Merge branch 'main' of github.com:soerenschneider/k8s-gitops

Author: soerenschneider

apps/ghostfolio/deployment.yaml

@@ -36,7 +36,7 @@ spec:
         seccompProfile:
           type: RuntimeDefault
       containers:
-        - image: docker.io/ghostfolio/ghostfolio:2.110.0
+        - image: docker.io/ghostfolio/ghostfolio:2.111.0
           imagePullPolicy: IfNotPresent
           name: ghostfolio
           securityContext:

apps/miniflux/deployment.yaml

@@ -33,7 +33,7 @@ spec:
         seccompProfile:
           type: RuntimeDefault
       containers:
-        - image: "miniflux/miniflux:2.2.0"
+        - image: "miniflux/miniflux:2.2.1"
           imagePullPolicy: "IfNotPresent"
           name: "miniflux"
           ports:

apps/monitoring/victoriametrics/deployment.yaml

@@ -41,7 +41,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: victoriametrics
-          image: victoriametrics/victoria-metrics:v1.103.0
+          image: victoriametrics/victoria-metrics:v1.104.0
           imagePullPolicy: IfNotPresent
           args:
             - "--storageDataPath=/storage"

apps/monitoring/vmalert/deployment.yaml

@@ -36,7 +36,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: vmalert
-          image: victoriametrics/vmalert:v1.103.0
+          image: victoriametrics/vmalert:v1.104.0
           imagePullPolicy: IfNotPresent
           ports:
             - containerPort: 8880

apps/navidrome/deployment.yaml

@@ -35,7 +35,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: navidrome
-          image: deluan/navidrome:0.53.2
+          image: deluan/navidrome:0.53.3
           imagePullPolicy: IfNotPresent
           securityContext:
             runAsNonRoot: true

apps/paperless-ngx/components/tika/gotenberg-deployment.yaml

@@ -29,7 +29,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: gotenberg
-          image: gotenberg/gotenberg:8.10.0
+          image: gotenberg/gotenberg:8.11.0
           args:
             - gotenberg
             - "--log-level=warn"

apps/paperless-ngx/paperless-ngx-deployment.yaml

@@ -36,7 +36,7 @@ spec:
               memory: "512Mi"
               cpu: "50m"
             limits:
-              memory: "1024Mi"
+              memory: "2048Mi"
           ports:
             - containerPort: 8000
               name: "paperless-ngx"
@@ -92,13 +92,13 @@ spec:
       volumes:
         - name: "storage"
           emptyDir:
-            sizeLimit: "5Gi"
+            sizeLimit: "1Gi"
         - name: "consumption"
           emptyDir:
-            sizeLimit: "512Mi"
+            sizeLimit: "1Gi"
         - name: "tmp"
           emptyDir:
-            sizeLimit: "5Mi"
+            sizeLimit: "1Gi"
         - name: "entrypoint"
           configMap:
             name: "entrypoint-script"

apps/vcr/yt-dlp-cronjob.yaml

@@ -22,7 +22,7 @@ spec:
               type: RuntimeDefault
           containers:
             - name: yt-dlp
-              image: ghcr.io/soerenschneider/yt-dlp:2024.8.6
+              image: ghcr.io/soerenschneider/yt-dlp:2024.9.27
               imagePullPolicy: IfNotPresent
               securityContext:
                 runAsUser: 65535

apps/whoogle/deployment.yaml

@@ -28,7 +28,7 @@ spec:
           type: "RuntimeDefault"
       containers:
         - name: "whoogle"
-          image: "ghcr.io/benbusby/whoogle-search:0.8.4"
+          image: "ghcr.io/benbusby/whoogle-search:0.9.0"
           imagePullPolicy: "IfNotPresent"
           securityContext:
             runAsUser: 45346

clusters/dqs.dd.soeren.cloud/paperless-ngx/kustomization.yaml

@@ -0,0 +1,36 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: paperless-ngx
+resources:
+  - ../../../apps/paperless-ngx
+  - namespace.yaml
+  - pv-consumption.yaml
+  - pv-storage.yaml
+components:
+  - ../../../apps/paperless-ngx/components/istio
+  - ../../../apps/paperless-ngx/components/istio-proxy
+  - ../../../apps/paperless-ngx/components/pvc
+  - ../../../apps/paperless-ngx/components/tika
+  - ../../../apps/paperless-ngx/components/database-mariadb
+patches:
+  - target:
+      kind: VirtualService
+      name: paperless-ngx
+    patch: |-
+      - op: replace
+        path: /spec/hosts
+        value:
+          - paperless-ngx.dqs.dd.soeren.cloud
+configMapGenerator:
+  - name: paperless-config
+    behavior: merge
+    literals:
+      - PAPERLESS_URL=https://paperless-ngx.dqs.dd.soeren.cloud
+      - PAPERLESS_CORS_ALLOWED_HOSTS=https://paperless-ngx.dqs.dd.soeren.cloud
+      - PAPERLESS_DBHOST=dbs.pt.soeren.cloud
+  - name: oauth2-proxy  # TODO: https://github.com/kubernetes-sigs/kustomize/issues/4402
+    literals:
+      - OAUTH2_PROXY_OIDC_ISSUER_URL=https://keycloak.svc.dd.soeren.cloud/realms/myrealm
+      - OAUTH2_PROXY_CLIENT_ID=paperless-ngx
+      - OAUTH2_PROXY_EMAIL_DOMAINS=*