chore(deps): update vault to v2

Reviewed-on: #6147

clusters/cl01tl/helm/isponsorblocktv/Chart.yaml

@@ -0,0 +1,22 @@
+apiVersion: v2
+name: isponsorblocktv
+version: 1.0.0
+description: iSponsorBlockTV
+keywords:
+  - isponsorblocktv
+  - purpose
+home: https://docs.alexlebens.dev/applications/isponsorblocktv/
+sources:
+  - https://github.com/dmunozv04/iSponsorBlockTV
+  - https://github.com/dmunozv04/iSponsorBlockTV/pkgs/container/isponsorblocktv
+  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
+maintainers:
+  - name: alexlebens
+dependencies:
+  - name: app-template
+    alias: isponsorblocktv
+    repository: https://bjw-s-labs.github.io/helm-charts/
+    version: 4.6.2
+icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/youtube.png
+# renovate: datasource=github-releases depName=dmunozv04/iSponsorBlockTV
+appVersion: v2.7.0

clusters/cl01tl/helm/isponsorblocktv/templates/_helpers.tpl

@@ -0,0 +1,14 @@
+{{/*
+Common labels
+*/}}
+{{- define "custom.labels" -}}
+{{ include "custom.selectorLabels" $ }}
+{{- end }}
+
+{{/*
+Selector labels
+*/}}
+{{- define "custom.selectorLabels" -}}
+app.kubernetes.io/instance: {{ .Release.Name }}
+app.kubernetes.io/part-of: {{ .Release.Name }}
+{{- end }}

clusters/cl01tl/helm/isponsorblocktv/templates/secret-provider-class.yaml

@@ -0,0 +1,18 @@
+apiVersion: secrets-store.csi.x-k8s.io/v1
+kind: SecretProviderClass
+metadata:
+  name: isponsorblocktv-config
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: isponsorblocktv-config
+    {{- include "custom.labels" . | nindent 4 }}
+spec:
+  provider: openbao
+  parameters:
+    baoAddress: "http://openbao-internal.openbao:8200"
+    roleName: isponsorblocktv
+    objects: |
+      - objectName: config.json
+        fileName: config.json
+        secretPath: secret/data/cl01tl/isponsorblocktv/config
+        secretKey: config.json

clusters/cl01tl/helm/isponsorblocktv/values.yaml

@@ -0,0 +1,37 @@
+isponsorblocktv:
+  controllers:
+    main:
+      type: deployment
+      replicas: 1
+      strategy: Recreate
+      serviceAccount:
+        name: isponsorblocktv
+      containers:
+        main:
+          image:
+            repository: ghcr.io/dmunozv04/isponsorblocktv
+            tag: v2.7.0@sha256:ff292ed53c9208ebfa7da3be7084bd863339d545a799bfefed5092396f5e8b4b
+          resources:
+            requests:
+              cpu: 1m
+              memory: 20Mi
+  serviceAccount:
+    isponsorblocktv:
+      enabled: true
+      staticToken: true
+  persistence:
+    config:
+      type: custom
+      volumeSpec:
+        csi:
+          driver: secrets-store.csi.k8s.io
+          readOnly: true
+          volumeAttributes:
+            secretProviderClass: isponsorblocktv-config
+      advancedMounts:
+        main:
+          main:
+            - path: /app/data/config.json
+              readOnly: true
+              mountPropagation: None
+              subPath: config.json

clusters/cl01tl/helm/lidarr/values.yaml

@@ -14,7 +14,7 @@ lidarr:
         main:
           image:
             repository: ghcr.io/linuxserver/lidarr
-            tag: 3.1.2-nightly@sha256:9ec74111343f3648f2ab9a80931e05f1695622ff5a2587f1f2006e0415322a65
+            tag: 3.1.2-nightly@sha256:d17f32da4e4959255a5725cbd7168df5243386e64ad6ccd558ed30d1b7ddddec
           env:
             - name: TZ
               value: America/Chicago

clusters/cl01tl/helm/searxng/values.yaml

@@ -8,7 +8,7 @@ searxng:
         main:
           image:
             repository: searxng/searxng
-            tag: latest@sha256:0bbe85fb9bebe413a26c0e385c76309d15c91fdb9dc8a6bf01b35b714d0ece43
+            tag: latest@sha256:37c616a774b90fb5df9239eb143f1b11866ddf7b830cd1ebcca6ba11b38cc2bf
           env:
             - name: SEARXNG_BASE_URL
               value: http://searxng-api.searxng:8080
@@ -36,7 +36,7 @@ searxng:
         main:
           image:
             repository: searxng/searxng
-            tag: latest@sha256:0bbe85fb9bebe413a26c0e385c76309d15c91fdb9dc8a6bf01b35b714d0ece43
+            tag: latest@sha256:37c616a774b90fb5df9239eb143f1b11866ddf7b830cd1ebcca6ba11b38cc2bf
           env:
             - name: SEARXNG_BASE_URL
               value: https://searxng.alexlebens.net/

clusters/cl01tl/helm/vault/Chart.yaml

@@ -31,4 +31,4 @@ dependencies:
     version: 4.6.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/hashicorp-vault.png
 # renovate: datasource=github-releases depName=hashicorp/vault
-appVersion: 1.21.4
+appVersion: 2.0.0

clusters/cl01tl/helm/vault/values.yaml

@@ -8,7 +8,7 @@ vault:
     enabled: true
     image:
       repository: hashicorp/vault
-      tag: 1.21.4@sha256:4e33b126a59c0c333b76fb4e894722462659a6bec7c48c9ee8cea56fccfd2569
+      tag: 2.0.0@sha256:e40c741ed95bb271425e3e6ca6c222d620cf8682f6f7a1b1e7c9d49d0aba484b
     updateStrategyType: RollingUpdate
     logLevel: debug
     logFormat: standard
@@ -111,7 +111,7 @@ snapshot:
         snapshot:
           image:
             repository: hashicorp/vault
-            tag: 1.21.4@sha256:4e33b126a59c0c333b76fb4e894722462659a6bec7c48c9ee8cea56fccfd2569
+            tag: 2.0.0@sha256:e40c741ed95bb271425e3e6ca6c222d620cf8682f6f7a1b1e7c9d49d0aba484b
           command:
             - /bin/ash
           args:

hosts/ps10rp/castsponsorskip/compose.yaml

@@ -1,9 +0,0 @@
----
-services:
-    castsponsorskip:
-        image: ghcr.io/gabe565/castsponsorskip:0.8.3@sha256:f556d274aab94c3140058e9f192396bc75e04d8e075769223c1edfc8c4f4daa4
-        container_name: castsponsorskip
-        environment:
-            - TZ=America/Chicago
-        restart: always
-        network_mode: host

hosts/ps10rp/isponsorblocktv/compose.yaml

@@ -1,15 +0,0 @@
----
-services:
-    isponsorblocktv:
-        image: ghcr.io/dmunozv04/isponsorblocktv:v2.7.0@sha256:ff292ed53c9208ebfa7da3be7084bd863339d545a799bfefed5092396f5e8b4b
-        container_name: isponsorblocktv
-        environment:
-            - TZ=America/Chicago
-        restart: always
-        network_mode: host
-        volumes:
-            - data:/app/data
-            - ${PWD}/config.json:/app/data/config.json
-
-volumes:
-    data: