6 Commits

Include renames

Author	SHA1	Message	Date
jklein	b5eba4cbf1	Harden pod and container security contexts across all workloads ... Add securityContext hardening (runAsNonRoot, readOnlyRootFilesystem, capabilities drop ALL, allowPrivilegeEscalation false) to the 10 workloads that lacked it: apache-tika, cyberchef, gotenberg, homeassistant, matrix-delegation-nginx, paperless-server, paperless-consume cronjob (plus automountServiceAccountToken false), patchmon-frontend, urlaubsverwaltung and zipline. All contexts are configurable via securityContext.pod / securityContext.container in values.yaml; writable paths are provided as emptyDirs. Image-forced deviations (Home Assistant root start for s6-overlay + NET_RAW for discovery, paperless root init container for /run ownership) are documented in the charts' values.yaml. Major version bump for every changed published chart.	2026-08-21 21:49:05 +02:00
jklein	f349428d0e	Keep workflow docs in CLAUDE.md and general repo info in README current ... - CLAUDE.md: document plan-on-issue step, doc-currency rules, k3d verification convention - README: document validate-charts PR pipeline, branch-filtered publish trigger, strict lint, local k3d runtime verification	2026-08-21 18:36:31 +02:00
jklein	3c7e7f8e00	Remove unused music-assistant-skill chart ... The chart is no longer needed. Removes the chart directory, its publish workflow, and its row in the README chart table. Already published versions remain in the registry. Fixes #7	2026-08-21 16:50:43 +02:00
jkleinandClaude Fable 5	04283df8c4	Remove non-functional dependabot config ... Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-08-21 16:20:49 +02:00
jkleinandClaude Fable 5	50685603e6	Document repo structure, charts, CI/CD and conventions in README ... Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-08-21 16:18:55 +02:00
jklein	159a868573	Initial commit	2026-02-19 14:20:40 +01:00