Commit Graph

144 Commits

Author SHA1 Message Date
kjeld Schouten-Lebbing d44637edbe
add jdbc type postgres url support to common 2021-10-15 17:19:06 +02:00
Kjeld Schouten-Lebbing eaf70889a2
feat(common): simplify postgresql url generator (#1146) 2021-10-15 13:42:20 +02:00
kjeld Schouten-Lebbing 0e44b3bd97
(fix) add Nextcloud's prefered database url to common 2021-10-10 00:32:53 +02:00
kjeld Schouten-Lebbing 799baea4dc
seperate setup and post-setup to prevent double setup runs on common chart 2021-10-10 00:03:07 +02:00
kjeld Schouten-Lebbing fbb340e2d0
(chore) restructure common setup templates 2021-10-09 23:43:48 +02:00
Kjeld Schouten-Lebbing 2679fc1108
(feat) move postgresql init and password-generator to common (#1113)
* Move Postgresql initcontainer to common

* bump common

* Handle postgres password generation in common and inject into values.yaml for use in Apps

* (refactor) adapt apps using postgresql to common init and password generator

* no message
2021-10-09 19:24:45 +02:00
Kjeld Schouten-Lebbing 6b96a3662c
(feat) allow for the default middlewares to be disabled on ingress. (#1096)
* Edit common to allow for the default middlewares to be disabled on ingress.

* add it on all apps as an expert option

* fix hostPath mistake in tests while at it
2021-10-05 00:39:13 +02:00
Kjeld Schouten-Lebbing 308ba8accf
(feat) Dynamically set PGID, GID and GROUP_ID (#1091)
* base PGID on fsGroup

* also remove PGID from questions.yaml

* remove mistake

* small fix

* fix first test

* fix linting

* always set PUID to 568

* use quotes for env vars (obviously)
2021-10-04 12:31:56 +02:00
Kjeld Schouten-Lebbing f3c62cd686
remove crooked test (+1 squashed commits) (#1087)
Squashed commits:

[a5217867f] (fix) ensure that ports are valid before trying to use them for setting the capability
2021-10-03 16:29:41 +02:00
Kjeld Schouten-Lebbing 0c3e9d2baa
(feat) automaticly set NET_BIND_SERVICE based on (target)port in services (#1085) 2021-10-03 15:17:55 +02:00
kjeld Schouten-Lebbing 7600caaba0
(fix) simplify and correct openvpn VPN_AUTH envvar generation 2021-09-29 17:32:24 +02:00
Kjeld Schouten-Lebbing cfdffdb3be
(feat) add CodeServer addon and addon improvements (#1059)
* simplify addons to not require manually entered volumemounts, just mount them all.

* simplify addons

* cleanup promtail and codeserver

* fix mistake in codeserver

* try to add codeserver runtest

* add netshoot runtest

* fix codeserver ports

* different codeserver port for integrationt est

* bump common
2021-09-29 15:10:26 +02:00
Kjeld Schouten-Lebbing 2b5fe533f6
(feat) Add Promtail and Netshoot addons (#1058)
* add promtail addon

* Add Netshoot addon

* update common to include envList for addons

* Add basic promtail and netshoot unittests
2021-09-29 14:18:57 +02:00
Kjeld Schouten-Lebbing 88b1719d32
done (+42 squashed commit) (#1053)
Squashed commit:

[8058e6aba] 1 error left

[b0157b252] 2 errors

[7fa494907] 4 errors

[03139391e]  6 failures, 4 errors

[7f017ea23] 12 errors

[3e9ad758d] 0 failures, 13 errors

[e24a3cb3e] 3 failures, 13 errors

[6edcaa655] 4 failures 14 errors

[9623bda57] 6 failures, 13 errors

[04c35c995] 4 failed 22 errors

[5f5335c15] 9 failures

[9a33540e2] down to 20 failures

[0e7b73b49] remove old tests

[5cc6d11b7] fixup the resources

[8c508d45a] some more progress

[4acef3c3b] some more work

[85cdb5d06] some ports cleanup

[1987ac2ec] lint before unit

[6fa221789] enable unit tests

[c212b695d] other name

[b78594518] common test name fix

[ef6597e79] indent

[8cbcfb5e4] common test rename

[1ca838c16] seperate common tests

[ef052b022] create two seperate job for common testing

[67eb0e9b3] use devcontainer for release shizzle

[0c47c482b] make it a sudo

[4d8900b16] force install jq

[9660cdd47] try something else

[e2b611917] bump common to run tests (to fix them)

[277241bbf] only use the new devcontainer for the release tests for now...

[9c7b68e0f] Revert "remove setup chart testing action"

This reverts commit 6987914587a58ab5a52a05b836d60ef91f1619d5.

[444914311] Revert "use integrated k3d"

This reverts commit d9bcb2f35d154b0afe1eb851729c37789b6ba0ea. (+6 squashed commit)

Squashed commit:

[313446184] Revert "correct k3s version"

This reverts commit 81fa8a43c41c2449b7411e0d59a3c2bbe0aef1ea.

[41b4d4795] Revert "version name tryout"

This reverts commit bbb8dcead9f9426872390b8f89b1fd0e661534bb.

[b64df97a0] Revert "change version"

This reverts commit 8080395dc80e606769ad9790b35d35fac4d1d3ed.

[ed63220d4] Revert "use k3s kubectl"

This reverts commit ea81735d939e838ad595835ea09b54bff817dd83.

[6267a2908] Revert "use normal kubectl"

This reverts commit 216d3799111d47f65dd20dd85ccb8fbc586a9c2b.

[f48ddde73] Revert "try to set kubectl context"

This reverts commit a5e8a532c5620e0d9d4cb7a53a371ba200265612.

[a5e8a532c] try to set kubectl context

[216d37991] use normal kubectl

[ea81735d9] use k3s kubectl

[8080395dc] change version

[bbb8dcead] version name tryout

[81fa8a43c] correct k3s version

[d9bcb2f35] use integrated k3d

[698791458] remove setup chart testing action

[5bd7cf01d] bump common-test
2021-09-29 00:11:52 +02:00
kjeld Schouten-Lebbing 3dd449cc8e
(fix) correct autopermissions indent error in common 2021-09-26 22:37:15 +02:00
kjeld Schouten-Lebbing 842cf0a65f
(chore) also use s6 readonlyroot mitigation when running asNonRoot 2021-09-26 11:20:08 +02:00
Kjeld Schouten-Lebbing d9dffc7952
fix common test mistake (#1031)
* fix common test mistake

* configfile.enabled

* VPN auto permissions fix

* trigger common-test install

* more thorough fix

* fix test to use sonarr instead of homerr

* use a super simple container

* try tweaking a bit to allow run as nonroot

* try fixing tests

* fix tests... again...

* fix... AGAIN...
2021-09-25 19:23:43 +02:00
Kjeld Schouten-Lebbing 37963de155
Add ReadOnlyRoot mitigation for S6 overlay (#1030)
* Add ReadOnlyRoot mitigation for S6 overlay

* try to fix some tests
2021-09-25 15:11:51 +02:00
Kjeld Schouten-Lebbing 2db56c1e42
Fix remaining VPN addon issues (#1029)
* Fix remaining VPN addon issues

* fix minor common-test issue
2021-09-25 14:40:14 +02:00
Kjeld Schouten-Lebbing 0fb8f8bb90
fix: make sure autopermissions sets the group owner correctly (#994)
* fix: make sure autopermissions sets the group owner correctly

* add test fix
2021-09-14 23:59:19 +02:00
kjeld Schouten-Lebbing ab1b39b88e
cleanup authentication credentials for OpenVPN 2021-09-13 21:18:11 +02:00
kjeld Schouten-Lebbing 0970b3a8d3
fix: ensure wireguard env vars get created 2021-09-13 09:25:38 +02:00
kjeld Schouten-Lebbing 9ccdfcb7d8
fix: nuke all VPN volumes that we don't use (yet) out of Common 2021-09-12 22:49:18 +02:00
kjeld Schouten-Lebbing e15b80e105
fix: completely remove unused volumes and correctly enable used volumes for VPN 2021-09-12 22:30:05 +02:00
kjeld Schouten-Lebbing b34f57e386
fix: remove old configmap and secret references for VPN config/scripts 2021-09-12 22:10:48 +02:00
kjeld Schouten-Lebbing d072cb3b3a
fix: correct vpn securityContext 2021-09-12 21:51:10 +02:00
Kjeld Schouten-Lebbing a6037c62fa
fix: ensure annotationLists and labelLists don't get processed for disabled objects (#971) 2021-09-12 20:28:22 +02:00
Kjeld Schouten-Lebbing b660bbf457
improv: improve dns and vpn values.yaml syntaxis (#970)
* improv: improve dns and vpn values.yaml syntaxis

* hmm

* fix tests

* no message
2021-09-12 17:39:01 +02:00
kjeld Schouten-Lebbing 3b8005b04e
fix: remove duplicate securitycontext from autopermissions 2021-09-11 12:08:06 +02:00
Kjeld Schouten-Lebbing 00e9bd819f
refactor: change image layout to enable renovate updates of sidecarts (#955)
* some cleanup for common (+6 squashed commit)

Squashed commit:

[43a501de8] bump sogo

[62c009b63] some tryouts

[6840fafdb] try to fix rendering of new format

[003d3c81b] move seperate apps to new format and fix mistake in common

[752ae2c68] more work on the image refactor

[edfc28533] refactor common images

* sogo scale differently

* slight release build fix

* fix issues with release script and multiple tags
2021-09-10 16:57:08 +02:00
Kjeld Schouten-Lebbing 982297ec17
fix: move runAsNonRoot to container securityContext to allow root sidecarts (#954)
* fix: move runAsNonRoot to container securityContext to prevent sidecarts from being affected

* also bump some versions...

* also override some of the problematic settings in common.yaml

* whoops
2021-09-10 15:26:10 +02:00
Kjeld Schouten-Lebbing 3c8418b803
feat: have VPN use a hostPath for the configfile instead of configmap (#953)
* feat: have VPN use a hostPath for the configfile instead of configmap

* whoopsies

* fix some tests and actually append configFile mount to persistence

* addon -> addons
2021-09-10 14:07:50 +02:00
Kjeld Schouten-Lebbing e0e0a4a2f2
refactor: Restructure common init and additional container layout to dicts (#950)
* refactor: Restructure common init and additional container layout to dicts

BREAKING CHANGE
2021-09-09 21:48:43 +02:00
Kjeld Schouten-Lebbing 5cb0b239e0
Feat: port addons from k8s-at-home to common (#948)
* Feat: port addons from k8s-at-home to common

* use an older version of upstream
2021-09-09 20:55:33 +02:00
Kjeld Schouten-Lebbing cc1cde7fdc
fix: ensure supplementalgroups when using devices are actually added (#942) 2021-09-09 14:20:26 +02:00
Kjeld Schouten-Lebbing 0aa2131b28
helm test revert (+1 squashed commits) (#931)
Squashed commits:

[36ca93235] actually finish echo command (+8 squashed commit)

Squashed commit:

[27c3e9d63] fix typo

[8daa4395e] use name not a derivitive

[d8a24b1d8] force a testrun

[edacc59e4] give more perms

[9706a9860] bump

[09f9d9f4e] Code thining on common

[8adfddf2b] try moving autopermissions to initcontainer

[42c7f76a4] fix: have autopermissions use command instead of arg
2021-09-08 22:14:04 +02:00
kjeld Schouten-Lebbing 516d520f25
Correctly set common group write permission when auto-permissions is enabled and add incubator pihole app
Also updates ports list
2021-09-04 17:42:55 +02:00
Kjeld Schouten-Lebbing 353a4337fe
move default middleware location to default namespace (#890) 2021-09-04 11:07:09 +02:00
kjeld Schouten-Lebbing f1dbdf0059
Bump some incubator apps and remove common test code. Also render traefik portalhook as tpl 2021-09-04 00:12:58 +02:00
Kjeld Schouten-Lebbing ffde8c7482
update portal configmap code (#889)
* update portal configmap code

* remove accidental common-test change
2021-09-04 00:01:55 +02:00
kjeld Schouten-Lebbing f90be05a2f
fix an RBAC bug in common 2021-09-02 15:29:24 +02:00
Kjeld Schouten-Lebbing 29615ca832
Add labels to more common objects and add names.fqdn (#884)
* Add labels to more common objects and add names.fqdn

* whoops copy pasta mistake
2021-09-02 14:41:22 +02:00
Kjeld Schouten-Lebbing 6831d56ee4
remove externalInterfaces + add RBAC and networkPolicy support (#882)
* remove externalInterfaces + add RBAC and networkPolicy support

* mistaken double end

* cleanup values a bit

* fix a small mistake

* That was the wrong mistake
2021-09-02 12:52:34 +02:00
kjeld Schouten-Lebbing e67bea1253
small authelia bugfix (+1 squashed commits)
Squashed commits:

[3134d5106] fix statefullset storage on TrueNAS and fix statefullset default for OpenLDAP
2021-08-31 20:55:44 +02:00
kjeld Schouten-Lebbing 522267d028
Fix portsList issues on common 2021-08-30 13:37:37 +02:00
Kjeld Schouten-Lebbing f5055b1410
More prototypeGui work (#849)
* allow additional Ingress

* Add serviceList and portsList to common

* add portslist GUI

* add additional services GUI

* bump

* Add custom-app App

* use the custom service app as a canary for Common mistakes

* fix typo in custom-app
2021-08-30 12:56:36 +02:00
Kjeld Schouten-Lebbing 25a98b4d69
add labels and annotations to questions.yaml and revert oopsie (+13 squashed commit) (#843)
Squashed commit:

[5ffcf238] Allow more lists

[d185c0ed] Test annotationsList on persistence

[6d8afee1] Allow setting ingressclass on ingress

[a9dccd41] fix again

[4a54beb8] fix broken servicetest again

[62e85336] Fix mistake

[e45db47b] remove services annotation test due to random annotations, fix new PVC tests

[745a11bd] Add podAnnotationsList, podLabelsList, controllerAnnotationsList and controller:abelsList,

[5d075f33] Add PVC test for labels and retain

[43b64ddc] Fix PVC error

[229143ed] Update common

[d551d80f] add gracePeriodSeconds

[350e6885] Add HPA GUI
2021-08-30 00:28:24 +02:00
kjeld Schouten-Lebbing 1f8bfb956d
[common] Always rebuild service objects on update 2021-08-27 20:05:00 +02:00
kjeld Schouten-Lebbing 17921206df
patch common again 2021-08-27 17:09:34 +02:00
kjeld Schouten-Lebbing aea019435c
another common bugfix 2021-08-27 16:41:24 +02:00
kjeld Schouten-Lebbing 2b109ea7e0
fix common indentation bug 2021-08-27 15:29:47 +02:00
kjeld Schouten-Lebbing c28f6a8206
Common typo fix 2021-08-27 15:15:53 +02:00
Kjeld Schouten-Lebbing 91a4659c56
[common] allow the use of tpl's for envFrom (#822)
* allow the use of tpl's for envFrom

* actuall this is a feature increase
2021-08-27 15:05:33 +02:00
Kjeld Schouten-Lebbing 579887ccf6
try to fix pre-install quoting errors (#819)
* try to fix pre-install quoting errors

* split command and args

* expected command

* sh-bash mistake

* some work on permissions and quoting

* fix test mistake

* another test mistake

* again
2021-08-26 21:20:31 +02:00
kjeld Schouten-Lebbing b938a7099b
fix supplementalgroups typo 2021-08-24 12:36:47 +02:00
Kjeld Schouten-Lebbing e3f5d51c6c
Fixing privileged and supplementalgroup (#803)
* Enable permissive when using deviceList

* Cleanup the renovate bump

* restructure some overrides

* remove custom psc

* append subgroups based on gpu/device settings

* Fixing a bugs and adding some annotations

* fixing some bugs and add ingressList

* slight different var definition

* fix again

* bump minor version as features are added
2021-08-24 12:28:50 +02:00
kjeld Schouten-Lebbing 77c53de558
Fix bug in common when using ExternalName 2021-08-23 22:10:44 +02:00
Kjeld Schouten-Lebbing 6a0106709e
only set group when setting permissions (#783)
* only set group when setting permissions

* fix test

* another test fix
2021-08-18 16:47:38 +02:00
TrueCharts-Bot ae833f9a09 Daily Housekeeping
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2021-08-16 14:43:06 +00:00
kjeld Schouten-Lebbing 2eb2d61a2f
update common to support tpl for fromsecret envs 2021-08-12 12:29:23 +02:00
Kjeld Schouten-Lebbing a29b3bcc75
Initial work on External services (#754)
* adapt services to allow ExternalIP and ExternalName type servces

* Also create endpoints for externalIP type services

* bump common version

* typo fix
2021-08-10 16:11:15 +02:00
Kjeld Schouten-Lebbing 7bae3fec0a
Update _portal.tpl (#744)
* Update _portal.tpl

* Update Chart.yaml
2021-08-09 19:41:25 +02:00
kjeld Schouten-Lebbing b9c22db29e
fix statefullset volumemount dicts not being processed 2021-07-06 14:03:31 +02:00
Kjeld Schouten-Lebbing 69f1ad7ce5
Allow dict being used for statefull set persistence settings (#669)
* Allow dict being used for statefull set persistence settings

* bump common version
2021-07-06 13:53:15 +02:00
Kjeld Schouten-Lebbing 8523f23076
management utilities (#661)
* add SCALE support for statefullset storageclass

* add phpldapadmin

* ad pgadmin and tweak phpldapdamin

* move them directly into stable

* some small patches

* pgadmin uses port 80 by default not 8080

* fix tags

* try 8080 again

* 80 with env vars

* try something else

* update readme
2021-07-05 22:44:33 +02:00
Kjeld Schouten-Lebbing 224efec466
Traefik fixes (#659)
* fix chain middleware for traefik

* try adding portal button fix to dynamically fetch traefik port

* try hook quote

* correctly quote namespace name

* common version bump
2021-07-05 18:13:44 +02:00
Kjeld Schouten-Lebbing b5db44775d
try fixing probes a bit (#653)
* try fixing probes a bit

* port kah probe changes
2021-07-04 13:05:43 +02:00
Kjeld Schouten-Lebbing dd3b299e2b
create a way of not mounting volumes (#650)
* create a way of not mounting volumes

* fix mistake

* also noMount for statefull sets
2021-07-03 11:16:55 +02:00
kjeld Schouten-Lebbing 7ddf11f18e
Fix scaleCert naming inconsistencies on common 2021-07-01 12:31:36 +02:00
kjeld Schouten-Lebbing 3c2d007017
Fix scaleCert secret in common 2021-07-01 11:41:31 +02:00
kjeld Schouten-Lebbing 5e066134b7
Default websecure entrypoint and default enable tls on websecure entrypoint 2021-06-30 17:19:32 +02:00
kjeld Schouten-Lebbing a8ea08cdec
patch middleware generation on common 2021-06-30 16:30:17 +02:00
Kjeld Schouten-Lebbing 85319fd8d9
patch common ingress service name bug (#625) 2021-06-30 15:31:48 +02:00
Kjeld Schouten-Lebbing 373c834d35
Add traefik middleware support (#601)
* add basic middleware chain to traefik

* Try some idea's for common ingress middleware support

* create middleware namespace as pre-install hook

* rename namespace file

* Add additional list with middlewares and tune the output a bit

* Add basic auth middleware spawner

* add forwardAuth support

* polish middleware names and add config examples

* initial go at traefik middleware GUI elements

* fix labels

* more missing labels
2021-06-30 12:56:17 +02:00
Kjeld Schouten-Lebbing adff414b8e
use TCP probe by default and add docs for probetype (#594)
* use TCP probe by default and add docs for probetype

* small fixup
2021-06-26 09:39:58 +02:00
Kjeld Schouten-Lebbing 4e3353a48f
Fix a bug in storage forceName setting (#574)
* Fix a bug in storage forceName setting

* whoops
2021-06-20 10:57:12 +02:00
kjeld Schouten-Lebbing a0962a947f
Fix probe bug in common chart 2021-06-14 18:43:46 +02:00
Kjeld Schouten-Lebbing 3ff41ac29e
Dynamic polling (#560)
* chore(deps): update helm chart common to v6.3.1

* Fix KMS and Unifi

* try a collabora fix

* Temporarily disable nzbget probes waiting for next common

* try if firefly-iii wants https

* Fix a linting error on nzbget and path issues with jackett/prototypeGUI also disable for podgrab for now (just like NZBget, till next common)

* try polling the login path for firefly

* fireflyiii back to http

* APP_KEY typo and useless security context

* again

* fireflyiii fix broken db setup

Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-06-14 17:53:38 +02:00
Kjeld Schouten-Lebbing 722ba2c5db
introduce dynamic probes for common-chart (#557)
* introduce dynamic probes for common-chart

* whoops

* deal with cases where no protocol is set for probes
2021-06-14 12:29:10 +02:00
Kjeld Schouten-Lebbing 614790c8cc
Port some changes from KAH common 3.1.0 (#556) 2021-06-14 11:24:24 +02:00
kjeld Schouten-Lebbing 70a7b582fd
ensure we can override the complete PVC name for things like DB's, without prefix or suffix 2021-06-11 12:36:24 +02:00
kjeld Schouten-Lebbing 890b7c005f
Add deviceList persistence-list for device-mounting purposes to common-chart 2021-06-11 01:41:40 +02:00
Kjeld Schouten-Lebbing 3ecc210d6b
Port recent KAH changes (#548)
* port 3.0.1 fixes from KAH

* more naming fixes ported from kah

* port all latest KAH fixes

* port new tests from KAH

* Polishing and fixes

* update common-test version
2021-06-10 23:52:55 +02:00
kjeld Schouten-Lebbing d7c9ae7fa6
fix wrong references for externalInterfaces 2021-05-29 13:15:53 +02:00
Kjeld Schouten-Lebbing 91c199f2ed
Fix hostPathMounts and add install test (#527)
* Fix hostPathMounts and add install test

* whoops fix
2021-05-28 23:06:40 +02:00
Kjeld Schouten-Lebbing 7f52e732c1
port external Interfaces from iXOfficial (#525)
* port external Interfaces from iXOfficial

* Fix, Clean and Polish
2021-05-28 01:22:40 +02:00
kjeld Schouten-Lebbing 7dc5fcacb1
more small common fixes 2021-05-25 00:53:35 +02:00
kjeld Schouten-Lebbing 2d94d7e10d
remove small mistake from common chart 2021-05-25 00:44:58 +02:00
Kjeld Schouten-Lebbing a837947884
Storage Tweaking and bugfixing (#506)
* first work for allowing ramdisk usage

* add bump tooling.
Fixes: #157

* bump minor versions due to adding ramdisk emptydir to persistence

* allow disabling persistent storage

* actually push major as it is breaking in theory

* cleanup hpm example code

* Allow custom storageClass and fix bug using the wrong storageClass

* try fixing gabs

* cleanup

* update tests

* revert some permission job changes

* reverse some of the 3.0 common incompatible bitwarden changes
2021-05-24 21:17:29 +02:00
kjeld Schouten-Lebbing 30021f51fe
small set of common indent fixes 2021-05-22 22:46:23 +02:00
kjeld Schouten-Lebbing 36fcfa18c4
Small common touchup 2021-05-19 22:08:21 +02:00
Kjeld Schouten-Lebbing d3033f71fb
port most recent changes from KAH (#478)
* port most recent changes from KAH

* add general shizzle

* add rests of go tests

* whoops

* hmm

* make pre-release wait more

* try another synthaxis

* okey...

* test-> tests

* Make unittests a bit more usefull
2021-05-19 20:51:35 +02:00
Kjeld Schouten-Lebbing 196d4d8327
Major Common cleanup + services overhaul (#448)
* Major Common cleanup + services overhaul

* add resources test and scaleGPU support

* implement cleaner ingress, remove externalService and remove ingressRoute

* cleanup service test whoopsies

* fix some more test errors

* Fix ingress tests

* oops

* redesign ixcert system for ingress

* test multiple ixcert-secrets support

* increate tests versioning

* add test for pvc name override
2021-05-10 14:13:17 +02:00
Kjeld Schouten-Lebbing ffc823bccc
Restructure repo to be a little cleaner (#445) 2021-05-09 18:11:00 +02:00