feat: upgrade app-template charts to 2.0.3

Signed-off-by: Devin Buhl <devin@buhl.casa>

bootstrap/templates/addons/discord-template-notifier/app/helmrelease.yaml.j2

@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: app-template
-      version: 1.5.1
+      version: 2.0.3
       interval: 30m
       sourceRef:
         kind: HelmRepository
@@ -27,29 +27,38 @@ spec:
   uninstall:
     keepHistory: false
   values:
+    controllers:
+      main:
+        annotations:
+          reloader.stakater.com/auto: "true"
+        containers:
+          main:
             image:
               repository: ghcr.io/morphy2k/rss-forwarder
               tag: 0.6.1
             env:
               TZ: "${TIMEZONE}"
-    service:
-      main: &disableSvc
-        enabled: false
-    ingress:
-      main: *disableSvc
             probes:
-      liveness: *disableSvc
-      readiness: *disableSvc
-      startup: *disableSvc
+              liveness: &disabled
+                enabled: false
+              readiness: *disabled
+              startup: *disabled
+            resources:
+              requests:
+                cpu: 5m
+                memory: 10M
+              limits:
+                memory: 64M
+    service:
+      main: *disabled
+    ingress:
+      main: *disabled
     persistence:
-      data:
+      config:
         enabled: true
         type: secret
         name: discord-template-notifier-secret
-    resources:
-      requests:
-        cpu: 15m
-        memory: 110M
-      limits:
-        cpu: 15m
-        memory: 110M
+        globalMounts:
+          - path: /data/config.toml
+            subPath: config.toml
+            readOnly: true

bootstrap/templates/kubernetes/apps/networking/cloudflared/app/helmrelease.yaml.j2

@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: app-template
-      version: 1.5.1
+      version: 2.0.3
       sourceRef:
         kind: HelmRepository
         name: bjw-s
@@ -25,11 +25,14 @@ spec:
   uninstall:
     keepHistory: false
   values:
-    controller:
-      replicas: 1
+    controllers:
+      main:
+        replicas: 2
         strategy: RollingUpdate
         annotations:
           reloader.stakater.com/auto: "true"
+        containers:
+          main:
             image:
               repository: docker.io/cloudflare/cloudflared
               tag: 2023.10.0
@@ -50,20 +53,6 @@ spec:
               - /etc/cloudflared/config/config.yaml
               - run
               - "$(TUNNEL_ID)"
-    service:
-      main:
-        ports:
-          http:
-            port: 8080
-    serviceMonitor:
-      main:
-        enabled: true
-        endpoints:
-          - port: http
-            scheme: http
-            path: /metrics
-            interval: 1m
-            scrapeTimeout: 30s
             probes:
               liveness: &probes
                 enabled: true
@@ -71,7 +60,7 @@ spec:
                 spec:
                   httpGet:
                     path: /ready
-            port: http
+                    port: &port 8080
                   initialDelaySeconds: 0
                   periodSeconds: 10
                   timeoutSeconds: 1
@@ -79,24 +68,37 @@ spec:
               readiness: *probes
               startup:
                 enabled: false
+            resources:
+              requests:
+                cpu: 5m
+                memory: 128M
+              limits:
+                memory: 256M
+        pod:
+          securityContext:
+            runAsUser: 568
+            runAsGroup: 568
+    service:
+      main:
+        ports:
+          http:
+            port: *port
+    serviceMonitor:
+      main:
+        enabled: true
     persistence:
       config:
         enabled: true
         type: configMap
         name: cloudflared-configmap
+        globalMounts:
+          - path: /etc/cloudflared/config/config.yaml
             subPath: config.yaml
-        mountPath: /etc/cloudflared/config/config.yaml
             readOnly: true
       creds:
-        enabled: true
         type: secret
         name: cloudflared-secret
+        globalMounts:
+          - path: /etc/cloudflared/creds/credentials.json
             subPath: credentials.json
-        mountPath: /etc/cloudflared/creds/credentials.json
             readOnly: true
-    resources:
-      requests:
-        cpu: 5m
-        memory: 10Mi
-      limits:
-        memory: 256Mi

bootstrap/templates/kubernetes/apps/networking/echo-server/app/helmrelease.yaml.j2

@@ -10,7 +10,7 @@ spec:
   chart:
     spec:
       chart: app-template
-      version: 1.5.1
+      version: 2.0.3
       sourceRef:
         kind: HelmRepository
         name: bjw-s
@@ -26,16 +26,17 @@ spec:
   uninstall:
     keepHistory: false
   values:
-    controller:
+    controllers:
+      main:
+        replicas: 2
         strategy: RollingUpdate
+        containers:
+          main:
             image:
               repository: docker.io/jmalloc/echo-server
               tag: 0.3.6
-    service:
-      main:
-        ports:
-          http:
-            port: &port 8080
+            env:
+              PORT: &port 8080
             probes:
               liveness: &probes
                 enabled: true
@@ -51,6 +52,21 @@ spec:
               readiness: *probes
               startup:
                 enabled: false
+            resources:
+              requests:
+                cpu: 5m
+                memory: 10M
+              limits:
+                memory: 64M
+        pod:
+          securityContext:
+            runAsUser: 568
+            runAsGroup: 568
+    service:
+      main:
+        ports:
+          http:
+            port: *port
     ingress:
       main:
         enabled: true
@@ -62,13 +78,9 @@ spec:
           - host: &host "{% raw %}{{ .Release.Name }}{% endraw %}.${SECRET_DOMAIN}"
             paths:
               - path: /
-                pathType: Prefix
+                service:
+                  name: main
+                  port: http
         tls:
           - hosts:
               - *host
-    resources:
-      requests:
-        cpu: 5m
-        memory: 10Mi
-      limits:
-        memory: 50Mi