From 890d2c5fc0a33df3c88960312146ea398a12e27a Mon Sep 17 00:00:00 2001 From: TrueCharts-Bot Date: Sun, 3 Apr 2022 13:23:15 +0000 Subject: [PATCH] Commit new App releases for TrueCharts Signed-off-by: TrueCharts-Bot --- incubator/ferdi-server/0.0.1/CHANGELOG.md | 10 - incubator/ferdi-server/0.0.3/CHANGELOG.md | 19 + .../ferdi-server/{0.0.1 => 0.0.3}/CONFIG.md | 0 .../0.0.4 => ferdi-server/0.0.3}/Chart.lock | 2 +- .../ferdi-server/{0.0.1 => 0.0.3}/Chart.yaml | 2 +- .../ferdi-server/{0.0.1 => 0.0.3}/README.md | 0 .../{0.0.1 => 0.0.3}/app-readme.md | 0 .../{0.0.1 => 0.0.3}/charts/common-9.2.6.tgz | Bin .../charts/postgresql-7.0.27.tgz | Bin .../{0.0.1 => 0.0.3}/helm-values.md | 4 +- .../{0.0.1 => 0.0.3}/ix_values.yaml | 4 +- .../{0.0.1 => 0.0.3}/questions.yaml | 0 .../ferdi-server/{0.0.1 => 0.0.3}/security.md | 67 +- .../{0.0.1 => 0.0.3}/templates/_secrets.tpl | 0 .../{0.0.1 => 0.0.3}/templates/common.yaml | 0 .../ferdi-server/{0.0.1 => 0.0.3}/values.yaml | 0 .../linkding/{0.0.3 => 0.0.4}/CHANGELOG.md | 9 + incubator/linkding/{0.0.3 => 0.0.4}/CONFIG.md | 0 .../linkding/{0.0.3 => 0.0.4}/Chart.lock | 2 +- .../linkding/{0.0.3 => 0.0.4}/Chart.yaml | 2 +- incubator/linkding/{0.0.3 => 0.0.4}/README.md | 0 .../linkding/{0.0.3 => 0.0.4}/app-readme.md | 0 .../{0.0.3 => 0.0.4}/charts/common-9.2.6.tgz | Bin .../linkding/{0.0.3 => 0.0.4}/helm-values.md | 4 +- .../linkding/{0.0.3 => 0.0.4}/ix_values.yaml | 4 +- .../linkding/{0.0.3 => 0.0.4}/questions.yaml | 0 .../linkding/{0.0.3 => 0.0.4}/security.md | 14 +- .../{0.0.3 => 0.0.4}/templates/common.yaml | 0 .../linkding/{0.0.3 => 0.0.4}/values.yaml | 0 .../meshcentral/{0.0.8 => 0.0.9}/CHANGELOG.md | 9 + .../meshcentral/{0.0.8 => 0.0.9}/CONFIG.md | 0 .../meshcentral/{0.0.8 => 0.0.9}/Chart.lock | 2 +- .../meshcentral/{0.0.8 => 0.0.9}/Chart.yaml | 2 +- .../meshcentral/{0.0.8 => 0.0.9}/README.md | 0 .../{0.0.8 => 0.0.9}/app-readme.md | 0 .../{0.0.8 => 0.0.9}/charts/common-9.2.6.tgz | Bin .../charts/mongodb-0.0.14.tgz | Bin .../{0.0.8 => 0.0.9}/helm-values.md | 4 +- .../{0.0.8 => 0.0.9}/ix_values.yaml | 4 +- .../{0.0.8 => 0.0.9}/questions.yaml | 0 .../meshcentral/{0.0.8 => 0.0.9}/security.md | 6 +- .../{0.0.8 => 0.0.9}/templates/_configmap.tpl | 0 .../{0.0.8 => 0.0.9}/templates/common.yaml | 0 .../meshcentral/{0.0.8 => 0.0.9}/values.yaml | 0 incubator/typecho/0.0.4/CHANGELOG.md | 10 - incubator/typecho/0.0.5/CHANGELOG.md | 23 + incubator/typecho/{0.0.4 => 0.0.5}/CONFIG.md | 0 incubator/typecho/{0.0.4 => 0.0.5}/Chart.lock | 2 +- incubator/typecho/{0.0.4 => 0.0.5}/Chart.yaml | 4 +- incubator/typecho/{0.0.4 => 0.0.5}/README.md | 0 .../typecho/{0.0.4 => 0.0.5}/app-readme.md | 0 .../{0.0.4 => 0.0.5}/charts/common-9.2.6.tgz | Bin .../charts/mariadb-2.0.28.tgz | Bin .../typecho/{0.0.4 => 0.0.5}/helm-values.md | 6 +- .../typecho/{0.0.4 => 0.0.5}/ix_values.yaml | 6 +- .../typecho/{0.0.4 => 0.0.5}/questions.yaml | 0 .../typecho/{0.0.4 => 0.0.5}/security.md | 4 +- .../{0.0.4 => 0.0.5}/templates/common.yaml | 0 .../typecho/{0.0.4 => 0.0.5}/values.yaml | 0 incubator/xwiki/{0.0.4 => 0.0.5}/CHANGELOG.md | 9 + incubator/xwiki/{0.0.4 => 0.0.5}/CONFIG.md | 0 .../0.0.1 => xwiki/0.0.5}/Chart.lock | 2 +- incubator/xwiki/{0.0.4 => 0.0.5}/Chart.yaml | 4 +- incubator/xwiki/{0.0.4 => 0.0.5}/README.md | 0 .../xwiki/{0.0.4 => 0.0.5}/app-readme.md | 0 .../{0.0.4 => 0.0.5}/charts/common-9.2.6.tgz | Bin .../charts/postgresql-7.0.27.tgz | Bin .../xwiki/{0.0.4 => 0.0.5}/helm-values.md | 4 +- .../xwiki/{0.0.4 => 0.0.5}/ix_values.yaml | 4 +- .../xwiki/{0.0.4 => 0.0.5}/questions.yaml | 0 incubator/xwiki/{0.0.4 => 0.0.5}/security.md | 4 +- .../{0.0.4 => 0.0.5}/templates/common.yaml | 0 incubator/xwiki/{0.0.4 => 0.0.5}/values.yaml | 0 stable/heimdall/10.0.9/CHANGELOG.md | 99 + .../2.0.8 => heimdall/10.0.9}/CONFIG.md | 0 .../2.0.8 => heimdall/10.0.9}/Chart.lock | 2 +- stable/heimdall/10.0.9/Chart.yaml | 27 + stable/heimdall/10.0.9/README.md | 37 + stable/heimdall/10.0.9/app-readme.md | 3 + .../10.0.9}/charts/common-9.2.6.tgz | Bin stable/heimdall/10.0.9/helm-values.md | 27 + stable/heimdall/10.0.9/ix_values.yaml | 28 + stable/heimdall/10.0.9/questions.yaml | 2402 +++++++++++++++++ stable/heimdall/10.0.9/security.md | 79 + .../10.0.9}/templates/common.yaml | 0 .../2.0.8 => heimdall/10.0.9}/values.yaml | 0 stable/mosdns/1.0.0/CHANGELOG.md | 36 + .../1.0.9 => mosdns/1.0.0}/CONFIG.md | 0 .../1.0.9 => mosdns/1.0.0}/Chart.lock | 2 +- stable/mosdns/1.0.0/Chart.yaml | 29 + stable/mosdns/1.0.0/README.md | 37 + stable/mosdns/1.0.0/app-readme.md | 3 + .../1.0.0}/charts/common-9.2.6.tgz | Bin stable/mosdns/1.0.0/helm-values.md | 27 + stable/mosdns/1.0.0/ix_values.yaml | 25 + stable/mosdns/1.0.0/questions.yaml | 2208 +++++++++++++++ stable/mosdns/1.0.0/security.md | 83 + stable/mosdns/1.0.0/templates/common.yaml | 1 + .../1.0.9 => mosdns/1.0.0}/values.yaml | 0 stable/mosdns/item.yaml | 4 + .../{2.0.8 => 2.0.9}/CHANGELOG.md | 18 +- stable/sqlitebrowser/2.0.9/CONFIG.md | 7 + stable/sqlitebrowser/2.0.9/Chart.lock | 6 + .../sqlitebrowser/{2.0.8 => 2.0.9}/Chart.yaml | 2 +- .../sqlitebrowser/{2.0.8 => 2.0.9}/README.md | 0 .../{2.0.8 => 2.0.9}/app-readme.md | 0 .../2.0.9/charts/common-9.2.6.tgz | Bin 0 -> 44100 bytes .../{2.0.8 => 2.0.9}/helm-values.md | 2 +- .../{2.0.8 => 2.0.9}/ix_values.yaml | 2 +- .../{2.0.8 => 2.0.9}/questions.yaml | 2 +- .../{2.0.8 => 2.0.9}/security.md | 39 +- .../{2.0.8 => 2.0.9}/templates/common.yaml | 0 stable/sqlitebrowser/2.0.9/values.yaml | 0 .../wireshark/{1.0.9 => 1.0.10}/CHANGELOG.md | 18 +- stable/wireshark/1.0.10/CONFIG.md | 7 + stable/wireshark/1.0.10/Chart.lock | 6 + stable/wireshark/{1.0.9 => 1.0.10}/Chart.yaml | 4 +- stable/wireshark/{1.0.9 => 1.0.10}/README.md | 2 +- .../wireshark/{1.0.9 => 1.0.10}/app-readme.md | 0 .../wireshark/1.0.10/charts/common-9.2.7.tgz | Bin 0 -> 44112 bytes .../{1.0.9 => 1.0.10}/helm-values.md | 4 +- .../{1.0.9 => 1.0.10}/ix_values.yaml | 5 +- .../{1.0.9 => 1.0.10}/questions.yaml | 6 +- .../wireshark/{1.0.9 => 1.0.10}/security.md | 44 +- stable/wireshark/1.0.10/templates/common.yaml | 1 + stable/wireshark/1.0.10/values.yaml | 0 126 files changed, 5410 insertions(+), 176 deletions(-) delete mode 100644 incubator/ferdi-server/0.0.1/CHANGELOG.md create mode 100644 incubator/ferdi-server/0.0.3/CHANGELOG.md rename incubator/ferdi-server/{0.0.1 => 0.0.3}/CONFIG.md (100%) rename incubator/{xwiki/0.0.4 => ferdi-server/0.0.3}/Chart.lock (85%) rename incubator/ferdi-server/{0.0.1 => 0.0.3}/Chart.yaml (98%) rename incubator/ferdi-server/{0.0.1 => 0.0.3}/README.md (100%) rename incubator/ferdi-server/{0.0.1 => 0.0.3}/app-readme.md (100%) rename incubator/ferdi-server/{0.0.1 => 0.0.3}/charts/common-9.2.6.tgz (100%) rename incubator/ferdi-server/{0.0.1 => 0.0.3}/charts/postgresql-7.0.27.tgz (100%) rename incubator/ferdi-server/{0.0.1 => 0.0.3}/helm-values.md (95%) rename incubator/ferdi-server/{0.0.1 => 0.0.3}/ix_values.yaml (94%) rename incubator/ferdi-server/{0.0.1 => 0.0.3}/questions.yaml (100%) rename incubator/ferdi-server/{0.0.1 => 0.0.3}/security.md (98%) rename incubator/ferdi-server/{0.0.1 => 0.0.3}/templates/_secrets.tpl (100%) rename incubator/ferdi-server/{0.0.1 => 0.0.3}/templates/common.yaml (100%) rename incubator/ferdi-server/{0.0.1 => 0.0.3}/values.yaml (100%) rename incubator/linkding/{0.0.3 => 0.0.4}/CHANGELOG.md (64%) rename incubator/linkding/{0.0.3 => 0.0.4}/CONFIG.md (100%) rename incubator/linkding/{0.0.3 => 0.0.4}/Chart.lock (80%) rename incubator/linkding/{0.0.3 => 0.0.4}/Chart.yaml (98%) rename incubator/linkding/{0.0.3 => 0.0.4}/README.md (100%) rename incubator/linkding/{0.0.3 => 0.0.4}/app-readme.md (100%) rename incubator/linkding/{0.0.3 => 0.0.4}/charts/common-9.2.6.tgz (100%) rename incubator/linkding/{0.0.3 => 0.0.4}/helm-values.md (88%) rename incubator/linkding/{0.0.3 => 0.0.4}/ix_values.yaml (78%) rename incubator/linkding/{0.0.3 => 0.0.4}/questions.yaml (100%) rename incubator/linkding/{0.0.3 => 0.0.4}/security.md (97%) rename incubator/linkding/{0.0.3 => 0.0.4}/templates/common.yaml (100%) rename incubator/linkding/{0.0.3 => 0.0.4}/values.yaml (100%) rename incubator/meshcentral/{0.0.8 => 0.0.9}/CHANGELOG.md (82%) rename incubator/meshcentral/{0.0.8 => 0.0.9}/CONFIG.md (100%) rename incubator/meshcentral/{0.0.8 => 0.0.9}/Chart.lock (85%) rename incubator/meshcentral/{0.0.8 => 0.0.9}/Chart.yaml (98%) rename incubator/meshcentral/{0.0.8 => 0.0.9}/README.md (100%) rename incubator/meshcentral/{0.0.8 => 0.0.9}/app-readme.md (100%) rename incubator/meshcentral/{0.0.8 => 0.0.9}/charts/common-9.2.6.tgz (100%) rename incubator/meshcentral/{0.0.8 => 0.0.9}/charts/mongodb-0.0.14.tgz (100%) rename incubator/meshcentral/{0.0.8 => 0.0.9}/helm-values.md (93%) rename incubator/meshcentral/{0.0.8 => 0.0.9}/ix_values.yaml (93%) rename incubator/meshcentral/{0.0.8 => 0.0.9}/questions.yaml (100%) rename incubator/meshcentral/{0.0.8 => 0.0.9}/security.md (99%) rename incubator/meshcentral/{0.0.8 => 0.0.9}/templates/_configmap.tpl (100%) rename incubator/meshcentral/{0.0.8 => 0.0.9}/templates/common.yaml (100%) rename incubator/meshcentral/{0.0.8 => 0.0.9}/values.yaml (100%) delete mode 100644 incubator/typecho/0.0.4/CHANGELOG.md create mode 100644 incubator/typecho/0.0.5/CHANGELOG.md rename incubator/typecho/{0.0.4 => 0.0.5}/CONFIG.md (100%) rename incubator/typecho/{0.0.4 => 0.0.5}/Chart.lock (85%) rename incubator/typecho/{0.0.4 => 0.0.5}/Chart.yaml (95%) rename incubator/typecho/{0.0.4 => 0.0.5}/README.md (100%) rename incubator/typecho/{0.0.4 => 0.0.5}/app-readme.md (100%) rename incubator/typecho/{0.0.4 => 0.0.5}/charts/common-9.2.6.tgz (100%) rename incubator/typecho/{0.0.4 => 0.0.5}/charts/mariadb-2.0.28.tgz (100%) rename incubator/typecho/{0.0.4 => 0.0.5}/helm-values.md (93%) rename incubator/typecho/{0.0.4 => 0.0.5}/ix_values.yaml (88%) rename incubator/typecho/{0.0.4 => 0.0.5}/questions.yaml (100%) rename incubator/typecho/{0.0.4 => 0.0.5}/security.md (99%) rename incubator/typecho/{0.0.4 => 0.0.5}/templates/common.yaml (100%) rename incubator/typecho/{0.0.4 => 0.0.5}/values.yaml (100%) rename incubator/xwiki/{0.0.4 => 0.0.5}/CHANGELOG.md (56%) rename incubator/xwiki/{0.0.4 => 0.0.5}/CONFIG.md (100%) rename incubator/{ferdi-server/0.0.1 => xwiki/0.0.5}/Chart.lock (85%) rename incubator/xwiki/{0.0.4 => 0.0.5}/Chart.yaml (95%) rename incubator/xwiki/{0.0.4 => 0.0.5}/README.md (100%) rename incubator/xwiki/{0.0.4 => 0.0.5}/app-readme.md (100%) rename incubator/xwiki/{0.0.4 => 0.0.5}/charts/common-9.2.6.tgz (100%) rename incubator/xwiki/{0.0.4 => 0.0.5}/charts/postgresql-7.0.27.tgz (100%) rename incubator/xwiki/{0.0.4 => 0.0.5}/helm-values.md (91%) rename incubator/xwiki/{0.0.4 => 0.0.5}/ix_values.yaml (84%) rename incubator/xwiki/{0.0.4 => 0.0.5}/questions.yaml (100%) rename incubator/xwiki/{0.0.4 => 0.0.5}/security.md (99%) rename incubator/xwiki/{0.0.4 => 0.0.5}/templates/common.yaml (100%) rename incubator/xwiki/{0.0.4 => 0.0.5}/values.yaml (100%) create mode 100644 stable/heimdall/10.0.9/CHANGELOG.md rename stable/{sqlitebrowser/2.0.8 => heimdall/10.0.9}/CONFIG.md (100%) rename stable/{sqlitebrowser/2.0.8 => heimdall/10.0.9}/Chart.lock (80%) create mode 100644 stable/heimdall/10.0.9/Chart.yaml create mode 100644 stable/heimdall/10.0.9/README.md create mode 100644 stable/heimdall/10.0.9/app-readme.md rename stable/{sqlitebrowser/2.0.8 => heimdall/10.0.9}/charts/common-9.2.6.tgz (100%) create mode 100644 stable/heimdall/10.0.9/helm-values.md create mode 100644 stable/heimdall/10.0.9/ix_values.yaml create mode 100644 stable/heimdall/10.0.9/questions.yaml create mode 100644 stable/heimdall/10.0.9/security.md rename stable/{wireshark/1.0.9 => heimdall/10.0.9}/templates/common.yaml (100%) rename stable/{sqlitebrowser/2.0.8 => heimdall/10.0.9}/values.yaml (100%) create mode 100644 stable/mosdns/1.0.0/CHANGELOG.md rename stable/{wireshark/1.0.9 => mosdns/1.0.0}/CONFIG.md (100%) rename stable/{wireshark/1.0.9 => mosdns/1.0.0}/Chart.lock (80%) create mode 100644 stable/mosdns/1.0.0/Chart.yaml create mode 100644 stable/mosdns/1.0.0/README.md create mode 100644 stable/mosdns/1.0.0/app-readme.md rename stable/{wireshark/1.0.9 => mosdns/1.0.0}/charts/common-9.2.6.tgz (100%) create mode 100644 stable/mosdns/1.0.0/helm-values.md create mode 100644 stable/mosdns/1.0.0/ix_values.yaml create mode 100644 stable/mosdns/1.0.0/questions.yaml create mode 100644 stable/mosdns/1.0.0/security.md create mode 100644 stable/mosdns/1.0.0/templates/common.yaml rename stable/{wireshark/1.0.9 => mosdns/1.0.0}/values.yaml (100%) create mode 100644 stable/mosdns/item.yaml rename stable/sqlitebrowser/{2.0.8 => 2.0.9}/CHANGELOG.md (91%) create mode 100644 stable/sqlitebrowser/2.0.9/CONFIG.md create mode 100644 stable/sqlitebrowser/2.0.9/Chart.lock rename stable/sqlitebrowser/{2.0.8 => 2.0.9}/Chart.yaml (98%) rename stable/sqlitebrowser/{2.0.8 => 2.0.9}/README.md (100%) rename stable/sqlitebrowser/{2.0.8 => 2.0.9}/app-readme.md (100%) create mode 100644 stable/sqlitebrowser/2.0.9/charts/common-9.2.6.tgz rename stable/sqlitebrowser/{2.0.8 => 2.0.9}/helm-values.md (96%) rename stable/sqlitebrowser/{2.0.8 => 2.0.9}/ix_values.yaml (96%) rename stable/sqlitebrowser/{2.0.8 => 2.0.9}/questions.yaml (99%) rename stable/sqlitebrowser/{2.0.8 => 2.0.9}/security.md (98%) rename stable/sqlitebrowser/{2.0.8 => 2.0.9}/templates/common.yaml (100%) create mode 100644 stable/sqlitebrowser/2.0.9/values.yaml rename stable/wireshark/{1.0.9 => 1.0.10}/CHANGELOG.md (91%) create mode 100644 stable/wireshark/1.0.10/CONFIG.md create mode 100644 stable/wireshark/1.0.10/Chart.lock rename stable/wireshark/{1.0.9 => 1.0.10}/Chart.yaml (95%) rename stable/wireshark/{1.0.9 => 1.0.10}/README.md (95%) rename stable/wireshark/{1.0.9 => 1.0.10}/app-readme.md (100%) create mode 100644 stable/wireshark/1.0.10/charts/common-9.2.7.tgz rename stable/wireshark/{1.0.9 => 1.0.10}/helm-values.md (89%) rename stable/wireshark/{1.0.9 => 1.0.10}/ix_values.yaml (83%) rename stable/wireshark/{1.0.9 => 1.0.10}/questions.yaml (99%) rename stable/wireshark/{1.0.9 => 1.0.10}/security.md (84%) create mode 100644 stable/wireshark/1.0.10/templates/common.yaml create mode 100644 stable/wireshark/1.0.10/values.yaml diff --git a/incubator/ferdi-server/0.0.1/CHANGELOG.md b/incubator/ferdi-server/0.0.1/CHANGELOG.md deleted file mode 100644 index ad3152cf5bf..00000000000 --- a/incubator/ferdi-server/0.0.1/CHANGELOG.md +++ /dev/null @@ -1,10 +0,0 @@ -# Changelog
- - - -### ferdi-server-0.0.1 (2022-04-01) - -#### Feat - -* Add ferdi-server ([#2367](https://github.com/truecharts/apps/issues/2367)) - diff --git a/incubator/ferdi-server/0.0.3/CHANGELOG.md b/incubator/ferdi-server/0.0.3/CHANGELOG.md new file mode 100644 index 00000000000..cfa50a98c3d --- /dev/null +++ b/incubator/ferdi-server/0.0.3/CHANGELOG.md @@ -0,0 +1,19 @@ +# Changelog
+ + + +### [ferdi-server-0.0.3](https://github.com/truecharts/apps/compare/ferdi-server-0.0.2...ferdi-server-0.0.3) (2022-04-03) + +#### Chore + +* Auto-update chart README [skip ci] +* update image refs ([#2411](https://github.com/truecharts/apps/issues/2411)) + + + + +### ferdi-server-0.0.1 (2022-04-01) + +#### Feat + +* Add ferdi-server ([#2367](https://github.com/truecharts/apps/issues/2367)) diff --git a/incubator/ferdi-server/0.0.1/CONFIG.md b/incubator/ferdi-server/0.0.3/CONFIG.md similarity index 100% rename from incubator/ferdi-server/0.0.1/CONFIG.md rename to incubator/ferdi-server/0.0.3/CONFIG.md diff --git a/incubator/xwiki/0.0.4/Chart.lock b/incubator/ferdi-server/0.0.3/Chart.lock similarity index 85% rename from incubator/xwiki/0.0.4/Chart.lock rename to incubator/ferdi-server/0.0.3/Chart.lock index 821eb14d57e..9c6a3547f69 100644 --- a/incubator/xwiki/0.0.4/Chart.lock +++ b/incubator/ferdi-server/0.0.3/Chart.lock @@ -6,4 +6,4 @@ dependencies: repository: https://charts.truecharts.org/ version: 7.0.27 digest: sha256:18badf2ec625ddadfd4348a1e7ce332adffcdf08c4b787e14d024f01bca60b19 -generated: "2022-04-03T10:09:41.478272398Z" +generated: "2022-04-03T13:16:44.38288856Z" diff --git a/incubator/ferdi-server/0.0.1/Chart.yaml b/incubator/ferdi-server/0.0.3/Chart.yaml similarity index 98% rename from incubator/ferdi-server/0.0.1/Chart.yaml rename to incubator/ferdi-server/0.0.3/Chart.yaml index 411c7f671ce..2df5a870f79 100644 --- a/incubator/ferdi-server/0.0.1/Chart.yaml +++ b/incubator/ferdi-server/0.0.3/Chart.yaml @@ -21,7 +21,7 @@ maintainers: name: ferdi-server sources: - https://github.com/getferdi/server -version: 0.0.1 +version: 0.0.3 annotations: truecharts.org/catagories: | - media diff --git a/incubator/ferdi-server/0.0.1/README.md b/incubator/ferdi-server/0.0.3/README.md similarity index 100% rename from incubator/ferdi-server/0.0.1/README.md rename to incubator/ferdi-server/0.0.3/README.md diff --git a/incubator/ferdi-server/0.0.1/app-readme.md b/incubator/ferdi-server/0.0.3/app-readme.md similarity index 100% rename from incubator/ferdi-server/0.0.1/app-readme.md rename to incubator/ferdi-server/0.0.3/app-readme.md diff --git a/incubator/ferdi-server/0.0.1/charts/common-9.2.6.tgz b/incubator/ferdi-server/0.0.3/charts/common-9.2.6.tgz similarity index 100% rename from incubator/ferdi-server/0.0.1/charts/common-9.2.6.tgz rename to incubator/ferdi-server/0.0.3/charts/common-9.2.6.tgz diff --git a/incubator/ferdi-server/0.0.1/charts/postgresql-7.0.27.tgz b/incubator/ferdi-server/0.0.3/charts/postgresql-7.0.27.tgz similarity index 100% rename from incubator/ferdi-server/0.0.1/charts/postgresql-7.0.27.tgz rename to incubator/ferdi-server/0.0.3/charts/postgresql-7.0.27.tgz diff --git a/incubator/ferdi-server/0.0.1/helm-values.md b/incubator/ferdi-server/0.0.3/helm-values.md similarity index 95% rename from incubator/ferdi-server/0.0.1/helm-values.md rename to incubator/ferdi-server/0.0.3/helm-values.md index 3163d1efd61..f82eaafb9b4 100644 --- a/incubator/ferdi-server/0.0.1/helm-values.md +++ b/incubator/ferdi-server/0.0.3/helm-values.md @@ -28,8 +28,8 @@ You will, however, be able to use all values referenced in the common chart here | envValueFrom.DB_PASSWORD.secretKeyRef.key | string | `"postgresql-password"` | | | envValueFrom.DB_PASSWORD.secretKeyRef.name | string | `"dbcreds"` | | | image.pullPolicy | string | `"IfNotPresent"` | | -| image.repository | string | `"getferdi/ferdi-server"` | | -| image.tag | string | `"1.3.2@sha256:b94315a20480e8c47f960590279766c8636c53f9deaaa7697499a51028e33dec"` | | +| image.repository | string | `"tccr.io/truecharts/ferdi-server"` | | +| image.tag | string | `"v1.3.2@sha256:9cd5863593eb1f8aa6ddf695d4984f6691fff7d453e2f608a30d67bda4c58c27"` | | | installContainers.1-create-key-file.args[0] | string | `"keyfile=\"/app/data/FERDI_APP_KEY.txt\"; if [ ! -f ${keyfile} ]; then\n echo \"No APP_KEY File...\";\n echo \"Creating APP_KEY file...\";\n echo \"${APP_KEY}\" > ${keyfile};\n if [ -f ${keyfile} ];\n then\n echo \"Success!\";\n else\n echo \"Failed.\";\n fi;\nelse\n echo \"APP_KEY File exists. Skipping...\";\nfi;\n"` | | | installContainers.1-create-key-file.command[0] | string | `"sh"` | | | installContainers.1-create-key-file.command[1] | string | `"-c"` | | diff --git a/incubator/ferdi-server/0.0.1/ix_values.yaml b/incubator/ferdi-server/0.0.3/ix_values.yaml similarity index 94% rename from incubator/ferdi-server/0.0.1/ix_values.yaml rename to incubator/ferdi-server/0.0.3/ix_values.yaml index 6be8a620f5c..e8311252ad4 100644 --- a/incubator/ferdi-server/0.0.1/ix_values.yaml +++ b/incubator/ferdi-server/0.0.3/ix_values.yaml @@ -1,6 +1,6 @@ image: - repository: getferdi/ferdi-server - tag: 1.3.2@sha256:b94315a20480e8c47f960590279766c8636c53f9deaaa7697499a51028e33dec + repository: tccr.io/truecharts/ferdi-server + tag: v1.3.2@sha256:9cd5863593eb1f8aa6ddf695d4984f6691fff7d453e2f608a30d67bda4c58c27 pullPolicy: IfNotPresent securityContext: diff --git a/incubator/ferdi-server/0.0.1/questions.yaml b/incubator/ferdi-server/0.0.3/questions.yaml similarity index 100% rename from incubator/ferdi-server/0.0.1/questions.yaml rename to incubator/ferdi-server/0.0.3/questions.yaml diff --git a/incubator/ferdi-server/0.0.1/security.md b/incubator/ferdi-server/0.0.3/security.md similarity index 98% rename from incubator/ferdi-server/0.0.1/security.md rename to incubator/ferdi-server/0.0.3/security.md index 8f29412cff4..ce9d833f49e 100644 --- a/incubator/ferdi-server/0.0.1/security.md +++ b/incubator/ferdi-server/0.0.3/security.md @@ -12,9 +12,9 @@ hide: ##### Scan Results #### Chart Object: ferdi-server/charts/postgresql/templates/common.yaml - - + + | Type | Misconfiguration ID | Check | Severity | Explaination | Links | |:----------------|:------------------:|:-----------:|:------------------:|-----------------------------------------|-----------------------------------------| | Kubernetes Security Check | KSV001 | Process can elevate its own privileges | MEDIUM |
Expand... A program inside the container can elevate its own privileges and run as root, which might give the program control over the container and node.

Container 'hostpatch' of StatefulSet 'RELEASE-NAME-postgresql' should set 'securityContext.allowPrivilegeEscalation' to false
|
Expand...https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted
https://avd.aquasec.com/appshield/ksv001
| @@ -39,7 +39,7 @@ hide: | Kubernetes Security Check | KSV023 | hostPath volumes mounted | MEDIUM |
Expand... HostPath volumes must be forbidden.

StatefulSet 'RELEASE-NAME-postgresql' should not set 'spec.template.volumes.hostPath'
|
Expand...https://kubernetes.io/docs/concepts/security/pod-security-standards/#baseline
https://avd.aquasec.com/appshield/ksv023
| | Kubernetes Security Check | KSV029 | A root primary or supplementary GID set | LOW |
Expand... Containers should be forbidden from running with a root primary or supplementary GID.

StatefulSet 'RELEASE-NAME-postgresql' should set 'spec.securityContext.runAsGroup', 'spec.securityContext.supplementalGroups[*]' and 'spec.securityContext.fsGroup' to integer greater than 0
|
Expand...https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted
https://avd.aquasec.com/appshield/ksv029
| - + | Type | Misconfiguration ID | Check | Severity | Explaination | Links | |:----------------|:------------------:|:-----------:|:------------------:|-----------------------------------------|-----------------------------------------| | Kubernetes Security Check | KSV001 | Process can elevate its own privileges | MEDIUM |
Expand... A program inside the container can elevate its own privileges and run as root, which might give the program control over the container and node.

Container '1-create-key-file' of Deployment 'RELEASE-NAME-ferdi-server' should set 'securityContext.allowPrivilegeEscalation' to false
|
Expand...https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted
https://avd.aquasec.com/appshield/ksv001
| @@ -87,8 +87,8 @@ hide: tccr.io/truecharts/alpine:v3.15.2@sha256:29ed3480a0ee43f7af681fed5d4fc215516abf1c41eade6938b26d8c9c2c7583 tccr.io/truecharts/alpine:v3.15.2@sha256:29ed3480a0ee43f7af681fed5d4fc215516abf1c41eade6938b26d8c9c2c7583 tccr.io/truecharts/postgresql:v14.2.0@sha256:f3be169e9257f6c516723874e8bed1e07f5af4ee555009fef6e481e740a4343b - 'getferdi/ferdi-server:1.3.2@sha256:b94315a20480e8c47f960590279766c8636c53f9deaaa7697499a51028e33dec' - getferdi/ferdi-server:1.3.2@sha256:b94315a20480e8c47f960590279766c8636c53f9deaaa7697499a51028e33dec + 'tccr.io/truecharts/ferdi-server:v1.3.2@sha256:9cd5863593eb1f8aa6ddf695d4984f6691fff7d453e2f608a30d67bda4c58c27' + tccr.io/truecharts/ferdi-server:v1.3.2@sha256:9cd5863593eb1f8aa6ddf695d4984f6691fff7d453e2f608a30d67bda4c58c27 tccr.io/truecharts/alpine:v3.15.2@sha256:29ed3480a0ee43f7af681fed5d4fc215516abf1c41eade6938b26d8c9c2c7583 tccr.io/truecharts/alpine:v3.15.2@sha256:29ed3480a0ee43f7af681fed5d4fc215516abf1c41eade6938b26d8c9c2c7583 tccr.io/truecharts/postgresql:v14.2.0@sha256:29d271601a53989aa4d6d0350f00ed36c7d20e920a9c744d6c01b81aee6638a1 @@ -97,33 +97,33 @@ hide: #### Container: tccr.io/truecharts/alpine:v3.15.2@sha256:29ed3480a0ee43f7af681fed5d4fc215516abf1c41eade6938b26d8c9c2c7583 (alpine 3.15.2) - + **alpine** - + | Package | Vulnerability | Severity | Installed Version | Fixed Version | Links | |:----------------|:------------------:|:-----------:|:------------------:|:-------------:|-----------------------------------------| -| zlib | CVE-2018-25032 | HIGH | 1.2.11-r3 | 1.2.12-r0 |
Expand...http://www.openwall.com/lists/oss-security/2022/03/25/2
http://www.openwall.com/lists/oss-security/2022/03/26/1
https://access.redhat.com/security/cve/CVE-2018-25032
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25032
https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531
https://github.com/madler/zlib/compare/v1.2.11...v1.2.12
https://github.com/madler/zlib/issues/605
https://nvd.nist.gov/vuln/detail/CVE-2018-25032
https://ubuntu.com/security/notices/USN-5355-1
https://ubuntu.com/security/notices/USN-5355-2
https://ubuntu.com/security/notices/USN-5359-1
https://www.openwall.com/lists/oss-security/2022/03/24/1
https://www.openwall.com/lists/oss-security/2022/03/28/1
https://www.openwall.com/lists/oss-security/2022/03/28/3
| +| zlib | CVE-2018-25032 | HIGH | 1.2.11-r3 | 1.2.12-r0 |
Expand...http://www.openwall.com/lists/oss-security/2022/03/25/2
http://www.openwall.com/lists/oss-security/2022/03/26/1
https://access.redhat.com/security/cve/CVE-2018-25032
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25032
https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531
https://github.com/madler/zlib/compare/v1.2.11...v1.2.12
https://github.com/madler/zlib/issues/605
https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html
https://nvd.nist.gov/vuln/detail/CVE-2018-25032
https://ubuntu.com/security/notices/USN-5355-1
https://ubuntu.com/security/notices/USN-5355-2
https://ubuntu.com/security/notices/USN-5359-1
https://www.debian.org/security/2022/dsa-5111
https://www.openwall.com/lists/oss-security/2022/03/24/1
https://www.openwall.com/lists/oss-security/2022/03/28/1
https://www.openwall.com/lists/oss-security/2022/03/28/3
| #### Container: tccr.io/truecharts/alpine:v3.15.2@sha256:29ed3480a0ee43f7af681fed5d4fc215516abf1c41eade6938b26d8c9c2c7583 (alpine 3.15.2) - + **alpine** - + | Package | Vulnerability | Severity | Installed Version | Fixed Version | Links | |:----------------|:------------------:|:-----------:|:------------------:|:-------------:|-----------------------------------------| -| zlib | CVE-2018-25032 | HIGH | 1.2.11-r3 | 1.2.12-r0 |
Expand...http://www.openwall.com/lists/oss-security/2022/03/25/2
http://www.openwall.com/lists/oss-security/2022/03/26/1
https://access.redhat.com/security/cve/CVE-2018-25032
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25032
https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531
https://github.com/madler/zlib/compare/v1.2.11...v1.2.12
https://github.com/madler/zlib/issues/605
https://nvd.nist.gov/vuln/detail/CVE-2018-25032
https://ubuntu.com/security/notices/USN-5355-1
https://ubuntu.com/security/notices/USN-5355-2
https://ubuntu.com/security/notices/USN-5359-1
https://www.openwall.com/lists/oss-security/2022/03/24/1
https://www.openwall.com/lists/oss-security/2022/03/28/1
https://www.openwall.com/lists/oss-security/2022/03/28/3
| +| zlib | CVE-2018-25032 | HIGH | 1.2.11-r3 | 1.2.12-r0 |
Expand...http://www.openwall.com/lists/oss-security/2022/03/25/2
http://www.openwall.com/lists/oss-security/2022/03/26/1
https://access.redhat.com/security/cve/CVE-2018-25032
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25032
https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531
https://github.com/madler/zlib/compare/v1.2.11...v1.2.12
https://github.com/madler/zlib/issues/605
https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html
https://nvd.nist.gov/vuln/detail/CVE-2018-25032
https://ubuntu.com/security/notices/USN-5355-1
https://ubuntu.com/security/notices/USN-5355-2
https://ubuntu.com/security/notices/USN-5359-1
https://www.debian.org/security/2022/dsa-5111
https://www.openwall.com/lists/oss-security/2022/03/24/1
https://www.openwall.com/lists/oss-security/2022/03/28/1
https://www.openwall.com/lists/oss-security/2022/03/28/3
| #### Container: tccr.io/truecharts/postgresql:v14.2.0@sha256:f3be169e9257f6c516723874e8bed1e07f5af4ee555009fef6e481e740a4343b (debian 10.12) - + **debian** - + | Package | Vulnerability | Severity | Installed Version | Fixed Version | Links | |:----------------|:------------------:|:-----------:|:------------------:|:-------------:|-----------------------------------------| | apt | CVE-2011-3374 | LOW | 1.8.2.3 | |
Expand...https://access.redhat.com/security/cve/cve-2011-3374
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=642480
https://people.canonical.com/~ubuntu-security/cve/2011/CVE-2011-3374.html
https://seclists.org/fulldisclosure/2011/Sep/221
https://security-tracker.debian.org/tracker/CVE-2011-3374
https://snyk.io/vuln/SNYK-LINUX-APT-116518
https://ubuntu.com/security/CVE-2011-3374
| @@ -344,19 +344,19 @@ hide: | tar | CVE-2021-20193 | LOW | 1.30+dfsg-6 | |
Expand...https://access.redhat.com/security/cve/CVE-2021-20193
https://bugzilla.redhat.com/show_bug.cgi?id=1917565
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20193
https://git.savannah.gnu.org/cgit/tar.git/commit/?id=d9d4435692150fa8ff68e1b1a473d187cc3fd777
https://savannah.gnu.org/bugs/?59897
https://security.gentoo.org/glsa/202105-29
https://ubuntu.com/security/notices/USN-5329-1
| | util-linux | CVE-2021-37600 | LOW | 2.33.1-0.1 | |
Expand...https://access.redhat.com/security/cve/CVE-2021-37600
https://github.com/karelzak/util-linux/commit/1c9143d0c1f979c3daf10e1c37b5b1e916c22a1c
https://github.com/karelzak/util-linux/issues/1395
https://nvd.nist.gov/vuln/detail/CVE-2021-37600
https://security.netapp.com/advisory/ntap-20210902-0002/
| | util-linux | CVE-2022-0563 | LOW | 2.33.1-0.1 | |
Expand...https://access.redhat.com/security/cve/CVE-2022-0563
https://lore.kernel.org/util-linux/20220214110609.msiwlm457ngoic6w@ws.net.home/T/#u
https://nvd.nist.gov/vuln/detail/CVE-2022-0563
https://security.netapp.com/advisory/ntap-20220331-0002/
| -| zlib1g | CVE-2018-25032 | HIGH | 1:1.2.11.dfsg-1 | |
Expand...http://www.openwall.com/lists/oss-security/2022/03/25/2
http://www.openwall.com/lists/oss-security/2022/03/26/1
https://access.redhat.com/security/cve/CVE-2018-25032
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25032
https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531
https://github.com/madler/zlib/compare/v1.2.11...v1.2.12
https://github.com/madler/zlib/issues/605
https://nvd.nist.gov/vuln/detail/CVE-2018-25032
https://ubuntu.com/security/notices/USN-5355-1
https://ubuntu.com/security/notices/USN-5355-2
https://ubuntu.com/security/notices/USN-5359-1
https://www.openwall.com/lists/oss-security/2022/03/24/1
https://www.openwall.com/lists/oss-security/2022/03/28/1
https://www.openwall.com/lists/oss-security/2022/03/28/3
| +| zlib1g | CVE-2018-25032 | HIGH | 1:1.2.11.dfsg-1 | 1:1.2.11.dfsg-1+deb10u1 |
Expand...http://www.openwall.com/lists/oss-security/2022/03/25/2
http://www.openwall.com/lists/oss-security/2022/03/26/1
https://access.redhat.com/security/cve/CVE-2018-25032
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25032
https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531
https://github.com/madler/zlib/compare/v1.2.11...v1.2.12
https://github.com/madler/zlib/issues/605
https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html
https://nvd.nist.gov/vuln/detail/CVE-2018-25032
https://ubuntu.com/security/notices/USN-5355-1
https://ubuntu.com/security/notices/USN-5355-2
https://ubuntu.com/security/notices/USN-5359-1
https://www.debian.org/security/2022/dsa-5111
https://www.openwall.com/lists/oss-security/2022/03/24/1
https://www.openwall.com/lists/oss-security/2022/03/28/1
https://www.openwall.com/lists/oss-security/2022/03/28/3
| **jar** - + | No Vulnerabilities found | |:---------------------------------| - + **gobinary** - + | Package | Vulnerability | Severity | Installed Version | Fixed Version | Links | |:----------------|:------------------:|:-----------:|:------------------:|:-------------:|-----------------------------------------| | github.com/opencontainers/runc | CVE-2021-43784 | MEDIUM | v1.0.1 | v1.0.3 |
Expand...https://access.redhat.com/security/cve/CVE-2021-43784
https://bugs.chromium.org/p/project-zero/issues/detail?id=2241
https://github.com/opencontainers/runc/commit/9c444070ec7bb83995dbc0185da68284da71c554
https://github.com/opencontainers/runc/commit/d72d057ba794164c3cce9451a00b72a78b25e1ae
https://github.com/opencontainers/runc/commit/f50369af4b571e358f20b139eea52d612eb55eed
https://github.com/opencontainers/runc/security/advisories/GHSA-v95c-p5hm-xq8f
https://lists.debian.org/debian-lts-announce/2021/12/msg00005.html
https://nvd.nist.gov/vuln/detail/CVE-2021-43784
| @@ -364,12 +364,12 @@ hide: -#### Container: getferdi/ferdi-server:1.3.2@sha256:b94315a20480e8c47f960590279766c8636c53f9deaaa7697499a51028e33dec (alpine 3.11.12) - +#### Container: tccr.io/truecharts/ferdi-server:v1.3.2@sha256:9cd5863593eb1f8aa6ddf695d4984f6691fff7d453e2f608a30d67bda4c58c27 (alpine 3.11.12) + **alpine** - + | Package | Vulnerability | Severity | Installed Version | Fixed Version | Links | |:----------------|:------------------:|:-----------:|:------------------:|:-------------:|-----------------------------------------| | busybox | CVE-2021-42378 | HIGH | 1.31.1-r10 | 1.31.1-r11 |
Expand...https://access.redhat.com/security/cve/CVE-2021-42378
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42378
https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/
https://nvd.nist.gov/vuln/detail/CVE-2021-42378
https://security.netapp.com/advisory/ntap-20211223-0002/
https://ubuntu.com/security/notices/USN-5179-1
| @@ -395,7 +395,7 @@ hide: **node-pkg** - + | Package | Vulnerability | Severity | Installed Version | Fixed Version | Links | |:----------------|:------------------:|:-----------:|:------------------:|:-------------:|-----------------------------------------| | ansi-regex | CVE-2021-3807 | MEDIUM | 3.0.0 | 3.0.1, 4.1.1, 5.0.1, 6.0.1 |
Expand...https://access.redhat.com/security/cve/CVE-2021-3807
https://app.snyk.io/vuln/SNYK-JS-ANSIREGEX-1583908
https://github.com/advisories/GHSA-93q8-gq69-wqmw
https://github.com/chalk/ansi-regex/commit/8d1d7cdb586269882c4bdc1b7325d0c58c8f76f9
https://github.com/chalk/ansi-regex/issues/38#issuecomment-924086311
https://github.com/chalk/ansi-regex/issues/38#issuecomment-925924774
https://github.com/chalk/ansi-regex/releases/tag/v6.0.1
https://huntr.dev/bounties/5b3cf33b-ede0-4398-9974-800876dfd994
https://linux.oracle.com/cve/CVE-2021-3807.html
https://linux.oracle.com/errata/ELSA-2022-0350.html
https://nvd.nist.gov/vuln/detail/CVE-2021-3807
| @@ -421,33 +421,33 @@ hide: #### Container: tccr.io/truecharts/alpine:v3.15.2@sha256:29ed3480a0ee43f7af681fed5d4fc215516abf1c41eade6938b26d8c9c2c7583 (alpine 3.15.2) - + **alpine** - + | Package | Vulnerability | Severity | Installed Version | Fixed Version | Links | |:----------------|:------------------:|:-----------:|:------------------:|:-------------:|-----------------------------------------| -| zlib | CVE-2018-25032 | HIGH | 1.2.11-r3 | 1.2.12-r0 |
Expand...http://www.openwall.com/lists/oss-security/2022/03/25/2
http://www.openwall.com/lists/oss-security/2022/03/26/1
https://access.redhat.com/security/cve/CVE-2018-25032
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25032
https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531
https://github.com/madler/zlib/compare/v1.2.11...v1.2.12
https://github.com/madler/zlib/issues/605
https://nvd.nist.gov/vuln/detail/CVE-2018-25032
https://ubuntu.com/security/notices/USN-5355-1
https://ubuntu.com/security/notices/USN-5355-2
https://ubuntu.com/security/notices/USN-5359-1
https://www.openwall.com/lists/oss-security/2022/03/24/1
https://www.openwall.com/lists/oss-security/2022/03/28/1
https://www.openwall.com/lists/oss-security/2022/03/28/3
| +| zlib | CVE-2018-25032 | HIGH | 1.2.11-r3 | 1.2.12-r0 |
Expand...http://www.openwall.com/lists/oss-security/2022/03/25/2
http://www.openwall.com/lists/oss-security/2022/03/26/1
https://access.redhat.com/security/cve/CVE-2018-25032
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25032
https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531
https://github.com/madler/zlib/compare/v1.2.11...v1.2.12
https://github.com/madler/zlib/issues/605
https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html
https://nvd.nist.gov/vuln/detail/CVE-2018-25032
https://ubuntu.com/security/notices/USN-5355-1
https://ubuntu.com/security/notices/USN-5355-2
https://ubuntu.com/security/notices/USN-5359-1
https://www.debian.org/security/2022/dsa-5111
https://www.openwall.com/lists/oss-security/2022/03/24/1
https://www.openwall.com/lists/oss-security/2022/03/28/1
https://www.openwall.com/lists/oss-security/2022/03/28/3
| #### Container: tccr.io/truecharts/alpine:v3.15.2@sha256:29ed3480a0ee43f7af681fed5d4fc215516abf1c41eade6938b26d8c9c2c7583 (alpine 3.15.2) - + **alpine** - + | Package | Vulnerability | Severity | Installed Version | Fixed Version | Links | |:----------------|:------------------:|:-----------:|:------------------:|:-------------:|-----------------------------------------| -| zlib | CVE-2018-25032 | HIGH | 1.2.11-r3 | 1.2.12-r0 |
Expand...http://www.openwall.com/lists/oss-security/2022/03/25/2
http://www.openwall.com/lists/oss-security/2022/03/26/1
https://access.redhat.com/security/cve/CVE-2018-25032
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25032
https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531
https://github.com/madler/zlib/compare/v1.2.11...v1.2.12
https://github.com/madler/zlib/issues/605
https://nvd.nist.gov/vuln/detail/CVE-2018-25032
https://ubuntu.com/security/notices/USN-5355-1
https://ubuntu.com/security/notices/USN-5355-2
https://ubuntu.com/security/notices/USN-5359-1
https://www.openwall.com/lists/oss-security/2022/03/24/1
https://www.openwall.com/lists/oss-security/2022/03/28/1
https://www.openwall.com/lists/oss-security/2022/03/28/3
| +| zlib | CVE-2018-25032 | HIGH | 1.2.11-r3 | 1.2.12-r0 |
Expand...http://www.openwall.com/lists/oss-security/2022/03/25/2
http://www.openwall.com/lists/oss-security/2022/03/26/1
https://access.redhat.com/security/cve/CVE-2018-25032
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25032
https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531
https://github.com/madler/zlib/compare/v1.2.11...v1.2.12
https://github.com/madler/zlib/issues/605
https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html
https://nvd.nist.gov/vuln/detail/CVE-2018-25032
https://ubuntu.com/security/notices/USN-5355-1
https://ubuntu.com/security/notices/USN-5355-2
https://ubuntu.com/security/notices/USN-5359-1
https://www.debian.org/security/2022/dsa-5111
https://www.openwall.com/lists/oss-security/2022/03/24/1
https://www.openwall.com/lists/oss-security/2022/03/28/1
https://www.openwall.com/lists/oss-security/2022/03/28/3
| #### Container: tccr.io/truecharts/postgresql:v14.2.0@sha256:29d271601a53989aa4d6d0350f00ed36c7d20e920a9c744d6c01b81aee6638a1 (debian 10.12) - + **debian** - + | Package | Vulnerability | Severity | Installed Version | Fixed Version | Links | |:----------------|:------------------:|:-----------:|:------------------:|:-------------:|-----------------------------------------| | apt | CVE-2011-3374 | LOW | 1.8.2.3 | |
Expand...https://access.redhat.com/security/cve/cve-2011-3374
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=642480
https://people.canonical.com/~ubuntu-security/cve/2011/CVE-2011-3374.html
https://seclists.org/fulldisclosure/2011/Sep/221
https://security-tracker.debian.org/tracker/CVE-2011-3374
https://snyk.io/vuln/SNYK-LINUX-APT-116518
https://ubuntu.com/security/CVE-2011-3374
| @@ -668,20 +668,19 @@ hide: | tar | CVE-2021-20193 | LOW | 1.30+dfsg-6 | |
Expand...https://access.redhat.com/security/cve/CVE-2021-20193
https://bugzilla.redhat.com/show_bug.cgi?id=1917565
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20193
https://git.savannah.gnu.org/cgit/tar.git/commit/?id=d9d4435692150fa8ff68e1b1a473d187cc3fd777
https://savannah.gnu.org/bugs/?59897
https://security.gentoo.org/glsa/202105-29
https://ubuntu.com/security/notices/USN-5329-1
| | util-linux | CVE-2021-37600 | LOW | 2.33.1-0.1 | |
Expand...https://access.redhat.com/security/cve/CVE-2021-37600
https://github.com/karelzak/util-linux/commit/1c9143d0c1f979c3daf10e1c37b5b1e916c22a1c
https://github.com/karelzak/util-linux/issues/1395
https://nvd.nist.gov/vuln/detail/CVE-2021-37600
https://security.netapp.com/advisory/ntap-20210902-0002/
| | util-linux | CVE-2022-0563 | LOW | 2.33.1-0.1 | |
Expand...https://access.redhat.com/security/cve/CVE-2022-0563
https://lore.kernel.org/util-linux/20220214110609.msiwlm457ngoic6w@ws.net.home/T/#u
https://nvd.nist.gov/vuln/detail/CVE-2022-0563
https://security.netapp.com/advisory/ntap-20220331-0002/
| -| zlib1g | CVE-2018-25032 | HIGH | 1:1.2.11.dfsg-1 | |
Expand...http://www.openwall.com/lists/oss-security/2022/03/25/2
http://www.openwall.com/lists/oss-security/2022/03/26/1
https://access.redhat.com/security/cve/CVE-2018-25032
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25032
https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531
https://github.com/madler/zlib/compare/v1.2.11...v1.2.12
https://github.com/madler/zlib/issues/605
https://nvd.nist.gov/vuln/detail/CVE-2018-25032
https://ubuntu.com/security/notices/USN-5355-1
https://ubuntu.com/security/notices/USN-5355-2
https://ubuntu.com/security/notices/USN-5359-1
https://www.openwall.com/lists/oss-security/2022/03/24/1
https://www.openwall.com/lists/oss-security/2022/03/28/1
https://www.openwall.com/lists/oss-security/2022/03/28/3
| +| zlib1g | CVE-2018-25032 | HIGH | 1:1.2.11.dfsg-1 | 1:1.2.11.dfsg-1+deb10u1 |
Expand...http://www.openwall.com/lists/oss-security/2022/03/25/2
http://www.openwall.com/lists/oss-security/2022/03/26/1
https://access.redhat.com/security/cve/CVE-2018-25032
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25032
https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531
https://github.com/madler/zlib/compare/v1.2.11...v1.2.12
https://github.com/madler/zlib/issues/605
https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html
https://nvd.nist.gov/vuln/detail/CVE-2018-25032
https://ubuntu.com/security/notices/USN-5355-1
https://ubuntu.com/security/notices/USN-5355-2
https://ubuntu.com/security/notices/USN-5359-1
https://www.debian.org/security/2022/dsa-5111
https://www.openwall.com/lists/oss-security/2022/03/24/1
https://www.openwall.com/lists/oss-security/2022/03/28/1
https://www.openwall.com/lists/oss-security/2022/03/28/3
| **jar** - + | No Vulnerabilities found | |:---------------------------------| - + **gobinary** - + | Package | Vulnerability | Severity | Installed Version | Fixed Version | Links | |:----------------|:------------------:|:-----------:|:------------------:|:-------------:|-----------------------------------------| | github.com/opencontainers/runc | CVE-2021-43784 | MEDIUM | v1.0.1 | v1.0.3 |
Expand...https://access.redhat.com/security/cve/CVE-2021-43784
https://bugs.chromium.org/p/project-zero/issues/detail?id=2241
https://github.com/opencontainers/runc/commit/9c444070ec7bb83995dbc0185da68284da71c554
https://github.com/opencontainers/runc/commit/d72d057ba794164c3cce9451a00b72a78b25e1ae
https://github.com/opencontainers/runc/commit/f50369af4b571e358f20b139eea52d612eb55eed
https://github.com/opencontainers/runc/security/advisories/GHSA-v95c-p5hm-xq8f
https://lists.debian.org/debian-lts-announce/2021/12/msg00005.html
https://nvd.nist.gov/vuln/detail/CVE-2021-43784
| - diff --git a/incubator/ferdi-server/0.0.1/templates/_secrets.tpl b/incubator/ferdi-server/0.0.3/templates/_secrets.tpl similarity index 100% rename from incubator/ferdi-server/0.0.1/templates/_secrets.tpl rename to incubator/ferdi-server/0.0.3/templates/_secrets.tpl diff --git a/incubator/ferdi-server/0.0.1/templates/common.yaml b/incubator/ferdi-server/0.0.3/templates/common.yaml similarity index 100% rename from incubator/ferdi-server/0.0.1/templates/common.yaml rename to incubator/ferdi-server/0.0.3/templates/common.yaml diff --git a/incubator/ferdi-server/0.0.1/values.yaml b/incubator/ferdi-server/0.0.3/values.yaml similarity index 100% rename from incubator/ferdi-server/0.0.1/values.yaml rename to incubator/ferdi-server/0.0.3/values.yaml diff --git a/incubator/linkding/0.0.3/CHANGELOG.md b/incubator/linkding/0.0.4/CHANGELOG.md similarity index 64% rename from incubator/linkding/0.0.3/CHANGELOG.md rename to incubator/linkding/0.0.4/CHANGELOG.md index 429e7de0a30..dffb518eedc 100644 --- a/incubator/linkding/0.0.3/CHANGELOG.md +++ b/incubator/linkding/0.0.4/CHANGELOG.md @@ -1,6 +1,15 @@ # Changelog
+ +### [linkding-0.0.4](https://github.com/truecharts/apps/compare/linkding-0.0.3...linkding-0.0.4) (2022-04-03) + +#### Chore + +* update image refs ([#2411](https://github.com/truecharts/apps/issues/2411)) + + + ### [linkding-0.0.3](https://github.com/truecharts/apps/compare/linkding-0.0.2...linkding-0.0.3) (2022-04-02) diff --git a/incubator/linkding/0.0.3/CONFIG.md b/incubator/linkding/0.0.4/CONFIG.md similarity index 100% rename from incubator/linkding/0.0.3/CONFIG.md rename to incubator/linkding/0.0.4/CONFIG.md diff --git a/incubator/linkding/0.0.3/Chart.lock b/incubator/linkding/0.0.4/Chart.lock similarity index 80% rename from incubator/linkding/0.0.3/Chart.lock rename to incubator/linkding/0.0.4/Chart.lock index 11aba7accd7..afa9df0ce40 100644 --- a/incubator/linkding/0.0.3/Chart.lock +++ b/incubator/linkding/0.0.4/Chart.lock @@ -3,4 +3,4 @@ dependencies: repository: https://library-charts.truecharts.org version: 9.2.6 digest: sha256:a567b53fc3d0d618567f328d9fbb09695895b8e15d6ca178bf4a198c58080cac -generated: "2022-04-02T10:36:55.970594537Z" +generated: "2022-04-03T13:16:42.663050054Z" diff --git a/incubator/linkding/0.0.3/Chart.yaml b/incubator/linkding/0.0.4/Chart.yaml similarity index 98% rename from incubator/linkding/0.0.3/Chart.yaml rename to incubator/linkding/0.0.4/Chart.yaml index 3a0b3872f1b..4799f0f56e2 100644 --- a/incubator/linkding/0.0.3/Chart.yaml +++ b/incubator/linkding/0.0.4/Chart.yaml @@ -19,7 +19,7 @@ name: linkding sources: - https://github.com/sissbruecker/linkding - https://hub.docker.com/r/sissbruecker/linkding -version: 0.0.3 +version: 0.0.4 annotations: truecharts.org/catagories: | - bookmarks diff --git a/incubator/linkding/0.0.3/README.md b/incubator/linkding/0.0.4/README.md similarity index 100% rename from incubator/linkding/0.0.3/README.md rename to incubator/linkding/0.0.4/README.md diff --git a/incubator/linkding/0.0.3/app-readme.md b/incubator/linkding/0.0.4/app-readme.md similarity index 100% rename from incubator/linkding/0.0.3/app-readme.md rename to incubator/linkding/0.0.4/app-readme.md diff --git a/incubator/linkding/0.0.3/charts/common-9.2.6.tgz b/incubator/linkding/0.0.4/charts/common-9.2.6.tgz similarity index 100% rename from incubator/linkding/0.0.3/charts/common-9.2.6.tgz rename to incubator/linkding/0.0.4/charts/common-9.2.6.tgz diff --git a/incubator/linkding/0.0.3/helm-values.md b/incubator/linkding/0.0.4/helm-values.md similarity index 88% rename from incubator/linkding/0.0.3/helm-values.md rename to incubator/linkding/0.0.4/helm-values.md index ff038e0376c..7138e026868 100644 --- a/incubator/linkding/0.0.3/helm-values.md +++ b/incubator/linkding/0.0.4/helm-values.md @@ -16,8 +16,8 @@ You will, however, be able to use all values referenced in the common chart here | env.LD_REQUEST_TIMEOUT | int | `60` | | | env.LD_SERVER_PORT | string | `"{{ .Values.service.main.ports.main.port }}"` | | | image.pullPolicy | string | `"IfNotPresent"` | | -| image.repository | string | `"sissbruecker/linkding"` | | -| image.tag | string | `"1.8.8@sha256:3dad72eea9dd4fa775e38eee6b28972779fe269bbbd656b355935da67f0ddd85"` | | +| image.repository | string | `"tccr.io/truecharts/linkding"` | | +| image.tag | string | `"v1.8.8@sha256:c5a15b48ef46e409d6d0fe0552280611bcbb148e5311f4ed0e9e12d2360e6578"` | | | persistence.data.enabled | bool | `true` | | | persistence.data.mountPath | string | `"/etc/linkding/data"` | | | podSecurityContext.runAsGroup | int | `0` | | diff --git a/incubator/linkding/0.0.3/ix_values.yaml b/incubator/linkding/0.0.4/ix_values.yaml similarity index 78% rename from incubator/linkding/0.0.3/ix_values.yaml rename to incubator/linkding/0.0.4/ix_values.yaml index 14496225b9d..861692797e8 100644 --- a/incubator/linkding/0.0.3/ix_values.yaml +++ b/incubator/linkding/0.0.4/ix_values.yaml @@ -1,6 +1,6 @@ image: - repository: sissbruecker/linkding - tag: 1.8.8@sha256:3dad72eea9dd4fa775e38eee6b28972779fe269bbbd656b355935da67f0ddd85 + repository: tccr.io/truecharts/linkding + tag: v1.8.8@sha256:c5a15b48ef46e409d6d0fe0552280611bcbb148e5311f4ed0e9e12d2360e6578 pullPolicy: IfNotPresent securityContext: diff --git a/incubator/linkding/0.0.3/questions.yaml b/incubator/linkding/0.0.4/questions.yaml similarity index 100% rename from incubator/linkding/0.0.3/questions.yaml rename to incubator/linkding/0.0.4/questions.yaml diff --git a/incubator/linkding/0.0.3/security.md b/incubator/linkding/0.0.4/security.md similarity index 97% rename from incubator/linkding/0.0.3/security.md rename to incubator/linkding/0.0.4/security.md index f15035931c7..ba6ed96c2a2 100644 --- a/incubator/linkding/0.0.3/security.md +++ b/incubator/linkding/0.0.4/security.md @@ -46,7 +46,7 @@ hide: tccr.io/truecharts/alpine:v3.15.2@sha256:29ed3480a0ee43f7af681fed5d4fc215516abf1c41eade6938b26d8c9c2c7583 tccr.io/truecharts/alpine:v3.15.2@sha256:29ed3480a0ee43f7af681fed5d4fc215516abf1c41eade6938b26d8c9c2c7583 - sissbruecker/linkding:1.8.8@sha256:3dad72eea9dd4fa775e38eee6b28972779fe269bbbd656b355935da67f0ddd85 + tccr.io/truecharts/linkding:v1.8.8@sha256:c5a15b48ef46e409d6d0fe0552280611bcbb148e5311f4ed0e9e12d2360e6578 ##### Scan Results @@ -59,7 +59,7 @@ hide: | Package | Vulnerability | Severity | Installed Version | Fixed Version | Links | |:----------------|:------------------:|:-----------:|:------------------:|:-------------:|-----------------------------------------| -| zlib | CVE-2018-25032 | HIGH | 1.2.11-r3 | 1.2.12-r0 |
Expand...http://www.openwall.com/lists/oss-security/2022/03/25/2
http://www.openwall.com/lists/oss-security/2022/03/26/1
https://access.redhat.com/security/cve/CVE-2018-25032
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25032
https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531
https://github.com/madler/zlib/compare/v1.2.11...v1.2.12
https://github.com/madler/zlib/issues/605
https://nvd.nist.gov/vuln/detail/CVE-2018-25032
https://ubuntu.com/security/notices/USN-5355-1
https://ubuntu.com/security/notices/USN-5355-2
https://ubuntu.com/security/notices/USN-5359-1
https://www.debian.org/security/2022/dsa-5111
https://www.openwall.com/lists/oss-security/2022/03/24/1
https://www.openwall.com/lists/oss-security/2022/03/28/1
https://www.openwall.com/lists/oss-security/2022/03/28/3
| +| zlib | CVE-2018-25032 | HIGH | 1.2.11-r3 | 1.2.12-r0 |
Expand...http://www.openwall.com/lists/oss-security/2022/03/25/2
http://www.openwall.com/lists/oss-security/2022/03/26/1
https://access.redhat.com/security/cve/CVE-2018-25032
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25032
https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531
https://github.com/madler/zlib/compare/v1.2.11...v1.2.12
https://github.com/madler/zlib/issues/605
https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html
https://nvd.nist.gov/vuln/detail/CVE-2018-25032
https://ubuntu.com/security/notices/USN-5355-1
https://ubuntu.com/security/notices/USN-5355-2
https://ubuntu.com/security/notices/USN-5359-1
https://www.debian.org/security/2022/dsa-5111
https://www.openwall.com/lists/oss-security/2022/03/24/1
https://www.openwall.com/lists/oss-security/2022/03/28/1
https://www.openwall.com/lists/oss-security/2022/03/28/3
| #### Container: tccr.io/truecharts/alpine:v3.15.2@sha256:29ed3480a0ee43f7af681fed5d4fc215516abf1c41eade6938b26d8c9c2c7583 (alpine 3.15.2) @@ -70,10 +70,10 @@ hide: | Package | Vulnerability | Severity | Installed Version | Fixed Version | Links | |:----------------|:------------------:|:-----------:|:------------------:|:-------------:|-----------------------------------------| -| zlib | CVE-2018-25032 | HIGH | 1.2.11-r3 | 1.2.12-r0 |
Expand...http://www.openwall.com/lists/oss-security/2022/03/25/2
http://www.openwall.com/lists/oss-security/2022/03/26/1
https://access.redhat.com/security/cve/CVE-2018-25032
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25032
https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531
https://github.com/madler/zlib/compare/v1.2.11...v1.2.12
https://github.com/madler/zlib/issues/605
https://nvd.nist.gov/vuln/detail/CVE-2018-25032
https://ubuntu.com/security/notices/USN-5355-1
https://ubuntu.com/security/notices/USN-5355-2
https://ubuntu.com/security/notices/USN-5359-1
https://www.debian.org/security/2022/dsa-5111
https://www.openwall.com/lists/oss-security/2022/03/24/1
https://www.openwall.com/lists/oss-security/2022/03/28/1
https://www.openwall.com/lists/oss-security/2022/03/28/3
| +| zlib | CVE-2018-25032 | HIGH | 1.2.11-r3 | 1.2.12-r0 |
Expand...http://www.openwall.com/lists/oss-security/2022/03/25/2
http://www.openwall.com/lists/oss-security/2022/03/26/1
https://access.redhat.com/security/cve/CVE-2018-25032
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25032
https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531
https://github.com/madler/zlib/compare/v1.2.11...v1.2.12
https://github.com/madler/zlib/issues/605
https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html
https://nvd.nist.gov/vuln/detail/CVE-2018-25032
https://ubuntu.com/security/notices/USN-5355-1
https://ubuntu.com/security/notices/USN-5355-2
https://ubuntu.com/security/notices/USN-5359-1
https://www.debian.org/security/2022/dsa-5111
https://www.openwall.com/lists/oss-security/2022/03/24/1
https://www.openwall.com/lists/oss-security/2022/03/28/1
https://www.openwall.com/lists/oss-security/2022/03/28/3
| -#### Container: sissbruecker/linkding:1.8.8@sha256:3dad72eea9dd4fa775e38eee6b28972779fe269bbbd656b355935da67f0ddd85 (debian 10.10) +#### Container: tccr.io/truecharts/linkding:v1.8.8@sha256:c5a15b48ef46e409d6d0fe0552280611bcbb148e5311f4ed0e9e12d2360e6578 (debian 10.10) **debian** @@ -196,7 +196,7 @@ hide: | libsqlite3-0 | CVE-2021-36690 | LOW | 3.27.2-3+deb10u1 | |
Expand...https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-36690
https://nvd.nist.gov/vuln/detail/CVE-2021-36690
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.sqlite.org/forum/forumpost/718c0a8d17
| | libssl1.1 | CVE-2021-3711 | CRITICAL | 1.1.1d-0+deb10u6 | 1.1.1d-0+deb10u7 |
Expand...http://www.openwall.com/lists/oss-security/2021/08/26/2
https://access.redhat.com/security/cve/CVE-2021-3711
https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
https://crates.io/crates/openssl-src
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3711
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=59f5e75f3bced8fc0e130d72a3f582cf7b480b46
https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E
https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E
https://nvd.nist.gov/vuln/detail/CVE-2021-3711
https://rustsec.org/advisories/RUSTSEC-2021-0097.html
https://security.netapp.com/advisory/ntap-20210827-0010/
https://security.netapp.com/advisory/ntap-20211022-0003/
https://ubuntu.com/security/notices/USN-5051-1
https://www.debian.org/security/2021/dsa-4963
https://www.openssl.org/news/secadv/20210824.txt
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpuoct2021.html
https://www.tenable.com/security/tns-2021-16
https://www.tenable.com/security/tns-2022-02
| | libssl1.1 | CVE-2021-3712 | HIGH | 1.1.1d-0+deb10u6 | 1.1.1d-0+deb10u7 |
Expand...http://www.openwall.com/lists/oss-security/2021/08/26/2
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3712.json
https://access.redhat.com/security/cve/CVE-2021-3712
https://cert-portal.siemens.com/productcert/pdf/ssa-244969.pdf
https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
https://crates.io/crates/openssl-src
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3712
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=94d23fcff9b2a7a8368dfe52214d5c2569882c11
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ccb0a11145ee72b042d10593a64eaf9e8a55ec12
https://kc.mcafee.com/corporate/index?page=content&id=SB10366
https://linux.oracle.com/cve/CVE-2021-3712.html
https://linux.oracle.com/errata/ELSA-2022-9023.html
https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E
https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E
https://lists.debian.org/debian-lts-announce/2021/09/msg00014.html
https://lists.debian.org/debian-lts-announce/2021/09/msg00021.html
https://nvd.nist.gov/vuln/detail/CVE-2021-3712
https://rustsec.org/advisories/RUSTSEC-2021-0098.html
https://security.netapp.com/advisory/ntap-20210827-0010/
https://ubuntu.com/security/notices/USN-5051-1
https://ubuntu.com/security/notices/USN-5051-2
https://ubuntu.com/security/notices/USN-5051-3
https://ubuntu.com/security/notices/USN-5051-4 (regression only in trusty/esm)
https://ubuntu.com/security/notices/USN-5088-1
https://www.debian.org/security/2021/dsa-4963
https://www.openssl.org/news/secadv/20210824.txt
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpuoct2021.html
https://www.tenable.com/security/tns-2021-16
https://www.tenable.com/security/tns-2022-02
| -| libssl1.1 | CVE-2022-0778 | HIGH | 1.1.1d-0+deb10u6 | 1.1.1d-0+deb10u8 |
Expand...https://access.redhat.com/security/cve/CVE-2022-0778
https://crates.io/crates/openssl-src
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246
https://linux.oracle.com/cve/CVE-2022-0778.html
https://linux.oracle.com/errata/ELSA-2022-9258.html
https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html
https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/
https://nvd.nist.gov/vuln/detail/CVE-2022-0778
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002
https://rustsec.org/advisories/RUSTSEC-2022-0014.html
https://security.netapp.com/advisory/ntap-20220321-0002/
https://ubuntu.com/security/notices/USN-5328-1
https://ubuntu.com/security/notices/USN-5328-2
https://www.debian.org/security/2022/dsa-5103
https://www.openssl.org/news/secadv/20220315.txt
https://www.tenable.com/security/tns-2022-06
https://www.tenable.com/security/tns-2022-07
| +| libssl1.1 | CVE-2022-0778 | HIGH | 1.1.1d-0+deb10u6 | 1.1.1d-0+deb10u8 |
Expand...https://access.redhat.com/security/cve/CVE-2022-0778
https://crates.io/crates/openssl-src
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246
https://linux.oracle.com/cve/CVE-2022-0778.html
https://linux.oracle.com/errata/ELSA-2022-9258.html
https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html
https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/
https://nvd.nist.gov/vuln/detail/CVE-2022-0778
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002
https://rustsec.org/advisories/RUSTSEC-2022-0014.html
https://security.netapp.com/advisory/ntap-20220321-0002/
https://ubuntu.com/security/notices/USN-5328-1
https://ubuntu.com/security/notices/USN-5328-2
https://www.debian.org/security/2022/dsa-5103
https://www.openssl.org/news/secadv/20220315.txt
https://www.tenable.com/security/tns-2022-06
https://www.tenable.com/security/tns-2022-07
| | libssl1.1 | CVE-2021-4160 | MEDIUM | 1.1.1d-0+deb10u6 | 1.1.1d-0+deb10u8 |
Expand...https://access.redhat.com/security/cve/CVE-2021-4160
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3bf7b73ea7123045b8f972badc67ed6878e6c37f
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6fc1aaaf303185aa5e483e06bdfae16daa9193a7
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=e9e726506cd2a3fd9c0f12daf8cc1fe934c7dddb
https://nvd.nist.gov/vuln/detail/CVE-2021-4160
https://www.debian.org/security/2022/dsa-5103
https://www.openssl.org/news/secadv/20220128.txt
| | libssl1.1 | CVE-2007-6755 | LOW | 1.1.1d-0+deb10u6 | |
Expand...http://arstechnica.com/security/2013/09/stop-using-nsa-influence-code-in-our-product-rsa-tells-customers/
http://blog.cryptographyengineering.com/2013/09/rsa-warns-developers-against-its-own.html
http://blog.cryptographyengineering.com/2013/09/the-many-flaws-of-dualecdrbg.html
http://rump2007.cr.yp.to/15-shumow.pdf
http://stream.wsj.com/story/latest-headlines/SS-2-63399/SS-2-332655/
http://threatpost.com/in-wake-of-latest-crypto-revelations-everything-is-suspect
http://www.securityfocus.com/bid/63657
https://access.redhat.com/security/cve/CVE-2007-6755
https://www.schneier.com/blog/archives/2007/11/the_strange_sto.html
| | libssl1.1 | CVE-2010-0928 | LOW | 1.1.1d-0+deb10u6 | |
Expand...http://rdist.root.org/2010/03/08/attacking-rsa-exponentiation-with-fault-injection/
http://www.eecs.umich.edu/%7Evaleria/research/publications/DATE10RSA.pdf
http://www.networkworld.com/news/2010/030410-rsa-security-attack.html
http://www.osvdb.org/62808
http://www.theregister.co.uk/2010/03/04/severe_openssl_vulnerability/
https://access.redhat.com/security/cve/CVE-2010-0928
https://exchange.xforce.ibmcloud.com/vulnerabilities/56750
| @@ -230,7 +230,7 @@ hide: | ncurses-bin | CVE-2021-39537 | LOW | 6.1+20181013-2+deb10u2 | |
Expand...http://cvsweb.netbsd.org/bsdweb.cgi/pkgsrc/devel/ncurses/patches/patch-ncurses_tinfo_captoinfo.c?rev=1.1&content-type=text/x-cvsweb-markup
https://access.redhat.com/security/cve/CVE-2021-39537
https://lists.gnu.org/archive/html/bug-ncurses/2020-08/msg00006.html
https://lists.gnu.org/archive/html/bug-ncurses/2021-10/msg00023.html
https://nvd.nist.gov/vuln/detail/CVE-2021-39537
| | openssl | CVE-2021-3711 | CRITICAL | 1.1.1d-0+deb10u6 | 1.1.1d-0+deb10u7 |
Expand...http://www.openwall.com/lists/oss-security/2021/08/26/2
https://access.redhat.com/security/cve/CVE-2021-3711
https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
https://crates.io/crates/openssl-src
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3711
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=59f5e75f3bced8fc0e130d72a3f582cf7b480b46
https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E
https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E
https://nvd.nist.gov/vuln/detail/CVE-2021-3711
https://rustsec.org/advisories/RUSTSEC-2021-0097.html
https://security.netapp.com/advisory/ntap-20210827-0010/
https://security.netapp.com/advisory/ntap-20211022-0003/
https://ubuntu.com/security/notices/USN-5051-1
https://www.debian.org/security/2021/dsa-4963
https://www.openssl.org/news/secadv/20210824.txt
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpuoct2021.html
https://www.tenable.com/security/tns-2021-16
https://www.tenable.com/security/tns-2022-02
| | openssl | CVE-2021-3712 | HIGH | 1.1.1d-0+deb10u6 | 1.1.1d-0+deb10u7 |
Expand...http://www.openwall.com/lists/oss-security/2021/08/26/2
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3712.json
https://access.redhat.com/security/cve/CVE-2021-3712
https://cert-portal.siemens.com/productcert/pdf/ssa-244969.pdf
https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
https://crates.io/crates/openssl-src
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3712
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=94d23fcff9b2a7a8368dfe52214d5c2569882c11
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ccb0a11145ee72b042d10593a64eaf9e8a55ec12
https://kc.mcafee.com/corporate/index?page=content&id=SB10366
https://linux.oracle.com/cve/CVE-2021-3712.html
https://linux.oracle.com/errata/ELSA-2022-9023.html
https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E
https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E
https://lists.debian.org/debian-lts-announce/2021/09/msg00014.html
https://lists.debian.org/debian-lts-announce/2021/09/msg00021.html
https://nvd.nist.gov/vuln/detail/CVE-2021-3712
https://rustsec.org/advisories/RUSTSEC-2021-0098.html
https://security.netapp.com/advisory/ntap-20210827-0010/
https://ubuntu.com/security/notices/USN-5051-1
https://ubuntu.com/security/notices/USN-5051-2
https://ubuntu.com/security/notices/USN-5051-3
https://ubuntu.com/security/notices/USN-5051-4 (regression only in trusty/esm)
https://ubuntu.com/security/notices/USN-5088-1
https://www.debian.org/security/2021/dsa-4963
https://www.openssl.org/news/secadv/20210824.txt
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpuoct2021.html
https://www.tenable.com/security/tns-2021-16
https://www.tenable.com/security/tns-2022-02
| -| openssl | CVE-2022-0778 | HIGH | 1.1.1d-0+deb10u6 | 1.1.1d-0+deb10u8 |
Expand...https://access.redhat.com/security/cve/CVE-2022-0778
https://crates.io/crates/openssl-src
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246
https://linux.oracle.com/cve/CVE-2022-0778.html
https://linux.oracle.com/errata/ELSA-2022-9258.html
https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html
https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/
https://nvd.nist.gov/vuln/detail/CVE-2022-0778
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002
https://rustsec.org/advisories/RUSTSEC-2022-0014.html
https://security.netapp.com/advisory/ntap-20220321-0002/
https://ubuntu.com/security/notices/USN-5328-1
https://ubuntu.com/security/notices/USN-5328-2
https://www.debian.org/security/2022/dsa-5103
https://www.openssl.org/news/secadv/20220315.txt
https://www.tenable.com/security/tns-2022-06
https://www.tenable.com/security/tns-2022-07
| +| openssl | CVE-2022-0778 | HIGH | 1.1.1d-0+deb10u6 | 1.1.1d-0+deb10u8 |
Expand...https://access.redhat.com/security/cve/CVE-2022-0778
https://crates.io/crates/openssl-src
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246
https://linux.oracle.com/cve/CVE-2022-0778.html
https://linux.oracle.com/errata/ELSA-2022-9258.html
https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html
https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/
https://nvd.nist.gov/vuln/detail/CVE-2022-0778
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002
https://rustsec.org/advisories/RUSTSEC-2022-0014.html
https://security.netapp.com/advisory/ntap-20220321-0002/
https://ubuntu.com/security/notices/USN-5328-1
https://ubuntu.com/security/notices/USN-5328-2
https://www.debian.org/security/2022/dsa-5103
https://www.openssl.org/news/secadv/20220315.txt
https://www.tenable.com/security/tns-2022-06
https://www.tenable.com/security/tns-2022-07
| | openssl | CVE-2021-4160 | MEDIUM | 1.1.1d-0+deb10u6 | 1.1.1d-0+deb10u8 |
Expand...https://access.redhat.com/security/cve/CVE-2021-4160
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3bf7b73ea7123045b8f972badc67ed6878e6c37f
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6fc1aaaf303185aa5e483e06bdfae16daa9193a7
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=e9e726506cd2a3fd9c0f12daf8cc1fe934c7dddb
https://nvd.nist.gov/vuln/detail/CVE-2021-4160
https://www.debian.org/security/2022/dsa-5103
https://www.openssl.org/news/secadv/20220128.txt
| | openssl | CVE-2007-6755 | LOW | 1.1.1d-0+deb10u6 | |
Expand...http://arstechnica.com/security/2013/09/stop-using-nsa-influence-code-in-our-product-rsa-tells-customers/
http://blog.cryptographyengineering.com/2013/09/rsa-warns-developers-against-its-own.html
http://blog.cryptographyengineering.com/2013/09/the-many-flaws-of-dualecdrbg.html
http://rump2007.cr.yp.to/15-shumow.pdf
http://stream.wsj.com/story/latest-headlines/SS-2-63399/SS-2-332655/
http://threatpost.com/in-wake-of-latest-crypto-revelations-everything-is-suspect
http://www.securityfocus.com/bid/63657
https://access.redhat.com/security/cve/CVE-2007-6755
https://www.schneier.com/blog/archives/2007/11/the_strange_sto.html
| | openssl | CVE-2010-0928 | LOW | 1.1.1d-0+deb10u6 | |
Expand...http://rdist.root.org/2010/03/08/attacking-rsa-exponentiation-with-fault-injection/
http://www.eecs.umich.edu/%7Evaleria/research/publications/DATE10RSA.pdf
http://www.networkworld.com/news/2010/030410-rsa-security-attack.html
http://www.osvdb.org/62808
http://www.theregister.co.uk/2010/03/04/severe_openssl_vulnerability/
https://access.redhat.com/security/cve/CVE-2010-0928
https://exchange.xforce.ibmcloud.com/vulnerabilities/56750
| @@ -245,7 +245,7 @@ hide: | tar | CVE-2021-20193 | LOW | 1.30+dfsg-6 | |
Expand...https://access.redhat.com/security/cve/CVE-2021-20193
https://bugzilla.redhat.com/show_bug.cgi?id=1917565
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20193
https://git.savannah.gnu.org/cgit/tar.git/commit/?id=d9d4435692150fa8ff68e1b1a473d187cc3fd777
https://savannah.gnu.org/bugs/?59897
https://security.gentoo.org/glsa/202105-29
https://ubuntu.com/security/notices/USN-5329-1
| | util-linux | CVE-2021-37600 | LOW | 2.33.1-0.1 | |
Expand...https://access.redhat.com/security/cve/CVE-2021-37600
https://github.com/karelzak/util-linux/commit/1c9143d0c1f979c3daf10e1c37b5b1e916c22a1c
https://github.com/karelzak/util-linux/issues/1395
https://nvd.nist.gov/vuln/detail/CVE-2021-37600
https://security.netapp.com/advisory/ntap-20210902-0002/
| | util-linux | CVE-2022-0563 | LOW | 2.33.1-0.1 | |
Expand...https://access.redhat.com/security/cve/CVE-2022-0563
https://lore.kernel.org/util-linux/20220214110609.msiwlm457ngoic6w@ws.net.home/T/#u
https://nvd.nist.gov/vuln/detail/CVE-2022-0563
https://security.netapp.com/advisory/ntap-20220331-0002/
| -| zlib1g | CVE-2018-25032 | HIGH | 1:1.2.11.dfsg-1 | 1:1.2.11.dfsg-1+deb10u1 |
Expand...http://www.openwall.com/lists/oss-security/2022/03/25/2
http://www.openwall.com/lists/oss-security/2022/03/26/1
https://access.redhat.com/security/cve/CVE-2018-25032
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25032
https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531
https://github.com/madler/zlib/compare/v1.2.11...v1.2.12
https://github.com/madler/zlib/issues/605
https://nvd.nist.gov/vuln/detail/CVE-2018-25032
https://ubuntu.com/security/notices/USN-5355-1
https://ubuntu.com/security/notices/USN-5355-2
https://ubuntu.com/security/notices/USN-5359-1
https://www.debian.org/security/2022/dsa-5111
https://www.openwall.com/lists/oss-security/2022/03/24/1
https://www.openwall.com/lists/oss-security/2022/03/28/1
https://www.openwall.com/lists/oss-security/2022/03/28/3
| +| zlib1g | CVE-2018-25032 | HIGH | 1:1.2.11.dfsg-1 | 1:1.2.11.dfsg-1+deb10u1 |
Expand...http://www.openwall.com/lists/oss-security/2022/03/25/2
http://www.openwall.com/lists/oss-security/2022/03/26/1
https://access.redhat.com/security/cve/CVE-2018-25032
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25032
https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531
https://github.com/madler/zlib/compare/v1.2.11...v1.2.12
https://github.com/madler/zlib/issues/605
https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html
https://nvd.nist.gov/vuln/detail/CVE-2018-25032
https://ubuntu.com/security/notices/USN-5355-1
https://ubuntu.com/security/notices/USN-5355-2
https://ubuntu.com/security/notices/USN-5359-1
https://www.debian.org/security/2022/dsa-5111
https://www.openwall.com/lists/oss-security/2022/03/24/1
https://www.openwall.com/lists/oss-security/2022/03/28/1
https://www.openwall.com/lists/oss-security/2022/03/28/3
| **node-pkg** diff --git a/incubator/linkding/0.0.3/templates/common.yaml b/incubator/linkding/0.0.4/templates/common.yaml similarity index 100% rename from incubator/linkding/0.0.3/templates/common.yaml rename to incubator/linkding/0.0.4/templates/common.yaml diff --git a/incubator/linkding/0.0.3/values.yaml b/incubator/linkding/0.0.4/values.yaml similarity index 100% rename from incubator/linkding/0.0.3/values.yaml rename to incubator/linkding/0.0.4/values.yaml diff --git a/incubator/meshcentral/0.0.8/CHANGELOG.md b/incubator/meshcentral/0.0.9/CHANGELOG.md similarity index 82% rename from incubator/meshcentral/0.0.8/CHANGELOG.md rename to incubator/meshcentral/0.0.9/CHANGELOG.md index e3a9f2b88fa..0025013a2c6 100644 --- a/incubator/meshcentral/0.0.8/CHANGELOG.md +++ b/incubator/meshcentral/0.0.9/CHANGELOG.md @@ -1,6 +1,15 @@ # Changelog
+ +### [meshcentral-0.0.9](https://github.com/truecharts/apps/compare/meshcentral-0.0.8...meshcentral-0.0.9) (2022-04-03) + +#### Chore + +* update image refs ([#2411](https://github.com/truecharts/apps/issues/2411)) + + + ### [meshcentral-0.0.8](https://github.com/truecharts/apps/compare/meshcentral-0.0.7...meshcentral-0.0.8) (2022-04-03) diff --git a/incubator/meshcentral/0.0.8/CONFIG.md b/incubator/meshcentral/0.0.9/CONFIG.md similarity index 100% rename from incubator/meshcentral/0.0.8/CONFIG.md rename to incubator/meshcentral/0.0.9/CONFIG.md diff --git a/incubator/meshcentral/0.0.8/Chart.lock b/incubator/meshcentral/0.0.9/Chart.lock similarity index 85% rename from incubator/meshcentral/0.0.8/Chart.lock rename to incubator/meshcentral/0.0.9/Chart.lock index e8b7677ffb5..7522f8ea2b2 100644 --- a/incubator/meshcentral/0.0.8/Chart.lock +++ b/incubator/meshcentral/0.0.9/Chart.lock @@ -6,4 +6,4 @@ dependencies: repository: https://charts.truecharts.org/ version: 0.0.14 digest: sha256:aa466c05b1f157b9fdd98f0b91c735b4699e32b534447a6b5d52ae15d919a045 -generated: "2022-04-03T11:29:00.591149784Z" +generated: "2022-04-03T13:16:44.230090682Z" diff --git a/incubator/meshcentral/0.0.8/Chart.yaml b/incubator/meshcentral/0.0.9/Chart.yaml similarity index 98% rename from incubator/meshcentral/0.0.8/Chart.yaml rename to incubator/meshcentral/0.0.9/Chart.yaml index ac0d0f6faf0..41d2dd00eb5 100644 --- a/incubator/meshcentral/0.0.8/Chart.yaml +++ b/incubator/meshcentral/0.0.9/Chart.yaml @@ -1,7 +1,7 @@ apiVersion: v2 kubeVersion: ">=1.16.0-0" name: meshcentral -version: 0.0.8 +version: 0.0.9 appVersion: "latest" description: MeshCentral is a full computer management web site type: application diff --git a/incubator/meshcentral/0.0.8/README.md b/incubator/meshcentral/0.0.9/README.md similarity index 100% rename from incubator/meshcentral/0.0.8/README.md rename to incubator/meshcentral/0.0.9/README.md diff --git a/incubator/meshcentral/0.0.8/app-readme.md b/incubator/meshcentral/0.0.9/app-readme.md similarity index 100% rename from incubator/meshcentral/0.0.8/app-readme.md rename to incubator/meshcentral/0.0.9/app-readme.md diff --git a/incubator/meshcentral/0.0.8/charts/common-9.2.6.tgz b/incubator/meshcentral/0.0.9/charts/common-9.2.6.tgz similarity index 100% rename from incubator/meshcentral/0.0.8/charts/common-9.2.6.tgz rename to incubator/meshcentral/0.0.9/charts/common-9.2.6.tgz diff --git a/incubator/meshcentral/0.0.8/charts/mongodb-0.0.14.tgz b/incubator/meshcentral/0.0.9/charts/mongodb-0.0.14.tgz similarity index 100% rename from incubator/meshcentral/0.0.8/charts/mongodb-0.0.14.tgz rename to incubator/meshcentral/0.0.9/charts/mongodb-0.0.14.tgz diff --git a/incubator/meshcentral/0.0.8/helm-values.md b/incubator/meshcentral/0.0.9/helm-values.md similarity index 93% rename from incubator/meshcentral/0.0.8/helm-values.md rename to incubator/meshcentral/0.0.9/helm-values.md index 85f7032bc74..d3678233db0 100644 --- a/incubator/meshcentral/0.0.8/helm-values.md +++ b/incubator/meshcentral/0.0.9/helm-values.md @@ -21,8 +21,8 @@ You will, however, be able to use all values referenced in the common chart here | env.REVERSE_PROXY_TLS_PORT | string | `""` | | | env.WEBRTC | bool | `false` | | | image.pullPolicy | string | `"IfNotPresent"` | | -| image.repository | string | `"einar/meshcentral"` | | -| image.tag | string | `"latest@sha256:293106bdcad40e9666b5a23c50baa73c656c729fd4cd5ae1848306689ad27a90"` | | +| image.repository | string | `"tccr.io/truecharts/meshcentral"` | | +| image.tag | string | `"latest@sha256:62230bdc8acebe42d5082267147de1a7ced76826d76191612dc54543d7ee1314"` | | | initContainers.init.command[0] | string | `"/init/meshcentral/init.sh"` | | | initContainers.init.image | string | `"{{ .Values.image.repository }}:{{ .Values.image.tag }}"` | | | initContainers.init.volumeMounts[0].mountPath | string | `"/init/meshcentral"` | | diff --git a/incubator/meshcentral/0.0.8/ix_values.yaml b/incubator/meshcentral/0.0.9/ix_values.yaml similarity index 93% rename from incubator/meshcentral/0.0.8/ix_values.yaml rename to incubator/meshcentral/0.0.9/ix_values.yaml index f99b9f95d3a..13bd4e4d925 100644 --- a/incubator/meshcentral/0.0.8/ix_values.yaml +++ b/incubator/meshcentral/0.0.9/ix_values.yaml @@ -1,7 +1,7 @@ image: - repository: einar/meshcentral + repository: tccr.io/truecharts/meshcentral pullPolicy: IfNotPresent - tag: latest@sha256:293106bdcad40e9666b5a23c50baa73c656c729fd4cd5ae1848306689ad27a90 + tag: latest@sha256:62230bdc8acebe42d5082267147de1a7ced76826d76191612dc54543d7ee1314 securityContext: readOnlyRootFilesystem: false diff --git a/incubator/meshcentral/0.0.8/questions.yaml b/incubator/meshcentral/0.0.9/questions.yaml similarity index 100% rename from incubator/meshcentral/0.0.8/questions.yaml rename to incubator/meshcentral/0.0.9/questions.yaml diff --git a/incubator/meshcentral/0.0.8/security.md b/incubator/meshcentral/0.0.9/security.md similarity index 99% rename from incubator/meshcentral/0.0.8/security.md rename to incubator/meshcentral/0.0.9/security.md index c9f7ff6f1d1..128eecd3d9d 100644 --- a/incubator/meshcentral/0.0.8/security.md +++ b/incubator/meshcentral/0.0.9/security.md @@ -87,8 +87,8 @@ hide: tccr.io/truecharts/alpine:v3.15.2@sha256:29ed3480a0ee43f7af681fed5d4fc215516abf1c41eade6938b26d8c9c2c7583 tccr.io/truecharts/alpine:v3.15.2@sha256:29ed3480a0ee43f7af681fed5d4fc215516abf1c41eade6938b26d8c9c2c7583 tccr.io/truecharts/mongodb:v5.0.6@sha256:177c6813d235560c03ee7068189322d7b30475fafe2ba29d2090e6bf3b8f940b - 'einar/meshcentral:latest@sha256:293106bdcad40e9666b5a23c50baa73c656c729fd4cd5ae1848306689ad27a90' - einar/meshcentral:latest@sha256:293106bdcad40e9666b5a23c50baa73c656c729fd4cd5ae1848306689ad27a90 + 'tccr.io/truecharts/meshcentral:latest@sha256:62230bdc8acebe42d5082267147de1a7ced76826d76191612dc54543d7ee1314' + tccr.io/truecharts/meshcentral:latest@sha256:62230bdc8acebe42d5082267147de1a7ced76826d76191612dc54543d7ee1314 tccr.io/truecharts/alpine:v3.15.2@sha256:29ed3480a0ee43f7af681fed5d4fc215516abf1c41eade6938b26d8c9c2c7583 tccr.io/truecharts/alpine:v3.15.2@sha256:29ed3480a0ee43f7af681fed5d4fc215516abf1c41eade6938b26d8c9c2c7583 tccr.io/truecharts/mongodb:v5.0.6@sha256:cf0b4ed307d1dd99646f940e87abee73d7d78cc1bb8b151ec3afe0b0221fbb9f @@ -371,7 +371,7 @@ hide: -#### Container: einar/meshcentral:latest@sha256:293106bdcad40e9666b5a23c50baa73c656c729fd4cd5ae1848306689ad27a90 (ubuntu 20.04) +#### Container: tccr.io/truecharts/meshcentral:latest@sha256:62230bdc8acebe42d5082267147de1a7ced76826d76191612dc54543d7ee1314 (ubuntu 20.04) **ubuntu** diff --git a/incubator/meshcentral/0.0.8/templates/_configmap.tpl b/incubator/meshcentral/0.0.9/templates/_configmap.tpl similarity index 100% rename from incubator/meshcentral/0.0.8/templates/_configmap.tpl rename to incubator/meshcentral/0.0.9/templates/_configmap.tpl diff --git a/incubator/meshcentral/0.0.8/templates/common.yaml b/incubator/meshcentral/0.0.9/templates/common.yaml similarity index 100% rename from incubator/meshcentral/0.0.8/templates/common.yaml rename to incubator/meshcentral/0.0.9/templates/common.yaml diff --git a/incubator/meshcentral/0.0.8/values.yaml b/incubator/meshcentral/0.0.9/values.yaml similarity index 100% rename from incubator/meshcentral/0.0.8/values.yaml rename to incubator/meshcentral/0.0.9/values.yaml diff --git a/incubator/typecho/0.0.4/CHANGELOG.md b/incubator/typecho/0.0.4/CHANGELOG.md deleted file mode 100644 index 98d1247d6bc..00000000000 --- a/incubator/typecho/0.0.4/CHANGELOG.md +++ /dev/null @@ -1,10 +0,0 @@ -# Changelog
- - - -### [typecho-0.0.4](https://github.com/truecharts/apps/compare/typecho-0.0.3...typecho-0.0.4) (2022-04-03) - - - - -### typecho-0.0.1 (2022-04-01) diff --git a/incubator/typecho/0.0.5/CHANGELOG.md b/incubator/typecho/0.0.5/CHANGELOG.md new file mode 100644 index 00000000000..883f1a3f2fd --- /dev/null +++ b/incubator/typecho/0.0.5/CHANGELOG.md @@ -0,0 +1,23 @@ +# Changelog
+ + + +### [typecho-0.0.5](https://github.com/truecharts/apps/compare/typecho-0.0.4...typecho-0.0.5) (2022-04-03) + +#### Chore + +* update image refs ([#2411](https://github.com/truecharts/apps/issues/2411)) + +#### Fix + +* Fix db host ([#2409](https://github.com/truecharts/apps/issues/2409)) + + + + +### [typecho-0.0.4](https://github.com/truecharts/apps/compare/typecho-0.0.3...typecho-0.0.4) (2022-04-03) + + + + +### typecho-0.0.1 (2022-04-01) diff --git a/incubator/typecho/0.0.4/CONFIG.md b/incubator/typecho/0.0.5/CONFIG.md similarity index 100% rename from incubator/typecho/0.0.4/CONFIG.md rename to incubator/typecho/0.0.5/CONFIG.md diff --git a/incubator/typecho/0.0.4/Chart.lock b/incubator/typecho/0.0.5/Chart.lock similarity index 85% rename from incubator/typecho/0.0.4/Chart.lock rename to incubator/typecho/0.0.5/Chart.lock index b38fe808207..6e3c587eb97 100644 --- a/incubator/typecho/0.0.4/Chart.lock +++ b/incubator/typecho/0.0.5/Chart.lock @@ -6,4 +6,4 @@ dependencies: repository: https://charts.truecharts.org/ version: 2.0.28 digest: sha256:b61cd23e4e721b9fc39f21ab0ee13ae54eebca91f866f619eefad8de7116d04e -generated: "2022-04-03T10:09:41.464090142Z" +generated: "2022-04-03T13:16:44.142753308Z" diff --git a/incubator/typecho/0.0.4/Chart.yaml b/incubator/typecho/0.0.5/Chart.yaml similarity index 95% rename from incubator/typecho/0.0.4/Chart.yaml rename to incubator/typecho/0.0.5/Chart.yaml index 8d726d09a6e..2d3ce2b4ed4 100644 --- a/incubator/typecho/0.0.4/Chart.yaml +++ b/incubator/typecho/0.0.5/Chart.yaml @@ -1,5 +1,5 @@ apiVersion: v2 -appVersion: "1.2.0-php8" +appVersion: "1.2.0" dependencies: - name: common repository: https://library-charts.truecharts.org @@ -23,7 +23,7 @@ name: typecho sources: - https://github.com/typecho/typecho - https://hub.docker.com/r/joyqi/typecho -version: 0.0.4 +version: 0.0.5 annotations: truecharts.org/catagories: | - hosting diff --git a/incubator/typecho/0.0.4/README.md b/incubator/typecho/0.0.5/README.md similarity index 100% rename from incubator/typecho/0.0.4/README.md rename to incubator/typecho/0.0.5/README.md diff --git a/incubator/typecho/0.0.4/app-readme.md b/incubator/typecho/0.0.5/app-readme.md similarity index 100% rename from incubator/typecho/0.0.4/app-readme.md rename to incubator/typecho/0.0.5/app-readme.md diff --git a/incubator/typecho/0.0.4/charts/common-9.2.6.tgz b/incubator/typecho/0.0.5/charts/common-9.2.6.tgz similarity index 100% rename from incubator/typecho/0.0.4/charts/common-9.2.6.tgz rename to incubator/typecho/0.0.5/charts/common-9.2.6.tgz diff --git a/incubator/typecho/0.0.4/charts/mariadb-2.0.28.tgz b/incubator/typecho/0.0.5/charts/mariadb-2.0.28.tgz similarity index 100% rename from incubator/typecho/0.0.4/charts/mariadb-2.0.28.tgz rename to incubator/typecho/0.0.5/charts/mariadb-2.0.28.tgz diff --git a/incubator/typecho/0.0.4/helm-values.md b/incubator/typecho/0.0.5/helm-values.md similarity index 93% rename from incubator/typecho/0.0.4/helm-values.md rename to incubator/typecho/0.0.5/helm-values.md index a41252987c9..429e479d25c 100644 --- a/incubator/typecho/0.0.4/helm-values.md +++ b/incubator/typecho/0.0.5/helm-values.md @@ -27,13 +27,13 @@ You will, however, be able to use all values referenced in the common chart here | env.TYPECHO_USER_MAIL | string | `"test@truecharts.org"` | | | env.TYPECHO_USER_NAME | string | `"typecho"` | | | env.TYPECHO_USER_PASSWORD | string | `"testtypecho"` | | -| envValueFrom.TYPECHO_DB_HOST.secretKeyRef.key | string | `"plainporthost"` | | +| envValueFrom.TYPECHO_DB_HOST.secretKeyRef.key | string | `"plainhost"` | | | envValueFrom.TYPECHO_DB_HOST.secretKeyRef.name | string | `"mariadbcreds"` | | | envValueFrom.TYPECHO_DB_PASSWORD.secretKeyRef.key | string | `"mariadb-password"` | | | envValueFrom.TYPECHO_DB_PASSWORD.secretKeyRef.name | string | `"mariadbcreds"` | | | image.pullPolicy | string | `"IfNotPresent"` | | -| image.repository | string | `"joyqi/typecho"` | | -| image.tag | string | `"1.2.0-php8.0-apache@sha256:090f5aad01ff81ecb6272368612d2b7d0887065da850ae8d094a137b231bdd84"` | | +| image.repository | string | `"tccr.io/truecharts/typecho"` | | +| image.tag | string | `"v1.2.0-php8.0@sha256:c76e48508cf2f66d1b427a9f43fd218797ce984235d5da7dcdaa75ebdbdb0b73"` | | | mariadb.enabled | bool | `true` | | | mariadb.existingSecret | string | `"mariadbcreds"` | | | mariadb.mariadbDatabase | string | `"typecho"` | | diff --git a/incubator/typecho/0.0.4/ix_values.yaml b/incubator/typecho/0.0.5/ix_values.yaml similarity index 88% rename from incubator/typecho/0.0.4/ix_values.yaml rename to incubator/typecho/0.0.5/ix_values.yaml index 366f493e9df..794a37adcad 100644 --- a/incubator/typecho/0.0.4/ix_values.yaml +++ b/incubator/typecho/0.0.5/ix_values.yaml @@ -1,6 +1,6 @@ image: - repository: joyqi/typecho - tag: 1.2.0-php8.0-apache@sha256:090f5aad01ff81ecb6272368612d2b7d0887065da850ae8d094a137b231bdd84 + repository: tccr.io/truecharts/typecho + tag: v1.2.0-php8.0@sha256:c76e48508cf2f66d1b427a9f43fd218797ce984235d5da7dcdaa75ebdbdb0b73 pullPolicy: IfNotPresent securityContext: @@ -34,7 +34,7 @@ envValueFrom: TYPECHO_DB_HOST: secretKeyRef: name: mariadbcreds - key: plainporthost + key: plainhost TYPECHO_DB_PASSWORD: secretKeyRef: name: mariadbcreds diff --git a/incubator/typecho/0.0.4/questions.yaml b/incubator/typecho/0.0.5/questions.yaml similarity index 100% rename from incubator/typecho/0.0.4/questions.yaml rename to incubator/typecho/0.0.5/questions.yaml diff --git a/incubator/typecho/0.0.4/security.md b/incubator/typecho/0.0.5/security.md similarity index 99% rename from incubator/typecho/0.0.4/security.md rename to incubator/typecho/0.0.5/security.md index 2a33af62dca..374788eb358 100644 --- a/incubator/typecho/0.0.4/security.md +++ b/incubator/typecho/0.0.5/security.md @@ -77,7 +77,7 @@ hide: tccr.io/truecharts/alpine:v3.15.2@sha256:29ed3480a0ee43f7af681fed5d4fc215516abf1c41eade6938b26d8c9c2c7583 tccr.io/truecharts/alpine:v3.15.2@sha256:29ed3480a0ee43f7af681fed5d4fc215516abf1c41eade6938b26d8c9c2c7583 tccr.io/truecharts/mariadb:v10.7.3@sha256:6e919e0e150c26c9472dd9689c2d5c56741de9795ed0202108038831f654542e - joyqi/typecho:1.2.0-php8.0-apache@sha256:090f5aad01ff81ecb6272368612d2b7d0887065da850ae8d094a137b231bdd84 + tccr.io/truecharts/typecho:v1.2.0-php8.0@sha256:c76e48508cf2f66d1b427a9f43fd218797ce984235d5da7dcdaa75ebdbdb0b73 tccr.io/truecharts/alpine:v3.15.2@sha256:29ed3480a0ee43f7af681fed5d4fc215516abf1c41eade6938b26d8c9c2c7583 tccr.io/truecharts/alpine:v3.15.2@sha256:29ed3480a0ee43f7af681fed5d4fc215516abf1c41eade6938b26d8c9c2c7583 tccr.io/truecharts/mariadb:v10.7.3@sha256:e17c635d51b9dfc766539d2dab85c5737f1464c39f313e9e7cadda32d00cc6a9 @@ -296,7 +296,7 @@ hide: -#### Container: joyqi/typecho:1.2.0-php8.0-apache@sha256:090f5aad01ff81ecb6272368612d2b7d0887065da850ae8d094a137b231bdd84 (debian 11.3) +#### Container: tccr.io/truecharts/typecho:v1.2.0-php8.0@sha256:c76e48508cf2f66d1b427a9f43fd218797ce984235d5da7dcdaa75ebdbdb0b73 (debian 11.3) **debian** diff --git a/incubator/typecho/0.0.4/templates/common.yaml b/incubator/typecho/0.0.5/templates/common.yaml similarity index 100% rename from incubator/typecho/0.0.4/templates/common.yaml rename to incubator/typecho/0.0.5/templates/common.yaml diff --git a/incubator/typecho/0.0.4/values.yaml b/incubator/typecho/0.0.5/values.yaml similarity index 100% rename from incubator/typecho/0.0.4/values.yaml rename to incubator/typecho/0.0.5/values.yaml diff --git a/incubator/xwiki/0.0.4/CHANGELOG.md b/incubator/xwiki/0.0.5/CHANGELOG.md similarity index 56% rename from incubator/xwiki/0.0.4/CHANGELOG.md rename to incubator/xwiki/0.0.5/CHANGELOG.md index 7bce322e213..4f9d7b68bd9 100644 --- a/incubator/xwiki/0.0.4/CHANGELOG.md +++ b/incubator/xwiki/0.0.5/CHANGELOG.md @@ -1,6 +1,15 @@ # Changelog
+ +### [xwiki-0.0.5](https://github.com/truecharts/apps/compare/xwiki-0.0.4...xwiki-0.0.5) (2022-04-03) + +#### Chore + +* update image refs ([#2411](https://github.com/truecharts/apps/issues/2411)) + + + ### [xwiki-0.0.4](https://github.com/truecharts/apps/compare/xwiki-0.0.3...xwiki-0.0.4) (2022-04-03) diff --git a/incubator/xwiki/0.0.4/CONFIG.md b/incubator/xwiki/0.0.5/CONFIG.md similarity index 100% rename from incubator/xwiki/0.0.4/CONFIG.md rename to incubator/xwiki/0.0.5/CONFIG.md diff --git a/incubator/ferdi-server/0.0.1/Chart.lock b/incubator/xwiki/0.0.5/Chart.lock similarity index 85% rename from incubator/ferdi-server/0.0.1/Chart.lock rename to incubator/xwiki/0.0.5/Chart.lock index bc0d4d95abc..a6931b7df4b 100644 --- a/incubator/ferdi-server/0.0.1/Chart.lock +++ b/incubator/xwiki/0.0.5/Chart.lock @@ -6,4 +6,4 @@ dependencies: repository: https://charts.truecharts.org/ version: 7.0.27 digest: sha256:18badf2ec625ddadfd4348a1e7ce332adffcdf08c4b787e14d024f01bca60b19 -generated: "2022-04-01T07:30:21.316722595Z" +generated: "2022-04-03T13:17:08.077766087Z" diff --git a/incubator/xwiki/0.0.4/Chart.yaml b/incubator/xwiki/0.0.5/Chart.yaml similarity index 95% rename from incubator/xwiki/0.0.4/Chart.yaml rename to incubator/xwiki/0.0.5/Chart.yaml index 064690d64f1..5a56c7e9ca5 100644 --- a/incubator/xwiki/0.0.4/Chart.yaml +++ b/incubator/xwiki/0.0.5/Chart.yaml @@ -1,5 +1,5 @@ apiVersion: v2 -appVersion: "14.2.1-pos" +appVersion: "14.2.1" dependencies: - name: common repository: https://library-charts.truecharts.org @@ -23,7 +23,7 @@ name: xwiki sources: - https://hub.docker.com/_/xwiki - https://github.com/xwiki/xwiki-docker -version: 0.0.4 +version: 0.0.5 annotations: truecharts.org/catagories: | - productivity diff --git a/incubator/xwiki/0.0.4/README.md b/incubator/xwiki/0.0.5/README.md similarity index 100% rename from incubator/xwiki/0.0.4/README.md rename to incubator/xwiki/0.0.5/README.md diff --git a/incubator/xwiki/0.0.4/app-readme.md b/incubator/xwiki/0.0.5/app-readme.md similarity index 100% rename from incubator/xwiki/0.0.4/app-readme.md rename to incubator/xwiki/0.0.5/app-readme.md diff --git a/incubator/xwiki/0.0.4/charts/common-9.2.6.tgz b/incubator/xwiki/0.0.5/charts/common-9.2.6.tgz similarity index 100% rename from incubator/xwiki/0.0.4/charts/common-9.2.6.tgz rename to incubator/xwiki/0.0.5/charts/common-9.2.6.tgz diff --git a/incubator/xwiki/0.0.4/charts/postgresql-7.0.27.tgz b/incubator/xwiki/0.0.5/charts/postgresql-7.0.27.tgz similarity index 100% rename from incubator/xwiki/0.0.4/charts/postgresql-7.0.27.tgz rename to incubator/xwiki/0.0.5/charts/postgresql-7.0.27.tgz diff --git a/incubator/xwiki/0.0.4/helm-values.md b/incubator/xwiki/0.0.5/helm-values.md similarity index 91% rename from incubator/xwiki/0.0.4/helm-values.md rename to incubator/xwiki/0.0.5/helm-values.md index ce55efab4e3..fd4246c39f0 100644 --- a/incubator/xwiki/0.0.4/helm-values.md +++ b/incubator/xwiki/0.0.5/helm-values.md @@ -19,8 +19,8 @@ You will, however, be able to use all values referenced in the common chart here | envValueFrom.DB_PASSWORD.secretKeyRef.key | string | `"postgresql-password"` | | | envValueFrom.DB_PASSWORD.secretKeyRef.name | string | `"dbcreds"` | | | image.pullPolicy | string | `"IfNotPresent"` | | -| image.repository | string | `"xwiki"` | | -| image.tag | string | `"14.2.1-postgres-tomcat@sha256:88c7aaf61dc3022009b90804e59adaa3c3a7b1bc8f7918c718d60a3882a961e0"` | | +| image.repository | string | `"tccr.io/truecharts/xwiki"` | | +| image.tag | string | `"v14.2.1-postgres@sha256:54a3c6e5376f95e0da0cf03eac4fa8370d780a9f8afa4a2336d5afe096f9ac61"` | | | persistence.config.enabled | bool | `true` | | | persistence.config.mountPath | string | `"/usr/local/xwiki"` | | | podSecurityContext.runAsGroup | int | `0` | | diff --git a/incubator/xwiki/0.0.4/ix_values.yaml b/incubator/xwiki/0.0.5/ix_values.yaml similarity index 84% rename from incubator/xwiki/0.0.4/ix_values.yaml rename to incubator/xwiki/0.0.5/ix_values.yaml index 4007bcde218..5e8e94fa4be 100644 --- a/incubator/xwiki/0.0.4/ix_values.yaml +++ b/incubator/xwiki/0.0.5/ix_values.yaml @@ -1,6 +1,6 @@ image: - repository: xwiki - tag: 14.2.1-postgres-tomcat@sha256:88c7aaf61dc3022009b90804e59adaa3c3a7b1bc8f7918c718d60a3882a961e0 + repository: tccr.io/truecharts/xwiki + tag: v14.2.1-postgres@sha256:54a3c6e5376f95e0da0cf03eac4fa8370d780a9f8afa4a2336d5afe096f9ac61 pullPolicy: IfNotPresent securityContext: diff --git a/incubator/xwiki/0.0.4/questions.yaml b/incubator/xwiki/0.0.5/questions.yaml similarity index 100% rename from incubator/xwiki/0.0.4/questions.yaml rename to incubator/xwiki/0.0.5/questions.yaml diff --git a/incubator/xwiki/0.0.4/security.md b/incubator/xwiki/0.0.5/security.md similarity index 99% rename from incubator/xwiki/0.0.4/security.md rename to incubator/xwiki/0.0.5/security.md index ec9ae93b943..b0a03db65e2 100644 --- a/incubator/xwiki/0.0.4/security.md +++ b/incubator/xwiki/0.0.5/security.md @@ -77,7 +77,7 @@ hide: tccr.io/truecharts/alpine:v3.15.2@sha256:29ed3480a0ee43f7af681fed5d4fc215516abf1c41eade6938b26d8c9c2c7583 tccr.io/truecharts/alpine:v3.15.2@sha256:29ed3480a0ee43f7af681fed5d4fc215516abf1c41eade6938b26d8c9c2c7583 tccr.io/truecharts/postgresql:v14.2.0@sha256:f3be169e9257f6c516723874e8bed1e07f5af4ee555009fef6e481e740a4343b - xwiki:14.2.1-postgres-tomcat@sha256:88c7aaf61dc3022009b90804e59adaa3c3a7b1bc8f7918c718d60a3882a961e0 + tccr.io/truecharts/xwiki:v14.2.1-postgres@sha256:54a3c6e5376f95e0da0cf03eac4fa8370d780a9f8afa4a2336d5afe096f9ac61 tccr.io/truecharts/alpine:v3.15.2@sha256:29ed3480a0ee43f7af681fed5d4fc215516abf1c41eade6938b26d8c9c2c7583 tccr.io/truecharts/alpine:v3.15.2@sha256:29ed3480a0ee43f7af681fed5d4fc215516abf1c41eade6938b26d8c9c2c7583 tccr.io/truecharts/postgresql:v14.2.0@sha256:29d271601a53989aa4d6d0350f00ed36c7d20e920a9c744d6c01b81aee6638a1 @@ -351,7 +351,7 @@ hide: | github.com/opencontainers/runc | CVE-2021-43784 | MEDIUM | v1.0.1 | v1.0.3 |
Expand...https://access.redhat.com/security/cve/CVE-2021-43784
https://bugs.chromium.org/p/project-zero/issues/detail?id=2241
https://github.com/opencontainers/runc/commit/9c444070ec7bb83995dbc0185da68284da71c554
https://github.com/opencontainers/runc/commit/d72d057ba794164c3cce9451a00b72a78b25e1ae
https://github.com/opencontainers/runc/commit/f50369af4b571e358f20b139eea52d612eb55eed
https://github.com/opencontainers/runc/security/advisories/GHSA-v95c-p5hm-xq8f
https://lists.debian.org/debian-lts-announce/2021/12/msg00005.html
https://nvd.nist.gov/vuln/detail/CVE-2021-43784
| -#### Container: xwiki:14.2.1-postgres-tomcat@sha256:88c7aaf61dc3022009b90804e59adaa3c3a7b1bc8f7918c718d60a3882a961e0 (debian 11.3) +#### Container: tccr.io/truecharts/xwiki:v14.2.1-postgres@sha256:54a3c6e5376f95e0da0cf03eac4fa8370d780a9f8afa4a2336d5afe096f9ac61 (debian 11.3) **debian** diff --git a/incubator/xwiki/0.0.4/templates/common.yaml b/incubator/xwiki/0.0.5/templates/common.yaml similarity index 100% rename from incubator/xwiki/0.0.4/templates/common.yaml rename to incubator/xwiki/0.0.5/templates/common.yaml diff --git a/incubator/xwiki/0.0.4/values.yaml b/incubator/xwiki/0.0.5/values.yaml similarity index 100% rename from incubator/xwiki/0.0.4/values.yaml rename to incubator/xwiki/0.0.5/values.yaml diff --git a/stable/heimdall/10.0.9/CHANGELOG.md b/stable/heimdall/10.0.9/CHANGELOG.md new file mode 100644 index 00000000000..b2cf7c165d5 --- /dev/null +++ b/stable/heimdall/10.0.9/CHANGELOG.md @@ -0,0 +1,99 @@ +# Changelog
+ + + +### [heimdall-10.0.9](https://github.com/truecharts/apps/compare/heimdall-10.0.8...heimdall-10.0.9) (2022-04-03) + +#### Chore + +* Auto-update chart README [skip ci] +* Update digest ([#2385](https://github.com/truecharts/apps/issues/2385)) + +#### Fix + +* rw root fs / hostnet ([#2389](https://github.com/truecharts/apps/issues/2389)) + + + + +### [heimdall-10.0.8](https://github.com/truecharts/apps/compare/heimdall-10.0.7...heimdall-10.0.8) (2022-03-31) + +#### Chore + +* update helm general non-major helm releases ([#2361](https://github.com/truecharts/apps/issues/2361)) + + + + +### [heimdall-10.0.7](https://github.com/truecharts/apps/compare/heimdall-10.0.6...heimdall-10.0.7) (2022-03-30) + +#### Chore + +* update helm general non-major helm releases ([#2354](https://github.com/truecharts/apps/issues/2354)) + + + + +### [heimdall-10.0.6](https://github.com/truecharts/apps/compare/heimdall-10.0.5...heimdall-10.0.6) (2022-03-26) + +#### Chore + +* bump all apps to trigger ci + + + + +### [heimdall-10.0.1](https://github.com/truecharts/apps/compare/heimdall-10.0.0...heimdall-10.0.1) (2022-03-07) + +#### Chore + +* update helm general non-major helm releases ([#2111](https://github.com/truecharts/apps/issues/2111)) +* Remove `-icon` string from icon png's ([#2040](https://github.com/truecharts/apps/issues/2040)) + + + + +### [heimdall-10.0.0](https://github.com/truecharts/apps/compare/heimdall-9.0.47...heimdall-10.0.0) (2022-03-03) + +#### Chore + +* remove fixed env from questions.yaml +* remove empty env var declaration from questions.yaml +* update helm general major helm releases ([#2021](https://github.com/truecharts/apps/issues/2021)) + +#### Fix + +* BREAKING CHANGE Move some env-vars outside of env section ([#2010](https://github.com/truecharts/apps/issues/2010)) +* fix TZ being wrongly defined in common and remove its references from some remaining Apps ([#2005](https://github.com/truecharts/apps/issues/2005)) + + + + +### [heimdall-9.0.47](https://github.com/truecharts/apps/compare/heimdall-9.0.46...heimdall-9.0.47) (2022-03-02) + +#### Chore + +* rename `web_portal` to `open` ([#1957](https://github.com/truecharts/apps/issues/1957)) +* update helm general non-major helm releases ([#1999](https://github.com/truecharts/apps/issues/1999)) + + + + +### [heimdall-9.0.46](https://github.com/truecharts/apps/compare/heimdall-9.0.45...heimdall-9.0.46) (2022-02-21) + +#### Chore + +* update helm general non-major helm releases ([#1927](https://github.com/truecharts/apps/issues/1927)) + + + + +### [heimdall-9.0.45](https://github.com/truecharts/apps/compare/heimdall-9.0.44...heimdall-9.0.45) (2022-02-15) + +#### Chore + +* update helm general non-major helm releases ([#1901](https://github.com/truecharts/apps/issues/1901)) + + + + diff --git a/stable/sqlitebrowser/2.0.8/CONFIG.md b/stable/heimdall/10.0.9/CONFIG.md similarity index 100% rename from stable/sqlitebrowser/2.0.8/CONFIG.md rename to stable/heimdall/10.0.9/CONFIG.md diff --git a/stable/sqlitebrowser/2.0.8/Chart.lock b/stable/heimdall/10.0.9/Chart.lock similarity index 80% rename from stable/sqlitebrowser/2.0.8/Chart.lock rename to stable/heimdall/10.0.9/Chart.lock index 64ec8e79bd1..45c505edbf2 100644 --- a/stable/sqlitebrowser/2.0.8/Chart.lock +++ b/stable/heimdall/10.0.9/Chart.lock @@ -3,4 +3,4 @@ dependencies: repository: https://library-charts.truecharts.org version: 9.2.6 digest: sha256:a567b53fc3d0d618567f328d9fbb09695895b8e15d6ca178bf4a198c58080cac -generated: "2022-03-31T13:48:40.648914173Z" +generated: "2022-04-03T13:17:40.098849827Z" diff --git a/stable/heimdall/10.0.9/Chart.yaml b/stable/heimdall/10.0.9/Chart.yaml new file mode 100644 index 00000000000..80fcf767d42 --- /dev/null +++ b/stable/heimdall/10.0.9/Chart.yaml @@ -0,0 +1,27 @@ +apiVersion: v2 +appVersion: "2.4.8" +dependencies: +- name: common + repository: https://library-charts.truecharts.org + version: 9.2.6 +deprecated: false +description: An Application dashboard and launcher +home: https://github.com/truecharts/apps/tree/master/charts/stable/heimdall +icon: https://truecharts.org/_static/img/appicons/heimdall.png +keywords: +- heimdall +kubeVersion: '>=1.16.0-0' +maintainers: +- email: info@truecharts.org + name: TrueCharts + url: https://truecharts.org +name: heimdall +sources: +- https://github.com/linuxserver/Heimdall/ +type: application +version: 10.0.9 +annotations: + truecharts.org/catagories: | + - organizers + truecharts.org/SCALE-support: "true" + truecharts.org/grade: U diff --git a/stable/heimdall/10.0.9/README.md b/stable/heimdall/10.0.9/README.md new file mode 100644 index 00000000000..2bc70ed84e4 --- /dev/null +++ b/stable/heimdall/10.0.9/README.md @@ -0,0 +1,37 @@ +# Introduction + +An Application dashboard and launcher + +TrueCharts are designed to be installed as TrueNAS SCALE app only. We can not guarantee this charts works as a stand-alone helm installation. +**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/apps/issues/new/choose)** + +## Source Code + +* + +## Requirements + +Kubernetes: `>=1.16.0-0` + +## Dependencies + +| Repository | Name | Version | +|------------|------|---------| +| https://library-charts.truecharts.org | common | 9.2.6 | + +## Installing the Chart + +To install this App on TrueNAS SCALE check our [Quick-Start Guide](https://truecharts.org/manual/Quick-Start%20Guides/02-Installing-an-App/). + +## Upgrading, Rolling Back and Uninstalling the Chart + +To upgrade, rollback or delete this App from TrueNAS SCALE check our [Quick-Start Guide](https://truecharts.org/manual/Quick-Start%20Guides/04-Upgrade-rollback-delete-an-App/). + +## Support + +- Please check our [quick-start guides](https://truecharts.org/manual/Quick-Start%20Guides/01-Adding-TrueCharts/) first. +- See the [Wiki](https://truecharts.org) +- Check our [Discord](https://discord.gg/tVsPTHWTtr) +- Open a [issue](https://github.com/truecharts/apps/issues/new/choose) +--- +All Rights Reserved - The TrueCharts Project diff --git a/stable/heimdall/10.0.9/app-readme.md b/stable/heimdall/10.0.9/app-readme.md new file mode 100644 index 00000000000..4536a5af69a --- /dev/null +++ b/stable/heimdall/10.0.9/app-readme.md @@ -0,0 +1,3 @@ +An Application dashboard and launcher + +This App is supplied by TrueCharts, for more information please visit https://truecharts.org diff --git a/stable/sqlitebrowser/2.0.8/charts/common-9.2.6.tgz b/stable/heimdall/10.0.9/charts/common-9.2.6.tgz similarity index 100% rename from stable/sqlitebrowser/2.0.8/charts/common-9.2.6.tgz rename to stable/heimdall/10.0.9/charts/common-9.2.6.tgz diff --git a/stable/heimdall/10.0.9/helm-values.md b/stable/heimdall/10.0.9/helm-values.md new file mode 100644 index 00000000000..28267e87cd0 --- /dev/null +++ b/stable/heimdall/10.0.9/helm-values.md @@ -0,0 +1,27 @@ +# Default Helm-Values + +TrueCharts is primarily build to supply TrueNAS SCALE Apps. +However, we also supply all Apps as standard Helm-Charts. In this document we aim to document the default values in our values.yaml file. + +Most of our Apps also consume our "common" Helm Chart. +If this is the case, this means that all values.yaml values are set to the common chart values.yaml by default. This values.yaml file will only contain values that deviate from the common chart. +You will, however, be able to use all values referenced in the common chart here, besides the values listed in this document. + +## Values + +| Key | Type | Default | Description | +|-----|------|---------|-------------| +| image.pullPolicy | string | `"IfNotPresent"` | | +| image.repository | string | `"tccr.io/truecharts/heimdall"` | | +| image.tag | string | `"v2.4.8@sha256:e83a7621b9a0c3351231ade781f6468861e2f2e8fe480476fc587ba0c144e959"` | | +| persistence.config.enabled | bool | `true` | | +| persistence.config.mountPath | string | `"/config"` | | +| podSecurityContext.runAsGroup | int | `0` | | +| podSecurityContext.runAsUser | int | `0` | | +| probes.startup.enabled | bool | `true` | | +| securityContext.readOnlyRootFilesystem | bool | `false` | | +| securityContext.runAsNonRoot | bool | `false` | | +| service.main.ports.main.port | int | `10014` | | +| service.main.ports.main.targetPort | int | `80` | | + +All Rights Reserved - The TrueCharts Project diff --git a/stable/heimdall/10.0.9/ix_values.yaml b/stable/heimdall/10.0.9/ix_values.yaml new file mode 100644 index 00000000000..d6eba6af131 --- /dev/null +++ b/stable/heimdall/10.0.9/ix_values.yaml @@ -0,0 +1,28 @@ +image: + repository: tccr.io/truecharts/heimdall + tag: v2.4.8@sha256:e83a7621b9a0c3351231ade781f6468861e2f2e8fe480476fc587ba0c144e959 + pullPolicy: IfNotPresent + +securityContext: + readOnlyRootFilesystem: false + runAsNonRoot: false + +podSecurityContext: + runAsUser: 0 + runAsGroup: 0 + +service: + main: + ports: + main: + port: 10014 + targetPort: 80 + +probes: + startup: + enabled: true + +persistence: + config: + enabled: true + mountPath: "/config" diff --git a/stable/heimdall/10.0.9/questions.yaml b/stable/heimdall/10.0.9/questions.yaml new file mode 100644 index 00000000000..4ffb1e8b7c0 --- /dev/null +++ b/stable/heimdall/10.0.9/questions.yaml @@ -0,0 +1,2402 @@ +groups: + - name: "Container Image" + description: "Image to be used for container" + - name: "Controller" + description: "Configure workload deployment" + - name: "Container Configuration" + description: "additional container configuration" + - name: "App Configuration" + description: "App specific config options" + - name: "Networking and Services" + description: "Configure Network and Services for container" + - name: "Storage and Persistence" + description: "Persist and share data that is separate from the container" + - name: "Ingress" + description: "Ingress Configuration" + - name: "Security and Permissions" + description: "Configure security context and permissions" + - name: "Resources and Devices" + description: "Specify resources/devices to be allocated to workload" + - name: "Middlewares" + description: "Traefik Middlewares" + - name: "Metrics" + description: "Metrics" + - name: "Addons" + description: "Addon Configuration" + - name: "Advanced" + description: "Advanced Configuration" +portals: + open: + protocols: + - "$kubernetes-resource_configmap_portal_protocol" + host: + - "$kubernetes-resource_configmap_portal_host" + ports: + - "$kubernetes-resource_configmap_portal_port" +questions: + - variable: portal + group: "Container Image" + label: "Configure Portal Button" + schema: + type: dict + hidden: true + attrs: + - variable: enabled + label: "Enable" + description: "enable the portal button" + schema: + hidden: true + editable: false + type: boolean + default: true + - variable: global + label: "global settings" + group: "Controller" + schema: + type: dict + hidden: true + attrs: + - variable: isSCALE + label: "flag this is SCALE" + schema: + type: boolean + default: true + hidden: true + - variable: controller + group: "Controller" + label: "" + schema: + additional_attrs: true + type: dict + attrs: + - variable: advanced + label: "Show Advanced Controller Settings" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: type + description: "Please specify type of workload to deploy" + label: "(Advanced) Controller Type" + schema: + type: string + default: "deployment" + required: true + enum: + - value: "deployment" + description: "Deployment" + - value: "statefulset" + description: "Statefulset" + - value: "daemonset" + description: "Daemonset" + - variable: replicas + description: "Number of desired pod replicas" + label: "Desired Replicas" + schema: + type: int + default: 1 + required: true + - variable: strategy + description: "Please specify type of workload to deploy" + label: "(Advanced) Update Strategy" + schema: + type: string + default: "Recreate" + required: true + enum: + - value: "Recreate" + description: "Recreate: Kill existing pods before creating new ones" + - value: "RollingUpdate" + description: "RollingUpdate: Create new pods and then kill old ones" + - value: "OnDelete" + description: "(Legacy) OnDelete: ignore .spec.template changes" + - variable: expert + label: "Show Expert Configuration Options" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: extraArgs + label: "Extra Args" + schema: + type: list + default: [] + items: + - variable: arg + label: "arg" + schema: + type: string + - variable: labelsList + label: "Controller Labels" + schema: + type: list + default: [] + items: + - variable: labelItem + label: "Label" + schema: + additional_attrs: true + type: dict + attrs: + - variable: name + label: "Name" + schema: + type: string + - variable: value + label: "Value" + schema: + type: string + - variable: annotationsList + label: " Controller Annotations" + schema: + type: list + default: [] + items: + - variable: annotationItem + label: "Label" + schema: + additional_attrs: true + type: dict + attrs: + - variable: name + label: "Name" + schema: + type: string + - variable: value + label: "Value" + schema: + type: string + - variable: TZ + label: "Timezone" + group: "Container Configuration" + schema: + type: string + default: "Etc/UTC" + $ref: + - "definitions/timezone" + + - variable: envList + label: "Image environment" + group: "Container Configuration" + schema: + type: list + default: [] + items: + - variable: envItem + label: "Environment Variable" + schema: + additional_attrs: true + type: dict + attrs: + - variable: name + label: "Name" + schema: + type: string + - variable: value + label: "Value" + schema: + type: string + + - variable: expertpodconf + group: "Container Configuration" + label: "Show Expert Config" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: tty + label: "Enable TTY" + description: "Determines whether containers in a pod runs with TTY enabled. By default pod has it disabled." + group: "Workload Details" + schema: + type: boolean + default: false + - variable: stdin + label: "Enable STDIN" + description: "Determines whether containers in a pod runs with stdin enabled. By default pod has it disabled." + group: "Workload Details" + schema: + type: boolean + default: false + - variable: termination + group: "Container Configuration" + label: "Termination settings" + schema: + additional_attrs: true + type: dict + attrs: + - variable: gracePeriodSeconds + label: "Grace Period Seconds" + schema: + type: int + default: 10 + - variable: podLabelsList + group: "Container Configuration" + label: "Pod Labels" + schema: + type: list + default: [] + items: + - variable: podLabelItem + label: "Label" + schema: + additional_attrs: true + type: dict + attrs: + - variable: name + label: "Name" + schema: + type: string + - variable: value + label: "Value" + schema: + type: string + + - variable: podAnnotationsList + group: "Container Configuration" + label: "Pod Annotations" + schema: + type: list + default: [] + items: + - variable: podAnnotationItem + label: "Label" + schema: + additional_attrs: true + type: dict + attrs: + - variable: name + label: "Name" + schema: + type: string + - variable: value + label: "Value" + schema: + type: string + + - variable: service + group: "Networking and Services" + label: "Configure Service(s)" + schema: + additional_attrs: true + type: dict + attrs: + - variable: main + label: "Main Service" + description: "The Primary service on which the healthcheck runs, often the webUI" + schema: + additional_attrs: true + type: dict + attrs: + - variable: enabled + label: "Enable the service" + schema: + type: boolean + default: true + hidden: true + - variable: type + label: "Service Type" + description: "ClusterIP's are only internally available, nodePorts expose the container to the host node System, Loadbalancer exposes the service using the system loadbalancer" + schema: + type: string + default: "Simple" + enum: + - value: "Simple" + description: "Simple" + - value: "ClusterIP" + description: "ClusterIP" + - value: "NodePort" + description: "NodePort (Advanced)" + - value: "LoadBalancer" + description: "LoadBalancer (Advanced)" + - variable: loadBalancerIP + label: "LoadBalancer IP" + description: "LoadBalancerIP" + schema: + show_if: [["type", "=", "LoadBalancer"]] + type: string + default: "" + - variable: externalIPs + label: "External IP's" + description: "External IP's" + schema: + show_if: [["type", "=", "LoadBalancer"]] + type: list + default: [] + items: + - variable: externalIP + label: "External IP" + schema: + type: string + - variable: ipFamilyPolicy + label: "IP Family Policy" + description: "(Advanced) Specify the ip policy" + schema: + show_if: [["type", "!=", "Simple"]] + type: string + default: "SingleStack" + enum: + - value: "SingleStack" + description: "SingleStack" + - value: "PreferDualStack" + description: "PreferDualStack" + - value: "RequireDualStack" + description: "RequireDualStack" + - variable: ipFamilies + label: "(advanced) IP families" + description: "(advanced) The ip families that should be used" + schema: + show_if: [["type", "!=", "Simple"]] + type: list + default: [] + items: + - variable: ipFamily + label: "IP family" + schema: + type: string + - variable: ports + label: "Service's Port(s) Configuration" + schema: + additional_attrs: true + type: dict + attrs: + - variable: main + label: "Main Service Port Configuration" + schema: + additional_attrs: true + type: dict + attrs: + - variable: port + label: "Port" + description: "This port exposes the container port on the service" + schema: + type: int + default: 10014 + required: true + - variable: advanced + label: "Show Advanced settings" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: protocol + label: "Port Type" + schema: + type: string + default: "HTTP" + enum: + - value: HTTP + description: "HTTP" + - value: "HTTPS" + description: "HTTPS" + - value: TCP + description: "TCP" + - value: "UDP" + description: "UDP" + - variable: nodePort + label: "Node Port (Optional)" + description: "This port gets exposed to the node. Only considered when service type is NodePort, Simple or LoadBalancer" + schema: + type: int + min: 9000 + max: 65535 + - variable: targetPort + label: "Target Port" + description: "The internal(!) port on the container the Application runs on" + schema: + type: int + default: 80 + + - variable: serviceexpert + group: "Networking and Services" + label: "Show Expert Config" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: hostNetwork + group: "Networking and Services" + label: "Host-Networking (Complicated)" + schema: + type: boolean + default: false + + - variable: externalInterfaces + description: "Add External Interfaces" + label: "Add external Interfaces" + group: "Networking" + schema: + type: list + items: + - variable: interfaceConfiguration + description: "Interface Configuration" + label: "Interface Configuration" + schema: + type: dict + $ref: + - "normalize/interfaceConfiguration" + attrs: + - variable: hostInterface + description: "Please specify host interface" + label: "Host Interface" + schema: + type: string + required: true + $ref: + - "definitions/interface" + - variable: ipam + description: "Define how IP Address will be managed" + label: "IP Address Management" + schema: + type: dict + required: true + attrs: + - variable: type + description: "Specify type for IPAM" + label: "IPAM Type" + schema: + type: string + required: true + enum: + - value: "dhcp" + description: "Use DHCP" + - value: "static" + description: "Use static IP" + show_subquestions_if: "static" + subquestions: + - variable: staticIPConfigurations + label: "Static IP Addresses" + schema: + type: list + items: + - variable: staticIP + label: "Static IP" + schema: + type: ipaddr + cidr: true + - variable: staticRoutes + label: "Static Routes" + schema: + type: list + items: + - variable: staticRouteConfiguration + label: "Static Route Configuration" + schema: + additional_attrs: true + type: dict + attrs: + - variable: destination + label: "Destination" + schema: + type: ipaddr + cidr: true + required: true + - variable: gateway + label: "Gateway" + schema: + type: ipaddr + cidr: false + required: true + + - variable: dnsPolicy + group: "Networking and Services" + label: "dnsPolicy" + schema: + type: string + default: "" + enum: + - value: "" + description: "Default" + - value: "ClusterFirst" + description: "ClusterFirst" + - value: "ClusterFirstWithHostNet" + description: "ClusterFirstWithHostNet" + - value: "None" + description: "None" + + - variable: dnsConfig + label: "DNS Configuration" + group: "Networking and Services" + description: "Specify custom DNS configuration which will be applied to the pod" + schema: + additional_attrs: true + type: dict + attrs: + - variable: nameservers + label: "Nameservers" + schema: + default: [] + type: list + items: + - variable: nameserver + label: "Nameserver" + schema: + type: string + - variable: options + label: "options" + schema: + default: [] + type: list + items: + - variable: option + label: "Option Entry" + schema: + additional_attrs: true + type: dict + attrs: + - variable: name + label: "Name" + schema: + type: string + - variable: value + label: "Value" + schema: + type: string + - variable: searches + label: "Searches" + schema: + default: [] + type: list + items: + - variable: search + label: "Search Entry" + schema: + type: string + + - variable: serviceList + label: "Add Manual Custom Services" + group: "Networking and Services" + schema: + type: list + default: [] + items: + - variable: serviceListEntry + label: "Custom Service" + schema: + additional_attrs: true + type: dict + attrs: + - variable: enabled + label: "Enable the service" + schema: + type: boolean + default: true + hidden: true + - variable: name + label: "Name" + schema: + type: string + default: "" + - variable: type + label: "Service Type" + description: "ClusterIP's are only internally available, nodePorts expose the container to the host node System, Loadbalancer exposes the service using the system loadbalancer" + schema: + type: string + default: "Simple" + enum: + - value: "Simple" + description: "Simple" + - value: "NodePort" + description: "NodePort" + - value: "ClusterIP" + description: "ClusterIP" + - value: "LoadBalancer" + description: "LoadBalancer" + - variable: loadBalancerIP + label: "LoadBalancer IP" + description: "LoadBalancerIP" + schema: + show_if: [["type", "=", "LoadBalancer"]] + type: string + default: "" + - variable: externalIPs + label: "External IP's" + description: "External IP's" + schema: + show_if: [["type", "=", "LoadBalancer"]] + type: list + default: [] + items: + - variable: externalIP + label: "External IP" + schema: + type: string + - variable: portsList + label: "Additional Service Ports" + schema: + type: list + default: [] + items: + - variable: portsListEntry + label: "Custom ports" + schema: + additional_attrs: true + type: dict + attrs: + - variable: enabled + label: "Enable the port" + schema: + type: boolean + default: true + hidden: true + - variable: name + label: "Port Name" + schema: + type: string + default: "" + - variable: protocol + label: "Port Type" + schema: + type: string + default: "TCP" + enum: + - value: HTTP + description: "HTTP" + - value: "HTTPS" + description: "HTTPS" + - value: TCP + description: "TCP" + - value: "UDP" + description: "UDP" + - variable: targetPort + label: "Target Port" + description: "This port exposes the container port on the service" + schema: + type: int + required: true + - variable: port + label: "Container Port" + schema: + type: int + required: true + - variable: nodePort + label: "Node Port (Optional)" + description: "This port gets exposed to the node. Only considered when service type is NodePort" + schema: + type: int + min: 9000 + max: 65535 + + - variable: persistence + label: "Integrated Persistent Storage" + description: "Integrated Persistent Storage" + group: "Storage and Persistence" + schema: + additional_attrs: true + type: dict + attrs: + - variable: config + label: "App Config Storage" + description: "Stores the Application Configuration." + schema: + additional_attrs: true + type: dict + attrs: + - variable: type + label: "Type of Storage" + description: "Sets the persistence type, Anything other than PVC could break rollback!" + schema: + type: string + default: "simplePVC" + enum: + - value: "simplePVC" + description: "PVC (simple)" + - value: "simpleHP" + description: "HostPath (simple)" + - value: "emptyDir" + description: "emptyDir" + - value: "pvc" + description: "pvc" + - value: "hostPath" + description: "hostPath" + - variable: setPermissionsSimple + label: "Automatic Permissions" + description: "Automatically set permissions on install" + schema: + show_if: [["type", "=", "simpleHP"]] + type: boolean + default: true + - variable: setPermissions + label: "Automatic Permissions" + description: "Automatically set permissions on install" + schema: + show_if: [["type", "=", "hostPath"]] + type: boolean + default: true + - variable: readOnly + label: "readOnly" + schema: + type: boolean + default: false + - variable: hostPathSimple + label: "hostPath" + description: "Path inside the container the storage is mounted" + schema: + show_if: [["type", "=", "simpleHP"]] + type: hostpath + - variable: hostPath + label: "hostPath" + description: "Path inside the container the storage is mounted" + schema: + show_if: [["type", "=", "hostPath"]] + type: hostpath + - variable: medium + label: "EmptyDir Medium" + schema: + show_if: [["type", "=", "emptyDir"]] + type: string + default: "" + enum: + - value: "" + description: "Default" + - value: "Memory" + description: "Memory" + - variable: size + label: "Size quotum of storage" + schema: + show_if: [["type", "=", "pvc"]] + type: string + default: "999Gi" + - variable: hostPathType + label: "(Advanced) hostPath Type" + schema: + show_if: [["type", "=", "hostPath"]] + type: string + default: "" + enum: + - value: "" + description: "Default" + - value: "DirectoryOrCreate" + description: "DirectoryOrCreate" + - value: "Directory" + description: "Directory" + - value: "FileOrCreate" + description: "FileOrCreate" + - value: "File" + description: "File" + - value: "Socket" + description: "Socket" + - value: "CharDevice" + description: "CharDevice" + - value: "BlockDevice" + description: "BlockDevice" + - variable: storageClass + label: "(Advanced) storageClass" + description: "Warning: Anything other than SCALE-ZFS or empty will break rollback!" + schema: + show_if: [["type", "=", "pvc"]] + type: string + default: "SCALE-ZFS" + - variable: accessMode + label: "(Advanced) Access Mode" + description: "Allow or disallow multiple PVC's writhing to the same PV" + schema: + show_if: [["type", "=", "pvc"]] + type: string + default: "ReadWriteOnce" + enum: + - value: "ReadWriteOnce" + description: "ReadWriteOnce" + - value: "ReadOnlyMany" + description: "ReadOnlyMany" + - value: "ReadWriteMany" + description: "ReadWriteMany" + - variable: advanced + label: "Show Advanced Options" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: labelsList + label: "Labels" + schema: + type: list + default: [] + items: + - variable: labelItem + label: "Label" + schema: + additional_attrs: true + type: dict + attrs: + - variable: name + label: "Name" + schema: + type: string + - variable: value + label: "Value" + schema: + type: string + - variable: annotationsList + label: "Annotations" + schema: + type: list + default: [] + items: + - variable: annotationItem + label: "Label" + schema: + additional_attrs: true + type: dict + attrs: + - variable: name + label: "Name" + schema: + type: string + - variable: value + label: "Value" + schema: + type: string + - variable: persistenceList + label: "Additional app storage" + group: "Storage and Persistence" + schema: + type: list + default: [] + items: + - variable: persistenceListEntry + label: "Custom Storage" + schema: + additional_attrs: true + type: dict + attrs: + - variable: enabled + label: "Enable the storage" + schema: + type: boolean + default: true + hidden: true + - variable: name + label: "Name (optional)" + description: "Not required, please set to config when mounting /config or temp when mounting /tmp" + schema: + type: string + - variable: type + label: "Type of Storage" + description: "Sets the persistence type, Anything other than PVC could break rollback!" + schema: + type: string + default: "simpleHP" + enum: + - value: "simplePVC" + description: "PVC (simple)" + - value: "simpleHP" + description: "HostPath (simple)" + - value: "emptyDir" + description: "emptyDir" + - value: "pvc" + description: "pvc" + - value: "hostPath" + description: "hostPath" + - variable: setPermissionsSimple + label: "Automatic Permissions" + description: "Automatically set permissions on install" + schema: + show_if: [["type", "=", "simpleHP"]] + type: boolean + default: true + - variable: setPermissions + label: "Automatic Permissions" + description: "Automatically set permissions on install" + schema: + show_if: [["type", "=", "hostPath"]] + type: boolean + default: true + - variable: readOnly + label: "readOnly" + schema: + type: boolean + default: false + - variable: hostPathSimple + label: "hostPath" + description: "Path inside the container the storage is mounted" + schema: + show_if: [["type", "=", "simpleHP"]] + type: hostpath + - variable: hostPath + label: "hostPath" + description: "Path inside the container the storage is mounted" + schema: + show_if: [["type", "=", "hostPath"]] + type: hostpath + - variable: mountPath + label: "mountPath" + description: "Path inside the container the storage is mounted" + schema: + type: string + default: "" + required: true + valid_chars: '^\/([a-zA-Z0-9._-]+(\s?[a-zA-Z0-9._-]+|\/?))+$' + - variable: medium + label: "EmptyDir Medium" + schema: + show_if: [["type", "=", "emptyDir"]] + type: string + default: "" + enum: + - value: "" + description: "Default" + - value: "Memory" + description: "Memory" + - variable: size + label: "Size quotum of storage" + schema: + show_if: [["type", "=", "pvc"]] + type: string + default: "999Gi" + - variable: hostPathType + label: "(Advanced) hostPath Type" + schema: + show_if: [["type", "=", "hostPath"]] + type: string + default: "" + enum: + - value: "" + description: "Default" + - value: "DirectoryOrCreate" + description: "DirectoryOrCreate" + - value: "Directory" + description: "Directory" + - value: "FileOrCreate" + description: "FileOrCreate" + - value: "File" + description: "File" + - value: "Socket" + description: "Socket" + - value: "CharDevice" + description: "CharDevice" + - value: "BlockDevice" + description: "BlockDevice" + - variable: storageClass + label: "(Advanced) storageClass" + description: "Warning: Anything other than SCALE-ZFS or empty will break rollback!" + schema: + show_if: [["type", "=", "pvc"]] + type: string + default: "SCALE-ZFS" + - variable: accessMode + label: "(Advanced) Access Mode" + description: "Allow or disallow multiple PVC's writhing to the same PV" + schema: + show_if: [["type", "=", "pvc"]] + type: string + default: "ReadWriteOnce" + enum: + - value: "ReadWriteOnce" + description: "ReadWriteOnce" + - value: "ReadOnlyMany" + description: "ReadOnlyMany" + - value: "ReadWriteMany" + description: "ReadWriteMany" + - variable: advanced + label: "Show Advanced Options" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: labelsList + label: "Labels" + schema: + type: list + default: [] + items: + - variable: labelItem + label: "Label" + schema: + additional_attrs: true + type: dict + attrs: + - variable: name + label: "Name" + schema: + type: string + - variable: value + label: "Value" + schema: + type: string + - variable: annotationsList + label: "Annotations" + schema: + type: list + default: [] + items: + - variable: annotationItem + label: "Label" + schema: + additional_attrs: true + type: dict + attrs: + - variable: name + label: "Name" + schema: + type: string + - variable: value + label: "Value" + schema: + type: string + + - variable: ingress + label: "" + group: "Ingress" + schema: + additional_attrs: true + type: dict + attrs: + - variable: main + label: "Main Ingress" + schema: + additional_attrs: true + type: dict + attrs: + - variable: enabled + label: "Enable Ingress" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: hosts + label: "Hosts" + schema: + type: list + default: [] + items: + - variable: hostEntry + label: "Host" + schema: + additional_attrs: true + type: dict + attrs: + - variable: host + label: "HostName" + schema: + type: string + default: "" + required: true + - variable: paths + label: "Paths" + schema: + type: list + default: [] + items: + - variable: pathEntry + label: "Host" + schema: + additional_attrs: true + type: dict + attrs: + - variable: path + label: "path" + schema: + type: string + required: true + default: "/" + - variable: pathType + label: "pathType" + schema: + type: string + required: true + default: "Prefix" + + - variable: tls + label: "TLS-Settings" + schema: + type: list + default: [] + items: + - variable: tlsEntry + label: "Host" + schema: + additional_attrs: true + type: dict + attrs: + - variable: hosts + label: "Certificate Hosts" + schema: + type: list + default: [] + items: + - variable: host + label: "Host" + schema: + type: string + default: "" + required: true + - variable: scaleCert + label: "Select TrueNAS SCALE Certificate" + schema: + type: int + $ref: + - "definitions/certificate" + + - variable: entrypoint + label: "(Advanced) Traefik Entrypoint" + description: "Entrypoint used by Traefik when using Traefik as Ingress Provider" + schema: + type: string + default: "websecure" + required: true + - variable: middlewares + label: "Traefik Middlewares" + description: "Add previously created Traefik Middlewares to this Ingress" + schema: + type: list + default: [] + items: + - variable: name + label: "Name" + schema: + type: string + default: "" + required: true + + - variable: expert + label: "Show Expert Configuration Options" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: enableFixedMiddlewares + description: "These middlewares enforce a number of best practices." + label: "Enable Default Middlewares" + schema: + type: boolean + default: true + - variable: ingressClassName + label: "IngressClass Name" + schema: + type: string + default: "" + - variable: labelsList + label: "Labels" + schema: + type: list + default: [] + items: + - variable: labelItem + label: "Label" + schema: + additional_attrs: true + type: dict + attrs: + - variable: name + label: "Name" + schema: + type: string + - variable: value + label: "Value" + schema: + type: string + - variable: annotationsList + label: "Annotations" + schema: + type: list + default: [] + items: + - variable: annotationItem + label: "Label" + schema: + additional_attrs: true + type: dict + attrs: + - variable: name + label: "Name" + schema: + type: string + - variable: value + label: "Value" + schema: + type: string + + - variable: ingressList + label: "Add Manual Custom Ingresses" + group: "Ingress" + schema: + type: list + default: [] + items: + - variable: ingressListEntry + label: "Custom Ingress" + schema: + additional_attrs: true + type: dict + attrs: + - variable: enabled + label: "Enable Ingress" + schema: + type: boolean + default: true + hidden: true + - variable: name + label: "Name" + schema: + type: string + default: "" + - variable: ingressClassName + label: "IngressClass Name" + schema: + type: string + default: "" + - variable: labelsList + label: "Labels" + schema: + type: list + default: [] + items: + - variable: labelItem + label: "Label" + schema: + additional_attrs: true + type: dict + attrs: + - variable: name + label: "Name" + schema: + type: string + - variable: value + label: "Value" + schema: + type: string + - variable: annotationsList + label: "Annotations" + schema: + type: list + default: [] + items: + - variable: annotationItem + label: "Label" + schema: + additional_attrs: true + type: dict + attrs: + - variable: name + label: "Name" + schema: + type: string + - variable: value + label: "Value" + schema: + type: string + - variable: hosts + label: "Hosts" + schema: + type: list + default: [] + items: + - variable: hostEntry + label: "Host" + schema: + additional_attrs: true + type: dict + attrs: + - variable: host + label: "HostName" + schema: + type: string + default: "" + required: true + - variable: paths + label: "Paths" + schema: + type: list + default: [] + items: + - variable: pathEntry + label: "Host" + schema: + additional_attrs: true + type: dict + attrs: + - variable: path + label: "path" + schema: + type: string + required: true + default: "/" + - variable: pathType + label: "pathType" + schema: + type: string + required: true + default: "Prefix" + - variable: service + label: "Linked Service" + schema: + additional_attrs: true + type: dict + attrs: + - variable: name + label: "Service Name" + schema: + type: string + default: "" + - variable: port + label: "Service Port" + schema: + type: int + - variable: tls + label: "TLS-Settings" + schema: + type: list + default: [] + items: + - variable: tlsEntry + label: "Host" + schema: + additional_attrs: true + type: dict + attrs: + - variable: hosts + label: "Certificate Hosts" + schema: + type: list + default: [] + items: + - variable: host + label: "Host" + schema: + type: string + default: "" + required: true + - variable: scaleCert + label: "Select TrueNAS SCALE Certificate" + schema: + type: int + $ref: + - "definitions/certificate" + - variable: entrypoint + label: "Traefik Entrypoint" + description: "Entrypoint used by Traefik when using Traefik as Ingress Provider" + schema: + type: string + default: "websecure" + required: true + - variable: middlewares + label: "Traefik Middlewares" + description: "Add previously created Traefik Middlewares to this Ingress" + schema: + type: list + default: [] + items: + - variable: name + label: "Name" + schema: + type: string + default: "" + required: true + - variable: security + label: "Container Security Settings" + group: "Security and Permissions" + schema: + type: dict + additional_attrs: true + attrs: + - variable: editsecurity + label: "Change PUID / UMASK values" + description: "By enabling this you override default set values." + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: PUID + label: "Process User ID - PUID" + description: "When supported by the container, this sets the User ID running the Application Process. Not supported by all Apps" + schema: + type: int + default: 568 + - variable: UMASK + label: "UMASK" + description: "When supported by the container, this sets the UMASK for tha App. Not supported by all Apps" + schema: + type: string + default: "002" + + - variable: advancedSecurity + label: "Show Advanced Security Settings" + group: "Security and Permissions" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: securityContext + label: "Security Context" + schema: + additional_attrs: true + type: dict + attrs: + - variable: privileged + label: "Privileged mode" + schema: + type: boolean + default: false + - variable: readOnlyRootFilesystem + label: "ReadOnly Root Filesystem" + schema: + type: boolean + default: false + - variable: allowPrivilegeEscalation + label: "Allow Privilege Escalation" + schema: + type: boolean + default: false + - variable: runAsNonRoot + label: "runAsNonRoot" + schema: + type: boolean + default: false + - variable: capabilities + label: "Capabilities" + schema: + additional_attrs: true + type: dict + attrs: + - variable: drop + label: "Drop Capability" + schema: + type: list + default: [] + items: + - variable: dropEntry + label: "" + schema: + type: string + - variable: add + label: "Add Capability" + schema: + type: list + default: [] + items: + - variable: addEntry + label: "" + schema: + type: string + + - variable: podSecurityContext + group: "Security and Permissions" + label: "Pod Security Context" + schema: + additional_attrs: true + type: dict + attrs: + - variable: runAsUser + label: "runAsUser" + description: "The UserID of the user running the application" + schema: + type: int + default: 0 + - variable: runAsGroup + label: "runAsGroup" + description: The groupID this App of the user running the application" + schema: + type: int + default: 0 + - variable: fsGroup + label: "fsGroup" + description: "The group that should own ALL storage." + schema: + type: int + default: 568 + - variable: fsGroupChangePolicy + label: "When should we take ownership?" + schema: + type: string + default: "OnRootMismatch" + enum: + - value: "OnRootMismatch" + description: "OnRootMismatch" + - value: "Always" + description: "Always" + - variable: supplementalGroups + label: "supplemental Groups" + schema: + type: list + default: [] + items: + - variable: supplementalGroupsEntry + label: "supplemental Group" + schema: + type: int + + + - variable: advancedresources + label: "Set Custom Resource Limits/Requests (Advanced)" + group: "Resources and Devices" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: resources + label: "" + schema: + additional_attrs: true + type: dict + attrs: + - variable: limits + label: "Advanced Limit Resource Consumption" + schema: + additional_attrs: true + type: dict + attrs: + - variable: cpu + label: "CPU" + description: "1000m means 1 hyperthread. Detailed info: https://truecharts.org/manual/indepth/validation/" + schema: + type: string + default: "4000m" + valid_chars: '^(?!^0(\.0|m|)$)([0-9]+)(\.[0-9]|m?)$' + - variable: memory + label: "RAM" + description: "1Gi means 1 Gibibyte RAM. Detailed info: https://truecharts.org/manual/indepth/validation/" + schema: + type: string + default: "8Gi" + valid_chars: '^(?!^0(e[0-9]|[EPTGMK]i?|)$)([0-9]+)(|[EPTGMK]i?|e[0-9]+)$' + - variable: requests + label: "Minimum Resources Required (request)" + schema: + additional_attrs: true + type: dict + attrs: + - variable: cpu + label: "CPU" + description: "1000m means 1 hyperthread. Detailed info: https://truecharts.org/manual/indepth/validation/" + schema: + type: string + default: "10m" + valid_chars: '^(?!^0(\.0|m|)$)([0-9]+)(\.[0-9]|m?)$' + - variable: memory + label: "RAM" + description: "1Gi means 1 Gibibyte RAM. Detailed info: https://truecharts.org/manual/indepth/validation/" + schema: + type: string + default: "50Mi" + valid_chars: '^(?!^0(e[0-9]|[EPTGMK]i?|)$)([0-9]+)(|[EPTGMK]i?|e[0-9]+)$' + + - variable: deviceList + label: "Mount USB devices" + group: "Resources and Devices" + schema: + type: list + default: [] + items: + - variable: deviceListEntry + label: "Device" + schema: + additional_attrs: true + type: dict + attrs: + - variable: enabled + label: "Enable the storage" + schema: + type: boolean + default: true + - variable: type + label: "(Advanced) Type of Storage" + description: "Sets the persistence type" + schema: + type: string + default: "hostPath" + hidden: true + - variable: readOnly + label: "readOnly" + schema: + type: boolean + default: false + - variable: hostPath + label: "Host Device Path" + description: "Path to the device on the host system" + schema: + type: path + - variable: mountPath + label: "Container Device Path" + description: "Path inside the container the device is mounted" + schema: + type: string + default: "/dev/ttyACM0" + + # Specify GPU configuration + - variable: scaleGPU + label: "GPU Configuration" + group: "Resources and Devices" + schema: + type: dict + $ref: + - "definitions/gpuConfiguration" + attrs: [] + + - variable: autoscaling + group: "Advanced" + label: "(Advanced) Horizontal Pod Autoscaler" + schema: + additional_attrs: true + type: dict + attrs: + - variable: enabled + label: "enabled" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: target + label: "Target" + description: "deployment name, defaults to main deployment" + schema: + type: string + default: "" + - variable: minReplicas + label: "Minimum Replicas" + schema: + type: int + default: 1 + - variable: maxReplicas + label: "Maximum Replicas" + schema: + type: int + default: 5 + - variable: targetCPUUtilizationPercentage + label: "Target CPU Utilization Percentage" + schema: + type: int + default: 80 + - variable: targetMemoryUtilizationPercentage + label: "Target Memory Utilization Percentage" + schema: + type: int + default: 80 + - variable: networkPolicy + group: "Advanced" + label: "(Advanced) Network Policy" + schema: + additional_attrs: true + type: dict + attrs: + - variable: enabled + label: "enabled" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: policyType + label: "Policy Type" + schema: + type: string + default: "" + enum: + - value: "" + description: "Default" + - value: "ingress" + description: "Ingress" + - value: "egress" + description: "Egress" + - value: "ingress-egress" + description: "Ingress and Egress" + - variable: egress + label: "Egress" + schema: + type: list + default: [] + items: + - variable: egressEntry + label: "" + schema: + additional_attrs: true + type: dict + attrs: + - variable: to + label: "To" + schema: + type: list + default: [] + items: + - variable: toEntry + label: "" + schema: + additional_attrs: true + type: dict + attrs: + - variable: ipBlock + label: "ipBlock" + schema: + additional_attrs: true + type: dict + attrs: + - variable: cidr + label: "cidr" + schema: + type: string + default: "" + - variable: except + label: "except" + schema: + type: list + default: [] + items: + - variable: exceptint + label: "" + schema: + type: int + - variable: namespaceSelector + label: "namespaceSelector" + schema: + additional_attrs: true + type: dict + attrs: + - variable: matchExpressions + label: "matchExpressions" + schema: + type: list + default: [] + items: + - variable: expressionEntry + label: "" + schema: + additional_attrs: true + type: dict + attrs: + - variable: key + label: "Key" + schema: + type: string + - variable: operator + label: "operator" + schema: + type: string + default: "TCP" + enum: + - value: "In" + description: "In" + - value: "NotIn" + description: "NotIn" + - value: "Exists " + description: "Exists " + - value: "DoesNotExist " + description: "DoesNotExist " + - variable: values + label: "values" + schema: + type: list + default: [] + items: + - variable: value + label: "" + schema: + type: string + - variable: podSelector + label: "" + schema: + additional_attrs: true + type: dict + attrs: + - variable: matchExpressions + label: "matchExpressions" + schema: + type: list + default: [] + items: + - variable: expressionEntry + label: "" + schema: + additional_attrs: true + type: dict + attrs: + - variable: key + label: "Key" + schema: + type: string + - variable: operator + label: "operator" + schema: + type: string + default: "TCP" + enum: + - value: "In" + description: "In" + - value: "NotIn" + description: "NotIn" + - value: "Exists " + description: "Exists " + - value: "DoesNotExist " + description: "DoesNotExist " + - variable: values + label: "values" + schema: + type: list + default: [] + items: + - variable: value + label: "" + schema: + type: string + - variable: ports + label: "Ports" + schema: + type: list + default: [] + items: + - variable: portsEntry + label: "" + schema: + additional_attrs: true + type: dict + attrs: + - variable: port + label: "port" + schema: + type: int + - variable: endPort + label: "port" + schema: + type: int + - variable: protocol + label: "Protocol" + schema: + type: string + default: "TCP" + enum: + - value: "TCP" + description: "TCP" + - value: "UDP" + description: "UDP" + - value: "SCTP" + description: "SCTP" + - variable: ingress + label: "Ingress" + schema: + type: list + default: [] + items: + - variable: ingressEntry + label: "" + schema: + additional_attrs: true + type: dict + attrs: + - variable: from + label: "From" + schema: + type: list + default: [] + items: + - variable: fromEntry + label: "" + schema: + additional_attrs: true + type: dict + attrs: + - variable: ipBlock + label: "ipBlock" + schema: + additional_attrs: true + type: dict + attrs: + - variable: cidr + label: "cidr" + schema: + type: string + default: "" + - variable: except + label: "except" + schema: + type: list + default: [] + items: + - variable: exceptint + label: "" + schema: + type: int + - variable: namespaceSelector + label: "namespaceSelector" + schema: + additional_attrs: true + type: dict + attrs: + - variable: matchExpressions + label: "matchExpressions" + schema: + type: list + default: [] + items: + - variable: expressionEntry + label: "" + schema: + additional_attrs: true + type: dict + attrs: + - variable: key + label: "Key" + schema: + type: string + - variable: operator + label: "operator" + schema: + type: string + default: "TCP" + enum: + - value: "In" + description: "In" + - value: "NotIn" + description: "NotIn" + - value: "Exists " + description: "Exists " + - value: "DoesNotExist " + description: "DoesNotExist " + - variable: values + label: "values" + schema: + type: list + default: [] + items: + - variable: value + label: "" + schema: + type: string + - variable: podSelector + label: "" + schema: + additional_attrs: true + type: dict + attrs: + - variable: matchExpressions + label: "matchExpressions" + schema: + type: list + default: [] + items: + - variable: expressionEntry + label: "" + schema: + additional_attrs: true + type: dict + attrs: + - variable: key + label: "Key" + schema: + type: string + - variable: operator + label: "operator" + schema: + type: string + default: "TCP" + enum: + - value: "In" + description: "In" + - value: "NotIn" + description: "NotIn" + - value: "Exists " + description: "Exists " + - value: "DoesNotExist " + description: "DoesNotExist " + - variable: values + label: "values" + schema: + type: list + default: [] + items: + - variable: value + label: "" + schema: + type: string + - variable: ports + label: "Ports" + schema: + type: list + default: [] + items: + - variable: portsEntry + label: "" + schema: + additional_attrs: true + type: dict + attrs: + - variable: port + label: "port" + schema: + type: int + - variable: endPort + label: "port" + schema: + type: int + - variable: protocol + label: "Protocol" + schema: + type: string + default: "TCP" + enum: + - value: "TCP" + description: "TCP" + - value: "UDP" + description: "UDP" + - value: "SCTP" + description: "SCTP" + + + - variable: addons + group: "Addons" + label: "" + schema: + additional_attrs: true + type: dict + attrs: + - variable: vpn + label: "VPN" + schema: + additional_attrs: true + type: dict + attrs: + - variable: type + label: "Type" + schema: + type: string + default: "disabled" + enum: + - value: "disabled" + description: "disabled" + - value: "openvpn" + description: "OpenVPN" + - value: "wireguard" + description: "Wireguard" + - variable: openvpn + label: "OpenVPN Settings" + schema: + type: dict + show_if: [["type", "=", "openvpn"]] + attrs: + - variable: username + label: "authentication username" + description: "authentication username, optional" + schema: + type: string + default: "" + - variable: password + label: "authentication password" + description: "authentication credentials" + schema: + type: string + default: "" + required: true + - variable: killSwitch + label: "Enable killswitch" + schema: + type: boolean + show_if: [["type", "!=", "disabled"]] + default: true + - variable: excludedNetworks_IPv4 + label: "Killswitch Excluded IPv4 networks" + description: "list of killswitch excluded ipv4 addresses" + schema: + type: list + show_if: [["type", "!=", "disabled"]] + default: [] + items: + - variable: networkv4 + label: "IPv4 Network" + schema: + type: string + required: true + - variable: excludedNetworks_IPv6 + label: "Killswitch Excluded IPv6 networks" + description: "list of killswitch excluded ipv4 addresses" + schema: + type: list + show_if: [["type", "!=", "disabled"]] + default: [] + items: + - variable: networkv6 + label: "IPv6 Network" + schema: + type: string + required: true + + - variable: configFile + label: "VPN Config File Location" + schema: + type: dict + show_if: [["type", "!=", "disabled"]] + attrs: + - variable: enabled + label: "enabled" + schema: + type: boolean + default: true + hidden: true + - variable: type + label: "type" + schema: + type: string + default: "hostPath" + hidden: true + - variable: hostPathType + label: "hostPathType" + schema: + type: string + default: "File" + hidden: true + - variable: noMount + label: "noMount" + schema: + type: boolean + default: true + hidden: true + - variable: hostPath + label: "Full path to file" + description: "path to your local VPN config file for example: /mnt/tank/vpn.conf or /mnt/tank/vpn.ovpn" + schema: + type: string + default: "" + required: true + - variable: envList + label: "VPN environment Variables" + schema: + type: list + show_if: [["type", "!=", "disabled"]] + default: [] + items: + - variable: envItem + label: "Environment Variable" + schema: + additional_attrs: true + type: dict + attrs: + - variable: name + label: "Name" + schema: + type: string + required: true + - variable: value + label: "Value" + schema: + type: string + required: true + + - variable: codeserver + label: "Codeserver" + schema: + additional_attrs: true + type: dict + attrs: + - variable: enabled + label: "enabled" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: git + label: "Git Settings" + schema: + additional_attrs: true + type: dict + attrs: + - variable: deployKey + description: "Raw SSH private key" + label: "deployKey" + schema: + type: string + - variable: deployKeyBase64 + description: "Base64-encoded SSH private key. When both variables are set, the raw SSH key takes precedence" + label: "deployKeyBase64" + schema: + type: string + - variable: service + label: "" + schema: + additional_attrs: true + type: dict + attrs: + - variable: type + label: "Service Type" + description: "ClusterIP's are only internally available, nodePorts expose the container to the host node System, Loadbalancer exposes the service using the system loadbalancer" + schema: + type: string + default: "NodePort" + enum: + - value: "NodePort" + description: "NodePort" + - value: "ClusterIP" + description: "ClusterIP" + - value: "LoadBalancer" + description: "LoadBalancer" + - variable: loadBalancerIP + label: "LoadBalancer IP" + description: "LoadBalancerIP" + schema: + show_if: [["type", "=", "LoadBalancer"]] + type: string + default: "" + - variable: externalIPs + label: "External IP's" + description: "External IP's" + schema: + show_if: [["type", "=", "LoadBalancer"]] + type: list + default: [] + items: + - variable: externalIP + label: "External IP" + schema: + type: string + - variable: ports + label: "" + schema: + additional_attrs: true + type: dict + attrs: + - variable: codeserver + label: "" + schema: + additional_attrs: true + type: dict + attrs: + - variable: nodePort + description: "leave empty to disable" + label: "nodePort" + schema: + type: int + default: 36107 + - variable: envList + label: "Codeserver environment Variables" + schema: + type: list + show_if: [["type", "!=", "disabled"]] + default: [] + items: + - variable: envItem + label: "Environment Variable" + schema: + additional_attrs: true + type: dict + attrs: + - variable: name + label: "Name" + schema: + type: string + required: true + - variable: value + label: "Value" + schema: + type: string + required: true + + + - variable: promtail + label: "Promtail" + schema: + additional_attrs: true + type: dict + attrs: + - variable: enabled + label: "enabled" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: loki + label: "Loki URL" + schema: + type: string + required: true + - variable: logs + label: "Log Paths" + schema: + additional_attrs: true + type: dict + attrs: + - variable: name + label: "Name" + schema: + type: string + required: true + - variable: path + label: "Path" + schema: + type: string + required: true + - variable: args + label: "Promtail ecommand line arguments" + schema: + type: list + show_if: [["type", "!=", "disabled"]] + default: [] + items: + - variable: arg + label: "Arg" + schema: + type: string + required: true + - variable: envList + label: "Promtail environment Variables" + schema: + type: list + show_if: [["type", "!=", "disabled"]] + default: [] + items: + - variable: envItem + label: "Environment Variable" + schema: + additional_attrs: true + type: dict + attrs: + - variable: name + label: "Name" + schema: + type: string + required: true + - variable: value + label: "Value" + schema: + type: string + required: true + + + + + - variable: netshoot + label: "Netshoot" + schema: + additional_attrs: true + type: dict + attrs: + - variable: enabled + label: "enabled" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: envList + label: "Netshoot environment Variables" + schema: + type: list + show_if: [["type", "!=", "disabled"]] + default: [] + items: + - variable: envItem + label: "Environment Variable" + schema: + additional_attrs: true + type: dict + attrs: + - variable: name + label: "Name" + schema: + type: string + required: true + - variable: value + label: "Value" + schema: + type: string + required: true diff --git a/stable/heimdall/10.0.9/security.md b/stable/heimdall/10.0.9/security.md new file mode 100644 index 00000000000..a406b22791b --- /dev/null +++ b/stable/heimdall/10.0.9/security.md @@ -0,0 +1,79 @@ +--- +hide: + - toc +--- + +# Security Overview + + + +## Helm-Chart + +##### Scan Results + +#### Chart Object: heimdall/templates/common.yaml + + + +| Type | Misconfiguration ID | Check | Severity | Explaination | Links | +|:----------------|:------------------:|:-----------:|:------------------:|-----------------------------------------|-----------------------------------------| +| Kubernetes Security Check | KSV001 | Process can elevate its own privileges | MEDIUM |
Expand... A program inside the container can elevate its own privileges and run as root, which might give the program control over the container and node.

Container 'hostpatch' of Deployment 'RELEASE-NAME-heimdall' should set 'securityContext.allowPrivilegeEscalation' to false
|
Expand...https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted
https://avd.aquasec.com/appshield/ksv001
| +| Kubernetes Security Check | KSV003 | Default capabilities not dropped | LOW |
Expand... The container should drop all default capabilities and add only those that are needed for its execution.

Container 'RELEASE-NAME-heimdall' of Deployment 'RELEASE-NAME-heimdall' should add 'ALL' to 'securityContext.capabilities.drop'
|
Expand...https://kubesec.io/basics/containers-securitycontext-capabilities-drop-index-all/
https://avd.aquasec.com/appshield/ksv003
| +| Kubernetes Security Check | KSV003 | Default capabilities not dropped | LOW |
Expand... The container should drop all default capabilities and add only those that are needed for its execution.

Container 'hostpatch' of Deployment 'RELEASE-NAME-heimdall' should add 'ALL' to 'securityContext.capabilities.drop'
|
Expand...https://kubesec.io/basics/containers-securitycontext-capabilities-drop-index-all/
https://avd.aquasec.com/appshield/ksv003
| +| Kubernetes Security Check | KSV011 | CPU not limited | LOW |
Expand... Enforcing CPU limits prevents DoS via resource exhaustion.

Container 'hostpatch' of Deployment 'RELEASE-NAME-heimdall' should set 'resources.limits.cpu'
|
Expand...https://cloud.google.com/blog/products/containers-kubernetes/kubernetes-best-practices-resource-requests-and-limits
https://avd.aquasec.com/appshield/ksv011
| +| Kubernetes Security Check | KSV012 | Runs as root user | MEDIUM |
Expand... 'runAsNonRoot' forces the running image to run as a non-root user to ensure least privileges.

Container 'RELEASE-NAME-heimdall' of Deployment 'RELEASE-NAME-heimdall' should set 'securityContext.runAsNonRoot' to true
|
Expand...https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted
https://avd.aquasec.com/appshield/ksv012
| +| Kubernetes Security Check | KSV012 | Runs as root user | MEDIUM |
Expand... 'runAsNonRoot' forces the running image to run as a non-root user to ensure least privileges.

Container 'autopermissions' of Deployment 'RELEASE-NAME-heimdall' should set 'securityContext.runAsNonRoot' to true
|
Expand...https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted
https://avd.aquasec.com/appshield/ksv012
| +| Kubernetes Security Check | KSV012 | Runs as root user | MEDIUM |
Expand... 'runAsNonRoot' forces the running image to run as a non-root user to ensure least privileges.

Container 'hostpatch' of Deployment 'RELEASE-NAME-heimdall' should set 'securityContext.runAsNonRoot' to true
|
Expand...https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted
https://avd.aquasec.com/appshield/ksv012
| +| Kubernetes Security Check | KSV014 | Root file system is not read-only | LOW |
Expand... An immutable root file system prevents applications from writing to their local disk. This can limit intrusions, as attackers will not be able to tamper with the file system or write foreign executables to disk.

Container 'RELEASE-NAME-heimdall' of Deployment 'RELEASE-NAME-heimdall' should set 'securityContext.readOnlyRootFilesystem' to true
|
Expand...https://kubesec.io/basics/containers-securitycontext-readonlyrootfilesystem-true/
https://avd.aquasec.com/appshield/ksv014
| +| Kubernetes Security Check | KSV014 | Root file system is not read-only | LOW |
Expand... An immutable root file system prevents applications from writing to their local disk. This can limit intrusions, as attackers will not be able to tamper with the file system or write foreign executables to disk.

Container 'autopermissions' of Deployment 'RELEASE-NAME-heimdall' should set 'securityContext.readOnlyRootFilesystem' to true
|
Expand...https://kubesec.io/basics/containers-securitycontext-readonlyrootfilesystem-true/
https://avd.aquasec.com/appshield/ksv014
| +| Kubernetes Security Check | KSV014 | Root file system is not read-only | LOW |
Expand... An immutable root file system prevents applications from writing to their local disk. This can limit intrusions, as attackers will not be able to tamper with the file system or write foreign executables to disk.

Container 'hostpatch' of Deployment 'RELEASE-NAME-heimdall' should set 'securityContext.readOnlyRootFilesystem' to true
|
Expand...https://kubesec.io/basics/containers-securitycontext-readonlyrootfilesystem-true/
https://avd.aquasec.com/appshield/ksv014
| +| Kubernetes Security Check | KSV015 | CPU requests not specified | LOW |
Expand... When containers have resource requests specified, the scheduler can make better decisions about which nodes to place pods on, and how to deal with resource contention.

Container 'hostpatch' of Deployment 'RELEASE-NAME-heimdall' should set 'resources.requests.cpu'
|
Expand...https://cloud.google.com/blog/products/containers-kubernetes/kubernetes-best-practices-resource-requests-and-limits
https://avd.aquasec.com/appshield/ksv015
| +| Kubernetes Security Check | KSV016 | Memory requests not specified | LOW |
Expand... When containers have memory requests specified, the scheduler can make better decisions about which nodes to place pods on, and how to deal with resource contention.

Container 'hostpatch' of Deployment 'RELEASE-NAME-heimdall' should set 'resources.requests.memory'
|
Expand...https://kubesec.io/basics/containers-resources-limits-memory/
https://avd.aquasec.com/appshield/ksv016
| +| Kubernetes Security Check | KSV017 | Privileged container | HIGH |
Expand... Privileged containers share namespaces with the host system and do not offer any security. They should be used exclusively for system containers that require high privileges.

Container 'hostpatch' of Deployment 'RELEASE-NAME-heimdall' should set 'securityContext.privileged' to false
|
Expand...https://kubernetes.io/docs/concepts/security/pod-security-standards/#baseline
https://avd.aquasec.com/appshield/ksv017
| +| Kubernetes Security Check | KSV018 | Memory not limited | LOW |
Expand... Enforcing memory limits prevents DoS via resource exhaustion.

Container 'hostpatch' of Deployment 'RELEASE-NAME-heimdall' should set 'resources.limits.memory'
|
Expand...https://kubesec.io/basics/containers-resources-limits-memory/
https://avd.aquasec.com/appshield/ksv018
| +| Kubernetes Security Check | KSV020 | Runs with low user ID | MEDIUM |
Expand... Force the container to run with user ID > 10000 to avoid conflicts with the host’s user table.

Container 'RELEASE-NAME-heimdall' of Deployment 'RELEASE-NAME-heimdall' should set 'securityContext.runAsUser' > 10000
|
Expand...https://kubesec.io/basics/containers-securitycontext-runasuser/
https://avd.aquasec.com/appshield/ksv020
| +| Kubernetes Security Check | KSV020 | Runs with low user ID | MEDIUM |
Expand... Force the container to run with user ID > 10000 to avoid conflicts with the host’s user table.

Container 'autopermissions' of Deployment 'RELEASE-NAME-heimdall' should set 'securityContext.runAsUser' > 10000
|
Expand...https://kubesec.io/basics/containers-securitycontext-runasuser/
https://avd.aquasec.com/appshield/ksv020
| +| Kubernetes Security Check | KSV020 | Runs with low user ID | MEDIUM |
Expand... Force the container to run with user ID > 10000 to avoid conflicts with the host’s user table.

Container 'hostpatch' of Deployment 'RELEASE-NAME-heimdall' should set 'securityContext.runAsUser' > 10000
|
Expand...https://kubesec.io/basics/containers-securitycontext-runasuser/
https://avd.aquasec.com/appshield/ksv020
| +| Kubernetes Security Check | KSV021 | Runs with low group ID | MEDIUM |
Expand... Force the container to run with group ID > 10000 to avoid conflicts with the host’s user table.

Container 'RELEASE-NAME-heimdall' of Deployment 'RELEASE-NAME-heimdall' should set 'securityContext.runAsGroup' > 10000
|
Expand...https://kubesec.io/basics/containers-securitycontext-runasuser/
https://avd.aquasec.com/appshield/ksv021
| +| Kubernetes Security Check | KSV021 | Runs with low group ID | MEDIUM |
Expand... Force the container to run with group ID > 10000 to avoid conflicts with the host’s user table.

Container 'autopermissions' of Deployment 'RELEASE-NAME-heimdall' should set 'securityContext.runAsGroup' > 10000
|
Expand...https://kubesec.io/basics/containers-securitycontext-runasuser/
https://avd.aquasec.com/appshield/ksv021
| +| Kubernetes Security Check | KSV021 | Runs with low group ID | MEDIUM |
Expand... Force the container to run with group ID > 10000 to avoid conflicts with the host’s user table.

Container 'hostpatch' of Deployment 'RELEASE-NAME-heimdall' should set 'securityContext.runAsGroup' > 10000
|
Expand...https://kubesec.io/basics/containers-securitycontext-runasuser/
https://avd.aquasec.com/appshield/ksv021
| +| Kubernetes Security Check | KSV023 | hostPath volumes mounted | MEDIUM |
Expand... HostPath volumes must be forbidden.

Deployment 'RELEASE-NAME-heimdall' should not set 'spec.template.volumes.hostPath'
|
Expand...https://kubernetes.io/docs/concepts/security/pod-security-standards/#baseline
https://avd.aquasec.com/appshield/ksv023
| +| Kubernetes Security Check | KSV029 | A root primary or supplementary GID set | LOW |
Expand... Containers should be forbidden from running with a root primary or supplementary GID.

Deployment 'RELEASE-NAME-heimdall' should set 'spec.securityContext.runAsGroup', 'spec.securityContext.supplementalGroups[*]' and 'spec.securityContext.fsGroup' to integer greater than 0
|
Expand...https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted
https://avd.aquasec.com/appshield/ksv029
| + +## Containers + +##### Detected Containers + + tccr.io/truecharts/alpine:v3.15.2@sha256:29ed3480a0ee43f7af681fed5d4fc215516abf1c41eade6938b26d8c9c2c7583 + tccr.io/truecharts/alpine:v3.15.2@sha256:29ed3480a0ee43f7af681fed5d4fc215516abf1c41eade6938b26d8c9c2c7583 + tccr.io/truecharts/heimdall:v2.4.8@sha256:e83a7621b9a0c3351231ade781f6468861e2f2e8fe480476fc587ba0c144e959 + +##### Scan Results + + +#### Container: tccr.io/truecharts/alpine:v3.15.2@sha256:29ed3480a0ee43f7af681fed5d4fc215516abf1c41eade6938b26d8c9c2c7583 (alpine 3.15.2) + + +**alpine** + + +| Package | Vulnerability | Severity | Installed Version | Fixed Version | Links | +|:----------------|:------------------:|:-----------:|:------------------:|:-------------:|-----------------------------------------| +| zlib | CVE-2018-25032 | HIGH | 1.2.11-r3 | 1.2.12-r0 |
Expand...http://www.openwall.com/lists/oss-security/2022/03/25/2
http://www.openwall.com/lists/oss-security/2022/03/26/1
https://access.redhat.com/security/cve/CVE-2018-25032
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25032
https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531
https://github.com/madler/zlib/compare/v1.2.11...v1.2.12
https://github.com/madler/zlib/issues/605
https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html
https://nvd.nist.gov/vuln/detail/CVE-2018-25032
https://ubuntu.com/security/notices/USN-5355-1
https://ubuntu.com/security/notices/USN-5355-2
https://ubuntu.com/security/notices/USN-5359-1
https://www.debian.org/security/2022/dsa-5111
https://www.openwall.com/lists/oss-security/2022/03/24/1
https://www.openwall.com/lists/oss-security/2022/03/28/1
https://www.openwall.com/lists/oss-security/2022/03/28/3
| + + +#### Container: tccr.io/truecharts/alpine:v3.15.2@sha256:29ed3480a0ee43f7af681fed5d4fc215516abf1c41eade6938b26d8c9c2c7583 (alpine 3.15.2) + + +**alpine** + + +| Package | Vulnerability | Severity | Installed Version | Fixed Version | Links | +|:----------------|:------------------:|:-----------:|:------------------:|:-------------:|-----------------------------------------| +| zlib | CVE-2018-25032 | HIGH | 1.2.11-r3 | 1.2.12-r0 |
Expand...http://www.openwall.com/lists/oss-security/2022/03/25/2
http://www.openwall.com/lists/oss-security/2022/03/26/1
https://access.redhat.com/security/cve/CVE-2018-25032
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25032
https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531
https://github.com/madler/zlib/compare/v1.2.11...v1.2.12
https://github.com/madler/zlib/issues/605
https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html
https://nvd.nist.gov/vuln/detail/CVE-2018-25032
https://ubuntu.com/security/notices/USN-5355-1
https://ubuntu.com/security/notices/USN-5355-2
https://ubuntu.com/security/notices/USN-5359-1
https://www.debian.org/security/2022/dsa-5111
https://www.openwall.com/lists/oss-security/2022/03/24/1
https://www.openwall.com/lists/oss-security/2022/03/28/1
https://www.openwall.com/lists/oss-security/2022/03/28/3
| + + + + +| No Vulnerabilities found | +|:---------------------------------| diff --git a/stable/wireshark/1.0.9/templates/common.yaml b/stable/heimdall/10.0.9/templates/common.yaml similarity index 100% rename from stable/wireshark/1.0.9/templates/common.yaml rename to stable/heimdall/10.0.9/templates/common.yaml diff --git a/stable/sqlitebrowser/2.0.8/values.yaml b/stable/heimdall/10.0.9/values.yaml similarity index 100% rename from stable/sqlitebrowser/2.0.8/values.yaml rename to stable/heimdall/10.0.9/values.yaml diff --git a/stable/mosdns/1.0.0/CHANGELOG.md b/stable/mosdns/1.0.0/CHANGELOG.md new file mode 100644 index 00000000000..3fb79dc30e1 --- /dev/null +++ b/stable/mosdns/1.0.0/CHANGELOG.md @@ -0,0 +1,36 @@ +# Changelog
+ + + +### [mosdns-1.0.0](https://github.com/truecharts/apps/compare/mosdns-0.0.4...mosdns-1.0.0) (2022-04-03) + +#### Chore + +* update image refs ([#2411](https://github.com/truecharts/apps/issues/2411)) + + + + +### [mosdns-0.0.3](https://github.com/truecharts/apps/compare/mosdns-0.0.2...mosdns-0.0.3) (2022-04-01) + +#### Chore + +* update docker general non-major + + + + +### [mosdns-0.0.2](https://github.com/truecharts/apps/compare/mosdns-0.0.1...mosdns-0.0.2) (2022-03-31) + +#### Fix + +* Remove portal ([#2364](https://github.com/truecharts/apps/issues/2364)) + + + + +### mosdns-0.0.1 (2022-03-31) + +#### Feat + +* Add mosdns ([#2360](https://github.com/truecharts/apps/issues/2360)) diff --git a/stable/wireshark/1.0.9/CONFIG.md b/stable/mosdns/1.0.0/CONFIG.md similarity index 100% rename from stable/wireshark/1.0.9/CONFIG.md rename to stable/mosdns/1.0.0/CONFIG.md diff --git a/stable/wireshark/1.0.9/Chart.lock b/stable/mosdns/1.0.0/Chart.lock similarity index 80% rename from stable/wireshark/1.0.9/Chart.lock rename to stable/mosdns/1.0.0/Chart.lock index 0ce4da3b80b..20285cced5d 100644 --- a/stable/wireshark/1.0.9/Chart.lock +++ b/stable/mosdns/1.0.0/Chart.lock @@ -3,4 +3,4 @@ dependencies: repository: https://library-charts.truecharts.org version: 9.2.6 digest: sha256:a567b53fc3d0d618567f328d9fbb09695895b8e15d6ca178bf4a198c58080cac -generated: "2022-03-31T13:53:10.337391384Z" +generated: "2022-04-03T13:17:43.971642803Z" diff --git a/stable/mosdns/1.0.0/Chart.yaml b/stable/mosdns/1.0.0/Chart.yaml new file mode 100644 index 00000000000..608db256883 --- /dev/null +++ b/stable/mosdns/1.0.0/Chart.yaml @@ -0,0 +1,29 @@ +apiVersion: v2 +kubeVersion: ">=1.16.0-0" +name: mosdns +version: 1.0.0 +appVersion: "3.5.2" +description: A location-based pluggable DNS forwarder/splitter. +type: application +deprecated: false +home: https://github.com/truecharts/apps/tree/master/charts/stable/mosdns +icon: https://truecharts.org/_static/img/appicons/mosdns.png +keywords: + - mosdns + - dns +sources: + - https://hub.docker.com/r/601096721/mosdns +dependencies: +- name: common + repository: https://library-charts.truecharts.org + version: 9.2.6 + # condition: +maintainers: +- email: info@truecharts.org + name: TrueCharts + url: https://truecharts.org +annotations: + truecharts.org/catagories: | + - networking + truecharts.org/SCALE-support: "true" + truecharts.org/grade: U diff --git a/stable/mosdns/1.0.0/README.md b/stable/mosdns/1.0.0/README.md new file mode 100644 index 00000000000..ecab6ce18d5 --- /dev/null +++ b/stable/mosdns/1.0.0/README.md @@ -0,0 +1,37 @@ +# Introduction + +A location-based pluggable DNS forwarder/splitter. + +TrueCharts are designed to be installed as TrueNAS SCALE app only. We can not guarantee this charts works as a stand-alone helm installation. +**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/apps/issues/new/choose)** + +## Source Code + +* + +## Requirements + +Kubernetes: `>=1.16.0-0` + +## Dependencies + +| Repository | Name | Version | +|------------|------|---------| +| https://library-charts.truecharts.org | common | 9.2.6 | + +## Installing the Chart + +To install this App on TrueNAS SCALE check our [Quick-Start Guide](https://truecharts.org/manual/Quick-Start%20Guides/02-Installing-an-App/). + +## Upgrading, Rolling Back and Uninstalling the Chart + +To upgrade, rollback or delete this App from TrueNAS SCALE check our [Quick-Start Guide](https://truecharts.org/manual/Quick-Start%20Guides/04-Upgrade-rollback-delete-an-App/). + +## Support + +- Please check our [quick-start guides](https://truecharts.org/manual/Quick-Start%20Guides/01-Adding-TrueCharts/) first. +- See the [Wiki](https://truecharts.org) +- Check our [Discord](https://discord.gg/tVsPTHWTtr) +- Open a [issue](https://github.com/truecharts/apps/issues/new/choose) +--- +All Rights Reserved - The TrueCharts Project diff --git a/stable/mosdns/1.0.0/app-readme.md b/stable/mosdns/1.0.0/app-readme.md new file mode 100644 index 00000000000..3a6119a41c2 --- /dev/null +++ b/stable/mosdns/1.0.0/app-readme.md @@ -0,0 +1,3 @@ +A location-based pluggable DNS forwarder/splitter. + +This App is supplied by TrueCharts, for more information please visit https://truecharts.org diff --git a/stable/wireshark/1.0.9/charts/common-9.2.6.tgz b/stable/mosdns/1.0.0/charts/common-9.2.6.tgz similarity index 100% rename from stable/wireshark/1.0.9/charts/common-9.2.6.tgz rename to stable/mosdns/1.0.0/charts/common-9.2.6.tgz diff --git a/stable/mosdns/1.0.0/helm-values.md b/stable/mosdns/1.0.0/helm-values.md new file mode 100644 index 00000000000..38db42dd899 --- /dev/null +++ b/stable/mosdns/1.0.0/helm-values.md @@ -0,0 +1,27 @@ +# Default Helm-Values + +TrueCharts is primarily build to supply TrueNAS SCALE Apps. +However, we also supply all Apps as standard Helm-Charts. In this document we aim to document the default values in our values.yaml file. + +Most of our Apps also consume our "common" Helm Chart. +If this is the case, this means that all values.yaml values are set to the common chart values.yaml by default. This values.yaml file will only contain values that deviate from the common chart. +You will, however, be able to use all values referenced in the common chart here, besides the values listed in this document. + +## Values + +| Key | Type | Default | Description | +|-----|------|---------|-------------| +| image.pullPolicy | string | `"IfNotPresent"` | | +| image.repository | string | `"tccr.io/truecharts/mosdns"` | | +| image.tag | string | `"v3.5.2@sha256:40d0dec6d2b3db85ffd9720861b9e10a67a0bd75a520e6739fb9734921f2c64c"` | | +| persistence.data.enabled | bool | `true` | | +| persistence.data.mountPath | string | `"/etc/mosdns"` | | +| podSecurityContext.runAsGroup | int | `0` | | +| podSecurityContext.runAsUser | int | `0` | | +| securityContext.readOnlyRootFilesystem | bool | `false` | | +| securityContext.runAsNonRoot | bool | `false` | | +| service.main.ports.main.port | int | `53` | | +| service.main.ports.main.protocol | string | `"UDP"` | | +| service.main.ports.main.targetPort | int | `53` | | + +All Rights Reserved - The TrueCharts Project diff --git a/stable/mosdns/1.0.0/ix_values.yaml b/stable/mosdns/1.0.0/ix_values.yaml new file mode 100644 index 00000000000..807c7e0fb4d --- /dev/null +++ b/stable/mosdns/1.0.0/ix_values.yaml @@ -0,0 +1,25 @@ +image: + repository: tccr.io/truecharts/mosdns + pullPolicy: IfNotPresent + tag: v3.5.2@sha256:40d0dec6d2b3db85ffd9720861b9e10a67a0bd75a520e6739fb9734921f2c64c + +securityContext: + readOnlyRootFilesystem: false + runAsNonRoot: false + +podSecurityContext: + runAsUser: 0 + runAsGroup: 0 + +service: + main: + ports: + main: + protocol: UDP + targetPort: 53 + port: 53 + +persistence: + data: + enabled: true + mountPath: "/etc/mosdns" diff --git a/stable/mosdns/1.0.0/questions.yaml b/stable/mosdns/1.0.0/questions.yaml new file mode 100644 index 00000000000..b8f2db4cb0b --- /dev/null +++ b/stable/mosdns/1.0.0/questions.yaml @@ -0,0 +1,2208 @@ +groups: + - name: "Container Image" + description: "Image to be used for container" + - name: "Controller" + description: "Configure workload deployment" + - name: "Container Configuration" + description: "additional container configuration" + - name: "App Configuration" + description: "App specific config options" + - name: "Networking and Services" + description: "Configure Network and Services for container" + - name: "Storage and Persistence" + description: "Persist and share data that is separate from the container" + - name: "Ingress" + description: "Ingress Configuration" + - name: "Security and Permissions" + description: "Configure security context and permissions" + - name: "Resources and Devices" + description: "Specify resources/devices to be allocated to workload" + - name: "Middlewares" + description: "Traefik Middlewares" + - name: "Metrics" + description: "Metrics" + - name: "Addons" + description: "Addon Configuration" + - name: "Advanced" + description: "Advanced Configuration" +portals: {} +questions: + - variable: global + label: "global settings" + group: "Controller" + schema: + type: dict + hidden: true + attrs: + - variable: isSCALE + label: "flag this is SCALE" + schema: + type: boolean + default: true + hidden: true + - variable: controller + group: "Controller" + label: "" + schema: + additional_attrs: true + type: dict + attrs: + - variable: advanced + label: "Show Advanced Controller Settings" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: type + description: "Please specify type of workload to deploy" + label: "(Advanced) Controller Type" + schema: + type: string + default: "deployment" + required: true + enum: + - value: "deployment" + description: "Deployment" + - value: "statefulset" + description: "Statefulset" + - value: "daemonset" + description: "Daemonset" + - variable: replicas + description: "Number of desired pod replicas" + label: "Desired Replicas" + schema: + type: int + default: 1 + required: true + - variable: strategy + description: "Please specify type of workload to deploy" + label: "(Advanced) Update Strategy" + schema: + type: string + default: "Recreate" + required: true + enum: + - value: "Recreate" + description: "Recreate: Kill existing pods before creating new ones" + - value: "RollingUpdate" + description: "RollingUpdate: Create new pods and then kill old ones" + - value: "OnDelete" + description: "(Legacy) OnDelete: ignore .spec.template changes" + - variable: expert + label: "Show Expert Configuration Options" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: extraArgs + label: "Extra Args" + schema: + type: list + default: [] + items: + - variable: arg + label: "arg" + schema: + type: string + - variable: labelsList + label: "Controller Labels" + schema: + type: list + default: [] + items: + - variable: labelItem + label: "Label" + schema: + additional_attrs: true + type: dict + attrs: + - variable: name + label: "Name" + schema: + type: string + - variable: value + label: "Value" + schema: + type: string + - variable: annotationsList + label: " Controller Annotations" + schema: + type: list + default: [] + items: + - variable: annotationItem + label: "Label" + schema: + additional_attrs: true + type: dict + attrs: + - variable: name + label: "Name" + schema: + type: string + - variable: value + label: "Value" + schema: + type: string + + - variable: TZ + label: "Timezone" + group: "Container Configuration" + schema: + type: string + default: "Etc/UTC" + $ref: + - "definitions/timezone" + + - variable: envList + label: "Image environment" + group: "Container Configuration" + schema: + type: list + default: [] + items: + - variable: envItem + label: "Environment Variable" + schema: + additional_attrs: true + type: dict + attrs: + - variable: name + label: "Name" + schema: + type: string + - variable: value + label: "Value" + schema: + type: string + + - variable: expertpodconf + group: "Container Configuration" + label: "Show Expert Config" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: tty + label: "Enable TTY" + description: "Determines whether containers in a pod runs with TTY enabled. By default pod has it disabled." + group: "Workload Details" + schema: + type: boolean + default: false + - variable: stdin + label: "Enable STDIN" + description: "Determines whether containers in a pod runs with stdin enabled. By default pod has it disabled." + group: "Workload Details" + schema: + type: boolean + default: false + - variable: termination + group: "Container Configuration" + label: "Termination settings" + schema: + additional_attrs: true + type: dict + attrs: + - variable: gracePeriodSeconds + label: "Grace Period Seconds" + schema: + type: int + default: 10 + - variable: podLabelsList + group: "Container Configuration" + label: "Pod Labels" + schema: + type: list + default: [] + items: + - variable: podLabelItem + label: "Label" + schema: + additional_attrs: true + type: dict + attrs: + - variable: name + label: "Name" + schema: + type: string + - variable: value + label: "Value" + schema: + type: string + + - variable: podAnnotationsList + group: "Container Configuration" + label: "Pod Annotations" + schema: + type: list + default: [] + items: + - variable: podAnnotationItem + label: "Label" + schema: + additional_attrs: true + type: dict + attrs: + - variable: name + label: "Name" + schema: + type: string + - variable: value + label: "Value" + schema: + type: string + + - variable: service + group: "Networking and Services" + label: "Configure Service(s)" + schema: + additional_attrs: true + type: dict + attrs: + - variable: main + label: "DNS Service" + description: "The Primary service on which the healthcheck runs, often the webUI" + schema: + additional_attrs: true + type: dict + attrs: + - variable: enabled + label: "Enable the service" + schema: + type: boolean + default: true + hidden: true + - variable: type + label: "Service Type" + description: "ClusterIP's are only internally available, nodePorts expose the container to the host node System, Loadbalancer exposes the service using the system loadbalancer" + schema: + type: string + default: "Simple" + enum: + - value: "Simple" + description: "Simple" + - value: "ClusterIP" + description: "ClusterIP" + - value: "NodePort" + description: "NodePort (Advanced)" + - value: "LoadBalancer" + description: "LoadBalancer (Advanced)" + - variable: loadBalancerIP + label: "LoadBalancer IP" + description: "LoadBalancerIP" + schema: + show_if: [["type", "=", "LoadBalancer"]] + type: string + default: "" + - variable: externalIPs + label: "External IP's" + description: "External IP's" + schema: + show_if: [["type", "=", "LoadBalancer"]] + type: list + default: [] + items: + - variable: externalIP + label: "External IP" + schema: + type: string + - variable: ipFamilyPolicy + label: "IP Family Policy" + description: "(Advanced) Specify the ip policy" + schema: + show_if: [["type", "!=", "Simple"]] + type: string + default: "SingleStack" + enum: + - value: "SingleStack" + description: "SingleStack" + - value: "PreferDualStack" + description: "PreferDualStack" + - value: "RequireDualStack" + description: "RequireDualStack" + - variable: ipFamilies + label: "(advanced) IP families" + description: "(advanced) The ip families that should be used" + schema: + show_if: [["type", "!=", "Simple"]] + type: list + default: [] + items: + - variable: ipFamily + label: "IP family" + schema: + type: string + - variable: ports + label: "Service's Port(s) Configuration" + schema: + additional_attrs: true + type: dict + attrs: + - variable: main + label: "DNS Service Port Configuration" + schema: + additional_attrs: true + type: dict + attrs: + - variable: port + label: "Port" + description: "This port exposes the container port on the service" + schema: + type: int + default: 53 + required: true + - variable: advanced + label: "Show Advanced settings" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: protocol + label: "Port Type" + schema: + type: string + default: "UDP" + enum: + - value: HTTP + description: "HTTP" + - value: "HTTPS" + description: "HTTPS" + - value: TCP + description: "TCP" + - value: "UDP" + description: "UDP" + - variable: nodePort + label: "Node Port (Optional)" + description: "This port gets exposed to the node. Only considered when service type is NodePort, Simple or LoadBalancer" + schema: + type: int + min: 9000 + max: 65535 + - variable: targetPort + label: "Target Port" + description: "The internal(!) port on the container the Application runs on" + schema: + type: int + default: 53 + + - variable: serviceexpert + group: "Networking and Services" + label: "Show Expert Config" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: hostNetwork + group: "Networking and Services" + label: "Host-Networking (Complicated)" + schema: + type: boolean + default: false + + - variable: externalInterfaces + description: "Add External Interfaces" + label: "Add external Interfaces" + group: "Networking" + schema: + type: list + items: + - variable: interfaceConfiguration + description: "Interface Configuration" + label: "Interface Configuration" + schema: + type: dict + $ref: + - "normalize/interfaceConfiguration" + attrs: + - variable: hostInterface + description: "Please specify host interface" + label: "Host Interface" + schema: + type: string + required: true + $ref: + - "definitions/interface" + - variable: ipam + description: "Define how IP Address will be managed" + label: "IP Address Management" + schema: + type: dict + required: true + attrs: + - variable: type + description: "Specify type for IPAM" + label: "IPAM Type" + schema: + type: string + required: true + enum: + - value: "dhcp" + description: "Use DHCP" + - value: "static" + description: "Use static IP" + show_subquestions_if: "static" + subquestions: + - variable: staticIPConfigurations + label: "Static IP Addresses" + schema: + type: list + items: + - variable: staticIP + label: "Static IP" + schema: + type: ipaddr + cidr: true + - variable: staticRoutes + label: "Static Routes" + schema: + type: list + items: + - variable: staticRouteConfiguration + label: "Static Route Configuration" + schema: + additional_attrs: true + type: dict + attrs: + - variable: destination + label: "Destination" + schema: + type: ipaddr + cidr: true + required: true + - variable: gateway + label: "Gateway" + schema: + type: ipaddr + cidr: false + required: true + + - variable: dnsPolicy + group: "Networking and Services" + label: "dnsPolicy" + schema: + type: string + default: "" + enum: + - value: "" + description: "Default" + - value: "ClusterFirst" + description: "ClusterFirst" + - value: "ClusterFirstWithHostNet" + description: "ClusterFirstWithHostNet" + - value: "None" + description: "None" + + - variable: dnsConfig + label: "DNS Configuration" + group: "Networking and Services" + description: "Specify custom DNS configuration which will be applied to the pod" + schema: + additional_attrs: true + type: dict + attrs: + - variable: nameservers + label: "Nameservers" + schema: + default: [] + type: list + items: + - variable: nameserver + label: "Nameserver" + schema: + type: string + - variable: options + label: "options" + schema: + default: [] + type: list + items: + - variable: option + label: "Option Entry" + schema: + additional_attrs: true + type: dict + attrs: + - variable: name + label: "Name" + schema: + type: string + - variable: value + label: "Value" + schema: + type: string + - variable: searches + label: "Searches" + schema: + default: [] + type: list + items: + - variable: search + label: "Search Entry" + schema: + type: string + + - variable: serviceList + label: "Add Manual Custom Services" + group: "Networking and Services" + schema: + type: list + default: [] + items: + - variable: serviceListEntry + label: "Custom Service" + schema: + additional_attrs: true + type: dict + attrs: + - variable: enabled + label: "Enable the service" + schema: + type: boolean + default: true + hidden: true + - variable: name + label: "Name" + schema: + type: string + default: "" + - variable: type + label: "Service Type" + description: "ClusterIP's are only internally available, nodePorts expose the container to the host node System, Loadbalancer exposes the service using the system loadbalancer" + schema: + type: string + default: "Simple" + enum: + - value: "Simple" + description: "Simple" + - value: "NodePort" + description: "NodePort" + - value: "ClusterIP" + description: "ClusterIP" + - value: "LoadBalancer" + description: "LoadBalancer" + - variable: loadBalancerIP + label: "LoadBalancer IP" + description: "LoadBalancerIP" + schema: + show_if: [["type", "=", "LoadBalancer"]] + type: string + default: "" + - variable: externalIPs + label: "External IP's" + description: "External IP's" + schema: + show_if: [["type", "=", "LoadBalancer"]] + type: list + default: [] + items: + - variable: externalIP + label: "External IP" + schema: + type: string + - variable: portsList + label: "Additional Service Ports" + schema: + type: list + default: [] + items: + - variable: portsListEntry + label: "Custom ports" + schema: + additional_attrs: true + type: dict + attrs: + - variable: enabled + label: "Enable the port" + schema: + type: boolean + default: true + hidden: true + - variable: name + label: "Port Name" + schema: + type: string + default: "" + - variable: protocol + label: "Port Type" + schema: + type: string + default: "TCP" + enum: + - value: HTTP + description: "HTTP" + - value: "HTTPS" + description: "HTTPS" + - value: TCP + description: "TCP" + - value: "UDP" + description: "UDP" + - variable: targetPort + label: "Target Port" + description: "This port exposes the container port on the service" + schema: + type: int + required: true + - variable: port + label: "Container Port" + schema: + type: int + required: true + - variable: nodePort + label: "Node Port (Optional)" + description: "This port gets exposed to the node. Only considered when service type is NodePort" + schema: + type: int + min: 9000 + max: 65535 + + - variable: persistence + label: "Integrated Persistent Storage" + description: "Integrated Persistent Storage" + group: "Storage and Persistence" + schema: + additional_attrs: true + type: dict + attrs: + - variable: data + label: "App Data Storage" + description: "Stores the Application Data." + schema: + additional_attrs: true + type: dict + attrs: + - variable: type + label: "Type of Storage" + description: "Sets the persistence type, Anything other than PVC could break rollback!" + schema: + type: string + default: "simplePVC" + enum: + - value: "simplePVC" + description: "PVC (simple)" + - value: "simpleHP" + description: "HostPath (simple)" + - value: "emptyDir" + description: "emptyDir" + - value: "pvc" + description: "pvc" + - value: "hostPath" + description: "hostPath" + - variable: setPermissionsSimple + label: "Automatic Permissions" + description: "Automatically set permissions on install" + schema: + show_if: [["type", "=", "simpleHP"]] + type: boolean + default: true + - variable: setPermissions + label: "Automatic Permissions" + description: "Automatically set permissions on install" + schema: + show_if: [["type", "=", "hostPath"]] + type: boolean + default: true + - variable: readOnly + label: "readOnly" + schema: + type: boolean + default: false + - variable: hostPathSimple + label: "hostPath" + description: "Path inside the container the storage is mounted" + schema: + show_if: [["type", "=", "simpleHP"]] + type: hostpath + - variable: hostPath + label: "hostPath" + description: "Path inside the container the storage is mounted" + schema: + show_if: [["type", "=", "hostPath"]] + type: hostpath + - variable: medium + label: "EmptyDir Medium" + schema: + show_if: [["type", "=", "emptyDir"]] + type: string + default: "" + enum: + - value: "" + description: "Default" + - value: "Memory" + description: "Memory" + - variable: size + label: "Size quotum of storage" + schema: + show_if: [["type", "=", "pvc"]] + type: string + default: "999Gi" + - variable: hostPathType + label: "(Advanced) hostPath Type" + schema: + show_if: [["type", "=", "hostPath"]] + type: string + default: "" + enum: + - value: "" + description: "Default" + - value: "DirectoryOrCreate" + description: "DirectoryOrCreate" + - value: "Directory" + description: "Directory" + - value: "FileOrCreate" + description: "FileOrCreate" + - value: "File" + description: "File" + - value: "Socket" + description: "Socket" + - value: "CharDevice" + description: "CharDevice" + - value: "BlockDevice" + description: "BlockDevice" + - variable: storageClass + label: "(Advanced) storageClass" + description: "Warning: Anything other than SCALE-ZFS or empty will break rollback!" + schema: + show_if: [["type", "=", "pvc"]] + type: string + default: "SCALE-ZFS" + - variable: accessMode + label: "(Advanced) Access Mode" + description: "Allow or disallow multiple PVC's writhing to the same PV" + schema: + show_if: [["type", "=", "pvc"]] + type: string + default: "ReadWriteOnce" + enum: + - value: "ReadWriteOnce" + description: "ReadWriteOnce" + - value: "ReadOnlyMany" + description: "ReadOnlyMany" + - value: "ReadWriteMany" + description: "ReadWriteMany" + - variable: advanced + label: "Show Advanced Options" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: labelsList + label: "Labels" + schema: + type: list + default: [] + items: + - variable: labelItem + label: "Label" + schema: + additional_attrs: true + type: dict + attrs: + - variable: name + label: "Name" + schema: + type: string + - variable: value + label: "Value" + schema: + type: string + - variable: annotationsList + label: "Annotations" + schema: + type: list + default: [] + items: + - variable: annotationItem + label: "Label" + schema: + additional_attrs: true + type: dict + attrs: + - variable: name + label: "Name" + schema: + type: string + - variable: value + label: "Value" + schema: + type: string + - variable: persistenceList + label: "Additional app storage" + group: "Storage and Persistence" + schema: + type: list + default: [] + items: + - variable: persistenceListEntry + label: "Custom Storage" + schema: + additional_attrs: true + type: dict + attrs: + - variable: enabled + label: "Enable the storage" + schema: + type: boolean + default: true + hidden: true + - variable: name + label: "Name (optional)" + description: "Not required, please set to config when mounting /config or temp when mounting /tmp" + schema: + type: string + - variable: type + label: "Type of Storage" + description: "Sets the persistence type, Anything other than PVC could break rollback!" + schema: + type: string + default: "simpleHP" + enum: + - value: "simplePVC" + description: "PVC (simple)" + - value: "simpleHP" + description: "HostPath (simple)" + - value: "emptyDir" + description: "emptyDir" + - value: "pvc" + description: "pvc" + - value: "hostPath" + description: "hostPath" + - variable: setPermissionsSimple + label: "Automatic Permissions" + description: "Automatically set permissions on install" + schema: + show_if: [["type", "=", "simpleHP"]] + type: boolean + default: true + - variable: setPermissions + label: "Automatic Permissions" + description: "Automatically set permissions on install" + schema: + show_if: [["type", "=", "hostPath"]] + type: boolean + default: true + - variable: readOnly + label: "readOnly" + schema: + type: boolean + default: false + - variable: hostPathSimple + label: "hostPath" + description: "Path inside the container the storage is mounted" + schema: + show_if: [["type", "=", "simpleHP"]] + type: hostpath + - variable: hostPath + label: "hostPath" + description: "Path inside the container the storage is mounted" + schema: + show_if: [["type", "=", "hostPath"]] + type: hostpath + - variable: mountPath + label: "mountPath" + description: "Path inside the container the storage is mounted" + schema: + type: string + default: "" + required: true + valid_chars: '^\/([a-zA-Z0-9._-]+(\s?[a-zA-Z0-9._-]+|\/?))+$' + - variable: medium + label: "EmptyDir Medium" + schema: + show_if: [["type", "=", "emptyDir"]] + type: string + default: "" + enum: + - value: "" + description: "Default" + - value: "Memory" + description: "Memory" + - variable: size + label: "Size quotum of storage" + schema: + show_if: [["type", "=", "pvc"]] + type: string + default: "999Gi" + - variable: hostPathType + label: "(Advanced) hostPath Type" + schema: + show_if: [["type", "=", "hostPath"]] + type: string + default: "" + enum: + - value: "" + description: "Default" + - value: "DirectoryOrCreate" + description: "DirectoryOrCreate" + - value: "Directory" + description: "Directory" + - value: "FileOrCreate" + description: "FileOrCreate" + - value: "File" + description: "File" + - value: "Socket" + description: "Socket" + - value: "CharDevice" + description: "CharDevice" + - value: "BlockDevice" + description: "BlockDevice" + - variable: storageClass + label: "(Advanced) storageClass" + description: "Warning: Anything other than SCALE-ZFS or empty will break rollback!" + schema: + show_if: [["type", "=", "pvc"]] + type: string + default: "SCALE-ZFS" + - variable: accessMode + label: "(Advanced) Access Mode" + description: "Allow or disallow multiple PVC's writhing to the same PV" + schema: + show_if: [["type", "=", "pvc"]] + type: string + default: "ReadWriteOnce" + enum: + - value: "ReadWriteOnce" + description: "ReadWriteOnce" + - value: "ReadOnlyMany" + description: "ReadOnlyMany" + - value: "ReadWriteMany" + description: "ReadWriteMany" + - variable: advanced + label: "Show Advanced Options" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: labelsList + label: "Labels" + schema: + type: list + default: [] + items: + - variable: labelItem + label: "Label" + schema: + additional_attrs: true + type: dict + attrs: + - variable: name + label: "Name" + schema: + type: string + - variable: value + label: "Value" + schema: + type: string + - variable: annotationsList + label: "Annotations" + schema: + type: list + default: [] + items: + - variable: annotationItem + label: "Label" + schema: + additional_attrs: true + type: dict + attrs: + - variable: name + label: "Name" + schema: + type: string + - variable: value + label: "Value" + schema: + type: string + + - variable: ingressList + label: "Add Manual Custom Ingresses" + group: "Ingress" + schema: + type: list + default: [] + items: + - variable: ingressListEntry + label: "Custom Ingress" + schema: + additional_attrs: true + type: dict + attrs: + - variable: enabled + label: "Enable Ingress" + schema: + type: boolean + default: true + hidden: true + - variable: name + label: "Name" + schema: + type: string + default: "" + - variable: ingressClassName + label: "IngressClass Name" + schema: + type: string + default: "" + - variable: labelsList + label: "Labels" + schema: + type: list + default: [] + items: + - variable: labelItem + label: "Label" + schema: + additional_attrs: true + type: dict + attrs: + - variable: name + label: "Name" + schema: + type: string + - variable: value + label: "Value" + schema: + type: string + - variable: annotationsList + label: "Annotations" + schema: + type: list + default: [] + items: + - variable: annotationItem + label: "Label" + schema: + additional_attrs: true + type: dict + attrs: + - variable: name + label: "Name" + schema: + type: string + - variable: value + label: "Value" + schema: + type: string + - variable: hosts + label: "Hosts" + schema: + type: list + default: [] + items: + - variable: hostEntry + label: "Host" + schema: + additional_attrs: true + type: dict + attrs: + - variable: host + label: "HostName" + schema: + type: string + default: "" + required: true + - variable: paths + label: "Paths" + schema: + type: list + default: [] + items: + - variable: pathEntry + label: "Host" + schema: + additional_attrs: true + type: dict + attrs: + - variable: path + label: "path" + schema: + type: string + required: true + default: "/" + - variable: pathType + label: "pathType" + schema: + type: string + required: true + default: "Prefix" + - variable: service + label: "Linked Service" + schema: + additional_attrs: true + type: dict + attrs: + - variable: name + label: "Service Name" + schema: + type: string + default: "" + - variable: port + label: "Service Port" + schema: + type: int + - variable: tls + label: "TLS-Settings" + schema: + type: list + default: [] + items: + - variable: tlsEntry + label: "Host" + schema: + additional_attrs: true + type: dict + attrs: + - variable: hosts + label: "Certificate Hosts" + schema: + type: list + default: [] + items: + - variable: host + label: "Host" + schema: + type: string + default: "" + required: true + - variable: scaleCert + label: "Select TrueNAS SCALE Certificate" + schema: + type: int + $ref: + - "definitions/certificate" + - variable: entrypoint + label: "Traefik Entrypoint" + description: "Entrypoint used by Traefik when using Traefik as Ingress Provider" + schema: + type: string + default: "websecure" + required: true + - variable: middlewares + label: "Traefik Middlewares" + description: "Add previously created Traefik Middlewares to this Ingress" + schema: + type: list + default: [] + items: + - variable: name + label: "Name" + schema: + type: string + default: "" + required: true + + - variable: security + label: "Container Security Settings" + group: "Security and Permissions" + schema: + type: dict + additional_attrs: true + attrs: + - variable: editsecurity + label: "Change PUID / UMASK values" + description: "By enabling this you override default set values." + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: PUID + label: "Process User ID - PUID" + description: "When supported by the container, this sets the User ID running the Application Process. Not supported by all Apps" + schema: + type: int + default: 568 + - variable: UMASK + label: "UMASK" + description: "When supported by the container, this sets the UMASK for tha App. Not supported by all Apps" + schema: + type: string + default: "002" + + - variable: advancedSecurity + label: "Show Advanced Security Settings" + group: "Security and Permissions" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: securityContext + label: "Security Context" + schema: + additional_attrs: true + type: dict + attrs: + - variable: privileged + label: "Privileged mode" + schema: + type: boolean + default: false + - variable: readOnlyRootFilesystem + label: "ReadOnly Root Filesystem" + schema: + type: boolean + default: false + - variable: allowPrivilegeEscalation + label: "Allow Privilege Escalation" + schema: + type: boolean + default: false + - variable: runAsNonRoot + label: "runAsNonRoot" + schema: + type: boolean + default: false + - variable: capabilities + label: "Capabilities" + schema: + additional_attrs: true + type: dict + attrs: + - variable: drop + label: "Drop Capability" + schema: + type: list + default: [] + items: + - variable: dropEntry + label: "" + schema: + type: string + - variable: add + label: "Add Capability" + schema: + type: list + default: [] + items: + - variable: addEntry + label: "" + schema: + type: string + + - variable: podSecurityContext + group: "Security and Permissions" + label: "Pod Security Context" + schema: + additional_attrs: true + type: dict + attrs: + - variable: runAsUser + label: "runAsUser" + description: "The UserID of the user running the application" + schema: + type: int + default: 0 + - variable: runAsGroup + label: "runAsGroup" + description: The groupID this App of the user running the application" + schema: + type: int + default: 0 + - variable: fsGroup + label: "fsGroup" + description: "The group that should own ALL storage." + schema: + type: int + default: 568 + - variable: fsGroupChangePolicy + label: "When should we take ownership?" + schema: + type: string + default: "OnRootMismatch" + enum: + - value: "OnRootMismatch" + description: "OnRootMismatch" + - value: "Always" + description: "Always" + - variable: supplementalGroups + label: "supplemental Groups" + schema: + type: list + default: [] + items: + - variable: supplementalGroupsEntry + label: "supplemental Group" + schema: + type: int + + + - variable: advancedresources + label: "Set Custom Resource Limits/Requests (Advanced)" + group: "Resources and Devices" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: resources + label: "" + schema: + additional_attrs: true + type: dict + attrs: + - variable: limits + label: "Advanced Limit Resource Consumption" + schema: + additional_attrs: true + type: dict + attrs: + - variable: cpu + label: "CPU" + description: "1000m means 1 hyperthread. Detailed info: https://truecharts.org/manual/indepth/validation/" + schema: + type: string + default: "4000m" + valid_chars: '^(?!^0(\.0|m|)$)([0-9]+)(\.[0-9]|m?)$' + - variable: memory + label: "RAM" + description: "1Gi means 1 Gibibyte RAM. Detailed info: https://truecharts.org/manual/indepth/validation/" + schema: + type: string + default: "8Gi" + valid_chars: '^(?!^0(e[0-9]|[EPTGMK]i?|)$)([0-9]+)(|[EPTGMK]i?|e[0-9]+)$' + - variable: requests + label: "Minimum Resources Required (request)" + schema: + additional_attrs: true + type: dict + attrs: + - variable: cpu + label: "CPU" + description: "1000m means 1 hyperthread. Detailed info: https://truecharts.org/manual/indepth/validation/" + schema: + type: string + default: "10m" + valid_chars: '^(?!^0(\.0|m|)$)([0-9]+)(\.[0-9]|m?)$' + - variable: memory + label: "RAM" + description: "1Gi means 1 Gibibyte RAM. Detailed info: https://truecharts.org/manual/indepth/validation/" + schema: + type: string + default: "50Mi" + valid_chars: '^(?!^0(e[0-9]|[EPTGMK]i?|)$)([0-9]+)(|[EPTGMK]i?|e[0-9]+)$' + + - variable: deviceList + label: "Mount USB devices" + group: "Resources and Devices" + schema: + type: list + default: [] + items: + - variable: deviceListEntry + label: "Device" + schema: + additional_attrs: true + type: dict + attrs: + - variable: enabled + label: "Enable the storage" + schema: + type: boolean + default: true + - variable: type + label: "(Advanced) Type of Storage" + description: "Sets the persistence type" + schema: + type: string + default: "hostPath" + hidden: true + - variable: readOnly + label: "readOnly" + schema: + type: boolean + default: false + - variable: hostPath + label: "Host Device Path" + description: "Path to the device on the host system" + schema: + type: path + - variable: mountPath + label: "Container Device Path" + description: "Path inside the container the device is mounted" + schema: + type: string + default: "/dev/ttyACM0" + + # Specify GPU configuration + - variable: scaleGPU + label: "GPU Configuration" + group: "Resources and Devices" + schema: + type: dict + $ref: + - "definitions/gpuConfiguration" + attrs: [] + + - variable: autoscaling + group: "Advanced" + label: "(Advanced) Horizontal Pod Autoscaler" + schema: + additional_attrs: true + type: dict + attrs: + - variable: enabled + label: "enabled" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: target + label: "Target" + description: "deployment name, defaults to main deployment" + schema: + type: string + default: "" + - variable: minReplicas + label: "Minimum Replicas" + schema: + type: int + default: 1 + - variable: maxReplicas + label: "Maximum Replicas" + schema: + type: int + default: 5 + - variable: targetCPUUtilizationPercentage + label: "Target CPU Utilization Percentage" + schema: + type: int + default: 80 + - variable: targetMemoryUtilizationPercentage + label: "Target Memory Utilization Percentage" + schema: + type: int + default: 80 + - variable: networkPolicy + group: "Advanced" + label: "(Advanced) Network Policy" + schema: + additional_attrs: true + type: dict + attrs: + - variable: enabled + label: "enabled" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: policyType + label: "Policy Type" + schema: + type: string + default: "" + enum: + - value: "" + description: "Default" + - value: "ingress" + description: "Ingress" + - value: "egress" + description: "Egress" + - value: "ingress-egress" + description: "Ingress and Egress" + - variable: egress + label: "Egress" + schema: + type: list + default: [] + items: + - variable: egressEntry + label: "" + schema: + additional_attrs: true + type: dict + attrs: + - variable: to + label: "To" + schema: + type: list + default: [] + items: + - variable: toEntry + label: "" + schema: + additional_attrs: true + type: dict + attrs: + - variable: ipBlock + label: "ipBlock" + schema: + additional_attrs: true + type: dict + attrs: + - variable: cidr + label: "cidr" + schema: + type: string + default: "" + - variable: except + label: "except" + schema: + type: list + default: [] + items: + - variable: exceptint + label: "" + schema: + type: int + - variable: namespaceSelector + label: "namespaceSelector" + schema: + additional_attrs: true + type: dict + attrs: + - variable: matchExpressions + label: "matchExpressions" + schema: + type: list + default: [] + items: + - variable: expressionEntry + label: "" + schema: + additional_attrs: true + type: dict + attrs: + - variable: key + label: "Key" + schema: + type: string + - variable: operator + label: "operator" + schema: + type: string + default: "TCP" + enum: + - value: "In" + description: "In" + - value: "NotIn" + description: "NotIn" + - value: "Exists " + description: "Exists " + - value: "DoesNotExist " + description: "DoesNotExist " + - variable: values + label: "values" + schema: + type: list + default: [] + items: + - variable: value + label: "" + schema: + type: string + - variable: podSelector + label: "" + schema: + additional_attrs: true + type: dict + attrs: + - variable: matchExpressions + label: "matchExpressions" + schema: + type: list + default: [] + items: + - variable: expressionEntry + label: "" + schema: + additional_attrs: true + type: dict + attrs: + - variable: key + label: "Key" + schema: + type: string + - variable: operator + label: "operator" + schema: + type: string + default: "TCP" + enum: + - value: "In" + description: "In" + - value: "NotIn" + description: "NotIn" + - value: "Exists " + description: "Exists " + - value: "DoesNotExist " + description: "DoesNotExist " + - variable: values + label: "values" + schema: + type: list + default: [] + items: + - variable: value + label: "" + schema: + type: string + - variable: ports + label: "Ports" + schema: + type: list + default: [] + items: + - variable: portsEntry + label: "" + schema: + additional_attrs: true + type: dict + attrs: + - variable: port + label: "port" + schema: + type: int + - variable: endPort + label: "port" + schema: + type: int + - variable: protocol + label: "Protocol" + schema: + type: string + default: "TCP" + enum: + - value: "TCP" + description: "TCP" + - value: "UDP" + description: "UDP" + - value: "SCTP" + description: "SCTP" + - variable: ingress + label: "Ingress" + schema: + type: list + default: [] + items: + - variable: ingressEntry + label: "" + schema: + additional_attrs: true + type: dict + attrs: + - variable: from + label: "From" + schema: + type: list + default: [] + items: + - variable: fromEntry + label: "" + schema: + additional_attrs: true + type: dict + attrs: + - variable: ipBlock + label: "ipBlock" + schema: + additional_attrs: true + type: dict + attrs: + - variable: cidr + label: "cidr" + schema: + type: string + default: "" + - variable: except + label: "except" + schema: + type: list + default: [] + items: + - variable: exceptint + label: "" + schema: + type: int + - variable: namespaceSelector + label: "namespaceSelector" + schema: + additional_attrs: true + type: dict + attrs: + - variable: matchExpressions + label: "matchExpressions" + schema: + type: list + default: [] + items: + - variable: expressionEntry + label: "" + schema: + additional_attrs: true + type: dict + attrs: + - variable: key + label: "Key" + schema: + type: string + - variable: operator + label: "operator" + schema: + type: string + default: "TCP" + enum: + - value: "In" + description: "In" + - value: "NotIn" + description: "NotIn" + - value: "Exists " + description: "Exists " + - value: "DoesNotExist " + description: "DoesNotExist " + - variable: values + label: "values" + schema: + type: list + default: [] + items: + - variable: value + label: "" + schema: + type: string + - variable: podSelector + label: "" + schema: + additional_attrs: true + type: dict + attrs: + - variable: matchExpressions + label: "matchExpressions" + schema: + type: list + default: [] + items: + - variable: expressionEntry + label: "" + schema: + additional_attrs: true + type: dict + attrs: + - variable: key + label: "Key" + schema: + type: string + - variable: operator + label: "operator" + schema: + type: string + default: "TCP" + enum: + - value: "In" + description: "In" + - value: "NotIn" + description: "NotIn" + - value: "Exists " + description: "Exists " + - value: "DoesNotExist " + description: "DoesNotExist " + - variable: values + label: "values" + schema: + type: list + default: [] + items: + - variable: value + label: "" + schema: + type: string + - variable: ports + label: "Ports" + schema: + type: list + default: [] + items: + - variable: portsEntry + label: "" + schema: + additional_attrs: true + type: dict + attrs: + - variable: port + label: "port" + schema: + type: int + - variable: endPort + label: "port" + schema: + type: int + - variable: protocol + label: "Protocol" + schema: + type: string + default: "TCP" + enum: + - value: "TCP" + description: "TCP" + - value: "UDP" + description: "UDP" + - value: "SCTP" + description: "SCTP" + + + - variable: addons + group: "Addons" + label: "" + schema: + additional_attrs: true + type: dict + attrs: + - variable: vpn + label: "VPN" + schema: + additional_attrs: true + type: dict + attrs: + - variable: type + label: "Type" + schema: + type: string + default: "disabled" + enum: + - value: "disabled" + description: "disabled" + - value: "openvpn" + description: "OpenVPN" + - value: "wireguard" + description: "Wireguard" + - variable: openvpn + label: "OpenVPN Settings" + schema: + type: dict + show_if: [["type", "=", "openvpn"]] + attrs: + - variable: username + label: "authentication username" + description: "authentication username, optional" + schema: + type: string + default: "" + - variable: password + label: "authentication password" + description: "authentication credentials" + schema: + type: string + default: "" + required: true + - variable: killSwitch + label: "Enable killswitch" + schema: + type: boolean + show_if: [["type", "!=", "disabled"]] + default: true + - variable: excludedNetworks_IPv4 + label: "Killswitch Excluded IPv4 networks" + description: "list of killswitch excluded ipv4 addresses" + schema: + type: list + show_if: [["type", "!=", "disabled"]] + default: [] + items: + - variable: networkv4 + label: "IPv4 Network" + schema: + type: string + required: true + - variable: excludedNetworks_IPv6 + label: "Killswitch Excluded IPv6 networks" + description: "list of killswitch excluded ipv4 addresses" + schema: + type: list + show_if: [["type", "!=", "disabled"]] + default: [] + items: + - variable: networkv6 + label: "IPv6 Network" + schema: + type: string + required: true + + - variable: configFile + label: "VPN Config File Location" + schema: + type: dict + show_if: [["type", "!=", "disabled"]] + attrs: + - variable: enabled + label: "enabled" + schema: + type: boolean + default: true + hidden: true + - variable: type + label: "type" + schema: + type: string + default: "hostPath" + hidden: true + - variable: hostPathType + label: "hostPathType" + schema: + type: string + default: "File" + hidden: true + - variable: noMount + label: "noMount" + schema: + type: boolean + default: true + hidden: true + - variable: hostPath + label: "Full path to file" + description: "path to your local VPN config file for example: /mnt/tank/vpn.conf or /mnt/tank/vpn.ovpn" + schema: + type: string + default: "" + required: true + - variable: envList + label: "VPN environment Variables" + schema: + type: list + show_if: [["type", "!=", "disabled"]] + default: [] + items: + - variable: envItem + label: "Environment Variable" + schema: + additional_attrs: true + type: dict + attrs: + - variable: name + label: "Name" + schema: + type: string + required: true + - variable: value + label: "Value" + schema: + type: string + required: true + + - variable: codeserver + label: "Codeserver" + schema: + additional_attrs: true + type: dict + attrs: + - variable: enabled + label: "enabled" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: git + label: "Git Settings" + schema: + additional_attrs: true + type: dict + attrs: + - variable: deployKey + description: "Raw SSH private key" + label: "deployKey" + schema: + type: string + - variable: deployKeyBase64 + description: "Base64-encoded SSH private key. When both variables are set, the raw SSH key takes precedence" + label: "deployKeyBase64" + schema: + type: string + - variable: service + label: "" + schema: + additional_attrs: true + type: dict + attrs: + - variable: type + label: "Service Type" + description: "ClusterIP's are only internally available, nodePorts expose the container to the host node System, Loadbalancer exposes the service using the system loadbalancer" + schema: + type: string + default: "NodePort" + enum: + - value: "NodePort" + description: "NodePort" + - value: "ClusterIP" + description: "ClusterIP" + - value: "LoadBalancer" + description: "LoadBalancer" + - variable: loadBalancerIP + label: "LoadBalancer IP" + description: "LoadBalancerIP" + schema: + show_if: [["type", "=", "LoadBalancer"]] + type: string + default: "" + - variable: externalIPs + label: "External IP's" + description: "External IP's" + schema: + show_if: [["type", "=", "LoadBalancer"]] + type: list + default: [] + items: + - variable: externalIP + label: "External IP" + schema: + type: string + - variable: ports + label: "" + schema: + additional_attrs: true + type: dict + attrs: + - variable: codeserver + label: "" + schema: + additional_attrs: true + type: dict + attrs: + - variable: nodePort + description: "leave empty to disable" + label: "nodePort" + schema: + type: int + default: 36107 + - variable: envList + label: "Codeserver environment Variables" + schema: + type: list + show_if: [["type", "!=", "disabled"]] + default: [] + items: + - variable: envItem + label: "Environment Variable" + schema: + additional_attrs: true + type: dict + attrs: + - variable: name + label: "Name" + schema: + type: string + required: true + - variable: value + label: "Value" + schema: + type: string + required: true + + + - variable: promtail + label: "Promtail" + schema: + additional_attrs: true + type: dict + attrs: + - variable: enabled + label: "enabled" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: loki + label: "Loki URL" + schema: + type: string + required: true + - variable: logs + label: "Log Paths" + schema: + additional_attrs: true + type: dict + attrs: + - variable: name + label: "Name" + schema: + type: string + required: true + - variable: path + label: "Path" + schema: + type: string + required: true + - variable: args + label: "Promtail ecommand line arguments" + schema: + type: list + show_if: [["type", "!=", "disabled"]] + default: [] + items: + - variable: arg + label: "Arg" + schema: + type: string + required: true + - variable: envList + label: "Promtail environment Variables" + schema: + type: list + show_if: [["type", "!=", "disabled"]] + default: [] + items: + - variable: envItem + label: "Environment Variable" + schema: + additional_attrs: true + type: dict + attrs: + - variable: name + label: "Name" + schema: + type: string + required: true + - variable: value + label: "Value" + schema: + type: string + required: true + + + + + - variable: netshoot + label: "Netshoot" + schema: + additional_attrs: true + type: dict + attrs: + - variable: enabled + label: "enabled" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: envList + label: "Netshoot environment Variables" + schema: + type: list + show_if: [["type", "!=", "disabled"]] + default: [] + items: + - variable: envItem + label: "Environment Variable" + schema: + additional_attrs: true + type: dict + attrs: + - variable: name + label: "Name" + schema: + type: string + required: true + - variable: value + label: "Value" + schema: + type: string + required: true diff --git a/stable/mosdns/1.0.0/security.md b/stable/mosdns/1.0.0/security.md new file mode 100644 index 00000000000..71070b29ae7 --- /dev/null +++ b/stable/mosdns/1.0.0/security.md @@ -0,0 +1,83 @@ +--- +hide: + - toc +--- + +# Security Overview + + + +## Helm-Chart + +##### Scan Results + +#### Chart Object: mosdns/templates/common.yaml + + + +| Type | Misconfiguration ID | Check | Severity | Explaination | Links | +|:----------------|:------------------:|:-----------:|:------------------:|-----------------------------------------|-----------------------------------------| +| Kubernetes Security Check | KSV001 | Process can elevate its own privileges | MEDIUM |
Expand... A program inside the container can elevate its own privileges and run as root, which might give the program control over the container and node.

Container 'hostpatch' of Deployment 'RELEASE-NAME-mosdns' should set 'securityContext.allowPrivilegeEscalation' to false
|
Expand...https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted
https://avd.aquasec.com/appshield/ksv001
| +| Kubernetes Security Check | KSV003 | Default capabilities not dropped | LOW |
Expand... The container should drop all default capabilities and add only those that are needed for its execution.

Container 'RELEASE-NAME-mosdns' of Deployment 'RELEASE-NAME-mosdns' should add 'ALL' to 'securityContext.capabilities.drop'
|
Expand...https://kubesec.io/basics/containers-securitycontext-capabilities-drop-index-all/
https://avd.aquasec.com/appshield/ksv003
| +| Kubernetes Security Check | KSV003 | Default capabilities not dropped | LOW |
Expand... The container should drop all default capabilities and add only those that are needed for its execution.

Container 'hostpatch' of Deployment 'RELEASE-NAME-mosdns' should add 'ALL' to 'securityContext.capabilities.drop'
|
Expand...https://kubesec.io/basics/containers-securitycontext-capabilities-drop-index-all/
https://avd.aquasec.com/appshield/ksv003
| +| Kubernetes Security Check | KSV011 | CPU not limited | LOW |
Expand... Enforcing CPU limits prevents DoS via resource exhaustion.

Container 'hostpatch' of Deployment 'RELEASE-NAME-mosdns' should set 'resources.limits.cpu'
|
Expand...https://cloud.google.com/blog/products/containers-kubernetes/kubernetes-best-practices-resource-requests-and-limits
https://avd.aquasec.com/appshield/ksv011
| +| Kubernetes Security Check | KSV012 | Runs as root user | MEDIUM |
Expand... 'runAsNonRoot' forces the running image to run as a non-root user to ensure least privileges.

Container 'RELEASE-NAME-mosdns' of Deployment 'RELEASE-NAME-mosdns' should set 'securityContext.runAsNonRoot' to true
|
Expand...https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted
https://avd.aquasec.com/appshield/ksv012
| +| Kubernetes Security Check | KSV012 | Runs as root user | MEDIUM |
Expand... 'runAsNonRoot' forces the running image to run as a non-root user to ensure least privileges.

Container 'autopermissions' of Deployment 'RELEASE-NAME-mosdns' should set 'securityContext.runAsNonRoot' to true
|
Expand...https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted
https://avd.aquasec.com/appshield/ksv012
| +| Kubernetes Security Check | KSV012 | Runs as root user | MEDIUM |
Expand... 'runAsNonRoot' forces the running image to run as a non-root user to ensure least privileges.

Container 'hostpatch' of Deployment 'RELEASE-NAME-mosdns' should set 'securityContext.runAsNonRoot' to true
|
Expand...https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted
https://avd.aquasec.com/appshield/ksv012
| +| Kubernetes Security Check | KSV014 | Root file system is not read-only | LOW |
Expand... An immutable root file system prevents applications from writing to their local disk. This can limit intrusions, as attackers will not be able to tamper with the file system or write foreign executables to disk.

Container 'RELEASE-NAME-mosdns' of Deployment 'RELEASE-NAME-mosdns' should set 'securityContext.readOnlyRootFilesystem' to true
|
Expand...https://kubesec.io/basics/containers-securitycontext-readonlyrootfilesystem-true/
https://avd.aquasec.com/appshield/ksv014
| +| Kubernetes Security Check | KSV014 | Root file system is not read-only | LOW |
Expand... An immutable root file system prevents applications from writing to their local disk. This can limit intrusions, as attackers will not be able to tamper with the file system or write foreign executables to disk.

Container 'autopermissions' of Deployment 'RELEASE-NAME-mosdns' should set 'securityContext.readOnlyRootFilesystem' to true
|
Expand...https://kubesec.io/basics/containers-securitycontext-readonlyrootfilesystem-true/
https://avd.aquasec.com/appshield/ksv014
| +| Kubernetes Security Check | KSV014 | Root file system is not read-only | LOW |
Expand... An immutable root file system prevents applications from writing to their local disk. This can limit intrusions, as attackers will not be able to tamper with the file system or write foreign executables to disk.

Container 'hostpatch' of Deployment 'RELEASE-NAME-mosdns' should set 'securityContext.readOnlyRootFilesystem' to true
|
Expand...https://kubesec.io/basics/containers-securitycontext-readonlyrootfilesystem-true/
https://avd.aquasec.com/appshield/ksv014
| +| Kubernetes Security Check | KSV015 | CPU requests not specified | LOW |
Expand... When containers have resource requests specified, the scheduler can make better decisions about which nodes to place pods on, and how to deal with resource contention.

Container 'hostpatch' of Deployment 'RELEASE-NAME-mosdns' should set 'resources.requests.cpu'
|
Expand...https://cloud.google.com/blog/products/containers-kubernetes/kubernetes-best-practices-resource-requests-and-limits
https://avd.aquasec.com/appshield/ksv015
| +| Kubernetes Security Check | KSV016 | Memory requests not specified | LOW |
Expand... When containers have memory requests specified, the scheduler can make better decisions about which nodes to place pods on, and how to deal with resource contention.

Container 'hostpatch' of Deployment 'RELEASE-NAME-mosdns' should set 'resources.requests.memory'
|
Expand...https://kubesec.io/basics/containers-resources-limits-memory/
https://avd.aquasec.com/appshield/ksv016
| +| Kubernetes Security Check | KSV017 | Privileged container | HIGH |
Expand... Privileged containers share namespaces with the host system and do not offer any security. They should be used exclusively for system containers that require high privileges.

Container 'hostpatch' of Deployment 'RELEASE-NAME-mosdns' should set 'securityContext.privileged' to false
|
Expand...https://kubernetes.io/docs/concepts/security/pod-security-standards/#baseline
https://avd.aquasec.com/appshield/ksv017
| +| Kubernetes Security Check | KSV018 | Memory not limited | LOW |
Expand... Enforcing memory limits prevents DoS via resource exhaustion.

Container 'hostpatch' of Deployment 'RELEASE-NAME-mosdns' should set 'resources.limits.memory'
|
Expand...https://kubesec.io/basics/containers-resources-limits-memory/
https://avd.aquasec.com/appshield/ksv018
| +| Kubernetes Security Check | KSV020 | Runs with low user ID | MEDIUM |
Expand... Force the container to run with user ID > 10000 to avoid conflicts with the host’s user table.

Container 'RELEASE-NAME-mosdns' of Deployment 'RELEASE-NAME-mosdns' should set 'securityContext.runAsUser' > 10000
|
Expand...https://kubesec.io/basics/containers-securitycontext-runasuser/
https://avd.aquasec.com/appshield/ksv020
| +| Kubernetes Security Check | KSV020 | Runs with low user ID | MEDIUM |
Expand... Force the container to run with user ID > 10000 to avoid conflicts with the host’s user table.

Container 'autopermissions' of Deployment 'RELEASE-NAME-mosdns' should set 'securityContext.runAsUser' > 10000
|
Expand...https://kubesec.io/basics/containers-securitycontext-runasuser/
https://avd.aquasec.com/appshield/ksv020
| +| Kubernetes Security Check | KSV020 | Runs with low user ID | MEDIUM |
Expand... Force the container to run with user ID > 10000 to avoid conflicts with the host’s user table.

Container 'hostpatch' of Deployment 'RELEASE-NAME-mosdns' should set 'securityContext.runAsUser' > 10000
|
Expand...https://kubesec.io/basics/containers-securitycontext-runasuser/
https://avd.aquasec.com/appshield/ksv020
| +| Kubernetes Security Check | KSV021 | Runs with low group ID | MEDIUM |
Expand... Force the container to run with group ID > 10000 to avoid conflicts with the host’s user table.

Container 'RELEASE-NAME-mosdns' of Deployment 'RELEASE-NAME-mosdns' should set 'securityContext.runAsGroup' > 10000
|
Expand...https://kubesec.io/basics/containers-securitycontext-runasuser/
https://avd.aquasec.com/appshield/ksv021
| +| Kubernetes Security Check | KSV021 | Runs with low group ID | MEDIUM |
Expand... Force the container to run with group ID > 10000 to avoid conflicts with the host’s user table.

Container 'autopermissions' of Deployment 'RELEASE-NAME-mosdns' should set 'securityContext.runAsGroup' > 10000
|
Expand...https://kubesec.io/basics/containers-securitycontext-runasuser/
https://avd.aquasec.com/appshield/ksv021
| +| Kubernetes Security Check | KSV021 | Runs with low group ID | MEDIUM |
Expand... Force the container to run with group ID > 10000 to avoid conflicts with the host’s user table.

Container 'hostpatch' of Deployment 'RELEASE-NAME-mosdns' should set 'securityContext.runAsGroup' > 10000
|
Expand...https://kubesec.io/basics/containers-securitycontext-runasuser/
https://avd.aquasec.com/appshield/ksv021
| +| Kubernetes Security Check | KSV023 | hostPath volumes mounted | MEDIUM |
Expand... HostPath volumes must be forbidden.

Deployment 'RELEASE-NAME-mosdns' should not set 'spec.template.volumes.hostPath'
|
Expand...https://kubernetes.io/docs/concepts/security/pod-security-standards/#baseline
https://avd.aquasec.com/appshield/ksv023
| +| Kubernetes Security Check | KSV029 | A root primary or supplementary GID set | LOW |
Expand... Containers should be forbidden from running with a root primary or supplementary GID.

Deployment 'RELEASE-NAME-mosdns' should set 'spec.securityContext.runAsGroup', 'spec.securityContext.supplementalGroups[*]' and 'spec.securityContext.fsGroup' to integer greater than 0
|
Expand...https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted
https://avd.aquasec.com/appshield/ksv029
| + +## Containers + +##### Detected Containers + + tccr.io/truecharts/alpine:v3.15.2@sha256:29ed3480a0ee43f7af681fed5d4fc215516abf1c41eade6938b26d8c9c2c7583 + tccr.io/truecharts/alpine:v3.15.2@sha256:29ed3480a0ee43f7af681fed5d4fc215516abf1c41eade6938b26d8c9c2c7583 + tccr.io/truecharts/mosdns:v3.5.2@sha256:40d0dec6d2b3db85ffd9720861b9e10a67a0bd75a520e6739fb9734921f2c64c + +##### Scan Results + + +#### Container: tccr.io/truecharts/alpine:v3.15.2@sha256:29ed3480a0ee43f7af681fed5d4fc215516abf1c41eade6938b26d8c9c2c7583 (alpine 3.15.2) + + +**alpine** + + +| Package | Vulnerability | Severity | Installed Version | Fixed Version | Links | +|:----------------|:------------------:|:-----------:|:------------------:|:-------------:|-----------------------------------------| +| zlib | CVE-2018-25032 | HIGH | 1.2.11-r3 | 1.2.12-r0 |
Expand...http://www.openwall.com/lists/oss-security/2022/03/25/2
http://www.openwall.com/lists/oss-security/2022/03/26/1
https://access.redhat.com/security/cve/CVE-2018-25032
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25032
https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531
https://github.com/madler/zlib/compare/v1.2.11...v1.2.12
https://github.com/madler/zlib/issues/605
https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html
https://nvd.nist.gov/vuln/detail/CVE-2018-25032
https://ubuntu.com/security/notices/USN-5355-1
https://ubuntu.com/security/notices/USN-5355-2
https://ubuntu.com/security/notices/USN-5359-1
https://www.debian.org/security/2022/dsa-5111
https://www.openwall.com/lists/oss-security/2022/03/24/1
https://www.openwall.com/lists/oss-security/2022/03/28/1
https://www.openwall.com/lists/oss-security/2022/03/28/3
| + + +#### Container: tccr.io/truecharts/alpine:v3.15.2@sha256:29ed3480a0ee43f7af681fed5d4fc215516abf1c41eade6938b26d8c9c2c7583 (alpine 3.15.2) + + +**alpine** + + +| Package | Vulnerability | Severity | Installed Version | Fixed Version | Links | +|:----------------|:------------------:|:-----------:|:------------------:|:-------------:|-----------------------------------------| +| zlib | CVE-2018-25032 | HIGH | 1.2.11-r3 | 1.2.12-r0 |
Expand...http://www.openwall.com/lists/oss-security/2022/03/25/2
http://www.openwall.com/lists/oss-security/2022/03/26/1
https://access.redhat.com/security/cve/CVE-2018-25032
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25032
https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531
https://github.com/madler/zlib/compare/v1.2.11...v1.2.12
https://github.com/madler/zlib/issues/605
https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html
https://nvd.nist.gov/vuln/detail/CVE-2018-25032
https://ubuntu.com/security/notices/USN-5355-1
https://ubuntu.com/security/notices/USN-5355-2
https://ubuntu.com/security/notices/USN-5359-1
https://www.debian.org/security/2022/dsa-5111
https://www.openwall.com/lists/oss-security/2022/03/24/1
https://www.openwall.com/lists/oss-security/2022/03/28/1
https://www.openwall.com/lists/oss-security/2022/03/28/3
| + + +#### Container: tccr.io/truecharts/mosdns:v3.5.2@sha256:40d0dec6d2b3db85ffd9720861b9e10a67a0bd75a520e6739fb9734921f2c64c (alpine 3.15.3) + + +**alpine** + + +| No Vulnerabilities found | +|:---------------------------------| diff --git a/stable/mosdns/1.0.0/templates/common.yaml b/stable/mosdns/1.0.0/templates/common.yaml new file mode 100644 index 00000000000..a6613c2ce21 --- /dev/null +++ b/stable/mosdns/1.0.0/templates/common.yaml @@ -0,0 +1 @@ +{{ include "common.all" . }} diff --git a/stable/wireshark/1.0.9/values.yaml b/stable/mosdns/1.0.0/values.yaml similarity index 100% rename from stable/wireshark/1.0.9/values.yaml rename to stable/mosdns/1.0.0/values.yaml diff --git a/stable/mosdns/item.yaml b/stable/mosdns/item.yaml new file mode 100644 index 00000000000..690d18f44c7 --- /dev/null +++ b/stable/mosdns/item.yaml @@ -0,0 +1,4 @@ +icon_url: https://truecharts.org/_static/img/appicons/mosdns.png +categories: +- networking + diff --git a/stable/sqlitebrowser/2.0.8/CHANGELOG.md b/stable/sqlitebrowser/2.0.9/CHANGELOG.md similarity index 91% rename from stable/sqlitebrowser/2.0.8/CHANGELOG.md rename to stable/sqlitebrowser/2.0.9/CHANGELOG.md index 22172bb4a7d..18964011e88 100644 --- a/stable/sqlitebrowser/2.0.8/CHANGELOG.md +++ b/stable/sqlitebrowser/2.0.9/CHANGELOG.md @@ -1,6 +1,15 @@ # Changelog
+ +### [sqlitebrowser-2.0.9](https://github.com/truecharts/apps/compare/sqlitebrowser-2.0.8...sqlitebrowser-2.0.9) (2022-04-03) + +#### Fix + +* rw root fs / hostnet ([#2389](https://github.com/truecharts/apps/issues/2389)) + + + ### [sqlitebrowser-2.0.8](https://github.com/truecharts/apps/compare/sqlitebrowser-2.0.7...sqlitebrowser-2.0.8) (2022-03-31) @@ -88,12 +97,3 @@ #### Chore * update helm general non-major helm releases ([#1871](https://github.com/truecharts/apps/issues/1871)) - - - - -### [sqlitebrowser-1.0.42](https://github.com/truecharts/apps/compare/sqlitebrowser-1.0.41...sqlitebrowser-1.0.42) (2022-02-06) - -#### Chore - -* update helm chart common to v8.15.0 ([#1859](https://github.com/truecharts/apps/issues/1859)) diff --git a/stable/sqlitebrowser/2.0.9/CONFIG.md b/stable/sqlitebrowser/2.0.9/CONFIG.md new file mode 100644 index 00000000000..c147b7c819c --- /dev/null +++ b/stable/sqlitebrowser/2.0.9/CONFIG.md @@ -0,0 +1,7 @@ +# Configuration Options + +##### Connecting to other apps +If you need to connect this App to other Apps on TrueNAS SCALE, please refer to our [Linking Apps Internally](https://truecharts.org/manual/Quick-Start%20Guides/06-linking-apps/) quick-start guide. + +##### Available config options +In the future this page is going to contain an automated list of options available in the installation/edit UI. diff --git a/stable/sqlitebrowser/2.0.9/Chart.lock b/stable/sqlitebrowser/2.0.9/Chart.lock new file mode 100644 index 00000000000..6cd070351ce --- /dev/null +++ b/stable/sqlitebrowser/2.0.9/Chart.lock @@ -0,0 +1,6 @@ +dependencies: +- name: common + repository: https://library-charts.truecharts.org + version: 9.2.6 +digest: sha256:a567b53fc3d0d618567f328d9fbb09695895b8e15d6ca178bf4a198c58080cac +generated: "2022-04-03T13:18:01.22553956Z" diff --git a/stable/sqlitebrowser/2.0.8/Chart.yaml b/stable/sqlitebrowser/2.0.9/Chart.yaml similarity index 98% rename from stable/sqlitebrowser/2.0.8/Chart.yaml rename to stable/sqlitebrowser/2.0.9/Chart.yaml index 9dfa0949fce..fee1feb76bd 100644 --- a/stable/sqlitebrowser/2.0.8/Chart.yaml +++ b/stable/sqlitebrowser/2.0.9/Chart.yaml @@ -23,7 +23,7 @@ sources: - https://github.com/linuxserver/docker-sqlitebrowser - https://sqlitebrowser.org/ type: application -version: 2.0.8 +version: 2.0.9 annotations: truecharts.org/catagories: | - media diff --git a/stable/sqlitebrowser/2.0.8/README.md b/stable/sqlitebrowser/2.0.9/README.md similarity index 100% rename from stable/sqlitebrowser/2.0.8/README.md rename to stable/sqlitebrowser/2.0.9/README.md diff --git a/stable/sqlitebrowser/2.0.8/app-readme.md b/stable/sqlitebrowser/2.0.9/app-readme.md similarity index 100% rename from stable/sqlitebrowser/2.0.8/app-readme.md rename to stable/sqlitebrowser/2.0.9/app-readme.md diff --git a/stable/sqlitebrowser/2.0.9/charts/common-9.2.6.tgz b/stable/sqlitebrowser/2.0.9/charts/common-9.2.6.tgz new file mode 100644 index 0000000000000000000000000000000000000000..9810b352e2b0740682253f9c9c8cf90e50aef07f GIT binary patch literal 44100 zcmV);K!(2`iwG0|00000|0w_~VMtOiV@ORlOnEsqVl!4SWK%V1T2nbTPgYhoO;>Dc zVQyr3R8em|NM&qo0PMYccjGpaC_aDdQ{bw5ZtPs^X<4?l)AL)$-AR1X51+QXv%9l% z+z<*iwzfO2a({oQ{DPXZ)JQGO+vF?T0zkwBqPC{z^+g+h=lmr2|^T|mORYq*U5 zbpKDk-|vq{Bk^y)-!J~#AMf}7G#CwsgZ+Mgzd!y{e=r=44*vxD4}eSQ$tZ*5PyIW$ zRqWg!wF+(vEP_y3Qc+~G79vrl;(fTGKA)T~3AaAVI(U^9`i&h7yX0Ed-GF|=V zuP+AO!MNM+^uK8>A&wcuF(LvOT0$I60FGzLf98O@37NM5h#~KAi^kS0P}(^00>GGidjO|6EI%{q>B?OW`cJxm z!-Mf;8tlV^@pKprjt}5yIttK1Fg~13`@yh(Jlj9&?~f0L12hfy2jg%ygookyXgV4m zOpk-n(R9Dx7=tv6B9JB#4%RIoew~XS6L2HaJ^g{+oxGmLhFhO%( zv6}8V?1m&aFdIO#3B4M0``uxGIOrb_Muy&p5RGO>{lU@x(ZLZ4$NPuJ)A8(Rb~v6L zq1k9Qn2rud)8TM9J?bAEqWw49MHjo?A zS(o1o%c1hHJL(QKc?X9B)ISP?FdT&Apnp7_&5lRM!Tw=@Mzhi3!FYO%P=ByLoE?Qn zqw)UW_-H(Xa5&sQ7!RSJoeOPmMco)Nx=0eXEp>IhYU&!u4XLZkZ-!MZEDrhy;r?j9 zkHW)X5RUd|C>$Jx({M02Je(emQ7|3Pg8jqsV6Z<8MuTvF6vE+tKN$6gaCCHV(4g&V z>YhY5a7`6mgCs;0krg7_QZ}zyOt=on7N!SP^#MzaI{=jfhQ}z}A072!AED9y>=4ezM}rv(55mzb7!D2& z24gs#4T8}C!4Qp)_m8H-ad;FQ2gBg-;Anqi)7y#Ngt9q7^q1`guc=uhdUNPag|Dg6 z1fHwr9QK{W_m2)o=xB<<0qP&l4&ZEr(80k$zkfVKvoRVS z4bb7J4@di>{b{4-w<7ft5)8xXwscn2s)?-OHl(mBz7dj3+kW@3yRT_GM#qC=)JKDZ zelQ#d$D_kx7#@$0j)P%%5FCsTM}rU@A08i|urCacqyGNU(f(jIJ{TR0hThrZw!Ix; zlX#xog0Qk$4Ph1Bri7KnH$rjthw`{8i^;9%Sj`uhkS_QywqqvQSI zFg%>@_eX~ZGdM%TDI6Y$!~Ss}jiCxb?3$QfoSwXXH32gi zQPgS$Nz6zRMTi)$eggSc{AuHIcMK-r%h!tDMR1CuZNSP3ckRq7PB0(pVGi(jG$F;oVTgO|Ww z3Q}+|0MFxu@Tr3-|EBThQ;XOj_zSE1IgJY~E#YU7#c&02#HXI9W&Pd;49&<~0uX-{ zs#-%^sGCBbD_&nNVI1zzT?0q!R6Y%aBetaq ziK*;?0m+=!)aIY9swZJ6Yv9<37{C$@DHC%F@Zq1XHMDN)88|1Hn-bC5(_!?P5qRRZ z!};J;BLOb)68$rYQS0)5Cg8*6sZ~hoI}Use1WhC3SATnQAzNw54@J#1M=_Gdh*p&f zfHYK=FtwGHRCEf0q2M`W3y@Jh)(aFZ!HU~U(+E*fGKFk00pIk#Db?exEfUK1B+qCxlJFcs#ZUTCWzIZ!QBULuCb632*wn+4*8&S#CB9=s|bSxmtVW(#n6`QMtGx-G`m#&)_LILbmC z=K#e|7o?c0;KzjEe{x6>I8Q=wlCgvaFhZnYf&V4MRKWUc3#u|W7Gkk91sEiA#3r1P za$TXUf+ddM8|4h13H`i;pWS!;zJYRj{^0||5&owb>vKc`6f-W(dBLN++#9q^$hx+u z?DeVC-4u}(4iF52B#T+)YC{z}k;Mw@4Qvet)DVFJ3Fsopq7Y0Gkmf?z0_ra_3<{dX z%Uo8%Fw`Qm0MldAX&9FaWtuBdRm6rRAfw7GIh%nvVL}RXt3z2cm-&TuOoWkWq{jEF%?QjvK?TWfn z(yyz^*E~4TC4l^Sc7AGmyQrxIKnJw79oO#;hW*}fRH*zu$ry60gorX6Lm5fZ?svui z^$cF(nL~zd;CkY~HwyJx#*3L;wZ>=PWgKtiTE| z!x8GXB(lasaDH-e@$0iw%)8)HX|~*YdIm1m zF@vAAk7?3+22OT?UT!=C-|foQUQWO_U%r6udn7ou`<83UuV24uJp-qvNJ|X~idWy0 zWNCf_(Cv0xC|)TE_Y8d0NXh;yl5)j8BgxXJU_Q&`5`kCxS&#}4iGsEYCLl!1WKX*C zWMPhggb8kN6oDy{g*q@?;+P|HnMQ`1m#^NOzdpHqb@lP&^@mpz(Dw9G)@;|{F7V#5 z7B#y9qnF7|d;>`cPR`GGWiFm|pwD$SMI=TH(JoGUVG__DgY=sAaLn~VCxi@kU@8nq zJ~};XSUY-HJLq$oP}E72u!G}SLYA^D@8w61nivV)*SGIpzPfsQ^5&JEWHXGS@I9L4 zlTN%j7YjH(5xQ{_B2I-?OAo7FUC8C)8<>jvvbK&^;$J#Tn0C~{qoXEVsi=Hyigm!L zT>qs6Cj_%K2qH-3LOpjWFs@1kcTc5TnFb3KX56^f^-g)Ux1tH~4A3=YXxZU?=>!Ce zg`!?9NEe2h^v)X8Koz*Q%ufRr-dyv+?SwF%Ba&palOs|E9ew5likT3%f`=($j2kcd zh4!`lyg;#DV<(iol^Pl>;WYx3+Xg~dAqK*jYGs*#Ps$|u9uvy=l=)HC{nWC66xU$6 z?rz)F+W^m;wlS3zg?wvQwB)PBE%0v3AS$S5SJxhzRIPAdzP-?Np?hWrMce9em@ukj z7FfbHAc!W>3W1nLNphW~08^St%Z{&f!B1wYaj02J1ujxman?8DPih^>nxd7K6kuxE z+#a;mvOsPdYt>5;B*6mNmVh+0ddkQWXuFOVuaFjuu2nsk&wu+HL9@UAeWylf1W6pA zl+m89*HOkCj_3Si%!P?1M`%YC>^+l;2gmacTOj>?PPa|8Vwlm-mdzCqPjumRZr7Yp{$@OHN^4XaWw#M=bz8yg9k}X#)EFp|*Ts z%*~*TB4I6Y_SSVzlbE5;tQ)`-PH}`8U#BJ+qc}9n!yi7J@j-XpU~)R2TGcojAxTm- zd@!`#gt_r8{B^2zpqe)}__=hDT)5Z?Uv(CrP)-xwOY!0dl4PlVGjo5^EKMWCSpi1k zgJvvM?sUN=jGjC1;`d3y-e9_fELd!Z^^)5Mxto)gu}=wJ;Rwxb&j&#;d>2P+-tPA} zLQPnCaZ@cQjEFNP^`jEu84A`xgsM7b3RtVEOJToR z?j>a%aP0N~qyWYM$C#NCd)!dO@tn_JyhH#pfMd#F6oDj;*4>u+Wjwa@o?AnF>3~8k zw)ir+qo6oltgX5&wb$dtKySRlcr9AW3yGy8$05WbHXD*Pzzi*E7rf$4I;FM8X8~6T zU@mxXVsMRwfqc0@MHu{(>}#lfdouo!got#(k0`PXJP_pbos-i>vZ5!JA2ev(Az!7s ze$`=_!}8*KPLe4qZTfdQO+>l0|8!kx)fs%P_Yq#9m@j(y#Kht+${=A`+DUoyw6|Lq zqBzy7tWF2KR-i!Y!JC)yLjgeJU~PrH%D28F2W(3&3*7y0X9H6%&_3}`pSb24 zoG#K{*Gx_AwQO;7%b{9VfjXNhGcrN}U&MaWloTVeC()E`ERras8lno5(9*~YyNYvw zz77br;LkWRp$ufC>;V4-9S@419bGG;y;sP{97ql}=-1woV}%)jJ& zts%s>;&n64{LF4XKM1!Q=uhmv4ZFK!yJvp)1OL4-{DssBTeG{;C4Oe7Hqd)!bp`v0 z(YIlAn`rmU=04E(!Q@3|9;)}xo=MO562X`P%)o-%$zTaT<7KwwSRH)3-+wVU=<`(} zuPfMyV+pbpOr@h0GchZue@0bLoN>R^k`^m;VszZ4hZtMPz|8^&(sw+=d}<`t8+S4C z4Fwihutb!?x$#Yc8-f`_aaT7d?Zi4Wks#p+3y}4(15@1NtNti~VTT}^WF$be$4$u9 zp!duyh&qE^zP?ge2v4687-w;a1HQ;uBsa}FlJ5v>2YXl*zxau-9zO~9(WmcW6is1p zeVM#Y=JZ|sijahS`i;n-qnuRZFO`@CILaSU5hQwd z=qqS$PXo)$pjayzU!#t+$h`04yDpup@K?j-}F|dt4ofO$-)v zyWL$&IE!5&t|68(;1R}Ppuy}}E?%+kl*G|G|14@ja*aa1-c=|_(CSACYbRDp`kb@b z41bp3wQiF`hp9sdHvrlL(r6*Iohvng3FDLd=Y?2R-4m{O)mO8>dx4i}gmzvhFr2~& z#sMO`dw~D^PW{}|p5wFgJ@7UO(YXxo(u&-Cm0l!ov~opkZ)J3^>cBZkR=m>{!D3PY zEa6(XdC)HzCQ=l7<6Ard$G1f5R$<50T~eTGdJ{SE86`Do!BS3S5rPM-4JsuXHklN> zT23IV$JUtwoT@GVuFXa9JVF-?2G@JwT!`A28I076_p&qQjev{O@8J?hYwcyVK(t)@ z45whmi((--pdAt=JVZGfXXmTY9{=yyZUT#q0`PY)?WFg%0nsd(DyVd8fy#B1B~Tj; zi8k|c(YjH*rh1lE$kz=rR?uRDfVJS|RHqdvSm|72H}3ljcGElpB*69dTCH+l42 z9D+Gwx!f1gD4dl(ynije3N4XuSXsT72u}p`LYIu2Hka@sh*5O4u=bO?xsEyzy_Nw0 z3k0kkEAgf4j_#)%^d~-I>bMmO)#An)2BYC{Y>rAu53sf3!7*hBh9H?)?eNl{QqhDM zjV>Qy70$sa6soDGgF&bqI$N2FMOKb`j&+eAoa4VrtEngkZB*G>P>hn+evU?^Hl^;m ze`vM}Ib^Yc&O4aTG>z$`WEQI6C@#D=TZO_`UoFApXG?G?;05dNZ+~xDtyUVVs!S7W zH7|NMb5+5qHdl2hS#xt$lfV(DCR(pnmg>0pJKC!z6wfb9bt?~UuNvak8LTH6OClU! z+q9GMc(zdF%)JMu30vf$VU!~vuz(Kbm0_2$1Y;8-29`JsqZ>$& zJ%Zok&nSGuzaa6cL>V!gl9{Y6%V?>_2t+e{ZGX8wqB2+^g#pqb*c@SVRzg9Rkhw#HWVHLaH~{Z_wA^5&mb995++R}D8Rulq3cQ&D6dA497_uWxH>IBgyEU+uNxr)#F?~HM3}RC=CZ$uhW9aX(ZEePuTaJ*Tw{8F zQ1Nx@j1-J*vBLX+WH=gEa}s+FXPIO%<4X3!#djb?@;t(w?05^?vMn!Ls5Ir9_4J{T zE41##&_qZ#SZP>gZ@bixAie>KI8Ri))-dOMIeP^r2zJAI!yxEeahTfj#l4Js=kkoP7ow=;x7^*n5iV&_G zAG1lRg1Ae#I=lX2tCDtWH~-UBphZjruCSZqJ+ESpd$lyh3163E&Oe?izW*0=x0_B! zW_A_&TV>~!2g%xVDQ(YAI6I~hI{$dOr~dr$e2;U)9ze^KtzTlYrxe~^KIQg=vJxo) zIKzoZ18YAfUD?a3SwaGn#UT|bLU>;+(*KO3NSHoi-4w4)ULT^|0CG9U;k-2mbPfEU zg{OigQd!Bki6qLFNUzx3Ep1I;`wYaV-d{L6SIO*(Ezp&${?|`?s;D}bz)OD9`9`Tw zYPU4am^(}4`!^gT*`Pp9p0WYYfQsxaZ*Sn44L09q5YH2 z;uy@5C`3fYpUB^>F~v9q7vQRg=H2Br+Suo1}@*dd^v`6@)kYX zc(%ba&|9uw+Won(6S3&3m+MrxOeugMSfJoqAN65mtz2;~t{N*oP}W{`m;@qKt8#`X zM0-D78k^iT=|pP2bKV`g>Y zGUwqc&XWZ@OPzeQhV88Fgg>x<-|FwfdHG)o-?a3@%aQn~K&B`Vp58n7BeiUien zcfi>}HCsXx^9pEhw{%jDhJEXk+1z+h6>n5zF%etGG)%@k`FP9^+EjN0O zhTM7M9Fh-{s4qXfRo%+-p#6dQ_o3O>JK`#+X7g~X{Bh03S{B|s(5m%@qg;ggG{RK^ zD$E6x34<0iTH1Rv7Cjx&ad>#>m33;gWZXr0u*Ca3j_?|-Cm^GUm>p+eqVbmN&YUD! z+FPzWrbuhUwwHCui{i380^pMsV};`ouW*>bh>y&*zBNH)TcQlc0qV9Sg~bM%PS#0P zzC{tOB2p*X-Xs22ytFrh+Rjc;TYQ(hH^P1L>=}4RfY>?&5vI&a6+eZ+b(WS|v0j_4 zIJQ6+^6xF$AO3*lFK3@KSRj~o)Vq!d?^RTP%lSg?!f}EJNlY1mSR^*zN{Pv|j5wZm z&`Jj2^dO~p9*Y!9aT225vsm1LCl9Xfw)n3L=NPNScND;xI61VoaFQvbw@%vE1U21S z2gYFs#te7#o86ZF%Y!6K(j-de>x-06$WG!3ii+yf8ulXFO(4+&*hh!1&Tk!6f#U_B4c9VyNH9yhwU#? zQvbD(MvOt}Ad1xKHhK?ZCSZ#3$>9nbm_`a|qPcy35@AS@33*di8;Tjh@@)^XpeG|) zIknQ1i~X~69Re*2>BOP;k}wj6VMig*VTs^D#Db2%p~EGf__G5g=DppP)ekeSIJL4d z54wYXUrGUksgz_L(AL4ML9%S?cQ-dTUFW@ z_!)tWX5y+4f`VkZL~$qrj;xe4c@`m6Qy#fUK!o5*IqO7j63+4gPBO|N2a5z-F@ju& zbY(^p7|{ganCk*@nry)ZK9x~~6p$?DOK2-4sLC!JVa6iFK^sK&0L_90Z~P68F(2Np z4h#ts6C0xYVO7gw*;h%$SrSFbjYyjR3`AU9>;V}5Bcn_np@9^{h|6?H)-s>9N`o$! z7bIGPDG`TG;EW*xzR79)O;@Cc<0B&VZjfdZFzWaFOSQqU6t~tL{eVSoEjfx-(Ltf$ zLH`ZTvnr~~&{YJcio&3Pq7@=A;!~r;7r{CKqYQU3x${C1#G?Y8YNIS+7@7>`wJn?2 z&X4DBRr6hN#u_vY)MZ-YR2`0I$)55EBpCyLOESV2`BYBkNl(n)?)4GvK-O6#OEEio zNk%$(wtamken;P7ugKARW-e^*tkT%;7_u^tw*XkB_Ax};R_6T_x77J=s8dl~d*;IH zgaG@pXmdNADrlektG`rSma9IQt{TkOo^tarL@~oqhE1w;xZ1D78@q6lcZgZnfx89< zH)NF$N~cv|u{t0h(hjyp@O#CWgd1!6OK-I$3m6d0@J-pX-8n9H($#|S$?$N)UEqmWU&%3UPo z`}+JL(wP6R%TZ8Y z%X?Q3;7Z-znObtEa(cB}9^Ihiu17oA*G)^QEbKlRSttYZe}7uTLb{30$nOy^Cl4f9 z9G5AP%PgE>zV}WHhkmudV>h%vn$Sn>xZPA}^*0F_FjTt#HvOQTaMp0#YIyaRx&J3Pe70*)eg`qH)i3IxsWx zr32z5wxmE20qaX!#nAVFWf5V*Mbk;{#Z=F=QA$8>rRZ$w=UN5cT>xQkew8-qtw`3_Pv z9(7R6DHs-Ocjc89BD+F9&$!VjLgdBTPPKWB_$vJxQO-vJH{o<@BCB=TS`mj=I@n$L z1=WP)Z~VQHS0+Q20s9Vh5!QbyJTv`U=NyZE=_< zp2!bR6ct2wqega-S)71<#Bg?j(a$y~a9=mMueCl-m4YrKV_R&Ouq_Uo)AgJV-u2{gBq3~aBNbW5wq0KJt>WNJU2 zMPyOfXAk9Oigj#MGT4XruX(RuC)Zef;LPC$TU?ra5`uT;=FF(H08}j(w(3Qc=p%t9 zU4$}nc!l1#U0%SuURNErE~4pgH!otu=pvD4F!j73Nyb?~ypGM)PU4=W8_X8M<~UEn zdz%{?hq}38@O+46gaLk^lfwYL)#Na>AJ)h4>{&}?;->l5n@mJ5&fjsPOg70emUu9`)+Y~*^%YJ7f@`p1B>Vca`6@ex8K+ zP3v8jMz?IE-|zRwqmlTx-|rXy9qx}0{xld3hlBlof4@KeQ-9bW4#$52{d?}K_sJ-O z*Vu0*wDqbpzGF@E86CjzkY3XI-M3wv0C9wfQ4OeHJl;_2d!%yhZ9gS zqgqSEpo|34!INLU{=bt!tMZiWTG!8%Q8 zZ#7VxS{&OiUn=^a$42oLo1y{$7Vf@*l9UC%8ux`wYXM-1kBV0EiJB*ktxIoy7d~{KE%^Bm7UHUCt2+xM4R(nj9VF&3Ui((6#-pe&(xb zb-!+!nK!b5lNBOxj;uyDPHkN0g#K6e%rmlEDR_Ugkpv`u}L zSpVCeZ8H?~m$)WcDJ&0Mf|hDeL7OqP(D?fG!iM-q7A@uZZw^M>n-thE{|CdteqsI} z?2iUd^Zzj(G5_C-nOw*WX(oeCU#Ejj)Mdq06WH)i)ijoOEm$csq1A>n^9YRR2t4N% z_Q3P}#Lnb}F%t5Zu5pu>E-e+5$!`isNF1ouMCa?*mMPu)Rwf&>HsS0{YNhO!^8AS) zP~M>06)Cpcbs*(9DlD%!UcB)VzHPf=TT;pCqmfB1FFeqGCk9x8YlEE-2aJ!R8NOnZ zy9E*!1*6!Cvd5$ip4ZxCmRa@(6rKMPPg(w(JeQ9p|A)hI(f&KwANQZ+|6@G0{vR&X zTn~_NR0;;UFlXvKULUoEw2j-xuwC2hTv2Wc>7p_9Oyx3Ai`sA2O z?CQu$mi#wdM%A#4Y_#|PD-2MpNLQcZ@uFFWq@8lt!lN2b3rp=>B1mSu{1H=@khRL} zV=dvW_Iza}U~|8qKw=45uy}0^P2J#hb=}vVu^LP8ny(dji(vpLk-MrnAIZC%3~rN0 z?w~ugPm}PZO!FGL7l2s~9G7?RK%%1}8byp>7g)IovL$rwtAxFFL(U~>5_$&l$w+vx z$D{vE`s@2L05<6V{n6n;QU4zt4xjY@V?4Lf|As;C*8nhJn^*v*@RJGfFJJ-?-}a4D zQ*GTCG@esNAVc#tU(f1AdHX$*4A}MoF*WSHMHq)*Cq@>$9LR3zOA0=-?Y9X75Uj*`I#ZpkQyJuAO`x4W)7^I7#BPbsz|@yqDtBGJe6i4Kz>dU5 z92DIWf(Gc9x}NSN1axUe<_L7N7_K0W;50&p1Wp4Jk4a%w%G+PU&mZ#la`0>H2p6Kn z#)fsl-!y>Y*$&I8{bY z@r7FNKd3U|6!X-({_}fy8+!irkqXQ2uU{3s{+f9!eE#aQiEyA1Gi;0oLr24 z-UH8BWDP-)gsd#$@eFj$-Fo&%)h}lYW%2^-0Bwl;_M^zE+_u{BlC8)Hh_J3as%P!}c)L_* zg!%V}T1r;2jKrlZZ^hfNRl2tgaw?yGx#)SWWXGA2QhbHM33Cha)Y(oxyZGAHCj_o7k*WTb<4nA0ROHbVrBbJod!BjA{?ym#R{yq{|5c>U{tXG#>0cr zll}J?kMRF}SMu?_wVA-=&Rjrq7)(k2P@m8e`IV}jdy1)20k3Uln-zuXvYnQX$`L4? zehyNOb1*;Q+r2&#$75Fm$1!*ZN8ffnMZLUClkmcFCDeA-DqG>S+fZKC;JB;BaHZ$Y z5`z&n-jkA><8Dq4TW4?VI{!yxezCoB=$Fmqb7NK1%)ihH_*+|PfcD?*?ly&tY5>2| zaBl-xq1>r!Kx4iK^0t~O$%?6DEtHTsxSm@An`?CdOLD$YwOC^F-t$=65aRfh^8u&R z(uW*loPHN2!FA<_Zh%7q3X8aO3SP)t>P#@YDsH7ez#);Yz-mZ#JLq$OQfF-;-?&~a z)%WU3o#x(0|8lMT#$XQ#ZH}MuxAr-f{eR|o+hfK5?~nJ3{=b9K;NZ#s_ZW}x|6QOUi9<-% z_90L%Qne#LN??dc@m#3b3a)hdS;r)u&0x9NEa0He43QW{XE8%$Ci2f)yTFy(jOA)= z&;{0v>;vbZr%E*CN!g2M75mTj@pzFrzMJPcw4IZnDnv)PL-RT&;?N^@at!m7^R<|9 zBI|_f?IND5G!|FaxSKa#^j2xy46kBhy)DS5t2QT^uF(v&Vs5i7P}5bLqo!+YK<&E> zM`3;l+Dnbp-( zR#=NLs>G_iY2E5C zObaFmj7Ji->(ALbpHQfI4sKl{lSy`f0Spd{Esk-EdB5?zu)v; z4+2V)(-R^jII|ELWJdvs?=WK`O{F;5VnqYV5F&NM!uupbzoUbL0&(}q;Fmib7_4ex z>+^mkXUt~Q+QSI)4LP|j`W{6HQq+B`UzbdeD&lHf z^D-W~4l6C0KVIZ;S^vwG@qJnV8}xtwpg%6^|MB?nN&i2_qx3%l7oKbKl@hO3)!K{V zQN~7QOTfR4oR+7h-=*-E43!m_@)B_oC2pO5snDyN_Wx?j7vKCBg7)#we-20eqWyo+ z-+!9_kMflKKl%pUTl#y9Tet22sJ@x2>G@B69hl_-(yv_ak1kntzDj+zd^Z}-ZSp

drJhBkK0L$vodu?F9cx@>zH7Eb{zBF~1brVz8 zo%XxXEV=2hUkxu75BqIk#?oOwgTn)z^|MefHCcDmPuH`L`V~m}+a2{YJ$O3lcblhD z|3kUZx(_p8ll^~K+W#4khEMsw9_6v@e|vqs^*X=}B`Evu+!9?0al^X7aS?de4_Z5y zRA*@+v0H^neD}LnJkEqdBPE}W*Vof1@zy;rKs@t5k5jm(HNb}XKiVG-iuV8E=;{3L zqdd3B|97DnU#-4qgr#nqt-wm09O zDOEXw^+3NoVj@1JpxS_!az;C3YIn{Mt4Lw73Y^xj0^6#S#MNInG^*|LL@M ze0=-^Zu?sCg<(o)(mm7$JHQu{#0RoHkCG{j+TeL9lJ#H375|$&CHr3n$M>wm61^+y z?89wV1e@&t;h>QJaX1(bpU(e0$|LQ6ZThoB-|AL4ER)17eeIi`!aaavl@~xzl}^ogqJXN;<7i)B?^|$^rd%G#Q5%!;}>;H zl&aym7q*CR*OZppYetf#P?63t6bq)~-!%SUtEXk;+M>~pO{5aQl4G^^EjUxS%T0|m zO4dK2wc7MmURShC+1ly7+97Sy^#aWNhTYs7UWm!h;g^F(eLb+oRMnFzU5};wAD zTwt?;1anKIUA0l^J2~K`iLRqadA$douLL2>eZTf}cx89e?;29cTr?z$3qj86T+ccj zv#r%2P)kX|k|2pD;PUjm1<9P+d{PaXmlT^nWTPxPK>lsIxwy7G~IcE7Xu4%dN zAVuR*)6y3vW;ka_v#yhy0(uEI0X>o=tk7-hHV#V^hY)xN5~| z4%=_LW!SQ`x*F;KJ01zxp#KMh!@~XV!~Xuk_(}gi#$)vVyA;JA&)>XjVq}BPa$ywpin0d6 zTSHW&->8D0mVCdnr;+@Ziu&Q?|9)}(*WW*UI{)z~kCFe%oxMZQ3=tFuIG%$!X1Q^* zTUZ1F9J9pQK#^|qEp~VO9{0!45L?@NQW1JCa@fLJlrT)d$t@tb3%3HiCIKvt@^XR` zlx6=W3DE=$55`;xFtk*vAML4<|2oy(ot=LT3|tIzSLzin{)xy70|{oER^%WrF+9{>SN;S@)hVI439 z!%#;_b->$Kmsck*-<-W|ZQ&oZl2QH}=l75`=D)qTw1 zuRO(Wb?8?qaj!q{%XHyEqP~1;?tx>za@y2Jd~IcnSIvK&g<05tD%a^l*?*(apg8|W zqo@17ALTLjpULqp$9qekuSxT5C9|%cz`ms5l`h*;0r3q?Z+}j!qZ@R5wp)2@b-M=j zHC#p$@T=U>5es*10WKIzuObokca@6W#N+-^UwxdDG;lx4FT&Qf&x6cxgk&dsY?=1V zchRu_^jML)QF4v7JrqP3#pcGJj6@UXHlN~Ajex)usi|K&VNu=QoaSd8{*g?t%qVpW zM;jPqIB?;Mdj>_oSmA&}lmswZB$S!A#bYmkH|A@HKUY^NWQ(gSwbtN2#DbyX2*JOZ z3!{a3Cx?D5A=ph#5LejAc+NHo2-5Fg>K`Mod zRKs)wN6McFg5kS3T2I7Hb$5=;X%LH3JHCG$|Hr@kvswR}L47Fy&){(Xu;l-F%K!H` zPnG}2zVhiY{XhBbPg^V>{r(?&MSK7LAD@}?!2X|{Hd~+gGt2VovwnGzMt#n&tSWU> zfpI#Tzux+=U(qvh_fvnSAFGEt>Q~V84}Re9)~nae^8b#(KMnl<`@_=uuit+<|M4hK zZTyd9-g^rC@lLvq*nCqCzB~B!p6tb2K2`I7mBzg*ahK$S=YJgZhy7yy$KgT$Y5qUP zQ)U0Dt4JTy^b^;ST2|jS*PMPaS5dZ;6vgsp(_3GRnu7p-1I09Ug9(~vklg7WRvUrtL6 z`LB-y$)N{Y2|$y=qOhcnFl8W_d6(8L7>A-J^qel@l2rPiXL$4Gf|1PrC4Zt1F+IeJ zU$y;+3x3nvt=IeXj){GAU+H}(^Lf%Wzptl}{D0W|5BrDXV*Jlwu>TbQ{U}fA{O4V_ ze?3w%-~Ck|eVf1P(}ulYr&N=zU#G&|l09q@_^sbu{P)Gxn|CiiyneOCt}&=m4Jzb6El{BV=cPD;B->PB10AR;T81^53UbVgDx?s21$9p0E*hBnr zf%=2nP`{c>69RU8=xMQ=QAEUa->ol~LP~EE5=zRTc=bI=mNHgB+HvZVP_X%C&Vo-? z%Xkad)&C&^Sa{JCb@Jiz$BE3SUQjDdL~b*2`zx4^M<@<{A7M^)^WXTT@8|*CIRD4x z^S@8=KacZN`Tu^_V}CCmKqWHj<%YEl;`i?5INi~|XIyrr@W=utj<0X`0X%$GpBta) zy4UeAXCnMoLas5UQ;!7Dd^rejazLat&uU`Gv>FWhkAz?|-_uIy?V3 zDzQ@;eu4J?`hKW}v>O*_*O)4snfVXlo}Wl^N>2ifd{?i9~7 zyn(5%orAJUmF}4Bx`!BYdrIAi-}T>fVIRr2zjw=LBHWf=)ZF#&2|RQz=T{)yD_VB- z`>y@kcOpa6#<_S!=r8ws4LnPJ-8P9sp)mpWes0#)co(nJt&+$a?$g!a?(q^`NsLkp z{B>TIr4iWC;C3A+W|aphJ z#S*~qM70vgD30gyzVOqN*RQ}2AI>(5|1!_z5#fcsS}dBkWH$c%s#IHwos5Wy349W& zeSJi`L5#aW9L%~n>8%EBC9{+neZm+F7JPB~5{dk8IEg({41ex$K~}tmT)Z^5$?7Xz zrMR1bZ^T#8ldoUD`7JEL>iMs48oT=ekox&Q7!1e5;`xt*!BhO#qdZ&Ne`o6AxQDR* z%oStzVf!gyTUvhhy?A%F`-+$B{SK@?n<{0S&;HuL;6-!oX1?)oCX1ip$zii9t8vorwi_nLw5pimwUPoV}a z6q%{in!Xs3ld=d;+!W-=8{*!GsV)>U5LwZ2Hqpz^v1M3>7JO9dCQ(g;)YsTwl}|x&a78v#kUT1s`Z~E{Vc7- z^w6@Xls(l*Jr-Fvb(gCG&;jC3={(P=1;kWV_fF@G1VkP?mU3!6cd6|WC$>z@VbTCb z=oIPOECDE8H&YOA_Wu{w5p5R98>hLzZsX4Z5?5OL8q2*W@6ihL3G0=*cm}#TI+Z92 z5?JL7G5mtnGot1P$)bE8PmRFJLw-48dF$e;aL*tt7)$eE71x2=*=(&HYI#+-HG1Z- zrCAX9%+yY~MyiZ{kD2OTckVDn>DqoT7B7s@Ft5x?Aui)%V`Nnoznv9^2PcPfCCyX4 zQ7vdL68w4@-{y5A7Yg5b?Mrbx-Q<=c>n4Ck4Jg7_Wz#iARs35ew{`TFCWAkoUW|v06nf+ zJN=E7HmKfLTj8lK!UC1PS~nKR2@86ju7d4c)%WAtRZ!xDfgSXVzht}9E;z|FvSqKM z{!-gykqCKjj7KFQjx|zf)n6=!##eiCq2^_|Vw{106{nlC>68%DHbD&Hc*|XVtBb0> zUL7q^wCvJFPltYWQW0R>o`7qFQr|@jcVGY1nXR|H>tf?_b?X%w3<5;yns&($dI*KqAVdIyxdyIQT$J*f#c)jA8@<4 zA}tY0fs%r$4R(NZc3U!|olo0&luTjN2G4B=iN!K9*fM9z{I`RuRm^uz_};dNtM$LO z!ykJ8w|{szDC+;G{oluWw$}f8Pvs#rzGAsrt#7YK@1pUG>)Nffeal|`{#GjAX}_$+ z?XQ)PiWUrA1!8$?x#2|;LrZ8{qoa2Dob5za>wdNotSk>1_l{Be>R>|TWcc?ZE zMpZW`qFmyh%;fF2vP|KnYi9c@)B}})nqJWIQx#SGaGH>$Qlgk3)N|@G$l3X}vE8L^ zr`a^Zbn!M}d~vfr2}3TWHA_@|b*NhpqONhAeh-&8THE~VzH_&|JjLrNr)pr0O#Zt# ze4EH7?1I9E3s(wz);@+~X*m7muk5=e#U_E{j_%q%X?g3Q>#y$SFD<3_+&&iTv}V+^ z`%$E8;sVkwB$Rer?9W$xyr}$od3tU|2k7?`aCv&(^11Ny5_#u6$QJj(ybzo=@(Q`N z<)P1xFm)Xz@iqy?_5fF_(rYDkt3WPRA9r_6C-p0<3;LC%^Zh;$--M9y5;3aOr@K|3 zxdPl(QYu0LOUT40+vKN;S>k?H(xm!)N0n5uN2uD4HLbm_H*2dlT{c((l}7oiIFx|~ z_idJ!NJFzJMf%_>G$PZSxmU(!S-Knc*0N?xX;UX}WYa#GlM9ohzPZNwSKR#22RjjpU0A#J zG!@A&cC=IGZ6d{t@RVr;IeE1k>VMmRrvKaiKW!8Lz$IgKge*anix3%Axrt_OhYK`w zquY6nwjQiqV=hRZC=gWP@IsMr8v=5ruj@MwI0N$5?2n%O|Bv$cB)CcZAjiL*yS%Mr9`YL~r)g14 zW0^x=?)iLBo%{LmPP2T`$El?6KSZBPhsbt>6f3?}a?FAv!UVZ2f6kXRS2%6weN>$r zjrOg6tK}Q7B7C=2dB_&xeJ_8f8ZLk`+x4Ok&ia|ZDcZAN>;Tp|DTbYDCg86x)5x}L zxlJp2_yX+YVUfJh^UCl}QQi-u@U6HMDwK9fS`m4skuL>X<|KUqcBJ-^g?43_VI|DE zC6%2+N~li%F&t+wd?Co?`sK4X{>rL&*z#W=h(&p?UejTdqjRvH()O7Sh3jY)^(4b#-(j`fNj)KK7j1 zQ6ivROlEShd*s-O1%z$^r-r@M>Rrr*;!Lo<7lbBroiq-%3QcEg%Js!mY$Ev^@$Mg0 zHkA4s@ilYq^S8P7tNE&=XuE2a?Ig7`h}q*-mY&RwmMJwxD-+xSb3dE$R28^X45#)E z7RT0Nih|Vj0C`>#1r?JiH7ULvk>~@g;;&19JDpBz`{XbZXd#wqn?2i72p37BNV!@F zjKh;CUBI{55**lpHX4b7^VIR1noxg9XD3X@_52jR>2P&PM(0~bqSEn-Nw4?k)#T4B z8Jnk3kc~?46437ERBz>FQOW*~@U#~o!g^QyzZZAQ{4SqO@xO!NplJUO`%n2_ALa4c z|A;UrdAp8wF(+vn2fG+);-Ll@4Asj+flbI5R{$Bds8~^ zwd;+mQb8xBH5+G3xPmy6N7}iHQMagfjLOuQ{crqd`oD1-v^$-S(6n1$KJeT*Vb=Nb z1(Xk`*&7#IsU^7!@5bh^h#IxSBH9g<2JsU@>;eZrp|vE$uYe^NjNo{l-!I@O77p3DamJt+IZ~hcyv=#8$K$m%i{$HCWV6hW-Hr3c?&XXmOLLomFzaf2wxLJQ z6-t6RZjX4r$f>7|Y0hcC7-QeCt{seA!r078&2yr9*QR7yrl~?|67jiLBix>h!{77c zxBnK98-SMU>>=ZS`r~0K|ND6Gl>hfp9&yLksXV7;AEl5dH2@4qVkP^my!glBl$(TH zM+pqOG)3wFcO#c;!STE?ov%ov#VcMP(e7&CB=OaEZipuTk>D7#_dxp=uq%A0O=+-Y z_kRO1SvUWkWLkF+02|}~hW*m~KYY6X^HCmo$6gdAH{hpiijJZspYX zW?Z|@LD}JHI`Xx9YFDz_?dtaROtk0N3{fxke(wIK#&vc2_o69jkm z0B(~1{j&e>VDOax=TRQp{!{0bw=@0p9tWR%I{%5_pPD1S;=4NETe)rGIk{qsneHhE z(mhF2E#Jj1Pg*$fyt0yoma9~y)+obS!Whm`*qN$JCG}p=MVgCP7DqXfnM~ip*`QK9*@DFi6_ELl-r7+V#ZxL)sK>`b)+8sU!vpFC*fD2uJ)iZm zL4I;#Id&`0jpVBmp&o?XGp%TdPFRSiX|Z2UvN!rYL|JMSvztBo=T|s>@-VVHAb( z$Wersn4wT!myRjenXbhUzkGYa%i?%0F6iCuw$5gNNDUx?s5_jg;s)^!tGnQ*2xOGw zNdXkdD{SjoCJz#_*e0%xEAm|LB8T96bz{dp@mdL7ncqr93OuKKx0&zc@o-(eSg*1@ z2klsfD~U#8T6TPaTjFQV367)?)?nI)o}gR)w) znF!QOv{;eP8#n7x+U)-BkTNx_`a)4W=85|ly+cdMYrZc@n- z>zW)z<~&71K$Q*?=Y(vMA`-1Z069}=Ceb=Gi5W?v2oaHLWfOy#(wFPh<4CdYBUR;8 z++5Z%=?C!TeZ}$HThNb+Eqrp@B*P}chmKDQpMSl0b1#b|U z%Xttb0gRLiRDlwD>7cSb%5O^YQt)jr4@4;NxjtXn1y)lh8B69UMugA2G@)!x5d9?r zDWvo!At4p##}NuqSO+^qDT+fB2Uwg;(O|kb{)h0U)U`@bi0Pdg6c8G|4-+$TW{gHWQ^d{OU1mV zmr1>!UFv#^Y)fg_gmtT1YDW6JzMql(_|&!AbWC6cf4dlM7@#7z7r#^u%fs-#7yh>6 z&~zqv8>|~Dt7t8=SmiP$zXT$uv$(KCUM8a`EGIG|Wtx5|Ukr#DT2@?iBibl? zfSueQ5vEMI7kBind)86DT{ruL$XCG7vKu=$>DkWN^7k+0n;sL zw8ERow}D6&kPY;aC4c7>%2~#vKCR1&3^31W-&|kXHX%-F=PCe zaW_dvDw&{UHWfcT+R!&pO%lvTOUw)N7Gv$)0#QWQQCFo=-k_S)0Q<}{r-cSX>kO<4 zz|4nJXC||i6^`e(QdTzb-?yUDJ!~L`IYK2dtf^)I)rnwL*cnB0G^{xDRAH~^Eq~i) z?rEHx&AW12_a$yCAm5*;RSo#WY(?9*5V2Mx+lyB{Q3|5fdHvu+dvD^j4DVhu=?J&RT7fF)U-&2m}$RMzfV zfJ?ip9y_;M-V`B=oW2TlyBJ2_ptiWZ=Ujt$MFSX#=}>}Y@w%WGg)0PTmZlL}qL{(x z2a;qd1uOw#?{XnC`{;AJt_qsr&nQ$CCNBV27vNxgWc6Dx*W4|Ue+|*!P5B#fQ6lfu+zf>W z$aajJ7xYnI4;>iv!LSd8KD@_kOe8=o*oftjb2DCa?v!&WtoSBwCt`lGUzfECoQ@ z(@hxN!k^;ak61lU+pxq?wKL?!6tEo4a!bS8vc#|fPYgFP#qh3NF|6VQ$LJ~CUnD`5 z7L9e>p^O|+rr^aFw-S`pbM+6yLoj2>5;7dXC|ZkFPEXFS-oCoL`tI!Q%d3l5??0ZM zzACHhQ<$EFp-15c8D+_`^0SbAm0!bk43{{l{H~jRNs_d#?TYWZ@ruuR>;3{Y7M*kO z5r$z!k6+vZKrzQ|BM2eyKt;zJBH@Cl!orZes{0N&l_{CaLC20%uN}!!z|w)CrCAY(c<;)Fq6~CYb?N2C6{RClK%39Eb`GaP zU#X_tZfw~S48yj8QeL+Drg6z#ttAgDUS*1Y0Xp0nFVhH}e>`n_Q3Y)#!oAz+Dk$?u zCA=TcH-K9tl$}Gia5KDjDPre{EU~yLlU@i|6@c8L?M-z{(pY0q+enUPW%*mpQ+M3t z4f>}M#LG(^-S(IR*cj20p4fn!q}2w*Jc;!iVff`Ki1Xj-@yCCfxQE^qUkIeR1h`E! z=!W?J{r$s2{`cWv+<&_N=}{hW&gF7}X`bR#TnP=&%@U%|$%*6wk#rZ=+!|;FQn?IgC1w<^F=r>a><^t$;oQnAX$|v+ zW9{BEShmSU*Q)laJ4FLs7B@Z$_0!duwZ}DgJ0tm*65 zR!5~bFOawe0A9km%KxBx4x<#u=#0Pb5|kzsvxKa{*RPX`LJXSwyPY9Xw{B$d3H?A3 znSj1{k#9&$>lOe6QE^eaxk*}h!Zh;ctL@Wi zct15~TNsD3$qs1ura11=MO**w1m;f^EE4d|iQ`WR5<*bG_=wxGwcGvXKfZh^-}?f? zkbhpK`f|4KafA%tiOY%;ChvpsR8a@}FcrnyK-{YwERvfTbl!u5@zLa9d<1%{H16pZ z{sRPyWfJo5^Z$3_egnV$3S^&TnHj|TGRsvOt1Qub;?(&%$@sv>yq|BszgUgH$?0qQ z|A|gYQp%Kgd9Q*&lDtfX>WnUhK2&2}hVu1m zJ^mXSHofCKAk9$OlZowweDEPw3@E4kDvc#vHAxKS6L)m0e4VbGtQ;t(&EjRoPOCnu zx18(P#AljK-H+-;4xm)RgZ-0nTlH+T|5OeDL~ef$sNVh?3=YPH{9nWV{_rXPXCy}-kskbG4q2lmxCBnOhZ|S zW9O52Q_;6#KuxusyoC)~Y9+!m6s!a7M>9X~4w-QyHI{3*C8Cs1F{5*>k8kpC6Kiy~ z2X0MI4|r>4`&?`&UQHZBiyN7f!rCuo0E&5 zHiHnwYGGVmyt=$2obw-QdQ-D7uK@SM`*$DC>nMB+koN)2CwPln3g46sySK0Z`|AC>cZIQP58D24MRl|OPC4wU z)WqA5XD`oAu0Eb!oPGED)z!;aAJ0x-T@>0`B{~^%FFj>A78z{Iz2f*`R?rX z+2vUY5{x1b&IZoq|5T3D<^Pnkbh>&YUU?QO*L&dkO5Wk&EDTKa$n)#M2N|f!zpP42 z5qIO#UDLR(9fE$zFhL<`qj-f$5-+)s&Ep$Isx+}vn9RTurc~De&`R2-cSk)TDjw>6 z`JxE)yjV?M94^eLg`@nurl4Sw3rJYpKTt$tG z#4g_VE#F#~w#x<#AO*M%V(~ig(hEJeJk;DRLi1QH&+Ry9A2C^Kdj7l?yL^hMK`%hA zUjF(-hMq2Hy=P4UYi?PWx!db{b?HkHC8rli9sy%U3#Xw(?6!zIbvGkk z6pNKp@Ti)}ODwAx1;r~7DCjbYbtb`a&Z|$VzxtOmS!{N4ihDS_0HHvG^6EpSDr=w1 zT$(gR0iLZzgFOjimJr}m625!L%@6T6idUM~%iGE7qq|)J6a!jJ)B)yI&OZ+K2u8@@c1nOWjsBa;HmNuRyEFMaa=_*58Ky2&ZuowxtK5bmc+r2~mNWU6qy1zxWb1 zP5I)49E$Bo&Vec2X0VM6#20>ajm^?TRgVS>A);+PejuFsJ;Z-nDCsJhmdxw`Ah}YPQuxQ9B$g2V|mZ^H&wy zLH@m?=eOT9`h7Z|H~N1U31ul{!Q!F(zx~0%L2>`TzyEaq>*G9+y#Igs?&Z4)2vLL> z0$~zdBLaeCnI;s;w<48l93X)Ii!U93-qQk@H3=Rt-0C`<&FkNMtDBJwZMA>A1L&Ft zECQVyFr!@@Ck)Tl-6i~dl~F{lZg{s4eQ_`x4Udk@HfI|Vk`O=<6T8f+T6-7#-~YQ2 zq`nV=zBm{R8$wijt)D@U)4G>YBDy4pxTA--04qv@YYxjTRRQw$;Jo^=<7|Q2NVja$ zfPd&@lyvk5Pd#rP{_^)J@||a+{7;kct{DI~?Em#g{bK&t!@*$uB>x}dk^6tG%Y{gf zCM7EtQn-5muiI+00hlJCo&V2q+L>Lt3t^KBYpVFJcH5$SwyK<>yvDHiJ+df+y(|kL~{BRVwQ^Z}ER`kMxa~froA@V&Yl>Lm^;zwDsu)q5Xw}g$YT5p_!ZEEFmYq>ZehPFkJQoE!dF9co#obc zMh?Y|I0ogYps{72Ht%dP{C71G)=0l%f4*+)zd(=LQd&TXRDR#x1$Q%p+SA7iPZm z>DJTUfpWJw?|}LZC%l7)J=61YH=4WfH8?4c-FP ze4+xYodNFN{|MH`6Vzdz52W|=_QUA|(`>pn+$kw;lBl=29h|q*cnxzBVMwJhYW=+X z+AmH*WG;*S`n6^MzB_a{6N`E=clFz?M8^? z3ID90Tf+VWc;_DeY2g1O?2dPUY})@h92M_>Jv`_?-T(S1kJ$e?7x_nw!%yFH=s5fu zxckH|x0P4WWHO4}^iKZc?}fW3&DkgS%1BpTrYaAM%AiuC3Pnjr3ziB?81fzvm55Hg zleIfldb7%)lvf9$&%Abz@HML3K-1xWR!XifI?agbht*lpi{~auOp!qD!3ryYJ@w3DXu zL?04M1Q*uAW!G5es z7zs()v=^bg=ojN@=ewJm%Z`ZGt^R&p_u%GCw3ksJ>emx+b9PyYRw$B24DF9r}#+zFXkA?Tq;Zw5R(NC_v891 zOeoK{PcyuN*+%(KwVi4+`-=Lm9`w}f;?heSrmnixDY{donamzd0c5X@M_-F&;c<9ayNUlKM)ziu%6qK^*U7JCRKh_td8Nc5 z|GQMaKu)a5{$!(ybhWxOd()3Q9YdY=K;=bs&LkF7DP2x=DGROHS3t{WG(}-ulxV*s zW361eBG%Jd0;P#J<-CoO$eS)V$eW;FO07DlZ*E?9DvfJK&g{M5_;tNlS7JLL3gN#U z-I5V+{a7VlOF*L!OVrs<_=9>pJ4?pW7l@s7>SoPut+k0%L{I$ruA?bSWe$BMP0s~@ zhD*d1o&tnG)(OEm+JXiarq?9A-A={UAuY|hp`O(AmXCo@XA}XoFYlzLIrMZl+`6Tt zp^Df57@wmUZt`O+V;cE3?$tB`+lN(y=PKtqLpRF|(IttaDr~#Oo`4x%A+lypl*`Ze z1e%sl^K6)<$Mq2Rv?J>Od>r||Q~xs~r&?-(JM_PP;0^8iPu^hsMgRL0A7P@tm9Eh( z9suV(pUwbv+uYy(Iv~^6EsJv#0kouX6lFtBzA3EKW3dTEPlvWc0sUfD9(=0JMp?p7 zc4XcRU(=JW*sP(HdML6G44tc#MqlVTrSjWP6J&zubUTOA7hqLcu_~+- zDKD~mdI=>1>r!16v+7E3#{q%?Lubay2Krl5D3XATq;Me|y|SVG>kg#)J|5`IdQ_{N?fZU=ges;LJO)gomZCkRNaHN1Ys`hGQ`!0N?ZH49`*=T;Vt;??M zG3nY!yk<+3-D8S?M1v7A+m~<8q^sWQ)~1lRd3}en3`ezv1Voy=a3Z)~5~@noFJsV` zYjl66@?wuYX2sdxVYN6xVxKEjoCA-6kfn&a`nCsnPBQ6L+=kH3H|mtqB6U^2%-$Ai ziFDe9{Lef@Jnyl5NTK~>*4_dgv`X3L9B1YIrGG7zUoC5TCa4vP@VeqDEDrN>a2?sQ zQ=>g^?}6ffqnCJv?NhzlPV&Ze{fMu+?TJNhjYo4(9Z8Z^_lq3OJT;iiMrVm%3iYrOpcg&Yo3G3*(nRfr?4CmFWBc zP=1%|vta)QiLo4O z;#fv*)p+a1wC)DbUuAEp*3padHMxSO#Txe)}2_e;2n4yRo4@IS&G=@0gJhHaetJkk@e!e`tzW(9$)%nNhUXNx* z2lTu``2o**OB8E($w88Kq7+8h=wLtrLdh9KF?s{u0Azg%i+S zbCN-K+4e51u)DArC^;#ViBPTGphXxB5bg!Z1|U|>Rg1vEI6a&=1gvh z-*x|d*C}$hgfibzAUZ(D$?T9U-R=QQ@mo#^Nlw6>e{hRAi;+p_2P?#21R3PKMcyKA zgtk~N0Da4N4I8Ur#)7J7mS*SFB>W9YY#w!w`Z&XR4PmZnA_rw~jeUXj)>#ZXVpVbwjTU5! zKKRQ26#ej>Thq@To3>?V4#FP2!;q}f7%^1t>vv@N&CutYvW)u2Vpj%UZOyIE?z4~m zCrfI4JpbQtSdIT1e#!s%B%l5Ke{uyplK-z%p{36MryA7x|Ky`>{y()?xBLIhM%(;< zuV1}*{ZRj(?5m0YPxX3!dUN{h^!mBkb1kv*|D0DzV*WFoc(UAMH0x#Saq%ZB#;KMA7V|5qbfKB@oDlm!p+{~3UOFaMts#gF6vQ^0om z|Ex}Tx$J6iEWv5y|8wE^@%(>v)b8;AISG4^|4)G}8HDO5Axz5_p{bSZZxNQ?+RF)8 zbph^y=>MiP{)T01^m|~;V%h>@7SrDc)my~H-~OUgTrU{ z_}leA(Pj6jpFQk9UE8;{18|rBuRp5z|N7%E^}jyJXD|O>QQi4*T!58o(T%OV0zwB= zJ%|SU8Yg1$bc-LcXtdpxXtyi8iJ!d#PC42-wb#ycgx?LMi=Q#g5R5jU`v%m~ZTy)F zlHYy<-K9()krVpcZ~tZZ(!hTSH(KXE$dC3%{WRkLEggV6`2WZsjV%7(_lIBN|31m* z^YZ_d1Vd{Vpd}pkln$TL5%?HB!2R5R>EdHJ{|phj%m1ek*cY1ma~s&2&Ud)(9Ozb{ z*_}54TZeaR$6!8YwM|^~Z}$xDq*M3W!aZ2PHtkR2*Wn=Omn_ij>ce(BwD#S-yl>rv zRKm(Mh|e4Ix^TyRN8KIx_&d4=0qjIq?KG#3cXAk>7LlJIo{O?i!+xKky-ye8i;(tEL=kv1v#Zr5S=`R4(TKy9A z?`80d-XCuB7hran{n6|~7_BGY#;mUC za+|rl!`>CpOqD?XFbc-gk~Uxr^9~&#pRmWXo77f#9Fu7)usw_v@xB7n(ln8S+02wM z&~6NWUjyPHeYng9zLFljBbTwzptCRf+<)4qR{vWw9Mj{U)m?G;f!Dw6JpUQ>EBAj5 zzTE%vX+EO<_Z?oH$Qp1sMx2{}v*N=NF42iB1}Sc`I=Dh?oh1MQO6CkCBtob9W446+uU~hH`%#{XJF+^@POm!r-+y$}4Jj@y($Pa# zT%nKVD9ccEzRqy6xR$rz<79EMNJ#$k^YPLza5pUkfy3zyH|rx}vh zY?~+cBAMscUqP>QK`Q@{l&jJtI{_Do@v|h;OcpXLNcZI9G9=!QD4JH1;^o(kYIFAp zFP7{C_$5AV&Epbg(SzoZ1NgY}D0|?q=+boiPosH@<_*eLd2Z1kXfC(R-UB8spEJJM zJD?+X%SV|(^CkdQS6vmZ6n&ZnA@}1NJp-UoC{UL<6zio4RQW~;YRx@rbsR7ykskkJ z{&&J~^Z7_gWbwn0tWuJogynOA-m?sT&ll}WZD=Yz&we7RXEOAj<#mepm?r~;+~CfU zD4CEQ&?_F~Z7WC^uLznBK^4*VthpFzec_l z|L>26Bkzm-|0zEE+5aYQU`qtjj2lBTcpE5IQrQ4%`H25I;HfP9-w|K02w}#dIb_Qo zBR#f6vNh-|VlsoV5Sv>VK)Hup0v56Qx&nSL@6`z8FJ549VYTAFd;pAGiz~A8mc=Cy zCqj5wJqbWtEeAe$#i)Tb<mV(fTiYs^ zq0XJut| zl{&Gm4}6M#0iABA+^BL5vBKvY(D`TQpPf$inm-Nc`t0=O^X@;sy|y3%!$($zSOkRN z_g(c$SB#>#>JBI^upA+BSjE5r-c7uHPg`Dl)_6f)*(G#!1<~@#)B)hlYoK&o&KEU) zicnxqohDu_QYS41y}RG2=`%O8-k&XD##GWcsO{iE^R=aKMZLW~Yg^S1#EzlZ_G;aF zPfXzd%?io|9&w1vj0EDr@{XJK`sXXXJpNk>pCNGEL_-dv2Ek$D@nD# zfr~Bf|0_b+wmn`8%~a9F5wYz7{s1zxK<~fBNd!9G?4SRP{@0&A&?W2-Md(nS@7rZ2&6(a;C(CBh~+)rEF;Mx-hd2o^f^W-y7ms+TVBrE9b_o$sFqQ~L7xWFN)c{62R3 zf9><%{^-m3@2B}Z0hf?5lqJHuDpvrwU!nxe);NwhS4v@cD^4&Do&b?4NY`mfGDZPi zqBsWJHj*(vI9VKl48@S)J0vcZHhzambnpZuXaNOVdzxlwj^Cq57B>4IhduB*i8p{G z;!TbcNKpo2oS@!8@BI4bYeq73@C2NRB@5o3U4sZ`^q{xE>{$FO(Ld0!;O)U*dTho2CK+BF{N?{Ycmm$SOyt8| zoIj@ry)+~LLLoco;RwNF**qivI_TZekVNSCkHA3H{y+Qf^wo>!FJHgtt)fToW9$C+ zy`dl2`5*n@Oa8~F`8)wil(c;Fhaz%^h&>jCRq0~VMAHfTOz z4$S*5%=@h|_btr(wV129JB=b>UeL`aQknD{xQf+W?T1V;SN$z><+~{MTT|>=6#LsK zW}B37wO?Px$Bhg{=6)CyWcpjk^ju_mZONQkRC*6uk&@)$v>D06>EU7f)joBM$$m)G z49TQCBvW%lJZs*6fS7?f$pB6;lhpS|&8Y8>+!H==&^BpH+o(+2q?WdJ3>!ufSZA@& z1<9I$Ut$0$pk##rOj8gMLPsq58I7pL;b|xrk}XflUCXZLzH!cUSKo7;1P)S8ZID@FCf{`ISHxe zEzfWkJ%btITm_0liww`!T=nDpceY-L-n_|vqEPqdO}s;kr)OwI?htrKvUk#qCfcZl z* zxXiP?@;C(6K7V%g{Pgb^uU-J@IRW4ET`%+%l-zaiU`7F1Gm0Yw$ejNMD3bnsF%Wy| z-1$KGUj0BwylX~6K4?7@hOH?fZ5s=2X5ah+%n(i%;9ebf$TORW+ciq9;fqGGN6aY5 zD=bhj&&Wy+UWQf>i&Li4G^KK^yk>IG^Bi(d66PAKR?Jeo>04t}u*-h8KWW1*{b@5n z#M^J7xsG4T2d!!LESi0j=ApGdLXu@DWPDLb_5egNH;Z)$x<~sdTshsN!4|sfID~xA zlI~Guu050PL4{YwB)qL9mhXiyLwq6d$C8(FGcZ4wQ{&Od#Nq9o<1uorgHh{sFtXOc zsJssP_IR99aoldbOi7jj6N1>F;p7MI$sf5Uf7E*Nho*fbA(_Pb6+Iz}09-Q? z>PhGYNX-v_WL?K{K>H4z8P-YHxB+dY|S4Brprr0GRL#= ziH@Xs&~Ob6riZnRI1$nn!x-R%Fg)KV`$Z0HGr=<%x&_am)-5L=v>w>9;29X6xxS%| zHyhZXAwvq>3~AsJJcHJPXJ84QfgyPOZs0ejSv?RDR)YS1!;RW^n4%I{7yWI8(7+Nx z149Uz^y@V){m1WKy}dZUIQ{wU#r4Irm(PDbfByF3?D_Qx=-d$;b(BXcA>hU38-OW* zl;Q<9(!_}P4Y!)_X4eCkh#IsOQ3Fdv4Ga)j~$CGBeU_9Bj3mhV9&{{+dED<#@ zM3mp{+jh9Jv%m^d25*rFCBzA3Fph=6u}&8mjF3ETDgpqV^f*MsptXnyEDcf7^;4O}caXw8xX zizNpomfUa7k_FAfW(Mwf=r(Wz7aI;*v*EyE!$FA+`_pzb4;s=u*haI1(FUyD=)nB~15c8EFc2BZfdHJg( zwwY_3w-*)^dM_Mn<^{W4{_&0kSg+v%^xWD_-?i!btv6lY+I0Q$rmKvh%)gE|e8I0% zAS%#xVYbMFa~07I7mnv%IDOY<>9^i2eQUGy%bTTdF@T7K@&HvNpp%Tjm}@a}yjVeb zBqeU7#tft|qevuV@iivfhyfYx8N{XsWaPWuZGG2H>bKrWeq}(s`T;R^(#_3(AA#$e z^NUwv2re$ag)7V#Mrj>1+*6+WIHCUhQ9fu%wr55bNk}%?wWxTtQ9JTMYgEb_s%Hf5 z_-&nkqe(Nz&1m9w+;}c!)@!ZIdX_Tlm6X}GG>^y4XdaKZ(CkoVz1GUCXDPE@NtxZ7 z<{ICE_~}rMK{NI{8oSxA=TdIH*2=AC$!)Ks+?gw-XJT{(%Ph9r)*k?0Vs zUTd-HSz^^IiB+$i(_l1cNb_JD%?_#RwU(-$B}BZERBh=l95svI;qAB3?2sU>V>hO~ z{@9{fNf0hRy8UUL;M4+=s|fH2WGEqbd>jOHhG#K4Ql%PosV6xS{f3OK?__Ko?b?yx z4_c2zNtSX*=18de7)Q`Wb4#H;?e&Ki%_EcMmb=_*IM3dA?~|Ni!xPY< z`vjB|?;6jR3c`@LNIKo1P$Fv5J%8Ob4!I_+Uo}v%>#qxmR^tHsM#7C zj<)fNdIf+#Xian9qB$^Wp42#Cbks&PllS#;<|*%Xlk_$_R2hz(hbkO77riaDfoZSr zTlDs8>1~(7!1W_J6uI3sY#6>XbcgS7lZ>A9reWymq5p>YJ=lNV6&66_C{-^D6}w(1tLe*Ho#fP|A;||1$~72UBuz|`oQDyW17R_J4MqLX+rp-OmrCci zR_T08rSnad&a>Gx%QmX42m};~JF8Hk-7Ye+PQ?V~7w>KW%OFmi1iADzzqP*RTl$(m zswK!hd3@FelV+Q4Fxj^0TuRiQnr|JEmJ;QgN|Zai$Rcvw%xygwJKfgP`Ydkw;6Yo_ zUY>(igf>$T2d?ZUfq|(im3}u6t0p9g&~zBb#o4$Sq|OMqIXkf0pU8sYy(nmph7UiOy_1udPOP{%kW}>G97@g z^9fy3&@3m3w>K>w3s}Rzt-)Zr4Olb1axe(C0BdN#5BlS6z#3xKFJY$Us>Hv=DvVG{ zMPU-Y>=w&V=BXv*zUN%?F7>co7JI(AEfc{vRm7S-^oT3#QAWk3K( z#@Slov;=ygZu;H8>HT>OF6$uBrJS|a%`DYyXb{-9&plv#4>wdrSVFEz!xd7=Y$}C^ z%t44U)}`ta7n0~fkwek!(0Sm_@t8VJ!lrEx!lpgT?KLom!Zs~r$h6WXv;i37v_02TxV4EY>sdTiZ-ttKKCiPC|j6J>0q8$Qv^5oQUR5fjTQZ=!s*Q+H^ zpHp3|(in-D7vYSdc$LO@jzdvGPvy-%ll4C(=?zbu1NVvZ#4)#%wsSiv&+Vi;an&zOOe)1-5C(latos=i9ngEz%AFe4QtKu9{ULnK9 zgrbD@)burEOk*cwasd-7?9^rbwodxBa(>6#r%#8Xi)CxZqsw5d?_mm-Fo|L{p-QBP zF=&`I7Pzy|NJ8~#P zqqfS>sH_Z)O3IM?c*v4I!-mpl=#)MqhxRmTt38d%+S90{J^9WIJ&V9WGj%o?IMvya zLwg#v)t;;b{ZUDKa+e^o2yB=d7r0a7TsilxQ|_&d`%#Gt`|iRE6fu2vE01sPNW5O5 zFot-Q*Z!AfUGBoK70YRuj~}@6@m=Zot+VlmWg~o4;>5-{80=QtEBbgVh8vgJGIW^K z!?q^%uxwHfOD1(q8oluPf^`bS4L5n+OFw96N(RD|bglD-CVC)E^c+)G5pnfnS$}>s zY#XCHEDPabZ)A>TZH%-$mOo8XNq56kfWVy!Fm#C0VOvpZ6`2^8M5#M0)tXqZ;VSXA ztdf4SGJCwe?Yotc5%T6F;XILTWj3nH>BGswHN^E&zI9OxtER=UB;}3M)Le_FM6gd) zz6h;mC<7^>Y>^@QOAInX7)T+d_auv4G}H_7)3meusgVPY^Q&6q-evV|$s3;oum zDy&Ks!;;Xi84Qsr7e$z1lE4_i7(+^tl>5SkkQW_Vmc~YoLo=b!pE&)tt{M}qOH2&x zaqw!#LGN6gFma2D@|&Q`w`X$t`M1q?m*s&m2SS$flf%)F`?(XuUHR0l)2Rb1mT9nK zJWiuXPrq_Ia5`m0%$Ed4&tMFb5M|($kBcI|nF`oXlCCXni;raoPyRdPJtEU6qqqi zCXqTstuSXm5)mejB7L#Dxv~)@l%&!{YNUYnN6plt{>W*#2Ck^6pmkJKU`0g*W>l27 z>0yKtk_5=hR>cT4OtdYU*2|!8jZR>UPEE}JrM&Q``#g+sN)bq5 z#z6lFzzC+|Y(kWE_F429NjIQ;1#qu&4$24!mpG1ONqvVOIdH{J z1ubKz#GCfU^XrLGx)~Q}`NiFOQ%U(&A&P6Oa@JHiC$<#FC=@L49ZKX;lHc$c#dja0 z1g`7 z{$eDC%`6&!=(K18M*vsQHh?SWSqkjb9EPgDnp<{vFylN$EemPUunfUfj1vT+8CYjA z1#saE=?)wbQ9;{?C@UC0Fe0K974>Miw8+*vma@u8JNV9bos}v8N?&&v7 zeD&RluYto88npFEW68~i z{&U|Qish=X)w;lzRbMOUnW~z|#;-@ir53f;iY%ol*bfbtKG0qrD5KHe4-KazZ;OU4 z$M-|SB`{mc%f3A+-acr!>J+suQ)E>s>X#>F;6$T-Qd$=dvg!u)%ah_pqkdA_m+P@d z!`laq`s+(3ZLcqx^z5QR<gqvbfe>>xJP6=9-hmt^IF?=o@Lj0hF#}P zWq_{(mHPeSwKi%z%c$`Tqh<#x_0!|ER=K^h%Iz5{_jXL`RbH>1%B%bmepz$z3cZ)( zGI8Qkuef?`6<4pUxO#=+%F!4((WqBky|#+0RsYH>6xZ!&)T@)Ni(h&6q>T1Mqh1ec zU7N`&&Eyq&5J$shO}OeKwJeX6uhT&pmta3!TzsTG8!4mF-w%y?Nz=NtkX2d8D%J_cWTH)*oj*@q$IoMzI3Kqb=VMEp zk8N@8JJK`mafTLam__0qFmX570x@;}Pi@GE?8=3GtL-b^^epVn4P2=Mk*sfJ?%&(X zS1MkRuTRLpJpvI)zGmXU;OPdjLqOIHkh!{2-$_y(Cm6R@YQ|-yW^5}p6^i)#F=8m* z=!?kK$(o`lr%w3q^Bsp0aamQV#hhe(JX{pkDNEzF%F?*3po}d&sY0HjiNucBa`VPD zNrq~7Ov4PP_5Sg(L*E&<)py2aeP?XxJ2jIg4=V1`#E#r?;ajH|joT_l;O)$BEj_M5tb{l*Sed)!vl<}X@`LrHI_ z2Dk_=CyKyJ2ljG3Gp@7X1O4K=vn#N|S*E6T*eH2sI-EGJ^^MkPj6=S3G$#sG453KH zvot!_@VV5I_F74K_)0p7XD`y?rc(KeHFRX1an-YQKZtn$3eBNRw)=}Z+E(Q;W4Phc zpAjuE^I}7Cn^CS9P#mF<6CvlLQFzGIb&=KBVdIS3+BoB~jWf1voa$hTisM|6a!m+| zu*yrwmU*2PDPQL}Mk3G|!AK;F=h9gWMl((@3~Fm*Wb5RVz9PvLA!05H9%P5RGM!i{ zBA2a+X=Y%!F2Wi+tiEwut8ZjohBLM-zM@*OxlFGRW!XApvgn0a?Bebl&MS=o*nU#=Vj*AkN~8y6d&YCt>{K)|L|GBKgk{9}Po=aVmB5J_EkgZ`HZ}=jSH-k-^CHzfAzTa10K7WXh zTuH}Q&ri?4f8JX~AEOV?^SseuApZ9}&;H*Z2K}%6LBH<@o)>tduROo+dBIn}`xwaB zpEYGL`^tN8Up8@nkk1ovq0%I{Fg!T;cAdyLz!=Xmm~Dh6bCa#nnTnv>)!-V7G#d~T z;Sl0VQ1MjW>dwWl`aUN@6M=x@6^>yBQpgy}k|V&DnC5-lLkebV91GE$A(7Ovf;eF) zfxNqrPzGj*-6NDpy-R`@-YTw|DWT7@4S?YiqdSh`g20&LC@-!*zxwYU=bhk6UMR(x zB|SL!`+A151TjQUz`MVF}oE4~@V;YhyDq2VKhu&gw z%-+(=o9}+OVHtnvb&3)I!H+^fH4$YAx<3w=giv&N(Cu~)PU9F{;l+|su3Dn(4n?2~ zZpuqs1quH_B%tE|OBAoV%60JQLSQTZ_q~BX99#T9=#R%=`2VN)a2_V(j5%lNz7$S=koGvEu&} zPzI9-W|8bw_S6FxiDdivOu&;r zxFvN1V6v&Tb}3k*OyvJ@W0yb7HUKlUqCM~&hRb>rnJ&pX&aYad!dG;QHa#hsidqsO zOu$SYp7b=<+~_p$-z5p{@uuRUKLKC5Qq~!Y zz&eRgCKr%EsOYp8l1TFF%5sz;6o6aoxDz=3rYG>MdOse~b-6wGmq_)2Db zAowlGq#F|_b8?i6T?T&St1}{@61H5nk&yNbQ(Z_cvd+4KaVycKtU`r(R}I+l69eJH z`cdhLs{=oP7*nx;e(ZF+aLtyTqfSB+)cHxTNMj&*Z(@(&1Ob>W#P*~;zGx|qP;nP$ zx4Wh&>qd~lZiF*2SVg)m12K{H%;Z*-;7fz70ZFeTb&w#Pj}iC)W`yv`d^d+NMI7_z z$}hQ2lIj!|OB*NZYQf0a#a-P#6U6~G03~-gBZ=TrcQC`ePpWPpEV>hW&I$gdoPc~D z#K3d4qX4KbKSq%Rb&uniuQO?`Gosv%`7|m2orNBEMjufOBF#@%yIru<9p zY%o;8O|Rg+fS{r63F#T6Xf&vSCm(cC!rzQ+&^_?O5+z_p*wUCdC~vJj662gHgg7Fy zI9i&a5OG@qIapU2wQG5%TSe{pdrZZ4QK!CY;`uN32;68(3843>IOfB`!kQtu5fhg4 zECk-+=;w^WcUzci4=0NZQM$)ogb7fM4PUv-pM`5ZgH|W z$60xhk2|Jt53_hhd*6Y?Xi zxxBB2Yc7AU;hO7-MPcL3*IEkMlF9|L5DA{V8_Db(fNpV(NaUd2T)pIgUWyjQt9NO# z_mZ~^lYGIyy?m9+lFv%<&jSy;cWH8Hk=>IBev4yNUXdNO13D*MnjUrZp?2q_b9|R3 z$NJq)@rWD4os$lSB}@h(iS+wSKFq<06@RI0Zm5dm;(sF=ibbZ^7JpNlxHBbp%Lc5gFXay~`V*sJ=n8VNl-k26 z;wrFQ05de_Yl3B>B_pzTxw9Z!_Qc{W+|kw^6c!IkI7EePXszseU_EXsC-UIH=3-|VHxC$wF;xK`3GY?W%e%T( z%I;IKSHvYAU3dsyC$YW~OxLLcm;#iL^T?WsY2K>CO!ok*2r;tK1ctBm=n z>_YAc4gsVJgath_PrVH2i)EPc5i(C##B1BTvcWUBD8s!IwUYY(hc01%I6CQ1Q4|a& z9`q0z1oJVRk0$;cMZ;(?5BvUb=#SuR?uP>(!3d3}!DQASMU!wE_QUaT5^Tpt^v*G= z(=lJ)p)BKKOc-yxg|;)b0axq_0c6bx4Ph)P$tU)&dI|rHv$`k(5PU~6{BQnl%uOh8 zs$NuZ3Nv-?`kpt4;Ak|MBQ%AxQ8@K|G?)+hpM%LBSm|}7Es?ED zNi}*(4|go6B9hRt1kSV;T2$UQJT5|^h;kb)w3p6-LJx(cF-?o0V#2jwgyag4GZL&?Q7Fq}OA}_SQF!#>J-R)7D%Mzyif(Ve?;Ku^YH} z=kq>ZtwkYXG6xZ&m|K}CiD>oZJ4`W2zQdGr+Lw4GT=WW1AY9`T{39ignf${3L9_Tt-AQ$vvG%esO_#UV?w*g-# z@DAcwtfe+xl-@6Q#I;C<78@7b^3nzCbdkXbf&8^^Ne0gIzUdLyy>X&^D)7jG{3wk}6OaCBruZJ9az_)|$98wH0&yE>u#M&YHV873xM;hiIO zJrveu7sb`wWSxi;pf}gg^4MNOzKb({w`iA-4T)}+Mi#^+RFYv0F}GW#&O_x;tC{Sa z{3suGPCBAmYv-sV7GLM2<9B}h>8L{y%)%w2`Ml`kLU8`-TA%;Yqg;8_;c>F|tLz4> z;09!flK2jRgvNy2u2X#;K@yqrVz^HzV(V0`-YB6p8n4=`=Q<*U5zsk{*OZ~`TbxnW z0eCL_Ij{1=4+ z;HILUU5nH<%_~m8=^?oJ#|e0Ia|WIrg3HtE>mSZfz}LV23VK)S>H!gt`P*+_gR`Q6 z_@LzO+l;K#HvoD)Js0Blig?!#Z_>Di4*gUF45|0)+q`EeOJIDFFqF+;Ax$CD@;-T z02ho$tD?mr3TK+LjW$qv;4+UE(=1J*$oUoTZxNFjjC=ES9CN0S8$MgaBuW_0kjSv$ z{otff8x%B574xlb7PHwt9l`_<-9%F$Z^q4!Ulr;CGT+LgV!C7g%;!p*SNFl8gk@O% zdW=|j%v(~>1uK}Q9IcB>-a126y~>{p9{cdU3!|v3y6-X~TvLdJU4cRO9wknrYRH^AANriP^F!c(EaCS-Csswv2#x4mSBN@3P_!RdaP3$K+l+gN4r=z2}?= zv*I-!I>ce&ZQcz9v)*-qw>d0IZ<=lL7j5T5=?(1{5Z|u#4S^-~Njwsoll1oFt)LtM zzDN)8G{LP>`WbzvD25pUsa9KPIp4lu&p;?1#$AV zhSM`q?eRxDtl#{osopZZ7l%Mxd6@C}6S4nMT_kz0f=sCx25uH00e{mrp1g z1RB3${XL~9<=PrLEFr?NBWn?jMX1toSGr%6L?V!~I?{q`|LFZB{wT8!u_e3cJzS+R z>cu34v0x;e$!g(ZyTH^g73xCWM##Gpr}O%cx*(}bacuc0;H$^0mqH{?*|C2_RoAXmQL+M;z{=s|HqOy#+9gI+~y?%utM)_eD= zz7$2owOdpvI<1r;z*>Q zCJU}HVLshV_al~^>^a7B6mCL0R_eER6}`A6#)VV3QMY{;X&Axb@6Azh>2a;B10v zciOBwsW;b3@EaU6tM_*FR_UR7w(NVoaWBw^%cEdC2xh(q!{Mkuo6JW6oJB!2hyB5* zKb?f5(RdQh(QJyw!{Ia>4f~_veCUlv!DKiO=c66?XaiD5{BE6{BAnPgJtaWS`8kd6 z;f7Xlv*M2JsVT#5FgNKd$}q5j*UMH12`Pb`k_A^!oh41qG321&u3oP_onk;;sv8& z-$%13@JG?S5697HG8^=VvuQY(%mQyetn~ITouTd8{AS~aX^4A<>ExLeM$alj#f7a- ze713|#&1&>=$=$Dz9*Ii)44)0`XR#%y-q^u_&hCI<}UdngH&b&^rS%|4F;lis4&f> zCbJ?D%B>$2#V?0zL)KY-p_0l5&;CcV?JVCuF0ksVlCk?6T031fQF!E}8 zq4?j{lA2DZFL0h#1m(n#dCosHF&X-0jVQ}0s^wU&Ud@X)>s)oJFWI16Y%+&^F&C$8 zd?9q-9f4?*z!eT9f1{Wr>e4_Rdt7=Uzl-qQQ7QT~e;H*pj&3!DCL~H$NZwC~Vu~a% zk?>l+T-1DXoroh|6oIEk*N0+DN}$O)j*mb>s&^xDl}E65#EyU{-J?TAYAA3I|9a-y zkZ+VzDEaLVoT>0LNTMVJf{Q0 zYK&ES7wX`uDk~SwE74Ua#l`4H>d)^kk3f1C9s#sU+2$N)N6Ha)RK%Vh6=hDjyq9O$ z^?0sest+Grdc8eTIXJN=y=2#U5wEu_&Vbb#nXQC$oaH!5iDY?AlY`j(d@%Cb1 z+bGOhORg%$A_8TGoe6f|5y}KpmDLdlPK?^dc?=}S_n1SOlUQWolKgyJRuAuTrI64Z z`!>iwSt?u(!OiRQ*FZ(n3N?lZUHbn6OGv>i=3Pd1&o0VciL5i6w8&qr?V*0VbVMwY z(NAUDC~3BH(};BmJf_2-Co=v9~Ozv<4l|jBiAHE=y>Te^Yv&eiIwu`n1)_7*NoD1g)ut=z_8+e{-Tdiq zKUs>o>Q=(tZu42F{0Ep#7Da9&S~lEjK&ye=%X+r@{m2FzUBXQG^y|-%@rC%ne@^{RrEppP4pGvtg1jrYPQlZw z)9<@8D0rkeSlUpAR)?nFOw65fj%tug$N+y!9aWR4#_y`|r1;-R=g8I_X>b7VuJON- z#PONHMVi6%9hf61u9{i!DG&u#R9%t{S&Op_sw1v|a4U;kJpl+Ps?>;9@ndM^PVsL& z=Ym_IRZ3(fH#Kf`eb>#Po~X}g8U?DK?Ihm8OjSDjL+o9J?&rUGHKL#M#Aj=#w)z>) zd$vygAUj?m`?*g2gEPP%F>N~~(do`IAvHBSbSca7`z;HA7{FfcUz?-yR`aqO28e5S ziL-aVcINa2SF}4P!_nkOe>)SU$7PUI=cMymT(kE*rYp$8W#_0PZr?NC6F`l+ z^!t84fYHqFdvh4v%VLjXFb3(Zkj`@Fi;&M;up7U}_zoqA(k{0MvG_|A4_~KUiGw~j6JL6|xeK$G z`nhOdw^qw=dir#~#*`K81xpiOdKIyX`NDK5R2Ma48-1m$hI%PFuj_7SL3f#8Q6i!a zj-8O$Iqpb30D|vsZZ6fEI^sx|xDjiBKR@RGT<2914vow@{Z3u4)H*n|?>7<8=NQTR z+4)@4!sAsf9atK!o{p%KVT~vP@8sN^h~gpd)P-ph`jW&E)v$E21jVi`sC9JM!6luW zvr9gHG!HEi!zY@F+V%-y%6pri)K}&vU%;*rxFVXUtJ=z+z!Pb)UQC6v9uC5`vR*!eAPzB|2*QWwnS)IDGz1Aiz5l{o= zldenM=_9X7bEF<^O_qVy5b@~iQIxdbu7Bo*`nPDGCZLwOXSuF_Me{86&_wT4FYfBF z+DTR8?DqymMPPsIBX1IgQRGLX(3{TY^XXt32ICM7=7aHYG@Byi`9Xg^i6(V?I#-KKikzBRk4 zgQxm>0N8EVs%KkG`qQd6U{B}|09(Lokqyyg>O`$@2Z~qX**4_pTD<1UC&(YGGtw#| zJ%E!iUh66ma7ONsI#P=?JBDGHpMGX2!rN3aOt+im;{8u(k!OgKbrx32I*JOVv~%)n zCrsC!lg_~NyjAC@Bi(bIlg{J??)-MtQPKEDOTXN1=zWhnzm+^Ex=$U-Pr*=gM*R=KIs@zjsdhrJ1=@H5lGdl!1$L@RYxB2vBm@y@MIh)pg=c zsgrttpNI;%%fEA&kW`SH85Pj#&VdFP~~9(W6eP-;eUw^f~YqA?(}S>8&qC z5&pqfMEDWqZ%urGH5CPPU6{RUcjfi}cDS7Lb`PuEr7PT+h<@D4U8PQTX~tE?pAV)D z3a8(~6^?ODof)pE;uOsFbFsCGqkWm)lII~`T;2_i_`f4(C!0D&?OGJ7xMncCt!ODY zRce{hkJ0`JT#B5N^EHgs52}1m{!0~?$1U1Z0{zJ8V$L~}w>9mxFRsnvN;sL5Y$Zir zWoJmBZMVgev2@$E5YXE$URg(K3&?~-=+aSasuU2T+sTkD%`09K7(IhAOhS|if$&PV z(^H_5?jKsDGOs1e;faiRPQ>9>+FV7nZuGz;vTpiT7!4~P3Aj7T9XYEVDI{Fgj^s*o zmO65iKo|)H@&@zZ#8`BQkG00?f*E=yGp7l;)*Rg|ga`{&KoOYv0fYvWL98&M2q3&eJ<+@j{9(cW^d zNJoE()r$d`XJjSy=c1;ucp}^g?+SqLM3SMthDtdR%=M+&lM0Y4WVPX0u#Ugqr2?>+ z1W`Om=~sM+BE@jDc2=aX=loB&FkGvmd|q1501ZyQgAZ2wXt-l&>7uF@HNtl68V!HX zjYHkVK5`+HJD2jdHk4{krZUqmE=v&;CYLk?^(u|gQ_fsxin$&hm3ZwD$l)CoJl8VEO&l_p;=>-VIt6vUi3?a>eO>iTIqG#Zwi)LYvZ-ZA}-B+tY3;5uRn( z()#S_OL?h?g@|OpDH-55T$T|ToKD38KJJf1tn*3=}(3fiIq65 zxfNIIcTgrp6fGZGyhuP4H`*0Y)#)@NDT&EqbDeUd_$)7&R7FqU#^-vY&6Rw5?8K1C zansN)^&CP$8H-*l+ALR9|#t;qW z6VIOnli>tKqhLIpjpmd2cr>4&`C#tP2IIl3-|x>R-f)b(sXv3>Y=DOIQGYs}?!-)< zf*hR2F}T8uC8OXyP@4VwTmazkm}U5G z(+er>2s7uK4nyzRvG|^$_?r%8n;6k0LaYOh|8{Wj;8clU69dD7kW`5<~MWU%g$i+2$uU_PqD=J%eqFP|@; YFP|@;2Y>!=00030|INk=-~c290P)%*82|tP literal 0 HcmV?d00001 diff --git a/stable/sqlitebrowser/2.0.8/helm-values.md b/stable/sqlitebrowser/2.0.9/helm-values.md similarity index 96% rename from stable/sqlitebrowser/2.0.8/helm-values.md rename to stable/sqlitebrowser/2.0.9/helm-values.md index 54e3cc50592..e6704001893 100644 --- a/stable/sqlitebrowser/2.0.8/helm-values.md +++ b/stable/sqlitebrowser/2.0.9/helm-values.md @@ -21,7 +21,7 @@ You will, however, be able to use all values referenced in the common chart here | podSecurityContext.runAsUser | int | `0` | | | securityContext.readOnlyRootFilesystem | bool | `false` | | | securityContext.runAsNonRoot | bool | `false` | | -| service.main.ports.main.port | int | `3000` | | +| service.main.ports.main.port | int | `10137` | | | service.main.ports.main.targetPort | int | `3000` | | All Rights Reserved - The TrueCharts Project diff --git a/stable/sqlitebrowser/2.0.8/ix_values.yaml b/stable/sqlitebrowser/2.0.9/ix_values.yaml similarity index 96% rename from stable/sqlitebrowser/2.0.8/ix_values.yaml rename to stable/sqlitebrowser/2.0.9/ix_values.yaml index f4ab464207b..358df410689 100644 --- a/stable/sqlitebrowser/2.0.8/ix_values.yaml +++ b/stable/sqlitebrowser/2.0.9/ix_values.yaml @@ -15,7 +15,7 @@ service: main: ports: main: - port: 3000 + port: 10137 targetPort: 3000 persistence: diff --git a/stable/sqlitebrowser/2.0.8/questions.yaml b/stable/sqlitebrowser/2.0.9/questions.yaml similarity index 99% rename from stable/sqlitebrowser/2.0.8/questions.yaml rename to stable/sqlitebrowser/2.0.9/questions.yaml index 0872b891069..832436c9fe4 100644 --- a/stable/sqlitebrowser/2.0.8/questions.yaml +++ b/stable/sqlitebrowser/2.0.9/questions.yaml @@ -375,7 +375,7 @@ questions: description: "This port exposes the container port on the service" schema: type: int - default: 3000 + default: 10137 required: true - variable: advanced label: "Show Advanced settings" diff --git a/stable/sqlitebrowser/2.0.8/security.md b/stable/sqlitebrowser/2.0.9/security.md similarity index 98% rename from stable/sqlitebrowser/2.0.8/security.md rename to stable/sqlitebrowser/2.0.9/security.md index dc03d5e6052..a514399599e 100644 --- a/stable/sqlitebrowser/2.0.8/security.md +++ b/stable/sqlitebrowser/2.0.9/security.md @@ -12,9 +12,9 @@ hide: ##### Scan Results #### Chart Object: sqlitebrowser/templates/common.yaml - - + + | Type | Misconfiguration ID | Check | Severity | Explaination | Links | |:----------------|:------------------:|:-----------:|:------------------:|-----------------------------------------|-----------------------------------------| | Kubernetes Security Check | KSV001 | Process can elevate its own privileges | MEDIUM |

Expand... A program inside the container can elevate its own privileges and run as root, which might give the program control over the container and node.

Container 'hostpatch' of Deployment 'RELEASE-NAME-sqlitebrowser' should set 'securityContext.allowPrivilegeEscalation' to false
|
Expand...https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted
https://avd.aquasec.com/appshield/ksv001
| @@ -52,33 +52,33 @@ hide: #### Container: tccr.io/truecharts/alpine:v3.15.2@sha256:29ed3480a0ee43f7af681fed5d4fc215516abf1c41eade6938b26d8c9c2c7583 (alpine 3.15.2) - + **alpine** - + | Package | Vulnerability | Severity | Installed Version | Fixed Version | Links | |:----------------|:------------------:|:-----------:|:------------------:|:-------------:|-----------------------------------------| -| zlib | CVE-2018-25032 | HIGH | 1.2.11-r3 | 1.2.12-r0 |
Expand...http://www.openwall.com/lists/oss-security/2022/03/25/2
http://www.openwall.com/lists/oss-security/2022/03/26/1
https://access.redhat.com/security/cve/CVE-2018-25032
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25032
https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531
https://github.com/madler/zlib/compare/v1.2.11...v1.2.12
https://github.com/madler/zlib/issues/605
https://ubuntu.com/security/notices/USN-5355-1
https://ubuntu.com/security/notices/USN-5355-2
https://www.openwall.com/lists/oss-security/2022/03/24/1
https://www.openwall.com/lists/oss-security/2022/03/28/1
https://www.openwall.com/lists/oss-security/2022/03/28/3
| +| zlib | CVE-2018-25032 | HIGH | 1.2.11-r3 | 1.2.12-r0 |
Expand...http://www.openwall.com/lists/oss-security/2022/03/25/2
http://www.openwall.com/lists/oss-security/2022/03/26/1
https://access.redhat.com/security/cve/CVE-2018-25032
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25032
https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531
https://github.com/madler/zlib/compare/v1.2.11...v1.2.12
https://github.com/madler/zlib/issues/605
https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html
https://nvd.nist.gov/vuln/detail/CVE-2018-25032
https://ubuntu.com/security/notices/USN-5355-1
https://ubuntu.com/security/notices/USN-5355-2
https://ubuntu.com/security/notices/USN-5359-1
https://www.debian.org/security/2022/dsa-5111
https://www.openwall.com/lists/oss-security/2022/03/24/1
https://www.openwall.com/lists/oss-security/2022/03/28/1
https://www.openwall.com/lists/oss-security/2022/03/28/3
| #### Container: tccr.io/truecharts/alpine:v3.15.2@sha256:29ed3480a0ee43f7af681fed5d4fc215516abf1c41eade6938b26d8c9c2c7583 (alpine 3.15.2) - + **alpine** - + | Package | Vulnerability | Severity | Installed Version | Fixed Version | Links | |:----------------|:------------------:|:-----------:|:------------------:|:-------------:|-----------------------------------------| -| zlib | CVE-2018-25032 | HIGH | 1.2.11-r3 | 1.2.12-r0 |
Expand...http://www.openwall.com/lists/oss-security/2022/03/25/2
http://www.openwall.com/lists/oss-security/2022/03/26/1
https://access.redhat.com/security/cve/CVE-2018-25032
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25032
https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531
https://github.com/madler/zlib/compare/v1.2.11...v1.2.12
https://github.com/madler/zlib/issues/605
https://ubuntu.com/security/notices/USN-5355-1
https://ubuntu.com/security/notices/USN-5355-2
https://www.openwall.com/lists/oss-security/2022/03/24/1
https://www.openwall.com/lists/oss-security/2022/03/28/1
https://www.openwall.com/lists/oss-security/2022/03/28/3
| +| zlib | CVE-2018-25032 | HIGH | 1.2.11-r3 | 1.2.12-r0 |
Expand...http://www.openwall.com/lists/oss-security/2022/03/25/2
http://www.openwall.com/lists/oss-security/2022/03/26/1
https://access.redhat.com/security/cve/CVE-2018-25032
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25032
https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531
https://github.com/madler/zlib/compare/v1.2.11...v1.2.12
https://github.com/madler/zlib/issues/605
https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html
https://nvd.nist.gov/vuln/detail/CVE-2018-25032
https://ubuntu.com/security/notices/USN-5355-1
https://ubuntu.com/security/notices/USN-5355-2
https://ubuntu.com/security/notices/USN-5359-1
https://www.debian.org/security/2022/dsa-5111
https://www.openwall.com/lists/oss-security/2022/03/24/1
https://www.openwall.com/lists/oss-security/2022/03/28/1
https://www.openwall.com/lists/oss-security/2022/03/28/3
| #### Container: tccr.io/truecharts/sqlitebrowser:version-3.12.2-02876202105241947ubuntu18.04.1@sha256:fc18746d4b3c37355ef0015b34c9bdd1d023c528d05097bf6dc839d54234fc48 (ubuntu 18.04) - + **ubuntu** - + | Package | Vulnerability | Severity | Installed Version | Fixed Version | Links | |:----------------|:------------------:|:-----------:|:------------------:|:-------------:|-----------------------------------------| | bash | CVE-2019-18276 | LOW | 4.4.18-2ubuntu1.2 | |
Expand...http://packetstormsecurity.com/files/155498/Bash-5.0-Patch-11-Privilege-Escalation.html
https://access.redhat.com/security/cve/CVE-2019-18276
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18276
https://github.com/bminor/bash/commit/951bdaad7a18cc0dc1036bba86b18b90874d39ff
https://linux.oracle.com/cve/CVE-2019-18276.html
https://linux.oracle.com/errata/ELSA-2021-1679.html
https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3E
https://nvd.nist.gov/vuln/detail/CVE-2019-18276
https://security.gentoo.org/glsa/202105-34
https://security.netapp.com/advisory/ntap-20200430-0003/
https://www.youtube.com/watch?v=-wGtxJ8opa8
| @@ -260,11 +260,11 @@ hide: | libsqlite3-0 | CVE-2020-9849 | LOW | 3.22.0-1ubuntu0.4 | |
Expand...http://seclists.org/fulldisclosure/2020/Dec/32
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9849
https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3E
https://support.apple.com/en-us/HT211843
https://support.apple.com/en-us/HT211844
https://support.apple.com/en-us/HT211850
https://support.apple.com/en-us/HT211931
https://support.apple.com/en-us/HT211935
https://support.apple.com/en-us/HT211952
https://www.rapid7.com/db/vulnerabilities/apple-osx-sqlite-cve-2020-9849/
| | libsqlite3-0 | CVE-2020-9991 | LOW | 3.22.0-1ubuntu0.4 | |
Expand...http://seclists.org/fulldisclosure/2020/Dec/32
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9991
https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3E
https://support.apple.com/en-us/HT211843
https://support.apple.com/en-us/HT211844
https://support.apple.com/en-us/HT211847
https://support.apple.com/en-us/HT211850
https://support.apple.com/en-us/HT211931
https://support.apple.com/kb/HT211846
https://www.rapid7.com/db/vulnerabilities/apple-osx-sqlite-cve-2020-9991/
| | libsqlite3-0 | CVE-2021-36690 | LOW | 3.22.0-1ubuntu0.4 | |
Expand...https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-36690
https://nvd.nist.gov/vuln/detail/CVE-2021-36690
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.sqlite.org/forum/forumpost/718c0a8d17
| -| libssl1.0.0 | CVE-2022-0778 | HIGH | 1.0.2n-1ubuntu5.7 | 1.0.2n-1ubuntu5.8 |
Expand...https://access.redhat.com/security/cve/CVE-2022-0778
https://crates.io/crates/openssl-src
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246
https://linux.oracle.com/cve/CVE-2022-0778.html
https://linux.oracle.com/errata/ELSA-2022-9249.html
https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html
https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/
https://nvd.nist.gov/vuln/detail/CVE-2022-0778
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002
https://rustsec.org/advisories/RUSTSEC-2022-0014.html
https://security.netapp.com/advisory/ntap-20220321-0002/
https://ubuntu.com/security/notices/USN-5328-1
https://ubuntu.com/security/notices/USN-5328-2
https://www.debian.org/security/2022/dsa-5103
https://www.openssl.org/news/secadv/20220315.txt
https://www.tenable.com/security/tns-2022-06
| -| libssl1.1 | CVE-2022-0778 | HIGH | 1.1.1-1ubuntu2.1~18.04.13 | 1.1.1-1ubuntu2.1~18.04.15 |
Expand...https://access.redhat.com/security/cve/CVE-2022-0778
https://crates.io/crates/openssl-src
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246
https://linux.oracle.com/cve/CVE-2022-0778.html
https://linux.oracle.com/errata/ELSA-2022-9249.html
https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html
https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/
https://nvd.nist.gov/vuln/detail/CVE-2022-0778
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002
https://rustsec.org/advisories/RUSTSEC-2022-0014.html
https://security.netapp.com/advisory/ntap-20220321-0002/
https://ubuntu.com/security/notices/USN-5328-1
https://ubuntu.com/security/notices/USN-5328-2
https://www.debian.org/security/2022/dsa-5103
https://www.openssl.org/news/secadv/20220315.txt
https://www.tenable.com/security/tns-2022-06
| +| libssl1.0.0 | CVE-2022-0778 | HIGH | 1.0.2n-1ubuntu5.7 | 1.0.2n-1ubuntu5.8 |
Expand...https://access.redhat.com/security/cve/CVE-2022-0778
https://crates.io/crates/openssl-src
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246
https://linux.oracle.com/cve/CVE-2022-0778.html
https://linux.oracle.com/errata/ELSA-2022-9258.html
https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html
https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/
https://nvd.nist.gov/vuln/detail/CVE-2022-0778
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002
https://rustsec.org/advisories/RUSTSEC-2022-0014.html
https://security.netapp.com/advisory/ntap-20220321-0002/
https://ubuntu.com/security/notices/USN-5328-1
https://ubuntu.com/security/notices/USN-5328-2
https://www.debian.org/security/2022/dsa-5103
https://www.openssl.org/news/secadv/20220315.txt
https://www.tenable.com/security/tns-2022-06
https://www.tenable.com/security/tns-2022-07
| +| libssl1.1 | CVE-2022-0778 | HIGH | 1.1.1-1ubuntu2.1~18.04.13 | 1.1.1-1ubuntu2.1~18.04.15 |
Expand...https://access.redhat.com/security/cve/CVE-2022-0778
https://crates.io/crates/openssl-src
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246
https://linux.oracle.com/cve/CVE-2022-0778.html
https://linux.oracle.com/errata/ELSA-2022-9258.html
https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html
https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/
https://nvd.nist.gov/vuln/detail/CVE-2022-0778
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002
https://rustsec.org/advisories/RUSTSEC-2022-0014.html
https://security.netapp.com/advisory/ntap-20220321-0002/
https://ubuntu.com/security/notices/USN-5328-1
https://ubuntu.com/security/notices/USN-5328-2
https://www.debian.org/security/2022/dsa-5103
https://www.openssl.org/news/secadv/20220315.txt
https://www.tenable.com/security/tns-2022-06
https://www.tenable.com/security/tns-2022-07
| | libstdc++6 | CVE-2020-13844 | MEDIUM | 8.4.0-1ubuntu1~18.04 | |
Expand...http://lists.llvm.org/pipermail/llvm-dev/2020-June/142109.html
http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00039.html
http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00040.html
https://access.redhat.com/security/cve/CVE-2020-13844
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13844
https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability
https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability/downloads/straight-line-speculation
https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability/frequently-asked-questions
https://gcc.gnu.org/pipermail/gcc-patches/2020-June/547520.html
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=679db70801da9fda91d26caf13bf5b5ccc74e8e8
| -| libtiff5 | CVE-2022-0865 | MEDIUM | 4.0.9-5ubuntu0.4 | |
Expand...https://access.redhat.com/security/cve/CVE-2022-0865
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0865
https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0865.json
https://gitlab.com/libtiff/libtiff/-/commit/a1c933dabd0e1c54a412f3f84ae0aa58115c6067
https://gitlab.com/libtiff/libtiff/-/issues/385
https://gitlab.com/libtiff/libtiff/-/merge_requests/306
https://nvd.nist.gov/vuln/detail/CVE-2022-0865
https://www.debian.org/security/2022/dsa-5108
| -| libtiff5 | CVE-2022-0891 | MEDIUM | 4.0.9-5ubuntu0.4 | |
Expand...https://access.redhat.com/security/cve/CVE-2022-0891
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0891
https://gitlab.com/freedesktop-sdk/mirrors/gitlab/libtiff/libtiff/-/commit/232282fd8f9c21eefe8d2d2b96cdbbb172fe7b7c
https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0891.json
https://gitlab.com/libtiff/libtiff/-/commit/232282fd8f9c21eefe8d2d2b96cdbbb172fe7b7c
https://gitlab.com/libtiff/libtiff/-/issues/380
https://gitlab.com/libtiff/libtiff/-/issues/382
https://nvd.nist.gov/vuln/detail/CVE-2022-0891
https://www.debian.org/security/2022/dsa-5108
| +| libtiff5 | CVE-2022-0865 | MEDIUM | 4.0.9-5ubuntu0.4 | |
Expand...https://access.redhat.com/security/cve/CVE-2022-0865
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0865
https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0865.json
https://gitlab.com/libtiff/libtiff/-/commit/a1c933dabd0e1c54a412f3f84ae0aa58115c6067
https://gitlab.com/libtiff/libtiff/-/issues/385
https://gitlab.com/libtiff/libtiff/-/merge_requests/306
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RNT2GFNRLOMKJ5KXM6JIHKBNBFDVZPD3/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZQ4E654ZYUUUQNBKYQFXNK2CV3CPWTM2/
https://nvd.nist.gov/vuln/detail/CVE-2022-0865
https://www.debian.org/security/2022/dsa-5108
| +| libtiff5 | CVE-2022-0891 | MEDIUM | 4.0.9-5ubuntu0.4 | |
Expand...https://access.redhat.com/security/cve/CVE-2022-0891
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0891
https://gitlab.com/freedesktop-sdk/mirrors/gitlab/libtiff/libtiff/-/commit/232282fd8f9c21eefe8d2d2b96cdbbb172fe7b7c
https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0891.json
https://gitlab.com/libtiff/libtiff/-/commit/232282fd8f9c21eefe8d2d2b96cdbbb172fe7b7c
https://gitlab.com/libtiff/libtiff/-/issues/380
https://gitlab.com/libtiff/libtiff/-/issues/382
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RNT2GFNRLOMKJ5KXM6JIHKBNBFDVZPD3/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZQ4E654ZYUUUQNBKYQFXNK2CV3CPWTM2/
https://nvd.nist.gov/vuln/detail/CVE-2022-0891
https://www.debian.org/security/2022/dsa-5108
| | libtiff5 | CVE-2018-10126 | LOW | 4.0.9-5ubuntu0.4 | |
Expand...http://bugzilla.maptools.org/show_bug.cgi?id=2786
https://access.redhat.com/security/cve/CVE-2018-10126
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10126
https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3E
| | libtiff5 | CVE-2020-19131 | LOW | 4.0.9-5ubuntu0.4 | |
Expand...http://blog.topsec.com.cn/%E5%A4%A9%E8%9E%8D%E4%BF%A1%E5%85%B3%E4%BA%8Elibtiff%E4%B8%ADinvertimage%E5%87%BD%E6%95%B0%E5%A0%86%E6%BA%A2%E5%87%BA%E6%BC%8F%E6%B4%9E%E7%9A%84%E5%88%86%E6%9E%90/
http://bugzilla.maptools.org/show_bug.cgi?id=2831
https://access.redhat.com/security/cve/CVE-2020-19131
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-19131
https://lists.debian.org/debian-lts-announce/2021/10/msg00004.html
| | libtiff5 | CVE-2020-19144 | LOW | 4.0.9-5ubuntu0.4 | |
Expand...http://bugzilla.maptools.org/show_bug.cgi?id=2852
https://access.redhat.com/security/cve/CVE-2020-19144
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-19144
https://gitlab.com/libtiff/libtiff/-/issues/159
https://lists.debian.org/debian-lts-announce/2021/10/msg00004.html
https://security.netapp.com/advisory/ntap-20211004-0005/
| @@ -282,7 +282,7 @@ hide: | libvorbisenc2 | CVE-2018-10393 | LOW | 1.3.5-4.2 | |
Expand...https://access.redhat.com/errata/RHSA-2019:3703
https://access.redhat.com/security/cve/CVE-2018-10393
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10393
https://gitlab.xiph.org/xiph/vorbis/issues/2334
https://linux.oracle.com/cve/CVE-2018-10393.html
https://linux.oracle.com/errata/ELSA-2019-3703.html
https://lists.debian.org/debian-lts-announce/2019/11/msg00031.html
https://lists.debian.org/debian-lts-announce/2021/11/msg00023.html
https://nvd.nist.gov/vuln/detail/CVE-2018-10393
https://security.gentoo.org/glsa/202003-36
| | libwind0-heimdal | CVE-2019-12098 | LOW | 7.5.0+dfsg-1 | |
Expand...http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00002.html
http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00003.html
http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00026.html
http://www.h5l.org/pipermail/heimdal-announce/2019-May/000009.html
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12098
https://github.com/heimdal/heimdal/commit/2f7f3d9960aa6ea21358bdf3687cee5149aa35cf
https://github.com/heimdal/heimdal/compare/3e58559...bbafe72
https://github.com/heimdal/heimdal/releases/tag/heimdal-7.6.0
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GIXEDVVMPD6ZAJSMI2EZ7FNEIVNWE5PD/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SLXXIF4LOQEAEDAF4UGP2AO6WDNTDFUB/
https://seclists.org/bugtraq/2019/Jun/1
https://www.debian.org/security/2019/dsa-4455
| | libwind0-heimdal | CVE-2021-3671 | LOW | 7.5.0+dfsg-1 | |
Expand...https://access.redhat.com/security/cve/CVE-2021-3671
https://bugzilla.redhat.com/show_bug.cgi?id=2013080,
https://bugzilla.samba.org/show_bug.cgi?id=14770,
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3671
https://github.com/heimdal/heimdal/commit/04171147948d0a3636bc6374181926f0fb2ec83a
https://nvd.nist.gov/vuln/detail/CVE-2021-3671
https://ubuntu.com/security/notices/USN-5142-1
https://ubuntu.com/security/notices/USN-5174-1
| -| libxml2 | CVE-2022-23308 | MEDIUM | 2.9.4+dfsg1-6.1ubuntu1.4 | 2.9.4+dfsg1-6.1ubuntu1.5 |
Expand...https://access.redhat.com/security/cve/CVE-2022-23308
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23308
https://github.com/GNOME/libxml2/commit/652dd12a858989b14eed4e84e453059cd3ba340e
https://gitlab.gnome.org/GNOME/libxml2/-/blob/v2.9.13/NEWS
https://linux.oracle.com/cve/CVE-2022-23308.html
https://linux.oracle.com/errata/ELSA-2022-0899.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LA3MWWAYZADWJ5F6JOUBX65UZAMQB7RF/
https://nvd.nist.gov/vuln/detail/CVE-2022-23308
https://ubuntu.com/security/notices/USN-5324-1
| +| libxml2 | CVE-2022-23308 | MEDIUM | 2.9.4+dfsg1-6.1ubuntu1.4 | 2.9.4+dfsg1-6.1ubuntu1.5 |
Expand...https://access.redhat.com/security/cve/CVE-2022-23308
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23308
https://github.com/GNOME/libxml2/commit/652dd12a858989b14eed4e84e453059cd3ba340e
https://gitlab.gnome.org/GNOME/libxml2/-/blob/v2.9.13/NEWS
https://linux.oracle.com/cve/CVE-2022-23308.html
https://linux.oracle.com/errata/ELSA-2022-0899.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LA3MWWAYZADWJ5F6JOUBX65UZAMQB7RF/
https://nvd.nist.gov/vuln/detail/CVE-2022-23308
https://security.netapp.com/advisory/ntap-20220331-0008/
https://ubuntu.com/security/notices/USN-5324-1
| | locales | CVE-2021-3999 | MEDIUM | 2.27-3ubuntu1.4 | 2.27-3ubuntu1.5 |
Expand...https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3999.json
https://access.redhat.com/security/cve/CVE-2021-3999
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3999
https://linux.oracle.com/cve/CVE-2021-3999.html
https://linux.oracle.com/errata/ELSA-2022-9234.html
https://ubuntu.com/security/notices/USN-5310-1
https://ubuntu.com/security/notices/USN-5310-2
https://www.openwall.com/lists/oss-security/2022/01/24/4
| | locales | CVE-2009-5155 | LOW | 2.27-3ubuntu1.4 | |
Expand...http://git.savannah.gnu.org/cgit/gnulib.git/commit/?id=5513b40999149090987a0341c018d05d3eea1272
https://access.redhat.com/security/cve/CVE-2009-5155
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-5155
https://debbugs.gnu.org/cgi/bugreport.cgi?bug=22793
https://debbugs.gnu.org/cgi/bugreport.cgi?bug=32806
https://debbugs.gnu.org/cgi/bugreport.cgi?bug=34238
https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E
https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E
https://security.netapp.com/advisory/ntap-20190315-0002/
https://sourceware.org/bugzilla/show_bug.cgi?id=11053
https://sourceware.org/bugzilla/show_bug.cgi?id=18986
https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=eb04c21373e2a2885f3d52ff192b0499afe3c672
https://support.f5.com/csp/article/K64119434
https://support.f5.com/csp/article/K64119434?utm_source=f5support&amp;utm_medium=RSS
https://ubuntu.com/security/notices/USN-4954-1
| | locales | CVE-2015-8985 | LOW | 2.27-3ubuntu1.4 | |
Expand...http://www.openwall.com/lists/oss-security/2017/02/14/9
http://www.securityfocus.com/bid/76916
https://access.redhat.com/security/cve/CVE-2015-8985
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=779392
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8985
https://security.gentoo.org/glsa/201908-06
| @@ -327,7 +327,7 @@ hide: | openssh-client | CVE-2021-36368 | MEDIUM | 1:7.6p1-4ubuntu0.5 | |
Expand...https://bugzilla.mindrot.org/show_bug.cgi?id=3316
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-36368
https://docs.ssh-mitm.at/trivialauth.html
https://github.com/openssh/openssh-portable/pull/258
https://nvd.nist.gov/vuln/detail/CVE-2021-36368
https://www.openssh.com/security.html
| | openssh-client | CVE-2020-14145 | LOW | 1:7.6p1-4ubuntu0.5 | |
Expand...http://www.openwall.com/lists/oss-security/2020/12/02/1
https://access.redhat.com/security/cve/CVE-2020-14145
https://anongit.mindrot.org/openssh.git/commit/?id=b3855ff053f5078ec3d3c653cdaedefaa5fc362d
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14145
https://docs.ssh-mitm.at/CVE-2020-14145.html
https://github.com/openssh/openssh-portable/compare/V_8_3_P1...V_8_4_P1
https://github.com/ssh-mitm/ssh-mitm/blob/master/ssh_proxy_server/plugins/session/cve202014145.py
https://linux.oracle.com/cve/CVE-2020-14145.html
https://linux.oracle.com/errata/ELSA-2021-4368.html
https://nvd.nist.gov/vuln/detail/CVE-2020-14145
https://security.gentoo.org/glsa/202105-35
https://security.netapp.com/advisory/ntap-20200709-0004/
https://www.fzi.de/en/news/news/detail-en/artikel/fsa-2020-2-ausnutzung-eines-informationslecks-fuer-gezielte-mitm-angriffe-auf-ssh-clients/
https://www.fzi.de/fileadmin/user_upload/2020-06-26-FSA-2020-2.pdf
| | openssh-client | CVE-2021-41617 | LOW | 1:7.6p1-4ubuntu0.5 | |
Expand...https://access.redhat.com/security/cve/CVE-2021-41617
https://bugzilla.suse.com/show_bug.cgi?id=1190975
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41617
https://linux.oracle.com/cve/CVE-2021-41617.html
https://linux.oracle.com/errata/ELSA-2021-9575.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6XJIONMHMKZDTMH6BQR5TNLF2WDCGWED/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KVI7RWM2JLNMWTOFK6BDUSGNOIPZYPUT/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W44V2PFQH5YLRN6ZJTVRKAD7CU6CYYET/
https://nvd.nist.gov/vuln/detail/CVE-2021-41617
https://security.netapp.com/advisory/ntap-20211014-0004/
https://www.openssh.com/security.html
https://www.openssh.com/txt/release-8.8
https://www.openwall.com/lists/oss-security/2021/09/26/1
| -| openssl | CVE-2022-0778 | HIGH | 1.1.1-1ubuntu2.1~18.04.13 | 1.1.1-1ubuntu2.1~18.04.15 |
Expand...https://access.redhat.com/security/cve/CVE-2022-0778
https://crates.io/crates/openssl-src
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246
https://linux.oracle.com/cve/CVE-2022-0778.html
https://linux.oracle.com/errata/ELSA-2022-9249.html
https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html
https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/
https://nvd.nist.gov/vuln/detail/CVE-2022-0778
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002
https://rustsec.org/advisories/RUSTSEC-2022-0014.html
https://security.netapp.com/advisory/ntap-20220321-0002/
https://ubuntu.com/security/notices/USN-5328-1
https://ubuntu.com/security/notices/USN-5328-2
https://www.debian.org/security/2022/dsa-5103
https://www.openssl.org/news/secadv/20220315.txt
https://www.tenable.com/security/tns-2022-06
| +| openssl | CVE-2022-0778 | HIGH | 1.1.1-1ubuntu2.1~18.04.13 | 1.1.1-1ubuntu2.1~18.04.15 |
Expand...https://access.redhat.com/security/cve/CVE-2022-0778
https://crates.io/crates/openssl-src
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246
https://linux.oracle.com/cve/CVE-2022-0778.html
https://linux.oracle.com/errata/ELSA-2022-9258.html
https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html
https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/
https://nvd.nist.gov/vuln/detail/CVE-2022-0778
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002
https://rustsec.org/advisories/RUSTSEC-2022-0014.html
https://security.netapp.com/advisory/ntap-20220321-0002/
https://ubuntu.com/security/notices/USN-5328-1
https://ubuntu.com/security/notices/USN-5328-2
https://www.debian.org/security/2022/dsa-5103
https://www.openssl.org/news/secadv/20220315.txt
https://www.tenable.com/security/tns-2022-06
https://www.tenable.com/security/tns-2022-07
| | passwd | CVE-2013-4235 | LOW | 1:4.5-1ubuntu2 | |
Expand...https://access.redhat.com/security/cve/CVE-2013-4235
https://access.redhat.com/security/cve/cve-2013-4235
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4235
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4235
https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3E
https://security-tracker.debian.org/tracker/CVE-2013-4235
| | passwd | CVE-2018-7169 | LOW | 1:4.5-1ubuntu2 | 1:4.5-1ubuntu2.2 |
Expand...https://access.redhat.com/security/cve/CVE-2018-7169
https://bugs.launchpad.net/ubuntu/+source/shadow/+bug/1729357
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7169
https://github.com/shadow-maint/shadow/pull/97
https://security.gentoo.org/glsa/201805-09
https://ubuntu.com/security/notices/USN-5254-1
| | perl-base | CVE-2020-16156 | MEDIUM | 5.26.1-6ubuntu0.5 | |
Expand...http://blogs.perl.org/users/neilb/2021/11/addressing-cpan-vulnerabilities-related-to-checksums.html
https://access.redhat.com/security/cve/CVE-2020-16156
https://blog.hackeriet.no/cpan-signature-verification-vulnerabilities/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16156
https://github.com/andk/cpanpm/commit/b27c51adf0fda25dee84cb72cb2b1bf7d832148c
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SD6RYOJII7HRJ6WVORFNVTYNOFY5JDXN/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SZ32AJIV4RHJMLWLU5QULGKMMIHYOMDC/
https://metacpan.org/pod/distribution/CPAN/scripts/cpan
| @@ -357,11 +357,11 @@ hide: | xserver-xorg-core | CVE-2021-4009 | MEDIUM | 2:1.19.6-1ubuntu4.9 | 2:1.19.6-1ubuntu4.10 |
Expand...https://access.redhat.com/security/cve/CVE-2021-4009
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4009
https://linux.oracle.com/cve/CVE-2021-4009.html
https://linux.oracle.com/errata/ELSA-2022-0003.html
https://lists.debian.org/debian-lts-announce/2021/12/msg00035.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NKLSZCY47QK4RCJFXITYFALCGPJAFXOK/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NXTRPFEQLFZ6NT2LPLZEID664RGC3OCC/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PDHYZM6FII35JA7J275MFCJO6ADJUPQX/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T57DCF726O5LLTST4NBL5PQ7DLPB46HT/
https://lists.x.org/archives/xorg-announce/2021-December/003122.html
https://lists.x.org/archives/xorg-announce/2021-December/003124.html
https://security.netapp.com/advisory/ntap-20220114-0004/
https://ubuntu.com/security/notices/USN-5193-1
https://ubuntu.com/security/notices/USN-5193-2
https://www.debian.org/security/2021/dsa-5027
https://www.openwall.com/lists/oss-security/2021/12/14/1
https://www.zerodayinitiative.com/advisories/ZDI-21-1548/
| | xserver-xorg-core | CVE-2021-4011 | MEDIUM | 2:1.19.6-1ubuntu4.9 | 2:1.19.6-1ubuntu4.10 |
Expand...https://access.redhat.com/security/cve/CVE-2021-4011
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4011
https://linux.oracle.com/cve/CVE-2021-4011.html
https://linux.oracle.com/errata/ELSA-2022-0003.html
https://lists.debian.org/debian-lts-announce/2021/12/msg00035.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NKLSZCY47QK4RCJFXITYFALCGPJAFXOK/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NXTRPFEQLFZ6NT2LPLZEID664RGC3OCC/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PDHYZM6FII35JA7J275MFCJO6ADJUPQX/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T57DCF726O5LLTST4NBL5PQ7DLPB46HT/
https://lists.x.org/archives/xorg-announce/2021-December/003122.html
https://lists.x.org/archives/xorg-announce/2021-December/003124.html
https://security.netapp.com/advisory/ntap-20220114-0004/
https://ubuntu.com/security/notices/USN-5193-1
https://ubuntu.com/security/notices/USN-5193-2
https://www.debian.org/security/2021/dsa-5027
https://www.openwall.com/lists/oss-security/2021/12/14/1
https://www.zerodayinitiative.com/advisories/ZDI-21-1550/
| | xutils | CVE-2012-1093 | LOW | 1:7.7+19ubuntu7.1 | |
Expand...http://vladz.devzero.fr/012_x11-common-vuln.html
http://www.openwall.com/lists/oss-security/2012/02/29/1
http://www.openwall.com/lists/oss-security/2012/03/01/1
https://access.redhat.com/security/cve/cve-2012-1093
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1093
https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3E
https://security-tracker.debian.org/tracker/CVE-2012-1093
| -| zlib1g | CVE-2018-25032 | MEDIUM | 1:1.2.11.dfsg-0ubuntu2 | 1:1.2.11.dfsg-0ubuntu2.1 |
Expand...http://www.openwall.com/lists/oss-security/2022/03/25/2
http://www.openwall.com/lists/oss-security/2022/03/26/1
https://access.redhat.com/security/cve/CVE-2018-25032
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25032
https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531
https://github.com/madler/zlib/compare/v1.2.11...v1.2.12
https://github.com/madler/zlib/issues/605
https://ubuntu.com/security/notices/USN-5355-1
https://ubuntu.com/security/notices/USN-5355-2
https://www.openwall.com/lists/oss-security/2022/03/24/1
https://www.openwall.com/lists/oss-security/2022/03/28/1
https://www.openwall.com/lists/oss-security/2022/03/28/3
| +| zlib1g | CVE-2018-25032 | MEDIUM | 1:1.2.11.dfsg-0ubuntu2 | 1:1.2.11.dfsg-0ubuntu2.1 |
Expand...http://www.openwall.com/lists/oss-security/2022/03/25/2
http://www.openwall.com/lists/oss-security/2022/03/26/1
https://access.redhat.com/security/cve/CVE-2018-25032
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25032
https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531
https://github.com/madler/zlib/compare/v1.2.11...v1.2.12
https://github.com/madler/zlib/issues/605
https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html
https://nvd.nist.gov/vuln/detail/CVE-2018-25032
https://ubuntu.com/security/notices/USN-5355-1
https://ubuntu.com/security/notices/USN-5355-2
https://ubuntu.com/security/notices/USN-5359-1
https://www.debian.org/security/2022/dsa-5111
https://www.openwall.com/lists/oss-security/2022/03/24/1
https://www.openwall.com/lists/oss-security/2022/03/28/1
https://www.openwall.com/lists/oss-security/2022/03/28/3
| **node-pkg** - + | Package | Vulnerability | Severity | Installed Version | Fixed Version | Links | |:----------------|:------------------:|:-----------:|:------------------:|:-------------:|-----------------------------------------| | deep-extend | CVE-2018-3750 | CRITICAL | 0.4.2 | 0.5.1 |
Expand...https://access.redhat.com/security/cve/CVE-2018-3750
https://github.com/advisories/GHSA-hr2v-3952-633q
https://hackerone.com/reports/311333
https://nodesecurity.io/advisories/612
https://nvd.nist.gov/vuln/detail/CVE-2018-3750
https://www.npmjs.com/advisories/612
| @@ -375,7 +375,7 @@ hide: **gobinary** - + | Package | Vulnerability | Severity | Installed Version | Fixed Version | Links | |:----------------|:------------------:|:-----------:|:------------------:|:-------------:|-----------------------------------------| | github.com/containerd/containerd | CVE-2021-43816 | CRITICAL | v1.5.4 | 1.5.9 |
Expand...https://access.redhat.com/security/cve/CVE-2021-43816
https://github.com/containerd/containerd/commit/a731039238c62be081eb8c31525b988415745eea
https://github.com/containerd/containerd/issues/6194
https://github.com/containerd/containerd/security/advisories/GHSA-mvff-h3cj-wj9c
https://github.com/dweomer/containerd/commit/f7f08f0e34fb97392b0d382e58916d6865100299
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GD5GH7NMK5VJMA2Y5CYB5O5GTPYMWMLX/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MPDIZMI7ZPERSZE2XO265UCK5IWM7CID/
https://nvd.nist.gov/vuln/detail/CVE-2021-43816
| @@ -385,4 +385,3 @@ hide: | github.com/docker/distribution | GMS-2022-20 | UNKNOWN | v2.7.1+incompatible | v2.8.0 |
Expand...https://github.com/advisories/GHSA-qq97-vm5h-rrhg
https://github.com/distribution/distribution/commit/b59a6f827947f9e0e67df0cfb571046de4733586
https://github.com/distribution/distribution/security/advisories/GHSA-qq97-vm5h-rrhg
https://github.com/opencontainers/image-spec/pull/411
| | github.com/opencontainers/image-spec | GMS-2021-101 | UNKNOWN | v1.0.1 | 1.0.2 |
Expand...https://github.com/advisories/GHSA-77vh-xpmg-72qh
https://github.com/opencontainers/distribution-spec/security/advisories/GHSA-mc8v-mgrf-8f4m
https://github.com/opencontainers/image-spec/commit/693428a734f5bab1a84bd2f990d92ef1111cd60c
https://github.com/opencontainers/image-spec/releases/tag/v1.0.2
https://github.com/opencontainers/image-spec/security/advisories/GHSA-77vh-xpmg-72qh
| | golang.org/x/text | CVE-2021-38561 | UNKNOWN | v0.3.4 | 0.3.7 |
Expand...https://go-review.googlesource.com/c/text/+/340830
https://go.googlesource.com/text/+/383b2e75a7a4198c42f8f87833eefb772868a56f
https://pkg.go.dev/vuln/GO-2021-0113
| - diff --git a/stable/sqlitebrowser/2.0.8/templates/common.yaml b/stable/sqlitebrowser/2.0.9/templates/common.yaml similarity index 100% rename from stable/sqlitebrowser/2.0.8/templates/common.yaml rename to stable/sqlitebrowser/2.0.9/templates/common.yaml diff --git a/stable/sqlitebrowser/2.0.9/values.yaml b/stable/sqlitebrowser/2.0.9/values.yaml new file mode 100644 index 00000000000..e69de29bb2d diff --git a/stable/wireshark/1.0.9/CHANGELOG.md b/stable/wireshark/1.0.10/CHANGELOG.md similarity index 91% rename from stable/wireshark/1.0.9/CHANGELOG.md rename to stable/wireshark/1.0.10/CHANGELOG.md index 7a75c11d544..a797f67a8aa 100644 --- a/stable/wireshark/1.0.9/CHANGELOG.md +++ b/stable/wireshark/1.0.10/CHANGELOG.md @@ -1,6 +1,15 @@ # Changelog
+ +### [wireshark-1.0.10](https://github.com/truecharts/apps/compare/wireshark-1.0.9...wireshark-1.0.10) (2022-04-03) + +#### Fix + +* rw root fs / hostnet ([#2389](https://github.com/truecharts/apps/issues/2389)) + + + ### [wireshark-1.0.9](https://github.com/truecharts/apps/compare/wireshark-1.0.8...wireshark-1.0.9) (2022-03-31) @@ -88,12 +97,3 @@ #### Chore * update helm general non-major helm releases ([#1927](https://github.com/truecharts/apps/issues/1927)) - - - - -### [wireshark-0.0.21](https://github.com/truecharts/apps/compare/wireshark-0.0.20...wireshark-0.0.21) (2022-02-15) - -#### Chore - -* update helm general non-major helm releases ([#1901](https://github.com/truecharts/apps/issues/1901)) diff --git a/stable/wireshark/1.0.10/CONFIG.md b/stable/wireshark/1.0.10/CONFIG.md new file mode 100644 index 00000000000..c147b7c819c --- /dev/null +++ b/stable/wireshark/1.0.10/CONFIG.md @@ -0,0 +1,7 @@ +# Configuration Options + +##### Connecting to other apps +If you need to connect this App to other Apps on TrueNAS SCALE, please refer to our [Linking Apps Internally](https://truecharts.org/manual/Quick-Start%20Guides/06-linking-apps/) quick-start guide. + +##### Available config options +In the future this page is going to contain an automated list of options available in the installation/edit UI. diff --git a/stable/wireshark/1.0.10/Chart.lock b/stable/wireshark/1.0.10/Chart.lock new file mode 100644 index 00000000000..8ddbafdea93 --- /dev/null +++ b/stable/wireshark/1.0.10/Chart.lock @@ -0,0 +1,6 @@ +dependencies: +- name: common + repository: https://library-charts.truecharts.org + version: 9.2.7 +digest: sha256:927fec2499d55b3de8a7522d936aaf4f21f668370deb33239fb06f12051ff5b1 +generated: "2022-04-03T13:18:28.36572365Z" diff --git a/stable/wireshark/1.0.9/Chart.yaml b/stable/wireshark/1.0.10/Chart.yaml similarity index 95% rename from stable/wireshark/1.0.9/Chart.yaml rename to stable/wireshark/1.0.10/Chart.yaml index b7564ed6cac..8e539895d9e 100644 --- a/stable/wireshark/1.0.9/Chart.yaml +++ b/stable/wireshark/1.0.10/Chart.yaml @@ -1,7 +1,7 @@ apiVersion: v2 kubeVersion: ">=1.16.0-0" name: wireshark -version: 1.0.9 +version: 1.0.10 appVersion: "3.4.13" description: Wireshark is the world’s foremost and widely-used network protocol analyzer. type: application @@ -15,7 +15,7 @@ sources: dependencies: - name: common repository: https://library-charts.truecharts.org - version: 9.2.6 + version: 9.2.7 # condition: maintainers: - email: info@truecharts.org diff --git a/stable/wireshark/1.0.9/README.md b/stable/wireshark/1.0.10/README.md similarity index 95% rename from stable/wireshark/1.0.9/README.md rename to stable/wireshark/1.0.10/README.md index f4a95f1ad09..5d884d75dd7 100644 --- a/stable/wireshark/1.0.9/README.md +++ b/stable/wireshark/1.0.10/README.md @@ -17,7 +17,7 @@ Kubernetes: `>=1.16.0-0` | Repository | Name | Version | |------------|------|---------| -| https://library-charts.truecharts.org | common | 9.2.6 | +| https://library-charts.truecharts.org | common | 9.2.7 | ## Installing the Chart diff --git a/stable/wireshark/1.0.9/app-readme.md b/stable/wireshark/1.0.10/app-readme.md similarity index 100% rename from stable/wireshark/1.0.9/app-readme.md rename to stable/wireshark/1.0.10/app-readme.md diff --git a/stable/wireshark/1.0.10/charts/common-9.2.7.tgz b/stable/wireshark/1.0.10/charts/common-9.2.7.tgz new file mode 100644 index 0000000000000000000000000000000000000000..a9740f24e96674d7963856d7eed72d9d8e8389d9 GIT binary patch literal 44112 zcmV);K!(2`iwG0|00000|0w_~VMtOiV@ORlOnEsqVl!4SWK%V1T2nbTPgYhoO;>Dc zVQyr3R8em|NM&qo0PMYcciT9UC_aDdQ{XC@+jd{;X<4?loBgfZNq75n9zL;?-rdgOs;daGw0- z{-18Q+Z_%D^51T^Tl}{>-0%LSH|Y2K{los@{{COOz5ZZ0_zUPh04}9x!8oLU>E5}m zV(0!K56tjKL>VUO2rT;zm}T~70y$#55hE5+oN@W?`$Zawzd(Y=6w(!#5DG5o0!ap9 zjTxDv5twnFu~DZp#eB9Hw<9v|aJoQ|EYpEm#yXrL)R{xZ5$)*riWM6;5)By;a0xl2 ztgS#T7@`qLIZC;Ny67AZ2i@-B!9n91t!@a7*{IP1d1H;1!L%h`G+ID6bG;ZN+tqLW z<3+FC8@9Wx?l+A_e3MN|SqbBL1>!0CkiXAZbc=(GVq3Ppb%0syd}NsfM@f-0^t z;HwOc40?^F!R5H!Zyz=uYy9>6U&3U8*aHcG+WFt>^#b$%uz&D0{~zOd23jrfE<@?Z z^S6LyD8dsQfrz9NJY7&I=6d59_|F(k;3DCo@C8C(j1qFwAQ?)RS$Z~yQ#5J-AYold z7%RYM2#&!~MhK@o;i9IUG)o z&}1;_jR%K=alhXmA9W87QTMnvhTZW19ZZJ(@OI=g1nz|P9hSW9X*Tbq776;vfcz>|p zMe$+OiwFA?6!(teaop=29*z%(C>jqZ(f;AE*V`XQgI>Hph+%)f8x6XBI5;{u*r4rd z>YgMwaK$uTBN8Kq=n~OwDVx`j}DH< z{o(P!pnE(#=pRGaJwiwOV>FKY-R>ZU!{K0p&@mhjqvKu=4JHTT&%x1V&2PoUFv)O= zwxzVHRZZm+1$9FLD`@NBcx2sg_YQK=&_71;{@|z!y9f>TCx>t{JnBtQd=L*NQNMR^ z&>O<>q!$f(2*zl5yni(A596cgIO<1-2S@vBo8C_B62_+#v0t_qytZbI=*^*TDtv8? zP2l;3eA;%~hwXhs+vs@MKRAr{ zqoe)9!{fnGe=>=?`^S@m=-_BL8Fmj2`-3q&=pT0nDgh*BIQ zX;4rq37X)~fK24C$s$R_=2>sK-|5mG6j2VP98)CAfEZ11isd)~3&5?3*~RI}>sKQ% zfeAy6MnqChNs=IH;i43d6Qmay^R?Xo`a?XDwuT}Wc~KxX`EB|ABTR4%h%}@y0I5JQ zOUP=DQoaXbh~^|^hyy|ak8u3cfaNFfvD)@Xr7M(oUe>%0FFP?vB9-eEC|@y9AC=vJF^O;jVqU zWwUNa-Y({2L}UbC3t$?9_asShI{lEvkZZmaur73OE>IBIyYwYW5JzPYId}!^ zr6h#_1MoB@R7@Sr#5aS#m|D~YAznD$&uLs}X%0VwMGBV?Ct~W!TF&onz_10KDgg4Y zLRDvI3w1L{xe+KJ|7E4cdo`j02t`ZGFiF7-Ga=SNg6EjaQCA;+RPSGl*CVjsXkc%# zP%<@N7W_5BFO>^@|9z!I){C25p1=i4P{auZFiFS_lL8n)wgMTBu5mgA5X5*gK{PjX z#5m%60M9c*IZU~g*;1T>A3mI^&KSre(3HQM4c)L2!kX9TbC||EY}djuYpR$A(h%Fw zh2&HYz<_khYHEwmPSuk*RyA;HMGWA?Kw8K-1;p@=R|Zzx3;0+ObQwX459xlpY%)Q95AG({;=%7|Gi zH2|fk%wgs(R%)Ts5G)1HA)kQ-6JtF?$s8<&zBEn{lO;3AXCv@U=bKVJ(b|kKzNdKR zGn{7$8VRB)U=TzL#>pIk0ZA!z-wn31@Vk@zIA^aU1);1bbz<}|iR3vxvWBIqwMy5?(t z_1YY*@WSOmbx?VUIHGf$A_i_|NDw-oHEMc@s(>z125vB)fy>MPHr&*1aK5s-)9t`9 z9^*6zD1Z7OpvP$m%*tNi=`>RA)O*V z5{#6u6KF{H2|6R9hp`4z7_`q?3|0&1%9MK4+Tu5_K@F*|$2F(dw z)fQE~K2>WsLv)EF1fz&7QeL^+(8W$vvBG`>JA(lYM4&+eHY1B924e)2x)3*j{>u)7 zhUW0Hkd-iwjmRv(45)Ml#^p?_=2}!0vEc+Pm{v>9CLkqTN@1aOXl({Fsc`QBr~qMR zBp`~l)N!{9fTMYqK#uHDU9;(v7=qJe!8oGtNuu-{=l6Fwjd41yBs?9%$ddb&^zk=QDNMyI!g5n6#dKL<<~YN_E<8bV%o zWC<(;1fhVUxuBQsve?S9Hh7om5!6fg9zgnE{i3CQ3$0aFyp&sDF?WN|k^61H>subOIweg69c>Obi@=H;|$c zxD+tPs|+%R7`Q%ShHaQo8xc)ma%KQ9XSXW!CHr9nnkZ%aO}%Nw8Jv&w-`YaZjAv2S ztf)Jt-MXq`&x0dV0;r#7=clfAf+N35j2Oo$RGuWw zZd?9e$KoZQDdgw|u0|ewyK%51!U@Pown&r+XJWIY+J z2Bpr;kh{qhs|`vcy2`}F&Ncr%wf@L;QmUd8v8@%GII#`(Le^Rc&QC5bet!4<GFF@=Jq!L?RL9?(xsMg&%j56lyyh@S07Jae|R+l%|Jg@&1Mbm z67L;nQ?n~EdP#258%Seta(*T%3-N3meXbW{L{r2OYh%)hNyIuFvTN4CsaOwMG32lX zGpRs|(djtD+A_o1LZ36jP%9&G3#Su8=c=se<90}9cx9?uQx_W!^=9QUb6O5Ah zJ(}c`PQE#p8#pl$+9`>VphBZzhSlsY)OPU=%w&C4+juL9FReMuT6*Kr(i5&!RK2#v zTHsXe|1ydR#e4;#1TwWz&rJ$kETxjW$I7hCq8W-8Lb*5fPDQo1vI+1EuodHI-V%Lj zMHI`8qS-Ad6NaAj-X7FKmAE$SPYV{_T#LbN#W0;BN*1h@BT@w&eHH_XxfHjOhZ*8r zC@L#f$g6UN`F6&lRpH3CfN22xld4&s!V#gc$eS|#}&Q^v)V`BByV)Np_l z_h9+j-E^xr0iJkmW2P!f`PQsxDO5{n;O&M*R8r5aZY(sJ-r>G{dtvCp_Us9Y(bdzK zaHeGzn8OvIh>>K8K*|zAt``}=j4hOACw98vCp*;y)J4W5E^4U~tZ&7iT6Gj_%2pam zfaz^>v)9zy0(ER`mR^P+jb_Nz1eBuH(Mpy?+c&%fg|uXJv(yXu{I|bRH2M4AcWQ)2 zMA8UloOMjSmR9C)Iu##NAxs=O!dkju=b2h~a5`=A88WYT8)|*HP(NSe^qTn$V+>H| zl*ona149&?y#zbwAI@Ixik=Di1Q^QXHY-_)6>K4gj z-)O!t6>89eA*n41_BM4-Ny^b@-i}}f$2h@U>{H2tGaTFP;SV3q#Gw0TFg2Y|ooWJ& zn37BnAB@$j&I6+g_@<9=d-=)b) zwEI0ykdmkNBukos&rQ8oEP{zv*(?A-fwx2=ZmUIw5%I>PepC`XLD4EoP*ull0cTfr zDfKtUyri`Qf!!W}48RoN6mwf*Pbi8wor?L3=LkR!aLPDL5q)o$ot)?&-vsgIA(Sue7oF z%-|9MEClaO3a*h6HR;vYGYfvBy;4R98p#WfTaE`)WoJ|$n2kWMtG{N5V!6l`-U|sy7TkU~(C;S@Cku)$XB07k zu=tXnwZ;(Nir4Kl3p2a@{2<(Jp+B+vHtg<`?VkBP4E*=T@E2-L*qYt-S`ub<<^sKE zR@bnf7=0T?cZqh-Y#suAA530k=DvRa?3uEB&k;-+z#Pnko($&jGoCNz0;_{>_q#88 z2VJo%6m=yV2`s@P17l@q#azw`7M@Yn6KB|MG?c~)Js%x^>mkP$a&R-lk+L06u$UUe zdE;+JzG1)t3+9M1IJLG(a6>WYC~ceOl%80pCQ>8~VG(jZwqS-kV%MJ#7`G^5WI-du zIzok9_Bzk(hN#us75giVg|zfpfpM0`I1-zT8M)cKBl(H2F|fx~{)?Z)?(vf}AAR~B zCdn8^*O%lqnX-53D@qCd^c#`Ecsc3DUurQ4aGGYtR+8a4 zP9Qa>Bi{&?{KkM;i}gtQVc@j1mX(h{b&bH1me+j)ug!6ixwEm3r5?D7rb$(v(RW&^k3$Ola&v!5IJWJ5d zYXajjOkf%zy1NI&&+qilJ!3gOJKqCuNsP{wdzV?r?N?<*3VJJ7`1V$M_v#LuQ?eAD zu5cDp3&0$%q?rf(vcOb{!k~Xkz~T6oXx+-~xVlRkR84OZ&p)HIOggZ%5m~z60q1~9 zi-vV7g{YPj$my|jrvPXA$iMA!Q94b~1&7h~9yphx_T>U5`o(+I8T&@U#o708j+2$K zvN|9dzJ7)?FcC$u6dcfXiINtg9F4Q{3N$7}p}}r%rRd zJVQT2y#Z+#xa@=#Qi~QhS|JAFS_F^zfmAeYcQ8KHa zx1utaQg=N+v`2*kvOGW+9n5E%!E{to3$=5U5Z>#xLTRh7mSF0$Be*p1g7){fzc-v# zE0tAUW)p2SFM2n1Rl})PSB)##=IW{;fhSI_w_dF*HGc7T)K{%5URaizRvuhmwZyGc zSWgz5BsjfxX{Y@0T%jnKdk>5WpXIJ$Odue!fF9+wVz=PrHBPU~w6{n9#9VBGsdW(p za~#LX4W!5&!SC^B6u%K)ko;7ljGRqmqH3!$MyhcN(F9++U#^dsa#qM-gp3QeK-k`u z(2$j9vpkZ_71f*qE=)lsm}N-phy{G{TQ{AzWqsN5n(Cu&FTWOJN76g8x47mramRQQ z?0V=39La(M=?10!L*}M+l*X+E)9di0NLww#T4MI&v^9ndM=rzUZT~5#K6ly59I^jC zH%Dgi@)s*J?W9N82&7Y-ey%9W6V`%}blw*esQCxqZr$@n&1}OpL8YtQCZhG3**G!R zp-RR3e3B~Eev^fh7z#0|Bm-g*>1UV!&LI%cp^OJ{fV`7-iYWI^&wTc`-tZwNE-JX0 z;1$LNg=_GBXu9)PI|n9ZCRIB zEmW%VoAvaekSnwv#L#+3Z?MyF%HDRXp+I~Ch`di!z1Oh!dgHDAx}RUwi+2FlT^01}hBO5Uz!n2Bmc)lk%Vh^Bs##b*f-O~%+ zUOwgaZgU zC*Zub7j!NBpQWXO6SY_=zX_5o=E&^W{3C5cVD}Ehr_R3%bgszciqFuMs{S9J_H3Ag%xT{^HY~=lWtnAQ~_t=zf*qi8;+@@-|MwkODcyOOyhpdZjv5uD?j7 z#Tdn4$3bIv52VDaDwR;_#v_kY#blWgYo7?AuNrY-sLfN$|X~@|MdR;)V({5|I~p^-XTdBwCS|+OfK!IVUl)b0#2)suy{+VKq-U)>@@BZZs0jQ)QnOGc6FT_fNSbk(t zNgIa$iALb~`1l8Gfh$u2ky{tVkwU7f>oFfs!6G9m_#^|wEK+?};**wCqF^z0!KvMi znAOH`h8T<)q(V#KHwdKwCa(K`!=dsvM7ETb?Zuex*84>Y6ylMu=s&Ig0T@+ANzY+D9{Az98W9Y{J0K`;#}VF^sOoIN1w0yJp5{pw??o4Y2_%Mq1Qm z_H0QnLh`$uRjOfM)X2lH3;a){K7J=#|EMVT2}}^=Vwy~Kj15hXJt?6gn3}~hKN7_M zRP%2x!2#VHJp?(A>F`$I8R#ia`$MqC64HcB*)4fv328@Ef8vfu<_;zF&^#kDHHD^4 z?MRE#w;X0Z&whsktVj3HH@J^C_30uVRqcE?nEG^)KJmroe9>?Y1Ef+ZiINel)M9xX zHMdm?oI49fJ7b)J2}xo^mH&x4osCI!jc7}3Mu`q|cNdnKX`Jd=<{7wr_wpUkAu{Ej zi%1K~e@Tz`aY7^^O1KH=tp%g4F)lKkl|d(E+{F^Y0DVzgYd0Nf+-W3+TOx5lwR8aFaT=a?~R&{OxIq8YhKRXn2EoTw#% zA%310ELn>lZ9JRc8R*PcFWvrJxPe$q)yq{TO{NS$5Y13@ZLa!oy3(dNA6J8w7%1ng zIwp|})vAr*gc|FoPh%T9tjZuK$+3kw&Uo>ZSys8b|Aw5a%)A>gu(1c$i4!`+O3R~gMQcfq>kR^tCorNRKZu~z!c*p3-JM?;;w2@c7JN!C{%-s*1UanSz2{QJ=C8ys=%RI`4#b^N%^##$9#KhV1M z4M({M^=X8w1XP?0DC-6-X*74wW*mBYqT}%JFevNvXeqyo@?gpLxgX&*T8+ShA!<*Y zf%V3luUb<|7FlP$YS|)3ECMTSbOWbgf6?t$gVo1U0>rpr-t;PH&|7Uujskgf2olV=6DocT zqw7UhYQ=eNkK*_YU8ujeXutmhR=>P+&S-{U*3$1<(!Ezx{jJ~&bqXg49+8xB3b71q zzSSb8!ZPA?+Cod^fYX7D;b|&EETtqyooA`cfu}C6?l#1)3-21M!*>k8iM%FOdAQ}XnVn3{X(@;bV@lWrPlG1)>Z zCx%cIs+wmugym z8%{s$xZ=!-#@uW7x?Lp&ET&45wLsH2vqogzH1BS1Zra{^KkB3ji(rnf8R)1~IjkZW zV7p->DU2H68Tc821zX5eArwVqK1XRR9gdukG*tq)5ng zNLMPJwGM->wih&6fiabrPT+(i3ckr{{7qYihZ7^B*4-#ujKHAV?auW9!(3*qJNg03 z*jj27oua)$!GrD_oJUpE$MfT1O#FcDLuB{sn(0Hbnuv9a@F>BOTQooc-- zVI12C=Cv(b-_DQcZ*}u+aK<-i8t7zN@>U&ACuC1s1jvGezmWwMn|!7w^Qa?dZ~OX) zwIFZJ$Xw2j4q4Dv9&O*`#BZ4#_L>}>XEtGTYni2C!;lksyaB*6bFU$~y0Yk}%u*N1 zP^Z1P_H4pyLV=qs+GeNI1>Jjp^-0B5x$2wgy1{(!sSXcglyVG}+oTSMYwS9ru?sJF zhn#gSxNBhuMONFOOsI8rwnY|Gb8Erqiq^~mY}wp9@fs(|#SP}s%rVTP&oWO$tV1QU ztF!avz3tllmfR6|<}AGv6TMOi#3m};nDsD}80+oc(lbKXWLdvsggqx@0G_#C z$S7UrCX#Z#CQx!E&J%OQ67jOjx84>>4jnTUmjTsty~&!9 z=MgUl52TAUEmI*@5)Y=UngHr9d~5c62r=O%T)&O9aOyv((C}#IG^%qX zO8qa-V`wZ=V#kIB>lu4fOIk%#Vu~13b$#A(7fpzc*TD(MsA|L;3WbI9>n@TL#dB47xO~{ z(;3F3uefrvhFNBUU8`wfu3$??1UR$Vh%psH(ejjIkCU)9UN13K0U=$bNZk`jR@$FI zOAH8pz}(63DFnOFI;1zf%$rB?5^@ACE`AhpW3Bo$#oSY!-oqPN*T69_fWGb`cjs2& zkyXBf3=Ib@lnM&Q#oBF^(n3a8$mf|*8l{W8+}r6kuaVfLUn3^?C=x212~Fg*u39VN z@X9#5YrCMHkm60aH!6y`(&^FXOs4n3#_XG^9Mo0@Bk&2wSCqj|MizT0UFb|bM(HbD zzjei79(W?ZJW*UA+G|&2KiHWRI1abliw1>2QbtL2Lpha&cV1`&dj0)=&v_fd2zc>< zOgvSMZ65c=X~!w>?Ae1vz>$C{nvCkw?%W~*j@N+uBaes!_J_Uhq2dE4yi17>QX7tB z3r5H->s8?sz%~IC3U@LKx9@?@4yJ~#U3Zs0a6?|y4&8Q_0(INV?v>Zw%{}hzbh3<+ zIfpoL6tY|=OUP82eb@|Vzyuaa$Ti+VQLERNO#5}(lEraTRS9gaDOuP-HR+aGkp+4y zoygXHJdMbqa7Z7@)fDI2sA8}W?_Y~vzb4mMeh|#zJ6l}ZcoLF#ruNRL(g1WVAGYpA zLd=yw8!kdCIif=6+qNhW+^_47JBetz+s%s`b$k(Y&?IiOo-C#bG zI>$MQ?`>`v9O~wV#q%My5f=D;P7Vw7R+GclepnmBvu6z*iJRp|Zz>SEyniQ@GS#HO zU?NSpDL3JqVw9m&sB9Q90ZQjZA&iUl=a(ceuqx$AskrcN>jo1uo12GL`-;aAMKNm{ zo{#*jQZil{OjXW$CF~_%rGz7W5BtOW*B3guu(KkFA$a+nVBQ5yoCCM_D8_92Zc$Nf zvmVK!kK3ua;Olt2eYbSQ%{rzFKXTVdIwiO2nyR>A*Hq!h>e^o(=~0VE$7VGr$*!Tw)B_n!M2 zd=`vD`j_sV+bVYM5AuBZ()qR_7Y7?xMebGff#^6{pp4>F1>~9KY4|gu!r&?9&`wl3 z@ED|dI{7>&yRW9S8{c-merT=u)3fs z`h1o_d0Bt-!sP6>P}PyT$qU~EZNH}4(QaP(>(@rB)oQ>D>mAMrIM{WT{W0RO*SN-M zJOULnsxe0#Do-HeJo)8I-U*4G-pW}-invlPWltY!32eW7spx<18zpvZnhF3oxQ7NxQ5O7a%@;1MC4f0j-y<0wm{me?$~d5U z8UXyf9zb5k0kE$DAWm`Qk~z$D3iH$R4<9&A@IU41a*k*u6uT)h{;chxx)6Auot)>_5AV>=4e;{1YJRk| zq%nX0)t>qF0)^}l=2@A~V1Z_pb)t^bem$n{_6ndfw+Zd>N2OV6^P zvXp`|ea=FWv;v4NtF#9s>Xg>z*&IWm7Hb2Ej-nD9vq0tY50k`Q{yX1-A5`FaW7UUg z?5g@Yu>Q9lS7#`!UouU!Ua$giDVpmu1*68)LKFMf3m4)aS+tbrzr7f7Z&F~*{O|R9 z`-S;`uzxUon*WdS$ocDERnu7IT5v*SLZ=OH=24hV z5qK^t?1AU`jh)d8t0d$vedQ)EUD_&WmERUnkOWYtiPqPz4O_bNtqL~g9KyMg)JoAU z)%_Dmpu9nSDpG8>?Lo?M)L32#yhP(Ae4B2?rlOM9M=O&WL3p6~P7bgF*91E;j<^^_ zJAB0^cMBve3PyPp<&H@cJg?Qu9JTBZC_4WXPg(xkIG2wl|NH%6QU5#GKRkGn|Bvz1 z+JA&l^DRKqP$?PY!rrM1Sbg*n(l%xv%XZD6aYdUcl!?M(5H_J~WWKqBZN*fO?#0eR zWNwb>z^bPY}&IB;Am^4j$EbI#?Rx5=AQF<&T(g zLRUJnkF$k$+6$FcfNg$3iNqZ8X!hC}n!3Sho4T(9V>MLZ4PR^U4#NOYB6n4DA(FQR z8T=-X{6Y67g%`{WJ~C}sf2@iL(U}`i35Z9 zq$E7p6IlOk`0M*p0M@Mk`-8)S;`%@A9zL!AkMZ1Q{kIHqzY2f_yNL#13qPpL*qVb$@3OSmt#D3On%A4Uz3EC}^_=rmB=8y-1yl;BQr`X?e*TcZSA$=p zNB9sGHZH6S@n!=kf#a~8+E2>plQQ}*q>PsJKjT<_e`kPe^}qd+{il1_ebWCP$3INWfL@cqB<3$&%md1 ziFei=%Y@o2H7Q%IgSZx>g5Faa!JLL6W~jq_{SgqN{6`s8x#_eMBwLXY5an%kRnIy5 z33jPY2@9VOHMFea3!0XqycM%y>u_&tB6nZnrenP9fV$+atH}9Ppj6&};LN5yP zYHd%<$*HdIIc{2**J#B8UHDaB)-40~0sO1Fh?Vs}eH-YUBsf~#ixya~|Mj}V-k_lW z4f}_^C;jg+9%=vku4LnT>oS3jojHT{GMJY9vALlo<11Ag_cT*w5?<5JHpdIqXFDSw zwINU${XC>R<6wTnw|#viug5NXo?-9~hQ94=ie`J6k@&(fCDeA-DO+K*TT@=u5V-5j zaHZwW5rYY{){~N%<8DR{cgz64QKbyIGts(%MQs-@6Y z98?SGzIms_OP*e$A`IwaPUM+NJ!Dv^humsW^UQxvJeGCKnpdv{CX~!eE1P)vw6;C1 zZBJ|4#**o2ZF^eV{>W?Fqb_Zpo$s;z`B%vwJ;WMviaiaSmPMB&c%Hk>=36j`cVUh@Bk6 zJmh>WW`f8j;Ci!&=Q2xW>Kgy>CWziLOE<%-7+7x$vYD!z6V24v47Flxvn^0FRX0b? z)L4VscMF`v`HjFi%<9=Xzb@CVX5t)Ze#5%{n({L8uRND;Max*2Cs9NeDKC_rgxm;2 zgz_w(h4e|FS#augw1)yRZov{2RHcxqwcMb0ji{!*yxd)ybJ9aKL4Au}(b_gWFx8Hw zMP!sOX$7jg#e;UqI3@lqVNJ&{s^ZI1VHvt-!?K$DHZE_i{gsm5;aMFmI2VC|=9QB| z8CqagS5H}~EyAP{tMZ|de-Kvc{A25b0sU_oJ#PGuUcY--jQ`Q^KHdL+l&5t6|2&TX zuM>{S40gAT1|V0Vurpw`jMh2;8jrE_kEgDCjSW*Dp~7M$v{q5tu2nne7qDY52uO6~ zcO?|%i(T!?C#&hWf3njhW02FX<3lKrYZa{l5@M_6GYg(Ut{0H}4i{X8sgyTc9B&}yLZmY+yeA3z9bFuhi2GLt zzue)%U{woS-}fs?>oQE4d{lgvf0!eY3bLrH>kAW)d$ zA1GO5HI#3dprG!&+1e#;p@hRo9=R%b7oP1wBDn^rZ>@Oi4kO49zsuk+3shdfw3SGRD4BKorADuA+W*>ALS|8e@q75TiSc9S-0*2sL9N=>HSZW4$QFtnODB`$CRwPU!^}g zwi^TIHt`-!-HK?B`5jTO+0E~Wn$B!`N7V1#1I3551MD}qshKFR9@K%u;Q^A?Z+F$t z_TcHJ-))}C^&hH@)_te}>-7J_()rJDu>TbQ>roy@|9AJ-TkivWSAw$b&M(nc5ZCM* zJQG21|6o?<($ZPlNbFW&lHNVnO2C*K&;1ncX%Dbw{tx#1 zy`uhqIDESQ`zX&X;{RP}2D$GDz@CGQF7kY7RdqeJ>=&wxd?sg;XY>mR7C(TX(}~}a z3HiPv2-X3oc^BxVuXa)pa>fluz|yqMd6B`}t+$s*8bIp#ly8S|x^Y^Zpq?mVhq3fX)>9 zhQ!FbJR>jV?Wm^nB2J3C=6eL=pDE_(o%Hb81;2t{7Q_t$nx}2^K+8nHUgCI(6(G>6lzFHLc0kA{NepCjnvgL}n&5fKll9MHivLZXlK!up z<2%k}iO!XC_u)1>f_3_TzgLL=*zffRPxpTw-QT;hFS=|bkWk}jEY2VBg?f{(X zus|rc;#Z`9o8l!(*XMpK-I@t_0af3}F}A+Wx8Nkpggj8&kGv;&VtH-ChjA=b5SW~r zPd41+7o8Hn2?s`KMg#YW4>*m0aNs%|rzSa@3nkmsVIO?Xn>`F1}@99?*NZ*jE;p3ey5 zZtP$UUA$(MXM8(qMGstHQbax%@)ZD82V(HNocr->KX4~Iqlzt?@z{~zVC=YO7xfMXQFg1Rh&elkRB z4+85nVlmBi%6t30f#=eg(DV$3=IfdG*rq5W40A$P;Oo~>O+gN);Op0>f_c735*75R zV2$+aWVVpk#%DG6Eb`*onhOSh9@(~u74VjwwO z2y#{z>#WBy+iDFGwTu!@B9e^2<>`3?(kXNKq#Cp+DG#qytgUdDTAwm9zSjhk0@9rP&Kdt|d@!0kMU53(+=Wjto zkzgAP6Q<29%&z__n0ix~|8)nwr~4m|@>uz=&DlE?O%O$C zgwrXQVxB8EyM;|4z$qur0g5u4Z*jU4wzxmW3bD1WrxwCMB8M%sMFqn;oZJF}zi}(T z+r)vzTf98y1g+V>Au$?({=rZz0vyft+SUTsXl3xB9r~4m| z@>KbMxp8$L)A=h8v0Lr>RSMi2cKotkco46z&@%VHK3_R)YCXQTQpT(1zlp*u^*!Jt=~|HG&J-;eTG{m;huR^z>;&DVzcc7j<~PvB5c@Jf^Isf73jX1Bkm)iMow zHruT%wx(T+`U=jI5%^V|=*W$`(Ew+hXIF{z`n$^HY2tDBsH;CtX%_h()fcJjy7xgQ zI6 zevLcs|F_uGJL}vZaZ_(u;=VTZE}wEyJUpSIXOhV4J@j`sfTKOr^ef$cvzZMMGgXSe0mcm47r z8}&I)Syk$&2IF-!f4%i(zoKR0?zjGIKb8-5)vvJ9Klp{eTkl@i%l|t%|7>9Y-|v_9 zf8GAm{f|d^YW;r{^WKx=PjJ$;L=5YI$Ga0X->b`RFqAUp;Toyy>(*L90Uj}D7LX1Own`! z>7DYhx|qPXZ}aBjzb~%dynFfK^{XvT zjRp1om(_2;&3A8`PLcQT zK3u-K>Ukx4hy8YM*zUHwonF5gPIRq^S-}*al{4O3l|!Cgot-ZSK4z-fFJGj(rK8yP zLv*Paayukpf`l*_=GC8@?>fspTMku98e1ZG62GQz)v#Xxu;T;_`?tR?o56Bzuv_fo zy%2vGApWpG{oZY;U(Kb2f}Ie0M(i#aqH?g7xiZUo&eox6<`6?(qPA3Tk z>oao}Y_dkiJII&)Asnv<*H0%mXtdc3QWUpsK|@A`jQU!`sgA+J8zXBbDLG#VO~=&S z#MwcVP4E(>h_Q1@#o8O-6r6o6%2a zuU}vMe0F*Iqc_6R4Y1ODGLYsI-){6Ewv@q!wv<8GmQwEI)vNzHef{C(tCw$IUH<&; z{ZAKHXXhUWC3Y&qFVOzaZ-?5DcEbYgHm1sYX8uE%XAqAZh2&=1{TDOTJkV3p|8%(j z`?&XSo^}2ohx-Qw|G&d-|7rjCC{JzvS6ImY3KQdm{|09Fn)}rxnJ9!0&?0xTND`AD zWW5c#RlL*i24<#q4$3K2$}!vaFEQl$l+K9X4(GXWujISm+vPhEe#bL7`;gE$l#lVI;Bv#!Crm`=A!BCpA(Yrx%O z5?w`%QVZgBUY2JG*fHRCJtJn-8nW3EQZ4_{XO3tJle3f~I)M>l4`%-xl>Gk=yHEb# zkMe9K|6ggA0G21J7l8%C=~U$lKRtQ<3jFZlY`yp|^IYx`UO218vUx{lSve(oyORLc*oWp1)Hm5I^^iq4Qxxz&&`W>XT7hOWbb#N^|@3j>wNCl4KzLn!RHypb4XVgI@jOm z1(-T#ASMN1>A=M%s8Q7m$1Km`f|J)cy}oC#I^6X|o&>&%MT&$kbh9)7{`Z=J2%u0N zk3gXfS|~D8sWp=rQIN6-Pi6`V#0~K?V(NrKmc06U^HR@?0?^&vTk!Hum;>DphC4tZ z_hXT3!c4P%vINJ-nGC6P6a3kYc%6-{3e- z&<&(YKsUpuy7L~g;oNtT$EplNP=T#$E9F}=-MCMx##(cAJ znAZ)#{0`KwZoiW7TQpauc|n{8hF{9cx%a}#t9A4Wb8H!wrG*%kx=B>iAPY6NTk3Cd z?-pHx8ob>8Wmk${Y2$1_2#=RUOq;>4Ay zIZPJ81f3$2%@Tl8x|xD_bN|1vk7)8lWtokFQ{vg)iZ0V!} z447)&@HbA_pn6+vg{8I#3sl-_eP1BYE$Df+jJ7jX-;ZfmLrDn-JLs2i$!4orFp?Q$ z%T`D8rMAf;5%S(xiwdEhHd1IcTr7tsc6(~07G$}ipFwyRXPR^AM5t|>A`Wr7<*B~Y zMP1+Qj%FyCx7n;?T)$eGbTDp?z%@cyDAB^*_dj)N>n(F#tlh3|y(5EBgcy56Vq`N) z$~}bbwf*kyKi?x5|4cDQ@6rf0<<%)ir}O;lfQ&?joZS-Rgi7~vXCue(KfMNykB@)A z&Ek%WJ$&NVq;70c=T;&lyDM}#2<=X(ERc8^8CVDXzLBMhU_X~6=Ts1 z2|CR<&sc>?Q(&YNpW1{k6Oui|8KDjGWY z?>yu~#p^8crn8q6P9`|YZ~o;3@;(JA6{uX-ri z?JjjYTZ|LTW^V}>o14{191AIJSfc8yN8Nf5b&ccfdpO6*%H?1Goqy~VC|*xFT>~3r z^54bbTSqpj7ZeU$#G0fA7!{EAt3!ia?x(e^ZAO87nNTxPtP6i0P}tXE>F)JArpRHBJX?v+2T1^5Q5i6 zULn`E0`%FDs;;+4yd|+b9uUi_vRbLNRU((_kGs3JljfDv1@p>T^TRff(1cL_5-F-& zPj{<6iv@63OQ{4!oX}B7wy94Qv&8?brAhVujw-3*j!?B8Yg>C=uhv!_x~$OzDwXnA zX{;O#?prM{k%leC44I3o(27iZ=UywDW$A9&+sK+NrA?i@QB8+rPA*K2y6)Lm^&ASH zP~X$x*joF~mD-}+#R|0U{^x!%|7Y*;aIpVm|9Ol@+JD|7zM!d2wj{Tll695MN9S=>iWTcX5_w3HbH1$m7b>VKPmW&hj!KTYfZAS7e8hb%=*h!EvfxsGOj zhYK|Gz1u~NrWveVt1c*>C=gWR@IsSt8v=?&-_-XEa2Dn@TCoD+zk&&-j8{9kI{@#+ zHvX^hl;yvwz`9C;3EZ+Y*>>fPX{~zTENpKtZL5+ViH+eh3Jk&Q( z4%4EU#!-j9-1GgQI`i}6-Dde>u2U)7e~dntE|Kj>DOP-|<(LCSx(Nzd{#I^`UC9f4W=p!dp?&!xSguIOvH;S(meRq2>`sOkb#+W5=59lo zKJJ{^(ITK+Ohs~Vd*tbf1%z$^r-r@s?p@A>;!JS97lbDFjWiy%8cpwL%D2T-93q7q z37#KSHk5@M2{m&bvbXvAtNp5_XtQdU?FF^7h`HldmY&@AmMJyHDg)dBo1e{EstQ~x zhtpUGi(~6BMM3HYfIKgWf{MwM*$`izNDKki{?{eItyZhCeQ+2BwBXCM&6#b;?V<(p?vP>m|^3efKQP;cdJQAz(#@VFBp$~#x$zZZ9l{H~sL{=dC`uc-g``%m#- zALR+@|A=xgc)Rg-u{UWpc6PDS#1DssDF2Zpu@~vs@#Co~?EA-rl8wU4%$Y#-}OC>wxe!SBB(l% z_oj5;Yd7durJYVndp5zAa0zjuuC$9KMrToP*(K9p_P^<0+5e_Z&}_9@a;4om`M`7U zhFR;&7f`;O<{n&ZwJfPqc;7dNC(JH8JYnrfuOMMU$W!3xC$v(8_!V$+!6{Csd42(J zVG$6o(W(w2#Y@Q1rXasOMs)J0=b@i9>;HX(e_9*=y>~Dy<^O)l|N1zOIsc&;EfEmn zv@?Nv%PSZFPjCb|0+{KbWebYp>cgLcjCLGeH(1L8UcWm+bj}xyzeFfICE3ccn&qpS z@t;*#2w3kjsquRY+)rqwPWR1O?ploU#;kL++taIzB8F0)d;hoGEu;CN=vkDL-oZ%2 z9|k4d!8KX|;tfMR;hi<%cSlOlbg&a_X4n4EVw6*K9i`NwwLPhv#qM`Ut6P$0i>Yj< zD8MPepHK6ztd?#$$A>)h?MvUUJrB_6wgYyo^J|fOZHH`*8nU}~-nhM-P%^jK1f*J5 z+p{%2dahBD%yE0f^G!}YZESO1`$Zr74ePqj$R&*JtTa3)tG8WBmSvhQq$iP>do{xC zNjdyIKVkiE289CXn9d&3|ED|bm*T&RS5NxiBRn$4)~ULux96#%`&7faBpOCEf}8HhVzwSv_!@0Bi3H_ydb_N=Z0+Z9|WhMxd)oJfL&ob z-INAfcK`A)*S)V%juUO~7hZA7s#X96MCWj3nj7RhtaHJS z5m+#RCj(F-ud%IXncPXpVVktpuPBh-MGe9CI%CH@@mdL7ncqr93Or|ex1R6R^>9o-?YH)XvrjN3G`;Yz0n79f_m=&NWktvPAmV|Gy?^ zUNyIuFQ!*Tv949tlPDsKlnap{BuITvm{;d*VfH#^Tfbmi1qJg)&+ux=NKkSi+^vF| z`ava2tZQQw+4~e50;)8acsFE8hG?<^5fn^en8d7^B;}MO38FI8$~p$Ir7u@mz>wnP zBh}@!-+YX+gskTFD7IhuOmGZ}ZSMS)?KZ103Q6V41zL=2Q}N{g1I@Pluf6}$1e0IlblsBoOPuDj zG?xNxAq6&?2(Cy}_ipYcA&mZ4r~fm=7kAJ8yx#uP>zCp`4*F02Uyt$xSXK_Z~*%fPpt+!3L`=jMK88#qm!EI65>6j3qrGQ#+j zBKAuHGRW8sp)r&9#}SHATn9Tw8A@Z6Mp)iVF<{y_{fD%s)U`@cjM<$Uln^#*YYr)f z@%T=yX&9TeN75;|YkLYtvAril(I4=slm8|F=)>Co`}^I)V*Hok!Qqqr|4|;P-QG#O zhxMLiDF&~zNzkCYovenKXGDs%>t$`N1w%AYWrxf$&v*Q)W-$Q%T=Y85YtI*qOG=2{ z@eRcs6|r)g^FUdj&^Bo1S8EJ5UP~d(vmxPhz6G)%$VhyWJCnS|jH>`*{(D9G{JO0B z?In)54XKlt(m93fea%uc4#3>aH2_*|oYWvYmGT?81}B)NMABAvEZlOig%BooJpJ+> zsdbyX6?9dHC>}}Gs}eQU>x~HM>@AWUeibbpz#Ee>f#Wh2OU)L+*U-?Z44UQ$&nII7 z$3ZIQHG@nV{OnUVSY%sD!%bMXx~0uXpVtpFau}bwb~hapSi#>uMr#JB$nC{1Rm1Wy zydQ+W?Ko^Y6M~J^3YEYt@S4@MR#B{SnUW`g$muK-mZ)Shn!;)#BU+~EmvUl2%+b6e z(T!}QYytLSeU-+4A=<<=_jhh||4P^;Ktz z=j%QVW3QXWym)u4*2!~q6YeAB8ty58EdcDWJMSJ^+eXL!y$;Xq-o_! zQE1F6zh&HQ(2+_eD5*`wPmebA8!Sx<%vwz>2=f+W?PY-|qU$YJrBPn9H0c2jsb^jb z8w{;Cu-XALA5IgQ%w4Q-I=$6mZsS;`5cHqr7yC6EsCJkU{M*Ux}Rp`pm)245h93BU!z} za#j0O)owe0OQ)*=J-1rk6d}u)z8ZA1=tjRmZJE92+<= z%Mvt4DTm1qlq@m^I05qPa;75tn0vbZ5;Vb|QLHPBUI4LNfP>+Y({IUKQ@=$1HAc%H zs=iILMfsb-I$LltY_x?^j;I)Brw6(@oCbSPG13`{FA9Slph~!7FK!E^z`Z9~Cf>+I ziK0_eI}`yR+c9!pFhqSbbfDJ-{VwR2(+=DoMR{rdhw~5XW|}D$;sA}`U;ujE!%EyD zG9Tkqc?K!#FiesP-Zsm=%gt<&#w)RIlDEsYo(z@Nak_N z!R|UinP-IYx9aM$hl4M(w9IH0C1^PebiKamPQ@xsGZ&MdnyFuVf~SC`2g3-vA`toB z7ac_r>8<3Ymuokip1=W3F&&#ZoQma4H|2L@%a&jqH!YO%t~NBwOV(^7n0PVMDf$H% zZ)iNv5_JCYv>8MdG`aK!Z)VG=%paBTemq|TPH^fuWBVu+>?{R1rlX0uE`qcI8ylx z=LBYyrZMj%xoi)eFlpS%E14zajlkN^Gg#KiW!I|Cs#`?`T@|-B3jNbx5^Jw(?x;7O ztwKX7U3zr3`-LuPi-W?w`dZW1uZ@-tZ(bmA0{}dSQyu?7_Z%h}PSKfo-=-)d40A$P z;Oo~>MIjDt{%&tbbk>bUdcr<1L`R@2U*rc8Beji^Z>tU(+%m4pX41S0718_+Knt9_ ze%%0oA|?~1+f35Z5@wLMUtOEdhWV)l+rl(fO}0R@GsbC$&6?(SE3$v0Xhy&{C!Ree zB9x+tixGEaYrFl;zkT^q&iex6SbSb)COO;pI6;>0WU^wyRX&(N6@9S}Gg-U|WM1WH zMs8BjdJhhUN27z`5$G(lv}0QMHxSL{Bo^PN|L?~C27dh&s6MGO6NpVR%Vn18DA9ZJ z*7=Go#K5PbpKrgvSPsC+>1+1?$xbR#s*reM243xf=d(myS(-W{a`^QNPFmlu87!f6`v7p0)a)jsbw^?e78A z>wmr8!LShjtKZ!pJjH)}l;?}OBX}wFI*3zXhud5Mi~&xIH`|?yg4KGQ0C#GjDJ{+s z4D0g;$?2QxCB+KzOCBA|uW`Oel5>*aXyxfN@>@HzAM=IXQw;Rt9$4wMWHNS4CY3hZ zw2*wFHBa(*sVTpFsZlW2ZNZHh(x8bxa|%!BlzHYzs9wlg;_sm9BMbRwVz=zmoqFWq zly~R1N6h}<+~*+9HPbL2h1VyXJ7|QI=yF=zeNln!r zZjKleQ_QZp&c`?Tw~;eC+XHu|X8^o2vqLsClrBe}B69xW?4_Q8(roRIn;wR?DCI{4 z%prWZc=i73&Oq)A;LXX!PwPR*Vzn@?E?!;U5zhG!HNC0Xm{)-N;r+W0=XDgm1<3n= z781P0GX#oY{4Pya?+M{TZD%XS(cF{Dr7B`O{FbDm3MeV-7sIRfuTEZGy?gumzpviE zdsi5%X0I7`SJavHcgk*0r6%5fJbQU|a`o}-;_SQEudZIc`gnHw>Y~ujlHfRR$`P&w zC@h$FN6UGOG-J6L z2BPGsI1rjiRW`?;(CR&!xa4);kDRfw?c_c3V5pf{?4y26qQ$DZ0`*{3cjD-Zkx7nR zK-_)54so~awupOm*CSpOirAz53=rf6PC&4q$>rcAB=9f2FTz2w` z2ROR`p+JN3?n8$vYo4oEnk+*Ro~&ep9R*@SC2v{k{Sek*Ia(sP?UoQi?;&rc^rbyAcppTUULy8%2uru?HhwQI^aw$jnJq~iW+ zkJV&R*A*)VWW8$hR~5%W;j^RXw?8!ceHx$F+J9$+@eJ~4_E7fUZtvirc>dqrf6D** zIL{-W|6jg)`ECSalpu~kOrmQj2D|7QlQH=K;&DzQNhP z{>_iNIbEQw&X0EhTd{~IpmhT#tc_E`@nqGW!_QX>hUnFe=oVrx4*G-s(UCpoY$8et z1q^X{%B-t3cftStziUC7d=Tu#L9f3dM19u!8FU1#I}1i-m(&oq%n%n~B_z5Qu>4XL zAa4&YxIVVLBTyIVhN~Kg53L2GE%PBzFIY#s{C$di?^!GVGZNo50^pkSzwV%0jQ@Jr z+uwhZ|Bvyg^S{RBOom5Ok`+rSTz&r6ZftY_n333x|K}O)>?z%a)XAkbReV=_Y*D^j zRSr>Jqu7VynYSwpjDee#vboJqZ>lbW`OQ#FB)|kRW|HreUT%J@!lD_97YU*UmiJIA!^9kp1B;;9e1bV_MM*2hM4-U>wo!F=hN`%x6EU zl7)R|MTN48?`L(0Q=M3}O;p0=z!%ApLg%8PuM9yd7I=+>dK)~{Ew?49p?}={5HO6f zEbF`&fxrFz9-DHzFZ3<-Yx_o=Kb2F}g}IBI>NK&r{iOJLgLBI%g%LVO6iZn_(pXk< zO8ihNP{IE~{93mOyZNl!sh1pPD@0En3`cL?w03obZOm^8B@bkMdk{7@bqxq17fe9? zGj^tSC_&+)cQ5&XxZD2c<*(k|P|tX2?pa^!B=Xm2#cG=Q6)aNx3-}cVTKH;czOmdn&d8zo9><{Ub)2`Sb0L(0mJUq<6nX)m3i1&6=Clzqf$Hg=C1A%K z6_sG@O5@?Wg}1cUsOA&xSnUmP`~F9;)}Npb^L!wKpSK^*5SY!T>xL&K#X}PPHrIpm zb~fI_oFo`BrHnd1@4oj-NsMf=*sot3?(e%phZDJ}mvh(reRrswWF#Te)kQ`Tj893* zIE7eW1E~CXAMGZH<^lhlpIgHI16b!C{@K9(NBJFdfUGJ3~L;ipE-nG4L8*3EpXa5Rp zWo9>?ZONpltKaGD?bvDRGil;uJL!3+)2D$*NWz#RSOT)6X?lM9esCi}kdQ>$Nz-|v z4~Zp$3v1!BZdhx9u2V5AyuV1%B8~`iU_J0OZvp;HkBmn^Ud|^=gw}R%q*^NVfH#mN z8gPnJe_02nq{pWjVI(AF(_Vz~qF;=so$qdLE;}M#xBB~a-GiGm(OyP@s9#UO&Dmuo zTBUf(5w9XtEuZ5CS`u590CWAlYya=&{~`|LK>}b`{{Lv)xB35Q_~rhmPx6ucU(7L( zxm1`WASMeO?#K02m{6W?pJsRkvyJkfYCF|t_7(MAJ?N>|#if@vOkH)WQ*W5GkY&M zeqArtmDmo5Lile-w`9ayKURs?642>VZYi%MG(G!2Z z>uAbSnL}Sm({ll!;SzC$rvM?4bwY5CwxEH9=`{&&w^OloNK12Ws3$eOiFxyrfD(9JSKbV=f<3fpe6 zCt!wGh^(0tZhN0_K@rE7GH2f%sHr!zp^Huv|x4#@O%%i`Qb04-@8McI&(Zwf2*SZqSk)1mE9 zK);x!1)plOQP${_9ho=7*Yu<-Hft!Q9*Qgk!)Gbm7ZA39?p2_b(HDA7sr>fS1eqW@ z-Oi!(1z1&9tO_ed%8RU?UP8&hx>Q%ith&ZT3##gm3^Fud#}u*7mLtEru#~FgE;y-H!(GVowC+m`Gm94X+9 zvb@^Zz6)RJTP1d70{*F@S(H(Ik14~+LNNL=n>+psIF0Y&hJrLhbCdy?fO2y@&l71V zV)^Y~Hk#jT>#}QmOu9A_uh|l1_n0Ce(O^W(_T}3%>8iK7wJGFnUf-cC!%=M^0g)yz zoCvO$gsM{Y%NX?K8r`3%yx3!pS#kDvSS?PF*ylBAs?2|1%E}&wDH%QfU8}wYNYAtx~o*$60xQ>0e9bSIe5732KER zysmf(i^IGeTt~L-)M(G!d!YE==p|lZ`&6&Cle}?VKjN!ydt#AWmX;SK$yc$_K%C_vnciozVqvH8rLLE8sq+GWvu9P) z!uaJ+pkk73B|1L#d7YDKbL z0Qo5AW`Ou|Vl2m+IF^xHHQu^0t>XXstL!b+I(kvQCO2}``miKv{&*{Oy46iyt{wo6 z&X$4NO^G~5C@~lvRAx4o+Q_v$Sg4Bvsw>x!Z;)4n0SNA3j3ZD%;i)*iuF)*^^V~hU z6Yl|^TK(UQs6YN$Mde>4n6mOcUoqvq(^=M{icqOkLmQR)#@hpt{Po7xPzyU1o@)gw@HH*6}|M{{Jr#kK9}a?BM^yp>O+t{PCCj zKR(T;hX3ojJrqEY!6YIppqYa>h0yW=Gp!j>0K<$>3f5^P77>atquQ?^!UmhlhJUH5 z&P6E9f-_2P&g7Q(UH8v-og#NjDDxc!q62iC%nr%Y?H<4szvYCG4FS<5(CLT=Y7=-l}o(2)pO^wAWC z1(5s&L*5mKzDCBaZ0}jCl zFdGdb6dITL75(o6tR#tQAljV@JE9qmB{-%2_5@bJQFGiMVTzw?)F+`pn(Xh9M`(O+Vj;xERyW(_>fDDl3!LanMpLO%Ee z2q@rnD5yst5eexcd7Z*v*685Z+IuXuNv7xXGG|Cn4Hh9G<}7MAm@CC3a!>}>*cVuD zoyDLdRwW0~XhF8b}|ub-Pe*AgrL&v}(3=0DSkC(AuX zvtG7N&Lp6x|LmkVS^Tqe*a08paD#4FI1B#tt2u+efo@mCzxT(UKQm3Idn4`96r0p->(0OF1ttl>|y`u+P z04vp^8(Vn=gbt{B5DoY>PQ>Er7C&OqXuB)XZdZ5{KYIt9a$*Cf&UV2w9bE!AMKC&X~h3qIskX@|B*i$ zS^U56kG{nJeUi`T<^L-QhSn}XOE~N)9X_Qa@G*RV`?>$p#m8{|86tF-|4$*XFEsV% zHn26F?{M8Y(5*nTJ8uBC4)4~E!F zWB#q_65^qrxIZds4oB-po??>o(9cwVezed>TBRK~I*lh-U zxxo%2y9%w1SzXiRHgkE0y(^%ZDuMiA6pW`OZNM1j9XdchVUK4wsjcuhCev16dl)I= zeFdhaX(9)+nJHnQ-5CD92E;@9aG4E!B|UmaE@PoVXJ7QW|Flo7{oodaRB)>Dz|9U0iADOzwQ+GqdXONWObgMUUm4t z|LCY2Qe0Z3qld1zLLbdhmZ9i;o#AA0EpNfc$>L&>ko@Q8?@_oGWuy-P=&AypC<&21 znO{K`E}y?oGbFFsHc#wDGS9ESf?nx@RQ@3;SEWgI0xlBcXGx}+EM!)Y?#ahxNW33W zG_54X%dZ>N=I#+*EZGV0OMKdz$0f|72hAe~@Nwr+_P}4!rRnycM)MZU8lE)XPX-FP!JQ*fG9f#lS3JnuR**1W5i}iwDx&RKb1~|CQ|pZdN|(6Hxy4^%1^=hco^Dccx>c4#-vRc@H3z1#H+WeH-4_AoilUpkT1 zR*M0ybXR*fk1Dc#i#A8#Ph!`Ky8tQ!Zeyfw^H!z##e22vsM2ww{ShU;$@!TYwHnVw z1+u;%`0t$EmIs8}DZGz{a_sSTV@az0KD)6Hd!KGMHW#qn`d#;Udu{?;<;AycxQB1I zn$6a7tL?qftS+mYtl<{hXM=6oQjfNqK8>m&dwK*-!;poKr)U^kdY7K@sqMdQ_P>bD zeW30C)gJeMjeINq-yaRf!!P##r}*q=|C_vlEfGjFZVbubZJ=05Wdo??BmV1vr?T*W zM|`~^gc*nCkS%+R^w<)~)}XV9$qdFqY;Iuy(k6R$etJ#p#iJ7e(eREux8*^hVCb64Jk;O%AGfx7usD(@IOj;;os&0?w8xG#Y)( z8C1*voP@V110wMQT%iS~EZeB#Lm&h*cp9NJLm^}+Ist2nKzWknrSO;QIF@fwfD_6P zj1IS~gS2RFZL3^{I(L?TXn|S-4w!HSN@q)avOX%tfqUDvT z1HhZtK0#sibjG+rfk8YfImXdV77= zwyGb99YeA0)w=bd?#6R~v4-l<-H?hs0o;4)F?N7`OL3V2l-6#`)n4N+e6Yf?P5!eq zmL}H&HGp0E|HvEL@jt=fi~j#fK8@r*H(;r}7H^H@O|{$xhBzrq^4`H43K!_4P8%o| zlr)A5g+TmVuL_8t_BOVwU04i-lXpS+uFG(;=%@e<`y_^?v3{bDT!2&D6|X$)>GK^~ zi{r5V?awHHa@+pDhgpJ?#e+QnJNCct1p|Bk`@{a1{r@RG4fg*JaybAvBWtEy*BOap z;lhTCZ5uydNviz~Tx@awUlGE#?eSV@riw0(h;0w>2aur!djBm>BGBn(|NLk4zy9=r zE@6K-I+54s{&0Hr>f+Ul6L3{f1tP?xm-^|izXH?stm**Cf*NETt#M z#}Nr>Z-!X{SGX6F)v@BnD5J+qa^Gd-crAD~gGtm?y>xjmU8AMxeE&R{(wEOC`zZe3 zTcUV{MWDyy_p#gmYoGu2M_IoPD25E*A#tg+@jFbSgC`(C3nP54G>Tit2T z@A-qy-~M_G|90@?$rJEn>A_D=wKlTAY`LBZJ%nXzB+`EAF-%h`g6?33j?FiNUawbz zbO@gIy?(#z1>OGW@PPNlvEw`T;4dn*7)0{KSmr3lAR$S21^-1d)%;uho;POMhO@Id zeh)ekj)X!u=ZYVCpGs}6)9nD9L^yzKPx}4wa4%XgrE5fwdHch|1J{5Bt^o^L z4_MzCu)rL!LGuA~VBU9O-fxY$Z(-iA#azwZX%qqTf^I&M%B0`GRjlS}KV*uz>Tj7V z-$k+CnqtqQ*xyDm+oXi6{rWOKZe%Dj_rstd)89g-=OWWL>m-{lul7w9-x(qO2SA0-N~-k3h87 zZ~=LI0m+WeNk}zsd4{v-8O#vpDo`9+WO%mbsvqaSv-Lvs=1uk!g}OIy;vHH%Jwq#U zhrm0My_04%(MB!I7V8yCB=7P^4Hxfd%i?uuZ0!}c@;sXAn%9mIc!Os2dV?+WI`y@- z^xE2*NpEh6e2X9x%PEe@Jy?+pfy*}+=f`g@&c&gUaG=ml5=w{03;yiI#knLuXr|S8 z!PHH@OOI=*#(DO1dt1q$tyigtu1g^cmul9#B8!S5ph}G9!$g-bLlMBK8ixJ&OECeA^#VxG3HYAxdZDkNQ5+#a z=KME6k@V+_f!I^$&IiKx>IXvNT{9B$LF=I~Y)uJi+gNZj`{o~DhH$a~_v*Mqp4mj) zu2E_YUo?t6Vn#t;VS$2qMpkn0GPHtNoHCuJDV1a8HIsXu=a74nFxObMVwU1f-x{le zUG}^ENgH@OWbdM@??U{5BD!ei#;cYFkd@qC<;tPR4mb{dkf%&U}?qt=r@H0>h^ z$t2dV=m}8-;F^&bC%2qxl5+0P2*AlALzGII`;8n~yuFj=VXYM-AGD@9DA7DL44Hn{ zZ{_0gC(}j@owwgYvqSg|TMNITCH#hl@auQ|#*Pk2^SF`z%iC|E*&)P+t%caoVr;{b z5cApzvB{{B(#zX#q1nN_hOL>`&|+T067y48h}f1HUoN>Vb%`67=^QZq&ZR z6qU%j=x-~829^*S7(&RTU$1fLKYsV>?Zx@U>CbO3t}mXweE#$K^S2jg&#zBF=Z@g0 zqdZax0WU7!089a-6fd}uCPu_>xYc|&yB@ei)S$J98dxG~V2CKcLqW;eEn2&0OQWy|AFrd*N6!FWBYsk9Q=%dJPw#=hkleu1(i(z3KYart6nC zU1bbq{&l?J3x1sfQGu=tvqc`9tB7v6a6I?I>AN;dzx8J6Tbrd{-Yk8K0YoH}2dE+e zon#EgT#K3G#R|$JDRCn;W*~(bMIs@KuQAz149IBDAT~W9Bj4?A>$`SRzx7V?D+A)y z4~VgoZf^ej2wdNsU%V1SaB=x9Tw%U2O6#EEp7Pws3H9fX@x&!YD;(Fs9F3D zZ@-0RhXiRIyD{zc#}>^>f^hNC?N93jrxuW0MSw>jLkYR#;~=0jJd4qhD%Gec#_pI^o&GBfb zDGZxsW$^Y}Xs*{3_=C1I`%{Z%Q&aHUdG3dPGmUWQJ2gU%po8W;&*$oBo|I|!r?oVz zg{&1L5s(?-xd_u_;zoS1&f>4B*!4PDO<&gPB&RM7Nj`W`uEE$MX=0M(JdCIu2#e`! zDC&pa7B=m>R64)4O6OZDoo}jip3SCNwozq8AfQOxS%nJic9D^FDkd<$cy|L>265sf z$fd9Ot@SnE(%1Y^EkW+d9(HMXK~91588_M@*K1xw3&K1aAh|M3`|w2^t*vrH6claro%Wc&c@9kbwUA4Pw1M0W;sc`y=n1Sz#0Z_4F=O~z?$imgF&zbSVIGT&>wFD))2FP z2{ScUCH^f|VT4jD3X||d*z?V8nFzkABG&AoM_gHtGAb?w zvR%@9J}QM*Qz<-T4nmZ%E>)MfkVFrP9ExU#&I5Oj$JB8WHf?(lHtkt%uYoxfwrL?l zrj<6K4Zs*Dx5#P!xtvz*eO6_B0~24T$D+J8gGsYMyI|rBw3|B4tfp;`tfsbT>DLmd zCPXoGyMi=WAdz61L?}a%k$)$tZ>DJn+Z?e@rK2tNmPg7rsdqYO?CEV5?GU(=C#R01 zs%hJks);?lUM+$8oa$ng#z@4x2xkn%t2D-Q9EuWpDsT3gtp6!VZ+PMyxKErXj=7z* zo!d!yZYSlr^($PL5|u+PY#v#k7$*yW6F^aRhePAiGzSIslQ(HQc~+|Lq&#`m1i&2o za7`Im73YZZ3K=dY6eYB$rmrDm8an|NE9ul3lPl}Db<(eu^E=)?eL56fEL$@kT?S)) z4^yy&NffIIRU$=x*Mhf1nyLTp+l4o+lo@F$i%QD zO5I_p*2H=ZSBbY}mGqmH+2ieP->r;{kT)j@=ZS19vr$z}A5IpoA+DG5t&3V%H7$lE zDQ}#n=2|=@f_dCDs2G+6`MyVP z{c$r*r9XCRDz1_gtt(Pk1u2FlL0(f!;96S7n>?{dUJ%Mn=cAHNtyFDsc&2X-6N52n z#uWOKEli`jy*((-xhC7Kj#}<(jlgK>}ocawzGyCq)%)k}n z6ts?U3al8Xz>IM+iPRx#g*gL~h%j*!>5JXXm5nH&B$X~wBL%cSYNi(TM^3{va79H0 zt)rp>D=I25qoTYmHzKI}pN2$FrE)aax@yAK=#Wq727kP z`a#1j6>Qs5^*VOYIyNh?VzUA>Hf!5ZTU#n#1JL4IUbsO1_%fh%?@Xc;>t-n2KKUr&tE&A33zFYeZxO3JqiQCwS9v86ahpMc7b7ujX3_XVr$rMu0=R;<0bD`PQeda%FjW23+_Jla8Rsc#SxAe9 zWeBcfoFEX*z&eX5fD30xci@PK3fe|QS;6>$5fP=Rs7J%4MYdKVEgf=PJDB;F(=G!; znys@~rFiIcPrqT}tM5*H4IG}(psgp=DyJ3nOoh>%zT+;6=Qs5D`)-fFtLRqinp;-M zt)OSBZ0@`rOKvvwpZo4mELVlC)&;h#`dUHHRMkW_emxp4wWzgLWGO|#erUM#f%fV^ z8IAsaXgDQ#TQqDrz8@Mcf!R`C_U%dW_Cdo{r>J$ABCASKzdR`eCmQvW(z^g5M1AHB*)bAIswNc|)MvZ3}H9JtLpB}HZ%I%d^ZqHD;w_{ST@_Ox5 zUgekY%bJT<=)D}5i4&K4#no%8xO!#9)hiTNj>gD|M!n+dwN+fL`d40|xNb+IUY%@R z{K~T@Wwaj}^?Fe2+DukyCa=(gI2tZ%!c`xsWqG80oes*l1pDFQ;v??+DRDAog*A=`)Kt%1^ z&I*bc70I14N1NOyB6ZV<-Jeby*=N(K!#o?i#O}DY*d1G9cWjGY_hlg^6K&e;{CVm+ zejdBT`M9+>A6w#lY>RW>k)CmnGqhO4EE4yCiMzoTh^hO3YC}e3S1#;ZZC~-GXJKz{ z;7T2cWPK}h|K47{Qt^U(eL@EA5r|0gH4_I0PdA7i0Ll*%c@E(<|O0e;i9lkSsJ%hmd0fTWo+q5 z74j5KBzDA>n>VgWGE}=`8fG}H_m7Vq`p&qmzB4ZCJ7Y`VshKo+P;r+gcI1u=-#W!; z+*UCfmldP2r5HKNlZv+-XteTx@fQbWG=|%TP4OO>B!r1{p_iC4xxz*IiTo!$2t_KMrO~;D&!v{M*GkI6SJFv5dyy75mC9GFp(E>ztDdF%LB#u4Xbxqv z-CxwvwknSq!wr}IjA((G7aNk>jB>?*;s}MD2ss~(!b7I6i>$^D8)w|s#u=AwoUvu& zR0mU39Or_RYeGBLGAxok~LGXukQ5!TpY^^MzFeIx5KoUvu`71fH(WqO4u%hn;2MK8o+ z7kA%qUTFl#7DH7mPqJtxo*@MwZ2hjB<`0mHvh=DQpXyWTttzKaoY3r z;oAxALe^ap6)qu%i4)$epvTlzEF*rW z%_@&fU4=&!f=;U2Px#a(+A-nf3IXd>Ws<{KxED(CTQ3D2sYz^ah!xxFX8Eo1t z;cqJP{l5D0`9pl^WG}@7=3u2=Zyvf@xSMJ_W%Ac=zrx8`u%=?+#d(Q zSDxSZ`rcQ-`xwaBpEYGL`^tN8Up8@nkk1ovq0%I{Fg!T;cAdyLz!=Xmm~Dh6bCa#n znTnv>)!-V7G#d~T;Sl0VQ1MjW>dwWl`aUN@6M=x@6^>yBQpgy}k|V&DnC5-lLkebV z91GE$A(7Ovf;eF)fxNqrPzGj*-6NDpy-R`@-YTw|DWT7@4S?YiqdSh`g20&LC@-!* zzxwYU=bhk6UMR(xB|SL!`+A151TjQUz`MVF}oE4~@ zV;YhyDq2VKhu&gw%-+(=o9}+OVHtnvb&3)I!H+^fH4$YAx<3w=giv&N(Cu~)PU9F{ z;l+|su3Dn(4n?2~Zpuqs1quH_B%tE|OBAoV%60JQLSQTZ_q~BX99#T92>ihp{{JaH zoQKIcW6oK+Z^aTgI55^TrXbDm3T8Oo2qqkHCM*=njac`uPOnuwGUx8SgYU>axc6ZwDK*yRti4ZsYoXb(Jx;j-RDrc1Jp^Q+dV z@D<&nO;1XuqLxGm6EKs9Cq0cdH#!YGIoF>dF8@CWCaV2WV$xKZ1_~%&Ofcr}cS%Bf zys5b8Pr#S1ly!z8uudYB$ps`3Dmv|jB$E6(v->yQr6nx1>XG9Cg#ZH(a9~{pO(G>+ zDq)By1#=uDzLMD<2!2a4>Bhv#oE+t1mw_Mo>WoOJge{kCB&0pVR2Ncc9^m##AhzA3NPHT(f28sFRQcb$-$-(ilkIo7f{bK>%h8 zu{~*zFItKtRNTec?XD@xx)Efs8{te0R*`PYKulykGr1Kd_|hP2K+@|-9VAHSV+1~c z86kW!-_2o65y$+w@=LChq&kJg(#DCpS}<~UaaXs`L~(!(K*=4>NFun@9n3KAld2mC zi|)jpbAo>r9&Kj3~EbK26HMXOO9tEzMHp;459- zcvE_J#q~(BzG+dj+r`?QDF?X9FZT-sFE9gHp*PPqqL_jz3 z>+krkarfMlDgTl?8w^!&(<^u{AZTcNLV5-%8VzdT$p>AO@HZnHbPxQnLaq$0yo-H0_c4z zj`^^#ux3bZ#DwKM3xRhy`Z=TU-4^EB!^t8;l&Aj^QqbZa{Cx&hwsZUT#8uBu<|9)sT?h zS1&oBm!d`S>Rp=bz2q&!Bwz4vFJI-d-^C_}@szujpZu zD@&Z5ON~UE@O%lpy?oVklhezO;md-%ggi&$hb0b|Vv*^!#oyE>?o7$uvH|PrOZfwg z{={e)x`JFRrS>q2xC$&6zzog#nqZk|$%yP-?kvcbJ+U|oceJ$!`EFB1Pb%ovGo9v) zL4@En;|Y9k?8y!krjNwLK0dBoyQ^Uzg~fvs4pAW+S}VIASdW{^i99&4x!768%>#yE zOjUqK!h2Qp@~*Cxvinr*6>*727aoGwNvy8~({<_qrT`^my;$0a*wG?enIo55x^u%t zq$#ezDtE;yTSkW+R#a@>0dL*|Z()ohz0!qErC&M%dPYcQ#9WI`=X0E3wyD_#=V*=- zZk_2SAxWsX5RHLsEu1+&{+OZpPsPE(ZN3M4mAZ^ zd@+AT*rhb}Dr0^syO2AALjb7)VL{K#Q!fMhVi{(9gv`?w@!IyTZ14;&%5d*Qt)%|{ zp-b2wj!ybh6a|Bc2R(!a!F&woqlrI9(J&g!!@fTp`Xe}-`{BSxFhZkgFq!p7(IlLP z{ct>-1lzF@y>pD}bj;UxD9gAQ6UG~Fq3uj2TmpN5lRULT`d5!3@o!zUK`hI2sM+2u`WoJ11bxWnoO36Cg z6gsbQWN?c%`SHCHMqf)1Un`t?Wn7i|)GK1s>y9r@ji=mxj12FlzC)lEYy=ssfmggG z8i>H%gjwenDugw1V7${dq@W0%r~4qQu7aqd`%*sGK{?Av9HVTzYp#vEvA$6-g*!TY9P0(u5gn6drwek8Tg2iZxcFqTAc=JBOE}T3o}?1~vKiKI8DP zeljFt&N&fWC;0&0`Mi%;Yf*@p%t3@G=2m7(B3ga<4pU5$?=a<@_9b2k7rg=$2-moT ze=QP(WNWaL%|R^NTQG@;PkAGPDSIi*7?!fc;I9de^*|Uzf-Cb?V7$7m2fEG{$OXL^ zO$+!6z6a{fZNS$Fyn{FvYpG2arT5DnaV?Ue#l{720`HlW>h{0liMnQH&U>zFvUtfpf7$IS7CkiLh0d zm{#^&jar{m(Qy#()a{Kj&czNPS!q>?{)HFe45n~~W6UtJHhl+1QRn2xpN=|FMpFKl zU;}5xDYb}d;On()wDdv~CRsCXRBDUy#hVMht;1;Kgx%lla8p?+Bxco#n(CM_?_Q=I_gjavv7%MJ}>&X5S+id*5|+U zC|6!}c$}>LD!TzIxB(fWB)&r+p)n!1>r|gdkVK}u8155_*g93KH%e%Y#;f+~xsC{7 z1a!{gHDxIK7H5=o0G4PWLq8P(L+btdHt!kA5*S}3 z3}tf|qN;uQh9VUag;h>6WK4wShyw-@Ng?+=)18Tf}4r_Un6@nKG>W?D7l{6mpYVzw*_UTnx(R_@NZEhFHagH686yR5iF)m)v% zF}c^yVBs@I?>Q&Jtawd_4slp`n|DLOtan}DZ4Qgln`WE*McesMdPDmK#J6jGLtsgL z5|4!DB)vU(D=0^RFH!{Q2BbK=)#mwJBp&PYUv91+0lZ2{#$du6J5xtw?DQq@S5;%Q z)16Q>Z0k)}L7aT8;q**Yd;HN3>o-4Ys<%w<#UT(^9%g+0MC^Z5*U6d@E|BY%{^^>L zm_IWHMsjBze`e@`h&xweK5ONemn$XY~W5vp|DmF^cMkqD%$jAe1rgG0Q$U>oJpx%DQX&4B1vjm#lh)|t6|Wp?Y_Ku zRnKO$604#9ftgH&fI|Hwh-d*8q+T%~9Y?l6X@*7H`4q7DZfgs?KZB zXK{5&6pGBv%j;Zy$%o(>m(VhL_LaWtU+U(Zcd0@-Iu}p#wNlqx9Y1E9U8++nMK3N|>dEEn&^ou%mytR& zZT;A|SfzSys~YvzS)CgqEPFP^UV@3V6QplO=!kq%DmMG(>g6?Wx~9ko*yIG9KkJ!2 zZas6(uUT~;IGbSFoi^)E>dmzh{07I&>b)JkReGqNE&E8Za5(DE zCi77MXHgK%VSg~{PbcAMG@gWWG@GLFa5xP|!~SSEA9|xvFd5Fn`Dh0|+JMv%zguUg z2q$(=PYIB7eoo_ixS za}@cLXcqbYcsv`AP&gaS!(cq}{a_Xj{3sYiupfBg!0W@oWH{V~kTE^?B)iRra)*Uo zZeAxQDnNTkTkmCQ$JG{+=@M3|k(d*#6blPXb0g3qt^%@fEIbS~xss~3K&J{!dzdyU zqCItbgmGLe#kIGuai(ZK2M95xl6vtAe9*b zJ!z0ggMp|WDoit}$*f3(a_dJ$@yp@bkad<{sHC#Nv;Wa-JIl9^3#_`TWUM|4>+=5T zp>r&@2Sahwvm6k0`SvVtRu8fTBR6ML=<6=fD#`FHhImzHeqPLlyZ;_0s%DEQke2}c zA_)1LM}>8&j#l#LoV=2&$Pjxq2+c_rqKaoj3I_2^$JL1fzyiAH_6KepBr>l}SVH=w zC)4(_qeG`RgHKhQ2XF13C2?9`$yQLq_=B*-O1S_k{YCjL%C<$XbXfiF_^+JCpUM1Z zwnRV67ytI|C_fcp1bp57T16L76Z&k;$_vBDFm%qrBfBK@u6Fd6AsC6s_L}9b*)pD+ zL{;)S0Ef{njJ%p&DE_y#q^8s93!JAFK{+vGp7Re)Ooo10Bg%4$YB`pxSM%b{I#-?Q zOExGMo6KQf%*AONUkKfIM$Uq)Gtqgzd( z35k*wlJ^s$m?8;GB)pa{7d78pC*p_~Mc}E?^`Y335@@oH<0Fue>fMN3ca<@9`Rf~CUa4jL5DN1@?7SvQ2%qdr%99?sH!wuZDiZ- z3Z_-N(~zRYII1z1DRi3c?Z)6^Ggq-_x@wa5Sr~GaIaY-M?LT5cnDl(YndnIX9I7)> zN-i%s8*f#AyuBFMHVU)WlBhaWd6$vhvx{<9BI^t% zE%H}ud#K+o9TAIU^i$b3N}BE5G-6%CcrEtvJ5A5KdW0f$w--0ahehJ^I1}f>$TbNO zx_gXCFne$~wtk=d;aW@`%jHwAk~*%aPbDp;C{Sp`67x z83z|G$$cVkl@S+J*LEc}ue}%lwP^kc_dtPPzEBkoA7w+-boY7h3j^WLVS5%@w+NKDgHOo zIkI&}8XUm8Yy58{aeO9lk!CP`2j&Qht7aB_3PgbwRhMK#*5WLK>WC{K+{z+XPXGdn zDm9{2{1{rfQ~X=cx!_i4l@eLWO^sV!-*q#nC+ahrMuF;QJBfENQ*X(_d=?b!N**WTn z+xN`(#1C&M%G7uB0xr?6$aOD=4{PLr#!jz_%bb9W!Pr%@QK*`~nHyBc<*WCqr?v&q zZ4o1?-by*mTn?;&Yg8f<@F-hki2hP3D66^NWzk}5lyd>;69zgLoo)@ZGpO7WYi9v# z7j9>CRUc|+_tGHRu6T8Kw{>0B1VERnYx#qb9|dqW8hi6F9Qf0I5KjB^An?Lz(Dx?& z`Dio@kQev}%_Bby{l4E1U^Mgl-rNhT1==cD$=-n&|M~2l!&N(*LjtMLnE_Jzf;#M zwGK}0`%T32IY#n+c0Sj%@OV{A2bPAbrz7fQSR;zSJ2^KeqIk$Vbzz!>z9ex(H7s2$ zL9uHKY8@SRa7pLp?2?Zk%|lDX@QG%kwtYgF^4{hr^_98F7qDxDu22N=K8rJl^th`t z2U}U5MTdK>&w^6-Abi>tT6Fu!OSC*@kG4i_u(hOolvS#jt80j^)#Dv2R6%*%^{IeX zR;TW4ueC`_1k^zJr0Y_5`pB!&9H~cJlVzYaL_GR>6eaDq>z{d{{w><438 ze$by!qRC(s_|wT~4q?9^3`c!fliFb+q}9!A2A%6xdv$=SZ*xUrnMrJXe}e*J4{*SbmsoRK@Ej?^N}j$s()r=J;$@HSNp)9q%tc>fbxKNcUXlq%(PeJHH)uR5ZTP(l56gdf(&DZza!( z?o)^IQ*bORqEbg{w?s8J6&Lk}JcU7l&g6q$FL(lHaKIc@YXF zB!vu=J@&veRU1zFSeeL}H_Cx>$%K+H+oUQ%N=eou8J8hWD@ExB5mZIP^C!#_wGkk|*v_Q{k2xGC#l`rk6V-^7A%cojN^r(~S_oMtZ zeGYs@2>Uj7dh1J3gn#fA5q?DZTN7VkO+^7+7iO>8U3vY#9WLj*-NPz(=?XU{q93<% zSE-X-nsJr!=Ywg3!s)kgg=1V(XND`PI0bY4Tx_l4XkVtcW3)d4mm=rnd<|pugDT&X|5C-}af|kpKtFQ2m~+nLZB2Xa zi)*vE5>DnMTS<{u*%=aO+ikIAEZw#(1oXCxSJsi*0x}^Hx^xtqDh0&ob}}SO^NN=Q zM$cdjlMrP>AiUD;^c1M1`-c{(%xlSVcp@X76LGkeHdhg?8$B?Ited_SM#G9n0`87- zN6uy8_@lkz}Z^p;Ar+bA4&{qypp$ zS#5Y0tmE%@sQ@e{K@?9?`V}9dNHH9(ofYZpIsX$b4A-hCpO@A%K!cO-;DgmZ8txcc zx~Qr}jj$cNM#JB8<4||8k6Z}l&ZWGq4W*issm!#C%TmOI$t6uey-H*Blrz_vVy=fr zC0=_3a(G7t&o$6E)%M+1k3@|zSbo3ty)5~zcY{`i?46;JTyeTzB0lG4@l*w{(5AFy zThoQ(_OzQygl8GHv_5tr$xqXh`0wO(Kx36IpUpK`LE+BO!=s?kzGHqDz!v5jsJV$h?ch zdzYVhZWHu*wzKiD3sZc|g?&t5)XgpYN@~)I6|meK|3&WqD^@T!NDb-{EKtV{WS4>XPN6 zlq6*^zw?5C>T#?qxob$9?d6cKA8Kn!FVw1_xrPnHyk5x>d&Az z8=&EQ)SphLJ28`|AP1*$46g8E$tbvz*S|!dE5z+hwnk@yUT~QaK9L7seffM|A9;23 zv38O6R?*}4;d!1n8Vtn$p6A*BdxO#VD}T`M_xt1iI0(M-{Qh|0eFeP7N2U5%QwFoI zya)GX6ZZ%Cbi3VyC63U^0RUaVNO-`1Ie1d|p1B2dhtd7P!C%D{2g?l2zv*bfTky0V z$ri^ya{++EW0v8&O)sRhBg~v{It;yM$Krd2;%_>XZDK^12(b=0{@cO9lP99~Z&$Dj z{`JX|C*V4S3Fj&6n9+lSgM$y?6#?I4T4MHGmaLOV-`&Ic$DXaE2J literal 0 HcmV?d00001 diff --git a/stable/wireshark/1.0.9/helm-values.md b/stable/wireshark/1.0.10/helm-values.md similarity index 89% rename from stable/wireshark/1.0.9/helm-values.md rename to stable/wireshark/1.0.10/helm-values.md index 6076a0e9917..bc6b7f3206b 100644 --- a/stable/wireshark/1.0.9/helm-values.md +++ b/stable/wireshark/1.0.10/helm-values.md @@ -11,6 +11,7 @@ You will, however, be able to use all values referenced in the common chart here | Key | Type | Default | Description | |-----|------|---------|-------------| +| hostNetwork | bool | `true` | | | image.pullPolicy | string | `"IfNotPresent"` | | | image.repository | string | `"tccr.io/truecharts/wireshark"` | | | image.tag | string | `"v3.4.13"` | | @@ -19,8 +20,9 @@ You will, however, be able to use all values referenced in the common chart here | persistence.varrun.enabled | bool | `true` | | | podSecurityContext.runAsGroup | int | `0` | | | podSecurityContext.runAsUser | int | `0` | | +| securityContext.readOnlyRootFilesystem | bool | `false` | | | securityContext.runAsNonRoot | bool | `false` | | -| service.main.ports.main.port | int | `10137` | | +| service.main.ports.main.port | int | `3000` | | | service.main.ports.main.targetPort | int | `3000` | | All Rights Reserved - The TrueCharts Project diff --git a/stable/wireshark/1.0.9/ix_values.yaml b/stable/wireshark/1.0.10/ix_values.yaml similarity index 83% rename from stable/wireshark/1.0.9/ix_values.yaml rename to stable/wireshark/1.0.10/ix_values.yaml index 7be7f08765f..71bc609d252 100644 --- a/stable/wireshark/1.0.9/ix_values.yaml +++ b/stable/wireshark/1.0.10/ix_values.yaml @@ -4,8 +4,11 @@ image: tag: v3.4.13 securityContext: + readOnlyRootFilesystem: false runAsNonRoot: false +hostNetwork: true + podSecurityContext: runAsUser: 0 runAsGroup: 0 @@ -15,7 +18,7 @@ service: ports: main: targetPort: 3000 - port: 10137 + port: 3000 persistence: varrun: diff --git a/stable/wireshark/1.0.9/questions.yaml b/stable/wireshark/1.0.10/questions.yaml similarity index 99% rename from stable/wireshark/1.0.9/questions.yaml rename to stable/wireshark/1.0.10/questions.yaml index bb2b67c1650..8ecb97b0fd4 100644 --- a/stable/wireshark/1.0.9/questions.yaml +++ b/stable/wireshark/1.0.10/questions.yaml @@ -376,7 +376,7 @@ questions: description: "This port exposes the container port on the service" schema: type: int - default: 10137 + default: 3000 required: true - variable: advanced label: "Show Advanced settings" @@ -431,7 +431,7 @@ questions: label: "Host-Networking (Complicated)" schema: type: boolean - default: false + default: true - variable: externalInterfaces description: "Add External Interfaces" @@ -1451,7 +1451,7 @@ questions: label: "ReadOnly Root Filesystem" schema: type: boolean - default: true + default: false - variable: allowPrivilegeEscalation label: "Allow Privilege Escalation" schema: diff --git a/stable/wireshark/1.0.9/security.md b/stable/wireshark/1.0.10/security.md similarity index 84% rename from stable/wireshark/1.0.9/security.md rename to stable/wireshark/1.0.10/security.md index 7ae6a176a8f..c9ffe1db270 100644 --- a/stable/wireshark/1.0.9/security.md +++ b/stable/wireshark/1.0.10/security.md @@ -12,18 +12,20 @@ hide: ##### Scan Results #### Chart Object: wireshark/templates/common.yaml - - + + | Type | Misconfiguration ID | Check | Severity | Explaination | Links | |:----------------|:------------------:|:-----------:|:------------------:|-----------------------------------------|-----------------------------------------| | Kubernetes Security Check | KSV001 | Process can elevate its own privileges | MEDIUM |
Expand... A program inside the container can elevate its own privileges and run as root, which might give the program control over the container and node.

Container 'hostpatch' of Deployment 'RELEASE-NAME-wireshark' should set 'securityContext.allowPrivilegeEscalation' to false
|
Expand...https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted
https://avd.aquasec.com/appshield/ksv001
| | Kubernetes Security Check | KSV003 | Default capabilities not dropped | LOW |
Expand... The container should drop all default capabilities and add only those that are needed for its execution.

Container 'RELEASE-NAME-wireshark' of Deployment 'RELEASE-NAME-wireshark' should add 'ALL' to 'securityContext.capabilities.drop'
|
Expand...https://kubesec.io/basics/containers-securitycontext-capabilities-drop-index-all/
https://avd.aquasec.com/appshield/ksv003
| | Kubernetes Security Check | KSV003 | Default capabilities not dropped | LOW |
Expand... The container should drop all default capabilities and add only those that are needed for its execution.

Container 'hostpatch' of Deployment 'RELEASE-NAME-wireshark' should add 'ALL' to 'securityContext.capabilities.drop'
|
Expand...https://kubesec.io/basics/containers-securitycontext-capabilities-drop-index-all/
https://avd.aquasec.com/appshield/ksv003
| +| Kubernetes Security Check | KSV009 | Access to host network | HIGH |
Expand... Sharing the host’s network namespace permits processes in the pod to communicate with processes bound to the host’s loopback adapter.

Deployment 'RELEASE-NAME-wireshark' should not set 'spec.template.spec.hostNetwork' to true
|
Expand...https://kubernetes.io/docs/concepts/security/pod-security-standards/#baseline
https://avd.aquasec.com/appshield/ksv009
| | Kubernetes Security Check | KSV011 | CPU not limited | LOW |
Expand... Enforcing CPU limits prevents DoS via resource exhaustion.

Container 'hostpatch' of Deployment 'RELEASE-NAME-wireshark' should set 'resources.limits.cpu'
|
Expand...https://cloud.google.com/blog/products/containers-kubernetes/kubernetes-best-practices-resource-requests-and-limits
https://avd.aquasec.com/appshield/ksv011
| | Kubernetes Security Check | KSV012 | Runs as root user | MEDIUM |
Expand... 'runAsNonRoot' forces the running image to run as a non-root user to ensure least privileges.

Container 'RELEASE-NAME-wireshark' of Deployment 'RELEASE-NAME-wireshark' should set 'securityContext.runAsNonRoot' to true
|
Expand...https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted
https://avd.aquasec.com/appshield/ksv012
| | Kubernetes Security Check | KSV012 | Runs as root user | MEDIUM |
Expand... 'runAsNonRoot' forces the running image to run as a non-root user to ensure least privileges.

Container 'autopermissions' of Deployment 'RELEASE-NAME-wireshark' should set 'securityContext.runAsNonRoot' to true
|
Expand...https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted
https://avd.aquasec.com/appshield/ksv012
| | Kubernetes Security Check | KSV012 | Runs as root user | MEDIUM |
Expand... 'runAsNonRoot' forces the running image to run as a non-root user to ensure least privileges.

Container 'hostpatch' of Deployment 'RELEASE-NAME-wireshark' should set 'securityContext.runAsNonRoot' to true
|
Expand...https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted
https://avd.aquasec.com/appshield/ksv012
| +| Kubernetes Security Check | KSV014 | Root file system is not read-only | LOW |
Expand... An immutable root file system prevents applications from writing to their local disk. This can limit intrusions, as attackers will not be able to tamper with the file system or write foreign executables to disk.

Container 'RELEASE-NAME-wireshark' of Deployment 'RELEASE-NAME-wireshark' should set 'securityContext.readOnlyRootFilesystem' to true
|
Expand...https://kubesec.io/basics/containers-securitycontext-readonlyrootfilesystem-true/
https://avd.aquasec.com/appshield/ksv014
| | Kubernetes Security Check | KSV014 | Root file system is not read-only | LOW |
Expand... An immutable root file system prevents applications from writing to their local disk. This can limit intrusions, as attackers will not be able to tamper with the file system or write foreign executables to disk.

Container 'autopermissions' of Deployment 'RELEASE-NAME-wireshark' should set 'securityContext.readOnlyRootFilesystem' to true
|
Expand...https://kubesec.io/basics/containers-securitycontext-readonlyrootfilesystem-true/
https://avd.aquasec.com/appshield/ksv014
| | Kubernetes Security Check | KSV014 | Root file system is not read-only | LOW |
Expand... An immutable root file system prevents applications from writing to their local disk. This can limit intrusions, as attackers will not be able to tamper with the file system or write foreign executables to disk.

Container 'hostpatch' of Deployment 'RELEASE-NAME-wireshark' should set 'securityContext.readOnlyRootFilesystem' to true
|
Expand...https://kubesec.io/basics/containers-securitycontext-readonlyrootfilesystem-true/
https://avd.aquasec.com/appshield/ksv014
| | Kubernetes Security Check | KSV015 | CPU requests not specified | LOW |
Expand... When containers have resource requests specified, the scheduler can make better decisions about which nodes to place pods on, and how to deal with resource contention.

Container 'hostpatch' of Deployment 'RELEASE-NAME-wireshark' should set 'resources.requests.cpu'
|
Expand...https://cloud.google.com/blog/products/containers-kubernetes/kubernetes-best-practices-resource-requests-and-limits
https://avd.aquasec.com/appshield/ksv015
| @@ -36,6 +38,7 @@ hide: | Kubernetes Security Check | KSV021 | Runs with low group ID | MEDIUM |
Expand... Force the container to run with group ID > 10000 to avoid conflicts with the host’s user table.

Container 'RELEASE-NAME-wireshark' of Deployment 'RELEASE-NAME-wireshark' should set 'securityContext.runAsGroup' > 10000
|
Expand...https://kubesec.io/basics/containers-securitycontext-runasuser/
https://avd.aquasec.com/appshield/ksv021
| | Kubernetes Security Check | KSV021 | Runs with low group ID | MEDIUM |
Expand... Force the container to run with group ID > 10000 to avoid conflicts with the host’s user table.

Container 'autopermissions' of Deployment 'RELEASE-NAME-wireshark' should set 'securityContext.runAsGroup' > 10000
|
Expand...https://kubesec.io/basics/containers-securitycontext-runasuser/
https://avd.aquasec.com/appshield/ksv021
| | Kubernetes Security Check | KSV021 | Runs with low group ID | MEDIUM |
Expand... Force the container to run with group ID > 10000 to avoid conflicts with the host’s user table.

Container 'hostpatch' of Deployment 'RELEASE-NAME-wireshark' should set 'securityContext.runAsGroup' > 10000
|
Expand...https://kubesec.io/basics/containers-securitycontext-runasuser/
https://avd.aquasec.com/appshield/ksv021
| +| Kubernetes Security Check | KSV022 | Non-default capabilities added | MEDIUM |
Expand... Adding NET_RAW or capabilities beyond the default set must be disallowed.

Container 'RELEASE-NAME-wireshark' of Deployment 'RELEASE-NAME-wireshark' should not set 'securityContext.capabilities.add'
|
Expand...https://kubernetes.io/docs/concepts/security/pod-security-standards/#baseline
https://avd.aquasec.com/appshield/ksv022
| | Kubernetes Security Check | KSV023 | hostPath volumes mounted | MEDIUM |
Expand... HostPath volumes must be forbidden.

Deployment 'RELEASE-NAME-wireshark' should not set 'spec.template.volumes.hostPath'
|
Expand...https://kubernetes.io/docs/concepts/security/pod-security-standards/#baseline
https://avd.aquasec.com/appshield/ksv023
| | Kubernetes Security Check | KSV029 | A root primary or supplementary GID set | LOW |
Expand... Containers should be forbidden from running with a root primary or supplementary GID.

Deployment 'RELEASE-NAME-wireshark' should set 'spec.securityContext.runAsGroup', 'spec.securityContext.supplementalGroups[*]' and 'spec.securityContext.fsGroup' to integer greater than 0
|
Expand...https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted
https://avd.aquasec.com/appshield/ksv029
| @@ -51,33 +54,33 @@ hide: #### Container: tccr.io/truecharts/alpine:v3.15.2@sha256:29ed3480a0ee43f7af681fed5d4fc215516abf1c41eade6938b26d8c9c2c7583 (alpine 3.15.2) - + **alpine** - + | Package | Vulnerability | Severity | Installed Version | Fixed Version | Links | |:----------------|:------------------:|:-----------:|:------------------:|:-------------:|-----------------------------------------| -| zlib | CVE-2018-25032 | HIGH | 1.2.11-r3 | 1.2.12-r0 |
Expand...http://www.openwall.com/lists/oss-security/2022/03/25/2
http://www.openwall.com/lists/oss-security/2022/03/26/1
https://access.redhat.com/security/cve/CVE-2018-25032
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25032
https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531
https://github.com/madler/zlib/compare/v1.2.11...v1.2.12
https://github.com/madler/zlib/issues/605
https://ubuntu.com/security/notices/USN-5355-1
https://ubuntu.com/security/notices/USN-5355-2
https://www.openwall.com/lists/oss-security/2022/03/24/1
https://www.openwall.com/lists/oss-security/2022/03/28/1
https://www.openwall.com/lists/oss-security/2022/03/28/3
| +| zlib | CVE-2018-25032 | HIGH | 1.2.11-r3 | 1.2.12-r0 |
Expand...http://www.openwall.com/lists/oss-security/2022/03/25/2
http://www.openwall.com/lists/oss-security/2022/03/26/1
https://access.redhat.com/security/cve/CVE-2018-25032
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25032
https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531
https://github.com/madler/zlib/compare/v1.2.11...v1.2.12
https://github.com/madler/zlib/issues/605
https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html
https://nvd.nist.gov/vuln/detail/CVE-2018-25032
https://ubuntu.com/security/notices/USN-5355-1
https://ubuntu.com/security/notices/USN-5355-2
https://ubuntu.com/security/notices/USN-5359-1
https://www.debian.org/security/2022/dsa-5111
https://www.openwall.com/lists/oss-security/2022/03/24/1
https://www.openwall.com/lists/oss-security/2022/03/28/1
https://www.openwall.com/lists/oss-security/2022/03/28/3
| #### Container: tccr.io/truecharts/alpine:v3.15.2@sha256:29ed3480a0ee43f7af681fed5d4fc215516abf1c41eade6938b26d8c9c2c7583 (alpine 3.15.2) - + **alpine** - + | Package | Vulnerability | Severity | Installed Version | Fixed Version | Links | |:----------------|:------------------:|:-----------:|:------------------:|:-------------:|-----------------------------------------| -| zlib | CVE-2018-25032 | HIGH | 1.2.11-r3 | 1.2.12-r0 |
Expand...http://www.openwall.com/lists/oss-security/2022/03/25/2
http://www.openwall.com/lists/oss-security/2022/03/26/1
https://access.redhat.com/security/cve/CVE-2018-25032
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25032
https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531
https://github.com/madler/zlib/compare/v1.2.11...v1.2.12
https://github.com/madler/zlib/issues/605
https://ubuntu.com/security/notices/USN-5355-1
https://ubuntu.com/security/notices/USN-5355-2
https://www.openwall.com/lists/oss-security/2022/03/24/1
https://www.openwall.com/lists/oss-security/2022/03/28/1
https://www.openwall.com/lists/oss-security/2022/03/28/3
| +| zlib | CVE-2018-25032 | HIGH | 1.2.11-r3 | 1.2.12-r0 |
Expand...http://www.openwall.com/lists/oss-security/2022/03/25/2
http://www.openwall.com/lists/oss-security/2022/03/26/1
https://access.redhat.com/security/cve/CVE-2018-25032
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25032
https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531
https://github.com/madler/zlib/compare/v1.2.11...v1.2.12
https://github.com/madler/zlib/issues/605
https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html
https://nvd.nist.gov/vuln/detail/CVE-2018-25032
https://ubuntu.com/security/notices/USN-5355-1
https://ubuntu.com/security/notices/USN-5355-2
https://ubuntu.com/security/notices/USN-5359-1
https://www.debian.org/security/2022/dsa-5111
https://www.openwall.com/lists/oss-security/2022/03/24/1
https://www.openwall.com/lists/oss-security/2022/03/28/1
https://www.openwall.com/lists/oss-security/2022/03/28/3
| #### Container: Node.js - + **node-pkg** - + | Package | Vulnerability | Severity | Installed Version | Fixed Version | Links | |:----------------|:------------------:|:-----------:|:------------------:|:-------------:|-----------------------------------------| | deep-extend | CVE-2018-3750 | CRITICAL | 0.4.2 | 0.5.1 |
Expand...https://access.redhat.com/security/cve/CVE-2018-3750
https://github.com/advisories/GHSA-hr2v-3952-633q
https://hackerone.com/reports/311333
https://nodesecurity.io/advisories/612
https://nvd.nist.gov/vuln/detail/CVE-2018-3750
https://www.npmjs.com/advisories/612
| @@ -85,7 +88,7 @@ hide: **gobinary** - + | Package | Vulnerability | Severity | Installed Version | Fixed Version | Links | |:----------------|:------------------:|:-----------:|:------------------:|:-------------:|-----------------------------------------| | github.com/opencontainers/runc | CVE-2021-43784 | MEDIUM | v1.0.2 | v1.0.3 |
Expand...https://access.redhat.com/security/cve/CVE-2021-43784
https://bugs.chromium.org/p/project-zero/issues/detail?id=2241
https://github.com/opencontainers/runc/commit/9c444070ec7bb83995dbc0185da68284da71c554
https://github.com/opencontainers/runc/commit/d72d057ba794164c3cce9451a00b72a78b25e1ae
https://github.com/opencontainers/runc/commit/f50369af4b571e358f20b139eea52d612eb55eed
https://github.com/opencontainers/runc/security/advisories/GHSA-v95c-p5hm-xq8f
https://lists.debian.org/debian-lts-announce/2021/12/msg00005.html
https://nvd.nist.gov/vuln/detail/CVE-2021-43784
| @@ -93,31 +96,31 @@ hide: **gobinary** - + | No Vulnerabilities found | |:---------------------------------| - + **gobinary** - + | No Vulnerabilities found | |:---------------------------------| - + **gobinary** - + | No Vulnerabilities found | |:---------------------------------| - + **gobinary** - + | Package | Vulnerability | Severity | Installed Version | Fixed Version | Links | |:----------------|:------------------:|:-----------:|:------------------:|:-------------:|-----------------------------------------| | github.com/opencontainers/runc | CVE-2021-43784 | MEDIUM | v1.0.2 | v1.0.3 |
Expand...https://access.redhat.com/security/cve/CVE-2021-43784
https://bugs.chromium.org/p/project-zero/issues/detail?id=2241
https://github.com/opencontainers/runc/commit/9c444070ec7bb83995dbc0185da68284da71c554
https://github.com/opencontainers/runc/commit/d72d057ba794164c3cce9451a00b72a78b25e1ae
https://github.com/opencontainers/runc/commit/f50369af4b571e358f20b139eea52d612eb55eed
https://github.com/opencontainers/runc/security/advisories/GHSA-v95c-p5hm-xq8f
https://lists.debian.org/debian-lts-announce/2021/12/msg00005.html
https://nvd.nist.gov/vuln/detail/CVE-2021-43784
| @@ -125,9 +128,6 @@ hide: **gobinary** - + | No Vulnerabilities found | |:---------------------------------| - - - diff --git a/stable/wireshark/1.0.10/templates/common.yaml b/stable/wireshark/1.0.10/templates/common.yaml new file mode 100644 index 00000000000..a6613c2ce21 --- /dev/null +++ b/stable/wireshark/1.0.10/templates/common.yaml @@ -0,0 +1 @@ +{{ include "common.all" . }} diff --git a/stable/wireshark/1.0.10/values.yaml b/stable/wireshark/1.0.10/values.yaml new file mode 100644 index 00000000000..e69de29bb2d