Merge 67e1555873 into d91b414562

chore(deps): update helm chart falco to v4
2025-02-12 03:01:10 +00:00 · 2024-10-14 20:31:25 +00:00 · 2024-10-14 20:31:23 +00:00
37 changed files with 49 additions and 49 deletions
--- a/.archive/falco/project.yml
+++ b/.archive/falco/project.yml
@ -5,4 +5,4 @@ apps:
 - name: falco
  repoURL: https://falcosecurity.github.io/charts
  chart: falco
-  targetRevision: 4.11.2
+  targetRevision: 4.11.1
--- a/bootstrap/flux-system/gotk-components.yaml
+++ b/bootstrap/flux-system/gotk-components.yaml
@ -3563,7 +3563,7 @@ spec:
              fieldPath: metadata.namespace
        - name: TUF_ROOT
          value: /tmp/.sigstore
-        image: ghcr.io/fluxcd/source-controller:v1.4.1
+        image: ghcr.io/fluxcd/source-controller:v1.3.0
        imagePullPolicy: IfNotPresent
        livenessProbe:
          httpGet:
@ -5299,7 +5299,7 @@ spec:
          valueFrom:
            fieldRef:
              fieldPath: metadata.namespace
-        image: ghcr.io/fluxcd/kustomize-controller:v1.4.0
+        image: ghcr.io/fluxcd/kustomize-controller:v1.3.0
        imagePullPolicy: IfNotPresent
        livenessProbe:
          httpGet:
@ -7975,7 +7975,7 @@ spec:
          valueFrom:
            fieldRef:
              fieldPath: metadata.namespace
-        image: ghcr.io/fluxcd/notification-controller:v1.4.0
+        image: ghcr.io/fluxcd/notification-controller:v1.3.0
        imagePullPolicy: IfNotPresent
        livenessProbe:
          httpGet:
--- a/projects/adguard/values/adguard.yaml
+++ b/projects/adguard/values/adguard.yaml
@ -1,6 +1,6 @@
 image:
  repository: adguard/adguardhome
-  tag: v0.107.53
+  tag: v0.107.52

 env:
  TZ: Europe/Amsterdam
--- a/projects/ai/values/flowise.yml
+++ b/projects/ai/values/flowise.yml
@ -4,7 +4,7 @@ controllers:
      main:
        image:
          repository: flowiseai/flowise
-          tag: 2.1.3
+          tag: 1.8.4
        command:
          - flowise
          - start
--- a/projects/ai/values/localai.yaml
+++ b/projects/ai/values/localai.yaml
@ -4,7 +4,7 @@ deployment:
  image: 
    repository: quay.io/go-skynet/local-ai
    #tag: latest-aio-gpu-nvidia-cuda-12
-    tag: v2.22.1-cublas-cuda12-ffmpeg
+    tag: v2.21.0-cublas-cuda12-ffmpeg
  pullPolicy: Always
  runtimeClassName: nvidia

--- a/projects/ai/values/qdrant.yml
+++ b/projects/ai/values/qdrant.yml
@ -1,7 +1,7 @@
 image:
  repository: docker.io/qdrant/qdrant
  pullPolicy: IfNotPresent
-  tag: "v1.12.1"
+  tag: "v1.10.1"
  useUnprivilegedImage: true

 env:
--- a/projects/argocd/values/argocd.yaml
+++ b/projects/argocd/values/argocd.yaml
@ -8,7 +8,7 @@ installCRDs: true
 global:
  image:
    repository: quay.io/argoproj/argocd
-    tag: v2.12.6
+    tag: v2.11.5
 #    imagePullPolicy: IfNotPresent
  securityContext:
    runAsUser: 999
@ -176,7 +176,7 @@ repoServer:

  initContainers:
  - name: copy-cmp-server
-    image: quay.io/argoproj/argocd:v2.12.6
+    image: quay.io/argoproj/argocd:v2.11.5
    command:
    - cp
    - -n
--- a/projects/arrstack/values/bazarr.yaml
+++ b/projects/arrstack/values/bazarr.yaml
@ -1,6 +1,6 @@
 image:
  repository: ghcr.io/onedr0p/bazarr
-  tag: 1.4.5
+  tag: 1.4.3

 ingress:
  main:
--- a/projects/arrstack/values/ombi.yaml
+++ b/projects/arrstack/values/ombi.yaml
@ -1,6 +1,6 @@
 image:
  repository: ghcr.io/linuxserver/ombi
-  tag: 4.44.1
+  tag: 4.43.5

 ingress:
  main:
--- a/projects/arrstack/values/prowlarr.yaml
+++ b/projects/arrstack/values/prowlarr.yaml
@ -9,7 +9,7 @@ image:
  # -- image repository
  repository: ghcr.io/onedr0p/prowlarr-develop
  # @default -- chart.appVersion
-  tag: "1.25"
+  tag: "1.21"
  # -- image pull policy
  pullPolicy: IfNotPresent

--- a/projects/arrstack/values/radarr.yaml
+++ b/projects/arrstack/values/radarr.yaml
@ -1,6 +1,6 @@
 image:
  repository: ghcr.io/onedr0p/radarr
-  tag: 5.13.1.9378
+  tag: 5.8.3.8933

 env:
  UMASK: "002"
--- a/projects/arrstack/values/sonarr.yaml
+++ b/projects/arrstack/values/sonarr.yaml
@ -1,6 +1,6 @@
 image:
  repository: ghcr.io/onedr0p/sonarr
-  tag: 4.0.10.2544
+  tag: 4.0.8.1874

 securityContext:
  privileged: true
--- a/projects/core/project.yml
+++ b/projects/core/project.yml
@ -42,19 +42,19 @@ apps:
  namespace: ingress-internal
  repoURL: https://kubernetes.github.io/ingress-nginx
  chart: ingress-nginx
-  targetRevision: 4.11.3
+  targetRevision: 4.11.1
  syncWave: '0'

 - name: cilium
  existingNamespace: kube-system
  repoURL: https://helm.cilium.io
  chart: cilium
-  targetRevision: 1.16.3
+  targetRevision: 1.15.9

 - name: external-dns
  repoURL: https://kubernetes-sigs.github.io/external-dns
  chart: external-dns
-  targetRevision: 1.15.0
+  targetRevision: 1.14.5
  secrets:
  - name: cloudflare-api
    keys:
@ -63,7 +63,7 @@ apps:
 - name: external-dns-adguard
  repoURL: https://kubernetes-sigs.github.io/external-dns
  chart: external-dns
-  targetRevision: 1.15.0
+  targetRevision: 1.14.5
  secrets:
  - name: adguard-config
    keys:
@ -75,7 +75,7 @@ apps:
  namespace: cert-manager
  repoURL: https://charts.jetstack.io
  chart: cert-manager
-  targetRevision: v1.16.1
+  targetRevision: v1.15.1
  secrets:
  - name: cert-manager-vault-approle
    keys:
--- a/projects/core/values/cilium.yaml
+++ b/projects/core/values/cilium.yaml
@ -64,7 +64,7 @@ ipv4:
 ipv6:
  enabled: false

-kubeProxyReplacement: true
+kubeProxyReplacement: strict
 l2NeighDiscovery:
  enabled: false
  refreshPeriod: "30s"
--- a/projects/core/values/external-dns-adguard.yaml
+++ b/projects/core/values/external-dns-adguard.yaml
@ -4,7 +4,7 @@

 image:
  repository: registry.k8s.io/external-dns/external-dns
-  tag: "v0.15.0"
+  tag: "v0.14.2"
  pullPolicy: IfNotPresent

 shareProcessNamespace: false
--- a/projects/core/values/external-dns.yaml
+++ b/projects/core/values/external-dns.yaml
@ -4,7 +4,7 @@

 image:
  repository: registry.k8s.io/external-dns/external-dns
-  tag: "v0.15.0"
+  tag: "v0.14.2"
  pullPolicy: IfNotPresent

 shareProcessNamespace: false
--- a/projects/crossplane/project.yml
+++ b/projects/crossplane/project.yml
@ -6,7 +6,7 @@ apps:
 - name: crossplane
  repoURL: https://charts.crossplane.io/stable
  chart: crossplane
-  targetRevision: 1.17.1
+  targetRevision: 1.16.0
  secrets:
  - name: terraform
    keys:
--- a/projects/downloader/values/qbittorrent.yaml
+++ b/projects/downloader/values/qbittorrent.yaml
@ -1,7 +1,7 @@
 ---
 image:
  repository: ghcr.io/onedr0p/qbittorrent
-  tag: 5.0.0
+  tag: 4.6.5

 ingress:
  main:
--- a/projects/forgejo/values/forgejo.yml
+++ b/projects/forgejo/values/forgejo.yml
@ -13,7 +13,7 @@ strategy:
 image:
  registry: codeberg.org
  repository: forgejo/forgejo
-  tag: "9.0"
+  tag: "7.0"
  rootless: true

 podSecurityContext:
--- a/projects/grafana/project.yml
+++ b/projects/grafana/project.yml
@ -5,7 +5,7 @@ apps:
 - name: kube-prometheus-stack
  repoURL: https://prometheus-community.github.io/helm-charts
  chart: kube-prometheus-stack
-  targetRevision: 65.4.0
+  targetRevision: 60.5.0
  secrets:
    - name: grafana
      keys:
--- a/projects/grafana/values/kube-prometheus-stack.yaml
+++ b/projects/grafana/values/kube-prometheus-stack.yaml
@ -11,7 +11,7 @@ grafana:

  image:
    repository: grafana/grafana
-    tag: 11.3.0
+    tag: 11.1.3

  persistence:
    enabled: true
--- a/projects/grafana/values/loki-stack.yaml
+++ b/projects/grafana/values/loki-stack.yaml
@ -2,7 +2,7 @@ loki:
  enabled: true
  image:
    repository: grafana/loki
-    tag: 3.2.1
+    tag: 3.1.0

 promtail:
  enabled: true
--- a/projects/grafana/values/prometheus.yaml
+++ b/projects/grafana/values/prometheus.yaml
@ -24,7 +24,7 @@ server:
  enabled: true
  image:
    repository: quay.io/prometheus/prometheus
-    tag: v2.55.0
+    tag: v2.53.1
 
  strategy:
    type: Recreate
--- a/projects/homeassistant/values/influx.yaml
+++ b/projects/homeassistant/values/influx.yaml
@ -1,6 +1,6 @@
 image:
  repository: influxdb
-  tag: 2.7.10-alpine
+  tag: 2.7.8-alpine
  pullPolicy: IfNotPresent
  ## If specified, use these secrets to access the images
  # pullSecrets:
--- a/projects/homeassistant/values/nodered.yaml
+++ b/projects/homeassistant/values/nodered.yaml
@ -172,7 +172,7 @@ sidecar:
    # -- The image repository to pull from
    repository: kiwigrid/k8s-sidecar
    # -- The image tag to pull, default: `1.23.1`
-    tag: 1.28.0
+    tag: 1.27.5
    # -- The image pull policy, default: `IfNotPresent`
    pullPolicy: IfNotPresent
  # -- The extra volume mounts for the sidecar
--- a/projects/homer/project.yml
+++ b/projects/homer/project.yml
@ -4,7 +4,7 @@ apps:
 - name: homer
  repoURL: https://djjudas21.github.io/charts
  chart: homer
-  targetRevision: 8.1.15
+  targetRevision: 8.1.12
  include:
  - ingress-internal
  - noRoot
--- a/projects/homer/values/homer.yml
+++ b/projects/homer/values/homer.yml
@ -1,6 +1,6 @@
 image:
  repository: b4bz/homer
-  tag: v24.10.1
+  tag: v24.05.1

 initContainers:
  clone-assets:
--- a/projects/ingress-external/project.yml
+++ b/projects/ingress-external/project.yml
@ -13,5 +13,5 @@ apps:
 - name: ingress-external
  repoURL: https://kubernetes.github.io/ingress-nginx
  chart: ingress-nginx
-  targetRevision: 4.11.3
+  targetRevision: 4.11.1
  syncWave: '0'
--- a/projects/mqtt/values/mosquitto.yaml
+++ b/projects/mqtt/values/mosquitto.yaml
@ -1,6 +1,6 @@
 image:
  repository: eclipse-mosquitto
-  tag: 2.0.20
+  tag: 2.0.18

 service:
  main:
--- a/projects/mqtt/values/zigbee2mqtt.yaml
+++ b/projects/mqtt/values/zigbee2mqtt.yaml
@ -1,6 +1,6 @@
 image:
  repository: koenkk/zigbee2mqtt
-  tag: 1.40.2
+  tag: 1.39.0

 service:
  main:
--- a/projects/music/values/navidrome.yaml
+++ b/projects/music/values/navidrome.yaml
@ -1,6 +1,6 @@
 image:
  repository: ghcr.io/navidrome/navidrome
-  tag: 0.53.3
+  tag: 0.52.5

 env:
  TZ: "Europe/Amsterdam"
@ -71,4 +71,4 @@ resources:
    cpu: 10m
    memory: 50Mi
  limits:
-    memory: 2Gi
+    memory: 750Mi
--- a/projects/nextcloud/project.yaml
+++ b/projects/nextcloud/project.yaml
@ -14,7 +14,7 @@ apps:
 - name: nextcloud
  repoURL: https://nextcloud.github.io/helm
  chart: nextcloud
-  targetRevision: 6.2.1
+  targetRevision: 5.2.0
  secrets:
  - name: nextcloud-user
    keys:
--- a/projects/nextcloud/values/nextcloud.yaml
+++ b/projects/nextcloud/values/nextcloud.yaml
@ -3,7 +3,7 @@ image:
  pullPolicy: Always

 nextcloud:
-  host: share.nold.in
+  host: share.gnu.one
  extraEnv:
    - name: HTTP_PROXY
      value: http://proxy-squid.proxy.svc.cluster.local:3128
@ -76,8 +76,8 @@ ingress:
    cert-manager.io/cluster-issuer: letsencrypt
    traefik.ingress.kubernetes.io/router.tls: 'true'
    kubernetes.io/ingress.class: ingress-external
-    external-dns.alpha.kubernetes.io/hostname: share.nold.in
-    external-dns.alpha.kubernetes.io/target: nold.in
+    external-dns.alpha.kubernetes.io/hostname: share.gnu.one
+    external-dns.alpha.kubernetes.io/target: gnu.one
    external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"

    nginx.ingress.kubernetes.io/server-snippet: |-
@ -108,7 +108,7 @@ ingress:
  tls:
    - secretName: nextcloud-tls
      hosts:
-      - share.nold.in
+      - share.gnu.one

 nginx:
  enabled: true
--- a/projects/paperless/values/paperless.yml
+++ b/projects/paperless/values/paperless.yml
@ -15,7 +15,7 @@ ingress:
      - paperless.dc
 image:
  repository: ghcr.io/paperless-ngx/paperless-ngx
-  tag: 2.13.0
+  tag: 2.11.1
  pullPolicy: IfNotPresent

 # -- See the following files for additional environment variables:
--- a/projects/services/project.yml
+++ b/projects/services/project.yml
@ -11,7 +11,7 @@ apps:
  namespace: s3
  repoURL: https://charts.min.io
  chart: minio
-  targetRevision: 5.3.0
+  targetRevision: 5.2.0
  secrets:
  - name: minio-root
    keys:
@ -22,7 +22,7 @@ apps:
  namespace: cnpg-system
  repoURL: https://cloudnative-pg.github.io/charts
  chart: cloudnative-pg
-  targetRevision: 0.22.1
+  targetRevision: 0.21.6

 - name: redis-operator
  repoURL: https://ot-container-kit.github.io/helm-charts
--- a/projects/vault/project.yml
+++ b/projects/vault/project.yml
@ -18,5 +18,5 @@ apps:
  namespace: vault-secrets-operator
  repoURL: https://ricoberger.github.io/helm-charts
  chart: vault-secrets-operator
-  targetRevision: 2.6.0
+  targetRevision: 2.5.10
  syncWave: '-2'
--- a/projects/vault/values/vault.yaml
+++ b/projects/vault/values/vault.yaml
@ -11,7 +11,7 @@ server:
  enabled: true
  image:
    repository: "hashicorp/vault"
-    tag: "1.18.0"
+    tag: "1.17.2"
  auditStorage:
    accessMode: ReadWriteOnce
    annotations: {}
Author	SHA1	Message	Date
renovate[bot]	f99785c8b6	Merge `67e1555873` into `d91b414562`	2024-10-14 20:31:25 +00:00
renovate[bot]	67e1555873	chore(deps): update helm chart falco to v4	2024-10-14 20:31:23 +00:00