clusters/cl01tl/manifests/speedtest-exporter/Deployment-speedtest-exporter.yaml

@@ -31,10 +31,13 @@ spec:
             readOnlyRootFilesystem: true
             runAsNonRoot: true
             runAsUser: 1000
-          image: "ghcr.io/miguelndecarvalho/speedtest-exporter:v3.5.4"
+          image: "ghcr.io/miguelndecarvalho/speedtest-exporter:v3.5.4@sha256:f1064d49124c7fc45faabb87c6c876a2fd04e92b3dc14d4b871301217ba30fed"
           imagePullPolicy: IfNotPresent
           ports:
             - name: http
               containerPort: 9798
               protocol: TCP
-          resources: {}
+          resources:
+            limits:
+              cpu: 1m
+              memory: 30Mi

clusters/cl01tl/manifests/stalwart/Cluster-stalwart-postgresql-18-cluster.yaml

@@ -5,10 +5,10 @@ metadata:
   namespace: stalwart
   labels:
     app.kubernetes.io/name: stalwart-postgresql-18-cluster
-    helm.sh/chart: postgres-18-cluster-7.10.0
+    helm.sh/chart: postgres-18-cluster-7.11.2
     app.kubernetes.io/instance: stalwart
     app.kubernetes.io/part-of: stalwart
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.2"
     app.kubernetes.io/managed-by: Helm
 spec:
   instances: 3
@@ -26,8 +26,8 @@ spec:
     limits:
       hugepages-2Mi: 256Mi
     requests:
-      cpu: 100m
-      memory: 256Mi
+      cpu: 20m
+      memory: 80Mi
   affinity:
     enablePodAntiAffinity: true
     topologyKey: kubernetes.io/hostname

clusters/cl01tl/manifests/stalwart/Deployment-stalwart.yaml

@@ -34,13 +34,12 @@ spec:
       hostPID: false
       dnsPolicy: ClusterFirst
       containers:
-        - image: stalwartlabs/stalwart:v0.15.5
-          imagePullPolicy: IfNotPresent
+        - image: ghcr.io/stalwartlabs/stalwart:v0.15.5@sha256:dcf575db2d53d9ef86d6ced8abe4ba491984659a0f8862cc6079ee7b41c3c568
           name: main
           resources:
             requests:
               cpu: 10m
-              memory: 128Mi
+              memory: 100Mi
           volumeMounts:
             - mountPath: /opt/stalwart
               name: config

clusters/cl01tl/manifests/stalwart/ExternalSecret-stalwart-elasticsearch-secret.yaml

@@ -14,22 +14,13 @@ spec:
   data:
     - secretKey: username
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /cl01tl/stalwart/elasticsearch
-        metadataPolicy: None
         property: username
     - secretKey: password
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /cl01tl/stalwart/elasticsearch
-        metadataPolicy: None
         property: password
     - secretKey: roles
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /cl01tl/stalwart/elasticsearch
-        metadataPolicy: None
         property: roles

clusters/cl01tl/manifests/stalwart/ExternalSecret-stalwart-postgresql-18-backup-garage-local-secret.yaml

@@ -5,10 +5,10 @@ metadata:
   namespace: stalwart
   labels:
     app.kubernetes.io/name: stalwart-postgresql-18-backup-garage-local-secret
-    helm.sh/chart: postgres-18-cluster-7.10.0
+    helm.sh/chart: postgres-18-cluster-7.11.2
     app.kubernetes.io/instance: stalwart
     app.kubernetes.io/part-of: stalwart
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.2"
     app.kubernetes.io/managed-by: Helm
 spec:
   secretStoreRef:

clusters/cl01tl/manifests/stalwart/ExternalSecret-stalwart-postgresql-18-recovery-secret.yaml

@@ -4,10 +4,10 @@ metadata:
   name: stalwart-postgresql-18-recovery-secret
   namespace: stalwart
   labels:
-    helm.sh/chart: postgres-18-cluster-7.10.0
+    helm.sh/chart: postgres-18-cluster-7.11.2
     app.kubernetes.io/instance: stalwart
     app.kubernetes.io/part-of: stalwart
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.2"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: stalwart-postgresql-18-recovery-secret
 spec:

clusters/cl01tl/manifests/stalwart/HTTPRoute-stalwart.yaml

@@ -23,7 +23,7 @@ spec:
           name: stalwart
           namespace: stalwart
           port: 80
-          weight: 100
+          weight: 1
       matches:
         - path:
             type: PathPrefix

clusters/cl01tl/manifests/stalwart/ObjectStore-stalwart-postgresql-18-backup-garage-local.yaml

@@ -5,10 +5,10 @@ metadata:
   namespace: stalwart
   labels:
     app.kubernetes.io/name: stalwart-postgresql-18-backup-garage-local
-    helm.sh/chart: postgres-18-cluster-7.10.0
+    helm.sh/chart: postgres-18-cluster-7.11.2
     app.kubernetes.io/instance: stalwart
     app.kubernetes.io/part-of: stalwart
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.2"
     app.kubernetes.io/managed-by: Helm
 spec:
   retentionPolicy: 7d

clusters/cl01tl/manifests/stalwart/ObjectStore-stalwart-postgresql-18-recovery.yaml

@@ -4,10 +4,10 @@ metadata:
   name: "stalwart-postgresql-18-recovery"
   namespace: stalwart
   labels:
-    helm.sh/chart: postgres-18-cluster-7.10.0
+    helm.sh/chart: postgres-18-cluster-7.11.2
     app.kubernetes.io/instance: stalwart
     app.kubernetes.io/part-of: stalwart
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.2"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: "stalwart-postgresql-18-recovery"
 spec:

clusters/cl01tl/manifests/stalwart/PersistentVolumeClaim-stalwart-config.yaml

@@ -7,8 +7,6 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: stalwart
     helm.sh/chart: stalwart-4.6.2
-  annotations:
-    helm.sh/resource-policy: keep
   namespace: stalwart
 spec:
   accessModes:

clusters/cl01tl/manifests/stalwart/PrometheusRule-stalwart-postgresql-18-alert-rules.yaml

@@ -5,10 +5,10 @@ metadata:
   namespace: stalwart
   labels:
     app.kubernetes.io/name: stalwart-postgresql-18-alert-rules
-    helm.sh/chart: postgres-18-cluster-7.10.0
+    helm.sh/chart: postgres-18-cluster-7.11.2
     app.kubernetes.io/instance: stalwart
     app.kubernetes.io/part-of: stalwart
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.2"
     app.kubernetes.io/managed-by: Helm
 spec:
   groups:

clusters/cl01tl/manifests/stalwart/ScheduledBackup-stalwart-postgresql-18-scheduled-backup-live-backup.yaml

@@ -5,10 +5,10 @@ metadata:
   namespace: stalwart
   labels:
     app.kubernetes.io/name: "stalwart-postgresql-18-scheduled-backup-live-backup"
-    helm.sh/chart: postgres-18-cluster-7.10.0
+    helm.sh/chart: postgres-18-cluster-7.11.2
     app.kubernetes.io/instance: stalwart
     app.kubernetes.io/part-of: stalwart
-    app.kubernetes.io/version: "7.10.0"
+    app.kubernetes.io/version: "7.11.2"
     app.kubernetes.io/managed-by: Helm
 spec:
   immediate: true

clusters/cl01tl/manifests/stalwart/StatefulSet-stalwart-valkey.yaml

@@ -95,7 +95,7 @@ spec:
           resources:
             requests:
               cpu: 10m
-              memory: 128Mi
+              memory: 20Mi
           volumeMounts:
             - name: valkey-data
               mountPath: /data
@@ -117,8 +117,8 @@ spec:
               port: metrics
           resources:
             requests:
-              cpu: 10m
-              memory: 64M
+              cpu: 1m
+              memory: 10M
           env:
             - name: REDIS_ALIAS
               value: stalwart-valkey