openstack
/
openstack-helm-infra
Code Issues Proposed changes
Repository for OpenStack Helm infrastructure-related code
3,725 Commits 1 Branch 0 Tags 65 MiB
Smarty 88%
Shell 10%
Python 1.5%
Jinja 0.4%
Makefile 0.1%
Go to file
Ritchie, Frank (fr801x) 5b72041fd9 Change default ingress path type to prefix 
Due to CVE-2022-4886 the default pathType for an ingress should be
either "Exact" or "Prefix". This allows for more strict path validation by
the admission controller. This PS changes the default pathType to Prefix.
This value can be overridden.

In a separate PS I will add the pathType parameter to the ingressOpts
for all helm charts that create an ingress.

See:

https://github.com/kubernetes/ingress-nginx/issues/10570

Change-Id: I8f1df594f0c86f2de6cdd7cf2ee56637bd508565
 		2024-01-17 13:18:25 -05:00
ca-clusterissuer Update htk requirements 2021-10-06 01:02:28 +00:00
ca-issuer Update htk requirements 2021-10-06 01:02:28 +00:00
calico replace scheduler.alpha.kubernetes.io/critical-pod with priorityClassName 2023-06-06 10:53:59 +08:00
ceph-adapter-rook Add ceph-adapter-rook chart 2023-12-05 14:27:57 -06:00
ceph-client Update Rook to 1.12.5 and Ceph to 18.2.0 2023-10-13 12:58:56 -06:00
ceph-mon Update Rook to 1.12.5 and Ceph to 18.2.0 2023-10-13 12:58:56 -06:00
ceph-osd Update Rook to 1.12.5 and Ceph to 18.2.0 2023-10-13 12:58:56 -06:00
ceph-provisioners Update Rook to 1.12.5 and Ceph to 18.2.0 2023-10-13 12:58:56 -06:00
ceph-rgw [ceph-rgw] Multiple namespace support for the ceph-rgw-pool job 2023-11-06 17:57:10 +00:00
cert-rotation [ceph] Update all Ceph images to Focal 2023-03-16 16:39:37 -06:00
daemonjob-controller Update kubernetes registry to registry.k8s.io 2023-04-11 04:54:26 +03:00
doc Remove versions from doc/requirements.txt to avoid confusion 2023-11-07 21:00:14 +00:00
elastic-apm-server support image registries with authentication 2022-07-20 14:28:47 -05:00
elastic-filebeat Replace node-role.kubernetes.io/master with control-plane 2023-03-20 13:38:07 +08:00
elastic-metricbeat Replace node-role.kubernetes.io/master with control-plane 2023-03-20 13:38:07 +08:00
elastic-packetbeat support image registries with authentication 2022-07-20 14:28:47 -05:00
elasticsearch Update curator for es v8 2023-12-12 11:16:14 -05:00
etcd Update kubernetes registry to registry.k8s.io 2023-04-11 04:54:26 +03:00
falco Update kubernetes registry to registry.k8s.io 2023-04-11 04:54:26 +03:00
flannel Replace node-role.kubernetes.io/master with control-plane 2023-03-20 13:38:07 +08:00
fluentbit Replace node-role.kubernetes.io/master with control-plane 2023-03-20 13:38:07 +08:00
fluentd Use deploy-env role for all deployment jobs 2023-09-22 15:02:07 -05:00
gnocchi Update Rook to 1.12.5 and Ceph to 18.2.0 2023-10-13 12:58:56 -06:00
grafana Make selenium v4 syntax optional 2023-08-30 16:10:44 -04:00
helm-toolkit Change default ingress path type to prefix 2024-01-17 13:18:25 -05:00
ingress Uplift nginx ingress controller to v1.8.2 2023-10-04 20:00:33 +00:00
kibana Use deploy-env role for all deployment jobs 2023-09-22 15:02:07 -05:00
kube-dns Update kubernetes registry to registry.k8s.io 2023-04-11 04:54:26 +03:00
kubernetes-keystone-webhook Use deploy-env role for all deployment jobs 2023-09-22 15:02:07 -05:00
kubernetes-node-problem-detector Replace node-role.kubernetes.io/master with control-plane 2023-03-20 13:38:07 +08:00
ldap support image registries with authentication 2022-07-20 14:28:47 -05:00
libvirt Add watch verb to cert-manager Role for vencrypt 2023-10-16 09:10:08 -06:00
local-storage Update htk requirements 2021-10-06 01:02:28 +00:00
lockdown fix(netpol): allows toggling the lockdown 2021-09-11 11:48:37 -05:00
mariadb Update template for ingress 1.9 2024-01-04 18:32:56 -05:00
mariadb-backup [backups] Add throttlling of remote backups 2023-12-18 20:39:45 +00:00
mariadb-cluster [mariadb-operator] Fix mariadb TLS 2024-01-08 17:43:17 +00:00
memcached Replace node-role.kubernetes.io/master with control-plane 2023-03-20 13:38:07 +08:00
metacontroller support image registries with authentication 2022-07-20 14:28:47 -05:00
mongodb support image registries with authentication 2022-07-20 14:28:47 -05:00
nagios Fix typo in selenium test 2023-08-25 14:34:48 -04:00
namespace-config Remove PodSecurityPolicy 2023-06-08 21:53:29 +03:00
nfs-provisioner Update NFS Provisioner image version 2023-02-16 03:35:14 +03:00
openvswitch Add Ubuntu Focal and Jammy overrides for openvswitch 2024-01-02 08:59:09 -06:00
ovn Use host network for ovn controller pods 2024-01-03 10:08:56 -06:00
playbooks Merge "Create osh-bandit role" 2023-10-27 22:12:27 +00:00
postgresql [backups] Add throttlling of remote backups 2023-12-18 20:39:45 +00:00
powerdns Use deploy-env role for all deployment jobs 2023-09-22 15:02:07 -05:00
prometheus Use deploy-env role for all deployment jobs 2023-09-22 15:02:07 -05:00
prometheus-alertmanager support image registries with authentication 2022-07-20 14:28:47 -05:00
prometheus-blackbox-exporter support image registries with authentication 2022-07-20 14:28:47 -05:00
prometheus-kube-state-metrics support image registries with authentication 2022-07-20 14:28:47 -05:00
prometheus-mysql-exporter [mariadb-operator] Mariadb-cluster chart 2023-11-29 21:51:48 -06:00
prometheus-node-exporter Replace node-role.kubernetes.io/master with control-plane 2023-03-20 13:38:07 +08:00
prometheus-openstack-exporter support image registries with authentication 2022-07-20 14:28:47 -05:00
prometheus-process-exporter Replace node-role.kubernetes.io/master with control-plane 2023-03-20 13:38:07 +08:00
rabbitmq Enable addition of default consumer prefetch count 2023-12-22 13:58:33 -05:00
redis support image registries with authentication 2022-07-20 14:28:47 -05:00
registry Update kubernetes registry to registry.k8s.io 2023-04-11 04:54:26 +03:00
releasenotes Change default ingress path type to prefix 2024-01-17 13:18:25 -05:00
roles Add license headers to deploy-env tasks files 2023-12-13 14:19:50 -06:00
shaker support image registries with authentication 2022-07-20 14:28:47 -05:00
tools Fix ceph-adapter-rook.sh script 2023-12-05 22:24:15 -06:00
zuul.d Update k8s packages repo 2023-12-12 17:58:20 -06:00
.gitignore [mariadb-operator] Mariadb-cluster chart 2023-11-29 21:51:48 -06:00
.gitreview OpenDev Migration Patch 2019-04-19 19:34:11 +00:00
CONTRIBUTING.rst Add Project Specific Contributor and PTL Docs 2020-04-24 20:59:44 +02:00
Makefile Update Makefile for helm v3 scripts 2022-04-04 20:37:07 +00:00
README.rst docs: Update Freenode to OFTC 2021-06-02 01:52:39 +00:00
release.asc Enable TLS for Ceph RGW 2021-04-06 18:44:59 +00:00
setup.cfg setup.cfg: Replace dashes with underscores 2021-05-03 09:08:01 +08:00
setup.py Add docs to openstack-helm-infra 2018-05-15 13:04:28 -05:00
tox.ini Add upper contstraints to tox doc env 2023-08-24 11:23:30 -05:00
yamllint-templates.conf Undo octal-values restriction together with corresponding code 2020-07-07 15:42:53 +00:00
yamllint.conf Allow parallelization in gate runner 2020-08-06 00:51:11 +00:00

README.rst

Openstack-Helm-Infra

Mission

The goal of OpenStack-Helm-Infra is to provide charts for services or integration of third-party solutions that are required to run OpenStack-Helm.

For more information, please refer to the OpenStack-Helm repository.

Communication

  • Join us on IRC: #openstack-helm on oftc
  • Community IRC Meetings: [Every Tuesday @ 3PM UTC], #openstack-meeting-alt on oftc
  • Meeting Agenda Items: Agenda
  • Join us on Slack
    • #openstack-helm

Contributing

We welcome contributions. Check out this document if you would like to get involved.