Update Helm release reloader to v2

manifests/_apps/reloader.yaml

@@ -12,7 +12,7 @@ spec:
     name: cluster-fun (v2)
   source:
     repoURL: 'https://stakater.github.io/stakater-charts'
-    targetRevision: v0.0.129
+    targetRevision: 2.2.18
     chart: reloader
   syncPolicy:
     automated: {}

manifests/_apps/sre-agent.yaml

@@ -1,25 +0,0 @@
-apiVersion: argoproj.io/v1alpha1
-kind: Application
-metadata:
-  name: sre-agent
-  namespace: argocd
-  finalizers:
-  - resources-finalizer.argocd.argoproj.io
-spec:
-  project: cluster.fun
-  destination:
-    namespace: default
-    name: cluster-fun (v2)
-  source:
-    path: manifests/sre-agent
-    repoURL: "https://git.cluster.fun/AverageMarcus/cluster.fun.git"
-    targetRevision: HEAD
-  syncPolicy:
-    automated: {}
-    syncOptions:
-      - CreateNamespace=true
-  ignoreDifferences:
-  - kind: Secret
-    jsonPointers:
-    - /data
-

manifests/monitoring/vmagent.yaml

@@ -217,7 +217,7 @@ spec:
       serviceAccountName: prometheus-server
       containers:
         - name: vmagent
-          image: "victoriametrics/vmagent:v1.155.0@sha256:8e3c03905be15bba8312d4868e8ae6f9fc2fefee0a41d544472034249ca42bb4"
+          image: "victoriametrics/vmagent:v1.154.1@sha256:970ba603235839655e03501311c683d2269b882f7bcf0ac98892ae422603cb61"
           imagePullPolicy: "IfNotPresent"
           args:
             - -remoteWrite.url=http://vmcluster.auth-proxy.svc/insert/0/prometheus/

manifests/nextcloud_chart/manifest.yaml

@@ -206,7 +206,7 @@ spec:
       priorityClassName: critical
       containers:
       - name: nextcloud
-        image: "nextcloud:35.0.2-apache@sha256:0347adaf2fa460aa9589f8c2b1ed246788d11a72ad9918d55ca288f3137fe5ca"
+        image: "nextcloud:35.0.2-apache@sha256:89af7ee7a96ff5e9668280566209268ae6b2d02327f6ef6d56f6d68228cf9431"
         imagePullPolicy: IfNotPresent
         env:
         - name: SQLITE_DATABASE
@@ -340,7 +340,7 @@ spec:
           mountPath: /var/www/html/config/smtp.config.php
           subPath: smtp.config.php
       - name: cron
-        image: "nextcloud:35.0.2-apache@sha256:0347adaf2fa460aa9589f8c2b1ed246788d11a72ad9918d55ca288f3137fe5ca"
+        image: "nextcloud:35.0.2-apache@sha256:89af7ee7a96ff5e9668280566209268ae6b2d02327f6ef6d56f6d68228cf9431"
         imagePullPolicy: IfNotPresent
         command:
           - /cron.sh

manifests/sre-agent/sre-agent.yaml

@@ -1,131 +0,0 @@
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: sre-agent
-  namespace: default
-
----
-
-apiVersion: v1
-kind: Secret
-metadata:
-  name: sre-agent
-  namespace: default
-  annotations:
-    kubernetes.io/service-account.name: sre-agent
-type: kubernetes.io/service-account-token
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  name: sre-agent
-  labels:
-    app.kubernetes.io/name: sre-agent
-rules:
-  # Node-level diagnostics
-  - apiGroups: [""]
-    resources: ["nodes"]
-    verbs: ["get", "list", "watch"]
-  - apiGroups: [""]
-    resources: ["nodes/proxy", "nodes/metrics", "nodes/stats"]
-    verbs: ["get", "list"]
-
-  # Pod diagnostics
-  - apiGroups: [""]
-    resources: ["pods", "pods/log", "pods/status", "pods/ephemeralcontainers"]
-    verbs: ["get", "list", "watch"]
-
-  # Services, endpoints, networking
-  - apiGroups: [""]
-    resources: ["services", "endpoints", "endpointslices", "namespaces"]
-    verbs: ["get", "list", "watch"]
-  - apiGroups: [""]
-    resources: ["persistentvolumeclaims", "persistentvolumes"]
-    verbs: ["get", "list", "watch"]
-  - apiGroups: [""]
-    resources: ["events"]
-    verbs: ["get", "list", "watch"]
-  - apiGroups: [""]
-    resources: ["configmaps", "secrets"]
-    verbs: ["get", "list"]    # readable only, no modify/delete
-  - apiGroups: [""]
-    resources: ["resourcequotas", "limitranges"]
-    verbs: ["get", "list"]
-
-  # Network policies
-  - apiGroups: ["networking.k8s.io"]
-    resources: ["*"]
-    verbs: ["get", "list", "watch"]
-  - apiGroups: ["discovery.k8s.io"]
-    resources: ["*"]
-    verbs: ["get", "list", "watch"]
-
-  # Workloads
-  - apiGroups: ["apps"]
-    resources: ["*"]
-    verbs: ["get", "list", "watch"]
-  - apiGroups: ["apps"]
-    resources: ["deployments/scale", "replicasets/scale"]
-    verbs: ["get"]
-
-  # Jobs & cronjobs
-  - apiGroups: ["batch"]
-    resources: ["*"]
-    verbs: ["get", "list", "watch"]
-  - apiGroups: ["batch"]
-    resources: ["jobs/log"]
-    verbs: ["get", "list"]
-
-  # Autoscaling
-  - apiGroups: ["autoscaling"]
-    resources: ["*"]
-    verbs: ["get", "list", "watch"]
-
-  # RBAC visibility (diagnose who owns what)
-  - apiGroups: ["rbac.authorization.k8s.io"]
-    resources: ["*"]
-    verbs: ["get", "list", "watch"]
-
-  # Custom Resource Definitions (so we can inspect custom resources)
-  - apiGroups: ["apiextensions.k8s.io"]
-    resources: ["customresourcedefinitions"]
-    verbs: ["get", "list", "watch"]
-
-  # Priority classes
-  - apiGroups: ["scheduling.k8s.io"]
-    resources: ["priorityclasses"]
-    verbs: ["get", "list"]
-
-  # Certificate rotation
-  - apiGroups: ["certificates.k8s.io"]
-    resources: ["certificatesigningrequests", "certificatesigningrequests/approval"]
-    verbs: ["get", "list", "watch"]
-
-  # Metrics Server (if installed)
-  - apiGroups: ["metrics.k8s.io"]
-    resources: ["*"]
-    verbs: ["get", "list"]
-
-  # Admission controllers / pod security (diagnostic)
-  - apiGroups: ["policy"]
-    resources: ["*"]
-    verbs: ["get", "list", "watch"]
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  name: sre-agent-binding
-  labels:
-    app.kubernetes.io/name: sre-agent
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: sre-agent
-subjects:
-  - kind: ServiceAccount
-    name: sre-agent
-    namespace: default

manifests/trek/trek.yaml

@@ -58,7 +58,7 @@ spec:
     spec:
       containers:
       - name: trek
-        image: mauriceboe/trek:5.0.1@sha256:6f590b97c09158e92e9bc7d914ea1af207077735f07f7b622b1f6fb690442bc3
+        image: mauriceboe/trek:5.0.0@sha256:0c0a8f5b488fc2967248695e04bb000bb177d0b63d3385089d33dca6fde4daf9
         imagePullPolicy: IfNotPresent
         envFrom:
         - configMapRef: