1. 15 Mar, 2019 1 commit
    • Jason Plum's avatar
      Registry: add compability.schema1 config · 9587e934
      Jason Plum authored
      Add support for `compatibility.schema1.enabled` setting
      
      This does not include `compatibility.schema1.signingkeyfile`, as
      more research needs to be done in the event that this key needs to
      be shared across service instances.
      9587e934
  2. 14 Mar, 2019 1 commit
  3. 21 Feb, 2019 2 commits
  4. 14 Feb, 2019 1 commit
  5. 13 Feb, 2019 1 commit
  6. 04 Jan, 2019 2 commits
  7. 21 Dec, 2018 1 commit
  8. 20 Dec, 2018 1 commit
  9. 28 Nov, 2018 1 commit
  10. 19 Nov, 2018 1 commit
    • Jason Plum's avatar
      registry: default storage 'delete' to enabled · 9fae5cc0
      Jason Plum authored
      Even with the changes made in !535 (merged) for #785 (closed),
      it is possible that deleting repositories will still fail unless
      users ensure that their storage config includes `delete.enabled: true`.
      
      The default when using Minio is `true`. The default within the Omnibus is
      `true`. We align these charts to ensure that a value is present, or add
      `true` out of the box.
      
      With this change, a user can configure a minimal set of driver constraints,
      specifically the driver (gcs/aws/etc). If the user explicitly sets
      `delete.enabled`, we then respect that value.
      
      Closes #901
      9fae5cc0
  11. 05 Oct, 2018 1 commit
  12. 27 Sep, 2018 1 commit
  13. 20 Sep, 2018 1 commit
  14. 06 Sep, 2018 1 commit
  15. 13 Aug, 2018 2 commits
    • Ahmad Hassan's avatar
      Move registry bucket to another reference · f28571c9
      Ahmad Hassan authored
      f28571c9
    • Matthias van de Meent's avatar
      Add namespaces to all resources in ./charts. · b6e15e57
      Matthias van de Meent authored
      This is useful for manual debugging templated resources, and consistency in (sub)-charts:
      
      - charts are rendered with .Release.Namespace in their config values, meaning it will look at resources in that namespace.
      - If you use `helm template --namespace a | kubectl apply --namespace b` the configuration will not point to an incorrect namespace: the resources are specified for the correct namespace.
      
      [opinionated]: I moved the metadata structure from any order to [name, namespace, labels/annotations]. I think that is clearer/more consistent.
      b6e15e57
  16. 09 Aug, 2018 1 commit
    • Jason Plum's avatar
      Support custom root CAs: introduce templates/_certificates.tpl · 91e6ec33
      Jason Plum authored
      Introduce `template/_certificates.tpl` for population of certificates to various containers that may require the insertion of custom certificate authority root certificates.
      
      This is implemented as a small set of changes to each affected Chart, and the addition of a template that provides the content that these charts will use. The use of template provides DRY development patterns, we all as simplifying any future alterations.
      
      This MR relies on gitlab-org/build/CNG!133, which introduces `alpine-certificates` container that is used by the injected `initContainer`.
      
      How it works:
      - Adds 2 volumes:
          - etc-ssl-certs is a shared `emptyDir` volume, mounted to `/etc/ssl/certs` in all application containers
          - custom-ca-certificates is a projected volume, mounting all keys of secrets provided to `global.certificates.customCAs` to `/usr/local/share/ca-certificates` into the `initContainer`
      - alpine-certificates container builds a complete system CA bundle into `/etc/ssl/certs`, dereferencing symlinks to ensure that volume's contents are portable. This pulls in `/usr/share/ca-certificates` from the `ca-certificates` package, and the contents of `/usr/local/share/ca-certificates` as provided by the `custom-ca-certificates` volume.
      - application containers mount etc-ssl-certs, now including custom CAs
      
      Closes #255  directly
      
      Closes #254  indirectly, as we're now injecting updated `ca-certificates` bundle as a part of `alpine-certificates` container operation.
      91e6ec33
  17. 26 Jul, 2018 2 commits
  18. 18 Jul, 2018 2 commits
    • Jason Plum's avatar
      Minio: move all `enabled` configuration to global · fc2bef12
      Jason Plum authored
      Move the configuration of `x.minio.enabled` to `global.minio.enabled`.
      
      - All charts now use `.Values.global.minio.enabled`
      - Remove all chart-local `minio.enabled`
      - Add deprecation handling (via detect & `fail` messages) to `NOTES.txt`
      
      Relates to #502
      fc2bef12
    • Jason Plum's avatar
      registry: move `storage` contents to secret · b21eda47
      Jason Plum authored
      Move `registry.storage` to provide a secret instead of a block to be mapped directly into a ConfigMap, thus providing a safe way to provide sensitive information for external storage.
      
      This adds the following acceptable properties:
      ```
      storage:
        secret:   # name of secret
        key:      # name of key, default `storage`
        extraKey: # name of supplemental key, that will be mounted under the same name.
                  #   This is designed for mounting things like GCP credential JSON keys.
      ```
      
      Additions made to `templates/NOTES.txt` to notify of the deprecation / change in behavior.
      
      Closes #548
      b21eda47
  19. 17 Jul, 2018 1 commit
  20. 06 Jul, 2018 1 commit
  21. 05 Jul, 2018 1 commit
  22. 04 Jul, 2018 1 commit
  23. 19 Jun, 2018 3 commits
  24. 14 Jun, 2018 1 commit
  25. 08 Jun, 2018 1 commit
  26. 30 May, 2018 1 commit
  27. 29 May, 2018 1 commit
  28. 23 May, 2018 1 commit
  29. 22 May, 2018 1 commit
  30. 18 May, 2018 1 commit
  31. 15 May, 2018 1 commit
  32. 11 May, 2018 1 commit
  33. 11 Apr, 2018 1 commit