Update ghcr.io/immich-app/immich-machine-learning Docker tag to v1.121.0

gitea auth fix?
upgrade gitea postgres version
2024-11-20 17:01:28 +00:00 · 2024-11-19 17:38:05 +01:00 · 2024-11-19 11:56:33 +01:00 · 2024-11-19 08:36:17 +00:00 · 2024-11-19 08:35:56 +00:00 · 2024-11-19 04:01:31 +00:00
15 changed files with 38 additions and 17 deletions
--- a/apps/adguard/kustomization.yaml
+++ b/apps/adguard/kustomization.yaml
@@ -10,7 +10,7 @@ resources:
 images:
  - name: adguard/adguardhome
    newName: adguard/adguardhome
-    newTag: v0.107.53
+    newTag: v0.107.54

 namespace: adguard

--- a/apps/audiobookshelf/kustomization.yaml
+++ b/apps/audiobookshelf/kustomization.yaml
@@ -12,4 +12,4 @@ namespace: audiobookshelf
 images:
  - name: audiobookshelf
    newName: ghcr.io/advplyr/audiobookshelf
-    newTag: "2.16.2"
+    newTag: "2.17.1"
--- a/apps/files/kustomization.yaml
+++ b/apps/files/kustomization.yaml
@@ -13,4 +13,4 @@ namespace: files
 images:
  - name: ocis
    newName: owncloud/ocis
-    newTag: "5.0.8"
+    newTag: "5.0.9"
--- a/apps/immich/kustomization.yaml
+++ b/apps/immich/kustomization.yaml
@@ -21,7 +21,7 @@ helmCharts:

 images:
  - name: ghcr.io/immich-app/immich-machine-learning
-    newTag: v1.119.1
+    newTag: v1.121.0
  - name: ghcr.io/immich-app/immich-server
    newTag: v1.119.1

--- a/apps/media/kustomization.yaml
+++ b/apps/media/kustomization.yaml
@@ -12,4 +12,4 @@ resources:
 images:
  - name: jellyfin/jellyfin
    newName: jellyfin/jellyfin
-    newTag: 10.10.1
+    newTag: 10.10.3
--- a/apps/monitoring/kustomization.yaml
+++ b/apps/monitoring/kustomization.yaml
@@ -17,5 +17,5 @@ helmCharts:
  - releaseName: grafana
    name: grafana
    repo: https://grafana.github.io/helm-charts
-    version: 8.5.12
+    version: 8.6.0
    valuesFile: grafana.values.yaml
--- a/apps/paperless/kustomization.yaml
+++ b/apps/paperless/kustomization.yaml
@@ -14,14 +14,14 @@ namespace: paperless
 images:
  - name: paperless
    newName: ghcr.io/paperless-ngx/paperless-ngx
-    newTag: "2.13.4"
+    newTag: "2.13.5"


 helmCharts:
  - name: redis
    releaseName: redis
    repo: https://charts.bitnami.com/bitnami
-    version: 20.1.5
+    version: 20.3.0
    valuesInline:
      auth:
        enabled: false
--- a/infrastructure/gitea/gitea.values.yaml
+++ b/infrastructure/gitea/gitea.values.yaml
@@ -125,6 +125,7 @@ gitea:
      existingSecret: gitea-oauth
      required-claim-name: groups
      required-claim-value: gitea
+      group-claim-name: groups
      admin-group: apps_admin

  
--- a/infrastructure/gitea/kustomization.yaml
+++ b/infrastructure/gitea/kustomization.yaml
@@ -23,6 +23,6 @@ helmCharts:
  - name: gitea
    namespace: gitea # needs to be set explicitly for svc to be referenced correctly
    releaseName: gitea
-    version: 10.5.0
+    version: 10.6.0
    valuesFile: gitea.values.yaml
    repo: https://dl.gitea.io/charts/
--- a/infrastructure/gitea/postgres-password.sealedsecret.yaml
+++ b/infrastructure/gitea/postgres-password.sealedsecret.yaml
@@ -7,9 +7,9 @@ metadata:
  namespace: gitea
 spec:
  encryptedData:
-    database: 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
-    password: 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
-    username: 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
+    database: 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
+    password: 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
+    username: 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
  template:
    metadata:
      creationTimestamp: null
--- a/infrastructure/gitea/postgres.yaml
+++ b/infrastructure/gitea/postgres.yaml
@@ -4,7 +4,7 @@ metadata:
  name: gitea-postgres
 spec:
  instances: 1
-  imageName: ghcr.io/cloudnative-pg/postgresql:11
+  imageName: ghcr.io/cloudnative-pg/postgresql:16
  bootstrap:
    initdb:
      owner: gitea
--- a/infrastructure/pg-ha/README.md
+++ b/infrastructure/pg-ha/README.md
@@ -1,3 +1,23 @@
 # Rebuilding the kluster

-When rebuilding the kluster from scratch, the CNPG containers 
+When rebuilding the kluster from scratch, the CNPG containers will be considered as new and will be set up according to their `initdb` config.
+
+Since most of the clusters here are formally defined as a fresh clusters, the following will happen:
+- in the relevant PVC the `pgdata` folder will be renamed to `pgdata-old`
+- a fresh `pgdata` folder will be created
+- a database with RBAC as defined in the `initdb` config will be created
+
+This is problematic since the PVC content is the actual state of the database in the present setup. In order to get back to a functional state, some manual intervention is therefore required.
+
+1. Bootstrap the kubernetes cluster
+2. Wait for the CNPG containers to be up and running - they will be setup fresh at this point
+3. follow the procedure from [https://cloudnative-pg.io/documentation/1.20/declarative_hibernation/](https://cloudnative-pg.io/documentation/1.20/declarative_hibernation/):
+    - hibernate the postgresql cluster
+    - wait for the pod to be shut down
+    - copy the `pgdata-old` content to the `pgdata` folder
+    - de-hibernate the postgresql cluster
+4. The database should now be in a functional state
+
+
+
+Also see https://argo-cd.readthedocs.io/en/stable/operator-manual/applicationset/Controlling-Resource-Modification/#preserving-changes-made-to-an-applications-annotations-and-labels
--- a/infrastructure/pg-ha/kustomization.yaml
+++ b/infrastructure/pg-ha/kustomization.yaml
@@ -9,6 +9,6 @@ namespace: pg-ha
 helmCharts:
  - name: cloudnative-pg
    releaseName: pg-controller
-    version: 0.22.0
+    version: 0.22.1
    valuesFile: values.yaml
    repo: https://cloudnative-pg.io/charts/
--- a/infrastructure/renovate/kustomization.yaml
+++ b/infrastructure/renovate/kustomization.yaml
@@ -11,4 +11,4 @@ resources:
 images:
  - name: renovate/renovate
    newName: renovate/renovate
-    newTag: "38"
+    newTag: "39"
--- a/infrastructure/sealedsecrets/kustomization.yaml
+++ b/infrastructure/sealedsecrets/kustomization.yaml
@@ -9,4 +9,4 @@ resources:
 images:
  - name: controller
    newName: docker.io/bitnami/sealed-secrets-controller
-    newTag: 0.27.1
+    newTag: 0.27.2
Author	SHA1	Message	Date
Renovate Bot	1bc850a94d	Update ghcr.io/immich-app/immich-machine-learning Docker tag to v1.121.0	2024-11-20 17:01:28 +00:00
Remy Moll	a07cfd7c56	gitea auth fix?	2024-11-19 17:38:05 +01:00
Remy Moll	26ff001a20	upgrade gitea postgres version	2024-11-19 11:56:33 +01:00
Remy Moll	e222a3c431	Merge pull request 'Update ghcr.io/advplyr/audiobookshelf Docker tag to v2.17.1' (#242 ) from renovate/ghcr.io-advplyr-audiobookshelf-2.x into main Reviewed-on: #242	2024-11-19 08:36:17 +00:00
Remy Moll	8c3d4c379b	Merge pull request 'Update jellyfin/jellyfin Docker tag to v10.10.3' (#243 ) from renovate/jellyfin-jellyfin-10.x into main Reviewed-on: #243	2024-11-19 08:35:56 +00:00
Renovate Bot	d30585435c	Update jellyfin/jellyfin Docker tag to v10.10.3	2024-11-19 04:01:31 +00:00
Renovate Bot	ea0b9dfba2	Update ghcr.io/advplyr/audiobookshelf Docker tag to v2.17.1	2024-11-18 20:01:32 +00:00
Remy Moll	b6fe511b4a	Merge pull request 'Update Helm release gitea to v10.6.0' (#237 ) from renovate/gitea-10.x into main Reviewed-on: #237	2024-11-18 19:06:06 +00:00
Remy Moll	a47fee1d82	Merge pull request 'Update jellyfin/jellyfin Docker tag to v10.10.2' (#240 ) from renovate/jellyfin-jellyfin-10.x into main Reviewed-on: #240	2024-11-18 19:04:30 +00:00
Remy Moll	c679e322de	Merge pull request 'Update owncloud/ocis Docker tag to v5.0.9' (#241 ) from renovate/owncloud-ocis-5.x into main Reviewed-on: #241	2024-11-18 19:03:46 +00:00
Remy Moll	efbe042953	Merge pull request 'Update Helm release cloudnative-pg to v0.22.1' (#215 ) from renovate/cloudnative-pg-0.x into main Reviewed-on: #215	2024-11-18 19:02:52 +00:00
Remy Moll	db232355d3	Merge pull request 'Update docker.io/bitnami/sealed-secrets-controller Docker tag to v0.27.2' (#230 ) from renovate/docker.io-bitnami-sealed-secrets-controller-0.x into main Reviewed-on: #230	2024-11-18 19:02:06 +00:00
Renovate Bot	b080140fd8	Update owncloud/ocis Docker tag to v5.0.9	2024-11-18 19:01:49 +00:00
Renovate Bot	c4bf247638	Update jellyfin/jellyfin Docker tag to v10.10.2	2024-11-18 19:01:43 +00:00
Remy Moll	7247a6dd22	Merge pull request 'Update renovate/renovate Docker tag to v39' (#232 ) from renovate/renovate-renovate-39.x into main Reviewed-on: #232	2024-11-18 19:00:56 +00:00
Remy Moll	5244c813d4	Merge pull request 'Update adguard/adguardhome Docker tag to v0.107.54' (#233 ) from renovate/adguard-adguardhome-0.x into main Reviewed-on: #233	2024-11-18 19:00:40 +00:00
Remy Moll	0490680092	Merge pull request 'Update Helm release redis to v20.3.0' (#197 ) from renovate/redis-20.x into main Reviewed-on: #197	2024-11-18 19:00:01 +00:00
Remy Moll	334a660478	Merge pull request 'Update ghcr.io/paperless-ngx/paperless-ngx Docker tag to v2.13.5' (#238 ) from renovate/ghcr.io-paperless-ngx-paperless-ngx-2.x into main Reviewed-on: #238	2024-11-18 18:59:41 +00:00
Remy Moll	d8285eee31	Merge pull request 'Update Helm release grafana to v8.6.0' (#239 ) from renovate/grafana-8.x into main Reviewed-on: #239	2024-11-18 18:58:05 +00:00
Renovate Bot	5411ed4689	Update Helm release redis to v20.3.0	2024-11-14 10:32:13 +00:00
Renovate Bot	8b4fd03d3c	Update Helm release grafana to v8.6.0	2024-11-10 22:01:57 +00:00
Renovate Bot	0f4214bb33	Update ghcr.io/paperless-ngx/paperless-ngx Docker tag to v2.13.5	2024-11-10 17:01:41 +00:00
Renovate Bot	8014076013	Update Helm release gitea to v10.6.0	2024-11-10 14:31:43 +00:00
Renovate Bot	0e0b941764	Update adguard/adguardhome Docker tag to v0.107.54	2024-11-06 13:31:25 +00:00
Renovate Bot	b703843e1c	Update renovate/renovate Docker tag to v39	2024-11-05 11:04:09 +00:00
Renovate Bot	ffaf26ccea	Update docker.io/bitnami/sealed-secrets-controller Docker tag to v0.27.2	2024-11-05 10:01:36 +00:00
Renovate Bot	af102859c6	Update Helm release cloudnative-pg to v0.22.1	2024-10-17 12:01:32 +00:00