jklein 705ee066a4 CI: record the paperless-ngx root init container as a documented exception ...

The pod runs rootless as uid/gid 1000; only init-run-ownership is root, to
chown the /run emptyDir that s6-overlay requires to be owned by the runtime
uid. Justified in paperless-ngx/values.yaml, so AVD-KSV-0105/-0022/-0106 are
excepted for that chart with the reason, instead of being reported as if the
workload itself ran as root.

2026-08-23 23:14:12 +02:00

..

apache-tika

Add install-test stage to the PR pipeline (k3d)

2026-08-21 23:12:38 +02:00

calibre-web-automated

Calibre-Web-Automated chart: naming scheme, security hardening (conventions batch 3)

2026-08-22 18:46:07 +02:00

common

Add install-test stage to the PR pipeline (k3d)

2026-08-21 23:12:38 +02:00

cyberchef

Strict clusterIssuer also for cyberchef and urlaubsverwaltung

2026-08-22 23:13:23 +02:00

gotenberg

Add install-test stage to the PR pipeline (k3d)

2026-08-21 23:12:38 +02:00

homeassistant

Add install-test stage to the PR pipeline (k3d)

2026-08-21 23:12:38 +02:00

matrix-synapse

Matrix-Synapse chart: security hardening, naming scheme, configurable probes

2026-08-22 19:16:21 +02:00

minecraft-router

Minecraft-router chart: naming scheme, hardening, probes, values interface

2026-08-23 15:14:49 +02:00

minecraft-server

Bring minecraft-server up to the chart style guidelines (1.0.0+upjava8)

2026-08-23 16:40:44 +02:00

outline

Conventions batch 4: env blocks, homeassistant className default, strict clusterIssuer

2026-08-22 20:10:06 +02:00

paperless-ngx

paperless-ngx: an empty barcodes block falls back to the chart defaults

2026-08-23 19:31:20 +02:00

patchmon

Update patchmon to 2.1.3

2026-08-22 13:18:59 +02:00

rallly

Add install-test stage to the PR pipeline (k3d)

2026-08-21 23:12:38 +02:00

samba

Samba chart: security hardening, configurable node ports, values cleanup

2026-08-22 15:50:30 +02:00

teamspeak-server

Update app versions (batch): tika, gotenberg, synapse, rallly, samba, urlaubsverwaltung, voucher-vault, zipline, teamspeak

2026-08-22 08:44:00 +02:00

trivy

CI: record the paperless-ngx root init container as a documented exception

2026-08-23 23:14:12 +02:00

urlaubsverwaltung

Strict clusterIssuer also for cyberchef and urlaubsverwaltung

2026-08-22 23:13:23 +02:00

voucher-vault

Add install-test stage to the PR pipeline (k3d)

2026-08-21 23:12:38 +02:00

zipline

Zipline chart: ingress standard, secret ref structure (conventions batch 3)

2026-08-22 19:01:04 +02:00

excluded-charts.txt

Update app versions (batch): tika, gotenberg, synapse, rallly, samba, urlaubsverwaltung, voucher-vault, zipline, teamspeak

2026-08-22 08:44:00 +02:00

run-install-test.sh

Add install-test stage to the PR pipeline (k3d)

2026-08-21 23:12:38 +02:00

run-trivy-config.sh

CI: report Trivy misconfiguration findings for changed charts

2026-08-23 23:14:12 +02:00