chore(deps): update helm release jellyfin to v2.5.0

Reviewed-on: #19

services/Gitea/application-gitea.yaml

@@ -22,7 +22,7 @@ spec:
   - repoURL: https://dl.gitea.com/charts/
     chart: gitea
     # targetRevision: 11.0.0
-    targetRevision: 12.1.1
+    targetRevision: 12.4.0
     helm:
       valueFiles:
       - $values/services/Gitea/values.yaml

services/Gitea/supportingfiles/configmap-gitea-actions-act-runner-config.yaml

@@ -22,8 +22,10 @@ data:
       options: >
         --add-host=docker:host-gateway
         -v /dev/kvm:/dev/kvm
+        -v /var/run/docker.sock:/var/run/docker.sock
       privileged: true
       valid_volumes:
         - /dev/kvm
+        - /var/run/docker.sock
     runner:
       capacity: 2

services/Gitea/supportingfiles/sealedsecret-gitea-actions-registration-token.yaml

@@ -0,0 +1,15 @@
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  creationTimestamp: null
+  name: gitea-actions-registration-token
+  namespace: gitea
+spec:
+  encryptedData:
+    token: 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
+  template:
+    metadata:
+      creationTimestamp: null
+      name: gitea-actions-registration-token
+      namespace: gitea
+    type: Opaque

services/Gitea/supportingfiles/values.yaml

@@ -1,41 +0,0 @@
-enabled: true
-
-statefulset:
-  actRunner:
-    repository: gitea/act_runner
-    tag: 0.2.12
-  dind:
-    repository: docker
-    # tag: 25.0.2-dind
-    tag: 28.3.2-dind
-
-  persistence:
-    size: 1Gi
-
-init:
-  image:
-    repository: busybox
-    tag: "1.37.0"
-
-provisioning:
-  enabled: false
-
-  publish:
-    repository: bitnami/kubectl
-    # tag: 1.29.0
-    tag: 1.33.3
-
-existingSecret: "gitea-actions-registration-token"
-existingSecretKey: "token"
-
-giteaRootURL: "https://code.spamasaurus.com"
-
-persistence:
-  create: false
-  claimName: csismb-gitea-act
-  storageClass: csismb-gitea-act
-
-image:
-  registry: "docker.gitea.com"
-  repository: gitea
-  tag: "1.24.2-rootless"

services/Gitea/values.yaml

@@ -44,6 +44,11 @@ postgresql-ha:
   enabled: false
 valkey:
   enabled: true
+  image:
+    repository: bitnamilegacy/valkey
+  global:
+    security:
+      allowInsecureImages: true
   primary:
     persistence:
       existingClaim: csismb-gitea-cache

services/PVR/Jellyfin/application-jellyfin.yaml

@@ -18,7 +18,7 @@ spec:
     targetRevision: HEAD
   - repoURL: https://jellyfin.github.io/jellyfin-helm
     chart: jellyfin
-    targetRevision: 2.3.0
+    targetRevision: 2.5.0
     helm:
       valueFiles:
       - $values/services/PVR/Jellyfin/values.yaml

services/PVR/Jellyseerr/application-jellyseerr.yaml

@@ -18,7 +18,7 @@ spec:
     targetRevision: HEAD
   - repoURL: ghcr.io/fallenbagel/jellyseerr
     chart: jellyseerr-chart
-    targetRevision: 2.4.0
+    targetRevision: 2.7.0
     helm:
       valueFiles:
         - $values/services/PVR/Jellyseerr/values.yaml

services/PVR/Wizarr/_namespace-wizarr.yaml

@@ -1,4 +1,4 @@
 apiVersion: v1
 kind: Namespace
 metadata:
-  name: webtop
+  name: wizarr

services/PVR/Wizarr/application-wizarr.yaml

@@ -1,11 +1,11 @@
 apiVersion: argoproj.io/v1alpha1
 kind: Application
 metadata:
-  name: webtop
+  name: wizarr
   namespace: argo-cd
 spec:
   destination:
-    namespace: webtop
+    namespace: wizarr
     server: https://kubernetes.default.svc
   project: default
   syncPolicy:
@@ -14,5 +14,5 @@ spec:
       - CreateNamespace=true
   sources:
   - repoURL: https://code.spamasaurus.com/djpbessems/Kubernetes.K3s.installLog
-    path: services/Webtop
+    path: services/PVR/Wizarr
     targetRevision: HEAD

services/PVR/Wizarr/deployment-wizarr.yaml

@@ -0,0 +1,40 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: wizarr
+  namespace: wizarr
+  labels:
+    app: wizarr
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: wizarr
+  template:
+    metadata:
+      labels:
+        app: wizarr
+    spec:
+      containers:
+      - name: wizarr
+        image: ghcr.io/wizarrrr/wizarr:latest
+        imagePullPolicy: Always
+        env:
+          - name: PUID
+            value: '1000'
+          - name: PGID
+            value: '1000'
+          - name: DISABLE_BUILTIN_AUTH
+            value: 'false'
+          - name: TZ
+            value: Australia/Melbourne
+        ports:
+          - name: web
+            containerPort: 5690
+        volumeMounts:
+        - mountPath: /data
+          name: csismb-wizarr-data
+      volumes:
+      - name: csismb-wizarr-data
+        persistentVolumeClaim:
+          claimName: csismb-wizarr-data

services/PVR/Wizarr/ingressroute-wizarr.yaml

@@ -1,19 +1,18 @@
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
 metadata:
-  name: webtop
+  name: wizarr
-  namespace: webtop
+  namespace: wizarr
 spec:
   entryPoints:
     - websecure
   routes:
-  - match: Host(`remote.spamasaurus.com`)
+  - match: Host(`account.pvr.spamasaurus.com`)
     kind: Rule
     services:
-    - name: webtop
+    - name: wizarr
-      port: 3001
+      port: 5690
-      scheme: https
-      serversTransport: insecure-skip-verify
     middlewares:
       - name: 2fa-authentication@file
       - name: security-headers@file
+      # - name: compression@file

services/PVR/Wizarr/persistentvolume-csismb-wizarr-data.yaml

@@ -0,0 +1,34 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  annotations:
+    pv.kubernetes.io/provisioned-by: smb.csi.k8s.io
+  name: csismb-wizarr-data
+spec:
+  capacity:
+    storage: 1Gi
+  accessModes:
+    - ReadWriteMany
+  persistentVolumeReclaimPolicy: Retain
+  storageClassName: csismb-wizarr-data
+  mountOptions:
+    - dir_mode=0777
+    - file_mode=0777
+    - uid=1000
+    - gid=1000
+    - nobrl
+    - cache=strict
+    - iocharset=utf8
+    - mfsymlinks
+    - noserverino  # required to prevent data corruption
+  csi:
+    driver: smb.csi.k8s.io
+    # volumeHandle format: {smb-server-address}#{sub-dir-name}#{share-name}
+    # make sure this value is unique for every share in the cluster
+    volumeHandle: 192.168.154.195#wizarr#data
+    volumeAttributes:
+      source: //192.168.154.195/K3s.Volumes
+      subDir: wizarr/data
+    nodeStageSecretRef:
+      name: smb-credentials
+      namespace: wizarr

services/PVR/Wizarr/persistentvolumeclaim-csismb-wizarr-data.yaml

@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: csismb-wizarr-data
+  namespace: wizarr
+spec:
+  accessModes:
+    - ReadWriteMany
+  storageClassName: csismb-wizarr-data
+  resources:
+    requests:
+      storage: 1Gi

services/PVR/Wizarr/sealedsecret-smb-credentials.yaml

@@ -0,0 +1,14 @@
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  name: smb-credentials
+  namespace: wizarr
+spec:
+  encryptedData:
+    password: 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
+    username: AgApQgyeFk1Ebce3P86Ih3aAXwiwmJ8Jtkwd4reHW45l59X8OosDCdZnhoMxKebciG17Caa7MLWF5A7MFNzahlqnyMCj3xdoC+w8fqLDQUO8vhV1xikAfuVxLMqpj+BHg4gl2N+vuwz+EGnUrN+upC6AmJAC1KSY3Y1V+i6l6wegXv2FGzVYS9p48bROr8LJEEvpzaw99mA4DXPLO5rp9Dh90c70GN5wOq1AHC4oEQzeQJERxQ+M8xS1jGFOn0XDHvw5d1eIfOoN1lAyntowDfHzNZJ8gumS3xDr0sL2ISVkozvAGkabUBq2gMP1U0TlwQIPOfGJdUTYFujAZAItwT7YkLx2hiS3gITgiFuO3muB4U2xw+1Jimj4RH9kMdYDSXEnee2yCh4oZAiIYazXcwUv7R2d83QH2Nl6ORwHnkGsQRMe27q9CHszgLYM1tA2pUDtJfnengDLs4CCNUj1wCP40mThqFIJ9XF1FlkF3ulBleMBbLzFx+4UJJJXbVS2IRTufmLzAOk6ejf3WySP1/Cu5ik0/+2/5D7Ct/uraz+269YfbE8gz9wWMD4kU/EjoTAkfGZ8xuRso8hxKVOh4bXsgCCi0HT3MUJfE82crkKQxCIBzTPOYjreveZzL1TBtb9BQTaa7Cj8S2wNgrhGG9zAavpOMOGg4VtBuCBa9J6Vgw1EzS3vT/MjLMlo9JQGp8smH1kqNos=
+  template:
+    metadata:
+      name: smb-credentials
+      namespace: wizarr
+    type: Opaque

services/PVR/Wizarr/service-wizarr.yaml

@@ -1,12 +1,12 @@
 apiVersion: v1
 kind: Service
 metadata:
-  name: webtop
+  name: wizarr
-  namespace: webtop
+  namespace: wizarr
 spec:
   ports:
     - protocol: TCP
       name: web
-      port: 3001
+      port: 5690
   selector:
-    app: webtop
+    app: wizarr

services/Webtop/configmap-init.d-zsh.yaml

@@ -1,18 +0,0 @@
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: init.d-zsh
-  namespace: webtop
-data:
-  00-zsh.sh: |
-    #!/bin/bash
-
-    # Make sure zsh is installed and available
-    ZSH_BIN=$(command -v zsh)
-
-    if [[ -x "$ZSH_BIN" ]]; then
-        echo "[webtop] Setting abc's default shell to $ZSH_BIN"
-        usermod -s "$ZSH_BIN" abc
-    else
-        echo "[webtop] zsh not found, skipping chsh"
-    fi

services/Webtop/deployment-webtop.yaml

@@ -1,48 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: webtop
-  namespace: webtop
-  labels:
-    app: webtop
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: webtop
-  strategy:
-    type: Recreate
-  template:
-    metadata:
-      labels:
-        app: webtop
-    spec:
-      containers:
-      - name: webtop
-        image: lscr.io/linuxserver/webtop:latest
-        env:
-          - name: START_DOCKER
-            value: "false"
-          - name: DOCKER_MODS
-            value: linuxserver/mods:universal-package-install
-          - name: INSTALL_PACKAGES
-            value: nano|zsh
-          - name: TZ
-            value: Australia/Melbourne
-        ports:
-          - name: web
-            containerPort: 3001
-        volumeMounts:
-        - mountPath: /config
-          name: webtop-config
-        - mountPath: /custom-cont-init.d/00-zsh.sh
-          name: webtop-initd
-          subPath: 00-zsh.sh
-      volumes:
-      - name: webtop-config
-        persistentVolumeClaim:
-          claimName: webtop-config
-      - name: webtop-initd
-        configMap:
-          name: init.d-zsh
-          defaultMode: 0700

services/Webtop/persistentvolumeclaim-webtop-config.yaml

@@ -1,11 +0,0 @@
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: webtop-config
-  namespace: webtop
-spec:
-  accessModes:
-    - ReadWriteOnce
-  resources:
-    requests:
-      storage: 20Gi

services/Webtop/sealedsecret-smb-credentials.yaml

@@ -1,16 +0,0 @@
-apiVersion: bitnami.com/v1alpha1
-kind: SealedSecret
-metadata:
-  creationTimestamp: null
-  name: smb-credentials
-  namespace: webtop
-spec:
-  encryptedData:
-    password: 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
-    username: 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
-  template:
-    metadata:
-      creationTimestamp: null
-      name: smb-credentials
-      namespace: webtop
-    type: Opaque

services/Webtop/serverstransport-insecure-skip-verify.yaml

@@ -1,7 +0,0 @@
-apiVersion: traefik.io/v1alpha1
-kind: ServersTransport
-metadata:
-  name: insecure-skip-verify
-  namespace: webtop
-spec:
-  insecureSkipVerify: true

storage/csi-driver-smb/application-csi-driver-smb.yaml

@@ -13,7 +13,7 @@ spec:
   sources:
   - repoURL: https://raw.githubusercontent.com/kubernetes-csi/csi-driver-smb/master/charts
     chart: csi-driver-smb
-    targetRevision: v1.18.0
+    targetRevision: 1.19.1
     helm:
       valueFiles:
       - $values/storage/csi-driver-smb/values.yaml

system/ArgoCD/application-argo-cd.yaml

@@ -11,7 +11,8 @@ spec:
   sources:
   - repoURL: https://argoproj.github.io/argo-helm
     chart: argo-cd
-    targetRevision: 8.1.2
+    # targetRevision: 8.1.2
+    targetRevision: 8.6.4
     helm:
       valueFiles:
       - $values/system/ArgoCD/values.yaml

system/SealedSecrets/application-sealed-secrets-controller.yaml

@@ -13,7 +13,7 @@ spec:
   sources:
   - repoURL: https://bitnami-labs.github.io/sealed-secrets
     chart: sealed-secrets
-    targetRevision: 2.17.4
+    targetRevision: 2.17.7
     helm:
       valueFiles:
       - $values/system/SealedSecrets/values.yaml