fix(container): update image ghcr.io/siderolabs/installer to v1.8.2

.github/workflows/flux-diff.yaml

@@ -35,7 +35,7 @@ jobs:
           path: default
 
       - name: Diff Resources
-        uses: docker://ghcr.io/allenporter/flux-local:v6.0.1
+        uses: docker://ghcr.io/allenporter/flux-local:v6.0.0
         with:
           args: >-
             diff ${{ matrix.resources }}

.github/workflows/renovate.yaml

@@ -10,7 +10,7 @@ on:
 jobs:
   renovate:
     runs-on: ubuntu-latest
-    container: ghcr.io/renovatebot/renovate:37.440.7
+    container: ghcr.io/renovatebot/renovate:37.20.2
     steps:
       - uses: actions/checkout@v4
       - run: renovate

bootstrap/templates/kubernetes/bootstrap/talos/talconfig.yaml.j2

@@ -1,7 +1,7 @@
 # yaml-language-server: $schema=https://raw.githubusercontent.com/budimanjojo/talhelper/master/pkg/config/schemas/talconfig.json
 ---
 # renovate: datasource=docker depName=ghcr.io/siderolabs/installer
-talosVersion: v1.8.3
+talosVersion: v1.8.2
 # renovate: datasource=docker depName=ghcr.io/siderolabs/kubelet
 kubernetesVersion: v1.31.2
 

kubernetes/apps/capacitor/capacitor/app/helmrelease.yaml

@@ -1,103 +0,0 @@
----
-# yaml-language-server: $schema=https://raw.githubusercontent.com/bjw-s/helm-charts/main/charts/other/app-template/schemas/helmrelease-helm-v2.schema.json
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  name: &app capacitor
-spec:
-  interval: 15m
-  chart:
-    spec:
-      chart: app-template
-      version: 3.5.1
-      sourceRef:
-        kind: HelmRepository
-        name: bjw-s
-        namespace: flux-system
-  install:
-    createNamespace: true
-    remediation:
-      retries: 3
-  upgrade:
-    remediation:
-      retries: 3
-  values:
-    controllers:
-      capacitor:
-        replicas: 1
-        pod:
-          securityContext:
-            fsGroup: 999
-            # runAsGroup: 3000
-            # runAsNonRoot: true
-            # runAsUser: 1000
-            # seccompProfile:
-            #   type: RuntimeDefault
-        containers:
-          app:
-            env:
-              TZ: ${SETTING_TZ}
-
-            image:
-              repository: ghcr.io/gimlet-io/capacitor
-              tag: v0.4.8@sha256:a80207f52c054dba9e04e8b1ea86e297817ecf05ddbfce249c1f5eaf6ce8c7d8
-            securityContext:
-              allowPrivilegeEscalation: false
-              capabilities:
-                drop:
-                  - ALL
-              readOnlyRootFilesystem: true
-
-            probes:
-              startup:
-                enabled: false
-              liveness: &probe
-                enabled: true
-                custom: true
-                spec:
-                  httpGet:
-                    path: /
-                    port: &port 9000
-                    scheme: HTTP
-                  initialDelaySeconds: 0
-                  periodSeconds: 10
-                  timeoutSeconds: 1
-                  failureThreshold: 3
-              readiness: *probe
-
-            resources:
-              requests:
-                cpu: 190m
-                memory: 127Mi
-              limits:
-                memory: 127Mi
-
-    serviceAccount:
-      create: false
-      name: capacitor
-
-    service:
-      app:
-        controller: capacitor
-        ports:
-          http:
-            enabled: true
-            port: *port
-            protocol: HTTP
-
-    ingress:
-      app:
-        enabled: true
-        className: internal
-        hosts:
-          - host: &host "{{ .Release.Name }}.k8s.home.arpa"
-            paths:
-              - path: /
-                pathType: Prefix
-                service:
-                  identifier: app
-                  port: http
-        tls:
-          - hosts:
-              - *host
-            secretName: "{{ .Release.Name }}-tls"

kubernetes/apps/capacitor/capacitor/app/kustomization.yaml

@@ -1,7 +0,0 @@
-# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/kustomize.toolkit.fluxcd.io/kustomization_v1.json
----
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-resources:
-  - ./helmrelease.yaml
-  - ./rbac.yaml

kubernetes/apps/capacitor/capacitor/app/rbac.yaml

@@ -1,58 +0,0 @@
----
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: capacitor
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  name: capacitor
-rules:
-  - apiGroups:
-      - networking.k8s.io
-      - apps
-      - ""
-    resources:
-      - pods
-      - pods/log
-      - ingresses
-      - deployments
-      - services
-      - secrets
-      - events
-      - configmaps
-    verbs:
-      - get
-      - watch
-      - list
-  - apiGroups:
-      - source.toolkit.fluxcd.io
-      - kustomize.toolkit.fluxcd.io
-      - helm.toolkit.fluxcd.io
-    resources:
-      - gitrepositories
-      - ocirepositories
-      - buckets
-      - helmrepositories
-      - helmcharts
-      - kustomizations
-      - helmreleases
-    verbs:
-      - get
-      - watch
-      - list
-      - patch # to allow force reconciling by adding an annotation
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  name: capacitor
-subjects:
-  - kind: ServiceAccount
-    name: capacitor
-    namespace: flux-system
-roleRef:
-  kind: ClusterRole
-  name: capacitor
-  apiGroup: rbac.authorization.k8s.io

kubernetes/apps/capacitor/capacitor/ks.yaml

@@ -1,19 +0,0 @@
----
-apiVersion: kustomize.toolkit.fluxcd.io/v1
-kind: Kustomization
-metadata:
-  name: &app capacitor
-  namespace: flux-system
-spec:
-  targetNamespace: capacitor
-  commonMetadata:
-    labels:
-      app.kubernetes.io/name: *app
-  path: ./kubernetes/apps/capacitor/capacitor/app
-  prune: true
-  sourceRef:
-    kind: GitRepository
-    name: home-kubernetes
-  wait: true
-  interval: 30m
-  timeout: 5m

kubernetes/apps/capacitor/kustomization.yaml

@@ -1,7 +0,0 @@
-# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/kustomize.toolkit.fluxcd.io/kustomization_v1.json
----
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-resources:
-  - ./namespace.yaml
-  - ./capacitor/ks.yaml

kubernetes/apps/capacitor/namespace.yaml

@@ -1,7 +0,0 @@
----
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: capacitor
-  labels:
-    kustomize.toolkit.fluxcd.io/prune: disabled

kubernetes/apps/external-secrets/bitwarden/helmrelease.yaml

@@ -52,12 +52,7 @@ spec:
                 custom: true
                 spec:
                   exec:
-                    command:
+                    command: [ "/bin/bash", "-c", "'curl -X POST -s http://127.0.0.1:8087/sync?force=true'"]
-                      - "/bin/bash"
-                      - -c
-                      - curl
-                      - -X POST
-                      - -s http://127.0.0.1:8087/sync
                   initialDelaySeconds: 20
                   failureThreshold: 3
                   timeoutSeconds: 10

kubernetes/apps/kube-system/coredns/app/helmrelease.yaml

@@ -8,7 +8,7 @@ spec:
   chart:
     spec:
       chart: coredns
-      version: 1.36.1
+      version: 1.36.0
       sourceRef:
         kind: HelmRepository
         name: coredns

kubernetes/apps/network/cloudflared/app/helmrelease.yaml

@@ -30,7 +30,7 @@ spec:
           app:
             image:
               repository: docker.io/cloudflare/cloudflared
-              tag: 2024.11.0
+              tag: 2024.10.1
             env:
               NO_AUTOUPDATE: true
               TUNNEL_CRED_FILE: /etc/cloudflared/creds/credentials.json

kubernetes/apps/network/ingress-nginx/external/helmrelease.yaml

@@ -8,7 +8,7 @@ spec:
   chart:
     spec:
       chart: ingress-nginx
-      version: 4.11.3
+      version: 4.11.2
       sourceRef:
         kind: HelmRepository
         name: ingress-nginx

kubernetes/apps/network/ingress-nginx/internal/helmrelease.yaml

@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: ingress-nginx
-      version: 4.11.3
+      version: 4.11.2
       sourceRef:
         kind: HelmRepository
         name: ingress-nginx

kubernetes/bootstrap/talos/talconfig.yaml

@@ -1,7 +1,7 @@
 # yaml-language-server: $schema=https://raw.githubusercontent.com/budimanjojo/talhelper/master/pkg/config/schemas/talconfig.json
 ---
 # renovate: datasource=docker depName=ghcr.io/siderolabs/installer
-talosVersion: v1.8.3
+talosVersion: v1.8.2
 # renovate: datasource=docker depName=ghcr.io/siderolabs/kubelet
 kubernetesVersion: v1.31.2