fix(container): update image ghcr.io/siderolabs/installer to v1.8.3

Fix capacitor
2024-11-14 07:01:20 +00:00 · 2024-11-12 03:37:09 +00:00 · 2024-11-12 03:34:01 +00:00 · 2024-11-12 03:32:44 +00:00 · 2024-11-12 03:30:50 +00:00 · 2024-11-12 03:29:52 +00:00
15 changed files with 215 additions and 9 deletions
@@ -35,7 +35,7 @@ jobs:
          path: default

      - name: Diff Resources
-        uses: docker://ghcr.io/allenporter/flux-local:v6.0.0
+        uses: docker://ghcr.io/allenporter/flux-local:v6.0.1
        with:
          args: >-
            diff ${{ matrix.resources }}
@@ -10,7 +10,7 @@ on:
 jobs:
  renovate:
    runs-on: ubuntu-latest
-    container: ghcr.io/renovatebot/renovate:37.20.2
+    container: ghcr.io/renovatebot/renovate:37.440.7
    steps:
      - uses: actions/checkout@v4
      - run: renovate
@@ -1,7 +1,7 @@
 # yaml-language-server: $schema=https://raw.githubusercontent.com/budimanjojo/talhelper/master/pkg/config/schemas/talconfig.json
 ---
 # renovate: datasource=docker depName=ghcr.io/siderolabs/installer
-talosVersion: v1.8.2
+talosVersion: v1.8.3
 # renovate: datasource=docker depName=ghcr.io/siderolabs/kubelet
 kubernetesVersion: v1.31.2

@@ -0,0 +1,103 @@
+---
+# yaml-language-server: $schema=https://raw.githubusercontent.com/bjw-s/helm-charts/main/charts/other/app-template/schemas/helmrelease-helm-v2.schema.json
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: &app capacitor
+spec:
+  interval: 15m
+  chart:
+    spec:
+      chart: app-template
+      version: 3.5.1
+      sourceRef:
+        kind: HelmRepository
+        name: bjw-s
+        namespace: flux-system
+  install:
+    createNamespace: true
+    remediation:
+      retries: 3
+  upgrade:
+    remediation:
+      retries: 3
+  values:
+    controllers:
+      capacitor:
+        replicas: 1
+        pod:
+          securityContext:
+            fsGroup: 999
+            # runAsGroup: 3000
+            # runAsNonRoot: true
+            # runAsUser: 1000
+            # seccompProfile:
+            #   type: RuntimeDefault
+        containers:
+          app:
+            env:
+              TZ: ${SETTING_TZ}
+
+            image:
+              repository: ghcr.io/gimlet-io/capacitor
+              tag: v0.4.8@sha256:a80207f52c054dba9e04e8b1ea86e297817ecf05ddbfce249c1f5eaf6ce8c7d8
+            securityContext:
+              allowPrivilegeEscalation: false
+              capabilities:
+                drop:
+                  - ALL
+              readOnlyRootFilesystem: true
+
+            probes:
+              startup:
+                enabled: false
+              liveness: &probe
+                enabled: true
+                custom: true
+                spec:
+                  httpGet:
+                    path: /
+                    port: &port 9000
+                    scheme: HTTP
+                  initialDelaySeconds: 0
+                  periodSeconds: 10
+                  timeoutSeconds: 1
+                  failureThreshold: 3
+              readiness: *probe
+
+            resources:
+              requests:
+                cpu: 190m
+                memory: 127Mi
+              limits:
+                memory: 127Mi
+
+    serviceAccount:
+      create: false
+      name: capacitor
+
+    service:
+      app:
+        controller: capacitor
+        ports:
+          http:
+            enabled: true
+            port: *port
+            protocol: HTTP
+
+    ingress:
+      app:
+        enabled: true
+        className: internal
+        hosts:
+          - host: &host "{{ .Release.Name }}.k8s.home.arpa"
+            paths:
+              - path: /
+                pathType: Prefix
+                service:
+                  identifier: app
+                  port: http
+        tls:
+          - hosts:
+              - *host
+            secretName: "{{ .Release.Name }}-tls"
@@ -0,0 +1,7 @@
+# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/kustomize.toolkit.fluxcd.io/kustomization_v1.json
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ./helmrelease.yaml
+  - ./rbac.yaml
@@ -0,0 +1,58 @@
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: capacitor
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: capacitor
+rules:
+  - apiGroups:
+      - networking.k8s.io
+      - apps
+      - ""
+    resources:
+      - pods
+      - pods/log
+      - ingresses
+      - deployments
+      - services
+      - secrets
+      - events
+      - configmaps
+    verbs:
+      - get
+      - watch
+      - list
+  - apiGroups:
+      - source.toolkit.fluxcd.io
+      - kustomize.toolkit.fluxcd.io
+      - helm.toolkit.fluxcd.io
+    resources:
+      - gitrepositories
+      - ocirepositories
+      - buckets
+      - helmrepositories
+      - helmcharts
+      - kustomizations
+      - helmreleases
+    verbs:
+      - get
+      - watch
+      - list
+      - patch # to allow force reconciling by adding an annotation
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: capacitor
+subjects:
+  - kind: ServiceAccount
+    name: capacitor
+    namespace: flux-system
+roleRef:
+  kind: ClusterRole
+  name: capacitor
+  apiGroup: rbac.authorization.k8s.io
@@ -0,0 +1,19 @@
+---
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: &app capacitor
+  namespace: flux-system
+spec:
+  targetNamespace: capacitor
+  commonMetadata:
+    labels:
+      app.kubernetes.io/name: *app
+  path: ./kubernetes/apps/capacitor/capacitor/app
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: home-kubernetes
+  wait: true
+  interval: 30m
+  timeout: 5m
@@ -0,0 +1,7 @@
+# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/kustomize.toolkit.fluxcd.io/kustomization_v1.json
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ./namespace.yaml
+  - ./capacitor/ks.yaml
@@ -0,0 +1,7 @@
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: capacitor
+  labels:
+    kustomize.toolkit.fluxcd.io/prune: disabled
@@ -52,7 +52,12 @@ spec:
                custom: true
                spec:
                  exec:
-                    command: [ "/bin/bash", "-c", "'curl -X POST -s http://127.0.0.1:8087/sync?force=true'"]
+                    command:
+                      - "/bin/bash"
+                      - -c
+                      - curl
+                      - -X POST
+                      - -s http://127.0.0.1:8087/sync
                  initialDelaySeconds: 20
                  failureThreshold: 3
                  timeoutSeconds: 10
@@ -8,7 +8,7 @@ spec:
  chart:
    spec:
      chart: coredns
-      version: 1.36.0
+      version: 1.36.1
      sourceRef:
        kind: HelmRepository
        name: coredns
@@ -30,7 +30,7 @@ spec:
          app:
            image:
              repository: docker.io/cloudflare/cloudflared
-              tag: 2024.10.1
+              tag: 2024.11.0
            env:
              NO_AUTOUPDATE: true
              TUNNEL_CRED_FILE: /etc/cloudflared/creds/credentials.json
@@ -8,7 +8,7 @@ spec:
  chart:
    spec:
      chart: ingress-nginx
-      version: 4.11.2
+      version: 4.11.3
      sourceRef:
        kind: HelmRepository
        name: ingress-nginx
@@ -9,7 +9,7 @@ spec:
  chart:
    spec:
      chart: ingress-nginx
-      version: 4.11.2
+      version: 4.11.3
      sourceRef:
        kind: HelmRepository
        name: ingress-nginx
@@ -1,7 +1,7 @@
 # yaml-language-server: $schema=https://raw.githubusercontent.com/budimanjojo/talhelper/master/pkg/config/schemas/talconfig.json
 ---
 # renovate: datasource=docker depName=ghcr.io/siderolabs/installer
-talosVersion: v1.8.2
+talosVersion: v1.8.3
 # renovate: datasource=docker depName=ghcr.io/siderolabs/kubelet
 kubernetesVersion: v1.31.2
Author	SHA1	Message	Date
Renovate Bot	e109c5d17b	fix(container): update image ghcr.io/siderolabs/installer to v1.8.3 e2e / workstation (archlinux) (pull_request) Failing after 1s Details e2e / workstation (generic-linux) (pull_request) Failing after 7s Details e2e / configure (talos) (pull_request) Has been skipped Details Flux Diff / Flux Diff (kubernetes, helmrelease) (pull_request) Failing after 8s Details Flux Diff / Flux Diff (kubernetes, kustomization) (pull_request) Failing after 10s Details Kubeconform / Kubeconform (pull_request) Failing after 13s Details Labeler / Labeler (pull_request) Successful in 11s Details	2024-11-14 07:01:20 +00:00
Daren Lord	201d8784e7	Fix capacitor renovate / renovate (push) Successful in 39s Details	2024-11-12 03:37:09 +00:00
Daren Lord	a85df88af0	Fix capacitor renovate / renovate (push) Successful in 43s Details	2024-11-12 03:34:01 +00:00
Daren Lord	8bdd61ef77	Fix capacitor renovate / renovate (push) Has been cancelled Details	2024-11-12 03:32:44 +00:00
Daren Lord	10b19c6b9b	Fix capacitor renovate / renovate (push) Successful in 1m7s Details	2024-11-12 03:30:50 +00:00
Daren Lord	4a01d4b973	Fix capacitor renovate / renovate (push) Successful in 40s Details	2024-11-12 03:29:52 +00:00
Daren Lord	be76a4c7c5	Fix capacitor renovate / renovate (push) Successful in 1m6s Details	2024-11-12 03:26:57 +00:00
Daren Lord	ea57918345	Fix capacitor renovate / renovate (push) Successful in 1m8s Details	2024-11-12 03:25:15 +00:00
Daren Lord	ed8734fecb	Fix capacitor renovate / renovate (push) Successful in 52s Details	2024-11-12 03:23:31 +00:00
Daren Lord	ed08ef26bf	Fix capacitor renovate / renovate (push) Successful in 36s Details	2024-11-12 03:21:47 +00:00
Daren Lord	83255d41a9	Add capacitor renovate / renovate (push) Successful in 34s Details	2024-11-12 03:16:36 +00:00
Daren Lord	09333cfe22	Renovate updates renovate / renovate (push) Successful in 42s Details	2024-11-12 03:06:38 +00:00
Renovate Bot	88de1e6c7e	feat(github-action): update image ghcr.io/renovatebot/renovate to v37.440.7 renovate / renovate (push) Successful in 42s Details	2024-11-09 07:01:25 +00:00
Renovate Bot	83a8bc3d58	fix(github-action): update image ghcr.io/allenporter/flux-local to v6.0.1 renovate / renovate (push) Waiting to run Details	2024-11-09 07:00:59 +00:00