Commit Graph

156 Commits

Author SHA1 Message Date
TrueCharts-Bot 7bc182bbf7 Commit released Helm Chart and docs for TrueCharts
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-26 20:41:20 +00:00
kjeld Schouten-Lebbing 3dd449cc8e
(fix) correct autopermissions indent error in common 2021-09-26 22:37:15 +02:00
Kjeld Schouten-Lebbing acf510ea13
(feat) Standardise and Harden default app securitycontext (#1028)
* Apply security hardened defaults to values.yaml for all apps

* Add default common securityContext to all apps

* Adjust securityContext defaults in questions.yaml, according to values.yaml

* Add default common podSecurityContext to all apps

* Clean whitespace

* Clean more whitespace

* Adjust podSecurityContext defaults in questions.yaml, according to values.yaml

* fix pgadmin

Co-authored-by: Stavros kois <s.kois@outlook.com>
2021-09-26 20:05:21 +02:00
TrueCharts-Bot fe03d574fc Commit released Helm Chart and docs for TrueCharts
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-26 10:11:12 +00:00
kjeld Schouten-Lebbing 665d7282df
revert /var/run mount fix on common 2021-09-26 12:08:10 +02:00
TrueCharts-Bot 1f42ebdd4a Commit released Helm Chart and docs for TrueCharts
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-26 09:42:40 +00:00
Kjeld Schouten-Lebbing 744d8060b9
(chore) bump common to trigger release 2021-09-26 11:40:37 +02:00
kjeld Schouten-Lebbing 842cf0a65f
(chore) also use s6 readonlyroot mitigation when running asNonRoot 2021-09-26 11:20:08 +02:00
kjeld Schouten-Lebbing 4076def32a
(fix) limit the varrun emptyDir to s6 overlay related content 2021-09-26 11:19:35 +02:00
TrueCharts-Bot 72871fb371 Commit released Helm Chart and docs for TrueCharts
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-25 18:34:03 +00:00
Kjeld Schouten-Lebbing 4ea3185e38
add a special /var/run tmpfs mountpoint to common (#1032)
* add a special /var/run tmpfs mountpoint to common

* common-test version in tests fix
2021-09-25 20:31:39 +02:00
TrueCharts-Bot 15ad9fe2e9 Commit released Helm Chart and docs for TrueCharts
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-25 17:38:31 +00:00
kjeld Schouten-Lebbing 961b2bfbc3
bump common 2021-09-25 19:34:45 +02:00
TrueCharts-Bot a88c555f82 Commit released Helm Chart and docs for TrueCharts
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-25 17:25:55 +00:00
Kjeld Schouten-Lebbing d9dffc7952
fix common test mistake (#1031)
* fix common test mistake

* configfile.enabled

* VPN auto permissions fix

* trigger common-test install

* more thorough fix

* fix test to use sonarr instead of homerr

* use a super simple container

* try tweaking a bit to allow run as nonroot

* try fixing tests

* fix tests... again...

* fix... AGAIN...
2021-09-25 19:23:43 +02:00
TrueCharts-Bot 63c8c0e80d Commit released Helm Chart and docs for TrueCharts
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-25 13:14:23 +00:00
Kjeld Schouten-Lebbing 37963de155
Add ReadOnlyRoot mitigation for S6 overlay (#1030)
* Add ReadOnlyRoot mitigation for S6 overlay

* try to fix some tests
2021-09-25 15:11:51 +02:00
TrueCharts-Bot 9bd2cf2de1 Commit released Helm Chart and docs for TrueCharts
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-25 12:56:43 +00:00
Kjeld Schouten-Lebbing 2db56c1e42
Fix remaining VPN addon issues (#1029)
* Fix remaining VPN addon issues

* fix minor common-test issue
2021-09-25 14:40:14 +02:00
TrueCharts-Bot c0aa278e27 Commit released Helm Chart and docs for TrueCharts
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-25 10:16:43 +00:00
kjeld Schouten-Lebbing 483d29ee0e
harden default security options for common 2021-09-25 12:10:24 +02:00
TrueCharts-Bot 87e3219b6f Commit released Helm Chart and docs for TrueCharts
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-21 08:50:15 +00:00
renovate[bot] d976ce2065
chore(deps): update non-major (#1013)
* chore(deps): update non-major

* Commit bumped App Version

Signed-off-by: TrueCharts-Bot <bot@truecharts.org>

Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-21 10:41:09 +02:00
TrueCharts-Bot fdd666d462 Commit released Helm Chart and docs for TrueCharts
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-14 22:02:11 +00:00
Kjeld Schouten-Lebbing 0fb8f8bb90
fix: make sure autopermissions sets the group owner correctly (#994)
* fix: make sure autopermissions sets the group owner correctly

* add test fix
2021-09-14 23:59:19 +02:00
TrueCharts-Bot 2ecefa844d Commit released Helm Chart and docs for TrueCharts
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-14 20:45:30 +00:00
renovate[bot] f2cf03eda3
chore(deps): update non-major (#987)
* chore(deps): update non-major

* Commit bumped App Version

Signed-off-by: TrueCharts-Bot <bot@truecharts.org>

Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-14 22:38:56 +02:00
kjeld Schouten-Lebbing ab1b39b88e
cleanup authentication credentials for OpenVPN 2021-09-13 21:18:11 +02:00
TrueCharts-Bot bc9b5c4938 Commit released Helm Chart and docs for TrueCharts
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-13 07:37:44 +00:00
kjeld Schouten-Lebbing 0970b3a8d3
fix: ensure wireguard env vars get created 2021-09-13 09:25:38 +02:00
TrueCharts-Bot 49feb48e21 Commit released Helm Chart and docs for TrueCharts
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-12 20:51:22 +00:00
kjeld Schouten-Lebbing 9ccdfcb7d8
fix: nuke all VPN volumes that we don't use (yet) out of Common 2021-09-12 22:49:18 +02:00
TrueCharts-Bot 34abe2bb4d Commit released Helm Chart and docs for TrueCharts
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-12 20:32:23 +00:00
kjeld Schouten-Lebbing e15b80e105
fix: completely remove unused volumes and correctly enable used volumes for VPN 2021-09-12 22:30:05 +02:00
TrueCharts-Bot 37b232788a Commit released Helm Chart and docs for TrueCharts
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-12 20:12:56 +00:00
kjeld Schouten-Lebbing b34f57e386
fix: remove old configmap and secret references for VPN config/scripts 2021-09-12 22:10:48 +02:00
TrueCharts-Bot 4279b0716b Commit released Helm Chart and docs for TrueCharts
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-12 19:53:37 +00:00
kjeld Schouten-Lebbing d072cb3b3a
fix: correct vpn securityContext 2021-09-12 21:51:10 +02:00
TrueCharts-Bot df8d937aa8 Commit released Helm Chart and docs for TrueCharts
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-12 18:38:56 +00:00
kjeld Schouten-Lebbing 82af2510d7
test app add some fixes 2021-09-12 20:35:33 +02:00
TrueCharts-Bot 5ab12c20ec
Commit released Helm Chart and docs for TrueCharts
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-12 20:35:25 +02:00
Kjeld Schouten-Lebbing a6037c62fa
fix: ensure annotationLists and labelLists don't get processed for disabled objects (#971) 2021-09-12 20:28:22 +02:00
TrueCharts-Bot 35ab5bff15 Commit released Helm Chart and docs for TrueCharts
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-12 15:40:32 +00:00
Kjeld Schouten-Lebbing b660bbf457
improv: improve dns and vpn values.yaml syntaxis (#970)
* improv: improve dns and vpn values.yaml syntaxis

* hmm

* fix tests

* no message
2021-09-12 17:39:01 +02:00
kjeld Schouten-Lebbing 040786356c
typofix 2021-09-11 22:55:57 +02:00
kjeld Schouten-Lebbing 48b8c27c08
also set default resources (which we use everywhere in SCALE anyway) in the common chart... 2021-09-11 22:40:27 +02:00
renovate[bot] 3e67e1c977
chore(deps): update non-major (#962)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-09-11 13:04:47 +02:00
Kjeld Schouten-Lebbing a8670a1482
feat: pin all container references to digests (#963) 2021-09-11 13:00:39 +02:00
TrueCharts-Bot b57a8960b5 Commit released Helm Chart and docs for TrueCharts
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-11 10:10:33 +00:00
kjeld Schouten-Lebbing 3b8005b04e
fix: remove duplicate securitycontext from autopermissions 2021-09-11 12:08:06 +02:00