chore: Update manifests after change

2026-05-07 21:11:05 +00:00
parent e08c34e803
commit 847b53c5c9
423 changed files with 1108 additions and 565 deletions
--- a/clusters/cl01tl/manifests/actual/Deployment-actual.yaml
+++ b/clusters/cl01tl/manifests/actual/Deployment-actual.yaml
@@ -7,7 +7,7 @@ metadata:
    app.kubernetes.io/instance: actual
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: actual
-    helm.sh/chart: actual-4.6.2
+    helm.sh/chart: actual-5.0.0
  namespace: actual
 spec:
  revisionHistoryLimit: 3
@@ -27,8 +27,8 @@ spec:
        app.kubernetes.io/name: actual
    spec:
      enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: actual
+      automountServiceAccountToken: false
      hostIPC: false
      hostNetwork: false
      hostPID: false
--- a/clusters/cl01tl/manifests/actual/HTTPRoute-actual.yaml
+++ b/clusters/cl01tl/manifests/actual/HTTPRoute-actual.yaml
@@ -6,7 +6,7 @@ metadata:
    app.kubernetes.io/instance: actual
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: actual
-    helm.sh/chart: actual-4.6.2
+    helm.sh/chart: actual-5.0.0
  namespace: actual
 spec:
  parentRefs:
--- a/clusters/cl01tl/manifests/actual/PersistentVolumeClaim-actual-data.yaml
+++ b/clusters/cl01tl/manifests/actual/PersistentVolumeClaim-actual-data.yaml
@@ -6,7 +6,7 @@ metadata:
    app.kubernetes.io/instance: actual
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: actual
-    helm.sh/chart: actual-4.6.2
+    helm.sh/chart: actual-5.0.0
  namespace: actual
 spec:
  accessModes:
--- a/clusters/cl01tl/manifests/actual/Service-actual.yaml
+++ b/clusters/cl01tl/manifests/actual/Service-actual.yaml
@@ -7,7 +7,7 @@ metadata:
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: actual
    app.kubernetes.io/service: actual
-    helm.sh/chart: actual-4.6.2
+    helm.sh/chart: actual-5.0.0
  namespace: actual
 spec:
  type: ClusterIP
--- a/clusters/cl01tl/manifests/actual/ServiceAccount-actual.yaml
+++ b/clusters/cl01tl/manifests/actual/ServiceAccount-actual.yaml
@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: actual
+  labels:
+    app.kubernetes.io/instance: actual
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: actual
+    helm.sh/chart: actual-5.0.0
+  namespace: actual
--- a/clusters/cl01tl/manifests/audiobookshelf/Deployment-audiobookshelf.yaml
+++ b/clusters/cl01tl/manifests/audiobookshelf/Deployment-audiobookshelf.yaml
@@ -7,7 +7,7 @@ metadata:
    app.kubernetes.io/instance: audiobookshelf
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: audiobookshelf
-    helm.sh/chart: audiobookshelf-4.6.2
+    helm.sh/chart: audiobookshelf-5.0.0
  namespace: audiobookshelf
 spec:
  revisionHistoryLimit: 3
@@ -27,8 +27,8 @@ spec:
        app.kubernetes.io/name: audiobookshelf
    spec:
      enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: audiobookshelf
+      automountServiceAccountToken: false
      securityContext:
        fsGroup: 1000
        fsGroupChangePolicy: OnRootMismatch
--- a/clusters/cl01tl/manifests/audiobookshelf/HTTPRoute-audiobookshelf.yaml
+++ b/clusters/cl01tl/manifests/audiobookshelf/HTTPRoute-audiobookshelf.yaml
@@ -6,7 +6,7 @@ metadata:
    app.kubernetes.io/instance: audiobookshelf
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: audiobookshelf
-    helm.sh/chart: audiobookshelf-4.6.2
+    helm.sh/chart: audiobookshelf-5.0.0
  namespace: audiobookshelf
 spec:
  parentRefs:
--- a/clusters/cl01tl/manifests/audiobookshelf/PersistentVolumeClaim-audiobookshelf-config.yaml
+++ b/clusters/cl01tl/manifests/audiobookshelf/PersistentVolumeClaim-audiobookshelf-config.yaml
@@ -6,7 +6,7 @@ metadata:
    app.kubernetes.io/instance: audiobookshelf
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: audiobookshelf
-    helm.sh/chart: audiobookshelf-4.6.2
+    helm.sh/chart: audiobookshelf-5.0.0
  namespace: audiobookshelf
 spec:
  accessModes:
--- a/clusters/cl01tl/manifests/audiobookshelf/PersistentVolumeClaim-audiobookshelf-metadata.yaml
+++ b/clusters/cl01tl/manifests/audiobookshelf/PersistentVolumeClaim-audiobookshelf-metadata.yaml
@@ -6,7 +6,7 @@ metadata:
    app.kubernetes.io/instance: audiobookshelf
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: audiobookshelf
-    helm.sh/chart: audiobookshelf-4.6.2
+    helm.sh/chart: audiobookshelf-5.0.0
  namespace: audiobookshelf
 spec:
  accessModes:
--- a/clusters/cl01tl/manifests/audiobookshelf/Service-audiobookshelf.yaml
+++ b/clusters/cl01tl/manifests/audiobookshelf/Service-audiobookshelf.yaml
@@ -7,7 +7,7 @@ metadata:
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: audiobookshelf
    app.kubernetes.io/service: audiobookshelf
-    helm.sh/chart: audiobookshelf-4.6.2
+    helm.sh/chart: audiobookshelf-5.0.0
  namespace: audiobookshelf
 spec:
  type: ClusterIP
--- a/clusters/cl01tl/manifests/audiobookshelf/ServiceAccount-audiobookshelf.yaml
+++ b/clusters/cl01tl/manifests/audiobookshelf/ServiceAccount-audiobookshelf.yaml
@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: audiobookshelf
+  labels:
+    app.kubernetes.io/instance: audiobookshelf
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: audiobookshelf
+    helm.sh/chart: audiobookshelf-5.0.0
+  namespace: audiobookshelf
--- a/clusters/cl01tl/manifests/audiobookshelf/ServiceMonitor-audiobookshelf.yaml
+++ b/clusters/cl01tl/manifests/audiobookshelf/ServiceMonitor-audiobookshelf.yaml
@@ -6,10 +6,10 @@ metadata:
    app.kubernetes.io/instance: audiobookshelf
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: audiobookshelf
-    helm.sh/chart: audiobookshelf-4.6.2
+    helm.sh/chart: audiobookshelf-5.0.0
  namespace: audiobookshelf
 spec:
-  jobLabel: audiobookshelf
+  jobLabel: app.kubernetes.io/name
  namespaceSelector:
    matchNames:
      - audiobookshelf
--- a/clusters/cl01tl/manifests/backrest/Deployment-backrest.yaml
+++ b/clusters/cl01tl/manifests/backrest/Deployment-backrest.yaml
@@ -7,7 +7,7 @@ metadata:
    app.kubernetes.io/instance: backrest
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: backrest
-    helm.sh/chart: backrest-4.6.2
+    helm.sh/chart: backrest-5.0.0
  namespace: backrest
 spec:
  revisionHistoryLimit: 3
@@ -27,8 +27,8 @@ spec:
        app.kubernetes.io/name: backrest
    spec:
      enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: backrest
+      automountServiceAccountToken: false
      hostIPC: false
      hostNetwork: false
      hostPID: false
--- a/clusters/cl01tl/manifests/backrest/HTTPRoute-backrest.yaml
+++ b/clusters/cl01tl/manifests/backrest/HTTPRoute-backrest.yaml
@@ -6,7 +6,7 @@ metadata:
    app.kubernetes.io/instance: backrest
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: backrest
-    helm.sh/chart: backrest-4.6.2
+    helm.sh/chart: backrest-5.0.0
  namespace: backrest
 spec:
  parentRefs:
--- a/clusters/cl01tl/manifests/backrest/PersistentVolumeClaim-backrest-config.yaml
+++ b/clusters/cl01tl/manifests/backrest/PersistentVolumeClaim-backrest-config.yaml
@@ -6,7 +6,7 @@ metadata:
    app.kubernetes.io/instance: backrest
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: backrest
-    helm.sh/chart: backrest-4.6.2
+    helm.sh/chart: backrest-5.0.0
  namespace: backrest
 spec:
  accessModes:
--- a/clusters/cl01tl/manifests/backrest/PersistentVolumeClaim-backrest-data.yaml
+++ b/clusters/cl01tl/manifests/backrest/PersistentVolumeClaim-backrest-data.yaml
@@ -6,7 +6,7 @@ metadata:
    app.kubernetes.io/instance: backrest
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: backrest
-    helm.sh/chart: backrest-4.6.2
+    helm.sh/chart: backrest-5.0.0
  namespace: backrest
 spec:
  accessModes:
--- a/clusters/cl01tl/manifests/backrest/Service-backrest.yaml
+++ b/clusters/cl01tl/manifests/backrest/Service-backrest.yaml
@@ -7,7 +7,7 @@ metadata:
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: backrest
    app.kubernetes.io/service: backrest
-    helm.sh/chart: backrest-4.6.2
+    helm.sh/chart: backrest-5.0.0
  namespace: backrest
 spec:
  type: ClusterIP
--- a/clusters/cl01tl/manifests/backrest/ServiceAccount-backrest.yaml
+++ b/clusters/cl01tl/manifests/backrest/ServiceAccount-backrest.yaml
@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: backrest
+  labels:
+    app.kubernetes.io/instance: backrest
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: backrest
+    helm.sh/chart: backrest-5.0.0
+  namespace: backrest
--- a/clusters/cl01tl/manifests/backrest/ServiceMonitor-backrest.yaml
+++ b/clusters/cl01tl/manifests/backrest/ServiceMonitor-backrest.yaml
@@ -6,10 +6,10 @@ metadata:
    app.kubernetes.io/instance: backrest
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: backrest
-    helm.sh/chart: backrest-4.6.2
+    helm.sh/chart: backrest-5.0.0
  namespace: backrest
 spec:
-  jobLabel: backrest
+  jobLabel: app.kubernetes.io/name
  namespaceSelector:
    matchNames:
      - backrest
--- a/clusters/cl01tl/manifests/bazarr/Deployment-bazarr.yaml
+++ b/clusters/cl01tl/manifests/bazarr/Deployment-bazarr.yaml
@@ -7,7 +7,7 @@ metadata:
    app.kubernetes.io/instance: bazarr
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: bazarr
-    helm.sh/chart: bazarr-4.6.2
+    helm.sh/chart: bazarr-5.0.0
  namespace: bazarr
 spec:
  revisionHistoryLimit: 3
@@ -27,8 +27,8 @@ spec:
        app.kubernetes.io/name: bazarr
    spec:
      enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: bazarr
+      automountServiceAccountToken: false
      securityContext:
        fsGroup: 1000
        fsGroupChangePolicy: OnRootMismatch
--- a/clusters/cl01tl/manifests/bazarr/HTTPRoute-bazarr.yaml
+++ b/clusters/cl01tl/manifests/bazarr/HTTPRoute-bazarr.yaml
@@ -6,7 +6,7 @@ metadata:
    app.kubernetes.io/instance: bazarr
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: bazarr
-    helm.sh/chart: bazarr-4.6.2
+    helm.sh/chart: bazarr-5.0.0
  namespace: bazarr
 spec:
  parentRefs:
--- a/clusters/cl01tl/manifests/bazarr/PersistentVolumeClaim-bazarr-config.yaml
+++ b/clusters/cl01tl/manifests/bazarr/PersistentVolumeClaim-bazarr-config.yaml
@@ -6,7 +6,7 @@ metadata:
    app.kubernetes.io/instance: bazarr
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: bazarr
-    helm.sh/chart: bazarr-4.6.2
+    helm.sh/chart: bazarr-5.0.0
  namespace: bazarr
 spec:
  accessModes:
--- a/clusters/cl01tl/manifests/bazarr/Service-bazarr.yaml
+++ b/clusters/cl01tl/manifests/bazarr/Service-bazarr.yaml
@@ -7,7 +7,7 @@ metadata:
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: bazarr
    app.kubernetes.io/service: bazarr
-    helm.sh/chart: bazarr-4.6.2
+    helm.sh/chart: bazarr-5.0.0
  namespace: bazarr
 spec:
  type: ClusterIP
--- a/clusters/cl01tl/manifests/bazarr/ServiceAccount-bazarr.yaml
+++ b/clusters/cl01tl/manifests/bazarr/ServiceAccount-bazarr.yaml
@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: bazarr
+  labels:
+    app.kubernetes.io/instance: bazarr
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: bazarr
+    helm.sh/chart: bazarr-5.0.0
+  namespace: bazarr
--- a/clusters/cl01tl/manifests/bazarr/ServiceMonitor-bazarr.yaml
+++ b/clusters/cl01tl/manifests/bazarr/ServiceMonitor-bazarr.yaml
@@ -6,10 +6,10 @@ metadata:
    app.kubernetes.io/instance: bazarr
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: bazarr
-    helm.sh/chart: bazarr-4.6.2
+    helm.sh/chart: bazarr-5.0.0
  namespace: bazarr
 spec:
-  jobLabel: bazarr
+  jobLabel: app.kubernetes.io/name
  namespaceSelector:
    matchNames:
      - bazarr
--- a/clusters/cl01tl/manifests/blocky/ConfigMap-blocky.yaml
+++ b/clusters/cl01tl/manifests/blocky/ConfigMap-blocky.yaml
@@ -6,7 +6,7 @@ metadata:
    app.kubernetes.io/instance: blocky
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: blocky
-    helm.sh/chart: blocky-4.6.2
+    helm.sh/chart: blocky-5.0.0
  namespace: blocky
 data:
  config.yml: |
--- a/clusters/cl01tl/manifests/blocky/Deployment-blocky.yaml
+++ b/clusters/cl01tl/manifests/blocky/Deployment-blocky.yaml
@@ -7,7 +7,7 @@ metadata:
    app.kubernetes.io/instance: blocky
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: blocky
-    helm.sh/chart: blocky-4.6.2
+    helm.sh/chart: blocky-5.0.0
  namespace: blocky
 spec:
  revisionHistoryLimit: 3
@@ -29,8 +29,8 @@ spec:
        app.kubernetes.io/name: blocky
    spec:
      enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: blocky
+      automountServiceAccountToken: false
      hostIPC: false
      hostNetwork: false
      hostPID: false
--- a/clusters/cl01tl/manifests/blocky/Service-blocky-dns-external.yaml
+++ b/clusters/cl01tl/manifests/blocky/Service-blocky-dns-external.yaml
@@ -7,7 +7,7 @@ metadata:
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: blocky
    app.kubernetes.io/service: blocky-dns-external
-    helm.sh/chart: blocky-4.6.2
+    helm.sh/chart: blocky-5.0.0
  annotations:
    tailscale.com/expose: "true"
  namespace: blocky
--- a/clusters/cl01tl/manifests/blocky/Service-blocky-metrics.yaml
+++ b/clusters/cl01tl/manifests/blocky/Service-blocky-metrics.yaml
@@ -7,7 +7,7 @@ metadata:
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: blocky
    app.kubernetes.io/service: blocky-metrics
-    helm.sh/chart: blocky-4.6.2
+    helm.sh/chart: blocky-5.0.0
  namespace: blocky
 spec:
  type: ClusterIP
--- a/clusters/cl01tl/manifests/blocky/ServiceAccount-blocky.yaml
+++ b/clusters/cl01tl/manifests/blocky/ServiceAccount-blocky.yaml
@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: blocky
+  labels:
+    app.kubernetes.io/instance: blocky
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: blocky
+    helm.sh/chart: blocky-5.0.0
+  namespace: blocky
--- a/clusters/cl01tl/manifests/blocky/ServiceMonitor-blocky.yaml
+++ b/clusters/cl01tl/manifests/blocky/ServiceMonitor-blocky.yaml
@@ -6,10 +6,10 @@ metadata:
    app.kubernetes.io/instance: blocky
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: blocky
-    helm.sh/chart: blocky-4.6.2
+    helm.sh/chart: blocky-5.0.0
  namespace: blocky
 spec:
-  jobLabel: blocky
+  jobLabel: app.kubernetes.io/name
  namespaceSelector:
    matchNames:
      - blocky
--- a/clusters/cl01tl/manifests/dawarich/Deployment-dawarich.yaml
+++ b/clusters/cl01tl/manifests/dawarich/Deployment-dawarich.yaml
@@ -7,7 +7,7 @@ metadata:
    app.kubernetes.io/instance: dawarich
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: dawarich
-    helm.sh/chart: dawarich-4.6.2
+    helm.sh/chart: dawarich-5.0.0
  namespace: dawarich
 spec:
  revisionHistoryLimit: 3
@@ -27,8 +27,8 @@ spec:
        app.kubernetes.io/name: dawarich
    spec:
      enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: dawarich
+      automountServiceAccountToken: false
      hostIPC: false
      hostNetwork: false
      hostPID: false
--- a/clusters/cl01tl/manifests/dawarich/HTTPRoute-dawarich.yaml
+++ b/clusters/cl01tl/manifests/dawarich/HTTPRoute-dawarich.yaml
@@ -6,7 +6,7 @@ metadata:
    app.kubernetes.io/instance: dawarich
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: dawarich
-    helm.sh/chart: dawarich-4.6.2
+    helm.sh/chart: dawarich-5.0.0
  namespace: dawarich
 spec:
  parentRefs:
--- a/clusters/cl01tl/manifests/dawarich/PersistentVolumeClaim-dawarich-public.yaml
+++ b/clusters/cl01tl/manifests/dawarich/PersistentVolumeClaim-dawarich-public.yaml
@@ -6,7 +6,7 @@ metadata:
    app.kubernetes.io/instance: dawarich
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: dawarich
-    helm.sh/chart: dawarich-4.6.2
+    helm.sh/chart: dawarich-5.0.0
  namespace: dawarich
 spec:
  accessModes:
--- a/clusters/cl01tl/manifests/dawarich/PersistentVolumeClaim-dawarich-storage.yaml
+++ b/clusters/cl01tl/manifests/dawarich/PersistentVolumeClaim-dawarich-storage.yaml
@@ -6,7 +6,7 @@ metadata:
    app.kubernetes.io/instance: dawarich
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: dawarich
-    helm.sh/chart: dawarich-4.6.2
+    helm.sh/chart: dawarich-5.0.0
  namespace: dawarich
 spec:
  accessModes:
--- a/clusters/cl01tl/manifests/dawarich/PersistentVolumeClaim-dawarich-watched.yaml
+++ b/clusters/cl01tl/manifests/dawarich/PersistentVolumeClaim-dawarich-watched.yaml
@@ -6,7 +6,7 @@ metadata:
    app.kubernetes.io/instance: dawarich
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: dawarich
-    helm.sh/chart: dawarich-4.6.2
+    helm.sh/chart: dawarich-5.0.0
  namespace: dawarich
 spec:
  accessModes:
--- a/clusters/cl01tl/manifests/dawarich/Service-dawarich.yaml
+++ b/clusters/cl01tl/manifests/dawarich/Service-dawarich.yaml
@@ -7,7 +7,7 @@ metadata:
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: dawarich
    app.kubernetes.io/service: dawarich
-    helm.sh/chart: dawarich-4.6.2
+    helm.sh/chart: dawarich-5.0.0
  namespace: dawarich
 spec:
  type: ClusterIP
--- a/clusters/cl01tl/manifests/dawarich/ServiceAccount-dawarich.yaml
+++ b/clusters/cl01tl/manifests/dawarich/ServiceAccount-dawarich.yaml
@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: dawarich
+  labels:
+    app.kubernetes.io/instance: dawarich
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: dawarich
+    helm.sh/chart: dawarich-5.0.0
+  namespace: dawarich
--- a/clusters/cl01tl/manifests/dawarich/ServiceMonitor-dawarich.yaml
+++ b/clusters/cl01tl/manifests/dawarich/ServiceMonitor-dawarich.yaml
@@ -6,10 +6,10 @@ metadata:
    app.kubernetes.io/instance: dawarich
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: dawarich
-    helm.sh/chart: dawarich-4.6.2
+    helm.sh/chart: dawarich-5.0.0
  namespace: dawarich
 spec:
-  jobLabel: dawarich
+  jobLabel: app.kubernetes.io/name
  namespaceSelector:
    matchNames:
      - dawarich
--- a/clusters/cl01tl/manifests/directus/CronJob-directus-directus-assets-external-rclone.yaml
+++ b/clusters/cl01tl/manifests/directus/CronJob-directus-directus-assets-external-rclone.yaml
@@ -30,7 +30,7 @@ spec:
            app.kubernetes.io/name: directus-assets-external-rclone
        spec:
          enableServiceLinks: false
-          serviceAccountName: default
+          serviceAccountName: directus
          automountServiceAccountToken: true
          hostIPC: false
          hostNetwork: false
--- a/clusters/cl01tl/manifests/directus/CronJob-directus-directus-assets-remote-rclone.yaml
+++ b/clusters/cl01tl/manifests/directus/CronJob-directus-directus-assets-remote-rclone.yaml
@@ -30,7 +30,7 @@ spec:
            app.kubernetes.io/name: directus-assets-remote-rclone
        spec:
          enableServiceLinks: false
-          serviceAccountName: default
+          serviceAccountName: directus
          automountServiceAccountToken: true
          hostIPC: false
          hostNetwork: false
--- a/clusters/cl01tl/manifests/directus/Deployment-directus.yaml
+++ b/clusters/cl01tl/manifests/directus/Deployment-directus.yaml
@@ -7,7 +7,7 @@ metadata:
    app.kubernetes.io/instance: directus
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: directus
-    helm.sh/chart: directus-4.6.2
+    helm.sh/chart: directus-5.0.0
  namespace: directus
 spec:
  revisionHistoryLimit: 3
@@ -27,8 +27,8 @@ spec:
        app.kubernetes.io/name: directus
    spec:
      enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: directus
+      automountServiceAccountToken: false
      hostIPC: false
      hostNetwork: false
      hostPID: false
--- a/clusters/cl01tl/manifests/directus/HTTPRoute-directus.yaml
+++ b/clusters/cl01tl/manifests/directus/HTTPRoute-directus.yaml
@@ -6,7 +6,7 @@ metadata:
    app.kubernetes.io/instance: directus
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: directus
-    helm.sh/chart: directus-4.6.2
+    helm.sh/chart: directus-5.0.0
  namespace: directus
 spec:
  parentRefs:
--- a/clusters/cl01tl/manifests/directus/Service-directus.yaml
+++ b/clusters/cl01tl/manifests/directus/Service-directus.yaml
@@ -7,7 +7,7 @@ metadata:
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: directus
    app.kubernetes.io/service: directus
-    helm.sh/chart: directus-4.6.2
+    helm.sh/chart: directus-5.0.0
  namespace: directus
 spec:
  type: ClusterIP
--- a/clusters/cl01tl/manifests/directus/ServiceAccount-directus-directus-assets-external-rclone.yaml
+++ b/clusters/cl01tl/manifests/directus/ServiceAccount-directus-directus-assets-external-rclone.yaml
@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: directus-directus-assets-external-rclone
+  labels:
+    app.kubernetes.io/instance: directus
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: directus-assets-external-rclone
+    app.kubernetes.io/version: v1.74.0
+    helm.sh/chart: rclone-directus-assets-external-0.7.0
+  namespace: directus
--- a/clusters/cl01tl/manifests/directus/ServiceAccount-directus-directus-assets-remote-rclone.yaml
+++ b/clusters/cl01tl/manifests/directus/ServiceAccount-directus-directus-assets-remote-rclone.yaml
@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: directus-directus-assets-remote-rclone
+  labels:
+    app.kubernetes.io/instance: directus
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: directus-assets-remote-rclone
+    app.kubernetes.io/version: v1.74.0
+    helm.sh/chart: rclone-directus-assets-remote-0.7.0
+  namespace: directus
--- a/clusters/cl01tl/manifests/directus/ServiceAccount-directus.yaml
+++ b/clusters/cl01tl/manifests/directus/ServiceAccount-directus.yaml
@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: directus
+  labels:
+    app.kubernetes.io/instance: directus
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: directus
+    helm.sh/chart: directus-5.0.0
+  namespace: directus
--- a/clusters/cl01tl/manifests/directus/ServiceMonitor-directus.yaml
+++ b/clusters/cl01tl/manifests/directus/ServiceMonitor-directus.yaml
@@ -6,10 +6,10 @@ metadata:
    app.kubernetes.io/instance: directus
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: directus
-    helm.sh/chart: directus-4.6.2
+    helm.sh/chart: directus-5.0.0
  namespace: directus
 spec:
-  jobLabel: directus
+  jobLabel: app.kubernetes.io/name
  namespaceSelector:
    matchNames:
      - directus
--- a/clusters/cl01tl/manifests/eraser/ConfigMap-eraser-config.yaml
+++ b/clusters/cl01tl/manifests/eraser/ConfigMap-eraser-config.yaml
@@ -6,7 +6,7 @@ metadata:
    app.kubernetes.io/instance: eraser
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: eraser-metrics
-    helm.sh/chart: eraser-metrics-4.6.2
+    helm.sh/chart: eraser-metrics-5.0.0
  namespace: eraser
 data:
  otel-collector-config.yaml: |
--- a/clusters/cl01tl/manifests/eraser/Deployment-eraser-metrics.yaml
+++ b/clusters/cl01tl/manifests/eraser/Deployment-eraser-metrics.yaml
@@ -7,7 +7,7 @@ metadata:
    app.kubernetes.io/instance: eraser
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: eraser-metrics
-    helm.sh/chart: eraser-metrics-4.6.2
+    helm.sh/chart: eraser-metrics-5.0.0
  namespace: eraser
 spec:
  revisionHistoryLimit: 3
@@ -29,8 +29,8 @@ spec:
        app.kubernetes.io/name: eraser-metrics
    spec:
      enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: eraser
+      automountServiceAccountToken: false
      hostIPC: false
      hostNetwork: false
      hostPID: false
--- a/clusters/cl01tl/manifests/eraser/Service-eraser-metrics.yaml
+++ b/clusters/cl01tl/manifests/eraser/Service-eraser-metrics.yaml
@@ -7,7 +7,7 @@ metadata:
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: eraser-metrics
    app.kubernetes.io/service: eraser-metrics
-    helm.sh/chart: eraser-metrics-4.6.2
+    helm.sh/chart: eraser-metrics-5.0.0
  namespace: eraser
 spec:
  type: ClusterIP
--- a/clusters/cl01tl/manifests/eraser/ServiceAccount-eraser-metrics.yaml
+++ b/clusters/cl01tl/manifests/eraser/ServiceAccount-eraser-metrics.yaml
@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: eraser-metrics
+  labels:
+    app.kubernetes.io/instance: eraser
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: eraser-metrics
+    helm.sh/chart: eraser-metrics-5.0.0
+  namespace: eraser
--- a/clusters/cl01tl/manifests/eraser/ServiceMonitor-eraser-metrics.yaml
+++ b/clusters/cl01tl/manifests/eraser/ServiceMonitor-eraser-metrics.yaml
@@ -6,10 +6,10 @@ metadata:
    app.kubernetes.io/instance: eraser
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: eraser-metrics
-    helm.sh/chart: eraser-metrics-4.6.2
+    helm.sh/chart: eraser-metrics-5.0.0
  namespace: eraser
 spec:
-  jobLabel: eraser-metrics
+  jobLabel: app.kubernetes.io/name
  namespaceSelector:
    matchNames:
      - eraser
--- a/clusters/cl01tl/manifests/excalidraw/Deployment-excalidraw.yaml
+++ b/clusters/cl01tl/manifests/excalidraw/Deployment-excalidraw.yaml
@@ -7,7 +7,7 @@ metadata:
    app.kubernetes.io/instance: excalidraw
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: excalidraw
-    helm.sh/chart: excalidraw-4.6.2
+    helm.sh/chart: excalidraw-5.0.0
  namespace: excalidraw
 spec:
  revisionHistoryLimit: 3
@@ -27,8 +27,8 @@ spec:
        app.kubernetes.io/name: excalidraw
    spec:
      enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: excalidraw
+      automountServiceAccountToken: false
      hostIPC: false
      hostNetwork: false
      hostPID: false
--- a/clusters/cl01tl/manifests/excalidraw/HTTPRoute-excalidraw.yaml
+++ b/clusters/cl01tl/manifests/excalidraw/HTTPRoute-excalidraw.yaml
@@ -6,7 +6,7 @@ metadata:
    app.kubernetes.io/instance: excalidraw
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: excalidraw
-    helm.sh/chart: excalidraw-4.6.2
+    helm.sh/chart: excalidraw-5.0.0
  namespace: excalidraw
 spec:
  parentRefs:
--- a/clusters/cl01tl/manifests/excalidraw/Service-excalidraw.yaml
+++ b/clusters/cl01tl/manifests/excalidraw/Service-excalidraw.yaml
@@ -7,7 +7,7 @@ metadata:
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: excalidraw
    app.kubernetes.io/service: excalidraw
-    helm.sh/chart: excalidraw-4.6.2
+    helm.sh/chart: excalidraw-5.0.0
  namespace: excalidraw
 spec:
  type: ClusterIP
--- a/clusters/cl01tl/manifests/excalidraw/ServiceAccount-excalidraw.yaml
+++ b/clusters/cl01tl/manifests/excalidraw/ServiceAccount-excalidraw.yaml
@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: excalidraw
+  labels:
+    app.kubernetes.io/instance: excalidraw
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: excalidraw
+    helm.sh/chart: excalidraw-5.0.0
+  namespace: excalidraw
--- a/clusters/cl01tl/manifests/foldergram/Deployment-foldergram.yaml
+++ b/clusters/cl01tl/manifests/foldergram/Deployment-foldergram.yaml
@@ -7,7 +7,7 @@ metadata:
    app.kubernetes.io/instance: foldergram
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: foldergram
-    helm.sh/chart: foldergram-4.6.2
+    helm.sh/chart: foldergram-5.0.0
  namespace: foldergram
 spec:
  revisionHistoryLimit: 3
@@ -28,7 +28,7 @@ spec:
    spec:
      enableServiceLinks: false
      serviceAccountName: default
-      automountServiceAccountToken: true
+      automountServiceAccountToken: false
      securityContext:
        fsGroup: 1000
        fsGroupChangePolicy: OnRootMismatch
--- a/clusters/cl01tl/manifests/foldergram/HTTPRoute-foldergram.yaml
+++ b/clusters/cl01tl/manifests/foldergram/HTTPRoute-foldergram.yaml
@@ -6,7 +6,7 @@ metadata:
    app.kubernetes.io/instance: foldergram
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: foldergram
-    helm.sh/chart: foldergram-4.6.2
+    helm.sh/chart: foldergram-5.0.0
  namespace: foldergram
 spec:
  parentRefs:
--- a/clusters/cl01tl/manifests/foldergram/PersistentVolumeClaim-foldergram-data.yaml
+++ b/clusters/cl01tl/manifests/foldergram/PersistentVolumeClaim-foldergram-data.yaml
@@ -6,7 +6,7 @@ metadata:
    app.kubernetes.io/instance: foldergram
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: foldergram
-    helm.sh/chart: foldergram-4.6.2
+    helm.sh/chart: foldergram-5.0.0
  namespace: foldergram
 spec:
  accessModes:
--- a/clusters/cl01tl/manifests/foldergram/PersistentVolumeClaim-foldergram-db.yaml
+++ b/clusters/cl01tl/manifests/foldergram/PersistentVolumeClaim-foldergram-db.yaml
@@ -6,7 +6,7 @@ metadata:
    app.kubernetes.io/instance: foldergram
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: foldergram
-    helm.sh/chart: foldergram-4.6.2
+    helm.sh/chart: foldergram-5.0.0
  namespace: foldergram
 spec:
  accessModes:
--- a/clusters/cl01tl/manifests/foldergram/Service-foldergram.yaml
+++ b/clusters/cl01tl/manifests/foldergram/Service-foldergram.yaml
@@ -7,7 +7,7 @@ metadata:
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: foldergram
    app.kubernetes.io/service: foldergram
-    helm.sh/chart: foldergram-4.6.2
+    helm.sh/chart: foldergram-5.0.0
  namespace: foldergram
 spec:
  type: ClusterIP
--- a/clusters/cl01tl/manifests/freshrss/Deployment-freshrss.yaml
+++ b/clusters/cl01tl/manifests/freshrss/Deployment-freshrss.yaml
@@ -7,7 +7,7 @@ metadata:
    app.kubernetes.io/instance: freshrss
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: freshrss
-    helm.sh/chart: freshrss-4.6.2
+    helm.sh/chart: freshrss-5.0.0
  namespace: freshrss
 spec:
  revisionHistoryLimit: 3
@@ -28,7 +28,7 @@ spec:
    spec:
      enableServiceLinks: false
      serviceAccountName: default
-      automountServiceAccountToken: true
+      automountServiceAccountToken: false
      hostIPC: false
      hostNetwork: false
      hostPID: false
--- a/clusters/cl01tl/manifests/freshrss/PersistentVolumeClaim-freshrss-data.yaml
+++ b/clusters/cl01tl/manifests/freshrss/PersistentVolumeClaim-freshrss-data.yaml
@@ -6,7 +6,7 @@ metadata:
    app.kubernetes.io/instance: freshrss
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: freshrss
-    helm.sh/chart: freshrss-4.6.2
+    helm.sh/chart: freshrss-5.0.0
  namespace: freshrss
 spec:
  accessModes:
--- a/clusters/cl01tl/manifests/freshrss/Service-freshrss.yaml
+++ b/clusters/cl01tl/manifests/freshrss/Service-freshrss.yaml
@@ -7,7 +7,7 @@ metadata:
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: freshrss
    app.kubernetes.io/service: freshrss
-    helm.sh/chart: freshrss-4.6.2
+    helm.sh/chart: freshrss-5.0.0
  namespace: freshrss
 spec:
  type: ClusterIP
--- a/clusters/cl01tl/manifests/garage/ConfigMap-garage.yaml
+++ b/clusters/cl01tl/manifests/garage/ConfigMap-garage.yaml
@@ -6,7 +6,7 @@ metadata:
    app.kubernetes.io/instance: garage
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: garage
-    helm.sh/chart: garage-4.6.2
+    helm.sh/chart: garage-5.0.0
  namespace: garage
 data:
  garage-1.toml: |
--- a/clusters/cl01tl/manifests/garage/Deployment-garage-server-1.yaml
+++ b/clusters/cl01tl/manifests/garage/Deployment-garage-server-1.yaml
@@ -7,7 +7,7 @@ metadata:
    app.kubernetes.io/instance: garage
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: garage
-    helm.sh/chart: garage-4.6.2
+    helm.sh/chart: garage-5.0.0
  namespace: garage
 spec:
  revisionHistoryLimit: 3
@@ -30,8 +30,8 @@ spec:
        garage-type: server
    spec:
      enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: garage
+      automountServiceAccountToken: false
      hostIPC: false
      hostNetwork: false
      hostPID: false
--- a/clusters/cl01tl/manifests/garage/Deployment-garage-server-2.yaml
+++ b/clusters/cl01tl/manifests/garage/Deployment-garage-server-2.yaml
@@ -7,7 +7,7 @@ metadata:
    app.kubernetes.io/instance: garage
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: garage
-    helm.sh/chart: garage-4.6.2
+    helm.sh/chart: garage-5.0.0
  namespace: garage
 spec:
  revisionHistoryLimit: 3
@@ -30,8 +30,8 @@ spec:
        garage-type: server
    spec:
      enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: garage
+      automountServiceAccountToken: false
      hostIPC: false
      hostNetwork: false
      hostPID: false
--- a/clusters/cl01tl/manifests/garage/Deployment-garage-server-3.yaml
+++ b/clusters/cl01tl/manifests/garage/Deployment-garage-server-3.yaml
@@ -7,7 +7,7 @@ metadata:
    app.kubernetes.io/instance: garage
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: garage
-    helm.sh/chart: garage-4.6.2
+    helm.sh/chart: garage-5.0.0
  namespace: garage
 spec:
  revisionHistoryLimit: 3
@@ -30,8 +30,8 @@ spec:
        garage-type: server
    spec:
      enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: garage
+      automountServiceAccountToken: false
      hostIPC: false
      hostNetwork: false
      hostPID: false
--- a/clusters/cl01tl/manifests/garage/Deployment-garage-webui.yaml
+++ b/clusters/cl01tl/manifests/garage/Deployment-garage-webui.yaml
@@ -7,7 +7,7 @@ metadata:
    app.kubernetes.io/instance: garage
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: garage
-    helm.sh/chart: garage-4.6.2
+    helm.sh/chart: garage-5.0.0
  namespace: garage
 spec:
  revisionHistoryLimit: 3
@@ -29,8 +29,8 @@ spec:
        app.kubernetes.io/name: garage
    spec:
      enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: garage
+      automountServiceAccountToken: false
      hostIPC: false
      hostNetwork: false
      hostPID: false
--- a/clusters/cl01tl/manifests/garage/HTTPRoute-garage-s3.yaml
+++ b/clusters/cl01tl/manifests/garage/HTTPRoute-garage-s3.yaml
@@ -6,7 +6,7 @@ metadata:
    app.kubernetes.io/instance: garage
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: garage
-    helm.sh/chart: garage-4.6.2
+    helm.sh/chart: garage-5.0.0
  namespace: garage
 spec:
  parentRefs:
--- a/clusters/cl01tl/manifests/garage/HTTPRoute-garage-webui.yaml
+++ b/clusters/cl01tl/manifests/garage/HTTPRoute-garage-webui.yaml
@@ -6,7 +6,7 @@ metadata:
    app.kubernetes.io/instance: garage
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: garage
-    helm.sh/chart: garage-4.6.2
+    helm.sh/chart: garage-5.0.0
  namespace: garage
 spec:
  parentRefs:
--- a/clusters/cl01tl/manifests/garage/PersistentVolumeClaim-garage-data-2.yaml
+++ b/clusters/cl01tl/manifests/garage/PersistentVolumeClaim-garage-data-2.yaml
@@ -6,7 +6,7 @@ metadata:
    app.kubernetes.io/instance: garage
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: garage
-    helm.sh/chart: garage-4.6.2
+    helm.sh/chart: garage-5.0.0
  annotations:
    helm.sh/resource-policy: keep
  namespace: garage
--- a/clusters/cl01tl/manifests/garage/PersistentVolumeClaim-garage-data-3.yaml
+++ b/clusters/cl01tl/manifests/garage/PersistentVolumeClaim-garage-data-3.yaml
@@ -6,7 +6,7 @@ metadata:
    app.kubernetes.io/instance: garage
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: garage
-    helm.sh/chart: garage-4.6.2
+    helm.sh/chart: garage-5.0.0
  annotations:
    helm.sh/resource-policy: keep
  namespace: garage
--- a/clusters/cl01tl/manifests/garage/PersistentVolumeClaim-garage-data.yaml
+++ b/clusters/cl01tl/manifests/garage/PersistentVolumeClaim-garage-data.yaml
@@ -6,7 +6,7 @@ metadata:
    app.kubernetes.io/instance: garage
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: garage
-    helm.sh/chart: garage-4.6.2
+    helm.sh/chart: garage-5.0.0
  namespace: garage
 spec:
  accessModes:
--- a/clusters/cl01tl/manifests/garage/PersistentVolumeClaim-garage-db-1.yaml
+++ b/clusters/cl01tl/manifests/garage/PersistentVolumeClaim-garage-db-1.yaml
@@ -6,7 +6,7 @@ metadata:
    app.kubernetes.io/instance: garage
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: garage
-    helm.sh/chart: garage-4.6.2
+    helm.sh/chart: garage-5.0.0
  namespace: garage
 spec:
  accessModes:
--- a/clusters/cl01tl/manifests/garage/PersistentVolumeClaim-garage-db-2.yaml
+++ b/clusters/cl01tl/manifests/garage/PersistentVolumeClaim-garage-db-2.yaml
@@ -6,7 +6,7 @@ metadata:
    app.kubernetes.io/instance: garage
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: garage
-    helm.sh/chart: garage-4.6.2
+    helm.sh/chart: garage-5.0.0
  namespace: garage
 spec:
  accessModes:
--- a/clusters/cl01tl/manifests/garage/PersistentVolumeClaim-garage-db-3.yaml
+++ b/clusters/cl01tl/manifests/garage/PersistentVolumeClaim-garage-db-3.yaml
@@ -6,7 +6,7 @@ metadata:
    app.kubernetes.io/instance: garage
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: garage
-    helm.sh/chart: garage-4.6.2
+    helm.sh/chart: garage-5.0.0
  namespace: garage
 spec:
  accessModes:
--- a/clusters/cl01tl/manifests/garage/PersistentVolumeClaim-garage-snapshots.yaml
+++ b/clusters/cl01tl/manifests/garage/PersistentVolumeClaim-garage-snapshots.yaml
@@ -6,7 +6,7 @@ metadata:
    app.kubernetes.io/instance: garage
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: garage
-    helm.sh/chart: garage-4.6.2
+    helm.sh/chart: garage-5.0.0
  annotations:
    helm.sh/resource-policy: keep
  namespace: garage
--- a/clusters/cl01tl/manifests/garage/Service-garage-1.yaml
+++ b/clusters/cl01tl/manifests/garage/Service-garage-1.yaml
@@ -7,7 +7,7 @@ metadata:
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: garage
    app.kubernetes.io/service: garage-1
-    helm.sh/chart: garage-4.6.2
+    helm.sh/chart: garage-5.0.0
  namespace: garage
 spec:
  type: ClusterIP
--- a/clusters/cl01tl/manifests/garage/Service-garage-2.yaml
+++ b/clusters/cl01tl/manifests/garage/Service-garage-2.yaml
@@ -7,7 +7,7 @@ metadata:
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: garage
    app.kubernetes.io/service: garage-2
-    helm.sh/chart: garage-4.6.2
+    helm.sh/chart: garage-5.0.0
  namespace: garage
 spec:
  type: ClusterIP
--- a/clusters/cl01tl/manifests/garage/Service-garage-3.yaml
+++ b/clusters/cl01tl/manifests/garage/Service-garage-3.yaml
@@ -7,7 +7,7 @@ metadata:
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: garage
    app.kubernetes.io/service: garage-3
-    helm.sh/chart: garage-4.6.2
+    helm.sh/chart: garage-5.0.0
  namespace: garage
 spec:
  type: ClusterIP
--- a/clusters/cl01tl/manifests/garage/Service-garage-webui.yaml
+++ b/clusters/cl01tl/manifests/garage/Service-garage-webui.yaml
@@ -7,7 +7,7 @@ metadata:
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: garage
    app.kubernetes.io/service: garage-webui
-    helm.sh/chart: garage-4.6.2
+    helm.sh/chart: garage-5.0.0
  namespace: garage
 spec:
  type: ClusterIP
--- a/clusters/cl01tl/manifests/garage/ServiceAccount-garage.yaml
+++ b/clusters/cl01tl/manifests/garage/ServiceAccount-garage.yaml
@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: garage
+  labels:
+    app.kubernetes.io/instance: garage
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: garage
+    helm.sh/chart: garage-5.0.0
+  namespace: garage
--- a/clusters/cl01tl/manifests/garage/ServiceMonitor-garage.yaml
+++ b/clusters/cl01tl/manifests/garage/ServiceMonitor-garage.yaml
@@ -6,10 +6,10 @@ metadata:
    app.kubernetes.io/instance: garage
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: garage
-    helm.sh/chart: garage-4.6.2
+    helm.sh/chart: garage-5.0.0
  namespace: garage
 spec:
-  jobLabel: garage
+  jobLabel: app.kubernetes.io/name
  namespaceSelector:
    matchNames:
      - garage
--- a/clusters/cl01tl/manifests/grimmory/Deployment-grimmory.yaml
+++ b/clusters/cl01tl/manifests/grimmory/Deployment-grimmory.yaml
@@ -7,7 +7,7 @@ metadata:
    app.kubernetes.io/instance: grimmory
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: grimmory
-    helm.sh/chart: grimmory-4.6.2
+    helm.sh/chart: grimmory-5.0.0
  namespace: grimmory
 spec:
  revisionHistoryLimit: 3
@@ -27,8 +27,8 @@ spec:
        app.kubernetes.io/name: grimmory
    spec:
      enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: grimmory
+      automountServiceAccountToken: false
      securityContext:
        fsGroup: 1000
        fsGroupChangePolicy: OnRootMismatch
--- a/clusters/cl01tl/manifests/grimmory/HTTPRoute-grimmory.yaml
+++ b/clusters/cl01tl/manifests/grimmory/HTTPRoute-grimmory.yaml
@@ -6,7 +6,7 @@ metadata:
    app.kubernetes.io/instance: grimmory
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: grimmory
-    helm.sh/chart: grimmory-4.6.2
+    helm.sh/chart: grimmory-5.0.0
  namespace: grimmory
 spec:
  parentRefs:
--- a/clusters/cl01tl/manifests/grimmory/PersistentVolumeClaim-grimmory-config.yaml
+++ b/clusters/cl01tl/manifests/grimmory/PersistentVolumeClaim-grimmory-config.yaml
@@ -6,7 +6,7 @@ metadata:
    app.kubernetes.io/instance: grimmory
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: grimmory
-    helm.sh/chart: grimmory-4.6.2
+    helm.sh/chart: grimmory-5.0.0
  namespace: grimmory
 spec:
  accessModes:
--- a/clusters/cl01tl/manifests/grimmory/Service-grimmory.yaml
+++ b/clusters/cl01tl/manifests/grimmory/Service-grimmory.yaml
@@ -7,7 +7,7 @@ metadata:
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: grimmory
    app.kubernetes.io/service: grimmory
-    helm.sh/chart: grimmory-4.6.2
+    helm.sh/chart: grimmory-5.0.0
  namespace: grimmory
 spec:
  type: ClusterIP
--- a/clusters/cl01tl/manifests/grimmory/ServiceAccount-grimmory.yaml
+++ b/clusters/cl01tl/manifests/grimmory/ServiceAccount-grimmory.yaml
@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: grimmory
+  labels:
+    app.kubernetes.io/instance: grimmory
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: grimmory
+    helm.sh/chart: grimmory-5.0.0
+  namespace: grimmory
--- a/clusters/cl01tl/manifests/home-assistant/Deployment-home-assistant.yaml
+++ b/clusters/cl01tl/manifests/home-assistant/Deployment-home-assistant.yaml
@@ -7,7 +7,7 @@ metadata:
    app.kubernetes.io/instance: home-assistant
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: home-assistant
-    helm.sh/chart: home-assistant-4.6.2
+    helm.sh/chart: home-assistant-5.0.0
  namespace: home-assistant
 spec:
  revisionHistoryLimit: 3
@@ -27,8 +27,8 @@ spec:
        app.kubernetes.io/name: home-assistant
    spec:
      enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: home-assistant
+      automountServiceAccountToken: false
      securityContext:
        fsGroup: 1000
        fsGroupChangePolicy: OnRootMismatch
--- a/clusters/cl01tl/manifests/home-assistant/HTTPRoute-home-assistant-code-server.yaml
+++ b/clusters/cl01tl/manifests/home-assistant/HTTPRoute-home-assistant-code-server.yaml
@@ -6,7 +6,7 @@ metadata:
    app.kubernetes.io/instance: home-assistant
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: home-assistant
-    helm.sh/chart: home-assistant-4.6.2
+    helm.sh/chart: home-assistant-5.0.0
  namespace: home-assistant
 spec:
  parentRefs:
--- a/clusters/cl01tl/manifests/home-assistant/HTTPRoute-home-assistant-main.yaml
+++ b/clusters/cl01tl/manifests/home-assistant/HTTPRoute-home-assistant-main.yaml
@@ -6,7 +6,7 @@ metadata:
    app.kubernetes.io/instance: home-assistant
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: home-assistant
-    helm.sh/chart: home-assistant-4.6.2
+    helm.sh/chart: home-assistant-5.0.0
  namespace: home-assistant
 spec:
  parentRefs:
--- a/clusters/cl01tl/manifests/home-assistant/PersistentVolumeClaim-home-assistant-config.yaml
+++ b/clusters/cl01tl/manifests/home-assistant/PersistentVolumeClaim-home-assistant-config.yaml
@@ -6,7 +6,7 @@ metadata:
    app.kubernetes.io/instance: home-assistant
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: home-assistant
-    helm.sh/chart: home-assistant-4.6.2
+    helm.sh/chart: home-assistant-5.0.0
  namespace: home-assistant
 spec:
  accessModes:
--- a/clusters/cl01tl/manifests/home-assistant/Service-home-assistant-code-server.yaml
+++ b/clusters/cl01tl/manifests/home-assistant/Service-home-assistant-code-server.yaml
@@ -7,7 +7,7 @@ metadata:
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: home-assistant
    app.kubernetes.io/service: home-assistant-code-server
-    helm.sh/chart: home-assistant-4.6.2
+    helm.sh/chart: home-assistant-5.0.0
  namespace: home-assistant
 spec:
  type: ClusterIP
--- a/clusters/cl01tl/manifests/home-assistant/Service-home-assistant-main.yaml
+++ b/clusters/cl01tl/manifests/home-assistant/Service-home-assistant-main.yaml
@@ -7,7 +7,7 @@ metadata:
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: home-assistant
    app.kubernetes.io/service: home-assistant-main
-    helm.sh/chart: home-assistant-4.6.2
+    helm.sh/chart: home-assistant-5.0.0
  namespace: home-assistant
 spec:
  type: ClusterIP
--- a/clusters/cl01tl/manifests/home-assistant/ServiceAccount-home-assistant.yaml
+++ b/clusters/cl01tl/manifests/home-assistant/ServiceAccount-home-assistant.yaml
@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: home-assistant
+  labels:
+    app.kubernetes.io/instance: home-assistant
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: home-assistant
+    helm.sh/chart: home-assistant-5.0.0
+  namespace: home-assistant
--- a/clusters/cl01tl/manifests/home-assistant/ServiceMonitor-home-assistant.yaml
+++ b/clusters/cl01tl/manifests/home-assistant/ServiceMonitor-home-assistant.yaml
@@ -6,10 +6,10 @@ metadata:
    app.kubernetes.io/instance: home-assistant
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: home-assistant
-    helm.sh/chart: home-assistant-4.6.2
+    helm.sh/chart: home-assistant-5.0.0
  namespace: home-assistant
 spec:
-  jobLabel: home-assistant
+  jobLabel: app.kubernetes.io/name
  namespaceSelector:
    matchNames:
      - home-assistant
--- a/clusters/cl01tl/manifests/homepage/ConfigMap-homepage.yaml
+++ b/clusters/cl01tl/manifests/homepage/ConfigMap-homepage.yaml
@@ -6,7 +6,7 @@ metadata:
    app.kubernetes.io/instance: homepage
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: homepage
-    helm.sh/chart: homepage-4.6.2
+    helm.sh/chart: homepage-5.0.0
  namespace: homepage
 data:
  bookmarks.yaml: |
--- a/clusters/cl01tl/manifests/homepage/Deployment-homepage.yaml
+++ b/clusters/cl01tl/manifests/homepage/Deployment-homepage.yaml
@@ -7,7 +7,7 @@ metadata:
    app.kubernetes.io/instance: homepage
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: homepage
-    helm.sh/chart: homepage-4.6.2
+    helm.sh/chart: homepage-5.0.0
  annotations:
    reloader.stakater.com/auto: "true"
  namespace: homepage
--- a/Show More
+++ b/Show More