chore(deps): update helm release sealed-secrets to v2.17.7

Reviewed-on: #5

services/Gitea/application-gitea.yaml

@@ -22,7 +22,7 @@ spec:
   - repoURL: https://dl.gitea.com/charts/
     chart: gitea
     # targetRevision: 11.0.0
-    targetRevision: 12.4.0
+    targetRevision: 12.2.0
     helm:
       valueFiles:
       - $values/services/Gitea/values.yaml

services/Gitea/supportingfiles/sealedsecret-gitea-actions-registration-token.yaml

@@ -1,15 +0,0 @@
-apiVersion: bitnami.com/v1alpha1
-kind: SealedSecret
-metadata:
-  creationTimestamp: null
-  name: gitea-actions-registration-token
-  namespace: gitea
-spec:
-  encryptedData:
-    token: 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
-  template:
-    metadata:
-      creationTimestamp: null
-      name: gitea-actions-registration-token
-      namespace: gitea
-    type: Opaque

services/Gitea/supportingfiles/values.yaml

@@ -0,0 +1,41 @@
+enabled: true
+
+statefulset:
+  actRunner:
+    repository: gitea/act_runner
+    tag: 0.2.12
+  dind:
+    repository: docker
+    # tag: 25.0.2-dind
+    tag: 28.3.2-dind
+
+  persistence:
+    size: 1Gi
+
+init:
+  image:
+    repository: busybox
+    tag: "1.37.0"
+
+provisioning:
+  enabled: false
+
+  publish:
+    repository: bitnami/kubectl
+    # tag: 1.29.0
+    tag: 1.33.3
+
+existingSecret: "gitea-actions-registration-token"
+existingSecretKey: "token"
+
+giteaRootURL: "https://code.spamasaurus.com"
+
+persistence:
+  create: false
+  claimName: csismb-gitea-act
+  storageClass: csismb-gitea-act
+
+image:
+  registry: "docker.gitea.com"
+  repository: gitea
+  tag: "1.24.2-rootless"

services/Gitea/values.yaml

@@ -44,11 +44,6 @@ postgresql-ha:
   enabled: false
 valkey:
   enabled: true
-  image:
-    repository: bitnamilegacy/valkey
-  global:
-    security:
-      allowInsecureImages: true
   primary:
     persistence:
       existingClaim: csismb-gitea-cache

services/PVR/Jellyfin/application-jellyfin.yaml

@@ -18,7 +18,7 @@ spec:
     targetRevision: HEAD
   - repoURL: https://jellyfin.github.io/jellyfin-helm
     chart: jellyfin
-    targetRevision: 2.4.0
+    targetRevision: 2.3.0
     helm:
       valueFiles:
       - $values/services/PVR/Jellyfin/values.yaml

services/PVR/Jellyseerr/application-jellyseerr.yaml

@@ -18,7 +18,7 @@ spec:
     targetRevision: HEAD
   - repoURL: ghcr.io/fallenbagel/jellyseerr
     chart: jellyseerr-chart
-    targetRevision: 2.7.0
+    targetRevision: 2.4.0
     helm:
       valueFiles:
         - $values/services/PVR/Jellyseerr/values.yaml

services/PVR/Wizarr/_namespace-wizarr.yaml

@@ -1,4 +0,0 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: wizarr

services/PVR/Wizarr/application-wizarr.yaml

@@ -1,18 +0,0 @@
-apiVersion: argoproj.io/v1alpha1
-kind: Application
-metadata:
-  name: wizarr
-  namespace: argo-cd
-spec:
-  destination:
-    namespace: wizarr
-    server: https://kubernetes.default.svc
-  project: default
-  syncPolicy:
-    automated: {}
-    syncOptions:
-      - CreateNamespace=true
-  sources:
-  - repoURL: https://code.spamasaurus.com/djpbessems/Kubernetes.K3s.installLog
-    path: services/PVR/wizarr
-    targetRevision: HEAD

services/PVR/Wizarr/deployment-wizarr.yaml

@@ -1,40 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: wizarr
-  namespace: wizarr
-  labels:
-    app: wizarr
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: wizarr
-  template:
-    metadata:
-      labels:
-        app: wizarr
-    spec:
-      containers:
-      - name: wizarr
-        image: ghcr.io/wizarrrr/wizarr:latest
-        imagePullPolicy: Always
-        env:
-          - name: PUID
-            value: '1000'
-          - name: PGID
-            value: '1000'
-          - name: DISABLE_BUILTIN_AUTH
-            value: 'false'
-          - name: TZ
-            value: Australia/Melbourne
-        ports:
-          - name: web
-            containerPort: 5690
-        volumeMounts:
-        - mountPath: /data
-          name: csismb-wizarr-data
-      volumes:
-      - name: csismb-wizarr-data
-        persistentVolumeClaim:
-          claimName: csismb-wizarr-data

services/PVR/Wizarr/ingressroute-wizarr.yaml

@@ -1,18 +0,0 @@
-apiVersion: traefik.io/v1alpha1
-kind: IngressRoute
-metadata:
-  name: wizarr
-  namespace: wizarr
-spec:
-  entryPoints:
-    - websecure
-  routes:
-  - match: Host(`account.pvr.spamasaurus.com`)
-    kind: Rule
-    services:
-    - name: wizarr
-      port: 5690
-    middlewares:
-      - name: 2fa-authentication@file
-      - name: security-headers@file
-      # - name: compression@file

services/PVR/Wizarr/persistentvolume-csismb-wizarr-data.yaml

@@ -1,34 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  annotations:
-    pv.kubernetes.io/provisioned-by: smb.csi.k8s.io
-  name: csismb-wizarr-data
-spec:
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  persistentVolumeReclaimPolicy: Retain
-  storageClassName: csismb-wizarr-data
-  mountOptions:
-    - dir_mode=0777
-    - file_mode=0777
-    - uid=1000
-    - gid=1000
-    - nobrl
-    - cache=strict
-    - iocharset=utf8
-    - mfsymlinks
-    - noserverino  # required to prevent data corruption
-  csi:
-    driver: smb.csi.k8s.io
-    # volumeHandle format: {smb-server-address}#{sub-dir-name}#{share-name}
-    # make sure this value is unique for every share in the cluster
-    volumeHandle: 192.168.154.195#wizarr#data
-    volumeAttributes:
-      source: //192.168.154.195/K3s.Volumes
-      subDir: wizarr/data
-    nodeStageSecretRef:
-      name: smb-credentials
-      namespace: wizarr

services/PVR/Wizarr/persistentvolumeclaim-csismb-wizarr-data.yaml

@@ -1,12 +0,0 @@
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: csismb-wizarr-data
-  namespace: wizarr
-spec:
-  accessModes:
-    - ReadWriteMany
-  storageClassName: csismb-wizarr-data
-  resources:
-    requests:
-      storage: 1Gi

services/PVR/Wizarr/sealedsecret-smb-credentials.yaml

@@ -1,14 +0,0 @@
-apiVersion: bitnami.com/v1alpha1
-kind: SealedSecret
-metadata:
-  name: smb-credentials
-  namespace: wizarr
-spec:
-  encryptedData:
-    password: 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
-    username: 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
-  template:
-    metadata:
-      name: smb-credentials
-      namespace: wizarr
-    type: Opaque

services/PVR/Wizarr/service-wizarr.yaml

@@ -1,12 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: wizarr
-  namespace: wizarr
-spec:
-  ports:
-    - protocol: TCP
-      name: web
-      port: 5690
-  selector:
-    app: wizarr

storage/csi-driver-smb/application-csi-driver-smb.yaml

@@ -13,7 +13,7 @@ spec:
   sources:
   - repoURL: https://raw.githubusercontent.com/kubernetes-csi/csi-driver-smb/master/charts
     chart: csi-driver-smb
-    targetRevision: 1.19.1
+    targetRevision: v1.18.0
     helm:
       valueFiles:
       - $values/storage/csi-driver-smb/values.yaml

system/ArgoCD/application-argo-cd.yaml

@@ -11,8 +11,7 @@ spec:
   sources:
   - repoURL: https://argoproj.github.io/argo-helm
     chart: argo-cd
-    # targetRevision: 8.1.2
+    targetRevision: 8.1.2
-    targetRevision: 8.6.4
     helm:
       valueFiles:
       - $values/system/ArgoCD/values.yaml