chore: Update manifests after change

2026-04-04 00:51:58 +00:00
parent 147ab0db98
commit 8d229a6ff1
21 changed files with 43 additions and 69 deletions
--- a/clusters/cl01tl/manifests/kubelet-serving-cert-approver/Deployment-kubelet-serving-cert-approver.yaml
+++ b/clusters/cl01tl/manifests/kubelet-serving-cert-approver/Deployment-kubelet-serving-cert-approver.yaml
@@ -67,13 +67,12 @@ spec:
              valueFrom:
                fieldRef:
                  fieldPath: metadata.namespace
-          image: ghcr.io/alex1989hu/kubelet-serving-cert-approver:0.10.3
-          imagePullPolicy: Always
+          image: ghcr.io/alex1989hu/kubelet-serving-cert-approver:0.10.3@sha256:4cdc92140c48341433513dce3201806309d5256cfbac6f830feae1e7e9fb0d7d
          name: main
          resources:
            requests:
-              cpu: 100m
-              memory: 128Mi
+              cpu: 1m
+              memory: 20Mi
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
--- a/clusters/cl01tl/manifests/kubernetes-cloudflare-ddns/CronJob-kubernetes-cloudflare-ddns.yaml
+++ b/clusters/cl01tl/manifests/kubernetes-cloudflare-ddns/CronJob-kubernetes-cloudflare-ddns.yaml
@@ -12,8 +12,8 @@ metadata:
 spec:
  suspend: false
  concurrencyPolicy: Forbid
-  startingDeadlineSeconds: 90
-  timeZone: US/Central
+  startingDeadlineSeconds: 30
+  timeZone: America/Chicago
  schedule: "30 4 * * *"
  successfulJobsHistoryLimit: 1
  failedJobsHistoryLimit: 1
@@ -40,10 +40,9 @@ spec:
            - envFrom:
                - secretRef:
                    name: kubernetes-cloudflare-ddns-secret
-              image: kubitodev/kubernetes-cloudflare-ddns:2.0.0
-              imagePullPolicy: IfNotPresent
+              image: kubitodev/kubernetes-cloudflare-ddns:2.0.0sha256:80979b046e32ecccedfa6c00804676d070ef87c7f77a65e4afa4e91ffdeb7309
              name: main
              resources:
                requests:
                  cpu: 10m
-                  memory: 128Mi
+                  memory: 32Mi
--- a/clusters/cl01tl/manifests/kubernetes-cloudflare-ddns/ExternalSecret-kubernetes-cloudflare-ddns-secret.yaml
+++ b/clusters/cl01tl/manifests/kubernetes-cloudflare-ddns/ExternalSecret-kubernetes-cloudflare-ddns-secret.yaml
@@ -14,29 +14,17 @@ spec:
  data:
    - secretKey: AUTH_KEY
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cloudflare/alexlebens.net/ddns
-        metadataPolicy: None
        property: token
    - secretKey: NAME
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cloudflare/alexlebens.net/ddns
-        metadataPolicy: None
        property: name
    - secretKey: RECORD_ID
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cloudflare/alexlebens.net/ddns
-        metadataPolicy: None
        property: record-id
    - secretKey: ZONE_ID
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cloudflare/alexlebens.net/ddns
-        metadataPolicy: None
        property: zone-id
--- a/clusters/cl01tl/manifests/languagetool/Deployment-languagetool.yaml
+++ b/clusters/cl01tl/manifests/languagetool/Deployment-languagetool.yaml
@@ -41,13 +41,12 @@ spec:
              value: 512m
            - name: Java_Xmx
              value: 1g
-          image: erikvl87/languagetool:6.7
-          imagePullPolicy: IfNotPresent
+          image: erikvl87/languagetool:6.7@sha256:454acc9b3d232bdf37a0eddb1c8d0e93513ce41b914a8a374e3c44a884122364
          name: main
          resources:
            requests:
-              cpu: 10m
-              memory: 128Mi
+              cpu: 1m
+              memory: 800Mi
          volumeMounts:
            - mountPath: /ngrams
              name: data
--- a/clusters/cl01tl/manifests/languagetool/HTTPRoute-languagetool.yaml
+++ b/clusters/cl01tl/manifests/languagetool/HTTPRoute-languagetool.yaml
@@ -23,7 +23,7 @@ spec:
          name: languagetool
          namespace: languagetool
          port: 80
-          weight: 100
+          weight: 1
      matches:
        - path:
            type: PathPrefix
--- a/clusters/cl01tl/manifests/languagetool/PersistentVolumeClaim-languagetool-data.yaml
+++ b/clusters/cl01tl/manifests/languagetool/PersistentVolumeClaim-languagetool-data.yaml
@@ -7,8 +7,6 @@ metadata:
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: languagetool
    helm.sh/chart: languagetool-4.6.2
-  annotations:
-    helm.sh/resource-policy: keep
  namespace: languagetool
 spec:
  accessModes:
--- a/clusters/cl01tl/manifests/libation/CronJob-libation-main.yaml
+++ b/clusters/cl01tl/manifests/libation/CronJob-libation-main.yaml
@@ -12,8 +12,8 @@ metadata:
 spec:
  suspend: false
  concurrencyPolicy: Forbid
-  startingDeadlineSeconds: 90
-  timeZone: US/Central
+  startingDeadlineSeconds: 30
+  timeZone: America/Chicago
  schedule: "0 0 1 1 *"
  successfulJobsHistoryLimit: 1
  failedJobsHistoryLimit: 1
@@ -42,13 +42,12 @@ spec:
                  value: "-1"
                - name: LIBATION_BOOKS_DIR
                  value: /data
-              image: rmcrackan/libation:13.3.2
-              imagePullPolicy: IfNotPresent
+              image: rmcrackan/libation:13.3.2@sha256:d1c45260f3ba34b0fb1432c2b51763e00c5174864961856c1c31e7f2b0c3a39e
              name: main
              resources:
                requests:
                  cpu: 10m
-                  memory: 128Mi
+                  memory: 32Mi
              volumeMounts:
                - mountPath: /data
                  name: audiobooks
--- a/clusters/cl01tl/manifests/libation/Deployment-libation-debug.yaml
+++ b/clusters/cl01tl/manifests/libation/Deployment-libation-debug.yaml
@@ -37,8 +37,7 @@ spec:
        - command:
            - sleep
            - infinity
-          image: ubuntu:resolute-20260401
-          imagePullPolicy: IfNotPresent
+          image: ubuntu:resolute-20260401@sha256:a072b64036a738e55bff8f9a9682cbb893bf20c213772effc1de8dee8df1cea9
          name: main
          resources:
            requests:
--- a/clusters/cl01tl/manifests/libation/PersistentVolumeClaim-libation.yaml
+++ b/clusters/cl01tl/manifests/libation/PersistentVolumeClaim-libation.yaml
@@ -7,8 +7,6 @@ metadata:
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: libation
    helm.sh/chart: libation-4.6.2
-  annotations:
-    helm.sh/resource-policy: keep
  namespace: libation
 spec:
  accessModes:
--- a/clusters/cl01tl/manifests/lidarr/Cluster-lidarr-postgresql-18-cluster.yaml
+++ b/clusters/cl01tl/manifests/lidarr/Cluster-lidarr-postgresql-18-cluster.yaml
@@ -5,10 +5,10 @@ metadata:
  namespace: lidarr
  labels:
    app.kubernetes.io/name: lidarr-postgresql-18-cluster
-    helm.sh/chart: postgres-18-cluster-7.10.0
+    helm.sh/chart: postgres-18-cluster-7.11.1
    app.kubernetes.io/instance: lidarr
    app.kubernetes.io/part-of: lidarr
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.1"
    app.kubernetes.io/managed-by: Helm
 spec:
  instances: 3
@@ -26,8 +26,8 @@ spec:
    limits:
      hugepages-2Mi: 256Mi
    requests:
-      cpu: 100m
-      memory: 256Mi
+      cpu: 20m
+      memory: 80Mi
  affinity:
    enablePodAntiAffinity: true
    topologyKey: kubernetes.io/hostname
--- a/clusters/cl01tl/manifests/lidarr/Deployment-lidarr.yaml
+++ b/clusters/cl01tl/manifests/lidarr/Deployment-lidarr.yaml
@@ -41,18 +41,17 @@ spec:
      containers:
        - env:
            - name: TZ
-              value: US/Central
+              value: America/Chicago
            - name: PUID
              value: "1000"
            - name: PGID
              value: "1000"
          image: ghcr.io/linuxserver/lidarr:3.1.2-nightly@sha256:034055feee43b11eb2f7a8438a9af1c99ab564dd2b43e5df2fe5b3c9b3b8b1ac
-          imagePullPolicy: IfNotPresent
          name: main
          resources:
            requests:
              cpu: 100m
-              memory: 256Mi
+              memory: 300Mi
          volumeMounts:
            - mountPath: /config
              name: config
@@ -71,13 +70,8 @@ spec:
              value: "false"
            - name: ENABLE_UNKNOWN_QUEUE_ITEMS
              value: "false"
-          image: ghcr.io/onedr0p/exportarr:v2.3.0
-          imagePullPolicy: IfNotPresent
+          image: ghcr.io/onedr0p/exportarr:v2.3.0@sha256:af535d94061cf97a52e1661945ffba78c03f9443eae7c0da1a80a5a4be56b520
          name: metrics
-          resources:
-            requests:
-              cpu: 10m
-              memory: 128Mi
          volumeMounts:
            - mountPath: /config
              name: config
--- a/clusters/cl01tl/manifests/lidarr/ExternalSecret-lidarr-postgresql-18-backup-garage-local-secret.yaml
+++ b/clusters/cl01tl/manifests/lidarr/ExternalSecret-lidarr-postgresql-18-backup-garage-local-secret.yaml
@@ -5,10 +5,10 @@ metadata:
  namespace: lidarr
  labels:
    app.kubernetes.io/name: lidarr-postgresql-18-backup-garage-local-secret
-    helm.sh/chart: postgres-18-cluster-7.10.0
+    helm.sh/chart: postgres-18-cluster-7.11.1
    app.kubernetes.io/instance: lidarr
    app.kubernetes.io/part-of: lidarr
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.1"
    app.kubernetes.io/managed-by: Helm
 spec:
  secretStoreRef:
--- a/clusters/cl01tl/manifests/lidarr/ExternalSecret-lidarr-postgresql-18-recovery-secret.yaml
+++ b/clusters/cl01tl/manifests/lidarr/ExternalSecret-lidarr-postgresql-18-recovery-secret.yaml
@@ -4,10 +4,10 @@ metadata:
  name: lidarr-postgresql-18-recovery-secret
  namespace: lidarr
  labels:
-    helm.sh/chart: postgres-18-cluster-7.10.0
+    helm.sh/chart: postgres-18-cluster-7.11.1
    app.kubernetes.io/instance: lidarr
    app.kubernetes.io/part-of: lidarr
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.1"
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: lidarr-postgresql-18-recovery-secret
 spec:
--- a/clusters/cl01tl/manifests/lidarr/HTTPRoute-lidarr.yaml
+++ b/clusters/cl01tl/manifests/lidarr/HTTPRoute-lidarr.yaml
@@ -34,7 +34,7 @@ spec:
          name: lidarr
          namespace: lidarr
          port: 80
-          weight: 100
+          weight: 1
      matches:
        - path:
            type: PathPrefix
--- a/clusters/cl01tl/manifests/lidarr/ObjectStore-lidarr-postgresql-18-backup-garage-local.yaml
+++ b/clusters/cl01tl/manifests/lidarr/ObjectStore-lidarr-postgresql-18-backup-garage-local.yaml
@@ -5,10 +5,10 @@ metadata:
  namespace: lidarr
  labels:
    app.kubernetes.io/name: lidarr-postgresql-18-backup-garage-local
-    helm.sh/chart: postgres-18-cluster-7.10.0
+    helm.sh/chart: postgres-18-cluster-7.11.1
    app.kubernetes.io/instance: lidarr
    app.kubernetes.io/part-of: lidarr
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.1"
    app.kubernetes.io/managed-by: Helm
 spec:
  retentionPolicy: 7d
--- a/clusters/cl01tl/manifests/lidarr/ObjectStore-lidarr-postgresql-18-recovery.yaml
+++ b/clusters/cl01tl/manifests/lidarr/ObjectStore-lidarr-postgresql-18-recovery.yaml
@@ -4,10 +4,10 @@ metadata:
  name: "lidarr-postgresql-18-recovery"
  namespace: lidarr
  labels:
-    helm.sh/chart: postgres-18-cluster-7.10.0
+    helm.sh/chart: postgres-18-cluster-7.11.1
    app.kubernetes.io/instance: lidarr
    app.kubernetes.io/part-of: lidarr
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.1"
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: "lidarr-postgresql-18-recovery"
 spec:
--- a/clusters/cl01tl/manifests/lidarr/PersistentVolumeClaim-lidarr-config.yaml
+++ b/clusters/cl01tl/manifests/lidarr/PersistentVolumeClaim-lidarr-config.yaml
@@ -7,8 +7,6 @@ metadata:
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: lidarr
    helm.sh/chart: lidarr-4.6.2
-  annotations:
-    helm.sh/resource-policy: keep
  namespace: lidarr
 spec:
  accessModes:
--- a/clusters/cl01tl/manifests/lidarr/PrometheusRule-lidarr-postgresql-18-alert-rules.yaml
+++ b/clusters/cl01tl/manifests/lidarr/PrometheusRule-lidarr-postgresql-18-alert-rules.yaml
@@ -5,10 +5,10 @@ metadata:
  namespace: lidarr
  labels:
    app.kubernetes.io/name: lidarr-postgresql-18-alert-rules
-    helm.sh/chart: postgres-18-cluster-7.10.0
+    helm.sh/chart: postgres-18-cluster-7.11.1
    app.kubernetes.io/instance: lidarr
    app.kubernetes.io/part-of: lidarr
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.1"
    app.kubernetes.io/managed-by: Helm
 spec:
  groups:
--- a/clusters/cl01tl/manifests/lidarr/ScheduledBackup-lidarr-postgresql-18-scheduled-backup-live-backup.yaml
+++ b/clusters/cl01tl/manifests/lidarr/ScheduledBackup-lidarr-postgresql-18-scheduled-backup-live-backup.yaml
@@ -5,10 +5,10 @@ metadata:
  namespace: lidarr
  labels:
    app.kubernetes.io/name: "lidarr-postgresql-18-scheduled-backup-live-backup"
-    helm.sh/chart: postgres-18-cluster-7.10.0
+    helm.sh/chart: postgres-18-cluster-7.11.1
    app.kubernetes.io/instance: lidarr
    app.kubernetes.io/part-of: lidarr
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.1"
    app.kubernetes.io/managed-by: Helm
 spec:
  immediate: true
--- a/clusters/cl01tl/manifests/local-path-provisioner/ConfigMap-local-path-config.yaml
+++ b/clusters/cl01tl/manifests/local-path-provisioner/ConfigMap-local-path-config.yaml
@@ -49,7 +49,7 @@ data:
          effect: NoSchedule
      containers:
        - name: helper-pod
-          image: busybox:1.37.0
+          image: busybox:1.37.0@sha256:1487d0af5f52b4ba31c7e465126ee2123fe3f2305d638e7827681e7cf6c83d5e
          imagePullPolicy: IfNotPresent
          resources:
            {}
--- a/clusters/cl01tl/manifests/local-path-provisioner/Deployment-local-path-provisioner.yaml
+++ b/clusters/cl01tl/manifests/local-path-provisioner/Deployment-local-path-provisioner.yaml
@@ -30,7 +30,7 @@ spec:
      containers:
        - name: local-path-provisioner
          securityContext: {}
-          image: "rancher/local-path-provisioner:v0.0.35"
+          image: "rancher/local-path-provisioner:v0.0.35@sha256:34ff0847cc47ebf69656ba44a3de9324596d0036b66ffd323b21614dd8221530"
          imagePullPolicy: IfNotPresent
          command:
            - local-path-provisioner
@@ -43,7 +43,7 @@ spec:
            - --provisioner-name
            - cluster.local/local-path-provisioner
            - --helper-image
-            - "busybox:1.37.0"
+            - "busybox:1.37.0@sha256:1487d0af5f52b4ba31c7e465126ee2123fe3f2305d638e7827681e7cf6c83d5e"
            - --configmap-name
            - local-path-config
          volumeMounts:
@@ -56,7 +56,10 @@ spec:
                  fieldPath: metadata.namespace
            - name: CONFIG_MOUNT_PATH
              value: /etc/config/
-          resources: {}
+          resources:
+            limits:
+              cpu: 1m
+              memory: 30Mi
      volumes:
        - name: config-volume
          configMap: