chore: Update manifests after change

clusters/cl01tl/manifests/home-assistant/Deployment-home-assistant.yaml

@@ -29,6 +29,9 @@ spec:
       enableServiceLinks: false
       serviceAccountName: default
       automountServiceAccountToken: true
+      securityContext:
+        fsGroup: 1000
+        fsGroupChangePolicy: OnRootMismatch
       hostIPC: false
       hostNetwork: false
       hostPID: false
@@ -36,7 +39,7 @@ spec:
       containers:
         - env:
             - name: TZ
-              value: US/Central
+              value: America/Chicago
             - name: PUID
               value: "1000"
             - name: PGID
@@ -47,25 +50,19 @@ spec:
             - secretRef:
                 name: home-assistant-code-server-password-secret
           image: ghcr.io/linuxserver/code-server:4.112.0@sha256:4bb5b8ad22268001687c047f0f04933799fb03df1eb0e1e266ba15ed2d9f4e8b
-          imagePullPolicy: IfNotPresent
           name: code-server
-          resources:
-            requests:
-              cpu: 10m
-              memory: 128Mi
           volumeMounts:
             - mountPath: /config/home-assistant
               name: config
         - env:
             - name: TZ
-              value: US/Central
-          image: ghcr.io/home-assistant/home-assistant:2026.3.4
-          imagePullPolicy: IfNotPresent
+              value: America/Chicago
+          image: ghcr.io/home-assistant/home-assistant:2026.3.4@sha256:916682086154a7390114a9788782b8efb199852d4f7d47066722c2bc5d1829e6
           name: main
           resources:
             requests:
-              cpu: 50m
-              memory: 512Mi
+              cpu: 1m
+              memory: 400Mi
           volumeMounts:
             - mountPath: /config
               name: config

clusters/cl01tl/manifests/home-assistant/ExternalSecret-home-assistant-code-server-password-secret.yaml

@@ -14,15 +14,9 @@ spec:
   data:
     - secretKey: PASSWORD
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /cl01tl/home-assistant/code-server/auth
-        metadataPolicy: None
         property: PASSWORD
     - secretKey: SUDO_PASSWORD
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /cl01tl/home-assistant/code-server/auth
-        metadataPolicy: None
         property: SUDO_PASSWORD

clusters/cl01tl/manifests/home-assistant/ExternalSecret-home-assistant-token-secret.yaml

@@ -14,8 +14,5 @@ spec:
   data:
     - secretKey: bearer-token
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /cl01tl/home-assistant/auth
-        metadataPolicy: None
         property: bearer-token

clusters/cl01tl/manifests/home-assistant/HTTPRoute-home-assistant-code-server.yaml

@@ -23,7 +23,7 @@ spec:
           name: home-assistant-code-server
           namespace: home-assistant
           port: 8443
-          weight: 100
+          weight: 1
       matches:
         - path:
             type: PathPrefix

clusters/cl01tl/manifests/home-assistant/HTTPRoute-home-assistant-main.yaml

@@ -23,7 +23,7 @@ spec:
           name: home-assistant-main
           namespace: home-assistant
           port: 80
-          weight: 100
+          weight: 1
       matches:
         - path:
             type: PathPrefix