From 997f9dd959b54d573e59205423769f056bfb24de Mon Sep 17 00:00:00 2001 From: gitea-bot Date: Mon, 6 Apr 2026 22:51:15 +0000 Subject: [PATCH] chore: Update manifests after change --- .../Cluster-roundcube-postgresql-18-cluster.yaml | 8 ++++---- .../roundcube/CronJob-roundcube-cleandb.yaml | 11 +++-------- .../roundcube/Deployment-roundcube-main.yaml | 14 ++++---------- .../ExternalSecret-roundcube-key-secret.yaml | 3 --- ...postgresql-18-backup-garage-local-secret.yaml | 4 ++-- ...-roundcube-postgresql-18-recovery-secret.yaml | 4 ++-- .../manifests/roundcube/HTTPRoute-roundcube.yaml | 2 +- ...ndcube-postgresql-18-backup-garage-local.yaml | 4 ++-- ...ctStore-roundcube-postgresql-18-recovery.yaml | 4 ++-- .../PersistentVolumeClaim-roundcube-data.yaml | 2 -- ...Rule-roundcube-postgresql-18-alert-rules.yaml | 4 ++-- ...stgresql-18-scheduled-backup-live-backup.yaml | 4 ++-- .../Cluster-rybbit-postgresql-18-cluster.yaml | 8 ++++---- .../rybbit/Deployment-rybbit-backend.yaml | 14 +++++++++++--- .../rybbit/Deployment-rybbit-clickhouse.yaml | 16 ++++++++++++---- .../rybbit/Deployment-rybbit-client.yaml | 5 ++--- .../ExternalSecret-rybbit-config-secret.yaml | 12 ------------ ...postgresql-18-backup-garage-local-secret.yaml | 4 ++-- ...ret-rybbit-postgresql-18-recovery-secret.yaml | 4 ++-- ...rybbit-postgresql-18-backup-garage-local.yaml | 4 ++-- ...bjectStore-rybbit-postgresql-18-recovery.yaml | 4 ++-- .../PersistentVolumeClaim-clickhouse-data.yaml | 2 -- ...eusRule-rybbit-postgresql-18-alert-rules.yaml | 4 ++-- ...stgresql-18-scheduled-backup-live-backup.yaml | 4 ++-- .../Deployment-s3-exporter-digital-ocean.yaml | 7 +++---- .../Deployment-s3-exporter-garage-local.yaml | 7 +++---- .../Deployment-s3-exporter-garage-remote.yaml | 7 +++---- .../ExternalSecret-s3-do-home-infra-secret.yaml | 9 --------- .../ExternalSecret-s3-garage-secret.yaml | 6 ------ 29 files changed, 74 insertions(+), 107 deletions(-) diff --git a/clusters/cl01tl/manifests/roundcube/Cluster-roundcube-postgresql-18-cluster.yaml b/clusters/cl01tl/manifests/roundcube/Cluster-roundcube-postgresql-18-cluster.yaml index 41c531ebc..77ac69ed5 100644 --- a/clusters/cl01tl/manifests/roundcube/Cluster-roundcube-postgresql-18-cluster.yaml +++ b/clusters/cl01tl/manifests/roundcube/Cluster-roundcube-postgresql-18-cluster.yaml @@ -5,10 +5,10 @@ metadata: namespace: roundcube labels: app.kubernetes.io/name: roundcube-postgresql-18-cluster - helm.sh/chart: postgres-18-cluster-7.10.0 + helm.sh/chart: postgres-18-cluster-7.11.2 app.kubernetes.io/instance: roundcube app.kubernetes.io/part-of: roundcube - app.kubernetes.io/version: "7.10.0" + app.kubernetes.io/version: "7.11.2" app.kubernetes.io/managed-by: Helm spec: instances: 3 @@ -26,8 +26,8 @@ spec: limits: hugepages-2Mi: 256Mi requests: - cpu: 100m - memory: 256Mi + cpu: 20m + memory: 80Mi affinity: enablePodAntiAffinity: true topologyKey: kubernetes.io/hostname diff --git a/clusters/cl01tl/manifests/roundcube/CronJob-roundcube-cleandb.yaml b/clusters/cl01tl/manifests/roundcube/CronJob-roundcube-cleandb.yaml index e5283d1f0..13c6174cb 100644 --- a/clusters/cl01tl/manifests/roundcube/CronJob-roundcube-cleandb.yaml +++ b/clusters/cl01tl/manifests/roundcube/CronJob-roundcube-cleandb.yaml @@ -12,8 +12,8 @@ metadata: spec: suspend: false concurrencyPolicy: Forbid - startingDeadlineSeconds: 90 - timeZone: US/Central + startingDeadlineSeconds: 30 + timeZone: America/Chicago schedule: "30 4 * * *" successfulJobsHistoryLimit: 1 failedJobsHistoryLimit: 1 @@ -77,10 +77,5 @@ spec: value: elastic - name: ROUNDCUBEMAIL_PLUGINS value: archive,zipdownload,newmail_notifier - image: roundcube/roundcubemail:1.6.15-fpm-alpine - imagePullPolicy: IfNotPresent + image: roundcube/roundcubemail:1.6.15-fpm-alpine@sha256:0e07c1c66d5a1392f0c47cc79e85e0c60095108f715037d7d0aa3fd8cbe2e780 name: backup - resources: - requests: - cpu: 100m - memory: 128Mi diff --git a/clusters/cl01tl/manifests/roundcube/Deployment-roundcube-main.yaml b/clusters/cl01tl/manifests/roundcube/Deployment-roundcube-main.yaml index 69db84ffd..6f914e64c 100644 --- a/clusters/cl01tl/manifests/roundcube/Deployment-roundcube-main.yaml +++ b/clusters/cl01tl/manifests/roundcube/Deployment-roundcube-main.yaml @@ -76,13 +76,12 @@ spec: value: elastic - name: ROUNDCUBEMAIL_PLUGINS value: archive,zipdownload,newmail_notifier - image: roundcube/roundcubemail:1.6.15-fpm-alpine - imagePullPolicy: IfNotPresent + image: roundcube/roundcubemail:1.6.15-fpm-alpine@sha256:0e07c1c66d5a1392f0c47cc79e85e0c60095108f715037d7d0aa3fd8cbe2e780 name: main resources: requests: - cpu: 10m - memory: 256Mi + cpu: 1m + memory: 40Mi volumeMounts: - mountPath: /var/www/html name: data @@ -93,13 +92,8 @@ spec: value: mail.alexlebens.net - name: NGINX_PHP_CGI value: roundcube.roundcube:9000 - image: nginx:1.29.7-alpine-slim - imagePullPolicy: IfNotPresent + image: nginx:1.29.7-alpine-slim@sha256:0848ca84c476868cbeb6a5c2c009a98821b8540f96c44b1ba06820db50262e35 name: nginx - resources: - requests: - cpu: 10m - memory: 128Mi volumeMounts: - mountPath: /etc/nginx/conf.d/default.conf mountPropagation: None diff --git a/clusters/cl01tl/manifests/roundcube/ExternalSecret-roundcube-key-secret.yaml b/clusters/cl01tl/manifests/roundcube/ExternalSecret-roundcube-key-secret.yaml index 1a5c28465..446675fa8 100644 --- a/clusters/cl01tl/manifests/roundcube/ExternalSecret-roundcube-key-secret.yaml +++ b/clusters/cl01tl/manifests/roundcube/ExternalSecret-roundcube-key-secret.yaml @@ -14,8 +14,5 @@ spec: data: - secretKey: DES_KEY remoteRef: - conversionStrategy: Default - decodingStrategy: None key: /cl01tl/roundcube/key - metadataPolicy: None property: DES_KEY diff --git a/clusters/cl01tl/manifests/roundcube/ExternalSecret-roundcube-postgresql-18-backup-garage-local-secret.yaml b/clusters/cl01tl/manifests/roundcube/ExternalSecret-roundcube-postgresql-18-backup-garage-local-secret.yaml index 32522308c..01b904f07 100644 --- a/clusters/cl01tl/manifests/roundcube/ExternalSecret-roundcube-postgresql-18-backup-garage-local-secret.yaml +++ b/clusters/cl01tl/manifests/roundcube/ExternalSecret-roundcube-postgresql-18-backup-garage-local-secret.yaml @@ -5,10 +5,10 @@ metadata: namespace: roundcube labels: app.kubernetes.io/name: roundcube-postgresql-18-backup-garage-local-secret - helm.sh/chart: postgres-18-cluster-7.10.0 + helm.sh/chart: postgres-18-cluster-7.11.2 app.kubernetes.io/instance: roundcube app.kubernetes.io/part-of: roundcube - app.kubernetes.io/version: "7.10.0" + app.kubernetes.io/version: "7.11.2" app.kubernetes.io/managed-by: Helm spec: secretStoreRef: diff --git a/clusters/cl01tl/manifests/roundcube/ExternalSecret-roundcube-postgresql-18-recovery-secret.yaml b/clusters/cl01tl/manifests/roundcube/ExternalSecret-roundcube-postgresql-18-recovery-secret.yaml index 3874bf776..8bfd2de4f 100644 --- a/clusters/cl01tl/manifests/roundcube/ExternalSecret-roundcube-postgresql-18-recovery-secret.yaml +++ b/clusters/cl01tl/manifests/roundcube/ExternalSecret-roundcube-postgresql-18-recovery-secret.yaml @@ -4,10 +4,10 @@ metadata: name: roundcube-postgresql-18-recovery-secret namespace: roundcube labels: - helm.sh/chart: postgres-18-cluster-7.10.0 + helm.sh/chart: postgres-18-cluster-7.11.2 app.kubernetes.io/instance: roundcube app.kubernetes.io/part-of: roundcube - app.kubernetes.io/version: "7.10.0" + app.kubernetes.io/version: "7.11.2" app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: roundcube-postgresql-18-recovery-secret spec: diff --git a/clusters/cl01tl/manifests/roundcube/HTTPRoute-roundcube.yaml b/clusters/cl01tl/manifests/roundcube/HTTPRoute-roundcube.yaml index bb7cb51f8..06d840c71 100644 --- a/clusters/cl01tl/manifests/roundcube/HTTPRoute-roundcube.yaml +++ b/clusters/cl01tl/manifests/roundcube/HTTPRoute-roundcube.yaml @@ -23,7 +23,7 @@ spec: name: roundcube namespace: roundcube port: 80 - weight: 100 + weight: 1 matches: - path: type: PathPrefix diff --git a/clusters/cl01tl/manifests/roundcube/ObjectStore-roundcube-postgresql-18-backup-garage-local.yaml b/clusters/cl01tl/manifests/roundcube/ObjectStore-roundcube-postgresql-18-backup-garage-local.yaml index 71dbbcdb4..672651751 100644 --- a/clusters/cl01tl/manifests/roundcube/ObjectStore-roundcube-postgresql-18-backup-garage-local.yaml +++ b/clusters/cl01tl/manifests/roundcube/ObjectStore-roundcube-postgresql-18-backup-garage-local.yaml @@ -5,10 +5,10 @@ metadata: namespace: roundcube labels: app.kubernetes.io/name: roundcube-postgresql-18-backup-garage-local - helm.sh/chart: postgres-18-cluster-7.10.0 + helm.sh/chart: postgres-18-cluster-7.11.2 app.kubernetes.io/instance: roundcube app.kubernetes.io/part-of: roundcube - app.kubernetes.io/version: "7.10.0" + app.kubernetes.io/version: "7.11.2" app.kubernetes.io/managed-by: Helm spec: retentionPolicy: 7d diff --git a/clusters/cl01tl/manifests/roundcube/ObjectStore-roundcube-postgresql-18-recovery.yaml b/clusters/cl01tl/manifests/roundcube/ObjectStore-roundcube-postgresql-18-recovery.yaml index 0a0d4b468..5dbf64371 100644 --- a/clusters/cl01tl/manifests/roundcube/ObjectStore-roundcube-postgresql-18-recovery.yaml +++ b/clusters/cl01tl/manifests/roundcube/ObjectStore-roundcube-postgresql-18-recovery.yaml @@ -4,10 +4,10 @@ metadata: name: "roundcube-postgresql-18-recovery" namespace: roundcube labels: - helm.sh/chart: postgres-18-cluster-7.10.0 + helm.sh/chart: postgres-18-cluster-7.11.2 app.kubernetes.io/instance: roundcube app.kubernetes.io/part-of: roundcube - app.kubernetes.io/version: "7.10.0" + app.kubernetes.io/version: "7.11.2" app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: "roundcube-postgresql-18-recovery" spec: diff --git a/clusters/cl01tl/manifests/roundcube/PersistentVolumeClaim-roundcube-data.yaml b/clusters/cl01tl/manifests/roundcube/PersistentVolumeClaim-roundcube-data.yaml index fce6488bf..1b4d384bd 100644 --- a/clusters/cl01tl/manifests/roundcube/PersistentVolumeClaim-roundcube-data.yaml +++ b/clusters/cl01tl/manifests/roundcube/PersistentVolumeClaim-roundcube-data.yaml @@ -7,8 +7,6 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: roundcube helm.sh/chart: roundcube-4.6.2 - annotations: - helm.sh/resource-policy: keep namespace: roundcube spec: accessModes: diff --git a/clusters/cl01tl/manifests/roundcube/PrometheusRule-roundcube-postgresql-18-alert-rules.yaml b/clusters/cl01tl/manifests/roundcube/PrometheusRule-roundcube-postgresql-18-alert-rules.yaml index de2dee739..f89212d2b 100644 --- a/clusters/cl01tl/manifests/roundcube/PrometheusRule-roundcube-postgresql-18-alert-rules.yaml +++ b/clusters/cl01tl/manifests/roundcube/PrometheusRule-roundcube-postgresql-18-alert-rules.yaml @@ -5,10 +5,10 @@ metadata: namespace: roundcube labels: app.kubernetes.io/name: roundcube-postgresql-18-alert-rules - helm.sh/chart: postgres-18-cluster-7.10.0 + helm.sh/chart: postgres-18-cluster-7.11.2 app.kubernetes.io/instance: roundcube app.kubernetes.io/part-of: roundcube - app.kubernetes.io/version: "7.10.0" + app.kubernetes.io/version: "7.11.2" app.kubernetes.io/managed-by: Helm spec: groups: diff --git a/clusters/cl01tl/manifests/roundcube/ScheduledBackup-roundcube-postgresql-18-scheduled-backup-live-backup.yaml b/clusters/cl01tl/manifests/roundcube/ScheduledBackup-roundcube-postgresql-18-scheduled-backup-live-backup.yaml index d514d64b2..4267bef52 100644 --- a/clusters/cl01tl/manifests/roundcube/ScheduledBackup-roundcube-postgresql-18-scheduled-backup-live-backup.yaml +++ b/clusters/cl01tl/manifests/roundcube/ScheduledBackup-roundcube-postgresql-18-scheduled-backup-live-backup.yaml @@ -5,10 +5,10 @@ metadata: namespace: roundcube labels: app.kubernetes.io/name: "roundcube-postgresql-18-scheduled-backup-live-backup" - helm.sh/chart: postgres-18-cluster-7.10.0 + helm.sh/chart: postgres-18-cluster-7.11.2 app.kubernetes.io/instance: roundcube app.kubernetes.io/part-of: roundcube - app.kubernetes.io/version: "7.10.0" + app.kubernetes.io/version: "7.11.2" app.kubernetes.io/managed-by: Helm spec: immediate: true diff --git a/clusters/cl01tl/manifests/rybbit/Cluster-rybbit-postgresql-18-cluster.yaml b/clusters/cl01tl/manifests/rybbit/Cluster-rybbit-postgresql-18-cluster.yaml index b0b5c7587..9747f1a96 100644 --- a/clusters/cl01tl/manifests/rybbit/Cluster-rybbit-postgresql-18-cluster.yaml +++ b/clusters/cl01tl/manifests/rybbit/Cluster-rybbit-postgresql-18-cluster.yaml @@ -5,10 +5,10 @@ metadata: namespace: rybbit labels: app.kubernetes.io/name: rybbit-postgresql-18-cluster - helm.sh/chart: postgres-18-cluster-7.10.0 + helm.sh/chart: postgres-18-cluster-7.11.2 app.kubernetes.io/instance: rybbit app.kubernetes.io/part-of: rybbit - app.kubernetes.io/version: "7.10.0" + app.kubernetes.io/version: "7.11.2" app.kubernetes.io/managed-by: Helm spec: instances: 3 @@ -26,8 +26,8 @@ spec: limits: hugepages-2Mi: 256Mi requests: - cpu: 100m - memory: 256Mi + cpu: 20m + memory: 80Mi affinity: enablePodAntiAffinity: true topologyKey: kubernetes.io/hostname diff --git a/clusters/cl01tl/manifests/rybbit/Deployment-rybbit-backend.yaml b/clusters/cl01tl/manifests/rybbit/Deployment-rybbit-backend.yaml index 1e57b4ccb..2c4ca172d 100644 --- a/clusters/cl01tl/manifests/rybbit/Deployment-rybbit-backend.yaml +++ b/clusters/cl01tl/manifests/rybbit/Deployment-rybbit-backend.yaml @@ -94,10 +94,18 @@ spec: secretKeyRef: key: mapbox-token name: rybbit-config-secret - image: ghcr.io/rybbit-io/rybbit-backend:v2.5.0 - imagePullPolicy: IfNotPresent + image: ghcr.io/rybbit-io/rybbit-backend:v2.5.0@sha256:fd00f61abe592f872a0e4ac13f8c7b190ab2810e72f898faea4809d7ced46eef + livenessProbe: + failureThreshold: 5 + httpGet: + path: /api/health + port: 3001 + initialDelaySeconds: 10 + periodSeconds: 30 + successThreshold: 1 + timeoutSeconds: 5 name: main resources: requests: cpu: 10m - memory: 256Mi + memory: 200Mi diff --git a/clusters/cl01tl/manifests/rybbit/Deployment-rybbit-clickhouse.yaml b/clusters/cl01tl/manifests/rybbit/Deployment-rybbit-clickhouse.yaml index ea1f29ad8..63300ce65 100644 --- a/clusters/cl01tl/manifests/rybbit/Deployment-rybbit-clickhouse.yaml +++ b/clusters/cl01tl/manifests/rybbit/Deployment-rybbit-clickhouse.yaml @@ -49,13 +49,21 @@ spec: secretKeyRef: key: clickhouse-password name: rybbit-config-secret - image: clickhouse/clickhouse-server:26.3.3 - imagePullPolicy: IfNotPresent + image: clickhouse/clickhouse-server:26.3.3@sha256:5cfbc0598ee3bd850ac1b2ab150e6c9ec7b9207f1a97617e015325fb5df053d0 + livenessProbe: + failureThreshold: 5 + httpGet: + path: /ping + port: 8123 + initialDelaySeconds: 10 + periodSeconds: 30 + successThreshold: 1 + timeoutSeconds: 5 name: main resources: requests: - cpu: 10m - memory: 256Mi + cpu: 40m + memory: 300Mi volumeMounts: - mountPath: /var/lib/clickhouse name: clickhouse diff --git a/clusters/cl01tl/manifests/rybbit/Deployment-rybbit-client.yaml b/clusters/cl01tl/manifests/rybbit/Deployment-rybbit-client.yaml index 15fcf636e..e324612a0 100644 --- a/clusters/cl01tl/manifests/rybbit/Deployment-rybbit-client.yaml +++ b/clusters/cl01tl/manifests/rybbit/Deployment-rybbit-client.yaml @@ -43,10 +43,9 @@ spec: value: https://rybbit.alexlebens.dev - name: NEXT_PUBLIC_DISABLE_SIGNUP value: "false" - image: harbor.alexlebens.net/images/rybbit-client:v2.4.0 - imagePullPolicy: IfNotPresent + image: ghcr.io/rybbit-io/rybbit-client:v2.5.0@sha256:741908be311a23ee4e58c5f82c6740bf75bbe4f7430ff2aec420f6189b1378b8 name: main resources: requests: cpu: 10m - memory: 256Mi + memory: 100Mi diff --git a/clusters/cl01tl/manifests/rybbit/ExternalSecret-rybbit-config-secret.yaml b/clusters/cl01tl/manifests/rybbit/ExternalSecret-rybbit-config-secret.yaml index 68934df54..b54930056 100644 --- a/clusters/cl01tl/manifests/rybbit/ExternalSecret-rybbit-config-secret.yaml +++ b/clusters/cl01tl/manifests/rybbit/ExternalSecret-rybbit-config-secret.yaml @@ -14,29 +14,17 @@ spec: data: - secretKey: clickhouse-user remoteRef: - conversionStrategy: Default - decodingStrategy: None key: /cl01tl/rybbit/clickhouse - metadataPolicy: None property: user - secretKey: clickhouse-password remoteRef: - conversionStrategy: Default - decodingStrategy: None key: /cl01tl/rybbit/clickhouse - metadataPolicy: None property: password - secretKey: better-auth-secret remoteRef: - conversionStrategy: Default - decodingStrategy: None key: /cl01tl/rybbit/auth - metadataPolicy: None property: better-auth-secret - secretKey: mapbox-token remoteRef: - conversionStrategy: Default - decodingStrategy: None key: /cl01tl/rybbit/auth - metadataPolicy: None property: mapbox-token diff --git a/clusters/cl01tl/manifests/rybbit/ExternalSecret-rybbit-postgresql-18-backup-garage-local-secret.yaml b/clusters/cl01tl/manifests/rybbit/ExternalSecret-rybbit-postgresql-18-backup-garage-local-secret.yaml index a2a6edfbf..98b4a26d1 100644 --- a/clusters/cl01tl/manifests/rybbit/ExternalSecret-rybbit-postgresql-18-backup-garage-local-secret.yaml +++ b/clusters/cl01tl/manifests/rybbit/ExternalSecret-rybbit-postgresql-18-backup-garage-local-secret.yaml @@ -5,10 +5,10 @@ metadata: namespace: rybbit labels: app.kubernetes.io/name: rybbit-postgresql-18-backup-garage-local-secret - helm.sh/chart: postgres-18-cluster-7.10.0 + helm.sh/chart: postgres-18-cluster-7.11.2 app.kubernetes.io/instance: rybbit app.kubernetes.io/part-of: rybbit - app.kubernetes.io/version: "7.10.0" + app.kubernetes.io/version: "7.11.2" app.kubernetes.io/managed-by: Helm spec: secretStoreRef: diff --git a/clusters/cl01tl/manifests/rybbit/ExternalSecret-rybbit-postgresql-18-recovery-secret.yaml b/clusters/cl01tl/manifests/rybbit/ExternalSecret-rybbit-postgresql-18-recovery-secret.yaml index e52ec3a8e..dc6d5d47f 100644 --- a/clusters/cl01tl/manifests/rybbit/ExternalSecret-rybbit-postgresql-18-recovery-secret.yaml +++ b/clusters/cl01tl/manifests/rybbit/ExternalSecret-rybbit-postgresql-18-recovery-secret.yaml @@ -4,10 +4,10 @@ metadata: name: rybbit-postgresql-18-recovery-secret namespace: rybbit labels: - helm.sh/chart: postgres-18-cluster-7.10.0 + helm.sh/chart: postgres-18-cluster-7.11.2 app.kubernetes.io/instance: rybbit app.kubernetes.io/part-of: rybbit - app.kubernetes.io/version: "7.10.0" + app.kubernetes.io/version: "7.11.2" app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: rybbit-postgresql-18-recovery-secret spec: diff --git a/clusters/cl01tl/manifests/rybbit/ObjectStore-rybbit-postgresql-18-backup-garage-local.yaml b/clusters/cl01tl/manifests/rybbit/ObjectStore-rybbit-postgresql-18-backup-garage-local.yaml index 2d43a0e10..fb6fa42f1 100644 --- a/clusters/cl01tl/manifests/rybbit/ObjectStore-rybbit-postgresql-18-backup-garage-local.yaml +++ b/clusters/cl01tl/manifests/rybbit/ObjectStore-rybbit-postgresql-18-backup-garage-local.yaml @@ -5,10 +5,10 @@ metadata: namespace: rybbit labels: app.kubernetes.io/name: rybbit-postgresql-18-backup-garage-local - helm.sh/chart: postgres-18-cluster-7.10.0 + helm.sh/chart: postgres-18-cluster-7.11.2 app.kubernetes.io/instance: rybbit app.kubernetes.io/part-of: rybbit - app.kubernetes.io/version: "7.10.0" + app.kubernetes.io/version: "7.11.2" app.kubernetes.io/managed-by: Helm spec: retentionPolicy: 7d diff --git a/clusters/cl01tl/manifests/rybbit/ObjectStore-rybbit-postgresql-18-recovery.yaml b/clusters/cl01tl/manifests/rybbit/ObjectStore-rybbit-postgresql-18-recovery.yaml index 546d181c1..917117d04 100644 --- a/clusters/cl01tl/manifests/rybbit/ObjectStore-rybbit-postgresql-18-recovery.yaml +++ b/clusters/cl01tl/manifests/rybbit/ObjectStore-rybbit-postgresql-18-recovery.yaml @@ -4,10 +4,10 @@ metadata: name: "rybbit-postgresql-18-recovery" namespace: rybbit labels: - helm.sh/chart: postgres-18-cluster-7.10.0 + helm.sh/chart: postgres-18-cluster-7.11.2 app.kubernetes.io/instance: rybbit app.kubernetes.io/part-of: rybbit - app.kubernetes.io/version: "7.10.0" + app.kubernetes.io/version: "7.11.2" app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: "rybbit-postgresql-18-recovery" spec: diff --git a/clusters/cl01tl/manifests/rybbit/PersistentVolumeClaim-clickhouse-data.yaml b/clusters/cl01tl/manifests/rybbit/PersistentVolumeClaim-clickhouse-data.yaml index a65944027..0be06645d 100644 --- a/clusters/cl01tl/manifests/rybbit/PersistentVolumeClaim-clickhouse-data.yaml +++ b/clusters/cl01tl/manifests/rybbit/PersistentVolumeClaim-clickhouse-data.yaml @@ -7,8 +7,6 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: rybbit helm.sh/chart: rybbit-4.6.2 - annotations: - helm.sh/resource-policy: keep namespace: rybbit spec: accessModes: diff --git a/clusters/cl01tl/manifests/rybbit/PrometheusRule-rybbit-postgresql-18-alert-rules.yaml b/clusters/cl01tl/manifests/rybbit/PrometheusRule-rybbit-postgresql-18-alert-rules.yaml index f63afbc55..dd685009c 100644 --- a/clusters/cl01tl/manifests/rybbit/PrometheusRule-rybbit-postgresql-18-alert-rules.yaml +++ b/clusters/cl01tl/manifests/rybbit/PrometheusRule-rybbit-postgresql-18-alert-rules.yaml @@ -5,10 +5,10 @@ metadata: namespace: rybbit labels: app.kubernetes.io/name: rybbit-postgresql-18-alert-rules - helm.sh/chart: postgres-18-cluster-7.10.0 + helm.sh/chart: postgres-18-cluster-7.11.2 app.kubernetes.io/instance: rybbit app.kubernetes.io/part-of: rybbit - app.kubernetes.io/version: "7.10.0" + app.kubernetes.io/version: "7.11.2" app.kubernetes.io/managed-by: Helm spec: groups: diff --git a/clusters/cl01tl/manifests/rybbit/ScheduledBackup-rybbit-postgresql-18-scheduled-backup-live-backup.yaml b/clusters/cl01tl/manifests/rybbit/ScheduledBackup-rybbit-postgresql-18-scheduled-backup-live-backup.yaml index eb1cffe58..ab5c5a0c6 100644 --- a/clusters/cl01tl/manifests/rybbit/ScheduledBackup-rybbit-postgresql-18-scheduled-backup-live-backup.yaml +++ b/clusters/cl01tl/manifests/rybbit/ScheduledBackup-rybbit-postgresql-18-scheduled-backup-live-backup.yaml @@ -5,10 +5,10 @@ metadata: namespace: rybbit labels: app.kubernetes.io/name: "rybbit-postgresql-18-scheduled-backup-live-backup" - helm.sh/chart: postgres-18-cluster-7.10.0 + helm.sh/chart: postgres-18-cluster-7.11.2 app.kubernetes.io/instance: rybbit app.kubernetes.io/part-of: rybbit - app.kubernetes.io/version: "7.10.0" + app.kubernetes.io/version: "7.11.2" app.kubernetes.io/managed-by: Helm spec: immediate: true diff --git a/clusters/cl01tl/manifests/s3-exporter/Deployment-s3-exporter-digital-ocean.yaml b/clusters/cl01tl/manifests/s3-exporter/Deployment-s3-exporter-digital-ocean.yaml index d64398690..9380b0e75 100644 --- a/clusters/cl01tl/manifests/s3-exporter/Deployment-s3-exporter-digital-ocean.yaml +++ b/clusters/cl01tl/manifests/s3-exporter/Deployment-s3-exporter-digital-ocean.yaml @@ -58,10 +58,9 @@ spec: value: info - name: S3_FORCE_PATH_STYLE value: "false" - image: molu8bits/s3bucket_exporter:1.0.2 - imagePullPolicy: IfNotPresent + image: molu8bits/s3bucket_exporter:1.0.2@sha256:75fc839c5f12cdbf20babab534959c96356b4483743e730409132bbda6944505 name: main resources: requests: - cpu: 10m - memory: 64Mi + cpu: 1m + memory: 40Mi diff --git a/clusters/cl01tl/manifests/s3-exporter/Deployment-s3-exporter-garage-local.yaml b/clusters/cl01tl/manifests/s3-exporter/Deployment-s3-exporter-garage-local.yaml index 8ce362a34..5a87c8463 100644 --- a/clusters/cl01tl/manifests/s3-exporter/Deployment-s3-exporter-garage-local.yaml +++ b/clusters/cl01tl/manifests/s3-exporter/Deployment-s3-exporter-garage-local.yaml @@ -55,10 +55,9 @@ spec: value: debug - name: S3_FORCE_PATH_STYLE value: "true" - image: molu8bits/s3bucket_exporter:1.0.2 - imagePullPolicy: IfNotPresent + image: molu8bits/s3bucket_exporter:1.0.2@sha256:75fc839c5f12cdbf20babab534959c96356b4483743e730409132bbda6944505 name: main resources: requests: - cpu: 10m - memory: 64Mi + cpu: 1m + memory: 40Mi diff --git a/clusters/cl01tl/manifests/s3-exporter/Deployment-s3-exporter-garage-remote.yaml b/clusters/cl01tl/manifests/s3-exporter/Deployment-s3-exporter-garage-remote.yaml index 031be66b0..25b7ace30 100644 --- a/clusters/cl01tl/manifests/s3-exporter/Deployment-s3-exporter-garage-remote.yaml +++ b/clusters/cl01tl/manifests/s3-exporter/Deployment-s3-exporter-garage-remote.yaml @@ -55,10 +55,9 @@ spec: value: debug - name: S3_FORCE_PATH_STYLE value: "true" - image: molu8bits/s3bucket_exporter:1.0.2 - imagePullPolicy: IfNotPresent + image: molu8bits/s3bucket_exporter:1.0.2@sha256:75fc839c5f12cdbf20babab534959c96356b4483743e730409132bbda6944505 name: main resources: requests: - cpu: 10m - memory: 64Mi + cpu: 1m + memory: 40Mi diff --git a/clusters/cl01tl/manifests/s3-exporter/ExternalSecret-s3-do-home-infra-secret.yaml b/clusters/cl01tl/manifests/s3-exporter/ExternalSecret-s3-do-home-infra-secret.yaml index e1b6c880f..ddd1618a2 100644 --- a/clusters/cl01tl/manifests/s3-exporter/ExternalSecret-s3-do-home-infra-secret.yaml +++ b/clusters/cl01tl/manifests/s3-exporter/ExternalSecret-s3-do-home-infra-secret.yaml @@ -14,22 +14,13 @@ spec: data: - secretKey: AWS_ACCESS_KEY_ID remoteRef: - conversionStrategy: Default - decodingStrategy: None key: /digital-ocean/home-infra/all-access - metadataPolicy: None property: AWS_ACCESS_KEY_ID - secretKey: AWS_SECRET_ACCESS_KEY remoteRef: - conversionStrategy: Default - decodingStrategy: None key: /digital-ocean/home-infra/all-access - metadataPolicy: None property: AWS_SECRET_ACCESS_KEY - secretKey: AWS_REGION remoteRef: - conversionStrategy: Default - decodingStrategy: None key: /digital-ocean/home-infra/prometheus-exporter - metadataPolicy: None property: AWS_REGION diff --git a/clusters/cl01tl/manifests/s3-exporter/ExternalSecret-s3-garage-secret.yaml b/clusters/cl01tl/manifests/s3-exporter/ExternalSecret-s3-garage-secret.yaml index 7c9edb82a..3bf313f72 100644 --- a/clusters/cl01tl/manifests/s3-exporter/ExternalSecret-s3-garage-secret.yaml +++ b/clusters/cl01tl/manifests/s3-exporter/ExternalSecret-s3-garage-secret.yaml @@ -14,15 +14,9 @@ spec: data: - secretKey: AWS_ACCESS_KEY_ID remoteRef: - conversionStrategy: Default - decodingStrategy: None key: /garage/home-infra/s3-exporter - metadataPolicy: None property: ACCESS_KEY_ID - secretKey: AWS_SECRET_ACCESS_KEY remoteRef: - conversionStrategy: Default - decodingStrategy: None key: /garage/home-infra/s3-exporter - metadataPolicy: None property: ACCESS_SECRET_KEY