alexlebens/infrastructure
1
0
Fork 0
Code Issues 1 Pull Requests 12 Actions Activity

Compare commits

base: alexlebens:653c5697fbb9e74e3179635b89c5e16de07cfc3f
Branches Tags
alexlebens:main alexlebens:renovate/postgres-cluster-6.x alexlebens:renovate/actions-setup-node-5.x alexlebens:renovate/actions-checkout-5.x alexlebens:renovate/traefik-37.x alexlebens:renovate/loki-6.x alexlebens:renovate/headlamp-0.x alexlebens:renovate/gatus-1.x alexlebens:renovate/ghcr.io-moghtech-komodo-core-1.x alexlebens:renovate/ghcr.io-immich-app-immich-server-1.x alexlebens:renovate/ghcr.io-immich-app-immich-machine-learning-1.x alexlebens:renovate/ghcr.io-actualbudget-actual-25.x alexlebens:renovate/dpage-pgadmin4-9.x
..
compare: alexlebens:6c0820fa564396acf05f064382719fb00292cab1
Branches Tags
alexlebens:renovate/postgres-cluster-6.x alexlebens:renovate/actions-setup-node-5.x alexlebens:renovate/actions-checkout-5.x alexlebens:renovate/traefik-37.x alexlebens:renovate/loki-6.x alexlebens:renovate/headlamp-0.x alexlebens:renovate/gatus-1.x alexlebens:renovate/ghcr.io-moghtech-komodo-core-1.x alexlebens:renovate/ghcr.io-immich-app-immich-server-1.x alexlebens:renovate/ghcr.io-immich-app-immich-machine-learning-1.x alexlebens:renovate/ghcr.io-actualbudget-actual-25.x alexlebens:renovate/dpage-pgadmin4-9.x alexlebens:main

6 Commits
653c5697fb ... 6c0820fa56

Author SHA1 Message Date
Renovate Bot
6c0820fa56 Update ghcr.io/immich-app/immich-machine-learning Docker tag to v1.139.2
All checks were successful
lint-test-helm / helm-lint (pull_request) Successful in 19s
Details
2025-08-23 02:41:08 +00:00
Renovate Bot
ebefa858f5 Update Helm release loki to v6.37.0 (#1292)
Some checks failed
lint-test-helm / helm-lint (push) Successful in 13s
Details
renovate / renovate (push) Has been cancelled
Details 
Reviewed-on: #1292
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
 2025-08-23 02:40:02 +00:00
Renovate Bot
a206eb6359 Update prometheus-operator-crds Docker tag to v23 (#1284)
Some checks failed
lint-test-helm / helm-lint (push) Successful in 10s
Details
renovate / renovate (push) Has been cancelled
Details 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [prometheus-operator-crds](https://github.com/prometheus-community/helm-charts) | major | `22.0.2` -> `23.0.0` |

---

### Release Notes

<details>
<summary>prometheus-community/helm-charts (prometheus-operator-crds)</summary>

### [`v23.0.0`](https://github.com/prometheus-community/helm-charts/releases/tag/prometheus-operator-crds-23.0.0)

[Compare Source](https://github.com/prometheus-community/helm-charts/compare/prometheus-operator-crds-22.0.2...prometheus-operator-crds-23.0.0)

A Helm chart that collects custom resource definitions (CRDs) from the Prometheus Operator, allowing for seamless integration with GitOps tools

#### What's Changed

- \[prometheus-operator-crds] Update dependency prometheus-operator/prometheus-operator to v0.85.0 by [@&#8203;renovate](https://github.com/renovate)\[bot] in https://github.com/prometheus-community/helm-charts/pull/6075
- \[prometheus-snmp-exporter] Update quay.io/prometheus-operator/prometheus-config-reloader Docker tag to v0.85.0 by [@&#8203;renovate](https://github.com/renovate)\[bot] in https://github.com/prometheus-community/helm-charts/pull/6076

**Full Changelog**: https://github.com/prometheus-community/helm-charts/compare/prometheus-operator-admission-webhook-0.30.0...prometheus-operator-crds-23.0.0

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4zNS4wIiwidXBkYXRlZEluVmVyIjoiNDEuMzUuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=-->

Reviewed-on: #1284
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
 2025-08-23 02:39:51 +00:00
Renovate Bot
983ebb5146 Update dpage/pgadmin4 Docker tag to v9.7 (#1285)
Some checks failed
lint-test-helm / helm-lint (push) Successful in 10s
Details
renovate / renovate (push) Has been cancelled
Details 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| dpage/pgadmin4 | minor | `9.6` -> `9.7` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4zNS4xIiwidXBkYXRlZEluVmVyIjoiNDEuMzUuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=-->

Reviewed-on: #1285
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
 2025-08-23 02:39:33 +00:00
Renovate Bot
f3deed90f5 Update Helm release rook-ceph to v1.18.0 (#1280)
Some checks failed
lint-test-helm / helm-lint (push) Successful in 10s
Details
renovate / renovate (push) Has been cancelled
Details 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [rook-ceph](https://github.com/rook/rook) | minor | `v1.17.8` -> `v1.18.0` |

---

### Release Notes

<details>
<summary>rook/rook (rook-ceph)</summary>

### [`v1.18.0`](https://github.com/rook/rook/releases/tag/v1.18.0)

[Compare Source](https://github.com/rook/rook/compare/v1.17.8...v1.18.0)

#### Upgrade Guide

To upgrade from previous versions of Rook, see the [Rook upgrade guide](https://rook.github.io/docs/rook/v1.18/Upgrade/rook-upgrade/).

#### Breaking Changes

- Kubernetes v1.29 is now the minimum version supported by Rook through the soon-to-be K8s release v1.34.
- Helm versions 3.13 and newer are supported. Previously, only the latest version of helm was tested and the docs stated only version 3.x of helm as a prerequisite. Now rook supports the six most recent minor versions of helm along with their their patch updates.
- Rook now validates node topology during CephCluster creation to prevent misconfigured CRUSH hierarchies for OSDs. If child labels like `topology.rook.io/rack` are duplicated across zones, cluster creation will fail. The check applies only to new clusters without OSDs. Clusters with existing OSDs will only log a warning and continue. If the checks are invalid in your topology, they can be suppressed by setting `ROOK_SKIP_OSD_TOPOLOGY_CHECK=true` in the `rook-ceph-operator-config` configmap.

#### Features

- The Ceph CSI operator is now the default and recommended component for configuring CSI drivers for RBD, CephFS, and NFS volumes. The CSI operator has been factored out of Rook to run independently to manage the Ceph-CSI driver. 
  - During the upgrade and throughout the v1.18.x releases, Rook will automatically convert any Rook CSI settings to the new CSI operator CRs. This transition is expected to be completely transparent. In the future v1.19 release, Rook will relinquish direct control of these settings so advanced users can have more flexibility when configuring the CSI drivers. At that time, we will have a guide on configuring these new Ceph CSI operator CRs directly.
  - During install, as mentioned in the [Quickstart Guide](https://rook.io/docs/rook/latest-release/Getting-Started/quickstart/#deploy-the-rook-operator), there is a new manifest to be created: csi-operator.yaml
  - If installing with the helm chart, the Ceph CSI operator will automatically be installed by default with the new helm setting `csi.rookUseCsiOperator` in the rook-ceph chart.
  - If a blocking issue is found, the previous CSI driver can be re-enabled by setting `ROOK_USE_CSI_OPERATOR: false` in operator.yaml or by applying the helm setting `csi.rookUseCsiOperator: false`.
- [Ceph CSI v3.15](https://github.com/ceph/ceph-csi/releases/tag/v3.15.0) has a range of features and improvements for the RBD, CephFS, and NFS drivers. This release is supported both by the Ceph CSI operator and Rook's direct mode of configuration. Starting in the next release (at the end of the year), the Ceph CSI operator will be required to configure the CSI driver.
- [CephX key rotation](https://rook.io/docs/rook/v1.18/Storage-Configuration/Advanced/cephx-key-rotation/?h=cephx) is now available as an **experimental** feature for the CephX authentication keys used by Ceph daemons and clients. Users will begin to see new cephx status items on some Rook resources in newly-deployed Rook clusters. Users can also find `spec.security.cephx` settings that allow initiating CephX key rotation for various Ceph components. Full documentation for key rotation can be found [here](https://rook.io/docs/rook/v1.18/Storage-Configuration/Advanced/cephx-key-rotation/?h=cephx).
  - Ceph version v19.2.3+ is required for key rotation.
  - The Ceph admin and mon keys cannot yet be rotated. Implementation is still in progress while in experimental mode.
- Add support for specifying the clusterID in the [CephBlockPoolRadosNamespace](https://rook.io/docs/rook/v1.18/CRDs/Block-Storage/ceph-block-pool-rados-namespace-crd/#creating-a-storage-class) and the [CephFilesystemSubVolumeGroup](https://rook.io/docs/rook/v1.18/CRDs/Shared-Filesystem/ceph-fs-subvolumegroup-crd/#create-a-storage-class-for-the-subvolume-group) CR.
- When a mon is being [failed over](https://rook.io/docs/rook/latest-release/Storage-Configuration/Advanced/ceph-mon-health/#failing-over-a-monitor), if the assigned node no longer exists, the mon is failed over immediately instead of waiting for a
  20 minute timeout.
- Support for Ceph Tentacle v20 will be available as soon as it is released.

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xLjMiLCJ1cGRhdGVkSW5WZXIiOiI0MS4xLjMiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImNoYXJ0Il19-->

Reviewed-on: #1280
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
 2025-08-23 02:39:18 +00:00
Renovate Bot
fae4286aa7 Update Helm release authentik to v2025.8.0 (#1278)
Some checks failed
lint-test-helm / helm-lint (push) Successful in 11s
Details
renovate / renovate (push) Has been cancelled
Details 
This PR contains the following updates:

| Package | Update | Change | Pending |
|---|---|---|---|
| [authentik](https://goauthentik.io) ([source](https://github.com/goauthentik/helm)) | minor | `2025.6.4` -> `2025.8.0` | `2025.8.1` |

---

### Release Notes

<details>
<summary>goauthentik/helm (authentik)</summary>

### [`v2025.8.0`](https://github.com/goauthentik/helm/releases/tag/authentik-2025.8.0)

[Compare Source](https://github.com/goauthentik/helm/compare/authentik-2025.6.4...authentik-2025.8.0)

authentik is an open-source Identity Provider focused on flexibility and versatility

See https://docs.goauthentik.io/releases/2025.8/

#### What's Changed

- charts/authentik: fix specifying multiple routes by [@&#8203;Javex](https://github.com/Javex) in https://github.com/goauthentik/helm/pull/372
- charts/authentik: Fix removed whitespace for additionalObjects by [@&#8203;Javex](https://github.com/Javex) in https://github.com/goauthentik/helm/pull/373
- charts/authentik: increase default probe timeouts from 1 to 3s by [@&#8203;rissson](https://github.com/rissson) in https://github.com/goauthentik/helm/pull/376
- chore(deps): update actions/checkout action to v5 by [@&#8203;renovate](https://github.com/renovate)\[bot] in https://github.com/goauthentik/helm/pull/379
- README: generate versions directly by [@&#8203;rissson](https://github.com/rissson) in https://github.com/goauthentik/helm/pull/380
- chore(deps): update postgresql docker tag to v16.7.26 by [@&#8203;renovate](https://github.com/renovate)\[bot] in https://github.com/goauthentik/helm/pull/360
- chore(deps): update ghcr.io/maxmind/geoipupdate docker tag to v7.1.1 by [@&#8203;renovate](https://github.com/renovate)\[bot] in https://github.com/goauthentik/helm/pull/368
- charts/authentik: use dramatiq metrics by [@&#8203;rissson](https://github.com/rissson) in https://github.com/goauthentik/helm/pull/384
- chore(deps): update redis docker tag to v22 by [@&#8203;renovate](https://github.com/renovate)\[bot] in https://github.com/goauthentik/helm/pull/378
- charts/authentik: use docker library images by [@&#8203;rissson](https://github.com/rissson) in https://github.com/goauthentik/helm/pull/385
- charts/authentik: bump to 2025.8.0 by [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] in https://github.com/goauthentik/helm/pull/386

#### New Contributors

- [@&#8203;Javex](https://github.com/Javex) made their first contribution in https://github.com/goauthentik/helm/pull/372
- [@&#8203;authentik-automation](https://github.com/authentik-automation)\[bot] made their first contribution in https://github.com/goauthentik/helm/pull/386

**Full Changelog**: https://github.com/goauthentik/helm/compare/authentik-2025.6.4...authentik-2025.8.0

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4zNS4xIiwidXBkYXRlZEluVmVyIjoiNDEuMzUuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiY2hhcnQiXX0=-->

Reviewed-on: #1278
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
 2025-08-23 02:38:25 +00:00
5 changed files with 5 additions and 5 deletions
Expand all files Collapse all files

2
clusters/cl01tl/monitoring/loki/Chart.yaml
View File

@@ -16,7 +16,7 @@ maintainers:
- name: alexlebens
dependencies:
- name: loki
version: 6.36.1
version: 6.37.0
repository: https://grafana.github.io/helm-charts
- name: promtail
version: 6.17.0

2
clusters/cl01tl/platform/authentik/Chart.yaml
View File

@@ -21,7 +21,7 @@ maintainers:
- name: alexlebens
dependencies:
- name: authentik
version: 2025.6.4
version: 2025.8.0
repository: https://charts.goauthentik.io/
- name: cloudflared
alias: cloudflared

2
clusters/cl01tl/standalone/prometheus-operator-crds/Chart.yaml
View File

@@ -15,7 +15,7 @@ maintainers:
- name: alexlebens
dependencies:
- name: prometheus-operator-crds
version: 22.0.2
version: 23.0.0
repository: oci://ghcr.io/prometheus-community/charts
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/prometheus.png
appVersion: v0.82.0

2
clusters/cl01tl/storage/pgadmin/values.yaml
View File

@@ -28,7 +28,7 @@ pgadmin4:
runAsGroup: 5050
image:
repository: dpage/pgadmin4
tag: "9.6"
tag: "9.7"
pullPolicy: IfNotPresent
env:
- name: PGADMIN_CONFIG_ENHANCED_COOKIE_PROTECTION

2
clusters/cl01tl/storage/rook-ceph/Chart.yaml
View File

@@ -16,7 +16,7 @@ maintainers:
- name: alexlebens
dependencies:
- name: rook-ceph
version: v1.17.8
version: v1.18.0
repository: https://charts.rook.io/release
- name: rook-ceph-cluster
version: v1.17.8