upgrade packages

namespaces/cert-manager/cert-manager-chart.yml

@@ -8,7 +8,7 @@ spec:
   targetNamespace: cert-manager
   repo: https://charts.jetstack.io
   # https://artifacthub.io/packages/helm/cert-manager/cert-manager
-  version: 1.16.2
+  version: 1.17.1
   valuesContent: |-
     prometheus:
       enabled: true

namespaces/git/gitea-chart.yml

@@ -19,6 +19,8 @@ spec:
       requests:
         cpu: 200m
         memory: 256Mi
+    image:
+      tag: 1.23.4
     gitea:
       admin:
         existingSecret: gitea-admin-secret
@@ -33,6 +35,10 @@ spec:
           DISABLE_GRAVATAR: true
         actions:
           ENABLED: true
+    actions:
+      enabled: true
+      provisioning:
+        enabled: true
     service:
       ssh:
         port: 22

namespaces/ingress-nginx/ingress-nginx-chart.yml

@@ -8,7 +8,7 @@ spec:
   targetNamespace: ingress-nginx
   repo: https://kubernetes.github.io/ingress-nginx
   # https://artifacthub.io/packages/helm/ingress-nginx/ingress-nginx
-  version: 4.11.3
+  version: 4.12.0
   valuesContent: |-
     controller:
       metrics:
@@ -24,5 +24,7 @@ spec:
         limits:
           cpu: 200m
           memory: 200Mi
+      extraArgs:
+        enable-ssl-passthrough: "true"
     tcp:
       22: git/gitea-ssh:22

namespaces/kube-system/helm-controller.yaml

@@ -140,6 +140,9 @@ spec:
                       type: integer
                     nullable: true
                     type: array
+                  supplementalGroupsPolicy:
+                    nullable: true
+                    type: string
                   sysctls:
                     items:
                       properties:
@@ -373,6 +376,6 @@ spec:
       containers:
       - command:
         - helm-controller
-        image: rancher/helm-controller:v0.16.5
+        image: rancher/helm-controller:v0.16.6
         name: helm-controller
 ---

namespaces/kube-system/nodelocaldns.yml

@@ -138,7 +138,7 @@ spec:
         operator: "Exists"
       containers:
       - name: node-cache
-        image: registry.k8s.io/dns/k8s-dns-node-cache:1.24.0
+        image: registry.k8s.io/dns/k8s-dns-node-cache:1.25.0
         resources:
           requests:
             cpu: 25m

namespaces/longhorn-system/longhorn-chart.yml

@@ -7,7 +7,8 @@ spec:
   chart: longhorn
   targetNamespace: longhorn-system
   repo: https://charts.longhorn.io
-  version: 1.7.2
+  # https://artifacthub.io/packages/helm/longhorn/longhorn
+  version: 1.8.0
   valuesContent: |-
     ingress:
       enabled: true

namespaces/monitoring/kube-prometheus-stack-chart.yml

@@ -8,7 +8,7 @@ spec:
   targetNamespace: monitoring
   repo: https://prometheus-community.github.io/helm-charts
   # https://artifacthub.io/packages/helm/prometheus-community/kube-prometheus-stack
-  version: 67.5.0
+  version: 69.4.1
   valuesContent: |-
     grafana:
       defaultDashboardsTimezone: "US/Eastern"

namespaces/monitoring/loki-chart.yml

@@ -8,35 +8,53 @@ spec:
   targetNamespace: monitoring
   repo: https://grafana.github.io/helm-charts
   # https://artifacthub.io/packages/helm/grafana/loki
-  version: 6.24.0
+  version: 6.27.0
   valuesContent: |-
-    deploymentMode: SingleBinary
     loki:
-      auth_enabled: false
       commonConfig:
         replication_factor: 1
-      serviceMonitor:
-        namespaceSelector:
-          any: true
-      storage:
-        type: 'filesystem'
       schemaConfig:
         configs:
-        - from: 2024-01-01
+          - from: "2024-04-01"
-          store: tsdb
+            store: tsdb
-          index:
+            object_store: s3
-            prefix: loki_index_
+            schema: v13
-            period: 24h
+            index:
-          object_store: filesystem
+              prefix: loki_index_
-          schema: v13
+              period: 24h
+      pattern_ingester:
+          enabled: true
+      limits_config:
+        allow_structured_metadata: true
+        volume_enabled: true
+      ruler:
+        enable_api: true
+    minio:
+      enabled: true
+    deploymentMode: SingleBinary
     singleBinary:
       replicas: 1
-      persistence:
-        storageClass: longhorn
-        size: 64Gi
-    read:
-      replicas: 0
     backend:
       replicas: 0
+    read:
+      replicas: 0
     write:
       replicas: 0
+    ingester:
+      replicas: 0
+    querier:
+      replicas: 0
+    queryFrontend:
+      replicas: 0
+    queryScheduler:
+      replicas: 0
+    distributor:
+      replicas: 0
+    compactor:
+      replicas: 0
+    indexGateway:
+      replicas: 0
+    bloomCompactor:
+      replicas: 0
+    bloomGateway:
+      replicas: 0