Update Helm release sealed-secrets to v2.20.0

services/Gitea/application-gitea.yaml

@@ -21,7 +21,8 @@ spec:
     targetRevision: master
   - repoURL: https://dl.gitea.com/charts/
     chart: gitea
-    targetRevision: 12.7.0
+    # targetRevision: 11.0.0
+    targetRevision: 12.5.0
     helm:
       valueFiles:
       - $values/services/Gitea/values.yaml

services/NextExplorer/_namespace-nextexplorer.yml

@@ -1,4 +0,0 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: nextexplorer

services/NextExplorer/application-nextexplorer.yaml

@@ -1,18 +0,0 @@
-apiVersion: argoproj.io/v1alpha1
-kind: Application
-metadata:
-  name: nextexplorer
-  namespace: argo-cd
-spec:
-  destination:
-    namespace: nextexplorer
-    server: https://kubernetes.default.svc
-  project: default
-  syncPolicy:
-    automated: {}
-    syncOptions:
-      - CreateNamespace=true
-  sources:
-  - repoURL: https://code.spamasaurus.com/djpbessems/Kubernetes.K3s.installLog
-    path: services/NextExplorer
-    targetRevision: HEAD

services/NextExplorer/deployment-nextexplorer.yaml

@@ -1,50 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: nextexplorer
-  namespace: nextexplorer
-  labels:
-    app: nextexplorer
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: nextexplorer
-  template:
-    metadata:
-      labels:
-        app: nextexplorer
-    spec:
-      containers:
-      - name: nextexplorer
-        image: ghcr.io/cerede2000/explorer:3.6.0-lean
-        env:
-        - name: PUBLIC_URL
-#          value: https://st.itch.fyi
-          value: https://st.itch.fyi
-        - name: SESSION_SECRET
-          value: VPd67z54NMceyvnPNaSCtktuePTbcIPU
-        ports:
-          - name: web
-            containerPort: 3000
-        volumeMounts:
-        - mountPath: /config
-          name: csismb-nextexplorer-config
-        - mountPath: /cache
-          name: csismb-nextexplorer-cache
-        - mountPath: /mnt/Storage
-          name: csismb-nextexplorer-storage
-      securityContext:
-        fsGroup: 1000
-        runAsUser: 1000
-        runAsGroup: 1000
-      volumes:
-      - name: csismb-nextexplorer-config
-        persistentVolumeClaim:
-          claimName: csismb-nextexplorer-config
-      - name: csismb-nextexplorer-cache
-        persistentVolumeClaim:
-          claimName: csismb-nextexplorer-cache
-      - name: csismb-nextexplorer-storage
-        persistentVolumeClaim:
-          claimName: csismb-nextexplorer-storage

services/NextExplorer/ingressroute-nextexplorer.yaml

@@ -1,17 +0,0 @@
-apiVersion: traefik.io/v1alpha1
-kind: IngressRoute
-metadata:
-  name: nextexplorer
-  namespace: nextexplorer
-spec:
-  entryPoints:
-    - websecure
-  routes:
-  - match: Host(`st.itch.fyi`)
-    kind: Rule
-    services:
-    - name: nextexplorer
-      port: 3000
-    middlewares:
-      - name: security-headers@file
-      # - name: compression@file

services/NextExplorer/persistentvolume-csismb-nextexplorer-cache.yaml

@@ -1,31 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  annotations:
-    pv.kubernetes.io/provisioned-by: smb.csi.k8s.io
-  name: csismb-nextexplorer-cache
-spec:
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  persistentVolumeReclaimPolicy: Retain
-  storageClassName: csismb-nextexplorer-cache
-  mountOptions:
-    - dir_mode=0777
-    - file_mode=0777
-    - nobrl
-    - cache=strict
-    - mfsymlinks
-    - noserverino  # required to prevent data corruption
-  csi:
-    driver: smb.csi.k8s.io
-    # volumeHandle format: {smb-server-address}#{sub-dir-name}#{share-name}
-    # make sure this value is unique for every share in the cluster
-    volumeHandle: 192.168.154.195#nextexplorer#cache
-    volumeAttributes:
-      source: //192.168.154.195/K3s.Volumes
-      subDir: nextexplorer/cache
-    nodeStageSecretRef:
-      name: smb-credentials
-      namespace: nextexplorer

services/NextExplorer/persistentvolume-csismb-nextexplorer-config.yaml

@@ -1,31 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  annotations:
-    pv.kubernetes.io/provisioned-by: smb.csi.k8s.io
-  name: csismb-nextexplorer-config
-spec:
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  persistentVolumeReclaimPolicy: Retain
-  storageClassName: csismb-nextexplorer-config
-  mountOptions:
-    - dir_mode=0777
-    - file_mode=0777
-    - nobrl
-    - cache=strict
-    - mfsymlinks
-    - noserverino  # required to prevent data corruption
-  csi:
-    driver: smb.csi.k8s.io
-    # volumeHandle format: {smb-server-address}#{sub-dir-name}#{share-name}
-    # make sure this value is unique for every share in the cluster
-    volumeHandle: 192.168.154.195#nextexplorer#config
-    volumeAttributes:
-      source: //192.168.154.195/K3s.Volumes
-      subDir: nextexplorer/config
-    nodeStageSecretRef:
-      name: smb-credentials
-      namespace: nextexplorer

services/NextExplorer/persistentvolume-csismb-nextexplorer-storage.yaml

@@ -1,31 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  annotations:
-    pv.kubernetes.io/provisioned-by: smb.csi.k8s.io
-  name: csismb-nextexplorer-storage
-spec:
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  persistentVolumeReclaimPolicy: Retain
-  storageClassName: csismb-nextexplorer-storage
-  mountOptions:
-    - dir_mode=0777
-    - file_mode=0777
-    - nobrl
-    - cache=strict
-    - mfsymlinks
-    - noserverino  # required to prevent data corruption
-  csi:
-    driver: smb.csi.k8s.io
-    # volumeHandle format: {smb-server-address}#{sub-dir-name}#{share-name}
-    # make sure this value is unique for every share in the cluster
-    volumeHandle: 192.168.154.195#nextexplorer#storage
-    volumeAttributes:
-      source: //192.168.154.195/K3s.Volumes
-      subDir: nextexplorer/storage
-    nodeStageSecretRef:
-      name: smb-credentials
-      namespace: nextexplorer

services/NextExplorer/persistentvolumeclaim-csismb-nextexplorer-cache.yaml

@@ -1,12 +0,0 @@
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: csismb-nextexplorer-cache
-  namespace: nextexplorer
-spec:
-  accessModes:
-    - ReadWriteMany
-  storageClassName: csismb-nextexplorer-cache
-  resources:
-    requests:
-      storage: 1Gi

services/NextExplorer/persistentvolumeclaim-csismb-nextexplorer-config.yaml

@@ -1,12 +0,0 @@
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: csismb-nextexplorer-config
-  namespace: nextexplorer
-spec:
-  accessModes:
-    - ReadWriteMany
-  storageClassName: csismb-nextexplorer-config
-  resources:
-    requests:
-      storage: 1Gi

services/NextExplorer/persistentvolumeclaim-csismb-nextexplorer-storage.yaml

@@ -1,12 +0,0 @@
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: csismb-nextexplorer-storage
-  namespace: nextexplorer
-spec:
-  accessModes:
-    - ReadWriteMany
-  storageClassName: csismb-nextexplorer-storage
-  resources:
-    requests:
-      storage: 1Gi

services/NextExplorer/sealedsecret-smb-credentials.yaml

@@ -1,14 +0,0 @@
-apiVersion: bitnami.com/v1alpha1
-kind: SealedSecret
-metadata:
-  name: smb-credentials
-  namespace: nextexplorer
-spec:
-  encryptedData:
-    password: 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
-    username: AgCFLkXZc0goPZNSCDbks1gT84rY4Gp/pWGg+64WAhKyCjq75o3oLJeaiQtXHbdcltFvklUQcXrn5Ee+QXqknZo6yLvD7NmRxJih4XuCQnpfci2ZHybABeQfrD3qSG1dgp2KFNv7BfSlUk++xC+jhOr5wyDG8vfVEORlpYcuVkV0oPJPKq4ujhexTFGlsbY7VKOHgzEmMn/X6e0ExO50qKCNnKBDsrnRwag3looV5CpG6cwvs8A6/jfnW6OMyBFi3I71snl65bZYnPst9nhurGpv8ueaWeUMkAei03UJwDi43P6+M2zU6H9xhTW85AHmaqfTpZUzrOgLXkSnm52J3wYshk/rD2K/kdMO9HL47NNDrzQbaA0gNyi+1xDwdoJ8zwbY1rO475SO6l4MGV/7y6OeM9fzgo5JSBA4aBoy34QBrjZ5OokAuUFZENJDxTIXSESf8Xnk9Eh7MKJXEsehrifc+q1Nw+PIyWHVPRU8LlBMn8VbGvwrbk/mqaq1cv1CgSIZok7c9YTnWTvcMO+2lKu5DFLvC/M4JNnc3x0OxehQbEQjahWz5Hmia1vremJy9TIEP267/bXF5E/ZNH2UxUqxSA8KDXTER1nVO2Yvfjenu2DFdnfCXYN/6URXf7sBWsG5pLfb4qBeVSYEtTT+pI2CfpjcGyGlxGabEDxDgFpDb6PuMuO26geKmlRfflje73V66StczwM=
-  template:
-    metadata:
-      name: smb-credentials
-      namespace: nextexplorer
-    type: Opaque

services/NextExplorer/service-nextexplorer.yaml

@@ -1,12 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: nextexplorer
-  namespace: nextexplorer
-spec:
-  ports:
-    - protocol: TCP
-      name: web
-      port: 3000
-  selector:
-    app: nextexplorer

services/PVR/Jellyfin/application-jellyfin.yaml

@@ -21,7 +21,7 @@ spec:
     targetRevision: HEAD
   - repoURL: https://jellyfin.github.io/jellyfin-helm
     chart: jellyfin
-    targetRevision: 3.2.0
+    targetRevision: 2.7.0
     helm:
       valueFiles:
       - $values/services/PVR/Jellyfin/values.yaml

services/Vaultwarden/deployment-vaultwarden.yaml

@@ -18,7 +18,7 @@ spec:
       serviceAccountName: vaultwarden
       containers:
       - name: vaultwarden
-        image: vaultwarden/server:1.37.3
+        image: vaultwarden/server:1.37.0
         env:
         - name: ENABLE_DB_WAL
           value: "false"

storage/csi-driver-smb/application-csi-driver-smb.yaml

@@ -13,7 +13,7 @@ spec:
   sources:
   - repoURL: https://raw.githubusercontent.com/kubernetes-csi/csi-driver-smb/master/charts
     chart: csi-driver-smb
-    targetRevision: 1.20.3
+    targetRevision: 1.20.0
     helm:
       valueFiles:
       - $values/storage/csi-driver-smb/values.yaml

system/ArgoCD/application-argo-cd.yaml

@@ -14,7 +14,7 @@ spec:
     targetRevision: HEAD
   - repoURL: https://argoproj.github.io/argo-helm
     chart: argo-cd
-    targetRevision: 10.9.1
+    targetRevision: 9.3.7
     helm:
       valueFiles:
       - $values/system/ArgoCD/values.yaml

system/Harvester/ippool-vmn-lan.yaml

@@ -26,7 +26,7 @@ spec:
   networkName: default/vmn-lan
 status:
   agentPodRef:
-    image: rancher/harvester-vm-dhcp-agent:v1.8.2
+    image: rancher/harvester-vm-dhcp-agent:v1.7.0
     name: default-vmn-lan-agent
     namespace: harvester-system
     uid: fde98493-a67c-4279-b48e-f7a70ea089b7

system/SealedSecrets/application-sealed-secrets-controller.yaml

@@ -13,7 +13,7 @@ spec:
   sources:
   - repoURL: https://bitnami.github.io/sealed-secrets
     chart: sealed-secrets
-    targetRevision: 2.17.7
+    targetRevision: 2.20.0
     helm:
       valueFiles:
       - $values/system/SealedSecrets/values.yaml