Update quay.io/jetstack/cert-manager-controller Docker tag to v1.11.0

Reviewed-on: #1181

.envrc

@@ -0,0 +1,2 @@
+export KUBECONFIG=~/.kube/config_knurrli
+

.gitignore

@@ -0,0 +1 @@
+headscale/secret.yaml

_apps/renovate.yaml

@@ -14,9 +14,6 @@ spec:
     path: renovate
     repoURL: https://git.tbrnt.ch/tobru/gitops-tbrnt.git
     targetRevision: HEAD
-  syncPolicy:
-    automated:
-      prune: true
 ---
 apiVersion: v1
 kind: Namespace

docspell/configmap-docspellconf.yaml

@@ -56,6 +56,7 @@ data:
           url = "http://solrtcp:8983/solr/docspell"
         }
       }
+      convert.html-converter = "weasyprint"
       scheduler {
         pool-size = 1
       }

docspell/joex/deployment.yaml

@@ -18,7 +18,7 @@ spec:
         app: joex
     spec:
       containers:
-      - image: docker.io/docspell/joex:v0.38.0
+      - image: docker.io/docspell/joex:v0.39.0
         name: joex
         args:
         - /etc/docspell/docspell.conf

docspell/restserver/deployment.yaml

@@ -18,7 +18,7 @@ spec:
         app: restserver
     spec:
       containers:
-      - image: docker.io/docspell/restserver:v0.38.0
+      - image: docker.io/docspell/restserver:v0.39.0
         name: docspell
         args:
         - /etc/docspell/docspell.conf

headscale/configmap.yaml

@@ -15,6 +15,8 @@ data:
     db_type: sqlite3
     db_path: /vol/data/db.sqlite
     private_key_path: /vol/secret/private.key
+    noise:
+      private_key_path: /vol/secret/noise_private.key
     derp:
       server:
         enabled: true
@@ -30,3 +32,8 @@ data:
       nameservers:
         - 9.9.9.9
       base_domain: vpn.tobru.ch
+      magic_dns: true
+      extra_records:
+        - name: "pi.camper.tobru.ch"
+          type: "A"
+          value: "100.64.0.16"

headscale/statefulset.yaml

@@ -17,7 +17,7 @@ spec:
         - command:
             - headscale
             - serve
-          image: ghcr.io/juanfont/headscale:0.16.4
+          image: ghcr.io/juanfont/headscale:0.20.0
           imagePullPolicy: IfNotPresent
           env:
             - name: GIN_MODE

mosquitto/config-secret.yaml

@@ -6,13 +6,12 @@ metadata:
   namespace: mosquitto
 spec:
   encryptedData:
-    bridges.conf: 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
-    isrgrootx1.pem: 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
+    bridges.conf: AgC/FVTX4IfEOZsFMluecnEWJ8j8a32uIp/Kf1XWm3XmM0Zdry1DNZkWxOjR+YH5c47Rra+HHkBxl3mLCGPEP/qP5PqoqO5r72XyE0UXpBpYtTKXpyPB5iJvrsjVrg7fxOpLYOKnCwDCcZZ/zEMsxkHIoR9JC27JooNLZSjaCpBf4c/Bl58LI+UXAe2JF3155LKndRYbR84Ca5g3m6+YQM0BUjDvBzLN4Tr9RWXhPJvM3HEbsNWYdOMSUUFKne5CrmwpKv592qjtwB7vCy02uxabfDpB8ehvllU7CkCd44jU/2Y/Je+RIBJk/FbWRZZt4KjMHALUwaTWV/vul49+iad1seZgDgOxI9eZ2k9jKTdb5iiAzXwV1Do72LijVkDwxLiIavTkyIwIfraym6hBII+x0ykAfWbo2oQC84q6Vhnm/cATiBTWUejVKBYE4xcCBFeYrOftNzHYxLO1lninejTUmR1qf847N7vzCBh8t6uYzdRuJv38SpnhCQT5LKcsQfb765aalzk17livfjdGEKt3UIgRK8uzpZquprNN8J6wC5am4kv/fm5P7c8iNU5SbkHupVpLC/txwVJVmT7oTZp1LlgsmwOF+UAZ/Nh3uKxOIH0zqLZfaood+5WAblm7kEdmWRNBsAWGfoNHpZjfpHOcWG3yTr+Uzi4BClT+FoHdLlAFYScDMpN2hTCgF96GdpuQFILV1+lswqmH7r9e36mnA75GCqA1yplUDYeqC3nLP+BM06voQuHv0mEhPDnSpzN2n2l84t72Wo8uOzIIZULHKIJHWepUftp8o+pYbXnU4BpAIEDLtfiDl5/j8Dr3CGefgBbMAyw6hYcRWogcYnFARgnxNWYJLCjb6c63u6rGNHnUQyRzYmo5+mBwBy+5fb4+YgFodrmnFH1u/I9n5Vu6KgWYYuRVFqDXljQTki9tO1g8P9duLq8yNc/ccvPJpWkEf553PxHy1krbfWaUrnH5uZdR0jXXO7wdJL5EskznDjowillFXnOi/xBM3qKCWvdIUgrfU0+0gfO4I3/hjghIHgGOkyUuRD/3L64Dbbcblbt5pVk8pXCHJwdQCRYESOauysAx3VbyaDyIS0DF+4tub7WnIWGYm4EChBDmgKuNZlRzkq8kpV439Nk+N1N+PJEjDHIvHpi6t44NYRDWe7mzOhwX46FeYkEDw6OVKpbVJeSElDs/DVqJoJmw7HKSPLgoUNP9nQGFr2s/Gm4fhBTGp+KAkaNNfseVNEKrm1GDO4SdaTzy126xBzhAtPeTIAomuNkyXQAlOPl68ya33QqXev5FLSIq9TtLrUaxV0UbDtgkh9iBFkSpKI0PIhhHDlS9jkU57ThedmwdULoYzeY34NbJxyMnl8+D9N+olG0AJVs49Cv6addmRWpbSqxy9lv99gUVROGLi0osTCCj2a4KP52ASA7kRm6/CM149Cw5PrWqz7FegzXefJYRNyX24upNQgceiKstPIuYk9L/Xw5MbfNRMyrHeq0mPiS2XrooBwQnpqRJKPi+u0EOwGuTC5cI9EEWYdlgGuV2cEW6oFZFZsH/BbnlK9j1Y0ajE2djfbA2pHyYUfrDQA02fwNZZZiAdIaphaAODZ9Cink1DKLWpKV34gAe94k8D9krZGsryosWOH6G/5Y9IlIeQt5nGu2qGxqTBcXrknWt+WjK18uqNGpt2MIcgKg8WuUvpq90aCCh0wz8J9E1f8zV/7d8mEqBpv4hA1qszlTZSKtnl6taL5hNJqQG8bmug4KM1sJ8XKuNCshpn3S72lRypDFURGQx6j1ct4k/mvI9mLomGgQCST6NgkCNPzDPZXgmbyefFioSV4HrP3AAda9zbxMWKaJdQvgwp7tBGNIqCKruNNKdvv5VB5NqWJ4h0+uYtB+bvG+90w0JPOa6Kyugc2IZyezg/JIdwQNilaQaizenD8legPzYTMuWwwbTtvIeOzs6ri6DdbTnLnSNRMBZvsHEjkh9x8l6qtnhbwHKaGbySkhwYAkI+R8MLvOMQJ69inWNwPhbsYBlR5Jkbt7HU5TCZ/sky3yRMTRhMWBVl6jwWeQEbFfK0NiDK8UwCvk0MaRXpfBAzc8JYUjbBYma2cnXKwUtm7X4PX/WQxNnY5vTxeUFQofNds1ZiIB3A2w4T9WdwnmdxjwE+kQ1QZBesGOTI5Vn0kHqobUy/emS/z5/e+gYUqt9TpJT35MKsLzI5lz+k4n6fA3Az7enVkqcQ5nmG8l4vZoKZeriaU5HEvQQzqG8dYRZCWNsi5pS40Lo3fLoMfPwoaKz3Y0ZdzeRUMFVWV6/ivUjTvQR/MDnnLHPs8+9XUgpiyZqi++w1FYBs4KhVUZftXsYuXgwxhNvAjJjd8fxOhPJaNVE2vv1l7uCqpv8PE2vIgVXvuLDBllrMnVOfafbWyGTJnUtXqGrxlo/xJyBfgqAEFphXVDsCCmLqZ2dqENlNrBcYpJIzgZvtSgkwumkM41BjRmNxxZkb0k9zUp9Fy6xod7NqcIAmQEEE5SzZ8R4cxDMXxQTH66yPG3IRcyVHvenguh2ZQAa9FHFX4yijsPO/QEZJovACcVuFWy1C7rwfNYhq2ZvIqPDX09icYE+wq6kP43uQBRbmbDz1C2rcJ869PgOFiLcV4GPfqTsYP7ecan3Ltc6txc8JoMwZRwKlcklgHuH/R7wUyDzSbj2i1avkyzTT9CRlqNgy3kS9xsAIbkJ1bECZizGzZF5Rf3lh5SFW8WpxhrrQq/1WfVvEvNEAKrdJHAMH+B1jhgeC3o8sei/+azZyjv90LgLMm2FbaUCOcvB11qCxstrwnD3eDtPLSMBpnkoIT6LOQiGcz6AtX5zjL6MRS2jmfnJMCtRKrdJ3ymQ+TXjvt0WW2ZguS7NtSi5V3Q0EN+xDPFLROqpZ1+mPKHJmMJVQiuH/Lb/wzk1aSS4tOjVmYga60NiP3VXc0HLevwRnA/EudZxivWyUuo1FGRj0PVQoNM//JLlc5e0d4Nguo0JjRXSi/C1ZnlkShKTo6u928CFrJktyRfrj+aTBItbcs3MWE0RcjGfyAKnIJJJO489UIs7IK99b3opAmYb9RbdYbMqHI/9PRcDMbbax4BwS70+OzBsUJq8lQkipCuEMh2FrAxbZNx9RNEn7Dlw8FncpyoCGFDAr2AkksDaN2cTj3xQ6rhDIAnvkGgARO64fBYw5j794ugrAe6OuYQdyTWWinWn90E2AVwsiQwwQgtAQ6/4wJZPh1nFwE/sjfCTUicukq74alG1k6hrEJnYF7jlotO/n0Zf9ez6v/wGCtqvpqHsbK2XQJ0sF/EZMsWqvcRAWLrZeHM3IyGQgdk3ofRIxvgv1zMmVExiDW4WjQtzvqUy5Pnnup8N1NtRUx4HAZkkdzDXobRzeOJS9RGk3nyi75Nr261DeFU7FEC0RXXtOoAb8Aw+h0xV0nUX5as+nSoKN6/pTiF3mHW6mgsmx1jbitE6Z2KE+AWd1zAgXPOV4yDninpK01OWlTRRcPgrLqHjpMlF9MVsEq9wgbn6peSpKJYcwrt+sneFeGdybaA9gvTj+ozTXyWgfctvtJM0ePo7Wnb15QOUYsvjg3XUJ9M01gqMbTT+IZfgeLutxUvqutxsrYofIg8zLEX511+fN88zD19nSB/pZz2qjm+rMtkTRLku1tbcXy34OZtOBNJYTCwN7kjAs+USdEa/2K6PYcAJIl248gVTBTPYXXKyjynRls91VXfOp5YwXW9WXwCRfHWlBk6kLtsnUY+TC6hg1Yzshx+3UYgcZjt3kTTUpxz/eciVgt0PPwYkVv4DNgCbEwS7cLTGAHMJ+TwJhpERYR6xCd5hxGPvUElT/4e9OsvgfYWOFRQ0WYVfgSo4CUr+Ww==
+    isrgrootx1.pem: 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
   template:
     metadata:
       creationTimestamp: null
       name: config-secret
       namespace: mosquitto
     type: Opaque
-status: {}
 

mqttwarn/cm-transformers.yaml

@@ -26,6 +26,22 @@ data:
         return d
 
 
+    def lht52_values(topic, data, srv=None):
+        payload = ast.literal_eval(data["payload"])
+        d = dict(
+            device_id=payload["end_device_ids"]["device_id"],
+            temperature=payload["uplink_message"]["decoded_payload"]["TempC_SHT"],
+            humidity=payload["uplink_message"]["decoded_payload"]["Hum_SHT"],
+            consumed_airtime=payload["uplink_message"]["consumed_airtime"].replace("s", ""),
+            rssi=payload["uplink_message"]["rx_metadata"][0]["rssi"],
+            gateway_id=payload["uplink_message"]["rx_metadata"][0]["gateway_ids"][
+                "gateway_id"
+            ],
+        )
+        logging.debug(d)
+        return d
+
+
     def rhf1s001_values(topic, data, srv=None):
         payload = ast.literal_eval(data["payload"])
         d = dict(

mqttwarn/mqttwarn-ini.yaml

@@ -6,12 +6,11 @@ metadata:
   namespace: mqttwarn
 spec:
   encryptedData:
-    mqttwarn.ini: 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
+    mqttwarn.ini: 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
   template:
     metadata:
       creationTimestamp: null
       name: mqttwarn-ini
       namespace: mqttwarn
     type: Opaque
-status: {}
 

renovate/cronjob.yaml

@@ -12,7 +12,7 @@ spec:
           containers:
             - name: renovate
               # Update this to the latest available and then enable Renovate on the manifest
-              image: renovate/renovate:34.97.3-slim
+              image: renovate/renovate:35.2.0-slim
               # Environment Variables
               env:
                 - name: RENOVATE_PLATFORM

sealed-secrets/controller.yaml

@@ -1,4 +1,172 @@
 ---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  annotations: {}
+  labels:
+    name: sealed-secrets-controller
+  name: sealed-secrets-controller
+  namespace: sealed-secrets
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: sealed-secrets-key-admin
+subjects:
+- kind: ServiceAccount
+  name: sealed-secrets-controller
+  namespace: sealed-secrets
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  annotations: {}
+  labels:
+    name: sealed-secrets-key-admin
+  name: sealed-secrets-key-admin
+  namespace: sealed-secrets
+rules:
+- apiGroups:
+  - ""
+  resources:
+  - secrets
+  verbs:
+  - create
+  - list
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  annotations: {}
+  labels:
+    name: sealed-secrets-controller
+  name: sealed-secrets-controller
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: secrets-unsealer
+subjects:
+- kind: ServiceAccount
+  name: sealed-secrets-controller
+  namespace: sealed-secrets
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  annotations: {}
+  labels:
+    name: secrets-unsealer
+  name: secrets-unsealer
+rules:
+- apiGroups:
+  - bitnami.com
+  resources:
+  - sealedsecrets
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - bitnami.com
+  resources:
+  - sealedsecrets/status
+  verbs:
+  - update
+- apiGroups:
+  - ""
+  resources:
+  - secrets
+  verbs:
+  - get
+  - list
+  - create
+  - update
+  - delete
+  - watch
+- apiGroups:
+  - ""
+  resources:
+  - events
+  verbs:
+  - create
+  - patch
+- apiGroups:
+  - ""
+  resources:
+  - namespaces
+  verbs:
+  - get
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  annotations: {}
+  labels:
+    name: sealed-secrets-controller
+  name: sealed-secrets-controller
+  namespace: sealed-secrets
+---
+apiVersion: v1
+kind: Service
+metadata:
+  annotations: {}
+  labels:
+    name: sealed-secrets-controller
+  name: sealed-secrets-controller
+  namespace: sealed-secrets
+spec:
+  ports:
+  - port: 8080
+    targetPort: 8080
+  selector:
+    name: sealed-secrets-controller
+  type: ClusterIP
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  annotations: {}
+  labels:
+    name: sealed-secrets-service-proxier
+  name: sealed-secrets-service-proxier
+  namespace: sealed-secrets
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: sealed-secrets-service-proxier
+subjects:
+- apiGroup: rbac.authorization.k8s.io
+  kind: Group
+  name: system:authenticated
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  annotations: {}
+  labels:
+    name: sealed-secrets-service-proxier
+  name: sealed-secrets-service-proxier
+  namespace: sealed-secrets
+rules:
+- apiGroups:
+  - ""
+  resourceNames:
+  - sealed-secrets-controller
+  resources:
+  - services
+  verbs:
+  - get
+- apiGroups:
+  - ""
+  resourceNames:
+  - 'http:sealed-secrets-controller:'
+  - http:sealed-secrets-controller:http
+  - sealed-secrets-controller
+  resources:
+  - services/proxy
+  verbs:
+  - create
+  - get
+---
 apiVersion: apps/v1
 kind: Deployment
 metadata:
@@ -30,8 +198,8 @@ spec:
         command:
         - controller
         env: []
-        image: quay.io/bitnami/sealed-secrets-controller:v0.17.3
-        imagePullPolicy: Always
+        image: docker.io/bitnami/sealed-secrets-controller:v0.19.4
+        imagePullPolicy: IfNotPresent
         livenessProbe:
           httpGet:
             path: /healthz
@@ -79,165 +247,108 @@ spec:
   - name: v1alpha1
     schema:
       openAPIV3Schema:
+        description: SealedSecret is the K8s representation of a "sealed Secret" -
+          a regular k8s Secret that has been sealed (encrypted) using the controller's
+          key.
         properties:
-          spec:
+          apiVersion:
+            description: 'APIVersion defines the versioned schema of this representation
+              of an object. Servers should convert recognized schemas to the latest
+              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+            type: string
+          kind:
+            description: 'Kind is a string value representing the REST resource this
+              object represents. Servers may infer this from the endpoint the client
+              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+            type: string
+          metadata:
+            type: object
+          spec:
+            description: SealedSecretSpec is the specification of a SealedSecret
+            properties:
+              data:
+                description: Data is deprecated and will be removed eventually. Use
+                  per-value EncryptedData instead.
+                format: byte
+                type: string
+              encryptedData:
+                additionalProperties:
+                  type: string
+                type: object
+                x-kubernetes-preserve-unknown-fields: true
+              template:
+                description: Template defines the structure of the Secret that will
+                  be created from this sealed secret.
+                properties:
+                  data:
+                    additionalProperties:
+                      type: string
+                    description: Keys that should be templated using decrypted data
+                    nullable: true
+                    type: object
+                  metadata:
+                    description: 'Standard object''s metadata. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#metadata'
+                    nullable: true
+                    type: object
+                    x-kubernetes-preserve-unknown-fields: true
+                  type:
+                    description: Used to facilitate programmatic handling of secret
+                      data.
+                    type: string
+                type: object
+            required:
+            - encryptedData
             type: object
-            x-kubernetes-preserve-unknown-fields: true
           status:
-            x-kubernetes-preserve-unknown-fields: true
+            description: SealedSecretStatus is the most recently observed status of
+              the SealedSecret.
+            properties:
+              conditions:
+                description: Represents the latest available observations of a sealed
+                  secret's current state.
+                items:
+                  description: SealedSecretCondition describes the state of a sealed
+                    secret at a certain point.
+                  properties:
+                    lastTransitionTime:
+                      description: Last time the condition transitioned from one status
+                        to another.
+                      format: date-time
+                      type: string
+                    lastUpdateTime:
+                      description: The last time this condition was updated.
+                      format: date-time
+                      type: string
+                    message:
+                      description: A human readable message indicating details about
+                        the transition.
+                      type: string
+                    reason:
+                      description: The reason for the condition's last transition.
+                      type: string
+                    status:
+                      description: 'Status of the condition for a sealed secret. Valid
+                        values for "Synced": "True", "False", or "Unknown".'
+                      type: string
+                    type:
+                      description: 'Type of condition for a sealed secret. Valid value:
+                        "Synced"'
+                      type: string
+                  required:
+                  - status
+                  - type
+                  type: object
+                type: array
+              observedGeneration:
+                description: ObservedGeneration reflects the generation most recently
+                  observed by the sealed-secrets controller.
+                format: int64
+                type: integer
+            type: object
+        required:
+        - spec
         type: object
     served: true
     storage: true
     subresources:
       status: {}
----
-apiVersion: v1
-kind: Service
-metadata:
-  annotations: {}
-  labels:
-    name: sealed-secrets-controller
-  name: sealed-secrets-controller
-  namespace: sealed-secrets
-spec:
-  ports:
-  - port: 8080
-    targetPort: 8080
-  selector:
-    name: sealed-secrets-controller
-  type: ClusterIP
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
-  annotations: {}
-  labels:
-    name: sealed-secrets-service-proxier
-  name: sealed-secrets-service-proxier
-  namespace: sealed-secrets
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: Role
-  name: sealed-secrets-service-proxier
-subjects:
-- apiGroup: rbac.authorization.k8s.io
-  kind: Group
-  name: system:authenticated
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
-metadata:
-  annotations: {}
-  labels:
-    name: sealed-secrets-service-proxier
-  name: sealed-secrets-service-proxier
-  namespace: sealed-secrets
-rules:
-- apiGroups:
-  - ""
-  resourceNames:
-  - 'http:sealed-secrets-controller:'
-  - sealed-secrets-controller
-  resources:
-  - services/proxy
-  verbs:
-  - create
-  - get
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
-  annotations: {}
-  labels:
-    name: sealed-secrets-controller
-  name: sealed-secrets-controller
-  namespace: sealed-secrets
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: Role
-  name: sealed-secrets-key-admin
-subjects:
-- kind: ServiceAccount
-  name: sealed-secrets-controller
-  namespace: sealed-secrets
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
-metadata:
-  annotations: {}
-  labels:
-    name: sealed-secrets-key-admin
-  name: sealed-secrets-key-admin
-  namespace: sealed-secrets
-rules:
-- apiGroups:
-  - ""
-  resources:
-  - secrets
-  verbs:
-  - create
-  - list
----
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  annotations: {}
-  labels:
-    name: sealed-secrets-controller
-  name: sealed-secrets-controller
-  namespace: sealed-secrets
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  annotations: {}
-  labels:
-    name: secrets-unsealer
-  name: secrets-unsealer
-rules:
-- apiGroups:
-  - bitnami.com
-  resources:
-  - sealedsecrets
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - bitnami.com
-  resources:
-  - sealedsecrets/status
-  verbs:
-  - update
-- apiGroups:
-  - ""
-  resources:
-  - secrets
-  verbs:
-  - get
-  - create
-  - update
-  - delete
-- apiGroups:
-  - ""
-  resources:
-  - events
-  verbs:
-  - create
-  - patch
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  annotations: {}
-  labels:
-    name: sealed-secrets-controller
-  name: sealed-secrets-controller
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: secrets-unsealer
-subjects:
-- kind: ServiceAccount
-  name: sealed-secrets-controller
-  namespace: sealed-secrets

stakater-reloader/reloader.yaml

@@ -126,7 +126,7 @@ spec:
         version: v0.0.104
     spec:
       containers:
-      - image: "stakater/reloader:v0.0.129"
+      - image: "stakater/reloader:v1.0.15"
         imagePullPolicy: IfNotPresent
         name: reloader-reloader
 

tobru-ch/Caddyfile

@@ -1,4 +1,5 @@
 http://:8080 {
-	header content-type "application/jrd+json; charset=utf-8"
-	respond "{\"subject\":\"acct:tobru@mstdn.social\",\"aliases\":[\"https://mstdn.social/@tobru\",\"https://mstdn.social/users/tobru\"],\"links\":[{\"rel\":\"http://webfinger.net/rel/profile-page\",\"type\":\"text/html\",\"href\":\"https://mstdn.social/@tobru\"},{\"rel\":\"self\",\"type\":\"application/activity+json\",\"href\":\"https://mstdn.social/users/tobru\"},{\"rel\":\"http://ostatus.org/schema/1.0/subscribe\",\"template\":\"https://mstdn.social/authorize_interaction?uri={uri}\"}]}"
+	reverse_proxy https://social.tobru.ch {
+		header_up Host "social.tobru.ch"
+	}
 }

tobru-ch/deployment.yaml

@@ -24,7 +24,7 @@ spec:
         component: ghost
     spec:
       containers:
-      - image: ghost:5.28.0-alpine
+      - image: ghost:5.38.0-alpine
         imagePullPolicy: IfNotPresent
         name: ghost
         env:
@@ -60,7 +60,7 @@ spec:
         - name: data
           mountPath: /var/lib/ghost/content
           subPath: ghost
-      - image: docker.io/library/caddy:2.6.2-alpine
+      - image: docker.io/library/caddy:2.6.4-alpine
         imagePullPolicy: IfNotPresent
         name: caddy
         ports: