chore: Update manifests after change

2026-04-03 01:35:56 +00:00
parent ee0824fe72
commit 1b58513636
23 changed files with 33 additions and 75 deletions
--- a/clusters/cl01tl/manifests/kiwix/Deployment-kiwix.yaml
+++ b/clusters/cl01tl/manifests/kiwix/Deployment-kiwix.yaml
@@ -39,13 +39,12 @@ spec:
          env:
            - name: PORT
              value: "8080"
-          image: ghcr.io/kiwix/kiwix-serve:3.8.2
-          imagePullPolicy: IfNotPresent
+          image: ghcr.io/kiwix/kiwix-serve:3.8.2@sha256:acdab28186a66b51bfd4202210c6732931ea95cf41c711148a0c9770b9fcc9e1
          name: main
          resources:
            requests:
-              cpu: 50m
-              memory: 512Mi
+              cpu: 1m
+              memory: 10Mi
          volumeMounts:
            - mountPath: /data
              name: media
--- a/clusters/cl01tl/manifests/kiwix/HTTPRoute-kiwix.yaml
+++ b/clusters/cl01tl/manifests/kiwix/HTTPRoute-kiwix.yaml
@@ -23,7 +23,7 @@ spec:
          name: kiwix
          namespace: kiwix
          port: 80
-          weight: 100
+          weight: 1
      matches:
        - path:
            type: PathPrefix
--- a/clusters/cl01tl/manifests/komodo/Cluster-komodo-postgresql-17-fdb-cluster.yaml
+++ b/clusters/cl01tl/manifests/komodo/Cluster-komodo-postgresql-17-fdb-cluster.yaml
@@ -5,14 +5,14 @@ metadata:
  namespace: komodo
  labels:
    app.kubernetes.io/name: komodo-postgresql-17-fdb-cluster
-    helm.sh/chart: postgresql-17-fdb-cluster-7.10.0
+    helm.sh/chart: postgresql-17-fdb-cluster-7.11.1
    app.kubernetes.io/instance: komodo
    app.kubernetes.io/part-of: komodo
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.1"
    app.kubernetes.io/managed-by: Helm
 spec:
  instances: 3
-  imageName: "ghcr.io/ferretdb/postgres-documentdb:17-0.106.0-ferretdb-2.5.0"
+  imageName: "ghcr.io/ferretdb/postgres-documentdb:17-0.107.0-ferretdb-2.7.0@sha256:2386795ec2aa7ae559304361979f1dc5708d383ee9020ae63dadc2940dfe58f7"
  imagePullPolicy: IfNotPresent
  postgresUID: 999
  postgresGID: 999
@@ -26,8 +26,8 @@ spec:
    limits:
      hugepages-2Mi: 256Mi
    requests:
-      cpu: 100m
-      memory: 256Mi
+      cpu: 20m
+      memory: 80Mi
  affinity:
    enablePodAntiAffinity: true
    topologyKey: kubernetes.io/hostname
--- a/clusters/cl01tl/manifests/komodo/Deployment-komodo-ferretdb-2.yaml
+++ b/clusters/cl01tl/manifests/komodo/Deployment-komodo-ferretdb-2.yaml
@@ -44,10 +44,9 @@ spec:
                  name: komodo-postgresql-17-fdb-cluster-ferret
            - name: FERRETDB_POSTGRESQL_URL
              value: postgresql://$(DB_USERNAME):$(DB_PASSWORD)@komodo-postgresql-17-fdb-cluster-rw.komodo.svc.cluster.local:5432/ferretDB
-          image: ghcr.io/ferretdb/ferretdb:2.7.0
-          imagePullPolicy: IfNotPresent
+          image: ghcr.io/ferretdb/ferretdb:2.7.0@sha256:5706414241eb84f0515512c37b46db0f1b1eac9e5ceb7e4c2523211c184b1985
          name: main
          resources:
            requests:
-              cpu: 10m
-              memory: 128Mi
+              cpu: 1m
+              memory: 20Mi
--- a/clusters/cl01tl/manifests/komodo/Deployment-komodo-main.yaml
+++ b/clusters/cl01tl/manifests/komodo/Deployment-komodo-main.yaml
@@ -68,7 +68,7 @@ spec:
            - name: KOMODO_LOCAL_AUTH
              value: "true"
            - name: KOMODO_ENABLE_NEW_USERS
-              value: "true"
+              value: "false"
            - name: KOMODO_DISABLE_NON_ADMIN_CREATE
              value: "true"
            - name: KOMODO_TRANSPARENT_MODE
@@ -103,12 +103,11 @@ spec:
            - name: KOMODO_OIDC_USE_FULL_EMAIL
              value: "true"
          image: ghcr.io/moghtech/komodo-core:2.1.1@sha256:2bbbb1efd3534211dac35091e0818f10398d9bdd98fdbf0ddef09e9e0b5ec4ba
-          imagePullPolicy: IfNotPresent
          name: main
          resources:
            requests:
              cpu: 10m
-              memory: 128Mi
+              memory: 80Mi
          volumeMounts:
            - mountPath: /repo-cache
              name: cache
--- a/clusters/cl01tl/manifests/komodo/ExternalSecret-komodo-postgresql-17-fdb-backup-garage-local-secret.yaml
+++ b/clusters/cl01tl/manifests/komodo/ExternalSecret-komodo-postgresql-17-fdb-backup-garage-local-secret.yaml
@@ -5,10 +5,10 @@ metadata:
  namespace: komodo
  labels:
    app.kubernetes.io/name: komodo-postgresql-17-fdb-backup-garage-local-secret
-    helm.sh/chart: postgresql-17-fdb-cluster-7.10.0
+    helm.sh/chart: postgresql-17-fdb-cluster-7.11.1
    app.kubernetes.io/instance: komodo
    app.kubernetes.io/part-of: komodo
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.1"
    app.kubernetes.io/managed-by: Helm
 spec:
  secretStoreRef:
--- a/clusters/cl01tl/manifests/komodo/ExternalSecret-komodo-postgresql-17-fdb-cluster-ferret.yaml
+++ b/clusters/cl01tl/manifests/komodo/ExternalSecret-komodo-postgresql-17-fdb-cluster-ferret.yaml
@@ -14,15 +14,9 @@ spec:
  data:
    - secretKey: uri
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/komodo/ferret
-        metadataPolicy: None
        property: uri
    - secretKey: password
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/komodo/ferret
-        metadataPolicy: None
        property: password
--- a/clusters/cl01tl/manifests/komodo/ExternalSecret-komodo-postgresql-17-fdb-recovery-secret.yaml
+++ b/clusters/cl01tl/manifests/komodo/ExternalSecret-komodo-postgresql-17-fdb-recovery-secret.yaml
@@ -4,10 +4,10 @@ metadata:
  name: komodo-postgresql-17-fdb-recovery-secret
  namespace: komodo
  labels:
-    helm.sh/chart: postgresql-17-fdb-cluster-7.10.0
+    helm.sh/chart: postgresql-17-fdb-cluster-7.11.1
    app.kubernetes.io/instance: komodo
    app.kubernetes.io/part-of: komodo
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.1"
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: komodo-postgresql-17-fdb-recovery-secret
 spec:
--- a/clusters/cl01tl/manifests/komodo/ExternalSecret-komodo-secret.yaml
+++ b/clusters/cl01tl/manifests/komodo/ExternalSecret-komodo-secret.yaml
@@ -14,36 +14,21 @@ spec:
  data:
    - secretKey: passkey
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/komodo/config
-        metadataPolicy: None
        property: passkey
    - secretKey: jwt
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/komodo/config
-        metadataPolicy: None
        property: jwt
    - secretKey: webhook
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/komodo/config
-        metadataPolicy: None
        property: webhook
    - secretKey: oidc-client-id
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /authentik/oidc/komodo
-        metadataPolicy: None
        property: client
    - secretKey: oidc-client-secret
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /authentik/oidc/komodo
-        metadataPolicy: None
        property: secret
--- a/clusters/cl01tl/manifests/komodo/HTTPRoute-komodo.yaml
+++ b/clusters/cl01tl/manifests/komodo/HTTPRoute-komodo.yaml
@@ -23,7 +23,7 @@ spec:
          name: komodo-main
          namespace: komodo
          port: 80
-          weight: 100
+          weight: 1
      matches:
        - path:
            type: PathPrefix
--- a/clusters/cl01tl/manifests/komodo/ObjectStore-komodo-postgresql-17-fdb-backup-garage-local.yaml
+++ b/clusters/cl01tl/manifests/komodo/ObjectStore-komodo-postgresql-17-fdb-backup-garage-local.yaml
@@ -5,10 +5,10 @@ metadata:
  namespace: komodo
  labels:
    app.kubernetes.io/name: komodo-postgresql-17-fdb-backup-garage-local
-    helm.sh/chart: postgresql-17-fdb-cluster-7.10.0
+    helm.sh/chart: postgresql-17-fdb-cluster-7.11.1
    app.kubernetes.io/instance: komodo
    app.kubernetes.io/part-of: komodo
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.1"
    app.kubernetes.io/managed-by: Helm
 spec:
  retentionPolicy: 7d
--- a/clusters/cl01tl/manifests/komodo/ObjectStore-komodo-postgresql-17-fdb-recovery.yaml
+++ b/clusters/cl01tl/manifests/komodo/ObjectStore-komodo-postgresql-17-fdb-recovery.yaml
@@ -4,10 +4,10 @@ metadata:
  name: "komodo-postgresql-17-fdb-recovery"
  namespace: komodo
  labels:
-    helm.sh/chart: postgresql-17-fdb-cluster-7.10.0
+    helm.sh/chart: postgresql-17-fdb-cluster-7.11.1
    app.kubernetes.io/instance: komodo
    app.kubernetes.io/part-of: komodo
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.1"
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: "komodo-postgresql-17-fdb-recovery"
 spec:
--- a/clusters/cl01tl/manifests/komodo/PersistentVolumeClaim-komodo-cache.yaml
+++ b/clusters/cl01tl/manifests/komodo/PersistentVolumeClaim-komodo-cache.yaml
@@ -7,8 +7,6 @@ metadata:
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: komodo
    helm.sh/chart: komodo-4.6.2
-  annotations:
-    helm.sh/resource-policy: keep
  namespace: komodo
 spec:
  accessModes:
--- a/clusters/cl01tl/manifests/komodo/PersistentVolumeClaim-komodo-keys.yaml
+++ b/clusters/cl01tl/manifests/komodo/PersistentVolumeClaim-komodo-keys.yaml
@@ -7,8 +7,6 @@ metadata:
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: komodo
    helm.sh/chart: komodo-4.6.2
-  annotations:
-    helm.sh/resource-policy: keep
  namespace: komodo
 spec:
  accessModes:
--- a/clusters/cl01tl/manifests/komodo/PersistentVolumeClaim-komodo-syncs.yaml
+++ b/clusters/cl01tl/manifests/komodo/PersistentVolumeClaim-komodo-syncs.yaml
@@ -7,8 +7,6 @@ metadata:
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: komodo
    helm.sh/chart: komodo-4.6.2
-  annotations:
-    helm.sh/resource-policy: keep
  namespace: komodo
 spec:
  accessModes:
--- a/clusters/cl01tl/manifests/komodo/PrometheusRule-komodo-postgresql-17-fdb-alert-rules.yaml
+++ b/clusters/cl01tl/manifests/komodo/PrometheusRule-komodo-postgresql-17-fdb-alert-rules.yaml
@@ -5,10 +5,10 @@ metadata:
  namespace: komodo
  labels:
    app.kubernetes.io/name: komodo-postgresql-17-fdb-alert-rules
-    helm.sh/chart: postgresql-17-fdb-cluster-7.10.0
+    helm.sh/chart: postgresql-17-fdb-cluster-7.11.1
    app.kubernetes.io/instance: komodo
    app.kubernetes.io/part-of: komodo
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.1"
    app.kubernetes.io/managed-by: Helm
 spec:
  groups:
--- a/clusters/cl01tl/manifests/komodo/ScheduledBackup-komodo-postgresql-17-fdb-scheduled-backup-live-backup.yaml
+++ b/clusters/cl01tl/manifests/komodo/ScheduledBackup-komodo-postgresql-17-fdb-scheduled-backup-live-backup.yaml
@@ -5,10 +5,10 @@ metadata:
  namespace: komodo
  labels:
    app.kubernetes.io/name: "komodo-postgresql-17-fdb-scheduled-backup-live-backup"
-    helm.sh/chart: postgresql-17-fdb-cluster-7.10.0
+    helm.sh/chart: postgresql-17-fdb-cluster-7.11.1
    app.kubernetes.io/instance: komodo
    app.kubernetes.io/part-of: komodo
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.1"
    app.kubernetes.io/managed-by: Helm
 spec:
  immediate: true
--- a/clusters/cl01tl/manifests/kube-prometheus-stack/Deployment-ntfy-alertmanager.yaml
+++ b/clusters/cl01tl/manifests/kube-prometheus-stack/Deployment-ntfy-alertmanager.yaml
@@ -34,8 +34,7 @@ spec:
      hostPID: false
      dnsPolicy: ClusterFirst
      containers:
-        - image: xenrox/ntfy-alertmanager:1.0.0
-          imagePullPolicy: IfNotPresent
+        - image: xenrox/ntfy-alertmanager:1.0.0@sha256:81788c7905774b7b0b2ed6833b2bc4826a90a42e4b738706edcedd5f489e7a73
          name: main
          volumeMounts:
            - mountPath: /etc/ntfy-alertmanager/config
--- a/clusters/cl01tl/manifests/kube-prometheus-stack/ExternalSecret-alertmanager-config-secret.yaml
+++ b/clusters/cl01tl/manifests/kube-prometheus-stack/ExternalSecret-alertmanager-config-secret.yaml
@@ -14,8 +14,5 @@ spec:
  data:
    - secretKey: ntfy_password
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/kube-prometheus-stack/ntfy-alertmanager
-        metadataPolicy: None
        property: ntfy_password
--- a/clusters/cl01tl/manifests/kube-prometheus-stack/ExternalSecret-garage-metric-secret.yaml
+++ b/clusters/cl01tl/manifests/kube-prometheus-stack/ExternalSecret-garage-metric-secret.yaml
@@ -14,8 +14,5 @@ spec:
  data:
    - secretKey: token
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /garage/token
-        metadataPolicy: None
        property: metric
--- a/clusters/cl01tl/manifests/kube-prometheus-stack/ExternalSecret-ntfy-alertmanager-config-secret.yaml
+++ b/clusters/cl01tl/manifests/kube-prometheus-stack/ExternalSecret-ntfy-alertmanager-config-secret.yaml
@@ -14,15 +14,9 @@ spec:
  data:
    - secretKey: ntfy_password
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/kube-prometheus-stack/ntfy-alertmanager
-        metadataPolicy: None
        property: ntfy_password
    - secretKey: config
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/kube-prometheus-stack/ntfy-alertmanager
-        metadataPolicy: None
        property: config
--- a/clusters/cl01tl/manifests/kube-prometheus-stack/Prometheus-kube-prometheus-stack-prometheus.yaml
+++ b/clusters/cl01tl/manifests/kube-prometheus-stack/Prometheus-kube-prometheus-stack-prometheus.yaml
@@ -34,7 +34,8 @@ spec:
  enableOTLPReceiver: false
  enableAdminAPI: false
  scrapeInterval: 30s
-  retention: "30d"
+  retention: "45d"
+  retentionSize: "240GiB"
  tsdb:
    outOfOrderTimeWindow: 0s
  walCompression: true
--- a/clusters/cl01tl/manifests/kube-prometheus-stack/StatefulSet-kube-prometheus-stack-valkey.yaml
+++ b/clusters/cl01tl/manifests/kube-prometheus-stack/StatefulSet-kube-prometheus-stack-valkey.yaml
@@ -95,7 +95,7 @@ spec:
          resources:
            requests:
              cpu: 10m
-              memory: 128Mi
+              memory: 20Mi
          volumeMounts:
            - name: valkey-data
              mountPath: /data
@@ -117,8 +117,8 @@ spec:
              port: metrics
          resources:
            requests:
-              cpu: 10m
-              memory: 64M
+              cpu: 1m
+              memory: 10M
          env:
            - name: REDIS_ALIAS
              value: kube-prometheus-stack-valkey