remove registration secret

.github/renovate.json

@@ -40,7 +40,7 @@
         },
         {
             "description": "Label service images",
-            "matchPackageNames": [
+            "matchDepNames": [
                 "ghcr.io/alex1989hu/kubelet-serving-cert-approver",
                 "ghcr.io/cloudnative-pg/postgresql",
                 "redis/redis-stack-server"
@@ -57,7 +57,7 @@
         },
         {
             "description": "Label service charts",
-            "matchPackageNames": [
+            "matchDepNames": [
                 "elasticsearch",
                 "redis"
             ],
@@ -73,7 +73,7 @@
         },
         {
             "description": "Label application images",
-            "matchPackageNames": [
+            "matchDepNames": [
                 "bbilly1/tubearchivist-jf",
                 "bbilly1/tubearchivist",
                 "freshrss/freshrss",
@@ -97,7 +97,7 @@
         },
         {
             "description": "Label application charts",
-            "matchPackageNames": [],
+            "matchDepNames": [],
             "matchDatasources": [
                 "helm"
             ],

charts/calibre-server/Chart.yaml

@@ -1,6 +1,6 @@
 apiVersion: v2
 name: calibre-server
-version: 0.0.7
+version: 0.0.8
 description: Chart for Calibre content database
 keywords:
   - media

charts/calibre-server/templates/ingress-route.yaml

@@ -31,4 +31,5 @@ spec:
         - kind: Service
           name: {{ .Values.ingressRoute.authentik.outpost }}
           port: {{ .Values.ingressRoute.authentik.port }}
+          namespace: {{ .Values.ingressRoute.authentik.namespace }}          
 {{- end }}

charts/calibre-server/values.yaml

@@ -31,8 +31,9 @@ ingressRoute:
   http:
     host:
   authentik:
-    outpost:
+    outpost: ""
     port: 9000
+    namespace: ""
 persistence:
   config:
     storageClassName: default

charts/home-assistant/Chart.yaml

@@ -1,6 +1,6 @@
 apiVersion: v2
 name: home-assistant
-version: 0.1.14
+version: 0.1.16
 description: Chart for Home Assistant
 keywords:
   - home-automation
@@ -9,4 +9,4 @@ sources:
 maintainers:
   - name: alexlebens
 icon: https://avatars.githubusercontent.com/u/13844975?s=200&v=4
-appVersion: v2024.5.3
+appVersion: v2024.5.4

charts/home-assistant/templates/ingress-route.yaml

@@ -18,7 +18,7 @@ spec:
       match: "Host(`{{ .Values.ingressRoute.host }}`)"
       middlewares:
         - name: "authentik-{{ .Release.Name }}"
-          namespace: {{ .Release.Namespace }}           
+          namespace: {{ .Release.Namespace }}
       priority: 10
       services:
         - kind: Service
@@ -30,7 +30,8 @@ spec:
       services:
         - kind: Service
           name: {{ .Values.ingressRoute.authentik.outpost }}
-          port: {{ .Values.ingressRoute.authentik.port }}    
+          port: {{ .Values.ingressRoute.authentik.port }}
+          namespace: {{ .Values.ingressRoute.authentik.namespace }}
 {{- end }}
 
 ---
@@ -54,7 +55,7 @@ spec:
       match: "Host(`{{ .Values.codeserver.ingressRoute.host }}`)"
       middlewares:
         - name: "authentik-{{ .Release.Name }}"
-          namespace: {{ .Release.Namespace }}      
+          namespace: {{ .Release.Namespace }}
       priority: 10
       services:
         - kind: Service
@@ -66,5 +67,6 @@ spec:
       services:
         - kind: Service
           name: {{ .Values.ingressRoute.authentik.outpost }}
-          port: {{ .Values.ingressRoute.authentik.port }}          
+          port: {{ .Values.ingressRoute.authentik.port }}
+          namespace: {{ .Values.ingressRoute.authentik.namespace }}
 {{- end }}

charts/home-assistant/values.yaml

@@ -3,7 +3,7 @@ deployment:
   strategy: Recreate
   image:
     repository: homeassistant/home-assistant
-    tag: 2024.5.3
+    tag: 2024.5.4
     imagePullPolicy: IfNotPresent
   env:
     TZ: UTC
@@ -22,8 +22,9 @@ ingressRoute:
   enabled: true
   host:
   authentik:
-    outpost:
+    outpost: ""
     port: 9000
+    namespace: ""
 metrics:
   enabled: false
   serviceMonitor:

charts/homepage/Chart.yaml

@@ -1,6 +1,6 @@
 apiVersion: v2
 name: homepage
-version: 0.0.14
+version: 0.0.15
 description: Chart for benphelps homepage
 keywords:
   - dashboard

charts/homepage/templates/ingress-route.yaml

@@ -30,3 +30,4 @@ spec:
         - kind: Service
           name: {{ .Values.ingressRoute.authentik.outpost }}
           port: {{ .Values.ingressRoute.authentik.port }}
+          namespace: {{ .Values.ingressRoute.authentik.namespace }}

charts/homepage/values.yaml

@@ -19,10 +19,11 @@ service:
   http:
     port: 3000
 ingressRoute:
-  host:
+  host: ""
   authentik:
-    outpost:
+    outpost: ""
     port: 9000
+    namespace: ""
 config:
   bookmarks:
   services:

charts/libation/Chart.yaml

@@ -1,6 +1,6 @@
 apiVersion: v2
 name: libation
-version: 0.0.6
+version: 0.0.7
 description: Import library from audible
 keywords:
   - audiobooks
@@ -10,4 +10,4 @@ sources:
 maintainers:
   - name: alexlebens
 icon: https://getlibation.com/images/libation-logo.png
-appVersion: "11.1.0"
+appVersion: "11.3.13"

charts/libation/values.yaml

@@ -2,7 +2,7 @@ job:
   schedule: "0 * * * *"
 image:
   repository: rmcrackan/libation
-  tag: "11.1.0"
+  tag: "11.3.13"
   pullPolicy: IfNotPresent
 persistence:
   config:

charts/mautrix-discord/Chart.yaml

@@ -1,6 +1,6 @@
 apiVersion: v2
 name: mautrix-discord
-version: 0.0.2
+version: 0.1.1
 description: Chart for Matrix Discord Bridge
 keywords:
   - matrix

charts/mautrix-discord/templates/_helpers.tpl

@@ -8,34 +8,3 @@ Helper for secret name
 {{- printf "mautrix-discord-config-secret" | trunc 63 | trimSuffix "-" }}
 {{- end }}
 {{- end }}
-
-{{/*
-Helper for registration secret name
-*/}}
-{{- define "mautrix-discord.registrationSecretName" -}}
-{{- if .Values.mautrixDiscord.existingRegistrationSecret }}
-{{- printf "%s" .Values.mautrixDiscord.existingRegistrationSecret -}}
-{{- else }}
-{{- printf "mautrix-discord-registration-secret" }}
-{{- end }}
-{{- end }}
-
-{{/*
-Generate registration.yaml if not from existing secret
-*/}}
-{{- define "mautrix-discord.registration-yaml" -}}
-id: {{ .Values.mautrixDiscord.config.appservice.id | quote }}
-as_token: {{ .Values.mautrixDiscord.config.appservice.as_token | quote }}
-hs_token: {{ .Values.mautrixDiscord.config.appservice.hs_token | quote }}
-namespaces:
-  users:
-    - regex: {{ printf "^@discordbot:%s$" (replace "." "\\." .Values.mautrixDiscord.config.homeserver.domain) }}
-      exclusive: true
-    - regex: {{ printf "^@%s:%s$" (replace "{{.}}" ".*" (tpl .Values.mautrixDiscord.config.bridge.username_template .)) (replace "." "\\." .Values.mautrixDiscord.config.homeserver.domain) }}
-      exclusive: true
-url: {{ .Values.mautrixDiscord.config.appservice.address | quote }}
-sender_localpart: {{ .Values.mautrixDiscord.registration.sender_localpart | quote }}
-rate_limited: {{ .Values.mautrixDiscord.registration.rate_limited }}
-de.sorunome.msc2409.push_ephemeral: true
-push_ephemeral: true
-{{- end -}}

charts/mautrix-discord/templates/deployment.yaml

@@ -62,19 +62,12 @@ spec:
               mountPath: /data/config.yaml
               subPath: config.yaml
               readOnly: true
-            - name: registration
-              mountPath: /data/registration.yaml
-              subPath: registration.yaml
-              readOnly: true
             - name: data
               mountPath: /data
       volumes:
         - name: config
           secret:
             secretName: {{ template "mautrix-discord.secretName" . }}
-        - name: registration
-          secret:
-            secretName: {{ template "mautrix-discord.registrationSecretName" . }}
         - name: data
           {{- if .Values.persistence.enabled }}
           persistentVolumeClaim:

charts/mautrix-discord/templates/secret.yaml

@@ -14,20 +14,3 @@ data:
   config.yaml: |
 {{ toYaml .Values.mautrixDiscord.config | indent 4 }}
 {{- end }}
-
----
-{{- if not .Values.mautrixDiscord.existingRegistrationSecret }}
-apiVersion: v1
-kind: Secret
-metadata:
-  name: mautrix-discord-registration-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: mautrix-discord-registration
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/version: {{ .Chart.AppVersion }}
-    app.kubernetes.io/component: web
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-data:
-  registration.yaml: {{ include "mautrix-discord.registration-yaml" . | b64enc | quote }}
-{{- end }}

charts/mautrix-discord/values.yaml

@@ -419,9 +419,3 @@ mautrixDiscord:
           max_size: 100
           max_backups: 10
           compress: true
-
-  # registration.yml contents
-  existingRegistrationSecret: ""
-  registration:
-    rate_limited: false
-    sender_localpart: discordbridgebot

charts/mautrix-whatsapp/Chart.yaml

@@ -1,6 +1,6 @@
 apiVersion: v2
 name: mautrix-whatsapp
-version: 0.0.3
+version: 0.1.1
 description: Chart for Matrix Whatsapp Bridge
 keywords:
   - matrix

charts/mautrix-whatsapp/templates/_helpers.tpl

@@ -8,34 +8,3 @@ Helper for secret name
 {{- printf "mautrix-whatsapp-config-secret" | trunc 63 | trimSuffix "-" }}
 {{- end }}
 {{- end }}
-
-{{/*
-Helper for registration secret name
-*/}}
-{{- define "mautrix-whatsapp.registrationSecretName" -}}
-{{- if .Values.mautrixWhatsapp.existingRegistrationSecret }}
-{{- printf "%s" .Values.mautrixWhatsapp.existingRegistrationSecret -}}
-{{- else }}
-{{- printf "mautrix-whatsapp-registration-secret" }}
-{{- end }}
-{{- end }}
-
-{{/*
-Generate registration.yaml if not from existing secret
-*/}}
-{{- define "mautrix-whatsapp.registration-yaml" -}}
-id: {{ .Values.mautrixWhatsapp.config.appservice.id | quote }}
-as_token: {{ .Values.mautrixWhatsapp.config.appservice.as_token | quote }}
-hs_token: {{ .Values.mautrixWhatsapp.config.appservice.hs_token | quote }}
-namespaces:
-  users:
-    - regex: {{ printf "^@whatsappbot:%s$" (replace "." "\\." .Values.mautrixWhatsapp.config.homeserver.domain) }}
-      exclusive: true
-    - regex: {{ printf "^@%s:%s$" (replace "{{.}}" ".*" (tpl .Values.mautrixWhatsapp.config.bridge.username_template .)) (replace "." "\\." .Values.mautrixWhatsapp.config.homeserver.domain) }}
-      exclusive: true
-url: {{ .Values.mautrixWhatsapp.config.appservice.address | quote }}
-sender_localpart: {{ .Values.mautrixWhatsapp.registration.sender_localpart | quote }}
-rate_limited: {{ .Values.mautrixWhatsapp.registration.rate_limited }}
-de.sorunome.msc2409.push_ephemeral: true
-push_ephemeral: true
-{{- end -}}

charts/mautrix-whatsapp/templates/deployment.yaml

@@ -62,19 +62,12 @@ spec:
               mountPath: /data/config.yaml
               subPath: config.yaml
               readOnly: true
-            - name: registration
-              mountPath: /data/registration.yaml
-              subPath: registration.yaml
-              readOnly: true
             - name: data
               mountPath: /data
       volumes:
         - name: config
           secret:
             secretName: {{ template "mautrix-whatsapp.secretName" . }}
-        - name: registration
-          secret:
-            secretName: {{ template "mautrix-whatsapp.registrationSecretName" . }}
         - name: data
           {{- if .Values.persistence.enabled }}
           persistentVolumeClaim:

charts/mautrix-whatsapp/templates/secret.yaml

@@ -14,20 +14,3 @@ data:
   config.yaml: |
 {{ toYaml .Values.mautrixWhatsapp.config | indent 4 }}
 {{- end }}
-
----
-{{- if not .Values.mautrixWhatsapp.existingRegistrationSecret }}
-apiVersion: v1
-kind: Secret
-metadata:
-  name: mautrix-whatsapp-registration-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: mautrix-whatsapp-registration
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/version: {{ .Chart.AppVersion }}
-    app.kubernetes.io/component: web
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-data:
-  registration.yaml: {{ include "mautrix-whatsapp.registration-yaml" . | b64enc | quote }}
-{{- end }}

charts/mautrix-whatsapp/values.yaml

@@ -524,9 +524,3 @@ mautrixWhatsapp:
           max_size: 100
           max_backups: 10
           compress: true
-
-  # registration.yml contents
-  existingRegistrationSecret: ""
-  registration:
-    rate_limited: false
-    sender_localpart: whatsappbridgebot

charts/mysql-cluster/Chart.yaml

@@ -1,6 +1,6 @@
 apiVersion: v2
 name: mysql-cluster
-version: 0.1.2
+version: 0.2.1
 description: Chart for a mysql cluster
 keywords:
   - database
@@ -12,4 +12,4 @@ sources:
 maintainers:
   - name: alexlebens
 icon: https://avatars.githubusercontent.com/u/2452804?s=48&v=4
-appVersion: 8.3.0-2.1.2
+appVersion: 8.4.0

charts/mysql-cluster/values.yaml

@@ -29,7 +29,7 @@ cluster:
   exisitingCredentialsSecret: ""
 
   image:
-    version: 8.3.0-2.1.2
+    version: 8.4.0
     pullPolicy: IfNotPresent
 
   router:
@@ -54,6 +54,7 @@ cluster:
       [mysqld]
       core_file
       local_infile=off
+      mysql_native_password=ON
 
   datadirVolumeClaimTemplate:
     storageClassName: ""

charts/outline/Chart.yaml

@@ -1,6 +1,6 @@
 apiVersion: v2
 name: outline
-version: 0.6.1
+version: 0.6.3
 description: Chart for Outline wiki
 keywords:
   - wiki
@@ -14,5 +14,5 @@ icon: https://avatars.githubusercontent.com/u/1765001?s=48&v=4
 dependencies:
   - name: redis
     repository: https://charts.bitnami.com/bitnami
-    version: 19.3.2
+    version: 19.3.4
 appVersion: v0.76.1

charts/postgres-cluster/Chart.yaml

@@ -1,6 +1,6 @@
 apiVersion: v2
 name: postgres-cluster
-version: 2.5.0
+version: 3.1.0
 description: Chart for cloudnative-pg cluster
 keywords:
   - database

charts/postgres-cluster/templates/_backup.tpl

@@ -3,7 +3,7 @@
 backup:
   retentionPolicy: {{ .Values.backup.retentionPolicy }}
   barmanObjectStore:
-    destinationPath: "s3://{{ .Values.backup.endpointBucket }}/{{ .Values.kubernetesClusterName }}/{{ include "cluster.backupName" . }}"
+    destinationPath: {{ .Values.backup.destinationPath }}
     endpointURL: {{ .Values.backup.endpointURL }}
     {{- if .Values.backup.endpointCA }}
     endpointCA:

charts/postgres-cluster/templates/_bootstrap.tpl

@@ -63,7 +63,7 @@ externalClusters:
   - name: {{ include "cluster.recoveryServerName" . }}
     barmanObjectStore:
       serverName: {{ include "cluster.recoveryServerName" . }}
-      destinationPath: "s3://{{ .Values.recovery.endpointBucket }}/{{ .Values.kubernetesClusterName }}/postgresql/{{ include "cluster.recoveryInstanceName" . }}"
+      destinationPath: {{ .Values.recovery.destinationPath }}
       endpointURL: {{ .Values.recovery.endpointURL }}
       {{- with .Values.recovery.endpointCA }}
       endpointCA:

charts/postgres-cluster/values.yaml

@@ -15,15 +15,12 @@ type: postgresql
 # * `replica` - Create database as a replica from another CNPG cluster
 mode: standalone
 
-# Generates bucket name and path for recovery and backup, creates: <endpointBucket>/<clusterName>/postgresql/{{ .Release.Name }}
-kubernetesClusterName: ""
-
 cluster:
   instances: 3
 
   image:
     repository: ghcr.io/cloudnative-pg/postgresql
-    tag: "16.2"
+    tag: "16.3"
     pullPolicy: IfNotPresent
 
   # The UID and GID of the postgres user inside the image
@@ -84,7 +81,8 @@ cluster:
   # BootstrapInitDB is the configuration of the bootstrap process when initdb is used.
   # See: https://cloudnative-pg.io/documentation/current/bootstrap/
   # See: https://cloudnative-pg.io/documentation/current/cloudnative-pg.v1/#postgresql-cnpg-io-v1-bootstrapinitdb
-  initdb: {}
+  initdb:
+    {}
     # database: app
     # owner: app
     # secret: "" # Name of the secret containing the initial credentials for the owner of the user database. If empty a new secret will be created from scratch
@@ -96,10 +94,9 @@ recovery:
   pitrTarget:
     time: ""
 
-  # Overrides the provider specific default endpoint. Defaults to:
-  # S3: https://s3.<region>.amazonaws.com"
+  # S3 https endpoint and the s3:// path
   endpointURL: ""
-  endpointBucket: ""
+  destinationPath: ""
 
   # Specifies secret that contains a CA bundle to validate a privately signed certificate, should contain the key ca-bundle.crt
   endpointCA: ""
@@ -140,7 +137,7 @@ replica:
   # If type microservice only one database is allowed, default is app as standard in cnpg clusters
   importDatabases:
     - app
-  
+
   # If type microservice no roles are imported and ignored
   importRoles: []
 
@@ -160,9 +157,11 @@ replica:
 backup:
   enabled: false
 
-  # Overrides the provider specific default endpoint
+  # S3 endpoint starting with "https://"
   endpointURL: ""
-  endpointBucket: ""
+
+  # S3 path starting with "s3://"
+  destinationPath: ""
 
   # Specifies secret that contains a CA bundle to validate a privately signed certificate, should contain the key ca-bundle.crt
   endpointCA: ""

charts/taiga/Chart.yaml

@@ -1,6 +1,6 @@
 apiVersion: v2
 name: taiga
-version: 0.2.2
+version: 0.2.3
 description: Chart for Taiga
 keywords:
   - kanban
@@ -14,11 +14,11 @@ maintainers:
 icon: https://avatars.githubusercontent.com/u/6905422?s=200&v=4
 dependencies:
   - name: rabbitmq
-    version: 14.1.4
+    version: 14.1.5
     repository: https://charts.bitnami.com/bitnami
     alias: async-rabbitmq
   - name: rabbitmq
-    version: 14.1.4
+    version: 14.1.5
     repository: https://charts.bitnami.com/bitnami
     alias: events-rabbitmq
 appVersion: 6.7.7

charts/tubearchivist/Chart.yaml

@@ -1,6 +1,6 @@
 apiVersion: v2
 name: tubearchivist
-version: 0.2.7
+version: 0.2.9
 description: Chart for Tube Archivist
 keywords:
   - download
@@ -14,9 +14,9 @@ maintainers:
 icon: https://avatars.githubusercontent.com/u/102734415?s=48&v=4
 dependencies:
   - name: redis
-    version: 19.3.2
+    version: 19.3.4
     repository: https://charts.bitnami.com/bitnami
   - name: elasticsearch
-    version: 21.0.5
+    version: 21.0.6
     repository: https://charts.bitnami.com/bitnami
 appVersion: v0.4.7