audit(gremlin): glance FAIL 2026-04-20

This commit is contained in:
traveler 2026-04-20 06:14:53 -05:00
parent 8352614f0a
commit ec365a1923

View file

@ -0,0 +1,49 @@
---
title: Audit - glance.yaml
description: Gremlin audit report 2026-04-20
published: true
date: 2026-04-20T11:14:53.214Z
tags: gremlin,audit
editor: markdown
dateCreated: 2026-04-20T11:14:53.214Z
---
# Audit Report — glance.yaml
**Date:** 2026-04-20
**File:** swarm/glance.yaml
**Type:** Docker Swarm
**Verdict:** FAIL
---
1. **Homepage labels**:
- `homepage.group`: "PNCHarris Apps" - PASS
- `homepage.name`: "Glance" - PASS
- `homepage.icon`: "glance.png" - PASS
- `homepage.href`: "https://home.netgrimoire.com" - PASS
- `homepage.description`: "Home Portal" - PASS
2. **Uptime Kuma labels**:
- The section is missing for Uptime Kuma in the provided YAML. Assuming it should be labeled as `kuma.glance.http.name` and `kuma.glance.http.url`, it would need to be added.
- Fix: Add the missing Uptime Kuma labels.
3. **Caddy labels on exposed services**:
- `caddy`: "home.netgrimoire.com" - PASS
- `caddy.import`: "authentik" - PASS
- `caddy.reverse_proxy`: "glance:8080" - PASS
4. **Placement constraints**:
- The section is missing for placement constraints in the provided YAML.
- Fix: Add placement constraints using `node.hostname`.
5. **Volumes use /DockerVol/<service> path convention**:
- Volume path `/data/nfs/znas/Docker/glance` does not follow the `/DockerVol/<service>` convention.
- Fix: Change volume path to `/DockerVol/glance`.
6. **Network references external netgrimoire overlay**:
- `netgrimoire`: `external: true` - PASS
**VERDICT: FAIL**
The YAML file has several issues that need to be addressed for it to meet the specified standards, including missing Uptime Kuma labels and incorrect volume paths.