1. 16 Aug, 2018 7 commits
  2. 15 Aug, 2018 19 commits
  3. 14 Aug, 2018 1 commit
  4. 13 Aug, 2018 3 commits
  5. 10 Aug, 2018 3 commits
  6. 09 Aug, 2018 6 commits
    • Jason Plum's avatar
      Support custom root CAs: introduce templates/_certificates.tpl · 91e6ec33
      Jason Plum authored
      Introduce `template/_certificates.tpl` for population of certificates to various containers that may require the insertion of custom certificate authority root certificates.
      
      This is implemented as a small set of changes to each affected Chart, and the addition of a template that provides the content that these charts will use. The use of template provides DRY development patterns, we all as simplifying any future alterations.
      
      This MR relies on gitlab-org/build/CNG!133, which introduces `alpine-certificates` container that is used by the injected `initContainer`.
      
      How it works:
      - Adds 2 volumes:
          - etc-ssl-certs is a shared `emptyDir` volume, mounted to `/etc/ssl/certs` in all application containers
          - custom-ca-certificates is a projected volume, mounting all keys of secrets provided to `global.certificates.customCAs` to `/usr/local/share/ca-certificates` into the `initContainer`
      - alpine-certificates container builds a complete system CA bundle into `/etc/ssl/certs`, dereferencing symlinks to ensure that volume's contents are portable. This pulls in `/usr/share/ca-certificates` from the `ca-certificates` package, and the contents of `/usr/local/share/ca-certificates` as provided by the `custom-ca-certificates` volume.
      - application containers mount etc-ssl-certs, now including custom CAs
      
      Closes #255  directly
      
      Closes #254  indirectly, as we're now injecting updated `ca-certificates` bundle as a part of `alpine-certificates` container operation.
      91e6ec33
    • DJ Mountney's avatar
      Merge branch 'nginx-ingress-security-context' into 'master' · 94d9b072
      DJ Mountney authored
      Introduce security context related changes to nginx-ingress-controller to have nginx function without root user
      
      Closes #637
      
      See merge request charts/gitlab!431
      94d9b072
    • Balasankar "Balu" C's avatar
      Introduce security context related changes to nginx-ingress-controller to have... · 27dfa0c9
      Balasankar "Balu" C authored
      Introduce security context related changes to nginx-ingress-controller to have nginx function without root user
      27dfa0c9
    • Ahmad Hassan's avatar
      Fix merge conflicts · 3cea682b
      Ahmad Hassan authored
      3cea682b
    • Ahmad Hassan's avatar
      Use appConfig to populate bucketNames · a741a62d
      Ahmad Hassan authored
      a741a62d
    • DJ Mountney's avatar
      Merge branch 'set-hpa-sensitivity' into 'master' · 6b5357cb
      DJ Mountney authored
      Use targetValue instead of targetUtilization fo hpa autoscaling
      
      Closes #629
      
      See merge request charts/gitlab!433
      6b5357cb
  7. 08 Aug, 2018 1 commit