Ruben Hensen
fe678d4b4b
ca-bundle: also serve argocd, authentik and actual-budget
...
Those three namespaces had their own ~190KB copy of patched-ca-bundle.
Let the ca-bundle chart render them too, so the bundle lives in one file.
2026-10-22 09:26:43 +02:00
Ruben Hensen
a507282103
argocd: mount a CA bundle without the compromised eMudhra roots
...
The Argo CD v2.14.2 image (Ubuntu 24.04, ca-certificates 20240203) and the
dex image still trust the eMudhra intermediates whose keys leaked
(https://emudhra.we-have-a-problem.com ), and the repo server fetches git
and Helm repos over that trust store. A forged certificate there means
arbitrary manifests in the cluster.
patched-ca-bundle holds the bundle from Alpine ca-certificates-bundle
20261020-r0 and replaces /etc/ssl/certs in every Argo CD container except
redis. The whole directory goes, since OpenSSL and Go also read the
per-root files next to ca-certificates.crt. It uses server-side apply to
keep the bundle out of the last-applied annotation.
2026-10-21 12:09:41 +02:00
Ruben Hensen
0fd7bf1135
Add OIDC to argocd
2026-04-06 18:44:32 +02:00
Ruben Hensen
a04745a409
Add traccar client ingress
2025-03-09 13:00:02 +01:00
Ruben Hensen
21e94bea61
Exclude velero backup resource in argocd 5
2025-03-04 14:18:58 +01:00
Ruben Hensen
20ba930963
Exclude velero backup resource in argocd 4
2025-03-04 14:14:51 +01:00
Ruben Hensen
ebd1bd058a
Exclude velero backup resource in argocd 3
2025-03-04 14:14:22 +01:00
Ruben Hensen
174fa1157e
Exclude velero backup resource in argocd 2
2025-03-04 14:13:32 +01:00
Ruben Hensen
a48c522974
Exclude velero backup resource in argocd
2025-03-04 14:11:48 +01:00
Ruben Hensen
a30ad0678e
Add github webhook secret
2025-03-04 14:04:04 +01:00
Ruben Hensen
5809a43ef1
Add patch file
2024-12-14 22:09:49 +01:00
Ruben Hensen
3730aa6c80
Add patch to argocd 5
2024-12-14 22:08:37 +01:00
Ruben Hensen
159467b8b2
Add patch to argocd
2024-12-14 22:01:38 +01:00
Ruben Hensen
6e39a5b871
Add overlay patches 17
2024-09-14 22:12:34 +02:00
Ruben Hensen
b7af897a23
Add overlay patches 16
2024-09-14 22:09:45 +02:00
Ruben Hensen
d515c302f3
Add overlay patches 15
2024-09-14 22:07:02 +02:00
Ruben Hensen
d79c96f264
Add overlay patches 14
2024-09-14 22:05:53 +02:00
Ruben Hensen
014efbd992
Add overlay patches 13
2024-09-14 22:01:13 +02:00
Ruben Hensen
bcaef18260
Add overlay patches 12
2024-09-14 22:00:12 +02:00
Ruben Hensen
f1514d3167
Add overlay patches 12
2024-09-14 21:59:23 +02:00
Ruben Hensen
de2f38d8c9
Add overlay patches 11
2024-09-14 21:56:42 +02:00
Ruben Hensen
d7aaa18677
Add overlay patches 8
2024-09-14 21:46:46 +02:00
Ruben Hensen
60fd168938
Add overlay patches 7
2024-09-14 21:42:32 +02:00
Ruben Hensen
7b2b203f1d
Add overlay patches 6
2024-09-14 21:40:40 +02:00
Ruben Hensen
bff6d2675e
Add overlay patches 5
2024-09-14 21:40:07 +02:00
Ruben Hensen
6904be8787
Add overlay patches 3
2024-09-14 21:34:51 +02:00
Ruben Hensen
89b47e7e7d
Add overlay patches 2
2024-09-14 21:33:58 +02:00
Ruben Hensen
66a6e018de
Add overlay patches 2
2024-09-14 21:33:18 +02:00
Ruben Hensen
211be7b592
Add overlay
2024-09-14 21:29:55 +02:00
Ruben Hensen
0fef80f22a
Add patch argocd
2024-09-14 21:13:05 +02:00
Ruben Hensen
38d4101c99
Remove plugin
2024-09-10 14:17:34 +02:00
Ruben Hensen
b20297789f
Re-add plugin
2024-09-10 14:03:36 +02:00
Ruben Hensen
032bcc867c
Remove files plugin
2024-09-10 14:02:23 +02:00
Ruben Hensen
ca7028e561
Add argo vault plugin
2024-09-10 12:04:26 +02:00
Ruben Hensen
de1b91f67f
Remove plugin argocd
2024-09-09 00:22:05 +02:00
Ruben Hensen
24f5bf3bf5
Add patch contents
2024-09-08 21:34:42 +02:00
Ruben Hensen
9701ce3243
Add argo cd vault plugin
2024-09-08 21:30:21 +02:00
Ruben Hensen