Commit new Chart releases for TrueCharts
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
This commit is contained in:
parent
7d25447ad4
commit
65466c30c3
|
@ -0,0 +1,99 @@
|
||||||
|
**Important:**
|
||||||
|
*for the complete changelog, please refer to the website*
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## [authelia-15.1.20](https://github.com/truecharts/charts/compare/authelia-15.1.19...authelia-15.1.20) (2023-05-24)
|
||||||
|
|
||||||
|
### Chore
|
||||||
|
|
||||||
|
- update helm general non-major ([#9125](https://github.com/truecharts/charts/issues/9125))
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## [authelia-15.1.19](https://github.com/truecharts/charts/compare/authelia-15.1.17...authelia-15.1.19) (2023-05-23)
|
||||||
|
|
||||||
|
### Chore
|
||||||
|
|
||||||
|
- Improved lint speed ([#8809](https://github.com/truecharts/charts/issues/8809))
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## [authelia-15.1.17](https://github.com/truecharts/charts/compare/authelia-15.1.16...authelia-15.1.17) (2023-05-22)
|
||||||
|
|
||||||
|
### Chore
|
||||||
|
|
||||||
|
- update helm general non-major ([#9089](https://github.com/truecharts/charts/issues/9089))
|
||||||
|
|
||||||
|
### Fix
|
||||||
|
|
||||||
|
- fix mistakes on questions.yaml
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## [authelia-15.1.16](https://github.com/truecharts/charts/compare/authelia-15.1.15...authelia-15.1.16) (2023-05-16)
|
||||||
|
|
||||||
|
### Chore
|
||||||
|
|
||||||
|
- update helm general non-major ([#8979](https://github.com/truecharts/charts/issues/8979))
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## [authelia-15.1.15](https://github.com/truecharts/charts/compare/authelia-15.1.14...authelia-15.1.15) (2023-05-05)
|
||||||
|
|
||||||
|
### Chore
|
||||||
|
|
||||||
|
- update helm general non-major ([#8782](https://github.com/truecharts/charts/issues/8782))
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## [authelia-15.1.14](https://github.com/truecharts/charts/compare/authelia-15.1.13...authelia-15.1.14) (2023-05-05)
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## [authelia-15.1.13](https://github.com/truecharts/charts/compare/authelia-15.1.12...authelia-15.1.13) (2023-05-03)
|
||||||
|
|
||||||
|
### Chore
|
||||||
|
|
||||||
|
- update helm general non-major ([#8739](https://github.com/truecharts/charts/issues/8739))
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## [authelia-15.1.12](https://github.com/truecharts/charts/compare/authelia-15.1.11...authelia-15.1.12) (2023-04-25)
|
||||||
|
|
||||||
|
### Chore
|
||||||
|
|
||||||
|
- update helm general non-major ([#8153](https://github.com/truecharts/charts/issues/8153))
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## [authelia-15.1.11](https://github.com/truecharts/charts/compare/authelia-15.1.10...authelia-15.1.11) (2023-04-25)
|
||||||
|
|
||||||
|
### Chore
|
||||||
|
|
||||||
|
- update helm general non-major ([#8145](https://github.com/truecharts/charts/issues/8145))
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## [authelia-15.1.10](https://github.com/truecharts/charts/compare/authelia-15.1.9...authelia-15.1.10) (2023-04-21)
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## [authelia-15.1.9](https://github.com/truecharts/charts/compare/authelia-15.1.8...authelia-15.1.9) (2023-04-20)
|
||||||
|
|
||||||
|
### Chore
|
||||||
|
|
||||||
|
- update helm general non-major ([#8087](https://github.com/truecharts/charts/issues/8087))
|
||||||
|
|
||||||
|
|
|
@ -0,0 +1,43 @@
|
||||||
|
apiVersion: v2
|
||||||
|
appVersion: "4.37.5"
|
||||||
|
dependencies:
|
||||||
|
- name: common
|
||||||
|
repository: https://library-charts.truecharts.org
|
||||||
|
version: 12.9.5
|
||||||
|
- condition: redis.enabled
|
||||||
|
name: redis
|
||||||
|
repository: https://deps.truecharts.org
|
||||||
|
version: 6.0.44
|
||||||
|
deprecated: false
|
||||||
|
description: Authelia is a Single Sign-On Multi-Factor portal for web apps
|
||||||
|
home: https://truecharts.org/charts/enterprise/authelia
|
||||||
|
icon: https://truecharts.org/img/hotlink-ok/chart-icons/authelia.png
|
||||||
|
keywords:
|
||||||
|
- authelia
|
||||||
|
- authentication
|
||||||
|
- login
|
||||||
|
- SSO
|
||||||
|
- Authentication
|
||||||
|
- Security
|
||||||
|
- Two-Factor
|
||||||
|
- U2F
|
||||||
|
- YubiKey
|
||||||
|
- Push Notifications
|
||||||
|
- LDAP
|
||||||
|
kubeVersion: ">=1.16.0-0"
|
||||||
|
maintainers:
|
||||||
|
- email: info@truecharts.org
|
||||||
|
name: TrueCharts
|
||||||
|
url: https://truecharts.org
|
||||||
|
name: authelia
|
||||||
|
sources:
|
||||||
|
- https://github.com/truecharts/charts/tree/master/charts/enterprise/authelia
|
||||||
|
- https://github.com/authelia/chartrepo
|
||||||
|
- https://github.com/authelia/authelia
|
||||||
|
type: application
|
||||||
|
version: 15.1.20
|
||||||
|
annotations:
|
||||||
|
truecharts.org/catagories: |
|
||||||
|
- security
|
||||||
|
truecharts.org/SCALE-support: "true"
|
||||||
|
truecharts.org/grade: U
|
|
@ -0,0 +1,9 @@
|
||||||
|
|
||||||
|
|
||||||
|
## [authelia-15.1.20](https://github.com/truecharts/charts/compare/authelia-15.1.19...authelia-15.1.20) (2023-05-24)
|
||||||
|
|
||||||
|
### Chore
|
||||||
|
|
||||||
|
- update helm general non-major ([#9125](https://github.com/truecharts/charts/issues/9125))
|
||||||
|
|
||||||
|
|
|
@ -0,0 +1,8 @@
|
||||||
|
Authelia is a Single Sign-On Multi-Factor portal for web apps
|
||||||
|
|
||||||
|
This App is supplied by TrueCharts, for more information visit the manual: [https://truecharts.org/charts/enterprise/authelia](https://truecharts.org/charts/enterprise/authelia)
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
TrueCharts can only exist due to the incredible effort of our staff.
|
||||||
|
Please consider making a [donation](https://truecharts.org/sponsor) or contributing back to the project any way you can!
|
Binary file not shown.
Binary file not shown.
|
@ -0,0 +1,633 @@
|
||||||
|
image:
|
||||||
|
repository: tccr.io/truecharts/authelia
|
||||||
|
pullPolicy: IfNotPresent
|
||||||
|
tag: 4.37.5@sha256:76a4617539534cec140fd98a12f721b878524f2df3a3653f3df8ff2b7eaab586
|
||||||
|
manifestManager:
|
||||||
|
enabled: true
|
||||||
|
workload:
|
||||||
|
main:
|
||||||
|
replicas: 2
|
||||||
|
strategy: RollingUpdate
|
||||||
|
podSpec:
|
||||||
|
containers:
|
||||||
|
main:
|
||||||
|
command:
|
||||||
|
- authelia
|
||||||
|
args:
|
||||||
|
- --config=/configuration.yaml
|
||||||
|
envFrom:
|
||||||
|
- configMapRef:
|
||||||
|
name: authelia-paths
|
||||||
|
probes:
|
||||||
|
liveness:
|
||||||
|
type: http
|
||||||
|
path: "/api/health"
|
||||||
|
|
||||||
|
readiness:
|
||||||
|
type: http
|
||||||
|
path: "/api/health"
|
||||||
|
|
||||||
|
startup:
|
||||||
|
type: http
|
||||||
|
path: "/api/health"
|
||||||
|
|
||||||
|
service:
|
||||||
|
main:
|
||||||
|
ports:
|
||||||
|
main:
|
||||||
|
port: 9091
|
||||||
|
targetPort: 9091
|
||||||
|
|
||||||
|
persistence:
|
||||||
|
config:
|
||||||
|
enabled: true
|
||||||
|
mountPath: "/config"
|
||||||
|
|
||||||
|
cnpg:
|
||||||
|
main:
|
||||||
|
enabled: true
|
||||||
|
user: authelia
|
||||||
|
database: authelia
|
||||||
|
|
||||||
|
# Enabled redis
|
||||||
|
# ... for more options see https://github.com/tccr.io/truecharts/charts/tree/master/tccr.io/truecharts/redis
|
||||||
|
redis:
|
||||||
|
enabled: true
|
||||||
|
|
||||||
|
domain: example.com
|
||||||
|
|
||||||
|
##
|
||||||
|
## Server Configuration
|
||||||
|
##
|
||||||
|
server:
|
||||||
|
##
|
||||||
|
## Port sets the configured port for the daemon, service, and the probes.
|
||||||
|
## Default is 9091 and should not need to be changed.
|
||||||
|
##
|
||||||
|
port: 9091
|
||||||
|
|
||||||
|
## Buffers usually should be configured to be the same value.
|
||||||
|
## Explanation at https://www.authelia.com/docs/configuration/server.html
|
||||||
|
## Read buffer size adjusts the server's max incoming request size in bytes.
|
||||||
|
## Write buffer size does the same for outgoing responses.
|
||||||
|
read_buffer_size: 4096
|
||||||
|
write_buffer_size: 4096
|
||||||
|
## Set the single level path Authelia listens on.
|
||||||
|
## Must be alphanumeric chars and should not contain any slashes.
|
||||||
|
path: ""
|
||||||
|
|
||||||
|
log:
|
||||||
|
## Level of verbosity for logs: info, debug, trace.
|
||||||
|
level: trace
|
||||||
|
|
||||||
|
## Format the logs are written as: json, text.
|
||||||
|
format: text
|
||||||
|
|
||||||
|
## TODO: Statefulness check should check if this is set, and the configMap should enable it.
|
||||||
|
## File path where the logs will be written. If not set logs are written to stdout.
|
||||||
|
# file_path: /config/authelia.log
|
||||||
|
|
||||||
|
## Default redirection URL
|
||||||
|
##
|
||||||
|
## If user tries to authenticate without any referer, Authelia does not know where to redirect the user to at the end
|
||||||
|
## of the authentication process. This parameter allows you to specify the default redirection URL Authelia will use
|
||||||
|
## in such a case.
|
||||||
|
##
|
||||||
|
## Note: this parameter is optional. If not provided, user won't be redirected upon successful authentication.
|
||||||
|
## Default is https://www.<domain> (value at the top of the values.yaml).
|
||||||
|
default_redirection_url: ""
|
||||||
|
# default_redirection_url: https://example.com
|
||||||
|
|
||||||
|
theme: light
|
||||||
|
|
||||||
|
##
|
||||||
|
## TOTP Configuration
|
||||||
|
##
|
||||||
|
## Parameters used for TOTP generation
|
||||||
|
totp:
|
||||||
|
## The issuer name displayed in the Authenticator application of your choice
|
||||||
|
## See: https://github.com/google/google-authenticator/wiki/Key-Uri-Format for more info on issuer names
|
||||||
|
## Defaults to <domain>.
|
||||||
|
issuer: ""
|
||||||
|
## The period in seconds a one-time password is current for. Changing this will require all users to register
|
||||||
|
## their TOTP applications again. Warning: before changing period read the docs link below.
|
||||||
|
period: 30
|
||||||
|
## The skew controls number of one-time passwords either side of the current one that are valid.
|
||||||
|
## Warning: before changing skew read the docs link below.
|
||||||
|
## See: https://www.authelia.com/docs/configuration/one-time-password.html#period-and-skew to read the documentation.
|
||||||
|
skew: 1
|
||||||
|
|
||||||
|
##
|
||||||
|
## Duo Push API Configuration
|
||||||
|
##
|
||||||
|
## Parameters used to contact the Duo API. Those are generated when you protect an application of type
|
||||||
|
## "Partner Auth API" in the management panel.
|
||||||
|
duo_api:
|
||||||
|
enabled: false
|
||||||
|
hostname: api-123456789.example.com
|
||||||
|
integration_key: ABCDEF
|
||||||
|
plain_api_key: ""
|
||||||
|
|
||||||
|
## NTP settings
|
||||||
|
|
||||||
|
ntp:
|
||||||
|
address: "time.cloudflare.com:123"
|
||||||
|
version: 4
|
||||||
|
max_desync: 3s
|
||||||
|
disable_startup_check: false
|
||||||
|
disable_failure: true
|
||||||
|
|
||||||
|
##
|
||||||
|
## Authentication Backend Provider Configuration
|
||||||
|
##
|
||||||
|
## Used for verifying user passwords and retrieve information such as email address and groups users belong to.
|
||||||
|
##
|
||||||
|
## The available providers are: `file`, `ldap`. You must use one and only one of these providers.
|
||||||
|
authentication_backend:
|
||||||
|
## Disable both the HTML element and the API for reset password functionality
|
||||||
|
disable_reset_password: false
|
||||||
|
|
||||||
|
## The amount of time to wait before we refresh data from the authentication backend. Uses duration notation.
|
||||||
|
## To disable this feature set it to 'disable', this will slightly reduce security because for Authelia, users will
|
||||||
|
## always belong to groups they belonged to at the time of login even if they have been removed from them in LDAP.
|
||||||
|
## To force update on every request you can set this to '0' or 'always', this will increase processor demand.
|
||||||
|
## See the below documentation for more information.
|
||||||
|
## Duration Notation docs: https://www.authelia.com/docs/configuration/index.html#duration-notation-format
|
||||||
|
## Refresh Interval docs: https://www.authelia.com/docs/configuration/authentication/ldap.html#refresh-interval
|
||||||
|
refresh_interval: 5m
|
||||||
|
|
||||||
|
## LDAP backend configuration.
|
||||||
|
##
|
||||||
|
## This backend allows Authelia to be scaled to more
|
||||||
|
## than one instance and therefore is recommended for
|
||||||
|
## production.
|
||||||
|
ldap:
|
||||||
|
## Enable LDAP Backend.
|
||||||
|
enabled: false
|
||||||
|
|
||||||
|
## The LDAP implementation, this affects elements like the attribute utilised for resetting a password.
|
||||||
|
## Acceptable options are as follows:
|
||||||
|
## - 'activedirectory' - For Microsoft Active Directory.
|
||||||
|
## - 'custom' - For custom specifications of attributes and filters.
|
||||||
|
## This currently defaults to 'custom' to maintain existing behaviour.
|
||||||
|
##
|
||||||
|
## Depending on the option here certain other values in this section have a default value, notably all of the
|
||||||
|
## attribute mappings have a default value that this config overrides, you can read more about these default values
|
||||||
|
## at https://www.authelia.com/docs/configuration/authentication/ldap.html#defaults
|
||||||
|
implementation: activedirectory
|
||||||
|
|
||||||
|
## The url to the ldap server. Format: <scheme>://<address>[:<port>].
|
||||||
|
## Scheme can be ldap or ldaps in the format (port optional).
|
||||||
|
url: ldap://openldap.default.svc.cluster.local
|
||||||
|
|
||||||
|
## Connection Timeout.
|
||||||
|
timeout: 5s
|
||||||
|
|
||||||
|
## Use StartTLS with the LDAP connection.
|
||||||
|
start_tls: false
|
||||||
|
|
||||||
|
tls:
|
||||||
|
## Server Name for certificate validation (in case it's not set correctly in the URL).
|
||||||
|
server_name: ""
|
||||||
|
|
||||||
|
## Skip verifying the server certificate (to allow a self-signed certificate).
|
||||||
|
## In preference to setting this we strongly recommend you add the public portion of the certificate to the
|
||||||
|
## certificates directory which is defined by the `certificates_directory` option at the top of the config.
|
||||||
|
skip_verify: false
|
||||||
|
|
||||||
|
## Minimum TLS version for either Secure LDAP or LDAP StartTLS.
|
||||||
|
minimum_version: TLS1.2
|
||||||
|
|
||||||
|
## The base dn for every LDAP query.
|
||||||
|
base_dn: DC=example,DC=com
|
||||||
|
|
||||||
|
## The attribute holding the username of the user. This attribute is used to populate the username in the session
|
||||||
|
## information. It was introduced due to #561 to handle case insensitive search queries. For you information,
|
||||||
|
## Microsoft Active Directory usually uses 'sAMAccountName' and OpenLDAP usually uses 'uid'. Beware that this
|
||||||
|
## attribute holds the unique identifiers for the users binding the user and the configuration stored in database.
|
||||||
|
## Therefore only single value attributes are allowed and the value must never be changed once attributed to a user
|
||||||
|
## otherwise it would break the configuration for that user. Technically, non-unique attributes like 'mail' can also
|
||||||
|
## be used but we don't recommend using them, we instead advise to use the attributes mentioned above
|
||||||
|
## (sAMAccountName and uid) to follow https://www.ietf.org/rfc/rfc2307.txt.
|
||||||
|
username_attribute: ""
|
||||||
|
|
||||||
|
## An additional dn to define the scope to all users.
|
||||||
|
additional_users_dn: OU=Users
|
||||||
|
|
||||||
|
## The users filter used in search queries to find the user profile based on input filled in login form.
|
||||||
|
## Various placeholders are available in the user filter:
|
||||||
|
## - {input} is a placeholder replaced by what the user inputs in the login form.
|
||||||
|
## - {username_attribute} is a mandatory placeholder replaced by what is configured in `username_attribute`.
|
||||||
|
## - {mail_attribute} is a placeholder replaced by what is configured in `mail_attribute`.
|
||||||
|
## - DON'T USE - {0} is an alias for {input} supported for backward compatibility but it will be deprecated in later
|
||||||
|
## versions, so please don't use it.
|
||||||
|
##
|
||||||
|
## Recommended settings are as follows:
|
||||||
|
## - Microsoft Active Directory: (&({username_attribute}={input})(objectCategory=person)(objectClass=user))
|
||||||
|
## - OpenLDAP:
|
||||||
|
## - (&({username_attribute}={input})(objectClass=person))
|
||||||
|
## - (&({username_attribute}={input})(objectClass=inetOrgPerson))
|
||||||
|
##
|
||||||
|
## To allow sign in both with username and email, one can use a filter like
|
||||||
|
## (&(|({username_attribute}={input})({mail_attribute}={input}))(objectClass=person))
|
||||||
|
users_filter: ""
|
||||||
|
|
||||||
|
## An additional dn to define the scope of groups.
|
||||||
|
additional_groups_dn: OU=Groups
|
||||||
|
|
||||||
|
## The groups filter used in search queries to find the groups of the user.
|
||||||
|
## - {input} is a placeholder replaced by what the user inputs in the login form.
|
||||||
|
## - {username} is a placeholder replace by the username stored in LDAP (based on `username_attribute`).
|
||||||
|
## - {dn} is a matcher replaced by the user distinguished name, aka, user DN.
|
||||||
|
## - {username_attribute} is a placeholder replaced by what is configured in `username_attribute`.
|
||||||
|
## - {mail_attribute} is a placeholder replaced by what is configured in `mail_attribute`.
|
||||||
|
## - DON'T USE - {0} is an alias for {input} supported for backward compatibility but it will be deprecated in later
|
||||||
|
## versions, so please don't use it.
|
||||||
|
## - DON'T USE - {1} is an alias for {username} supported for backward compatibility but it will be deprecated in
|
||||||
|
## later version, so please don't use it.
|
||||||
|
##
|
||||||
|
## If your groups use the `groupOfUniqueNames` structure use this instead:
|
||||||
|
## (&(uniquemember={dn})(objectclass=groupOfUniqueNames))
|
||||||
|
groups_filter: ""
|
||||||
|
|
||||||
|
## The attribute holding the name of the group
|
||||||
|
group_name_attribute: ""
|
||||||
|
|
||||||
|
## The attribute holding the mail address of the user. If multiple email addresses are defined for a user, only the
|
||||||
|
## first one returned by the LDAP server is used.
|
||||||
|
mail_attribute: ""
|
||||||
|
|
||||||
|
## The attribute holding the display name of the user. This will be used to greet an authenticated user.
|
||||||
|
display_name_attribute: ""
|
||||||
|
|
||||||
|
## The username of the admin user.
|
||||||
|
user: CN=Authelia,DC=example,DC=com
|
||||||
|
plain_password: ""
|
||||||
|
|
||||||
|
##
|
||||||
|
## File (Authentication Provider)
|
||||||
|
##
|
||||||
|
## With this backend, the users database is stored in a file which is updated when users reset their passwords.
|
||||||
|
## Therefore, this backend is meant to be used in a dev environment and not in production since it prevents Authelia
|
||||||
|
## to be scaled to more than one instance. The options under 'password' have sane defaults, and as it has security
|
||||||
|
## implications it is highly recommended you leave the default values. Before considering changing these settings
|
||||||
|
## please read the docs page below:
|
||||||
|
## https://www.authelia.com/docs/configuration/authentication/file.html#password-hash-algorithm-tuning
|
||||||
|
##
|
||||||
|
## Important: Kubernetes (or HA) users must read https://www.authelia.com/docs/features/statelessness.html
|
||||||
|
##
|
||||||
|
file:
|
||||||
|
enabled: true
|
||||||
|
path: /config/users_database.yml
|
||||||
|
password:
|
||||||
|
algorithm: argon2id
|
||||||
|
iterations: 1
|
||||||
|
key_length: 32
|
||||||
|
salt_length: 16
|
||||||
|
memory: 1024
|
||||||
|
parallelism: 8
|
||||||
|
|
||||||
|
##
|
||||||
|
## Access Control Configuration
|
||||||
|
##
|
||||||
|
## Access control is a list of rules defining the authorizations applied for one resource to users or group of users.
|
||||||
|
##
|
||||||
|
## If 'access_control' is not defined, ACL rules are disabled and the 'bypass' rule is applied, i.e., access is allowed
|
||||||
|
## to anyone. Otherwise restrictions follow the rules defined.
|
||||||
|
##
|
||||||
|
## Note: One can use the wildcard * to match any subdomain.
|
||||||
|
## It must stand at the beginning of the pattern. (example: *.mydomain.com)
|
||||||
|
##
|
||||||
|
## Note: You must put patterns containing wildcards between simple quotes for the YAML to be syntactically correct.
|
||||||
|
##
|
||||||
|
## Definition: A 'rule' is an object with the following keys: 'domain', 'subject', 'policy' and 'resources'.
|
||||||
|
##
|
||||||
|
## - 'domain' defines which domain or set of domains the rule applies to.
|
||||||
|
##
|
||||||
|
## - 'subject' defines the subject to apply authorizations to. This parameter is optional and matching any user if not
|
||||||
|
## provided. If provided, the parameter represents either a user or a group. It should be of the form
|
||||||
|
## 'user:<username>' or 'group:<groupname>'.
|
||||||
|
##
|
||||||
|
## - 'policy' is the policy to apply to resources. It must be either 'bypass', 'one_factor', 'two_factor' or 'deny'.
|
||||||
|
##
|
||||||
|
## - 'resources' is a list of regular expressions that matches a set of resources to apply the policy to. This parameter
|
||||||
|
## is optional and matches any resource if not provided.
|
||||||
|
##
|
||||||
|
## Note: the order of the rules is important. The first policy matching (domain, resource, subject) applies.
|
||||||
|
access_control:
|
||||||
|
## Default policy can either be 'bypass', 'one_factor', 'two_factor' or 'deny'. It is the policy applied to any
|
||||||
|
## resource if there is no policy to be applied to the user.
|
||||||
|
default_policy: deny
|
||||||
|
|
||||||
|
networks: []
|
||||||
|
# networks:
|
||||||
|
# - name: private
|
||||||
|
# networks:
|
||||||
|
# - 10.0.0.0/8
|
||||||
|
# - 172.16.0.0/12
|
||||||
|
# - 192.168.0.0/16
|
||||||
|
# - name: vpn
|
||||||
|
# networks:
|
||||||
|
# - 10.9.0.0/16
|
||||||
|
|
||||||
|
rules: []
|
||||||
|
# rules:
|
||||||
|
# - domain: public.example.com
|
||||||
|
# policy: bypass
|
||||||
|
# - domain: "*.example.com"
|
||||||
|
# policy: bypass
|
||||||
|
# methods:
|
||||||
|
# - OPTIONS
|
||||||
|
# - domain: secure.example.com
|
||||||
|
# policy: one_factor
|
||||||
|
# networks:
|
||||||
|
# - private
|
||||||
|
# - vpn
|
||||||
|
# - 192.168.1.0/24
|
||||||
|
# - 10.0.0.1
|
||||||
|
# - domain:
|
||||||
|
# - secure.example.com
|
||||||
|
# - private.example.com
|
||||||
|
# policy: two_factor
|
||||||
|
# - domain: singlefactor.example.com
|
||||||
|
# policy: one_factor
|
||||||
|
# - domain: "mx2.mail.example.com"
|
||||||
|
# subject: "group:admins"
|
||||||
|
# policy: deny
|
||||||
|
# - domain: "*.example.com"
|
||||||
|
# subject:
|
||||||
|
# - "group:admins"
|
||||||
|
# - "group:moderators"
|
||||||
|
# policy: two_factor
|
||||||
|
# - domain: dev.example.com
|
||||||
|
# resources:
|
||||||
|
# - "^/groups/dev/.*$"
|
||||||
|
# subject: "group:dev"
|
||||||
|
# policy: two_factor
|
||||||
|
# - domain: dev.example.com
|
||||||
|
# resources:
|
||||||
|
# - "^/users/john/.*$"
|
||||||
|
# subject:
|
||||||
|
# - ["group:dev", "user:john"]
|
||||||
|
# - "group:admins"
|
||||||
|
# policy: two_factor
|
||||||
|
# - domain: "{user}.example.com"
|
||||||
|
# policy: bypass
|
||||||
|
|
||||||
|
##
|
||||||
|
## Session Provider Configuration
|
||||||
|
##
|
||||||
|
## The session cookies identify the user once logged in.
|
||||||
|
## The available providers are: `memory`, `redis`. Memory is the provider unless redis is defined.
|
||||||
|
session:
|
||||||
|
## The name of the session cookie. (default: authelia_session).
|
||||||
|
name: authelia_session
|
||||||
|
|
||||||
|
## Sets the Cookie SameSite value. Possible options are none, lax, or strict.
|
||||||
|
## Please read https://www.authelia.com/docs/configuration/session.html#same_site
|
||||||
|
same_site: lax
|
||||||
|
|
||||||
|
## The time in seconds before the cookie expires and session is reset.
|
||||||
|
expiration: 1h
|
||||||
|
|
||||||
|
## The inactivity time in seconds before the session is reset.
|
||||||
|
inactivity: 5m
|
||||||
|
|
||||||
|
## The remember me duration.
|
||||||
|
## Value is in seconds, or duration notation. Value of 0 disables remember me.
|
||||||
|
## See: https://www.authelia.com/docs/configuration/index.html#duration-notation-format
|
||||||
|
## Longer periods are considered less secure because a stolen cookie will last longer giving attackers more time to
|
||||||
|
## spy or attack. Currently the default is 1M or 1 month.
|
||||||
|
remember_me_duration: 1M
|
||||||
|
|
||||||
|
##
|
||||||
|
## Redis Provider
|
||||||
|
##
|
||||||
|
## Important: Kubernetes (or HA) users must read https://www.authelia.com/docs/features/statelessness.html
|
||||||
|
##
|
||||||
|
## The redis connection details
|
||||||
|
redisProvider:
|
||||||
|
port: 6379
|
||||||
|
|
||||||
|
## Optional username to be used with authentication.
|
||||||
|
# username: authelia
|
||||||
|
username: ""
|
||||||
|
|
||||||
|
## This is the Redis DB Index https://redis.io/commands/select (sometimes referred to as database number, DB, etc).
|
||||||
|
database_index: 0
|
||||||
|
|
||||||
|
## The maximum number of concurrent active connections to Redis.
|
||||||
|
maximum_active_connections: 8
|
||||||
|
|
||||||
|
## The target number of idle connections to have open ready for work. Useful when opening connections is slow.
|
||||||
|
minimum_idle_connections: 0
|
||||||
|
|
||||||
|
## The Redis TLS configuration. If defined will require a TLS connection to the Redis instance(s).
|
||||||
|
tls:
|
||||||
|
enabled: false
|
||||||
|
|
||||||
|
## Server Name for certificate validation (in case you are using the IP or non-FQDN in the host option).
|
||||||
|
server_name: ""
|
||||||
|
|
||||||
|
## Skip verifying the server certificate (to allow a self-signed certificate).
|
||||||
|
## In preference to setting this we strongly recommend you add the public portion of the certificate to the
|
||||||
|
## certificates directory which is defined by the `certificates_directory` option at the top of the config.
|
||||||
|
skip_verify: false
|
||||||
|
|
||||||
|
## Minimum TLS version for the connection.
|
||||||
|
minimum_version: TLS1.2
|
||||||
|
|
||||||
|
## The Redis HA configuration options.
|
||||||
|
## This provides specific options to Redis Sentinel, sentinel_name must be defined (Master Name).
|
||||||
|
high_availability:
|
||||||
|
enabled: false
|
||||||
|
enabledSecret: false
|
||||||
|
## Sentinel Name / Master Name
|
||||||
|
sentinel_name: mysentinel
|
||||||
|
|
||||||
|
## The additional nodes to pre-seed the redis provider with (for sentinel).
|
||||||
|
## If the host in the above section is defined, it will be combined with this list to connect to sentinel.
|
||||||
|
## For high availability to be used you must have either defined; the host above or at least one node below.
|
||||||
|
nodes: []
|
||||||
|
# nodes:
|
||||||
|
# - host: sentinel-0.databases.svc.cluster.local
|
||||||
|
# port: 26379
|
||||||
|
# - host: sentinel-1.databases.svc.cluster.local
|
||||||
|
# port: 26379
|
||||||
|
|
||||||
|
## Choose the host with the lowest latency.
|
||||||
|
route_by_latency: false
|
||||||
|
|
||||||
|
## Choose the host randomly.
|
||||||
|
route_randomly: false
|
||||||
|
|
||||||
|
##
|
||||||
|
## Regulation Configuration
|
||||||
|
##
|
||||||
|
## This mechanism prevents attackers from brute forcing the first factor. It bans the user if too many attempts are done
|
||||||
|
## in a short period of time.
|
||||||
|
regulation:
|
||||||
|
## The number of failed login attempts before user is banned. Set it to 0 to disable regulation.
|
||||||
|
max_retries: 3
|
||||||
|
|
||||||
|
## The time range during which the user can attempt login before being banned. The user is banned if the
|
||||||
|
## authentication failed 'max_retries' times in a 'find_time' seconds window. Find Time accepts duration notation.
|
||||||
|
## See: https://www.authelia.com/docs/configuration/index.html#duration-notation-format
|
||||||
|
find_time: 2m
|
||||||
|
|
||||||
|
## The length of time before a banned user can login again. Ban Time accepts duration notation.
|
||||||
|
## See: https://www.authelia.com/docs/configuration/index.html#duration-notation-format
|
||||||
|
ban_time: 5m
|
||||||
|
|
||||||
|
##
|
||||||
|
## Storage Provider Configuration
|
||||||
|
##
|
||||||
|
## The available providers are: `local`, `mysql`, `postgres`. You must use one and only one of these providers.
|
||||||
|
storage:
|
||||||
|
##
|
||||||
|
## PostgreSQL (Storage Provider)
|
||||||
|
##
|
||||||
|
postgres:
|
||||||
|
port: 5432
|
||||||
|
database: authelia
|
||||||
|
username: authelia
|
||||||
|
sslmode: disable
|
||||||
|
timeout: 5s
|
||||||
|
|
||||||
|
##
|
||||||
|
## Notification Provider
|
||||||
|
##
|
||||||
|
##
|
||||||
|
## Notifications are sent to users when they require a password reset, a u2f registration or a TOTP registration.
|
||||||
|
## The available providers are: filesystem, smtp. You must use one and only one of these providers.
|
||||||
|
notifier:
|
||||||
|
## You can disable the notifier startup check by setting this to true.
|
||||||
|
disable_startup_check: false
|
||||||
|
|
||||||
|
##
|
||||||
|
## File System (Notification Provider)
|
||||||
|
##
|
||||||
|
## Important: Kubernetes (or HA) users must read https://www.authelia.com/docs/features/statelessness.html
|
||||||
|
##
|
||||||
|
filesystem:
|
||||||
|
enabled: true
|
||||||
|
filename: /config/notification.txt
|
||||||
|
|
||||||
|
##
|
||||||
|
## SMTP (Notification Provider)
|
||||||
|
##
|
||||||
|
## Use a SMTP server for sending notifications. Authelia uses the PLAIN or LOGIN methods to authenticate.
|
||||||
|
## [Security] By default Authelia will:
|
||||||
|
## - force all SMTP connections over TLS including unauthenticated connections
|
||||||
|
## - use the disable_require_tls boolean value to disable this requirement
|
||||||
|
## (only works for unauthenticated connections)
|
||||||
|
## - validate the SMTP server x509 certificate during the TLS handshake against the hosts trusted certificates
|
||||||
|
## (configure in tls section)
|
||||||
|
smtp:
|
||||||
|
enabled: false
|
||||||
|
enabledSecret: false
|
||||||
|
host: smtp.mail.svc.cluster.local
|
||||||
|
port: 25
|
||||||
|
timeout: 5s
|
||||||
|
username: test
|
||||||
|
plain_password: test
|
||||||
|
sender: admin@example.com
|
||||||
|
## HELO/EHLO Identifier. Some SMTP Servers may reject the default of localhost.
|
||||||
|
identifier: localhost
|
||||||
|
## Subject configuration of the emails sent.
|
||||||
|
## {title} is replaced by the text from the notifier
|
||||||
|
subject: "[Authelia] {title}"
|
||||||
|
## This address is used during the startup check to verify the email configuration is correct.
|
||||||
|
## It's not important what it is except if your email server only allows local delivery.
|
||||||
|
startup_check_address: test@authelia.com
|
||||||
|
disable_require_tls: false
|
||||||
|
disable_html_emails: false
|
||||||
|
|
||||||
|
tls:
|
||||||
|
## Server Name for certificate validation (in case you are using the IP or non-FQDN in the host option).
|
||||||
|
server_name: ""
|
||||||
|
|
||||||
|
## Skip verifying the server certificate (to allow a self-signed certificate).
|
||||||
|
## In preference to setting this we strongly recommend you add the public portion of the certificate to the
|
||||||
|
## certificates directory which is defined by the `certificates_directory` option at the top of the config.
|
||||||
|
skip_verify: false
|
||||||
|
|
||||||
|
## Minimum TLS version for either StartTLS or SMTPS.
|
||||||
|
minimum_version: TLS1.2
|
||||||
|
|
||||||
|
identity_providers:
|
||||||
|
oidc:
|
||||||
|
## Enables this in the config map. Currently in beta stage.
|
||||||
|
## See https://www.authelia.com/docs/configuration/identity-providers/oidc.html#roadmap
|
||||||
|
enabled: false
|
||||||
|
|
||||||
|
access_token_lifespan: 1h
|
||||||
|
authorize_code_lifespan: 1m
|
||||||
|
id_token_lifespan: 1h
|
||||||
|
refresh_token_lifespan: 90m
|
||||||
|
|
||||||
|
enable_client_debug_messages: false
|
||||||
|
|
||||||
|
## SECURITY NOTICE: It's not recommended changing this option, and highly discouraged to have it below 8 for
|
||||||
|
## security reasons.
|
||||||
|
minimum_parameter_entropy: 8
|
||||||
|
|
||||||
|
clients: []
|
||||||
|
# clients:
|
||||||
|
# -
|
||||||
|
## The ID is the OpenID Connect ClientID which is used to link an application to a configuration.
|
||||||
|
# id: myapp
|
||||||
|
|
||||||
|
## The description to show to users when they end up on the consent screen. Defaults to the ID above.
|
||||||
|
# description: My Application
|
||||||
|
|
||||||
|
## The client secret is a shared secret between Authelia and the consumer of this client.
|
||||||
|
# secret: apple123
|
||||||
|
|
||||||
|
## Sets the client to public. This should typically not be set, please see the documentation for usage.
|
||||||
|
# public: false
|
||||||
|
|
||||||
|
## The policy to require for this client; one_factor or two_factor.
|
||||||
|
# authorization_policy: two_factor
|
||||||
|
|
||||||
|
## Configures the consent mode; auto, explicit or implicit
|
||||||
|
# consent_mode: auto
|
||||||
|
|
||||||
|
## Audience this client is allowed to request.
|
||||||
|
# audience: []
|
||||||
|
|
||||||
|
## Scopes this client is allowed to request.
|
||||||
|
# scopes:
|
||||||
|
# - openid
|
||||||
|
# - profile
|
||||||
|
# - email
|
||||||
|
# - groups
|
||||||
|
|
||||||
|
## Redirect URI's specifies a list of valid case-sensitive callbacks for this client.
|
||||||
|
# redirect_uris:
|
||||||
|
# - https://oidc.example.com/oauth2/callback
|
||||||
|
|
||||||
|
## Grant Types configures which grants this client can obtain.
|
||||||
|
## It's not recommended to configure this unless you know what you're doing.
|
||||||
|
# grant_types:
|
||||||
|
# - refresh_token
|
||||||
|
# - authorization_code
|
||||||
|
|
||||||
|
## Response Types configures which responses this client can be sent.
|
||||||
|
## It's not recommended to configure this unless you know what you're doing.
|
||||||
|
# response_types:
|
||||||
|
# - code
|
||||||
|
|
||||||
|
## Response Modes configures which response modes this client supports.
|
||||||
|
## It's not recommended to configure this unless you know what you're doing.
|
||||||
|
# response_modes:
|
||||||
|
# - form_post
|
||||||
|
# - query
|
||||||
|
# - fragment
|
||||||
|
|
||||||
|
## The algorithm used to sign userinfo endpoint responses for this client, either none or RS256.
|
||||||
|
# userinfo_signing_algorithm: none
|
||||||
|
|
||||||
|
portal:
|
||||||
|
open:
|
||||||
|
enabled: true
|
File diff suppressed because it is too large
Load Diff
|
@ -0,0 +1,254 @@
|
||||||
|
{{/* Define the configmap */}}
|
||||||
|
{{- define "authelia.configmap.paths" -}}
|
||||||
|
enabled: true
|
||||||
|
data:
|
||||||
|
AUTHELIA_SERVER_DISABLE_HEALTHCHECK: "true"
|
||||||
|
AUTHELIA_JWT_SECRET_FILE: "/secrets/JWT_TOKEN"
|
||||||
|
AUTHELIA_SESSION_SECRET_FILE: "/secrets/SESSION_ENCRYPTION_KEY"
|
||||||
|
AUTHELIA_STORAGE_ENCRYPTION_KEY_FILE: "/secrets/ENCRYPTION_KEY"
|
||||||
|
AUTHELIA_STORAGE_POSTGRES_PASSWORD_FILE: "/secrets/STORAGE_PASSWORD"
|
||||||
|
{{- if .Values.authentication_backend.ldap.enabled }}
|
||||||
|
AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PASSWORD_FILE: "/secrets/LDAP_PASSWORD"
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.notifier.smtp.enabled }}
|
||||||
|
AUTHELIA_NOTIFIER_SMTP_PASSWORD_FILE: "/secrets/SMTP_PASSWORD"
|
||||||
|
{{- end }}
|
||||||
|
AUTHELIA_SESSION_REDIS_PASSWORD_FILE: "/secrets/REDIS_PASSWORD"
|
||||||
|
{{- if .Values.redisProvider.high_availability.enabled }}
|
||||||
|
AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_SENTINEL_PASSWORD_FILE: "/secrets/REDIS_SENTINEL_PASSWORD"
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.duo_api.enabled }}
|
||||||
|
AUTHELIA_DUO_API_SECRET_KEY_FILE: "/secrets/DUO_API_KEY"
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.identity_providers.oidc.enabled }}
|
||||||
|
AUTHELIA_IDENTITY_PROVIDERS_OIDC_HMAC_SECRET_FILE: "/secrets/OIDC_HMAC_SECRET"
|
||||||
|
AUTHELIA_IDENTITY_PROVIDERS_OIDC_ISSUER_PRIVATE_KEY_FILE: "/secrets/OIDC_PRIVATE_KEY"
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{- end -}}
|
||||||
|
|
||||||
|
{{- define "authelia.configmap.configfile" -}}
|
||||||
|
enabled: true
|
||||||
|
data:
|
||||||
|
configuration.yaml: |
|
||||||
|
---
|
||||||
|
theme: {{ default "light" .Values.theme }}
|
||||||
|
default_redirection_url: {{ default (printf "https://www.%s" .Values.domain) .Values.default_redirection_url }}
|
||||||
|
ntp:
|
||||||
|
address: {{ default "time.cloudflare.com:123" .Values.ntp.address }}
|
||||||
|
version: {{ default 4 .Values.ntp.version }}
|
||||||
|
max_desync: {{ default "3s" .Values.ntp.max_desync }}
|
||||||
|
disable_startup_check: {{ default false .Values.ntp.disable_startup_check }}
|
||||||
|
disable_failure: {{ default true .Values.ntp.disable_failure }}
|
||||||
|
server:
|
||||||
|
host: 0.0.0.0
|
||||||
|
port: {{ default 9091 .Values.server.port }}
|
||||||
|
{{- if not (eq "" (default "" .Values.server.path)) }}
|
||||||
|
path: {{ .Values.server.path }}
|
||||||
|
{{- end }}
|
||||||
|
buffers:
|
||||||
|
write: {{ default 4096 .Values.server.write_buffer_size }}
|
||||||
|
read: {{ default 4096 .Values.server.read_buffer_size }}
|
||||||
|
enable_pprof: {{ default false .Values.server.enable_pprof }}
|
||||||
|
enable_expvars: {{ default false .Values.server.enable_expvars }}
|
||||||
|
log:
|
||||||
|
level: {{ default "info" .Values.log.level }}
|
||||||
|
format: {{ default "text" .Values.log.format }}
|
||||||
|
{{- if not (eq "" (default "" .Values.log.file_path)) }}
|
||||||
|
file_path: {{ .Values.log.file_path }}
|
||||||
|
keep_stdout: true
|
||||||
|
{{- end }}
|
||||||
|
totp:
|
||||||
|
issuer: {{ default .Values.domain .Values.totp.issuer }}
|
||||||
|
period: {{ default 30 .Values.totp.period }}
|
||||||
|
skew: {{ default 1 .Values.totp.skew }}
|
||||||
|
{{- if .Values.duo_api.enabled }}
|
||||||
|
duo_api:
|
||||||
|
hostname: {{ .Values.duo_api.hostname }}
|
||||||
|
integration_key: {{ .Values.duo_api.integration_key }}
|
||||||
|
{{- end }}
|
||||||
|
{{- with $auth := .Values.authentication_backend }}
|
||||||
|
authentication_backend:
|
||||||
|
password_reset:
|
||||||
|
disable: {{ $auth.disable_reset_password }}
|
||||||
|
{{- if $auth.file.enabled }}
|
||||||
|
file:
|
||||||
|
path: {{ $auth.file.path }}
|
||||||
|
password: {{ toYaml $auth.file.password | nindent 10 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if $auth.ldap.enabled }}
|
||||||
|
ldap:
|
||||||
|
implementation: {{ default "custom" $auth.ldap.implementation }}
|
||||||
|
url: {{ $auth.ldap.url }}
|
||||||
|
timeout: {{ default "5s" $auth.ldap.timeout }}
|
||||||
|
start_tls: {{ $auth.ldap.start_tls }}
|
||||||
|
tls:
|
||||||
|
{{- if hasKey $auth.ldap.tls "server_name" }}
|
||||||
|
server_name: {{ default $auth.ldap.host $auth.ldap.tls.server_name }}
|
||||||
|
{{- end }}
|
||||||
|
minimum_version: {{ default "TLS1.2" $auth.ldap.tls.minimum_version }}
|
||||||
|
skip_verify: {{ default false $auth.ldap.tls.skip_verify }}
|
||||||
|
{{- if $auth.ldap.base_dn }}
|
||||||
|
base_dn: {{ $auth.ldap.base_dn }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if $auth.ldap.username_attribute }}
|
||||||
|
username_attribute: {{ $auth.ldap.username_attribute }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if $auth.ldap.additional_users_dn }}
|
||||||
|
additional_users_dn: {{ $auth.ldap.additional_users_dn }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if $auth.ldap.users_filter }}
|
||||||
|
users_filter: {{ $auth.ldap.users_filter }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if $auth.ldap.additional_groups_dn }}
|
||||||
|
additional_groups_dn: {{ $auth.ldap.additional_groups_dn }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if $auth.ldap.groups_filter }}
|
||||||
|
groups_filter: {{ $auth.ldap.groups_filter }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if $auth.ldap.group_name_attribute }}
|
||||||
|
group_name_attribute: {{ $auth.ldap.group_name_attribute }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if $auth.ldap.mail_attribute }}
|
||||||
|
mail_attribute: {{ $auth.ldap.mail_attribute }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if $auth.ldap.display_name_attribute }}
|
||||||
|
display_name_attribute: {{ $auth.ldap.display_name_attribute }}
|
||||||
|
{{- end }}
|
||||||
|
user: {{ $auth.ldap.user }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
{{- with $session := .Values.session }}
|
||||||
|
session:
|
||||||
|
name: {{ default "authelia_session" $session.name }}
|
||||||
|
domain: {{ required "A valid .Values.domain entry required!" $.Values.domain }}
|
||||||
|
same_site: {{ default "lax" $session.same_site }}
|
||||||
|
expiration: {{ default "1M" $session.expiration }}
|
||||||
|
inactivity: {{ default "5m" $session.inactivity }}
|
||||||
|
remember_me_duration: {{ default "1M" $session.remember_me_duration }}
|
||||||
|
{{- end }}
|
||||||
|
redis:
|
||||||
|
host: {{ .Values.redis.creds.plain }}
|
||||||
|
{{- with $redis := .Values.redisProvider }}
|
||||||
|
port: {{ default 6379 $redis.port }}
|
||||||
|
{{- if not (eq $redis.username "") }}
|
||||||
|
username: {{ $redis.username }}
|
||||||
|
{{- end }}
|
||||||
|
maximum_active_connections: {{ default 8 $redis.maximum_active_connections }}
|
||||||
|
minimum_idle_connections: {{ default 0 $redis.minimum_idle_connections }}
|
||||||
|
{{- if $redis.tls.enabled }}
|
||||||
|
tls:
|
||||||
|
server_name: {{ $redis.tls.server_name }}
|
||||||
|
minimum_version: {{ default "TLS1.2" $redis.tls.minimum_version }}
|
||||||
|
skip_verify: {{ $redis.tls.skip_verify }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if $redis.high_availability.enabled }}
|
||||||
|
high_availability:
|
||||||
|
sentinel_name: {{ $redis.high_availability.sentinel_name }}
|
||||||
|
{{- if $redis.high_availability.nodes }}
|
||||||
|
nodes: {{ toYaml $redis.high_availability.nodes | nindent 10 }}
|
||||||
|
{{- end }}
|
||||||
|
route_by_latency: {{ $redis.high_availability.route_by_latency }}
|
||||||
|
route_randomly: {{ $redis.high_availability.route_randomly }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
regulation: {{ toYaml .Values.regulation | nindent 6 }}
|
||||||
|
storage:
|
||||||
|
postgres:
|
||||||
|
host: {{ $.Values.cnpg.main.creds.host }}
|
||||||
|
{{- with $storage := .Values.storage }}
|
||||||
|
port: {{ default 5432 $storage.postgres.port }}
|
||||||
|
database: {{ default "authelia" $storage.postgres.database }}
|
||||||
|
username: {{ default "authelia" $storage.postgres.username }}
|
||||||
|
timeout: {{ default "5s" $storage.postgres.timeout }}
|
||||||
|
ssl:
|
||||||
|
mode: {{ default "disable" $storage.postgres.sslmode }}
|
||||||
|
{{- end }}
|
||||||
|
{{- with $notifier := .Values.notifier }}
|
||||||
|
notifier:
|
||||||
|
disable_startup_check: {{ $.Values.notifier.disable_startup_check }}
|
||||||
|
{{- if $notifier.filesystem.enabled }}
|
||||||
|
filesystem:
|
||||||
|
filename: {{ $notifier.filesystem.filename }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if $notifier.smtp.enabled }}
|
||||||
|
smtp:
|
||||||
|
host: {{ $notifier.smtp.host }}
|
||||||
|
port: {{ default 25 $notifier.smtp.port }}
|
||||||
|
timeout: {{ default "5s" $notifier.smtp.timeout }}
|
||||||
|
{{- with $notifier.smtp.username }}
|
||||||
|
username: {{ . }}
|
||||||
|
{{- end }}
|
||||||
|
sender: {{ $notifier.smtp.sender }}
|
||||||
|
identifier: {{ $notifier.smtp.identifier }}
|
||||||
|
subject: {{ $notifier.smtp.subject | quote }}
|
||||||
|
startup_check_address: {{ $notifier.smtp.startup_check_address }}
|
||||||
|
disable_require_tls: {{ $notifier.smtp.disable_require_tls }}
|
||||||
|
disable_html_emails: {{ $notifier.smtp.disable_html_emails }}
|
||||||
|
tls:
|
||||||
|
server_name: {{ default $notifier.smtp.host $notifier.smtp.tls.server_name }}
|
||||||
|
minimum_version: {{ default "TLS1.2" $notifier.smtp.tls.minimum_version }}
|
||||||
|
skip_verify: {{ default false $notifier.smtp.tls.skip_verify }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.identity_providers.oidc.enabled }}
|
||||||
|
identity_providers:
|
||||||
|
oidc:
|
||||||
|
access_token_lifespan: {{ default "1h" .Values.identity_providers.oidc.access_token_lifespan }}
|
||||||
|
authorize_code_lifespan: {{ default "1m" .Values.identity_providers.oidc.authorize_code_lifespan }}
|
||||||
|
id_token_lifespan: {{ default "1h" .Values.identity_providers.oidc.id_token_lifespan }}
|
||||||
|
refresh_token_lifespan: {{ default "90m" .Values.identity_providers.oidc.refresh_token_lifespan }}
|
||||||
|
enable_client_debug_messages: {{ default false .Values.identity_providers.oidc.enable_client_debug_messages }}
|
||||||
|
minimum_parameter_entropy: {{ default 8 .Values.identity_providers.oidc.minimum_parameter_entropy }}
|
||||||
|
{{- if gt (len .Values.identity_providers.oidc.clients) 0 }}
|
||||||
|
clients:
|
||||||
|
{{- range $client := .Values.identity_providers.oidc.clients }}
|
||||||
|
- id: {{ $client.id }}
|
||||||
|
description: {{ default $client.id $client.description }}
|
||||||
|
secret: {{ default (randAlphaNum 128) $client.secret }}
|
||||||
|
{{- if $client.public }}
|
||||||
|
public: {{ $client.public }}
|
||||||
|
{{- end }}
|
||||||
|
authorization_policy: {{ default "two_factor" $client.authorization_policy }}
|
||||||
|
consent_mode: {{ default "auto" $client.consent_mode}}
|
||||||
|
redirect_uris:
|
||||||
|
{{- range $client.redirect_uris }}
|
||||||
|
- {{ . }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if $client.audience }}
|
||||||
|
audience: {{ toYaml $client.audience | nindent 10 }}
|
||||||
|
{{- end }}
|
||||||
|
scopes: {{ toYaml (default (list "openid" "profile" "email" "groups") $client.scopes) | nindent 10 }}
|
||||||
|
grant_types: {{ toYaml (default (list "refresh_token" "authorization_code") $client.grant_types) | nindent 10 }}
|
||||||
|
response_types: {{ toYaml (default (list "code") $client.response_types) | nindent 10 }}
|
||||||
|
{{- if $client.response_modes }}
|
||||||
|
response_modes: {{ toYaml $client.response_modes | nindent 10 }}
|
||||||
|
{{- end }}
|
||||||
|
userinfo_signing_algorithm: {{ default "none" $client.userinfo_signing_algorithm }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
access_control:
|
||||||
|
{{- if (eq (len .Values.access_control.rules) 0) }}
|
||||||
|
{{- if (eq .Values.access_control.default_policy "bypass") }}
|
||||||
|
default_policy: one_factor
|
||||||
|
{{- else if (eq .Values.access_control.default_policy "deny") }}
|
||||||
|
default_policy: two_factor
|
||||||
|
{{- else }}
|
||||||
|
default_policy: {{ .Values.access_control.default_policy }}
|
||||||
|
{{- end }}
|
||||||
|
{{- else }}
|
||||||
|
default_policy: {{ .Values.access_control.default_policy }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if (eq (len .Values.access_control.networks) 0) }}
|
||||||
|
networks: []
|
||||||
|
{{- else }}
|
||||||
|
networks: {{ toYaml .Values.access_control.networks | nindent 6 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if (eq (len .Values.access_control.rules) 0) }}
|
||||||
|
rules: []
|
||||||
|
{{- else }}
|
||||||
|
rules: {{ toYaml .Values.access_control.rules | nindent 6 }}
|
||||||
|
{{- end }}
|
||||||
|
...
|
||||||
|
{{- end -}}
|
|
@ -0,0 +1,53 @@
|
||||||
|
{{/* Define the secrets */}}
|
||||||
|
{{- define "authelia.secrets" -}}
|
||||||
|
{{- $basename := include "tc.v1.common.lib.chart.names.fullname" $ -}}
|
||||||
|
{{- $fetchname := printf "%s-authelia-secrets" $basename -}}
|
||||||
|
|
||||||
|
{{/* Initialize all keys */}}
|
||||||
|
{{- $oidckey := genPrivateKey "rsa" }}
|
||||||
|
{{- $oidcsecret := randAlphaNum 32 }}
|
||||||
|
{{- $jwtsecret := randAlphaNum 50 }}
|
||||||
|
{{- $sessionsecret := randAlphaNum 50 }}
|
||||||
|
{{- $encryptionkey := randAlphaNum 100 }}
|
||||||
|
|
||||||
|
enabled: true
|
||||||
|
data:
|
||||||
|
{{ with (lookup "v1" "Secret" .Release.Namespace $fetchname) }}
|
||||||
|
{{/* Get previous values and decode */}}
|
||||||
|
{{ $sessionsecret = (index .data "SESSION_ENCRYPTION_KEY") | b64dec }}
|
||||||
|
{{ $jwtsecret = (index .data "JWT_TOKEN") | b64dec }}
|
||||||
|
{{ $encryptionkey = (index .data "ENCRYPTION_KEY") | b64dec }}
|
||||||
|
|
||||||
|
{{/* Check if those keys ever existed. as OIDC is optional */}}
|
||||||
|
{{ if and (hasKey .data "OIDC_PRIVATE_KEY") (hasKey .data "OIDC_HMAC_SECRET") }}
|
||||||
|
{{ $oidckey = (index .data "OIDC_PRIVATE_KEY") | b64dec }}
|
||||||
|
{{ $oidcsecret = (index .data "OIDC_HMAC_SECRET") | b64dec }}
|
||||||
|
{{ end }}
|
||||||
|
{{ end }}
|
||||||
|
SESSION_ENCRYPTION_KEY: {{ $sessionsecret }}
|
||||||
|
JWT_TOKEN: {{ $jwtsecret }}
|
||||||
|
ENCRYPTION_KEY: {{ $encryptionkey }}
|
||||||
|
|
||||||
|
{{- if .Values.authentication_backend.ldap.enabled }}
|
||||||
|
LDAP_PASSWORD: {{ .Values.authentication_backend.ldap.plain_password }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{- if and .Values.notifier.smtp.enabled .Values.notifier.smtp.plain_password }}
|
||||||
|
SMTP_PASSWORD: {{ .Values.notifier.smtp.plain_password }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{- if .Values.duo_api.enabled }}
|
||||||
|
DUO_API_KEY: {{ .Values.duo_api.plain_api_key }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
STORAGE_PASSWORD: {{ $.Values.cnpg.main.creds.password | trimAll "\"" }}
|
||||||
|
|
||||||
|
REDIS_PASSWORD: {{ .Values.redis.creds.redisPassword | trimAll "\"" }}
|
||||||
|
{{- if .Values.redisProvider.high_availability.enabled }}
|
||||||
|
REDIS_SENTINEL_PASSWORD: {{ .Values.redis.sentinelPassword | trimAll "\"" }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
OIDC_PRIVATE_KEY: |
|
||||||
|
{{- $oidckey | nindent 4 }}
|
||||||
|
OIDC_HMAC_SECRET: {{ $oidcsecret }}
|
||||||
|
{{- end -}}
|
|
@ -0,0 +1,77 @@
|
||||||
|
{{/* Make sure all variables are set properly */}}
|
||||||
|
{{- include "tc.v1.common.loader.init" . }}
|
||||||
|
|
||||||
|
{{/* Render configmap for authelia */}}
|
||||||
|
{{- $configmapPaths := include "authelia.configmap.paths" . | fromYaml -}}
|
||||||
|
{{- if $configmapPaths -}}
|
||||||
|
{{- $_ := set .Values.configmap "authelia-paths" $configmapPaths -}}
|
||||||
|
{{- end -}}
|
||||||
|
|
||||||
|
{{- $configmapFile := include "authelia.configmap.configfile" . | fromYaml -}}
|
||||||
|
{{- if $configmapFile -}}
|
||||||
|
{{- $_ := set .Values.configmap "authelia-configfile" $configmapFile -}}
|
||||||
|
{{- end -}}
|
||||||
|
|
||||||
|
{{/* Render secrets for authelia */}}
|
||||||
|
{{- $secret := include "authelia.secrets" . | fromYaml -}}
|
||||||
|
{{- if $secret -}}
|
||||||
|
{{- $_ := set .Values.secret "authelia-secrets" $secret -}}
|
||||||
|
{{- end -}}
|
||||||
|
|
||||||
|
{{/* Append the general configMap volume to the volumes */}}
|
||||||
|
{{- define "authelia.configmapVolume" -}}
|
||||||
|
enabled: true
|
||||||
|
mountPath: /configuration.yaml
|
||||||
|
subPath: configuration.yaml
|
||||||
|
readOnly: true
|
||||||
|
type: "configmap"
|
||||||
|
objectName: authelia-configfile
|
||||||
|
{{- end -}}
|
||||||
|
|
||||||
|
{{/* Append the general secret volumes to the volumes */}}
|
||||||
|
{{- define "authelia.secretVolumes" -}}
|
||||||
|
enabled: true
|
||||||
|
mountPath: "/secrets"
|
||||||
|
readOnly: true
|
||||||
|
type: "secret"
|
||||||
|
objectName: authelia-secrets
|
||||||
|
items:
|
||||||
|
- key: "JWT_TOKEN"
|
||||||
|
path: JWT_TOKEN
|
||||||
|
- key: "SESSION_ENCRYPTION_KEY"
|
||||||
|
path: SESSION_ENCRYPTION_KEY
|
||||||
|
- key: "ENCRYPTION_KEY"
|
||||||
|
path: ENCRYPTION_KEY
|
||||||
|
- key: "STORAGE_PASSWORD"
|
||||||
|
path: STORAGE_PASSWORD
|
||||||
|
{{- if .Values.authentication_backend.ldap.enabled }}
|
||||||
|
- key: "LDAP_PASSWORD"
|
||||||
|
path: LDAP_PASSWORD
|
||||||
|
{{- end }}
|
||||||
|
{{- if and .Values.notifier.smtp.enabled .Values.notifier.smtp.plain_password }}
|
||||||
|
- key: "SMTP_PASSWORD"
|
||||||
|
path: SMTP_PASSWORD
|
||||||
|
{{- end }}
|
||||||
|
- key: "REDIS_PASSWORD"
|
||||||
|
path: REDIS_PASSWORD
|
||||||
|
{{- if .Values.redisProvider.high_availability.enabled}}
|
||||||
|
- key: "REDIS_SENTINEL_PASSWORD"
|
||||||
|
path: REDIS_SENTINEL_PASSWORD
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.duo_api.enabled }}
|
||||||
|
- key: "DUO_API_KEY"
|
||||||
|
path: DUO_API_KEY
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.identity_providers.oidc.enabled }}
|
||||||
|
- key: "OIDC_PRIVATE_KEY"
|
||||||
|
path: OIDC_PRIVATE_KEY
|
||||||
|
- key: "OIDC_HMAC_SECRET"
|
||||||
|
path: OIDC_HMAC_SECRET
|
||||||
|
{{- end }}
|
||||||
|
{{- end -}}
|
||||||
|
|
||||||
|
{{- $_ := set .Values.persistence "authelia-configfile" (include "authelia.configmapVolume" . | fromYaml) -}}
|
||||||
|
{{- $_ := set .Values.persistence "authelia-secrets" (include "authelia.secretVolumes" . | fromYaml) -}}
|
||||||
|
|
||||||
|
{{/* Render the templates */}}
|
||||||
|
{{ include "tc.v1.common.loader.apply" . }}
|
|
@ -1,99 +0,0 @@
|
||||||
**Important:**
|
|
||||||
*for the complete changelog, please refer to the website*
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## [blocky-5.0.31](https://github.com/truecharts/charts/compare/blocky-5.0.30...blocky-5.0.31) (2023-05-22)
|
|
||||||
|
|
||||||
### Chore
|
|
||||||
|
|
||||||
- update helm general non-major ([#9089](https://github.com/truecharts/charts/issues/9089))
|
|
||||||
|
|
||||||
### Fix
|
|
||||||
|
|
||||||
- fix mistakes on questions.yaml
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## [blocky-5.0.30](https://github.com/truecharts/charts/compare/blocky-5.0.29...blocky-5.0.30) (2023-05-16)
|
|
||||||
|
|
||||||
### Chore
|
|
||||||
|
|
||||||
- update helm general non-major ([#8979](https://github.com/truecharts/charts/issues/8979))
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## [blocky-5.0.29](https://github.com/truecharts/charts/compare/blocky-5.0.28...blocky-5.0.29) (2023-05-05)
|
|
||||||
|
|
||||||
### Chore
|
|
||||||
|
|
||||||
- update helm general non-major ([#8782](https://github.com/truecharts/charts/issues/8782))
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## [blocky-5.0.28](https://github.com/truecharts/charts/compare/blocky-5.0.27...blocky-5.0.28) (2023-05-05)
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## [blocky-5.0.27](https://github.com/truecharts/charts/compare/blocky-5.0.26...blocky-5.0.27) (2023-05-03)
|
|
||||||
|
|
||||||
### Chore
|
|
||||||
|
|
||||||
- update helm general non-major ([#8739](https://github.com/truecharts/charts/issues/8739))
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## [blocky-5.0.26](https://github.com/truecharts/charts/compare/blocky-5.0.25...blocky-5.0.26) (2023-04-25)
|
|
||||||
|
|
||||||
### Chore
|
|
||||||
|
|
||||||
- update helm general non-major ([#8153](https://github.com/truecharts/charts/issues/8153))
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## [blocky-5.0.25](https://github.com/truecharts/charts/compare/blocky-5.0.24...blocky-5.0.25) (2023-04-25)
|
|
||||||
|
|
||||||
### Chore
|
|
||||||
|
|
||||||
- update helm general non-major ([#8145](https://github.com/truecharts/charts/issues/8145))
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## [blocky-5.0.24](https://github.com/truecharts/charts/compare/blocky-5.0.23...blocky-5.0.24) (2023-04-24)
|
|
||||||
|
|
||||||
### Chore
|
|
||||||
|
|
||||||
- update container image tccr.io/truecharts/k8s_gateway to v0.3.4 ([#8137](https://github.com/truecharts/charts/issues/8137))
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## [blocky-5.0.23](https://github.com/truecharts/charts/compare/blocky-5.0.22...blocky-5.0.23) (2023-04-21)
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## [blocky-5.0.22](https://github.com/truecharts/charts/compare/blocky-5.0.21...blocky-5.0.22) (2023-04-20)
|
|
||||||
|
|
||||||
### Chore
|
|
||||||
|
|
||||||
- update helm general non-major ([#8087](https://github.com/truecharts/charts/issues/8087))
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## [blocky-5.0.21](https://github.com/truecharts/charts/compare/blocky-5.0.20...blocky-5.0.21) (2023-04-16)
|
|
||||||
|
|
||||||
### Chore
|
|
||||||
|
|
||||||
- update helm general non-major ([#8071](https://github.com/truecharts/charts/issues/8071))
|
|
||||||
|
|
||||||
|
|
|
@ -1,33 +0,0 @@
|
||||||
apiVersion: v2
|
|
||||||
appVersion: "0.21.0"
|
|
||||||
dependencies:
|
|
||||||
- name: common
|
|
||||||
repository: https://library-charts.truecharts.org
|
|
||||||
version: 12.9.2
|
|
||||||
- condition: redis.enabled
|
|
||||||
name: redis
|
|
||||||
repository: https://deps.truecharts.org
|
|
||||||
version: 6.0.43
|
|
||||||
description: Blocky is a DNS proxy, DNS enhancer and ad-blocker for the local network written in Go
|
|
||||||
home: https://truecharts.org/charts/enterprise/blocky
|
|
||||||
icon: https://truecharts.org/img/hotlink-ok/chart-icons/blocky.png
|
|
||||||
keywords:
|
|
||||||
- dns
|
|
||||||
- blocky
|
|
||||||
kubeVersion: ">=1.16.0-0"
|
|
||||||
maintainers:
|
|
||||||
- email: info@truecharts.org
|
|
||||||
name: TrueCharts
|
|
||||||
url: https://truecharts.org
|
|
||||||
name: blocky
|
|
||||||
sources:
|
|
||||||
- https://github.com/truecharts/charts/tree/master/charts/enterprise/blocky
|
|
||||||
- https://0xerr0r.github.io/blocky/
|
|
||||||
- https://github.com/0xERR0R/blocky
|
|
||||||
- https://github.com/Mozart409/blocky-frontend
|
|
||||||
version: 5.0.31
|
|
||||||
annotations:
|
|
||||||
truecharts.org/catagories: |
|
|
||||||
- network
|
|
||||||
truecharts.org/SCALE-support: "true"
|
|
||||||
truecharts.org/grade: U
|
|
|
@ -1,13 +0,0 @@
|
||||||
|
|
||||||
|
|
||||||
## [blocky-5.0.31](https://github.com/truecharts/charts/compare/blocky-5.0.30...blocky-5.0.31) (2023-05-22)
|
|
||||||
|
|
||||||
### Chore
|
|
||||||
|
|
||||||
- update helm general non-major ([#9089](https://github.com/truecharts/charts/issues/9089))
|
|
||||||
|
|
||||||
### Fix
|
|
||||||
|
|
||||||
- fix mistakes on questions.yaml
|
|
||||||
|
|
||||||
|
|
Binary file not shown.
Binary file not shown.
|
@ -1,373 +0,0 @@
|
||||||
image:
|
|
||||||
repository: tccr.io/truecharts/blocky
|
|
||||||
tag: v0.21.0@sha256:ed72f8a64307b7b734174589ac631726dd642cc8202c3bdf2eeb1de4adedbe0a
|
|
||||||
pullPolicy: IfNotPresent
|
|
||||||
|
|
||||||
k8sgatewayImage:
|
|
||||||
repository: tccr.io/truecharts/k8s_gateway
|
|
||||||
pullPolicy: IfNotPresent
|
|
||||||
tag: 0.3.4@sha256:c49645e7b263e5cfc8fc269db2aef7d90149cecc7a50e2c2fe77ef935dd35742
|
|
||||||
|
|
||||||
workload:
|
|
||||||
main:
|
|
||||||
replicas: 2
|
|
||||||
strategy: RollingUpdate
|
|
||||||
podSpec:
|
|
||||||
containers:
|
|
||||||
main:
|
|
||||||
probes:
|
|
||||||
liveness:
|
|
||||||
enabled: false
|
|
||||||
type: exec
|
|
||||||
command:
|
|
||||||
- /app/blocky
|
|
||||||
- healthcheck
|
|
||||||
readiness:
|
|
||||||
enabled: false
|
|
||||||
type: exec
|
|
||||||
command:
|
|
||||||
- /app/blocky
|
|
||||||
- healthcheck
|
|
||||||
startup:
|
|
||||||
enabled: false
|
|
||||||
type: exec
|
|
||||||
command:
|
|
||||||
- /app/blocky
|
|
||||||
- healthcheck
|
|
||||||
|
|
||||||
# -- Blocky Config File content
|
|
||||||
blockyConfig: {}
|
|
||||||
# upstream:
|
|
||||||
# default:
|
|
||||||
# - 1.1.1.1
|
|
||||||
|
|
||||||
# -- some general blocky settings
|
|
||||||
blocky:
|
|
||||||
# -- Enable prometheus annotations
|
|
||||||
enablePrometheus: true
|
|
||||||
|
|
||||||
service:
|
|
||||||
main:
|
|
||||||
enabled: true
|
|
||||||
ports:
|
|
||||||
main:
|
|
||||||
enabled: true
|
|
||||||
port: 4000
|
|
||||||
protocol: http
|
|
||||||
targetPort: 4000
|
|
||||||
dnstcp:
|
|
||||||
enabled: true
|
|
||||||
ports:
|
|
||||||
dnstcp:
|
|
||||||
enabled: true
|
|
||||||
port: 53
|
|
||||||
targetPort: 53
|
|
||||||
dnsudp:
|
|
||||||
enabled: true
|
|
||||||
ports:
|
|
||||||
dnsudp:
|
|
||||||
enabled: true
|
|
||||||
port: 53
|
|
||||||
protocol: udp
|
|
||||||
targetPort: 53
|
|
||||||
dot:
|
|
||||||
enabled: true
|
|
||||||
ports:
|
|
||||||
dot:
|
|
||||||
enabled: true
|
|
||||||
port: 853
|
|
||||||
protocol: tcp
|
|
||||||
targetPort: 853
|
|
||||||
https:
|
|
||||||
enabled: true
|
|
||||||
ports:
|
|
||||||
https:
|
|
||||||
enabled: true
|
|
||||||
port: 4443
|
|
||||||
protocol: https
|
|
||||||
targetPort: 4443
|
|
||||||
k8sgateway:
|
|
||||||
enabled: true
|
|
||||||
ports:
|
|
||||||
k8sgateway:
|
|
||||||
enabled: true
|
|
||||||
port: 5353
|
|
||||||
protocol: udp
|
|
||||||
targetPort: 5353
|
|
||||||
|
|
||||||
## TODO Add support for SCALE certificates and certificates secrets here
|
|
||||||
certFile: ""
|
|
||||||
keyFile: ""
|
|
||||||
logLevel: info
|
|
||||||
logFormat: text
|
|
||||||
logTimestamp: true
|
|
||||||
logPrivacy: false
|
|
||||||
dohUserAgent: ""
|
|
||||||
minTlsServeVersion: 1.2
|
|
||||||
|
|
||||||
# -- set the default DNS upstream servers
|
|
||||||
# Primarily designed for inclusion in the TrueNAS SCALE GUI
|
|
||||||
defaultUpstreams:
|
|
||||||
- 1.1.1.1
|
|
||||||
- 1.0.0.1
|
|
||||||
- 8.8.8.8
|
|
||||||
- 8.8.4.4
|
|
||||||
- 9.9.9.9
|
|
||||||
- 149.112.112.112
|
|
||||||
- 208.67.222.222
|
|
||||||
- 208.67.220.220
|
|
||||||
- 8.26.56.26
|
|
||||||
- 8.20.247.20
|
|
||||||
- 185.228.168.9
|
|
||||||
- 185.228.169.9
|
|
||||||
- 76.76.19.19
|
|
||||||
- 76.223.122.150
|
|
||||||
- 76.76.2.0
|
|
||||||
- 76.76.10.0
|
|
||||||
|
|
||||||
# -- set additional upstreams
|
|
||||||
# Primarily designed for inclusion in the TrueNAS SCALE GUI
|
|
||||||
upstreams:
|
|
||||||
# - name: group2
|
|
||||||
# dnsservers:
|
|
||||||
# - 1.1.1.1
|
|
||||||
|
|
||||||
# -- set bootstrap dns (not needed)
|
|
||||||
# Ensures bootstrap encryption and ensure it doesn't use k8s dns
|
|
||||||
bootstrapDns:
|
|
||||||
# -- Upstream
|
|
||||||
upstream: ""
|
|
||||||
# -- IP's linked to upstream DoT/DoH DNS name
|
|
||||||
ips: []
|
|
||||||
|
|
||||||
# -- set additional bootstrap dns (not needed, only used if bootstrapDns is set)
|
|
||||||
additionalBootstrapDns:
|
|
||||||
[]
|
|
||||||
# - upstream: ""
|
|
||||||
# ips: []
|
|
||||||
|
|
||||||
# -- Return empty answer for these queries
|
|
||||||
filtering:
|
|
||||||
# -- Ensures filtering by query type
|
|
||||||
queryTypes: []
|
|
||||||
|
|
||||||
# -- Set manual custom DNS resolution
|
|
||||||
customDNS:
|
|
||||||
customTTL: 1h
|
|
||||||
filterUnmappedTypes: true
|
|
||||||
rewrite: []
|
|
||||||
# - in: something.com
|
|
||||||
# out: somethingelse.com
|
|
||||||
mapping: []
|
|
||||||
# - domain: something.com
|
|
||||||
# dnsserver: 192.168.178.1
|
|
||||||
|
|
||||||
# -- Setup client-name lookup
|
|
||||||
clientLookup:
|
|
||||||
# -- upstream used for client-name lookup
|
|
||||||
upstream: ""
|
|
||||||
singleNameOrder: []
|
|
||||||
clients:
|
|
||||||
# - domain: laptop
|
|
||||||
# ips: []
|
|
||||||
|
|
||||||
# -- Setup caching
|
|
||||||
caching:
|
|
||||||
minTime: 5m
|
|
||||||
maxTime: 30m
|
|
||||||
maxItemsCount: 0
|
|
||||||
prefetching: false
|
|
||||||
prefetchExpires: 2h
|
|
||||||
prefetchThreshold: 5
|
|
||||||
prefetchMaxItemsCount: 0
|
|
||||||
cacheTimeNegative: 30m
|
|
||||||
|
|
||||||
# -- set conditional settings
|
|
||||||
# Primarily designed for inclusion in the TrueNAS SCALE GUI
|
|
||||||
conditional:
|
|
||||||
rewrite: []
|
|
||||||
# - in: something.com
|
|
||||||
# out: somethingelse.com
|
|
||||||
mapping: []
|
|
||||||
# - domain: something.com
|
|
||||||
# dnsserver: 192.168.178.1
|
|
||||||
|
|
||||||
# -- set blocking settings using Lists
|
|
||||||
# Primarily designed for inclusion in the TrueNAS SCALE GUI
|
|
||||||
blocking:
|
|
||||||
# -- Sets the blocktype
|
|
||||||
blockType: nxDomain
|
|
||||||
# -- Sets the block ttl
|
|
||||||
blockTTL: 6h
|
|
||||||
# -- Sets the block refreshPeriod
|
|
||||||
refreshPeriod: 4h
|
|
||||||
# -- Sets the block download timeout
|
|
||||||
downloadTimeout: 60s
|
|
||||||
# -- Sets the block download attempt count
|
|
||||||
downloadAttempts: 3
|
|
||||||
# -- Sets the block download cooldown
|
|
||||||
downloadCooldown: 2s
|
|
||||||
# -- Set the start strategy (blocking | failOnError | fast)
|
|
||||||
startStrategy: blocking
|
|
||||||
# -- Sets how many list-groups can be processed at the same time
|
|
||||||
processingConcurrency: 4
|
|
||||||
# -- Add blocky whitelists
|
|
||||||
whitelist: []
|
|
||||||
# - name: ads
|
|
||||||
# lists:
|
|
||||||
# - https://someurl.com/list.txt
|
|
||||||
# - /somefile.txt
|
|
||||||
|
|
||||||
# -- Blocky blacklists
|
|
||||||
blacklist: []
|
|
||||||
# - name: ads
|
|
||||||
# lists:
|
|
||||||
# - https://someurl.com/list.txt
|
|
||||||
# - /somefile.txt
|
|
||||||
|
|
||||||
# -- Blocky clientGroupsBlock
|
|
||||||
clientGroupsBlock: []
|
|
||||||
# - name: default
|
|
||||||
# groups:
|
|
||||||
# - ads
|
|
||||||
|
|
||||||
# -- configure using hostsfile for lookups
|
|
||||||
# Allows for using the hosts configured in kubernetes and such
|
|
||||||
hostsFile:
|
|
||||||
enabled: false
|
|
||||||
filePath: /etc/hosts
|
|
||||||
hostsTTL: 60m
|
|
||||||
refreshPeriod: 30m
|
|
||||||
|
|
||||||
## TODO: add this with postgresql support as well
|
|
||||||
# queryLog:
|
|
||||||
# type: csv
|
|
||||||
# target: /logs
|
|
||||||
# logRetentionDays: 0
|
|
||||||
# creationAttempts: 3
|
|
||||||
# CreationCooldown: 2
|
|
||||||
|
|
||||||
podOptions:
|
|
||||||
automountServiceAccountToken: true
|
|
||||||
|
|
||||||
portal:
|
|
||||||
open:
|
|
||||||
enabled: false
|
|
||||||
|
|
||||||
serviceAccount:
|
|
||||||
main:
|
|
||||||
# -- Specifies whether a service account should be created
|
|
||||||
enabled: true
|
|
||||||
primary: true
|
|
||||||
|
|
||||||
# -- Create a ClusterRole and ClusterRoleBinding
|
|
||||||
# @default -- See below
|
|
||||||
rbac:
|
|
||||||
main:
|
|
||||||
# -- Enables or disables the ClusterRole and ClusterRoleBinding
|
|
||||||
enabled: true
|
|
||||||
primary: true
|
|
||||||
clusterWide: true
|
|
||||||
# -- Set Rules on the ClusterRole
|
|
||||||
rules:
|
|
||||||
- apiGroups:
|
|
||||||
- ""
|
|
||||||
resources:
|
|
||||||
- services
|
|
||||||
- namespaces
|
|
||||||
verbs:
|
|
||||||
- list
|
|
||||||
- watch
|
|
||||||
- apiGroups:
|
|
||||||
- extensions
|
|
||||||
- networking.k8s.io
|
|
||||||
resources:
|
|
||||||
- ingresses
|
|
||||||
verbs:
|
|
||||||
- list
|
|
||||||
- watch
|
|
||||||
|
|
||||||
k8sgateway:
|
|
||||||
enabled: true
|
|
||||||
# -- TTL for non-apex responses (in seconds)
|
|
||||||
ttl: 300
|
|
||||||
|
|
||||||
# -- Limit what kind of resources to watch, e.g. watchedResources: ["Ingress"]
|
|
||||||
watchedResources: []
|
|
||||||
|
|
||||||
# -- Service name of a secondary DNS server (should be `serviceName.namespace`)
|
|
||||||
secondary: ""
|
|
||||||
|
|
||||||
# -- Override the default `serviceName.namespace` domain apex
|
|
||||||
apex: ""
|
|
||||||
|
|
||||||
# -- list of processed domains
|
|
||||||
domains: []
|
|
||||||
# -- Delegated domain
|
|
||||||
# - domain: "example.com"
|
|
||||||
# # -- Optional configuration option for DNS01 challenge that will redirect all acme
|
|
||||||
# # challenge requests to external cloud domain (e.g. managed by cert-manager)
|
|
||||||
# # See: https://cert-manager.io/docs/configuration/acme/dns01/
|
|
||||||
# dnsChallenge:
|
|
||||||
# enabled: false
|
|
||||||
# domain: dns01.clouddns.com
|
|
||||||
|
|
||||||
forward:
|
|
||||||
enabled: false
|
|
||||||
primary: tls://1.1.1.1
|
|
||||||
secondary: tls://1.0.0.1
|
|
||||||
options:
|
|
||||||
- name: tls_servername
|
|
||||||
value: cloudflare-dns.com
|
|
||||||
|
|
||||||
metrics:
|
|
||||||
main:
|
|
||||||
# -- Enable and configure a Prometheus serviceMonitor for the chart under this key.
|
|
||||||
# @default -- See values.yaml
|
|
||||||
enabled: true
|
|
||||||
type: "servicemonitor"
|
|
||||||
endpoints:
|
|
||||||
- port: main
|
|
||||||
path: /metrics
|
|
||||||
|
|
||||||
# -- Enable and configure Prometheus Rules for the chart under this key.
|
|
||||||
# @default -- See values.yaml
|
|
||||||
prometheusRule:
|
|
||||||
enabled: false
|
|
||||||
labels: {}
|
|
||||||
# -- Configure additionial rules for the chart under this key.
|
|
||||||
# @default -- See prometheusrules.yaml
|
|
||||||
rules:
|
|
||||||
[]
|
|
||||||
# - alert: UnifiPollerAbsent
|
|
||||||
# annotations:
|
|
||||||
# description: Unifi Poller has disappeared from Prometheus service discovery.
|
|
||||||
# summary: Unifi Poller is down.
|
|
||||||
# expr: |
|
|
||||||
# absent(up{job=~".*unifi-poller.*"} == 1)
|
|
||||||
# for: 5m
|
|
||||||
# labels:
|
|
||||||
# severity: critical
|
|
||||||
|
|
||||||
redis:
|
|
||||||
enabled: true
|
|
||||||
|
|
||||||
# CANNOT be defined in above yaml section
|
|
||||||
queryLog:
|
|
||||||
# optional one of: mysql, postgresql, csv, csv-client. If empty, log to console
|
|
||||||
type: ""
|
|
||||||
# directory (should be mounted as volume in docker) for csv, db connection string for mysql, ignored for included postgresql
|
|
||||||
# target: /var/log/something
|
|
||||||
# postgresql target: postgres://user:password@db_host_or_ip:5432/db_name
|
|
||||||
# if > 0, deletes log files which are older than ... days
|
|
||||||
logRetentionDays: 0
|
|
||||||
# optional: Max attempts to create specific query log writer, default: 3
|
|
||||||
creationAttempts: 3
|
|
||||||
# optional: Time between the creation attempts, default: 2s
|
|
||||||
creationCooldown: 2s
|
|
||||||
|
|
||||||
cnpg:
|
|
||||||
main:
|
|
||||||
enabled: false
|
|
||||||
user: blocky
|
|
||||||
database: blocky
|
|
|
@ -0,0 +1,99 @@
|
||||||
|
**Important:**
|
||||||
|
*for the complete changelog, please refer to the website*
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## [blocky-5.0.32](https://github.com/truecharts/charts/compare/blocky-5.0.31...blocky-5.0.32) (2023-05-24)
|
||||||
|
|
||||||
|
### Chore
|
||||||
|
|
||||||
|
- update helm general non-major ([#9125](https://github.com/truecharts/charts/issues/9125))
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## [blocky-5.0.31](https://github.com/truecharts/charts/compare/blocky-5.0.30...blocky-5.0.31) (2023-05-22)
|
||||||
|
|
||||||
|
### Chore
|
||||||
|
|
||||||
|
- update helm general non-major ([#9089](https://github.com/truecharts/charts/issues/9089))
|
||||||
|
|
||||||
|
### Fix
|
||||||
|
|
||||||
|
- fix mistakes on questions.yaml
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## [blocky-5.0.30](https://github.com/truecharts/charts/compare/blocky-5.0.29...blocky-5.0.30) (2023-05-16)
|
||||||
|
|
||||||
|
### Chore
|
||||||
|
|
||||||
|
- update helm general non-major ([#8979](https://github.com/truecharts/charts/issues/8979))
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## [blocky-5.0.29](https://github.com/truecharts/charts/compare/blocky-5.0.28...blocky-5.0.29) (2023-05-05)
|
||||||
|
|
||||||
|
### Chore
|
||||||
|
|
||||||
|
- update helm general non-major ([#8782](https://github.com/truecharts/charts/issues/8782))
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## [blocky-5.0.28](https://github.com/truecharts/charts/compare/blocky-5.0.27...blocky-5.0.28) (2023-05-05)
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## [blocky-5.0.27](https://github.com/truecharts/charts/compare/blocky-5.0.26...blocky-5.0.27) (2023-05-03)
|
||||||
|
|
||||||
|
### Chore
|
||||||
|
|
||||||
|
- update helm general non-major ([#8739](https://github.com/truecharts/charts/issues/8739))
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## [blocky-5.0.26](https://github.com/truecharts/charts/compare/blocky-5.0.25...blocky-5.0.26) (2023-04-25)
|
||||||
|
|
||||||
|
### Chore
|
||||||
|
|
||||||
|
- update helm general non-major ([#8153](https://github.com/truecharts/charts/issues/8153))
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## [blocky-5.0.25](https://github.com/truecharts/charts/compare/blocky-5.0.24...blocky-5.0.25) (2023-04-25)
|
||||||
|
|
||||||
|
### Chore
|
||||||
|
|
||||||
|
- update helm general non-major ([#8145](https://github.com/truecharts/charts/issues/8145))
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## [blocky-5.0.24](https://github.com/truecharts/charts/compare/blocky-5.0.23...blocky-5.0.24) (2023-04-24)
|
||||||
|
|
||||||
|
### Chore
|
||||||
|
|
||||||
|
- update container image tccr.io/truecharts/k8s_gateway to v0.3.4 ([#8137](https://github.com/truecharts/charts/issues/8137))
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## [blocky-5.0.23](https://github.com/truecharts/charts/compare/blocky-5.0.22...blocky-5.0.23) (2023-04-21)
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## [blocky-5.0.22](https://github.com/truecharts/charts/compare/blocky-5.0.21...blocky-5.0.22) (2023-04-20)
|
||||||
|
|
||||||
|
### Chore
|
||||||
|
|
||||||
|
- update helm general non-major ([#8087](https://github.com/truecharts/charts/issues/8087))
|
||||||
|
|
||||||
|
|
|
@ -0,0 +1,33 @@
|
||||||
|
apiVersion: v2
|
||||||
|
appVersion: "0.21.0"
|
||||||
|
dependencies:
|
||||||
|
- name: common
|
||||||
|
repository: https://library-charts.truecharts.org
|
||||||
|
version: 12.9.5
|
||||||
|
- condition: redis.enabled
|
||||||
|
name: redis
|
||||||
|
repository: https://deps.truecharts.org
|
||||||
|
version: 6.0.44
|
||||||
|
description: Blocky is a DNS proxy, DNS enhancer and ad-blocker for the local network written in Go
|
||||||
|
home: https://truecharts.org/charts/enterprise/blocky
|
||||||
|
icon: https://truecharts.org/img/hotlink-ok/chart-icons/blocky.png
|
||||||
|
keywords:
|
||||||
|
- dns
|
||||||
|
- blocky
|
||||||
|
kubeVersion: ">=1.16.0-0"
|
||||||
|
maintainers:
|
||||||
|
- email: info@truecharts.org
|
||||||
|
name: TrueCharts
|
||||||
|
url: https://truecharts.org
|
||||||
|
name: blocky
|
||||||
|
sources:
|
||||||
|
- https://github.com/truecharts/charts/tree/master/charts/enterprise/blocky
|
||||||
|
- https://0xerr0r.github.io/blocky/
|
||||||
|
- https://github.com/0xERR0R/blocky
|
||||||
|
- https://github.com/Mozart409/blocky-frontend
|
||||||
|
version: 5.0.32
|
||||||
|
annotations:
|
||||||
|
truecharts.org/catagories: |
|
||||||
|
- network
|
||||||
|
truecharts.org/SCALE-support: "true"
|
||||||
|
truecharts.org/grade: U
|
|
@ -0,0 +1,9 @@
|
||||||
|
|
||||||
|
|
||||||
|
## [blocky-5.0.32](https://github.com/truecharts/charts/compare/blocky-5.0.31...blocky-5.0.32) (2023-05-24)
|
||||||
|
|
||||||
|
### Chore
|
||||||
|
|
||||||
|
- update helm general non-major ([#9125](https://github.com/truecharts/charts/issues/9125))
|
||||||
|
|
||||||
|
|
Binary file not shown.
Binary file not shown.
|
@ -0,0 +1,374 @@
|
||||||
|
image:
|
||||||
|
repository: tccr.io/truecharts/blocky
|
||||||
|
tag: v0.21.0@sha256:ed72f8a64307b7b734174589ac631726dd642cc8202c3bdf2eeb1de4adedbe0a
|
||||||
|
pullPolicy: IfNotPresent
|
||||||
|
|
||||||
|
k8sgatewayImage:
|
||||||
|
repository: tccr.io/truecharts/k8s_gateway
|
||||||
|
pullPolicy: IfNotPresent
|
||||||
|
tag: 0.3.4@sha256:c49645e7b263e5cfc8fc269db2aef7d90149cecc7a50e2c2fe77ef935dd35742
|
||||||
|
manifestManager:
|
||||||
|
enabled: true
|
||||||
|
workload:
|
||||||
|
main:
|
||||||
|
replicas: 2
|
||||||
|
strategy: RollingUpdate
|
||||||
|
podSpec:
|
||||||
|
containers:
|
||||||
|
main:
|
||||||
|
probes:
|
||||||
|
liveness:
|
||||||
|
enabled: false
|
||||||
|
type: exec
|
||||||
|
command:
|
||||||
|
- /app/blocky
|
||||||
|
- healthcheck
|
||||||
|
readiness:
|
||||||
|
enabled: false
|
||||||
|
type: exec
|
||||||
|
command:
|
||||||
|
- /app/blocky
|
||||||
|
- healthcheck
|
||||||
|
startup:
|
||||||
|
enabled: false
|
||||||
|
type: exec
|
||||||
|
command:
|
||||||
|
- /app/blocky
|
||||||
|
- healthcheck
|
||||||
|
|
||||||
|
# -- Blocky Config File content
|
||||||
|
blockyConfig: {}
|
||||||
|
# upstream:
|
||||||
|
# default:
|
||||||
|
# - 1.1.1.1
|
||||||
|
|
||||||
|
# -- some general blocky settings
|
||||||
|
blocky:
|
||||||
|
# -- Enable prometheus annotations
|
||||||
|
enablePrometheus: true
|
||||||
|
|
||||||
|
service:
|
||||||
|
main:
|
||||||
|
enabled: true
|
||||||
|
ports:
|
||||||
|
main:
|
||||||
|
enabled: true
|
||||||
|
port: 4000
|
||||||
|
protocol: http
|
||||||
|
targetPort: 4000
|
||||||
|
dnstcp:
|
||||||
|
enabled: true
|
||||||
|
ports:
|
||||||
|
dnstcp:
|
||||||
|
enabled: true
|
||||||
|
port: 53
|
||||||
|
targetPort: 53
|
||||||
|
dnsudp:
|
||||||
|
enabled: true
|
||||||
|
ports:
|
||||||
|
dnsudp:
|
||||||
|
enabled: true
|
||||||
|
port: 53
|
||||||
|
protocol: udp
|
||||||
|
targetPort: 53
|
||||||
|
dot:
|
||||||
|
enabled: true
|
||||||
|
ports:
|
||||||
|
dot:
|
||||||
|
enabled: true
|
||||||
|
port: 853
|
||||||
|
protocol: tcp
|
||||||
|
targetPort: 853
|
||||||
|
https:
|
||||||
|
enabled: true
|
||||||
|
ports:
|
||||||
|
https:
|
||||||
|
enabled: true
|
||||||
|
port: 4443
|
||||||
|
protocol: https
|
||||||
|
targetPort: 4443
|
||||||
|
k8sgateway:
|
||||||
|
enabled: true
|
||||||
|
ports:
|
||||||
|
k8sgateway:
|
||||||
|
enabled: true
|
||||||
|
port: 5353
|
||||||
|
protocol: udp
|
||||||
|
targetPort: 5353
|
||||||
|
|
||||||
|
## TODO Add support for SCALE certificates and certificates secrets here
|
||||||
|
certFile: ""
|
||||||
|
keyFile: ""
|
||||||
|
logLevel: info
|
||||||
|
logFormat: text
|
||||||
|
logTimestamp: true
|
||||||
|
logPrivacy: false
|
||||||
|
dohUserAgent: ""
|
||||||
|
minTlsServeVersion: 1.2
|
||||||
|
|
||||||
|
# -- set the default DNS upstream servers
|
||||||
|
# Primarily designed for inclusion in the TrueNAS SCALE GUI
|
||||||
|
defaultUpstreams:
|
||||||
|
- 1.1.1.1
|
||||||
|
- 1.0.0.1
|
||||||
|
- 8.8.8.8
|
||||||
|
- 8.8.4.4
|
||||||
|
- 9.9.9.9
|
||||||
|
- 149.112.112.112
|
||||||
|
- 208.67.222.222
|
||||||
|
- 208.67.220.220
|
||||||
|
- 8.26.56.26
|
||||||
|
- 8.20.247.20
|
||||||
|
- 185.228.168.9
|
||||||
|
- 185.228.169.9
|
||||||
|
- 76.76.19.19
|
||||||
|
- 76.223.122.150
|
||||||
|
- 76.76.2.0
|
||||||
|
- 76.76.10.0
|
||||||
|
|
||||||
|
# -- set additional upstreams
|
||||||
|
# Primarily designed for inclusion in the TrueNAS SCALE GUI
|
||||||
|
upstreams:
|
||||||
|
# - name: group2
|
||||||
|
# dnsservers:
|
||||||
|
# - 1.1.1.1
|
||||||
|
|
||||||
|
# -- set bootstrap dns (not needed)
|
||||||
|
# Ensures bootstrap encryption and ensure it doesn't use k8s dns
|
||||||
|
bootstrapDns:
|
||||||
|
# -- Upstream
|
||||||
|
upstream: ""
|
||||||
|
# -- IP's linked to upstream DoT/DoH DNS name
|
||||||
|
ips: []
|
||||||
|
|
||||||
|
# -- set additional bootstrap dns (not needed, only used if bootstrapDns is set)
|
||||||
|
additionalBootstrapDns:
|
||||||
|
[]
|
||||||
|
# - upstream: ""
|
||||||
|
# ips: []
|
||||||
|
|
||||||
|
# -- Return empty answer for these queries
|
||||||
|
filtering:
|
||||||
|
# -- Ensures filtering by query type
|
||||||
|
queryTypes: []
|
||||||
|
|
||||||
|
# -- Set manual custom DNS resolution
|
||||||
|
customDNS:
|
||||||
|
customTTL: 1h
|
||||||
|
filterUnmappedTypes: true
|
||||||
|
rewrite: []
|
||||||
|
# - in: something.com
|
||||||
|
# out: somethingelse.com
|
||||||
|
mapping: []
|
||||||
|
# - domain: something.com
|
||||||
|
# dnsserver: 192.168.178.1
|
||||||
|
|
||||||
|
# -- Setup client-name lookup
|
||||||
|
clientLookup:
|
||||||
|
# -- upstream used for client-name lookup
|
||||||
|
upstream: ""
|
||||||
|
singleNameOrder: []
|
||||||
|
clients:
|
||||||
|
# - domain: laptop
|
||||||
|
# ips: []
|
||||||
|
|
||||||
|
# -- Setup caching
|
||||||
|
caching:
|
||||||
|
minTime: 5m
|
||||||
|
maxTime: 30m
|
||||||
|
maxItemsCount: 0
|
||||||
|
prefetching: false
|
||||||
|
prefetchExpires: 2h
|
||||||
|
prefetchThreshold: 5
|
||||||
|
prefetchMaxItemsCount: 0
|
||||||
|
cacheTimeNegative: 30m
|
||||||
|
|
||||||
|
# -- set conditional settings
|
||||||
|
# Primarily designed for inclusion in the TrueNAS SCALE GUI
|
||||||
|
conditional:
|
||||||
|
rewrite: []
|
||||||
|
# - in: something.com
|
||||||
|
# out: somethingelse.com
|
||||||
|
mapping: []
|
||||||
|
# - domain: something.com
|
||||||
|
# dnsserver: 192.168.178.1
|
||||||
|
|
||||||
|
# -- set blocking settings using Lists
|
||||||
|
# Primarily designed for inclusion in the TrueNAS SCALE GUI
|
||||||
|
blocking:
|
||||||
|
# -- Sets the blocktype
|
||||||
|
blockType: nxDomain
|
||||||
|
# -- Sets the block ttl
|
||||||
|
blockTTL: 6h
|
||||||
|
# -- Sets the block refreshPeriod
|
||||||
|
refreshPeriod: 4h
|
||||||
|
# -- Sets the block download timeout
|
||||||
|
downloadTimeout: 60s
|
||||||
|
# -- Sets the block download attempt count
|
||||||
|
downloadAttempts: 3
|
||||||
|
# -- Sets the block download cooldown
|
||||||
|
downloadCooldown: 2s
|
||||||
|
# -- Set the start strategy (blocking | failOnError | fast)
|
||||||
|
startStrategy: blocking
|
||||||
|
# -- Sets how many list-groups can be processed at the same time
|
||||||
|
processingConcurrency: 4
|
||||||
|
# -- Add blocky whitelists
|
||||||
|
whitelist: []
|
||||||
|
# - name: ads
|
||||||
|
# lists:
|
||||||
|
# - https://someurl.com/list.txt
|
||||||
|
# - /somefile.txt
|
||||||
|
|
||||||
|
# -- Blocky blacklists
|
||||||
|
blacklist: []
|
||||||
|
# - name: ads
|
||||||
|
# lists:
|
||||||
|
# - https://someurl.com/list.txt
|
||||||
|
# - /somefile.txt
|
||||||
|
|
||||||
|
# -- Blocky clientGroupsBlock
|
||||||
|
clientGroupsBlock: []
|
||||||
|
# - name: default
|
||||||
|
# groups:
|
||||||
|
# - ads
|
||||||
|
|
||||||
|
# -- configure using hostsfile for lookups
|
||||||
|
# Allows for using the hosts configured in kubernetes and such
|
||||||
|
hostsFile:
|
||||||
|
enabled: false
|
||||||
|
filePath: /etc/hosts
|
||||||
|
hostsTTL: 60m
|
||||||
|
refreshPeriod: 30m
|
||||||
|
|
||||||
|
## TODO: add this with postgresql support as well
|
||||||
|
# queryLog:
|
||||||
|
# type: csv
|
||||||
|
# target: /logs
|
||||||
|
# logRetentionDays: 0
|
||||||
|
# creationAttempts: 3
|
||||||
|
# CreationCooldown: 2
|
||||||
|
|
||||||
|
podOptions:
|
||||||
|
automountServiceAccountToken: true
|
||||||
|
|
||||||
|
portal:
|
||||||
|
open:
|
||||||
|
enabled: false
|
||||||
|
|
||||||
|
serviceAccount:
|
||||||
|
main:
|
||||||
|
# -- Specifies whether a service account should be created
|
||||||
|
enabled: true
|
||||||
|
primary: true
|
||||||
|
|
||||||
|
# -- Create a ClusterRole and ClusterRoleBinding
|
||||||
|
# @default -- See below
|
||||||
|
rbac:
|
||||||
|
main:
|
||||||
|
# -- Enables or disables the ClusterRole and ClusterRoleBinding
|
||||||
|
enabled: true
|
||||||
|
primary: true
|
||||||
|
clusterWide: true
|
||||||
|
# -- Set Rules on the ClusterRole
|
||||||
|
rules:
|
||||||
|
- apiGroups:
|
||||||
|
- ""
|
||||||
|
resources:
|
||||||
|
- services
|
||||||
|
- namespaces
|
||||||
|
verbs:
|
||||||
|
- list
|
||||||
|
- watch
|
||||||
|
- apiGroups:
|
||||||
|
- extensions
|
||||||
|
- networking.k8s.io
|
||||||
|
resources:
|
||||||
|
- ingresses
|
||||||
|
verbs:
|
||||||
|
- list
|
||||||
|
- watch
|
||||||
|
|
||||||
|
k8sgateway:
|
||||||
|
enabled: true
|
||||||
|
# -- TTL for non-apex responses (in seconds)
|
||||||
|
ttl: 300
|
||||||
|
|
||||||
|
# -- Limit what kind of resources to watch, e.g. watchedResources: ["Ingress"]
|
||||||
|
watchedResources: []
|
||||||
|
|
||||||
|
# -- Service name of a secondary DNS server (should be `serviceName.namespace`)
|
||||||
|
secondary: ""
|
||||||
|
|
||||||
|
# -- Override the default `serviceName.namespace` domain apex
|
||||||
|
apex: ""
|
||||||
|
|
||||||
|
# -- list of processed domains
|
||||||
|
domains: []
|
||||||
|
# -- Delegated domain
|
||||||
|
# - domain: "example.com"
|
||||||
|
# # -- Optional configuration option for DNS01 challenge that will redirect all acme
|
||||||
|
# # challenge requests to external cloud domain (e.g. managed by cert-manager)
|
||||||
|
# # See: https://cert-manager.io/docs/configuration/acme/dns01/
|
||||||
|
# dnsChallenge:
|
||||||
|
# enabled: false
|
||||||
|
# domain: dns01.clouddns.com
|
||||||
|
|
||||||
|
forward:
|
||||||
|
enabled: false
|
||||||
|
primary: tls://1.1.1.1
|
||||||
|
secondary: tls://1.0.0.1
|
||||||
|
options:
|
||||||
|
- name: tls_servername
|
||||||
|
value: cloudflare-dns.com
|
||||||
|
|
||||||
|
metrics:
|
||||||
|
main:
|
||||||
|
# -- Enable and configure a Prometheus serviceMonitor for the chart under this key.
|
||||||
|
# @default -- See values.yaml
|
||||||
|
enabled: true
|
||||||
|
type: "servicemonitor"
|
||||||
|
endpoints:
|
||||||
|
- port: main
|
||||||
|
path: /metrics
|
||||||
|
|
||||||
|
# -- Enable and configure Prometheus Rules for the chart under this key.
|
||||||
|
# @default -- See values.yaml
|
||||||
|
prometheusRule:
|
||||||
|
enabled: false
|
||||||
|
labels: {}
|
||||||
|
# -- Configure additionial rules for the chart under this key.
|
||||||
|
# @default -- See prometheusrules.yaml
|
||||||
|
rules:
|
||||||
|
[]
|
||||||
|
# - alert: UnifiPollerAbsent
|
||||||
|
# annotations:
|
||||||
|
# description: Unifi Poller has disappeared from Prometheus service discovery.
|
||||||
|
# summary: Unifi Poller is down.
|
||||||
|
# expr: |
|
||||||
|
# absent(up{job=~".*unifi-poller.*"} == 1)
|
||||||
|
# for: 5m
|
||||||
|
# labels:
|
||||||
|
# severity: critical
|
||||||
|
|
||||||
|
redis:
|
||||||
|
enabled: true
|
||||||
|
|
||||||
|
# CANNOT be defined in above yaml section
|
||||||
|
queryLog:
|
||||||
|
# optional one of: mysql, postgresql, csv, csv-client. If empty, log to console
|
||||||
|
type: ""
|
||||||
|
# directory (should be mounted as volume in docker) for csv, db connection string for mysql, ignored for included postgresql
|
||||||
|
# target: /var/log/something
|
||||||
|
# postgresql target: postgres://user:password@db_host_or_ip:5432/db_name
|
||||||
|
# if > 0, deletes log files which are older than ... days
|
||||||
|
logRetentionDays: 0
|
||||||
|
# optional: Max attempts to create specific query log writer, default: 3
|
||||||
|
creationAttempts: 3
|
||||||
|
# optional: Time between the creation attempts, default: 2s
|
||||||
|
creationCooldown: 2s
|
||||||
|
|
||||||
|
cnpg:
|
||||||
|
main:
|
||||||
|
enabled: false
|
||||||
|
user: blocky
|
||||||
|
database: blocky
|
|
@ -1,99 +0,0 @@
|
||||||
**Important:**
|
|
||||||
*for the complete changelog, please refer to the website*
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## [cert-manager-1.0.34](https://github.com/truecharts/charts/compare/cert-manager-1.0.33...cert-manager-1.0.34) (2023-05-22)
|
|
||||||
|
|
||||||
### Chore
|
|
||||||
|
|
||||||
- update helm general non-major ([#9089](https://github.com/truecharts/charts/issues/9089))
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## [cert-manager-1.0.33](https://github.com/truecharts/charts/compare/cert-manager-1.0.32...cert-manager-1.0.33) (2023-05-16)
|
|
||||||
|
|
||||||
### Chore
|
|
||||||
|
|
||||||
- update helm general non-major ([#8979](https://github.com/truecharts/charts/issues/8979))
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## [cert-manager-1.0.32](https://github.com/truecharts/charts/compare/cert-manager-1.0.31...cert-manager-1.0.32) (2023-05-15)
|
|
||||||
|
|
||||||
### Chore
|
|
||||||
|
|
||||||
- update container image tccr.io/truecharts/scratch to latest ([#8960](https://github.com/truecharts/charts/issues/8960))
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## [cert-manager-1.0.31](https://github.com/truecharts/charts/compare/cert-manager-1.0.30...cert-manager-1.0.31) (2023-05-05)
|
|
||||||
|
|
||||||
### Chore
|
|
||||||
|
|
||||||
- update helm general non-major ([#8782](https://github.com/truecharts/charts/issues/8782))
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## [cert-manager-1.0.30](https://github.com/truecharts/charts/compare/cert-manager-1.0.29...cert-manager-1.0.30) (2023-05-05)
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## [cert-manager-1.0.29](https://github.com/truecharts/charts/compare/cert-manager-1.0.28...cert-manager-1.0.29) (2023-05-05)
|
|
||||||
|
|
||||||
### Chore
|
|
||||||
|
|
||||||
- update container image tccr.io/truecharts/scratch to latest ([#8779](https://github.com/truecharts/charts/issues/8779))
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## [cert-manager-1.0.29](https://github.com/truecharts/charts/compare/cert-manager-1.0.28...cert-manager-1.0.29) (2023-05-05)
|
|
||||||
|
|
||||||
### Chore
|
|
||||||
|
|
||||||
- update container image tccr.io/truecharts/scratch to latest ([#8779](https://github.com/truecharts/charts/issues/8779))
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## [cert-manager-1.0.29](https://github.com/truecharts/charts/compare/cert-manager-1.0.28...cert-manager-1.0.29) (2023-05-05)
|
|
||||||
|
|
||||||
### Chore
|
|
||||||
|
|
||||||
- update container image tccr.io/truecharts/scratch to latest ([#8779](https://github.com/truecharts/charts/issues/8779))
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## [cert-manager-1.0.29](https://github.com/truecharts/charts/compare/cert-manager-1.0.28...cert-manager-1.0.29) (2023-05-05)
|
|
||||||
|
|
||||||
### Chore
|
|
||||||
|
|
||||||
- update container image tccr.io/truecharts/scratch to latest ([#8779](https://github.com/truecharts/charts/issues/8779))
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## [cert-manager-1.0.29](https://github.com/truecharts/charts/compare/cert-manager-1.0.28...cert-manager-1.0.29) (2023-05-05)
|
|
||||||
|
|
||||||
### Chore
|
|
||||||
|
|
||||||
- update container image tccr.io/truecharts/scratch to latest ([#8779](https://github.com/truecharts/charts/issues/8779))
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## [cert-manager-1.0.28](https://github.com/truecharts/charts/compare/cert-manager-1.0.27...cert-manager-1.0.28) (2023-05-03)
|
|
||||||
|
|
||||||
### Chore
|
|
||||||
|
|
||||||
- update helm general non-major ([#8739](https://github.com/truecharts/charts/issues/8739))
|
|
||||||
|
|
||||||
|
|
|
@ -1,29 +0,0 @@
|
||||||
apiVersion: v2
|
|
||||||
appVersion: "latest"
|
|
||||||
deprecated: false
|
|
||||||
description: Certificate management for Kubernetes
|
|
||||||
home: https://truecharts.org/charts/enterprise/cert-manager
|
|
||||||
icon: https://truecharts.org/img/hotlink-ok/chart-icons/cert-manager.png
|
|
||||||
keywords:
|
|
||||||
- metallb
|
|
||||||
- loadbalancer
|
|
||||||
dependencies:
|
|
||||||
- name: common
|
|
||||||
repository: https://library-charts.truecharts.org
|
|
||||||
version: 12.9.2
|
|
||||||
kubeVersion: ">=1.16.0-0"
|
|
||||||
maintainers:
|
|
||||||
- email: info@truecharts.org
|
|
||||||
name: TrueCharts
|
|
||||||
url: https://truecharts.org
|
|
||||||
name: cert-manager
|
|
||||||
sources:
|
|
||||||
- https://github.com/truecharts/charts/tree/master/charts/enterprise/cert-manager
|
|
||||||
- https://cert-manager.io/
|
|
||||||
type: application
|
|
||||||
version: 1.0.34
|
|
||||||
annotations:
|
|
||||||
truecharts.org/catagories: |
|
|
||||||
- core
|
|
||||||
truecharts.org/SCALE-support: "true"
|
|
||||||
truecharts.org/grade: U
|
|
|
@ -1,9 +0,0 @@
|
||||||
|
|
||||||
|
|
||||||
## [cert-manager-1.0.34](https://github.com/truecharts/charts/compare/cert-manager-1.0.33...cert-manager-1.0.34) (2023-05-22)
|
|
||||||
|
|
||||||
### Chore
|
|
||||||
|
|
||||||
- update helm general non-major ([#9089](https://github.com/truecharts/charts/issues/9089))
|
|
||||||
|
|
||||||
|
|
Binary file not shown.
|
@ -1,79 +0,0 @@
|
||||||
image:
|
|
||||||
repository: tccr.io/truecharts/scratch
|
|
||||||
tag: latest@sha256:9dd0f68d32ace452a3a75273bd8e3a074d0a14e4d38683389c73887432832fc3
|
|
||||||
pullPolicy: IfNotPresent
|
|
||||||
|
|
||||||
workload:
|
|
||||||
main:
|
|
||||||
enabled: false
|
|
||||||
podSpec:
|
|
||||||
containers:
|
|
||||||
main:
|
|
||||||
enabled: false
|
|
||||||
probes:
|
|
||||||
liveness:
|
|
||||||
enabled: false
|
|
||||||
readiness:
|
|
||||||
enabled: false
|
|
||||||
startup:
|
|
||||||
enabled: false
|
|
||||||
|
|
||||||
service:
|
|
||||||
main:
|
|
||||||
enabled: false
|
|
||||||
ports:
|
|
||||||
main:
|
|
||||||
enabled: false
|
|
||||||
port: 9999
|
|
||||||
|
|
||||||
portal:
|
|
||||||
open:
|
|
||||||
enabled: false
|
|
||||||
|
|
||||||
clusterIssuer:
|
|
||||||
selfSigned:
|
|
||||||
enabled: true
|
|
||||||
name: "selfsigned"
|
|
||||||
CA: []
|
|
||||||
# - name: myca
|
|
||||||
# selfSigned: true
|
|
||||||
# selfSignedCommonName: "my-selfsigned-ca"
|
|
||||||
# # Used to manually define a CA-crt not used when selfSigned is enabled
|
|
||||||
# crt: ""
|
|
||||||
# key: ""
|
|
||||||
# # TODO: Add option to use SCALE CA certs
|
|
||||||
|
|
||||||
ACME: []
|
|
||||||
# - name: letsencrypt
|
|
||||||
# # Used for both logging in to the DNS provider AND ACME registration
|
|
||||||
# email: ""
|
|
||||||
# server: 'https://acme-staging-v02.api.letsencrypt.org/directory'
|
|
||||||
# # Used primarily for the SCALE GUI
|
|
||||||
# customServer: 'https://acme-staging-v02.api.letsencrypt.org/directory'
|
|
||||||
# email: ""
|
|
||||||
# # Options: HTTP01, cloudflare, route53
|
|
||||||
# type: ""
|
|
||||||
# # for cloudflare
|
|
||||||
# cfapikey: ""
|
|
||||||
# cfapitoken: ""
|
|
||||||
# # for route53
|
|
||||||
# region: ""
|
|
||||||
# accessKeyID: ""
|
|
||||||
# route53SecretAccessKey: ""
|
|
||||||
# # optional for route53
|
|
||||||
# role: ""
|
|
||||||
# # for akamai
|
|
||||||
# serviceConsumerDomain: ""
|
|
||||||
# akclientToken: ""
|
|
||||||
# akclientSecret: ""
|
|
||||||
# akaccessToken: ""
|
|
||||||
# # for digitalocean
|
|
||||||
# doaccessToken: ""
|
|
||||||
# # for rfc2136
|
|
||||||
# nameserver: ""
|
|
||||||
# tsigKeyName: ""
|
|
||||||
# tsigAlgorithm: ""
|
|
||||||
# rfctsigSecret: ""
|
|
||||||
|
|
||||||
customMetrics:
|
|
||||||
enabled: true
|
|
|
@ -0,0 +1,99 @@
|
||||||
|
**Important:**
|
||||||
|
*for the complete changelog, please refer to the website*
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## [cert-manager-1.0.35](https://github.com/truecharts/charts/compare/cert-manager-1.0.34...cert-manager-1.0.35) (2023-05-24)
|
||||||
|
|
||||||
|
### Chore
|
||||||
|
|
||||||
|
- update helm general non-major ([#9125](https://github.com/truecharts/charts/issues/9125))
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## [cert-manager-1.0.34](https://github.com/truecharts/charts/compare/cert-manager-1.0.33...cert-manager-1.0.34) (2023-05-22)
|
||||||
|
|
||||||
|
### Chore
|
||||||
|
|
||||||
|
- update helm general non-major ([#9089](https://github.com/truecharts/charts/issues/9089))
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## [cert-manager-1.0.33](https://github.com/truecharts/charts/compare/cert-manager-1.0.32...cert-manager-1.0.33) (2023-05-16)
|
||||||
|
|
||||||
|
### Chore
|
||||||
|
|
||||||
|
- update helm general non-major ([#8979](https://github.com/truecharts/charts/issues/8979))
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## [cert-manager-1.0.32](https://github.com/truecharts/charts/compare/cert-manager-1.0.31...cert-manager-1.0.32) (2023-05-15)
|
||||||
|
|
||||||
|
### Chore
|
||||||
|
|
||||||
|
- update container image tccr.io/truecharts/scratch to latest ([#8960](https://github.com/truecharts/charts/issues/8960))
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## [cert-manager-1.0.31](https://github.com/truecharts/charts/compare/cert-manager-1.0.30...cert-manager-1.0.31) (2023-05-05)
|
||||||
|
|
||||||
|
### Chore
|
||||||
|
|
||||||
|
- update helm general non-major ([#8782](https://github.com/truecharts/charts/issues/8782))
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## [cert-manager-1.0.30](https://github.com/truecharts/charts/compare/cert-manager-1.0.29...cert-manager-1.0.30) (2023-05-05)
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## [cert-manager-1.0.29](https://github.com/truecharts/charts/compare/cert-manager-1.0.28...cert-manager-1.0.29) (2023-05-05)
|
||||||
|
|
||||||
|
### Chore
|
||||||
|
|
||||||
|
- update container image tccr.io/truecharts/scratch to latest ([#8779](https://github.com/truecharts/charts/issues/8779))
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## [cert-manager-1.0.29](https://github.com/truecharts/charts/compare/cert-manager-1.0.28...cert-manager-1.0.29) (2023-05-05)
|
||||||
|
|
||||||
|
### Chore
|
||||||
|
|
||||||
|
- update container image tccr.io/truecharts/scratch to latest ([#8779](https://github.com/truecharts/charts/issues/8779))
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## [cert-manager-1.0.29](https://github.com/truecharts/charts/compare/cert-manager-1.0.28...cert-manager-1.0.29) (2023-05-05)
|
||||||
|
|
||||||
|
### Chore
|
||||||
|
|
||||||
|
- update container image tccr.io/truecharts/scratch to latest ([#8779](https://github.com/truecharts/charts/issues/8779))
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## [cert-manager-1.0.29](https://github.com/truecharts/charts/compare/cert-manager-1.0.28...cert-manager-1.0.29) (2023-05-05)
|
||||||
|
|
||||||
|
### Chore
|
||||||
|
|
||||||
|
- update container image tccr.io/truecharts/scratch to latest ([#8779](https://github.com/truecharts/charts/issues/8779))
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## [cert-manager-1.0.29](https://github.com/truecharts/charts/compare/cert-manager-1.0.28...cert-manager-1.0.29) (2023-05-05)
|
||||||
|
|
||||||
|
### Chore
|
||||||
|
|
||||||
|
- update container image tccr.io/truecharts/scratch to latest ([#8779](https://github.com/truecharts/charts/issues/8779))
|
||||||
|
|
||||||
|
|
|
@ -0,0 +1,29 @@
|
||||||
|
apiVersion: v2
|
||||||
|
appVersion: "latest"
|
||||||
|
deprecated: false
|
||||||
|
description: Certificate management for Kubernetes
|
||||||
|
home: https://truecharts.org/charts/enterprise/cert-manager
|
||||||
|
icon: https://truecharts.org/img/hotlink-ok/chart-icons/cert-manager.png
|
||||||
|
keywords:
|
||||||
|
- metallb
|
||||||
|
- loadbalancer
|
||||||
|
dependencies:
|
||||||
|
- name: common
|
||||||
|
repository: https://library-charts.truecharts.org
|
||||||
|
version: 12.9.5
|
||||||
|
kubeVersion: ">=1.16.0-0"
|
||||||
|
maintainers:
|
||||||
|
- email: info@truecharts.org
|
||||||
|
name: TrueCharts
|
||||||
|
url: https://truecharts.org
|
||||||
|
name: cert-manager
|
||||||
|
sources:
|
||||||
|
- https://github.com/truecharts/charts/tree/master/charts/enterprise/cert-manager
|
||||||
|
- https://cert-manager.io/
|
||||||
|
type: application
|
||||||
|
version: 1.0.35
|
||||||
|
annotations:
|
||||||
|
truecharts.org/catagories: |
|
||||||
|
- core
|
||||||
|
truecharts.org/SCALE-support: "true"
|
||||||
|
truecharts.org/grade: U
|
|
@ -0,0 +1,9 @@
|
||||||
|
|
||||||
|
|
||||||
|
## [cert-manager-1.0.35](https://github.com/truecharts/charts/compare/cert-manager-1.0.34...cert-manager-1.0.35) (2023-05-24)
|
||||||
|
|
||||||
|
### Chore
|
||||||
|
|
||||||
|
- update helm general non-major ([#9125](https://github.com/truecharts/charts/issues/9125))
|
||||||
|
|
||||||
|
|
Binary file not shown.
|
@ -0,0 +1,80 @@
|
||||||
|
image:
|
||||||
|
repository: tccr.io/truecharts/scratch
|
||||||
|
tag: latest@sha256:9dd0f68d32ace452a3a75273bd8e3a074d0a14e4d38683389c73887432832fc3
|
||||||
|
pullPolicy: IfNotPresent
|
||||||
|
manifestManager:
|
||||||
|
enabled: true
|
||||||
|
workload:
|
||||||
|
main:
|
||||||
|
enabled: false
|
||||||
|
podSpec:
|
||||||
|
containers:
|
||||||
|
main:
|
||||||
|
enabled: false
|
||||||
|
probes:
|
||||||
|
liveness:
|
||||||
|
enabled: false
|
||||||
|
readiness:
|
||||||
|
enabled: false
|
||||||
|
startup:
|
||||||
|
enabled: false
|
||||||
|
|
||||||
|
service:
|
||||||
|
main:
|
||||||
|
enabled: false
|
||||||
|
ports:
|
||||||
|
main:
|
||||||
|
enabled: false
|
||||||
|
port: 9999
|
||||||
|
|
||||||
|
portal:
|
||||||
|
open:
|
||||||
|
enabled: false
|
||||||
|
|
||||||
|
clusterIssuer:
|
||||||
|
selfSigned:
|
||||||
|
enabled: true
|
||||||
|
name: "selfsigned"
|
||||||
|
CA: []
|
||||||
|
# - name: myca
|
||||||
|
# selfSigned: true
|
||||||
|
# selfSignedCommonName: "my-selfsigned-ca"
|
||||||
|
# # Used to manually define a CA-crt not used when selfSigned is enabled
|
||||||
|
# crt: ""
|
||||||
|
# key: ""
|
||||||
|
# # TODO: Add option to use SCALE CA certs
|
||||||
|
|
||||||
|
ACME: []
|
||||||
|
# - name: letsencrypt
|
||||||
|
# # Used for both logging in to the DNS provider AND ACME registration
|
||||||
|
# email: ""
|
||||||
|
# server: 'https://acme-staging-v02.api.letsencrypt.org/directory'
|
||||||
|
# # Used primarily for the SCALE GUI
|
||||||
|
# customServer: 'https://acme-staging-v02.api.letsencrypt.org/directory'
|
||||||
|
# email: ""
|
||||||
|
# # Options: HTTP01, cloudflare, route53
|
||||||
|
# type: ""
|
||||||
|
# # for cloudflare
|
||||||
|
# cfapikey: ""
|
||||||
|
# cfapitoken: ""
|
||||||
|
# # for route53
|
||||||
|
# region: ""
|
||||||
|
# accessKeyID: ""
|
||||||
|
# route53SecretAccessKey: ""
|
||||||
|
# # optional for route53
|
||||||
|
# role: ""
|
||||||
|
# # for akamai
|
||||||
|
# serviceConsumerDomain: ""
|
||||||
|
# akclientToken: ""
|
||||||
|
# akclientSecret: ""
|
||||||
|
# akaccessToken: ""
|
||||||
|
# # for digitalocean
|
||||||
|
# doaccessToken: ""
|
||||||
|
# # for rfc2136
|
||||||
|
# nameserver: ""
|
||||||
|
# tsigKeyName: ""
|
||||||
|
# tsigAlgorithm: ""
|
||||||
|
# rfctsigSecret: ""
|
||||||
|
|
||||||
|
customMetrics:
|
||||||
|
enabled: true
|
|
@ -1,99 +0,0 @@
|
||||||
**Important:**
|
|
||||||
*for the complete changelog, please refer to the website*
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## [grafana-7.0.37](https://github.com/truecharts/charts/compare/grafana-7.0.36...grafana-7.0.37) (2023-05-22)
|
|
||||||
|
|
||||||
### Chore
|
|
||||||
|
|
||||||
- update helm general non-major ([#9089](https://github.com/truecharts/charts/issues/9089))
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## [grafana-7.0.36](https://github.com/truecharts/charts/compare/grafana-7.0.35...grafana-7.0.36) (2023-05-22)
|
|
||||||
|
|
||||||
### Chore
|
|
||||||
|
|
||||||
- update container image tccr.io/truecharts/grafana to v9.5.2 ([#9071](https://github.com/truecharts/charts/issues/9071))
|
|
||||||
|
|
||||||
### Fix
|
|
||||||
|
|
||||||
- fix mistakes on questions.yaml
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## [grafana-7.0.35](https://github.com/truecharts/charts/compare/grafana-7.0.34...grafana-7.0.35) (2023-05-16)
|
|
||||||
|
|
||||||
### Chore
|
|
||||||
|
|
||||||
- update container image tccr.io/truecharts/grafana to v9.5.2 ([#8984](https://github.com/truecharts/charts/issues/8984))
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## [grafana-7.0.34](https://github.com/truecharts/charts/compare/grafana-7.0.33...grafana-7.0.34) (2023-05-16)
|
|
||||||
|
|
||||||
### Chore
|
|
||||||
|
|
||||||
- update helm general non-major ([#8979](https://github.com/truecharts/charts/issues/8979))
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## [grafana-7.0.33](https://github.com/truecharts/charts/compare/grafana-7.0.32...grafana-7.0.33) (2023-05-14)
|
|
||||||
|
|
||||||
### Chore
|
|
||||||
|
|
||||||
- update container image tccr.io/truecharts/grafana to v9.5.2 ([#8927](https://github.com/truecharts/charts/issues/8927))
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## [grafana-7.0.32](https://github.com/truecharts/charts/compare/grafana-7.0.31...grafana-7.0.32) (2023-05-12)
|
|
||||||
|
|
||||||
### Chore
|
|
||||||
|
|
||||||
- update container image tccr.io/truecharts/grafana to v9.5.2 ([#8911](https://github.com/truecharts/charts/issues/8911))
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## [grafana-7.0.31](https://github.com/truecharts/charts/compare/grafana-7.0.30...grafana-7.0.31) (2023-05-05)
|
|
||||||
|
|
||||||
### Chore
|
|
||||||
|
|
||||||
- update helm general non-major ([#8782](https://github.com/truecharts/charts/issues/8782))
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## [grafana-7.0.30](https://github.com/truecharts/charts/compare/grafana-7.0.29...grafana-7.0.30) (2023-05-05)
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## [grafana-7.0.29](https://github.com/truecharts/charts/compare/grafana-7.0.28...grafana-7.0.29) (2023-05-04)
|
|
||||||
|
|
||||||
### Chore
|
|
||||||
|
|
||||||
- update container image tccr.io/truecharts/grafana to 9.5.1 ([#8725](https://github.com/truecharts/charts/issues/8725))
|
|
||||||
|
|
||||||
### Fix
|
|
||||||
|
|
||||||
- remove duplicate include ([#8759](https://github.com/truecharts/charts/issues/8759))
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## [grafana-7.0.28](https://github.com/truecharts/charts/compare/grafana-7.0.27...grafana-7.0.28) (2023-05-03)
|
|
||||||
|
|
||||||
### Chore
|
|
||||||
|
|
||||||
- update helm general non-major ([#8739](https://github.com/truecharts/charts/issues/8739))
|
|
||||||
|
|
||||||
|
|
||||||
|
|
|
@ -1,32 +0,0 @@
|
||||||
apiVersion: v2
|
|
||||||
appVersion: "9.5.2"
|
|
||||||
dependencies:
|
|
||||||
- name: common
|
|
||||||
repository: https://library-charts.truecharts.org
|
|
||||||
version: 12.9.2
|
|
||||||
deprecated: false
|
|
||||||
description: Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, Elasticsearch, OpenTSDB, Prometheus and InfluxDB.
|
|
||||||
home: https://truecharts.org/charts/enterprise/grafana
|
|
||||||
icon: https://truecharts.org/img/hotlink-ok/chart-icons/grafana.png
|
|
||||||
keywords:
|
|
||||||
- analytics
|
|
||||||
- monitoring
|
|
||||||
- metrics
|
|
||||||
- logs
|
|
||||||
kubeVersion: ">=1.16.0-0"
|
|
||||||
maintainers:
|
|
||||||
- email: info@truecharts.org
|
|
||||||
name: TrueCharts
|
|
||||||
url: https://truecharts.org
|
|
||||||
name: grafana
|
|
||||||
sources:
|
|
||||||
- https://github.com/truecharts/charts/tree/master/charts/enterprise/grafana
|
|
||||||
- https://github.com/bitnami/bitnami-docker-grafana
|
|
||||||
- https://grafana.com/
|
|
||||||
type: application
|
|
||||||
version: 7.0.37
|
|
||||||
annotations:
|
|
||||||
truecharts.org/catagories: |
|
|
||||||
- metrics
|
|
||||||
truecharts.org/SCALE-support: "true"
|
|
||||||
truecharts.org/grade: U
|
|
|
@ -1,9 +0,0 @@
|
||||||
|
|
||||||
|
|
||||||
## [grafana-7.0.37](https://github.com/truecharts/charts/compare/grafana-7.0.36...grafana-7.0.37) (2023-05-22)
|
|
||||||
|
|
||||||
### Chore
|
|
||||||
|
|
||||||
- update helm general non-major ([#9089](https://github.com/truecharts/charts/issues/9089))
|
|
||||||
|
|
||||||
|
|
Binary file not shown.
|
@ -1,86 +0,0 @@
|
||||||
image:
|
|
||||||
repository: tccr.io/truecharts/grafana
|
|
||||||
pullPolicy: IfNotPresent
|
|
||||||
tag: v9.5.2@sha256:2835129a3364407fb10ce370ff5f83087373dbf99b067190e84bde8db2a77d5e
|
|
||||||
|
|
||||||
securityContext:
|
|
||||||
container:
|
|
||||||
readOnlyRootFilesystem: false
|
|
||||||
|
|
||||||
service:
|
|
||||||
main:
|
|
||||||
ports:
|
|
||||||
main:
|
|
||||||
protocol: http
|
|
||||||
targetPort: 3000
|
|
||||||
port: 10038
|
|
||||||
|
|
||||||
workload:
|
|
||||||
main:
|
|
||||||
replicas: 2
|
|
||||||
strategy: RollingUpdate
|
|
||||||
podSpec:
|
|
||||||
containers:
|
|
||||||
main:
|
|
||||||
env:
|
|
||||||
GF_SECURITY_ADMIN_USER: "admin"
|
|
||||||
GF_SECURITY_ADMIN_PASSWORD: "testpassword"
|
|
||||||
GF_INSTALL_PLUGINS: ""
|
|
||||||
GF_PATHS_PLUGINS: "/opt/bitnami/grafana/data/plugins"
|
|
||||||
GF_AUTH_LDAP_ENABLED: "false"
|
|
||||||
GF_AUTH_LDAP_CONFIG_FILE: "/opt/bitnami/grafana/conf/ldap.toml"
|
|
||||||
GF_AUTH_LDAP_ALLOW_SIGN_UP: "false"
|
|
||||||
GF_PATHS_PROVISIONING: "/opt/bitnami/grafana/conf/provisioning"
|
|
||||||
GF_PATHS_CONFIG: "/opt/bitnami/grafana/conf/grafana.ini"
|
|
||||||
GF_PATHS_DATA: "/opt/bitnami/grafana/data"
|
|
||||||
GF_PATHS_LOGS: "/opt/bitnami/grafana/logs"
|
|
||||||
probes:
|
|
||||||
liveness:
|
|
||||||
path: "/api/health"
|
|
||||||
|
|
||||||
readiness:
|
|
||||||
path: "/api/health"
|
|
||||||
|
|
||||||
startup:
|
|
||||||
path: "/api/health"
|
|
||||||
|
|
||||||
persistence:
|
|
||||||
config:
|
|
||||||
enabled: true
|
|
||||||
mountPath: "/opt/bitnami/grafana/data"
|
|
||||||
grafana-tmp:
|
|
||||||
enabled: true
|
|
||||||
type: emptyDir
|
|
||||||
mountPath: /opt/bitnami/grafana/tmp
|
|
||||||
|
|
||||||
metrics:
|
|
||||||
main:
|
|
||||||
# -- Enable and configure a Prometheus serviceMonitor for the chart under this key.
|
|
||||||
# @default -- See values.yaml
|
|
||||||
enabled: true
|
|
||||||
type: serviceMonitor
|
|
||||||
endpoints:
|
|
||||||
- port: main
|
|
||||||
path: /metrics
|
|
||||||
# -- Enable and configure Prometheus Rules for the chart under this key.
|
|
||||||
# @default -- See values.yaml
|
|
||||||
prometheusRule:
|
|
||||||
enabled: false
|
|
||||||
labels: {}
|
|
||||||
# -- Configure additionial rules for the chart under this key.
|
|
||||||
# @default -- See prometheusrules.yaml
|
|
||||||
rules:
|
|
||||||
[]
|
|
||||||
# - alert: UnifiPollerAbsent
|
|
||||||
# annotations:
|
|
||||||
# description: Unifi Poller has disappeared from Prometheus service discovery.
|
|
||||||
# summary: Unifi Poller is down.
|
|
||||||
# expr: |
|
|
||||||
# absent(up{job=~".*unifi-poller.*"} == 1)
|
|
||||||
# for: 5m
|
|
||||||
# labels:
|
|
||||||
# severity: critical
|
|
||||||
|
|
||||||
portal:
|
|
||||||
open:
|
|
||||||
enabled: true
|
|
|
@ -0,0 +1,99 @@
|
||||||
|
**Important:**
|
||||||
|
*for the complete changelog, please refer to the website*
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## [grafana-7.0.38](https://github.com/truecharts/charts/compare/grafana-7.0.37...grafana-7.0.38) (2023-05-24)
|
||||||
|
|
||||||
|
### Chore
|
||||||
|
|
||||||
|
- update helm general non-major ([#9125](https://github.com/truecharts/charts/issues/9125))
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## [grafana-7.0.37](https://github.com/truecharts/charts/compare/grafana-7.0.36...grafana-7.0.37) (2023-05-22)
|
||||||
|
|
||||||
|
### Chore
|
||||||
|
|
||||||
|
- update helm general non-major ([#9089](https://github.com/truecharts/charts/issues/9089))
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## [grafana-7.0.36](https://github.com/truecharts/charts/compare/grafana-7.0.35...grafana-7.0.36) (2023-05-22)
|
||||||
|
|
||||||
|
### Chore
|
||||||
|
|
||||||
|
- update container image tccr.io/truecharts/grafana to v9.5.2 ([#9071](https://github.com/truecharts/charts/issues/9071))
|
||||||
|
|
||||||
|
### Fix
|
||||||
|
|
||||||
|
- fix mistakes on questions.yaml
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## [grafana-7.0.35](https://github.com/truecharts/charts/compare/grafana-7.0.34...grafana-7.0.35) (2023-05-16)
|
||||||
|
|
||||||
|
### Chore
|
||||||
|
|
||||||
|
- update container image tccr.io/truecharts/grafana to v9.5.2 ([#8984](https://github.com/truecharts/charts/issues/8984))
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## [grafana-7.0.34](https://github.com/truecharts/charts/compare/grafana-7.0.33...grafana-7.0.34) (2023-05-16)
|
||||||
|
|
||||||
|
### Chore
|
||||||
|
|
||||||
|
- update helm general non-major ([#8979](https://github.com/truecharts/charts/issues/8979))
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## [grafana-7.0.33](https://github.com/truecharts/charts/compare/grafana-7.0.32...grafana-7.0.33) (2023-05-14)
|
||||||
|
|
||||||
|
### Chore
|
||||||
|
|
||||||
|
- update container image tccr.io/truecharts/grafana to v9.5.2 ([#8927](https://github.com/truecharts/charts/issues/8927))
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## [grafana-7.0.32](https://github.com/truecharts/charts/compare/grafana-7.0.31...grafana-7.0.32) (2023-05-12)
|
||||||
|
|
||||||
|
### Chore
|
||||||
|
|
||||||
|
- update container image tccr.io/truecharts/grafana to v9.5.2 ([#8911](https://github.com/truecharts/charts/issues/8911))
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## [grafana-7.0.31](https://github.com/truecharts/charts/compare/grafana-7.0.30...grafana-7.0.31) (2023-05-05)
|
||||||
|
|
||||||
|
### Chore
|
||||||
|
|
||||||
|
- update helm general non-major ([#8782](https://github.com/truecharts/charts/issues/8782))
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## [grafana-7.0.30](https://github.com/truecharts/charts/compare/grafana-7.0.29...grafana-7.0.30) (2023-05-05)
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## [grafana-7.0.29](https://github.com/truecharts/charts/compare/grafana-7.0.28...grafana-7.0.29) (2023-05-04)
|
||||||
|
|
||||||
|
### Chore
|
||||||
|
|
||||||
|
- update container image tccr.io/truecharts/grafana to 9.5.1 ([#8725](https://github.com/truecharts/charts/issues/8725))
|
||||||
|
|
||||||
|
### Fix
|
||||||
|
|
||||||
|
- remove duplicate include ([#8759](https://github.com/truecharts/charts/issues/8759))
|
||||||
|
|
||||||
|
|
||||||
|
|
|
@ -0,0 +1,32 @@
|
||||||
|
apiVersion: v2
|
||||||
|
appVersion: "9.5.2"
|
||||||
|
dependencies:
|
||||||
|
- name: common
|
||||||
|
repository: https://library-charts.truecharts.org
|
||||||
|
version: 12.9.5
|
||||||
|
deprecated: false
|
||||||
|
description: Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, Elasticsearch, OpenTSDB, Prometheus and InfluxDB.
|
||||||
|
home: https://truecharts.org/charts/enterprise/grafana
|
||||||
|
icon: https://truecharts.org/img/hotlink-ok/chart-icons/grafana.png
|
||||||
|
keywords:
|
||||||
|
- analytics
|
||||||
|
- monitoring
|
||||||
|
- metrics
|
||||||
|
- logs
|
||||||
|
kubeVersion: ">=1.16.0-0"
|
||||||
|
maintainers:
|
||||||
|
- email: info@truecharts.org
|
||||||
|
name: TrueCharts
|
||||||
|
url: https://truecharts.org
|
||||||
|
name: grafana
|
||||||
|
sources:
|
||||||
|
- https://github.com/truecharts/charts/tree/master/charts/enterprise/grafana
|
||||||
|
- https://github.com/bitnami/bitnami-docker-grafana
|
||||||
|
- https://grafana.com/
|
||||||
|
type: application
|
||||||
|
version: 7.0.38
|
||||||
|
annotations:
|
||||||
|
truecharts.org/catagories: |
|
||||||
|
- metrics
|
||||||
|
truecharts.org/SCALE-support: "true"
|
||||||
|
truecharts.org/grade: U
|
|
@ -0,0 +1,9 @@
|
||||||
|
|
||||||
|
|
||||||
|
## [grafana-7.0.38](https://github.com/truecharts/charts/compare/grafana-7.0.37...grafana-7.0.38) (2023-05-24)
|
||||||
|
|
||||||
|
### Chore
|
||||||
|
|
||||||
|
- update helm general non-major ([#9125](https://github.com/truecharts/charts/issues/9125))
|
||||||
|
|
||||||
|
|
Binary file not shown.
|
@ -0,0 +1,87 @@
|
||||||
|
image:
|
||||||
|
repository: tccr.io/truecharts/grafana
|
||||||
|
pullPolicy: IfNotPresent
|
||||||
|
tag: v9.5.2@sha256:2835129a3364407fb10ce370ff5f83087373dbf99b067190e84bde8db2a77d5e
|
||||||
|
manifestManager:
|
||||||
|
enabled: true
|
||||||
|
securityContext:
|
||||||
|
container:
|
||||||
|
readOnlyRootFilesystem: false
|
||||||
|
|
||||||
|
service:
|
||||||
|
main:
|
||||||
|
ports:
|
||||||
|
main:
|
||||||
|
protocol: http
|
||||||
|
targetPort: 3000
|
||||||
|
port: 10038
|
||||||
|
|
||||||
|
workload:
|
||||||
|
main:
|
||||||
|
replicas: 2
|
||||||
|
strategy: RollingUpdate
|
||||||
|
podSpec:
|
||||||
|
containers:
|
||||||
|
main:
|
||||||
|
env:
|
||||||
|
GF_SECURITY_ADMIN_USER: "admin"
|
||||||
|
GF_SECURITY_ADMIN_PASSWORD: "testpassword"
|
||||||
|
GF_INSTALL_PLUGINS: ""
|
||||||
|
GF_PATHS_PLUGINS: "/opt/bitnami/grafana/data/plugins"
|
||||||
|
GF_AUTH_LDAP_ENABLED: "false"
|
||||||
|
GF_AUTH_LDAP_CONFIG_FILE: "/opt/bitnami/grafana/conf/ldap.toml"
|
||||||
|
GF_AUTH_LDAP_ALLOW_SIGN_UP: "false"
|
||||||
|
GF_PATHS_PROVISIONING: "/opt/bitnami/grafana/conf/provisioning"
|
||||||
|
GF_PATHS_CONFIG: "/opt/bitnami/grafana/conf/grafana.ini"
|
||||||
|
GF_PATHS_DATA: "/opt/bitnami/grafana/data"
|
||||||
|
GF_PATHS_LOGS: "/opt/bitnami/grafana/logs"
|
||||||
|
probes:
|
||||||
|
liveness:
|
||||||
|
path: "/api/health"
|
||||||
|
|
||||||
|
readiness:
|
||||||
|
path: "/api/health"
|
||||||
|
|
||||||
|
startup:
|
||||||
|
path: "/api/health"
|
||||||
|
|
||||||
|
persistence:
|
||||||
|
config:
|
||||||
|
enabled: true
|
||||||
|
mountPath: "/opt/bitnami/grafana/data"
|
||||||
|
grafana-tmp:
|
||||||
|
enabled: true
|
||||||
|
type: emptyDir
|
||||||
|
mountPath: /opt/bitnami/grafana/tmp
|
||||||
|
|
||||||
|
metrics:
|
||||||
|
main:
|
||||||
|
# -- Enable and configure a Prometheus serviceMonitor for the chart under this key.
|
||||||
|
# @default -- See values.yaml
|
||||||
|
enabled: true
|
||||||
|
type: serviceMonitor
|
||||||
|
endpoints:
|
||||||
|
- port: main
|
||||||
|
path: /metrics
|
||||||
|
# -- Enable and configure Prometheus Rules for the chart under this key.
|
||||||
|
# @default -- See values.yaml
|
||||||
|
prometheusRule:
|
||||||
|
enabled: false
|
||||||
|
labels: {}
|
||||||
|
# -- Configure additionial rules for the chart under this key.
|
||||||
|
# @default -- See prometheusrules.yaml
|
||||||
|
rules:
|
||||||
|
[]
|
||||||
|
# - alert: UnifiPollerAbsent
|
||||||
|
# annotations:
|
||||||
|
# description: Unifi Poller has disappeared from Prometheus service discovery.
|
||||||
|
# summary: Unifi Poller is down.
|
||||||
|
# expr: |
|
||||||
|
# absent(up{job=~".*unifi-poller.*"} == 1)
|
||||||
|
# for: 5m
|
||||||
|
# labels:
|
||||||
|
# severity: critical
|
||||||
|
|
||||||
|
portal:
|
||||||
|
open:
|
||||||
|
enabled: true
|
|
@ -1,99 +0,0 @@
|
||||||
**Important:**
|
|
||||||
*for the complete changelog, please refer to the website*
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## [metallb-8.0.29](https://github.com/truecharts/charts/compare/metallb-8.0.28...metallb-8.0.29) (2023-05-22)
|
|
||||||
|
|
||||||
### Chore
|
|
||||||
|
|
||||||
- update helm general non-major ([#9089](https://github.com/truecharts/charts/issues/9089))
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## [metallb-8.0.28](https://github.com/truecharts/charts/compare/metallb-8.0.27...metallb-8.0.28) (2023-05-16)
|
|
||||||
|
|
||||||
### Chore
|
|
||||||
|
|
||||||
- update helm general non-major ([#8979](https://github.com/truecharts/charts/issues/8979))
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## [metallb-8.0.27](https://github.com/truecharts/charts/compare/metallb-8.0.26...metallb-8.0.27) (2023-05-15)
|
|
||||||
|
|
||||||
### Chore
|
|
||||||
|
|
||||||
- update container image tccr.io/truecharts/scratch to latest ([#8960](https://github.com/truecharts/charts/issues/8960))
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## [metallb-8.0.26](https://github.com/truecharts/charts/compare/metallb-8.0.25...metallb-8.0.26) (2023-05-05)
|
|
||||||
|
|
||||||
### Chore
|
|
||||||
|
|
||||||
- update helm general non-major ([#8782](https://github.com/truecharts/charts/issues/8782))
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## [metallb-8.0.25](https://github.com/truecharts/charts/compare/metallb-8.0.24...metallb-8.0.25) (2023-05-05)
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## [metallb-8.0.24](https://github.com/truecharts/charts/compare/metallb-8.0.23...metallb-8.0.24) (2023-05-05)
|
|
||||||
|
|
||||||
### Chore
|
|
||||||
|
|
||||||
- update container image tccr.io/truecharts/scratch to latest ([#8779](https://github.com/truecharts/charts/issues/8779))
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## [metallb-8.0.24](https://github.com/truecharts/charts/compare/metallb-8.0.23...metallb-8.0.24) (2023-05-05)
|
|
||||||
|
|
||||||
### Chore
|
|
||||||
|
|
||||||
- update container image tccr.io/truecharts/scratch to latest ([#8779](https://github.com/truecharts/charts/issues/8779))
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## [metallb-8.0.24](https://github.com/truecharts/charts/compare/metallb-8.0.23...metallb-8.0.24) (2023-05-05)
|
|
||||||
|
|
||||||
### Chore
|
|
||||||
|
|
||||||
- update container image tccr.io/truecharts/scratch to latest ([#8779](https://github.com/truecharts/charts/issues/8779))
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## [metallb-8.0.24](https://github.com/truecharts/charts/compare/metallb-8.0.23...metallb-8.0.24) (2023-05-05)
|
|
||||||
|
|
||||||
### Chore
|
|
||||||
|
|
||||||
- update container image tccr.io/truecharts/scratch to latest ([#8779](https://github.com/truecharts/charts/issues/8779))
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## [metallb-8.0.24](https://github.com/truecharts/charts/compare/metallb-8.0.23...metallb-8.0.24) (2023-05-05)
|
|
||||||
|
|
||||||
### Chore
|
|
||||||
|
|
||||||
- update container image tccr.io/truecharts/scratch to latest ([#8779](https://github.com/truecharts/charts/issues/8779))
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## [metallb-8.0.23](https://github.com/truecharts/charts/compare/metallb-8.0.22...metallb-8.0.23) (2023-05-03)
|
|
||||||
|
|
||||||
### Chore
|
|
||||||
|
|
||||||
- update helm general non-major ([#8739](https://github.com/truecharts/charts/issues/8739))
|
|
||||||
|
|
||||||
|
|
|
@ -1,30 +0,0 @@
|
||||||
apiVersion: v2
|
|
||||||
appVersion: "latest"
|
|
||||||
deprecated: false
|
|
||||||
description: A network load-balancer implementation for Kubernetes using standard routing protocols
|
|
||||||
home: https://truecharts.org/charts/enterprise/metallb
|
|
||||||
icon: https://truecharts.org/img/hotlink-ok/chart-icons/metallb.png
|
|
||||||
keywords:
|
|
||||||
- metallb
|
|
||||||
- loadbalancer
|
|
||||||
dependencies:
|
|
||||||
- name: common
|
|
||||||
repository: https://library-charts.truecharts.org
|
|
||||||
version: 12.9.2
|
|
||||||
kubeVersion: ">=1.16.0-0"
|
|
||||||
maintainers:
|
|
||||||
- email: info@truecharts.org
|
|
||||||
name: TrueCharts
|
|
||||||
url: https://truecharts.org
|
|
||||||
name: metallb
|
|
||||||
sources:
|
|
||||||
- https://github.com/truecharts/charts/tree/master/charts/enterprise/metallb
|
|
||||||
- https://github.com/metallb/metallb
|
|
||||||
- https://metallb.universe.tf
|
|
||||||
type: application
|
|
||||||
version: 8.0.29
|
|
||||||
annotations:
|
|
||||||
truecharts.org/catagories: |
|
|
||||||
- core
|
|
||||||
truecharts.org/SCALE-support: "true"
|
|
||||||
truecharts.org/grade: U
|
|
|
@ -1,9 +0,0 @@
|
||||||
|
|
||||||
|
|
||||||
## [metallb-8.0.29](https://github.com/truecharts/charts/compare/metallb-8.0.28...metallb-8.0.29) (2023-05-22)
|
|
||||||
|
|
||||||
### Chore
|
|
||||||
|
|
||||||
- update helm general non-major ([#9089](https://github.com/truecharts/charts/issues/9089))
|
|
||||||
|
|
||||||
|
|
Binary file not shown.
|
@ -1,71 +0,0 @@
|
||||||
image:
|
|
||||||
repository: tccr.io/truecharts/scratch
|
|
||||||
tag: latest@sha256:9dd0f68d32ace452a3a75273bd8e3a074d0a14e4d38683389c73887432832fc3
|
|
||||||
pullPolicy: IfNotPresent
|
|
||||||
|
|
||||||
workload:
|
|
||||||
main:
|
|
||||||
enabled: false
|
|
||||||
podSpec:
|
|
||||||
containers:
|
|
||||||
main:
|
|
||||||
enabled: false
|
|
||||||
probes:
|
|
||||||
liveness:
|
|
||||||
enabled: false
|
|
||||||
readiness:
|
|
||||||
enabled: false
|
|
||||||
startup:
|
|
||||||
enabled: false
|
|
||||||
|
|
||||||
service:
|
|
||||||
main:
|
|
||||||
enabled: false
|
|
||||||
ports:
|
|
||||||
main:
|
|
||||||
enabled: false
|
|
||||||
port: 9999
|
|
||||||
|
|
||||||
portal:
|
|
||||||
open:
|
|
||||||
enabled: false
|
|
||||||
|
|
||||||
ipAddressPools: []
|
|
||||||
# - name: example
|
|
||||||
# autoAssign: true
|
|
||||||
# avoidBuggyIPs: true
|
|
||||||
# addresses:
|
|
||||||
# - 192.168.1.1-192.168.1.100
|
|
||||||
L2Advertisements: []
|
|
||||||
# - name: l2adv
|
|
||||||
# addressPools:
|
|
||||||
# - pool1
|
|
||||||
# nodeSelectors:
|
|
||||||
# - nodeA
|
|
||||||
BGPAdvertisements: []
|
|
||||||
# - name: bgpadv
|
|
||||||
# addressPools:
|
|
||||||
# - pool1
|
|
||||||
# aggregationLength: 24
|
|
||||||
# localpref: 100
|
|
||||||
# communities:
|
|
||||||
# - 1234:1
|
|
||||||
# peers:
|
|
||||||
# - peer1
|
|
||||||
Communities: []
|
|
||||||
# - name: community1
|
|
||||||
# value: 1234:1
|
|
||||||
Peers: []
|
|
||||||
# - name: peer1
|
|
||||||
# myASN: 1234
|
|
||||||
# password: pass
|
|
||||||
# routerID: 1234
|
|
||||||
# bfdProfile: profile
|
|
||||||
# ebgpMultiHop: false
|
|
||||||
# holdTime: 10
|
|
||||||
# keepaliveTime: 10
|
|
||||||
# peerAddress: 172.30.0.2
|
|
||||||
# peerPort: 179
|
|
||||||
# sourceAddress: 172.30.0.3
|
|
||||||
# nodeSelectors:
|
|
||||||
# - nodeA
|
|
|
@ -0,0 +1,99 @@
|
||||||
|
**Important:**
|
||||||
|
*for the complete changelog, please refer to the website*
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## [metallb-8.0.30](https://github.com/truecharts/charts/compare/metallb-8.0.29...metallb-8.0.30) (2023-05-24)
|
||||||
|
|
||||||
|
### Chore
|
||||||
|
|
||||||
|
- update helm general non-major ([#9125](https://github.com/truecharts/charts/issues/9125))
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## [metallb-8.0.29](https://github.com/truecharts/charts/compare/metallb-8.0.28...metallb-8.0.29) (2023-05-22)
|
||||||
|
|
||||||
|
### Chore
|
||||||
|
|
||||||
|
- update helm general non-major ([#9089](https://github.com/truecharts/charts/issues/9089))
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## [metallb-8.0.28](https://github.com/truecharts/charts/compare/metallb-8.0.27...metallb-8.0.28) (2023-05-16)
|
||||||
|
|
||||||
|
### Chore
|
||||||
|
|
||||||
|
- update helm general non-major ([#8979](https://github.com/truecharts/charts/issues/8979))
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## [metallb-8.0.27](https://github.com/truecharts/charts/compare/metallb-8.0.26...metallb-8.0.27) (2023-05-15)
|
||||||
|
|
||||||
|
### Chore
|
||||||
|
|
||||||
|
- update container image tccr.io/truecharts/scratch to latest ([#8960](https://github.com/truecharts/charts/issues/8960))
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## [metallb-8.0.26](https://github.com/truecharts/charts/compare/metallb-8.0.25...metallb-8.0.26) (2023-05-05)
|
||||||
|
|
||||||
|
### Chore
|
||||||
|
|
||||||
|
- update helm general non-major ([#8782](https://github.com/truecharts/charts/issues/8782))
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## [metallb-8.0.25](https://github.com/truecharts/charts/compare/metallb-8.0.24...metallb-8.0.25) (2023-05-05)
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## [metallb-8.0.24](https://github.com/truecharts/charts/compare/metallb-8.0.23...metallb-8.0.24) (2023-05-05)
|
||||||
|
|
||||||
|
### Chore
|
||||||
|
|
||||||
|
- update container image tccr.io/truecharts/scratch to latest ([#8779](https://github.com/truecharts/charts/issues/8779))
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## [metallb-8.0.24](https://github.com/truecharts/charts/compare/metallb-8.0.23...metallb-8.0.24) (2023-05-05)
|
||||||
|
|
||||||
|
### Chore
|
||||||
|
|
||||||
|
- update container image tccr.io/truecharts/scratch to latest ([#8779](https://github.com/truecharts/charts/issues/8779))
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## [metallb-8.0.24](https://github.com/truecharts/charts/compare/metallb-8.0.23...metallb-8.0.24) (2023-05-05)
|
||||||
|
|
||||||
|
### Chore
|
||||||
|
|
||||||
|
- update container image tccr.io/truecharts/scratch to latest ([#8779](https://github.com/truecharts/charts/issues/8779))
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## [metallb-8.0.24](https://github.com/truecharts/charts/compare/metallb-8.0.23...metallb-8.0.24) (2023-05-05)
|
||||||
|
|
||||||
|
### Chore
|
||||||
|
|
||||||
|
- update container image tccr.io/truecharts/scratch to latest ([#8779](https://github.com/truecharts/charts/issues/8779))
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## [metallb-8.0.24](https://github.com/truecharts/charts/compare/metallb-8.0.23...metallb-8.0.24) (2023-05-05)
|
||||||
|
|
||||||
|
### Chore
|
||||||
|
|
||||||
|
- update container image tccr.io/truecharts/scratch to latest ([#8779](https://github.com/truecharts/charts/issues/8779))
|
||||||
|
|
||||||
|
|
|
@ -0,0 +1,30 @@
|
||||||
|
apiVersion: v2
|
||||||
|
appVersion: "latest"
|
||||||
|
deprecated: false
|
||||||
|
description: A network load-balancer implementation for Kubernetes using standard routing protocols
|
||||||
|
home: https://truecharts.org/charts/enterprise/metallb
|
||||||
|
icon: https://truecharts.org/img/hotlink-ok/chart-icons/metallb.png
|
||||||
|
keywords:
|
||||||
|
- metallb
|
||||||
|
- loadbalancer
|
||||||
|
dependencies:
|
||||||
|
- name: common
|
||||||
|
repository: https://library-charts.truecharts.org
|
||||||
|
version: 12.9.5
|
||||||
|
kubeVersion: ">=1.16.0-0"
|
||||||
|
maintainers:
|
||||||
|
- email: info@truecharts.org
|
||||||
|
name: TrueCharts
|
||||||
|
url: https://truecharts.org
|
||||||
|
name: metallb
|
||||||
|
sources:
|
||||||
|
- https://github.com/truecharts/charts/tree/master/charts/enterprise/metallb
|
||||||
|
- https://github.com/metallb/metallb
|
||||||
|
- https://metallb.universe.tf
|
||||||
|
type: application
|
||||||
|
version: 8.0.30
|
||||||
|
annotations:
|
||||||
|
truecharts.org/catagories: |
|
||||||
|
- core
|
||||||
|
truecharts.org/SCALE-support: "true"
|
||||||
|
truecharts.org/grade: U
|
|
@ -0,0 +1,9 @@
|
||||||
|
|
||||||
|
|
||||||
|
## [metallb-8.0.30](https://github.com/truecharts/charts/compare/metallb-8.0.29...metallb-8.0.30) (2023-05-24)
|
||||||
|
|
||||||
|
### Chore
|
||||||
|
|
||||||
|
- update helm general non-major ([#9125](https://github.com/truecharts/charts/issues/9125))
|
||||||
|
|
||||||
|
|
Binary file not shown.
|
@ -0,0 +1,72 @@
|
||||||
|
image:
|
||||||
|
repository: tccr.io/truecharts/scratch
|
||||||
|
tag: latest@sha256:9dd0f68d32ace452a3a75273bd8e3a074d0a14e4d38683389c73887432832fc3
|
||||||
|
pullPolicy: IfNotPresent
|
||||||
|
manifestManager:
|
||||||
|
enabled: true
|
||||||
|
workload:
|
||||||
|
main:
|
||||||
|
enabled: false
|
||||||
|
podSpec:
|
||||||
|
containers:
|
||||||
|
main:
|
||||||
|
enabled: false
|
||||||
|
probes:
|
||||||
|
liveness:
|
||||||
|
enabled: false
|
||||||
|
readiness:
|
||||||
|
enabled: false
|
||||||
|
startup:
|
||||||
|
enabled: false
|
||||||
|
|
||||||
|
service:
|
||||||
|
main:
|
||||||
|
enabled: false
|
||||||
|
ports:
|
||||||
|
main:
|
||||||
|
enabled: false
|
||||||
|
port: 9999
|
||||||
|
|
||||||
|
portal:
|
||||||
|
open:
|
||||||
|
enabled: false
|
||||||
|
|
||||||
|
ipAddressPools: []
|
||||||
|
# - name: example
|
||||||
|
# autoAssign: true
|
||||||
|
# avoidBuggyIPs: true
|
||||||
|
# addresses:
|
||||||
|
# - 192.168.1.1-192.168.1.100
|
||||||
|
L2Advertisements: []
|
||||||
|
# - name: l2adv
|
||||||
|
# addressPools:
|
||||||
|
# - pool1
|
||||||
|
# nodeSelectors:
|
||||||
|
# - nodeA
|
||||||
|
BGPAdvertisements: []
|
||||||
|
# - name: bgpadv
|
||||||
|
# addressPools:
|
||||||
|
# - pool1
|
||||||
|
# aggregationLength: 24
|
||||||
|
# localpref: 100
|
||||||
|
# communities:
|
||||||
|
# - 1234:1
|
||||||
|
# peers:
|
||||||
|
# - peer1
|
||||||
|
Communities: []
|
||||||
|
# - name: community1
|
||||||
|
# value: 1234:1
|
||||||
|
Peers: []
|
||||||
|
# - name: peer1
|
||||||
|
# myASN: 1234
|
||||||
|
# password: pass
|
||||||
|
# routerID: 1234
|
||||||
|
# bfdProfile: profile
|
||||||
|
# ebgpMultiHop: false
|
||||||
|
# holdTime: 10
|
||||||
|
# keepaliveTime: 10
|
||||||
|
# peerAddress: 172.30.0.2
|
||||||
|
# peerPort: 179
|
||||||
|
# sourceAddress: 172.30.0.3
|
||||||
|
# nodeSelectors:
|
||||||
|
# - nodeA
|
|
@ -1,99 +0,0 @@
|
||||||
**Important:**
|
|
||||||
*for the complete changelog, please refer to the website*
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## [prometheus-9.0.8](https://github.com/truecharts/charts/compare/prometheus-9.0.7...prometheus-9.0.8) (2023-05-23)
|
|
||||||
|
|
||||||
### Chore
|
|
||||||
|
|
||||||
- update helm chart kube-state-metrics to 1.0.3 ([#9098](https://github.com/truecharts/charts/issues/9098))
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## [prometheus-9.0.7](https://github.com/truecharts/charts/compare/prometheus-9.0.6...prometheus-9.0.7) (2023-05-23)
|
|
||||||
|
|
||||||
### Chore
|
|
||||||
|
|
||||||
- Improved lint speed ([#8809](https://github.com/truecharts/charts/issues/8809))
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## [prometheus-9.0.6](https://github.com/truecharts/charts/compare/prometheus-9.0.5...prometheus-9.0.6) (2023-05-22)
|
|
||||||
|
|
||||||
### Chore
|
|
||||||
|
|
||||||
- update container image tccr.io/truecharts/prometheus to v2.44.0 ([#9057](https://github.com/truecharts/charts/issues/9057))
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## [prometheus-9.0.5](https://github.com/truecharts/charts/compare/prometheus-9.0.4...prometheus-9.0.5) (2023-05-22)
|
|
||||||
|
|
||||||
### Chore
|
|
||||||
|
|
||||||
- bump common and dependencies
|
|
||||||
- bump kube-state-metrics
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## [prometheus-9.0.4](https://github.com/truecharts/charts/compare/prometheus-9.0.3...prometheus-9.0.4) (2023-05-22)
|
|
||||||
|
|
||||||
### Fix
|
|
||||||
|
|
||||||
- readd node-exporter and kube-state-metrics support ([#9062](https://github.com/truecharts/charts/issues/9062))
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## [prometheus-9.0.3](https://github.com/truecharts/charts/compare/prometheus-9.0.2...prometheus-9.0.3) (2023-05-22)
|
|
||||||
|
|
||||||
### Chore
|
|
||||||
|
|
||||||
- update container image tccr.io/truecharts/prometheus to v2.44.0 ([#9041](https://github.com/truecharts/charts/issues/9041))
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## [prometheus-9.0.2](https://github.com/truecharts/charts/compare/prometheus-9.0.1...prometheus-9.0.2) (2023-05-15)
|
|
||||||
|
|
||||||
### Chore
|
|
||||||
|
|
||||||
- update helm general non-major ([#8971](https://github.com/truecharts/charts/issues/8971))
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## [prometheus-9.0.1](https://github.com/truecharts/charts/compare/prometheus-9.0.0...prometheus-9.0.1) (2023-05-15)
|
|
||||||
|
|
||||||
### Chore
|
|
||||||
|
|
||||||
- update container image tccr.io/truecharts/prometheus to v2.43.1 ([#8837](https://github.com/truecharts/charts/issues/8837))
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## [prometheus-9.0.0](https://github.com/truecharts/charts/compare/prometheus-8.0.31...prometheus-9.0.0) (2023-05-15)
|
|
||||||
|
|
||||||
### Fix
|
|
||||||
|
|
||||||
- BREAKING CHANGE temporarily remove nodeexporter and kube-state-metrics-exporter ([#8932](https://github.com/truecharts/charts/issues/8932))
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## [prometheus-8.0.31](https://github.com/truecharts/charts/compare/prometheus-8.0.30...prometheus-8.0.31) (2023-05-05)
|
|
||||||
|
|
||||||
### Chore
|
|
||||||
|
|
||||||
- update helm general non-major ([#8782](https://github.com/truecharts/charts/issues/8782))
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## [prometheus-8.0.30](https://github.com/truecharts/charts/compare/prometheus-8.0.29...prometheus-8.0.30) (2023-05-05)
|
|
||||||
|
|
|
@ -1,37 +0,0 @@
|
||||||
apiVersion: v2
|
|
||||||
appVersion: "2.44.0"
|
|
||||||
dependencies:
|
|
||||||
- name: common
|
|
||||||
repository: https://library-charts.truecharts.org
|
|
||||||
version: 12.9.2
|
|
||||||
- condition: exporters.enabled,exporters.node-exporter.enabled
|
|
||||||
name: node-exporter
|
|
||||||
repository: https://deps.truecharts.org
|
|
||||||
version: 1.0.2
|
|
||||||
- condition: exporters.enabled,exporters.kube-state-metrics.enabled
|
|
||||||
name: kube-state-metrics
|
|
||||||
repository: https://deps.truecharts.org
|
|
||||||
version: 1.0.3
|
|
||||||
deprecated: false
|
|
||||||
description: kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.
|
|
||||||
icon: https://truecharts.org/img/hotlink-ok/chart-icons/prometheus.png
|
|
||||||
home: https://truecharts.org/charts/enterprise/prometheus
|
|
||||||
keywords:
|
|
||||||
- metrics
|
|
||||||
kubeVersion: ">=1.16.0-0"
|
|
||||||
maintainers:
|
|
||||||
- email: info@truecharts.org
|
|
||||||
name: TrueCharts
|
|
||||||
url: https://truecharts.org
|
|
||||||
name: prometheus
|
|
||||||
sources:
|
|
||||||
- https://github.com/truecharts/charts/tree/master/charts/enterprise/prometheus
|
|
||||||
- https://github.com/prometheus-community/helm-charts
|
|
||||||
- https://github.com/prometheus-operator/kube-prometheus
|
|
||||||
type: application
|
|
||||||
version: 9.0.8
|
|
||||||
annotations:
|
|
||||||
truecharts.org/catagories: |
|
|
||||||
- metrics
|
|
||||||
truecharts.org/SCALE-support: "true"
|
|
||||||
truecharts.org/grade: U
|
|
|
@ -1,9 +0,0 @@
|
||||||
|
|
||||||
|
|
||||||
## [prometheus-9.0.8](https://github.com/truecharts/charts/compare/prometheus-9.0.7...prometheus-9.0.8) (2023-05-23)
|
|
||||||
|
|
||||||
### Chore
|
|
||||||
|
|
||||||
- update helm chart kube-state-metrics to 1.0.3 ([#9098](https://github.com/truecharts/charts/issues/9098))
|
|
||||||
|
|
||||||
|
|
Some files were not shown because too many files have changed in this diff Show More
Loading…
Reference in New Issue