2026-04-03 02:05:14 +00:00
36 changed files with 59 additions and 96 deletions
--- a/clusters/cl01tl/manifests/code-server/Deployment-code-server.yaml
+++ b/clusters/cl01tl/manifests/code-server/Deployment-code-server.yaml
@@ -49,7 +49,7 @@ spec:
          envFrom:
            - secretRef:
                name: codeserver-password-secret
-          image: ghcr.io/linuxserver/code-server:4.112.0-ls325@sha256:a17ee95f4e1b43284fe5dfea99e82c8a26f096534215ff36817fa80161eec220
+          image: ghcr.io/linuxserver/code-server:4.113.0-ls326@sha256:629232bdd99640dd3d514a40c740a9d42dcb808a844005821b2f4be6e6a8b66e
          name: main
          resources:
            requests:
--- a/clusters/cl01tl/manifests/home-assistant/Deployment-home-assistant.yaml
+++ b/clusters/cl01tl/manifests/home-assistant/Deployment-home-assistant.yaml
@@ -49,7 +49,7 @@ spec:
          envFrom:
            - secretRef:
                name: home-assistant-code-server-password-secret
-          image: ghcr.io/linuxserver/code-server:4.112.0-ls325@sha256:a17ee95f4e1b43284fe5dfea99e82c8a26f096534215ff36817fa80161eec220
+          image: ghcr.io/linuxserver/code-server:4.113.0-ls326@sha256:629232bdd99640dd3d514a40c740a9d42dcb808a844005821b2f4be6e6a8b66e
          name: code-server
          volumeMounts:
            - mountPath: /config/home-assistant
--- a/clusters/cl01tl/manifests/kiwix/Deployment-kiwix.yaml
+++ b/clusters/cl01tl/manifests/kiwix/Deployment-kiwix.yaml
@@ -39,13 +39,12 @@ spec:
          env:
            - name: PORT
              value: "8080"
-          image: ghcr.io/kiwix/kiwix-serve:3.8.2
-          imagePullPolicy: IfNotPresent
+          image: ghcr.io/kiwix/kiwix-serve:3.8.2@sha256:acdab28186a66b51bfd4202210c6732931ea95cf41c711148a0c9770b9fcc9e1
          name: main
          resources:
            requests:
-              cpu: 50m
-              memory: 512Mi
+              cpu: 1m
+              memory: 10Mi
          volumeMounts:
            - mountPath: /data
              name: media
--- a/clusters/cl01tl/manifests/kiwix/HTTPRoute-kiwix.yaml
+++ b/clusters/cl01tl/manifests/kiwix/HTTPRoute-kiwix.yaml
@@ -23,7 +23,7 @@ spec:
          name: kiwix
          namespace: kiwix
          port: 80
-          weight: 100
+          weight: 1
      matches:
        - path:
            type: PathPrefix
--- a/clusters/cl01tl/manifests/komodo/Cluster-komodo-postgresql-17-fdb-cluster.yaml
+++ b/clusters/cl01tl/manifests/komodo/Cluster-komodo-postgresql-17-fdb-cluster.yaml
@@ -5,14 +5,14 @@ metadata:
  namespace: komodo
  labels:
    app.kubernetes.io/name: komodo-postgresql-17-fdb-cluster
-    helm.sh/chart: postgresql-17-fdb-cluster-7.10.0
+    helm.sh/chart: postgresql-17-fdb-cluster-7.11.1
    app.kubernetes.io/instance: komodo
    app.kubernetes.io/part-of: komodo
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.1"
    app.kubernetes.io/managed-by: Helm
 spec:
  instances: 3
-  imageName: "ghcr.io/ferretdb/postgres-documentdb:17-0.106.0-ferretdb-2.5.0"
+  imageName: "ghcr.io/ferretdb/postgres-documentdb:17-0.107.0-ferretdb-2.7.0@sha256:2386795ec2aa7ae559304361979f1dc5708d383ee9020ae63dadc2940dfe58f7"
  imagePullPolicy: IfNotPresent
  postgresUID: 999
  postgresGID: 999
@@ -26,8 +26,8 @@ spec:
    limits:
      hugepages-2Mi: 256Mi
    requests:
-      cpu: 100m
-      memory: 256Mi
+      cpu: 20m
+      memory: 80Mi
  affinity:
    enablePodAntiAffinity: true
    topologyKey: kubernetes.io/hostname
--- a/clusters/cl01tl/manifests/komodo/Deployment-komodo-ferretdb-2.yaml
+++ b/clusters/cl01tl/manifests/komodo/Deployment-komodo-ferretdb-2.yaml
@@ -44,10 +44,9 @@ spec:
                  name: komodo-postgresql-17-fdb-cluster-ferret
            - name: FERRETDB_POSTGRESQL_URL
              value: postgresql://$(DB_USERNAME):$(DB_PASSWORD)@komodo-postgresql-17-fdb-cluster-rw.komodo.svc.cluster.local:5432/ferretDB
-          image: ghcr.io/ferretdb/ferretdb:2.7.0
-          imagePullPolicy: IfNotPresent
+          image: ghcr.io/ferretdb/ferretdb:2.7.0@sha256:5706414241eb84f0515512c37b46db0f1b1eac9e5ceb7e4c2523211c184b1985
          name: main
          resources:
            requests:
-              cpu: 10m
-              memory: 128Mi
+              cpu: 1m
+              memory: 20Mi
--- a/clusters/cl01tl/manifests/komodo/Deployment-komodo-main.yaml
+++ b/clusters/cl01tl/manifests/komodo/Deployment-komodo-main.yaml
@@ -68,7 +68,7 @@ spec:
            - name: KOMODO_LOCAL_AUTH
              value: "true"
            - name: KOMODO_ENABLE_NEW_USERS
-              value: "true"
+              value: "false"
            - name: KOMODO_DISABLE_NON_ADMIN_CREATE
              value: "true"
            - name: KOMODO_TRANSPARENT_MODE
@@ -103,12 +103,11 @@ spec:
            - name: KOMODO_OIDC_USE_FULL_EMAIL
              value: "true"
          image: ghcr.io/moghtech/komodo-core:2.1.1@sha256:2bbbb1efd3534211dac35091e0818f10398d9bdd98fdbf0ddef09e9e0b5ec4ba
-          imagePullPolicy: IfNotPresent
          name: main
          resources:
            requests:
              cpu: 10m
-              memory: 128Mi
+              memory: 80Mi
          volumeMounts:
            - mountPath: /repo-cache
              name: cache
--- a/clusters/cl01tl/manifests/komodo/ExternalSecret-komodo-postgresql-17-fdb-backup-garage-local-secret.yaml
+++ b/clusters/cl01tl/manifests/komodo/ExternalSecret-komodo-postgresql-17-fdb-backup-garage-local-secret.yaml
@@ -5,10 +5,10 @@ metadata:
  namespace: komodo
  labels:
    app.kubernetes.io/name: komodo-postgresql-17-fdb-backup-garage-local-secret
-    helm.sh/chart: postgresql-17-fdb-cluster-7.10.0
+    helm.sh/chart: postgresql-17-fdb-cluster-7.11.1
    app.kubernetes.io/instance: komodo
    app.kubernetes.io/part-of: komodo
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.1"
    app.kubernetes.io/managed-by: Helm
 spec:
  secretStoreRef:
--- a/clusters/cl01tl/manifests/komodo/ExternalSecret-komodo-postgresql-17-fdb-cluster-ferret.yaml
+++ b/clusters/cl01tl/manifests/komodo/ExternalSecret-komodo-postgresql-17-fdb-cluster-ferret.yaml
@@ -14,15 +14,9 @@ spec:
  data:
    - secretKey: uri
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/komodo/ferret
-        metadataPolicy: None
        property: uri
    - secretKey: password
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/komodo/ferret
-        metadataPolicy: None
        property: password
--- a/clusters/cl01tl/manifests/komodo/ExternalSecret-komodo-postgresql-17-fdb-recovery-secret.yaml
+++ b/clusters/cl01tl/manifests/komodo/ExternalSecret-komodo-postgresql-17-fdb-recovery-secret.yaml
@@ -4,10 +4,10 @@ metadata:
  name: komodo-postgresql-17-fdb-recovery-secret
  namespace: komodo
  labels:
-    helm.sh/chart: postgresql-17-fdb-cluster-7.10.0
+    helm.sh/chart: postgresql-17-fdb-cluster-7.11.1
    app.kubernetes.io/instance: komodo
    app.kubernetes.io/part-of: komodo
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.1"
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: komodo-postgresql-17-fdb-recovery-secret
 spec:
--- a/clusters/cl01tl/manifests/komodo/ExternalSecret-komodo-secret.yaml
+++ b/clusters/cl01tl/manifests/komodo/ExternalSecret-komodo-secret.yaml
@@ -14,36 +14,21 @@ spec:
  data:
    - secretKey: passkey
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/komodo/config
-        metadataPolicy: None
        property: passkey
    - secretKey: jwt
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/komodo/config
-        metadataPolicy: None
        property: jwt
    - secretKey: webhook
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/komodo/config
-        metadataPolicy: None
        property: webhook
    - secretKey: oidc-client-id
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /authentik/oidc/komodo
-        metadataPolicy: None
        property: client
    - secretKey: oidc-client-secret
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /authentik/oidc/komodo
-        metadataPolicy: None
        property: secret
--- a/clusters/cl01tl/manifests/komodo/HTTPRoute-komodo.yaml
+++ b/clusters/cl01tl/manifests/komodo/HTTPRoute-komodo.yaml
@@ -23,7 +23,7 @@ spec:
          name: komodo-main
          namespace: komodo
          port: 80
-          weight: 100
+          weight: 1
      matches:
        - path:
            type: PathPrefix
--- a/clusters/cl01tl/manifests/komodo/ObjectStore-komodo-postgresql-17-fdb-backup-garage-local.yaml
+++ b/clusters/cl01tl/manifests/komodo/ObjectStore-komodo-postgresql-17-fdb-backup-garage-local.yaml
@@ -5,10 +5,10 @@ metadata:
  namespace: komodo
  labels:
    app.kubernetes.io/name: komodo-postgresql-17-fdb-backup-garage-local
-    helm.sh/chart: postgresql-17-fdb-cluster-7.10.0
+    helm.sh/chart: postgresql-17-fdb-cluster-7.11.1
    app.kubernetes.io/instance: komodo
    app.kubernetes.io/part-of: komodo
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.1"
    app.kubernetes.io/managed-by: Helm
 spec:
  retentionPolicy: 7d
--- a/clusters/cl01tl/manifests/komodo/ObjectStore-komodo-postgresql-17-fdb-recovery.yaml
+++ b/clusters/cl01tl/manifests/komodo/ObjectStore-komodo-postgresql-17-fdb-recovery.yaml
@@ -4,10 +4,10 @@ metadata:
  name: "komodo-postgresql-17-fdb-recovery"
  namespace: komodo
  labels:
-    helm.sh/chart: postgresql-17-fdb-cluster-7.10.0
+    helm.sh/chart: postgresql-17-fdb-cluster-7.11.1
    app.kubernetes.io/instance: komodo
    app.kubernetes.io/part-of: komodo
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.1"
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: "komodo-postgresql-17-fdb-recovery"
 spec:
--- a/clusters/cl01tl/manifests/komodo/PersistentVolumeClaim-komodo-cache.yaml
+++ b/clusters/cl01tl/manifests/komodo/PersistentVolumeClaim-komodo-cache.yaml
@@ -7,8 +7,6 @@ metadata:
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: komodo
    helm.sh/chart: komodo-4.6.2
-  annotations:
-    helm.sh/resource-policy: keep
  namespace: komodo
 spec:
  accessModes:
--- a/clusters/cl01tl/manifests/komodo/PersistentVolumeClaim-komodo-keys.yaml
+++ b/clusters/cl01tl/manifests/komodo/PersistentVolumeClaim-komodo-keys.yaml
@@ -7,8 +7,6 @@ metadata:
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: komodo
    helm.sh/chart: komodo-4.6.2
-  annotations:
-    helm.sh/resource-policy: keep
  namespace: komodo
 spec:
  accessModes:
--- a/clusters/cl01tl/manifests/komodo/PersistentVolumeClaim-komodo-syncs.yaml
+++ b/clusters/cl01tl/manifests/komodo/PersistentVolumeClaim-komodo-syncs.yaml
@@ -7,8 +7,6 @@ metadata:
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: komodo
    helm.sh/chart: komodo-4.6.2
-  annotations:
-    helm.sh/resource-policy: keep
  namespace: komodo
 spec:
  accessModes:
--- a/clusters/cl01tl/manifests/komodo/PrometheusRule-komodo-postgresql-17-fdb-alert-rules.yaml
+++ b/clusters/cl01tl/manifests/komodo/PrometheusRule-komodo-postgresql-17-fdb-alert-rules.yaml
@@ -5,10 +5,10 @@ metadata:
  namespace: komodo
  labels:
    app.kubernetes.io/name: komodo-postgresql-17-fdb-alert-rules
-    helm.sh/chart: postgresql-17-fdb-cluster-7.10.0
+    helm.sh/chart: postgresql-17-fdb-cluster-7.11.1
    app.kubernetes.io/instance: komodo
    app.kubernetes.io/part-of: komodo
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.1"
    app.kubernetes.io/managed-by: Helm
 spec:
  groups:
--- a/clusters/cl01tl/manifests/komodo/ScheduledBackup-komodo-postgresql-17-fdb-scheduled-backup-live-backup.yaml
+++ b/clusters/cl01tl/manifests/komodo/ScheduledBackup-komodo-postgresql-17-fdb-scheduled-backup-live-backup.yaml
@@ -5,10 +5,10 @@ metadata:
  namespace: komodo
  labels:
    app.kubernetes.io/name: "komodo-postgresql-17-fdb-scheduled-backup-live-backup"
-    helm.sh/chart: postgresql-17-fdb-cluster-7.10.0
+    helm.sh/chart: postgresql-17-fdb-cluster-7.11.1
    app.kubernetes.io/instance: komodo
    app.kubernetes.io/part-of: komodo
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.1"
    app.kubernetes.io/managed-by: Helm
 spec:
  immediate: true
--- a/clusters/cl01tl/manifests/kube-prometheus-stack/Deployment-ntfy-alertmanager.yaml
+++ b/clusters/cl01tl/manifests/kube-prometheus-stack/Deployment-ntfy-alertmanager.yaml
@@ -34,8 +34,7 @@ spec:
      hostPID: false
      dnsPolicy: ClusterFirst
      containers:
-        - image: xenrox/ntfy-alertmanager:1.0.0
-          imagePullPolicy: IfNotPresent
+        - image: xenrox/ntfy-alertmanager:1.0.0@sha256:81788c7905774b7b0b2ed6833b2bc4826a90a42e4b738706edcedd5f489e7a73
          name: main
          volumeMounts:
            - mountPath: /etc/ntfy-alertmanager/config
--- a/clusters/cl01tl/manifests/kube-prometheus-stack/ExternalSecret-alertmanager-config-secret.yaml
+++ b/clusters/cl01tl/manifests/kube-prometheus-stack/ExternalSecret-alertmanager-config-secret.yaml
@@ -14,8 +14,5 @@ spec:
  data:
    - secretKey: ntfy_password
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/kube-prometheus-stack/ntfy-alertmanager
-        metadataPolicy: None
        property: ntfy_password
--- a/clusters/cl01tl/manifests/kube-prometheus-stack/ExternalSecret-garage-metric-secret.yaml
+++ b/clusters/cl01tl/manifests/kube-prometheus-stack/ExternalSecret-garage-metric-secret.yaml
@@ -14,8 +14,5 @@ spec:
  data:
    - secretKey: token
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /garage/token
-        metadataPolicy: None
        property: metric
--- a/clusters/cl01tl/manifests/kube-prometheus-stack/ExternalSecret-ntfy-alertmanager-config-secret.yaml
+++ b/clusters/cl01tl/manifests/kube-prometheus-stack/ExternalSecret-ntfy-alertmanager-config-secret.yaml
@@ -14,15 +14,9 @@ spec:
  data:
    - secretKey: ntfy_password
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/kube-prometheus-stack/ntfy-alertmanager
-        metadataPolicy: None
        property: ntfy_password
    - secretKey: config
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/kube-prometheus-stack/ntfy-alertmanager
-        metadataPolicy: None
        property: config
--- a/clusters/cl01tl/manifests/kube-prometheus-stack/Prometheus-kube-prometheus-stack-prometheus.yaml
+++ b/clusters/cl01tl/manifests/kube-prometheus-stack/Prometheus-kube-prometheus-stack-prometheus.yaml
@@ -34,7 +34,8 @@ spec:
  enableOTLPReceiver: false
  enableAdminAPI: false
  scrapeInterval: 30s
-  retention: "30d"
+  retention: "45d"
+  retentionSize: "240GiB"
  tsdb:
    outOfOrderTimeWindow: 0s
  walCompression: true
--- a/clusters/cl01tl/manifests/kube-prometheus-stack/StatefulSet-kube-prometheus-stack-valkey.yaml
+++ b/clusters/cl01tl/manifests/kube-prometheus-stack/StatefulSet-kube-prometheus-stack-valkey.yaml
@@ -95,7 +95,7 @@ spec:
          resources:
            requests:
              cpu: 10m
-              memory: 128Mi
+              memory: 20Mi
          volumeMounts:
            - name: valkey-data
              mountPath: /data
@@ -117,8 +117,8 @@ spec:
              port: metrics
          resources:
            requests:
-              cpu: 10m
-              memory: 64M
+              cpu: 1m
+              memory: 10M
          env:
            - name: REDIS_ALIAS
              value: kube-prometheus-stack-valkey
--- a/clusters/cl01tl/manifests/loki/ClusterRole-loki-alloy.yaml
+++ b/clusters/cl01tl/manifests/loki/ClusterRole-loki-alloy.yaml
@@ -3,10 +3,10 @@ kind: ClusterRole
 metadata:
  name: loki-alloy
  labels:
-    helm.sh/chart: alloy-1.6.2
+    helm.sh/chart: alloy-1.7.0
    app.kubernetes.io/name: alloy
    app.kubernetes.io/instance: loki
-    app.kubernetes.io/version: "v1.14.0"
+    app.kubernetes.io/version: "v1.15.0"
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/part-of: alloy
    app.kubernetes.io/component: rbac
--- a/clusters/cl01tl/manifests/loki/ClusterRoleBinding-loki-alloy.yaml
+++ b/clusters/cl01tl/manifests/loki/ClusterRoleBinding-loki-alloy.yaml
@@ -3,10 +3,10 @@ kind: ClusterRoleBinding
 metadata:
  name: loki-alloy
  labels:
-    helm.sh/chart: alloy-1.6.2
+    helm.sh/chart: alloy-1.7.0
    app.kubernetes.io/name: alloy
    app.kubernetes.io/instance: loki
-    app.kubernetes.io/version: "v1.14.0"
+    app.kubernetes.io/version: "v1.15.0"
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/part-of: alloy
    app.kubernetes.io/component: rbac
--- a/clusters/cl01tl/manifests/loki/ConfigMap-loki-alloy.yaml
+++ b/clusters/cl01tl/manifests/loki/ConfigMap-loki-alloy.yaml
@@ -4,10 +4,10 @@ metadata:
  name: loki-alloy
  namespace: loki
  labels:
-    helm.sh/chart: alloy-1.6.2
+    helm.sh/chart: alloy-1.7.0
    app.kubernetes.io/name: alloy
    app.kubernetes.io/instance: loki
-    app.kubernetes.io/version: "v1.14.0"
+    app.kubernetes.io/version: "v1.15.0"
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/part-of: alloy
    app.kubernetes.io/component: config
--- a/clusters/cl01tl/manifests/loki/DaemonSet-loki-alloy.yaml
+++ b/clusters/cl01tl/manifests/loki/DaemonSet-loki-alloy.yaml
@@ -4,10 +4,10 @@ metadata:
  name: loki-alloy
  namespace: loki
  labels:
-    helm.sh/chart: alloy-1.6.2
+    helm.sh/chart: alloy-1.7.0
    app.kubernetes.io/name: alloy
    app.kubernetes.io/instance: loki
-    app.kubernetes.io/version: "v1.14.0"
+    app.kubernetes.io/version: "v1.15.0"
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/part-of: alloy
 spec:
@@ -27,7 +27,7 @@ spec:
      serviceAccountName: loki-alloy
      containers:
        - name: alloy
-          image: docker.io/grafana/alloy:v1.14.0
+          image: docker.io/grafana/alloy:v1.15.0
          imagePullPolicy: IfNotPresent
          args:
            - run
@@ -43,6 +43,10 @@ spec:
              valueFrom:
                fieldRef:
                  fieldPath: spec.nodeName
+            - name: K8S_NODE_NAME
+              valueFrom:
+                fieldRef:
+                  fieldPath: spec.nodeName
          ports:
            - containerPort: 12345
              name: http-metrics
@@ -58,6 +62,7 @@ spec:
              mountPath: /etc/alloy
        - name: config-reloader
          image: quay.io/prometheus-operator/prometheus-config-reloader:v0.81.0
+          imagePullPolicy: IfNotPresent
          args:
            - --watched-dir=/etc/alloy
            - --reload-url=http://localhost:12345/-/reload
--- a/clusters/cl01tl/manifests/loki/Service-loki-alloy.yaml
+++ b/clusters/cl01tl/manifests/loki/Service-loki-alloy.yaml
@@ -4,10 +4,10 @@ metadata:
  name: loki-alloy
  namespace: loki
  labels:
-    helm.sh/chart: alloy-1.6.2
+    helm.sh/chart: alloy-1.7.0
    app.kubernetes.io/name: alloy
    app.kubernetes.io/instance: loki
-    app.kubernetes.io/version: "v1.14.0"
+    app.kubernetes.io/version: "v1.15.0"
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/part-of: alloy
    app.kubernetes.io/component: networking
--- a/clusters/cl01tl/manifests/loki/ServiceAccount-loki-alloy.yaml
+++ b/clusters/cl01tl/manifests/loki/ServiceAccount-loki-alloy.yaml
@@ -5,10 +5,10 @@ metadata:
  name: loki-alloy
  namespace: loki
  labels:
-    helm.sh/chart: alloy-1.6.2
+    helm.sh/chart: alloy-1.7.0
    app.kubernetes.io/name: alloy
    app.kubernetes.io/instance: loki
-    app.kubernetes.io/version: "v1.14.0"
+    app.kubernetes.io/version: "v1.15.0"
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/part-of: alloy
    app.kubernetes.io/component: rbac
--- a/clusters/cl01tl/manifests/loki/ServiceMonitor-loki-alloy.yaml
+++ b/clusters/cl01tl/manifests/loki/ServiceMonitor-loki-alloy.yaml
@@ -4,10 +4,10 @@ metadata:
  name: loki-alloy
  namespace: loki
  labels:
-    helm.sh/chart: alloy-1.6.2
+    helm.sh/chart: alloy-1.7.0
    app.kubernetes.io/name: alloy
    app.kubernetes.io/instance: loki
-    app.kubernetes.io/version: "v1.14.0"
+    app.kubernetes.io/version: "v1.15.0"
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/part-of: alloy
    app.kubernetes.io/component: metrics
--- a/clusters/cl01tl/manifests/ollama/Deployment-ollama-server-1.yaml
+++ b/clusters/cl01tl/manifests/ollama/Deployment-ollama-server-1.yaml
@@ -50,7 +50,7 @@ spec:
              value: 24h
            - name: OLLAMA_HOST
              value: 0.0.0.0
-          image: ollama/ollama:0.19.0
+          image: ollama/ollama:0.20.0
          imagePullPolicy: IfNotPresent
          name: main
          resources:
--- a/clusters/cl01tl/manifests/ollama/Deployment-ollama-server-2.yaml
+++ b/clusters/cl01tl/manifests/ollama/Deployment-ollama-server-2.yaml
@@ -50,7 +50,7 @@ spec:
              value: 24h
            - name: OLLAMA_HOST
              value: 0.0.0.0
-          image: ollama/ollama:0.19.0
+          image: ollama/ollama:0.20.0
          imagePullPolicy: IfNotPresent
          name: main
          resources:
--- a/clusters/cl01tl/manifests/ollama/Deployment-ollama-server-3.yaml
+++ b/clusters/cl01tl/manifests/ollama/Deployment-ollama-server-3.yaml
@@ -50,7 +50,7 @@ spec:
              value: 24h
            - name: OLLAMA_HOST
              value: 0.0.0.0
-          image: ollama/ollama:0.19.0
+          image: ollama/ollama:0.20.0
          imagePullPolicy: IfNotPresent
          name: main
          resources:
--- a/clusters/cl01tl/manifests/whodb/Deployment-whodb.yaml
+++ b/clusters/cl01tl/manifests/whodb/Deployment-whodb.yaml
@@ -39,7 +39,7 @@ spec:
              value: ollama-server-2.ollama
            - name: WHODB_OLLAMA_PORT
              value: "11434"
-          image: clidey/whodb:0.103.0
+          image: clidey/whodb:0.104.0
          imagePullPolicy: IfNotPresent
          name: main
          resources: