Automated Manifest Update (#2189)

This PR contains newly rendered Kubernetes manifests automatically generated by the CI workflow.

Reviewed-on: #2189
Co-authored-by: gitea-bot <gitea-bot@alexlebens.net>
Co-committed-by: gitea-bot <gitea-bot@alexlebens.net>

clusters/cl01tl/manifests/backrest/backrest.yaml

@@ -53,27 +53,6 @@ spec:
 ---
 kind: PersistentVolumeClaim
 apiVersion: v1
-metadata:
-  name: backrest-data
-  labels:
-    app.kubernetes.io/instance: backrest
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: backrest
-    helm.sh/chart: backrest-4.4.0
-  annotations:
-    helm.sh/resource-policy: keep
-  namespace: backrest
-spec:
-  accessModes:
-    - "ReadWriteOnce"
-  resources:
-    requests:
-      storage: "10Gi"
-  storageClassName: "ceph-block"
----
-# Source: backrest/charts/backrest/templates/common.yaml
-kind: PersistentVolumeClaim
-apiVersion: v1
 metadata:
   name: backrest-config
   labels:
@@ -92,6 +71,27 @@ spec:
       storage: "1Gi"
   storageClassName: "ceph-block"
 ---
+# Source: backrest/charts/backrest/templates/common.yaml
+kind: PersistentVolumeClaim
+apiVersion: v1
+metadata:
+  name: backrest-data
+  labels:
+    app.kubernetes.io/instance: backrest
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: backrest
+    helm.sh/chart: backrest-4.4.0
+  annotations:
+    helm.sh/resource-policy: keep
+  namespace: backrest
+spec:
+  accessModes:
+    - "ReadWriteOnce"
+  resources:
+    requests:
+      storage: "10Gi"
+  storageClassName: "ceph-block"
+---
 # Source: backrest/templates/persistent-volume-claim.yaml
 apiVersion: v1
 kind: PersistentVolumeClaim

clusters/cl01tl/manifests/cilium/cilium.yaml

@@ -51,8 +51,8 @@ metadata:
   name: cilium-ca
   namespace: kube-system
 data:
-  ca.crt: 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
+  ca.crt: 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
-  ca.key: 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
+  ca.key: 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
 ---
 # Source: cilium/charts/cilium/templates/hubble/tls-helm/relay-client-secret.yaml
 apiVersion: v1
@@ -62,9 +62,9 @@ metadata:
   namespace: kube-system
 type: kubernetes.io/tls
 data:
-  ca.crt:  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
+  ca.crt:  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
-  tls.crt: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSURTRENDQWpDZ0F3SUJBZ0lRVGRkUTE3bjJkNFVjWlgvK3JwZXJrVEFOQmdrcWhraUc5dzBCQVFzRkFEQVUKTVJJd0VBWURWUVFERXdsRGFXeHBkVzBnUTBFd0hoY05NalV4TWpBek1EUXhOalF3V2hjTk1qWXhNakF6TURReApOalF3V2pBak1TRXdId1lEVlFRRERCZ3FMbWgxWW1Kc1pTMXlaV3hoZVM1amFXeHBkVzB1YVc4d2dnRWlNQTBHCkNTcUdTSWIzRFFFQkFRVUFBNElCRHdBd2dnRUtBb0lCQVFEQnZVQUswR29OSG5tZUFvbUx0eEFUaVljS21FNU8KYWhWOTBlM0JSSWRsbDN5cXg2c3FURDhHS2xTN3B2MFcwd09nMTh3S29uQzRJTXYzc2NqOFcxSFVRV1ByQ0NySwp2a2ZSTE1YV2xwVWtwQXFxWXdndDJ2RVUwSGdkNmNpOU5MUG04ZURwdUVEU2QrZ0UralRadUM5SkVYNk1LdmtFCk5pcjY5Zm9xbGZuZlNmakE0N2liZHR4ZDh3c1ZPeDUvcy91aHRHYTNWZlJxTStiYW5WQ1dKVnpGdCt1bDZWQ1cKcmRYWTRWK1FzK2VJS0pDQlltZnhFV3BpalFvZFdsRTl2SW5sTjk5dmsvejIzVzBEVkcvWGVkWk5sdndYbU11Qgp6dThjUHJCeWhnNlZtS1RxVUQvT2lRdUQ1MDhhaWxyTUFQejJ5L2xzMStxYmpBNDFwTHNnbU5JM0FnTUJBQUdqCmdZWXdnWU13RGdZRFZSMFBBUUgvQkFRREFnV2dNQjBHQTFVZEpRUVdNQlFHQ0NzR0FRVUZCd01CQmdnckJnRUYKQlFjREFqQU1CZ05WSFJNQkFmOEVBakFBTUI4R0ExVWRJd1FZTUJhQUZJUFUwUmNlRHQ0VWV5Zit4SmU3Qkxydgo3TlYvTUNNR0ExVWRFUVFjTUJxQ0dDb3VhSFZpWW14bExYSmxiR0Y1TG1OcGJHbDFiUzVwYnpBTkJna3Foa2lHCjl3MEJBUXNGQUFPQ0FRRUFBWmNxeEVWcER0aFovbEtjaXJSUlVBNVl3MGRic0FNM2pzTmxYWFJ3bXY4VmY2RGQKb1JGWElrMEoxQVRnZ3pxMG9NR1BqTCs1ZEQ5bURSR0U1bmcxOWZsWVVTeUZxMzQ0TW91ZFVPbzE3S3hIZklmbgo3dUUvN2VsbFRuaHhLUTJFbjhPUmhoT0d6NitOU1ZkS0FIMUtZY2NiYVBLUjZKNTFqN2JQMndocEgvd2pJdWRqCk9wSXNvcG04eGVSZVd5KzJnZ0JjUXg0MDlUN0kwbHp4KzZOc0ZrVTdGay9jZC8xRThCR0tWalc1NEx0Q0VJeUkKREFEWVIwOTNmeThBUWk0ZEhkSmFmNE1NYVpPZ0lFeVFlYmo5MlQ1b0lKTmpWQ09rNXZtZFRUbkZPdXhJejhicQpGTDJxTTg2TkoyQ3JrQ0JONUI3T1FROVFRaHdpbkU3ZU9MTEFaUT09Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K
+  tls.crt: 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
-  tls.key: LS0tLS1CRUdJTiBSU0EgUFJJVkFURSBLRVktLS0tLQpNSUlFb3dJQkFBS0NBUUVBd2IxQUN0QnFEUjU1bmdLSmk3Y1FFNG1IQ3BoT1Rtb1ZmZEh0d1VTSFpaZDhxc2VyCktrdy9CaXBVdTZiOUZ0TURvTmZNQ3FKd3VDREw5N0hJL0Z0UjFFRmo2d2dxeXI1SDBTekYxcGFWSktRS3FtTUkKTGRyeEZOQjRIZW5JdlRTejV2SGc2YmhBMG5mb0JQbzAyYmd2U1JGK2pDcjVCRFlxK3ZYNktwWDUzMG40d09PNAptM2JjWGZNTEZUc2VmN1A3b2JSbXQxWDBhalBtMnAxUWxpVmN4YmZycGVsUWxxM1YyT0Zma0xQbmlDaVFnV0puCjhSRnFZbzBLSFZwUlBieUo1VGZmYjVQODl0MXRBMVJ2MTNuV1RaYjhGNWpMZ2M3dkhENndjb1lPbFppazZsQS8Kem9rTGcrZFBHb3BhekFEODlzdjViTmZxbTR3T05hUzdJSmpTTndJREFRQUJBb0lCQUdXS3VEOHl2dkxEVDBERwoyYXAxdHlKV1NZWC9EOE8vakNZVzJrTWFsTkJsVm56NEM3a3Vueld2Q0J3V1NMNG11TmNiWTZFTFJJTHRCWnA3Ci92aHRNSFZNRkgrQ0YxT042WHd6dURsaFVTZ1VKbGJwY3NiOTRxOWpHQ0d0ZjMzVFdwc25tUmRHY0FzZnQyYXMKY1BqUHRWRFpyM2J0cXZoUEg3WExLR1FibVF3ekFsdThJbXpNWWZlZktlQ2x6NnU1aThmZGlURS9sQnJ5UWJ6dQp6NGpucHZBNDRzOStOQUhrenFmRTNoS1pKM1F5Z2pSK2FXL1pkUU53ekJwdTlNdTlVTkpUSTluTU5FazZoOWowCmZSVEUyQy9pNUszaDIyY2JYaXNWYkZ1a05DTDBTL3FvUkxvbWxGWktwZnN5M3RXbVdEVEE2cXNpbm9JdUltZloKS0s5bGdXa0NnWUVBMVozZmxzb0dSSEtrYU0rdnZwUXkrdFEwYW1ia3Q2YXgrSkkrbjRFcGQzTjM3V3V5WmxzbwprcmZoSVNaR256SldlZkVBNHRVU201cWFjcGhhaUpvUkNpblJZbDJiNlJaNEFWK1BybmNGMGRqblNQak56WGxXClQ1dWtETWp3WERzZm93eTJ0bjVMWGpvOWlzN0pyQXArc2VYaEdvNEkyVGFNYlN3c2QzQUlrUlVDZ1lFQTZDM0EKaWx4UHNyS0xlY2dLTFJaTUFsbVJURnd1c0F5QmozemJUUWRkdVU0cXhqN3F6VmdrSDlYSVJDUy9lUTFpMTg5Ngo2WndpVHBXVkQ2NWEyMG50dUtqNE5zaENaYjVZWHE3VmFaQ09DU3p0MmsxSm96S0IzcnludXhRNWFMSHpvMUYvCmcvRzRpTlErSDFPdkJOenBkd1hLRXh0KzZpQnJaclh0Q0ZwYXNSc0NnWUFKelIrWUxKYlRCeXVSLzQyQndnMEEKdzBIUWEvNHNpd0o1ZEVSWlR6VFczVDV3YjFPVkxMT1UzOGo5bTJMOEpQUWd6alVMTTFtU09DckQvVWVTSXZlTApMdFlEbkdYdDhQRDZweWJSaTNhQjVXRGZVVU1vSFZ3ZmRQVzIvSFZDMWhlaWhJL1JtY1BkZy9DVThONEIvYzFJClhsTFF4Qm1WMWRIbHBIUTUyck1aN1FLQmdGTDJsa2hhZC9nSXFLSVpndGxka0VkK3JkYTFVZEdDaG9FNVFqdWkKR0RGdzV3UHowMzhRc2NmV1lqdEhUa3Y1Sm9xckR1YU83Z3RhaytzSWlGcTNiZ1NBREVHM0NWTEYwMW54Nnp4UApkUkYrUm5ldENsVVFaU3VzQ2R0bGZLWVdnRktwZW9FeFRKbElEZkt2dW1ob2I5d2g2M1VzYkF0SkRsZWpSbEduCng2UmxBb0dCQUtRSHpFSTdpMEJ5NXE3VFpkTlh5eXllVWZUaGRKRmgyckZuSjVJUFRLVmtIYVNHRnZzR2pyVnoKS1VQd3V0c2pHTlVkVGJSUGVKN29XSTM0VEtTTWxvcHliM3I3L0psMmh3MFRvd2RMSTJHZUJRRkh5LzltRUJoNQpkc3ZONFFKc0Y4ZU1YZEhxcGluVWtONjEvcU9EeWNZT0tEZ0lqUjlacHZORDFZOW1ueUNpCi0tLS0tRU5EIFJTQSBQUklWQVRFIEtFWS0tLS0tCg==
+  tls.key: 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
 ---
 # Source: cilium/charts/cilium/templates/hubble/tls-helm/server-secret.yaml
 apiVersion: v1
@@ -74,9 +74,9 @@ metadata:
   namespace: kube-system
 type: kubernetes.io/tls
 data:
-  ca.crt:  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
+  ca.crt:  LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSURGRENDQWZ5Z0F3SUJBZ0lSQVBtN1dvRjdtdWZhbE1ha2tNdEJZU2d3RFFZSktvWklodmNOQVFFTEJRQXcKRkRFU01CQUdBMVVFQXhNSlEybHNhWFZ0SUVOQk1CNFhEVEkxTVRJd016QTBORGMwTVZvWERUSTRNVEl3TWpBMApORGMwTVZvd0ZERVNNQkFHQTFVRUF4TUpRMmxzYVhWdElFTkJNSUlCSWpBTkJna3Foa2lHOXcwQkFRRUZBQU9DCkFROEFNSUlCQ2dLQ0FRRUFyMVRDY0tnL2NoQWVIZWtBM1NNc0RmbXQyUEo0OTJuOHhKMEh4dW5Zc21MZSs1ejYKL3Z5bXZ4Z3B3OEJIQVNyWEhtL1JMcXdhU0JRb0RwY2tnRWZyOWZVRUtLdzBqOWFEU0Y0UzRQQVFNcGRyWlkzWgp2Zzg5dFk5OHZ2b2tmSlQ1VFZJQ3JsdHdwMGRPNjFNQVlyRW1VdVl3Y0sxQ2daYURvWEJqc3FYNTB4UlpSQ2wxCk96VjN3QWVyZmRYYmFhTW1pblZsbDZKcmtsaU5BWDNJZy84b1grejUwNlAxOTErT1NZWVNzQnF3c091ZWVTbVEKTitPT3FZall5eVB6Si9ZaUdmYzMrZk9wb3lWcE1KelpoUDRPcW90ZTc3eTdtV2MwT3V3UjdIT1FqZHl0cjNRdwpSRkgvK2NqRk9mMzg3dCtaYmh3S3pLaXBkbjB2azZoWmNIY0kzd0lEQVFBQm8yRXdYekFPQmdOVkhROEJBZjhFCkJBTUNBcVF3SFFZRFZSMGxCQll3RkFZSUt3WUJCUVVIQXdFR0NDc0dBUVVGQndNQ01BOEdBMVVkRXdFQi93UUYKTUFNQkFmOHdIUVlEVlIwT0JCWUVGRGJuNkQ3S1FXNmU5Sk9id0VicDd4NUV3cWk0TUEwR0NTcUdTSWIzRFFFQgpDd1VBQTRJQkFRQ2F4MTZpcy9sRnU2Tnl2SEFDVHpDNGhkaXY0UmtvWTY5NlhDc1NuS2l6c0NnbzgwYkRzb21MCkl0OW9DOGtTTm14ZVBwWHJGcmZLNHFlZTRNUXBqa2xULzZ1UTBrZzJYbXdUYTNqSHJ1bFNaMFRvTWdLZktmYWgKZzlncXhvQnBPMHVaRWpWODBoeHlqZVVKS1pZSm5wSTY5ZVNhWnREVDVCeGlqbS8xN3pTZERBWWtGYVpoMEJZWgpQd2JCdzBqSnBQRFNFaWt6ZlJUdjgydkdDRVJUdStmcFdQVE40MXNEa2psMDVyelN2Zm5GdzMwNEU1OXNiVUYrCkJod2hqcURzR0dyUXZmaEFnYlpheGJxSW9ocVZwRFB3T2xjTzRDdit0UzRKRm84alVwandMaUt4T3VwN3dkVjcKbmgzWmUrblNhOE9YV3FyK1lCRHpmZzNJS0JLQXhpWEwKLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo=
-  tls.crt: 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
+  tls.crt: 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
-  tls.key: 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
+  tls.key: LS0tLS1CRUdJTiBSU0EgUFJJVkFURSBLRVktLS0tLQpNSUlFcEFJQkFBS0NBUUVBb1Y2RkFzWEtiNjcxbGh1bENHeG1kSG9YUWY0WFJrRHk1QlQwWDJualRZUTVLZEYvClp4RENsdzF2TFc4VEdHb1E3UG9lSHg0cWhKazBGeUoxQzhHeTRqR0pUOWNtcjhKaTZydGRseVk4VTVtSmpWcWoKZExqVEg2eUozcWZFbCt1RkxaeHdBZ0tpMU9Vd2lRVE91UXR1aW9SSE94MTlSRVl6ZUEvQlZ4M1JlM2FFK1hmNAo0YUZkZmo3VlZ5bHNvdUZ4YUtJa2FjdnduS0RJUTRtTURwQ1AvWDlVT0pONm9rMVM0M21aTW9IUXIvQ2kwRnFzCmdQTVhUR3NOb0tJZmZTTG9NVTVhbStaRmVLYit1S0lHcW5seVByMFkrK1dSZGRDWTdNc3FVaTVsdTdna3JTYmoKN2lrZ3FvbGp0Y1RqYWRTT0NMTmdJZ091QzlnTzRiQkNzcEp1V1FJREFRQUJBb0lCQVFDY3BpanhIQmo4ZWhlbAo5SWdzdVM1c2Ura0FBeTJNNFpmb21mN3djTlpiZGJRWVNHc3BIamdJY3Q0dWVObE1wZ3B3UWczam4yRWUvNnAxCm10bU01Q2hITkZkYnpqeWIrbFFVRW5jME44WHdVZWdaOUpjZ3hCc1BjR3NXWGo2V1MrZ284dWc0eTE1TzFYNWMKUlBKNDZBUVRLMzRLZ1FJTnVTaFZzTlc3UUJNUGlkL0ZETnFRQ2hOTnhJZHZLVU5IY05PTldVa3FmZUlrVmNRRAo1ZXE0NE95QzIvMkFSZ2ZsRGswaHY0ZUpIdENMWmx2Q0tLNTJ5c1U5Z1orZmN4MFFHbUFsVTQybGJmeXR4OTE5ClRESE11RXZGWWJJb3QxTUVDWFB2c2hlU1hybkJwYW5WUVk5VEZQeVBzZWxxRFY1ZENWMDRTQzdHd3FoblVQelAKMEgrRTEyNEJBb0dCQU1vTlhUSThBcklua3ZjRlE1ZUJSWXowVGFDSkQ2OUlNNGp3eEkrSGhTYm84bE90YjlQMwp5c2NsWEJ2L2s1V3V6UWkzYXJWYVRKWnBiRE9TRTc2M2Z3RkdYZEk4RC8zTjRHNjZBMlZ5SHpEMzhGcVpBeHd5CkZPTVZIaDZzOWpUSWJBMDc1VzlYVFpxWENZc3RtTStMTkNuR0ROMHY5bWJzMzQvRDNwdWxSaHF4QW9HQkFNeDAKWmp2SmNpcnR3dGtiTDZjeEU0MEgxN2RSK0xVbEFuT3M3ZGV3aWxXalFJZlhmNTdVeUw3MVlueFBvcmd2MWpPbApwSjZjZzJZZVlHc25jZXRDN2k2YnpJUFUybkN5RkxGOEhDbW9tRGlQNW1MQ3RpNGtEaWJrcEEwUFdDd3ZRV3djCkJCakhELzhwRHJqQ2FTeTZSSXFQcVg0em1uU1ZRRnpjcElvVEZLZ3BBb0dBRVFHRzhvOXllcVF5RG5CMisrMTUKZVIrbTJQZ3dSY1NCOGVpeDRwSzVka2pzL0hZQWo0cXZtb3RlY1V6Vmt5ZWZRamlOMXEyKy9IbnJEWHdpQlU5VQpkVHNDOG9yem5aMFNZcjl0UWNDVk4zM20wUGxIOWJ1UlhudU1pWEJ0V0l2MTdEYzZYR0N3dTI0eTgyL25DTERpCnR4RmdTODJabzVnVVNQbG5aeHBHQ0VFQ2dZQkhSMDFkQ3A0QzJXRlV6MldOcEU1c25JOVlHZnZiSzB2dmlCcGoKVitqaWNrZk5GQlFxQzRUeERodUh1enUvZXUzeWs0MFF2d0FRV2diRFZMMGloL01Cek05QUpyVUJGUlNoeStNRgpvd0Z1dHJ4Yk1nYlJqMEJmenRaaXR6YkdNTE5lUFdZd1BUWVdmdm5pNytRNjg3VnhtU1ErR3o5OTVZcksxU0dJCkFaN3lBUUtCZ1FDYTMxVG5RQUw3RFNodU95WTc4bVFQNExoWEgzZXlDeVZPZzVJZ1MvYXdBN2lpSkt0MXFUTGIKdHFZeXYzVlhGMm51RUh6L0VvVWhHbXVtQ2N0U0hYQ2JaN1BGcWFWeEUwN3J0aWdGUFJ3UXNIMnFEdWU2bkRVcQpsYmNEMklaVXJ0NzNlZ1l2T2dGWGVKSVhZTWl0YWlQMzJBS2NHSkRkcG1iVjVhR2RUU0dJa3c9PQotLS0tLUVORCBSU0EgUFJJVkFURSBLRVktLS0tLQo=
 ---
 # Source: cilium/charts/cilium/templates/cilium-configmap.yaml
 apiVersion: v1

clusters/cl01tl/manifests/harbor/harbor.yaml

@@ -74,9 +74,9 @@ metadata:
     app.kubernetes.io/version: "2.14.0"
 type: Opaque
 data:
-  tls.crt: "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"
+  tls.crt: "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"
-  tls.key: "LS0tLS1CRUdJTiBSU0EgUFJJVkFURSBLRVktLS0tLQpNSUlFcEFJQkFBS0NBUUVBeWw2VnlwQllxTGFONFZza2xtWnpnS2o3LzJ6OHE5R1g2YUlBT1h3cERGTUNaalhwCnUranBMYjhvYUpydndxNi9Wc2xvRDBzM0dXa2JGckh0ZVZvYUlodFIxSG81eUxOSWxmTEVaakNqbVJGd08ycWIKYnI0cnhxR2lhMFkvSEpXK3Q0NnRyeXF4UWJqbUFCc0dqQkN3dlljQnplMXI3bkF4VG53RWIvVFgybVdKVnoxcwp2SXlRN1I2M0ZkSEh2cGtXQ0FVTU1WT3hac1RHdkpSS29rWXBaZEd2bmttMzczQTc0VmJxR3k2RE9zaWloT09zCmlFMjNmNkJSellzYjIweEEvSEp1YWFkUCszTjYxeXdEVW9RLzRkaHM2M2owY0Y4ZnF1b3VicW1keDh4eFVpOVUKSFdNMHAveVpMYk9zb1hPeWJ4a29wUDhlRlJyU1ZyWFVWQUx3T1FJREFRQUJBb0lCQVFDeU9DSkt4bHlPR0ZkVApBK1Z3M3NFUnFjQmo3aU9IWFlvZm94LzNnRFRXT2JSL056T2szVFdkcUI5NklCak9wdjZ5KzZTODgweVBBRlZ1CjR6dDBCN25FRjdNMUlIOExGWGp6TlYxcGNhUmlCVTJGeGhra3FpMzdQQlhCeTVlQklROVlzRHFkYlVlMXpaUWcKdTZ4RVpkNkF5d2ozeGdPcmRQcTNWOWpBa0N3WWxJaVI5NkZkVFpuaGtvczM4MVJqdXNSRmZCUmdhMkVHK3FkUgpqUmx1bUFTU01Fd1RQbkt3U3dvMmYvWWE3NHo3cUwzRDlpd2U2b2EyRld0eC9mWGNTVGZ5eHJacG8wNnMrbEdOCmNGTTZ4Y3FiMURRRm9CV213cFZjQmxlREtpdmJxWWtnbmI3bWltbXdYZXlkbUNmblpKY2lOSDIzdlFqT2JWcU8KMTIxTkRsYVJBb0dCQVBsVExEMXd0ZEJYVGljTk8rKzc2TlI1M21oRUtDUDI4WXhBNDVvcXZsd2g0aDR0d3BObApvZ3d2MDhGMDg2a3ZrbDZmM09nR0RTTXBZMW9ZNVlJeU1KK0ZxeXBaVUlkMndaN2x6WVdnLzFsUy9RK2VuZXFPClgrRG95cmo2Z2NzZnB6K0dsUCsycENzWXRpTnZsUzdka1FyWDZpSlZQYW5uajBIdjRoWXFwdXB2QW9HQkFNL0oKbHFTMWYxSzJYcFdPMklqZURnN3JHWmQ0SlFqa3JQZG1TcHNvK3VGa2owRVdmbG9TVnkzbEJvMi9sL3JuMDZGLwpvWU50RjQxM3pqY0hsYSt2clRRRGFHVFU4dUJjeFUrYXRXZ0VRM1k1MTU4ZGQxVGRwaktCTk1CV0UwZ3NDSksxCjZNbUQ3Uk95SDFFTjRra3VCQjlvYjJBYVlCbk5aRFUwNlBHbGwwUFhBb0dBVVBMZUpEeVo2MEROVVFTTTl6TU4KVHg4YVJNUU1QRkVLNzd5SnFSNURtK29zWGh3QlZwWGkzUTRTTkhkaVBRWURBZEhwaVRPZHhGTEZ2UlRrUHpkSQpiaUthQmkvbFkzWDlPemZsV0lPREpGODdabnpiVExKWkVzN0NNdml5ZDE2WmtKaURlOXF5eG9OSmI0dms1Y2h1Ck5SVVJJWUNIZXNpQnpLaXp3UHFzSXVVQ2dZRUFnU3JydnBBbENpSGNRbFIrUHZicS9sTWZvWTFLV0hEdkpRd3QKcks2WTVxeEFjVkd1VWdlOHNnY0JQL1N1WVliamhDMTNGZUFuR0FZMTV2ZU1FWjYvcU9uRlo0a0pRbmZwSUVjbwpKZlVnaXNvQ1JDTnBIeFI2VUVNSnE5YldQYk5CMFJITUdCa3VzMk96SEF2cGMxeHJxNnFjTWIyenA5YUtTSmtQCmhjaE9kQmtDZ1lBcWI5bG5rdmNzMEVSTzFCb01PbWxxVzhpYlZzZ1NnYzdYNU9PazlZbVBPdHZQc1ZTVmRvb20KUWtxdFRFTGZwVXA5NUVpNnlIbDRST1l5czVIS1FMQUdnTDJGWFN2RmNKblpiWE1yVFVtVWxvdUhWdUZBVzdHUgpXVWNOelU4bGM0QzNTbUxrdzRUbzJuNzc3UExtZWgxdXAxNHBYTTUyYitpcUl0K2JueFMxRmc9PQotLS0tLUVORCBSU0EgUFJJVkFURSBLRVktLS0tLQo="
+  tls.key: "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"
-  ca.crt: "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"
+  ca.crt: "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"
 ---
 # Source: harbor/charts/harbor/templates/registry/registry-secret.yaml
 apiVersion: v1
@@ -1268,7 +1268,7 @@ spec:
         app.kubernetes.io/component: nginx
       annotations:
         checksum/configmap: 55921b41f4478ded4d60da7edb83b828382ba722214816271ce3ffd2a77aed35
-        checksum/secret: 8567ed7b0e04c9535c71cacd4b23a5ff4b7008574092ec4cf65e33bfd9e0b17a
+        checksum/secret: d7cbfaf80e2422e5607f47c317a6822352928575c7033776779eeb4a488eedf0
     spec:
       securityContext:
         runAsUser: 10000

clusters/cl01tl/manifests/komodo/komodo.yaml

@@ -109,57 +109,6 @@ spec:
 # Source: komodo/charts/komodo/templates/common.yaml
 apiVersion: apps/v1
 kind: Deployment
-metadata:
-  name: komodo-ferretdb-2
-  labels:
-    app.kubernetes.io/controller: ferretdb-2
-    app.kubernetes.io/instance: komodo
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: komodo
-    helm.sh/chart: komodo-4.4.0
-  namespace: komodo
-spec:
-  revisionHistoryLimit: 3
-  replicas: 1
-  strategy:
-    type: Recreate
-  selector:
-    matchLabels:
-      app.kubernetes.io/controller: ferretdb-2
-      app.kubernetes.io/name: komodo
-      app.kubernetes.io/instance: komodo
-  template:
-    metadata:
-      labels: 
-        app.kubernetes.io/controller: ferretdb-2
-        app.kubernetes.io/instance: komodo
-        app.kubernetes.io/name: komodo
-    spec: 
-      enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
-      hostIPC: false
-      hostNetwork: false
-      hostPID: false
-      dnsPolicy: ClusterFirst
-      containers: 
-        - env:
-          - name: FERRETDB_POSTGRESQL_URL
-            valueFrom:
-              secretKeyRef:
-                key: uri
-                name: komodo-postgresql-17-fdb-cluster-app
-          image: ghcr.io/ferretdb/ferretdb:2.7.0
-          imagePullPolicy: IfNotPresent
-          name: main
-          resources:
-            requests:
-              cpu: 10m
-              memory: 128Mi
----
-# Source: komodo/charts/komodo/templates/common.yaml
-apiVersion: apps/v1
-kind: Deployment
 metadata:
   name: komodo-main
   labels:
@@ -285,6 +234,57 @@ spec:
           persistentVolumeClaim:
             claimName: komodo-syncs
 ---
+# Source: komodo/charts/komodo/templates/common.yaml
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: komodo-ferretdb-2
+  labels:
+    app.kubernetes.io/controller: ferretdb-2
+    app.kubernetes.io/instance: komodo
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: komodo
+    helm.sh/chart: komodo-4.4.0
+  namespace: komodo
+spec:
+  revisionHistoryLimit: 3
+  replicas: 1
+  strategy:
+    type: Recreate
+  selector:
+    matchLabels:
+      app.kubernetes.io/controller: ferretdb-2
+      app.kubernetes.io/name: komodo
+      app.kubernetes.io/instance: komodo
+  template:
+    metadata:
+      labels: 
+        app.kubernetes.io/controller: ferretdb-2
+        app.kubernetes.io/instance: komodo
+        app.kubernetes.io/name: komodo
+    spec: 
+      enableServiceLinks: false
+      serviceAccountName: default
+      automountServiceAccountToken: true
+      hostIPC: false
+      hostNetwork: false
+      hostPID: false
+      dnsPolicy: ClusterFirst
+      containers: 
+        - env:
+          - name: FERRETDB_POSTGRESQL_URL
+            valueFrom:
+              secretKeyRef:
+                key: uri
+                name: komodo-postgresql-17-fdb-cluster-app
+          image: ghcr.io/ferretdb/ferretdb:2.7.0
+          imagePullPolicy: IfNotPresent
+          name: main
+          resources:
+            requests:
+              cpu: 10m
+              memory: 128Mi
+---
 # Source: komodo/charts/postgresql-17-fdb-cluster/templates/cluster.yaml
 apiVersion: postgresql.cnpg.io/v1
 kind: Cluster

clusters/cl01tl/manifests/matrix-synapse/matrix-synapse.yaml

@@ -14,7 +14,7 @@ stringData:
   config.yaml: |
     ## Registration ##
 
-    registration_shared_secret: "o61stwMR2ytdK3w9CtrjQJos"
+    registration_shared_secret: "arSpBc1NIUWBdw0B1l5gBZns"
 
     ## API Configuration ##
 
@@ -552,7 +552,7 @@ spec:
     metadata:
       annotations:
         checksum/config: e77b3b25301ed2f4b5eac2f16ed5d058374ed1ffcd7e9ca4d8eef44867647feb
-        checksum/secrets: 1379c893132491c2215656107a91e3edd3059f6e46bf6d81fc706e81ff9f7454
+        checksum/secrets: baa114801e675282534274953a14345f1154ca25fc468388e78788b4c5e4b2b2
       labels:
         app.kubernetes.io/name: matrix-synapse
         app.kubernetes.io/instance: matrix-synapse

clusters/cl01tl/manifests/qbittorrent/qbittorrent.yaml

@@ -254,27 +254,6 @@ spec:
 ---
 kind: PersistentVolumeClaim
 apiVersion: v1
-metadata:
-  name: qbittorrent-theme-data
-  labels:
-    app.kubernetes.io/instance: qbittorrent
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: qbittorrent
-    helm.sh/chart: qbittorrent-4.4.0
-  annotations:
-    helm.sh/resource-policy: keep
-  namespace: qbittorrent
-spec:
-  accessModes:
-    - "ReadWriteOnce"
-  resources:
-    requests:
-      storage: "1Gi"
-  storageClassName: "ceph-block"
----
-# Source: qbittorrent/charts/qbittorrent/templates/common.yaml
-kind: PersistentVolumeClaim
-apiVersion: v1
 metadata:
   name: qbittorrent-qbit-manage-config-data
   labels:
@@ -314,6 +293,27 @@ spec:
       storage: "1Gi"
   storageClassName: "ceph-block"
 ---
+# Source: qbittorrent/charts/qbittorrent/templates/common.yaml
+kind: PersistentVolumeClaim
+apiVersion: v1
+metadata:
+  name: qbittorrent-theme-data
+  labels:
+    app.kubernetes.io/instance: qbittorrent
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: qbittorrent
+    helm.sh/chart: qbittorrent-4.4.0
+  annotations:
+    helm.sh/resource-policy: keep
+  namespace: qbittorrent
+spec:
+  accessModes:
+    - "ReadWriteOnce"
+  resources:
+    requests:
+      storage: "1Gi"
+  storageClassName: "ceph-block"
+---
 # Source: qbittorrent/templates/persistent-volume-claim.yaml
 apiVersion: v1
 kind: PersistentVolumeClaim
@@ -355,6 +355,38 @@ spec:
 # Source: qbittorrent/charts/qbittorrent/templates/common.yaml
 apiVersion: v1
 kind: Service
+metadata:
+  name: qbittorrent
+  labels:
+    app.kubernetes.io/instance: qbittorrent
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: qbittorrent
+    app.kubernetes.io/service: qbittorrent
+    helm.sh/chart: qbittorrent-4.4.0
+  namespace: qbittorrent
+spec:
+  type: ClusterIP
+  ports:
+    - port: 9999
+      targetPort: 9999
+      protocol: TCP
+      name: health
+    - port: 8080
+      targetPort: 8080
+      protocol: TCP
+      name: http
+    - port: 9022
+      targetPort: 9022
+      protocol: TCP
+      name: metrics
+  selector:
+    app.kubernetes.io/controller: main
+    app.kubernetes.io/instance: qbittorrent
+    app.kubernetes.io/name: qbittorrent
+---
+# Source: qbittorrent/charts/qbittorrent/templates/common.yaml
+apiVersion: v1
+kind: Service
 metadata:
   name: qbittorrent-qbit-manage
   labels:
@@ -405,115 +437,6 @@ spec:
     app.kubernetes.io/name: qbittorrent
 ---
 # Source: qbittorrent/charts/qbittorrent/templates/common.yaml
-apiVersion: v1
-kind: Service
-metadata:
-  name: qbittorrent
-  labels:
-    app.kubernetes.io/instance: qbittorrent
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: qbittorrent
-    app.kubernetes.io/service: qbittorrent
-    helm.sh/chart: qbittorrent-4.4.0
-  namespace: qbittorrent
-spec:
-  type: ClusterIP
-  ports:
-    - port: 9999
-      targetPort: 9999
-      protocol: TCP
-      name: health
-    - port: 8080
-      targetPort: 8080
-      protocol: TCP
-      name: http
-    - port: 9022
-      targetPort: 9022
-      protocol: TCP
-      name: metrics
-  selector:
-    app.kubernetes.io/controller: main
-    app.kubernetes.io/instance: qbittorrent
-    app.kubernetes.io/name: qbittorrent
----
-# Source: qbittorrent/charts/qbittorrent/templates/common.yaml
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: qbittorrent-qui
-  labels:
-    app.kubernetes.io/controller: qui
-    app.kubernetes.io/instance: qbittorrent
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: qbittorrent
-    helm.sh/chart: qbittorrent-4.4.0
-  namespace: qbittorrent
-spec:
-  revisionHistoryLimit: 3
-  replicas: 1
-  strategy:
-    type: Recreate
-  selector:
-    matchLabels:
-      app.kubernetes.io/controller: qui
-      app.kubernetes.io/name: qbittorrent
-      app.kubernetes.io/instance: qbittorrent
-  template:
-    metadata:
-      labels: 
-        app.kubernetes.io/controller: qui
-        app.kubernetes.io/instance: qbittorrent
-        app.kubernetes.io/name: qbittorrent
-    spec: 
-      enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
-      hostIPC: false
-      hostNetwork: false
-      hostPID: false
-      dnsPolicy: ClusterFirst
-      containers: 
-        - env:
-          - name: QUI__METRICS_ENABLED
-            value: "true"
-          - name: QUI__METRICS_HOST
-            value: 0.0.0.0
-          - name: QUI__METRICS_PORT
-            value: "9074"
-          - name: QUI__OIDC_ENABLED
-            value: "true"
-          - name: QUI__OIDC_ISSUER
-            value: https://auth.alexlebens.dev/application/o/qui/
-          - name: QUI__OIDC_CLIENT_ID
-            valueFrom:
-              secretKeyRef:
-                key: client
-                name: qui-oidc-secret
-          - name: QUI__OIDC_CLIENT_SECRET
-            valueFrom:
-              secretKeyRef:
-                key: secret
-                name: qui-oidc-secret
-          - name: QUI__OIDC_REDIRECT_URL
-            value: https://qui.alexlebens.net/api/auth/oidc/callback
-          - name: QUI__OIDC_DISABLE_BUILT_IN_LOGIN
-            value: "false"
-          image: ghcr.io/autobrr/qui:v1.7.0
-          imagePullPolicy: IfNotPresent
-          name: qui
-          resources:
-            requests:
-              cpu: 10m
-              memory: 128Mi
-          volumeMounts:
-          - mountPath: /config
-            name: qui-config-data
-      volumes: 
-        - name: qui-config-data
-          persistentVolumeClaim:
-            claimName: qbittorrent-qui-config-data
----
-# Source: qbittorrent/charts/qbittorrent/templates/common.yaml
 apiVersion: apps/v1
 kind: Deployment
 metadata:
@@ -806,6 +729,83 @@ spec:
           persistentVolumeClaim:
             claimName: qbittorrent-nfs-storage
 ---
+# Source: qbittorrent/charts/qbittorrent/templates/common.yaml
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: qbittorrent-qui
+  labels:
+    app.kubernetes.io/controller: qui
+    app.kubernetes.io/instance: qbittorrent
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: qbittorrent
+    helm.sh/chart: qbittorrent-4.4.0
+  namespace: qbittorrent
+spec:
+  revisionHistoryLimit: 3
+  replicas: 1
+  strategy:
+    type: Recreate
+  selector:
+    matchLabels:
+      app.kubernetes.io/controller: qui
+      app.kubernetes.io/name: qbittorrent
+      app.kubernetes.io/instance: qbittorrent
+  template:
+    metadata:
+      labels: 
+        app.kubernetes.io/controller: qui
+        app.kubernetes.io/instance: qbittorrent
+        app.kubernetes.io/name: qbittorrent
+    spec: 
+      enableServiceLinks: false
+      serviceAccountName: default
+      automountServiceAccountToken: true
+      hostIPC: false
+      hostNetwork: false
+      hostPID: false
+      dnsPolicy: ClusterFirst
+      containers: 
+        - env:
+          - name: QUI__METRICS_ENABLED
+            value: "true"
+          - name: QUI__METRICS_HOST
+            value: 0.0.0.0
+          - name: QUI__METRICS_PORT
+            value: "9074"
+          - name: QUI__OIDC_ENABLED
+            value: "true"
+          - name: QUI__OIDC_ISSUER
+            value: https://auth.alexlebens.dev/application/o/qui/
+          - name: QUI__OIDC_CLIENT_ID
+            valueFrom:
+              secretKeyRef:
+                key: client
+                name: qui-oidc-secret
+          - name: QUI__OIDC_CLIENT_SECRET
+            valueFrom:
+              secretKeyRef:
+                key: secret
+                name: qui-oidc-secret
+          - name: QUI__OIDC_REDIRECT_URL
+            value: https://qui.alexlebens.net/api/auth/oidc/callback
+          - name: QUI__OIDC_DISABLE_BUILT_IN_LOGIN
+            value: "false"
+          image: ghcr.io/autobrr/qui:v1.7.0
+          imagePullPolicy: IfNotPresent
+          name: qui
+          resources:
+            requests:
+              cpu: 10m
+              memory: 128Mi
+          volumeMounts:
+          - mountPath: /config
+            name: qui-config-data
+      volumes: 
+        - name: qui-config-data
+          persistentVolumeClaim:
+            claimName: qbittorrent-qui-config-data
+---
 # Source: qbittorrent/templates/external-secret.yaml
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret

clusters/cl01tl/manifests/s3-exporter/s3-exporter.yaml

@@ -99,138 +99,6 @@ spec:
 ---
 apiVersion: apps/v1
 kind: Deployment
-metadata:
-  name: s3-exporter-garage-local
-  labels:
-    app.kubernetes.io/controller: garage-local
-    app.kubernetes.io/instance: s3-exporter
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: s3-exporter
-    helm.sh/chart: s3-exporter-4.4.0
-  namespace: s3-exporter
-spec:
-  revisionHistoryLimit: 3
-  replicas: 1
-  strategy:
-    type: Recreate
-  selector:
-    matchLabels:
-      app.kubernetes.io/controller: garage-local
-      app.kubernetes.io/name: s3-exporter
-      app.kubernetes.io/instance: s3-exporter
-  template:
-    metadata:
-      labels: 
-        app.kubernetes.io/controller: garage-local
-        app.kubernetes.io/instance: s3-exporter
-        app.kubernetes.io/name: s3-exporter
-    spec: 
-      enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
-      hostIPC: false
-      hostNetwork: false
-      hostPID: false
-      dnsPolicy: ClusterFirst
-      containers: 
-        - env:
-          - name: S3_NAME
-            value: garage-local
-          - name: S3_ENDPOINT
-            value: http://garage-main.garage:3900
-          - name: S3_ACCESS_KEY
-            valueFrom:
-              secretKeyRef:
-                key: AWS_ACCESS_KEY_ID
-                name: s3-garage-secret
-          - name: S3_SECRET_KEY
-            valueFrom:
-              secretKeyRef:
-                key: AWS_SECRET_ACCESS_KEY
-                name: s3-garage-secret
-          - name: S3_REGION
-            value: us-east-1
-          - name: LOG_LEVEL
-            value: debug
-          - name: S3_FORCE_PATH_STYLE
-            value: "true"
-          image: molu8bits/s3bucket_exporter:1.0.2
-          imagePullPolicy: IfNotPresent
-          name: main
-          resources:
-            requests:
-              cpu: 10m
-              memory: 64Mi
----
-# Source: s3-exporter/charts/s3-exporter/templates/common.yaml
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: s3-exporter-garage-remote
-  labels:
-    app.kubernetes.io/controller: garage-remote
-    app.kubernetes.io/instance: s3-exporter
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: s3-exporter
-    helm.sh/chart: s3-exporter-4.4.0
-  namespace: s3-exporter
-spec:
-  revisionHistoryLimit: 3
-  replicas: 1
-  strategy:
-    type: Recreate
-  selector:
-    matchLabels:
-      app.kubernetes.io/controller: garage-remote
-      app.kubernetes.io/name: s3-exporter
-      app.kubernetes.io/instance: s3-exporter
-  template:
-    metadata:
-      labels: 
-        app.kubernetes.io/controller: garage-remote
-        app.kubernetes.io/instance: s3-exporter
-        app.kubernetes.io/name: s3-exporter
-    spec: 
-      enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
-      hostIPC: false
-      hostNetwork: false
-      hostPID: false
-      dnsPolicy: ClusterFirst
-      containers: 
-        - env:
-          - name: S3_NAME
-            value: garage-remote
-          - name: S3_ENDPOINT
-            value: https://garage-ps10rp.boreal-beaufort.ts.net:3900
-          - name: S3_ACCESS_KEY
-            valueFrom:
-              secretKeyRef:
-                key: AWS_ACCESS_KEY_ID
-                name: s3-garage-secret
-          - name: S3_SECRET_KEY
-            valueFrom:
-              secretKeyRef:
-                key: AWS_SECRET_ACCESS_KEY
-                name: s3-garage-secret
-          - name: S3_REGION
-            value: us-east-1
-          - name: LOG_LEVEL
-            value: debug
-          - name: S3_FORCE_PATH_STYLE
-            value: "true"
-          image: molu8bits/s3bucket_exporter:1.0.2
-          imagePullPolicy: IfNotPresent
-          name: main
-          resources:
-            requests:
-              cpu: 10m
-              memory: 64Mi
----
-# Source: s3-exporter/charts/s3-exporter/templates/common.yaml
-apiVersion: apps/v1
-kind: Deployment
 metadata:
   name: s3-exporter-ceph-directus
   labels:
@@ -366,6 +234,138 @@ spec:
               cpu: 10m
               memory: 64Mi
 ---
+# Source: s3-exporter/charts/s3-exporter/templates/common.yaml
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: s3-exporter-garage-local
+  labels:
+    app.kubernetes.io/controller: garage-local
+    app.kubernetes.io/instance: s3-exporter
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: s3-exporter
+    helm.sh/chart: s3-exporter-4.4.0
+  namespace: s3-exporter
+spec:
+  revisionHistoryLimit: 3
+  replicas: 1
+  strategy:
+    type: Recreate
+  selector:
+    matchLabels:
+      app.kubernetes.io/controller: garage-local
+      app.kubernetes.io/name: s3-exporter
+      app.kubernetes.io/instance: s3-exporter
+  template:
+    metadata:
+      labels: 
+        app.kubernetes.io/controller: garage-local
+        app.kubernetes.io/instance: s3-exporter
+        app.kubernetes.io/name: s3-exporter
+    spec: 
+      enableServiceLinks: false
+      serviceAccountName: default
+      automountServiceAccountToken: true
+      hostIPC: false
+      hostNetwork: false
+      hostPID: false
+      dnsPolicy: ClusterFirst
+      containers: 
+        - env:
+          - name: S3_NAME
+            value: garage-local
+          - name: S3_ENDPOINT
+            value: http://garage-main.garage:3900
+          - name: S3_ACCESS_KEY
+            valueFrom:
+              secretKeyRef:
+                key: AWS_ACCESS_KEY_ID
+                name: s3-garage-secret
+          - name: S3_SECRET_KEY
+            valueFrom:
+              secretKeyRef:
+                key: AWS_SECRET_ACCESS_KEY
+                name: s3-garage-secret
+          - name: S3_REGION
+            value: us-east-1
+          - name: LOG_LEVEL
+            value: debug
+          - name: S3_FORCE_PATH_STYLE
+            value: "true"
+          image: molu8bits/s3bucket_exporter:1.0.2
+          imagePullPolicy: IfNotPresent
+          name: main
+          resources:
+            requests:
+              cpu: 10m
+              memory: 64Mi
+---
+# Source: s3-exporter/charts/s3-exporter/templates/common.yaml
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: s3-exporter-garage-remote
+  labels:
+    app.kubernetes.io/controller: garage-remote
+    app.kubernetes.io/instance: s3-exporter
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: s3-exporter
+    helm.sh/chart: s3-exporter-4.4.0
+  namespace: s3-exporter
+spec:
+  revisionHistoryLimit: 3
+  replicas: 1
+  strategy:
+    type: Recreate
+  selector:
+    matchLabels:
+      app.kubernetes.io/controller: garage-remote
+      app.kubernetes.io/name: s3-exporter
+      app.kubernetes.io/instance: s3-exporter
+  template:
+    metadata:
+      labels: 
+        app.kubernetes.io/controller: garage-remote
+        app.kubernetes.io/instance: s3-exporter
+        app.kubernetes.io/name: s3-exporter
+    spec: 
+      enableServiceLinks: false
+      serviceAccountName: default
+      automountServiceAccountToken: true
+      hostIPC: false
+      hostNetwork: false
+      hostPID: false
+      dnsPolicy: ClusterFirst
+      containers: 
+        - env:
+          - name: S3_NAME
+            value: garage-remote
+          - name: S3_ENDPOINT
+            value: https://garage-ps10rp.boreal-beaufort.ts.net:3900
+          - name: S3_ACCESS_KEY
+            valueFrom:
+              secretKeyRef:
+                key: AWS_ACCESS_KEY_ID
+                name: s3-garage-secret
+          - name: S3_SECRET_KEY
+            valueFrom:
+              secretKeyRef:
+                key: AWS_SECRET_ACCESS_KEY
+                name: s3-garage-secret
+          - name: S3_REGION
+            value: us-east-1
+          - name: LOG_LEVEL
+            value: debug
+          - name: S3_FORCE_PATH_STYLE
+            value: "true"
+          image: molu8bits/s3bucket_exporter:1.0.2
+          imagePullPolicy: IfNotPresent
+          name: main
+          resources:
+            requests:
+              cpu: 10m
+              memory: 64Mi
+---
 # Source: s3-exporter/templates/external-secret.yaml
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret

clusters/cl01tl/manifests/slskd/slskd.yaml

@@ -84,78 +84,6 @@ spec:
 ---
 apiVersion: apps/v1
 kind: Deployment
-metadata:
-  name: slskd-soularr
-  labels:
-    app.kubernetes.io/controller: soularr
-    app.kubernetes.io/instance: slskd
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: slskd
-    helm.sh/chart: slskd-4.4.0
-  namespace: slskd
-spec:
-  revisionHistoryLimit: 3
-  replicas: 1
-  strategy:
-    type: Recreate
-  selector:
-    matchLabels:
-      app.kubernetes.io/controller: soularr
-      app.kubernetes.io/name: slskd
-      app.kubernetes.io/instance: slskd
-  template:
-    metadata:
-      labels: 
-        app.kubernetes.io/controller: soularr
-        app.kubernetes.io/instance: slskd
-        app.kubernetes.io/name: slskd
-    spec: 
-      enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
-      securityContext: 
-        fsGroup: 1000
-        fsGroupChangePolicy: OnRootMismatch
-      hostIPC: false
-      hostNetwork: false
-      hostPID: false
-      dnsPolicy: ClusterFirst
-      containers: 
-        - env:
-          - name: TZ
-            value: US/Central
-          - name: PUID
-            value: "1000"
-          - name: PGID
-            value: "1000"
-          - name: SCRIPT_INTERVAL
-            value: "300"
-          image: mrusse08/soularr:latest@sha256:71a0b9e5a522d76bb0ffdb6d720d681fde22417b3a5acc9ecae61c89d05d8afc
-          imagePullPolicy: IfNotPresent
-          name: main
-          resources:
-            requests:
-              cpu: 10m
-              memory: 256Mi
-          volumeMounts:
-          - mountPath: /mnt/store
-            name: data
-          - mountPath: /data/config.ini
-            mountPropagation: None
-            name: soularr-config
-            readOnly: true
-            subPath: config.ini
-      volumes: 
-        - name: data
-          persistentVolumeClaim:
-            claimName: slskd-nfs-storage
-        - name: soularr-config
-          secret:
-            secretName: soularr-config-secret
----
-# Source: slskd/charts/slskd/templates/common.yaml
-apiVersion: apps/v1
-kind: Deployment
 metadata:
   name: slskd-main
   labels:
@@ -275,6 +203,78 @@ spec:
           secret:
             secretName: slskd-config-secret
 ---
+# Source: slskd/charts/slskd/templates/common.yaml
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: slskd-soularr
+  labels:
+    app.kubernetes.io/controller: soularr
+    app.kubernetes.io/instance: slskd
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: slskd
+    helm.sh/chart: slskd-4.4.0
+  namespace: slskd
+spec:
+  revisionHistoryLimit: 3
+  replicas: 1
+  strategy:
+    type: Recreate
+  selector:
+    matchLabels:
+      app.kubernetes.io/controller: soularr
+      app.kubernetes.io/name: slskd
+      app.kubernetes.io/instance: slskd
+  template:
+    metadata:
+      labels: 
+        app.kubernetes.io/controller: soularr
+        app.kubernetes.io/instance: slskd
+        app.kubernetes.io/name: slskd
+    spec: 
+      enableServiceLinks: false
+      serviceAccountName: default
+      automountServiceAccountToken: true
+      securityContext: 
+        fsGroup: 1000
+        fsGroupChangePolicy: OnRootMismatch
+      hostIPC: false
+      hostNetwork: false
+      hostPID: false
+      dnsPolicy: ClusterFirst
+      containers: 
+        - env:
+          - name: TZ
+            value: US/Central
+          - name: PUID
+            value: "1000"
+          - name: PGID
+            value: "1000"
+          - name: SCRIPT_INTERVAL
+            value: "300"
+          image: mrusse08/soularr:latest@sha256:71a0b9e5a522d76bb0ffdb6d720d681fde22417b3a5acc9ecae61c89d05d8afc
+          imagePullPolicy: IfNotPresent
+          name: main
+          resources:
+            requests:
+              cpu: 10m
+              memory: 256Mi
+          volumeMounts:
+          - mountPath: /mnt/store
+            name: data
+          - mountPath: /data/config.ini
+            mountPropagation: None
+            name: soularr-config
+            readOnly: true
+            subPath: config.ini
+      volumes: 
+        - name: data
+          persistentVolumeClaim:
+            claimName: slskd-nfs-storage
+        - name: soularr-config
+          secret:
+            secretName: soularr-config-secret
+---
 # Source: slskd/templates/external-secret.yaml
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret

clusters/cl01tl/manifests/talos/talos.yaml

@@ -186,6 +186,78 @@ spec:
 ---
 apiVersion: batch/v1
 kind: CronJob
+metadata:
+  name: etcd-defrag-defrag-3
+  labels:
+    app.kubernetes.io/controller: defrag-3
+    app.kubernetes.io/instance: talos
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: talos
+    helm.sh/chart: etcd-defrag-4.4.0
+  namespace: talos
+spec:
+  suspend: false
+  concurrencyPolicy: Forbid
+  startingDeadlineSeconds: 90
+  timeZone: US/Central
+  schedule: "20 0 * * 0"
+  successfulJobsHistoryLimit: 3
+  failedJobsHistoryLimit: 3
+  jobTemplate:
+    spec:
+      parallelism: 1
+      backoffLimit: 3
+      template:
+        metadata:
+          labels: 
+            app.kubernetes.io/controller: defrag-3
+            app.kubernetes.io/instance: talos
+            app.kubernetes.io/name: talos
+        spec: 
+          enableServiceLinks: false
+          serviceAccountName: default
+          automountServiceAccountToken: true
+          hostIPC: false
+          hostNetwork: false
+          hostPID: false
+          dnsPolicy: ClusterFirst
+          restartPolicy: Never
+          nodeSelector: 
+            node-role.kubernetes.io/control-plane: ""
+          tolerations: 
+            - effect: NoSchedule
+              key: node-role.kubernetes.io/control-plane
+              operator: Exists
+          containers: 
+            - args:
+              - etcd
+              - defrag
+              - -n
+              - 10.232.1.13
+              env:
+              - name: TALOSCONFIG
+                value: /tmp/.talos/config
+              image: ghcr.io/siderolabs/talosctl:v1.11.5
+              imagePullPolicy: IfNotPresent
+              name: main
+              resources:
+                requests:
+                  cpu: 100m
+                  memory: 128Mi
+              volumeMounts:
+              - mountPath: /tmp/.talos/config
+                mountPropagation: None
+                name: talos-config-3
+                readOnly: true
+                subPath: config
+          volumes: 
+            - name: talos-config-3
+              secret:
+                secretName: talos-etcd-defrag-secret
+---
+# Source: talos/charts/etcd-defrag/templates/common.yaml
+apiVersion: batch/v1
+kind: CronJob
 metadata:
   name: etcd-defrag-defrag-1
   labels:
@@ -327,78 +399,6 @@ spec:
               secret:
                 secretName: talos-etcd-defrag-secret
 ---
-# Source: talos/charts/etcd-defrag/templates/common.yaml
-apiVersion: batch/v1
-kind: CronJob
-metadata:
-  name: etcd-defrag-defrag-3
-  labels:
-    app.kubernetes.io/controller: defrag-3
-    app.kubernetes.io/instance: talos
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: talos
-    helm.sh/chart: etcd-defrag-4.4.0
-  namespace: talos
-spec:
-  suspend: false
-  concurrencyPolicy: Forbid
-  startingDeadlineSeconds: 90
-  timeZone: US/Central
-  schedule: "20 0 * * 0"
-  successfulJobsHistoryLimit: 3
-  failedJobsHistoryLimit: 3
-  jobTemplate:
-    spec:
-      parallelism: 1
-      backoffLimit: 3
-      template:
-        metadata:
-          labels: 
-            app.kubernetes.io/controller: defrag-3
-            app.kubernetes.io/instance: talos
-            app.kubernetes.io/name: talos
-        spec: 
-          enableServiceLinks: false
-          serviceAccountName: default
-          automountServiceAccountToken: true
-          hostIPC: false
-          hostNetwork: false
-          hostPID: false
-          dnsPolicy: ClusterFirst
-          restartPolicy: Never
-          nodeSelector: 
-            node-role.kubernetes.io/control-plane: ""
-          tolerations: 
-            - effect: NoSchedule
-              key: node-role.kubernetes.io/control-plane
-              operator: Exists
-          containers: 
-            - args:
-              - etcd
-              - defrag
-              - -n
-              - 10.232.1.13
-              env:
-              - name: TALOSCONFIG
-                value: /tmp/.talos/config
-              image: ghcr.io/siderolabs/talosctl:v1.11.5
-              imagePullPolicy: IfNotPresent
-              name: main
-              resources:
-                requests:
-                  cpu: 100m
-                  memory: 128Mi
-              volumeMounts:
-              - mountPath: /tmp/.talos/config
-                mountPropagation: None
-                name: talos-config-3
-                readOnly: true
-                subPath: config
-          volumes: 
-            - name: talos-config-3
-              secret:
-                secretName: talos-etcd-defrag-secret
----
 # Source: talos/templates/external-secret.yaml
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret

clusters/cl01tl/manifests/tdarr/tdarr.yaml

@@ -29,7 +29,7 @@ spec:
 kind: PersistentVolumeClaim
 apiVersion: v1
 metadata:
-  name: tdarr-config
+  name: tdarr-server
   labels:
     app.kubernetes.io/instance: tdarr
     app.kubernetes.io/managed-by: Helm
@@ -50,7 +50,7 @@ spec:
 kind: PersistentVolumeClaim
 apiVersion: v1
 metadata:
-  name: tdarr-server
+  name: tdarr-config
   labels:
     app.kubernetes.io/instance: tdarr
     app.kubernetes.io/managed-by: Helm

clusters/cl01tl/manifests/vault/vault.yaml

@@ -251,6 +251,54 @@ spec:
 ---
 apiVersion: apps/v1
 kind: Deployment
+metadata:
+  name: vault-unseal-unseal-1
+  labels:
+    app.kubernetes.io/controller: unseal-1
+    app.kubernetes.io/instance: vault
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: vault
+    helm.sh/chart: unseal-4.4.0
+  namespace: vault
+spec:
+  revisionHistoryLimit: 3
+  replicas: 1
+  strategy:
+    type: Recreate
+  selector:
+    matchLabels:
+      app.kubernetes.io/controller: unseal-1
+      app.kubernetes.io/name: vault
+      app.kubernetes.io/instance: vault
+  template:
+    metadata:
+      labels: 
+        app.kubernetes.io/controller: unseal-1
+        app.kubernetes.io/instance: vault
+        app.kubernetes.io/name: vault
+    spec: 
+      enableServiceLinks: false
+      serviceAccountName: default
+      automountServiceAccountToken: true
+      hostIPC: false
+      hostNetwork: false
+      hostPID: false
+      dnsPolicy: ClusterFirst
+      containers: 
+        - envFrom:
+          - secretRef:
+              name: vault-unseal-config-1
+          image: ghcr.io/lrstanley/vault-unseal:0.7.2
+          imagePullPolicy: IfNotPresent
+          name: main
+          resources:
+            requests:
+              cpu: 10m
+              memory: 24Mi
+---
+# Source: vault/charts/unseal/templates/common.yaml
+apiVersion: apps/v1
+kind: Deployment
 metadata:
   name: vault-unseal-unseal-2
   labels:
@@ -344,54 +392,6 @@ spec:
               cpu: 10m
               memory: 24Mi
 ---
-# Source: vault/charts/unseal/templates/common.yaml
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: vault-unseal-unseal-1
-  labels:
-    app.kubernetes.io/controller: unseal-1
-    app.kubernetes.io/instance: vault
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: vault
-    helm.sh/chart: unseal-4.4.0
-  namespace: vault
-spec:
-  revisionHistoryLimit: 3
-  replicas: 1
-  strategy:
-    type: Recreate
-  selector:
-    matchLabels:
-      app.kubernetes.io/controller: unseal-1
-      app.kubernetes.io/name: vault
-      app.kubernetes.io/instance: vault
-  template:
-    metadata:
-      labels: 
-        app.kubernetes.io/controller: unseal-1
-        app.kubernetes.io/instance: vault
-        app.kubernetes.io/name: vault
-    spec: 
-      enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
-      hostIPC: false
-      hostNetwork: false
-      hostPID: false
-      dnsPolicy: ClusterFirst
-      containers: 
-        - envFrom:
-          - secretRef:
-              name: vault-unseal-config-1
-          image: ghcr.io/lrstanley/vault-unseal:0.7.2
-          imagePullPolicy: IfNotPresent
-          name: main
-          resources:
-            requests:
-              cpu: 10m
-              memory: 24Mi
----
 # Source: vault/charts/vault/templates/server-statefulset.yaml
 # StatefulSet to run the actual vault server cluster.
 apiVersion: apps/v1