Update php Docker tag to v8.5.0

.gitea/workflows/render-manifests.yaml

@@ -8,12 +8,14 @@ on:
       - "clusters/**"
       - ! "clusters/*/archive"
 
+  workflow_dispatch:
+
+env:
+  CLUSTERS: cl01tl
+
 jobs:
   render-manifests-helm:
     runs-on: ubuntu-js
-    permissions:
-      contents: write
-      pull-requests: write
     steps:
       - name: Checkout
         uses: actions/checkout@v6
@@ -24,38 +26,57 @@ jobs:
         uses: azure/setup-helm@v4
         with:
           token: ${{ secrets.GITEA_TOKEN }}
-          version: latest
+          version: v3.17.2 # Pending https://github.com/helm/helm/pull/30743
 
       - name: Render Helm Manifests
-        env:
-          CLUSTERS: cl01tl
         run: |
           for cluster in $CLUSTERS; do
-            mkdir clusters/$CLUSTER/manifests
+            mkdir -p ${{ gitea.workspace }}/clusters/$cluster/manifests
 
-            for chart_path in clusters/$CLUSTER/helm/; do
+            for chart_path in ${{ gitea.workspace }}/clusters/$cluster/helm/*; do
-              chart_name=$(basename "$chart")
+              chart_name=$(basename "$chart_path")
 
-              echo "--- Rendering chart: $chart_name ---"
+              echo ">> Rendering chart: $chart_name"
 
               if [ -f "$chart_path/Chart.yaml" ]; then
-                  OUTPUT_FILE="clusters/$CLUSTER/manifests/$chart_name.yaml"
+                  mkdir -p ${{ gitea.workspace }}/clusters/$cluster/manifests/$chart_name
+                  OUTPUT_FILE="${{ gitea.workspace }}/clusters/$cluster/manifests/$chart_name/$chart_name.yaml"
 
-                  helm template "$chart_name" "$chart" --namespace "$chart_name" > "$OUTPUT_FILE"
+                  cd $chart_path
 
-                  echo "Manifests for $chart_name rendered to $OUTPUT_FILE"
+                  echo ""
+                  echo ">> Building helm dependency ..."
+                  helm dependency build
+
+                  echo ""
+                  echo ">> Linting helm ..."
+                  helm lint --namespace "$chart_name" --with-subcharts
+
+                  echo ""
+                  echo ">> Rendering templates ..."
+                  helm template "$chart_name" ./ --namespace "$chart_name" --include-crds > "$OUTPUT_FILE"
+
+                  echo ""
+                  echo ">> Manifests for $chart_name rendered to $OUTPUT_FILE"
+                  echo ""
               else
-                  echo "Directory $chart_path does not contain a Chart.yaml. Skipping ..."
+                  echo ""
+                  echo ">> Directory $chart_path does not contain a Chart.yaml. Skipping ..."
+                  echo ""
               fi
             done
           done
 
       - name: Create Pull Request
+        id: pull-request
         uses: peter-evans/create-pull-request@v7
         with:
-          token: ${{ secrets.GITEA_TOKEN }}
+          token: ${{ secrets.BOT_TOKEN_MANIFEST }}
+          committer: gitea-bot <gitea-bot@alexlebens.net>
+          author: gitea-bot <gitea-bot@alexlebens.net>
           commit-message: "chore: Update manifests after chart change"
           branch: auto/update-manifests
+          branch-suffix: timestamp
           base: manifests
           title: "Manifest Update: App Changes"
           body: |
@@ -63,19 +84,23 @@ jobs:
 
             * Triggered by workflow run ${{ github.run_id }}
             * Review the `files changed` tab for the full YAML diff.
-          add-paths: "clusters/*/rendered-manifests/"
+          labels: |
+            manifests
+            automated
+          add-paths: |
+            clusters/cl01tl/manifests/*
 
-      - name: ntfy Success
+      - name: ntfy Created
         uses: niniyas/ntfy-action@master
-        if: success()
+        if: steps.pull-request.outputs.pull-request-operation == 'created'
         with:
           url: "${{ secrets.NTFY_URL }}"
           topic: "${{ secrets.NTFY_TOPIC }}"
-          title: "Manifest Render Success - Infrastructure"
+          title: "Manifest Render PR Created - Infrastructure"
           priority: 3
           headers: '{"Authorization": "Bearer ${{ secrets.NTFY_CRED }}"}'
           tags: action,successfully,completed
-          details: "Manifest rendering for Infrastructure has succeeded"
+          details: "Manifest rendering for Infrastructure has created PR ${{ steps.pull-request.outputs.pull-request-number }}!"
           icon: "https://cdn.jsdelivr.net/gh/selfhst/icons/png/gitea.png"
 
       - name: ntfy Failed

clusters/cl01tl/monitoring/shelly-plug/values.yaml

@@ -36,7 +36,7 @@ shelly-plug:
         main:
           image:
             repository: php
-            tag: 8.4.15-apache-bookworm
+            tag: 8.5.0-apache-bookworm
             pullPolicy: IfNotPresent
           env:
             - name: SHELLY_HOSTNAME

clusters/cl01tl/platform/qbittorrent/values.yaml

@@ -28,7 +28,7 @@ qbittorrent:
         qbittorrent:
           image:
             repository: ghcr.io/linuxserver/qbittorrent
-            tag: 5.1.4@sha256:26a08cd60d81e632aba8947b2c64dfd5f870a5f4a837ec4abedf2e1d174df891
+            tag: 5.1.4@sha256:a2eedc99b4876916943bd33e7c415efc448f6b514aa39b4f98c1e6472a717301
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/storage/whodb/values.yaml

@@ -8,7 +8,7 @@ whodb:
         main:
           image:
             repository: clidey/whodb
-            tag: 0.77.0
+            tag: 0.78.0
             pullPolicy: IfNotPresent
           env:
             - name: WHODB_OLLAMA_HOST