Update image kyverno to v3.3.3

.vscode/settings.json

@@ -1,32 +1,41 @@
 {
   "ansible.validation.lint.arguments": "-c .ansible-lint",
   "files.associations": {
-      "*.json5": "jsonc",
+    "*.json5": "jsonc",
-      "**/ansible/**/*.yaml": "ansible",
+    "**/ansible/**/*.yaml": "ansible",
-      "**/ansible/**/*.sops.yaml": "yaml",
+    "**/ansible/**/*.sops.yaml": "yaml",
-      "**/ansible/**/inventory/**/*.yaml": "yaml",
+    "**/ansible/**/inventory/**/*.yaml": "yaml",
-      "**/kubernetes/**/*.sops.toml": "plaintext"
+    "**/kubernetes/**/*.sops.toml": "plaintext",
+    "*.hujson": "jsonc"
   },
   "material-icon-theme.folders.associations": {
-      ".taskfiles": "utils",
+    ".taskfiles": "utils",
-      "bootstrap": "import",
+    "bootstrap": "import",
-      "charts": "kubernetes",
+    "charts": "kubernetes",
-      "hack": "scripts",
+    "hack": "scripts",
-      "repositories": "database",
+    "repositories": "database",
-      "vars": "other",
+    "vars": "other",
-      // namespaces
+    // namespaces
-      "cert-manager": "guard",
+    "cert-manager": "guard",
-      "external-secrets": "keys",
+    "external-secrets": "keys",
-      "kube-system": "kubernetes",
+    "kube-system": "kubernetes",
-      "monitoring": "event",
+    "monitoring": "event",
-      "networking": "connection",
+    "networking": "connection",
-      "rook-ceph": "dump",
+    "rook-ceph": "dump"
   },
   "yaml.schemaStore.enable": true,
   "yaml.schemas": {
     "ansible": "ansible/**/*.yaml",
     "kubernetes": "kubernetes/**/*.yaml"
   },
+  "json.schemas": [
+    {
+      "fileMatch": ["*.hujson"],
+      "schema": {
+        "allowTrailingCommas": true
+      }
+    }
+  ],
   "editor.fontFamily": "FiraCode Nerd Font",
   "editor.fontLigatures": true,
   "editor.bracketPairColorization.enabled": true,
@@ -35,9 +44,7 @@
   "editor.guides.highlightActiveBracketPair": true,
   "editor.hover.delay": 1500,
   "editor.stickyScroll.enabled": false,
-  "editor.rulers": [
+  "editor.rulers": [100],
-    100
-  ],
   "explorer.autoReveal": false,
   "files.trimTrailingWhitespace": true,
   "ansible.python.interpreterPath": "/usr/bin/python3",
@@ -46,5 +53,5 @@
   "prettier.quoteProps": "preserve",
   "[jsonc]": {
     "editor.defaultFormatter": "esbenp.prettier-vscode"
-  },
+  }
 }

kubernetes/apps/kyverno/kyverno/app/helmrelease.yaml

@@ -10,7 +10,7 @@ spec:
   chart:
     spec:
       chart: kyverno
-      version: 3.3.2
+      version: 3.3.3
       sourceRef:
         kind: HelmRepository
         name: kyverno

kubernetes/apps/qbittorrent/cross-seed/app/externalsecret.yaml

@@ -35,8 +35,8 @@ spec:
             skipRecheck: true,
             sonarr: ["http://sonarr.default.svc.cluster.local/?apikey={{ .SONARR_API_KEY }}"],
             torrentDir: "/qbittorrent/qBittorrent/BT_backup",
-            // torznab: []
+            torznab: []
-            torznab: [
+            /* torznab: [
                   6,  // ANT
                   8,  // BLU
                   9,  // TL
@@ -44,6 +44,7 @@ spec:
                   12, // FNP
                   14, // TD
             ].map(i => `http://prowlarr.default.svc.cluster.local/$${i}/api?apikey={{ .PROWLARR_API_KEY }}`),
+            */
           };
   dataFrom:
     - extract:

shell.nix

@@ -3,6 +3,11 @@
 pkgs.mkShell {
   # Enable experimental features without having to specify the argument
   NIX_CONFIG = "experimental-features = nix-command flakes";
+  shellHook = ''
+    export TMP=$(mktemp -d "/tmp/nix-shell-XXXXXX")
+    export TEMP=$TMP
+    export TMPDIR=$TMP
+  '';
 
   nativeBuildInputs = with pkgs; [
     fluxcd