Commit Graph

146 Commits

Author SHA1 Message Date
kjeld Schouten-Lebbing 665d7282df
revert /var/run mount fix on common 2021-09-26 12:08:10 +02:00
TrueCharts-Bot 1f42ebdd4a Commit released Helm Chart and docs for TrueCharts
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-26 09:42:40 +00:00
Kjeld Schouten-Lebbing 744d8060b9
(chore) bump common to trigger release 2021-09-26 11:40:37 +02:00
kjeld Schouten-Lebbing 842cf0a65f
(chore) also use s6 readonlyroot mitigation when running asNonRoot 2021-09-26 11:20:08 +02:00
kjeld Schouten-Lebbing 4076def32a
(fix) limit the varrun emptyDir to s6 overlay related content 2021-09-26 11:19:35 +02:00
TrueCharts-Bot 72871fb371 Commit released Helm Chart and docs for TrueCharts
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-25 18:34:03 +00:00
Kjeld Schouten-Lebbing 4ea3185e38
add a special /var/run tmpfs mountpoint to common (#1032)
* add a special /var/run tmpfs mountpoint to common

* common-test version in tests fix
2021-09-25 20:31:39 +02:00
TrueCharts-Bot 15ad9fe2e9 Commit released Helm Chart and docs for TrueCharts
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-25 17:38:31 +00:00
kjeld Schouten-Lebbing 961b2bfbc3
bump common 2021-09-25 19:34:45 +02:00
Kjeld Schouten-Lebbing d9dffc7952
fix common test mistake (#1031)
* fix common test mistake

* configfile.enabled

* VPN auto permissions fix

* trigger common-test install

* more thorough fix

* fix test to use sonarr instead of homerr

* use a super simple container

* try tweaking a bit to allow run as nonroot

* try fixing tests

* fix tests... again...

* fix... AGAIN...
2021-09-25 19:23:43 +02:00
TrueCharts-Bot 63c8c0e80d Commit released Helm Chart and docs for TrueCharts
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-25 13:14:23 +00:00
Kjeld Schouten-Lebbing 37963de155
Add ReadOnlyRoot mitigation for S6 overlay (#1030)
* Add ReadOnlyRoot mitigation for S6 overlay

* try to fix some tests
2021-09-25 15:11:51 +02:00
TrueCharts-Bot 9bd2cf2de1 Commit released Helm Chart and docs for TrueCharts
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-25 12:56:43 +00:00
Kjeld Schouten-Lebbing 2db56c1e42
Fix remaining VPN addon issues (#1029)
* Fix remaining VPN addon issues

* fix minor common-test issue
2021-09-25 14:40:14 +02:00
TrueCharts-Bot c0aa278e27 Commit released Helm Chart and docs for TrueCharts
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-25 10:16:43 +00:00
kjeld Schouten-Lebbing 483d29ee0e
harden default security options for common 2021-09-25 12:10:24 +02:00
TrueCharts-Bot fdd666d462 Commit released Helm Chart and docs for TrueCharts
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-14 22:02:11 +00:00
Kjeld Schouten-Lebbing 0fb8f8bb90
fix: make sure autopermissions sets the group owner correctly (#994)
* fix: make sure autopermissions sets the group owner correctly

* add test fix
2021-09-14 23:59:19 +02:00
TrueCharts-Bot 2ecefa844d Commit released Helm Chart and docs for TrueCharts
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-14 20:45:30 +00:00
renovate[bot] f2cf03eda3
chore(deps): update non-major (#987)
* chore(deps): update non-major

* Commit bumped App Version

Signed-off-by: TrueCharts-Bot <bot@truecharts.org>

Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-14 22:38:56 +02:00
kjeld Schouten-Lebbing ab1b39b88e
cleanup authentication credentials for OpenVPN 2021-09-13 21:18:11 +02:00
TrueCharts-Bot bc9b5c4938 Commit released Helm Chart and docs for TrueCharts
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-13 07:37:44 +00:00
kjeld Schouten-Lebbing 0970b3a8d3
fix: ensure wireguard env vars get created 2021-09-13 09:25:38 +02:00
TrueCharts-Bot 49feb48e21 Commit released Helm Chart and docs for TrueCharts
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-12 20:51:22 +00:00
kjeld Schouten-Lebbing 9ccdfcb7d8
fix: nuke all VPN volumes that we don't use (yet) out of Common 2021-09-12 22:49:18 +02:00
TrueCharts-Bot 34abe2bb4d Commit released Helm Chart and docs for TrueCharts
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-12 20:32:23 +00:00
kjeld Schouten-Lebbing e15b80e105
fix: completely remove unused volumes and correctly enable used volumes for VPN 2021-09-12 22:30:05 +02:00
TrueCharts-Bot 37b232788a Commit released Helm Chart and docs for TrueCharts
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-12 20:12:56 +00:00
kjeld Schouten-Lebbing b34f57e386
fix: remove old configmap and secret references for VPN config/scripts 2021-09-12 22:10:48 +02:00
TrueCharts-Bot 4279b0716b Commit released Helm Chart and docs for TrueCharts
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-12 19:53:37 +00:00
kjeld Schouten-Lebbing d072cb3b3a
fix: correct vpn securityContext 2021-09-12 21:51:10 +02:00
TrueCharts-Bot df8d937aa8 Commit released Helm Chart and docs for TrueCharts
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-12 18:38:56 +00:00
kjeld Schouten-Lebbing 82af2510d7
test app add some fixes 2021-09-12 20:35:33 +02:00
TrueCharts-Bot 5ab12c20ec
Commit released Helm Chart and docs for TrueCharts
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-12 20:35:25 +02:00
Kjeld Schouten-Lebbing a6037c62fa
fix: ensure annotationLists and labelLists don't get processed for disabled objects (#971) 2021-09-12 20:28:22 +02:00
TrueCharts-Bot 35ab5bff15 Commit released Helm Chart and docs for TrueCharts
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-12 15:40:32 +00:00
Kjeld Schouten-Lebbing b660bbf457
improv: improve dns and vpn values.yaml syntaxis (#970)
* improv: improve dns and vpn values.yaml syntaxis

* hmm

* fix tests

* no message
2021-09-12 17:39:01 +02:00
kjeld Schouten-Lebbing 040786356c
typofix 2021-09-11 22:55:57 +02:00
kjeld Schouten-Lebbing 48b8c27c08
also set default resources (which we use everywhere in SCALE anyway) in the common chart... 2021-09-11 22:40:27 +02:00
renovate[bot] 3e67e1c977
chore(deps): update non-major (#962)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-09-11 13:04:47 +02:00
Kjeld Schouten-Lebbing a8670a1482
feat: pin all container references to digests (#963) 2021-09-11 13:00:39 +02:00
TrueCharts-Bot b57a8960b5 Commit released Helm Chart and docs for TrueCharts
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-11 10:10:33 +00:00
kjeld Schouten-Lebbing 3b8005b04e
fix: remove duplicate securitycontext from autopermissions 2021-09-11 12:08:06 +02:00
Kjeld Schouten-Lebbing bbd570a6f8
chore: move more dockerhub containers to GHCR mirror (#958)
* chore: move dockerhub containers to mirror GHCR registry

* part 2
2021-09-10 22:07:55 +02:00
TrueCharts-Bot b622dd735e Commit released Helm Chart and docs for TrueCharts
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-10 15:07:56 +00:00
kjeld Schouten-Lebbing 7015791dac
feat: Move some common containers to our own containers 2021-09-10 17:05:36 +02:00
Kjeld Schouten-Lebbing 00e9bd819f
refactor: change image layout to enable renovate updates of sidecarts (#955)
* some cleanup for common (+6 squashed commit)

Squashed commit:

[43a501de8] bump sogo

[62c009b63] some tryouts

[6840fafdb] try to fix rendering of new format

[003d3c81b] move seperate apps to new format and fix mistake in common

[752ae2c68] more work on the image refactor

[edfc28533] refactor common images

* sogo scale differently

* slight release build fix

* fix issues with release script and multiple tags
2021-09-10 16:57:08 +02:00
TrueCharts-Bot 9bb6f4af88 Commit released Helm Chart and docs for TrueCharts
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-10 13:37:54 +00:00
Kjeld Schouten-Lebbing 982297ec17
fix: move runAsNonRoot to container securityContext to allow root sidecarts (#954)
* fix: move runAsNonRoot to container securityContext to prevent sidecarts from being affected

* also bump some versions...

* also override some of the problematic settings in common.yaml

* whoops
2021-09-10 15:26:10 +02:00
Kjeld Schouten-Lebbing 3c8418b803
feat: have VPN use a hostPath for the configfile instead of configmap (#953)
* feat: have VPN use a hostPath for the configfile instead of configmap

* whoopsies

* fix some tests and actually append configFile mount to persistence

* addon -> addons
2021-09-10 14:07:50 +02:00