Commit Graph
14 Commits
Author SHA1 Message Date
jklein b5eba4cbf1 Harden pod and container security contexts across all workloads
Add securityContext hardening (runAsNonRoot, readOnlyRootFilesystem,
capabilities drop ALL, allowPrivilegeEscalation false) to the 10 workloads
that lacked it: apache-tika, cyberchef, gotenberg, homeassistant,
matrix-delegation-nginx, paperless-server, paperless-consume cronjob
(plus automountServiceAccountToken false), patchmon-frontend,
urlaubsverwaltung and zipline. All contexts are configurable via
securityContext.pod / securityContext.container in values.yaml; writable
paths are provided as emptyDirs. Image-forced deviations (Home Assistant
root start for s6-overlay + NET_RAW for discovery, paperless root init
container for /run ownership) are documented in the charts' values.yaml.
Major version bump for every changed published chart.
2026-08-21 21:49:05 +02:00
jklein 78d78973c5 Ensure liveness, readiness and startup probes on all workloads
Every container in every Deployment/StatefulSet now defines all three
probes. The paperless-ngx consume CronJob intentionally has none (batch
workload).

- Add probes: apache-tika, calibre-web-automated, cyberchef, gotenberg,
  homeassistant, patchmon-backend, samba (tcp/445), teamspeak-server
  (tcp/30033), zipline (/api/healthcheck)
- Fix voucher-vault null probe values with real defaults
- Fix startup-probe semantics in template-chart and rallly (no
  initialDelaySeconds, generous failureThreshold)
- Switch outline probes to its /_health endpoint
- Add readiness/startup probes to satisfactory
- Add startup probes to matrix-synapse, matrix-delegation-nginx,
  paperless-server, patchmon-frontend, urlaubsverwaltung
- Major version bump for all published charts
2026-08-21 17:36:53 +02:00
jklein 26f7ee4aa6 feat(matrix-synapse): fixed liveness and readiness probes for delegation service 2026-03-29 18:34:52 +02:00
jklein 6670f3bfc4 feat(matrix-synapse): added liveness and readiness probes, resource requests and limits 2026-03-29 18:31:50 +02:00
jklein ec3d32f247 feat(matrix-synapse): added delegation 2026-03-29 18:19:14 +02:00
jklein 1aae181175 feat(matrix-synapse): added delegation 2026-03-29 18:13:35 +02:00
jklein 9cb6880198 feat(matrix): changes 2026-03-20 18:06:04 +01:00
jklein 32f218f6ad feat(matrix): changed labels 2026-03-20 17:51:52 +01:00
jklein cc1c64e22f feat(matrix): changed image 2026-03-20 17:33:18 +01:00
jklein 2b3a976734 feat(matrix-synapse): added media-store 2026-03-18 09:38:06 +01:00
jklein ed26c1fda6 feat(matrix-synapse): fixed pvc permissions 2026-03-18 09:31:33 +01:00
jklein 0f7ac1d700 feat(matrix-synapse): added config Secret 2026-03-17 23:07:01 +01:00
jklein 95a250dc65 feat(matrix-synapse): added config Secret 2026-03-17 22:17:55 +01:00
jklein 9aa049b0dc feat(matrix-synapse): added initial chart 2026-03-17 22:07:42 +01:00