Automated Manifest Update (#4477)

This PR contains newly rendered Kubernetes manifests automatically generated by the CI workflow.

Reviewed-on: #4477
Co-authored-by: gitea-bot <gitea-bot@alexlebens.net>
Co-committed-by: gitea-bot <gitea-bot@alexlebens.net>

clusters/cl01tl/manifests/gitea/ConfigMap-gitea-valkey-init-scripts.yaml

@@ -1,12 +1,12 @@
 apiVersion: v1
 kind: ConfigMap
 metadata:
-  name: gitea-valkey-renovate-init-scripts
+  name: gitea-valkey-init-scripts
   labels:
-    helm.sh/chart: valkey-renovate-0.9.3
+    helm.sh/chart: valkey-0.9.3
-    app.kubernetes.io/name: valkey-renovate
+    app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: gitea
-    app.kubernetes.io/version: "9.0.3-alpine"
+    app.kubernetes.io/version: "9.0.3"
     app.kubernetes.io/managed-by: Helm
 data:
   init.sh: |-
@@ -46,6 +46,35 @@ data:
       echo "bind * -::*"
       echo "dir /data"
     } >>"$VALKEY_CONFIG"
+    # Replica mode configuration
+    log "Configuring replication mode"
+
+    # Use POD_INDEX from Kubernetes metadata
+    POD_INDEX=${POD_INDEX:-0}
+    IS_MASTER=false
+
+    # Check if this is pod-0 (master)
+    if [ "$POD_INDEX" = "0" ]; then
+      IS_MASTER=true
+      log "This pod (index $POD_INDEX) is configured as MASTER"
+    else
+      log "This pod (index $POD_INDEX) is configured as REPLICA"
+    fi
+
+    # Configure replica settings
+    if [ "$IS_MASTER" = "false" ]; then
+      MASTER_HOST="gitea-valkey-0.gitea-valkey-headless.gitea.svc.cluster.local"
+      MASTER_PORT="6379"
+
+      log "Configuring replica to follow master at $MASTER_HOST:$MASTER_PORT"
+
+      {
+        echo ""
+        echo "# Replica Configuration"
+        echo "replicaof $MASTER_HOST $MASTER_PORT"
+        echo "replica-announce-ip gitea-valkey-$POD_INDEX.gitea-valkey-headless.gitea.svc.cluster.local"
+      } >>"$VALKEY_CONFIG"
+    fi
 
     # Append extra configs if present
     if [ -f /usr/local/etc/valkey/valkey.conf ]; then

clusters/cl01tl/manifests/gitea/Deployment-gitea.yaml

@@ -26,7 +26,7 @@ spec:
   template:
     metadata:
       annotations:
-        checksum/config: 01aade992dd1206a9a518665fb455b04e9e250255a21955363a74b6059b1e3cc
+        checksum/config: 0b0b1eaa93a5c1e5a70e3ea2947837cd99f038dc927b3a8619cafa6c5b2d82e2
         checksum/oauth_0: 03073bf48e66f48f622bd02092a5f93bfd06dbcb5fd833aded3b0d40980be93d
       labels:
         helm.sh/chart: gitea-12.5.0

clusters/cl01tl/manifests/gitea/PodMonitor-gitea-valkey.yaml

@@ -1,12 +1,12 @@
 apiVersion: monitoring.coreos.com/v1
 kind: PodMonitor
 metadata:
-  name: gitea-valkey-renovate
+  name: gitea-valkey
   labels:
-    helm.sh/chart: valkey-renovate-0.9.3
+    helm.sh/chart: valkey-0.9.3
-    app.kubernetes.io/name: valkey-renovate
+    app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: gitea
-    app.kubernetes.io/version: "9.0.3-alpine"
+    app.kubernetes.io/version: "9.0.3"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: valkey
     app.kubernetes.io/component: podmonitor
@@ -19,5 +19,5 @@ spec:
       - gitea
   selector:
     matchLabels:
-      app.kubernetes.io/name: valkey-renovate
+      app.kubernetes.io/name: valkey
       app.kubernetes.io/instance: gitea

clusters/cl01tl/manifests/gitea/PrometheusRule-gitea-valkey.yaml

@@ -0,0 +1,47 @@
+apiVersion: monitoring.coreos.com/v1
+kind: PrometheusRule
+metadata:
+  name: gitea-valkey
+  labels:
+    helm.sh/chart: valkey-0.9.3
+    app.kubernetes.io/name: valkey
+    app.kubernetes.io/instance: gitea
+    app.kubernetes.io/version: "9.0.3"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/part-of: valkey
+spec:
+  groups:
+    - name: gitea-valkey
+      rules:
+        - alert: ValkeyDown
+          annotations:
+            description: Valkey instance {{ $labels.instance }} is down.
+            summary: Valkey instance {{ $labels.instance }} down
+          expr: |
+            redis_up{service="gitea-valkey-metrics"} == 0
+          for: 2m
+          labels:
+            severity: error
+        - alert: ValkeyMemoryHigh
+          annotations:
+            description: |
+              Valkey instance {{ $labels.instance }} is using {{ $value }}% of its available memory.
+            summary: Valkey instance {{ $labels.instance }} is using too much memory
+          expr: |
+            redis_memory_used_bytes{service="gitea-valkey-metrics"} * 100
+            /
+            redis_memory_max_bytes{service="gitea-valkey-metrics"}
+            > 90 <= 100
+          for: 2m
+          labels:
+            severity: error
+        - alert: ValkeyKeyEviction
+          annotations:
+            description: |
+              Valkey instance {{ $labels.instance }} has evicted {{ $value }} keys in the last 5 minutes.
+            summary: Valkey instance {{ $labels.instance }} has evicted keys
+          expr: |
+            increase(redis_evicted_keys_total{service="gitea-valkey-metrics"}[5m]) > 0
+          for: 1s
+          labels:
+            severity: error

clusters/cl01tl/manifests/gitea/RedisReplication-redis-replication-gitea.yaml

@@ -1,44 +0,0 @@
-apiVersion: redis.redis.opstreelabs.in/v1beta2
-kind: RedisReplication
-metadata:
-  name: redis-replication-gitea
-  namespace: gitea
-  labels:
-    helm.sh/chart: redis-replication-gitea-1.1.0
-    app.kubernetes.io/version: "1.1.0"
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: redis-replication-gitea
-    app.kubernetes.io/instance: gitea
-    app.kubernetes.io/part-of: gitea
-spec:
-  clusterSize: 3
-  podSecurityContext:
-    fsGroup: 1000
-    runAsUser: 1000
-  kubernetesConfig:
-    image: "quay.io/opstree/redis:v8.4.2"
-    imagePullPolicy: IfNotPresent
-    resources:
-      requests:
-        cpu: 20m
-        memory: 400Mi
-  storage:
-    volumeClaimTemplate:
-      spec:
-        accessModes:
-          - ReadWriteOnce
-        resources:
-          requests:
-            storage: 10Gi
-        storageClassName: ceph-block
-  redisExporter:
-    enabled: true
-    image: "quay.io/opstree/redis-exporter:v1.81.0"
-  sentinel:
-    image: "quay.io/opstree/redis-sentinel:v8.4.2"
-    imagePullPolicy: IfNotPresent
-    resources:
-      requests:
-        cpu: 10m
-        memory: 32Mi
-    size: 3

clusters/cl01tl/manifests/gitea/Secret-gitea-inline-config.yaml

@@ -18,7 +18,7 @@ stringData:
   cache: |-
     ADAPTER=redis
     ENABLED=true
-    HOST=redis://redis-replication-gitea-master.gitea:6379
+    HOST=redis://gitea-valkey.gitea:6379
   database: |-
     DB_TYPE=postgres
     SCHEMA=public
@@ -31,7 +31,7 @@ stringData:
   mirror: DEFAULT_INTERVAL=10m
   oauth2_client: ENABLE_AUTO_REGISTRATION=true
   queue: |-
-    CONN_STR=redis://redis-replication-gitea-master.gitea:6379
+    CONN_STR=redis://gitea-valkey.gitea:6379
     TYPE=redis
   repo-archive: ENABLED=false
   repository: ROOT=/data/git/gitea-repositories
@@ -55,7 +55,7 @@ stringData:
     SHOW_REGISTRATION_BUTTON=false
   session: |-
     PROVIDER=redis
-    PROVIDER_CONFIG=redis://redis-replication-gitea-master.gitea:6379
+    PROVIDER_CONFIG=redis://gitea-valkey.gitea:6379
   ui: |-
     DEFAULT_THEME=gitea-auto
     THEMES=gitea-light,gitea-dark,gitea-auto,catppuccin-rosewater-auto,catppuccin-flamingo-auto,catppuccin-pink-auto,catppuccin-mauve-auto,catppuccin-red-auto,catppuccin-maroon-auto,catppuccin-peach-auto,catppuccin-yellow-auto,catppuccin-green-auto,catppuccin-teal-auto,catppuccin-sky-auto,catppuccin-sapphire-auto,catppuccin-blue-auto,catppuccin-lavender-auto,catppuccin-latte-rosewater,catppuccin-latte-flamingo,catppuccin-latte-pink,catppuccin-latte-mauve,catppuccin-latte-red,catppuccin-latte-maroon,catppuccin-latte-peach,catppuccin-latte-yellow,catppuccin-latte-green,catppuccin-latte-teal,catppuccin-latte-sky,catppuccin-latte-sapphire,catppuccin-latte-blue,catppuccin-latte-lavender,catppuccin-frappe-rosewater,catppuccin-frappe-flamingo,catppuccin-frappe-pink,catppuccin-frappe-mauve,catppuccin-frappe-red,catppuccin-frappe-maroon,catppuccin-frappe-peach,catppuccin-frappe-yellow,catppuccin-frappe-green,catppuccin-frappe-teal,catppuccin-frappe-sky,catppuccin-frappe-sapphire,catppuccin-frappe-blue,catppuccin-frappe-lavender,catppuccin-macchiato-rosewater,catppuccin-macchiato-flamingo,catppuccin-macchiato-pink,catppuccin-macchiato-mauve,catppuccin-macchiato-red,catppuccin-macchiato-maroon,catppuccin-macchiato-peach,catppuccin-macchiato-yellow,catppuccin-macchiato-green,catppuccin-macchiato-teal,catppuccin-macchiato-sky,catppuccin-macchiato-sapphire,catppuccin-macchiato-blue,catppuccin-macchiato-lavender,catppuccin-mocha-rosewater,catppuccin-mocha-flamingo,catppuccin-mocha-pink,catppuccin-mocha-mauve,catppuccin-mocha-red,catppuccin-mocha-maroon,catppuccin-mocha-peach,catppuccin-mocha-yellow,catppuccin-mocha-green,catppuccin-mocha-teal,catppuccin-mocha-sky,catppuccin-mocha-sapphire,catppuccin-mocha-blue,catppuccin-mocha-lavender

clusters/cl01tl/manifests/gitea/Service-gitea-valkey-headless.yaml

@@ -0,0 +1,23 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: gitea-valkey-headless
+  labels:
+    helm.sh/chart: valkey-0.9.3
+    app.kubernetes.io/name: valkey
+    app.kubernetes.io/instance: gitea
+    app.kubernetes.io/version: "9.0.3"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/component: headless
+spec:
+  type: ClusterIP
+  clusterIP: None
+  publishNotReadyAddresses: true
+  ports:
+    - name: tcp
+      port: 6379
+      targetPort: tcp
+      protocol: TCP
+  selector:
+    app.kubernetes.io/name: valkey
+    app.kubernetes.io/instance: gitea

clusters/cl01tl/manifests/gitea/Service-gitea-valkey-metrics.yaml

@@ -1,12 +1,12 @@
 apiVersion: v1
 kind: Service
 metadata:
-  name: gitea-valkey-renovate-metrics
+  name: gitea-valkey-metrics
   labels:
-    helm.sh/chart: valkey-renovate-0.9.3
+    helm.sh/chart: valkey-0.9.3
-    app.kubernetes.io/name: valkey-renovate
+    app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: gitea
-    app.kubernetes.io/version: "9.0.3-alpine"
+    app.kubernetes.io/version: "9.0.3"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/component: metrics
     app.kubernetes.io/part-of: valkey
@@ -19,5 +19,5 @@ spec:
       protocol: TCP
       targetPort: metrics
   selector:
-    app.kubernetes.io/name: valkey-renovate
+    app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: gitea

clusters/cl01tl/manifests/gitea/Service-gitea-valkey-read.yaml

@@ -0,0 +1,21 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: gitea-valkey-read
+  labels:
+    helm.sh/chart: valkey-0.9.3
+    app.kubernetes.io/name: valkey
+    app.kubernetes.io/instance: gitea
+    app.kubernetes.io/version: "9.0.3"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/component: read
+spec:
+  type: ClusterIP
+  ports:
+    - name: tcp
+      port: 6379
+      targetPort: tcp
+      protocol: TCP
+  selector:
+    app.kubernetes.io/name: valkey
+    app.kubernetes.io/instance: gitea

clusters/cl01tl/manifests/gitea/Service-gitea-valkey.yaml

@@ -1,12 +1,12 @@
 apiVersion: v1
 kind: Service
 metadata:
-  name: gitea-valkey-renovate
+  name: gitea-valkey
   labels:
-    helm.sh/chart: valkey-renovate-0.9.3
+    helm.sh/chart: valkey-0.9.3
-    app.kubernetes.io/name: valkey-renovate
+    app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: gitea
-    app.kubernetes.io/version: "9.0.3-alpine"
+    app.kubernetes.io/version: "9.0.3"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/component: primary
 spec:
@@ -17,5 +17,6 @@ spec:
       protocol: TCP
       name: tcp
   selector:
-    app.kubernetes.io/name: valkey-renovate
+    app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: gitea
+    statefulset.kubernetes.io/pod-name: gitea-valkey-0

clusters/cl01tl/manifests/gitea/ServiceAccount-gitea-valkey.yaml

@@ -1,11 +1,11 @@
 apiVersion: v1
 kind: ServiceAccount
 metadata:
-  name: gitea-valkey-renovate
+  name: gitea-valkey
   labels:
-    helm.sh/chart: valkey-renovate-0.9.3
+    helm.sh/chart: valkey-0.9.3
-    app.kubernetes.io/name: valkey-renovate
+    app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: gitea
-    app.kubernetes.io/version: "9.0.3-alpine"
+    app.kubernetes.io/version: "9.0.3"
     app.kubernetes.io/managed-by: Helm
 automountServiceAccountToken: false

clusters/cl01tl/manifests/gitea/ServiceMonitor-gitea-valkey.yaml

@@ -1,12 +1,12 @@
 apiVersion: monitoring.coreos.com/v1
 kind: ServiceMonitor
 metadata:
-  name: gitea-valkey-renovate
+  name: gitea-valkey
   labels:
-    helm.sh/chart: valkey-renovate-0.9.3
+    helm.sh/chart: valkey-0.9.3
-    app.kubernetes.io/name: valkey-renovate
+    app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: gitea
-    app.kubernetes.io/version: "9.0.3-alpine"
+    app.kubernetes.io/version: "9.0.3"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: valkey
     app.kubernetes.io/component: service-monitor
@@ -19,6 +19,6 @@ spec:
       - gitea
   selector:
     matchLabels:
-      app.kubernetes.io/name: valkey-renovate
+      app.kubernetes.io/name: valkey
       app.kubernetes.io/instance: gitea
       app.kubernetes.io/component: metrics

clusters/cl01tl/manifests/gitea/ServiceMonitor-redis-replication-gitea.yaml

@@ -1,22 +0,0 @@
-apiVersion: monitoring.coreos.com/v1
-kind: ServiceMonitor
-metadata:
-  name: redis-replication-gitea
-  namespace: gitea
-  labels:
-    helm.sh/chart: redis-replication-gitea-1.1.0
-    app.kubernetes.io/version: "1.1.0"
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: redis-replication-gitea
-    app.kubernetes.io/instance: gitea
-    app.kubernetes.io/part-of: gitea
-spec:
-  selector:
-    matchLabels:
-      app: redis-replication-gitea
-      redis_setup_type: replication
-      role: replication
-  endpoints:
-    - port: redis-exporter
-      interval: 30s
-      scrapeTimeout: 10s

clusters/cl01tl/manifests/gitea/StatefulSet-gitea-valkey.yaml

@@ -1,38 +1,48 @@
 apiVersion: apps/v1
-kind: Deployment
+kind: StatefulSet
 metadata:
-  name: gitea-valkey-renovate
+  name: gitea-valkey
   labels:
-    helm.sh/chart: valkey-renovate-0.9.3
+    helm.sh/chart: valkey-0.9.3
-    app.kubernetes.io/name: valkey-renovate
+    app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: gitea
-    app.kubernetes.io/version: "9.0.3-alpine"
+    app.kubernetes.io/version: "9.0.3"
     app.kubernetes.io/managed-by: Helm
 spec:
-  replicas: 1
+  serviceName: gitea-valkey-headless
-  strategy:
+  replicas: 3
-    type: RollingUpdate
+  podManagementPolicy: OrderedReady
   selector:
     matchLabels:
-      app.kubernetes.io/name: valkey-renovate
+      app.kubernetes.io/name: valkey
       app.kubernetes.io/instance: gitea
+  volumeClaimTemplates:
+    - metadata:
+        name: valkey-data
+      spec:
+        accessModes:
+          - ReadWriteOnce
+        storageClassName: "ceph-block"
+        resources:
+          requests:
+            storage: "1Gi"
   template:
     metadata:
       labels:
-        app.kubernetes.io/name: valkey-renovate
+        app.kubernetes.io/name: valkey
         app.kubernetes.io/instance: gitea
       annotations:
-        checksum/initconfig: 8b38dbae3567c0ddb2f926ca49682b35
+        checksum/initconfig: "b82939dee80151a39606083af0d5422a"
     spec:
       automountServiceAccountToken: false
-      serviceAccountName: gitea-valkey-renovate
+      serviceAccountName: gitea-valkey
       securityContext:
         fsGroup: 1000
         runAsGroup: 1000
         runAsUser: 1000
       initContainers:
-        - name: gitea-valkey-renovate-init
+        - name: gitea-valkey-init
-          image: ghcr.io/valkey-io/valkey:9.0.3-alpine
+          image: docker.io/valkey/valkey:9.0.3
           imagePullPolicy: IfNotPresent
           securityContext:
             capabilities:
@@ -42,14 +52,19 @@ spec:
             runAsNonRoot: true
             runAsUser: 1000
           command: ["/scripts/init.sh"]
+          env:
+            - name: POD_INDEX
+              valueFrom:
+                fieldRef:
+                  fieldPath: metadata.labels['apps.kubernetes.io/pod-index']
           volumeMounts:
             - name: valkey-data
               mountPath: /data
             - name: scripts
               mountPath: /scripts
       containers:
-        - name: gitea-valkey-renovate
+        - name: gitea-valkey
-          image: ghcr.io/valkey-io/valkey:9.0.3-alpine
+          image: docker.io/valkey/valkey:9.0.3
           imagePullPolicy: IfNotPresent
           command: ["valkey-server"]
           args: ["/data/conf/valkey.conf"]
@@ -61,6 +76,10 @@ spec:
             runAsNonRoot: true
             runAsUser: 1000
           env:
+            - name: POD_INDEX
+              valueFrom:
+                fieldRef:
+                  fieldPath: metadata.labels['apps.kubernetes.io/pod-index']
             - name: VALKEY_LOGLEVEL
               value: "notice"
           ports:
@@ -76,12 +95,12 @@ spec:
           resources:
             requests:
               cpu: 10m
-              memory: 32Mi
+              memory: 128Mi
           volumeMounts:
             - name: valkey-data
               mountPath: /data
         - name: metrics
-          image: ghcr.io/oliver006/redis_exporter:v1.79.0
+          image: ghcr.io/oliver006/redis_exporter:v1.81.0
           imagePullPolicy: "IfNotPresent"
           ports:
             - name: metrics
@@ -96,13 +115,15 @@ spec:
             httpGet:
               path: /
               port: metrics
+          resources:
+            requests:
+              cpu: 10m
+              memory: 64M
           env:
             - name: REDIS_ALIAS
-              value: gitea-valkey-renovate
+              value: gitea-valkey
       volumes:
         - name: scripts
           configMap:
-            name: gitea-valkey-renovate-init-scripts
+            name: gitea-valkey-init-scripts
             defaultMode: 0555
-        - name: valkey-data
-          emptyDir: {}

clusters/cl01tl/manifests/homepage/ConfigMap-homepage.yaml

@@ -60,6 +60,7 @@ data:
   custom.css: |
     .theme-stone {
         --color-200: #F8F9FA !important;
+        --color-800: #F8F9FA !important;
     }
     html {
         font-size: 18px;
@@ -685,9 +686,11 @@ data:
     favicon: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/logo-new-round.svg
     headerStyle: clean
     hideVersion: true
-    cardBlur: md
+    cardBlur: xs
+    color: stone
     background:
       image: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/background.jpg
+    theme: light
     disableCollapse: true
     layout:
       - Media:

clusters/cl01tl/manifests/homepage/Deployment-homepage.yaml

@@ -24,7 +24,7 @@ spec:
   template:
     metadata:
       annotations:
-        checksum/configMaps: 0e1d493c43af464eca7cf552e86400807dabaa81b6cc8279aa5d49fd242e6fa9
+        checksum/configMaps: 84767d61c3c6401e901600c8723a59987b67a36c68473aa54a5ee5b54fa9b4c4
         checksum/secrets: d3ba83f111cd32f92c909268c55ad8bbd4f9e299b74b35b33c1a011180d8b378
       labels:
         app.kubernetes.io/controller: main

clusters/cl01tl/manifests/postiz/ExternalSecret-postiz-valkey-config.yaml

@@ -16,27 +16,27 @@ spec:
       remoteRef:
         conversionStrategy: Default
         decodingStrategy: None
-        key: /cl01tl/postiz/redis
+        key: /cl01tl/postiz/valkey
         metadataPolicy: None
         property: url
     - secretKey: user
       remoteRef:
         conversionStrategy: Default
         decodingStrategy: None
-        key: /cl01tl/postiz/redis
+        key: /cl01tl/postiz/valkey
         metadataPolicy: None
         property: user
     - secretKey: password
       remoteRef:
         conversionStrategy: Default
         decodingStrategy: None
-        key: /cl01tl/postiz/redis
+        key: /cl01tl/postiz/valkey
         metadataPolicy: None
         property: password
     - secretKey: default
       remoteRef:
         conversionStrategy: Default
         decodingStrategy: None
-        key: /cl01tl/postiz/redis
+        key: /cl01tl/postiz/valkey
         metadataPolicy: None
         property: password