feat(supabase): add services and statefulset for database management

feat(synapse): update ingress to use traefik ingress class and bump version

feat(syncthing-discovery): introduce syncthing discovery service with deployment and ingress

feat(syncthing-relay): add syncthing relay server with deployment and ingress configuration

fix(taiga): update liveness and readiness probes to use tcpSocket for health checks

fix(taiga): change PVC access mode to ReadWriteMany for media and static storage

feat(traefik): add icon and ignore rules for traefik service

docs(ushahidi): add notes for Redis configuration and Laravel startup probe adjustments

feat(ushahidi): implement dedicated Redis deployment for Ushahidi

fix(vllm): update deployment strategy and readiness/liveness probes for improved stability

fix(writefreely): pin writefreely image version to v0.15.1 for consistency

docs(zulip): add notes for TLS-terminating reverse proxy configuration and expected behavior

example-admin/versions/1/deployment.yaml

@@ -15,6 +15,9 @@ spec:
       labels:
         app: example-admin
     spec:
+      securityContext:
+        seccompProfile:
+          type: RuntimeDefault
       containers:
         - name: example-admin
           image: nginx:latest
@@ -28,6 +31,15 @@ spec:
             requests:
               cpu: 50m
               memory: 10Mi
+          securityContext:
+            runAsNonRoot: false
+            runAsUser: 0
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop: [ALL]
+            readOnlyRootFilesystem: false
+            seccompProfile:
+              type: RuntimeDefault
           livenessProbe:
             httpGet:
               path: /

example-admin/versions/1/ingress.yaml

@@ -3,7 +3,10 @@ apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   name: example-admin
+  annotations:
+    external-dns.alpha.kubernetes.io/target: '{{ .externalDnsDomain }}'
 spec:
+  ingressClassName: traefik
   rules:
     - host: "{{ .host }}"
       http:

example-admin/versions/1/manifest.yaml

@@ -1,4 +1,4 @@
-version: 1.0.0-1
+version: 1.0.0-2
 defaultConfig:
   namespace: example-admin
   externalDnsDomain: '{{ .cloud.domain }}'