Kevin Tijssen
b3d07e5e38
docs: remove redundant Kubernetes version prerequisite
...
Remove the generic "Kubernetes 1.23+" prerequisite as it's redundant and
potentially confusing. The actual minimum Kubernetes version depends on
the hostUsers configuration:
Signed-off-by: Kevin Tijssen <kevin.tijssen@siderolabs.com>
2026-02-06 14:43:52 +01:00
Kevin Tijssen
96667959f6
fix: values.schema.json
...
Signed-off-by: Kevin Tijssen <kevin.tijssen@siderolabs.com>
2026-02-06 14:34:42 +01:00
Kevin Tijssen
8a8da46331
feat: adjust security context for user namespace mode
...
Signed-off-by: Kevin Tijssen <kevin.tijssen@siderolabs.com>
2026-02-06 14:29:24 +01:00
Kevin Tijssen
bc631dc3f9
fix: values.schema.json
...
Signed-off-by: Kevin Tijssen <kevin.tijssen@siderolabs.com>
2026-02-06 14:22:13 +01:00
Kevin Tijssen
8ea6fe9ecc
feat: add user namespace support with Kubernetes version validation
...
Add support for Kubernetes user namespaces to enhance pod security isolation.
This feature allows pods to run with a separate user namespace instead of
the host's user namespace when hostUsers is set to false.
Changes:
- Add hostUsers configuration option to values.yaml (default: true)
- Add Kubernetes version validation (requires K8s 1.25+ when hostUsers=false)
- Create helm-docs template (README.md.gotmpl) for automated documentation
- Update README with comprehensive security, configuration, and setup guides
Signed-off-by: Kevin Tijssen <kevin.tijssen@siderolabs.com>
2026-02-06 14:13:36 +01:00
Noel Georgi
a42b9d91c3
release(v1.0.2): prepare release
...
This is the official v1.0.2 release.
Signed-off-by: Noel Georgi <git@frezbo.dev>
2026-02-04 14:41:30 +05:30
Andrey Smirnov
eec01d1d03
release(v1.0.1): prepare release
...
This is the official v1.0.1 release.
Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2026-02-03 23:06:35 +04:00
Noel Georgi
14d0f2a1fa
release(v1.0.0): prepare release
...
This is the official v1.0.0 release.
Signed-off-by: Noel Georgi <git@frezbo.dev>
2026-01-30 05:37:25 +05:30
Kevin Tijssen
a90529cc00
feat: add more security contexts
...
* Changed E2E timeouts
* Changes Container securityContext
Signed-off-by: Kevin Tijssen <kevin.tijssen@siderolabs.com>
Signed-off-by: Noel Georgi <git@frezbo.dev>
2026-01-29 20:44:16 +05:30
Mateusz Urbanek
aa325ee4ff
feat: add Helm docs and schema
...
Add generation of Helm Docs and Helm JSON Schema for Factory chart.
Signed-off-by: Mateusz Urbanek <mateusz.urbanek@siderolabs.com>
2026-01-28 10:48:04 +01:00
Noel Georgi
3c18e053c1
feat: add Sidero google service account email also to verfiers
...
Add Sidero Google Service Account Email also to the signer list.
Signed-off-by: Noel Georgi <git@frezbo.dev>
2026-01-28 06:43:04 +05:30
Mateusz Urbanek
42a1c45849
feat: add helm to kres
...
Add kres rules for Helm chart management.
Signed-off-by: Mateusz Urbanek <mateusz.urbanek@siderolabs.com>
2026-01-27 10:46:38 +01:00
Mateusz Urbanek
1d6468ee6d
feat: add helm e2e to CI
...
Add kres configuration to enable testing Helm Chart in the CI.
Signed-off-by: Mateusz Urbanek <mateusz.urbanek@siderolabs.com>
2026-01-26 11:12:09 +01:00
Kevin Tijssen
2f0499cc73
feat: added e2e tests
...
Signed-off-by: Kevin Tijssen <kevin.tijssen@siderolabs.com>
2026-01-26 09:11:26 +01:00
Kevin Tijssen
2eccf98ad5
fix: made changes on the recommendation of copilot
...
Signed-off-by: Kevin Tijssen <kevin.tijssen@siderolabs.com>
2026-01-26 09:11:24 +01:00
Kevin Tijssen
e27ea3647d
feat: Added E2E with KUTTL
...
Signed-off-by: Kevin Tijssen <kevin.tijssen@siderolabs.com>
2026-01-26 09:11:24 +01:00
Kevin Tijssen
9f6b9e7966
feat: Added additional tests
...
Signed-off-by: Kevin Tijssen <kevin.tijssen@siderolabs.com>
2026-01-26 09:11:23 +01:00
Kevin Tijssen
49397476ea
feat: Added helm unittests
...
Signed-off-by: Kevin Tijssen <kevin.tijssen@siderolabs.com>
2026-01-26 09:11:23 +01:00
Kevin Tijssen
dcaa1db583
feat: added helmchart
...
Signed-off-by: Kevin Tijssen <kevin.tijssen@siderolabs.com>
2026-01-26 09:11:22 +01:00