* use new common
* more porting and add notes.txt
* portals
* add vaultwarden and authelia to enterprise
* some changes
* authelia porting
* fix grafana
* fixup metallb
* more
* traefik
* some initial blocky work
* fixes
* more work on enterprise train
* containers
* labels
* no message
* some more fixes
* update questions for new enterprise apps
* something
* remove postgresql dependency from enterprise train apps
* fix some traefik bugs
* remove prometheus affinities for now
* authelia postgresql fixes
* bump and fix install test errors
* bump common for probe fixes
* fix questions
* more questions fixes
* add some metrics improvements
* some more fixes
* whoops
* some authelia fixes
* fix blocky and authelia
* bump common for postgresql fixes
* hmm
* bump common
* bump redis to disable double manifest loading
* dont enc secrets for authelia
* traefik, blocky and authelia fixes
* traefik caps on protocols
* bump redis for password fixes
* ensure roles are clusterwide
* ok
* redis/common bumps
* remove blocky webui and change config location
* whoops
* redis fix
* more blocky tryouts
* authelia whoops
* bump blocky version
* disable prometheus controller
* oops
* bump common on prometheus for custom service selector labels
* rename prometheus selector labels on service
* damn
* more work
* blocky 100 tryout
* blocky root tryout
* fix blocky config and remove fsgroup
* dont drop caps
* Update common.yaml
Signed-off-by: Kjeld Schouten-Lebbing <kjeld@schouten-lebbing.nl>
* Update values.yaml
Signed-off-by: Kjeld Schouten-Lebbing <kjeld@schouten-lebbing.nl>
* Update values.yaml
Signed-off-by: Kjeld Schouten-Lebbing <kjeld@schouten-lebbing.nl>
* revert update for blocky
* use old-style mount for blocky
* put update back for blocky
* add initial postgresl query log support
* hmm
* small lint
* bump common
---------
Signed-off-by: Kjeld Schouten-Lebbing <kjeld@schouten-lebbing.nl>
Co-authored-by: Stavros kois <s.kois@outlook.com>
Co-authored-by: Stavros Kois <47820033+stavros-k@users.noreply.github.com>
* feat(cert-manager): add Cert-Manager configuration App
* eof
* pre-commit cleanup
* add temp crds folder
* patch mistake
* restructure
* add route53 support
* add some fails
* fixes and add route53 to GUI
* end
* add experimental HTTP01 support
* fix bug
* add buypass acme to dropdown
* add akamai support
* add Digitalocean
* add rfc2136 support
* fix some issues and add self-signed issuer
* add metrics and fix selfsigned
* whoops
* Add CA certificate system
* whoops
* benc stuff
* actually load CA
* fix
* fix ca
* bool -> boolean
* also test CA
* wait for pod to be ready
* sleep more agressively on cert-Manger itself
* some more fixes
* whoops
* fix mistakes
* all waits test
* add cmctl
* increase scope for now and some fixes
* simplify
* dont wait on non-existing pods
* make it non-failing
* fix typo
* chore(apps): remove un-needed UI elements
* dont grab metallb upstreams anymore
* add new readme template pointing to the website and remove helm-values system
* Move readme generation to daily job
* remove readme addition and remve readme generation from build-release script
* bump
* remvoe the use of helm-docs
* completely remove helm-docs
* move tag sync to renovate bump action
* fully remove tag sync and remove needless helm dependency updates
* remove needless helm prep
* get rid of needlessly loaded grafana repo
* fix(tailscale): switch to the new golang binary
* temp, let CI install tailscale
* test without secret
* change key name in secret
* change socket to varrun, which is the default that `tailscale` command looks for
* test with varrun enabled
* remove tty
* don't try to install TS
* dont load authkey as env
* update vpn template
* remove /var/lib as it now uses kubesecret for the state
* bump
* add support for insecureSkipVerify for forwardAuth
* Fix handling of empty tls
* try something else
* simplify with with
* improve question layout and make proper version
* use piping for default
* Add some warning language for new feature
Signed-off-by: Ethan Leisinger <770373+packruler@users.noreply.github.com>
It's set automatically already and is only usefull for hostNetworking related setups anyway
Signed-off-by: Kjeld Schouten-Lebbing <kjeld@schouten-lebbing.nl>
* move tempaltes
* update scripts
* bump for test
* print some info
* move some more files
* see what is taking so long
* remove time
* simple->LB
* CRLF->LF
* handle both LF and CRLF
* bumps
* fix(blocky): allow port changes, allow dot and fix api access
* update documentation and remove non-present unbound feature
* more docs
* fix a sponsor link while at it
* fix mistake
* fix two mistakes in prometheus config
* fix questions.yaml as well
* fix bug in basic auth template
* feat(traefik): add support for proxyProtocol
* whoops
* empty space
* proxyprot on all entrypoints
* whoops again
* no fixes here
* Update charts/stable/traefik/templates/_args.tpl
* formatting
Co-authored-by: Kjeld Schouten-Lebbing <kjeld@schouten-lebbing.nl>
* chore(questions): replace port parts with templates
* chore(questions): replace controller parts with templates
* remove tons of whitespce
* remove quotes from strings on templates
* make complete controller an include
* default to recreate
* remove replica and strategies as it's covered from controllerStrtegies include
* remove whitespace again
* replace controllertype with include (deployment/daemonset/statefulset)
* replace advanced port part except targetport
* remove more quotes
* add hidden toggle of enable the port
* new includes
* update build script
* controller deploy/stateful/deamon template changes
* replace controllerStrategies with replicas, replica#, strategy, recreate
* move 2 templates into a subfolder
* remove quotes
* remove disabled portals from questions and defined them on values
* remove enabled portal from the questions and add it on values
* one more app
* Portal cleanup
* remove portal templates
* add more includes
* replace portal links
* move some templates in folders
* replace ingressRoot with template
* more grouping
* replace persistenceroot with template
* replace serviceExpertRoot
* replace serviceroot
* fix a rogue one
* vctRoot
* securityContext cleanup
* remove quotes from templates on string
* replace vctRoot
* replace advanedSecurityRoot
* replace podsecurity root
* Update .github/scripts/build-catalog.sh
* Update values.yaml
* remove dupe portal
* update build-release script
* fix paths
* fix apps with imageSelector
Co-authored-by: Kjeld Schouten-Lebbing <kjeld@schouten-lebbing.nl>
* feat(inventree): add inventree
* update gui
* app nginx
* fix path
* fix(templates): expect of cidr must be string instead of int
* fix worker vols
* root
* no root
* use container's uesr
* root group
* rofs
* try without nginx
* try without nginx
* remove
* start server as additionalcont to start first
* init db
* check
* migrate
* init account
* add secret on ui
* set TZ, PUID and UMASK differently
* more fixes
* this might be breaking so bump major
* ensure PUID and UMASK references are updated
* update test
* fiz references
* feat(common): add GUI for networkPolicy
* add networkPolicies Ports GUI
* working on GUI compatible ipblock parsing
* add network policy runtests
* rename
* fix some networkPolicy mistakes
* add pod and namspace selector parsing
* finish the common portion of the network policy
* Add prototype IPblock GUI
* Build a GUI
* bump common
* chore(templates): Adds description for CPU and RAM
Also remove memory as its redundant and capitalize a label
* Update templates/questions/resources.yaml
Co-authored-by: Kjeld Schouten-Lebbing <kjeld@schouten-lebbing.nl>
* chore(jackett): refactor ServiceType to simplify it
* put securityContext hidden behind a checkbox
* chore(Apps): put deployment config behind checkbox
(cherry picked from commit c75410141ae2f1394f38437c42042ce689604fc8)
* bump common on Jackett for testing
* feat(common): Add simple servicetype as a LoadBalancer Alias
* add serviceList UI tweak
* Fix typo
* bump
* move servicetype selection code to include
* Clearly flag NodePort and LoadBalancer as advanced
As NodePort does require advanced settings to be checked now
* (chore) add more includes and include processing
* fully edit airsonic
* move serviceExpert to include (except host-network)
* Move default ingress settings to include
* simplify addons to not require manually entered volumemounts, just mount them all.
* simplify addons
* cleanup promtail and codeserver
* fix mistake in codeserver
* try to add codeserver runtest
* add netshoot runtest
* fix codeserver ports
* different codeserver port for integrationt est
* bump common
* add addon include to all apps
* move groups to include
* move controller to includes
* move container config to include
* move serviceList to include
* move persistence list to includes
* move ingressList to includes
* fix appdaemon digest
* move deviceList to includes and add to deconz
Fixes#967 related to #966
Kjeld Schouten-Lebbing