DevFW-CICD/stacks
12
0
Fork 2
Code Issues Pull requests 3 Projects Releases Packages Wiki Activity Actions
195 commits 29 branches 4 tags 1.4 MiB
Commit graph

149 commits

Author SHA1 Message Date
miwr
c9d72e9f90 should be done 2025-04-01 11:57:46 +02:00
miwr
7cc75f0095 test 2025-04-01 11:44:52 +02:00
miwr
37a9a73664 - name: passwd-volume 
mountPath: /etc/passwd
          subPath: passwd
 2025-04-01 11:44:19 +02:00
miwr
ad76195004 passwd-user-configmap 2025-04-01 11:35:26 +02:00
miwr
d3b60c036a extraArgs: "chmod o+rwx /etc/passwd" 2025-04-01 11:20:56 +02:00
miwr
de3194062d extraArgs: 
- |
      chmod o+rwx /etc/passwd
      chmod o+rwx /etc/group
 2025-04-01 11:16:07 +02:00
miwr
cda3fc8179 extraArgs: 
- chmod o+rwx /etc/passwd
    - chmod o+rwx /etc/group
 2025-04-01 11:15:20 +02:00
miwr
2dc751b5e3 chmod o+rwx /etc/passwd 
chmod o+rwx /etc/group
 2025-04-01 10:59:09 +02:00
miwr
12a4ed37f7 /etc/group 2025-04-01 10:51:43 +02:00
miwr
77b571b768 chown 100:100 /etc/passwd 2025-04-01 10:50:59 +02:00
miwr
6df0858cdf - name: init 
image: alpine:latest
 2025-04-01 10:45:20 +02:00
miwr
06fb6d223f runAsUser: 100 2025-04-01 10:21:07 +02:00
miwr
4f8eb0bc8b chmod o+rwx /var/log/openbao 2025-04-01 10:05:55 +02:00
miwr
1164768b9f runAsUser: 1 2025-03-31 15:53:54 +02:00
miwr
f66f437cdf runAsUser: 100 2025-03-31 15:48:42 +02:00
miwr
ce5bdf0226 runAsUser: 1 2025-03-31 15:35:06 +02:00
miwr
56c5cc2620 - name: alloy-data 
mountPath: /var/lib/
 2025-03-31 15:24:21 +02:00
miwr
458414e779 set -e 
mkdir -p /var/log/openbao
          chown 100:100 /var/log/openbao
          echo "logrotate❌100💯:/home/logrotate:/bin/sh" >> /etc/passwd
          echo "logrotate❌100:" >> /etc/group
          mkdir -p /home/logrotate
          # chown 100:100 /var/lib
 2025-03-31 15:09:30 +02:00
miwr
8eae08aaa9 securityContext: 
runAsUser: 0
 2025-03-31 15:04:11 +02:00
miwr
ba9452e03c chown 100:100 /var/lib 2025-03-31 14:55:39 +02:00
miwr
888d32c403 set -e 
mkdir -p /var/log/openbao
          chown 100:100 /var/log/openbao
          echo "logrotate❌100💯:/home/logrotate:/bin/sh" >> /etc/passwd
          echo "logrotate❌100:" >> /etc/group
          chown logrotate:logrotate /var/lib
 2025-03-31 14:49:48 +02:00
miwr
6f3effeaf5 # bao audit enable file file_path=stdout 2025-03-31 14:49:09 +02:00
miwr
fd02d55dda bao audit enable file file_path=stdout 2025-03-31 14:26:58 +02:00
miwr
63b17c9e32 echo "logrotate❌100💯:/home/logrotate:/bin/sh" >> /etc/passwd 
echo "logrotate❌100:" >> /etc/group
 2025-03-31 14:10:34 +02:00
miwr
f13bf825ff set -e 
chown 100:100 /var/lib
          tail -f /dev/null
 2025-03-31 14:03:43 +02:00
miwr
abd7da5cd3 image: alpine:latest 2025-03-31 13:58:12 +02:00
miwr
a42df6275c restart policy removed 2025-03-31 13:50:24 +02:00
miwr
5a802be864 - | 
set -e
          useradd -u 100 logrotate
          chown logrotate:logrotate /var/lib
          tail -f /dev/null
 2025-03-31 13:45:05 +02:00
miwr
bc6ed363e2 logrotate-priviledges 2025-03-31 13:38:33 +02:00
miwr
631be775f5 chown logrotate:logrotate /var/lib/logrotate.status 2025-03-31 13:28:37 +02:00
miwr
0107666fe2 logrotate-config-volume 2025-03-31 12:31:38 +02:00
miwr
e5ccae1aab - name: logrotate-config 
mountPath: /etc/logrotate.conf
          subPath: logrotate.conf
          readOnly: true
 2025-03-31 12:22:35 +02:00
miwr
f6d1842876 image: skymatic/logrotate:latest 2025-03-31 12:14:19 +02:00
miwr
508ecd3f12 imagePullPolicy: IfNotPresent 2025-03-31 12:07:24 +02:00
miwr
5e47caaee1 - name: logrotate 
image: imroc/logrotate:latest
      env:
        - name: LOGROTATE_FILE_PATTERN
          value: "/var/log/nginx/nginx_*.log"
        - name: LOGROTATE_FILESIZE
          value: "20M"
        - name: LOGROTATE_FILENUM
          value: "10"
        - name: CRON_EXPR
          value: "*/1 * * * *"
        - name: CROND_LOGLEVEL
          value: "7"
 2025-03-31 11:54:31 +02:00
miwr
0485a8fb76 image: skymatic/logrotate:latest 2025-03-31 11:42:14 +02:00
miwr
17f578dde2 blacklabelops/logrotate 2025-03-31 11:20:56 +02:00
miwr
a35aefc376 image: debian:stable-slim 2025-03-31 11:07:40 +02:00
miwr
398c94fbc8 alpine:latest 2025-03-31 11:02:11 +02:00
miwr
30f0c6f218 debian:stable-slim 2025-03-31 10:54:23 +02:00
miwr
06303ef355 bao audit enable -path="file" file file_path=/openbao/logs/openbao/openbao.log 2025-03-31 10:30:15 +02:00
miwr
08471dee47 bao audit enable -path="file" file file_path=/var/log/openbao/openbao.log 2025-03-31 10:25:48 +02:00
miwr
881b65fcec apiVersion: apps/v1 
kind: DaemonSet
metadata:
  name: openbao-logging-dir
  namespace: openbao
spec:
  selector:
    matchLabels:
      app: openbao-logging-dir
  template:
    metadata:
      labels:
        app: openbao-logging-dir
    spec:
      initContainers:
      - name: creator
        image: busybox
        command: ["/bin/sh", "-c"]
        args:
        - |
          set -e
          mkdir -p /var/log/openbao
          chown 100:100 /var/log/openbao
        securityContext:
          runAsUser: 0
        volumeMounts:
        - name: host-log
          mountPath: /var/log
      containers:
      - name: running-container
        image: busybox
        command: ["sleep", "infinity"]
      volumes:
      - name: host-log
        hostPath:
          path: /var/log
          type: Directory
 2025-03-31 10:19:39 +02:00
miwr
3853370a8c # - name: logrotate-config 
#   mountPath: /etc/logrotate.conf
        #   subPath: logrotate.conf
 2025-03-31 10:10:59 +02:00
miwr
6acd284b83 - name: logrotate 
image: alpine:latest
      command: ["/bin/sh", "-c", "while true; do /usr/sbin/logrotate /etc/logrotate.conf; sleep 60; done"]
      securityContext:
        runAsUser: 100
      volumeMounts:
        - name: host-log-storage
          mountPath: /openbao/logs
        - name: logrotate-config
          mountPath: /etc/logrotate.conf
          subPath: logrotate.conf
 2025-03-31 10:03:59 +02:00
miwr
c79114f463 # bao audit enable file file_path=stdout 2025-03-27 13:43:26 +01:00
miwr
6a5be1257c bao audit enable file file_path=stdout 2025-03-27 13:19:45 +01:00
miwr
1cb714aabb volumeMounts: 
- mountPath: /var/log
    name: log-storage
    readOnly: false
 2025-03-26 15:51:24 +01:00
miwr
450b5ff1a8 # removed 2025-03-26 15:42:15 +01:00
miwr
aaaf905edc # rm -rf /openbao/data/* 2025-03-26 15:40:05 +01:00