Update kubernetes-csi/external-snapshotter to v8.6.0

actual-budget/helm-actual-budget.yaml

@@ -12,14 +12,14 @@ spec:
   project: default
   source:
     repoURL: https://community-charts.github.io/helm-charts
-    targetRevision: 1.8.9
+    targetRevision: 1.8.7
     chart: actualbudget
     helm:
       values: |
         # Actual Budget configuration
 
         image:
-          tag: "26.6.0"
+          tag: "26.3.0"
 
         # Authentication configuration
         login:

apps/templates/bolletjestrui-folder.yaml

@@ -1,21 +0,0 @@
-apiVersion: argoproj.io/v1alpha1
-kind: Application
-metadata:
-  name: bolletjestrui
-  namespace: argocd
-  finalizers:
-    - resources-finalizer.argocd.argoproj.io
-spec:
-  project: default
-  source:
-    repoURL: https://github.com/rubenhensen/k8scd.git
-    targetRevision: HEAD
-    path: bolletjestrui
-  destination:
-    server: https://kubernetes.default.svc
-    namespace: bolletjestrui
-  syncPolicy:
-    syncOptions:
-      - CreateNamespace=true
-    automated:
-      selfHeal: true

apps/templates/snapshot-controller-helm.yaml

@@ -7,7 +7,7 @@ spec:
   project: default
   source:
     repoURL: https://github.com/kubernetes-csi/external-snapshotter.git
-    targetRevision: v8.2.1
+    targetRevision: v8.6.0
     path: deploy/kubernetes/snapshot-controller
   destination:
     server: https://kubernetes.default.svc

bolletjestrui/bolletjestrui-deployment.yaml

@@ -1,80 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  labels:
-    app: bolletjestrui
-  name: bolletjestrui
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: bolletjestrui
-  strategy:
-    type: Recreate
-  template:
-    metadata:
-      labels:
-        app: bolletjestrui
-    spec:
-      containers:
-        - image: ghcr.io/rubenhensen/bolletjestrui:main-bb54c6a
-          name: bolletjestrui
-          ports:
-            - containerPort: 3000
-              protocol: TCP
-          env:
-            - name: DATABASE_URL
-              value: /app/data/bolletjestrui.db
-            - name: ORIGIN
-              value: https://vic.rubenhensen.nl
-            - name: PROTOCOL_HEADER
-              value: x-forwarded-proto
-            - name: HOST_HEADER
-              value: x-forwarded-host
-            # route GPX uploads can be a few MB; raise adapter-node's 512K default
-            - name: BODY_SIZE_LIMIT
-              value: "10M"
-            - name: TZ
-              value: Europe/Amsterdam
-            - name: SITE_PASSWORD
-              valueFrom:
-                secretKeyRef:
-                  name: bolletjestrui-secrets
-                  key: site_password
-            - name: ADMIN_PASSWORD
-              valueFrom:
-                secretKeyRef:
-                  name: bolletjestrui-secrets
-                  key: admin_password
-            - name: KEY_SECRET
-              valueFrom:
-                secretKeyRef:
-                  name: bolletjestrui-secrets
-                  key: key_secret
-          resources:
-            requests:
-              memory: "128Mi"
-              cpu: "50m"
-            limits:
-              memory: "512Mi"
-              cpu: "500m"
-          readinessProbe:
-            httpGet:
-              path: /login
-              port: 3000
-            initialDelaySeconds: 5
-            periodSeconds: 10
-          livenessProbe:
-            httpGet:
-              path: /login
-              port: 3000
-            initialDelaySeconds: 15
-            periodSeconds: 20
-          volumeMounts:
-            - mountPath: /app/data
-              name: data
-      restartPolicy: Always
-      volumes:
-        - name: data
-          persistentVolumeClaim:
-            claimName: bolletjestrui-data

bolletjestrui/bolletjestrui-service.yaml

@@ -1,13 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  labels:
-    app: bolletjestrui
-  name: bolletjestrui
-spec:
-  ports:
-    - name: "3000"
-      port: 3000
-      targetPort: 3000
-  selector:
-    app: bolletjestrui

bolletjestrui/data-persistentvolumeclaim.yaml

@@ -1,12 +0,0 @@
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  labels:
-    app: bolletjestrui
-  name: bolletjestrui-data
-spec:
-  accessModes:
-    - ReadWriteOnce
-  resources:
-    requests:
-      storage: 2Gi

bolletjestrui/external-secret.yaml

@@ -1,25 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: bolletjestrui-secrets
-spec:
-  secretStoreRef:
-    name: vault-backend
-    kind: ClusterSecretStore
-  refreshInterval: 15m
-  target:
-    name: bolletjestrui-secrets
-    creationPolicy: Owner
-  data:
-    - secretKey: site_password
-      remoteRef:
-        key: kv/bolletjestrui
-        property: site_password
-    - secretKey: admin_password
-      remoteRef:
-        key: kv/bolletjestrui
-        property: admin_password
-    - secretKey: key_secret
-      remoteRef:
-        key: kv/bolletjestrui
-        property: key_secret

bolletjestrui/ingress.yaml

@@ -1,26 +0,0 @@
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: bolletjestrui-ingress
-  annotations:
-    cert-manager.io/cluster-issuer: prod-cluster-issuer
-    nginx.ingress.kubernetes.io/backend-protocol: "HTTP"
-    nginx.ingress.kubernetes.io/ssl-passthrough: "false"
-    nginx.ingress.kubernetes.io/proxy-body-size: "10m"
-spec:
-  ingressClassName: nginx
-  rules:
-    - host: vic.rubenhensen.nl
-      http:
-        paths:
-          - path: /
-            pathType: Prefix
-            backend:
-              service:
-                name: bolletjestrui
-                port:
-                  number: 3000
-  tls:
-    - secretName: letsencrypt-prod
-      hosts:
-        - vic.rubenhensen.nl

dns/domains/rubenhensen.nl.yaml

@@ -10,7 +10,7 @@ records:
   - name: "phocaslustrum"
     expire: 300
     type: A
-    content: "62.41.86.27"
+    content: "62.41.87.114"
   - name: "ynab"
     expire: 300
     type: A
@@ -22,7 +22,7 @@ records:
   - name: "ldap"
     expire: 300
     type: A
-    content: "62.41.86.27"
+    content: "62.41.87.114"
   - name: "argocd"
     expire: 300
     type: A
@@ -59,10 +59,6 @@ records:
     expire: 300
     type: A
     content: "46.224.26.65"
-  - name: "vic"
-    expire: 300
-    type: A
-    content: "46.224.26.65"
   - name: "@"
     expire: 300
     type: MX

nix-infra-machine/nodes/node001.nix

@@ -2,7 +2,7 @@
 let
   # Public IP of the home network where the k8s cluster ingress lives.
   # Keep in sync with dns/domains/rubenhensen.nl.yaml.
-  homeIP = "62.41.86.27";
+  homeIP = "62.41.87.114";
 
   # Hosts tunneled to the home k8s cluster. Each entry gets:
   #   * an SNI map entry for TCP passthrough on :443

renovate.json

@@ -16,8 +16,7 @@
   "kubernetes": {
     "managerFilePatterns": [
       "/apps/templates/.+\\.yaml$/",
-      "/serpbear/.+\\.yaml$/",
-      "/bolletjestrui/.+\\.yaml$/"
+      "/serpbear/.+\\.yaml$/"
     ]
   },
   "customManagers": [

serpbear/external-secret.yaml

@@ -1,4 +1,4 @@
-apiVersion: external-secrets.io/v1
+apiVersion: external-secrets.io/v1beta1
 kind: ExternalSecret
 metadata:
   name: serpbear-secrets