8 Commits

Author SHA1 Message Date
cf4b20c68d chore(deps): update helm release cilium to v1.19.0
All checks were successful
lint-test-helm / lint-helm (pull_request) Successful in 17s
2026-02-06 15:28:29 +00:00
e3eee74690 chore(deps): update dependency prometheus-operator/prometheus-operator to v0.89.0 (#3775)
All checks were successful
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 29s
renovate / renovate (push) Successful in 1m55s
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [prometheus-operator/prometheus-operator](https://github.com/prometheus-operator/prometheus-operator) | minor | `v0.88.1` → `v0.89.0` |

---

### Release Notes

<details>
<summary>prometheus-operator/prometheus-operator (prometheus-operator/prometheus-operator)</summary>

### [`v0.89.0`](https://github.com/prometheus-operator/prometheus-operator/releases/tag/v0.89.0): 0.89.0 / 2026-02-05

[Compare Source](https://github.com/prometheus-operator/prometheus-operator/compare/v0.88.1...v0.89.0)

- \[ENHANCEMENT] Add `hostNetwork` field to the `Alertmanager` CRD. [#&#8203;8281](https://github.com/prometheus-operator/prometheus-operator/issues/8281)
- \[ENHANCEMENT] Add the `crds` and `full-crds` commands to the operator's binary. [#&#8203;8251](https://github.com/prometheus-operator/prometheus-operator/issues/8251)
- \[ENHANCEMENT] Report deprecated field usage in the `Reconciled` condition type. [#&#8203;8236](https://github.com/prometheus-operator/prometheus-operator/issues/8236)
- \[ENHANCEMENT] Avoid unnecessary reconciliation upon creation of the `ThanosRuler` StatefulSet. [#&#8203;8347](https://github.com/prometheus-operator/prometheus-operator/issues/8347)
- \[ENHANCEMENT] Add `bodySizeLimit` to the ScrapeConfig CRD. [#&#8203;8348](https://github.com/prometheus-operator/prometheus-operator/issues/8348)
- \[ENHANCEMENT] Support `http_headers` field in the Alertmanager Secret. [#&#8203;8357](https://github.com/prometheus-operator/prometheus-operator/issues/8357)
- \[ENHANCEMENT] Add the `-kubelet-http-metrics` flag to enable/disable the HTTP metrics port in the Kubelet endpoint (default=enabled). [#&#8203;8350](https://github.com/prometheus-operator/prometheus-operator/issues/8350)
- \[ENHANCEMENT] Include `operator.prometheus.io/version` annotation in the full version of CRDs. [#&#8203;8279](https://github.com/prometheus-operator/prometheus-operator/issues/8279)
- \[BUGFIX] Validate VictorOps global configuration in the `Alertmanager` CRD. [#&#8203;8020](https://github.com/prometheus-operator/prometheus-operator/issues/8020)
- \[BUGFIX] Validate Jira global configuration in the `Alertmanager` CRD. [#&#8203;8265](https://github.com/prometheus-operator/prometheus-operator/issues/8265)
- \[BUGFIX] Validate VictorOps receiver's URL in the `AlertmanagerConfig` CRD. [#&#8203;8258](https://github.com/prometheus-operator/prometheus-operator/issues/8258)
- \[BUGFIX] Validate Webex receiver's URL in the `AlertmanagerConfig` CRD. [#&#8203;8255](https://github.com/prometheus-operator/prometheus-operator/issues/8255)
- \[BUGFIX] Validate Jira receiver's URL configuration in the `AlertmanagerConfig` CRD. [#&#8203;8230](https://github.com/prometheus-operator/prometheus-operator/issues/8230)
- \[BUGFIX] Validate OpsGenie receiver configuration in the `AlertmanagerConfig` CRD. [#&#8203;8267](https://github.com/prometheus-operator/prometheus-operator/issues/8267)
- \[BUGFIX] Validate WeChat receiver configuration in the `AlertmanagerConfig` CRD. [#&#8203;8271](https://github.com/prometheus-operator/prometheus-operator/issues/8271)
- \[BUGFIX] Validate SNS receiver configuration in the `AlertmanagerConfig` CRD. [#&#8203;8217](https://github.com/prometheus-operator/prometheus-operator/issues/8217)
- \[BUGFIX] Validate Webex global configuration in the `Alertmanager` CRD. [#&#8203;7979](https://github.com/prometheus-operator/prometheus-operator/issues/7979)
- \[BUGFIX] Validate Telegram global configuration in the `Alertmanager` CRD. [#&#8203;8268](https://github.com/prometheus-operator/prometheus-operator/issues/8268)
- \[BUGFIX] Restore statefulset's labels if the creation fails with AlreadyExists. [#&#8203;8343](https://github.com/prometheus-operator/prometheus-operator/issues/8343)
- \[BUGFIX] Fix potential panic due to informer cache races. [#&#8203;8310](https://github.com/prometheus-operator/prometheus-operator/issues/8310)
- \[BUGFIX] Support probers defined with IPv6 addresses in the `Probe` CRD. [#&#8203;8354](https://github.com/prometheus-operator/prometheus-operator/issues/8354)
- \[BUGFIX] Prevent group and repeat intervals with zero duration from breaking Alertmanager. [#&#8203;8126](https://github.com/prometheus-operator/prometheus-operator/issues/8126)
- \[BUGFIX] Propagate all supported RocketChat attributes for `AlertmanagerConfig` CRD. [#&#8203;8016](https://github.com/prometheus-operator/prometheus-operator/issues/8016)
- \[BUGFIX] Add URL validation for WeChat receiver. [#&#8203;8256](https://github.com/prometheus-operator/prometheus-operator/issues/8256)
- \[BUGFIX] Add URL validation for SNS receiver. [#&#8203;8259](https://github.com/prometheus-operator/prometheus-operator/issues/8259)
- \[BUGFIX] Fix GCE service discovery for the `ScrapeConfig` CRD. [#&#8203;8284](https://github.com/prometheus-operator/prometheus-operator/issues/8284)
- \[BUGFIX] Avoid stale conditions in `Alertmanager`, `ThanosRuler`, `Prometheus` and `PrometheusAgent` resources. [#&#8203;8304](https://github.com/prometheus-operator/prometheus-operator/issues/8304)
- \[BUGFIX] Fix race condition when updating rule ConfigMaps. [#&#8203;8290](https://github.com/prometheus-operator/prometheus-operator/issues/8290)
- \[BUGFIX] Fix race condition when patching finalizers. [#&#8203;8323](https://github.com/prometheus-operator/prometheus-operator/issues/8323)
- \[BUGFIX] Reconcile `ScrapeConfig` resources when namespace selection changes. [#&#8203;8334](https://github.com/prometheus-operator/prometheus-operator/issues/8334)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4zLjYiLCJ1cGRhdGVkSW5WZXIiOiI0My4zLjYiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImltYWdlIl19-->

Reviewed-on: https://gitea.alexlebens.dev/alexlebens/infrastructure/pulls/3775
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2026-02-06 15:26:35 +00:00
dd460f87f3 chore(deps): update prometheus-operator-crds docker tag to v27 (#3776)
All checks were successful
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 16s
renovate / renovate (push) Successful in 1m42s
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [prometheus-operator-crds](https://github.com/prometheus-community/helm-charts) | major | `26.0.0` → `27.0.0` |

---

### Release Notes

<details>
<summary>prometheus-community/helm-charts (prometheus-operator-crds)</summary>

### [`v27.0.0`](https://github.com/prometheus-community/helm-charts/releases/tag/prometheus-operator-crds-27.0.0)

[Compare Source](https://github.com/prometheus-community/helm-charts/compare/prometheus-operator-crds-26.0.0...prometheus-operator-crds-27.0.0)

A Helm chart that collects custom resource definitions (CRDs) from the Prometheus Operator, allowing for seamless integration with GitOps tools

#### What's Changed

- \[prometheus-operator-crds] Update dependency prometheus-operator/prometheus-operator to v0.89.0 by [@&#8203;renovate](https://github.com/renovate)\[bot] in [#&#8203;6594](https://github.com/prometheus-community/helm-charts/pull/6594)

**Full Changelog**: <https://github.com/prometheus-community/helm-charts/compare/prometheus-operator-admission-webhook-0.36.0...prometheus-operator-crds-27.0.0>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4zLjYiLCJ1cGRhdGVkSW5WZXIiOiI0My4zLjYiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImltYWdlIl19-->

Reviewed-on: #3776
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2026-02-06 15:09:05 +00:00
f71ca5b8c7 chore(deps): update searxng/searxng:latest docker digest to 670bd10 (#3781)
All checks were successful
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 16s
renovate / renovate (push) Successful in 2m6s
2026-02-06 14:02:17 +00:00
11fa03c933 chore(deps): update searxng/searxng:latest docker digest to 52521b6 (#3779)
All checks were successful
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 29s
renovate / renovate (push) Successful in 2m22s
2026-02-06 12:02:01 +00:00
5d86ac411e chore(deps): update searxng/searxng:latest docker digest to a98ec93 (#3777)
All checks were successful
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 22s
renovate / renovate (push) Successful in 2m1s
2026-02-06 11:02:17 +00:00
60b73c4c75 feat: enable backup
All checks were successful
lint-test-helm / lint-helm (push) Successful in 14s
render-manifests-push / render-manifests-push (push) Successful in 33s
renovate / renovate (push) Successful in 2m16s
2026-02-05 22:57:19 -06:00
8933422e12 feat: store ferret secret, scale
All checks were successful
lint-test-helm / lint-helm (push) Successful in 58s
render-manifests-push / render-manifests-push (push) Successful in 1m47s
renovate / renovate (push) Successful in 2m23s
2026-02-05 22:55:30 -06:00
8 changed files with 28 additions and 26 deletions

View File

@@ -1,6 +1,6 @@
dependencies:
- name: cilium
repository: https://helm.cilium.io/
version: 1.18.6
digest: sha256:8ea328ac238524b5b423e6289f5e25d05ef64e6aa19cfd5de238f1d5dd533e9b
generated: "2026-02-05T12:00:20.15778-06:00"
version: 1.19.0
digest: sha256:d2319facc93cab2a0a137588d8bd93315b52025b3ec86bc89edb0e236a74c814
generated: "2026-02-06T15:28:25.169627502Z"

View File

@@ -15,7 +15,7 @@ maintainers:
- name: alexlebens
dependencies:
- name: cilium
version: 1.18.6
version: 1.19.0
repository: https://helm.cilium.io/
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/cilium.png
# renovate: datasource=github-releases depName=cilium/cilium

View File

@@ -70,3 +70,10 @@ spec:
key: /cl01tl/komodo/ferret
metadataPolicy: None
property: uri
- secretKey: password
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/komodo/ferret
metadataPolicy: None
property: password

View File

@@ -2,7 +2,7 @@ komodo:
controllers:
main:
type: deployment
replicas: 0
replicas: 1
strategy: Recreate
revisionHistoryLimit: 3
containers:
@@ -57,7 +57,7 @@ komodo:
- name: DB_PASSWORD
valueFrom:
secretKeyRef:
name: komodo-postgresql-17-fdb-cluster-app
name: komodo-postgresql-17-fdb-cluster-ferret
key: password
- name: KOMODO_DATABASE_URI
value: mongodb://$(DB_USERNAME):$(DB_PASSWORD)@komodo-ferretdb-2.komodo:27017/komodo
@@ -95,11 +95,15 @@ komodo:
tag: 2.7.0
pullPolicy: IfNotPresent
env:
- name: FERRETDB_POSTGRESQL_URL
- name: DB_USERNAME
value: ferret
- name: DB_PASSWORD
valueFrom:
secretKeyRef:
name: komodo-postgresql-17-fdb-cluster-ferret
key: uri
key: password
- name: FERRETDB_POSTGRESQL_URL
value: postgresql://$(DB_USERNAME):$(DB_PASSWORD)@komodo-postgresql-17-fdb-cluster-rw.komodo.svc.cluster.local:5432/ferretDB
resources:
requests:
cpu: 10m
@@ -170,7 +174,6 @@ postgresql-17-fdb-cluster:
tag: "17-0.106.0-ferretdb-2.5.0"
postgresUID: 999
postgresGID: 999
enableSuperuserAccess: true
postgresql:
parameters:
cron.database_name: 'ferretDB'
@@ -198,15 +201,7 @@ postgresql-17-fdb-cluster:
postInitApplicationSQL:
- CREATE EXTENSION IF NOT EXISTS pg_cron;
- CREATE EXTENSION IF NOT EXISTS documentdb CASCADE;
- ALTER USER ferret WITH PASSWORD '${PASSWORD}';
- GRANT documentdb_admin_role TO ferret;
- GRANT USAGE ON SCHEMA documentdb_core TO ferret;
- GRANT USAGE ON SCHEMA documentdb_api TO ferret;
- GRANT USAGE ON SCHEMA documentdb_core TO pg_monitor;
- GRANT USAGE ON SCHEMA documentdb_api TO pg_monitor;
- GRANT SELECT ON ALL TABLES IN SCHEMA documentdb_core TO pg_monitor;
- GRANT SELECT ON ALL TABLES IN SCHEMA documentdb_api TO pg_monitor;
- GRANT SELECT ON ALL TABLES IN SCHEMA documentdb_api_internal TO pg_monitor;
recovery:
method: objectStore
objectStore:
@@ -233,7 +228,7 @@ postgresql-17-fdb-cluster:
# isWALArchiver: false
scheduledBackups:
- name: live-backup
suspend: true
suspend: false
immediate: true
schedule: "0 0 0 * * *"
backupName: garage-local

View File

@@ -31,4 +31,4 @@ dependencies:
repository: oci://harbor.alexlebens.net/helm-charts
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/prometheus.png
# renovate: datasource=github-releases depName=prometheus-operator/prometheus-operator
appVersion: v0.88.1
appVersion: v0.89.0

View File

@@ -1,6 +1,6 @@
dependencies:
- name: prometheus-operator-crds
repository: oci://ghcr.io/prometheus-community/charts
version: 26.0.0
digest: sha256:fb73bc68bbf8ab128ff7fc641413ce3f004677d351038517ed68f5b39eeafb08
generated: "2026-01-09T20:11:58.398634666Z"
version: 27.0.0
digest: sha256:ab76a45fb53268d4afdad507277c244af11c50344e50a24799182bbd9757258d
generated: "2026-02-06T14:05:22.069162277Z"

View File

@@ -15,8 +15,8 @@ maintainers:
- name: alexlebens
dependencies:
- name: prometheus-operator-crds
version: 26.0.0
version: 27.0.0
repository: oci://ghcr.io/prometheus-community/charts
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/prometheus.png
# renovate: datasource=github-releases depName=prometheus-operator/prometheus-operator
appVersion: v0.88.1
appVersion: v0.89.0

View File

@@ -9,7 +9,7 @@ searxng:
main:
image:
repository: searxng/searxng
tag: latest@sha256:8d77102a0d2c615e88c5184868dc2c32cd361413dbc104abc301f54079fd40a2
tag: latest@sha256:670bd1076097640fc25221bf92a8af7d344503ce17ba3305abedf28e3634e807
pullPolicy: IfNotPresent
env:
- name: SEARXNG_BASE_URL
@@ -39,7 +39,7 @@ searxng:
main:
image:
repository: searxng/searxng
tag: latest@sha256:8d77102a0d2c615e88c5184868dc2c32cd361413dbc104abc301f54079fd40a2
tag: latest@sha256:670bd1076097640fc25221bf92a8af7d344503ce17ba3305abedf28e3634e807
pullPolicy: IfNotPresent
env:
- name: SEARXNG_BASE_URL