Merge branch 'main' into extraSecretEnvironmentVars

2024-07-22 10:16:45 +02:00 · 2024-07-22 10:16:45 +02:00 · 4091483754
commit 4091483754
parent ae6224fe57 3462a1a93b
28 changed files with 172 additions and 42 deletions
--- a/forgejo-runner/Chart.yaml
+++ b/forgejo-runner/Chart.yaml
@ -2,7 +2,7 @@ apiVersion: v2
 name: forgejo-runner
 description: Deploy runner for an forgejo instance (default codeberg.org)
 type: application
-version: 0.2.4
+version: 0.2.5
 # renovate: image=code.forgejo.org/forgejo/runner
 appVersion: "3.5.0"
 maintainers:
--- a/forgejo-runner/README.adoc
+++ b/forgejo-runner/README.adoc
@ -2,7 +2,7 @@

 = forgejo-runner

-image::https://img.shields.io/badge/Version-0.2.4-informational?style=flat-square[Version: 0.2.4]
+image::https://img.shields.io/badge/Version-0.2.5-informational?style=flat-square[Version: 0.2.5]
 image::https://img.shields.io/badge/Version-application-informational?style=flat-square[Type: application]
 image::https://img.shields.io/badge/AppVersion-3.5.0-informational?style=flat-square[AppVersion: 3.5.0]
 == Maintainers
@ -295,7 +295,7 @@ helm uninstall forgejo-runner-release

 | kubectl.image.tag
 | string
-| `"1.30.2"`
+| `"1.30.3"`
 |

 | nameOverride
--- a/forgejo-runner/values.yaml
+++ b/forgejo-runner/values.yaml
@ -147,7 +147,7 @@ kubectl:
    registry: docker.io
    repository: bitnami/kubectl
    pullPolicy: IfNotPresent
-    tag: 1.30.2
+    tag: 1.30.3

 serviceAccount:
  # Specifies whether a service account should be created
--- a/gotosocial/Chart.yaml
+++ b/gotosocial/Chart.yaml
@ -3,7 +3,7 @@ name: gotosocial
 description: With GoToSocial, you can keep in touch with your friends, post, read, and share images and articles. All without being tracked or advertised to!
 icon: https://docs.gotosocial.org/en/latest/assets/sloth.png
 type: application
-version: 0.1.9
+version: 0.2.0
 # renovate: image=docker.io/superseriousbusiness/gotosocial
 appVersion: "0.16.0"
 maintainers:
--- a/gotosocial/README.adoc
+++ b/gotosocial/README.adoc
@ -2,7 +2,7 @@

 = gotosocial

-image::https://img.shields.io/badge/Version-0.1.9-informational?style=flat-square[Version: 0.1.9]
+image::https://img.shields.io/badge/Version-0.2.0-informational?style=flat-square[Version: 0.2.0]
 image::https://img.shields.io/badge/Version-application-informational?style=flat-square[Type: application]
 image::https://img.shields.io/badge/AppVersion-0.16.0-informational?style=flat-square[AppVersion: 0.16.0]
 == Maintainers
@ -302,6 +302,26 @@ helm uninstall gotosocial-release
 | `true`
 | Use SSL for S3 connections.  Only set this to 'false' when testing locally.

+| gotosocial.tracing.enabled
+| bool
+| `false`
+| Enable OpenTelemetry based tracing support.
+
+| gotosocial.tracing.endpoint
+| string
+| `""`
+| Endpoint of the trace ingester. When using the gRPC or HTTP based transports, provide the endpoint as a single address/port combination without a protocol scheme.
+
+| gotosocial.tracing.insecureTransport
+| bool
+| `false`
+| Disable TLS for the gRPC and HTTP transport protocols.
+
+| gotosocial.tracing.transport
+| string
+| `"grpc"`
+| Set the transport protocol for the tracing system. Can either be "grpc" for OTLP gRPC, or "http" for OTLP HTTP.
+
 | gotosocial.tz
 | string
 | `"UTC"`
@ -480,7 +500,7 @@ helm uninstall gotosocial-release
 | serviceAccount.name
 | string
 | `""`
-| If not set and create is true, a name is generated using the fullname template
+| The name of the service account to use.  If not set and create is true, a name is generated using the fullname template

 | tolerations
 | list
--- a/gotosocial/templates/secret.yaml
+++ b/gotosocial/templates/secret.yaml
@ -99,4 +99,16 @@ data:
  {{- end }}{{/* end-with smtp */}}

  GTS_METRICS_ENABLED: {{ toYaml .metrics.enabled | b64enc }}
+
+  # https://www.w3.org/TR/trace-context/#traceparent-header
+  GTS_REQUEST_ID_HEADER: {{ "Traceparent" | b64enc }}
+  {{- with .tracing }}
+  {{- if .enabled }}
+  GTS_TRACING_ENABLED: {{ "true" | b64enc}}
+  GTS_TRACING_TRANSPORT: {{ .transport | b64enc }}
+  GTS_TRACING_ENDPOINT: {{ .endpoint | b64enc }}
+  GTS_TRACING_INSECURE_TRANSPORT: {{ toYaml .insecureTransport | b64enc }}
+  {{- end }}{{/* end-if .tracing.enabled */}}
+  {{- end }}{{/* end-with .tracing */}}
+
  {{- end }}{{/* end-with .gotosocial */}}
--- a/gotosocial/values.yaml
+++ b/gotosocial/values.yaml
@ -174,6 +174,15 @@ gotosocial:
      enabled: false
      username: ""
      password: ""
+  tracing:
+    # -- Enable OpenTelemetry based tracing support.
+    enabled: false
+    # -- Set the transport protocol for the tracing system. Can either be "grpc" for OTLP gRPC, or "http" for OTLP HTTP.
+    transport: grpc
+    # -- Endpoint of the trace ingester. When using the gRPC or HTTP based transports, provide the endpoint as a single address/port combination without a protocol scheme.
+    endpoint: ""
+    # -- Disable TLS for the gRPC and HTTP transport protocols.
+    insecureTransport: false

 prometheus:
  servicemonitor:
@ -188,7 +197,7 @@ serviceAccount:
  # -- Annotations to add to the service account
  annotations: {}
  # -- The name of the service account to use.
-  # -- If not set and create is true, a name is generated using the fullname template
+  #  If not set and create is true, a name is generated using the fullname template
  name: ""

 podAnnotations: {}
--- a/grampsweb/Chart.yaml
+++ b/grampsweb/Chart.yaml
@ -3,9 +3,9 @@ name: grampsweb
 description: A Helm chart for gramps web
 icon: https://raw.githubusercontent.com/gramps-project/Gramps.js/main/images/icon512.png
 type: application
-version: 0.1.12
+version: 0.1.14
 # renovate: image=ghcr.io/gramps-project/grampsweb
-appVersion: "24.6.0"
+appVersion: "24.7.0"
 maintainers:
  - name: WrenIX
    url: https://wrenix.eu
--- a/grampsweb/README.adoc
+++ b/grampsweb/README.adoc
@ -2,9 +2,9 @@

 = grampsweb

-image::https://img.shields.io/badge/Version-0.1.12-informational?style=flat-square[Version: 0.1.12]
+image::https://img.shields.io/badge/Version-0.1.14-informational?style=flat-square[Version: 0.1.14]
 image::https://img.shields.io/badge/Version-application-informational?style=flat-square[Type: application]
-image::https://img.shields.io/badge/AppVersion-24.6.0-informational?style=flat-square[AppVersion: 24.6.0]
+image::https://img.shields.io/badge/AppVersion-24.7.0-informational?style=flat-square[AppVersion: 24.7.0]
 == Maintainers

 .Maintainers
@ -80,7 +80,7 @@ helm uninstall grampsweb-release
 | gramps.baseURL
 | string
 | `"https://gramps.example.org"`
-|
+| Base URL where the API can be reached (e.g. https://mygramps.mydomain.com/). This is necessary e.g. to build correct passwort reset links

 | gramps.mail.from
 | string
@ -112,10 +112,15 @@ helm uninstall grampsweb-release
 | `nil`
 | SMTP server username

+| gramps.mediaPrefixTree
+| bool
+| `false`
+| whether or not to use a separate subfolder for the media files of each tree. Defaults to False, but strongly recommend to use True in a multi-tree setup
+
 | gramps.tree
 | string
 | `"Gramps Web"`
-|
+| To enable multi-tree support, the TREE config option must be set to a single asterisk `*`

 | image.pullPolicy
 | string
--- a/grampsweb/templates/deployment.yaml
+++ b/grampsweb/templates/deployment.yaml
@ -36,13 +36,6 @@ spec:
            {{- toYaml .Values.securityContext | nindent 12 }}
          image: "{{ .Values.image.registry }}/{{ .Values.image.repository }}:{{ .Values.image.tag | default (printf "v%s" .Chart.AppVersion) }}"
          imagePullPolicy: {{ .Values.image.pullPolicy }}
-          {{- with .Values.gramps }}
-          env:
-            - name: "GRAMPSWEB_TREE"
-              value: "{{ .tree }}"
-            - name: "GRAMPSWEB_BASE_URL"
-              value: "{{ .baseURL }}"
-          {{- end }}
          envFrom:
            - secretRef:
                name: {{ include "grampsweb.fullname" . }}
--- a/grampsweb/templates/secret.yaml
+++ b/grampsweb/templates/secret.yaml
@ -6,6 +6,15 @@ metadata:
  labels:
    {{- include "grampsweb.labels" . | nindent 4 }}
 data:
+  {{- with .Values.gramps.baseURL }}
+  GRAMPSWEB_BASE_URL: {{ . | b64enc }}
+  {{- end }}
+  {{- with .Values.gramps.tree }}
+  GRAMPSWEB_TREE: {{ . | b64enc }}
+  {{- end }}
+  {{- with .Values.gramps.mediaPrefixTree }}
+  GRAMPSWEB_MEDIA_PREFIX_TREE: {{ . | ternary "TRUE" "FALSE" | b64enc }}
+  {{- end }}
  {{- with .Values.gramps.mediaBaseDir }}
  GRAMPSWEB_MEDIA_BASE_DIR: {{ . | b64enc }}
  {{- end }}
--- a/grampsweb/values.yaml
+++ b/grampsweb/values.yaml
@ -16,8 +16,12 @@ nameOverride: ""
 fullnameOverride: ""

 gramps:
+  # -- To enable multi-tree support, the TREE config option must be set to a single asterisk `*`
  tree: "Gramps Web"
+  # -- Base URL where the API can be reached (e.g. https://mygramps.mydomain.com/). This is necessary e.g. to build correct passwort reset links
  baseURL: "https://gramps.example.org"
+  # -- whether or not to use a separate subfolder for the media files of each tree. Defaults to False, but strongly recommend to use True in a multi-tree setup
+  mediaPrefixTree: false
  mail:
    # -- SMTP server host (e.g. for sending password reset e-mails)
    host:
--- a/home-assistant/Chart.yaml
+++ b/home-assistant/Chart.yaml
@ -2,9 +2,9 @@ apiVersion: v2
 name: home-assistant
 description: Home Assistant with tooling to run on an k3s pi
 type: application
-version: 0.1.18
+version: 0.1.20
 # renovate: image=ghcr.io/home-assistant/home-assistant
-appVersion: "2024.7.1"
+appVersion: "2024.7.3"
 maintainers:
  - name: WrenIX
    url: https://wrenix.eu
--- a/home-assistant/README.adoc
+++ b/home-assistant/README.adoc
@ -2,9 +2,9 @@

 = home-assistant

-image::https://img.shields.io/badge/Version-0.1.18-informational?style=flat-square[Version: 0.1.18]
+image::https://img.shields.io/badge/Version-0.1.20-informational?style=flat-square[Version: 0.1.20]
 image::https://img.shields.io/badge/Version-application-informational?style=flat-square[Type: application]
-image::https://img.shields.io/badge/AppVersion-2024.7.1-informational?style=flat-square[AppVersion: 2024.7.1]
+image::https://img.shields.io/badge/AppVersion-2024.7.3-informational?style=flat-square[AppVersion: 2024.7.3]
 == Maintainers

 .Maintainers
@ -184,7 +184,7 @@ helm uninstall home-assistant-release

 | nats.image.tag
 | string
-| `"2.10.17-scratch"`
+| `"2.10.18-scratch"`
 |

 | nats.livenessProbe.tcpSocket.port
--- a/home-assistant/values.yaml
+++ b/home-assistant/values.yaml
@ -24,7 +24,7 @@ nats:
    registry: docker.io
    repository: library/nats
    pullPolicy: IfNotPresent
-    tag: "2.10.17-scratch"
+    tag: "2.10.18-scratch"
  service:
    port:
      nats: 4222
--- a/jellyfin/Chart.yaml
+++ b/jellyfin/Chart.yaml
@ -3,9 +3,9 @@ name: jellyfin
 description: The Free Software Media System
 icon: https://raw.githubusercontent.com/jellyfin/jellyfin-ux/master/branding/SVG/icon-transparent.svg
 type: application
-version: 0.2.1
+version: 0.2.2
 # renovate: image=ghcr.io/jellyfin/jellyfin
-appVersion: "10.9.7"
+appVersion: "10.9.8"
 maintainers:
  - name: WrenIX
    url: https://wrenix.eu
--- a/jellyfin/README.adoc
+++ b/jellyfin/README.adoc
@ -2,9 +2,9 @@

 = jellyfin

-image::https://img.shields.io/badge/Version-0.2.1-informational?style=flat-square[Version: 0.2.1]
+image::https://img.shields.io/badge/Version-0.2.2-informational?style=flat-square[Version: 0.2.2]
 image::https://img.shields.io/badge/Version-application-informational?style=flat-square[Type: application]
-image::https://img.shields.io/badge/AppVersion-10.9.7-informational?style=flat-square[AppVersion: 10.9.7]
+image::https://img.shields.io/badge/AppVersion-10.9.8-informational?style=flat-square[AppVersion: 10.9.8]
 == Maintainers

 .Maintainers
--- a/jellyfin/templates/deployment.yaml
+++ b/jellyfin/templates/deployment.yaml
@ -70,6 +70,12 @@ spec:
            httpGet:
              path: /
              port: http
+          startupProbe:
+            httpGet:
+              path: /
+              port: http
+            failureThreshold: 60
+            periodSeconds: 10
          resources:
            {{- toYaml .Values.resources | nindent 12 }}
          volumeMounts:
--- a/mautrix-signal/Chart.yaml
+++ b/mautrix-signal/Chart.yaml
@ -2,9 +2,9 @@ apiVersion: v2
 name: mautrix-signal
 description: A Matrix-Signal puppeting bridge.
 type: application
-version: 0.0.5
+version: 0.0.6
 # renovate: image=dock.mau.dev/mautrix/signal
-appVersion: "0.6.2"
+appVersion: "0.6.3"
 maintainers:
  - name: WrenIX
    url: https://wrenix.eu
--- a/mautrix-signal/README.adoc
+++ b/mautrix-signal/README.adoc
@ -2,9 +2,9 @@

 = mautrix-signal

-image::https://img.shields.io/badge/Version-0.0.5-informational?style=flat-square[Version: 0.0.5]
+image::https://img.shields.io/badge/Version-0.0.6-informational?style=flat-square[Version: 0.0.6]
 image::https://img.shields.io/badge/Version-application-informational?style=flat-square[Type: application]
-image::https://img.shields.io/badge/AppVersion-0.6.2-informational?style=flat-square[AppVersion: 0.6.2]
+image::https://img.shields.io/badge/AppVersion-0.6.3-informational?style=flat-square[AppVersion: 0.6.3]
 == Maintainers

 .Maintainers
--- a/ntfy/Chart.yaml
+++ b/ntfy/Chart.yaml
@ -3,7 +3,7 @@ name: ntfy
 description: A Helm chart for Kubernetes
 icon: https://github.com/binwiederhier/ntfy/raw/main/web/public/static/images/pwa-512x512.png
 type: application
-version: 0.1.11
+version: 0.1.12
 # renovate: image=docker.io/binwiederhier/ntfy
 appVersion: "2.11.0"
 maintainers:
--- a/ntfy/README.adoc
+++ b/ntfy/README.adoc
@ -2,7 +2,7 @@

 = ntfy

-image::https://img.shields.io/badge/Version-0.1.11-informational?style=flat-square[Version: 0.1.11]
+image::https://img.shields.io/badge/Version-0.1.12-informational?style=flat-square[Version: 0.1.12]
 image::https://img.shields.io/badge/Version-application-informational?style=flat-square[Type: application]
 image::https://img.shields.io/badge/AppVersion-2.11.0-informational?style=flat-square[AppVersion: 2.11.0]
 == Maintainers
@ -521,6 +521,11 @@ helm uninstall ntfy-release
 | list
 | `[]`
 |
+
+| updateStrategy.type
+| string
+| `"Recreate"`
+|
 |===

 Autogenerated from chart metadata using https://github.com/norwoodj/helm-docs[helm-docs]
--- a/ntfy/templates/deployment.yaml
+++ b/ntfy/templates/deployment.yaml
@ -28,6 +28,10 @@ spec:
      imagePullSecrets:
        {{- toYaml . | nindent 8 }}
      {{- end }}
+      {{- with .Values.updateStrategy }}
+      updateStrategy:
+        {{- toYaml . | nindent 4 }}
+      {{- end }}
      serviceAccountName: {{ include "ntfy.serviceAccountName" . }}
      securityContext:
        {{- toYaml .Values.podSecurityContext | nindent 8 }}
--- a/ntfy/values.yaml
+++ b/ntfy/values.yaml
@ -24,6 +24,9 @@ env: []
 #      key:
 envFrom: []

+updateStrategy:
+  type: Recreate
+
 ntfy:
  baseURL: "https://ntfy.example.org"
  listen:
--- a/stalwart-mail/Chart.yaml
+++ b/stalwart-mail/Chart.yaml
@ -3,9 +3,9 @@ name: stalwart-mail
 description: Helm Chart for Stalwart Mail Server - Secure & Modern All-in-One Mail Server (IMAP, JMAP, SMTP)
 icon: https://stalw.art/home/apple-touch-icon.png
 type: application
-version: 0.0.10
+version: 0.0.11
 # renovate: image=docker.io/stalwartlabs/mail-server
-appVersion: "0.8.1"
+appVersion: "0.8.5"
 maintainers:
  - name: WrenIX
    url: https://wrenix.eu
--- a/stalwart-mail/README.adoc
+++ b/stalwart-mail/README.adoc
@ -2,9 +2,9 @@

 = stalwart-mail

-image::https://img.shields.io/badge/Version-0.0.10-informational?style=flat-square[Version: 0.0.10]
+image::https://img.shields.io/badge/Version-0.0.11-informational?style=flat-square[Version: 0.0.11]
 image::https://img.shields.io/badge/Version-application-informational?style=flat-square[Type: application]
-image::https://img.shields.io/badge/AppVersion-0.8.1-informational?style=flat-square[AppVersion: 0.8.1]
+image::https://img.shields.io/badge/AppVersion-0.8.5-informational?style=flat-square[AppVersion: 0.8.5]
 == Maintainers

 .Maintainers
@ -159,6 +159,16 @@ helm uninstall stalwart-mail-release
 | `"internal"`
 |

+| config.server.listener.http.bind[0]
+| string
+| `"[::]:80"`
+|
+
+| config.server.listener.http.protocol
+| string
+| `"http"`
+|
+
 | config.server.listener.https.bind[0]
 | string
 | `"[::]:443"`
@ -439,6 +449,16 @@ helm uninstall stalwart-mail-release
 | `[]`
 |

+| livenessProbe.httpGet.path
+| string
+| `"/healthz/live"`
+|
+
+| livenessProbe.httpGet.port
+| string
+| `"http"`
+|
+
 | nameOverride
 | string
 | `""`
@ -499,6 +519,16 @@ helm uninstall stalwart-mail-release
 | `{}`
 |

+| readinessProbe.httpGet.path
+| string
+| `"/healthz/ready"`
+|
+
+| readinessProbe.httpGet.port
+| string
+| `"http"`
+|
+
 | replicaCount
 | int
 | `1`
@ -529,6 +559,11 @@ helm uninstall stalwart-mail-release
 | `"SingleStack"`
 | other option is RequireDualStack

+| service.ports.http
+| int
+| `80`
+|
+
 | service.ports.https
 | int
 | `443`
--- a/stalwart-mail/templates/deployment.yaml
+++ b/stalwart-mail/templates/deployment.yaml
@ -36,7 +36,7 @@ spec:
        - name: {{ .Chart.Name }}
          securityContext:
            {{- toYaml .Values.securityContext | nindent 12 }}
-          {{- with .Values.image}}
+          {{- with .Values.image }}
          image: "{{ coalesce $.Values.global.image.registry .registry }}/{{ .repository }}:{{ .tag | default (printf "v%s" $.Chart.AppVersion) }}"
          imagePullPolicy: {{ coalesce $.Values.global.image.pullPolicy .pullPolicy }}
          {{- end }}
@ -53,6 +53,18 @@ spec:
              containerPort: {{ $port }}
              protocol: TCP
            {{- end }}
+          {{- with .Values.livenessProbe }}
+          livenessProbe:
+            {{- toYaml . | nindent 12 }}
+          {{- end }}
+          {{- with .Values.readinessProbe }}
+          livenessProbe:
+            {{- toYaml . | nindent 12 }}
+          {{- end }}
+          {{- with .Values.startupProbe }}
+          livenessProbe:
+            {{- toYaml . | nindent 12 }}
+          {{- end }}
          resources:
            {{- toYaml .Values.resources | nindent 12 }}
          volumeMounts:
--- a/stalwart-mail/values.yaml
+++ b/stalwart-mail/values.yaml
@ -54,6 +54,9 @@ config:
      sieve:
        bind: ["[::]:4190"]
        protocol: "managesieve"
+      http:
+        protocol: "http"
+        bind: ["[::]:80"]
      https:
        protocol: "http"
        bind: ["[::]:443"]
@ -163,8 +166,18 @@ service:
    pop3: 110
    pop3s: 995
    sieve: 4190
+    http: 80
    https: 443

+livenessProbe:
+  httpGet:
+    path: /healthz/live
+    port: http
+readinessProbe:
+  httpGet:
+    path: /healthz/ready
+    port: http
+
 ingress:
  enabled: false
  className: ""