bryopsida

Add security workflows

2

This adds several GitHub workflows that run security checks on PR and on a cron. Workflows added --- - CodeQL (Scans the python and javascript code) - KICS (Scans docker-compose,...

Integrate GitHub security dismissed findings with Grype ignores

1

I've dismissed a few alerts in the security/code scanning alerts page. But whenever the scan action is executed it detects these vulnerabilities as being new and fails the check under...

Add support or examples for generating helm test resources

1

### Component JKube Kit ### Is your enhancement related to a problem? Please describe I want to create a test resource that's created when `helm test` is executed on my...

Add support for Tail(N)

2

Description =========== First I would like to say thank for you developing this library and I apologize if this is not in the correct for a feature request/enhancement. I have...

Optional toggle to use k8s-wireguard-mgr for keygen hook

1

What --- When running through a system such as argo, which doesn't correctly handle the helm hook directives and always runs the install phase hook, more graceful handling of the...

Add option to support TCP tunnel

1

It would be nice to have an optional flag that enabled support for a TCP ingress. This could be relayed over something like a cloud flare tunnel (which does not...

In some cases it may be desirable to use a user space version of wireguard: https://www.wireguard.com/xplatform/, https://github.com/cloudflare/boringtun instead of the kernel space version. This could be done with a optional...

fix(cloudflare-tunnel-remote/charts): apply securityContext from values.yaml

1

What --- The `charts/cloudflare-tunnel-remote` chart defines values for securityContext: https://github.com/cloudflare/helm-charts/blob/b85225eb49e1b0b40328c70d4541a27ec5e2b82e/charts/cloudflare-tunnel-remote/values.yaml#L35 and podSecurityContext: https://github.com/cloudflare/helm-charts/blob/b85225eb49e1b0b40328c70d4541a27ec5e2b82e/charts/cloudflare-tunnel-remote/values.yaml#L30 but does not apply them to the pod template in deployment. This simply maps the intended securityContext...

Add option to pass secrets as files

4

## Expected Behavior I'd like an option to pass secret values as files when appending `_FILE` after the current environment variable used for the value. This behavior is consistent with...

What --- - Preps for having multiple test cases beyond just the default value set - Adds a test job that verifies wg client connectivity when running `helm test`