From 8d229a6ff174b699674ade304e9b921724c191ee Mon Sep 17 00:00:00 2001 From: gitea-bot Date: Sat, 4 Apr 2026 00:51:58 +0000 Subject: [PATCH] chore: Update manifests after change --- .../Deployment-kubelet-serving-cert-approver.yaml | 7 +++---- .../CronJob-kubernetes-cloudflare-ddns.yaml | 9 ++++----- ...rnalSecret-kubernetes-cloudflare-ddns-secret.yaml | 12 ------------ .../languagetool/Deployment-languagetool.yaml | 7 +++---- .../languagetool/HTTPRoute-languagetool.yaml | 2 +- .../PersistentVolumeClaim-languagetool-data.yaml | 2 -- .../manifests/libation/CronJob-libation-main.yaml | 9 ++++----- .../libation/Deployment-libation-debug.yaml | 3 +-- .../libation/PersistentVolumeClaim-libation.yaml | 2 -- .../lidarr/Cluster-lidarr-postgresql-18-cluster.yaml | 8 ++++---- .../cl01tl/manifests/lidarr/Deployment-lidarr.yaml | 12 +++--------- ...arr-postgresql-18-backup-garage-local-secret.yaml | 4 ++-- ...lSecret-lidarr-postgresql-18-recovery-secret.yaml | 4 ++-- .../cl01tl/manifests/lidarr/HTTPRoute-lidarr.yaml | 2 +- ...ore-lidarr-postgresql-18-backup-garage-local.yaml | 4 ++-- .../ObjectStore-lidarr-postgresql-18-recovery.yaml | 4 ++-- .../lidarr/PersistentVolumeClaim-lidarr-config.yaml | 2 -- ...metheusRule-lidarr-postgresql-18-alert-rules.yaml | 4 ++-- ...r-postgresql-18-scheduled-backup-live-backup.yaml | 4 ++-- .../ConfigMap-local-path-config.yaml | 2 +- .../Deployment-local-path-provisioner.yaml | 9 ++++++--- 21 files changed, 43 insertions(+), 69 deletions(-) diff --git a/clusters/cl01tl/manifests/kubelet-serving-cert-approver/Deployment-kubelet-serving-cert-approver.yaml b/clusters/cl01tl/manifests/kubelet-serving-cert-approver/Deployment-kubelet-serving-cert-approver.yaml index 41e1a7c97..4511439f9 100644 --- a/clusters/cl01tl/manifests/kubelet-serving-cert-approver/Deployment-kubelet-serving-cert-approver.yaml +++ b/clusters/cl01tl/manifests/kubelet-serving-cert-approver/Deployment-kubelet-serving-cert-approver.yaml @@ -67,13 +67,12 @@ spec: valueFrom: fieldRef: fieldPath: metadata.namespace - image: ghcr.io/alex1989hu/kubelet-serving-cert-approver:0.10.3 - imagePullPolicy: Always + image: ghcr.io/alex1989hu/kubelet-serving-cert-approver:0.10.3@sha256:4cdc92140c48341433513dce3201806309d5256cfbac6f830feae1e7e9fb0d7d name: main resources: requests: - cpu: 100m - memory: 128Mi + cpu: 1m + memory: 20Mi securityContext: allowPrivilegeEscalation: false capabilities: diff --git a/clusters/cl01tl/manifests/kubernetes-cloudflare-ddns/CronJob-kubernetes-cloudflare-ddns.yaml b/clusters/cl01tl/manifests/kubernetes-cloudflare-ddns/CronJob-kubernetes-cloudflare-ddns.yaml index abca51e89..d4945f4f6 100644 --- a/clusters/cl01tl/manifests/kubernetes-cloudflare-ddns/CronJob-kubernetes-cloudflare-ddns.yaml +++ b/clusters/cl01tl/manifests/kubernetes-cloudflare-ddns/CronJob-kubernetes-cloudflare-ddns.yaml @@ -12,8 +12,8 @@ metadata: spec: suspend: false concurrencyPolicy: Forbid - startingDeadlineSeconds: 90 - timeZone: US/Central + startingDeadlineSeconds: 30 + timeZone: America/Chicago schedule: "30 4 * * *" successfulJobsHistoryLimit: 1 failedJobsHistoryLimit: 1 @@ -40,10 +40,9 @@ spec: - envFrom: - secretRef: name: kubernetes-cloudflare-ddns-secret - image: kubitodev/kubernetes-cloudflare-ddns:2.0.0 - imagePullPolicy: IfNotPresent + image: kubitodev/kubernetes-cloudflare-ddns:2.0.0sha256:80979b046e32ecccedfa6c00804676d070ef87c7f77a65e4afa4e91ffdeb7309 name: main resources: requests: cpu: 10m - memory: 128Mi + memory: 32Mi diff --git a/clusters/cl01tl/manifests/kubernetes-cloudflare-ddns/ExternalSecret-kubernetes-cloudflare-ddns-secret.yaml b/clusters/cl01tl/manifests/kubernetes-cloudflare-ddns/ExternalSecret-kubernetes-cloudflare-ddns-secret.yaml index 8f8add372..4173640fa 100644 --- a/clusters/cl01tl/manifests/kubernetes-cloudflare-ddns/ExternalSecret-kubernetes-cloudflare-ddns-secret.yaml +++ b/clusters/cl01tl/manifests/kubernetes-cloudflare-ddns/ExternalSecret-kubernetes-cloudflare-ddns-secret.yaml @@ -14,29 +14,17 @@ spec: data: - secretKey: AUTH_KEY remoteRef: - conversionStrategy: Default - decodingStrategy: None key: /cloudflare/alexlebens.net/ddns - metadataPolicy: None property: token - secretKey: NAME remoteRef: - conversionStrategy: Default - decodingStrategy: None key: /cloudflare/alexlebens.net/ddns - metadataPolicy: None property: name - secretKey: RECORD_ID remoteRef: - conversionStrategy: Default - decodingStrategy: None key: /cloudflare/alexlebens.net/ddns - metadataPolicy: None property: record-id - secretKey: ZONE_ID remoteRef: - conversionStrategy: Default - decodingStrategy: None key: /cloudflare/alexlebens.net/ddns - metadataPolicy: None property: zone-id diff --git a/clusters/cl01tl/manifests/languagetool/Deployment-languagetool.yaml b/clusters/cl01tl/manifests/languagetool/Deployment-languagetool.yaml index 9346dd9d7..d0877d016 100644 --- a/clusters/cl01tl/manifests/languagetool/Deployment-languagetool.yaml +++ b/clusters/cl01tl/manifests/languagetool/Deployment-languagetool.yaml @@ -41,13 +41,12 @@ spec: value: 512m - name: Java_Xmx value: 1g - image: erikvl87/languagetool:6.7 - imagePullPolicy: IfNotPresent + image: erikvl87/languagetool:6.7@sha256:454acc9b3d232bdf37a0eddb1c8d0e93513ce41b914a8a374e3c44a884122364 name: main resources: requests: - cpu: 10m - memory: 128Mi + cpu: 1m + memory: 800Mi volumeMounts: - mountPath: /ngrams name: data diff --git a/clusters/cl01tl/manifests/languagetool/HTTPRoute-languagetool.yaml b/clusters/cl01tl/manifests/languagetool/HTTPRoute-languagetool.yaml index 314eb8e5d..362014d0b 100644 --- a/clusters/cl01tl/manifests/languagetool/HTTPRoute-languagetool.yaml +++ b/clusters/cl01tl/manifests/languagetool/HTTPRoute-languagetool.yaml @@ -23,7 +23,7 @@ spec: name: languagetool namespace: languagetool port: 80 - weight: 100 + weight: 1 matches: - path: type: PathPrefix diff --git a/clusters/cl01tl/manifests/languagetool/PersistentVolumeClaim-languagetool-data.yaml b/clusters/cl01tl/manifests/languagetool/PersistentVolumeClaim-languagetool-data.yaml index 874c5a882..01c3dde01 100644 --- a/clusters/cl01tl/manifests/languagetool/PersistentVolumeClaim-languagetool-data.yaml +++ b/clusters/cl01tl/manifests/languagetool/PersistentVolumeClaim-languagetool-data.yaml @@ -7,8 +7,6 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: languagetool helm.sh/chart: languagetool-4.6.2 - annotations: - helm.sh/resource-policy: keep namespace: languagetool spec: accessModes: diff --git a/clusters/cl01tl/manifests/libation/CronJob-libation-main.yaml b/clusters/cl01tl/manifests/libation/CronJob-libation-main.yaml index d2c166674..13d46255c 100644 --- a/clusters/cl01tl/manifests/libation/CronJob-libation-main.yaml +++ b/clusters/cl01tl/manifests/libation/CronJob-libation-main.yaml @@ -12,8 +12,8 @@ metadata: spec: suspend: false concurrencyPolicy: Forbid - startingDeadlineSeconds: 90 - timeZone: US/Central + startingDeadlineSeconds: 30 + timeZone: America/Chicago schedule: "0 0 1 1 *" successfulJobsHistoryLimit: 1 failedJobsHistoryLimit: 1 @@ -42,13 +42,12 @@ spec: value: "-1" - name: LIBATION_BOOKS_DIR value: /data - image: rmcrackan/libation:13.3.2 - imagePullPolicy: IfNotPresent + image: rmcrackan/libation:13.3.2@sha256:d1c45260f3ba34b0fb1432c2b51763e00c5174864961856c1c31e7f2b0c3a39e name: main resources: requests: cpu: 10m - memory: 128Mi + memory: 32Mi volumeMounts: - mountPath: /data name: audiobooks diff --git a/clusters/cl01tl/manifests/libation/Deployment-libation-debug.yaml b/clusters/cl01tl/manifests/libation/Deployment-libation-debug.yaml index 1ad7028df..2070b998d 100644 --- a/clusters/cl01tl/manifests/libation/Deployment-libation-debug.yaml +++ b/clusters/cl01tl/manifests/libation/Deployment-libation-debug.yaml @@ -37,8 +37,7 @@ spec: - command: - sleep - infinity - image: ubuntu:resolute-20260401 - imagePullPolicy: IfNotPresent + image: ubuntu:resolute-20260401@sha256:a072b64036a738e55bff8f9a9682cbb893bf20c213772effc1de8dee8df1cea9 name: main resources: requests: diff --git a/clusters/cl01tl/manifests/libation/PersistentVolumeClaim-libation.yaml b/clusters/cl01tl/manifests/libation/PersistentVolumeClaim-libation.yaml index fd07bdad2..1d75800ca 100644 --- a/clusters/cl01tl/manifests/libation/PersistentVolumeClaim-libation.yaml +++ b/clusters/cl01tl/manifests/libation/PersistentVolumeClaim-libation.yaml @@ -7,8 +7,6 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: libation helm.sh/chart: libation-4.6.2 - annotations: - helm.sh/resource-policy: keep namespace: libation spec: accessModes: diff --git a/clusters/cl01tl/manifests/lidarr/Cluster-lidarr-postgresql-18-cluster.yaml b/clusters/cl01tl/manifests/lidarr/Cluster-lidarr-postgresql-18-cluster.yaml index 025d187bc..3aec8763d 100644 --- a/clusters/cl01tl/manifests/lidarr/Cluster-lidarr-postgresql-18-cluster.yaml +++ b/clusters/cl01tl/manifests/lidarr/Cluster-lidarr-postgresql-18-cluster.yaml @@ -5,10 +5,10 @@ metadata: namespace: lidarr labels: app.kubernetes.io/name: lidarr-postgresql-18-cluster - helm.sh/chart: postgres-18-cluster-7.10.0 + helm.sh/chart: postgres-18-cluster-7.11.1 app.kubernetes.io/instance: lidarr app.kubernetes.io/part-of: lidarr - app.kubernetes.io/version: "7.10.0" + app.kubernetes.io/version: "7.11.1" app.kubernetes.io/managed-by: Helm spec: instances: 3 @@ -26,8 +26,8 @@ spec: limits: hugepages-2Mi: 256Mi requests: - cpu: 100m - memory: 256Mi + cpu: 20m + memory: 80Mi affinity: enablePodAntiAffinity: true topologyKey: kubernetes.io/hostname diff --git a/clusters/cl01tl/manifests/lidarr/Deployment-lidarr.yaml b/clusters/cl01tl/manifests/lidarr/Deployment-lidarr.yaml index c000667e7..0fbad1f1f 100644 --- a/clusters/cl01tl/manifests/lidarr/Deployment-lidarr.yaml +++ b/clusters/cl01tl/manifests/lidarr/Deployment-lidarr.yaml @@ -41,18 +41,17 @@ spec: containers: - env: - name: TZ - value: US/Central + value: America/Chicago - name: PUID value: "1000" - name: PGID value: "1000" image: ghcr.io/linuxserver/lidarr:3.1.2-nightly@sha256:034055feee43b11eb2f7a8438a9af1c99ab564dd2b43e5df2fe5b3c9b3b8b1ac - imagePullPolicy: IfNotPresent name: main resources: requests: cpu: 100m - memory: 256Mi + memory: 300Mi volumeMounts: - mountPath: /config name: config @@ -71,13 +70,8 @@ spec: value: "false" - name: ENABLE_UNKNOWN_QUEUE_ITEMS value: "false" - image: ghcr.io/onedr0p/exportarr:v2.3.0 - imagePullPolicy: IfNotPresent + image: ghcr.io/onedr0p/exportarr:v2.3.0@sha256:af535d94061cf97a52e1661945ffba78c03f9443eae7c0da1a80a5a4be56b520 name: metrics - resources: - requests: - cpu: 10m - memory: 128Mi volumeMounts: - mountPath: /config name: config diff --git a/clusters/cl01tl/manifests/lidarr/ExternalSecret-lidarr-postgresql-18-backup-garage-local-secret.yaml b/clusters/cl01tl/manifests/lidarr/ExternalSecret-lidarr-postgresql-18-backup-garage-local-secret.yaml index 65afa7369..e096760c1 100644 --- a/clusters/cl01tl/manifests/lidarr/ExternalSecret-lidarr-postgresql-18-backup-garage-local-secret.yaml +++ b/clusters/cl01tl/manifests/lidarr/ExternalSecret-lidarr-postgresql-18-backup-garage-local-secret.yaml @@ -5,10 +5,10 @@ metadata: namespace: lidarr labels: app.kubernetes.io/name: lidarr-postgresql-18-backup-garage-local-secret - helm.sh/chart: postgres-18-cluster-7.10.0 + helm.sh/chart: postgres-18-cluster-7.11.1 app.kubernetes.io/instance: lidarr app.kubernetes.io/part-of: lidarr - app.kubernetes.io/version: "7.10.0" + app.kubernetes.io/version: "7.11.1" app.kubernetes.io/managed-by: Helm spec: secretStoreRef: diff --git a/clusters/cl01tl/manifests/lidarr/ExternalSecret-lidarr-postgresql-18-recovery-secret.yaml b/clusters/cl01tl/manifests/lidarr/ExternalSecret-lidarr-postgresql-18-recovery-secret.yaml index f6eb39580..1a59fcb3f 100644 --- a/clusters/cl01tl/manifests/lidarr/ExternalSecret-lidarr-postgresql-18-recovery-secret.yaml +++ b/clusters/cl01tl/manifests/lidarr/ExternalSecret-lidarr-postgresql-18-recovery-secret.yaml @@ -4,10 +4,10 @@ metadata: name: lidarr-postgresql-18-recovery-secret namespace: lidarr labels: - helm.sh/chart: postgres-18-cluster-7.10.0 + helm.sh/chart: postgres-18-cluster-7.11.1 app.kubernetes.io/instance: lidarr app.kubernetes.io/part-of: lidarr - app.kubernetes.io/version: "7.10.0" + app.kubernetes.io/version: "7.11.1" app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: lidarr-postgresql-18-recovery-secret spec: diff --git a/clusters/cl01tl/manifests/lidarr/HTTPRoute-lidarr.yaml b/clusters/cl01tl/manifests/lidarr/HTTPRoute-lidarr.yaml index e88308a38..15c2fc97c 100644 --- a/clusters/cl01tl/manifests/lidarr/HTTPRoute-lidarr.yaml +++ b/clusters/cl01tl/manifests/lidarr/HTTPRoute-lidarr.yaml @@ -34,7 +34,7 @@ spec: name: lidarr namespace: lidarr port: 80 - weight: 100 + weight: 1 matches: - path: type: PathPrefix diff --git a/clusters/cl01tl/manifests/lidarr/ObjectStore-lidarr-postgresql-18-backup-garage-local.yaml b/clusters/cl01tl/manifests/lidarr/ObjectStore-lidarr-postgresql-18-backup-garage-local.yaml index f05c34102..4a4df83e0 100644 --- a/clusters/cl01tl/manifests/lidarr/ObjectStore-lidarr-postgresql-18-backup-garage-local.yaml +++ b/clusters/cl01tl/manifests/lidarr/ObjectStore-lidarr-postgresql-18-backup-garage-local.yaml @@ -5,10 +5,10 @@ metadata: namespace: lidarr labels: app.kubernetes.io/name: lidarr-postgresql-18-backup-garage-local - helm.sh/chart: postgres-18-cluster-7.10.0 + helm.sh/chart: postgres-18-cluster-7.11.1 app.kubernetes.io/instance: lidarr app.kubernetes.io/part-of: lidarr - app.kubernetes.io/version: "7.10.0" + app.kubernetes.io/version: "7.11.1" app.kubernetes.io/managed-by: Helm spec: retentionPolicy: 7d diff --git a/clusters/cl01tl/manifests/lidarr/ObjectStore-lidarr-postgresql-18-recovery.yaml b/clusters/cl01tl/manifests/lidarr/ObjectStore-lidarr-postgresql-18-recovery.yaml index 68414be8e..45367d148 100644 --- a/clusters/cl01tl/manifests/lidarr/ObjectStore-lidarr-postgresql-18-recovery.yaml +++ b/clusters/cl01tl/manifests/lidarr/ObjectStore-lidarr-postgresql-18-recovery.yaml @@ -4,10 +4,10 @@ metadata: name: "lidarr-postgresql-18-recovery" namespace: lidarr labels: - helm.sh/chart: postgres-18-cluster-7.10.0 + helm.sh/chart: postgres-18-cluster-7.11.1 app.kubernetes.io/instance: lidarr app.kubernetes.io/part-of: lidarr - app.kubernetes.io/version: "7.10.0" + app.kubernetes.io/version: "7.11.1" app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: "lidarr-postgresql-18-recovery" spec: diff --git a/clusters/cl01tl/manifests/lidarr/PersistentVolumeClaim-lidarr-config.yaml b/clusters/cl01tl/manifests/lidarr/PersistentVolumeClaim-lidarr-config.yaml index 0692b85bc..60217718b 100644 --- a/clusters/cl01tl/manifests/lidarr/PersistentVolumeClaim-lidarr-config.yaml +++ b/clusters/cl01tl/manifests/lidarr/PersistentVolumeClaim-lidarr-config.yaml @@ -7,8 +7,6 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: lidarr helm.sh/chart: lidarr-4.6.2 - annotations: - helm.sh/resource-policy: keep namespace: lidarr spec: accessModes: diff --git a/clusters/cl01tl/manifests/lidarr/PrometheusRule-lidarr-postgresql-18-alert-rules.yaml b/clusters/cl01tl/manifests/lidarr/PrometheusRule-lidarr-postgresql-18-alert-rules.yaml index 82c113d97..932547507 100644 --- a/clusters/cl01tl/manifests/lidarr/PrometheusRule-lidarr-postgresql-18-alert-rules.yaml +++ b/clusters/cl01tl/manifests/lidarr/PrometheusRule-lidarr-postgresql-18-alert-rules.yaml @@ -5,10 +5,10 @@ metadata: namespace: lidarr labels: app.kubernetes.io/name: lidarr-postgresql-18-alert-rules - helm.sh/chart: postgres-18-cluster-7.10.0 + helm.sh/chart: postgres-18-cluster-7.11.1 app.kubernetes.io/instance: lidarr app.kubernetes.io/part-of: lidarr - app.kubernetes.io/version: "7.10.0" + app.kubernetes.io/version: "7.11.1" app.kubernetes.io/managed-by: Helm spec: groups: diff --git a/clusters/cl01tl/manifests/lidarr/ScheduledBackup-lidarr-postgresql-18-scheduled-backup-live-backup.yaml b/clusters/cl01tl/manifests/lidarr/ScheduledBackup-lidarr-postgresql-18-scheduled-backup-live-backup.yaml index 85088a9ff..d538e6598 100644 --- a/clusters/cl01tl/manifests/lidarr/ScheduledBackup-lidarr-postgresql-18-scheduled-backup-live-backup.yaml +++ b/clusters/cl01tl/manifests/lidarr/ScheduledBackup-lidarr-postgresql-18-scheduled-backup-live-backup.yaml @@ -5,10 +5,10 @@ metadata: namespace: lidarr labels: app.kubernetes.io/name: "lidarr-postgresql-18-scheduled-backup-live-backup" - helm.sh/chart: postgres-18-cluster-7.10.0 + helm.sh/chart: postgres-18-cluster-7.11.1 app.kubernetes.io/instance: lidarr app.kubernetes.io/part-of: lidarr - app.kubernetes.io/version: "7.10.0" + app.kubernetes.io/version: "7.11.1" app.kubernetes.io/managed-by: Helm spec: immediate: true diff --git a/clusters/cl01tl/manifests/local-path-provisioner/ConfigMap-local-path-config.yaml b/clusters/cl01tl/manifests/local-path-provisioner/ConfigMap-local-path-config.yaml index b5d62570c..17504297f 100644 --- a/clusters/cl01tl/manifests/local-path-provisioner/ConfigMap-local-path-config.yaml +++ b/clusters/cl01tl/manifests/local-path-provisioner/ConfigMap-local-path-config.yaml @@ -49,7 +49,7 @@ data: effect: NoSchedule containers: - name: helper-pod - image: busybox:1.37.0 + image: busybox:1.37.0@sha256:1487d0af5f52b4ba31c7e465126ee2123fe3f2305d638e7827681e7cf6c83d5e imagePullPolicy: IfNotPresent resources: {} diff --git a/clusters/cl01tl/manifests/local-path-provisioner/Deployment-local-path-provisioner.yaml b/clusters/cl01tl/manifests/local-path-provisioner/Deployment-local-path-provisioner.yaml index 216588d44..a487625a7 100644 --- a/clusters/cl01tl/manifests/local-path-provisioner/Deployment-local-path-provisioner.yaml +++ b/clusters/cl01tl/manifests/local-path-provisioner/Deployment-local-path-provisioner.yaml @@ -30,7 +30,7 @@ spec: containers: - name: local-path-provisioner securityContext: {} - image: "rancher/local-path-provisioner:v0.0.35" + image: "rancher/local-path-provisioner:v0.0.35@sha256:34ff0847cc47ebf69656ba44a3de9324596d0036b66ffd323b21614dd8221530" imagePullPolicy: IfNotPresent command: - local-path-provisioner @@ -43,7 +43,7 @@ spec: - --provisioner-name - cluster.local/local-path-provisioner - --helper-image - - "busybox:1.37.0" + - "busybox:1.37.0@sha256:1487d0af5f52b4ba31c7e465126ee2123fe3f2305d638e7827681e7cf6c83d5e" - --configmap-name - local-path-config volumeMounts: @@ -56,7 +56,10 @@ spec: fieldPath: metadata.namespace - name: CONFIG_MOUNT_PATH value: /etc/config/ - resources: {} + resources: + limits: + cpu: 1m + memory: 30Mi volumes: - name: config-volume configMap: