chore: Update manifests after change

This commit is contained in:
2026-04-20 20:33:41 +00:00
parent 5cd883eecb
commit 1007439a31
33 changed files with 58 additions and 84 deletions

View File

@@ -41,7 +41,7 @@ rules:
- apiGroups:
- ""
resourceNames:
- argocd-notifications-secret
- argocd-notifications-ntfy
resources:
- secrets
verbs:

View File

@@ -20,8 +20,8 @@ data:
connectors:
- config:
issuer: https://authentik.alexlebens.net/application/o/argocd/
clientID: $argocd-oidc-secret:client
clientSecret: $argocd-oidc-secret:secret
clientID: $argocd-oidc-authentik:client
clientSecret: $argocd-oidc-authentik:secret
insecureEnableGroups: true
scopes:
- openid

View File

@@ -22,7 +22,7 @@ spec:
metadata:
annotations:
checksum/cmd-params: 28bda454bf23a1640b602544df6cb8c4bf480761dceb9a9dbb352a0a570f56cf
checksum/cm: e8ec80c49fe04086a874935f714e529f8fea42e2cc30f811c41c4bf6946cbe15
checksum/cm: 6373746e5f0032d699666641a31e84a7cdc215b4f7e17f0f675058f66cc2f5ae
labels:
helm.sh/chart: argo-cd-9.5.2
app.kubernetes.io/name: argocd-dex-server

View File

@@ -45,7 +45,7 @@ spec:
- --metrics-port=9001
- --namespace=argocd
- --argocd-repo-server=argocd-repo-server:8081
- --secret-name=argocd-notifications-secret
- --secret-name=argocd-notifications-ntfy
env:
- name: ARGOCD_NOTIFICATIONS_CONTROLLER_LOGLEVEL
valueFrom:

View File

@@ -22,7 +22,7 @@ spec:
metadata:
annotations:
checksum/cmd-params: 28bda454bf23a1640b602544df6cb8c4bf480761dceb9a9dbb352a0a570f56cf
checksum/cm: e8ec80c49fe04086a874935f714e529f8fea42e2cc30f811c41c4bf6946cbe15
checksum/cm: 6373746e5f0032d699666641a31e84a7cdc215b4f7e17f0f675058f66cc2f5ae
labels:
helm.sh/chart: argo-cd-9.5.2
app.kubernetes.io/name: argocd-repo-server

View File

@@ -22,7 +22,7 @@ spec:
metadata:
annotations:
checksum/cmd-params: 28bda454bf23a1640b602544df6cb8c4bf480761dceb9a9dbb352a0a570f56cf
checksum/cm: e8ec80c49fe04086a874935f714e529f8fea42e2cc30f811c41c4bf6946cbe15
checksum/cm: 6373746e5f0032d699666641a31e84a7cdc215b4f7e17f0f675058f66cc2f5ae
labels:
helm.sh/chart: argo-cd-9.5.2
app.kubernetes.io/name: argocd-server

View File

@@ -1,26 +0,0 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: argocd-gitea-repo-infrastructure-secret
namespace: argocd
labels:
app.kubernetes.io/name: argocd-gitea-repo-infrastructure-secret
app.kubernetes.io/instance: argocd
app.kubernetes.io/part-of: argocd
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
data:
- secretKey: type
remoteRef:
key: /cl01tl/argocd/credentials/repo/infrastructure
property: type
- secretKey: url
remoteRef:
key: /cl01tl/argocd/credentials/repo/infrastructure
property: url
- secretKey: sshPrivateKey
remoteRef:
key: /cl01tl/argocd/credentials/repo/infrastructure
property: sshPrivateKey

View File

@@ -1,18 +1,18 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: argocd-notifications-secret
name: argocd-notifications-ntfy
namespace: argocd
labels:
app.kubernetes.io/name: argocd-notifications-secret
app.kubernetes.io/name: argocd-notifications-ntfy
app.kubernetes.io/instance: argocd
app.kubernetes.io/part-of: argocd
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
name: openbao
data:
- secretKey: ntfy-token
remoteRef:
key: /ntfy/user/cl01tl
key: /cl01tl/ntfy/users/cl01tl
property: token

View File

@@ -1,22 +1,22 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: argocd-oidc-secret
name: argocd-oidc-authentik
namespace: argocd
labels:
app.kubernetes.io/name: argocd-oidc-secret
app.kubernetes.io/name: argocd-oidc-authentik
app.kubernetes.io/instance: argocd
app.kubernetes.io/part-of: argocd
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
name: openbao
data:
- secretKey: secret
remoteRef:
key: /authentik/oidc/argocd
key: /cl01tl/authentik/oidc/argocd
property: secret
- secretKey: client
remoteRef:
key: /authentik/oidc/argocd
key: /cl01tk/authentik/oidc/argocd
property: client

View File

@@ -42,7 +42,7 @@ rules:
- apiGroups:
- ""
resourceNames:
- argocd-notifications-secret
- argocd-notifications-ntfy
resources:
- secrets
verbs:

View File

@@ -23,7 +23,7 @@ spec:
metadata:
annotations:
checksum/cmd-params: 28bda454bf23a1640b602544df6cb8c4bf480761dceb9a9dbb352a0a570f56cf
checksum/cm: e8ec80c49fe04086a874935f714e529f8fea42e2cc30f811c41c4bf6946cbe15
checksum/cm: 6373746e5f0032d699666641a31e84a7cdc215b4f7e17f0f675058f66cc2f5ae
labels:
helm.sh/chart: argo-cd-9.5.2
app.kubernetes.io/name: argocd-application-controller

View File

@@ -4,7 +4,7 @@ metadata:
name: audiobookshelf-config-apprise
namespace: audiobookshelf
labels:
app.kubernetes.io/name: audiobookshelf/templates/external-secret.yaml
app.kubernetes.io/name: audiobookshelf-config-apprise
app.kubernetes.io/instance: audiobookshelf
app.kubernetes.io/part-of: audiobookshelf
spec:

View File

@@ -4,7 +4,7 @@ metadata:
name: audiobookshelf-audiobooks-nfs-storage
namespace: audiobookshelf
labels:
app.kubernetes.io/name: audiobookshelf/templates/persistent-volume.yaml
app.kubernetes.io/name: audiobookshelf-audiobooks-nfs-storage
app.kubernetes.io/instance: audiobookshelf
app.kubernetes.io/part-of: audiobookshelf
spec:

View File

@@ -4,7 +4,7 @@ metadata:
name: audiobookshelf-books-nfs-storage
namespace: audiobookshelf
labels:
app.kubernetes.io/name: audiobookshelf/templates/persistent-volume.yaml
app.kubernetes.io/name: audiobookshelf-books-nfs-storage
app.kubernetes.io/instance: audiobookshelf
app.kubernetes.io/part-of: audiobookshelf
spec:

View File

@@ -4,7 +4,7 @@ metadata:
name: audiobookshelf-podcasts-nfs-storage
namespace: audiobookshelf
labels:
app.kubernetes.io/name: audiobookshelf/templates/persistent-volume.yaml
app.kubernetes.io/name: audiobookshelf-podcasts-nfs-storage
app.kubernetes.io/instance: audiobookshelf
app.kubernetes.io/part-of: audiobookshelf
spec:

View File

@@ -4,11 +4,11 @@ metadata:
name: audiobookshelf-audiobooks-nfs-storage
namespace: audiobookshelf
labels:
app.kubernetes.io/name: audiobookshelf/templates/persistent-volume-claim.yaml
app.kubernetes.io/name: audiobookshelf-audiobooks-nfs-storage
app.kubernetes.io/instance: audiobookshelf
app.kubernetes.io/part-of: audiobookshelf
spec:
volumeName: audiobookshelf/templates/persistent-volume-claim.yaml
volumeName: audiobookshelf-audiobooks-nfs-storage
storageClassName: nfs-client
accessModes:
- ReadWriteMany

View File

@@ -4,11 +4,11 @@ metadata:
name: audiobookshelf-books-nfs-storage
namespace: audiobookshelf
labels:
app.kubernetes.io/name: audiobookshelf/templates/persistent-volume-claim.yaml
app.kubernetes.io/name: audiobookshelf-books-nfs-storage
app.kubernetes.io/instance: audiobookshelf
app.kubernetes.io/part-of: audiobookshelf
spec:
volumeName: audiobookshelf/templates/persistent-volume-claim.yaml
volumeName: audiobookshelf-books-nfs-storage
storageClassName: nfs-client
accessModes:
- ReadWriteMany

View File

@@ -4,11 +4,11 @@ metadata:
name: audiobookshelf-podcasts-nfs-storage
namespace: audiobookshelf
labels:
app.kubernetes.io/name: audiobookshelf/templates/persistent-volume-claim.yaml
app.kubernetes.io/name: audiobookshelf-podcasts-nfs-storage
app.kubernetes.io/instance: audiobookshelf
app.kubernetes.io/part-of: audiobookshelf
spec:
volumeName: audiobookshelf/templates/persistent-volume-claim.yaml
volumeName: audiobookshelf-podcasts-nfs-storage
storageClassName: nfs-client
accessModes:
- ReadWriteMany

View File

@@ -44,7 +44,7 @@ spec:
valueFrom:
secretKeyRef:
key: key
name: authentik-key-secret
name: authentik-key
- name: AUTHENTIK_POSTGRESQL__HOST
valueFrom:
secretKeyRef:

View File

@@ -45,7 +45,7 @@ spec:
valueFrom:
secretKeyRef:
key: key
name: authentik-key-secret
name: authentik-key
- name: AUTHENTIK_POSTGRESQL__HOST
valueFrom:
secretKeyRef:

View File

@@ -1,16 +1,16 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: authentik-key-secret
name: authentik-key
namespace: authentik
labels:
app.kubernetes.io/name: authentik-key-secret
app.kubernetes.io/name: authentik-key
app.kubernetes.io/instance: authentik
app.kubernetes.io/part-of: authentik
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
name: openbao
data:
- secretKey: key
remoteRef:

View File

@@ -5,9 +5,9 @@ metadata:
namespace: authentik
labels:
app.kubernetes.io/name: authentik-tailscale
tailscale.com/proxy-class: no-metrics
app.kubernetes.io/instance: authentik
app.kubernetes.io/part-of: authentik
tailscale.com/proxy-class: no-metrics
annotations:
tailscale.com/experimental-forward-cluster-traffic-via-ingress: "true"
spec:

View File

@@ -68,7 +68,7 @@ spec:
valueFrom:
secretKeyRef:
key: key
name: bazarr-key-secret
name: bazarr-key
- name: ENABLE_ADDITIONAL_METRICS
value: "false"
- name: ENABLE_UNKNOWN_QUEUE_ITEMS

View File

@@ -1,16 +1,16 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: bazarr-key-secret
name: bazarr-key
namespace: bazarr
labels:
app.kubernetes.io/name: bazarr-key-secret
app.kubernetes.io/name: bazarr-key
app.kubernetes.io/instance: bazarr
app.kubernetes.io/part-of: bazarr
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
name: openbao
data:
- secretKey: key
remoteRef:

View File

@@ -22,5 +22,5 @@ spec:
cloudflare:
email: alexanderlebens@gmail.com
apiTokenSecretRef:
name: cloudflare-api-token
name: cert-manager-cloudflare-api-token
key: api-token

View File

@@ -1,18 +1,18 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: cloudflare-api-token
name: cert-manager-cloudflare-api-token
namespace: cert-manager
labels:
app.kubernetes.io/name: cloudflare-api-token
app.kubernetes.io/name: cert-manager-cloudflare-api-token
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/part-of: cert-manager
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
name: openbao
data:
- secretKey: api-token
remoteRef:
key: /cloudflare/alexlebens.net/clusterissuer
key: /cloudflare/alexlebens.net/cl01tl-issuer-certificate
property: token

View File

@@ -87,12 +87,12 @@ spec:
valueFrom:
secretKeyRef:
key: client
name: dawarich-oidc-secret
name: dawarich-oidc-authentik
- name: OIDC_CLIENT_SECRET
valueFrom:
secretKeyRef:
key: secret
name: dawarich-oidc-secret
name: dawarich-oidc-authentik
- name: OIDC_PROVIDER_NAME
value: Authentik
- name: OIDC_AUTO_REGISTER
@@ -107,7 +107,7 @@ spec:
valueFrom:
secretKeyRef:
key: key
name: dawarich-key-secret
name: dawarich-key
- name: RAILS_LOG_TO_STDOUT
value: "true"
- name: SELF_HOSTED

View File

@@ -1,16 +1,16 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: dawarich-key-secret
name: dawarich-key
namespace: dawarich
labels:
app.kubernetes.io/name: dawarich-key-secret
app.kubernetes.io/name: dawarich-key
app.kubernetes.io/instance: dawarich
app.kubernetes.io/part-of: dawarich
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
name: openbao
data:
- secretKey: key
remoteRef:

View File

@@ -1,22 +1,22 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: dawarich-oidc-secret
name: dawarich-oidc-authentik
namespace: dawarich
labels:
app.kubernetes.io/name: dawarich-oidc-secret
app.kubernetes.io/name: dawarich-oidc-authentik
app.kubernetes.io/instance: dawarich
app.kubernetes.io/part-of: dawarich
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
name: openbao
data:
- secretKey: client
remoteRef:
key: /authentik/oidc/dawarich
key: /cl01tl/authentik/oidc/dawarich
property: client
- secretKey: secret
remoteRef:
key: /authentik/oidc/dawarich
key: /cl01tl/authentik/oidc/dawarich
property: secret

View File

@@ -46,7 +46,7 @@ spec:
value: America/Chicago
- name: MEDIA_HOST_DIR
value: /media
image: ghcr.io/frederikemmer/medialyze:0.7.1@sha256:c28cfd5cafe2b34136efaba5ba825440a2160cda3116ecb266454eac07a37e49
image: ghcr.io/frederikemmer/medialyze:0.8.0@sha256:80aa5ce70d8644ce8321f97856a1c0ede5dfeaaba305c514ceefebf89c8985ef
name: main
resources:
requests:

View File

@@ -34,7 +34,7 @@ spec:
hostPID: false
dnsPolicy: ClusterFirst
containers:
- image: harbor.alexlebens.net/images/site-documentation:0.26.0@sha256:fbd3167788a75a637aef0be6ef32bef685ce4af59f45e955cc6eb57ed8b1fd87
- image: harbor.alexlebens.net/images/site-documentation:0.27.0@sha256:dafa3c8aa9401009c299bb274d140acc10d8531dd40c8253783b1f8ed8519d76
name: main
resources:
requests:

View File

@@ -60,7 +60,7 @@ spec:
value: "8266"
- name: webUIPort
value: "8265"
image: ghcr.io/haveagitgat/tdarr:2.69.01@sha256:29995d5fd044fd3e1493942970c42c6fdf9be0ded36ec3a527b2493f39a8c6df
image: ghcr.io/haveagitgat/tdarr:2.70.01@sha256:4d48a46fb984b29e07cf4fd66cf7d3c8bd7c2c8dd662d09b4e20e11ae93e52fc
name: main
resources:
requests:

View File

@@ -69,7 +69,7 @@ spec:
value: tdarr-api
- name: serverPort
value: "8266"
image: ghcr.io/haveagitgat/tdarr_node:2.69.01@sha256:ab37d6a90a7f4654c6543117b923f3930e258e40e73f127ba34634082c722e8c
image: ghcr.io/haveagitgat/tdarr_node:2.70.01@sha256:60176a6ffc7584edde5420b7e1816f60227aa166f159b58a721d34564075c6e4
name: main
resources:
limits: