jlab-cluster/helm-charts
3
0 Fork 0
Code Issues 15 Pull Requests 3 Actions Packages Wiki Activity
189 Commits 5 Branches 0 Tags
b5eba4cbf10bfdfe1ea0e464c106a6a73eb63db0
Commit Graph
20 Commits
Author SHA1 Message Date
jklein b5eba4cbf1 Harden pod and container security contexts across all workloads 
Add securityContext hardening (runAsNonRoot, readOnlyRootFilesystem,
capabilities drop ALL, allowPrivilegeEscalation false) to the 10 workloads
that lacked it: apache-tika, cyberchef, gotenberg, homeassistant,
matrix-delegation-nginx, paperless-server, paperless-consume cronjob
(plus automountServiceAccountToken false), patchmon-frontend,
urlaubsverwaltung and zipline. All contexts are configurable via
securityContext.pod / securityContext.container in values.yaml; writable
paths are provided as emptyDirs. Image-forced deviations (Home Assistant
root start for s6-overlay + NET_RAW for discovery, paperless root init
container for /run ownership) are documented in the charts' values.yaml.
Major version bump for every changed published chart.
 2026-08-21 21:49:05 +02:00
jklein 78d78973c5 Ensure liveness, readiness and startup probes on all workloads 
Every container in every Deployment/StatefulSet now defines all three
probes. The paperless-ngx consume CronJob intentionally has none (batch
workload).

- Add probes: apache-tika, calibre-web-automated, cyberchef, gotenberg,
  homeassistant, patchmon-backend, samba (tcp/445), teamspeak-server
  (tcp/30033), zipline (/api/healthcheck)
- Fix voucher-vault null probe values with real defaults
- Fix startup-probe semantics in template-chart and rallly (no
  initialDelaySeconds, generous failureThreshold)
- Switch outline probes to its /_health endpoint
- Add readiness/startup probes to satisfactory
- Add startup probes to matrix-synapse, matrix-delegation-nginx,
  paperless-server, patchmon-frontend, urlaubsverwaltung
- Major version bump for all published charts
 2026-08-21 17:36:53 +02:00
jklein 34332fa302 feat(charts): fixed pvc name 2026-03-12 20:51:07 +01:00
jklein cf335d77e2 feat(charts): fixed pvc name 2026-03-12 20:49:56 +01:00
jklein b3c90394e2 feat(homeassistant): added pvc for persistent storage configuration 2026-03-12 20:35:55 +01:00
jklein 597387dcd9 feat(homeassistant): added recorder-config 2026-03-03 23:08:07 +01:00
jklein e0d32f00e1 feat(homeassistant): added recorder-config 2026-03-03 23:06:05 +01:00
jklein 53fbfc7e3f feat(homeassistant): moved config to secret 2026-03-03 22:58:52 +01:00
jklein d375a62ff5 feat(homeassistant): moved config to secret 2026-03-03 22:56:45 +01:00
jklein cdcc873dfe feat(homeassistant): moved config to secret 2026-03-03 22:50:57 +01:00
jklein 68af01a7da feat(homeassistant): added http-config prototype 2026-03-03 22:37:31 +01:00
jklein ea3fb507ab feat(homeassistant): added http-config prototype 2026-03-03 22:36:36 +01:00
jklein 72e9fda8fe feat(homeassistant): added http-config prototype 2026-03-03 22:20:43 +01:00
jklein b245aa5700 feat(homeassistant): added http-config prototype 2026-03-03 22:15:34 +01:00
jklein f885fb208a feat(homeassistant): added http-config prototype 2026-03-03 22:12:09 +01:00
jklein 633166f29f feat(homeassistant): fixes 2026-03-03 18:15:54 +01:00
jklein cf6ca0aa5a feat(homeassistant): removed notes 2026-03-03 18:14:20 +01:00
jklein eca6f9748c feat(homeassistant): changed naming 2026-03-03 18:13:21 +01:00
jklein 504e93a870 feat(homeassistant): removed test 2026-03-03 18:09:43 +01:00
jklein 0e3961bdd5 feat(homeassistant): added initial chart 2026-03-03 18:03:19 +01:00