Update Helm release reloader to v2

Reviewed-on: #712

manifests/_apps/pairdrop.yaml

@@ -0,0 +1,25 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: pairdrop
+  namespace: argocd
+  finalizers:
+  - resources-finalizer.argocd.argoproj.io
+spec:
+  project: cluster.fun
+  destination:
+    namespace: pairdrop
+    name: cluster-fun (v2)
+  source:
+    path: manifests/pairdrop
+    repoURL: "https://git.cluster.fun/AverageMarcus/cluster.fun.git"
+    targetRevision: HEAD
+  syncPolicy:
+    automated: {}
+    syncOptions:
+      - CreateNamespace=true
+  ignoreDifferences:
+  - kind: Secret
+    jsonPointers:
+    - /data
+

manifests/_apps/reloader.yaml

@@ -12,7 +12,7 @@ spec:
     name: cluster-fun (v2)
   source:
     repoURL: 'https://stakater.github.io/stakater-charts'
-    targetRevision: v0.0.129
+    targetRevision: 2.2.11
     chart: reloader
   syncPolicy:
     automated: {}

manifests/_apps/vert.yaml

@@ -0,0 +1,25 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: vert
+  namespace: argocd
+  finalizers:
+  - resources-finalizer.argocd.argoproj.io
+spec:
+  project: cluster.fun
+  destination:
+    namespace: vert
+    name: cluster-fun (v2)
+  source:
+    path: manifests/vert
+    repoURL: "https://git.cluster.fun/AverageMarcus/cluster.fun.git"
+    targetRevision: HEAD
+  syncPolicy:
+    automated: {}
+    syncOptions:
+      - CreateNamespace=true
+  ignoreDifferences:
+  - kind: Secret
+    jsonPointers:
+    - /data
+

manifests/auth-proxy/non-auth-ingress.yaml

@@ -19,6 +19,7 @@ spec:
     - bsky-feeds.cluster.fun
     - ai.cluster.fun
     - penpot.cluster.fun
+    - trek.cluster.fun
     secretName: non-auth-proxy-ingress
   rules:
   - host: hello-world.cluster.fun
@@ -71,3 +72,13 @@ spec:
             name: tailscale-proxy
             port:
               name: non-auth
+  - host: trek.cluster.fun
+    http:
+      paths:
+      - path: /
+        pathType: ImplementationSpecific
+        backend:
+          service:
+            name: tailscale-proxy
+            port:
+              name: non-auth

manifests/gitea/gitea.yaml

@@ -43,7 +43,7 @@ spec:
       priorityClassName: critical
       containers:
       - name: git
-        image: gitea/gitea:1.26.1
+        image: gitea/gitea:1.26.2
         env:
         - name: APP_NAME
           value: "Git"

manifests/mealie/mealie.yaml

@@ -31,7 +31,7 @@ spec:
       priorityClassName: critical
       containers:
       - name: frontend
-        image: ghcr.io/mealie-recipes/mealie:v3.17.0
+        image: ghcr.io/mealie-recipes/mealie:v3.19.0
         imagePullPolicy: Always
         envFrom:
         - secretRef:

manifests/monitoring/cadvisor.yaml

@@ -38,7 +38,7 @@ spec:
           operator: "Exists"
       automountServiceAccountToken: false
       containers:
-      - image: ghcr.io/google/cadvisor:0.56.2
+      - image: ghcr.io/google/cadvisor:v0.57.0
         name: cadvisor
         ports:
         - containerPort: 8080

manifests/monitoring/kube-state-metrics.yaml

@@ -238,7 +238,7 @@ spec:
         - --resources=validatingwebhookconfigurations
         #- --resources=volumeattachments
         imagePullPolicy: IfNotPresent
-        image: "registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.0"
+        image: "registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.19.0"
         ports:
         - containerPort: 8080
         livenessProbe:

manifests/monitoring/vmagent.yaml

@@ -217,7 +217,7 @@ spec:
       serviceAccountName: prometheus-server
       containers:
         - name: vmagent
-          image: "victoriametrics/vmagent:v1.142.0"
+          image: "victoriametrics/vmagent:v1.143.0"
           imagePullPolicy: "IfNotPresent"
           args:
             - -remoteWrite.url=http://vmcluster.auth-proxy.svc/insert/0/prometheus/

manifests/pairdrop/pairdrop.yaml

@@ -0,0 +1,88 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: pairdrop
+  namespace: pairdrop
+spec:
+  type: ClusterIP
+  ports:
+  - port: 80
+    targetPort: web
+    name: web
+  selector:
+    app: pairdrop
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: pairdrop
+  namespace: pairdrop
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: pairdrop
+  template:
+    metadata:
+      labels:
+        app: pairdrop
+    spec:
+      imagePullSecrets:
+        - name: docker-config
+      priorityClassName: low
+      containers:
+      - name: web
+        image: ghcr.io/schlagmichdoch/pairdrop:v1.11.2
+        imagePullPolicy: IfNotPresent
+        ports:
+        - containerPort: 3000
+          name: web
+        env:
+        - name: RATE_LIMIT
+          value: "1"
+        - name: DONATION_BUTTON_ACTIVE
+          value: "false"
+        - name: TWITTER_BUTTON_ACTIVE
+          value: "false"
+        - name: MASTODON_BUTTON_ACTIVE
+          value: "false"
+        - name: BLUESKY_BUTTON_ACTIVE
+          value: "false"
+        - name: PRIVACYPOLICY_BUTTON_ACTIVE
+          value: "false"
+        resources:
+          limits:
+            memory: 100Mi
+          requests:
+            memory: 100Mi
+        livenessProbe:
+          httpGet:
+            path: /
+            port: web
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: pairdrop
+  namespace: pairdrop
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt
+    ingress.kubernetes.io/ssl-redirect: "true"
+    nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
+spec:
+  ingressClassName: nginx
+  tls:
+  - hosts:
+    - drop.cluster.fun
+    secretName: pairdrop-ingress
+  rules:
+  - host: drop.cluster.fun
+    http:
+      paths:
+      - path: /
+        pathType: ImplementationSpecific
+        backend:
+          service:
+            name: pairdrop
+            port:
+              number: 80

manifests/rss/miniflux.yaml

@@ -68,7 +68,7 @@ spec:
     spec:
       containers:
       - name: web
-        image: ghcr.io/miniflux/miniflux:2.2.19
+        image: ghcr.io/miniflux/miniflux:2.3.0
         imagePullPolicy: IfNotPresent
         envFrom:
         - configMapRef:

manifests/vert/manifest.yaml

@@ -0,0 +1,69 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: vert
+  namespace: vert
+spec:
+  type: ClusterIP
+  ports:
+  - port: 80
+    targetPort: web
+    name: web
+  selector:
+    app: vert
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: vert
+  namespace: vert
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: vert
+  template:
+    metadata:
+      labels:
+        app: vert
+    spec:
+      containers:
+      - name: web
+        image: ghcr.io/vert-sh/vert:sha-438f91a
+        imagePullPolicy: IfNotPresent
+        ports:
+        - containerPort: 80
+          name: web
+        resources:
+          limits:
+            memory: 200Mi
+          requests:
+            memory: 200Mi
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: vert
+  namespace: vert
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt
+    ingress.kubernetes.io/ssl-redirect: "true"
+    nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
+spec:
+  ingressClassName: nginx
+  tls:
+  - hosts:
+    - vert.cluster.fun
+    secretName: vert-ingress
+  rules:
+  - host: vert.cluster.fun
+    http:
+      paths:
+      - path: /
+        pathType: ImplementationSpecific
+        backend:
+          service:
+            name: vert
+            port:
+              number: 80
+