Merge pull request 'Automated Manifest Update' (#5563) from auto/update-manifests into manifests

Reviewed-on: #5563

clusters/cl01tl/manifests/dependency-track/Cluster-dependency-track-postgresql-18-cluster.yaml

@@ -54,6 +54,4 @@ spec:
   bootstrap:
     initdb:
       database: app
-      postInitSQL:
-        - ALTER DATABASE app SET READ_COMMITTED_SNAPSHOT ON;
       owner: app

clusters/cl01tl/manifests/grafana-operator/GrafanaDashboard-grafana-dashboard-version-checker-internal.yaml

@@ -0,0 +1,17 @@
+apiVersion: grafana.integreatly.org/v1beta1
+kind: GrafanaDashboard
+metadata:
+  name: grafana-dashboard-version-checker-internal
+  namespace: grafana-operator
+  labels:
+    app.kubernetes.io/name: grafana-dashboard-version-checker-internal
+    app.kubernetes.io/instance: grafana-operator
+    app.kubernetes.io/part-of: grafana-operator
+spec:
+  instanceSelector:
+    matchLabels:
+      app: grafana-main
+  contentCacheDuration: 6h
+  folderUID: grafana-folder-service
+  resyncPeriod: 6h
+  url: http://gitea-http.gitea:3000/alexlebens/grafana-dashboards/raw/branch/main/dashboards/service/version-checker-internal.json

clusters/cl01tl/manifests/grafana-operator/GrafanaDashboard-grafana-dashboard-version-checker.yaml

@@ -0,0 +1,17 @@
+apiVersion: grafana.integreatly.org/v1beta1
+kind: GrafanaDashboard
+metadata:
+  name: grafana-dashboard-version-checker
+  namespace: grafana-operator
+  labels:
+    app.kubernetes.io/name: grafana-dashboard-version-checker
+    app.kubernetes.io/instance: grafana-operator
+    app.kubernetes.io/part-of: grafana-operator
+spec:
+  instanceSelector:
+    matchLabels:
+      app: grafana-main
+  contentCacheDuration: 6h
+  folderUID: grafana-folder-service
+  resyncPeriod: 6h
+  url: http://gitea-http.gitea:3000/alexlebens/grafana-dashboards/raw/branch/main/dashboards/service/version-checker.json

clusters/cl01tl/manifests/paperless-ngx/Deployment-paperless-ngx.yaml

@@ -76,7 +76,7 @@ spec:
             - name: PAPERLESS_URL
               value: https://paperless-ngx.alexlebens.net
             - name: PAPERLESS_ALLOWED_HOSTS
-              value: paperless-ngx.alexlebens.net paperless-ngx.paperless-ngx
+              value: paperless-ngx.paperless-ngx
             - name: PAPERLESS_ADMIN_USER
               valueFrom:
                 secretKeyRef:

clusters/cl01tl/manifests/version-checker/ClusterRole-version-checker.yaml

@@ -0,0 +1,19 @@
+kind: ClusterRole
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  labels:
+    app.kubernetes.io/name: version-checker
+    helm.sh/chart: version-checker-v0.10.0
+    app.kubernetes.io/instance: version-checker
+    app.kubernetes.io/version: "v0.10.0"
+    app.kubernetes.io/managed-by: Helm
+  name: version-checker
+rules:
+  - apiGroups:
+      - ""
+    resources:
+      - "pods"
+    verbs:
+      - "get"
+      - "list"
+      - "watch"

clusters/cl01tl/manifests/version-checker/ClusterRoleBinding-version-checker.yaml

@@ -0,0 +1,18 @@
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  labels:
+    app.kubernetes.io/name: version-checker
+    helm.sh/chart: version-checker-v0.10.0
+    app.kubernetes.io/instance: version-checker
+    app.kubernetes.io/version: "v0.10.0"
+    app.kubernetes.io/managed-by: Helm
+  name: version-checker
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: version-checker
+subjects:
+  - kind: ServiceAccount
+    name: version-checker
+    namespace: version-checker

clusters/cl01tl/manifests/version-checker/Deployment-version-checker.yaml

@@ -0,0 +1,85 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: version-checker
+  labels:
+    app.kubernetes.io/name: version-checker
+    helm.sh/chart: version-checker-v0.10.0
+    app.kubernetes.io/instance: version-checker
+    app.kubernetes.io/version: "v0.10.0"
+    app.kubernetes.io/managed-by: Helm
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: version-checker
+      app.kubernetes.io/instance: version-checker
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/name: version-checker
+        helm.sh/chart: version-checker-v0.10.0
+        app.kubernetes.io/instance: version-checker
+        app.kubernetes.io/version: "v0.10.0"
+        app.kubernetes.io/managed-by: Helm
+      annotations:
+        prometheus.io/path: "/metrics"
+        prometheus.io/scrape: "true"
+        prometheus.io/port: "8080"
+        enable.version-checker.io/version-checker: "true"
+    spec:
+      serviceAccountName: version-checker
+      containers:
+        - name: version-checker
+          image: "quay.io/jetstack/version-checker:v0.10.0@sha256:ea7a85422684479d0e51a41efc8edb12bed8f43aa89ab59dfea45aa92b2e8c8d"
+          imagePullPolicy: IfNotPresent
+          ports:
+            - name: metrics
+              containerPort: 8080
+          command: ["version-checker"]
+          args:
+            - "--image-cache-timeout=30m"
+            - "--log-level=info"
+            - "--metrics-serving-address=0.0.0.0:8080"
+            - "--test-all-containers=true"
+          resources:
+            requests:
+              cpu: 1m
+              memory: 40Mi
+          securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
+            readOnlyRootFilesystem: true
+            runAsNonRoot: true
+            runAsUser: 65534
+            seccompProfile:
+              type: RuntimeDefault
+          livenessProbe:
+            httpGet:
+              path: /readyz
+              port: 8080
+            initialDelaySeconds: 3
+            periodSeconds: 3
+          readinessProbe:
+            httpGet:
+              path: /readyz
+              port: 8080
+            initialDelaySeconds: 3
+            periodSeconds: 3
+          env:
+            - name: VERSION_CHECKER_SELFHOSTED_HOST_Harbor
+              valueFrom:
+                secretKeyRef:
+                  name: version-checker
+                  key: selfhosted.Harbor.host
+            - name: VERSION_CHECKER_SELFHOSTED_HOST_Gitea
+              valueFrom:
+                secretKeyRef:
+                  name: version-checker
+                  key: selfhosted.Gitea.host
+      volumes:
+        - name: version-checker
+          secret:
+            secretName: version-checker

clusters/cl01tl/manifests/version-checker/Prometheus-version-checker.yaml

@@ -0,0 +1,18 @@
+apiVersion: monitoring.coreos.com/v1
+kind: Prometheus
+metadata:
+  name: version-checker
+  labels:
+    prometheus: version-checker
+    app.kubernetes.io/name: version-checker
+    helm.sh/chart: version-checker-v0.10.0
+    app.kubernetes.io/instance: version-checker
+    app.kubernetes.io/version: "v0.10.0"
+    app.kubernetes.io/managed-by: Helm
+spec:
+  replicas: 1
+  serviceAccountName: version-checker-prometheus
+  version: v2.20.1
+  serviceMonitorSelector:
+    matchLabels:
+      app: version-checker

clusters/cl01tl/manifests/version-checker/Role-prometheus.yaml

@@ -0,0 +1,15 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: prometheus
+rules:
+  - apiGroups: [""]
+    resources:
+      - services
+      - endpoints
+      - pods
+    verbs: ["get", "list", "watch"]
+  - apiGroups: [""]
+    resources:
+      - configmaps
+    verbs: ["get"]

clusters/cl01tl/manifests/version-checker/RoleBinding-prometheus.yaml

@@ -0,0 +1,11 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: prometheus
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: prometheus
+subjects:
+  - kind: ServiceAccount
+    name: version-checker-prometheus

clusters/cl01tl/manifests/version-checker/Secret-version-checker.yaml

@@ -0,0 +1,14 @@
+apiVersion: v1
+data:
+  selfhosted.Harbor.host: aHR0cDovL2hhcmJvci1yZWdpc3RyeS5oYXJib3I6NTAwMA==
+  selfhosted.Gitea.host: aHR0cDovL2dpdGVhLWh0dHAuZ2l0ZWE6MzAwMA==
+kind: Secret
+metadata:
+  name: version-checker
+  labels:
+    app.kubernetes.io/name: version-checker
+    helm.sh/chart: version-checker-v0.10.0
+    app.kubernetes.io/instance: version-checker
+    app.kubernetes.io/version: "v0.10.0"
+    app.kubernetes.io/managed-by: Helm
+type: Opaque

clusters/cl01tl/manifests/version-checker/Service-version-checker.yaml

@@ -0,0 +1,20 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: version-checker
+  labels:
+    app: version-checker
+    app.kubernetes.io/name: version-checker
+    helm.sh/chart: version-checker-v0.10.0
+    app.kubernetes.io/instance: version-checker
+    app.kubernetes.io/version: "v0.10.0"
+    app.kubernetes.io/managed-by: Helm
+spec:
+  ports:
+    - port: 8080
+      targetPort: 8080
+      protocol: TCP
+      name: web
+  selector:
+    app.kubernetes.io/name: version-checker
+    app.kubernetes.io/instance: version-checker

clusters/cl01tl/manifests/version-checker/ServiceAccount-version-checker-prometheus.yaml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: version-checker-prometheus

clusters/cl01tl/manifests/version-checker/ServiceAccount-version-checker.yaml

@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/name: version-checker
+    helm.sh/chart: version-checker-v0.10.0
+    app.kubernetes.io/instance: version-checker
+    app.kubernetes.io/version: "v0.10.0"
+    app.kubernetes.io/managed-by: Helm
+  name: version-checker