From f83fa780b16e2ca192939c46abb513782c08d4a0 Mon Sep 17 00:00:00 2001 From: TrueCharts-Bot Date: Thu, 2 Sep 2021 16:50:55 +0000 Subject: [PATCH] Commit new App releases for TrueCharts Signed-off-by: TrueCharts-Bot --- incubator/custom-app/0.2.14/Chart.lock | 2 +- incubator/jdownloader2/0.3.11/Chart.lock | 2 +- incubator/k8s-gateway/0.0.3/CONFIG.md | 0 incubator/k8s-gateway/0.0.3/Chart.lock | 6 + incubator/k8s-gateway/0.0.3/Chart.yaml | 23 + incubator/k8s-gateway/0.0.3/README.md | 0 incubator/k8s-gateway/0.0.3/app-readme.md | 1 + .../0.0.3/charts/common-6.13.3.tgz | Bin 0 -> 28898 bytes incubator/k8s-gateway/0.0.3/helm-values.md | 0 incubator/k8s-gateway/0.0.3/ix_values.yaml | 110 +++ incubator/k8s-gateway/0.0.3/questions.yaml | 779 ++++++++++++++++++ .../0.0.3/templates/_configmap.tpl | 63 ++ .../k8s-gateway/0.0.3/templates/common.yaml | 24 + incubator/k8s-gateway/0.0.3/test_values.yaml | 115 +++ incubator/k8s-gateway/0.0.3/values.yaml | 0 incubator/nextcloud/3.7.5/Chart.lock | 2 +- stable/airsonic/1.11.11/Chart.lock | 2 +- stable/appdaemon/3.11.11/Chart.lock | 2 +- stable/authelia/1.6.20/Chart.lock | 2 +- stable/bazarr/6.11.12/Chart.lock | 2 +- stable/booksonic-air/1.9.11/Chart.lock | 2 +- stable/calibre-web/6.11.11/Chart.lock | 2 +- stable/calibre/1.9.11/Chart.lock | 2 +- stable/collabora-online/6.11.11/Chart.lock | 2 +- stable/deconz/1.9.11/Chart.lock | 2 +- stable/deepstack-cpu/4.11.11/Chart.lock | 2 +- stable/deluge/6.11.11/Chart.lock | 2 +- stable/dizquetv/1.9.11/Chart.lock | 2 +- stable/duplicati/1.9.11/Chart.lock | 2 +- stable/emby/6.11.11/Chart.lock | 2 +- stable/esphome/6.11.11/Chart.lock | 2 +- stable/external-service/1.4.11/Chart.lock | 2 +- stable/fireflyiii/6.1.6/Chart.lock | 2 +- stable/flaresolverr/1.9.11/Chart.lock | 2 +- stable/flood/1.9.11/Chart.lock | 2 +- stable/focalboard/1.9.11/Chart.lock | 2 +- stable/freeradius/1.7.14/Chart.lock | 2 +- stable/freshrss/6.11.11/Chart.lock | 2 +- stable/gaps/6.11.11/Chart.lock | 2 +- stable/gonic/1.9.11/Chart.lock | 2 +- stable/grocy/6.11.11/Chart.lock | 2 +- stable/handbrake/6.11.11/Chart.lock | 2 +- stable/haste-server/1.11.11/Chart.lock | 2 +- stable/healthchecks/1.9.11/Chart.lock | 2 +- stable/heimdall/6.11.11/Chart.lock | 2 +- stable/home-assistant/6.11.11/Chart.lock | 2 +- stable/hyperion-ng/1.9.11/Chart.lock | 2 +- stable/jackett/6.11.13/Chart.lock | 2 +- stable/jellyfin/6.11.11/Chart.lock | 2 +- stable/kms/6.11.11/Chart.lock | 2 +- stable/komga/1.9.14/Chart.lock | 2 +- stable/lazylibrarian/6.11.11/Chart.lock | 2 +- stable/librespeed/1.9.11/Chart.lock | 2 +- stable/lidarr/6.11.11/Chart.lock | 2 +- stable/littlelink/1.5.11/Chart.lock | 2 +- stable/lychee/6.11.11/Chart.lock | 2 +- stable/mealie/1.11.11/Chart.lock | 2 +- stable/mosquitto/1.11.11/Chart.lock | 2 +- stable/mylar/1.9.11/Chart.lock | 2 +- stable/navidrome/6.11.11/Chart.lock | 2 +- stable/node-red/6.11.11/Chart.lock | 2 +- stable/nullserv/1.9.11/Chart.lock | 2 +- stable/nzbget/6.11.11/Chart.lock | 2 +- stable/nzbhydra/6.11.11/Chart.lock | 2 +- stable/octoprint/1.9.11/Chart.lock | 2 +- stable/omada-controller/1.9.11/Chart.lock | 2 +- stable/ombi/6.11.12/Chart.lock | 2 +- stable/openldap/1.7.15/Chart.lock | 2 +- stable/organizr/6.11.11/Chart.lock | 2 +- stable/overseerr/1.9.11/Chart.lock | 2 +- stable/owncast/1.9.11/Chart.lock | 2 +- stable/owncloud-ocis/1.9.11/Chart.lock | 2 +- stable/pgadmin/1.8.11/Chart.lock | 2 +- stable/photoprism/1.9.11/Chart.lock | 2 +- stable/phpldapadmin/1.8.11/Chart.lock | 2 +- stable/piaware/1.9.11/Chart.lock | 2 +- stable/plex/5.11.11/Chart.lock | 2 +- stable/podgrab/4.11.11/Chart.lock | 2 +- stable/postgresql/1.5.11/Chart.lock | 2 +- stable/pretend-youre-xyzzy/1.9.11/Chart.lock | 2 +- stable/protonmail-bridge/1.9.11/Chart.lock | 2 +- stable/prowlarr/1.11.13/Chart.lock | 2 +- stable/pyload/1.9.11/Chart.lock | 2 +- stable/qbittorrent/6.11.11/Chart.lock | 2 +- stable/radarr/6.11.11/Chart.lock | 2 +- stable/readarr/6.11.11/Chart.lock | 2 +- stable/reg/1.11.11/Chart.lock | 2 +- stable/resilio-sync/1.9.11/Chart.lock | 2 +- stable/sabnzbd/6.11.11/Chart.lock | 2 +- stable/ser2sock/1.9.11/Chart.lock | 2 +- stable/sonarr/6.11.11/Chart.lock | 2 +- stable/stash/1.9.12/Chart.lock | 2 +- stable/syncthing/6.11.11/Chart.lock | 2 +- stable/tautulli/6.11.11/Chart.lock | 2 +- stable/thelounge/1.11.11/Chart.lock | 2 +- stable/traefik/6.13.15/CONFIG.md | 8 + stable/traefik/6.13.15/Chart.lock | 6 + stable/traefik/6.13.15/Chart.yaml | 29 + stable/traefik/6.13.15/LICENSE | 202 +++++ stable/traefik/6.13.15/README.md | 39 + stable/traefik/6.13.15/app-readme.md | 4 + .../traefik/6.13.15/charts/common-6.12.4.tgz | Bin 0 -> 28316 bytes stable/traefik/6.13.15/crds/ingressroute.yaml | 12 + .../traefik/6.13.15/crds/ingressroutetcp.yaml | 12 + .../traefik/6.13.15/crds/ingressrouteudp.yaml | 13 + stable/traefik/6.13.15/crds/middlewares.yaml | 12 + .../6.13.15/crds/serverstransports.yaml | 12 + stable/traefik/6.13.15/crds/tlsoptions.yaml | 12 + stable/traefik/6.13.15/crds/tlsstores.yaml | 13 + .../traefik/6.13.15/crds/traefikservices.yaml | 12 + stable/traefik/6.13.15/helm-values.md | 124 +++ stable/traefik/6.13.15/ix_values.yaml | 332 ++++++++ stable/traefik/6.13.15/questions.yaml | 508 ++++++++++++ stable/traefik/6.13.15/templates/_helpers.tpl | 62 ++ .../6.13.15/templates/_podtemplate.tpl | 265 ++++++ .../6.13.15/templates/custom/common.yaml | 0 .../custom/middleware-namespace.yaml | 7 + .../custom/middlewares/basic-middleware.yaml | 58 ++ .../custom/middlewares/basicauth.yaml | 29 + .../templates/custom/middlewares/chain.yaml | 16 + .../custom/middlewares/forwardauth.yaml | 23 + .../custom/middlewares/ratelimit.yaml | 14 + .../custom/middlewares/redirectScheme.yaml | 14 + .../6.13.15/templates/custom/portal.yaml | 45 + .../6.13.15/templates/custom/portalhook.yaml | 12 + .../traefik/6.13.15/templates/daemonset.yaml | 40 + .../dashboard-hook-ingressroute.yaml | 28 + .../traefik/6.13.15/templates/deployment.yaml | 47 ++ stable/traefik/6.13.15/templates/gateway.yaml | 33 + .../6.13.15/templates/gatewayclass.yaml | 9 + stable/traefik/6.13.15/templates/hpa.yaml | 20 + .../6.13.15/templates/ingressclass.yaml | 23 + .../templates/poddisruptionbudget.yaml | 22 + .../6.13.15/templates/rbac/clusterrole.yaml | 112 +++ .../templates/rbac/clusterrolebinding.yaml | 19 + .../templates/rbac/podsecuritypolicy.yaml | 68 ++ .../traefik/6.13.15/templates/rbac/role.yaml | 63 ++ .../6.13.15/templates/rbac/rolebinding.yaml | 19 + .../templates/rbac/serviceaccount.yaml | 15 + stable/traefik/6.13.15/templates/service.yaml | 114 +++ .../traefik/6.13.15/templates/tlsoption.yaml | 14 + stable/traefik/6.13.15/test_values.yaml | 438 ++++++++++ stable/traefik/6.13.15/values.yaml | 0 stable/transmission/6.11.11/Chart.lock | 2 +- stable/truecommand/6.11.12/Chart.lock | 2 +- stable/tvheadend/7.11.11/Chart.lock | 2 +- stable/unifi/6.11.11/Chart.lock | 2 +- stable/unpackerr/1.11.11/Chart.lock | 2 +- stable/vaultwarden/6.1.8/Chart.lock | 2 +- stable/xteve/1.9.11/Chart.lock | 2 +- stable/zwavejs2mqtt/6.11.12/Chart.lock | 2 +- 151 files changed, 4190 insertions(+), 90 deletions(-) create mode 100644 incubator/k8s-gateway/0.0.3/CONFIG.md create mode 100644 incubator/k8s-gateway/0.0.3/Chart.lock create mode 100644 incubator/k8s-gateway/0.0.3/Chart.yaml create mode 100644 incubator/k8s-gateway/0.0.3/README.md create mode 100644 incubator/k8s-gateway/0.0.3/app-readme.md create mode 100644 incubator/k8s-gateway/0.0.3/charts/common-6.13.3.tgz create mode 100644 incubator/k8s-gateway/0.0.3/helm-values.md create mode 100644 incubator/k8s-gateway/0.0.3/ix_values.yaml create mode 100644 incubator/k8s-gateway/0.0.3/questions.yaml create mode 100644 incubator/k8s-gateway/0.0.3/templates/_configmap.tpl create mode 100644 incubator/k8s-gateway/0.0.3/templates/common.yaml create mode 100644 incubator/k8s-gateway/0.0.3/test_values.yaml create mode 100644 incubator/k8s-gateway/0.0.3/values.yaml create mode 100644 stable/traefik/6.13.15/CONFIG.md create mode 100644 stable/traefik/6.13.15/Chart.lock create mode 100644 stable/traefik/6.13.15/Chart.yaml create mode 100644 stable/traefik/6.13.15/LICENSE create mode 100644 stable/traefik/6.13.15/README.md create mode 100644 stable/traefik/6.13.15/app-readme.md create mode 100644 stable/traefik/6.13.15/charts/common-6.12.4.tgz create mode 100644 stable/traefik/6.13.15/crds/ingressroute.yaml create mode 100644 stable/traefik/6.13.15/crds/ingressroutetcp.yaml create mode 100644 stable/traefik/6.13.15/crds/ingressrouteudp.yaml create mode 100644 stable/traefik/6.13.15/crds/middlewares.yaml create mode 100644 stable/traefik/6.13.15/crds/serverstransports.yaml create mode 100644 stable/traefik/6.13.15/crds/tlsoptions.yaml create mode 100644 stable/traefik/6.13.15/crds/tlsstores.yaml create mode 100644 stable/traefik/6.13.15/crds/traefikservices.yaml create mode 100644 stable/traefik/6.13.15/helm-values.md create mode 100644 stable/traefik/6.13.15/ix_values.yaml create mode 100644 stable/traefik/6.13.15/questions.yaml create mode 100644 stable/traefik/6.13.15/templates/_helpers.tpl create mode 100644 stable/traefik/6.13.15/templates/_podtemplate.tpl create mode 100644 stable/traefik/6.13.15/templates/custom/common.yaml create mode 100644 stable/traefik/6.13.15/templates/custom/middleware-namespace.yaml create mode 100644 stable/traefik/6.13.15/templates/custom/middlewares/basic-middleware.yaml create mode 100644 stable/traefik/6.13.15/templates/custom/middlewares/basicauth.yaml create mode 100644 stable/traefik/6.13.15/templates/custom/middlewares/chain.yaml create mode 100644 stable/traefik/6.13.15/templates/custom/middlewares/forwardauth.yaml create mode 100644 stable/traefik/6.13.15/templates/custom/middlewares/ratelimit.yaml create mode 100644 stable/traefik/6.13.15/templates/custom/middlewares/redirectScheme.yaml create mode 100644 stable/traefik/6.13.15/templates/custom/portal.yaml create mode 100644 stable/traefik/6.13.15/templates/custom/portalhook.yaml create mode 100644 stable/traefik/6.13.15/templates/daemonset.yaml create mode 100644 stable/traefik/6.13.15/templates/dashboard-hook-ingressroute.yaml create mode 100644 stable/traefik/6.13.15/templates/deployment.yaml create mode 100644 stable/traefik/6.13.15/templates/gateway.yaml create mode 100644 stable/traefik/6.13.15/templates/gatewayclass.yaml create mode 100644 stable/traefik/6.13.15/templates/hpa.yaml create mode 100644 stable/traefik/6.13.15/templates/ingressclass.yaml create mode 100644 stable/traefik/6.13.15/templates/poddisruptionbudget.yaml create mode 100644 stable/traefik/6.13.15/templates/rbac/clusterrole.yaml create mode 100644 stable/traefik/6.13.15/templates/rbac/clusterrolebinding.yaml create mode 100644 stable/traefik/6.13.15/templates/rbac/podsecuritypolicy.yaml create mode 100644 stable/traefik/6.13.15/templates/rbac/role.yaml create mode 100644 stable/traefik/6.13.15/templates/rbac/rolebinding.yaml create mode 100644 stable/traefik/6.13.15/templates/rbac/serviceaccount.yaml create mode 100644 stable/traefik/6.13.15/templates/service.yaml create mode 100644 stable/traefik/6.13.15/templates/tlsoption.yaml create mode 100644 stable/traefik/6.13.15/test_values.yaml create mode 100644 stable/traefik/6.13.15/values.yaml diff --git a/incubator/custom-app/0.2.14/Chart.lock b/incubator/custom-app/0.2.14/Chart.lock index 4a2050b2d62..b5c85dbb974 100644 --- a/incubator/custom-app/0.2.14/Chart.lock +++ b/incubator/custom-app/0.2.14/Chart.lock @@ -3,4 +3,4 @@ dependencies: repository: https://truecharts.org/ version: 6.12.4 digest: sha256:62b51750a57da4ed871c5222664ac35112f28bb013f042fc09ff928bf466a970 -generated: "2021-09-02T15:55:33.999128899Z" +generated: "2021-09-02T16:49:57.289044696Z" diff --git a/incubator/jdownloader2/0.3.11/Chart.lock b/incubator/jdownloader2/0.3.11/Chart.lock index 956dc33474f..463ee48fae3 100644 --- a/incubator/jdownloader2/0.3.11/Chart.lock +++ b/incubator/jdownloader2/0.3.11/Chart.lock @@ -3,4 +3,4 @@ dependencies: repository: https://truecharts.org/ version: 6.12.4 digest: sha256:62b51750a57da4ed871c5222664ac35112f28bb013f042fc09ff928bf466a970 -generated: "2021-09-02T15:55:38.836932107Z" +generated: "2021-09-02T16:50:02.21167854Z" diff --git a/incubator/k8s-gateway/0.0.3/CONFIG.md b/incubator/k8s-gateway/0.0.3/CONFIG.md new file mode 100644 index 00000000000..e69de29bb2d diff --git a/incubator/k8s-gateway/0.0.3/Chart.lock b/incubator/k8s-gateway/0.0.3/Chart.lock new file mode 100644 index 00000000000..2989f5fc1e0 --- /dev/null +++ b/incubator/k8s-gateway/0.0.3/Chart.lock @@ -0,0 +1,6 @@ +dependencies: +- name: common + repository: https://truecharts.org/ + version: 6.13.3 +digest: sha256:0830cf69ca08fc00ef2577f7f2fd36de01eaeb815f3c41f830321a3a615c0b6a +generated: "2021-09-02T16:50:07.130402097Z" diff --git a/incubator/k8s-gateway/0.0.3/Chart.yaml b/incubator/k8s-gateway/0.0.3/Chart.yaml new file mode 100644 index 00000000000..02d1276b541 --- /dev/null +++ b/incubator/k8s-gateway/0.0.3/Chart.yaml @@ -0,0 +1,23 @@ +apiVersion: v2 +appVersion: auto +dependencies: +- name: common + repository: https://truecharts.org/ + version: 6.13.3 +deprecated: false +description: A Helm chart for the k8s_gateway CoreDNS plugin +home: https://github.com/truecharts/apps/tree/master/charts/stable/k8s-gateway +icon: https://cncf-branding.netlify.app/img/projects/coredns/icon/black/coredns-icon-black.png +keywords: +- DNS +- networking +kubeVersion: '>=1.16.0-0' +maintainers: +- email: info@truecharts.org + name: TrueCharts + url: truecharts.org +name: k8s-gateway +sources: +- https://github.com/ori-edge/k8s_gatewa +type: application +version: 0.0.3 diff --git a/incubator/k8s-gateway/0.0.3/README.md b/incubator/k8s-gateway/0.0.3/README.md new file mode 100644 index 00000000000..e69de29bb2d diff --git a/incubator/k8s-gateway/0.0.3/app-readme.md b/incubator/k8s-gateway/0.0.3/app-readme.md new file mode 100644 index 00000000000..9c521d68d58 --- /dev/null +++ b/incubator/k8s-gateway/0.0.3/app-readme.md @@ -0,0 +1 @@ +A Helm chart for the k8s_gateway CoreDNS plugin diff --git a/incubator/k8s-gateway/0.0.3/charts/common-6.13.3.tgz b/incubator/k8s-gateway/0.0.3/charts/common-6.13.3.tgz new file mode 100644 index 0000000000000000000000000000000000000000..50e1c43c8f61fe62b01dc6aafae9c8bde1b73470 GIT binary patch literal 28898 zcmV)hK%>7OiwG0|00000|0w_~VMtOiV@ORlOnEsqVl!4SWK%V1T2nbTPgYhoO;>Dc zVQyr3R8em|NM&qo0POv1d)v0MIEwGLKYa=;CjHmywkX?ik}mzX*Rx$GZF5#GKC#oD zy}SCvFbPShDUu~XIjWoU+0TQ)odk8U9XG2rUnCX@%nSyD!C){LB*ko2@@%1dHU$lf9&q>?(XkC-rarj^gniX_x7JW{tvYC3213O zHRHJYkDVLiYBuiQiA(Ug$UWWk) z)m1h^je-Ws#V;gF|C=S#qUIzYWaRvu=94(j46HX*PBGj4``;gRz>>vOEBK-$Bi+Q_ zT({>*y!$AA)LX0n)%c&|tS0OeDS+kUfB)&@oyX1bFI2+)_`ic^k`?DT8}$%+fCd9} zLO8-XD(0lBXi8v!^C>}PMaJ|4D#q|@TxXdOL?yOwRA~>2C`WQmD*|OuO2#y&LVNU( z0bpzP#K5kKEF+ZxLvnnc5rAaB#yzAyq;haHk=mk2jE@+;|9~@^q5||7L%0(3lv%Nu zk(_U%6q8wzGs00(A;vK$<2qx6_Yjgp%og?-m8Q@joFSa&1;-M4kpmsJ&d>olG`M=m zt@V;JK0-hJEa59{z=|1Be13osfY5Pu0D3OF2m;}+XSqvaMLzj6Rq2j z*Y)h2R6=f3!e~WOR2Hew(-kQ*nqW3UyGsP9E+-XE31Ym$oJk}<9`-bXl3(c2=+Xg+yYrkE?a6tGTIYfeZI*qi(r$p|NH5Ei@y z_6%4dz#uxwi%JX~%EUKKzZhDT3qrhbns0gBz%;`jP@UsBrkNOeP|Nwf2^dya6A1wR zYE*T)wo$jl71#O$*_IQXC6Qfa6KyeOYH2DvOLJqPqBX3_nJ_9+c9mPl?=YhVyib z^^L|=T?^6(=15N!f)UjQfvX8yQdxY4n!PpES6QUJvPcgDDk?CTgG0IZz(KYS1{k?P z0)17WYQFTf%=%=76^sYfA>}Yl5k}t^75z=HGegHkiVkaDumoqM>ODaJt@%9|p#MrK zgW2gHJ*>*m9E8KnT4S6s0zy+w2pu!5B|HI9Rua)_}x2B zGx{5F@|aW!$+?heQSfV9?iHC8)naK;+3F*y!5FFLG$A-iiaO_www@4z&Pi5W_EfP$ zS@J0;Dlxl-i3(jC&3)QlH1`kSg!7U>DeNWzQCST=?+QhkBn-L-pi%S1d66z80XRuSI~4yN2LT$>jKn=jtTDEa4^K{heDn6% z2+bCQ5;JyLRH98Z{Id4|9ho9v10W%Q^KYwSW_}|S$8nG3 zb7;W>u|!lf$>uAL3gthpikVU4Y#WgecvcFYJwQJKr%)v+&@+ozFwTl?xdxVn1%3$= zUD7N==R_77;B-cFLC0yC8D^e7e|7xw@bvln9}Zu>dp<%@pqa9!m`l272fDY!7*|B} zfud){WqygP6dfMF5S7Ic*ABOf`kYib;e^Gs7^X$Sh8(jCHl(@GDT5SqJisLwA)<4J zPOlDhuMWtEvS4IT7U_WI%&*iM`}qprX)+>lCl1+ z-W+2-9leq&T0Ds;Jq(64C{od=MQ z3{WBVTugxag9S?CQp=+mz93>bN2IP2OTe6Igp4Ko)BuQ{Ir=|xt4D~AJ=~PZilE-24osn1!itM~hEU+1TU{^IO0@=g_WDHgg>5T& zsw-{p^NIMF3#H-c3pP*%hY#fZLi5RhPlPT#hm`GJ_k*rrEq3q>axpd)_^AriHgo?Mkemct|B;nlV^*!MZv$N z8Ifb%e#c@69_xzF#Uc^QEf(--21(55m?VoNBVDwa0`4+e4stQGBbrlwq)Rht?V z6S|s_keIefifFE9eX-KTY(QDu^J}}V1P6t)Vo$D($pQ)DJFbdzVul~EO@3HIT;*J* z>&h9*5bC_o=$zz)v4QAF3V$(V@0NtWY7z#p~2FF46 z+&aWF4{T3bIKEfhb8AXl^Gtj?6S`37=}XF{;;otq#JdU=m$?CcY+%dT#|p55%?MYv zJ2Xz%)?%ffgAppH2{Ut9Lj5*Jr$@&TyqCWA)1zaH;KdkW^!@4SvBE%^Se~b5eE?%Y zd>@K`PK^5M%O;nYPj#IT>S3guiNdtdzl@(i@I~4lTAG<_mN%Vk9@k<8>cv=1iDGd= zQgo&{2|ckb$&@&zMV2xRQSFszH$@P3m*gOzT*?iCVNY@PjAVFmLXsj+*$C~ak0q%n zXi52ccSpVFbViDrx5|$(&FYGrPAkF$y(9FvXC1I9rq>d6Gs?oUZa#k!VK>n4rF|1= z_t|#K;vNS6naTT!oDnvbb~TfPWu3V|Z&}h6?0Y%iM9y8N-LjO2K;J;dAFYt(2M^Gx zAZ$i(&X8E`VTLf8;SY3H&jeAAzk0NDu={vNtbj#bkRm}Os!Mb(9Y&PHpkUzv^|*7~ zJlW~>IH_hd$KJM`Z{$MPVva7SG?6~AF%=`DaNhW4@0ScYV9|^)h9}0!f-Wn{Imu&< zP8x~JY{ZJdiasIE#{n+sP%LY*0;dD9va73vu%WOY=exrP#`GTS_J8gnO$E3tjJ|l0 zr(zXE(6qQ*zae&eL^}%8u8@W^vD7$&b@17@ILpp)a&cO`EGFzt{=BM+>g*36Nb9 z#SAU|RscQ>kdWY9$P7+X=>!&Jg5FLkgz({NfiB1bF*>6euJkhOOCghAYA`FQ9>K08 z&0BL>dqY6g2ux|V?kjwu{o*kD(3v1pZ_#blYRM>9SlePc0(UG=;yCU*${F0-VuqN> zAPAhJT@7a2aaMr?y~wkL{S38mbwR{(RFfbbEq?!DlgRwIi-f9h&p0!I-_nB=HsfEi?(zG2S_bE!wVr?75TNMmDESU z9oIl0&^5`rRya_1lN6{Wt;xI{!`58oz*4R%R2CISj=Nh8&sEd9sAd@y!X^DvYans- z06@LA5)g{jQ37ir_^46#Sd=TPf)`1V#m={rx&#=`F5j83jL){^|0m*))1zZG_rH5~eCAe{Mzr{( z%;^$e<_HU$+{QoTDVh*&brsDyse~xKd;1c;f@ZUBWT*9#;1NJ?G|4yzttx{s6liK= zy(0HgJiQ04mfLSrf*e0Ge2M+uJ+q+CM2|5Qe3B}I-023Rm1%B5{=f)xt#q0*PH>8f zv4cmHJ}UtQ^hPXtSnZ_>4y9`7>77_6yUv{eU}0csw^TRfK{F5Ll_Dj_Mh1)_@Up<^ zH#oz2LMrH`*SefLbugDxH}&cp2fly|+gGB2cBE-aM{Qe4ZG;PLx7w7UoXnP}F!|Zh zTnc!@Wclgmo`bd1!ct|{F|lmXo7q?jPPdJv!v@y3u`~-jeQE+OmMT+K^`=Ia0@I~T zHI`3qWEtizv$8-Ai!qwfG|k8*t_af#fmfJ}>4p2{;%f$wScwy&n;z?mBf04LG@4h39*Cb}bnj#6Fl;6Y;+n-+}Q8O)sx;ENrklJxHj z20_+96#AZIHp)rQZE~O1nhyfbNY0G|6;u>wMS?SHU^Iy;F`rtZ1ORI~icfa2U@1Gs zd>W(mNJ7TdJM`X3pBtQmNQJ2>tTE@H_m1ojo-s!om@qeHtEhNNE)36k>!nok@5~KB<80Eas0pel?vT8-Nfn)?iZD_8j7jR}p zopUkCzB~B_r3CEkn_0jPwQVa{V(2u2*K6sgBCdgb6@@pZZiRs^_wv3J-@46nhaR(; zp`zAWw0fI^u%*G`rF(?3!Wt&Oi%B#(Wc#DrHcsF~jDHy8_=h7@K-~GC&>3hNt%|nW z+hrQGJIT0mLpwO-JlRHMR`SI&T5W^c5>uh*b-BgpIDyN#YhaIyDluotN;oelNOU;* zBh50H1i^yN7v@ZFrIu3CuorM%n{z4#{*SQQKO9>KW0tyT6&G`R0ako(=y? zkn_G6zvol(URM9d*|sXGLMuhdF9%;LWy)Mk=Qa0*U%r1OD3S<)I2kC69v~Ia<#dR0 zsL-(s*6y%Db&^8(!9XloB~%^F*V-uGa8WApEnkzK@S?&Kf{sjxvGPxi>BIv7Yj8&3 z#M0T|Y#XJE9M5PXCTMxcQ81G-&9O944JM<(|9*RNw(aeC8xW)lEGJdF+VI3sbK z&KQv(Cv;A7#AK^vquTZB9NcasMOzLTeGp9vIA8|8%u39J*?&WCLkzKxP;VHU2T z)<~Q#3~5ylTv1oM`8##1j>)>S?<}i06G(xLE_V-s26?ePz8vg|hI#Y?4P# zW<^TO5V8)`a}~;>x=;3NN~*sppc^?hC5)k^a3CpUIxu-4s9@5qiA~c+=qX* zlve%a(NThgbkt?X$hl9G-cwN)EXp`l=FG>wkGGEdEnl{%y5!M?hKV=h&GVQrNHtrB5F)5iZwQ`g`UDL)ffni&XJmoLZ0M8w5PU?-!E2K>}In(a%?Kq$0Dsi?L=p$J6 zC~b$Oy1yziTry5{CnR~ z`O7nnlPSUFK)oBlR)OOBYhj{E!%Z+eDRRauOd&(WMj|86CenN|Aam)I8DhrhB!{y( zVj3Mj5dZ2!-~FEWWzKrrlTK2i8Ny@Oz+X5t$+PzxpJ-c$G>vV5^K^i7P6zr;zo-8S z9LM577B4atOu=q}Hh>9qSh&M}&q2~SfG)KDVMZ|{CY^@T1tjMcm2ZcHCqwD|9iSO5 zOQG&w9P4cZSxBD}y_HjgI86tNfB`Rn*MuhnpkW|JHvBojlJa4{=d{C|1E%E&MZ16B zi+7)V9q-1wJ3CU^4W)9#4p5{Wz)3NS^t;Q;%h-G0^K3~SI;yRDhK4f35bHRa7xzrG zsXq4n0R2c%&1#%w3sjM$n9WF@f`7&d-M5D=RCT#mS)h#Ix!T2tAZ{V-2`y?SVJFjq zI&RXMkt&wK-#B9hqPb9g5W+AO`i)6PDnnJB3-if29;!~1XOweDWAWgDC1xA3I++Rr zUeTP2evb9xIW5fkS+~WhR_C(4lAYrs%Zf{xZsWlNl!;-yjd1!)&A8lw#th{|s4-kE zWEumNYeCLmRklFq73|sKF((!J(z5$Y>1UPQqfeA4Wj#W>J3BM=TN=wFw7d89D+=#) z&#qVFk51xugGc3mG}#S??`@)^<07?bj$&S3H#Ovn{I7eDo;315?(OXD@7(8qyo=}R zYWP(TG=te^6-t>Xy>gz_q^!hbC3MNu=D;co8HOQ+L%G7$#y75PE+?B1NlKc|RvP!d z8h-rPySf_4kUN4RSsj1K z)`^M>X6IVe3w4y_Ec)HdWiGD)fS2m51Bz3|0kx|DxOvgK0N64PfJX`d;T26>Hiw07 zd8#$dj)7W^zEzWuTEyr%$?oy1#3W^H-be(8b0Q3G2gwTVuA)dZNmv)o&!sI~k|ge$ zjg<4{P20H!U0zf5kAc!O`tLtl>3&8}d;Z5+c7wS-^sJiypS1En@9#c&azFpy#RK!d z%Fo5CMOo;%zCC5jMM8{TaCy42B6&(G*d?gNUzv1CYDq%pn32>Z*OZ$zIo9+)wv8QKDCd5ogh1xHwAb8Zr|^#$uk zU8MG#QyIuftLIx(SLZkhkQ*)xM)sOzl`O7ZUIh}0^1%v?p#cGZb}R(YixMGdf$`9) zE#1sBT*hTlah!Eh)vEbRaUM%wE2(Cb33Iu-O>L7|I<#b#$q?&46MLjR|C{l4YgWLj z`G4=pPGkOm{OIZ4{rrCy&(ih3nEreZfOuol%y+N)FDajzqjl>o`~B&lwYXNxRJlYo z6oi-1Yc1bzu(s9}z%v@q;wnnen;dun`Oi9GnKg?WIoV-qI7MQe&mc(VG9umhO^1$d zIvpytb0M5g-&w*r_(EkRU}h5c!geU;$@HbuHOo3D)^%S7`s#@UujN{ScLWBZ7Q4I9 zg;*X7HuxyN_B-9TS zNECSs_3p*LsSZp3v3Gft@&p(Z{T847yPI^R+trmr)*9mI-TBmTekdN0UzfFXtEf;6 z_cfu|x%bJiAaJRaPm@#0;-BFU@0?4dp!1j55k5pojSK4p?vq*#C9oZ0xqWYp-W#KT zA!D>{|LJqUx3>qh(*AqY^8f7I-~W3zkFfvHTiD5w_TCGXqD7l_`Xr>j)p2gdfy8g1t|^6 zBNtDka12@++G~^t4n=REe3CoLAEsofmGaV*gU+p5$61G{_H7T z#p^0>9lmVlv6AX*m7cQ0&#In>N_V_4T1u=i1Y@qDo(7xgC)+hGBIFqN!`961U}$6b zVMUl&6pap06s<#h8)t)hPLxkG)pLcWLtyqC8?7!V7Po6aFzbAW7@9n=kdBFeoP0Ppk z+PfxFDO2$Bse|oG^P3EsI8BSZ+qu`+4%eg22?X%P&WT?c3S=Mm*O2kr5Z_~L6g zXENXQ9D_G-^lj!-)XPinLdsUugWp*9;>)npZbf-nL(r}k!=0WxM-4jhD=jz2&72(W zoV`Y4%srg4wtF$>#%)`Tk2vcFViIiLHWqJr;w19i5YN>o4`6NU|8kz(ZT#o%-pmNF!;+pZT(-J<6E8pR>%K0{lEK< z_U_OB-O01j`9GXx&iwF$&53ZUfdDd)Ij}?k$!x3)+*JU4$2EszimAt^B3t+|kzw>yf>Hph*y0d#f|KG)< z=6|>Wy)q&Fh!^PGOyb>BwchFpOvXlMOTd4Oo|e&4Z%X`YP1+NfI(sBk6t8GLd8Wu) zHm3h<%a_pjm)CyXS^US|{?1-2{^Rle_`j2<<^Rz)&0W*qV-5>03ji^qn6WQvU?)>+ho&V<5pehsl3ZY!K+kc`(a@A)45?O3+_OB4e)@Hw<;S=rk zJEXTzF5BwY_1vxg2220At$x#j`=x(!3682Oe|Pd+X{@ok+G zTn6|Swbo~P)XzJic9ZjdZ}Mj(BcJfRpF3dIIPg~kx|0o#{jGO~Z`HZLxWpBgS6?gG z!Bc&vRA&z^2YPjf$L-Wq{(8gVzWkJ4YuI%irVAYB>l}9X=j&{*1(WR?*=a-u%@gjf z#Y1&n$rI&sHJPXon#QVqo^X(h&RU@Y4g&@)fpN3DYCwj8F2CGt{f&E3udb}8%%~k( zTHi4Q--XVZADtpNgQBVJ%Rike=y&vMUAX6gZT?OVyPFK#KI&S4QJ6Hih^9%@@efBq zqM&eq8n;WlE5w{K%?rWgI3I&Dj0RD=vQW8EWI|wdQF9kspb8RouCChWicmy9`1d13 zzR4mhnrK@k0X}fs@Ycw03D>PJCR+Bta@5`CInd?y|L)H2ZfpJjc=ta3^G=?Pymn%8-ZZKAm2=ip*R_D0GIO&L5IVSJtw!YujhjC4LCeH9#5PHG>}aZz#2$|k(Bs5omgw6W15i&^%nU7WcR z;092&zhs6GJK>PABQW+7T;g+@QBJL($GU=_3HRZcejw>9nx+}K#FZRyQKXkXO^dEk zTH0Jvj9P%2dv3l-2hiKt{nNVJ2s-hn~^=%Xv6kw@+rl?wD=Z6SMU?VYZV0vm3C!n~3FH-vDPP!?ltM2tZ%F zop~>e7Fxx*kl==3xkhih#(G=|2%rPsw72P(3#H}_X%JgS=@9A2Q&vaEl^O1|b&LKw zE#^%p-3`M!wRo8}`!{4&Ma?0Dw@$~-BDHjs)Hr$C?L`*RB{^p#sVic#X|IRImGM!l z=e;#qi!Zm4Kg<~wcDm6B6y^4^XMoat>v1PsrR6q-Rb?aJ1kbv?42_Hx&8lLB4i}X9 zP8tQoRF36EYR>Ww7WTXp+SxC}h5O)#-jdjYIW_S6&y5d6+@Q6><`!!g|ZiD`OVsZF*daoT~8KGbh){ zRx$woS)Rkqu|W}crP^qK#`n@(PJ4A_b>4AB#`HrZfx}g~0kAE~kh~N*PkndRY9fp~ zxmnSjiW+fgUL%T%x2qzQ*Ryj{$?Cw~R^7HC)1c_}YW&O!)=E^N)HC-7`2LhnxBu_< z&VjGk|9|vow|V~iu_%7;|GR_dGd%z2oha7PdI49RdkEY)Ex6oQ*Wsya!a|+Cx+^aw zgO{D*VL4AWb5-7sYtIRsge~Au$!HMu{g!EB+s-WgWhu%g6KrdYv!>t2Zv&HP_j@4B*>j`_hlF3hiG85Oi!|E?aiXje0vc?Qd^A?-XmX_cJ_B`EU1h z+kdxr4s3<}_jKpcetZA--u}CjXJh-Xc|PnmEk5t?Sclc;dOmJq@r4fUtZnV}TtCYn zW%7CW+g6u~o@S?a)aIeLOF7r!WVf+9DgWsA(HaK|IxIk! z4L98zXiQ;Eqe$CCjql40q=1Q86OT>ga6JWK2&^}1*jW)TH*1S zCMwsc#~|-hkW+!m%W%3hp1|thEzT!;^Rw&gsB3_CLE9+*=913nY6c^4AL-$EOmoUr zyBjY(b_FXe2YLiIrv^dGPhDII!&!$Vof?H0VQ0R8yg1(UG()S|WqqDeHho?2w*;q) z!!%W?qoHuuSC6~PL3qev!W#vT=bEh`ZwmED7O(ufodx z5D%LH%?6v9PW+ETF@u`%3&A84K`=wd$CJ*lr$@(5D20AMLZ?T^z0fX*EnyoUAhx-c z7=+;AuobKs5#Z03J#(Q|?du|i9TuHZQqNF8T&_O$`=*ilmD2?M%9%O4*V9dzmcb=( zh$TEL^}9ZcX{4{lx_cy}+d^7;)*yWLam5_gY2iK3QyB?y+cw_ACdsTmXG9Lr0m5dm zE0@s#(K0v->FLfH-y4qbWn)~T4vlj=fWO{xx9qy*c4aL2{hr=m>RIXkc`uh}H}L|k z@c-;SdfeRqd-`<$KL7unJk881p*vMT)qwv8P3WBD4Ij|jex2rOznz8U7!=~F6f9be z#-18&W?%92=&IB!67j})SLB4YgSIk~`>>WC7L~IEc+E6{g1y=$^{?m)_OIw~k%_vI zdkxJQb)(!bX6o@8ye#Vr)NoV2C=2Tk&i5h-zfbmZOHW(>!*XqgOEv`6kFy)^0IbUY z@MN!<|MBV0BUKTXVVJDD88*Bm7Yl--`IPEImM5ax#*I`ZCtF6K2;U{>saDH$V@ShhC1S zX;EB=9?FX1qApQ1-;GctU2Cs!*>PqivUQ{Gk*Z_>hLNSp6ODsqbu{hzU`d;9Pl8&X zW3ix*%>jnebAGf4*-~Sz1CDbNLVSr(+iq$yTG${&Nkvm8uAGQyj}W)f+ON?GL49xN zChoh8yf$l;?#52rGt}_Jg*Jhj4!O=UC#_>lzAicFsJx+6+Y?Y8bWLBAg?+ahTvFW1 z4FR-HuqDupF5`Y!lZ(aCt?RX^F-QRYIxW-cD^Ps{bf9)ThDq%dD%Joy7z}!0*PBr> z0oR)Z*oZURWIy$Kd!L$!hX2QdBu{N(GVPeh|7`MjNbSyntiDV?C`_`4U+BK_ajtRWT1xHw)nd)ClyXfyX@eS(8-iX zBNPpGccMUn6tdyj*mZcx>Lei~CFwT&9Alc1bX$(}0lb3vKU(A_hG$t8H8<;3MT83G zI>_TSnUhL=N{XCgnv=>oh&fQaXM_)+`(2hhht}u}qPuZc(wvMQ#gCkCg5g+n>rc_} zoaRF|jkZxVNTQ#eLb#eVQeHXZ=>0Z&I4x)3Qf)|+Bg2y3WLjM2Xzt%iORYHOh?9vLhx$>^k9X@GT!Zwb1nAZ!|-k_{jsfS=M# zKc*eZ67!nYDs9GQIg43+9xkLlSb&`+gA5A1mOKj|++Lei*Jjg|ydU8(yTl772Jx6w z2mJ0>6P7`dU;C0%s(p^{nxd(cg%ZbyPq4dwX=qc%u;DMuX(r5sI#^AVWp8 zdR%s5=%5lI^I;=AA%~aKW^@(mf;Av$!S}gl)=K7#Or#6KrVixsh4z})4P0v`y9%YC7r@PJd-`?K+{Xci|g!X?(#m&uL?r8^; zvt#WQmhm`yM=u0|?~5!YmA}H%=Qz3wH*U1?RzMDQt)xx^dnCdX>O#^uHLJ6rbQX7W zqJ)Bb*CWrT?Rr?fb1DY^)moSOSkNYucHci~vKeN=TuurtDw&7wlhogrdP<01n)Zucmw0%w?liZyUKdWoWm5w1Q{M zxG;If;zW5P!wrVe;^d!XAsg(hoPS5>PxeWk_)baz@q#RtL9FN;bFwbT`)T)2{j8Y( zZzKKh%KRU@kDKuyPxkij^Z(w-qvQW7O6CMsa6`F#q+=umfR1T`IUI$TaUpd@((Zu2 zhK_a)Jgza91x|f#36(ml8GlAdc~q1OCu+jZYWn=7q(Z=YQ*!Bnb0)Zdl7$R{*WuSI zDYD3nbKGs|`?4a8VStuORx*{T0%s_JTXv4N~c&3$j3k*A2@V@5~jS9V=1f zP$$I9%>AKB%5roSr{rX|IjfvW@U!F9HCeO4P&Pvp(HzkaNA@dQ$~P(3UxA*<@eru+1?~`YXqc+sbiO%+MTH6q+f_x}_~!(V~ZnBoL146K)qd%Xwqa zdH9=Wtk7fX zPxhMkzde1jcOUPpIGQC(yOPGeRQmB4MS zu%5<#JN;lz2j-kqW1J9nq%2UtB$O;nf)`)2c)lAaIgOJ%8H+V`PPiaLuGW7kXpW+7 z6kP*$M|{q@JlL@Le}I}?HvYW?-8WDGE6;!JHSd3U`gG^%{rJC&2gd(lmKB%ipY=IW zJ~DOhYa#uhDaqr`p&!iReqlkmQ9L>fBtCL0Ie24@UyoD=P$O?m!|+AU88%#&RZ&({ z7%$fE2k}eI+iNyzm7AO1HcAFZMM~w+d=d+VM2q2kw-Ld_$ZSrkqheOVB?AAo8}I%- z3V7*Oay0f+IVuXy3CAAF;8Ig6{3%H;3^N#)_!gV7!(R3=Xhb@%*Ca31e}6d#C3I(l z`QF03ooAW;SLgh1>;YV*|99H{zsGy`@t=3{xb~mQSGAexr}sX@;L~AbAU{hk+=TDy zevi)Wlt6w7FC6qp0ErLFQtNlv}|J;B2v~~aE zqo?=zAMWG zb%3@^%BsL;y=;)5yjYHYXRZLdDuL+%^q#?@A$nmU0o1UMUe$Smo;-p->FlH)kLd@< z-U ztuDK9Oi7l?G!q$}QBG2^uH#e6(AN0^y7<}a6H%7t69~!f$GsP0q%N?PKvW1eQ_=wM zC`Xqx%fu3~W`a(JFc7b(T`n>dTRAa6<5THxC9)+*AFIo-O| zawlV1b@gVwPJABOjq?@P1m?N-olslT_bM@pXBspzfGA4BWm*XQO3oRIFIp+c*Uczm zmWXl;%4+M4M5IQdBjQ3ID%(+rH;B0!GqMy|XDgJWvU3~00;i#l#!-J;%d{e8h7*FK z|BO)dKH6Nr=vFn=x-wZ0lLQXW@Ith1MN61h=XGQBI&NFPU@VhDd%b7Q0<8=o>~}%U z{YxcUqHFTrsz0K20d+b|9Pd(D6(y;%1xm0G3N0jh&NSECLtf8S0%A&^F3Nx-MU(AZ znlDd{r=-k^#msEQHe5l^TA#1{?6BQ{F_{%PBOP$z>j~KyEaRAyah(C+5abh8AOzbj z-b|&$5k_;I(G)dtZhgV}Q5Quat=u_5i++uyO#UZ|V)z&Oufz$7(D>IhUp3|Zn&x(t zS}hQ(BS5PMf~yh%?+rDCw*Qvd|2hHqr}h8rKHhoK%>VY}@zeYLzdLzAyS*aSM2dM< zBsfzuoQi|cD+86xUw%`HwcB}Nasl(Y?3gMPK+m30aP3{2sS3bZTB~NH3RKxDW|UjI zPu6T+gESLuPi^g4%{cHw*hrTZ<)lfKi_QaOB7UL`R~nPuq&Cd!~OP*Cfu9_wx!e^miB0I6O9AV20H~n%jr{gwNuHS;L$YU zJTHK^(6BJ(Achbnra%4i9;+43eg|KrE6ro6eAVKne7zPUof#&x@Vj{F0A8Do89r}w zv4yq?ehCkq$|%x~T%U~@J`Zxy)(i@1@Uzd|V3AEZjn@&~ZcOX3-qsHba+scFc-QR{ z+#%mSMJqa}DecWKUET6&WIqUh(|%ZYBm|KyRVsl|;GtE#mia5KPO;e&ET7@pI+;;H zaaayyQnh({)xL6?ax&}4&;U5vet?mCHYcNu!yaZme{O+lf^<~wrFMS&Ra39sD2BX zRvw0~9&%#*dwYxonSl*%E8v1atSB1FGZ7g=@7A4)=X`{BD)F>SC7cNm)0@-rq;NJ5M)n znT6EdGU@Te&^|HvfFlvK~TnY!RMWNcSvnp99iuYF3Ma2Uubqzi3 zg8#hj9^1w>EFV_Q+m?^!oC9i^?PKoZbyPU3=KVk?0YKNAT5-0)n%%#Ncat97Q_%KA zF~w3#%%&Z>w?>cdt?JUfoA&8mSEqUtcjInA397YDS=P~NqJ}aJr!QPz)1JJp?gK&p zd{21)*LXaK?@bEM>+b`vi2r>0Xr~eXxwrG^KK}o1o-3Jv@^nhj4Ab0ZT-A|yDKeM2 zn|+C|h9;h%eRquZ!3%Il8k*b!cG6_7&L0N)MWx*&fs)ZA| z*^2h}>u@~j`v(Bv{c)XT&V9pvozi@?DplSs@9a)vt+sWRS$7t>pn3X2Os_D_n06vG zKq}8;FPw*Q=?&U}`J#Q9uBH)J6E$_%47WFT)fr_0r^HI!@YlChFVdxEmNRj6+!a3TS*TrF|1@l zo50FNEGjM4>c zOD|__<#eI!kcaK!4)HTwYPe2Nx+&&m=}|YqMg9=+IHm7&j>8c3P!53=%Blg{nSso> z(Zl7*s?jFjIycx!1l)PH#XC zEWpE-2+8Mq*0^egx2TVP7$Z`u+)>8^WL{ZK?CD`!C#Zg1SwTUKKj_f+K9-ew-WQx8 zTROt~1^Mf>cTE$&g}jwKz^*Bjw<1>Y&5jW7HEgDK3IYqoy(Yl|Q-a&RL*eSmu>r3` zbXA;_6;uzu>LD41D{tL7t!nc6@C2P49lm^yCL|{n<|IYnLC(j8Y@{fud!{0+sH=o9 z82UZrc}VR??N5u~L>PF#TE1s{t2`8SuN1R@jH}7MYLfyL&CikBK@S_HHn6+z9Z|RU ztn~ksMS9Z{04w}IkM^JJH}n7OKDs~udnb?d|MX6$5Ew1pIaDkmm-v6;-dYZzvPj*? zf6q=et`?bs8+1VP-O|-~+fCj+qPAof3Y}+*JC@ynjVwU7zEh&hr|+YwXaN8-%$QET z(0aMPw}2&6lGYiiG%WAM`f#QN~$0(3YmO54QALLwmIm+O$8t+o%K_i)ZbDc9>Djq*>+syt#tPijY(!=Nk6kjc);1mH+GMe)Ih2)5m-J_x9gi zJh1dUhUfuf@aa4Up24?usox5t?%m+6tj}DNEhiJOp z8nG7o5ck9IU853)JOQc#ywp2cd$6fjNu~}UA4Kh8Me>x$3v{)|(+QN(dla@E@Yks4 zv>6)n&_sST`Q-1fI?htZ7ant5O$diuB0b`fB|T-m6cU|NGIC zr>*fo(mR&c-bj z9lkq#6SWElIOk%wsy>8;wD0K+K!jO;Il19`Tuq!uqh)&Pb8s}~xaOA#^*iW{rkt1G z5k87Sz1A$P%?NpQEZiC>TUN^3u3Mo)T>w}zCBo9NAb{9T2%X%9Ht?i8DUyrjtys!Z zug@L3B!JEE0PGmmfMDg7t=SxUxf*Urlr&WE4dd(?$?(EBg`92_!#EBULd)5z!3$fn zuE^=MB5Yb@X&ZL4#F~IPospvEoh19;*92PnzOg1u?{gU9n(K)0pSLsrueAT%{m^S# zfh+94y+=EZ`(O5Ucb?qe|9dA7EKz@uUdJUKfbN?Cy0+Du%l-9Fj9=LR6Lm_a0HB`5 z0oUq7Xyxd@E>DLr2mw>S=};iQ+WW~P8zvl;^CVJ;+{|zRO#1MJxz0SCl+xYghVmA| z63}rAnomC1IRH+ZZd*BVK}3V7FP#A9os3trMF66Wbd$%JJdzx$S$%FRsUIUR3^*_W zhA?^0VKiV=1gCHEY@q`IttZm+gqwIguWPi8F;95wbdgspRG=+MFtDJg9ak-(5#KunN8@bT z;!vwoZrWd0b<>iL`qMh(@Az4B{{NKsKRw!S=6~GV*?GKkKmXsw1OA`Y^Z#1DAhV^Z z{TB^|=+5-r27p;n+1DLDZdXfMwcVWAT{v=rmmfU;#XNbf4~VV`TYT8EEPPTwP{wIK z0Y&etIk;)-5-%7kD>5b(!a4Gb(=p;x3In=Q;k*~lC7%N95hx+;OG()PkELCr`?>z1d`Zsr+qkt`Vntmowz82ydBq%+#w)e9mqg+qAYr!G5c zG&kVU++UZIcC7*x^iSDIr8cVU5eu^_fn7OantDLZ=cRnnrNEn}N(ypD?el-F9jnfk zNXM@y5&Cq4TUbsXC(;ufio^&Vs|lt8Z;{~V0&mX<>v>#m-TCqvJj(uyrzD%vNnTXs z_HnGR|8^cfYTp05_vAkR_uV`X&@twmR5>JekrE&?)|}TgOKCnqB~C8zgs`~x0G&>S zX(G4$8DdkCWoVKW=V*p`GNt)s8&xF3oX!d8DCa%S)7}G=6Saol5;hS1KvJoN{??BX zcnXRfY6_CXI7S)GN!*K{oxDHcMMZiK^lf!N9G#$)R;(9KC?CSVlKftL{#!MKfAx#$ zWGMd8KiNDVT0rMGxu{DtrWs+quVQvt_P&bG@kQ^en9s!DMMWpQum0cO1M~x~Xi+ot z;@NZ7i_5C`g(SQe)0E($EM67A^x`>7ij)lh9khfR|8JikK6~{%o~54x$Ex_R$9v8F z|Gk~v`}nUrc^;q_V*QrZu<_sPeOu=$1c07bxLQCg&uLW?$fm$n7dW9}9fwg?aD69= z{fZ9DQr;+_evb>ddKe={XEei=9{StznktRs5;M?8a9d49(mIjpDmclpK$jGZqjSP9 z3CZmpJxng9Y6dq}!951m0^wvz$y|^)DR3reJSRfUJ$w5B2omi8HuZX-b}2&`eNVC(da2kVGhFn3Jbe55#p~}z==A#+C+O(=!?&mC#R+=- z<`lhpe)#$noxVZeJV!5HpPU}PeEIwtdiLV&^P|(3{{t9Lq&DyM21p%IPT+RnqOQFUl(WIs+VLxw8IWO60IOJ7LB%kA=nha++uW>f~zoEv7sPV<#&Ua8}xU)NW zQ<8ijx_{V5V_GpD_Xg;M$ZIEl`jKAHF3A1fKwVf2Bt4@nDXP?#PUVYuG8yt8*zxK2 zKc4bRR1zo=Mn6%;YGTVzD4*8naZ=12L_;h{gOY5RlgnW;Eeb~Zy}@A6JIpflmQJRe zp|^yQYEDu#fSf6gXdkQD;Ex{Bn>|YZ3-fQF?(DerNnpAD-{0A3-T(e*@BaSByLp5T zlkPI1Sq5^2)ayBNO&O9A1TfXPkxs%!oQ=lpME|=zoQeCGy>-fr-F@%WoSw&5+hht>#G?{%$Pd9ryP7miZB~c z79+r{Ph9-2t|Auru0Ed0R?(a=TO=uR#w#)7qN>gai_uR%Rb>3L)vErL!fBDPVN&D? zDLEUelV>!a49J{<`7p$c(Mdiii*%3+WBGx`HNbf~z&WP_{iZL;ttM^87?&d4`!7mB z?6D&wHlY;&sd>Q?4D+kg?EgwB0}t~*(C_FlO~pi8RP;AdHv_&Ms)`DZ&hxaC9#v?I z^;b~Uae+v?UzU`9Dd}j)4dJf5xWJ2C5u|U58#>#XLvsyW6QlOT|BlX!A`_Uz94c_h zFU@^}W_^`$cy-g9{KqR=r9fV@K@}-8nqWbaknZ2n*{;Cxx}KerN@$9dFmSMyMatTh z=TsPX-%}=xKIu_3fF21zZzX&|vo4LMvbemJwFR>P^Y2}mVou@`S6rUQ{T<0beE~VA znP!C3Nc7gNikzy;FtECskS^$!n+@PI`~j(&%YfH8o@1JUWLyV@SKmh@^bseMMHk#g z083p?DlC+|uJ&zFA$w0E+g83qed}38&|9Leuhd&geV7zHDr11-++G+0^d^5sGQvr_ zx&<90bGahZei$(swnh+_6OV1Pdl_U$<3*iVOkp%dMJW}4Ak5a>Ms|c0l_ymKzmuHV zjK-gSM!zF@p0%#pci?E1C+A=}KfPn}4r0YuoV(-ryLT@Tk=cR8q$N!X0R`d^L}TBb ze4{8~LQCt4l#>}l3C_i=hf}qIDIn()gwkUV>Rf*9d~ z4z{h5u+)`ar{!tEnPM%P;RPhU$mRs)EGvqOxH!QsAPF6V9PpLYYfS0*8vN&IjOvB$=*#sHRU~g-TYU?nDhI zeiFT^;^Q|pB~-0JE{Uf3M10Ii!UwnnRSV)hPz8q%aFP(lgzdqnM8EEO)=`0(W9$7dt-<<(W=TH}u&zeGp2 z06aPgk>2u)W8D`r|4?%x)E`gFtZPQ~lIL}l>A1OinPMe5r!JNS!$#Ij^XEJ0v_AijoWs&G4l;o%uGVPU|;R_-r zWr7w(4V#!&o$vykb?AXJgHm0Y-Ri5uEGsUVPF*Lykq=_1QEsa#-3YK+$x;I_p$rmb zP^k);nw9HD>!|6LF%>zUbk~57qNuu@!x;@HgrIYh6_?(OCInCwCM-Cgxs#A7*f|lU za_NJs1-c*$cSaI$zno#3f2rZbE~${yAYgho)G!k>w^GH-rM?Xdc3xi5G|k8*uKe*7 zB~wiE!8v9$iC}QO)G7L$3MwlMuP_!VnDe06-D z7B0EA4+x1tS7JUjfB1NZfaMtTX^d_K{AtT1Jq9ffcwT@lo9f6Qp+B`t{2vEsH{RVJ z?5u-GpQr0mQhKtHlCKXMLTLzd0&`CeV#?&^9G5~ zb?_=<$Sr&`p06;2}@hxtWsS=xZQLCNtOwg4Q#tZ510n{=iP|q;Fn8%(!4f&knkDV)9Puy2$a2CURd-7@7hkWxA77uL7(B2LJo* z$=SBILt`qFDzIu$9q2-0#f;nrWTx5 zE}|BCcs-Cp-!b1jmrFO%46Na(3QM5fvTwGp|czD}dY6#gIKPY^nJTP`6 zcb*(`Lv^l6`R1D8@`IGj*AfsTbh2j^CD$S3fdC~&SvN&C-rryPr(_;UF{8;;u1D3z zDflN^9nNfYpH@%9blC zJ&KmiXR%%s2a+^BRm$9fx_B4CFZK5_ zKzRU;&LkExH$ZDpX$(o#O4Xv8vMJ~~HPjYGU7_MKM;fYRTL@iu%+qrl^OX6G2*GK3 z;-g_CwFgGupPnA8ntE+$&M^x)5#NW9qs#1@_Z^qAt`ow_8n%+ld9kj8?{LwQ*80p& zZ0&eDk6p2LS;*9ZBt>VkZ$=PFaHhieCG=^LrA))pJH|>iH=u^v(Od|~1a-d)(^k7r z1^b{F9AL@|t~N=Hao*}1Bfwo8dP`DF*AY$w>2{^lfNhDVMYxuH+Lm@R;cg|=qP=Ai z^?7z{GTH6*OjalgklIZb&-h`QWurA$$ZC% zk@2!9YuNV2y1dzVRGkQYBr(S58-g%wD8kBtPYEM#l&9bv$&+ePa%noNo`<8aD1oIM zY}dhpcTO1v`7aR87w1K~kjQ1Ynzy=S@dD2>SlPt7aowh8gaxCHD>|ncnULo!!5Qd+ zXe4B7J1X_3G#bIs-;VUU^lee_Z_NTqecr^D4eUheJ@K`|ZS)XbwN^3ZZWe5#clTXF zyMk?ez17|YGVN@Fy5+5cPCW8V_F8N{apM$dJ}#=6oGx07mO!t|WwF*+#$}mT`I-!u zAsI_RiWU8FN8E;Xx9F8Wl(W~diq|g-oPL8doF|Z~Cq=JyIo$<9Yu-YLpb1qK@ZdB| z2}$smwXG{2Ih(At`j?bXG&)z*dK8umG9mES|MU?n5M;M(R9UDOqUnhjy zkxFw;DlvZEy?qH^VO%?*(aRd;r2y`fTx`YAmT#DADIJg1r4wFg(zq&S^2n48nT9W5 zn4DRFXRyVj_IFZcmbmhz)su5coK*eZO>&+a?yLmB^1fUluxdthZ;;UQsY*5B>OU}w zx}?JQ=!6xZU#D zbDe-H=1a{7X1GW=A<*h%Nas!xB}~|2N);CvE=G@v^o4r{R&u$_v9RfEL-levZ0K4M4H+$f12R6_2l9A@Z zz=R^&<(U(bN}E)HBnSYC<}9ppaoG%LHi4aw167!+s<8G~StWe2(TRozt|&nJ|nm zq#__Vf#3@+>{g)%{><4c?w^}JCjT$vAn#H=ycfUYNpU+kmgoO?wD)MIng8kW-u~13 z{2zDmsN`-)%0aJ3XL6MXSr#K91~i{Uz25(cmZZ&*(laI5tj;NqWL>8`;}zk_w1R?k zycn{YauW6Wy&jmDCUW|eFn%Jwi3zPvIJyE@P&|eY@cT#^Iuc*}J;`P=QPRg=Z(QdI z+JYMBt2W@iFmme>{@&`NtKR>Sz$M573-mR)+)}w+2ZHQq8%1$EjN_sEvhUC*6OYJq z-ELy2t-hdZI7B}ZFr?HnM(ccDpbMH@pkgfTP61a!+(w1Y)GMk-lL9_Q=(5PaCMQcsdw>bJr^<#Y6_c;2t&bRnB%E{$cfK&ao*eP+zL>C%5kb*`B zXokz5q-pZA*P-H3i*WP&^s_8!3Xl&a_{J4rE&IiC&KXxA3$ljja?_QjGb%{l>q`1txY2S8xXhDS zwrN}Nx9?S@W2pVN1M#T=)>82;rrGP_a*I?|3^wFe-v{GeyM&z71+Q>U$70Yl=+p06 z{2k$2kb@aoIS%F!&0|3;`L+8DMmJNb}asQ~f30yQQ%Y^M`((R8Pjeuczxry(udApJs|mY-mhM#10`3j< zvjA}o<&3KdJ75_hC8D`Z7v-u=3Dp*FmfTE91F|cCv8`czT!~Jon-<1vYKEJ+B?o`Ro^LYcv8mifU!ixHNK5yyi zf06|-&1mW%7^@daK9A+!2k`NIF@8_-xvNS6O{)P{`nK|sx=Yv843YC~R^V3KI>;G| zvIqO|-a15#72pWUhfsf06j_U_9jMQXB0GS6j&*RKOURL`5JLVU5Apl{k0lR zbJ^sM7XRmSl@rF~8w$_Z0_n-=;pvN`_s?Jd;P?MFYJ7hG?b|o6upNU1f|dZ=QZ@vzpnn(Okee{kN^5O!0C+UXKN6t00|PE8C}-*$$UjW0Ezx| z&?2v;$v2>PyH$C)OfE0}{~W)3arEN!TEe;<^ov(b&>I5$=>J^NNo`teueF{)HwGHx zjkLzMRXpzEZ(Gc}E4Mhfs^~q(9H+Yuf16_I!m) zX&_#Zt=1@R8@=5I`}2IhhP^Ih;?}p=A>m-9aLE`SjpP+B19(&=egB@U|5F6FsQuhD z>Vvh#`bFnCL>=oEBs=c?HYzS$G)7xTKmY&5r*NZ8!vqH1EGZz%)P2-ni~i0|UkCNN zI94pLUg7d5)eAqP1B3Av*HF*%`L>VnHdj!h2X40i(7l*Ck+I?O5$1Pmv2|io9j&v_ z3N5T8h>^_Ox*dQ#LQ&*eN}|Q`YuL_~5$)QTIC*~b_W7x`Y~)vKU~2R-h$)EO)$xC^ z*->(9&6!bk%C=VMT3ab-UGQ+eRraV!DHwx-|>knsPrbDt?nq3$)BjCV)59 zcJsUJu$;F)>frM=ooiu#nkHd{q8S$JDDTS%?QFLYj^r^ecQ!bJlTfgv@uwJfLRfn8 zLV2LJQK%qV^zZ;1jWDcSwjt7{U4i3=HH4KLaV()!NGjD8G z2-w|iUyFnr7!fvC%?~!OnKdhv#V|TRX9kIr-)7X5>oJ{-TAWa`qg+J!HE=Q|n^ZvN z-ff+($%mI=I{T6Gshsv->HJokqA-cEMrbI{QV0A;31RG2k&+R5OK|#QMLBte^F><_ z=x=0%cE1Z#dLlCoZc3q-YjA{S3-}`-gc3T6W($QW@(SsUX@eAVe7&B~`Ms8MQGjn1 zFn713A)l2UbdmWjljUGd$-J9ohGS6V>?R(RuNr2wJP2`Gh#{!3hV5)4!CeIui9Q6^ z*aiqc${hU$TEiCp|LIBJr3*Y8Vn92_iycrXQhAR&OX|5Al!2|0)yRY{=)?sdy$vzl zuEtPzEz3?+9crQzyS%7Bh+dDX(FQGTjQviu-Q`XKxgDU>O#5B-xy`R?kKY8%< zRu2F!KmWJ0zx(t_^Zeiblb!qXe|Pb$d;SkKj`V$sBY;x$KE)Zp2ISTuK;$3d`?H+` zl+9oNAYhYS;gf(ZriwpL7bUsrZVf!0TQ<@f6;@gdniWC;Ls;q zFwWLmCVHptbVprty*LYpBtUw&hW3NRU}Kz+tB+Ui7*UGH6IT7s4rzJtqOm;A2q#;B zYa0by)o-oiE*zl)BG-=+>160dlX+`6@Be7)=l=2R|7lUt-^5ZrdtVmmdtCE^CHTh6 zf#vr9?#|xRUEluS+j+eI=-&Rni|2E(|Gzh)cU+{0M(}QXF|Z2FUuk8~!He~l2`d@d zUNfxbz4%i(oHXKd%*YRBbJjVEt?COZy{M#*H(hwxr*jF?(US0Dp2Tyjol&opPsL_b4C@Je`gr4lQ zPog@Fl9$YV;&v@Ta`5yzO_Mj;MI-dIt93`k?40K7nFlxToV#hY?$B+toB{VU-_2*f zjXiYwwbFGe!Xl`?Wr-z6dQ^#y&(d==W~8W z2V$MDwY;tz6o+$C;R$g@g#!~^#N zuJr#s-F@23|GWS6KL79CJfDmI?}Ze-+xGW0!Ty!}d#dg0`SV(gYWwfnybSp3Zuxws z!r5``{`-P0KfNg<#@7e|SYd8<`oI)@OMPC?ShYVnxwZgq=zwNNR-bh!kuEC1 zwZlBsLCZmsx)UvhNs|XcR}`KWOdk0We;k1JfH4$jMS`>StCyHh%^wFtIW~RkV+D_- zH><+|#!SM4Xd`5YvNim=5q+)-( z9FY%rR%WDAl+M->rH;H|@bT;>d_y5|apx95(IGfOBJYaP9c%(dcX3C26l;u7Vzspf z@TVEP4s$hyZ3h2UR^6%});vL>SiOmxSx?lPxRo131)}FwiMMq|^y0ix$z7vYqFDFw zhc?m1e)!vxSp0RDt{T|3N3}hpA%t*=qxoZ?_5OKZVazNe6h@WLr6viS%e$0UaA}if z%d-GxM5~j`%TED(ypi9#B{pHuo$l|j9V-Y|*8$!_{A#B`t57VnT2+z%kG*H>Z5vnm z`zeASHoG5UCr(?pFyMzEz3digH>h*4z*#J|vdkpf+LDhXyUhaUzaQ`>@ir7G$%(g- zo)U|k84k(0i8G}4Ikx?hTVqnvK)qR*3Z$wZOfA+W>(xY28H!Jk6BiIxQEgrcTu|N3&iudRtsK7!Ds{K^zRa+efz=qO> zR_$h6)WcSRp-FMphGcXZd~sWAeeT!6KGOM*4a(MWp5y8M^RIN#)j5!w^BSdk1Y(bA3}Z6%Q!Ev8Yi(|T8_@CJt<4T>pVL4sdIA-UCK&V zvl9>EawIM~AAEd7vy)=Iaq~dQj2RCrJQcs>uXF+VBtNI=7v_(=PZx?WG7PsxIuumD z^*b-#a6Z0?KvlbJ7Z^}|=+7#hXvw<#JXtC=fxErMo}qznN#^H+l>P91OP1y`qM1yx zNfu+DF=HJs5$n{$n|Wh@=8YROZ!9s-YhVooGh6p!T^(Kql~9on%j&!83$^xYFVH&? z=#Ii#rG-r-i|z&l*bVR0#_TGH=ZO4W^USx0hF53UD# z3mR`GW>f05F~zp5uBzNY>%j}PR=c8_Js|od6Qta-T~7S2$ralcYQQqFz_^Wc@d0r0aEs)xL3xGO^-=9D$S|jPa?2)N z&QY|@;^O`yO$zi4c3kw#ZG-Kpfg6RZRr>WRi+Aw~-J&;n6s|}rD!;c(0s`b|e_s z+qOT4Dx%BM;z+R;Fo-a_wK-z=wX4U)ZGak&i#PLjpx9Wft_laPcqtd0QTugJN;DGI zcD_Vp1Y(&6VrkXP0cqns0eCT3xlh0tGtUVVc?uv0gvZxFO9aih;JGUhK5^3$h$80 zPcGmz>>q_B!$qF+C|sd`znyn1Y$Uqo7w4C6h8PJO_RZNkfe$9*$jIJqx|lKct-l= z(9#BZHX4sk%kN_CbR+!jOPE3PJZN3m#F59+#pkfC+fg;M5O)e@SEHQ5hkEJ2Oh_MWBuBxA_n##5j)-vnf{^k2rM`xwSBJBfdb99x&BDztQp^+G zpjx9MT!uv`Zi3RDlAvMQe61b+;585@OZ4qHKr6IH;>GBYHKosvLc#9@;vd0`!?b*a zu@NACs^}8Gy7E>i`B4G!lY3CMG2DnUB4GL|MRd%dpeNhPwFD=m+?s!!( z(B=uHFZZyPI>st2AlkX<+F`vrS~e6K4A|s@J@yA3&qx0LmoB@m{r-Qo-~XPSy*yLz ze}8^D8Ta4+9^yHe?|FI_r*#uFK2_+}^Z5C6$8uxb;`hZE#*v%oFP z0NvM4U`&It6!_ktD87kl4J+#<-xg$BCIv`Nk>eojIsfCR4PMuLF4 zPr`K^iM28{0zO*_fT~oMNB2JiL@Ci<`g^~TJKD%q<^%@lv)jZh5Bm;hvzh-`by4%; z>2^Jqb23o`-HeG}jM09=Me=t}_l78B2%d_S2I5adsp6mr6ANRo1!jgUgnUec5Q*n-!= zk`bj}ldoa6Jiq$I+yFl@o-_D0euktD{4^M_*txZF5ZuIQwfux`>_COK^qM6lLQgt> zZmtOaziDwF)j$NSLtZOIanpD@GT92E?EZm^F-x_Ts=Nx>4)_n6%+8Mq(nU1*@1u%j zSuX#hMe?qy>)|7h%VH_E<8Nh&4m&RZ^NcW=;c0oqt+W?+rfL(U3(*ilkrR&Cs5-Rn zEC);;xba(*y|f9e%_IUlTRwEJ}TTx9_o3|>G)k-^^w7xfJB>an%*Wimp z%n=~xs!T6n-L@~>u9hEs5X;*}{P))jW zqWkSS#Ve2D0(=<07HbaAm+g#>OsR`Ryu|)z`bR@opC(f_wdKozh_wY-PXvq|N{p$+ zE_JNu0$ot@NqBMdDW^(n>5z6VfS+yW$92lSKMQ~*w>L5Z#JqP2HqVV#^x+Ovg7gj9 z-lY;|1V|dV%#YR}#5W?4*^JDRC|n#hFO<5@SK_fu-NtmDY!sD32rhAtpGAhkFMC$v zZwNjn`zWbKD) zGxWmTT*Raj;;iZKr+?T(af;hzzV1YJ8QC6ozD4h2y!ug+!(7g=1w80FEs7GT2!9P} zgFEs{+0?<<%Z=Ij@Jliw4hX30nBaMG0V87mZ!<5{P_Va|F5|@lwb%T`G#H!|>&;mA z3Cp^KxCx1D*+~2v7k5K~bFXxs>2&fI*96eub)2E7z@of)48{6j-8={D0zouk4}RlmiBxk(I`gIj><6FuSuk|qcOCj@#(u* zc_F3r%Sc*zOzhDdCvm(&;0^Sj&dU+n+hHR?UKRDFFl-UMc@Y-qX1kgrz<&{r#gYod zIqQ&<(>?k)r@?@6S8z?vh4~vu^QZVP*mXI57Z1$E82Htx4F175I1eZ4tJ!cA_2T?C zJP4%YR0O+eZwvJt<-VfYFm;5Tq&mqh!?8unq?T&vOa=qS(W+Q^sSu=|YG#;SN0gDZ z3al7j6Xl3mIVklPD`{f8)zZjSc+ySXt#?@llIZ4Z0%jIj6ha649ii|DfC`Nz;A4?0 z@v>0k2=$tfI>U)rer#6zIGV<-ARmjTsoMD{L;u+lfx_jkJ>KfZFI7GLV|b?!Udu5zWuIq0Bh=ho{lGK{mH96Qor@Pe2?q&N3VB`onTH3ckLlf!UU z9_XAiW0>@8oB8^{tt1fP`ppOk?@OR+WQcwdM3~Qd8{>keqvAbOYQ$zd{%Cwq~a7+Bp z?A7V3Q*q-ujhq62#?IdAqpw;yh!McHrGfLO~ky*iajorP=hHIN79KqPT;VKT|J zyegFdg$JJUDaa{#H@gI~iTp%arn>+cDz;ey*!97|N$W=OBv4ihl;AbM;{{54(YYe4 z&?905ICa#K6H!;Uk0h|q<_f-A))10v3;ATc!7A)3ON%s0S1q*|sK7XU*JA2sUBjVF zgTeL1m2%Q?vx=j*z`p~DqL4V+FsL&M(+Atn*Vk8`!mq?e`ud}r`zZto-P{x3zg{=1.16.0-0' +maintainers: +- email: info@truecharts.org + name: TrueCharts + url: truecharts.org +- email: kjeld@schouten-lebbing.nl + name: Ornias1993 + url: truecharts.org +name: traefik +sources: +- https://github.com/traefik/traefik +- https://github.com/traefik/traefik-helm-chart +- https://traefik.io/ +type: application +upstream_version: v9.19.2 +version: 6.13.15 diff --git a/stable/traefik/6.13.15/LICENSE b/stable/traefik/6.13.15/LICENSE new file mode 100644 index 00000000000..907ff83212c --- /dev/null +++ b/stable/traefik/6.13.15/LICENSE @@ -0,0 +1,202 @@ + Apache License + Version 2.0, January 2004 + http://www.apache.org/licenses/ + + TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION + + 1. Definitions. + + "License" shall mean the terms and conditions for use, reproduction, + and distribution as defined by Sections 1 through 9 of this document. + + "Licensor" shall mean the copyright owner or entity authorized by + the copyright owner that is granting the License. + + "Legal Entity" shall mean the union of the acting entity and all + other entities that control, are controlled by, or are under common + control with that entity. For the purposes of this definition, + "control" means (i) the power, direct or indirect, to cause the + direction or management of such entity, whether by contract or + otherwise, or (ii) ownership of fifty percent (50%) or more of the + outstanding shares, or (iii) beneficial ownership of such entity. + + "You" (or "Your") shall mean an individual or Legal Entity + exercising permissions granted by this License. + + "Source" form shall mean the preferred form for making modifications, + including but not limited to software source code, documentation + source, and configuration files. + + "Object" form shall mean any form resulting from mechanical + transformation or translation of a Source form, including but + not limited to compiled object code, generated documentation, + and conversions to other media types. + + "Work" shall mean the work of authorship, whether in Source or + Object form, made available under the License, as indicated by a + copyright notice that is included in or attached to the work + (an example is provided in the Appendix below). + + "Derivative Works" shall mean any work, whether in Source or Object + form, that is based on (or derived from) the Work and for which the + editorial revisions, annotations, elaborations, or other modifications + represent, as a whole, an original work of authorship. For the purposes + of this License, Derivative Works shall not include works that remain + separable from, or merely link (or bind by name) to the interfaces of, + the Work and Derivative Works thereof. + + "Contribution" shall mean any work of authorship, including + the original version of the Work and any modifications or additions + to that Work or Derivative Works thereof, that is intentionally + submitted to Licensor for inclusion in the Work by the copyright owner + or by an individual or Legal Entity authorized to submit on behalf of + the copyright owner. For the purposes of this definition, "submitted" + means any form of electronic, verbal, or written communication sent + to the Licensor or its representatives, including but not limited to + communication on electronic mailing lists, source code control systems, + and issue tracking systems that are managed by, or on behalf of, the + Licensor for the purpose of discussing and improving the Work, but + excluding communication that is conspicuously marked or otherwise + designated in writing by the copyright owner as "Not a Contribution." + + "Contributor" shall mean Licensor and any individual or Legal Entity + on behalf of whom a Contribution has been received by Licensor and + subsequently incorporated within the Work. + + 2. Grant of Copyright License. Subject to the terms and conditions of + this License, each Contributor hereby grants to You a perpetual, + worldwide, non-exclusive, no-charge, royalty-free, irrevocable + copyright license to reproduce, prepare Derivative Works of, + publicly display, publicly perform, sublicense, and distribute the + Work and such Derivative Works in Source or Object form. + + 3. Grant of Patent License. Subject to the terms and conditions of + this License, each Contributor hereby grants to You a perpetual, + worldwide, non-exclusive, no-charge, royalty-free, irrevocable + (except as stated in this section) patent license to make, have made, + use, offer to sell, sell, import, and otherwise transfer the Work, + where such license applies only to those patent claims licensable + by such Contributor that are necessarily infringed by their + Contribution(s) alone or by combination of their Contribution(s) + with the Work to which such Contribution(s) was submitted. If You + institute patent litigation against any entity (including a + cross-claim or counterclaim in a lawsuit) alleging that the Work + or a Contribution incorporated within the Work constitutes direct + or contributory patent infringement, then any patent licenses + granted to You under this License for that Work shall terminate + as of the date such litigation is filed. + + 4. Redistribution. You may reproduce and distribute copies of the + Work or Derivative Works thereof in any medium, with or without + modifications, and in Source or Object form, provided that You + meet the following conditions: + + (a) You must give any other recipients of the Work or + Derivative Works a copy of this License; and + + (b) You must cause any modified files to carry prominent notices + stating that You changed the files; and + + (c) You must retain, in the Source form of any Derivative Works + that You distribute, all copyright, patent, trademark, and + attribution notices from the Source form of the Work, + excluding those notices that do not pertain to any part of + the Derivative Works; and + + (d) If the Work includes a "NOTICE" text file as part of its + distribution, then any Derivative Works that You distribute must + include a readable copy of the attribution notices contained + within such NOTICE file, excluding those notices that do not + pertain to any part of the Derivative Works, in at least one + of the following places: within a NOTICE text file distributed + as part of the Derivative Works; within the Source form or + documentation, if provided along with the Derivative Works; or, + within a display generated by the Derivative Works, if and + wherever such third-party notices normally appear. The contents + of the NOTICE file are for informational purposes only and + do not modify the License. You may add Your own attribution + notices within Derivative Works that You distribute, alongside + or as an addendum to the NOTICE text from the Work, provided + that such additional attribution notices cannot be construed + as modifying the License. + + You may add Your own copyright statement to Your modifications and + may provide additional or different license terms and conditions + for use, reproduction, or distribution of Your modifications, or + for any such Derivative Works as a whole, provided Your use, + reproduction, and distribution of the Work otherwise complies with + the conditions stated in this License. + + 5. Submission of Contributions. Unless You explicitly state otherwise, + any Contribution intentionally submitted for inclusion in the Work + by You to the Licensor shall be under the terms and conditions of + this License, without any additional terms or conditions. + Notwithstanding the above, nothing herein shall supersede or modify + the terms of any separate license agreement you may have executed + with Licensor regarding such Contributions. + + 6. Trademarks. This License does not grant permission to use the trade + names, trademarks, service marks, or product names of the Licensor, + except as required for reasonable and customary use in describing the + origin of the Work and reproducing the content of the NOTICE file. + + 7. Disclaimer of Warranty. Unless required by applicable law or + agreed to in writing, Licensor provides the Work (and each + Contributor provides its Contributions) on an "AS IS" BASIS, + WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or + implied, including, without limitation, any warranties or conditions + of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A + PARTICULAR PURPOSE. You are solely responsible for determining the + appropriateness of using or redistributing the Work and assume any + risks associated with Your exercise of permissions under this License. + + 8. Limitation of Liability. In no event and under no legal theory, + whether in tort (including negligence), contract, or otherwise, + unless required by applicable law (such as deliberate and grossly + negligent acts) or agreed to in writing, shall any Contributor be + liable to You for damages, including any direct, indirect, special, + incidental, or consequential damages of any character arising as a + result of this License or out of the use or inability to use the + Work (including but not limited to damages for loss of goodwill, + work stoppage, computer failure or malfunction, or any and all + other commercial damages or losses), even if such Contributor + has been advised of the possibility of such damages. + + 9. Accepting Warranty or Additional Liability. While redistributing + the Work or Derivative Works thereof, You may choose to offer, + and charge a fee for, acceptance of support, warranty, indemnity, + or other liability obligations and/or rights consistent with this + License. However, in accepting such obligations, You may act only + on Your own behalf and on Your sole responsibility, not on behalf + of any other Contributor, and only if You agree to indemnify, + defend, and hold each Contributor harmless for any liability + incurred by, or claims asserted against, such Contributor by reason + of your accepting any such warranty or additional liability. + + END OF TERMS AND CONDITIONS + + APPENDIX: How to apply the Apache License to your work. + + To apply the Apache License to your work, attach the following + boilerplate notice, with the fields enclosed by brackets "[]" + replaced with your own identifying information. (Don't include + the brackets!) The text should be enclosed in the appropriate + comment syntax for the file format. We also recommend that a + file or class name and description of purpose be included on the + same "printed page" as the copyright notice for easier + identification within third-party archives. + + Copyright 2020 Containous + Copyright 2020 Traefik Labs + + Licensed under the Apache License, Version 2.0 (the "License"); + you may not use this file except in compliance with the License. + You may obtain a copy of the License at + + http://www.apache.org/licenses/LICENSE-2.0 + + Unless required by applicable law or agreed to in writing, software + distributed under the License is distributed on an "AS IS" BASIS, + WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. + See the License for the specific language governing permissions and + limitations under the License. diff --git a/stable/traefik/6.13.15/README.md b/stable/traefik/6.13.15/README.md new file mode 100644 index 00000000000..debe16e48db --- /dev/null +++ b/stable/traefik/6.13.15/README.md @@ -0,0 +1,39 @@ +# Introduction + +A Traefik based Reverse Proxy and Certificate Manager + +TrueCharts are designed to be installed as TrueNAS SCALE app only. We can not guarantee this charts works as a stand-alone helm installation. +**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/apps/issues/new/choose)** + +## Source Code + +* +* +* + +## Requirements + +Kubernetes: `>=1.16.0-0` + +## Dependencies + +| Repository | Name | Version | +|------------|------|---------| +| https://truecharts.org/ | common | 6.12.4 | + +## Installing the Chart + +To install this App on TrueNAS SCALE check our [Quick-Start Guide](https://truecharts.org/manual/Quick-Start%20Guides/03-Installing-an-App/). + +## Uninstalling the Chart + +To remove this App from TrueNAS SCALE check our [Quick-Start Guide](https://truecharts.org/manual/Quick-Start%20Guides/07-Deleting-an-App/). + +## Support + +- Please check our [quick-start guides](https://truecharts.org/manual/Quick-Start%20Guides/01-Open-Apps/) first. +- See the [Wiki](https://truecharts.org) +- Check our [Discord](https://discord.gg/tVsPTHWTtr) +- Open a [issue](https://github.com/truecharts/apps/issues/new/choose) +--- +All Rights Reserved - The TrueCharts Project diff --git a/stable/traefik/6.13.15/app-readme.md b/stable/traefik/6.13.15/app-readme.md new file mode 100644 index 00000000000..6ac1d9a76a4 --- /dev/null +++ b/stable/traefik/6.13.15/app-readme.md @@ -0,0 +1,4 @@ +A Traefik based Reverse Proxy and Certificate Manager + +This App is supplied by TrueCharts, for more information please visit https://truecharts.org +A Traefik based Reverse Proxy and Certificate Manager diff --git a/stable/traefik/6.13.15/charts/common-6.12.4.tgz b/stable/traefik/6.13.15/charts/common-6.12.4.tgz new file mode 100644 index 0000000000000000000000000000000000000000..f7e20aac30df991d05052fb30a581adb93c16418 GIT binary patch literal 28316 zcmV)SK(fCdiwG0|00000|0w_~VMtOiV@ORlOnEsqVl!4SWK%V1T2nbTPgYhoO;>Dc zVQyr3R8em|NM&qo0POw!d)u~>IF9bGAN>_rCcU-#F)6<#>FTb}v#yi2*^?LF*lF)> zPoEejAqh1_@(`dL)y?;B|2`PJ5FkNHvK_alHGfDf5||kPgPFl#Fo^T{JkLhQGhFg$ ziRbCR-Tkw(v$ON`-~j&L+1Y9Szw>N=|KD~Gc6axm?CtOD?*7}(?%u(Z{eMF{pMjRv zQ!$Rqf7`h=u4d!@MIKzxA4th)o{iCBZ-9%!{LJ!<3=+cPk`^4^d|PF)_zR`RggAmoo2BD@jgcpMl zDKwYW1u+f%@^6Q`(eBe|C*1jRFvm3Gm}aB|U}TPIIz}{`DXojCB(S z3*DZl(e7S!Fj#B+)%;)Jv?A;?34s3jfAHjBf2TSBpY0wz%>Vm%rfGhG)A0bIM<@)@ zDd7lbC|{7WqzQou&SwM_C7IBVD4)QuNtLF85f$6MRizy$q8!OMEeVuC37OE03h6OG z20&eNASQO1rzt577?R{Vd@tX~6P1QT_Y~Aq10DzJ)(+T5eCl7+rtrXkCggNV*AFS>d*Ax*=M- zA#bYr1t|sJCWO(FB&f&}A*V}Hq%_8CjCOk%s4AuRpQa(gDOVGPKO=&iLUnH0-z7()dRclU(7uehEIY|j8Z4fnh z3G6v^g#d%-G|Njdbtn_xH2q>~l{N_R!fJlq#|=z#{1H_dUSOJvsRy;J-&%Oy(boN^d-`Qdx{{*`z=M*D*S zo#SaOzu=c(k(^OcPV$TT(I~~Summ`sHr^LinxZ04X)LOXUnlTmJQzSJE&3G8&F45v zw%E`}Ts5@7jbM%pR3VsAZ4kJevYyJ~Gt?ZcDZYw485DVPF7qB~P`k|*e>;yH_PO3J|_^k2Ha!w~&v zLK$eMzYVY|Lo;9wqqQbDWdxX}oDx13Y*Wt|B^&27duK!xdIVBxjz7BZc6JPuA3@3Q-0Teb5M^jeG9sj9f+|L{sblaUPUc05IWY!%5GXEr&!o5& zNQ=CvL@DT?xFj51Q9c7mO0X~U3Nh%oEH0OYAnRhO z=l8a33Us*`5Hb-$Ux+v%qaQ)PX3L8_SxN$M923TLKU+3Gn$VO)14*pWpC?DBr$4@Z z_k4`z%do(Vi6xe5?rTglM6v}f^9%(20+&?qH;d4j>LktaqJ^i+jN^~m0vit=p`#%> z``C=~kN9foTfoYAzgj#%C=5zBKp(u(5 zBwIiW9to>Y(IlI%dQ`B$q|E1LFxfUDAMv~pef9|b2t9>LNrC1sVFS+dZE4oZ!UDg9 ziLPjxq6;Dmg*chhOwe&wq^2{^Uc5eeb#(UP!w*NV-oF^5z|%}wQ*cxl?LhaI5c7(N zAyD)@zsjy~nV_SSm!k41A!ZFNmbzs|IAIaZM@b&D5y$M3jcE1@iFue{jze64ToHpa zvPL!3qZ*QrMb1cAk19 z^EoO?nwOL>QJi8X^=CpS6H*G6=0ZjQb6+f_e2Hfysf5he^^QfgH-G{?LTt%6nTMh+ zVO&y9W1MOwlBW3;({oq-M@iIE7*((2@Nhk(Kx;=h_LrFFhZr8Fq*3-)NONcc6<`Rd+9zqJ3grq zyqt*D)Y;jI!a$iY(i7v%fVm*PkHkNxMtlurlMBpex{eR^C{X?ZVOr>4X0;&tMcN*k zo0)BvH`mWjuSE*f%ZXBnDT#$Wey)2GMq*o%DRIp5G+`Q|a)0W@iWhbl=OCb5@(qG% zPjUL3q(811Q#1t}>=N%?wrN4@8CPV$Pk%1uA+g%S3}H0KAL+cB3!)7-)8#!;53~c; zla{(@EzPVYj}}u#hCnEWT>f+}7nok@s*MTX(r*ReBM%8N&IHfkB#};FK_ALO)9ITDQreqs-}uMp#2bxz~FXLWf$)RC%dhN|ovl4CvTK z@7zdNm`}=lA==Wh-zTN;94`fPmE@llEu}p2?z?#Q_HRhmjdu9Eo1{SXw8n}Ks3Cc0 zy>eBdA}=|z+}&z=u2SowTHQfDT+%WfWBBE6f8J5lnb)QJB31rU~nu>0Fgm(NnIx|`M6Q`M3gJaoab?#M%K5}ssI?) zF5kJZjL)~_|EJ=Qv*Qz```8(In#>tVJ2@EJITp>lL||;>bN{wcLK25oGz1;Y;L>?s*OR zT#Oh~ThNIz$gN>8QkiBZiU*7^+e)Vy;{+!tpICTA>GJ|mz-UBbgwWDiQxfb2)xR1@(oUL7LyW2>5VRDs}5%O)NQ@`#(^&& z!}gVEU_H|`rQ^1(M6+p07)ZO-rVQm|-Xp@~XG?M^;0=@Ir=JHF)=mpcm08Ecs*B#v z#!_&)Z7fw_0~_(R9+&(J{_%NTKIZcw3T;Y;1 zEf9E#$%J0oUoO990ErbiCOQfQS3DP*IL2~$0(*!MEy57aESsnf>abyo8H(dSPg-d3cMF0^(MN4mpCxyy6J< z@72cUTw^C$5>`y9unGN0lGk-rt?@%KZ)g@?U`AuBtF8I-r|5MHoH1veV z69hsT#weT8>|;k!p0W_f5WgfQW$-U<+28S+Krhu)heC|UIzs6YdMAN1I}!j6m;475 zumPIrjsONq4Z)*F4J|gy8Lu^%tqtHyJxL|$-{%bCCV?pQJxS{*C#~D$K5cD22smS@ z8$%UT6s38L)7rpj5>;S6tBDc-YSU4Csuv42Wha==BD5Y!$hdk(&O7OIgV5$gn3}>G zvrh7$za668X!ju8X+b)JMfM4tVsJiMUXKw7WFd9K4mg$Am{if98#3543vOi?f3%=0SaLdm{A{RSlj?CjfFz!tS_D_COa zG=kS_>E|M@fqfN)x2A4|fiCy*z7*fO&2x($vzeiy)>^bWn}e{W!J^(hLRn!Ali$W9 z8tt?F(OnxS5ajNLWS{(SjPi?LNX-9)&Op;>RkYpSF4LerNXC`x+rcRo@irp!f-j%b zavQ{!P=#XD?w;M^& zmPN)8SW|+|sx;k3S?)jr>jbv*VOxc7qj;8^g{!YM5~mGATGgS=>S}lY3d=(wC8;2| z7?F>Z0f)vZrt|H3(A9Rn`7S1&W2{ard12x_`$eClhqdgv z1K>Qe4%%SEs*6wtM`TR1r7;ncdctbICZe37GS8(9W7UP3I$|h8R$YKKsmPL(tIP{L zRl%x`v^#=$-q*Q(5LnAS-eBF=wRb3279N;Q^2o_NPl%a9wFC7+g|evOljE9@^4}HE zjU1a2#;B$+loT=@m>dc!m~?Am)3h;qM{x3ENjZ5dESb9bXETDZ6ps1C(5PD>^a)|L z8@RJ?82y!u(e8KDfR-!F94uPNk3z)CpxGaeQB~v_I-dz!yvoGT;xs*1VoMZk9;G@q zMyl2`nlHpq%!C%YApDAu4B^xc;~iLiyh#_Eeg%99Erso%JpY{Z&rC zIekWjTvI#|*wr-D%J4A6zLKeMNj*_Qq+BhbVO!VQoMsw~nPUg$!HtJLRu#c{Iwk*I@ z6~aB9k@!+aVexXQY$cacO_S(T%dM2;aV4x{wf@LUZFRccAsrt<&}lJ2XKY|EX(xW0 zyHxmK&0C!-At)Hm_36?cuCPqxe_@-|YVYT>T%UuzC2dPN5d;|=IhNBht!1}uZk8H>$S1o_>7#&zc;|Y_Z^kL9Md?S5nP1oT?ktRs@LBL6HOX! zqQm1nW4y#PrT)qetRji7PLM1M%xr{jyFvNseX+ zPhbOoY0-qrD!svpwslC;*g~8oAYnj)nsZ ziRD&%&!mDpN-1W<9I98cfMmR+^6iN5cqF~QA)4c&5aRCTiQYDlh4d-WJ2^FolO$9G zggl47COi&-hEU9G_%po}Sh4NSDDKKA?w{YX&7Dx9WERFXKK&qT<6#M=8MzwTlly+=AI-npaH1j%PWw+@uvFWh8^YamsQ;Ga>pQgkdJ+ z8m~F(WcqRyVO*1OSIns;gBsc44-4?4_mC5$X z?wsUlnqSduD#52>8gC<<{8BM4cc3vt84+R(mrI$(pd|Brq4igpF408^d$xGONr}F! zyZcM&XO+XFPn5?+HAcHTJ9G708p~s}yZ7~L3h(sDu2I zicyj*AtksJD)Cn;*Dsor&;=HDoKCJIJv%zHRW$f&^y$;!`Z|>1c?1O#S%lLxK;b7L zQN`EMSLihJi|(JW4@q{gHufs^_HiqI!;eJP~h zR8%Hau^QA1tysh^5IRB84;qD?P$yDGs)Xf-=GIVvWl^D1LN6N2I#vrRWTTiM@=sq` zI1Col`z?X4wQIVG%r=0|K)RGG>QqC!3!i?@Bp|g|8M;S`}GUKG2 z2s_0~g58MUThjZVw*EKs?ar)#Rr-JLX*2)pll`YV5BmQ;9?<`=j4(l2LMRYegb4L_ zkyZp`nz0H@nn|@=u43bGStorH3k(y7Z`%;vdf!zCVHghV)YOnQda*mWq**eqDHzNN z$I@G)-ASHFE7!3)hnrERYJ!9(8~gsQ41g8-fB)dwlcxTE@@(%x z|KG=R6a8OjcfL~tz+Hf@umI|W><=cuzrG1jXJhZGDZkfbJk}}A(fH8#)B~M(-MhFp zHEJKu1pG%^8L{BiK!&X^c0%&NS*Uj}{!MjQ`cItX@yZimPz+oB?B;IQ+v3;P7Flbs zqm%Q!;rvj2K>pd+(yhEi5#(z}k(Kw|bb%+Syi1c+sm4FYAKzO^CX~|0B1lezq%|r`bs9euD6lADl^M@17u{M0Z`@x#FKAzc+w+v zI6gp+heL~6MeheeqadY0d0^uS6ppYZp`AuK;85@u##h1%&{jfYjsi1$F1}#{c9&PY zu8v&HYB+@${kV-D^VAxGW*73dh^G@2nS+4#N7XL7Hw4Hnqz$nz7U36*00lgijY`Nz z&lp#-db5LZ&vuzOk~Sofii8Tu$+$ptYf`S*F6kTS6Fc)P912&Cj@ zSLgAKjWFwn_2)pzDqfXY>!e0A>4g+utK?KY{c6$kSjmo;MoNhlhUl0Zh^KHf`BV>0 ziwHT#BL||rKi1k9eq0hJ7DeMj6a?$g-p1LW9)#Wuv%iyNT`|yIIILTz2cywCMbKeG zUaf42I_a(J+x2Rgmt@I2P52E>Xvw$-xCZGD?&- z5_XIHvra-B06FkohFZXjp)%#5ntc|pY4<#~@LD#cATDfLhybxwzT2#5$p1E`rkakZ@avZD+SK>#*O;vu3HbNfrjg$Aw*~%ZMFuUGq6$#^^l89& zNwev5MP7$jajzk>{uJWNH~(dh*n9K;?H%ki_5!^dwE*+pH54BLwnCel=e9Q zO-l1M{eL<^mSq9zSB>?xX5NnVwfbz?ZW@ly|7T~MaO}3mMWwKs?eh^jXxH}<>c*_= zBXnE0(nokR7oizo7u~vMVqJYx&(FZ}{512(tF%2Un6l5?bE;W#m9wXZ7n{zW70lRj z_81yIlds1jy@j&R)uZd#uAWAh{(i0=(}D+2&rP0A{jcs&z6rTzb`x&Qa{VDBOR z`(7T){-?o=$|~ZQ?!OX3t4VK4ZM6Jz>@e_^bfk=>}n+>&0-ciVKYjTyl9& zN?%l`Db+cG{Xp+C+)}CXHycj({wU40gDE}XoDcDpE8{D5dZ|WcCc`_8oxw%S?X|eC zuFZL(e5RC%+Cpor+7~egzUZvwD`0g%*kTw<-xxrq1MU8@Q#&=1=wDygo-!kL>e4zP zC43h$XK{RnAO=ZOJCuJ~RnTwfpH*(hgQGg5i;dmRoKin3ht$|l8e}bO5_R&!v6m<) z?4iaU5+~oRRi>FeR?hPY2*V%@+LeXK4FVW6l{Ns1n#8%DDoE71zHY~rp@4pLlW7I6 z$s#L;I$MC^02g@Oa8KMA{2je;-e;{f`^g|IDxiTEkLw-0aRzux_4wE z0r}QV;=QD{(_E@G_}Q|kjV6nB-$2QpMZXyf-tKDvFsIo&-{QcAVwJH#?J5BH<7xnP z84JL^0zi04W4oLEOeZNnK6(G1)0F-SCf*4tW0G-PpGgXp)&5TD)PbvFo7O>GROXFD zaI_#oOIS!&^zJH(Jj$fEg))KhT{coCS-WjJ*PzS0tMuUdZ#~`mzn$XdrtZL1{(te! z)&DzBpFQ~h@8#J@|G!WyfecTqqxj_&6W_gmxmxG@(kkgm+gSHeKyQcKe|*uZee7J) zc&UB8hDOpiFn@oY{q{@h$7>rvVCV<@zC(?JO@%{o(S zV|5o0`VziEOFn)2(idFxxy4lX{J*<%fc^7-cV~CEwg2~I=OO<4UY?ESKTgxu`M|sI z{I|}JS-bYa+TPTdzqZc$>AE!_tIWa#0{IT^)GH4a2@y48V#1b--~Qe@1>|Bq?1}L3 z#6>tE84F*G&rrYjN13;J<*@0_aK84y@2C*1+HiQgH#nwcn~MoABhNf`3s!YWQl^Lj(GH%d#Nt7M}Vpk~aS z>(T}2ZS3x8&20pO_+K!Nt+GM;0^@cu6x12f<1z`*u;I;bkYzuW&h7_(e>R#^!NG(I6FIB3n>o+48_~I^TJ4>RXyipTpujk z>D{ieUN3nV(1LH;+qAQNxm0};q^_f6h_uC()zRT9v(?re?$>KJZ*J0WwoBjI1=Q?i z+U#DZQ05hf49+?oHw)C(k)+1T(_K5Tf-7>tNL-b~WK&)bjm_iZ*2p`1GOd2Oi~Ld6 ztfv+1iMO&d;>h~-eqiLENE6mD0J`Rc7T}5k-T-o+TMYU zJzj|3dfc@G);cyXh_7LK5+m4GG`F{{!ghuN=qV>9K|nvoq~w7glTXM(l7{+<=`LcR zu~s?L?5_RquJ~{y?|>P*q0S3WM~CW;bB!IY5%YBSjPs%%z}8LXHI_(TfNqVGd%gg4 zq{k%mBx5L)h37H+z;yHHs%V9rd#R|SWy~vM7G`aFY>KR^@Y^vb*U459steq8pTjj{ zUKY2x+DL%L_xcL=>+4$P$?Mz$2^{WK^MGwphU5);S<<|jeH9U%m&MzvsBtdEX$0Ka z-h7KtR?RO+DXT;Gw(7PGnFd8~R^w+iW35ExOFi;%fcH=Nbo>9BIr4Ar2wdU+f3m;R z^8X*~KYj53-N$o-_}?aDpkMNf`c~X38>kB{Wu`E7e=V4aD?EUnYZ<)z|918V$5r!7 zesRNn|7n?5g{b%B>DSG(P#P`C7VXn_vf?31=oAGf-@SYu=y$$q*Nq$vZ4eXoo%q>; zQsl|0u(cfzaz@g5#Ac&eo?ixIRFouClWkl4T@}+3C!}3Aydrcu z2U5K}z+hzN~s|Et+KCGs5Mis&gNt9Qj9cp}+HT5~1X!2&7NhHXpMgpif=kE^YSoW* zv8fDcvYY0$Jz;JZ^GMx&>ak<>rKlQUXUPuhzx7((ZR=gSuiaHQ?xt&bLjEYd!b>J5 z@r0DlRqmOP^>9hBx;>w8`>?r&@z_)tAIhtNJJKAAJ~L%~E5K$U&-rCP;zN0%y$`0F zn5h4)z;9sszUF0vKy_ie`_kNr?!wUD+p|OZwtRpa4bu0&2P)Hau+E~h149Ru&Xw*P z;PI~%O`Gf6nm2@CZdY$D%iZ|zz+5q(>-TnZl3P-pS)S^ z9?pLsJl$)>f9xMT#DCn&)43MY7wd)k9y@yh2H&&?sP)0Vee$kj0~#QIrwwuwN+Fk; z3HjIxAlZT}70tIQNreRkoYCV$6gfbIiJMhN{mpN z=a*H1g2irt0vX!)8W$b=)j?f1=$@&H2Vff2R5`41*jGo>t~Zt2bUPf>`W%S`VPrNh zZJ)G1%f3&>jYx6uWYR0VRCjkPbbv%-X+gVzFfFdTnY<5IaNy6>VnmF`?8xkZ^3I4Gf6bqD}k$%s$ zOppD4XL-O^*#G0x1;=8X)QKSXkl_ks3EOqgjLDW z+KpTm%`6tT$zRc;p`F2^!71(Z6{{0hv}>-DyTXHSlk^qt0XAR$3J-#g6c()?R)@%4 zmwIy6znyqat5~ah{{ZIGzx>l}|J_|4@D=vovz`5e_W8dD`|n2=e%4(?iGB{2v#!30|Bp9MC*w;26hsysY z6Ox#M?Qx6sCt2S7bPSJ1q3dgsB{j9m`f^Cq=?7$DVv7`DLsbf16RV_qw#WK_*2DJl zBv?`MRgRNyaEh~-l>Kxy`P-_f`@wzZ5brDAX94QQo|Skqp|Onqay!WR(J z>@|76o*kc9`%txy|Lpi=;M>w|>;kOZnd*b!;HWFqW`w7Iw(6X_TGW~iJ$0p^)=-7L zhc_IWM(S5q6WTj{J?rTvPuJUD9a?GF^;xKqp_=PoXL#Qnm#BU7yq>^c?;tBcp_^}4 z<`TVrIMel4dRF>>KFB57ZM;A${6D+XB zyG_)o<9ZhezR%Nylx_fn_TzUIZro_;2n&n4R#K<1c8QxpT}T>H6FLh@XK_0xiqE;T z9(gWpH^b`eQyBc$YhCJDgElwm4BefE&3ZQg0%arW)_Bs$`1VzlSG%=!AlMQwFimBK zxyNXT0$x^%6J%XY**~%`*gvuW1z{M%+H&KosUJ6U+1w=1QM&eA*E&y`31s9ci(<8` z^EVh=OYz^yQa0E+H~kyBczQsx*xeQo5HHEH4`N9dn3HuuUOybV`ZGT(^#5I?|6LjX zx%;Gf|Nqmy{fF~k_wwlVUrEV=!1>*gJUmP%NH74M&=_+Fg^E=&ZIW~^_!=_W+VEaO zmw9&mw}eQYSByU=q&UutrFC+u)@pkHTv8!my)C%RzhEi2zmuhOf@=5MN{VV^COE=w z>4%~ujAYzEtc9dLel1sj_Aj3-tuMHi!ytveSoesfxHSy@9dGH1KU`O$z@kpDnbG|| zB~|z6s-BX{Z1b+Nl;9t(uWr~i8%$+0MG?&q{din|Wxf4YbG$D?$GmjoTIvM-HXgKP zcG{cW7g^nAnJ2@Q^TuxFq|E1NflCU_6lPs-%T~1Lu_6hW)MeIEsD*o)I0~(BfBTtGEEgylSs_H9^v+2H2#qvzx_AE!T_}5cs{59f9L65^Zw^& zPj?^gf4P@O2vBq^<23EKEjGg?Nf3_9+`8*a+Q~tX^xYK6+|82Su3RN+C8AW z@;VnGWI+jDe$ArAu5*b?Ca-RhtMy-UnxSAD1vh~0*%&o`iZ%LR!{+}EVzO`kI|;gP zAplnH|F!aeJbU`=$;14=j|b-eQJUsg=eH|vi2vX8JCk-T}T|6zX*ssO(_z1V|=c{fj={8w>axAp+8lK(qx|KF3{ zhx>o;<+1HQbzWgJ(@*bxh{>nVzXJdC-5@KztNT4Vw^Kavg|?W9js=kDs3^32hh3hc zagbqQT|m;V(siV;4QGxsJS9nZA-7h{Daq41-+Eijo~jnyre|B-5PIn|`&RxQx9%%$ z*M+RHSxnrP>7B0!>H24W`sBZ4ozH&$^Wb2w8UOcm|LMc|&wF`5PQCb8;4Epy|H%aI zUE;|WELNz%G|ew$w7D_Zn~`Z&sE4{#Cy=!oF&!RIhiJO8y_Y4*d(FqIjpoV?)vdUugbRYht^V4cFp&#Kazt;*M9K(rOgbf9gDovN@pA}B& zgbGDb6fhvs;71~%LwPQ6h{0j#g2cFD1hIThU;!tkx*Wy{C21nV3{yI%oFrmh$7htG zt&1fL@$)yQqAbm(kdS*A4PH)ADK&ruq7ra3#SQR|a&$%0R4frICg@}c1M!O5ewL|& zgeb*L%t#_*Pv6c}Kj~0@voZR*?qJ>DI00J9&ymS8vwq#OILR$gY1wV2*p= ziU&1guL5Ho)1VOnswnZ7X(4bcSsC=dXr-W7H=@)m5#=0|)z+JdNXZ-9ai!RGQsx2h@DmC1S($8dE5 z&qeE2w1hcz-ZW;f<+gPTMlvaYGkWGGh?OCP!!D?qn^dU9y5`)o`Xg8uP^ZJh@-7u+ zUXU_fq8JON&`hFrW}fjfPg7FDxz1G#VoIMa3y&j3lUzA^x+*CrO{#2k4k!~D6rrFFu-4Q#n0)eQ0B}ZMAt;E7JUObj6kk!s<(YW*y}1hH zT4wFFzdffhH;1X}QtA%N`eLaj8Vg_@?BoG0)u$Y4t5SW$RMUjBEQh{@hWRmjG59Dk ziz8YuD8ghJ&o64-EK_lb$wmm&&Ymy`tYthCb)yYU5Zu=P?Ou6 zU%H0n^YFeG{-)!w?o99^>lG@VS>T{meJ#%~)-t6|A6xe`q%D;xWmON$iA>6NpI*1G zoTi-2JJQ_(jYxYudUA-*;i}LU%8n+uN&{;5(cq;SI<8Y4G>{n! z*Pd(LW81QZnxF1=MAuL&vS(LXQC^rg7(yqHUz1!%)wBk0g<4VL<}HDvFIsPT9KSw7%g7fs2OB#5bNuVZ!X_0^1Iwy{Xn?u;b|o&5;s((K3r+;U)h zjL2^3(1Z-BQWWUG7pZ79lHmnGtSX9>%t^*^3U_`p#B&6DJ~Nr`z?@#PMLeqtReF4g zQj13ScCY4b;gJWO59r}dVKka}R21S3B;7Abf~Ka09w3_yXg8P!2#OcdA51WYDnEJlO9hD z?GuyF%cNRC+I-oXAD$cQgEqLprZ8+R3e|pHEs}MPBxgmPm)s*#*O1dT_&>JYQ@3#q z%ZHVVw&kOH&H~kE`l_ZsdlQpjzvczJXSX8p<@BzL37Gt-P-PiuL zck6IG9l8eq;QdLJrdGarw@zU`)*@BjEn@9XV=cDT59j8vOPVDwg?a@wW7?^1#EKln z;ap$bdxL^UU$m2{YZ`Gm)z_PqQ+5~B-5qVsMHQ54yu4AucLz&KCnR3Rsm|=Bf8HK4 zC*_=G;E;&sgfYQT>dsY!tdFnjZ)2-#HwSJpqX)dj$3BanWQ%db_i#y;+bUgzZKIKF zVO`&C&Ev-^`-5ass0Z(Pp)Ul0B-_?3^Ef3|;)cJzE%W($6o`^KXLoJC!6%j2@b6^# zj!f!mz+~oqUDrwoSGUN4A?>|p8`YyTv31oIqr1gKv`kZfUB(i2NeE1A&7 zvvLuOip$0aGYKCr+%J}rppf~>?Iw3cWG+t(e9co=jDf!*pP)G|%yo+hTPGNF#v{+t z%UWAmLnsI2al5!h{2Uh=t`(GSiaA+&)P+=mJ4KwH(mDMjKSVv1ePD&KYJj#hkeN4n zx;$Mq+vHp8A}xuadjhs0W=Ur^n;wGeEj+zBY(n#x6_1_C=jlvGd-PFPPfIoE4alAa zxZe^X*+OfL>sEM+`sju+A|=W#aU3G^s+Po#9Ioql#jnjP$Sd)~4teilSt;jT#_@Jb zM|i&=f4%muY2vq#w~`0cYYOG9h|~!Pi;4FdHd8wVK@COTDf&9EG8>p;T>GQB;i$F& zZ$fmLUyv14kG>ip8HUSXv2|8fpw~9bf%UNszGOnijRhty3=-k6=2Iz64)CP9{Xc`V83aa4cMcUx$R7VsG+4_4ROCtf4p!Tp za#E$KOu-E@p!u$MHQsiUw~wgxXd&Nuwy0y-?b*lzbn81Mx_tUBnv&)KP+tfx%C%mu z?=4{Qj3iY`N)5|-u|Awx&iEUdnn#qder^Uso8$WL-rDwdZ^mjbhxy?+=bR$QyQkl1 zg#|}l6#6YK8UK;;+4r(!!$|6=u(IVz#_Ed{&5sSaMP7Y!sy8b$mDsK}Pn)0Da3D=f z9Fr4LQsC}9OQ4cf;=5LX^~YPt5aaumliPW-Vf$mJ;tF%C;dkzU?0Q6#1Y{mgU7`(< zMT)jGr9*t2B|ExCW8us6;AVVyASza?&X1{r@T|k7<@X< zfn)HkVeY}&ycxw|LXyIU7uO&DQLBId)omR&!MRt!A%Coeyg(>uWRx(4B@B52R0Vjc zcd~Z4saHv+4j>;z?NLdxgp~4-t@3zUfilLO9A&Cr;~Ci0`%PwxJzJRcU5(U#|ZqW9tHB-9zrJz}M~t#$9(8cV1iEabt1wE@9Wh=G;~6A;@JP zPc;juqmXW!czw0}2k+JA%>TXr^x0l3|L^`o{KvgKQvSmjtDB$2+CR;wG+s~YE9a)U zs6bs1sq-SLD+`*!zGWGkD?;_#zN)*$+h74_;KSB7 zQ%w>iiU~d2dg`Wft5k6G{_JhgD(vYw8+$G4eOMYPu{t1v*6%0R*%L#plNF7Y)pz$B z9IdPQ-7f(ecF-BjI4`~r^jtyx-|5e3A(z^#F@W#WY|bf^mei)TbwIyDF&wi7~U zZ$le+T%6|dWq&JryVMzT%P#R?GkpMdjB0?l^2*k14!u|n*T+g4D)@$R`kbVAX`DjV zFp6m$c?zNaZq?w0tyz`iY*rFB%hRL{yIEpQz?{xWUhz(n-S2AxEnMGN6Q=Xo4{^

M-G;Sj2%sWM_u+ zVA6*#G?b2{l=db!l&>N5fNtM9?~)I84uI39+g3(w5J4CWr4zuslksYG5r9}ny2)cq z4oMc(th%TxsUKq}4A`SE8Zb(NlebyA)PVr<*QQWp1IoO>Q}Er&g3Y%ppmqt@reeQd zoqW+rW@v$LF!~~PA{6EHI8HI0pJ{39u=FD4CLYfj8f{}NV%|DkAMX8v!beBclfw%DOro{re?R{NChuHIR1-8{6-%TT@|+Y zxMf+mq<*A~(`*WY-W79j)7BMUGE|ggLP~@)OBAs@z_|t?48H}yS zn&t>g+lb5yzI;wgcYf)&Cj7K*DchjtB%xKyQ&?~28E}Ct8F;McehiHMN?y@9ZSLxM zk(k0hJn&PO9XFcm@n{~b+mrQL1uE#Da*zsbRMkf;%&G)-<%DVK05zX``$d-mZ<;D8 z$QifK|Fw3kI$I(gzYa&}(+zfEsXk7nC)gK>;X792O$FW}!OaEU)(Go)T<+ZY@&|a7 z{TIzhI;YbtFUj5GSYiL|JlSvF|GW3}A^-RNJde-`=A4unBzBP;AT!onR5VR!Hbn)F zFY%PHXz&P~&4g(pxBMAmGm@rgn&ua1j(I$z*>oF~B*mOA0Z%Tl(Fn*W>pjkr!6TFr zwT9mkHW2+t5-ElLeHbC|6yzDy6eNjxj8dABXb?R={cy_jk_;Z{+vKC)=Nc^LJvPCwk0bStuvMSJori2Z?ir7^#_$s=SCzk6}? z{Pl}yo_r1*tKz?&>^1lQ_jYz3;=k_Yd4yhy^;=TG#{XdOZI!7I0D4j4atX0KXJtho zn*v*1;FOAW97bu*^_?j7S9DYq@P|!x%9-rztM=)ZdoZRB0Snn1MWk+iFUZ zRIyA~!AXV%x;SSXT@ZdnNLJs`!{lPBVsK*>++$EK5sqh+ECh+u9H)ZD3nIka^LPIf z4F-=Mp?A`xnv+blx4u+sjL!ddxEt+0jdsGFb13?pK%T5Dri2X!zoB<^9*W=48+ied zxzT6vTWCGMIsb{j0OHGxah#@tAkhx!rojNjE@cR#?@2mGuT;0l3>SkRkKVm``R2PZ zI{W_RDLVfC=-nB5d5Ye=JwvZw9KAV1XK&FrFVM?3r)Nj6UcGpZp1*we;`r><{{Y5Q zDa{9i5UC@|G29NES0(!CpB0TSLor1-npQL+?B}f+=LH*&M!c+u?B^&ir=vN}Dx8k~ ze^BF8)c9g==R2q~+Sv`?79cV0m={aR_ zUM6+vM81fo(-HrHot%CD;~6hSC4mxQ^b=*QB6ayG<+JJ{iu1XJXoLl6P?C)@ay5!) zdCtgi5QgF4C{58jI-PNb-VsL11xZi{Ia4gwK2h4>_ny(4Jxcxy^Dk6)cHFrV=$HQo zJ3G70_}~4#XS)yb|2`fe!=$@RNS08pkOl*buPH+^f`Fz=X%w0~hs(w}RWZGz!T0$U zS&(uYT@i#+X3F9;Rq`LM9M2M5CK9W}6rq=y6#GdYSCA?|K%jGh&%6@iLVNhs4K*|a z$)LLZ$|3}q^@)q$)K$a+-}R?+*(#b5Ru_r$jPX)vTvS#mVG;W2 zr;<#5uBEDbrErqRY!v5NObX6M>f{;CrXg8SFds&kF*?n{B2U6h7|V||t`KKQh%-(@ z{bnf1EvM~{F)l^8_g|EN*kg-F>V#GRq~bY?G3ZyT+5eeP1|H_Wq2JI^k_bhcm-JUr zH-&yXQWX^(o#&~S9#v?I4OdXrae+vCTzX2sl5{lqhH#r-Y~XpO2+}vjjjV0Wk+}x0 ziBWsve?u2}o(fDthYDQsOLO0#Szl!wUfnb+|M7}eDUdg8P)UlE##oRfxcfJBzAJFN zspc1?6p|t#3><7lp0IZ11r^5K_ml~vPkIy$pnU=8orEuF)}_%*7MHiOwqWL9{=F{} z%t=(>lFReBzabf@FCb?$)g56q61}slBCBd223D0*(gnTl%?9u}{)kk~KHyb`7nr8N z88<=U)OQgHdBn+d*#)-|z)}^{5(^=(t9_f7sJVz0IDJlyK6nUW1O1xm=NHKa5a@tr^6n;;GwgUk2IHcu^-3DvTy5FQfnv zgw-{-Q9VQQ(%~wB-%8GGX5&vkqu-D`&svr3J8-nflR8-Hr}s?WL9F@}XZAe)?)^(d zWOiVow4_NPpgax!Nq#+lH1I8hsz0&+G*Sbf$DOrh_s4M%94 zIiuSaOK%H>G z%j@gLt;U}|eTk0i0`TY@M0&?Biu6#(^g~TOs6U<+X_rEEa_4oF>A1MMPp*=T(^B0k zY^98_psfQ5XDHW2w6u_3VeL86Gy!D$Y;&_K-ZSES=ed~wNF6yK884}PJ0d(DiINP3 zXpW0QkoEFJlr9NVRdtGjJ77+nB%wkd@*K=v!s8Gq2(Kug!Ji?PbdQFnrFv41YM9czj73s zU_e!vFt0kZb&x68sfQA|^1=a^<+YB-TiDx@^mxsPq2xC|axQTrIowl!e`<3HLo%>A+eroScS{)Ht$tI4Y@ z6vve#bzC(Ow#kZaZy{3WuRP}SYoW2BwlsZYIW4ufD&@YDr#QF8{1N{V9!F6$jL=Ik zl1d_onalMe&d{y~ux(icKy#j@%lb3a!sR7N5Y{f+-%qq3K;nL96m`)O-KA&u(=nb5)bxQKK zmF}7(bxGa!M&f<}&dJr&VfQ=B;8n(uUHEo=zQPQWE9)=Cx2Q>`%4^z1t@gz?Y1NB$ zDO@1VqYLy+tSlQH9B%3Y?S$!iB+knTSngLiQ~TT%tl&+Iunf)It_6}>C7JIhKODO% zTn$bKL3Pxqqr5?F!#C~4F2H$Z;)8z_JS~(t$n$Jz7Hy>#ksS!@10|l;{|KUt=hEE+ zsAWW;)-W!cM~*w>eDt4!v=8~@1D_FfXyI??+h$$DbM$5SrE)wm8~R1X-SM=}v2}Lc z9V-usvJ;y*M&;p3Er#gCZWNp4RhkG!fZikt9KH&L2I$1X=&ub<*!_+IGn~x`!g5&h z31U1iVL_#u0=J+sZrWqb2)?Ri3YN5Ie0Gn*B?}nABgKG*{c-}UUBL$7`8GFzu%soZ#x?_rZOo#s|GcIHYAqM37^5@IAufvo6-fzkkdxH zW|hga6bah0P!C}qNuXJkrb6#KFkr?)!UTCtU>iZKf_6oETF~A7>NJ+8=ie)J73bM6 zI^+lJvU5j{okxlTsW8zHt1d#Ya%sji`x`?zsV6k!1Sf)-C}*h5bKXT^+uL0%V(sQ` z%U>wo_H!4Dc-sVNZ<|J#O;K}Es4h{}giqqs2`sq{p8~FgmTf+j)arviJq{05g6AlB zP3C#I4C=AMh|h}&LtF2TUWXSr7E4*M?w5>{`OsD~;GI#nga#?h7g0;fJF#Nw>Q(Ew zkl$<<0M1Y8uSC-L4bY-aRi2{>!Cb7NreX*v)0;=zVC@TgUEc|V5!hg`=Lvw2YLz~O z+obQ-8?tw}i(2H#(dyt8x6}=TR*F2)z+QF5lL#noWJs&l=D{Tvh-OOgRm*l=9_b2t zI8HRoR{n1fuc?xd)vIHwL;kJCnl}vB(R>`UOPJ1*Y}l+alE8YO3bU3l77B4h;V*~~ zu8L5Srd6d(9jJ?U5&TMjFFcfc;OInRK63-429?H;6s=S(swta+tW#5MnO7ysuQH^e z%5L+a>kfH(QHMOGZX;K`}VLl;vD)k{aW@H8zHUyL#vyNibc9ISr({@0dm1KD#p>ZG!bS<+E_960TicbgDkD;7|qSZuwIIZE>eY zwia(PrvV-)_sW+V=^b;W-BWkQlP*wCBkqnof5_LiI`vW#{MGBlELuB>CfLelNt zRk^F1Sm$BVqEVA~t(@@C^v4I+$@#2BG(2*R+T2rCCZBaGNV zo}%YS7MII{OVe46Je+(*F)Za^yABq-3(6?)e~xgryvUQKL@vYCoYf_ZmUy1R$|ll{ z>oz?DEIR6>qzjsoDS5$SoPsO}#)7xDgF=5wf-y|}?Le~)-0gZ=S^%`&rX!y z6JIObMo-aIYZX)OcEL7!ci$$oE7-=BTkTyS)6OQSJKiej#3PSnuhq?`cANsuCV4rR z>Y~-r66j5PS*$hsdReAbzF~*Ukc=LXVnu(_5x1e;Eqdh-a zlb|=coE`!pHSZuq(1fZAcyJh|fE@UJZR?6hIny1J$@2@nFgA=!0JtlH5;|iN6cJr9 z36c{#0}{HMpt37F{zu4I3^7gusxA}hldiVVJ{M)rx8?t*;*YcAlXDpE^Y_nB&Lbpk z2k}B#5e2@=5JqRmCx#Kk*D2xkOr;qorIa<7s)wpxbp%4 z%jZNtvz>q{=1b`VGhHMcA82(jq;n^U5+>|a(OK3E&;V

4s4$3B_qv*feA&l%QGV+kv6FUNe}=O%~{sY#Xb#aHi4~=Aui}h zXu&kcNoW=qqashj#qQ{liF6wN+-lIAFovh3Ygfm$cVMZ9Il6*fFBk|aZSVSxYr1~P zY-~tjGtpdECFPuC(LJ<1-0f+7XL$X~ED>^@pjm#ke)H=2qnAdB@6_12SR*JU`7KV< z3mjjb<*)K7dz-x|%e*|l-;S~Fc z)^BVd#yhu8&(SQQ3z}3o6^8Mp6a)mv5PZRf-74h3pE-HO!*lD$k9{OTyz>2?gn7Ibs#%Bp3__1F$ho==2$3{8W4s8m)>sx&~NKJc1AK z`&d~z5?}N^N#`jG~I4Ofw!Nw>&mAzo2KMc-hnu-D{E}mflA|XIJ%(Oh|Pje9-wt; zQ_4XCABBMrMD`%LR`s{T_|ux0wowqq2A|B2Dog=+M<$QOK*&toa$M@3v*s1>f~+Bi z+zh1|j1rRf+MNClZnWHjUgmKm+q5nEcj#256R7>~hvHKMY)!?tn5J*?t1VKN5g3tM zLl=y5?Gmz57re$9orp=(pijSN(RYMz1$C|m(PQmN?2>cD7%637*_)idm=}Dx)kf*o ztfQv35#$kWSBS)dWh;=E4(Wq0@T;yI45Q;2O_P#jTOA1Wlo%gcNPpV-S%Fu~6buK= zf#7k}oK}bZ<6?D$?1d%~jZuX}#hWEJ6Via} z8enW|7@t<66XK?Y@j*=g1;jK=iw+qrc&T4NL+u+&XHolJMYBNoXO+vMZJ$jjzsMFh zm&u(X`9-#909ivcyN_Q`zsMFXIsJFCgibS(+6$(ZizHh_^6x|V_#vNsAlbqerGTc@ zfNOnQ`B>ehYijz)`8LgQt8E?ROhnnkgJ^FZA|?uO0OftCzsd8o)vFz-FY-J+gpH1M za9>EsfvVs`{xb87Xa{nd@xz0)8cj3VDkfQ%i|9(-u&Q> z|2ArT{_yR)x38tn5)dQU{d-3y@(&?N4?!$vc_Qy&UZWi~^cELwqo9FX6lq|v8~<|N zZu6=hfAjYFiw|#(Ucb1L));6jDAk_m#5dR5l%5Mppa0Jr7^8n&|D&0|>K~u}@hQZ~ zoMz{15UBtO5-p7`>$_yWrXPVsR~@v-Yf17A=-qBr?&rz=;{X4XS1*rWp52I9`$4~a z-2}ZMz)$Ya6@%2Kr5?4`;~7RzW1N}R__nH#yZX1y=G~QBJ-Di})ngBK`d`OR7q(J| znJ&1q*Gd<4Z)~K$$QEnb=(X+n8W++)yd+z#S==^yyAAdi*nf_orzR#weI$v5s=SjM2_^ z3*lIvv*StTC2_n2lUjn0b!|86Ki{Yo8pI21u(0H1Qw^0kAqR`QCH$X4%v+lk0(N)X*COE-Mns*g=7&15S#4G*i(!0-&J7YP!OghI z*AqG&w|YWpN4bb{Yv6cBHmQKjz1uoplM64!bp9jdGpY7p>jYPuqA;1U#%LrDQ+xbJ zF=6a=o{%wmM{x3ENjZ6qvt^qR=&xjqcE9sedMZ;5Zc3q(Y;cU`OZdaXgc3Rm=1YYs za0=;^X<>pnzS&6V1Yf=$+EB}WYOJarpKVj`E5KXUp35V zc@p9*7gJDS_1oEogS!eS5?u(ku?-M@lu7yxw1zGG|Itd{rVBh9VnSQSOFf}bpb{TB zmedP1DLq>wtC0y=(1{B^IvZlTU5%-3Tb7-uI>baLc6m|17rmZU;|*HcnERb*yUU$= z=Cw`U_lm~>o;w;V$#Xbjxl^z4y zO4fQiJKDzAus-#EP+g+tH*bAkq*?u0@AuewW<9oc_pSz=w7?x60&Chz$G@qvuFYy@ z=C+4UqxQS(b&FEly{0tT;UNlwo=u+)8@^44Qsf;*vwl`?GOg_%l<0gtvL+?ow-+VB zm#r_KRxbd4?-Nx2+E45JpFDYbrw0K0&;RWl>^^(iJpXra@buyQ-+esmp8rFQBYmIa z2%u!W&v6E@0l9Su5V?o={%q#}W%JiR2-xf{|4G1Br;0z%mIb-(ZVf!0TQ<@f6;@!CdOweelmY?SE*l;kDiDo6up^w;OAy z^KX{4$grDphy7vQl-zaN(j~-7esDudTnNoAv(~AkZc@zhxQhxmc)}s#553=ES$FR2 zTF2W9OE^-NZDX$_yehK}3l4p@1>=0JWukNHP7l-#*Nbz1NCM=CYe+xH3^u_rx&Cx* z&k-ef9A?$;>M1P`UNn}+DdA)baBU-RtA?$0+@-~IK;-&SBAp$2+3dVEocF)C_4DvJ z_Wvv|>91lbpMEIv^Z7_woEu?Emi#>z(Au zkzu^MUJR^4^H*9Kbo9k~%Y>C3*fpKiPG zsGrUyNJmTji;*+PrrCzxwG&3OcLcI>x|I0>&|c$@y=DE&9skj)&PUiFuC3YM3)&d3 z^}W4uCWmTsDr!F1kQmn{mxIv=X5RL7{uu3U`#O4z_Wezh%ZXEY(;C~nh3aIp)llSc zxy;IXs0deUkw%$$P5to%B!>@zko%W+4$J>(!9XJ5rwcG_= zm#o?(%zWr%TA1HjEpMxDMi?3dZQ^PWvRP)hKz(+-GiA50b-YH))!@(k>XIXI-s3&gU02 zThBbW{oveBtM!0xqy7$f(0sSod>eb{^lK&SRD^|Be9IC&M|xC=j^nvB<83$GhwTOh z^^i9x^K^fW?ENQtM!niUp2$c6IsV8sEtHPxt@ zNZVHXh7Yd8&-OU}KblQT!r0wr|6S?-d$#+mng93T*+c%{`+5E-{=b)!_3ql=*97}l z^6#m(ujkKebyVAb*X~P?zwVCDXDXZ>$L_z+S^w!x88N;_2*3(+v(pEr=u3x>td}jVQ9Lc%qS|2O=NP4q69AL~OJm{y;<}x{mL6a6IlD5zmX1bh6Uj`%3n7{0`6Yfa$KGkLAf)fBcn_^-0+R^zbd2@2KKo4A>^qTa-< z+#t#mJ+DfoXdH340vPpFFL1 z&-)5vrjJmVRcn4iIlY9a=w!V+@@avtG z*1;`Ii90YxrP0+?Y3tP2tru$Lu&BB57N8&r%kJL(!Fn3j9q?`vJd8R<0?mVZy*u@K zQ?+@gD)Vksin@^$6xjIC=!(AN7Pgq|Iw;qn9xQB%#tR%@k}Pp%*yqY}VG+KKZb!-* z{d0pHAggJDi-6_*zMr|5WJ-`bq3EV+|LoQ2=Smw%lCxK*`c=RGsxumFlf;re)g?5NugB=5%ojAdQAX}tXl0%noh<%1^sL`{D>Bn-hw{(RQ@cY6LXW6torNZn$ND`8 zyh$|u^w?egCa<%4{^7d(_vy5bo|0vLA0N~PEPB3zMZ2=q%OdOfoj&sb*xBAy=GX^Y z?{>Cck8&4k;}(7tC-p?y7u?2Ec3O~lwV5cv^mq(-$^>)S;1qDz0kQ(j=Drpiu|U#SPlc&eC8SBIkwh-1WNx=rxu79EcGyjX7q3M1wXR`{!|OMb~O zy4ED$=lP{tkNkIj(O8RwxZ-(ess7%5UNPY|S({i?-R`tYH=xz7zh3DiQ`WJgENSEf zzS~>u6`Jl_l68DgV?O-3CCkla#LZ+SVzT5oJ%)R;`(CEvy4o5i# zHtObHOefILqV2GnggDDbc=AEqK+<6 zLx-rZJJi(~LUn}}A>p86%~vM;!Et`)QMs-v%HRyecUPC(Wy?zrDff z+vPpk!~02?N<}*4g_+!E4{6l@8jXHC{21-=`P!p;g7J#1>%Gb<$nZ#s;Fd);ouFiu ztGxEOglkQp~-9R&n=p~A`P_7*>a6}zj@ z?nkaqh_d|q8s#~jqH*6(n?=;6(%4;~p#!4qLJF=?(~1$k7VBZLP6BThOO`4Wj_PS8 z0LZ9@8W9R&XTGfl{5&bLJia5ZmR*#Dfn#bFJTyDs@>so-?* zk3o{7kmn?cXXxK&la7UrM%U!z_{*n0K?0M8AN#ybKOsN$A!$UHrIgE?A-L}$bSHW0 zN*>py*GT+$OiYc}$78~MHDVu2Bw7Mu1*YfneEXUA{tb~EJz@sWQsT%~26g z<04j>K{O2@NkTRT=JhRdLYn31u%g zu$DT;sw^PZxar#Atvgya3>pmBWrMx+flkdwKmW_7UFUxPTjlxR`*%n0%=+&i4n7?1 z&i|g{*_!jeY})x@p91n#o$O`Pz+*ghfE;Ib+W3(_MFFce&U`pPj(iq{xf!5(?G(l+ z8fuR31xoNOW;v|9MZR-U9q+yB7UnSDzcRhQtW6!L{wpQs8zwfiQC75s;ws25`;H!H znGfM&Y_Lbw;s~0E1{Duk{(TFWf<9i(Nb$_c8`t@YdO{rxa$k1QItk-Y$?T+hy4zANLnks9c9UGpe%PZ3PV8h#ed(4gP&F$$TiST7#vThn2;9F zPUN-nw%1QQ(PtcmS3XRNxWGxpC9~K;w+x#UBPH%h*aT3=wf>PJpq|orjuSOkrbWOv zF9A@NN_lnv8$gud{bj%J7`Y=xE+Z!hz&hNfMtS%-oX_U+P1(eZi)ZY*ug7HYkDW|h z!Nbbkh0g_=m;AeyF~{E|Smo4fqz_J<+#5g9)xi$!nBHo8FrOA^6d@uEPjPMz_AS1v z18^D_aa{t?Bc_%+JwF*y5cE%-6nev}PlIxs^^ifZUb372M1!}%(jH|G=|h}PkFP$v zKOhe#a|XXAPoL(2A4NUxJNJGZMYkBureD#mAE@#zE3;&H=xO6`%{PL-H%;ziDu{q~ zC~~D3W|{~`rmUdK?q7r$^JH5o)2mQ+Ab+r6c5zLREu!B4UQ{IOa`}fA$?Gz&M;&=A zlco5szsVFG{;>emGdjo|Ps=NAQeRxVvQ5w?bcaxqoCw6ut;1^0W5D!|JI|v0sZHSB zOe4_5RGBxoiDs(oYE+^VEvo6(R(mVbx0QB#()`J>BavUUxQ4n&)EEJJuiE+|P7<_S zUS#C`R}@eGmE!_k#Oag0`tV<96b;YaB&tyk?WkPRo_0lOi>=AtoEX1dXJqAZT!0ND z)?&rwdHJ2wkdb?likIsDeE+e~RfoyQPkr$+AYyAlRuchZhXP|Nv1<*hM}aLU{U*H1 ze8#QPN;)*o1@Lorep#dJ=hFaqaC;*qK#hCXV2jvjV?SJjn;?5b*;{VHoB(YHmhsUR z1bnLk8IS2Kslp|2=Y>Mo#Y)`Qsav@2lMNCngy0nS z6SdXO0eZJC&=jxck*7Wp{tJD6x3CNQ1j*jLB#FfW>%;pVQ;g&Oe71mUW*r_sQ0#*FNU^FDDx7MPpD_hN8$r6 z?)wzyM(KQK(<#2Vrhs~ z&Aor;SUVc1lDAKJbQJCJu;)FEM%9b9C*5ejr-|_$^P%kx56-diLJR5Fk+iay_+uGP zYJU~S8)!cr%O3i_BT9n4Dymaq_&j=(A}-MFYBoWD{i0lpr5T8qyup&*?y>thih6u> z71QKcnZKSke}?@+OqYXm+;b;m5T#Q&{H-x?o=?=5vk@rj)%k6B5y-}A2zD25EBPGt zw(7RwY6u%iRgznW<>Z@=ppz>55z2g5@%|L2FJ;k#Y@-*Y_M68|@0ORwt~Kojh1iUZ_*4~qq~2Fi{H zw8v7x^5VHW-HxfM6MlLDj$dhTSV3GMvdaBh3QO`!MFLCy$#xhk&veh34_K&`!oF^v zw9-Hq5H8?e#8+8f=$Elt_yxeV%%+A6=_*HM*;;G4mmPP*xsLNYL}{iI*+pEEMw%#n zYc6iOp!XeQh<6}s8K?mUBRkKM{VDP)@!Bqt>qGJr%B`G_@R#JD@yCOY2P)$R^_&5K z`p)0ly)VBC5HCva3)ybmfLPBoeLT=ooyBwYH4q0DKqNJCVKQl1UXx0I!YvQ^ROFP- z%^{9#DnC)4+a^GcidCKhdVREY(z=m936#|eC1ec;YY0inLUkhE;4SPb&x$O`W-WIya03(YLzAhy_Zk6Z6!or8u8f)bvX^#v?4I4Tdv?$6q0j#V009605$Pl30MY^g5!V*7 literal 0 HcmV?d00001 diff --git a/stable/traefik/6.13.15/crds/ingressroute.yaml b/stable/traefik/6.13.15/crds/ingressroute.yaml new file mode 100644 index 00000000000..9422be3c878 --- /dev/null +++ b/stable/traefik/6.13.15/crds/ingressroute.yaml @@ -0,0 +1,12 @@ +apiVersion: apiextensions.k8s.io/v1beta1 +kind: CustomResourceDefinition +metadata: + name: ingressroutes.traefik.containo.us +spec: + group: traefik.containo.us + version: v1alpha1 + names: + kind: IngressRoute + plural: ingressroutes + singular: ingressroute + scope: Namespaced diff --git a/stable/traefik/6.13.15/crds/ingressroutetcp.yaml b/stable/traefik/6.13.15/crds/ingressroutetcp.yaml new file mode 100644 index 00000000000..b50eb9dcc46 --- /dev/null +++ b/stable/traefik/6.13.15/crds/ingressroutetcp.yaml @@ -0,0 +1,12 @@ +apiVersion: apiextensions.k8s.io/v1beta1 +kind: CustomResourceDefinition +metadata: + name: ingressroutetcps.traefik.containo.us +spec: + group: traefik.containo.us + version: v1alpha1 + names: + kind: IngressRouteTCP + plural: ingressroutetcps + singular: ingressroutetcp + scope: Namespaced diff --git a/stable/traefik/6.13.15/crds/ingressrouteudp.yaml b/stable/traefik/6.13.15/crds/ingressrouteudp.yaml new file mode 100644 index 00000000000..d7c2624b576 --- /dev/null +++ b/stable/traefik/6.13.15/crds/ingressrouteudp.yaml @@ -0,0 +1,13 @@ +apiVersion: apiextensions.k8s.io/v1beta1 +kind: CustomResourceDefinition +metadata: + name: ingressrouteudps.traefik.containo.us + +spec: + group: traefik.containo.us + version: v1alpha1 + names: + kind: IngressRouteUDP + plural: ingressrouteudps + singular: ingressrouteudp + scope: Namespaced diff --git a/stable/traefik/6.13.15/crds/middlewares.yaml b/stable/traefik/6.13.15/crds/middlewares.yaml new file mode 100644 index 00000000000..513b36f5d8a --- /dev/null +++ b/stable/traefik/6.13.15/crds/middlewares.yaml @@ -0,0 +1,12 @@ +apiVersion: apiextensions.k8s.io/v1beta1 +kind: CustomResourceDefinition +metadata: + name: middlewares.traefik.containo.us +spec: + group: traefik.containo.us + version: v1alpha1 + names: + kind: Middleware + plural: middlewares + singular: middleware + scope: Namespaced diff --git a/stable/traefik/6.13.15/crds/serverstransports.yaml b/stable/traefik/6.13.15/crds/serverstransports.yaml new file mode 100644 index 00000000000..689a57f71bd --- /dev/null +++ b/stable/traefik/6.13.15/crds/serverstransports.yaml @@ -0,0 +1,12 @@ +apiVersion: apiextensions.k8s.io/v1beta1 +kind: CustomResourceDefinition +metadata: + name: serverstransports.traefik.containo.us +spec: + group: traefik.containo.us + version: v1alpha1 + names: + kind: ServersTransport + plural: serverstransports + singular: serverstransport + scope: Namespaced diff --git a/stable/traefik/6.13.15/crds/tlsoptions.yaml b/stable/traefik/6.13.15/crds/tlsoptions.yaml new file mode 100644 index 00000000000..a0c2573fb93 --- /dev/null +++ b/stable/traefik/6.13.15/crds/tlsoptions.yaml @@ -0,0 +1,12 @@ +apiVersion: apiextensions.k8s.io/v1beta1 +kind: CustomResourceDefinition +metadata: + name: tlsoptions.traefik.containo.us +spec: + group: traefik.containo.us + version: v1alpha1 + names: + kind: TLSOption + plural: tlsoptions + singular: tlsoption + scope: Namespaced diff --git a/stable/traefik/6.13.15/crds/tlsstores.yaml b/stable/traefik/6.13.15/crds/tlsstores.yaml new file mode 100644 index 00000000000..f9a40052ba6 --- /dev/null +++ b/stable/traefik/6.13.15/crds/tlsstores.yaml @@ -0,0 +1,13 @@ +apiVersion: apiextensions.k8s.io/v1beta1 +kind: CustomResourceDefinition +metadata: + name: tlsstores.traefik.containo.us + +spec: + group: traefik.containo.us + version: v1alpha1 + names: + kind: TLSStore + plural: tlsstores + singular: tlsstore + scope: Namespaced diff --git a/stable/traefik/6.13.15/crds/traefikservices.yaml b/stable/traefik/6.13.15/crds/traefikservices.yaml new file mode 100644 index 00000000000..59fa4839477 --- /dev/null +++ b/stable/traefik/6.13.15/crds/traefikservices.yaml @@ -0,0 +1,12 @@ +apiVersion: apiextensions.k8s.io/v1beta1 +kind: CustomResourceDefinition +metadata: + name: traefikservices.traefik.containo.us +spec: + group: traefik.containo.us + version: v1alpha1 + names: + kind: TraefikService + plural: traefikservices + singular: traefikservice + scope: Namespaced diff --git a/stable/traefik/6.13.15/helm-values.md b/stable/traefik/6.13.15/helm-values.md new file mode 100644 index 00000000000..3f25fbc26a2 --- /dev/null +++ b/stable/traefik/6.13.15/helm-values.md @@ -0,0 +1,124 @@ +# Default Helm-Values + +TrueCharts is primarily build to supply TrueNAS SCALE Apps. +However, we also supply all Apps as standard Helm-Charts. In this document we aim to document the default values in our values.yaml file. + +Most of our Apps also consume our "common" Helm Chart. +If this is the case, this means that all values.yaml values are set to the common chart values.yaml by default. This values.yaml file will only contain values that deviate from the common chart. +You will, however, be able to use all values referenced in the common chart here, besides the values listed in this document. + +## Values + +| Key | Type | Default | Description | +|-----|------|---------|-------------| +| additionalArguments[0] | string | `"--metrics.prometheus"` | | +| additionalArguments[1] | string | `"--ping"` | | +| additionalArguments[2] | string | `"--serverstransport.insecureskipverify=true"` | | +| additionalVolumeMounts | list | `[]` | | +| affinity | object | `{}` | | +| autoscaling.enabled | bool | `false` | | +| deployment.additionalContainers | list | `[]` | | +| deployment.additionalVolumes | list | `[]` | | +| deployment.annotations | object | `{}` | | +| deployment.enabled | bool | `true` | | +| deployment.imagePullSecrets | list | `[]` | | +| deployment.initContainers | list | `[]` | | +| deployment.kind | string | `"Deployment"` | | +| deployment.labels | object | `{}` | | +| deployment.podAnnotations | object | `{}` | | +| deployment.podLabels | object | `{}` | | +| deployment.replicas | int | `1` | | +| env | list | `[]` | | +| envFrom | list | `[]` | | +| experimental.kubernetesGateway.appLabelSelector | string | `"traefik"` | | +| experimental.kubernetesGateway.certificates | list | `[]` | | +| experimental.kubernetesGateway.enabled | bool | `false` | | +| experimental.plugins.enabled | bool | `false` | | +| globalArguments[0] | string | `"--global.checknewversion"` | | +| hostNetwork | bool | `false` | | +| image.pullPolicy | string | `"IfNotPresent"` | | +| image.repository | string | `"traefik"` | | +| image.tag | string | `"v2.4"` | | +| ingressClass.enabled | bool | `false` | | +| ingressClass.fallbackApiVersion | string | `nil` | | +| ingressClass.isDefaultClass | bool | `false` | | +| ingressRoute.dashboard.annotations | object | `{}` | | +| ingressRoute.dashboard.enabled | bool | `true` | | +| ingressRoute.dashboard.labels | object | `{}` | | +| logs.access.enabled | bool | `false` | | +| logs.access.fields.general.defaultmode | string | `"keep"` | | +| logs.access.fields.general.names | object | `{}` | | +| logs.access.fields.headers.defaultmode | string | `"drop"` | | +| logs.access.fields.headers.names | object | `{}` | | +| logs.access.filters | object | `{}` | | +| logs.general.level | string | `"INFO"` | | +| middlewares.basicAuth | list | `[]` | | +| middlewares.chain | list | `[]` | | +| middlewares.forwardAuth | list | `[]` | | +| middlewares.rateLimit | list | `[]` | | +| middlewares.redirectScheme | list | `[]` | | +| nodeSelector | object | `{}` | | +| persistence.accessMode | string | `"ReadWriteOnce"` | | +| persistence.enabled | bool | `false` | | +| persistence.name | string | `"data"` | | +| persistence.path | string | `"/data"` | | +| persistence.size | string | `"128Mi"` | | +| pilot.enabled | bool | `false` | | +| pilot.token | string | `""` | | +| podDisruptionBudget.enabled | bool | `false` | | +| podSecurityContext.fsGroup | int | `65532` | | +| podSecurityPolicy.enabled | bool | `false` | | +| portalhook.enabled | bool | `true` | | +| ports.traefik.expose | bool | `false` | | +| ports.traefik.exposedPort | int | `9000` | | +| ports.traefik.port | int | `9000` | | +| ports.traefik.protocol | string | `"TCP"` | | +| ports.web.expose | bool | `true` | | +| ports.web.exposedPort | int | `80` | | +| ports.web.port | int | `9080` | | +| ports.web.protocol | string | `"TCP"` | | +| ports.web.redirectTo | string | `"websecure"` | | +| ports.websecure.expose | bool | `true` | | +| ports.websecure.exposedPort | int | `443` | | +| ports.websecure.port | int | `9443` | | +| ports.websecure.protocol | string | `"TCP"` | | +| ports.websecure.tls.enabled | bool | `true` | | +| priorityClassName | string | `""` | | +| providers.kubernetesCRD.enabled | bool | `true` | | +| providers.kubernetesCRD.namespaces | list | `[]` | | +| providers.kubernetesIngress.enabled | bool | `true` | | +| providers.kubernetesIngress.namespaces | list | `[]` | | +| providers.kubernetesIngress.publishedService.enabled | bool | `false` | | +| rbac.enabled | bool | `true` | | +| rbac.namespaced | bool | `false` | | +| resources | object | `{}` | | +| rollingUpdate.maxSurge | int | `1` | | +| rollingUpdate.maxUnavailable | int | `1` | | +| securityContext.capabilities.drop[0] | string | `"ALL"` | | +| securityContext.readOnlyRootFilesystem | bool | `true` | | +| securityContext.runAsGroup | int | `65532` | | +| securityContext.runAsNonRoot | bool | `true` | | +| securityContext.runAsUser | int | `65532` | | +| service.annotations | object | `{}` | | +| service.enabled | bool | `true` | | +| service.externalIPs | list | `[]` | | +| service.labels | object | `{}` | | +| service.loadBalancerSourceRanges | list | `[]` | | +| service.spec | object | `{}` | | +| service.type | string | `"LoadBalancer"` | | +| serviceAccount.name | string | `""` | | +| serviceAccountAnnotations | object | `{}` | | +| tlsOptions.default.cipherSuites[0] | string | `"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"` | | +| tlsOptions.default.cipherSuites[1] | string | `"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384"` | | +| tlsOptions.default.cipherSuites[2] | string | `"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305"` | | +| tlsOptions.default.cipherSuites[3] | string | `"TLS_AES_128_GCM_SHA256"` | | +| tlsOptions.default.cipherSuites[4] | string | `"TLS_AES_256_GCM_SHA384"` | | +| tlsOptions.default.cipherSuites[5] | string | `"TLS_CHACHA20_POLY1305_SHA256"` | | +| tlsOptions.default.curvePreferences[0] | string | `"CurveP521"` | | +| tlsOptions.default.curvePreferences[1] | string | `"CurveP384"` | | +| tlsOptions.default.minVersion | string | `"VersionTLS12"` | | +| tlsOptions.default.sniStrict | bool | `false` | | +| tolerations | list | `[]` | | +| volumes | list | `[]` | | + +All Rights Reserved - The TrueCharts Project diff --git a/stable/traefik/6.13.15/ix_values.yaml b/stable/traefik/6.13.15/ix_values.yaml new file mode 100644 index 00000000000..89d728dbfeb --- /dev/null +++ b/stable/traefik/6.13.15/ix_values.yaml @@ -0,0 +1,332 @@ +# Default values for Traefik +image: + repository: traefik + # defaults to appVersion + tag: v2.4 + pullPolicy: IfNotPresent + +# +# Configure the deployment +# +deployment: + enabled: true + # Can be either Deployment or DaemonSet + kind: Deployment + # Number of pods of the deployment (only applies when kind == Deployment) + replicas: 1 + # Additional deployment annotations (e.g. for jaeger-operator sidecar injection) + annotations: {} + # Additional deployment labels (e.g. for filtering deployment by custom labels) + labels: {} + # Additional pod annotations (e.g. for mesh injection or prometheus scraping) + podAnnotations: {} + # Additional Pod labels (e.g. for filtering Pod by custom labels) + podLabels: {} + # Additional containers (e.g. for metric offloading sidecars) + additionalContainers: [] + # https://docs.datadoghq.com/developers/dogstatsd/unix_socket/?tab=host + # - name: socat-proxy + # image: alpine/socat:1.0.5 + # args: ["-s", "-u", "udp-recv:8125", "unix-sendto:/socket/socket"] + # volumeMounts: + # - name: dsdsocket + # mountPath: /socket + # Additional volumes available for use with initContainers and additionalContainers + additionalVolumes: [] + # - name: dsdsocket + # hostPath: + # path: /var/run/statsd-exporter + # Additional initContainers (e.g. for setting file permission as shown below) + initContainers: [] + # The "volume-permissions" init container is required if you run into permission issues. + # Related issue: https://github.com/traefik/traefik/issues/6972 + # - name: volume-permissions + # image: busybox:1.31.1 + # command: ["sh", "-c", "chmod -Rv 600 /data/*"] + # volumeMounts: + # - name: data + # mountPath: /data + # Custom pod DNS policy. Apply if `hostNetwork: true` + # dnsPolicy: ClusterFirstWithHostNet + # Additional imagePullSecrets + imagePullSecrets: [] + # - name: myRegistryKeySecretName + +# Pod disruption budget +podDisruptionBudget: + enabled: false + # maxUnavailable: 1 + # minAvailable: 0 + +# Use ingressClass. Ignored if Traefik version < 2.3 / kubernetes < 1.18.x +ingressClass: + # true is not unit-testable yet, pending https://github.com/rancher/helm-unittest/pull/12 + enabled: false + isDefaultClass: false + # Use to force a networking.k8s.io API Version for certain CI/CD applications. E.g. "v1beta1" + fallbackApiVersion: + +# Activate Pilot integration +pilot: + enabled: false + token: "" + # Toggle Pilot Dashboard + # dashboard: false + +# Enable experimental features +experimental: + plugins: + enabled: false + kubernetesGateway: + enabled: false + appLabelSelector: "traefik" + certificates: [] + # - group: "core" + # kind: "Secret" + # name: "mysecret" + +# Create an IngressRoute for the dashboard +ingressRoute: + dashboard: + enabled: true + # Additional ingressRoute annotations (e.g. for kubernetes.io/ingress.class) + annotations: {} + # Additional ingressRoute labels (e.g. for filtering IngressRoute by custom labels) + labels: {} + +rollingUpdate: + maxUnavailable: 1 + maxSurge: 1 + + +# +# Configure providers +# +providers: + kubernetesCRD: + enabled: true + namespaces: [] + # - "default" + kubernetesIngress: + enabled: true + # labelSelector: environment=production,method=traefik + namespaces: [] + # - "default" + # IP used for Kubernetes Ingress endpoints + publishedService: + enabled: false + # Published Kubernetes Service to copy status from. Format: namespace/servicename + # By default this Traefik service + # pathOverride: "" + +# +# Add volumes to the traefik pod. The volume name will be passed to tpl. +# This can be used to mount a cert pair or a configmap that holds a config.toml file. +# After the volume has been mounted, add the configs into traefik by using the `additionalArguments` list below, eg: +# additionalArguments: +# - "--providers.file.filename=/config/dynamic.toml" +# - "--ping" +# - "--ping.entrypoint=web" +volumes: [] +# - name: public-cert +# mountPath: "/certs" +# type: secret +# - name: '{{ printf "%s-configs" .Release.Name }}' +# mountPath: "/config" +# type: configMap + +# Additional volumeMounts to add to the Traefik container +additionalVolumeMounts: [] + # For instance when using a logshipper for access logs + # - name: traefik-logs + # mountPath: /var/log/traefik + +# Logs +# https://docs.traefik.io/observability/logs/ +logs: + # Traefik logs concern everything that happens to Traefik itself (startup, configuration, events, shutdown, and so on). + general: + # By default, the logs use a text format (common), but you can + # also ask for the json format in the format option + # format: json + # By default, the level is set to ERROR. Alternative logging levels are DEBUG, PANIC, FATAL, ERROR, WARN, and INFO. + level: INFO + access: + # To enable access logs + enabled: false + # By default, logs are written using the Common Log Format (CLF). + # To write logs in JSON, use json in the format option. + # If the given format is unsupported, the default (CLF) is used instead. + # format: json + # To write the logs in an asynchronous fashion, specify a bufferingSize option. + # This option represents the number of log lines Traefik will keep in memory before writing + # them to the selected output. In some cases, this option can greatly help performances. + # bufferingSize: 100 + # Filtering https://docs.traefik.io/observability/access-logs/#filtering + filters: {} + # statuscodes: "200,300-302" + # retryattempts: true + # minduration: 10ms + # Fields + # https://docs.traefik.io/observability/access-logs/#limiting-the-fieldsincluding-headers + fields: + general: + defaultmode: keep + names: {} + # Examples: + # ClientUsername: drop + headers: + defaultmode: drop + names: {} + # Examples: + # User-Agent: redact + # Authorization: drop + # Content-Type: keep + +globalArguments: + - "--global.checknewversion" + +# +# Configure Traefik static configuration +# Additional arguments to be passed at Traefik's binary +# All available options available on https://docs.traefik.io/reference/static-configuration/cli/ +## Use curly braces to pass values: `helm install --set="additionalArguments={--providers.kubernetesingress.ingressclass=traefik-internal,--log.level=DEBUG}"` +additionalArguments: + - "--metrics.prometheus" + - "--ping" + - "--serverstransport.insecureskipverify=true" + +# Environment variables to be passed to Traefik's binary +env: [] +# - name: SOME_VAR +# value: some-var-value +# - name: SOME_VAR_FROM_CONFIG_MAP +# valueFrom: +# configMapRef: +# name: configmap-name +# key: config-key +# - name: SOME_SECRET +# valueFrom: +# secretKeyRef: +# name: secret-name +# key: secret-key + +envFrom: [] + +# TLS Options are created as TLSOption CRDs +# https://doc.traefik.io/traefik/https/tls/#tls-options +# Example: +tlsOptions: + default: + sniStrict: false + minVersion: VersionTLS12 + curvePreferences: + - CurveP521 + - CurveP384 + cipherSuites: + - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 + - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 + - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 + - TLS_AES_128_GCM_SHA256 + - TLS_AES_256_GCM_SHA384 + - TLS_CHACHA20_POLY1305_SHA256 + +# Options for the main traefik service, where the entrypoints traffic comes +# from. +service: + enabled: true + type: LoadBalancer + # Additional annotations (e.g. for cloud provider specific config) + annotations: {} + # Additional service labels (e.g. for filtering Service by custom labels) + labels: {} + # Additional entries here will be added to the service spec. Cannot contains + # type, selector or ports entries. + spec: {} + # externalTrafficPolicy: Cluster + # loadBalancerIP: "1.2.3.4" + # clusterIP: "2.3.4.5" + loadBalancerSourceRanges: [] + # - 192.168.0.1/32 + # - 172.16.0.0/16 + externalIPs: [] + # - 1.2.3.4 + +## Create HorizontalPodAutoscaler object. +## +autoscaling: + enabled: false +# minReplicas: 1 +# maxReplicas: 10 +# metrics: +# - type: Resource +# resource: +# name: cpu +# targetAverageUtilization: 60 +# - type: Resource +# resource: +# name: memory +# targetAverageUtilization: 60 + +# Enable persistence using Persistent Volume Claims +# ref: http://kubernetes.io/docs/user-guide/persistent-volumes/ +# After the pvc has been mounted, add the configs into traefik by using the `additionalArguments` list below, eg: +# additionalArguments: +# - "--certificatesresolvers.le.acme.storage=/data/acme.json" +# It will persist TLS certificates. +persistence: + enabled: false + name: data + accessMode: ReadWriteOnce + size: 128Mi + path: /data + +# Whether Role Based Access Control objects like roles and rolebindings should be created +rbac: + enabled: true + + # If set to false, installs ClusterRole and ClusterRoleBinding so Traefik can be used across namespaces. + # If set to true, installs namespace-specific Role and RoleBinding and requires provider configuration be set to that same namespace + namespaced: false + +# Enable to create a PodSecurityPolicy and assign it to the Service Account via RoleBinding or ClusterRoleBinding +podSecurityPolicy: + enabled: false + +# The service account the pods will use to interact with the Kubernetes API +serviceAccount: + # If set, an existing service account is used + # If not set, a service account is created automatically using the fullname template + name: "" + +# Additional serviceAccount annotations (e.g. for oidc authentication) +serviceAccountAnnotations: {} + +affinity: {} +# # This example pod anti-affinity forces the scheduler to put traefik pods +# # on nodes where no other traefik pods are scheduled. +# # It should be used when hostNetwork: true to prevent port conflicts +# podAntiAffinity: +# requiredDuringSchedulingIgnoredDuringExecution: +# - labelSelector: +# matchExpressions: +# - key: app +# operator: In +# values: +# - {{ template "traefik.name" . }} +# topologyKey: failure-domain.beta.kubernetes.io/zone +nodeSelector: {} +tolerations: [] + +# Pods can have priority. +# Priority indicates the importance of a Pod relative to other Pods. +priorityClassName: "" + +# Set the container security context +# To run the container with ports below 1024 this will need to be adjust to run as root +securityContext: + capabilities: + drop: [ALL] + +portalhook: + enabled: true diff --git a/stable/traefik/6.13.15/questions.yaml b/stable/traefik/6.13.15/questions.yaml new file mode 100644 index 00000000000..6031935fd58 --- /dev/null +++ b/stable/traefik/6.13.15/questions.yaml @@ -0,0 +1,508 @@ +groups: + - name: "Container Image" + description: "Image to be used for container" + - name: "Controller" + description: "Configure workload deployment" + - name: "Container Configuration" + description: "additional container configuration" + - name: "App Configuration" + description: "App specific config options" + - name: "Middlewares" + description: "Traefik Middlewares" + - name: "Networking and Services" + description: "Configure Network and Services for container" + - name: "Storage and Persistence" + description: "Persist and share data that is separate from the container" + - name: "Ingress" + description: "Ingress Configuration" + - name: "Security and Permissions" + description: "Configure security context and permissions" + - name: "Resources and Devices" + description: "Specify resources/devices to be allocated to workload" + - name: "Advanced" + description: "Advanced Configuration" +portals: + web_portal: + protocols: + - "$kubernetes-resource_configmap_portal_protocol" + host: + - "$kubernetes-resource_configmap_portal_host" + ports: + - "$kubernetes-resource_configmap_portal_port" + path: "/dashboard/" +questions: + - variable: portal + group: "Container Image" + label: "Configure Portal Button" + schema: + type: dict + hidden: true + attrs: + - variable: enabled + label: "Enable" + description: "enable the portal button" + schema: + hidden: true + editable: false + type: boolean + default: true + + - variable: pilot + label: "Traefik Pilot" + group: "App Configuration" + schema: + type: dict + attrs: + - variable: enabled + label: "enabled" + schema: + type: boolean + default: false + - variable: token + label: "token" + schema: + type: string + default: "" + - variable: dashboard + label: "Pilot Dashboard" + schema: + type: boolean + default: false + + - variable: middlewares + label: "" + group: "Middlewares" + schema: + type: dict + attrs: + - variable: basicAuth + label: "basicAuth" + schema: + type: list + default: [] + items: + - variable: basicAuthEntry + label: "" + schema: + type: dict + attrs: + - variable: name + label: "Name" + schema: + type: string + required: true + default: "" + - variable: users + label: "Users" + schema: + type: list + default: [] + items: + - variable: usersEntry + label: "" + schema: + type: dict + attrs: + - variable: username + label: "Username" + schema: + type: string + required: true + default: "" + - variable: password + label: "Password" + schema: + type: string + required: true + default: "" + + + - variable: forwardAuth + label: "forwardAuth" + schema: + type: list + default: [] + items: + - variable: basicAuthEntry + label: "" + schema: + type: dict + attrs: + - variable: name + label: "Name" + schema: + type: string + required: true + default: "" + - variable: address + label: "Address" + schema: + type: string + required: true + default: "" + - variable: trustForwardHeader + label: "trustForwardHeader" + schema: + type: boolean + default: false + - variable: authResponseHeadersRegex + label: "authResponseHeadersRegex" + schema: + type: string + default: "" + - variable: authResponseHeaders + label: "authResponseHeaders" + schema: + type: list + default: [] + items: + - variable: authResponseHeadersEntry + label: "" + schema: + type: string + default: "" + - variable: authRequestHeaders + label: "authRequestHeaders" + schema: + type: list + default: [] + items: + - variable: authRequestHeadersEntry + label: "" + schema: + type: string + default: "" + - variable: chain + label: "chain" + schema: + type: list + default: [] + items: + - variable: chainEntry + label: "" + schema: + type: dict + attrs: + - variable: name + label: "Name" + schema: + type: string + required: true + - variable: middlewares + label: "Middlewares to Chain" + schema: + type: list + default: [] + items: + - variable: name + label: "Name" + schema: + type: string + required: true + default: "" + + - variable: redirectScheme + label: "redirectScheme" + schema: + type: list + default: [] + items: + - variable: redirectSchemeEntry + label: "" + schema: + type: dict + attrs: + - variable: name + label: "Name" + schema: + type: string + required: true + - variable: scheme + label: "Scheme" + schema: + type: string + required: true + default: "https" + enum: + - value: "https" + description: "https" + - value: "http" + description: "http" + - variable: permanent + label: "Permanent" + schema: + type: boolean + required: true + default: false + + - variable: rateLimit + label: "rateLimit" + schema: + type: list + default: [] + items: + - variable: rateLimitEntry + label: "" + schema: + type: dict + attrs: + - variable: name + label: "Name" + schema: + type: string + required: true + - variable: average + label: "Average" + schema: + type: int + required: true + default: 300 + - variable: burst + label: "Burst" + schema: + type: int + required: true + default: 200 + + - variable: hostNetwork + group: "Networking and Services" + label: "Enable Host Networking" + schema: + type: boolean + default: false + + - variable: ports + label: "(Advanced) Traefik Entrypoints" + group: "Networking and Services" + schema: + type: dict + attrs: + - variable: traefik + label: "traefik internal" + schema: + type: dict + attrs: + - variable: port + label: "Internal Port" + description: "(advanced) Port inside the container network" + schema: + type: int + required: true + hidden: true + default: 9000 + - variable: expose + label: "Expose to Outside" + description: "Port to the outside of all(!) nodes" + schema: + type: boolean + default: true + - variable: exposedPort + label: "Outside Port" + description: "Port on the outside" + schema: + type: int + show_if: [["expose", "=", true]] + default: 9000 + - variable: protocol + label: "Protocol" + description: "TCP or UDP reverse proxying?" + schema: + type: string + default: "TCP" + - variable: web + label: "web" + schema: + type: dict + attrs: + - variable: port + label: "Internal Port" + description: "(advanced) Port inside the container network" + schema: + type: int + required: true + hidden: true + default: 9080 + - variable: expose + label: "Expose to Outside" + description: "Port to the outside of all(!) nodes" + schema: + type: boolean + default: true + - variable: exposedPort + label: "Outside Port" + description: "Port to the outside of all(!) nodes" + schema: + type: int + show_if: [["expose", "=", true]] + required: true + default: 9080 + - variable: protocol + label: "Protocol" + description: "TCP or UDP reverse proxying?" + schema: + type: string + required: true + default: "TCP" + hidden: true + - variable: redirectEnable + label: "Enable Redirect" + schema: + type: boolean + default: true + show_subquestions_if: true + subquestions: + - variable: redirectTo + label: "Target Entrypoint" + description: "Select the Target Entrypoint to redirect to" + schema: + type: string + required: true + default: "websecure" + - variable: websecure + label: "websecure" + schema: + type: dict + attrs: + - variable: port + label: "Internal Port" + description: "(advanced) Port inside the container network" + schema: + type: int + required: true + hidden: true + default: 9443 + - variable: expose + label: "Expose to Outside" + description: "Port to the outside of all(!) nodes" + schema: + type: boolean + default: true + - variable: exposedPort + label: "Outside Port" + description: "Port to the outside of all(!) nodes" + schema: + type: int + show_if: [["expose", "=", true]] + required: true + default: 9443 + - variable: protocol + label: "Protocol" + description: "TCP or UDP reverse proxying?" + schema: + type: string + required: true + default: "TCP" + hidden: true + - variable: tls + label: "tls" + schema: + type: dict + hidden: true + attrs: + - variable: enabled + label: "enabled" + schema: + type: boolean + default: true + hidden: true + + - variable: securityContext + group: "Security and Permissions" + label: "Security Context" + schema: + type: dict + attrs: + - variable: privileged + label: "Enable privileged mode for Common-Chart based charts" + schema: + type: boolean + default: false + - variable: runAsNonRoot + label: "runAsNonRoot" + schema: + type: boolean + default: true + - variable: runAsUser + label: "runAsUser" + description: "The UserID of the user running the application" + schema: + type: int + default: 65532 + - variable: runAsGroup + label: "runAsGroup" + description: The groupID this App of the user running the application" + schema: + type: int + default: 65532 + + + + - variable: podSecurityContext + group: "Security and Permissions" + label: "Pod Security Context" + schema: + type: dict + attrs: + - variable: fsGroup + label: "fsGroup" + description: "The group that should own ALL storage." + schema: + type: int + default: 65532 + - variable: supplementalGroups + label: "supplemental Groups" + schema: + type: list + default: [] + items: + - variable: supplementalGroupsEntry + label: "supplemental Group" + schema: + type: int + - variable: fsGroupChangePolicy + label: "When should we take ownership?" + schema: + type: string + default: "OnRootMismatch" + enum: + - value: "OnRootMismatch" + description: "OnRootMismatch" + - value: "Always" + description: "Always" + + - variable: resources + group: "Resources and Devices" + label: "" + schema: + type: dict + attrs: + - variable: limits + label: "Advanced Limit Resource Consumption" + schema: + type: dict + attrs: + - variable: cpu + label: "CPU" + schema: + type: string + default: "2000m" + - variable: memory + label: "Memory RAM" + schema: + type: string + default: "2Gi" + - variable: requests + label: "Advanced Request minimum resources required" + schema: + type: dict + attrs: + - variable: cpu + label: "CPU" + schema: + type: string + default: "10m" + - variable: memory + label: "Memory RAM" + schema: + type: string + default: "50Mi" diff --git a/stable/traefik/6.13.15/templates/_helpers.tpl b/stable/traefik/6.13.15/templates/_helpers.tpl new file mode 100644 index 00000000000..f7b055fa82e --- /dev/null +++ b/stable/traefik/6.13.15/templates/_helpers.tpl @@ -0,0 +1,62 @@ +{{/* vim: set filetype=mustache: */}} + +{{/* +Expand the name of the chart. +*/}} +{{- define "traefik.name" -}} +{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}} +{{- end -}} + +{{/* +Create chart name and version as used by the chart label. +*/}} +{{- define "traefik.chart" -}} +{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" -}} +{{- end -}} + +{{/* +Create a default fully qualified app name. +We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). +If release name contains chart name it will be used as a full name. +*/}} +{{- define "traefik.fullname" -}} +{{- if .Values.fullnameOverride -}} +{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" -}} +{{- else -}} +{{- $name := default .Chart.Name .Values.nameOverride -}} +{{- if contains $name .Release.Name -}} +{{- .Release.Name | trunc 63 | trimSuffix "-" -}} +{{- else -}} +{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}} +{{- end -}} +{{- end -}} +{{- end -}} + +{{/* +The name of the service account to use +*/}} +{{- define "traefik.serviceAccountName" -}} +{{- default (include "traefik.fullname" .) .Values.serviceAccount.name -}} +{{- end -}} + +{{/* +Construct the path for the providers.kubernetesingress.ingressendpoint.publishedservice. +By convention this will simply use the / to match the name of the +service generated. +Users can provide an override for an explicit service they want bound via `.Values.providers.kubernetesIngress.publishedService.pathOverride` +*/}} +{{- define "providers.kubernetesIngress.publishedServicePath" -}} +{{- $defServiceName := printf "%s/%s" .Release.Namespace (include "traefik.fullname" .) -}} +{{- $servicePath := default $defServiceName .Values.providers.kubernetesIngress.publishedService.pathOverride }} +{{- print $servicePath | trimSuffix "-" -}} +{{- end -}} + +{{/* +Construct a comma-separated list of whitelisted namespaces +*/}} +{{- define "providers.kubernetesIngress.namespaces" -}} +{{- default .Release.Namespace (join "," .Values.providers.kubernetesIngress.namespaces) }} +{{- end -}} +{{- define "providers.kubernetesCRD.namespaces" -}} +{{- default .Release.Namespace (join "," .Values.providers.kubernetesCRD.namespaces) }} +{{- end -}} diff --git a/stable/traefik/6.13.15/templates/_podtemplate.tpl b/stable/traefik/6.13.15/templates/_podtemplate.tpl new file mode 100644 index 00000000000..21e60ceba92 --- /dev/null +++ b/stable/traefik/6.13.15/templates/_podtemplate.tpl @@ -0,0 +1,265 @@ +{{- define "traefik.podTemplate" }} + metadata: + annotations: + {{- with .Values.deployment.podAnnotations }} + {{- toYaml . | nindent 8 }} + {{- end }} + labels: + app.kubernetes.io/name: {{ template "traefik.name" . }} + helm.sh/chart: {{ template "traefik.chart" . }} + app.kubernetes.io/managed-by: {{ .Release.Service }} + app.kubernetes.io/instance: {{ .Release.Name }} + {{- with .Values.deployment.podLabels }} + {{- toYaml . | nindent 8 }} + {{- end }} + spec: + {{- with .Values.deployment.imagePullSecrets }} + imagePullSecrets: + {{- toYaml . | nindent 8 }} + {{- end }} + serviceAccountName: {{ include "traefik.serviceAccountName" . }} + terminationGracePeriodSeconds: 60 + hostNetwork: {{ .Values.hostNetwork }} + {{- with .Values.deployment.dnsPolicy }} + dnsPolicy: {{ . }} + {{- end }} + {{- with .Values.deployment.initContainers }} + initContainers: + {{- toYaml . | nindent 6 }} + {{- end }} + containers: + - image: "{{ .Values.image.repository }}:{{ default .Chart.AppVersion .Values.image.tag }}" + imagePullPolicy: {{ .Values.image.pullPolicy }} + name: {{ template "traefik.fullname" . }} + resources: + {{- with .Values.resources }} + {{- toYaml . | nindent 10 }} + {{- end }} + readinessProbe: + httpGet: + path: /ping + port: {{ default .Values.ports.traefik.port .Values.ports.traefik.healthchecksPort }} + failureThreshold: 1 + initialDelaySeconds: 10 + periodSeconds: 10 + successThreshold: 1 + timeoutSeconds: 2 + livenessProbe: + httpGet: + path: /ping + port: {{ default .Values.ports.traefik.port .Values.ports.traefik.healthchecksPort }} + failureThreshold: 3 + initialDelaySeconds: 10 + periodSeconds: 10 + successThreshold: 1 + timeoutSeconds: 2 + ports: + {{- range $name, $config := .Values.ports }} + {{- if $config }} + - name: {{ $name | quote }} + containerPort: {{ $config.port }} + {{- if $config.hostPort }} + hostPort: {{ $config.hostPort }} + {{- end }} + {{- if $config.hostIP }} + hostIP: {{ $config.hostIP }} + {{- end }} + protocol: {{ default "TCP" $config.protocol | quote }} + {{- end }} + {{- end }} + {{- with .Values.securityContext }} + securityContext: + {{- toYaml . | nindent 10 }} + {{- end }} + volumeMounts: + - name: {{ .Values.persistence.name }} + mountPath: {{ .Values.persistence.path }} + {{- if .Values.persistence.subPath }} + subPath: {{ .Values.persistence.subPath }} + {{- end }} + - name: tmp + mountPath: /tmp + {{- $root := . }} + {{- range .Values.volumes }} + - name: {{ tpl (.name) $root }} + mountPath: {{ .mountPath }} + readOnly: true + {{- end }} + {{- if .Values.experimental.plugins.enabled }} + - name: plugins + mountPath: "/plugins-storage" + {{- end }} + {{- if .Values.additionalVolumeMounts }} + {{- toYaml .Values.additionalVolumeMounts | nindent 10 }} + {{- end }} + args: + {{- with .Values.globalArguments }} + {{- range . }} + - {{ . | quote }} + {{- end }} + {{- end }} + {{- range $name, $config := .Values.ports }} + {{- if $config }} + - "--entryPoints.{{$name}}.address=:{{ $config.port }}/{{ default "tcp" $config.protocol | lower }}" + {{- end }} + {{- end }} + - "--api.dashboard=true" + - "--ping=true" + {{- if .Values.providers.kubernetesCRD.enabled }} + - "--providers.kubernetescrd" + {{- end }} + {{- if .Values.providers.kubernetesIngress.enabled }} + - "--providers.kubernetesingress" + {{- if and .Values.service.enabled .Values.providers.kubernetesIngress.publishedService.enabled }} + - "--providers.kubernetesingress.ingressendpoint.publishedservice={{ template "providers.kubernetesIngress.publishedServicePath" . }}" + {{- end }} + {{- if .Values.providers.kubernetesIngress.labelSelector }} + - "--providers.kubernetesingress.labelSelector={{ .Values.providers.kubernetesIngress.labelSelector }}" + {{- end }} + {{- end }} + {{- if .Values.experimental.kubernetesGateway.enabled }} + - "--providers.kubernetesgateway" + - "--experimental.kubernetesgateway" + {{- end }} + {{- if and .Values.rbac.enabled .Values.rbac.namespaced }} + {{- if .Values.providers.kubernetesCRD.enabled }} + - "--providers.kubernetescrd.namespaces={{ template "providers.kubernetesCRD.namespaces" . }}" + {{- end }} + {{- if .Values.providers.kubernetesIngress.enabled }} + - "--providers.kubernetesingress.namespaces={{ template "providers.kubernetesIngress.namespaces" . }}" + {{- end }} + {{- end }} + {{- range $entrypoint, $config := $.Values.ports }} + {{- if $config.redirectTo }} + {{- $toPort := index $.Values.ports $config.redirectTo }} + - "--entrypoints.{{ $entrypoint }}.http.redirections.entryPoint.to=:{{ $toPort.exposedPort }}" + - "--entrypoints.{{ $entrypoint }}.http.redirections.entryPoint.scheme=https" + {{- end }} + {{- if $config.tls }} + {{- if $config.tls.enabled }} + - "--entrypoints.{{ $entrypoint }}.http.tls=true" + {{- if $config.tls.options }} + - "--entrypoints.{{ $entrypoint }}.http.tls.options={{ $config.tls.options }}" + {{- end }} + {{- if $config.tls.certResolver }} + - "--entrypoints.{{ $entrypoint }}.http.tls.certResolver={{ $config.tls.certResolver }}" + {{- end }} + {{- if $config.tls.domains }} + {{- range $index, $domain := $config.tls.domains }} + {{- if $domain.main }} + - "--entrypoints.{{ $entrypoint }}.http.tls.domains[{{ $index }}].main={{ $domain.main }}" + {{- end }} + {{- if $domain.sans }} + - "--entrypoints.{{ $entrypoint }}.http.tls.domains[{{ $index }}].sans={{ join "," $domain.sans }}" + {{- end }} + {{- end }} + {{- end }} + {{- end }} + {{- end }} + {{- end }} + {{- with .Values.logs }} + {{- if .general.format }} + - "--log.format={{ .general.format }}" + {{- end }} + {{- if ne .general.level "ERROR" }} + - "--log.level={{ .general.level | upper }}" + {{- end }} + {{- if .access.enabled }} + - "--accesslog=true" + {{- if .access.format }} + - "--accesslog.format={{ .access.format }}" + {{- end }} + {{- if .access.bufferingsize }} + - "--accesslog.bufferingsize={{ .access.bufferingsize }}" + {{- end }} + {{- if .access.filters }} + {{- if .access.filters.statuscodes }} + - "--accesslog.filters.statuscodes={{ .access.filters.statuscodes }}" + {{- end }} + {{- if .access.filters.retryattempts }} + - "--accesslog.filters.retryattempts" + {{- end }} + {{- if .access.filters.minduration }} + - "--accesslog.filters.minduration={{ .access.filters.minduration }}" + {{- end }} + {{- end }} + - "--accesslog.fields.defaultmode={{ .access.fields.general.defaultmode }}" + {{- range $fieldname, $fieldaction := .access.fields.general.names }} + - "--accesslog.fields.names.{{ $fieldname }}={{ $fieldaction }}" + {{- end }} + - "--accesslog.fields.headers.defaultmode={{ .access.fields.headers.defaultmode }}" + {{- range $fieldname, $fieldaction := .access.fields.headers.names }} + - "--accesslog.fields.headers.names.{{ $fieldname }}={{ $fieldaction }}" + {{- end }} + {{- end }} + {{- end }} + {{- if .Values.pilot.enabled }} + - "--pilot.token={{ .Values.pilot.token }}" + {{- end }} + {{- if hasKey .Values.pilot "dashboard" }} + - "--pilot.dashboard={{ .Values.pilot.dashboard }}" + {{- end }} + {{- with .Values.additionalArguments }} + {{- range . }} + - {{ . | quote }} + {{- end }} + {{- end }} + {{- with .Values.env }} + env: + {{- toYaml . | nindent 10 }} + {{- end }} + {{- with .Values.envFrom }} + envFrom: + {{- toYaml . | nindent 10 }} + {{- end }} + {{- if .Values.deployment.additionalContainers }} + {{- toYaml .Values.deployment.additionalContainers | nindent 6 }} + {{- end }} + volumes: + - name: {{ .Values.persistence.name }} + {{- if .Values.persistence.enabled }} + persistentVolumeClaim: + claimName: {{ default (include "traefik.fullname" .) .Values.persistence.existingClaim }} + {{- else }} + emptyDir: {} + {{- end }} + - name: tmp + emptyDir: {} + {{- $root := . }} + {{- range .Values.volumes }} + - name: {{ tpl (.name) $root }} + {{- if eq .type "secret" }} + secret: + secretName: {{ tpl (.name) $root }} + {{- else if eq .type "configMap" }} + configMap: + name: {{ tpl (.name) $root }} + {{- end }} + {{- end }} + {{- if .Values.deployment.additionalVolumes }} + {{- toYaml .Values.deployment.additionalVolumes | nindent 8 }} + {{- end }} + {{- if .Values.experimental.plugins.enabled }} + - name: plugins + emptyDir: {} + {{- end }} + {{- with .Values.affinity }} + affinity: + {{- toYaml . | nindent 8 }} + {{- end }} + {{- with .Values.tolerations }} + tolerations: + {{- toYaml . | nindent 8 }} + {{- end }} + {{- with .Values.nodeSelector }} + nodeSelector: + {{- toYaml . | nindent 8 }} + {{- end }} + {{- if .Values.priorityClassName }} + priorityClassName: {{ .Values.priorityClassName }} + {{- end }} + {{- with .Values.podSecurityContext }} + securityContext: + {{- toYaml . | nindent 8 }} + {{- end }} +{{ end -}} diff --git a/stable/traefik/6.13.15/templates/custom/common.yaml b/stable/traefik/6.13.15/templates/custom/common.yaml new file mode 100644 index 00000000000..e69de29bb2d diff --git a/stable/traefik/6.13.15/templates/custom/middleware-namespace.yaml b/stable/traefik/6.13.15/templates/custom/middleware-namespace.yaml new file mode 100644 index 00000000000..16156ee5e12 --- /dev/null +++ b/stable/traefik/6.13.15/templates/custom/middleware-namespace.yaml @@ -0,0 +1,7 @@ +apiVersion: v1 +kind: Namespace +metadata: + name: traefikmiddlewares + namespace: traefikmiddlewares + annotations: + "helm.sh/hook": pre-install diff --git a/stable/traefik/6.13.15/templates/custom/middlewares/basic-middleware.yaml b/stable/traefik/6.13.15/templates/custom/middlewares/basic-middleware.yaml new file mode 100644 index 00000000000..98f7d1c170c --- /dev/null +++ b/stable/traefik/6.13.15/templates/custom/middlewares/basic-middleware.yaml @@ -0,0 +1,58 @@ +--- +apiVersion: traefik.containo.us/v1alpha1 +kind: Middleware +metadata: + name: compress + namespace: traefikmiddlewares +spec: + compress: {} +--- +# Here, an average of 300 requests per second is allowed. +# In addition, a burst of 200 requests is allowed. +apiVersion: traefik.containo.us/v1alpha1 +kind: Middleware +metadata: + name: basic-ratelimit + namespace: traefikmiddlewares +spec: + rateLimit: + average: 300 + burst: 200 +--- +apiVersion: traefik.containo.us/v1alpha1 +kind: Middleware +metadata: + name: basic-secure-headers + namespace: traefikmiddlewares +spec: + headers: + accessControlAllowMethods: + - GET + - OPTIONS + - HEAD + - PUT + accessControlMaxAge: 100 + sslRedirect: true + # stsSeconds: 63072000 + # stsIncludeSubdomains: false + # stsPreload: false + # forceSTSHeader: true + contentTypeNosniff: true + browserXssFilter: true + sslForceHost: true + referrerPolicy: same-origin + customResponseHeaders: + X-Robots-Tag: 'none' + server: '' +--- +apiVersion: traefik.containo.us/v1alpha1 +kind: Middleware +metadata: + name: chain-basic + namespace: traefikmiddlewares +spec: + chain: + middlewares: + - name: basic-ratelimit + - name: basic-secure-headers + - name: compress diff --git a/stable/traefik/6.13.15/templates/custom/middlewares/basicauth.yaml b/stable/traefik/6.13.15/templates/custom/middlewares/basicauth.yaml new file mode 100644 index 00000000000..4e0f326a2f4 --- /dev/null +++ b/stable/traefik/6.13.15/templates/custom/middlewares/basicauth.yaml @@ -0,0 +1,29 @@ +{{ range $index, $middlewareData := .Values.middlewares.basicAuth }} +--- +{{- $users := list }} +{{ range $index, $userdata := $middlewareData.users }} + {{ $users = append $users ( htpasswd $userdata.username $userdata.password ) }} +{{ end }} + +apiVersion: v1 +kind: Secret +metadata: + name: {{printf "%v-%v" $middlewareData.name "secret" }} + namespace: traefikmiddlewares +type: Opaque +stringData: + users: | + {{- range $index, $user := $users }} + {{ printf "%s" $user }} + {{- end }} +--- +# Declaring the user list +apiVersion: traefik.containo.us/v1alpha1 +kind: Middleware +metadata: + name: {{ $middlewareData.name }} + namespace: traefikmiddlewares +spec: + basicAuth: + secret: {{printf "%v-%v" $middlewareData.name "secret" }} +{{ end }} diff --git a/stable/traefik/6.13.15/templates/custom/middlewares/chain.yaml b/stable/traefik/6.13.15/templates/custom/middlewares/chain.yaml new file mode 100644 index 00000000000..ef592c255ba --- /dev/null +++ b/stable/traefik/6.13.15/templates/custom/middlewares/chain.yaml @@ -0,0 +1,16 @@ +{{ range $index, $middlewareData := .Values.middlewares.chain }} + +--- +# Declaring the user list +apiVersion: traefik.containo.us/v1alpha1 +kind: Middleware +metadata: + name: {{ $middlewareData.name }} + namespace: traefikmiddlewares +spec: + chain: + middlewares: + {{ range $index, $chainData := .Values.middlewares.chainmiddlewares }} + - name: {{ printf "%v-%v@%v" "traefikmiddlewares" $chainData.name "kubernetescrd" }} + {{ end }} +{{ end }} diff --git a/stable/traefik/6.13.15/templates/custom/middlewares/forwardauth.yaml b/stable/traefik/6.13.15/templates/custom/middlewares/forwardauth.yaml new file mode 100644 index 00000000000..bb90d33775e --- /dev/null +++ b/stable/traefik/6.13.15/templates/custom/middlewares/forwardauth.yaml @@ -0,0 +1,23 @@ +{{ range $index, $middlewareData := .Values.middlewares.forwardAuth }} +--- +apiVersion: traefik.containo.us/v1alpha1 +kind: Middleware +metadata: + name: {{ $middlewareData.name }} + namespace: traefikmiddlewares +spec: + forwardAuth: + address: {{ $middlewareData.address }} + {{- if $middlewareData.authResponseHeaders }} + authResponseHeaders: {{ $middlewareData.authResponseHeaders }} + {{- end }} + {{- if $middlewareData.authRequestHeaders }} + authRequestHeaders: {{ $middlewareData.authRequestHeaders }} + {{- end }} + {{- if $middlewareData.authResponseHeadersRegex }} + authResponseHeadersRegex: {{ $middlewareData.authResponseHeadersRegex }} + {{- end }} + {{- if $middlewareData.trustForwardHeader }} + trustForwardHeader: true + {{- end }} +{{ end }} diff --git a/stable/traefik/6.13.15/templates/custom/middlewares/ratelimit.yaml b/stable/traefik/6.13.15/templates/custom/middlewares/ratelimit.yaml new file mode 100644 index 00000000000..b4bfa938e6e --- /dev/null +++ b/stable/traefik/6.13.15/templates/custom/middlewares/ratelimit.yaml @@ -0,0 +1,14 @@ +{{ range $index, $middlewareData := .Values.middlewares.rateLimit }} + +--- +# Declaring the user list +apiVersion: traefik.containo.us/v1alpha1 +kind: Middleware +metadata: + name: {{ $middlewareData.name }} + namespace: traefikmiddlewares +spec: + rateLimit: + average: {{ $middlewareData.average }} + burst: {{ $middlewareData.burst }} +{{ end }} diff --git a/stable/traefik/6.13.15/templates/custom/middlewares/redirectScheme.yaml b/stable/traefik/6.13.15/templates/custom/middlewares/redirectScheme.yaml new file mode 100644 index 00000000000..070c8fc4a90 --- /dev/null +++ b/stable/traefik/6.13.15/templates/custom/middlewares/redirectScheme.yaml @@ -0,0 +1,14 @@ +{{ range $index, $middlewareData := .Values.middlewares.redirectScheme }} + +--- +# Declaring the user list +apiVersion: traefik.containo.us/v1alpha1 +kind: Middleware +metadata: + name: {{ $middlewareData.name }} + namespace: traefikmiddlewares +spec: + redirectScheme: + scheme: {{ $middlewareData.scheme }} + permanent: {{ $middlewareData.permanent }} +{{ end }} diff --git a/stable/traefik/6.13.15/templates/custom/portal.yaml b/stable/traefik/6.13.15/templates/custom/portal.yaml new file mode 100644 index 00000000000..92e80f287a2 --- /dev/null +++ b/stable/traefik/6.13.15/templates/custom/portal.yaml @@ -0,0 +1,45 @@ +{{- if .Values.portal }} +{{- if .Values.portal.enabled }} +{{- $ingr := dict -}} +{{- $host := "$node_ip" }} +{{- $port := 443 }} +{{- $protocol := "https" }} +{{- $portProtocol := "" }} +{{- $path := "/dashboard/" }} + +{{- if $ingr }} + {{- if $ingr.enabled }} + {{- range $ingr.hosts }} + {{- if .hostTpl }} + {{ $host = ( tpl .hostTpl $ ) }} + {{- else if .host }} + {{ $host = .host }} + {{- else }} + {{ $host = "$node_ip" }} + {{- end }} + {{- if .paths }} + {{- $path = (first .paths).path }} + {{- end }} + {{- end }} + {{- end }} +{{- end }} + +{{- if eq $host "$node_ip" }} + {{- $port = .Values.ports.traefik.exposedPort }} + {{- $protocol = "http" }} +{{- end }} + +--- + +apiVersion: v1 +kind: ConfigMap +metadata: + name: portal +data: + protocol: {{ $protocol }} + host: {{ $host | quote }} + port: {{ $port | quote }} + path: {{ $path | quote }} + url: {{ ( printf "%v://%v:%v%v" $protocol $host $port $path ) | quote }} +{{- end }} +{{- end }} diff --git a/stable/traefik/6.13.15/templates/custom/portalhook.yaml b/stable/traefik/6.13.15/templates/custom/portalhook.yaml new file mode 100644 index 00000000000..5a9fee80da4 --- /dev/null +++ b/stable/traefik/6.13.15/templates/custom/portalhook.yaml @@ -0,0 +1,12 @@ +{{- if .Values.portalhook.enabled }} + +--- + +apiVersion: v1 +kind: ConfigMap +metadata: + name: portalhook + namespace: traefikmiddlewares +data: + websecureport: {{ .Values.ports.websecure.exposedPort | quote }} +{{- end }} diff --git a/stable/traefik/6.13.15/templates/daemonset.yaml b/stable/traefik/6.13.15/templates/daemonset.yaml new file mode 100644 index 00000000000..469e105c358 --- /dev/null +++ b/stable/traefik/6.13.15/templates/daemonset.yaml @@ -0,0 +1,40 @@ +{{- if and .Values.deployment.enabled (eq .Values.deployment.kind "DaemonSet") -}} + {{- with .Values.additionalArguments -}} + {{- range . -}} + {{- if contains ".acme." . -}} + {{- fail (printf "ACME functionality is not supported when running Traefik as a DaemonSet") -}} + {{- end -}} + {{- end -}} + {{- end -}} + {{- if eq (default .Chart.AppVersion .Values.image.tag) "latest" }} + {{- fail "\n\n ERROR: latest tag should not be used" }} + {{- end }} + +--- +apiVersion: apps/v1 +kind: DaemonSet +metadata: + name: {{ template "traefik.fullname" . }} + labels: + app.kubernetes.io/name: {{ template "traefik.name" . }} + helm.sh/chart: {{ template "traefik.chart" . }} + app.kubernetes.io/managed-by: {{ .Release.Service }} + app.kubernetes.io/instance: {{ .Release.Name }} + {{- with .Values.deployment.labels }} + {{- toYaml . | nindent 4 }} + {{- end }} + annotations: + {{- with .Values.deployment.annotations }} + {{- toYaml . | nindent 4 }} + {{- end }} +spec: + selector: + matchLabels: + app.kubernetes.io/name: {{ template "traefik.name" . }} + app.kubernetes.io/instance: {{ .Release.Name }} + updateStrategy: + type: RollingUpdate + rollingUpdate: + maxUnavailable: {{ .Values.rollingUpdate.maxUnavailable }} + template: {{ template "traefik.podTemplate" . }} +{{- end -}} diff --git a/stable/traefik/6.13.15/templates/dashboard-hook-ingressroute.yaml b/stable/traefik/6.13.15/templates/dashboard-hook-ingressroute.yaml new file mode 100644 index 00000000000..ec278c26910 --- /dev/null +++ b/stable/traefik/6.13.15/templates/dashboard-hook-ingressroute.yaml @@ -0,0 +1,28 @@ +{{- if .Values.ingressRoute.dashboard.enabled -}} +apiVersion: traefik.containo.us/v1alpha1 +kind: IngressRoute +metadata: + name: {{ template "traefik.fullname" . }}-dashboard + annotations: + helm.sh/hook: "post-install,post-upgrade" + {{- with .Values.ingressRoute.dashboard.annotations }} + {{- toYaml . | nindent 4 }} + {{- end }} + labels: + app.kubernetes.io/name: {{ template "traefik.name" . }} + helm.sh/chart: {{ template "traefik.chart" . }} + app.kubernetes.io/managed-by: {{ .Release.Service }} + app.kubernetes.io/instance: {{ .Release.Name }} + {{- with .Values.ingressRoute.dashboard.labels }} + {{- toYaml . | nindent 4 }} + {{- end }} +spec: + entryPoints: + - traefik + routes: + - match: PathPrefix(`/dashboard`) || PathPrefix(`/api`) + kind: Rule + services: + - name: api@internal + kind: TraefikService +{{- end -}} diff --git a/stable/traefik/6.13.15/templates/deployment.yaml b/stable/traefik/6.13.15/templates/deployment.yaml new file mode 100644 index 00000000000..494087cfd0a --- /dev/null +++ b/stable/traefik/6.13.15/templates/deployment.yaml @@ -0,0 +1,47 @@ +{{- if and .Values.deployment.enabled (eq .Values.deployment.kind "Deployment") -}} + {{- if gt (int .Values.deployment.replicas) 1 -}} + {{- with .Values.additionalArguments -}} + {{- range . -}} + {{- if contains ".acme." . -}} + {{- fail (printf "You can not enable acme if you set more than one traefik replica") -}} + {{- end -}} + {{- end -}} + {{- end -}} + {{- end -}} + {{- if eq (default .Chart.AppVersion .Values.image.tag) "latest" }} + {{- fail "\n\n ERROR: latest tag should not be used" }} + {{- end }} + +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: {{ template "traefik.fullname" . }} + labels: + app.kubernetes.io/name: {{ template "traefik.name" . }} + helm.sh/chart: {{ template "traefik.chart" . }} + app.kubernetes.io/managed-by: {{ .Release.Service }} + app.kubernetes.io/instance: {{ .Release.Name }} + {{- with .Values.deployment.labels }} + {{- toYaml . | nindent 4 }} + {{- end }} + annotations: + {{- with .Values.deployment.annotations }} + {{- toYaml . | nindent 4 }} + {{- end }} +spec: + {{- if not .Values.autoscaling.enabled }} + replicas: {{ default 1 .Values.deployment.replicas }} + {{- end }} + selector: + matchLabels: + app.kubernetes.io/name: {{ template "traefik.name" . }} + app.kubernetes.io/instance: {{ .Release.Name }} + strategy: + type: RollingUpdate + rollingUpdate: + {{- with .Values.rollingUpdate }} + {{- toYaml . | nindent 6 }} + {{- end }} + template: {{ template "traefik.podTemplate" . }} +{{- end -}} diff --git a/stable/traefik/6.13.15/templates/gateway.yaml b/stable/traefik/6.13.15/templates/gateway.yaml new file mode 100644 index 00000000000..85194211fe5 --- /dev/null +++ b/stable/traefik/6.13.15/templates/gateway.yaml @@ -0,0 +1,33 @@ +{{- if .Values.experimental.kubernetesGateway.enabled }} +--- +apiVersion: networking.x-k8s.io/v1alpha1 +kind: Gateway +metadata: + name: traefik-gateway + namespace: default +spec: + gatewayClassName: traefik + listeners: + - port: {{ .Values.ports.web.port }} + protocol: HTTP + routes: + kind: HTTPRoute + selector: + matchLabels: + app: {{ .Values.experimental.kubernetesGateway.appLabelSelector }} + + {{- range $index, $cert:= .Values.experimental.kubernetesGateway.certificates }} + - port: {{ $.Values.ports.websecure.port }} + protocol: HTTPS + tls: + certificateRef: + name: {{ $cert.name }} + group: {{ $cert.group }} + kind: {{ $cert.kind }} + routes: + kind: HTTPRoute + selector: + matchLabels: + app: {{ $.Values.experimental.kubernetesGateway.appLabelSelector }} + {{- end }} +{{- end }} diff --git a/stable/traefik/6.13.15/templates/gatewayclass.yaml b/stable/traefik/6.13.15/templates/gatewayclass.yaml new file mode 100644 index 00000000000..61bf007db1e --- /dev/null +++ b/stable/traefik/6.13.15/templates/gatewayclass.yaml @@ -0,0 +1,9 @@ +{{- if .Values.experimental.kubernetesGateway.enabled }} +--- +kind: GatewayClass +apiVersion: networking.x-k8s.io/v1alpha1 +metadata: + name: traefik +spec: + controller: traefik.io/gateway-controller +{{- end }} diff --git a/stable/traefik/6.13.15/templates/hpa.yaml b/stable/traefik/6.13.15/templates/hpa.yaml new file mode 100644 index 00000000000..bf37117de6a --- /dev/null +++ b/stable/traefik/6.13.15/templates/hpa.yaml @@ -0,0 +1,20 @@ +{{- if .Values.autoscaling.enabled }} +apiVersion: autoscaling/v2beta1 +kind: HorizontalPodAutoscaler +metadata: + name: {{ template "traefik.fullname" . }} + labels: + app.kubernetes.io/name: {{ template "traefik.name" . }} + helm.sh/chart: {{ template "traefik.chart" . }} + app.kubernetes.io/managed-by: {{ .Release.Service }} + app.kubernetes.io/instance: {{ .Release.Name }} +spec: + scaleTargetRef: + apiVersion: apps/v1 + kind: Deployment + name: {{ template "traefik.fullname" . }} + minReplicas: {{ .Values.autoscaling.minReplicas }} + maxReplicas: {{ .Values.autoscaling.maxReplicas }} + metrics: +{{ toYaml .Values.autoscaling.metrics | indent 4 }} +{{- end }} diff --git a/stable/traefik/6.13.15/templates/ingressclass.yaml b/stable/traefik/6.13.15/templates/ingressclass.yaml new file mode 100644 index 00000000000..7c62458c82e --- /dev/null +++ b/stable/traefik/6.13.15/templates/ingressclass.yaml @@ -0,0 +1,23 @@ +{{- if and .Values.ingressClass.enabled (semverCompare ">=2.3.0" (default .Chart.AppVersion .Values.image.tag)) -}} + {{- if .Capabilities.APIVersions.Has "networking.k8s.io/v1/IngressClass" }} +apiVersion: networking.k8s.io/v1 + {{- else if .Capabilities.APIVersions.Has "networking.k8s.io/v1beta1/IngressClass" }} +apiVersion: networking.k8s.io/v1beta1 + {{- else if or (eq .Values.ingressClass.fallbackApiVersion "v1beta1") (eq .Values.ingressClass.fallbackApiVersion "v1") }} +apiVersion: {{ printf "networking.k8s.io/%s" .Values.ingressClass.fallbackApiVersion }} + {{- else }} + {{- fail "\n\n ERROR: You must have atleast networking.k8s.io/v1beta1 to use ingressClass" }} + {{- end }} +kind: IngressClass +metadata: + annotations: + ingressclass.kubernetes.io/is-default-class: {{ .Values.ingressClass.isDefaultClass | quote }} + labels: + app.kubernetes.io/name: {{ template "traefik.name" . }} + helm.sh/chart: {{ template "traefik.chart" . }} + app.kubernetes.io/managed-by: {{ .Release.Service }} + app.kubernetes.io/instance: {{ .Release.Name }} + name: {{ template "traefik.fullname" . }} +spec: + controller: traefik.io/ingress-controller +{{- end }} diff --git a/stable/traefik/6.13.15/templates/poddisruptionbudget.yaml b/stable/traefik/6.13.15/templates/poddisruptionbudget.yaml new file mode 100644 index 00000000000..9893e521759 --- /dev/null +++ b/stable/traefik/6.13.15/templates/poddisruptionbudget.yaml @@ -0,0 +1,22 @@ +{{- if .Values.podDisruptionBudget.enabled -}} +apiVersion: policy/v1beta1 +kind: PodDisruptionBudget +metadata: + name: {{ template "traefik.fullname" . }} + labels: + app.kubernetes.io/name: {{ template "traefik.name" . }} + helm.sh/chart: {{ template "traefik.chart" . }} + app.kubernetes.io/managed-by: {{ .Release.Service }} + app.kubernetes.io/instance: {{ .Release.Name }} +spec: + selector: + matchLabels: + app.kubernetes.io/name: {{ template "traefik.name" . }} + app.kubernetes.io/instance: {{ .Release.Name }} + {{- if .Values.podDisruptionBudget.minAvailable }} + minAvailable: {{ .Values.podDisruptionBudget.minAvailable | int }} + {{- end }} + {{- if .Values.podDisruptionBudget.maxUnavailable }} + maxUnavailable: {{ .Values.podDisruptionBudget.maxUnavailable | int }} + {{- end }} +{{- end -}} diff --git a/stable/traefik/6.13.15/templates/rbac/clusterrole.yaml b/stable/traefik/6.13.15/templates/rbac/clusterrole.yaml new file mode 100644 index 00000000000..2c63e006414 --- /dev/null +++ b/stable/traefik/6.13.15/templates/rbac/clusterrole.yaml @@ -0,0 +1,112 @@ +{{- if and .Values.rbac.enabled (not .Values.rbac.namespaced) -}} +kind: ClusterRole +apiVersion: rbac.authorization.k8s.io/v1 +metadata: + name: {{ template "traefik.fullname" . }} + labels: + app.kubernetes.io/name: {{ template "traefik.name" . }} + helm.sh/chart: {{ template "traefik.chart" . }} + app.kubernetes.io/managed-by: {{ .Release.Service }} + app.kubernetes.io/instance: {{ .Release.Name }} +rules: + - apiGroups: + - "" + resources: + - services + - endpoints + - secrets + verbs: + - get + - list + - watch + - apiGroups: + - extensions + - networking.k8s.io + resources: + - ingresses + - ingressclasses + verbs: + - get + - list + - watch + - apiGroups: + - extensions + - networking.k8s.io + resources: + - ingresses/status + verbs: + - update + - apiGroups: + - traefik.containo.us + resources: + - ingressroutes + - ingressroutetcps + - ingressrouteudps + - middlewares + - tlsoptions + - tlsstores + - traefikservices + - serverstransports + verbs: + - get + - list + - watch +{{- if .Values.podSecurityPolicy.enabled }} + - apiGroups: + - policy + resourceNames: + - {{ template "traefik.fullname" . }} + resources: + - podsecuritypolicies + verbs: + - use +{{- end -}} +{{- if .Values.experimental.kubernetesGateway.enabled }} + - apiGroups: + - networking.x-k8s.io + resources: + - gatewayclasses + - gatewayclasses/status + - gateways + verbs: + - get + - list + - watch + - apiGroups: + - networking.x-k8s.io + resources: + - gatewayclasses/status + verbs: + - get + - patch + - update + - apiGroups: + - networking.x-k8s.io + resources: + - gateways/status + verbs: + - get + - patch + - update + - apiGroups: + - networking.x-k8s.io + resources: + - httproutes + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - networking.x-k8s.io + resources: + - httproutes/status + verbs: + - get + - patch + - update +{{- end -}} +{{- end -}} diff --git a/stable/traefik/6.13.15/templates/rbac/clusterrolebinding.yaml b/stable/traefik/6.13.15/templates/rbac/clusterrolebinding.yaml new file mode 100644 index 00000000000..509e92ff2b7 --- /dev/null +++ b/stable/traefik/6.13.15/templates/rbac/clusterrolebinding.yaml @@ -0,0 +1,19 @@ +{{- if and .Values.rbac.enabled (not .Values.rbac.namespaced) }} +kind: ClusterRoleBinding +apiVersion: rbac.authorization.k8s.io/v1 +metadata: + name: {{ template "traefik.fullname" . }} + labels: + app.kubernetes.io/name: {{ template "traefik.name" . }} + helm.sh/chart: {{ template "traefik.chart" . }} + app.kubernetes.io/managed-by: {{ .Release.Service }} + app.kubernetes.io/instance: {{ .Release.Name }} +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: {{ template "traefik.fullname" . }} +subjects: + - kind: ServiceAccount + name: {{ include "traefik.serviceAccountName" . }} + namespace: {{ .Release.Namespace }} +{{- end -}} diff --git a/stable/traefik/6.13.15/templates/rbac/podsecuritypolicy.yaml b/stable/traefik/6.13.15/templates/rbac/podsecuritypolicy.yaml new file mode 100644 index 00000000000..66bc1458d55 --- /dev/null +++ b/stable/traefik/6.13.15/templates/rbac/podsecuritypolicy.yaml @@ -0,0 +1,68 @@ +{{- if .Values.podSecurityPolicy.enabled }} +--- +apiVersion: policy/v1beta1 +kind: PodSecurityPolicy +metadata: + annotations: + seccomp.security.alpha.kubernetes.io/allowedProfileNames: runtime/default + seccomp.security.alpha.kubernetes.io/defaultProfileName: runtime/default + name: {{ template "traefik.fullname" . }} + labels: + app.kubernetes.io/name: {{ template "traefik.name" . }} + helm.sh/chart: {{ template "traefik.chart" . }} + app.kubernetes.io/managed-by: {{ .Release.Service }} + app.kubernetes.io/instance: {{ .Release.Name }} +spec: + privileged: false + allowPrivilegeEscalation: false + requiredDropCapabilities: + - ALL +{{- if not .Values.securityContext.runAsNonRoot }} + allowedCapabilities: + - NET_BIND_SERVICE +{{- end }} + hostNetwork: {{ .Values.hostNetwork }} + hostIPC: false + hostPID: false + fsGroup: +{{- if .Values.securityContext.runAsNonRoot }} + ranges: + - max: 65535 + min: 1 + rule: MustRunAs +{{- else }} + rule: RunAsAny +{{- end }} +{{- if .Values.hostNetwork }} + hostPorts: + - max: 65535 + min: 1 +{{- end }} + readOnlyRootFilesystem: true + runAsUser: +{{- if .Values.securityContext.runAsNonRoot }} + rule: MustRunAsNonRoot +{{- else }} + rule: RunAsAny +{{- end }} + seLinux: + rule: RunAsAny + supplementalGroups: +{{- if .Values.securityContext.runAsNonRoot }} + ranges: + - max: 65535 + min: 1 + rule: MustRunAs +{{- else }} + rule: RunAsAny +{{- end }} + volumes: + - configMap + - downwardAPI + - secret + - emptyDir + - projected +{{- if .Values.persistence.enabled }} + - persistentVolumeClaim +{{- end -}} +{{- end -}} diff --git a/stable/traefik/6.13.15/templates/rbac/role.yaml b/stable/traefik/6.13.15/templates/rbac/role.yaml new file mode 100644 index 00000000000..2499d2dc60b --- /dev/null +++ b/stable/traefik/6.13.15/templates/rbac/role.yaml @@ -0,0 +1,63 @@ +{{- if and .Values.rbac.enabled .Values.rbac.namespaced }} +kind: Role +apiVersion: rbac.authorization.k8s.io/v1 +metadata: + name: {{ template "traefik.fullname" . }} + labels: + app.kubernetes.io/name: {{ template "traefik.name" . }} + helm.sh/chart: {{ template "traefik.chart" . }} + app.kubernetes.io/managed-by: {{ .Release.Service }} + app.kubernetes.io/instance: {{ .Release.Name }} +rules: + - apiGroups: + - "" + resources: + - services + - endpoints + - secrets + verbs: + - get + - list + - watch + - apiGroups: + - extensions + - networking.k8s.io + resources: + - ingresses + verbs: + - get + - list + - watch + - apiGroups: + - extensions + - networking.k8s.io + resources: + - ingresses/status + verbs: + - update + - apiGroups: + - traefik.containo.us + resources: + - ingressroutes + - ingressroutetcps + - ingressrouteudps + - middlewares + - tlsoptions + - tlsstores + - traefikservices + - serverstransports + verbs: + - get + - list + - watch +{{- if .Values.podSecurityPolicy.enabled }} + - apiGroups: + - extensions + resourceNames: + - {{ template "traefik.fullname" . }} + resources: + - podsecuritypolicies + verbs: + - use +{{- end -}} +{{- end -}} diff --git a/stable/traefik/6.13.15/templates/rbac/rolebinding.yaml b/stable/traefik/6.13.15/templates/rbac/rolebinding.yaml new file mode 100644 index 00000000000..10416401867 --- /dev/null +++ b/stable/traefik/6.13.15/templates/rbac/rolebinding.yaml @@ -0,0 +1,19 @@ +{{- if and .Values.rbac.enabled .Values.rbac.namespaced }} +kind: RoleBinding +apiVersion: rbac.authorization.k8s.io/v1 +metadata: + name: {{ template "traefik.fullname" . }} + labels: + app.kubernetes.io/name: {{ template "traefik.name" . }} + helm.sh/chart: {{ template "traefik.chart" . }} + app.kubernetes.io/managed-by: {{ .Release.Service }} + app.kubernetes.io/instance: {{ .Release.Name }} +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: {{ template "traefik.fullname" . }} +subjects: + - kind: ServiceAccount + name: {{ include "traefik.serviceAccountName" . }} + namespace: {{ .Release.Namespace }} +{{- end -}} diff --git a/stable/traefik/6.13.15/templates/rbac/serviceaccount.yaml b/stable/traefik/6.13.15/templates/rbac/serviceaccount.yaml new file mode 100644 index 00000000000..bcc941eec95 --- /dev/null +++ b/stable/traefik/6.13.15/templates/rbac/serviceaccount.yaml @@ -0,0 +1,15 @@ +{{- if not .Values.serviceAccount.name -}} +kind: ServiceAccount +apiVersion: v1 +metadata: + name: {{ include "traefik.serviceAccountName" . }} + labels: + app.kubernetes.io/name: {{ template "traefik.name" . }} + helm.sh/chart: {{ template "traefik.chart" . }} + app.kubernetes.io/managed-by: {{ .Release.Service }} + app.kubernetes.io/instance: {{ .Release.Name }} + annotations: + {{- with .Values.serviceAccountAnnotations }} + {{- toYaml . | nindent 4 }} + {{- end }} +{{- end -}} diff --git a/stable/traefik/6.13.15/templates/service.yaml b/stable/traefik/6.13.15/templates/service.yaml new file mode 100644 index 00000000000..745bb9102d7 --- /dev/null +++ b/stable/traefik/6.13.15/templates/service.yaml @@ -0,0 +1,114 @@ +{{- if .Values.service.enabled -}} + +{{ $tcpPorts := dict }} +{{ $udpPorts := dict }} +{{- range $name, $config := .Values.ports }} + {{- if eq (toString $config.protocol) "UDP" }} + {{ $_ := set $udpPorts $name $config }} + {{- else }} + {{ $_ := set $tcpPorts $name $config }} + {{- end }} +{{- end }} + +apiVersion: v1 +kind: List +metadata: + name: {{ template "traefik.fullname" . }} +items: +{{- if $tcpPorts }} + - apiVersion: v1 + kind: Service + metadata: + name: {{ template "traefik.fullname" . }} + labels: + app.kubernetes.io/name: {{ template "traefik.name" . }} + helm.sh/chart: {{ template "traefik.chart" . }} + app.kubernetes.io/managed-by: {{ .Release.Service }} + app.kubernetes.io/instance: {{ .Release.Name }} + {{- with .Values.service.labels }} + {{- toYaml . | nindent 8 }} + {{- end }} + annotations: + {{- with .Values.service.annotations }} + {{- toYaml . | nindent 8 }} + {{- end }} + spec: + {{- $type := default "LoadBalancer" .Values.service.type }} + type: {{ $type }} + {{- with .Values.service.spec }} + {{- toYaml . | nindent 6 }} + {{- end }} + selector: + app.kubernetes.io/name: {{ template "traefik.name" . }} + app.kubernetes.io/instance: {{ .Release.Name }} + ports: + {{- range $name, $config := $tcpPorts }} + {{- if $config.expose }} + - port: {{ default $config.port $config.exposedPort }} + name: {{ $name }} + targetPort: {{ $name | quote }} + protocol: {{ default "TCP" $config.protocol | quote }} + {{- if $config.nodePort }} + nodePort: {{ $config.nodePort }} + {{- end }} + {{- end }} + {{- end }} + {{- if eq $type "LoadBalancer" }} + {{- with .Values.service.loadBalancerSourceRanges }} + loadBalancerSourceRanges: + {{- toYaml . | nindent 6 }} + {{- end -}} + {{- end -}} + {{- with .Values.service.externalIPs }} + externalIPs: + {{- toYaml . | nindent 6 }} + {{- end -}} +{{- end }} + +{{- if $udpPorts }} + - apiVersion: v1 + kind: Service + metadata: + name: {{ template "traefik.fullname" . }}-udp + labels: + app.kubernetes.io/name: {{ template "traefik.name" . }} + helm.sh/chart: {{ template "traefik.chart" . }} + app.kubernetes.io/managed-by: {{ .Release.Service }} + app.kubernetes.io/instance: {{ .Release.Name }} + annotations: + {{- with .Values.service.annotations }} + {{- toYaml . | nindent 8 }} + {{- end }} + spec: + {{- $type := default "LoadBalancer" .Values.service.type }} + type: {{ $type }} + {{- with .Values.service.spec }} + {{- toYaml . | nindent 6 }} + {{- end }} + selector: + app.kubernetes.io/name: {{ template "traefik.name" . }} + app.kubernetes.io/instance: {{ .Release.Name }} + ports: + {{- range $name, $config := $udpPorts }} + {{- if $config.expose }} + - port: {{ default $config.port $config.exposedPort }} + name: {{ $name }} + targetPort: {{ $name | quote }} + protocol: {{ default "UDP" $config.protocol | quote }} + {{- if $config.nodePort }} + nodePort: {{ $config.nodePort }} + {{- end }} + {{- end }} + {{- end }} + {{- if eq $type "LoadBalancer" }} + {{- with .Values.service.loadBalancerSourceRanges }} + loadBalancerSourceRanges: + {{- toYaml . | nindent 6 }} + {{- end -}} + {{- end -}} + {{- with .Values.service.externalIPs }} + externalIPs: + {{- toYaml . | nindent 6 }} + {{- end -}} +{{- end }} +{{- end -}} diff --git a/stable/traefik/6.13.15/templates/tlsoption.yaml b/stable/traefik/6.13.15/templates/tlsoption.yaml new file mode 100644 index 00000000000..ec46e8bbc94 --- /dev/null +++ b/stable/traefik/6.13.15/templates/tlsoption.yaml @@ -0,0 +1,14 @@ +{{- range $name, $config := .Values.tlsOptions }} +apiVersion: traefik.containo.us/v1alpha1 +kind: TLSOption +metadata: + name: {{ $name }} + labels: + app.kubernetes.io/name: {{ template "traefik.name" $ }} + helm.sh/chart: {{ template "traefik.chart" $ }} + app.kubernetes.io/managed-by: {{ $.Release.Service }} + app.kubernetes.io/instance: {{ $.Release.Name }} +spec: + {{- toYaml $config | nindent 2 }} +--- +{{- end -}} diff --git a/stable/traefik/6.13.15/test_values.yaml b/stable/traefik/6.13.15/test_values.yaml new file mode 100644 index 00000000000..004b1ef68f9 --- /dev/null +++ b/stable/traefik/6.13.15/test_values.yaml @@ -0,0 +1,438 @@ +# Default values for Traefik +image: + repository: traefik + # defaults to appVersion + tag: v2.4 + pullPolicy: IfNotPresent + +# +# Configure the deployment +# +deployment: + enabled: true + # Can be either Deployment or DaemonSet + kind: Deployment + # Number of pods of the deployment (only applies when kind == Deployment) + replicas: 1 + # Additional deployment annotations (e.g. for jaeger-operator sidecar injection) + annotations: {} + # Additional deployment labels (e.g. for filtering deployment by custom labels) + labels: {} + # Additional pod annotations (e.g. for mesh injection or prometheus scraping) + podAnnotations: {} + # Additional Pod labels (e.g. for filtering Pod by custom labels) + podLabels: {} + # Additional containers (e.g. for metric offloading sidecars) + additionalContainers: [] + # https://docs.datadoghq.com/developers/dogstatsd/unix_socket/?tab=host + # - name: socat-proxy + # image: alpine/socat:1.0.5 + # args: ["-s", "-u", "udp-recv:8125", "unix-sendto:/socket/socket"] + # volumeMounts: + # - name: dsdsocket + # mountPath: /socket + # Additional volumes available for use with initContainers and additionalContainers + additionalVolumes: [] + # - name: dsdsocket + # hostPath: + # path: /var/run/statsd-exporter + # Additional initContainers (e.g. for setting file permission as shown below) + initContainers: [] + # The "volume-permissions" init container is required if you run into permission issues. + # Related issue: https://github.com/traefik/traefik/issues/6972 + # - name: volume-permissions + # image: busybox:1.31.1 + # command: ["sh", "-c", "chmod -Rv 600 /data/*"] + # volumeMounts: + # - name: data + # mountPath: /data + # Custom pod DNS policy. Apply if `hostNetwork: true` + # dnsPolicy: ClusterFirstWithHostNet + # Additional imagePullSecrets + imagePullSecrets: [] + # - name: myRegistryKeySecretName + +# Pod disruption budget +podDisruptionBudget: + enabled: false + # maxUnavailable: 1 + # minAvailable: 0 + +# Use ingressClass. Ignored if Traefik version < 2.3 / kubernetes < 1.18.x +ingressClass: + # true is not unit-testable yet, pending https://github.com/rancher/helm-unittest/pull/12 + enabled: false + isDefaultClass: false + # Use to force a networking.k8s.io API Version for certain CI/CD applications. E.g. "v1beta1" + fallbackApiVersion: + +# Activate Pilot integration +pilot: + enabled: false + token: "" + # Toggle Pilot Dashboard + # dashboard: false + +# Enable experimental features +experimental: + plugins: + enabled: false + kubernetesGateway: + enabled: false + appLabelSelector: "traefik" + certificates: [] + # - group: "core" + # kind: "Secret" + # name: "mysecret" + +# Create an IngressRoute for the dashboard +ingressRoute: + dashboard: + enabled: true + # Additional ingressRoute annotations (e.g. for kubernetes.io/ingress.class) + annotations: {} + # Additional ingressRoute labels (e.g. for filtering IngressRoute by custom labels) + labels: {} + +rollingUpdate: + maxUnavailable: 1 + maxSurge: 1 + + +# +# Configure providers +# +providers: + kubernetesCRD: + enabled: true + namespaces: [] + # - "default" + kubernetesIngress: + enabled: true + # labelSelector: environment=production,method=traefik + namespaces: [] + # - "default" + # IP used for Kubernetes Ingress endpoints + publishedService: + enabled: true + # Published Kubernetes Service to copy status from. Format: namespace/servicename + # By default this Traefik service + # pathOverride: "" + +# +# Add volumes to the traefik pod. The volume name will be passed to tpl. +# This can be used to mount a cert pair or a configmap that holds a config.toml file. +# After the volume has been mounted, add the configs into traefik by using the `additionalArguments` list below, eg: +# additionalArguments: +# - "--providers.file.filename=/config/dynamic.toml" +# - "--ping" +# - "--ping.entrypoint=web" +volumes: [] +# - name: public-cert +# mountPath: "/certs" +# type: secret +# - name: '{{ printf "%s-configs" .Release.Name }}' +# mountPath: "/config" +# type: configMap + +# Additional volumeMounts to add to the Traefik container +additionalVolumeMounts: [] + # For instance when using a logshipper for access logs + # - name: traefik-logs + # mountPath: /var/log/traefik + +# Logs +# https://docs.traefik.io/observability/logs/ +logs: + # Traefik logs concern everything that happens to Traefik itself (startup, configuration, events, shutdown, and so on). + general: + # By default, the logs use a text format (common), but you can + # also ask for the json format in the format option + # format: json + # By default, the level is set to ERROR. Alternative logging levels are DEBUG, PANIC, FATAL, ERROR, WARN, and INFO. + level: INFO + access: + # To enable access logs + enabled: false + # By default, logs are written using the Common Log Format (CLF). + # To write logs in JSON, use json in the format option. + # If the given format is unsupported, the default (CLF) is used instead. + # format: json + # To write the logs in an asynchronous fashion, specify a bufferingSize option. + # This option represents the number of log lines Traefik will keep in memory before writing + # them to the selected output. In some cases, this option can greatly help performances. + # bufferingSize: 100 + # Filtering https://docs.traefik.io/observability/access-logs/#filtering + filters: {} + # statuscodes: "200,300-302" + # retryattempts: true + # minduration: 10ms + # Fields + # https://docs.traefik.io/observability/access-logs/#limiting-the-fieldsincluding-headers + fields: + general: + defaultmode: keep + names: {} + # Examples: + # ClientUsername: drop + headers: + defaultmode: drop + names: {} + # Examples: + # User-Agent: redact + # Authorization: drop + # Content-Type: keep + +globalArguments: + - "--global.checknewversion" + +# +# Configure Traefik static configuration +# Additional arguments to be passed at Traefik's binary +# All available options available on https://docs.traefik.io/reference/static-configuration/cli/ +## Use curly braces to pass values: `helm install --set="additionalArguments={--providers.kubernetesingress.ingressclass=traefik-internal,--log.level=DEBUG}"` +additionalArguments: + - "--metrics.prometheus" + - "--ping" + - "--serverstransport.insecureskipverify=true" + +# Environment variables to be passed to Traefik's binary +env: [] +# - name: SOME_VAR +# value: some-var-value +# - name: SOME_VAR_FROM_CONFIG_MAP +# valueFrom: +# configMapRef: +# name: configmap-name +# key: config-key +# - name: SOME_SECRET +# valueFrom: +# secretKeyRef: +# name: secret-name +# key: secret-key + +envFrom: [] +# - configMapRef: +# name: config-map-name +# - secretRef: +# name: secret-name + +# Configure ports +ports: + # The name of this one can't be changed as it is used for the readiness and + # liveness probes, but you can adjust its config to your liking + traefik: + port: 9000 + # Use hostPort if set. + # hostPort: 9000 + # + # Use hostIP if set. If not set, Kubernetes will default to 0.0.0.0, which + # means it's listening on all your interfaces and all your IPs. You may want + # to set this value if you need traefik to listen on specific interface + # only. + # hostIP: 192.168.100.10 + + # Defines whether the port is exposed if service.type is LoadBalancer or + # NodePort. + # + # You SHOULD NOT expose the traefik port on production deployments. + # If you want to access it from outside of your cluster, + # use `kubectl port-forward` or create a secure ingress + expose: false + # The exposed port for this service + exposedPort: 9000 + # The port protocol (TCP/UDP) + protocol: TCP + web: + port: 9080 + # hostPort: 8000 + expose: true + exposedPort: 80 + # The port protocol (TCP/UDP) + protocol: TCP + # Use nodeport if set. This is useful if you have configured Traefik in a + # LoadBalancer + # nodePort: 32080 + # Port Redirections + # Added in 2.2, you can make permanent redirects via entrypoints. + # https://docs.traefik.io/routing/entrypoints/#redirection + redirectTo: websecure + websecure: + port: 9443 + # hostPort: 8443 + expose: true + exposedPort: 443 + # The port protocol (TCP/UDP) + protocol: TCP + # nodePort: 32443 + # Set TLS at the entrypoint + # https://doc.traefik.io/traefik/routing/entrypoints/#tls + tls: + enabled: true + +# TLS Options are created as TLSOption CRDs +# https://doc.traefik.io/traefik/https/tls/#tls-options +# Example: +tlsOptions: + default: + sniStrict: false + minVersion: VersionTLS12 + curvePreferences: + - CurveP521 + - CurveP384 + cipherSuites: + - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 + - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 + - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 + - TLS_AES_128_GCM_SHA256 + - TLS_AES_256_GCM_SHA384 + - TLS_CHACHA20_POLY1305_SHA256 + +# Options for the main traefik service, where the entrypoints traffic comes +# from. +service: + enabled: true + type: LoadBalancer + # Additional annotations (e.g. for cloud provider specific config) + annotations: {} + # Additional service labels (e.g. for filtering Service by custom labels) + labels: {} + # Additional entries here will be added to the service spec. Cannot contains + # type, selector or ports entries. + spec: {} + # externalTrafficPolicy: Cluster + # loadBalancerIP: "1.2.3.4" + # clusterIP: "2.3.4.5" + loadBalancerSourceRanges: [] + # - 192.168.0.1/32 + # - 172.16.0.0/16 + externalIPs: [] + # - 1.2.3.4 + +## Create HorizontalPodAutoscaler object. +## +autoscaling: + enabled: false +# minReplicas: 1 +# maxReplicas: 10 +# metrics: +# - type: Resource +# resource: +# name: cpu +# targetAverageUtilization: 60 +# - type: Resource +# resource: +# name: memory +# targetAverageUtilization: 60 + +# Enable persistence using Persistent Volume Claims +# ref: http://kubernetes.io/docs/user-guide/persistent-volumes/ +# After the pvc has been mounted, add the configs into traefik by using the `additionalArguments` list below, eg: +# additionalArguments: +# - "--certificatesresolvers.le.acme.storage=/data/acme.json" +# It will persist TLS certificates. +persistence: + enabled: false + name: data + accessMode: ReadWriteOnce + size: 128Mi + path: /data + +# If hostNetwork is true, runs traefik in the host network namespace +# To prevent unschedulabel pods due to port collisions, if hostNetwork=true +# and replicas>1, a pod anti-affinity is recommended and will be set if the +# affinity is left as default. +hostNetwork: false + +# Whether Role Based Access Control objects like roles and rolebindings should be created +rbac: + enabled: true + + # If set to false, installs ClusterRole and ClusterRoleBinding so Traefik can be used across namespaces. + # If set to true, installs namespace-specific Role and RoleBinding and requires provider configuration be set to that same namespace + namespaced: false + +# Enable to create a PodSecurityPolicy and assign it to the Service Account via RoleBinding or ClusterRoleBinding +podSecurityPolicy: + enabled: false + +# The service account the pods will use to interact with the Kubernetes API +serviceAccount: + # If set, an existing service account is used + # If not set, a service account is created automatically using the fullname template + name: "" + +# Additional serviceAccount annotations (e.g. for oidc authentication) +serviceAccountAnnotations: {} + +resources: {} + # requests: + # cpu: "100m" + # memory: "50Mi" + # limits: + # cpu: "300m" + # memory: "150Mi" +affinity: {} +# # This example pod anti-affinity forces the scheduler to put traefik pods +# # on nodes where no other traefik pods are scheduled. +# # It should be used when hostNetwork: true to prevent port conflicts +# podAntiAffinity: +# requiredDuringSchedulingIgnoredDuringExecution: +# - labelSelector: +# matchExpressions: +# - key: app +# operator: In +# values: +# - {{ template "traefik.name" . }} +# topologyKey: failure-domain.beta.kubernetes.io/zone +nodeSelector: {} +tolerations: [] + +# Pods can have priority. +# Priority indicates the importance of a Pod relative to other Pods. +priorityClassName: "" + +# Set the container security context +# To run the container with ports below 1024 this will need to be adjust to run as root +securityContext: + capabilities: + drop: [ALL] + readOnlyRootFilesystem: true + runAsGroup: 65532 + runAsNonRoot: true + runAsUser: 65532 + +podSecurityContext: + fsGroup: 65532 + +## SCALE Middleware Handlers + +middlewares: + basicAuth: [] + # - name: basicauthexample + # users: + # - username: testuser + # password: testpassword + forwardAuth: [] + # - name: forwardAuthexample + # address: https://auth.example.com/ + # authResponseHeaders: + # - X-Secret + # - X-Auth-User + # authRequestHeaders: + # - "Accept" + # - "X-CustomHeader" + # authResponseHeadersRegex: "^X-" + # trustForwardHeader: true + chain: [] + # middlewares: + # - name: compress + redirectScheme: [] + # scheme: https + # permanent: true + rateLimit: [] + # average: 300 + # burst: 200 + +portalhook: + enabled: true diff --git a/stable/traefik/6.13.15/values.yaml b/stable/traefik/6.13.15/values.yaml new file mode 100644 index 00000000000..e69de29bb2d diff --git a/stable/transmission/6.11.11/Chart.lock b/stable/transmission/6.11.11/Chart.lock index c583ece7462..dd79fc0cf64 100644 --- a/stable/transmission/6.11.11/Chart.lock +++ b/stable/transmission/6.11.11/Chart.lock @@ -3,4 +3,4 @@ dependencies: repository: https://truecharts.org/ version: 6.12.4 digest: sha256:62b51750a57da4ed871c5222664ac35112f28bb013f042fc09ff928bf466a970 -generated: "2021-09-02T15:54:52.543155902Z" +generated: "2021-09-02T16:49:15.15983614Z" diff --git a/stable/truecommand/6.11.12/Chart.lock b/stable/truecommand/6.11.12/Chart.lock index 411d6d60a83..e56e166bef7 100644 --- a/stable/truecommand/6.11.12/Chart.lock +++ b/stable/truecommand/6.11.12/Chart.lock @@ -3,4 +3,4 @@ dependencies: repository: https://truecharts.org/ version: 6.12.4 digest: sha256:62b51750a57da4ed871c5222664ac35112f28bb013f042fc09ff928bf466a970 -generated: "2021-09-02T15:54:57.443186097Z" +generated: "2021-09-02T16:49:20.1829482Z" diff --git a/stable/tvheadend/7.11.11/Chart.lock b/stable/tvheadend/7.11.11/Chart.lock index d675fb198c7..e07fa8b38ae 100644 --- a/stable/tvheadend/7.11.11/Chart.lock +++ b/stable/tvheadend/7.11.11/Chart.lock @@ -3,4 +3,4 @@ dependencies: repository: https://truecharts.org/ version: 6.12.4 digest: sha256:62b51750a57da4ed871c5222664ac35112f28bb013f042fc09ff928bf466a970 -generated: "2021-09-02T15:55:02.309853101Z" +generated: "2021-09-02T16:49:25.220027386Z" diff --git a/stable/unifi/6.11.11/Chart.lock b/stable/unifi/6.11.11/Chart.lock index 1d031154e0e..fdd4be5eeae 100644 --- a/stable/unifi/6.11.11/Chart.lock +++ b/stable/unifi/6.11.11/Chart.lock @@ -3,4 +3,4 @@ dependencies: repository: https://truecharts.org/ version: 6.12.4 digest: sha256:62b51750a57da4ed871c5222664ac35112f28bb013f042fc09ff928bf466a970 -generated: "2021-09-02T15:55:07.209305927Z" +generated: "2021-09-02T16:49:30.254518639Z" diff --git a/stable/unpackerr/1.11.11/Chart.lock b/stable/unpackerr/1.11.11/Chart.lock index f7fd1f14172..208ab8058e1 100644 --- a/stable/unpackerr/1.11.11/Chart.lock +++ b/stable/unpackerr/1.11.11/Chart.lock @@ -3,4 +3,4 @@ dependencies: repository: https://truecharts.org/ version: 6.12.4 digest: sha256:62b51750a57da4ed871c5222664ac35112f28bb013f042fc09ff928bf466a970 -generated: "2021-09-02T15:55:12.064771711Z" +generated: "2021-09-02T16:49:35.130707015Z" diff --git a/stable/vaultwarden/6.1.8/Chart.lock b/stable/vaultwarden/6.1.8/Chart.lock index 83add20775c..866fea9131b 100644 --- a/stable/vaultwarden/6.1.8/Chart.lock +++ b/stable/vaultwarden/6.1.8/Chart.lock @@ -6,4 +6,4 @@ dependencies: repository: https://truecharts.org/ version: 1.5.10 digest: sha256:b20f0d5123c6e90d785f652821123fbb0849046236ebd960637a90f4dbd10cde -generated: "2021-09-02T15:55:17.913506203Z" +generated: "2021-09-02T16:49:41.102271306Z" diff --git a/stable/xteve/1.9.11/Chart.lock b/stable/xteve/1.9.11/Chart.lock index c65f166f174..6c46ba5c40e 100644 --- a/stable/xteve/1.9.11/Chart.lock +++ b/stable/xteve/1.9.11/Chart.lock @@ -3,4 +3,4 @@ dependencies: repository: https://truecharts.org version: 6.12.4 digest: sha256:310100cc4b043b6ad0fc371a550e3f34853d472793291588be1cc3d78d19aaa7 -generated: "2021-09-02T15:55:24.269238353Z" +generated: "2021-09-02T16:49:47.259050956Z" diff --git a/stable/zwavejs2mqtt/6.11.12/Chart.lock b/stable/zwavejs2mqtt/6.11.12/Chart.lock index a5709c917b5..8df9ccf90f8 100644 --- a/stable/zwavejs2mqtt/6.11.12/Chart.lock +++ b/stable/zwavejs2mqtt/6.11.12/Chart.lock @@ -3,4 +3,4 @@ dependencies: repository: https://truecharts.org/ version: 6.12.4 digest: sha256:62b51750a57da4ed871c5222664ac35112f28bb013f042fc09ff928bf466a970 -generated: "2021-09-02T15:55:29.180699688Z" +generated: "2021-09-02T16:49:52.307425507Z"