Merge branch 'main' of github.com:soerenschneider/k8s-gitops

soerenschneider · soerenschneider · commit c4de66e18ed7 · 2024-12-05T09:07:40.000+01:00
diff --git a/apps/bookstack/deployment.yaml b/apps/bookstack/deployment.yaml
@@ -30,7 +30,7 @@ spec:
       initContainers:
         # https://stackoverflow.com/questions/38483837/please-provide-a-valid-cache-path-error-in-laravel
         - name: init
-          image: solidnerd/bookstack:24.10.2
+          image: solidnerd/bookstack:24.10.3
           imagePullPolicy: IfNotPresent
           securityContext:
             privileged: false
@@ -58,7 +58,7 @@ spec:
             - "mkdir -v -p /var/www/bookstack/storage/framework/sessions /var/www/bookstack/storage/framework/views /var/www/bookstack/storage/framework/cache/data /var/www/bookstack/storage/uploads/images /var/www/bookstack/storage/uploads/files /var/www/bookstack/storage/logs"
       containers:
         - name: "bookstack"
-          image: "solidnerd/bookstack:24.10.2"
+          image: "solidnerd/bookstack:24.10.3"
           imagePullPolicy: "IfNotPresent"
           ports:
             - containerPort: 8080
diff --git a/apps/gatus/components/postgres/postgres-deployment.yaml b/apps/gatus/components/postgres/postgres-deployment.yaml
@@ -38,7 +38,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: postgres
-          image: postgres:16.4
+          image: postgres:16.6
           securityContext:
             runAsUser: 999
             runAsGroup: 999
diff --git a/apps/ghostfolio/components/postgres/postgres-deployment.yaml b/apps/ghostfolio/components/postgres/postgres-deployment.yaml
@@ -38,7 +38,7 @@ spec:
           type: "RuntimeDefault"
       containers:
         - name: "postgres"
-          image: "postgres:16.4"
+          image: "postgres:16.6"
           securityContext:
             runAsUser: 999
             runAsGroup: 999
diff --git a/apps/ghostfolio/deployment.yaml b/apps/ghostfolio/deployment.yaml
@@ -36,7 +36,7 @@ spec:
         seccompProfile:
           type: RuntimeDefault
       containers:
-        - image: docker.io/ghostfolio/ghostfolio:2.122.0
+        - image: docker.io/ghostfolio/ghostfolio:2.125.0
           imagePullPolicy: IfNotPresent
           name: ghostfolio
           securityContext:
diff --git a/apps/gotify/deployment.yaml b/apps/gotify/deployment.yaml
@@ -28,7 +28,7 @@ spec:
           type: "RuntimeDefault"
       containers:
         - name: "gotify"
-          image: "gotify/server:2.5.0"
+          image: "gotify/server:2.6.1"
           imagePullPolicy: "IfNotPresent"
           securityContext:
             runAsUser: 43444
diff --git a/apps/grafana/deployment.yaml b/apps/grafana/deployment.yaml
@@ -34,7 +34,7 @@ spec:
         seccompProfile:
           type: "RuntimeDefault"
       containers:
-        - image: "grafana/grafana:11.3.0"
+        - image: "grafana/grafana:11.3.2"
           name: "grafana"
           securityContext:
             allowPrivilegeEscalation: false
diff --git a/apps/hass/deployment.yaml b/apps/hass/deployment.yaml
@@ -28,7 +28,7 @@ spec:
         seccompProfile:
           type: RuntimeDefault
       containers:
-        - image: "homeassistant/home-assistant:2024.11.1"
+        - image: "homeassistant/home-assistant:2024.11.3"
           imagePullPolicy: "IfNotPresent"
           command:
             - "/usr/local/bin/hass"
diff --git a/apps/jellyfin/statefulset.yaml b/apps/jellyfin/statefulset.yaml
@@ -30,7 +30,7 @@ spec:
         seccompProfile:
           type: RuntimeDefault
       containers:
-        - image: "jellyfin/jellyfin:10.10.1"
+        - image: "jellyfin/jellyfin:10.10.3"
           securityContext:
             allowPrivilegeEscalation: false
             readOnlyRootFilesystem: true
diff --git a/apps/linkding/components/postgres/postgres-deployment.yaml b/apps/linkding/components/postgres/postgres-deployment.yaml
@@ -38,7 +38,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: postgres
-          image: postgres:16.4
+          image: postgres:16.6
           securityContext:
             runAsUser: 999
             runAsGroup: 999
diff --git a/apps/loki/deployment.yaml b/apps/loki/deployment.yaml
@@ -32,7 +32,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: "loki"
-          image: "grafana/loki:3.2.1"
+          image: "grafana/loki:3.3.0"
           args: []
           ports:
             - name: "loki"
diff --git a/apps/mealie/components/postgres/postgres-deployment.yaml b/apps/mealie/components/postgres/postgres-deployment.yaml
@@ -38,7 +38,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: postgres
-          image: postgres:16.4
+          image: postgres:16.6
           securityContext:
             runAsUser: 999
             runAsGroup: 999
diff --git a/apps/media/components/postgres/postgres-deployment.yaml b/apps/media/components/postgres/postgres-deployment.yaml
@@ -22,7 +22,7 @@ spec:
         runAsNonRoot: true
       containers:
         - name: postgres
-          image: postgres:16.4
+          image: postgres:16.6
           securityContext:
             runAsUser: 999
             runAsGroup: 999
diff --git a/apps/media/components/reverse-proxy/reverse-proxy-deployment.yaml b/apps/media/components/reverse-proxy/reverse-proxy-deployment.yaml
@@ -28,7 +28,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: nginx
-          image: nginx:1.27.2-alpine
+          image: nginx:1.27.3-alpine
           securityContext:
             readOnlyRootFilesystem: true
             allowPrivilegeEscalation: false
diff --git a/apps/miniflux/components/postgres/postgres-deployment.yaml b/apps/miniflux/components/postgres/postgres-deployment.yaml
@@ -38,7 +38,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: postgres
-          image: postgres:16.4
+          image: postgres:16.6
           securityContext:
             runAsUser: 999
             runAsGroup: 999
diff --git a/apps/monitoring/components/reverse-proxy/reverse-proxy-deployment.yaml b/apps/monitoring/components/reverse-proxy/reverse-proxy-deployment.yaml
@@ -29,7 +29,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: nginx
-          image: nginx:1.27.2-alpine
+          image: nginx:1.27.3-alpine
           securityContext:
             readOnlyRootFilesystem: true
             allowPrivilegeEscalation: false
diff --git a/apps/monitoring/prometheus/deployment.yaml b/apps/monitoring/prometheus/deployment.yaml
@@ -35,7 +35,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: prometheus
-          image: quay.io/prometheus/prometheus:v3.0.0
+          image: quay.io/prometheus/prometheus:v3.0.1
           args:
             - "--storage.tsdb.retention.time=24h"
             - "--storage.tsdb.path=/prometheus/"
diff --git a/apps/monitoring/victoriametrics/deployment.yaml b/apps/monitoring/victoriametrics/deployment.yaml
@@ -41,7 +41,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: victoriametrics
-          image: victoriametrics/victoria-metrics:v1.106.0
+          image: victoriametrics/victoria-metrics:v1.107.0
           imagePullPolicy: IfNotPresent
           args:
             - "--storageDataPath=/storage"
diff --git a/apps/monitoring/vmalert/deployment.yaml b/apps/monitoring/vmalert/deployment.yaml
@@ -36,7 +36,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: vmalert
-          image: victoriametrics/vmalert:v1.106.0
+          image: victoriametrics/vmalert:v1.107.0
           imagePullPolicy: IfNotPresent
           ports:
             - containerPort: 8880
diff --git a/apps/nextcloud/deployment.yaml b/apps/nextcloud/deployment.yaml
@@ -59,7 +59,7 @@ spec:
                 - "ALL"
       containers:
         - name: "nginx"
-          image: "nginx:1.27.2-alpine"
+          image: "nginx:1.27.3-alpine"
           ports:
             - containerPort: 8080
               name: "nginx"
diff --git a/apps/privatebin/deployment.yaml b/apps/privatebin/deployment.yaml
@@ -29,7 +29,7 @@ spec:
           type: "RuntimeDefault"
       containers:
         - name: "privatebin"
-          image: "docker.io/privatebin/nginx-fpm-alpine:1.7.4@sha256:4cc5f26f5b558b734cb084ada4fdacd75bd9f5e4574f3f3df54165b3623d6b86"
+          image: "docker.io/privatebin/nginx-fpm-alpine:1.7.5@sha256:90b7e5713459f1059fd229d46755d17f9e94b86205cfaf104098dc76c0d969b6"
           imagePullPolicy: "IfNotPresent"
           resources:
             requests:
diff --git a/apps/radicale/deployment.yaml b/apps/radicale/deployment.yaml
@@ -28,7 +28,7 @@ spec:
         seccompProfile:
           type: RuntimeDefault
       containers:
-        - image: "tomsquest/docker-radicale:3.3.0.1"
+        - image: "tomsquest/docker-radicale:3.3.1.1"
           name: "radicale"
           securityContext:
             allowPrivilegeEscalation: false
diff --git a/apps/renovatebot/cronjob.yaml b/apps/renovatebot/cronjob.yaml
@@ -26,7 +26,7 @@ spec:
             seccompProfile:
               type: "RuntimeDefault"
           containers:
-            - image: "renovate/renovate:39.15.4"
+            - image: "renovate/renovate:39.48.0"
               name: "renovate"
               env:
                 - name: "RENOVATE_BASE_DIR"
diff --git a/apps/taskchampion/deployment.yaml b/apps/taskchampion/deployment.yaml
@@ -26,7 +26,7 @@ spec:
           type: "RuntimeDefault"
       containers:
         - name: "taskchampion"
-          image: "ghcr.io/gothenburgbitfactory/taskchampion-sync-server:main@sha256:c86c747938658f21fcbedbe921c51c36feee918b1f7fa43b2cc2b69581cca490"
+          image: "ghcr.io/gothenburgbitfactory/taskchampion-sync-server:main@sha256:9ddbb6248d19c1ee8d5bbf3ed9425a133ad4337657ad3ba873cd2635460ab2a6"
           imagePullPolicy: "IfNotPresent"
           ports:
             - containerPort: 8080
diff --git a/apps/vector/daemonset.yaml b/apps/vector/daemonset.yaml
@@ -37,7 +37,7 @@ spec:
           type: "RuntimeDefault"
       containers:
         - name: "vector"
-          image: "timberio/vector:0.42.0-distroless-libc"
+          image: "timberio/vector:0.43.0-distroless-libc"
           imagePullPolicy: "IfNotPresent"
           args:
             - "--config-dir"
diff --git a/infra/external-secrets/components/resources/deployment-controller.yaml b/infra/external-secrets/components/resources/deployment-controller.yaml
@@ -47,7 +47,7 @@ spec:
             runAsGroup: 12364
             seccompProfile:
               type: RuntimeDefault
-          image: ghcr.io/external-secrets/external-secrets:v0.10.5
+          image: ghcr.io/external-secrets/external-secrets:v0.10.6
           imagePullPolicy: IfNotPresent
           args:
             - certcontroller
diff --git a/infra/external-secrets/components/resources/deployment-webhook.yaml b/infra/external-secrets/components/resources/deployment-webhook.yaml
@@ -47,7 +47,7 @@ spec:
             runAsGroup: 12364
             seccompProfile:
               type: RuntimeDefault
-          image: ghcr.io/external-secrets/external-secrets:v0.10.5
+          image: ghcr.io/external-secrets/external-secrets:v0.10.6
           imagePullPolicy: IfNotPresent
           args:
             - webhook
diff --git a/infra/external-secrets/components/resources/deployment.yaml b/infra/external-secrets/components/resources/deployment.yaml
@@ -47,7 +47,7 @@ spec:
             runAsGroup: 12364
             seccompProfile:
               type: RuntimeDefault
-          image: ghcr.io/external-secrets/external-secrets:v0.10.5
+          image: ghcr.io/external-secrets/external-secrets:v0.10.6
           imagePullPolicy: IfNotPresent
           args:
             - --concurrent=1
