Update dependency HelmRelease to helm.toolkit.fluxcd.io/v2

Reviewed-on: jahanson/homelab#286

.archive/kubernetes/home-automation/home-assistant/app/helmrelease.yaml

@@ -1,6 +1,6 @@
 ---
 # yaml-language-server: $schema=https://raw.githubusercontent.com/bjw-s/helm-charts/main/charts/other/app-template/schemas/helmrelease-helm-v2beta2.schema.json
-apiVersion: helm.toolkit.fluxcd.io/v2
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
   name: home-assistant
@@ -45,7 +45,7 @@ spec:
           app:
             image:
               repository: ghcr.io/home-assistant/home-assistant
-              tag: 2024.5.4
+              tag: 2024.5.5
             env:
               TZ: America/Chicago
               HASS_HTTP_TRUSTED_PROXY_1: 10.244.0.0/16

.archive/kubernetes/home-automation/matter-server/app/helmrelease.yaml

@@ -1,6 +1,6 @@
 ---
 # yaml-language-server: $schema=https://raw.githubusercontent.com/bjw-s/helm-charts/main/charts/other/app-template/schemas/helmrelease-helm-v2beta2.schema.json
-apiVersion: helm.toolkit.fluxcd.io/v2
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
   name: &app matter-server

.archive/kubernetes/media/immich/app/helmrelease.yaml

@@ -1,6 +1,6 @@
 ---
 # yaml-language-server: $schema=https://raw.githubusercontent.com/bjw-s/helm-charts/main/charts/other/app-template/schemas/helmrelease-helm-v2beta2.schema.json
-apiVersion: helm.toolkit.fluxcd.io/v2
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
   name: &name immich
@@ -33,7 +33,7 @@ spec:
           app:
             image:
               repository: ghcr.io/immich-app/immich-server
-              tag: v1.103.1
+              tag: v1.105.1
             command: /bin/sh
             args:
               - ./start-server.sh

.archive/kubernetes/media/immich/app/machine-learning/helmrelease.yaml

@@ -1,6 +1,6 @@
 ---
 # yaml-language-server: $schema=https://raw.githubusercontent.com/bjw-s/helm-charts/main/charts/other/app-template/schemas/helmrelease-helm-v2beta2.schema.json
-apiVersion: helm.toolkit.fluxcd.io/v2
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
   name: immich-machine-learning
@@ -37,7 +37,7 @@ spec:
           app:
             image:
               repository: ghcr.io/immich-app/immich-machine-learning
-              tag: v1.103.1
+              tag: v1.105.1
             resources:
               requests:
                 cpu: 15m

.archive/kubernetes/media/immich/app/microservices/helmrelease.yaml

@@ -1,6 +1,6 @@
 ---
 # yaml-language-server: $schema=https://raw.githubusercontent.com/bjw-s/helm-charts/main/charts/other/app-template/schemas/helmrelease-helm-v2beta2.schema.json
-apiVersion: helm.toolkit.fluxcd.io/v2
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
   name: immich-microservices
@@ -37,7 +37,7 @@ spec:
           app:
             image:
               repository: ghcr.io/immich-app/immich-server
-              tag: v1.103.1
+              tag: v1.105.1
             command: /bin/sh
             args:
               - ./start-microservices.sh

.archive/kubernetes/media/immich/app/service.yaml

@@ -1,3 +1,4 @@
+---
 apiVersion: v1
 kind: Service
 metadata:
@@ -9,10 +10,10 @@ metadata:
 spec:
   internalTrafficPolicy: Cluster
   ports:
-  - name: postgres
+    - name: postgres
-    port: 5432
+      port: 5432
-    protocol: TCP
+      protocol: TCP
-    targetPort: postgres
+      targetPort: postgres
   selector:
     postgres-operator.crunchydata.com/cluster: immich
     postgres-operator.crunchydata.com/role: master

.taskfiles/rook/WipeDiskJob.tmpl.yaml

@@ -13,7 +13,7 @@ spec:
       nodeName: ${node}
       containers:
         - name: disk-wipe
-          image: ghcr.io/onedr0p/alpine:3.17.3@sha256:999384960b6114496a5e4036e945141c205d064ce23b87326bd3f8d878c5a9d4
+          image: docker.io/library/alpine:3.20.0
           securityContext:
             privileged: true
           resources: {}

.taskfiles/rook/WipeRookDataJob.tmpl.yaml

@@ -13,7 +13,7 @@ spec:
       nodeName: ${node}
       containers:
         - name: disk-wipe
-          image: ghcr.io/onedr0p/alpine:3.17.3@sha256:999384960b6114496a5e4036e945141c205d064ce23b87326bd3f8d878c5a9d4
+          image: docker.io/library/alpine:3.20.0
           securityContext:
             privileged: true
           resources: {}

.taskfiles/rook/pod.yaml

@@ -5,7 +5,7 @@ metadata:
 spec:
   containers:
     - name: disk-wipe
-      image: ghcr.io/onedr0p/alpine:3.17.3@sha256:999384960b6114496a5e4036e945141c205d064ce23b87326bd3f8d878c5a9d4
+      image: docker.io/library/alpine:3.20.0
       securityContext:
         privileged: true
       resources: {}

Taskfile.yaml

@@ -89,7 +89,7 @@ tasks:
             "containers": [
               {
                 "name": "debug",
-                "image": "docker.io/library/alpine:3.19.1",
+                "image": "docker.io/library/alpine:3.20.0",
                 "command": ["/bin/ash"],
                 "stdin": true,
                 "stdinOnce": true,

kubernetes/apps/database/crunchy-postgres-operator/operator/helmrelease.yaml

@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: pgo
-      version: 5.5.1
+      version: 5.5.2
       sourceRef:
         kind: HelmRepository
         name: crunchydata

kubernetes/apps/home-automation/kustomization.yaml

@@ -6,6 +6,4 @@ resources:
   # Pre Flux-Kustomizations
   - ./namespace.yaml
   # Flux-Kustomizations
-  - ./home-assistant/ks.yaml
-  - ./matter-server/ks.yaml
   - ./mosquitto/ks.yaml

kubernetes/apps/kube-system/fstrim/app/helmrelease.yaml

@@ -28,7 +28,7 @@ spec:
         type: cronjob
         cronjob:
           schedule: "@weekly"
-          parallelism: 6 # Set to my total number of nodes
+          parallelism: 1 # Set to my total number of nodes
         containers:
           app:
             image:

kubernetes/apps/kube-system/kubelet-csr-approver/app/helmrelease.yaml

@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: kubelet-csr-approver
-      version: 1.2.0
+      version: 1.2.1
       sourceRef:
         kind: HelmRepository
         name: postfinance

kubernetes/apps/kube-system/kustomization.yaml

@@ -17,3 +17,4 @@ resources:
   - ./node-feature-discovery/ks.yaml
   - ./reloader/ks.yaml
   - ./spegel/ks.yaml
+  - ./zfs-scrub/ks.yaml

kubernetes/apps/kube-system/node-feature-discovery/app/helmrelease.yaml

@@ -10,7 +10,7 @@ spec:
   chart:
     spec:
       chart: node-feature-discovery
-      version: 0.15.4
+      version: 0.16.0
       sourceRef:
         kind: HelmRepository
         name: kubernetes-sigs-nfd

kubernetes/apps/kube-system/reloader/app/helmrelease.yaml

@@ -10,7 +10,7 @@ spec:
   chart:
     spec:
       chart: reloader
-      version: 1.0.97
+      version: 1.0.98
       sourceRef:
         kind: HelmRepository
         name: stakater

kubernetes/apps/kube-system/zfs-scrub/app/helmrelease.yaml

@@ -0,0 +1,85 @@
+---
+# yaml-language-server: $schema=https://raw.githubusercontent.com/bjw-s/helm-charts/main/charts/other/app-template/schemas/helmrelease-helm-v2beta2.schema.json
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: &app zfs-scrub
+spec:
+  interval: 30m
+  chart:
+    spec:
+      chart: app-template
+      version: 3.1.0
+      sourceRef:
+        kind: HelmRepository
+        name: bjw-s
+        namespace: flux-system
+  install:
+    remediation:
+      retries: 3
+  upgrade:
+    cleanupOnFail: true
+    remediation:
+      retries: 3
+      strategy: rollback
+  values:
+    controllers:
+      kubanetics:
+        type: cronjob
+        cronjob:
+          schedule: "@weekly"
+          parallelism: 1 # Set to my total number of nodes
+        containers:
+          app:
+            image:
+              repository: ghcr.io/onedr0p/kubanetics
+              tag: 2024.5.4@sha256:220ceb1bc1adca0b3ac45cedb3682091ff6f7f3725769fc22decbd3bb2091478
+            env:
+              SCRIPT_NAME: zfs-scrub.sh
+            probes:
+              liveness:
+                enabled: false
+              readiness:
+                enabled: false
+              startup:
+                enabled: false
+            resources:
+              requests:
+                cpu: 25m
+              limits:
+                memory: 128Mi
+            securityContext:
+              privileged: true
+        pod:
+          hostNetwork: true
+          hostPID: true
+          topologySpreadConstraints:
+            - maxSkew: 1
+              topologyKey: kubernetes.io/hostname
+              whenUnsatisfiable: DoNotSchedule
+              labelSelector:
+                matchLabels:
+                  app.kubernetes.io/name: *app
+    persistence:
+      zfs-scrub:
+        type: configMap
+        name: zfs-scrub-configmap
+        defaultMode: 0775
+        globalMounts:
+          - path: /app/zfs-scrub.sh
+            subPath: zfs-scrub.sh
+            readOnly: true
+      procfs:
+        type: hostPath
+        hostPath: /proc
+        hostPathType: Directory
+        globalMounts:
+          - path: /host/proc
+            readOnly: true
+      netfs:
+        type: hostPath
+        hostPath: /sys
+        hostPathType: Directory
+        globalMounts:
+          - path: /host/net
+            readOnly: true

kubernetes/apps/kube-system/zfs-scrub/app/kustomization.yaml

@@ -0,0 +1,12 @@
+---
+# yaml-language-server: $schema=https://json.schemastore.org/kustomization
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ./helmrelease.yaml
+configMapGenerator:
+  - name: zfs-scrub-configmap
+    files:
+      - zfs-scrub.sh=./resources/zfs-scrub.sh
+generatorOptions:
+  disableNameSuffixHash: true

kubernetes/apps/kube-system/zfs-scrub/app/resources/zfs-scrub.sh

@@ -0,0 +1,20 @@
+#!/usr/bin/env bash
+KUBELET_BIN="/usr/local/bin/kubelet"
+KUBELET_PID="$(pgrep -f $KUBELET_BIN)"
+ZPOOL="nahar"
+
+if [ -z "${KUBELET_PID}" ]; then
+    echo "kubelet not found"
+    exit 1
+fi
+
+# Enter namespaces and run commands
+nsrun() {
+    nsenter \
+        --mount="/host/proc/${KUBELET_PID}/ns/mnt" \
+        --net="/host/proc/${KUBELET_PID}/ns/net" \
+        -- bash -c "$1"
+}
+
+# Scrub filesystems
+nsrun "zpool scrub ${ZPOOL}"

kubernetes/apps/kube-system/zfs-scrub/ks.yaml

@@ -0,0 +1,21 @@
+---
+# yaml-language-server: $schema=https://ks.hsn.dev/kustomize.toolkit.fluxcd.io/kustomization_v1.json
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: &app zfs-scrub
+  namespace: flux-system
+spec:
+  targetNamespace: kube-system
+  commonMetadata:
+    labels:
+      app.kubernetes.io/name: *app
+  path: ./kubernetes/apps/kube-system/zfs-scrub/app
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: homelab
+  wait: false
+  interval: 30m
+  retryInterval: 1m
+  timeout: 5m

kubernetes/apps/kubevirt/common/storageprofile.yml

@@ -9,14 +9,18 @@ metadata:
     app.kubernetes.io/managed-by: cdi-controller
     cdi.kubevirt.io: ""
   name: openebs-zfs
-spec: {}
+spec:
+  claimPropertySets:
+    - accessModes:
+        - ReadWriteOnce
+      volumeMode: Block
 status:
+  claimPropertySets:
+    - accessModes:
+        - ReadWriteOnce
+      volumeMode: Block
   cloneStrategy: snapshot
   dataImportCronSourceFormat: pvc
   provisioner: zfs.csi.openebs.io
   snapshotClass: openebs-zfs
   storageClass: openebs-zfs
-  claimPropertySets:
-    - volumeMode: Block
-      accessModes:
-        - "ReadWriteOnce"

kubernetes/apps/kubevirt/vms/fj-runner-01.yaml

@@ -20,7 +20,7 @@ spec:
         devices:
           disks:
             - disk:
-                bus: virtio
+                bus: sata
               name: disk1
             - cdrom:
                 bus: sata

kubernetes/apps/kubevirt/vms/fj-runner-02-disk1.yaml

@@ -1,15 +1,12 @@
-# yaml-language-server: $schema=https://ks.hsn.dev/cdi.kubevirt.io/datavolume_v1beta1.json
+---
-apiVersion: cdi.kubevirt.io/v1beta1
+apiVersion: v1
-kind: DataVolume
+kind: PersistentVolumeClaim
 metadata:
-  name: "fj-runner-02-disk1"
+  name: fj-runner-02-disk1
 spec:
-  storage:
+  accessModes:
-    resources:
+    - ReadWriteOnce
-      requests:
+  resources:
-        storage: 80Gi
+    requests:
-    storageClassName: "openebs-zfs"
+      storage: 80Gi
-    accessModes:
+  storageClassName: openebs-zfs
-      - "ReadWriteOnce"
-  source:
-    blank: {}

kubernetes/apps/kubevirt/vms/fj-runner-02.yaml

@@ -20,7 +20,7 @@ spec:
         devices:
           disks:
             - disk:
-                bus: virtio
+                bus: sata
               name: disk1
             - cdrom:
                 bus: sata
@@ -46,9 +46,9 @@ spec:
         kubernetes.io/hostname: shadowfax
       priorityClassName: vm-standard
       volumes:
-        - dataVolume:
+        - name: disk1
-            name: fj-runner-02-disk1
+          persistentVolumeClaim:
-          name: disk1
+            claimName: fj-runner-02-disk1
         - dataVolume:
             name: "nixos-minimal"
           name: nixosiso

kubernetes/apps/kyverno/kyverno/app/helmrelease.yaml

@@ -10,7 +10,7 @@ spec:
   chart:
     spec:
       chart: kyverno
-      version: 3.2.2
+      version: 3.2.3
       sourceRef:
         kind: HelmRepository
         name: kyverno

kubernetes/apps/network/cloudflared/app/helmrelease.yaml

@@ -36,7 +36,7 @@ spec:
           app:
             image:
               repository: docker.io/cloudflare/cloudflared
-              tag: 2024.4.1@sha256:fcfafd14a658837c49a794671d5bec2c9e4227730abdc29db7c066f4381acba4
+              tag: 2024.5.0@sha256:5d5f70a59d5e124d4a1a747769e0d27431861877860ca31deaad41b09726ca71
             env:
               NO_AUTOUPDATE: "true"
               TUNNEL_CRED_FILE: /etc/cloudflared/creds/credentials.json

kubernetes/apps/observability/gatus/app/helmrelease.yaml

@@ -31,7 +31,7 @@ spec:
           init-config:
             image:
               repository: ghcr.io/kiwigrid/k8s-sidecar
-              tag: 1.27.1@sha256:df71eab1466c67b84e46fa9cd2d84738372377971d44dbb8699ab4483278c839
+              tag: 1.27.2@sha256:e3280f62096bee918a605658505baa8878223b483053396f769bd9f15a2876c0
             env:
               FOLDER: /config
               LABEL: gatus.io/enabled

kubernetes/apps/observability/kube-prometheus-stack/app/helmrelease.yaml

@@ -10,7 +10,7 @@ spec:
   chart:
     spec:
       chart: kube-prometheus-stack
-      version: 58.6.0
+      version: 59.0.0
       sourceRef:
         kind: HelmRepository
         name: prometheus-community

kubernetes/apps/observability/loki/app/helmrelease.yaml

@@ -10,7 +10,7 @@ spec:
   chart:
     spec:
       chart: loki
-      version: 6.5.2
+      version: 6.6.1
       sourceRef:
         kind: HelmRepository
         name: grafana

kubernetes/apps/qbittorrent/qbittorrent/app/helmrelease.yaml

@@ -38,7 +38,7 @@ spec:
             nameOverride: qbittorrent
             image:
               repository: ghcr.io/onedr0p/qbittorrent
-              tag: 4.6.4@sha256:53ead5ab43027d04efc5d52740aa02308a88d6b4a6eaa90cf6fd2e94fc11ba17
+              tag: 4.6.5@sha256:c019af23966ebafcaf1713d4553bc043246858b711a7d57d8bee358a89990a3e
             env:
               UMASK: "022"
               QBITTORRENT__PORT: &port 8080

kubernetes/bootstrap/flux/kustomization.yaml

@@ -3,7 +3,7 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
-  - github.com/fluxcd/flux2/manifests/install?ref=v2.2.3
+  - github.com/fluxcd/flux2/manifests/install?ref=v2.3.0
 patches:
   - patch: |-
       $patch: delete

kubernetes/bootstrap/talos/apps/helmfile.yaml

@@ -23,7 +23,7 @@ releases:
   - name: kubelet-csr-approver
     namespace: kube-system
     chart: postfinance/kubelet-csr-approver
-    version: 1.2.0
+    version: 1.2.1
     values: ["../../../apps/kube-system/kubelet-csr-approver/app/helm-values.yaml"]
     needs: ["cilium"]
   - name: spegel

kubernetes/flux/config/flux.yaml

@@ -9,7 +9,7 @@ spec:
   interval: 10m
   url: oci://ghcr.io/fluxcd/flux-manifests
   ref:
-    tag: v2.2.3
+    tag: v2.3.0
 ---
 # yaml-language-server: $schema=https://raw.githubusercontent.com/fluxcd-community/flux2-schemas/main/kustomization-kustomize-v1.json
 apiVersion: kustomize.toolkit.fluxcd.io/v1

kubernetes/tools/wipeone.yaml

@@ -9,7 +9,7 @@ spec:
   nodeName: shadowfax
   containers:
     - name: disk-wipe
-      image: docker.io/library/alpine:3.19.1
+      image: docker.io/library/alpine:3.20.0
       securityContext:
         privileged: true
       resources: {}

kubernetes/tools/wiperook.yaml

@@ -9,7 +9,7 @@ spec:
   nodeName: talos-fki-fmf
   containers:
     - name: disk-wipe
-      image: docker.io/library/alpine:3.19.1
+      image: docker.io/library/alpine:3.20.0
       securityContext:
         privileged: true
       resources: {}
@@ -46,7 +46,7 @@ spec:
   nodeName: talos-xuc-f2e
   containers:
     - name: disk-wipe
-      image: docker.io/library/alpine:3.19.1
+      image: docker.io/library/alpine:3.20.0
       securityContext:
         privileged: true
       resources: {}
@@ -83,7 +83,7 @@ spec:
   nodeName: talos-opy-6ij
   containers:
     - name: disk-wipe
-      image: docker.io/library/alpine:3.19.1
+      image: docker.io/library/alpine:3.20.0
       securityContext:
         privileged: true
       resources: {}