feat(container)!: Update image app-template ( 4.6.2 ➔ 5.0.1 )#3203
Open
renovate[bot] wants to merge 1 commit into
Open
feat(container)!: Update image app-template ( 4.6.2 ➔ 5.0.1 )#3203renovate[bot] wants to merge 1 commit into
renovate[bot] wants to merge 1 commit into
Conversation
qgr1-cluster-0 - kustomization--- k8s/base/home/esphome Kustomization: flux-system/home-esphome HelmRelease: home/esphome
+++ k8s/base/home/esphome Kustomization: flux-system/home-esphome HelmRelease: home/esphome
@@ -12,13 +12,13 @@
spec:
chart: app-template
sourceRef:
kind: HelmRepository
name: bjw-s
namespace: flux-system
- version: 4.6.2
+ version: 5.0.1
interval: 10m
values:
controllers:
esphome:
containers:
app:
--- k8s/base/home/home-assistant-nwk3 Kustomization: flux-system/home-home-assistant-nwk3 HelmRelease: home/home-assistant-nwk3
+++ k8s/base/home/home-assistant-nwk3 Kustomization: flux-system/home-home-assistant-nwk3 HelmRelease: home/home-assistant-nwk3
@@ -12,13 +12,13 @@
spec:
chart: app-template
sourceRef:
kind: HelmRepository
name: bjw-s
namespace: flux-system
- version: 4.6.2
+ version: 5.0.1
interval: 10m
values:
controllers:
home-assistant:
annotations:
reloader.stakater.com/auto: 'true'
--- k8s/base/infra/unifi Kustomization: flux-system/infra-unifi HelmRelease: infra/unifi
+++ k8s/base/infra/unifi Kustomization: flux-system/infra-unifi HelmRelease: infra/unifi
@@ -12,13 +12,13 @@
spec:
chart: app-template
sourceRef:
kind: HelmRepository
name: bjw-s
namespace: flux-system
- version: 4.6.2
+ version: 5.0.1
interval: 10m
values:
controllers:
unifi:
containers:
app:
--- k8s/base/media/qui Kustomization: flux-system/media-qui HelmRelease: media/qui
+++ k8s/base/media/qui Kustomization: flux-system/media-qui HelmRelease: media/qui
@@ -12,13 +12,13 @@
spec:
chart: app-template
sourceRef:
kind: HelmRepository
name: bjw-s
namespace: flux-system
- version: 4.6.2
+ version: 5.0.1
install:
remediation:
retries: 3
interval: 30m
uninstall:
keepHistory: false
--- k8s/base/media/autobrr Kustomization: flux-system/media-autobrr HelmRelease: media/autobrr
+++ k8s/base/media/autobrr Kustomization: flux-system/media-autobrr HelmRelease: media/autobrr
@@ -13,13 +13,13 @@
spec:
chart: app-template
sourceRef:
kind: HelmRepository
name: bjw-s
namespace: flux-system
- version: 4.6.2
+ version: 5.0.1
install:
createNamespace: true
remediation:
retries: 50
timeout: 15m
interval: 30m
--- k8s/base/media/cross-seed Kustomization: flux-system/media-cross-seed HelmRelease: media/cross-seed
+++ k8s/base/media/cross-seed Kustomization: flux-system/media-cross-seed HelmRelease: media/cross-seed
@@ -13,13 +13,13 @@
spec:
chart: app-template
sourceRef:
kind: HelmRepository
name: bjw-s
namespace: flux-system
- version: 4.6.2
+ version: 5.0.1
install:
createNamespace: true
remediation:
retries: 50
timeout: 15m
interval: 30m
--- k8s/base/media/jellyfin Kustomization: flux-system/media-jellyfin HelmRelease: media/jellyfin
+++ k8s/base/media/jellyfin Kustomization: flux-system/media-jellyfin HelmRelease: media/jellyfin
@@ -13,13 +13,13 @@
spec:
chart: app-template
sourceRef:
kind: HelmRepository
name: bjw-s
namespace: flux-system
- version: 4.6.2
+ version: 5.0.1
install:
createNamespace: true
remediation:
retries: 50
timeout: 15m
interval: 30m
--- k8s/base/media/bazarr Kustomization: flux-system/media-bazarr HelmRelease: media/bazarr
+++ k8s/base/media/bazarr Kustomization: flux-system/media-bazarr HelmRelease: media/bazarr
@@ -13,13 +13,13 @@
spec:
chart: app-template
sourceRef:
kind: HelmRepository
name: bjw-s
namespace: flux-system
- version: 4.6.2
+ version: 5.0.1
install:
createNamespace: true
remediation:
retries: 50
timeout: 15m
interval: 30m
--- k8s/base/media/plex Kustomization: flux-system/media-plex HelmRelease: media/plex
+++ k8s/base/media/plex Kustomization: flux-system/media-plex HelmRelease: media/plex
@@ -13,13 +13,13 @@
spec:
chart: app-template
sourceRef:
kind: HelmRepository
name: bjw-s
namespace: flux-system
- version: 4.6.2
+ version: 5.0.1
install:
createNamespace: true
remediation:
retries: 50
timeout: 15m
interval: 30m
--- k8s/base/media/nzbget Kustomization: flux-system/media-nzbget HelmRelease: media/nzbget
+++ k8s/base/media/nzbget Kustomization: flux-system/media-nzbget HelmRelease: media/nzbget
@@ -13,13 +13,13 @@
spec:
chart: app-template
sourceRef:
kind: HelmRepository
name: bjw-s
namespace: flux-system
- version: 4.6.2
+ version: 5.0.1
install:
createNamespace: true
remediation:
retries: 50
timeout: 15m
interval: 30m
--- k8s/base/networking/cloudflare-tunnel Kustomization: flux-system/networking-cloudflare-tunnel HelmRelease: networking/cloudflare-tunnel
+++ k8s/base/networking/cloudflare-tunnel Kustomization: flux-system/networking-cloudflare-tunnel HelmRelease: networking/cloudflare-tunnel
@@ -13,13 +13,13 @@
chart: app-template
interval: 10m
sourceRef:
kind: HelmRepository
name: bjw-s
namespace: flux-system
- version: 4.6.2
+ version: 5.0.1
interval: 1h
values:
configMaps:
config:
data:
config.yaml: |-
--- k8s/base/media/sonarr Kustomization: flux-system/media-sonarr HelmRelease: media/sonarr
+++ k8s/base/media/sonarr Kustomization: flux-system/media-sonarr HelmRelease: media/sonarr
@@ -13,13 +13,13 @@
spec:
chart: app-template
sourceRef:
kind: HelmRepository
name: bjw-s
namespace: flux-system
- version: 4.6.2
+ version: 5.0.1
install:
createNamespace: true
remediation:
retries: 50
timeout: 15m
interval: 30m
--- k8s/base/media/prowlarr Kustomization: flux-system/media-prowlarr HelmRelease: media/prowlarr
+++ k8s/base/media/prowlarr Kustomization: flux-system/media-prowlarr HelmRelease: media/prowlarr
@@ -13,13 +13,13 @@
spec:
chart: app-template
sourceRef:
kind: HelmRepository
name: bjw-s
namespace: flux-system
- version: 4.6.2
+ version: 5.0.1
install:
createNamespace: true
remediation:
retries: 50
timeout: 15m
interval: 30m
--- k8s/base/media/qbittorrent Kustomization: flux-system/media-qbittorrent HelmRelease: media/qbittorrent
+++ k8s/base/media/qbittorrent Kustomization: flux-system/media-qbittorrent HelmRelease: media/qbittorrent
@@ -13,13 +13,13 @@
spec:
chart: app-template
sourceRef:
kind: HelmRepository
name: bjw-s
namespace: flux-system
- version: 4.6.2
+ version: 5.0.1
install:
createNamespace: true
remediation:
retries: 50
timeout: 15m
interval: 30m
--- k8s/base/media/radarr Kustomization: flux-system/media-radarr HelmRelease: media/radarr
+++ k8s/base/media/radarr Kustomization: flux-system/media-radarr HelmRelease: media/radarr
@@ -13,13 +13,13 @@
spec:
chart: app-template
sourceRef:
kind: HelmRepository
name: bjw-s
namespace: flux-system
- version: 4.6.2
+ version: 5.0.1
install:
createNamespace: true
remediation:
retries: 50
timeout: 15m
interval: 30m
--- k8s/base/media/syncthing Kustomization: flux-system/media-syncthing HelmRelease: media/syncthing
+++ k8s/base/media/syncthing Kustomization: flux-system/media-syncthing HelmRelease: media/syncthing
@@ -13,13 +13,13 @@
spec:
chart: app-template
sourceRef:
kind: HelmRepository
name: bjw-s
namespace: flux-system
- version: 4.6.2
+ version: 5.0.1
install:
createNamespace: true
remediation:
retries: 50
timeout: 15m
interval: 30m
--- k8s/base/media/seerr Kustomization: flux-system/media-seerr HelmRelease: media/seerr
+++ k8s/base/media/seerr Kustomization: flux-system/media-seerr HelmRelease: media/seerr
@@ -13,13 +13,13 @@
spec:
chart: app-template
sourceRef:
kind: HelmRepository
name: bjw-s
namespace: flux-system
- version: 4.6.2
+ version: 5.0.1
install:
createNamespace: true
remediation:
retries: 50
timeout: 15m
interval: 30m
--- k8s/base/media/recyclarr Kustomization: flux-system/media-recyclarr HelmRelease: media/recyclarr
+++ k8s/base/media/recyclarr Kustomization: flux-system/media-recyclarr HelmRelease: media/recyclarr
@@ -13,13 +13,13 @@
spec:
chart: app-template
sourceRef:
kind: HelmRepository
name: bjw-s
namespace: flux-system
- version: 4.6.2
+ version: 5.0.1
install:
createNamespace: true
remediation:
retries: 50
timeout: 15m
interval: 30m
--- k8s/base/media/tqm Kustomization: flux-system/media-tqm HelmRelease: media/tqm
+++ k8s/base/media/tqm Kustomization: flux-system/media-tqm HelmRelease: media/tqm
@@ -13,13 +13,13 @@
spec:
chart: app-template
sourceRef:
kind: HelmRepository
name: bjw-s
namespace: flux-system
- version: 4.6.2
+ version: 5.0.1
install:
createNamespace: true
remediation:
retries: 50
timeout: 15m
interval: 30m |
qgr1-cluster-0 - helmrelease--- HelmRelease: infra/unifi Deployment: infra/unifi
+++ HelmRelease: infra/unifi Deployment: infra/unifi
@@ -24,14 +24,14 @@
labels:
app.kubernetes.io/controller: unifi
app.kubernetes.io/instance: unifi
app.kubernetes.io/name: unifi
spec:
enableServiceLinks: false
- serviceAccountName: default
- automountServiceAccountToken: true
+ serviceAccountName: unifi
+ automountServiceAccountToken: false
hostIPC: false
hostNetwork: false
hostPID: false
dnsPolicy: ClusterFirst
containers:
- env:
--- HelmRelease: infra/unifi ServiceAccount: infra/unifi
+++ HelmRelease: infra/unifi ServiceAccount: infra/unifi
@@ -0,0 +1,11 @@
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: unifi
+ labels:
+ app.kubernetes.io/instance: unifi
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: unifi
+ namespace: infra
+
--- HelmRelease: home/home-assistant-nwk3 Deployment: home/home-assistant-nwk3
+++ HelmRelease: home/home-assistant-nwk3 Deployment: home/home-assistant-nwk3
@@ -26,14 +26,14 @@
labels:
app.kubernetes.io/controller: home-assistant
app.kubernetes.io/instance: home-assistant-nwk3
app.kubernetes.io/name: home-assistant-nwk3
spec:
enableServiceLinks: false
- serviceAccountName: default
- automountServiceAccountToken: true
+ serviceAccountName: home-assistant-nwk3
+ automountServiceAccountToken: false
securityContext:
fsGroup: 1000
fsGroupChangePolicy: OnRootMismatch
runAsGroup: 1000
runAsNonRoot: true
runAsUser: 1000
--- HelmRelease: home/home-assistant-nwk3 ServiceAccount: home/home-assistant-nwk3
+++ HelmRelease: home/home-assistant-nwk3 ServiceAccount: home/home-assistant-nwk3
@@ -0,0 +1,11 @@
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: home-assistant-nwk3
+ labels:
+ app.kubernetes.io/instance: home-assistant-nwk3
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: home-assistant-nwk3
+ namespace: home
+
--- HelmRelease: media/plex StatefulSet: media/plex
+++ HelmRelease: media/plex StatefulSet: media/plex
@@ -28,14 +28,14 @@
labels:
app.kubernetes.io/controller: plex
app.kubernetes.io/instance: plex
app.kubernetes.io/name: plex
spec:
enableServiceLinks: false
- serviceAccountName: default
- automountServiceAccountToken: true
+ serviceAccountName: plex
+ automountServiceAccountToken: false
priorityClassName: media-cluster-critical
securityContext:
fsGroup: 1000
fsGroupChangePolicy: OnRootMismatch
runAsGroup: 1000
runAsNonRoot: true
--- HelmRelease: media/plex ServiceAccount: media/plex
+++ HelmRelease: media/plex ServiceAccount: media/plex
@@ -0,0 +1,11 @@
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: plex
+ labels:
+ app.kubernetes.io/instance: plex
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: plex
+ namespace: media
+
--- HelmRelease: media/cross-seed StatefulSet: media/cross-seed
+++ HelmRelease: media/cross-seed StatefulSet: media/cross-seed
@@ -28,14 +28,14 @@
labels:
app.kubernetes.io/controller: cross-seed
app.kubernetes.io/instance: cross-seed
app.kubernetes.io/name: cross-seed
spec:
enableServiceLinks: false
- serviceAccountName: default
- automountServiceAccountToken: true
+ serviceAccountName: cross-seed
+ automountServiceAccountToken: false
securityContext:
fsGroup: 1000
fsGroupChangePolicy: OnRootMismatch
runAsGroup: 1000
runAsNonRoot: true
runAsUser: 1000
--- HelmRelease: media/cross-seed ServiceAccount: media/cross-seed
+++ HelmRelease: media/cross-seed ServiceAccount: media/cross-seed
@@ -0,0 +1,11 @@
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: cross-seed
+ labels:
+ app.kubernetes.io/instance: cross-seed
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: cross-seed
+ namespace: media
+
--- HelmRelease: media/prowlarr StatefulSet: media/prowlarr
+++ HelmRelease: media/prowlarr StatefulSet: media/prowlarr
@@ -28,14 +28,14 @@
labels:
app.kubernetes.io/controller: prowlarr
app.kubernetes.io/instance: prowlarr
app.kubernetes.io/name: prowlarr
spec:
enableServiceLinks: false
- serviceAccountName: default
- automountServiceAccountToken: true
+ serviceAccountName: prowlarr
+ automountServiceAccountToken: false
securityContext:
fsGroup: 1000
fsGroupChangePolicy: OnRootMismatch
runAsGroup: 1000
runAsNonRoot: true
runAsUser: 1000
--- HelmRelease: media/prowlarr ServiceAccount: media/prowlarr
+++ HelmRelease: media/prowlarr ServiceAccount: media/prowlarr
@@ -0,0 +1,11 @@
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: prowlarr
+ labels:
+ app.kubernetes.io/instance: prowlarr
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: prowlarr
+ namespace: media
+
--- HelmRelease: media/bazarr StatefulSet: media/bazarr
+++ HelmRelease: media/bazarr StatefulSet: media/bazarr
@@ -26,14 +26,14 @@
labels:
app.kubernetes.io/controller: bazarr
app.kubernetes.io/instance: bazarr
app.kubernetes.io/name: bazarr
spec:
enableServiceLinks: false
- serviceAccountName: default
- automountServiceAccountToken: true
+ serviceAccountName: bazarr
+ automountServiceAccountToken: false
securityContext:
fsGroup: 1000
fsGroupChangePolicy: OnRootMismatch
runAsGroup: 1000
runAsNonRoot: true
runAsUser: 1000
--- HelmRelease: media/bazarr ServiceAccount: media/bazarr
+++ HelmRelease: media/bazarr ServiceAccount: media/bazarr
@@ -0,0 +1,11 @@
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: bazarr
+ labels:
+ app.kubernetes.io/instance: bazarr
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: bazarr
+ namespace: media
+
--- HelmRelease: media/radarr StatefulSet: media/radarr
+++ HelmRelease: media/radarr StatefulSet: media/radarr
@@ -28,14 +28,14 @@
labels:
app.kubernetes.io/controller: radarr
app.kubernetes.io/instance: radarr
app.kubernetes.io/name: radarr
spec:
enableServiceLinks: false
- serviceAccountName: default
- automountServiceAccountToken: true
+ serviceAccountName: radarr
+ automountServiceAccountToken: false
securityContext:
fsGroup: 1000
fsGroupChangePolicy: OnRootMismatch
runAsGroup: 1000
runAsNonRoot: true
runAsUser: 1000
--- HelmRelease: media/radarr ServiceAccount: media/radarr
+++ HelmRelease: media/radarr ServiceAccount: media/radarr
@@ -0,0 +1,11 @@
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: radarr
+ labels:
+ app.kubernetes.io/instance: radarr
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: radarr
+ namespace: media
+
--- HelmRelease: media/seerr StatefulSet: media/seerr
+++ HelmRelease: media/seerr StatefulSet: media/seerr
@@ -26,14 +26,14 @@
labels:
app.kubernetes.io/controller: seerr
app.kubernetes.io/instance: seerr
app.kubernetes.io/name: seerr
spec:
enableServiceLinks: false
- serviceAccountName: default
- automountServiceAccountToken: true
+ serviceAccountName: seerr
+ automountServiceAccountToken: false
priorityClassName: media-cluster-critical
securityContext:
fsGroup: 1000
fsGroupChangePolicy: OnRootMismatch
runAsGroup: 1000
runAsNonRoot: true
--- HelmRelease: media/seerr ServiceAccount: media/seerr
+++ HelmRelease: media/seerr ServiceAccount: media/seerr
@@ -0,0 +1,11 @@
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: seerr
+ labels:
+ app.kubernetes.io/instance: seerr
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: seerr
+ namespace: media
+
--- HelmRelease: media/autobrr StatefulSet: media/autobrr
+++ HelmRelease: media/autobrr StatefulSet: media/autobrr
@@ -28,14 +28,14 @@
labels:
app.kubernetes.io/controller: autobrr
app.kubernetes.io/instance: autobrr
app.kubernetes.io/name: autobrr
spec:
enableServiceLinks: false
- serviceAccountName: default
- automountServiceAccountToken: true
+ serviceAccountName: autobrr
+ automountServiceAccountToken: false
securityContext:
fsGroup: 1000
fsGroupChangePolicy: OnRootMismatch
runAsGroup: 1000
runAsNonRoot: true
runAsUser: 1000
--- HelmRelease: media/autobrr ServiceAccount: media/autobrr
+++ HelmRelease: media/autobrr ServiceAccount: media/autobrr
@@ -0,0 +1,11 @@
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: autobrr
+ labels:
+ app.kubernetes.io/instance: autobrr
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: autobrr
+ namespace: media
+
--- HelmRelease: media/nzbget StatefulSet: media/nzbget
+++ HelmRelease: media/nzbget StatefulSet: media/nzbget
@@ -26,14 +26,14 @@
labels:
app.kubernetes.io/controller: nzbget
app.kubernetes.io/instance: nzbget
app.kubernetes.io/name: nzbget
spec:
enableServiceLinks: false
- serviceAccountName: default
- automountServiceAccountToken: true
+ serviceAccountName: nzbget
+ automountServiceAccountToken: false
securityContext:
fsGroup: 1000
fsGroupChangePolicy: OnRootMismatch
runAsGroup: 1000
runAsNonRoot: true
runAsUser: 1000
--- HelmRelease: media/nzbget ServiceAccount: media/nzbget
+++ HelmRelease: media/nzbget ServiceAccount: media/nzbget
@@ -0,0 +1,11 @@
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: nzbget
+ labels:
+ app.kubernetes.io/instance: nzbget
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: nzbget
+ namespace: media
+
--- HelmRelease: media/qui StatefulSet: media/qui
+++ HelmRelease: media/qui StatefulSet: media/qui
@@ -28,14 +28,14 @@
labels:
app.kubernetes.io/controller: qui
app.kubernetes.io/instance: qui
app.kubernetes.io/name: qui
spec:
enableServiceLinks: false
- serviceAccountName: default
- automountServiceAccountToken: true
+ serviceAccountName: qui
+ automountServiceAccountToken: false
securityContext:
fsGroup: 1000
fsGroupChangePolicy: OnRootMismatch
runAsGroup: 1000
runAsNonRoot: true
runAsUser: 1000
--- HelmRelease: media/qui ServiceAccount: media/qui
+++ HelmRelease: media/qui ServiceAccount: media/qui
@@ -0,0 +1,11 @@
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: qui
+ labels:
+ app.kubernetes.io/instance: qui
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: qui
+ namespace: media
+
--- HelmRelease: media/recyclarr CronJob: media/recyclarr
+++ HelmRelease: media/recyclarr CronJob: media/recyclarr
@@ -27,14 +27,14 @@
labels:
app.kubernetes.io/controller: recyclarr
app.kubernetes.io/instance: recyclarr
app.kubernetes.io/name: recyclarr
spec:
enableServiceLinks: false
- serviceAccountName: default
- automountServiceAccountToken: true
+ serviceAccountName: recyclarr
+ automountServiceAccountToken: false
securityContext:
fsGroup: 1000
fsGroupChangePolicy: OnRootMismatch
runAsGroup: 1000
runAsNonRoot: true
runAsUser: 1000
--- HelmRelease: media/recyclarr ServiceAccount: media/recyclarr
+++ HelmRelease: media/recyclarr ServiceAccount: media/recyclarr
@@ -0,0 +1,11 @@
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: recyclarr
+ labels:
+ app.kubernetes.io/instance: recyclarr
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: recyclarr
+ namespace: media
+
--- HelmRelease: networking/cloudflare-tunnel Deployment: networking/cloudflare-tunnel
+++ HelmRelease: networking/cloudflare-tunnel Deployment: networking/cloudflare-tunnel
@@ -28,14 +28,14 @@
labels:
app.kubernetes.io/controller: cloudflare-tunnel
app.kubernetes.io/instance: cloudflare-tunnel
app.kubernetes.io/name: cloudflare-tunnel
spec:
enableServiceLinks: false
- serviceAccountName: default
- automountServiceAccountToken: true
+ serviceAccountName: cloudflare-tunnel
+ automountServiceAccountToken: false
securityContext:
runAsGroup: 1000
runAsNonRoot: true
runAsUser: 1000
hostIPC: false
hostNetwork: false
--- HelmRelease: networking/cloudflare-tunnel ServiceMonitor: networking/cloudflare-tunnel
+++ HelmRelease: networking/cloudflare-tunnel ServiceMonitor: networking/cloudflare-tunnel
@@ -6,13 +6,13 @@
labels:
app.kubernetes.io/instance: cloudflare-tunnel
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: cloudflare-tunnel
namespace: networking
spec:
- jobLabel: cloudflare-tunnel
+ jobLabel: app.kubernetes.io/name
namespaceSelector:
matchNames:
- networking
selector:
matchLabels:
app.kubernetes.io/service: cloudflare-tunnel
--- HelmRelease: networking/cloudflare-tunnel ServiceAccount: networking/cloudflare-tunnel
+++ HelmRelease: networking/cloudflare-tunnel ServiceAccount: networking/cloudflare-tunnel
@@ -0,0 +1,11 @@
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: cloudflare-tunnel
+ labels:
+ app.kubernetes.io/instance: cloudflare-tunnel
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: cloudflare-tunnel
+ namespace: networking
+
--- HelmRelease: media/syncthing StatefulSet: media/syncthing
+++ HelmRelease: media/syncthing StatefulSet: media/syncthing
@@ -28,14 +28,14 @@
labels:
app.kubernetes.io/controller: syncthing
app.kubernetes.io/instance: syncthing
app.kubernetes.io/name: syncthing
spec:
enableServiceLinks: false
- serviceAccountName: default
- automountServiceAccountToken: true
+ serviceAccountName: syncthing
+ automountServiceAccountToken: false
securityContext:
fsGroup: 1000
fsGroupChangePolicy: OnRootMismatch
runAsGroup: 1000
runAsNonRoot: true
runAsUser: 1000
--- HelmRelease: media/syncthing ServiceAccount: media/syncthing
+++ HelmRelease: media/syncthing ServiceAccount: media/syncthing
@@ -0,0 +1,11 @@
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: syncthing
+ labels:
+ app.kubernetes.io/instance: syncthing
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: syncthing
+ namespace: media
+
--- HelmRelease: home/esphome Deployment: home/esphome
+++ HelmRelease: home/esphome Deployment: home/esphome
@@ -24,14 +24,14 @@
labels:
app.kubernetes.io/controller: esphome
app.kubernetes.io/instance: esphome
app.kubernetes.io/name: esphome
spec:
enableServiceLinks: false
- serviceAccountName: default
- automountServiceAccountToken: true
+ serviceAccountName: esphome
+ automountServiceAccountToken: false
securityContext:
fsGroup: 2000
fsGroupChangePolicy: OnRootMismatch
runAsGroup: 2000
runAsUser: 2000
hostIPC: false
--- HelmRelease: home/esphome ServiceAccount: home/esphome
+++ HelmRelease: home/esphome ServiceAccount: home/esphome
@@ -0,0 +1,11 @@
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: esphome
+ labels:
+ app.kubernetes.io/instance: esphome
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: esphome
+ namespace: home
+
--- HelmRelease: media/jellyfin StatefulSet: media/jellyfin
+++ HelmRelease: media/jellyfin StatefulSet: media/jellyfin
@@ -28,14 +28,14 @@
labels:
app.kubernetes.io/controller: jellyfin
app.kubernetes.io/instance: jellyfin
app.kubernetes.io/name: jellyfin
spec:
enableServiceLinks: false
- serviceAccountName: default
- automountServiceAccountToken: true
+ serviceAccountName: jellyfin
+ automountServiceAccountToken: false
priorityClassName: media-cluster-critical
securityContext:
fsGroup: 1000
fsGroupChangePolicy: OnRootMismatch
runAsGroup: 1000
runAsNonRoot: true
--- HelmRelease: media/jellyfin ServiceAccount: media/jellyfin
+++ HelmRelease: media/jellyfin ServiceAccount: media/jellyfin
@@ -0,0 +1,11 @@
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: jellyfin
+ labels:
+ app.kubernetes.io/instance: jellyfin
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: jellyfin
+ namespace: media
+
--- HelmRelease: media/qbittorrent StatefulSet: media/qbittorrent
+++ HelmRelease: media/qbittorrent StatefulSet: media/qbittorrent
@@ -30,14 +30,14 @@
labels:
app.kubernetes.io/controller: qbittorrent
app.kubernetes.io/instance: qbittorrent
app.kubernetes.io/name: qbittorrent
spec:
enableServiceLinks: false
- serviceAccountName: default
- automountServiceAccountToken: true
+ serviceAccountName: qbittorrent
+ automountServiceAccountToken: false
securityContext:
fsGroup: 1000
fsGroupChangePolicy: OnRootMismatch
seccompProfile:
type: RuntimeDefault
supplementalGroups:
--- HelmRelease: media/qbittorrent ServiceAccount: media/qbittorrent
+++ HelmRelease: media/qbittorrent ServiceAccount: media/qbittorrent
@@ -0,0 +1,11 @@
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: qbittorrent
+ labels:
+ app.kubernetes.io/instance: qbittorrent
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: qbittorrent
+ namespace: media
+
--- HelmRelease: media/tqm CronJob: media/tqm-orphaned
+++ HelmRelease: media/tqm CronJob: media/tqm-orphaned
@@ -25,14 +25,14 @@
labels:
app.kubernetes.io/controller: orphaned
app.kubernetes.io/instance: tqm
app.kubernetes.io/name: tqm
spec:
enableServiceLinks: false
- serviceAccountName: default
- automountServiceAccountToken: true
+ serviceAccountName: tqm
+ automountServiceAccountToken: false
securityContext:
fsGroup: 1000
fsGroupChangePolicy: OnRootMismatch
runAsGroup: 1000
runAsNonRoot: true
runAsUser: 1000
--- HelmRelease: media/tqm CronJob: media/tqm
+++ HelmRelease: media/tqm CronJob: media/tqm
@@ -25,14 +25,14 @@
labels:
app.kubernetes.io/controller: tqm
app.kubernetes.io/instance: tqm
app.kubernetes.io/name: tqm
spec:
enableServiceLinks: false
- serviceAccountName: default
- automountServiceAccountToken: true
+ serviceAccountName: tqm
+ automountServiceAccountToken: false
securityContext:
fsGroup: 1000
fsGroupChangePolicy: OnRootMismatch
runAsGroup: 1000
runAsNonRoot: true
runAsUser: 1000
--- HelmRelease: media/tqm ServiceAccount: media/tqm
+++ HelmRelease: media/tqm ServiceAccount: media/tqm
@@ -0,0 +1,11 @@
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: tqm
+ labels:
+ app.kubernetes.io/instance: tqm
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: tqm
+ namespace: media
+
--- HelmRelease: media/sonarr StatefulSet: media/sonarr
+++ HelmRelease: media/sonarr StatefulSet: media/sonarr
@@ -28,14 +28,14 @@
labels:
app.kubernetes.io/controller: sonarr
app.kubernetes.io/instance: sonarr
app.kubernetes.io/name: sonarr
spec:
enableServiceLinks: false
- serviceAccountName: default
- automountServiceAccountToken: true
+ serviceAccountName: sonarr
+ automountServiceAccountToken: false
securityContext:
fsGroup: 1000
fsGroupChangePolicy: OnRootMismatch
runAsGroup: 1000
runAsNonRoot: true
runAsUser: 1000
--- HelmRelease: media/sonarr ServiceAccount: media/sonarr
+++ HelmRelease: media/sonarr ServiceAccount: media/sonarr
@@ -0,0 +1,11 @@
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: sonarr
+ labels:
+ app.kubernetes.io/instance: sonarr
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: sonarr
+ namespace: media
+ |
a1193ef to
44c2439
Compare
44c2439 to
024b84a
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
4.6.2→5.0.1Release Notes
bjw-s-labs/helm-charts (app-template)
v5.0.1Changelog:
Changed
v5.0.0Changelog:
Changed
Configuration
📅 Schedule: (in timezone America/New_York)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.