Update image kyverno to v3.3.3

.vscode/settings.json

@@ -5,7 +5,8 @@
     "**/ansible/**/*.yaml": "ansible",
     "**/ansible/**/*.sops.yaml": "yaml",
     "**/ansible/**/inventory/**/*.yaml": "yaml",
-      "**/kubernetes/**/*.sops.toml": "plaintext"
+    "**/kubernetes/**/*.sops.toml": "plaintext",
+    "*.hujson": "jsonc"
   },
   "material-icon-theme.folders.associations": {
     ".taskfiles": "utils",
@@ -20,13 +21,21 @@
     "kube-system": "kubernetes",
     "monitoring": "event",
     "networking": "connection",
-      "rook-ceph": "dump",
+    "rook-ceph": "dump"
   },
   "yaml.schemaStore.enable": true,
   "yaml.schemas": {
     "ansible": "ansible/**/*.yaml",
     "kubernetes": "kubernetes/**/*.yaml"
   },
+  "json.schemas": [
+    {
+      "fileMatch": ["*.hujson"],
+      "schema": {
+        "allowTrailingCommas": true
+      }
+    }
+  ],
   "editor.fontFamily": "FiraCode Nerd Font",
   "editor.fontLigatures": true,
   "editor.bracketPairColorization.enabled": true,
@@ -35,9 +44,7 @@
   "editor.guides.highlightActiveBracketPair": true,
   "editor.hover.delay": 1500,
   "editor.stickyScroll.enabled": false,
-  "editor.rulers": [
-    100
-  ],
+  "editor.rulers": [100],
   "explorer.autoReveal": false,
   "files.trimTrailingWhitespace": true,
   "ansible.python.interpreterPath": "/usr/bin/python3",
@@ -46,5 +53,5 @@
   "prettier.quoteProps": "preserve",
   "[jsonc]": {
     "editor.defaultFormatter": "esbenp.prettier-vscode"
-  },
+  }
 }

kubernetes/apps/kyverno/kyverno/app/helmrelease.yaml

@@ -10,7 +10,7 @@ spec:
   chart:
     spec:
       chart: kyverno
-      version: 3.3.2
+      version: 3.3.3
       sourceRef:
         kind: HelmRepository
         name: kyverno

kubernetes/apps/qbittorrent/cross-seed/app/externalsecret.yaml

@@ -35,8 +35,8 @@ spec:
             skipRecheck: true,
             sonarr: ["http://sonarr.default.svc.cluster.local/?apikey={{ .SONARR_API_KEY }}"],
             torrentDir: "/qbittorrent/qBittorrent/BT_backup",
-            // torznab: []
-            torznab: [
+            torznab: []
+            /* torznab: [
                   6,  // ANT
                   8,  // BLU
                   9,  // TL
@@ -44,6 +44,7 @@ spec:
                   12, // FNP
                   14, // TD
             ].map(i => `http://prowlarr.default.svc.cluster.local/$${i}/api?apikey={{ .PROWLARR_API_KEY }}`),
+            */
           };
   dataFrom:
     - extract:

shell.nix

@@ -3,6 +3,11 @@
 pkgs.mkShell {
   # Enable experimental features without having to specify the argument
   NIX_CONFIG = "experimental-features = nix-command flakes";
+  shellHook = ''
+    export TMP=$(mktemp -d "/tmp/nix-shell-XXXXXX")
+    export TEMP=$TMP
+    export TMPDIR=$TMP
+  '';
 
   nativeBuildInputs = with pkgs; [
     fluxcd