From e477967bde87228396583ed813a7ce1d47d00233 Mon Sep 17 00:00:00 2001 From: Marko Bevc Date: Fri, 24 Jul 2026 18:29:30 +0100 Subject: [PATCH 01/12] feat(helm): add auto-environment values to k8s-reporter chart Expose the CLI's `--auto-environment` flag and its companion flags (`--environment-description`, `--include-scaling`, `--exclude-scaling`) as `reporterConfig.*` values on the k8s-reporter chart, so the reporter CronJob can auto-create Kosli environments (type K8S) on first run without editing the chart. Chart version bumped to 2.6.0 and the values table in README regenerated. --- charts/k8s-reporter/Chart.yaml | 2 +- charts/k8s-reporter/README.md | 3 +++ charts/k8s-reporter/templates/cronjob.yaml | 12 ++++++++++++ charts/k8s-reporter/values.yaml | 6 ++++++ 4 files changed, 22 insertions(+), 1 deletion(-) diff --git a/charts/k8s-reporter/Chart.yaml b/charts/k8s-reporter/Chart.yaml index 65339772c..985c9d187 100644 --- a/charts/k8s-reporter/Chart.yaml +++ b/charts/k8s-reporter/Chart.yaml @@ -15,7 +15,7 @@ type: application # This is the chart version. This version number should be incremented each time you make changes # to the chart and its templates, including the app version. # Versions are expected to follow Semantic Versioning (https://semver.org/) -version: 2.5.0 +version: 2.6.0 # This is the version number of the (CLI) application being deployed. This version number should be # incremented each time you make changes to the application. They should reflect the version the diff --git a/charts/k8s-reporter/README.md b/charts/k8s-reporter/README.md index 04612cde0..e8f86548f 100644 --- a/charts/k8s-reporter/README.md +++ b/charts/k8s-reporter/README.md @@ -224,9 +224,12 @@ cronSchedule: "*/15 * * * *" | podAnnotations | object | `{}` | annotations to add to the CronJob object itself. For pod-level annotations (added to each reporter pod), use `podTemplateAnnotations` instead. | | podLabels | object | `{}` | custom labels to add to pods | | podTemplateAnnotations | object | `{}` | annotations to add to the reporter pod template (applied to each Job pod that the CronJob creates) | +| reporterConfig.autoEnvironment | bool | `false` | create each Kosli environment (type K8S) if it does not already exist, before reporting the snapshot | | reporterConfig.dryRun | bool | `false` | whether the dry run mode is enabled or not. In dry run mode, the reporter logs the reports to stdout and does not send them to kosli. | +| reporterConfig.environmentDescription | string | `""` | description applied to an environment when it is auto-created. Only used when `autoEnvironment` is true; ignored for environments that already exist. | | reporterConfig.environments | list | `[]` | List of Kosli environments to report to. Each entry has required 'name' and optional namespace selectors. Use one entry to report a single environment; use multiple entries to report to multiple environments with different selectors. Per entry: name (required), namespaces, namespacesRegex, excludeNamespaces, excludeNamespacesRegex (optional). Leave namespace fields unset for an entry to report the entire cluster to that environment. | | reporterConfig.httpProxy | string | `""` | the http proxy url | +| reporterConfig.includeScaling | bool | `false` | whether to record scaling (replica count) changes for auto-created environments. When true the reporter passes `--include-scaling`; when false it passes `--exclude-scaling`. Only used when `autoEnvironment` is true. | | reporterConfig.kosliOrg | string | `""` | the name of the Kosli org | | reporterConfig.securityContext | object | `{"allowPrivilegeEscalation":false,"runAsNonRoot":true,"runAsUser":1000}` | the security context for the reporter cronjob. Set to null or {} to disable security context entirely (not recommended). For OpenShift with SCC, explicitly set runAsUser to null to let OpenShift assign the UID from the allowed range. Simply omitting runAsUser from your values override will not work because Helm deep-merges with these defaults. Example OpenShift override: securityContext: allowPrivilegeEscalation: false runAsNonRoot: true runAsUser: null | | reporterConfig.securityContext.allowPrivilegeEscalation | bool | `false` | whether to allow privilege escalation | diff --git a/charts/k8s-reporter/templates/cronjob.yaml b/charts/k8s-reporter/templates/cronjob.yaml index 71791821e..7566195a0 100644 --- a/charts/k8s-reporter/templates/cronjob.yaml +++ b/charts/k8s-reporter/templates/cronjob.yaml @@ -110,6 +110,18 @@ spec: - k8s - --config-file - /config/config.yaml + {{ if .Values.reporterConfig.autoEnvironment }} + - --auto-environment + {{ if .Values.reporterConfig.environmentDescription }} + - --environment-description + - {{ .Values.reporterConfig.environmentDescription }} + {{ end }} + {{ if .Values.reporterConfig.includeScaling }} + - --include-scaling + {{ else }} + - --exclude-scaling + {{ end }} + {{ end }} {{ if .Values.reporterConfig.dryRun }} - --dry-run {{ end }} diff --git a/charts/k8s-reporter/values.yaml b/charts/k8s-reporter/values.yaml index 47362c5c8..ae9e4b004 100644 --- a/charts/k8s-reporter/values.yaml +++ b/charts/k8s-reporter/values.yaml @@ -65,6 +65,12 @@ reporterConfig: # namespacesRegex: ["^staging-.*"] # - name: infra-env # excludeNamespaces: [prod-ns1, prod-ns2, default] + # -- create each Kosli environment (type K8S) if it does not already exist, before reporting the snapshot + autoEnvironment: false + # -- description applied to an environment when it is auto-created. Only used when `autoEnvironment` is true; ignored for environments that already exist. + environmentDescription: "" + # -- whether to record scaling (replica count) changes for auto-created environments. When true the reporter passes `--include-scaling`; when false it passes `--exclude-scaling`. Only used when `autoEnvironment` is true. + includeScaling: false # -- whether the dry run mode is enabled or not. In dry run mode, the reporter logs the reports to stdout and does not send them to kosli. dryRun: false # -- the http proxy url From 7f7bbed69e157e074dfb2c66a1eba1b62f584214 Mon Sep 17 00:00:00 2001 From: Marko Bevc Date: Fri, 24 Jul 2026 18:29:34 +0100 Subject: [PATCH 02/12] chore: bump Chart appVersion --- charts/k8s-reporter/Chart.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/charts/k8s-reporter/Chart.yaml b/charts/k8s-reporter/Chart.yaml index 985c9d187..f5345b30f 100644 --- a/charts/k8s-reporter/Chart.yaml +++ b/charts/k8s-reporter/Chart.yaml @@ -20,4 +20,4 @@ version: 2.6.0 # This is the version number of the (CLI) application being deployed. This version number should be # incremented each time you make changes to the application. They should reflect the version the # application is using. It is recommended to use it with quotes. -appVersion: "v2.32.0" +appVersion: "v2.33.3" From 1cc10fd74904f77fc71d4d225d6a2285f2312943 Mon Sep 17 00:00:00 2001 From: Marko Bevc Date: Fri, 24 Jul 2026 18:29:36 +0100 Subject: [PATCH 03/12] Update charts/k8s-reporter/templates/cronjob.yaml --- charts/k8s-reporter/templates/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/charts/k8s-reporter/templates/cronjob.yaml b/charts/k8s-reporter/templates/cronjob.yaml index 7566195a0..7d9a498b1 100644 --- a/charts/k8s-reporter/templates/cronjob.yaml +++ b/charts/k8s-reporter/templates/cronjob.yaml @@ -114,7 +114,7 @@ spec: - --auto-environment {{ if .Values.reporterConfig.environmentDescription }} - --environment-description - - {{ .Values.reporterConfig.environmentDescription }} + - {{ .Values.reporterConfig.environmentDescription | quote }} {{ end }} {{ if .Values.reporterConfig.includeScaling }} - --include-scaling From bc04d7478f9914fb7b9b2200d843de7a82fb1200 Mon Sep 17 00:00:00 2001 From: Marko Bevc Date: Fri, 24 Jul 2026 18:29:37 +0100 Subject: [PATCH 04/12] feat(helm): allow includeScaling to be left unset Make reporterConfig.includeScaling nullable (default `null`) so it maps to all three CLI states: unset omits both scaling flags (Kosli server default), true passes `--include-scaling`, and false passes `--exclude-scaling`. The template uses `kindIs "invalid"` to tell an unset value apart from an explicit false, so autoEnvironment no longer forces a scaling flag. Also whitespace-trims the auto-environment arg block so it renders cleanly. --- charts/k8s-reporter/README.md | 2 +- charts/k8s-reporter/templates/cronjob.yaml | 16 +++++++++------- charts/k8s-reporter/values.yaml | 5 +++-- 3 files changed, 13 insertions(+), 10 deletions(-) diff --git a/charts/k8s-reporter/README.md b/charts/k8s-reporter/README.md index e8f86548f..47b57c720 100644 --- a/charts/k8s-reporter/README.md +++ b/charts/k8s-reporter/README.md @@ -229,7 +229,7 @@ cronSchedule: "*/15 * * * *" | reporterConfig.environmentDescription | string | `""` | description applied to an environment when it is auto-created. Only used when `autoEnvironment` is true; ignored for environments that already exist. | | reporterConfig.environments | list | `[]` | List of Kosli environments to report to. Each entry has required 'name' and optional namespace selectors. Use one entry to report a single environment; use multiple entries to report to multiple environments with different selectors. Per entry: name (required), namespaces, namespacesRegex, excludeNamespaces, excludeNamespacesRegex (optional). Leave namespace fields unset for an entry to report the entire cluster to that environment. | | reporterConfig.httpProxy | string | `""` | the http proxy url | -| reporterConfig.includeScaling | bool | `false` | whether to record scaling (replica count) changes for auto-created environments. When true the reporter passes `--include-scaling`; when false it passes `--exclude-scaling`. Only used when `autoEnvironment` is true. | +| reporterConfig.includeScaling | string | `nil` (server default) | whether to record scaling (replica count) changes for auto-created environments. Leave unset to use the Kosli server default; set to `true` to pass `--include-scaling` or `false` to pass `--exclude-scaling`. Only used when `autoEnvironment` is true. | | reporterConfig.kosliOrg | string | `""` | the name of the Kosli org | | reporterConfig.securityContext | object | `{"allowPrivilegeEscalation":false,"runAsNonRoot":true,"runAsUser":1000}` | the security context for the reporter cronjob. Set to null or {} to disable security context entirely (not recommended). For OpenShift with SCC, explicitly set runAsUser to null to let OpenShift assign the UID from the allowed range. Simply omitting runAsUser from your values override will not work because Helm deep-merges with these defaults. Example OpenShift override: securityContext: allowPrivilegeEscalation: false runAsNonRoot: true runAsUser: null | | reporterConfig.securityContext.allowPrivilegeEscalation | bool | `false` | whether to allow privilege escalation | diff --git a/charts/k8s-reporter/templates/cronjob.yaml b/charts/k8s-reporter/templates/cronjob.yaml index 7d9a498b1..52f8a9096 100644 --- a/charts/k8s-reporter/templates/cronjob.yaml +++ b/charts/k8s-reporter/templates/cronjob.yaml @@ -110,18 +110,20 @@ spec: - k8s - --config-file - /config/config.yaml - {{ if .Values.reporterConfig.autoEnvironment }} + {{- if .Values.reporterConfig.autoEnvironment }} - --auto-environment - {{ if .Values.reporterConfig.environmentDescription }} + {{- if .Values.reporterConfig.environmentDescription }} - --environment-description - {{ .Values.reporterConfig.environmentDescription | quote }} - {{ end }} - {{ if .Values.reporterConfig.includeScaling }} + {{- end }} + {{- if not (kindIs "invalid" .Values.reporterConfig.includeScaling) }} + {{- if .Values.reporterConfig.includeScaling }} - --include-scaling - {{ else }} + {{- else }} - --exclude-scaling - {{ end }} - {{ end }} + {{- end }} + {{- end }} + {{- end }} {{ if .Values.reporterConfig.dryRun }} - --dry-run {{ end }} diff --git a/charts/k8s-reporter/values.yaml b/charts/k8s-reporter/values.yaml index ae9e4b004..4aa2e7bd4 100644 --- a/charts/k8s-reporter/values.yaml +++ b/charts/k8s-reporter/values.yaml @@ -69,8 +69,9 @@ reporterConfig: autoEnvironment: false # -- description applied to an environment when it is auto-created. Only used when `autoEnvironment` is true; ignored for environments that already exist. environmentDescription: "" - # -- whether to record scaling (replica count) changes for auto-created environments. When true the reporter passes `--include-scaling`; when false it passes `--exclude-scaling`. Only used when `autoEnvironment` is true. - includeScaling: false + # -- whether to record scaling (replica count) changes for auto-created environments. Leave unset to use the Kosli server default; set to `true` to pass `--include-scaling` or `false` to pass `--exclude-scaling`. Only used when `autoEnvironment` is true. + # @default -- `nil` (server default) + includeScaling: null # -- whether the dry run mode is enabled or not. In dry run mode, the reporter logs the reports to stdout and does not send them to kosli. dryRun: false # -- the http proxy url From 8157af8a99980029a47d0fd575404c367de2b6f7 Mon Sep 17 00:00:00 2001 From: Marko Bevc Date: Fri, 24 Jul 2026 18:29:53 +0100 Subject: [PATCH 05/12] chore: bump Chart appVersion to next release --- charts/k8s-reporter/Chart.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/charts/k8s-reporter/Chart.yaml b/charts/k8s-reporter/Chart.yaml index f5345b30f..e9781491d 100644 --- a/charts/k8s-reporter/Chart.yaml +++ b/charts/k8s-reporter/Chart.yaml @@ -20,4 +20,4 @@ version: 2.6.0 # This is the version number of the (CLI) application being deployed. This version number should be # incremented each time you make changes to the application. They should reflect the version the # application is using. It is recommended to use it with quotes. -appVersion: "v2.33.3" +appVersion: "v2.34.0" From 092acc7df3a7f22a05b6cd0b699ca650f61238dc Mon Sep 17 00:00:00 2001 From: Marko Bevc Date: Fri, 24 Jul 2026 18:29:54 +0100 Subject: [PATCH 06/12] docs(helm): clarify auto-env scope and standardise arg whitespace Clarify in the value help text that environmentDescription and includeScaling apply to every environment auto-created in a single run, that a single description is shared by all of them, and that existing environments are never modified (the CLI ignores these flags for envs that already exist). Also normalise the args block whitespace: the dryRun and httpProxy conditionals now use {{- trim markers like the auto-environment block, so the rendered manifest has no stray blank lines. --- charts/k8s-reporter/README.md | 4 ++-- charts/k8s-reporter/templates/cronjob.yaml | 9 ++++----- charts/k8s-reporter/values.yaml | 4 ++-- 3 files changed, 8 insertions(+), 9 deletions(-) diff --git a/charts/k8s-reporter/README.md b/charts/k8s-reporter/README.md index 47b57c720..478f2ed15 100644 --- a/charts/k8s-reporter/README.md +++ b/charts/k8s-reporter/README.md @@ -226,10 +226,10 @@ cronSchedule: "*/15 * * * *" | podTemplateAnnotations | object | `{}` | annotations to add to the reporter pod template (applied to each Job pod that the CronJob creates) | | reporterConfig.autoEnvironment | bool | `false` | create each Kosli environment (type K8S) if it does not already exist, before reporting the snapshot | | reporterConfig.dryRun | bool | `false` | whether the dry run mode is enabled or not. In dry run mode, the reporter logs the reports to stdout and does not send them to kosli. | -| reporterConfig.environmentDescription | string | `""` | description applied to an environment when it is auto-created. Only used when `autoEnvironment` is true; ignored for environments that already exist. | +| reporterConfig.environmentDescription | string | `""` | description applied to every environment auto-created in this run. Only used when `autoEnvironment` is true; existing environments are never modified. Note: a single value is shared by all environments created during the run. | | reporterConfig.environments | list | `[]` | List of Kosli environments to report to. Each entry has required 'name' and optional namespace selectors. Use one entry to report a single environment; use multiple entries to report to multiple environments with different selectors. Per entry: name (required), namespaces, namespacesRegex, excludeNamespaces, excludeNamespacesRegex (optional). Leave namespace fields unset for an entry to report the entire cluster to that environment. | | reporterConfig.httpProxy | string | `""` | the http proxy url | -| reporterConfig.includeScaling | string | `nil` (server default) | whether to record scaling (replica count) changes for auto-created environments. Leave unset to use the Kosli server default; set to `true` to pass `--include-scaling` or `false` to pass `--exclude-scaling`. Only used when `autoEnvironment` is true. | +| reporterConfig.includeScaling | string | `nil` (server default) | whether to record scaling (replica count) changes for every environment auto-created in this run. Leave unset to use the Kosli server default; set to `true` to pass `--include-scaling` or `false` to pass `--exclude-scaling`. Only used when `autoEnvironment` is true; existing environments are never modified. | | reporterConfig.kosliOrg | string | `""` | the name of the Kosli org | | reporterConfig.securityContext | object | `{"allowPrivilegeEscalation":false,"runAsNonRoot":true,"runAsUser":1000}` | the security context for the reporter cronjob. Set to null or {} to disable security context entirely (not recommended). For OpenShift with SCC, explicitly set runAsUser to null to let OpenShift assign the UID from the allowed range. Simply omitting runAsUser from your values override will not work because Helm deep-merges with these defaults. Example OpenShift override: securityContext: allowPrivilegeEscalation: false runAsNonRoot: true runAsUser: null | | reporterConfig.securityContext.allowPrivilegeEscalation | bool | `false` | whether to allow privilege escalation | diff --git a/charts/k8s-reporter/templates/cronjob.yaml b/charts/k8s-reporter/templates/cronjob.yaml index 52f8a9096..a77d6c518 100644 --- a/charts/k8s-reporter/templates/cronjob.yaml +++ b/charts/k8s-reporter/templates/cronjob.yaml @@ -124,14 +124,13 @@ spec: {{- end }} {{- end }} {{- end }} - {{ if .Values.reporterConfig.dryRun }} + {{- if .Values.reporterConfig.dryRun }} - --dry-run - {{ end }} - {{ if .Values.reporterConfig.httpProxy }} + {{- end }} + {{- if .Values.reporterConfig.httpProxy }} - --http-proxy - {{ .Values.reporterConfig.httpProxy }} - {{ end }} - + {{- end }} resources: {{ toYaml .Values.resources | indent 14 }} restartPolicy: Never diff --git a/charts/k8s-reporter/values.yaml b/charts/k8s-reporter/values.yaml index 4aa2e7bd4..faf304f8b 100644 --- a/charts/k8s-reporter/values.yaml +++ b/charts/k8s-reporter/values.yaml @@ -67,9 +67,9 @@ reporterConfig: # excludeNamespaces: [prod-ns1, prod-ns2, default] # -- create each Kosli environment (type K8S) if it does not already exist, before reporting the snapshot autoEnvironment: false - # -- description applied to an environment when it is auto-created. Only used when `autoEnvironment` is true; ignored for environments that already exist. + # -- description applied to every environment auto-created in this run. Only used when `autoEnvironment` is true; existing environments are never modified. Note: a single value is shared by all environments created during the run. environmentDescription: "" - # -- whether to record scaling (replica count) changes for auto-created environments. Leave unset to use the Kosli server default; set to `true` to pass `--include-scaling` or `false` to pass `--exclude-scaling`. Only used when `autoEnvironment` is true. + # -- whether to record scaling (replica count) changes for every environment auto-created in this run. Leave unset to use the Kosli server default; set to `true` to pass `--include-scaling` or `false` to pass `--exclude-scaling`. Only used when `autoEnvironment` is true; existing environments are never modified. # @default -- `nil` (server default) includeScaling: null # -- whether the dry run mode is enabled or not. In dry run mode, the reporter logs the reports to stdout and does not send them to kosli. From c058258e81f83f59a31fa8b6d6f82def2e6f1aaf Mon Sep 17 00:00:00 2001 From: Marko Bevc Date: Fri, 24 Jul 2026 18:29:59 +0100 Subject: [PATCH 07/12] fix(helm): only emit scaling flag for a real bool includeScaling Guard the scaling flag with `kindIs "bool"` instead of `not (kindIs "invalid" ...)`. A string value (e.g. from `--set-string reporterConfig.includeScaling=false` or a quoted `includeScaling: "false"`) is Go-template truthy whenever non-empty, which previously emitted --include-scaling regardless of the intended value. Requiring a genuine boolean means any non-bool falls back to the safe "unset -> server default" path. --- charts/k8s-reporter/templates/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/charts/k8s-reporter/templates/cronjob.yaml b/charts/k8s-reporter/templates/cronjob.yaml index a77d6c518..db7bb02a6 100644 --- a/charts/k8s-reporter/templates/cronjob.yaml +++ b/charts/k8s-reporter/templates/cronjob.yaml @@ -116,7 +116,7 @@ spec: - --environment-description - {{ .Values.reporterConfig.environmentDescription | quote }} {{- end }} - {{- if not (kindIs "invalid" .Values.reporterConfig.includeScaling) }} + {{- if kindIs "bool" .Values.reporterConfig.includeScaling }} {{- if .Values.reporterConfig.includeScaling }} - --include-scaling {{- else }} From 7458144f59f635883994270a6a6a1b68bcc1371e Mon Sep 17 00:00:00 2001 From: Marko Bevc Date: Sun, 26 Jul 2026 21:11:30 +0100 Subject: [PATCH 08/12] Trigger pipelines From 8409b3944f3542e0d8b5f6ecd0f62673e59fee01 Mon Sep 17 00:00:00 2001 From: Marko Bevc Date: Sun, 26 Jul 2026 21:15:54 +0100 Subject: [PATCH 09/12] chore: bump Chart badge --- charts/k8s-reporter/README.md | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/charts/k8s-reporter/README.md b/charts/k8s-reporter/README.md index 478f2ed15..8a7b92877 100644 --- a/charts/k8s-reporter/README.md +++ b/charts/k8s-reporter/README.md @@ -4,7 +4,7 @@ title: Kubernetes Reporter Helm Chart # k8s-reporter -![Version: 2.5.0](https://img.shields.io/badge/Version-2.5.0-informational?style=flat-square) +![Version: 2.6.0](https://img.shields.io/badge/Version-2.6.0-informational?style=flat-square) A Helm chart for installing the Kosli K8s reporter as a CronJob. The chart allows you to create a Kubernetes CronJob and all its necessary RBAC to report running images to Kosli at a given cron schedule. @@ -247,4 +247,3 @@ cronSchedule: "*/15 * * * *" ---------------------------------------------- Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2) - From cfd4eca9308621ec7bcb418d7ab46cca75f4e839 Mon Sep 17 00:00:00 2001 From: Marko Bevc Date: Sun, 26 Jul 2026 21:22:11 +0100 Subject: [PATCH 10/12] docs: amend Chart README to reflect all params --- charts/k8s-reporter/README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/charts/k8s-reporter/README.md b/charts/k8s-reporter/README.md index 8a7b92877..e0887b69a 100644 --- a/charts/k8s-reporter/README.md +++ b/charts/k8s-reporter/README.md @@ -229,7 +229,7 @@ cronSchedule: "*/15 * * * *" | reporterConfig.environmentDescription | string | `""` | description applied to every environment auto-created in this run. Only used when `autoEnvironment` is true; existing environments are never modified. Note: a single value is shared by all environments created during the run. | | reporterConfig.environments | list | `[]` | List of Kosli environments to report to. Each entry has required 'name' and optional namespace selectors. Use one entry to report a single environment; use multiple entries to report to multiple environments with different selectors. Per entry: name (required), namespaces, namespacesRegex, excludeNamespaces, excludeNamespacesRegex (optional). Leave namespace fields unset for an entry to report the entire cluster to that environment. | | reporterConfig.httpProxy | string | `""` | the http proxy url | -| reporterConfig.includeScaling | string | `nil` (server default) | whether to record scaling (replica count) changes for every environment auto-created in this run. Leave unset to use the Kosli server default; set to `true` to pass `--include-scaling` or `false` to pass `--exclude-scaling`. Only used when `autoEnvironment` is true; existing environments are never modified. | +| reporterConfig.includeScaling | bool | `null` (server default) | whether to record scaling (replica count) changes for every environment auto-created in this run. Leave unset to use the Kosli server default; set to `true` to pass `--include-scaling` or `false` to pass `--exclude-scaling`. Only used when `autoEnvironment` is true; existing environments are never modified. | | reporterConfig.kosliOrg | string | `""` | the name of the Kosli org | | reporterConfig.securityContext | object | `{"allowPrivilegeEscalation":false,"runAsNonRoot":true,"runAsUser":1000}` | the security context for the reporter cronjob. Set to null or {} to disable security context entirely (not recommended). For OpenShift with SCC, explicitly set runAsUser to null to let OpenShift assign the UID from the allowed range. Simply omitting runAsUser from your values override will not work because Helm deep-merges with these defaults. Example OpenShift override: securityContext: allowPrivilegeEscalation: false runAsNonRoot: true runAsUser: null | | reporterConfig.securityContext.allowPrivilegeEscalation | bool | `false` | whether to allow privilege escalation | From 26ab6c2fa5472068dc4b60bd4f5e6fb3d75231e9 Mon Sep 17 00:00:00 2001 From: Marko Bevc Date: Sun, 26 Jul 2026 21:33:21 +0100 Subject: [PATCH 11/12] chore: remove obsolete Hugo lock --- .hugo_build.lock | 0 1 file changed, 0 insertions(+), 0 deletions(-) delete mode 100644 .hugo_build.lock diff --git a/.hugo_build.lock b/.hugo_build.lock deleted file mode 100644 index e69de29bb..000000000 From 013fe6afc84aa3e9614afa599aa80bfb08909722 Mon Sep 17 00:00:00 2001 From: Marko Bevc Date: Sun, 26 Jul 2026 21:37:53 +0100 Subject: [PATCH 12/12] chore(helm-chart): quote httpProxy value --- charts/k8s-reporter/templates/cronjob.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/charts/k8s-reporter/templates/cronjob.yaml b/charts/k8s-reporter/templates/cronjob.yaml index db7bb02a6..45ce06667 100644 --- a/charts/k8s-reporter/templates/cronjob.yaml +++ b/charts/k8s-reporter/templates/cronjob.yaml @@ -129,7 +129,7 @@ spec: {{- end }} {{- if .Values.reporterConfig.httpProxy }} - --http-proxy - - {{ .Values.reporterConfig.httpProxy }} + - {{ .Values.reporterConfig.httpProxy | quote }} {{- end }} resources: {{ toYaml .Values.resources | indent 14 }}