Commit Graph

219 Commits

Author SHA1 Message Date
Kjeld Schouten-Lebbing 68a5032dad
(chore) move resource(limits) to an include for easier maintenance (#1034) 2021-09-26 20:44:02 +02:00
Kjeld Schouten-Lebbing acf510ea13
(feat) Standardise and Harden default app securitycontext (#1028)
* Apply security hardened defaults to values.yaml for all apps

* Add default common securityContext to all apps

* Adjust securityContext defaults in questions.yaml, according to values.yaml

* Add default common podSecurityContext to all apps

* Clean whitespace

* Clean more whitespace

* Adjust podSecurityContext defaults in questions.yaml, according to values.yaml

* fix pgadmin

Co-authored-by: Stavros kois <s.kois@outlook.com>
2021-09-26 20:05:21 +02:00
Kjeld Schouten-Lebbing 2db56c1e42
Fix remaining VPN addon issues (#1029)
* Fix remaining VPN addon issues

* fix minor common-test issue
2021-09-25 14:40:14 +02:00
kjeld Schouten-Lebbing ab1b39b88e
cleanup authentication credentials for OpenVPN 2021-09-13 21:18:11 +02:00
Kjeld Schouten-Lebbing 642cf20b7b
feat: Add VPN addon and move some config to includes (#973)
* add addon include to all apps

* move groups to include

* move controller to includes

* move container config to include

* move serviceList to include

* move persistence list to includes

* move ingressList to includes

* fix appdaemon digest

* move deviceList to includes and add to deconz

Fixes #967 related to #966
2021-09-13 12:58:34 +02:00
kjeld Schouten-Lebbing 90ee94cf11
move more standard questions.yaml portions to includes 2021-09-13 11:14:23 +02:00
kjeld Schouten-Lebbing 0390a88229
Move VPN section of testbed to include 2021-09-13 10:46:07 +02:00
Kjeld Schouten-Lebbing a8670a1482
feat: pin all container references to digests (#963) 2021-09-11 13:00:39 +02:00
Stavros Kois a7b3ce0e23
fix: make sure podSecurityContext is included in both SCALE and Helm installs (#956)
* remove strategy

* move runAsNonRoot to securityContext

* Add podSecurityContext and securityContext to values pt1

* Add podSecurityContext and securityContext to values pt2

* Add podSecurityContext and securityContext to values pt3

* Add podSecurityContext and securityContext to values pt4

* Add podSecurityContext and securityContext to values pt5

* fix empty lines

* Remove secCont from NC - values

* fixPermissions for some apps

* on apps with perm prob, set fsGroup to 0 also
2021-09-10 20:10:04 +02:00
Stavros Kois 7998db2234
feat: Add regex validation to resources CPU and RAM for all apps (#935)
* Adds RAM resource regex validation

* Adds CPU resource regex validation
2021-09-09 01:08:11 +02:00
kjeld Schouten-Lebbing 85b84b7af0
Fix copyright header and common docs copying 2021-08-31 12:21:54 +02:00
kjeld Schouten-Lebbing 48f6102ac9
fix a small mistake and limit common updates to tuesday 2021-08-31 12:05:39 +02:00
kjeld Schouten-Lebbing e250c0a0b8
generate common docs (+1 squashed commits)
Squashed commits:

[0f1f76b1f] again
2021-08-31 11:41:59 +02:00
kjeld Schouten-Lebbing b6bfd838da
Add default values.yaml documentation and remove version from docs to prevent version bloat 2021-08-31 11:07:48 +02:00
kjeld Schouten-Lebbing 91990dcac4
don't include deprication warning in app-readme due to whitespace issues 2021-08-19 12:23:08 +02:00
kjeld Schouten-Lebbing 1e7d1d5083
Fix some docs bugs 2021-08-19 12:15:14 +02:00
kjeld Schouten-Lebbing 06ac2acd58
fix app-readme template 2021-08-19 12:00:08 +02:00
kjeld Schouten-Lebbing 6747c12783
add app-readme generation again (it got lost somehow) 2021-08-19 11:55:12 +02:00
kjeld Schouten-Lebbing ff9eb17b28
cleanup tools, templates and workflows 2021-08-19 11:47:00 +02:00