Update dependency prometheus-operator/prometheus-operator to v0.87.0

2025-11-21 10:01:54 +00:00
23 changed files with 11 additions and 424 deletions
--- a/apps/audiobookshelf/ingress.yaml
+++ b/apps/audiobookshelf/ingress.yaml
@@ -9,20 +9,9 @@ spec:
  routes:
  - match: Host(`audiobookshelf.kluster.moll.re`)
    kind: Rule
-    middlewares:
-    - name: buffering
    services:
    - name: audiobookshelf-web
      port: 80

  tls:
-    certResolver: default-tls
---
-apiVersion: traefik.io/v1alpha1
-kind: Middleware
-metadata:
-  name: buffering
-spec:
-  buffering:
-    maxRequestBodyBytes: 10000000000 # approx 10gb
-    memRequestBodyBytes: 1048576
+    certResolver: default-tls 
--- a/apps/avahi-reflector/daemonset.yaml
+++ b/apps/avahi-reflector/daemonset.yaml
@@ -1,25 +0,0 @@
-apiVersion: apps/v1
-kind: DaemonSet
-metadata:
-  name: avahi-reflector
-spec:
-  selector:
-    matchLabels:
-      app: avahi-reflector
-  template:
-    metadata:
-      labels:
-        app: avahi-reflector
-    spec:
-      hostNetwork: true
-      containers:
-        - name: avahi-reflector
-          image: avahi-reflector
-          securityContext:
-            privileged: true   # required for raw sockets
-          env:
-            - name: REFLECTOR_ENABLE_REFLECTOR
-              value: "yes"
-            - name: SERVER_ALLOW_INTERFACES
-              # use all interfaces
-              value: ""
--- a/apps/avahi-reflector/kustomization.yaml
+++ b/apps/avahi-reflector/kustomization.yaml
@@ -1,14 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-
-namespace: avahi
-
-resources:
-  - namespace.yaml
-  - daemonset.yaml
-  # - configmap.yaml
-
-images:
-  - name: avahi-reflector
-    newName: flungo/avahi
-    newTag: latest
--- a/apps/avahi-reflector/namespace.yaml
+++ b/apps/avahi-reflector/namespace.yaml
@@ -1,6 +0,0 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: placeholder
-  labels:
-    pod-security.kubernetes.io/enforce: privileged
--- a/apps/files/kustomization.yaml
+++ b/apps/files/kustomization.yaml
@@ -13,4 +13,4 @@ namespace: files
 images:
  - name: ocis
    newName: owncloud/ocis
-    newTag: "7.3.1"
+    newTag: "7.3.0"
--- a/apps/grafana/kustomization.yaml
+++ b/apps/grafana/kustomization.yaml
@@ -17,5 +17,5 @@ helmCharts:
  - releaseName: grafana
    name: grafana
    repo: https://grafana.github.io/helm-charts
-    version: 10.2.0
+    version: 10.1.5
    valuesFile: grafana.values.yaml
--- a/apps/immich/kustomization.yaml
+++ b/apps/immich/kustomization.yaml
@@ -22,6 +22,6 @@ helmCharts:

 images:
  - name: ghcr.io/immich-app/immich-machine-learning
-    newTag: v2.3.1
+    newTag: v2.2.3
  - name: ghcr.io/immich-app/immich-server
-    newTag: v2.3.1
+    newTag: v2.2.3
--- a/apps/kitchenowl/ingress.yaml
+++ b/apps/kitchenowl/ingress.yaml
@@ -26,4 +26,5 @@ spec:
  headers:
    customRequestHeaders:
      X-Forwarded-Proto: "https"
+      # enable websockets
      Upgrade: "websocket"
--- a/apps/musicassistant/deployment.yaml
+++ b/apps/musicassistant/deployment.yaml
@@ -1,43 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: musicassistant
-spec:
-  selector:
-    matchLabels:
-      app: musicassistant
-  template:
-    metadata:
-      labels:
-        app: musicassistant
-    spec:
-      containers:
-      - name: musicassistant
-        image: musicassistant
-        resources:
-          limits:
-            memory: "2Gi"
-            cpu: "2"
-          requests:
-            memory: "128Mi"
-            cpu: "250m"
-        ports:
-        # ports required for musicassistant
-        - containerPort: 80
-        - containerPort: 443
-        - containerPort: 8097
-        - containerPort: 8095
-          # name: musicassistant-web
-        - containerPort: 1704
-        - containerPort: 1705
-
-        env:
-        - name: TZ
-          value: Europe/Berlin
-        volumeMounts:
-        - name: data
-          mountPath: /data
-      volumes:
-      - name: data
-        persistentVolumeClaim:
-          claimName: data
--- a/apps/musicassistant/ingress.yaml
+++ b/apps/musicassistant/ingress.yaml
@@ -1,17 +0,0 @@
-apiVersion: traefik.io/v1alpha1
-kind: IngressRoute
-metadata:
-  name: musicassistant-ingressroute
-
-spec:
-  entryPoints:
-    - websecure
-  routes:
-  - match: Host(`musicassistant.kluster.moll.re`)
-    kind: Rule
-    services:
-    - name: musicassistant-web
-      port: musicassistant-web
-
-  tls:
-    certResolver: default-tls
--- a/apps/musicassistant/kustomization.yaml
+++ b/apps/musicassistant/kustomization.yaml
@@ -1,17 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-
-namespace: musicassistant
-
-resources:
-  - namespace.yaml
-  - pvc.yaml
-  - deployment.yaml
-  - service.yaml
-  # - ingress.yaml
-
-
-images:
-  - name: musicassistant
-    newName: ghcr.io/music-assistant/server
-    newTag: 2.6.0
--- a/apps/musicassistant/namespace.yaml
+++ b/apps/musicassistant/namespace.yaml
@@ -1,4 +0,0 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: placeholder
--- a/apps/musicassistant/pvc.yaml
+++ b/apps/musicassistant/pvc.yaml
@@ -1,11 +0,0 @@
-kind: PersistentVolumeClaim
-apiVersion: v1
-metadata:
-  name: data
-spec:
-  storageClassName: "nfs-client"
-  accessModes:
-    - ReadWriteOnce
-  resources:
-    requests:
-      storage: 1Gi
--- a/apps/musicassistant/service.yaml
+++ b/apps/musicassistant/service.yaml
@@ -1,41 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: musicassistant
-spec:
-  selector:
-    app: musicassistant
-  ports:
-  - port: 80
-    targetPort: 80
-    name: required-first
-  - port: 443
-    targetPort: 443
-    name: required-second
-  - port: 8097
-    targetPort: 8097
-    name: required-third
-  - port: 8095
-    targetPort: 8095
-    name: required-fourth
-  - port: 1704
-    targetPort: 1704
-    name: required-fifth
-  - port: 1705
-    targetPort: 1705
-    name: required-sixth
-  type: LoadBalancer
-  loadBalancerIP: 192.168.3.5
---
-apiVersion: v1
-kind: Service
-metadata:
-  name: musicassistant-web
-spec:
-  selector:
-    app: musicassistant
-  ports:
-  - port: 8095
-    targetPort: 8095
-    name: musicassistant-web
-  type: ClusterIP
--- a/apps/paperless/kustomization.yaml
+++ b/apps/paperless/kustomization.yaml
@@ -14,14 +14,14 @@ namespace: paperless
 images:
  - name: paperless
    newName: ghcr.io/paperless-ngx/paperless-ngx
-    newTag: "2.20.0"
+    newTag: "2.19.6"


 helmCharts:
  - name: redis
    releaseName: redis
    repo: https://charts.bitnami.com/bitnami
-    version: 24.0.0
+    version: 23.2.12
    valuesInline:
      auth:
        enabled: false
--- a/apps/snapcast/deployment.yaml
+++ b/apps/snapcast/deployment.yaml
@@ -1,101 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: snapcast
-spec:
-  selector:
-    matchLabels:
-      app: snapcast
-  template:
-    metadata:
-      labels:
-        app: snapcast
-    spec:
-      containers:
-      - name: snapcast
-        image: snapcast
-        resources:
-          limits:
-            memory: "2Gi"
-            cpu: "2"
-          requests:
-            memory: "128Mi"
-            cpu: "250m"
-        ports:
-        # snapcast ports
-        - containerPort: 1704
-        - containerPort: 1705
-        # web interface
-        - containerPort: 1780
-        - containerPort: 1788
-        # avahi
-        - containerPort: 5353
-        # airplay
-        - containerPort: 3689
-        - containerPort: 5000
-        - containerPort: 6000
-        - containerPort: 6001
-        - containerPort: 6002
-        - containerPort: 6003
-        - containerPort: 6004
-        - containerPort: 6005
-        - containerPort: 6006
-        - containerPort: 6007
-        - containerPort: 6008
-        - containerPort: 6009
-        - containerPort: 7000
-        - containerPort: 319
-        - containerPort: 320
-
-        env:
-        - name: TZ
-          value: Europe/Berlin
-        - name: AIRPLAY_CONFIG_ENABLED
-          value: "0"
-        - name: SPOTIFY_CONFIG_ENABLED
-          value: "0"
-        volumeMounts:
-        - name: pipe
-          mountPath: /mnt/pipe
-
-
-      - name: librespot
-        image: librespot
-        resources:
-          limits:
-            memory: "2Gi"
-            cpu: "2"
-          requests:
-            memory: "128Mi"
-            cpu: "250m"
-        # ports:
-        env:
-        - name: BACKEND
-          value: pipe
-        - name: DEVICE
-          value: /mnt/pipe/spotipipe
-        volumeMounts:
-        - name: pipe
-          mountPath: /mnt/pipe
-      volumes:
-      - name: pipe
-        emptyDir: {}
-
-
-        # - name: SPOTIFY_ACCESS_TOKEN
-        #   value: BQBxGPPPXZTXF7WTBzJItu3KNkeoZu2j2-Rlk1RmtnmXvzPh1fWFpOT2VeXwWxMJXlBYwxSOTo1ZKk3hAr08OhDhbQChi6KDl6qEmK-Y8Wq8g3EoP7M-oRnHt4WFMg1zC1C37t90nQUKZ-F9UdSuL9A6Ny6V6pYsai1bUspOU0q5UHn6-Dv9E8gwEKXOPMlBKEXNi1D0sT2m9rzwI7UK1g7ToRPn03eqGe41RRvlfrSCgf41tg
-
-
-        # - name: SPOTIFY_EXTRA_ARGS
-        #   value: " --disable-discovery --access-token BQBxGPPPXZTXF7WTBzJItu3KNkeoZu2j2-Rlk1RmtnmXvzPh1fWFpOT2VeXwWxMJXlBYwxSOTo1ZKk3hAr08OhDhbQChi6KDl6qEmK-Y8Wq8g3EoP7M-oRnHt4WFMg1zC1C37t90nQUKZ-F9UdSuL9A6Ny6V6pYsai1bUspOU0q5UHn6-Dv9E8gwEKXOPMlBKEXNi1D0sT2m9rzwI7UK1g7ToRPn03eqGe41RRvlfrSCgf41tg"
-      #   volumeMounts:
-      #   - name: config
-      #     mountPath: /config
-      #   - name: snapserver-config
-      #     mountPath: /root/.config/
-      # volumes:
-      # - name: config
-      #   secret:
-      #     secretName: snapcast-config
-      # - name: snapserver-config
-      #   emptyDir: {}
--- a/apps/snapcast/kustomization.yaml
+++ b/apps/snapcast/kustomization.yaml
@@ -1,18 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-
-namespace: snapcast
-
-resources:
-  - namespace.yaml
-  - deployment.yaml
-  - service.yaml
-  - snapcast-config.secret.yaml
-
-images:
-  - name: snapcast
-    newName: ghcr.io/firefrei/snapcast/server
-    newTag: latest
-  - name: librespot
-    newName: giof71/librespot
-    newTag: latest
--- a/apps/snapcast/namespace.yaml
+++ b/apps/snapcast/namespace.yaml
@@ -1,4 +0,0 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: placeholder
--- a/apps/snapcast/pvc.yaml
+++ b/apps/snapcast/pvc.yaml
@@ -1,11 +0,0 @@
-kind: PersistentVolumeClaim
-apiVersion: v1
-metadata:
-  name: data
-spec:
-  storageClassName: "nfs-client"
-  accessModes:
-    - ReadWriteOnce
-  resources:
-    requests:
-      storage: 1Gi
--- a/apps/snapcast/service.yaml
+++ b/apps/snapcast/service.yaml
@@ -1,86 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: snapcast
-spec:
-  selector:
-    app: snapcast
-  ports:
-  - name: snapcast
-    port: 1704
-    targetPort: 1704
-    protocol: TCP
-  - name: snapcast-ctl
-    port: 1705
-    targetPort: 1705
-    protocol: TCP
-  - name: web
-    port: 1780
-    targetPort: 1780
-    protocol: TCP
-  - name: web-alt
-    port: 1788
-    targetPort: 1788
-    protocol: TCP
-  # - name: airplay-3689
-  #   port: 3689
-  #   targetPort: 3689
-  #   protocol: TCP
-  # - name: airplay-5000
-  #   port: 5000
-  #   targetPort: 5000
-  #   protocol: TCP
-  # - name: airplay-6000
-  #   port: 6000
-  #   targetPort: 6000
-  #   protocol: TCP
-  # - name: airplay-6001
-  #   port: 6001
-  #   targetPort: 6001
-  #   protocol: TCP
-  # - name: airplay-6002
-  #   port: 6002
-  #   targetPort: 6002
-  #   protocol: TCP
-  # - name: airplay-6003
-  #   port: 6003
-  #   targetPort: 6003
-  #   protocol: TCP
-  # - name: airplay-6004
-  #   port: 6004
-  #   targetPort: 6004
-  #   protocol: TCP
-  # - name: airplay-6005
-  #   port: 6005
-  #   targetPort: 6005
-  #   protocol: TCP
-  # - name: airplay-6006
-  #   port: 6006
-  #   targetPort: 6006
-  #   protocol: TCP
-  # - name: airplay-6007
-  #   port: 6007
-  #   targetPort: 6007
-  #   protocol: TCP
-  # - name: airplay-6008
-  #   port: 6008
-  #   targetPort: 6008
-  #   protocol: TCP
-  # - name: airplay-6009
-  #   port: 6009
-  #   targetPort: 6009
-  #   protocol: TCP
-  # - name: airplay-7000
-  #   port: 7000
-  #   targetPort: 7000
-  #   protocol: TCP
-  # - name: airplay-319
-  #   port: 319
-  #   targetPort: 319
-  #   protocol: UDP
-  # - name: airplay-320
-  #   port: 320
-  #   targetPort: 320
-  #   protocol: UDP
-  type: LoadBalancer
-  loadBalancerIP: 192.168.3.5
--- a/infrastructure/external-dns/kustomization.yaml
+++ b/infrastructure/external-dns/kustomization.yaml
@@ -11,4 +11,4 @@ resources:
 images:
  - name: dns
    newName: git.kluster.moll.re/remoll/dns
-    newTag: 0.0.2-build.113
+    newTag: 0.0.2-build.109
--- a/infrastructure/monitoring/kustomization.yaml
+++ b/infrastructure/monitoring/kustomization.yaml
@@ -6,7 +6,7 @@ namespace: monitoring
 resources: 
  - namespace.yaml
  # prometheus-operator crds
-  - https://github.com/prometheus-operator/prometheus-operator?ref=v0.86.2
+  - https://github.com/prometheus-operator/prometheus-operator?ref=v0.87.0
  # single prometheus instance with a thanos sidecar
  - prometheus.yaml
  - thanos-store.statefulset.yaml
@@ -29,5 +29,5 @@ helmCharts:
  - name: prometheus-node-exporter
    releaseName: prometheus-node-exporter
    repo: https://prometheus-community.github.io/helm-charts
-    version: 4.49.2
+    version: 4.49.1
    valuesFile: prometheus-node-exporter.values.yaml
--- a/infrastructure/traefik-system/configmap.yaml
+++ b/infrastructure/traefik-system/configmap.yaml
@@ -66,11 +66,6 @@ data:
        [entryPoints.websecure.forwardedHeaders]
          insecure = true
          # forward ip headers no matter where they come from
-        [entryPoints.websecure.transport.respondingTimeouts]
-          readTimeout  = "0"
-          # writeTimeout = "300s"
-          # idleTimeout  = "180s"
-

      [entryPoints.metrics]
        address = ":9100"