• Joined on 2020-12-03
pat-s commented on issue gitea/helm-chart#705 2024-09-02 08:32:41 +00:00
rootless img init-directories fail on Talos with enforce:baseline and audit + warn: restrictive

Sure, maybe you can update the title to include "Talos" in some ways as it is likely that it has an influence here and might help others WRT to search.

Maybe there is a way to temporary turn…

pat-s commented on issue gitea/helm-chart#700 2024-09-02 08:30:16 +00:00
Config SSH via Nginx Ingress & MetalLB, helm install (Again)

I agree the documentation is not fully clear about this. The setting is just an example and won't work by just c/p.

What you need is:

  • A dedicated service for SSH (enable in values.yml)…
pat-s commented on issue gitea/helm-chart#705 2024-09-02 08:17:11 +00:00
rootless img init-directories fail on Talos with enforce:baseline and audit + warn: restrictive

Hard to say what the issue is but given you're running Talos and it comes with it's own security admissions, I'd guess it is related to that. We haven't had any reported issues with the rootless…

pat-s commented on pull request gitea/helm-chart#702 2024-08-30 13:00:30 +00:00
Instructions to handle breaking changes (#452)

Correct, it should likely be redis here.

pat-s commented on pull request gitea/helm-chart#702 2024-08-30 10:23:36 +00:00
Instructions to handle breaking changes (#452)

The latter isn't a valid config. In this case, CONN_STR is just ignored as TYPE: channel doesn't expect one. Which is why it is "working".

I already understood from your previous comments…

pat-s commented on pull request gitea/helm-chart#682 2024-08-29 09:57:50 +00:00
WIP: Re-implement artifact signing

@techknowlogick @lunny We depend on you for this task. Would be great if you could let us know if you have it on your list 🙂

pat-s commented on issue gitea/helm-chart#671 2024-08-29 09:53:55 +00:00
Security context of init containers

The values should be inserted as-is based on the template logic. Can you show that these are not injected into the pod spec at runtime?

Note that "having an/the desired effect" is different…

pat-s created pull request gitea/helm-chart#706 2024-08-29 09:46:12 +00:00
Add comments about redis password policy
pat-s created branch mention-redis-pw-policy in gitea/helm-chart 2024-08-29 09:45:22 +00:00
pat-s pushed to mention-redis-pw-policy at gitea/helm-chart 2024-08-29 09:45:22 +00:00
1bda763e63 add comments about redis pw policy
pat-s commented on issue gitea/helm-chart#699 2024-08-29 09:37:23 +00:00
What the persistent volume used for /data should be. Should it be RWX or RWO?

Persistence stores data that should be persisted - I am not sure really I understand what you mean by "what persistence does". You can inspect yourself what is stored under the persistent…

pat-s commented on pull request gitea/helm-chart#702 2024-08-29 09:32:28 +00:00
Instructions to handle breaking changes (#452)

I faced this while updating a default v6 chart, it shoudn't be that rare.

My comment was not about the version you're coming from, but more about the individual settings and actions you've…

pat-s deleted branch fix-pgha-persistence from gitea/helm-chart 2024-08-29 09:20:32 +00:00
pat-s merged pull request gitea/helm-chart#704 2024-08-29 09:20:30 +00:00
Fix persistence for `postgresql-ha`
pat-s closed issue gitea/helm-chart#703 2024-08-29 09:20:30 +00:00
postgresql-ha persistence size ignored
pat-s pushed to main at gitea/helm-chart 2024-08-29 09:20:30 +00:00
9dc3f7c086 Fix persistence for postgresql-ha (#704)
pat-s commented on issue gitea/helm-chart#703 2024-08-29 09:19:07 +00:00
postgresql-ha persistence size ignored

Another thing that is not quite clear to me is how I can customize the home page with the helm chart. I read the wiki and I've managed it manually in a docker deployment, but the helm chart…

pat-s commented on issue gitea/helm-chart#701 2024-08-29 09:15:48 +00:00
Output from init container 'init-directories' logged at level ERROR.

Yes, thanks!

pat-s commented on issue gitea/helm-chart#701 2024-08-28 08:35:52 +00:00
Output from init container 'init-directories' logged at level ERROR.

Interesting! I didn't know this.

I think you're right, set -x is logging to stderr and hence you're seeing them logged as you described.

@justusbunsi Are you ok with removing set -x in…

pat-s commented on pull request gitea/helm-chart#697 2024-08-28 08:26:29 +00:00
Add 'extraContainers' parameter.

ping @rossigee