cluster

Infrastructure files for Nordgedanken and Midnightthoughts.
git clone git://archive.git.mtrnord.blog/MTRNord/cluster.git
Log | Files | Refs | README

commit 021e00891e83d274264cb81edef8da9e47522999
parent a378c24839087a76178f0d39eead5b4af77c68a7
Author: MTRNord <mtrnord1@gmail.com>
Date:   Tue, 17 Dec 2024 19:34:39 +0100

Update images

Diffstat:
Mapps/base/bugzilla/deployment.yaml | 2+-
Mapps/base/codeberg-runners/zertrixt.yaml | 6+++---
Mapps/base/loki-stack/release.yaml | 4++--
Mapps/base/mastodon/release.yaml | 4++--
Mapps/base/matrix/media-repo/release.yaml | 2+-
Mapps/base/openproject/release.yaml | 2+-
Mapps/base/twitch-vod/deployment.yaml | 82++++++++++++++++++++++++++++++++++++++++----------------------------------------
Minfrastructure/controllers/cert-manager.yaml | 10+++++-----
8 files changed, 56 insertions(+), 56 deletions(-)

diff --git a/apps/base/bugzilla/deployment.yaml b/apps/base/bugzilla/deployment.yaml @@ -22,7 +22,7 @@ spec: spec: initContainers: - name: init-bugzilla-vol - image: alpine:3.20 + image: alpine:3.21 command: - chown - -R diff --git a/apps/base/codeberg-runners/zertrixt.yaml b/apps/base/codeberg-runners/zertrixt.yaml @@ -27,7 +27,7 @@ spec: # https://forgejo.org/docs/v1.21/admin/actions/#offline-registration initContainers: - name: runner-register - image: code.forgejo.org/forgejo/runner:3.5.0 + image: code.forgejo.org/forgejo/runner:5.0.3 command: ["forgejo-runner", "register", "--no-interactive", "--token", $(RUNNER_SECRET), "--name", $(RUNNER_NAME), "--instance", $(FORGEJO_INSTANCE_URL)] env: @@ -51,7 +51,7 @@ spec: mountPath: /data containers: - name: runner - image: code.forgejo.org/forgejo/runner:3.5.0 + image: code.forgejo.org/forgejo/runner:5.0.3 command: ["sh", "-c", "while ! nc -z localhost 2376 </dev/null; do echo 'waiting for docker daemon...'; sleep 5; done; forgejo-runner daemon"] env: @@ -67,7 +67,7 @@ spec: - name: runner-data mountPath: /data - name: daemon - image: docker:27.1.1-dind + image: docker:27.4.0-dind env: - name: DOCKER_TLS_CERTDIR value: /certs diff --git a/apps/base/loki-stack/release.yaml b/apps/base/loki-stack/release.yaml @@ -79,7 +79,7 @@ spec: datasources: enabled: true image: - tag: 8.3.5 + tag: 11.4.0 prometheus: enabled: false isDefault: false @@ -103,7 +103,7 @@ spec: logstash: enabled: false image: grafana/logstash-output-loki - imageTag: 1.0.1 + imageTag: 3.2.2 filters: main: |- filter { diff --git a/apps/base/mastodon/release.yaml b/apps/base/mastodon/release.yaml @@ -15,7 +15,7 @@ spec: namespace: mastodon values: image: - tag: v4.3.0 + tag: v4.3.2 imagePullSecrets: - name: ghcr-pull externalAuth: @@ -130,7 +130,7 @@ spec: sslMode: no-verify image: repository: ghcr.io/mastodon/mastodon-streaming - tag: v4.3.0 + tag: v4.3.2 web_domain: mastodon.mtrnord.blog extraEnvVars: TRUSTED_PROXY_IP: 100.64.0.0/10 diff --git a/apps/base/matrix/media-repo/release.yaml b/apps/base/matrix/media-repo/release.yaml @@ -37,7 +37,7 @@ spec: replicaCount: 1 image: repository: ghcr.io/t2bot/matrix-media-repo - tag: v1.3.4 + tag: v1.3.7 # pullPolicy: Always podmonitor: enabled: true diff --git a/apps/base/openproject/release.yaml b/apps/base/openproject/release.yaml @@ -15,7 +15,7 @@ spec: values: image: repository: openproject/openproject - tag: 14-slim + tag: 15-slim affinity: podAffinity: requiredDuringSchedulingIgnoredDuringExecution: diff --git a/apps/base/twitch-vod/deployment.yaml b/apps/base/twitch-vod/deployment.yaml @@ -19,53 +19,53 @@ spec: spec: initContainers: - name: init-twitch-vod-vol - image: alpine:3.20 + image: alpine:3.21 command: - - chown - - -R - - 10001:10001 - - /usr/local/share/twitchautomator/data + - chown + - -R + - 10001:10001 + - /usr/local/share/twitchautomator/data volumeMounts: - - mountPath: /usr/local/share/twitchautomator/data - name: twitch-vod-data + - mountPath: /usr/local/share/twitchautomator/data + name: twitch-vod-data containers: - name: twitch-vod image: mrbrax/twitchautomator:master imagePullPolicy: Always securityContext: - runAsUser: 10001 - runAsGroup: 10001 - fsGroup: 10001 + runAsUser: 10001 + runAsGroup: 10001 + fsGroup: 10001 env: - - name: NODE_ENV - value: production - - name: TCD_ENABLE_FILES_API - value: "1" - - name: TCD_EXPOSE_LOGS_TO_PUBLIC - value: "0" - - name: TCD_MIGRATE_OLD_VOD_JSON - value: "0" + - name: NODE_ENV + value: production + - name: TCD_ENABLE_FILES_API + value: "1" + - name: TCD_EXPOSE_LOGS_TO_PUBLIC + value: "0" + - name: TCD_MIGRATE_OLD_VOD_JSON + value: "0" ports: - - name: http - containerPort: 8080 - protocol: TCP + - name: http + containerPort: 8080 + protocol: TCP livenessProbe: - httpGet: - path: / - port: http + httpGet: + path: / + port: http readinessProbe: - httpGet: - path: / - port: http + httpGet: + path: / + port: http volumeMounts: - - mountPath: /usr/local/share/twitchautomator/data - name: twitch-vod-data - - mountPath: /usr/local/share/twitchautomator/public - name: builddir + - mountPath: /usr/local/share/twitchautomator/data + name: twitch-vod-data + - mountPath: /usr/local/share/twitchautomator/public + name: builddir volumes: - name: twitch-vod-data persistentVolumeClaim: - claimName: twitch-vod-data + claimName: twitch-vod-data # Emptydir for build - name: builddir emptyDir: {} @@ -113,15 +113,15 @@ spec: rules: - host: twitch-vod.midnightthoughts.space http: - paths: - - path: / - pathType: Prefix - backend: - service: - name: twitch-vod - port: - number: 8080 + paths: + - path: / + pathType: Prefix + backend: + service: + name: twitch-vod + port: + number: 8080 tls: - hosts: - - twitch-vod.midnightthoughts.space + - twitch-vod.midnightthoughts.space secretName: twitch-vod-tls diff --git a/infrastructure/controllers/cert-manager.yaml b/infrastructure/controllers/cert-manager.yaml @@ -38,19 +38,19 @@ spec: podmonitor: enabled: false image: - tag: v1.15.3 + tag: v1.16.2 webhook: image: - tag: v1.15.3 + tag: v1.16.2 cainjector: image: - tag: v1.15.3 + tag: v1.16.2 acmesolver: image: - tag: v1.15.3 + tag: v1.16.2 startupapicheck: image: - tag: v1.15.3 + tag: v1.16.2 --- apiVersion: networking.k8s.io/v1 kind: NetworkPolicy