Merge pull request 'Automated Manifest Update' (#6414) from auto/update-manifests into manifests

Reviewed-on: #6414

clusters/cl01tl/manifests/directus/PodMonitor-directus-valkey.yaml

@@ -0,0 +1,23 @@
+apiVersion: monitoring.coreos.com/v1
+kind: PodMonitor
+metadata:
+  name: directus-valkey
+  labels:
+    helm.sh/chart: valkey-0.9.4
+    app.kubernetes.io/name: valkey
+    app.kubernetes.io/instance: directus
+    app.kubernetes.io/version: "9.0.3"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/part-of: valkey
+    app.kubernetes.io/component: podmonitor
+spec:
+  podMetricsEndpoints:
+    - port: metrics
+      interval: 30s
+  namespaceSelector:
+    matchNames:
+      - directus
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: valkey
+      app.kubernetes.io/instance: directus

clusters/cl01tl/manifests/directus/PrometheusRule-directus-valkey.yaml

@@ -0,0 +1,47 @@
+apiVersion: monitoring.coreos.com/v1
+kind: PrometheusRule
+metadata:
+  name: directus-valkey
+  labels:
+    helm.sh/chart: valkey-0.9.4
+    app.kubernetes.io/name: valkey
+    app.kubernetes.io/instance: directus
+    app.kubernetes.io/version: "9.0.3"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/part-of: valkey
+spec:
+  groups:
+    - name: directus-valkey
+      rules:
+        - alert: ValkeyDown
+          annotations:
+            description: Valkey instance {{ $labels.instance }} is down.
+            summary: Valkey instance {{ $labels.instance }} down
+          expr: |
+            redis_up{service="directus-valkey-metrics"} == 0
+          for: 2m
+          labels:
+            severity: error
+        - alert: ValkeyMemoryHigh
+          annotations:
+            description: |
+              Valkey instance {{ $labels.instance }} is using {{ $value }}% of its available memory.
+            summary: Valkey instance {{ $labels.instance }} is using too much memory
+          expr: |
+            redis_memory_used_bytes{service="directus-valkey-metrics"} * 100
+            /
+            redis_memory_max_bytes{service="directus-valkey-metrics"}
+            > 90 <= 100
+          for: 2m
+          labels:
+            severity: error
+        - alert: ValkeyKeyEviction
+          annotations:
+            description: |
+              Valkey instance {{ $labels.instance }} has evicted {{ $value }} keys in the last 5 minutes.
+            summary: Valkey instance {{ $labels.instance }} has evicted keys
+          expr: |
+            increase(redis_evicted_keys_total{service="directus-valkey-metrics"}[5m]) > 0
+          for: 1s
+          labels:
+            severity: error

clusters/cl01tl/manifests/directus/Service-directus-valkey-metrics.yaml

@@ -0,0 +1,23 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: directus-valkey-metrics
+  labels:
+    helm.sh/chart: valkey-0.9.4
+    app.kubernetes.io/name: valkey
+    app.kubernetes.io/instance: directus
+    app.kubernetes.io/version: "9.0.3"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/component: metrics
+    app.kubernetes.io/part-of: valkey
+  annotations:
+spec:
+  type: ClusterIP
+  ports:
+    - name: metrics
+      port: 9121
+      protocol: TCP
+      targetPort: metrics
+  selector:
+    app.kubernetes.io/name: valkey
+    app.kubernetes.io/instance: directus

clusters/cl01tl/manifests/directus/ServiceMonitor-directus-valkey.yaml

@@ -0,0 +1,24 @@
+apiVersion: monitoring.coreos.com/v1
+kind: ServiceMonitor
+metadata:
+  name: directus-valkey
+  labels:
+    helm.sh/chart: valkey-0.9.4
+    app.kubernetes.io/name: valkey
+    app.kubernetes.io/instance: directus
+    app.kubernetes.io/version: "9.0.3"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/part-of: valkey
+    app.kubernetes.io/component: service-monitor
+spec:
+  endpoints:
+    - port: metrics
+      interval: 30s
+  namespaceSelector:
+    matchNames:
+      - directus
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: valkey
+      app.kubernetes.io/instance: directus
+      app.kubernetes.io/component: metrics

clusters/cl01tl/manifests/directus/StatefulSet-directus-valkey.yaml

@@ -110,6 +110,34 @@ spec:
               mountPath: /data
             - name: valkey-acl
               mountPath: /etc/valkey
+        - name: metrics
+          image: ghcr.io/oliver006/redis_exporter:v1.82.0@sha256:6a97d4dd743b533e1f950c677b87d880e44df363c61af3f406fc9e53ed65ee03
+          imagePullPolicy: "IfNotPresent"
+          ports:
+            - name: metrics
+              containerPort: 9121
+          startupProbe:
+            tcpSocket:
+              port: metrics
+          livenessProbe:
+            tcpSocket:
+              port: metrics
+          readinessProbe:
+            httpGet:
+              path: /
+              port: metrics
+          resources:
+            requests:
+              cpu: 1m
+              memory: 10M
+          env:
+            - name: REDIS_ALIAS
+              value: directus-valkey
+            - name: REDIS_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: directus-valkey-config
+                  key: default
       volumes:
         - name: scripts
           configMap:

clusters/cl01tl/manifests/isponsorblocktv/Deployment-isponsorblocktv.yaml

@@ -36,7 +36,7 @@ spec:
       hostPID: false
       dnsPolicy: ClusterFirst
       containers:
-        - image: ghcr.io/dmunozv04/isponsorblocktv:v2.7.0@sha256:ff292ed53c9208ebfa7da3be7084bd863339d545a799bfefed5092396f5e8b4b
+        - image: ghcr.io/dmunozv04/isponsorblocktv:v2.8.1@sha256:ac35b5d861f437cd5c71d0ccea7c3ed7ea0938ae08cbb6e256de06a236b106f5
           name: main
           resources:
             requests:

clusters/cl01tl/manifests/secrets-store-csi-driver/CSIDriver-secrets-store.csi.k8s.io.yaml

@@ -6,11 +6,12 @@ metadata:
     app.kubernetes.io/instance: "secrets-store-csi-driver"
     app.kubernetes.io/managed-by: "Helm"
     app.kubernetes.io/name: "secrets-store-csi-driver"
-    app.kubernetes.io/version: "1.5.6"
+    app.kubernetes.io/version: "1.6.0"
     app: secrets-store-csi-driver
-    helm.sh/chart: "secrets-store-csi-driver-1.5.6"
+    helm.sh/chart: "secrets-store-csi-driver-1.6.0"
 spec:
   podInfoOnMount: true
   attachRequired: false
   volumeLifecycleModes:
     - Ephemeral
+  requiresRepublish: false

clusters/cl01tl/manifests/secrets-store-csi-driver/ClusterRole-secretproviderclasses-admin-role.yaml

@@ -6,9 +6,9 @@ metadata:
     app.kubernetes.io/instance: "secrets-store-csi-driver"
     app.kubernetes.io/managed-by: "Helm"
     app.kubernetes.io/name: "secrets-store-csi-driver"
-    app.kubernetes.io/version: "1.5.6"
+    app.kubernetes.io/version: "1.6.0"
     app: secrets-store-csi-driver
-    helm.sh/chart: "secrets-store-csi-driver-1.5.6"
+    helm.sh/chart: "secrets-store-csi-driver-1.6.0"
     rbac.authorization.k8s.io/aggregate-to-admin: "true"
     rbac.authorization.k8s.io/aggregate-to-edit: "true"
   name: secretproviderclasses-admin-role

clusters/cl01tl/manifests/secrets-store-csi-driver/ClusterRole-secretproviderclasses-role.yaml

@@ -6,9 +6,9 @@ metadata:
     app.kubernetes.io/instance: "secrets-store-csi-driver"
     app.kubernetes.io/managed-by: "Helm"
     app.kubernetes.io/name: "secrets-store-csi-driver"
-    app.kubernetes.io/version: "1.5.6"
+    app.kubernetes.io/version: "1.6.0"
     app: secrets-store-csi-driver
-    helm.sh/chart: "secrets-store-csi-driver-1.5.6"
+    helm.sh/chart: "secrets-store-csi-driver-1.6.0"
 rules:
   - apiGroups:
       - ""

clusters/cl01tl/manifests/secrets-store-csi-driver/ClusterRole-secretproviderclasses-viewer-role.yaml

@@ -6,9 +6,9 @@ metadata:
     app.kubernetes.io/instance: "secrets-store-csi-driver"
     app.kubernetes.io/managed-by: "Helm"
     app.kubernetes.io/name: "secrets-store-csi-driver"
-    app.kubernetes.io/version: "1.5.6"
+    app.kubernetes.io/version: "1.6.0"
     app: secrets-store-csi-driver
-    helm.sh/chart: "secrets-store-csi-driver-1.5.6"
+    helm.sh/chart: "secrets-store-csi-driver-1.6.0"
     rbac.authorization.k8s.io/aggregate-to-view: "true"
   name: secretproviderclasses-viewer-role
 rules:

clusters/cl01tl/manifests/secrets-store-csi-driver/ClusterRole-secretproviderclasspodstatuses-viewer-role.yaml

@@ -6,9 +6,9 @@ metadata:
     app.kubernetes.io/instance: "secrets-store-csi-driver"
     app.kubernetes.io/managed-by: "Helm"
     app.kubernetes.io/name: "secrets-store-csi-driver"
-    app.kubernetes.io/version: "1.5.6"
+    app.kubernetes.io/version: "1.6.0"
     app: secrets-store-csi-driver
-    helm.sh/chart: "secrets-store-csi-driver-1.5.6"
+    helm.sh/chart: "secrets-store-csi-driver-1.6.0"
     rbac.authorization.k8s.io/aggregate-to-view: "true"
   name: secretproviderclasspodstatuses-viewer-role
 rules:

clusters/cl01tl/manifests/secrets-store-csi-driver/ClusterRole-secrets-store-csi-driver-keep-crds.yaml

@@ -6,9 +6,9 @@ metadata:
     app.kubernetes.io/instance: "secrets-store-csi-driver"
     app.kubernetes.io/managed-by: "Helm"
     app.kubernetes.io/name: "secrets-store-csi-driver"
-    app.kubernetes.io/version: "1.5.6"
+    app.kubernetes.io/version: "1.6.0"
     app: secrets-store-csi-driver
-    helm.sh/chart: "secrets-store-csi-driver-1.5.6"
+    helm.sh/chart: "secrets-store-csi-driver-1.6.0"
   annotations:
     helm.sh/hook: pre-upgrade
     helm.sh/hook-delete-policy: "hook-succeeded,before-hook-creation"

clusters/cl01tl/manifests/secrets-store-csi-driver/ClusterRole-secrets-store-csi-driver-upgrade-crds.yaml

@@ -6,9 +6,9 @@ metadata:
     app.kubernetes.io/instance: "secrets-store-csi-driver"
     app.kubernetes.io/managed-by: "Helm"
     app.kubernetes.io/name: "secrets-store-csi-driver"
-    app.kubernetes.io/version: "1.5.6"
+    app.kubernetes.io/version: "1.6.0"
     app: secrets-store-csi-driver
-    helm.sh/chart: "secrets-store-csi-driver-1.5.6"
+    helm.sh/chart: "secrets-store-csi-driver-1.6.0"
   annotations:
     helm.sh/hook: pre-install,pre-upgrade
     helm.sh/hook-delete-policy: "hook-succeeded,before-hook-creation"

clusters/cl01tl/manifests/secrets-store-csi-driver/ClusterRoleBinding-secretproviderclasses-rolebinding.yaml

@@ -6,9 +6,9 @@ metadata:
     app.kubernetes.io/instance: "secrets-store-csi-driver"
     app.kubernetes.io/managed-by: "Helm"
     app.kubernetes.io/name: "secrets-store-csi-driver"
-    app.kubernetes.io/version: "1.5.6"
+    app.kubernetes.io/version: "1.6.0"
     app: secrets-store-csi-driver
-    helm.sh/chart: "secrets-store-csi-driver-1.5.6"
+    helm.sh/chart: "secrets-store-csi-driver-1.6.0"
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole

clusters/cl01tl/manifests/secrets-store-csi-driver/ClusterRoleBinding-secrets-store-csi-driver-keep-crds.yaml

@@ -6,9 +6,9 @@ metadata:
     app.kubernetes.io/instance: "secrets-store-csi-driver"
     app.kubernetes.io/managed-by: "Helm"
     app.kubernetes.io/name: "secrets-store-csi-driver"
-    app.kubernetes.io/version: "1.5.6"
+    app.kubernetes.io/version: "1.6.0"
     app: secrets-store-csi-driver
-    helm.sh/chart: "secrets-store-csi-driver-1.5.6"
+    helm.sh/chart: "secrets-store-csi-driver-1.6.0"
   annotations:
     helm.sh/hook: pre-upgrade
     helm.sh/hook-delete-policy: "hook-succeeded,before-hook-creation"

clusters/cl01tl/manifests/secrets-store-csi-driver/ClusterRoleBinding-secrets-store-csi-driver-upgrade-crds.yaml

@@ -6,9 +6,9 @@ metadata:
     app.kubernetes.io/instance: "secrets-store-csi-driver"
     app.kubernetes.io/managed-by: "Helm"
     app.kubernetes.io/name: "secrets-store-csi-driver"
-    app.kubernetes.io/version: "1.5.6"
+    app.kubernetes.io/version: "1.6.0"
     app: secrets-store-csi-driver
-    helm.sh/chart: "secrets-store-csi-driver-1.5.6"
+    helm.sh/chart: "secrets-store-csi-driver-1.6.0"
   annotations:
     helm.sh/hook: pre-install,pre-upgrade
     helm.sh/hook-delete-policy: "hook-succeeded,before-hook-creation"

clusters/cl01tl/manifests/secrets-store-csi-driver/DaemonSet-secrets-store-csi-driver.yaml

@@ -7,9 +7,9 @@ metadata:
     app.kubernetes.io/instance: "secrets-store-csi-driver"
     app.kubernetes.io/managed-by: "Helm"
     app.kubernetes.io/name: "secrets-store-csi-driver"
-    app.kubernetes.io/version: "1.5.6"
+    app.kubernetes.io/version: "1.6.0"
     app: secrets-store-csi-driver
-    helm.sh/chart: "secrets-store-csi-driver-1.5.6"
+    helm.sh/chart: "secrets-store-csi-driver-1.6.0"
 spec:
   selector:
     matchLabels:
@@ -24,9 +24,9 @@ spec:
         app.kubernetes.io/instance: "secrets-store-csi-driver"
         app.kubernetes.io/managed-by: "Helm"
         app.kubernetes.io/name: "secrets-store-csi-driver"
-        app.kubernetes.io/version: "1.5.6"
+        app.kubernetes.io/version: "1.6.0"
         app: secrets-store-csi-driver
-        helm.sh/chart: "secrets-store-csi-driver-1.5.6"
+        helm.sh/chart: "secrets-store-csi-driver-1.6.0"
       annotations:
         kubectl.kubernetes.io/default-container: secrets-store
     spec:

clusters/cl01tl/manifests/secrets-store-csi-driver/Job-secrets-store-csi-driver-keep-crds.yaml

@@ -7,9 +7,9 @@ metadata:
     app.kubernetes.io/instance: "secrets-store-csi-driver"
     app.kubernetes.io/managed-by: "Helm"
     app.kubernetes.io/name: "secrets-store-csi-driver"
-    app.kubernetes.io/version: "1.5.6"
+    app.kubernetes.io/version: "1.6.0"
     app: secrets-store-csi-driver
-    helm.sh/chart: "secrets-store-csi-driver-1.5.6"
+    helm.sh/chart: "secrets-store-csi-driver-1.6.0"
   annotations:
     helm.sh/hook: pre-upgrade
     helm.sh/hook-weight: "20"

clusters/cl01tl/manifests/secrets-store-csi-driver/Job-secrets-store-csi-driver-upgrade-crds.yaml

@@ -7,9 +7,9 @@ metadata:
     app.kubernetes.io/instance: "secrets-store-csi-driver"
     app.kubernetes.io/managed-by: "Helm"
     app.kubernetes.io/name: "secrets-store-csi-driver"
-    app.kubernetes.io/version: "1.5.6"
+    app.kubernetes.io/version: "1.6.0"
     app: secrets-store-csi-driver
-    helm.sh/chart: "secrets-store-csi-driver-1.5.6"
+    helm.sh/chart: "secrets-store-csi-driver-1.6.0"
   annotations:
     helm.sh/hook: pre-install,pre-upgrade
     helm.sh/hook-weight: "10"

clusters/cl01tl/manifests/secrets-store-csi-driver/ServiceAccount-secrets-store-csi-driver-keep-crds.yaml

@@ -7,9 +7,9 @@ metadata:
     app.kubernetes.io/instance: "secrets-store-csi-driver"
     app.kubernetes.io/managed-by: "Helm"
     app.kubernetes.io/name: "secrets-store-csi-driver"
-    app.kubernetes.io/version: "1.5.6"
+    app.kubernetes.io/version: "1.6.0"
     app: secrets-store-csi-driver
-    helm.sh/chart: "secrets-store-csi-driver-1.5.6"
+    helm.sh/chart: "secrets-store-csi-driver-1.6.0"
   annotations:
     helm.sh/hook: pre-upgrade
     helm.sh/hook-delete-policy: "hook-succeeded,before-hook-creation"

clusters/cl01tl/manifests/secrets-store-csi-driver/ServiceAccount-secrets-store-csi-driver-upgrade-crds.yaml

@@ -7,9 +7,9 @@ metadata:
     app.kubernetes.io/instance: "secrets-store-csi-driver"
     app.kubernetes.io/managed-by: "Helm"
     app.kubernetes.io/name: "secrets-store-csi-driver"
-    app.kubernetes.io/version: "1.5.6"
+    app.kubernetes.io/version: "1.6.0"
     app: secrets-store-csi-driver
-    helm.sh/chart: "secrets-store-csi-driver-1.5.6"
+    helm.sh/chart: "secrets-store-csi-driver-1.6.0"
   annotations:
     helm.sh/hook: pre-install,pre-upgrade
     helm.sh/hook-delete-policy: "hook-succeeded,before-hook-creation"

clusters/cl01tl/manifests/secrets-store-csi-driver/ServiceAccount-secrets-store-csi-driver.yaml

@@ -7,6 +7,6 @@ metadata:
     app.kubernetes.io/instance: "secrets-store-csi-driver"
     app.kubernetes.io/managed-by: "Helm"
     app.kubernetes.io/name: "secrets-store-csi-driver"
-    app.kubernetes.io/version: "1.5.6"
+    app.kubernetes.io/version: "1.6.0"
     app: secrets-store-csi-driver
-    helm.sh/chart: "secrets-store-csi-driver-1.5.6"
+    helm.sh/chart: "secrets-store-csi-driver-1.6.0"

clusters/cl01tl/manifests/seerr/HTTPRoute-seerr-seerr-chart.yaml

@@ -3,7 +3,7 @@ kind: HTTPRoute
 metadata:
   name: seerr-seerr-chart
   labels:
-    helm.sh/chart: seerr-chart-3.5.1
+    helm.sh/chart: seerr-chart-3.6.0
     app.kubernetes.io/name: seerr-chart
     app.kubernetes.io/instance: seerr
     app.kubernetes.io/version: "v3.2.0"

clusters/cl01tl/manifests/seerr/PersistentVolumeClaim-seerr-seerr-chart-config.yaml

@@ -3,7 +3,7 @@ kind: PersistentVolumeClaim
 metadata:
   name: seerr-seerr-chart-config
   labels:
-    helm.sh/chart: seerr-chart-3.5.1
+    helm.sh/chart: seerr-chart-3.6.0
     app.kubernetes.io/name: seerr-chart
     app.kubernetes.io/instance: seerr
     app.kubernetes.io/version: "v3.2.0"

clusters/cl01tl/manifests/seerr/Pod-seerr-seerr-chart-test-connection.yaml

@@ -3,7 +3,7 @@ kind: Pod
 metadata:
   name: "seerr-seerr-chart-test-connection"
   labels:
-    helm.sh/chart: seerr-chart-3.5.1
+    helm.sh/chart: seerr-chart-3.6.0
     app.kubernetes.io/name: seerr-chart
     app.kubernetes.io/instance: seerr
     app.kubernetes.io/version: "v3.2.0"

clusters/cl01tl/manifests/seerr/Service-seerr-seerr-chart.yaml

@@ -3,7 +3,7 @@ kind: Service
 metadata:
   name: seerr-seerr-chart
   labels:
-    helm.sh/chart: seerr-chart-3.5.1
+    helm.sh/chart: seerr-chart-3.6.0
     app.kubernetes.io/name: seerr-chart
     app.kubernetes.io/instance: seerr
     app.kubernetes.io/version: "v3.2.0"

clusters/cl01tl/manifests/seerr/ServiceAccount-seerr-seerr-chart.yaml

@@ -3,7 +3,7 @@ kind: ServiceAccount
 metadata:
   name: seerr-seerr-chart
   labels:
-    helm.sh/chart: seerr-chart-3.5.1
+    helm.sh/chart: seerr-chart-3.6.0
     app.kubernetes.io/name: seerr-chart
     app.kubernetes.io/instance: seerr
     app.kubernetes.io/version: "v3.2.0"

clusters/cl01tl/manifests/seerr/StatefulSet-seerr-seerr-chart.yaml

@@ -3,7 +3,7 @@ kind: StatefulSet
 metadata:
   name: seerr-seerr-chart
   labels:
-    helm.sh/chart: seerr-chart-3.5.1
+    helm.sh/chart: seerr-chart-3.6.0
     app.kubernetes.io/name: seerr-chart
     app.kubernetes.io/instance: seerr
     app.kubernetes.io/version: "v3.2.0"
@@ -18,7 +18,7 @@ spec:
   template:
     metadata:
       labels:
-        helm.sh/chart: seerr-chart-3.5.1
+        helm.sh/chart: seerr-chart-3.6.0
         app.kubernetes.io/name: seerr-chart
         app.kubernetes.io/instance: seerr
         app.kubernetes.io/version: "v3.2.0"

clusters/cl01tl/manifests/sonarr-4k/Deployment-sonarr-4k.yaml

@@ -44,7 +44,7 @@ spec:
               value: "1000"
             - name: PGID
               value: "1000"
-          image: ghcr.io/linuxserver/sonarr:4.0.17.2952-ls309@sha256:3580aec3802c915f0f819a88d5099abce61734b925732b8393d176b5dc561020
+          image: ghcr.io/linuxserver/sonarr:4.0.17.2952-ls310@sha256:bed3afb5d46fde809290997760f2e19d41e57d1eb34f507c485d5a8979c7cd8d
           name: main
           resources:
             requests:

clusters/cl01tl/manifests/sonarr-anime/Deployment-sonarr-anime.yaml

@@ -44,7 +44,7 @@ spec:
               value: "1000"
             - name: PGID
               value: "1000"
-          image: ghcr.io/linuxserver/sonarr:4.0.17.2952-ls309@sha256:3580aec3802c915f0f819a88d5099abce61734b925732b8393d176b5dc561020
+          image: ghcr.io/linuxserver/sonarr:4.0.17.2952-ls310@sha256:bed3afb5d46fde809290997760f2e19d41e57d1eb34f507c485d5a8979c7cd8d
           name: main
           resources:
             requests:

clusters/cl01tl/manifests/sonarr/Deployment-sonarr.yaml

@@ -44,7 +44,7 @@ spec:
               value: "1000"
             - name: PGID
               value: "1000"
-          image: ghcr.io/linuxserver/sonarr:4.0.17.2952-ls309@sha256:3580aec3802c915f0f819a88d5099abce61734b925732b8393d176b5dc561020
+          image: ghcr.io/linuxserver/sonarr:4.0.17.2952-ls310@sha256:bed3afb5d46fde809290997760f2e19d41e57d1eb34f507c485d5a8979c7cd8d
           name: main
           resources:
             requests: