Update image kyverno to v3.3.3

.vscode/settings.json

@@ -5,8 +5,7 @@
       "**/ansible/**/*.yaml": "ansible",
       "**/ansible/**/*.sops.yaml": "yaml",
       "**/ansible/**/inventory/**/*.yaml": "yaml",
-    "**/kubernetes/**/*.sops.toml": "plaintext",
-    "*.hujson": "jsonc"
+      "**/kubernetes/**/*.sops.toml": "plaintext"
   },
   "material-icon-theme.folders.associations": {
       ".taskfiles": "utils",
@@ -21,21 +20,13 @@
       "kube-system": "kubernetes",
       "monitoring": "event",
       "networking": "connection",
-    "rook-ceph": "dump"
+      "rook-ceph": "dump",
   },
   "yaml.schemaStore.enable": true,
   "yaml.schemas": {
     "ansible": "ansible/**/*.yaml",
     "kubernetes": "kubernetes/**/*.yaml"
   },
-  "json.schemas": [
-    {
-      "fileMatch": ["*.hujson"],
-      "schema": {
-        "allowTrailingCommas": true
-      }
-    }
-  ],
   "editor.fontFamily": "FiraCode Nerd Font",
   "editor.fontLigatures": true,
   "editor.bracketPairColorization.enabled": true,
@@ -44,7 +35,9 @@
   "editor.guides.highlightActiveBracketPair": true,
   "editor.hover.delay": 1500,
   "editor.stickyScroll.enabled": false,
-  "editor.rulers": [100],
+  "editor.rulers": [
+    100
+  ],
   "explorer.autoReveal": false,
   "files.trimTrailingWhitespace": true,
   "ansible.python.interpreterPath": "/usr/bin/python3",
@@ -53,5 +46,5 @@
   "prettier.quoteProps": "preserve",
   "[jsonc]": {
     "editor.defaultFormatter": "esbenp.prettier-vscode"
-  }
+  },
 }

kubernetes/apps/qbittorrent/cross-seed/app/externalsecret.yaml

@@ -35,8 +35,8 @@ spec:
             skipRecheck: true,
             sonarr: ["http://sonarr.default.svc.cluster.local/?apikey={{ .SONARR_API_KEY }}"],
             torrentDir: "/qbittorrent/qBittorrent/BT_backup",
-            torznab: []
-            /* torznab: [
+            // torznab: []
+            torznab: [
                   6,  // ANT
                   8,  // BLU
                   9,  // TL
@@ -44,7 +44,6 @@ spec:
                   12, // FNP
                   14, // TD
             ].map(i => `http://prowlarr.default.svc.cluster.local/$${i}/api?apikey={{ .PROWLARR_API_KEY }}`),
-            */
           };
   dataFrom:
     - extract:

shell.nix

@@ -3,11 +3,6 @@
 pkgs.mkShell {
   # Enable experimental features without having to specify the argument
   NIX_CONFIG = "experimental-features = nix-command flakes";
-  shellHook = ''
-    export TMP=$(mktemp -d "/tmp/nix-shell-XXXXXX")
-    export TEMP=$TMP
-    export TMPDIR=$TMP
-  '';
 
   nativeBuildInputs = with pkgs; [
     fluxcd