infrastructure

Author	SHA1	Message	Date
Renovate Bot	6c0820fa56	Update ghcr.io/immich-app/immich-machine-learning Docker tag to v1.139.2 All checks were successful lint-test-helm / helm-lint (pull_request) Successful in 19s Details	2025-08-23 02:41:08 +00:00
Renovate Bot	ebefa858f5	Update Helm release loki to v6.37.0 (#1292 ) Some checks failed lint-test-helm / helm-lint (push) Successful in 13s Details renovate / renovate (push) Has been cancelled Details Reviewed-on: #1292 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>	2025-08-23 02:40:02 +00:00
Renovate Bot	a206eb6359	Update prometheus-operator-crds Docker tag to v23 (#1284 ) Some checks failed lint-test-helm / helm-lint (push) Successful in 10s Details renovate / renovate (push) Has been cancelled Details This PR contains the following updates: \| Package \| Update \| Change \| \|---\|---\|---\| \| [prometheus-operator-crds](https://github.com/prometheus-community/helm-charts) \| major \| `22.0.2` -> `23.0.0` \| --- ### Release Notes <details> <summary>prometheus-community/helm-charts (prometheus-operator-crds)</summary> ### [`v23.0.0`](https://github.com/prometheus-community/helm-charts/releases/tag/prometheus-operator-crds-23.0.0) [Compare Source](https://github.com/prometheus-community/helm-charts/compare/prometheus-operator-crds-22.0.2...prometheus-operator-crds-23.0.0) A Helm chart that collects custom resource definitions (CRDs) from the Prometheus Operator, allowing for seamless integration with GitOps tools #### What's Changed - \[prometheus-operator-crds] Update dependency prometheus-operator/prometheus-operator to v0.85.0 by [@renovate](https://github.com/renovate)\[bot] in https://github.com/prometheus-community/helm-charts/pull/6075 - \[prometheus-snmp-exporter] Update quay.io/prometheus-operator/prometheus-config-reloader Docker tag to v0.85.0 by [@renovate](https://github.com/renovate)\[bot] in https://github.com/prometheus-community/helm-charts/pull/6076 Full Changelog: https://github.com/prometheus-community/helm-charts/compare/prometheus-operator-admission-webhook-0.30.0...prometheus-operator-crds-23.0.0 </details> --- ### Configuration 📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied. ♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 Ignore: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4zNS4wIiwidXBkYXRlZEluVmVyIjoiNDEuMzUuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=--> Reviewed-on: #1284 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>	2025-08-23 02:39:51 +00:00
Renovate Bot	983ebb5146	Update dpage/pgadmin4 Docker tag to v9.7 (#1285 ) Some checks failed lint-test-helm / helm-lint (push) Successful in 10s Details renovate / renovate (push) Has been cancelled Details This PR contains the following updates: \| Package \| Update \| Change \| \|---\|---\|---\| \| dpage/pgadmin4 \| minor \| `9.6` -> `9.7` \| --- ### Configuration 📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied. ♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 Ignore: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4zNS4xIiwidXBkYXRlZEluVmVyIjoiNDEuMzUuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=--> Reviewed-on: #1285 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>	2025-08-23 02:39:33 +00:00
Renovate Bot	f3deed90f5	Update Helm release rook-ceph to v1.18.0 (#1280 ) Some checks failed lint-test-helm / helm-lint (push) Successful in 10s Details renovate / renovate (push) Has been cancelled Details This PR contains the following updates: \| Package \| Update \| Change \| \|---\|---\|---\| \| [rook-ceph](https://github.com/rook/rook) \| minor \| `v1.17.8` -> `v1.18.0` \| --- ### Release Notes <details> <summary>rook/rook (rook-ceph)</summary> ### [`v1.18.0`](https://github.com/rook/rook/releases/tag/v1.18.0) [Compare Source](https://github.com/rook/rook/compare/v1.17.8...v1.18.0) #### Upgrade Guide To upgrade from previous versions of Rook, see the [Rook upgrade guide](https://rook.github.io/docs/rook/v1.18/Upgrade/rook-upgrade/). #### Breaking Changes - Kubernetes v1.29 is now the minimum version supported by Rook through the soon-to-be K8s release v1.34. - Helm versions 3.13 and newer are supported. Previously, only the latest version of helm was tested and the docs stated only version 3.x of helm as a prerequisite. Now rook supports the six most recent minor versions of helm along with their their patch updates. - Rook now validates node topology during CephCluster creation to prevent misconfigured CRUSH hierarchies for OSDs. If child labels like `topology.rook.io/rack` are duplicated across zones, cluster creation will fail. The check applies only to new clusters without OSDs. Clusters with existing OSDs will only log a warning and continue. If the checks are invalid in your topology, they can be suppressed by setting `ROOK_SKIP_OSD_TOPOLOGY_CHECK=true` in the `rook-ceph-operator-config` configmap. #### Features - The Ceph CSI operator is now the default and recommended component for configuring CSI drivers for RBD, CephFS, and NFS volumes. The CSI operator has been factored out of Rook to run independently to manage the Ceph-CSI driver. - During the upgrade and throughout the v1.18.x releases, Rook will automatically convert any Rook CSI settings to the new CSI operator CRs. This transition is expected to be completely transparent. In the future v1.19 release, Rook will relinquish direct control of these settings so advanced users can have more flexibility when configuring the CSI drivers. At that time, we will have a guide on configuring these new Ceph CSI operator CRs directly. - During install, as mentioned in the [Quickstart Guide](https://rook.io/docs/rook/latest-release/Getting-Started/quickstart/#deploy-the-rook-operator), there is a new manifest to be created: csi-operator.yaml - If installing with the helm chart, the Ceph CSI operator will automatically be installed by default with the new helm setting `csi.rookUseCsiOperator` in the rook-ceph chart. - If a blocking issue is found, the previous CSI driver can be re-enabled by setting `ROOK_USE_CSI_OPERATOR: false` in operator.yaml or by applying the helm setting `csi.rookUseCsiOperator: false`. - [Ceph CSI v3.15](https://github.com/ceph/ceph-csi/releases/tag/v3.15.0) has a range of features and improvements for the RBD, CephFS, and NFS drivers. This release is supported both by the Ceph CSI operator and Rook's direct mode of configuration. Starting in the next release (at the end of the year), the Ceph CSI operator will be required to configure the CSI driver. - [CephX key rotation](https://rook.io/docs/rook/v1.18/Storage-Configuration/Advanced/cephx-key-rotation/?h=cephx) is now available as an experimental feature for the CephX authentication keys used by Ceph daemons and clients. Users will begin to see new cephx status items on some Rook resources in newly-deployed Rook clusters. Users can also find `spec.security.cephx` settings that allow initiating CephX key rotation for various Ceph components. Full documentation for key rotation can be found [here](https://rook.io/docs/rook/v1.18/Storage-Configuration/Advanced/cephx-key-rotation/?h=cephx). - Ceph version v19.2.3+ is required for key rotation. - The Ceph admin and mon keys cannot yet be rotated. Implementation is still in progress while in experimental mode. - Add support for specifying the clusterID in the [CephBlockPoolRadosNamespace](https://rook.io/docs/rook/v1.18/CRDs/Block-Storage/ceph-block-pool-rados-namespace-crd/#creating-a-storage-class) and the [CephFilesystemSubVolumeGroup](https://rook.io/docs/rook/v1.18/CRDs/Shared-Filesystem/ceph-fs-subvolumegroup-crd/#create-a-storage-class-for-the-subvolume-group) CR. - When a mon is being [failed over](https://rook.io/docs/rook/latest-release/Storage-Configuration/Advanced/ceph-mon-health/#failing-over-a-monitor), if the assigned node no longer exists, the mon is failed over immediately instead of waiting for a 20 minute timeout. - Support for Ceph Tentacle v20 will be available as soon as it is released. </details> --- ### Configuration 📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied. ♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 Ignore: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xLjMiLCJ1cGRhdGVkSW5WZXIiOiI0MS4xLjMiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImNoYXJ0Il19--> Reviewed-on: #1280 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>	2025-08-23 02:39:18 +00:00
Renovate Bot	fae4286aa7	Update Helm release authentik to v2025.8.0 (#1278 ) Some checks failed lint-test-helm / helm-lint (push) Successful in 11s Details renovate / renovate (push) Has been cancelled Details This PR contains the following updates: \| Package \| Update \| Change \| Pending \| \|---\|---\|---\|---\| \| [authentik](https://goauthentik.io) ([source](https://github.com/goauthentik/helm)) \| minor \| `2025.6.4` -> `2025.8.0` \| `2025.8.1` \| --- ### Release Notes <details> <summary>goauthentik/helm (authentik)</summary> ### [`v2025.8.0`](https://github.com/goauthentik/helm/releases/tag/authentik-2025.8.0) [Compare Source](https://github.com/goauthentik/helm/compare/authentik-2025.6.4...authentik-2025.8.0) authentik is an open-source Identity Provider focused on flexibility and versatility See https://docs.goauthentik.io/releases/2025.8/ #### What's Changed - charts/authentik: fix specifying multiple routes by [@Javex](https://github.com/Javex) in https://github.com/goauthentik/helm/pull/372 - charts/authentik: Fix removed whitespace for additionalObjects by [@Javex](https://github.com/Javex) in https://github.com/goauthentik/helm/pull/373 - charts/authentik: increase default probe timeouts from 1 to 3s by [@rissson](https://github.com/rissson) in https://github.com/goauthentik/helm/pull/376 - chore(deps): update actions/checkout action to v5 by [@renovate](https://github.com/renovate)\[bot] in https://github.com/goauthentik/helm/pull/379 - README: generate versions directly by [@rissson](https://github.com/rissson) in https://github.com/goauthentik/helm/pull/380 - chore(deps): update postgresql docker tag to v16.7.26 by [@renovate](https://github.com/renovate)\[bot] in https://github.com/goauthentik/helm/pull/360 - chore(deps): update ghcr.io/maxmind/geoipupdate docker tag to v7.1.1 by [@renovate](https://github.com/renovate)\[bot] in https://github.com/goauthentik/helm/pull/368 - charts/authentik: use dramatiq metrics by [@rissson](https://github.com/rissson) in https://github.com/goauthentik/helm/pull/384 - chore(deps): update redis docker tag to v22 by [@renovate](https://github.com/renovate)\[bot] in https://github.com/goauthentik/helm/pull/378 - charts/authentik: use docker library images by [@rissson](https://github.com/rissson) in https://github.com/goauthentik/helm/pull/385 - charts/authentik: bump to 2025.8.0 by [@authentik-automation](https://github.com/authentik-automation)\[bot] in https://github.com/goauthentik/helm/pull/386 #### New Contributors - [@Javex](https://github.com/Javex) made their first contribution in https://github.com/goauthentik/helm/pull/372 - [@authentik-automation](https://github.com/authentik-automation)\[bot] made their first contribution in https://github.com/goauthentik/helm/pull/386 Full Changelog: https://github.com/goauthentik/helm/compare/authentik-2025.6.4...authentik-2025.8.0 </details> --- ### Configuration 📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied. ♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 Ignore: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4zNS4xIiwidXBkYXRlZEluVmVyIjoiNDEuMzUuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiY2hhcnQiXX0=--> Reviewed-on: #1278 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>	2025-08-23 02:38:25 +00:00

6 changed files with 6 additions and 6 deletions

									
										2

clusters/cl01tl/applications/immich/values.yaml
									
												View File
												
					@@ -99,7 +99,7 @@ immich:

					        main:

					        main:

					          image:

					          image:

					            repository: ghcr.io/immich-app/immich-machine-learning

					            repository: ghcr.io/immich-app/immich-machine-learning

					            tag: v1.134.0

					            tag: v1.139.2

					            pullPolicy: IfNotPresent

					            pullPolicy: IfNotPresent

					          env:

					          env:

					            - name: TRANSFORMERS_CACHE

					            - name: TRANSFORMERS_CACHE

									
										2

clusters/cl01tl/monitoring/loki/Chart.yaml
									
												View File
												
					@@ -16,7 +16,7 @@ maintainers:

					  - name: alexlebens

					  - name: alexlebens

					dependencies:

					dependencies:

					  - name: loki

					  - name: loki

					    version: 6.36.1

					    version: 6.37.0

					    repository: https://grafana.github.io/helm-charts

					    repository: https://grafana.github.io/helm-charts

					  - name: promtail

					  - name: promtail

					    version: 6.17.0

					    version: 6.17.0

									
										2

clusters/cl01tl/platform/authentik/Chart.yaml
									
												View File
												
					@@ -21,7 +21,7 @@ maintainers:

					  - name: alexlebens

					  - name: alexlebens

					dependencies:

					dependencies:

					  - name: authentik

					  - name: authentik

					    version: 2025.6.4

					    version: 2025.8.0

					    repository: https://charts.goauthentik.io/

					    repository: https://charts.goauthentik.io/

					  - name: cloudflared

					  - name: cloudflared

					    alias: cloudflared

					    alias: cloudflared

									
										2

clusters/cl01tl/standalone/prometheus-operator-crds/Chart.yaml
									
												View File
												
					@@ -15,7 +15,7 @@ maintainers:

					  - name: alexlebens

					  - name: alexlebens

					dependencies:

					dependencies:

					  - name: prometheus-operator-crds

					  - name: prometheus-operator-crds

					    version: 22.0.2

					    version: 23.0.0

					    repository: oci://ghcr.io/prometheus-community/charts

					    repository: oci://ghcr.io/prometheus-community/charts

					icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/prometheus.png

					icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/prometheus.png

					appVersion: v0.82.0

					appVersion: v0.82.0

									
										2

clusters/cl01tl/storage/pgadmin/values.yaml
									
												View File
												
					@@ -28,7 +28,7 @@ pgadmin4:

					            runAsGroup: 5050

					            runAsGroup: 5050

					          image:

					          image:

					            repository: dpage/pgadmin4

					            repository: dpage/pgadmin4

					            tag: "9.6"

					            tag: "9.7"

					            pullPolicy: IfNotPresent

					            pullPolicy: IfNotPresent

					          env:

					          env:

					            - name: PGADMIN_CONFIG_ENHANCED_COOKIE_PROTECTION

					            - name: PGADMIN_CONFIG_ENHANCED_COOKIE_PROTECTION

									
										2

clusters/cl01tl/storage/rook-ceph/Chart.yaml
									
												View File
												
					@@ -16,7 +16,7 @@ maintainers:

					  - name: alexlebens

					  - name: alexlebens

					dependencies:

					dependencies:

					  - name: rook-ceph

					  - name: rook-ceph

					    version: v1.17.8

					    version: v1.18.0

					    repository: https://charts.rook.io/release

					    repository: https://charts.rook.io/release

					  - name: rook-ceph-cluster

					  - name: rook-ceph-cluster

					    version: v1.17.8

					    version: v1.17.8

Compare commits

6 Commits

653c5697fb ... 6c0820fa56

2

clusters/cl01tl/applications/immich/values.yaml

View File

2

clusters/cl01tl/monitoring/loki/Chart.yaml

View File

2

clusters/cl01tl/platform/authentik/Chart.yaml

View File

2

clusters/cl01tl/standalone/prometheus-operator-crds/Chart.yaml

View File

2

clusters/cl01tl/storage/pgadmin/values.yaml

View File

2

clusters/cl01tl/storage/rook-ceph/Chart.yaml

View File

Compare commits

6 Commits 653c5697fb ... 6c0820fa56

2 clusters/cl01tl/applications/immich/values.yaml Unescape Escape View File

2 clusters/cl01tl/monitoring/loki/Chart.yaml Unescape Escape View File

2 clusters/cl01tl/platform/authentik/Chart.yaml Unescape Escape View File

2 clusters/cl01tl/standalone/prometheus-operator-crds/Chart.yaml Unescape Escape View File

2 clusters/cl01tl/storage/pgadmin/values.yaml Unescape Escape View File

2 clusters/cl01tl/storage/rook-ceph/Chart.yaml Unescape Escape View File

6 Commits

653c5697fb ... 6c0820fa56

2

clusters/cl01tl/applications/immich/values.yaml

View File

2

clusters/cl01tl/monitoring/loki/Chart.yaml

View File

2

clusters/cl01tl/platform/authentik/Chart.yaml

View File

2

clusters/cl01tl/standalone/prometheus-operator-crds/Chart.yaml

View File

2

clusters/cl01tl/storage/pgadmin/values.yaml

View File

2

clusters/cl01tl/storage/rook-ceph/Chart.yaml

View File