lp:~tcuthbert/charm-k8s-wordpress

Owned by Thomas Cuthbert
Get this repository:
git clone https://git.launchpad.net/~tcuthbert/charm-k8s-wordpress
Only Thomas Cuthbert can upload to this repository. If you are Thomas Cuthbert please log in for upload directions.

Branches

Name Last Modified Last Commit
master 2022-07-21 08:32:06 UTC
v5.9.3.1-20.04 release

Author: Thomas Cuthbert
Author Date: 2022-07-21 08:32:06 UTC

v5.9.3.1-20.04 release

container-hardening 2022-07-04 00:14:51 UTC
fix: apache2 running as unprivileged user

Author: Thomas Cuthbert
Author Date: 2022-07-04 00:12:15 UTC

fix: apache2 running as unprivileged user

    - allow o+rwx for std{err,out} so apache workers have necessary
      permissions for logging
    - improve build times by ensuring copying from image-builder/files
      occurs outside the install phase
    - make editing the envvars file simpler: hardcoding the user/group
      isn't necessary if its already set as the environment variable
    - updates to file/dir permissions to enable wordpress user to update
      configs and runtime state files
    - ensure connections are gracefully terminated on shutdown by
      specifying the STOPSIGNAL
    - specify the new tcp port (8000) for the plugin helpers

container-hardening-wip 2022-07-01 10:46:44 UTC
wip: fix running apache unprivileged

Author: Thomas Cuthbert
Author Date: 2022-07-01 10:36:29 UTC

wip: fix running apache unprivileged

container-hardening-rebased 2022-05-27 00:20:49 UTC
harden Dockerfile

Author: Thomas Cuthbert
Author Date: 2022-01-17 04:28:49 UTC

harden Dockerfile

    - run as unprivileged `wordpress` user
    - lock down file permissions for app code
    - ensure failed run commands cause a failed build
    - configure php parameters at build time rather than on container
      start

harden docker-entrypoint script

    - configure db parameters in one call using envsubstr
    - dynamic plugin loading at runtime is dangerous, plugin updates to
      come from freshened container image builds or separate volumes
    - php parameters are static so they should be set at build time

harden apache2 config

    - Be more explicit with exempting sensitive URIs from being
      cached

fix(container): address MP feedback, drop setcap in favour of apache listening on highport (8000/8443)

container-hardening-unbased 2022-05-26 11:09:11 UTC
fix(container): address MP feedback, drop setcap in favour of apache listenin...

Author: Thomas Cuthbert
Author Date: 2022-05-26 10:43:44 UTC

fix(container): address MP feedback, drop setcap in favour of apache listening on highport (8000/8443)

kubuntu-org 2021-08-11 05:49:17 UTC
Move remove_filter('template_redirect', 'redirect_canonical');

Author: Thomas Cuthbert
Author Date: 2021-08-11 05:49:17 UTC

Move remove_filter('template_redirect', 'redirect_canonical');

  wp-config.php should not perform side-effects, so let's use
  functions.php to perform the same effect.

sidecar 2021-06-14 15:41:08 UTC
Remove secrets from container once we're done

Author: Thomas Cuthbert
Author Date: 2021-06-14 15:41:08 UTC

Remove secrets from container once we're done

xubuntu-container-fixes 2021-06-02 19:01:05 UTC
More updates for arbitrary plugin sync

Author: Thomas Cuthbert
Author Date: 2021-06-02 18:43:46 UTC

More updates for arbitrary plugin sync

    - Copy plugins out of plugin base at the end of the build to speed
    things up.
    - Make plugin syncing atomic on container startup.
    - Fix runtime bugs in the sync script.

image-plugin-updates 2021-06-02 18:43:46 UTC
More updates for arbitrary plugin sync

Author: Thomas Cuthbert
Author Date: 2021-06-02 18:43:46 UTC

More updates for arbitrary plugin sync

    - Copy plugins out of plugin base at the end of the build to speed
    things up.
    - Make plugin syncing atomic on container startup.
    - Fix runtime bugs in the sync script.

sidecar-devel 2021-05-26 08:44:16 UTC
Some custom Makefile commands for testing sidecar

Author: Thomas Cuthbert
Author Date: 2021-05-26 08:44:16 UTC

Some custom Makefile commands for testing sidecar

sidecar-wip2 2021-05-13 09:33:36 UTC
pebble init PoC working

Author: Thomas Cuthbert
Author Date: 2021-05-13 05:33:45 UTC

pebble init PoC working

sidecar-base 2021-05-12 03:32:02 UTC
initial commit

Author: Thomas Cuthbert
Author Date: 2021-05-12 03:32:02 UTC

initial commit

sidecar-wip 2021-05-11 09:05:32 UTC
Day 1: WIP commit

Author: Thomas Cuthbert
Author Date: 2021-05-11 09:05:32 UTC

Day 1: WIP commit

test-php-opencloud 2021-04-22 06:43:51 UTC
Testing php-opencloud

Author: Thomas Cuthbert
Author Date: 2021-04-22 06:43:51 UTC

Testing php-opencloud

ss-backends 2021-04-15 15:09:41 UTC
Enable SSL support for backend servers

Author: Thomas Cuthbert
Author Date: 2021-04-15 15:09:41 UTC

Enable SSL support for backend servers

additional_hostnames 2021-01-14 04:50:54 UTC
Updates based on review feedback

Author: Thomas Cuthbert
Author Date: 2021-01-14 04:42:58 UTC

Updates based on review feedback

    * split_additional_hostnames wasn't named very well, made it more
      generalised and updated it with a naming convention that properly describes its job.
    * Removed superfluous inline comment for the is_valid_config method.
    * Be consistent with the additional_hostnames variable name.
    * The test for additional_hostnames was flawed due to charm config
      not being restored.
    * Added a test for when additional_hostnames is empty.

merge_stuff 2020-12-03 07:36:22 UTC
Merge the k8s builder code in with the charm

Author: Thomas Cuthbert
Author Date: 2020-12-03 05:43:56 UTC

Merge the k8s builder code in with the charm

update_charm 2020-11-17 10:35:29 UTC
test

Author: Thomas Cuthbert
Author Date: 2020-11-12 11:24:05 UTC

test

operator 2020-04-17 01:30:01 UTC
Invert the initialised logic to match the updated variable grammar

Author: Thomas Cuthbert
Author Date: 2020-04-17 01:30:01 UTC

Invert the initialised logic to match the updated variable grammar

119 of 19 results
This repository contains Public information 
Everyone can see this information.

Subscribers