stackstorm-k8s

stackstorm-k8s copied to clipboard

/bin/bash: /etc/nginx/conf.d/st2.conf: Permission denied

1

when i'm trying to run st2web on openshift it requires root previelages in openshift which is not supported

Kishore1705

Allow setting requests/limits on init containers

2

I'm trying to deploy stackstorm-k8s into an environment that enforces resourcequota requiring limits to be defined to all containers and init containers. This environment does not provide a limit range...

agracie

FileMagic

More detailed "Releasing information"

1

Add more details, including command examples, to step 4 of [Releasing information](https://github.com/stackstorm/stackstorm-k8s/?tab=readme-ov-file#releasing-information) to follow for the next release. Links to the upstream documentation are nice, but, it'd be nicer to...

mamercad

Enabled internal TLS between k8s pods by default

1

Continuing on from the theme in (https://github.com/StackStorm/stackstorm-k8s/pull/400) this PR is another attempt at improving the security hardening of StackStorm in `k8s`. By default - all inter-pod communication between pods within...

jk464

In attempt to harden the security of running StackStorm within k8s, this PR makes it such that by default all containers run as a non-root user, generally `1000:1000` (the `stanley`...

jk464

Instead of running `st2tests` as a `pod`, this runs it as a `job`. To ensure the job only runs once, and fails if a test fails, I've added: ``` restartPolicy:...

jk464

Some containers where missing the ability to specify an `imagePullPolicy`. This adds in those missing options, and matches the global `image`'s Pull Policy.

jk464

Allow templating of st2.packs.configs in values.yaml

3

As it says on the tin. Allows the use of go templating in the `st2.packs.configs` value when creating the Configs ConfigMap

jk464

Added job to remove uninstalled packs from Mongo database

1

Useful when changing the mounted pack image, that removes previously installed packs. Normally the packs have been removed from disk, but are still registered in the Mongo database. This runs...

jk464