DevOps/truecharts
2
0
Fork 0
Code Issues Pull Requests Actions 31 Packages Projects Releases 1 Wiki Activity
2,602 Commits 1 Branch 1 Tag
acf510ea13eac08181340e9f91a75c82efc268a4
Commit Graph
28 Commits
Author SHA1 Message Date
Kjeld Schouten-LebbingGitHubStavros kois
 		acf510ea13 (feat) Standardise and Harden default app securitycontext (#1028) 
* Apply security hardened defaults to values.yaml for all apps

* Add default common securityContext to all apps

* Adjust securityContext defaults in questions.yaml, according to values.yaml

* Add default common podSecurityContext to all apps

* Clean whitespace

* Clean more whitespace

* Adjust podSecurityContext defaults in questions.yaml, according to values.yaml

* fix pgadmin

Co-authored-by: Stavros kois <s.kois@outlook.com>
 2021-09-26 20:05:21 +02:00
Kjeld Schouten-LebbingGitHubRenovate Bot
 		2349bb4d40 feat: add new GUI and VPN support to all Apps (#977) 
Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2021-09-13 18:49:14 +02:00
Kjeld Schouten-LebbingandGitHub 642cf20b7b feat: Add VPN addon and move some config to includes (#973) 
* add addon include to all apps

* move groups to include

* move controller to includes

* move container config to include

* move serviceList to include

* move persistence list to includes

* move ingressList to includes

* fix appdaemon digest

* move deviceList to includes and add to deconz

Fixes #967 related to #966
 2021-09-13 12:58:34 +02:00
Stavros KoisandGitHub a7b3ce0e23 fix: make sure podSecurityContext is included in both SCALE and Helm installs (#956) 
* remove strategy

* move runAsNonRoot to securityContext

* Add podSecurityContext and securityContext to values pt1

* Add podSecurityContext and securityContext to values pt2

* Add podSecurityContext and securityContext to values pt3

* Add podSecurityContext and securityContext to values pt4

* Add podSecurityContext and securityContext to values pt5

* fix empty lines

* Remove secCont from NC - values

* fixPermissions for some apps

* on apps with perm prob, set fsGroup to 0 also
 2021-09-10 20:10:04 +02:00
Kjeld Schouten-LebbingandGitHub 982297ec17 fix: move runAsNonRoot to container securityContext to allow root sidecarts (#954) 
* fix: move runAsNonRoot to container securityContext to prevent sidecarts from being affected

* also bump some versions...

* also override some of the problematic settings in common.yaml

* whoops
 2021-09-10 15:26:10 +02:00
Stavros KoisandGitHub 7998db2234 feat: Add regex validation to resources CPU and RAM for all apps (#935) 
* Adds RAM resource regex validation

* Adds CPU resource regex validation
 2021-09-09 01:08:11 +02:00
Kjeld Schouten-LebbingandGitHub f39c7e968f feat: Add IPWhitelist, redirectRegex and (internal) nextcloud middlewares (#929) 
* feat: Add IPWhitelist and redirectRegex middlewares to traefik

* fix: add nextcloud middlewares

* fix nextcloud cronjob
 2021-09-08 15:38:31 +02:00
kjeld Schouten-Lebbing de14c66c97 Fix Traefik and Pihole question.yaml missing settings 2021-09-05 13:29:14 +02:00
kjeld Schouten-Lebbing e28507fab5 Fix traefik not enabling tls on websecure 2021-09-04 01:37:28 +02:00
kjeld Schouten-Lebbing 829d7d25a1 move jdownloader and new traefik to Stable 2021-09-04 00:55:57 +02:00
Kjeld Schouten-LebbingandGitHub 9401dd3676 Apply the PrototypeGUI to all Apps (#851) 
* add pod and controller labels and annotations and termination settings

* add serviceList

* Add IngressList and HPA

* Fix supplementalGroups labeling issues

* cleanup and fixup incubator

* bump

* patch jellyfin

* Patch Jackett
 2021-08-30 15:58:30 +02:00
Kjeld Schouten-LebbingandGitHub 216b27a1f9 Add Supplementalgroups to supporting apps (#808) 
* aims to fix some jellyfin issues

* bump

* add supplementalgroup option

* Remove podSecurityContext from ix_values.yaml
 2021-08-24 12:53:31 +02:00
Kjeld Schouten-LebbingandGitHub 23b8c800ed Add Traefik Pilot GUI questions (#746) 
* Update questions.yaml

* Update Chart.yaml
 2021-08-10 10:30:26 +02:00
kjeld Schouten-Lebbing 3bc750cca3 Fix middleware naming mistake on Traefik 2021-07-05 17:28:56 +02:00
Kjeld Schouten-LebbingandGitHub 6b739c25ac Add more middlewares to traefik and move nextcloud to stable (#658) 
* Add more middlewares to traefik and move nextcloud to stable

* oops
 2021-07-05 10:36:05 +02:00
kjeld Schouten-Lebbing af83ae0936 traefik: fix users section for basicauth 2021-06-30 20:54:55 +02:00
kjeld Schouten-Lebbing 13a82ceb03 fix broken traefik middleware GUI 2021-06-30 20:29:26 +02:00
kjeld Schouten-Lebbing 5e066134b7 Default websecure entrypoint and default enable tls on websecure entrypoint 2021-06-30 17:19:32 +02:00
kjeld Schouten-Lebbing 2bd437715e try correctly appending path to traefik portal 2021-06-30 14:55:31 +02:00
kjeld Schouten-Lebbing 3c09a26dfa unhide middleware GUI for traefik 2021-06-30 13:06:55 +02:00
Kjeld Schouten-LebbingandGitHub 373c834d35 Add traefik middleware support (#601) 
* add basic middleware chain to traefik

* Try some idea's for common ingress middleware support

* create middleware namespace as pre-install hook

* rename namespace file

* Add additional list with middlewares and tune the output a bit

* Add basic auth middleware spawner

* add forwardAuth support

* polish middleware names and add config examples

* initial go at traefik middleware GUI elements

* fix labels

* more missing labels
 2021-06-30 12:56:17 +02:00
kjeld Schouten-Lebbing 5c6ffc42c5 Update and Fix Traefik 
(cherry picked from commit ab76bbc21f4383590aad7ff8b5eeabeb969917b3)
 2021-06-27 08:47:43 +02:00
Kjeld Schouten-LebbingGitHubRenovate Bot
 		88b8d6d981 Migrate Apps to Common 6 (#551) 
* chore(deps): update helm chart common to v6

* Adapt persistence to new GUI

* Adapt additional storage GUI to new storage system

* Adapt values.yaml accordingly

* Move transmission settings to env

* fix a vaultwarden linting issue

* fix firefly-iii linting issues

* Use forceName to force a specific name for the DB PVC

* add force name to questions.yaml as well

* use newest common version

* try fixing db-linking issues on vaultwarden

* add deviceList option to zwave2mqtt

* Fixup the deviceList for all Apps

* fix linting error

* Fix more transmission issues

Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2021-06-11 13:59:46 +02:00
Kjeld Schouten-LebbingandGitHub 111680d41b Traefik rework (#546) 
* first part

* port most relevant settings

* Don't include common or old crap

* Try moving persistence to common

* Initial work on Traefik SCALE UI

* some cleanup and consistency patches. Also:
Enable metrics, because that's just container-side metrics and doesn't require prometheus CRD's

* super basic portal

* don't use portal as a template

* whoops

* whoops 2.0
 2021-06-10 14:49:42 +02:00
Kjeld Schouten-LebbingandGitHub eaf8111313 21.06 fixups (#544) 
* Remove external interfaces
(as external interfaces are not stable enough)

* remove needless commenting

* Add ingress to all question.yaml file that accept it

* increase versions

* fixup/cleanup home-assistant
 2021-06-08 13:20:47 +02:00
Stavros KoisandGitHub 8f1e63448e really remove supplementalGroups (#517) 2021-05-25 16:48:36 +02:00
Kjeld Schouten-LebbingandGitHub d971b460cb Remove unneeded schema values (#515) 
* no message

* bump patch versions

* Remove all hidden: false BS schema values
 2021-05-25 13:28:20 +02:00
Kjeld Schouten-LebbingandGitHub ffc823bccc Restructure repo to be a little cleaner (#445) 2021-05-09 18:11:00 +02:00