DevOps/truecharts
2
0
Fork 0
Code Issues Pull Requests Actions 26 Packages Projects Releases 1 Wiki Activity
2,596 Commits 1 Branch 1 Tag
842cf0a65fb9af456f17a4efb7cdf293d2925bef
Commit Graph
108 Commits
Author SHA1 Message Date
kjeld Schouten-Lebbing 842cf0a65f (chore) also use s6 readonlyroot mitigation when running asNonRoot 2021-09-26 11:20:08 +02:00
Kjeld Schouten-LebbingandGitHub 4ea3185e38 add a special /var/run tmpfs mountpoint to common (#1032) 
* add a special /var/run tmpfs mountpoint to common

* common-test version in tests fix
 2021-09-25 20:31:39 +02:00
kjeld Schouten-Lebbing 961b2bfbc3 bump common 2021-09-25 19:34:45 +02:00
Kjeld Schouten-LebbingandGitHub 37963de155 Add ReadOnlyRoot mitigation for S6 overlay (#1030) 
* Add ReadOnlyRoot mitigation for S6 overlay

* try to fix some tests
 2021-09-25 15:11:51 +02:00
Kjeld Schouten-LebbingandGitHub 2db56c1e42 Fix remaining VPN addon issues (#1029) 
* Fix remaining VPN addon issues

* fix minor common-test issue
 2021-09-25 14:40:14 +02:00
kjeld Schouten-Lebbing 483d29ee0e harden default security options for common 2021-09-25 12:10:24 +02:00
Kjeld Schouten-LebbingandGitHub 0fb8f8bb90 fix: make sure autopermissions sets the group owner correctly (#994) 
* fix: make sure autopermissions sets the group owner correctly

* add test fix
 2021-09-14 23:59:19 +02:00
TrueCharts-Bot 2ecefa844d Commit released Helm Chart and docs for TrueCharts 
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
 2021-09-14 20:45:30 +00:00
renovate[bot]GitHubRenovate BotTrueCharts-Bot
 		f2cf03eda3 chore(deps): update non-major (#987) 
* chore(deps): update non-major

* Commit bumped App Version

Signed-off-by: TrueCharts-Bot <bot@truecharts.org>

Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: TrueCharts-Bot <bot@truecharts.org>
 2021-09-14 22:38:56 +02:00
kjeld Schouten-Lebbing 0970b3a8d3 fix: ensure wireguard env vars get created 2021-09-13 09:25:38 +02:00
kjeld Schouten-Lebbing 9ccdfcb7d8 fix: nuke all VPN volumes that we don't use (yet) out of Common 2021-09-12 22:49:18 +02:00
kjeld Schouten-Lebbing e15b80e105 fix: completely remove unused volumes and correctly enable used volumes for VPN 2021-09-12 22:30:05 +02:00
kjeld Schouten-Lebbing b34f57e386 fix: remove old configmap and secret references for VPN config/scripts 2021-09-12 22:10:48 +02:00
kjeld Schouten-Lebbing d072cb3b3a fix: correct vpn securityContext 2021-09-12 21:51:10 +02:00
kjeld Schouten-Lebbing 82af2510d7 test app add some fixes 2021-09-12 20:35:33 +02:00
Kjeld Schouten-LebbingandGitHub a6037c62fa fix: ensure annotationLists and labelLists don't get processed for disabled objects (#971) 2021-09-12 20:28:22 +02:00
Kjeld Schouten-LebbingandGitHub b660bbf457 improv: improve dns and vpn values.yaml syntaxis (#970) 
* improv: improve dns and vpn values.yaml syntaxis

* hmm

* fix tests

* no message
 2021-09-12 17:39:01 +02:00
kjeld Schouten-Lebbing 3b8005b04e fix: remove duplicate securitycontext from autopermissions 2021-09-11 12:08:06 +02:00
TrueCharts-Bot b622dd735e Commit released Helm Chart and docs for TrueCharts 
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
 2021-09-10 15:07:56 +00:00
kjeld Schouten-Lebbing 7015791dac feat: Move some common containers to our own containers 2021-09-10 17:05:36 +02:00
Kjeld Schouten-LebbingandGitHub 982297ec17 fix: move runAsNonRoot to container securityContext to allow root sidecarts (#954) 
* fix: move runAsNonRoot to container securityContext to prevent sidecarts from being affected

* also bump some versions...

* also override some of the problematic settings in common.yaml

* whoops
 2021-09-10 15:26:10 +02:00
Kjeld Schouten-LebbingandGitHub e0e0a4a2f2 refactor: Restructure common init and additional container layout to dicts (#950) 
* refactor: Restructure common init and additional container layout to dicts

BREAKING CHANGE
 2021-09-09 21:48:43 +02:00
Kjeld Schouten-LebbingandGitHub 5cb0b239e0 Feat: port addons from k8s-at-home to common (#948) 
* Feat: port addons from k8s-at-home to common

* use an older version of upstream
 2021-09-09 20:55:33 +02:00
kjeld Schouten-Lebbing f8591d09f9 bump common after testsuit updates 2021-09-09 20:41:23 +02:00
TrueCharts-Bot 3cba4a676a Commit released Helm Chart and docs for TrueCharts 
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
 2021-09-09 12:22:00 +00:00
Kjeld Schouten-LebbingandGitHub cc1cde7fdc fix: ensure supplementalgroups when using devices are actually added (#942) 2021-09-09 14:20:26 +02:00
Kjeld Schouten-LebbingandGitHub 0aa2131b28 helm test revert (+1 squashed commits) (#931) 
Squashed commits:

[36ca93235] actually finish echo command (+8 squashed commit)

Squashed commit:

[27c3e9d63] fix typo

[8daa4395e] use name not a derivitive

[d8a24b1d8] force a testrun

[edacc59e4] give more perms

[9706a9860] bump

[09f9d9f4e] Code thining on common

[8adfddf2b] try moving autopermissions to initcontainer

[42c7f76a4] fix: have autopermissions use command instead of arg
 2021-09-08 22:14:04 +02:00
kjeld Schouten-Lebbing 516d520f25 Correctly set common group write permission when auto-permissions is enabled and add incubator pihole app 
Also updates ports list
 2021-09-04 17:42:55 +02:00
Kjeld Schouten-LebbingandGitHub 353a4337fe move default middleware location to default namespace (#890) 2021-09-04 11:07:09 +02:00
kjeld Schouten-Lebbing f1dbdf0059 Bump some incubator apps and remove common test code. Also render traefik portalhook as tpl 2021-09-04 00:12:58 +02:00
Kjeld Schouten-LebbingandGitHub ffde8c7482 update portal configmap code (#889) 
* update portal configmap code

* remove accidental common-test change
 2021-09-04 00:01:55 +02:00
TrueCharts-Bot b70eb962b9 Daily Housekeeping 
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
 2021-09-03 03:11:35 +00:00
kjeld Schouten-Lebbing f90be05a2f fix an RBAC bug in common 2021-09-02 15:29:24 +02:00
Kjeld Schouten-LebbingandGitHub 29615ca832 Add labels to more common objects and add names.fqdn (#884) 
* Add labels to more common objects and add names.fqdn

* whoops copy pasta mistake
 2021-09-02 14:41:22 +02:00
kjeld Schouten-Lebbing e3d505a0b0 bump common and authelia due to issues. 2021-09-02 12:58:07 +02:00
Kjeld Schouten-LebbingandGitHub 6831d56ee4 remove externalInterfaces + add RBAC and networkPolicy support (#882) 
* remove externalInterfaces + add RBAC and networkPolicy support

* mistaken double end

* cleanup values a bit

* fix a small mistake

* That was the wrong mistake
 2021-09-02 12:52:34 +02:00
TrueCharts-Bot 01461b60a1 Daily Housekeeping 
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
 2021-09-01 03:11:53 +00:00
kjeld Schouten-Lebbing a44fdf6401 default enableServiceLinks to false, as we donnot use them in any place 2021-08-31 23:55:29 +02:00
kjeld Schouten-Lebbing e67bea1253 small authelia bugfix (+1 squashed commits) 
Squashed commits:

[3134d5106] fix statefullset storage on TrueNAS and fix statefullset default for OpenLDAP
 2021-08-31 20:55:44 +02:00
TrueCharts-Bot 497b7f8354 Daily Housekeeping 
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
 2021-08-31 09:46:09 +00:00
kjeld Schouten-Lebbing 522267d028 Fix portsList issues on common 2021-08-30 13:37:37 +02:00
Kjeld Schouten-LebbingandGitHub f5055b1410 More prototypeGui work (#849) 
* allow additional Ingress

* Add serviceList and portsList to common

* add portslist GUI

* add additional services GUI

* bump

* Add custom-app App

* use the custom service app as a canary for Common mistakes

* fix typo in custom-app
 2021-08-30 12:56:36 +02:00
Kjeld Schouten-LebbingandGitHub 25a98b4d69 add labels and annotations to questions.yaml and revert oopsie (+13 squashed commit) (#843) 
Squashed commit:

[5ffcf238] Allow more lists

[d185c0ed] Test annotationsList on persistence

[6d8afee1] Allow setting ingressclass on ingress

[a9dccd41] fix again

[4a54beb8] fix broken servicetest again

[62e85336] Fix mistake

[e45db47b] remove services annotation test due to random annotations, fix new PVC tests

[745a11bd] Add podAnnotationsList, podLabelsList, controllerAnnotationsList and controller:abelsList,

[5d075f33] Add PVC test for labels and retain

[43b64ddc] Fix PVC error

[229143ed] Update common

[d551d80f] add gracePeriodSeconds

[350e6885] Add HPA GUI
 2021-08-30 00:28:24 +02:00
kjeld Schouten-Lebbing c942a3ad96 Add default securityContext to common 2021-08-28 14:02:53 +02:00
kjeld Schouten-Lebbing 1f8bfb956d [common] Always rebuild service objects on update 2021-08-27 20:05:00 +02:00
kjeld Schouten-Lebbing 17921206df patch common again 2021-08-27 17:09:34 +02:00
kjeld Schouten-Lebbing aea019435c another common bugfix 2021-08-27 16:41:24 +02:00
kjeld Schouten-Lebbing 2b109ea7e0 fix common indentation bug 2021-08-27 15:29:47 +02:00
kjeld Schouten-Lebbing c28f6a8206 Common typo fix 2021-08-27 15:15:53 +02:00
Kjeld Schouten-LebbingandGitHub 91a4659c56 [common] allow the use of tpl's for envFrom (#822) 
* allow the use of tpl's for envFrom

* actuall this is a feature increase
 2021-08-27 15:05:33 +02:00