Update Helm release gitea to v12

clusters/cl01tl/applications/lidarr/values.yaml

@@ -24,6 +24,23 @@ lidarr:
               value: 1000
             - name: PGID
               value: 1000
+          probes:
+            liveness:
+              enabled: true
+              custom: true
+              spec:
+                exec:
+                  command:
+                  - /usr/bin/env
+                  - bash
+                  - -c
+                  - curl --fail localhost:8686/api/v1/system/status?apiKey=`IFS=\> && while
+                    read -d \< E C; do if [[ $E = "ApiKey" ]]; then echo $C; fi; done < /config/config.xml`
+                failureThreshold: 5
+                initialDelaySeconds: 60
+                periodSeconds: 10
+                successThreshold: 1
+                timeoutSeconds: 10
           resources:
             requests:
               cpu: 100m

clusters/cl01tl/applications/prowlarr/values.yaml

@@ -25,6 +25,23 @@ prowlarr:
           env:
             - name: TZ
               value: US/Central
+          probes:
+            liveness:
+              enabled: true
+              custom: true
+              spec:
+                exec:
+                  command:
+                  - /usr/bin/env
+                  - bash
+                  - -c
+                  - curl --fail localhost:9696/api/v1/system/status?apiKey=`IFS=\> && while
+                    read -d \< E C; do if [[ $E = "ApiKey" ]]; then echo $C; fi; done < /config/config.xml`
+                failureThreshold: 5
+                initialDelaySeconds: 60
+                periodSeconds: 10
+                successThreshold: 1
+                timeoutSeconds: 10
           resources:
             requests:
               cpu: 10m

clusters/cl01tl/applications/radarr-4k/values.yaml

@@ -24,6 +24,23 @@ radarr-4k:
               value: 1000
             - name: PGID
               value: 1000
+          probes:
+            liveness:
+              enabled: true
+              custom: true
+              spec:
+                exec:
+                  command:
+                  - /usr/bin/env
+                  - bash
+                  - -c
+                  - curl --fail localhost:7878/api/v1/system/status?apiKey=`IFS=\> && while
+                    read -d \< E C; do if [[ $E = "ApiKey" ]]; then echo $C; fi; done < /config/config.xml`
+                failureThreshold: 5
+                initialDelaySeconds: 60
+                periodSeconds: 10
+                successThreshold: 1
+                timeoutSeconds: 10
           resources:
             requests:
               cpu: 100m

clusters/cl01tl/applications/radarr-anime/values.yaml

@@ -22,6 +22,23 @@ radarr-anime:
               value: 1000
             - name: PGID
               value: 1000
+          probes:
+            liveness:
+              enabled: true
+              custom: true
+              spec:
+                exec:
+                  command:
+                  - /usr/bin/env
+                  - bash
+                  - -c
+                  - curl --fail localhost:7878/api/v1/system/status?apiKey=`IFS=\> && while
+                    read -d \< E C; do if [[ $E = "ApiKey" ]]; then echo $C; fi; done < /config/config.xml`
+                failureThreshold: 5
+                initialDelaySeconds: 60
+                periodSeconds: 10
+                successThreshold: 1
+                timeoutSeconds: 10
           resources:
             requests:
               cpu: 10m

clusters/cl01tl/applications/radarr-standup/values.yaml

@@ -22,6 +22,23 @@ radarr-standup:
               value: 1000
             - name: PGID
               value: 1000
+          probes:
+            liveness:
+              enabled: true
+              custom: true
+              spec:
+                exec:
+                  command:
+                  - /usr/bin/env
+                  - bash
+                  - -c
+                  - curl --fail localhost:7878/api/v1/system/status?apiKey=`IFS=\> && while
+                    read -d \< E C; do if [[ $E = "ApiKey" ]]; then echo $C; fi; done < /config/config.xml`
+                failureThreshold: 5
+                initialDelaySeconds: 60
+                periodSeconds: 10
+                successThreshold: 1
+                timeoutSeconds: 10
           resources:
             requests:
               cpu: 10m

clusters/cl01tl/applications/radarr/values.yaml

@@ -24,6 +24,23 @@ radarr:
               value: 1000
             - name: PGID
               value: 1000
+          probes:
+            liveness:
+              enabled: true
+              custom: true
+              spec:
+                exec:
+                  command:
+                  - /usr/bin/env
+                  - bash
+                  - -c
+                  - curl --fail localhost:7878/api/v1/system/status?apiKey=`IFS=\> && while
+                    read -d \< E C; do if [[ $E = "ApiKey" ]]; then echo $C; fi; done < /config/config.xml`
+                failureThreshold: 5
+                initialDelaySeconds: 60
+                periodSeconds: 10
+                successThreshold: 1
+                timeoutSeconds: 10
           resources:
             requests:
               cpu: 100m

clusters/cl01tl/applications/roundcube/Chart.yaml

@@ -18,7 +18,7 @@ dependencies:
   - name: app-template
     alias: roundcube
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.0.1
+    version: 3.7.3
   - name: postgres-cluster
     alias: postgres-17-cluster
     version: 5.1.0

clusters/cl01tl/applications/roundcube/templates/external-secret.yaml

@@ -4,8 +4,11 @@ metadata:
   name: roundcube-key-secret
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: roundcube-key-secret
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/version: {{ .Chart.AppVersion }}
+    app.kubernetes.io/component: web
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
@@ -26,8 +29,11 @@ metadata:
   name: roundcube-data-backup-secret
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: roundcube-data-backup-secret
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/version: {{ .Chart.AppVersion }}
+    app.kubernetes.io/component: backup
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
@@ -82,8 +88,11 @@ metadata:
   name: roundcube-postgresql-17-cluster-backup-secret
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: roundcube-postgresql-17-cluster-backup-secret
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/version: {{ .Chart.AppVersion }}
+    app.kubernetes.io/component: database
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   secretStoreRef:
     kind: ClusterSecretStore

clusters/cl01tl/applications/roundcube/templates/http-route.yaml

@@ -4,8 +4,11 @@ metadata:
   name: http-route-mail
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: http-route-mail
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/version: {{ .Chart.AppVersion }}
+    app.kubernetes.io/component: web
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   parentRefs:
     - group: gateway.networking.k8s.io

clusters/cl01tl/applications/roundcube/templates/replication-source.yaml

@@ -4,8 +4,11 @@ metadata:
   name: roundcube-data-backup-source
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: roundcube-data-backup-source
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/version: {{ .Chart.AppVersion }}
+    app.kubernetes.io/component: backup
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   sourcePVC: roundcube-data
   trigger:

clusters/cl01tl/applications/roundcube/values.yaml

@@ -53,7 +53,7 @@ roundcube:
               value: archive,zipdownload,newmail_notifier
           resources:
             requests:
-              cpu: 10m
+              cpu: 100m
               memory: 256Mi
         nginx:
           image:
@@ -129,6 +129,8 @@ roundcube:
             requests:
               cpu: 100m
               memory: 128Mi
+  serviceAccount:
+    create: true
   configMaps:
     config:
       enabled: true
@@ -174,7 +176,6 @@ roundcube:
           protocol: HTTP
   persistence:
     data:
-      forceRename: roundcube-data
       storageClass: ceph-block
       accessMode: ReadWriteOnce
       size: 5Gi

clusters/cl01tl/applications/searxng/Chart.yaml

@@ -17,7 +17,7 @@ dependencies:
   - name: app-template
     alias: searxng
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.0.1
+    version: 3.7.3
   - name: valkey
     version: 3.0.6
     repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts

clusters/cl01tl/applications/searxng/templates/external-secret.yaml

@@ -4,8 +4,11 @@ metadata:
   name: searxng-api-config-secret
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: searxng-config-secret
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/version: {{ .Chart.AppVersion }}
+    app.kubernetes.io/component: web
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
@@ -33,8 +36,11 @@ metadata:
   name: searxng-browser-data-backup-secret
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: searxng-browser-data-backup-secret
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/version: {{ .Chart.AppVersion }}
+    app.kubernetes.io/component: backup
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   secretStoreRef:
     kind: ClusterSecretStore

clusters/cl01tl/applications/searxng/templates/http-route.yaml

@@ -4,8 +4,11 @@ metadata:
   name: http-route-searxng
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: http-route-searxng
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/version: {{ .Chart.AppVersion }}
+    app.kubernetes.io/component: web
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   parentRefs:
     - group: gateway.networking.k8s.io

clusters/cl01tl/applications/searxng/templates/replication-source.yaml

@@ -4,8 +4,11 @@ metadata:
   name: searxng-browser-data-backup-source
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: searxng-browser-data-backup-source
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/version: {{ .Chart.AppVersion }}
+    app.kubernetes.io/component: backup
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   sourcePVC: searxng-browser-data
   trigger:

clusters/cl01tl/applications/searxng/values.yaml

@@ -62,6 +62,8 @@ searxng:
             requests:
               cpu: 10m
               memory: 256Mi
+  serviceAccount:
+    create: true
   service:
     api:
       controller: api

clusters/cl01tl/applications/site-profile/Chart.yaml

@@ -19,10 +19,10 @@ dependencies:
   - name: app-template
     alias: site-profile
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.0.1
+    version: 3.7.3
   - name: cloudflared
     alias: cloudflared-site
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.15.0
+    version: 1.14.8
 icon: https://d21zlbwtcn424f.cloudfront.net/icon_white.png
 appVersion: 0.6.6

clusters/cl01tl/applications/site-profile/templates/external-secret.yaml

@@ -4,8 +4,11 @@ metadata:
   name: site-profile-cloudflared-api-secret
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: site-profile-cloudflared-api-secret
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/version: {{ .Chart.AppVersion }}
+    app.kubernetes.io/component: web
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   secretStoreRef:
     kind: ClusterSecretStore

clusters/cl01tl/applications/site-profile/values.yaml

@@ -17,6 +17,8 @@ site-profile:
             requests:
               cpu: 10m
               memory: 128Mi
+  serviceAccount:
+    create: true
   service:
     main:
       controller: main

clusters/cl01tl/applications/slskd/Chart.yaml

@@ -20,6 +20,6 @@ dependencies:
   - name: app-template
     alias: slskd
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.0.1
+    version: 3.7.3
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/slskd.png
 appVersion: 0.22.5

clusters/cl01tl/applications/slskd/templates/external-secret.yaml

@@ -4,8 +4,11 @@ metadata:
   name: slskd-config-secret
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: slskd-config-secret
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/version: {{ .Chart.AppVersion }}
+    app.kubernetes.io/component: web
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
@@ -26,8 +29,11 @@ metadata:
   name: soularr-config-secret
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: soularr-config-secret
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/version: {{ .Chart.AppVersion }}
+    app.kubernetes.io/component: web
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
@@ -48,8 +54,11 @@ metadata:
   name: slskd-wireguard-conf
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: slskd-wireguard-conf
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/version: {{ .Chart.AppVersion }}
+    app.kubernetes.io/component: web
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   secretStoreRef:
     kind: ClusterSecretStore

clusters/cl01tl/applications/slskd/templates/http-route.yaml

@@ -4,8 +4,11 @@ metadata:
   name: http-route-slskd
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: http-route-slskd
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/version: {{ .Chart.AppVersion }}
+    app.kubernetes.io/component: web
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   parentRefs:
     - group: gateway.networking.k8s.io

clusters/cl01tl/applications/slskd/templates/persistent-volume-claim.yaml

@@ -4,8 +4,11 @@ metadata:
   name: slskd-nfs-storage
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: slskd-nfs-storage
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/version: {{ .Chart.AppVersion }}
+    app.kubernetes.io/component: storage
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   volumeName: slskd-nfs-storage
   storageClassName: nfs-client

clusters/cl01tl/applications/slskd/templates/persistent-volume.yaml

@@ -4,8 +4,11 @@ metadata:
   name: slskd-nfs-storage
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: slskd-nfs-storage
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/version: {{ .Chart.AppVersion }}
+    app.kubernetes.io/component: storage
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   persistentVolumeReclaimPolicy: Retain
   storageClassName: nfs-client

clusters/cl01tl/applications/slskd/templates/service-monitor.yaml

@@ -4,8 +4,11 @@ metadata:
   name: slskd
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: slskd
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/version: {{ .Chart.AppVersion }}
+    app.kubernetes.io/component: metrics
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   selector:
     matchLabels:

clusters/cl01tl/applications/slskd/values.yaml

@@ -15,7 +15,7 @@ slskd:
             privileged: True
           resources:
             requests:
-              cpu: 10m
+              cpu: 100m
               memory: 128Mi
           command:
             - /bin/sh
@@ -69,7 +69,7 @@ slskd:
             - name: DOT
               value: "off"
           securityContext:
-            privileged: true
+            privileged: True
             capabilities:
               add:
                 - NET_ADMIN
@@ -107,8 +107,10 @@ slskd:
               value: 300
           resources:
             requests:
-              cpu: 10m
+              cpu: 100m
               memory: 256Mi
+  serviceAccount:
+    create: true
   service:
     main:
       controller: main