Gitea #143. Additive, default false, so the render is byte-identical to the previous release - proven by diffing both renders against origin/main rather than asserted. Switched on it adds 15008/TCP, ztunnel's HBONE tunnel, to the rule carrying the probe port, and - inside that rule's source-restricted branch - 169.254.7.127/32, the address the kubelet's probes arrive from once the pod is in the mesh. Ambient does not bypass NetworkPolicy enforcement, so without the port a pod whose namespace has joined the mesh is unreachable. The two halves are one value because the second is the one nobody thinks of: 15008 added by hand leaves a policy that passes review and drops every probe the first time probeSources is narrowed, and a pod that never becomes Ready reads as a broken application rather than as a policy. Minor, not major: additive value, unchanged default, unchanged render.
27 lines
1.1 KiB
YAML
27 lines
1.1 KiB
YAML
apiVersion: v2
|
|
name: garage
|
|
description: A Helm chart to deploy Garage, an S3-compatible object store, as a single node on Kubernetes
|
|
icon: https://garagehq.deuxfleurs.fr/images/garage-logo.svg
|
|
|
|
type: application
|
|
|
|
# appVersion is the exact image tag, and the "v" is part of it - so it is part
|
|
# of appVersion and of the "+up" suffix. Precedent: stalwart (+upv0.16.24),
|
|
# calibre-web-automated, matrix-synapse, ytdlp-web-player.
|
|
#
|
|
# The image is docker.io/dxflrs/garage, the MULTI-ARCH one. Upstream's own chart
|
|
# pins dxflrs/amd64_garage instead; that is a per-architecture image and pinning
|
|
# it would tie the chart to amd64 for no gain.
|
|
#
|
|
# THE TAG TRAP THIS VERSION HAS TO SURVIVE: next to the release tags the
|
|
# registry continuously receives COMMIT-SHA TAGS (40 hex characters, the newest
|
|
# of them dated 2026-10-03). A Renovate rule without a version constraint would
|
|
# offer those as "updates", which is why the garage block in renovate.json5
|
|
# carries a versioningTemplate anchored to ^v<major>.<minor>.<patch>$ - same
|
|
# shape as the stalwart block, for the same reason.
|
|
version: 2.1.0+upv2.4.1
|
|
appVersion: "v2.4.1"
|
|
|
|
maintainers:
|
|
- name: jklein
|