diff --git a/.images/made-for-uds.svg b/.images/made-for-uds.svg new file mode 100644 index 00000000..36b3524c --- /dev/null +++ b/.images/made-for-uds.svg @@ -0,0 +1,225 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/README.md b/README.md index 68751e9f..78a431dd 100644 --- a/README.md +++ b/README.md @@ -1,5 +1,6 @@ # 🏭 UDS GitLab Zarf Package +[Made for UDS](https://github.com/defenseunicorns/uds-core) [![Latest Release](https://img.shields.io/github/v/release/defenseunicorns/uds-package-gitlab)](https://github.com/defenseunicorns/uds-package-gitlab/releases) [![Build Status](https://img.shields.io/github/actions/workflow/status/defenseunicorns/uds-package-gitlab/tag-and-release.yaml)](https://github.com/defenseunicorns/uds-package-gitlab/actions/workflows/tag-and-release.yaml) [![OpenSSF Scorecard](https://api.securityscorecards.dev/projects/github.com/defenseunicorns/uds-package-gitlab/badge)](https://api.securityscorecards.dev/projects/github.com/defenseunicorns/uds-package-gitlab) diff --git a/chart/templates/postgres-peerauthentication.yaml b/chart/templates/postgres-peerauthentication.yaml index 47c61c18..36de171f 100644 --- a/chart/templates/postgres-peerauthentication.yaml +++ b/chart/templates/postgres-peerauthentication.yaml @@ -11,7 +11,7 @@ spec: matchLabels: {{ .Values.postgres.selector | toYaml }} portLevelMtls: - # Postgres exception to support GitLab dependency init containers + # Postgres exception to support GitLab 'dependency' init containers {{ .Values.postgres.port }}: mode: PERMISSIVE {{- end }} diff --git a/chart/templates/redis-peerauthentication.yaml b/chart/templates/redis-peerauthentication.yaml index 1cf18684..47214b46 100644 --- a/chart/templates/redis-peerauthentication.yaml +++ b/chart/templates/redis-peerauthentication.yaml @@ -11,7 +11,7 @@ spec: matchLabels: {{ .Values.redis.selector | toYaml }} portLevelMtls: - # Redis/Valkey exception to support GitLab dependency init containers + # Redis/Valkey exception to support GitLab 'dependency' init containers {{ .Values.redis.port }}: mode: PERMISSIVE {{- end }} diff --git a/docs/configuration.md b/docs/configuration.md index 547423d1..8aeb76e1 100644 --- a/docs/configuration.md +++ b/docs/configuration.md @@ -11,6 +11,9 @@ Network policies are controlled via the `uds-gitlab-config` chart in accordance - `postgres`: sets network policies for accessing a Postgres database from all GitLab services (`webservice`, `toolbox`, `sidekiq`, `migrations`, `gitlab-exporter`) - `custom`: sets custom network policies for the GitLab namespace - this allows for custom integrations with other services (i.e. Jira) +> [!NOTE] +> Currently the GitLab UDS Package contains Istio `PeerAuthentication` exceptions to allow the `dependency` init containers to reach out and check the Redis and Postgres services. These are only added with `redis.internal` or `postgres.internal` set to `true` and will be removed once UDS Core [switches to native sidecars](https://github.com/defenseunicorns/uds-core/issues/536). + ## Database GitLab uses Postgres as its backing database service and supports the [common database providers within UDS Software Factory](https://github.com/defenseunicorns/uds-software-factory/blob/main/docs/database.md).