Lmst

I'm trying to deploy #nextcloud to my #kubernetes cluster using their official #HelmChart . I have a #zfs box, where all my important data lives. I planned to use the csi-nfs-driver to allocate some PVC via NFS. Apparently, there are problems with Nextcloud initializing on NFS backed PVC, because of permissions and rsync and what not. Enabling 'async' for my NFS shares isn't really something I want to do. :-/ There seem to be further problems with RWX volumes on NFS, which is bad for HA as well. Man, this is a headache. Has anybody solved this problem? Adding MinIO to my ZFS host is one option I see. But that adds a lot of complexity 😕
#selfhosting #homelab #k8s

For people running mastodon on Kubernetes with the #mastodon #helmchart, I've submitted the following PR https://github.com/mastodon/chart/pull/166 to update your instance. Feel free to manually apply this patch and upgrade as. there was a security release yesterday #mastoadmin

Знову треба було працювати із #HelmChart. З одного боку це засіб, який спрощує роботу з #kubernetes, але разом з тим наскільки ж багато проблем він додає.

Сам синтаксис шаблону, як тільки він починає містити більше ніж дві умови - починає виглядати дуже страшно. І було б добре, якби не пропустив "-" біля "}}" наприклад, інакше помилку потім можна пів дня шукати.

Tonight

Set up a #kubernetes cluster on #digitalocean
Installed #nginx controller and k8s dashboard
Configured #seleniumgrid with #helmchart especially the hostname with #cloudflare dns and the extra environment variable on #chrome node for managed downloads.
Finally tested with #mocha chai

whoop, got bit when upgrading an old #HelmChart to a new one while using `--reuse-values`

turns out the new helm chart version had updated some of the default values, so... because I used `--reuse-values`, my release kept the old default values from the original version of the chart -- and errored out!

fixed when we removed `--reuse-values` to upgrade the chart 😅

🎉 Good news, tech enthusiasts! #Passbolt's Helm Chart now supports PostgreSQL! Dive into our blog to see how this integration empowers your team's password management 👉 https://www.passbolt.com/blog/passbolt-helm-chart-now-supports-postgresql?utm_campaign=Social%20Media%20Posts&utm_source=Passbolt%20Helm%20Chart%20Now%20Supports%20PostgreSQL&utm_content=Blog

#PostgreSQL #OpenSource #HelmChart #PasswordManager

Anyone know if there is an official @forgejo #HelmChart available?

#FOSS #Codeberg #Forgejo #K8S #K3S #Kubernetes #DevOps #Git #Helm #SelfHost #SelfHosted #GitTea

Symas announces commercial support for an #OpenLDAP container and associated Helm Chart, simplifying deployment of OpenLDAP within #Kubernetes or anywhere #Docker is available.

https://www.symas.com/post/openldap-containers-and-a-helm-chart?postId=7f78ebc4-46d7-4928-955d-497686eca739 #HelmChart

Got #MiniKube with the #MetalLB and #Ingress plugins, all good. However, I literally cannot figure out how to access my charts, containing #ClusterIP services with ingresses. If anyone has any ideas as to what I could try, all ears!

Tried through tunnel, mapped the Minikube IP to the domain in /etc/hosts, MetalLB is configured to a free IP subrange of the MK address.

Tried using #KVM but #Podman as well, rootless and not. Nothing seems to work.

#K8S #Kubernetes #DevOps #K3S #Helm #HelmChart #KubernetesHelm #IngressNginx #NGINX

@eliasp damn, really? Not even a shell can be used in this case then... thanks for the tips! You wouldn't happen to have the `LD_PRELOAD` hack at hand by any chance, would you?

Or maybe you might know of a better way to map a hostname to the #minikube IP? Basically trying to test my #ingress configuration.

#k8s #Kubernetes #Helm #HelmChart #DevOps

Do you want Infrastructure as Code security? :kubernetes: :github: :microsoft:

Do you use CodeQL to scan your code (which is, btw, free for open source code)?

From today you can use #CodeQL to scan it, using a new open source package written by my team mate @geekmasher

Scan #Terraform, #GitHubActions, #HelmChart, and #AzureBicep, with more in progress.

#IAC #InfrastructureAsCode #SAST #CodeSecurity #CodeSmells #StaticAnalysis #GitHub #AdvancedSecurity

Sometimes I go back to work I’ve done & think: “How in the hell did I come up with that?!”

Sometimes this is in a good way, sometimes in a bad way.

Today’s find is in a good way. I forgot that I implemented a really nice method of automating my #Helm chart builds so that anytime an upstream change is made, it automatically publishes the changes downstream.

My only problem? I forgot to #Document the damn thing, so I spent the past hour trying to figure out what I did.

#HelmChart #Automation

(The best part is this probably violates the #GDPR)

It turns out that there is no way to disable the **OTHER** #analytics #spyware that @grafana adds to #Loki

Start by adding `grafana-agent-operator.agent.enableReporting: false` to the last post. By default it installs and sets up the "Grafana Agent" and that flag must have slipped their minds in the release notes where this mess is nominally "documented". (Not in the docs. In the old *release notes*.)

Doesn't matter. There is no way to add 'enableReporting: false' to the GrafanaAgent CR itself. (Yay for non-standardization of flags.)

The "more fun" on this #privacy pile is in the same spot. It requests a LOT of permissions that look more related to their needs than mine: https://github.com/grafana/loki/blob/main/production/helm/loki/templates/monitoring/grafana-agent.yaml#L50-L74

It wants to scrape EVERYTHING. It wants to scrape stuff that I skip because its too noisy. What possible reason could the logger have for scraping ingress & cadvisor?

#monitoring #prometheus #kubernetes #k8s #grafana #helmchart #telemetry

Today's adventure in #darkpattern #surveillance comes from #Grafana #Loki. (Not a surprise, but this is why I run egress filters and dns #adblock in my #homelab clusters.)

I know not everyone agrees that #optout #telemetry is a dark pattern, but you might agree with me about this one after you see it documented:

> # -- Optional analytics configuration
> analytics: {}

Enlightening, isn't it? There are other empty blocks, but they are either fairly standard or are described elsewhere in the document.

If you are familiar with #helm, you won't despair because you have the power of `analytics.enabled: false`. That works on the rest of this chart and is the standard way to en/disable things.

It doesn't work that way.

Let me save you some time with the terrible new #github code search. Here is the actual syntax:
"analytics.reporting_enabled: false"

This was caught by #adguard and enforced by an egress #networkpolicy

#monitoring #prometheus #kubernetes #k3s #k8s #helmchart

A screenshot of a log line from Grafana Loki, showing attempts to reach stats.grafana.org failing because DNS adblock returned a false address (0.0.0.0)

Can anybody recommend a tool/framework to test the templating of a #Helm Chart or Helm Library?

I have two extensive Helm Libraries and want to add tests to catch any regressions that changes might create.

The CT tool from the Helm project appears to only really do linting/testing of values, from what I can see?

I’ve seen a couple of tools (unit test plug-in, and terratest), but real people giving opinions is always the best!

#helmchart #Kubernetes #testing

After a brief hiatus, I'm back on my s***: today it's a recap of how I installed the Mastodon prerequisites--redis, postgres, and elasticsearch--given that their default bitnami images aren't compatible on ARM devices (e.g., the Pi). It was an epic journey filled with helm chart modifications, pointless progress bars, and a return of the java heapsize CLI syntax circa 2006.

Enjoy!

#Mastodon #MastodonInstance #Helm #HelmChart

https://magsol.github.io/posts/2023-02-09-configuring-and-installing-prereqs/

We’ve just released #ApacheAirflow #HelmChart 1.8.0 ✨

📦 ArtifactHub: https://artifacthub.io/packages/helm/apache-airflow/airflow
📚 Docs: https://airflow.apache.org/docs/helm-chart/1.8.0/
🚀 Quick Start Installation Guide: https://airflow.apache.org/docs/helm-chart/1.8.0/quick-start.html
🛠️ Release Notes: https://airflow.apache.org/docs/helm-chart/1.8.0/release_notes.html

A real treat with this post: we dive into the Mastodon helm chart! There are a lot of distractions that could potentially derail our focus, but I try to keep the article on the specifics of the Helm chart itself that need to be updated to install a Mastodon instance.

Enjoy! #Mastodon #MastodonInstance #Helm #HelmChart

https://magsol.github.io/posts/2023-01-25-mastodon-helm-chart/