chore(deps): update helm release hcloud-cloud-controller-manager to v1.23.0

argocd/kustomization.yaml

@@ -13,7 +13,7 @@ resources:
 images:
   - name: argocd
     newName: code.icb4dc0.de/infrastructure/images/argocd
-    newTag: v2.13.2
+    newTag: v2.13.3
 
 labels:
 - includeSelectors: true
@@ -26,7 +26,7 @@ helmCharts:
     repo: https://argoproj.github.io/argo-helm
     releaseName: argo-cd
     namespace: argo-system
-    version: "7.7.11"
+    version: "7.7.21"
     valuesFile: config/values.argo-cd.yaml
     apiVersions:
       - monitoring.coreos.com/v1

cert-manager/config/values.cert-manager.yaml

@@ -1,2 +1,4 @@
-extraArgs:
+config:
- - --feature-gates=ExperimentalGatewayAPISupport=true
+  kind: ControllerConfiguration
+  apiVersion: "controller.config.cert-manager.io/v1alpha1"
+  enableGatewayAPI: true

cert-manager/kustomization.yaml

@@ -12,7 +12,7 @@ resources:
 helmCharts:
   - name: cert-manager
     repo: https://charts.jetstack.io
-    version: "v1.16.2"
+    version: "v1.16.3"
     releaseName: cert-manager
     namespace: kube-system
     valuesFile: config/values.cert-manager.yaml

cnpg/cluster/resources/cluster.yaml

@@ -47,10 +47,10 @@ spec:
 
   resources:
     requests:
-      cpu: 100m
+      cpu: 400m
       memory: 600Mi
     limits:
-      cpu: 500m
+      cpu: 1200m
       memory: 900Mi
 
   affinity:

cnpg/hack/migrate.yaml

@@ -0,0 +1,42 @@
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: pgpass-migration
+type: Opaque
+stringData:
+  .pgpass: |
+    default-cluster-primary.postgres.svc:5432:umami:postgres:(g>_lO9v|?(B.4xiYt0}/+m)
+    app-cluster-pooler-rw.postgres.svc:5432:umami:umami-ciWvqZ:aDvAwEWR7HZz8Ab
+---
+apiVersion: batch/v1
+kind: Job
+metadata:
+  name: migrate
+  namespace: postgres
+spec:
+  template:
+    spec:
+      containers:
+      - name: postgres
+        image: postgres:16-alpine
+        command:
+          - /bin/ash
+          - -c
+          - pg_dump --create --clean --no-owner --no-privileges -h default-cluster-primary.postgres.svc -U postgres "${DB_NAME}" | psql -h app-cluster-pooler-rw.postgres.svc -U "${TARGET_USER}" "${DB_NAME}"
+        env:
+          - name: DB_NAME
+            value: umami
+          - name: TARGET_USER
+            value: umami-ciWvqZ
+        volumeMounts:
+          - name: pgpass
+            readOnly: true
+            mountPath: /root/
+      restartPolicy: Never
+      volumes:
+        - name: pgpass
+          secret:
+            defaultMode: 0700
+            secretName: pgpass-migration
+  backoffLimit: 4

cnpg/operators/kustomization.yaml

@@ -10,7 +10,7 @@ helmCharts:
   - releaseName: cnpg
     name: cloudnative-pg
     repo: https://cloudnative-pg.github.io/charts
-    version: 0.22.1
+    version: 0.23.0
     valuesFile: config/values.cnpg.yaml
     namespace: postgres-system
     includeCRDs: true

coder/kustomization.yaml

@@ -15,6 +15,6 @@ helmCharts:
     repo: https://helm.coder.com/v2
     releaseName: coder
     namespace: coder
-    version: "2.18.1"
+    version: "2.18.4"
     valuesFile: config/values.coder.yml
     skipTests: true

contour/kustomization.yaml

@@ -6,7 +6,7 @@ namespace: projectcontour
 images:
 - name: contour
   newName: ghcr.io/projectcontour/contour
-  newTag: v1.30.1
+  newTag: v1.30.2
 
 resources:
   - crds/contour.yaml

contour/resources/default_gateway.yaml

@@ -51,6 +51,7 @@ spec:
         mode: Terminate
         certificateRefs:
           - name: forgejo-tls
+
     - name: ssh
       protocol: TCP
       port: 22
@@ -108,21 +109,6 @@ spec:
         certificateRefs:
           - name: coder-port-forwards-tls
 
-    - name: garage-s3-subdomains
-      hostname: "*.s3.icb4dc0.de"
-      port: 443
-      protocol: HTTPS
-      allowedRoutes:
-        namespaces:
-          from: Selector
-          selector:
-            matchLabels:
-              kubernetes.io/metadata.name: garage
-      tls:
-        mode: Terminate
-        certificateRefs:
-          - name: garage-s3-subdomains-tls
-
     - name: buildr-fider-community
       hostname: community.buildr.icb4dc0.de
       port: 443
@@ -168,8 +154,8 @@ spec:
         certificateRefs:
           - name: fider-login-tls
 
-    - name: git-age-docs
+    - name: supabase-operator-docs
-      hostname: "docs.git-age.icb4dc0.de"
+      hostname: "docs.supabase-operator.icb4dc0.de"
       port: 443
       protocol: HTTPS
       allowedRoutes:
@@ -177,8 +163,8 @@ spec:
           from: Selector
           selector:
             matchLabels:
-              kubernetes.io/metadata.name: blog
+              kubernetes.io/metadata.name: functions
       tls:
         mode: Terminate
         certificateRefs:
-          - name: git-age-docs-tls
+          - name: supabase-operator-docs-tls

descheduler/kustomization.yaml

@@ -4,7 +4,7 @@ kind: Kustomization
 namespace: kube-system
 
 resources:
-  - https://github.com/kubernetes-sigs/descheduler/kubernetes/deployment?ref=v0.30.1
+  - https://github.com/kubernetes-sigs/descheduler/kubernetes/deployment?ref=v0.32.1
 
 configMapGenerator:
   - name: descheduler-policy-configmap

ente/kustomization.yaml

@@ -14,10 +14,10 @@ images:
     digest: sha256:08b6fd823efc15a38592a808840012a7ad13cccb645f88dfe981c50fcca8798a
   - name: photos
     newName: code.icb4dc0.de/infrastructure/images/ente/photos
-    newTag: v0.9.72
+    newTag: v0.9.81
   - name: cast
     newName: code.icb4dc0.de/infrastructure/images/ente/cast
-    newTag: v0.9.71
+    newTag: v0.9.81
 
 labels:
   - includeSelectors: true

forgejo/kustomization.yaml

@@ -12,10 +12,10 @@ labels:
 images:
   - name: act_runner
     newName: code.forgejo.org/forgejo/runner
-    newTag: "5.0.4"
+    newTag: "6.2.0"
   - name: dind
     newName: docker
-    newTag: 27.4.1-dind
+    newTag: 27.5.1-dind
 
 resources:
   - resources/db/db.yaml
@@ -48,7 +48,7 @@ helmCharts:
     repo: oci://codeberg.org/forgejo-contrib
     releaseName: forgejo
     namespace: forgejo
-    version: "10.1.2"
+    version: "11.0.1"
     valuesFile: config/values.forgejo.yaml
     skipTests: true
     apiVersions:
@@ -57,6 +57,6 @@ helmCharts:
     repo: https://meilisearch.github.io/meilisearch-kubernetes
     releaseName: forgejo-indexer
     namespace: forgejo
-    version: "0.11.0"
+    version: "0.10.2"
     valuesFile: config/values.meilisearch.yaml
     skipTests: true

garage/backup/kustomization.yaml

@@ -6,7 +6,7 @@ namespace: garage
 images:
   - name: rclone
     newName: rclone/rclone
-    newTag: "1.68"
+    newTag: "1.69"
 
 resources:
 - resources/cronjob.yaml

hcloud/kustomization.yaml

@@ -12,12 +12,12 @@ helmCharts:
     repo: https://charts.hetzner.cloud
     releaseName: hccm
     namespace: kube-system
-    version: "1.21.0"
+    version: "1.23.0"
     valuesFile: config/values.ccm.yaml
 
   - name: hcloud-csi
     repo: https://charts.hetzner.cloud
     releaseName: hcloud-csi-driver
     namespace: kube-system
-    version: "2.11.0"
+    version: "2.12.0"
     valuesFile: config/values.csi.yaml

kube-prometheus/kustomization.yaml

@@ -17,5 +17,5 @@ helmCharts:
     includeCRDs: true
     namespace: observability-system
     releaseName: prometheus
-    version: "67.4.0"
+    version: "68.3.0"
     valuesFile: config/values.prometheus.yaml

linkwarden/kustomization.yaml

@@ -11,7 +11,7 @@ labels:
 images:
   - name: linkwarden
     newName: ghcr.io/linkwarden/linkwarden
-    newTag: "v2.8.4"
+    newTag: "v2.9.3"
 
 resources:
   - "resources/namespace.yaml"

meali/kustomization.yaml

@@ -6,7 +6,7 @@ namespace: meali
 images:
   - name: meali
     newName: ghcr.io/mealie-recipes/mealie
-    newTag: v2.4.1
+    newTag: v2.5.0
 
 resources:
   - resources/namespace.yaml

nextcloud/kustomization.yaml

@@ -21,7 +21,7 @@ helmCharts:
     repo: https://nextcloud.github.io/helm/
     releaseName: nextcloud
     namespace: nextcloud
-    version: "6.5.1"
+    version: "6.6.3"
     valuesFile: config/values.nextcloud.yaml
     skipTests: true
 

nocodb/kustomization.yaml

@@ -6,7 +6,7 @@ namespace: nocodb
 images:
 - name: nocodb
   newName: docker.io/nocodb/nocodb
-  newTag: 0.258.10
+  newTag: 0.260.2
 
 labels:
 - includeSelectors: true

postgres-operator/app.yaml

@@ -0,0 +1,16 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: postgres-operator
+  namespace: argo-system
+spec:
+  destination:
+    server: https://kubernetes.default.svc
+  project: infrastructure
+  source:
+    path: postgres-operator
+    repoURL: https://code.icb4dc0.de/infrastructure/apps.git
+    targetRevision: HEAD
+  syncPolicy:
+    syncOptions:
+      - ServerSideApply=true

vaultwarden/kustomization.yaml

@@ -12,7 +12,7 @@ labels:
 images:
   - name: vaultwarden
     newName: ghcr.io/dani-garcia/vaultwarden
-    newTag: "1.32.6-alpine"
+    newTag: "1.33.0-alpine"
 
 resources:
   - "resources/namespace.yaml"

zipline/kustomization.yaml

@@ -6,7 +6,7 @@ namespace: zipline
 images:
 - name: zipline
   newName: ghcr.io/diced/zipline
-  newTag: "3.7.10"
+  newTag: "3.7.11"
 
 labels:
 - includeSelectors: true