Commit Graph

41 Commits

Author SHA1 Message Date
TrueCharts Bot d950162568
chore(deps): update container image tccr.io/truecharts/postgresql to 14.7.0 (#8346)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[tccr.io/truecharts/postgresql](https://togithub.com/truecharts/containers)
| digest | `f71c973` -> `f8ccc8b` |

---

### ⚠ Dependency Lookup Warnings ⚠

Warnings were logged while processing this repo. Please check the
Dependency Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://togithub.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNS42MS4wIiwidXBkYXRlZEluVmVyIjoiMzUuNjEuMCJ9-->

---------

Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2023-04-28 02:47:37 +02:00
Kjeld Schouten-Lebbing 0b726419d4
feat(stable): BREAKING CHANGE migrate to new common part 1 (#7900)
**Description**
Part 1 of the migration to new common on the stable train.
This basically breaks most/all charts requiring a reinstall on SCALE as
well.

Helm users shouldn't need a reinstall but could migrate their
values.yaml modification manually besides backing-up and porting the
databases.

There be Dragons basically, as we obviously cannot 100% go over
each-and-every single app in the stable train like we did in the
enterprise train.

**⚙️ Type of change**

- [x] ⚙️ Feature/App addition
- [x] 🪛 Bugfix
- [x] ⚠️ Breaking change (fix or feature that would cause existing
functionality to not work as expected)
- [x] 🔃 Refactor of current code

**🧪 How Has This Been Tested?**
Via CI and manually validation in a lot of cases where the CI did not
correctly check things.
Additional catalog item creation tooling for local testing has been
added as well.

**📃 Notes:**
There will be issues in the future but we should get as much working
well as we can.

**✔️ Checklist:**

- [x] ⚖️ My code follows the style guidelines of this project
- [x] 👀 I have performed a self-review of my own code
- [x] #️⃣ I have commented my code, particularly in hard-to-understand
areas
- [x] 📄 I have made corresponding changes to the documentation
- [x] ⚠️ My changes generate no new warnings
- [x] 🧪 I have added tests to this description that prove my fix is
effective or that my feature works
- [x] ⬆️ I increased versions for any altered app according to semantic
versioning

** App addition**

If this PR is an app addition please make sure you have done the
following.

- [ ] 🪞 I have opened a PR on
[truecharts/containers](https://github.com/truecharts/containers) adding
the container to TrueCharts mirror repo.
- [ ] 🖼️ I have added an icon in the Chart's root directory called
`icon.png`

---

_Please don't blindly check all the boxes. Read them and only check
those that apply.
Those checkboxes are there for the reviewer to see what is this all
about and
the status of this PR with a quick glance._
2023-04-11 12:07:17 +02:00
Kjeld Schouten-Lebbing b4a01dcfa3
Port/dependency (#7739)
* use new common

* more porting and add NOTES.txt

* portal

* no message

* remove promtail and tweak dependencies

* bump

* Fixes

* mode

* fix questions

* more questions

* more yaml fixes

* hmm

* move postgresql to stable
2023-03-01 16:48:43 +01:00
kjeld Schouten-Lebbing 58dd16f90b
chore(Postgresql): Move postgresql to a seperate dependency train 2021-11-08 14:34:52 +01:00
renovate[bot] fc8d926fee
chore(deps): update non-major (#1270)
* chore(deps): update non-major

* Commit bumped App Version

Signed-off-by: TrueCharts-Bot <bot@truecharts.org>

Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: TrueCharts-Bot <bot@truecharts.org>
2021-11-07 17:57:54 +01:00
kjeld Schouten-Lebbing dcd5947918
Bulk add targetPort to values.yaml for stable Apps 2021-11-06 22:55:18 +01:00
renovate[bot] fbd5187c52
chore(deps): update non-major (#1265)
* chore(deps): update non-major

* Commit bumped App Version

Signed-off-by: TrueCharts-Bot <bot@truecharts.org>

Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: TrueCharts-Bot <bot@truecharts.org>
2021-11-02 11:25:19 +01:00
renovate[bot] 60aa03a510
chore(deps): update non-major (#1263)
* chore(deps): update non-major

* Commit bumped App Version

Signed-off-by: TrueCharts-Bot <bot@truecharts.org>

Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: TrueCharts-Bot <bot@truecharts.org>
2021-11-01 13:44:28 +01:00
renovate[bot] 2cb0508aa1
chore(deps): update bitnami/postgresql:14.0.0 docker digest to 6737f46 (#1243)
* chore(deps): update bitnami/postgresql:14.0.0 docker digest to 6737f46

* Commit bumped App Version

Signed-off-by: TrueCharts-Bot <bot@truecharts.org>

Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: TrueCharts-Bot <bot@truecharts.org>
2021-10-26 18:15:08 +02:00
renovate[bot] 5eb690069f
chore(deps): update major docker tags (major) (#1235)
* chore(deps): update major docker tags

* Commit bumped App Version

Signed-off-by: TrueCharts-Bot <bot@truecharts.org>

Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: TrueCharts-Bot <bot@truecharts.org>
2021-10-26 16:28:32 +02:00
renovate[bot] 61d524db79
chore(deps): update non-major (#1232)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-10-26 12:25:38 +02:00
Kjeld Schouten-Lebbing 57c433e84a
Removepostgresql migration (#1238)
* remove postgresql migration

* bump
2021-10-26 12:02:13 +02:00
kjeld Schouten-Lebbing 41f212af99
fix(postgresql): fix migration scripting for new major 2021-10-26 11:04:33 +02:00
kjeld Schouten-Lebbing c621f62f53
Ensure old db location for postgresql uses the bad storageClassName 2021-10-20 21:58:10 +02:00
kjeld Schouten-Lebbing 22639c7964
fix(Apps): reenable postgresql migration scripting and bump all to force update 2021-10-20 21:53:30 +02:00
Kjeld Schouten-Lebbing 834479f0db
security(Apps): Improve Snyk hardening advisory (#1208)
* Harden postgresql by removing the migration initcontainer

* Harden initcontainers

* Harden serviceaccounts and RBAC

* hmm

* fix
2021-10-20 13:45:00 +02:00
renovate[bot] 0aee478a94
chore(deps): update non-major (#1185)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-10-20 09:56:16 +02:00
renovate[bot] 8bc56fa8fd
chore(deps): update non-major (#1174)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-10-19 20:25:02 +02:00
renovate[bot] 8d08cabc03
chore(deps): update non-major (#1122)
* chore(deps): update non-major

* Commit bumped App Version

Signed-off-by: TrueCharts-Bot <bot@truecharts.org>

Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: TrueCharts-Bot <bot@truecharts.org>
2021-10-12 11:31:03 +02:00
Kjeld Schouten-Lebbing 3cd8efc2b6
(feat) Update Apps to use common-postgresql hooks (#1114)
* (feat) bump common to use new common postgresql-hooks

* bump postgresql as well

* bump yet again

* also process gitea

* sogo

* also add adaptations to gitea

* bump postgresql

* bump postgresql yet again

* revert central defined existing secret

* bump common... again

* bumps

* fix vaultwarden

* encode authelia dbpassword secret correctly

* remove useless container from nextcloud config

* some cleanup

* use lookup to grab the secret for authelia

* try getting authelia to work

* Fix quoting issues for autheliadb
2021-10-10 01:20:01 +02:00
kjeld Schouten-Lebbing 8f2f877825
(chore) Bump postgresql again to try to get things working correctly. 2021-10-09 23:12:15 +02:00
renovate[bot] 38159dc480
chore(deps): update non-major (#1098)
* chore(deps): update non-major

* Commit bumped App Version

Signed-off-by: TrueCharts-Bot <bot@truecharts.org>

Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: TrueCharts-Bot <bot@truecharts.org>
2021-10-05 13:03:37 +02:00
renovate[bot] f4be86590a
chore(deps): update bitnami/postgresql:13.4.0 docker digest to 33c276d (#1055)
* chore(deps): update bitnami/postgresql:13.4.0 docker digest to 33c276d

* Commit bumped App Version

Signed-off-by: TrueCharts-Bot <bot@truecharts.org>

Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-29 10:21:12 +02:00
renovate[bot] 8b5cb03416
chore(deps): update non-major (#1048)
* chore(deps): update non-major

* Commit bumped App Version

Signed-off-by: TrueCharts-Bot <bot@truecharts.org>

Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-28 09:40:11 +02:00
renovate[bot] 4883b815e6
chore(deps): update non-major (#1046)
* chore(deps): update non-major

* Commit bumped App Version

Signed-off-by: TrueCharts-Bot <bot@truecharts.org>

Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-28 08:34:12 +02:00
Kjeld Schouten-Lebbing acf510ea13
(feat) Standardise and Harden default app securitycontext (#1028)
* Apply security hardened defaults to values.yaml for all apps

* Add default common securityContext to all apps

* Adjust securityContext defaults in questions.yaml, according to values.yaml

* Add default common podSecurityContext to all apps

* Clean whitespace

* Clean more whitespace

* Adjust podSecurityContext defaults in questions.yaml, according to values.yaml

* fix pgadmin

Co-authored-by: Stavros kois <s.kois@outlook.com>
2021-09-26 20:05:21 +02:00
renovate[bot] a52bc98bdf
chore(deps): update non-major (#1015)
* chore(deps): update non-major

* Commit bumped App Version

Signed-off-by: TrueCharts-Bot <bot@truecharts.org>

Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-21 10:55:30 +02:00
renovate[bot] d976ce2065
chore(deps): update non-major (#1013)
* chore(deps): update non-major

* Commit bumped App Version

Signed-off-by: TrueCharts-Bot <bot@truecharts.org>

Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-21 10:41:09 +02:00
renovate[bot] f2cf03eda3
chore(deps): update non-major (#987)
* chore(deps): update non-major

* Commit bumped App Version

Signed-off-by: TrueCharts-Bot <bot@truecharts.org>

Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-14 22:38:56 +02:00
Renovate Bot 2c5919d42f
chore(deps): update non-major 2021-09-13 14:12:56 +02:00
Kjeld Schouten-Lebbing 238e2bc0c6
chore: Use bitnami instead of stock postgresql container (#960)
* chore: Setup all apps to use bitnami instead of stock postgresql container

* Actually don't bump major as there is no breaking change (as people using it will default to the migration initscript)
2021-09-11 20:58:37 +02:00
Renovate Bot 1f4828c19b
chore(deps): update non-major
(cherry picked from commit b66e04fe8f)
2021-09-11 13:56:20 +02:00
kjeld Schouten-Lebbing ced7d182c2
fix some dockertags being wrong 2021-09-11 13:52:00 +02:00
Kjeld Schouten-Lebbing a8670a1482
feat: pin all container references to digests (#963) 2021-09-11 13:00:39 +02:00
Stavros Kois a7b3ce0e23
fix: make sure podSecurityContext is included in both SCALE and Helm installs (#956)
* remove strategy

* move runAsNonRoot to securityContext

* Add podSecurityContext and securityContext to values pt1

* Add podSecurityContext and securityContext to values pt2

* Add podSecurityContext and securityContext to values pt3

* Add podSecurityContext and securityContext to values pt4

* Add podSecurityContext and securityContext to values pt5

* fix empty lines

* Remove secCont from NC - values

* fixPermissions for some apps

* on apps with perm prob, set fsGroup to 0 also
2021-09-10 20:10:04 +02:00
kjeld Schouten-Lebbing 1c5b41539f
allow tpl for postgresql secret 2021-08-27 16:50:19 +02:00
renovate[bot] 8f63645550
chore(deps): update minor docker tags (#775)
* chore(deps): update minor docker tags

* Commit bumped App Version

Signed-off-by: TrueCharts-Bot <bot@truecharts.org>

Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: TrueCharts-Bot <bot@truecharts.org>
2021-08-17 16:32:15 +02:00
kjeld Schouten-Lebbing ae1194c988
Temporarily disable postgresql backup on upgrade system just to be sure. 2021-08-17 11:52:34 +02:00
kjeld Schouten-Lebbing 866a1a0a17
try more agressive testing settings for postgresql 2021-08-14 11:12:26 +02:00
kjeld Schouten-Lebbing 175b33aeb2
simplify postgresql folder setup 2021-08-13 23:43:13 +02:00
Kjeld Schouten-Lebbing 9808021cbc
initial work on single-container postgresql app (#758)
* initial work on single-container postgresql app

* update

* some more polish

* use new common version for postgresql

* fix a mistake

* moar fixup

* whoops

* fixes

* more fixing

* add pre-upgrade backup hook

* also add backup storage to questions.yaml
2021-08-12 13:55:45 +02:00