Update Helm release reloader to v2

2026-05-08 03:08:45 +00:00
53 changed files with 56 additions and 672 deletions
@@ -1,25 +0,0 @@
-apiVersion: argoproj.io/v1alpha1
-kind: Application
-metadata:
-  name: airtrail
-  namespace: argocd
-  finalizers:
-  - resources-finalizer.argocd.argoproj.io
-spec:
-  project: cluster.fun
-  destination:
-    namespace: airtrail
-    name: cluster-fun (v2)
-  source:
-    path: manifests/airtrail
-    repoURL: "https://git.cluster.fun/AverageMarcus/cluster.fun.git"
-    targetRevision: HEAD
-  syncPolicy:
-    automated: {}
-    syncOptions:
-      - CreateNamespace=true
-  ignoreDifferences:
-  - kind: Secret
-    jsonPointers:
-    - /data
-
@@ -35,7 +35,7 @@ spec:
    name: cluster-fun (v2)
  source:
    repoURL: 'https://charts.jetstack.io'
-    targetRevision: v1.21.3
+    targetRevision: v1.20.2
    chart: cert-manager
    helm:
      version: v3
@@ -1,25 +0,0 @@
-apiVersion: argoproj.io/v1alpha1
-kind: Application
-metadata:
-  name: pairdrop
-  namespace: argocd
-  finalizers:
-  - resources-finalizer.argocd.argoproj.io
-spec:
-  project: cluster.fun
-  destination:
-    namespace: pairdrop
-    name: cluster-fun (v2)
-  source:
-    path: manifests/pairdrop
-    repoURL: "https://git.cluster.fun/AverageMarcus/cluster.fun.git"
-    targetRevision: HEAD
-  syncPolicy:
-    automated: {}
-    syncOptions:
-      - CreateNamespace=true
-  ignoreDifferences:
-  - kind: Secret
-    jsonPointers:
-    - /data
-
@@ -12,7 +12,7 @@ spec:
    name: cluster-fun (v2)
  source:
    repoURL: 'https://stakater.github.io/stakater-charts'
-    targetRevision: v0.0.129
+    targetRevision: 2.2.11
    chart: reloader
  syncPolicy:
    automated: {}
@@ -1,25 +0,0 @@
-apiVersion: argoproj.io/v1alpha1
-kind: Application
-metadata:
-  name: trek
-  namespace: argocd
-  finalizers:
-  - resources-finalizer.argocd.argoproj.io
-spec:
-  project: cluster.fun
-  destination:
-    namespace: trek
-    name: cluster-fun (v2)
-  source:
-    path: manifests/trek
-    repoURL: "https://git.cluster.fun/AverageMarcus/cluster.fun.git"
-    targetRevision: HEAD
-  syncPolicy:
-    automated: {}
-    syncOptions:
-      - CreateNamespace=true
-  ignoreDifferences:
-  - kind: Secret
-    jsonPointers:
-    - /data
-
@@ -1,25 +0,0 @@
-apiVersion: argoproj.io/v1alpha1
-kind: Application
-metadata:
-  name: vert
-  namespace: argocd
-  finalizers:
-  - resources-finalizer.argocd.argoproj.io
-spec:
-  project: cluster.fun
-  destination:
-    namespace: vert
-    name: cluster-fun (v2)
-  source:
-    path: manifests/vert
-    repoURL: "https://git.cluster.fun/AverageMarcus/cluster.fun.git"
-    targetRevision: HEAD
-  syncPolicy:
-    automated: {}
-    syncOptions:
-      - CreateNamespace=true
-  ignoreDifferences:
-  - kind: Secret
-    jsonPointers:
-    - /data
-
@@ -1,145 +0,0 @@
-apiVersion: v1
-kind: Secret
-metadata:
-  name: airtrail
-  namespace: airtrail
-  labels:
-    app: airtrail
-    app.kubernetes.io/name: airtrail
-  annotations:
-    kube-1password: 2322tcm3p5v6ql7oy2efrn4jse
-    kube-1password/vault: Kubernetes
-    kube-1password/secret-text-parse: "true"
-type: Opaque
---
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: airtrail
-  namespace: airtrail
-  labels:
-    app: airtrail
-    app.kubernetes.io/name: airtrail
-  annotations:
-    reloader.stakater.com/match: "true"
-data:
-  ORIGIN: https://airtrail.cluster.fun
-  UPLOAD_LOCATION: /app/uploads
---
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: airtrail
-  namespace: airtrail
-  labels:
-    app: airtrail
-    app.kubernetes.io/name: airtrail
-spec:
-  replicas: 1
-  strategy:
-    type: Recreate
-  selector:
-    matchLabels:
-      app: airtrail
-  template:
-    metadata:
-      labels:
-        app: airtrail
-        app.kubernetes.io/name: airtrail
-    spec:
-      securityContext:
-        runAsUser: 1000
-        runAsGroup: 1000
-        fsGroup: 1000
-      containers:
-      - name: airtrail
-        image: johly/airtrail:v3.13.1@sha256:800466d42393a0a9f360a93d98ab8da524381b19f3c06cd4552c27106d982e3d
-        imagePullPolicy: IfNotPresent
-        envFrom:
-        - configMapRef:
-            name: airtrail
-        - secretRef:
-            name: airtrail
-        ports:
-        - containerPort: 3000
-          name: web
-        volumeMounts:
-          - mountPath: /app/uploads
-            name: uploads
-        livenessProbe:
-          httpGet:
-            path: /api/ping
-            port: 3000
-          initialDelaySeconds: 5
-          periodSeconds: 30
-        readinessProbe:
-          httpGet:
-            path: /api/ping
-            port: 3000
-          initialDelaySeconds: 5
-          periodSeconds: 10
-        resources:
-          requests:
-            cpu: 100m
-            memory: 150Mi
-          limits:
-            cpu: 200m
-            memory: 300Mi
-      volumes:
-      - name: uploads
-        persistentVolumeClaim:
-          claimName: airtrail-uploads
---
-apiVersion: v1
-kind: Service
-metadata:
-  name: airtrail
-  namespace: airtrail
-  labels:
-    app: airtrail
-    app.kubernetes.io/name: airtrail
-spec:
-  type: ClusterIP
-  ports:
-  - port: 80
-    targetPort: web
-    name: web
-  selector:
-    app: airtrail
---
-
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: airtrail
-  namespace: airtrail
-  labels:
-    app: airtrail
-    app.kubernetes.io/name: airtrail
-  annotations:
-    cert-manager.io/cluster-issuer: letsencrypt
-    nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
-    nginx.ingress.kubernetes.io/proxy-body-size: "0"
-    nginx.ingress.kubernetes.io/client-body-buffer-size: 25m
-    nginx.ingress.kubernetes.io/proxy-connect-timeout: "300"
-    nginx.ingress.kubernetes.io/proxy-send-timeout: "300"
-    nginx.ingress.kubernetes.io/proxy-read-timeout: "300"
-    nginx.ingress.kubernetes.io/proxy-next-upstream: "300"
-    nginx.ingress.kubernetes.io/proxy-next-upstream-timeout: "300"
-spec:
-  ingressClassName: nginx
-  tls:
-  - hosts:
-    - airtrail.cluster.fun
-    secretName: airtrail-ingress
-  rules:
-  - host: airtrail.cluster.fun
-    http:
-      paths:
-      - path: /
-        pathType: ImplementationSpecific
-        backend:
-          service:
-            name: airtrail
-            port:
-              name: web
@@ -1,13 +0,0 @@
-kind: PersistentVolumeClaim
-apiVersion: v1
-metadata:
-  name: airtrail-uploads
-  namespace: airtrail
-spec:
-  accessModes:
-    - ReadWriteOnce
-  resources:
-    requests:
-      storage: 1Gi
-  storageClassName: sbs-default-retain
---
@@ -18,7 +18,7 @@ spec:
    - ombi.cluster.fun
    - bsky-feeds.cluster.fun
    - ai.cluster.fun
-    - hermes-hooks.cluster.fun
+    - penpot.cluster.fun
    secretName: non-auth-proxy-ingress
  rules:
  - host: hello-world.cluster.fun
@@ -61,7 +61,7 @@ spec:
            name: tailscale-proxy
            port:
              name: non-auth
-  - host: hermes-hooks.cluster.fun
+  - host: penpot.cluster.fun
    http:
      paths:
      - path: /
@@ -46,7 +46,7 @@ spec:
          - 100.100.100.100
      containers:
      - name: proxy
-        image: rg.fr-par.scw.cloud/averagemarcus/proxy:latest@sha256:2a401eec859bf665e75bbb737b3b1709cd1fa74576e4ba8c7daeb63d8b3e8d51
+        image: rg.fr-par.scw.cloud/averagemarcus/proxy:latest
        imagePullPolicy: Always
        env:
        - name: PROXY_DESTINATION
@@ -68,7 +68,7 @@ spec:
          mountPath: /config/

      - name: oauth-proxy
-        image: quay.io/oauth2-proxy/oauth2-proxy:v7.15.5@sha256:8498b0d0ef0a7b29686414000a08aee467f02d0299c9ed1e006a8f33fc017916
+        image: quay.io/oauth2-proxy/oauth2-proxy:v7.15.2
        args:
        - --cookie-secure=false
        - --provider=oidc
@@ -32,7 +32,7 @@ spec:
      priorityClassName: low
      containers:
      - name: web
-        image: rg.fr-par.scw.cloud/averagemarcus/base64:latest@sha256:1ec2b770a5ffe986bdfbf24094ed945191bd7b9dd27a7b3212af92a3dfcea032
+        image: rg.fr-par.scw.cloud/averagemarcus/base64:latest
        imagePullPolicy: Always
        ports:
        - containerPort: 80
@@ -29,7 +29,7 @@ spec:
    spec:
      containers:
      - name: black-hole
-        image: averagemarcus/black-hole:latest@sha256:1e9cb8396f67aeb25a9eaaf14b369a53a7b300ae465859f10d9f0f88ef3023e1
+        image: averagemarcus/black-hole:latest
        imagePullPolicy: Always
        ports:
        - containerPort: 9090
@@ -27,18 +27,9 @@ spec:
      labels:
        app: blog
    spec:
-      affinity:
-        podAntiAffinity:
-          preferredDuringSchedulingIgnoredDuringExecution:
-            - weight: 100
-              podAffinityTerm:
-                labelSelector:
-                  matchLabels:
-                    app: blog
-                topologyKey: kubernetes.io/hostname
      containers:
      - name: web
-        image: rg.fr-par.scw.cloud/averagemarcus/blog:latest@sha256:d40aa67a51924a89ad0ac6f7387a63f2f41e9bff7b5e4c6f7675cd43354b0c28
+        image: rg.fr-par.scw.cloud/averagemarcus/blog:latest
        imagePullPolicy: Always
        ports:
        - containerPort: 8000
@@ -29,7 +29,7 @@ spec:
    spec:
      containers:
      - name: web
-        image: rg.fr-par.scw.cloud/averagemarcus/bsky-screenshot:latest@sha256:0fae863fc3123f73aa6268a125d5bf2c2122c8a3f2aedaf129462e668e56ab23
+        image: rg.fr-par.scw.cloud/averagemarcus/bsky-screenshot:latest
        imagePullPolicy: Always
        ports:
        - containerPort: 80
@@ -29,7 +29,7 @@ spec:
    spec:
      containers:
      - name: web
-        image: rg.fr-par.scw.cloud/averagemarcus/cel-tester:latest@sha256:caf9044a19fa0e14f92232f68c1fe808249580d33619ea3706ff935bd2853559
+        image: rg.fr-par.scw.cloud/averagemarcus/cel-tester:latest
        imagePullPolicy: Always
        ports:
        - containerPort: 80
@@ -41,7 +41,7 @@ spec:
      priorityClassName: low
      containers:
      - name: web
-        image: rg.fr-par.scw.cloud/averagemarcus/civo-versions:latest@sha256:90585c61b82e124f9179b60fc8231247e3b37cab76fd7c0185aeb4a4276a0ab4
+        image: rg.fr-par.scw.cloud/averagemarcus/civo-versions:latest
        imagePullPolicy: Always
        ports:
        - containerPort: 8000
@@ -29,7 +29,7 @@ spec:
    spec:
      containers:
      - name: web
-        image: rg.fr-par.scw.cloud/averagemarcus/cors-proxy:latest@sha256:306783c26392f92af7e34d173493b0f8d6fd7623421d16a02fad26857317aeec
+        image: rg.fr-par.scw.cloud/averagemarcus/cors-proxy:latest
        imagePullPolicy: Always
        ports:
        - containerPort: 8000
@@ -81,7 +81,7 @@ spec:
            secretKeyRef:
              key: password
              name: dashboard-auth
-        image: quay.io/oauth2-proxy/oauth2-proxy:v7.15.5@sha256:8498b0d0ef0a7b29686414000a08aee467f02d0299c9ed1e006a8f33fc017916
+        image: quay.io/oauth2-proxy/oauth2-proxy:v7.15.2
        name: oauth-proxy
        ports:
        - containerPort: 8000
@@ -31,7 +31,7 @@ spec:
        - name: docker-config
      containers:
      - name: web
-        image: rg.fr-par.scw.cloud/averagemarcus/devstats-viewer:latest@sha256:ecf19a3dd9ecc16f78d0a276aa977a7a8ee17635d5ee68ea86e5ee0a2e1ebe48
+        image: rg.fr-par.scw.cloud/averagemarcus/devstats-viewer:latest
        imagePullPolicy: Always
        ports:
        - containerPort: 80
@@ -29,7 +29,7 @@ spec:
    spec:
      containers:
      - name: web
-        image: rg.fr-par.scw.cloud/averagemarcus/feed-fetcher:latest@sha256:fe79408673dda5c73ed05e38cac441cbbbebd264548318f1e4701751c6a32b35
+        image: rg.fr-par.scw.cloud/averagemarcus/feed-fetcher:latest
        imagePullPolicy: Always
        ports:
        - containerPort: 8080
@@ -78,7 +78,7 @@ spec:
        spec:
          containers:
          - name: sync
-            image: rg.fr-par.scw.cloud/averagemarcus/git-sync:latest@sha256:6060f0e77e324179cf6b2136a180ceecbcc64344682154b8848434fd105323e7
+            image: rg.fr-par.scw.cloud/averagemarcus/git-sync:latest
            imagePullPolicy: Always
            env:
            - name: GITHUB_TOKEN
@@ -43,7 +43,7 @@ spec:
      priorityClassName: critical
      containers:
      - name: git
-        image: gitea/gitea:28.2.0@sha256:30777c91280d973fa02be48b1ade735bd6859e8f6f7af3b4444d519437852504
+        image: gitea/gitea:1.26.1
        env:
        - name: APP_NAME
          value: "Git"
@@ -67,8 +67,6 @@ spec:
          value: arc-green
        - name: ALLOWED_HOST_LIST
          value: "*"
-        - name: EGRESS_MODE
-          value: "lax"
        - name: SECRET_KEY
          valueFrom:
            secretKeyRef:
@@ -79,7 +77,7 @@ spec:
          name: web
        resources:
          requests:
-            memory: 700Mi
+            memory: 800Mi
        volumeMounts:
        - mountPath: /data
          name: git-data
@@ -29,7 +29,7 @@ spec:
    spec:
      containers:
      - name: web
-        image: x1unix/go-playground:3.0.0@sha256:4c4a9bcbc0413faaacc8eb0a425922858a55b73ab03f5359082217d5b93cc000
+        image: x1unix/go-playground:3.0.0
        imagePullPolicy: IfNotPresent
        ports:
        - containerPort: 8000
@@ -75,7 +75,7 @@ spec:
      priorityClassName: critical
      containers:
        - name: grist
-          image: gristlabs/grist-oss:1.7.21@sha256:5657dc14b1745ef759bf789e5206ff4591e9b7d61d53777cc2fc710bfc9fbe36
+          image: gristlabs/grist-oss:1.7.13
          imagePullPolicy: IfNotPresent
          ports:
            - name: http
@@ -41,12 +41,6 @@ data:
    cdl-talk-2026-feedback: https://yay-or-nay.cluster.fun/feedback/22TO05MQ
    technical-talking-blog-post: https://marcusnoble.co.uk/2025-04-30-my-tips-on-giving-technical-talks/
    kubecon-eu-26: https://speaking.marcusnoble.co.uk/zT471P/kube-oddities-the-quirks-that-keep-kubernetes-interesting
-    cndro26: https://speaking.marcusnoble.co.uk/1OrBAe/kube-oddities-the-quirks-that-keep-kubernetes-interesting-marcus-noble-mark-sagi-kazar
-    cdh26: https://speaking.marcusnoble.co.uk/dvat0w/kube-oddities-the-quirks-that-keep-kubernetes-interesting-marcus-noble-mark-sagi-kazar
-    kcdsofia26: https://speaking.marcusnoble.co.uk/GFJgtL/kube-oddities-the-quirks-that-keep-kubernetes-interesting-marcus-noble-mark-sagi-kazar
-    cndpoland26: https://speaking.marcusnoble.co.uk/sZ2Ulk/kube-oddities-the-quirks-that-keep-kubernetes-interesting-marcus-noble-mark-sagi-kazar
-    kcduk2026: https://speaking.marcusnoble.co.uk/Xpj6t6/pod-deep-dive-the-interesting-bits
-    kcduk2026-feedback: https://yay-or-nay.cluster.fun/feedback/BS01AM1M
 ---
 apiVersion: v1
 kind: Service
@@ -86,7 +80,7 @@ spec:
      priorityClassName: critical
      containers:
      - name: web
-        image: rg.fr-par.scw.cloud/averagemarcus/link:latest@sha256:11d3908c87c91c3e9b0ac64377a016f967eb96d92c5a478f61ac4d6e4b7128f9
+        image: rg.fr-par.scw.cloud/averagemarcus/link:latest
        imagePullPolicy: Always
        ports:
        - containerPort: 5050
@@ -29,7 +29,7 @@ spec:
    spec:
      containers:
      - name: web
-        image: rg.fr-par.scw.cloud/averagemarcus/marcusnoble:latest@sha256:258e639003301f9a41a796c74a963b624454de6dad2dd90f0a1eb745027cfc88
+        image: rg.fr-par.scw.cloud/averagemarcus/marcusnoble:latest
        imagePullPolicy: Always
        ports:
        - containerPort: 8080
@@ -29,7 +29,7 @@ spec:
    spec:
      containers:
      - name: web
-        image: ghcr.io/civilblur/mazanoke:v1.1.7@sha256:ca83cddd90cd1e4b43102884bf39025731a1c7569f3bbda9d6530de72528cbab
+        image: ghcr.io/civilblur/mazanoke:v1.1.5
        imagePullPolicy: Always
        ports:
        - containerPort: 80
@@ -31,7 +31,7 @@ spec:
      priorityClassName: critical
      containers:
      - name: frontend
-        image: ghcr.io/mealie-recipes/mealie:v3.29.0@sha256:78eb28b8776d0bad40c5e605c72b3f4f5976793e491558c7dcbdfc04c835d4bc
+        image: ghcr.io/mealie-recipes/mealie:v3.17.0
        imagePullPolicy: Always
        envFrom:
        - secretRef:
@@ -72,10 +72,10 @@ spec:
        resources:
          requests:
            cpu: 200m
-            memory: 375Mi
+            memory: 550M
          limits:
            cpu: 1000m
-            memory: 550Mi
+            memory: 550M
      volumes:
      - name: data
        persistentVolumeClaim:
@@ -38,7 +38,7 @@ spec:
          operator: "Exists"
      automountServiceAccountToken: false
      containers:
-      - image: ghcr.io/google/cadvisor:v0.60.6@sha256:b8e7d1093144fd088f425ff003d75a4aa405de075db78dae3bc563730b1bd07a
+      - image: ghcr.io/google/cadvisor:0.56.2
        name: cadvisor
        ports:
        - containerPort: 8080
@@ -47,7 +47,7 @@ spec:
        resources:
          limits:
            cpu: 800m
-            memory: 800Mi
+            memory: 2000Mi
          requests:
            cpu: 400m
            memory: 400Mi
@@ -78,7 +78,7 @@ spec:
          type: RuntimeDefault
      containers:
        - name: metrics
-          image: ghcr.io/jmcgrath207/k8s-ephemeral-storage-metrics:1.21.3@sha256:8297aa4a92787ebda42827be98da6f7a77206f4c8d140858626c97c469997b67
+          image: ghcr.io/jmcgrath207/k8s-ephemeral-storage-metrics:1.19.2
          imagePullPolicy: IfNotPresent
          ports:
            - name: metrics
@@ -238,7 +238,7 @@ spec:
        - --resources=validatingwebhookconfigurations
        #- --resources=volumeattachments
        imagePullPolicy: IfNotPresent
-        image: "registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.20.0@sha256:42cfe3723a5f058171c627537fb57a3ea0f26e4380fa18555a95cb1a1b4cfc5b"
+        image: "registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.0"
        ports:
        - containerPort: 8080
        livenessProbe:
@@ -55,7 +55,7 @@ spec:
      serviceAccountName: prometheus-node-exporter
      containers:
        - name: prometheus-node-exporter
-          image: "prom/node-exporter:v1.12.1@sha256:1b4e4438faca4dd7e001dd445d161a4a2091b0fededa84093b3a8dfeae1f1be0"
+          image: "prom/node-exporter:v1.11.1"
          imagePullPolicy: "IfNotPresent"
          args:
            - --path.procfs=/host/proc
@@ -216,7 +216,7 @@ spec:
      serviceAccountName: promtail
      containers:
        - name: promtail
-          image: "grafana/promtail:3.6.11@sha256:a761cb834cfaeee29745440d4884d6748f0a08d8f68928db1d707018c1dcfbe9"
+          image: "grafana/promtail:2.9.17"
          imagePullPolicy: IfNotPresent
          args:
            - "-config.file=/etc/promtail/promtail.yaml"
@@ -217,7 +217,7 @@ spec:
      serviceAccountName: prometheus-server
      containers:
        - name: vmagent
-          image: "victoriametrics/vmagent:v1.155.0@sha256:8e3c03905be15bba8312d4868e8ae6f9fc2fefee0a41d544472034249ca42bb4"
+          image: "victoriametrics/vmagent:v1.142.0"
          imagePullPolicy: "IfNotPresent"
          args:
            - -remoteWrite.url=http://vmcluster.auth-proxy.svc/insert/0/prometheus/
@@ -206,7 +206,7 @@ spec:
      priorityClassName: critical
      containers:
      - name: nextcloud
-        image: "nextcloud:35.0.2-apache@sha256:89af7ee7a96ff5e9668280566209268ae6b2d02327f6ef6d56f6d68228cf9431"
+        image: "nextcloud:33.0.3-apache"
        imagePullPolicy: IfNotPresent
        env:
        - name: SQLITE_DATABASE
@@ -286,7 +286,7 @@ spec:
        resources:
          requests:
            cpu: 1038m
-            memory: 500M
+            memory: 765M
          limits:
            cpu: 1200m
            memory: 765M
@@ -340,7 +340,7 @@ spec:
          mountPath: /var/www/html/config/smtp.config.php
          subPath: smtp.config.php
      - name: cron
-        image: "nextcloud:35.0.2-apache@sha256:89af7ee7a96ff5e9668280566209268ae6b2d02327f6ef6d56f6d68228cf9431"
+        image: "nextcloud:33.0.3-apache"
        imagePullPolicy: IfNotPresent
        command:
          - /cron.sh
@@ -44,7 +44,7 @@ spec:
        fsGroup: 1000
      initContainers:
      - name: config-copy
-        image: bash:latest@sha256:ab2ada570d744f42f517986fdd3c81ef60fe2054ed0c5295a7922e3b0ccd1b02
+        image: bash:latest
        imagePullPolicy: IfNotPresent
        args:
          - -c
@@ -57,7 +57,7 @@ spec:
          - name: data
            mountPath: /data
      - name: update-native-modules
-        image: nodered/node-red:4.1.17-18@sha256:161239fa8c3ebc2e6c5c831eb536960d4bdec677c7117a738d89a106cc2755a6
+        image: nodered/node-red:4.1.9-18
        imagePullPolicy: IfNotPresent
        command:
          - bash
@@ -73,7 +73,7 @@ spec:
            mountPath: /data
      containers:
      - name: web
-        image: nodered/node-red:4.1.17-18@sha256:161239fa8c3ebc2e6c5c831eb536960d4bdec677c7117a738d89a106cc2755a6
+        image: nodered/node-red:4.1.9-18
        imagePullPolicy: Always
        ports:
        - containerPort: 1880
@@ -29,7 +29,7 @@ spec:
    spec:
      containers:
      - name: web
-        image: rg.fr-par.scw.cloud/averagemarcus/opengraph-image-gen:latest@sha256:97aea61e4db1e6d441fdfecd28f614b1e5342bfacd3a5ca6021ffca5c03db833
+        image: rg.fr-par.scw.cloud/averagemarcus/opengraph-image-gen:latest
        imagePullPolicy: Always
        ports:
        - containerPort: 3000
@@ -46,7 +46,7 @@ spec:
      priorityClassName: critical
      containers:
      - name: outline
-        image: outlinewiki/outline:1.12.0@sha256:25d6a2ced2f1f0cf03c09abd776d87ba31941ed96d3a99992aa84b3bd0afc074
+        image: outlinewiki/outline:1.7.1
        imagePullPolicy: IfNotPresent
        env:
        - name: ALLOWED_DOMAINS
@@ -73,9 +73,9 @@ spec:
        resources:
          requests:
            cpu: 8m
-            memory: 900Mi
+            memory: 1389M
          limits:
-            memory: 1489Mi
+            memory: 1489M
        volumeMounts:
          - mountPath: /opt/outline/.env
            subPath: .env
@@ -1,88 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: pairdrop
-  namespace: pairdrop
-spec:
-  type: ClusterIP
-  ports:
-  - port: 80
-    targetPort: web
-    name: web
-  selector:
-    app: pairdrop
---
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: pairdrop
-  namespace: pairdrop
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: pairdrop
-  template:
-    metadata:
-      labels:
-        app: pairdrop
-    spec:
-      imagePullSecrets:
-        - name: docker-config
-      priorityClassName: low
-      containers:
-      - name: web
-        image: ghcr.io/schlagmichdoch/pairdrop:v1.11.2@sha256:c4b30977264a76e335740089e693a52a0d0d616330dec7f93c7b96beef7b4a02
-        imagePullPolicy: IfNotPresent
-        ports:
-        - containerPort: 3000
-          name: web
-        env:
-        - name: RATE_LIMIT
-          value: "1"
-        - name: DONATION_BUTTON_ACTIVE
-          value: "false"
-        - name: TWITTER_BUTTON_ACTIVE
-          value: "false"
-        - name: MASTODON_BUTTON_ACTIVE
-          value: "false"
-        - name: BLUESKY_BUTTON_ACTIVE
-          value: "false"
-        - name: PRIVACYPOLICY_BUTTON_ACTIVE
-          value: "false"
-        resources:
-          limits:
-            memory: 100Mi
-          requests:
-            memory: 100Mi
-        livenessProbe:
-          httpGet:
-            path: /
-            port: web
---
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: pairdrop
-  namespace: pairdrop
-  annotations:
-    cert-manager.io/cluster-issuer: letsencrypt
-    ingress.kubernetes.io/ssl-redirect: "true"
-    nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
-spec:
-  ingressClassName: nginx
-  tls:
-  - hosts:
-    - drop.cluster.fun
-    secretName: pairdrop-ingress
-  rules:
-  - host: drop.cluster.fun
-    http:
-      paths:
-      - path: /
-        pathType: ImplementationSpecific
-        backend:
-          service:
-            name: pairdrop
-            port:
-              number: 80
@@ -62,7 +62,7 @@ spec:
      priorityClassName: critical
      containers:
        - name: planning-poker
-          image: ghcr.io/axeleroy/self-host-planning-poker:1.2.1@sha256:0253f17c07f6c484b6fbef65867863541494e063355d39757ca27963404864d4
+          image: ghcr.io/axeleroy/self-host-planning-poker:1.2.1
          imagePullPolicy: IfNotPresent
          ports:
            - name: web
@@ -29,7 +29,7 @@ spec:
    spec:
      containers:
      - name: web
-        image: rg.fr-par.scw.cloud/averagemarcus/qr:latest@sha256:e98db60ab26d5769bc5b17384fcb10d98e71b353fc23d154d5049fd88bab00eb
+        image: rg.fr-par.scw.cloud/averagemarcus/qr:latest
        imagePullPolicy: Always
        ports:
        - containerPort: 8080
@@ -330,7 +330,7 @@ spec:
      priorityClassName: critical
      containers:
        - name: redis
-          image: docker.io/bitnamilegacy/redis:7.2.4-debian-11-r11@sha256:c81b0644726b22fa65669b427610701e86dceb0007438f5d75d271b3197a48bf
+          image: docker.io/bitnamilegacy/redis:7.2.4-debian-11-r11
          imagePullPolicy: "IfNotPresent"
          securityContext:
            runAsUser: 1001
@@ -472,7 +472,7 @@ spec:
      terminationGracePeriodSeconds: 30
      containers:
        - name: redis
-          image: docker.io/bitnamilegacy/redis:7.2.4-debian-11-r11@sha256:c81b0644726b22fa65669b427610701e86dceb0007438f5d75d271b3197a48bf
+          image: docker.io/bitnamilegacy/redis:7.2.4-debian-11-r11
          imagePullPolicy: "IfNotPresent"
          securityContext:
            runAsUser: 1001
@@ -68,7 +68,7 @@ spec:
    spec:
      containers:
      - name: web
-        image: ghcr.io/miniflux/miniflux:2.3.4@sha256:72e49f513a63104506aab98ba8cfc3a409d4fde23550a583dec07ec941f1e94e
+        image: ghcr.io/miniflux/miniflux:2.2.19
        imagePullPolicy: IfNotPresent
        envFrom:
        - configMapRef:
@@ -92,7 +92,7 @@ spec:
            secretKeyRef:
              key: password
              name: social-to-rolodex-auth
-        image: quay.io/oauth2-proxy/oauth2-proxy:v7.15.5@sha256:8498b0d0ef0a7b29686414000a08aee467f02d0299c9ed1e006a8f33fc017916
+        image: quay.io/oauth2-proxy/oauth2-proxy:v7.15.2
        name: oauth-proxy
        ports:
        - containerPort: 8000
@@ -30,7 +30,7 @@ spec:
      priorityClassName: low
      containers:
      - name: web
-        image: rg.fr-par.scw.cloud/averagemarcus/svg-to-dxf:latest@sha256:7e74cd6569ed68d46b012ffbd672be9e4c6422b28fb13eb5d83b2c1dc85e9cb9
+        image: rg.fr-par.scw.cloud/averagemarcus/svg-to-dxf:latest
        imagePullPolicy: Always
        ports:
        - containerPort: 8080
@@ -30,7 +30,7 @@ spec:
      priorityClassName: low
      containers:
      - name: web
-        image: rg.fr-par.scw.cloud/averagemarcus/text-to-dxf:latest@sha256:f1ce90feec0dae575979c7fa83b855ced939efe23d749cc2615f5d43a08cacb0
+        image: rg.fr-par.scw.cloud/averagemarcus/text-to-dxf:latest
        imagePullPolicy: Always
        ports:
        - containerPort: 8080
@@ -45,7 +45,7 @@ spec:
        - --entrypoints.websecure.http.tls=true
        - --entrypoints.web.http.redirections.entrypoint.to=websecure
        - --entrypoints.web.http.redirections.entrypoint.scheme=https
-        image: rancher/mirrored-library-traefik:2.11.50@sha256:e4cf36c7f13f76ad750720a8b51e9d2458964961b50a0148a806d589b5cfa88b
+        image: rancher/mirrored-library-traefik:2.11.42
        imagePullPolicy: IfNotPresent
        livenessProbe:
          failureThreshold: 3
@@ -1,26 +0,0 @@
-kind: PersistentVolumeClaim
-apiVersion: v1
-metadata:
-  name: trek-data
-  namespace: trek
-spec:
-  accessModes:
-    - ReadWriteOnce
-  resources:
-    requests:
-      storage: 2Gi
-  storageClassName: sbs-default-retain
---
-kind: PersistentVolumeClaim
-apiVersion: v1
-metadata:
-  name: trek-uploads
-  namespace: trek
-spec:
-  accessModes:
-    - ReadWriteOnce
-  resources:
-    requests:
-      storage: 2Gi
-  storageClassName: sbs-default-retain
---
@@ -1,157 +0,0 @@
-apiVersion: v1
-kind: Secret
-metadata:
-  name: trek
-  namespace: trek
-  labels:
-    app: trek
-    app.kubernetes.io/name: trek
-  annotations:
-    kube-1password: irpjqi7ppvbvldfni7ywgorpgi
-    kube-1password/vault: Kubernetes
-    kube-1password/secret-text-parse: "true"
-type: Opaque
---
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: trek
-  namespace: trek
-  labels:
-    app: trek
-    app.kubernetes.io/name: trek
-  annotations:
-    reloader.stakater.com/match: "true"
-data:
-  NODE_ENV: "production"
-  PORT: "3000"
-  TZ: "UTC"
-  LOG_LEVEL: "info"
-  DEFAULT_LANGUAGE: "en"
-  ALLOWED_ORIGINS: "https://trek.cluster.fun"
-  APP_URL: "https://trek.cluster.fun"
-  FORCE_HTTPS: "false"
-  COOKIE_SECURE: "true"
-
---
-
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: trek
-  namespace: trek
-  labels:
-    app: trek
-    app.kubernetes.io/name: trek
-spec:
-  replicas: 1
-  strategy:
-    type: Recreate
-  selector:
-    matchLabels:
-      app: trek
-  template:
-    metadata:
-      labels:
-        app: trek
-        app.kubernetes.io/name: trek
-    spec:
-      containers:
-      - name: trek
-        image: mauriceboe/trek:5.0.0@sha256:0c0a8f5b488fc2967248695e04bb000bb177d0b63d3385089d33dca6fde4daf9
-        imagePullPolicy: IfNotPresent
-        envFrom:
-        - configMapRef:
-            name: trek
-        - secretRef:
-            name: trek
-        ports:
-        - containerPort: 3000
-          name: web
-        volumeMounts:
-          - mountPath: /app/data
-            name: data
-          - mountPath: /app/uploads
-            name: uploads
-        livenessProbe:
-          httpGet:
-            path: /api/health
-            port: 3000
-          initialDelaySeconds: 5
-          periodSeconds: 30
-        readinessProbe:
-          httpGet:
-            path: /api/health
-            port: 3000
-          initialDelaySeconds: 5
-          periodSeconds: 10
-        resources:
-          requests:
-            cpu: 300m
-            memory: 400Mi
-          limits:
-            cpu: 700m
-            memory: 800Mi
-      volumes:
-      - name: data
-        persistentVolumeClaim:
-          claimName: trek-data
-      - name: uploads
-        persistentVolumeClaim:
-          claimName: trek-uploads
-
---
-
-apiVersion: v1
-kind: Service
-metadata:
-  name: trek
-  namespace: trek
-  labels:
-    app: trek
-    app.kubernetes.io/name: trek
-spec:
-  type: ClusterIP
-  ports:
-  - port: 80
-    targetPort: web
-    name: web
-  selector:
-    app: trek
---
-
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: trek
-  namespace: trek
-  labels:
-    app: trek
-    app.kubernetes.io/name: trek
-  annotations:
-    cert-manager.io/cluster-issuer: letsencrypt
-    nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
-    nginx.ingress.kubernetes.io/proxy-body-size: "0"
-    nginx.ingress.kubernetes.io/client-body-buffer-size: 25m
-    nginx.ingress.kubernetes.io/proxy-connect-timeout: "300"
-    nginx.ingress.kubernetes.io/proxy-send-timeout: "300"
-    nginx.ingress.kubernetes.io/proxy-read-timeout: "300"
-    nginx.ingress.kubernetes.io/proxy-next-upstream: "300"
-    nginx.ingress.kubernetes.io/proxy-next-upstream-timeout: "300"
-spec:
-  ingressClassName: nginx
-  tls:
-  - hosts:
-    - trek.cluster.fun
-    secretName: trek-ingress
-  rules:
-  - host: trek.cluster.fun
-    http:
-      paths:
-      - path: /
-        pathType: ImplementationSpecific
-        backend:
-          service:
-            name: trek
-            port:
-              name: web
@@ -52,7 +52,7 @@ spec:
    spec:
      containers:
      - name: url-to-grist
-        image: ghcr.io/namelessplanet/url-to-grist:v1.6.1@sha256:7912e3340b071244d7b807759608c6bc6f8e563f548485379247ef1106a82be5
+        image: ghcr.io/namelessplanet/url-to-grist:v1.6.0
        imagePullPolicy: IfNotPresent
        env:
        - name: PORT
@@ -1,69 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: vert
-  namespace: vert
-spec:
-  type: ClusterIP
-  ports:
-  - port: 80
-    targetPort: web
-    name: web
-  selector:
-    app: vert
---
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: vert
-  namespace: vert
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: vert
-  template:
-    metadata:
-      labels:
-        app: vert
-    spec:
-      containers:
-      - name: web
-        image: ghcr.io/vert-sh/vert:sha-438f91a@sha256:c604d357e44dce6020391b6bd8d20e4f5d35e3778ecf58bbccbd8fdc6792eaf4
-        imagePullPolicy: IfNotPresent
-        ports:
-        - containerPort: 80
-          name: web
-        resources:
-          limits:
-            memory: 200Mi
-          requests:
-            memory: 200Mi
---
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: vert
-  namespace: vert
-  annotations:
-    cert-manager.io/cluster-issuer: letsencrypt
-    ingress.kubernetes.io/ssl-redirect: "true"
-    nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
-spec:
-  ingressClassName: nginx
-  tls:
-  - hosts:
-    - vert.cluster.fun
-    secretName: vert-ingress
-  rules:
-  - host: vert.cluster.fun
-    http:
-      paths:
-      - path: /
-        pathType: ImplementationSpecific
-        backend:
-          service:
-            name: vert
-            port:
-              number: 80
-
@@ -31,7 +31,7 @@ spec:
    spec:
      containers:
      - name: yay-or-nay
-        image: ghcr.io/mocdaniel/yay-or-nay:1.2.1@sha256:3edb37642d749124e9e03a6dbaca9ae5d0a45dd9361a0dbcae1ad051faeb1743
+        image: ghcr.io/mocdaniel/yay-or-nay:1.2.1
        imagePullPolicy: IfNotPresent
        ports:
        - containerPort: 3000
@@ -8,8 +8,7 @@
  "rebaseWhen": "behind-base-branch",
  "extends": [
    "replacements:k8s-registry-move",
-    "local>averagemarcus/renovate-config//source-urls",
-    "docker:pinDigests"
+    "local>averagemarcus/renovate-config//source-urls"
  ],
  "ignorePaths": [
    "terraform"