* [stable/nginx-ingress] Extend default backend probes
Signed-off-by: Kevin Scholz <kevin@scholz.io>
* bump chart version by a minor
Signed-off-by: Kevin Scholz <kevin@scholz.io>
* [stable/falco] Add a parameter to use ISO8601 formatted dates
If true, the times displayed in log messages and output messages
will be in ISO 8601. By default, times are displayed in the local
time zone, as governed by /etc/localtime.
Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
* [stable/falco] Allow configuration for `syscall_event_drops` in falco.yaml
Falco uses a shared buffer between the kernel and userspace to pass
system call information. When falco detects that this buffer is
full and system calls have been dropped, it can take one or more of
the following actions:
- "ignore": do nothing. If an empty list is provided, ignore is assumed.
- "log": log a CRITICAL message noting that the buffer was full.
- "alert": emit a falco alert noting that the buffer was full.
- "exit": exit falco with a non-zero rc.
The rate at which log/alert messages are emitted is governed by a
token bucket. The rate corresponds to one message every 30 seconds
with a burst of 10 messages.
Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
* [stable/falco] Enable httpOutput section from the configmap
Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
* [stable/falco] Add CHANGELOG entry for 0.8.0
This was not done in [its own PR](https://github.com/helm/charts/pull/14813#issuecomment-506821432)
Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
* [stable/falco] Bump version and add CHANGELOG entries
Signed-off-by: Néstor Salceda <nestor.salceda@sysdig.com>
* Fixes missing apigroup in clusterrole
PR #15358 introduces new apigroup to ingress and ingress/status resource
but only in role template and forgot to also include it in clusterrole
template. Therefore the nginx-controller pod never becomes ready.
Signed-off-by: Stefan Scheglmann <scheglmann@gmail.com>
Signed-off-by: Stefan Scheglmann <scheglmann@strato.de>
* Chart version bumped
Signed-off-by: Stefan Scheglmann <scheglmann@gmail.com>
Signed-off-by: Stefan Scheglmann <scheglmann@strato.de>
* [stable/sentry] provide greater coverage of filestore settings
This stemmed primarily from needing to inject a Google Cloud service account into
the filesystem via a secret. However it seemed sensible if adding support for one
of the additional filestore providers to add support for both.
Signed-off-by: Damien Churchill <damoxc@gmail.com>
* [sentry/stable] document the change in parameters around filestore
Signed-off-by: Damien Churchill <damoxc@gmail.com>
* [stable/sentry] Bump chart version to 2.0.0
values.yaml changed in a breaking way, so a major version bump seems prudent.
Signed-off-by: Damien Churchill <damoxc@gmail.com>
* [stable/sentry] change s3 from commented out to empty block
Signed-off-by: Damien Churchill <damoxc@gmail.com>
* [stable/sentry] correct the values reference for persistentWorkers
Signed-off-by: Damien Churchill <damoxc@gmail.com>
* [stable/sentry] change /var/secrets to /var/run/secrets
Use the same path format as the Kubernetes default service account to
place the service account key for GCS storage.
Signed-off-by: Damien Churchill <damoxc@gmail.com>
* [stable/sentry] update path for GCS key in comment in values.yaml
Signed-off-by: Damien Churchill <damoxc@gmail.com>
* [stable/sentry] correct filesystem path key for mountPath
Signed-off-by: Damien Churchill <damoxc@gmail.com>
* [stable/sentry] add note in README about the value keys which have changed
Signed-off-by: Damien Churchill <damoxc@gmail.com>
* Allow provider.google without mounting secrets
When deloyed in GCP/GKE it is not necessary to provide these to
external-dns
Signed-off-by: DJ Mountney <david@twkie.net>
* Bump chart version to 2.1.2
Signed-off-by: DJ Mountney <david@twkie.net>
* [stable/pomerium] bugfixes
fix config checksum: based on file and only for pods
deployment: fix missing resources field
Signed-off-by: Travis Groth <tgroth@gmail.com>
* [stable/pomerium] v0.1.0 release
- Expose metrics port and update documentation
- Bump chart and app version for v0.1.0 release
Signed-off-by: Travis Groth <tgroth@gmail.com>
* Fix lint error
Signed-off-by: Travis Groth <tgroth@gmail.com>
* Fix CI test policy
Signed-off-by: Travis Groth <tgroth@gmail.com>
* fix ranging of properties and remove invalid fsGroup property
Signed-off-by: Eric Greer <eric.greer@comcast.com>
* remove errant space
Signed-off-by: Eric Greer <EricGreer@Gmail.com>
* moving away from loop to avoid newline issues
Signed-off-by: Eric Greer <eric.greer@comcast.com>