Commit Graph

105 Commits

Author SHA1 Message Date
Kjeld Schouten-Lebbing 610bff68ec
Chore(Apps): Simplify GUI for deployment, persistence and securityContext (#1289)
* update deployment settings

* hide securityContext by default

* replace bottom persistence section with include

* temporaryly remove hostPathType

* Cleanup basic persistence settings

* Allow simplePVC to also be used for volumeClaimTemplates
2021-11-06 21:41:31 +01:00
Kjeld Schouten-Lebbing 32c6f11de4
chore(common): add additional aliasses for simple hostpath persistence (#1287)
* chore(common): add additional aliasses for simple hostpath persistence

* hmm

* mountpath, dont use null

* use correct type

* whoops

* bump testrc2
2021-11-06 18:56:41 +01:00
Kjeld Schouten-Lebbing b832ea9c80
feat(common): introduce simplePVC and simplyHP aliasses for persistence types (#1286)
* feat(common): introduce simplePVC and simplyHP aliasses for persistence types

* correct a mistake

* more fixes
2021-11-06 16:38:54 +01:00
Kjeld Schouten-Lebbing 6a54105c7a
feat(common): Add simple servicetype as a LoadBalancer Alias (#1284)
* feat(common): Add simple servicetype as a LoadBalancer Alias

* add serviceList UI tweak

* Fix typo

* bump

* move servicetype selection code to include

* Clearly flag NodePort and LoadBalancer as advanced

As NodePort does require advanced settings to be checked now
2021-11-06 11:29:34 +01:00
Kjeld Schouten-Lebbing 5c11bc8fb0
fix(Postgresql): use correct PVC storageClass when using postgresql as a dependency on SCALE (#1212)
* fix db persistence

* Add global isSCALE flag to every questions.yaml file

* bump common
2021-10-20 19:39:05 +02:00
Kjeld Schouten-Lebbing 834479f0db
security(Apps): Improve Snyk hardening advisory (#1208)
* Harden postgresql by removing the migration initcontainer

* Harden initcontainers

* Harden serviceaccounts and RBAC

* hmm

* fix
2021-10-20 13:45:00 +02:00
kjeld Schouten-Lebbing 36723f774c
fix(Common): correct SCALE detection on statefullset 2021-10-19 21:42:28 +02:00
kjeld Schouten-Lebbing b98f8ded87
fix(common): Copy ixChartContext.storageClassName to child charts 2021-10-18 20:24:26 +02:00
Kjeld Schouten-Lebbing dde9cc9e24
feat(common): set SCALE-ZFS as a default storageClassName for SCALE when nothing is given. (#1169) 2021-10-18 19:59:05 +02:00
Kjeld Schouten-Lebbing f9c3530e36
fix(common): Just provide warning when chmod fails on autopermissions (#1157)
* fix(common): Just provide warning when chmod fails on autopermissions due to nfsv4acl's

* single comma

* tests

* whoop

* zucht
2021-10-17 16:53:46 +02:00
kjeld Schouten-Lebbing 12cd5352c0
chore(common): add varlog storage and streamline db urls again 2021-10-15 18:38:21 +02:00
kjeld Schouten-Lebbing d44637edbe
add jdbc type postgres url support to common 2021-10-15 17:19:06 +02:00
Kjeld Schouten-Lebbing eaf70889a2
feat(common): simplify postgresql url generator (#1146) 2021-10-15 13:42:20 +02:00
kjeld Schouten-Lebbing 0e44b3bd97
(fix) add Nextcloud's prefered database url to common 2021-10-10 00:32:53 +02:00
kjeld Schouten-Lebbing 799baea4dc
seperate setup and post-setup to prevent double setup runs on common chart 2021-10-10 00:03:07 +02:00
kjeld Schouten-Lebbing fbb340e2d0
(chore) restructure common setup templates 2021-10-09 23:43:48 +02:00
Kjeld Schouten-Lebbing 2679fc1108
(feat) move postgresql init and password-generator to common (#1113)
* Move Postgresql initcontainer to common

* bump common

* Handle postgres password generation in common and inject into values.yaml for use in Apps

* (refactor) adapt apps using postgresql to common init and password generator

* no message
2021-10-09 19:24:45 +02:00
Kjeld Schouten-Lebbing 6b96a3662c
(feat) allow for the default middlewares to be disabled on ingress. (#1096)
* Edit common to allow for the default middlewares to be disabled on ingress.

* add it on all apps as an expert option

* fix hostPath mistake in tests while at it
2021-10-05 00:39:13 +02:00
Kjeld Schouten-Lebbing 308ba8accf
(feat) Dynamically set PGID, GID and GROUP_ID (#1091)
* base PGID on fsGroup

* also remove PGID from questions.yaml

* remove mistake

* small fix

* fix first test

* fix linting

* always set PUID to 568

* use quotes for env vars (obviously)
2021-10-04 12:31:56 +02:00
Kjeld Schouten-Lebbing f3c62cd686
remove crooked test (+1 squashed commits) (#1087)
Squashed commits:

[a5217867f] (fix) ensure that ports are valid before trying to use them for setting the capability
2021-10-03 16:29:41 +02:00
Kjeld Schouten-Lebbing 0c3e9d2baa
(feat) automaticly set NET_BIND_SERVICE based on (target)port in services (#1085) 2021-10-03 15:17:55 +02:00
kjeld Schouten-Lebbing 7600caaba0
(fix) simplify and correct openvpn VPN_AUTH envvar generation 2021-09-29 17:32:24 +02:00
Kjeld Schouten-Lebbing cfdffdb3be
(feat) add CodeServer addon and addon improvements (#1059)
* simplify addons to not require manually entered volumemounts, just mount them all.

* simplify addons

* cleanup promtail and codeserver

* fix mistake in codeserver

* try to add codeserver runtest

* add netshoot runtest

* fix codeserver ports

* different codeserver port for integrationt est

* bump common
2021-09-29 15:10:26 +02:00
Kjeld Schouten-Lebbing 2b5fe533f6
(feat) Add Promtail and Netshoot addons (#1058)
* add promtail addon

* Add Netshoot addon

* update common to include envList for addons

* Add basic promtail and netshoot unittests
2021-09-29 14:18:57 +02:00
Kjeld Schouten-Lebbing 88b1719d32
done (+42 squashed commit) (#1053)
Squashed commit:

[8058e6aba] 1 error left

[b0157b252] 2 errors

[7fa494907] 4 errors

[03139391e]  6 failures, 4 errors

[7f017ea23] 12 errors

[3e9ad758d] 0 failures, 13 errors

[e24a3cb3e] 3 failures, 13 errors

[6edcaa655] 4 failures 14 errors

[9623bda57] 6 failures, 13 errors

[04c35c995] 4 failed 22 errors

[5f5335c15] 9 failures

[9a33540e2] down to 20 failures

[0e7b73b49] remove old tests

[5cc6d11b7] fixup the resources

[8c508d45a] some more progress

[4acef3c3b] some more work

[85cdb5d06] some ports cleanup

[1987ac2ec] lint before unit

[6fa221789] enable unit tests

[c212b695d] other name

[b78594518] common test name fix

[ef6597e79] indent

[8cbcfb5e4] common test rename

[1ca838c16] seperate common tests

[ef052b022] create two seperate job for common testing

[67eb0e9b3] use devcontainer for release shizzle

[0c47c482b] make it a sudo

[4d8900b16] force install jq

[9660cdd47] try something else

[e2b611917] bump common to run tests (to fix them)

[277241bbf] only use the new devcontainer for the release tests for now...

[9c7b68e0f] Revert "remove setup chart testing action"

This reverts commit 6987914587a58ab5a52a05b836d60ef91f1619d5.

[444914311] Revert "use integrated k3d"

This reverts commit d9bcb2f35d154b0afe1eb851729c37789b6ba0ea. (+6 squashed commit)

Squashed commit:

[313446184] Revert "correct k3s version"

This reverts commit 81fa8a43c41c2449b7411e0d59a3c2bbe0aef1ea.

[41b4d4795] Revert "version name tryout"

This reverts commit bbb8dcead9f9426872390b8f89b1fd0e661534bb.

[b64df97a0] Revert "change version"

This reverts commit 8080395dc80e606769ad9790b35d35fac4d1d3ed.

[ed63220d4] Revert "use k3s kubectl"

This reverts commit ea81735d939e838ad595835ea09b54bff817dd83.

[6267a2908] Revert "use normal kubectl"

This reverts commit 216d3799111d47f65dd20dd85ccb8fbc586a9c2b.

[f48ddde73] Revert "try to set kubectl context"

This reverts commit a5e8a532c5620e0d9d4cb7a53a371ba200265612.

[a5e8a532c] try to set kubectl context

[216d37991] use normal kubectl

[ea81735d9] use k3s kubectl

[8080395dc] change version

[bbb8dcead] version name tryout

[81fa8a43c] correct k3s version

[d9bcb2f35] use integrated k3d

[698791458] remove setup chart testing action

[5bd7cf01d] bump common-test
2021-09-29 00:11:52 +02:00
kjeld Schouten-Lebbing 3dd449cc8e
(fix) correct autopermissions indent error in common 2021-09-26 22:37:15 +02:00
kjeld Schouten-Lebbing 842cf0a65f
(chore) also use s6 readonlyroot mitigation when running asNonRoot 2021-09-26 11:20:08 +02:00
Kjeld Schouten-Lebbing d9dffc7952
fix common test mistake (#1031)
* fix common test mistake

* configfile.enabled

* VPN auto permissions fix

* trigger common-test install

* more thorough fix

* fix test to use sonarr instead of homerr

* use a super simple container

* try tweaking a bit to allow run as nonroot

* try fixing tests

* fix tests... again...

* fix... AGAIN...
2021-09-25 19:23:43 +02:00
Kjeld Schouten-Lebbing 37963de155
Add ReadOnlyRoot mitigation for S6 overlay (#1030)
* Add ReadOnlyRoot mitigation for S6 overlay

* try to fix some tests
2021-09-25 15:11:51 +02:00
Kjeld Schouten-Lebbing 2db56c1e42
Fix remaining VPN addon issues (#1029)
* Fix remaining VPN addon issues

* fix minor common-test issue
2021-09-25 14:40:14 +02:00
Kjeld Schouten-Lebbing 0fb8f8bb90
fix: make sure autopermissions sets the group owner correctly (#994)
* fix: make sure autopermissions sets the group owner correctly

* add test fix
2021-09-14 23:59:19 +02:00
kjeld Schouten-Lebbing ab1b39b88e
cleanup authentication credentials for OpenVPN 2021-09-13 21:18:11 +02:00
kjeld Schouten-Lebbing 0970b3a8d3
fix: ensure wireguard env vars get created 2021-09-13 09:25:38 +02:00
kjeld Schouten-Lebbing 9ccdfcb7d8
fix: nuke all VPN volumes that we don't use (yet) out of Common 2021-09-12 22:49:18 +02:00
kjeld Schouten-Lebbing e15b80e105
fix: completely remove unused volumes and correctly enable used volumes for VPN 2021-09-12 22:30:05 +02:00
kjeld Schouten-Lebbing b34f57e386
fix: remove old configmap and secret references for VPN config/scripts 2021-09-12 22:10:48 +02:00
kjeld Schouten-Lebbing d072cb3b3a
fix: correct vpn securityContext 2021-09-12 21:51:10 +02:00
Kjeld Schouten-Lebbing a6037c62fa
fix: ensure annotationLists and labelLists don't get processed for disabled objects (#971) 2021-09-12 20:28:22 +02:00
Kjeld Schouten-Lebbing b660bbf457
improv: improve dns and vpn values.yaml syntaxis (#970)
* improv: improve dns and vpn values.yaml syntaxis

* hmm

* fix tests

* no message
2021-09-12 17:39:01 +02:00
kjeld Schouten-Lebbing 3b8005b04e
fix: remove duplicate securitycontext from autopermissions 2021-09-11 12:08:06 +02:00
Kjeld Schouten-Lebbing 00e9bd819f
refactor: change image layout to enable renovate updates of sidecarts (#955)
* some cleanup for common (+6 squashed commit)

Squashed commit:

[43a501de8] bump sogo

[62c009b63] some tryouts

[6840fafdb] try to fix rendering of new format

[003d3c81b] move seperate apps to new format and fix mistake in common

[752ae2c68] more work on the image refactor

[edfc28533] refactor common images

* sogo scale differently

* slight release build fix

* fix issues with release script and multiple tags
2021-09-10 16:57:08 +02:00
Kjeld Schouten-Lebbing 982297ec17
fix: move runAsNonRoot to container securityContext to allow root sidecarts (#954)
* fix: move runAsNonRoot to container securityContext to prevent sidecarts from being affected

* also bump some versions...

* also override some of the problematic settings in common.yaml

* whoops
2021-09-10 15:26:10 +02:00
Kjeld Schouten-Lebbing 3c8418b803
feat: have VPN use a hostPath for the configfile instead of configmap (#953)
* feat: have VPN use a hostPath for the configfile instead of configmap

* whoopsies

* fix some tests and actually append configFile mount to persistence

* addon -> addons
2021-09-10 14:07:50 +02:00
Kjeld Schouten-Lebbing e0e0a4a2f2
refactor: Restructure common init and additional container layout to dicts (#950)
* refactor: Restructure common init and additional container layout to dicts

BREAKING CHANGE
2021-09-09 21:48:43 +02:00
Kjeld Schouten-Lebbing 5cb0b239e0
Feat: port addons from k8s-at-home to common (#948)
* Feat: port addons from k8s-at-home to common

* use an older version of upstream
2021-09-09 20:55:33 +02:00
Kjeld Schouten-Lebbing cc1cde7fdc
fix: ensure supplementalgroups when using devices are actually added (#942) 2021-09-09 14:20:26 +02:00
Kjeld Schouten-Lebbing 0aa2131b28
helm test revert (+1 squashed commits) (#931)
Squashed commits:

[36ca93235] actually finish echo command (+8 squashed commit)

Squashed commit:

[27c3e9d63] fix typo

[8daa4395e] use name not a derivitive

[d8a24b1d8] force a testrun

[edacc59e4] give more perms

[9706a9860] bump

[09f9d9f4e] Code thining on common

[8adfddf2b] try moving autopermissions to initcontainer

[42c7f76a4] fix: have autopermissions use command instead of arg
2021-09-08 22:14:04 +02:00
kjeld Schouten-Lebbing 516d520f25
Correctly set common group write permission when auto-permissions is enabled and add incubator pihole app
Also updates ports list
2021-09-04 17:42:55 +02:00
Kjeld Schouten-Lebbing 353a4337fe
move default middleware location to default namespace (#890) 2021-09-04 11:07:09 +02:00
kjeld Schouten-Lebbing f1dbdf0059
Bump some incubator apps and remove common test code. Also render traefik portalhook as tpl 2021-09-04 00:12:58 +02:00