jklein
6fc8332ffd
Gitea #143. Additive, default false, so the render is byte-identical to the previous release - proven by diffing both renders against origin/main rather than asserted. Switched on it adds 15008/TCP, ztunnel's HBONE tunnel, to the rule carrying the probe port, and - inside that rule's source-restricted branch - 169.254.7.127/32, the address the kubelet's probes arrive from once the pod is in the mesh. Ambient does not bypass NetworkPolicy enforcement, so without the port a pod whose namespace has joined the mesh is unreachable. The two halves are one value because the second is the one nobody thinks of: 15008 added by hand leaves a policy that passes review and drops every probe the first time probeSources is narrowed, and a pod that never becomes Ready reads as a broken application rather than as a policy. Minor, not major: additive value, unchanged default, unchanged render.
17 lines
617 B
YAML
17 lines
617 B
YAML
apiVersion: v2
|
|
name: searxng
|
|
description: A Helm chart to deploy SearXNG on Kubernetes
|
|
icon: https://raw.githubusercontent.com/searxng/searxng/master/client/simple/src/brand/searxng.svg
|
|
|
|
type: application
|
|
|
|
# SearXNG publishes no semver line at all: every image tag is <date>-<commit>
|
|
# (2026.8.22-9fea41204) and "latest" moves daily. appVersion is therefore the
|
|
# exact tag, and the +up suffix normalizes the dash to a dot as the versioning
|
|
# scheme requires - the same shape rss-bridge and minecraft-server use.
|
|
version: 2.1.0+up2026.10.13.22c64b8d3
|
|
appVersion: "2026.10.13-22c64b8d3"
|
|
|
|
maintainers:
|
|
- name: jklein
|