TrueCharts-Bot
7bc182bbf7
Commit released Helm Chart and docs for TrueCharts
...
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-26 20:41:20 +00:00
kjeld Schouten-Lebbing
3dd449cc8e
(fix) correct autopermissions indent error in common
2021-09-26 22:37:15 +02:00
Kjeld Schouten-Lebbing
acf510ea13
(feat) Standardise and Harden default app securitycontext ( #1028 )
...
* Apply security hardened defaults to values.yaml for all apps
* Add default common securityContext to all apps
* Adjust securityContext defaults in questions.yaml, according to values.yaml
* Add default common podSecurityContext to all apps
* Clean whitespace
* Clean more whitespace
* Adjust podSecurityContext defaults in questions.yaml, according to values.yaml
* fix pgadmin
Co-authored-by: Stavros kois <s.kois@outlook.com>
2021-09-26 20:05:21 +02:00
TrueCharts-Bot
fe03d574fc
Commit released Helm Chart and docs for TrueCharts
...
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-26 10:11:12 +00:00
kjeld Schouten-Lebbing
665d7282df
revert /var/run mount fix on common
2021-09-26 12:08:10 +02:00
TrueCharts-Bot
1f42ebdd4a
Commit released Helm Chart and docs for TrueCharts
...
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-26 09:42:40 +00:00
Kjeld Schouten-Lebbing
744d8060b9
(chore) bump common to trigger release
2021-09-26 11:40:37 +02:00
kjeld Schouten-Lebbing
842cf0a65f
(chore) also use s6 readonlyroot mitigation when running asNonRoot
2021-09-26 11:20:08 +02:00
kjeld Schouten-Lebbing
4076def32a
(fix) limit the varrun emptyDir to s6 overlay related content
2021-09-26 11:19:35 +02:00
TrueCharts-Bot
72871fb371
Commit released Helm Chart and docs for TrueCharts
...
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-25 18:34:03 +00:00
Kjeld Schouten-Lebbing
4ea3185e38
add a special /var/run tmpfs mountpoint to common ( #1032 )
...
* add a special /var/run tmpfs mountpoint to common
* common-test version in tests fix
2021-09-25 20:31:39 +02:00
TrueCharts-Bot
15ad9fe2e9
Commit released Helm Chart and docs for TrueCharts
...
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-25 17:38:31 +00:00
kjeld Schouten-Lebbing
961b2bfbc3
bump common
2021-09-25 19:34:45 +02:00
TrueCharts-Bot
a88c555f82
Commit released Helm Chart and docs for TrueCharts
...
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-25 17:25:55 +00:00
Kjeld Schouten-Lebbing
d9dffc7952
fix common test mistake ( #1031 )
...
* fix common test mistake
* configfile.enabled
* VPN auto permissions fix
* trigger common-test install
* more thorough fix
* fix test to use sonarr instead of homerr
* use a super simple container
* try tweaking a bit to allow run as nonroot
* try fixing tests
* fix tests... again...
* fix... AGAIN...
2021-09-25 19:23:43 +02:00
TrueCharts-Bot
63c8c0e80d
Commit released Helm Chart and docs for TrueCharts
...
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-25 13:14:23 +00:00
Kjeld Schouten-Lebbing
37963de155
Add ReadOnlyRoot mitigation for S6 overlay ( #1030 )
...
* Add ReadOnlyRoot mitigation for S6 overlay
* try to fix some tests
2021-09-25 15:11:51 +02:00
TrueCharts-Bot
9bd2cf2de1
Commit released Helm Chart and docs for TrueCharts
...
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-25 12:56:43 +00:00
Kjeld Schouten-Lebbing
2db56c1e42
Fix remaining VPN addon issues ( #1029 )
...
* Fix remaining VPN addon issues
* fix minor common-test issue
2021-09-25 14:40:14 +02:00
TrueCharts-Bot
c0aa278e27
Commit released Helm Chart and docs for TrueCharts
...
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-25 10:16:43 +00:00
kjeld Schouten-Lebbing
483d29ee0e
harden default security options for common
2021-09-25 12:10:24 +02:00
TrueCharts-Bot
87e3219b6f
Commit released Helm Chart and docs for TrueCharts
...
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-21 08:50:15 +00:00
renovate[bot]
d976ce2065
chore(deps): update non-major ( #1013 )
...
* chore(deps): update non-major
* Commit bumped App Version
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-21 10:41:09 +02:00
TrueCharts-Bot
fdd666d462
Commit released Helm Chart and docs for TrueCharts
...
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-14 22:02:11 +00:00
Kjeld Schouten-Lebbing
0fb8f8bb90
fix: make sure autopermissions sets the group owner correctly ( #994 )
...
* fix: make sure autopermissions sets the group owner correctly
* add test fix
2021-09-14 23:59:19 +02:00
TrueCharts-Bot
2ecefa844d
Commit released Helm Chart and docs for TrueCharts
...
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-14 20:45:30 +00:00
renovate[bot]
f2cf03eda3
chore(deps): update non-major ( #987 )
...
* chore(deps): update non-major
* Commit bumped App Version
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-14 22:38:56 +02:00
kjeld Schouten-Lebbing
ab1b39b88e
cleanup authentication credentials for OpenVPN
2021-09-13 21:18:11 +02:00
TrueCharts-Bot
bc9b5c4938
Commit released Helm Chart and docs for TrueCharts
...
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-13 07:37:44 +00:00
kjeld Schouten-Lebbing
0970b3a8d3
fix: ensure wireguard env vars get created
2021-09-13 09:25:38 +02:00
TrueCharts-Bot
49feb48e21
Commit released Helm Chart and docs for TrueCharts
...
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-12 20:51:22 +00:00
kjeld Schouten-Lebbing
9ccdfcb7d8
fix: nuke all VPN volumes that we don't use (yet) out of Common
2021-09-12 22:49:18 +02:00
TrueCharts-Bot
34abe2bb4d
Commit released Helm Chart and docs for TrueCharts
...
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-12 20:32:23 +00:00
kjeld Schouten-Lebbing
e15b80e105
fix: completely remove unused volumes and correctly enable used volumes for VPN
2021-09-12 22:30:05 +02:00
TrueCharts-Bot
37b232788a
Commit released Helm Chart and docs for TrueCharts
...
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-12 20:12:56 +00:00
kjeld Schouten-Lebbing
b34f57e386
fix: remove old configmap and secret references for VPN config/scripts
2021-09-12 22:10:48 +02:00
TrueCharts-Bot
4279b0716b
Commit released Helm Chart and docs for TrueCharts
...
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-12 19:53:37 +00:00
kjeld Schouten-Lebbing
d072cb3b3a
fix: correct vpn securityContext
2021-09-12 21:51:10 +02:00
TrueCharts-Bot
df8d937aa8
Commit released Helm Chart and docs for TrueCharts
...
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-12 18:38:56 +00:00
kjeld Schouten-Lebbing
82af2510d7
test app add some fixes
2021-09-12 20:35:33 +02:00
TrueCharts-Bot
5ab12c20ec
Commit released Helm Chart and docs for TrueCharts
...
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-12 20:35:25 +02:00
Kjeld Schouten-Lebbing
a6037c62fa
fix: ensure annotationLists and labelLists don't get processed for disabled objects ( #971 )
2021-09-12 20:28:22 +02:00
TrueCharts-Bot
35ab5bff15
Commit released Helm Chart and docs for TrueCharts
...
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-12 15:40:32 +00:00
Kjeld Schouten-Lebbing
b660bbf457
improv: improve dns and vpn values.yaml syntaxis ( #970 )
...
* improv: improve dns and vpn values.yaml syntaxis
* hmm
* fix tests
* no message
2021-09-12 17:39:01 +02:00
kjeld Schouten-Lebbing
040786356c
typofix
2021-09-11 22:55:57 +02:00
kjeld Schouten-Lebbing
48b8c27c08
also set default resources (which we use everywhere in SCALE anyway) in the common chart...
2021-09-11 22:40:27 +02:00
renovate[bot]
3e67e1c977
chore(deps): update non-major ( #962 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-09-11 13:04:47 +02:00
Kjeld Schouten-Lebbing
a8670a1482
feat: pin all container references to digests ( #963 )
2021-09-11 13:00:39 +02:00
TrueCharts-Bot
b57a8960b5
Commit released Helm Chart and docs for TrueCharts
...
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2021-09-11 10:10:33 +00:00
kjeld Schouten-Lebbing
3b8005b04e
fix: remove duplicate securitycontext from autopermissions
2021-09-11 12:08:06 +02:00