Skip to content

feat(container)!: Update image app-template ( 4.6.2 ➔ 5.0.1 )#3203

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/app-template-5.x
Open

feat(container)!: Update image app-template ( 4.6.2 ➔ 5.0.1 )#3203
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/app-template-5.x

Conversation

@renovate

@renovate renovate Bot commented May 4, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Update Change
app-template major 4.6.25.0.1

Release Notes

bjw-s-labs/helm-charts (app-template)

v5.0.1

Changelog:
Changed

v5.0.0

Changelog:
Changed

Configuration

📅 Schedule: (in timezone America/New_York)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@github-actions

github-actions Bot commented May 4, 2026

Copy link
Copy Markdown

qgr1-cluster-0 - kustomization

--- k8s/base/home/esphome Kustomization: flux-system/home-esphome HelmRelease: home/esphome

+++ k8s/base/home/esphome Kustomization: flux-system/home-esphome HelmRelease: home/esphome

@@ -12,13 +12,13 @@

     spec:
       chart: app-template
       sourceRef:
         kind: HelmRepository
         name: bjw-s
         namespace: flux-system
-      version: 4.6.2
+      version: 5.0.1
   interval: 10m
   values:
     controllers:
       esphome:
         containers:
           app:
--- k8s/base/home/home-assistant-nwk3 Kustomization: flux-system/home-home-assistant-nwk3 HelmRelease: home/home-assistant-nwk3

+++ k8s/base/home/home-assistant-nwk3 Kustomization: flux-system/home-home-assistant-nwk3 HelmRelease: home/home-assistant-nwk3

@@ -12,13 +12,13 @@

     spec:
       chart: app-template
       sourceRef:
         kind: HelmRepository
         name: bjw-s
         namespace: flux-system
-      version: 4.6.2
+      version: 5.0.1
   interval: 10m
   values:
     controllers:
       home-assistant:
         annotations:
           reloader.stakater.com/auto: 'true'
--- k8s/base/infra/unifi Kustomization: flux-system/infra-unifi HelmRelease: infra/unifi

+++ k8s/base/infra/unifi Kustomization: flux-system/infra-unifi HelmRelease: infra/unifi

@@ -12,13 +12,13 @@

     spec:
       chart: app-template
       sourceRef:
         kind: HelmRepository
         name: bjw-s
         namespace: flux-system
-      version: 4.6.2
+      version: 5.0.1
   interval: 10m
   values:
     controllers:
       unifi:
         containers:
           app:
--- k8s/base/media/qui Kustomization: flux-system/media-qui HelmRelease: media/qui

+++ k8s/base/media/qui Kustomization: flux-system/media-qui HelmRelease: media/qui

@@ -12,13 +12,13 @@

     spec:
       chart: app-template
       sourceRef:
         kind: HelmRepository
         name: bjw-s
         namespace: flux-system
-      version: 4.6.2
+      version: 5.0.1
   install:
     remediation:
       retries: 3
   interval: 30m
   uninstall:
     keepHistory: false
--- k8s/base/media/autobrr Kustomization: flux-system/media-autobrr HelmRelease: media/autobrr

+++ k8s/base/media/autobrr Kustomization: flux-system/media-autobrr HelmRelease: media/autobrr

@@ -13,13 +13,13 @@

     spec:
       chart: app-template
       sourceRef:
         kind: HelmRepository
         name: bjw-s
         namespace: flux-system
-      version: 4.6.2
+      version: 5.0.1
   install:
     createNamespace: true
     remediation:
       retries: 50
     timeout: 15m
   interval: 30m
--- k8s/base/media/cross-seed Kustomization: flux-system/media-cross-seed HelmRelease: media/cross-seed

+++ k8s/base/media/cross-seed Kustomization: flux-system/media-cross-seed HelmRelease: media/cross-seed

@@ -13,13 +13,13 @@

     spec:
       chart: app-template
       sourceRef:
         kind: HelmRepository
         name: bjw-s
         namespace: flux-system
-      version: 4.6.2
+      version: 5.0.1
   install:
     createNamespace: true
     remediation:
       retries: 50
     timeout: 15m
   interval: 30m
--- k8s/base/media/jellyfin Kustomization: flux-system/media-jellyfin HelmRelease: media/jellyfin

+++ k8s/base/media/jellyfin Kustomization: flux-system/media-jellyfin HelmRelease: media/jellyfin

@@ -13,13 +13,13 @@

     spec:
       chart: app-template
       sourceRef:
         kind: HelmRepository
         name: bjw-s
         namespace: flux-system
-      version: 4.6.2
+      version: 5.0.1
   install:
     createNamespace: true
     remediation:
       retries: 50
     timeout: 15m
   interval: 30m
--- k8s/base/media/bazarr Kustomization: flux-system/media-bazarr HelmRelease: media/bazarr

+++ k8s/base/media/bazarr Kustomization: flux-system/media-bazarr HelmRelease: media/bazarr

@@ -13,13 +13,13 @@

     spec:
       chart: app-template
       sourceRef:
         kind: HelmRepository
         name: bjw-s
         namespace: flux-system
-      version: 4.6.2
+      version: 5.0.1
   install:
     createNamespace: true
     remediation:
       retries: 50
     timeout: 15m
   interval: 30m
--- k8s/base/media/plex Kustomization: flux-system/media-plex HelmRelease: media/plex

+++ k8s/base/media/plex Kustomization: flux-system/media-plex HelmRelease: media/plex

@@ -13,13 +13,13 @@

     spec:
       chart: app-template
       sourceRef:
         kind: HelmRepository
         name: bjw-s
         namespace: flux-system
-      version: 4.6.2
+      version: 5.0.1
   install:
     createNamespace: true
     remediation:
       retries: 50
     timeout: 15m
   interval: 30m
--- k8s/base/media/nzbget Kustomization: flux-system/media-nzbget HelmRelease: media/nzbget

+++ k8s/base/media/nzbget Kustomization: flux-system/media-nzbget HelmRelease: media/nzbget

@@ -13,13 +13,13 @@

     spec:
       chart: app-template
       sourceRef:
         kind: HelmRepository
         name: bjw-s
         namespace: flux-system
-      version: 4.6.2
+      version: 5.0.1
   install:
     createNamespace: true
     remediation:
       retries: 50
     timeout: 15m
   interval: 30m
--- k8s/base/networking/cloudflare-tunnel Kustomization: flux-system/networking-cloudflare-tunnel HelmRelease: networking/cloudflare-tunnel

+++ k8s/base/networking/cloudflare-tunnel Kustomization: flux-system/networking-cloudflare-tunnel HelmRelease: networking/cloudflare-tunnel

@@ -13,13 +13,13 @@

       chart: app-template
       interval: 10m
       sourceRef:
         kind: HelmRepository
         name: bjw-s
         namespace: flux-system
-      version: 4.6.2
+      version: 5.0.1
   interval: 1h
   values:
     configMaps:
       config:
         data:
           config.yaml: |-
--- k8s/base/media/sonarr Kustomization: flux-system/media-sonarr HelmRelease: media/sonarr

+++ k8s/base/media/sonarr Kustomization: flux-system/media-sonarr HelmRelease: media/sonarr

@@ -13,13 +13,13 @@

     spec:
       chart: app-template
       sourceRef:
         kind: HelmRepository
         name: bjw-s
         namespace: flux-system
-      version: 4.6.2
+      version: 5.0.1
   install:
     createNamespace: true
     remediation:
       retries: 50
     timeout: 15m
   interval: 30m
--- k8s/base/media/prowlarr Kustomization: flux-system/media-prowlarr HelmRelease: media/prowlarr

+++ k8s/base/media/prowlarr Kustomization: flux-system/media-prowlarr HelmRelease: media/prowlarr

@@ -13,13 +13,13 @@

     spec:
       chart: app-template
       sourceRef:
         kind: HelmRepository
         name: bjw-s
         namespace: flux-system
-      version: 4.6.2
+      version: 5.0.1
   install:
     createNamespace: true
     remediation:
       retries: 50
     timeout: 15m
   interval: 30m
--- k8s/base/media/qbittorrent Kustomization: flux-system/media-qbittorrent HelmRelease: media/qbittorrent

+++ k8s/base/media/qbittorrent Kustomization: flux-system/media-qbittorrent HelmRelease: media/qbittorrent

@@ -13,13 +13,13 @@

     spec:
       chart: app-template
       sourceRef:
         kind: HelmRepository
         name: bjw-s
         namespace: flux-system
-      version: 4.6.2
+      version: 5.0.1
   install:
     createNamespace: true
     remediation:
       retries: 50
     timeout: 15m
   interval: 30m
--- k8s/base/media/radarr Kustomization: flux-system/media-radarr HelmRelease: media/radarr

+++ k8s/base/media/radarr Kustomization: flux-system/media-radarr HelmRelease: media/radarr

@@ -13,13 +13,13 @@

     spec:
       chart: app-template
       sourceRef:
         kind: HelmRepository
         name: bjw-s
         namespace: flux-system
-      version: 4.6.2
+      version: 5.0.1
   install:
     createNamespace: true
     remediation:
       retries: 50
     timeout: 15m
   interval: 30m
--- k8s/base/media/syncthing Kustomization: flux-system/media-syncthing HelmRelease: media/syncthing

+++ k8s/base/media/syncthing Kustomization: flux-system/media-syncthing HelmRelease: media/syncthing

@@ -13,13 +13,13 @@

     spec:
       chart: app-template
       sourceRef:
         kind: HelmRepository
         name: bjw-s
         namespace: flux-system
-      version: 4.6.2
+      version: 5.0.1
   install:
     createNamespace: true
     remediation:
       retries: 50
     timeout: 15m
   interval: 30m
--- k8s/base/media/seerr Kustomization: flux-system/media-seerr HelmRelease: media/seerr

+++ k8s/base/media/seerr Kustomization: flux-system/media-seerr HelmRelease: media/seerr

@@ -13,13 +13,13 @@

     spec:
       chart: app-template
       sourceRef:
         kind: HelmRepository
         name: bjw-s
         namespace: flux-system
-      version: 4.6.2
+      version: 5.0.1
   install:
     createNamespace: true
     remediation:
       retries: 50
     timeout: 15m
   interval: 30m
--- k8s/base/media/recyclarr Kustomization: flux-system/media-recyclarr HelmRelease: media/recyclarr

+++ k8s/base/media/recyclarr Kustomization: flux-system/media-recyclarr HelmRelease: media/recyclarr

@@ -13,13 +13,13 @@

     spec:
       chart: app-template
       sourceRef:
         kind: HelmRepository
         name: bjw-s
         namespace: flux-system
-      version: 4.6.2
+      version: 5.0.1
   install:
     createNamespace: true
     remediation:
       retries: 50
     timeout: 15m
   interval: 30m
--- k8s/base/media/tqm Kustomization: flux-system/media-tqm HelmRelease: media/tqm

+++ k8s/base/media/tqm Kustomization: flux-system/media-tqm HelmRelease: media/tqm

@@ -13,13 +13,13 @@

     spec:
       chart: app-template
       sourceRef:
         kind: HelmRepository
         name: bjw-s
         namespace: flux-system
-      version: 4.6.2
+      version: 5.0.1
   install:
     createNamespace: true
     remediation:
       retries: 50
     timeout: 15m
   interval: 30m

@github-actions

github-actions Bot commented May 4, 2026

Copy link
Copy Markdown

qgr1-cluster-0 - helmrelease

--- HelmRelease: infra/unifi Deployment: infra/unifi

+++ HelmRelease: infra/unifi Deployment: infra/unifi

@@ -24,14 +24,14 @@

       labels:
         app.kubernetes.io/controller: unifi
         app.kubernetes.io/instance: unifi
         app.kubernetes.io/name: unifi
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: unifi
+      automountServiceAccountToken: false
       hostIPC: false
       hostNetwork: false
       hostPID: false
       dnsPolicy: ClusterFirst
       containers:
       - env:
--- HelmRelease: infra/unifi ServiceAccount: infra/unifi

+++ HelmRelease: infra/unifi ServiceAccount: infra/unifi

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: unifi
+  labels:
+    app.kubernetes.io/instance: unifi
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: unifi
+  namespace: infra
+
--- HelmRelease: home/home-assistant-nwk3 Deployment: home/home-assistant-nwk3

+++ HelmRelease: home/home-assistant-nwk3 Deployment: home/home-assistant-nwk3

@@ -26,14 +26,14 @@

       labels:
         app.kubernetes.io/controller: home-assistant
         app.kubernetes.io/instance: home-assistant-nwk3
         app.kubernetes.io/name: home-assistant-nwk3
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: home-assistant-nwk3
+      automountServiceAccountToken: false
       securityContext:
         fsGroup: 1000
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 1000
         runAsNonRoot: true
         runAsUser: 1000
--- HelmRelease: home/home-assistant-nwk3 ServiceAccount: home/home-assistant-nwk3

+++ HelmRelease: home/home-assistant-nwk3 ServiceAccount: home/home-assistant-nwk3

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: home-assistant-nwk3
+  labels:
+    app.kubernetes.io/instance: home-assistant-nwk3
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: home-assistant-nwk3
+  namespace: home
+
--- HelmRelease: media/plex StatefulSet: media/plex

+++ HelmRelease: media/plex StatefulSet: media/plex

@@ -28,14 +28,14 @@

       labels:
         app.kubernetes.io/controller: plex
         app.kubernetes.io/instance: plex
         app.kubernetes.io/name: plex
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: plex
+      automountServiceAccountToken: false
       priorityClassName: media-cluster-critical
       securityContext:
         fsGroup: 1000
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 1000
         runAsNonRoot: true
--- HelmRelease: media/plex ServiceAccount: media/plex

+++ HelmRelease: media/plex ServiceAccount: media/plex

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: plex
+  labels:
+    app.kubernetes.io/instance: plex
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: plex
+  namespace: media
+
--- HelmRelease: media/cross-seed StatefulSet: media/cross-seed

+++ HelmRelease: media/cross-seed StatefulSet: media/cross-seed

@@ -28,14 +28,14 @@

       labels:
         app.kubernetes.io/controller: cross-seed
         app.kubernetes.io/instance: cross-seed
         app.kubernetes.io/name: cross-seed
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: cross-seed
+      automountServiceAccountToken: false
       securityContext:
         fsGroup: 1000
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 1000
         runAsNonRoot: true
         runAsUser: 1000
--- HelmRelease: media/cross-seed ServiceAccount: media/cross-seed

+++ HelmRelease: media/cross-seed ServiceAccount: media/cross-seed

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: cross-seed
+  labels:
+    app.kubernetes.io/instance: cross-seed
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: cross-seed
+  namespace: media
+
--- HelmRelease: media/prowlarr StatefulSet: media/prowlarr

+++ HelmRelease: media/prowlarr StatefulSet: media/prowlarr

@@ -28,14 +28,14 @@

       labels:
         app.kubernetes.io/controller: prowlarr
         app.kubernetes.io/instance: prowlarr
         app.kubernetes.io/name: prowlarr
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: prowlarr
+      automountServiceAccountToken: false
       securityContext:
         fsGroup: 1000
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 1000
         runAsNonRoot: true
         runAsUser: 1000
--- HelmRelease: media/prowlarr ServiceAccount: media/prowlarr

+++ HelmRelease: media/prowlarr ServiceAccount: media/prowlarr

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: prowlarr
+  labels:
+    app.kubernetes.io/instance: prowlarr
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: prowlarr
+  namespace: media
+
--- HelmRelease: media/bazarr StatefulSet: media/bazarr

+++ HelmRelease: media/bazarr StatefulSet: media/bazarr

@@ -26,14 +26,14 @@

       labels:
         app.kubernetes.io/controller: bazarr
         app.kubernetes.io/instance: bazarr
         app.kubernetes.io/name: bazarr
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: bazarr
+      automountServiceAccountToken: false
       securityContext:
         fsGroup: 1000
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 1000
         runAsNonRoot: true
         runAsUser: 1000
--- HelmRelease: media/bazarr ServiceAccount: media/bazarr

+++ HelmRelease: media/bazarr ServiceAccount: media/bazarr

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: bazarr
+  labels:
+    app.kubernetes.io/instance: bazarr
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: bazarr
+  namespace: media
+
--- HelmRelease: media/radarr StatefulSet: media/radarr

+++ HelmRelease: media/radarr StatefulSet: media/radarr

@@ -28,14 +28,14 @@

       labels:
         app.kubernetes.io/controller: radarr
         app.kubernetes.io/instance: radarr
         app.kubernetes.io/name: radarr
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: radarr
+      automountServiceAccountToken: false
       securityContext:
         fsGroup: 1000
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 1000
         runAsNonRoot: true
         runAsUser: 1000
--- HelmRelease: media/radarr ServiceAccount: media/radarr

+++ HelmRelease: media/radarr ServiceAccount: media/radarr

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: radarr
+  labels:
+    app.kubernetes.io/instance: radarr
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: radarr
+  namespace: media
+
--- HelmRelease: media/seerr StatefulSet: media/seerr

+++ HelmRelease: media/seerr StatefulSet: media/seerr

@@ -26,14 +26,14 @@

       labels:
         app.kubernetes.io/controller: seerr
         app.kubernetes.io/instance: seerr
         app.kubernetes.io/name: seerr
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: seerr
+      automountServiceAccountToken: false
       priorityClassName: media-cluster-critical
       securityContext:
         fsGroup: 1000
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 1000
         runAsNonRoot: true
--- HelmRelease: media/seerr ServiceAccount: media/seerr

+++ HelmRelease: media/seerr ServiceAccount: media/seerr

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: seerr
+  labels:
+    app.kubernetes.io/instance: seerr
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: seerr
+  namespace: media
+
--- HelmRelease: media/autobrr StatefulSet: media/autobrr

+++ HelmRelease: media/autobrr StatefulSet: media/autobrr

@@ -28,14 +28,14 @@

       labels:
         app.kubernetes.io/controller: autobrr
         app.kubernetes.io/instance: autobrr
         app.kubernetes.io/name: autobrr
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: autobrr
+      automountServiceAccountToken: false
       securityContext:
         fsGroup: 1000
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 1000
         runAsNonRoot: true
         runAsUser: 1000
--- HelmRelease: media/autobrr ServiceAccount: media/autobrr

+++ HelmRelease: media/autobrr ServiceAccount: media/autobrr

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: autobrr
+  labels:
+    app.kubernetes.io/instance: autobrr
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: autobrr
+  namespace: media
+
--- HelmRelease: media/nzbget StatefulSet: media/nzbget

+++ HelmRelease: media/nzbget StatefulSet: media/nzbget

@@ -26,14 +26,14 @@

       labels:
         app.kubernetes.io/controller: nzbget
         app.kubernetes.io/instance: nzbget
         app.kubernetes.io/name: nzbget
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: nzbget
+      automountServiceAccountToken: false
       securityContext:
         fsGroup: 1000
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 1000
         runAsNonRoot: true
         runAsUser: 1000
--- HelmRelease: media/nzbget ServiceAccount: media/nzbget

+++ HelmRelease: media/nzbget ServiceAccount: media/nzbget

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: nzbget
+  labels:
+    app.kubernetes.io/instance: nzbget
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: nzbget
+  namespace: media
+
--- HelmRelease: media/qui StatefulSet: media/qui

+++ HelmRelease: media/qui StatefulSet: media/qui

@@ -28,14 +28,14 @@

       labels:
         app.kubernetes.io/controller: qui
         app.kubernetes.io/instance: qui
         app.kubernetes.io/name: qui
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: qui
+      automountServiceAccountToken: false
       securityContext:
         fsGroup: 1000
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 1000
         runAsNonRoot: true
         runAsUser: 1000
--- HelmRelease: media/qui ServiceAccount: media/qui

+++ HelmRelease: media/qui ServiceAccount: media/qui

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: qui
+  labels:
+    app.kubernetes.io/instance: qui
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: qui
+  namespace: media
+
--- HelmRelease: media/recyclarr CronJob: media/recyclarr

+++ HelmRelease: media/recyclarr CronJob: media/recyclarr

@@ -27,14 +27,14 @@

           labels:
             app.kubernetes.io/controller: recyclarr
             app.kubernetes.io/instance: recyclarr
             app.kubernetes.io/name: recyclarr
         spec:
           enableServiceLinks: false
-          serviceAccountName: default
-          automountServiceAccountToken: true
+          serviceAccountName: recyclarr
+          automountServiceAccountToken: false
           securityContext:
             fsGroup: 1000
             fsGroupChangePolicy: OnRootMismatch
             runAsGroup: 1000
             runAsNonRoot: true
             runAsUser: 1000
--- HelmRelease: media/recyclarr ServiceAccount: media/recyclarr

+++ HelmRelease: media/recyclarr ServiceAccount: media/recyclarr

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: recyclarr
+  labels:
+    app.kubernetes.io/instance: recyclarr
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: recyclarr
+  namespace: media
+
--- HelmRelease: networking/cloudflare-tunnel Deployment: networking/cloudflare-tunnel

+++ HelmRelease: networking/cloudflare-tunnel Deployment: networking/cloudflare-tunnel

@@ -28,14 +28,14 @@

       labels:
         app.kubernetes.io/controller: cloudflare-tunnel
         app.kubernetes.io/instance: cloudflare-tunnel
         app.kubernetes.io/name: cloudflare-tunnel
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: cloudflare-tunnel
+      automountServiceAccountToken: false
       securityContext:
         runAsGroup: 1000
         runAsNonRoot: true
         runAsUser: 1000
       hostIPC: false
       hostNetwork: false
--- HelmRelease: networking/cloudflare-tunnel ServiceMonitor: networking/cloudflare-tunnel

+++ HelmRelease: networking/cloudflare-tunnel ServiceMonitor: networking/cloudflare-tunnel

@@ -6,13 +6,13 @@

   labels:
     app.kubernetes.io/instance: cloudflare-tunnel
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cloudflare-tunnel
   namespace: networking
 spec:
-  jobLabel: cloudflare-tunnel
+  jobLabel: app.kubernetes.io/name
   namespaceSelector:
     matchNames:
     - networking
   selector:
     matchLabels:
       app.kubernetes.io/service: cloudflare-tunnel
--- HelmRelease: networking/cloudflare-tunnel ServiceAccount: networking/cloudflare-tunnel

+++ HelmRelease: networking/cloudflare-tunnel ServiceAccount: networking/cloudflare-tunnel

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: cloudflare-tunnel
+  labels:
+    app.kubernetes.io/instance: cloudflare-tunnel
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: cloudflare-tunnel
+  namespace: networking
+
--- HelmRelease: media/syncthing StatefulSet: media/syncthing

+++ HelmRelease: media/syncthing StatefulSet: media/syncthing

@@ -28,14 +28,14 @@

       labels:
         app.kubernetes.io/controller: syncthing
         app.kubernetes.io/instance: syncthing
         app.kubernetes.io/name: syncthing
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: syncthing
+      automountServiceAccountToken: false
       securityContext:
         fsGroup: 1000
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 1000
         runAsNonRoot: true
         runAsUser: 1000
--- HelmRelease: media/syncthing ServiceAccount: media/syncthing

+++ HelmRelease: media/syncthing ServiceAccount: media/syncthing

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: syncthing
+  labels:
+    app.kubernetes.io/instance: syncthing
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: syncthing
+  namespace: media
+
--- HelmRelease: home/esphome Deployment: home/esphome

+++ HelmRelease: home/esphome Deployment: home/esphome

@@ -24,14 +24,14 @@

       labels:
         app.kubernetes.io/controller: esphome
         app.kubernetes.io/instance: esphome
         app.kubernetes.io/name: esphome
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: esphome
+      automountServiceAccountToken: false
       securityContext:
         fsGroup: 2000
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 2000
         runAsUser: 2000
       hostIPC: false
--- HelmRelease: home/esphome ServiceAccount: home/esphome

+++ HelmRelease: home/esphome ServiceAccount: home/esphome

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: esphome
+  labels:
+    app.kubernetes.io/instance: esphome
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: esphome
+  namespace: home
+
--- HelmRelease: media/jellyfin StatefulSet: media/jellyfin

+++ HelmRelease: media/jellyfin StatefulSet: media/jellyfin

@@ -28,14 +28,14 @@

       labels:
         app.kubernetes.io/controller: jellyfin
         app.kubernetes.io/instance: jellyfin
         app.kubernetes.io/name: jellyfin
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: jellyfin
+      automountServiceAccountToken: false
       priorityClassName: media-cluster-critical
       securityContext:
         fsGroup: 1000
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 1000
         runAsNonRoot: true
--- HelmRelease: media/jellyfin ServiceAccount: media/jellyfin

+++ HelmRelease: media/jellyfin ServiceAccount: media/jellyfin

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: jellyfin
+  labels:
+    app.kubernetes.io/instance: jellyfin
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: jellyfin
+  namespace: media
+
--- HelmRelease: media/qbittorrent StatefulSet: media/qbittorrent

+++ HelmRelease: media/qbittorrent StatefulSet: media/qbittorrent

@@ -30,14 +30,14 @@

       labels:
         app.kubernetes.io/controller: qbittorrent
         app.kubernetes.io/instance: qbittorrent
         app.kubernetes.io/name: qbittorrent
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: qbittorrent
+      automountServiceAccountToken: false
       securityContext:
         fsGroup: 1000
         fsGroupChangePolicy: OnRootMismatch
         seccompProfile:
           type: RuntimeDefault
         supplementalGroups:
--- HelmRelease: media/qbittorrent ServiceAccount: media/qbittorrent

+++ HelmRelease: media/qbittorrent ServiceAccount: media/qbittorrent

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: qbittorrent
+  labels:
+    app.kubernetes.io/instance: qbittorrent
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: qbittorrent
+  namespace: media
+
--- HelmRelease: media/tqm CronJob: media/tqm-orphaned

+++ HelmRelease: media/tqm CronJob: media/tqm-orphaned

@@ -25,14 +25,14 @@

           labels:
             app.kubernetes.io/controller: orphaned
             app.kubernetes.io/instance: tqm
             app.kubernetes.io/name: tqm
         spec:
           enableServiceLinks: false
-          serviceAccountName: default
-          automountServiceAccountToken: true
+          serviceAccountName: tqm
+          automountServiceAccountToken: false
           securityContext:
             fsGroup: 1000
             fsGroupChangePolicy: OnRootMismatch
             runAsGroup: 1000
             runAsNonRoot: true
             runAsUser: 1000
--- HelmRelease: media/tqm CronJob: media/tqm

+++ HelmRelease: media/tqm CronJob: media/tqm

@@ -25,14 +25,14 @@

           labels:
             app.kubernetes.io/controller: tqm
             app.kubernetes.io/instance: tqm
             app.kubernetes.io/name: tqm
         spec:
           enableServiceLinks: false
-          serviceAccountName: default
-          automountServiceAccountToken: true
+          serviceAccountName: tqm
+          automountServiceAccountToken: false
           securityContext:
             fsGroup: 1000
             fsGroupChangePolicy: OnRootMismatch
             runAsGroup: 1000
             runAsNonRoot: true
             runAsUser: 1000
--- HelmRelease: media/tqm ServiceAccount: media/tqm

+++ HelmRelease: media/tqm ServiceAccount: media/tqm

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: tqm
+  labels:
+    app.kubernetes.io/instance: tqm
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: tqm
+  namespace: media
+
--- HelmRelease: media/sonarr StatefulSet: media/sonarr

+++ HelmRelease: media/sonarr StatefulSet: media/sonarr

@@ -28,14 +28,14 @@

       labels:
         app.kubernetes.io/controller: sonarr
         app.kubernetes.io/instance: sonarr
         app.kubernetes.io/name: sonarr
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: sonarr
+      automountServiceAccountToken: false
       securityContext:
         fsGroup: 1000
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 1000
         runAsNonRoot: true
         runAsUser: 1000
--- HelmRelease: media/sonarr ServiceAccount: media/sonarr

+++ HelmRelease: media/sonarr ServiceAccount: media/sonarr

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: sonarr
+  labels:
+    app.kubernetes.io/instance: sonarr
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: sonarr
+  namespace: media
+

@renovate renovate Bot force-pushed the renovate/app-template-5.x branch from a1193ef to 44c2439 Compare May 14, 2026 21:34
@renovate renovate Bot changed the title feat(container)!: Update image app-template ( 4.6.2 ➔ 5.0.0 ) feat(container)!: Update image app-template ( 4.6.2 ➔ 5.0.1 ) May 14, 2026
@renovate renovate Bot force-pushed the renovate/app-template-5.x branch from 44c2439 to 024b84a Compare June 11, 2026 18:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants