Tree: 965ea8d921

cached-config-operations

main

revert-7033-patch-1

test_dylint

v2-registration

0.10.0

0.11.0

0.12.0

0.13.0

0.9.0

1.0.0

1.1.0

1.10.0

1.11.0

1.12.0

1.13.0

1.13.1

1.14

1.14.1

1.14.2

1.15.0

1.15.1

1.16.0

1.16.1

1.16.2

1.16.3

1.17.0

1.18.0

1.19.0

1.2.0

1.20.0

1.21.0

1.22.0

1.22.1

1.22.2

1.23.0

1.23.1

1.24.0

1.25.0

1.25.1

1.25.2

1.26.0

1.27.0

1.28.0

1.28.1

1.29.0

1.29.1

1.29.2

1.3.0

1.30.0

1.30.1

1.30.2

1.30.3

1.30.4

1.30.5

1.31.0

1.32.0

1.32.1

1.32.2

1.32.3

1.32.4

1.32.5

1.32.6

1.32.7

1.33.0

1.33.1

1.33.2

1.34.0

1.34.1

1.34.2

1.34.3

1.35.0

1.35.1

1.35.2

1.35.3

1.35.4

1.35.5

1.35.6

1.35.7

1.35.8

1.36.0

1.37.0

1.37.1

1.4.0

1.5.0

1.6.0

1.6.1

1.7.0

1.8.0

1.9.0

1.9.1

Branches Tags

${ item.name }

Create tag ${ searchTerm }

Create branch ${ searchTerm }

from '965ea8d921'

${ noResults }

Commit Graph

2 Commits (965ea8d9215cff1e465f67d40b647deac5f5181c)

Author	SHA1	Message	Date
Rohmilchkaese	834a194816	feat(helm): add env, secretEnv maps for flexible env var configuration Add three layers for setting environment variables: - env: plain key-value map for any vaultwarden env var - secretEnv: shorthand for secretKeyRef without verbose YAML - extraEnv: raw Kubernetes env spec for complex cases (fieldRef, etc.) This lets users set any vaultwarden env var without requiring chart changes, while the structured values (vaultwarden.smtp.*, database.*, etc.) remain available for validation and existingSecret integration.	6 months ago
Rohmilchkaese	761d40699a	feat: add official Helm chart Add a production-ready Helm chart under helm/vaultwarden/ with: - SQLite default, PostgreSQL/MySQL selectable - Database URL from secret or composed from parts (Zalano/CNPG operator support) - All sensitive values via secretKeyRef with existingSecret support - Hardened security: non-root (UID 1000), readOnlyRootFilesystem, drop ALL capabilities, seccomp RuntimeDefault, automountServiceAccountToken disabled - Ingress with ingressClassName, annotations, labels, TLS - PVC with helm.sh/resource-policy: keep, storageClassName 3-way handling - Service annotations/labels, NodePort, LoadBalancer support - Admin panel, SMTP, SSO/OIDC, push notifications, Yubico OTP - Template validation (fail on misconfiguration) - extraEnv, extraVolumes, extraVolumeMounts, initContainers - Comprehensive README with configuration reference Tested with helm lint --strict, helm template (6 scenarios), and deployed on a real k8s cluster (probes pass, logs clean).	6 months ago