alexlebens/infrastructure
1
0
Fork 0
Code Issues 1 Pull Requests 1 Actions Activity

Automated Manifest Update (#4730)

Browse Source 
This PR contains newly rendered Kubernetes manifests automatically generated by the CI workflow.

Reviewed-on: #4730
Co-authored-by: gitea-bot <gitea-bot@alexlebens.net>
Co-committed-by: gitea-bot <gitea-bot@alexlebens.net>
This commit was merged in pull request #4730.
This commit is contained in:
Gitea
2026-03-14 23:03:58 +00:00
committed by Alex Lebens
parent 082d612285
commit 8a58404bf7
33 changed files with 657 additions and 72 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
clusters/cl01tl/manifests/audiobookshelf/Deployment-audiobookshelf.yaml
View File

@@ -62,7 +62,7 @@ spec:
- env:
- name: TZ
value: US/Central
image: ghcr.io/advplyr/audiobookshelf:2.32.1
image: ghcr.io/advplyr/audiobookshelf:2.33.0
imagePullPolicy: IfNotPresent
name: main
resources:

2
clusters/cl01tl/manifests/homepage/Deployment-homepage.yaml
View File

@@ -45,7 +45,7 @@ spec:
envFrom:
- secretRef:
name: homepage-keys-secret
image: ghcr.io/gethomepage/homepage:v1.10.1
image: ghcr.io/gethomepage/homepage:v1.11.0
imagePullPolicy: IfNotPresent
name: main
resources:

2
clusters/cl01tl/manifests/libation/CronJob-libation-main.yaml
View File

@@ -42,7 +42,7 @@ spec:
value: "-1"
- name: LIBATION_BOOKS_DIR
value: /data
image: rmcrackan/libation:13.2.1
image: rmcrackan/libation:13.3.0
imagePullPolicy: IfNotPresent
name: main
resources:

4
clusters/cl01tl/manifests/loki/ClusterRole-loki-clusterrole.yaml
View File

@@ -2,10 +2,10 @@ kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1
metadata:
labels:
helm.sh/chart: loki-6.53.0
helm.sh/chart: loki-6.55.0
app.kubernetes.io/name: loki
app.kubernetes.io/instance: loki
app.kubernetes.io/version: "3.6.5"
app.kubernetes.io/version: "3.6.7"
name: loki-clusterrole
rules:
- apiGroups: [""]

4
clusters/cl01tl/manifests/loki/ClusterRoleBinding-loki-clusterrolebinding.yaml
View File

@@ -3,10 +3,10 @@ apiVersion: rbac.authorization.k8s.io/v1
metadata:
name: loki-clusterrolebinding
labels:
helm.sh/chart: loki-6.53.0
helm.sh/chart: loki-6.55.0
app.kubernetes.io/name: loki
app.kubernetes.io/instance: loki
app.kubernetes.io/version: "3.6.5"
app.kubernetes.io/version: "3.6.7"
subjects:
- kind: ServiceAccount
name: loki

4
clusters/cl01tl/manifests/loki/ConfigMap-loki-gateway.yaml
View File

File diff suppressed because one or more lines are too long

4
clusters/cl01tl/manifests/loki/ConfigMap-loki-runtime.yaml
View File

@@ -4,10 +4,10 @@ metadata:
name: loki-runtime
namespace: loki
labels:
helm.sh/chart: loki-6.53.0
helm.sh/chart: loki-6.55.0
app.kubernetes.io/name: loki
app.kubernetes.io/instance: loki
app.kubernetes.io/version: "3.6.5"
app.kubernetes.io/version: "3.6.7"
data:
runtime-config.yaml: |
{}

4
clusters/cl01tl/manifests/loki/ConfigMap-loki.yaml
View File

@@ -4,10 +4,10 @@ metadata:
name: loki
namespace: loki
labels:
helm.sh/chart: loki-6.53.0
helm.sh/chart: loki-6.55.0
app.kubernetes.io/name: loki
app.kubernetes.io/instance: loki
app.kubernetes.io/version: "3.6.5"
app.kubernetes.io/version: "3.6.7"
data:
config.yaml: |2

6
clusters/cl01tl/manifests/loki/DaemonSet-loki-canary.yaml
View File

@@ -4,10 +4,10 @@ metadata:
name: loki-canary
namespace: loki
labels:
helm.sh/chart: loki-6.53.0
helm.sh/chart: loki-6.55.0
app.kubernetes.io/name: loki
app.kubernetes.io/instance: loki
app.kubernetes.io/version: "3.6.5"
app.kubernetes.io/version: "3.6.7"
app.kubernetes.io/component: canary
spec:
selector:
@@ -35,7 +35,7 @@ spec:
runAsUser: 10001
containers:
- name: loki-canary
image: docker.io/grafana/loki-canary:3.6.5
image: docker.io/grafana/loki-canary:3.6.7
imagePullPolicy: IfNotPresent
args:
- -addr=loki-gateway.loki.svc.cluster.local.:80

4
clusters/cl01tl/manifests/loki/Deployment-loki-gateway.yaml
View File

@@ -4,10 +4,10 @@ metadata:
name: loki-gateway
namespace: loki
labels:
helm.sh/chart: loki-6.53.0
helm.sh/chart: loki-6.55.0
app.kubernetes.io/name: loki
app.kubernetes.io/instance: loki
app.kubernetes.io/version: "3.6.5"
app.kubernetes.io/version: "3.6.7"
app.kubernetes.io/component: gateway
spec:
replicas: 1

4
clusters/cl01tl/manifests/loki/Pod-loki-helm-test.yaml
View File

@@ -4,10 +4,10 @@ metadata:
name: "loki-helm-test"
namespace: loki
labels:
helm.sh/chart: loki-6.53.0
helm.sh/chart: loki-6.55.0
app.kubernetes.io/name: loki
app.kubernetes.io/instance: loki
app.kubernetes.io/version: "3.6.5"
app.kubernetes.io/version: "3.6.7"
app.kubernetes.io/component: helm-test
annotations:
"helm.sh/hook": test

4
clusters/cl01tl/manifests/loki/Service-loki-canary.yaml
View File

@@ -4,10 +4,10 @@ metadata:
name: loki-canary
namespace: loki
labels:
helm.sh/chart: loki-6.53.0
helm.sh/chart: loki-6.55.0
app.kubernetes.io/name: loki
app.kubernetes.io/instance: loki
app.kubernetes.io/version: "3.6.5"
app.kubernetes.io/version: "3.6.7"
app.kubernetes.io/component: canary
annotations:
spec:

4
clusters/cl01tl/manifests/loki/Service-loki-chunks-cache.yaml
View File

@@ -3,10 +3,10 @@ kind: Service
metadata:
name: loki-chunks-cache
labels:
helm.sh/chart: loki-6.53.0
helm.sh/chart: loki-6.55.0
app.kubernetes.io/name: loki
app.kubernetes.io/instance: loki
app.kubernetes.io/version: "3.6.5"
app.kubernetes.io/version: "3.6.7"
app.kubernetes.io/component: "memcached-chunks-cache"
annotations: {}
namespace: "loki"

4
clusters/cl01tl/manifests/loki/Service-loki-gateway.yaml
View File

@@ -4,10 +4,10 @@ metadata:
name: loki-gateway
namespace: loki
labels:
helm.sh/chart: loki-6.53.0
helm.sh/chart: loki-6.55.0
app.kubernetes.io/name: loki
app.kubernetes.io/instance: loki
app.kubernetes.io/version: "3.6.5"
app.kubernetes.io/version: "3.6.7"
app.kubernetes.io/component: gateway
prometheus.io/service-monitor: "false"
annotations:

4
clusters/cl01tl/manifests/loki/Service-loki-headless.yaml
View File

@@ -4,10 +4,10 @@ metadata:
name: loki-headless
namespace: loki
labels:
helm.sh/chart: loki-6.53.0
helm.sh/chart: loki-6.55.0
app.kubernetes.io/name: loki
app.kubernetes.io/instance: loki
app.kubernetes.io/version: "3.6.5"
app.kubernetes.io/version: "3.6.7"
variant: headless
prometheus.io/service-monitor: "false"
annotations:

4
clusters/cl01tl/manifests/loki/Service-loki-memberlist.yaml
View File

@@ -4,10 +4,10 @@ metadata:
name: loki-memberlist
namespace: loki
labels:
helm.sh/chart: loki-6.53.0
helm.sh/chart: loki-6.55.0
app.kubernetes.io/name: loki
app.kubernetes.io/instance: loki
app.kubernetes.io/version: "3.6.5"
app.kubernetes.io/version: "3.6.7"
annotations:
spec:
type: ClusterIP

4
clusters/cl01tl/manifests/loki/Service-loki-results-cache.yaml
View File

@@ -3,10 +3,10 @@ kind: Service
metadata:
name: loki-results-cache
labels:
helm.sh/chart: loki-6.53.0
helm.sh/chart: loki-6.55.0
app.kubernetes.io/name: loki
app.kubernetes.io/instance: loki
app.kubernetes.io/version: "3.6.5"
app.kubernetes.io/version: "3.6.7"
app.kubernetes.io/component: "memcached-results-cache"
annotations: {}
namespace: "loki"

4
clusters/cl01tl/manifests/loki/Service-loki.yaml
View File

@@ -4,10 +4,10 @@ metadata:
name: loki
namespace: loki
labels:
helm.sh/chart: loki-6.53.0
helm.sh/chart: loki-6.55.0
app.kubernetes.io/name: loki
app.kubernetes.io/instance: loki
app.kubernetes.io/version: "3.6.5"
app.kubernetes.io/version: "3.6.7"
annotations:
spec:
type: ClusterIP

4
clusters/cl01tl/manifests/loki/ServiceAccount-loki-canary.yaml
View File

@@ -4,9 +4,9 @@ metadata:
name: loki-canary
namespace: loki
labels:
helm.sh/chart: loki-6.53.0
helm.sh/chart: loki-6.55.0
app.kubernetes.io/name: loki
app.kubernetes.io/instance: loki
app.kubernetes.io/version: "3.6.5"
app.kubernetes.io/version: "3.6.7"
app.kubernetes.io/component: canary
automountServiceAccountToken: true

4
clusters/cl01tl/manifests/loki/ServiceAccount-loki.yaml
View File

@@ -4,8 +4,8 @@ metadata:
name: loki
namespace: loki
labels:
helm.sh/chart: loki-6.53.0
helm.sh/chart: loki-6.55.0
app.kubernetes.io/name: loki
app.kubernetes.io/instance: loki
app.kubernetes.io/version: "3.6.5"
app.kubernetes.io/version: "3.6.7"
automountServiceAccountToken: true

4
clusters/cl01tl/manifests/loki/StatefulSet-loki-chunks-cache.yaml
View File

@@ -3,10 +3,10 @@ kind: StatefulSet
metadata:
name: loki-chunks-cache
labels:
helm.sh/chart: loki-6.53.0
helm.sh/chart: loki-6.55.0
app.kubernetes.io/name: loki
app.kubernetes.io/instance: loki
app.kubernetes.io/version: "3.6.5"
app.kubernetes.io/version: "3.6.7"
app.kubernetes.io/component: "memcached-chunks-cache"
name: "memcached-chunks-cache"
annotations: {}

4
clusters/cl01tl/manifests/loki/StatefulSet-loki-results-cache.yaml
View File

@@ -3,10 +3,10 @@ kind: StatefulSet
metadata:
name: loki-results-cache
labels:
helm.sh/chart: loki-6.53.0
helm.sh/chart: loki-6.55.0
app.kubernetes.io/name: loki
app.kubernetes.io/instance: loki
app.kubernetes.io/version: "3.6.5"
app.kubernetes.io/version: "3.6.7"
app.kubernetes.io/component: "memcached-results-cache"
name: "memcached-results-cache"
annotations: {}

10
clusters/cl01tl/manifests/loki/StatefulSet-loki.yaml
View File

@@ -4,10 +4,10 @@ metadata:
name: loki
namespace: loki
labels:
helm.sh/chart: loki-6.53.0
helm.sh/chart: loki-6.55.0
app.kubernetes.io/name: loki
app.kubernetes.io/instance: loki
app.kubernetes.io/version: "3.6.5"
app.kubernetes.io/version: "3.6.7"
app.kubernetes.io/component: single-binary
app.kubernetes.io/part-of: memberlist
spec:
@@ -50,7 +50,7 @@ spec:
terminationGracePeriodSeconds: 30
containers:
- name: loki
image: docker.io/grafana/loki:3.6.5
image: docker.io/grafana/loki:3.6.7
imagePullPolicy: IfNotPresent
args:
- -config.file=/etc/loki/config/config.yaml
@@ -93,7 +93,7 @@ spec:
mountPath: "/rules"
resources: {}
- name: loki-sc-rules
image: docker.io/kiwigrid/k8s-sidecar:1.30.9
image: docker.io/kiwigrid/k8s-sidecar:2.5.0
imagePullPolicy: IfNotPresent
env:
- name: METHOD
@@ -117,6 +117,8 @@ spec:
- ALL
readOnlyRootFilesystem: true
volumeMounts:
- name: tmp
mountPath: /tmp
- name: sc-rules-volume
mountPath: "/rules"
affinity:

20
clusters/cl01tl/manifests/mariadb-operator/CustomResourceDefinition-externalmariadbs.k8s.mariadb.com.yaml
View File

@@ -197,13 +197,17 @@ spec:
By default, the Secret field 'ca.crt' provisioned by cert-manager will be added to the trust chain. A custom trust bundle may be specified via clientCASecretRef.
properties:
group:
description: Group of the resource being referred to.
description: |-
Group of the issuer being referred to.
Defaults to 'cert-manager.io'.
type: string
kind:
description: Kind of the resource being referred to.
description: |-
Kind of the issuer being referred to.
Defaults to 'Issuer'.
type: string
name:
description: Name of the resource being referred to.
description: Name of the issuer being referred to.
type: string
required:
- name
@@ -258,13 +262,17 @@ spec:
By default, the Secret field 'ca.crt' provisioned by cert-manager will be added to the trust chain. A custom trust bundle may be specified via serverCASecretRef.
properties:
group:
description: Group of the resource being referred to.
description: |-
Group of the issuer being referred to.
Defaults to 'cert-manager.io'.
type: string
kind:
description: Kind of the resource being referred to.
description: |-
Kind of the issuer being referred to.
Defaults to 'Issuer'.
type: string
name:
description: Name of the resource being referred to.
description: Name of the issuer being referred to.
type: string
required:
- name

258
clusters/cl01tl/manifests/mariadb-operator/CustomResourceDefinition-mariadbs.k8s.mariadb.com.yaml
View File

@@ -287,6 +287,60 @@ spec:
bootstrapFrom:
description: BootstrapFrom defines a source to bootstrap from.
properties:
azureBlob:
description: |-
AzureBlob defines the configuration to restore from Azure Blob compatible storage.
This field takes precedence over the Volume source.
properties:
containerName:
description: ContainerName is the name of the storage container.
type: string
prefix:
description: 'Prefix indicates a folder/subfolder in the container. For example: mariadb/ or mariadb/backups. A trailing slash ''/'' is added if not provided.'
type: string
serviceURL:
description: 'ServiceURL is the full URL for connecting to Azure, usually in the form: http(s)://<account>.blob.core.windows.net/.'
type: string
storageAccountKey:
description: StorageAccountKey is a reference to a Secret key containing the Azure Blob Storage Storage account Key. Pairs with StorageAccountKey for static credential authentication
properties:
key:
type: string
name:
default: ""
type: string
required:
- key
type: object
x-kubernetes-map-type: atomic
storageAccountName:
description: StorageAccountName is the name of the storage account. Pairs with StorageAccountKey for static credential authentication
type: string
tls:
description: TLS provides the configuration required to establish TLS connections with Azure Blob Storage.
properties:
caSecretKeyRef:
description: |-
CASecretKeyRef is a reference to a Secret key containing a CA bundle in PEM format used to establish TLS connections with S3.
By default, the system trust chain will be used, but you can use this field to add more CAs to the bundle.
properties:
key:
type: string
name:
default: ""
type: string
required:
- key
type: object
x-kubernetes-map-type: atomic
enabled:
description: Enabled is a flag to enable TLS.
type: boolean
type: object
required:
- containerName
- serviceURL
type: object
backupContentType:
description: |-
BackupContentType is the backup content type available in the source to bootstrap from.
@@ -308,8 +362,30 @@ spec:
description: Name of the referent.
type: string
type: object
logLevel:
default: info
description: LogLevel to be used in the mariadb-operator container of the restoration Job. It defaults to 'info'.
enum:
- debug
- info
- warn
- error
- dpanic
- panic
- fatal
type: string
pointInTimeRecoveryRef:
description: |-
PointInTimeRecoveryRef is a reference to a PointInTimeRecovery object.
Providing this field implies restoring the PhysicalBackup referenced in the PointInTimeRecovery object and replaying the
archived binary logs up to the point-in-time restoration target, defined by the targetRecoveryTime field.
properties:
name:
default: ""
type: string
type: object
restoreJob:
description: RestoreJob defines additional properties for the Job used to perform the restoration.
description: RestoreJob defines additional properties for the restoration Job.
properties:
affinity:
description: Affinity to be used in the Pod.
@@ -724,7 +800,7 @@ spec:
type: object
stagingStorage:
description: |-
StagingStorage defines the temporary storage used to keep external backups (i.e. S3) while they are being processed.
StagingStorage defines the temporary storage used to keep external backups and binary logs (i.e. S3) while they are being processed.
It defaults to an emptyDir volume, meaning that the backups will be temporarily stored in the node where the Job is scheduled.
properties:
persistentVolumeClaim:
@@ -1061,6 +1137,12 @@ spec:
database:
description: Database is the name of the initial Database.
type: string
enableServiceLinks:
description: |-
EnableServiceLinks indicates whether information about services should be injected into pod's
environment variables, matching the syntax of Docker links. Defaults to true if not specified.
Set to false to disable injection of service link environment variables.
type: boolean
env:
description: Env represents the environment variables to be injected in a container.
items:
@@ -2408,7 +2490,7 @@ spec:
maxScaleRef:
description: |-
MaxScaleRef is a reference to a MaxScale resource to be used with the current MariaDB.
Providing this field implies delegating high availability tasks such as primary failover to MaxScale.
Providing this reference implies delegating high availability tasks such as primary failover to MaxScale.
properties:
name:
type: string
@@ -3130,6 +3212,15 @@ spec:
type: array
x-kubernetes-list-type: atomic
type: object
pointInTimeRecoveryRef:
description: |-
PointInTimeRecoveryRef is a reference to a PointInTimeRecovery resource to be used with the current MariaDB.
Providing this reference implies configuring binary logs in the MariaDB instance and binary log archival in the sidecar agent.
properties:
name:
default: ""
type: string
type: object
port:
default: 3306
description: Port where the instances will be listening for connections.
@@ -3217,6 +3308,9 @@ spec:
externalTrafficPolicy:
description: ExternalTrafficPolicy Service field.
type: string
loadBalancerClass:
description: LoadBalancerClass Service field.
type: string
loadBalancerIP:
description: LoadBalancerIP Service field.
type: string
@@ -4674,6 +4768,9 @@ spec:
externalTrafficPolicy:
description: ExternalTrafficPolicy Service field.
type: string
loadBalancerClass:
description: LoadBalancerClass Service field.
type: string
loadBalancerIP:
description: LoadBalancerIP Service field.
type: string
@@ -4755,6 +4852,9 @@ spec:
externalTrafficPolicy:
description: ExternalTrafficPolicy Service field.
type: string
loadBalancerClass:
description: LoadBalancerClass Service field.
type: string
loadBalancerIP:
description: LoadBalancerIP Service field.
type: string
@@ -5170,13 +5270,17 @@ spec:
By default, the Secret field 'ca.crt' provisioned by cert-manager will be added to the trust chain. A custom trust bundle may be specified via clientCASecretRef.
properties:
group:
description: Group of the resource being referred to.
description: |-
Group of the issuer being referred to.
Defaults to 'cert-manager.io'.
type: string
kind:
description: Kind of the resource being referred to.
description: |-
Kind of the issuer being referred to.
Defaults to 'Issuer'.
type: string
name:
description: Name of the resource being referred to.
description: Name of the issuer being referred to.
type: string
required:
- name
@@ -5225,13 +5329,17 @@ spec:
By default, the Secret field 'ca.crt' provisioned by cert-manager will be added to the trust chain. A custom trust bundle may be specified via serverCASecretRef.
properties:
group:
description: Group of the resource being referred to.
description: |-
Group of the issuer being referred to.
Defaults to 'cert-manager.io'.
type: string
kind:
description: Kind of the resource being referred to.
description: |-
Kind of the issuer being referred to.
Defaults to 'Issuer'.
type: string
name:
description: Name of the resource being referred to.
description: Name of the issuer being referred to.
type: string
required:
- name
@@ -5482,6 +5590,110 @@ spec:
pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
x-kubernetes-int-or-string: true
type: object
ephemeral:
description: 'Refer to the Kubernetes docs: https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.35/#ephemeralvolumesource-v1-core.'
properties:
volumeClaimTemplate:
description: VolumeClaimTemplate defines a template to customize PVC objects.
properties:
accessModes:
items:
type: string
type: array
x-kubernetes-list-type: atomic
metadata:
description: Metadata to be added to the PVC metadata.
properties:
annotations:
additionalProperties:
type: string
description: Annotations to be added to children resources.
type: object
labels:
additionalProperties:
type: string
description: Labels to be added to children resources.
type: object
type: object
resources:
description: VolumeResourceRequirements describes the storage resource requirements for a volume.
properties:
limits:
additionalProperties:
anyOf:
- type: integer
- type: string
pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
x-kubernetes-int-or-string: true
description: |-
Limits describes the maximum amount of compute resources allowed.
More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
type: object
requests:
additionalProperties:
anyOf:
- type: integer
- type: string
pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
x-kubernetes-int-or-string: true
description: |-
Requests describes the minimum amount of compute resources required.
If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,
otherwise to an implementation-defined value. Requests cannot exceed Limits.
More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
type: object
type: object
selector:
description: |-
A label selector is a label query over a set of resources. The result of matchLabels and
matchExpressions are ANDed. An empty label selector matches all objects. A null
label selector matches no objects.
properties:
matchExpressions:
description: matchExpressions is a list of label selector requirements. The requirements are ANDed.
items:
description: |-
A label selector requirement is a selector that contains values, a key, and an operator that
relates the key and values.
properties:
key:
description: key is the label key that the selector applies to.
type: string
operator:
description: |-
operator represents a key's relationship to a set of values.
Valid operators are In, NotIn, Exists and DoesNotExist.
type: string
values:
description: |-
values is an array of string values. If the operator is In or NotIn,
the values array must be non-empty. If the operator is Exists or DoesNotExist,
the values array must be empty. This array is replaced during a strategic
merge patch.
items:
type: string
type: array
x-kubernetes-list-type: atomic
required:
- key
- operator
type: object
type: array
x-kubernetes-list-type: atomic
matchLabels:
additionalProperties:
type: string
description: |-
matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
map is equivalent to an element of matchExpressions, whose key field is "key", the
operator is "In", and the values array contains only "value". The requirements are ANDed.
type: object
type: object
x-kubernetes-map-type: atomic
storageClassName:
type: string
type: object
type: object
hostPath:
description: 'Refer to the Kubernetes docs: https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.35/#hostpathvolumesource-v1-core'
properties:
@@ -5657,6 +5869,34 @@ spec:
description: State is a per Pod representation of the Galera state file (grastate.dat).
type: object
type: object
pointInTimeRecovery:
description: PointInTimeRecovery is the status of the point-in-time-recovery process.
properties:
gtidStrictModePaused:
description: GtidStrictModePaused indicates that gtid_strict_mode has been temporarily paused to replay binlogs.
type: boolean
lastArchivedBinaryLog:
description: LastArchivedBinaryLog is name of the last archived binary log.
type: string
lastArchivedGtid:
description: LastArchivedGtid is the last archived GTID.
type: string
lastArchivedPosition:
description: LastArchivedPosition is the position of last archived binary log event.
format: int32
type: integer
lastArchivedTime:
description: LastArchivedTime is the time of the last archived binary log event.
format: date-time
type: string
serverId:
description: ServerId identifies the server whose binary logs are being archived.
format: int32
type: integer
storageReadyForArchival:
description: StorageReadyForArchival indicates that the storage is ready for archival, meaning that the sidecar agent can start archiving the binary logs.
type: boolean
type: object
replicas:
description: Replicas indicates the number of current instances.
format: int32

32
clusters/cl01tl/manifests/mariadb-operator/CustomResourceDefinition-maxscales.k8s.mariadb.com.yaml
View File

@@ -652,6 +652,12 @@ spec:
description: ServiceName to be used in the Connection.
type: string
type: object
enableServiceLinks:
description: |-
EnableServiceLinks indicates whether information about services should be injected into pod's
environment variables, matching the syntax of Docker links. Defaults to true if not specified.
Set to false to disable injection of service link environment variables.
type: boolean
env:
description: Env represents the environment variables to be injected in a container.
items:
@@ -737,6 +743,9 @@ spec:
externalTrafficPolicy:
description: ExternalTrafficPolicy Service field.
type: string
loadBalancerClass:
description: LoadBalancerClass Service field.
type: string
loadBalancerIP:
description: LoadBalancerIP Service field.
type: string
@@ -816,6 +825,9 @@ spec:
externalTrafficPolicy:
description: ExternalTrafficPolicy Service field.
type: string
loadBalancerClass:
description: LoadBalancerClass Service field.
type: string
loadBalancerIP:
description: LoadBalancerIP Service field.
type: string
@@ -1894,13 +1906,17 @@ spec:
By default, the Secret field 'ca.crt' provisioned by cert-manager will be added to the trust chain. A custom trust bundle may be specified via adminCASecretRef.
properties:
group:
description: Group of the resource being referred to.
description: |-
Group of the issuer being referred to.
Defaults to 'cert-manager.io'.
type: string
kind:
description: Kind of the resource being referred to.
description: |-
Kind of the issuer being referred to.
Defaults to 'Issuer'.
type: string
name:
description: Name of the resource being referred to.
description: Name of the issuer being referred to.
type: string
required:
- name
@@ -1936,13 +1952,17 @@ spec:
By default, the Secret field 'ca.crt' provisioned by cert-manager will be added to the trust chain. A custom trust bundle may be specified via listenerCASecretRef.
properties:
group:
description: Group of the resource being referred to.
description: |-
Group of the issuer being referred to.
Defaults to 'cert-manager.io'.
type: string
kind:
description: Kind of the resource being referred to.
description: |-
Kind of the issuer being referred to.
Defaults to 'Issuer'.
type: string
name:
description: Name of the resource being referred to.
description: Name of the issuer being referred to.
type: string
required:
- name

60
clusters/cl01tl/manifests/mariadb-operator/CustomResourceDefinition-physicalbackups.k8s.mariadb.com.yaml
View File

@@ -276,6 +276,11 @@ spec:
immediate:
description: Immediate indicates whether the first backup should be taken immediately after creating the PhysicalBackup.
type: boolean
onDemand:
description: |-
OnDemand is an identifier used to trigger an on-demand backup.
If the identifier is different than the one tracked under status.lastScheduleOnDemand, a new physical backup will be triggered.
type: string
suspend:
default: false
description: Suspend defines whether the schedule is active or not.
@@ -489,6 +494,58 @@ spec:
storage:
description: Storage defines the final storage for backups.
properties:
azureBlob:
description: AzureBlob defines the configuration to store backups in a AzureBlob compatible storage.
properties:
containerName:
description: ContainerName is the name of the storage container.
type: string
prefix:
description: 'Prefix indicates a folder/subfolder in the container. For example: mariadb/ or mariadb/backups. A trailing slash ''/'' is added if not provided.'
type: string
serviceURL:
description: 'ServiceURL is the full URL for connecting to Azure, usually in the form: http(s)://<account>.blob.core.windows.net/.'
type: string
storageAccountKey:
description: StorageAccountKey is a reference to a Secret key containing the Azure Blob Storage Storage account Key. Pairs with StorageAccountKey for static credential authentication
properties:
key:
type: string
name:
default: ""
type: string
required:
- key
type: object
x-kubernetes-map-type: atomic
storageAccountName:
description: StorageAccountName is the name of the storage account. Pairs with StorageAccountKey for static credential authentication
type: string
tls:
description: TLS provides the configuration required to establish TLS connections with Azure Blob Storage.
properties:
caSecretKeyRef:
description: |-
CASecretKeyRef is a reference to a Secret key containing a CA bundle in PEM format used to establish TLS connections with S3.
By default, the system trust chain will be used, but you can use this field to add more CAs to the bundle.
properties:
key:
type: string
name:
default: ""
type: string
required:
- key
type: object
x-kubernetes-map-type: atomic
enabled:
description: Enabled is a flag to enable TLS.
type: boolean
type: object
required:
- containerName
- serviceURL
type: object
persistentVolumeClaim:
description: PersistentVolumeClaim is a Kubernetes PVC specification.
properties:
@@ -896,6 +953,9 @@ spec:
description: LastScheduleCheckTime is the last time that the schedule was checked.
format: date-time
type: string
lastScheduleOnDemand:
description: LastScheduleOnDemand is the last on-demand schedule identifier.
type: string
lastScheduleTime:
description: LastScheduleTime is the last time that a backup was scheduled.
format: date-time

255
clusters/cl01tl/manifests/mariadb-operator/CustomResourceDefinition-pointintimerecoveries.k8s.mariadb.com.yaml Normal file
View File

@@ -0,0 +1,255 @@
apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
annotations:
controller-gen.kubebuilder.io/version: v0.20.0
name: pointintimerecoveries.k8s.mariadb.com
spec:
group: k8s.mariadb.com
names:
kind: PointInTimeRecovery
listKind: PointInTimeRecoveryList
plural: pointintimerecoveries
shortNames:
- pitr
singular: pointintimerecovery
scope: Namespaced
versions:
- additionalPrinterColumns:
- jsonPath: .spec.physicalBackupRef.name
name: Physical Backup
type: string
- jsonPath: .status.lastRecoverableTime
name: Last Recoverable Time
type: string
- jsonPath: .spec.strictMode
name: Strict Mode
type: boolean
- jsonPath: .metadata.creationTimestamp
name: Age
type: date
name: v1alpha1
schema:
openAPIV3Schema:
description: PointInTimeRecovery is the Schema for the pointintimerecoveries API. It contains binlog archival and point-in-time restoration settings.
properties:
apiVersion:
description: |-
APIVersion defines the versioned schema of this representation of an object.
Servers should convert recognized schemas to the latest internal value, and
may reject unrecognized values.
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
type: string
kind:
description: |-
Kind is a string value representing the REST resource this object represents.
Servers may infer this from the endpoint the client submits requests to.
Cannot be updated.
In CamelCase.
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
type: string
metadata:
type: object
spec:
description: PointInTimeRecoverySpec defines the desired state of PointInTimeRecovery. It contains binlog archive and point-in-time restoration settings.
properties:
archiveTimeout:
default: 1h
description: |-
ArchiveTimeout defines the maximum duration for the binary log archival.
If this duration is exceeded, the sidecar agent will log an error and it will be retried in the next archive cycle.
It defaults to 1 hour.
type: string
compression:
description: |-
Compression algorithm to be used for compressing the binary logs.
This field is immutable, it cannot be updated after creation.
enum:
- none
- bzip2
- gzip
type: string
physicalBackupRef:
description: PhysicalBackupRef is a reference to a PhysicalBackup object that will be used as base backup.
properties:
name:
default: ""
type: string
type: object
storage:
description: PointInTimeRecoveryStorage is the storage where the point in time recovery data will be stored
properties:
azureBlob:
description: AzureBlob is the Azure Blob Storage where the binary logs will be kept.
properties:
containerName:
description: ContainerName is the name of the storage container.
type: string
prefix:
description: 'Prefix indicates a folder/subfolder in the container. For example: mariadb/ or mariadb/backups. A trailing slash ''/'' is added if not provided.'
type: string
serviceURL:
description: 'ServiceURL is the full URL for connecting to Azure, usually in the form: http(s)://<account>.blob.core.windows.net/.'
type: string
storageAccountKey:
description: StorageAccountKey is a reference to a Secret key containing the Azure Blob Storage Storage account Key. Pairs with StorageAccountKey for static credential authentication
properties:
key:
type: string
name:
default: ""
type: string
required:
- key
type: object
x-kubernetes-map-type: atomic
storageAccountName:
description: StorageAccountName is the name of the storage account. Pairs with StorageAccountKey for static credential authentication
type: string
tls:
description: TLS provides the configuration required to establish TLS connections with Azure Blob Storage.
properties:
caSecretKeyRef:
description: |-
CASecretKeyRef is a reference to a Secret key containing a CA bundle in PEM format used to establish TLS connections with S3.
By default, the system trust chain will be used, but you can use this field to add more CAs to the bundle.
properties:
key:
type: string
name:
default: ""
type: string
required:
- key
type: object
x-kubernetes-map-type: atomic
enabled:
description: Enabled is a flag to enable TLS.
type: boolean
type: object
required:
- containerName
- serviceURL
type: object
s3:
description: S3 is the S3-compatible storage where the binary logs will be kept.
properties:
accessKeyIdSecretKeyRef:
description: AccessKeyIdSecretKeyRef is a reference to a Secret key containing the S3 access key id.
properties:
key:
type: string
name:
default: ""
type: string
required:
- key
type: object
x-kubernetes-map-type: atomic
bucket:
description: Bucket is the name Name of the bucket to store backups.
type: string
endpoint:
description: Endpoint is the S3 API endpoint without scheme.
type: string
prefix:
description: 'Prefix indicates a folder/subfolder in the bucket. For example: mariadb/ or mariadb/backups. A trailing slash ''/'' is added if not provided.'
type: string
region:
description: Region is the S3 region name to use.
type: string
secretAccessKeySecretKeyRef:
description: AccessKeyIdSecretKeyRef is a reference to a Secret key containing the S3 secret key.
properties:
key:
type: string
name:
default: ""
type: string
required:
- key
type: object
x-kubernetes-map-type: atomic
sessionTokenSecretKeyRef:
description: SessionTokenSecretKeyRef is a reference to a Secret key containing the S3 session token.
properties:
key:
type: string
name:
default: ""
type: string
required:
- key
type: object
x-kubernetes-map-type: atomic
ssec:
description: |-
SSEC is a reference to a Secret containing the SSE-C (Server-Side Encryption with Customer-Provided Keys) key.
The secret must contain a 32-byte key (256 bits) in the specified key.
This enables server-side encryption where you provide and manage the encryption key.
properties:
customerKeySecretKeyRef:
description: |-
CustomerKeySecretKeyRef is a reference to a Secret key containing the SSE-C customer-provided encryption key.
The key must be a 32-byte (256-bit) key encoded in base64.
properties:
key:
type: string
name:
default: ""
type: string
required:
- key
type: object
x-kubernetes-map-type: atomic
required:
- customerKeySecretKeyRef
type: object
tls:
description: TLS provides the configuration required to establish TLS connections with S3.
properties:
caSecretKeyRef:
description: |-
CASecretKeyRef is a reference to a Secret key containing a CA bundle in PEM format used to establish TLS connections with S3.
By default, the system trust chain will be used, but you can use this field to add more CAs to the bundle.
properties:
key:
type: string
name:
default: ""
type: string
required:
- key
type: object
x-kubernetes-map-type: atomic
enabled:
description: Enabled is a flag to enable TLS.
type: boolean
type: object
required:
- bucket
- endpoint
type: object
type: object
strictMode:
description: |-
StrictMode controls the behavior when a point-in-time restoration cannot reach the exact target time:
When enabled: Returns an error and avoids replaying binary logs if target time is not reached.
When disabled (default): Replays available binary logs until the last recoverable time. It logs logs an error if target time is not reached.
type: boolean
required:
- physicalBackupRef
- storage
type: object
status:
description: PointInTimeRecoveryStatus represents the current status of the point-in-time-recovery.
properties:
lastRecoverableTime:
description: LastRecoverableTime is the most recent recoverable time based on the current state of physical backups and archived binary logs.
type: string
type: object
type: object
served: true
storage: true
subresources:
status: {}

2
clusters/cl01tl/manifests/music-grabber/Deployment-music-grabber.yaml
View File

@@ -130,7 +130,7 @@ spec:
name: music-grabber-config-secret
- name: SLSKD_DOWNLOADS_PATH
value: /mnt/store/slskd/Downloads
image: g33kphr33k/musicgrabber:2.3.5
image: g33kphr33k/musicgrabber:2.4.3
imagePullPolicy: IfNotPresent
name: main
resources:

2
clusters/cl01tl/manifests/ollama/Deployment-ollama-server-1.yaml
View File

@@ -50,7 +50,7 @@ spec:
value: 24h
- name: OLLAMA_HOST
value: 0.0.0.0
image: ollama/ollama:0.17.7
image: ollama/ollama:0.18.0
imagePullPolicy: IfNotPresent
name: main
resources:

2
clusters/cl01tl/manifests/ollama/Deployment-ollama-server-2.yaml
View File

@@ -50,7 +50,7 @@ spec:
value: 24h
- name: OLLAMA_HOST
value: 0.0.0.0
image: ollama/ollama:0.17.7
image: ollama/ollama:0.18.0
imagePullPolicy: IfNotPresent
name: main
resources:

2
clusters/cl01tl/manifests/ollama/Deployment-ollama-server-3.yaml
View File

@@ -50,7 +50,7 @@ spec:
value: 24h
- name: OLLAMA_HOST
value: 0.0.0.0
image: ollama/ollama:0.17.7
image: ollama/ollama:0.18.0
imagePullPolicy: IfNotPresent
name: main
resources:

2
clusters/cl01tl/manifests/whodb/Deployment-whodb.yaml
View File

@@ -39,7 +39,7 @@ spec:
value: ollama-server-2.ollama
- name: WHODB_OLLAMA_PORT
value: "11434"
image: clidey/whodb:0.98.0
image: clidey/whodb:0.99.0
imagePullPolicy: IfNotPresent
name: main
resources: