chore(deps): update docker.gitea.com/gitea docker tag to v1.24.6

Merge pull request 'chore(deps): update helm release gitea to v12.2.0' (#5 ) from renovate/gitea-12.x into master
Reviewed-on: #5
2025-09-12 12:03:41 +00:00 · 2025-09-04 21:45:27 +00:00 · 2025-08-22 11:06:46 +00:00
33 changed files with 147 additions and 370 deletions
--- a/.gitea/workflows/renovate.yaml
+++ b/.gitea/workflows/renovate.yaml
@@ -16,7 +16,7 @@ jobs:
    container: ghcr.io/renovatebot/renovate:latest
    steps:
      - name: Check out repository code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v4
      - name: Run Renovate CLI
        run: |
          renovate
--- a/services/Gitea/application-gitea.yaml
+++ b/services/Gitea/application-gitea.yaml
@@ -22,7 +22,7 @@ spec:
  - repoURL: https://dl.gitea.com/charts/
    chart: gitea
    # targetRevision: 11.0.0
-    targetRevision: 12.4.0
+    targetRevision: 12.2.0
    helm:
      valueFiles:
      - $values/services/Gitea/values.yaml
--- a/services/Gitea/supportingfiles/sealedsecret-gitea-actions-registration-token.yaml
+++ b/services/Gitea/supportingfiles/sealedsecret-gitea-actions-registration-token.yaml
@@ -1,15 +0,0 @@
-apiVersion: bitnami.com/v1alpha1
-kind: SealedSecret
-metadata:
-  creationTimestamp: null
-  name: gitea-actions-registration-token
-  namespace: gitea
-spec:
-  encryptedData:
-    token: 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
-  template:
-    metadata:
-      creationTimestamp: null
-      name: gitea-actions-registration-token
-      namespace: gitea
-    type: Opaque
--- a/services/Gitea/supportingfiles/values.yaml
+++ b/services/Gitea/supportingfiles/values.yaml
@@ -0,0 +1,41 @@
+enabled: true
+
+statefulset:
+  actRunner:
+    repository: gitea/act_runner
+    tag: 0.2.12
+  dind:
+    repository: docker
+    # tag: 25.0.2-dind
+    tag: 28.3.2-dind
+
+  persistence:
+    size: 1Gi
+
+init:
+  image:
+    repository: busybox
+    tag: "1.37.0"
+
+provisioning:
+  enabled: false
+
+  publish:
+    repository: bitnami/kubectl
+    # tag: 1.29.0
+    tag: 1.33.3
+
+existingSecret: "gitea-actions-registration-token"
+existingSecretKey: "token"
+
+giteaRootURL: "https://code.spamasaurus.com"
+
+persistence:
+  create: false
+  claimName: csismb-gitea-act
+  storageClass: csismb-gitea-act
+
+image:
+  registry: "docker.gitea.com"
+  repository: gitea
+  tag: "1.24.6-rootless"
--- a/services/Gitea/values.yaml
+++ b/services/Gitea/values.yaml
@@ -44,11 +44,6 @@ postgresql-ha:
  enabled: false
 valkey:
  enabled: true
-  image:
-    repository: bitnamilegacy/valkey
-  global:
-    security:
-      allowInsecureImages: true
  primary:
    persistence:
      existingClaim: csismb-gitea-cache
--- a/services/LdapWrapper/_namespace-ldapwrapper.yaml
+++ b/services/LdapWrapper/_namespace-ldapwrapper.yaml
@@ -1,4 +1,4 @@
 apiVersion: v1
 kind: Namespace
 metadata:
-  name: wizarr
+  name: ldapwrapper
--- a/services/LdapWrapper/application-ldapwrapper.yaml
+++ b/services/LdapWrapper/application-ldapwrapper.yaml
@@ -1,12 +1,12 @@
 apiVersion: argoproj.io/v1alpha1
 kind: Application
 metadata:
-  name: wizarr
+  name: ldapwrapper
  namespace: argo-cd
 spec:
  destination:
-    namespace: wizarr
    server: https://kubernetes.default.svc
+    namespace: ldapwrapper
  project: default
  syncPolicy:
    automated: {}
@@ -14,5 +14,5 @@ spec:
      - CreateNamespace=true
  sources:
  - repoURL: https://code.spamasaurus.com/djpbessems/Kubernetes.K3s.installLog
-    path: services/PVR/Wizarr
+    path: services/LdapWrapper
    targetRevision: HEAD
--- a/services/LdapWrapper/deployment-ldapwrapper.yaml
+++ b/services/LdapWrapper/deployment-ldapwrapper.yaml
@@ -0,0 +1,38 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: ldapwrapper
+  namespace: ldapwrapper
+  labels:
+    app: ldapwrapper
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: ldapwrapper
+  template:
+    metadata:
+      labels:
+        app: ldapwrapper
+    spec:
+      containers:
+      - name: ldapwrapper
+        image: ahaen/azuread-ldap-wrapper:latest
+        env:
+        - name: GRAPH_IGNORE_MFA_ERRORS
+          value: 'true'
+        - name: LDAP_PORT
+          value: '389'
+        envFrom:
+        - secretRef:
+            name: ldapwrapper
+        ports:
+        - containerPort: 389
+          name: ldap
+        volumeMounts:
+        - mountPath: /app/.cache
+          name: csismb-ldapwrapper-cache
+      volumes:
+      - name: csismb-ldapwrapper-cache
+        persistentVolumeClaim:
+          claimName: csismb-ldapwrapper-cache
--- a/services/LdapWrapper/persistentvolume-csismb-ldapwrapper-cache.yaml
+++ b/services/LdapWrapper/persistentvolume-csismb-ldapwrapper-cache.yaml
@@ -3,19 +3,17 @@ kind: PersistentVolume
 metadata:
  annotations:
    pv.kubernetes.io/provisioned-by: smb.csi.k8s.io
-  name: csismb-bazarr-config
+  name: csismb-ldapwrapper-cache
 spec:
  capacity:
    storage: 1Gi
  accessModes:
    - ReadWriteMany
  persistentVolumeReclaimPolicy: Retain
-  storageClassName: csismb-bazarr-config
+  storageClassName: csismb-ldapwrapper-cache
  mountOptions:
    - dir_mode=0777
    - file_mode=0777
-    - uid=911
-    - gid=911
    - nobrl
    - cache=strict
    - mfsymlinks
@@ -24,10 +22,10 @@ spec:
    driver: smb.csi.k8s.io
    # volumeHandle format: {smb-server-address}#{sub-dir-name}#{share-name}
    # make sure this value is unique for every share in the cluster
-    volumeHandle: 192.168.154.195#bazarr#config
+    volumeHandle: 192.168.154.195#ldapwrapper#cache
    volumeAttributes:
      source: //192.168.154.195/K3s.Volumes
-      subDir: bazarr/config
+      subDir: ldapwrapper/cache
    nodeStageSecretRef:
      name: smb-credentials
-      namespace: bazarr
+      namespace: ldapwrapper
--- a/services/LdapWrapper/persistentvolumeclaim-csismb-ldapwrapper-cache.yaml
+++ b/services/LdapWrapper/persistentvolumeclaim-csismb-ldapwrapper-cache.yaml
@@ -1,12 +1,12 @@
 apiVersion: v1
 kind: PersistentVolumeClaim
 metadata:
-  name: csismb-wizarr-data
-  namespace: wizarr
+  name: csismb-ldapwrapper-cache
+  namespace: ldapwrapper
 spec:
  accessModes:
    - ReadWriteMany
-  storageClassName: csismb-wizarr-data
+  storageClassName: csismb-ldapwrapper-cache
  resources:
    requests:
      storage: 1Gi
--- a/services/LdapWrapper/sealedsecret-ldapwrapper.yaml
+++ b/services/LdapWrapper/sealedsecret-ldapwrapper.yaml
@@ -0,0 +1,22 @@
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  creationTimestamp: null
+  name: ldapwrapper
+  namespace: ldapwrapper
+spec:
+  encryptedData:
+    AZURE_APP_ID: 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
+    AZURE_APP_SECRET: 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
+    AZURE_TENANTID: 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
+    LDAP_BINDUSER: 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
+    LDAP_DOMAIN: AgCgcQjDhBiTAif8gY4ohMzsfI9muB7eUs7YTIS2Ma0jNW6sD+C16ytk9QcslxnO4BM8nXcJXYE/yv0STHjvIRkhMHcUsvlEIsCWI3x9VAwBp2mpMazObLF89s4O+3oumcWJm44bDc9hMHzydqnl3PXhx+hUE3fgq5zIpyqflAQD/9jUGMSXoeEV8ccopJNwsz613kUb7CPfzGV63cpfuby7J3OVXruTYkn8kXth+i5Q/R+7nMZW62vxMXNhkHUITlp96ZgPau8+2vwtYhxDU/EOvVwLqLEuktrHX12pGp8zQ7sRKMoCjp+IXUD2v0CgK+RgikTO9upfGYkdMFLpY1TDqnksJnUuGrrXhqsRU4ziP0sqPz0G2vK+tUFjiMlQDc71oEGEKICdKXoMwVhlk4lOY6xAYu/B06zJyTE20LQiiQvfNVQZz6YJhe/kjNMKml/9KrOcuzBB+fcCFXAJKHrS16Wa9DHPl4QVdtwLsrWTl9hhP30IVQMDdFASHhCBZEld2H0y0ZMXI5tT2XI2rFzQYr7lQIK4Za2IdDlI1vjjqye1vKZ5/AeYunGGEciGjFRPCqhD3VvlWRRsoJxY5NAyVJdp+bIpjAKRrso4qJwtNc3NcMAKlKS/fNlS1k8w7R1K6yMqKwkrqNKoCXD5LfHPCDGTb/vVUaEB68+lCKXTlZsAQriOOB+AbAbtrYXpYlbcw0tMBkcr77qm
+  template:
+    data: null
+    metadata:
+      creationTimestamp: null
+      labels:
+        app: ldapwrapper
+      name: ldapwrapper
+      namespace: ldapwrapper
+    type: Opaque
--- a/services/LdapWrapper/sealedsecret-smb-credentials.yaml
+++ b/services/LdapWrapper/sealedsecret-smb-credentials.yaml
@@ -0,0 +1,16 @@
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  creationTimestamp: null
+  name: smb-credentials
+  namespace: ldapwrapper
+spec:
+  encryptedData:
+    password: AgBc2k0pHG/YT8gHBugDzpAreGsVlDLQJeQnGEn6lzk97Gv1F2RSBy5pASx6WgMX1P/OU4+MPD1QkAIHRQowUTXH2/YDsEKUO/8n93kXnWRr3LOc0hjKGeHCUWdyzre8fU07g4+6dcKopNRGY53nCBNTSQG0DOQOiyCzkEgGDQYLFLk6cnN0B2n2sYRgkNJQCRXUbjKIWaNc8xbmzMrWb+qCBarP75J0c42249K0cpVS/u8txpmWOOtPfngIRh6wV+r5/3W7CwXuNBSUHa+Sm18j/guvIIloN2m5nHY/jXFopekIr02lHv4ANO24EZ1N4V4Uo9TvVV/agNGAU9nK0a0ebZ8W4wjvhiKwMiBOHWp55E3+oA8mP4C9ZC1hkhgbyBi9rK/9ZhVvoB+Q1rl+FD8bdbMcuTYDU9lt799MOThpbR1ti9gj3hO4Yz/GACN7rCJhpb+MIQywrdpRlO2eME1ssVKSmedEAVp/efLfNgfNhlLDl0rZ/I4vwwiQ5JBNsrNwKIoIhneC98ouRJdrZUWFWU0p95dbActr3qmAZQNJbfJ+UktPWSWxd+HW7LqvmYB1A0BT628GLBM5SvXWx0+ye7MLS/t8hJM/cqtOtdwdzoTZZfZv2dCnDQ0WtsZfXAdnigitA7UES3TzapIgdim3d6ujvnOY0OfJcKKSsKh7GQw451dKWUzTWafkciWoaWRBZnTmEgt6zz0Be0hQCfJm
+    username: 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
+  template:
+    metadata:
+      creationTimestamp: null
+      name: smb-credentials
+      namespace: ldapwrapper
+    type: Opaque
--- a/services/LdapWrapper/service-ldapwrapper.yaml
+++ b/services/LdapWrapper/service-ldapwrapper.yaml
@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: ldapwrapper
+  namespace: ldapwrapper
+spec:
+  ports:
+    - protocol: TCP
+      name: ldap
+      port: 389
+  selector:
+    app: ldapwrapper
--- a/services/PVR/Bazarr/_namespace-bazarr.yaml
+++ b/services/PVR/Bazarr/_namespace-bazarr.yaml
@@ -1,4 +0,0 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: bazarr
--- a/services/PVR/Bazarr/application-bazarr.yaml
+++ b/services/PVR/Bazarr/application-bazarr.yaml
@@ -1,18 +0,0 @@
-apiVersion: argoproj.io/v1alpha1
-kind: Application
-metadata:
-  name: bazarr
-  namespace: argo-cd
-spec:
-  destination:
-    namespace: bazarr
-    server: https://kubernetes.default.svc
-  project: default
-  syncPolicy:
-    automated: {}
-    syncOptions:
-      - CreateNamespace=true
-  sources:
-  - repoURL: https://code.spamasaurus.com/djpbessems/Kubernetes.K3s.installLog
-    path: services/PVR/Bazarr
-    targetRevision: HEAD
--- a/services/PVR/Bazarr/deployment-bazarr.yaml
+++ b/services/PVR/Bazarr/deployment-bazarr.yaml
@@ -1,43 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: bazarr
-  namespace: bazarr
-  labels:
-    app: bazarr
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: bazarr
-  strategy:
-    type: Recreate
-  template:
-    metadata:
-      labels:
-        app: bazarr
-    spec:
-      containers:
-      - name: bazarr
-        image: linuxserver/bazarr:latest
-        imagePullPolicy: Always
-        ports:
-          - name: web
-            containerPort: 6767
-        volumeMounts:
-        - mountPath: /config
-          name: csismb-bazarr-config
-        - mountPath: /movies
-          name: csismb-bazarr-movies
-        - mountPath: /tv
-          name: csismb-bazarr-series
-      volumes:
-      - name: csismb-bazarr-config
-        persistentVolumeClaim:
-          claimName: csismb-bazarr-config
-      - name: csismb-bazarr-movies
-        persistentVolumeClaim:
-          claimName: csismb-bazarr-movies
-      - name: csismb-bazarr-series
-        persistentVolumeClaim:
-          claimName: csismb-bazarr-series
--- a/services/PVR/Bazarr/ingressroute-bazarr.yaml
+++ b/services/PVR/Bazarr/ingressroute-bazarr.yaml
@@ -1,18 +0,0 @@
-apiVersion: traefik.io/v1alpha1
-kind: IngressRoute
-metadata:
-  name: bazarr
-  namespace: bazarr
-spec:
-  entryPoints:
-    - websecure
-  routes:
-  - match: Host(`captions.pvr.spamasaurus.com`)
-    kind: Rule
-    services:
-    - name: bazarr
-      port: 6767
-    middlewares:
-      - name: 2fa-authentication@file
-      - name: security-headers@file
-      # - name: compression@file
--- a/services/PVR/Bazarr/persistentvolume-csismb-jellyfin-movies.yaml
+++ b/services/PVR/Bazarr/persistentvolume-csismb-jellyfin-movies.yaml
@@ -1,33 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  annotations:
-    pv.kubernetes.io/provisioned-by: smb.csi.k8s.io
-  name: csismb-bazarr-movies
-spec:
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  persistentVolumeReclaimPolicy: Retain
-  storageClassName: csismb-bazarr-movies
-  mountOptions:
-    - dir_mode=0777
-    - file_mode=0777
-    - uid=911
-    - gid=911
-#    - nobrl
-    - cache=strict
-    - mfsymlinks
-    - noserverino  # required to prevent data corruption
-  csi:
-    driver: smb.csi.k8s.io
-    # volumeHandle format: {smb-server-address}#{sub-dir-name}#{share-name}
-    # make sure this value is unique for every share in the cluster
-    volumeHandle: 192.168.154.195#bazarr#movies
-    volumeAttributes:
-      source: //192.168.154.195/Public
-      subDir: Video's/Films
-    nodeStageSecretRef:
-      name: smb-credentials
-      namespace: bazarr
--- a/services/PVR/Bazarr/persistentvolume-csismb-jellyfin-series.yaml
+++ b/services/PVR/Bazarr/persistentvolume-csismb-jellyfin-series.yaml
@@ -1,33 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  annotations:
-    pv.kubernetes.io/provisioned-by: smb.csi.k8s.io
-  name: csismb-bazarr-series
-spec:
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  persistentVolumeReclaimPolicy: Retain
-  storageClassName: csismb-bazarr-series
-  mountOptions:
-    - dir_mode=0777
-    - file_mode=0777
-    - uid=911
-    - gid=911
-#    - nobrl
-    - cache=strict
-    - mfsymlinks
-    - noserverino  # required to prevent data corruption
-  csi:
-    driver: smb.csi.k8s.io
-    # volumeHandle format: {smb-server-address}#{sub-dir-name}#{share-name}
-    # make sure this value is unique for every share in the cluster
-    volumeHandle: 192.168.154.195#bazarr#series
-    volumeAttributes:
-      source: //192.168.154.195/Public
-      subDir: Video's/Series
-    nodeStageSecretRef:
-      name: smb-credentials
-      namespace: bazarr
--- a/services/PVR/Bazarr/persistentvolumeclaim-csismb-bazarr-config.yaml
+++ b/services/PVR/Bazarr/persistentvolumeclaim-csismb-bazarr-config.yaml
@@ -1,12 +0,0 @@
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: csismb-bazarr-config
-  namespace: bazarr
-spec:
-  accessModes:
-    - ReadWriteMany
-  storageClassName: csismb-bazarr-config
-  resources:
-    requests:
-      storage: 1Gi
--- a/services/PVR/Bazarr/persistentvolumeclaim-csismb-jellyfin-movies.yaml
+++ b/services/PVR/Bazarr/persistentvolumeclaim-csismb-jellyfin-movies.yaml
@@ -1,12 +0,0 @@
-kind: PersistentVolumeClaim
-apiVersion: v1
-metadata:
-  name: csismb-bazarr-movies
-  namespace: bazarr
-spec:
-  accessModes:
-    - ReadWriteMany
-  resources:
-    requests:
-      storage: 1Gi
-  storageClassName: csismb-bazarr-movies
--- a/services/PVR/Bazarr/persistentvolumeclaim-csismb-jellyfin-series.yaml
+++ b/services/PVR/Bazarr/persistentvolumeclaim-csismb-jellyfin-series.yaml
@@ -1,12 +0,0 @@
-kind: PersistentVolumeClaim
-apiVersion: v1
-metadata:
-  name: csismb-bazarr-series
-  namespace: bazarr
-spec:
-  accessModes:
-    - ReadWriteMany
-  resources:
-    requests:
-      storage: 1Gi
-  storageClassName: csismb-bazarr-series
--- a/services/PVR/Bazarr/sealedsecret-smb-credentials.yaml
+++ b/services/PVR/Bazarr/sealedsecret-smb-credentials.yaml
@@ -1,14 +0,0 @@
-apiVersion: bitnami.com/v1alpha1
-kind: SealedSecret
-metadata:
-  name: smb-credentials
-  namespace: bazarr
-spec:
-  encryptedData:
-    password: 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
-    username: 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
-  template:
-    metadata:
-      name: smb-credentials
-      namespace: bazarr
-    type: Opaque
--- a/services/PVR/Bazarr/service-bazarr.yaml
+++ b/services/PVR/Bazarr/service-bazarr.yaml
@@ -1,12 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: bazarr
-  namespace: bazarr
-spec:
-  ports:
-    - protocol: TCP
-      name: web
-      port: 6767
-  selector:
-    app: bazarr
--- a/services/PVR/Jellyseerr/application-jellyseerr.yaml
+++ b/services/PVR/Jellyseerr/application-jellyseerr.yaml
@@ -18,7 +18,7 @@ spec:
    targetRevision: HEAD
  - repoURL: ghcr.io/fallenbagel/jellyseerr
    chart: jellyseerr-chart
-    targetRevision: 2.7.0
+    targetRevision: 2.4.0
    helm:
      valueFiles:
        - $values/services/PVR/Jellyseerr/values.yaml
--- a/services/PVR/Wizarr/deployment-wizarr.yaml
+++ b/services/PVR/Wizarr/deployment-wizarr.yaml
@@ -1,40 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: wizarr
-  namespace: wizarr
-  labels:
-    app: wizarr
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: wizarr
-  template:
-    metadata:
-      labels:
-        app: wizarr
-    spec:
-      containers:
-      - name: wizarr
-        image: ghcr.io/wizarrrr/wizarr:latest
-        imagePullPolicy: Always
-        env:
-          - name: PUID
-            value: '1000'
-          - name: PGID
-            value: '1000'
-          - name: DISABLE_BUILTIN_AUTH
-            value: 'false'
-          - name: TZ
-            value: Australia/Melbourne
-        ports:
-          - name: web
-            containerPort: 5690
-        volumeMounts:
-        - mountPath: /data
-          name: csismb-wizarr-data
-      volumes:
-      - name: csismb-wizarr-data
-        persistentVolumeClaim:
-          claimName: csismb-wizarr-data
--- a/services/PVR/Wizarr/ingressroute-wizarr.yaml
+++ b/services/PVR/Wizarr/ingressroute-wizarr.yaml
@@ -1,18 +0,0 @@
-apiVersion: traefik.io/v1alpha1
-kind: IngressRoute
-metadata:
-  name: wizarr
-  namespace: wizarr
-spec:
-  entryPoints:
-    - websecure
-  routes:
-  - match: Host(`account.pvr.spamasaurus.com`)
-    kind: Rule
-    services:
-    - name: wizarr
-      port: 5690
-    middlewares:
-      - name: 2fa-authentication@file
-      - name: security-headers@file
-      # - name: compression@file
--- a/services/PVR/Wizarr/persistentvolume-csismb-wizarr-data.yaml
+++ b/services/PVR/Wizarr/persistentvolume-csismb-wizarr-data.yaml
@@ -1,34 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  annotations:
-    pv.kubernetes.io/provisioned-by: smb.csi.k8s.io
-  name: csismb-wizarr-data
-spec:
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  persistentVolumeReclaimPolicy: Retain
-  storageClassName: csismb-wizarr-data
-  mountOptions:
-    - dir_mode=0777
-    - file_mode=0777
-    - uid=1000
-    - gid=1000
-    - nobrl
-    - cache=strict
-    - iocharset=utf8
-    - mfsymlinks
-    - noserverino  # required to prevent data corruption
-  csi:
-    driver: smb.csi.k8s.io
-    # volumeHandle format: {smb-server-address}#{sub-dir-name}#{share-name}
-    # make sure this value is unique for every share in the cluster
-    volumeHandle: 192.168.154.195#wizarr#data
-    volumeAttributes:
-      source: //192.168.154.195/K3s.Volumes
-      subDir: wizarr/data
-    nodeStageSecretRef:
-      name: smb-credentials
-      namespace: wizarr
--- a/services/PVR/Wizarr/sealedsecret-smb-credentials.yaml
+++ b/services/PVR/Wizarr/sealedsecret-smb-credentials.yaml
@@ -1,14 +0,0 @@
-apiVersion: bitnami.com/v1alpha1
-kind: SealedSecret
-metadata:
-  name: smb-credentials
-  namespace: wizarr
-spec:
-  encryptedData:
-    password: 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
-    username: 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
-  template:
-    metadata:
-      name: smb-credentials
-      namespace: wizarr
-    type: Opaque
--- a/services/PVR/Wizarr/service-wizarr.yaml
+++ b/services/PVR/Wizarr/service-wizarr.yaml
@@ -1,12 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: wizarr
-  namespace: wizarr
-spec:
-  ports:
-    - protocol: TCP
-      name: web
-      port: 5690
-  selector:
-    app: wizarr
--- a/storage/csi-driver-smb/application-csi-driver-smb.yaml
+++ b/storage/csi-driver-smb/application-csi-driver-smb.yaml
@@ -13,7 +13,7 @@ spec:
  sources:
  - repoURL: https://raw.githubusercontent.com/kubernetes-csi/csi-driver-smb/master/charts
    chart: csi-driver-smb
-    targetRevision: 1.19.1
+    targetRevision: v1.18.0
    helm:
      valueFiles:
      - $values/storage/csi-driver-smb/values.yaml
--- a/system/ArgoCD/application-argo-cd.yaml
+++ b/system/ArgoCD/application-argo-cd.yaml
@@ -11,8 +11,7 @@ spec:
  sources:
  - repoURL: https://argoproj.github.io/argo-helm
    chart: argo-cd
-    # targetRevision: 8.1.2
-    targetRevision: 8.6.4
+    targetRevision: 8.1.2
    helm:
      valueFiles:
      - $values/system/ArgoCD/values.yaml
--- a/system/SealedSecrets/application-sealed-secrets-controller.yaml
+++ b/system/SealedSecrets/application-sealed-secrets-controller.yaml
@@ -13,7 +13,7 @@ spec:
  sources:
  - repoURL: https://bitnami-labs.github.io/sealed-secrets
    chart: sealed-secrets
-    targetRevision: 2.17.7
+    targetRevision: 2.17.4
    helm:
      valueFiles:
      - $values/system/SealedSecrets/values.yaml
Author	SHA1	Message	Date
Renovate Bot	1fd4ef836d	chore(deps): update docker.gitea.com/gitea docker tag to v1.24.6	2025-09-12 12:03:41 +00:00
Danny Bessems	f91e95b231	Merge pull request 'chore(deps): update helm release gitea to v12.2.0' (#5 ) from renovate/gitea-12.x into master All checks were successful renovate / renovate (push) Successful in 4m1s Details Reviewed-on: #5	2025-09-04 21:45:27 +00:00
Renovate Bot	c77439819f	chore(deps): update helm release gitea to v12.2.0	2025-08-22 11:06:46 +00:00