chore: Update manifests after change

clusters/cl01tl/manifests/roundcube/Cluster-roundcube-postgresql-18-cluster.yaml

@@ -5,10 +5,10 @@ metadata:
   namespace: roundcube
   labels:
     app.kubernetes.io/name: roundcube-postgresql-18-cluster
-    helm.sh/chart: postgres-18-cluster-7.10.0
+    helm.sh/chart: postgres-18-cluster-7.11.2
     app.kubernetes.io/instance: roundcube
     app.kubernetes.io/part-of: roundcube
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.2"
     app.kubernetes.io/managed-by: Helm
 spec:
   instances: 3
@@ -26,8 +26,8 @@ spec:
     limits:
       hugepages-2Mi: 256Mi
     requests:
-      cpu: 100m
+      cpu: 20m
-      memory: 256Mi
+      memory: 80Mi
   affinity:
     enablePodAntiAffinity: true
     topologyKey: kubernetes.io/hostname

clusters/cl01tl/manifests/roundcube/CronJob-roundcube-cleandb.yaml

@@ -12,8 +12,8 @@ metadata:
 spec:
   suspend: false
   concurrencyPolicy: Forbid
-  startingDeadlineSeconds: 90
+  startingDeadlineSeconds: 30
-  timeZone: US/Central
+  timeZone: America/Chicago
   schedule: "30 4 * * *"
   successfulJobsHistoryLimit: 1
   failedJobsHistoryLimit: 1
@@ -77,10 +77,5 @@ spec:
                   value: elastic
                 - name: ROUNDCUBEMAIL_PLUGINS
                   value: archive,zipdownload,newmail_notifier
-              image: roundcube/roundcubemail:1.6.15-fpm-alpine
+              image: roundcube/roundcubemail:1.6.15-fpm-alpine@sha256:0e07c1c66d5a1392f0c47cc79e85e0c60095108f715037d7d0aa3fd8cbe2e780
-              imagePullPolicy: IfNotPresent
               name: backup
-              resources:
-                requests:
-                  cpu: 100m
-                  memory: 128Mi

clusters/cl01tl/manifests/roundcube/Deployment-roundcube-main.yaml

@@ -76,13 +76,12 @@ spec:
               value: elastic
             - name: ROUNDCUBEMAIL_PLUGINS
               value: archive,zipdownload,newmail_notifier
-          image: roundcube/roundcubemail:1.6.15-fpm-alpine
+          image: roundcube/roundcubemail:1.6.15-fpm-alpine@sha256:0e07c1c66d5a1392f0c47cc79e85e0c60095108f715037d7d0aa3fd8cbe2e780
-          imagePullPolicy: IfNotPresent
           name: main
           resources:
             requests:
-              cpu: 10m
+              cpu: 1m
-              memory: 256Mi
+              memory: 40Mi
           volumeMounts:
             - mountPath: /var/www/html
               name: data
@@ -93,13 +92,8 @@ spec:
               value: mail.alexlebens.net
             - name: NGINX_PHP_CGI
               value: roundcube.roundcube:9000
-          image: nginx:1.29.7-alpine-slim
+          image: nginx:1.29.7-alpine-slim@sha256:0848ca84c476868cbeb6a5c2c009a98821b8540f96c44b1ba06820db50262e35
-          imagePullPolicy: IfNotPresent
           name: nginx
-          resources:
-            requests:
-              cpu: 10m
-              memory: 128Mi
           volumeMounts:
             - mountPath: /etc/nginx/conf.d/default.conf
               mountPropagation: None

clusters/cl01tl/manifests/roundcube/ExternalSecret-roundcube-key-secret.yaml

@@ -14,8 +14,5 @@ spec:
   data:
     - secretKey: DES_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /cl01tl/roundcube/key
-        metadataPolicy: None
         property: DES_KEY

clusters/cl01tl/manifests/roundcube/ExternalSecret-roundcube-postgresql-18-backup-garage-local-secret.yaml

@@ -5,10 +5,10 @@ metadata:
   namespace: roundcube
   labels:
     app.kubernetes.io/name: roundcube-postgresql-18-backup-garage-local-secret
-    helm.sh/chart: postgres-18-cluster-7.10.0
+    helm.sh/chart: postgres-18-cluster-7.11.2
     app.kubernetes.io/instance: roundcube
     app.kubernetes.io/part-of: roundcube
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.2"
     app.kubernetes.io/managed-by: Helm
 spec:
   secretStoreRef:

clusters/cl01tl/manifests/roundcube/ExternalSecret-roundcube-postgresql-18-recovery-secret.yaml

@@ -4,10 +4,10 @@ metadata:
   name: roundcube-postgresql-18-recovery-secret
   namespace: roundcube
   labels:
-    helm.sh/chart: postgres-18-cluster-7.10.0
+    helm.sh/chart: postgres-18-cluster-7.11.2
     app.kubernetes.io/instance: roundcube
     app.kubernetes.io/part-of: roundcube
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.2"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: roundcube-postgresql-18-recovery-secret
 spec:

clusters/cl01tl/manifests/roundcube/HTTPRoute-roundcube.yaml

@@ -23,7 +23,7 @@ spec:
           name: roundcube
           namespace: roundcube
           port: 80
-          weight: 100
+          weight: 1
       matches:
         - path:
             type: PathPrefix

clusters/cl01tl/manifests/roundcube/ObjectStore-roundcube-postgresql-18-backup-garage-local.yaml

@@ -5,10 +5,10 @@ metadata:
   namespace: roundcube
   labels:
     app.kubernetes.io/name: roundcube-postgresql-18-backup-garage-local
-    helm.sh/chart: postgres-18-cluster-7.10.0
+    helm.sh/chart: postgres-18-cluster-7.11.2
     app.kubernetes.io/instance: roundcube
     app.kubernetes.io/part-of: roundcube
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.2"
     app.kubernetes.io/managed-by: Helm
 spec:
   retentionPolicy: 7d

clusters/cl01tl/manifests/roundcube/ObjectStore-roundcube-postgresql-18-recovery.yaml

@@ -4,10 +4,10 @@ metadata:
   name: "roundcube-postgresql-18-recovery"
   namespace: roundcube
   labels:
-    helm.sh/chart: postgres-18-cluster-7.10.0
+    helm.sh/chart: postgres-18-cluster-7.11.2
     app.kubernetes.io/instance: roundcube
     app.kubernetes.io/part-of: roundcube
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.2"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: "roundcube-postgresql-18-recovery"
 spec:

clusters/cl01tl/manifests/roundcube/PersistentVolumeClaim-roundcube-data.yaml

@@ -7,8 +7,6 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: roundcube
     helm.sh/chart: roundcube-4.6.2
-  annotations:
-    helm.sh/resource-policy: keep
   namespace: roundcube
 spec:
   accessModes:

clusters/cl01tl/manifests/roundcube/PrometheusRule-roundcube-postgresql-18-alert-rules.yaml

@@ -5,10 +5,10 @@ metadata:
   namespace: roundcube
   labels:
     app.kubernetes.io/name: roundcube-postgresql-18-alert-rules
-    helm.sh/chart: postgres-18-cluster-7.10.0
+    helm.sh/chart: postgres-18-cluster-7.11.2
     app.kubernetes.io/instance: roundcube
     app.kubernetes.io/part-of: roundcube
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.2"
     app.kubernetes.io/managed-by: Helm
 spec:
   groups:

clusters/cl01tl/manifests/roundcube/ScheduledBackup-roundcube-postgresql-18-scheduled-backup-live-backup.yaml

@@ -5,10 +5,10 @@ metadata:
   namespace: roundcube
   labels:
     app.kubernetes.io/name: "roundcube-postgresql-18-scheduled-backup-live-backup"
-    helm.sh/chart: postgres-18-cluster-7.10.0
+    helm.sh/chart: postgres-18-cluster-7.11.2
     app.kubernetes.io/instance: roundcube
     app.kubernetes.io/part-of: roundcube
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.2"
     app.kubernetes.io/managed-by: Helm
 spec:
   immediate: true

clusters/cl01tl/manifests/rybbit/Cluster-rybbit-postgresql-18-cluster.yaml

@@ -5,10 +5,10 @@ metadata:
   namespace: rybbit
   labels:
     app.kubernetes.io/name: rybbit-postgresql-18-cluster
-    helm.sh/chart: postgres-18-cluster-7.10.0
+    helm.sh/chart: postgres-18-cluster-7.11.2
     app.kubernetes.io/instance: rybbit
     app.kubernetes.io/part-of: rybbit
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.2"
     app.kubernetes.io/managed-by: Helm
 spec:
   instances: 3
@@ -26,8 +26,8 @@ spec:
     limits:
       hugepages-2Mi: 256Mi
     requests:
-      cpu: 100m
+      cpu: 20m
-      memory: 256Mi
+      memory: 80Mi
   affinity:
     enablePodAntiAffinity: true
     topologyKey: kubernetes.io/hostname

clusters/cl01tl/manifests/rybbit/Deployment-rybbit-backend.yaml

@@ -94,10 +94,18 @@ spec:
                 secretKeyRef:
                   key: mapbox-token
                   name: rybbit-config-secret
-          image: ghcr.io/rybbit-io/rybbit-backend:v2.5.0
+          image: ghcr.io/rybbit-io/rybbit-backend:v2.5.0@sha256:fd00f61abe592f872a0e4ac13f8c7b190ab2810e72f898faea4809d7ced46eef
-          imagePullPolicy: IfNotPresent
+          livenessProbe:
+            failureThreshold: 5
+            httpGet:
+              path: /api/health
+              port: 3001
+            initialDelaySeconds: 10
+            periodSeconds: 30
+            successThreshold: 1
+            timeoutSeconds: 5
           name: main
           resources:
             requests:
               cpu: 10m
-              memory: 256Mi
+              memory: 200Mi

clusters/cl01tl/manifests/rybbit/Deployment-rybbit-clickhouse.yaml

@@ -49,13 +49,21 @@ spec:
                 secretKeyRef:
                   key: clickhouse-password
                   name: rybbit-config-secret
-          image: clickhouse/clickhouse-server:26.3.3
+          image: clickhouse/clickhouse-server:26.3.3@sha256:5cfbc0598ee3bd850ac1b2ab150e6c9ec7b9207f1a97617e015325fb5df053d0
-          imagePullPolicy: IfNotPresent
+          livenessProbe:
+            failureThreshold: 5
+            httpGet:
+              path: /ping
+              port: 8123
+            initialDelaySeconds: 10
+            periodSeconds: 30
+            successThreshold: 1
+            timeoutSeconds: 5
           name: main
           resources:
             requests:
-              cpu: 10m
+              cpu: 40m
-              memory: 256Mi
+              memory: 300Mi
           volumeMounts:
             - mountPath: /var/lib/clickhouse
               name: clickhouse

clusters/cl01tl/manifests/rybbit/Deployment-rybbit-client.yaml

@@ -43,10 +43,9 @@ spec:
               value: https://rybbit.alexlebens.dev
             - name: NEXT_PUBLIC_DISABLE_SIGNUP
               value: "false"
-          image: harbor.alexlebens.net/images/rybbit-client:v2.4.0
+          image: ghcr.io/rybbit-io/rybbit-client:v2.5.0@sha256:741908be311a23ee4e58c5f82c6740bf75bbe4f7430ff2aec420f6189b1378b8
-          imagePullPolicy: IfNotPresent
           name: main
           resources:
             requests:
               cpu: 10m
-              memory: 256Mi
+              memory: 100Mi

clusters/cl01tl/manifests/rybbit/ExternalSecret-rybbit-config-secret.yaml

@@ -14,29 +14,17 @@ spec:
   data:
     - secretKey: clickhouse-user
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /cl01tl/rybbit/clickhouse
-        metadataPolicy: None
         property: user
     - secretKey: clickhouse-password
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /cl01tl/rybbit/clickhouse
-        metadataPolicy: None
         property: password
     - secretKey: better-auth-secret
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /cl01tl/rybbit/auth
-        metadataPolicy: None
         property: better-auth-secret
     - secretKey: mapbox-token
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /cl01tl/rybbit/auth
-        metadataPolicy: None
         property: mapbox-token

clusters/cl01tl/manifests/rybbit/ExternalSecret-rybbit-postgresql-18-backup-garage-local-secret.yaml

@@ -5,10 +5,10 @@ metadata:
   namespace: rybbit
   labels:
     app.kubernetes.io/name: rybbit-postgresql-18-backup-garage-local-secret
-    helm.sh/chart: postgres-18-cluster-7.10.0
+    helm.sh/chart: postgres-18-cluster-7.11.2
     app.kubernetes.io/instance: rybbit
     app.kubernetes.io/part-of: rybbit
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.2"
     app.kubernetes.io/managed-by: Helm
 spec:
   secretStoreRef:

clusters/cl01tl/manifests/rybbit/ExternalSecret-rybbit-postgresql-18-recovery-secret.yaml

@@ -4,10 +4,10 @@ metadata:
   name: rybbit-postgresql-18-recovery-secret
   namespace: rybbit
   labels:
-    helm.sh/chart: postgres-18-cluster-7.10.0
+    helm.sh/chart: postgres-18-cluster-7.11.2
     app.kubernetes.io/instance: rybbit
     app.kubernetes.io/part-of: rybbit
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.2"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: rybbit-postgresql-18-recovery-secret
 spec:

clusters/cl01tl/manifests/rybbit/ObjectStore-rybbit-postgresql-18-backup-garage-local.yaml

@@ -5,10 +5,10 @@ metadata:
   namespace: rybbit
   labels:
     app.kubernetes.io/name: rybbit-postgresql-18-backup-garage-local
-    helm.sh/chart: postgres-18-cluster-7.10.0
+    helm.sh/chart: postgres-18-cluster-7.11.2
     app.kubernetes.io/instance: rybbit
     app.kubernetes.io/part-of: rybbit
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.2"
     app.kubernetes.io/managed-by: Helm
 spec:
   retentionPolicy: 7d

clusters/cl01tl/manifests/rybbit/ObjectStore-rybbit-postgresql-18-recovery.yaml

@@ -4,10 +4,10 @@ metadata:
   name: "rybbit-postgresql-18-recovery"
   namespace: rybbit
   labels:
-    helm.sh/chart: postgres-18-cluster-7.10.0
+    helm.sh/chart: postgres-18-cluster-7.11.2
     app.kubernetes.io/instance: rybbit
     app.kubernetes.io/part-of: rybbit
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.2"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: "rybbit-postgresql-18-recovery"
 spec:

clusters/cl01tl/manifests/rybbit/PersistentVolumeClaim-clickhouse-data.yaml

@@ -7,8 +7,6 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: rybbit
     helm.sh/chart: rybbit-4.6.2
-  annotations:
-    helm.sh/resource-policy: keep
   namespace: rybbit
 spec:
   accessModes:

clusters/cl01tl/manifests/rybbit/PrometheusRule-rybbit-postgresql-18-alert-rules.yaml

@@ -5,10 +5,10 @@ metadata:
   namespace: rybbit
   labels:
     app.kubernetes.io/name: rybbit-postgresql-18-alert-rules
-    helm.sh/chart: postgres-18-cluster-7.10.0
+    helm.sh/chart: postgres-18-cluster-7.11.2
     app.kubernetes.io/instance: rybbit
     app.kubernetes.io/part-of: rybbit
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.2"
     app.kubernetes.io/managed-by: Helm
 spec:
   groups:

clusters/cl01tl/manifests/rybbit/ScheduledBackup-rybbit-postgresql-18-scheduled-backup-live-backup.yaml

@@ -5,10 +5,10 @@ metadata:
   namespace: rybbit
   labels:
     app.kubernetes.io/name: "rybbit-postgresql-18-scheduled-backup-live-backup"
-    helm.sh/chart: postgres-18-cluster-7.10.0
+    helm.sh/chart: postgres-18-cluster-7.11.2
     app.kubernetes.io/instance: rybbit
     app.kubernetes.io/part-of: rybbit
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.2"
     app.kubernetes.io/managed-by: Helm
 spec:
   immediate: true

clusters/cl01tl/manifests/s3-exporter/Deployment-s3-exporter-digital-ocean.yaml

@@ -58,10 +58,9 @@ spec:
               value: info
             - name: S3_FORCE_PATH_STYLE
               value: "false"
-          image: molu8bits/s3bucket_exporter:1.0.2
+          image: molu8bits/s3bucket_exporter:1.0.2@sha256:75fc839c5f12cdbf20babab534959c96356b4483743e730409132bbda6944505
-          imagePullPolicy: IfNotPresent
           name: main
           resources:
             requests:
-              cpu: 10m
+              cpu: 1m
-              memory: 64Mi
+              memory: 40Mi

clusters/cl01tl/manifests/s3-exporter/Deployment-s3-exporter-garage-local.yaml

@@ -55,10 +55,9 @@ spec:
               value: debug
             - name: S3_FORCE_PATH_STYLE
               value: "true"
-          image: molu8bits/s3bucket_exporter:1.0.2
+          image: molu8bits/s3bucket_exporter:1.0.2@sha256:75fc839c5f12cdbf20babab534959c96356b4483743e730409132bbda6944505
-          imagePullPolicy: IfNotPresent
           name: main
           resources:
             requests:
-              cpu: 10m
+              cpu: 1m
-              memory: 64Mi
+              memory: 40Mi

clusters/cl01tl/manifests/s3-exporter/Deployment-s3-exporter-garage-remote.yaml

@@ -55,10 +55,9 @@ spec:
               value: debug
             - name: S3_FORCE_PATH_STYLE
               value: "true"
-          image: molu8bits/s3bucket_exporter:1.0.2
+          image: molu8bits/s3bucket_exporter:1.0.2@sha256:75fc839c5f12cdbf20babab534959c96356b4483743e730409132bbda6944505
-          imagePullPolicy: IfNotPresent
           name: main
           resources:
             requests:
-              cpu: 10m
+              cpu: 1m
-              memory: 64Mi
+              memory: 40Mi

clusters/cl01tl/manifests/s3-exporter/ExternalSecret-s3-do-home-infra-secret.yaml

@@ -14,22 +14,13 @@ spec:
   data:
     - secretKey: AWS_ACCESS_KEY_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /digital-ocean/home-infra/all-access
-        metadataPolicy: None
         property: AWS_ACCESS_KEY_ID
     - secretKey: AWS_SECRET_ACCESS_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /digital-ocean/home-infra/all-access
-        metadataPolicy: None
         property: AWS_SECRET_ACCESS_KEY
     - secretKey: AWS_REGION
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /digital-ocean/home-infra/prometheus-exporter
-        metadataPolicy: None
         property: AWS_REGION

clusters/cl01tl/manifests/s3-exporter/ExternalSecret-s3-garage-secret.yaml

@@ -14,15 +14,9 @@ spec:
   data:
     - secretKey: AWS_ACCESS_KEY_ID
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/s3-exporter
-        metadataPolicy: None
         property: ACCESS_KEY_ID
     - secretKey: AWS_SECRET_ACCESS_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/home-infra/s3-exporter
-        metadataPolicy: None
         property: ACCESS_SECRET_KEY