feat(helm): update chart app-template to 3.5.1

Reviewed-on: #491

kubernetes/common/apps/volsync-system/volsync/app/helm-release.yaml

@@ -8,7 +8,7 @@ spec:
   chart:
     spec:
       chart: volsync
-      version: 0.10.0
+      version: 0.11.0
       sourceRef:
         kind: HelmRepository
         name: backube

kubernetes/main/apps/authentik/app/helm-release.yaml

@@ -11,7 +11,7 @@ spec:
   chart:
     spec:
       chart: authentik
-      version: 2024.10.0
+      version: 2024.10.1
       sourceRef:
         kind: HelmRepository
         name: authentik-charts

kubernetes/main/apps/database/mysql/helm-release.yaml

@@ -8,7 +8,7 @@ spec:
   chart:
     spec:
       chart: mysql
-      version: 11.1.19
+      version: 11.1.20
       sourceRef:
         kind: HelmRepository
         name: bitnami-charts

kubernetes/main/apps/download/prowlarr/helm-release.yaml

@@ -17,7 +17,7 @@ spec:
   values:
     image:
       repository: ghcr.io/onedr0p/prowlarr-develop
-      tag: "1.25.4.4818"
+      tag: "1.26.0.4833"
 
     # Metrics sidecar
     sidecars:

kubernetes/main/apps/download/radarr/app/helm-release.yaml

@@ -35,7 +35,7 @@ spec:
           app:
             image:
               repository: ghcr.io/onedr0p/radarr-develop
-              tag: 5.14.0.9383
+              tag: 5.15.0.9412
             envFrom: *envFrom
             env:
               TZ: America/New_York

kubernetes/main/apps/download/sonarr/app/helm-release.yaml

@@ -35,7 +35,7 @@ spec:
           app:
             image:
               repository: ghcr.io/onedr0p/sonarr-develop
-              tag: 4.0.10.2579
+              tag: 4.0.10.2624
             envFrom: *envFrom
             env:
               TZ: America/New_York

kubernetes/main/apps/game-servers/factorio/helm-release.yaml

@@ -17,7 +17,7 @@ spec:
   values:
     image:
       repository: goofball222/factorio
-      tag: "2.0.13"
+      tag: "2.0.15"
 
     service:
       main:

kubernetes/main/apps/media/ampache/app/helm-release.yaml

@@ -0,0 +1,98 @@
+# yaml-language-server: $schema=https://raw.githubusercontent.com/bjw-s/helm-charts/main/charts/other/app-template/schemas/helmrelease-helm-v2beta2.schema.json
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: ampache
+spec:
+  interval: 5m
+  chart:
+    spec:
+      chart: app-template
+      version: 3.5.1
+      sourceRef:
+        kind: HelmRepository
+        name: bjws-charts
+        namespace: flux-system
+
+  values:
+    controllers:
+      ampache:
+        containers:
+          app:
+            image:
+              repository: ampache/ampache
+              tag: nosql7.0.1
+            
+            env:
+              DISABLE_INOTIFYWAIT_CLEAN: 0
+            
+            probes:
+              liveness: &probes
+                enabled: true
+                custom: true
+                spec:
+                  httpGet:
+                    path: /
+                    port: &port 80
+                  initialDelaySeconds: 0
+                  periodSeconds: 10
+                  timeoutSeconds: 1
+                  failureThreshold: 3
+              readiness: *probes
+              startup:
+                enabled: true
+                spec:
+                  failureThreshold: 30
+                  periodSeconds: 10
+
+#            securityContext:
+#              allowPrivilegeEscalation: false
+#              readOnlyRootFilesystem: true
+#              capabilities: { drop: ["ALL"] }
+
+    defaultPodOptions:
+      securityContext:
+#        runAsNonRoot: true
+        runAsUser: 10000
+        runAsGroup: 10000
+        fsGroup: 10000
+        fsGroupChangePolicy: OnRootMismatch
+    
+    service:
+      app:
+        controller: ampache
+        ports:
+          http:
+            port: *port
+    
+    ingress:
+      app:
+        annotations:
+          cert-manager.io/cluster-issuer: letsencrypt-production
+          traefik.ingress.kubernetes.io/router.entrypoints: websecure
+        #className: external
+        hosts:
+          - host: "ampache.${SECRET_NEW_DOMAIN}"
+            paths:
+              - path: /
+                service:
+                  identifier: app
+                  port: http
+                  
+    persistence:
+      config:
+        existingClaim: ampache
+        globalMounts:
+          - path: /var/www/config
+
+      logs:
+        type: emptyDir
+        globalMounts:
+          - path: /var/log/ampache
+      
+      music:
+        type: hostPath
+        hostPath: /mnt/MainPool/Media/Media
+        globalMounts:
+          - path: /media
+            readOnly: true

kubernetes/main/apps/media/ampache/app/kustomization.yaml

@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+- ../../../../../common/templates/volsync
+- ./helm-release.yaml

kubernetes/main/apps/media/ampache/ks.yaml

@@ -0,0 +1,31 @@
+# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/kustomize.toolkit.fluxcd.io/kustomization_v1.json
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: &app ampache
+  namespace: flux-system
+spec:
+  timeout: 5m
+  interval: 10m
+  targetNamespace: media
+  path: ./kubernetes/main/apps/media/ampache/app
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: home-cluster
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-gpg
+  dependsOn:
+    - name: openebs
+    - name: openebs-sc
+  postBuild:
+    substituteFrom:
+      - kind: ConfigMap
+        name: cluster-settings
+      - kind: Secret
+        name: cluster-secrets
+    substitute:
+      APP: *app
+      VOLSYNC_CAPACITY: 15Gi

kubernetes/main/apps/media/jellyfin/helm-release.yaml

@@ -22,7 +22,7 @@ spec:
           app:
             image:
               repository: linuxserver/jellyfin
-              tag: 10.10.0
+              tag: 10.10.1
             
             env:
               PUID: 10000

kubernetes/main/apps/media/kustomization.yaml

@@ -12,3 +12,5 @@ resources:
 - ./tautulli
 - ./ombi
 - ./freshrss
+- ./navidrome/ks.yaml
+- ./ampache/ks.yaml

kubernetes/main/apps/media/navidrome/app/helm-release.yaml

@@ -0,0 +1,103 @@
+# yaml-language-server: $schema=https://raw.githubusercontent.com/bjw-s/helm-charts/main/charts/other/app-template/schemas/helmrelease-helm-v2beta2.schema.json
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: navidrome
+spec:
+  interval: 5m
+  chart:
+    spec:
+      chart: app-template
+      version: 3.5.1
+      sourceRef:
+        kind: HelmRepository
+        name: bjws-charts
+        namespace: flux-system
+
+  values:
+    controllers:
+      navidrome:
+        containers:
+          app:
+            image:
+              repository: deluan/navidrome
+              tag: 0.53.3
+            
+            env:
+              ND_SCANSCHEDULE: 1h
+              ND_LOGLEVEL: info
+            
+            probes:
+              liveness: &probes
+                enabled: true
+                custom: true
+                spec:
+                  httpGet:
+                    path: /
+                    port: &port 4533
+                  initialDelaySeconds: 0
+                  periodSeconds: 10
+                  timeoutSeconds: 1
+                  failureThreshold: 3
+              readiness: *probes
+              startup:
+                enabled: true
+                spec:
+                  failureThreshold: 30
+                  periodSeconds: 10
+
+#            securityContext:
+#              allowPrivilegeEscalation: false
+#              readOnlyRootFilesystem: true
+#              capabilities: { drop: ["ALL"] }
+
+    defaultPodOptions:
+      securityContext:
+#        runAsNonRoot: true
+        runAsUser: 10000
+        runAsGroup: 10000
+        fsGroup: 10000
+        fsGroupChangePolicy: OnRootMismatch
+    
+    service:
+      app:
+        controller: navidrome
+        ports:
+          http:
+            port: *port
+    
+    ingress:
+      app:
+        annotations:
+          cert-manager.io/cluster-issuer: letsencrypt-production
+          traefik.ingress.kubernetes.io/router.entrypoints: websecure
+        #className: external
+        hosts:
+          - host: "navidrome.${SECRET_NEW_DOMAIN}"
+            paths:
+              - path: /
+                service:
+                  identifier: app
+                  port: http
+                  
+    persistence:
+      data:
+        existingClaim: navidrome
+        globalMounts:
+          - path: /data
+
+      cache:
+        type: persistentVolumeClaim
+        size: 15Gi
+        retain: true
+        storageClass: mainpool-hostpath
+        accessMode: ReadWriteOnce
+        globalMounts:
+          - path: /data/cache
+      
+      music:
+        type: hostPath
+        hostPath: /mnt/MainPool/Media/Media/Music
+        globalMounts:
+          - path: /music
+            readOnly: true

kubernetes/main/apps/media/navidrome/app/kustomization.yaml

@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+- ../../../../../common/templates/volsync
+- ./helm-release.yaml

kubernetes/main/apps/media/navidrome/ks.yaml

@@ -0,0 +1,31 @@
+# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/kustomize.toolkit.fluxcd.io/kustomization_v1.json
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: &app navidrome
+  namespace: flux-system
+spec:
+  timeout: 5m
+  interval: 10m
+  targetNamespace: media
+  path: ./kubernetes/main/apps/media/navidrome/app
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: home-cluster
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-gpg
+  dependsOn:
+    - name: openebs
+    - name: openebs-sc
+  postBuild:
+    substituteFrom:
+      - kind: ConfigMap
+        name: cluster-settings
+      - kind: Secret
+        name: cluster-secrets
+    substitute:
+      APP: *app
+      VOLSYNC_CAPACITY: 15Gi

kubernetes/main/apps/monitoring/grafana/helm-release.yaml

@@ -8,7 +8,7 @@ spec:
   chart:
     spec:
       chart: grafana
-      version: "8.5.11"
+      version: "8.5.12"
       sourceRef:
         kind: HelmRepository
         name: grafana-charts

kubernetes/main/apps/monitoring/kube-prometheus-stack/helm-release.yaml

@@ -8,7 +8,7 @@ spec:
   chart:
     spec:
       chart: kube-prometheus-stack
-      version: "65.5.1"
+      version: "66.0.0"
       sourceRef:
         kind: HelmRepository
         name: prometheus-community-charts

kubernetes/main/apps/monitoring/victoria-metrics/helm-release.yaml

@@ -8,7 +8,7 @@ spec:
   chart:
     spec:
       chart: victoria-metrics-single
-      version: 0.12.3
+      version: 0.12.6
       sourceRef:
         kind: HelmRepository
         name: victoria-metrics-charts

kubernetes/main/core/kube-system/local-path-config.yaml

@@ -25,7 +25,7 @@ data:
     spec:
       containers:
       - name: helper-pod
-        image: rancher/mirrored-library-busybox:1.36.1
+        image: rancher/mirrored-library-busybox:1.37.0
   setup: |-
     #!/bin/sh
     while getopts "m:s:p:" opt

kubernetes/thin/apps/default/home-assistant/files/helm-release.yaml

@@ -24,7 +24,7 @@ spec:
           app:
             image:
               repository: ghcr.io/onedr0p/home-assistant
-              tag: 2024.10.4
+              tag: 2024.11.1
             env:
               TZ: America/New_York #${SERVER_TIMEZONE}
               HASS_HTTP_TRUSTED_PROXY_1: 192.168.0.0/16
@@ -46,7 +46,7 @@ spec:
           code-server:
             image:
               repository: ghcr.io/coder/code-server
-              tag: 4.93.1
+              tag: 4.95.1
             args: [
               "--auth", "none",
               "--user-data-dir", "/config/.vscode",

kubernetes/thin/apps/default/nextcloud/files/helm-release.yaml

@@ -23,7 +23,7 @@ spec:
           nextcloud:
             image:
               repository: nextcloud
-              tag: 30.0.1
+              tag: 30.0.2
 
             envFrom:
               - secretRef:

kubernetes/thin/apps/monitoring/grafana/app/helm-release.yaml

@@ -8,7 +8,7 @@ spec:
   chart:
     spec:
       chart: grafana
-      version: "8.5.11"
+      version: "8.5.12"
       sourceRef:
         kind: HelmRepository
         name: grafana

kubernetes/thin/apps/monitoring/kube-prometheus-stack/app/helm-release.yaml

@@ -8,7 +8,7 @@ spec:
   chart:
     spec:
       chart: kube-prometheus-stack
-      version: "65.5.1"
+      version: "66.0.0"
       sourceRef:
         kind: HelmRepository
         name: prometheus-community

kubernetes/thin/apps/monitoring/victoria-metrics/operator/helm-release.yaml

@@ -8,7 +8,7 @@ spec:
   chart:
     spec:
       chart: victoria-metrics-operator
-      version: 0.36.0
+      version: 0.37.0
       sourceRef:
         kind: HelmRepository
         name: victoria-metrics-charts

kubernetes/thin/apps/monitoring/victoria-metrics/vm/agent.yaml

@@ -6,7 +6,7 @@ metadata:
 spec:
   image:
     repository: victoriametrics/vmagent
-    tag: v1.105.0
+    tag: v1.106.0
     pullPolicy: IfNotPresent
     
   selectAllByDefault: true

kubernetes/thin/apps/monitoring/victoria-metrics/vm/single.yaml

@@ -6,7 +6,7 @@ metadata:
 spec:
   image:
     repository: victoriametrics/victoria-metrics
-    tag: v1.105.0
+    tag: v1.106.0
 
   retentionPeriod: "6" # in months
   replicaCount: 1