Commit Graph

32 Commits

Author SHA1 Message Date
renovate[bot] 5eb690069f
chore(deps): update major docker tags (major) (#1235)
* chore(deps): update major docker tags

* Commit bumped App Version

Signed-off-by: TrueCharts-Bot <bot@truecharts.org>

Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: TrueCharts-Bot <bot@truecharts.org>
2021-10-26 16:28:32 +02:00
renovate[bot] 61d524db79
chore(deps): update non-major (#1232)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-10-26 12:25:38 +02:00
Kjeld Schouten-Lebbing 57c433e84a
Removepostgresql migration (#1238)
* remove postgresql migration

* bump
2021-10-26 12:02:13 +02:00
kjeld Schouten-Lebbing 41f212af99
fix(postgresql): fix migration scripting for new major 2021-10-26 11:04:33 +02:00
kjeld Schouten-Lebbing c621f62f53
Ensure old db location for postgresql uses the bad storageClassName 2021-10-20 21:58:10 +02:00
kjeld Schouten-Lebbing 22639c7964
fix(Apps): reenable postgresql migration scripting and bump all to force update 2021-10-20 21:53:30 +02:00
Kjeld Schouten-Lebbing 834479f0db
security(Apps): Improve Snyk hardening advisory (#1208)
* Harden postgresql by removing the migration initcontainer

* Harden initcontainers

* Harden serviceaccounts and RBAC

* hmm

* fix
2021-10-20 13:45:00 +02:00
renovate[bot] 0aee478a94
chore(deps): update non-major (#1185)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-10-20 09:56:16 +02:00
renovate[bot] 8bc56fa8fd
chore(deps): update non-major (#1174)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-10-19 20:25:02 +02:00
renovate[bot] 8d08cabc03
chore(deps): update non-major (#1122)
* chore(deps): update non-major

* Commit bumped App Version

Signed-off-by: TrueCharts-Bot <bot@truecharts.org>

Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: TrueCharts-Bot <bot@truecharts.org>
2021-10-12 11:31:03 +02:00
Kjeld Schouten-Lebbing 3cd8efc2b6
(feat) Update Apps to use common-postgresql hooks (#1114)
* (feat) bump common to use new common postgresql-hooks

* bump postgresql as well

* bump yet again

* also process gitea

* sogo

* also add adaptations to gitea

* bump postgresql

* bump postgresql yet again

* revert central defined existing secret

* bump common... again

* bumps

* fix vaultwarden

* encode authelia dbpassword secret correctly

* remove useless container from nextcloud config

* some cleanup

* use lookup to grab the secret for authelia

* try getting authelia to work

* Fix quoting issues for autheliadb
2021-10-10 01:20:01 +02:00
kjeld Schouten-Lebbing 8f2f877825
(chore) Bump postgresql again to try to get things working correctly. 2021-10-09 23:12:15 +02:00
renovate[bot] 38159dc480
chore(deps): update non-major (#1098)
* chore(deps): update non-major

* Commit bumped App Version

Signed-off-by: TrueCharts-Bot <bot@truecharts.org>

Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: TrueCharts-Bot <bot@truecharts.org>
2021-10-05 13:03:37 +02:00
renovate[bot] f4be86590a
chore(deps): update bitnami/postgresql:13.4.0 docker digest to 33c276d (#1055)
* chore(deps): update bitnami/postgresql:13.4.0 docker digest to 33c276d

* Commit bumped App Version

Signed-off-by: TrueCharts-Bot <bot@truecharts.org>

Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-29 10:21:12 +02:00
renovate[bot] 8b5cb03416
chore(deps): update non-major (#1048)
* chore(deps): update non-major

* Commit bumped App Version

Signed-off-by: TrueCharts-Bot <bot@truecharts.org>

Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-28 09:40:11 +02:00
renovate[bot] 4883b815e6
chore(deps): update non-major (#1046)
* chore(deps): update non-major

* Commit bumped App Version

Signed-off-by: TrueCharts-Bot <bot@truecharts.org>

Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-28 08:34:12 +02:00
Kjeld Schouten-Lebbing acf510ea13
(feat) Standardise and Harden default app securitycontext (#1028)
* Apply security hardened defaults to values.yaml for all apps

* Add default common securityContext to all apps

* Adjust securityContext defaults in questions.yaml, according to values.yaml

* Add default common podSecurityContext to all apps

* Clean whitespace

* Clean more whitespace

* Adjust podSecurityContext defaults in questions.yaml, according to values.yaml

* fix pgadmin

Co-authored-by: Stavros kois <s.kois@outlook.com>
2021-09-26 20:05:21 +02:00
renovate[bot] a52bc98bdf
chore(deps): update non-major (#1015)
* chore(deps): update non-major

* Commit bumped App Version

Signed-off-by: TrueCharts-Bot <bot@truecharts.org>

Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-21 10:55:30 +02:00
renovate[bot] d976ce2065
chore(deps): update non-major (#1013)
* chore(deps): update non-major

* Commit bumped App Version

Signed-off-by: TrueCharts-Bot <bot@truecharts.org>

Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-21 10:41:09 +02:00
renovate[bot] f2cf03eda3
chore(deps): update non-major (#987)
* chore(deps): update non-major

* Commit bumped App Version

Signed-off-by: TrueCharts-Bot <bot@truecharts.org>

Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-14 22:38:56 +02:00
Renovate Bot 2c5919d42f
chore(deps): update non-major 2021-09-13 14:12:56 +02:00
Kjeld Schouten-Lebbing 238e2bc0c6
chore: Use bitnami instead of stock postgresql container (#960)
* chore: Setup all apps to use bitnami instead of stock postgresql container

* Actually don't bump major as there is no breaking change (as people using it will default to the migration initscript)
2021-09-11 20:58:37 +02:00
Renovate Bot 1f4828c19b
chore(deps): update non-major
(cherry picked from commit b66e04fe8f)
2021-09-11 13:56:20 +02:00
kjeld Schouten-Lebbing ced7d182c2
fix some dockertags being wrong 2021-09-11 13:52:00 +02:00
Kjeld Schouten-Lebbing a8670a1482
feat: pin all container references to digests (#963) 2021-09-11 13:00:39 +02:00
Stavros Kois a7b3ce0e23
fix: make sure podSecurityContext is included in both SCALE and Helm installs (#956)
* remove strategy

* move runAsNonRoot to securityContext

* Add podSecurityContext and securityContext to values pt1

* Add podSecurityContext and securityContext to values pt2

* Add podSecurityContext and securityContext to values pt3

* Add podSecurityContext and securityContext to values pt4

* Add podSecurityContext and securityContext to values pt5

* fix empty lines

* Remove secCont from NC - values

* fixPermissions for some apps

* on apps with perm prob, set fsGroup to 0 also
2021-09-10 20:10:04 +02:00
kjeld Schouten-Lebbing 1c5b41539f
allow tpl for postgresql secret 2021-08-27 16:50:19 +02:00
renovate[bot] 8f63645550
chore(deps): update minor docker tags (#775)
* chore(deps): update minor docker tags

* Commit bumped App Version

Signed-off-by: TrueCharts-Bot <bot@truecharts.org>

Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: TrueCharts-Bot <bot@truecharts.org>
2021-08-17 16:32:15 +02:00
kjeld Schouten-Lebbing ae1194c988
Temporarily disable postgresql backup on upgrade system just to be sure. 2021-08-17 11:52:34 +02:00
kjeld Schouten-Lebbing 866a1a0a17
try more agressive testing settings for postgresql 2021-08-14 11:12:26 +02:00
kjeld Schouten-Lebbing 175b33aeb2
simplify postgresql folder setup 2021-08-13 23:43:13 +02:00
Kjeld Schouten-Lebbing 9808021cbc
initial work on single-container postgresql app (#758)
* initial work on single-container postgresql app

* update

* some more polish

* use new common version for postgresql

* fix a mistake

* moar fixup

* whoops

* fixes

* more fixing

* add pre-upgrade backup hook

* also add backup storage to questions.yaml
2021-08-12 13:55:45 +02:00