chore: Update manifests after change

clusters/cl01tl/manifests/kiwix/Deployment-kiwix.yaml

@@ -39,13 +39,12 @@ spec:
           env:
             - name: PORT
               value: "8080"
-          image: ghcr.io/kiwix/kiwix-serve:3.8.2
+          image: ghcr.io/kiwix/kiwix-serve:3.8.2@sha256:acdab28186a66b51bfd4202210c6732931ea95cf41c711148a0c9770b9fcc9e1
-          imagePullPolicy: IfNotPresent
           name: main
           resources:
             requests:
-              cpu: 50m
+              cpu: 1m
-              memory: 512Mi
+              memory: 10Mi
           volumeMounts:
             - mountPath: /data
               name: media

clusters/cl01tl/manifests/kiwix/HTTPRoute-kiwix.yaml

@@ -23,7 +23,7 @@ spec:
           name: kiwix
           namespace: kiwix
           port: 80
-          weight: 100
+          weight: 1
       matches:
         - path:
             type: PathPrefix

clusters/cl01tl/manifests/komodo/Cluster-komodo-postgresql-17-fdb-cluster.yaml

@@ -5,14 +5,14 @@ metadata:
   namespace: komodo
   labels:
     app.kubernetes.io/name: komodo-postgresql-17-fdb-cluster
-    helm.sh/chart: postgresql-17-fdb-cluster-7.10.0
+    helm.sh/chart: postgresql-17-fdb-cluster-7.11.1
     app.kubernetes.io/instance: komodo
     app.kubernetes.io/part-of: komodo
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.1"
     app.kubernetes.io/managed-by: Helm
 spec:
   instances: 3
-  imageName: "ghcr.io/ferretdb/postgres-documentdb:17-0.106.0-ferretdb-2.5.0"
+  imageName: "ghcr.io/ferretdb/postgres-documentdb:17-0.107.0-ferretdb-2.7.0@sha256:2386795ec2aa7ae559304361979f1dc5708d383ee9020ae63dadc2940dfe58f7"
   imagePullPolicy: IfNotPresent
   postgresUID: 999
   postgresGID: 999
@@ -26,8 +26,8 @@ spec:
     limits:
       hugepages-2Mi: 256Mi
     requests:
-      cpu: 100m
+      cpu: 20m
-      memory: 256Mi
+      memory: 80Mi
   affinity:
     enablePodAntiAffinity: true
     topologyKey: kubernetes.io/hostname

clusters/cl01tl/manifests/komodo/Deployment-komodo-ferretdb-2.yaml

@@ -44,10 +44,9 @@ spec:
                   name: komodo-postgresql-17-fdb-cluster-ferret
             - name: FERRETDB_POSTGRESQL_URL
               value: postgresql://$(DB_USERNAME):$(DB_PASSWORD)@komodo-postgresql-17-fdb-cluster-rw.komodo.svc.cluster.local:5432/ferretDB
-          image: ghcr.io/ferretdb/ferretdb:2.7.0
+          image: ghcr.io/ferretdb/ferretdb:2.7.0@sha256:5706414241eb84f0515512c37b46db0f1b1eac9e5ceb7e4c2523211c184b1985
-          imagePullPolicy: IfNotPresent
           name: main
           resources:
             requests:
-              cpu: 10m
+              cpu: 1m
-              memory: 128Mi
+              memory: 20Mi

clusters/cl01tl/manifests/komodo/Deployment-komodo-main.yaml

@@ -68,7 +68,7 @@ spec:
             - name: KOMODO_LOCAL_AUTH
               value: "true"
             - name: KOMODO_ENABLE_NEW_USERS
-              value: "true"
+              value: "false"
             - name: KOMODO_DISABLE_NON_ADMIN_CREATE
               value: "true"
             - name: KOMODO_TRANSPARENT_MODE
@@ -103,12 +103,11 @@ spec:
             - name: KOMODO_OIDC_USE_FULL_EMAIL
               value: "true"
           image: ghcr.io/moghtech/komodo-core:2.1.1@sha256:2bbbb1efd3534211dac35091e0818f10398d9bdd98fdbf0ddef09e9e0b5ec4ba
-          imagePullPolicy: IfNotPresent
           name: main
           resources:
             requests:
               cpu: 10m
-              memory: 128Mi
+              memory: 80Mi
           volumeMounts:
             - mountPath: /repo-cache
               name: cache

clusters/cl01tl/manifests/komodo/ExternalSecret-komodo-postgresql-17-fdb-backup-garage-local-secret.yaml

@@ -5,10 +5,10 @@ metadata:
   namespace: komodo
   labels:
     app.kubernetes.io/name: komodo-postgresql-17-fdb-backup-garage-local-secret
-    helm.sh/chart: postgresql-17-fdb-cluster-7.10.0
+    helm.sh/chart: postgresql-17-fdb-cluster-7.11.1
     app.kubernetes.io/instance: komodo
     app.kubernetes.io/part-of: komodo
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.1"
     app.kubernetes.io/managed-by: Helm
 spec:
   secretStoreRef:

clusters/cl01tl/manifests/komodo/ExternalSecret-komodo-postgresql-17-fdb-cluster-ferret.yaml

@@ -14,15 +14,9 @@ spec:
   data:
     - secretKey: uri
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /cl01tl/komodo/ferret
-        metadataPolicy: None
         property: uri
     - secretKey: password
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /cl01tl/komodo/ferret
-        metadataPolicy: None
         property: password

clusters/cl01tl/manifests/komodo/ExternalSecret-komodo-postgresql-17-fdb-recovery-secret.yaml

@@ -4,10 +4,10 @@ metadata:
   name: komodo-postgresql-17-fdb-recovery-secret
   namespace: komodo
   labels:
-    helm.sh/chart: postgresql-17-fdb-cluster-7.10.0
+    helm.sh/chart: postgresql-17-fdb-cluster-7.11.1
     app.kubernetes.io/instance: komodo
     app.kubernetes.io/part-of: komodo
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.1"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: komodo-postgresql-17-fdb-recovery-secret
 spec:

clusters/cl01tl/manifests/komodo/ExternalSecret-komodo-secret.yaml

@@ -14,36 +14,21 @@ spec:
   data:
     - secretKey: passkey
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /cl01tl/komodo/config
-        metadataPolicy: None
         property: passkey
     - secretKey: jwt
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /cl01tl/komodo/config
-        metadataPolicy: None
         property: jwt
     - secretKey: webhook
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /cl01tl/komodo/config
-        metadataPolicy: None
         property: webhook
     - secretKey: oidc-client-id
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /authentik/oidc/komodo
-        metadataPolicy: None
         property: client
     - secretKey: oidc-client-secret
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /authentik/oidc/komodo
-        metadataPolicy: None
         property: secret

clusters/cl01tl/manifests/komodo/HTTPRoute-komodo.yaml

@@ -23,7 +23,7 @@ spec:
           name: komodo-main
           namespace: komodo
           port: 80
-          weight: 100
+          weight: 1
       matches:
         - path:
             type: PathPrefix

clusters/cl01tl/manifests/komodo/ObjectStore-komodo-postgresql-17-fdb-backup-garage-local.yaml

@@ -5,10 +5,10 @@ metadata:
   namespace: komodo
   labels:
     app.kubernetes.io/name: komodo-postgresql-17-fdb-backup-garage-local
-    helm.sh/chart: postgresql-17-fdb-cluster-7.10.0
+    helm.sh/chart: postgresql-17-fdb-cluster-7.11.1
     app.kubernetes.io/instance: komodo
     app.kubernetes.io/part-of: komodo
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.1"
     app.kubernetes.io/managed-by: Helm
 spec:
   retentionPolicy: 7d

clusters/cl01tl/manifests/komodo/ObjectStore-komodo-postgresql-17-fdb-recovery.yaml

@@ -4,10 +4,10 @@ metadata:
   name: "komodo-postgresql-17-fdb-recovery"
   namespace: komodo
   labels:
-    helm.sh/chart: postgresql-17-fdb-cluster-7.10.0
+    helm.sh/chart: postgresql-17-fdb-cluster-7.11.1
     app.kubernetes.io/instance: komodo
     app.kubernetes.io/part-of: komodo
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.1"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: "komodo-postgresql-17-fdb-recovery"
 spec:

clusters/cl01tl/manifests/komodo/PersistentVolumeClaim-komodo-cache.yaml

@@ -7,8 +7,6 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: komodo
     helm.sh/chart: komodo-4.6.2
-  annotations:
-    helm.sh/resource-policy: keep
   namespace: komodo
 spec:
   accessModes:

clusters/cl01tl/manifests/komodo/PersistentVolumeClaim-komodo-keys.yaml

@@ -7,8 +7,6 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: komodo
     helm.sh/chart: komodo-4.6.2
-  annotations:
-    helm.sh/resource-policy: keep
   namespace: komodo
 spec:
   accessModes:

clusters/cl01tl/manifests/komodo/PersistentVolumeClaim-komodo-syncs.yaml

@@ -7,8 +7,6 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: komodo
     helm.sh/chart: komodo-4.6.2
-  annotations:
-    helm.sh/resource-policy: keep
   namespace: komodo
 spec:
   accessModes:

clusters/cl01tl/manifests/komodo/PrometheusRule-komodo-postgresql-17-fdb-alert-rules.yaml

@@ -5,10 +5,10 @@ metadata:
   namespace: komodo
   labels:
     app.kubernetes.io/name: komodo-postgresql-17-fdb-alert-rules
-    helm.sh/chart: postgresql-17-fdb-cluster-7.10.0
+    helm.sh/chart: postgresql-17-fdb-cluster-7.11.1
     app.kubernetes.io/instance: komodo
     app.kubernetes.io/part-of: komodo
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.1"
     app.kubernetes.io/managed-by: Helm
 spec:
   groups:

clusters/cl01tl/manifests/komodo/ScheduledBackup-komodo-postgresql-17-fdb-scheduled-backup-live-backup.yaml

@@ -5,10 +5,10 @@ metadata:
   namespace: komodo
   labels:
     app.kubernetes.io/name: "komodo-postgresql-17-fdb-scheduled-backup-live-backup"
-    helm.sh/chart: postgresql-17-fdb-cluster-7.10.0
+    helm.sh/chart: postgresql-17-fdb-cluster-7.11.1
     app.kubernetes.io/instance: komodo
     app.kubernetes.io/part-of: komodo
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.1"
     app.kubernetes.io/managed-by: Helm
 spec:
   immediate: true

clusters/cl01tl/manifests/kube-prometheus-stack/Deployment-ntfy-alertmanager.yaml

@@ -34,8 +34,7 @@ spec:
       hostPID: false
       dnsPolicy: ClusterFirst
       containers:
-        - image: xenrox/ntfy-alertmanager:1.0.0
+        - image: xenrox/ntfy-alertmanager:1.0.0@sha256:81788c7905774b7b0b2ed6833b2bc4826a90a42e4b738706edcedd5f489e7a73
-          imagePullPolicy: IfNotPresent
           name: main
           volumeMounts:
             - mountPath: /etc/ntfy-alertmanager/config

clusters/cl01tl/manifests/kube-prometheus-stack/ExternalSecret-alertmanager-config-secret.yaml

@@ -14,8 +14,5 @@ spec:
   data:
     - secretKey: ntfy_password
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /cl01tl/kube-prometheus-stack/ntfy-alertmanager
-        metadataPolicy: None
         property: ntfy_password

clusters/cl01tl/manifests/kube-prometheus-stack/ExternalSecret-garage-metric-secret.yaml

@@ -14,8 +14,5 @@ spec:
   data:
     - secretKey: token
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/token
-        metadataPolicy: None
         property: metric

clusters/cl01tl/manifests/kube-prometheus-stack/ExternalSecret-ntfy-alertmanager-config-secret.yaml

@@ -14,15 +14,9 @@ spec:
   data:
     - secretKey: ntfy_password
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /cl01tl/kube-prometheus-stack/ntfy-alertmanager
-        metadataPolicy: None
         property: ntfy_password
     - secretKey: config
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /cl01tl/kube-prometheus-stack/ntfy-alertmanager
-        metadataPolicy: None
         property: config

clusters/cl01tl/manifests/kube-prometheus-stack/Prometheus-kube-prometheus-stack-prometheus.yaml

@@ -34,7 +34,8 @@ spec:
   enableOTLPReceiver: false
   enableAdminAPI: false
   scrapeInterval: 30s
-  retention: "30d"
+  retention: "45d"
+  retentionSize: "240GiB"
   tsdb:
     outOfOrderTimeWindow: 0s
   walCompression: true

clusters/cl01tl/manifests/kube-prometheus-stack/StatefulSet-kube-prometheus-stack-valkey.yaml

@@ -95,7 +95,7 @@ spec:
           resources:
             requests:
               cpu: 10m
-              memory: 128Mi
+              memory: 20Mi
           volumeMounts:
             - name: valkey-data
               mountPath: /data
@@ -117,8 +117,8 @@ spec:
               port: metrics
           resources:
             requests:
-              cpu: 10m
+              cpu: 1m
-              memory: 64M
+              memory: 10M
           env:
             - name: REDIS_ALIAS
               value: kube-prometheus-stack-valkey