Skip to content

v0.25.7

Choose a tag to compare

View all tags
@github-actions github-actions released this 12 Oct 10:59
· 5 commits to main since this release
v0.25.7
14c32df

Image: 1kcsd/devops-tools:0.25.7
Chart version: 0.28.2

What changed

  • Everything Docker Scout reported against 0.25.6 is fixed. Go 1.26.9 — the
    image had been built with 1.26.8, which missed thirteen fixes to the standard
    library, three of them in the HTTP server and reachable before sign-in.
    Helm 3.22, the Kubernetes client libraries 0.37, and patched oras-go,
    golang.org/x/net, golang.org/x/crypto and go-ldap.
  • Helm 3.22 no longer depends on containerd, and signs charts with
    ProtonMail's maintained OpenPGP library. The findings that had no fix
    upstream went with the code that carried them.
  • One finding remains in scanners that read the module list rather than the
    code: GO-2026-5932, against golang.org/x/crypto, for openpgp packages that
    are not compiled into the binary. The image carries a VEX statement saying
    so, and CI fails the build if it ever stops being true.
  • The base image is Debian 13. Debian 12 is past regular security support.
  • The interface is built with Node 24, from the lock file, on Vite 8 and React
    Router 7. Until now the image ignored the lock file and built from whatever
    the version ranges resolved to that day.
  • Images are published with an SBOM and build provenance.

Install

Start from an example values file — one per way of signing in:

# accounts kept by the portal itself, with nothing else to install
curl -O https://raw.githubusercontent.com/kcsd-labs/devops-tools/v0.25.7/examples/values-local.yaml
# Active Directory or OpenLDAP
curl -O https://raw.githubusercontent.com/kcsd-labs/devops-tools/v0.25.7/examples/values-ldap.yaml
# Keycloak, and anything else speaking OpenID Connect
curl -O https://raw.githubusercontent.com/kcsd-labs/devops-tools/v0.25.7/examples/values-oidc.yaml

Fill in the one you took, then install with it:

helm install devops-tools oci://registry-1.docker.io/1kcsd/devops-tools --version 0.28.2 \
  --namespace devops-tools --create-namespace \
  -f values-ldap.yaml

The administrator password is the one thing an install has to decide:
nothing here ships a default, so with none set the service stops at
startup rather than coming up as a portal anybody could walk into.

Assets 3
Loading