Merge 8f9f3266a3 into afd7dbac88

.archive/auth/project.yml

@@ -5,7 +5,7 @@ apps:
 - name: authentik
   repoURL: https://charts.goauthentik.io/
   chart: authentik
-  targetRevision: 2024.8.4
+  targetRevision: 2024.8.3
   secrets:
     - name: authentik
       keys:

bootstrap/flux-system/gotk-components.yaml

@@ -3563,7 +3563,7 @@ spec:
               fieldPath: metadata.namespace
         - name: TUF_ROOT
           value: /tmp/.sigstore
-        image: ghcr.io/fluxcd/source-controller:v1.4.1
+        image: ghcr.io/fluxcd/source-controller:v1.3.0
         imagePullPolicy: IfNotPresent
         livenessProbe:
           httpGet:
@@ -5299,7 +5299,7 @@ spec:
           valueFrom:
             fieldRef:
               fieldPath: metadata.namespace
-        image: ghcr.io/fluxcd/kustomize-controller:v1.4.0
+        image: ghcr.io/fluxcd/kustomize-controller:v1.3.0
         imagePullPolicy: IfNotPresent
         livenessProbe:
           httpGet:
@@ -7975,7 +7975,7 @@ spec:
           valueFrom:
             fieldRef:
               fieldPath: metadata.namespace
-        image: ghcr.io/fluxcd/notification-controller:v1.4.0
+        image: ghcr.io/fluxcd/notification-controller:v1.3.0
         imagePullPolicy: IfNotPresent
         livenessProbe:
           httpGet:

projects/adguard/values/adguard.yaml

@@ -1,6 +1,6 @@
 image:
   repository: adguard/adguardhome
-  tag: v0.107.53
+  tag: v0.107.52
 
 env:
   TZ: Europe/Amsterdam

projects/ai/values/flowise.yml

@@ -4,7 +4,7 @@ controllers:
       main:
         image:
           repository: flowiseai/flowise
-          tag: 2.1.3
+          tag: 1.8.4
         command:
           - flowise
           - start

projects/ai/values/localai.yaml

@@ -4,7 +4,7 @@ deployment:
   image: 
     repository: quay.io/go-skynet/local-ai
     #tag: latest-aio-gpu-nvidia-cuda-12
-    tag: v2.22.1-cublas-cuda12-ffmpeg
+    tag: v2.21.0-cublas-cuda12-ffmpeg
   pullPolicy: Always
   runtimeClassName: nvidia
 

projects/ai/values/qdrant.yml

@@ -1,7 +1,7 @@
 image:
   repository: docker.io/qdrant/qdrant
   pullPolicy: IfNotPresent
-  tag: "v1.12.1"
+  tag: "v1.10.1"
   useUnprivilegedImage: true
 
 env:

projects/argocd/values/argocd.yaml

@@ -8,7 +8,7 @@ installCRDs: true
 global:
   image:
     repository: quay.io/argoproj/argocd
-    tag: v2.12.6
+    tag: v2.11.5
 #    imagePullPolicy: IfNotPresent
   securityContext:
     runAsUser: 999
@@ -176,7 +176,7 @@ repoServer:
 
   initContainers:
   - name: copy-cmp-server
-    image: quay.io/argoproj/argocd:v2.12.6
+    image: quay.io/argoproj/argocd:v2.11.5
     command:
     - cp
     - -n

projects/arrstack/values/bazarr.yaml

@@ -1,6 +1,6 @@
 image:
   repository: ghcr.io/onedr0p/bazarr
-  tag: 1.4.5
+  tag: 1.4.3
 
 ingress:
   main:

projects/arrstack/values/ombi.yaml

@@ -1,6 +1,6 @@
 image:
   repository: ghcr.io/linuxserver/ombi
-  tag: 4.44.1
+  tag: 4.43.5
 
 ingress:
   main:

projects/arrstack/values/prowlarr.yaml

@@ -9,7 +9,7 @@ image:
   # -- image repository
   repository: ghcr.io/onedr0p/prowlarr-develop
   # @default -- chart.appVersion
-  tag: "1.25"
+  tag: "1.21"
   # -- image pull policy
   pullPolicy: IfNotPresent
 

projects/arrstack/values/radarr.yaml

@@ -1,6 +1,6 @@
 image:
   repository: ghcr.io/onedr0p/radarr
-  tag: 5.14.0.9383
+  tag: 5.8.3.8933
 
 env:
   UMASK: "002"

projects/arrstack/values/sonarr.yaml

@@ -1,6 +1,6 @@
 image:
   repository: ghcr.io/onedr0p/sonarr
-  tag: 4.0.10.2544
+  tag: 4.0.8.1874
 
 securityContext:
   privileged: true

projects/core/project.yml

@@ -42,19 +42,19 @@ apps:
   namespace: ingress-internal
   repoURL: https://kubernetes.github.io/ingress-nginx
   chart: ingress-nginx
-  targetRevision: 4.11.3
+  targetRevision: 4.11.1
   syncWave: '0'
 
 - name: cilium
   existingNamespace: kube-system
   repoURL: https://helm.cilium.io
   chart: cilium
-  targetRevision: 1.16.3
+  targetRevision: 1.15.8
 
 - name: external-dns
   repoURL: https://kubernetes-sigs.github.io/external-dns
   chart: external-dns
-  targetRevision: 1.15.0
+  targetRevision: 1.14.5
   secrets:
   - name: cloudflare-api
     keys:
@@ -63,7 +63,7 @@ apps:
 - name: external-dns-adguard
   repoURL: https://kubernetes-sigs.github.io/external-dns
   chart: external-dns
-  targetRevision: 1.15.0
+  targetRevision: 1.14.5
   secrets:
   - name: adguard-config
     keys:
@@ -75,7 +75,7 @@ apps:
   namespace: cert-manager
   repoURL: https://charts.jetstack.io
   chart: cert-manager
-  targetRevision: v1.16.1
+  targetRevision: v1.15.3
   secrets:
   - name: cert-manager-vault-approle
     keys:

projects/core/values/cert-manager.yaml

@@ -23,13 +23,7 @@ global:
   # Set the verbosity of cert-manager. Range of 0 - 6 with 6 being the most verbose.
   logLevel: 2
 
-  leaderElection:
+installCRDs: true
-    namespace: "cert-manager"
-
-crds:
-  enabled: true
-
-    
 replicaCount: 1
 
 strategy:

projects/core/values/cilium.yaml

@@ -64,7 +64,7 @@ ipv4:
 ipv6:
   enabled: false
 
-kubeProxyReplacement: true
+kubeProxyReplacement: strict
 l2NeighDiscovery:
   enabled: false
   refreshPeriod: "30s"

projects/core/values/external-dns-adguard.yaml

@@ -4,7 +4,7 @@
 
 image:
   repository: registry.k8s.io/external-dns/external-dns
-  tag: "v0.15.0"
+  tag: "v0.14.2"
   pullPolicy: IfNotPresent
 
 shareProcessNamespace: false

projects/core/values/external-dns.yaml

@@ -4,7 +4,7 @@
 
 image:
   repository: registry.k8s.io/external-dns/external-dns
-  tag: "v0.15.0"
+  tag: "v0.14.2"
   pullPolicy: IfNotPresent
 
 shareProcessNamespace: false

projects/crossplane/project.yml

@@ -6,7 +6,7 @@ apps:
 - name: crossplane
   repoURL: https://charts.crossplane.io/stable
   chart: crossplane
-  targetRevision: 1.17.1
+  targetRevision: 1.16.0
   secrets:
   - name: terraform
     keys:

projects/downloader/values/qbittorrent.yaml

@@ -1,7 +1,7 @@
 ---
 image:
   repository: ghcr.io/onedr0p/qbittorrent
-  tag: 5.0.1
+  tag: 4.6.5
 
 ingress:
   main:

projects/forgejo/values/forgejo.yml

@@ -13,7 +13,7 @@ strategy:
 image:
   registry: codeberg.org
   repository: forgejo/forgejo
-  tag: "9.0"
+  tag: "7.0"
   rootless: true
 
 podSecurityContext:

projects/grafana/project.yml

@@ -5,7 +5,7 @@ apps:
 - name: kube-prometheus-stack
   repoURL: https://prometheus-community.github.io/helm-charts
   chart: kube-prometheus-stack
-  targetRevision: 65.4.0
+  targetRevision: 60.5.0
   secrets:
     - name: grafana
       keys:

projects/grafana/values/kube-prometheus-stack.yaml

@@ -11,7 +11,7 @@ grafana:
 
   image:
     repository: grafana/grafana
-    tag: 11.3.0
+    tag: 11.1.3
 
   persistence:
     enabled: true

projects/grafana/values/loki-stack.yaml

@@ -2,7 +2,7 @@ loki:
   enabled: true
   image:
     repository: grafana/loki
-    tag: 3.2.1
+    tag: 3.1.0
 
 promtail:
   enabled: true

projects/grafana/values/prometheus.yaml

@@ -24,7 +24,7 @@ server:
   enabled: true
   image:
     repository: quay.io/prometheus/prometheus
-    tag: v2.55.0
+    tag: v2.53.1
  
   strategy:
     type: Recreate

projects/homeassistant/values/homeassistant.yaml

@@ -4,7 +4,7 @@ controllers:
       main:
         image:
           repository: homeassistant/home-assistant
-          tag: "2024.10"
+          tag: "2024.7"
 
         env:
           TZ: Europe/Berlin

projects/homeassistant/values/influx.yaml

@@ -1,6 +1,6 @@
 image:
   repository: influxdb
-  tag: 2.7.10-alpine
+  tag: 2.7.8-alpine
   pullPolicy: IfNotPresent
   ## If specified, use these secrets to access the images
   # pullSecrets:

projects/homeassistant/values/nodered.yaml

@@ -172,7 +172,7 @@ sidecar:
     # -- The image repository to pull from
     repository: kiwigrid/k8s-sidecar
     # -- The image tag to pull, default: `1.23.1`
-    tag: 1.28.0
+    tag: 1.27.5
     # -- The image pull policy, default: `IfNotPresent`
     pullPolicy: IfNotPresent
   # -- The extra volume mounts for the sidecar

projects/homer/project.yml

@@ -4,7 +4,7 @@ apps:
 - name: homer
   repoURL: https://djjudas21.github.io/charts
   chart: homer
-  targetRevision: 8.1.15
+  targetRevision: 8.1.12
   include:
   - ingress-internal
   - noRoot

projects/homer/values/homer.yml

@@ -1,6 +1,6 @@
 image:
   repository: b4bz/homer
-  tag: v24.10.2
+  tag: v24.05.1
 
 initContainers:
   clone-assets:

projects/ingress-external/project.yml

@@ -13,5 +13,5 @@ apps:
 - name: ingress-external
   repoURL: https://kubernetes.github.io/ingress-nginx
   chart: ingress-nginx
-  targetRevision: 4.11.3
+  targetRevision: 4.11.1
   syncWave: '0'

projects/mqtt/values/mosquitto.yaml

@@ -1,6 +1,6 @@
 image:
   repository: eclipse-mosquitto
-  tag: 2.0.20
+  tag: 2.0.18
 
 service:
   main:

projects/mqtt/values/zigbee2mqtt.yaml

@@ -1,6 +1,6 @@
 image:
   repository: koenkk/zigbee2mqtt
-  tag: 1.40.2
+  tag: 1.39.0
 
 service:
   main:

projects/music/values/navidrome.yaml

@@ -1,6 +1,6 @@
 image:
   repository: ghcr.io/navidrome/navidrome
-  tag: 0.53.3
+  tag: 0.52.5
 
 env:
   TZ: "Europe/Amsterdam"
@@ -71,4 +71,4 @@ resources:
     cpu: 10m
     memory: 50Mi
   limits:
-    memory: 2Gi
+    memory: 750Mi

projects/nextcloud/project.yaml

@@ -14,7 +14,7 @@ apps:
 - name: nextcloud
   repoURL: https://nextcloud.github.io/helm
   chart: nextcloud
-  targetRevision: 6.2.1
+  targetRevision: 5.2.0
   secrets:
   - name: nextcloud-user
     keys:

projects/nextcloud/values/nextcloud.yaml

@@ -3,7 +3,7 @@ image:
   pullPolicy: Always
 
 nextcloud:
-  host: share.nold.in
+  host: share.gnu.one
   extraEnv:
     - name: HTTP_PROXY
       value: http://proxy-squid.proxy.svc.cluster.local:3128
@@ -76,8 +76,8 @@ ingress:
     cert-manager.io/cluster-issuer: letsencrypt
     traefik.ingress.kubernetes.io/router.tls: 'true'
     kubernetes.io/ingress.class: ingress-external
-    external-dns.alpha.kubernetes.io/hostname: share.nold.in
+    external-dns.alpha.kubernetes.io/hostname: share.gnu.one
-    external-dns.alpha.kubernetes.io/target: nold.in
+    external-dns.alpha.kubernetes.io/target: gnu.one
     external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
 
     nginx.ingress.kubernetes.io/server-snippet: |-
@@ -108,7 +108,7 @@ ingress:
   tls:
     - secretName: nextcloud-tls
       hosts:
-      - share.nold.in
+      - share.gnu.one
 
 nginx:
   enabled: true

projects/paperless/values/paperless.yml

@@ -15,7 +15,7 @@ ingress:
       - paperless.dc
 image:
   repository: ghcr.io/paperless-ngx/paperless-ngx
-  tag: 2.13.1
+  tag: 2.11.1
   pullPolicy: IfNotPresent
 
 # -- See the following files for additional environment variables:

projects/services/project.yml

@@ -11,7 +11,7 @@ apps:
   namespace: s3
   repoURL: https://charts.min.io
   chart: minio
-  targetRevision: 5.3.0
+  targetRevision: 5.2.0
   secrets:
   - name: minio-root
     keys:
@@ -22,7 +22,7 @@ apps:
   namespace: cnpg-system
   repoURL: https://cloudnative-pg.github.io/charts
   chart: cloudnative-pg
-  targetRevision: 0.22.1
+  targetRevision: 0.21.5
 
 - name: redis-operator
   repoURL: https://ot-container-kit.github.io/helm-charts

projects/services/values/redis-operator.yaml

@@ -33,7 +33,7 @@ certificate:
   secretName: redis-operator-tls
 
 certmanager:
-  enabled: false
+  enabled: true
 
 monitoring:
   # Enable Prometheus PodMonitor to monitor the operator.

projects/vault/project.yml

@@ -18,5 +18,5 @@ apps:
   namespace: vault-secrets-operator
   repoURL: https://ricoberger.github.io/helm-charts
   chart: vault-secrets-operator
-  targetRevision: 2.6.0
+  targetRevision: 2.5.10
   syncWave: '-2'

projects/vault/values/vault.yaml

@@ -11,7 +11,7 @@ server:
   enabled: true
   image:
     repository: "hashicorp/vault"
-    tag: "1.18.0"
+    tag: "1.17.2"
   auditStorage:
     accessMode: ReadWriteOnce
     annotations: {}