Merge pull request #786 from 3dwardch3ng/infra/renovate

update installation scripts

apps/adguard-home/base/deployment.yaml

@@ -16,7 +16,7 @@ spec:
     spec:
       containers:
         - name: adguard-home
-          image: adguard/adguardhome:v0.107.51
+          image: adguard/adguardhome:v0.107.52
           ports:
             - protocol: TCP
               containerPort: 53

apps/coder/env/k3s-cluster/kustomization.yaml

@@ -3,6 +3,6 @@ kind: Kustomization
 helmCharts:
   - name: coder
     repo: https://helm.coder.com/v2
-    version: 2.13.1
+    version: 2.14.1
     releaseName: coder
     valuesFile: values.yaml

apps/gitea/env/k3s-cluster/kustomization.yaml

@@ -3,6 +3,6 @@ kind: Kustomization
 helmCharts:
   - name: gitea
     repo: oci://registry-1.docker.io/bitnamicharts
-    version: 2.3.14
+    version: 2.3.18
     releaseName: gitea
     valuesFile: values.yaml

apps/kavita/base/deployment.yaml

@@ -20,7 +20,7 @@ spec:
         app.kubernetes.io/instance: kavita
     spec:
       containers:
-        - image: jvmilazz0/kavita:0.8.1
+        - image: jvmilazz0/kavita:0.8.2
           imagePullPolicy: IfNotPresent
           name: kavita
           ports:

apps/plane/base/stateful-set.yaml

@@ -15,7 +15,7 @@ spec:
         app.name: plane-redis
     spec:
       containers:
-        - image: valkey/valkey:7.2.5-alpine
+        - image: valkey/valkey:7.2.6-alpine
           imagePullPolicy: Always
           name: plane-redis
           stdin: true

apps/rlpa-server/base/deployment.yaml

@@ -19,7 +19,7 @@ spec:
         runAsGroup: 1000
       containers:
         - name: rlpa-server
-          image: damonto/estkme-cloud:1.0.11
+          image: damonto/estkme-cloud:v1.0.13
           securityContext:
             allowPrivilegeEscalation: false
           ports:

apps/sonarqube/env/k3s-cluster/kustomization.yaml

@@ -3,6 +3,6 @@ kind: Kustomization
 helmCharts:
   - name: sonarqube
     repo: oci://registry-1.docker.io/bitnamicharts
-    version: 5.2.10
+    version: 5.2.12
     releaseName: sonarqube
     valuesFile: values.yaml

apps/stirling-pdf/base/deployment.yaml

@@ -16,7 +16,7 @@ spec:
     spec:
       containers:
         - name: stirling-pdf
-          image: frooodle/s-pdf:0.26.1
+          image: frooodle/s-pdf:0.27.0
           securityContext:
             allowPrivilegeEscalation: false
           env:

apps/vaultwarden/base/deployment.yaml

@@ -23,7 +23,7 @@ spec:
             runAsNonRoot: true
             runAsGroup: 1000
           name: vaultwarden
-          image: vaultwarden/server:1.31.0
+          image: vaultwarden/server:1.32.0
           env:
             - name: DOMAIN
               value: https://vaultwarden.cluster.edward.sydney

infrastructures/cert-manager/base/kustomization.yaml

@@ -3,6 +3,6 @@ kind: Kustomization
 helmCharts:
   - name: cert-manager
     repo: https://charts.jetstack.io
-    version: v1.15.1
+    version: v1.15.2
     releaseName: cert-manager
     valuesFile: values.yaml

infrastructures/ingress-nginx/base/kustomization.yaml

@@ -3,6 +3,6 @@ kind: Kustomization
 helmCharts:
   - name: ingress-nginx
     repo: https://kubernetes.github.io/ingress-nginx
-    version: 4.10.1
+    version: 4.11.1
     releaseName: ingress-nginx
     valuesFile: values.yaml

infrastructures/ingress-nginx/env/k3s-cluster/kustomization.yaml

@@ -3,6 +3,6 @@ kind: Kustomization
 helmCharts:
   - name: ingress-nginx
     repo: https://kubernetes.github.io/ingress-nginx
-    version: 4.10.1
+    version: 4.11.1
     releaseName: ingress-nginx
     valuesFile: values.yaml

infrastructures/ingress-nginx/env/k3s-cluster/values.yaml

@@ -64,7 +64,7 @@ defaultBackend:
   enabled: true
   image:
     repository: ghcr.io/tarampampam/error-pages
-    tag: 2.27.0@sha256:40e2631173b1a407c18fe7d1ba8104d995cf9e4780d123eeadfa1d57c68eaf4f
+    tag: 3.3.0@sha256:43c9917e99ac1bb4df3c4e037327637e502e2ab4c3d84803b223d5b7db6d4cd7
     pullPolicy: IfNotPresent
   extraEnvs:
     - name: TEMPLATE_NAME

infrastructures/logstash/base/kustomization.yaml

@@ -3,6 +3,6 @@ kind: Kustomization
 helmCharts:
   - name: logstash
     repo: oci://registry-1.docker.io/bitnamicharts
-    version: 6.2.14
+    version: 6.3.2
     releaseName: logstash
     valuesFile: values.yaml

infrastructures/minio/env/k3s-cluster/kustomization.yaml

@@ -3,6 +3,6 @@ kind: Kustomization
 helmCharts:
   - name: minio
     repo: oci://registry-1.docker.io/bitnamicharts
-    version: 14.6.24
+    version: 14.6.33
     releaseName: minio
     valuesFile: values.yaml

infrastructures/mongodb/env/k3s-cluster/kustomization.yaml

@@ -3,6 +3,6 @@ kind: Kustomization
 helmCharts:
   - name: mongodb
     repo: oci://registry-1.docker.io/bitnamicharts
-    version: 15.6.14
+    version: 15.6.18
     releaseName: mongodb
     valuesFile: values.yaml

infrastructures/netdata/base/kustomization.yaml

@@ -3,6 +3,6 @@ kind: Kustomization
 helmCharts:
   - name: netdata
     repo: https://netdata.github.io/helmchart/
-    version: 3.7.96
+    version: 3.7.97
     releaseName: netdata
     valuesFile: values.yaml

infrastructures/postgresql/env/k3s-cluster/kustomization.yaml

@@ -3,6 +3,6 @@ kind: Kustomization
 helmCharts:
   - name: postgresql
     repo: oci://registry-1.docker.io/bitnamicharts
-    version: 15.5.17
+    version: 15.5.21
     releaseName: postgresql
     valuesFile: values.yaml

infrastructures/prometheus/env/k3s-cluster/deployment.yaml

@@ -22,7 +22,7 @@ spec:
         runAsGroup: 0
       containers:
         - name: prometheus
-          image: prom/prometheus:v2.53.0
+          image: prom/prometheus:v2.54.0
           args:
             - "--storage.tsdb.retention.time=14d"
             - "--config.file=/etc/prometheus/prometheus.yaml"
@@ -42,7 +42,7 @@ spec:
             - name: prometheus-storage-volume
               mountPath: /prometheus/
         - name: grafana
-          image: grafana/grafana:11.0.1
+          image: grafana/grafana:11.1.3
           ports:
             - containerPort: 3000
           volumeMounts:

infrastructures/redis-insight/base/deployment.yaml

@@ -19,7 +19,7 @@ spec:
         runAsGroup: 1000
       containers:
         - name: redis-insight
-          image: redis/redisinsight:2.52
+          image: redis/redisinsight:2.54
           securityContext:
             allowPrivilegeEscalation: false
           ports:

infrastructures/redis/env/k3s-cluster/kustomization.yaml

@@ -3,6 +3,6 @@ kind: Kustomization
 helmCharts:
   - name: redis
     repo: oci://registry-1.docker.io/bitnamicharts
-    version: 19.6.2
+    version: 20.0.1
     releaseName: redis
     valuesFile: values.yaml

infrastructures/renovate/base/kustomization.yaml

@@ -3,6 +3,6 @@ kind: Kustomization
 helmCharts:
   - name: mend-renovate-ce
     repo: https://mend.github.io/renovate-ce-ee
-    version: 7.6.0
+    version: 7.6.4
     releaseName: mend-renovate-ce
     valuesFile: values.yaml

renovate.json

@@ -0,0 +1,15 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": [
+    "local>3dwardch3ng/renovate-config"
+  ],
+  "kubernetes": {
+    "fileMatch": ["\\.yaml$"]
+  },
+  "helm-values": {
+    "fileMatch": ["\\.yaml$"]
+  },
+  "ignorePaths": [
+
+  ]
+}

scripts/101.upgrade-cilium.sh

@@ -0,0 +1,7 @@
+#!/bin/bash
+set -e
+
+helm upgrade --install cilium cilium/cilium --version 1.15.6 \
+  --namespace kube-system \
+  --set operator.replicas=1
+

scripts/102.upgrade-argocd.sh

@@ -0,0 +1,4 @@
+#!/bin/bash
+set -e
+
+helm upgrade --install argocd -n argocd -f argocd-values.yaml argo/argo-cd --version 7.3.6

scripts/103.upgrade-sealed-secrets.sh

@@ -0,0 +1,4 @@
+#!/bin/bash
+set -e
+
+helm upgrade --install sealed-secrets -n kube-system --set-string fullnameOverride=sealed-secrets-controller sealed-secrets/sealed-secrets -f sealed-secrets-values.yaml

scripts/2.install-argocd.sh

@@ -5,10 +5,4 @@ kubectl apply -k "https://github.com/argoproj/argo-cd/manifests/crds?ref=v2.11.4
 kubectl create namespace argocd || echo "Namespace argocd already exists"
 helm repo add argo https://argoproj.github.io/argo-helm || echo "Argo repo already exists"
 helm repo update || echo "Failed to update helm repos"
-helm upgrade --install argocd -n argocd -f argocd-values.yaml argo/argo-cd --version 7.3.6
+helm upgrade --install argocd -n argocd -f argocd-values.yaml argo/argo-cd --version 7.3.6
-#kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.9.18/manifests/ha/install.yaml
-helm plugin install https://github.com/jkroepke/helm-secrets
-
-#Check repo server secret accessibility
-echo "Checking repo server secret accessibility:"
-kubectl auth can-i get secrets --namespace "argocd" --as "system:serviceaccount:argocd:argocd-repo-server"

scripts/3.install-sealed-secrets.sh

@@ -3,4 +3,4 @@ set -e
 
 helm repo add sealed-secrets https://bitnami-labs.github.io/sealed-secrets
 helm repo update
-helm install sealed-secrets -n kube-system --set-string fullnameOverride=sealed-secrets-controller sealed-secrets/sealed-secrets -f sealed-secrets-values.yaml
+helm upgrade --install sealed-secrets -n kube-system --set-string fullnameOverride=sealed-secrets-controller sealed-secrets/sealed-secrets -f sealed-secrets-values.yaml