Update registry.k8s.io/kube-state-metrics/kube-state-metrics Docker tag to v2.19.1

Reviewed-on: #726

manifests/auth-proxy/proxy.yaml

@@ -70,7 +70,7 @@ spec:
           mountPath: /config/
 
       - name: oauth-proxy
-        image: quay.io/oauth2-proxy/oauth2-proxy:v7.15.2
+        image: quay.io/oauth2-proxy/oauth2-proxy:v7.15.3
         args:
         - --cookie-secure=false
         - --provider=oidc

manifests/dashboard/dashboard.yaml

@@ -81,7 +81,7 @@ spec:
             secretKeyRef:
               key: password
               name: dashboard-auth
-        image: quay.io/oauth2-proxy/oauth2-proxy:v7.15.2
+        image: quay.io/oauth2-proxy/oauth2-proxy:v7.15.3
         name: oauth-proxy
         ports:
         - containerPort: 8000

manifests/gitea/gitea.yaml

@@ -77,7 +77,7 @@ spec:
           name: web
         resources:
           requests:
-            memory: 800Mi
+            memory: 700Mi
         volumeMounts:
         - mountPath: /data
           name: git-data

manifests/grist/grist.yaml

@@ -75,7 +75,7 @@ spec:
       priorityClassName: critical
       containers:
         - name: grist
-          image: gristlabs/grist-oss:1.7.14
+          image: gristlabs/grist-oss:1.7.15
           imagePullPolicy: IfNotPresent
           ports:
             - name: http

manifests/mealie/mealie.yaml

@@ -72,10 +72,10 @@ spec:
         resources:
           requests:
             cpu: 200m
-            memory: 550M
+            memory: 375Mi
           limits:
             cpu: 1000m
-            memory: 550M
+            memory: 550Mi
       volumes:
       - name: data
         persistentVolumeClaim:

manifests/monitoring/cadvisor.yaml

@@ -47,7 +47,7 @@ spec:
         resources:
           limits:
             cpu: 800m
-            memory: 2000Mi
+            memory: 800Mi
           requests:
             cpu: 400m
             memory: 400Mi

manifests/monitoring/kube-state-metrics.yaml

@@ -238,7 +238,7 @@ spec:
         - --resources=validatingwebhookconfigurations
         #- --resources=volumeattachments
         imagePullPolicy: IfNotPresent
-        image: "registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.19.0"
+        image: "registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.19.1"
         ports:
         - containerPort: 8080
         livenessProbe:

manifests/monitoring/vmagent.yaml

@@ -217,7 +217,7 @@ spec:
       serviceAccountName: prometheus-server
       containers:
         - name: vmagent
-          image: "victoriametrics/vmagent:v1.144.0"
+          image: "victoriametrics/vmagent:v1.145.0"
           imagePullPolicy: "IfNotPresent"
           args:
             - -remoteWrite.url=http://vmcluster.auth-proxy.svc/insert/0/prometheus/

manifests/nextcloud_chart/manifest.yaml

@@ -206,7 +206,7 @@ spec:
       priorityClassName: critical
       containers:
       - name: nextcloud
-        image: "nextcloud:33.0.5-apache"
+        image: "nextcloud:34.0.0-apache"
         imagePullPolicy: IfNotPresent
         env:
         - name: SQLITE_DATABASE
@@ -286,7 +286,7 @@ spec:
         resources:
           requests:
             cpu: 1038m
-            memory: 765M
+            memory: 500M
           limits:
             cpu: 1200m
             memory: 765M
@@ -340,7 +340,7 @@ spec:
           mountPath: /var/www/html/config/smtp.config.php
           subPath: smtp.config.php
       - name: cron
-        image: "nextcloud:33.0.5-apache"
+        image: "nextcloud:34.0.0-apache"
         imagePullPolicy: IfNotPresent
         command:
           - /cron.sh

manifests/nodered/nodered.yaml

@@ -57,7 +57,7 @@ spec:
           - name: data
             mountPath: /data
       - name: update-native-modules
-        image: nodered/node-red:4.1.10-18
+        image: nodered/node-red:4.1.11-18
         imagePullPolicy: IfNotPresent
         command:
           - bash
@@ -73,7 +73,7 @@ spec:
             mountPath: /data
       containers:
       - name: web
-        image: nodered/node-red:4.1.10-18
+        image: nodered/node-red:4.1.11-18
         imagePullPolicy: Always
         ports:
         - containerPort: 1880

manifests/outline/outline.yaml

@@ -46,7 +46,7 @@ spec:
       priorityClassName: critical
       containers:
       - name: outline
-        image: outlinewiki/outline:1.8.0
+        image: outlinewiki/outline:1.8.1
         imagePullPolicy: IfNotPresent
         env:
         - name: ALLOWED_DOMAINS
@@ -73,9 +73,9 @@ spec:
         resources:
           requests:
             cpu: 8m
-            memory: 1389M
+            memory: 900Mi
           limits:
-            memory: 1489M
+            memory: 1489Mi
         volumeMounts:
           - mountPath: /opt/outline/.env
             subPath: .env

manifests/social-to-rolodex/social-to-rolodex.yaml

@@ -92,7 +92,7 @@ spec:
             secretKeyRef:
               key: password
               name: social-to-rolodex-auth
-        image: quay.io/oauth2-proxy/oauth2-proxy:v7.15.2
+        image: quay.io/oauth2-proxy/oauth2-proxy:v7.15.3
         name: oauth-proxy
         ports:
         - containerPort: 8000

manifests/traefik/traefik.yaml

@@ -45,7 +45,7 @@ spec:
         - --entrypoints.websecure.http.tls=true
         - --entrypoints.web.http.redirections.entrypoint.to=websecure
         - --entrypoints.web.http.redirections.entrypoint.scheme=https
-        image: rancher/mirrored-library-traefik:3.7.1
+        image: rancher/mirrored-library-traefik:2.11.42
         imagePullPolicy: IfNotPresent
         livenessProbe:
           failureThreshold: 3