chore: Update manifests after change

clusters/cl01tl/manifests/kubelet-serving-cert-approver/Deployment-kubelet-serving-cert-approver.yaml

@@ -67,13 +67,12 @@ spec:
               valueFrom:
                 fieldRef:
                   fieldPath: metadata.namespace
-          image: ghcr.io/alex1989hu/kubelet-serving-cert-approver:0.10.3
+          image: ghcr.io/alex1989hu/kubelet-serving-cert-approver:0.10.3@sha256:4cdc92140c48341433513dce3201806309d5256cfbac6f830feae1e7e9fb0d7d
-          imagePullPolicy: Always
           name: main
           resources:
             requests:
-              cpu: 100m
+              cpu: 1m
-              memory: 128Mi
+              memory: 20Mi
           securityContext:
             allowPrivilegeEscalation: false
             capabilities:

clusters/cl01tl/manifests/kubernetes-cloudflare-ddns/CronJob-kubernetes-cloudflare-ddns.yaml

@@ -12,8 +12,8 @@ metadata:
 spec:
   suspend: false
   concurrencyPolicy: Forbid
-  startingDeadlineSeconds: 90
+  startingDeadlineSeconds: 30
-  timeZone: US/Central
+  timeZone: America/Chicago
   schedule: "30 4 * * *"
   successfulJobsHistoryLimit: 1
   failedJobsHistoryLimit: 1
@@ -40,10 +40,9 @@ spec:
             - envFrom:
                 - secretRef:
                     name: kubernetes-cloudflare-ddns-secret
-              image: kubitodev/kubernetes-cloudflare-ddns:2.0.0
+              image: kubitodev/kubernetes-cloudflare-ddns:2.0.0sha256:80979b046e32ecccedfa6c00804676d070ef87c7f77a65e4afa4e91ffdeb7309
-              imagePullPolicy: IfNotPresent
               name: main
               resources:
                 requests:
                   cpu: 10m
-                  memory: 128Mi
+                  memory: 32Mi

clusters/cl01tl/manifests/kubernetes-cloudflare-ddns/ExternalSecret-kubernetes-cloudflare-ddns-secret.yaml

@@ -14,29 +14,17 @@ spec:
   data:
     - secretKey: AUTH_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /cloudflare/alexlebens.net/ddns
-        metadataPolicy: None
         property: token
     - secretKey: NAME
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /cloudflare/alexlebens.net/ddns
-        metadataPolicy: None
         property: name
     - secretKey: RECORD_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /cloudflare/alexlebens.net/ddns
-        metadataPolicy: None
         property: record-id
     - secretKey: ZONE_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /cloudflare/alexlebens.net/ddns
-        metadataPolicy: None
         property: zone-id

clusters/cl01tl/manifests/languagetool/Deployment-languagetool.yaml

@@ -41,13 +41,12 @@ spec:
               value: 512m
             - name: Java_Xmx
               value: 1g
-          image: erikvl87/languagetool:6.7
+          image: erikvl87/languagetool:6.7@sha256:454acc9b3d232bdf37a0eddb1c8d0e93513ce41b914a8a374e3c44a884122364
-          imagePullPolicy: IfNotPresent
           name: main
           resources:
             requests:
-              cpu: 10m
+              cpu: 1m
-              memory: 128Mi
+              memory: 800Mi
           volumeMounts:
             - mountPath: /ngrams
               name: data

clusters/cl01tl/manifests/languagetool/HTTPRoute-languagetool.yaml

@@ -23,7 +23,7 @@ spec:
           name: languagetool
           namespace: languagetool
           port: 80
-          weight: 100
+          weight: 1
       matches:
         - path:
             type: PathPrefix

clusters/cl01tl/manifests/languagetool/PersistentVolumeClaim-languagetool-data.yaml

@@ -7,8 +7,6 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: languagetool
     helm.sh/chart: languagetool-4.6.2
-  annotations:
-    helm.sh/resource-policy: keep
   namespace: languagetool
 spec:
   accessModes:

clusters/cl01tl/manifests/libation/CronJob-libation-main.yaml

@@ -12,8 +12,8 @@ metadata:
 spec:
   suspend: false
   concurrencyPolicy: Forbid
-  startingDeadlineSeconds: 90
+  startingDeadlineSeconds: 30
-  timeZone: US/Central
+  timeZone: America/Chicago
   schedule: "0 0 1 1 *"
   successfulJobsHistoryLimit: 1
   failedJobsHistoryLimit: 1
@@ -42,13 +42,12 @@ spec:
                   value: "-1"
                 - name: LIBATION_BOOKS_DIR
                   value: /data
-              image: rmcrackan/libation:13.3.2
+              image: rmcrackan/libation:13.3.2@sha256:d1c45260f3ba34b0fb1432c2b51763e00c5174864961856c1c31e7f2b0c3a39e
-              imagePullPolicy: IfNotPresent
               name: main
               resources:
                 requests:
                   cpu: 10m
-                  memory: 128Mi
+                  memory: 32Mi
               volumeMounts:
                 - mountPath: /data
                   name: audiobooks

clusters/cl01tl/manifests/libation/Deployment-libation-debug.yaml

@@ -37,8 +37,7 @@ spec:
         - command:
             - sleep
             - infinity
-          image: ubuntu:resolute-20260401
+          image: ubuntu:resolute-20260401@sha256:a072b64036a738e55bff8f9a9682cbb893bf20c213772effc1de8dee8df1cea9
-          imagePullPolicy: IfNotPresent
           name: main
           resources:
             requests:

clusters/cl01tl/manifests/libation/PersistentVolumeClaim-libation.yaml

@@ -7,8 +7,6 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: libation
     helm.sh/chart: libation-4.6.2
-  annotations:
-    helm.sh/resource-policy: keep
   namespace: libation
 spec:
   accessModes:

clusters/cl01tl/manifests/lidarr/Cluster-lidarr-postgresql-18-cluster.yaml

@@ -5,10 +5,10 @@ metadata:
   namespace: lidarr
   labels:
     app.kubernetes.io/name: lidarr-postgresql-18-cluster
-    helm.sh/chart: postgres-18-cluster-7.10.0
+    helm.sh/chart: postgres-18-cluster-7.11.1
     app.kubernetes.io/instance: lidarr
     app.kubernetes.io/part-of: lidarr
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.1"
     app.kubernetes.io/managed-by: Helm
 spec:
   instances: 3
@@ -26,8 +26,8 @@ spec:
     limits:
       hugepages-2Mi: 256Mi
     requests:
-      cpu: 100m
+      cpu: 20m
-      memory: 256Mi
+      memory: 80Mi
   affinity:
     enablePodAntiAffinity: true
     topologyKey: kubernetes.io/hostname

clusters/cl01tl/manifests/lidarr/Deployment-lidarr.yaml

@@ -41,18 +41,17 @@ spec:
       containers:
         - env:
             - name: TZ
-              value: US/Central
+              value: America/Chicago
             - name: PUID
               value: "1000"
             - name: PGID
               value: "1000"
           image: ghcr.io/linuxserver/lidarr:3.1.2-nightly@sha256:034055feee43b11eb2f7a8438a9af1c99ab564dd2b43e5df2fe5b3c9b3b8b1ac
-          imagePullPolicy: IfNotPresent
           name: main
           resources:
             requests:
               cpu: 100m
-              memory: 256Mi
+              memory: 300Mi
           volumeMounts:
             - mountPath: /config
               name: config
@@ -71,13 +70,8 @@ spec:
               value: "false"
             - name: ENABLE_UNKNOWN_QUEUE_ITEMS
               value: "false"
-          image: ghcr.io/onedr0p/exportarr:v2.3.0
+          image: ghcr.io/onedr0p/exportarr:v2.3.0@sha256:af535d94061cf97a52e1661945ffba78c03f9443eae7c0da1a80a5a4be56b520
-          imagePullPolicy: IfNotPresent
           name: metrics
-          resources:
-            requests:
-              cpu: 10m
-              memory: 128Mi
           volumeMounts:
             - mountPath: /config
               name: config

clusters/cl01tl/manifests/lidarr/ExternalSecret-lidarr-postgresql-18-backup-garage-local-secret.yaml

@@ -5,10 +5,10 @@ metadata:
   namespace: lidarr
   labels:
     app.kubernetes.io/name: lidarr-postgresql-18-backup-garage-local-secret
-    helm.sh/chart: postgres-18-cluster-7.10.0
+    helm.sh/chart: postgres-18-cluster-7.11.1
     app.kubernetes.io/instance: lidarr
     app.kubernetes.io/part-of: lidarr
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.1"
     app.kubernetes.io/managed-by: Helm
 spec:
   secretStoreRef:

clusters/cl01tl/manifests/lidarr/ExternalSecret-lidarr-postgresql-18-recovery-secret.yaml

@@ -4,10 +4,10 @@ metadata:
   name: lidarr-postgresql-18-recovery-secret
   namespace: lidarr
   labels:
-    helm.sh/chart: postgres-18-cluster-7.10.0
+    helm.sh/chart: postgres-18-cluster-7.11.1
     app.kubernetes.io/instance: lidarr
     app.kubernetes.io/part-of: lidarr
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.1"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: lidarr-postgresql-18-recovery-secret
 spec:

clusters/cl01tl/manifests/lidarr/HTTPRoute-lidarr.yaml

@@ -34,7 +34,7 @@ spec:
           name: lidarr
           namespace: lidarr
           port: 80
-          weight: 100
+          weight: 1
       matches:
         - path:
             type: PathPrefix

clusters/cl01tl/manifests/lidarr/ObjectStore-lidarr-postgresql-18-backup-garage-local.yaml

@@ -5,10 +5,10 @@ metadata:
   namespace: lidarr
   labels:
     app.kubernetes.io/name: lidarr-postgresql-18-backup-garage-local
-    helm.sh/chart: postgres-18-cluster-7.10.0
+    helm.sh/chart: postgres-18-cluster-7.11.1
     app.kubernetes.io/instance: lidarr
     app.kubernetes.io/part-of: lidarr
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.1"
     app.kubernetes.io/managed-by: Helm
 spec:
   retentionPolicy: 7d

clusters/cl01tl/manifests/lidarr/ObjectStore-lidarr-postgresql-18-recovery.yaml

@@ -4,10 +4,10 @@ metadata:
   name: "lidarr-postgresql-18-recovery"
   namespace: lidarr
   labels:
-    helm.sh/chart: postgres-18-cluster-7.10.0
+    helm.sh/chart: postgres-18-cluster-7.11.1
     app.kubernetes.io/instance: lidarr
     app.kubernetes.io/part-of: lidarr
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.1"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: "lidarr-postgresql-18-recovery"
 spec:

clusters/cl01tl/manifests/lidarr/PersistentVolumeClaim-lidarr-config.yaml

@@ -7,8 +7,6 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: lidarr
     helm.sh/chart: lidarr-4.6.2
-  annotations:
-    helm.sh/resource-policy: keep
   namespace: lidarr
 spec:
   accessModes:

clusters/cl01tl/manifests/lidarr/PrometheusRule-lidarr-postgresql-18-alert-rules.yaml

@@ -5,10 +5,10 @@ metadata:
   namespace: lidarr
   labels:
     app.kubernetes.io/name: lidarr-postgresql-18-alert-rules
-    helm.sh/chart: postgres-18-cluster-7.10.0
+    helm.sh/chart: postgres-18-cluster-7.11.1
     app.kubernetes.io/instance: lidarr
     app.kubernetes.io/part-of: lidarr
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.1"
     app.kubernetes.io/managed-by: Helm
 spec:
   groups:

clusters/cl01tl/manifests/lidarr/ScheduledBackup-lidarr-postgresql-18-scheduled-backup-live-backup.yaml

@@ -5,10 +5,10 @@ metadata:
   namespace: lidarr
   labels:
     app.kubernetes.io/name: "lidarr-postgresql-18-scheduled-backup-live-backup"
-    helm.sh/chart: postgres-18-cluster-7.10.0
+    helm.sh/chart: postgres-18-cluster-7.11.1
     app.kubernetes.io/instance: lidarr
     app.kubernetes.io/part-of: lidarr
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.1"
     app.kubernetes.io/managed-by: Helm
 spec:
   immediate: true

clusters/cl01tl/manifests/local-path-provisioner/ConfigMap-local-path-config.yaml

@@ -49,7 +49,7 @@ data:
           effect: NoSchedule
       containers:
         - name: helper-pod
-          image: busybox:1.37.0
+          image: busybox:1.37.0@sha256:1487d0af5f52b4ba31c7e465126ee2123fe3f2305d638e7827681e7cf6c83d5e
           imagePullPolicy: IfNotPresent
           resources:
             {}

clusters/cl01tl/manifests/local-path-provisioner/Deployment-local-path-provisioner.yaml

@@ -30,7 +30,7 @@ spec:
       containers:
         - name: local-path-provisioner
           securityContext: {}
-          image: "rancher/local-path-provisioner:v0.0.35"
+          image: "rancher/local-path-provisioner:v0.0.35@sha256:34ff0847cc47ebf69656ba44a3de9324596d0036b66ffd323b21614dd8221530"
           imagePullPolicy: IfNotPresent
           command:
             - local-path-provisioner
@@ -43,7 +43,7 @@ spec:
             - --provisioner-name
             - cluster.local/local-path-provisioner
             - --helper-image
-            - "busybox:1.37.0"
+            - "busybox:1.37.0@sha256:1487d0af5f52b4ba31c7e465126ee2123fe3f2305d638e7827681e7cf6c83d5e"
             - --configmap-name
             - local-path-config
           volumeMounts:
@@ -56,7 +56,10 @@ spec:
                   fieldPath: metadata.namespace
             - name: CONFIG_MOUNT_PATH
               value: /etc/config/
-          resources: {}
+          resources:
+            limits:
+              cpu: 1m
+              memory: 30Mi
       volumes:
         - name: config-volume
           configMap: