5.

[444914311] Revert "use integrated k3d"

This reverts commit d9bcb2f35d154b0afe1eb851729c37789b6ba0ea. (+6 squashed commit)

Squashed commit:

[313446184] Revert "correct k3s version"

This reverts commit 81fa8a43c41c2449b7411e0d59a3c2bbe0aef1ea.

[41b4d4795] Revert "version name tryout"

This reverts commit bbb8dcead9f9426872390b8f89b1fd0e661534bb.

[b64df97a0] Revert "change version"

This reverts commit 8080395dc80e606769ad9790b35d35fac4d1d3ed.

[ed63220d4] Revert "use k3s kubectl"

This reverts commit ea81735d939e838ad595835ea09b54bff817dd83.

[6267a2908] Revert "use normal kubectl"

This reverts commit 216d3799111d47f65dd20dd85ccb8fbc586a9c2b.

[f48ddde73] Revert "try to set kubectl context"

This reverts commit a5e8a532c5620e0d9d4cb7a53a371ba200265612.

[a5e8a532c] try to set kubectl context

[216d37991] use normal kubectl

[ea81735d9] use k3s kubectl

[8080395dc] change version

[bbb8dcead] version name tryout

[81fa8a43c] correct k3s version

[d9bcb2f35] use integrated k3d

[698791458] remove setup chart testing action

[5bd7cf01d] bump common-test
2021-09-29 00:11:52 +02:00
kjeld Schouten-Lebbing 3dd449cc8e (fix) correct autopermissions indent error in common 2021-09-26 22:37:15 +02:00
kjeld Schouten-Lebbing 842cf0a65f (chore) also use s6 readonlyroot mitigation when running asNonRoot 2021-09-26 11:20:08 +02:00
Kjeld Schouten-LebbingandGitHub d9dffc7952 fix common test mistake (#1031)
* fix common test mistake

* configfile.enabled

* VPN auto permissions fix

* trigger common-test install

* more thorough fix

* fix test to use sonarr instead of homerr

* use a super simple container

* try tweaking a bit to allow run as nonroot

* try fixing tests

* fix tests... again...

* fix... AGAIN...
2021-09-25 19:23:43 +02:00
Kjeld Schouten-LebbingandGitHub 37963de155 Add ReadOnlyRoot mitigation for S6 overlay (#1030)
* Add ReadOnlyRoot mitigation for S6 overlay

* try to fix some tests
2021-09-25 15:11:51 +02:00
Kjeld Schouten-LebbingandGitHub 2db56c1e42 Fix remaining VPN addon issues (#1029)
* Fix remaining VPN addon issues

* fix minor common-test issue
2021-09-25 14:40:14 +02:00
Kjeld Schouten-LebbingandGitHub 0fb8f8bb90 fix: make sure autopermissions sets the group owner correctly (#994)
* fix: make sure autopermissions sets the group owner correctly

* add test fix
2021-09-14 23:59:19 +02:00
kjeld Schouten-Lebbing ab1b39b88e cleanup authentication credentials for OpenVPN 2021-09-13 21:18:11 +02:00
kjeld Schouten-Lebbing 0970b3a8d3 fix: ensure wireguard env vars get created 2021-09-13 09:25:38 +02:00
kjeld Schouten-Lebbing 9ccdfcb7d8 fix: nuke all VPN volumes that we don't use (yet) out of Common 2021-09-12 22:49:18 +02:00
kjeld Schouten-Lebbing e15b80e105 fix: completely remove unused volumes and correctly enable used volumes for VPN 2021-09-12 22:30:05 +02:00
kjeld Schouten-Lebbing b34f57e386 fix: remove old configmap and secret references for VPN config/scripts 2021-09-12 22:10:48 +02:00
kjeld Schouten-Lebbing d072cb3b3a fix: correct vpn securityContext 2021-09-12 21:51:10 +02:00
Kjeld Schouten-LebbingandGitHub a6037c62fa fix: ensure annotationLists and labelLists don't get processed for disabled objects (#971) 2021-09-12 20:28:22 +02:00
Kjeld Schouten-LebbingandGitHub b660bbf457 improv: improve dns and vpn values.yaml syntaxis (#970)
* improv: improve dns and vpn values.yaml syntaxis

* hmm

* fix tests

* no message
2021-09-12 17:39:01 +02:00
kjeld Schouten-Lebbing 3b8005b04e fix: remove duplicate securitycontext from autopermissions 2021-09-11 12:08:06 +02:00
Kjeld Schouten-LebbingandGitHub 00e9bd819f refactor: change image layout to enable renovate updates of sidecarts (#955)
* some cleanup for common (+6 squashed commit)

Squashed commit:

[43a501de8] bump sogo

[62c009b63] some tryouts

[6840fafdb] try to fix rendering of new format

[003d3c81b] move seperate apps to new format and fix mistake in common

[752ae2c68] more work on the image refactor

[edfc28533] refactor common images

* sogo scale differently

* slight release build fix

* fix issues with release script and multiple tags
2021-09-10 16:57:08 +02:00
Kjeld Schouten-LebbingandGitHub 982297ec17 fix: move runAsNonRoot to container securityContext to allow root sidecarts (#954)
* fix: move runAsNonRoot to container securityContext to prevent sidecarts from being affected

* also bump some versions...

* also override some of the problematic settings in common.yaml

* whoops
2021-09-10 15:26:10 +02:00