Commit new Chart releases for TrueCharts

Signed-off-by: TrueCharts-Bot <bot@truecharts.org>

enterprise/authelia/19.0.13/CHANGELOG.md

@@ -0,0 +1,99 @@
+**Important:**
+*for the complete changelog, please refer to the website*
+
+
+
+
+## [authelia-19.0.13](https://github.com/truecharts/charts/compare/authelia-19.0.12...authelia-19.0.13) (2023-11-17)
+
+
+
+
+## [authelia-19.0.12](https://github.com/truecharts/charts/compare/authelia-19.0.11...authelia-19.0.12) (2023-11-10)
+
+### Docs
+
+- add authelia rules page ([#14509](https://github.com/truecharts/charts/issues/14509))
+  
+  ### Feat
+
+- Update Authelia question tooltips and defaults ([#13487](https://github.com/truecharts/charts/issues/13487))
+  
+  
+
+
+## [authelia-19.0.11](https://github.com/truecharts/charts/compare/authelia-19.0.10...authelia-19.0.11) (2023-11-09)
+
+### Chore
+
+- update helm general non-major ([#14467](https://github.com/truecharts/charts/issues/14467))
+  
+  
+
+
+## [authelia-19.0.10](https://github.com/truecharts/charts/compare/authelia-19.0.9...authelia-19.0.10) (2023-11-08)
+
+### Chore
+
+- update helm general non-major ([#14465](https://github.com/truecharts/charts/issues/14465))
+  
+  
+
+
+## [authelia-19.0.9](https://github.com/truecharts/charts/compare/authelia-19.0.8...authelia-19.0.9) (2023-11-08)
+
+
+
+
+## [authelia-19.0.8](https://github.com/truecharts/charts/compare/authelia-19.0.7...authelia-19.0.8) (2023-11-08)
+
+
+
+
+## [authelia-19.0.7](https://github.com/truecharts/charts/compare/authelia-19.0.6...authelia-19.0.7) (2023-11-08)
+
+### Chore
+
+- update helm general non-major ([#14454](https://github.com/truecharts/charts/issues/14454))
+  
+  ### Fix
+
+- fix doc mistakes breaking rendering on docusaurus 3.0
+  
+  
+
+
+## [authelia-19.0.6](https://github.com/truecharts/charts/compare/authelia-19.0.5...authelia-19.0.6) (2023-11-05)
+
+### Chore
+
+- update helm general non-major ([#14365](https://github.com/truecharts/charts/issues/14365))
+  
+  
+
+
+## [authelia-19.0.5](https://github.com/truecharts/charts/compare/authelia-19.0.4...authelia-19.0.5) (2023-11-03)
+
+### Chore
+
+- update helm general non-major ([#14287](https://github.com/truecharts/charts/issues/14287))
+  
+  
+
+
+## [authelia-19.0.4](https://github.com/truecharts/charts/compare/authelia-19.0.3...authelia-19.0.4) (2023-10-29)
+
+### Chore
+
+- Fix typo in categories and make them singular ([#13693](https://github.com/truecharts/charts/issues/13693))
+  - update helm general non-major ([#14094](https://github.com/truecharts/charts/issues/14094))
+  
+  
+
+
+## [authelia-19.0.3](https://github.com/truecharts/charts/compare/authelia-19.0.2...authelia-19.0.3) (2023-10-08)
+
+### Chore
+
+- dont quote bools
+  

enterprise/authelia/19.0.13/Chart.yaml

@@ -0,0 +1,42 @@
+apiVersion: v2
+appVersion: "4.37.5"
+dependencies:
+  - name: common
+    repository: https://library-charts.truecharts.org
+    version: 14.3.5
+  - condition: redis.enabled
+    name: redis
+    repository: https://deps.truecharts.org
+    version: 8.0.44
+deprecated: false
+description: Authelia is a Single Sign-On Multi-Factor portal for web apps
+home: https://truecharts.org/charts/enterprise/authelia
+icon: https://truecharts.org/img/hotlink-ok/chart-icons/authelia.png
+keywords:
+  - authelia
+  - authentication
+  - login
+  - SSO
+  - Authentication
+  - Security
+  - Two-Factor
+  - U2F
+  - YubiKey
+  - Push Notifications
+  - LDAP
+kubeVersion: ">=1.16.0-0"
+maintainers:
+  - email: info@truecharts.org
+    name: TrueCharts
+    url: https://truecharts.org
+name: authelia
+sources:
+  - https://github.com/truecharts/charts/tree/master/charts/enterprise/authelia
+  - https://github.com/authelia/chartrepo
+  - https://github.com/authelia/authelia
+type: application
+version: 19.0.13
+annotations:
+  truecharts.org/category: security
+  truecharts.org/SCALE-support: "true"
+  truecharts.org/grade: U

enterprise/authelia/19.0.13/app-changelog.md

@@ -0,0 +1,4 @@
+
+
+## [authelia-19.0.13](https://github.com/truecharts/charts/compare/authelia-19.0.12...authelia-19.0.13) (2023-11-17)
+

enterprise/authelia/19.0.13/app-readme.md

@@ -0,0 +1,8 @@
+Authelia is a Single Sign-On Multi-Factor portal for web apps
+
+This App is supplied by TrueCharts, for more information visit the manual: [https://truecharts.org/charts/enterprise/authelia](https://truecharts.org/charts/enterprise/authelia)
+
+---
+
+TrueCharts can only exist due to the incredible effort of our staff.
+Please consider making a [donation](https://truecharts.org/sponsor) or contributing back to the project any way you can!

enterprise/authelia/19.0.13/ix_values.yaml

@@ -0,0 +1,578 @@
+image:
+  repository: ghcr.io/authelia/authelia
+  pullPolicy: IfNotPresent
+  tag: 4.37.5@sha256:25fc5423238b6f3a1fc967fda3f6a9212846aeb4a720327ef61c8ccff52dbbe2
+manifestManager:
+  enabled: true
+workload:
+  main:
+    replicas: 2
+    strategy: RollingUpdate
+    podSpec:
+      containers:
+        main:
+          command:
+            - authelia
+          args:
+            - --config=/configuration.yaml
+          envFrom:
+            - configMapRef:
+                name: authelia-paths
+          probes:
+            liveness:
+              type: http
+              path: "/api/health"
+            readiness:
+              type: http
+              path: "/api/health"
+            startup:
+              type: http
+              path: "/api/health"
+service:
+  main:
+    ports:
+      main:
+        port: 9091
+        targetPort: 9091
+persistence:
+  config:
+    enabled: true
+    mountPath: "/config"
+cnpg:
+  main:
+    enabled: true
+    user: authelia
+    database: authelia
+# Enabled redis
+# ... for more options see https://github.com/tccr.io/truecharts/charts/tree/master/tccr.io/truecharts/redis
+redis:
+  enabled: true
+domain: example.com
+##
+## Server Configuration
+##
+server:
+  ##
+  ## Port sets the configured port for the daemon, service, and the probes.
+  ## Default is 9091 and should not need to be changed.
+  ##
+  port: 9091
+  ## Buffers usually should be configured to be the same value.
+  ## Explanation at https://www.authelia.com/docs/configuration/server.html
+  ## Read buffer size adjusts the server's max incoming request size in bytes.
+  ## Write buffer size does the same for outgoing responses.
+  read_buffer_size: 4096
+  write_buffer_size: 4096
+  ## Set the single level path Authelia listens on.
+  ## Must be alphanumeric chars and should not contain any slashes.
+  path: ""
+log:
+  ## Level of verbosity for logs: info, debug, trace.
+  level: trace
+  ## Format the logs are written as: json, text.
+  format: text
+  ## TODO: Statefulness check should check if this is set, and the configMap should enable it.
+  ## File path where the logs will be written. If not set logs are written to stdout.
+  # file_path: /config/authelia.log
+## Default redirection URL
+##
+## If user tries to authenticate without any referer, Authelia does not know where to redirect the user to at the end
+## of the authentication process. This parameter allows you to specify the default redirection URL Authelia will use
+## in such a case.
+##
+## Note: this parameter is optional. If not provided, user won't be redirected upon successful authentication.
+## Default is https://www.<domain> (value at the top of the values.yaml).
+default_redirection_url: ""
+# default_redirection_url: https://example.com
+
+theme: light
+##
+## TOTP Configuration
+##
+## Parameters used for TOTP generation
+totp:
+  ## The issuer name displayed in the Authenticator application of your choice
+  ## See: https://github.com/google/google-authenticator/wiki/Key-Uri-Format for more info on issuer names
+  ## Defaults to <domain>.
+  issuer: ""
+  ## The period in seconds a one-time password is current for. Changing this will require all users to register
+  ## their TOTP applications again. Warning: before changing period read the docs link below.
+  period: 30
+  ## The skew controls number of one-time passwords either side of the current one that are valid.
+  ## Warning: before changing skew read the docs link below.
+  ## See: https://www.authelia.com/docs/configuration/one-time-password.html#period-and-skew to read the documentation.
+  skew: 1
+##
+## Password Policy Config
+##
+## Parameters used for Password Policies
+password_policy:
+  ## See: https://www.authelia.com/configuration/security/password-policy/
+  standard:
+    enabled: false
+    min_length: 8
+    max_length: 0
+    require_uppercase: false
+    require_lowercase: false
+    require_number: false
+    require_special: false
+  zxcvbn:
+    ## See https://www.authelia.com/configuration/security/password-policy/#zxcvbn for more info
+    enabled: false
+    min_score: 3
+##
+## Duo Push API Configuration
+##
+## Parameters used to contact the Duo API. Those are generated when you protect an application of type
+## "Partner Auth API" in the management panel.
+duo_api:
+  enabled: false
+  hostname: api-123456789.example.com
+  integration_key: ABCDEF
+  plain_api_key: ""
+## NTP settings
+ntp:
+  address: "time.cloudflare.com:123"
+  version: 4
+  max_desync: 3s
+  disable_startup_check: false
+  disable_failure: true
+##
+## Authentication Backend Provider Configuration
+##
+## Used for verifying user passwords and retrieve information such as email address and groups users belong to.
+##
+## The available providers are: `file`, `ldap`. You must use one and only one of these providers.
+authentication_backend:
+  ## Disable both the HTML element and the API for reset password functionality
+  disable_reset_password: false
+  ## The amount of time to wait before we refresh data from the authentication backend. Uses duration notation.
+  ## To disable this feature set it to 'disable', this will slightly reduce security because for Authelia, users will
+  ## always belong to groups they belonged to at the time of login even if they have been removed from them in LDAP.
+  ## To force update on every request you can set this to '0' or 'always', this will increase processor demand.
+  ## See the below documentation for more information.
+  ## Duration Notation docs:  https://www.authelia.com/docs/configuration/index.html#duration-notation-format
+  ## Refresh Interval docs: https://www.authelia.com/docs/configuration/authentication/ldap.html#refresh-interval
+  refresh_interval: 5m
+  ## LDAP backend configuration.
+  ##
+  ## This backend allows Authelia to be scaled to more
+  ## than one instance and therefore is recommended for
+  ## production.
+  ldap:
+    ## Enable LDAP Backend.
+    enabled: false
+    ## The LDAP implementation, this affects elements like the attribute utilised for resetting a password.
+    ## Acceptable options are as follows:
+    ## - 'activedirectory' - For Microsoft Active Directory.
+    ## - 'custom' - For custom specifications of attributes and filters.
+    ## This currently defaults to 'custom' to maintain existing behaviour.
+    ##
+    ## Depending on the option here certain other values in this section have a default value, notably all of the
+    ## attribute mappings have a default value that this config overrides, you can read more about these default values
+    ## at https://www.authelia.com/docs/configuration/authentication/ldap.html#defaults
+    implementation: activedirectory
+    ## The url to the ldap server. Format: <scheme>://<address>[:<port>].
+    ## Scheme can be ldap or ldaps in the format (port optional).
+    url: ldap://openldap.default.svc.cluster.local
+    ## Connection Timeout.
+    timeout: 5s
+    ## Use StartTLS with the LDAP connection.
+    start_tls: false
+    tls:
+      ## Server Name for certificate validation (in case it's not set correctly in the URL).
+      server_name: ""
+      ## Skip verifying the server certificate (to allow a self-signed certificate).
+      ## In preference to setting this we strongly recommend you add the public portion of the certificate to the
+      ## certificates directory which is defined by the `certificates_directory` option at the top of the config.
+      skip_verify: false
+      ## Minimum TLS version for either Secure LDAP or LDAP StartTLS.
+      minimum_version: TLS1.2
+    ## The base dn for every LDAP query.
+    base_dn: DC=example,DC=com
+    ## The attribute holding the username of the user. This attribute is used to populate the username in the session
+    ## information. It was introduced due to #561 to handle case insensitive search queries. For you information,
+    ## Microsoft Active Directory usually uses 'sAMAccountName' and OpenLDAP usually uses 'uid'. Beware that this
+    ## attribute holds the unique identifiers for the users binding the user and the configuration stored in database.
+    ## Therefore only single value attributes are allowed and the value must never be changed once attributed to a user
+    ## otherwise it would break the configuration for that user. Technically, non-unique attributes like 'mail' can also
+    ## be used but we don't recommend using them, we instead advise to use the attributes mentioned above
+    ## (sAMAccountName and uid) to follow https://www.ietf.org/rfc/rfc2307.txt.
+    username_attribute: "uid"
+    ## An additional dn to define the scope to all users.
+    additional_users_dn: OU=Users
+    ## The users filter used in search queries to find the user profile based on input filled in login form.
+    ## Various placeholders are available in the user filter:
+    ## - {input} is a placeholder replaced by what the user inputs in the login form.
+    ## - {username_attribute} is a mandatory placeholder replaced by what is configured in `username_attribute`.
+    ## - {mail_attribute} is a placeholder replaced by what is configured in `mail_attribute`.
+    ## - DON'T USE - {0} is an alias for {input} supported for backward compatibility but it will be deprecated in later
+    ##   versions, so please don't use it.
+    ##
+    ## Recommended settings are as follows:
+    ## - Microsoft Active Directory: (&({username_attribute}={input})(objectCategory=person)(objectClass=user))
+    ## - OpenLDAP:
+    ##   - (&({username_attribute}={input})(objectClass=person))
+    ##   - (&({username_attribute}={input})(objectClass=inetOrgPerson))
+    ##
+    ## To allow sign in both with username and email, one can use a filter like
+    ## (&(|({username_attribute}={input})({mail_attribute}={input}))(objectClass=person))
+    users_filter: ""
+    ## An additional dn to define the scope of groups.
+    additional_groups_dn: OU=Groups
+    ## The groups filter used in search queries to find the groups of the user.
+    ## - {input} is a placeholder replaced by what the user inputs in the login form.
+    ## - {username} is a placeholder replace by the username stored in LDAP (based on `username_attribute`).
+    ## - {dn} is a matcher replaced by the user distinguished name, aka, user DN.
+    ## - {username_attribute} is a placeholder replaced by what is configured in `username_attribute`.
+    ## - {mail_attribute} is a placeholder replaced by what is configured in `mail_attribute`.
+    ## - DON'T USE - {0} is an alias for {input} supported for backward compatibility but it will be deprecated in later
+    ##   versions, so please don't use it.
+    ## - DON'T USE - {1} is an alias for {username} supported for backward compatibility but it will be deprecated in
+    ##   later version, so please don't use it.
+    ##
+    ## If your groups use the `groupOfUniqueNames` structure use this instead:
+    ##    (&(uniquemember={dn})(objectclass=groupOfUniqueNames))
+    groups_filter: ""
+    ## The attribute holding the name of the group
+    group_name_attribute: "cn"
+    ## The attribute holding the mail address of the user. If multiple email addresses are defined for a user, only the
+    ## first one returned by the LDAP server is used.
+    mail_attribute: "mail"
+    ## The attribute holding the display name of the user. This will be used to greet an authenticated user.
+    display_name_attribute: "displayname"
+    ## The username of the admin user.
+    user: CN=admin,DC=example,DC=com
+    plain_password: ""
+  ##
+  ## File (Authentication Provider)
+  ##
+  ## With this backend, the users database is stored in a file which is updated when users reset their passwords.
+  ## Therefore, this backend is meant to be used in a dev environment and not in production since it prevents Authelia
+  ## to be scaled to more than one instance. The options under 'password' have sane defaults, and as it has security
+  ## implications it is highly recommended you leave the default values. Before considering changing these settings
+  ## please read the docs page below:
+  ## https://www.authelia.com/docs/configuration/authentication/file.html#password-hash-algorithm-tuning
+  ##
+  ## Important: Kubernetes (or HA) users must read https://www.authelia.com/docs/features/statelessness.html
+  ##
+  file:
+    enabled: true
+    path: /config/users_database.yml
+    password:
+      algorithm: argon2id
+      iterations: 1
+      key_length: 32
+      salt_length: 16
+      memory: 1024
+      parallelism: 8
+##
+## Access Control Configuration
+##
+## Access control is a list of rules defining the authorizations applied for one resource to users or group of users.
+##
+## If 'access_control' is not defined, ACL rules are disabled and the 'bypass' rule is applied, i.e., access is allowed
+## to anyone. Otherwise restrictions follow the rules defined.
+##
+## Note: One can use the wildcard * to match any subdomain.
+## It must stand at the beginning of the pattern. (example: *.mydomain.com)
+##
+## Note: You must put patterns containing wildcards between simple quotes for the YAML to be syntactically correct.
+##
+## Definition: A 'rule' is an object with the following keys: 'domain', 'subject', 'policy' and 'resources'.
+##
+## - 'domain' defines which domain or set of domains the rule applies to.
+##
+## - 'subject' defines the subject to apply authorizations to. This parameter is optional and matching any user if not
+##    provided. If provided, the parameter represents either a user or a group. It should be of the form
+##    'user:<username>' or 'group:<groupname>'.
+##
+## - 'policy' is the policy to apply to resources. It must be either 'bypass', 'one_factor', 'two_factor' or 'deny'.
+##
+## - 'resources' is a list of regular expressions that matches a set of resources to apply the policy to. This parameter
+##   is optional and matches any resource if not provided.
+##
+## Note: the order of the rules is important. The first policy matching (domain, resource, subject) applies.
+access_control:
+  ## Default policy can either be 'bypass', 'one_factor', 'two_factor' or 'deny'. It is the policy applied to any
+  ## resource if there is no policy to be applied to the user.
+  default_policy: deny
+  networks: []
+  # networks:
+  # - name: private
+  #   networks:
+  #   - 10.0.0.0/8
+  #   - 172.16.0.0/12
+  #   - 192.168.0.0/16
+  # - name: vpn
+  #   networks:
+  #   - 10.9.0.0/16
+
+  rules: []
+  # rules:
+  # - domain: public.example.com
+  #   policy: bypass
+  # - domain: "*.example.com"
+  #   policy: bypass
+  #   methods:
+  #   - OPTIONS
+  # - domain: secure.example.com
+  #   policy: one_factor
+  #   networks:
+  #   - private
+  #   - vpn
+  #   - 192.168.1.0/24
+  #   - 10.0.0.1
+  # - domain:
+  #   - secure.example.com
+  #   - private.example.com
+  #   policy: two_factor
+  # - domain: singlefactor.example.com
+  #   policy: one_factor
+  # - domain: "mx2.mail.example.com"
+  #   subject: "group:admins"
+  #   policy: deny
+  # - domain: "*.example.com"
+  #   subject:
+  #   - "group:admins"
+  #   - "group:moderators"
+  #   policy: two_factor
+  # - domain: dev.example.com
+  #   resources:
+  #   - "^/groups/dev/.*$"
+  #   subject: "group:dev"
+  #   policy: two_factor
+  # - domain: dev.example.com
+  #   resources:
+  #   - "^/users/john/.*$"
+  #   subject:
+  #   - ["group:dev", "user:john"]
+  #   - "group:admins"
+  #   policy: two_factor
+  # - domain: "{user}.example.com"
+  #   policy: bypass
+##
+## Session Provider Configuration
+##
+## The session cookies identify the user once logged in.
+## The available providers are: `memory`, `redis`. Memory is the provider unless redis is defined.
+session:
+  ## The name of the session cookie. (default: authelia_session).
+  name: authelia_session
+  ## Sets the Cookie SameSite value. Possible options are none, lax, or strict.
+  ## Please read https://www.authelia.com/docs/configuration/session.html#same_site
+  same_site: lax
+  ## The time in seconds before the cookie expires and session is reset.
+  expiration: 1h
+  ## The inactivity time in seconds before the session is reset.
+  inactivity: 5m
+  ## The remember me duration.
+  ## Value is in seconds, or duration notation. Value of 0 disables remember me.
+  ## See: https://www.authelia.com/docs/configuration/index.html#duration-notation-format
+  ## Longer periods are considered less secure because a stolen cookie will last longer giving attackers more time to
+  ## spy or attack. Currently the default is 1M or 1 month.
+  remember_me_duration: 1M
+##
+## Redis Provider
+##
+## Important: Kubernetes (or HA) users must read https://www.authelia.com/docs/features/statelessness.html
+##
+## The redis connection details
+redisProvider:
+  port: 6379
+  ## Optional username to be used with authentication.
+  # username: authelia
+  username: ""
+  ## This is the Redis DB Index https://redis.io/commands/select (sometimes referred to as database number, DB, etc).
+  database_index: 0
+  ## The maximum number of concurrent active connections to Redis.
+  maximum_active_connections: 8
+  ## The target number of idle connections to have open ready for work. Useful when opening connections is slow.
+  minimum_idle_connections: 0
+  ## The Redis TLS configuration. If defined will require a TLS connection to the Redis instance(s).
+  tls:
+    enabled: false
+    ## Server Name for certificate validation (in case you are using the IP or non-FQDN in the host option).
+    server_name: ""
+    ## Skip verifying the server certificate (to allow a self-signed certificate).
+    ## In preference to setting this we strongly recommend you add the public portion of the certificate to the
+    ## certificates directory which is defined by the `certificates_directory` option at the top of the config.
+    skip_verify: false
+    ## Minimum TLS version for the connection.
+    minimum_version: TLS1.2
+  ## The Redis HA configuration options.
+  ## This provides specific options to Redis Sentinel, sentinel_name must be defined (Master Name).
+  high_availability:
+    enabled: false
+    enabledSecret: false
+    ## Sentinel Name / Master Name
+    sentinel_name: mysentinel
+    ## The additional nodes to pre-seed the redis provider with (for sentinel).
+    ## If the host in the above section is defined, it will be combined with this list to connect to sentinel.
+    ## For high availability to be used you must have either defined; the host above or at least one node below.
+    nodes: []
+    # nodes:
+    #   - host: sentinel-0.databases.svc.cluster.local
+    #     port: 26379
+    #   - host: sentinel-1.databases.svc.cluster.local
+    #     port: 26379
+
+    ## Choose the host with the lowest latency.
+    route_by_latency: false
+    ## Choose the host randomly.
+    route_randomly: false
+##
+## Regulation Configuration
+##
+## This mechanism prevents attackers from brute forcing the first factor. It bans the user if too many attempts are done
+## in a short period of time.
+regulation:
+  ## The number of failed login attempts before user is banned. Set it to 0 to disable regulation.
+  max_retries: 3
+  ## The time range during which the user can attempt login before being banned. The user is banned if the
+  ## authentication failed 'max_retries' times in a 'find_time' seconds window. Find Time accepts duration notation.
+  ## See: https://www.authelia.com/docs/configuration/index.html#duration-notation-format
+  find_time: 2m
+  ## The length of time before a banned user can login again. Ban Time accepts duration notation.
+  ## See: https://www.authelia.com/docs/configuration/index.html#duration-notation-format
+  ban_time: 5m
+##
+## Storage Provider Configuration
+##
+## The available providers are: `local`, `mysql`, `postgres`. You must use one and only one of these providers.
+storage:
+  ##
+  ## PostgreSQL (Storage Provider)
+  ##
+  postgres:
+    port: 5432
+    database: authelia
+    username: authelia
+    sslmode: disable
+    timeout: 5s
+##
+## Notification Provider
+##
+##
+## Notifications are sent to users when they require a password reset, a u2f registration or a TOTP registration.
+## The available providers are: filesystem, smtp. You must use one and only one of these providers.
+notifier:
+  ## You can disable the notifier startup check by setting this to true.
+  disable_startup_check: false
+  ##
+  ## File System (Notification Provider)
+  ##
+  ## Important: Kubernetes (or HA) users must read https://www.authelia.com/docs/features/statelessness.html
+  ##
+  filesystem:
+    enabled: true
+    filename: /config/notification.txt
+  ##
+  ## SMTP (Notification Provider)
+  ##
+  ## Use a SMTP server for sending notifications. Authelia uses the PLAIN or LOGIN methods to authenticate.
+  ## [Security] By default Authelia will:
+  ##   - force all SMTP connections over TLS including unauthenticated connections
+  ##      - use the disable_require_tls boolean value to disable this requirement
+  ##        (only works for unauthenticated connections)
+  ##   - validate the SMTP server x509 certificate during the TLS handshake against the hosts trusted certificates
+  ##     (configure in tls section)
+  smtp:
+    enabled: false
+    enabledSecret: false
+    host: smtp.mail.svc.cluster.local
+    port: 25
+    timeout: 5s
+    username: test
+    plain_password: test
+    sender: admin@example.com
+    ## HELO/EHLO Identifier. Some SMTP Servers may reject the default of localhost.
+    identifier: localhost
+    ## Subject configuration of the emails sent.
+    ## {title} is replaced by the text from the notifier
+    subject: "[Authelia] {title}"
+    ## This address is used during the startup check to verify the email configuration is correct.
+    ## It's not important what it is except if your email server only allows local delivery.
+    startup_check_address: test@authelia.com
+    disable_require_tls: false
+    disable_html_emails: false
+    tls:
+      ## Server Name for certificate validation (in case you are using the IP or non-FQDN in the host option).
+      server_name: ""
+      ## Skip verifying the server certificate (to allow a self-signed certificate).
+      ## In preference to setting this we strongly recommend you add the public portion of the certificate to the
+      ## certificates directory which is defined by the `certificates_directory` option at the top of the config.
+      skip_verify: false
+      ## Minimum TLS version for either StartTLS or SMTPS.
+      minimum_version: TLS1.2
+identity_providers:
+  oidc:
+    ## Enables this in the config map. Currently in beta stage.
+    ## See https://www.authelia.com/docs/configuration/identity-providers/oidc.html#roadmap
+    enabled: false
+    access_token_lifespan: 1h
+    authorize_code_lifespan: 1m
+    id_token_lifespan: 1h
+    refresh_token_lifespan: 90m
+    enable_client_debug_messages: false
+    ## SECURITY NOTICE: It's not recommended changing this option, and highly discouraged to have it below 8 for
+    ## security reasons.
+    minimum_parameter_entropy: 8
+    clients: []
+    # clients:
+    # -
+    ## The ID is the OpenID Connect ClientID which is used to link an application to a configuration.
+    # id: myapp
+## The description to show to users when they end up on the consent screen. Defaults to the ID above.
+# description: My Application
+
+## The client secret is a shared secret between Authelia and the consumer of this client.
+# secret: apple123
+
+## Sets the client to public. This should typically not be set, please see the documentation for usage.
+# public: false
+
+## The policy to require for this client; one_factor or two_factor.
+# authorization_policy: two_factor
+
+## Configures the consent mode; auto, explicit or implicit
+# consent_mode: auto
+
+## Audience this client is allowed to request.
+# audience: []
+
+## Scopes this client is allowed to request.
+# scopes:
+#   - openid
+#   - profile
+#   - email
+#   - groups
+
+## Redirect URI's specifies a list of valid case-sensitive callbacks for this client.
+# redirect_uris:
+#   - https://oidc.example.com/oauth2/callback
+
+## Grant Types configures which grants this client can obtain.
+## It's not recommended to configure this unless you know what you're doing.
+# grant_types:
+#   - refresh_token
+#   - authorization_code
+
+## Response Types configures which responses this client can be sent.
+## It's not recommended to configure this unless you know what you're doing.
+# response_types:
+#   - code
+
+## Response Modes configures which response modes this client supports.
+## It's not recommended to configure this unless you know what you're doing.
+# response_modes:
+#   - form_post
+#   - query
+#   - fragment
+
+## The algorithm used to sign userinfo endpoint responses for this client, either none or RS256.
+# userinfo_signing_algorithm: none
+
+portal:
+  open:
+    enabled: true

enterprise/authelia/19.0.13/templates/_configmap.tpl

@@ -0,0 +1,363 @@
+{{/* Define the configmap */}}
+{{- define "authelia.configmap.paths" -}}
+enabled: true
+data:
+  AUTHELIA_SERVER_DISABLE_HEALTHCHECK: "true"
+  AUTHELIA_JWT_SECRET_FILE: "/secrets/JWT_TOKEN"
+  AUTHELIA_SESSION_SECRET_FILE: "/secrets/SESSION_ENCRYPTION_KEY"
+  AUTHELIA_STORAGE_ENCRYPTION_KEY_FILE: "/secrets/ENCRYPTION_KEY"
+  AUTHELIA_STORAGE_POSTGRES_PASSWORD_FILE: "/secrets/STORAGE_PASSWORD"
+  {{- if .Values.authentication_backend.ldap.enabled }}
+  AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PASSWORD_FILE: "/secrets/LDAP_PASSWORD"
+  {{- end }}
+  {{- if .Values.notifier.smtp.enabled }}
+  AUTHELIA_NOTIFIER_SMTP_PASSWORD_FILE: "/secrets/SMTP_PASSWORD"
+  {{- end }}
+  AUTHELIA_SESSION_REDIS_PASSWORD_FILE: "/secrets/REDIS_PASSWORD"
+  {{- if .Values.redisProvider.high_availability.enabled }}
+  AUTHELIA_SESSION_REDIS_HIGH_AVAILABILITY_SENTINEL_PASSWORD_FILE: "/secrets/REDIS_SENTINEL_PASSWORD"
+  {{- end }}
+  {{- if .Values.duo_api.enabled }}
+  AUTHELIA_DUO_API_SECRET_KEY_FILE: "/secrets/DUO_API_KEY"
+  {{- end }}
+  {{- if .Values.identity_providers.oidc.enabled }}
+  AUTHELIA_IDENTITY_PROVIDERS_OIDC_HMAC_SECRET_FILE: "/secrets/OIDC_HMAC_SECRET"
+  AUTHELIA_IDENTITY_PROVIDERS_OIDC_ISSUER_PRIVATE_KEY_FILE: "/secrets/OIDC_PRIVATE_KEY"
+  {{- end }}
+
+{{- end -}}
+
+{{- define "authelia.configmap.configfile" -}}
+enabled: true
+data:
+  configuration.yaml: |
+    ---
+    theme: {{ .Values.theme | default "light" }}
+    default_redirection_url: {{ default (printf "https://www.%s" .Values.domain) .Values.default_redirection_url }}
+    ntp:
+      address:  {{ .Values.ntp.address | default "time.cloudflare.com:123" }}
+      version: {{ .Values.ntp.version | default 4 }}
+      max_desync: {{ .Values.ntp.max_desync | default "3s" }}
+      disable_startup_check: {{ .Values.ntp.disable_startup_check | default false }}
+      disable_failure: {{ .Values.ntp.disable_failure |  default true }}
+    server:
+      host: 0.0.0.0
+      port: {{ .Values.server.port | default 9091 }}
+      {{- if ne "" (.Values.server.path | default "") }}
+      path: {{ .Values.server.path }}
+      {{- end }}
+      buffers:
+        write: {{ .Values.server.write_buffer_size | default 4096 }}
+        read: {{ .Values.server.read_buffer_size | default 4096 }}
+      enable_pprof: {{ .Values.server.enable_pprof | default false }}
+      enable_expvars: {{ .Values.server.enable_expvars | default false }}
+    log:
+      level: {{ .Values.log.level | default "info" }}
+      format: {{ .Values.log.format | default "text" }}
+      {{- if ne "" (.Values.log.file_path | default "") }}
+      file_path: {{ .Values.log.file_path }}
+      keep_stdout: true
+      {{- end }}
+    totp:
+      issuer: {{ .Values.totp.issuer | default .Values.domain }}
+      period: {{ .Values.totp.period | default 30 }}
+      skew: {{ .Values.totp.skew | default 1 }}
+    {{- if .Values.password_policy.enabled }}
+    password_policy:
+      standard:
+        enabled: {{ .Values.password_policy.standard.enabled | default false }}
+        min_length: {{ .Values.password_policy.standard.min_length | default 8 }}
+        max_length: {{ .Values.password_policy.standard.max_length | default 0 }}
+        require_uppercase: {{ .Values.password_policy.standard.require_uppercase | default false }}
+        require_lowercase: {{ .Values.password_policy.standard.require_lowercase | default false }}
+        require_number: {{ .Values.password_policy.standard.require_number | default false }}
+        require_special: {{ .Values.password_policy.standard.require_special | default false }}
+      zxcvbn:
+        enabled: {{ .Values.password_policy.zxcvbn.enabled | default false }}
+        min_score: {{ .Values.password_policy.zxcvbn.min_score | default 3 }}
+    {{- end -}}
+    {{- if .Values.duo_api.enabled }}
+    duo_api:
+      hostname: {{ .Values.duo_api.hostname }}
+      integration_key: {{ .Values.duo_api.integration_key }}
+    {{- end -}}
+    {{- with $auth := .Values.authentication_backend }}
+    authentication_backend:
+      password_reset:
+        disable: {{ $auth.disable_reset_password }}
+    {{- if $auth.file.enabled }}
+      file:
+        path: {{ $auth.file.path }}
+        password:
+          {{- $p := $auth.file.password -}}
+          {{- if $p.algorithm }}
+          algorithm: {{ $p.algorithm }}
+          {{- end -}}
+          {{- if $p.iterations }}
+          iterations: {{ $p.iterations }}
+          {{- end -}}
+          {{- if $p.key_length }}
+          key_length: {{ $p.key_length }}
+          {{- end -}}
+          {{- if $p.salt_length }}
+          salt_length: {{ $p.salt_length }}
+          {{- end -}}
+          {{- if $p.memory }}
+          memory: {{ $p.memory }}
+          {{- end -}}
+          {{- if $p.parallelism }}
+          parallelism: {{ $p.parallelism }}
+          {{- end -}}
+    {{- end -}}
+    {{- if $auth.ldap.enabled }}
+      ldap:
+        implementation: {{ $auth.ldap.implementation | default "custom" }}
+        url: {{ $auth.ldap.url }}
+        timeout: {{ $auth.ldap.timeout | default "5s" }}
+        start_tls: {{ $auth.ldap.start_tls }}
+        tls:
+          {{- if hasKey $auth.ldap.tls "server_name" }}
+          server_name: {{ $auth.ldap.tls.server_name | default $auth.ldap.host }}
+          {{- end }}
+          minimum_version: {{ $auth.ldap.tls.minimum_version | default "TLS1.2" }}
+          skip_verify: {{ $auth.ldap.tls.skip_verify | default false }}
+    {{- if $auth.ldap.base_dn }}
+        base_dn: {{ $auth.ldap.base_dn }}
+    {{- end -}}
+    {{- if $auth.ldap.username_attribute }}
+        username_attribute: {{ $auth.ldap.username_attribute }}
+    {{- end -}}
+    {{- if $auth.ldap.additional_users_dn }}
+        additional_users_dn: {{ $auth.ldap.additional_users_dn }}
+    {{- end -}}
+    {{- if $auth.ldap.users_filter }}
+        users_filter: {{ $auth.ldap.users_filter }}
+    {{- end -}}
+    {{- if $auth.ldap.additional_groups_dn }}
+        additional_groups_dn: {{ $auth.ldap.additional_groups_dn }}
+    {{- end -}}
+    {{- if $auth.ldap.groups_filter }}
+        groups_filter: {{ $auth.ldap.groups_filter }}
+    {{- end -}}
+    {{- if $auth.ldap.group_name_attribute }}
+        group_name_attribute: {{ $auth.ldap.group_name_attribute }}
+    {{- end -}}
+    {{- if $auth.ldap.mail_attribute }}
+        mail_attribute: {{ $auth.ldap.mail_attribute }}
+    {{- end -}}
+    {{- if $auth.ldap.display_name_attribute }}
+        display_name_attribute: {{ $auth.ldap.display_name_attribute }}
+    {{- end }}
+        user: {{ $auth.ldap.user }}
+    {{- end -}}
+    {{- end -}}
+    {{- with $session := .Values.session }}
+    session:
+      name: {{ $session.name | default "authelia_session" }}
+      domain: {{ required "A valid .Values.domain entry required!" $.Values.domain }}
+      same_site: {{ $session.same_site | default "lax" }}
+      expiration: {{ $session.expiration | default "1M" }}
+      inactivity: {{ $session.inactivity | default "5m" }}
+      remember_me_duration: {{ $session.remember_me_duration | default "1M" }}
+    {{- end }}
+      redis:
+        host: {{ .Values.redis.creds.plain }}
+      {{- with $redis := .Values.redisProvider }}
+        port: {{ $redis.port | default 6379 }}
+        {{- if not (eq $redis.username "") }}
+        username: {{ $redis.username }}
+        {{- end }}
+        maximum_active_connections: {{ $redis.maximum_active_connections | default 8 }}
+        minimum_idle_connections: {{ $redis.minimum_idle_connections | default 0 }}
+    {{- if $redis.tls.enabled }}
+        tls:
+          server_name: {{ $redis.tls.server_name }}
+          minimum_version: {{ $redis.tls.minimum_version | default "TLS1.2" }}
+          skip_verify: {{ $redis.tls.skip_verify }}
+    {{- end }}
+    {{- if $redis.high_availability.enabled }}
+        high_availability:
+          sentinel_name: {{ $redis.high_availability.sentinel_name }}
+    {{- if $redis.high_availability.nodes }}
+          nodes:
+          {{- range $node := $redis.high_availability.nodes }}
+          - host: {{ $node.host }}
+            port: {{ $node.port | default 26379 }}
+          {{- end -}}
+    {{- end }}
+          route_by_latency: {{ $redis.high_availability.route_by_latency }}
+          route_randomly: {{ $redis.high_availability.route_randomly }}
+      {{- end }}
+    {{- end }}
+    regulation:
+      max_retries: {{ .Values.regulation.max_retries | default 3 }}
+      find_time: {{ .Values.regulation.find_time | default "1m" }}
+      ban_time: {{ .Values.regulation.ban_time | default "5m" }}
+    storage:
+      postgres:
+        host: {{ $.Values.cnpg.main.creds.host }}
+    {{- with $storage := .Values.storage }}
+        port: {{ $storage.postgres.port | default 5432 }}
+        database: {{ $storage.postgres.database | default "authelia" }}
+        username: {{ $storage.postgres.username | default "authelia" }}
+        timeout: {{ $storage.postgres.timeout | default "5s" }}
+        ssl:
+          mode: {{ $storage.postgres.sslmode | default "disable" }}
+    {{- end }}
+    {{- with $notifier := .Values.notifier }}
+    notifier:
+      disable_startup_check: {{ $.Values.notifier.disable_startup_check }}
+    {{- if $notifier.filesystem.enabled }}
+      filesystem:
+        filename: {{ $notifier.filesystem.filename }}
+    {{- end }}
+    {{- if $notifier.smtp.enabled }}
+      smtp:
+        host: {{ $notifier.smtp.host }}
+        port: {{ $notifier.smtp.port | default 25 }}
+        timeout: {{ $notifier.smtp.timeout | default "5s" }}
+        {{- with $notifier.smtp.username }}
+        username: {{ . }}
+        {{- end }}
+        sender: {{ $notifier.smtp.sender | quote }}
+        identifier: {{ $notifier.smtp.identifier | quote }}
+        subject: {{ $notifier.smtp.subject | quote }}
+        startup_check_address: {{ $notifier.smtp.startup_check_address | quote }}
+        disable_require_tls: {{ $notifier.smtp.disable_require_tls }}
+        disable_html_emails: {{ $notifier.smtp.disable_html_emails }}
+        tls:
+          server_name: {{ $notifier.smtp.tls.server_name | default $notifier.smtp.host }}
+          minimum_version: {{ $notifier.smtp.tls.minimum_version | default "TLS1.2" }}
+          skip_verify: {{ $notifier.smtp.tls.skip_verify | default false }}
+    {{- end }}
+    {{- end }}
+    {{- if .Values.identity_providers.oidc.enabled }}
+    identity_providers:
+      oidc:
+        access_token_lifespan: {{ .Values.identity_providers.oidc.access_token_lifespan | default "1h" }}
+        authorize_code_lifespan: {{ .Values.identity_providers.oidc.authorize_code_lifespan | default "1m" }}
+        id_token_lifespan: {{ .Values.identity_providers.oidc.id_token_lifespan | default "1h" }}
+        refresh_token_lifespan: {{ .Values.identity_providers.oidc.refresh_token_lifespan | default "90m" }}
+        enable_client_debug_messages: {{ .Values.identity_providers.oidc.enable_client_debug_messages | default false }}
+        minimum_parameter_entropy: {{ .Values.identity_providers.oidc.minimum_parameter_entropy | default 8 }}
+        {{- if .Values.identity_providers.oidc.clients  }}
+        clients:
+    {{- range $client := .Values.identity_providers.oidc.clients }}
+        - id: {{ $client.id }}
+          description: {{ $client.description | default $client.id }}
+          secret: {{ $client.secret | default (randAlphaNum 128) }}
+          {{- if $client.public }}
+          public: {{ $client.public }}
+          {{- end }}
+          authorization_policy: {{ $client.authorization_policy | default "two_factor" }}
+          consent_mode: {{ $client.consent_mode | default "auto" }}
+          redirect_uris:
+          {{- range $client.redirect_uris }}
+          - {{ . }}
+          {{- end }}
+          {{- if $client.audience }}
+          audience:
+            {{- range $client.audience }}
+            - {{ . }}
+            {{- end }}
+          {{- end }}
+          scopes:
+          {{- range ($client.scopes | default (list "openid" "profile" "email" "groups")) }}
+            - {{ . }}
+          {{- end }}
+          grant_types:
+          {{- range ($client.grant_types | default (list "refresh_token" "authorization_code")) }}
+            - {{ . }}
+          {{- end }}
+          response_types:
+          {{- range ($client.response_types | default (list "code")) }}
+            - {{ . }}
+          {{- end }}
+          {{- if $client.response_modes }}
+          response_modes:
+          {{- range $client.response_modes }}
+            - {{ . }}
+          {{- end }}
+          {{- end }}
+          userinfo_signing_algorithm: {{ $client.userinfo_signing_algorithm | default "none" }}
+    {{- end }}
+    {{- end }}
+    {{- end }}
+    access_control:
+    {{- if not .Values.access_control.rules }}
+      {{- if (eq .Values.access_control.default_policy "bypass") }}
+      default_policy: one_factor
+      {{- else if (eq .Values.access_control.default_policy "deny") }}
+      default_policy: two_factor
+      {{- else }}
+      default_policy: {{ .Values.access_control.default_policy }}
+      {{- end }}
+    {{- else }}
+      default_policy: {{ .Values.access_control.default_policy }}
+    {{- end }}
+
+    {{- if not .Values.access_control.networks }}
+      networks: []
+    {{- else }}
+      networks:
+    {{- range $net := .Values.access_control.networks }}
+      - name: {{ $net.name }}
+        networks:
+          {{- range $net.networks }}
+          - {{ . | squote }}
+          {{- end }}
+    {{- end }}
+    {{- end }}
+
+    {{- if not .Values.access_control.rules }}
+      rules: []
+    {{- else }}
+      rules:
+    {{- range $rule := .Values.access_control.rules }}
+      {{- if $rule.domain }}
+      - domain:
+        {{- if kindIs "string" $rule.domain }}
+          - {{ $rule.domain | squote }}
+        {{- else -}}
+          {{- range $rule.domain }}
+          - {{ . | squote }}
+          {{- end }}
+        {{- end }}
+      {{- end -}}
+      {{- with $rule.policy }}
+        policy: {{ . }}
+      {{- end -}}
+      {{- if $rule.networks }}
+        networks:
+        {{- if kindIs "string" $rule.networks }}
+          - {{ $rule.networks | squote }}
+        {{- else -}}
+          {{- range $rule.networks }}
+            - {{ . | squote }}
+          {{- end }}
+        {{- end }}
+      {{- end }}
+      {{- if $rule.subject }}
+        subject:
+        {{- if kindIs "string" $rule.subject }}
+          - {{ $rule.subject | squote }}
+        {{- else -}}
+          {{- range $rule.subject }}
+            - {{ . | squote }}
+          {{- end }}
+        {{- end }}
+      {{- end }}
+      {{- if $rule.resources }}
+        resources:
+        {{- if kindIs "string" $rule.resources }}
+          - {{ $rule.resources | squote }}
+        {{- else -}}
+          {{- range $rule.resources }}
+            - {{ . | squote }}
+          {{- end }}
+        {{- end }}
+      {{- end }}
+    {{- end }}
+    {{- end }}
+    ...
+{{- end -}}

enterprise/authelia/19.0.13/templates/_secrets.tpl

@@ -0,0 +1,53 @@
+{{/* Define the secrets */}}
+{{- define "authelia.secrets" -}}
+{{- $basename := include "tc.v1.common.lib.chart.names.fullname" $ -}}
+{{- $fetchname := printf "%s-authelia-secrets" $basename -}}
+
+{{/* Initialize all keys */}}
+{{- $oidckey := genPrivateKey "rsa" }}
+{{- $oidcsecret := randAlphaNum 32 }}
+{{- $jwtsecret := randAlphaNum 50 }}
+{{- $sessionsecret := randAlphaNum 50 }}
+{{- $encryptionkey := randAlphaNum 100 }}
+
+enabled: true
+data:
+  {{ with (lookup "v1" "Secret" .Release.Namespace $fetchname) }}
+    {{/* Get previous values and decode */}}
+    {{ $sessionsecret = (index .data "SESSION_ENCRYPTION_KEY") | b64dec }}
+    {{ $jwtsecret = (index .data "JWT_TOKEN") | b64dec }}
+    {{ $encryptionkey = (index .data "ENCRYPTION_KEY") | b64dec }}
+
+    {{/* Check if those keys ever existed. as OIDC is optional */}}
+    {{ if and (hasKey .data "OIDC_PRIVATE_KEY") (hasKey .data "OIDC_HMAC_SECRET") }}
+      {{ $oidckey = (index .data "OIDC_PRIVATE_KEY") | b64dec }}
+      {{ $oidcsecret = (index .data "OIDC_HMAC_SECRET") | b64dec }}
+    {{ end }}
+  {{ end }}
+  SESSION_ENCRYPTION_KEY: {{ $sessionsecret }}
+  JWT_TOKEN: {{ $jwtsecret }}
+  ENCRYPTION_KEY: {{ $encryptionkey }}
+
+  {{- if .Values.authentication_backend.ldap.enabled }}
+  LDAP_PASSWORD: {{ .Values.authentication_backend.ldap.plain_password }}
+  {{- end }}
+
+  {{- if and .Values.notifier.smtp.enabled .Values.notifier.smtp.plain_password }}
+  SMTP_PASSWORD: {{ .Values.notifier.smtp.plain_password }}
+  {{- end }}
+
+  {{- if .Values.duo_api.enabled }}
+  DUO_API_KEY: {{ .Values.duo_api.plain_api_key }}
+  {{- end }}
+
+  STORAGE_PASSWORD: {{ $.Values.cnpg.main.creds.password | trimAll "\"" }}
+
+  REDIS_PASSWORD: {{ .Values.redis.creds.redisPassword | trimAll "\"" }}
+  {{- if .Values.redisProvider.high_availability.enabled }}
+  REDIS_SENTINEL_PASSWORD: {{ .Values.redis.sentinelPassword | trimAll "\"" }}
+  {{- end }}
+
+  OIDC_PRIVATE_KEY: |
+    {{- $oidckey | nindent 4 }}
+  OIDC_HMAC_SECRET: {{ $oidcsecret }}
+{{- end -}}

enterprise/authelia/19.0.13/templates/common.yaml

@@ -0,0 +1,77 @@
+{{/* Make sure all variables are set properly */}}
+{{- include "tc.v1.common.loader.init" . }}
+
+{{/* Render configmap for authelia */}}
+{{- $configmapPaths := include "authelia.configmap.paths" . | fromYaml -}}
+{{- if $configmapPaths -}}
+  {{- $_ := set .Values.configmap "authelia-paths" $configmapPaths -}}
+{{- end -}}
+
+{{- $configmapFile := include "authelia.configmap.configfile" . | fromYaml -}}
+{{- if $configmapFile -}}
+  {{- $_ := set .Values.configmap "authelia-configfile" $configmapFile -}}
+{{- end -}}
+
+{{/* Render secrets for authelia */}}
+{{- $secret := include "authelia.secrets" . | fromYaml -}}
+{{- if $secret -}}
+  {{- $_ := set .Values.secret "authelia-secrets" $secret -}}
+{{- end -}}
+
+{{/* Append the general configMap volume to the volumes */}}
+{{- define "authelia.configmapVolume" -}}
+enabled: true
+mountPath: /configuration.yaml
+subPath: configuration.yaml
+readOnly: true
+type: "configmap"
+objectName: authelia-configfile
+{{- end -}}
+
+{{/* Append the general secret volumes to the volumes */}}
+{{- define "authelia.secretVolumes" -}}
+enabled: true
+mountPath: "/secrets"
+readOnly: true
+type: "secret"
+objectName: authelia-secrets
+items:
+  - key: "JWT_TOKEN"
+    path: JWT_TOKEN
+  - key: "SESSION_ENCRYPTION_KEY"
+    path: SESSION_ENCRYPTION_KEY
+  - key: "ENCRYPTION_KEY"
+    path: ENCRYPTION_KEY
+  - key: "STORAGE_PASSWORD"
+    path: STORAGE_PASSWORD
+    {{- if .Values.authentication_backend.ldap.enabled }}
+  - key: "LDAP_PASSWORD"
+    path: LDAP_PASSWORD
+    {{- end }}
+    {{- if and .Values.notifier.smtp.enabled .Values.notifier.smtp.plain_password }}
+  - key: "SMTP_PASSWORD"
+    path: SMTP_PASSWORD
+    {{- end }}
+  - key: "REDIS_PASSWORD"
+    path: REDIS_PASSWORD
+    {{- if .Values.redisProvider.high_availability.enabled}}
+  - key: "REDIS_SENTINEL_PASSWORD"
+    path: REDIS_SENTINEL_PASSWORD
+    {{- end }}
+    {{- if .Values.duo_api.enabled }}
+  - key: "DUO_API_KEY"
+    path: DUO_API_KEY
+    {{- end }}
+    {{- if .Values.identity_providers.oidc.enabled }}
+  - key: "OIDC_PRIVATE_KEY"
+    path: OIDC_PRIVATE_KEY
+  - key: "OIDC_HMAC_SECRET"
+    path: OIDC_HMAC_SECRET
+    {{- end }}
+{{- end -}}
+
+{{- $_ := set .Values.persistence "authelia-configfile" (include "authelia.configmapVolume" . | fromYaml) -}}
+{{- $_ := set .Values.persistence "authelia-secrets" (include "authelia.secretVolumes" . | fromYaml) -}}
+
+{{/* Render the templates */}}
+{{ include "tc.v1.common.loader.apply" . }}

enterprise/blocky/9.0.10/CHANGELOG.md

@@ -0,0 +1,99 @@
+**Important:**
+*for the complete changelog, please refer to the website*
+
+
+
+
+## [blocky-9.0.10](https://github.com/truecharts/charts/compare/blocky-9.0.9...blocky-9.0.10) (2023-11-17)
+
+
+
+
+## [blocky-9.0.9](https://github.com/truecharts/charts/compare/blocky-9.0.8...blocky-9.0.9) (2023-11-09)
+
+### Chore
+
+- update helm general non-major ([#14467](https://github.com/truecharts/charts/issues/14467))
+  
+  
+
+
+## [blocky-9.0.8](https://github.com/truecharts/charts/compare/blocky-9.0.7...blocky-9.0.8) (2023-11-08)
+
+### Chore
+
+- update helm general non-major ([#14465](https://github.com/truecharts/charts/issues/14465))
+  
+  
+
+
+## [blocky-9.0.7](https://github.com/truecharts/charts/compare/blocky-9.0.6...blocky-9.0.7) (2023-11-08)
+
+
+
+
+## [blocky-9.0.6](https://github.com/truecharts/charts/compare/blocky-9.0.5...blocky-9.0.6) (2023-11-08)
+
+
+
+
+## [blocky-9.0.5](https://github.com/truecharts/charts/compare/blocky-9.0.4...blocky-9.0.5) (2023-11-08)
+
+### Chore
+
+- update helm general non-major ([#14454](https://github.com/truecharts/charts/issues/14454))
+  
+  
+
+
+## [blocky-9.0.4](https://github.com/truecharts/charts/compare/blocky-9.0.3...blocky-9.0.4) (2023-11-05)
+
+### Chore
+
+- update helm general non-major ([#14365](https://github.com/truecharts/charts/issues/14365))
+  
+  
+
+
+## [blocky-9.0.3](https://github.com/truecharts/charts/compare/blocky-9.0.2...blocky-9.0.3) (2023-11-03)
+
+### Chore
+
+- update helm general non-major ([#14287](https://github.com/truecharts/charts/issues/14287))
+  
+  
+
+
+## [blocky-9.0.2](https://github.com/truecharts/charts/compare/blocky-9.0.1...blocky-9.0.2) (2023-10-29)
+
+### Chore
+
+- Fix typo in categories and make them singular ([#13693](https://github.com/truecharts/charts/issues/13693))
+  - update helm general non-major ([#14094](https://github.com/truecharts/charts/issues/14094))
+  - run precocmit ([#13387](https://github.com/truecharts/charts/issues/13387))
+  
+  
+
+
+## [blocky-9.0.1](https://github.com/truecharts/charts/compare/blocky-9.0.0...blocky-9.0.1) (2023-10-07)
+
+### Chore
+
+- update helm general non-major ([#13386](https://github.com/truecharts/charts/issues/13386))
+  
+  
+
+
+## [blocky-9.0.0](https://github.com/truecharts/charts/compare/blocky-8.0.1...blocky-9.0.0) (2023-10-07)
+
+### Chore
+
+- update helm general major (major) ([#11104](https://github.com/truecharts/charts/issues/11104))
+  
+  ### Docs
+
+- Add more to Setup-Guide ([#12235](https://github.com/truecharts/charts/issues/12235))
+  
+  
+
+

enterprise/blocky/9.0.10/Chart.yaml

@@ -0,0 +1,32 @@
+apiVersion: v2
+appVersion: "0.22.0"
+dependencies:
+  - name: common
+    repository: https://library-charts.truecharts.org
+    version: 14.3.5
+  - condition: redis.enabled
+    name: redis
+    repository: https://deps.truecharts.org
+    version: 8.0.44
+description: Blocky is a DNS proxy, DNS enhancer and ad-blocker for the local network written in Go
+home: https://truecharts.org/charts/enterprise/blocky
+icon: https://truecharts.org/img/hotlink-ok/chart-icons/blocky.png
+keywords:
+  - dns
+  - blocky
+kubeVersion: ">=1.16.0-0"
+maintainers:
+  - email: info@truecharts.org
+    name: TrueCharts
+    url: https://truecharts.org
+name: blocky
+sources:
+  - https://github.com/truecharts/charts/tree/master/charts/enterprise/blocky
+  - https://0xerr0r.github.io/blocky/
+  - https://github.com/0xERR0R/blocky
+  - https://github.com/Mozart409/blocky-frontend
+version: 9.0.10
+annotations:
+  truecharts.org/category: network
+  truecharts.org/SCALE-support: "true"
+  truecharts.org/grade: U

enterprise/blocky/9.0.10/app-changelog.md

@@ -0,0 +1,4 @@
+
+
+## [blocky-9.0.10](https://github.com/truecharts/charts/compare/blocky-9.0.9...blocky-9.0.10) (2023-11-17)
+

enterprise/blocky/9.0.10/ix_values.yaml

@@ -0,0 +1,344 @@
+image:
+  repository: spx01/blocky
+  tag: v0.22@sha256:7def473b1b553b730dd38ba0bc436fc732193c15d35681aa0b0eb962dd6350aa
+  pullPolicy: IfNotPresent
+k8sgatewayImage:
+  repository: tccr.io/truecharts/k8s_gateway
+  pullPolicy: IfNotPresent
+  tag: 0.3.4@sha256:c49645e7b263e5cfc8fc269db2aef7d90149cecc7a50e2c2fe77ef935dd35742
+manifestManager:
+  enabled: true
+workload:
+  main:
+    replicas: 2
+    strategy: RollingUpdate
+    podSpec:
+      containers:
+        main:
+          probes:
+            liveness:
+              enabled: false
+              type: exec
+              command:
+                - /app/blocky
+                - healthcheck
+            readiness:
+              enabled: false
+              type: exec
+              command:
+                - /app/blocky
+                - healthcheck
+            startup:
+              enabled: false
+              type: exec
+              command:
+                - /app/blocky
+                - healthcheck
+# -- Blocky Config File content
+blockyConfig: {}
+# upstream:
+#   default:
+#     - 1.1.1.1
+
+# -- some general blocky settings
+blocky:
+  # -- Enable prometheus annotations
+  enablePrometheus: true
+service:
+  main:
+    enabled: true
+    ports:
+      main:
+        enabled: true
+        port: 4000
+        protocol: http
+        targetPort: 4000
+  dnstcp:
+    enabled: true
+    ports:
+      dnstcp:
+        enabled: true
+        port: 53
+        targetPort: 53
+  dnsudp:
+    enabled: true
+    ports:
+      dnsudp:
+        enabled: true
+        port: 53
+        protocol: udp
+        targetPort: 53
+  dot:
+    enabled: true
+    ports:
+      dot:
+        enabled: true
+        port: 853
+        protocol: tcp
+        targetPort: 853
+  https:
+    enabled: true
+    ports:
+      https:
+        enabled: true
+        port: 4443
+        protocol: https
+        targetPort: 4443
+  k8sgateway:
+    enabled: true
+    ports:
+      k8sgateway:
+        enabled: true
+        port: 5353
+        protocol: udp
+        targetPort: 5353
+## TODO Add support for SCALE certificates and certificates secrets here
+certFile: ""
+keyFile: ""
+logLevel: info
+logFormat: text
+logTimestamp: true
+logPrivacy: false
+dohUserAgent: ""
+minTlsServeVersion: 1.2
+# -- set the default DNS upstream servers
+# Primarily designed for inclusion in the TrueNAS SCALE GUI
+defaultUpstreams:
+  - 1.1.1.1
+  - 1.0.0.1
+  - 8.8.8.8
+  - 8.8.4.4
+  - 9.9.9.9
+  - 149.112.112.112
+  - 208.67.222.222
+  - 208.67.220.220
+  - 8.26.56.26
+  - 8.20.247.20
+  - 185.228.168.9
+  - 185.228.169.9
+  - 76.76.19.19
+  - 76.223.122.150
+  - 76.76.2.0
+  - 76.76.10.0
+# -- set additional upstreams
+# Primarily designed for inclusion in the TrueNAS SCALE GUI
+upstreams:
+#  - name: group2
+#    dnsservers:
+#      - 1.1.1.1
+
+# -- set bootstrap dns (not needed)
+# Ensures bootstrap encryption and ensure it doesn't use k8s dns
+bootstrapDns:
+  # -- Upstream
+  upstream: ""
+  # -- IP's linked to upstream DoT/DoH DNS name
+  ips: []
+# -- set additional bootstrap dns (not needed, only used if bootstrapDns is set)
+additionalBootstrapDns: []
+# - upstream: ""
+#   ips: []
+
+# -- Return empty answer for these queries
+filtering:
+  # -- Ensures filtering by query type
+  queryTypes: []
+# -- Set manual custom DNS resolution
+customDNS:
+  customTTL: 1h
+  filterUnmappedTypes: true
+  rewrite: []
+  # - in: something.com
+  #   out: somethingelse.com
+  mapping: []
+  # - domain: something.com
+  #   dnsserver: 192.168.178.1
+# -- Setup client-name lookup
+clientLookup:
+  # -- upstream used for client-name lookup
+  upstream: ""
+  singleNameOrder: []
+  clients:
+  # - domain: laptop
+  #   ips: []
+# -- Setup caching
+caching:
+  minTime: 5m
+  maxTime: 30m
+  maxItemsCount: 0
+  prefetching: false
+  prefetchExpires: 2h
+  prefetchThreshold: 5
+  prefetchMaxItemsCount: 0
+  cacheTimeNegative: 30m
+# -- set conditional settings
+# Primarily designed for inclusion in the TrueNAS SCALE GUI
+conditional:
+  rewrite: []
+  # - in: something.com
+  #   out: somethingelse.com
+  mapping: []
+  # - domain: something.com
+  #   dnsserver: 192.168.178.1
+# -- set blocking settings using Lists
+# Primarily designed for inclusion in the TrueNAS SCALE GUI
+blocking:
+  # -- Sets the blocktype
+  blockType: nxDomain
+  # -- Sets the block ttl
+  blockTTL: 6h
+  # -- Sets the block refreshPeriod
+  refreshPeriod: 4h
+  # -- Sets the block download timeout
+  downloadTimeout: 60s
+  # -- Sets the block download attempt count
+  downloadAttempts: 3
+  # -- Sets the block download cooldown
+  downloadCooldown: 2s
+  # -- Set the start strategy (blocking | failOnError | fast)
+  startStrategy: blocking
+  # -- Sets how many list-groups can be processed at the same time
+  processingConcurrency: 4
+  # --  Add blocky whitelists
+  whitelist: []
+  #  - name: ads
+  #    lists:
+  #      - https://someurl.com/list.txt
+  #      - /somefile.txt
+
+  # -- Blocky blacklists
+  blacklist: []
+  # - name: ads
+  #   lists:
+  #     - https://someurl.com/list.txt
+  #     - /somefile.txt
+
+  # -- Blocky clientGroupsBlock
+  clientGroupsBlock: []
+  # - name: default
+  #   groups:
+  #     - ads
+# -- configure using hostsfile for lookups
+# Allows for using the hosts configured in kubernetes and such
+hostsFile:
+  enabled: false
+  filePath: /etc/hosts
+  hostsTTL: 60m
+  refreshPeriod: 30m
+## TODO: add this with postgresql support as well
+# queryLog:
+#   type: csv
+#   target: /logs
+#   logRetentionDays: 0
+#   creationAttempts: 3
+#   CreationCooldown: 2
+podOptions:
+  automountServiceAccountToken: true
+portal:
+  open:
+    enabled: false
+serviceAccount:
+  main:
+    # -- Specifies whether a service account should be created
+    enabled: true
+    primary: true
+# -- Create a ClusterRole and ClusterRoleBinding
+# @default -- See below
+rbac:
+  main:
+    # -- Enables or disables the ClusterRole and ClusterRoleBinding
+    enabled: true
+    primary: true
+    clusterWide: true
+    # -- Set Rules on the ClusterRole
+    rules:
+      - apiGroups:
+          - ""
+        resources:
+          - services
+          - namespaces
+        verbs:
+          - list
+          - watch
+      - apiGroups:
+          - extensions
+          - networking.k8s.io
+        resources:
+          - ingresses
+        verbs:
+          - list
+          - watch
+k8sgateway:
+  enabled: true
+  # -- TTL for non-apex responses (in seconds)
+  ttl: 300
+  # -- Limit what kind of resources to watch, e.g. watchedResources: ["Ingress"]
+  watchedResources: []
+  # -- Service name of a secondary DNS server (should be `serviceName.namespace`)
+  secondary: ""
+  # -- Override the default `serviceName.namespace` domain apex
+  apex: ""
+  # -- list of processed domains
+  domains: []
+  # -- Delegated domain
+  # - domain: "example.com"
+  #   # -- Optional configuration option for DNS01 challenge that will redirect all acme
+  #   # challenge requests to external cloud domain (e.g. managed by cert-manager)
+  #   # See: https://cert-manager.io/docs/configuration/acme/dns01/
+  #   dnsChallenge:
+  #     enabled: false
+  #     domain: dns01.clouddns.com
+
+  forward:
+    enabled: false
+    primary: tls://1.1.1.1
+    secondary: tls://1.0.0.1
+    options:
+      - name: tls_servername
+        value: cloudflare-dns.com
+metrics:
+  main:
+    # -- Enable and configure a Prometheus serviceMonitor for the chart under this key.
+    # @default -- See values.yaml
+    enabled: false
+    type: "servicemonitor"
+    endpoints:
+      - port: main
+        path: /metrics
+    # -- Enable and configure Prometheus Rules for the chart under this key.
+    # @default -- See values.yaml
+    prometheusRule:
+      enabled: false
+      labels: {}
+      # -- Configure additionial rules for the chart under this key.
+      # @default -- See prometheusrules.yaml
+      rules: []
+      # - alert: UnifiPollerAbsent
+      #   annotations:
+      #     description: Unifi Poller has disappeared from Prometheus service discovery.
+      #     summary: Unifi Poller is down.
+      #   expr: |
+      #     absent(up{job=~".*unifi-poller.*"} == 1)
+      #   for: 5m
+      #   labels:
+      #     severity: critical
+redis:
+  enabled: true
+# CANNOT be defined in above yaml section
+queryLog:
+  # optional one of: mysql, postgresql, csv, csv-client. If empty, log to console
+  type: ""
+  # directory (should be mounted as volume in docker) for csv, db connection string for mysql, ignored for included postgresql
+  # target: /var/log/something
+  # postgresql target: postgres://user:password@db_host_or_ip:5432/db_name
+  # if > 0, deletes log files which are older than ... days
+  logRetentionDays: 0
+  # optional: Max attempts to create specific query log writer, default: 3
+  creationAttempts: 3
+  # optional: Time between the creation attempts, default: 2s
+  creationCooldown: 2s
+cnpg:
+  main:
+    enabled: false
+    user: blocky
+    database: blocky

enterprise/blocky/9.0.9/CHANGELOG.md

@@ -1,99 +0,0 @@
-**Important:**
-*for the complete changelog, please refer to the website*
-
-
-
-
-## [blocky-9.0.9](https://github.com/truecharts/charts/compare/blocky-9.0.8...blocky-9.0.9) (2023-11-09)
-
-### Chore
-
-- update helm general non-major ([#14467](https://github.com/truecharts/charts/issues/14467))
-  
-  
-
-
-## [blocky-9.0.8](https://github.com/truecharts/charts/compare/blocky-9.0.7...blocky-9.0.8) (2023-11-08)
-
-### Chore
-
-- update helm general non-major ([#14465](https://github.com/truecharts/charts/issues/14465))
-  
-  
-
-
-## [blocky-9.0.7](https://github.com/truecharts/charts/compare/blocky-9.0.6...blocky-9.0.7) (2023-11-08)
-
-
-
-
-## [blocky-9.0.6](https://github.com/truecharts/charts/compare/blocky-9.0.5...blocky-9.0.6) (2023-11-08)
-
-
-
-
-## [blocky-9.0.5](https://github.com/truecharts/charts/compare/blocky-9.0.4...blocky-9.0.5) (2023-11-08)
-
-### Chore
-
-- update helm general non-major ([#14454](https://github.com/truecharts/charts/issues/14454))
-  
-  
-
-
-## [blocky-9.0.4](https://github.com/truecharts/charts/compare/blocky-9.0.3...blocky-9.0.4) (2023-11-05)
-
-### Chore
-
-- update helm general non-major ([#14365](https://github.com/truecharts/charts/issues/14365))
-  
-  
-
-
-## [blocky-9.0.3](https://github.com/truecharts/charts/compare/blocky-9.0.2...blocky-9.0.3) (2023-11-03)
-
-### Chore
-
-- update helm general non-major ([#14287](https://github.com/truecharts/charts/issues/14287))
-  
-  
-
-
-## [blocky-9.0.2](https://github.com/truecharts/charts/compare/blocky-9.0.1...blocky-9.0.2) (2023-10-29)
-
-### Chore
-
-- Fix typo in categories and make them singular ([#13693](https://github.com/truecharts/charts/issues/13693))
-  - update helm general non-major ([#14094](https://github.com/truecharts/charts/issues/14094))
-  - run precocmit ([#13387](https://github.com/truecharts/charts/issues/13387))
-  
-  
-
-
-## [blocky-9.0.1](https://github.com/truecharts/charts/compare/blocky-9.0.0...blocky-9.0.1) (2023-10-07)
-
-### Chore
-
-- update helm general non-major ([#13386](https://github.com/truecharts/charts/issues/13386))
-  
-  
-
-
-## [blocky-9.0.0](https://github.com/truecharts/charts/compare/blocky-8.0.1...blocky-9.0.0) (2023-10-07)
-
-### Chore
-
-- update helm general major (major) ([#11104](https://github.com/truecharts/charts/issues/11104))
-  
-  ### Docs
-
-- Add more to Setup-Guide ([#12235](https://github.com/truecharts/charts/issues/12235))
-  
-  
-
-
-## [blocky-8.0.1](https://github.com/truecharts/charts/compare/blocky-8.0.0...blocky-8.0.1) (2023-09-16)
-
-### Chore
-
-- update container image tccr.io/truecharts/blocky to v0.22.0 ([#12084](https://github.com/truecharts/charts/issues/12084))

enterprise/blocky/9.0.9/Chart.yaml

@@ -1,32 +0,0 @@
-apiVersion: v2
-appVersion: "0.22.0"
-dependencies:
-  - name: common
-    repository: https://library-charts.truecharts.org
-    version: 14.3.5
-  - condition: redis.enabled
-    name: redis
-    repository: https://deps.truecharts.org
-    version: 8.0.44
-description: Blocky is a DNS proxy, DNS enhancer and ad-blocker for the local network written in Go
-home: https://truecharts.org/charts/enterprise/blocky
-icon: https://truecharts.org/img/hotlink-ok/chart-icons/blocky.png
-keywords:
-  - dns
-  - blocky
-kubeVersion: ">=1.16.0-0"
-maintainers:
-  - email: info@truecharts.org
-    name: TrueCharts
-    url: https://truecharts.org
-name: blocky
-sources:
-  - https://github.com/truecharts/charts/tree/master/charts/enterprise/blocky
-  - https://0xerr0r.github.io/blocky/
-  - https://github.com/0xERR0R/blocky
-  - https://github.com/Mozart409/blocky-frontend
-version: 9.0.9
-annotations:
-  truecharts.org/category: network
-  truecharts.org/SCALE-support: "true"
-  truecharts.org/grade: U

enterprise/blocky/9.0.9/app-changelog.md

@@ -1,9 +0,0 @@
-
-
-## [blocky-9.0.9](https://github.com/truecharts/charts/compare/blocky-9.0.8...blocky-9.0.9) (2023-11-09)
-
-### Chore
-
-- update helm general non-major ([#14467](https://github.com/truecharts/charts/issues/14467))
-  
-  

enterprise/blocky/9.0.9/ix_values.yaml

@@ -1,374 +0,0 @@
-image:
-  repository: tccr.io/truecharts/blocky
-  tag: v0.22.0@sha256:385055de8ad0b9074d2057d054768d649b8289c5dd566367e0b6289ba5d661a4
-  pullPolicy: IfNotPresent
-
-k8sgatewayImage:
-  repository: tccr.io/truecharts/k8s_gateway
-  pullPolicy: IfNotPresent
-  tag: 0.3.4@sha256:c49645e7b263e5cfc8fc269db2aef7d90149cecc7a50e2c2fe77ef935dd35742
-manifestManager:
-  enabled: true
-workload:
-  main:
-    replicas: 2
-    strategy: RollingUpdate
-    podSpec:
-      containers:
-        main:
-          probes:
-            liveness:
-              enabled: false
-              type: exec
-              command:
-                - /app/blocky
-                - healthcheck
-            readiness:
-              enabled: false
-              type: exec
-              command:
-                - /app/blocky
-                - healthcheck
-            startup:
-              enabled: false
-              type: exec
-              command:
-                - /app/blocky
-                - healthcheck
-
-# -- Blocky Config File content
-blockyConfig: {}
-# upstream:
-#   default:
-#     - 1.1.1.1
-
-# -- some general blocky settings
-blocky:
-  # -- Enable prometheus annotations
-  enablePrometheus: true
-
-service:
-  main:
-    enabled: true
-    ports:
-      main:
-        enabled: true
-        port: 4000
-        protocol: http
-        targetPort: 4000
-  dnstcp:
-    enabled: true
-    ports:
-      dnstcp:
-        enabled: true
-        port: 53
-        targetPort: 53
-  dnsudp:
-    enabled: true
-    ports:
-      dnsudp:
-        enabled: true
-        port: 53
-        protocol: udp
-        targetPort: 53
-  dot:
-    enabled: true
-    ports:
-      dot:
-        enabled: true
-        port: 853
-        protocol: tcp
-        targetPort: 853
-  https:
-    enabled: true
-    ports:
-      https:
-        enabled: true
-        port: 4443
-        protocol: https
-        targetPort: 4443
-  k8sgateway:
-    enabled: true
-    ports:
-      k8sgateway:
-        enabled: true
-        port: 5353
-        protocol: udp
-        targetPort: 5353
-
-## TODO Add support for SCALE certificates and certificates secrets here
-certFile: ""
-keyFile: ""
-logLevel: info
-logFormat: text
-logTimestamp: true
-logPrivacy: false
-dohUserAgent: ""
-minTlsServeVersion: 1.2
-
-# -- set the default DNS upstream servers
-# Primarily designed for inclusion in the TrueNAS SCALE GUI
-defaultUpstreams:
-  - 1.1.1.1
-  - 1.0.0.1
-  - 8.8.8.8
-  - 8.8.4.4
-  - 9.9.9.9
-  - 149.112.112.112
-  - 208.67.222.222
-  - 208.67.220.220
-  - 8.26.56.26
-  - 8.20.247.20
-  - 185.228.168.9
-  - 185.228.169.9
-  - 76.76.19.19
-  - 76.223.122.150
-  - 76.76.2.0
-  - 76.76.10.0
-
-# -- set additional upstreams
-# Primarily designed for inclusion in the TrueNAS SCALE GUI
-upstreams:
-  #  - name: group2
-  #    dnsservers:
-  #      - 1.1.1.1
-
-# -- set bootstrap dns (not needed)
-# Ensures bootstrap encryption and ensure it doesn't use k8s dns
-bootstrapDns:
-  # -- Upstream
-  upstream: ""
-  # -- IP's linked to upstream DoT/DoH DNS name
-  ips: []
-
-# -- set additional bootstrap dns (not needed, only used if bootstrapDns is set)
-additionalBootstrapDns:
-  []
-  # - upstream: ""
-  #   ips: []
-
-# -- Return empty answer for these queries
-filtering:
-  # -- Ensures filtering by query type
-  queryTypes: []
-
-# -- Set manual custom DNS resolution
-customDNS:
-  customTTL: 1h
-  filterUnmappedTypes: true
-  rewrite: []
-  # - in: something.com
-  #   out: somethingelse.com
-  mapping: []
-  # - domain: something.com
-  #   dnsserver: 192.168.178.1
-
-# -- Setup client-name lookup
-clientLookup:
-  # -- upstream used for client-name lookup
-  upstream: ""
-  singleNameOrder: []
-  clients:
-  # - domain: laptop
-  #   ips: []
-
-# -- Setup caching
-caching:
-  minTime: 5m
-  maxTime: 30m
-  maxItemsCount: 0
-  prefetching: false
-  prefetchExpires: 2h
-  prefetchThreshold: 5
-  prefetchMaxItemsCount: 0
-  cacheTimeNegative: 30m
-
-# -- set conditional settings
-# Primarily designed for inclusion in the TrueNAS SCALE GUI
-conditional:
-  rewrite: []
-  # - in: something.com
-  #   out: somethingelse.com
-  mapping: []
-  # - domain: something.com
-  #   dnsserver: 192.168.178.1
-
-# -- set blocking settings using Lists
-# Primarily designed for inclusion in the TrueNAS SCALE GUI
-blocking:
-  # -- Sets the blocktype
-  blockType: nxDomain
-  # -- Sets the block ttl
-  blockTTL: 6h
-  # -- Sets the block refreshPeriod
-  refreshPeriod: 4h
-  # -- Sets the block download timeout
-  downloadTimeout: 60s
-  # -- Sets the block download attempt count
-  downloadAttempts: 3
-  # -- Sets the block download cooldown
-  downloadCooldown: 2s
-  # -- Set the start strategy (blocking | failOnError | fast)
-  startStrategy: blocking
-  # -- Sets how many list-groups can be processed at the same time
-  processingConcurrency: 4
-  # --  Add blocky whitelists
-  whitelist: []
-  #  - name: ads
-  #    lists:
-  #      - https://someurl.com/list.txt
-  #      - /somefile.txt
-
-  # -- Blocky blacklists
-  blacklist: []
-  # - name: ads
-  #   lists:
-  #     - https://someurl.com/list.txt
-  #     - /somefile.txt
-
-  # -- Blocky clientGroupsBlock
-  clientGroupsBlock: []
-  # - name: default
-  #   groups:
-  #     - ads
-
-# -- configure using hostsfile for lookups
-# Allows for using the hosts configured in kubernetes and such
-hostsFile:
-  enabled: false
-  filePath: /etc/hosts
-  hostsTTL: 60m
-  refreshPeriod: 30m
-
-## TODO: add this with postgresql support as well
-# queryLog:
-#   type: csv
-#   target: /logs
-#   logRetentionDays: 0
-#   creationAttempts: 3
-#   CreationCooldown: 2
-
-podOptions:
-  automountServiceAccountToken: true
-
-portal:
-  open:
-    enabled: false
-
-serviceAccount:
-  main:
-    # -- Specifies whether a service account should be created
-    enabled: true
-    primary: true
-
-# -- Create a ClusterRole and ClusterRoleBinding
-# @default -- See below
-rbac:
-  main:
-    # -- Enables or disables the ClusterRole and ClusterRoleBinding
-    enabled: true
-    primary: true
-    clusterWide: true
-    # -- Set Rules on the ClusterRole
-    rules:
-      - apiGroups:
-          - ""
-        resources:
-          - services
-          - namespaces
-        verbs:
-          - list
-          - watch
-      - apiGroups:
-          - extensions
-          - networking.k8s.io
-        resources:
-          - ingresses
-        verbs:
-          - list
-          - watch
-
-k8sgateway:
-  enabled: true
-  # -- TTL for non-apex responses (in seconds)
-  ttl: 300
-
-  # -- Limit what kind of resources to watch, e.g. watchedResources: ["Ingress"]
-  watchedResources: []
-
-  # -- Service name of a secondary DNS server (should be `serviceName.namespace`)
-  secondary: ""
-
-  # -- Override the default `serviceName.namespace` domain apex
-  apex: ""
-
-  # -- list of processed domains
-  domains: []
-  # -- Delegated domain
-  # - domain: "example.com"
-  #   # -- Optional configuration option for DNS01 challenge that will redirect all acme
-  #   # challenge requests to external cloud domain (e.g. managed by cert-manager)
-  #   # See: https://cert-manager.io/docs/configuration/acme/dns01/
-  #   dnsChallenge:
-  #     enabled: false
-  #     domain: dns01.clouddns.com
-
-  forward:
-    enabled: false
-    primary: tls://1.1.1.1
-    secondary: tls://1.0.0.1
-    options:
-      - name: tls_servername
-        value: cloudflare-dns.com
-
-metrics:
-  main:
-    # -- Enable and configure a Prometheus serviceMonitor for the chart under this key.
-    # @default -- See values.yaml
-    enabled: false
-    type: "servicemonitor"
-    endpoints:
-      - port: main
-        path: /metrics
-
-    # -- Enable and configure Prometheus Rules for the chart under this key.
-    # @default -- See values.yaml
-    prometheusRule:
-      enabled: false
-      labels: {}
-      # -- Configure additionial rules for the chart under this key.
-      # @default -- See prometheusrules.yaml
-      rules:
-        []
-        # - alert: UnifiPollerAbsent
-        #   annotations:
-        #     description: Unifi Poller has disappeared from Prometheus service discovery.
-        #     summary: Unifi Poller is down.
-        #   expr: |
-        #     absent(up{job=~".*unifi-poller.*"} == 1)
-        #   for: 5m
-        #   labels:
-        #     severity: critical
-
-redis:
-  enabled: true
-
-# CANNOT be defined in above yaml section
-queryLog:
-  # optional one of: mysql, postgresql, csv, csv-client. If empty, log to console
-  type: ""
-  # directory (should be mounted as volume in docker) for csv, db connection string for mysql, ignored for included postgresql
-  # target: /var/log/something
-  # postgresql target: postgres://user:password@db_host_or_ip:5432/db_name
-  # if > 0, deletes log files which are older than ... days
-  logRetentionDays: 0
-  # optional: Max attempts to create specific query log writer, default: 3
-  creationAttempts: 3
-  # optional: Time between the creation attempts, default: 2s
-  creationCooldown: 2s
-
-cnpg:
-  main:
-    enabled: false
-    user: blocky
-    database: blocky

enterprise/clusterissuer/4.2.10/CHANGELOG.md

@@ -0,0 +1,99 @@
+**Important:**
+*for the complete changelog, please refer to the website*
+
+
+
+
+## [clusterissuer-4.2.10](https://github.com/truecharts/charts/compare/clusterissuer-4.2.9...clusterissuer-4.2.10) (2023-11-17)
+
+
+
+
+## [clusterissuer-4.2.9](https://github.com/truecharts/charts/compare/clusterissuer-4.2.8...clusterissuer-4.2.9) (2023-11-08)
+
+
+
+
+## [clusterissuer-4.2.8](https://github.com/truecharts/charts/compare/clusterissuer-4.2.7...clusterissuer-4.2.8) (2023-11-08)
+
+
+
+
+## [clusterissuer-4.2.7](https://github.com/truecharts/charts/compare/clusterissuer-4.2.6...clusterissuer-4.2.7) (2023-11-08)
+
+### Chore
+
+- update helm general non-major ([#14454](https://github.com/truecharts/charts/issues/14454))
+  
+  
+
+
+## [clusterissuer-4.2.6](https://github.com/truecharts/charts/compare/clusterissuer-4.2.5...clusterissuer-4.2.6) (2023-11-05)
+
+### Feat
+
+- Add cluster certificate docs and replace experimental label with advanced ([#14372](https://github.com/truecharts/charts/issues/14372))
+  
+  
+
+
+## [clusterissuer-4.2.5](https://github.com/truecharts/charts/compare/clusterissuer-4.2.4...clusterissuer-4.2.5) (2023-11-05)
+
+### Chore
+
+- update helm general non-major ([#14365](https://github.com/truecharts/charts/issues/14365))
+  
+  
+
+
+## [clusterissuer-4.2.4](https://github.com/truecharts/charts/compare/clusterissuer-4.2.3...clusterissuer-4.2.4) (2023-11-05)
+
+### Docs
+
+- nameserver warning ([#14348](https://github.com/truecharts/charts/issues/14348))
+  
+  ### Fix
+
+- Fix http01 resource creation ([#14364](https://github.com/truecharts/charts/issues/14364))
+  
+  
+
+
+## [clusterissuer-4.2.3](https://github.com/truecharts/charts/compare/clusterissuer-4.2.2...clusterissuer-4.2.3) (2023-11-03)
+
+### Chore
+
+- update helm general non-major ([#14287](https://github.com/truecharts/charts/issues/14287))
+  
+  
+
+
+## [clusterissuer-4.2.2](https://github.com/truecharts/charts/compare/clusterissuer-4.2.1...clusterissuer-4.2.2) (2023-10-30)
+
+### Fix
+
+- Fix cluster certificate questions ([#14141](https://github.com/truecharts/charts/issues/14141))
+  
+  
+
+
+## [clusterissuer-4.2.1](https://github.com/truecharts/charts/compare/clusterissuer-4.2.0...clusterissuer-4.2.1) (2023-10-29)
+
+### Chore
+
+- update helm general non-major ([#14094](https://github.com/truecharts/charts/issues/14094))
+  
+  
+
+
+## [clusterissuer-4.2.0](https://github.com/truecharts/charts/compare/clusterissuer-4.1.4...clusterissuer-4.2.0) (2023-10-28)
+
+### Chore
+
+- Fix typo in categories and make them singular ([#13693](https://github.com/truecharts/charts/issues/13693))
+  
+  ### Feat
+
+- Add ability to create cluster-wide certificates ([#13852](https://github.com/truecharts/charts/issues/13852))
+  
+  

enterprise/clusterissuer/4.2.10/Chart.yaml

@@ -0,0 +1,28 @@
+apiVersion: v2
+appVersion: "latest"
+deprecated: false
+description: Certificate management for Kubernetes
+home: https://truecharts.org/charts/enterprise/clusterissuer
+icon: https://truecharts.org/img/hotlink-ok/chart-icons/clusterissuer.png
+keywords:
+  - cert-manager
+  - certificates
+dependencies:
+  - name: common
+    repository: https://library-charts.truecharts.org
+    version: 14.3.5
+kubeVersion: ">=1.16.0-0"
+maintainers:
+  - email: info@truecharts.org
+    name: TrueCharts
+    url: https://truecharts.org
+name: clusterissuer
+sources:
+  - https://github.com/truecharts/charts/tree/master/charts/enterprise/clusterissuer
+  - https://cert-manager.io/
+type: application
+version: 4.2.10
+annotations:
+  truecharts.org/category: core
+  truecharts.org/SCALE-support: "true"
+  truecharts.org/grade: U

enterprise/clusterissuer/4.2.10/app-changelog.md

@@ -0,0 +1,4 @@
+
+
+## [clusterissuer-4.2.10](https://github.com/truecharts/charts/compare/clusterissuer-4.2.9...clusterissuer-4.2.10) (2023-11-17)
+

enterprise/clusterissuer/4.2.10/ix_values.yaml

@@ -0,0 +1,104 @@
+image:
+  repository: hello-world
+  tag: latest@sha256:88ec0acaa3ec199d3b7eaf73588f4518c25f9d34f58ce9a0df68429c5af48e8d
+  pullPolicy: IfNotPresent
+manifestManager:
+  enabled: true
+workload:
+  main:
+    enabled: false
+    podSpec:
+      containers:
+        main:
+          enabled: false
+          probes:
+            liveness:
+              enabled: false
+            readiness:
+              enabled: false
+            startup:
+              enabled: false
+service:
+  main:
+    enabled: false
+    ports:
+      main:
+        enabled: false
+        port: 9999
+portal:
+  open:
+    enabled: false
+operator:
+  verify:
+    additionalOperators:
+      - cert-manager
+    enabled: true
+    failOnError: false
+clusterIssuer:
+  selfSigned:
+    enabled: true
+    name: "selfsigned"
+  CA: []
+  #   - name: myca
+  #     selfSigned: true
+  #     selfSignedCommonName: "my-selfsigned-ca"
+  #     # Used to manually define a CA-crt not used when selfSigned is enabled
+  #     crt: ""
+  #     key: ""
+  #     # TODO: Add option to use SCALE CA certs
+
+  ACME: []
+#   - name: letsencrypt
+#     # Used for both logging in to the DNS provider AND ACME registration
+#     email: ""
+#     server: 'https://acme-staging-v02.api.letsencrypt.org/directory'
+#     # Used primarily for the SCALE GUI
+#     customServer: 'https://acme-staging-v02.api.letsencrypt.org/directory'
+#     email: ""
+#     # Options: HTTP01, cloudflare, route53, akamai, digitalocean, rfc2136, acmedns
+#     type: ""
+#     # for cloudflare
+#     cfapikey: ""
+#     cfapitoken: ""
+#     # for route53
+#     region: ""
+#     accessKeyID: ""
+#     route53SecretAccessKey: ""
+#     # optional for route53
+#     role: ""
+#     # for akamai
+#     serviceConsumerDomain: ""
+#     akclientToken: ""
+#     akclientSecret: ""
+#     akaccessToken: ""
+#     # for digitalocean
+#     doaccessToken: ""
+#     # for rfc2136
+#     nameserver: ""
+#     tsigKeyName: ""
+#     tsigAlgorithm: ""
+#     rfctsigSecret: ""
+#     # for acmedns
+#     name: sd
+#     acmednsHost: asdf
+#     # Pick one of the bellow acmednsConfig
+#     acmednsConfigJson:
+#     acmednsConfig:
+#       - domain: ""
+#         username: ""
+#         password: ""
+#         fulldomain: ""
+#         subdomain: ""
+#         allowFrom: []
+
+clusterCertificates:
+  # Namespaces in which the certificates must be available
+  # Accepts comma-separated regex expressions
+  # replicationNamespaces: 'ix-.*'
+  certificates: []
+  # - name: mycert
+  #   enabled: true
+  #   certificateIssuer: selfsigned
+  #   hosts:
+  #     - my.domain.com
+  #     - '*.my.domain.com'

enterprise/clusterissuer/4.2.9/CHANGELOG.md

@@ -1,99 +0,0 @@
-**Important:**
-*for the complete changelog, please refer to the website*
-
-
-
-
-## [clusterissuer-4.2.9](https://github.com/truecharts/charts/compare/clusterissuer-4.2.8...clusterissuer-4.2.9) (2023-11-08)
-
-
-
-
-## [clusterissuer-4.2.8](https://github.com/truecharts/charts/compare/clusterissuer-4.2.7...clusterissuer-4.2.8) (2023-11-08)
-
-
-
-
-## [clusterissuer-4.2.7](https://github.com/truecharts/charts/compare/clusterissuer-4.2.6...clusterissuer-4.2.7) (2023-11-08)
-
-### Chore
-
-- update helm general non-major ([#14454](https://github.com/truecharts/charts/issues/14454))
-  
-  
-
-
-## [clusterissuer-4.2.6](https://github.com/truecharts/charts/compare/clusterissuer-4.2.5...clusterissuer-4.2.6) (2023-11-05)
-
-### Feat
-
-- Add cluster certificate docs and replace experimental label with advanced ([#14372](https://github.com/truecharts/charts/issues/14372))
-  
-  
-
-
-## [clusterissuer-4.2.5](https://github.com/truecharts/charts/compare/clusterissuer-4.2.4...clusterissuer-4.2.5) (2023-11-05)
-
-### Chore
-
-- update helm general non-major ([#14365](https://github.com/truecharts/charts/issues/14365))
-  
-  
-
-
-## [clusterissuer-4.2.4](https://github.com/truecharts/charts/compare/clusterissuer-4.2.3...clusterissuer-4.2.4) (2023-11-05)
-
-### Docs
-
-- nameserver warning ([#14348](https://github.com/truecharts/charts/issues/14348))
-  
-  ### Fix
-
-- Fix http01 resource creation ([#14364](https://github.com/truecharts/charts/issues/14364))
-  
-  
-
-
-## [clusterissuer-4.2.3](https://github.com/truecharts/charts/compare/clusterissuer-4.2.2...clusterissuer-4.2.3) (2023-11-03)
-
-### Chore
-
-- update helm general non-major ([#14287](https://github.com/truecharts/charts/issues/14287))
-  
-  
-
-
-## [clusterissuer-4.2.2](https://github.com/truecharts/charts/compare/clusterissuer-4.2.1...clusterissuer-4.2.2) (2023-10-30)
-
-### Fix
-
-- Fix cluster certificate questions ([#14141](https://github.com/truecharts/charts/issues/14141))
-  
-  
-
-
-## [clusterissuer-4.2.1](https://github.com/truecharts/charts/compare/clusterissuer-4.2.0...clusterissuer-4.2.1) (2023-10-29)
-
-### Chore
-
-- update helm general non-major ([#14094](https://github.com/truecharts/charts/issues/14094))
-  
-  
-
-
-## [clusterissuer-4.2.0](https://github.com/truecharts/charts/compare/clusterissuer-4.1.4...clusterissuer-4.2.0) (2023-10-28)
-
-### Chore
-
-- Fix typo in categories and make them singular ([#13693](https://github.com/truecharts/charts/issues/13693))
-  
-  ### Feat
-
-- Add ability to create cluster-wide certificates ([#13852](https://github.com/truecharts/charts/issues/13852))
-  
-  
-
-
-## [clusterissuer-4.1.4](https://github.com/truecharts/charts/compare/clusterissuer-4.1.3...clusterissuer-4.1.4) (2023-10-27)
-
-### Fix

enterprise/clusterissuer/4.2.9/Chart.yaml

@@ -1,28 +0,0 @@
-apiVersion: v2
-appVersion: "latest"
-deprecated: false
-description: Certificate management for Kubernetes
-home: https://truecharts.org/charts/enterprise/clusterissuer
-icon: https://truecharts.org/img/hotlink-ok/chart-icons/clusterissuer.png
-keywords:
-  - cert-manager
-  - certificates
-dependencies:
-  - name: common
-    repository: https://library-charts.truecharts.org
-    version: 14.3.5
-kubeVersion: ">=1.16.0-0"
-maintainers:
-  - email: info@truecharts.org
-    name: TrueCharts
-    url: https://truecharts.org
-name: clusterissuer
-sources:
-  - https://github.com/truecharts/charts/tree/master/charts/enterprise/clusterissuer
-  - https://cert-manager.io/
-type: application
-version: 4.2.9
-annotations:
-  truecharts.org/category: core
-  truecharts.org/SCALE-support: "true"
-  truecharts.org/grade: U

enterprise/clusterissuer/4.2.9/app-changelog.md

@@ -1,4 +0,0 @@
-
-
-## [clusterissuer-4.2.9](https://github.com/truecharts/charts/compare/clusterissuer-4.2.8...clusterissuer-4.2.9) (2023-11-08)
-

enterprise/clusterissuer/4.2.9/ix_values.yaml

@@ -1,108 +0,0 @@
-image:
-  repository: tccr.io/truecharts/scratch
-  tag: latest@sha256:7f821eeb99d04ac248c47f79cfbcc2482651fea48aff9ec5d2ba0ba34f1f5531
-  pullPolicy: IfNotPresent
-manifestManager:
-  enabled: true
-workload:
-  main:
-    enabled: false
-    podSpec:
-      containers:
-        main:
-          enabled: false
-          probes:
-            liveness:
-              enabled: false
-            readiness:
-              enabled: false
-            startup:
-              enabled: false
-
-service:
-  main:
-    enabled: false
-    ports:
-      main:
-        enabled: false
-        port: 9999
-
-portal:
-  open:
-    enabled: false
-
-operator:
-  verify:
-    additionalOperators:
-      - cert-manager
-    enabled: true
-    failOnError: false
-
-clusterIssuer:
-  selfSigned:
-    enabled: true
-    name: "selfsigned"
-  CA: []
-  #   - name: myca
-  #     selfSigned: true
-  #     selfSignedCommonName: "my-selfsigned-ca"
-  #     # Used to manually define a CA-crt not used when selfSigned is enabled
-  #     crt: ""
-  #     key: ""
-  #     # TODO: Add option to use SCALE CA certs
-
-  ACME: []
-#   - name: letsencrypt
-#     # Used for both logging in to the DNS provider AND ACME registration
-#     email: ""
-#     server: 'https://acme-staging-v02.api.letsencrypt.org/directory'
-#     # Used primarily for the SCALE GUI
-#     customServer: 'https://acme-staging-v02.api.letsencrypt.org/directory'
-#     email: ""
-#     # Options: HTTP01, cloudflare, route53, akamai, digitalocean, rfc2136, acmedns
-#     type: ""
-#     # for cloudflare
-#     cfapikey: ""
-#     cfapitoken: ""
-#     # for route53
-#     region: ""
-#     accessKeyID: ""
-#     route53SecretAccessKey: ""
-#     # optional for route53
-#     role: ""
-#     # for akamai
-#     serviceConsumerDomain: ""
-#     akclientToken: ""
-#     akclientSecret: ""
-#     akaccessToken: ""
-#     # for digitalocean
-#     doaccessToken: ""
-#     # for rfc2136
-#     nameserver: ""
-#     tsigKeyName: ""
-#     tsigAlgorithm: ""
-#     rfctsigSecret: ""
-#     # for acmedns
-#     name: sd
-#     acmednsHost: asdf
-#     # Pick one of the bellow acmednsConfig
-#     acmednsConfigJson:
-#     acmednsConfig:
-#       - domain: ""
-#         username: ""
-#         password: ""
-#         fulldomain: ""
-#         subdomain: ""
-#         allowFrom: []
-
-clusterCertificates:
-  # Namespaces in which the certificates must be available
-  # Accepts comma-separated regex expressions
-  # replicationNamespaces: 'ix-.*'
-  certificates: []
-  # - name: mycert
-  #   enabled: true
-  #   certificateIssuer: selfsigned
-  #   hosts:
-  #     - my.domain.com
-  #     - '*.my.domain.com'

enterprise/external-dns/1.0.4/CHANGELOG.md

@@ -1,41 +0,0 @@
-**Important:**
-*for the complete changelog, please refer to the website*
-
-
-
-
-## [external-dns-1.0.4](https://github.com/truecharts/charts/compare/external-dns-1.0.3...external-dns-1.0.4) (2023-11-09)
-
-### Fix
-
-- fix zoneidfilters ([#14496](https://github.com/truecharts/charts/issues/14496))
-  
-  
-
-
-## [external-dns-1.0.3](https://github.com/truecharts/charts/compare/external-dns-1.0.2...external-dns-1.0.3) (2023-11-08)
-
-
-
-
-## [external-dns-1.0.2](https://github.com/truecharts/charts/compare/external-dns-1.0.1...external-dns-1.0.2) (2023-11-08)
-
-
-
-
-## [external-dns-1.0.1](https://github.com/truecharts/charts/compare/external-dns-1.0.0...external-dns-1.0.1) (2023-11-08)
-
-### Chore
-
-- update helm general non-major ([#14454](https://github.com/truecharts/charts/issues/14454))
-  
-  
-
-
-## [external-dns-1.0.0](https://github.com/truecharts/charts/compare/external-dns-0.0.5...external-dns-1.0.0) (2023-11-07)
-
-### Feat
-
-- Move to Enterprise + add Docs ([#14426](https://github.com/truecharts/charts/issues/14426))
-  
-  

enterprise/external-dns/1.0.4/Chart.yaml

@@ -1,28 +0,0 @@
-apiVersion: v2
-appVersion: "0.13.6"
-dependencies:
-  - name: common
-    repository: https://library-charts.truecharts.org
-    version: 14.3.5
-deprecated: false
-description: ExternalDNS synchronizes exposed Kubernetes Services and Ingresses with DNS providers.
-home: https://truecharts.org/charts/enterprise/external-dns
-icon: https://truecharts.org/img/hotlink-ok/chart-icons/external-dns.png
-keywords:
-  - external-dns
-  - k8s
-  - kubernetes
-kubeVersion: ">=1.16.0-0"
-maintainers:
-  - email: info@truecharts.org
-    name: TrueCharts
-    url: https://truecharts.org
-name: external-dns
-sources:
-  - https://github.com/truecharts/charts/tree/master/charts/enterprise/external-dns
-  - https://github.com/kubernetes-sigs/external-dns
-type: application
-version: 1.0.4
-annotations:
-  truecharts.org/category: networking
-  truecharts.org/SCALE-support: "true"

enterprise/external-dns/1.0.4/app-changelog.md

@@ -1,9 +0,0 @@
-
-
-## [external-dns-1.0.4](https://github.com/truecharts/charts/compare/external-dns-1.0.3...external-dns-1.0.4) (2023-11-09)
-
-### Fix
-
-- fix zoneidfilters ([#14496](https://github.com/truecharts/charts/issues/14496))
-  
-  

enterprise/external-dns/1.0.4/ix_values.yaml

@@ -1,150 +0,0 @@
-image:
-  repository: tccr.io/truecharts/external-dns
-  pullPolicy: IfNotPresent
-  tag: v0.13.6@sha256:78c942addf7fbc79c384e55bed9a886706c748d744cedf6214d4a50dd7b76d54
-
-externaldns:
-  logLevel: "info"
-  logFormat: "text"
-  interval: "1m"
-  provider: "inmemory"
-  sources:
-    - "service"
-    - "ingress"
-  domainFilters: []
-  zoneidFilters: []
-  cloudflareProxied: ""
-  registry: "txt"
-  policy: ""
-  piholeServer: ""
-  piholePassword: ""
-  triggerLoopOnEvent: "false"
-  txtOwnerId: ""
-  txtPrefix: ""
-  txtSuffix: ""
-
-service:
-  main:
-    ports:
-      main:
-        protocol: http
-        targetPort: 7979
-        port: 7979
-
-workload:
-  main:
-    podSpec:
-      containers:
-        main:
-          probes:
-            liveness:
-              path: "/healthz"
-            readiness:
-              path: "/healthz"
-            startup:
-              path: "/healthz"
-          env:
-            CF_API_TOKEN: ""
-            CF_API_KEY: ""
-            CF_API_EMAIL: ""
-            DO_TOKEN: ""
-            DNSIMPLE_OAUTH: ""
-            LINODE_TOKEN: ""
-            OVH_APPLICATION_KEY: ""
-            OVH_APPLICATION_SECRET: ""
-            OVH_CONSUMER_KEY: ""
-            SCW_ACCESS_KEY: ""
-            SCW_SECRET_KEY: ""
-
-# -- Whether Role Based Access Control objects like roles and rolebindings should be created
-rbac:
-  main:
-    enabled: true
-    primary: true
-    clusterWide: true
-    rules:
-      - apiGroups: [""]
-        resources: ["nodes"]
-        verbs: ["list", "watch"]
-      - apiGroups: [""]
-        resources: ["pods"]
-        verbs: ["get", "watch", "list"]
-      - apiGroups: [""]
-        resources: ["services", "endpoints"]
-        verbs: ["get", "watch", "list"]
-      - apiGroups: ["extensions", "networking.k8s.io"]
-        resources: ["ingresses"]
-        verbs: ["get", "watch", "list"]
-      - apiGroups: ["networking.istio.io"]
-        resources: ["gateways"]
-        verbs: ["get", "watch", "list"]
-      - apiGroups: ["networking.istio.io"]
-        resources: ["virtualservices"]
-        verbs: ["get", "watch", "list"]
-      - apiGroups: ["getambassador.io"]
-        resources: ["hosts", "ingresses"]
-        verbs: ["get", "watch", "list"]
-      - apiGroups: ["projectcontour.io"]
-        resources: ["httpproxies"]
-        verbs: ["get", "watch", "list"]
-      - apiGroups: ["externaldns.k8s.io"]
-        resources: ["dnsendpoints"]
-        verbs: ["get", "watch", "list"]
-      - apiGroups: ["externaldns.k8s.io"]
-        resources: ["dnsendpoints/status"]
-        verbs: ["*"]
-      - apiGroups: ["gateway.networking.k8s.io"]
-        resources: ["gateways"]
-        verbs: ["get", "watch", "list"]
-      - apiGroups: ["gateway.networking.k8s.io"]
-        resources: ["httproutes"]
-        verbs: ["get", "watch", "list"]
-      - apiGroups: [""]
-        resources: ["namespaces"]
-        verbs: ["get", "watch", "list"]
-      - apiGroups: ["gateway.networking.k8s.io"]
-        resources: ["grpcroutes"]
-        verbs: ["get", "watch", "list"]
-      - apiGroups: ["gateway.networking.k8s.io"]
-        resources: ["tlsroutes"]
-        verbs: ["get", "watch", "list"]
-      - apiGroups: ["gateway.networking.k8s.io"]
-        resources: ["tcproutes"]
-        verbs: ["get", "watch", "list"]
-      - apiGroups: ["gateway.networking.k8s.io"]
-        resources: ["udproutes"]
-        verbs: ["get", "watch", "list"]
-      - apiGroups: ["gloo.solo.io", "gateway.solo.io"]
-        resources: ["proxies", "virtualservices"]
-        verbs: ["get", "watch", "list"]
-      - apiGroups: ["configuration.konghq.com"]
-        resources: ["tcpingresses"]
-        verbs: ["get", "watch", "list"]
-      - apiGroups: ["traefik.containo.us", "traefik.io"]
-        resources: ["ingressroutes", "ingressroutetcps", "ingressrouteudps"]
-        verbs: ["get", "watch", "list"]
-      - apiGroups: ["route.openshift.io"]
-        resources: ["routes"]
-        verbs: ["get", "watch", "list"]
-      - apiGroups: ["zalando.org"]
-        resources: ["routegroups"]
-        verbs: ["get", "watch", "list"]
-      - apiGroups: ["zalando.org"]
-        resources: ["routegroups/status"]
-        verbs: ["patch", "update"]
-      - apiGroups: ["cis.f5.com"]
-        resources: ["virtualservers"]
-        verbs: ["get", "watch", "list"]
-
-# -- The service account the pods will use to interact with the Kubernetes API
-serviceAccount:
-  main:
-    enabled: true
-    primary: true
-
-podOptions:
-  automountServiceAccountToken: true
-
-portal:
-  open:
-    enabled: false

enterprise/external-dns/1.0.5/CHANGELOG.md

@@ -0,0 +1,50 @@
+**Important:**
+*for the complete changelog, please refer to the website*
+
+
+
+
+## [external-dns-1.0.5](https://github.com/truecharts/charts/compare/external-dns-1.0.4...external-dns-1.0.5) (2023-11-17)
+
+### Chore
+
+- update container image tccr.io/truecharts/external-dns to v0.14.0 ([#14448](https://github.com/truecharts/charts/issues/14448))
+  
+  
+
+
+## [external-dns-1.0.4](https://github.com/truecharts/charts/compare/external-dns-1.0.3...external-dns-1.0.4) (2023-11-09)
+
+### Fix
+
+- fix zoneidfilters ([#14496](https://github.com/truecharts/charts/issues/14496))
+  
+  
+
+
+## [external-dns-1.0.3](https://github.com/truecharts/charts/compare/external-dns-1.0.2...external-dns-1.0.3) (2023-11-08)
+
+
+
+
+## [external-dns-1.0.2](https://github.com/truecharts/charts/compare/external-dns-1.0.1...external-dns-1.0.2) (2023-11-08)
+
+
+
+
+## [external-dns-1.0.1](https://github.com/truecharts/charts/compare/external-dns-1.0.0...external-dns-1.0.1) (2023-11-08)
+
+### Chore
+
+- update helm general non-major ([#14454](https://github.com/truecharts/charts/issues/14454))
+  
+  
+
+
+## [external-dns-1.0.0](https://github.com/truecharts/charts/compare/external-dns-0.0.5...external-dns-1.0.0) (2023-11-07)
+
+### Feat
+
+- Move to Enterprise + add Docs ([#14426](https://github.com/truecharts/charts/issues/14426))
+  
+  

enterprise/external-dns/1.0.5/Chart.yaml

@@ -0,0 +1,28 @@
+apiVersion: v2
+appVersion: "0.14.0"
+dependencies:
+  - name: common
+    repository: https://library-charts.truecharts.org
+    version: 14.3.5
+deprecated: false
+description: ExternalDNS synchronizes exposed Kubernetes Services and Ingresses with DNS providers.
+home: https://truecharts.org/charts/enterprise/external-dns
+icon: https://truecharts.org/img/hotlink-ok/chart-icons/external-dns.png
+keywords:
+  - external-dns
+  - k8s
+  - kubernetes
+kubeVersion: ">=1.16.0-0"
+maintainers:
+  - email: info@truecharts.org
+    name: TrueCharts
+    url: https://truecharts.org
+name: external-dns
+sources:
+  - https://github.com/truecharts/charts/tree/master/charts/enterprise/external-dns
+  - https://github.com/kubernetes-sigs/external-dns
+type: application
+version: 1.0.5
+annotations:
+  truecharts.org/category: networking
+  truecharts.org/SCALE-support: "true"

enterprise/external-dns/1.0.5/app-changelog.md

@@ -0,0 +1,9 @@
+
+
+## [external-dns-1.0.5](https://github.com/truecharts/charts/compare/external-dns-1.0.4...external-dns-1.0.5) (2023-11-17)
+
+### Chore
+
+- update container image tccr.io/truecharts/external-dns to v0.14.0 ([#14448](https://github.com/truecharts/charts/issues/14448))
+  
+  

enterprise/external-dns/1.0.5/ix_values.yaml

@@ -0,0 +1,143 @@
+image:
+  repository: registry.k8s.io/external-dns/external-dns
+  pullPolicy: IfNotPresent
+  tag: v0.14.0@sha256:474077b3dfccb3021db0a6638274967d0f64ce60dd9730a6f464bee2f78b046f
+externaldns:
+  logLevel: "info"
+  logFormat: "text"
+  interval: "1m"
+  provider: "inmemory"
+  sources:
+    - "service"
+    - "ingress"
+  domainFilters: []
+  zoneidFilters: []
+  cloudflareProxied: ""
+  registry: "txt"
+  policy: ""
+  piholeServer: ""
+  piholePassword: ""
+  triggerLoopOnEvent: "false"
+  txtOwnerId: ""
+  txtPrefix: ""
+  txtSuffix: ""
+service:
+  main:
+    ports:
+      main:
+        protocol: http
+        targetPort: 7979
+        port: 7979
+workload:
+  main:
+    podSpec:
+      containers:
+        main:
+          probes:
+            liveness:
+              path: "/healthz"
+            readiness:
+              path: "/healthz"
+            startup:
+              path: "/healthz"
+          env:
+            CF_API_TOKEN: ""
+            CF_API_KEY: ""
+            CF_API_EMAIL: ""
+            DO_TOKEN: ""
+            DNSIMPLE_OAUTH: ""
+            LINODE_TOKEN: ""
+            OVH_APPLICATION_KEY: ""
+            OVH_APPLICATION_SECRET: ""
+            OVH_CONSUMER_KEY: ""
+            SCW_ACCESS_KEY: ""
+            SCW_SECRET_KEY: ""
+# -- Whether Role Based Access Control objects like roles and rolebindings should be created
+rbac:
+  main:
+    enabled: true
+    primary: true
+    clusterWide: true
+    rules:
+      - apiGroups: [""]
+        resources: ["nodes"]
+        verbs: ["list", "watch"]
+      - apiGroups: [""]
+        resources: ["pods"]
+        verbs: ["get", "watch", "list"]
+      - apiGroups: [""]
+        resources: ["services", "endpoints"]
+        verbs: ["get", "watch", "list"]
+      - apiGroups: ["extensions", "networking.k8s.io"]
+        resources: ["ingresses"]
+        verbs: ["get", "watch", "list"]
+      - apiGroups: ["networking.istio.io"]
+        resources: ["gateways"]
+        verbs: ["get", "watch", "list"]
+      - apiGroups: ["networking.istio.io"]
+        resources: ["virtualservices"]
+        verbs: ["get", "watch", "list"]
+      - apiGroups: ["getambassador.io"]
+        resources: ["hosts", "ingresses"]
+        verbs: ["get", "watch", "list"]
+      - apiGroups: ["projectcontour.io"]
+        resources: ["httpproxies"]
+        verbs: ["get", "watch", "list"]
+      - apiGroups: ["externaldns.k8s.io"]
+        resources: ["dnsendpoints"]
+        verbs: ["get", "watch", "list"]
+      - apiGroups: ["externaldns.k8s.io"]
+        resources: ["dnsendpoints/status"]
+        verbs: ["*"]
+      - apiGroups: ["gateway.networking.k8s.io"]
+        resources: ["gateways"]
+        verbs: ["get", "watch", "list"]
+      - apiGroups: ["gateway.networking.k8s.io"]
+        resources: ["httproutes"]
+        verbs: ["get", "watch", "list"]
+      - apiGroups: [""]
+        resources: ["namespaces"]
+        verbs: ["get", "watch", "list"]
+      - apiGroups: ["gateway.networking.k8s.io"]
+        resources: ["grpcroutes"]
+        verbs: ["get", "watch", "list"]
+      - apiGroups: ["gateway.networking.k8s.io"]
+        resources: ["tlsroutes"]
+        verbs: ["get", "watch", "list"]
+      - apiGroups: ["gateway.networking.k8s.io"]
+        resources: ["tcproutes"]
+        verbs: ["get", "watch", "list"]
+      - apiGroups: ["gateway.networking.k8s.io"]
+        resources: ["udproutes"]
+        verbs: ["get", "watch", "list"]
+      - apiGroups: ["gloo.solo.io", "gateway.solo.io"]
+        resources: ["proxies", "virtualservices"]
+        verbs: ["get", "watch", "list"]
+      - apiGroups: ["configuration.konghq.com"]
+        resources: ["tcpingresses"]
+        verbs: ["get", "watch", "list"]
+      - apiGroups: ["traefik.containo.us", "traefik.io"]
+        resources: ["ingressroutes", "ingressroutetcps", "ingressrouteudps"]
+        verbs: ["get", "watch", "list"]
+      - apiGroups: ["route.openshift.io"]
+        resources: ["routes"]
+        verbs: ["get", "watch", "list"]
+      - apiGroups: ["zalando.org"]
+        resources: ["routegroups"]
+        verbs: ["get", "watch", "list"]
+      - apiGroups: ["zalando.org"]
+        resources: ["routegroups/status"]
+        verbs: ["patch", "update"]
+      - apiGroups: ["cis.f5.com"]
+        resources: ["virtualservers"]
+        verbs: ["get", "watch", "list"]
+# -- The service account the pods will use to interact with the Kubernetes API
+serviceAccount:
+  main:
+    enabled: true
+    primary: true
+podOptions:
+  automountServiceAccountToken: true
+portal:
+  open:
+    enabled: false

enterprise/grafana/9.0.38/CHANGELOG.md

@@ -1,99 +0,0 @@
-**Important:**
-*for the complete changelog, please refer to the website*
-
-
-
-
-## [grafana-9.0.38](https://github.com/truecharts/charts/compare/grafana-9.0.37...grafana-9.0.38) (2023-11-08)
-
-
-
-
-## [grafana-9.0.37](https://github.com/truecharts/charts/compare/grafana-9.0.36...grafana-9.0.37) (2023-11-08)
-
-
-
-
-## [grafana-9.0.36](https://github.com/truecharts/charts/compare/grafana-9.0.35...grafana-9.0.36) (2023-11-08)
-
-### Chore
-
-- update container image tccr.io/truecharts/grafana to v10.2.0 ([#14461](https://github.com/truecharts/charts/issues/14461))
-  
-  
-
-
-## [grafana-9.0.35](https://github.com/truecharts/charts/compare/grafana-9.0.34...grafana-9.0.35) (2023-11-08)
-
-### Chore
-
-- update helm general non-major ([#14454](https://github.com/truecharts/charts/issues/14454))
-  
-  
-
-
-## [grafana-9.0.34](https://github.com/truecharts/charts/compare/grafana-9.0.33...grafana-9.0.34) (2023-11-08)
-
-### Chore
-
-- update container image tccr.io/truecharts/grafana to v10.2.0 ([#14421](https://github.com/truecharts/charts/issues/14421))
-  
-  
-
-
-## [grafana-9.0.33](https://github.com/truecharts/charts/compare/grafana-9.0.32...grafana-9.0.33) (2023-11-06)
-
-### Chore
-
-- update container image tccr.io/truecharts/grafana to v10.2.0 ([#14387](https://github.com/truecharts/charts/issues/14387))
-  
-  
-
-
-## [grafana-9.0.32](https://github.com/truecharts/charts/compare/grafana-9.0.31...grafana-9.0.32) (2023-11-05)
-
-### Chore
-
-- update helm general non-major ([#14365](https://github.com/truecharts/charts/issues/14365))
-  
-  
-
-
-## [grafana-9.0.31](https://github.com/truecharts/charts/compare/grafana-9.0.30...grafana-9.0.31) (2023-11-03)
-
-### Chore
-
-- update helm general non-major ([#14287](https://github.com/truecharts/charts/issues/14287))
-  
-  
-
-
-## [grafana-9.0.30](https://github.com/truecharts/charts/compare/grafana-9.0.29...grafana-9.0.30) (2023-10-29)
-
-### Chore
-
-- update helm general non-major ([#14094](https://github.com/truecharts/charts/issues/14094))
-  
-  
-
-
-## [grafana-9.0.29](https://github.com/truecharts/charts/compare/grafana-9.0.28...grafana-9.0.29) (2023-10-29)
-
-### Chore
-
-- Fix typo in categories and make them singular ([#13693](https://github.com/truecharts/charts/issues/13693))
-  - update container image tccr.io/truecharts/grafana to v10.2.0 ([#13982](https://github.com/truecharts/charts/issues/13982))
-  
-  
-
-
-## [grafana-9.0.28](https://github.com/truecharts/charts/compare/grafana-9.0.27...grafana-9.0.28) (2023-10-15)
-
-### Chore
-
-- update container image tccr.io/truecharts/grafana to v10.1.5 ([#13630](https://github.com/truecharts/charts/issues/13630))
-  
-  
-
-
-## [grafana-9.0.27](https://github.com/truecharts/charts/compare/grafana-9.0.26...grafana-9.0.27) (2023-10-12)

enterprise/grafana/9.0.38/Chart.yaml

@@ -1,31 +0,0 @@
-apiVersion: v2
-appVersion: "10.2.0"
-dependencies:
-  - name: common
-    repository: https://library-charts.truecharts.org
-    version: 14.3.5
-deprecated: false
-description: Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, Elasticsearch, OpenTSDB, Prometheus and InfluxDB.
-home: https://truecharts.org/charts/enterprise/grafana
-icon: https://truecharts.org/img/hotlink-ok/chart-icons/grafana.png
-keywords:
-  - analytics
-  - monitoring
-  - metrics
-  - logs
-kubeVersion: ">=1.16.0-0"
-maintainers:
-  - email: info@truecharts.org
-    name: TrueCharts
-    url: https://truecharts.org
-name: grafana
-sources:
-  - https://github.com/truecharts/charts/tree/master/charts/enterprise/grafana
-  - https://github.com/bitnami/bitnami-docker-grafana
-  - https://grafana.com/
-type: application
-version: 9.0.38
-annotations:
-  truecharts.org/category: metrics
-  truecharts.org/SCALE-support: "true"
-  truecharts.org/grade: U

enterprise/grafana/9.0.38/app-changelog.md

@@ -1,4 +0,0 @@
-
-
-## [grafana-9.0.38](https://github.com/truecharts/charts/compare/grafana-9.0.37...grafana-9.0.38) (2023-11-08)
-

enterprise/grafana/9.0.38/ix_values.yaml

@@ -1,87 +0,0 @@
-image:
-  repository: tccr.io/truecharts/grafana
-  pullPolicy: IfNotPresent
-  tag: v10.2.0@sha256:144e75d84d82a526ed804b253f91bea02fad28dac1e66e7a662f6dd985a64f7b
-manifestManager:
-  enabled: true
-securityContext:
-  container:
-    readOnlyRootFilesystem: false
-
-service:
-  main:
-    ports:
-      main:
-        protocol: http
-        targetPort: 3000
-        port: 10038
-
-workload:
-  main:
-    replicas: 2
-    strategy: RollingUpdate
-    podSpec:
-      containers:
-        main:
-          env:
-            GF_SECURITY_ADMIN_USER: "admin"
-            GF_SECURITY_ADMIN_PASSWORD: "testpassword"
-            GF_INSTALL_PLUGINS: ""
-            GF_PATHS_PLUGINS: "/opt/bitnami/grafana/data/plugins"
-            GF_AUTH_LDAP_ENABLED: "false"
-            GF_AUTH_LDAP_CONFIG_FILE: "/opt/bitnami/grafana/conf/ldap.toml"
-            GF_AUTH_LDAP_ALLOW_SIGN_UP: "false"
-            GF_PATHS_PROVISIONING: "/opt/bitnami/grafana/conf/provisioning"
-            GF_PATHS_CONFIG: "/opt/bitnami/grafana/conf/grafana.ini"
-            GF_PATHS_DATA: "/opt/bitnami/grafana/data"
-            GF_PATHS_LOGS: "/opt/bitnami/grafana/logs"
-          probes:
-            liveness:
-              path: "/api/health"
-
-            readiness:
-              path: "/api/health"
-
-            startup:
-              path: "/api/health"
-
-persistence:
-  config:
-    enabled: true
-    mountPath: "/opt/bitnami/grafana/data"
-  grafana-tmp:
-    enabled: true
-    type: emptyDir
-    mountPath: /opt/bitnami/grafana/tmp
-
-metrics:
-  main:
-    # -- Enable and configure a Prometheus serviceMonitor for the chart under this key.
-    # @default -- See values.yaml
-    enabled: true
-    type: "servicemonitor"
-    endpoints:
-      - port: main
-        path: /metrics
-    # -- Enable and configure Prometheus Rules for the chart under this key.
-    # @default -- See values.yaml
-    prometheusRule:
-      enabled: false
-      labels: {}
-      # -- Configure additionial rules for the chart under this key.
-      # @default -- See prometheusrules.yaml
-      rules:
-        []
-        # - alert: UnifiPollerAbsent
-        #   annotations:
-        #     description: Unifi Poller has disappeared from Prometheus service discovery.
-        #     summary: Unifi Poller is down.
-        #   expr: |
-        #     absent(up{job=~".*unifi-poller.*"} == 1)
-        #   for: 5m
-        #   labels:
-        #     severity: critical
-
-portal:
-  open:
-    enabled: true

enterprise/grafana/9.0.39/CHANGELOG.md

@@ -0,0 +1,99 @@
+**Important:**
+*for the complete changelog, please refer to the website*
+
+
+
+
+## [grafana-9.0.39](https://github.com/truecharts/charts/compare/grafana-9.0.38...grafana-9.0.39) (2023-11-17)
+
+
+
+
+## [grafana-9.0.38](https://github.com/truecharts/charts/compare/grafana-9.0.37...grafana-9.0.38) (2023-11-08)
+
+
+
+
+## [grafana-9.0.37](https://github.com/truecharts/charts/compare/grafana-9.0.36...grafana-9.0.37) (2023-11-08)
+
+
+
+
+## [grafana-9.0.36](https://github.com/truecharts/charts/compare/grafana-9.0.35...grafana-9.0.36) (2023-11-08)
+
+### Chore
+
+- update container image tccr.io/truecharts/grafana to v10.2.0 ([#14461](https://github.com/truecharts/charts/issues/14461))
+  
+  
+
+
+## [grafana-9.0.35](https://github.com/truecharts/charts/compare/grafana-9.0.34...grafana-9.0.35) (2023-11-08)
+
+### Chore
+
+- update helm general non-major ([#14454](https://github.com/truecharts/charts/issues/14454))
+  
+  
+
+
+## [grafana-9.0.34](https://github.com/truecharts/charts/compare/grafana-9.0.33...grafana-9.0.34) (2023-11-08)
+
+### Chore
+
+- update container image tccr.io/truecharts/grafana to v10.2.0 ([#14421](https://github.com/truecharts/charts/issues/14421))
+  
+  
+
+
+## [grafana-9.0.33](https://github.com/truecharts/charts/compare/grafana-9.0.32...grafana-9.0.33) (2023-11-06)
+
+### Chore
+
+- update container image tccr.io/truecharts/grafana to v10.2.0 ([#14387](https://github.com/truecharts/charts/issues/14387))
+  
+  
+
+
+## [grafana-9.0.32](https://github.com/truecharts/charts/compare/grafana-9.0.31...grafana-9.0.32) (2023-11-05)
+
+### Chore
+
+- update helm general non-major ([#14365](https://github.com/truecharts/charts/issues/14365))
+  
+  
+
+
+## [grafana-9.0.31](https://github.com/truecharts/charts/compare/grafana-9.0.30...grafana-9.0.31) (2023-11-03)
+
+### Chore
+
+- update helm general non-major ([#14287](https://github.com/truecharts/charts/issues/14287))
+  
+  
+
+
+## [grafana-9.0.30](https://github.com/truecharts/charts/compare/grafana-9.0.29...grafana-9.0.30) (2023-10-29)
+
+### Chore
+
+- update helm general non-major ([#14094](https://github.com/truecharts/charts/issues/14094))
+  
+  
+
+
+## [grafana-9.0.29](https://github.com/truecharts/charts/compare/grafana-9.0.28...grafana-9.0.29) (2023-10-29)
+
+### Chore
+
+- Fix typo in categories and make them singular ([#13693](https://github.com/truecharts/charts/issues/13693))
+  - update container image tccr.io/truecharts/grafana to v10.2.0 ([#13982](https://github.com/truecharts/charts/issues/13982))
+  
+  
+
+
+## [grafana-9.0.28](https://github.com/truecharts/charts/compare/grafana-9.0.27...grafana-9.0.28) (2023-10-15)
+
+### Chore
+
+- update container image tccr.io/truecharts/grafana to v10.1.5 ([#13630](https://github.com/truecharts/charts/issues/13630))

enterprise/grafana/9.0.39/Chart.yaml

@@ -0,0 +1,31 @@
+apiVersion: v2
+appVersion: "10.2.0"
+dependencies:
+  - name: common
+    repository: https://library-charts.truecharts.org
+    version: 14.3.5
+deprecated: false
+description: Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, Elasticsearch, OpenTSDB, Prometheus and InfluxDB.
+home: https://truecharts.org/charts/enterprise/grafana
+icon: https://truecharts.org/img/hotlink-ok/chart-icons/grafana.png
+keywords:
+  - analytics
+  - monitoring
+  - metrics
+  - logs
+kubeVersion: ">=1.16.0-0"
+maintainers:
+  - email: info@truecharts.org
+    name: TrueCharts
+    url: https://truecharts.org
+name: grafana
+sources:
+  - https://github.com/truecharts/charts/tree/master/charts/enterprise/grafana
+  - https://github.com/bitnami/bitnami-docker-grafana
+  - https://grafana.com/
+type: application
+version: 9.0.39
+annotations:
+  truecharts.org/category: metrics
+  truecharts.org/SCALE-support: "true"
+  truecharts.org/grade: U

enterprise/grafana/9.0.39/app-changelog.md

@@ -0,0 +1,4 @@
+
+
+## [grafana-9.0.39](https://github.com/truecharts/charts/compare/grafana-9.0.38...grafana-9.0.39) (2023-11-17)
+

enterprise/grafana/9.0.39/ix_values.yaml

@@ -0,0 +1,79 @@
+image:
+  repository: bitnami/grafana
+  pullPolicy: IfNotPresent
+  tag: 10.2.0@sha256:c488457595e458d4718c3748f106d9b331ca637a84b3f5ff07fdcc1dacaab646
+manifestManager:
+  enabled: true
+securityContext:
+  container:
+    readOnlyRootFilesystem: false
+service:
+  main:
+    ports:
+      main:
+        protocol: http
+        targetPort: 3000
+        port: 10038
+workload:
+  main:
+    replicas: 2
+    strategy: RollingUpdate
+    podSpec:
+      containers:
+        main:
+          env:
+            GF_SECURITY_ADMIN_USER: "admin"
+            GF_SECURITY_ADMIN_PASSWORD: "testpassword"
+            GF_INSTALL_PLUGINS: ""
+            GF_PATHS_PLUGINS: "/opt/bitnami/grafana/data/plugins"
+            GF_AUTH_LDAP_ENABLED: "false"
+            GF_AUTH_LDAP_CONFIG_FILE: "/opt/bitnami/grafana/conf/ldap.toml"
+            GF_AUTH_LDAP_ALLOW_SIGN_UP: "false"
+            GF_PATHS_PROVISIONING: "/opt/bitnami/grafana/conf/provisioning"
+            GF_PATHS_CONFIG: "/opt/bitnami/grafana/conf/grafana.ini"
+            GF_PATHS_DATA: "/opt/bitnami/grafana/data"
+            GF_PATHS_LOGS: "/opt/bitnami/grafana/logs"
+          probes:
+            liveness:
+              path: "/api/health"
+            readiness:
+              path: "/api/health"
+            startup:
+              path: "/api/health"
+persistence:
+  config:
+    enabled: true
+    mountPath: "/opt/bitnami/grafana/data"
+  grafana-tmp:
+    enabled: true
+    type: emptyDir
+    mountPath: /opt/bitnami/grafana/tmp
+metrics:
+  main:
+    # -- Enable and configure a Prometheus serviceMonitor for the chart under this key.
+    # @default -- See values.yaml
+    enabled: true
+    type: "servicemonitor"
+    endpoints:
+      - port: main
+        path: /metrics
+    # -- Enable and configure Prometheus Rules for the chart under this key.
+    # @default -- See values.yaml
+    prometheusRule:
+      enabled: false
+      labels: {}
+      # -- Configure additionial rules for the chart under this key.
+      # @default -- See prometheusrules.yaml
+      rules: []
+      # - alert: UnifiPollerAbsent
+      #   annotations:
+      #     description: Unifi Poller has disappeared from Prometheus service discovery.
+      #     summary: Unifi Poller is down.
+      #   expr: |
+      #     absent(up{job=~".*unifi-poller.*"} == 1)
+      #   for: 5m
+      #   labels:
+      #     severity: critical
+portal:
+  open:
+    enabled: true

enterprise/kubernetes-reflector/1.0.5/CHANGELOG.md

@@ -1,50 +0,0 @@
-**Important:**
-*for the complete changelog, please refer to the website*
-
-
-
-
-## [kubernetes-reflector-1.0.5](https://github.com/truecharts/charts/compare/kubernetes-reflector-1.0.4...kubernetes-reflector-1.0.5) (2023-11-08)
-
-
-
-
-## [kubernetes-reflector-1.0.4](https://github.com/truecharts/charts/compare/kubernetes-reflector-1.0.3...kubernetes-reflector-1.0.4) (2023-11-08)
-
-
-
-
-## [kubernetes-reflector-1.0.3](https://github.com/truecharts/charts/compare/kubernetes-reflector-1.0.2...kubernetes-reflector-1.0.3) (2023-11-08)
-
-### Chore
-
-- update helm general non-major ([#14454](https://github.com/truecharts/charts/issues/14454))
-  
-  
-
-
-## [kubernetes-reflector-1.0.2](https://github.com/truecharts/charts/compare/kubernetes-reflector-1.0.1...kubernetes-reflector-1.0.2) (2023-11-05)
-
-### Chore
-
-- update helm general non-major ([#14365](https://github.com/truecharts/charts/issues/14365))
-  
-  
-
-
-## [kubernetes-reflector-1.0.1](https://github.com/truecharts/charts/compare/kubernetes-reflector-1.0.0...kubernetes-reflector-1.0.1) (2023-11-03)
-
-### Chore
-
-- update helm general non-major ([#14287](https://github.com/truecharts/charts/issues/14287))
-  
-  
-
-
-## [kubernetes-reflector-1.0.0](https://github.com/truecharts/charts/compare/kubernetes-reflector-0.1.3...kubernetes-reflector-1.0.0) (2023-10-30)
-
-### Breaking
-
-- Move to enterprise train ([#14111](https://github.com/truecharts/charts/issues/14111))
-  
-  

enterprise/kubernetes-reflector/1.0.5/Chart.yaml

@@ -1,31 +0,0 @@
-apiVersion: v2
-appVersion: "7.1.217"
-deprecated: false
-description: Kubernetes-Reflector is a Kubernetes addon designed to monitor and reflect changes to secrets and configmaps across namespaces
-home: https://truecharts.org/charts/enterprise/kubernetes-reflector
-icon: https://truecharts.org/img/hotlink-ok/chart-icons/kubernetes-reflector.png
-keywords:
-  - reflector
-  - secrets
-  - configmaps
-  - cert-manager
-  - certificates
-dependencies:
-  - name: common
-    repository: https://library-charts.truecharts.org
-    version: 14.3.5
-kubeVersion: ">=1.16.0-0"
-maintainers:
-  - email: info@truecharts.org
-    name: TrueCharts
-    url: https://truecharts.org
-name: kubernetes-reflector
-sources:
-  - https://github.com/truecharts/charts/tree/master/charts/enterprise/kubernetes-reflector
-  - https://github.com/emberstack/kubernetes-reflector
-type: application
-version: 1.0.5
-annotations:
-  truecharts.org/category: operators
-  truecharts.org/SCALE-support: "true"
-  truecharts.org/grade: U

enterprise/kubernetes-reflector/1.0.5/app-changelog.md

@@ -1,4 +0,0 @@
-
-
-## [kubernetes-reflector-1.0.5](https://github.com/truecharts/charts/compare/kubernetes-reflector-1.0.4...kubernetes-reflector-1.0.5) (2023-11-08)
-

enterprise/kubernetes-reflector/1.0.5/ix_values.yaml

@@ -1,77 +0,0 @@
-image:
-  repository: tccr.io/truecharts/kubernetes-reflector
-  pullPolicy: IfNotPresent
-  tag: v7.1.217@sha256:4ca9ce8c04441786ba0d343b3e5bfe9c638ac8efcc25aba0aaff3c6fb2363b5f
-
-operator:
-  register: true
-
-portal:
-  open:
-    enabled: false
-
-rbac:
-  main:
-    enabled: true
-    primary: true
-    clusterWide: true
-    rules:
-      - apiGroups:
-          - ""
-        resources:
-          - "configmaps"
-          - "secrets"
-        verbs:
-          - "get"
-          - "list"
-          - "watch"
-          - "create"
-          - "update"
-          - "patch"
-          - "delete"
-      - apiGroups:
-          - ""
-        resources:
-          - "namespaces"
-        verbs:
-          - "watch"
-          - "list"
-
-serviceAccount:
-  main:
-    enabled: true
-    primary: true
-
-kubernetesReflector:
-  logLevel: Information
-
-workload:
-  main:
-    podSpec:
-      automountServiceAccountToken: true
-      containers:
-        main:
-          securityContext:
-            readOnlyRootFilesystem: true
-            runAsNonRoot: true
-          env:
-            ES_Serilog__MinimumLevel__Default: "{{ .Values.kubernetesReflector.logLevel }}"
-            ES_Reflector__Watcher__Timeout: ""
-            ES_Reflector__Kubernetes__SkipTlsVerify: "false"
-          probes:
-            liveness:
-              type: http
-              path: /healthz
-              port: 25080
-            readiness:
-              type: http
-              path: /healthz
-              port: 25080
-            startup:
-              type: http
-              path: /healthz
-              port: 25080
-
-service:
-  main:
-    enabled: false

enterprise/kubernetes-reflector/1.0.6/CHANGELOG.md

@@ -0,0 +1,55 @@
+**Important:**
+*for the complete changelog, please refer to the website*
+
+
+
+
+## [kubernetes-reflector-1.0.6](https://github.com/truecharts/charts/compare/kubernetes-reflector-1.0.5...kubernetes-reflector-1.0.6) (2023-11-17)
+
+
+
+
+## [kubernetes-reflector-1.0.5](https://github.com/truecharts/charts/compare/kubernetes-reflector-1.0.4...kubernetes-reflector-1.0.5) (2023-11-08)
+
+
+
+
+## [kubernetes-reflector-1.0.4](https://github.com/truecharts/charts/compare/kubernetes-reflector-1.0.3...kubernetes-reflector-1.0.4) (2023-11-08)
+
+
+
+
+## [kubernetes-reflector-1.0.3](https://github.com/truecharts/charts/compare/kubernetes-reflector-1.0.2...kubernetes-reflector-1.0.3) (2023-11-08)
+
+### Chore
+
+- update helm general non-major ([#14454](https://github.com/truecharts/charts/issues/14454))
+  
+  
+
+
+## [kubernetes-reflector-1.0.2](https://github.com/truecharts/charts/compare/kubernetes-reflector-1.0.1...kubernetes-reflector-1.0.2) (2023-11-05)
+
+### Chore
+
+- update helm general non-major ([#14365](https://github.com/truecharts/charts/issues/14365))
+  
+  
+
+
+## [kubernetes-reflector-1.0.1](https://github.com/truecharts/charts/compare/kubernetes-reflector-1.0.0...kubernetes-reflector-1.0.1) (2023-11-03)
+
+### Chore
+
+- update helm general non-major ([#14287](https://github.com/truecharts/charts/issues/14287))
+  
+  
+
+
+## [kubernetes-reflector-1.0.0](https://github.com/truecharts/charts/compare/kubernetes-reflector-0.1.3...kubernetes-reflector-1.0.0) (2023-10-30)
+
+### Breaking
+
+- Move to enterprise train ([#14111](https://github.com/truecharts/charts/issues/14111))
+  
+  

enterprise/kubernetes-reflector/1.0.6/Chart.yaml

@@ -0,0 +1,31 @@
+apiVersion: v2
+appVersion: "7.1.217"
+deprecated: false
+description: Kubernetes-Reflector is a Kubernetes addon designed to monitor and reflect changes to secrets and configmaps across namespaces
+home: https://truecharts.org/charts/enterprise/kubernetes-reflector
+icon: https://truecharts.org/img/hotlink-ok/chart-icons/kubernetes-reflector.png
+keywords:
+  - reflector
+  - secrets
+  - configmaps
+  - cert-manager
+  - certificates
+dependencies:
+  - name: common
+    repository: https://library-charts.truecharts.org
+    version: 14.3.5
+kubeVersion: ">=1.16.0-0"
+maintainers:
+  - email: info@truecharts.org
+    name: TrueCharts
+    url: https://truecharts.org
+name: kubernetes-reflector
+sources:
+  - https://github.com/truecharts/charts/tree/master/charts/enterprise/kubernetes-reflector
+  - https://github.com/emberstack/kubernetes-reflector
+type: application
+version: 1.0.6
+annotations:
+  truecharts.org/category: operators
+  truecharts.org/SCALE-support: "true"
+  truecharts.org/grade: U

enterprise/kubernetes-reflector/1.0.6/app-changelog.md

@@ -0,0 +1,4 @@
+
+
+## [kubernetes-reflector-1.0.6](https://github.com/truecharts/charts/compare/kubernetes-reflector-1.0.5...kubernetes-reflector-1.0.6) (2023-11-17)
+

enterprise/kubernetes-reflector/1.0.6/ix_values.yaml

@@ -0,0 +1,70 @@
+image:
+  repository: docker.io/emberstack/kubernetes-reflector
+  pullPolicy: IfNotPresent
+  tag: build-7.1.217@sha256:982b8fc714349abe480a6864f3c3fce8e8801fd5068fac6add5b22ed32efc033
+operator:
+  register: true
+portal:
+  open:
+    enabled: false
+rbac:
+  main:
+    enabled: true
+    primary: true
+    clusterWide: true
+    rules:
+      - apiGroups:
+          - ""
+        resources:
+          - "configmaps"
+          - "secrets"
+        verbs:
+          - "get"
+          - "list"
+          - "watch"
+          - "create"
+          - "update"
+          - "patch"
+          - "delete"
+      - apiGroups:
+          - ""
+        resources:
+          - "namespaces"
+        verbs:
+          - "watch"
+          - "list"
+serviceAccount:
+  main:
+    enabled: true
+    primary: true
+kubernetesReflector:
+  logLevel: Information
+workload:
+  main:
+    podSpec:
+      automountServiceAccountToken: true
+      containers:
+        main:
+          securityContext:
+            readOnlyRootFilesystem: true
+            runAsNonRoot: true
+          env:
+            ES_Serilog__MinimumLevel__Default: "{{ .Values.kubernetesReflector.logLevel }}"
+            ES_Reflector__Watcher__Timeout: ""
+            ES_Reflector__Kubernetes__SkipTlsVerify: "false"
+          probes:
+            liveness:
+              type: http
+              path: /healthz
+              port: 25080
+            readiness:
+              type: http
+              path: /healthz
+              port: 25080
+            startup:
+              type: http
+              path: /healthz
+              port: 25080
+service:
+  main:
+    enabled: false