chore: Update manifests after automerge

clusters/cl01tl/manifests/authentik/ConfigMap-authentik-valkey-init-scripts.yaml

@@ -3,7 +3,7 @@ kind: ConfigMap
 metadata:
   name: authentik-valkey-init-scripts
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: authentik
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/authentik/PodMonitor-authentik-valkey.yaml

@@ -3,7 +3,7 @@ kind: PodMonitor
 metadata:
   name: authentik-valkey
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: authentik
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/authentik/PrometheusRule-authentik-valkey.yaml

@@ -3,7 +3,7 @@ kind: PrometheusRule
 metadata:
   name: authentik-valkey
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: authentik
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/authentik/Service-authentik-valkey-headless.yaml

@@ -3,7 +3,7 @@ kind: Service
 metadata:
   name: authentik-valkey-headless
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: authentik
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/authentik/Service-authentik-valkey-metrics.yaml

@@ -3,7 +3,7 @@ kind: Service
 metadata:
   name: authentik-valkey-metrics
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: authentik
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/authentik/Service-authentik-valkey-read.yaml

@@ -3,7 +3,7 @@ kind: Service
 metadata:
   name: authentik-valkey-read
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: authentik
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/authentik/Service-authentik-valkey.yaml

@@ -3,7 +3,7 @@ kind: Service
 metadata:
   name: authentik-valkey
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: authentik
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/authentik/ServiceAccount-authentik-valkey.yaml

@@ -3,7 +3,7 @@ kind: ServiceAccount
 metadata:
   name: authentik-valkey
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: authentik
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/authentik/ServiceMonitor-authentik-valkey.yaml

@@ -3,7 +3,7 @@ kind: ServiceMonitor
 metadata:
   name: authentik-valkey
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: authentik
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/authentik/StatefulSet-authentik-valkey.yaml

@@ -3,7 +3,7 @@ kind: StatefulSet
 metadata:
   name: authentik-valkey
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: authentik
     app.kubernetes.io/version: "9.0.3"
@@ -32,7 +32,7 @@ spec:
         app.kubernetes.io/name: valkey
         app.kubernetes.io/instance: authentik
       annotations:
-        checksum/initconfig: "07891dc8f81b4fb3516e2993c6e827b1"
+        checksum/initconfig: "5891897632e2eabc8b0c61cc49fea0f6"
     spec:
       automountServiceAccountToken: false
       serviceAccountName: authentik-valkey
@@ -40,11 +40,14 @@ spec:
         fsGroup: 1000
         runAsGroup: 1000
         runAsUser: 1000
+        seccompProfile:
+          type: RuntimeDefault
       initContainers:
         - name: authentik-valkey-init
           image: docker.io/valkey/valkey:9.0.3@sha256:3b55fbaa0cd93cf0d9d961f405e4dfcc70efe325e2d84da207a0a8e6d8fde4f9
           imagePullPolicy: IfNotPresent
           securityContext:
+            allowPrivilegeEscalation: false
             capabilities:
               drop:
                 - ALL
@@ -69,6 +72,7 @@ spec:
           command: ["valkey-server"]
           args: ["/data/conf/valkey.conf"]
           securityContext:
+            allowPrivilegeEscalation: false
             capabilities:
               drop:
                 - ALL

clusters/cl01tl/manifests/blocky/ConfigMap-blocky-valkey-init-scripts.yaml

@@ -3,7 +3,7 @@ kind: ConfigMap
 metadata:
   name: blocky-valkey-init-scripts
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: blocky
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/blocky/PodMonitor-blocky-valkey.yaml

@@ -3,7 +3,7 @@ kind: PodMonitor
 metadata:
   name: blocky-valkey
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: blocky
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/blocky/PrometheusRule-blocky-valkey.yaml

@@ -3,7 +3,7 @@ kind: PrometheusRule
 metadata:
   name: blocky-valkey
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: blocky
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/blocky/Service-blocky-valkey-headless.yaml

@@ -3,7 +3,7 @@ kind: Service
 metadata:
   name: blocky-valkey-headless
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: blocky
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/blocky/Service-blocky-valkey-metrics.yaml

@@ -3,7 +3,7 @@ kind: Service
 metadata:
   name: blocky-valkey-metrics
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: blocky
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/blocky/Service-blocky-valkey-read.yaml

@@ -3,7 +3,7 @@ kind: Service
 metadata:
   name: blocky-valkey-read
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: blocky
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/blocky/Service-blocky-valkey.yaml

@@ -3,7 +3,7 @@ kind: Service
 metadata:
   name: blocky-valkey
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: blocky
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/blocky/ServiceAccount-blocky-valkey.yaml

@@ -3,7 +3,7 @@ kind: ServiceAccount
 metadata:
   name: blocky-valkey
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: blocky
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/blocky/ServiceMonitor-blocky-valkey.yaml

@@ -3,7 +3,7 @@ kind: ServiceMonitor
 metadata:
   name: blocky-valkey
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: blocky
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/blocky/StatefulSet-blocky-valkey.yaml

@@ -3,7 +3,7 @@ kind: StatefulSet
 metadata:
   name: blocky-valkey
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: blocky
     app.kubernetes.io/version: "9.0.3"
@@ -32,7 +32,7 @@ spec:
         app.kubernetes.io/name: valkey
         app.kubernetes.io/instance: blocky
       annotations:
-        checksum/initconfig: "b997c0967aeeee370412add1d41691a1"
+        checksum/initconfig: "ce6e499ac7fd3ad6706c10e5616c511c"
     spec:
       automountServiceAccountToken: false
       serviceAccountName: blocky-valkey
@@ -40,11 +40,14 @@ spec:
         fsGroup: 1000
         runAsGroup: 1000
         runAsUser: 1000
+        seccompProfile:
+          type: RuntimeDefault
       initContainers:
         - name: blocky-valkey-init
           image: docker.io/valkey/valkey:9.0.3@sha256:3b55fbaa0cd93cf0d9d961f405e4dfcc70efe325e2d84da207a0a8e6d8fde4f9
           imagePullPolicy: IfNotPresent
           securityContext:
+            allowPrivilegeEscalation: false
             capabilities:
               drop:
                 - ALL
@@ -69,6 +72,7 @@ spec:
           command: ["valkey-server"]
           args: ["/data/conf/valkey.conf"]
           securityContext:
+            allowPrivilegeEscalation: false
             capabilities:
               drop:
                 - ALL

clusters/cl01tl/manifests/dawarich/ConfigMap-dawarich-valkey-init-scripts.yaml

@@ -3,7 +3,7 @@ kind: ConfigMap
 metadata:
   name: dawarich-valkey-init-scripts
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: dawarich
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/dawarich/PodMonitor-dawarich-valkey.yaml

@@ -3,7 +3,7 @@ kind: PodMonitor
 metadata:
   name: dawarich-valkey
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: dawarich
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/dawarich/PrometheusRule-dawarich-valkey.yaml

@@ -3,7 +3,7 @@ kind: PrometheusRule
 metadata:
   name: dawarich-valkey
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: dawarich
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/dawarich/Service-dawarich-valkey-headless.yaml

@@ -3,7 +3,7 @@ kind: Service
 metadata:
   name: dawarich-valkey-headless
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: dawarich
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/dawarich/Service-dawarich-valkey-metrics.yaml

@@ -3,7 +3,7 @@ kind: Service
 metadata:
   name: dawarich-valkey-metrics
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: dawarich
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/dawarich/Service-dawarich-valkey-read.yaml

@@ -3,7 +3,7 @@ kind: Service
 metadata:
   name: dawarich-valkey-read
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: dawarich
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/dawarich/Service-dawarich-valkey.yaml

@@ -3,7 +3,7 @@ kind: Service
 metadata:
   name: dawarich-valkey
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: dawarich
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/dawarich/ServiceAccount-dawarich-valkey.yaml

@@ -3,7 +3,7 @@ kind: ServiceAccount
 metadata:
   name: dawarich-valkey
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: dawarich
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/dawarich/ServiceMonitor-dawarich-valkey.yaml

@@ -3,7 +3,7 @@ kind: ServiceMonitor
 metadata:
   name: dawarich-valkey
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: dawarich
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/dawarich/StatefulSet-dawarich-valkey.yaml

@@ -3,7 +3,7 @@ kind: StatefulSet
 metadata:
   name: dawarich-valkey
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: dawarich
     app.kubernetes.io/version: "9.0.3"
@@ -32,7 +32,7 @@ spec:
         app.kubernetes.io/name: valkey
         app.kubernetes.io/instance: dawarich
       annotations:
-        checksum/initconfig: "b1e9c56c9439a06e231c05897dbd90b9"
+        checksum/initconfig: "53d07c776effa0dea3178b0b46d98f22"
     spec:
       automountServiceAccountToken: false
       serviceAccountName: dawarich-valkey
@@ -40,11 +40,14 @@ spec:
         fsGroup: 1000
         runAsGroup: 1000
         runAsUser: 1000
+        seccompProfile:
+          type: RuntimeDefault
       initContainers:
         - name: dawarich-valkey-init
           image: docker.io/valkey/valkey:9.0.3@sha256:3b55fbaa0cd93cf0d9d961f405e4dfcc70efe325e2d84da207a0a8e6d8fde4f9
           imagePullPolicy: IfNotPresent
           securityContext:
+            allowPrivilegeEscalation: false
             capabilities:
               drop:
                 - ALL
@@ -69,6 +72,7 @@ spec:
           command: ["valkey-server"]
           args: ["/data/conf/valkey.conf"]
           securityContext:
+            allowPrivilegeEscalation: false
             capabilities:
               drop:
                 - ALL

clusters/cl01tl/manifests/directus/ConfigMap-directus-valkey-init-scripts.yaml

@@ -3,7 +3,7 @@ kind: ConfigMap
 metadata:
   name: directus-valkey-init-scripts
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: directus
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/directus/Pod-directus-valkey-test-auth-existing.yaml

@@ -3,7 +3,7 @@ kind: Pod
 metadata:
   name: directus-valkey-test-auth-existing
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: directus
     app.kubernetes.io/version: "9.0.3"
@@ -15,7 +15,7 @@ spec:
   restartPolicy: Never
   containers:
     - name: test-auth
-      image: "valkey/valkey:9.0.3@sha256:3b55fbaa0cd93cf0d9d961f405e4dfcc70efe325e2d84da207a0a8e6d8fde4f9"
+      image: "docker.io/valkey/valkey:9.0.3@sha256:3b55fbaa0cd93cf0d9d961f405e4dfcc70efe325e2d84da207a0a8e6d8fde4f9"
       command:
         - sh
         - -c

clusters/cl01tl/manifests/directus/Service-directus-valkey-headless.yaml

@@ -3,7 +3,7 @@ kind: Service
 metadata:
   name: directus-valkey-headless
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: directus
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/directus/Service-directus-valkey-read.yaml

@@ -3,7 +3,7 @@ kind: Service
 metadata:
   name: directus-valkey-read
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: directus
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/directus/Service-directus-valkey.yaml

@@ -3,7 +3,7 @@ kind: Service
 metadata:
   name: directus-valkey
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: directus
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/directus/ServiceAccount-directus-valkey.yaml

@@ -3,7 +3,7 @@ kind: ServiceAccount
 metadata:
   name: directus-valkey
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: directus
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/directus/StatefulSet-directus-valkey.yaml

@@ -3,7 +3,7 @@ kind: StatefulSet
 metadata:
   name: directus-valkey
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: directus
     app.kubernetes.io/version: "9.0.3"
@@ -32,7 +32,7 @@ spec:
         app.kubernetes.io/name: valkey
         app.kubernetes.io/instance: directus
       annotations:
-        checksum/initconfig: "6307ecb287c2f05dc09ba3cf7cdfd155"
+        checksum/initconfig: "f2c110c848eac7a2ffdbe72ea52f43de"
     spec:
       automountServiceAccountToken: false
       serviceAccountName: directus-valkey
@@ -40,11 +40,14 @@ spec:
         fsGroup: 1000
         runAsGroup: 1000
         runAsUser: 1000
+        seccompProfile:
+          type: RuntimeDefault
       initContainers:
         - name: directus-valkey-init
           image: docker.io/valkey/valkey:9.0.3@sha256:3b55fbaa0cd93cf0d9d961f405e4dfcc70efe325e2d84da207a0a8e6d8fde4f9
           imagePullPolicy: IfNotPresent
           securityContext:
+            allowPrivilegeEscalation: false
             capabilities:
               drop:
                 - ALL
@@ -74,6 +77,7 @@ spec:
           command: ["valkey-server"]
           args: ["/data/conf/valkey.conf"]
           securityContext:
+            allowPrivilegeEscalation: false
             capabilities:
               drop:
                 - ALL

clusters/cl01tl/manifests/gitea/ConfigMap-gitea-valkey-init-scripts.yaml

@@ -3,7 +3,7 @@ kind: ConfigMap
 metadata:
   name: gitea-valkey-init-scripts
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: gitea
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/gitea/ConfigMap-gitea-valkey-renovate-init-scripts.yaml

@@ -3,7 +3,7 @@ kind: ConfigMap
 metadata:
   name: gitea-valkey-renovate-init-scripts
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey-renovate
     app.kubernetes.io/instance: gitea
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/gitea/Deployment-gitea-valkey-renovate.yaml

@@ -3,7 +3,7 @@ kind: Deployment
 metadata:
   name: gitea-valkey-renovate
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey-renovate
     app.kubernetes.io/instance: gitea
     app.kubernetes.io/version: "9.0.3"
@@ -22,7 +22,7 @@ spec:
         app.kubernetes.io/name: valkey-renovate
         app.kubernetes.io/instance: gitea
       annotations:
-        checksum/initconfig: f77fc408ed818f9e2bd789f0e95a4172
+        checksum/initconfig: 94157ae544275da50867d4d0da0722fc
     spec:
       automountServiceAccountToken: false
       serviceAccountName: gitea-valkey-renovate
@@ -30,11 +30,14 @@ spec:
         fsGroup: 1000
         runAsGroup: 1000
         runAsUser: 1000
+        seccompProfile:
+          type: RuntimeDefault
       initContainers:
         - name: gitea-valkey-renovate-init
           image: docker.io/valkey/valkey:9.0.3@sha256:3b55fbaa0cd93cf0d9d961f405e4dfcc70efe325e2d84da207a0a8e6d8fde4f9
           imagePullPolicy: IfNotPresent
           securityContext:
+            allowPrivilegeEscalation: false
             capabilities:
               drop:
                 - ALL
@@ -54,6 +57,7 @@ spec:
           command: ["valkey-server"]
           args: ["/data/conf/valkey.conf"]
           securityContext:
+            allowPrivilegeEscalation: false
             capabilities:
               drop:
                 - ALL

clusters/cl01tl/manifests/gitea/PersistentVolumeClaim-gitea-valkey-renovate.yaml

@@ -3,7 +3,7 @@ kind: PersistentVolumeClaim
 metadata:
   name: gitea-valkey-renovate
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey-renovate
     app.kubernetes.io/instance: gitea
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/gitea/PodMonitor-gitea-valkey-renovate.yaml

@@ -3,7 +3,7 @@ kind: PodMonitor
 metadata:
   name: gitea-valkey-renovate
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey-renovate
     app.kubernetes.io/instance: gitea
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/gitea/PodMonitor-gitea-valkey.yaml

@@ -3,7 +3,7 @@ kind: PodMonitor
 metadata:
   name: gitea-valkey
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: gitea
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/gitea/PrometheusRule-gitea-valkey-renovate.yaml

@@ -3,7 +3,7 @@ kind: PrometheusRule
 metadata:
   name: gitea-valkey-renovate
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey-renovate
     app.kubernetes.io/instance: gitea
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/gitea/PrometheusRule-gitea-valkey.yaml

@@ -3,7 +3,7 @@ kind: PrometheusRule
 metadata:
   name: gitea-valkey
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: gitea
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/gitea/Service-gitea-valkey-headless.yaml

@@ -3,7 +3,7 @@ kind: Service
 metadata:
   name: gitea-valkey-headless
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: gitea
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/gitea/Service-gitea-valkey-metrics.yaml

@@ -3,7 +3,7 @@ kind: Service
 metadata:
   name: gitea-valkey-metrics
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: gitea
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/gitea/Service-gitea-valkey-read.yaml

@@ -3,7 +3,7 @@ kind: Service
 metadata:
   name: gitea-valkey-read
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: gitea
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/gitea/Service-gitea-valkey-renovate-metrics.yaml

@@ -3,7 +3,7 @@ kind: Service
 metadata:
   name: gitea-valkey-renovate-metrics
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey-renovate
     app.kubernetes.io/instance: gitea
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/gitea/Service-gitea-valkey-renovate.yaml

@@ -3,7 +3,7 @@ kind: Service
 metadata:
   name: gitea-valkey-renovate
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey-renovate
     app.kubernetes.io/instance: gitea
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/gitea/Service-gitea-valkey.yaml

@@ -3,7 +3,7 @@ kind: Service
 metadata:
   name: gitea-valkey
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: gitea
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/gitea/ServiceAccount-gitea-valkey-renovate.yaml

@@ -3,7 +3,7 @@ kind: ServiceAccount
 metadata:
   name: gitea-valkey-renovate
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey-renovate
     app.kubernetes.io/instance: gitea
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/gitea/ServiceAccount-gitea-valkey.yaml

@@ -3,7 +3,7 @@ kind: ServiceAccount
 metadata:
   name: gitea-valkey
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: gitea
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/gitea/ServiceMonitor-gitea-valkey-renovate.yaml

@@ -3,7 +3,7 @@ kind: ServiceMonitor
 metadata:
   name: gitea-valkey-renovate
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey-renovate
     app.kubernetes.io/instance: gitea
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/gitea/ServiceMonitor-gitea-valkey.yaml

@@ -3,7 +3,7 @@ kind: ServiceMonitor
 metadata:
   name: gitea-valkey
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: gitea
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/gitea/StatefulSet-gitea-valkey.yaml

@@ -3,7 +3,7 @@ kind: StatefulSet
 metadata:
   name: gitea-valkey
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: gitea
     app.kubernetes.io/version: "9.0.3"
@@ -32,7 +32,7 @@ spec:
         app.kubernetes.io/name: valkey
         app.kubernetes.io/instance: gitea
       annotations:
-        checksum/initconfig: "b82939dee80151a39606083af0d5422a"
+        checksum/initconfig: "9bf6424ee2956d21b52e5c3831aecefa"
     spec:
       automountServiceAccountToken: false
       serviceAccountName: gitea-valkey
@@ -40,11 +40,14 @@ spec:
         fsGroup: 1000
         runAsGroup: 1000
         runAsUser: 1000
+        seccompProfile:
+          type: RuntimeDefault
       initContainers:
         - name: gitea-valkey-init
           image: docker.io/valkey/valkey:9.0.3@sha256:3b55fbaa0cd93cf0d9d961f405e4dfcc70efe325e2d84da207a0a8e6d8fde4f9
           imagePullPolicy: IfNotPresent
           securityContext:
+            allowPrivilegeEscalation: false
             capabilities:
               drop:
                 - ALL
@@ -69,6 +72,7 @@ spec:
           command: ["valkey-server"]
           args: ["/data/conf/valkey.conf"]
           securityContext:
+            allowPrivilegeEscalation: false
             capabilities:
               drop:
                 - ALL

clusters/cl01tl/manifests/grafana-operator/ConfigMap-grafana-operator-valkey-remote-cache-init-scripts.yaml

@@ -3,7 +3,7 @@ kind: ConfigMap
 metadata:
   name: grafana-operator-valkey-remote-cache-init-scripts
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey-remote-cache
     app.kubernetes.io/instance: grafana-operator
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/grafana-operator/ConfigMap-grafana-operator-valkey-unified-alerting-init-scripts.yaml

@@ -3,7 +3,7 @@ kind: ConfigMap
 metadata:
   name: grafana-operator-valkey-unified-alerting-init-scripts
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey-unified-alerting
     app.kubernetes.io/instance: grafana-operator
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/grafana-operator/Deployment-grafana-operator-valkey-remote-cache.yaml

@@ -3,7 +3,7 @@ kind: Deployment
 metadata:
   name: grafana-operator-valkey-remote-cache
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey-remote-cache
     app.kubernetes.io/instance: grafana-operator
     app.kubernetes.io/version: "9.0.3"
@@ -22,7 +22,7 @@ spec:
         app.kubernetes.io/name: valkey-remote-cache
         app.kubernetes.io/instance: grafana-operator
       annotations:
-        checksum/initconfig: d790dfe3185267fe6c217c9572cfa9fb
+        checksum/initconfig: 03f75947107472ad2dcec0779776b688
     spec:
       automountServiceAccountToken: false
       serviceAccountName: grafana-operator-valkey-remote-cache
@@ -30,11 +30,14 @@ spec:
         fsGroup: 1000
         runAsGroup: 1000
         runAsUser: 1000
+        seccompProfile:
+          type: RuntimeDefault
       initContainers:
         - name: grafana-operator-valkey-remote-cache-init
           image: docker.io/valkey/valkey:9.0.3@sha256:3b55fbaa0cd93cf0d9d961f405e4dfcc70efe325e2d84da207a0a8e6d8fde4f9
           imagePullPolicy: IfNotPresent
           securityContext:
+            allowPrivilegeEscalation: false
             capabilities:
               drop:
                 - ALL
@@ -54,6 +57,7 @@ spec:
           command: ["valkey-server"]
           args: ["/data/conf/valkey.conf"]
           securityContext:
+            allowPrivilegeEscalation: false
             capabilities:
               drop:
                 - ALL

clusters/cl01tl/manifests/grafana-operator/PersistentVolumeClaim-grafana-operator-valkey-remote-cache.yaml

@@ -3,7 +3,7 @@ kind: PersistentVolumeClaim
 metadata:
   name: grafana-operator-valkey-remote-cache
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey-remote-cache
     app.kubernetes.io/instance: grafana-operator
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/grafana-operator/PodMonitor-grafana-operator-valkey-remote-cache.yaml

@@ -3,7 +3,7 @@ kind: PodMonitor
 metadata:
   name: grafana-operator-valkey-remote-cache
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey-remote-cache
     app.kubernetes.io/instance: grafana-operator
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/grafana-operator/PodMonitor-grafana-operator-valkey-unified-alerting.yaml

@@ -3,7 +3,7 @@ kind: PodMonitor
 metadata:
   name: grafana-operator-valkey-unified-alerting
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey-unified-alerting
     app.kubernetes.io/instance: grafana-operator
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/grafana-operator/PrometheusRule-grafana-operator-valkey-remote-cache.yaml

@@ -3,7 +3,7 @@ kind: PrometheusRule
 metadata:
   name: grafana-operator-valkey-remote-cache
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey-remote-cache
     app.kubernetes.io/instance: grafana-operator
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/grafana-operator/PrometheusRule-grafana-operator-valkey-unified-alerting.yaml

@@ -3,7 +3,7 @@ kind: PrometheusRule
 metadata:
   name: grafana-operator-valkey-unified-alerting
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey-unified-alerting
     app.kubernetes.io/instance: grafana-operator
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/grafana-operator/Service-grafana-operator-valkey-remote-cache-metrics.yaml

@@ -3,7 +3,7 @@ kind: Service
 metadata:
   name: grafana-operator-valkey-remote-cache-metrics
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey-remote-cache
     app.kubernetes.io/instance: grafana-operator
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/grafana-operator/Service-grafana-operator-valkey-remote-cache.yaml

@@ -3,7 +3,7 @@ kind: Service
 metadata:
   name: grafana-operator-valkey-remote-cache
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey-remote-cache
     app.kubernetes.io/instance: grafana-operator
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/grafana-operator/Service-grafana-operator-valkey-unified-alerting-headless.yaml

@@ -3,7 +3,7 @@ kind: Service
 metadata:
   name: grafana-operator-valkey-unified-alerting-headless
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey-unified-alerting
     app.kubernetes.io/instance: grafana-operator
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/grafana-operator/Service-grafana-operator-valkey-unified-alerting-metrics.yaml

@@ -3,7 +3,7 @@ kind: Service
 metadata:
   name: grafana-operator-valkey-unified-alerting-metrics
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey-unified-alerting
     app.kubernetes.io/instance: grafana-operator
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/grafana-operator/Service-grafana-operator-valkey-unified-alerting-read.yaml

@@ -3,7 +3,7 @@ kind: Service
 metadata:
   name: grafana-operator-valkey-unified-alerting-read
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey-unified-alerting
     app.kubernetes.io/instance: grafana-operator
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/grafana-operator/Service-grafana-operator-valkey-unified-alerting.yaml

@@ -3,7 +3,7 @@ kind: Service
 metadata:
   name: grafana-operator-valkey-unified-alerting
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey-unified-alerting
     app.kubernetes.io/instance: grafana-operator
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/grafana-operator/ServiceAccount-grafana-operator-valkey-remote-cache.yaml

@@ -3,7 +3,7 @@ kind: ServiceAccount
 metadata:
   name: grafana-operator-valkey-remote-cache
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey-remote-cache
     app.kubernetes.io/instance: grafana-operator
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/grafana-operator/ServiceAccount-grafana-operator-valkey-unified-alerting.yaml

@@ -3,7 +3,7 @@ kind: ServiceAccount
 metadata:
   name: grafana-operator-valkey-unified-alerting
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey-unified-alerting
     app.kubernetes.io/instance: grafana-operator
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/grafana-operator/ServiceMonitor-grafana-operator-valkey-remote-cache.yaml

@@ -3,7 +3,7 @@ kind: ServiceMonitor
 metadata:
   name: grafana-operator-valkey-remote-cache
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey-remote-cache
     app.kubernetes.io/instance: grafana-operator
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/grafana-operator/ServiceMonitor-grafana-operator-valkey-unified-alerting.yaml

@@ -3,7 +3,7 @@ kind: ServiceMonitor
 metadata:
   name: grafana-operator-valkey-unified-alerting
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey-unified-alerting
     app.kubernetes.io/instance: grafana-operator
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/grafana-operator/StatefulSet-grafana-operator-valkey-unified-alerting.yaml

@@ -3,7 +3,7 @@ kind: StatefulSet
 metadata:
   name: grafana-operator-valkey-unified-alerting
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey-unified-alerting
     app.kubernetes.io/instance: grafana-operator
     app.kubernetes.io/version: "9.0.3"
@@ -32,7 +32,7 @@ spec:
         app.kubernetes.io/name: valkey-unified-alerting
         app.kubernetes.io/instance: grafana-operator
       annotations:
-        checksum/initconfig: "cc97af05b1fa8109e641f83996efbf01"
+        checksum/initconfig: "f2c07fdbfee73b9f6c6172633a43e334"
     spec:
       automountServiceAccountToken: false
       serviceAccountName: grafana-operator-valkey-unified-alerting
@@ -40,11 +40,14 @@ spec:
         fsGroup: 1000
         runAsGroup: 1000
         runAsUser: 1000
+        seccompProfile:
+          type: RuntimeDefault
       initContainers:
         - name: grafana-operator-valkey-unified-alerting-init
           image: docker.io/valkey/valkey:9.0.3@sha256:3b55fbaa0cd93cf0d9d961f405e4dfcc70efe325e2d84da207a0a8e6d8fde4f9
           imagePullPolicy: IfNotPresent
           securityContext:
+            allowPrivilegeEscalation: false
             capabilities:
               drop:
                 - ALL
@@ -69,6 +72,7 @@ spec:
           command: ["valkey-server"]
           args: ["/data/conf/valkey.conf"]
           securityContext:
+            allowPrivilegeEscalation: false
             capabilities:
               drop:
                 - ALL

clusters/cl01tl/manifests/harbor/ConfigMap-harbor-valkey-init-scripts.yaml

@@ -3,7 +3,7 @@ kind: ConfigMap
 metadata:
   name: harbor-valkey-init-scripts
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: harbor
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/harbor/PodMonitor-harbor-valkey.yaml

@@ -3,7 +3,7 @@ kind: PodMonitor
 metadata:
   name: harbor-valkey
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: harbor
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/harbor/PrometheusRule-harbor-valkey.yaml

@@ -3,7 +3,7 @@ kind: PrometheusRule
 metadata:
   name: harbor-valkey
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: harbor
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/harbor/Service-harbor-valkey-headless.yaml

@@ -3,7 +3,7 @@ kind: Service
 metadata:
   name: harbor-valkey-headless
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: harbor
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/harbor/Service-harbor-valkey-metrics.yaml

@@ -3,7 +3,7 @@ kind: Service
 metadata:
   name: harbor-valkey-metrics
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: harbor
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/harbor/Service-harbor-valkey-read.yaml

@@ -3,7 +3,7 @@ kind: Service
 metadata:
   name: harbor-valkey-read
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: harbor
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/harbor/Service-harbor-valkey.yaml

@@ -3,7 +3,7 @@ kind: Service
 metadata:
   name: harbor-valkey
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: harbor
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/harbor/ServiceAccount-harbor-valkey.yaml

@@ -3,7 +3,7 @@ kind: ServiceAccount
 metadata:
   name: harbor-valkey
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: harbor
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/harbor/ServiceMonitor-harbor-valkey.yaml

@@ -3,7 +3,7 @@ kind: ServiceMonitor
 metadata:
   name: harbor-valkey
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: harbor
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/harbor/StatefulSet-harbor-valkey.yaml

@@ -3,7 +3,7 @@ kind: StatefulSet
 metadata:
   name: harbor-valkey
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: harbor
     app.kubernetes.io/version: "9.0.3"
@@ -32,7 +32,7 @@ spec:
         app.kubernetes.io/name: valkey
         app.kubernetes.io/instance: harbor
       annotations:
-        checksum/initconfig: "0cad4b394241164de6b4d658a977be16"
+        checksum/initconfig: "30d64a67a8ff4d8b0ca948233a5563e0"
     spec:
       automountServiceAccountToken: false
       serviceAccountName: harbor-valkey
@@ -40,11 +40,14 @@ spec:
         fsGroup: 1000
         runAsGroup: 1000
         runAsUser: 1000
+        seccompProfile:
+          type: RuntimeDefault
       initContainers:
         - name: harbor-valkey-init
           image: docker.io/valkey/valkey:9.0.3@sha256:3b55fbaa0cd93cf0d9d961f405e4dfcc70efe325e2d84da207a0a8e6d8fde4f9
           imagePullPolicy: IfNotPresent
           securityContext:
+            allowPrivilegeEscalation: false
             capabilities:
               drop:
                 - ALL
@@ -69,6 +72,7 @@ spec:
           command: ["valkey-server"]
           args: ["/data/conf/valkey.conf"]
           securityContext:
+            allowPrivilegeEscalation: false
             capabilities:
               drop:
                 - ALL

clusters/cl01tl/manifests/immich/ConfigMap-immich-valkey-init-scripts.yaml

@@ -3,7 +3,7 @@ kind: ConfigMap
 metadata:
   name: immich-valkey-init-scripts
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: immich
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/immich/PodMonitor-immich-valkey.yaml

@@ -3,7 +3,7 @@ kind: PodMonitor
 metadata:
   name: immich-valkey
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: immich
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/immich/PrometheusRule-immich-valkey.yaml

@@ -3,7 +3,7 @@ kind: PrometheusRule
 metadata:
   name: immich-valkey
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: immich
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/immich/Service-immich-valkey-headless.yaml

@@ -3,7 +3,7 @@ kind: Service
 metadata:
   name: immich-valkey-headless
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: immich
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/immich/Service-immich-valkey-metrics.yaml

@@ -3,7 +3,7 @@ kind: Service
 metadata:
   name: immich-valkey-metrics
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: immich
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/immich/Service-immich-valkey-read.yaml

@@ -3,7 +3,7 @@ kind: Service
 metadata:
   name: immich-valkey-read
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: immich
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/immich/Service-immich-valkey.yaml

@@ -3,7 +3,7 @@ kind: Service
 metadata:
   name: immich-valkey
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: immich
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/immich/ServiceAccount-immich-valkey.yaml

@@ -3,7 +3,7 @@ kind: ServiceAccount
 metadata:
   name: immich-valkey
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: immich
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/immich/ServiceMonitor-immich-valkey.yaml

@@ -3,7 +3,7 @@ kind: ServiceMonitor
 metadata:
   name: immich-valkey
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: immich
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/immich/StatefulSet-immich-valkey.yaml

@@ -3,7 +3,7 @@ kind: StatefulSet
 metadata:
   name: immich-valkey
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: immich
     app.kubernetes.io/version: "9.0.3"
@@ -32,7 +32,7 @@ spec:
         app.kubernetes.io/name: valkey
         app.kubernetes.io/instance: immich
       annotations:
-        checksum/initconfig: "56fd0449d1eea259ddd955cd82dc8344"
+        checksum/initconfig: "2d8432be19db9efa32b993becf4e58d4"
     spec:
       automountServiceAccountToken: false
       serviceAccountName: immich-valkey
@@ -40,11 +40,14 @@ spec:
         fsGroup: 1000
         runAsGroup: 1000
         runAsUser: 1000
+        seccompProfile:
+          type: RuntimeDefault
       initContainers:
         - name: immich-valkey-init
           image: docker.io/valkey/valkey:9.0.3@sha256:3b55fbaa0cd93cf0d9d961f405e4dfcc70efe325e2d84da207a0a8e6d8fde4f9
           imagePullPolicy: IfNotPresent
           securityContext:
+            allowPrivilegeEscalation: false
             capabilities:
               drop:
                 - ALL
@@ -69,6 +72,7 @@ spec:
           command: ["valkey-server"]
           args: ["/data/conf/valkey.conf"]
           securityContext:
+            allowPrivilegeEscalation: false
             capabilities:
               drop:
                 - ALL

clusters/cl01tl/manifests/kube-prometheus-stack/ConfigMap-kube-prometheus-stack-valkey-init-scripts.yaml

@@ -3,7 +3,7 @@ kind: ConfigMap
 metadata:
   name: kube-prometheus-stack-valkey-init-scripts
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: kube-prometheus-stack
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/kube-prometheus-stack/PodMonitor-kube-prometheus-stack-valkey.yaml

@@ -3,7 +3,7 @@ kind: PodMonitor
 metadata:
   name: kube-prometheus-stack-valkey
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: kube-prometheus-stack
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/kube-prometheus-stack/PrometheusRule-kube-prometheus-stack-valkey.yaml

@@ -3,7 +3,7 @@ kind: PrometheusRule
 metadata:
   name: kube-prometheus-stack-valkey
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: kube-prometheus-stack
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/kube-prometheus-stack/Service-kube-prometheus-stack-valkey-headless.yaml

@@ -3,7 +3,7 @@ kind: Service
 metadata:
   name: kube-prometheus-stack-valkey-headless
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: kube-prometheus-stack
     app.kubernetes.io/version: "9.0.3"

clusters/cl01tl/manifests/kube-prometheus-stack/Service-kube-prometheus-stack-valkey-metrics.yaml

@@ -3,7 +3,7 @@ kind: Service
 metadata:
   name: kube-prometheus-stack-valkey-metrics
   labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
     app.kubernetes.io/name: valkey
     app.kubernetes.io/instance: kube-prometheus-stack
     app.kubernetes.io/version: "9.0.3"