feat(velocity): add whitelist

[jazzlyn]

No description provided.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[tyriis-automation]

--- kubernetes/talos-flux/apps/gaming-public/minecraft-java/velocity-proxy Kustomization: flux-system/minecraft-public-velocity-proxy HelmRelease: gaming-public/minecraft-public-velocity-proxy

+++ kubernetes/talos-flux/apps/gaming-public/minecraft-java/velocity-proxy Kustomization: flux-system/minecraft-public-velocity-proxy HelmRelease: gaming-public/minecraft-public-velocity-proxy

@@ -113,12 +113,21 @@

         - path: /server
         type: persistentVolumeClaim
       tmp:
         globalMounts:
         - path: /tmp
         type: emptyDir
+      whitelist:
+        advancedMounts:
+          velocity:
+            app:
+            - path: /server/plugins/simplewhitelist/whitelist.txt
+              readOnly: true
+              subPath: whitelist.txt
+        name: minecraft-public-velocity-proxy-whitelist
+        type: secret
     service:
       velocity:
         annotations:
           io.cilium/lb-ipam-ips: 192.168.1.86
         controller: velocity
         ports:
--- kubernetes/talos-flux/apps/gaming-public/minecraft-java/velocity-proxy Kustomization: flux-system/minecraft-public-velocity-proxy ExternalSecret: gaming-public/minecraft-public-velocity-proxy-whitelist

+++ kubernetes/talos-flux/apps/gaming-public/minecraft-java/velocity-proxy Kustomization: flux-system/minecraft-public-velocity-proxy ExternalSecret: gaming-public/minecraft-public-velocity-proxy-whitelist

@@ -0,0 +1,26 @@

+---
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  labels:
+    app.kubernetes.io/name: minecraft-public-velocity-proxy
+    kustomize.toolkit.fluxcd.io/name: minecraft-public-velocity-proxy
+    kustomize.toolkit.fluxcd.io/namespace: flux-system
+  name: minecraft-public-velocity-proxy-whitelist
+  namespace: gaming-public
+spec:
+  dataFrom:
+  - extract:
+      key: infra/techtales/gaming-public/minecraft-java
+  refreshInterval: 1m
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault-backend
+  target:
+    creationPolicy: Owner
+    name: minecraft-public-velocity-proxy-whitelist
+    template:
+      data:
+        whitelist.txt: '{{ .WHITELIST_TXT }}'
+      engineVersion: v2
+

[tyriis-automation]

--- HelmRelease: gaming-public/minecraft-public-velocity-proxy Deployment: gaming-public/minecraft-public-velocity-proxy

+++ HelmRelease: gaming-public/minecraft-public-velocity-proxy Deployment: gaming-public/minecraft-public-velocity-proxy

@@ -117,16 +117,23 @@

           readOnly: true
           subPath: forwarding.secret
         - mountPath: /server
           name: data
         - mountPath: /tmp
           name: tmp
+        - mountPath: /server/plugins/simplewhitelist/whitelist.txt
+          name: whitelist
+          readOnly: true
+          subPath: whitelist.txt
       volumes:
       - configMap:
           name: minecraft-public-velocity-proxy-config
         name: config
       - name: data
         persistentVolumeClaim:
           claimName: minecraft-public-velocity-proxy-data
       - emptyDir: {}
         name: tmp
+      - name: whitelist
+        secret:
+          secretName: minecraft-public-velocity-proxy-whitelist

[tyriis-automation]

🦙 MegaLinter status: ✅ SUCCESS

Descriptor	Linter	Files	Fixed	Errors	Elapsed time
✅ EDITORCONFIG	editorconfig-checker	3		0	0.02s
✅ REPOSITORY	gitleaks	yes		no	2.96s
✅ YAML	prettier	3		0	0.41s
✅ YAML	yamllint	3		0	0.37s

See detailed report in MegaLinter reports
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

MegaLinter is graciously provided by OX Security