renovate[bot]
5eb690069f
chore(deps): update major docker tags (major) ( #1235 )
...
* chore(deps): update major docker tags
* Commit bumped App Version
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: TrueCharts-Bot <bot@truecharts.org>
2021-10-26 16:28:32 +02:00
renovate[bot]
61d524db79
chore(deps): update non-major ( #1232 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-10-26 12:25:38 +02:00
Kjeld Schouten-Lebbing
57c433e84a
Removepostgresql migration ( #1238 )
...
* remove postgresql migration
* bump
2021-10-26 12:02:13 +02:00
kjeld Schouten-Lebbing
41f212af99
fix(postgresql): fix migration scripting for new major
2021-10-26 11:04:33 +02:00
kjeld Schouten-Lebbing
c621f62f53
Ensure old db location for postgresql uses the bad storageClassName
2021-10-20 21:58:10 +02:00
kjeld Schouten-Lebbing
22639c7964
fix(Apps): reenable postgresql migration scripting and bump all to force update
2021-10-20 21:53:30 +02:00
Kjeld Schouten-Lebbing
834479f0db
security(Apps): Improve Snyk hardening advisory ( #1208 )
...
* Harden postgresql by removing the migration initcontainer
* Harden initcontainers
* Harden serviceaccounts and RBAC
* hmm
* fix
2021-10-20 13:45:00 +02:00
renovate[bot]
0aee478a94
chore(deps): update non-major ( #1185 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-10-20 09:56:16 +02:00
renovate[bot]
8bc56fa8fd
chore(deps): update non-major ( #1174 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-10-19 20:25:02 +02:00
renovate[bot]
8d08cabc03
chore(deps): update non-major ( #1122 )
...
* chore(deps): update non-major
* Commit bumped App Version
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: TrueCharts-Bot <bot@truecharts.org>
2021-10-12 11:31:03 +02:00
Kjeld Schouten-Lebbing
3cd8efc2b6
(feat) Update Apps to use common-postgresql hooks ( #1114 )
...
* (feat) bump common to use new common postgresql-hooks
* bump postgresql as well
* bump yet again
* also process gitea
* sogo
* also add adaptations to gitea
* bump postgresql
* bump postgresql yet again
* revert central defined existing secret
* bump common... again
* bumps
* fix vaultwarden
* encode authelia dbpassword secret correctly
* remove useless container from nextcloud config
* some cleanup
* use lookup to grab the secret for authelia
* try getting authelia to work
* Fix quoting issues for autheliadb
2021-10-10 01:20:01 +02:00
kjeld Schouten-Lebbing
8f2f877825
(chore) Bump postgresql again to try to get things working correctly.
2021-10-09 23:12:15 +02:00
renovate[bot]
38159dc480
chore(deps): update non-major ( #1098 )
...
* chore(deps): update non-major
* Commit bumped App Version
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: TrueCharts-Bot <bot@truecharts.org>
2021-10-05 13:03:37 +02:00
renovate[bot]
f4be86590a
chore(deps): update bitnami/postgresql:13.4.0 docker digest to 33c276d ( #1055 )
...
* chore(deps): update bitnami/postgresql:13.4.0 docker digest to 33c276d
* Commit bumped App Version
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-29 10:21:12 +02:00
renovate[bot]
8b5cb03416
chore(deps): update non-major ( #1048 )
...
* chore(deps): update non-major
* Commit bumped App Version
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-28 09:40:11 +02:00
renovate[bot]
4883b815e6
chore(deps): update non-major ( #1046 )
...
* chore(deps): update non-major
* Commit bumped App Version
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-28 08:34:12 +02:00
Kjeld Schouten-Lebbing
acf510ea13
(feat) Standardise and Harden default app securitycontext ( #1028 )
...
* Apply security hardened defaults to values.yaml for all apps
* Add default common securityContext to all apps
* Adjust securityContext defaults in questions.yaml, according to values.yaml
* Add default common podSecurityContext to all apps
* Clean whitespace
* Clean more whitespace
* Adjust podSecurityContext defaults in questions.yaml, according to values.yaml
* fix pgadmin
Co-authored-by: Stavros kois <s.kois@outlook.com>
2021-09-26 20:05:21 +02:00
renovate[bot]
a52bc98bdf
chore(deps): update non-major ( #1015 )
...
* chore(deps): update non-major
* Commit bumped App Version
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-21 10:55:30 +02:00
renovate[bot]
d976ce2065
chore(deps): update non-major ( #1013 )
...
* chore(deps): update non-major
* Commit bumped App Version
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-21 10:41:09 +02:00
renovate[bot]
f2cf03eda3
chore(deps): update non-major ( #987 )
...
* chore(deps): update non-major
* Commit bumped App Version
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-14 22:38:56 +02:00
Renovate Bot
2c5919d42f
chore(deps): update non-major
2021-09-13 14:12:56 +02:00
Kjeld Schouten-Lebbing
238e2bc0c6
chore: Use bitnami instead of stock postgresql container ( #960 )
...
* chore: Setup all apps to use bitnami instead of stock postgresql container
* Actually don't bump major as there is no breaking change (as people using it will default to the migration initscript)
2021-09-11 20:58:37 +02:00
Renovate Bot
1f4828c19b
chore(deps): update non-major
...
(cherry picked from commit b66e04fe8f
)
2021-09-11 13:56:20 +02:00
kjeld Schouten-Lebbing
ced7d182c2
fix some dockertags being wrong
2021-09-11 13:52:00 +02:00
Kjeld Schouten-Lebbing
a8670a1482
feat: pin all container references to digests ( #963 )
2021-09-11 13:00:39 +02:00
Stavros Kois
a7b3ce0e23
fix: make sure podSecurityContext is included in both SCALE and Helm installs ( #956 )
...
* remove strategy
* move runAsNonRoot to securityContext
* Add podSecurityContext and securityContext to values pt1
* Add podSecurityContext and securityContext to values pt2
* Add podSecurityContext and securityContext to values pt3
* Add podSecurityContext and securityContext to values pt4
* Add podSecurityContext and securityContext to values pt5
* fix empty lines
* Remove secCont from NC - values
* fixPermissions for some apps
* on apps with perm prob, set fsGroup to 0 also
2021-09-10 20:10:04 +02:00
kjeld Schouten-Lebbing
1c5b41539f
allow tpl for postgresql secret
2021-08-27 16:50:19 +02:00
renovate[bot]
8f63645550
chore(deps): update minor docker tags ( #775 )
...
* chore(deps): update minor docker tags
* Commit bumped App Version
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: TrueCharts-Bot <bot@truecharts.org>
2021-08-17 16:32:15 +02:00
kjeld Schouten-Lebbing
ae1194c988
Temporarily disable postgresql backup on upgrade system just to be sure.
2021-08-17 11:52:34 +02:00
kjeld Schouten-Lebbing
866a1a0a17
try more agressive testing settings for postgresql
2021-08-14 11:12:26 +02:00
kjeld Schouten-Lebbing
175b33aeb2
simplify postgresql folder setup
2021-08-13 23:43:13 +02:00
Kjeld Schouten-Lebbing
9808021cbc
initial work on single-container postgresql app ( #758 )
...
* initial work on single-container postgresql app
* update
* some more polish
* use new common version for postgresql
* fix a mistake
* moar fixup
* whoops
* fixes
* more fixing
* add pre-upgrade backup hook
* also add backup storage to questions.yaml
2021-08-12 13:55:45 +02:00