Skip to content

Commit 4909378

Browse files
authoredJul 24, 2024··
chore: add PeerAuthentication docs and Made for UDS Badge (#174)
## Description This adds the Made for UDS badge and additional docs on the PeerAuthentication exceptions to GitLab ## Related Issue Fixes #164 ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [X] Other (security config, docs update, etc) ## Checklist before merging - [X] Test, docs, adr added or updated as needed - [X] [Contributor Guide Steps](https://github.com/defenseunicorns/uds-package-gitlab/blob/main/CONTRIBUTING.md#developer-workflow) followed
1 parent b7ecded commit 4909378

File tree

5 files changed

+231
-2
lines changed

5 files changed

+231
-2
lines changed
 

‎.images/made-for-uds.svg

+225
Loading

‎README.md

+1
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,6 @@
11
# 🏭 UDS GitLab Zarf Package
22

3+
[<img alt="Made for UDS" src="./.images/made-for-uds.svg" height="20px"/>](https://github.com/defenseunicorns/uds-core)
34
[![Latest Release](https://img.shields.io/github/v/release/defenseunicorns/uds-package-gitlab)](https://github.com/defenseunicorns/uds-package-gitlab/releases)
45
[![Build Status](https://img.shields.io/github/actions/workflow/status/defenseunicorns/uds-package-gitlab/tag-and-release.yaml)](https://github.com/defenseunicorns/uds-package-gitlab/actions/workflows/tag-and-release.yaml)
56
[![OpenSSF Scorecard](https://api.securityscorecards.dev/projects/github.com/defenseunicorns/uds-package-gitlab/badge)](https://api.securityscorecards.dev/projects/github.com/defenseunicorns/uds-package-gitlab)

‎chart/templates/postgres-peerauthentication.yaml

+1-1
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@ spec:
1111
matchLabels:
1212
{{ .Values.postgres.selector | toYaml }}
1313
portLevelMtls:
14-
# Postgres exception to support GitLab dependency init containers
14+
# Postgres exception to support GitLab 'dependency' init containers
1515
{{ .Values.postgres.port }}:
1616
mode: PERMISSIVE
1717
{{- end }}

‎chart/templates/redis-peerauthentication.yaml

+1-1
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@ spec:
1111
matchLabels:
1212
{{ .Values.redis.selector | toYaml }}
1313
portLevelMtls:
14-
# Redis/Valkey exception to support GitLab dependency init containers
14+
# Redis/Valkey exception to support GitLab 'dependency' init containers
1515
{{ .Values.redis.port }}:
1616
mode: PERMISSIVE
1717
{{- end }}

‎docs/configuration.md

+3
Original file line numberDiff line numberDiff line change
@@ -11,6 +11,9 @@ Network policies are controlled via the `uds-gitlab-config` chart in accordance
1111
- `postgres`: sets network policies for accessing a Postgres database from all GitLab services (`webservice`, `toolbox`, `sidekiq`, `migrations`, `gitlab-exporter`)
1212
- `custom`: sets custom network policies for the GitLab namespace - this allows for custom integrations with other services (i.e. Jira)
1313

14+
> [!NOTE]
15+
> Currently the GitLab UDS Package contains Istio `PeerAuthentication` exceptions to allow the `dependency` init containers to reach out and check the Redis and Postgres services. These are only added with `redis.internal` or `postgres.internal` set to `true` and will be removed once UDS Core [switches to native sidecars](https://github.com/defenseunicorns/uds-core/issues/536).
16+
1417
## Database
1518

1619
GitLab uses Postgres as its backing database service and supports the [common database providers within UDS Software Factory](https://github.com/defenseunicorns/uds-software-factory/blob/main/docs/database.md).

0 commit comments

Comments
 (0)
Please sign in to comment.