jlab-cluster/helm-charts
3
0 Fork 0
Code Issues 15 Pull Requests 3 Actions Packages Wiki Activity

Commit Graph

  • 4c0b1b9524 Update Helm release valkey to v2 renovate/valkey-2.x jlab-renovate-bot 2026-10-15 20:34:48 +00:00
  • ca3056e592 Update dependency kubernetes/kubernetes to v1.37.1 renovate/kubernetes-kubernetes-1.x jlab-renovate-bot 2026-10-15 20:34:33 +00:00
  • 95f3e8c1a1 docs(paperless-ngx): the policy header said TWO and listed three main jklein 2026-10-15 17:54:15 +00:00
  • 1894e7d465 test(ci): assert a chart's egress ports against the POD ports of the chart it dials jklein 2026-10-15 17:46:45 +00:00
  • 530227405c fix(paperless-ngx): egress names the Tika/Gotenberg POD ports, not the Service port jklein 2026-10-15 17:39:24 +00:00
  • 1ef23e9ce9 Update outlinewiki/outline Docker tag to v1.11.0 jlab-renovate-bot 2026-10-15 15:05:15 +00:00
  • ec9e64187b Merge pull request 'feat!: a NetworkPolicy in every chart, on by default' (#133) from feat/network-policies-all-charts into main jklein 2026-10-14 23:07:39 +00:00
  • b617068b16 Merge origin/main: Renovate's stalwart v0.16.26 into this branch jklein 2026-10-14 22:59:37 +00:00
  • b31a18918c docs(gotenberg): point the values comments at the switch, not at extraPorts jklein 2026-10-14 21:21:35 +00:00
  • e3f6256244 feat(gotenberg): a named switch for remote assets, off by default jklein 2026-10-14 21:19:34 +00:00
  • 1fd6c56c2e Update docker.io/stalwartlabs/stalwart Docker tag to v0.16.26 jlab-renovate-bot 2026-10-14 18:05:16 +00:00
  • be3e2cdd47 test(ci): exercise minecraft-server's NodePort branch, which nothing rendered jklein 2026-10-14 15:29:16 +00:00
  • 8233617f57 docs: the NetworkPolicy convention and its render test jklein 2026-10-14 14:48:21 +00:00
  • 73c2ec704f feat!: NetworkPolicy in the last five charts - the sweep is complete jklein 2026-10-14 14:46:11 +00:00
  • 28a0230ef0 feat!: NetworkPolicy in the NodePort and game-server charts, on by default jklein 2026-10-14 14:37:51 +00:00
  • 96c23b7912 feat(keycloak)!: NetworkPolicy, on by default - the full convention in one chart jklein 2026-10-14 14:30:30 +00:00
  • e1adcef71f feat!: NetworkPolicy in nine more charts, on by default jklein 2026-10-14 14:26:25 +00:00
  • 6bde72192f fix(ci): put outline's extraPorts entry where it belongs in the fixture jklein 2026-10-14 14:21:45 +00:00
  • ee9ae8a724 feat!: NetworkPolicy in six more charts, on by default jklein 2026-10-14 14:20:39 +00:00
  • de995d0f53 Revert the enforcement experiment, and record what it measured jklein 2026-10-14 14:17:49 +00:00
  • 813c923070 test(outline): does the install-test enforce policies at all? [EXPERIMENT, reverted next] jklein 2026-10-14 14:07:26 +00:00
  • 77b978d669 feat(outline)!: NetworkPolicy, on by default jklein 2026-10-14 14:07:06 +00:00
  • d3ef3729f8 test(ci): prove the install-test enforces NetworkPolicies [EXPERIMENT, reverted next] jklein 2026-10-14 14:00:11 +00:00
  • 31d37c9767 feat(cyberchef)!: NetworkPolicy, on by default jklein 2026-10-14 13:59:51 +00:00
  • 36bcfd3b11 feat(ci): assert every rendered NetworkPolicy against its own render jklein 2026-10-14 13:56:06 +00:00
  • 1001de620a feat(template-chart): the reference NetworkPolicy, on by default jklein 2026-10-14 13:55:50 +00:00
  • c9edbb1750 Update docker.io/searxng/searxng Docker tag to v2026.10.13-22c64b8d3 jlab-renovate-bot 2026-10-13 19:35:58 +00:00
  • 262776d18d Update ghcr.io/paperless-ngx/paperless-ngx Docker tag to v3.3.1 jlab-renovate-bot 2026-10-13 19:36:04 +00:00
  • 39844fc92c ci: hold every scalar that must be a string, and the required podAffinity jklein 2026-10-13 19:09:34 +00:00
  • 4b2bde505d feat(paperless-ngx)!: quote every operator scalar, pin the consume mover, drop oidcSecretRef jklein 2026-10-13 19:09:16 +00:00
  • 59d2614384 feat(ci): the chart bump follows the app bump jklein 2026-10-13 18:47:44 +00:00
  • 978e6fbaa8 refactor(stalwart): name the MTA-STS Ingress objects by index, per the corrected rule jklein 2026-10-13 11:03:36 +00:00
  • 71b757bf9f docs(README): the MTA-STS delta on top of both landed rounds, measured at 64/22 jklein 2026-10-13 10:42:18 +00:00
  • 771c26500c fix(stalwart): let the mode conflict, not the MTA-STS entry, name the defect jklein 2026-10-13 10:22:10 +00:00
  • b4c9823e01 feat(stalwart): MTA-STS routes as a maintainable list, in both routing modes jklein 2026-10-13 10:16:53 +00:00
  • 649417b428 Merge pull request 'feat(keycloak): one hostname per realm, in both routing modes' (#125) from feat/keycloak-realm-hosts into main jklein 2026-10-13 10:38:09 +00:00
  • 5cdb2a6227 Merge origin/main into feat/keycloak-realm-hosts, and settle README line 184 jklein 2026-10-13 10:29:55 +00:00
  • f530f58b1d docs(rss-bridge): #51 was closed, and the cause was never identified (2.1.1) jklein 2026-10-13 10:28:09 +00:00
  • a411ec3c90 docs(rss-bridge): phrase the reproduced green without a run count jklein 2026-10-13 10:25:55 +00:00
  • 8896fc8d7d docs(README): the 58/22 figure is a delta, not a running total jklein 2026-10-13 10:20:48 +00:00
  • 23ac537e24 docs(rss-bridge): the green install-test reproduced, so say "twice" rather than "one run" jklein 2026-10-13 10:17:42 +00:00
  • 7a2eb29e9e feat(keycloak): one hostname per realm, in both routing modes jklein 2026-10-13 10:07:35 +00:00
  • 7d365c912c docs(rss-bridge): the install-test went green, and the chart is ruled out as the cause jklein 2026-10-13 10:10:28 +00:00
  • 45b2d2ea4e feat(rss-bridge): Gateway-API as an alternative to the Ingress (last chart) jklein 2026-10-13 09:58:11 +00:00
  • 6517643cd6 Update urlaubsverwaltung/urlaubsverwaltung Docker tag to v6.17.0 jlab-renovate-bot 2026-10-13 09:06:31 +00:00
  • 96dd1adbda Update l4rm4nd/vouchervault Docker tag to v1.30.3 jlab-renovate-bot 2026-10-13 09:06:04 +00:00
  • 6d79d8f270 docs(README): group 3 of the Gateway-API sweep, and four corrections it forced jklein 2026-10-12 21:26:38 +00:00
  • e4b41577ae feat(ytdlp-web-player): Gateway-API as an alternative to the Ingress jklein 2026-10-12 21:22:49 +00:00
  • b10800da2a feat(homeassistant): Gateway-API as an alternative to the Ingress jklein 2026-10-12 21:16:03 +00:00
  • 3e969c5659 feat(stalwart): Gateway-API as an alternative to the Ingress jklein 2026-10-12 21:09:33 +00:00
  • e54cfe5fdd feat(matrix-synapse): Gateway-API as an alternative to the Ingress jklein 2026-10-12 20:55:55 +00:00
  • 9625d8b182 feat(bulwark): Gateway-API as an alternative to the Ingress jklein 2026-10-12 20:49:56 +00:00
  • d0f0d49a93 feat(keycloak): Gateway-API as an alternative to the two Ingresses jklein 2026-10-12 20:44:49 +00:00
  • d36112aaf6 chore(renovate): group the freesailarr stack into one PR per cycle jklein 2026-10-12 22:00:42 +00:00
  • 7003f3674c feat(freesailarr)!: eight image updates and a trustedNetworks value for the *arr apps jklein 2026-10-12 22:00:23 +00:00
  • f202fdc3fc fix(freesailarr): redirect the bare /qbittorrent prefix in Gateway mode jklein 2026-10-12 20:06:09 +00:00
  • 471ea5ba5d docs(README): the remaining-charts count, without double-counting rss-bridge jklein 2026-10-12 18:36:58 +00:00
  • bd1fdc09a0 feat: Gateway-API as an alternative to the Ingress in five annotation charts jklein 2026-10-12 18:15:29 +00:00
  • 33d7cedbab feat: Gateway-API as an alternative to the Ingress in eight charts jklein 2026-10-12 16:06:18 +00:00
  • de92e59bb0 docs(README): the HTTPRoute test's figure from the CI run, not from the local subset jklein 2026-10-12 15:25:23 +00:00
  • 50f683776e feat(cyberchef): Gateway-API as an alternative to the Ingress (pilot) jklein 2026-10-12 15:16:26 +00:00
  • b5b5d9a310 Update docker.io/stalwartlabs/stalwart Docker tag to v0.16.25 jlab-renovate-bot 2026-10-08 07:35:13 +00:00
  • 6ade74db80 feat(stalwart): spread each node group over nodes and give each one a PDB jklein 2026-10-07 11:24:37 +00:00
  • 1698fc0aeb Update itzg/mc-router Docker tag to v1.47.2 jlab-renovate-bot 2026-10-07 14:35:14 +00:00
  • 6e196c26a5 test(ci): restore the theme mount - the A/B shows the restart is pre-existing jklein 2026-10-06 11:43:46 +00:00
  • 8cd0c14e3f test(ci): control run 598 recorded (81s, 0 restarts) jklein 2026-10-06 11:29:44 +00:00
  • 71cc545277 test(ci): A/B control run - keycloak install-test without the theme mount (temporary) jklein 2026-10-06 11:22:26 +00:00
  • d7067abfab docs(ci): the whole restart series, intermittent on an unchanged spec jklein 2026-10-06 11:13:46 +00:00
  • 5e47191252 docs(ci): three runs, and the load explanation does not hold jklein 2026-10-06 11:04:16 +00:00
  • 34c600f7a8 docs(ci): the second run settles it - the keycloak restart was the runner, not the pod spec jklein 2026-10-06 10:54:48 +00:00
  • 1cf59f5448 docs(ci): record the keycloak install-test run that was slower and restarted once jklein 2026-10-06 10:46:57 +00:00
  • d8b392bf64 feat(keycloak): extraVolumes/extraVolumeMounts for custom themes and providers (1.1.0+up26.8.0) jklein 2026-10-06 10:26:13 +00:00
  • b39f36ff5c feat(bulwark): new chart for Bulwark Webmail (1.0.0+up1.12.0) jklein 2026-10-05 21:19:08 +00:00
  • 40e29f7f72 Update lukevella/rallly Docker tag to v4.15.4 jlab-renovate-bot 2026-10-06 09:04:07 +00:00
  • 28567842f3 fix(keycloak): group 1000 instead of the image's root group jklein 2026-10-04 17:23:48 +00:00
  • 320257c742 fix(keycloak): readiness could not fail on the database, and the measured budget jklein 2026-10-04 17:17:09 +00:00
  • 4c1cff1744 feat(keycloak): new chart for Keycloak (1.0.0+up26.8.0) jklein 2026-10-04 17:02:47 +00:00
  • a23d4977c5 Update urlaubsverwaltung/urlaubsverwaltung Docker tag to v6.15.0 jlab-renovate-bot 2026-10-04 15:40:59 +00:00
  • 639e0b5f57 Update docker.io/rssbridge/rss-bridge Docker tag to v2026 jlab-renovate-bot 2026-10-04 13:15:44 +00:00
  • 236767070d Update dependency aquasecurity/trivy to v0.75.0 jlab-renovate-bot 2026-10-04 14:41:27 +00:00
  • caea6e7353 Update Helm release oauth2-proxy to v10.7.1 jlab-renovate-bot 2026-10-04 13:15:31 +00:00
  • b19da4e580 fix(garage): a comment in the ConfigMap tripped Trivy's KSV-0109 jklein 2026-10-03 20:45:56 +00:00
  • 01336af953 docs(garage): state the admin surface precisely, including open /metrics jklein 2026-10-03 20:42:20 +00:00
  • 5d10b02458 fix(garage): compressionLevel disables with "none", never with 0 jklein 2026-10-03 20:40:47 +00:00
  • 79b7e44fdc feat(garage): new chart for the Garage object store jklein 2026-10-03 20:29:38 +00:00
  • bf2e1009e4 Update docker.io/library/busybox Docker tag to v1.38.0 jlab-renovate-bot 2026-10-02 21:12:26 +00:00
  • a9ca5302de feat(paperless-ngx): optional valkey subchart, password from the redis item jklein 2026-10-02 21:24:22 +00:00
  • a288ee231a Pin dependencies jlab-renovate-bot 2026-10-02 16:13:28 +00:00
  • 07c75e80c1 feat(stalwart): take our own published valkey chart as the subchart jklein 2026-10-02 20:40:24 +00:00
  • 780cb8eafd feat(stalwart): new chart for the Stalwart mail server jklein 2026-10-02 19:13:49 +00:00
  • ee43c33ef4 Update dependency kubernetes/kubernetes to v1.35.9 jlab-renovate-bot 2026-10-02 16:13:30 +00:00
  • 9ae7eef99f Update lukevella/rallly Docker tag to v4.15.3 jlab-renovate-bot 2026-10-02 15:44:23 +00:00
  • f284d209f7 sonar: correct the project key, and record what the first run measured jklein 2026-10-02 00:15:06 +00:00
  • 67d8c94fb3 ci: call the shared SonarQube block, and say what it does not do jklein 2026-10-01 23:49:48 +00:00
  • 8878329f31 ci: publish charts through the shared block in workflow-util/pipelines jklein 2026-10-01 23:01:47 +00:00
  • f3ad3a9844 Update urlaubsverwaltung/urlaubsverwaltung Docker tag to v6.14.0 jlab-renovate-bot 2026-09-28 16:01:56 +00:00
  • b614b53602 ci: remove the temporary repository_owner probe, record the measurement jklein 2026-09-30 18:51:55 +00:00
  • a12983fbea ci(publish): compose the registry URL from a base and the repository owner jklein 2026-09-30 18:49:56 +00:00
  • 7ff54eecf7 docs(convertx): record the measured install-test time feat/convertx-chart jklein 2026-09-30 15:32:32 +00:00
  • 5be10251f4 feat(convertx): new chart for ConvertX (1.0.0+upv0.19.0) jklein 2026-09-30 15:26:33 +00:00