Renovate Bot
2ef9c3796b
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/n8n-io/n8n](https://n8n.io) ([source](https://github.com/n8n-io/n8n)) | major | `1.123.5` -> `2.0.1` | --- ### Release Notes <details> <summary>n8n-io/n8n (ghcr.io/n8n-io/n8n)</summary> ### [`v2.0.0`](https://github.com/n8n-io/n8n/blob/HEAD/CHANGELOG.md#200-2025-12-08) ##### Bug Fixes - Add `HOME` env var to distroless runners image ([#​22796](https://github.com/n8n-io/n8n/issues/22796)) ([2cf1021](2cf10216bd)) - **core:** Allowlist `HOME` env var in JS runner config ([#​22839](https://github.com/n8n-io/n8n/issues/22839)) ([a31ca3d](a31ca3d190)) - **core:** Do not prevent credential save if property has default value ([#​22720](https://github.com/n8n-io/n8n/issues/22720)) ([03744c3](03744c30c5)) - **core:** Update migration that activate workflows with executeWorkflowTrigger ([#​22860](https://github.com/n8n-io/n8n/issues/22860)) ([f7cb18c](f7cb18ce38)) - **editor:** Bind color-scheme to app theme setting ([#​22774](https://github.com/n8n-io/n8n/issues/22774)) ([3d46b97](3d46b97bdf)) - **editor:** Design tweaks for publish modals ([#​22694](https://github.com/n8n-io/n8n/issues/22694)) ([98efa19](98efa19ca4)) - Fetch workflow before updating checksum ([#​22927](https://github.com/n8n-io/n8n/issues/22927)) ([2260953](22609531c3)) - Security patches ([#​22748](https://github.com/n8n-io/n8n/issues/22748)) ([d22c173](d22c173aec)) - Security patches for jws ([#​22918](https://github.com/n8n-io/n8n/issues/22918)) ([a642722](a642722115)) - Update checksum after restoring workflow ([#​22920](https://github.com/n8n-io/n8n/issues/22920)) ([207c3f8](207c3f8ba8)) ##### Features - Validate nodes before activating ([#​22916](https://github.com/n8n-io/n8n/issues/22916)) ([1aa325a](1aa325a64f)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi4zOS4xIiwidXBkYXRlZEluVmVyIjoiNDIuMzkuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=--> Reviewed-on: #2369 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
372 lines
11 KiB
YAML
372 lines
11 KiB
YAML
n8n:
|
|
controllers:
|
|
main:
|
|
type: deployment
|
|
replicas: 1
|
|
strategy: Recreate
|
|
revisionHistoryLimit: 3
|
|
containers:
|
|
main:
|
|
image:
|
|
repository: ghcr.io/n8n-io/n8n
|
|
tag: 2.0.1
|
|
pullPolicy: IfNotPresent
|
|
env:
|
|
- name: GENERIC_TIMEZONE
|
|
value: US/Central
|
|
- name: DB_TYPE
|
|
value: postgresdb
|
|
- name: DB_POSTGRESDB_DATABASE
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: n8n-postgresql-17-cluster-app
|
|
key: dbname
|
|
- name: DB_POSTGRESDB_HOST
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: n8n-postgresql-17-cluster-app
|
|
key: host
|
|
- name: DB_POSTGRESDB_PORT
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: n8n-postgresql-17-cluster-app
|
|
key: port
|
|
- name: DB_POSTGRESDB_USER
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: n8n-postgresql-17-cluster-app
|
|
key: user
|
|
- name: DB_POSTGRESDB_PASSWORD
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: n8n-postgresql-17-cluster-app
|
|
key: password
|
|
- name: N8N_METRICS
|
|
value: true
|
|
- name: QUEUE_HEALTH_CHECK_ACTIVE
|
|
value: true
|
|
- name: EXECUTIONS_MODE
|
|
value: queue
|
|
- name: QUEUE_BULL_REDIS_HOST
|
|
value: redis-replication-n8n-master.n8n
|
|
- name: N8N_ENCRYPTION_KEY
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: n8n-config-secret
|
|
key: key
|
|
- name: WEBHOOK_URL
|
|
value: https://n8n.alexlebens.net/
|
|
probes:
|
|
liveness:
|
|
enabled: true
|
|
custom: true
|
|
spec:
|
|
httpGet:
|
|
path: /healthz
|
|
port: 5678
|
|
initialDelaySeconds: 0
|
|
periodSeconds: 10
|
|
timeoutSeconds: 1
|
|
failureThreshold: 3
|
|
readiness:
|
|
enabled: true
|
|
custom: true
|
|
spec:
|
|
httpGet:
|
|
path: /healthz/readiness
|
|
port: 5678
|
|
initialDelaySeconds: 0
|
|
periodSeconds: 10
|
|
timeoutSeconds: 1
|
|
failureThreshold: 3
|
|
resources:
|
|
requests:
|
|
cpu: 10m
|
|
memory: 128Mi
|
|
worker:
|
|
type: daemonset
|
|
revisionHistoryLimit: 3
|
|
pod:
|
|
nodeSelector:
|
|
kubernetes.io/arch: amd64
|
|
containers:
|
|
main:
|
|
image:
|
|
repository: ghcr.io/n8n-io/n8n
|
|
tag: 2.0.1
|
|
pullPolicy: IfNotPresent
|
|
command:
|
|
- n8n
|
|
args:
|
|
- worker
|
|
# - --concurrency=10
|
|
env:
|
|
- name: GENERIC_TIMEZONE
|
|
value: US/Central
|
|
- name: DB_TYPE
|
|
value: postgresdb
|
|
- name: DB_POSTGRESDB_DATABASE
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: n8n-postgresql-17-cluster-app
|
|
key: dbname
|
|
- name: DB_POSTGRESDB_HOST
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: n8n-postgresql-17-cluster-app
|
|
key: host
|
|
- name: DB_POSTGRESDB_PORT
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: n8n-postgresql-17-cluster-app
|
|
key: port
|
|
- name: DB_POSTGRESDB_USER
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: n8n-postgresql-17-cluster-app
|
|
key: user
|
|
- name: DB_POSTGRESDB_PASSWORD
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: n8n-postgresql-17-cluster-app
|
|
key: password
|
|
- name: N8N_METRICS
|
|
value: true
|
|
- name: N8N_RUNNERS_ENABLED
|
|
value: true
|
|
- name: N8N_BLOCK_ENV_ACCESS_IN_NODE
|
|
value: true
|
|
- name: N8N_GIT_NODE_DISABLE_BARE_REPOS
|
|
value: true
|
|
- name: QUEUE_HEALTH_CHECK_ACTIVE
|
|
value: true
|
|
- name: EXECUTIONS_MODE
|
|
value: queue
|
|
- name: QUEUE_BULL_REDIS_HOST
|
|
value: redis-replication-n8n-master.n8n
|
|
- name: N8N_ENCRYPTION_KEY
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: n8n-config-secret
|
|
key: key
|
|
- name: WEBHOOK_URL
|
|
value: https://n8n.alexlebens.net/
|
|
probes:
|
|
liveness:
|
|
enabled: false
|
|
custom: true
|
|
spec:
|
|
httpGet:
|
|
path: /healthz
|
|
port: 5678
|
|
initialDelaySeconds: 60
|
|
periodSeconds: 10
|
|
timeoutSeconds: 1
|
|
failureThreshold: 3
|
|
readiness:
|
|
enabled: false
|
|
custom: true
|
|
spec:
|
|
httpGet:
|
|
path: /healthz/readiness
|
|
port: 5678
|
|
initialDelaySeconds: 60
|
|
periodSeconds: 10
|
|
timeoutSeconds: 1
|
|
failureThreshold: 3
|
|
resources:
|
|
requests:
|
|
cpu: 10m
|
|
memory: 128Mi
|
|
webhook:
|
|
type: daemonset
|
|
revisionHistoryLimit: 3
|
|
pod:
|
|
nodeSelector:
|
|
kubernetes.io/arch: amd64
|
|
containers:
|
|
main:
|
|
image:
|
|
repository: ghcr.io/n8n-io/n8n
|
|
tag: 2.0.1
|
|
pullPolicy: IfNotPresent
|
|
command:
|
|
- n8n
|
|
args:
|
|
- webhook
|
|
env:
|
|
- name: GENERIC_TIMEZONE
|
|
value: US/Central
|
|
- name: DB_TYPE
|
|
value: postgresdb
|
|
- name: DB_POSTGRESDB_DATABASE
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: n8n-postgresql-17-cluster-app
|
|
key: dbname
|
|
- name: DB_POSTGRESDB_HOST
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: n8n-postgresql-17-cluster-app
|
|
key: host
|
|
- name: DB_POSTGRESDB_PORT
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: n8n-postgresql-17-cluster-app
|
|
key: port
|
|
- name: DB_POSTGRESDB_USER
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: n8n-postgresql-17-cluster-app
|
|
key: user
|
|
- name: DB_POSTGRESDB_PASSWORD
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: n8n-postgresql-17-cluster-app
|
|
key: password
|
|
- name: N8N_METRICS
|
|
value: true
|
|
- name: QUEUE_HEALTH_CHECK_ACTIVE
|
|
value: true
|
|
- name: EXECUTIONS_MODE
|
|
value: queue
|
|
- name: QUEUE_BULL_REDIS_HOST
|
|
value: redis-replication-n8n-master.n8n
|
|
- name: N8N_ENCRYPTION_KEY
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: n8n-config-secret
|
|
key: key
|
|
- name: WEBHOOK_URL
|
|
value: https://n8n.alexlebens.net/
|
|
- name: N8N_DIAGNOSTICS_ENABLED
|
|
value: false
|
|
- name: N8N_VERSION_NOTIFICATIONS_ENABLED
|
|
value: false
|
|
probes:
|
|
liveness:
|
|
enabled: true
|
|
custom: true
|
|
spec:
|
|
httpGet:
|
|
path: /healthz
|
|
port: 5678
|
|
initialDelaySeconds: 0
|
|
periodSeconds: 10
|
|
timeoutSeconds: 1
|
|
failureThreshold: 3
|
|
readiness:
|
|
enabled: true
|
|
custom: true
|
|
spec:
|
|
httpGet:
|
|
path: /healthz/readiness
|
|
port: 5678
|
|
initialDelaySeconds: 0
|
|
periodSeconds: 10
|
|
timeoutSeconds: 1
|
|
failureThreshold: 3
|
|
resources:
|
|
requests:
|
|
cpu: 10m
|
|
memory: 128Mi
|
|
service:
|
|
main:
|
|
controller: main
|
|
ports:
|
|
http:
|
|
port: 80
|
|
targetPort: 5678
|
|
protocol: HTTP
|
|
worker:
|
|
controller: worker
|
|
ports:
|
|
http:
|
|
port: 80
|
|
targetPort: 5678
|
|
protocol: HTTP
|
|
webhook:
|
|
controller: webhook
|
|
ports:
|
|
http:
|
|
port: 80
|
|
targetPort: 5678
|
|
protocol: HTTP
|
|
persistence:
|
|
data:
|
|
storageClass: ceph-block
|
|
accessMode: ReadWriteOnce
|
|
size: 5Gi
|
|
advancedMounts:
|
|
main:
|
|
main:
|
|
- path: /data
|
|
readOnly: false
|
|
cache:
|
|
type: emptyDir
|
|
advancedMounts:
|
|
worker:
|
|
main:
|
|
- path: /home/node/.n8n
|
|
readOnly: false
|
|
webhook:
|
|
main:
|
|
- path: /home/node/.n8n
|
|
readOnly: false
|
|
postgres-17-cluster:
|
|
mode: recovery
|
|
cluster:
|
|
storage:
|
|
storageClass: local-path
|
|
walStorage:
|
|
storageClass: local-path
|
|
monitoring:
|
|
enabled: true
|
|
prometheusRule:
|
|
enabled: true
|
|
recovery:
|
|
method: objectStore
|
|
objectStore:
|
|
destinationPath: s3://postgres-backups/cl01tl/n8n/n8n-postgresql-17-cluster
|
|
endpointURL: http://garage-main.garage:3900
|
|
index: 1
|
|
endpointCredentials: n8n-postgresql-17-cluster-backup-secret-garage
|
|
backup:
|
|
objectStore:
|
|
- name: external
|
|
destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/n8n/n8n-postgresql-17-cluster
|
|
index: 2
|
|
retentionPolicy: "30d"
|
|
isWALArchiver: false
|
|
- name: garage-local
|
|
destinationPath: s3://postgres-backups/cl01tl/n8n/n8n-postgresql-17-cluster
|
|
index: 1
|
|
endpointURL: http://garage-main.garage:3900
|
|
endpointCredentials: n8n-postgresql-17-cluster-backup-secret-garage
|
|
endpointCredentialsIncludeRegion: true
|
|
retentionPolicy: "3d"
|
|
isWALArchiver: true
|
|
# - name: garage-remote
|
|
# destinationPath: s3://postgres-backups/cl01tl/n8n/n8n-postgresql-17-cluster
|
|
# index: 1
|
|
# endpointURL: https://garage-ps10rp.boreal-beaufort.ts.net:3900
|
|
# endpointCredentials: n8n-postgresql-17-cluster-backup-secret-garage
|
|
# retentionPolicy: "30d"
|
|
# data:
|
|
# compression: bzip2
|
|
# jobs: 2
|
|
scheduledBackups:
|
|
- name: daily-backup
|
|
suspend: false
|
|
schedule: "0 0 0 * * *"
|
|
backupName: external
|
|
- name: live-backup
|
|
suspend: false
|
|
immediate: true
|
|
schedule: "0 0 0 * * *"
|
|
backupName: garage-local
|
|
# - name: weekly-backup
|
|
# suspend: false
|
|
# schedule: "0 0 4 * * SAT"
|
|
# backupName: garage-remote
|