Update image kyverno to v3.3.3

kubernetes/apps/default/sabnzbd/app/helmrelease.yaml

@@ -75,9 +75,12 @@ spec:
               allowPrivilegeEscalation: false
               readOnlyRootFilesystem: true
               capabilities: { drop: ["ALL"] }
+            resources:
+              requests:
+                cpu: 100m
+              limits:
+                memory: 16Gi
     defaultPodOptions:
-      nodeSelector: # ~~testing~~
-        kubernetes.io/hostname: gandalf-01
       securityContext:
         runAsNonRoot: true
         runAsUser: 568

kubernetes/apps/observability/grafana/app/helmrelease.yaml

@@ -196,6 +196,9 @@ spec:
         cert-manager:
           url: https://gitlab.com/uneeq-oss/cert-manager-mixin/-/raw/master/dashboards/cert-manager.json?ref_type=heads
           datasource: Prometheus
+        dcgm-exporter:
+          url: https://raw.githubusercontent.com/NVIDIA/dcgm-exporter/main/grafana/dcgm-exporter-dashboard.json
+          datasource: Prometheus
         external-secrets:
           url: https://raw.githubusercontent.com/external-secrets/external-secrets/main/docs/snippets/dashboard.json
           datasource: Prometheus

kubernetes/apps/qbittorrent/qbittorrent/app/helmrelease.yaml

@@ -66,9 +66,15 @@ spec:
               capabilities:
                 drop:
                   - ALL
+            resources:
+              requests:
+                cpu: 100m
+                memory: 1024Mi
+              limits:
+                memory: 8Gi
     defaultPodOptions:
       nodeSelector: # ~~testing~~
-        kubernetes.io/hostname: gandalf-01
+        kubernetes.io/hostname: shadowfax-01
       securityContext:
         runAsNonRoot: true
         runAsUser: 568

shell.nix

@@ -15,6 +15,8 @@ pkgs.mkShell {
     gitleaks
     helmfile
     k9s
+    krew
+    kubectl
     kubevirt
     kubernetes-helm
     pre-commit
@@ -23,6 +25,5 @@ pkgs.mkShell {
     mqttui
     kustomize
     yq-go
-    go-task
   ];
 }