chore(deps): update container image tccr.io/truecharts/adminer to latest (#14200)

**Description**
A Q&A platform software for teams at any scales.
⚒️ Fixes  # <!--(issue)-->

**⚙️ Type of change**

- [X] ⚙️ Feature/App addition
- [ ] 🪛 Bugfix
- [ ] ⚠️ Breaking change (fix or feature that would cause existing
functionality to not work as expected)
- [ ] 🔃 Refactor of current code

**🧪 How Has This Been Tested?**
<!--
Please describe the tests that you ran to verify your changes. Provide
instructions so we can reproduce. Please also list any relevant details
for your test configuration
-->

**📃 Notes:**
<!-- Please enter any other relevant information here -->

**✔️ Checklist:**

- [X] ⚖️ My code follows the style guidelines of this project
- [X] 👀 I have performed a self-review of my own code
- [ ] #️⃣ I have commented my code, particularly in hard-to-understand
areas
- [ ] 📄 I have made corresponding changes to the documentation
- [ ] ⚠️ My changes generate no new warnings
- [ ] 🧪 I have added tests to this description that prove my fix is
effective or that my feature works
- [ ] ⬆️ I increased versions for any altered app according to semantic
versioning

**➕ App addition**

If this PR is an app addition please make sure you have done the
following.

- [X] 🪞 I have opened a PR on
[truecharts/containers](https://github.com/truecharts/containers) adding
the container to TrueCharts mirror repo.
- [X] 🖼️ I have added an icon in the Chart's root directory called
`icon.png`

---

_Please don't blindly check all the boxes. Read them and only check
those that apply.
Those checkboxes are there for the reviewer to see what is this all
about and
the status of this PR with a quick glance._

---------

Signed-off-by: Stavros Kois <47820033+stavros-k@users.noreply.github.com>
Co-authored-by: Stavros Kois <47820033+stavros-k@users.noreply.github.com>
Co-authored-by: Stavros kois <s.kois@outlook.com>

.all-contributorsrc

@@ -1883,6 +1883,222 @@
         "code",
         "doc"
       ]
+    },
+    {
+      "login": "Physics-Dude",
+      "name": "Physics-Dude",
+      "avatar_url": "https://avatars.githubusercontent.com/u/22563517?v=4",
+      "profile": "https://github.com/Physics-Dude",
+      "contributions": [
+        "doc"
+      ]
+    },
+    {
+      "login": "waflint",
+      "name": "waflint",
+      "avatar_url": "https://avatars.githubusercontent.com/u/94139453?v=4",
+      "profile": "https://github.com/waflint",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "Shrinks99",
+      "name": "Henry Wilkinson",
+      "avatar_url": "https://avatars.githubusercontent.com/u/5672810?v=4",
+      "profile": "https://github.com/Shrinks99",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "cedstrom",
+      "name": "cedstrom",
+      "avatar_url": "https://avatars.githubusercontent.com/u/6175957?v=4",
+      "profile": "https://github.com/cedstrom",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "v3DJG6GL",
+      "name": "v3DJG6GL",
+      "avatar_url": "https://avatars.githubusercontent.com/u/72495210?v=4",
+      "profile": "https://github.com/v3DJG6GL",
+      "contributions": [
+        "bug"
+      ]
+    },
+    {
+      "login": "polarstack",
+      "name": "polarstack",
+      "avatar_url": "https://avatars.githubusercontent.com/u/42521003?v=4",
+      "profile": "https://github.com/polarstack",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "K1Hyve",
+      "name": "Keyvan",
+      "avatar_url": "https://avatars.githubusercontent.com/u/53298451?v=4",
+      "profile": "https://github.com/K1Hyve",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "MickaelFontes",
+      "name": "MickaelFontes",
+      "avatar_url": "https://avatars.githubusercontent.com/u/81414455?v=4",
+      "profile": "https://github.com/MickaelFontes",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "blastik",
+      "name": "David CM",
+      "avatar_url": "https://avatars.githubusercontent.com/u/3662083?v=4",
+      "profile": "https://github.com/blastik",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "aamirazad",
+      "name": "Aamir Azad",
+      "avatar_url": "https://avatars.githubusercontent.com/u/82281117?v=4",
+      "profile": "http://tigertutoringtool.aamira.me",
+      "contributions": [
+        "doc"
+      ]
+    },
+    {
+      "login": "jordan-woyak",
+      "name": "Jordan Woyak",
+      "avatar_url": "https://avatars.githubusercontent.com/u/1768214?v=4",
+      "profile": "https://github.com/jordan-woyak",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "simon-hofmann",
+      "name": "Simon Hofman",
+      "avatar_url": "https://avatars.githubusercontent.com/u/23562420?v=4",
+      "profile": "https://github.com/simon-hofmann",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "notyouraveragegamer",
+      "name": "notyouraveragegamer",
+      "avatar_url": "https://avatars.githubusercontent.com/u/104248676?v=4",
+      "profile": "https://github.com/NotYourAverageGamer",
+      "contributions": [
+        "doc"
+      ]
+    },
+    {
+      "login": "varac",
+      "name": "Varac",
+      "avatar_url": "https://avatars.githubusercontent.com/u/488213?v=4",
+      "profile": "https://www.varac.net",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "tuxpizza",
+      "name": "tuxsudo",
+      "avatar_url": "https://avatars.githubusercontent.com/u/84710786?v=4",
+      "profile": "https://tux.pizza",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "TylerRudie",
+      "name": "TylerRudie",
+      "avatar_url": "https://avatars.githubusercontent.com/u/2695916?v=4",
+      "profile": "https://github.com/TylerRudie",
+      "contributions": [
+        "doc"
+      ]
+    },
+    {
+      "login": "qnb59bny5x",
+      "name": "qnb59bny5x",
+      "avatar_url": "https://avatars.githubusercontent.com/u/108427982?v=4",
+      "profile": "https://github.com/qnb59bny5x",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "drndos",
+      "name": "Filip Bednárik",
+      "avatar_url": "https://avatars.githubusercontent.com/u/5576134?v=4",
+      "profile": "https://blog.drndos.sk",
+      "contributions": [
+        "bug"
+      ]
+    },
+    {
+      "login": "sshcherbinin",
+      "name": "Serhii Shcherbinin",
+      "avatar_url": "https://avatars.githubusercontent.com/u/92396963?v=4",
+      "profile": "https://github.com/sshcherbinin",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "qraynaud",
+      "name": "Quentin Raynaud",
+      "avatar_url": "https://avatars.githubusercontent.com/u/65991?v=4",
+      "profile": "https://github.com/qraynaud",
+      "contributions": [
+        "bug"
+      ]
+    },
+    {
+      "login": "thegcat",
+      "name": "Felix Schäfer",
+      "avatar_url": "https://avatars.githubusercontent.com/u/22835?v=4",
+      "profile": "http://fachschaften.org",
+      "contributions": [
+        "doc"
+      ]
+    },
+    {
+      "login": "jndeverteuil",
+      "name": "Julien Nicolas de Verteuil",
+      "avatar_url": "https://avatars.githubusercontent.com/u/6644855?v=4",
+      "profile": "https://github.com/jndeverteuil",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "gabrieldonadel",
+      "name": "Gabriel Donadel Dall'Agnol",
+      "avatar_url": "https://avatars.githubusercontent.com/u/11707729?v=4",
+      "profile": "https://github.com/gabrieldonadel",
+      "contributions": [
+        "doc"
+      ]
+    },
+    {
+      "login": "jon-stumpf",
+      "name": "Jon S. Stumpf",
+      "avatar_url": "https://avatars.githubusercontent.com/u/7144996?v=4",
+      "profile": "https://github.com/jon-stumpf",
+      "contributions": [
+        "doc"
+      ]
     }
   ],
   "contributorsPerLine": 7,

.github/README.md

@@ -48,7 +48,7 @@ For big changes we do have a roadmap, every spot on the roadmap is synced to a T
 
 **Restructure of the Project - TrueNAS SCALE "Bluefin" 22.xx ALPHA 1**
 
-_The current project is hitting internal performance issues, for this reason we need to rework the structure and split some parts of the project into seperate repositories._
+_The current project is hitting internal performance issues, for this reason we need to rework the structure and split some parts of the project into separate repositories._
 
 <br />
 
@@ -60,7 +60,7 @@ _The shared Common (chart) basis, used by all our Charts, needs some significant
 
 **Increased test coverage - TrueNAS SCALE "Bluefin" 22.xx BETA 1**
 
-_With most parts of our project somewhat cleaned up, we need to work on increasing the coverage of our test system. Our unittests should cover all features and we should also take upgrades into account when testing Chart changes_
+_With most parts of our project somewhat cleaned up, we need to work on increasing the coverage of our test system. Our unit tests should cover all features and we should also take upgrades into account when testing Chart changes_
 
 <br />
 
@@ -124,7 +124,7 @@ A lot of our work is based on the great effort of others. We would love to exten
 ## Contributors ✨
 
 <!-- ALL-CONTRIBUTORS-BADGE:START - Do not remove or modify this section -->
-[![All Contributors](https://img.shields.io/badge/all_contributors-201-orange.svg?style=for-the-badge)](#contributors)
+[![All Contributors](https://img.shields.io/badge/all_contributors-225-orange.svg?style=for-the-badge)](#contributors)
 <!-- ALL-CONTRIBUTORS-BADGE:END -->
 
 Thanks goes to these wonderful people ([emoji key](https://allcontributors.org/docs/en/emoji-key)):
@@ -394,6 +394,38 @@ Thanks goes to these wonderful people ([emoji key](https://allcontributors.org/d
       <td align="center" valign="top" width="14.28%"><a href="https://github.com/svetlemodry"><img src="https://avatars.githubusercontent.com/u/8712544?v=4?s=100" width="100px;" alt="Jaroslav Lichtblau"/><br /><sub><b>Jaroslav Lichtblau</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=svetlemodry" title="Documentation">📖</a></td>
       <td align="center" valign="top" width="14.28%"><a href="https://github.com/Maximilian-Staab"><img src="https://avatars.githubusercontent.com/u/20892091?v=4?s=100" width="100px;" alt="MaximilianS"/><br /><sub><b>MaximilianS</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=Maximilian-Staab" title="Documentation">📖</a></td>
       <td align="center" valign="top" width="14.28%"><a href="http://dionlarson.com"><img src="https://avatars.githubusercontent.com/u/1843883?v=4?s=100" width="100px;" alt="Dion Larson"/><br /><sub><b>Dion Larson</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=dionlarson" title="Code">💻</a> <a href="https://github.com/truecharts/charts/commits?author=dionlarson" title="Documentation">📖</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/Physics-Dude"><img src="https://avatars.githubusercontent.com/u/22563517?v=4?s=100" width="100px;" alt="Physics-Dude"/><br /><sub><b>Physics-Dude</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=Physics-Dude" title="Documentation">📖</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/waflint"><img src="https://avatars.githubusercontent.com/u/94139453?v=4?s=100" width="100px;" alt="waflint"/><br /><sub><b>waflint</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=waflint" title="Code">💻</a></td>
+    </tr>
+    <tr>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/Shrinks99"><img src="https://avatars.githubusercontent.com/u/5672810?v=4?s=100" width="100px;" alt="Henry Wilkinson"/><br /><sub><b>Henry Wilkinson</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=Shrinks99" title="Code">💻</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/cedstrom"><img src="https://avatars.githubusercontent.com/u/6175957?v=4?s=100" width="100px;" alt="cedstrom"/><br /><sub><b>cedstrom</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=cedstrom" title="Code">💻</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/v3DJG6GL"><img src="https://avatars.githubusercontent.com/u/72495210?v=4?s=100" width="100px;" alt="v3DJG6GL"/><br /><sub><b>v3DJG6GL</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3Av3DJG6GL" title="Bug reports">🐛</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/polarstack"><img src="https://avatars.githubusercontent.com/u/42521003?v=4?s=100" width="100px;" alt="polarstack"/><br /><sub><b>polarstack</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=polarstack" title="Code">💻</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/K1Hyve"><img src="https://avatars.githubusercontent.com/u/53298451?v=4?s=100" width="100px;" alt="Keyvan"/><br /><sub><b>Keyvan</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=K1Hyve" title="Code">💻</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/MickaelFontes"><img src="https://avatars.githubusercontent.com/u/81414455?v=4?s=100" width="100px;" alt="MickaelFontes"/><br /><sub><b>MickaelFontes</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=MickaelFontes" title="Code">💻</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/blastik"><img src="https://avatars.githubusercontent.com/u/3662083?v=4?s=100" width="100px;" alt="David CM"/><br /><sub><b>David CM</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=blastik" title="Code">💻</a></td>
+    </tr>
+    <tr>
+      <td align="center" valign="top" width="14.28%"><a href="http://tigertutoringtool.aamira.me"><img src="https://avatars.githubusercontent.com/u/82281117?v=4?s=100" width="100px;" alt="Aamir Azad"/><br /><sub><b>Aamir Azad</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=aamirazad" title="Documentation">📖</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/jordan-woyak"><img src="https://avatars.githubusercontent.com/u/1768214?v=4?s=100" width="100px;" alt="Jordan Woyak"/><br /><sub><b>Jordan Woyak</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=jordan-woyak" title="Code">💻</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/simon-hofmann"><img src="https://avatars.githubusercontent.com/u/23562420?v=4?s=100" width="100px;" alt="Simon Hofman"/><br /><sub><b>Simon Hofman</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=simon-hofmann" title="Code">💻</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/NotYourAverageGamer"><img src="https://avatars.githubusercontent.com/u/104248676?v=4?s=100" width="100px;" alt="notyouraveragegamer"/><br /><sub><b>notyouraveragegamer</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=notyouraveragegamer" title="Documentation">📖</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://www.varac.net"><img src="https://avatars.githubusercontent.com/u/488213?v=4?s=100" width="100px;" alt="Varac"/><br /><sub><b>Varac</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=varac" title="Code">💻</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://tux.pizza"><img src="https://avatars.githubusercontent.com/u/84710786?v=4?s=100" width="100px;" alt="tuxsudo"/><br /><sub><b>tuxsudo</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=tuxpizza" title="Code">💻</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/TylerRudie"><img src="https://avatars.githubusercontent.com/u/2695916?v=4?s=100" width="100px;" alt="TylerRudie"/><br /><sub><b>TylerRudie</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=TylerRudie" title="Documentation">📖</a></td>
+    </tr>
+    <tr>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/qnb59bny5x"><img src="https://avatars.githubusercontent.com/u/108427982?v=4?s=100" width="100px;" alt="qnb59bny5x"/><br /><sub><b>qnb59bny5x</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=qnb59bny5x" title="Code">💻</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://blog.drndos.sk"><img src="https://avatars.githubusercontent.com/u/5576134?v=4?s=100" width="100px;" alt="Filip Bednárik"/><br /><sub><b>Filip Bednárik</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3Adrndos" title="Bug reports">🐛</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/sshcherbinin"><img src="https://avatars.githubusercontent.com/u/92396963?v=4?s=100" width="100px;" alt="Serhii Shcherbinin"/><br /><sub><b>Serhii Shcherbinin</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=sshcherbinin" title="Code">💻</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/qraynaud"><img src="https://avatars.githubusercontent.com/u/65991?v=4?s=100" width="100px;" alt="Quentin Raynaud"/><br /><sub><b>Quentin Raynaud</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3Aqraynaud" title="Bug reports">🐛</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="http://fachschaften.org"><img src="https://avatars.githubusercontent.com/u/22835?v=4?s=100" width="100px;" alt="Felix Schäfer"/><br /><sub><b>Felix Schäfer</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=thegcat" title="Documentation">📖</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/jndeverteuil"><img src="https://avatars.githubusercontent.com/u/6644855?v=4?s=100" width="100px;" alt="Julien Nicolas de Verteuil"/><br /><sub><b>Julien Nicolas de Verteuil</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=jndeverteuil" title="Code">💻</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/gabrieldonadel"><img src="https://avatars.githubusercontent.com/u/11707729?v=4?s=100" width="100px;" alt="Gabriel Donadel Dall'Agnol"/><br /><sub><b>Gabriel Donadel Dall'Agnol</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=gabrieldonadel" title="Documentation">📖</a></td>
+    </tr>
+    <tr>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/jon-stumpf"><img src="https://avatars.githubusercontent.com/u/7144996?v=4?s=100" width="100px;" alt="Jon S. Stumpf"/><br /><sub><b>Jon S. Stumpf</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=jon-stumpf" title="Documentation">📖</a></td>
     </tr>
   </tbody>
 </table>

.github/SUPPORT.md

@@ -20,6 +20,10 @@ We also document which versions of TrueNAS will receive TrueCharts updates and f
 | 22.12.0          | `master` | :white_check_mark:     | :white_check_mark:        | :white_check_mark:    | Stable Release as of 2022-12-13                                                                                |
 | 22.12.1          | `master` | :white_check_mark:     | :white_check_mark:        | :white_check_mark:    | Stable Release as of 2023-02-21                                                                                |
 | 22.12.2          | `master` | :white_check_mark:     | :white_check_mark:        | :white_check_mark:    | Stable Release as of 2023-04-11                                                                                |
+| 22.12.3          | `master` | :white_check_mark:     | :white_check_mark:        | :white_check_mark:    | Stable Release as of 2023-06-13                                                                                |
+| 22.12.3.1        | `master` | :white_check_mark:     | :white_check_mark:        | :white_check_mark:    | Stable Release as of 2023-06-20                                                                                |
+| 22.12.3.2        | `master` | :white_check_mark:     | :white_check_mark:        | :white_check_mark:    | Stable Release as of 2023-07-05                                                                                |
+| 22.12.3.3        | `master` | :white_check_mark:     | :white_check_mark:        | :white_check_mark:    | Stable Release as of 2023-07-25                                                                                |
 | Nightly          | `master` | :white_check_mark:     | :x:                       | :white_check_mark:    | Please only submit bug reports during codefreeze                                                               |
 
 :::warning Support Guidelines

.github/actions/collect-changes/action.yaml

@@ -50,7 +50,6 @@ runs:
         # Set output to changed charts
         echo "Changed charts: ${CHARTS[*]}"
         printf "::set-output name=addedOrModified::%s\n" "${CHARTS[*]}"
-        
 
     - name: Collect bumped charts after last tag
       id: filter-bumped-charts

.github/ct-install.yaml

@@ -12,21 +12,26 @@ chart-dirs:
 excluded-charts:
   - charts/dependency/subchart
   - charts/incubator/twingate-connector
+  - charts/incubator/docassemble
+  - charts/incubator/eco
   - charts/incubator/midarr
   - charts/incubator/orbital-sync
   - charts/incubator/plex-meta-manager
-  - charts/incubator/tauticord
+  - charts/incubator/telepush
   - charts/library/common
   - charts/stable/alertmanager-bot
   - charts/stable/alertmanager-bot
   - charts/stable/alertmanager-discord
   - charts/stable/amcrest2mqtt
+  - charts/stable/arksurvivalevolved
+  - charts/stable/tauticord
   - charts/stable/discordgsm
   - charts/stable/facebox
   - charts/stable/foundryvtt
   - charts/stable/heimdall
   - charts/stable/mc-router
   - charts/stable/multus
+  - charts/stable/local-ai
   - charts/stable/orbital-sync
   - charts/stable/plex-meta-manager
   - charts/stable/pod-gateway

.github/renovate.json5

@@ -20,6 +20,12 @@
     "fileMatch": ["charts/.+/Chart\\.yaml$"]
   },
   "packageRules": [
+    // Bundle Github Actions
+    {
+      "matchManagers": ["github-actions"],
+      "groupName": "Github-Actions",
+      "automerge": true
+    },
     // Setup datasources for dep updates
     {
       "datasources": ["helm"],
@@ -281,6 +287,11 @@
       "matchPackagePrefixes": ["tccr.io/truecharts/immich"],
       "groupName": "immich",
     },
+    {
+      "matchDatasources": ["docker"],
+      "matchPackagePrefixes": ["tccr.io/truecharts/portainer"],
+      "groupName": "portainer",
+    },
     {
       "matchDatasources": ["docker"],
       "matchPackagePrefixes": ["tccr.io/truecharts/neko"],

.github/scripts/build-catalog.sh

@@ -74,7 +74,8 @@ patch_apps() {
     cat ${target}/Chart.yaml | grep "icon" >> catalog/${train}/${chartname}/item.yaml
     sed -i "s|^icon:|icon_url:|g" catalog/${train}/${chartname}/item.yaml
     echo "categories:" >> catalog/${train}/${chartname}/item.yaml
-    cat ${target}/Chart.yaml | yq '.annotations."truecharts.org/catagories"' -r >> catalog/${train}/${chartname}/item.yaml
+    category=$(cat ${target}/Chart.yaml | yq '.annotations."truecharts.org/category"' -r)
+    echo "- $category" >> catalog/${train}/${chartname}/item.yaml
 
     # Generate screenshots
     screenshots=""

.github/scripts/tc-lint.sh

@@ -147,17 +147,18 @@ function lint_chart(){
         echo "👣 Helm Lint - [$chart_path]"
         helm_lint "$chart_path"
 
-        if [[ ! $(ls $chart_path/ci/*values.yaml) ]]; then
-            echo "👣 Helm Template - [$chart_path]"
-            helm_template "$chart_path"
-        fi
+        # FIXME: Comment out for now as it requires deps installed in linting.
+        # if [[ ! $(ls $chart_path/ci/*values.yaml) ]]; then
+        #     echo "👣 Helm Template - [$chart_path]"
+        #     helm_template "$chart_path"
+        # fi
 
-        for values in $chart_path/ci/*values.yaml; do
-            if [ -f "${values}" ]; then
-                echo "👣 Helm Template - [$values]"
-                helm_template "$chart_path" "$values"
-            fi
-        done
+        # for values in $chart_path/ci/*values.yaml; do
+        #     if [ -f "${values}" ]; then
+        #         echo "👣 Helm Template - [$values]"
+        #         helm_template "$chart_path" "$values"
+        #     fi
+        # done
 
         echo "👣 Chart Version - [$chart_path] against [$target_branch]"
         check_version "$chart_path" "$target_branch"

.github/scripts/updateTraefikMiddlewareVersions.sh

@@ -1,53 +0,0 @@
-#! /bin/bash
-
-trainsPath="./charts"
-traefikTrain="enterprise"
-
-get_latest_release() {
-    # Get latest release from GitHub api, NOTE: Remove the header when running locally (or add a valid token)
-    curl --silent \
-         --header 'authorization: Bearer ${{ secrets.GITHUB_TOKEN }}' \
-         --url "https://api.github.com/repos/$1/releases/latest" |
-    # Get tag line
-    grep '"tag_name":' |
-    # Pluck JSON value
-    sed -E 's/.*"([^"]+)".*/\1/'
-}
-
-set_key_to_version() {
-    key="$1"
-    version="$2"
-    traefikValuesFile="$trainsPath/$traefikTrain/traefik/values.yaml"
-    echo "Setting $key to $version..."
-    sed -i "s/${key}: .*/${key}: ${version}/" $traefikValuesFile
-
-    content=$(grep "$key:" "$traefikValuesFile" | sed "s/\s*${key}:\s*//" )
-    echo "New content of $key in values.yaml: $content"
-    echo ""
-}
-
-update_plugin() {
-    repo="$1"
-    key="$2"
-    pluginName="$3"
-
-    version=$(get_latest_release "$repo")
-    if [ -z "$version" ]
-    then
-        echo "Got empty version, skipping..."
-    else
-        echo "Fetched $pluginName plugin version: $version"
-        set_key_to_version "$key" "$version"
-    fi;
-}
-# Example
-# update_plugin "repo" "key_holding_version_in_values.yaml" "plugin_name_used_for_verbose_printing_only"
-
-# Real IP
-update_plugin "soulbalz/traefik-real-ip" "realIPVersion" "RealIP"
-
-# Theme Park
-update_plugin "packruler/traefik-themepark" "themeParkVersion" "ThemePark"
-
-# GeoBlock
-update_plugin "PascalMinder/geoblock" "geoBlockVersion" "GeoBlock"

.github/workflows/catalog-test.yaml

@@ -17,7 +17,7 @@ jobs:
     container:
       image: ghcr.io/truecharts/devcontainer:3.1.10@sha256:c239addf725eb5cedf79517f8089fdafdc32b5270d1893ee87ae6e511b9bcae3
     steps:
-      - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         name: Checkout
         with:
           fetch-depth: 100

.github/workflows/charts-lint.yaml

@@ -22,13 +22,13 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout [master]
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           fetch-depth: 1
           ref: master
 
       - name: Checkout [commit]
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
@@ -108,7 +108,7 @@ jobs:
       - name: Create/Update comment
         if: steps.list-changed.outputs.detected == 'true'
         continue-on-error: true
-        uses: thollander/actions-comment-pull-request@dadb7667129e23f12ca3925c90dc5cd7121ab57e # v2
+        uses: thollander/actions-comment-pull-request@1d3973dc4b8e1399c0620d3f2b1aa5e795465308 # v2
         with:
           filePath: /tmp/lint_result.txt
           comment_tag: lint_results

.github/workflows/charts-release.yaml

@@ -17,13 +17,13 @@ jobs:
       image: ghcr.io/truecharts/devcontainer:3.1.10@sha256:c239addf725eb5cedf79517f8089fdafdc32b5270d1893ee87ae6e511b9bcae3
     steps:
       - name: Checkout
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           token: ${{ secrets.BOT_TOKEN }}
           fetch-depth: 1
 
       - name: Checkout Helm-Staging
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           fetch-depth: 1
           repository: truecharts/helm-staging
@@ -93,7 +93,7 @@ jobs:
           GPG_PASSPHRASE: "${{ secrets.GPG_PASSPHRASE }}"
 
       - name: Checkout
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           token: ${{ secrets.BOT_TOKEN }}
           fetch-depth: 0
@@ -125,7 +125,7 @@ jobs:
           find . -name '*.sh' | xargs chmod +x
 
       - name: Checkout
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         if: |
           steps.collect-changes.outputs.changesDetectedAfterTag == 'true'
         with:
@@ -206,6 +206,10 @@ jobs:
                 echo "" >> website/docs/charts/${train}/${chart}/index.md
                 cat charts/${train}/${chart}/Chart.yaml | yq .description -r >> website/docs/charts/${train}/${chart}/index.md
                 echo "" >> website/docs/charts/${train}/${chart}/index.md
+                echo "## Chart Sources" >> website/docs/charts/${train}/${chart}/index.md
+                echo "" >> website/docs/charts/${train}/${chart}/index.md
+                cat charts/${train}/${chart}/Chart.yaml | go-yq .sources -r >> website/docs/charts/${train}/${chart}/index.md
+                echo "" >> website/docs/charts/${train}/${chart}/index.md
                 echo "## Available Documentation" >> website/docs/charts/${train}/${chart}/index.md
                 echo "" >> website/docs/charts/${train}/${chart}/index.md
 
@@ -240,7 +244,7 @@ jobs:
           git push
 
       - name: Checkout Catalog
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         if: |
           steps.collect-changes.outputs.changesDetectedAfterTag == 'true'
         with:

.github/workflows/charts-test.yaml

@@ -50,7 +50,7 @@ jobs:
       detected6: ${{ steps.list-changed.outputs.detected6 }}
     steps:
       - name: Checkout
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
@@ -115,7 +115,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
@@ -127,12 +127,12 @@ jobs:
             helmv3
           helm: "3.9.4"
 
-      - uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1 # v4
+      - uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4
         with:
           python-version: "3.11"
 
       - name: Set up chart-testing
-        uses: helm/chart-testing-action@e8788873172cb653a90ca2e819d79d65a66d4e76 # v2.4.0
+        uses: helm/chart-testing-action@b43128a8b25298e1e7b043b78ea6613844e079b1 # v2.6.0
 
       - name: Create k3d cluster
         uses: nolar/setup-k3d-k3s@v1
@@ -146,18 +146,31 @@ jobs:
         run: |
           kubectl taint --all=true nodes node.cloudprovider.kubernetes.io/uninitialized- || true
 
+      - name: Prep Helm
+        run: |
+          helm repo add truecharts https://charts.truecharts.org
+          helm repo add truecharts-deps https://deps.truecharts.org
+          helm repo add truecharts-library https://library-charts.truecharts.org
+          helm repo add jetstack https://charts.jetstack.io
+          helm repo update
+
       - name: Add Dependencies
         run: |
-          ## TODO: Move to our Helm Charts
+          if [[ "${{ matrix.chart }}" == "charts/operators/metallb-config" ]]; then
+            helm install metallb truecharts/metallb --namespace metallb --create-namespace --wait
+          fi
           ## TODO: Only add when required
-          if [[ "${{ matrix.chart }}" != "charts/operators/metallb" ]]; then
-            kubectl apply -f https://raw.githubusercontent.com/metallb/metallb/v0.13.10/config/manifests/metallb-native.yaml --server-side --force-conflicts || echo "error fetching metallb manifest"
+          if [[ "${{ matrix.chart }}" == "charts/enterprise/clusterissuer" ]]; then
+            helm install cert-manager truecharts/cert-manager --namespace cert-manager --create-namespace --wait
           fi
           if [[ "${{ matrix.chart }}" != "charts/operators/cloudnative-pg" ]]; then
-            kubectl apply -f https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg/release-1.20/releases/cnpg-1.20.0.yaml  --server-side --force-conflicts || echo "error fetching cnpg manifest"
+            helm install cloudnative-pg truecharts/cloudnative-pg --namespace cloudnative-pg --create-namespace --wait
           fi
           if [[ "${{ matrix.chart }}" != "charts/operators/prometheus-operator" ]]; then
-            kubectl apply -f  https://github.com/prometheus-operator/prometheus-operator/releases/download/v0.66.0/bundle.yaml --server-side --force-conflicts || echo "error fetching prometheus operator manifest"
+            helm install prometheus-operator truecharts/prometheus-operator --namespace prometheus-operator --create-namespace --wait
+          fi
+          if [[ "${{ matrix.chart }}" != "charts/enterprise/traefik" ]]; then
+            helm install traefik truecharts/traefik --namespace traefik --create-namespace --wait
           fi
 
       - name: Run chart-testing (install)
@@ -175,7 +188,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
@@ -187,12 +200,12 @@ jobs:
             helmv3
           helm: "3.9.4"
 
-      - uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1 # v4
+      - uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4
         with:
           python-version: "3.11"
 
       - name: Set up chart-testing
-        uses: helm/chart-testing-action@e8788873172cb653a90ca2e819d79d65a66d4e76 # v2.4.0
+        uses: helm/chart-testing-action@b43128a8b25298e1e7b043b78ea6613844e079b1 # v2.6.0
 
       - name: Create k3d cluster
         uses: nolar/setup-k3d-k3s@v1
@@ -208,14 +221,21 @@ jobs:
 
       - name: Add Dependencies
         run: |
-          if [[ "${{ matrix.chart }}" != "charts/operators/metallb" ]]; then
-            kubectl apply -f https://raw.githubusercontent.com/metallb/metallb/v0.13.10/config/manifests/metallb-native.yaml --server-side --force-conflicts || echo "error fetching metallb manifest"
+          if [[ "${{ matrix.chart }}" == "charts/operators/metallb-config" ]]; then
+            helm install metallb truecharts/metallb --namespace metallb --create-namespace --wait
+          fi
+          ## TODO: Only add when required
+          if [[ "${{ matrix.chart }}" == "charts/enterprise/clusterissuer" ]]; then
+            helm install cert-manager truecharts/cert-manager --namespace cert-manager --create-namespace --wait
           fi
           if [[ "${{ matrix.chart }}" != "charts/operators/cloudnative-pg" ]]; then
-            kubectl apply -f https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg/release-1.17/releases/cnpg-1.17.5.yaml  --server-side --force-conflicts || echo "error fetching cnpg manifest"
+            helm install cloudnative-pg truecharts/cloudnative-pg --namespace cloudnative-pg --create-namespace --wait
           fi
           if [[ "${{ matrix.chart }}" != "charts/operators/prometheus-operator" ]]; then
-            kubectl apply -f  https://github.com/prometheus-operator/prometheus-operator/releases/download/v0.66.0/bundle.yaml --server-side --force-conflicts || echo "error fetching prometheus operator manifest"
+            helm install prometheus-operator truecharts/prometheus-operator --namespace prometheus-operator --create-namespace --wait
+          fi
+          if [[ "${{ matrix.chart }}" != "charts/enterprise/traefik" ]]; then
+            helm install traefik truecharts/traefik --namespace traefik --create-namespace --wait
           fi
 
       - name: Run chart-testing (install)
@@ -233,7 +253,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
@@ -245,12 +265,12 @@ jobs:
             helmv3
           helm: "3.9.4"
 
-      - uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1 # v4
+      - uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4
         with:
           python-version: "3.11"
 
       - name: Set up chart-testing
-        uses: helm/chart-testing-action@e8788873172cb653a90ca2e819d79d65a66d4e76 # v2.4.0
+        uses: helm/chart-testing-action@b43128a8b25298e1e7b043b78ea6613844e079b1 # v2.6.0
 
       - name: Create k3d cluster
         uses: nolar/setup-k3d-k3s@v1
@@ -266,14 +286,21 @@ jobs:
 
       - name: Add Dependencies
         run: |
-          if [[ "${{ matrix.chart }}" != "charts/operators/metallb" ]]; then
-            kubectl apply -f https://raw.githubusercontent.com/metallb/metallb/v0.13.10/config/manifests/metallb-native.yaml --server-side --force-conflicts || echo "error fetching metallb manifest"
+          if [[ "${{ matrix.chart }}" == "charts/operators/metallb-config" ]]; then
+            helm install metallb truecharts/metallb --namespace metallb --create-namespace --wait
+          fi
+          ## TODO: Only add when required
+          if [[ "${{ matrix.chart }}" == "charts/enterprise/clusterissuer" ]]; then
+            helm install cert-manager truecharts/cert-manager --namespace cert-manager --create-namespace --wait
           fi
           if [[ "${{ matrix.chart }}" != "charts/operators/cloudnative-pg" ]]; then
-            kubectl apply -f https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg/release-1.17/releases/cnpg-1.17.5.yaml  --server-side --force-conflicts || echo "error fetching cnpg manifest"
+            helm install cloudnative-pg truecharts/cloudnative-pg --namespace cloudnative-pg --create-namespace --wait
           fi
           if [[ "${{ matrix.chart }}" != "charts/operators/prometheus-operator" ]]; then
-            kubectl apply -f  https://github.com/prometheus-operator/prometheus-operator/releases/download/v0.66.0/bundle.yaml --server-side --force-conflicts || echo "error fetching prometheus operator manifest"
+            helm install prometheus-operator truecharts/prometheus-operator --namespace prometheus-operator --create-namespace --wait
+          fi
+          if [[ "${{ matrix.chart }}" != "charts/enterprise/traefik" ]]; then
+            helm install traefik truecharts/traefik --namespace traefik --create-namespace --wait
           fi
 
       - name: Run chart-testing (install)
@@ -291,7 +318,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
@@ -303,12 +330,12 @@ jobs:
             helmv3
           helm: "3.9.4"
 
-      - uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1 # v4
+      - uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4
         with:
           python-version: "3.11"
 
       - name: Set up chart-testing
-        uses: helm/chart-testing-action@e8788873172cb653a90ca2e819d79d65a66d4e76 # v2.4.0
+        uses: helm/chart-testing-action@b43128a8b25298e1e7b043b78ea6613844e079b1 # v2.6.0
 
       - name: Create k3d cluster
         uses: nolar/setup-k3d-k3s@v1
@@ -324,14 +351,21 @@ jobs:
 
       - name: Add Dependencies
         run: |
-          if [[ "${{ matrix.chart }}" != "charts/operators/metallb" ]]; then
-            kubectl apply -f https://raw.githubusercontent.com/metallb/metallb/v0.13.10/config/manifests/metallb-native.yaml --server-side --force-conflicts || echo "error fetching metallb manifest"
+          if [[ "${{ matrix.chart }}" == "charts/operators/metallb-config" ]]; then
+            helm install metallb truecharts/metallb --namespace metallb --create-namespace --wait
+          fi
+          ## TODO: Only add when required
+          if [[ "${{ matrix.chart }}" == "charts/enterprise/clusterissuer" ]]; then
+            helm install cert-manager truecharts/cert-manager --namespace cert-manager --create-namespace --wait
           fi
           if [[ "${{ matrix.chart }}" != "charts/operators/cloudnative-pg" ]]; then
-            kubectl apply -f https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg/release-1.17/releases/cnpg-1.17.5.yaml  --server-side --force-conflicts || echo "error fetching cnpg manifest"
+            helm install cloudnative-pg truecharts/cloudnative-pg --namespace cloudnative-pg --create-namespace --wait
           fi
           if [[ "${{ matrix.chart }}" != "charts/operators/prometheus-operator" ]]; then
-            kubectl apply -f  https://github.com/prometheus-operator/prometheus-operator/releases/download/v0.66.0/bundle.yaml --server-side --force-conflicts || echo "error fetching prometheus operator manifest"
+            helm install prometheus-operator truecharts/prometheus-operator --namespace prometheus-operator --create-namespace --wait
+          fi
+          if [[ "${{ matrix.chart }}" != "charts/enterprise/traefik" ]]; then
+            helm install traefik truecharts/traefik --namespace traefik --create-namespace --wait
           fi
 
       - name: Run chart-testing (install)
@@ -349,7 +383,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
@@ -361,12 +395,12 @@ jobs:
             helmv3
           helm: "3.9.4"
 
-      - uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1 # v4
+      - uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4
         with:
           python-version: "3.11"
 
       - name: Set up chart-testing
-        uses: helm/chart-testing-action@e8788873172cb653a90ca2e819d79d65a66d4e76 # v2.4.0
+        uses: helm/chart-testing-action@b43128a8b25298e1e7b043b78ea6613844e079b1 # v2.6.0
 
       - name: Create k3d cluster
         uses: nolar/setup-k3d-k3s@v1
@@ -382,14 +416,21 @@ jobs:
 
       - name: Add Dependencies
         run: |
-          if [[ "${{ matrix.chart }}" != "charts/operators/metallb" ]]; then
-            kubectl apply -f --server-side --force-conflicts https://raw.githubusercontent.com/metallb/metallb/v0.13.10/config/manifests/metallb-native.yaml
+          if [[ "${{ matrix.chart }}" == "charts/operators/metallb-config" ]]; then
+            helm install metallb truecharts/metallb --namespace metallb --create-namespace --wait
+          fi
+          ## TODO: Only add when required
+          if [[ "${{ matrix.chart }}" == "charts/enterprise/clusterissuer" ]]; then
+            helm install cert-manager truecharts/cert-manager --namespace cert-manager --create-namespace --wait
           fi
           if [[ "${{ matrix.chart }}" != "charts/operators/cloudnative-pg" ]]; then
-            kubectl apply -f --server-side --force-conflicts https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg/release-1.17/releases/cnpg-1.17.5.yaml
+            helm install cloudnative-pg truecharts/cloudnative-pg --namespace cloudnative-pg --create-namespace --wait
           fi
           if [[ "${{ matrix.chart }}" != "charts/operators/prometheus-operator" ]]; then
-            kubectl apply -f --server-side --force-conflicts --server-side --force-conflicts https://github.com/prometheus-operator/prometheus-operator/releases/download/v0.66.0/bundle.yaml
+            helm install prometheus-operator truecharts/prometheus-operator --namespace prometheus-operator --create-namespace --wait
+          fi
+          if [[ "${{ matrix.chart }}" != "charts/enterprise/traefik" ]]; then
+            helm install traefik truecharts/traefik --namespace traefik --create-namespace --wait
           fi
 
       - name: Run chart-testing (install)
@@ -407,7 +448,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
@@ -419,12 +460,12 @@ jobs:
             helmv3
           helm: "3.9.4"
 
-      - uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1 # v4
+      - uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4
         with:
           python-version: "3.11"
 
       - name: Set up chart-testing
-        uses: helm/chart-testing-action@e8788873172cb653a90ca2e819d79d65a66d4e76 # v2.4.0
+        uses: helm/chart-testing-action@b43128a8b25298e1e7b043b78ea6613844e079b1 # v2.6.0
 
       - name: Create k3d cluster
         uses: nolar/setup-k3d-k3s@v1
@@ -440,14 +481,21 @@ jobs:
 
       - name: Add Dependencies
         run: |
-          if [[ "${{ matrix.chart }}" != "charts/operators/metallb" ]]; then
-            kubectl apply -f https://raw.githubusercontent.com/metallb/metallb/v0.13.10/config/manifests/metallb-native.yaml --server-side --force-conflicts || echo "error fetching metallb manifest"
+          if [[ "${{ matrix.chart }}" == "charts/operators/metallb-config" ]]; then
+            helm install metallb truecharts/metallb --namespace metallb --create-namespace --wait
+          fi
+          ## TODO: Only add when required
+          if [[ "${{ matrix.chart }}" == "charts/enterprise/clusterissuer" ]]; then
+            helm install cert-manager truecharts/cert-manager --namespace cert-manager --create-namespace --wait
           fi
           if [[ "${{ matrix.chart }}" != "charts/operators/cloudnative-pg" ]]; then
-            kubectl apply -f https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg/release-1.17/releases/cnpg-1.17.5.yaml  --server-side --force-conflicts || echo "error fetching cnpg manifest"
+            helm install cloudnative-pg truecharts/cloudnative-pg --namespace cloudnative-pg --create-namespace --wait
           fi
           if [[ "${{ matrix.chart }}" != "charts/operators/prometheus-operator" ]]; then
-            kubectl apply -f  https://github.com/prometheus-operator/prometheus-operator/releases/download/v0.66.0/bundle.yaml --server-side --force-conflicts || echo "error fetching prometheus operator manifest"
+            helm install prometheus-operator truecharts/prometheus-operator --namespace prometheus-operator --create-namespace --wait
+          fi
+          if [[ "${{ matrix.chart }}" != "charts/enterprise/traefik" ]]; then
+            helm install traefik truecharts/traefik --namespace traefik --create-namespace --wait
           fi
 
       - name: Run chart-testing (install)

.github/workflows/daily.yaml

@@ -20,7 +20,7 @@ jobs:
       image: ghcr.io/truecharts/devcontainer:3.1.10@sha256:c239addf725eb5cedf79517f8089fdafdc32b5270d1893ee87ae6e511b9bcae3
     steps:
       - name: Checkout
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           token: ${{ secrets.BOT_TOKEN }}
           fetch-depth: 1
@@ -55,7 +55,7 @@ jobs:
           done
 
       - name: Checkout
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           repository: truecharts/website
           path: website
@@ -248,7 +248,7 @@ jobs:
           helm repo update
 
       - name: Checkout
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           token: ${{ secrets.BOT_TOKEN }}
           fetch-depth: 1
@@ -257,7 +257,7 @@ jobs:
         run: git config --global --add safe.directory "$GITHUB_WORKSPACE"
 
       - name: Checkout website
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           fetch-depth: 1
           repository: truecharts/website
@@ -377,12 +377,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           token: ${{ secrets.BOT_TOKEN }}
           fetch-depth: 1
 
-      - uses: actions/setup-node@e33196f7422957bea03ed53f6fbb155025ffc7b8 # v3
+      - uses: actions/setup-node@8f152de45cc393bb48ce5d89d36b731f54556e65 # v4
         with:
           node-version: 18
 

.github/workflows/pr-validate.yaml

@@ -17,7 +17,7 @@ jobs:
       addedOrModifiedCharts: ${{ steps.collect-changes.outputs.addedOrModifiedCharts }}
     steps:
       - name: Checkout
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
 
       - name: Collect changes
         id: collect-changes
@@ -57,7 +57,7 @@ jobs:
       head-commit-message: ${{ steps.get_head_commit_message.outputs.headCommitMsg }}
     steps:
       - name: Get repo
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           ref: ${{ github.event.pull_request.head.sha }}
       - name: verbose head git commit message

.github/workflows/prune.yaml

@@ -9,7 +9,7 @@ jobs:
     name: "prune old releases"
     steps:
       - name: Checkout
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           fetch-depth: 0
       - uses: actions/delete-package-versions@0d39a63126868f5eefaa47169615edd3c0f61e20 # v4

.github/workflows/renovate-bump.yaml

@@ -10,16 +10,16 @@ on:
 jobs:
   renovate-bump:
     name: Get changed Apps
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-22.04
     container:
       image: ghcr.io/truecharts/devcontainer:3.1.10@sha256:c239addf725eb5cedf79517f8089fdafdc32b5270d1893ee87ae6e511b9bcae3
     steps:
-      - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         name: Checkout
         with:
           fetch-depth: 0
           token: ${{ secrets.BOT_TOKEN }}
-      - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         name: Checkout
         with:
           fetch-depth: 0

.github/workflows/renovate.yml

@@ -8,11 +8,11 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
         with:
           token: ${{ secrets.BOT_TOKEN }}
       - name: Self-hosted Renovate
-        uses: renovatebot/github-action@23a02fe7be9e93f857a953cc8162e57d2c8401ef # v39.0.1
+        uses: renovatebot/github-action@5c6c06aa0e3d7a6a9b6cba05c078c51631b5f11a # v39.1.1
         with:
           configurationFile: .github/renovate-config.js
           token: ${{ secrets.BOT_TOKEN }}

.github/workflows/schedule-sync-labels.yaml

@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           token: ${{ secrets.BOT_TOKEN }}
 

.github/workflows/stale.yaml

@@ -8,7 +8,7 @@ on:
 
 jobs:
   stale:
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-22.04
     steps:
       - name: Check for stale issues and PRs
         uses: actions/stale@1160a2240286f5da8ec72b1c0816ce2481aabf84 # v8

charts/dependency/clickhouse/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "23.6.2.18"
+appVersion: "23.9.3.12"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 13.2.1
+    version: 14.2.1
 deprecated: false
 description: ClickHouse is a column-oriented database management system (DBMS) for online analytical processing of queries (OLAP).
 home: https://truecharts.org/charts/dependency/clickhouse
@@ -22,9 +22,8 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/dependency/clickhouse
   - https://clickhouse.com/
 type: application
-version: 6.0.1
+version: 7.0.18
 annotations:
-  truecharts.org/catagories: |
-    - database
+  truecharts.org/category: database
   truecharts.org/SCALE-support: "true"
   truecharts.org/grade: U

charts/dependency/clickhouse/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/clickhouse
   pullPolicy: IfNotPresent
-  tag: v23.6.2.18@sha256:4ae0a71b68486786d8aa45d4cf7b35aa7684767eb5ee532c40a54d38bf72e15c
+  tag: v23.9.3.12@sha256:98f6383f4d01f7b752d5c877d51ef93dcb9364cf6676883eb7d83993f7edb071
 
 workload:
   main:

charts/dependency/kube-state-metrics/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "2.9.2"
+appVersion: "2.10.0"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 13.2.1
+    version: 14.2.1
 deprecated: false
 description: kube-state-metrics is a simple service that listens to the Kubernetes API server and generates metrics about the state of the objects.
 home: https://truecharts.org/charts/dependency/kube-state-metrics
@@ -21,9 +21,8 @@ name: kube-state-metrics
 sources:
   - https://github.com/truecharts/charts/tree/master/charts/dependency/kube-state-metrics
 type: application
-version: 2.0.4
+version: 3.0.32
 annotations:
-  truecharts.org/catagories: |
-    - metrics
+  truecharts.org/category: metrics
   truecharts.org/SCALE-support: "true"
   truecharts.org/grade: U

charts/dependency/kube-state-metrics/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/kube-state-metrics
   pullPolicy: IfNotPresent
-  tag: v2.9.2@sha256:cadec2339b4b5225d2fb46beae1ddec2f1291ef04345b36e396a6158d842f667
+  tag: v2.10.0@sha256:5dd17a0a28532d6dfba742e1ba39f894e653cd5ca13c313e21120ee4f9d81024
 
 service:
   main:

charts/dependency/mariadb/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "10.11.4"
+appVersion: "11.1.2"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 13.2.1
+    version: 14.2.1
 deprecated: false
 description: Fast, reliable, scalable, and easy to use open-source relational database system.
 home: https://truecharts.org/charts/dependency/mariadb
@@ -25,9 +25,8 @@ sources:
   - https://github.com/prometheus/mysqld_exporter
   - https://mariadb.org
 type: application
-version: 8.0.4
+version: 9.0.35
 annotations:
-  truecharts.org/catagories: |
-    - database
+  truecharts.org/category: database
   truecharts.org/SCALE-support: "true"
   truecharts.org/grade: U

charts/dependency/mariadb/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/mariadb
   pullPolicy: IfNotPresent
-  tag: v10.11.4@sha256:541fd7f734ac28a9aa67e5e01d21adcbd5e34c0ae8de553041402f9622b66600
+  tag: v11.1.2@sha256:3ec39631c2e7c4a3564ccf0726a19078fd056601ee7a66761d62344b585e9289
 
 workload:
   main:

charts/dependency/memcached/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "1.6.21"
+appVersion: "1.6.22"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 13.2.1
+    version: 14.2.1
 deprecated: false
 description: Memcached is a memory-backed database caching solution
 home: https://truecharts.org/charts/dependency/memcached
@@ -23,10 +23,8 @@ sources:
   - https://github.com/bitnami/bitnami-docker-memcached
   - http://memcached.org/
 type: application
-version: 7.0.4
+version: 8.0.36
 annotations:
-  truecharts.org/catagories: |
-    - database
-    - cache
+  truecharts.org/category: database
   truecharts.org/SCALE-support: "true"
   truecharts.org/grade: U

charts/dependency/memcached/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/memcached
   pullPolicy: IfNotPresent
-  tag: v1.6.21@sha256:157c574f61004b7e47b910d4611f4492ec257472b6fc4b400a7c1b28c2d1bba0
+  tag: v1.6.22@sha256:1d021040b76aceb199a879ff295f836a007ec64cabdba1482c511fd245b3b7ec
 
 service:
   main:

charts/dependency/mongodb/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "6.0.8"
+appVersion: "7.0.2"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 13.2.1
+    version: 14.2.1
 deprecated: false
 description: Fast, reliable, scalable, and easy to use open-source no-sql database system.
 home: https://truecharts.org/charts/dependency/mongodb
@@ -23,9 +23,8 @@ sources:
   - https://github.com/bitnami/bitnami-docker-mongodb
   - https://www.mongodb.com
 type: application
-version: 7.0.4
+version: 8.0.33
 annotations:
-  truecharts.org/catagories: |
-    - database
+  truecharts.org/category: database
   truecharts.org/SCALE-support: "true"
   truecharts.org/grade: U

charts/dependency/mongodb/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/mongodb
   pullPolicy: IfNotPresent
-  tag: v6.0.8@sha256:0f1985e865d03ca331cdfd93ba4531b94aaae0323d2913329d18d4857aac3e10
+  tag: v7.0.2@sha256:2ecf33de2273eb9da76e778d5cad92e55ccbb8ade8e2e0a997e7f40afc058631
 
 workload:
   main:

charts/dependency/node-exporter/Chart.yaml

@@ -3,7 +3,7 @@ appVersion: "1.6.1"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 13.2.1
+    version: 14.2.1
 deprecated: false
 description: Prometheus exporter for hardware and OS metrics exposed by UNIX kernels, with pluggable metric collectors.
 home: https://truecharts.org/charts/dependency/node-exporter
@@ -21,9 +21,8 @@ name: node-exporter
 sources:
   - https://github.com/truecharts/charts/tree/master/charts/dependency/node-exporter
 type: application
-version: 2.0.5
+version: 3.0.34
 annotations:
-  truecharts.org/catagories: |
-    - metrics
+  truecharts.org/category: metrics
   truecharts.org/SCALE-support: "true"
   truecharts.org/grade: U

charts/dependency/node-exporter/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/node-exporter
   pullPolicy: IfNotPresent
-  tag: v1.6.1@sha256:e8bf7ee51147eda2ea65d76438b4f21d6bd59fcaf2edc8737c789980475dd98f
+  tag: v1.6.1@sha256:c150064746d1155d557663650603ea428eacd22c40da62f2ec3078b4c2ade1ba
 
 service:
   main:

charts/dependency/redis/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "7.0.12"
+appVersion: "7.2.2"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 13.2.1
+    version: 14.2.1
 deprecated: false
 description: Open source, advanced key-value store.
 home: https://truecharts.org/charts/dependency/redis
@@ -23,10 +23,8 @@ sources:
   - https://github.com/bitnami/bitnami-docker-redis
   - http://redis.io/
 type: application
-version: 7.0.4
+version: 8.0.38
 annotations:
-  truecharts.org/catagories: |
-    - database
-    - cache
+  truecharts.org/category: database
   truecharts.org/SCALE-support: "true"
   truecharts.org/grade: U

charts/dependency/redis/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/redis
   pullPolicy: IfNotPresent
-  tag: v7.0.12@sha256:1dd6a292329d4ded673ca797b1922998be339744967a9f8a1b4f4a080cd4dbd3
+  tag: v7.2.2@sha256:3623fd2ff6120e47b578da6e7d4d99e1fa60ceba5818f156ceb163270d8dfad0
 
 workload:
   main:

charts/dependency/solr/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "9.3.0"
+appVersion: "9.4.0"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 13.2.1
+    version: 14.2.1
 deprecated: false
 description: Apache Solr
 home: https://truecharts.org/charts/dependency/solr
@@ -22,9 +22,8 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/dependency/solr
   - https://github.com/apache/solr
 type: application
-version: 5.0.4
+version: 6.0.36
 annotations:
-  truecharts.org/catagories: |
-    - search
+  truecharts.org/category: search
   truecharts.org/SCALE-support: "true"
   truecharts.org/grade: U

charts/dependency/solr/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/solr
   pullPolicy: IfNotPresent
-  tag: v9.3.0@sha256:1eab3101994168155edf9b999c80e2d13fdbba3e5270536e3f2995caba618a83
+  tag: v9.4.0@sha256:4f2620c0115b8d36471f3247fc319dce25404db1d361ce0195e9ce8dfbf5143f
 
 workload:
   main:

charts/enterprise/authelia/Chart.yaml

@@ -3,11 +3,11 @@ appVersion: "4.37.5"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 13.2.0
+    version: 14.2.0
   - condition: redis.enabled
     name: redis
     repository: https://deps.truecharts.org
-    version: 7.0.3
+    version: 8.0.37
 deprecated: false
 description: Authelia is a Single Sign-On Multi-Factor portal for web apps
 home: https://truecharts.org/charts/enterprise/authelia
@@ -35,9 +35,8 @@ sources:
   - https://github.com/authelia/chartrepo
   - https://github.com/authelia/authelia
 type: application
-version: 17.0.0
+version: 19.0.4
 annotations:
-  truecharts.org/catagories: |
-    - security
+  truecharts.org/category: security
   truecharts.org/SCALE-support: "true"
   truecharts.org/grade: U

charts/enterprise/authelia/docs/Setup-Guide.md

@@ -103,6 +103,7 @@ The last step is adding the `forwardauth` along with the standard `ingress` sett
 - In this example we use the same name as above, or `auth`. Click `Add` to the `Traefik Middlewares` section, and enter your `forwardauth` name.
 
 ![TraefikForwardAuthMiddleware](img/TraefikForwardAuthMiddleware.png)
+
 ### References
 
 The origin material for this guide is available on the [LLDAP Github](https://github.com/lldap/lldap). While further information on Authelia can be found on their [Github](https://github.com/authelia/authelia) and [website](https://www.authelia.com/).

charts/enterprise/authelia/questions.yaml

@@ -98,6 +98,95 @@ questions:
           schema:
             type: int
             default: 1
+  - variable: password_policy
+    group: "App Configuration"
+    label: "Password Policy Configuration"
+    description: "Authelia allows administrators to configure an enforced password policy."
+    schema:
+      additional_attrs: true
+      type: dict
+      attrs:
+        - variable: enabled
+          label: "Enable"
+          schema:
+            type: boolean
+            default: false
+            show_subquestions_if: true
+            subquestions:
+              - variable: standard
+                label: Standard
+                schema:
+                  additional_attrs: true
+                  type: dict
+                  attrs:
+                    - variable: enabled
+                      label: Enabled
+                      schema:
+                        type: boolean
+                        default: false
+                    - variable: min_length
+                      label: "Minimum Password Length"
+                      description: "Minimum Password Length"
+                      schema:
+                        type: int
+                        required: true
+                        show_if: [["enabled", "=", true]]
+                        default: 8
+                    - variable: max_length
+                      label: "Max Passsword Length"
+                      description: "Max Password Length"
+                      schema:
+                        type: int
+                        required: true
+                        show_if: [["enabled", "=", true]]
+                        default: 0
+                    - variable: require_uppercase
+                      label: "Require Upppercase"
+                      schema:
+                        type: boolean
+                        default: false
+                        show_if: [["enabled", "=", true]]
+                        required: true
+                    - variable: require_lowercase
+                      label: "Require Lowercase"
+                      schema:
+                        type: boolean
+                        default: false
+                        show_if: [["enabled", "=", true]]
+                        required: true
+                    - variable: require_number
+                      label: "Require Numbers"
+                      description: "Require Numbers in the password"
+                      schema:
+                        type: boolean
+                        default: false
+                        show_if: [["enabled", "=", true]]
+                        required: true
+                    - variable: require_special
+                      label: "Require Special Characters"
+                      schema:
+                        type: boolean
+                        default: false
+                        show_if: [["enabled", "=", true]]
+              - variable: zxcvbn
+                label: zxcvbn
+                schema:
+                  additional_attrs: true
+                  type: dict
+                  attrs:
+                    - variable: enabled
+                      label: Enabled
+                      schema:
+                        type: boolean
+                        default: false
+                        required: true
+                    - variable: min_score
+                      label: "Min Score"
+                      schema:
+                        type: int
+                        required: true
+                        show_if: [["enabled", "=", true]]
+                        default: 3
   - variable: duo_api
     group: "App Configuration"
     label: "DUO API Configuration"

charts/enterprise/authelia/templates/_configmap.tpl

@@ -62,6 +62,20 @@ data:
       issuer: {{ .Values.totp.issuer | default .Values.domain }}
       period: {{ .Values.totp.period | default 30 }}
       skew: {{ .Values.totp.skew | default 1 }}
+    {{- if .Values.password_policy.enabled }}
+    password_policy:
+      standard:
+        enabled: {{ .Values.password_policy.standard.enabled | default false }}
+        min_length: {{ .Values.password_policy.standard.min_length | default 8 }}
+        max_length: {{ .Values.password_policy.standard.max_length | default 0 }}
+        require_uppercase: {{ .Values.password_policy.standard.require_uppercase | default false }}
+        require_lowercase: {{ .Values.password_policy.standard.require_lowercase | default false }}
+        require_number: {{ .Values.password_policy.standard.require_number | default false }}
+        require_special: {{ .Values.password_policy.standard.require_special | default false }}
+      zxcvbn:
+        enabled: {{ .Values.password_policy.zxcvbn.enabled | default false }}
+        min_score: {{ .Values.password_policy.zxcvbn.min_score | default 3 }}
+    {{- end -}}
     {{- if .Values.duo_api.enabled }}
     duo_api:
       hostname: {{ .Values.duo_api.hostname }}
@@ -205,10 +219,10 @@ data:
         {{- with $notifier.smtp.username }}
         username: {{ . }}
         {{- end }}
-        sender: {{ $notifier.smtp.sender }}
-        identifier: {{ $notifier.smtp.identifier }}
+        sender: {{ $notifier.smtp.sender | quote }}
+        identifier: {{ $notifier.smtp.identifier | quote }}
         subject: {{ $notifier.smtp.subject | quote }}
-        startup_check_address: {{ $notifier.smtp.startup_check_address }}
+        startup_check_address: {{ $notifier.smtp.startup_check_address | quote }}
         disable_require_tls: {{ $notifier.smtp.disable_require_tls }}
         disable_html_emails: {{ $notifier.smtp.disable_html_emails }}
         tls:

charts/enterprise/authelia/values.yaml

@@ -117,6 +117,25 @@ totp:
   ## See: https://www.authelia.com/docs/configuration/one-time-password.html#period-and-skew to read the documentation.
   skew: 1
 
+##
+## Password Policy Config
+##
+## Parameters used for Password Policies
+password_policy:
+  ## See: https://www.authelia.com/configuration/security/password-policy/
+  standard:
+    enabled: false
+    min_length: 8
+    max_length: 0
+    require_uppercase: false
+    require_lowercase: false
+    require_number: false
+    require_special: false
+  zxcvbn:
+    ## See https://www.authelia.com/configuration/security/password-policy/#zxcvbn for more info
+    enabled: false
+    min_score: 3
+
 ##
 ## Duo Push API Configuration
 ##

charts/enterprise/blocky/Chart.yaml

@@ -1,13 +1,13 @@
 apiVersion: v2
-appVersion: "0.21.0"
+appVersion: "0.22.0"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 13.2.0
+    version: 14.2.0
   - condition: redis.enabled
     name: redis
     repository: https://deps.truecharts.org
-    version: 7.0.3
+    version: 8.0.37
 description: Blocky is a DNS proxy, DNS enhancer and ad-blocker for the local network written in Go
 home: https://truecharts.org/charts/enterprise/blocky
 icon: https://truecharts.org/img/hotlink-ok/chart-icons/blocky.png
@@ -25,9 +25,8 @@ sources:
   - https://0xerr0r.github.io/blocky/
   - https://github.com/0xERR0R/blocky
   - https://github.com/Mozart409/blocky-frontend
-version: 7.0.0
+version: 9.0.2
 annotations:
-  truecharts.org/catagories: |
-    - network
+  truecharts.org/category: network
   truecharts.org/SCALE-support: "true"
   truecharts.org/grade: U

charts/enterprise/blocky/docs/setup-guide.md

@@ -1,12 +1,29 @@
 # Blocky Setup Guide
 
-This will guide you through the basic setup of Blocky which is the preferred DNS solution for TrueCharts. This guide will cover basic setup options which will get you up and running and is not all inclusive.
+This will guide you through the basic setup of Blocky which is the preferred DNS solution for TrueCharts. This guide will cover basic setup options which will get you up and running and is not all inclusive. Configuring your devices to use Blocky is out of scope of this guide.
 
 ## Upstream DNS
 
-Blocky has multiple DNS entries configured by default these can be overridden to your personal preferences or left as default.
+Blocky has the following DNS entries configured by default. They can be overridden to your personal preferences or left as default. Here are some common ones:
 
-Blocky supports 3 methods for upstream DNS.
+- 1.1.1.1
+- 1.0.0.1
+- 8.8.8.8
+- 8.8.4.4
+- 9.9.9.9
+- 149.112.112.112
+- 208.67.222.222
+- 208.67.220.220
+- 8.26.56.26
+- 8.20.247.20
+- 185.228.168.9
+- 185.228.169.9
+- 76.76.19.19
+- 76.223.122.150
+- 76.76.2.0
+- 76.76.10.0
+
+Blocky supports 3 methods for upstream DNS. You can use any combination of the below.
 
 - UDP - Basic DNS
 - DoT - DNS over TLS
@@ -37,9 +54,9 @@ While UDP provides no security for DNS both DoT and DoH will encrypt DNS request
 
 ## Bootstrap DNS
 
-For DNS providers that do not use an IP address for DoT or DoH a bootstrap DNS provider
- is needed to resolve the DoT or DoH address. This provider can be any UDP upstream DNS.
- In the below example I am using Google DNS.
+If you entered a non-IP address (meaning you used a domain name) for DoT or DoH, then you need to ensure that a bootstrap DNS provider
+is configured to resolve the DoT or DoH address. This provider can be any UDP upstream DNS.
+In the below example I am using Google DNS.
 
 ![blocky-bootstrap-google](./img/blocky-bootstrap-google.png)
 
@@ -59,10 +76,17 @@ certain blocklists if you find legitimate traffic being blocked.
 
 1. Pick a Group Name for your blocklists.
 2. Add List entries for each blocklist by URL.
-  ![blocky-blacklist](./img/blocky-blacklist.png)
+   ![blocky-blacklist](./img/blocky-blacklist.png)
 3. Add a Clients Group Block and set Client Group Name to `default`
 4. Under Groups Entry enter the Group name you used above.
-  ![blocky-blacklist-group](./img/blocky-blacklist-group.png)
+   ![blocky-blacklist-group](./img/blocky-blacklist-group.png)
+
+## Networking
+
+If you want to use Blocky on your local network to take advantage of the filtering above, or the k8s-gateway below, you
+need to setup a static ip address and leave the default setting DNS TCP Service and DNS UDP Service as LoadBalancer.
+
+You need to configure the devices on your network to use the static IP address configured above. This can be done per device or by changing the DHCP or DNS settings on your router.
 
 ## k8s-Gateway Configuration
 
@@ -75,4 +99,3 @@ is to add your root domain in the Domain name block.
 ## Prometheus/Grafana
 
 TBD
-

charts/enterprise/blocky/values.yaml

@@ -1,6 +1,6 @@
 image:
   repository: tccr.io/truecharts/blocky
-  tag: v0.21.0@sha256:ed72f8a64307b7b734174589ac631726dd642cc8202c3bdf2eeb1de4adedbe0a
+  tag: v0.22.0@sha256:385055de8ad0b9074d2057d054768d649b8289c5dd566367e0b6289ba5d661a4
   pullPolicy: IfNotPresent
 
 k8sgatewayImage:

charts/enterprise/clusterissuer/Chart.yaml

@@ -10,7 +10,7 @@ keywords:
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 13.2.1
+    version: 14.2.0
 kubeVersion: ">=1.16.0-0"
 maintainers:
   - email: info@truecharts.org
@@ -21,9 +21,8 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/enterprise/clusterissuer
   - https://cert-manager.io/
 type: application
-version: 3.0.1
+version: 4.2.2
 annotations:
-  truecharts.org/catagories: |
-    - core
+  truecharts.org/category: core
   truecharts.org/SCALE-support: "true"
   truecharts.org/grade: U

charts/enterprise/clusterissuer/docs/how-to.md

@@ -10,11 +10,10 @@ This guide will walk you through setting up `clusterissuer`, certificate managem
 
 ## Set Scale Nameservers
 
-It is important to configure Scale with reliable nameserver to avoid issues handling DNS-01 challenges. Under Network -> Global Configuration-> Nameservers, we recommend setting 1.1.1.1, 9.9.9.9 or 8.8.8.8.
+It is important to configure Scale with reliable nameserver to avoid issues handling DNS-01 challenges. Under Network -> Global Configuration-> Nameservers, we recommend setting 1.1.1.1/1.0.0.1 or 8.8.8.8/8.8.4.4.
 
 ![clusterissuer scale nameservers](img/scale-network-nameserver.png)
 
-
 ## Install clusterissuer App
 
 :::note
@@ -37,7 +36,7 @@ Login to Cloudflare dashboard and go to the [Cloudflare API Tokens](https://dash
 
 ![clusterissuer app card](img/cf-apitokens-template.png)
 
-The recommended  `API Token` permissions are below:
+The recommended `API Token` permissions are below:
 ![clusterissuer app card](img/cf-apitokens-perms.png)
 
 #### Cloudflare ACME Issuer Settings

charts/enterprise/clusterissuer/questions.yaml

@@ -47,6 +47,8 @@ questions:
                             description: rfc2136 (Advanced)
                           - value: HTTP01
                             description: HTTP01 (Experimental)
+                          - value: acmedns
+                            description: ACME DNS (Advanced)
                     - variable: server
                       label: Server
                       description: "Server for ACME, for example: letsencrypt"
@@ -195,7 +197,64 @@ questions:
                         type: string
                         required: true
                         default: ""
-
+                    - variable: acmednsHost
+                      label: ACME DNS host
+                      description: "ACME DNS API server address"
+                      schema:
+                        show_if: [["type", "=", "acmedns"]]
+                        type: string
+                        required: true
+                        default: "https://auth.acme-dns.io"
+                    - variable: acmednsConfig
+                      label: ACME DNS config
+                      description: "ACME DNS per-domain auth configuration"
+                      schema:
+                        show_if: [["type", "=", "acmedns"]]
+                        type: list
+                        default: []
+                        items:
+                          - variable: acmednsEntry
+                            label: 'ACME DNS entry'
+                            schema:
+                              type: dict
+                              attrs:
+                                - variable: domain
+                                  label: Domain
+                                  schema:
+                                    type: string
+                                    required: true
+                                - variable: username
+                                  label: Username
+                                  schema:
+                                    type: string
+                                    required: true
+                                - variable: password
+                                  label: Password
+                                  schema:
+                                    type: string
+                                    required: true
+                                - variable: fulldomain
+                                  label: Full domain
+                                  schema:
+                                    type: string
+                                    required: true
+                                - variable: subdomain
+                                  label: Subdomain
+                                  schema:
+                                    type: string
+                                    required: true
+                                - variable: allowFrom
+                                  label: Allow from
+                                  schema:
+                                    type: list
+                                    default: []
+                                    items:
+                                      - variable: cidr
+                                        label: CIDR
+                                        schema:
+                                          type: ipaddr
+                                          cidr: true
+                                          required: true
         - variable: CA
           label: Certificate Authority Issuer
           schema:
@@ -270,6 +329,59 @@ questions:
                   valid_chars: '^[a-z]+(-?[a-z]){0,63}-?[a-z]+$'
                   default: "selfsigned"
 
+  - variable: clusterCertificates
+    group: App Configuration
+    label: Cluster Wide Certificates (Experimental)
+    description: "Creates certificates for use within the entire cluster. Can be used to create wildcard certificates."
+    schema:
+      additional_attrs: true
+      type: dict
+      attrs:
+        - variable: certificates
+          label: Cluster Certificates
+          schema:
+            type: list
+            default: []
+            items:
+              - variable: CertEntry
+                label: 'Certificate Entry'
+                schema:
+                  additional_attrs: true
+                  type: dict
+                  attrs:
+                    - variable: enabled
+                      label: Enabled
+                      schema:
+                        type: boolean
+                        default: true
+                    - variable: name
+                      label: Certificate Name
+                      schema:
+                        type: string
+                        required: true
+                        default: ""
+                    - variable: certificateIssuer
+                      label: Cert-Manager clusterIssuer
+                      description: "One of the Cert-Manager clusterIssuers defined above"
+                      schema:
+                        type: string
+                        required: true
+                        valid_chars: '^[a-z]+(-?[a-z]){0,63}-?[a-z]+$'
+                        default: "selfsigned"
+                    - variable: hosts
+                      label: Certificate Hosts
+                      description: "NOTE: Creation of wildcard certificates with an ACME issuer requires a DNSO1 solver to be set up."
+                      schema:
+                        type: list
+                        default: []
+                        items:
+                          - variable: host
+                            label: Host
+                            schema:
+                              type: string
+                              default: ""
+                              required: true
+
   - variable: customMetrics
     group: Metrics
     label: Prometheus Metrics

charts/enterprise/clusterissuer/templates/clusterissuer/_ACME.tpl

@@ -1,15 +1,31 @@
 {{- define "certmanager.clusterissuer.acme" -}}
 {{- $operator := index $.Values.operator "cert-manager" -}}
 {{- $namespace := $operator.namespace | default "cert-manager" -}}
+
+{{- $rfctsigSecret := .rfctsigSecret | default "" -}}
+{{/* https://cert-manager.io/docs/configuration/acme/dns01/rfc2136/#troubleshooting */}}
+{{- if $rfctsigSecret -}} {{/* If we try to decode and fail, go on and encode it. */}}
+  {{- if (contains "illegal base64" (b64dec $rfctsigSecret)) -}}
+    {{- $rfctsigSecret = b64enc $rfctsigSecret -}}
+  {{- end -}}
+{{- end -}}
+
 {{- range .Values.clusterIssuer.ACME }}
-  {{- if not (mustRegexMatch "^[a-z]+(-?[a-z]){0,63}-?[a-z]+$" .name) -}}
+  {{- if or (not .name) (not (mustRegexMatch "^[a-z]+(-?[a-z]){0,63}-?[a-z]+$" .name)) -}}
     {{- fail "ACME - Expected name to be all lowercase with hyphens, but not start or end with a hyphen" -}}
   {{- end -}}
-  {{- $validTypes := list "HTTP01" "cloudflare" "route53" "digitalocean" "akamai" "rfc2136" -}}
+  {{- $validTypes := list "HTTP01" "cloudflare" "route53" "digitalocean" "akamai" "rfc2136" "acmedns" -}}
   {{- if not (mustHas .type $validTypes) -}}
     {{- fail (printf "Expected ACME type to be one of [%s], but got [%s]" (join ", " $validTypes) .type) -}}
   {{- end -}}
   {{- $issuerSecretName := printf "%s-clusterissuer-secret" .name }}
+  {{- $acmednsDict := dict -}}
+  {{- if and (eq .type "acmedns") (not .acmednsConfigJson) }}
+    {{- range .acmednsConfig }}
+      {{/* Transform to a dict with domain as a key, also remove domain from the dict */}}
+      {{- $_ := set $acmednsDict .domain (omit . "domain") -}}
+    {{- end }}
+  {{- end }}
 ---
 apiVersion: cert-manager.io/v1
 kind: ClusterIssuer
@@ -76,6 +92,12 @@ spec:
           tsigSecretSecretRef:
             name: {{ $issuerSecretName }}
             key: rfctsigSecret
+      {{- else if eq .type "acmedns" }}
+        acmeDNS:
+          host: {{ .acmednsHost }}
+          accountSecretRef:
+            name: {{ $issuerSecretName }}
+            key: acmednsJson
       {{- end -}}
     {{- end }}
 ---
@@ -93,6 +115,11 @@ stringData:
   akclientSecret: {{ .akclientSecret | default "" }}
   akaccessToken: {{ .akaccessToken | default "" }}
   doaccessToken: {{ .doaccessToken | default "" }}
-  rfctsigSecret: {{ .rfctsigSecret | default "" }}
-{{- end }}
+  rfctsigSecret: {{ $rfctsigSecret }}
+{{- if .acmednsConfigJson }}
+  acmednsJson: {{ .acmednsConfigJson }}
+{{- else if $acmednsDict }}
+  acmednsJson: {{ toJson $acmednsDict }}
+{{- end -}}
+  {{- end -}}
 {{- end -}}

charts/enterprise/clusterissuer/templates/clusterissuer/_clusterCertificates.tpl

@@ -0,0 +1,36 @@
+{{- define "certmanager.clusterissuer.clusterCertificates" -}}
+  {{- if .Values.clusterCertificates -}}
+    {{- $certs := dict -}}
+    {{- $secretTemplates := dict -}}
+    {{- $certNamespace := (include "tc.v1.common.lib.metadata.namespace" (dict "rootCtx" $ "objectData" $certs "caller" "ClusterCertificates")) -}}
+  {{- $replicationNamespaces := ".*" -}}
+  {{- if .Values.clusterCertificates.replicationNamespaces -}}
+    {{- $replicationNamespaces = .Values.clusterCertificates.replicationNamespaces -}}
+  {{- else if .Values.ixChartContext -}}
+    {{- $replicationNamespaces = "ix-.*" -}}
+  {{- end -}}
+    {{- $reflectorAnnotations := (dict
+        "reflector.v1.k8s.emberstack.com/reflection-allowed" "true"
+        "reflector.v1.k8s.emberstack.com/reflection-auto-enabled" "true"
+        "reflector.v1.k8s.emberstack.com/reflection-allowed-namespaces" (printf "%v,%v" $certNamespace $replicationNamespaces)
+        "reflector.v1.k8s.emberstack.com/reflection-auto-namespaces" $replicationNamespaces ) -}}
+    {{- $certAnnotations := (mustMerge ($reflectorAnnotations) (include "tc.v1.common.lib.metadata.allAnnotations" $ | fromYaml)) -}}
+
+    {{- $_ := set $secretTemplates "annotations" $certAnnotations -}}
+
+    {{- range .Values.clusterCertificates.certificates -}}
+      {{- $_ := set $certs .name dict -}}
+      {{- $currentCert := (index $certs (.name)) -}}
+      {{- $_ := set $currentCert "enabled" .enabled -}}
+      {{- $_ := set $currentCert "nameOverride" .name -}}
+      {{- $_ := set $currentCert "hosts" .hosts -}}
+      {{- $_ := set $currentCert "certificateIssuer" .certificateIssuer -}}
+      {{- $_ := set $currentCert "secretTemplate" $secretTemplates -}}
+    {{- end -}}
+
+  {{- $_ := set .Values "cert" $certs -}}
+  {{/* Render the ClusterWide Certificate(s) */}}
+  {{- include "tc.v1.common.spawner.certificate" . | nindent 0 -}}
+  {{- end -}}
+{{- end -}}
+

charts/enterprise/clusterissuer/templates/common.yaml

@@ -7,3 +7,8 @@
 {{- include "certmanager.clusterissuer.acme" . }}
 {{- include "certmanager.clusterissuer.selfsigned" . }}
 {{- include "certmanager.clusterissuer.ca" . }}
+
+{{/* Must be called after the initial loader.apply template,
+     because it overrides .Values.cert in order to generate
+     the additional cluster-wide certificates */}}
+{{- include "certmanager.clusterissuer.clusterCertificates" . }}

charts/enterprise/clusterissuer/values.yaml

@@ -1,6 +1,6 @@
 image:
   repository: tccr.io/truecharts/scratch
-  tag: latest@sha256:1a9a10a0a5f5cb5fe4b30ac6d9c56ff87ad47f3f3490bafb6938fc155230131b
+  tag: latest@sha256:7f821eeb99d04ac248c47f79cfbcc2482651fea48aff9ec5d2ba0ba34f1f5531
   pullPolicy: IfNotPresent
 manifestManager:
   enabled: true
@@ -59,7 +59,7 @@ clusterIssuer:
 #     # Used primarily for the SCALE GUI
 #     customServer: 'https://acme-staging-v02.api.letsencrypt.org/directory'
 #     email: ""
-#     # Options: HTTP01, cloudflare, route53
+#     # Options: HTTP01, cloudflare, route53, akamai, digitalocean, rfc2136, acmedns
 #     type: ""
 #     # for cloudflare
 #     cfapikey: ""
@@ -82,3 +82,27 @@ clusterIssuer:
 #     tsigKeyName: ""
 #     tsigAlgorithm: ""
 #     rfctsigSecret: ""
+#     # for acmedns
+#     name: sd
+#     acmednsHost: asdf
+#     # Pick one of the bellow acmednsConfig
+#     acmednsConfigJson:
+#     acmednsConfig:
+#       - domain: ""
+#         username: ""
+#         password: ""
+#         fulldomain: ""
+#         subdomain: ""
+#         allowFrom: []
+
+clusterCertificates:
+  # Namespaces in which the certificates must be available
+  # Accepts comma-separated regex expressions
+  # replicationNamespaces: 'ix-.*'
+  certificates: []
+  # - name: mycert
+  #   enabled: true
+  #   certificateIssuer: selfsigned
+  #   hosts:
+  #     - my.domain.com
+  #     - '*.my.domain.com'

charts/enterprise/grafana/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "10.0.2"
+appVersion: "10.2.0"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 13.2.0
+    version: 14.2.0
 deprecated: false
 description: Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, Elasticsearch, OpenTSDB, Prometheus and InfluxDB.
 home: https://truecharts.org/charts/enterprise/grafana
@@ -24,9 +24,8 @@ sources:
   - https://github.com/bitnami/bitnami-docker-grafana
   - https://grafana.com/
 type: application
-version: 8.0.3
+version: 9.0.30
 annotations:
-  truecharts.org/catagories: |
-    - metrics
+  truecharts.org/category: metrics
   truecharts.org/SCALE-support: "true"
   truecharts.org/grade: U

charts/enterprise/grafana/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/grafana
   pullPolicy: IfNotPresent
-  tag: v10.0.2@sha256:01c3c146a13a2e3b768023439de13869b9ef151a89adad74d68fa33c1b835c10
+  tag: v10.2.0@sha256:37149a3ed475cc9f0cedb4e6561f2566a782d5063cb0ff3f5a15d5e8f79ec33f
 manifestManager:
   enabled: true
 securityContext:

charts/enterprise/kubernetes-reflector/Chart.yaml

@@ -0,0 +1,31 @@
+apiVersion: v2
+appVersion: "7.1.217"
+deprecated: false
+description: Kubernetes-Reflector is a Kubernetes addon designed to monitor and reflect changes to secrets and configmaps across namespaces
+home: https://truecharts.org/charts/enterprise/kubernetes-reflector
+icon: https://truecharts.org/img/hotlink-ok/chart-icons/kubernetes-reflector.png
+keywords:
+  - reflector
+  - secrets
+  - configmaps
+  - cert-manager
+  - certificates
+dependencies:
+  - name: common
+    repository: https://library-charts.truecharts.org
+    version: 14.2.0
+kubeVersion: ">=1.16.0-0"
+maintainers:
+  - email: info@truecharts.org
+    name: TrueCharts
+    url: https://truecharts.org
+name: kubernetes-reflector
+sources:
+  - https://github.com/truecharts/charts/tree/master/charts/enterprise/kubernetes-reflector
+  - https://github.com/emberstack/kubernetes-reflector
+type: application
+version: 1.0.0
+annotations:
+  truecharts.org/category: operators
+  truecharts.org/SCALE-support: "true"
+  truecharts.org/grade: U

charts/enterprise/kubernetes-reflector/README.md

@@ -0,0 +1,27 @@
+# README
+
+## General Info
+
+TrueCharts can be installed as both *normal* Helm Charts or as Apps on TrueNAS SCALE.
+However only installations using the TrueNAS SCALE Apps system are supported.
+
+For more information about this App, please check the docs on the TrueCharts [website](https://truecharts.org/charts/enterprise/)
+
+**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/charts/issues/new/choose)**
+
+
+## Support
+
+- Please check our [quick-start guides for TrueNAS SCALE](https://truecharts.org/manual/SCALE/guides/scale-intro).
+- See the [Website](https://truecharts.org)
+- Check our [Discord](https://discord.gg/tVsPTHWTtr)
+- Open a [issue](https://github.com/truecharts/charts/issues/new/choose)
+
+---
+
+## Sponsor TrueCharts
+
+TrueCharts can only exist due to the incredible effort of our staff.
+Please consider making a [donation](https://truecharts.org/sponsor) or contributing back to the project any way you can!
+
+*All Rights Reserved - The TrueCharts Project*

charts/enterprise/kubernetes-reflector/questions.yaml

@@ -0,0 +1,42 @@
+# Include{groups}
+questions:
+# Include{global}
+# Include{workload}
+# Include{workloadDeployment}
+# Include{replicas1}
+# Include{podSpec}
+# Include{containerMain}
+# Include{containerBasic}
+# Include{containerAdvanced}
+  - variable: kubernetesReflector
+    group: "App Configuration"
+    label: "Kubernetes-Reflector Configuration"
+    schema:
+      additional_attrs: true
+      type: dict
+      attrs:
+        - variable: logLevel
+          label: "Log Level"
+          schema:
+            type: string
+            default: "Information"
+            enum:
+              - value: "Verbose"
+                description: "Trace"
+              - value: "Debug"
+                description: "Debug"
+              - value: "Information"
+                description: "Info"
+              - value: "Warning"
+                description: "Warnings"
+              - value: "Error"
+                description: "Errors"
+              - value: "Fatal"
+                description: "Fatal Errors"
+# Include{resources}
+# Include{advanced}
+# Include{addons}
+# Include{codeserver}
+# Include{netshoot}
+# Include{vpn}
+# Include{documentation}

charts/enterprise/kubernetes-reflector/templates/common.yaml

@@ -0,0 +1 @@
+{{- include "tc.v1.common.loader.all" . }}

charts/enterprise/kubernetes-reflector/values.yaml

@@ -0,0 +1,78 @@
+image:
+  repository: tccr.io/truecharts/kubernetes-reflector
+  pullPolicy: IfNotPresent
+  tag: v7.1.217@sha256:4ca9ce8c04441786ba0d343b3e5bfe9c638ac8efcc25aba0aaff3c6fb2363b5f
+
+operator:
+  register: true
+
+portal:
+  open:
+    enabled: false
+
+rbac:
+  main:
+    enabled: true
+    primary: true
+    clusterWide: true
+    rules:
+      - apiGroups:
+          - ""
+        resources:
+          - "configmaps"
+          - "secrets"
+        verbs:
+          - "get"
+          - "list"
+          - "watch"
+          - "create"
+          - "update"
+          - "patch"
+          - "delete"
+      - apiGroups:
+          - ""
+        resources:
+          - "namespaces"
+        verbs:
+          - "watch"
+          - "list"
+
+serviceAccount:
+  main:
+    enabled: true
+    primary: true
+
+
+kubernetesReflector:
+  logLevel: Information
+
+workload:
+  main:
+    podSpec:
+      automountServiceAccountToken: true
+      containers:
+        main:
+          securityContext:
+            readOnlyRootFilesystem: true
+            runAsNonRoot: true
+          env:
+            ES_Serilog__MinimumLevel__Default: '{{ .Values.kubernetesReflector.logLevel }}'
+            ES_Reflector__Watcher__Timeout: ""
+            ES_Reflector__Kubernetes__SkipTlsVerify: "false"
+          probes:
+            liveness:
+              type: http
+              path: /healthz
+              port: 25080
+            readiness:
+              type: http
+              path: /healthz
+              port: 25080
+            startup:
+              type: http
+              path: /healthz
+              port: 25080
+
+service:
+  main:
+    enabled: false

charts/enterprise/metallb-config/Chart.yaml

@@ -10,7 +10,7 @@ keywords:
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 13.2.0
+    version: 14.2.0
 kubeVersion: ">=1.16.0-0"
 maintainers:
   - email: info@truecharts.org
@@ -22,9 +22,8 @@ sources:
   - https://github.com/metallb/metallb
   - https://metallb.universe.tf
 type: application
-version: 2.0.0
+version: 3.0.5
 annotations:
-  truecharts.org/catagories: |
-    - core
+  truecharts.org/category: core
   truecharts.org/SCALE-support: "true"
   truecharts.org/grade: U

charts/enterprise/metallb-config/docs/setup-guide.md

@@ -4,7 +4,7 @@ The guide walks through a basic configuration of MetalLB for a single address po
 
 :::warning
 
-With MetalLB installed, apps will not be reachable using the integrated loadbalancer. You cannot combine two different loadbalancers in TrueNAS SCALE.
+With MetalLB installed, apps will not be reachable using the integrated LoadBalancer. You cannot combine two different LoadBalancers in TrueNAS SCALE.
 
 :::
 
@@ -14,6 +14,12 @@ With MetalLB installed, apps will not be reachable using the integrated loadbala
 
 ![metallb-addtrains](img/metallb_guide_trains.png)
 
+:::caution
+
+Our customized version of MetalLB is only intended for use with other TrueCharts applications. Other catalogs will likely not support our MetalLB application. MetalLB could technically work with TrueNAS catalog apps if they used the LoadBalancer service, but they don't as they use NodePort instead. These atypical configurations aren't officially supported nor encouraged by TrueCharts.
+
+:::
+
 ## 1. Install MetalLB Operator from Operators Train
 
 ![metallb-apps](img/metallb_guide_apps.png)
@@ -21,7 +27,7 @@ With MetalLB installed, apps will not be reachable using the integrated loadbala
 Install `metallb` from `operators` train first. There is no config, so just hit save.
 
 If you encounter an error upon install, run the following command as root from system settings -> shell and attempt the install again:
-```k3s kubectl delete  --grace-period 30 --v=4 -k https://github.com/truecharts/manifests/delete```
+`k3s kubectl delete --grace-period 30 --v=4 -k https://github.com/truecharts/manifests/delete`
 
 If you previously had `metallb` installed and encounter an error, delete the old version, then run the above command before proceeding to install the `metallb` operator.
 
@@ -57,21 +63,21 @@ Once installed, `metallb-config` will always show as Stopped.
 
 ![metallb-specifyIP](img/metallb_guide_specifyIP.png)
 
-With MetalLB installed, its is recommended (but optional) to specify IP addresses for your apps.
+With MetalLB installed, it's recommended (but optional) to specify IP addresses for your apps.
 
 For each app, under **Networking and Services**, select `LoadBalancer` Service Type for the Main Service.
 
 In the **LoadBalancer IP** field, specify an IP address that is within the MetalLB address pool that you configured. Apply the same IP address to the **LoadBalancer IP** field on other services within the app.
 
-## 4. Disable SCALE's Default Loadbalancer
+## 4. Disable SCALE's Default LoadBalancer
 
-With MetalLB installed and configured, you must now disable SCALE's default loadbalancer.
+With MetalLB installed and configured, you must now disable SCALE's default LoadBalancer.
 
 In the SCALE UI, under **Apps** > **Settings** > **Advanced Settings**
 
 ![metallb-disable](img/metallb_guide_disableLB.png)
 
-Uncheck `Enable Integrated Loadbalancer`.
+Uncheck `Enable Integrated LoadBalancer`.
 
 **This will trigger a restart of Kubernetes and all apps**. After roughly 5-10 minutes, your apps will redeploy using the MetalLB-assigned IP addresses.
 

charts/enterprise/metallb-config/values.yaml

@@ -1,6 +1,6 @@
 image:
   repository: tccr.io/truecharts/scratch
-  tag: latest@sha256:1a9a10a0a5f5cb5fe4b30ac6d9c56ff87ad47f3f3490bafb6938fc155230131b
+  tag: latest@sha256:7f821eeb99d04ac248c47f79cfbcc2482651fea48aff9ec5d2ba0ba34f1f5531
   pullPolicy: IfNotPresent
 manifestManager:
   enabled: false
@@ -26,7 +26,7 @@ service:
       main:
         enabled: false
         port: 9999
-        
+
 operator:
   verify:
     enabled: true

charts/enterprise/prometheus/Chart.yaml

@@ -1,17 +1,17 @@
 apiVersion: v2
-appVersion: "2.45.0"
+appVersion: "2.47.2"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 13.2.0
+    version: 14.2.0
   - condition: exporters.enabled,exporters.node-exporter.enabled
     name: node-exporter
     repository: https://deps.truecharts.org
-    version: 2.0.3
+    version: 3.0.33
   - condition: exporters.enabled,exporters.kube-state-metrics.enabled
     name: kube-state-metrics
     repository: https://deps.truecharts.org
-    version: 2.0.3
+    version: 3.0.31
 deprecated: false
 description: kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.
 icon: https://truecharts.org/img/hotlink-ok/chart-icons/prometheus.png
@@ -29,9 +29,8 @@ sources:
   - https://github.com/prometheus-community/helm-charts
   - https://github.com/prometheus-operator/kube-prometheus
 type: application
-version: 11.0.0
+version: 13.0.10
 annotations:
-  truecharts.org/catagories: |
-    - metrics
+  truecharts.org/category: metrics
   truecharts.org/SCALE-support: "true"
   truecharts.org/grade: U

charts/enterprise/prometheus/questions.yaml

@@ -80,6 +80,45 @@ questions:
                 schema:
                   type: boolean
                   default: false
+              - variable: remoteWrite
+                label: "Remote Write"
+                schema:
+                  type: list
+                  default: []
+                  items:
+                    - variable: remoteWriteEntry
+                      label: Remote Write Entry
+                      schema:
+                        additional_attrs: true
+                        type: dict
+                        attrs:
+                          - variable: url
+                            label: URL
+                            description: Remote write destination URL
+                            schema:
+                              type: string
+                              required: true
+                              default: ""
+                          - variable: basicAuth
+                            label: Basic Auth
+                            description: Basic authentication for remote write
+                            schema:
+                              type: dict
+                              attrs:
+                                - variable: username
+                                  label: Username
+                                  description: Basic auth username
+                                  schema:
+                                    type: string
+                                    required: true
+                                    default: ""
+                                - variable: password
+                                  label: Password
+                                  description: Basic auth password
+                                  schema:
+                                    type: string
+                                    required: false
+                                    default: ""
 
   - variable: exporters
     group: "App Configuration"

charts/enterprise/prometheus/templates/prometheus/_prometheus.tpl

@@ -126,8 +126,9 @@ spec:
   {{- if .Values.prometheus.remoteRead }}
   remoteRead: {{- include "tc.v1.common.tplvalues.render" (dict "value" .Values.prometheus.remoteRead "context" $) | nindent 4 }}
   {{- end }}
-  {{- if .Values.prometheus.remoteWrite }}
-  remoteWrite: {{- include "tc.v1.common.tplvalues.render" (dict "value" .Values.prometheus.remoteWrite "context" $) | nindent 4 }}
+  {{- with .Values.prometheus.remoteWrite }}
+  remoteWrite:
+    {{- tpl (toYaml .) $ | nindent 4 }}
   {{- end }}
   {{- if .Values.prometheus.podSecurityContext.enabled }}
   securityContext: {{- omit .Values.prometheus.podSecurityContext "enabled" | toYaml | nindent 4 }}

charts/enterprise/prometheus/values.yaml

@@ -1,16 +1,15 @@
 image:
   repository: tccr.io/truecharts/prometheus
-  tag: v2.45.0@sha256:36cb64fa04a86e7adcfcb673a8b46aee4dfbda26840f7c7dc2e9c5afe1dcafde
+  tag: v2.47.2@sha256:609ae6b1d62ee388d8dd552430985bbb332984b6aaa5df5dc62605dfe1f2e035
 
 thanosImage:
   repository: tccr.io/truecharts/thanos
-  tag: 0.31.0@sha256:28282d3e63f84cdeeb05e965b173b610d5597997acc7ce75d5849207b0f97b28
+  tag: v0.32.5@sha256:4cea5ca36f1567993344c3375b9a80d8073dbc8d530656644d36c90683f96464
 
 alertmanagerImage:
   repository: tccr.io/truecharts/alertmanager
-  tag: 0.25.0@sha256:6b534671b83aa7fbd91d1b10bf0f1b29b948e4b300f8359a86043d0deba07207
-manifestManager:
-  enabled: true
+  tag: v0.26.0@sha256:75279c577a514e90854126ba950cf7afaeac43eda85405fba394658b17ca0a6f
+
 global:
   labels: {}
 workload:

charts/enterprise/traefik/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "2.10.1"
+appVersion: "2.10.5"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 13.2.0
+    version: 14.2.0
 deprecated: false
 description: Traefik is a flexible reverse proxy and Ingress Provider.
 home: https://truecharts.org/charts/enterprise/traefik
@@ -23,9 +23,8 @@ sources:
   - https://github.com/traefik/traefik-helm-chart
   - https://traefik.io/
 type: application
-version: 19.0.0
+version: 21.1.2
 annotations:
-  truecharts.org/catagories: |
-    - network
+  truecharts.org/category: network
   truecharts.org/SCALE-support: "true"
   truecharts.org/grade: U

charts/enterprise/traefik/docs/Authelia-LLDAP-forwardauth.md

@@ -1,3 +1,3 @@
 # Authelia + LLDAP + Traefik ForwardAuth Setup guide
 
-Please refer to the full [Authelia + LLDAP + Traefik ForwardAuth Setup guide](https://truecharts.org/charts/enterprise/authelia/Setup-Guide) for a quick guide should take you through the steps necessary to setup `Authelia` as your `forwardAuth` for `Traefik`. 
+Please refer to the full [Authelia + LLDAP + Traefik ForwardAuth Setup guide](https://truecharts.org/charts/enterprise/authelia/Setup-Guide) for a quick guide should take you through the steps necessary to setup `Authelia` as your `forwardAuth` for `Traefik`.

charts/enterprise/traefik/questions.yaml

@@ -184,8 +184,11 @@ questions:
       attrs:
 # Include{basicAuthMiddleware}
 # Include{forwardAuthMiddleware}
+# Include{bufferingMiddleware}
 # Include{customRequestHeadersMiddleware}
 # Include{customResponseHeadersMiddleware}
+# Include{rewriteResponseHeadersMiddleware}
+# Include{customFrameOptionsValueMiddleware}
 # Include{chainMiddleware}
 # Include{redirectSchemeMiddleware}
 # Include{rateLimitMiddleware}
@@ -196,6 +199,7 @@ questions:
 # Include{realIPMiddleware}
 # Include{geoBlockMiddleware}
 # Include{addPrefixMiddleware}
+# Include{modsecurityMiddleware}
   - variable: service
     group: "Networking and Services"
     label: "Configure Service Entrypoint"

charts/enterprise/traefik/templates/_args.tpl

@@ -156,24 +156,36 @@ args:
   {{- end }}
   {{- end }}
   {{- end }}
-  {{/* theme.park */}}
+  {{/*
+    For new plugins, add them on the container also
+    https://github.com/truecharts/containers/blob/master/mirror/traefik/Dockerfile
+    moduleName must match on the container and here
+  */}}
   {{- if .Values.middlewares.themePark }}
-  - "--experimental.plugins.traefik-themepark.modulename=github.com/packruler/traefik-themepark"
-  - "--experimental.plugins.traefik-themepark.version={{ .Values.middlewares.themeParkVersion }}"
+  {{/* theme.park */}}
+  - "--experimental.localPlugins.traefik-themepark.modulename=github.com/packruler/traefik-themepark"
   {{- end }}
   {{/* End of theme.park */}}
   {{/* GeoBlock */}}
   {{- if .Values.middlewares.geoBlock }}
-  - "--experimental.plugins.GeoBlock.modulename=github.com/PascalMinder/geoblock"
-  - "--experimental.plugins.GeoBlock.version={{ .Values.middlewares.geoBlockVersion }}"
+  - "--experimental.localPlugins.GeoBlock.modulename=github.com/PascalMinder/geoblock"
   {{- end }}
   {{/* End of GeoBlock */}}
   {{/* RealIP */}}
   {{- if .Values.middlewares.realIP }}
-  - "--experimental.plugins.traefik-real-ip.modulename=github.com/soulbalz/traefik-real-ip"
-  - "--experimental.plugins.traefik-real-ip.version={{ .Values.middlewares.realIPVersion }}"
+  - "--experimental.localPlugins.traefik-real-ip.modulename=github.com/jramsgz/traefik-real-ip"
   {{- end }}
   {{/* End of RealIP */}}
+  {{/* ModSecurity */}}
+  {{- if .Values.middlewares.modsecurity }}
+  - "--experimental.localPlugins.traefik-modsecurity-plugin.modulename=github.com/acouvreur/traefik-modsecurity-plugin"
+  {{- end }}
+  {{/* End of ModSecurity */}}
+  {{/* RewriteResponseHeaders */}}
+  {{- if .Values.middlewares.rewriteResponseHeaders }}
+  - "--experimental.localPlugins.rewriteResponseHeaders.modulename=github.com/XciD/traefik-plugin-rewrite-headers"
+  {{- end }}
+  {{/* End of RewriteResponseHeaders */}}
   {{- with .Values.additionalArguments }}
   {{- range . }}
   - {{ . | quote }}

charts/enterprise/traefik/templates/_portalhook.tpl

@@ -10,7 +10,6 @@ apiVersion: v1
 kind: ConfigMap
 metadata:
   name: {{ $name }}
-  namespace: tc-system
 data:
   {{- $ports := dict }}
   {{- range $.Values.service }}

charts/enterprise/traefik/templates/middlewares/addPrefix.yaml

@@ -5,7 +5,7 @@ apiVersion: traefik.io/v1alpha1
 kind: Middleware
 metadata:
   name: {{ ternary (printf "%v-%v" $.Release.Name $middlewareData.name) $middlewareData.name $.Values.ingressClass.enabled }}
-  namespace: tc-system
+  namespace: {{ $.Release.Namespace }}
 spec:
   addPrefix:
     prefix: {{ $middlewareData.prefix }}

charts/enterprise/traefik/templates/middlewares/basic-middleware.yaml

@@ -3,7 +3,7 @@ apiVersion: traefik.io/v1alpha1
 kind: Middleware
 metadata:
   name: {{ ternary (printf "%v-compress" $.Release.Name) "compress" $.Values.ingressClass.enabled }}
-  namespace: tc-system
+  namespace: {{ $.Release.Namespace }}
 spec:
   compress: {}
 ---
@@ -13,7 +13,7 @@ apiVersion: traefik.io/v1alpha1
 kind: Middleware
 metadata:
   name: {{ ternary (printf "%v-basic-ratelimit" $.Release.Name) "basic-ratelimit" $.Values.ingressClass.enabled }}
-  namespace: tc-system
+  namespace: {{ $.Release.Namespace }}
 spec:
   rateLimit:
     average: 600
@@ -23,7 +23,7 @@ apiVersion: traefik.io/v1alpha1
 kind: Middleware
 metadata:
   name: {{ ternary (printf "%v-basic-secure-headers" $.Release.Name) "basic-secure-headers" $.Values.ingressClass.enabled }}
-  namespace: tc-system
+  namespace: {{ $.Release.Namespace }}
 spec:
   headers:
     accessControlAllowMethods:
@@ -48,7 +48,7 @@ apiVersion: traefik.io/v1alpha1
 kind: Middleware
 metadata:
   name: {{ ternary (printf "%v-chain-basic" $.Release.Name) "chain-basic" $.Values.ingressClass.enabled }}
-  namespace: tc-system
+  namespace: {{ $.Release.Namespace }}
 spec:
   chain:
     middlewares:

charts/enterprise/traefik/templates/middlewares/basicauth.yaml

@@ -10,7 +10,7 @@ apiVersion: v1
 kind: Secret
 metadata:
   name: {{ printf "%v-%v" $middlewareData.name "secret" }}
-  namespace: tc-system
+  namespace: {{ $.Release.Namespace }}
 type: Opaque
 stringData:
   users: |
@@ -23,7 +23,7 @@ apiVersion: traefik.io/v1alpha1
 kind: Middleware
 metadata:
   name: {{ ternary (printf "%v-%v" $.Release.Name $middlewareData.name) $middlewareData.name $.Values.ingressClass.enabled }}
-  namespace: tc-system
+  namespace: {{ $.Release.Namespace }}
 spec:
   basicAuth:
     secret: {{ printf "%v-%v" $middlewareData.name "secret" }}

charts/enterprise/traefik/templates/middlewares/buffering.yaml

@@ -0,0 +1,26 @@
+{{- range $index, $middlewareData := .Values.middlewares.buffering }}
+---
+# Declaring the user list
+apiVersion: traefik.io/v1alpha1
+kind: Middleware
+metadata:
+  name: {{ ternary (printf "%v-%v" $.Release.Name $middlewareData.name) $middlewareData.name $.Values.ingressClass.enabled }}
+  namespace: {{ $.Release.Namespace }}
+spec:
+  buffering: {{/* Only render if its not <nil> and has a value of 0 or greater */}}
+    {{- if and (not (kindIs "invalid" $middlewareData.maxRequestBodyBytes)) (ge ($middlewareData.maxRequestBodyBytes | int) 0) }}
+    maxRequestBodyBytes: {{ $middlewareData.maxRequestBodyBytes }}
+    {{- end -}}
+    {{- if and (not (kindIs "invalid" $middlewareData.memRequestBodyBytes)) (ge ($middlewareData.memRequestBodyBytes | int) 0) }}
+    memRequestBodyBytes: {{ $middlewareData.memRequestBodyBytes }}
+    {{- end -}}
+    {{- if and (not (kindIs "invalid" $middlewareData.maxResponseBodyBytes)) (ge ($middlewareData.maxResponseBodyBytes | int) 0) }}
+    maxResponseBodyBytes: {{ $middlewareData.maxResponseBodyBytes }}
+    {{- end -}}
+    {{- if and (not (kindIs "invalid" $middlewareData.memResponseBodyBytes)) (ge ($middlewareData.memResponseBodyBytes | int) 0) }}
+    memResponseBodyBytes: {{ $middlewareData.memResponseBodyBytes }}
+    {{- end -}}
+    {{- if $middlewareData.retryExpression }}
+    retryExpression: {{ $middlewareData.retryExpression | quote }}
+    {{- end -}}
+{{- end -}}

charts/enterprise/traefik/templates/middlewares/chain.yaml

@@ -1,7 +1,7 @@
 {{- $values := .Values -}}
-{{- $namespace := "tc-system" -}}
+{{- $namespace := $.Release.Namespace -}}
 {{- if $.Values.ingressClass.enabled -}}
-  {{- $namespace := (printf "tc-system-%s" .Release.Name) -}}
+  {{- $namespace := (printf "%v-%v" $namespace .Release.Name) -}}
 {{- end -}}
 
 {{- range $index, $middlewareData := .Values.middlewares.chain }}
@@ -11,7 +11,7 @@ apiVersion: traefik.io/v1alpha1
 kind: Middleware
 metadata:
   name: {{ ternary (printf "%v-%v" $.Release.Name $middlewareData.name) $middlewareData.name $.Values.ingressClass.enabled }}
-  namespace: tc-system
+  namespace: {{ $.Release.Namespace }}
 spec:
   chain:
     middlewares:

charts/enterprise/traefik/templates/middlewares/customFrameOptionsValue.yaml

@@ -0,0 +1,12 @@
+{{- range $index, $middlewareData := .Values.middlewares.customFrameOptionsValue }}
+---
+# Declaring the user list
+apiVersion: traefik.io/v1alpha1
+kind: Middleware
+metadata:
+  name: {{ ternary (printf "%v-%v" $.Release.Name $middlewareData.name) $middlewareData.name $.Values.ingressClass.enabled }}
+  namespace: {{ $.Release.Namespace }}
+spec:
+  headers:
+    customFrameOptionsValue: {{ $middlewareData.value }}
+{{- end -}}

charts/enterprise/traefik/templates/middlewares/customRequestHeaders.yaml

@@ -5,7 +5,7 @@ apiVersion: traefik.io/v1alpha1
 kind: Middleware
 metadata:
   name: {{ ternary (printf "%v-%v" $.Release.Name $middlewareData.name) $middlewareData.name $.Values.ingressClass.enabled }}
-  namespace: tc-system
+  namespace: {{ $.Release.Namespace }}
 spec:
   headers:
     customRequestHeaders:

charts/enterprise/traefik/templates/middlewares/customResponseHeaders.yaml

@@ -5,7 +5,7 @@ apiVersion: traefik.io/v1alpha1
 kind: Middleware
 metadata:
   name: {{ ternary (printf "%v-%v" $.Release.Name $middlewareData.name) $middlewareData.name $.Values.ingressClass.enabled }}
-  namespace: tc-system
+  namespace: {{ $.Release.Namespace }}
 spec:
   headers:
     customResponseHeaders:

charts/enterprise/traefik/templates/middlewares/forwardauth.yaml

@@ -4,7 +4,7 @@ apiVersion: traefik.io/v1alpha1
 kind: Middleware
 metadata:
   name: {{ ternary (printf "%v-%v" $.Release.Name $middlewareData.name) $middlewareData.name $.Values.ingressClass.enabled }}
-  namespace: tc-system
+  namespace: {{ $.Release.Namespace }}
 spec:
   forwardAuth:
     address: {{ $middlewareData.address }}

charts/enterprise/traefik/templates/middlewares/geoblock.yaml

@@ -4,7 +4,7 @@ apiVersion: traefik.io/v1alpha1
 kind: Middleware
 metadata:
   name: {{ ternary (printf "%v-%v" $.Release.Name $middlewareData.name) $middlewareData.name $.Values.ingressClass.enabled }}
-  namespace: tc-system
+  namespace: {{ $.Release.Namespace }}
 spec:
   plugin:
     GeoBlock:

charts/enterprise/traefik/templates/middlewares/ipwhitelist.yaml

@@ -5,7 +5,7 @@ apiVersion: traefik.io/v1alpha1
 kind: Middleware
 metadata:
   name: {{ ternary (printf "%v-%v" $.Release.Name $middlewareData.name) $middlewareData.name $.Values.ingressClass.enabled }}
-  namespace: tc-system
+  namespace: {{ $.Release.Namespace }}
 spec:
   ipWhiteList:
     sourceRange:

charts/enterprise/traefik/templates/middlewares/modsecurity.yaml

@@ -0,0 +1,14 @@
+{{- range $index, $middlewareData := .Values.middlewares.modsecurity }}
+---
+apiVersion: traefik.io/v1alpha1
+kind: Middleware
+metadata:
+  name: {{ ternary (printf "%v-%v" $.Release.Name $middlewareData.name) $middlewareData.name $.Values.ingressClass.enabled }}
+  namespace: {{ $.Release.Namespace }}
+spec:
+  plugin:
+    traefik-modsecurity-plugin:
+      modSecurityUrl: {{ $middlewareData.modSecurityUrl }}
+      timeoutMillis: {{ $middlewareData.timeoutMillis }}
+      maxBodySize: {{ $middlewareData.maxBodySize }}
+{{- end -}}

charts/enterprise/traefik/templates/middlewares/ratelimit.yaml

@@ -5,7 +5,7 @@ apiVersion: traefik.io/v1alpha1
 kind: Middleware
 metadata:
   name: {{ ternary (printf "%v-%v" $.Release.Name $middlewareData.name) $middlewareData.name $.Values.ingressClass.enabled }}
-  namespace: tc-system
+  namespace: {{ $.Release.Namespace }}
 spec:
   rateLimit:
     average: {{ $middlewareData.average }}

charts/enterprise/traefik/templates/middlewares/real-ip.yaml

@@ -4,7 +4,7 @@ apiVersion: traefik.io/v1alpha1
 kind: Middleware
 metadata:
   name: {{ ternary (printf "%v-%v" $.Release.Name $middlewareData.name) $middlewareData.name $.Values.ingressClass.enabled }}
-  namespace: tc-system
+  namespace: {{ $.Release.Namespace }}
 spec:
   plugin:
     traefik-real-ip:

charts/enterprise/traefik/templates/middlewares/redirectScheme.yaml

@@ -5,7 +5,7 @@ apiVersion: traefik.io/v1alpha1
 kind: Middleware
 metadata:
   name: {{ ternary (printf "%v-%v" $.Release.Name $middlewareData.name) $middlewareData.name $.Values.ingressClass.enabled }}
-  namespace: tc-system
+  namespace: {{ $.Release.Namespace }}
 spec:
   redirectScheme:
     scheme: {{ $middlewareData.scheme }}

charts/enterprise/traefik/templates/middlewares/redirectregex.yaml

@@ -5,7 +5,7 @@ apiVersion: traefik.io/v1alpha1
 kind: Middleware
 metadata:
   name: {{ ternary (printf "%v-%v" $.Release.Name $middlewareData.name) $middlewareData.name $.Values.ingressClass.enabled }}
-  namespace: tc-system
+  namespace: {{ $.Release.Namespace }}
 spec:
   redirectRegex:
     regex: {{ $middlewareData.regex | quote }}

charts/enterprise/traefik/templates/middlewares/rewriteResponseHeaders.yaml

@@ -0,0 +1,17 @@
+{{- range $index, $middlewareData := .Values.middlewares.rewriteResponseHeaders }}
+---
+apiVersion: traefik.io/v1alpha1
+kind: Middleware
+metadata:
+  name: {{ ternary (printf "%v-%v" $.Release.Name $middlewareData.name) $middlewareData.name $.Values.ingressClass.enabled }}
+  namespace: {{ $.Release.Namespace }}
+spec:
+  plugin:
+    rewriteResponseHeaders:
+      rewrites:
+        {{- range $index, $rewriteResponseHeader := $middlewareData.headers }}
+        - header: {{ $rewriteResponseHeader.name }}
+          regex: {{ $rewriteResponseHeader.regex | quote }}
+          replacement: {{ $rewriteResponseHeader.replacement | quote }}
+        {{- end }}
+{{- end -}}

charts/enterprise/traefik/templates/middlewares/stripPrefixRegex.yaml

@@ -4,7 +4,7 @@ apiVersion: traefik.io/v1alpha1
 kind: Middleware
 metadata:
   name: {{ ternary (printf "%v-%v" $.Release.Name $middlewareData.name) $middlewareData.name $.Values.ingressClass.enabled }}
-  namespace: tc-system
+  namespace: {{ $.Release.Namespace }}
 spec:
   stripPrefixRegex:
     regex:

charts/enterprise/traefik/templates/middlewares/tc-chains.yaml

@@ -3,7 +3,7 @@ apiVersion: traefik.io/v1alpha1
 kind: Middleware
 metadata:
   name: {{ ternary (printf "%v-%v" $.Release.Name "tc-opencors-chain") "tc-opencors-chain" $.Values.ingressClass.enabled }}
-  namespace: tc-system
+  namespace: {{ $.Release.Namespace }}
 spec:
   chain:
     middlewares:
@@ -15,7 +15,7 @@ apiVersion: traefik.io/v1alpha1
 kind: Middleware
 metadata:
   name: {{ ternary (printf "%v-%v" $.Release.Name "tc-closedcors-chain") "tc-closedcors-chain" $.Values.ingressClass.enabled }}
-  namespace: tc-system
+  namespace: {{ $.Release.Namespace }}
 spec:
   chain:
     middlewares:

charts/enterprise/traefik/templates/middlewares/tc-headers.yaml

@@ -3,7 +3,7 @@ apiVersion: traefik.io/v1alpha1
 kind: Middleware
 metadata:
   name: {{ ternary (printf "%v-%v" $.Release.Name "tc-opencors-headers") "tc-opencors-headers" $.Values.ingressClass.enabled }}
-  namespace: tc-system
+  namespace: {{ $.Release.Namespace }}
 spec:
   headers:
     accessControlAllowHeaders:
@@ -33,7 +33,7 @@ apiVersion: traefik.io/v1alpha1
 kind: Middleware
 metadata:
   name: {{ ternary (printf "%v-%v" $.Release.Name "tc-closedcors-headers") "tc-closedcors-headers" $.Values.ingressClass.enabled }}
-  namespace: tc-system
+  namespace: {{ $.Release.Namespace }}
 spec:
   headers:
     accessControlAllowMethods:

charts/enterprise/traefik/templates/middlewares/tc-nextcloud.yaml

@@ -3,7 +3,7 @@ apiVersion: traefik.io/v1alpha1
 kind: Middleware
 metadata:
   name: {{ ternary (printf "%v-%v" $.Release.Name "tc-nextcloud-redirectregex-dav") "tc-nextcloud-redirectregex-dav" $.Values.ingressClass.enabled }}
-  namespace: tc-system
+  namespace: {{ $.Release.Namespace }}
 spec:
   redirectRegex:
     regex: "https://(.*)/.well-known/(card|cal)dav"
@@ -13,7 +13,7 @@ apiVersion: traefik.io/v1alpha1
 kind: Middleware
 metadata:
   name: {{ ternary (printf "%v-%v" $.Release.Name "tc-nextcloud-chain") "tc-nextcloud-chain" $.Values.ingressClass.enabled }}
-  namespace: tc-system
+  namespace: {{ $.Release.Namespace }}
 spec:
   chain:
     middlewares:

charts/enterprise/traefik/templates/middlewares/theme-park.yaml

@@ -4,7 +4,7 @@ apiVersion: traefik.io/v1alpha1
 kind: Middleware
 metadata:
   name: {{ ternary (printf "%v-%v" $.Release.Name $middlewareData.name) $middlewareData.name $.Values.ingressClass.enabled }}
-  namespace: tc-system
+  namespace: {{ $.Release.Namespace }}
 spec:
   plugin:
     traefik-themepark:

charts/enterprise/traefik/values.yaml

@@ -1,6 +1,6 @@
 image:
   repository: tccr.io/truecharts/traefik
-  tag: 2.10.1@sha256:049aece2d3e7eddabed1e2e4c4bd03ceba372d3b9f461386b262b6cb69369fcf
+  tag: v2.10.5@sha256:b277733b5b8d7f9d2761813d97e161c1f64ec77960f9c06adde13868efbc8dce
   pullPolicy: IfNotPresent
 manifestManager:
   enabled: true
@@ -23,7 +23,7 @@ workload:
               # @default -- "/"
               # path: "/ping"
 
-            # -- Redainess probe configuration
+            # -- Readiness probe configuration
             # @default -- See below
             readiness:
               # -- sets the probe type when not using a custom probe
@@ -48,6 +48,9 @@ workload:
 podOptions:
   automountServiceAccountToken: true
 
+operator:
+  register: true
+
 # -- Use ingressClass. Ignored if Traefik version < 2.3 / kubernetes < 1.18.x
 ingressClass:
   # true is not unit-testable yet, pending https://github.com/rancher/helm-unittest/pull/12
@@ -346,6 +349,25 @@ middlewares:
   #       value: "foobar"
   #     - name: X-Header-To-Remove
   #       value: ""
+  rewriteResponseHeaders: []
+  # - name: rewriteResponseHeadersName
+  #   headers:
+  #     - name: "Location"
+  #       regex: "^http://(.+)$"
+  #       replacement: "https://$1"
+  #     - name: "Date"
+  #       regex: "^[^,]+,\\s*(.+)$"
+  #       replacement: "$1"
+  customFrameOptionsValue: []
+  # - name: customFrameOptionsValueExample
+  #   value: "SAMEORIGIN"
+  buffering: []
+  # - name: bufferingExample
+  #   maxRequestBodyBytes: 1000000
+  #   memRequestBodyBytes: 1000000
+  #   maxResponseBodyBytes: 1000000
+  #   memResponseBodyBytes: 1000000
+  #   retryExpression: "IsNetworkError() && Attempts() < 2"
   chain: []
   # - name: chainname
   #   middlewares:
@@ -372,7 +394,6 @@ middlewares:
   #   ipStrategy:
   #     depth: 2
   #     excludedIPs: []
-  themeParkVersion: v1.3.0
   themePark: []
   # - name: themeParkName
   # -- Supported apps, lower case name
@@ -384,7 +405,6 @@ middlewares:
   #   theme: themenamehere
   # -- https://theme-park.dev or a self hosted url
   #   baseUrl: https://theme-park.dev
-  realIPVersion: v1.0.3
   # Sets X-Real-Ip with an IP from the X-Forwarded-For or
   # Cf-Connecting-Ip (If from Cloudflare)
   # Evaluation of those headers will go from last to first
@@ -397,7 +417,6 @@ middlewares:
   addPrefix: []
   # - name: addPrefixName
   #   prefix: "/foo"
-  geoBlockVersion: v0.2.4
   geoBlock: []
   # -- https://github.com/PascalMinder/geoblock
   # - name: geoBlockName
@@ -414,6 +433,14 @@ middlewares:
   #   blackListMode: false
   #   countries:
   #     - RU
+  modsecurity: []
+  # - name: modsecurityName
+  #   modSecurityUrl: modSecurity container URL
+  #   timeoutMillis: Configurated  timeout
+  #   maxBodySize: maxBodySize
+  ## Note: body of every request will be buffered in memory while the request is in-flight
+  ## (i.e.: during the security check and during the request processing by traefik and the backend),
+  ## so you may want to tune maxBodySize depending on how much RAM you have.
 
 portalhook:
   enabled: true

charts/enterprise/vaultwarden/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "1.29.0"
+appVersion: "1.29.2"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 13.2.0
+    version: 14.2.0
 deprecated: false
 description: Unofficial Bitwarden compatible server written in Rust
 home: https://truecharts.org/charts/enterprise/vaultwarden
@@ -25,9 +25,8 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/enterprise/vaultwarden
   - https://github.com/dani-garcia/vaultwarden
 type: application
-version: 21.0.0
+version: 23.0.3
 annotations:
-  truecharts.org/catagories: |
-    - security
+  truecharts.org/category: security
   truecharts.org/SCALE-support: "true"
   truecharts.org/grade: U

charts/enterprise/vaultwarden/docs/disable-admin-page-guide.md

@@ -0,0 +1,51 @@
+# Disabling the Admin Interface
+
+:::caution Backup Reminder
+
+Before proceeding, ensure that you have backed up important configurations, especially when making changes to configuration files or secrets. It's also advisable to back up the Vaultwarden database to prevent potential data loss.
+
+:::
+
+This guide is a combination of the [upstream documentation](https://github.com/dani-garcia/vaultwarden/wiki/Enabling-admin-page#disabling-the-admin-page) and how we implemented it.
+
+## Modify the Host Secret
+
+To start with the deactivation, you must first modify the secret on the host's shell. Execute the following command:
+
+```bash
+k3s kubectl patch secret vaultwarden-vaultwardensecret -n ix-vaultwarden --type='json' -p='[{"op": "remove", "path": "/data/ADMIN_TOKEN"}]'
+```
+
+:::info Command Explanation
+
+The command above utilizes `kubectl`, a command-line tool for interacting with Kubernetes clusters. Here's a breakdown:
+
+- `k3s`: This is a lightweight version of Kubernetes.
+- `patch secret vaultwarden-vaultwardensecret`: This indicates that we are patching (modifying) the secret named `vaultwarden-vaultwardensecret`.
+- `-n ix-vaultwarden`: This specifies the namespace (`ix-vaultwarden`) in which the secret resides.
+- `--type='json'`: Specifies that the patch content is of type JSON.
+- `-p='[{"op": "remove", "path": "/data/ADMIN_TOKEN"}]'`: This JSON patch instruction tells Kubernetes to remove the `ADMIN_TOKEN` field from the secret.
+
+:::
+
+## Update Container Config
+
+Next, while inside the Vaultwarden container, run the command below to modify the `config.json` file:
+
+```bash
+sed -i.bak '/admin_token/d' /data/config.json
+```
+
+:::info Command Explanation
+
+- The `sed` command is used to search and delete the line containing `admin_token` from the `config.json` file.
+- A backup of the original `config.json` is created with the `.bak` extension before making the change.
+
+:::
+
+## Adjust the App Configuration
+
+Finally, head to the Vaultwarden app's configuration:
+
+1. Find and disable the admin interface option (if it is still enabled).
+2. Click "Save" at the bottom to apply the changes.

charts/enterprise/vaultwarden/questions.yaml

@@ -200,14 +200,21 @@ questions:
                       schema:
                         type: string
                         default: ""
-                    - variable: ssl
+                    - variable: security
                       label: "Enable SSL connection"
                       schema:
-                        type: boolean
-                        default: true
+                        type: string
+                        default: "starttls"
+                        enum:
+                          - value: "starttls"
+                            description: "STARTTLS (587)"
+                          - value: "force_tls"
+                            description: "FORCE_TLS (465)"
+                          - value: "off"
+                            description: "OFF (25)"
                     - variable: port
                       label: "SMTP port"
-                      description: "Usually: 25 without SSL, 587 with SSL"
+                      description: "Usually: 587 with STARTTLS, 465 with FORCE_TLS, and 25 without SSL"
                       schema:
                         type: int
                         default: 587

charts/enterprise/vaultwarden/templates/_configmap.tpl

@@ -47,7 +47,7 @@ data:
   SMTP_FROM_NAME: {{ .Values.vaultwarden.smtp.fromName | quote }}
   {{- end }}
   {{- if .Values.vaultwarden.smtp.ssl }}
-  SMTP_SSL: {{ .Values.vaultwarden.smtp.ssl | quote }}
+  SMTP_SECURITY: {{ .Values.vaultwarden.smtp.security | quote }}
   {{- end }}
   {{- if .Values.vaultwarden.smtp.port }}
   SMTP_PORT: {{ .Values.vaultwarden.smtp.port | quote }}

charts/enterprise/vaultwarden/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/vaultwarden
   pullPolicy: IfNotPresent
-  tag: 1.29.0@sha256:df6f1c44282c46dfc276a0628000344100b41c0e4fcbdd2e904caeb24a057e71
+  tag: v1.29.2@sha256:f5761cdd99e267221623b7a91d123153885afd0980b31c863de039245b73aad3
 manifestManager:
   enabled: true
 service:
@@ -95,8 +95,8 @@ vaultwarden:
     ## SMTP sender name, defaults to 'Bitwarden_RS'.
     # fromName: ""
     ## Enable SSL connection.
-    # ssl: true
-    ## SMTP port. Defaults to 25 without SSL, 587 with SSL.
+    # security: starttls
+    ## SMTP port. Defaults to 587 with STARTTLS, 465 with FORCE_TLS, and 25 without SSL.
     # port: 587
     ## SMTP Authentication Mechanisms. Comma-separated options: 'Plain', 'Login' and 'Xoauth2'. Defaults to 'Plain'.
     # authMechanism: Plain
@@ -126,7 +126,7 @@ vaultwarden:
   push:
     enabled: false
     # installationId:
-    # installationKey: 
+    # installationKey:
 
   ## Logging options. https://github.com/dani-garcia/bitwarden_rs/wiki/Logging
   log: