helm-charts
helm-charts copied to clipboard
kubewarden
Helm charts for the Kubewarden project
Running container images with a read-only filesystem is considered a good security practice. I think we can achieve that both for policy-server and for kubewarden-controller. For policy-server we will need...
The Rancher manifest allows charts to ask [questions](https://rancher.com/docs/rancher/v2.x/en/helm-charts/legacy-catalogs/creating-apps/#questions-yml) to the users, which is a really convenient way to provide chart values. Right now our manifest doesn't ask any question. ##...
This is related with https://github.com/kubewarden/kubewarden-controller/issues/42 We need to offer the following scenarios via our helm chart: 1. User has already a Kubernetes Secret that contains the docker configuration file that...
It should be possible for the user to provide a list of their own custom certificate authorities that can be used along with the system ones. This can be useful...
Helm charts can include [schema files](https://helm.sh/docs/topics/charts/#schema-files). The schemas are useful as Helm will validate them and they can be used for other purposes, such as generating forms (here's [a react...
Helm charts can have annotations and there are some [specific ones for Artifact Hub](https://artifacthub.io/docs/topics/annotations/helm/). Some of these could be useful to customize the display. For example, `artifacthub.io/links` can hold a...
## Description Fix https://github.com/kubewarden/helm-charts/issues/439. hostNamespacePolicy.settings.allow_host_ports depends on `sequence_questions`, unimplemented yet in rancher/dashboard. ## Test ## Additional Information ### Tradeoff ### Potential improvement
Setting port value to 80 for example produces following error on policy server: `Error(\"invalid type: string \\\"80\\\", expected a sequence\", line: 1, column: 97)")` ## Current state Questions on kubewarden-defaults...
Extend the RBAC roles assigned to the `policy-server` Service Account. Grant access to the resources required by `policy-optimizer`. This is required to implement [this RFC](https://github.com/kubewarden/rfc/blob/main/rfc/0017-policy-server-reuse-wasm-optimized-modules.md). More work has to be...
PRs such as: https://github.com/kubewarden/helm-charts/pull/322 https://github.com/kubewarden/helm-charts/pull/308 Don't trigger CI runs for themselves. The PRs get triggered by using `peter-evans/repository-dispatch`, see: https://github.com/kubewarden/policy-server/blob/dbd4e8dc0283c13c842c371e86436c6f28f69dfb/.github/workflows/release.yml#L129C37-L132 Searching on the interwebs I reached: https://github.com/orgs/community/discussions/25602 https://github.com/peter-evans/create-pull-request/issues/48 summarized in:...