Update image ghcr.io/open-webui/open-webui to v0.3.32

kubernetes/apps/ai/open-webui/app/helmrelease.yaml

@@ -33,7 +33,7 @@ spec:
           app:
             image:
               repository: ghcr.io/open-webui/open-webui
-              tag: v0.3.31
+              tag: 0.3.32
             env:
               - name: OLLAMA_BASE_URL
                 value: http://ollama.ai.svc.cluster.local:11434

kubernetes/apps/observability/victoria-metrics/cluster/kustomization.yaml

@@ -3,5 +3,5 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
-  # - vmalert.yaml
+  - vmalert.yaml
   - vmsingle.yaml

kubernetes/apps/observability/victoria-metrics/cluster/vmalert.yaml

@@ -3,30 +3,34 @@
 apiVersion: operator.victoriametrics.com/v1beta1
 kind: VMAlert
 metadata:
-  name: cluster
+  name: victoria
 spec:
-  datasource:
-    url: http://vmsingle-cluster.observability.svc:8429
   evaluationInterval: 1m
+  useStrictSecurity: true
+  selectAllByDefault: true
+  datasource:
+    url: http://vmsingle-victoria.observability.svc:8429
   notifiers:
     - url: http://alertmanager.observability.svc:9093
-  # remoteRead:
-  #   url: http://vmsingle-cluster.observability.svc:8429
-  # remoteWrite:
-  #   url: http://vmsingle-cluster.observability.svc:8429
-  replicaCount: 1
+  remoteRead:
+    url: http://vmsingle-victoria.observability.svc:8429
+  remoteWrite:
+    url: http://vmsingle-victoria.observability.svc:8429
+  securityContext:
+    runAsUser: 65534
+    runAsGroup: 65534
+    runAsNonRoot: true
+    fsGroup: 65534
   resources:
     requests:
       cpu: 3m
     limits:
       memory: 128Mi
-  selectAllByDefault: true
   topologySpreadConstraints:
     - maxSkew: 1
       topologyKey: kubernetes.io/hostname
       whenUnsatisfiable: DoNotSchedule
       labelSelector:
         matchLabels:
-          app.kubernetes.io/instance: cluster
+          app.kubernetes.io/instance: victoria
           app.kubernetes.io/name: vmalert
-  useStrictSecurity: true

kubernetes/apps/observability/victoria-metrics/cluster/vmsingle.yaml

@@ -12,7 +12,12 @@ spec:
     dedup.minScrapeInterval: 10s
     maxLabelsPerTimeseries: "40"
     search.minStalenessInterval: 5m
-    # vmalert.proxyURL: http://vmalert-cluster.observability.svc:8080
+    vmalert.proxyURL: http://vmalert-victoria.observability.svc:8080
+  securityContext:
+    runAsUser: 65534
+    runAsGroup: 65534
+    runAsNonRoot: true
+    fsGroup: 65534
   resources:
     requests:
       cpu: 5m