chore(deps): update ghcr.io/dmedina559/bedrock-server-manager docker tag to v3.8.0

README.md

@@ -48,12 +48,6 @@ Retrieve public/private keys (*store these on a **secure** location!*):
 kubectl get secret -n kube-system -l sealedsecrets.bitnami.com/sealed-secrets-key -o yaml > BitnamiSealedSecrets.masterkey.yml
 ```
 
-Restoring public/private keys:
-```shell
-kubectl apply -f BitnamiSealedSecrets.masterkey.yml
-kubectl rollout restart deployment -n kube-system sealed-secrets-controller
-```
-
 ### 5) Services
 ##### 5.1) [Gitea](https://gitea.io/)    <small>(git repository)</small>
 *Required for all other workloads*  

services/BedrockServerManager/deployment-bedrockservermanager.yaml

@@ -20,7 +20,7 @@ spec:
       containers:
       - name: bedrockservermanager
         # image: ghcr.io/dmedina559/bedrock-server-manager:stable
-        image: ghcr.io/dmedina559/bedrock-server-manager:3.7.2
+        image: ghcr.io/dmedina559/bedrock-server-manager:3.8.0
         ports:
           - name: web
             containerPort: 11325

services/Gitea/application-gitea.yaml

@@ -22,7 +22,7 @@ spec:
   - repoURL: https://dl.gitea.com/charts/
     chart: gitea
     # targetRevision: 11.0.0
-    targetRevision: 12.7.0
+    targetRevision: 12.5.0
     helm:
       valueFiles:
       - $values/services/Gitea/values.yaml

services/PVR/Jellyfin/manifests/persistentvolume-csismb-jellyfin-sports.yaml

@@ -0,0 +1,33 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  annotations:
+    pv.kubernetes.io/provisioned-by: smb.csi.k8s.io
+  name: csismb-jellyfin-sports
+spec:
+  capacity:
+    storage: 1Gi
+  accessModes:
+    - ReadWriteMany
+  persistentVolumeReclaimPolicy: Retain
+  storageClassName: csismb-jellyfin-sports
+  mountOptions:
+    - dir_mode=0777
+    - file_mode=0777
+    - uid=911
+    - gid=911
+#    - nobrl
+    - cache=strict
+    - mfsymlinks
+    - noserverino  # required to prevent data corruption
+  csi:
+    driver: smb.csi.k8s.io
+    # volumeHandle format: {smb-server-address}#{sub-dir-name}#{share-name}
+    # make sure this value is unique for every share in the cluster
+    volumeHandle: 192.168.154.195#jellyfin#sports
+    volumeAttributes:
+      source: //192.168.154.195/Public
+      subDir: Video's/Sports
+    nodeStageSecretRef:
+      name: smb-credentials
+      namespace: jellyfin

services/PVR/Jellyfin/manifests/persistentvolumeclaim-csismb-jellyfin-sports.yaml

@@ -0,0 +1,12 @@
+kind: PersistentVolumeClaim
+apiVersion: v1
+metadata:
+  name: csismb-jellyfin-sports
+  namespace: jellyfin
+spec:
+  accessModes:
+    - ReadWriteMany
+  resources:
+    requests:
+      storage: 1Gi
+  storageClassName: csismb-jellyfin-sports

services/PVR/Jellyfin/values.yaml

@@ -27,6 +27,9 @@ volumes:
   - name: csismb-jellyfin-series
     persistentVolumeClaim:
       claimName: csismb-jellyfin-series
+  - name: csismb-jellyfin-sports
+    persistentVolumeClaim:
+      claimName: csismb-jellyfin-sports
   - name: igpu
     hostPath:
       path: /dev/dri
@@ -36,6 +39,8 @@ volumeMounts:
     mountPath: "/movies"
   - name: csismb-jellyfin-series
     mountPath: "/series"
+  - name: csismb-jellyfin-sports
+    mountPath: "/sports"
   - name: igpu
     mountPath: /dev/dri
 

services/Vaultwarden/deployment-vaultwarden.yaml

@@ -18,7 +18,8 @@ spec:
       serviceAccountName: vaultwarden
       containers:
       - name: vaultwarden
-        image: vaultwarden/server:1.37.0
+        # image: vaultwarden/server:1.34.3
+        image: vaultwarden/server:1.35.2
         env:
         - name: ENABLE_DB_WAL
           value: "false"

system/SealedSecrets/application-sealed-secrets-controller.yaml

@@ -11,7 +11,7 @@ spec:
   syncPolicy:
     automated: {}
   sources:
-  - repoURL: https://bitnami.github.io/sealed-secrets
+  - repoURL: https://bitnami-labs.github.io/sealed-secrets
     chart: sealed-secrets
     targetRevision: 2.17.7
     helm: