Update grafana/promtail Docker tag to v3

2026-01-14 03:07:36 +00:00
20 changed files with 17 additions and 127 deletions
--- a/manifests/_apps/certmanager_chart.yaml
+++ b/manifests/_apps/certmanager_chart.yaml
@@ -35,7 +35,7 @@ spec:
    name: cluster-fun (v2)
  source:
    repoURL: 'https://charts.jetstack.io'
-    targetRevision: v1.19.3
+    targetRevision: v1.19.2
    chart: cert-manager
    helm:
      version: v3
--- a/manifests/_apps/dashboard.yaml
+++ b/manifests/_apps/dashboard.yaml
@@ -22,9 +22,5 @@ spec:
  - kind: Secret
    jsonPointers:
    - /data
-  - group: apps
-    kind: Deployment
-    jqPathExpressions:
-    - .spec.template.spec.containers[]?.image

 ---
--- a/manifests/_apps/mazanoke.yaml
+++ b/manifests/_apps/mazanoke.yaml
@@ -1,25 +0,0 @@
-apiVersion: argoproj.io/v1alpha1
-kind: Application
-metadata:
-  name: mazanoke
-  namespace: argocd
-  finalizers:
-  - resources-finalizer.argocd.argoproj.io
-spec:
-  project: cluster.fun
-  destination:
-    namespace: mazanoke
-    name: cluster-fun (v2)
-  source:
-    path: manifests/mazanoke
-    repoURL: "https://git.cluster.fun/AverageMarcus/cluster.fun.git"
-    targetRevision: HEAD
-  syncPolicy:
-    automated: {}
-    syncOptions:
-      - CreateNamespace=true
-  ignoreDifferences:
-  - kind: Secret
-    jsonPointers:
-    - /data
-
--- a/manifests/auth-proxy/non-auth-ingress.yaml
+++ b/manifests/auth-proxy/non-auth-ingress.yaml
@@ -18,7 +18,6 @@ spec:
    - ombi.cluster.fun
    - bsky-feeds.cluster.fun
    - ai.cluster.fun
-    - penpot.cluster.fun
    secretName: non-auth-proxy-ingress
  rules:
  - host: hello-world.cluster.fun
@@ -61,13 +60,3 @@ spec:
            name: tailscale-proxy
            port:
              name: non-auth
-  - host: penpot.cluster.fun
-    http:
-      paths:
-      - path: /
-        pathType: ImplementationSpecific
-        backend:
-          service:
-            name: tailscale-proxy
-            port:
-              name: non-auth
--- a/manifests/auth-proxy/proxy.yaml
+++ b/manifests/auth-proxy/proxy.yaml
@@ -68,7 +68,7 @@ spec:
          mountPath: /config/

      - name: oauth-proxy
-        image: quay.io/oauth2-proxy/oauth2-proxy:v7.14.2
+        image: quay.io/oauth2-proxy/oauth2-proxy:v7.13.0
        args:
        - --cookie-secure=false
        - --provider=oidc
--- a/manifests/dashboard/dashboard.yaml
+++ b/manifests/dashboard/dashboard.yaml
@@ -81,7 +81,7 @@ spec:
            secretKeyRef:
              key: password
              name: dashboard-auth
-        image: quay.io/oauth2-proxy/oauth2-proxy:v7.14.2
+        image: quay.io/oauth2-proxy/oauth2-proxy:v7.13.0
        name: oauth-proxy
        ports:
        - containerPort: 8000
--- a/manifests/gitea/gitea.yaml
+++ b/manifests/gitea/gitea.yaml
@@ -43,7 +43,7 @@ spec:
      priorityClassName: critical
      containers:
      - name: git
-        image: gitea/gitea:1.25.4
+        image: gitea/gitea:1.25.3
        env:
        - name: APP_NAME
          value: "Git"
--- a/manifests/goplayground/goplayground.yaml
+++ b/manifests/goplayground/goplayground.yaml
@@ -29,7 +29,7 @@ spec:
    spec:
      containers:
      - name: web
-        image: x1unix/go-playground:2.5.8
+        image: x1unix/go-playground:2.5.7
        imagePullPolicy: IfNotPresent
        ports:
        - containerPort: 8000
--- a/manifests/link/link.yaml
+++ b/manifests/link/link.yaml
@@ -40,7 +40,6 @@ data:
    cdl-talk-2026: https://speaking.marcusnoble.co.uk/0rRvmv/debugging-your-conference-talk-practical-tips-to-resonate-with-your-audience
    cdl-talk-2026-feedback: https://yay-or-nay.cluster.fun/feedback/22TO05MQ
    technical-talking-blog-post: https://marcusnoble.co.uk/2025-04-30-my-tips-on-giving-technical-talks/
-    kubecon-eu-26: https://speaking.marcusnoble.co.uk/zT471P/kube-oddities-the-quirks-that-keep-kubernetes-interesting
 ---
 apiVersion: v1
 kind: Service
--- a/manifests/mazanoke/manifest.yaml
+++ b/manifests/mazanoke/manifest.yaml
@@ -1,69 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: mazanoke
-  namespace: mazanoke
-spec:
-  type: ClusterIP
-  ports:
-  - port: 80
-    targetPort: web
-    name: web
-  selector:
-    app: mazanoke
---
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: mazanoke
-  namespace: mazanoke
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: mazanoke
-  template:
-    metadata:
-      labels:
-        app: mazanoke
-    spec:
-      containers:
-      - name: web
-        image: ghcr.io/civilblur/mazanoke:v1.1.5
-        imagePullPolicy: Always
-        ports:
-        - containerPort: 80
-          name: web
-        resources:
-          limits:
-            memory: 200Mi
-          requests:
-            memory: 200Mi
---
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: mazanoke
-  namespace: mazanoke
-  annotations:
-    cert-manager.io/cluster-issuer: letsencrypt
-    ingress.kubernetes.io/ssl-redirect: "true"
-    nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
-spec:
-  ingressClassName: nginx
-  tls:
-  - hosts:
-    - image.cluster.fun
-    secretName: mazanoke-ingress
-  rules:
-  - host: image.cluster.fun
-    http:
-      paths:
-      - path: /
-        pathType: ImplementationSpecific
-        backend:
-          service:
-            name: mazanoke
-            port:
-              number: 80
-
--- a/manifests/monitoring/cadvisor.yaml
+++ b/manifests/monitoring/cadvisor.yaml
@@ -38,7 +38,7 @@ spec:
          operator: "Exists"
      automountServiceAccountToken: false
      containers:
-      - image: ghcr.io/google/cadvisor:0.56.2
+      - image: ghcr.io/google/cadvisor:0.55.1
        name: cadvisor
        ports:
        - containerPort: 8080
--- a/manifests/monitoring/kube-state-metrics.yaml
+++ b/manifests/monitoring/kube-state-metrics.yaml
@@ -238,7 +238,7 @@ spec:
        - --resources=validatingwebhookconfigurations
        #- --resources=volumeattachments
        imagePullPolicy: IfNotPresent
-        image: "registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.0"
+        image: "registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.17.0"
        ports:
        - containerPort: 8080
        livenessProbe:
--- a/manifests/monitoring/promtail.yaml
+++ b/manifests/monitoring/promtail.yaml
@@ -216,7 +216,7 @@ spec:
      serviceAccountName: promtail
      containers:
        - name: promtail
-          image: "grafana/promtail:2.9.17"
+          image: "grafana/promtail:3.6.3"
          imagePullPolicy: IfNotPresent
          args:
            - "-config.file=/etc/promtail/promtail.yaml"
--- a/manifests/monitoring/vmagent.yaml
+++ b/manifests/monitoring/vmagent.yaml
@@ -217,7 +217,7 @@ spec:
      serviceAccountName: prometheus-server
      containers:
        - name: vmagent
-          image: "victoriametrics/vmagent:v1.135.0"
+          image: "victoriametrics/vmagent:v1.133.0"
          imagePullPolicy: "IfNotPresent"
          args:
            - -remoteWrite.url=http://vmcluster.auth-proxy.svc/insert/0/prometheus/
--- a/manifests/nextcloud_chart/manifest.yaml
+++ b/manifests/nextcloud_chart/manifest.yaml
@@ -206,7 +206,7 @@ spec:
      priorityClassName: critical
      containers:
      - name: nextcloud
-        image: "nextcloud:32.0.5-apache"
+        image: "nextcloud:32.0.3-apache"
        imagePullPolicy: IfNotPresent
        env:
        - name: SQLITE_DATABASE
@@ -340,7 +340,7 @@ spec:
          mountPath: /var/www/html/config/smtp.config.php
          subPath: smtp.config.php
      - name: cron
-        image: "nextcloud:32.0.5-apache"
+        image: "nextcloud:32.0.3-apache"
        imagePullPolicy: IfNotPresent
        command:
          - /cron.sh
--- a/manifests/nginx-lb/nginx-lb.yaml
+++ b/manifests/nginx-lb/nginx-lb.yaml
@@ -492,7 +492,7 @@ spec:
              fieldPath: metadata.namespace
        - name: LD_PRELOAD
          value: /usr/local/lib/libmimalloc.so
-        image: registry.k8s.io/ingress-nginx/controller:v1.14.2@sha256:fb3e5c0bdff6a498dd5192b11a09ace0739baa9fe6ba519bf5b22425871ce490
+        image: registry.k8s.io/ingress-nginx/controller:v1.14.1@sha256:f95a79b85fb93ac3de752c71a5c27d5ceae10a18b61904dec224c1c6a4581e47
        imagePullPolicy: IfNotPresent
        lifecycle:
          preStop:
--- a/manifests/nodered/nodered.yaml
+++ b/manifests/nodered/nodered.yaml
@@ -57,7 +57,7 @@ spec:
          - name: data
            mountPath: /data
      - name: update-native-modules
-        image: nodered/node-red:4.1.4-18
+        image: nodered/node-red:4.1.3-18
        imagePullPolicy: IfNotPresent
        command:
          - bash
@@ -73,7 +73,7 @@ spec:
            mountPath: /data
      containers:
      - name: web
-        image: nodered/node-red:4.1.4-18
+        image: nodered/node-red:4.1.3-18
        imagePullPolicy: Always
        ports:
        - containerPort: 1880
--- a/manifests/outline/outline.yaml
+++ b/manifests/outline/outline.yaml
@@ -46,7 +46,7 @@ spec:
      priorityClassName: critical
      containers:
      - name: outline
-        image: outlinewiki/outline:1.4.0
+        image: outlinewiki/outline:1.2.0
        imagePullPolicy: IfNotPresent
        env:
        - name: ALLOWED_DOMAINS
--- a/manifests/social-to-rolodex/social-to-rolodex.yaml
+++ b/manifests/social-to-rolodex/social-to-rolodex.yaml
@@ -92,7 +92,7 @@ spec:
            secretKeyRef:
              key: password
              name: social-to-rolodex-auth
-        image: quay.io/oauth2-proxy/oauth2-proxy:v7.14.2
+        image: quay.io/oauth2-proxy/oauth2-proxy:v7.13.0
        name: oauth-proxy
        ports:
        - containerPort: 8000
--- a/manifests/traefik/traefik.yaml
+++ b/manifests/traefik/traefik.yaml
@@ -45,7 +45,7 @@ spec:
        - --entrypoints.websecure.http.tls=true
        - --entrypoints.web.http.redirections.entrypoint.to=websecure
        - --entrypoints.web.http.redirections.entrypoint.scheme=https
-        image: rancher/mirrored-library-traefik:3.6.7
+        image: rancher/mirrored-library-traefik:2.11.34
        imagePullPolicy: IfNotPresent
        livenessProbe:
          failureThreshold: 3