Update quay.io/argoproj/argocd Docker tag to v2.5.3

an experiment

argocd/argocd.yaml

@@ -9687,7 +9687,7 @@ spec:
           valueFrom:
             fieldRef:
               fieldPath: metadata.namespace
-        image: quay.io/argoproj/argocd:v2.5.2
+        image: quay.io/argoproj/argocd:v2.5.3
         imagePullPolicy: Always
         name: argocd-applicationset-controller
         ports:
@@ -9784,7 +9784,7 @@ spec:
         - -n
         - /usr/local/bin/argocd
         - /shared/argocd-dex
-        image: quay.io/argoproj/argocd:v2.5.2
+        image: quay.io/argoproj/argocd:v2.5.3
         imagePullPolicy: Always
         name: copyutil
         securityContext:
@@ -9824,7 +9824,7 @@ spec:
       containers:
       - command:
         - argocd-notifications
-        image: quay.io/argoproj/argocd:v2.5.2
+        image: quay.io/argoproj/argocd:v2.5.3
         imagePullPolicy: Always
         livenessProbe:
           tcpSocket:
@@ -10049,7 +10049,7 @@ spec:
           value: /helm-working-dir
         - name: HELM_DATA_HOME
           value: /helm-working-dir
-        image: quay.io/argoproj/argocd:v2.5.2
+        image: quay.io/argoproj/argocd:v2.5.3
         imagePullPolicy: Always
         livenessProbe:
           failureThreshold: 3
@@ -10098,7 +10098,7 @@ spec:
         - -n
         - /usr/local/bin/argocd
         - /var/run/argocd/argocd-cmp-server
-        image: quay.io/argoproj/argocd:v2.5.2
+        image: quay.io/argoproj/argocd:v2.5.3
         name: copyutil
         securityContext:
           allowPrivilegeEscalation: false
@@ -10341,7 +10341,7 @@ spec:
               key: otlp.address
               name: argocd-cmd-params-cm
               optional: true
-        image: quay.io/argoproj/argocd:v2.5.2
+        image: quay.io/argoproj/argocd:v2.5.3
         imagePullPolicy: Always
         livenessProbe:
           httpGet:
@@ -10543,7 +10543,7 @@ spec:
               key: otlp.address
               name: argocd-cmd-params-cm
               optional: true
-        image: quay.io/argoproj/argocd:v2.5.2
+        image: quay.io/argoproj/argocd:v2.5.3
         imagePullPolicy: Always
         livenessProbe:
           httpGet:

renovate/cronjob.yaml

@@ -12,7 +12,7 @@ spec:
           containers:
             - name: renovate
               # Update this to the latest available and then enable Renovate on the manifest
-              image: renovate/renovate:34.19.3-slim
+              image: renovate/renovate:34.40.2-slim
               # Environment Variables
               env:
                 - name: RENOVATE_PLATFORM

tobru-ch/Caddyfile

@@ -0,0 +1,4 @@
+http://:8080 {
+	header content-type "application/jrd+json; charset=utf-8"
+	respond "{\"subject\":\"acct:tobru@mstdn.social\",\"aliases\":[\"https://mstdn.social/@tobru\",\"https://mstdn.social/users/tobru\"],\"links\":[{\"rel\":\"http://webfinger.net/rel/profile-page\",\"type\":\"text/html\",\"href\":\"https://mstdn.social/@tobru\"},{\"rel\":\"self\",\"type\":\"application/activity+json\",\"href\":\"https://mstdn.social/users/tobru\"},{\"rel\":\"http://ostatus.org/schema/1.0/subscribe\",\"template\":\"https://mstdn.social/authorize_interaction?uri={uri}\"}]}"
+}

tobru-ch/cm-caddyfile.yaml

@@ -0,0 +1,7 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: caddyconfig
+data:
+  Caddyfile: "http://:8080 {\n\theader content-type \"application/jrd+json;
+    charset=utf-8\"\n\trespond \"{\\\"subject\\\":\\\"acct:tobru@mstdn.social\\\",\\\"aliases\\\":[\\\"https://mstdn.social/@tobru\\\",\\\"https://mstdn.social/users/tobru\\\"],\\\"links\\\":[{\\\"rel\\\":\\\"http://webfinger.net/rel/profile-page\\\",\\\"type\\\":\\\"text/html\\\",\\\"href\\\":\\\"https://mstdn.social/@tobru\\\"},{\\\"rel\\\":\\\"self\\\",\\\"type\\\":\\\"application/activity+json\\\",\\\"href\\\":\\\"https://mstdn.social/users/tobru\\\"},{\\\"rel\\\":\\\"http://ostatus.org/schema/1.0/subscribe\\\",\\\"template\\\":\\\"https://mstdn.social/authorize_interaction?uri={uri}\\\"}]}\"\n}\n"

tobru-ch/deployment.yaml

@@ -24,7 +24,7 @@ spec:
         component: ghost
     spec:
       containers:
-      - image: ghost:5.22.4-alpine
+      - image: ghost:5.24.1-alpine
         imagePullPolicy: IfNotPresent
         name: ghost
         env:
@@ -60,6 +60,14 @@ spec:
         - name: data
           mountPath: /var/lib/ghost/content
           subPath: ghost
+      - image: docker.io/library/caddy:2.6.2-alpine
+        imagePullPolicy: IfNotPresent
+        name: caddy
+        ports:
+          - containerPort: 8080
+        volumeMounts:
+          - mountPath: /etc/caddy
+            name: caddyfile
       dnsPolicy: ClusterFirst
       restartPolicy: Always
       schedulerName: default-scheduler
@@ -69,3 +77,7 @@ spec:
       - name: data
         persistentVolumeClaim:
           claimName: data
+      - configMap:
+          defaultMode: 420
+          name: caddyconfig
+        name: caddyfile

tobru-ch/ghost-ingress.yaml

@@ -17,6 +17,13 @@ spec:
   - host: tobru.ch
     http:
       paths:
+      - path: /.well-known/webfinger
+        pathType: Prefix
+        backend:
+          service:
+            name: ghost
+            port:
+              number: 8080
       - path: /
         pathType: Prefix
         backend:

tobru-ch/ghost-service.yaml

@@ -8,9 +8,14 @@ metadata:
   namespace: tobru-ch
 spec:
   ports:
-  - port: 2368
+  - name: ghost
+    port: 2368
     protocol: TCP
     targetPort: 2368
+  - name: caddy
+    port: 8080
+    protocol: TCP
+    targetPort: 8080
   selector:
     component: ghost
   sessionAffinity: None