Commit Graph

91 Commits

Author SHA1 Message Date
Kjeld Schouten-Lebbing 0fe045998f
feat(common): allow more PUID/UID types to sync with GUID/GID (#2039)
* feat(common): allow more PUID/UID types to sync with GUID/GID

* update tests

* bump
2022-03-06 15:58:29 +01:00
kjeld Schouten-Lebbing ec1c3779e5
feat(common): bump and patch docker-compose disable 2022-03-06 15:14:50 +01:00
Stavros Kois 4100f10be7
feat(common): Force nvidia driver capabilities to all when gpu is selected (#2023) 2022-03-04 10:32:16 +01:00
Kjeld Schouten-Lebbing 4c5c3e5197
fix(Apps): BREAKING CHANGE Move some env-vars outside of env section (#2010)
* set TZ, PUID and UMASK differently

* more fixes

* this might be breaking so bump major

* ensure PUID and UMASK references are updated

* update test

* fiz references
2022-03-03 15:04:31 +01:00
Kjeld Schouten-Lebbing 085fb02b3f
fix(common): fix TZ being wrongly defined in common and remove its references from some remaining Apps (#2005)
* fix(common): fix TZ being wrongly defined in common and remove its references from some remaining Apps

* hmm

* update tests and add PUID as default as well

* cleanup more tests

* no message

* hussle

* hussle

* fix tests
2022-03-03 12:09:37 +01:00
Kjeld Schouten-Lebbing d5b90e7d20
fix(common): correctly disable host docker-compose (#1964)
* fix(common): correctly disable host docker-compose

* whoopsies
2022-02-25 15:18:50 +01:00
Kjeld Schouten-Lebbing 7d9c554d8d
feat(common): block host docker-compose and create hostpatch initcontainer (#1961)
* feat(common): block host docker-compose and create hostpatch initcontainer

* dont fail deployment in failure, only spawn error

* rename file

* technically this is a feature
2022-02-24 23:39:23 +01:00
Stavros Kois 9d74f2cb32
feat(common): Assing TZ a default value (#1934) 2022-02-22 20:20:03 +01:00
Kjeld Schouten-Lebbing d64463d13c
feat(common): add an initial inotify patch (#1854)
* feat(common): add an initial inotify patch

* turn two around
2022-02-06 14:01:33 +01:00
Stavros Kois e73c66cfc4
feat(common): force `NVIDIA_VISIBLE_DEVICES: "void"` when no GPU is assigned (#1819)
* feat(common): force  when no GPU is assigned

* try this

* adjust some tests?
2022-01-31 19:02:46 +01:00
kjeld Schouten-Lebbing 0496669de6
fix(common): correct mistakes in install and upgrade init containers 2022-01-23 18:13:58 +01:00
kjeld Schouten-Lebbing 04a3aa9540
feat(common): add upgrade and install specific initContainers 2022-01-23 15:11:09 +01:00
kjeld Schouten-Lebbing df23c937c1
fix(common): add a few more settings required for setting up USB devices 2022-01-19 12:20:55 +01:00
Kjeld Schouten-Lebbing 9ee0dfe403
feat(Common): properly setup extra-args support (#1708) 2022-01-13 11:43:26 +01:00
Kjeld Schouten-Lebbing da35f12e2b
feat(common): add TTY, STDIN and IPFamily support (#1700)
* feat(common): add TTY and STDIN support

Also fixes a mistake in the GUI for external interfaces

* bump minor on common

* add IP families as well
2022-01-12 20:24:01 +01:00
Kjeld Schouten-Lebbing 477de96a72
feat(common): add support for a, renovate compatible, image selector (#1627) 2021-12-29 12:33:50 +01:00
Stavros Kois c68633145e
fix(common): add default dbindex for redis (#1563) 2021-12-18 23:37:12 +01:00
Stavros Kois 0755c729ab
fix(common): fix redis port (#1561) 2021-12-18 22:36:23 +01:00
kjeld Schouten-Lebbing 2bb0f2aa5d
fix(common): support some different jdbc url's for mariadb injector 2021-12-12 01:28:29 +01:00
Kjeld Schouten-Lebbing daee087f81
fix(common): always force a rename and recreate of cert-secrets on update (#1422)
* fix(common): always force a rename and recreate of cert-secrets on update

* hmm

* adapt tests
2021-11-30 00:49:16 +01:00
kjeld Schouten-Lebbing 636091af65
fix(common): patch common mariadb linker 2021-11-28 15:08:37 +01:00
Kjeld Schouten-Lebbing 342f88afbf
fix(common): ensure storageClassName gets rendered correctly (#1385)
* fix(common): ensure storageClassName gets rendered correctly

* Add a canary test to common

* remove canary for now
2021-11-23 11:21:13 +01:00
Kjeld Schouten-Lebbing 14374f5630
feat(common): Implement some simplifications from Bitnami (#1378)
* fix(common): add bitnami translation layer for images and labels

* port bitnami storage and tpl handling

* hmm

* add affinity-handling, warnings and fix issues

* bump feature

* hmm

* slight alterations

* add some more tests

* fix small mistake

* fixing a minor bug
2021-11-22 17:12:06 +01:00
Kjeld Schouten-Lebbing f718d002da
fix(common): correct some mistakes in configMap handling in common (#1369)
* add test for configmap

* fix runtests and mistakes in configmap handling

* bump

* hmmm

* small fix
2021-11-21 20:20:24 +01:00
Kjeld Schouten-Lebbing 3378258a3b
feat(common): add configmap and secret persistence objects (#1368)
* feat(common): add configmap and secret persistence objects

* also port configmap layer

* add values.yaml for integrated configmap
2021-11-21 18:45:03 +01:00
kjeld Schouten-Lebbing 408e562e4b
feat(common): add mariadb support layer 2021-11-15 17:52:37 +01:00
Kjeld Schouten-Lebbing f76ba0ae92
feat(Redis): add redis App (#1309)
* feat(Redis): add redis App

* Fixup questions.yaml for redis and add common injector

* fix lint
2021-11-12 18:28:36 +01:00
kjeld Schouten-Lebbing 7e08a5f591
feat(postgresql): also set and remember postgresql root password 2021-11-08 17:40:48 +01:00
Kjeld Schouten-Lebbing 610bff68ec
Chore(Apps): Simplify GUI for deployment, persistence and securityContext (#1289)
* update deployment settings

* hide securityContext by default

* replace bottom persistence section with include

* temporaryly remove hostPathType

* Cleanup basic persistence settings

* Allow simplePVC to also be used for volumeClaimTemplates
2021-11-06 21:41:31 +01:00
Kjeld Schouten-Lebbing 32c6f11de4
chore(common): add additional aliasses for simple hostpath persistence (#1287)
* chore(common): add additional aliasses for simple hostpath persistence

* hmm

* mountpath, dont use null

* use correct type

* whoops

* bump testrc2
2021-11-06 18:56:41 +01:00
Kjeld Schouten-Lebbing b832ea9c80
feat(common): introduce simplePVC and simplyHP aliasses for persistence types (#1286)
* feat(common): introduce simplePVC and simplyHP aliasses for persistence types

* correct a mistake

* more fixes
2021-11-06 16:38:54 +01:00
Kjeld Schouten-Lebbing 6a54105c7a
feat(common): Add simple servicetype as a LoadBalancer Alias (#1284)
* feat(common): Add simple servicetype as a LoadBalancer Alias

* add serviceList UI tweak

* Fix typo

* bump

* move servicetype selection code to include

* Clearly flag NodePort and LoadBalancer as advanced

As NodePort does require advanced settings to be checked now
2021-11-06 11:29:34 +01:00
Kjeld Schouten-Lebbing 5c11bc8fb0
fix(Postgresql): use correct PVC storageClass when using postgresql as a dependency on SCALE (#1212)
* fix db persistence

* Add global isSCALE flag to every questions.yaml file

* bump common
2021-10-20 19:39:05 +02:00
Kjeld Schouten-Lebbing 834479f0db
security(Apps): Improve Snyk hardening advisory (#1208)
* Harden postgresql by removing the migration initcontainer

* Harden initcontainers

* Harden serviceaccounts and RBAC

* hmm

* fix
2021-10-20 13:45:00 +02:00
kjeld Schouten-Lebbing b98f8ded87
fix(common): Copy ixChartContext.storageClassName to child charts 2021-10-18 20:24:26 +02:00
Kjeld Schouten-Lebbing f9c3530e36
fix(common): Just provide warning when chmod fails on autopermissions (#1157)
* fix(common): Just provide warning when chmod fails on autopermissions due to nfsv4acl's

* single comma

* tests

* whoop

* zucht
2021-10-17 16:53:46 +02:00
kjeld Schouten-Lebbing 12cd5352c0
chore(common): add varlog storage and streamline db urls again 2021-10-15 18:38:21 +02:00
kjeld Schouten-Lebbing d44637edbe
add jdbc type postgres url support to common 2021-10-15 17:19:06 +02:00
Kjeld Schouten-Lebbing eaf70889a2
feat(common): simplify postgresql url generator (#1146) 2021-10-15 13:42:20 +02:00
kjeld Schouten-Lebbing 0e44b3bd97
(fix) add Nextcloud's prefered database url to common 2021-10-10 00:32:53 +02:00
kjeld Schouten-Lebbing fbb340e2d0
(chore) restructure common setup templates 2021-10-09 23:43:48 +02:00
Kjeld Schouten-Lebbing 2679fc1108
(feat) move postgresql init and password-generator to common (#1113)
* Move Postgresql initcontainer to common

* bump common

* Handle postgres password generation in common and inject into values.yaml for use in Apps

* (refactor) adapt apps using postgresql to common init and password generator

* no message
2021-10-09 19:24:45 +02:00
Kjeld Schouten-Lebbing 308ba8accf
(feat) Dynamically set PGID, GID and GROUP_ID (#1091)
* base PGID on fsGroup

* also remove PGID from questions.yaml

* remove mistake

* small fix

* fix first test

* fix linting

* always set PUID to 568

* use quotes for env vars (obviously)
2021-10-04 12:31:56 +02:00
Kjeld Schouten-Lebbing f3c62cd686
remove crooked test (+1 squashed commits) (#1087)
Squashed commits:

[a5217867f] (fix) ensure that ports are valid before trying to use them for setting the capability
2021-10-03 16:29:41 +02:00
Kjeld Schouten-Lebbing 0c3e9d2baa
(feat) automaticly set NET_BIND_SERVICE based on (target)port in services (#1085) 2021-10-03 15:17:55 +02:00
kjeld Schouten-Lebbing 3dd449cc8e
(fix) correct autopermissions indent error in common 2021-09-26 22:37:15 +02:00
kjeld Schouten-Lebbing 842cf0a65f
(chore) also use s6 readonlyroot mitigation when running asNonRoot 2021-09-26 11:20:08 +02:00
Kjeld Schouten-Lebbing d9dffc7952
fix common test mistake (#1031)
* fix common test mistake

* configfile.enabled

* VPN auto permissions fix

* trigger common-test install

* more thorough fix

* fix test to use sonarr instead of homerr

* use a super simple container

* try tweaking a bit to allow run as nonroot

* try fixing tests

* fix tests... again...

* fix... AGAIN...
2021-09-25 19:23:43 +02:00
Kjeld Schouten-Lebbing 37963de155
Add ReadOnlyRoot mitigation for S6 overlay (#1030)
* Add ReadOnlyRoot mitigation for S6 overlay

* try to fix some tests
2021-09-25 15:11:51 +02:00
Kjeld Schouten-Lebbing 2db56c1e42
Fix remaining VPN addon issues (#1029)
* Fix remaining VPN addon issues

* fix minor common-test issue
2021-09-25 14:40:14 +02:00