Compare commits
1063
Commits
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
68210293d2 | ||
|
|
99f036d23b | ||
|
|
75363f1ae1 | ||
|
|
8162d59262 | ||
|
|
eaa081b840 | ||
|
|
ef296cb0ec | ||
|
|
13078a9cba | ||
|
|
97d5375359 | ||
|
|
a2d0233de0 | ||
|
|
9a8e9d181b | ||
|
|
c9777b1178 | ||
|
|
76a5a8772f | ||
|
|
8358b360f5 | ||
|
|
e7101c635d | ||
|
|
d550776924 | ||
|
|
057f098b5e | ||
|
|
f3fb628bbd | ||
|
|
f9940cb96a | ||
|
|
70d253d85b | ||
|
|
118df72965 | ||
|
|
c67f820427 | ||
|
|
d9eb717725 | ||
|
|
33ff627aa2 | ||
|
|
0f843045b0 | ||
|
|
70247dd703 | ||
|
|
d7b1d70c92 | ||
|
|
a0c6ab5daf | ||
|
|
5da82dd76e | ||
|
|
6854a1a9b4 | ||
|
|
a4016fcac3 | ||
|
|
044dd0812f | ||
|
|
28f252b3f6 | ||
|
|
2c844c4b81 | ||
|
|
1a27d01cf4 | ||
|
|
b88a622b71 | ||
|
|
22e9563cc9 | ||
|
|
9127f4d31f | ||
|
|
80c3b3d326 | ||
|
|
9d44a40d8e | ||
|
|
4fc34d459d | ||
|
|
cdc5ea4f12 | ||
|
|
b3518ae60f | ||
|
|
2c06051625 | ||
|
|
d33f952798 | ||
|
|
fab6f333d2 | ||
|
|
6cf990000c | ||
|
|
ded5a3c0e6 | ||
|
|
c41dda9d32 | ||
|
|
da6c0002d8 | ||
|
|
635e29627b | ||
|
|
d819ce4c1a | ||
|
|
1e386c5194 | ||
|
|
943eb4b1f7 | ||
|
|
dc7b6829cf | ||
|
|
51e8ef963d | ||
|
|
0c16baa4b1 | ||
|
|
41b2fe42d7 | ||
|
|
cac0c8bcf9 | ||
|
|
8740a33138 | ||
|
|
61db64bfa2 | ||
|
|
db9f3edd6d | ||
|
|
b409719510 | ||
|
|
9bff9bf974 | ||
|
|
79ed58ec71 | ||
|
|
721ec70d30 | ||
|
|
c0987a50b8 | ||
|
|
55ba511184 | ||
|
|
b5546d8213 | ||
|
|
f565504d7c | ||
|
|
0d01b289d3 | ||
|
|
d6423f428e | ||
|
|
71a6945816 | ||
|
|
b824b93acd | ||
|
|
d42e6aa64d | ||
|
|
db432ccb01 | ||
|
|
63f7f567b8 | ||
|
|
d25407aa52 | ||
|
|
7fe2b56fe5 | ||
|
|
90381463b4 | ||
|
|
2fe6e72fca | ||
|
|
625f217b97 | ||
|
|
a1523b85c6 | ||
|
|
a43712504c | ||
|
|
5a7137a397 | ||
|
|
69294bdcd2 | ||
|
|
a99b162697 | ||
|
|
52ed270801 | ||
|
|
f52bc5d279 | ||
|
|
975c537743 | ||
|
|
0d9bb534ee | ||
|
|
5471280882 | ||
|
|
d9d8d4fe2a | ||
|
|
6e62ddca78 | ||
|
|
27fd548e28 | ||
|
|
9dac763389 | ||
|
|
663fed96e0 | ||
|
|
7cb4367496 | ||
|
|
c6de388bf7 | ||
|
|
9e1a98ca53 | ||
|
|
eb7bb35b62 | ||
|
|
441da5df7f | ||
|
|
c2996de71d | ||
|
|
9c03e4b046 | ||
|
|
938bc332c1 | ||
|
|
94c1e4d422 | ||
|
|
46b57a66fa | ||
|
|
9d230e7e12 | ||
|
|
c4d10a16ab | ||
|
|
6cdab0ebcd | ||
|
|
d0f870e4d3 | ||
|
|
2b3ab65c26 | ||
|
|
2c197c2324 | ||
|
|
b6e4491cbe | ||
|
|
3feedd2a65 | ||
|
|
356b0e1dee | ||
|
|
86facb67e7 | ||
|
|
2857446d84 | ||
|
|
91a95731d3 | ||
|
|
217b67c54a | ||
|
|
2ab1b3ecb3 | ||
|
|
13cfe6cd3f | ||
|
|
be0ad88172 | ||
|
|
8017edcb49 | ||
|
|
184ec9b207 | ||
|
|
f94d8a58ea | ||
|
|
25e58b97d2 | ||
|
|
aee8e54c60 | ||
|
|
edd4a64ef0 | ||
|
|
2d3a44944a | ||
|
|
74db8dd910 | ||
|
|
12e1b64b11 | ||
|
|
fd8ffadd03 | ||
|
|
3aa7fb1912 | ||
|
|
8226b7bf81 | ||
|
|
9ea0e64edb | ||
|
|
14aaa1b5a5 | ||
|
|
0a612119b0 | ||
|
|
84f0f542ad | ||
|
|
fdc1a9ff0e | ||
|
|
2f8b82c276 | ||
|
|
340667941c | ||
|
|
0a83d56898 | ||
|
|
c0f6311d0c | ||
|
|
efdcb43f16 | ||
|
|
18350adeca | ||
|
|
16942982b3 | ||
|
|
d8d3badf08 | ||
|
|
edafba6f27 | ||
|
|
3bc03e728c | ||
|
|
c72a936d5f | ||
|
|
92fc88831f | ||
|
|
06d30ef95f | ||
|
|
702a3d1ade | ||
|
|
45debc377b | ||
|
|
d5d1243bb5 | ||
|
|
0396d04676 | ||
|
|
27d2042678 | ||
|
|
029a87abf0 | ||
|
|
60572d2709 | ||
|
|
3e7dacd056 | ||
|
|
36da6987f3 | ||
|
|
651c75d37f | ||
|
|
aaef28b83c | ||
|
|
8dad585190 | ||
|
|
a2a46829ab | ||
|
|
093abbb67a | ||
|
|
08665d0ee4 | ||
|
|
9060be5616 | ||
|
|
4e4293b17d | ||
|
|
9a0bf20b2c | ||
|
|
0f76262fef | ||
|
|
ba985fedb8 | ||
|
|
0c4ab7feaf | ||
|
|
345378c66a | ||
|
|
4fc9d425dc | ||
|
|
98d201d12b | ||
|
|
7e381d36a7 | ||
|
|
a79187ee86 | ||
|
|
a78365b42f | ||
|
|
30c50855e9 | ||
|
|
e1d26bd589 | ||
|
|
f015ed29fb | ||
|
|
6b54626760 | ||
|
|
1c27c59ee5 | ||
|
|
aa61f3982f | ||
|
|
63aecd0634 | ||
|
|
c5bed0cae4 | ||
|
|
b2dd9a2c7a | ||
|
|
7d4118ef64 | ||
|
|
1350071281 | ||
|
|
be7c01e9cb | ||
|
|
7051d68292 | ||
|
|
7acd48f4fa | ||
|
|
dce04ca10a | ||
|
|
81258a51d8 | ||
|
|
dd49547132 | ||
|
|
162814ee87 | ||
|
|
a1ece282c4 | ||
|
|
a065f4a686 | ||
|
|
3164170f20 | ||
|
|
dcefa8c86f | ||
|
|
0dbbcd9741 | ||
|
|
e1fa71cb5e | ||
|
|
cdbd858b79 | ||
|
|
35d6eb56ef | ||
|
|
df6198a4dd | ||
|
|
de44f43055 | ||
|
|
de793efc3e | ||
|
|
b47799c065 | ||
|
|
27b742a9ff | ||
|
|
4598ba84a1 | ||
|
|
da9e7d57a3 | ||
|
|
12433d7d56 | ||
|
|
6e5db5c103 | ||
|
|
061a7ec7e4 | ||
|
|
837718944d | ||
|
|
1b5231f8ab | ||
|
|
09e7d55ca8 | ||
|
|
e60f307b77 | ||
|
|
c05b04fa14 | ||
|
|
46e9a551f9 | ||
|
|
bd5c76e0fa | ||
|
|
b5d381d276 | ||
|
|
820937fee2 | ||
|
|
9fec115f89 | ||
|
|
c19138923f | ||
|
|
dc47c8adec | ||
|
|
b34634219c | ||
|
|
a90776b509 | ||
|
|
5f986353f9 | ||
|
|
ed1b360699 | ||
|
|
c8d2a333b0 | ||
|
|
153415cbc7 | ||
|
|
95dc05894e | ||
|
|
47e269ccb9 | ||
|
|
fcfa8df978 | ||
|
|
f7128389d9 | ||
|
|
0aebe38cc5 | ||
|
|
d3eeda9b3e | ||
|
|
f4069c6b29 | ||
|
|
3007303db7 | ||
|
|
b20a5d1fef | ||
|
|
40a65e06e0 | ||
|
|
4ad582d87f | ||
|
|
93e4ea646d | ||
|
|
96c8808bed | ||
|
|
b9d31bce1d | ||
|
|
9c987b0e99 | ||
|
|
c9f0a6e51c | ||
|
|
9321a99938 | ||
|
|
6d39ae5838 | ||
|
|
ed30b05be9 | ||
|
|
93d2bd4bc6 | ||
|
|
bbe06eae51 | ||
|
|
382264d9b6 | ||
|
|
5bad231117 | ||
|
|
d5a6b9a42a | ||
|
|
f7b0fd7d58 | ||
|
|
01e486824d | ||
|
|
9300788f4f | ||
|
|
29af303806 | ||
|
|
40ca6a926e | ||
|
|
72362f8ada | ||
|
|
5cf9e47c02 | ||
|
|
bc52d9359e | ||
|
|
0c4b419a52 | ||
|
|
f839a9e708 | ||
|
|
aba2aa0a7c | ||
|
|
dfe021f145 | ||
|
|
9f867a8a1e | ||
|
|
50516db10b | ||
|
|
5c38d66f09 | ||
|
|
a4b896dabf | ||
|
|
9381ef3476 | ||
|
|
ec43d3c83c | ||
|
|
aeecbe84cd | ||
|
|
811f9e64ab | ||
|
|
673f0dafc3 | ||
|
|
338d2469fc | ||
|
|
352bd6b712 | ||
|
|
8fcda955e2 | ||
|
|
041c926ec3 | ||
|
|
e6fd934dbb | ||
|
|
25176e7529 | ||
|
|
07b95435dd | ||
|
|
798a4c15be | ||
|
|
5a7d454f7c | ||
|
|
49ca515265 | ||
|
|
b48dfac280 | ||
|
|
8c3180667c | ||
|
|
3411cea498 | ||
|
|
f984fc5c37 | ||
|
|
1f39cee445 | ||
|
|
7a9b9da7db | ||
|
|
66aa9eb661 | ||
|
|
5867f31321 | ||
|
|
f6a77b3bad | ||
|
|
b3f4b0500d | ||
|
|
d14c9e7b9d | ||
|
|
02d38af777 | ||
|
|
0d997d63af | ||
|
|
d72ed20881 | ||
|
|
bcfd537b38 | ||
|
|
bc718f84fd | ||
|
|
8733d91930 | ||
|
|
ae8d5b6623 | ||
|
|
a89031ca6b | ||
|
|
56a32df16b | ||
|
|
2d9f7f7490 | ||
|
|
45826a0aaa | ||
|
|
304164df9a | ||
|
|
e7f4c4b9de | ||
|
|
eb11ea64ce | ||
|
|
615eb94713 | ||
|
|
5b42e8bb8a | ||
|
|
5bd5139944 | ||
|
|
c6281fb1be | ||
|
|
4fef57ec25 | ||
|
|
620dae751b | ||
|
|
e28f3c40c8 | ||
|
|
977dfaf29c | ||
|
|
4d277f800f | ||
|
|
54b12b52a2 | ||
|
|
ebf24a2d1a | ||
|
|
0ccac5ecf7 | ||
|
|
d7ed6febcc | ||
|
|
0e0ab4f5ae | ||
|
|
a6a5a303b0 | ||
|
|
d16a274d70 | ||
|
|
bd18282ddd | ||
|
|
54b3e7b0f6 | ||
|
|
d23ac4ee14 | ||
|
|
79070b45ee | ||
|
|
0a80fd487a | ||
|
|
f94229e50b | ||
|
|
f1ebc016cb | ||
|
|
c476da5279 | ||
|
|
fff078499c | ||
|
|
2ec75d3e5b | ||
|
|
9f64e7c603 | ||
|
|
7f339ae1fe | ||
|
|
ee97cd7f48 | ||
|
|
15be0115cf | ||
|
|
35b6c9330d | ||
|
|
ef67aa1a4e | ||
|
|
503057cf4b | ||
|
|
8b628f4095 | ||
|
|
37374e0e9b | ||
|
|
0139d4d2d3 | ||
|
|
54dc59b3e1 | ||
|
|
42c4815f6f | ||
|
|
39cc6a8740 | ||
|
|
951fa27774 | ||
|
|
119ff01275 | ||
|
|
93ce158e18 | ||
|
|
a170eb03cc | ||
|
|
f41adccaee | ||
|
|
b7e905cd88 | ||
|
|
0a0ce9fcd8 | ||
|
|
4830efccd3 | ||
|
|
dbea226ca3 | ||
|
|
aa51656f2b | ||
|
|
1a123f384f | ||
|
|
f68fbab695 | ||
|
|
5c31f0d8af | ||
|
|
b6b4d8f1b1 | ||
|
|
ceb541887f | ||
|
|
91ea57610a | ||
|
|
249f833490 | ||
|
|
2284683b94 | ||
|
|
d1efb066d3 | ||
|
|
5af697722d | ||
|
|
0bf8e4b0ba | ||
|
|
e0c7b7b860 | ||
|
|
356c10bb0b | ||
|
|
a2994b9244 | ||
|
|
cc03dd7d8d | ||
|
|
229593241d | ||
|
|
6dec192972 | ||
|
|
f11fb09b72 | ||
|
|
7c244dd0dc | ||
|
|
0c9d60a9cd | ||
|
|
eb8df6714d | ||
|
|
f3083e66b1 | ||
|
|
84120f8e71 | ||
|
|
d8c2ba1dde | ||
|
|
2d1b406a10 | ||
|
|
b2752e8568 | ||
|
|
e825b02a80 | ||
|
|
3f14ab51af | ||
|
|
daa5128304 | ||
|
|
d563b21103 | ||
|
|
c5f0ba393b | ||
|
|
9acc9a3418 | ||
|
|
de47f277af | ||
|
|
9dc56a484c | ||
|
|
8c132ba5c6 | ||
|
|
2b7b37cef7 | ||
|
|
1ac26d5c40 | ||
|
|
de92ede3e1 | ||
|
|
c0cfd1a905 | ||
|
|
b356c7f740 | ||
|
|
d3923bb65c | ||
|
|
aad9176fb3 | ||
|
|
28c1f5771b | ||
|
|
6b78984077 | ||
|
|
ed14790567 | ||
|
|
624e7a3241 | ||
|
|
8635426630 | ||
|
|
6ff41a9b66 | ||
|
|
65bd5fa09f | ||
|
|
7ea46bd974 | ||
|
|
fa9edaa4a8 | ||
|
|
b152f886d3 | ||
|
|
cff955dfeb | ||
|
|
ce7f298125 | ||
|
|
f74f8b40a1 | ||
|
|
f635a30cc3 | ||
|
|
5cee0f60c2 | ||
|
|
2c772e1e56 | ||
|
|
5216eb1e68 | ||
|
|
5980db52b1 | ||
|
|
0c21e3c288 | ||
|
|
a1c901322f | ||
|
|
42a3456022 | ||
|
|
da80b67f42 | ||
|
|
ac626c52cb | ||
|
|
2e02a90d73 | ||
|
|
e4e6f86d2c | ||
|
|
4e708732a9 | ||
|
|
20bff785df | ||
|
|
989a9ba652 | ||
|
|
9f7849b125 | ||
|
|
f7db65a73e | ||
|
|
008ba87837 | ||
|
|
ea5b99bae3 | ||
|
|
e08dcab8f4 | ||
|
|
3858312158 | ||
|
|
f2bf8d951b | ||
|
|
6f6c99a055 | ||
|
|
789c6712bd | ||
|
|
4ba947a4de | ||
|
|
a8a7fc3781 | ||
|
|
8615f56549 | ||
|
|
b7a4456167 | ||
|
|
137a64ec75 | ||
|
|
0406f2db02 | ||
|
|
b0689b8643 | ||
|
|
cd35c18b76 | ||
|
|
8c66727111 | ||
|
|
8298b0b0af | ||
|
|
a0766dec3e | ||
|
|
5d9ad8a923 | ||
|
|
3d34adcbe3 | ||
|
|
cdc9cb3cdd | ||
|
|
774371f891 | ||
|
|
5f7d0829e1 | ||
|
|
d1cb8a1857 | ||
|
|
3b3c0a2c0d | ||
|
|
a210daac58 | ||
|
|
d1fb6d6756 | ||
|
|
4a5058dac0 | ||
|
|
a6756ce23e | ||
|
|
9e7f527b67 | ||
|
|
ab5ee31dc2 | ||
|
|
6f2e7bd98c | ||
|
|
f049045e44 | ||
|
|
5b06d88b54 | ||
|
|
eb8bfb6edd | ||
|
|
ad03f078b2 | ||
|
|
480a65786d | ||
|
|
b6e46fd331 | ||
|
|
d426cb6155 | ||
|
|
01961e68c0 | ||
|
|
c9ce61a234 | ||
|
|
21c6d0bbf7 | ||
|
|
3a5ccb4166 | ||
|
|
cd00e5bab3 | ||
|
|
0d1431539c | ||
|
|
5cc2e2fbc6 | ||
|
|
d12cae26cf | ||
|
|
5597c55c95 | ||
|
|
dc91d8dbeb | ||
|
|
321175c22a | ||
|
|
6dd03960c0 | ||
|
|
a170fe091f | ||
|
|
e465a115b4 | ||
|
|
0872d0d5fc | ||
|
|
cfd1223aff | ||
|
|
65fdf7f29b | ||
|
|
6f404b5aab | ||
|
|
3275224e87 | ||
|
|
7b7db35c96 | ||
|
|
22f3f10f13 | ||
|
|
c7a0a92436 | ||
|
|
ffc8949203 | ||
|
|
f59bf79d4d | ||
|
|
56c979aa66 | ||
|
|
744bb38ef3 | ||
|
|
9a82181484 | ||
|
|
ee385ab0be | ||
|
|
d9d6ac85fd | ||
|
|
78ce0aa509 | ||
|
|
94d391a50f | ||
|
|
20f79b61a6 | ||
|
|
2029ab36c3 | ||
|
|
9ec1a12c56 | ||
|
|
e33d1f813d | ||
|
|
a9f474fe7b | ||
|
|
d7645d15b6 | ||
|
|
2f88a8d0bc | ||
|
|
ff2a5dae0d | ||
|
|
7d5d05b7ca | ||
|
|
7437903a84 | ||
|
|
16b4590e1f | ||
|
|
fe26b66757 | ||
|
|
ef9393115f | ||
|
|
190a581354 | ||
|
|
46bea0cd3f | ||
|
|
9d59efdd7d | ||
|
|
f4866c8360 | ||
|
|
4716657757 | ||
|
|
83a8917175 | ||
|
|
fe9e789bd0 | ||
|
|
6b29a2caf9 | ||
|
|
f25a43cce4 | ||
|
|
d27446320e | ||
|
|
7e9f866ee3 | ||
|
|
db3a3b071b | ||
|
|
1640ca2752 | ||
|
|
ce722515e5 | ||
|
|
2b02452fb2 | ||
|
|
62ba3072b7 | ||
|
|
914bd331d0 | ||
|
|
7906780b4d | ||
|
|
7a89266603 | ||
|
|
0a3bb61d7e | ||
|
|
5a90da6a1c | ||
|
|
4d379b7e90 | ||
|
|
f978d4aea0 | ||
|
|
03fcda6c39 | ||
|
|
f5c9247bea | ||
|
|
94ac5f4d24 | ||
|
|
51156ceb26 | ||
|
|
c528ac9db8 | ||
|
|
422072b3ea | ||
|
|
d64f8ee064 | ||
|
|
fb93c1609b | ||
|
|
1f5cf05423 | ||
|
|
9df30cef29 | ||
|
|
69fd2f5370 | ||
|
|
bdc9f33166 | ||
|
|
3a6da5e453 | ||
|
|
a35ee1cc4d | ||
|
|
12fe7cc5c9 | ||
|
|
9a4418ee67 | ||
|
|
c7aabd3582 | ||
|
|
6b338e6bde | ||
|
|
4195fb2e4e | ||
|
|
8dedc5918b | ||
|
|
34e979086f | ||
|
|
4aeca566c1 | ||
|
|
34b6f32525 | ||
|
|
c4e1365aed | ||
|
|
11d8e4e2fe | ||
|
|
9c563adfe1 | ||
|
|
612a5231dd | ||
|
|
e329fefd15 | ||
|
|
9b2618c461 | ||
|
|
d088dc0db4 | ||
|
|
3ea5a50d6b | ||
|
|
bebf50b527 | ||
|
|
79880591b4 | ||
|
|
59e899d2a0 | ||
|
|
59cf6e33dd | ||
|
|
a33968d3f0 | ||
|
|
952ba60ec9 | ||
|
|
d370615162 | ||
|
|
f6f2dd9cfb | ||
|
|
451c2e2234 | ||
|
|
da434785c7 | ||
|
|
3c6a778be2 | ||
|
|
e4b852c0f9 | ||
|
|
e23433f856 | ||
|
|
bb6fbfb5cf | ||
|
|
3de03098c9 | ||
|
|
321a4d781f | ||
|
|
443468da6f | ||
|
|
52393b8fa3 | ||
|
|
62b1cef80b | ||
|
|
a3880d4292 | ||
|
|
738102bc2b | ||
|
|
c2ae069ece | ||
|
|
ccecad4279 | ||
|
|
c5fd4631f9 | ||
|
|
e9240c0b04 | ||
|
|
0be2a2bba5 | ||
|
|
fec472bc66 | ||
|
|
ae12107851 | ||
|
|
8ee352d0a3 | ||
|
|
2f7808f1af | ||
|
|
3cfb92e1a5 | ||
|
|
069c23a19b | ||
|
|
58505c01fb | ||
|
|
3333963ec6 | ||
|
|
39a7fea63c | ||
|
|
22ea5f78da | ||
|
|
3b7a1734bd | ||
|
|
5103c2a776 | ||
|
|
2226c16ef7 | ||
|
|
2e23ed16c1 | ||
|
|
b20875720c | ||
|
|
68d106e42d | ||
|
|
a684077739 | ||
|
|
bc33d3a1ae | ||
|
|
eaf237c80d | ||
|
|
640d28092c | ||
|
|
6b4d1fa4ca | ||
|
|
e614a77daf | ||
|
|
940be401d9 | ||
|
|
3e8ec304f4 | ||
|
|
6452c1b36d | ||
|
|
7da0526f98 | ||
|
|
d690f91c43 | ||
|
|
48445932f3 | ||
|
|
713cb51869 | ||
|
|
6c0a657a63 | ||
|
|
16d15554c1 | ||
|
|
d09c4d7cab | ||
|
|
5529c2a3af | ||
|
|
e4911cf0b1 | ||
|
|
72ed0cda1c | ||
|
|
80b0beca20 | ||
|
|
0c89d89f77 | ||
|
|
fffde61b2d | ||
|
|
da0d3f94cb | ||
|
|
8126ba4407 | ||
|
|
d64a5cd5c7 | ||
|
|
1ee5b2179c | ||
|
|
c6717cb011 | ||
|
|
00641cdd34 | ||
|
|
48924267a7 | ||
|
|
4a8d901aed | ||
|
|
bfa9409d53 | ||
|
|
fd63c8a7a1 | ||
|
|
389d341935 | ||
|
|
019a21ee53 | ||
|
|
a45307dd1f | ||
|
|
1e65da6b57 | ||
|
|
9d3e9d2752 | ||
|
|
a47224b564 | ||
|
|
50c5c37abe | ||
|
|
cab3b0718e | ||
|
|
088327660b | ||
|
|
28a385b036 | ||
|
|
be2555b00a | ||
|
|
c35c4e8499 | ||
|
|
2ec33119ca | ||
|
|
74af60639b | ||
|
|
9d90b4ba96 | ||
|
|
285594638b | ||
|
|
cb19f70a58 | ||
|
|
f5b4ad8ffd | ||
|
|
ec4ba03080 | ||
|
|
8def52f470 | ||
|
|
8b44be92c4 | ||
|
|
8a7e3d331e | ||
|
|
fc5ba37760 | ||
|
|
a72fa4e1c8 | ||
|
|
81e974605b | ||
|
|
b2dadeb801 | ||
|
|
1332bbe56f | ||
|
|
2e72864d5a | ||
|
|
369abe6cd1 | ||
|
|
3fd1617bc5 | ||
|
|
1589fe4efc | ||
|
|
c170eecf70 | ||
|
|
c9a275239e | ||
|
|
e564c103f4 | ||
|
|
32e093b879 | ||
|
|
41422af4f9 | ||
|
|
4a53f14849 | ||
|
|
bc6d01ffd9 | ||
|
|
d8b3bc90cd | ||
|
|
4d3f1da99c | ||
|
|
1838d7fa44 | ||
|
|
53577f61a4 | ||
|
|
b015570928 | ||
|
|
67734b7c55 | ||
|
|
0d9a71a86e | ||
|
|
1b3f39fdc2 | ||
|
|
c5c9d5abd7 | ||
|
|
58905aab2a | ||
|
|
4c0feb2aca | ||
|
|
e6d3eb1f18 | ||
|
|
cabe80270d | ||
|
|
aac4b606d1 | ||
|
|
2bd968e6c6 | ||
|
|
0a6cae7eb7 | ||
|
|
027487cfb6 | ||
|
|
716f793c43 | ||
|
|
891245e1ae | ||
|
|
ce3f02bdde | ||
|
|
ec6bff5d98 | ||
|
|
2b062c45ed | ||
|
|
9113df9fb7 | ||
|
|
7b6a393f43 | ||
|
|
f19831763a | ||
|
|
fcfe94241b | ||
|
|
304c864d79 | ||
|
|
36bafce54f | ||
|
|
d115ce47ac | ||
|
|
68a7098a1e | ||
|
|
e2e3fa722f | ||
|
|
0149ffbeff | ||
|
|
74b577be99 | ||
|
|
904507e663 | ||
|
|
a9d1b6e646 | ||
|
|
66e69c1295 | ||
|
|
d295e05f49 | ||
|
|
1de995c5c7 | ||
|
|
70eb51c5e9 | ||
|
|
b69f4f8f34 | ||
|
|
ef24899ae4 | ||
|
|
1a443172b0 | ||
|
|
e3d48c9322 | ||
|
|
c084b6b524 | ||
|
|
0bd3cc2cfd | ||
|
|
f0735f9018 | ||
|
|
0bce8eb988 | ||
|
|
9acc6f43d8 | ||
|
|
59ba04b1b0 | ||
|
|
b3995f0400 | ||
|
|
98ee5425ce | ||
|
|
f299d4d610 | ||
|
|
26f9145b32 | ||
|
|
3f33da5da4 | ||
|
|
fd4a9ba0c9 | ||
|
|
d2f38e3e9d | ||
|
|
6377314a5d | ||
|
|
d603ab84b0 | ||
|
|
22ecc6dfd4 | ||
|
|
5b3c4296dd | ||
|
|
da347f9a62 | ||
|
|
2bcd3a0df8 | ||
|
|
6d33f56b32 | ||
|
|
be5dd8579e | ||
|
|
8d7c266653 | ||
|
|
75b9556877 | ||
|
|
638d645da8 | ||
|
|
f7648e3ebf | ||
|
|
97d9f62bb7 | ||
|
|
03fb7a58f0 | ||
|
|
f205906b98 | ||
|
|
75a6325ff2 | ||
|
|
93be2966cf | ||
|
|
d784303431 | ||
|
|
e26d86e19a | ||
|
|
eee7f3b6ab | ||
|
|
8da162600b | ||
|
|
42283cf62c | ||
|
|
8bee7b1908 | ||
|
|
ca801e1c2c | ||
|
|
bfabb87301 | ||
|
|
55b3f5ea00 | ||
|
|
ac6d43bc97 | ||
|
|
deab77038e | ||
|
|
92736eb2fb | ||
|
|
1d94f7d2e1 | ||
|
|
780d1ed556 | ||
|
|
63fa6a260d | ||
|
|
ac11859763 | ||
|
|
496c96dea0 | ||
|
|
7e4754dbf8 | ||
|
|
6173a22c31 | ||
|
|
a9bf519f6c | ||
|
|
69fea8f914 | ||
|
|
fc7a386ec7 | ||
|
|
300e55c086 | ||
|
|
1b1edccfc1 | ||
|
|
76d98dddb7 | ||
|
|
22f70dbc34 | ||
|
|
582e1cc003 | ||
|
|
d695b0ee22 | ||
|
|
552d73bca8 | ||
|
|
aa7b90291d | ||
|
|
54d3412692 | ||
|
|
1264a3d6d5 | ||
|
|
cd26d59869 | ||
|
|
f2def2850a | ||
|
|
e3df89dbe7 | ||
|
|
4cf39f5fc4 | ||
|
|
94707dde9d | ||
|
|
1b214efc10 | ||
|
|
343a50bde5 | ||
|
|
234ab4754d | ||
|
|
11be062319 | ||
|
|
6bf50f1f04 | ||
|
|
14681c6229 | ||
|
|
2b4f3f3c6c | ||
|
|
c470316299 | ||
|
|
9dfc3393cc | ||
|
|
5eee648632 | ||
|
|
eb5ac8bb6a | ||
|
|
0fba2b60cc | ||
|
|
e3251f05c8 | ||
|
|
96edcf7262 | ||
|
|
90a00943fb | ||
|
|
a8c954f1f6 | ||
|
|
b4c6696b23 | ||
|
|
8d7ef501bb | ||
|
|
a7da9d0914 | ||
|
|
421a89c8cb | ||
|
|
8f9efd4f53 | ||
|
|
4ddc1c0ab7 | ||
|
|
97b9abf547 | ||
|
|
b4cc5a9033 | ||
|
|
c942b76cc9 | ||
|
|
d6dfc7c4ce | ||
|
|
3cf2bf1f1a | ||
|
|
16915b2f1b | ||
|
|
f4680f35d4 | ||
|
|
181c023a73 | ||
|
|
38b630ab42 | ||
|
|
2e590e1d5b | ||
|
|
e560099de4 | ||
|
|
45b6c9a23a | ||
|
|
e8dd980eee | ||
|
|
6600c918a4 | ||
|
|
1bee29320b | ||
|
|
949f677548 | ||
|
|
021ca6e11c | ||
|
|
65aca87cec | ||
|
|
6fe01b0cd5 | ||
|
|
f2284b7b66 | ||
|
|
ba16e1a523 | ||
|
|
6e10a24094 | ||
|
|
313fc03a91 | ||
|
|
1bffe13be2 | ||
|
|
917165fd68 | ||
|
|
e6b351e2b4 | ||
|
|
1bfd4eb3fb | ||
|
|
f7ec1359a7 | ||
|
|
937403c4a5 | ||
|
|
1b348172a2 | ||
|
|
3865f7c487 | ||
|
|
1f913c3e14 | ||
|
|
fda19e7806 | ||
|
|
b40f35c2c8 | ||
|
|
943308d290 | ||
|
|
5dd30a1daa | ||
|
|
9c8af35009 | ||
|
|
68a674be7a | ||
|
|
57e77b66dd | ||
|
|
a8ca6adeaf | ||
|
|
792f1e98eb | ||
|
|
cd7cebf49c | ||
|
|
4567619cb4 | ||
|
|
10bcd707f7 | ||
|
|
1c4ffef349 | ||
|
|
68f7e63f2b | ||
|
|
b4ade71df2 | ||
|
|
500ecc252a | ||
|
|
86d6cb2f59 | ||
|
|
6ec6b5ddf8 | ||
|
|
609fce3b5a | ||
|
|
d637d23438 | ||
|
|
ae63a361dc | ||
|
|
4bb0723dd3 | ||
|
|
a7153e09cc | ||
|
|
5ce9d536c2 | ||
|
|
168d4cad54 | ||
|
|
63b2e83f9e | ||
|
|
be71e733ad | ||
|
|
868b882a1c | ||
|
|
47d0579105 | ||
|
|
14b749a857 | ||
|
|
2d0518daed | ||
|
|
823326c370 | ||
|
|
6c1c7c5455 | ||
|
|
e2868e432e | ||
|
|
a8c44d86d2 | ||
|
|
e1641b51c6 | ||
|
|
836d18469e | ||
|
|
7692c86fac | ||
|
|
2d7c629175 | ||
|
|
dca0e20137 | ||
|
|
31f8923e69 | ||
|
|
df3d97ce3a | ||
|
|
6523caf94e | ||
|
|
90afea4c26 | ||
|
|
c4344316cf | ||
|
|
b5f5ef6450 | ||
|
|
9bf68170ed | ||
|
|
899c3a7842 | ||
|
|
45a75c85ff | ||
|
|
37e0e4f43d | ||
|
|
eab8439140 | ||
|
|
76352e80d2 | ||
|
|
e6fdd95ef1 | ||
|
|
1132a23b57 | ||
|
|
af1965272d | ||
|
|
8d0b5810e6 | ||
|
|
779988a56f | ||
|
|
35f8ad266f | ||
|
|
de8c9db2ed | ||
|
|
c765e6a20c | ||
|
|
50b8541e3c | ||
|
|
9740b53447 | ||
|
|
903e98b07c | ||
|
|
a96e6c2d61 | ||
|
|
02c14525dc | ||
|
|
6578d03e5f | ||
|
|
65865fd055 | ||
|
|
8653f6bc99 | ||
|
|
2404eb6810 | ||
|
|
6127f1d6c9 | ||
|
|
fa0d3f179d | ||
|
|
13a87e138e | ||
|
|
c44c517a95 | ||
|
|
355ac0e7a2 | ||
|
|
8a255369e2 | ||
|
|
af0179a2c9 | ||
|
|
42a14a263c | ||
|
|
d138598a4f | ||
|
|
d02f35c3f2 | ||
|
|
5fd2f05d3d | ||
|
|
7576f5ac2d | ||
|
|
39018ff0e1 | ||
|
|
968cb8b22d | ||
|
|
f0a4260346 | ||
|
|
9f220c8de2 | ||
|
|
22a191e355 | ||
|
|
494fcf3300 | ||
|
|
e5b5335014 | ||
|
|
9b95abca54 | ||
|
|
f7a4c04ae3 | ||
|
|
5ebabd020b | ||
|
|
413df3cb96 | ||
|
|
74c4859701 | ||
|
|
eb1ba9b53a | ||
|
|
94f0326346 | ||
|
|
7b39c7a870 | ||
|
|
21962991b5 | ||
|
|
f7bf1f87bf | ||
|
|
f4ae1ed7d6 | ||
|
|
214c840555 | ||
|
|
8cf4f42245 | ||
|
|
933da67979 | ||
|
|
275a821a77 | ||
|
|
88ec771f7a | ||
|
|
fa985e8402 | ||
|
|
559b54dfb8 | ||
|
|
c6d95c4488 | ||
|
|
dacb4888a1 | ||
|
|
2b84538d6c | ||
|
|
a308a35fc0 | ||
|
|
724a39d587 | ||
|
|
3174ae3090 | ||
|
|
8910ecbde9 | ||
|
|
6b0279f571 | ||
|
|
b050d6b2e5 | ||
|
|
21dbdf838f | ||
|
|
268a808c7e | ||
|
|
44087767f5 | ||
|
|
02315fbc5e | ||
|
|
1ffc40a61e | ||
|
|
35bda2c4a2 | ||
|
|
d8403b40ca | ||
|
|
5f84c4a60e | ||
|
|
6c680d4c70 | ||
|
|
27b85adbbb | ||
|
|
66b0379d6d | ||
|
|
36b5ed4a96 | ||
|
|
ce15667fe7 | ||
|
|
5a43132179 | ||
|
|
474e8c2c07 | ||
|
|
d8d4706967 | ||
|
|
4b4e967288 | ||
|
|
3da3b2211b | ||
|
|
0ca39195a4 | ||
|
|
aa035240b7 | ||
|
|
cf1565c726 | ||
|
|
659ee5effb | ||
|
|
372e767f2e | ||
|
|
3bc8e931eb | ||
|
|
c843864fa5 | ||
|
|
484cc57392 | ||
|
|
67cfd1880d | ||
|
|
05047c9c9c | ||
|
|
f13bc8c78c | ||
|
|
baffc6d766 | ||
|
|
c71e55af10 | ||
|
|
7a30f82705 | ||
|
|
3715e7a997 | ||
|
|
9048fb4038 | ||
|
|
10b4de8b18 | ||
|
|
b1559f76f7 | ||
|
|
f16ed218c7 | ||
|
|
f21f0d7a7f | ||
|
|
7160d0f393 | ||
|
|
ff20763663 | ||
|
|
786dede7e4 | ||
|
|
9a66bfba83 | ||
|
|
d147e81973 | ||
|
|
e43e31df89 | ||
|
|
1005de57df | ||
|
|
863c868d19 | ||
|
|
fbfdba8c05 | ||
|
|
a3582e0608 | ||
|
|
42b091b159 | ||
|
|
829c6e5f57 | ||
|
|
7bf8b4979a | ||
|
|
c866a09a1c | ||
|
|
dd2c7a8ef9 | ||
|
|
113cac680e | ||
|
|
e257709e27 | ||
|
|
dd62d8ce0d | ||
|
|
24f90631f6 | ||
|
|
068868b498 | ||
|
|
a6f1abf9f7 | ||
|
|
4dbe47f187 | ||
|
|
7d37a9d212 | ||
|
|
6065361500 | ||
|
|
213a7a86c1 | ||
|
|
f5ab8f714d | ||
|
|
cf2372bda2 | ||
|
|
fe42c82fdd | ||
|
|
f9fb171c97 | ||
|
|
c049a7760c | ||
|
|
f38bf37edb | ||
|
|
cd5c1658ac | ||
|
|
2fdade39d2 | ||
|
|
3a70ccce78 | ||
|
|
8c349ea2d3 | ||
|
|
12ba78c89b | ||
|
|
8a47a6bddf | ||
|
|
26500cf3d2 | ||
|
|
40babb9061 | ||
|
|
d30ef0b602 | ||
|
|
367ef28361 | ||
|
|
d64048dd5e | ||
|
|
3d804a4c13 | ||
|
|
958bda439a | ||
|
|
7077914ea4 | ||
|
|
547abf7261 | ||
|
|
37d9b33d8b | ||
|
|
a04c8c06ea | ||
|
|
a976479b87 | ||
|
|
6c708d8c50 | ||
|
|
0031fcb5e6 | ||
|
|
54779643a6 | ||
|
|
1b2f1d7fce | ||
|
|
d36bb2be1b | ||
|
|
9fa27c2890 | ||
|
|
c42075519c | ||
|
|
bb6ffb42bd | ||
|
|
50a74c44c1 | ||
|
|
433755e43d | ||
|
|
eaa5532733 | ||
|
|
2bdf20e7c2 | ||
|
|
fe89037234 | ||
|
|
7303d239d8 |
+327
-6
@@ -261,7 +261,8 @@
|
||||
"avatar_url": "https://avatars.githubusercontent.com/u/115825?v=4",
|
||||
"profile": "https://espadav8.co.uk",
|
||||
"contributions": [
|
||||
"doc"
|
||||
"doc",
|
||||
"test"
|
||||
]
|
||||
},
|
||||
{
|
||||
@@ -279,7 +280,8 @@
|
||||
"avatar_url": "https://avatars.githubusercontent.com/u/10946339?v=4",
|
||||
"profile": "https://github.com/sukarn-m",
|
||||
"contributions": [
|
||||
"code"
|
||||
"code",
|
||||
"doc"
|
||||
]
|
||||
},
|
||||
{
|
||||
@@ -307,7 +309,9 @@
|
||||
"profile": "https://github.com/StevenMcElligott",
|
||||
"contributions": [
|
||||
"code",
|
||||
"financial"
|
||||
"financial",
|
||||
"doc",
|
||||
"bug"
|
||||
]
|
||||
},
|
||||
{
|
||||
@@ -327,7 +331,9 @@
|
||||
"profile": "https://github.com/Sagit-chu",
|
||||
"contributions": [
|
||||
"code",
|
||||
"bug"
|
||||
"bug",
|
||||
"video",
|
||||
"doc"
|
||||
]
|
||||
},
|
||||
{
|
||||
@@ -570,7 +576,8 @@
|
||||
"avatar_url": "https://avatars.githubusercontent.com/u/9399967?v=4",
|
||||
"profile": "https://xstar97.github.io",
|
||||
"contributions": [
|
||||
"bug"
|
||||
"bug",
|
||||
"code"
|
||||
]
|
||||
},
|
||||
{
|
||||
@@ -728,10 +735,324 @@
|
||||
"contributions": [
|
||||
"code"
|
||||
]
|
||||
},
|
||||
{
|
||||
"login": "huma2000",
|
||||
"name": "huma2000",
|
||||
"avatar_url": "https://avatars.githubusercontent.com/u/9518124?v=4",
|
||||
"profile": "https://github.com/huma2000",
|
||||
"contributions": [
|
||||
"bug"
|
||||
]
|
||||
},
|
||||
{
|
||||
"login": "hugalafutro",
|
||||
"name": "hugalafutro",
|
||||
"avatar_url": "https://avatars.githubusercontent.com/u/30209689?v=4",
|
||||
"profile": "https://github.com/hugalafutro",
|
||||
"contributions": [
|
||||
"bug",
|
||||
"financial"
|
||||
]
|
||||
},
|
||||
{
|
||||
"login": "yehia2amer",
|
||||
"name": "yehia Amer",
|
||||
"avatar_url": "https://avatars.githubusercontent.com/u/6174059?v=4",
|
||||
"profile": "https://github.com/yehia2amer",
|
||||
"contributions": [
|
||||
"doc"
|
||||
]
|
||||
},
|
||||
{
|
||||
"login": "tfrancis",
|
||||
"name": "Tyler Stransky",
|
||||
"avatar_url": "https://avatars.githubusercontent.com/u/29070?v=4",
|
||||
"profile": "https://github.com/tfrancis",
|
||||
"contributions": [
|
||||
"bug"
|
||||
]
|
||||
},
|
||||
{
|
||||
"login": "juggie",
|
||||
"name": "juggie",
|
||||
"avatar_url": "https://avatars.githubusercontent.com/u/2034757?v=4",
|
||||
"profile": "https://github.com/juggie",
|
||||
"contributions": [
|
||||
"bug"
|
||||
]
|
||||
},
|
||||
{
|
||||
"login": "btilford",
|
||||
"name": "Ben Tilford",
|
||||
"avatar_url": "https://avatars.githubusercontent.com/u/248725?v=4",
|
||||
"profile": "https://github.com/btilford",
|
||||
"contributions": [
|
||||
"bug",
|
||||
"code"
|
||||
]
|
||||
},
|
||||
{
|
||||
"login": "I-nebukad-I",
|
||||
"name": "I-nebukad-I",
|
||||
"avatar_url": "https://avatars.githubusercontent.com/u/16634069?v=4",
|
||||
"profile": "https://github.com/I-nebukad-I",
|
||||
"contributions": [
|
||||
"bug"
|
||||
]
|
||||
},
|
||||
{
|
||||
"login": "packruler",
|
||||
"name": "Ethan Leisinger",
|
||||
"avatar_url": "https://avatars.githubusercontent.com/u/770373?v=4",
|
||||
"profile": "https://github.com/packruler",
|
||||
"contributions": [
|
||||
"code",
|
||||
"doc"
|
||||
]
|
||||
},
|
||||
{
|
||||
"login": "CullenShane",
|
||||
"name": "Cullen Murphy",
|
||||
"avatar_url": "https://avatars.githubusercontent.com/u/597786?v=4",
|
||||
"profile": "https://github.com/CullenShane",
|
||||
"contributions": [
|
||||
"code",
|
||||
"bug"
|
||||
]
|
||||
},
|
||||
{
|
||||
"login": "jthat",
|
||||
"name": "Jason Thatcher",
|
||||
"avatar_url": "https://avatars.githubusercontent.com/u/1931222?v=4",
|
||||
"profile": "https://github.com/jthat",
|
||||
"contributions": [
|
||||
"code",
|
||||
"bug",
|
||||
"doc"
|
||||
]
|
||||
},
|
||||
{
|
||||
"login": "stefanschramek",
|
||||
"name": "Stefan Schramek",
|
||||
"avatar_url": "https://avatars.githubusercontent.com/u/921342?v=4",
|
||||
"profile": "https://github.com/stefanschramek",
|
||||
"contributions": [
|
||||
"bug"
|
||||
]
|
||||
},
|
||||
{
|
||||
"login": "nokaka",
|
||||
"name": "nokaka",
|
||||
"avatar_url": "https://avatars.githubusercontent.com/u/101942715?v=4",
|
||||
"profile": "https://github.com/nokaka",
|
||||
"contributions": [
|
||||
"bug"
|
||||
]
|
||||
},
|
||||
{
|
||||
"login": "Lockszmith-GH",
|
||||
"name": "Gal Szkolnik",
|
||||
"avatar_url": "https://avatars.githubusercontent.com/u/905716?v=4",
|
||||
"profile": "http://code.lockszmith.com",
|
||||
"contributions": [
|
||||
"bug"
|
||||
]
|
||||
},
|
||||
{
|
||||
"login": "undsoft",
|
||||
"name": "Evgeny Stepanovych",
|
||||
"avatar_url": "https://avatars.githubusercontent.com/u/1481270?v=4",
|
||||
"profile": "https://github.com/undsoft",
|
||||
"contributions": [
|
||||
"bug"
|
||||
]
|
||||
},
|
||||
{
|
||||
"login": "sonicaj",
|
||||
"name": "Waqar Ahmed",
|
||||
"avatar_url": "https://avatars.githubusercontent.com/u/17968138?v=4",
|
||||
"profile": "https://github.com/sonicaj",
|
||||
"contributions": [
|
||||
"bug"
|
||||
]
|
||||
},
|
||||
{
|
||||
"login": "DrSKiZZ",
|
||||
"name": "DrSKiZZ",
|
||||
"avatar_url": "https://avatars.githubusercontent.com/u/50158917?v=4",
|
||||
"profile": "https://github.com/DrSKiZZ",
|
||||
"contributions": [
|
||||
"financial"
|
||||
]
|
||||
},
|
||||
{
|
||||
"login": "janpuc",
|
||||
"name": "Jan Puciłowski",
|
||||
"avatar_url": "https://avatars.githubusercontent.com/u/8539508?v=4",
|
||||
"profile": "https://github.com/janpuc",
|
||||
"contributions": [
|
||||
"code",
|
||||
"test"
|
||||
]
|
||||
},
|
||||
{
|
||||
"login": "shauncoyne",
|
||||
"name": "Shaun Coyne",
|
||||
"avatar_url": "https://avatars.githubusercontent.com/u/13672807?v=4",
|
||||
"profile": "https://github.com/shauncoyne",
|
||||
"contributions": [
|
||||
"financial"
|
||||
]
|
||||
},
|
||||
{
|
||||
"login": "ich777",
|
||||
"name": "Christoph",
|
||||
"avatar_url": "https://avatars.githubusercontent.com/u/28066518?v=4",
|
||||
"profile": "https://github.com/ich777",
|
||||
"contributions": [
|
||||
"financial"
|
||||
]
|
||||
},
|
||||
{
|
||||
"login": "UnDifferential",
|
||||
"name": "Brandon Rutledge",
|
||||
"avatar_url": "https://avatars.githubusercontent.com/u/17625468?v=4",
|
||||
"profile": "https://github.com/UnDifferential",
|
||||
"contributions": [
|
||||
"bug"
|
||||
]
|
||||
},
|
||||
{
|
||||
"login": "mikeNG",
|
||||
"name": "Michael Bestas",
|
||||
"avatar_url": "https://avatars.githubusercontent.com/u/1216752?v=4",
|
||||
"profile": "https://github.com/mikeNG",
|
||||
"contributions": [
|
||||
"bug"
|
||||
]
|
||||
},
|
||||
{
|
||||
"login": "jurgisrudaks",
|
||||
"name": "Jurģis Rudaks",
|
||||
"avatar_url": "https://avatars.githubusercontent.com/u/4631864?v=4",
|
||||
"profile": "https://rudaks.lv",
|
||||
"contributions": [
|
||||
"bug"
|
||||
]
|
||||
},
|
||||
{
|
||||
"login": "brunofatia",
|
||||
"name": "brunofatia",
|
||||
"avatar_url": "https://avatars.githubusercontent.com/u/67926902?v=4",
|
||||
"profile": "https://github.com/brunofatia",
|
||||
"contributions": [
|
||||
"financial"
|
||||
]
|
||||
},
|
||||
{
|
||||
"login": "TopicsLP",
|
||||
"name": "TopicsLP",
|
||||
"avatar_url": "https://avatars.githubusercontent.com/u/9019121?v=4",
|
||||
"profile": "https://github.com/TopicsLP",
|
||||
"contributions": [
|
||||
"doc"
|
||||
]
|
||||
},
|
||||
{
|
||||
"login": "schnerring",
|
||||
"name": "Michael Schnerring",
|
||||
"avatar_url": "https://avatars.githubusercontent.com/u/3743342?v=4",
|
||||
"profile": "https://schnerring.net",
|
||||
"contributions": [
|
||||
"bug",
|
||||
"code"
|
||||
]
|
||||
},
|
||||
{
|
||||
"login": "tlnagy",
|
||||
"name": "Tamas Nagy",
|
||||
"avatar_url": "https://avatars.githubusercontent.com/u/1661487?v=4",
|
||||
"profile": "https://tamasnagy.com",
|
||||
"contributions": [
|
||||
"bug"
|
||||
]
|
||||
},
|
||||
{
|
||||
"login": "openspeedtest",
|
||||
"name": "OpenSpeedTest™️",
|
||||
"avatar_url": "https://avatars.githubusercontent.com/u/51720450?v=4",
|
||||
"profile": "https://OpenSpeedTest.com",
|
||||
"contributions": [
|
||||
"code"
|
||||
]
|
||||
},
|
||||
{
|
||||
"login": "RichardJActon",
|
||||
"name": "Richard James Acton",
|
||||
"avatar_url": "https://avatars.githubusercontent.com/u/6893043?v=4",
|
||||
"profile": "https://richardjacton.github.io/",
|
||||
"contributions": [
|
||||
"doc"
|
||||
]
|
||||
},
|
||||
{
|
||||
"login": "lps-rocks",
|
||||
"name": "lps-rocks",
|
||||
"avatar_url": "https://avatars.githubusercontent.com/u/10893911?v=4",
|
||||
"profile": "https://github.com/lps-rocks",
|
||||
"contributions": [
|
||||
"bug"
|
||||
]
|
||||
},
|
||||
{
|
||||
"login": "Faustvii",
|
||||
"name": "Faust",
|
||||
"avatar_url": "https://avatars.githubusercontent.com/u/4357216?v=4",
|
||||
"profile": "https://github.com/Faustvii",
|
||||
"contributions": [
|
||||
"bug"
|
||||
]
|
||||
},
|
||||
{
|
||||
"login": "uranderu",
|
||||
"name": "uranderu",
|
||||
"avatar_url": "https://avatars.githubusercontent.com/u/71091366?v=4",
|
||||
"profile": "https://github.com/uranderu",
|
||||
"contributions": [
|
||||
"bug"
|
||||
]
|
||||
},
|
||||
{
|
||||
"login": "heytcass",
|
||||
"name": "Tom Cassady",
|
||||
"avatar_url": "https://avatars.githubusercontent.com/u/11260288?v=4",
|
||||
"profile": "https://github.com/heytcass",
|
||||
"contributions": [
|
||||
"bug"
|
||||
]
|
||||
},
|
||||
{
|
||||
"login": "Huftierchen",
|
||||
"name": "Huftierchen",
|
||||
"avatar_url": "https://avatars.githubusercontent.com/u/16015778?v=4",
|
||||
"profile": "https://github.com/Huftierchen",
|
||||
"contributions": [
|
||||
"bug"
|
||||
]
|
||||
},
|
||||
{
|
||||
"login": "ZasX",
|
||||
"name": "ZasX",
|
||||
"avatar_url": "https://avatars.githubusercontent.com/u/806452?v=4",
|
||||
"profile": "https://github.com/ZasX",
|
||||
"contributions": [
|
||||
"doc"
|
||||
]
|
||||
}
|
||||
],
|
||||
"contributorsPerLine": 7,
|
||||
"projectName": "apps",
|
||||
"projectName": "charts",
|
||||
"projectOwner": "truecharts",
|
||||
"repoType": "github",
|
||||
"repoHost": "https://github.com",
|
||||
|
||||
@@ -1,18 +1,21 @@
|
||||
{{ range .Versions }}
|
||||
<a name="{{ .Tag.Name }}"></a>
|
||||
### {{ if .Tag.Previous }}[{{ .Tag.Name }}]({{ $.Info.RepositoryURL }}/compare/{{ .Tag.Previous.Name }}...{{ .Tag.Name }}){{ else }}{{ .Tag.Name }}{{ end }} ({{ datetime "2006-01-02" .Tag.Date }})
|
||||
|
||||
## [{{ .Tag.Name }}]{{ if .Tag.Previous }}({{ $.Info.RepositoryURL }}/compare/{{ .Tag.Previous.Name }}...{{ .Tag.Name }}){{ else }}{{ .Tag.Name }}{{ end }} ({{ datetime "2006-01-02" .Tag.Date }})
|
||||
|
||||
{{ range .CommitGroups -}}
|
||||
#### {{ .Title }}
|
||||
|
||||
### {{ .Title }}
|
||||
|
||||
{{ range .Commits -}}
|
||||
* {{ .Subject }}
|
||||
{{ end }}
|
||||
{{ end -}}
|
||||
|
||||
- {{ .Subject }}
|
||||
{{ end }}
|
||||
{{ end -}}
|
||||
|
||||
{{- if .NoteGroups -}}
|
||||
{{ range .NoteGroups -}}
|
||||
#### {{ .Title }}
|
||||
|
||||
### {{ .Title }}
|
||||
|
||||
{{ range .Notes }}
|
||||
{{ .Body }}
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
// https://github.com/microsoft/vscode-dev-containers/tree/v0.154.0/containers/ruby
|
||||
{
|
||||
"name": "Ruby",
|
||||
"image": "tccr.io/truecharts/devcontainer:v2.2.1"
|
||||
"image": "ghcr.io/truecharts/devcontainer:v2.3.0@sha256:a163ad40427cd75a31a0365afb832f97e512d420429ed091b90b18a034526264"
|
||||
|
||||
// Set *default* container specific settings.json values on container create.
|
||||
"settings": {
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
# EditorConfig is awesome: http://EditorConfig.org
|
||||
|
||||
root = true
|
||||
|
||||
[*]
|
||||
charset = utf-8
|
||||
indent_size = 2
|
||||
indent_style = space
|
||||
insert_final_newline = true
|
||||
trim_trailing_whitespace = true
|
||||
|
||||
[*.{sh,json}]
|
||||
indent_size = 4
|
||||
|
||||
[*.md]
|
||||
max_line_length = off
|
||||
trim_trailing_whitespace = false
|
||||
+8
-7
@@ -1,10 +1,11 @@
|
||||
# Default code owners
|
||||
* @ornias1993
|
||||
* app/renovate-approve-2
|
||||
* app/renovate-approve-1
|
||||
* app/renovate-approve
|
||||
/charts/stable/ @ornias1993 @stavros-k
|
||||
/charts/incubator/ @ornias1993
|
||||
* @truecharts-bot
|
||||
/charts/stable/ @stavros-k
|
||||
/charts/incubator/ @stavros-k
|
||||
/charts/SCALE/ @ornias1993
|
||||
/charts/core/ @ornias1993
|
||||
/charts/dependency/ @ornias1993
|
||||
/charts/enterprise/ @ornias1993
|
||||
/charts/dev/ @ornias1993
|
||||
/docs/ @ornias1993 @stavros-k
|
||||
/promo/ @ornias1993 @stavros-k
|
||||
/containers/ @ornias1993
|
||||
|
||||
+138
-94
@@ -1,11 +1,13 @@
|
||||
# TrueCharts<br>
|
||||
# TrueCharts
|
||||
|
||||
**Community App Catalog for TrueNAS SCALE**
|
||||
|
||||
[](https://truecharts.org/)
|
||||
[](https://discord.gg/tVsPTHWTtr)
|
||||
[](https://discord.gg/Js6xv9nGuU)
|
||||
[](https://github.com/truecharts/apps/commits)
|
||||
|
||||
---
|
||||
|
||||
TrueCharts is a catalog of highly optimised TrueNAS SCALE Apps. Made for the community, By the community!
|
||||
|
||||
Our primary goals are:
|
||||
@@ -20,12 +22,14 @@ Our primary goals are:
|
||||
|
||||
All our apps are supposed to work together, be easy to setup using the TrueNAS UI and, above all, give the average user more than enough options to tune things to their liking.
|
||||
|
||||
<br>
|
||||
<br />
|
||||
|
||||
## Getting started using TrueCharts
|
||||
|
||||
[](https://truecharts.org/)
|
||||
|
||||
---
|
||||
|
||||
Installing TrueCharts within TrueNAS SCALE, is possible using the TrueNAS SCALE Catalog list.
|
||||
|
||||
Check TrueCharts [Quick-Start Guides](https://truecharts.org/manual/Quick-Start%20Guides/01-Adding-TrueCharts/) for more infotmation.
|
||||
@@ -40,29 +44,28 @@ Still something not working as expected? [Contact us!](https://truecharts.org/ab
|
||||
|
||||
For big changes we do have a roadmap, every spot on the roadmap is synced to a TrueNAS SCALE Release and should be read as "Should be added at or before this release"
|
||||
|
||||
|
||||
<br>
|
||||
<br />
|
||||
|
||||
**Restructure of the Project - TrueNAS SCALE "Bluefin" 22.xx ALPHA 1**
|
||||
|
||||
_The current project is hitting internal performance issues, for this reason we need to rework the structure and split some parts of the project into seperate repositories._
|
||||
|
||||
<br>
|
||||
<br />
|
||||
|
||||
**Refactor the Common Chart - TrueNAS SCALE "Bluefin" 22.xx ALPHA 2**
|
||||
|
||||
_The shared Common (chart) basis, used by all our Apps, needs some significant code cleanup. Primarily all code needs to follow a standardised format and comply to the same standard_
|
||||
|
||||
<br>
|
||||
<br />
|
||||
|
||||
**Increased test coverage - TrueNAS SCALE "Bluefin" 22.xx BETA 1**
|
||||
|
||||
_With most parts of our project somewhat cleaned up, we need to work on increasing the coverage of our test system. Our unittests should cover all features and we should also take upgrades into account when testing App changes_
|
||||
|
||||
|
||||
<br>
|
||||
<br />
|
||||
|
||||
## Development
|
||||
|
||||
[](https://github.com/pre-commit/pre-commit)
|
||||
[](https://github.com/renovatebot/renovate)
|
||||
[](https://github.com/truecharts/apps/commits)
|
||||
@@ -72,7 +75,6 @@ _With most parts of our project somewhat cleaned up, we need to work on increasi
|
||||
Our development process is fully distributed and agile, so every chart-maintainer is free to set their own roadmap and development speed and does not have to comply to a centralised roadmap.
|
||||
This ensures freedom and flexibility for everyone involved and makes sure you, the end user, always has the latest and greatest of every App installed.
|
||||
|
||||
|
||||
### Getting into creating Apps
|
||||
|
||||
Creating charts takes some getting used to, as it's based on Helm charts. We highly suggest prior know-how on creation/modifying Helm Charts, before taking on the challenge of creating SCALE Apps.
|
||||
@@ -85,10 +87,10 @@ We provide a lot of tools to make it easier to develop charts, templates, automa
|
||||
|
||||
Those tools do, however, take time to develop and are certainly not bug free. If you find mistakes in our tooling, please feel free to repost issues or submit any fixes you feel appropriate!
|
||||
|
||||
<br>
|
||||
|
||||
<br />
|
||||
|
||||
## Contact and Support
|
||||
|
||||
[](https://discord.gg/tVsPTHWTtr)
|
||||
|
||||
---
|
||||
@@ -103,29 +105,28 @@ To contact the TrueCharts project:
|
||||
|
||||
- Or [join our Discord server](https://truecharts.org/discord)
|
||||
|
||||
<br>
|
||||
<br />
|
||||
|
||||
<!-- INSERT-DISCORD-WIDGET -->
|
||||
|
||||
<br>
|
||||
|
||||
<br />
|
||||
|
||||
## Featured Projects
|
||||
|
||||
A lot of our work is based on the great effort of others. We would love to extend special thanks to these projects we owe a lot to:
|
||||
|
||||
| <a href="https://www.truenas.com/truenas-scale/"> <img src="https://user-images.githubusercontent.com/7613738/113836934-a1764e00-978d-11eb-8e19-a087c5c1f99b.png" width="150" height="150" /> </a> | <a href="https://k8s-at-home.com/"> <img src="https://user-images.githubusercontent.com/7613738/113837194-e26e6280-978d-11eb-9632-2e1529946302.png" width="150" height="150" /> </a> | <a href="https://traefik.io/traefik/"> <img src="https://user-images.githubusercontent.com/7613738/113837353-0b8ef300-978e-11eb-873e-14769acfe1f1.png" width="150" height="150" /> </a> | <a href="https://www.authelia.com/"> <img src="https://avatars.githubusercontent.com/u/59122411?s=200&v=4" width="150" height="150" /> </a> |
|
||||
| :---------------: | :---------------: | :---------------: | :---------------: |
|
||||
| <a href="https://www.truenas.com/truenas-scale/">TrueNAS SCALE</a> | <a href="https://k8s-at-home.com/">K8S-At-Home</a> | <a href="https://traefik.io/traefik/">Traefik</a> | <a href="https://www.authelia.com/">Authelia</a> |
|
||||
|
||||
<br>
|
||||
| :------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------: | :----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------: | :-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------: | :-----------------------------------------------------------------------------------------------------------------------------------------: |
|
||||
| <a href="https://www.truenas.com/truenas-scale/">TrueNAS SCALE</a> | <a href="https://k8s-at-home.com/">K8S-At-Home</a> | <a href="https://traefik.io/traefik/">Traefik</a> | <a href="https://www.authelia.com/">Authelia</a> |
|
||||
|
||||
<br />
|
||||
|
||||
## Contributors ✨
|
||||
|
||||
<!-- ALL-CONTRIBUTORS-BADGE:START - Do not remove or modify this section -->
|
||||
[](#contributors)
|
||||
[](#contributors)
|
||||
<!-- ALL-CONTRIBUTORS-BADGE:END -->
|
||||
|
||||
Thanks goes to these wonderful people ([emoji key](https://allcontributors.org/docs/en/emoji-key)):
|
||||
|
||||
---
|
||||
@@ -135,82 +136,82 @@ Thanks goes to these wonderful people ([emoji key](https://allcontributors.org/d
|
||||
<!-- markdownlint-disable -->
|
||||
<table>
|
||||
<tr>
|
||||
<td align="center"><a href="http://schouten-lebbing.nl"><img src="https://avatars.githubusercontent.com/u/7613738?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Kjeld Schouten-Lebbing</b></sub></a><br /><a href="https://github.com/truecharts/apps/commits?author=Ornias1993" title="Code">💻</a> <a href="#infra-Ornias1993" title="Infrastructure (Hosting, Build-Tools, etc)">🚇</a> <a href="https://github.com/truecharts/apps/commits?author=Ornias1993" title="Documentation">📖</a> <a href="https://github.com/truecharts/apps/pulls?q=is%3Apr+reviewed-by%3AOrnias1993" title="Reviewed Pull Requests">👀</a> <a href="#financial-Ornias1993" title="Financial">💵</a></td>
|
||||
<td align="center"><a href="http://sqlitebrowser.org"><img src="https://avatars.githubusercontent.com/u/406299?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Justin Clift</b></sub></a><br /><a href="https://github.com/truecharts/apps/commits?author=justinclift" title="Documentation">📖</a></td>
|
||||
<td align="center"><a href="https://github.com/whiskerz007"><img src="https://avatars.githubusercontent.com/u/2713522?v=4?s=100" width="100px;" alt=""/><br /><sub><b>whiskerz007</b></sub></a><br /><a href="https://github.com/truecharts/apps/commits?author=whiskerz007" title="Code">💻</a></td>
|
||||
<td align="center"><a href="https://github.com/stavros-k"><img src="https://avatars.githubusercontent.com/u/47820033?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Stavros Kois</b></sub></a><br /><a href="https://github.com/truecharts/apps/commits?author=stavros-k" title="Code">💻</a> <a href="https://github.com/truecharts/apps/commits?author=stavros-k" title="Documentation">📖</a> <a href="https://github.com/truecharts/apps/issues?q=author%3Astavros-k" title="Bug reports">🐛</a> <a href="https://github.com/truecharts/apps/pulls?q=is%3Apr+reviewed-by%3Astavros-k" title="Reviewed Pull Requests">👀</a> <a href="#financial-stavros-k" title="Financial">💵</a></td>
|
||||
<td align="center"><a href="https://github.com/allen-4"><img src="https://avatars.githubusercontent.com/u/65494904?v=4?s=100" width="100px;" alt=""/><br /><sub><b>allen-4</b></sub></a><br /><a href="https://github.com/truecharts/apps/commits?author=allen-4" title="Code">💻</a></td>
|
||||
<td align="center"><a href="https://github.com/tprelog"><img src="https://avatars.githubusercontent.com/u/35702532?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Troy Prelog</b></sub></a><br /><a href="https://github.com/truecharts/apps/commits?author=tprelog" title="Code">💻</a> <a href="https://github.com/truecharts/apps/commits?author=tprelog" title="Documentation">📖</a> <a href="#financial-tprelog" title="Financial">💵</a></td>
|
||||
<td align="center"><a href="https://github.com/djs52"><img src="https://avatars.githubusercontent.com/u/1466018?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Dan Sheridan</b></sub></a><br /><a href="https://github.com/truecharts/apps/commits?author=djs52" title="Code">💻</a></td>
|
||||
<td align="center"><a href="http://schouten-lebbing.nl"><img src="https://avatars.githubusercontent.com/u/7613738?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Kjeld Schouten-Lebbing</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=Ornias1993" title="Code">💻</a> <a href="#infra-Ornias1993" title="Infrastructure (Hosting, Build-Tools, etc)">🚇</a> <a href="https://github.com/truecharts/charts/commits?author=Ornias1993" title="Documentation">📖</a> <a href="https://github.com/truecharts/charts/pulls?q=is%3Apr+reviewed-by%3AOrnias1993" title="Reviewed Pull Requests">👀</a> <a href="#financial-Ornias1993" title="Financial">💵</a></td>
|
||||
<td align="center"><a href="http://sqlitebrowser.org"><img src="https://avatars.githubusercontent.com/u/406299?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Justin Clift</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=justinclift" title="Documentation">📖</a></td>
|
||||
<td align="center"><a href="https://github.com/whiskerz007"><img src="https://avatars.githubusercontent.com/u/2713522?v=4?s=100" width="100px;" alt=""/><br /><sub><b>whiskerz007</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=whiskerz007" title="Code">💻</a></td>
|
||||
<td align="center"><a href="https://github.com/stavros-k"><img src="https://avatars.githubusercontent.com/u/47820033?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Stavros Kois</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=stavros-k" title="Code">💻</a> <a href="https://github.com/truecharts/charts/commits?author=stavros-k" title="Documentation">📖</a> <a href="https://github.com/truecharts/charts/issues?q=author%3Astavros-k" title="Bug reports">🐛</a> <a href="https://github.com/truecharts/charts/pulls?q=is%3Apr+reviewed-by%3Astavros-k" title="Reviewed Pull Requests">👀</a> <a href="#financial-stavros-k" title="Financial">💵</a></td>
|
||||
<td align="center"><a href="https://github.com/allen-4"><img src="https://avatars.githubusercontent.com/u/65494904?v=4?s=100" width="100px;" alt=""/><br /><sub><b>allen-4</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=allen-4" title="Code">💻</a></td>
|
||||
<td align="center"><a href="https://github.com/tprelog"><img src="https://avatars.githubusercontent.com/u/35702532?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Troy Prelog</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=tprelog" title="Code">💻</a> <a href="https://github.com/truecharts/charts/commits?author=tprelog" title="Documentation">📖</a> <a href="#financial-tprelog" title="Financial">💵</a></td>
|
||||
<td align="center"><a href="https://github.com/djs52"><img src="https://avatars.githubusercontent.com/u/1466018?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Dan Sheridan</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=djs52" title="Code">💻</a></td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td align="center"><a href="https://www.cetic.be/Sebastien-Dupont?lang=en"><img src="https://avatars.githubusercontent.com/u/2684865?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Sebastien Dupont</b></sub></a><br /><a href="https://github.com/truecharts/apps/commits?author=banzo" title="Documentation">📖</a> <a href="#financial-banzo" title="Financial">💵</a></td>
|
||||
<td align="center"><a href="https://github.com/angelnu"><img src="https://avatars.githubusercontent.com/u/4406403?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Vegetto</b></sub></a><br /><a href="https://github.com/truecharts/apps/pulls?q=is%3Apr+reviewed-by%3Aangelnu" title="Reviewed Pull Requests">👀</a></td>
|
||||
<td align="center"><a href="https://github.com/ellienieuwdorp"><img src="https://avatars.githubusercontent.com/u/12896549?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Ellie Nieuwdorp</b></sub></a><br /><a href="https://github.com/truecharts/apps/commits?author=ellienieuwdorp" title="Code">💻</a></td>
|
||||
<td align="center"><a href="https://github.com/natewalck"><img src="https://avatars.githubusercontent.com/u/867868?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Nate Walck</b></sub></a><br /><a href="https://github.com/truecharts/apps/commits?author=natewalck" title="Code">💻</a></td>
|
||||
<td align="center"><a href="https://github.com/warllo54"><img src="https://avatars.githubusercontent.com/u/20650065?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Lloyd</b></sub></a><br /><a href="https://github.com/truecharts/apps/commits?author=warllo54" title="Code">💻</a> <a href="#financial-warllo54" title="Financial">💵</a></td>
|
||||
<td align="center"><a href="https://github.com/dwithnall"><img src="https://avatars.githubusercontent.com/u/5699800?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Dave Withnall</b></sub></a><br /><a href="https://github.com/truecharts/apps/commits?author=dwithnall" title="Documentation">📖</a></td>
|
||||
<td align="center"><a href="https://github.com/ksimm1"><img src="https://avatars.githubusercontent.com/u/1334526?v=4?s=100" width="100px;" alt=""/><br /><sub><b>ksimm1</b></sub></a><br /><a href="https://github.com/truecharts/apps/commits?author=ksimm1" title="Documentation">📖</a> <a href="https://github.com/truecharts/apps/issues?q=author%3Aksimm1" title="Bug reports">🐛</a> <a href="#financial-ksimm1" title="Financial">💵</a></td>
|
||||
<td align="center"><a href="https://www.cetic.be/Sebastien-Dupont?lang=en"><img src="https://avatars.githubusercontent.com/u/2684865?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Sebastien Dupont</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=banzo" title="Documentation">📖</a> <a href="#financial-banzo" title="Financial">💵</a></td>
|
||||
<td align="center"><a href="https://github.com/angelnu"><img src="https://avatars.githubusercontent.com/u/4406403?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Vegetto</b></sub></a><br /><a href="https://github.com/truecharts/charts/pulls?q=is%3Apr+reviewed-by%3Aangelnu" title="Reviewed Pull Requests">👀</a></td>
|
||||
<td align="center"><a href="https://github.com/ellienieuwdorp"><img src="https://avatars.githubusercontent.com/u/12896549?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Ellie Nieuwdorp</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=ellienieuwdorp" title="Code">💻</a></td>
|
||||
<td align="center"><a href="https://github.com/natewalck"><img src="https://avatars.githubusercontent.com/u/867868?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Nate Walck</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=natewalck" title="Code">💻</a></td>
|
||||
<td align="center"><a href="https://github.com/warllo54"><img src="https://avatars.githubusercontent.com/u/20650065?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Lloyd</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=warllo54" title="Code">💻</a> <a href="#financial-warllo54" title="Financial">💵</a></td>
|
||||
<td align="center"><a href="https://github.com/dwithnall"><img src="https://avatars.githubusercontent.com/u/5699800?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Dave Withnall</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=dwithnall" title="Documentation">📖</a></td>
|
||||
<td align="center"><a href="https://github.com/ksimm1"><img src="https://avatars.githubusercontent.com/u/1334526?v=4?s=100" width="100px;" alt=""/><br /><sub><b>ksimm1</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=ksimm1" title="Documentation">📖</a> <a href="https://github.com/truecharts/charts/issues?q=author%3Aksimm1" title="Bug reports">🐛</a> <a href="#financial-ksimm1" title="Financial">💵</a></td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td align="center"><a href="http://aaronjohnson.io"><img src="https://avatars.githubusercontent.com/u/1386238?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Aaron Johnson</b></sub></a><br /><a href="https://github.com/truecharts/apps/commits?author=acjohnson" title="Documentation">📖</a></td>
|
||||
<td align="center"><a href="https://github.com/ralphte"><img src="https://avatars.githubusercontent.com/u/2996680?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Ralph</b></sub></a><br /><a href="https://github.com/truecharts/apps/commits?author=ralphte" title="Code">💻</a></td>
|
||||
<td align="center"><a href="http://www.abc-groep.be"><img src="https://avatars.githubusercontent.com/u/2351765?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Joachim Baten</b></sub></a><br /><a href="https://github.com/truecharts/apps/commits?author=joachimbaten" title="Code">💻</a> <a href="https://github.com/truecharts/apps/issues?q=author%3Ajoachimbaten" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/mxyng"><img src="https://avatars.githubusercontent.com/u/2372640?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Michael Yang</b></sub></a><br /><a href="https://github.com/truecharts/apps/commits?author=mxyng" title="Code">💻</a></td>
|
||||
<td align="center"><a href="http://cturtle98.com"><img src="https://avatars.githubusercontent.com/u/24465356?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Ciaran Farley</b></sub></a><br /><a href="https://github.com/truecharts/apps/commits?author=cTurtle98" title="Documentation">📖</a></td>
|
||||
<td align="center"><a href="https://github.com/Heavybullets8"><img src="https://avatars.githubusercontent.com/u/20793231?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Heavybullets8</b></sub></a><br /><a href="https://github.com/truecharts/apps/commits?author=Heavybullets8" title="Documentation">📖</a> <a href="https://github.com/truecharts/apps/commits?author=Heavybullets8" title="Code">💻</a> <a href="https://github.com/truecharts/apps/issues?q=author%3AHeavybullets8" title="Bug reports">🐛</a> <a href="#video-Heavybullets8" title="Videos">📹</a> <a href="#mentoring-Heavybullets8" title="Mentoring">🧑🏫</a> <a href="#financial-Heavybullets8" title="Financial">💵</a></td>
|
||||
<td align="center"><a href="https://github.com/662"><img src="https://avatars.githubusercontent.com/u/13599186?v=4?s=100" width="100px;" alt=""/><br /><sub><b>662</b></sub></a><br /><a href="https://github.com/truecharts/apps/commits?author=662" title="Code">💻</a></td>
|
||||
<td align="center"><a href="http://aaronjohnson.io"><img src="https://avatars.githubusercontent.com/u/1386238?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Aaron Johnson</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=acjohnson" title="Documentation">📖</a></td>
|
||||
<td align="center"><a href="https://github.com/ralphte"><img src="https://avatars.githubusercontent.com/u/2996680?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Ralph</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=ralphte" title="Code">💻</a></td>
|
||||
<td align="center"><a href="http://www.abc-groep.be"><img src="https://avatars.githubusercontent.com/u/2351765?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Joachim Baten</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=joachimbaten" title="Code">💻</a> <a href="https://github.com/truecharts/charts/issues?q=author%3Ajoachimbaten" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/mxyng"><img src="https://avatars.githubusercontent.com/u/2372640?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Michael Yang</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=mxyng" title="Code">💻</a></td>
|
||||
<td align="center"><a href="http://cturtle98.com"><img src="https://avatars.githubusercontent.com/u/24465356?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Ciaran Farley</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=cTurtle98" title="Documentation">📖</a></td>
|
||||
<td align="center"><a href="https://github.com/Heavybullets8"><img src="https://avatars.githubusercontent.com/u/20793231?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Heavybullets8</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=Heavybullets8" title="Documentation">📖</a> <a href="https://github.com/truecharts/charts/commits?author=Heavybullets8" title="Code">💻</a> <a href="https://github.com/truecharts/charts/issues?q=author%3AHeavybullets8" title="Bug reports">🐛</a> <a href="#video-Heavybullets8" title="Videos">📹</a> <a href="#mentoring-Heavybullets8" title="Mentoring">🧑🏫</a> <a href="#financial-Heavybullets8" title="Financial">💵</a></td>
|
||||
<td align="center"><a href="https://github.com/662"><img src="https://avatars.githubusercontent.com/u/13599186?v=4?s=100" width="100px;" alt=""/><br /><sub><b>662</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=662" title="Code">💻</a></td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td align="center"><a href="https://github.com/alex171"><img src="https://avatars.githubusercontent.com/u/28484494?v=4?s=100" width="100px;" alt=""/><br /><sub><b>alex171</b></sub></a><br /><a href="https://github.com/truecharts/apps/commits?author=alex171" title="Documentation">📖</a></td>
|
||||
<td align="center"><a href="https://www.youtube.com/channel/UCOk-gHyjcWZNj3Br4oxwh0A"><img src="https://avatars.githubusercontent.com/u/1322205?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Techno Tim</b></sub></a><br /><a href="https://github.com/truecharts/apps/commits?author=timothystewart6" title="Documentation">📖</a></td>
|
||||
<td align="center"><a href="http://mingyaoliu.com"><img src="https://avatars.githubusercontent.com/u/3460335?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Mingyao Liu</b></sub></a><br /><a href="https://github.com/truecharts/apps/commits?author=MingyaoLiu" title="Code">💻</a> <a href="https://github.com/truecharts/apps/issues?q=author%3AMingyaoLiu" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/NightShaman"><img src="https://avatars.githubusercontent.com/u/12952292?v=4?s=100" width="100px;" alt=""/><br /><sub><b>NightShaman</b></sub></a><br /><a href="https://github.com/truecharts/apps/commits?author=NightShaman" title="Code">💻</a> <a href="https://github.com/truecharts/apps/commits?author=NightShaman" title="Documentation">📖</a> <a href="https://github.com/truecharts/apps/issues?q=author%3ANightShaman" title="Bug reports">🐛</a> <a href="#financial-NightShaman" title="Financial">💵</a></td>
|
||||
<td align="center"><a href="https://espadav8.co.uk"><img src="https://avatars.githubusercontent.com/u/115825?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Andrew Smith</b></sub></a><br /><a href="https://github.com/truecharts/apps/commits?author=EspadaV8" title="Documentation">📖</a></td>
|
||||
<td align="center"><a href="http://xilix.com"><img src="https://avatars.githubusercontent.com/u/2821?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Bob Klosinski</b></sub></a><br /><a href="https://github.com/truecharts/apps/commits?author=fluxin" title="Code">💻</a></td>
|
||||
<td align="center"><a href="https://github.com/sukarn-m"><img src="https://avatars.githubusercontent.com/u/10946339?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Sukarn</b></sub></a><br /><a href="https://github.com/truecharts/apps/commits?author=sukarn-m" title="Code">💻</a></td>
|
||||
<td align="center"><a href="https://github.com/alex171"><img src="https://avatars.githubusercontent.com/u/28484494?v=4?s=100" width="100px;" alt=""/><br /><sub><b>alex171</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=alex171" title="Documentation">📖</a></td>
|
||||
<td align="center"><a href="https://www.youtube.com/channel/UCOk-gHyjcWZNj3Br4oxwh0A"><img src="https://avatars.githubusercontent.com/u/1322205?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Techno Tim</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=timothystewart6" title="Documentation">📖</a></td>
|
||||
<td align="center"><a href="http://mingyaoliu.com"><img src="https://avatars.githubusercontent.com/u/3460335?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Mingyao Liu</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=MingyaoLiu" title="Code">💻</a> <a href="https://github.com/truecharts/charts/issues?q=author%3AMingyaoLiu" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/NightShaman"><img src="https://avatars.githubusercontent.com/u/12952292?v=4?s=100" width="100px;" alt=""/><br /><sub><b>NightShaman</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=NightShaman" title="Code">💻</a> <a href="https://github.com/truecharts/charts/commits?author=NightShaman" title="Documentation">📖</a> <a href="https://github.com/truecharts/charts/issues?q=author%3ANightShaman" title="Bug reports">🐛</a> <a href="#financial-NightShaman" title="Financial">💵</a></td>
|
||||
<td align="center"><a href="https://espadav8.co.uk"><img src="https://avatars.githubusercontent.com/u/115825?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Andrew Smith</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=EspadaV8" title="Documentation">📖</a> <a href="https://github.com/truecharts/charts/commits?author=EspadaV8" title="Tests">⚠️</a></td>
|
||||
<td align="center"><a href="http://xilix.com"><img src="https://avatars.githubusercontent.com/u/2821?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Bob Klosinski</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=fluxin" title="Code">💻</a></td>
|
||||
<td align="center"><a href="https://github.com/sukarn-m"><img src="https://avatars.githubusercontent.com/u/10946339?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Sukarn</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=sukarn-m" title="Code">💻</a> <a href="https://github.com/truecharts/charts/commits?author=sukarn-m" title="Documentation">📖</a></td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td align="center"><a href="https://github.com/sebsx"><img src="https://avatars.githubusercontent.com/u/735033?v=4?s=100" width="100px;" alt=""/><br /><sub><b>sebs</b></sub></a><br /><a href="https://github.com/truecharts/apps/commits?author=sebsx" title="Code">💻</a></td>
|
||||
<td align="center"><a href="https://github.com/Dyllan2000alfa"><img src="https://avatars.githubusercontent.com/u/29694020?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Dyllan Tinoco</b></sub></a><br /><a href="https://github.com/truecharts/apps/commits?author=Dyllan2000alfa" title="Code">💻</a></td>
|
||||
<td align="center"><a href="https://github.com/StevenMcElligott"><img src="https://avatars.githubusercontent.com/u/89483932?v=4?s=100" width="100px;" alt=""/><br /><sub><b>StevenMcElligott</b></sub></a><br /><a href="https://github.com/truecharts/apps/commits?author=StevenMcElligott" title="Code">💻</a> <a href="#financial-StevenMcElligott" title="Financial">💵</a></td>
|
||||
<td align="center"><a href="https://github.com/brothergomez"><img src="https://avatars.githubusercontent.com/u/38558969?v=4?s=100" width="100px;" alt=""/><br /><sub><b>brothergomez</b></sub></a><br /><a href="https://github.com/truecharts/apps/commits?author=brothergomez" title="Code">💻</a> <a href="https://github.com/truecharts/apps/issues?q=author%3Abrothergomez" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/Sagit-chu"><img src="https://avatars.githubusercontent.com/u/36596628?v=4?s=100" width="100px;" alt=""/><br /><sub><b>sagit</b></sub></a><br /><a href="https://github.com/truecharts/apps/commits?author=Sagit-chu" title="Code">💻</a> <a href="https://github.com/truecharts/apps/issues?q=author%3ASagit-chu" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://zhouyou.info"><img src="https://avatars.githubusercontent.com/u/8481484?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Nevan Chow</b></sub></a><br /><a href="https://github.com/truecharts/apps/commits?author=zzzhouuu" title="Code">💻</a></td>
|
||||
<td align="center"><a href="https://github.com/soilheart"><img src="https://avatars.githubusercontent.com/u/9056381?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Daniel Carlsson</b></sub></a><br /><a href="https://github.com/truecharts/apps/issues?q=author%3Asoilheart" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/sebsx"><img src="https://avatars.githubusercontent.com/u/735033?v=4?s=100" width="100px;" alt=""/><br /><sub><b>sebs</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=sebsx" title="Code">💻</a></td>
|
||||
<td align="center"><a href="https://github.com/Dyllan2000alfa"><img src="https://avatars.githubusercontent.com/u/29694020?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Dyllan Tinoco</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=Dyllan2000alfa" title="Code">💻</a></td>
|
||||
<td align="center"><a href="https://github.com/StevenMcElligott"><img src="https://avatars.githubusercontent.com/u/89483932?v=4?s=100" width="100px;" alt=""/><br /><sub><b>StevenMcElligott</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=StevenMcElligott" title="Code">💻</a> <a href="#financial-StevenMcElligott" title="Financial">💵</a> <a href="https://github.com/truecharts/charts/commits?author=StevenMcElligott" title="Documentation">📖</a> <a href="https://github.com/truecharts/charts/issues?q=author%3AStevenMcElligott" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/brothergomez"><img src="https://avatars.githubusercontent.com/u/38558969?v=4?s=100" width="100px;" alt=""/><br /><sub><b>brothergomez</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=brothergomez" title="Code">💻</a> <a href="https://github.com/truecharts/charts/issues?q=author%3Abrothergomez" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/Sagit-chu"><img src="https://avatars.githubusercontent.com/u/36596628?v=4?s=100" width="100px;" alt=""/><br /><sub><b>sagit</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=Sagit-chu" title="Code">💻</a> <a href="https://github.com/truecharts/charts/issues?q=author%3ASagit-chu" title="Bug reports">🐛</a> <a href="#video-Sagit-chu" title="Videos">📹</a> <a href="https://github.com/truecharts/charts/commits?author=Sagit-chu" title="Documentation">📖</a></td>
|
||||
<td align="center"><a href="https://zhouyou.info"><img src="https://avatars.githubusercontent.com/u/8481484?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Nevan Chow</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=zzzhouuu" title="Code">💻</a></td>
|
||||
<td align="center"><a href="https://github.com/soilheart"><img src="https://avatars.githubusercontent.com/u/9056381?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Daniel Carlsson</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3Asoilheart" title="Bug reports">🐛</a></td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td align="center"><a href="https://github.com/dlouie-swir"><img src="https://avatars.githubusercontent.com/u/81386715?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Devon Louie</b></sub></a><br /><a href="https://github.com/truecharts/apps/issues?q=author%3Adlouie-swir" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/Alex-Orsholits"><img src="https://avatars.githubusercontent.com/u/56907127?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Alex-Orsholits</b></sub></a><br /><a href="https://github.com/truecharts/apps/issues?q=author%3AAlex-Orsholits" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/Tails32"><img src="https://avatars.githubusercontent.com/u/2036401?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Tails32</b></sub></a><br /><a href="https://github.com/truecharts/apps/issues?q=author%3ATails32" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/Menaxerius"><img src="https://avatars.githubusercontent.com/u/25470894?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Menaxerius</b></sub></a><br /><a href="https://github.com/truecharts/apps/issues?q=author%3AMenaxerius" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/hidefog"><img src="https://avatars.githubusercontent.com/u/13468236?v=4?s=100" width="100px;" alt=""/><br /><sub><b>hidefog</b></sub></a><br /><a href="https://github.com/truecharts/apps/issues?q=author%3Ahidefog" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/dalgibbard"><img src="https://avatars.githubusercontent.com/u/1159620?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Darren Gibbard</b></sub></a><br /><a href="https://github.com/truecharts/apps/issues?q=author%3Adalgibbard" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/barti04"><img src="https://avatars.githubusercontent.com/u/34000663?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Barti</b></sub></a><br /><a href="https://github.com/truecharts/apps/issues?q=author%3Abarti04" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/dlouie-swir"><img src="https://avatars.githubusercontent.com/u/81386715?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Devon Louie</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3Adlouie-swir" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/Alex-Orsholits"><img src="https://avatars.githubusercontent.com/u/56907127?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Alex-Orsholits</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3AAlex-Orsholits" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/Tails32"><img src="https://avatars.githubusercontent.com/u/2036401?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Tails32</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3ATails32" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/Menaxerius"><img src="https://avatars.githubusercontent.com/u/25470894?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Menaxerius</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3AMenaxerius" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/hidefog"><img src="https://avatars.githubusercontent.com/u/13468236?v=4?s=100" width="100px;" alt=""/><br /><sub><b>hidefog</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3Ahidefog" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/dalgibbard"><img src="https://avatars.githubusercontent.com/u/1159620?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Darren Gibbard</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3Adalgibbard" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/barti04"><img src="https://avatars.githubusercontent.com/u/34000663?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Barti</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3Abarti04" title="Bug reports">🐛</a></td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td align="center"><a href="https://github.com/Sunii"><img src="https://avatars.githubusercontent.com/u/4595444?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Sunii</b></sub></a><br /><a href="https://github.com/truecharts/apps/issues?q=author%3ASunii" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/trbmchs"><img src="https://avatars.githubusercontent.com/u/7928292?v=4?s=100" width="100px;" alt=""/><br /><sub><b>trbmchs</b></sub></a><br /><a href="https://github.com/truecharts/apps/issues?q=author%3Atrbmchs" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/PylotLight"><img src="https://avatars.githubusercontent.com/u/7006124?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Light</b></sub></a><br /><a href="https://github.com/truecharts/apps/issues?q=author%3APylotLight" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/Boostflow"><img src="https://avatars.githubusercontent.com/u/18465315?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Boostflow</b></sub></a><br /><a href="https://github.com/truecharts/apps/issues?q=author%3ABoostflow" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/Trigardon"><img src="https://avatars.githubusercontent.com/u/98973534?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Trigardon</b></sub></a><br /><a href="https://github.com/truecharts/apps/issues?q=author%3ATrigardon" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/dbb12345"><img src="https://avatars.githubusercontent.com/u/52704517?v=4?s=100" width="100px;" alt=""/><br /><sub><b>dbb12345</b></sub></a><br /><a href="https://github.com/truecharts/apps/issues?q=author%3Adbb12345" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/karypid"><img src="https://avatars.githubusercontent.com/u/1221101?v=4?s=100" width="100px;" alt=""/><br /><sub><b>karypid</b></sub></a><br /><a href="https://github.com/truecharts/apps/issues?q=author%3Akarypid" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/Sunii"><img src="https://avatars.githubusercontent.com/u/4595444?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Sunii</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3ASunii" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/trbmchs"><img src="https://avatars.githubusercontent.com/u/7928292?v=4?s=100" width="100px;" alt=""/><br /><sub><b>trbmchs</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3Atrbmchs" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/PylotLight"><img src="https://avatars.githubusercontent.com/u/7006124?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Light</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3APylotLight" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/Boostflow"><img src="https://avatars.githubusercontent.com/u/18465315?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Boostflow</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3ABoostflow" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/Trigardon"><img src="https://avatars.githubusercontent.com/u/98973534?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Trigardon</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3ATrigardon" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/dbb12345"><img src="https://avatars.githubusercontent.com/u/52704517?v=4?s=100" width="100px;" alt=""/><br /><sub><b>dbb12345</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3Adbb12345" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/karypid"><img src="https://avatars.githubusercontent.com/u/1221101?v=4?s=100" width="100px;" alt=""/><br /><sub><b>karypid</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3Akarypid" title="Bug reports">🐛</a></td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td align="center"><a href="https://github.com/eingemaischt"><img src="https://avatars.githubusercontent.com/u/151498?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Philipp</b></sub></a><br /><a href="https://github.com/truecharts/apps/issues?q=author%3Aeingemaischt" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/j0hnby"><img src="https://avatars.githubusercontent.com/u/18377483?v=4?s=100" width="100px;" alt=""/><br /><sub><b>John</b></sub></a><br /><a href="https://github.com/truecharts/apps/issues?q=author%3Aj0hnby" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/john-parton"><img src="https://avatars.githubusercontent.com/u/2071543?v=4?s=100" width="100px;" alt=""/><br /><sub><b>John Parton</b></sub></a><br /><a href="https://github.com/truecharts/apps/issues?q=author%3Ajohn-parton" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/Amasis"><img src="https://avatars.githubusercontent.com/u/7325217?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Marc</b></sub></a><br /><a href="https://github.com/truecharts/apps/issues?q=author%3AAmasis" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/fdzaebel"><img src="https://avatars.githubusercontent.com/u/46503230?v=4?s=100" width="100px;" alt=""/><br /><sub><b>fdzaebel</b></sub></a><br /><a href="https://github.com/truecharts/apps/issues?q=author%3Afdzaebel" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/kloeckwerx"><img src="https://avatars.githubusercontent.com/u/97212383?v=4?s=100" width="100px;" alt=""/><br /><sub><b>kloeckwerx</b></sub></a><br /><a href="https://github.com/truecharts/apps/issues?q=author%3Akloeckwerx" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/BirdBare"><img src="https://avatars.githubusercontent.com/u/1051490?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Bradley Bare</b></sub></a><br /><a href="https://github.com/truecharts/apps/issues?q=author%3ABirdBare" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/eingemaischt"><img src="https://avatars.githubusercontent.com/u/151498?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Philipp</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3Aeingemaischt" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/j0hnby"><img src="https://avatars.githubusercontent.com/u/18377483?v=4?s=100" width="100px;" alt=""/><br /><sub><b>John</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3Aj0hnby" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/john-parton"><img src="https://avatars.githubusercontent.com/u/2071543?v=4?s=100" width="100px;" alt=""/><br /><sub><b>John Parton</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3Ajohn-parton" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/Amasis"><img src="https://avatars.githubusercontent.com/u/7325217?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Marc</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3AAmasis" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/fdzaebel"><img src="https://avatars.githubusercontent.com/u/46503230?v=4?s=100" width="100px;" alt=""/><br /><sub><b>fdzaebel</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3Afdzaebel" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/kloeckwerx"><img src="https://avatars.githubusercontent.com/u/97212383?v=4?s=100" width="100px;" alt=""/><br /><sub><b>kloeckwerx</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3Akloeckwerx" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/BirdBare"><img src="https://avatars.githubusercontent.com/u/1051490?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Bradley Bare</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3ABirdBare" title="Bug reports">🐛</a></td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td align="center"><a href="https://github.com/alexthamm"><img src="https://avatars.githubusercontent.com/u/2556372?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Alexander Thamm</b></sub></a><br /><a href="https://github.com/truecharts/apps/issues?q=author%3Aalexthamm" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/rexit1982"><img src="https://avatars.githubusercontent.com/u/7585043?v=4?s=100" width="100px;" alt=""/><br /><sub><b>rexit1982</b></sub></a><br /><a href="https://github.com/truecharts/apps/issues?q=author%3Arexit1982" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/iaxx"><img src="https://avatars.githubusercontent.com/u/13745514?v=4?s=100" width="100px;" alt=""/><br /><sub><b>iaxx</b></sub></a><br /><a href="https://github.com/truecharts/apps/issues?q=author%3Aiaxx" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://xstar97.github.io"><img src="https://avatars.githubusercontent.com/u/9399967?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Xstar97</b></sub></a><br /><a href="https://github.com/truecharts/apps/issues?q=author%3AXstar97" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/alexthamm"><img src="https://avatars.githubusercontent.com/u/2556372?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Alexander Thamm</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3Aalexthamm" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/rexit1982"><img src="https://avatars.githubusercontent.com/u/7585043?v=4?s=100" width="100px;" alt=""/><br /><sub><b>rexit1982</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3Arexit1982" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/iaxx"><img src="https://avatars.githubusercontent.com/u/13745514?v=4?s=100" width="100px;" alt=""/><br /><sub><b>iaxx</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3Aiaxx" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://xstar97.github.io"><img src="https://avatars.githubusercontent.com/u/9399967?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Xstar97</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3AXstar97" title="Bug reports">🐛</a> <a href="https://github.com/truecharts/charts/commits?author=Xstar97" title="Code">💻</a></td>
|
||||
<td align="center"><a href="https://github.com/Ornias"><img src="https://avatars.githubusercontent.com/u/20852677?v=4?s=100" width="100px;" alt=""/><br /><sub><b>ornias</b></sub></a><br /><a href="#video-ornias" title="Videos">📹</a></td>
|
||||
<td align="center"><a href="http://joshasplund.com"><img src="https://avatars.githubusercontent.com/u/3958801?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Josh Asplund</b></sub></a><br /><a href="#financial-joshuata" title="Financial">💵</a></td>
|
||||
<td align="center"><a href="https://github.com/midnight33233"><img src="https://avatars.githubusercontent.com/u/25982892?v=4?s=100" width="100px;" alt=""/><br /><sub><b>midnight33233</b></sub></a><br /><a href="#financial-midnight33233" title="Financial">💵</a></td>
|
||||
@@ -221,17 +222,61 @@ Thanks goes to these wonderful people ([emoji key](https://allcontributors.org/d
|
||||
<td align="center"><a href="https://github.com/hawkinzzz"><img src="https://avatars.githubusercontent.com/u/24587652?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Hawks</b></sub></a><br /><a href="#financial-hawkinzzz" title="Financial">💵</a></td>
|
||||
<td align="center"><a href="https://github.com/bodly2"><img src="https://avatars.githubusercontent.com/u/21004768?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Jim Russell</b></sub></a><br /><a href="#financial-bodly2" title="Financial">💵</a></td>
|
||||
<td align="center"><a href="https://github.com/TheGovnah"><img src="https://avatars.githubusercontent.com/u/1300101?v=4?s=100" width="100px;" alt=""/><br /><sub><b>TheGovnah</b></sub></a><br /><a href="#financial-TheGovnah" title="Financial">💵</a></td>
|
||||
<td align="center"><a href="https://github.com/famewolf"><img src="https://avatars.githubusercontent.com/u/4558832?v=4?s=100" width="100px;" alt=""/><br /><sub><b>famewolf</b></sub></a><br /><a href="#financial-famewolf" title="Financial">💵</a> <a href="https://github.com/truecharts/apps/issues?q=author%3Afamewolf" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/konradbjk"><img src="https://avatars.githubusercontent.com/u/31480935?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Konrad Bujak</b></sub></a><br /><a href="https://github.com/truecharts/apps/commits?author=konradbjk" title="Documentation">📖</a></td>
|
||||
<td align="center"><a href="https://github.com/famewolf"><img src="https://avatars.githubusercontent.com/u/4558832?v=4?s=100" width="100px;" alt=""/><br /><sub><b>famewolf</b></sub></a><br /><a href="#financial-famewolf" title="Financial">💵</a> <a href="https://github.com/truecharts/charts/issues?q=author%3Afamewolf" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/konradbjk"><img src="https://avatars.githubusercontent.com/u/31480935?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Konrad Bujak</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=konradbjk" title="Documentation">📖</a></td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td align="center"><a href="https://github.com/190n"><img src="https://avatars.githubusercontent.com/u/7763597?v=4?s=100" width="100px;" alt=""/><br /><sub><b>190n</b></sub></a><br /><a href="https://github.com/truecharts/apps/commits?author=190n" title="Code">💻</a> <a href="https://github.com/truecharts/apps/commits?author=190n" title="Documentation">📖</a></td>
|
||||
<td align="center"><a href="https://alexejk.io"><img src="https://avatars.githubusercontent.com/u/104794?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Alexej Kubarev</b></sub></a><br /><a href="https://github.com/truecharts/apps/commits?author=alexejk" title="Documentation">📖</a></td>
|
||||
<td align="center"><a href="https://github.com/r-vanooyen"><img src="https://avatars.githubusercontent.com/u/45106123?v=4?s=100" width="100px;" alt=""/><br /><sub><b>r-vanooyen</b></sub></a><br /><a href="https://github.com/truecharts/apps/commits?author=r-vanooyen" title="Documentation">📖</a></td>
|
||||
<td align="center"><a href="https://github.com/shadofall"><img src="https://avatars.githubusercontent.com/u/9327622?v=4?s=100" width="100px;" alt=""/><br /><sub><b>shadofall</b></sub></a><br /><a href="https://github.com/truecharts/apps/commits?author=shadofall" title="Documentation">📖</a></td>
|
||||
<td align="center"><a href="https://github.com/agreppin"><img src="https://avatars.githubusercontent.com/u/26579013?v=4?s=100" width="100px;" alt=""/><br /><sub><b>agreppin</b></sub></a><br /><a href="https://github.com/truecharts/apps/commits?author=agreppin" title="Code">💻</a></td>
|
||||
<td align="center"><a href="https://github.com/stdedos"><img src="https://avatars.githubusercontent.com/u/133706?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Stavros Ntentos</b></sub></a><br /><a href="https://github.com/truecharts/apps/commits?author=stdedos" title="Code">💻</a> <a href="#ideas-stdedos" title="Ideas, Planning, & Feedback">🤔</a></td>
|
||||
<td align="center"><a href="https://github.com/VladFlorinIlie"><img src="https://avatars.githubusercontent.com/u/35900803?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Vlad-Florin Ilie</b></sub></a><br /><a href="https://github.com/truecharts/apps/commits?author=VladFlorinIlie" title="Code">💻</a></td>
|
||||
<td align="center"><a href="https://github.com/190n"><img src="https://avatars.githubusercontent.com/u/7763597?v=4?s=100" width="100px;" alt=""/><br /><sub><b>190n</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=190n" title="Code">💻</a> <a href="https://github.com/truecharts/charts/commits?author=190n" title="Documentation">📖</a></td>
|
||||
<td align="center"><a href="https://alexejk.io"><img src="https://avatars.githubusercontent.com/u/104794?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Alexej Kubarev</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=alexejk" title="Documentation">📖</a></td>
|
||||
<td align="center"><a href="https://github.com/r-vanooyen"><img src="https://avatars.githubusercontent.com/u/45106123?v=4?s=100" width="100px;" alt=""/><br /><sub><b>r-vanooyen</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=r-vanooyen" title="Documentation">📖</a></td>
|
||||
<td align="center"><a href="https://github.com/shadofall"><img src="https://avatars.githubusercontent.com/u/9327622?v=4?s=100" width="100px;" alt=""/><br /><sub><b>shadofall</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=shadofall" title="Documentation">📖</a></td>
|
||||
<td align="center"><a href="https://github.com/agreppin"><img src="https://avatars.githubusercontent.com/u/26579013?v=4?s=100" width="100px;" alt=""/><br /><sub><b>agreppin</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=agreppin" title="Code">💻</a></td>
|
||||
<td align="center"><a href="https://github.com/stdedos"><img src="https://avatars.githubusercontent.com/u/133706?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Stavros Ntentos</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=stdedos" title="Code">💻</a> <a href="#ideas-stdedos" title="Ideas, Planning, & Feedback">🤔</a></td>
|
||||
<td align="center"><a href="https://github.com/VladFlorinIlie"><img src="https://avatars.githubusercontent.com/u/35900803?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Vlad-Florin Ilie</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=VladFlorinIlie" title="Code">💻</a></td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td align="center"><a href="https://github.com/huma2000"><img src="https://avatars.githubusercontent.com/u/9518124?v=4?s=100" width="100px;" alt=""/><br /><sub><b>huma2000</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3Ahuma2000" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/hugalafutro"><img src="https://avatars.githubusercontent.com/u/30209689?v=4?s=100" width="100px;" alt=""/><br /><sub><b>hugalafutro</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3Ahugalafutro" title="Bug reports">🐛</a> <a href="#financial-hugalafutro" title="Financial">💵</a></td>
|
||||
<td align="center"><a href="https://github.com/yehia2amer"><img src="https://avatars.githubusercontent.com/u/6174059?v=4?s=100" width="100px;" alt=""/><br /><sub><b>yehia Amer</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=yehia2amer" title="Documentation">📖</a></td>
|
||||
<td align="center"><a href="https://github.com/tfrancis"><img src="https://avatars.githubusercontent.com/u/29070?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Tyler Stransky</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3Atfrancis" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/juggie"><img src="https://avatars.githubusercontent.com/u/2034757?v=4?s=100" width="100px;" alt=""/><br /><sub><b>juggie</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3Ajuggie" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/btilford"><img src="https://avatars.githubusercontent.com/u/248725?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Ben Tilford</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3Abtilford" title="Bug reports">🐛</a> <a href="https://github.com/truecharts/charts/commits?author=btilford" title="Code">💻</a></td>
|
||||
<td align="center"><a href="https://github.com/I-nebukad-I"><img src="https://avatars.githubusercontent.com/u/16634069?v=4?s=100" width="100px;" alt=""/><br /><sub><b>I-nebukad-I</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3AI-nebukad-I" title="Bug reports">🐛</a></td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td align="center"><a href="https://github.com/packruler"><img src="https://avatars.githubusercontent.com/u/770373?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Ethan Leisinger</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=packruler" title="Code">💻</a> <a href="https://github.com/truecharts/charts/commits?author=packruler" title="Documentation">📖</a></td>
|
||||
<td align="center"><a href="https://github.com/CullenShane"><img src="https://avatars.githubusercontent.com/u/597786?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Cullen Murphy</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=CullenShane" title="Code">💻</a> <a href="https://github.com/truecharts/charts/issues?q=author%3ACullenShane" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/jthat"><img src="https://avatars.githubusercontent.com/u/1931222?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Jason Thatcher</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=jthat" title="Code">💻</a> <a href="https://github.com/truecharts/charts/issues?q=author%3Ajthat" title="Bug reports">🐛</a> <a href="https://github.com/truecharts/charts/commits?author=jthat" title="Documentation">📖</a></td>
|
||||
<td align="center"><a href="https://github.com/stefanschramek"><img src="https://avatars.githubusercontent.com/u/921342?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Stefan Schramek</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3Astefanschramek" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/nokaka"><img src="https://avatars.githubusercontent.com/u/101942715?v=4?s=100" width="100px;" alt=""/><br /><sub><b>nokaka</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3Anokaka" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="http://code.lockszmith.com"><img src="https://avatars.githubusercontent.com/u/905716?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Gal Szkolnik</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3ALockszmith-GH" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/undsoft"><img src="https://avatars.githubusercontent.com/u/1481270?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Evgeny Stepanovych</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3Aundsoft" title="Bug reports">🐛</a></td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td align="center"><a href="https://github.com/sonicaj"><img src="https://avatars.githubusercontent.com/u/17968138?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Waqar Ahmed</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3Asonicaj" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/DrSKiZZ"><img src="https://avatars.githubusercontent.com/u/50158917?v=4?s=100" width="100px;" alt=""/><br /><sub><b>DrSKiZZ</b></sub></a><br /><a href="#financial-DrSKiZZ" title="Financial">💵</a></td>
|
||||
<td align="center"><a href="https://github.com/janpuc"><img src="https://avatars.githubusercontent.com/u/8539508?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Jan Puciłowski</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=janpuc" title="Code">💻</a> <a href="https://github.com/truecharts/charts/commits?author=janpuc" title="Tests">⚠️</a></td>
|
||||
<td align="center"><a href="https://github.com/shauncoyne"><img src="https://avatars.githubusercontent.com/u/13672807?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Shaun Coyne</b></sub></a><br /><a href="#financial-shauncoyne" title="Financial">💵</a></td>
|
||||
<td align="center"><a href="https://github.com/ich777"><img src="https://avatars.githubusercontent.com/u/28066518?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Christoph</b></sub></a><br /><a href="#financial-ich777" title="Financial">💵</a></td>
|
||||
<td align="center"><a href="https://github.com/UnDifferential"><img src="https://avatars.githubusercontent.com/u/17625468?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Brandon Rutledge</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3AUnDifferential" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/mikeNG"><img src="https://avatars.githubusercontent.com/u/1216752?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Michael Bestas</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3AmikeNG" title="Bug reports">🐛</a></td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td align="center"><a href="https://rudaks.lv"><img src="https://avatars.githubusercontent.com/u/4631864?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Jurģis Rudaks</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3Ajurgisrudaks" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/brunofatia"><img src="https://avatars.githubusercontent.com/u/67926902?v=4?s=100" width="100px;" alt=""/><br /><sub><b>brunofatia</b></sub></a><br /><a href="#financial-brunofatia" title="Financial">💵</a></td>
|
||||
<td align="center"><a href="https://github.com/TopicsLP"><img src="https://avatars.githubusercontent.com/u/9019121?v=4?s=100" width="100px;" alt=""/><br /><sub><b>TopicsLP</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=TopicsLP" title="Documentation">📖</a></td>
|
||||
<td align="center"><a href="https://schnerring.net"><img src="https://avatars.githubusercontent.com/u/3743342?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Michael Schnerring</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3Aschnerring" title="Bug reports">🐛</a> <a href="https://github.com/truecharts/charts/commits?author=schnerring" title="Code">💻</a></td>
|
||||
<td align="center"><a href="https://tamasnagy.com"><img src="https://avatars.githubusercontent.com/u/1661487?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Tamas Nagy</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3Atlnagy" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://OpenSpeedTest.com"><img src="https://avatars.githubusercontent.com/u/51720450?v=4?s=100" width="100px;" alt=""/><br /><sub><b>OpenSpeedTest™️</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=openspeedtest" title="Code">💻</a></td>
|
||||
<td align="center"><a href="https://richardjacton.github.io/"><img src="https://avatars.githubusercontent.com/u/6893043?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Richard James Acton</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=RichardJActon" title="Documentation">📖</a></td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td align="center"><a href="https://github.com/lps-rocks"><img src="https://avatars.githubusercontent.com/u/10893911?v=4?s=100" width="100px;" alt=""/><br /><sub><b>lps-rocks</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3Alps-rocks" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/Faustvii"><img src="https://avatars.githubusercontent.com/u/4357216?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Faust</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3AFaustvii" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/uranderu"><img src="https://avatars.githubusercontent.com/u/71091366?v=4?s=100" width="100px;" alt=""/><br /><sub><b>uranderu</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3Auranderu" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/heytcass"><img src="https://avatars.githubusercontent.com/u/11260288?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Tom Cassady</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3Aheytcass" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/Huftierchen"><img src="https://avatars.githubusercontent.com/u/16015778?v=4?s=100" width="100px;" alt=""/><br /><sub><b>Huftierchen</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3AHuftierchen" title="Bug reports">🐛</a></td>
|
||||
<td align="center"><a href="https://github.com/ZasX"><img src="https://avatars.githubusercontent.com/u/806452?v=4?s=100" width="100px;" alt=""/><br /><sub><b>ZasX</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=ZasX" title="Documentation">📖</a></td>
|
||||
</tr>
|
||||
</table>
|
||||
|
||||
@@ -242,19 +287,18 @@ Thanks goes to these wonderful people ([emoji key](https://allcontributors.org/d
|
||||
|
||||
This project follows the [all-contributors](https://github.com/all-contributors/all-contributors) specification. Contributions of any kind welcome!
|
||||
|
||||
|
||||
|
||||
## Licence
|
||||
|
||||
[](https://github.com/truecharts/apps/blob/master/docs/LICENSE.BSD3)
|
||||
|
||||
---
|
||||
|
||||
Truecharts as a whole, is based on a BSD-3-clause license, this ensures almost everyone can use and modify our charts. However: As a lot of Apps are based on upstream Helm Charts, Licences can vary on a per-App basis. This can easily be seen by the presence of a "LICENSE" file in the App root folder.
|
||||
Truecharts as a whole, is based on a BSD-3-clause license, this ensures almost everyone can use and modify our charts. However: As a lot of Apps are based on upstream Helm Charts, Licences can vary on a per-App basis. This can easily be seen by the presence of a "LICENSE" file in the App root folder.
|
||||
|
||||
Some Apps may also contain parts in other licenses, such as libraries or templates, these files can be recognised by their individual headers.
|
||||
|
||||
|
||||
`SPDX-License-Identifier: BSD-3-Clause`
|
||||
|
||||
---
|
||||
 
|
||||
|
||||
 
|
||||
|
||||
+48
-46
@@ -1,52 +1,54 @@
|
||||
remote: origin
|
||||
target-branch: master
|
||||
helm-extra-args: --timeout 240s
|
||||
helm-extra-args: --timeout 300s
|
||||
chart-yaml-schema: .github/chart_schema.yaml
|
||||
chart-dirs:
|
||||
- charts/incubator
|
||||
- charts/stable
|
||||
- charts/dependency
|
||||
- charts/core
|
||||
- charts/dev
|
||||
- charts/games
|
||||
- charts/enterprise
|
||||
- charts/incubator
|
||||
- charts/stable
|
||||
- charts/dependency
|
||||
- charts/core
|
||||
- charts/dev
|
||||
- charts/games
|
||||
- charts/enterprise
|
||||
- charts/SCALE
|
||||
excluded-charts:
|
||||
- charts/incubator/sdtd
|
||||
- charts/stable/alertmanager-bot
|
||||
- charts/stable/alertmanager-discord
|
||||
- charts/stable/amcrest2mqtt
|
||||
- charts/stable/facebox
|
||||
- charts/stable/foundryvtt
|
||||
- charts/stable/heimdall
|
||||
- charts/stable/multus
|
||||
- charts/stable/pod-gateway
|
||||
- charts/stable/promcord
|
||||
- charts/stable/reg
|
||||
- charts/stable/ser2sock
|
||||
- charts/stable/zalando-postgres-cluster
|
||||
- charts/stable/zigbee2mqtt
|
||||
- charts/stable/wireguard
|
||||
- charts/stable/alertmanager-bot
|
||||
- charts/incubator/amcrest2mqtt
|
||||
- charts/library/common
|
||||
- charts/stable/foundryvtt
|
||||
- charts/stable/promcord
|
||||
- charts/incubator/zigbee2mqtt
|
||||
- charts/dev/alienswarm-reactivedrop
|
||||
- charts/dev/arksurvivalevolved
|
||||
- charts/dev/arma3
|
||||
- charts/dev/arma3exilemod
|
||||
- charts/dev/assettocorsa
|
||||
- charts/dev/server-7daystodie
|
||||
- charts/incubator/sdtd
|
||||
- charts/stable/alertmanager-bot
|
||||
- charts/stable/alertmanager-discord
|
||||
- charts/stable/amcrest2mqtt
|
||||
- charts/stable/facebox
|
||||
- charts/stable/foundryvtt
|
||||
- charts/stable/heimdall
|
||||
- charts/stable/multus
|
||||
- charts/stable/pod-gateway
|
||||
- charts/stable/promcord
|
||||
- charts/stable/reg
|
||||
- charts/stable/ser2sock
|
||||
- charts/stable/zalando-postgres-cluster
|
||||
- charts/stable/zigbee2mqtt
|
||||
- charts/stable/wireguard
|
||||
- charts/stable/alertmanager-bot
|
||||
- charts/stable/storj-node
|
||||
- charts/incubator/amcrest2mqtt
|
||||
- charts/library/common
|
||||
- charts/stable/foundryvtt
|
||||
- charts/stable/promcord
|
||||
- charts/incubator/zigbee2mqtt
|
||||
- charts/dev/alienswarm-reactivedrop
|
||||
- charts/dev/arksurvivalevolved
|
||||
- charts/dev/arma3
|
||||
- charts/dev/arma3exilemod
|
||||
- charts/dev/assettocorsa
|
||||
- charts/dev/server-7daystodie
|
||||
- charts/dev/craftopia
|
||||
- charts/dev/alienswarm
|
||||
- charts/dev/csgo
|
||||
- charts/dev/cstrike1-6
|
||||
- charts/dev/cstrikeconditionzero
|
||||
chart-repos:
|
||||
- truecharts-old=https://truecharts.org
|
||||
- truecharts=https://charts.truecharts.org
|
||||
- truecharts-library=https://library-charts.truecharts.org
|
||||
- bitnami=https://charts.bitnami.com/bitnami
|
||||
- amd-gpu-helm=https://radeonopencompute.github.io/k8s-device-plugin/
|
||||
- metallb=https://metallb.github.io/metallb
|
||||
- grafana=https://grafana.github.io/helm-charts
|
||||
- prometheus=https://prometheus-community.github.io/helm-charts
|
||||
- k8s-at-home-libraries=https://library-charts.k8s-at-home.com
|
||||
- k8s-at-home=https://k8s-at-home.com/charts
|
||||
- jetstack=https://charts.jetstack.io
|
||||
- truecharts=https://charts.truecharts.org
|
||||
- truecharts-library=https://library-charts.truecharts.org
|
||||
- bitnami=https://charts.bitnami.com/bitnami
|
||||
- metallb=https://metallb.github.io/metallb
|
||||
- grafana=https://grafana.github.io/helm-charts
|
||||
- prometheus=https://prometheus-community.github.io/helm-charts
|
||||
|
||||
+14
-18
@@ -3,23 +3,19 @@ target-branch: master
|
||||
chart-yaml-schema: .github/chart_schema.yaml
|
||||
helm-extra-args: --timeout 600s
|
||||
chart-dirs:
|
||||
- charts/incubator
|
||||
- charts/stable
|
||||
- charts/dependency
|
||||
- charts/core
|
||||
- charts/dev
|
||||
- charts/games
|
||||
- charts/enterprise
|
||||
- charts/incubator
|
||||
- charts/stable
|
||||
- charts/dependency
|
||||
- charts/core
|
||||
- charts/dev
|
||||
- charts/games
|
||||
- charts/enterprise
|
||||
- charts/SCALE
|
||||
excluded-charts: []
|
||||
chart-repos:
|
||||
- truecharts-old=https://truecharts.org
|
||||
- truecharts=https://charts.truecharts.org
|
||||
- truecharts-library=https://library-charts.truecharts.org
|
||||
- bitnami=https://charts.bitnami.com/bitnami
|
||||
- amd-gpu-helm=https://radeonopencompute.github.io/k8s-device-plugin/
|
||||
- metallb=https://metallb.github.io/metallb
|
||||
- grafana=https://grafana.github.io/helm-charts
|
||||
- prometheus=https://prometheus-community.github.io/helm-charts
|
||||
- k8s-at-home-libraries=https://library-charts.k8s-at-home.com
|
||||
- k8s-at-home=https://k8s-at-home.com/charts
|
||||
- jetstack=https://charts.jetstack.io
|
||||
- truecharts=https://charts.truecharts.org
|
||||
- truecharts-library=https://library-charts.truecharts.org
|
||||
- bitnami=https://charts.bitnami.com/bitnami
|
||||
- metallb=https://metallb.github.io/metallb
|
||||
- grafana=https://grafana.github.io/helm-charts
|
||||
- prometheus=https://prometheus-community.github.io/helm-charts
|
||||
|
||||
@@ -0,0 +1,23 @@
|
||||
module.exports = {
|
||||
dryRun: false,
|
||||
username: "truecharts-bot",
|
||||
gitAuthor: "truecharts-bot <[email protected]>",
|
||||
onboarding: false,
|
||||
platform: "github",
|
||||
repositories: ["truecharts/charts"],
|
||||
packageRules: [
|
||||
{
|
||||
description: "lockFileMaintenance",
|
||||
matchUpdateTypes: [
|
||||
"pin",
|
||||
"digest",
|
||||
"patch",
|
||||
"minor",
|
||||
"major",
|
||||
"lockFileMaintenance",
|
||||
],
|
||||
dependencyDashboardApproval: false,
|
||||
stabilityDays: 0,
|
||||
},
|
||||
],
|
||||
};
|
||||
+25
-17
@@ -1,5 +1,6 @@
|
||||
{
|
||||
"enabled": true,
|
||||
"extends": ["helpers:pinGitHubActionDigests"],
|
||||
"dependencyDashboard": true,
|
||||
"dependencyDashboardTitle": "Renovate Dashboard",
|
||||
"assigneesFromCodeOwners": true,
|
||||
@@ -33,6 +34,11 @@
|
||||
"commitMessageExtra": "to {{#if isSingleVersion}}v{{{newVersion}}}{{else}}{{{newValue}}}{{/if}}",
|
||||
"matchUpdateTypes": ["major", "minor", "patch", "digest"],
|
||||
},
|
||||
// Setup datasources for github actions
|
||||
{
|
||||
"matchManagers": ["github-actions"],
|
||||
"automerge": true,
|
||||
},
|
||||
//
|
||||
// helm deps
|
||||
//
|
||||
@@ -44,9 +50,6 @@
|
||||
"labels": ["update/helm/dependency/major"],
|
||||
"groupName": ["helm dependency major"],
|
||||
"paths": ["charts/dependency/"],
|
||||
"schedule": [
|
||||
"after 5am and before 7am on tuesday"
|
||||
],
|
||||
},
|
||||
{
|
||||
"matchDatasources": ["helm"],
|
||||
@@ -58,9 +61,6 @@
|
||||
"bumpVersion": "patch",
|
||||
"labels": ["update/helm/dependency/non-major"],
|
||||
"paths": ["charts/dependency/"],
|
||||
"schedule": [
|
||||
"after 5am and before 7am on tuesday"
|
||||
],
|
||||
"groupName": "helm dependency non-major",
|
||||
},
|
||||
//
|
||||
@@ -72,9 +72,9 @@
|
||||
"bumpVersion": "major",
|
||||
"labels": ["update/helm/general/major"],
|
||||
"groupName": ["helm general major"],
|
||||
"paths": ["charts/incubator/", "charts/games/", "charts/dev/", "charts/enterprise/", "charts/stable/", "charts/core/", "templates/app/"],
|
||||
"paths": ["charts/incubator/", "charts/SCALE/", "charts/dev/", "charts/enterprise/", "charts/stable/", "templates/app/"],
|
||||
"schedule": [
|
||||
"after 3pm and before 4pm on tuesday"
|
||||
"before 10pm on tuesday"
|
||||
],
|
||||
},
|
||||
{
|
||||
@@ -87,9 +87,9 @@
|
||||
"bumpVersion": "patch",
|
||||
"labels": ["update/helm/general/non-major"],
|
||||
"groupName": "helm general non-major",
|
||||
"paths": ["charts/incubator/", "charts/games/", "charts/dev/", "charts/enterprise/", "charts/stable/", "charts/core/", "templates/app/"],
|
||||
"paths": ["charts/incubator/", "charts/SCALE/", "charts/dev/", "charts/enterprise/", "charts/stable/", "templates/app/"],
|
||||
"schedule": [
|
||||
"after 3pm and before 4pm on tuesday"
|
||||
"before 10pm on tuesday"
|
||||
],
|
||||
},
|
||||
//
|
||||
@@ -102,7 +102,7 @@
|
||||
"labels": ["update/docker/enterprise/major"],
|
||||
"paths": ["charts/enterprise/"],
|
||||
"schedule": [
|
||||
"before 2am"
|
||||
"before 8am"
|
||||
],
|
||||
},
|
||||
{
|
||||
@@ -116,7 +116,7 @@
|
||||
"groupName": ["docker enterprise minor"],
|
||||
"paths": ["charts/enterprise/"],
|
||||
"schedule": [
|
||||
"before 2am"
|
||||
"before 8am"
|
||||
],
|
||||
},
|
||||
{
|
||||
@@ -132,7 +132,7 @@
|
||||
"groupName": ["docker enterprise patch"],
|
||||
"paths": ["charts/enterprise/"],
|
||||
"schedule": [
|
||||
"before 2am"
|
||||
"before 8am"
|
||||
],
|
||||
},
|
||||
//
|
||||
@@ -143,9 +143,9 @@
|
||||
"updateTypes": ["major"],
|
||||
"bumpVersion": "minor",
|
||||
"labels": ["update/docker/general/major"],
|
||||
"paths": ["charts/dependency/", "charts/games/", "charts/incubator/", "charts/dev/", "charts/library/", "charts/stable/", "charts/core/", "templates/app/"],
|
||||
"paths": ["charts/dependency/", "charts/SCALE/", "charts/incubator/", "charts/dev/", "charts/stable/", "templates/app/"],
|
||||
"schedule": [
|
||||
"before 2am"
|
||||
"before 8am"
|
||||
],
|
||||
},
|
||||
{
|
||||
@@ -160,10 +160,18 @@
|
||||
"bumpVersion": "patch",
|
||||
"labels": ["update/docker/general/non-major"],
|
||||
"groupName": ["docker general non-major"],
|
||||
"paths": ["charts/dependency/", "charts/games/", "charts/incubator/", "charts/dev/", "charts/library/", "charts/stable/", "charts/core/", "templates/app/"],
|
||||
"paths": ["charts/dependency/", "charts/SCALE/", "charts/incubator/", "charts/dev/", "charts/library/", "charts/stable/", "templates/app/"],
|
||||
"schedule": [
|
||||
"before 2am"
|
||||
"before 8am"
|
||||
],
|
||||
},
|
||||
//
|
||||
// Tag semantic version type based on regex
|
||||
//
|
||||
{
|
||||
"matchDatasources": ["docker"],
|
||||
"versioning": "regex:^v(?<major>\\d{2})(?<minor>\\d{2})(?<patch>\\d{2})$",
|
||||
"matchPackageNames": ["tccr.io/truecharts/photoprism"],
|
||||
}
|
||||
]
|
||||
}
|
||||
|
||||
@@ -31,6 +31,11 @@ include_questions(){
|
||||
/# Include{controllerExpert}/ { for (i=0;i<n;++i) print a[i]; next }
|
||||
1' templates/questions/controllerExpert.yaml ${target}/questions.yaml > "tmp${chartname}" && mv "tmp${chartname}" ${target}/questions.yaml
|
||||
|
||||
# Replace # Include{controllerExpertCommand} with the standard controllerExpertCommand codesnippet
|
||||
awk 'NR==FNR { a[n++]=$0; next }
|
||||
/# Include{controllerExpertCommand}/ { for (i=0;i<n;++i) print a[i]; next }
|
||||
1' templates/questions/controllerExpertCommand.yaml ${target}/questions.yaml > "tmp${chartname}" && mv "tmp${chartname}" ${target}/questions.yaml
|
||||
|
||||
# Replace # Include{containerConfig} with the standard containerConfig codesnippet
|
||||
awk 'NR==FNR { a[n++]=$0; next }
|
||||
/# Include{containerConfig}/ { for (i=0;i<n;++i) print a[i]; next }
|
||||
@@ -201,8 +206,15 @@ patch_apps() {
|
||||
touch ${target}/values.yaml
|
||||
# mv ${target}/SCALE/ix_values.yaml ${target}/ 2>/dev/null || :
|
||||
cp -rf ${target}/SCALE/templates/* ${target}/templates 2>/dev/null || :
|
||||
cp -rf ${target}/SCALE/migrations/* ${target}/migrations 2>/dev/null || :
|
||||
rm -rf ${target}/SCALE 2>/dev/null || :
|
||||
touch ${target}/values.yaml
|
||||
# Remove documentation that is not required for the App to install
|
||||
rm -rf ${target}/security.md
|
||||
rm -rf ${target}/helm-values.md
|
||||
rm -rf ${target}/CONFIG.md
|
||||
rm -rf ${target}/docs
|
||||
rm -rf ${target}/icon.png
|
||||
# Generate item.yaml
|
||||
cat ${target}/Chart.yaml | grep "icon" >> catalog/${train}/${chartname}/item.yaml
|
||||
sed -i "s|^icon:|icon_url:|g" catalog/${train}/${chartname}/item.yaml
|
||||
@@ -211,7 +223,12 @@ patch_apps() {
|
||||
# Generate SCALE App description file
|
||||
cat ${target}/Chart.yaml | yq .description -r >> ${target}/app-readme.md
|
||||
echo "" >> ${target}/app-readme.md
|
||||
echo "This App is supplied by TrueCharts, for more information please visit https://truecharts.org" >> ${target}/app-readme.md
|
||||
echo "This App is supplied by TrueCharts, for more information visit the manual: https://truecharts.org/charts/${train}/${chartname}" >> ${target}/app-readme.md
|
||||
echo "" >> ${target}/app-readme.md
|
||||
echo "---" >> ${target}/app-readme.md
|
||||
echo "" >> ${target}/app-readme.md
|
||||
echo "TrueCharts can only exist due to the incredible effort of our staff." >> ${target}/app-readme.md
|
||||
echo "Please consider making a [donation](https://truecharts.org/docs/about/sponsor) or contributing back to the project any way you can!" >> ${target}/app-readme.md
|
||||
}
|
||||
export -f patch_apps
|
||||
|
||||
|
||||
@@ -29,60 +29,16 @@ sync_tag() {
|
||||
}
|
||||
export -f sync_tag
|
||||
|
||||
helm_sec_scan() {
|
||||
sync_helmignore() {
|
||||
local chart="$1"
|
||||
local chartname="$2"
|
||||
local train="$3"
|
||||
local chartversion="$4"
|
||||
echo "Scanning helm security for ${chartname}"
|
||||
mkdir -p ${chart}/render
|
||||
rm -rf ${chart}/security.md || echo "removing old security.md file failed..."
|
||||
cat templates/security.tpl >> ${chart}/security.md
|
||||
echo "" >> ${chart}/security.md
|
||||
helm template ${chart} --output-dir ${chart}/render > /dev/null
|
||||
trivy config -f template --template "@./templates/trivy-config.tpl" -o ${chart}/render/tmpsec${chartname}.md ${chart}/render
|
||||
cat ${chart}/render/tmpsec${chartname}.md >> ${chart}/security.md
|
||||
rm -rf ${chart}/render/tmpsec${chartname}.md || true
|
||||
echo "" >> ${chart}/security.md
|
||||
echo "Attempting to sync HelmIgnore file for: ${chartname}"
|
||||
rm -rf ${chart}/.helmignore
|
||||
cp templates/chart/.helmignore ${chart}/
|
||||
}
|
||||
export -f helm_sec_scan
|
||||
|
||||
container_sec_scan() {
|
||||
local chart="$1"
|
||||
local chartname="$2"
|
||||
local train="$3"
|
||||
local chartversion="$4"
|
||||
echo "Scanning container security for ${chartname}"
|
||||
echo "## Containers" >> ${chart}/security.md
|
||||
echo "" >> ${chart}/security.md
|
||||
echo "##### Detected Containers" >> ${chart}/security.md
|
||||
echo "" >> ${chart}/security.md
|
||||
find ./${chart}/render/ -name '*.yaml' -type f -exec cat {} \; | grep image: | sed "s/image: //g" | sed "s/\"//g" >> ${chart}/render/containers.tmp
|
||||
cat ${chart}/render/containers.tmp >> ${chart}/security.md
|
||||
echo "" >> ${chart}/security.md
|
||||
echo "##### Scan Results" >> ${chart}/security.md
|
||||
echo "" >> ${chart}/security.md
|
||||
for container in $(cat ${chart}/render/containers.tmp); do
|
||||
echo "processing container: ${container}"
|
||||
echo "" >> ${chart}/security.md
|
||||
trivy image -f template --template "@./templates/trivy-container.tpl" -o ${chart}/render/tmpsec${chartname}.md "${container}"
|
||||
cat ${chart}/render/tmpsec${chartname}.md >> ${chart}/security.md
|
||||
rm -rf ${chart}/render/tmpsec${chartname}.md || true
|
||||
echo "" >> ${chart}/security.md
|
||||
done
|
||||
|
||||
}
|
||||
export -f container_sec_scan
|
||||
|
||||
sec_scan_cleanup() {
|
||||
local chart="$1"
|
||||
local chartname="$2"
|
||||
local train="$3"
|
||||
local chartversion="$4"
|
||||
rm -rf ${chart}/render
|
||||
sed -i 's/ghcr.io/tccr.io/g' ${chart}/security.md
|
||||
}
|
||||
export -f sec_scan_cleanup
|
||||
export -f sync_helmignore
|
||||
|
||||
create_changelog() {
|
||||
local chart="$1"
|
||||
@@ -102,7 +58,7 @@ create_changelog() {
|
||||
fi
|
||||
sed -i '1d' ${chart}/CHANGELOG.md
|
||||
cat ${chart}/app-changelog.md | cat - ${chart}/CHANGELOG.md > temp && mv temp ${chart}/CHANGELOG.md
|
||||
sed -i '1s/^/# Changelog<br>\n\n/' ${chart}/CHANGELOG.md
|
||||
sed -i '1s/^/# Changelog\n\n/' ${chart}/CHANGELOG.md
|
||||
rm ${chart}/app-changelog.md || echo "changelog not found..."
|
||||
}
|
||||
export -f create_changelog
|
||||
@@ -116,7 +72,7 @@ generate_docs() {
|
||||
helm-docs \
|
||||
--ignore-file=".helmdocsignore" \
|
||||
--output-file="README.md" \
|
||||
--template-files="/__w/apps/apps/templates/docs/README.md.gotmpl" \
|
||||
--template-files="/__w/charts/charts/templates/docs/README.md.gotmpl" \
|
||||
--chart-search-root="${chart}"
|
||||
}
|
||||
export -f generate_docs
|
||||
@@ -128,10 +84,8 @@ if [[ -d "charts/${1}" ]]; then
|
||||
chartname=$(basename charts/${1})
|
||||
train=$(basename $(dirname "charts/${1}"))
|
||||
SCALESUPPORT=$(cat charts/${1}/Chart.yaml | yq '.annotations."truecharts.org/SCALE-support"' -r)
|
||||
sync_helmignore "charts/${1}" "${chartname}" "$train" "${chartversion}" || echo "Syncing HelmIgnore file failed..."
|
||||
helm dependency update "charts/${1}" --skip-refresh || (sleep 10 && helm dependency update "charts/${1}" --skip-refresh) || (sleep 10 && helm dependency update "charts/${1}" --skip-refresh)
|
||||
helm_sec_scan "charts/${1}" "${chartname}" "$train" "${chartversion}" || echo "helm-chart security-scan failed..."
|
||||
container_sec_scan "charts/${1}" "${chartname}" "$train" "${chartversion}" || echo "container security-scan failed..."
|
||||
sec_scan_cleanup "charts/${1}" "${chartname}" "$train" "${chartversion}" || echo "security-scan cleanup failed..."
|
||||
sync_tag "charts/${1}" "${chartname}" "$train" "${chartversion}" || echo "Tag sync failed..."
|
||||
create_changelog "charts/${1}" "${chartname}" "$train" "${chartversion}" || echo "changelog generation failed..."
|
||||
generate_docs "charts/${1}" "${chartname}" "$train" "${chartversion}" || echo "Docs generation failed..."
|
||||
|
||||
+2
-2
@@ -8,8 +8,8 @@ daysUntilClose: 5
|
||||
|
||||
# Issues or Pull Requests with these labels will never be considered stale. Set to `[]` to disable
|
||||
exemptLabels:
|
||||
- on-hold
|
||||
- pinned
|
||||
- on-hold
|
||||
- pinned
|
||||
|
||||
# Label to use when marking as stale
|
||||
staleLabel: stale
|
||||
|
||||
@@ -15,16 +15,16 @@ jobs:
|
||||
name: Test SCALE Catalog
|
||||
runs-on: ubuntu-latest
|
||||
container:
|
||||
image: ghcr.io/truecharts/devcontainer:v2.2.1@sha256:4ace13c049bf00f85c63e0070f86b71656a7c3b2113aa3e21c3107f3d1f7bf87
|
||||
image: ghcr.io/truecharts/devcontainer:v2.4.0@sha256:395ee7ed8b9cba6569ddeba77b7ceb86fdb79b91a19c639625d7bc54cb1ccc1d
|
||||
steps:
|
||||
- uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846 # tag=v3
|
||||
- uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
|
||||
name: Checkout
|
||||
with:
|
||||
fetch-depth: 100
|
||||
ref: ${{ inputs.checkoutCommit }}
|
||||
|
||||
- name: Checkout
|
||||
uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846 # tag=v3
|
||||
uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
|
||||
with:
|
||||
repository: truecharts/catalog
|
||||
path: catalog
|
||||
@@ -32,3 +32,10 @@ jobs:
|
||||
- name: build-and-run
|
||||
run: |
|
||||
tools/build-release.sh
|
||||
|
||||
- uses: vishnudxb/cancel-workflow@c3c77eb4383ba7d023e6614a07d94fe990501ac6 # tag=v1.2
|
||||
if: failure()
|
||||
with:
|
||||
repo: truecharts/apps
|
||||
workflow_id: ${{ github.run_id }}
|
||||
access_token: ${{ github.token }}
|
||||
|
||||
@@ -20,7 +20,7 @@ jobs:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: Checkout
|
||||
uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846 # tag=v3
|
||||
uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
|
||||
with:
|
||||
fetch-depth: 0
|
||||
|
||||
@@ -44,13 +44,13 @@ jobs:
|
||||
commitHash: ${{ steps.save-commit-hash.outputs.commit_hash }}
|
||||
steps:
|
||||
- name: Checkout
|
||||
uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846 # tag=v3
|
||||
uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
|
||||
with:
|
||||
fetch-depth: 0
|
||||
|
||||
- name: Install Kubernetes tools
|
||||
if: inputs.isRenovatePR == 'true'
|
||||
uses: yokawasa/action-setup-kube-tools@c81bf94cddd6c3172e6f61aa7f5ad66a2b5db98d # tag=v0.8.0
|
||||
uses: yokawasa/action-setup-kube-tools@f7f73d7965074b0f5491b7210ff51e3254d42058 # tag=v0.8.2
|
||||
with:
|
||||
setup-tools: |
|
||||
yq
|
||||
@@ -72,7 +72,7 @@ jobs:
|
||||
- name: Create commit
|
||||
id: create-commit
|
||||
if: inputs.isRenovatePR == 'true'
|
||||
uses: stefanzweifel/git-auto-commit-action@c4b132ec2c77a21fcab564bd3c92610cee84b894 # tag=v4
|
||||
uses: stefanzweifel/git-auto-commit-action@49620cd3ed21ee620a48530e81dba0d139c9cb80 # tag=v4
|
||||
with:
|
||||
file_pattern: charts/**/
|
||||
commit_message: "chore: Auto-update chart metadata [skip ci]"
|
||||
|
||||
@@ -47,7 +47,7 @@ jobs:
|
||||
detected6: ${{ steps.list-changed.outputs.detected6 }}
|
||||
steps:
|
||||
- name: Checkout
|
||||
uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846 # tag=v3
|
||||
uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
|
||||
with:
|
||||
fetch-depth: 0
|
||||
ref: ${{ inputs.checkoutCommit }}
|
||||
@@ -58,23 +58,24 @@ jobs:
|
||||
- name: Collect changes
|
||||
id: list-changed
|
||||
if: inputs.chartChangesDetected == 'true'
|
||||
shell: bash
|
||||
run: |
|
||||
EXCLUDED=$(yq eval -o=json '.excluded-charts // []' .github/ct-lint.yaml)
|
||||
CHARTS=$(ct list-changed --config .github/ct-lint.yaml)
|
||||
CHARTS_JSON=$(echo "${CHARTS}" | jq -R -s -c 'split("\n")[:-1]')
|
||||
OUTPUT_JSON=$(echo "{\"excluded\": ${EXCLUDED}, \"all\": ${CHARTS_JSON}}" | jq -c '.all-.excluded')
|
||||
OUTPUT_JSON1=$(echo $OUTPUT_JSON | jq -r -c '.[:250]')
|
||||
OUTPUT_JSON2=$(echo $OUTPUT_JSON | jq -r -c '.[251:500]')
|
||||
OUTPUT_JSON3=$(echo $OUTPUT_JSON | jq -r -c '.[501:750]')
|
||||
OUTPUT_JSON4=$(echo $OUTPUT_JSON | jq -r -c '.[751:1000]')
|
||||
OUTPUT_JSON5=$(echo $OUTPUT_JSON | jq -r -c '.[1001:1250]')
|
||||
OUTPUT_JSON6=$(echo $OUTPUT_JSON | jq -r -c '.[1251:1500]')
|
||||
OUTPUT_JSON1=$((echo $OUTPUT_JSON | jq -r -c '.[:50]'; echo $OUTPUT_JSON | jq -r -c '.[301:350]'; echo $OUTPUT_JSON | jq -r -c '.[601:650]'; echo $OUTPUT_JSON | jq -r -c '.[901:950]'; echo $OUTPUT_JSON | jq -r -c '.[1201:1250]') | jq -s add)
|
||||
OUTPUT_JSON2=$((echo $OUTPUT_JSON | jq -r -c '.[51:100]'; echo $OUTPUT_JSON | jq -r -c '.[351:400]'; echo $OUTPUT_JSON | jq -r -c '.[651:700]'; echo $OUTPUT_JSON | jq -r -c '.[951:1000]'; echo $OUTPUT_JSON | jq -r -c '.[1251:1300]') | jq -s add)
|
||||
OUTPUT_JSON3=$((echo $OUTPUT_JSON | jq -r -c '.[101:150]'; echo $OUTPUT_JSON | jq -r -c '.[401:450]'; echo $OUTPUT_JSON | jq -r -c '.[701:750]'; echo $OUTPUT_JSON | jq -r -c '.[1001:1050]'; echo $OUTPUT_JSON | jq -r -c '.[1301:1350]') | jq -s add)
|
||||
OUTPUT_JSON4=$((echo $OUTPUT_JSON | jq -r -c '.[151:200]'; echo $OUTPUT_JSON | jq -r -c '.[451:500]'; echo $OUTPUT_JSON | jq -r -c '.[751:800]'; echo $OUTPUT_JSON | jq -r -c '.[1051:1100]'; echo $OUTPUT_JSON | jq -r -c '.[1351:1400]') | jq -s add)
|
||||
OUTPUT_JSON5=$((echo $OUTPUT_JSON | jq -r -c '.[201:250]'; echo $OUTPUT_JSON | jq -r -c '.[501:550]'; echo $OUTPUT_JSON | jq -r -c '.[801:850]'; echo $OUTPUT_JSON | jq -r -c '.[1101:1150]'; echo $OUTPUT_JSON | jq -r -c '.[1401:1450]') | jq -s add)
|
||||
OUTPUT_JSON6=$((echo $OUTPUT_JSON | jq -r -c '.[251:300]'; echo $OUTPUT_JSON | jq -r -c '.[551:600]'; echo $OUTPUT_JSON | jq -r -c '.[851:900]'; echo $OUTPUT_JSON | jq -r -c '.[1151:1200]'; echo $OUTPUT_JSON | jq -r -c '.[1451:1500]') | jq -s add)
|
||||
echo ::set-output name=charts1::${OUTPUT_JSON1}
|
||||
echo ::set-output name=charts2::${OUTPUT_JSON2}
|
||||
echo ::set-output name=charts2::${OUTPUT_JSON3}
|
||||
echo ::set-output name=charts2::${OUTPUT_JSON4}
|
||||
echo ::set-output name=charts2::${OUTPUT_JSON5}
|
||||
echo ::set-output name=charts2::${OUTPUT_JSON6}
|
||||
echo ::set-output name=charts3::${OUTPUT_JSON3}
|
||||
echo ::set-output name=charts4::${OUTPUT_JSON4}
|
||||
echo ::set-output name=charts5::${OUTPUT_JSON5}
|
||||
echo ::set-output name=charts6::${OUTPUT_JSON6}
|
||||
if [[ $(echo ${OUTPUT_JSON1} | jq -c '. | length') -gt 0 ]]; then
|
||||
echo "::set-output name=detected1::true"
|
||||
fi
|
||||
@@ -106,19 +107,19 @@ jobs:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: Checkout
|
||||
uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846 # tag=v3
|
||||
uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
|
||||
with:
|
||||
fetch-depth: 0
|
||||
ref: ${{ inputs.checkoutCommit }}
|
||||
|
||||
- name: lint Kubernetes tools
|
||||
uses: yokawasa/action-setup-kube-tools@c81bf94cddd6c3172e6f61aa7f5ad66a2b5db98d # tag=v0.8.0
|
||||
uses: yokawasa/action-setup-kube-tools@f7f73d7965074b0f5491b7210ff51e3254d42058 # tag=v0.8.2
|
||||
with:
|
||||
setup-tools: |
|
||||
helmv3
|
||||
helm: "3.8.0"
|
||||
|
||||
- uses: actions/setup-python@98f2ad02fd48d057ee3b4d4f66525b231c3e52b6 # tag=v3
|
||||
- uses: actions/setup-python@c4e89fac7e8767b327bbad6cb4d859eda999cf08 # tag=v4
|
||||
with:
|
||||
python-version: "3.10"
|
||||
|
||||
@@ -126,7 +127,7 @@ jobs:
|
||||
uses: helm/chart-testing-action@dae259e86a35ff09145c0805e2d7dd3f7207064a # tag=v2.2.1
|
||||
|
||||
- name: Run chart-testing (lint)
|
||||
run: ct lint --config ".github/ct-lint.yaml" --charts "${{ matrix.chart }}"
|
||||
run: ct lint --config ".github/ct-lint.yaml" --charts "${{ matrix.chart }}" || ct lint --config ".github/ct-lint.yaml" --charts "${{ matrix.chart }}"
|
||||
|
||||
lint-charts2:
|
||||
needs:
|
||||
@@ -140,19 +141,19 @@ jobs:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: Checkout
|
||||
uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846 # tag=v3
|
||||
uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
|
||||
with:
|
||||
fetch-depth: 0
|
||||
ref: ${{ inputs.checkoutCommit }}
|
||||
|
||||
- name: lint Kubernetes tools
|
||||
uses: yokawasa/action-setup-kube-tools@c81bf94cddd6c3172e6f61aa7f5ad66a2b5db98d # tag=v0.8.0
|
||||
uses: yokawasa/action-setup-kube-tools@f7f73d7965074b0f5491b7210ff51e3254d42058 # tag=v0.8.2
|
||||
with:
|
||||
setup-tools: |
|
||||
helmv3
|
||||
helm: "3.8.0"
|
||||
|
||||
- uses: actions/setup-python@98f2ad02fd48d057ee3b4d4f66525b231c3e52b6 # tag=v3
|
||||
- uses: actions/setup-python@c4e89fac7e8767b327bbad6cb4d859eda999cf08 # tag=v4
|
||||
with:
|
||||
python-version: "3.10"
|
||||
|
||||
@@ -160,7 +161,7 @@ jobs:
|
||||
uses: helm/chart-testing-action@dae259e86a35ff09145c0805e2d7dd3f7207064a # tag=v2.2.1
|
||||
|
||||
- name: Run chart-testing (lint)
|
||||
run: ct lint --config ".github/ct-lint.yaml" --charts "${{ matrix.chart }}"
|
||||
run: ct lint --config ".github/ct-lint.yaml" --charts "${{ matrix.chart }}" || ct lint --config ".github/ct-lint.yaml" --charts "${{ matrix.chart }}"
|
||||
|
||||
lint-charts3:
|
||||
needs:
|
||||
@@ -174,19 +175,19 @@ jobs:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: Checkout
|
||||
uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846 # tag=v3
|
||||
uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
|
||||
with:
|
||||
fetch-depth: 0
|
||||
ref: ${{ inputs.checkoutCommit }}
|
||||
|
||||
- name: lint Kubernetes tools
|
||||
uses: yokawasa/action-setup-kube-tools@c81bf94cddd6c3172e6f61aa7f5ad66a2b5db98d # tag=v0.8.0
|
||||
uses: yokawasa/action-setup-kube-tools@f7f73d7965074b0f5491b7210ff51e3254d42058 # tag=v0.8.2
|
||||
with:
|
||||
setup-tools: |
|
||||
helmv3
|
||||
helm: "3.8.0"
|
||||
|
||||
- uses: actions/setup-python@98f2ad02fd48d057ee3b4d4f66525b231c3e52b6 # tag=v3
|
||||
- uses: actions/setup-python@c4e89fac7e8767b327bbad6cb4d859eda999cf08 # tag=v4
|
||||
with:
|
||||
python-version: "3.10"
|
||||
|
||||
@@ -194,7 +195,7 @@ jobs:
|
||||
uses: helm/chart-testing-action@dae259e86a35ff09145c0805e2d7dd3f7207064a # tag=v2.2.1
|
||||
|
||||
- name: Run chart-testing (lint)
|
||||
run: ct lint --config ".github/ct-lint.yaml" --charts "${{ matrix.chart }}"
|
||||
run: ct lint --config ".github/ct-lint.yaml" --charts "${{ matrix.chart }}" || ct lint --config ".github/ct-lint.yaml" --charts "${{ matrix.chart }}"
|
||||
|
||||
lint-charts4:
|
||||
needs:
|
||||
@@ -208,19 +209,19 @@ jobs:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: Checkout
|
||||
uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846 # tag=v3
|
||||
uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
|
||||
with:
|
||||
fetch-depth: 0
|
||||
ref: ${{ inputs.checkoutCommit }}
|
||||
|
||||
- name: lint Kubernetes tools
|
||||
uses: yokawasa/action-setup-kube-tools@c81bf94cddd6c3172e6f61aa7f5ad66a2b5db98d # tag=v0.8.0
|
||||
uses: yokawasa/action-setup-kube-tools@f7f73d7965074b0f5491b7210ff51e3254d42058 # tag=v0.8.2
|
||||
with:
|
||||
setup-tools: |
|
||||
helmv3
|
||||
helm: "3.8.0"
|
||||
|
||||
- uses: actions/setup-python@98f2ad02fd48d057ee3b4d4f66525b231c3e52b6 # tag=v3
|
||||
- uses: actions/setup-python@c4e89fac7e8767b327bbad6cb4d859eda999cf08 # tag=v4
|
||||
with:
|
||||
python-version: "3.10"
|
||||
|
||||
@@ -228,7 +229,7 @@ jobs:
|
||||
uses: helm/chart-testing-action@dae259e86a35ff09145c0805e2d7dd3f7207064a # tag=v2.2.1
|
||||
|
||||
- name: Run chart-testing (lint)
|
||||
run: ct lint --config ".github/ct-lint.yaml" --charts "${{ matrix.chart }}"
|
||||
run: ct lint --config ".github/ct-lint.yaml" --charts "${{ matrix.chart }}" || ct lint --config ".github/ct-lint.yaml" --charts "${{ matrix.chart }}"
|
||||
|
||||
lint-charts5:
|
||||
needs:
|
||||
@@ -242,19 +243,19 @@ jobs:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: Checkout
|
||||
uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846 # tag=v3
|
||||
uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
|
||||
with:
|
||||
fetch-depth: 0
|
||||
ref: ${{ inputs.checkoutCommit }}
|
||||
|
||||
- name: lint Kubernetes tools
|
||||
uses: yokawasa/action-setup-kube-tools@c81bf94cddd6c3172e6f61aa7f5ad66a2b5db98d # tag=v0.8.0
|
||||
uses: yokawasa/action-setup-kube-tools@f7f73d7965074b0f5491b7210ff51e3254d42058 # tag=v0.8.2
|
||||
with:
|
||||
setup-tools: |
|
||||
helmv3
|
||||
helm: "3.8.0"
|
||||
|
||||
- uses: actions/setup-python@98f2ad02fd48d057ee3b4d4f66525b231c3e52b6 # tag=v3
|
||||
- uses: actions/setup-python@c4e89fac7e8767b327bbad6cb4d859eda999cf08 # tag=v4
|
||||
with:
|
||||
python-version: "3.10"
|
||||
|
||||
@@ -262,7 +263,7 @@ jobs:
|
||||
uses: helm/chart-testing-action@dae259e86a35ff09145c0805e2d7dd3f7207064a # tag=v2.2.1
|
||||
|
||||
- name: Run chart-testing (lint)
|
||||
run: ct lint --config ".github/ct-lint.yaml" --charts "${{ matrix.chart }}"
|
||||
run: ct lint --config ".github/ct-lint.yaml" --charts "${{ matrix.chart }}" || ct lint --config ".github/ct-lint.yaml" --charts "${{ matrix.chart }}"
|
||||
|
||||
lint-charts6:
|
||||
needs:
|
||||
@@ -276,19 +277,19 @@ jobs:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: Checkout
|
||||
uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846 # tag=v3
|
||||
uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
|
||||
with:
|
||||
fetch-depth: 0
|
||||
ref: ${{ inputs.checkoutCommit }}
|
||||
|
||||
- name: lint Kubernetes tools
|
||||
uses: yokawasa/action-setup-kube-tools@c81bf94cddd6c3172e6f61aa7f5ad66a2b5db98d # tag=v0.8.0
|
||||
uses: yokawasa/action-setup-kube-tools@f7f73d7965074b0f5491b7210ff51e3254d42058 # tag=v0.8.2
|
||||
with:
|
||||
setup-tools: |
|
||||
helmv3
|
||||
helm: "3.8.0"
|
||||
|
||||
- uses: actions/setup-python@98f2ad02fd48d057ee3b4d4f66525b231c3e52b6 # tag=v3
|
||||
- uses: actions/setup-python@c4e89fac7e8767b327bbad6cb4d859eda999cf08 # tag=v4
|
||||
with:
|
||||
python-version: "3.10"
|
||||
|
||||
@@ -296,8 +297,7 @@ jobs:
|
||||
uses: helm/chart-testing-action@dae259e86a35ff09145c0805e2d7dd3f7207064a # tag=v2.2.1
|
||||
|
||||
- name: Run chart-testing (lint)
|
||||
run: ct lint --config ".github/ct-lint.yaml" --charts "${{ matrix.chart }}"
|
||||
|
||||
run: ct lint --config ".github/ct-lint.yaml" --charts "${{ matrix.chart }}" || ct lint --config ".github/ct-lint.yaml" --charts "${{ matrix.chart }}"
|
||||
|
||||
# Summarize matrix https://github.community/t/status-check-for-a-matrix-jobs/127354/7
|
||||
lint_success:
|
||||
@@ -305,11 +305,22 @@ jobs:
|
||||
- generate-lint-matrix
|
||||
- lint-charts1
|
||||
- lint-charts2
|
||||
- lint-charts3
|
||||
- lint-charts4
|
||||
- lint-charts5
|
||||
- lint-charts6
|
||||
if: |
|
||||
always()
|
||||
name: Lint successful
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: Check lint matrix status
|
||||
if: ${{ ( (needs.generate-lint-matrix.outputs.detected1 == 'true') && (needs.lint-charts1.result != 'success') ) && ( (needs.generate-lint-matrix.outputs.detected2 == 'true') && ( (needs.lint-charts2.result != 'success') || ( needs.lint-charts2.result != 'skipped' ) ) ) && ( (needs.generate-lint-matrix.outputs.detected3 == 'true') && ( (needs.lint-charts2.result != 'success') || ( needs.lint-charts3.result != 'skipped' ) ) ) && ( (needs.generate-lint-matrix.outputs.detected4 == 'true') && ( (needs.lint-charts2.result != 'success') || ( needs.lint-charts4.result != 'skipped' ) ) ) && ( (needs.generate-lint-matrix.outputs.detected5 == 'true') && ( (needs.lint-charts2.result != 'success') || ( needs.lint-charts5.result != 'skipped' ) ) ) && ( (needs.generate-lint-matrix.outputs.detected6 == 'true') && ( (needs.lint-charts2.result != 'success') || ( needs.lint-charts6.result != 'skipped' ) ) ) }}
|
||||
if: ${{ ( (needs.generate-lint-matrix.outputs.detected1 == 'true') && (needs.lint-charts1.result != 'success') ) && ( (needs.generate-lint-matrix.outputs.detected2 == 'true') && ( (needs.lint-charts2.result != 'success') || ( needs.lint-charts2.result != 'skipped' ) ) ) && ( (needs.generate-lint-matrix.outputs.detected3 == 'true') && ( (needs.lint-charts3.result != 'success') || ( needs.lint-charts3.result != 'skipped' ) ) ) && ( (needs.generate-lint-matrix.outputs.detected4 == 'true') && ( (needs.lint-charts4.result != 'success') || ( needs.lint-charts4.result != 'skipped' ) ) ) && ( (needs.generate-lint-matrix.outputs.detected5 == 'true') && ( (needs.lint-charts5.result != 'success') || ( needs.lint-charts5.result != 'skipped' ) ) ) && ( (needs.generate-lint-matrix.outputs.detected6 == 'true') && ( (needs.lint-charts6.result != 'success') || ( needs.lint-charts6.result != 'skipped' ) ) ) }}
|
||||
run: exit 1
|
||||
|
||||
- uses: vishnudxb/cancel-workflow@c3c77eb4383ba7d023e6614a07d94fe990501ac6 # tag=v1.2
|
||||
if: failure()
|
||||
with:
|
||||
repo: truecharts/apps
|
||||
workflow_id: ${{ github.run_id }}
|
||||
access_token: ${{ github.token }}
|
||||
|
||||
@@ -14,11 +14,11 @@ jobs:
|
||||
release:
|
||||
runs-on: ubuntu-latest
|
||||
container:
|
||||
image: ghcr.io/truecharts/devcontainer:v2.2.1@sha256:4ace13c049bf00f85c63e0070f86b71656a7c3b2113aa3e21c3107f3d1f7bf87
|
||||
image: ghcr.io/truecharts/devcontainer:v2.4.0@sha256:395ee7ed8b9cba6569ddeba77b7ceb86fdb79b91a19c639625d7bc54cb1ccc1d
|
||||
concurrency: gitpush
|
||||
steps:
|
||||
- name: Install Kubernetes tools
|
||||
uses: yokawasa/action-setup-kube-tools@c81bf94cddd6c3172e6f61aa7f5ad66a2b5db98d # tag=v0.8.0
|
||||
uses: yokawasa/action-setup-kube-tools@f7f73d7965074b0f5491b7210ff51e3254d42058 # tag=v0.8.2
|
||||
with:
|
||||
setup-tools: |
|
||||
helmv3
|
||||
@@ -31,18 +31,16 @@ jobs:
|
||||
|
||||
- name: Prep Helm
|
||||
run: |
|
||||
helm repo add truecharts-old https://truecharts.org
|
||||
helm repo add truecharts https://charts.truecharts.org
|
||||
helm repo add truecharts-library https://library-charts.truecharts.org
|
||||
helm repo add bitnami https://charts.bitnami.com/bitnami
|
||||
helm repo add metallb https://metallb.github.io/metallb
|
||||
helm repo add grafana https://grafana.github.io/helm-charts
|
||||
helm repo add prometheus https://prometheus-community.github.io/helm-charts
|
||||
helm repo add amd-gpu-helm https://radeonopencompute.github.io/k8s-device-plugin/
|
||||
helm repo update
|
||||
|
||||
- name: Checkout
|
||||
uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846 # tag=v3
|
||||
uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
|
||||
with:
|
||||
token: ${{ secrets.BOT_TOKEN }}
|
||||
fetch-depth: 0
|
||||
@@ -60,7 +58,6 @@ jobs:
|
||||
parthreads=$(($(nproc) * 2))
|
||||
parallel -j ${parthreads} .github/scripts/gen-docs.sh '2>&1' ::: ${CHARTS[@]}
|
||||
|
||||
|
||||
- name: Fix Pre-Commit issues
|
||||
shell: bash
|
||||
if: |
|
||||
@@ -72,14 +69,14 @@ jobs:
|
||||
find . -name '*.sh' | xargs chmod +x
|
||||
|
||||
- name: Checkout
|
||||
uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846 # tag=v3
|
||||
uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
|
||||
if: |
|
||||
steps.collect-changes.outputs.changesDetectedAfterTag == 'true'
|
||||
with:
|
||||
fetch-depth: 1
|
||||
repository: truecharts/pub
|
||||
repository: truecharts/website
|
||||
token: ${{ secrets.BOT_TOKEN }}
|
||||
path: pub
|
||||
path: website
|
||||
|
||||
- name: Copy docs to website
|
||||
if: |
|
||||
@@ -88,6 +85,8 @@ jobs:
|
||||
run: |
|
||||
#!/bin/bash
|
||||
CHARTS=(${{ steps.collect-changes.outputs.modifiedChartsAfterTag }})
|
||||
echo "Removing Chart Docs prior to regeneration..."
|
||||
mkdir -p website/static/img/chart-icons || echo "chart-icons path already exists, continuing..."
|
||||
for i in "${CHARTS[@]}"
|
||||
do
|
||||
IFS='/' read -r -a chart_parts <<< "$i"
|
||||
@@ -95,13 +94,12 @@ jobs:
|
||||
train=${chart_parts[0]}
|
||||
chart=${chart_parts[1]}
|
||||
echo "copying docs to website for ${chart}"
|
||||
mkdir -p docs/apps/${train}/${chart} || echo "app path already exists, continuing..."
|
||||
yes | cp -rf charts/${train}/${chart}/README.md pub/website/apps/${train}/${chart}/index.md 2>/dev/null || :
|
||||
yes | cp -rf charts/${train}/${chart}/CHANGELOG.md pub/website/apps/${train}/${chart}/CHANGELOG.md 2>/dev/null || :
|
||||
yes | cp -rf charts/${train}/${chart}/security.md pub/website/apps/${train}/${chart}/security.md 2>/dev/null || :
|
||||
rm pub/website/apps/${train}/${chart}/LICENSE.md 2>/dev/null || :
|
||||
yes | cp -rf charts/${train}/${chart}/LICENSE pub/website/apps/${train}/${chart}/LICENSE.md 2>/dev/null || :
|
||||
sed -i '1s/^/# License<br>\n\n/' pub/website/apps/${train}/${chart}/LICENSE.md 2>/dev/null || :
|
||||
rm -rf website/docs/charts/*/${chart}
|
||||
mkdir -p website/docs/charts/${train}/${chart} || echo "chart path already exists, continuing..."
|
||||
yes | cp -rf charts/${train}/${chart}/README.md website/docs/charts/${train}/${chart}/index.md 2>/dev/null || :
|
||||
yes | cp -rf charts/${train}/${chart}/CHANGELOG.md website/docs/charts/${train}/${chart}/CHANGELOG.md 2>/dev/null || :
|
||||
yes | cp -rf charts/${train}/${chart}/docs/* website/docs/charts/${train}/${chart}/ 2>/dev/null || :
|
||||
yes | cp -rf charts/${train}/${chart}/icon.png website/static/img/chart-icons/${chart}.png 2>/dev/null || :
|
||||
fi
|
||||
done
|
||||
|
||||
@@ -109,7 +107,7 @@ jobs:
|
||||
id: create-commit
|
||||
if: |
|
||||
steps.collect-changes.outputs.changesDetectedAfterTag == 'true'
|
||||
uses: stefanzweifel/git-auto-commit-action@c4b132ec2c77a21fcab564bd3c92610cee84b894 # tag=v4
|
||||
uses: stefanzweifel/git-auto-commit-action@49620cd3ed21ee620a48530e81dba0d139c9cb80 # tag=v4
|
||||
with:
|
||||
file_pattern: charts/**/
|
||||
commit_message: "chore: Auto-update chart README [skip ci]"
|
||||
@@ -132,17 +130,17 @@ jobs:
|
||||
if: |
|
||||
steps.collect-changes.outputs.changesDetected == 'true'
|
||||
run: |
|
||||
cd pub
|
||||
cd website
|
||||
git config user.name "TrueCharts-Bot"
|
||||
git config user.email "[email protected]"
|
||||
git add --all
|
||||
git commit -sm "Commit released docs for TrueCharts" || exit 0
|
||||
git push
|
||||
cd -
|
||||
rm -rf pub
|
||||
rm -rf website
|
||||
|
||||
- name: Checkout
|
||||
uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846 # tag=v3
|
||||
uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
|
||||
if: |
|
||||
steps.collect-changes.outputs.changesDetectedAfterTag == 'true'
|
||||
with:
|
||||
@@ -152,7 +150,7 @@ jobs:
|
||||
path: catalog
|
||||
|
||||
- name: Checkout
|
||||
uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846 # tag=v3
|
||||
uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
|
||||
if: |
|
||||
steps.collect-changes.outputs.changesDetectedAfterTag == 'true'
|
||||
with:
|
||||
@@ -171,7 +169,6 @@ jobs:
|
||||
parthreads=$(($(nproc) * 2))
|
||||
parallel -j ${parthreads} .github/scripts/build-catalog.sh '2>&1' ::: ${CHARTS[@]}
|
||||
|
||||
|
||||
- name: Generate docker-hub Catalog
|
||||
shell: bash
|
||||
if: |
|
||||
@@ -191,7 +188,6 @@ jobs:
|
||||
echo "Starting Catalog Validation"
|
||||
/usr/local/bin/catalog_validate validate --path "${PWD}/catalog"
|
||||
|
||||
|
||||
- name: Commit Catalog
|
||||
if: |
|
||||
steps.collect-changes.outputs.changesDetected == 'true'
|
||||
@@ -200,7 +196,7 @@ jobs:
|
||||
git config user.name "TrueCharts-Bot"
|
||||
git config user.email "[email protected]"
|
||||
git add --all
|
||||
git commit -sm "Commit new App releases for TrueCharts" || exit 0
|
||||
git commit -sm "Commit new Chart releases for TrueCharts" || exit 0
|
||||
git push
|
||||
cd -
|
||||
rm -rf catalog
|
||||
@@ -213,13 +209,13 @@ jobs:
|
||||
git config user.name "TrueCharts-Bot"
|
||||
git config user.email "[email protected]"
|
||||
git add --all
|
||||
git commit -sm "Commit new App releases for TrueCharts" || exit 0
|
||||
git commit -sm "Commit new Chart releases for TrueCharts" || exit 0
|
||||
git push
|
||||
cd -
|
||||
rm -rf dh_catalog
|
||||
|
||||
- name: Checkout
|
||||
uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846 # tag=v3
|
||||
uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
|
||||
if: |
|
||||
steps.collect-changes.outputs.changesDetectedAfterTag == 'true'
|
||||
with:
|
||||
|
||||
@@ -16,13 +16,13 @@ jobs:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: Checkout
|
||||
uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846 # tag=v3
|
||||
uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
|
||||
with:
|
||||
fetch-depth: 0
|
||||
ref: ${{ inputs.checkoutCommit }}
|
||||
|
||||
- name: Install Kubernetes tools
|
||||
uses: yokawasa/action-setup-kube-tools@c81bf94cddd6c3172e6f61aa7f5ad66a2b5db98d # tag=v0.8.0
|
||||
uses: yokawasa/action-setup-kube-tools@f7f73d7965074b0f5491b7210ff51e3254d42058 # tag=v0.8.2
|
||||
with:
|
||||
setup-tools: |
|
||||
helmv3
|
||||
@@ -81,7 +81,7 @@ jobs:
|
||||
detected6: ${{ steps.list-changed.outputs.detected6 }}
|
||||
steps:
|
||||
- name: Checkout
|
||||
uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846 # tag=v3
|
||||
uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
|
||||
with:
|
||||
fetch-depth: 0
|
||||
ref: ${{ inputs.checkoutCommit }}
|
||||
@@ -97,18 +97,18 @@ jobs:
|
||||
CHARTS=$(ct list-changed --config .github/ct-install.yaml)
|
||||
CHARTS_JSON=$(echo "${CHARTS}" | jq -R -s -c 'split("\n")[:-1]')
|
||||
OUTPUT_JSON=$(echo "{\"excluded\": ${EXCLUDED}, \"all\": ${CHARTS_JSON}}" | jq -c '.all-.excluded')
|
||||
OUTPUT_JSON1=$(echo $OUTPUT_JSON | jq -r -c '.[:250]')
|
||||
OUTPUT_JSON2=$(echo $OUTPUT_JSON | jq -r -c '.[251:500]')
|
||||
OUTPUT_JSON3=$(echo $OUTPUT_JSON | jq -r -c '.[501:750]')
|
||||
OUTPUT_JSON4=$(echo $OUTPUT_JSON | jq -r -c '.[751:1000]')
|
||||
OUTPUT_JSON5=$(echo $OUTPUT_JSON | jq -r -c '.[1001:1250]')
|
||||
OUTPUT_JSON6=$(echo $OUTPUT_JSON | jq -r -c '.[1251:1500]')
|
||||
OUTPUT_JSON1=$((echo $OUTPUT_JSON | jq -r -c '.[:50]'; echo $OUTPUT_JSON | jq -r -c '.[301:350]'; echo $OUTPUT_JSON | jq -r -c '.[601:650]'; echo $OUTPUT_JSON | jq -r -c '.[901:950]'; echo $OUTPUT_JSON | jq -r -c '.[1201:1250]') | jq -s add)
|
||||
OUTPUT_JSON2=$((echo $OUTPUT_JSON | jq -r -c '.[51:100]'; echo $OUTPUT_JSON | jq -r -c '.[351:400]'; echo $OUTPUT_JSON | jq -r -c '.[651:700]'; echo $OUTPUT_JSON | jq -r -c '.[951:1000]'; echo $OUTPUT_JSON | jq -r -c '.[1251:1300]') | jq -s add)
|
||||
OUTPUT_JSON3=$((echo $OUTPUT_JSON | jq -r -c '.[101:150]'; echo $OUTPUT_JSON | jq -r -c '.[401:450]'; echo $OUTPUT_JSON | jq -r -c '.[701:750]'; echo $OUTPUT_JSON | jq -r -c '.[1001:1050]'; echo $OUTPUT_JSON | jq -r -c '.[1301:1350]') | jq -s add)
|
||||
OUTPUT_JSON4=$((echo $OUTPUT_JSON | jq -r -c '.[151:200]'; echo $OUTPUT_JSON | jq -r -c '.[451:500]'; echo $OUTPUT_JSON | jq -r -c '.[751:800]'; echo $OUTPUT_JSON | jq -r -c '.[1051:1100]'; echo $OUTPUT_JSON | jq -r -c '.[1351:1400]') | jq -s add)
|
||||
OUTPUT_JSON5=$((echo $OUTPUT_JSON | jq -r -c '.[201:250]'; echo $OUTPUT_JSON | jq -r -c '.[501:550]'; echo $OUTPUT_JSON | jq -r -c '.[801:850]'; echo $OUTPUT_JSON | jq -r -c '.[1101:1150]'; echo $OUTPUT_JSON | jq -r -c '.[1401:1450]') | jq -s add)
|
||||
OUTPUT_JSON6=$((echo $OUTPUT_JSON | jq -r -c '.[251:300]'; echo $OUTPUT_JSON | jq -r -c '.[551:600]'; echo $OUTPUT_JSON | jq -r -c '.[851:900]'; echo $OUTPUT_JSON | jq -r -c '.[1151:1200]'; echo $OUTPUT_JSON | jq -r -c '.[1451:1500]') | jq -s add)
|
||||
echo ::set-output name=charts1::${OUTPUT_JSON1}
|
||||
echo ::set-output name=charts2::${OUTPUT_JSON2}
|
||||
echo ::set-output name=charts2::${OUTPUT_JSON3}
|
||||
echo ::set-output name=charts2::${OUTPUT_JSON4}
|
||||
echo ::set-output name=charts2::${OUTPUT_JSON5}
|
||||
echo ::set-output name=charts2::${OUTPUT_JSON6}
|
||||
echo ::set-output name=charts3::${OUTPUT_JSON3}
|
||||
echo ::set-output name=charts4::${OUTPUT_JSON4}
|
||||
echo ::set-output name=charts5::${OUTPUT_JSON5}
|
||||
echo ::set-output name=charts6::${OUTPUT_JSON6}
|
||||
if [[ $(echo ${OUTPUT_JSON1} | jq -c '. | length') -gt 0 ]]; then
|
||||
echo "::set-output name=detected1::true"
|
||||
fi
|
||||
@@ -140,19 +140,19 @@ jobs:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: Checkout
|
||||
uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846 # tag=v3
|
||||
uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
|
||||
with:
|
||||
fetch-depth: 0
|
||||
ref: ${{ inputs.checkoutCommit }}
|
||||
|
||||
- name: Install Kubernetes tools
|
||||
uses: yokawasa/action-setup-kube-tools@c81bf94cddd6c3172e6f61aa7f5ad66a2b5db98d # tag=v0.8.0
|
||||
uses: yokawasa/action-setup-kube-tools@f7f73d7965074b0f5491b7210ff51e3254d42058 # tag=v0.8.2
|
||||
with:
|
||||
setup-tools: |
|
||||
helmv3
|
||||
helm: "3.8.0"
|
||||
|
||||
- uses: actions/setup-python@98f2ad02fd48d057ee3b4d4f66525b231c3e52b6 # tag=v3
|
||||
- uses: actions/setup-python@c4e89fac7e8767b327bbad6cb4d859eda999cf08 # tag=v4
|
||||
with:
|
||||
python-version: "3.10"
|
||||
|
||||
@@ -162,16 +162,12 @@ jobs:
|
||||
- name: Create k3d cluster
|
||||
uses: nolar/setup-k3d-k3s@v1
|
||||
with:
|
||||
version: v1.23
|
||||
|
||||
version: v1.24
|
||||
k3d-args: -p 31990-31999:31990-31999@server:0
|
||||
- name: Remove node taints
|
||||
run: |
|
||||
kubectl taint --all=true nodes node.cloudprovider.kubernetes.io/uninitialized- || true
|
||||
|
||||
- name: Remove node taints
|
||||
run: |
|
||||
sed -i 's/tccr.io/ghcr.io/g' ${{ matrix.chart }}/values.yaml
|
||||
|
||||
- name: Run chart-testing (install)
|
||||
run: ct install --config ".github/ct-install.yaml" --charts "${{ matrix.chart }}" --upgrade
|
||||
|
||||
@@ -187,19 +183,19 @@ jobs:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: Checkout
|
||||
uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846 # tag=v3
|
||||
uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
|
||||
with:
|
||||
fetch-depth: 0
|
||||
ref: ${{ inputs.checkoutCommit }}
|
||||
|
||||
- name: Install Kubernetes tools
|
||||
uses: yokawasa/action-setup-kube-tools@c81bf94cddd6c3172e6f61aa7f5ad66a2b5db98d # tag=v0.8.0
|
||||
uses: yokawasa/action-setup-kube-tools@f7f73d7965074b0f5491b7210ff51e3254d42058 # tag=v0.8.2
|
||||
with:
|
||||
setup-tools: |
|
||||
helmv3
|
||||
helm: "3.8.0"
|
||||
|
||||
- uses: actions/setup-python@98f2ad02fd48d057ee3b4d4f66525b231c3e52b6 # tag=v3
|
||||
- uses: actions/setup-python@c4e89fac7e8767b327bbad6cb4d859eda999cf08 # tag=v4
|
||||
with:
|
||||
python-version: "3.10"
|
||||
|
||||
@@ -209,20 +205,16 @@ jobs:
|
||||
- name: Create k3d cluster
|
||||
uses: nolar/setup-k3d-k3s@v1
|
||||
with:
|
||||
version: v1.23
|
||||
version: v1.24
|
||||
k3d-args: -p 31990-31999:31990-31999@server:0
|
||||
|
||||
- name: Remove node taints
|
||||
run: |
|
||||
kubectl taint --all=true nodes node.cloudprovider.kubernetes.io/uninitialized- || true
|
||||
|
||||
- name: Remove node taints
|
||||
run: |
|
||||
sed -i 's/tccr.io/ghcr.io/g' ${{ matrix.chart }}/values.yaml
|
||||
|
||||
- name: Run chart-testing (install)
|
||||
run: ct install --config ".github/ct-install.yaml" --charts "${{ matrix.chart }}" --upgrade
|
||||
|
||||
|
||||
install-charts3:
|
||||
needs:
|
||||
- generate-install-matrix
|
||||
@@ -235,19 +227,19 @@ jobs:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: Checkout
|
||||
uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846 # tag=v3
|
||||
uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
|
||||
with:
|
||||
fetch-depth: 0
|
||||
ref: ${{ inputs.checkoutCommit }}
|
||||
|
||||
- name: Install Kubernetes tools
|
||||
uses: yokawasa/action-setup-kube-tools@c81bf94cddd6c3172e6f61aa7f5ad66a2b5db98d # tag=v0.8.0
|
||||
uses: yokawasa/action-setup-kube-tools@f7f73d7965074b0f5491b7210ff51e3254d42058 # tag=v0.8.2
|
||||
with:
|
||||
setup-tools: |
|
||||
helmv3
|
||||
helm: "3.8.0"
|
||||
|
||||
- uses: actions/setup-python@98f2ad02fd48d057ee3b4d4f66525b231c3e52b6 # tag=v3
|
||||
- uses: actions/setup-python@c4e89fac7e8767b327bbad6cb4d859eda999cf08 # tag=v4
|
||||
with:
|
||||
python-version: "3.10"
|
||||
|
||||
@@ -257,16 +249,12 @@ jobs:
|
||||
- name: Create k3d cluster
|
||||
uses: nolar/setup-k3d-k3s@v1
|
||||
with:
|
||||
version: v1.23
|
||||
|
||||
version: v1.24
|
||||
k3d-args: -p 31990-31999:31990-31999@server:0
|
||||
- name: Remove node taints
|
||||
run: |
|
||||
kubectl taint --all=true nodes node.cloudprovider.kubernetes.io/uninitialized- || true
|
||||
|
||||
- name: Remove node taints
|
||||
run: |
|
||||
sed -i 's/tccr.io/ghcr.io/g' ${{ matrix.chart }}/values.yaml
|
||||
|
||||
- name: Run chart-testing (install)
|
||||
run: ct install --config ".github/ct-install.yaml" --charts "${{ matrix.chart }}" --upgrade
|
||||
|
||||
@@ -282,19 +270,19 @@ jobs:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: Checkout
|
||||
uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846 # tag=v3
|
||||
uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
|
||||
with:
|
||||
fetch-depth: 0
|
||||
ref: ${{ inputs.checkoutCommit }}
|
||||
|
||||
- name: Install Kubernetes tools
|
||||
uses: yokawasa/action-setup-kube-tools@c81bf94cddd6c3172e6f61aa7f5ad66a2b5db98d # tag=v0.8.0
|
||||
uses: yokawasa/action-setup-kube-tools@f7f73d7965074b0f5491b7210ff51e3254d42058 # tag=v0.8.2
|
||||
with:
|
||||
setup-tools: |
|
||||
helmv3
|
||||
helm: "3.8.0"
|
||||
|
||||
- uses: actions/setup-python@98f2ad02fd48d057ee3b4d4f66525b231c3e52b6 # tag=v3
|
||||
- uses: actions/setup-python@c4e89fac7e8767b327bbad6cb4d859eda999cf08 # tag=v4
|
||||
with:
|
||||
python-version: "3.10"
|
||||
|
||||
@@ -304,16 +292,12 @@ jobs:
|
||||
- name: Create k3d cluster
|
||||
uses: nolar/setup-k3d-k3s@v1
|
||||
with:
|
||||
version: v1.23
|
||||
|
||||
version: v1.24
|
||||
k3d-args: -p 31990-31999:31990-31999@server:0
|
||||
- name: Remove node taints
|
||||
run: |
|
||||
kubectl taint --all=true nodes node.cloudprovider.kubernetes.io/uninitialized- || true
|
||||
|
||||
- name: Remove node taints
|
||||
run: |
|
||||
sed -i 's/tccr.io/ghcr.io/g' ${{ matrix.chart }}/values.yaml
|
||||
|
||||
- name: Run chart-testing (install)
|
||||
run: ct install --config ".github/ct-install.yaml" --charts "${{ matrix.chart }}" --upgrade
|
||||
|
||||
@@ -329,19 +313,19 @@ jobs:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: Checkout
|
||||
uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846 # tag=v3
|
||||
uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
|
||||
with:
|
||||
fetch-depth: 0
|
||||
ref: ${{ inputs.checkoutCommit }}
|
||||
|
||||
- name: Install Kubernetes tools
|
||||
uses: yokawasa/action-setup-kube-tools@c81bf94cddd6c3172e6f61aa7f5ad66a2b5db98d # tag=v0.8.0
|
||||
uses: yokawasa/action-setup-kube-tools@f7f73d7965074b0f5491b7210ff51e3254d42058 # tag=v0.8.2
|
||||
with:
|
||||
setup-tools: |
|
||||
helmv3
|
||||
helm: "3.8.0"
|
||||
|
||||
- uses: actions/setup-python@98f2ad02fd48d057ee3b4d4f66525b231c3e52b6 # tag=v3
|
||||
- uses: actions/setup-python@c4e89fac7e8767b327bbad6cb4d859eda999cf08 # tag=v4
|
||||
with:
|
||||
python-version: "3.10"
|
||||
|
||||
@@ -351,16 +335,12 @@ jobs:
|
||||
- name: Create k3d cluster
|
||||
uses: nolar/setup-k3d-k3s@v1
|
||||
with:
|
||||
version: v1.23
|
||||
|
||||
version: v1.24
|
||||
k3d-args: -p 31990-31999:31990-31999@server:0
|
||||
- name: Remove node taints
|
||||
run: |
|
||||
kubectl taint --all=true nodes node.cloudprovider.kubernetes.io/uninitialized- || true
|
||||
|
||||
- name: Remove node taints
|
||||
run: |
|
||||
sed -i 's/tccr.io/ghcr.io/g' ${{ matrix.chart }}/values.yaml
|
||||
|
||||
- name: Run chart-testing (install)
|
||||
run: ct install --config ".github/ct-install.yaml" --charts "${{ matrix.chart }}" --upgrade
|
||||
|
||||
@@ -376,19 +356,19 @@ jobs:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: Checkout
|
||||
uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846 # tag=v3
|
||||
uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
|
||||
with:
|
||||
fetch-depth: 0
|
||||
ref: ${{ inputs.checkoutCommit }}
|
||||
|
||||
- name: Install Kubernetes tools
|
||||
uses: yokawasa/action-setup-kube-tools@c81bf94cddd6c3172e6f61aa7f5ad66a2b5db98d # tag=v0.8.0
|
||||
uses: yokawasa/action-setup-kube-tools@f7f73d7965074b0f5491b7210ff51e3254d42058 # tag=v0.8.2
|
||||
with:
|
||||
setup-tools: |
|
||||
helmv3
|
||||
helm: "3.8.0"
|
||||
|
||||
- uses: actions/setup-python@98f2ad02fd48d057ee3b4d4f66525b231c3e52b6 # tag=v3
|
||||
- uses: actions/setup-python@c4e89fac7e8767b327bbad6cb4d859eda999cf08 # tag=v4
|
||||
with:
|
||||
python-version: "3.10"
|
||||
|
||||
@@ -398,16 +378,12 @@ jobs:
|
||||
- name: Create k3d cluster
|
||||
uses: nolar/setup-k3d-k3s@v1
|
||||
with:
|
||||
version: v1.23
|
||||
|
||||
version: v1.24
|
||||
k3d-args: -p 31990-31999:31990-31999@server:0
|
||||
- name: Remove node taints
|
||||
run: |
|
||||
kubectl taint --all=true nodes node.cloudprovider.kubernetes.io/uninitialized- || true
|
||||
|
||||
- name: Remove node taints
|
||||
run: |
|
||||
sed -i 's/tccr.io/ghcr.io/g' ${{ matrix.chart }}/values.yaml
|
||||
|
||||
- name: Run chart-testing (install)
|
||||
run: ct install --config ".github/ct-install.yaml" --charts "${{ matrix.chart }}" --upgrade
|
||||
|
||||
@@ -417,11 +393,22 @@ jobs:
|
||||
- generate-install-matrix
|
||||
- install-charts1
|
||||
- install-charts2
|
||||
- install-charts3
|
||||
- install-charts4
|
||||
- install-charts5
|
||||
- install-charts6
|
||||
if: |
|
||||
always()
|
||||
name: Install successful
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: Check install matrix status
|
||||
if: ${{ ( (needs.generate-install-matrix.outputs.detected1 == 'true') && (needs.install-charts1.result != 'success') ) && ( (needs.generate-install-matrix.outputs.detected2 == 'true') && ( (needs.install-charts2.result != 'success') || ( needs.install-charts2.result != 'skipped' ) ) ) && ( (needs.generate-install-matrix.outputs.detected3 == 'true') && ( (needs.install-charts2.result != 'success') || ( needs.install-charts3.result != 'skipped' ) ) ) && ( (needs.generate-install-matrix.outputs.detected4 == 'true') && ( (needs.install-charts2.result != 'success') || ( needs.install-charts4.result != 'skipped' ) ) ) && ( (needs.generate-install-matrix.outputs.detected5 == 'true') && ( (needs.install-charts2.result != 'success') || ( needs.install-charts5.result != 'skipped' ) ) ) && ( (needs.generate-install-matrix.outputs.detected6 == 'true') && ( (needs.install-charts2.result != 'success') || ( needs.install-charts6.result != 'skipped' ) ) ) }}
|
||||
if: ${{ ( (needs.generate-install-matrix.outputs.detected1 == 'true') && (needs.install-charts1.result != 'success') ) && ( (needs.generate-install-matrix.outputs.detected2 == 'true') && ( (needs.install-charts2.result != 'success') || ( needs.install-charts2.result != 'skipped' ) ) ) && ( (needs.generate-install-matrix.outputs.detected3 == 'true') && ( (needs.install-charts3.result != 'success') || ( needs.install-charts3.result != 'skipped' ) ) ) && ( (needs.generate-install-matrix.outputs.detected4 == 'true') && ( (needs.install-charts4.result != 'success') || ( needs.install-charts4.result != 'skipped' ) ) ) && ( (needs.generate-install-matrix.outputs.detected5 == 'true') && ( (needs.install-charts5.result != 'success') || ( needs.install-charts5.result != 'skipped' ) ) ) && ( (needs.generate-install-matrix.outputs.detected6 == 'true') && ( (needs.install-charts6.result != 'success') || ( needs.install-charts6.result != 'skipped' ) ) ) }}
|
||||
run: exit 1
|
||||
|
||||
- uses: vishnudxb/cancel-workflow@c3c77eb4383ba7d023e6614a07d94fe990501ac6 # tag=v1.2
|
||||
if: failure()
|
||||
with:
|
||||
repo: truecharts/apps
|
||||
workflow_id: ${{ github.run_id }}
|
||||
access_token: ${{ github.token }}
|
||||
|
||||
@@ -4,49 +4,46 @@ on:
|
||||
workflow_dispatch:
|
||||
push:
|
||||
branches:
|
||||
- master
|
||||
- master
|
||||
paths:
|
||||
- ".github/workflows/general.security-scan.yaml"
|
||||
- ".github/workflows/general.security-scan.yaml"
|
||||
schedule:
|
||||
- cron: "0 0 * * 0"
|
||||
|
||||
|
||||
jobs:
|
||||
directories: # Job that list subdirectories
|
||||
runs-on: ubuntu-latest
|
||||
outputs:
|
||||
dir: ${{ steps.set-dirs.outputs.dir }} # generate output name dir by using inner step output
|
||||
steps:
|
||||
- uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846 # tag=v3
|
||||
- uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
|
||||
with:
|
||||
token: ${{ secrets.BOT_TOKEN }}
|
||||
- id: set-dirs # Give it an id to handle to get step outputs in the outputs key above
|
||||
run: echo "::set-output name=dir::$({ ls -d containers/apps/*/ & ls -d containers/base/*/; } | tr '\n' '\0' | xargs -0 -n 1 basename | jq -R -s -c 'split("\n")[:-1]')"
|
||||
# Define step output named dir base on ls command transformed to JSON thanks to jq
|
||||
|
||||
|
||||
scan_files:
|
||||
name: Scan Files
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: Checkout
|
||||
uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846 # tag=v3
|
||||
- name: Checkout
|
||||
uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
|
||||
|
||||
- name: Run Trivy vulnerability scanner in repo mode
|
||||
uses: aquasecurity/trivy-action@master
|
||||
with:
|
||||
scan-type: 'fs'
|
||||
ignore-unfixed: true
|
||||
format: 'template'
|
||||
template: '@/contrib/sarif.tpl'
|
||||
output: 'trivy-repo-results.sarif'
|
||||
severity: 'CRITICAL'
|
||||
|
||||
- name: Upload Trivy scan results to GitHub Security tab
|
||||
uses: github/codeql-action/upload-sarif@v1
|
||||
with:
|
||||
sarif_file: 'trivy-repo-results.sarif'
|
||||
- name: Run Trivy vulnerability scanner in repo mode
|
||||
uses: aquasecurity/trivy-action@master
|
||||
with:
|
||||
scan-type: "fs"
|
||||
ignore-unfixed: true
|
||||
format: "template"
|
||||
template: "@/contrib/sarif.tpl"
|
||||
output: "trivy-repo-results.sarif"
|
||||
severity: "CRITICAL"
|
||||
|
||||
- name: Upload Trivy scan results to GitHub Security tab
|
||||
uses: github/codeql-action/upload-sarif@3e7e3b32d0fb8283594bb0a76cc60a00918b0969 # tag=v2
|
||||
with:
|
||||
sarif_file: "trivy-repo-results.sarif"
|
||||
|
||||
scan_containers:
|
||||
name: Scan Containers
|
||||
@@ -57,8 +54,8 @@ jobs:
|
||||
dir: ${{fromJson(needs.directories.outputs.dir)}} # List matrix strategy from directories dynamically
|
||||
fail-fast: false
|
||||
steps:
|
||||
- name: Container Security scan
|
||||
uses: Azure/container-scan@f9af925b897d8af5f7e0026b8bca9346261abc93 # tag=v0
|
||||
with:
|
||||
image-name: ghcr.io/${{ github.repository_owner }}/${{matrix.dir}}:latest
|
||||
severity-threshold: HIGH
|
||||
- name: Container Security scan
|
||||
uses: Azure/container-scan@f9af925b897d8af5f7e0026b8bca9346261abc93 # tag=v0
|
||||
with:
|
||||
image-name: ghcr.io/${{ github.repository_owner }}/${{matrix.dir}}:latest
|
||||
severity-threshold: HIGH
|
||||
|
||||
@@ -14,12 +14,12 @@ jobs:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: Checkout
|
||||
uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846 # tag=v3
|
||||
uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
|
||||
with:
|
||||
token: ${{ secrets.BOT_TOKEN }}
|
||||
|
||||
- name: Download workflow artifact
|
||||
uses: dawidd6/action-download-artifact@575b1e4167df67acf7e692af784566618b23c71e # tag=v2.17.0
|
||||
uses: dawidd6/action-download-artifact@6765a42d86407a3d532749069ac03705ad82ebc6 # tag=v2.21.1
|
||||
with:
|
||||
github_token: ${{ secrets.BOT_TOKEN }}
|
||||
workflow: pr-validate.yaml
|
||||
@@ -34,7 +34,7 @@ jobs:
|
||||
path: ./pr_metadata/pr_number.txt
|
||||
|
||||
- name: "Get workflow job status"
|
||||
uses: actions/github-script@9ac08808f993958e9de277fe43a64532a609130e # tag=v6
|
||||
uses: actions/github-script@7a5c598405937d486b0331594b5da2b14db670da # tag=v6
|
||||
id: get-workflow-jobs
|
||||
with:
|
||||
github-token: ${{ secrets.BOT_TOKEN }}
|
||||
|
||||
@@ -22,7 +22,7 @@ jobs:
|
||||
name: Label commenter
|
||||
runs-on: ubuntu-20.04
|
||||
steps:
|
||||
- uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846 # tag=v3
|
||||
- uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
|
||||
with:
|
||||
token: ${{ secrets.BOT_TOKEN }}
|
||||
ref: master
|
||||
|
||||
@@ -29,7 +29,7 @@ jobs:
|
||||
steps:
|
||||
- name: Get branch name
|
||||
id: branch-name
|
||||
uses: tj-actions/branch-names@9cd06d955f4184031cd71fbb1717ac268ade2ee0 # tag=v5.2
|
||||
uses: tj-actions/branch-names@b0f914ba0e7aa1e243b53df97447f71eb57da09a # tag=v5.4
|
||||
|
||||
- name: Save PR data to file
|
||||
env:
|
||||
@@ -38,7 +38,7 @@ jobs:
|
||||
echo $PR_NUMBER > pr_number.txt
|
||||
|
||||
- name: Store pr data in artifact
|
||||
uses: actions/upload-artifact@6673cd052c4cd6fcf4b4e6e60ea986c889389535 # tag=v3
|
||||
uses: actions/upload-artifact@3cea5372237819ed00197afe530f5a7ea3e805c8 # tag=v3
|
||||
with:
|
||||
name: pr_metadata
|
||||
path: ./pr_number.txt
|
||||
@@ -53,7 +53,7 @@ jobs:
|
||||
addedOrModifiedCharts: ${{ steps.collect-changes.outputs.addedOrModifiedCharts }}
|
||||
steps:
|
||||
- name: Checkout
|
||||
uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846 # tag=v3
|
||||
uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
|
||||
|
||||
- name: Collect changes
|
||||
id: collect-changes
|
||||
|
||||
@@ -40,7 +40,7 @@ jobs:
|
||||
uses: ./.github/workflows/charts-test.yaml
|
||||
needs:
|
||||
- pr-metadata
|
||||
# - charts-changelog
|
||||
# - charts-changelog
|
||||
- charts-lint
|
||||
with:
|
||||
checkoutCommit: ${{ needs.charts-changelog.outputs.commitHash }}
|
||||
@@ -51,7 +51,6 @@ jobs:
|
||||
needs:
|
||||
- pr-metadata
|
||||
# - charts-changelog
|
||||
- charts-lint
|
||||
with:
|
||||
checkoutCommit: ${{ needs.charts-changelog.outputs.commitHash }}
|
||||
chartChangesDetected: ${{ needs.pr-metadata.outputs.addedOrModified }}
|
||||
|
||||
@@ -8,10 +8,10 @@ jobs:
|
||||
runs-on: ubuntu-latest
|
||||
name: "prune old releases"
|
||||
steps:
|
||||
- name: Checkout
|
||||
uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846 # tag=v3
|
||||
with:
|
||||
fetch-depth: 0
|
||||
- uses: actions/delete-package-versions@a31a43afa6c2d3afdf8b5f1e311b2dc75585932e # tag=v3
|
||||
with:
|
||||
min-versions-to-keep: 200
|
||||
- name: Checkout
|
||||
uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
|
||||
with:
|
||||
fetch-depth: 0
|
||||
- uses: actions/delete-package-versions@a31a43afa6c2d3afdf8b5f1e311b2dc75585932e # tag=v3
|
||||
with:
|
||||
min-versions-to-keep: 200
|
||||
|
||||
@@ -3,21 +3,21 @@ name: "Renovate: Bump on Push"
|
||||
on:
|
||||
push:
|
||||
branches:
|
||||
- 'renovate/**'
|
||||
- "renovate/**"
|
||||
tags-ignore:
|
||||
- '**'
|
||||
- "**"
|
||||
|
||||
jobs:
|
||||
renovate-bump:
|
||||
name: Get changed Apps
|
||||
runs-on: ubuntu-20.04
|
||||
steps:
|
||||
- uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846 # tag=v3
|
||||
- uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
|
||||
name: Checkout
|
||||
with:
|
||||
fetch-depth: 0
|
||||
token: ${{ secrets.BOT_TOKEN }}
|
||||
- uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846 # tag=v3
|
||||
- uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
|
||||
name: Checkout
|
||||
with:
|
||||
fetch-depth: 0
|
||||
@@ -31,6 +31,7 @@ jobs:
|
||||
changed:
|
||||
- 'charts/stable/**'
|
||||
- 'charts/incubator/**'
|
||||
- 'charts/SCALE/**'
|
||||
- 'charts/library/**'
|
||||
- 'charts/dependency/**'
|
||||
- 'charts/core/**'
|
||||
@@ -40,42 +41,44 @@ jobs:
|
||||
run: echo '${{ toJson(steps.filter.outputs) }}' > changes.json
|
||||
- name: Bump
|
||||
run: |
|
||||
APPS=$(jq --raw-output '.changed_files | fromjson | .[] |= sub("(?<filepath>(?<first_directory>(?<root1>[\/]?)[^\/]+\/)(?<second_directory>(?<root2>[\/]?)[^\/]+\/)(?<third_directory>(?<root3>[\/]?)[^\/]+)(?<extra_paths>.+))"; "\(.third_directory)") | unique' changes.json | jq -r '.[]')
|
||||
echo "changed apps: ${APPS[*]}"
|
||||
for chart in ${APPS[*]}
|
||||
do
|
||||
if [[ "${chart}" == '.gitkee' ]]; then
|
||||
echo "Skipping..."
|
||||
return
|
||||
elif test -f "./charts/stable/${chart}/Chart.yaml"; then
|
||||
train="stable"
|
||||
elif test -f "./charts/incubator/${chart}/Chart.yaml"; then
|
||||
train="incubator"
|
||||
elif test -f "./charts/library/${chart}/Chart.yaml"; then
|
||||
train="library"
|
||||
elif test -f "./charts/dependency/${chart}/Chart.yaml"; then
|
||||
train="dependency"
|
||||
elif test -f "./charts/core/${chart}/Chart.yaml"; then
|
||||
train="core"
|
||||
elif test -f "./charts/games/${chart}/Chart.yaml"; then
|
||||
train="games"
|
||||
elif test -f "./charts/enterprise/${chart}/Chart.yaml"; then
|
||||
train="enterprise"
|
||||
else
|
||||
train="incubator"
|
||||
fi
|
||||
echo "Comparing versions for ${train}/${chart}"
|
||||
master=$(cat ./master/charts/${train}/${chart}/Chart.yaml | grep "^version")
|
||||
current=$(cat ./charts/${train}/${chart}/Chart.yaml | grep "^version")
|
||||
echo "master version: ${master}"
|
||||
echo "current version: ${current}"
|
||||
if [[ "${master}" != "${current}" ]]; then
|
||||
echo "Version does not have to be bumped"
|
||||
else
|
||||
echo "Bumping patch version for ${train}/${chart}"
|
||||
./tools/bump.sh patch ./charts/${train}/${chart}
|
||||
fi
|
||||
done
|
||||
APPS=$(jq --raw-output '.changed_files | fromjson | .[] |= sub("(?<filepath>(?<first_directory>(?<root1>[\/]?)[^\/]+\/)(?<second_directory>(?<root2>[\/]?)[^\/]+\/)(?<third_directory>(?<root3>[\/]?)[^\/]+)(?<extra_paths>.+))"; "\(.third_directory)") | unique' changes.json | jq -r '.[]')
|
||||
echo "changed apps: ${APPS[*]}"
|
||||
for chart in ${APPS[*]}
|
||||
do
|
||||
if [[ "${chart}" == '.gitkee' ]]; then
|
||||
echo "Skipping..."
|
||||
return
|
||||
elif test -f "./charts/stable/${chart}/Chart.yaml"; then
|
||||
train="stable"
|
||||
elif test -f "./charts/incubator/${chart}/Chart.yaml"; then
|
||||
train="incubator"
|
||||
elif test -f "./charts/SCALE/${chart}/Chart.yaml"; then
|
||||
train="SCALE"
|
||||
elif test -f "./charts/library/${chart}/Chart.yaml"; then
|
||||
train="library"
|
||||
elif test -f "./charts/dependency/${chart}/Chart.yaml"; then
|
||||
train="dependency"
|
||||
elif test -f "./charts/core/${chart}/Chart.yaml"; then
|
||||
train="core"
|
||||
elif test -f "./charts/games/${chart}/Chart.yaml"; then
|
||||
train="games"
|
||||
elif test -f "./charts/enterprise/${chart}/Chart.yaml"; then
|
||||
train="enterprise"
|
||||
else
|
||||
train="incubator"
|
||||
fi
|
||||
echo "Comparing versions for ${train}/${chart}"
|
||||
master=$(cat ./master/charts/${train}/${chart}/Chart.yaml | grep "^version")
|
||||
current=$(cat ./charts/${train}/${chart}/Chart.yaml | grep "^version")
|
||||
echo "master version: ${master}"
|
||||
echo "current version: ${current}"
|
||||
if [[ "${master}" != "${current}" ]]; then
|
||||
echo "Version does not have to be bumped"
|
||||
else
|
||||
echo "Bumping patch version for ${train}/${chart}"
|
||||
./tools/bump.sh patch ./charts/${train}/${chart}
|
||||
fi
|
||||
done
|
||||
- name: Cleanup
|
||||
run: |
|
||||
rm -rf changes.json
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
name: Renovate
|
||||
on:
|
||||
workflow_dispatch:
|
||||
schedule:
|
||||
- cron: "0 */6 * * *"
|
||||
jobs:
|
||||
renovate:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: Checkout
|
||||
uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3.0.2
|
||||
with:
|
||||
token: ${{ secrets.BOT_TOKEN }}
|
||||
- name: Self-hosted Renovate
|
||||
uses: renovatebot/github-action@2d254166f27dc0c201f167fae9e18ce0f767b909 # tag=v32.127.2
|
||||
with:
|
||||
configurationFile: .github/renovate-config.js
|
||||
token: ${{ secrets.BOT_TOKEN }}
|
||||
@@ -12,14 +12,14 @@ jobs:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: Checkout
|
||||
uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846 # tag=v3
|
||||
uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
|
||||
with:
|
||||
token: ${{ secrets.BOT_TOKEN }}
|
||||
|
||||
- name: Sync Labels
|
||||
uses: EndBug/label-sync@d682578e83bb20820aef1d1cda75aaa795f217ae # tag=v2
|
||||
uses: EndBug/label-sync@852ef5d7a242975b02f1832ad53dc45ca635c3e4 # tag=v2
|
||||
with:
|
||||
config-file: |
|
||||
https://raw.githubusercontent.com/truecharts/.github/main/.github/labels.yaml
|
||||
https://raw.githubusercontent.com/truecharts/.github/main/.github/labels.yaml
|
||||
token: "${{ secrets.BOT_TOKEN }}"
|
||||
delete-other-labels: true
|
||||
|
||||
+1
-1
@@ -52,4 +52,4 @@ chartsrepo/
|
||||
.cr-index/
|
||||
website/
|
||||
pub/
|
||||
docs/
|
||||
readme.md
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
# https://github.com/DavidAnson/markdownlint/blob/main/doc/Rules.md#md004
|
||||
# Use dash for "Unordered list style"
|
||||
MD004:
|
||||
style: dash
|
||||
|
||||
# https://github.com/DavidAnson/markdownlint/blob/main/doc/Rules.md#md013
|
||||
# Do not warn for Line length
|
||||
MD013:
|
||||
# We can lower this and wrap lines. Markdown does not care.
|
||||
line_length: 999
|
||||
|
||||
# https://github.com/DavidAnson/markdownlint/blob/main/doc/Rules.md#md033
|
||||
# Do not warn for "Inline HTML"
|
||||
MD033: false
|
||||
|
||||
# https://github.com/DavidAnson/markdownlint/blob/main/doc/Rules.md#md036
|
||||
# Do not warn for "Emphasis used instead of a heading"
|
||||
MD036: false
|
||||
+37
-18
@@ -1,21 +1,40 @@
|
||||
# See https://pre-commit.com for more information
|
||||
repos:
|
||||
- repo: https://github.com/Lucas-C/pre-commit-hooks
|
||||
rev: v1.1.10
|
||||
hooks:
|
||||
- id: remove-tabs
|
||||
- repo: https://github.com/Lucas-C/pre-commit-hooks
|
||||
rev: v1.1.10
|
||||
hooks:
|
||||
- id: remove-tabs
|
||||
|
||||
- repo: https://github.com/pre-commit/pre-commit-hooks
|
||||
rev: v4.0.1
|
||||
hooks:
|
||||
- id: trailing-whitespace
|
||||
- id: end-of-file-fixer
|
||||
- id: fix-byte-order-marker
|
||||
- id: mixed-line-ending
|
||||
- id: check-merge-conflict
|
||||
- id: check-case-conflict
|
||||
- id: check-executables-have-shebangs
|
||||
- id: check-docstring-first
|
||||
- id: check-symlinks
|
||||
- id: destroyed-symlinks
|
||||
- id: fix-byte-order-marker
|
||||
- repo: https://github.com/pre-commit/pre-commit-hooks
|
||||
rev: v4.0.1
|
||||
hooks:
|
||||
- id: trailing-whitespace # trims trailing whitespace.
|
||||
- id: end-of-file-fixer # ensures that a file is either empty, or ends with one newline.
|
||||
- id: fix-byte-order-marker
|
||||
- id: mixed-line-ending # replaces or checks mixed line ending.
|
||||
- id: check-merge-conflict # checks for files that contain merge conflict strings.
|
||||
- id: check-case-conflict # checks for files that would conflict in case-insensitive filesystems.
|
||||
- id: check-executables-have-shebangs # ensures that (non-binary) executables have a shebang.
|
||||
- id: check-shebang-scripts-are-executable # ensures that (non-binary) files with a shebang are executable.
|
||||
- id: check-docstring-first
|
||||
- id: check-symlinks
|
||||
- id: destroyed-symlinks
|
||||
- id: fix-byte-order-marker # removes utf-8 byte order marker.
|
||||
- id: requirements-txt-fixer # sorts entries in requirements.txt.
|
||||
- id: check-added-large-files # prevents giant files from being committed.
|
||||
- id: check-yaml # checks yaml files for parseable syntax.
|
||||
exclude: (templates\/.*|questions.yaml|chart_schema.yaml)
|
||||
- id: detect-private-key # detects the presence of private keys.
|
||||
|
||||
- repo: https://github.com/pre-commit/pygrep-hooks
|
||||
rev: v1.9.0
|
||||
hooks:
|
||||
- id: text-unicode-replacement-char
|
||||
- id: rst-backticks
|
||||
|
||||
- repo: https://github.com/pre-commit/mirrors-prettier
|
||||
rev: v2.5.1
|
||||
hooks:
|
||||
- id: prettier
|
||||
exclude: (templates\/.*|README.md|CHANGELOG.md|questions.yaml|devcontainer.json)
|
||||
files: \.(js|ts|jsx|tsx|css|less|html|json|markdown|md|yaml|yml)$
|
||||
|
||||
Vendored
+3
@@ -1,5 +1,8 @@
|
||||
{
|
||||
"recommendations": [
|
||||
"streetsidesoftware.code-spell-checker",
|
||||
"davidanson.vscode-markdownlint",
|
||||
"editorconfig.editorconfig",
|
||||
"ms-vscode-remote.remote-containers",
|
||||
"rebornix.ruby"
|
||||
]
|
||||
|
||||
Vendored
+2
-12
@@ -10,12 +10,7 @@
|
||||
"request": "launch",
|
||||
"cwd": "${workspaceRoot}",
|
||||
"program": "/usr/local/bin/bundle",
|
||||
"args": [
|
||||
"exec",
|
||||
"m",
|
||||
"-r",
|
||||
"${workspaceFolder}/tests"
|
||||
]
|
||||
"args": ["exec", "m", "-r", "${workspaceFolder}/tests"]
|
||||
},
|
||||
{
|
||||
"name": "Common UnitTest - active spec file only",
|
||||
@@ -23,12 +18,7 @@
|
||||
"request": "launch",
|
||||
"cwd": "${workspaceRoot}",
|
||||
"program": "/usr/local/bin/bundle",
|
||||
"args": [
|
||||
"exec",
|
||||
"m",
|
||||
"-r",
|
||||
"${relativeFile}"
|
||||
]
|
||||
"args": ["exec", "m", "-r", "${relativeFile}"]
|
||||
}
|
||||
]
|
||||
}
|
||||
|
||||
@@ -1,23 +0,0 @@
|
||||
# Patterns to ignore when building packages.
|
||||
# This supports shell glob matching, relative path matching, and
|
||||
# negation (prefixed with !). Only one pattern per line.
|
||||
.DS_Store
|
||||
# Common VCS dirs
|
||||
.git/
|
||||
.gitignore
|
||||
.bzr/
|
||||
.bzrignore
|
||||
.hg/
|
||||
.hgignore
|
||||
.svn/
|
||||
# Common backup files
|
||||
*.swp
|
||||
*.bak
|
||||
*.tmp
|
||||
*.orig
|
||||
*~
|
||||
# Various IDEs
|
||||
.project
|
||||
.idea/
|
||||
*.tmproj
|
||||
.vscode/
|
||||
@@ -1,18 +0,0 @@
|
||||
# Changelog<br>
|
||||
|
||||
|
||||
<a name="amd-gpu-plugin-0.0.3"></a>
|
||||
### [amd-gpu-plugin-0.0.3](https://github.com/truecharts/apps/compare/amd-gpu-plugin-0.0.2...amd-gpu-plugin-0.0.3) (2022-03-26)
|
||||
|
||||
#### Chore
|
||||
|
||||
* bump all apps to trigger ci
|
||||
|
||||
|
||||
|
||||
<a name="amd-gpu-plugin-0.0.2"></a>
|
||||
### [amd-gpu-plugin-0.0.2](https://github.com/truecharts/apps/compare/amd-gpu-plugin-0.0.1...amd-gpu-plugin-0.0.2) (2022-01-14)
|
||||
|
||||
#### Fix
|
||||
|
||||
* rerelease to catalog
|
||||
@@ -1,7 +0,0 @@
|
||||
# Configuration Options
|
||||
|
||||
##### Connecting to other apps
|
||||
If you need to connect this App to other Apps on TrueNAS SCALE, please refer to our [Linking Apps Internally](https://truecharts.org/manual/Quick-Start%20Guides/06-linking-apps/) quick-start guide.
|
||||
|
||||
##### Available config options
|
||||
In the future this page is going to contain an automated list of options available in the installation/edit UI.
|
||||
@@ -1,30 +0,0 @@
|
||||
apiVersion: v2
|
||||
appVersion: "upstream"
|
||||
deprecated: false
|
||||
description: A kubernetes plugin to add AMD GPU's to Pods
|
||||
home: https://github.com/truecharts/apps/tree/master/charts/stable/amd-gpu-plugin
|
||||
icon: https://truecharts.org/_static/img/appicons/amd-gpu-plugin.png
|
||||
keywords:
|
||||
- amd
|
||||
- gpu
|
||||
- plugin
|
||||
dependencies:
|
||||
- name: amd-gpu
|
||||
repository: https://radeonopencompute.github.io/k8s-device-plugin/
|
||||
version: 0.2.0
|
||||
kubeVersion: '>=1.16.0-0'
|
||||
maintainers:
|
||||
- email: [email protected]
|
||||
name: TrueCharts
|
||||
url: https://truecharts.org
|
||||
name: amd-gpu-plugin
|
||||
sources:
|
||||
- https://github.com/metallb/metallb
|
||||
- https://metallb.universe.tf
|
||||
type: application
|
||||
version: 0.0.3
|
||||
annotations:
|
||||
truecharts.org/catagories: |
|
||||
- core
|
||||
truecharts.org/SCALE-support: "true"
|
||||
truecharts.org/grade: U
|
||||
@@ -1,38 +0,0 @@
|
||||
# Introduction
|
||||
|
||||
A kubernetes plugin to add AMD GPU's to Pods
|
||||
|
||||
TrueCharts are designed to be installed as TrueNAS SCALE app only. We can not guarantee this charts works as a stand-alone helm installation.
|
||||
**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/apps/issues/new/choose)**
|
||||
|
||||
## Source Code
|
||||
|
||||
* <https://github.com/metallb/metallb>
|
||||
* <https://metallb.universe.tf>
|
||||
|
||||
## Requirements
|
||||
|
||||
Kubernetes: `>=1.16.0-0`
|
||||
|
||||
## Dependencies
|
||||
|
||||
| Repository | Name | Version |
|
||||
|------------|------|---------|
|
||||
| https://radeonopencompute.github.io/k8s-device-plugin/ | amd-gpu | 0.2.0 |
|
||||
|
||||
## Installing the Chart
|
||||
|
||||
To install this App on TrueNAS SCALE check our [Quick-Start Guide](https://truecharts.org/manual/Quick-Start%20Guides/02-Installing-an-App/).
|
||||
|
||||
## Upgrading, Rolling Back and Uninstalling the Chart
|
||||
|
||||
To upgrade, rollback or delete this App from TrueNAS SCALE check our [Quick-Start Guide](https://truecharts.org/manual/Quick-Start%20Guides/04-Upgrade-rollback-delete-an-App/).
|
||||
|
||||
## Support
|
||||
|
||||
- Please check our [quick-start guides](https://truecharts.org/manual/Quick-Start%20Guides/01-Adding-TrueCharts/) first.
|
||||
- See the [Wiki](https://truecharts.org)
|
||||
- Check our [Discord](https://discord.gg/tVsPTHWTtr)
|
||||
- Open a [issue](https://github.com/truecharts/apps/issues/new/choose)
|
||||
---
|
||||
All Rights Reserved - The TrueCharts Project
|
||||
@@ -1,18 +0,0 @@
|
||||
# Default Helm-Values
|
||||
|
||||
TrueCharts is primarily build to supply TrueNAS SCALE Apps.
|
||||
However, we also supply all Apps as standard Helm-Charts. In this document we aim to document the default values in our values.yaml file.
|
||||
|
||||
Most of our Apps also consume our "common" Helm Chart.
|
||||
If this is the case, this means that all values.yaml values are set to the common chart values.yaml by default. This values.yaml file will only contain values that deviate from the common chart.
|
||||
You will, however, be able to use all values referenced in the common chart here, besides the values listed in this document.
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| image.pullPolicy | string | `"IfNotPresent"` | |
|
||||
| image.repository | string | `"placeholder"` | |
|
||||
| image.tag | string | `"upstream"` | |
|
||||
|
||||
All Rights Reserved - The TrueCharts Project
|
||||
@@ -1,33 +0,0 @@
|
||||
# Include{groups}
|
||||
questions:
|
||||
# Include{global}
|
||||
|
||||
- variable: amd-gpu
|
||||
group: "App Configuration"
|
||||
label: ""
|
||||
schema:
|
||||
additional_attrs: true
|
||||
type: dict
|
||||
attrs:
|
||||
- variable: nfd
|
||||
label: "nfd"
|
||||
schema:
|
||||
additional_attrs: true
|
||||
type: dict
|
||||
attrs:
|
||||
- variable: enabled
|
||||
label: "enabled"
|
||||
schema:
|
||||
type: boolean
|
||||
default: false
|
||||
- variable: labeller
|
||||
label: "labeller"
|
||||
schema:
|
||||
additional_attrs: true
|
||||
type: dict
|
||||
attrs:
|
||||
- variable: enabled
|
||||
label: "enabled"
|
||||
schema:
|
||||
type: boolean
|
||||
default: false
|
||||
@@ -1,80 +0,0 @@
|
||||
---
|
||||
hide:
|
||||
- toc
|
||||
---
|
||||
|
||||
# Security Overview
|
||||
|
||||
<link href="https://truecharts.org/_static/trivy.css" type="text/css" rel="stylesheet" />
|
||||
|
||||
## Helm-Chart
|
||||
|
||||
##### Scan Results
|
||||
|
||||
#### Chart Object: amd-gpu-plugin/charts/amd-gpu/templates/deviceplugin-daemonset.yaml
|
||||
|
||||
|
||||
|
||||
| Type | Misconfiguration ID | Check | Severity | Explaination | Links |
|
||||
|:----------------|:------------------:|:-----------:|:------------------:|-----------------------------------------|-----------------------------------------|
|
||||
| Kubernetes Security Check | KSV011 | CPU not limited | LOW | <details><summary>Expand...</summary> Enforcing CPU limits prevents DoS via resource exhaustion. <br> <hr> <br> Container 'amd-gpu-dp-cntr' of DaemonSet 'amd-gpu-device-plugin-daemonset' should set 'resources.limits.cpu' </details>| <details><summary>Expand...</summary><a href="https://cloud.google.com/blog/products/containers-kubernetes/kubernetes-best-practices-resource-requests-and-limits">https://cloud.google.com/blog/products/containers-kubernetes/kubernetes-best-practices-resource-requests-and-limits</a><br><a href="https://avd.aquasec.com/appshield/ksv011">https://avd.aquasec.com/appshield/ksv011</a><br></details> |
|
||||
| Kubernetes Security Check | KSV012 | Runs as root user | MEDIUM | <details><summary>Expand...</summary> 'runAsNonRoot' forces the running image to run as a non-root user to ensure least privileges. <br> <hr> <br> Container 'amd-gpu-dp-cntr' of DaemonSet 'amd-gpu-device-plugin-daemonset' should set 'securityContext.runAsNonRoot' to true </details>| <details><summary>Expand...</summary><a href="https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted">https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted</a><br><a href="https://avd.aquasec.com/appshield/ksv012">https://avd.aquasec.com/appshield/ksv012</a><br></details> |
|
||||
| Kubernetes Security Check | KSV014 | Root file system is not read-only | LOW | <details><summary>Expand...</summary> An immutable root file system prevents applications from writing to their local disk. This can limit intrusions, as attackers will not be able to tamper with the file system or write foreign executables to disk. <br> <hr> <br> Container 'amd-gpu-dp-cntr' of DaemonSet 'amd-gpu-device-plugin-daemonset' should set 'securityContext.readOnlyRootFilesystem' to true </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-securitycontext-readonlyrootfilesystem-true/">https://kubesec.io/basics/containers-securitycontext-readonlyrootfilesystem-true/</a><br><a href="https://avd.aquasec.com/appshield/ksv014">https://avd.aquasec.com/appshield/ksv014</a><br></details> |
|
||||
| Kubernetes Security Check | KSV015 | CPU requests not specified | LOW | <details><summary>Expand...</summary> When containers have resource requests specified, the scheduler can make better decisions about which nodes to place pods on, and how to deal with resource contention. <br> <hr> <br> Container 'amd-gpu-dp-cntr' of DaemonSet 'amd-gpu-device-plugin-daemonset' should set 'resources.requests.cpu' </details>| <details><summary>Expand...</summary><a href="https://cloud.google.com/blog/products/containers-kubernetes/kubernetes-best-practices-resource-requests-and-limits">https://cloud.google.com/blog/products/containers-kubernetes/kubernetes-best-practices-resource-requests-and-limits</a><br><a href="https://avd.aquasec.com/appshield/ksv015">https://avd.aquasec.com/appshield/ksv015</a><br></details> |
|
||||
| Kubernetes Security Check | KSV016 | Memory requests not specified | LOW | <details><summary>Expand...</summary> When containers have memory requests specified, the scheduler can make better decisions about which nodes to place pods on, and how to deal with resource contention. <br> <hr> <br> Container 'amd-gpu-dp-cntr' of DaemonSet 'amd-gpu-device-plugin-daemonset' should set 'resources.requests.memory' </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-resources-limits-memory/">https://kubesec.io/basics/containers-resources-limits-memory/</a><br><a href="https://avd.aquasec.com/appshield/ksv016">https://avd.aquasec.com/appshield/ksv016</a><br></details> |
|
||||
| Kubernetes Security Check | KSV018 | Memory not limited | LOW | <details><summary>Expand...</summary> Enforcing memory limits prevents DoS via resource exhaustion. <br> <hr> <br> Container 'amd-gpu-dp-cntr' of DaemonSet 'amd-gpu-device-plugin-daemonset' should set 'resources.limits.memory' </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-resources-limits-memory/">https://kubesec.io/basics/containers-resources-limits-memory/</a><br><a href="https://avd.aquasec.com/appshield/ksv018">https://avd.aquasec.com/appshield/ksv018</a><br></details> |
|
||||
| Kubernetes Security Check | KSV020 | Runs with low user ID | MEDIUM | <details><summary>Expand...</summary> Force the container to run with user ID > 10000 to avoid conflicts with the host’s user table. <br> <hr> <br> Container 'amd-gpu-dp-cntr' of DaemonSet 'amd-gpu-device-plugin-daemonset' should set 'securityContext.runAsUser' > 10000 </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-securitycontext-runasuser/">https://kubesec.io/basics/containers-securitycontext-runasuser/</a><br><a href="https://avd.aquasec.com/appshield/ksv020">https://avd.aquasec.com/appshield/ksv020</a><br></details> |
|
||||
| Kubernetes Security Check | KSV021 | Runs with low group ID | MEDIUM | <details><summary>Expand...</summary> Force the container to run with group ID > 10000 to avoid conflicts with the host’s user table. <br> <hr> <br> Container 'amd-gpu-dp-cntr' of DaemonSet 'amd-gpu-device-plugin-daemonset' should set 'securityContext.runAsGroup' > 10000 </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-securitycontext-runasuser/">https://kubesec.io/basics/containers-securitycontext-runasuser/</a><br><a href="https://avd.aquasec.com/appshield/ksv021">https://avd.aquasec.com/appshield/ksv021</a><br></details> |
|
||||
| Kubernetes Security Check | KSV023 | hostPath volumes mounted | MEDIUM | <details><summary>Expand...</summary> HostPath volumes must be forbidden. <br> <hr> <br> DaemonSet 'amd-gpu-device-plugin-daemonset' should not set 'spec.template.volumes.hostPath' </details>| <details><summary>Expand...</summary><a href="https://kubernetes.io/docs/concepts/security/pod-security-standards/#baseline">https://kubernetes.io/docs/concepts/security/pod-security-standards/#baseline</a><br><a href="https://avd.aquasec.com/appshield/ksv023">https://avd.aquasec.com/appshield/ksv023</a><br></details> |
|
||||
|
||||
## Containers
|
||||
|
||||
##### Detected Containers
|
||||
|
||||
docker.io/rocm/k8s-device-plugin:1.18.0
|
||||
|
||||
##### Scan Results
|
||||
|
||||
|
||||
#### Container: docker.io/rocm/k8s-device-plugin:1.18.0 (alpine 3.13.5)
|
||||
|
||||
|
||||
**alpine**
|
||||
|
||||
|
||||
| Package | Vulnerability | Severity | Installed Version | Fixed Version | Links |
|
||||
|:----------------|:------------------:|:-----------:|:------------------:|:-------------:|-----------------------------------------|
|
||||
| apk-tools | CVE-2021-36159 | CRITICAL | 2.12.5-r0 | 2.12.6-r0 | <details><summary>Expand...</summary><a href="https://github.com/freebsd/freebsd-src/commits/main/lib/libfetch">https://github.com/freebsd/freebsd-src/commits/main/lib/libfetch</a><br><a href="https://gitlab.alpinelinux.org/alpine/apk-tools/-/issues/10749">https://gitlab.alpinelinux.org/alpine/apk-tools/-/issues/10749</a><br><a href="https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc@%3Cdev.kafka.apache.org%3E">https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc@%3Cdev.kafka.apache.org%3E</a><br><a href="https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc@%3Cusers.kafka.apache.org%3E">https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc@%3Cusers.kafka.apache.org%3E</a><br><a href="https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7@%3Cdev.kafka.apache.org%3E">https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7@%3Cdev.kafka.apache.org%3E</a><br><a href="https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7@%3Cusers.kafka.apache.org%3E">https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7@%3Cusers.kafka.apache.org%3E</a><br></details> |
|
||||
| busybox | CVE-2021-42378 | HIGH | 1.32.1-r6 | 1.32.1-r7 | <details><summary>Expand...</summary><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42378">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42378</a><br><a href="https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/">https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/</a><br><a href="https://security.netapp.com/advisory/ntap-20211223-0002/">https://security.netapp.com/advisory/ntap-20211223-0002/</a><br><a href="https://ubuntu.com/security/notices/USN-5179-1">https://ubuntu.com/security/notices/USN-5179-1</a><br></details> |
|
||||
| busybox | CVE-2021-42379 | HIGH | 1.32.1-r6 | 1.32.1-r7 | <details><summary>Expand...</summary><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42379">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42379</a><br><a href="https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/">https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/</a><br><a href="https://security.netapp.com/advisory/ntap-20211223-0002/">https://security.netapp.com/advisory/ntap-20211223-0002/</a><br><a href="https://ubuntu.com/security/notices/USN-5179-1">https://ubuntu.com/security/notices/USN-5179-1</a><br></details> |
|
||||
| busybox | CVE-2021-42380 | HIGH | 1.32.1-r6 | 1.32.1-r7 | <details><summary>Expand...</summary><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42380">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42380</a><br><a href="https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/">https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/</a><br><a href="https://security.netapp.com/advisory/ntap-20211223-0002/">https://security.netapp.com/advisory/ntap-20211223-0002/</a><br><a href="https://ubuntu.com/security/notices/USN-5179-1">https://ubuntu.com/security/notices/USN-5179-1</a><br></details> |
|
||||
| busybox | CVE-2021-42381 | HIGH | 1.32.1-r6 | 1.32.1-r7 | <details><summary>Expand...</summary><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42381">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42381</a><br><a href="https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/">https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/</a><br><a href="https://security.netapp.com/advisory/ntap-20211223-0002/">https://security.netapp.com/advisory/ntap-20211223-0002/</a><br><a href="https://ubuntu.com/security/notices/USN-5179-1">https://ubuntu.com/security/notices/USN-5179-1</a><br></details> |
|
||||
| busybox | CVE-2021-42382 | HIGH | 1.32.1-r6 | 1.32.1-r7 | <details><summary>Expand...</summary><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42382">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42382</a><br><a href="https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/">https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/</a><br><a href="https://security.netapp.com/advisory/ntap-20211223-0002/">https://security.netapp.com/advisory/ntap-20211223-0002/</a><br><a href="https://ubuntu.com/security/notices/USN-5179-1">https://ubuntu.com/security/notices/USN-5179-1</a><br></details> |
|
||||
| busybox | CVE-2021-42383 | HIGH | 1.32.1-r6 | 1.32.1-r7 | <details><summary>Expand...</summary><a href="https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/">https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/</a><br><a href="https://security.netapp.com/advisory/ntap-20211223-0002/">https://security.netapp.com/advisory/ntap-20211223-0002/</a><br></details> |
|
||||
| busybox | CVE-2021-42384 | HIGH | 1.32.1-r6 | 1.32.1-r7 | <details><summary>Expand...</summary><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42384">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42384</a><br><a href="https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/">https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/</a><br><a href="https://security.netapp.com/advisory/ntap-20211223-0002/">https://security.netapp.com/advisory/ntap-20211223-0002/</a><br><a href="https://ubuntu.com/security/notices/USN-5179-1">https://ubuntu.com/security/notices/USN-5179-1</a><br></details> |
|
||||
| busybox | CVE-2021-42385 | HIGH | 1.32.1-r6 | 1.32.1-r7 | <details><summary>Expand...</summary><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42385">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42385</a><br><a href="https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/">https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/</a><br><a href="https://security.netapp.com/advisory/ntap-20211223-0002/">https://security.netapp.com/advisory/ntap-20211223-0002/</a><br><a href="https://ubuntu.com/security/notices/USN-5179-1">https://ubuntu.com/security/notices/USN-5179-1</a><br></details> |
|
||||
| busybox | CVE-2021-42386 | HIGH | 1.32.1-r6 | 1.32.1-r7 | <details><summary>Expand...</summary><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42386">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42386</a><br><a href="https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/">https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/</a><br><a href="https://security.netapp.com/advisory/ntap-20211223-0002/">https://security.netapp.com/advisory/ntap-20211223-0002/</a><br><a href="https://ubuntu.com/security/notices/USN-5179-1">https://ubuntu.com/security/notices/USN-5179-1</a><br></details> |
|
||||
| busybox | CVE-2021-42374 | MEDIUM | 1.32.1-r6 | 1.32.1-r7 | <details><summary>Expand...</summary><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42374">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42374</a><br><a href="https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/">https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/</a><br><a href="https://security.netapp.com/advisory/ntap-20211223-0002/">https://security.netapp.com/advisory/ntap-20211223-0002/</a><br><a href="https://ubuntu.com/security/notices/USN-5179-1">https://ubuntu.com/security/notices/USN-5179-1</a><br></details> |
|
||||
| busybox | CVE-2021-42375 | MEDIUM | 1.32.1-r6 | 1.32.1-r7 | <details><summary>Expand...</summary><a href="https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/">https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/</a><br><a href="https://security.netapp.com/advisory/ntap-20211223-0002/">https://security.netapp.com/advisory/ntap-20211223-0002/</a><br></details> |
|
||||
| libcrypto1.1 | CVE-2021-3711 | CRITICAL | 1.1.1k-r0 | 1.1.1l-r0 | <details><summary>Expand...</summary><a href="http://www.openwall.com/lists/oss-security/2021/08/26/2">http://www.openwall.com/lists/oss-security/2021/08/26/2</a><br><a href="https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf">https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf</a><br><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3711">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3711</a><br><a href="https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=59f5e75f3bced8fc0e130d72a3f582cf7b480b46">https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=59f5e75f3bced8fc0e130d72a3f582cf7b480b46</a><br><a href="https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E">https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E</a><br><a href="https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E">https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E</a><br><a href="https://security.netapp.com/advisory/ntap-20210827-0010/">https://security.netapp.com/advisory/ntap-20210827-0010/</a><br><a href="https://security.netapp.com/advisory/ntap-20211022-0003/">https://security.netapp.com/advisory/ntap-20211022-0003/</a><br><a href="https://ubuntu.com/security/notices/USN-5051-1">https://ubuntu.com/security/notices/USN-5051-1</a><br><a href="https://www.debian.org/security/2021/dsa-4963">https://www.debian.org/security/2021/dsa-4963</a><br><a href="https://www.openssl.org/news/secadv/20210824.txt">https://www.openssl.org/news/secadv/20210824.txt</a><br><a href="https://www.oracle.com/security-alerts/cpujan2022.html">https://www.oracle.com/security-alerts/cpujan2022.html</a><br><a href="https://www.oracle.com/security-alerts/cpuoct2021.html">https://www.oracle.com/security-alerts/cpuoct2021.html</a><br><a href="https://www.tenable.com/security/tns-2021-16">https://www.tenable.com/security/tns-2021-16</a><br><a href="https://www.tenable.com/security/tns-2022-02">https://www.tenable.com/security/tns-2022-02</a><br></details> |
|
||||
| libcrypto1.1 | CVE-2021-3712 | HIGH | 1.1.1k-r0 | 1.1.1l-r0 | <details><summary>Expand...</summary><a href="http://www.openwall.com/lists/oss-security/2021/08/26/2">http://www.openwall.com/lists/oss-security/2021/08/26/2</a><br><a href="https://cert-portal.siemens.com/productcert/pdf/ssa-244969.pdf">https://cert-portal.siemens.com/productcert/pdf/ssa-244969.pdf</a><br><a href="https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf">https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf</a><br><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3712">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3712</a><br><a href="https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=94d23fcff9b2a7a8368dfe52214d5c2569882c11">https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=94d23fcff9b2a7a8368dfe52214d5c2569882c11</a><br><a href="https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ccb0a11145ee72b042d10593a64eaf9e8a55ec12">https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ccb0a11145ee72b042d10593a64eaf9e8a55ec12</a><br><a href="https://kc.mcafee.com/corporate/index?page=content&id=SB10366">https://kc.mcafee.com/corporate/index?page=content&id=SB10366</a><br><a href="https://linux.oracle.com/cve/CVE-2021-3712.html">https://linux.oracle.com/cve/CVE-2021-3712.html</a><br><a href="https://linux.oracle.com/errata/ELSA-2022-9023.html">https://linux.oracle.com/errata/ELSA-2022-9023.html</a><br><a href="https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E">https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E</a><br><a href="https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E">https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E</a><br><a href="https://lists.debian.org/debian-lts-announce/2021/09/msg00014.html">https://lists.debian.org/debian-lts-announce/2021/09/msg00014.html</a><br><a href="https://lists.debian.org/debian-lts-announce/2021/09/msg00021.html">https://lists.debian.org/debian-lts-announce/2021/09/msg00021.html</a><br><a href="https://security.netapp.com/advisory/ntap-20210827-0010/">https://security.netapp.com/advisory/ntap-20210827-0010/</a><br><a href="https://ubuntu.com/security/notices/USN-5051-1">https://ubuntu.com/security/notices/USN-5051-1</a><br><a href="https://ubuntu.com/security/notices/USN-5051-2">https://ubuntu.com/security/notices/USN-5051-2</a><br><a href="https://ubuntu.com/security/notices/USN-5051-3">https://ubuntu.com/security/notices/USN-5051-3</a><br><a href="https://ubuntu.com/security/notices/USN-5051-4 (regression only in trusty/esm)">https://ubuntu.com/security/notices/USN-5051-4 (regression only in trusty/esm)</a><br><a href="https://ubuntu.com/security/notices/USN-5088-1">https://ubuntu.com/security/notices/USN-5088-1</a><br><a href="https://www.debian.org/security/2021/dsa-4963">https://www.debian.org/security/2021/dsa-4963</a><br><a href="https://www.openssl.org/news/secadv/20210824.txt">https://www.openssl.org/news/secadv/20210824.txt</a><br><a href="https://www.oracle.com/security-alerts/cpujan2022.html">https://www.oracle.com/security-alerts/cpujan2022.html</a><br><a href="https://www.oracle.com/security-alerts/cpuoct2021.html">https://www.oracle.com/security-alerts/cpuoct2021.html</a><br><a href="https://www.tenable.com/security/tns-2021-16">https://www.tenable.com/security/tns-2021-16</a><br><a href="https://www.tenable.com/security/tns-2022-02">https://www.tenable.com/security/tns-2022-02</a><br></details> |
|
||||
| libcrypto1.1 | CVE-2022-0778 | HIGH | 1.1.1k-r0 | 1.1.1n-r0 | <details><summary>Expand...</summary><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778</a><br><a href="https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65">https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65</a><br><a href="https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83">https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83</a><br><a href="https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246">https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246</a><br><a href="https://linux.oracle.com/cve/CVE-2022-0778.html">https://linux.oracle.com/cve/CVE-2022-0778.html</a><br><a href="https://linux.oracle.com/errata/ELSA-2022-9246.html">https://linux.oracle.com/errata/ELSA-2022-9246.html</a><br><a href="https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html">https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html</a><br><a href="https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html">https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/</a><br><a href="https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002">https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002</a><br><a href="https://security.netapp.com/advisory/ntap-20220321-0002/">https://security.netapp.com/advisory/ntap-20220321-0002/</a><br><a href="https://ubuntu.com/security/notices/USN-5328-1">https://ubuntu.com/security/notices/USN-5328-1</a><br><a href="https://ubuntu.com/security/notices/USN-5328-2">https://ubuntu.com/security/notices/USN-5328-2</a><br><a href="https://www.debian.org/security/2022/dsa-5103">https://www.debian.org/security/2022/dsa-5103</a><br><a href="https://www.openssl.org/news/secadv/20220315.txt">https://www.openssl.org/news/secadv/20220315.txt</a><br></details> |
|
||||
| libssl1.1 | CVE-2021-3711 | CRITICAL | 1.1.1k-r0 | 1.1.1l-r0 | <details><summary>Expand...</summary><a href="http://www.openwall.com/lists/oss-security/2021/08/26/2">http://www.openwall.com/lists/oss-security/2021/08/26/2</a><br><a href="https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf">https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf</a><br><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3711">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3711</a><br><a href="https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=59f5e75f3bced8fc0e130d72a3f582cf7b480b46">https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=59f5e75f3bced8fc0e130d72a3f582cf7b480b46</a><br><a href="https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E">https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E</a><br><a href="https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E">https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E</a><br><a href="https://security.netapp.com/advisory/ntap-20210827-0010/">https://security.netapp.com/advisory/ntap-20210827-0010/</a><br><a href="https://security.netapp.com/advisory/ntap-20211022-0003/">https://security.netapp.com/advisory/ntap-20211022-0003/</a><br><a href="https://ubuntu.com/security/notices/USN-5051-1">https://ubuntu.com/security/notices/USN-5051-1</a><br><a href="https://www.debian.org/security/2021/dsa-4963">https://www.debian.org/security/2021/dsa-4963</a><br><a href="https://www.openssl.org/news/secadv/20210824.txt">https://www.openssl.org/news/secadv/20210824.txt</a><br><a href="https://www.oracle.com/security-alerts/cpujan2022.html">https://www.oracle.com/security-alerts/cpujan2022.html</a><br><a href="https://www.oracle.com/security-alerts/cpuoct2021.html">https://www.oracle.com/security-alerts/cpuoct2021.html</a><br><a href="https://www.tenable.com/security/tns-2021-16">https://www.tenable.com/security/tns-2021-16</a><br><a href="https://www.tenable.com/security/tns-2022-02">https://www.tenable.com/security/tns-2022-02</a><br></details> |
|
||||
| libssl1.1 | CVE-2021-3712 | HIGH | 1.1.1k-r0 | 1.1.1l-r0 | <details><summary>Expand...</summary><a href="http://www.openwall.com/lists/oss-security/2021/08/26/2">http://www.openwall.com/lists/oss-security/2021/08/26/2</a><br><a href="https://cert-portal.siemens.com/productcert/pdf/ssa-244969.pdf">https://cert-portal.siemens.com/productcert/pdf/ssa-244969.pdf</a><br><a href="https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf">https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf</a><br><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3712">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3712</a><br><a href="https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=94d23fcff9b2a7a8368dfe52214d5c2569882c11">https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=94d23fcff9b2a7a8368dfe52214d5c2569882c11</a><br><a href="https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ccb0a11145ee72b042d10593a64eaf9e8a55ec12">https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ccb0a11145ee72b042d10593a64eaf9e8a55ec12</a><br><a href="https://kc.mcafee.com/corporate/index?page=content&id=SB10366">https://kc.mcafee.com/corporate/index?page=content&id=SB10366</a><br><a href="https://linux.oracle.com/cve/CVE-2021-3712.html">https://linux.oracle.com/cve/CVE-2021-3712.html</a><br><a href="https://linux.oracle.com/errata/ELSA-2022-9023.html">https://linux.oracle.com/errata/ELSA-2022-9023.html</a><br><a href="https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E">https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E</a><br><a href="https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E">https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E</a><br><a href="https://lists.debian.org/debian-lts-announce/2021/09/msg00014.html">https://lists.debian.org/debian-lts-announce/2021/09/msg00014.html</a><br><a href="https://lists.debian.org/debian-lts-announce/2021/09/msg00021.html">https://lists.debian.org/debian-lts-announce/2021/09/msg00021.html</a><br><a href="https://security.netapp.com/advisory/ntap-20210827-0010/">https://security.netapp.com/advisory/ntap-20210827-0010/</a><br><a href="https://ubuntu.com/security/notices/USN-5051-1">https://ubuntu.com/security/notices/USN-5051-1</a><br><a href="https://ubuntu.com/security/notices/USN-5051-2">https://ubuntu.com/security/notices/USN-5051-2</a><br><a href="https://ubuntu.com/security/notices/USN-5051-3">https://ubuntu.com/security/notices/USN-5051-3</a><br><a href="https://ubuntu.com/security/notices/USN-5051-4 (regression only in trusty/esm)">https://ubuntu.com/security/notices/USN-5051-4 (regression only in trusty/esm)</a><br><a href="https://ubuntu.com/security/notices/USN-5088-1">https://ubuntu.com/security/notices/USN-5088-1</a><br><a href="https://www.debian.org/security/2021/dsa-4963">https://www.debian.org/security/2021/dsa-4963</a><br><a href="https://www.openssl.org/news/secadv/20210824.txt">https://www.openssl.org/news/secadv/20210824.txt</a><br><a href="https://www.oracle.com/security-alerts/cpujan2022.html">https://www.oracle.com/security-alerts/cpujan2022.html</a><br><a href="https://www.oracle.com/security-alerts/cpuoct2021.html">https://www.oracle.com/security-alerts/cpuoct2021.html</a><br><a href="https://www.tenable.com/security/tns-2021-16">https://www.tenable.com/security/tns-2021-16</a><br><a href="https://www.tenable.com/security/tns-2022-02">https://www.tenable.com/security/tns-2022-02</a><br></details> |
|
||||
| libssl1.1 | CVE-2022-0778 | HIGH | 1.1.1k-r0 | 1.1.1n-r0 | <details><summary>Expand...</summary><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778</a><br><a href="https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65">https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65</a><br><a href="https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83">https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83</a><br><a href="https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246">https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246</a><br><a href="https://linux.oracle.com/cve/CVE-2022-0778.html">https://linux.oracle.com/cve/CVE-2022-0778.html</a><br><a href="https://linux.oracle.com/errata/ELSA-2022-9246.html">https://linux.oracle.com/errata/ELSA-2022-9246.html</a><br><a href="https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html">https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html</a><br><a href="https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html">https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/</a><br><a href="https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002">https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002</a><br><a href="https://security.netapp.com/advisory/ntap-20220321-0002/">https://security.netapp.com/advisory/ntap-20220321-0002/</a><br><a href="https://ubuntu.com/security/notices/USN-5328-1">https://ubuntu.com/security/notices/USN-5328-1</a><br><a href="https://ubuntu.com/security/notices/USN-5328-2">https://ubuntu.com/security/notices/USN-5328-2</a><br><a href="https://www.debian.org/security/2022/dsa-5103">https://www.debian.org/security/2022/dsa-5103</a><br><a href="https://www.openssl.org/news/secadv/20220315.txt">https://www.openssl.org/news/secadv/20220315.txt</a><br></details> |
|
||||
| libxml2 | CVE-2021-3517 | HIGH | 2.9.10-r6 | 2.9.10-r7 | <details><summary>Expand...</summary><a href="https://bugzilla.redhat.com/show_bug.cgi?id=1954232">https://bugzilla.redhat.com/show_bug.cgi?id=1954232</a><br><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3517">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3517</a><br><a href="https://gitlab.gnome.org/GNOME/libxml2/-/commit/bf22713507fe1fc3a2c4b525cf0a88c2dc87a3a2">https://gitlab.gnome.org/GNOME/libxml2/-/commit/bf22713507fe1fc3a2c4b525cf0a88c2dc87a3a2</a><br><a href="https://gitlab.gnome.org/GNOME/libxml2/-/issues/235">https://gitlab.gnome.org/GNOME/libxml2/-/issues/235</a><br><a href="https://linux.oracle.com/cve/CVE-2021-3517.html">https://linux.oracle.com/cve/CVE-2021-3517.html</a><br><a href="https://linux.oracle.com/errata/ELSA-2021-2569.html">https://linux.oracle.com/errata/ELSA-2021-2569.html</a><br><a href="https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E">https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E</a><br><a href="https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E">https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E</a><br><a href="https://lists.debian.org/debian-lts-announce/2021/05/msg00008.html">https://lists.debian.org/debian-lts-announce/2021/05/msg00008.html</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BZOMV5J4PMZAORVT64BKLV6YIZAFDGX6/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BZOMV5J4PMZAORVT64BKLV6YIZAFDGX6/</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QVM4UJ3376I6ZVOYMHBNX4GY3NIV52WV/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QVM4UJ3376I6ZVOYMHBNX4GY3NIV52WV/</a><br><a href="https://security.gentoo.org/glsa/202107-05">https://security.gentoo.org/glsa/202107-05</a><br><a href="https://security.netapp.com/advisory/ntap-20210625-0002/">https://security.netapp.com/advisory/ntap-20210625-0002/</a><br><a href="https://security.netapp.com/advisory/ntap-20211022-0004/">https://security.netapp.com/advisory/ntap-20211022-0004/</a><br><a href="https://ubuntu.com/security/notices/USN-4991-1">https://ubuntu.com/security/notices/USN-4991-1</a><br><a href="https://www.oracle.com/security-alerts/cpujan2022.html">https://www.oracle.com/security-alerts/cpujan2022.html</a><br><a href="https://www.oracle.com/security-alerts/cpuoct2021.html">https://www.oracle.com/security-alerts/cpuoct2021.html</a><br></details> |
|
||||
| libxml2 | CVE-2021-3518 | HIGH | 2.9.10-r6 | 2.9.10-r7 | <details><summary>Expand...</summary><a href="http://seclists.org/fulldisclosure/2021/Jul/54">http://seclists.org/fulldisclosure/2021/Jul/54</a><br><a href="http://seclists.org/fulldisclosure/2021/Jul/55">http://seclists.org/fulldisclosure/2021/Jul/55</a><br><a href="http://seclists.org/fulldisclosure/2021/Jul/58">http://seclists.org/fulldisclosure/2021/Jul/58</a><br><a href="http://seclists.org/fulldisclosure/2021/Jul/59">http://seclists.org/fulldisclosure/2021/Jul/59</a><br><a href="https://bugzilla.redhat.com/show_bug.cgi?id=1954242">https://bugzilla.redhat.com/show_bug.cgi?id=1954242</a><br><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3518">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3518</a><br><a href="https://gitlab.gnome.org/GNOME/libxml2/-/commit/1098c30a040e72a4654968547f415be4e4c40fe7">https://gitlab.gnome.org/GNOME/libxml2/-/commit/1098c30a040e72a4654968547f415be4e4c40fe7</a><br><a href="https://gitlab.gnome.org/GNOME/libxml2/-/issues/237">https://gitlab.gnome.org/GNOME/libxml2/-/issues/237</a><br><a href="https://linux.oracle.com/cve/CVE-2021-3518.html">https://linux.oracle.com/cve/CVE-2021-3518.html</a><br><a href="https://linux.oracle.com/errata/ELSA-2021-2569.html">https://linux.oracle.com/errata/ELSA-2021-2569.html</a><br><a href="https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E">https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E</a><br><a href="https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E">https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E</a><br><a href="https://lists.debian.org/debian-lts-announce/2021/05/msg00008.html">https://lists.debian.org/debian-lts-announce/2021/05/msg00008.html</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BZOMV5J4PMZAORVT64BKLV6YIZAFDGX6/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BZOMV5J4PMZAORVT64BKLV6YIZAFDGX6/</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QVM4UJ3376I6ZVOYMHBNX4GY3NIV52WV/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QVM4UJ3376I6ZVOYMHBNX4GY3NIV52WV/</a><br><a href="https://security.gentoo.org/glsa/202107-05">https://security.gentoo.org/glsa/202107-05</a><br><a href="https://security.netapp.com/advisory/ntap-20210625-0002/">https://security.netapp.com/advisory/ntap-20210625-0002/</a><br><a href="https://support.apple.com/kb/HT212601">https://support.apple.com/kb/HT212601</a><br><a href="https://support.apple.com/kb/HT212602">https://support.apple.com/kb/HT212602</a><br><a href="https://support.apple.com/kb/HT212604">https://support.apple.com/kb/HT212604</a><br><a href="https://support.apple.com/kb/HT212605">https://support.apple.com/kb/HT212605</a><br><a href="https://ubuntu.com/security/notices/USN-4991-1">https://ubuntu.com/security/notices/USN-4991-1</a><br><a href="https://www.oracle.com/security-alerts/cpuoct2021.html">https://www.oracle.com/security-alerts/cpuoct2021.html</a><br></details> |
|
||||
| libxml2 | CVE-2022-23308 | HIGH | 2.9.10-r6 | 2.9.13-r0 | <details><summary>Expand...</summary><a href="https://access.redhat.com/security/cve/CVE-2022-23308">https://access.redhat.com/security/cve/CVE-2022-23308</a><br><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23308">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23308</a><br><a href="https://github.com/GNOME/libxml2/commit/652dd12a858989b14eed4e84e453059cd3ba340e">https://github.com/GNOME/libxml2/commit/652dd12a858989b14eed4e84e453059cd3ba340e</a><br><a href="https://gitlab.gnome.org/GNOME/libxml2/-/blob/v2.9.13/NEWS">https://gitlab.gnome.org/GNOME/libxml2/-/blob/v2.9.13/NEWS</a><br><a href="https://linux.oracle.com/cve/CVE-2022-23308.html">https://linux.oracle.com/cve/CVE-2022-23308.html</a><br><a href="https://linux.oracle.com/errata/ELSA-2022-0899.html">https://linux.oracle.com/errata/ELSA-2022-0899.html</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LA3MWWAYZADWJ5F6JOUBX65UZAMQB7RF/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LA3MWWAYZADWJ5F6JOUBX65UZAMQB7RF/</a><br><a href="https://ubuntu.com/security/notices/USN-5324-1">https://ubuntu.com/security/notices/USN-5324-1</a><br></details> |
|
||||
| libxml2 | CVE-2021-3537 | MEDIUM | 2.9.10-r6 | 2.9.10-r7 | <details><summary>Expand...</summary><a href="https://bugzilla.redhat.com/show_bug.cgi?id=1956522">https://bugzilla.redhat.com/show_bug.cgi?id=1956522</a><br><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3537">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3537</a><br><a href="https://gitlab.gnome.org/GNOME/libxml2/-/commit/babe75030c7f64a37826bb3342317134568bef61">https://gitlab.gnome.org/GNOME/libxml2/-/commit/babe75030c7f64a37826bb3342317134568bef61</a><br><a href="https://gitlab.gnome.org/GNOME/libxml2/-/issues/243">https://gitlab.gnome.org/GNOME/libxml2/-/issues/243</a><br><a href="https://gitlab.gnome.org/GNOME/libxml2/-/issues/244">https://gitlab.gnome.org/GNOME/libxml2/-/issues/244</a><br><a href="https://gitlab.gnome.org/GNOME/libxml2/-/issues/245">https://gitlab.gnome.org/GNOME/libxml2/-/issues/245</a><br><a href="https://linux.oracle.com/cve/CVE-2021-3537.html">https://linux.oracle.com/cve/CVE-2021-3537.html</a><br><a href="https://linux.oracle.com/errata/ELSA-2021-2569.html">https://linux.oracle.com/errata/ELSA-2021-2569.html</a><br><a href="https://lists.debian.org/debian-lts-announce/2021/05/msg00008.html">https://lists.debian.org/debian-lts-announce/2021/05/msg00008.html</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BZOMV5J4PMZAORVT64BKLV6YIZAFDGX6/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BZOMV5J4PMZAORVT64BKLV6YIZAFDGX6/</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QVM4UJ3376I6ZVOYMHBNX4GY3NIV52WV/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QVM4UJ3376I6ZVOYMHBNX4GY3NIV52WV/</a><br><a href="https://security.gentoo.org/glsa/202107-05">https://security.gentoo.org/glsa/202107-05</a><br><a href="https://security.netapp.com/advisory/ntap-20210625-0002/">https://security.netapp.com/advisory/ntap-20210625-0002/</a><br><a href="https://ubuntu.com/security/notices/USN-4991-1">https://ubuntu.com/security/notices/USN-4991-1</a><br><a href="https://www.oracle.com/security-alerts/cpuoct2021.html">https://www.oracle.com/security-alerts/cpuoct2021.html</a><br></details> |
|
||||
| libxml2 | CVE-2021-3541 | MEDIUM | 2.9.10-r6 | 2.9.11-r0 | <details><summary>Expand...</summary><a href="https://blog.hartwork.org/posts/cve-2021-3541-parameter-laughs-fixed-in-libxml2-2-9-11/">https://blog.hartwork.org/posts/cve-2021-3541-parameter-laughs-fixed-in-libxml2-2-9-11/</a><br><a href="https://bugzilla.redhat.com/show_bug.cgi?id=1950515">https://bugzilla.redhat.com/show_bug.cgi?id=1950515</a><br><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3541">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3541</a><br><a href="https://gitlab.gnome.org/GNOME/libxml2/-/commit/8598060bacada41a0eb09d95c97744ff4e428f8e">https://gitlab.gnome.org/GNOME/libxml2/-/commit/8598060bacada41a0eb09d95c97744ff4e428f8e</a><br><a href="https://gitlab.gnome.org/GNOME/libxml2/-/issues/228 (currently private)">https://gitlab.gnome.org/GNOME/libxml2/-/issues/228 (currently private)</a><br><a href="https://linux.oracle.com/cve/CVE-2021-3541.html">https://linux.oracle.com/cve/CVE-2021-3541.html</a><br><a href="https://linux.oracle.com/errata/ELSA-2021-2569.html">https://linux.oracle.com/errata/ELSA-2021-2569.html</a><br><a href="https://security.netapp.com/advisory/ntap-20210805-0007/">https://security.netapp.com/advisory/ntap-20210805-0007/</a><br><a href="https://ubuntu.com/security/notices/USN-4991-1">https://ubuntu.com/security/notices/USN-4991-1</a><br><a href="https://www.oracle.com/security-alerts/cpujan2022.html">https://www.oracle.com/security-alerts/cpujan2022.html</a><br></details> |
|
||||
| ssl_client | CVE-2021-42378 | HIGH | 1.32.1-r6 | 1.32.1-r7 | <details><summary>Expand...</summary><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42378">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42378</a><br><a href="https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/">https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/</a><br><a href="https://security.netapp.com/advisory/ntap-20211223-0002/">https://security.netapp.com/advisory/ntap-20211223-0002/</a><br><a href="https://ubuntu.com/security/notices/USN-5179-1">https://ubuntu.com/security/notices/USN-5179-1</a><br></details> |
|
||||
| ssl_client | CVE-2021-42379 | HIGH | 1.32.1-r6 | 1.32.1-r7 | <details><summary>Expand...</summary><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42379">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42379</a><br><a href="https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/">https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/</a><br><a href="https://security.netapp.com/advisory/ntap-20211223-0002/">https://security.netapp.com/advisory/ntap-20211223-0002/</a><br><a href="https://ubuntu.com/security/notices/USN-5179-1">https://ubuntu.com/security/notices/USN-5179-1</a><br></details> |
|
||||
| ssl_client | CVE-2021-42380 | HIGH | 1.32.1-r6 | 1.32.1-r7 | <details><summary>Expand...</summary><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42380">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42380</a><br><a href="https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/">https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/</a><br><a href="https://security.netapp.com/advisory/ntap-20211223-0002/">https://security.netapp.com/advisory/ntap-20211223-0002/</a><br><a href="https://ubuntu.com/security/notices/USN-5179-1">https://ubuntu.com/security/notices/USN-5179-1</a><br></details> |
|
||||
| ssl_client | CVE-2021-42381 | HIGH | 1.32.1-r6 | 1.32.1-r7 | <details><summary>Expand...</summary><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42381">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42381</a><br><a href="https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/">https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/</a><br><a href="https://security.netapp.com/advisory/ntap-20211223-0002/">https://security.netapp.com/advisory/ntap-20211223-0002/</a><br><a href="https://ubuntu.com/security/notices/USN-5179-1">https://ubuntu.com/security/notices/USN-5179-1</a><br></details> |
|
||||
| ssl_client | CVE-2021-42382 | HIGH | 1.32.1-r6 | 1.32.1-r7 | <details><summary>Expand...</summary><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42382">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42382</a><br><a href="https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/">https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/</a><br><a href="https://security.netapp.com/advisory/ntap-20211223-0002/">https://security.netapp.com/advisory/ntap-20211223-0002/</a><br><a href="https://ubuntu.com/security/notices/USN-5179-1">https://ubuntu.com/security/notices/USN-5179-1</a><br></details> |
|
||||
| ssl_client | CVE-2021-42383 | HIGH | 1.32.1-r6 | 1.32.1-r7 | <details><summary>Expand...</summary><a href="https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/">https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/</a><br><a href="https://security.netapp.com/advisory/ntap-20211223-0002/">https://security.netapp.com/advisory/ntap-20211223-0002/</a><br></details> |
|
||||
| ssl_client | CVE-2021-42384 | HIGH | 1.32.1-r6 | 1.32.1-r7 | <details><summary>Expand...</summary><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42384">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42384</a><br><a href="https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/">https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/</a><br><a href="https://security.netapp.com/advisory/ntap-20211223-0002/">https://security.netapp.com/advisory/ntap-20211223-0002/</a><br><a href="https://ubuntu.com/security/notices/USN-5179-1">https://ubuntu.com/security/notices/USN-5179-1</a><br></details> |
|
||||
| ssl_client | CVE-2021-42385 | HIGH | 1.32.1-r6 | 1.32.1-r7 | <details><summary>Expand...</summary><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42385">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42385</a><br><a href="https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/">https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/</a><br><a href="https://security.netapp.com/advisory/ntap-20211223-0002/">https://security.netapp.com/advisory/ntap-20211223-0002/</a><br><a href="https://ubuntu.com/security/notices/USN-5179-1">https://ubuntu.com/security/notices/USN-5179-1</a><br></details> |
|
||||
| ssl_client | CVE-2021-42386 | HIGH | 1.32.1-r6 | 1.32.1-r7 | <details><summary>Expand...</summary><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42386">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42386</a><br><a href="https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/">https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/</a><br><a href="https://security.netapp.com/advisory/ntap-20211223-0002/">https://security.netapp.com/advisory/ntap-20211223-0002/</a><br><a href="https://ubuntu.com/security/notices/USN-5179-1">https://ubuntu.com/security/notices/USN-5179-1</a><br></details> |
|
||||
| ssl_client | CVE-2021-42374 | MEDIUM | 1.32.1-r6 | 1.32.1-r7 | <details><summary>Expand...</summary><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42374">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42374</a><br><a href="https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/">https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/</a><br><a href="https://security.netapp.com/advisory/ntap-20211223-0002/">https://security.netapp.com/advisory/ntap-20211223-0002/</a><br><a href="https://ubuntu.com/security/notices/USN-5179-1">https://ubuntu.com/security/notices/USN-5179-1</a><br></details> |
|
||||
| ssl_client | CVE-2021-42375 | MEDIUM | 1.32.1-r6 | 1.32.1-r7 | <details><summary>Expand...</summary><a href="https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/">https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/</a><br><a href="https://security.netapp.com/advisory/ntap-20211223-0002/">https://security.netapp.com/advisory/ntap-20211223-0002/</a><br></details> |
|
||||
@@ -1,5 +0,0 @@
|
||||
image:
|
||||
repository: placeholder
|
||||
# defaults to appVersion
|
||||
tag: upstream
|
||||
pullPolicy: IfNotPresent
|
||||
@@ -1,24 +0,0 @@
|
||||
# Patterns to ignore when building packages.
|
||||
# This supports shell glob matching, relative path matching, and
|
||||
# negation (prefixed with !). Only one pattern per line.
|
||||
.DS_Store
|
||||
# Common VCS dirs
|
||||
.git/
|
||||
.gitignore
|
||||
.bzr/
|
||||
.bzrignore
|
||||
.hg/
|
||||
.hgignore
|
||||
.svn/
|
||||
# Common backup files
|
||||
*.swp
|
||||
*.bak
|
||||
*.tmp
|
||||
*~
|
||||
# Various IDEs
|
||||
.project
|
||||
.idea/
|
||||
*.tmproj
|
||||
.vscode/
|
||||
# OWNERS file for Kubernetes
|
||||
OWNERS
|
||||
@@ -1,194 +0,0 @@
|
||||
# Changelog<br>
|
||||
|
||||
|
||||
<a name="docker-compose-1.0.16"></a>
|
||||
### [docker-compose-1.0.16](https://github.com/truecharts/apps/compare/docker-compose-1.0.15...docker-compose-1.0.16) (2022-04-12)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#2480](https://github.com/truecharts/apps/issues/2480))
|
||||
|
||||
|
||||
|
||||
<a name="docker-compose-1.0.15"></a>
|
||||
### [docker-compose-1.0.15](https://github.com/truecharts/apps/compare/docker-compose-1.0.14...docker-compose-1.0.15) (2022-04-09)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update docker general non-major ([#2460](https://github.com/truecharts/apps/issues/2460))
|
||||
|
||||
|
||||
|
||||
<a name="docker-compose-1.0.14"></a>
|
||||
### [docker-compose-1.0.14](https://github.com/truecharts/apps/compare/docker-compose-1.0.13...docker-compose-1.0.14) (2022-04-03)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#2410](https://github.com/truecharts/apps/issues/2410))
|
||||
|
||||
|
||||
|
||||
<a name="docker-compose-1.0.13"></a>
|
||||
### [docker-compose-1.0.13](https://github.com/truecharts/apps/compare/docker-compose-1.0.12...docker-compose-1.0.13) (2022-03-31)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#2361](https://github.com/truecharts/apps/issues/2361))
|
||||
|
||||
|
||||
|
||||
<a name="docker-compose-1.0.12"></a>
|
||||
### [docker-compose-1.0.12](https://github.com/truecharts/apps/compare/docker-compose-1.0.11...docker-compose-1.0.12) (2022-03-30)
|
||||
|
||||
#### Chore
|
||||
|
||||
* Auto-update chart README [skip ci]
|
||||
* update helm general non-major helm releases ([#2354](https://github.com/truecharts/apps/issues/2354))
|
||||
|
||||
|
||||
|
||||
<a name="docker-compose-1.0.11"></a>
|
||||
### [docker-compose-1.0.11](https://github.com/truecharts/apps/compare/docker-compose-1.0.10...docker-compose-1.0.11) (2022-03-30)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update docker general non-major ([#2347](https://github.com/truecharts/apps/issues/2347))
|
||||
|
||||
|
||||
|
||||
<a name="docker-compose-1.0.10"></a>
|
||||
### [docker-compose-1.0.10](https://github.com/truecharts/apps/compare/docker-compose-1.0.9...docker-compose-1.0.10) (2022-03-30)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update docker general non-major ([#2338](https://github.com/truecharts/apps/issues/2338))
|
||||
|
||||
|
||||
|
||||
<a name="docker-compose-1.0.9"></a>
|
||||
### [docker-compose-1.0.9](https://github.com/truecharts/apps/compare/docker-compose-1.0.8...docker-compose-1.0.9) (2022-03-26)
|
||||
|
||||
#### Chore
|
||||
|
||||
* bump all apps to trigger ci
|
||||
|
||||
|
||||
|
||||
<a name="docker-compose-1.0.7"></a>
|
||||
### [docker-compose-1.0.7](https://github.com/truecharts/apps/compare/docker-compose-1.0.6...docker-compose-1.0.7) (2022-03-24)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update docker general non-major
|
||||
|
||||
|
||||
|
||||
<a name="docker-compose-1.0.4"></a>
|
||||
### [docker-compose-1.0.4](https://github.com/truecharts/apps/compare/docker-compose-1.0.3...docker-compose-1.0.4) (2022-03-17)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update docker general non-major ([#2198](https://github.com/truecharts/apps/issues/2198))
|
||||
* update docker general non-major ([#2196](https://github.com/truecharts/apps/issues/2196))
|
||||
|
||||
|
||||
|
||||
<a name="docker-compose-1.0.2"></a>
|
||||
### [docker-compose-1.0.2](https://github.com/truecharts/apps/compare/docker-compose-1.0.1...docker-compose-1.0.2) (2022-03-07)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#2111](https://github.com/truecharts/apps/issues/2111))
|
||||
* Remove `-icon` string from icon png's ([#2040](https://github.com/truecharts/apps/issues/2040))
|
||||
|
||||
|
||||
|
||||
<a name="docker-compose-1.0.1"></a>
|
||||
### [docker-compose-1.0.1](https://github.com/truecharts/apps/compare/docker-compose-1.0.0...docker-compose-1.0.1) (2022-03-06)
|
||||
|
||||
#### Chore
|
||||
|
||||
* move docker-compose to core after testing
|
||||
|
||||
|
||||
|
||||
<a name="docker-compose-1.0.0"></a>
|
||||
### [docker-compose-1.0.0](https://github.com/truecharts/apps/compare/docker-compose-0.0.8...docker-compose-1.0.0) (2022-03-03)
|
||||
|
||||
#### Chore
|
||||
|
||||
* remove fixed env from questions.yaml
|
||||
* update helm general major helm releases ([#2021](https://github.com/truecharts/apps/issues/2021))
|
||||
|
||||
#### Fix
|
||||
|
||||
* BREAKING CHANGE Move some env-vars outside of env section ([#2010](https://github.com/truecharts/apps/issues/2010))
|
||||
|
||||
|
||||
|
||||
<a name="docker-compose-0.0.8"></a>
|
||||
### [docker-compose-0.0.8](https://github.com/truecharts/apps/compare/docker-compose-0.0.7...docker-compose-0.0.8) (2022-03-02)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#1999](https://github.com/truecharts/apps/issues/1999))
|
||||
|
||||
|
||||
|
||||
<a name="docker-compose-0.0.7"></a>
|
||||
### [docker-compose-0.0.7](https://github.com/truecharts/apps/compare/docker-compose-0.0.6...docker-compose-0.0.7) (2022-02-25)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update common to test host-compose-disable
|
||||
|
||||
|
||||
|
||||
<a name="docker-compose-0.0.6"></a>
|
||||
### [docker-compose-0.0.6](https://github.com/truecharts/apps/compare/docker-compose-0.0.5...docker-compose-0.0.6) (2022-02-24)
|
||||
|
||||
#### Fix
|
||||
|
||||
* fix autoloading of docker-compose file
|
||||
|
||||
|
||||
|
||||
<a name="docker-compose-0.0.5"></a>
|
||||
### [docker-compose-0.0.5](https://github.com/truecharts/apps/compare/docker-compose-0.0.4...docker-compose-0.0.5) (2022-02-24)
|
||||
|
||||
#### Feat
|
||||
|
||||
* wait for docker to be running before loading docker-compose file ([#1960](https://github.com/truecharts/apps/issues/1960))
|
||||
|
||||
|
||||
|
||||
<a name="docker-compose-0.0.4"></a>
|
||||
### [docker-compose-0.0.4](https://github.com/truecharts/apps/compare/docker-compose-0.0.3...docker-compose-0.0.4) (2022-02-24)
|
||||
|
||||
|
||||
|
||||
<a name="docker-compose-0.0.3"></a>
|
||||
### [docker-compose-0.0.3](https://github.com/truecharts/apps/compare/docker-compose-0.0.2...docker-compose-0.0.3) (2022-02-24)
|
||||
|
||||
#### Feat
|
||||
|
||||
* Add autoloading for compose file ([#1958](https://github.com/truecharts/apps/issues/1958))
|
||||
|
||||
|
||||
|
||||
<a name="docker-compose-0.0.2"></a>
|
||||
### [docker-compose-0.0.2](https://github.com/truecharts/apps/compare/docker-compose-0.0.1...docker-compose-0.0.2) (2022-02-24)
|
||||
|
||||
#### Chore
|
||||
|
||||
* rename `web_portal` to `open` ([#1957](https://github.com/truecharts/apps/issues/1957))
|
||||
* Update adding tc catalog ([#1956](https://github.com/truecharts/apps/issues/1956))
|
||||
|
||||
|
||||
|
||||
<a name="docker-compose-0.0.1"></a>
|
||||
### docker-compose-0.0.1 (2022-02-24)
|
||||
|
||||
#### Feat
|
||||
|
||||
* add a dedicated App for using Docker-Compose ([#1954](https://github.com/truecharts/apps/issues/1954))
|
||||
@@ -1,7 +0,0 @@
|
||||
# Configuration Options
|
||||
|
||||
##### Connecting to other apps
|
||||
If you need to connect this App to other Apps on TrueNAS SCALE, please refer to our [Linking Apps Internally](https://truecharts.org/manual/Quick-Start%20Guides/06-linking-apps/) quick-start guide.
|
||||
|
||||
##### Available config options
|
||||
In the future this page is going to contain an automated list of options available in the installation/edit UI.
|
||||
@@ -1,28 +0,0 @@
|
||||
apiVersion: v2
|
||||
appVersion: "20.10.14"
|
||||
dependencies:
|
||||
- name: common
|
||||
repository: https://library-charts.truecharts.org
|
||||
version: 9.2.8
|
||||
deprecated: false
|
||||
description: Dedicated App for using Docker-Compose on TrueNAS SCALE
|
||||
home: https://github.com/truecharts/apps/tree/master/charts/dev/docker-compose
|
||||
icon: https://truecharts.org/_static/img/appicons/docker-compose.png
|
||||
keywords:
|
||||
- docker-compose
|
||||
- docker
|
||||
kubeVersion: '>=1.16.0-0'
|
||||
maintainers:
|
||||
- email: [email protected]
|
||||
name: TrueCharts
|
||||
url: https://truecharts.org
|
||||
name: docker-compose
|
||||
sources:
|
||||
- https://hub.docker.com/_/docker
|
||||
type: application
|
||||
version: 1.0.16
|
||||
annotations:
|
||||
truecharts.org/catagories: |
|
||||
- docker
|
||||
truecharts.org/SCALE-support: "true"
|
||||
truecharts.org/grade: U
|
||||
@@ -1,37 +0,0 @@
|
||||
# Introduction
|
||||
|
||||
Dedicated App for using Docker-Compose on TrueNAS SCALE
|
||||
|
||||
TrueCharts are designed to be installed as TrueNAS SCALE app only. We can not guarantee this charts works as a stand-alone helm installation.
|
||||
**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/apps/issues/new/choose)**
|
||||
|
||||
## Source Code
|
||||
|
||||
* <https://hub.docker.com/_/docker>
|
||||
|
||||
## Requirements
|
||||
|
||||
Kubernetes: `>=1.16.0-0`
|
||||
|
||||
## Dependencies
|
||||
|
||||
| Repository | Name | Version |
|
||||
|------------|------|---------|
|
||||
| https://library-charts.truecharts.org | common | 9.2.8 |
|
||||
|
||||
## Installing the Chart
|
||||
|
||||
To install this App on TrueNAS SCALE check our [Quick-Start Guide](https://truecharts.org/manual/Quick-Start%20Guides/02-Installing-an-App/).
|
||||
|
||||
## Upgrading, Rolling Back and Uninstalling the Chart
|
||||
|
||||
To upgrade, rollback or delete this App from TrueNAS SCALE check our [Quick-Start Guide](https://truecharts.org/manual/Quick-Start%20Guides/04-Upgrade-rollback-delete-an-App/).
|
||||
|
||||
## Support
|
||||
|
||||
- Please check our [quick-start guides](https://truecharts.org/manual/Quick-Start%20Guides/01-Adding-TrueCharts/) first.
|
||||
- See the [Wiki](https://truecharts.org)
|
||||
- Check our [Discord](https://discord.gg/tVsPTHWTtr)
|
||||
- Open a [issue](https://github.com/truecharts/apps/issues/new/choose)
|
||||
---
|
||||
All Rights Reserved - The TrueCharts Project
|
||||
@@ -1,69 +0,0 @@
|
||||
# Default Helm-Values
|
||||
|
||||
TrueCharts is primarily build to supply TrueNAS SCALE Apps.
|
||||
However, we also supply all Apps as standard Helm-Charts. In this document we aim to document the default values in our values.yaml file.
|
||||
|
||||
Most of our Apps also consume our "common" Helm Chart.
|
||||
If this is the case, this means that all values.yaml values are set to the common chart values.yaml by default. This values.yaml file will only contain values that deviate from the common chart.
|
||||
You will, however, be able to use all values referenced in the common chart here, besides the values listed in this document.
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| controller.replicas | int | `1` | Number of desired pods |
|
||||
| controller.revisionHistoryLimit | int | `3` | ReplicaSet revision history limit |
|
||||
| controller.rollingUpdate.partition | string | `nil` | Set statefulset RollingUpdate partition |
|
||||
| controller.rollingUpdate.surge | string | `nil` | Set deployment RollingUpdate max surge |
|
||||
| controller.rollingUpdate.unavailable | int | `1` | Set deployment RollingUpdate max unavailable |
|
||||
| controller.strategy | string | `"RollingUpdate"` | Set the controller upgrade strategy For Deployments, valid values are Recreate (default) and RollingUpdate. For StatefulSets, valid values are OnDelete and RollingUpdate (default). DaemonSets ignore this. |
|
||||
| controller.type | string | `"statefulset"` | Set the controller type. Valid options are deployment, daemonset or statefulset |
|
||||
| env.COMPOSE_FILE | string | `""` | |
|
||||
| env.DOCKER_TLS_CERTDIR | string | `"/certs"` | |
|
||||
| hostNetwork | bool | `true` | |
|
||||
| image.pullPolicy | string | `"IfNotPresent"` | |
|
||||
| image.repository | string | `"tccr.io/truecharts/docker-in-docker"` | |
|
||||
| image.tag | string | `"v20.10.14@sha256:ca2ae5f57deebc1d83e5cc5f0121d3b9f50d6cde803ebffa579d150cb424e6a3"` | |
|
||||
| lifecycle.postStart.exec.command[0] | string | `"/bin/bash"` | |
|
||||
| lifecycle.postStart.exec.command[1] | string | `"-c"` | |
|
||||
| lifecycle.postStart.exec.command[2] | string | `"if [ \"${COMPOSE_FILE}\" ]; then\ncounter=0;\nwhile ! docker info > /dev/null 2>&1 && [[ ${counter} -lt 10 ]]; do\necho \"docker not running yet. Waiting...\" >> /proc/1/fd/1;\nsleep 5;\ncounter=$((counter+1));\ndone\ndocker-compose -f \"${COMPOSE_FILE}\" up -d && echo \"Loading COMPOSE_FILE at location ${COMPOSE_FILE}\" >> /proc/1/fd/1;\nelse\necho \"COMPOSE_FILE not set, not auto-loading compose-file\" >> /proc/1/fd/1;\nfi\n"` | |
|
||||
| persistence.cluster.enabled | bool | `true` | |
|
||||
| persistence.cluster.hostPath | string | `"/cluster"` | |
|
||||
| persistence.cluster.hostPathType | string | `""` | |
|
||||
| persistence.cluster.mountPath | string | `"/cluster"` | |
|
||||
| persistence.cluster.readOnly | bool | `false` | |
|
||||
| persistence.cluster.type | string | `"hostPath"` | |
|
||||
| persistence.docker-certs-ca.enabled | bool | `true` | |
|
||||
| persistence.docker-certs-ca.mountPath | string | `"/config"` | |
|
||||
| persistence.mnt.enabled | bool | `true` | |
|
||||
| persistence.mnt.hostPath | string | `"/mnt"` | |
|
||||
| persistence.mnt.hostPathType | string | `""` | |
|
||||
| persistence.mnt.mountPath | string | `"/mnt"` | |
|
||||
| persistence.mnt.readOnly | bool | `false` | |
|
||||
| persistence.mnt.type | string | `"hostPath"` | |
|
||||
| persistence.root.enabled | bool | `true` | |
|
||||
| persistence.root.hostPath | string | `"/root"` | |
|
||||
| persistence.root.hostPathType | string | `""` | |
|
||||
| persistence.root.mountPath | string | `"/root"` | |
|
||||
| persistence.root.readOnly | bool | `false` | |
|
||||
| persistence.root.type | string | `"hostPath"` | |
|
||||
| persistence.varrun.enabled | bool | `false` | |
|
||||
| podSecurityContext.fsGroup | int | `0` | |
|
||||
| podSecurityContext.runAsGroup | int | `0` | |
|
||||
| podSecurityContext.runAsUser | int | `0` | |
|
||||
| probes.liveness.spec.initialDelaySeconds | int | `30` | |
|
||||
| probes.readiness.spec.initialDelaySeconds | int | `30` | |
|
||||
| probes.startup.spec.initialDelaySeconds | int | `30` | |
|
||||
| securityContext.allowPrivilegeEscalation | bool | `true` | |
|
||||
| securityContext.privileged | bool | `true` | |
|
||||
| securityContext.readOnlyRootFilesystem | bool | `false` | |
|
||||
| securityContext.runAsNonRoot | bool | `false` | |
|
||||
| service.main.enabled | bool | `true` | |
|
||||
| service.main.ports.main.port | int | `2376` | |
|
||||
| service.main.ports.main.type | string | `"HTTPS"` | |
|
||||
| volumeClaimTemplates.docker-certs-client.enabled | bool | `true` | |
|
||||
| volumeClaimTemplates.docker-certs-client.mountPath | string | `"/certs/client"` | |
|
||||
| volumeClaimTemplates.docker.enabled | bool | `true` | |
|
||||
| volumeClaimTemplates.docker.mountPath | string | `"/var/lib/docker"` | |
|
||||
|
||||
All Rights Reserved - The TrueCharts Project
|
||||
@@ -1,166 +0,0 @@
|
||||
# Include{groups}
|
||||
portals: {}
|
||||
|
||||
questions:
|
||||
# Include{global}
|
||||
|
||||
- variable: controller
|
||||
group: "Controller"
|
||||
label: ""
|
||||
schema:
|
||||
additional_attrs: true
|
||||
type: dict
|
||||
attrs:
|
||||
- variable: advanced
|
||||
label: "Show Advanced Controller Settings"
|
||||
schema:
|
||||
type: boolean
|
||||
default: false
|
||||
show_subquestions_if: true
|
||||
subquestions:
|
||||
- variable: type
|
||||
description: "Please specify type of workload to deploy"
|
||||
label: "(Advanced) Controller Type"
|
||||
schema:
|
||||
type: string
|
||||
default: "statefulset"
|
||||
required: true
|
||||
enum:
|
||||
- value: "deployment"
|
||||
description: "Deployment"
|
||||
- value: "statefulset"
|
||||
description: "Statefulset"
|
||||
- value: "daemonset"
|
||||
description: "Daemonset"
|
||||
- variable: replicas
|
||||
description: "Number of desired pod replicas"
|
||||
label: "Desired Replicas"
|
||||
schema:
|
||||
type: int
|
||||
default: 1
|
||||
required: true
|
||||
- variable: strategy
|
||||
description: "Please specify type of workload to deploy"
|
||||
label: "(Advanced) Update Strategy"
|
||||
schema:
|
||||
type: string
|
||||
default: "RollingUpdate"
|
||||
required: true
|
||||
enum:
|
||||
- value: "Recreate"
|
||||
description: "Recreate: Kill existing pods before creating new ones"
|
||||
- value: "RollingUpdate"
|
||||
description: "RollingUpdate: Create new pods and then kill old ones"
|
||||
- value: "OnDelete"
|
||||
description: "(Legacy) OnDelete: ignore .spec.template changes"
|
||||
# Include{controllerExpert}
|
||||
|
||||
- variable: env
|
||||
group: "Container Configuration"
|
||||
label: "Image Environment"
|
||||
schema:
|
||||
additional_attrs: true
|
||||
type: dict
|
||||
attrs:
|
||||
- variable: COMPOSE_FILE
|
||||
label: "COMPOSE_FILE"
|
||||
description: "Path on the host of the composefile you want to load. Supported are paths inside /mnt, /root and /cluster"
|
||||
schema:
|
||||
type: string
|
||||
|
||||
# Include{containerConfig}
|
||||
|
||||
- variable: serviceexpert
|
||||
group: "Networking and Services"
|
||||
label: "Show Expert Config"
|
||||
schema:
|
||||
type: boolean
|
||||
default: false
|
||||
show_subquestions_if: true
|
||||
subquestions:
|
||||
- variable: hostNetwork
|
||||
group: "Networking and Services"
|
||||
label: "Host-Networking (Complicated)"
|
||||
schema:
|
||||
type: boolean
|
||||
default: true
|
||||
|
||||
# Include{serviceExpert}
|
||||
|
||||
# Include{serviceList}
|
||||
|
||||
# Include{persistenceList}
|
||||
|
||||
# Include{ingressList}
|
||||
|
||||
# Include{security}
|
||||
|
||||
- variable: advancedSecurity
|
||||
label: "Show Advanced Security Settings"
|
||||
group: "Security and Permissions"
|
||||
schema:
|
||||
type: boolean
|
||||
default: false
|
||||
show_subquestions_if: true
|
||||
subquestions:
|
||||
- variable: securityContext
|
||||
label: "Security Context"
|
||||
schema:
|
||||
additional_attrs: true
|
||||
type: dict
|
||||
attrs:
|
||||
- variable: privileged
|
||||
label: "Privileged mode"
|
||||
schema:
|
||||
type: boolean
|
||||
default: true
|
||||
- variable: readOnlyRootFilesystem
|
||||
label: "ReadOnly Root Filesystem"
|
||||
schema:
|
||||
type: boolean
|
||||
default: false
|
||||
- variable: allowPrivilegeEscalation
|
||||
label: "Allow Privilege Escalation"
|
||||
schema:
|
||||
type: boolean
|
||||
default: true
|
||||
- variable: runAsNonRoot
|
||||
label: "runAsNonRoot"
|
||||
schema:
|
||||
type: boolean
|
||||
default: false
|
||||
# Include{securityContextAdvanced}
|
||||
|
||||
- variable: podSecurityContext
|
||||
group: "Security and Permissions"
|
||||
label: "Pod Security Context"
|
||||
schema:
|
||||
additional_attrs: true
|
||||
type: dict
|
||||
attrs:
|
||||
- variable: runAsUser
|
||||
label: "runAsUser"
|
||||
description: "The UserID of the user running the application"
|
||||
schema:
|
||||
type: int
|
||||
default: 0
|
||||
- variable: runAsGroup
|
||||
label: "runAsGroup"
|
||||
description: The groupID this App of the user running the application"
|
||||
schema:
|
||||
type: int
|
||||
default: 0
|
||||
- variable: fsGroup
|
||||
label: "fsGroup"
|
||||
description: "The group that should own ALL storage."
|
||||
schema:
|
||||
type: int
|
||||
default: 0
|
||||
# Include{podSecurityContextAdvanced}
|
||||
|
||||
|
||||
# Include{resources}
|
||||
|
||||
# Include{advanced}
|
||||
|
||||
# Include{addons}
|
||||
@@ -1,93 +0,0 @@
|
||||
---
|
||||
hide:
|
||||
- toc
|
||||
---
|
||||
|
||||
# Security Overview
|
||||
|
||||
<link href="https://truecharts.org/_static/trivy.css" type="text/css" rel="stylesheet" />
|
||||
|
||||
## Helm-Chart
|
||||
|
||||
##### Scan Results
|
||||
|
||||
#### Chart Object: docker-compose/templates/common.yaml
|
||||
|
||||
|
||||
|
||||
| Type | Misconfiguration ID | Check | Severity | Explaination | Links |
|
||||
|:----------------|:------------------:|:-----------:|:------------------:|-----------------------------------------|-----------------------------------------|
|
||||
| Kubernetes Security Check | KSV001 | Process can elevate its own privileges | MEDIUM | <details><summary>Expand...</summary> A program inside the container can elevate its own privileges and run as root, which might give the program control over the container and node. <br> <hr> <br> Container 'RELEASE-NAME-docker-compose' of StatefulSet 'RELEASE-NAME-docker-compose' should set 'securityContext.allowPrivilegeEscalation' to false </details>| <details><summary>Expand...</summary><a href="https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted">https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted</a><br><a href="https://avd.aquasec.com/appshield/ksv001">https://avd.aquasec.com/appshield/ksv001</a><br></details> |
|
||||
| Kubernetes Security Check | KSV001 | Process can elevate its own privileges | MEDIUM | <details><summary>Expand...</summary> A program inside the container can elevate its own privileges and run as root, which might give the program control over the container and node. <br> <hr> <br> Container 'hostpatch' of StatefulSet 'RELEASE-NAME-docker-compose' should set 'securityContext.allowPrivilegeEscalation' to false </details>| <details><summary>Expand...</summary><a href="https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted">https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted</a><br><a href="https://avd.aquasec.com/appshield/ksv001">https://avd.aquasec.com/appshield/ksv001</a><br></details> |
|
||||
| Kubernetes Security Check | KSV003 | Default capabilities not dropped | LOW | <details><summary>Expand...</summary> The container should drop all default capabilities and add only those that are needed for its execution. <br> <hr> <br> Container 'RELEASE-NAME-docker-compose' of StatefulSet 'RELEASE-NAME-docker-compose' should add 'ALL' to 'securityContext.capabilities.drop' </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-securitycontext-capabilities-drop-index-all/">https://kubesec.io/basics/containers-securitycontext-capabilities-drop-index-all/</a><br><a href="https://avd.aquasec.com/appshield/ksv003">https://avd.aquasec.com/appshield/ksv003</a><br></details> |
|
||||
| Kubernetes Security Check | KSV003 | Default capabilities not dropped | LOW | <details><summary>Expand...</summary> The container should drop all default capabilities and add only those that are needed for its execution. <br> <hr> <br> Container 'hostpatch' of StatefulSet 'RELEASE-NAME-docker-compose' should add 'ALL' to 'securityContext.capabilities.drop' </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-securitycontext-capabilities-drop-index-all/">https://kubesec.io/basics/containers-securitycontext-capabilities-drop-index-all/</a><br><a href="https://avd.aquasec.com/appshield/ksv003">https://avd.aquasec.com/appshield/ksv003</a><br></details> |
|
||||
| Kubernetes Security Check | KSV009 | Access to host network | HIGH | <details><summary>Expand...</summary> Sharing the host’s network namespace permits processes in the pod to communicate with processes bound to the host’s loopback adapter. <br> <hr> <br> StatefulSet 'RELEASE-NAME-docker-compose' should not set 'spec.template.spec.hostNetwork' to true </details>| <details><summary>Expand...</summary><a href="https://kubernetes.io/docs/concepts/security/pod-security-standards/#baseline">https://kubernetes.io/docs/concepts/security/pod-security-standards/#baseline</a><br><a href="https://avd.aquasec.com/appshield/ksv009">https://avd.aquasec.com/appshield/ksv009</a><br></details> |
|
||||
| Kubernetes Security Check | KSV011 | CPU not limited | LOW | <details><summary>Expand...</summary> Enforcing CPU limits prevents DoS via resource exhaustion. <br> <hr> <br> Container 'hostpatch' of StatefulSet 'RELEASE-NAME-docker-compose' should set 'resources.limits.cpu' </details>| <details><summary>Expand...</summary><a href="https://cloud.google.com/blog/products/containers-kubernetes/kubernetes-best-practices-resource-requests-and-limits">https://cloud.google.com/blog/products/containers-kubernetes/kubernetes-best-practices-resource-requests-and-limits</a><br><a href="https://avd.aquasec.com/appshield/ksv011">https://avd.aquasec.com/appshield/ksv011</a><br></details> |
|
||||
| Kubernetes Security Check | KSV012 | Runs as root user | MEDIUM | <details><summary>Expand...</summary> 'runAsNonRoot' forces the running image to run as a non-root user to ensure least privileges. <br> <hr> <br> Container 'RELEASE-NAME-docker-compose' of StatefulSet 'RELEASE-NAME-docker-compose' should set 'securityContext.runAsNonRoot' to true </details>| <details><summary>Expand...</summary><a href="https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted">https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted</a><br><a href="https://avd.aquasec.com/appshield/ksv012">https://avd.aquasec.com/appshield/ksv012</a><br></details> |
|
||||
| Kubernetes Security Check | KSV012 | Runs as root user | MEDIUM | <details><summary>Expand...</summary> 'runAsNonRoot' forces the running image to run as a non-root user to ensure least privileges. <br> <hr> <br> Container 'autopermissions' of StatefulSet 'RELEASE-NAME-docker-compose' should set 'securityContext.runAsNonRoot' to true </details>| <details><summary>Expand...</summary><a href="https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted">https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted</a><br><a href="https://avd.aquasec.com/appshield/ksv012">https://avd.aquasec.com/appshield/ksv012</a><br></details> |
|
||||
| Kubernetes Security Check | KSV012 | Runs as root user | MEDIUM | <details><summary>Expand...</summary> 'runAsNonRoot' forces the running image to run as a non-root user to ensure least privileges. <br> <hr> <br> Container 'hostpatch' of StatefulSet 'RELEASE-NAME-docker-compose' should set 'securityContext.runAsNonRoot' to true </details>| <details><summary>Expand...</summary><a href="https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted">https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted</a><br><a href="https://avd.aquasec.com/appshield/ksv012">https://avd.aquasec.com/appshield/ksv012</a><br></details> |
|
||||
| Kubernetes Security Check | KSV014 | Root file system is not read-only | LOW | <details><summary>Expand...</summary> An immutable root file system prevents applications from writing to their local disk. This can limit intrusions, as attackers will not be able to tamper with the file system or write foreign executables to disk. <br> <hr> <br> Container 'RELEASE-NAME-docker-compose' of StatefulSet 'RELEASE-NAME-docker-compose' should set 'securityContext.readOnlyRootFilesystem' to true </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-securitycontext-readonlyrootfilesystem-true/">https://kubesec.io/basics/containers-securitycontext-readonlyrootfilesystem-true/</a><br><a href="https://avd.aquasec.com/appshield/ksv014">https://avd.aquasec.com/appshield/ksv014</a><br></details> |
|
||||
| Kubernetes Security Check | KSV014 | Root file system is not read-only | LOW | <details><summary>Expand...</summary> An immutable root file system prevents applications from writing to their local disk. This can limit intrusions, as attackers will not be able to tamper with the file system or write foreign executables to disk. <br> <hr> <br> Container 'autopermissions' of StatefulSet 'RELEASE-NAME-docker-compose' should set 'securityContext.readOnlyRootFilesystem' to true </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-securitycontext-readonlyrootfilesystem-true/">https://kubesec.io/basics/containers-securitycontext-readonlyrootfilesystem-true/</a><br><a href="https://avd.aquasec.com/appshield/ksv014">https://avd.aquasec.com/appshield/ksv014</a><br></details> |
|
||||
| Kubernetes Security Check | KSV014 | Root file system is not read-only | LOW | <details><summary>Expand...</summary> An immutable root file system prevents applications from writing to their local disk. This can limit intrusions, as attackers will not be able to tamper with the file system or write foreign executables to disk. <br> <hr> <br> Container 'hostpatch' of StatefulSet 'RELEASE-NAME-docker-compose' should set 'securityContext.readOnlyRootFilesystem' to true </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-securitycontext-readonlyrootfilesystem-true/">https://kubesec.io/basics/containers-securitycontext-readonlyrootfilesystem-true/</a><br><a href="https://avd.aquasec.com/appshield/ksv014">https://avd.aquasec.com/appshield/ksv014</a><br></details> |
|
||||
| Kubernetes Security Check | KSV015 | CPU requests not specified | LOW | <details><summary>Expand...</summary> When containers have resource requests specified, the scheduler can make better decisions about which nodes to place pods on, and how to deal with resource contention. <br> <hr> <br> Container 'hostpatch' of StatefulSet 'RELEASE-NAME-docker-compose' should set 'resources.requests.cpu' </details>| <details><summary>Expand...</summary><a href="https://cloud.google.com/blog/products/containers-kubernetes/kubernetes-best-practices-resource-requests-and-limits">https://cloud.google.com/blog/products/containers-kubernetes/kubernetes-best-practices-resource-requests-and-limits</a><br><a href="https://avd.aquasec.com/appshield/ksv015">https://avd.aquasec.com/appshield/ksv015</a><br></details> |
|
||||
| Kubernetes Security Check | KSV016 | Memory requests not specified | LOW | <details><summary>Expand...</summary> When containers have memory requests specified, the scheduler can make better decisions about which nodes to place pods on, and how to deal with resource contention. <br> <hr> <br> Container 'hostpatch' of StatefulSet 'RELEASE-NAME-docker-compose' should set 'resources.requests.memory' </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-resources-limits-memory/">https://kubesec.io/basics/containers-resources-limits-memory/</a><br><a href="https://avd.aquasec.com/appshield/ksv016">https://avd.aquasec.com/appshield/ksv016</a><br></details> |
|
||||
| Kubernetes Security Check | KSV017 | Privileged container | HIGH | <details><summary>Expand...</summary> Privileged containers share namespaces with the host system and do not offer any security. They should be used exclusively for system containers that require high privileges. <br> <hr> <br> Container 'RELEASE-NAME-docker-compose' of StatefulSet 'RELEASE-NAME-docker-compose' should set 'securityContext.privileged' to false </details>| <details><summary>Expand...</summary><a href="https://kubernetes.io/docs/concepts/security/pod-security-standards/#baseline">https://kubernetes.io/docs/concepts/security/pod-security-standards/#baseline</a><br><a href="https://avd.aquasec.com/appshield/ksv017">https://avd.aquasec.com/appshield/ksv017</a><br></details> |
|
||||
| Kubernetes Security Check | KSV017 | Privileged container | HIGH | <details><summary>Expand...</summary> Privileged containers share namespaces with the host system and do not offer any security. They should be used exclusively for system containers that require high privileges. <br> <hr> <br> Container 'hostpatch' of StatefulSet 'RELEASE-NAME-docker-compose' should set 'securityContext.privileged' to false </details>| <details><summary>Expand...</summary><a href="https://kubernetes.io/docs/concepts/security/pod-security-standards/#baseline">https://kubernetes.io/docs/concepts/security/pod-security-standards/#baseline</a><br><a href="https://avd.aquasec.com/appshield/ksv017">https://avd.aquasec.com/appshield/ksv017</a><br></details> |
|
||||
| Kubernetes Security Check | KSV018 | Memory not limited | LOW | <details><summary>Expand...</summary> Enforcing memory limits prevents DoS via resource exhaustion. <br> <hr> <br> Container 'hostpatch' of StatefulSet 'RELEASE-NAME-docker-compose' should set 'resources.limits.memory' </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-resources-limits-memory/">https://kubesec.io/basics/containers-resources-limits-memory/</a><br><a href="https://avd.aquasec.com/appshield/ksv018">https://avd.aquasec.com/appshield/ksv018</a><br></details> |
|
||||
| Kubernetes Security Check | KSV020 | Runs with low user ID | MEDIUM | <details><summary>Expand...</summary> Force the container to run with user ID > 10000 to avoid conflicts with the host’s user table. <br> <hr> <br> Container 'RELEASE-NAME-docker-compose' of StatefulSet 'RELEASE-NAME-docker-compose' should set 'securityContext.runAsUser' > 10000 </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-securitycontext-runasuser/">https://kubesec.io/basics/containers-securitycontext-runasuser/</a><br><a href="https://avd.aquasec.com/appshield/ksv020">https://avd.aquasec.com/appshield/ksv020</a><br></details> |
|
||||
| Kubernetes Security Check | KSV020 | Runs with low user ID | MEDIUM | <details><summary>Expand...</summary> Force the container to run with user ID > 10000 to avoid conflicts with the host’s user table. <br> <hr> <br> Container 'autopermissions' of StatefulSet 'RELEASE-NAME-docker-compose' should set 'securityContext.runAsUser' > 10000 </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-securitycontext-runasuser/">https://kubesec.io/basics/containers-securitycontext-runasuser/</a><br><a href="https://avd.aquasec.com/appshield/ksv020">https://avd.aquasec.com/appshield/ksv020</a><br></details> |
|
||||
| Kubernetes Security Check | KSV020 | Runs with low user ID | MEDIUM | <details><summary>Expand...</summary> Force the container to run with user ID > 10000 to avoid conflicts with the host’s user table. <br> <hr> <br> Container 'hostpatch' of StatefulSet 'RELEASE-NAME-docker-compose' should set 'securityContext.runAsUser' > 10000 </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-securitycontext-runasuser/">https://kubesec.io/basics/containers-securitycontext-runasuser/</a><br><a href="https://avd.aquasec.com/appshield/ksv020">https://avd.aquasec.com/appshield/ksv020</a><br></details> |
|
||||
| Kubernetes Security Check | KSV021 | Runs with low group ID | MEDIUM | <details><summary>Expand...</summary> Force the container to run with group ID > 10000 to avoid conflicts with the host’s user table. <br> <hr> <br> Container 'RELEASE-NAME-docker-compose' of StatefulSet 'RELEASE-NAME-docker-compose' should set 'securityContext.runAsGroup' > 10000 </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-securitycontext-runasuser/">https://kubesec.io/basics/containers-securitycontext-runasuser/</a><br><a href="https://avd.aquasec.com/appshield/ksv021">https://avd.aquasec.com/appshield/ksv021</a><br></details> |
|
||||
| Kubernetes Security Check | KSV021 | Runs with low group ID | MEDIUM | <details><summary>Expand...</summary> Force the container to run with group ID > 10000 to avoid conflicts with the host’s user table. <br> <hr> <br> Container 'autopermissions' of StatefulSet 'RELEASE-NAME-docker-compose' should set 'securityContext.runAsGroup' > 10000 </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-securitycontext-runasuser/">https://kubesec.io/basics/containers-securitycontext-runasuser/</a><br><a href="https://avd.aquasec.com/appshield/ksv021">https://avd.aquasec.com/appshield/ksv021</a><br></details> |
|
||||
| Kubernetes Security Check | KSV021 | Runs with low group ID | MEDIUM | <details><summary>Expand...</summary> Force the container to run with group ID > 10000 to avoid conflicts with the host’s user table. <br> <hr> <br> Container 'hostpatch' of StatefulSet 'RELEASE-NAME-docker-compose' should set 'securityContext.runAsGroup' > 10000 </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-securitycontext-runasuser/">https://kubesec.io/basics/containers-securitycontext-runasuser/</a><br><a href="https://avd.aquasec.com/appshield/ksv021">https://avd.aquasec.com/appshield/ksv021</a><br></details> |
|
||||
| Kubernetes Security Check | KSV022 | Non-default capabilities added | MEDIUM | <details><summary>Expand...</summary> Adding NET_RAW or capabilities beyond the default set must be disallowed. <br> <hr> <br> Container 'RELEASE-NAME-docker-compose' of StatefulSet 'RELEASE-NAME-docker-compose' should not set 'securityContext.capabilities.add' </details>| <details><summary>Expand...</summary><a href="https://kubernetes.io/docs/concepts/security/pod-security-standards/#baseline">https://kubernetes.io/docs/concepts/security/pod-security-standards/#baseline</a><br><a href="https://avd.aquasec.com/appshield/ksv022">https://avd.aquasec.com/appshield/ksv022</a><br></details> |
|
||||
| Kubernetes Security Check | KSV023 | hostPath volumes mounted | MEDIUM | <details><summary>Expand...</summary> HostPath volumes must be forbidden. <br> <hr> <br> StatefulSet 'RELEASE-NAME-docker-compose' should not set 'spec.template.volumes.hostPath' </details>| <details><summary>Expand...</summary><a href="https://kubernetes.io/docs/concepts/security/pod-security-standards/#baseline">https://kubernetes.io/docs/concepts/security/pod-security-standards/#baseline</a><br><a href="https://avd.aquasec.com/appshield/ksv023">https://avd.aquasec.com/appshield/ksv023</a><br></details> |
|
||||
| Kubernetes Security Check | KSV029 | A root primary or supplementary GID set | LOW | <details><summary>Expand...</summary> Containers should be forbidden from running with a root primary or supplementary GID. <br> <hr> <br> StatefulSet 'RELEASE-NAME-docker-compose' should set 'spec.securityContext.runAsGroup', 'spec.securityContext.supplementalGroups[*]' and 'spec.securityContext.fsGroup' to integer greater than 0 </details>| <details><summary>Expand...</summary><a href="https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted">https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted</a><br><a href="https://avd.aquasec.com/appshield/ksv029">https://avd.aquasec.com/appshield/ksv029</a><br></details> |
|
||||
|
||||
## Containers
|
||||
|
||||
##### Detected Containers
|
||||
|
||||
tccr.io/truecharts/alpine:v3.15.2@sha256:29ed3480a0ee43f7af681fed5d4fc215516abf1c41eade6938b26d8c9c2c7583
|
||||
tccr.io/truecharts/alpine:v3.15.2@sha256:29ed3480a0ee43f7af681fed5d4fc215516abf1c41eade6938b26d8c9c2c7583
|
||||
tccr.io/truecharts/docker-in-docker:v20.10.14@sha256:7ba99af4bdbea6b6cb39c8df207c43d72b53cb5eac6c4ac29e0dfe40ed368e3b
|
||||
|
||||
##### Scan Results
|
||||
|
||||
|
||||
#### Container: tccr.io/truecharts/alpine:v3.15.2@sha256:29ed3480a0ee43f7af681fed5d4fc215516abf1c41eade6938b26d8c9c2c7583 (alpine 3.15.2)
|
||||
|
||||
|
||||
**alpine**
|
||||
|
||||
|
||||
| Package | Vulnerability | Severity | Installed Version | Fixed Version | Links |
|
||||
|:----------------|:------------------:|:-----------:|:------------------:|:-------------:|-----------------------------------------|
|
||||
| busybox | CVE-2022-28391 | UNKNOWN | 1.34.1-r4 | 1.34.1-r5 | <details><summary>Expand...</summary><a href="https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch">https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch</a><br><a href="https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch">https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch</a><br><a href="https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661">https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661</a><br></details> |
|
||||
| ssl_client | CVE-2022-28391 | UNKNOWN | 1.34.1-r4 | 1.34.1-r5 | <details><summary>Expand...</summary><a href="https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch">https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch</a><br><a href="https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch">https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch</a><br><a href="https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661">https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661</a><br></details> |
|
||||
| zlib | CVE-2018-25032 | HIGH | 1.2.11-r3 | 1.2.12-r0 | <details><summary>Expand...</summary><a href="http://www.openwall.com/lists/oss-security/2022/03/25/2">http://www.openwall.com/lists/oss-security/2022/03/25/2</a><br><a href="http://www.openwall.com/lists/oss-security/2022/03/26/1">http://www.openwall.com/lists/oss-security/2022/03/26/1</a><br><a href="https://access.redhat.com/security/cve/CVE-2018-25032">https://access.redhat.com/security/cve/CVE-2018-25032</a><br><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25032">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25032</a><br><a href="https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531">https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531</a><br><a href="https://github.com/madler/zlib/compare/v1.2.11...v1.2.12">https://github.com/madler/zlib/compare/v1.2.11...v1.2.12</a><br><a href="https://github.com/madler/zlib/issues/605">https://github.com/madler/zlib/issues/605</a><br><a href="https://github.com/sparklemotion/nokogiri/releases/tag/v1.13.4">https://github.com/sparklemotion/nokogiri/releases/tag/v1.13.4</a><br><a href="https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-v6gp-9mmm-c6p5">https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-v6gp-9mmm-c6p5</a><br><a href="https://groups.google.com/g/ruby-security-ann/c/vX7qSjsvWis/m/TJWN4oOKBwAJ">https://groups.google.com/g/ruby-security-ann/c/vX7qSjsvWis/m/TJWN4oOKBwAJ</a><br><a href="https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html">https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html</a><br><a href="https://nvd.nist.gov/vuln/detail/CVE-2018-25032">https://nvd.nist.gov/vuln/detail/CVE-2018-25032</a><br><a href="https://ubuntu.com/security/notices/USN-5355-1">https://ubuntu.com/security/notices/USN-5355-1</a><br><a href="https://ubuntu.com/security/notices/USN-5355-2">https://ubuntu.com/security/notices/USN-5355-2</a><br><a href="https://ubuntu.com/security/notices/USN-5359-1">https://ubuntu.com/security/notices/USN-5359-1</a><br><a href="https://www.debian.org/security/2022/dsa-5111">https://www.debian.org/security/2022/dsa-5111</a><br><a href="https://www.openwall.com/lists/oss-security/2022/03/24/1">https://www.openwall.com/lists/oss-security/2022/03/24/1</a><br><a href="https://www.openwall.com/lists/oss-security/2022/03/28/1">https://www.openwall.com/lists/oss-security/2022/03/28/1</a><br><a href="https://www.openwall.com/lists/oss-security/2022/03/28/3">https://www.openwall.com/lists/oss-security/2022/03/28/3</a><br></details> |
|
||||
|
||||
|
||||
#### Container: tccr.io/truecharts/alpine:v3.15.2@sha256:29ed3480a0ee43f7af681fed5d4fc215516abf1c41eade6938b26d8c9c2c7583 (alpine 3.15.2)
|
||||
|
||||
|
||||
**alpine**
|
||||
|
||||
|
||||
| Package | Vulnerability | Severity | Installed Version | Fixed Version | Links |
|
||||
|:----------------|:------------------:|:-----------:|:------------------:|:-------------:|-----------------------------------------|
|
||||
| busybox | CVE-2022-28391 | UNKNOWN | 1.34.1-r4 | 1.34.1-r5 | <details><summary>Expand...</summary><a href="https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch">https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch</a><br><a href="https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch">https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch</a><br><a href="https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661">https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661</a><br></details> |
|
||||
| ssl_client | CVE-2022-28391 | UNKNOWN | 1.34.1-r4 | 1.34.1-r5 | <details><summary>Expand...</summary><a href="https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch">https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch</a><br><a href="https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch">https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch</a><br><a href="https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661">https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661</a><br></details> |
|
||||
| zlib | CVE-2018-25032 | HIGH | 1.2.11-r3 | 1.2.12-r0 | <details><summary>Expand...</summary><a href="http://www.openwall.com/lists/oss-security/2022/03/25/2">http://www.openwall.com/lists/oss-security/2022/03/25/2</a><br><a href="http://www.openwall.com/lists/oss-security/2022/03/26/1">http://www.openwall.com/lists/oss-security/2022/03/26/1</a><br><a href="https://access.redhat.com/security/cve/CVE-2018-25032">https://access.redhat.com/security/cve/CVE-2018-25032</a><br><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25032">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25032</a><br><a href="https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531">https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531</a><br><a href="https://github.com/madler/zlib/compare/v1.2.11...v1.2.12">https://github.com/madler/zlib/compare/v1.2.11...v1.2.12</a><br><a href="https://github.com/madler/zlib/issues/605">https://github.com/madler/zlib/issues/605</a><br><a href="https://github.com/sparklemotion/nokogiri/releases/tag/v1.13.4">https://github.com/sparklemotion/nokogiri/releases/tag/v1.13.4</a><br><a href="https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-v6gp-9mmm-c6p5">https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-v6gp-9mmm-c6p5</a><br><a href="https://groups.google.com/g/ruby-security-ann/c/vX7qSjsvWis/m/TJWN4oOKBwAJ">https://groups.google.com/g/ruby-security-ann/c/vX7qSjsvWis/m/TJWN4oOKBwAJ</a><br><a href="https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html">https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html</a><br><a href="https://nvd.nist.gov/vuln/detail/CVE-2018-25032">https://nvd.nist.gov/vuln/detail/CVE-2018-25032</a><br><a href="https://ubuntu.com/security/notices/USN-5355-1">https://ubuntu.com/security/notices/USN-5355-1</a><br><a href="https://ubuntu.com/security/notices/USN-5355-2">https://ubuntu.com/security/notices/USN-5355-2</a><br><a href="https://ubuntu.com/security/notices/USN-5359-1">https://ubuntu.com/security/notices/USN-5359-1</a><br><a href="https://www.debian.org/security/2022/dsa-5111">https://www.debian.org/security/2022/dsa-5111</a><br><a href="https://www.openwall.com/lists/oss-security/2022/03/24/1">https://www.openwall.com/lists/oss-security/2022/03/24/1</a><br><a href="https://www.openwall.com/lists/oss-security/2022/03/28/1">https://www.openwall.com/lists/oss-security/2022/03/28/1</a><br><a href="https://www.openwall.com/lists/oss-security/2022/03/28/3">https://www.openwall.com/lists/oss-security/2022/03/28/3</a><br></details> |
|
||||
|
||||
|
||||
#### Container: tccr.io/truecharts/docker-in-docker:v20.10.14@sha256:7ba99af4bdbea6b6cb39c8df207c43d72b53cb5eac6c4ac29e0dfe40ed368e3b (alpine 3.15.4)
|
||||
|
||||
|
||||
**alpine**
|
||||
|
||||
|
||||
| Package | Vulnerability | Severity | Installed Version | Fixed Version | Links |
|
||||
|:----------------|:------------------:|:-----------:|:------------------:|:-------------:|-----------------------------------------|
|
||||
| xz | CVE-2022-1271 | HIGH | 5.2.5-r0 | 5.2.5-r1 | <details><summary>Expand...</summary><a href="https://access.redhat.com/security/cve/CVE-2022-1271">https://access.redhat.com/security/cve/CVE-2022-1271</a><br><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1271">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1271</a><br><a href="https://lists.gnu.org/r/bug-gzip/2022-04/msg00011.html">https://lists.gnu.org/r/bug-gzip/2022-04/msg00011.html</a><br><a href="https://www.openwall.com/lists/oss-security/2022/04/07/8">https://www.openwall.com/lists/oss-security/2022/04/07/8</a><br></details> |
|
||||
| xz-libs | CVE-2022-1271 | HIGH | 5.2.5-r0 | 5.2.5-r1 | <details><summary>Expand...</summary><a href="https://access.redhat.com/security/cve/CVE-2022-1271">https://access.redhat.com/security/cve/CVE-2022-1271</a><br><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1271">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1271</a><br><a href="https://lists.gnu.org/r/bug-gzip/2022-04/msg00011.html">https://lists.gnu.org/r/bug-gzip/2022-04/msg00011.html</a><br><a href="https://www.openwall.com/lists/oss-security/2022/04/07/8">https://www.openwall.com/lists/oss-security/2022/04/07/8</a><br></details> |
|
||||
@@ -1,115 +0,0 @@
|
||||
image:
|
||||
repository: tccr.io/truecharts/docker-in-docker
|
||||
pullPolicy: IfNotPresent
|
||||
tag: v20.10.14@sha256:7ba99af4bdbea6b6cb39c8df207c43d72b53cb5eac6c4ac29e0dfe40ed368e3b
|
||||
|
||||
controller:
|
||||
# -- Set the controller type.
|
||||
# Valid options are deployment, daemonset or statefulset
|
||||
type: statefulset
|
||||
# -- Number of desired pods
|
||||
replicas: 1
|
||||
# -- Set the controller upgrade strategy
|
||||
# For Deployments, valid values are Recreate (default) and RollingUpdate.
|
||||
# For StatefulSets, valid values are OnDelete and RollingUpdate (default).
|
||||
# DaemonSets ignore this.
|
||||
strategy: RollingUpdate
|
||||
rollingUpdate:
|
||||
# -- Set deployment RollingUpdate max unavailable
|
||||
unavailable: 1
|
||||
# -- Set deployment RollingUpdate max surge
|
||||
surge:
|
||||
# -- Set statefulset RollingUpdate partition
|
||||
partition:
|
||||
# -- ReplicaSet revision history limit
|
||||
revisionHistoryLimit: 3
|
||||
|
||||
securityContext:
|
||||
privileged: true
|
||||
readOnlyRootFilesystem: false
|
||||
allowPrivilegeEscalation: true
|
||||
runAsNonRoot: false
|
||||
|
||||
podSecurityContext:
|
||||
runAsUser: 0
|
||||
runAsGroup: 0
|
||||
fsGroup: 0
|
||||
|
||||
hostNetwork: true
|
||||
|
||||
service:
|
||||
main:
|
||||
enabled: true
|
||||
ports:
|
||||
main:
|
||||
port: 2376
|
||||
type: HTTPS
|
||||
|
||||
env:
|
||||
DOCKER_TLS_CERTDIR: "/certs"
|
||||
COMPOSE_FILE: ""
|
||||
|
||||
lifecycle:
|
||||
postStart:
|
||||
exec:
|
||||
command:
|
||||
- "/bin/bash"
|
||||
- "-c"
|
||||
- |
|
||||
if [ "${COMPOSE_FILE}" ]; then
|
||||
counter=0;
|
||||
while ! docker info > /dev/null 2>&1 && [[ ${counter} -lt 10 ]]; do
|
||||
echo "docker not running yet. Waiting..." >> /proc/1/fd/1;
|
||||
sleep 5;
|
||||
counter=$((counter+1));
|
||||
done
|
||||
docker-compose -f "${COMPOSE_FILE}" up -d && echo "Loading COMPOSE_FILE at location ${COMPOSE_FILE}" >> /proc/1/fd/1;
|
||||
else
|
||||
echo "COMPOSE_FILE not set, not auto-loading compose-file" >> /proc/1/fd/1;
|
||||
fi
|
||||
probes:
|
||||
liveness:
|
||||
spec:
|
||||
initialDelaySeconds: 30
|
||||
readiness:
|
||||
spec:
|
||||
initialDelaySeconds: 30
|
||||
startup:
|
||||
spec:
|
||||
initialDelaySeconds: 30
|
||||
|
||||
persistence:
|
||||
varrun:
|
||||
enabled: false
|
||||
mnt:
|
||||
enabled: true
|
||||
type: hostPath
|
||||
hostPath: /mnt
|
||||
mountPath: /mnt
|
||||
hostPathType: ""
|
||||
readOnly: false
|
||||
root:
|
||||
enabled: true
|
||||
type: hostPath
|
||||
hostPath: /root
|
||||
mountPath: /root
|
||||
hostPathType: ""
|
||||
readOnly: false
|
||||
cluster:
|
||||
enabled: true
|
||||
type: hostPath
|
||||
hostPath: /cluster
|
||||
mountPath: /cluster
|
||||
hostPathType: ""
|
||||
readOnly: false
|
||||
docker-certs-ca:
|
||||
enabled: true
|
||||
mountPath: "/config"
|
||||
|
||||
volumeClaimTemplates:
|
||||
docker-certs-client:
|
||||
enabled: true
|
||||
mountPath: "/certs/client"
|
||||
docker:
|
||||
enabled: true
|
||||
mountPath: "/var/lib/docker"
|
||||
@@ -1,24 +0,0 @@
|
||||
# Patterns to ignore when building packages.
|
||||
# This supports shell glob matching, relative path matching, and
|
||||
# negation (prefixed with !). Only one pattern per line.
|
||||
.DS_Store
|
||||
# Common VCS dirs
|
||||
.git/
|
||||
.gitignore
|
||||
.bzr/
|
||||
.bzrignore
|
||||
.hg/
|
||||
.hgignore
|
||||
.svn/
|
||||
# Common backup files
|
||||
*.swp
|
||||
*.bak
|
||||
*.tmp
|
||||
*~
|
||||
# Various IDEs
|
||||
.project
|
||||
.idea/
|
||||
*.tmproj
|
||||
.vscode/
|
||||
# OWNERS file for Kubernetes
|
||||
OWNERS
|
||||
@@ -1,632 +0,0 @@
|
||||
# Changelog<br>
|
||||
|
||||
|
||||
<a name="external-service-5.0.11"></a>
|
||||
### [external-service-5.0.11](https://github.com/truecharts/apps/compare/external-service-5.0.10...external-service-5.0.11) (2022-04-12)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#2480](https://github.com/truecharts/apps/issues/2480))
|
||||
|
||||
|
||||
|
||||
<a name="external-service-5.0.10"></a>
|
||||
### [external-service-5.0.10](https://github.com/truecharts/apps/compare/external-service-5.0.9...external-service-5.0.10) (2022-04-03)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#2410](https://github.com/truecharts/apps/issues/2410))
|
||||
|
||||
|
||||
|
||||
<a name="external-service-5.0.9"></a>
|
||||
### [external-service-5.0.9](https://github.com/truecharts/apps/compare/external-service-5.0.8...external-service-5.0.9) (2022-03-31)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#2361](https://github.com/truecharts/apps/issues/2361))
|
||||
|
||||
|
||||
|
||||
<a name="external-service-5.0.8"></a>
|
||||
### [external-service-5.0.8](https://github.com/truecharts/apps/compare/external-service-5.0.7...external-service-5.0.8) (2022-03-30)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#2354](https://github.com/truecharts/apps/issues/2354))
|
||||
|
||||
|
||||
|
||||
<a name="external-service-5.0.7"></a>
|
||||
### [external-service-5.0.7](https://github.com/truecharts/apps/compare/external-service-5.0.6...external-service-5.0.7) (2022-03-26)
|
||||
|
||||
#### Chore
|
||||
|
||||
* bump all apps to trigger ci
|
||||
|
||||
|
||||
|
||||
<a name="external-service-5.0.2"></a>
|
||||
### [external-service-5.0.2](https://github.com/truecharts/apps/compare/external-service-5.0.1...external-service-5.0.2) (2022-03-07)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#2111](https://github.com/truecharts/apps/issues/2111))
|
||||
* Remove `-icon` string from icon png's ([#2040](https://github.com/truecharts/apps/issues/2040))
|
||||
|
||||
|
||||
|
||||
<a name="external-service-5.0.1"></a>
|
||||
### [external-service-5.0.1](https://github.com/truecharts/apps/compare/external-service-5.0.0...external-service-5.0.1) (2022-03-06)
|
||||
|
||||
#### Chore
|
||||
|
||||
* move external-service to core
|
||||
|
||||
|
||||
|
||||
<a name="external-service-5.0.0"></a>
|
||||
### [external-service-5.0.0](https://github.com/truecharts/apps/compare/external-service-4.0.41...external-service-5.0.0) (2022-03-03)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general major helm releases ([#2021](https://github.com/truecharts/apps/issues/2021))
|
||||
|
||||
|
||||
|
||||
<a name="external-service-4.0.41"></a>
|
||||
### [external-service-4.0.41](https://github.com/truecharts/apps/compare/external-service-4.0.40...external-service-4.0.41) (2022-03-02)
|
||||
|
||||
#### Chore
|
||||
|
||||
* rename `web_portal` to `open` ([#1957](https://github.com/truecharts/apps/issues/1957))
|
||||
* update helm general non-major helm releases ([#1999](https://github.com/truecharts/apps/issues/1999))
|
||||
|
||||
|
||||
|
||||
<a name="external-service-4.0.40"></a>
|
||||
### [external-service-4.0.40](https://github.com/truecharts/apps/compare/external-service-4.0.39...external-service-4.0.40) (2022-02-21)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#1927](https://github.com/truecharts/apps/issues/1927))
|
||||
|
||||
|
||||
|
||||
<a name="external-service-4.0.39"></a>
|
||||
### [external-service-4.0.39](https://github.com/truecharts/apps/compare/external-service-4.0.38...external-service-4.0.39) (2022-02-15)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#1901](https://github.com/truecharts/apps/issues/1901))
|
||||
|
||||
|
||||
|
||||
<a name="external-service-4.0.38"></a>
|
||||
### [external-service-4.0.38](https://github.com/truecharts/apps/compare/external-service-4.0.37...external-service-4.0.38) (2022-02-08)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#1871](https://github.com/truecharts/apps/issues/1871))
|
||||
|
||||
|
||||
|
||||
<a name="external-service-4.0.37"></a>
|
||||
### [external-service-4.0.37](https://github.com/truecharts/apps/compare/external-service-4.0.36...external-service-4.0.37) (2022-02-06)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm chart common to v8.15.0 ([#1859](https://github.com/truecharts/apps/issues/1859))
|
||||
|
||||
|
||||
|
||||
<a name="external-service-4.0.36"></a>
|
||||
### [external-service-4.0.36](https://github.com/truecharts/apps/compare/external-service-4.0.35...external-service-4.0.36) (2022-02-05)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#1852](https://github.com/truecharts/apps/issues/1852))
|
||||
|
||||
|
||||
|
||||
<a name="external-service-4.0.35"></a>
|
||||
### [external-service-4.0.35](https://github.com/truecharts/apps/compare/external-service-4.0.34...external-service-4.0.35) (2022-02-02)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#1828](https://github.com/truecharts/apps/issues/1828))
|
||||
|
||||
|
||||
|
||||
<a name="external-service-4.0.34"></a>
|
||||
### [external-service-4.0.34](https://github.com/truecharts/apps/compare/external-service-4.0.33...external-service-4.0.34) (2022-01-25)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#1791](https://github.com/truecharts/apps/issues/1791))
|
||||
|
||||
|
||||
|
||||
<a name="external-service-4.0.33"></a>
|
||||
### [external-service-4.0.33](https://github.com/truecharts/apps/compare/external-service-4.0.32...external-service-4.0.33) (2022-01-22)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#1766](https://github.com/truecharts/apps/issues/1766))
|
||||
|
||||
|
||||
|
||||
<a name="external-service-4.0.32"></a>
|
||||
### [external-service-4.0.32](https://github.com/truecharts/apps/compare/external-service-4.0.31...external-service-4.0.32) (2022-01-21)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#1759](https://github.com/truecharts/apps/issues/1759))
|
||||
|
||||
#### Fix
|
||||
|
||||
* set additional_attrs: true on all dicts ([#1750](https://github.com/truecharts/apps/issues/1750))
|
||||
|
||||
|
||||
|
||||
<a name="external-service-4.0.31"></a>
|
||||
### [external-service-4.0.31](https://github.com/truecharts/apps/compare/external-service-4.0.30...external-service-4.0.31) (2022-01-18)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#1732](https://github.com/truecharts/apps/issues/1732))
|
||||
|
||||
|
||||
|
||||
<a name="external-service-4.0.30"></a>
|
||||
### [external-service-4.0.30](https://github.com/truecharts/apps/compare/external-service-4.0.29...external-service-4.0.30) (2022-01-13)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#1712](https://github.com/truecharts/apps/issues/1712))
|
||||
|
||||
|
||||
|
||||
<a name="external-service-4.0.29"></a>
|
||||
### [external-service-4.0.29](https://github.com/truecharts/apps/compare/external-service-4.0.28...external-service-4.0.29) (2022-01-12)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#1704](https://github.com/truecharts/apps/issues/1704))
|
||||
|
||||
|
||||
|
||||
<a name="external-service-4.0.28"></a>
|
||||
### [external-service-4.0.28](https://github.com/truecharts/apps/compare/external-service-4.0.27...external-service-4.0.28) (2022-01-11)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#1693](https://github.com/truecharts/apps/issues/1693))
|
||||
|
||||
|
||||
|
||||
<a name="external-service-4.0.27"></a>
|
||||
### [external-service-4.0.27](https://github.com/truecharts/apps/compare/external-service-4.0.26...external-service-4.0.27) (2022-01-04)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases
|
||||
|
||||
|
||||
|
||||
<a name="external-service-4.0.26"></a>
|
||||
### [external-service-4.0.26](https://github.com/truecharts/apps/compare/external-service-4.0.25...external-service-4.0.26) (2021-12-28)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#1623](https://github.com/truecharts/apps/issues/1623))
|
||||
|
||||
|
||||
|
||||
<a name="external-service-4.0.25"></a>
|
||||
### [external-service-4.0.25](https://github.com/truecharts/apps/compare/external-service-4.0.24...external-service-4.0.25) (2021-12-21)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#1596](https://github.com/truecharts/apps/issues/1596))
|
||||
|
||||
|
||||
|
||||
<a name="external-service-4.0.24"></a>
|
||||
### [external-service-4.0.24](https://github.com/truecharts/apps/compare/external-service-4.0.23...external-service-4.0.24) (2021-12-19)
|
||||
|
||||
#### Chore
|
||||
|
||||
* Last patch bump before RC2 branch-off
|
||||
|
||||
|
||||
|
||||
<a name="external-service-4.0.23"></a>
|
||||
### [external-service-4.0.23](https://github.com/truecharts/apps/compare/external-service-4.0.22...external-service-4.0.23) (2021-12-19)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#1571](https://github.com/truecharts/apps/issues/1571))
|
||||
|
||||
|
||||
|
||||
<a name="external-service-4.0.22"></a>
|
||||
### [external-service-4.0.22](https://github.com/truecharts/apps/compare/external-service-4.0.21...external-service-4.0.22) (2021-12-18)
|
||||
|
||||
#### Chore
|
||||
|
||||
* cleanup questions by removing hidden dicts ([#1558](https://github.com/truecharts/apps/issues/1558))
|
||||
* App-Icon Organization ([#1539](https://github.com/truecharts/apps/issues/1539))
|
||||
|
||||
|
||||
|
||||
<a name="external-service-4.0.21"></a>
|
||||
### [external-service-4.0.21](https://github.com/truecharts/apps/compare/external-service-4.0.20...external-service-4.0.21) (2021-12-14)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#1535](https://github.com/truecharts/apps/issues/1535))
|
||||
|
||||
|
||||
|
||||
<a name="external-service-4.0.20"></a>
|
||||
### [external-service-4.0.20](https://github.com/truecharts/apps/compare/external-service-4.0.19...external-service-4.0.20) (2021-12-13)
|
||||
|
||||
#### Chore
|
||||
|
||||
* move incubator apps to stable and bump everything
|
||||
|
||||
|
||||
|
||||
<a name="external-service-4.0.19"></a>
|
||||
### [external-service-4.0.19](https://github.com/truecharts/apps/compare/external-service-4.0.18...external-service-4.0.19) (2021-12-11)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update general helm non-major helm releases ([#1509](https://github.com/truecharts/apps/issues/1509))
|
||||
|
||||
|
||||
|
||||
<a name="external-service-4.0.18"></a>
|
||||
### [external-service-4.0.18](https://github.com/truecharts/apps/compare/external-service-4.0.17...external-service-4.0.18) (2021-12-07)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update non-major deps helm releases ([#1481](https://github.com/truecharts/apps/issues/1481))
|
||||
|
||||
|
||||
|
||||
<a name="external-service-4.0.17"></a>
|
||||
### external-service-4.0.17 (2021-12-05)
|
||||
|
||||
#### Chore
|
||||
|
||||
* bump apps to generate security page
|
||||
* move all container references to TCCR ([#1448](https://github.com/truecharts/apps/issues/1448))
|
||||
* update non-major deps helm releases ([#1471](https://github.com/truecharts/apps/issues/1471))
|
||||
* update non-major deps helm releases ([#1468](https://github.com/truecharts/apps/issues/1468))
|
||||
* update non-major deps helm releases ([#1453](https://github.com/truecharts/apps/issues/1453))
|
||||
* update non-major deps helm releases ([#1432](https://github.com/truecharts/apps/issues/1432))
|
||||
|
||||
#### Fix
|
||||
|
||||
* fix typo in theme selection ([#1428](https://github.com/truecharts/apps/issues/1428))
|
||||
|
||||
|
||||
|
||||
<a name="external-service-4.0.16"></a>
|
||||
### [external-service-4.0.16](https://github.com/truecharts/apps/compare/external-service-4.0.15...external-service-4.0.16) (2021-12-05)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update non-major deps helm releases ([#1468](https://github.com/truecharts/apps/issues/1468))
|
||||
|
||||
|
||||
|
||||
<a name="external-service-4.0.15"></a>
|
||||
### [external-service-4.0.15](https://github.com/truecharts/apps/compare/external-service-4.0.14...external-service-4.0.15) (2021-12-04)
|
||||
|
||||
#### Chore
|
||||
|
||||
* bump apps to generate security page
|
||||
|
||||
|
||||
|
||||
<a name="external-service-4.0.14"></a>
|
||||
### [external-service-4.0.14](https://github.com/truecharts/apps/compare/external-service-4.0.13...external-service-4.0.14) (2021-12-04)
|
||||
|
||||
#### Chore
|
||||
|
||||
* move all container references to TCCR ([#1448](https://github.com/truecharts/apps/issues/1448))
|
||||
* update non-major deps helm releases ([#1453](https://github.com/truecharts/apps/issues/1453))
|
||||
|
||||
|
||||
|
||||
<a name="external-service-4.0.13"></a>
|
||||
### [external-service-4.0.13](https://github.com/truecharts/apps/compare/external-service-4.0.12...external-service-4.0.13) (2021-11-30)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update non-major deps helm releases ([#1432](https://github.com/truecharts/apps/issues/1432))
|
||||
|
||||
#### Fix
|
||||
|
||||
* move conflicting ports to 10xxx range ([#1415](https://github.com/truecharts/apps/issues/1415))
|
||||
|
||||
|
||||
|
||||
<a name="external-service-4.0.12"></a>
|
||||
### [external-service-4.0.12](https://github.com/truecharts/apps/compare/external-service-4.0.11...external-service-4.0.12) (2021-11-23)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update non-major deps helm releases ([#1386](https://github.com/truecharts/apps/issues/1386))
|
||||
|
||||
|
||||
|
||||
<a name="external-service-4.0.11"></a>
|
||||
### [external-service-4.0.11](https://github.com/truecharts/apps/compare/external-service-4.0.10...external-service-4.0.11) (2021-11-22)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update non-major deps helm releases ([#1383](https://github.com/truecharts/apps/issues/1383))
|
||||
|
||||
#### Fix
|
||||
|
||||
* Default enable all services ([#1361](https://github.com/truecharts/apps/issues/1361))
|
||||
|
||||
|
||||
|
||||
<a name="external-service-4.0.10"></a>
|
||||
### [external-service-4.0.10](https://github.com/truecharts/apps/compare/external-service-4.0.9...external-service-4.0.10) (2021-11-16)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update non-major deps helm releases ([#1345](https://github.com/truecharts/apps/issues/1345))
|
||||
|
||||
|
||||
|
||||
<a name="external-service-4.0.9"></a>
|
||||
### [external-service-4.0.9](https://github.com/truecharts/apps/compare/external-service-4.0.8...external-service-4.0.9) (2021-11-15)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update non-major deps helm releases ([#1338](https://github.com/truecharts/apps/issues/1338))
|
||||
|
||||
|
||||
|
||||
<a name="external-service-4.0.8"></a>
|
||||
### [external-service-4.0.8](https://github.com/truecharts/apps/compare/external-service-4.0.7...external-service-4.0.8) (2021-11-14)
|
||||
|
||||
#### Chore
|
||||
|
||||
* clean up Chart.yaml ([#1322](https://github.com/truecharts/apps/issues/1322))
|
||||
* update non-major deps helm releases ([#1328](https://github.com/truecharts/apps/issues/1328))
|
||||
|
||||
|
||||
|
||||
<a name="external-service-4.0.7"></a>
|
||||
### [external-service-4.0.7](https://github.com/truecharts/apps/compare/external-service-4.0.6...external-service-4.0.7) (2021-11-09)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update non-major deps helm releases ([#1297](https://github.com/truecharts/apps/issues/1297))
|
||||
|
||||
|
||||
|
||||
<a name="external-service-4.0.6"></a>
|
||||
### [external-service-4.0.6](https://github.com/truecharts/apps/compare/external-service-4.0.5...external-service-4.0.6) (2021-11-07)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update non-major deps helm releases ([#1295](https://github.com/truecharts/apps/issues/1295))
|
||||
|
||||
|
||||
|
||||
<a name="external-service-4.0.5"></a>
|
||||
### [external-service-4.0.5](https://github.com/truecharts/apps/compare/external-service-4.0.4...external-service-4.0.5) (2021-11-07)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update non-major deps helm releases ([#1291](https://github.com/truecharts/apps/issues/1291))
|
||||
|
||||
|
||||
|
||||
<a name="external-service-4.0.4"></a>
|
||||
### [external-service-4.0.4](https://github.com/truecharts/apps/compare/external-service-4.0.3...external-service-4.0.4) (2021-11-02)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update non-major deps helm releases ([#1267](https://github.com/truecharts/apps/issues/1267))
|
||||
|
||||
|
||||
|
||||
<a name="external-service-4.0.3"></a>
|
||||
### [external-service-4.0.3](https://github.com/truecharts/apps/compare/external-service-4.0.2...external-service-4.0.3) (2021-11-01)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update non-major deps helm releases ([#1264](https://github.com/truecharts/apps/issues/1264))
|
||||
|
||||
|
||||
|
||||
<a name="external-service-4.0.2"></a>
|
||||
### [external-service-4.0.2](https://github.com/truecharts/apps/compare/external-service-4.0.1...external-service-4.0.2) (2021-10-26)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update non-major deps helm releases ([#1245](https://github.com/truecharts/apps/issues/1245))
|
||||
|
||||
|
||||
|
||||
<a name="external-service-4.0.1"></a>
|
||||
### [external-service-4.0.1](https://github.com/truecharts/apps/compare/external-service-4.0.0...external-service-4.0.1) (2021-10-26)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm chart common to v8.3.15 ([#1240](https://github.com/truecharts/apps/issues/1240))
|
||||
|
||||
|
||||
|
||||
<a name="external-service-4.0.0"></a>
|
||||
### [external-service-4.0.0](https://github.com/truecharts/apps/compare/external-service-3.0.16...external-service-4.0.0) (2021-10-25)
|
||||
|
||||
#### Chore
|
||||
|
||||
* Adapt for TrueNAS SCALE RC1
|
||||
|
||||
|
||||
|
||||
<a name="external-service-3.0.16"></a>
|
||||
### [external-service-3.0.16](https://github.com/truecharts/apps/compare/external-service-3.0.15...external-service-3.0.16) (2021-10-20)
|
||||
|
||||
#### Chore
|
||||
|
||||
* bump apps, remove duplicates and move incubator to stable for RC1
|
||||
|
||||
|
||||
|
||||
<a name="external-service-3.0.13"></a>
|
||||
### [external-service-3.0.13](https://github.com/truecharts/apps/compare/external-service-3.0.12...external-service-3.0.13) (2021-10-20)
|
||||
|
||||
#### Chore
|
||||
|
||||
* bump versions to rerelease and fix icons
|
||||
|
||||
|
||||
|
||||
<a name="external-service-3.0.12"></a>
|
||||
### [external-service-3.0.12](https://github.com/truecharts/apps/compare/external-service-3.0.11...external-service-3.0.12) (2021-10-19)
|
||||
|
||||
#### Change
|
||||
|
||||
* Project-Eclipse 3, Automatically generate item.yaml ([#1178](https://github.com/truecharts/apps/issues/1178))
|
||||
|
||||
#### Chore
|
||||
|
||||
* Project-Eclipse 5, move app-readme to automatic generation script ([#1181](https://github.com/truecharts/apps/issues/1181))
|
||||
* Project-Eclipse part 2, adapting and cleaning changelog ([#1173](https://github.com/truecharts/apps/issues/1173))
|
||||
* update helm chart common to v8.3.13 ([#1184](https://github.com/truecharts/apps/issues/1184))
|
||||
|
||||
#### Feat
|
||||
|
||||
* Project-Eclipse 4, Add App grading annotations to Chart.yaml ([#1180](https://github.com/truecharts/apps/issues/1180))
|
||||
|
||||
#### Refactor
|
||||
|
||||
* Project Eclipse Part 6, move questions.yaml to root App folder ([#1182](https://github.com/truecharts/apps/issues/1182))
|
||||
|
||||
|
||||
|
||||
<a name="external-service-3.0.11"></a>
|
||||
### [external-service-3.0.11](https://github.com/truecharts/apps/compare/external-service-3.0.10...external-service-3.0.11) (2021-10-19)
|
||||
|
||||
#### Fix
|
||||
|
||||
* fix previous SCALE bugfix not correctly being applied
|
||||
|
||||
|
||||
|
||||
<a name="external-service-3.0.10"></a>
|
||||
### [external-service-3.0.10](https://github.com/truecharts/apps/compare/external-service-3.0.9...external-service-3.0.10) (2021-10-19)
|
||||
|
||||
#### Fix
|
||||
|
||||
* Solve issues regarding ix_values.yaml not containing the image and tag definitions. ([#1176](https://github.com/truecharts/apps/issues/1176))
|
||||
|
||||
|
||||
|
||||
<a name="external-service-3.0.9"></a>
|
||||
### [external-service-3.0.9](https://github.com/truecharts/apps/compare/external-service-3.0.8...external-service-3.0.9) (2021-10-18)
|
||||
|
||||
#### Refactor
|
||||
|
||||
* Project Eclipse - part 1 - remove ix_values.yaml ([#1168](https://github.com/truecharts/apps/issues/1168))
|
||||
|
||||
|
||||
|
||||
<a name="external-service-3.0.8"></a>
|
||||
### [external-service-3.0.8](https://github.com/truecharts/apps/compare/external-service-3.0.7...external-service-3.0.8) (2021-10-17)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm chart common to v8.3.10 ([#1160](https://github.com/truecharts/apps/issues/1160))
|
||||
|
||||
|
||||
|
||||
<a name="external-service-3.0.7"></a>
|
||||
### [external-service-3.0.7](https://github.com/truecharts/apps/compare/external-service-3.0.6...external-service-3.0.7) (2021-10-13)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update non-major deps helm releases ([#1133](https://github.com/truecharts/apps/issues/1133))
|
||||
|
||||
|
||||
|
||||
<a name="external-service-3.0.6"></a>
|
||||
### [external-service-3.0.6](https://github.com/truecharts/apps/compare/external-service-3.0.5...external-service-3.0.6) (2021-10-12)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update non-major deps helm releases ([#1126](https://github.com/truecharts/apps/issues/1126))
|
||||
|
||||
|
||||
|
||||
<a name="external-service-3.0.5"></a>
|
||||
### [external-service-3.0.5](https://github.com/truecharts/apps/compare/external-service-3.0.4...external-service-3.0.5) (2021-10-12)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update non-major deps helm releases ([#1123](https://github.com/truecharts/apps/issues/1123))
|
||||
|
||||
|
||||
|
||||
<a name="external-service-3.0.4"></a>
|
||||
### [external-service-3.0.4](https://github.com/truecharts/apps/compare/external-service-3.0.3...external-service-3.0.4) (2021-10-05)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update non-major deps helm releases ([#1099](https://github.com/truecharts/apps/issues/1099))
|
||||
|
||||
|
||||
|
||||
<a name="external-service-3.0.3"></a>
|
||||
### [external-service-3.0.3](https://github.com/truecharts/apps/compare/external-service-3.0.2...external-service-3.0.3) (2021-09-29)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm chart common to v8.0.13 ([#1060](https://github.com/truecharts/apps/issues/1060))
|
||||
|
||||
|
||||
|
||||
<a name="external-service-3.0.1"></a>
|
||||
### [external-service-3.0.1](https://github.com/truecharts/apps/compare/external-service-3.0.0...external-service-3.0.1) (2021-09-26)
|
||||
|
||||
|
||||
|
||||
<a name="external-service-3.0.0"></a>
|
||||
### [external-service-3.0.0](https://github.com/truecharts/apps/compare/external-service-2.0.2...external-service-3.0.0) (2021-09-26)
|
||||
|
||||
|
||||
|
||||
<a name="external-service-2.0.2"></a>
|
||||
### [external-service-2.0.2](https://github.com/truecharts/apps/compare/external-service-2.0.1...external-service-2.0.2) (2021-09-21)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update non-major deps helm releases ([#1014](https://github.com/truecharts/apps/issues/1014))
|
||||
|
||||
|
||||
|
||||
<a name="external-service-2.0.1"></a>
|
||||
### [external-service-2.0.1](https://github.com/truecharts/apps/compare/external-service-1.4.15...external-service-2.0.1) (2021-09-13)
|
||||
|
||||
#### Feat
|
||||
|
||||
* add new GUI and VPN support to all Apps ([#977](https://github.com/truecharts/apps/issues/977))
|
||||
* Add VPN addon and move some config to includes ([#973](https://github.com/truecharts/apps/issues/973))
|
||||
* pin all container references to digests ([#963](https://github.com/truecharts/apps/issues/963))
|
||||
* Move some common containers to our own containers
|
||||
|
||||
<a name="external-service-1.4.15"></a>
|
||||
## [external-service-1.4.15](https://github.com/truecharts/apps/compare/external-service-1.4.14...external-service-1.4.15) (2021-09-08)
|
||||
@@ -1,7 +0,0 @@
|
||||
# Configuration Options
|
||||
|
||||
##### Connecting to other apps
|
||||
If you need to connect this App to other Apps on TrueNAS SCALE, please refer to our [Linking Apps Internally](https://truecharts.org/manual/Quick-Start%20Guides/06-linking-apps/) quick-start guide.
|
||||
|
||||
##### Available config options
|
||||
In the future this page is going to contain an automated list of options available in the installation/edit UI.
|
||||
@@ -1,28 +0,0 @@
|
||||
apiVersion: v2
|
||||
appVersion: "0.66.6"
|
||||
dependencies:
|
||||
- name: common
|
||||
repository: https://library-charts.truecharts.org
|
||||
version: 9.2.8
|
||||
deprecated: false
|
||||
description: Allow external services to be used like Apps.
|
||||
home: https://github.com/truecharts/apps/tree/master/charts/stable/external-service
|
||||
icon: https://truecharts.org/_static/img/appicons/external-service.png
|
||||
keywords:
|
||||
- external-service
|
||||
- reverse-proxy
|
||||
kubeVersion: '>=1.16.0-0'
|
||||
maintainers:
|
||||
- email: [email protected]
|
||||
name: TrueCharts
|
||||
url: https://truecharts.org
|
||||
name: external-service
|
||||
sources:
|
||||
- https://github.com/truecharts/apps/tree/master/charts/stable/external-service
|
||||
type: application
|
||||
version: 5.0.11
|
||||
annotations:
|
||||
truecharts.org/catagories: |
|
||||
- networking
|
||||
truecharts.org/SCALE-support: "true"
|
||||
truecharts.org/grade: U
|
||||
@@ -1,37 +0,0 @@
|
||||
# Introduction
|
||||
|
||||
Allow external services to be used like Apps.
|
||||
|
||||
TrueCharts are designed to be installed as TrueNAS SCALE app only. We can not guarantee this charts works as a stand-alone helm installation.
|
||||
**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/apps/issues/new/choose)**
|
||||
|
||||
## Source Code
|
||||
|
||||
* <https://github.com/truecharts/apps/tree/master/charts/stable/external-service>
|
||||
|
||||
## Requirements
|
||||
|
||||
Kubernetes: `>=1.16.0-0`
|
||||
|
||||
## Dependencies
|
||||
|
||||
| Repository | Name | Version |
|
||||
|------------|------|---------|
|
||||
| https://library-charts.truecharts.org | common | 9.2.8 |
|
||||
|
||||
## Installing the Chart
|
||||
|
||||
To install this App on TrueNAS SCALE check our [Quick-Start Guide](https://truecharts.org/manual/Quick-Start%20Guides/02-Installing-an-App/).
|
||||
|
||||
## Upgrading, Rolling Back and Uninstalling the Chart
|
||||
|
||||
To upgrade, rollback or delete this App from TrueNAS SCALE check our [Quick-Start Guide](https://truecharts.org/manual/Quick-Start%20Guides/04-Upgrade-rollback-delete-an-App/).
|
||||
|
||||
## Support
|
||||
|
||||
- Please check our [quick-start guides](https://truecharts.org/manual/Quick-Start%20Guides/01-Adding-TrueCharts/) first.
|
||||
- See the [Wiki](https://truecharts.org)
|
||||
- Check our [Discord](https://discord.gg/tVsPTHWTtr)
|
||||
- Open a [issue](https://github.com/truecharts/apps/issues/new/choose)
|
||||
---
|
||||
All Rights Reserved - The TrueCharts Project
|
||||
@@ -1,24 +0,0 @@
|
||||
# Default Helm-Values
|
||||
|
||||
TrueCharts is primarily build to supply TrueNAS SCALE Apps.
|
||||
However, we also supply all Apps as standard Helm-Charts. In this document we aim to document the default values in our values.yaml file.
|
||||
|
||||
Most of our Apps also consume our "common" Helm Chart.
|
||||
If this is the case, this means that all values.yaml values are set to the common chart values.yaml by default. This values.yaml file will only contain values that deviate from the common chart.
|
||||
You will, however, be able to use all values referenced in the common chart here, besides the values listed in this document.
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| controller.enabled | bool | `false` | |
|
||||
| image.pullPolicy | string | `"IfNotPresent"` | |
|
||||
| image.repository | string | `"tccr.io/truecharts/bs"` | |
|
||||
| image.tag | string | `"v0.66.6@sha256:666"` | |
|
||||
| service.main.externalIP | string | `"1.1.1.1"` | |
|
||||
| service.main.ports.main.Type | string | `"HTTPS"` | |
|
||||
| service.main.ports.main.port | int | `10003` | |
|
||||
| service.main.ports.main.targetPort | int | `443` | |
|
||||
| service.main.type | string | `"ExternalIP"` | |
|
||||
|
||||
All Rights Reserved - The TrueCharts Project
|
||||
@@ -1,28 +0,0 @@
|
||||
---
|
||||
hide:
|
||||
- toc
|
||||
---
|
||||
|
||||
# Security Overview
|
||||
|
||||
<link href="https://truecharts.org/_static/trivy.css" type="text/css" rel="stylesheet" />
|
||||
|
||||
## Helm-Chart
|
||||
|
||||
##### Scan Results
|
||||
|
||||
#### Chart Object: external-service/templates/common.yaml
|
||||
|
||||
|
||||
|
||||
| No Misconfigurations found |
|
||||
|:---------------------------------|
|
||||
|
||||
|
||||
|
||||
## Containers
|
||||
|
||||
##### Detected Containers
|
||||
|
||||
|
||||
##### Scan Results
|
||||
@@ -1 +0,0 @@
|
||||
{{ include "common.all" . }}
|
||||
@@ -1,24 +0,0 @@
|
||||
# Patterns to ignore when building packages.
|
||||
# This supports shell glob matching, relative path matching, and
|
||||
# negation (prefixed with !). Only one pattern per line.
|
||||
.DS_Store
|
||||
# Common VCS dirs
|
||||
.git/
|
||||
.gitignore
|
||||
.bzr/
|
||||
.bzrignore
|
||||
.hg/
|
||||
.hgignore
|
||||
.svn/
|
||||
# Common backup files
|
||||
*.swp
|
||||
*.bak
|
||||
*.tmp
|
||||
*~
|
||||
# Various IDEs
|
||||
.project
|
||||
.idea/
|
||||
*.tmproj
|
||||
.vscode/
|
||||
# OWNERS file for Kubernetes
|
||||
OWNERS
|
||||
@@ -1,679 +0,0 @@
|
||||
# Changelog<br>
|
||||
|
||||
|
||||
<a name="k8s-gateway-5.0.11"></a>
|
||||
### [k8s-gateway-5.0.11](https://github.com/truecharts/apps/compare/k8s-gateway-5.0.10...k8s-gateway-5.0.11) (2022-04-12)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#2480](https://github.com/truecharts/apps/issues/2480))
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-5.0.10"></a>
|
||||
### [k8s-gateway-5.0.10](https://github.com/truecharts/apps/compare/k8s-gateway-5.0.9...k8s-gateway-5.0.10) (2022-04-03)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#2410](https://github.com/truecharts/apps/issues/2410))
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-5.0.9"></a>
|
||||
### [k8s-gateway-5.0.9](https://github.com/truecharts/apps/compare/k8s-gateway-5.0.8...k8s-gateway-5.0.9) (2022-03-31)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#2361](https://github.com/truecharts/apps/issues/2361))
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-5.0.8"></a>
|
||||
### [k8s-gateway-5.0.8](https://github.com/truecharts/apps/compare/k8s-gateway-5.0.7...k8s-gateway-5.0.8) (2022-03-30)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#2354](https://github.com/truecharts/apps/issues/2354))
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-5.0.7"></a>
|
||||
### [k8s-gateway-5.0.7](https://github.com/truecharts/apps/compare/k8s-gateway-5.0.6...k8s-gateway-5.0.7) (2022-03-27)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update docker general non-major
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-5.0.6"></a>
|
||||
### [k8s-gateway-5.0.6](https://github.com/truecharts/apps/compare/k8s-gateway-5.0.5...k8s-gateway-5.0.6) (2022-03-26)
|
||||
|
||||
#### Chore
|
||||
|
||||
* bump all apps to trigger ci
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-5.0.1"></a>
|
||||
### [k8s-gateway-5.0.1](https://github.com/truecharts/apps/compare/k8s-gateway-5.0.0...k8s-gateway-5.0.1) (2022-03-07)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#2111](https://github.com/truecharts/apps/issues/2111))
|
||||
* Remove `-icon` string from icon png's ([#2040](https://github.com/truecharts/apps/issues/2040))
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-5.0.0"></a>
|
||||
### [k8s-gateway-5.0.0](https://github.com/truecharts/apps/compare/k8s-gateway-4.0.44...k8s-gateway-5.0.0) (2022-03-03)
|
||||
|
||||
#### Chore
|
||||
|
||||
* remove fixed env from questions.yaml
|
||||
* remove empty env var declaration from questions.yaml
|
||||
* update helm general major helm releases ([#2021](https://github.com/truecharts/apps/issues/2021))
|
||||
|
||||
#### Fix
|
||||
|
||||
* BREAKING CHANGE Move some env-vars outside of env section ([#2010](https://github.com/truecharts/apps/issues/2010))
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-4.0.44"></a>
|
||||
### [k8s-gateway-4.0.44](https://github.com/truecharts/apps/compare/k8s-gateway-4.0.43...k8s-gateway-4.0.44) (2022-03-02)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#1999](https://github.com/truecharts/apps/issues/1999))
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-4.0.43"></a>
|
||||
### [k8s-gateway-4.0.43](https://github.com/truecharts/apps/compare/k8s-gateway-4.0.42...k8s-gateway-4.0.43) (2022-02-21)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#1927](https://github.com/truecharts/apps/issues/1927))
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-4.0.42"></a>
|
||||
### [k8s-gateway-4.0.42](https://github.com/truecharts/apps/compare/k8s-gateway-4.0.41...k8s-gateway-4.0.42) (2022-02-15)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#1901](https://github.com/truecharts/apps/issues/1901))
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-4.0.41"></a>
|
||||
### [k8s-gateway-4.0.41](https://github.com/truecharts/apps/compare/k8s-gateway-4.0.40...k8s-gateway-4.0.41) (2022-02-08)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#1871](https://github.com/truecharts/apps/issues/1871))
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-4.0.40"></a>
|
||||
### [k8s-gateway-4.0.40](https://github.com/truecharts/apps/compare/k8s-gateway-4.0.39...k8s-gateway-4.0.40) (2022-02-06)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm chart common to v8.15.0 ([#1859](https://github.com/truecharts/apps/issues/1859))
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-4.0.39"></a>
|
||||
### [k8s-gateway-4.0.39](https://github.com/truecharts/apps/compare/k8s-gateway-4.0.38...k8s-gateway-4.0.39) (2022-02-05)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#1852](https://github.com/truecharts/apps/issues/1852))
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-4.0.38"></a>
|
||||
### [k8s-gateway-4.0.38](https://github.com/truecharts/apps/compare/k8s-gateway-4.0.37...k8s-gateway-4.0.38) (2022-02-02)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#1828](https://github.com/truecharts/apps/issues/1828))
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-4.0.37"></a>
|
||||
### [k8s-gateway-4.0.37](https://github.com/truecharts/apps/compare/k8s-gateway-4.0.36...k8s-gateway-4.0.37) (2022-01-25)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#1791](https://github.com/truecharts/apps/issues/1791))
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-4.0.36"></a>
|
||||
### [k8s-gateway-4.0.36](https://github.com/truecharts/apps/compare/k8s-gateway-4.0.35...k8s-gateway-4.0.36) (2022-01-24)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update docker general non-major ([#1786](https://github.com/truecharts/apps/issues/1786))
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-4.0.35"></a>
|
||||
### [k8s-gateway-4.0.35](https://github.com/truecharts/apps/compare/k8s-gateway-4.0.34...k8s-gateway-4.0.35) (2022-01-22)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#1766](https://github.com/truecharts/apps/issues/1766))
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-4.0.34"></a>
|
||||
### [k8s-gateway-4.0.34](https://github.com/truecharts/apps/compare/k8s-gateway-4.0.33...k8s-gateway-4.0.34) (2022-01-21)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#1759](https://github.com/truecharts/apps/issues/1759))
|
||||
|
||||
#### Fix
|
||||
|
||||
* set additional_attrs: true on all dicts ([#1750](https://github.com/truecharts/apps/issues/1750))
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-4.0.33"></a>
|
||||
### [k8s-gateway-4.0.33](https://github.com/truecharts/apps/compare/k8s-gateway-4.0.32...k8s-gateway-4.0.33) (2022-01-18)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#1732](https://github.com/truecharts/apps/issues/1732))
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-4.0.32"></a>
|
||||
### [k8s-gateway-4.0.32](https://github.com/truecharts/apps/compare/k8s-gateway-4.0.31...k8s-gateway-4.0.32) (2022-01-17)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update docker general non-major ([#1728](https://github.com/truecharts/apps/issues/1728))
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-4.0.31"></a>
|
||||
### [k8s-gateway-4.0.31](https://github.com/truecharts/apps/compare/k8s-gateway-4.0.30...k8s-gateway-4.0.31) (2022-01-13)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#1712](https://github.com/truecharts/apps/issues/1712))
|
||||
|
||||
#### Feat
|
||||
|
||||
* expose capabilities in GUI ([#1709](https://github.com/truecharts/apps/issues/1709))
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-4.0.30"></a>
|
||||
### [k8s-gateway-4.0.30](https://github.com/truecharts/apps/compare/k8s-gateway-4.0.29...k8s-gateway-4.0.30) (2022-01-12)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#1704](https://github.com/truecharts/apps/issues/1704))
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-4.0.29"></a>
|
||||
### [k8s-gateway-4.0.29](https://github.com/truecharts/apps/compare/k8s-gateway-4.0.28...k8s-gateway-4.0.29) (2022-01-11)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#1693](https://github.com/truecharts/apps/issues/1693))
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-4.0.28"></a>
|
||||
### [k8s-gateway-4.0.28](https://github.com/truecharts/apps/compare/k8s-gateway-4.0.27...k8s-gateway-4.0.28) (2022-01-04)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-4.0.27"></a>
|
||||
### [k8s-gateway-4.0.27](https://github.com/truecharts/apps/compare/k8s-gateway-4.0.26...k8s-gateway-4.0.27) (2021-12-28)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#1623](https://github.com/truecharts/apps/issues/1623))
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-4.0.26"></a>
|
||||
### [k8s-gateway-4.0.26](https://github.com/truecharts/apps/compare/k8s-gateway-4.0.25...k8s-gateway-4.0.26) (2021-12-21)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#1596](https://github.com/truecharts/apps/issues/1596))
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-4.0.25"></a>
|
||||
### [k8s-gateway-4.0.25](https://github.com/truecharts/apps/compare/k8s-gateway-4.0.24...k8s-gateway-4.0.25) (2021-12-19)
|
||||
|
||||
#### Chore
|
||||
|
||||
* Last patch bump before RC2 branch-off
|
||||
* remove `editable: true` as this is the default ([#1576](https://github.com/truecharts/apps/issues/1576))
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-4.0.24"></a>
|
||||
### [k8s-gateway-4.0.24](https://github.com/truecharts/apps/compare/k8s-gateway-4.0.23...k8s-gateway-4.0.24) (2021-12-19)
|
||||
|
||||
#### Chore
|
||||
|
||||
* App-Icon Organization ([#1539](https://github.com/truecharts/apps/issues/1539))
|
||||
* update helm general non-major helm releases ([#1571](https://github.com/truecharts/apps/issues/1571))
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-4.0.23"></a>
|
||||
### [k8s-gateway-4.0.23](https://github.com/truecharts/apps/compare/k8s-gateway-4.0.22...k8s-gateway-4.0.23) (2021-12-14)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#1535](https://github.com/truecharts/apps/issues/1535))
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-4.0.22"></a>
|
||||
### [k8s-gateway-4.0.22](https://github.com/truecharts/apps/compare/k8s-gateway-4.0.21...k8s-gateway-4.0.22) (2021-12-13)
|
||||
|
||||
#### Chore
|
||||
|
||||
* move incubator apps to stable and bump everything
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-4.0.21"></a>
|
||||
### [k8s-gateway-4.0.21](https://github.com/truecharts/apps/compare/k8s-gateway-4.0.20...k8s-gateway-4.0.21) (2021-12-11)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update general helm non-major helm releases ([#1509](https://github.com/truecharts/apps/issues/1509))
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-4.0.20"></a>
|
||||
### [k8s-gateway-4.0.20](https://github.com/truecharts/apps/compare/k8s-gateway-4.0.19...k8s-gateway-4.0.20) (2021-12-07)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update non-major deps helm releases ([#1481](https://github.com/truecharts/apps/issues/1481))
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-4.0.19"></a>
|
||||
### k8s-gateway-4.0.19 (2021-12-05)
|
||||
|
||||
#### Chore
|
||||
|
||||
* bump apps to generate security page
|
||||
* move all container references to TCCR ([#1448](https://github.com/truecharts/apps/issues/1448))
|
||||
* update non-major deps helm releases ([#1471](https://github.com/truecharts/apps/issues/1471))
|
||||
* update non-major deps helm releases ([#1468](https://github.com/truecharts/apps/issues/1468))
|
||||
* update non-major deps helm releases ([#1453](https://github.com/truecharts/apps/issues/1453))
|
||||
* update non-major ([#1449](https://github.com/truecharts/apps/issues/1449))
|
||||
* update non-major deps helm releases ([#1432](https://github.com/truecharts/apps/issues/1432))
|
||||
|
||||
#### Fix
|
||||
|
||||
* fix typo in theme selection ([#1428](https://github.com/truecharts/apps/issues/1428))
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-4.0.18"></a>
|
||||
### [k8s-gateway-4.0.18](https://github.com/truecharts/apps/compare/k8s-gateway-4.0.17...k8s-gateway-4.0.18) (2021-12-05)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update non-major deps helm releases ([#1468](https://github.com/truecharts/apps/issues/1468))
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-4.0.17"></a>
|
||||
### [k8s-gateway-4.0.17](https://github.com/truecharts/apps/compare/k8s-gateway-4.0.16...k8s-gateway-4.0.17) (2021-12-04)
|
||||
|
||||
#### Chore
|
||||
|
||||
* bump apps to generate security page
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-4.0.16"></a>
|
||||
### [k8s-gateway-4.0.16](https://github.com/truecharts/apps/compare/k8s-gateway-4.0.15...k8s-gateway-4.0.16) (2021-12-04)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update non-major deps helm releases ([#1453](https://github.com/truecharts/apps/issues/1453))
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-4.0.15"></a>
|
||||
### [k8s-gateway-4.0.15](https://github.com/truecharts/apps/compare/k8s-gateway-4.0.14...k8s-gateway-4.0.15) (2021-12-03)
|
||||
|
||||
#### Chore
|
||||
|
||||
* move all container references to TCCR ([#1448](https://github.com/truecharts/apps/issues/1448))
|
||||
* update non-major ([#1449](https://github.com/truecharts/apps/issues/1449))
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-4.0.14"></a>
|
||||
### [k8s-gateway-4.0.14](https://github.com/truecharts/apps/compare/k8s-gateway-4.0.13...k8s-gateway-4.0.14) (2021-11-30)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update non-major deps helm releases ([#1432](https://github.com/truecharts/apps/issues/1432))
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-4.0.13"></a>
|
||||
### [k8s-gateway-4.0.13](https://github.com/truecharts/apps/compare/k8s-gateway-4.0.12...k8s-gateway-4.0.13) (2021-11-23)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update non-major deps helm releases ([#1386](https://github.com/truecharts/apps/issues/1386))
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-4.0.12"></a>
|
||||
### [k8s-gateway-4.0.12](https://github.com/truecharts/apps/compare/k8s-gateway-4.0.11...k8s-gateway-4.0.12) (2021-11-22)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update non-major deps helm releases ([#1383](https://github.com/truecharts/apps/issues/1383))
|
||||
|
||||
#### Fix
|
||||
|
||||
* Default enable all services ([#1361](https://github.com/truecharts/apps/issues/1361))
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-4.0.11"></a>
|
||||
### [k8s-gateway-4.0.11](https://github.com/truecharts/apps/compare/k8s-gateway-4.0.10...k8s-gateway-4.0.11) (2021-11-16)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update non-major deps helm releases ([#1345](https://github.com/truecharts/apps/issues/1345))
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-4.0.10"></a>
|
||||
### [k8s-gateway-4.0.10](https://github.com/truecharts/apps/compare/k8s-gateway-4.0.9...k8s-gateway-4.0.10) (2021-11-15)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update non-major deps helm releases ([#1338](https://github.com/truecharts/apps/issues/1338))
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-4.0.9"></a>
|
||||
### [k8s-gateway-4.0.9](https://github.com/truecharts/apps/compare/k8s-gateway-4.0.8...k8s-gateway-4.0.9) (2021-11-14)
|
||||
|
||||
#### Chore
|
||||
|
||||
* move port above advanced in GUI ([#1326](https://github.com/truecharts/apps/issues/1326))
|
||||
* clean up Chart.yaml ([#1322](https://github.com/truecharts/apps/issues/1322))
|
||||
* update non-major deps helm releases ([#1328](https://github.com/truecharts/apps/issues/1328))
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-4.0.8"></a>
|
||||
### [k8s-gateway-4.0.8](https://github.com/truecharts/apps/compare/k8s-gateway-4.0.7...k8s-gateway-4.0.8) (2021-11-14)
|
||||
|
||||
#### Chore
|
||||
|
||||
* move traefik and k8s gateway to core train
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-4.0.7"></a>
|
||||
### [k8s-gateway-4.0.7](https://github.com/truecharts/apps/compare/k8s-gateway-4.0.6...k8s-gateway-4.0.7) (2021-11-09)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update non-major deps helm releases ([#1297](https://github.com/truecharts/apps/issues/1297))
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-4.0.6"></a>
|
||||
### [k8s-gateway-4.0.6](https://github.com/truecharts/apps/compare/k8s-gateway-4.0.5...k8s-gateway-4.0.6) (2021-11-07)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update non-major deps helm releases ([#1295](https://github.com/truecharts/apps/issues/1295))
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-4.0.5"></a>
|
||||
### [k8s-gateway-4.0.5](https://github.com/truecharts/apps/compare/k8s-gateway-4.0.4...k8s-gateway-4.0.5) (2021-11-07)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update non-major deps helm releases ([#1291](https://github.com/truecharts/apps/issues/1291))
|
||||
|
||||
#### Chore
|
||||
|
||||
* Simplify GUI for deployment, persistence and securityContext ([#1289](https://github.com/truecharts/apps/issues/1289))
|
||||
|
||||
#### Feat
|
||||
|
||||
* Simplify the Services GUI ([#1290](https://github.com/truecharts/apps/issues/1290))
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-4.0.4"></a>
|
||||
### [k8s-gateway-4.0.4](https://github.com/truecharts/apps/compare/k8s-gateway-4.0.3...k8s-gateway-4.0.4) (2021-11-02)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update non-major deps helm releases ([#1267](https://github.com/truecharts/apps/issues/1267))
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-4.0.3"></a>
|
||||
### [k8s-gateway-4.0.3](https://github.com/truecharts/apps/compare/k8s-gateway-4.0.2...k8s-gateway-4.0.3) (2021-11-01)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update non-major deps helm releases ([#1264](https://github.com/truecharts/apps/issues/1264))
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-4.0.2"></a>
|
||||
### [k8s-gateway-4.0.2](https://github.com/truecharts/apps/compare/k8s-gateway-4.0.1...k8s-gateway-4.0.2) (2021-10-26)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update non-major deps helm releases ([#1245](https://github.com/truecharts/apps/issues/1245))
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-4.0.1"></a>
|
||||
### [k8s-gateway-4.0.1](https://github.com/truecharts/apps/compare/k8s-gateway-4.0.0...k8s-gateway-4.0.1) (2021-10-26)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm chart common to v8.3.15 ([#1240](https://github.com/truecharts/apps/issues/1240))
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-4.0.0"></a>
|
||||
### [k8s-gateway-4.0.0](https://github.com/truecharts/apps/compare/k8s-gateway-3.0.16...k8s-gateway-4.0.0) (2021-10-25)
|
||||
|
||||
#### Chore
|
||||
|
||||
* Adapt for TrueNAS SCALE RC1
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-3.0.16"></a>
|
||||
### [k8s-gateway-3.0.16](https://github.com/truecharts/apps/compare/k8s-gateway-3.0.15...k8s-gateway-3.0.16) (2021-10-20)
|
||||
|
||||
#### Chore
|
||||
|
||||
* bump apps, remove duplicates and move incubator to stable for RC1
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-3.0.13"></a>
|
||||
### [k8s-gateway-3.0.13](https://github.com/truecharts/apps/compare/k8s-gateway-3.0.12...k8s-gateway-3.0.13) (2021-10-20)
|
||||
|
||||
#### Chore
|
||||
|
||||
* bump versions to rerelease and fix icons
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-3.0.12"></a>
|
||||
### [k8s-gateway-3.0.12](https://github.com/truecharts/apps/compare/k8s-gateway-3.0.11...k8s-gateway-3.0.12) (2021-10-19)
|
||||
|
||||
#### Change
|
||||
|
||||
* Project-Eclipse 3, Automatically generate item.yaml ([#1178](https://github.com/truecharts/apps/issues/1178))
|
||||
|
||||
#### Chore
|
||||
|
||||
* Project-Eclipse 5, move app-readme to automatic generation script ([#1181](https://github.com/truecharts/apps/issues/1181))
|
||||
* Project-Eclipse part 2, adapting and cleaning changelog ([#1173](https://github.com/truecharts/apps/issues/1173))
|
||||
* update helm chart common to v8.3.13 ([#1184](https://github.com/truecharts/apps/issues/1184))
|
||||
|
||||
#### Feat
|
||||
|
||||
* Project-Eclipse 4, Add App grading annotations to Chart.yaml ([#1180](https://github.com/truecharts/apps/issues/1180))
|
||||
|
||||
#### Refactor
|
||||
|
||||
* Project Eclipse Part 6, move questions.yaml to root App folder ([#1182](https://github.com/truecharts/apps/issues/1182))
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-3.0.11"></a>
|
||||
### [k8s-gateway-3.0.11](https://github.com/truecharts/apps/compare/k8s-gateway-3.0.10...k8s-gateway-3.0.11) (2021-10-19)
|
||||
|
||||
#### Fix
|
||||
|
||||
* fix previous SCALE bugfix not correctly being applied
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-3.0.10"></a>
|
||||
### [k8s-gateway-3.0.10](https://github.com/truecharts/apps/compare/k8s-gateway-3.0.9...k8s-gateway-3.0.10) (2021-10-19)
|
||||
|
||||
#### Fix
|
||||
|
||||
* Solve issues regarding ix_values.yaml not containing the image and tag definitions. ([#1176](https://github.com/truecharts/apps/issues/1176))
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-3.0.9"></a>
|
||||
### [k8s-gateway-3.0.9](https://github.com/truecharts/apps/compare/k8s-gateway-3.0.8...k8s-gateway-3.0.9) (2021-10-18)
|
||||
|
||||
#### Refactor
|
||||
|
||||
* Project Eclipse - part 1 - remove ix_values.yaml ([#1168](https://github.com/truecharts/apps/issues/1168))
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-3.0.8"></a>
|
||||
### [k8s-gateway-3.0.8](https://github.com/truecharts/apps/compare/k8s-gateway-3.0.7...k8s-gateway-3.0.8) (2021-10-17)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm chart common to v8.3.10 ([#1160](https://github.com/truecharts/apps/issues/1160))
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-3.0.7"></a>
|
||||
### [k8s-gateway-3.0.7](https://github.com/truecharts/apps/compare/k8s-gateway-3.0.6...k8s-gateway-3.0.7) (2021-10-13)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update non-major deps helm releases ([#1133](https://github.com/truecharts/apps/issues/1133))
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-3.0.6"></a>
|
||||
### [k8s-gateway-3.0.6](https://github.com/truecharts/apps/compare/k8s-gateway-3.0.5...k8s-gateway-3.0.6) (2021-10-12)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update non-major deps helm releases ([#1126](https://github.com/truecharts/apps/issues/1126))
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-3.0.5"></a>
|
||||
### [k8s-gateway-3.0.5](https://github.com/truecharts/apps/compare/k8s-gateway-3.0.4...k8s-gateway-3.0.5) (2021-10-12)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update non-major deps helm releases ([#1123](https://github.com/truecharts/apps/issues/1123))
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-3.0.4"></a>
|
||||
### [k8s-gateway-3.0.4](https://github.com/truecharts/apps/compare/k8s-gateway-3.0.3...k8s-gateway-3.0.4) (2021-10-05)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update non-major deps helm releases ([#1099](https://github.com/truecharts/apps/issues/1099))
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-3.0.3"></a>
|
||||
### [k8s-gateway-3.0.3](https://github.com/truecharts/apps/compare/k8s-gateway-3.0.2...k8s-gateway-3.0.3) (2021-09-29)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm chart common to v8.0.13 ([#1060](https://github.com/truecharts/apps/issues/1060))
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-3.0.1"></a>
|
||||
### [k8s-gateway-3.0.1](https://github.com/truecharts/apps/compare/k8s-gateway-3.0.0...k8s-gateway-3.0.1) (2021-09-26)
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-3.0.0"></a>
|
||||
### [k8s-gateway-3.0.0](https://github.com/truecharts/apps/compare/k8s-gateway-2.0.2...k8s-gateway-3.0.0) (2021-09-26)
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-2.0.2"></a>
|
||||
### [k8s-gateway-2.0.2](https://github.com/truecharts/apps/compare/k8s-gateway-2.0.1...k8s-gateway-2.0.2) (2021-09-21)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update non-major deps helm releases ([#1014](https://github.com/truecharts/apps/issues/1014))
|
||||
|
||||
|
||||
|
||||
<a name="k8s-gateway-2.0.1"></a>
|
||||
### [k8s-gateway-2.0.1](https://github.com/truecharts/apps/compare/k8s-gateway-1.0.10...k8s-gateway-2.0.1) (2021-09-13)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update non-major ([#962](https://github.com/truecharts/apps/issues/962))
|
||||
|
||||
#### Feat
|
||||
|
||||
* add new GUI and VPN support to all Apps ([#977](https://github.com/truecharts/apps/issues/977))
|
||||
* Add VPN addon and move some config to includes ([#973](https://github.com/truecharts/apps/issues/973))
|
||||
* pin all container references to digests ([#963](https://github.com/truecharts/apps/issues/963))
|
||||
* Move some common containers to our own containers
|
||||
|
||||
<a name="k8s-gateway-1.0.10"></a>
|
||||
## [k8s-gateway-1.0.10](https://github.com/truecharts/apps/compare/k8s-gateway-1.0.9...k8s-gateway-1.0.10) (2021-09-08)
|
||||
@@ -1,7 +0,0 @@
|
||||
# Configuration Options
|
||||
|
||||
##### Connecting to other apps
|
||||
If you need to connect this App to other Apps on TrueNAS SCALE, please refer to our [Linking Apps Internally](https://truecharts.org/manual/Quick-Start%20Guides/06-linking-apps/) quick-start guide.
|
||||
|
||||
##### Available config options
|
||||
In the future this page is going to contain an automated list of options available in the installation/edit UI.
|
||||
@@ -1,28 +0,0 @@
|
||||
apiVersion: v2
|
||||
appVersion: "0.2.4"
|
||||
dependencies:
|
||||
- name: common
|
||||
repository: https://library-charts.truecharts.org
|
||||
version: 9.2.8
|
||||
deprecated: false
|
||||
description: A Helm chart for the k8s_gateway CoreDNS plugin
|
||||
home: https://github.com/truecharts/apps/tree/master/charts/stable/k8s-gateway
|
||||
icon: https://truecharts.org/_static/img/appicons/k8s-gateway.png
|
||||
keywords:
|
||||
- DNS
|
||||
- networking
|
||||
kubeVersion: '>=1.16.0-0'
|
||||
maintainers:
|
||||
- email: [email protected]
|
||||
name: TrueCharts
|
||||
url: https://truecharts.org
|
||||
name: k8s-gateway
|
||||
sources:
|
||||
- https://github.com/ori-edge/k8s_gateway
|
||||
type: application
|
||||
version: 5.0.11
|
||||
annotations:
|
||||
truecharts.org/catagories: |
|
||||
- networking
|
||||
truecharts.org/SCALE-support: "true"
|
||||
truecharts.org/grade: U
|
||||
@@ -1,37 +0,0 @@
|
||||
# Introduction
|
||||
|
||||
A Helm chart for the k8s_gateway CoreDNS plugin
|
||||
|
||||
TrueCharts are designed to be installed as TrueNAS SCALE app only. We can not guarantee this charts works as a stand-alone helm installation.
|
||||
**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/apps/issues/new/choose)**
|
||||
|
||||
## Source Code
|
||||
|
||||
* <https://github.com/ori-edge/k8s_gateway>
|
||||
|
||||
## Requirements
|
||||
|
||||
Kubernetes: `>=1.16.0-0`
|
||||
|
||||
## Dependencies
|
||||
|
||||
| Repository | Name | Version |
|
||||
|------------|------|---------|
|
||||
| https://library-charts.truecharts.org | common | 9.2.8 |
|
||||
|
||||
## Installing the Chart
|
||||
|
||||
To install this App on TrueNAS SCALE check our [Quick-Start Guide](https://truecharts.org/manual/Quick-Start%20Guides/02-Installing-an-App/).
|
||||
|
||||
## Upgrading, Rolling Back and Uninstalling the Chart
|
||||
|
||||
To upgrade, rollback or delete this App from TrueNAS SCALE check our [Quick-Start Guide](https://truecharts.org/manual/Quick-Start%20Guides/04-Upgrade-rollback-delete-an-App/).
|
||||
|
||||
## Support
|
||||
|
||||
- Please check our [quick-start guides](https://truecharts.org/manual/Quick-Start%20Guides/01-Adding-TrueCharts/) first.
|
||||
- See the [Wiki](https://truecharts.org)
|
||||
- Check our [Discord](https://discord.gg/tVsPTHWTtr)
|
||||
- Open a [issue](https://github.com/truecharts/apps/issues/new/choose)
|
||||
---
|
||||
All Rights Reserved - The TrueCharts Project
|
||||
@@ -1,66 +0,0 @@
|
||||
# Default Helm-Values
|
||||
|
||||
TrueCharts is primarily build to supply TrueNAS SCALE Apps.
|
||||
However, we also supply all Apps as standard Helm-Charts. In this document we aim to document the default values in our values.yaml file.
|
||||
|
||||
Most of our Apps also consume our "common" Helm Chart.
|
||||
If this is the case, this means that all values.yaml values are set to the common chart values.yaml by default. This values.yaml file will only contain values that deviate from the common chart.
|
||||
You will, however, be able to use all values referenced in the common chart here, besides the values listed in this document.
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| apex | string | `""` | Override the default `serviceName.namespace` domain apex |
|
||||
| args[0] | string | `"-conf"` | |
|
||||
| args[1] | string | `"/etc/coredns/Corefile"` | |
|
||||
| domains | list | `[{"dnsChallenge":{"domain":"dns01.clouddns.com","enabled":false},"domain":"example.com"}]` | list of processed domains |
|
||||
| domains[0] | object | `{"dnsChallenge":{"domain":"dns01.clouddns.com","enabled":false},"domain":"example.com"}` | Delegated domain |
|
||||
| domains[0].dnsChallenge | object | `{"domain":"dns01.clouddns.com","enabled":false}` | Optional configuration option for DNS01 challenge that will redirect all acme challenge requests to external cloud domain (e.g. managed by cert-manager) See: https://cert-manager.io/docs/configuration/acme/dns01/ |
|
||||
| forward.enabled | bool | `true` | |
|
||||
| forward.options[0].name | string | `"tls_servername"` | |
|
||||
| forward.options[0].value | string | `"cloudflare-dns.com"` | |
|
||||
| forward.primary | string | `"tls://1.1.1.1"` | |
|
||||
| forward.secondary | string | `"tls://1.0.0.1"` | |
|
||||
| image.pullPolicy | string | `"IfNotPresent"` | |
|
||||
| image.repository | string | `"tccr.io/truecharts/k8s_gateway"` | |
|
||||
| image.tag | string | `"v0.2.4@sha256:cc621e57c73aab461b64e561d56181c9f67b59d006ab548fedfee660f08965f9"` | |
|
||||
| podSecurityContext.runAsGroup | int | `0` | |
|
||||
| podSecurityContext.runAsUser | int | `0` | |
|
||||
| probes.liveness.custom | bool | `true` | |
|
||||
| probes.liveness.spec.failureThreshold | int | `5` | |
|
||||
| probes.liveness.spec.httpGet.path | string | `"/health"` | |
|
||||
| probes.liveness.spec.httpGet.port | int | `8080` | |
|
||||
| probes.liveness.spec.httpGet.scheme | string | `"HTTP"` | |
|
||||
| probes.liveness.spec.initialDelaySeconds | int | `60` | |
|
||||
| probes.liveness.spec.successThreshold | int | `1` | |
|
||||
| probes.liveness.spec.timeoutSeconds | int | `5` | |
|
||||
| probes.readiness.custom | bool | `true` | |
|
||||
| probes.readiness.spec.failureThreshold | int | `5` | |
|
||||
| probes.readiness.spec.httpGet.path | string | `"/ready"` | |
|
||||
| probes.readiness.spec.httpGet.port | int | `8181` | |
|
||||
| probes.readiness.spec.httpGet.scheme | string | `"HTTP"` | |
|
||||
| probes.readiness.spec.initialDelaySeconds | int | `10` | |
|
||||
| probes.readiness.spec.successThreshold | int | `1` | |
|
||||
| probes.readiness.spec.timeoutSeconds | int | `5` | |
|
||||
| probes.startup.custom | bool | `true` | |
|
||||
| probes.startup.spec.failureThreshold | int | `60` | |
|
||||
| probes.startup.spec.httpGet.path | string | `"/ready"` | |
|
||||
| probes.startup.spec.httpGet.port | int | `8181` | |
|
||||
| probes.startup.spec.httpGet.scheme | string | `"HTTP"` | |
|
||||
| probes.startup.spec.initialDelaySeconds | int | `3` | |
|
||||
| probes.startup.spec.periodSeconds | int | `5` | |
|
||||
| probes.startup.spec.timeoutSeconds | int | `2` | |
|
||||
| rbac | object | See below | Create a ClusterRole and ClusterRoleBinding |
|
||||
| rbac.enabled | bool | `true` | Enables or disables the ClusterRole and ClusterRoleBinding |
|
||||
| rbac.rules | list | `[{"apiGroups":[""],"resources":["services","namespaces"],"verbs":["list","watch"]},{"apiGroups":["extensions","networking.k8s.io"],"resources":["ingresses"],"verbs":["list","watch"]}]` | Set Rules on the ClusterRole |
|
||||
| secondary | string | `""` | Service name of a secondary DNS server (should be `serviceName.namespace`) |
|
||||
| securityContext.runAsNonRoot | bool | `false` | |
|
||||
| service.main.ports.main.port | int | `53` | |
|
||||
| service.main.ports.main.protocol | string | `"UDP"` | |
|
||||
| service.main.ports.main.targetPort | int | `53` | |
|
||||
| serviceAccount.create | bool | `true` | Specifies whether a service account should be created |
|
||||
| ttl | int | `300` | TTL for non-apex responses (in seconds) |
|
||||
| watchedResources | list | `[]` | Limit what kind of resources to watch, e.g. watchedResources: ["Ingress"] |
|
||||
|
||||
All Rights Reserved - The TrueCharts Project
|
||||
@@ -1,319 +0,0 @@
|
||||
# Include{groups}
|
||||
questions:
|
||||
- variable: portal
|
||||
group: "Container Image"
|
||||
label: "Configure Portal Button"
|
||||
schema:
|
||||
type: dict
|
||||
hidden: true
|
||||
attrs:
|
||||
- variable: enabled
|
||||
label: "Enable"
|
||||
description: "enable the portal button"
|
||||
schema:
|
||||
hidden: true
|
||||
editable: false
|
||||
type: boolean
|
||||
default: false
|
||||
# Include{global}
|
||||
- variable: controller
|
||||
group: "Controller"
|
||||
label: ""
|
||||
schema:
|
||||
additional_attrs: true
|
||||
type: dict
|
||||
attrs:
|
||||
- variable: advanced
|
||||
label: "Show Advanced Controller Settings"
|
||||
schema:
|
||||
type: boolean
|
||||
default: false
|
||||
show_subquestions_if: true
|
||||
subquestions:
|
||||
- variable: type
|
||||
description: "Please specify type of workload to deploy"
|
||||
label: "(Advanced) Controller Type"
|
||||
schema:
|
||||
type: string
|
||||
default: "deployment"
|
||||
required: true
|
||||
enum:
|
||||
- value: "deployment"
|
||||
description: "Deployment"
|
||||
- value: "statefulset"
|
||||
description: "Statefulset"
|
||||
- value: "daemonset"
|
||||
description: "Daemonset"
|
||||
- variable: replicas
|
||||
description: "Number of desired pod replicas"
|
||||
label: "Desired Replicas"
|
||||
schema:
|
||||
type: int
|
||||
default: 1
|
||||
required: true
|
||||
- variable: strategy
|
||||
description: "Please specify type of workload to deploy"
|
||||
label: "(Advanced) Update Strategy"
|
||||
schema:
|
||||
type: string
|
||||
default: "RollingUpdate"
|
||||
required: true
|
||||
enum:
|
||||
- value: "Recreate"
|
||||
description: "Recreate: Kill existing pods before creating new ones"
|
||||
- value: "RollingUpdate"
|
||||
description: "RollingUpdate: Create new pods and then kill old ones"
|
||||
- value: "OnDelete"
|
||||
description: "(Legacy) OnDelete: ignore .spec.template changes"
|
||||
# Include{controllerExpert}
|
||||
|
||||
# Include{containerConfig}
|
||||
|
||||
- variable: domains
|
||||
group: "App Configuration"
|
||||
label: "Domains"
|
||||
description: "Please refer to CoreDNS docs for options"
|
||||
schema:
|
||||
type: list
|
||||
default: []
|
||||
items:
|
||||
- variable: domainEntry
|
||||
label: ""
|
||||
schema:
|
||||
additional_attrs: true
|
||||
type: dict
|
||||
attrs:
|
||||
- variable: domain
|
||||
label: "Domain name"
|
||||
schema:
|
||||
type: string
|
||||
required: true
|
||||
default: "example.com"
|
||||
- variable: dnsChallenge
|
||||
label: "Forward dnsChallenge"
|
||||
description: "Optional configuration option for DNS01 challenge that will redirect all acme"
|
||||
schema:
|
||||
additional_attrs: true
|
||||
type: dict
|
||||
attrs:
|
||||
- variable: enabled
|
||||
label: "Enable"
|
||||
schema:
|
||||
type: boolean
|
||||
default: false
|
||||
show_subquestions_if: true
|
||||
subquestions:
|
||||
- variable: domain
|
||||
label: "Forward to Domain"
|
||||
schema:
|
||||
type: string
|
||||
required: true
|
||||
default: "dns01.clouddns.com"
|
||||
|
||||
- variable: forward
|
||||
group: "App Configuration"
|
||||
label: "Forward DNS To"
|
||||
schema:
|
||||
additional_attrs: true
|
||||
type: dict
|
||||
attrs:
|
||||
- variable: enabled
|
||||
label: "Enabled"
|
||||
schema:
|
||||
type: boolean
|
||||
default: true
|
||||
show_subquestions_if: true
|
||||
subquestions:
|
||||
- variable: primary
|
||||
label: "Primary"
|
||||
schema:
|
||||
type: string
|
||||
required: true
|
||||
default: "1.1.1.1"
|
||||
- variable: secondary
|
||||
label: "Secondary"
|
||||
schema:
|
||||
type: string
|
||||
required: true
|
||||
default: "1.0.0.1"
|
||||
- variable: options
|
||||
label: "Forward Options"
|
||||
description: "Please refer to CoreDNS docs for options"
|
||||
schema:
|
||||
type: list
|
||||
default: []
|
||||
items:
|
||||
- variable: optionEntry
|
||||
label: "Option"
|
||||
schema:
|
||||
additional_attrs: true
|
||||
type: dict
|
||||
attrs:
|
||||
- variable: name
|
||||
label: "Name"
|
||||
schema:
|
||||
type: string
|
||||
required: true
|
||||
default: ""
|
||||
- variable: value
|
||||
label: "Value"
|
||||
schema:
|
||||
type: string
|
||||
required: true
|
||||
default: ""
|
||||
|
||||
- variable: service
|
||||
group: "Networking and Services"
|
||||
label: "Configure Service(s)"
|
||||
schema:
|
||||
additional_attrs: true
|
||||
type: dict
|
||||
attrs:
|
||||
- variable: main
|
||||
label: "Main Service"
|
||||
description: "The Primary service on which the healthcheck runs, often the webUI"
|
||||
schema:
|
||||
additional_attrs: true
|
||||
type: dict
|
||||
attrs:
|
||||
# Include{serviceSelector}
|
||||
- variable: main
|
||||
label: "Main Service Port Configuration"
|
||||
schema:
|
||||
additional_attrs: true
|
||||
type: dict
|
||||
attrs:
|
||||
- variable: port
|
||||
label: "Port"
|
||||
description: "This port exposes the container port on the service"
|
||||
schema:
|
||||
type: int
|
||||
default: 53
|
||||
required: true
|
||||
- variable: advanced
|
||||
label: "Show Advanced settings"
|
||||
schema:
|
||||
type: boolean
|
||||
default: false
|
||||
show_subquestions_if: true
|
||||
subquestions:
|
||||
- variable: protocol
|
||||
label: "Port Type"
|
||||
schema:
|
||||
type: string
|
||||
default: "UDP"
|
||||
enum:
|
||||
- value: HTTP
|
||||
description: "HTTP"
|
||||
- value: "HTTPS"
|
||||
description: "HTTPS"
|
||||
- value: TCP
|
||||
description: "TCP"
|
||||
- value: "UDP"
|
||||
description: "UDP"
|
||||
- variable: nodePort
|
||||
label: "Node Port (Optional)"
|
||||
description: "This port gets exposed to the node. Only considered when service type is NodePort, Simple or LoadBalancer"
|
||||
schema:
|
||||
type: int
|
||||
min: 9000
|
||||
max: 65535
|
||||
- variable: targetPort
|
||||
label: "Target Port"
|
||||
description: "The internal(!) port on the container the Application runs on"
|
||||
schema:
|
||||
type: int
|
||||
default: 53
|
||||
|
||||
|
||||
- variable: serviceexpert
|
||||
group: "Networking and Services"
|
||||
label: "Show Expert Config"
|
||||
schema:
|
||||
type: boolean
|
||||
default: false
|
||||
show_subquestions_if: true
|
||||
subquestions:
|
||||
- variable: hostNetwork
|
||||
group: "Networking and Services"
|
||||
label: "Host-Networking (Complicated)"
|
||||
schema:
|
||||
type: boolean
|
||||
default: false
|
||||
|
||||
# Include{serviceExpert}
|
||||
|
||||
# Include{serviceList}
|
||||
|
||||
# Include{persistenceList}
|
||||
|
||||
# Include{security}
|
||||
|
||||
- variable: advancedSecurity
|
||||
label: "Show Advanced Security Settings"
|
||||
group: "Security and Permissions"
|
||||
schema:
|
||||
type: boolean
|
||||
default: false
|
||||
show_subquestions_if: true
|
||||
subquestions:
|
||||
- variable: securityContext
|
||||
label: "Security Context"
|
||||
schema:
|
||||
additional_attrs: true
|
||||
type: dict
|
||||
attrs:
|
||||
- variable: privileged
|
||||
label: "Privileged mode"
|
||||
schema:
|
||||
type: boolean
|
||||
default: false
|
||||
- variable: readOnlyRootFilesystem
|
||||
label: "ReadOnly Root Filesystem"
|
||||
schema:
|
||||
type: boolean
|
||||
default: true
|
||||
- variable: allowPrivilegeEscalation
|
||||
label: "Allow Privilege Escalation"
|
||||
schema:
|
||||
type: boolean
|
||||
default: false
|
||||
- variable: runAsNonRoot
|
||||
label: "runAsNonRoot"
|
||||
schema:
|
||||
type: boolean
|
||||
default: false
|
||||
# Include{securityContextAdvanced}
|
||||
|
||||
- variable: podSecurityContext
|
||||
group: "Security and Permissions"
|
||||
label: "Pod Security Context"
|
||||
schema:
|
||||
additional_attrs: true
|
||||
type: dict
|
||||
attrs:
|
||||
- variable: runAsUser
|
||||
label: "runAsUser"
|
||||
description: "The UserID of the user running the application"
|
||||
schema:
|
||||
type: int
|
||||
default: 0
|
||||
- variable: runAsGroup
|
||||
label: "runAsGroup"
|
||||
description: The groupID this App of the user running the application"
|
||||
schema:
|
||||
type: int
|
||||
default: 0
|
||||
- variable: fsGroup
|
||||
label: "fsGroup"
|
||||
description: "The group that should own ALL storage."
|
||||
schema:
|
||||
type: int
|
||||
default: 568
|
||||
# Include{podSecurityContextAdvanced}
|
||||
|
||||
# Include{resources}
|
||||
|
||||
# Include{advanced}
|
||||
|
||||
# Include{addons}
|
||||
@@ -1,82 +0,0 @@
|
||||
---
|
||||
hide:
|
||||
- toc
|
||||
---
|
||||
|
||||
# Security Overview
|
||||
|
||||
<link href="https://truecharts.org/_static/trivy.css" type="text/css" rel="stylesheet" />
|
||||
|
||||
## Helm-Chart
|
||||
|
||||
##### Scan Results
|
||||
|
||||
#### Chart Object: k8s-gateway/templates/common.yaml
|
||||
|
||||
|
||||
|
||||
| Type | Misconfiguration ID | Check | Severity | Explaination | Links |
|
||||
|:----------------|:------------------:|:-----------:|:------------------:|-----------------------------------------|-----------------------------------------|
|
||||
| Kubernetes Security Check | KSV001 | Process can elevate its own privileges | MEDIUM | <details><summary>Expand...</summary> A program inside the container can elevate its own privileges and run as root, which might give the program control over the container and node. <br> <hr> <br> Container 'hostpatch' of Deployment 'RELEASE-NAME-k8s-gateway' should set 'securityContext.allowPrivilegeEscalation' to false </details>| <details><summary>Expand...</summary><a href="https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted">https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted</a><br><a href="https://avd.aquasec.com/appshield/ksv001">https://avd.aquasec.com/appshield/ksv001</a><br></details> |
|
||||
| Kubernetes Security Check | KSV003 | Default capabilities not dropped | LOW | <details><summary>Expand...</summary> The container should drop all default capabilities and add only those that are needed for its execution. <br> <hr> <br> Container 'RELEASE-NAME-k8s-gateway' of Deployment 'RELEASE-NAME-k8s-gateway' should add 'ALL' to 'securityContext.capabilities.drop' </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-securitycontext-capabilities-drop-index-all/">https://kubesec.io/basics/containers-securitycontext-capabilities-drop-index-all/</a><br><a href="https://avd.aquasec.com/appshield/ksv003">https://avd.aquasec.com/appshield/ksv003</a><br></details> |
|
||||
| Kubernetes Security Check | KSV003 | Default capabilities not dropped | LOW | <details><summary>Expand...</summary> The container should drop all default capabilities and add only those that are needed for its execution. <br> <hr> <br> Container 'hostpatch' of Deployment 'RELEASE-NAME-k8s-gateway' should add 'ALL' to 'securityContext.capabilities.drop' </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-securitycontext-capabilities-drop-index-all/">https://kubesec.io/basics/containers-securitycontext-capabilities-drop-index-all/</a><br><a href="https://avd.aquasec.com/appshield/ksv003">https://avd.aquasec.com/appshield/ksv003</a><br></details> |
|
||||
| Kubernetes Security Check | KSV011 | CPU not limited | LOW | <details><summary>Expand...</summary> Enforcing CPU limits prevents DoS via resource exhaustion. <br> <hr> <br> Container 'hostpatch' of Deployment 'RELEASE-NAME-k8s-gateway' should set 'resources.limits.cpu' </details>| <details><summary>Expand...</summary><a href="https://cloud.google.com/blog/products/containers-kubernetes/kubernetes-best-practices-resource-requests-and-limits">https://cloud.google.com/blog/products/containers-kubernetes/kubernetes-best-practices-resource-requests-and-limits</a><br><a href="https://avd.aquasec.com/appshield/ksv011">https://avd.aquasec.com/appshield/ksv011</a><br></details> |
|
||||
| Kubernetes Security Check | KSV012 | Runs as root user | MEDIUM | <details><summary>Expand...</summary> 'runAsNonRoot' forces the running image to run as a non-root user to ensure least privileges. <br> <hr> <br> Container 'RELEASE-NAME-k8s-gateway' of Deployment 'RELEASE-NAME-k8s-gateway' should set 'securityContext.runAsNonRoot' to true </details>| <details><summary>Expand...</summary><a href="https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted">https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted</a><br><a href="https://avd.aquasec.com/appshield/ksv012">https://avd.aquasec.com/appshield/ksv012</a><br></details> |
|
||||
| Kubernetes Security Check | KSV012 | Runs as root user | MEDIUM | <details><summary>Expand...</summary> 'runAsNonRoot' forces the running image to run as a non-root user to ensure least privileges. <br> <hr> <br> Container 'autopermissions' of Deployment 'RELEASE-NAME-k8s-gateway' should set 'securityContext.runAsNonRoot' to true </details>| <details><summary>Expand...</summary><a href="https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted">https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted</a><br><a href="https://avd.aquasec.com/appshield/ksv012">https://avd.aquasec.com/appshield/ksv012</a><br></details> |
|
||||
| Kubernetes Security Check | KSV012 | Runs as root user | MEDIUM | <details><summary>Expand...</summary> 'runAsNonRoot' forces the running image to run as a non-root user to ensure least privileges. <br> <hr> <br> Container 'hostpatch' of Deployment 'RELEASE-NAME-k8s-gateway' should set 'securityContext.runAsNonRoot' to true </details>| <details><summary>Expand...</summary><a href="https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted">https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted</a><br><a href="https://avd.aquasec.com/appshield/ksv012">https://avd.aquasec.com/appshield/ksv012</a><br></details> |
|
||||
| Kubernetes Security Check | KSV014 | Root file system is not read-only | LOW | <details><summary>Expand...</summary> An immutable root file system prevents applications from writing to their local disk. This can limit intrusions, as attackers will not be able to tamper with the file system or write foreign executables to disk. <br> <hr> <br> Container 'autopermissions' of Deployment 'RELEASE-NAME-k8s-gateway' should set 'securityContext.readOnlyRootFilesystem' to true </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-securitycontext-readonlyrootfilesystem-true/">https://kubesec.io/basics/containers-securitycontext-readonlyrootfilesystem-true/</a><br><a href="https://avd.aquasec.com/appshield/ksv014">https://avd.aquasec.com/appshield/ksv014</a><br></details> |
|
||||
| Kubernetes Security Check | KSV014 | Root file system is not read-only | LOW | <details><summary>Expand...</summary> An immutable root file system prevents applications from writing to their local disk. This can limit intrusions, as attackers will not be able to tamper with the file system or write foreign executables to disk. <br> <hr> <br> Container 'hostpatch' of Deployment 'RELEASE-NAME-k8s-gateway' should set 'securityContext.readOnlyRootFilesystem' to true </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-securitycontext-readonlyrootfilesystem-true/">https://kubesec.io/basics/containers-securitycontext-readonlyrootfilesystem-true/</a><br><a href="https://avd.aquasec.com/appshield/ksv014">https://avd.aquasec.com/appshield/ksv014</a><br></details> |
|
||||
| Kubernetes Security Check | KSV015 | CPU requests not specified | LOW | <details><summary>Expand...</summary> When containers have resource requests specified, the scheduler can make better decisions about which nodes to place pods on, and how to deal with resource contention. <br> <hr> <br> Container 'hostpatch' of Deployment 'RELEASE-NAME-k8s-gateway' should set 'resources.requests.cpu' </details>| <details><summary>Expand...</summary><a href="https://cloud.google.com/blog/products/containers-kubernetes/kubernetes-best-practices-resource-requests-and-limits">https://cloud.google.com/blog/products/containers-kubernetes/kubernetes-best-practices-resource-requests-and-limits</a><br><a href="https://avd.aquasec.com/appshield/ksv015">https://avd.aquasec.com/appshield/ksv015</a><br></details> |
|
||||
| Kubernetes Security Check | KSV016 | Memory requests not specified | LOW | <details><summary>Expand...</summary> When containers have memory requests specified, the scheduler can make better decisions about which nodes to place pods on, and how to deal with resource contention. <br> <hr> <br> Container 'hostpatch' of Deployment 'RELEASE-NAME-k8s-gateway' should set 'resources.requests.memory' </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-resources-limits-memory/">https://kubesec.io/basics/containers-resources-limits-memory/</a><br><a href="https://avd.aquasec.com/appshield/ksv016">https://avd.aquasec.com/appshield/ksv016</a><br></details> |
|
||||
| Kubernetes Security Check | KSV017 | Privileged container | HIGH | <details><summary>Expand...</summary> Privileged containers share namespaces with the host system and do not offer any security. They should be used exclusively for system containers that require high privileges. <br> <hr> <br> Container 'hostpatch' of Deployment 'RELEASE-NAME-k8s-gateway' should set 'securityContext.privileged' to false </details>| <details><summary>Expand...</summary><a href="https://kubernetes.io/docs/concepts/security/pod-security-standards/#baseline">https://kubernetes.io/docs/concepts/security/pod-security-standards/#baseline</a><br><a href="https://avd.aquasec.com/appshield/ksv017">https://avd.aquasec.com/appshield/ksv017</a><br></details> |
|
||||
| Kubernetes Security Check | KSV018 | Memory not limited | LOW | <details><summary>Expand...</summary> Enforcing memory limits prevents DoS via resource exhaustion. <br> <hr> <br> Container 'hostpatch' of Deployment 'RELEASE-NAME-k8s-gateway' should set 'resources.limits.memory' </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-resources-limits-memory/">https://kubesec.io/basics/containers-resources-limits-memory/</a><br><a href="https://avd.aquasec.com/appshield/ksv018">https://avd.aquasec.com/appshield/ksv018</a><br></details> |
|
||||
| Kubernetes Security Check | KSV020 | Runs with low user ID | MEDIUM | <details><summary>Expand...</summary> Force the container to run with user ID > 10000 to avoid conflicts with the host’s user table. <br> <hr> <br> Container 'RELEASE-NAME-k8s-gateway' of Deployment 'RELEASE-NAME-k8s-gateway' should set 'securityContext.runAsUser' > 10000 </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-securitycontext-runasuser/">https://kubesec.io/basics/containers-securitycontext-runasuser/</a><br><a href="https://avd.aquasec.com/appshield/ksv020">https://avd.aquasec.com/appshield/ksv020</a><br></details> |
|
||||
| Kubernetes Security Check | KSV020 | Runs with low user ID | MEDIUM | <details><summary>Expand...</summary> Force the container to run with user ID > 10000 to avoid conflicts with the host’s user table. <br> <hr> <br> Container 'autopermissions' of Deployment 'RELEASE-NAME-k8s-gateway' should set 'securityContext.runAsUser' > 10000 </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-securitycontext-runasuser/">https://kubesec.io/basics/containers-securitycontext-runasuser/</a><br><a href="https://avd.aquasec.com/appshield/ksv020">https://avd.aquasec.com/appshield/ksv020</a><br></details> |
|
||||
| Kubernetes Security Check | KSV020 | Runs with low user ID | MEDIUM | <details><summary>Expand...</summary> Force the container to run with user ID > 10000 to avoid conflicts with the host’s user table. <br> <hr> <br> Container 'hostpatch' of Deployment 'RELEASE-NAME-k8s-gateway' should set 'securityContext.runAsUser' > 10000 </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-securitycontext-runasuser/">https://kubesec.io/basics/containers-securitycontext-runasuser/</a><br><a href="https://avd.aquasec.com/appshield/ksv020">https://avd.aquasec.com/appshield/ksv020</a><br></details> |
|
||||
| Kubernetes Security Check | KSV021 | Runs with low group ID | MEDIUM | <details><summary>Expand...</summary> Force the container to run with group ID > 10000 to avoid conflicts with the host’s user table. <br> <hr> <br> Container 'RELEASE-NAME-k8s-gateway' of Deployment 'RELEASE-NAME-k8s-gateway' should set 'securityContext.runAsGroup' > 10000 </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-securitycontext-runasuser/">https://kubesec.io/basics/containers-securitycontext-runasuser/</a><br><a href="https://avd.aquasec.com/appshield/ksv021">https://avd.aquasec.com/appshield/ksv021</a><br></details> |
|
||||
| Kubernetes Security Check | KSV021 | Runs with low group ID | MEDIUM | <details><summary>Expand...</summary> Force the container to run with group ID > 10000 to avoid conflicts with the host’s user table. <br> <hr> <br> Container 'autopermissions' of Deployment 'RELEASE-NAME-k8s-gateway' should set 'securityContext.runAsGroup' > 10000 </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-securitycontext-runasuser/">https://kubesec.io/basics/containers-securitycontext-runasuser/</a><br><a href="https://avd.aquasec.com/appshield/ksv021">https://avd.aquasec.com/appshield/ksv021</a><br></details> |
|
||||
| Kubernetes Security Check | KSV021 | Runs with low group ID | MEDIUM | <details><summary>Expand...</summary> Force the container to run with group ID > 10000 to avoid conflicts with the host’s user table. <br> <hr> <br> Container 'hostpatch' of Deployment 'RELEASE-NAME-k8s-gateway' should set 'securityContext.runAsGroup' > 10000 </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-securitycontext-runasuser/">https://kubesec.io/basics/containers-securitycontext-runasuser/</a><br><a href="https://avd.aquasec.com/appshield/ksv021">https://avd.aquasec.com/appshield/ksv021</a><br></details> |
|
||||
| Kubernetes Security Check | KSV023 | hostPath volumes mounted | MEDIUM | <details><summary>Expand...</summary> HostPath volumes must be forbidden. <br> <hr> <br> Deployment 'RELEASE-NAME-k8s-gateway' should not set 'spec.template.volumes.hostPath' </details>| <details><summary>Expand...</summary><a href="https://kubernetes.io/docs/concepts/security/pod-security-standards/#baseline">https://kubernetes.io/docs/concepts/security/pod-security-standards/#baseline</a><br><a href="https://avd.aquasec.com/appshield/ksv023">https://avd.aquasec.com/appshield/ksv023</a><br></details> |
|
||||
| Kubernetes Security Check | KSV029 | A root primary or supplementary GID set | LOW | <details><summary>Expand...</summary> Containers should be forbidden from running with a root primary or supplementary GID. <br> <hr> <br> Deployment 'RELEASE-NAME-k8s-gateway' should set 'spec.securityContext.runAsGroup', 'spec.securityContext.supplementalGroups[*]' and 'spec.securityContext.fsGroup' to integer greater than 0 </details>| <details><summary>Expand...</summary><a href="https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted">https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted</a><br><a href="https://avd.aquasec.com/appshield/ksv029">https://avd.aquasec.com/appshield/ksv029</a><br></details> |
|
||||
|
||||
## Containers
|
||||
|
||||
##### Detected Containers
|
||||
|
||||
tccr.io/truecharts/alpine:v3.15.2@sha256:29ed3480a0ee43f7af681fed5d4fc215516abf1c41eade6938b26d8c9c2c7583
|
||||
tccr.io/truecharts/alpine:v3.15.2@sha256:29ed3480a0ee43f7af681fed5d4fc215516abf1c41eade6938b26d8c9c2c7583
|
||||
tccr.io/truecharts/k8s_gateway:v0.2.4@sha256:cc621e57c73aab461b64e561d56181c9f67b59d006ab548fedfee660f08965f9
|
||||
|
||||
##### Scan Results
|
||||
|
||||
|
||||
#### Container: tccr.io/truecharts/alpine:v3.15.2@sha256:29ed3480a0ee43f7af681fed5d4fc215516abf1c41eade6938b26d8c9c2c7583 (alpine 3.15.2)
|
||||
|
||||
|
||||
**alpine**
|
||||
|
||||
|
||||
| Package | Vulnerability | Severity | Installed Version | Fixed Version | Links |
|
||||
|:----------------|:------------------:|:-----------:|:------------------:|:-------------:|-----------------------------------------|
|
||||
| busybox | CVE-2022-28391 | UNKNOWN | 1.34.1-r4 | 1.34.1-r5 | <details><summary>Expand...</summary><a href="https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch">https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch</a><br><a href="https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch">https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch</a><br><a href="https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661">https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661</a><br></details> |
|
||||
| ssl_client | CVE-2022-28391 | UNKNOWN | 1.34.1-r4 | 1.34.1-r5 | <details><summary>Expand...</summary><a href="https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch">https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch</a><br><a href="https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch">https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch</a><br><a href="https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661">https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661</a><br></details> |
|
||||
| zlib | CVE-2018-25032 | HIGH | 1.2.11-r3 | 1.2.12-r0 | <details><summary>Expand...</summary><a href="http://www.openwall.com/lists/oss-security/2022/03/25/2">http://www.openwall.com/lists/oss-security/2022/03/25/2</a><br><a href="http://www.openwall.com/lists/oss-security/2022/03/26/1">http://www.openwall.com/lists/oss-security/2022/03/26/1</a><br><a href="https://access.redhat.com/security/cve/CVE-2018-25032">https://access.redhat.com/security/cve/CVE-2018-25032</a><br><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25032">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25032</a><br><a href="https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531">https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531</a><br><a href="https://github.com/madler/zlib/compare/v1.2.11...v1.2.12">https://github.com/madler/zlib/compare/v1.2.11...v1.2.12</a><br><a href="https://github.com/madler/zlib/issues/605">https://github.com/madler/zlib/issues/605</a><br><a href="https://github.com/sparklemotion/nokogiri/releases/tag/v1.13.4">https://github.com/sparklemotion/nokogiri/releases/tag/v1.13.4</a><br><a href="https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-v6gp-9mmm-c6p5">https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-v6gp-9mmm-c6p5</a><br><a href="https://groups.google.com/g/ruby-security-ann/c/vX7qSjsvWis/m/TJWN4oOKBwAJ">https://groups.google.com/g/ruby-security-ann/c/vX7qSjsvWis/m/TJWN4oOKBwAJ</a><br><a href="https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html">https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html</a><br><a href="https://nvd.nist.gov/vuln/detail/CVE-2018-25032">https://nvd.nist.gov/vuln/detail/CVE-2018-25032</a><br><a href="https://ubuntu.com/security/notices/USN-5355-1">https://ubuntu.com/security/notices/USN-5355-1</a><br><a href="https://ubuntu.com/security/notices/USN-5355-2">https://ubuntu.com/security/notices/USN-5355-2</a><br><a href="https://ubuntu.com/security/notices/USN-5359-1">https://ubuntu.com/security/notices/USN-5359-1</a><br><a href="https://www.debian.org/security/2022/dsa-5111">https://www.debian.org/security/2022/dsa-5111</a><br><a href="https://www.openwall.com/lists/oss-security/2022/03/24/1">https://www.openwall.com/lists/oss-security/2022/03/24/1</a><br><a href="https://www.openwall.com/lists/oss-security/2022/03/28/1">https://www.openwall.com/lists/oss-security/2022/03/28/1</a><br><a href="https://www.openwall.com/lists/oss-security/2022/03/28/3">https://www.openwall.com/lists/oss-security/2022/03/28/3</a><br></details> |
|
||||
|
||||
|
||||
#### Container: tccr.io/truecharts/alpine:v3.15.2@sha256:29ed3480a0ee43f7af681fed5d4fc215516abf1c41eade6938b26d8c9c2c7583 (alpine 3.15.2)
|
||||
|
||||
|
||||
**alpine**
|
||||
|
||||
|
||||
| Package | Vulnerability | Severity | Installed Version | Fixed Version | Links |
|
||||
|:----------------|:------------------:|:-----------:|:------------------:|:-------------:|-----------------------------------------|
|
||||
| busybox | CVE-2022-28391 | UNKNOWN | 1.34.1-r4 | 1.34.1-r5 | <details><summary>Expand...</summary><a href="https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch">https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch</a><br><a href="https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch">https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch</a><br><a href="https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661">https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661</a><br></details> |
|
||||
| ssl_client | CVE-2022-28391 | UNKNOWN | 1.34.1-r4 | 1.34.1-r5 | <details><summary>Expand...</summary><a href="https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch">https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch</a><br><a href="https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch">https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch</a><br><a href="https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661">https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661</a><br></details> |
|
||||
| zlib | CVE-2018-25032 | HIGH | 1.2.11-r3 | 1.2.12-r0 | <details><summary>Expand...</summary><a href="http://www.openwall.com/lists/oss-security/2022/03/25/2">http://www.openwall.com/lists/oss-security/2022/03/25/2</a><br><a href="http://www.openwall.com/lists/oss-security/2022/03/26/1">http://www.openwall.com/lists/oss-security/2022/03/26/1</a><br><a href="https://access.redhat.com/security/cve/CVE-2018-25032">https://access.redhat.com/security/cve/CVE-2018-25032</a><br><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25032">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25032</a><br><a href="https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531">https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531</a><br><a href="https://github.com/madler/zlib/compare/v1.2.11...v1.2.12">https://github.com/madler/zlib/compare/v1.2.11...v1.2.12</a><br><a href="https://github.com/madler/zlib/issues/605">https://github.com/madler/zlib/issues/605</a><br><a href="https://github.com/sparklemotion/nokogiri/releases/tag/v1.13.4">https://github.com/sparklemotion/nokogiri/releases/tag/v1.13.4</a><br><a href="https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-v6gp-9mmm-c6p5">https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-v6gp-9mmm-c6p5</a><br><a href="https://groups.google.com/g/ruby-security-ann/c/vX7qSjsvWis/m/TJWN4oOKBwAJ">https://groups.google.com/g/ruby-security-ann/c/vX7qSjsvWis/m/TJWN4oOKBwAJ</a><br><a href="https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html">https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html</a><br><a href="https://nvd.nist.gov/vuln/detail/CVE-2018-25032">https://nvd.nist.gov/vuln/detail/CVE-2018-25032</a><br><a href="https://ubuntu.com/security/notices/USN-5355-1">https://ubuntu.com/security/notices/USN-5355-1</a><br><a href="https://ubuntu.com/security/notices/USN-5355-2">https://ubuntu.com/security/notices/USN-5355-2</a><br><a href="https://ubuntu.com/security/notices/USN-5359-1">https://ubuntu.com/security/notices/USN-5359-1</a><br><a href="https://www.debian.org/security/2022/dsa-5111">https://www.debian.org/security/2022/dsa-5111</a><br><a href="https://www.openwall.com/lists/oss-security/2022/03/24/1">https://www.openwall.com/lists/oss-security/2022/03/24/1</a><br><a href="https://www.openwall.com/lists/oss-security/2022/03/28/1">https://www.openwall.com/lists/oss-security/2022/03/28/1</a><br><a href="https://www.openwall.com/lists/oss-security/2022/03/28/3">https://www.openwall.com/lists/oss-security/2022/03/28/3</a><br></details> |
|
||||
|
||||
|
||||
|
||||
|
||||
| No Vulnerabilities found |
|
||||
|:---------------------------------|
|
||||
@@ -1,64 +0,0 @@
|
||||
{{/*
|
||||
Create the matchable regex from domain
|
||||
*/}}
|
||||
{{- define "k8s-gateway.configmap.regex" -}}
|
||||
{{- if .Values.domain }}
|
||||
{{- .Values.domain | replace "." "[.]" -}}
|
||||
{{- else -}}
|
||||
{{ "unset" }}
|
||||
{{- end }}
|
||||
{{- end -}}
|
||||
|
||||
{{/* Define the configmap */}}
|
||||
{{- define "k8s-gateway.configmap" -}}
|
||||
{{- $values := .Values }}
|
||||
{{- $fqdn := ( include "common.names.fqdn" . ) }}
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: ConfigMap
|
||||
metadata:
|
||||
name: {{ include "common.names.fullname" . }}-corefile
|
||||
labels:
|
||||
{{- include "common.labels" . | nindent 4 }}
|
||||
data:
|
||||
Corefile: |-
|
||||
.:53 {
|
||||
errors
|
||||
log
|
||||
health {
|
||||
lameduck 5s
|
||||
}
|
||||
ready
|
||||
{{- range .Values.domains }}
|
||||
{{- if .dnsChallenge.enabled }}
|
||||
template IN ANY {{ required "Delegated domain ('domain') is mandatory " .domain }} {
|
||||
match "_acme-challenge[.](.*)[.]{{ include "k8s-gateway.configmap.regex" . }}"
|
||||
answer "{{ "{{" }} .Name {{ "}}" }} 5 IN CNAME {{ "{{" }} index .Match 1 {{ "}}" }}.{{ required "DNS01 challenge domain is mandatory " $values.dnsChallenge.domain }}"
|
||||
fallthrough
|
||||
}
|
||||
{{- end }}
|
||||
k8s_gateway "{{ required "Delegated domain ('domain') is mandatory " .domain }}" {
|
||||
apex {{ $values.apex | default $fqdn }}
|
||||
ttl {{ $values.ttl }}
|
||||
{{- if $values.secondary }}
|
||||
secondary {{ $values.secondary }}
|
||||
{{- end }}
|
||||
{{- if $values.watchedResources }}
|
||||
resources {{ join " " $values.watchedResources }}
|
||||
{{- end }}
|
||||
fallthrough
|
||||
}
|
||||
{{- end }}
|
||||
prometheus 0.0.0.0:9153
|
||||
{{- if .Values.forward.enabled }}
|
||||
forward . {{ .Values.forward.primary }} {{ .Values.forward.secondary }} {
|
||||
{{- range .Values.forward.options }}
|
||||
{{ .name }} {{ .value }}
|
||||
{{- end }}
|
||||
}
|
||||
{{- end }}
|
||||
loop
|
||||
reload
|
||||
loadbalance
|
||||
}
|
||||
{{- end -}}
|
||||
@@ -1,24 +0,0 @@
|
||||
{{/* Make sure all variables are set properly */}}
|
||||
{{- include "common.setup" . }}
|
||||
|
||||
|
||||
{{/* Render configmap for nextcloud */}}
|
||||
{{- include "k8s-gateway.configmap" . }}
|
||||
|
||||
{{/* Append the general configMap volume to the volumes */}}
|
||||
{{- define "k8s-gateway.configvolume" -}}
|
||||
enabled: "true"
|
||||
mountPath: "/etc/coredns"
|
||||
readOnly: true
|
||||
type: "custom"
|
||||
volumeSpec:
|
||||
configMap:
|
||||
name: {{ include "common.names.fullname" . }}-corefile
|
||||
items:
|
||||
- key: Corefile
|
||||
path: Corefile
|
||||
{{- end -}}
|
||||
|
||||
{{- $_ := set .Values.persistence "config-volume" (include "k8s-gateway.configvolume" . | fromYaml) -}}
|
||||
{{/* Render the templates */}}
|
||||
{{ include "common.postSetup" . }}
|
||||
@@ -1,118 +0,0 @@
|
||||
image:
|
||||
repository: tccr.io/truecharts/k8s_gateway
|
||||
pullPolicy: IfNotPresent
|
||||
tag: v0.2.4@sha256:cc621e57c73aab461b64e561d56181c9f67b59d006ab548fedfee660f08965f9
|
||||
|
||||
securityContext:
|
||||
runAsNonRoot: false
|
||||
|
||||
podSecurityContext:
|
||||
runAsUser: 0
|
||||
runAsGroup: 0
|
||||
|
||||
args: ["-conf", "/etc/coredns/Corefile"]
|
||||
|
||||
# -- TTL for non-apex responses (in seconds)
|
||||
ttl: 300
|
||||
|
||||
# -- Limit what kind of resources to watch, e.g. watchedResources: ["Ingress"]
|
||||
watchedResources: []
|
||||
|
||||
# -- Service name of a secondary DNS server (should be `serviceName.namespace`)
|
||||
secondary: ""
|
||||
|
||||
# -- Override the default `serviceName.namespace` domain apex
|
||||
apex: ""
|
||||
|
||||
# -- list of processed domains
|
||||
domains:
|
||||
# -- Delegated domain
|
||||
- domain: "example.com"
|
||||
# -- Optional configuration option for DNS01 challenge that will redirect all acme
|
||||
# challenge requests to external cloud domain (e.g. managed by cert-manager)
|
||||
# See: https://cert-manager.io/docs/configuration/acme/dns01/
|
||||
dnsChallenge:
|
||||
enabled: false
|
||||
domain: dns01.clouddns.com
|
||||
|
||||
forward:
|
||||
enabled: true
|
||||
primary: tls://1.1.1.1
|
||||
secondary: tls://1.0.0.1
|
||||
options:
|
||||
- name: tls_servername
|
||||
value: cloudflare-dns.com
|
||||
|
||||
serviceAccount:
|
||||
# -- Specifies whether a service account should be created
|
||||
create: true
|
||||
|
||||
# -- Create a ClusterRole and ClusterRoleBinding
|
||||
# @default -- See below
|
||||
rbac:
|
||||
# -- Enables or disables the ClusterRole and ClusterRoleBinding
|
||||
enabled: true
|
||||
|
||||
# -- Set Rules on the ClusterRole
|
||||
rules:
|
||||
- apiGroups:
|
||||
- ""
|
||||
resources:
|
||||
- services
|
||||
- namespaces
|
||||
verbs:
|
||||
- list
|
||||
- watch
|
||||
- apiGroups:
|
||||
- extensions
|
||||
- networking.k8s.io
|
||||
resources:
|
||||
- ingresses
|
||||
verbs:
|
||||
- list
|
||||
- watch
|
||||
|
||||
service:
|
||||
main:
|
||||
ports:
|
||||
main:
|
||||
protocol: UDP
|
||||
port: 53
|
||||
targetPort: 53
|
||||
|
||||
probes:
|
||||
liveness:
|
||||
custom: true
|
||||
spec:
|
||||
httpGet:
|
||||
path: /health
|
||||
port: 8080
|
||||
scheme: HTTP
|
||||
initialDelaySeconds: 60
|
||||
timeoutSeconds: 5
|
||||
successThreshold: 1
|
||||
failureThreshold: 5
|
||||
|
||||
readiness:
|
||||
custom: true
|
||||
spec:
|
||||
httpGet:
|
||||
path: /ready
|
||||
port: 8181
|
||||
scheme: HTTP
|
||||
initialDelaySeconds: 10
|
||||
timeoutSeconds: 5
|
||||
successThreshold: 1
|
||||
failureThreshold: 5
|
||||
|
||||
startup:
|
||||
custom: true
|
||||
spec:
|
||||
httpGet:
|
||||
path: /ready
|
||||
port: 8181
|
||||
scheme: HTTP
|
||||
initialDelaySeconds: 3
|
||||
timeoutSeconds: 2
|
||||
periodSeconds: 5
|
||||
failureThreshold: 60
|
||||
@@ -1,23 +0,0 @@
|
||||
# Patterns to ignore when building packages.
|
||||
# This supports shell glob matching, relative path matching, and
|
||||
# negation (prefixed with !). Only one pattern per line.
|
||||
.DS_Store
|
||||
# Common VCS dirs
|
||||
.git/
|
||||
.gitignore
|
||||
.bzr/
|
||||
.bzrignore
|
||||
.hg/
|
||||
.hgignore
|
||||
.svn/
|
||||
# Common backup files
|
||||
*.swp
|
||||
*.bak
|
||||
*.tmp
|
||||
*.orig
|
||||
*~
|
||||
# Various IDEs
|
||||
.project
|
||||
.idea/
|
||||
*.tmproj
|
||||
.vscode/
|
||||
@@ -1,78 +0,0 @@
|
||||
# Changelog<br>
|
||||
|
||||
|
||||
<a name="metallb-1.0.5"></a>
|
||||
### [metallb-1.0.5](https://github.com/truecharts/apps/compare/metallb-1.0.4...metallb-1.0.5) (2022-03-26)
|
||||
|
||||
#### Chore
|
||||
|
||||
* bump all apps to trigger ci
|
||||
|
||||
|
||||
|
||||
<a name="metallb-1.0.4"></a>
|
||||
### [metallb-1.0.4](https://github.com/truecharts/apps/compare/metallb-1.0.3...metallb-1.0.4) (2022-02-21)
|
||||
|
||||
#### Chore
|
||||
|
||||
* update helm general non-major helm releases ([#1927](https://github.com/truecharts/apps/issues/1927))
|
||||
|
||||
#### Fix
|
||||
|
||||
* correct mistake in renovate bump
|
||||
|
||||
|
||||
|
||||
<a name="metallb-1.0.3"></a>
|
||||
### [metallb-1.0.3](https://github.com/truecharts/apps/compare/metallb-1.0.2...metallb-1.0.3) (2021-12-19)
|
||||
|
||||
#### Chore
|
||||
|
||||
* Last patch bump before RC2 branch-off
|
||||
* App-Icon Organization ([#1539](https://github.com/truecharts/apps/issues/1539))
|
||||
|
||||
|
||||
|
||||
<a name="metallb-1.0.2"></a>
|
||||
### metallb-1.0.2 (2021-12-13)
|
||||
|
||||
#### Chore
|
||||
|
||||
* move incubator apps to stable and bump everything
|
||||
|
||||
|
||||
|
||||
<a name="metallb-1.0.1"></a>
|
||||
### [metallb-1.0.1](https://github.com/truecharts/apps/compare/metallb-1.0.0...metallb-1.0.1) (2021-12-04)
|
||||
|
||||
#### Chore
|
||||
|
||||
* bump apps to generate security page
|
||||
|
||||
|
||||
|
||||
<a name="metallb-1.0.0"></a>
|
||||
### [metallb-1.0.0](https://github.com/truecharts/apps/compare/metallb-0.0.3...metallb-1.0.0) (2021-11-19)
|
||||
|
||||
#### Chore
|
||||
|
||||
* move metallb to core train
|
||||
|
||||
|
||||
|
||||
<a name="metallb-0.0.3"></a>
|
||||
### [metallb-0.0.3](https://github.com/truecharts/apps/compare/metallb-0.0.2...metallb-0.0.3) (2021-11-10)
|
||||
|
||||
#### Fix
|
||||
|
||||
* correct questions structure
|
||||
|
||||
|
||||
|
||||
<a name="metallb-0.0.2"></a>
|
||||
### [metallb-0.0.2](https://github.com/truecharts/apps/compare/metallb-0.0.1...metallb-0.0.2) (2021-11-10)
|
||||
|
||||
|
||||
|
||||
<a name="metallb-0.0.1"></a>
|
||||
### metallb-0.0.1 (2021-11-10)
|
||||
@@ -1,7 +0,0 @@
|
||||
# Configuration Options
|
||||
|
||||
##### Connecting to other apps
|
||||
If you need to connect this App to other Apps on TrueNAS SCALE, please refer to our [Linking Apps Internally](https://truecharts.org/manual/Quick-Start%20Guides/06-linking-apps/) quick-start guide.
|
||||
|
||||
##### Available config options
|
||||
In the future this page is going to contain an automated list of options available in the installation/edit UI.
|
||||
@@ -1,29 +0,0 @@
|
||||
apiVersion: v2
|
||||
appVersion: "upstream"
|
||||
deprecated: false
|
||||
description: A network load-balancer implementation for Kubernetes using standard routing protocols
|
||||
home: https://github.com/truecharts/apps/tree/master/charts/stable/metallb
|
||||
icon: https://truecharts.org/_static/img/appicons/metallb.png
|
||||
keywords:
|
||||
- metallb
|
||||
- loadbalancer
|
||||
dependencies:
|
||||
- name: metallb
|
||||
repository: https://metallb.github.io/metallb
|
||||
version: 0.12.1
|
||||
kubeVersion: '>=1.16.0-0'
|
||||
maintainers:
|
||||
- email: [email protected]
|
||||
name: TrueCharts
|
||||
url: https://truecharts.org
|
||||
name: metallb
|
||||
sources:
|
||||
- https://github.com/metallb/metallb
|
||||
- https://metallb.universe.tf
|
||||
type: application
|
||||
version: 1.0.5
|
||||
annotations:
|
||||
truecharts.org/catagories: |
|
||||
- core
|
||||
truecharts.org/SCALE-support: "true"
|
||||
truecharts.org/grade: U
|
||||
@@ -1,38 +0,0 @@
|
||||
# Introduction
|
||||
|
||||
A network load-balancer implementation for Kubernetes using standard routing protocols
|
||||
|
||||
TrueCharts are designed to be installed as TrueNAS SCALE app only. We can not guarantee this charts works as a stand-alone helm installation.
|
||||
**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/apps/issues/new/choose)**
|
||||
|
||||
## Source Code
|
||||
|
||||
* <https://github.com/metallb/metallb>
|
||||
* <https://metallb.universe.tf>
|
||||
|
||||
## Requirements
|
||||
|
||||
Kubernetes: `>=1.16.0-0`
|
||||
|
||||
## Dependencies
|
||||
|
||||
| Repository | Name | Version |
|
||||
|------------|------|---------|
|
||||
| https://metallb.github.io/metallb | metallb | 0.12.1 |
|
||||
|
||||
## Installing the Chart
|
||||
|
||||
To install this App on TrueNAS SCALE check our [Quick-Start Guide](https://truecharts.org/manual/Quick-Start%20Guides/02-Installing-an-App/).
|
||||
|
||||
## Upgrading, Rolling Back and Uninstalling the Chart
|
||||
|
||||
To upgrade, rollback or delete this App from TrueNAS SCALE check our [Quick-Start Guide](https://truecharts.org/manual/Quick-Start%20Guides/04-Upgrade-rollback-delete-an-App/).
|
||||
|
||||
## Support
|
||||
|
||||
- Please check our [quick-start guides](https://truecharts.org/manual/Quick-Start%20Guides/01-Adding-TrueCharts/) first.
|
||||
- See the [Wiki](https://truecharts.org)
|
||||
- Check our [Discord](https://discord.gg/tVsPTHWTtr)
|
||||
- Open a [issue](https://github.com/truecharts/apps/issues/new/choose)
|
||||
---
|
||||
All Rights Reserved - The TrueCharts Project
|
||||
@@ -1,19 +0,0 @@
|
||||
# Default Helm-Values
|
||||
|
||||
TrueCharts is primarily build to supply TrueNAS SCALE Apps.
|
||||
However, we also supply all Apps as standard Helm-Charts. In this document we aim to document the default values in our values.yaml file.
|
||||
|
||||
Most of our Apps also consume our "common" Helm Chart.
|
||||
If this is the case, this means that all values.yaml values are set to the common chart values.yaml by default. This values.yaml file will only contain values that deviate from the common chart.
|
||||
You will, however, be able to use all values referenced in the common chart here, besides the values listed in this document.
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| image.pullPolicy | string | `"IfNotPresent"` | |
|
||||
| image.repository | string | `"placeholder"` | |
|
||||
| image.tag | string | `"upstream"` | |
|
||||
| metallb.configInline | object | `{}` | format. When configInline is used, Helm manages MetalLB's configuration ConfigMap as part of the release, and existingConfigMap is ignored. Refer to https://metallb.universe.tf/configuration/ for available options. |
|
||||
|
||||
All Rights Reserved - The TrueCharts Project
|
||||
@@ -1,101 +0,0 @@
|
||||
---
|
||||
hide:
|
||||
- toc
|
||||
---
|
||||
|
||||
# Security Overview
|
||||
|
||||
<link href="https://truecharts.org/_static/trivy.css" type="text/css" rel="stylesheet" />
|
||||
|
||||
## Helm-Chart
|
||||
|
||||
##### Scan Results
|
||||
|
||||
#### Chart Object: metallb/charts/metallb/templates/controller.yaml
|
||||
|
||||
|
||||
|
||||
| Type | Misconfiguration ID | Check | Severity | Explaination | Links |
|
||||
|:----------------|:------------------:|:-----------:|:------------------:|-----------------------------------------|-----------------------------------------|
|
||||
| Kubernetes Security Check | KSV011 | CPU not limited | LOW | <details><summary>Expand...</summary> Enforcing CPU limits prevents DoS via resource exhaustion. <br> <hr> <br> Container 'controller' of Deployment 'RELEASE-NAME-metallb-controller' should set 'resources.limits.cpu' </details>| <details><summary>Expand...</summary><a href="https://cloud.google.com/blog/products/containers-kubernetes/kubernetes-best-practices-resource-requests-and-limits">https://cloud.google.com/blog/products/containers-kubernetes/kubernetes-best-practices-resource-requests-and-limits</a><br><a href="https://avd.aquasec.com/appshield/ksv011">https://avd.aquasec.com/appshield/ksv011</a><br></details> |
|
||||
| Kubernetes Security Check | KSV015 | CPU requests not specified | LOW | <details><summary>Expand...</summary> When containers have resource requests specified, the scheduler can make better decisions about which nodes to place pods on, and how to deal with resource contention. <br> <hr> <br> Container 'controller' of Deployment 'RELEASE-NAME-metallb-controller' should set 'resources.requests.cpu' </details>| <details><summary>Expand...</summary><a href="https://cloud.google.com/blog/products/containers-kubernetes/kubernetes-best-practices-resource-requests-and-limits">https://cloud.google.com/blog/products/containers-kubernetes/kubernetes-best-practices-resource-requests-and-limits</a><br><a href="https://avd.aquasec.com/appshield/ksv015">https://avd.aquasec.com/appshield/ksv015</a><br></details> |
|
||||
| Kubernetes Security Check | KSV016 | Memory requests not specified | LOW | <details><summary>Expand...</summary> When containers have memory requests specified, the scheduler can make better decisions about which nodes to place pods on, and how to deal with resource contention. <br> <hr> <br> Container 'controller' of Deployment 'RELEASE-NAME-metallb-controller' should set 'resources.requests.memory' </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-resources-limits-memory/">https://kubesec.io/basics/containers-resources-limits-memory/</a><br><a href="https://avd.aquasec.com/appshield/ksv016">https://avd.aquasec.com/appshield/ksv016</a><br></details> |
|
||||
| Kubernetes Security Check | KSV018 | Memory not limited | LOW | <details><summary>Expand...</summary> Enforcing memory limits prevents DoS via resource exhaustion. <br> <hr> <br> Container 'controller' of Deployment 'RELEASE-NAME-metallb-controller' should set 'resources.limits.memory' </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-resources-limits-memory/">https://kubesec.io/basics/containers-resources-limits-memory/</a><br><a href="https://avd.aquasec.com/appshield/ksv018">https://avd.aquasec.com/appshield/ksv018</a><br></details> |
|
||||
| Kubernetes Security Check | KSV020 | Runs with low user ID | MEDIUM | <details><summary>Expand...</summary> Force the container to run with user ID > 10000 to avoid conflicts with the host’s user table. <br> <hr> <br> Container 'controller' of Deployment 'RELEASE-NAME-metallb-controller' should set 'securityContext.runAsUser' > 10000 </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-securitycontext-runasuser/">https://kubesec.io/basics/containers-securitycontext-runasuser/</a><br><a href="https://avd.aquasec.com/appshield/ksv020">https://avd.aquasec.com/appshield/ksv020</a><br></details> |
|
||||
| Kubernetes Security Check | KSV021 | Runs with low group ID | MEDIUM | <details><summary>Expand...</summary> Force the container to run with group ID > 10000 to avoid conflicts with the host’s user table. <br> <hr> <br> Container 'controller' of Deployment 'RELEASE-NAME-metallb-controller' should set 'securityContext.runAsGroup' > 10000 </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-securitycontext-runasuser/">https://kubesec.io/basics/containers-securitycontext-runasuser/</a><br><a href="https://avd.aquasec.com/appshield/ksv021">https://avd.aquasec.com/appshield/ksv021</a><br></details> |
|
||||
| Kubernetes Security Check | KSV029 | A root primary or supplementary GID set | LOW | <details><summary>Expand...</summary> Containers should be forbidden from running with a root primary or supplementary GID. <br> <hr> <br> Deployment 'RELEASE-NAME-metallb-controller' should set 'spec.securityContext.runAsGroup', 'spec.securityContext.supplementalGroups[*]' and 'spec.securityContext.fsGroup' to integer greater than 0 </details>| <details><summary>Expand...</summary><a href="https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted">https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted</a><br><a href="https://avd.aquasec.com/appshield/ksv029">https://avd.aquasec.com/appshield/ksv029</a><br></details> |
|
||||
|
||||
|
||||
| No Misconfigurations found |
|
||||
|:---------------------------------|
|
||||
|
||||
|
||||
|
||||
|
||||
| Type | Misconfiguration ID | Check | Severity | Explaination | Links |
|
||||
|:----------------|:------------------:|:-----------:|:------------------:|-----------------------------------------|-----------------------------------------|
|
||||
| Kubernetes Security Check | KSV009 | Access to host network | HIGH | <details><summary>Expand...</summary> Sharing the host’s network namespace permits processes in the pod to communicate with processes bound to the host’s loopback adapter. <br> <hr> <br> DaemonSet 'RELEASE-NAME-metallb-speaker' should not set 'spec.template.spec.hostNetwork' to true </details>| <details><summary>Expand...</summary><a href="https://kubernetes.io/docs/concepts/security/pod-security-standards/#baseline">https://kubernetes.io/docs/concepts/security/pod-security-standards/#baseline</a><br><a href="https://avd.aquasec.com/appshield/ksv009">https://avd.aquasec.com/appshield/ksv009</a><br></details> |
|
||||
| Kubernetes Security Check | KSV011 | CPU not limited | LOW | <details><summary>Expand...</summary> Enforcing CPU limits prevents DoS via resource exhaustion. <br> <hr> <br> Container 'speaker' of DaemonSet 'RELEASE-NAME-metallb-speaker' should set 'resources.limits.cpu' </details>| <details><summary>Expand...</summary><a href="https://cloud.google.com/blog/products/containers-kubernetes/kubernetes-best-practices-resource-requests-and-limits">https://cloud.google.com/blog/products/containers-kubernetes/kubernetes-best-practices-resource-requests-and-limits</a><br><a href="https://avd.aquasec.com/appshield/ksv011">https://avd.aquasec.com/appshield/ksv011</a><br></details> |
|
||||
| Kubernetes Security Check | KSV012 | Runs as root user | MEDIUM | <details><summary>Expand...</summary> 'runAsNonRoot' forces the running image to run as a non-root user to ensure least privileges. <br> <hr> <br> Container 'speaker' of DaemonSet 'RELEASE-NAME-metallb-speaker' should set 'securityContext.runAsNonRoot' to true </details>| <details><summary>Expand...</summary><a href="https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted">https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted</a><br><a href="https://avd.aquasec.com/appshield/ksv012">https://avd.aquasec.com/appshield/ksv012</a><br></details> |
|
||||
| Kubernetes Security Check | KSV015 | CPU requests not specified | LOW | <details><summary>Expand...</summary> When containers have resource requests specified, the scheduler can make better decisions about which nodes to place pods on, and how to deal with resource contention. <br> <hr> <br> Container 'speaker' of DaemonSet 'RELEASE-NAME-metallb-speaker' should set 'resources.requests.cpu' </details>| <details><summary>Expand...</summary><a href="https://cloud.google.com/blog/products/containers-kubernetes/kubernetes-best-practices-resource-requests-and-limits">https://cloud.google.com/blog/products/containers-kubernetes/kubernetes-best-practices-resource-requests-and-limits</a><br><a href="https://avd.aquasec.com/appshield/ksv015">https://avd.aquasec.com/appshield/ksv015</a><br></details> |
|
||||
| Kubernetes Security Check | KSV016 | Memory requests not specified | LOW | <details><summary>Expand...</summary> When containers have memory requests specified, the scheduler can make better decisions about which nodes to place pods on, and how to deal with resource contention. <br> <hr> <br> Container 'speaker' of DaemonSet 'RELEASE-NAME-metallb-speaker' should set 'resources.requests.memory' </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-resources-limits-memory/">https://kubesec.io/basics/containers-resources-limits-memory/</a><br><a href="https://avd.aquasec.com/appshield/ksv016">https://avd.aquasec.com/appshield/ksv016</a><br></details> |
|
||||
| Kubernetes Security Check | KSV018 | Memory not limited | LOW | <details><summary>Expand...</summary> Enforcing memory limits prevents DoS via resource exhaustion. <br> <hr> <br> Container 'speaker' of DaemonSet 'RELEASE-NAME-metallb-speaker' should set 'resources.limits.memory' </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-resources-limits-memory/">https://kubesec.io/basics/containers-resources-limits-memory/</a><br><a href="https://avd.aquasec.com/appshield/ksv018">https://avd.aquasec.com/appshield/ksv018</a><br></details> |
|
||||
| Kubernetes Security Check | KSV020 | Runs with low user ID | MEDIUM | <details><summary>Expand...</summary> Force the container to run with user ID > 10000 to avoid conflicts with the host’s user table. <br> <hr> <br> Container 'speaker' of DaemonSet 'RELEASE-NAME-metallb-speaker' should set 'securityContext.runAsUser' > 10000 </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-securitycontext-runasuser/">https://kubesec.io/basics/containers-securitycontext-runasuser/</a><br><a href="https://avd.aquasec.com/appshield/ksv020">https://avd.aquasec.com/appshield/ksv020</a><br></details> |
|
||||
| Kubernetes Security Check | KSV021 | Runs with low group ID | MEDIUM | <details><summary>Expand...</summary> Force the container to run with group ID > 10000 to avoid conflicts with the host’s user table. <br> <hr> <br> Container 'speaker' of DaemonSet 'RELEASE-NAME-metallb-speaker' should set 'securityContext.runAsGroup' > 10000 </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-securitycontext-runasuser/">https://kubesec.io/basics/containers-securitycontext-runasuser/</a><br><a href="https://avd.aquasec.com/appshield/ksv021">https://avd.aquasec.com/appshield/ksv021</a><br></details> |
|
||||
| Kubernetes Security Check | KSV022 | Non-default capabilities added | MEDIUM | <details><summary>Expand...</summary> Adding NET_RAW or capabilities beyond the default set must be disallowed. <br> <hr> <br> Container 'speaker' of DaemonSet 'RELEASE-NAME-metallb-speaker' should not set 'securityContext.capabilities.add' </details>| <details><summary>Expand...</summary><a href="https://kubernetes.io/docs/concepts/security/pod-security-standards/#baseline">https://kubernetes.io/docs/concepts/security/pod-security-standards/#baseline</a><br><a href="https://avd.aquasec.com/appshield/ksv022">https://avd.aquasec.com/appshield/ksv022</a><br></details> |
|
||||
|
||||
## Containers
|
||||
|
||||
##### Detected Containers
|
||||
|
||||
quay.io/metallb/controller:v0.12.1
|
||||
quay.io/metallb/speaker:v0.12.1
|
||||
|
||||
##### Scan Results
|
||||
|
||||
|
||||
#### Container: quay.io/metallb/controller:v0.12.1 (alpine 3.15.0)
|
||||
|
||||
|
||||
**alpine**
|
||||
|
||||
|
||||
| Package | Vulnerability | Severity | Installed Version | Fixed Version | Links |
|
||||
|:----------------|:------------------:|:-----------:|:------------------:|:-------------:|-----------------------------------------|
|
||||
| libcrypto1.1 | CVE-2022-0778 | HIGH | 1.1.1l-r7 | 1.1.1n-r0 | <details><summary>Expand...</summary><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778</a><br><a href="https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65">https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65</a><br><a href="https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83">https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83</a><br><a href="https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246">https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246</a><br><a href="https://linux.oracle.com/cve/CVE-2022-0778.html">https://linux.oracle.com/cve/CVE-2022-0778.html</a><br><a href="https://linux.oracle.com/errata/ELSA-2022-9246.html">https://linux.oracle.com/errata/ELSA-2022-9246.html</a><br><a href="https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html">https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html</a><br><a href="https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html">https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/</a><br><a href="https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002">https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002</a><br><a href="https://security.netapp.com/advisory/ntap-20220321-0002/">https://security.netapp.com/advisory/ntap-20220321-0002/</a><br><a href="https://ubuntu.com/security/notices/USN-5328-1">https://ubuntu.com/security/notices/USN-5328-1</a><br><a href="https://ubuntu.com/security/notices/USN-5328-2">https://ubuntu.com/security/notices/USN-5328-2</a><br><a href="https://www.debian.org/security/2022/dsa-5103">https://www.debian.org/security/2022/dsa-5103</a><br><a href="https://www.openssl.org/news/secadv/20220315.txt">https://www.openssl.org/news/secadv/20220315.txt</a><br></details> |
|
||||
| libretls | CVE-2022-0778 | HIGH | 3.3.4-r2 | 3.3.4-r3 | <details><summary>Expand...</summary><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778</a><br><a href="https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65">https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65</a><br><a href="https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83">https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83</a><br><a href="https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246">https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246</a><br><a href="https://linux.oracle.com/cve/CVE-2022-0778.html">https://linux.oracle.com/cve/CVE-2022-0778.html</a><br><a href="https://linux.oracle.com/errata/ELSA-2022-9246.html">https://linux.oracle.com/errata/ELSA-2022-9246.html</a><br><a href="https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html">https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html</a><br><a href="https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html">https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/</a><br><a href="https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002">https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002</a><br><a href="https://security.netapp.com/advisory/ntap-20220321-0002/">https://security.netapp.com/advisory/ntap-20220321-0002/</a><br><a href="https://ubuntu.com/security/notices/USN-5328-1">https://ubuntu.com/security/notices/USN-5328-1</a><br><a href="https://ubuntu.com/security/notices/USN-5328-2">https://ubuntu.com/security/notices/USN-5328-2</a><br><a href="https://www.debian.org/security/2022/dsa-5103">https://www.debian.org/security/2022/dsa-5103</a><br><a href="https://www.openssl.org/news/secadv/20220315.txt">https://www.openssl.org/news/secadv/20220315.txt</a><br></details> |
|
||||
| libssl1.1 | CVE-2022-0778 | HIGH | 1.1.1l-r7 | 1.1.1n-r0 | <details><summary>Expand...</summary><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778</a><br><a href="https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65">https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65</a><br><a href="https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83">https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83</a><br><a href="https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246">https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246</a><br><a href="https://linux.oracle.com/cve/CVE-2022-0778.html">https://linux.oracle.com/cve/CVE-2022-0778.html</a><br><a href="https://linux.oracle.com/errata/ELSA-2022-9246.html">https://linux.oracle.com/errata/ELSA-2022-9246.html</a><br><a href="https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html">https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html</a><br><a href="https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html">https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/</a><br><a href="https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002">https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002</a><br><a href="https://security.netapp.com/advisory/ntap-20220321-0002/">https://security.netapp.com/advisory/ntap-20220321-0002/</a><br><a href="https://ubuntu.com/security/notices/USN-5328-1">https://ubuntu.com/security/notices/USN-5328-1</a><br><a href="https://ubuntu.com/security/notices/USN-5328-2">https://ubuntu.com/security/notices/USN-5328-2</a><br><a href="https://www.debian.org/security/2022/dsa-5103">https://www.debian.org/security/2022/dsa-5103</a><br><a href="https://www.openssl.org/news/secadv/20220315.txt">https://www.openssl.org/news/secadv/20220315.txt</a><br></details> |
|
||||
|
||||
**gobinary**
|
||||
|
||||
|
||||
| Package | Vulnerability | Severity | Installed Version | Fixed Version | Links |
|
||||
|:----------------|:------------------:|:-----------:|:------------------:|:-------------:|-----------------------------------------|
|
||||
| golang.org/x/text | CVE-2021-38561 | UNKNOWN | v0.3.6 | 0.3.7 | <details><summary>Expand...</summary></details> |
|
||||
|
||||
|
||||
#### Container: quay.io/metallb/speaker:v0.12.1 (alpine 3.15.0)
|
||||
|
||||
|
||||
**alpine**
|
||||
|
||||
|
||||
| Package | Vulnerability | Severity | Installed Version | Fixed Version | Links |
|
||||
|:----------------|:------------------:|:-----------:|:------------------:|:-------------:|-----------------------------------------|
|
||||
| libcrypto1.1 | CVE-2022-0778 | HIGH | 1.1.1l-r7 | 1.1.1n-r0 | <details><summary>Expand...</summary><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778</a><br><a href="https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65">https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65</a><br><a href="https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83">https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83</a><br><a href="https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246">https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246</a><br><a href="https://linux.oracle.com/cve/CVE-2022-0778.html">https://linux.oracle.com/cve/CVE-2022-0778.html</a><br><a href="https://linux.oracle.com/errata/ELSA-2022-9246.html">https://linux.oracle.com/errata/ELSA-2022-9246.html</a><br><a href="https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html">https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html</a><br><a href="https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html">https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/</a><br><a href="https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002">https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002</a><br><a href="https://security.netapp.com/advisory/ntap-20220321-0002/">https://security.netapp.com/advisory/ntap-20220321-0002/</a><br><a href="https://ubuntu.com/security/notices/USN-5328-1">https://ubuntu.com/security/notices/USN-5328-1</a><br><a href="https://ubuntu.com/security/notices/USN-5328-2">https://ubuntu.com/security/notices/USN-5328-2</a><br><a href="https://www.debian.org/security/2022/dsa-5103">https://www.debian.org/security/2022/dsa-5103</a><br><a href="https://www.openssl.org/news/secadv/20220315.txt">https://www.openssl.org/news/secadv/20220315.txt</a><br></details> |
|
||||
| libretls | CVE-2022-0778 | HIGH | 3.3.4-r2 | 3.3.4-r3 | <details><summary>Expand...</summary><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778</a><br><a href="https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65">https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65</a><br><a href="https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83">https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83</a><br><a href="https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246">https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246</a><br><a href="https://linux.oracle.com/cve/CVE-2022-0778.html">https://linux.oracle.com/cve/CVE-2022-0778.html</a><br><a href="https://linux.oracle.com/errata/ELSA-2022-9246.html">https://linux.oracle.com/errata/ELSA-2022-9246.html</a><br><a href="https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html">https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html</a><br><a href="https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html">https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/</a><br><a href="https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002">https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002</a><br><a href="https://security.netapp.com/advisory/ntap-20220321-0002/">https://security.netapp.com/advisory/ntap-20220321-0002/</a><br><a href="https://ubuntu.com/security/notices/USN-5328-1">https://ubuntu.com/security/notices/USN-5328-1</a><br><a href="https://ubuntu.com/security/notices/USN-5328-2">https://ubuntu.com/security/notices/USN-5328-2</a><br><a href="https://www.debian.org/security/2022/dsa-5103">https://www.debian.org/security/2022/dsa-5103</a><br><a href="https://www.openssl.org/news/secadv/20220315.txt">https://www.openssl.org/news/secadv/20220315.txt</a><br></details> |
|
||||
| libssl1.1 | CVE-2022-0778 | HIGH | 1.1.1l-r7 | 1.1.1n-r0 | <details><summary>Expand...</summary><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778</a><br><a href="https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65">https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65</a><br><a href="https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83">https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83</a><br><a href="https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246">https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246</a><br><a href="https://linux.oracle.com/cve/CVE-2022-0778.html">https://linux.oracle.com/cve/CVE-2022-0778.html</a><br><a href="https://linux.oracle.com/errata/ELSA-2022-9246.html">https://linux.oracle.com/errata/ELSA-2022-9246.html</a><br><a href="https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html">https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html</a><br><a href="https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html">https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/</a><br><a href="https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002">https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002</a><br><a href="https://security.netapp.com/advisory/ntap-20220321-0002/">https://security.netapp.com/advisory/ntap-20220321-0002/</a><br><a href="https://ubuntu.com/security/notices/USN-5328-1">https://ubuntu.com/security/notices/USN-5328-1</a><br><a href="https://ubuntu.com/security/notices/USN-5328-2">https://ubuntu.com/security/notices/USN-5328-2</a><br><a href="https://www.debian.org/security/2022/dsa-5103">https://www.debian.org/security/2022/dsa-5103</a><br><a href="https://www.openssl.org/news/secadv/20220315.txt">https://www.openssl.org/news/secadv/20220315.txt</a><br></details> |
|
||||
|
||||
**gobinary**
|
||||
|
||||
|
||||
| Package | Vulnerability | Severity | Installed Version | Fixed Version | Links |
|
||||
|:----------------|:------------------:|:-----------:|:------------------:|:-------------:|-----------------------------------------|
|
||||
| golang.org/x/text | CVE-2021-38561 | UNKNOWN | v0.3.6 | 0.3.7 | <details><summary>Expand...</summary></details> |
|
||||
|
||||
**gobinary**
|
||||
|
||||
|
||||
| Package | Vulnerability | Severity | Installed Version | Fixed Version | Links |
|
||||
|:----------------|:------------------:|:-----------:|:------------------:|:-------------:|-----------------------------------------|
|
||||
| golang.org/x/text | CVE-2021-38561 | UNKNOWN | v0.3.6 | 0.3.7 | <details><summary>Expand...</summary></details> |
|
||||
@@ -1,24 +0,0 @@
|
||||
# Patterns to ignore when building packages.
|
||||
# This supports shell glob matching, relative path matching, and
|
||||
# negation (prefixed with !). Only one pattern per line.
|
||||
.DS_Store
|
||||
# Common VCS dirs
|
||||
.git/
|
||||
.gitignore
|
||||
.bzr/
|
||||
.bzrignore
|
||||
.hg/
|
||||
.hgignore
|
||||
.svn/
|
||||
# Common backup files
|
||||
*.swp
|
||||
*.bak
|
||||
*.tmp
|
||||
*~
|
||||
# Various IDEs
|
||||
.project
|
||||
.idea/
|
||||
*.tmproj
|
||||
.vscode/
|
||||
# OWNERS file for Kubernetes
|
||||
OWNERS
|
||||
File diff suppressed because it is too large
Load Diff
@@ -1,7 +0,0 @@
|
||||
# Configuration Options
|
||||
|
||||
##### Connecting to other apps
|
||||
If you need to connect this App to other Apps on TrueNAS SCALE, please refer to our [Linking Apps Internally](https://truecharts.org/manual/Quick-Start%20Guides/06-linking-apps/) quick-start guide.
|
||||
|
||||
##### Available config options
|
||||
In the future this page is going to contain an automated list of options available in the installation/edit UI.
|
||||
@@ -1,36 +0,0 @@
|
||||
apiVersion: v2
|
||||
appVersion: "0.55.1"
|
||||
dependencies:
|
||||
- name: common
|
||||
repository: https://library-charts.truecharts.org
|
||||
version: 9.2.8
|
||||
- condition: exporters.enabled,exporters.node-exporter.enabled
|
||||
name: node-exporter
|
||||
repository: https://charts.bitnami.com/bitnami
|
||||
version: 2.4.9
|
||||
- condition: exporters.enabled,exporters.kube-state-metrics.enabled
|
||||
name: kube-state-metrics
|
||||
repository: https://charts.bitnami.com/bitnami
|
||||
version: 2.2.17
|
||||
deprecated: false
|
||||
description: kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.
|
||||
icon: https://truecharts.org/_static/img/appicons/prometheus.png
|
||||
home: https://github.com/truecharts/apps/tree/master/charts/stable/prometheus
|
||||
keywords:
|
||||
- metrics
|
||||
kubeVersion: '>=1.16.0-0'
|
||||
maintainers:
|
||||
- email: [email protected]
|
||||
name: TrueCharts
|
||||
url: https://truecharts.org
|
||||
name: prometheus
|
||||
sources:
|
||||
- https://github.com/prometheus-community/helm-charts
|
||||
- https://github.com/prometheus-operator/kube-prometheus
|
||||
type: application
|
||||
version: 2.0.35
|
||||
annotations:
|
||||
truecharts.org/catagories: |
|
||||
- metrics
|
||||
truecharts.org/SCALE-support: "true"
|
||||
truecharts.org/grade: U
|
||||
@@ -1,40 +0,0 @@
|
||||
# Introduction
|
||||
|
||||
kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.
|
||||
|
||||
TrueCharts are designed to be installed as TrueNAS SCALE app only. We can not guarantee this charts works as a stand-alone helm installation.
|
||||
**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/apps/issues/new/choose)**
|
||||
|
||||
## Source Code
|
||||
|
||||
* <https://github.com/prometheus-community/helm-charts>
|
||||
* <https://github.com/prometheus-operator/kube-prometheus>
|
||||
|
||||
## Requirements
|
||||
|
||||
Kubernetes: `>=1.16.0-0`
|
||||
|
||||
## Dependencies
|
||||
|
||||
| Repository | Name | Version |
|
||||
|------------|------|---------|
|
||||
| https://charts.bitnami.com/bitnami | kube-state-metrics | 2.2.17 |
|
||||
| https://charts.bitnami.com/bitnami | node-exporter | 2.4.9 |
|
||||
| https://library-charts.truecharts.org | common | 9.2.8 |
|
||||
|
||||
## Installing the Chart
|
||||
|
||||
To install this App on TrueNAS SCALE check our [Quick-Start Guide](https://truecharts.org/manual/Quick-Start%20Guides/02-Installing-an-App/).
|
||||
|
||||
## Upgrading, Rolling Back and Uninstalling the Chart
|
||||
|
||||
To upgrade, rollback or delete this App from TrueNAS SCALE check our [Quick-Start Guide](https://truecharts.org/manual/Quick-Start%20Guides/04-Upgrade-rollback-delete-an-App/).
|
||||
|
||||
## Support
|
||||
|
||||
- Please check our [quick-start guides](https://truecharts.org/manual/Quick-Start%20Guides/01-Adding-TrueCharts/) first.
|
||||
- See the [Wiki](https://truecharts.org)
|
||||
- Check our [Discord](https://discord.gg/tVsPTHWTtr)
|
||||
- Open a [issue](https://github.com/truecharts/apps/issues/new/choose)
|
||||
---
|
||||
All Rights Reserved - The TrueCharts Project
|
||||
File diff suppressed because it is too large
Load Diff
File diff suppressed because it is too large
Load Diff
@@ -1,583 +0,0 @@
|
||||
# https://raw.githubusercontent.com/prometheus-operator/prometheus-operator/v0.52.0/example/prometheus-operator-crd/monitoring.coreos.com_podmonitors.yaml
|
||||
|
||||
---
|
||||
apiVersion: apiextensions.k8s.io/v1
|
||||
kind: CustomResourceDefinition
|
||||
metadata:
|
||||
annotations:
|
||||
controller-gen.kubebuilder.io/version: v0.6.2
|
||||
creationTimestamp: null
|
||||
name: podmonitors.monitoring.coreos.com
|
||||
spec:
|
||||
group: monitoring.coreos.com
|
||||
names:
|
||||
categories:
|
||||
- prometheus-operator
|
||||
kind: PodMonitor
|
||||
listKind: PodMonitorList
|
||||
plural: podmonitors
|
||||
singular: podmonitor
|
||||
scope: Namespaced
|
||||
versions:
|
||||
- name: v1
|
||||
schema:
|
||||
openAPIV3Schema:
|
||||
description: PodMonitor defines monitoring for a set of pods.
|
||||
properties:
|
||||
apiVersion:
|
||||
description: 'APIVersion defines the versioned schema of this representation
|
||||
of an object. Servers should convert recognized schemas to the latest
|
||||
internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
|
||||
type: string
|
||||
kind:
|
||||
description: 'Kind is a string value representing the REST resource this
|
||||
object represents. Servers may infer this from the endpoint the client
|
||||
submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
|
||||
type: string
|
||||
metadata:
|
||||
type: object
|
||||
spec:
|
||||
description: Specification of desired Pod selection for target discovery
|
||||
by Prometheus.
|
||||
properties:
|
||||
jobLabel:
|
||||
description: The label to use to retrieve the job name from.
|
||||
type: string
|
||||
labelLimit:
|
||||
description: Per-scrape limit on number of labels that will be accepted
|
||||
for a sample. Only valid in Prometheus versions 2.27.0 and newer.
|
||||
format: int64
|
||||
type: integer
|
||||
labelNameLengthLimit:
|
||||
description: Per-scrape limit on length of labels name that will be
|
||||
accepted for a sample. Only valid in Prometheus versions 2.27.0
|
||||
and newer.
|
||||
format: int64
|
||||
type: integer
|
||||
labelValueLengthLimit:
|
||||
description: Per-scrape limit on length of labels value that will
|
||||
be accepted for a sample. Only valid in Prometheus versions 2.27.0
|
||||
and newer.
|
||||
format: int64
|
||||
type: integer
|
||||
namespaceSelector:
|
||||
description: Selector to select which namespaces the Endpoints objects
|
||||
are discovered from.
|
||||
properties:
|
||||
any:
|
||||
description: Boolean describing whether all namespaces are selected
|
||||
in contrast to a list restricting them.
|
||||
type: boolean
|
||||
matchNames:
|
||||
description: List of namespace names.
|
||||
items:
|
||||
type: string
|
||||
type: array
|
||||
type: object
|
||||
podMetricsEndpoints:
|
||||
description: A list of endpoints allowed as part of this PodMonitor.
|
||||
items:
|
||||
description: PodMetricsEndpoint defines a scrapeable endpoint of
|
||||
a Kubernetes Pod serving Prometheus metrics.
|
||||
properties:
|
||||
authorization:
|
||||
description: Authorization section for this endpoint
|
||||
properties:
|
||||
credentials:
|
||||
description: The secret's key that contains the credentials
|
||||
of the request
|
||||
properties:
|
||||
key:
|
||||
description: The key of the secret to select from. Must
|
||||
be a valid secret key.
|
||||
type: string
|
||||
name:
|
||||
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
|
||||
TODO: Add other useful fields. apiVersion, kind, uid?'
|
||||
type: string
|
||||
optional:
|
||||
description: Specify whether the Secret or its key must
|
||||
be defined
|
||||
type: boolean
|
||||
required:
|
||||
- key
|
||||
type: object
|
||||
type:
|
||||
description: Set the authentication type. Defaults to Bearer,
|
||||
Basic will cause an error
|
||||
type: string
|
||||
type: object
|
||||
basicAuth:
|
||||
description: 'BasicAuth allow an endpoint to authenticate over
|
||||
basic authentication. More info: https://prometheus.io/docs/operating/configuration/#endpoint'
|
||||
properties:
|
||||
password:
|
||||
description: The secret in the service monitor namespace
|
||||
that contains the password for authentication.
|
||||
properties:
|
||||
key:
|
||||
description: The key of the secret to select from. Must
|
||||
be a valid secret key.
|
||||
type: string
|
||||
name:
|
||||
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
|
||||
TODO: Add other useful fields. apiVersion, kind, uid?'
|
||||
type: string
|
||||
optional:
|
||||
description: Specify whether the Secret or its key must
|
||||
be defined
|
||||
type: boolean
|
||||
required:
|
||||
- key
|
||||
type: object
|
||||
username:
|
||||
description: The secret in the service monitor namespace
|
||||
that contains the username for authentication.
|
||||
properties:
|
||||
key:
|
||||
description: The key of the secret to select from. Must
|
||||
be a valid secret key.
|
||||
type: string
|
||||
name:
|
||||
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
|
||||
TODO: Add other useful fields. apiVersion, kind, uid?'
|
||||
type: string
|
||||
optional:
|
||||
description: Specify whether the Secret or its key must
|
||||
be defined
|
||||
type: boolean
|
||||
required:
|
||||
- key
|
||||
type: object
|
||||
type: object
|
||||
bearerTokenSecret:
|
||||
description: Secret to mount to read bearer token for scraping
|
||||
targets. The secret needs to be in the same namespace as the
|
||||
pod monitor and accessible by the Prometheus Operator.
|
||||
properties:
|
||||
key:
|
||||
description: The key of the secret to select from. Must
|
||||
be a valid secret key.
|
||||
type: string
|
||||
name:
|
||||
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
|
||||
TODO: Add other useful fields. apiVersion, kind, uid?'
|
||||
type: string
|
||||
optional:
|
||||
description: Specify whether the Secret or its key must
|
||||
be defined
|
||||
type: boolean
|
||||
required:
|
||||
- key
|
||||
type: object
|
||||
honorLabels:
|
||||
description: HonorLabels chooses the metric's labels on collisions
|
||||
with target labels.
|
||||
type: boolean
|
||||
honorTimestamps:
|
||||
description: HonorTimestamps controls whether Prometheus respects
|
||||
the timestamps present in scraped data.
|
||||
type: boolean
|
||||
interval:
|
||||
description: Interval at which metrics should be scraped
|
||||
type: string
|
||||
metricRelabelings:
|
||||
description: MetricRelabelConfigs to apply to samples before
|
||||
ingestion.
|
||||
items:
|
||||
description: 'RelabelConfig allows dynamic rewriting of the
|
||||
label set, being applied to samples before ingestion. It
|
||||
defines `<metric_relabel_configs>`-section of Prometheus
|
||||
configuration. More info: https://prometheus.io/docs/prometheus/latest/configuration/configuration/#metric_relabel_configs'
|
||||
properties:
|
||||
action:
|
||||
description: Action to perform based on regex matching.
|
||||
Default is 'replace'
|
||||
type: string
|
||||
modulus:
|
||||
description: Modulus to take of the hash of the source
|
||||
label values.
|
||||
format: int64
|
||||
type: integer
|
||||
regex:
|
||||
description: Regular expression against which the extracted
|
||||
value is matched. Default is '(.*)'
|
||||
type: string
|
||||
replacement:
|
||||
description: Replacement value against which a regex replace
|
||||
is performed if the regular expression matches. Regex
|
||||
capture groups are available. Default is '$1'
|
||||
type: string
|
||||
separator:
|
||||
description: Separator placed between concatenated source
|
||||
label values. default is ';'.
|
||||
type: string
|
||||
sourceLabels:
|
||||
description: The source labels select values from existing
|
||||
labels. Their content is concatenated using the configured
|
||||
separator and matched against the configured regular
|
||||
expression for the replace, keep, and drop actions.
|
||||
items:
|
||||
type: string
|
||||
type: array
|
||||
targetLabel:
|
||||
description: Label to which the resulting value is written
|
||||
in a replace action. It is mandatory for replace actions.
|
||||
Regex capture groups are available.
|
||||
type: string
|
||||
type: object
|
||||
type: array
|
||||
oauth2:
|
||||
description: OAuth2 for the URL. Only valid in Prometheus versions
|
||||
2.27.0 and newer.
|
||||
properties:
|
||||
clientId:
|
||||
description: The secret or configmap containing the OAuth2
|
||||
client id
|
||||
properties:
|
||||
configMap:
|
||||
description: ConfigMap containing data to use for the
|
||||
targets.
|
||||
properties:
|
||||
key:
|
||||
description: The key to select.
|
||||
type: string
|
||||
name:
|
||||
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
|
||||
TODO: Add other useful fields. apiVersion, kind,
|
||||
uid?'
|
||||
type: string
|
||||
optional:
|
||||
description: Specify whether the ConfigMap or its
|
||||
key must be defined
|
||||
type: boolean
|
||||
required:
|
||||
- key
|
||||
type: object
|
||||
secret:
|
||||
description: Secret containing data to use for the targets.
|
||||
properties:
|
||||
key:
|
||||
description: The key of the secret to select from. Must
|
||||
be a valid secret key.
|
||||
type: string
|
||||
name:
|
||||
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
|
||||
TODO: Add other useful fields. apiVersion, kind,
|
||||
uid?'
|
||||
type: string
|
||||
optional:
|
||||
description: Specify whether the Secret or its key
|
||||
must be defined
|
||||
type: boolean
|
||||
required:
|
||||
- key
|
||||
type: object
|
||||
type: object
|
||||
clientSecret:
|
||||
description: The secret containing the OAuth2 client secret
|
||||
properties:
|
||||
key:
|
||||
description: The key of the secret to select from. Must
|
||||
be a valid secret key.
|
||||
type: string
|
||||
name:
|
||||
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
|
||||
TODO: Add other useful fields. apiVersion, kind, uid?'
|
||||
type: string
|
||||
optional:
|
||||
description: Specify whether the Secret or its key must
|
||||
be defined
|
||||
type: boolean
|
||||
required:
|
||||
- key
|
||||
type: object
|
||||
endpointParams:
|
||||
additionalProperties:
|
||||
type: string
|
||||
description: Parameters to append to the token URL
|
||||
type: object
|
||||
scopes:
|
||||
description: OAuth2 scopes used for the token request
|
||||
items:
|
||||
type: string
|
||||
type: array
|
||||
tokenUrl:
|
||||
description: The URL to fetch the token from
|
||||
minLength: 1
|
||||
type: string
|
||||
required:
|
||||
- clientId
|
||||
- clientSecret
|
||||
- tokenUrl
|
||||
type: object
|
||||
params:
|
||||
additionalProperties:
|
||||
items:
|
||||
type: string
|
||||
type: array
|
||||
description: Optional HTTP URL parameters
|
||||
type: object
|
||||
path:
|
||||
description: HTTP path to scrape for metrics.
|
||||
type: string
|
||||
port:
|
||||
description: Name of the pod port this endpoint refers to. Mutually
|
||||
exclusive with targetPort.
|
||||
type: string
|
||||
proxyUrl:
|
||||
description: ProxyURL eg http://proxyserver:2195 Directs scrapes
|
||||
to proxy through this endpoint.
|
||||
type: string
|
||||
relabelings:
|
||||
description: 'RelabelConfigs to apply to samples before scraping.
|
||||
Prometheus Operator automatically adds relabelings for a few
|
||||
standard Kubernetes fields and replaces original scrape job
|
||||
name with __tmp_prometheus_job_name. More info: https://prometheus.io/docs/prometheus/latest/configuration/configuration/#relabel_config'
|
||||
items:
|
||||
description: 'RelabelConfig allows dynamic rewriting of the
|
||||
label set, being applied to samples before ingestion. It
|
||||
defines `<metric_relabel_configs>`-section of Prometheus
|
||||
configuration. More info: https://prometheus.io/docs/prometheus/latest/configuration/configuration/#metric_relabel_configs'
|
||||
properties:
|
||||
action:
|
||||
description: Action to perform based on regex matching.
|
||||
Default is 'replace'
|
||||
type: string
|
||||
modulus:
|
||||
description: Modulus to take of the hash of the source
|
||||
label values.
|
||||
format: int64
|
||||
type: integer
|
||||
regex:
|
||||
description: Regular expression against which the extracted
|
||||
value is matched. Default is '(.*)'
|
||||
type: string
|
||||
replacement:
|
||||
description: Replacement value against which a regex replace
|
||||
is performed if the regular expression matches. Regex
|
||||
capture groups are available. Default is '$1'
|
||||
type: string
|
||||
separator:
|
||||
description: Separator placed between concatenated source
|
||||
label values. default is ';'.
|
||||
type: string
|
||||
sourceLabels:
|
||||
description: The source labels select values from existing
|
||||
labels. Their content is concatenated using the configured
|
||||
separator and matched against the configured regular
|
||||
expression for the replace, keep, and drop actions.
|
||||
items:
|
||||
type: string
|
||||
type: array
|
||||
targetLabel:
|
||||
description: Label to which the resulting value is written
|
||||
in a replace action. It is mandatory for replace actions.
|
||||
Regex capture groups are available.
|
||||
type: string
|
||||
type: object
|
||||
type: array
|
||||
scheme:
|
||||
description: HTTP scheme to use for scraping.
|
||||
type: string
|
||||
scrapeTimeout:
|
||||
description: Timeout after which the scrape is ended
|
||||
type: string
|
||||
targetPort:
|
||||
anyOf:
|
||||
- type: integer
|
||||
- type: string
|
||||
description: 'Deprecated: Use ''port'' instead.'
|
||||
x-kubernetes-int-or-string: true
|
||||
tlsConfig:
|
||||
description: TLS configuration to use when scraping the endpoint.
|
||||
properties:
|
||||
ca:
|
||||
description: Struct containing the CA cert to use for the
|
||||
targets.
|
||||
properties:
|
||||
configMap:
|
||||
description: ConfigMap containing data to use for the
|
||||
targets.
|
||||
properties:
|
||||
key:
|
||||
description: The key to select.
|
||||
type: string
|
||||
name:
|
||||
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
|
||||
TODO: Add other useful fields. apiVersion, kind,
|
||||
uid?'
|
||||
type: string
|
||||
optional:
|
||||
description: Specify whether the ConfigMap or its
|
||||
key must be defined
|
||||
type: boolean
|
||||
required:
|
||||
- key
|
||||
type: object
|
||||
secret:
|
||||
description: Secret containing data to use for the targets.
|
||||
properties:
|
||||
key:
|
||||
description: The key of the secret to select from. Must
|
||||
be a valid secret key.
|
||||
type: string
|
||||
name:
|
||||
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
|
||||
TODO: Add other useful fields. apiVersion, kind,
|
||||
uid?'
|
||||
type: string
|
||||
optional:
|
||||
description: Specify whether the Secret or its key
|
||||
must be defined
|
||||
type: boolean
|
||||
required:
|
||||
- key
|
||||
type: object
|
||||
type: object
|
||||
cert:
|
||||
description: Struct containing the client cert file for
|
||||
the targets.
|
||||
properties:
|
||||
configMap:
|
||||
description: ConfigMap containing data to use for the
|
||||
targets.
|
||||
properties:
|
||||
key:
|
||||
description: The key to select.
|
||||
type: string
|
||||
name:
|
||||
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
|
||||
TODO: Add other useful fields. apiVersion, kind,
|
||||
uid?'
|
||||
type: string
|
||||
optional:
|
||||
description: Specify whether the ConfigMap or its
|
||||
key must be defined
|
||||
type: boolean
|
||||
required:
|
||||
- key
|
||||
type: object
|
||||
secret:
|
||||
description: Secret containing data to use for the targets.
|
||||
properties:
|
||||
key:
|
||||
description: The key of the secret to select from. Must
|
||||
be a valid secret key.
|
||||
type: string
|
||||
name:
|
||||
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
|
||||
TODO: Add other useful fields. apiVersion, kind,
|
||||
uid?'
|
||||
type: string
|
||||
optional:
|
||||
description: Specify whether the Secret or its key
|
||||
must be defined
|
||||
type: boolean
|
||||
required:
|
||||
- key
|
||||
type: object
|
||||
type: object
|
||||
insecureSkipVerify:
|
||||
description: Disable target certificate validation.
|
||||
type: boolean
|
||||
keySecret:
|
||||
description: Secret containing the client key file for the
|
||||
targets.
|
||||
properties:
|
||||
key:
|
||||
description: The key of the secret to select from. Must
|
||||
be a valid secret key.
|
||||
type: string
|
||||
name:
|
||||
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
|
||||
TODO: Add other useful fields. apiVersion, kind, uid?'
|
||||
type: string
|
||||
optional:
|
||||
description: Specify whether the Secret or its key must
|
||||
be defined
|
||||
type: boolean
|
||||
required:
|
||||
- key
|
||||
type: object
|
||||
serverName:
|
||||
description: Used to verify the hostname for the targets.
|
||||
type: string
|
||||
type: object
|
||||
type: object
|
||||
type: array
|
||||
podTargetLabels:
|
||||
description: PodTargetLabels transfers labels on the Kubernetes Pod
|
||||
onto the target.
|
||||
items:
|
||||
type: string
|
||||
type: array
|
||||
sampleLimit:
|
||||
description: SampleLimit defines per-scrape limit on number of scraped
|
||||
samples that will be accepted.
|
||||
format: int64
|
||||
type: integer
|
||||
selector:
|
||||
description: Selector to select Pod objects.
|
||||
properties:
|
||||
matchExpressions:
|
||||
description: matchExpressions is a list of label selector requirements.
|
||||
The requirements are ANDed.
|
||||
items:
|
||||
description: A label selector requirement is a selector that
|
||||
contains values, a key, and an operator that relates the key
|
||||
and values.
|
||||
properties:
|
||||
key:
|
||||
description: key is the label key that the selector applies
|
||||
to.
|
||||
type: string
|
||||
operator:
|
||||
description: operator represents a key's relationship to
|
||||
a set of values. Valid operators are In, NotIn, Exists
|
||||
and DoesNotExist.
|
||||
type: string
|
||||
values:
|
||||
description: values is an array of string values. If the
|
||||
operator is In or NotIn, the values array must be non-empty.
|
||||
If the operator is Exists or DoesNotExist, the values
|
||||
array must be empty. This array is replaced during a strategic
|
||||
merge patch.
|
||||
items:
|
||||
type: string
|
||||
type: array
|
||||
required:
|
||||
- key
|
||||
- operator
|
||||
type: object
|
||||
type: array
|
||||
matchLabels:
|
||||
additionalProperties:
|
||||
type: string
|
||||
description: matchLabels is a map of {key,value} pairs. A single
|
||||
{key,value} in the matchLabels map is equivalent to an element
|
||||
of matchExpressions, whose key field is "key", the operator
|
||||
is "In", and the values array contains only "value". The requirements
|
||||
are ANDed.
|
||||
type: object
|
||||
type: object
|
||||
targetLimit:
|
||||
description: TargetLimit defines a limit on the number of scraped
|
||||
targets that will be accepted.
|
||||
format: int64
|
||||
type: integer
|
||||
required:
|
||||
- podMetricsEndpoints
|
||||
- selector
|
||||
type: object
|
||||
required:
|
||||
- spec
|
||||
type: object
|
||||
served: true
|
||||
storage: true
|
||||
status:
|
||||
acceptedNames:
|
||||
kind: ""
|
||||
plural: ""
|
||||
conditions: []
|
||||
storedVersions: []
|
||||
@@ -1,613 +0,0 @@
|
||||
# https://raw.githubusercontent.com/prometheus-operator/prometheus-operator/v0.52.0/example/prometheus-operator-crd/monitoring.coreos.com_probes.yaml
|
||||
|
||||
---
|
||||
apiVersion: apiextensions.k8s.io/v1
|
||||
kind: CustomResourceDefinition
|
||||
metadata:
|
||||
annotations:
|
||||
controller-gen.kubebuilder.io/version: v0.6.2
|
||||
creationTimestamp: null
|
||||
name: probes.monitoring.coreos.com
|
||||
spec:
|
||||
group: monitoring.coreos.com
|
||||
names:
|
||||
categories:
|
||||
- prometheus-operator
|
||||
kind: Probe
|
||||
listKind: ProbeList
|
||||
plural: probes
|
||||
singular: probe
|
||||
scope: Namespaced
|
||||
versions:
|
||||
- name: v1
|
||||
schema:
|
||||
openAPIV3Schema:
|
||||
description: Probe defines monitoring for a set of static targets or ingresses.
|
||||
properties:
|
||||
apiVersion:
|
||||
description: 'APIVersion defines the versioned schema of this representation
|
||||
of an object. Servers should convert recognized schemas to the latest
|
||||
internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
|
||||
type: string
|
||||
kind:
|
||||
description: 'Kind is a string value representing the REST resource this
|
||||
object represents. Servers may infer this from the endpoint the client
|
||||
submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
|
||||
type: string
|
||||
metadata:
|
||||
type: object
|
||||
spec:
|
||||
description: Specification of desired Ingress selection for target discovery
|
||||
by Prometheus.
|
||||
properties:
|
||||
authorization:
|
||||
description: Authorization section for this endpoint
|
||||
properties:
|
||||
credentials:
|
||||
description: The secret's key that contains the credentials of
|
||||
the request
|
||||
properties:
|
||||
key:
|
||||
description: The key of the secret to select from. Must be
|
||||
a valid secret key.
|
||||
type: string
|
||||
name:
|
||||
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
|
||||
TODO: Add other useful fields. apiVersion, kind, uid?'
|
||||
type: string
|
||||
optional:
|
||||
description: Specify whether the Secret or its key must be
|
||||
defined
|
||||
type: boolean
|
||||
required:
|
||||
- key
|
||||
type: object
|
||||
type:
|
||||
description: Set the authentication type. Defaults to Bearer,
|
||||
Basic will cause an error
|
||||
type: string
|
||||
type: object
|
||||
basicAuth:
|
||||
description: 'BasicAuth allow an endpoint to authenticate over basic
|
||||
authentication. More info: https://prometheus.io/docs/operating/configuration/#endpoint'
|
||||
properties:
|
||||
password:
|
||||
description: The secret in the service monitor namespace that
|
||||
contains the password for authentication.
|
||||
properties:
|
||||
key:
|
||||
description: The key of the secret to select from. Must be
|
||||
a valid secret key.
|
||||
type: string
|
||||
name:
|
||||
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
|
||||
TODO: Add other useful fields. apiVersion, kind, uid?'
|
||||
type: string
|
||||
optional:
|
||||
description: Specify whether the Secret or its key must be
|
||||
defined
|
||||
type: boolean
|
||||
required:
|
||||
- key
|
||||
type: object
|
||||
username:
|
||||
description: The secret in the service monitor namespace that
|
||||
contains the username for authentication.
|
||||
properties:
|
||||
key:
|
||||
description: The key of the secret to select from. Must be
|
||||
a valid secret key.
|
||||
type: string
|
||||
name:
|
||||
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
|
||||
TODO: Add other useful fields. apiVersion, kind, uid?'
|
||||
type: string
|
||||
optional:
|
||||
description: Specify whether the Secret or its key must be
|
||||
defined
|
||||
type: boolean
|
||||
required:
|
||||
- key
|
||||
type: object
|
||||
type: object
|
||||
bearerTokenSecret:
|
||||
description: Secret to mount to read bearer token for scraping targets.
|
||||
The secret needs to be in the same namespace as the probe and accessible
|
||||
by the Prometheus Operator.
|
||||
properties:
|
||||
key:
|
||||
description: The key of the secret to select from. Must be a
|
||||
valid secret key.
|
||||
type: string
|
||||
name:
|
||||
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
|
||||
TODO: Add other useful fields. apiVersion, kind, uid?'
|
||||
type: string
|
||||
optional:
|
||||
description: Specify whether the Secret or its key must be defined
|
||||
type: boolean
|
||||
required:
|
||||
- key
|
||||
type: object
|
||||
interval:
|
||||
description: Interval at which targets are probed using the configured
|
||||
prober. If not specified Prometheus' global scrape interval is used.
|
||||
type: string
|
||||
jobName:
|
||||
description: The job name assigned to scraped metrics by default.
|
||||
type: string
|
||||
labelLimit:
|
||||
description: Per-scrape limit on number of labels that will be accepted
|
||||
for a sample. Only valid in Prometheus versions 2.27.0 and newer.
|
||||
format: int64
|
||||
type: integer
|
||||
labelNameLengthLimit:
|
||||
description: Per-scrape limit on length of labels name that will be
|
||||
accepted for a sample. Only valid in Prometheus versions 2.27.0
|
||||
and newer.
|
||||
format: int64
|
||||
type: integer
|
||||
labelValueLengthLimit:
|
||||
description: Per-scrape limit on length of labels value that will
|
||||
be accepted for a sample. Only valid in Prometheus versions 2.27.0
|
||||
and newer.
|
||||
format: int64
|
||||
type: integer
|
||||
metricRelabelings:
|
||||
description: MetricRelabelConfigs to apply to samples before ingestion.
|
||||
items:
|
||||
description: 'RelabelConfig allows dynamic rewriting of the label
|
||||
set, being applied to samples before ingestion. It defines `<metric_relabel_configs>`-section
|
||||
of Prometheus configuration. More info: https://prometheus.io/docs/prometheus/latest/configuration/configuration/#metric_relabel_configs'
|
||||
properties:
|
||||
action:
|
||||
description: Action to perform based on regex matching. Default
|
||||
is 'replace'
|
||||
type: string
|
||||
modulus:
|
||||
description: Modulus to take of the hash of the source label
|
||||
values.
|
||||
format: int64
|
||||
type: integer
|
||||
regex:
|
||||
description: Regular expression against which the extracted
|
||||
value is matched. Default is '(.*)'
|
||||
type: string
|
||||
replacement:
|
||||
description: Replacement value against which a regex replace
|
||||
is performed if the regular expression matches. Regex capture
|
||||
groups are available. Default is '$1'
|
||||
type: string
|
||||
separator:
|
||||
description: Separator placed between concatenated source label
|
||||
values. default is ';'.
|
||||
type: string
|
||||
sourceLabels:
|
||||
description: The source labels select values from existing labels.
|
||||
Their content is concatenated using the configured separator
|
||||
and matched against the configured regular expression for
|
||||
the replace, keep, and drop actions.
|
||||
items:
|
||||
type: string
|
||||
type: array
|
||||
targetLabel:
|
||||
description: Label to which the resulting value is written in
|
||||
a replace action. It is mandatory for replace actions. Regex
|
||||
capture groups are available.
|
||||
type: string
|
||||
type: object
|
||||
type: array
|
||||
module:
|
||||
description: 'The module to use for probing specifying how to probe
|
||||
the target. Example module configuring in the blackbox exporter:
|
||||
https://github.com/prometheus/blackbox_exporter/blob/master/example.yml'
|
||||
type: string
|
||||
oauth2:
|
||||
description: OAuth2 for the URL. Only valid in Prometheus versions
|
||||
2.27.0 and newer.
|
||||
properties:
|
||||
clientId:
|
||||
description: The secret or configmap containing the OAuth2 client
|
||||
id
|
||||
properties:
|
||||
configMap:
|
||||
description: ConfigMap containing data to use for the targets.
|
||||
properties:
|
||||
key:
|
||||
description: The key to select.
|
||||
type: string
|
||||
name:
|
||||
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
|
||||
TODO: Add other useful fields. apiVersion, kind, uid?'
|
||||
type: string
|
||||
optional:
|
||||
description: Specify whether the ConfigMap or its key
|
||||
must be defined
|
||||
type: boolean
|
||||
required:
|
||||
- key
|
||||
type: object
|
||||
secret:
|
||||
description: Secret containing data to use for the targets.
|
||||
properties:
|
||||
key:
|
||||
description: The key of the secret to select from. Must
|
||||
be a valid secret key.
|
||||
type: string
|
||||
name:
|
||||
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
|
||||
TODO: Add other useful fields. apiVersion, kind, uid?'
|
||||
type: string
|
||||
optional:
|
||||
description: Specify whether the Secret or its key must
|
||||
be defined
|
||||
type: boolean
|
||||
required:
|
||||
- key
|
||||
type: object
|
||||
type: object
|
||||
clientSecret:
|
||||
description: The secret containing the OAuth2 client secret
|
||||
properties:
|
||||
key:
|
||||
description: The key of the secret to select from. Must be
|
||||
a valid secret key.
|
||||
type: string
|
||||
name:
|
||||
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
|
||||
TODO: Add other useful fields. apiVersion, kind, uid?'
|
||||
type: string
|
||||
optional:
|
||||
description: Specify whether the Secret or its key must be
|
||||
defined
|
||||
type: boolean
|
||||
required:
|
||||
- key
|
||||
type: object
|
||||
endpointParams:
|
||||
additionalProperties:
|
||||
type: string
|
||||
description: Parameters to append to the token URL
|
||||
type: object
|
||||
scopes:
|
||||
description: OAuth2 scopes used for the token request
|
||||
items:
|
||||
type: string
|
||||
type: array
|
||||
tokenUrl:
|
||||
description: The URL to fetch the token from
|
||||
minLength: 1
|
||||
type: string
|
||||
required:
|
||||
- clientId
|
||||
- clientSecret
|
||||
- tokenUrl
|
||||
type: object
|
||||
prober:
|
||||
description: Specification for the prober to use for probing targets.
|
||||
The prober.URL parameter is required. Targets cannot be probed if
|
||||
left empty.
|
||||
properties:
|
||||
path:
|
||||
description: Path to collect metrics from. Defaults to `/probe`.
|
||||
type: string
|
||||
proxyUrl:
|
||||
description: Optional ProxyURL.
|
||||
type: string
|
||||
scheme:
|
||||
description: HTTP scheme to use for scraping. Defaults to `http`.
|
||||
type: string
|
||||
url:
|
||||
description: Mandatory URL of the prober.
|
||||
type: string
|
||||
required:
|
||||
- url
|
||||
type: object
|
||||
sampleLimit:
|
||||
description: SampleLimit defines per-scrape limit on number of scraped
|
||||
samples that will be accepted.
|
||||
format: int64
|
||||
type: integer
|
||||
scrapeTimeout:
|
||||
description: Timeout for scraping metrics from the Prometheus exporter.
|
||||
type: string
|
||||
targetLimit:
|
||||
description: TargetLimit defines a limit on the number of scraped
|
||||
targets that will be accepted.
|
||||
format: int64
|
||||
type: integer
|
||||
targets:
|
||||
description: Targets defines a set of static and/or dynamically discovered
|
||||
targets to be probed using the prober.
|
||||
properties:
|
||||
ingress:
|
||||
description: Ingress defines the set of dynamically discovered
|
||||
ingress objects which hosts are considered for probing.
|
||||
properties:
|
||||
namespaceSelector:
|
||||
description: Select Ingress objects by namespace.
|
||||
properties:
|
||||
any:
|
||||
description: Boolean describing whether all namespaces
|
||||
are selected in contrast to a list restricting them.
|
||||
type: boolean
|
||||
matchNames:
|
||||
description: List of namespace names.
|
||||
items:
|
||||
type: string
|
||||
type: array
|
||||
type: object
|
||||
relabelingConfigs:
|
||||
description: 'RelabelConfigs to apply to samples before ingestion.
|
||||
More info: https://prometheus.io/docs/prometheus/latest/configuration/configuration/#relabel_config'
|
||||
items:
|
||||
description: 'RelabelConfig allows dynamic rewriting of
|
||||
the label set, being applied to samples before ingestion.
|
||||
It defines `<metric_relabel_configs>`-section of Prometheus
|
||||
configuration. More info: https://prometheus.io/docs/prometheus/latest/configuration/configuration/#metric_relabel_configs'
|
||||
properties:
|
||||
action:
|
||||
description: Action to perform based on regex matching.
|
||||
Default is 'replace'
|
||||
type: string
|
||||
modulus:
|
||||
description: Modulus to take of the hash of the source
|
||||
label values.
|
||||
format: int64
|
||||
type: integer
|
||||
regex:
|
||||
description: Regular expression against which the extracted
|
||||
value is matched. Default is '(.*)'
|
||||
type: string
|
||||
replacement:
|
||||
description: Replacement value against which a regex
|
||||
replace is performed if the regular expression matches.
|
||||
Regex capture groups are available. Default is '$1'
|
||||
type: string
|
||||
separator:
|
||||
description: Separator placed between concatenated source
|
||||
label values. default is ';'.
|
||||
type: string
|
||||
sourceLabels:
|
||||
description: The source labels select values from existing
|
||||
labels. Their content is concatenated using the configured
|
||||
separator and matched against the configured regular
|
||||
expression for the replace, keep, and drop actions.
|
||||
items:
|
||||
type: string
|
||||
type: array
|
||||
targetLabel:
|
||||
description: Label to which the resulting value is written
|
||||
in a replace action. It is mandatory for replace actions.
|
||||
Regex capture groups are available.
|
||||
type: string
|
||||
type: object
|
||||
type: array
|
||||
selector:
|
||||
description: Select Ingress objects by labels.
|
||||
properties:
|
||||
matchExpressions:
|
||||
description: matchExpressions is a list of label selector
|
||||
requirements. The requirements are ANDed.
|
||||
items:
|
||||
description: A label selector requirement is a selector
|
||||
that contains values, a key, and an operator that
|
||||
relates the key and values.
|
||||
properties:
|
||||
key:
|
||||
description: key is the label key that the selector
|
||||
applies to.
|
||||
type: string
|
||||
operator:
|
||||
description: operator represents a key's relationship
|
||||
to a set of values. Valid operators are In, NotIn,
|
||||
Exists and DoesNotExist.
|
||||
type: string
|
||||
values:
|
||||
description: values is an array of string values.
|
||||
If the operator is In or NotIn, the values array
|
||||
must be non-empty. If the operator is Exists or
|
||||
DoesNotExist, the values array must be empty.
|
||||
This array is replaced during a strategic merge
|
||||
patch.
|
||||
items:
|
||||
type: string
|
||||
type: array
|
||||
required:
|
||||
- key
|
||||
- operator
|
||||
type: object
|
||||
type: array
|
||||
matchLabels:
|
||||
additionalProperties:
|
||||
type: string
|
||||
description: matchLabels is a map of {key,value} pairs.
|
||||
A single {key,value} in the matchLabels map is equivalent
|
||||
to an element of matchExpressions, whose key field is
|
||||
"key", the operator is "In", and the values array contains
|
||||
only "value". The requirements are ANDed.
|
||||
type: object
|
||||
type: object
|
||||
type: object
|
||||
staticConfig:
|
||||
description: 'StaticConfig defines static targets which are considers
|
||||
for probing. More info: https://prometheus.io/docs/prometheus/latest/configuration/configuration/#static_config.'
|
||||
properties:
|
||||
labels:
|
||||
additionalProperties:
|
||||
type: string
|
||||
description: Labels assigned to all metrics scraped from the
|
||||
targets.
|
||||
type: object
|
||||
relabelingConfigs:
|
||||
description: 'RelabelConfigs to apply to samples before ingestion.
|
||||
More info: https://prometheus.io/docs/prometheus/latest/configuration/configuration/#relabel_config'
|
||||
items:
|
||||
description: 'RelabelConfig allows dynamic rewriting of
|
||||
the label set, being applied to samples before ingestion.
|
||||
It defines `<metric_relabel_configs>`-section of Prometheus
|
||||
configuration. More info: https://prometheus.io/docs/prometheus/latest/configuration/configuration/#metric_relabel_configs'
|
||||
properties:
|
||||
action:
|
||||
description: Action to perform based on regex matching.
|
||||
Default is 'replace'
|
||||
type: string
|
||||
modulus:
|
||||
description: Modulus to take of the hash of the source
|
||||
label values.
|
||||
format: int64
|
||||
type: integer
|
||||
regex:
|
||||
description: Regular expression against which the extracted
|
||||
value is matched. Default is '(.*)'
|
||||
type: string
|
||||
replacement:
|
||||
description: Replacement value against which a regex
|
||||
replace is performed if the regular expression matches.
|
||||
Regex capture groups are available. Default is '$1'
|
||||
type: string
|
||||
separator:
|
||||
description: Separator placed between concatenated source
|
||||
label values. default is ';'.
|
||||
type: string
|
||||
sourceLabels:
|
||||
description: The source labels select values from existing
|
||||
labels. Their content is concatenated using the configured
|
||||
separator and matched against the configured regular
|
||||
expression for the replace, keep, and drop actions.
|
||||
items:
|
||||
type: string
|
||||
type: array
|
||||
targetLabel:
|
||||
description: Label to which the resulting value is written
|
||||
in a replace action. It is mandatory for replace actions.
|
||||
Regex capture groups are available.
|
||||
type: string
|
||||
type: object
|
||||
type: array
|
||||
static:
|
||||
description: Targets is a list of URLs to probe using the
|
||||
configured prober.
|
||||
items:
|
||||
type: string
|
||||
type: array
|
||||
type: object
|
||||
type: object
|
||||
tlsConfig:
|
||||
description: TLS configuration to use when scraping the endpoint.
|
||||
properties:
|
||||
ca:
|
||||
description: Struct containing the CA cert to use for the targets.
|
||||
properties:
|
||||
configMap:
|
||||
description: ConfigMap containing data to use for the targets.
|
||||
properties:
|
||||
key:
|
||||
description: The key to select.
|
||||
type: string
|
||||
name:
|
||||
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
|
||||
TODO: Add other useful fields. apiVersion, kind, uid?'
|
||||
type: string
|
||||
optional:
|
||||
description: Specify whether the ConfigMap or its key
|
||||
must be defined
|
||||
type: boolean
|
||||
required:
|
||||
- key
|
||||
type: object
|
||||
secret:
|
||||
description: Secret containing data to use for the targets.
|
||||
properties:
|
||||
key:
|
||||
description: The key of the secret to select from. Must
|
||||
be a valid secret key.
|
||||
type: string
|
||||
name:
|
||||
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
|
||||
TODO: Add other useful fields. apiVersion, kind, uid?'
|
||||
type: string
|
||||
optional:
|
||||
description: Specify whether the Secret or its key must
|
||||
be defined
|
||||
type: boolean
|
||||
required:
|
||||
- key
|
||||
type: object
|
||||
type: object
|
||||
cert:
|
||||
description: Struct containing the client cert file for the targets.
|
||||
properties:
|
||||
configMap:
|
||||
description: ConfigMap containing data to use for the targets.
|
||||
properties:
|
||||
key:
|
||||
description: The key to select.
|
||||
type: string
|
||||
name:
|
||||
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
|
||||
TODO: Add other useful fields. apiVersion, kind, uid?'
|
||||
type: string
|
||||
optional:
|
||||
description: Specify whether the ConfigMap or its key
|
||||
must be defined
|
||||
type: boolean
|
||||
required:
|
||||
- key
|
||||
type: object
|
||||
secret:
|
||||
description: Secret containing data to use for the targets.
|
||||
properties:
|
||||
key:
|
||||
description: The key of the secret to select from. Must
|
||||
be a valid secret key.
|
||||
type: string
|
||||
name:
|
||||
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
|
||||
TODO: Add other useful fields. apiVersion, kind, uid?'
|
||||
type: string
|
||||
optional:
|
||||
description: Specify whether the Secret or its key must
|
||||
be defined
|
||||
type: boolean
|
||||
required:
|
||||
- key
|
||||
type: object
|
||||
type: object
|
||||
insecureSkipVerify:
|
||||
description: Disable target certificate validation.
|
||||
type: boolean
|
||||
keySecret:
|
||||
description: Secret containing the client key file for the targets.
|
||||
properties:
|
||||
key:
|
||||
description: The key of the secret to select from. Must be
|
||||
a valid secret key.
|
||||
type: string
|
||||
name:
|
||||
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
|
||||
TODO: Add other useful fields. apiVersion, kind, uid?'
|
||||
type: string
|
||||
optional:
|
||||
description: Specify whether the Secret or its key must be
|
||||
defined
|
||||
type: boolean
|
||||
required:
|
||||
- key
|
||||
type: object
|
||||
serverName:
|
||||
description: Used to verify the hostname for the targets.
|
||||
type: string
|
||||
type: object
|
||||
type: object
|
||||
required:
|
||||
- spec
|
||||
type: object
|
||||
served: true
|
||||
storage: true
|
||||
status:
|
||||
acceptedNames:
|
||||
kind: ""
|
||||
plural: ""
|
||||
conditions: []
|
||||
storedVersions: []
|
||||
File diff suppressed because it is too large
Load Diff
@@ -1,103 +0,0 @@
|
||||
# https://raw.githubusercontent.com/prometheus-operator/prometheus-operator/v0.52.0/example/prometheus-operator-crd/monitoring.coreos.com_prometheusrules.yaml
|
||||
|
||||
---
|
||||
apiVersion: apiextensions.k8s.io/v1
|
||||
kind: CustomResourceDefinition
|
||||
metadata:
|
||||
annotations:
|
||||
controller-gen.kubebuilder.io/version: v0.6.2
|
||||
creationTimestamp: null
|
||||
name: prometheusrules.monitoring.coreos.com
|
||||
spec:
|
||||
group: monitoring.coreos.com
|
||||
names:
|
||||
categories:
|
||||
- prometheus-operator
|
||||
kind: PrometheusRule
|
||||
listKind: PrometheusRuleList
|
||||
plural: prometheusrules
|
||||
singular: prometheusrule
|
||||
scope: Namespaced
|
||||
versions:
|
||||
- name: v1
|
||||
schema:
|
||||
openAPIV3Schema:
|
||||
description: PrometheusRule defines recording and alerting rules for a Prometheus
|
||||
instance
|
||||
properties:
|
||||
apiVersion:
|
||||
description: 'APIVersion defines the versioned schema of this representation
|
||||
of an object. Servers should convert recognized schemas to the latest
|
||||
internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
|
||||
type: string
|
||||
kind:
|
||||
description: 'Kind is a string value representing the REST resource this
|
||||
object represents. Servers may infer this from the endpoint the client
|
||||
submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
|
||||
type: string
|
||||
metadata:
|
||||
type: object
|
||||
spec:
|
||||
description: Specification of desired alerting rule definitions for Prometheus.
|
||||
properties:
|
||||
groups:
|
||||
description: Content of Prometheus rule file
|
||||
items:
|
||||
description: 'RuleGroup is a list of sequentially evaluated recording
|
||||
and alerting rules. Note: PartialResponseStrategy is only used
|
||||
by ThanosRuler and will be ignored by Prometheus instances. Valid
|
||||
values for this field are ''warn'' or ''abort''. More info: https://github.com/thanos-io/thanos/blob/master/docs/components/rule.md#partial-response'
|
||||
properties:
|
||||
interval:
|
||||
type: string
|
||||
name:
|
||||
type: string
|
||||
partial_response_strategy:
|
||||
type: string
|
||||
rules:
|
||||
items:
|
||||
description: 'Rule describes an alerting or recording rule
|
||||
See Prometheus documentation: [alerting](https://www.prometheus.io/docs/prometheus/latest/configuration/alerting_rules/)
|
||||
or [recording](https://www.prometheus.io/docs/prometheus/latest/configuration/recording_rules/#recording-rules)
|
||||
rule'
|
||||
properties:
|
||||
alert:
|
||||
type: string
|
||||
annotations:
|
||||
additionalProperties:
|
||||
type: string
|
||||
type: object
|
||||
expr:
|
||||
anyOf:
|
||||
- type: integer
|
||||
- type: string
|
||||
x-kubernetes-int-or-string: true
|
||||
for:
|
||||
type: string
|
||||
labels:
|
||||
additionalProperties:
|
||||
type: string
|
||||
type: object
|
||||
record:
|
||||
type: string
|
||||
required:
|
||||
- expr
|
||||
type: object
|
||||
type: array
|
||||
required:
|
||||
- name
|
||||
- rules
|
||||
type: object
|
||||
type: array
|
||||
type: object
|
||||
required:
|
||||
- spec
|
||||
type: object
|
||||
served: true
|
||||
storage: true
|
||||
status:
|
||||
acceptedNames:
|
||||
kind: ""
|
||||
plural: ""
|
||||
conditions: []
|
||||
storedVersions: []
|
||||
@@ -1,610 +0,0 @@
|
||||
# https://raw.githubusercontent.com/prometheus-operator/prometheus-operator/v0.52.0/example/prometheus-operator-crd/monitoring.coreos.com_servicemonitors.yaml
|
||||
|
||||
---
|
||||
apiVersion: apiextensions.k8s.io/v1
|
||||
kind: CustomResourceDefinition
|
||||
metadata:
|
||||
annotations:
|
||||
controller-gen.kubebuilder.io/version: v0.6.2
|
||||
creationTimestamp: null
|
||||
name: servicemonitors.monitoring.coreos.com
|
||||
spec:
|
||||
group: monitoring.coreos.com
|
||||
names:
|
||||
categories:
|
||||
- prometheus-operator
|
||||
kind: ServiceMonitor
|
||||
listKind: ServiceMonitorList
|
||||
plural: servicemonitors
|
||||
singular: servicemonitor
|
||||
scope: Namespaced
|
||||
versions:
|
||||
- name: v1
|
||||
schema:
|
||||
openAPIV3Schema:
|
||||
description: ServiceMonitor defines monitoring for a set of services.
|
||||
properties:
|
||||
apiVersion:
|
||||
description: 'APIVersion defines the versioned schema of this representation
|
||||
of an object. Servers should convert recognized schemas to the latest
|
||||
internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
|
||||
type: string
|
||||
kind:
|
||||
description: 'Kind is a string value representing the REST resource this
|
||||
object represents. Servers may infer this from the endpoint the client
|
||||
submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
|
||||
type: string
|
||||
metadata:
|
||||
type: object
|
||||
spec:
|
||||
description: Specification of desired Service selection for target discovery
|
||||
by Prometheus.
|
||||
properties:
|
||||
endpoints:
|
||||
description: A list of endpoints allowed as part of this ServiceMonitor.
|
||||
items:
|
||||
description: Endpoint defines a scrapeable endpoint serving Prometheus
|
||||
metrics.
|
||||
properties:
|
||||
authorization:
|
||||
description: Authorization section for this endpoint
|
||||
properties:
|
||||
credentials:
|
||||
description: The secret's key that contains the credentials
|
||||
of the request
|
||||
properties:
|
||||
key:
|
||||
description: The key of the secret to select from. Must
|
||||
be a valid secret key.
|
||||
type: string
|
||||
name:
|
||||
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
|
||||
TODO: Add other useful fields. apiVersion, kind, uid?'
|
||||
type: string
|
||||
optional:
|
||||
description: Specify whether the Secret or its key must
|
||||
be defined
|
||||
type: boolean
|
||||
required:
|
||||
- key
|
||||
type: object
|
||||
type:
|
||||
description: Set the authentication type. Defaults to Bearer,
|
||||
Basic will cause an error
|
||||
type: string
|
||||
type: object
|
||||
basicAuth:
|
||||
description: 'BasicAuth allow an endpoint to authenticate over
|
||||
basic authentication More info: https://prometheus.io/docs/operating/configuration/#endpoints'
|
||||
properties:
|
||||
password:
|
||||
description: The secret in the service monitor namespace
|
||||
that contains the password for authentication.
|
||||
properties:
|
||||
key:
|
||||
description: The key of the secret to select from. Must
|
||||
be a valid secret key.
|
||||
type: string
|
||||
name:
|
||||
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
|
||||
TODO: Add other useful fields. apiVersion, kind, uid?'
|
||||
type: string
|
||||
optional:
|
||||
description: Specify whether the Secret or its key must
|
||||
be defined
|
||||
type: boolean
|
||||
required:
|
||||
- key
|
||||
type: object
|
||||
username:
|
||||
description: The secret in the service monitor namespace
|
||||
that contains the username for authentication.
|
||||
properties:
|
||||
key:
|
||||
description: The key of the secret to select from. Must
|
||||
be a valid secret key.
|
||||
type: string
|
||||
name:
|
||||
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
|
||||
TODO: Add other useful fields. apiVersion, kind, uid?'
|
||||
type: string
|
||||
optional:
|
||||
description: Specify whether the Secret or its key must
|
||||
be defined
|
||||
type: boolean
|
||||
required:
|
||||
- key
|
||||
type: object
|
||||
type: object
|
||||
bearerTokenFile:
|
||||
description: File to read bearer token for scraping targets.
|
||||
type: string
|
||||
bearerTokenSecret:
|
||||
description: Secret to mount to read bearer token for scraping
|
||||
targets. The secret needs to be in the same namespace as the
|
||||
service monitor and accessible by the Prometheus Operator.
|
||||
properties:
|
||||
key:
|
||||
description: The key of the secret to select from. Must
|
||||
be a valid secret key.
|
||||
type: string
|
||||
name:
|
||||
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
|
||||
TODO: Add other useful fields. apiVersion, kind, uid?'
|
||||
type: string
|
||||
optional:
|
||||
description: Specify whether the Secret or its key must
|
||||
be defined
|
||||
type: boolean
|
||||
required:
|
||||
- key
|
||||
type: object
|
||||
honorLabels:
|
||||
description: HonorLabels chooses the metric's labels on collisions
|
||||
with target labels.
|
||||
type: boolean
|
||||
honorTimestamps:
|
||||
description: HonorTimestamps controls whether Prometheus respects
|
||||
the timestamps present in scraped data.
|
||||
type: boolean
|
||||
interval:
|
||||
description: Interval at which metrics should be scraped
|
||||
type: string
|
||||
metricRelabelings:
|
||||
description: MetricRelabelConfigs to apply to samples before
|
||||
ingestion.
|
||||
items:
|
||||
description: 'RelabelConfig allows dynamic rewriting of the
|
||||
label set, being applied to samples before ingestion. It
|
||||
defines `<metric_relabel_configs>`-section of Prometheus
|
||||
configuration. More info: https://prometheus.io/docs/prometheus/latest/configuration/configuration/#metric_relabel_configs'
|
||||
properties:
|
||||
action:
|
||||
description: Action to perform based on regex matching.
|
||||
Default is 'replace'
|
||||
type: string
|
||||
modulus:
|
||||
description: Modulus to take of the hash of the source
|
||||
label values.
|
||||
format: int64
|
||||
type: integer
|
||||
regex:
|
||||
description: Regular expression against which the extracted
|
||||
value is matched. Default is '(.*)'
|
||||
type: string
|
||||
replacement:
|
||||
description: Replacement value against which a regex replace
|
||||
is performed if the regular expression matches. Regex
|
||||
capture groups are available. Default is '$1'
|
||||
type: string
|
||||
separator:
|
||||
description: Separator placed between concatenated source
|
||||
label values. default is ';'.
|
||||
type: string
|
||||
sourceLabels:
|
||||
description: The source labels select values from existing
|
||||
labels. Their content is concatenated using the configured
|
||||
separator and matched against the configured regular
|
||||
expression for the replace, keep, and drop actions.
|
||||
items:
|
||||
type: string
|
||||
type: array
|
||||
targetLabel:
|
||||
description: Label to which the resulting value is written
|
||||
in a replace action. It is mandatory for replace actions.
|
||||
Regex capture groups are available.
|
||||
type: string
|
||||
type: object
|
||||
type: array
|
||||
oauth2:
|
||||
description: OAuth2 for the URL. Only valid in Prometheus versions
|
||||
2.27.0 and newer.
|
||||
properties:
|
||||
clientId:
|
||||
description: The secret or configmap containing the OAuth2
|
||||
client id
|
||||
properties:
|
||||
configMap:
|
||||
description: ConfigMap containing data to use for the
|
||||
targets.
|
||||
properties:
|
||||
key:
|
||||
description: The key to select.
|
||||
type: string
|
||||
name:
|
||||
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
|
||||
TODO: Add other useful fields. apiVersion, kind,
|
||||
uid?'
|
||||
type: string
|
||||
optional:
|
||||
description: Specify whether the ConfigMap or its
|
||||
key must be defined
|
||||
type: boolean
|
||||
required:
|
||||
- key
|
||||
type: object
|
||||
secret:
|
||||
description: Secret containing data to use for the targets.
|
||||
properties:
|
||||
key:
|
||||
description: The key of the secret to select from. Must
|
||||
be a valid secret key.
|
||||
type: string
|
||||
name:
|
||||
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
|
||||
TODO: Add other useful fields. apiVersion, kind,
|
||||
uid?'
|
||||
type: string
|
||||
optional:
|
||||
description: Specify whether the Secret or its key
|
||||
must be defined
|
||||
type: boolean
|
||||
required:
|
||||
- key
|
||||
type: object
|
||||
type: object
|
||||
clientSecret:
|
||||
description: The secret containing the OAuth2 client secret
|
||||
properties:
|
||||
key:
|
||||
description: The key of the secret to select from. Must
|
||||
be a valid secret key.
|
||||
type: string
|
||||
name:
|
||||
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
|
||||
TODO: Add other useful fields. apiVersion, kind, uid?'
|
||||
type: string
|
||||
optional:
|
||||
description: Specify whether the Secret or its key must
|
||||
be defined
|
||||
type: boolean
|
||||
required:
|
||||
- key
|
||||
type: object
|
||||
endpointParams:
|
||||
additionalProperties:
|
||||
type: string
|
||||
description: Parameters to append to the token URL
|
||||
type: object
|
||||
scopes:
|
||||
description: OAuth2 scopes used for the token request
|
||||
items:
|
||||
type: string
|
||||
type: array
|
||||
tokenUrl:
|
||||
description: The URL to fetch the token from
|
||||
minLength: 1
|
||||
type: string
|
||||
required:
|
||||
- clientId
|
||||
- clientSecret
|
||||
- tokenUrl
|
||||
type: object
|
||||
params:
|
||||
additionalProperties:
|
||||
items:
|
||||
type: string
|
||||
type: array
|
||||
description: Optional HTTP URL parameters
|
||||
type: object
|
||||
path:
|
||||
description: HTTP path to scrape for metrics.
|
||||
type: string
|
||||
port:
|
||||
description: Name of the service port this endpoint refers to.
|
||||
Mutually exclusive with targetPort.
|
||||
type: string
|
||||
proxyUrl:
|
||||
description: ProxyURL eg http://proxyserver:2195 Directs scrapes
|
||||
to proxy through this endpoint.
|
||||
type: string
|
||||
relabelings:
|
||||
description: 'RelabelConfigs to apply to samples before scraping.
|
||||
Prometheus Operator automatically adds relabelings for a few
|
||||
standard Kubernetes fields and replaces original scrape job
|
||||
name with __tmp_prometheus_job_name. More info: https://prometheus.io/docs/prometheus/latest/configuration/configuration/#relabel_config'
|
||||
items:
|
||||
description: 'RelabelConfig allows dynamic rewriting of the
|
||||
label set, being applied to samples before ingestion. It
|
||||
defines `<metric_relabel_configs>`-section of Prometheus
|
||||
configuration. More info: https://prometheus.io/docs/prometheus/latest/configuration/configuration/#metric_relabel_configs'
|
||||
properties:
|
||||
action:
|
||||
description: Action to perform based on regex matching.
|
||||
Default is 'replace'
|
||||
type: string
|
||||
modulus:
|
||||
description: Modulus to take of the hash of the source
|
||||
label values.
|
||||
format: int64
|
||||
type: integer
|
||||
regex:
|
||||
description: Regular expression against which the extracted
|
||||
value is matched. Default is '(.*)'
|
||||
type: string
|
||||
replacement:
|
||||
description: Replacement value against which a regex replace
|
||||
is performed if the regular expression matches. Regex
|
||||
capture groups are available. Default is '$1'
|
||||
type: string
|
||||
separator:
|
||||
description: Separator placed between concatenated source
|
||||
label values. default is ';'.
|
||||
type: string
|
||||
sourceLabels:
|
||||
description: The source labels select values from existing
|
||||
labels. Their content is concatenated using the configured
|
||||
separator and matched against the configured regular
|
||||
expression for the replace, keep, and drop actions.
|
||||
items:
|
||||
type: string
|
||||
type: array
|
||||
targetLabel:
|
||||
description: Label to which the resulting value is written
|
||||
in a replace action. It is mandatory for replace actions.
|
||||
Regex capture groups are available.
|
||||
type: string
|
||||
type: object
|
||||
type: array
|
||||
scheme:
|
||||
description: HTTP scheme to use for scraping.
|
||||
type: string
|
||||
scrapeTimeout:
|
||||
description: Timeout after which the scrape is ended
|
||||
type: string
|
||||
targetPort:
|
||||
anyOf:
|
||||
- type: integer
|
||||
- type: string
|
||||
description: Name or number of the target port of the Pod behind
|
||||
the Service, the port must be specified with container port
|
||||
property. Mutually exclusive with port.
|
||||
x-kubernetes-int-or-string: true
|
||||
tlsConfig:
|
||||
description: TLS configuration to use when scraping the endpoint
|
||||
properties:
|
||||
ca:
|
||||
description: Struct containing the CA cert to use for the
|
||||
targets.
|
||||
properties:
|
||||
configMap:
|
||||
description: ConfigMap containing data to use for the
|
||||
targets.
|
||||
properties:
|
||||
key:
|
||||
description: The key to select.
|
||||
type: string
|
||||
name:
|
||||
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
|
||||
TODO: Add other useful fields. apiVersion, kind,
|
||||
uid?'
|
||||
type: string
|
||||
optional:
|
||||
description: Specify whether the ConfigMap or its
|
||||
key must be defined
|
||||
type: boolean
|
||||
required:
|
||||
- key
|
||||
type: object
|
||||
secret:
|
||||
description: Secret containing data to use for the targets.
|
||||
properties:
|
||||
key:
|
||||
description: The key of the secret to select from. Must
|
||||
be a valid secret key.
|
||||
type: string
|
||||
name:
|
||||
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
|
||||
TODO: Add other useful fields. apiVersion, kind,
|
||||
uid?'
|
||||
type: string
|
||||
optional:
|
||||
description: Specify whether the Secret or its key
|
||||
must be defined
|
||||
type: boolean
|
||||
required:
|
||||
- key
|
||||
type: object
|
||||
type: object
|
||||
caFile:
|
||||
description: Path to the CA cert in the Prometheus container
|
||||
to use for the targets.
|
||||
type: string
|
||||
cert:
|
||||
description: Struct containing the client cert file for
|
||||
the targets.
|
||||
properties:
|
||||
configMap:
|
||||
description: ConfigMap containing data to use for the
|
||||
targets.
|
||||
properties:
|
||||
key:
|
||||
description: The key to select.
|
||||
type: string
|
||||
name:
|
||||
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
|
||||
TODO: Add other useful fields. apiVersion, kind,
|
||||
uid?'
|
||||
type: string
|
||||
optional:
|
||||
description: Specify whether the ConfigMap or its
|
||||
key must be defined
|
||||
type: boolean
|
||||
required:
|
||||
- key
|
||||
type: object
|
||||
secret:
|
||||
description: Secret containing data to use for the targets.
|
||||
properties:
|
||||
key:
|
||||
description: The key of the secret to select from. Must
|
||||
be a valid secret key.
|
||||
type: string
|
||||
name:
|
||||
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
|
||||
TODO: Add other useful fields. apiVersion, kind,
|
||||
uid?'
|
||||
type: string
|
||||
optional:
|
||||
description: Specify whether the Secret or its key
|
||||
must be defined
|
||||
type: boolean
|
||||
required:
|
||||
- key
|
||||
type: object
|
||||
type: object
|
||||
certFile:
|
||||
description: Path to the client cert file in the Prometheus
|
||||
container for the targets.
|
||||
type: string
|
||||
insecureSkipVerify:
|
||||
description: Disable target certificate validation.
|
||||
type: boolean
|
||||
keyFile:
|
||||
description: Path to the client key file in the Prometheus
|
||||
container for the targets.
|
||||
type: string
|
||||
keySecret:
|
||||
description: Secret containing the client key file for the
|
||||
targets.
|
||||
properties:
|
||||
key:
|
||||
description: The key of the secret to select from. Must
|
||||
be a valid secret key.
|
||||
type: string
|
||||
name:
|
||||
description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
|
||||
TODO: Add other useful fields. apiVersion, kind, uid?'
|
||||
type: string
|
||||
optional:
|
||||
description: Specify whether the Secret or its key must
|
||||
be defined
|
||||
type: boolean
|
||||
required:
|
||||
- key
|
||||
type: object
|
||||
serverName:
|
||||
description: Used to verify the hostname for the targets.
|
||||
type: string
|
||||
type: object
|
||||
type: object
|
||||
type: array
|
||||
jobLabel:
|
||||
description: "Chooses the label of the Kubernetes `Endpoints`. Its
|
||||
value will be used for the `job`-label's value of the created metrics.
|
||||
\n Default & fallback value: the name of the respective Kubernetes
|
||||
`Endpoint`."
|
||||
type: string
|
||||
labelLimit:
|
||||
description: Per-scrape limit on number of labels that will be accepted
|
||||
for a sample. Only valid in Prometheus versions 2.27.0 and newer.
|
||||
format: int64
|
||||
type: integer
|
||||
labelNameLengthLimit:
|
||||
description: Per-scrape limit on length of labels name that will be
|
||||
accepted for a sample. Only valid in Prometheus versions 2.27.0
|
||||
and newer.
|
||||
format: int64
|
||||
type: integer
|
||||
labelValueLengthLimit:
|
||||
description: Per-scrape limit on length of labels value that will
|
||||
be accepted for a sample. Only valid in Prometheus versions 2.27.0
|
||||
and newer.
|
||||
format: int64
|
||||
type: integer
|
||||
namespaceSelector:
|
||||
description: Selector to select which namespaces the Kubernetes Endpoints
|
||||
objects are discovered from.
|
||||
properties:
|
||||
any:
|
||||
description: Boolean describing whether all namespaces are selected
|
||||
in contrast to a list restricting them.
|
||||
type: boolean
|
||||
matchNames:
|
||||
description: List of namespace names.
|
||||
items:
|
||||
type: string
|
||||
type: array
|
||||
type: object
|
||||
podTargetLabels:
|
||||
description: PodTargetLabels transfers labels on the Kubernetes `Pod`
|
||||
onto the created metrics.
|
||||
items:
|
||||
type: string
|
||||
type: array
|
||||
sampleLimit:
|
||||
description: SampleLimit defines per-scrape limit on number of scraped
|
||||
samples that will be accepted.
|
||||
format: int64
|
||||
type: integer
|
||||
selector:
|
||||
description: Selector to select Endpoints objects.
|
||||
properties:
|
||||
matchExpressions:
|
||||
description: matchExpressions is a list of label selector requirements.
|
||||
The requirements are ANDed.
|
||||
items:
|
||||
description: A label selector requirement is a selector that
|
||||
contains values, a key, and an operator that relates the key
|
||||
and values.
|
||||
properties:
|
||||
key:
|
||||
description: key is the label key that the selector applies
|
||||
to.
|
||||
type: string
|
||||
operator:
|
||||
description: operator represents a key's relationship to
|
||||
a set of values. Valid operators are In, NotIn, Exists
|
||||
and DoesNotExist.
|
||||
type: string
|
||||
values:
|
||||
description: values is an array of string values. If the
|
||||
operator is In or NotIn, the values array must be non-empty.
|
||||
If the operator is Exists or DoesNotExist, the values
|
||||
array must be empty. This array is replaced during a strategic
|
||||
merge patch.
|
||||
items:
|
||||
type: string
|
||||
type: array
|
||||
required:
|
||||
- key
|
||||
- operator
|
||||
type: object
|
||||
type: array
|
||||
matchLabels:
|
||||
additionalProperties:
|
||||
type: string
|
||||
description: matchLabels is a map of {key,value} pairs. A single
|
||||
{key,value} in the matchLabels map is equivalent to an element
|
||||
of matchExpressions, whose key field is "key", the operator
|
||||
is "In", and the values array contains only "value". The requirements
|
||||
are ANDed.
|
||||
type: object
|
||||
type: object
|
||||
targetLabels:
|
||||
description: TargetLabels transfers labels from the Kubernetes `Service`
|
||||
onto the created metrics. All labels set in `selector.matchLabels`
|
||||
are automatically transferred.
|
||||
items:
|
||||
type: string
|
||||
type: array
|
||||
targetLimit:
|
||||
description: TargetLimit defines a limit on the number of scraped
|
||||
targets that will be accepted.
|
||||
format: int64
|
||||
type: integer
|
||||
required:
|
||||
- endpoints
|
||||
- selector
|
||||
type: object
|
||||
required:
|
||||
- spec
|
||||
type: object
|
||||
served: true
|
||||
storage: true
|
||||
status:
|
||||
acceptedNames:
|
||||
kind: ""
|
||||
plural: ""
|
||||
conditions: []
|
||||
storedVersions: []
|
||||
File diff suppressed because it is too large
Load Diff
@@ -1,353 +0,0 @@
|
||||
# Default Helm-Values
|
||||
|
||||
TrueCharts is primarily build to supply TrueNAS SCALE Apps.
|
||||
However, we also supply all Apps as standard Helm-Charts. In this document we aim to document the default values in our values.yaml file.
|
||||
|
||||
Most of our Apps also consume our "common" Helm Chart.
|
||||
If this is the case, this means that all values.yaml values are set to the common chart values.yaml by default. This values.yaml file will only contain values that deviate from the common chart.
|
||||
You will, however, be able to use all values referenced in the common chart here, besides the values listed in this document.
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| alertmanager.additionalPeers | list | `[]` | |
|
||||
| alertmanager.affinity | object | `{}` | |
|
||||
| alertmanager.config.global.resolve_timeout | string | `"5m"` | |
|
||||
| alertmanager.config.receivers[0].name | string | `"null"` | |
|
||||
| alertmanager.config.route.group_by[0] | string | `"job"` | |
|
||||
| alertmanager.config.route.group_interval | string | `"5m"` | |
|
||||
| alertmanager.config.route.group_wait | string | `"30s"` | |
|
||||
| alertmanager.config.route.receiver | string | `"null"` | |
|
||||
| alertmanager.config.route.repeat_interval | string | `"12h"` | |
|
||||
| alertmanager.config.route.routes[0].match.alertname | string | `"Watchdog"` | |
|
||||
| alertmanager.config.route.routes[0].receiver | string | `"null"` | |
|
||||
| alertmanager.configMaps | list | `[]` | |
|
||||
| alertmanager.configNamespaceSelector | object | `{}` | |
|
||||
| alertmanager.configSelector | object | `{}` | |
|
||||
| alertmanager.containerSecurityContext.allowPrivilegeEscalation | bool | `false` | |
|
||||
| alertmanager.containerSecurityContext.capabilities.drop[0] | string | `"ALL"` | |
|
||||
| alertmanager.containerSecurityContext.enabled | bool | `true` | |
|
||||
| alertmanager.containerSecurityContext.readOnlyRootFilesystem | bool | `false` | |
|
||||
| alertmanager.containerSecurityContext.runAsNonRoot | bool | `true` | |
|
||||
| alertmanager.containers | list | `[]` | |
|
||||
| alertmanager.enabled | bool | `true` | |
|
||||
| alertmanager.externalConfig | bool | `false` | |
|
||||
| alertmanager.externalUrl | string | `""` | |
|
||||
| alertmanager.listenLocal | bool | `false` | |
|
||||
| alertmanager.livenessProbe.enabled | bool | `true` | |
|
||||
| alertmanager.livenessProbe.failureThreshold | int | `120` | |
|
||||
| alertmanager.livenessProbe.initialDelaySeconds | int | `0` | |
|
||||
| alertmanager.livenessProbe.path | string | `"/-/healthy"` | |
|
||||
| alertmanager.livenessProbe.periodSeconds | int | `5` | |
|
||||
| alertmanager.livenessProbe.successThreshold | int | `1` | |
|
||||
| alertmanager.livenessProbe.timeoutSeconds | int | `3` | |
|
||||
| alertmanager.logFormat | string | `"logfmt"` | |
|
||||
| alertmanager.logLevel | string | `"info"` | |
|
||||
| alertmanager.nodeAffinityPreset.key | string | `""` | |
|
||||
| alertmanager.nodeAffinityPreset.type | string | `""` | |
|
||||
| alertmanager.nodeAffinityPreset.values | list | `[]` | |
|
||||
| alertmanager.nodeSelector | object | `{}` | |
|
||||
| alertmanager.paused | bool | `false` | |
|
||||
| alertmanager.persistence.accessModes[0] | string | `"ReadWriteOnce"` | |
|
||||
| alertmanager.persistence.enabled | bool | `true` | |
|
||||
| alertmanager.persistence.size | string | `"999Gi"` | |
|
||||
| alertmanager.persistence.storageClass | string | `""` | |
|
||||
| alertmanager.podAffinityPreset | string | `""` | |
|
||||
| alertmanager.podAntiAffinityPreset | string | `"soft"` | |
|
||||
| alertmanager.podDisruptionBudget.enabled | bool | `false` | |
|
||||
| alertmanager.podDisruptionBudget.maxUnavailable | string | `""` | |
|
||||
| alertmanager.podDisruptionBudget.minAvailable | int | `1` | |
|
||||
| alertmanager.podMetadata.annotations | object | `{}` | |
|
||||
| alertmanager.podMetadata.labels | object | `{}` | |
|
||||
| alertmanager.podSecurityContext.enabled | bool | `true` | |
|
||||
| alertmanager.podSecurityContext.fsGroup | int | `1001` | |
|
||||
| alertmanager.podSecurityContext.runAsUser | int | `1001` | |
|
||||
| alertmanager.portName | string | `"alertmanager"` | |
|
||||
| alertmanager.priorityClassName | string | `""` | |
|
||||
| alertmanager.readinessProbe.enabled | bool | `true` | |
|
||||
| alertmanager.readinessProbe.failureThreshold | int | `120` | |
|
||||
| alertmanager.readinessProbe.initialDelaySeconds | int | `0` | |
|
||||
| alertmanager.readinessProbe.path | string | `"/-/ready"` | |
|
||||
| alertmanager.readinessProbe.periodSeconds | int | `5` | |
|
||||
| alertmanager.readinessProbe.successThreshold | int | `1` | |
|
||||
| alertmanager.readinessProbe.timeoutSeconds | int | `3` | |
|
||||
| alertmanager.replicaCount | int | `1` | |
|
||||
| alertmanager.resources | object | `{}` | |
|
||||
| alertmanager.retention | string | `"240h"` | |
|
||||
| alertmanager.routePrefix | string | `"/"` | |
|
||||
| alertmanager.secrets | list | `[]` | |
|
||||
| alertmanager.serviceAccount.create | bool | `true` | |
|
||||
| alertmanager.serviceAccount.name | string | `""` | |
|
||||
| alertmanager.serviceMonitor.enabled | bool | `true` | |
|
||||
| alertmanager.serviceMonitor.interval | string | `""` | |
|
||||
| alertmanager.serviceMonitor.metricRelabelings | list | `[]` | |
|
||||
| alertmanager.serviceMonitor.relabelings | list | `[]` | |
|
||||
| alertmanager.storageSpec | object | `{}` | |
|
||||
| alertmanager.tolerations | list | `[]` | |
|
||||
| alertmanager.volumeMounts | list | `[]` | |
|
||||
| alertmanager.volumes | list | `[]` | |
|
||||
| alertmanagerImage.repository | string | `"tccr.io/truecharts/alertmanager"` | |
|
||||
| alertmanagerImage.tag | string | `"v0.24.0@sha256:f1486e23dff3ea8834796ae14b8786e0daa08751c19e6a92d1058488e8d2ca01"` | |
|
||||
| coreDns.enabled | bool | `true` | |
|
||||
| coreDns.namespace | string | `"kube-system"` | |
|
||||
| coreDns.service.enabled | bool | `true` | |
|
||||
| coreDns.service.port | int | `9153` | |
|
||||
| coreDns.service.selector | object | `{}` | |
|
||||
| coreDns.service.targetPort | int | `9153` | |
|
||||
| coreDns.serviceMonitor.interval | string | `""` | |
|
||||
| coreDns.serviceMonitor.metricRelabelings | list | `[]` | |
|
||||
| coreDns.serviceMonitor.relabelings | list | `[]` | |
|
||||
| envValueFrom.PROMETHEUS_CONFIG_RELOADER.configMapKeyRef.key | string | `"prometheus-config-reloader"` | |
|
||||
| envValueFrom.PROMETHEUS_CONFIG_RELOADER.configMapKeyRef.name | string | `"prometheus-operator-config"` | |
|
||||
| exporters.kube-state-metrics.enabled | bool | `true` | |
|
||||
| exporters.node-exporter.enabled | bool | `true` | |
|
||||
| global.labels | object | `{}` | |
|
||||
| image.repository | string | `"tccr.io/truecharts/prometheus-operator"` | |
|
||||
| image.tag | string | `"v0.55.1@sha256:0ada927f7cab9d33797414daacc1d0d3f4a8e5ff365fb4167d5145c540941f3c"` | |
|
||||
| ingress.alertmanager.enabled | bool | `false` | |
|
||||
| ingress.main.enabled | bool | `false` | |
|
||||
| ingress.thanos.enabled | bool | `false` | |
|
||||
| kube-state-metrics.serviceMonitor.enabled | bool | `true` | |
|
||||
| kube-state-metrics.serviceMonitor.honorLabels | bool | `true` | |
|
||||
| kubeApiServer.enabled | bool | `true` | |
|
||||
| kubeApiServer.serviceMonitor.interval | string | `""` | |
|
||||
| kubeApiServer.serviceMonitor.metricRelabelings | list | `[]` | |
|
||||
| kubeApiServer.serviceMonitor.relabelings | list | `[]` | |
|
||||
| kubeControllerManager.enabled | bool | `false` | |
|
||||
| kubeControllerManager.endpoints | list | `[]` | |
|
||||
| kubeControllerManager.namespace | string | `"kube-system"` | |
|
||||
| kubeControllerManager.service.enabled | bool | `true` | |
|
||||
| kubeControllerManager.service.port | int | `10252` | |
|
||||
| kubeControllerManager.service.selector | object | `{}` | |
|
||||
| kubeControllerManager.service.targetPort | int | `10252` | |
|
||||
| kubeControllerManager.serviceMonitor.https | bool | `false` | |
|
||||
| kubeControllerManager.serviceMonitor.insecureSkipVerify | string | `""` | |
|
||||
| kubeControllerManager.serviceMonitor.interval | string | `""` | |
|
||||
| kubeControllerManager.serviceMonitor.metricRelabelings | list | `[]` | |
|
||||
| kubeControllerManager.serviceMonitor.relabelings | list | `[]` | |
|
||||
| kubeControllerManager.serviceMonitor.serverName | string | `""` | |
|
||||
| kubeProxy.enabled | bool | `false` | |
|
||||
| kubeScheduler.enabled | bool | `false` | |
|
||||
| kubeScheduler.endpoints | list | `[]` | |
|
||||
| kubeScheduler.namespace | string | `"kube-system"` | |
|
||||
| kubeScheduler.service.enabled | bool | `true` | |
|
||||
| kubeScheduler.service.port | int | `10251` | |
|
||||
| kubeScheduler.service.selector | object | `{}` | |
|
||||
| kubeScheduler.service.targetPort | int | `10251` | |
|
||||
| kubeScheduler.serviceMonitor.https | bool | `false` | |
|
||||
| kubeScheduler.serviceMonitor.insecureSkipVerify | string | `""` | |
|
||||
| kubeScheduler.serviceMonitor.interval | string | `""` | |
|
||||
| kubeScheduler.serviceMonitor.metricRelabelings | list | `[]` | |
|
||||
| kubeScheduler.serviceMonitor.relabelings | list | `[]` | |
|
||||
| kubeScheduler.serviceMonitor.serverName | string | `""` | |
|
||||
| kubelet.enabled | bool | `true` | |
|
||||
| kubelet.namespace | string | `"kube-system"` | |
|
||||
| kubelet.serviceMonitor.cAdvisorMetricRelabelings | list | `[]` | |
|
||||
| kubelet.serviceMonitor.cAdvisorRelabelings | list | `[]` | |
|
||||
| kubelet.serviceMonitor.https | bool | `true` | |
|
||||
| kubelet.serviceMonitor.interval | string | `""` | |
|
||||
| kubelet.serviceMonitor.metricRelabelings | list | `[]` | |
|
||||
| kubelet.serviceMonitor.relabelings | list | `[]` | |
|
||||
| node-exporter.extraArgs."collector.filesystem.ignored-fs-types" | string | `"^(autofs|binfmt_misc|cgroup|configfs|debugfs|devpts|devtmpfs|fusectl|hugetlbfs|mqueue|overlay|proc|procfs|pstore|rpc_pipefs|securityfs|sysfs|tracefs)$"` | |
|
||||
| node-exporter.extraArgs."collector.filesystem.ignored-mount-points" | string | `"^/(dev|proc|sys|var/lib/docker/.+)($|/)"` | |
|
||||
| node-exporter.service.labels.jobLabel | string | `"node-exporter"` | |
|
||||
| node-exporter.service.port | int | `9910` | |
|
||||
| node-exporter.service.targetPort | int | `9910` | |
|
||||
| node-exporter.serviceMonitor.enabled | bool | `true` | |
|
||||
| node-exporter.serviceMonitor.jobLabel | string | `"jobLabel"` | |
|
||||
| operator.configReloaderResources | object | `{}` | |
|
||||
| operator.enabled | bool | `true` | |
|
||||
| operator.kubeletService.enabled | bool | `true` | |
|
||||
| operator.kubeletService.namespace | string | `"kube-system"` | |
|
||||
| operator.logFormat | string | `"logfmt"` | |
|
||||
| operator.logLevel | string | `"info"` | |
|
||||
| operator.prometheusConfigReloader.containerSecurityContext.allowPrivilegeEscalation | bool | `false` | |
|
||||
| operator.prometheusConfigReloader.containerSecurityContext.capabilities.drop[0] | string | `"ALL"` | |
|
||||
| operator.prometheusConfigReloader.containerSecurityContext.enabled | bool | `true` | |
|
||||
| operator.prometheusConfigReloader.containerSecurityContext.readOnlyRootFilesystem | bool | `false` | |
|
||||
| operator.prometheusConfigReloader.containerSecurityContext.runAsNonRoot | bool | `true` | |
|
||||
| operator.prometheusConfigReloader.livenessProbe.enabled | bool | `true` | |
|
||||
| operator.prometheusConfigReloader.livenessProbe.failureThreshold | int | `6` | |
|
||||
| operator.prometheusConfigReloader.livenessProbe.initialDelaySeconds | int | `10` | |
|
||||
| operator.prometheusConfigReloader.livenessProbe.periodSeconds | int | `10` | |
|
||||
| operator.prometheusConfigReloader.livenessProbe.successThreshold | int | `1` | |
|
||||
| operator.prometheusConfigReloader.livenessProbe.timeoutSeconds | int | `5` | |
|
||||
| operator.prometheusConfigReloader.readinessProbe.enabled | bool | `true` | |
|
||||
| operator.prometheusConfigReloader.readinessProbe.failureThreshold | int | `6` | |
|
||||
| operator.prometheusConfigReloader.readinessProbe.initialDelaySeconds | int | `15` | |
|
||||
| operator.prometheusConfigReloader.readinessProbe.periodSeconds | int | `20` | |
|
||||
| operator.prometheusConfigReloader.readinessProbe.successThreshold | int | `1` | |
|
||||
| operator.prometheusConfigReloader.readinessProbe.timeoutSeconds | int | `5` | |
|
||||
| operator.serviceMonitor.enabled | bool | `true` | |
|
||||
| operator.serviceMonitor.interval | string | `""` | |
|
||||
| operator.serviceMonitor.metricRelabelings | list | `[]` | |
|
||||
| operator.serviceMonitor.relabelings | list | `[]` | |
|
||||
| probes.liveness | object | See below | Liveness probe configuration |
|
||||
| probes.readiness | object | See below | Redainess probe configuration |
|
||||
| probes.startup | object | See below | Startup probe configuration |
|
||||
| prometheus.additionalAlertRelabelConfigsExternal.enabled | bool | `false` | |
|
||||
| prometheus.additionalAlertRelabelConfigsExternal.key | string | `""` | |
|
||||
| prometheus.additionalAlertRelabelConfigsExternal.name | string | `""` | |
|
||||
| prometheus.additionalPrometheusRules | list | `[]` | |
|
||||
| prometheus.additionalScrapeConfigs.enabled | bool | `false` | |
|
||||
| prometheus.additionalScrapeConfigs.external.key | string | `""` | |
|
||||
| prometheus.additionalScrapeConfigs.external.name | string | `""` | |
|
||||
| prometheus.additionalScrapeConfigs.internal.jobList | list | `[]` | |
|
||||
| prometheus.additionalScrapeConfigs.type | string | `"external"` | |
|
||||
| prometheus.additionalScrapeConfigsExternal.enabled | bool | `false` | |
|
||||
| prometheus.additionalScrapeConfigsExternal.key | string | `""` | |
|
||||
| prometheus.additionalScrapeConfigsExternal.name | string | `""` | |
|
||||
| prometheus.affinity | object | `{}` | |
|
||||
| prometheus.alertingEndpoints | list | `[]` | |
|
||||
| prometheus.configMaps | list | `[]` | |
|
||||
| prometheus.containerSecurityContext.allowPrivilegeEscalation | bool | `false` | |
|
||||
| prometheus.containerSecurityContext.capabilities.drop[0] | string | `"ALL"` | |
|
||||
| prometheus.containerSecurityContext.enabled | bool | `true` | |
|
||||
| prometheus.containerSecurityContext.readOnlyRootFilesystem | bool | `false` | |
|
||||
| prometheus.containerSecurityContext.runAsNonRoot | bool | `true` | |
|
||||
| prometheus.containers | list | `[]` | |
|
||||
| prometheus.disableCompaction | bool | `false` | |
|
||||
| prometheus.enableAdminAPI | bool | `false` | |
|
||||
| prometheus.enableFeatures | list | `[]` | |
|
||||
| prometheus.enabled | bool | `true` | |
|
||||
| prometheus.evaluationInterval | string | `""` | |
|
||||
| prometheus.externalLabels | object | `{}` | |
|
||||
| prometheus.externalUrl | string | `""` | |
|
||||
| prometheus.listenLocal | bool | `false` | |
|
||||
| prometheus.livenessProbe.enabled | bool | `true` | |
|
||||
| prometheus.livenessProbe.failureThreshold | int | `10` | |
|
||||
| prometheus.livenessProbe.initialDelaySeconds | int | `0` | |
|
||||
| prometheus.livenessProbe.path | string | `"/-/healthy"` | |
|
||||
| prometheus.livenessProbe.periodSeconds | int | `10` | |
|
||||
| prometheus.livenessProbe.successThreshold | int | `1` | |
|
||||
| prometheus.livenessProbe.timeoutSeconds | int | `3` | |
|
||||
| prometheus.logFormat | string | `"logfmt"` | |
|
||||
| prometheus.logLevel | string | `"info"` | |
|
||||
| prometheus.matchLabels | object | `{}` | |
|
||||
| prometheus.nodeAffinityPreset.key | string | `""` | |
|
||||
| prometheus.nodeAffinityPreset.type | string | `""` | |
|
||||
| prometheus.nodeAffinityPreset.values | list | `[]` | |
|
||||
| prometheus.nodeSelector | object | `{}` | |
|
||||
| prometheus.paused | bool | `false` | |
|
||||
| prometheus.persistence.accessModes[0] | string | `"ReadWriteOnce"` | |
|
||||
| prometheus.persistence.enabled | bool | `true` | |
|
||||
| prometheus.persistence.size | string | `"999Gi"` | |
|
||||
| prometheus.persistence.storageClass | string | `""` | |
|
||||
| prometheus.podAffinityPreset | string | `""` | |
|
||||
| prometheus.podAntiAffinityPreset | string | `"soft"` | |
|
||||
| prometheus.podMetadata.annotations | object | `{}` | |
|
||||
| prometheus.podMetadata.labels | object | `{}` | |
|
||||
| prometheus.podMonitorNamespaceSelector | object | `{}` | |
|
||||
| prometheus.podMonitorSelector | object | `{}` | |
|
||||
| prometheus.podSecurityContext.enabled | bool | `true` | |
|
||||
| prometheus.podSecurityContext.fsGroup | int | `1001` | |
|
||||
| prometheus.podSecurityContext.runAsUser | int | `1001` | |
|
||||
| prometheus.portName | string | `"main"` | |
|
||||
| prometheus.priorityClassName | string | `""` | |
|
||||
| prometheus.probeNamespaceSelector | object | `{}` | |
|
||||
| prometheus.probeSelector | object | `{}` | |
|
||||
| prometheus.prometheusExternalLabelName | string | `""` | |
|
||||
| prometheus.prometheusExternalLabelNameClear | bool | `false` | |
|
||||
| prometheus.querySpec | object | `{}` | |
|
||||
| prometheus.readinessProbe.enabled | bool | `true` | |
|
||||
| prometheus.readinessProbe.failureThreshold | int | `10` | |
|
||||
| prometheus.readinessProbe.initialDelaySeconds | int | `0` | |
|
||||
| prometheus.readinessProbe.path | string | `"/-/ready"` | |
|
||||
| prometheus.readinessProbe.periodSeconds | int | `10` | |
|
||||
| prometheus.readinessProbe.successThreshold | int | `1` | |
|
||||
| prometheus.readinessProbe.timeoutSeconds | int | `3` | |
|
||||
| prometheus.remoteRead | list | `[]` | |
|
||||
| prometheus.remoteWrite | list | `[]` | |
|
||||
| prometheus.replicaCount | int | `1` | |
|
||||
| prometheus.replicaExternalLabelName | string | `""` | |
|
||||
| prometheus.replicaExternalLabelNameClear | bool | `false` | |
|
||||
| prometheus.resources | object | `{}` | |
|
||||
| prometheus.retention | string | `"31d"` | |
|
||||
| prometheus.retentionSize | string | `""` | |
|
||||
| prometheus.routePrefix | string | `"/"` | |
|
||||
| prometheus.ruleNamespaceSelector | object | `{}` | |
|
||||
| prometheus.ruleSelector | object | `{}` | |
|
||||
| prometheus.scrapeInterval | string | `""` | |
|
||||
| prometheus.secrets | list | `[]` | |
|
||||
| prometheus.serviceAccount.annotations | object | `{}` | |
|
||||
| prometheus.serviceAccount.create | bool | `true` | |
|
||||
| prometheus.serviceAccount.name | string | `""` | |
|
||||
| prometheus.serviceMonitor.enabled | bool | `true` | |
|
||||
| prometheus.serviceMonitor.interval | string | `""` | |
|
||||
| prometheus.serviceMonitor.metricRelabelings | list | `[]` | |
|
||||
| prometheus.serviceMonitor.relabelings | list | `[]` | |
|
||||
| prometheus.serviceMonitorNamespaceSelector | object | `{}` | |
|
||||
| prometheus.serviceMonitorSelector | object | `{}` | |
|
||||
| prometheus.storageSpec | object | `{}` | |
|
||||
| prometheus.thanos.containerSecurityContext.allowPrivilegeEscalation | bool | `false` | |
|
||||
| prometheus.thanos.containerSecurityContext.capabilities.drop[0] | string | `"ALL"` | |
|
||||
| prometheus.thanos.containerSecurityContext.enabled | bool | `true` | |
|
||||
| prometheus.thanos.containerSecurityContext.readOnlyRootFilesystem | bool | `false` | |
|
||||
| prometheus.thanos.containerSecurityContext.runAsNonRoot | bool | `true` | |
|
||||
| prometheus.thanos.create | bool | `false` | |
|
||||
| prometheus.thanos.extraArgs | list | `[]` | |
|
||||
| prometheus.thanos.extraVolumeMounts | list | `[]` | |
|
||||
| prometheus.thanos.livenessProbe.enabled | bool | `true` | |
|
||||
| prometheus.thanos.livenessProbe.failureThreshold | int | `120` | |
|
||||
| prometheus.thanos.livenessProbe.initialDelaySeconds | int | `0` | |
|
||||
| prometheus.thanos.livenessProbe.path | string | `"/-/healthy"` | |
|
||||
| prometheus.thanos.livenessProbe.periodSeconds | int | `5` | |
|
||||
| prometheus.thanos.livenessProbe.successThreshold | int | `1` | |
|
||||
| prometheus.thanos.livenessProbe.timeoutSeconds | int | `3` | |
|
||||
| prometheus.thanos.objectStorageConfig | object | `{}` | |
|
||||
| prometheus.thanos.prometheusUrl | string | `""` | |
|
||||
| prometheus.thanos.readinessProbe.enabled | bool | `true` | |
|
||||
| prometheus.thanos.readinessProbe.failureThreshold | int | `120` | |
|
||||
| prometheus.thanos.readinessProbe.initialDelaySeconds | int | `0` | |
|
||||
| prometheus.thanos.readinessProbe.path | string | `"/-/ready"` | |
|
||||
| prometheus.thanos.readinessProbe.periodSeconds | int | `5` | |
|
||||
| prometheus.thanos.readinessProbe.successThreshold | int | `1` | |
|
||||
| prometheus.thanos.readinessProbe.timeoutSeconds | int | `3` | |
|
||||
| prometheus.thanos.resources.limits | object | `{}` | |
|
||||
| prometheus.thanos.resources.requests | object | `{}` | |
|
||||
| prometheus.thanos.service.annotations | object | `{}` | |
|
||||
| prometheus.thanos.service.clusterIP | string | `"None"` | |
|
||||
| prometheus.thanos.service.extraPorts | list | `[]` | |
|
||||
| prometheus.thanos.service.loadBalancerIP | string | `""` | |
|
||||
| prometheus.thanos.service.loadBalancerSourceRanges | list | `[]` | |
|
||||
| prometheus.thanos.service.nodePort | string | `""` | |
|
||||
| prometheus.thanos.service.port | int | `10901` | |
|
||||
| prometheus.thanos.service.type | string | `"ClusterIP"` | |
|
||||
| prometheus.tolerations | list | `[]` | |
|
||||
| prometheus.volumeMounts | list | `[]` | |
|
||||
| prometheus.volumes | list | `[]` | |
|
||||
| prometheus.walCompression | bool | `false` | |
|
||||
| prometheusImage.repository | string | `"tccr.io/truecharts/prometheus"` | |
|
||||
| prometheusImage.tag | string | `"v2.33.5@sha256:31e019271ca5fa1d7bd85a70f2de827bbcbb90569bc2fe726aac89c0a33d3c07"` | |
|
||||
| rbac | object | `{"enabled":true,"rules":[{"apiGroups":["apiextensions.k8s.io"],"resources":["customresourcedefinitions"],"verbs":["create"]},{"apiGroups":["apiextensions.k8s.io"],"resourceNames":["alertmanagers.monitoring.coreos.com","podmonitors.monitoring.coreos.com","prometheuses.monitoring.coreos.com","prometheusrules.monitoring.coreos.com","servicemonitors.monitoring.coreos.com","thanosrulers.monitoring.coreos.com","probes.monitoring.coreos.com"],"resources":["customresourcedefinitions"],"verbs":["get","update"]},{"apiGroups":["monitoring.coreos.com"],"resources":["alertmanagers","alertmanagers/finalizers","alertmanagerconfigs","prometheuses","prometheuses/finalizers","thanosrulers","thanosrulers/finalizers","servicemonitors","podmonitors","probes","prometheusrules"],"verbs":["*"]},{"apiGroups":["apps"],"resources":["statefulsets"],"verbs":["*"]},{"apiGroups":[""],"resources":["configmaps","secrets"],"verbs":["*"]},{"apiGroups":[""],"resources":["pods"],"verbs":["list","delete"]},{"apiGroups":[""],"resources":["services","services/finalizers","endpoints"],"verbs":["get","create","update","delete"]},{"apiGroups":[""],"resources":["nodes"],"verbs":["list","watch"]},{"apiGroups":[""],"resources":["namespaces"],"verbs":["get","list","watch"]},{"apiGroups":["networking.k8s.io"],"resources":["ingresses"],"verbs":["get","list","watch"]}]}` | Whether Role Based Access Control objects like roles and rolebindings should be created |
|
||||
| securityContext.readOnlyRootFilesystem | bool | `false` | |
|
||||
| service.alertmanager.enabled | bool | `true` | |
|
||||
| service.alertmanager.ports.alertmanager.enabled | bool | `true` | |
|
||||
| service.alertmanager.ports.alertmanager.port | int | `10087` | |
|
||||
| service.alertmanager.ports.alertmanager.protocol | string | `"HTTP"` | |
|
||||
| service.alertmanager.ports.alertmanager.targetPort | int | `9093` | |
|
||||
| service.alertmanager.selector."app.kubernetes.io/name" | string | `"alertmanager"` | |
|
||||
| service.alertmanager.selector.alertmanager | string | `"{{ template \"kube-prometheus.alertmanager.fullname\" . }}"` | |
|
||||
| service.main.ports.main.port | int | `10086` | |
|
||||
| service.main.ports.main.protocol | string | `"HTTP"` | |
|
||||
| service.main.ports.main.targetPort | int | `9090` | |
|
||||
| service.main.selector."app.kubernetes.io/name" | string | `"prometheus"` | |
|
||||
| service.main.selector.prometheus | string | `"{{ template \"kube-prometheus.prometheus.fullname\" . }}"` | |
|
||||
| service.promop.enabled | bool | `true` | |
|
||||
| service.promop.ports.promop.enabled | bool | `true` | |
|
||||
| service.promop.ports.promop.port | int | `10089` | |
|
||||
| service.promop.ports.promop.protocol | string | `"HTTP"` | |
|
||||
| service.promop.ports.promop.targetPort | int | `8080` | |
|
||||
| service.thanos.enabled | bool | `true` | |
|
||||
| service.thanos.ports.thanos.enabled | bool | `true` | |
|
||||
| service.thanos.ports.thanos.port | int | `10901` | |
|
||||
| service.thanos.ports.thanos.protocol | string | `"HTTP"` | |
|
||||
| service.thanos.ports.thanos.targetPort | int | `10901` | |
|
||||
| service.thanos.selector."app.kubernetes.io/name" | string | `"prometheus"` | |
|
||||
| service.thanos.selector.prometheus | string | `"{{ template \"kube-prometheus.prometheus.fullname\" . }}"` | |
|
||||
| serviceAccount | object | `{"create":true}` | The service account the pods will use to interact with the Kubernetes API |
|
||||
| thanosImage.repository | string | `"tccr.io/truecharts/thanos"` | |
|
||||
| thanosImage.tag | string | `"v0.25.2@sha256:da333cc7675ee11afe127229a45a009b8fd098eefb90f2adb9570c0b46993234"` | |
|
||||
|
||||
All Rights Reserved - The TrueCharts Project
|
||||
File diff suppressed because one or more lines are too long
@@ -1,198 +0,0 @@
|
||||
{{/* Name suffixed with operator */}}
|
||||
{{- define "kube-prometheus.fullname" -}}
|
||||
{{- printf "%s" (include "common.names.fullname" . ) -}}
|
||||
{{- end }}
|
||||
|
||||
{{/* Name suffixed with operator */}}
|
||||
{{- define "kube-prometheus.name" -}}
|
||||
{{- printf "%s" (include "common.names.fullname" . ) -}}
|
||||
{{- end }}
|
||||
|
||||
{{/* Name suffixed with operator */}}
|
||||
{{- define "kube-prometheus.operator.name" -}}
|
||||
{{- printf "%s-operator" (include "common.names.fullname" . ) -}}
|
||||
{{- end }}
|
||||
|
||||
{{/* Name suffixed with prometheus */}}
|
||||
{{- define "kube-prometheus.prometheus.name" -}}
|
||||
{{- printf "%s-prometheus" (include "common.names.fullname" . ) -}}
|
||||
{{- end }}
|
||||
|
||||
{{/* Name suffixed with alertmanager */}}
|
||||
{{- define "kube-prometheus.alertmanager.name" -}}
|
||||
{{- printf "%s-alertmanager" (include "common.names.fullname" . ) -}}
|
||||
{{- end }}
|
||||
|
||||
{{/* Name suffixed with thanos */}}
|
||||
{{- define "kube-prometheus.thanos.name" -}}
|
||||
{{- printf "%s-thanos" (include "common.names.fullname" . ) -}}
|
||||
{{- end }}
|
||||
|
||||
{{/* Fullname suffixed with operator */}}
|
||||
{{- define "kube-prometheus.operator.fullname" -}}
|
||||
{{- printf "%s-operator" (include "common.names.fullname" . ) -}}
|
||||
{{- end }}
|
||||
|
||||
{{/* Fullname suffixed with prometheus */}}
|
||||
{{- define "kube-prometheus.prometheus.fullname" -}}
|
||||
{{- printf "%s-prometheus" (include "common.names.fullname" . ) -}}
|
||||
{{- end }}
|
||||
|
||||
{{/* Fullname suffixed with alertmanager */}}
|
||||
{{- define "kube-prometheus.alertmanager.fullname" -}}
|
||||
{{- printf "%s-alertmanager" (include "common.names.fullname" . ) -}}
|
||||
{{- end }}
|
||||
|
||||
{{/* Fullname suffixed with thanos */}}
|
||||
{{- define "kube-prometheus.thanos.fullname" -}}
|
||||
{{- printf "%s-thanos" (include "kube-prometheus.prometheus.fullname" .) -}}
|
||||
{{- end }}
|
||||
|
||||
{{- define "kube-prometheus.chart" -}}
|
||||
{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" -}}
|
||||
{{- end -}}
|
||||
|
||||
{{/*
|
||||
Common Labels
|
||||
*/}}
|
||||
{{- define "kube-prometheus.labels" -}}
|
||||
{{ include "common.labels" . }}
|
||||
{{- if .Values.global.labels }}
|
||||
{{ toYaml .Values.global.labels }}
|
||||
{{- end }}
|
||||
{{- end -}}
|
||||
|
||||
{{/*
|
||||
Labels for operator
|
||||
*/}}
|
||||
{{- define "kube-prometheus.operator.labels" -}}
|
||||
{{ include "common.labels" . }}
|
||||
app.kubernetes.io/component: operator
|
||||
{{- end -}}
|
||||
|
||||
{{/*
|
||||
Labels for prometheus
|
||||
*/}}
|
||||
{{- define "kube-prometheus.prometheus.labels" -}}
|
||||
{{ include "common.labels" . }}
|
||||
app.kubernetes.io/component: prometheus
|
||||
{{- end -}}
|
||||
|
||||
{{/*
|
||||
Labels for alertmanager
|
||||
*/}}
|
||||
{{- define "kube-prometheus.alertmanager.labels" -}}
|
||||
{{ include "common.labels" . }}
|
||||
app.kubernetes.io/component: alertmanager
|
||||
{{- end -}}
|
||||
|
||||
{{/*
|
||||
matchLabels for operator
|
||||
*/}}
|
||||
{{- define "kube-prometheus.operator.matchLabels" -}}
|
||||
{{ include "common.labels.selectorLabels" . }}
|
||||
app.kubernetes.io/component: operator
|
||||
{{- end -}}
|
||||
|
||||
{{/*
|
||||
matchLabels for prometheus
|
||||
*/}}
|
||||
{{- define "kube-prometheus.prometheus.matchLabels" -}}
|
||||
{{ include "common.labels.selectorLabels" . }}
|
||||
app.kubernetes.io/component: prometheus
|
||||
{{- end -}}
|
||||
|
||||
{{/*
|
||||
matchLabels for alertmanager
|
||||
*/}}
|
||||
{{- define "kube-prometheus.alertmanager.matchLabels" -}}
|
||||
{{ include "common.labels.selectorLabels" . }}
|
||||
app.kubernetes.io/component: alertmanager
|
||||
{{- end -}}
|
||||
|
||||
{{/*
|
||||
Return the proper Prometheus Operator image name
|
||||
*/}}
|
||||
{{- define "kube-prometheus.image" -}}
|
||||
{{ printf "%s:%s" .Values.image.repository (default .Chart.AppVersion .Values.image.tag) | quote }}
|
||||
{{- end -}}
|
||||
|
||||
{{/*
|
||||
Return the proper Prometheus Operator Reloader image name
|
||||
*/}}
|
||||
{{- define "kube-prometheus.prometheusConfigReloader.image" -}}
|
||||
{{- include "kube-prometheus.image" . -}}
|
||||
{{- end -}}
|
||||
|
||||
{{/*
|
||||
Return the proper Prometheus Image name
|
||||
*/}}
|
||||
{{- define "kube-prometheus.prometheus.image" -}}
|
||||
{{ printf "%s:%s" .Values.prometheusImage.repository (default .Chart.AppVersion .Values.prometheusImage.tag) | quote }}
|
||||
{{- end -}}
|
||||
|
||||
{{/*
|
||||
Return the proper Thanos Image name
|
||||
*/}}
|
||||
{{- define "kube-prometheus.prometheus.thanosImage" -}}
|
||||
{{ printf "%s:%s" .Values.thanosImage.repository (default .Chart.AppVersion .Values.thanosImage.tag) | quote }}
|
||||
{{- end -}}
|
||||
|
||||
{{/*
|
||||
Return the proper Alertmanager Image name
|
||||
*/}}
|
||||
{{- define "kube-prometheus.alertmanager.image" -}}
|
||||
{{ printf "%s:%s" .Values.alertmanagerImage.repository (default .Chart.AppVersion .Values.alertmanagerImage.tag) | quote }}
|
||||
{{- end -}}
|
||||
|
||||
{{/*
|
||||
Return the proper Docker Image Registry Secret Names
|
||||
*/}}
|
||||
{{- define "kube-prometheus.imagePullSecrets" -}}
|
||||
{{- end -}}
|
||||
|
||||
{{/*
|
||||
Create the name of the operator service account to use
|
||||
*/}}
|
||||
{{- define "kube-prometheus.operator.serviceAccountName" -}}
|
||||
{{- if .Values.operator.serviceAccount.create -}}
|
||||
{{ default (include "kube-prometheus.operator.fullname" .) .Values.operator.serviceAccount.name }}
|
||||
{{- else -}}
|
||||
{{ default "default" .Values.operator.serviceAccount.name }}
|
||||
{{- end -}}
|
||||
{{- end -}}
|
||||
|
||||
{{/*
|
||||
Create the name of the prometheus service account to use
|
||||
*/}}
|
||||
{{- define "kube-prometheus.prometheus.serviceAccountName" -}}
|
||||
{{- if .Values.prometheus.serviceAccount.create -}}
|
||||
{{ default (include "kube-prometheus.prometheus.fullname" .) .Values.prometheus.serviceAccount.name }}
|
||||
{{- else -}}
|
||||
{{ default "default" .Values.prometheus.serviceAccount.name }}
|
||||
{{- end -}}
|
||||
{{- end -}}
|
||||
|
||||
{{/*
|
||||
Create the name of the alertmanager service account to use
|
||||
*/}}
|
||||
{{- define "kube-prometheus.alertmanager.serviceAccountName" -}}
|
||||
{{- if .Values.alertmanager.serviceAccount.create -}}
|
||||
{{ default (include "kube-prometheus.alertmanager.fullname" .) .Values.alertmanager.serviceAccount.name }}
|
||||
{{- else -}}
|
||||
{{ default "default" .Values.alertmanager.serviceAccount.name }}
|
||||
{{- end -}}
|
||||
{{- end -}}
|
||||
|
||||
{{/*
|
||||
Compile all warnings into a single message, and call fail.
|
||||
*/}}
|
||||
{{- define "kube-prometheus.validateValues" -}}
|
||||
{{- $messages := list -}}
|
||||
{{- $messages := without $messages "" -}}
|
||||
{{- $message := join "\n" $messages -}}
|
||||
|
||||
{{- if $message -}}
|
||||
{{- printf "\nVALUES VALIDATION:\n%s" $message | fail -}}
|
||||
{{- end -}}
|
||||
{{- end -}}
|
||||
@@ -1,12 +0,0 @@
|
||||
{{- if and .Values.alertmanager.enabled .Values.alertmanager.serviceAccount.create }}
|
||||
apiVersion: v1
|
||||
kind: ServiceAccount
|
||||
metadata:
|
||||
name: {{ template "kube-prometheus.alertmanager.serviceAccountName" . }}
|
||||
namespace: {{ .Release.Namespace }}
|
||||
labels: {{- include "kube-prometheus.alertmanager.labels" . | nindent 4 }}
|
||||
{{- if index .Values.alertmanager.serviceAccount "annotations" }}
|
||||
annotations: {{- include "common.tplvalues.render" (dict "value" .Values.alertmanager.serviceAccount.annotations "context" $) | nindent 4 }}
|
||||
{{- end }}
|
||||
{{- include "kube-prometheus.imagePullSecrets" . }}
|
||||
{{- end }}
|
||||
@@ -1,26 +0,0 @@
|
||||
{{- if and .Values.alertmanager.enabled .Values.alertmanager.serviceMonitor.enabled }}
|
||||
apiVersion: monitoring.coreos.com/v1
|
||||
kind: ServiceMonitor
|
||||
metadata:
|
||||
name: {{ template "kube-prometheus.alertmanager.fullname" . }}
|
||||
namespace: {{ .Release.Namespace }}
|
||||
labels: {{- include "kube-prometheus.alertmanager.labels" . | nindent 4 }}
|
||||
spec:
|
||||
selector:
|
||||
matchLabels: {{- include "kube-prometheus.alertmanager.matchLabels" . | nindent 6 }}
|
||||
namespaceSelector:
|
||||
matchNames:
|
||||
- {{ .Release.Namespace }}
|
||||
endpoints:
|
||||
- port: http
|
||||
{{- if .Values.alertmanager.serviceMonitor.interval }}
|
||||
interval: {{ .Values.alertmanager.serviceMonitor.interval }}
|
||||
{{- end }}
|
||||
path: {{ trimSuffix "/" .Values.alertmanager.routePrefix }}/metrics
|
||||
{{- if .Values.alertmanager.serviceMonitor.metricRelabelings }}
|
||||
metricRelabelings: {{- include "common.tplvalues.render" ( dict "value" .Values.alertmanager.serviceMonitor.metricRelabelings "context" $) | nindent 8 }}
|
||||
{{- end }}
|
||||
{{- if .Values.alertmanager.serviceMonitor.relabelings }}
|
||||
relabelings: {{- toYaml .Values.alertmanager.serviceMonitor.relabelings | nindent 8 }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
@@ -1,18 +0,0 @@
|
||||
{{/* Make sure all variables are set properly */}}
|
||||
{{- include "common.setup" . }}
|
||||
|
||||
{{- $newArgs := (include "prometheus.operator.args" . | fromYaml) }}
|
||||
{{- $_ := set .Values "newArgs" $newArgs -}}
|
||||
{{- $mergedargs := concat .Values.args .Values.newArgs.args }}
|
||||
{{- $_ := set .Values "args" $mergedargs -}}
|
||||
|
||||
{{- include "prometheus.prometheus.prometheus" . }}
|
||||
{{- include "prometheus.prometheus.additionalprometheusrules" . }}
|
||||
{{- include "prometheus.prometheus.additionalscrapejobs" . }}
|
||||
{{- include "prometheus.prometheus.servicemonitor" . }}
|
||||
|
||||
{{- include "prometheus.alertmanager.alertmanager" . }}
|
||||
|
||||
|
||||
{{/* Render the templates */}}
|
||||
{{ include "common.postSetup" . }}
|
||||
@@ -1,29 +0,0 @@
|
||||
{{- if .Values.coreDns.enabled }}
|
||||
apiVersion: monitoring.coreos.com/v1
|
||||
kind: ServiceMonitor
|
||||
metadata:
|
||||
name: {{ template "kube-prometheus.fullname" . }}-coredns
|
||||
namespace: {{ .Release.Namespace }}
|
||||
labels: {{- include "kube-prometheus.labels" . | nindent 4 }}
|
||||
app.kubernetes.io/component: {{ template "kube-prometheus.fullname" . }}-coredns
|
||||
spec:
|
||||
jobLabel: k8s-app
|
||||
selector:
|
||||
matchLabels:
|
||||
app.kubernetes.io/component: {{ template "kube-prometheus.fullname" . }}-coredns
|
||||
namespaceSelector:
|
||||
matchNames:
|
||||
- {{ .Values.coreDns.namespace }}
|
||||
endpoints:
|
||||
- port: http-metrics
|
||||
{{- if .Values.coreDns.serviceMonitor.interval}}
|
||||
interval: {{ .Values.coreDns.serviceMonitor.interval }}
|
||||
{{- end }}
|
||||
bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token
|
||||
{{- if .Values.coreDns.serviceMonitor.metricRelabelings }}
|
||||
metricRelabelings: {{- include "common.tplvalues.render" (dict "value" .Values.coreDns.serviceMonitor.metricRelabelings "context" $) | nindent 6 }}
|
||||
{{- end }}
|
||||
{{- if .Values.coreDns.serviceMonitor.relabelings }}
|
||||
relabelings: {{- include "common.tplvalues.render" (dict "value" .Values.coreDns.serviceMonitor.relabelings "context" $) | nindent 6 }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
@@ -1,35 +0,0 @@
|
||||
{{- if .Values.kubeApiServer.enabled }}
|
||||
apiVersion: monitoring.coreos.com/v1
|
||||
kind: ServiceMonitor
|
||||
metadata:
|
||||
name: {{ template "kube-prometheus.fullname" . }}-apiserver
|
||||
namespace: {{ .Release.Namespace }}
|
||||
labels: {{- include "kube-prometheus.labels" . | nindent 4 }}
|
||||
app.kubernetes.io/component: apiserver
|
||||
spec:
|
||||
jobLabel: component
|
||||
selector:
|
||||
matchLabels:
|
||||
component: apiserver
|
||||
provider: kubernetes
|
||||
namespaceSelector:
|
||||
matchNames:
|
||||
- default
|
||||
endpoints:
|
||||
- port: https
|
||||
scheme: https
|
||||
tlsConfig:
|
||||
caFile: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt
|
||||
serverName: kubernetes
|
||||
insecureSkipVerify: true
|
||||
bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token
|
||||
{{- if .Values.kubeApiServer.serviceMonitor.interval }}
|
||||
interval: {{ .Values.kubeApiServer.serviceMonitor.interval }}
|
||||
{{- end }}
|
||||
{{- if .Values.kubeApiServer.serviceMonitor.metricRelabelings }}
|
||||
metricRelabelings: {{- include "common.tplvalues.render" ( dict "value" .Values.kubeApiServer.serviceMonitor.metricRelabelings "context" $) | nindent 8 }}
|
||||
{{- end }}
|
||||
{{- if .Values.kubeApiServer.serviceMonitor.relabelings }}
|
||||
relabelings: {{- toYaml .Values.kubeApiServer.serviceMonitor.relabelings | nindent 8 }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
-40
@@ -1,40 +0,0 @@
|
||||
{{- if .Values.kubeControllerManager.enabled }}
|
||||
apiVersion: monitoring.coreos.com/v1
|
||||
kind: ServiceMonitor
|
||||
metadata:
|
||||
name: {{ template "kube-prometheus.fullname" . }}-kube-controller-manager
|
||||
namespace: {{ .Release.Namespace }}
|
||||
labels: {{- include "kube-prometheus.labels" . | nindent 4 }}
|
||||
app.kubernetes.io/component: {{ template "kube-prometheus.fullname" . }}-kube-controller-manager
|
||||
spec:
|
||||
jobLabel: component
|
||||
selector:
|
||||
matchLabels:
|
||||
app.kubernetes.io/component: {{ template "kube-prometheus.fullname" . }}-kube-controller-manager
|
||||
namespaceSelector:
|
||||
matchNames:
|
||||
- {{ .Values.kubeControllerManager.namespace }}
|
||||
endpoints:
|
||||
- port: http-metrics
|
||||
{{- if .Values.kubeControllerManager.serviceMonitor.interval }}
|
||||
interval: {{ .Values.kubeControllerManager.serviceMonitor.interval }}
|
||||
{{- end }}
|
||||
bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token
|
||||
{{- if .Values.kubeControllerManager.serviceMonitor.https }}
|
||||
scheme: https
|
||||
tlsConfig:
|
||||
caFile: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt
|
||||
{{- if .Values.kubeControllerManager.serviceMonitor.insecureSkipVerify }}
|
||||
insecureSkipVerify: {{ .Values.kubeControllerManager.serviceMonitor.insecureSkipVerify }}
|
||||
{{- end }}
|
||||
{{- if .Values.kubeControllerManager.serviceMonitor.serverName }}
|
||||
serverName: {{ .Values.kubeControllerManager.serviceMonitor.serverName }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
{{- if .Values.kubeControllerManager.serviceMonitor.metricRelabelings }}
|
||||
metricRelabelings: {{- include "common.tplvalues.render" (dict "value" .Values.kubeControllerManager.serviceMonitor.metricRelabelings "context" $) | nindent 6 }}
|
||||
{{- end }}
|
||||
{{- if .Values.kubeControllerManager.serviceMonitor.relabelings }}
|
||||
relabelings: {{- include "common.tplvalues.render" (dict "value" .Values.kubeControllerManager.serviceMonitor.relabelings "context" $) | nindent 6 }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
@@ -1,40 +0,0 @@
|
||||
{{- if .Values.kubeScheduler.enabled }}
|
||||
apiVersion: monitoring.coreos.com/v1
|
||||
kind: ServiceMonitor
|
||||
metadata:
|
||||
name: {{ template "kube-prometheus.fullname" . }}-kube-scheduler
|
||||
namespace: {{ .Release.Namespace }}
|
||||
labels: {{- include "kube-prometheus.labels" . | nindent 4 }}
|
||||
app.kubernetes.io/component: {{ template "kube-prometheus.fullname" . }}-kube-scheduler
|
||||
spec:
|
||||
jobLabel: component
|
||||
selector:
|
||||
matchLabels:
|
||||
app.kubernetes.io/component: {{ template "kube-prometheus.fullname" . }}-kube-scheduler
|
||||
namespaceSelector:
|
||||
matchNames:
|
||||
- {{ .Values.kubeScheduler.namespace }}
|
||||
endpoints:
|
||||
- port: http-metrics
|
||||
{{- if .Values.kubeScheduler.serviceMonitor.interval }}
|
||||
interval: {{ .Values.kubeScheduler.serviceMonitor.interval }}
|
||||
{{- end }}
|
||||
bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token
|
||||
{{- if .Values.kubeScheduler.serviceMonitor.https }}
|
||||
scheme: https
|
||||
tlsConfig:
|
||||
caFile: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt
|
||||
{{- if .Values.kubeScheduler.serviceMonitor.insecureSkipVerify }}
|
||||
insecureSkipVerify: {{ .Values.kubeScheduler.serviceMonitor.insecureSkipVerify }}
|
||||
{{- end}}
|
||||
{{- if .Values.kubeScheduler.serviceMonitor.serverName }}
|
||||
serverName: {{ .Values.kubeScheduler.serviceMonitor.serverName }}
|
||||
{{- end}}
|
||||
{{- end}}
|
||||
{{- if .Values.kubeScheduler.serviceMonitor.metricRelabelings }}
|
||||
metricRelabelings: {{- include "common.tplvalues.render" (dict "value" .Values.kubeScheduler.serviceMonitor.metricRelabelings "context" $) | nindent 6 }}
|
||||
{{- end }}
|
||||
{{- if .Values.kubeScheduler.serviceMonitor.relabelings }}
|
||||
metricRelabelings: {{- include "common.tplvalues.render" (dict "value" .Values.kubeScheduler.serviceMonitor.relabelings "context" $) | nindent 6 }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
@@ -1,85 +0,0 @@
|
||||
{{- if .Values.kubelet.enabled }}
|
||||
apiVersion: monitoring.coreos.com/v1
|
||||
kind: ServiceMonitor
|
||||
metadata:
|
||||
name: {{ template "kube-prometheus.fullname" . }}-kubelet
|
||||
namespace: {{ .Release.Namespace }}
|
||||
labels: {{- include "kube-prometheus.labels" . | nindent 4 }}
|
||||
app.kubernetes.io/component: kubelet
|
||||
spec:
|
||||
jobLabel: k8s-app
|
||||
selector:
|
||||
matchLabels:
|
||||
k8s-app: kubelet
|
||||
namespaceSelector:
|
||||
matchNames:
|
||||
- {{ .Values.kubelet.namespace }}
|
||||
endpoints:
|
||||
{{- if .Values.kubelet.serviceMonitor.https }}
|
||||
- port: https-metrics
|
||||
scheme: https
|
||||
tlsConfig:
|
||||
caFile: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt
|
||||
serverName: kubernetes
|
||||
insecureSkipVerify: true
|
||||
bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token
|
||||
honorLabels: true
|
||||
{{- if .Values.kubelet.serviceMonitor.interval }}
|
||||
interval: {{ .Values.kubelet.serviceMonitor.interval }}
|
||||
{{- end }}
|
||||
{{- if .Values.kubelet.serviceMonitor.metricRelabelings }}
|
||||
metricRelabelings: {{- include "common.tplvalues.render" ( dict "value" .Values.kubelet.serviceMonitor.metricRelabelings "context" $) | nindent 8 }}
|
||||
{{- end }}
|
||||
{{- if .Values.kubelet.serviceMonitor.relabelings }}
|
||||
relabelings: {{- toYaml .Values.kubelet.serviceMonitor.relabelings | nindent 8 }}
|
||||
{{- end }}
|
||||
- port: https-metrics
|
||||
path: /metrics/cadvisor
|
||||
scheme: https
|
||||
tlsConfig:
|
||||
caFile: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt
|
||||
serverName: kubernetes
|
||||
insecureSkipVerify: true
|
||||
bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token
|
||||
honorLabels: true
|
||||
{{- if .Values.kubelet.serviceMonitor.interval }}
|
||||
interval: {{ .Values.kubelet.serviceMonitor.interval }}
|
||||
{{- end }}
|
||||
{{- if .Values.kubelet.serviceMonitor.cAdvisorMetricRelabelings }}
|
||||
metricRelabelings: {{- include "common.tplvalues.render" ( dict "value" .Values.kubelet.serviceMonitor.cAdvisorMetricRelabelings "context" $) | nindent 8 }}
|
||||
{{- end }}
|
||||
{{- if .Values.kubelet.serviceMonitor.cAdvisorRelabelings }}
|
||||
relabelings: {{- toYaml .Values.kubelet.serviceMonitor.cAdvisorRelabelings | nindent 8 }}
|
||||
{{- end }}
|
||||
{{- else }}
|
||||
- port: http-metrics
|
||||
scheme: http
|
||||
tlsConfig:
|
||||
insecureSkipVerify: false
|
||||
honorLabels: true
|
||||
{{- if .Values.kubelet.serviceMonitor.interval }}
|
||||
interval: {{ .Values.kubelet.serviceMonitor.interval }}
|
||||
{{- end }}
|
||||
{{- if .Values.kubelet.serviceMonitor.metricRelabelings }}
|
||||
metricRelabelings: {{- include "common.tplvalues.render" ( dict "value" .Values.kubelet.serviceMonitor.metricRelabelings "context" $) | nindent 8 }}
|
||||
{{- end }}
|
||||
{{- if .Values.kubelet.serviceMonitor.relabelings }}
|
||||
relabelings: {{- toYaml .Values.kubelet.serviceMonitor.relabelings | nindent 8 }}
|
||||
{{- end }}
|
||||
- port: http-metrics
|
||||
path: /metrics/cadvisor
|
||||
scheme: http
|
||||
tlsConfig:
|
||||
insecureSkipVerify: false
|
||||
honorLabels: true
|
||||
{{- if .Values.kubelet.serviceMonitor.interval }}
|
||||
interval: {{ .Values.kubelet.serviceMonitor.interval }}
|
||||
{{- end }}
|
||||
{{- if .Values.kubelet.serviceMonitor.cAdvisorMetricRelabelings }}
|
||||
metricRelabelings: {{- include "common.tplvalues.render" ( dict "value" .Values.kubelet.serviceMonitor.cAdvisorMetricRelabelings "context" $) | nindent 8 }}
|
||||
{{- end }}
|
||||
{{- if .Values.kubelet.serviceMonitor.cAdvisorRelabelings }}
|
||||
relabelings: {{- toYaml .Values.kubelet.serviceMonitor.cAdvisorRelabelings | nindent 8 }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
Some files were not shown because too many files have changed in this diff Show More
Reference in New Issue
Block a user