Update image code.forgejo.org/forgejo/runner to v5.0.2

kubernetes/apps/ci-runners/forgejo/app/helmrelease.yaml

@@ -30,7 +30,7 @@ spec:
           runner-register:
             image:
               repository: code.forgejo.org/forgejo/runner
-              tag: 5.0.0
+              tag: 5.0.2
             command:
               - "forgejo-runner"
               - "register"
@@ -72,7 +72,7 @@ spec:
           app:
             image:
               repository: code.forgejo.org/forgejo/runner
-              tag: 5.0.0
+              tag: 5.0.2
             command:
               - "sh"
               - "-c"

kubernetes/apps/default/sabnzbd/app/helmrelease.yaml

@@ -75,9 +75,12 @@ spec:
               allowPrivilegeEscalation: false
               readOnlyRootFilesystem: true
               capabilities: { drop: ["ALL"] }
+            resources:
+              requests:
+                cpu: 100m
+              limits:
+                memory: 16Gi
     defaultPodOptions:
-      nodeSelector: # ~~testing~~
-        kubernetes.io/hostname: gandalf-01
       securityContext:
         runAsNonRoot: true
         runAsUser: 568

kubernetes/apps/observability/grafana/app/helmrelease.yaml

@@ -196,6 +196,9 @@ spec:
         cert-manager:
           url: https://gitlab.com/uneeq-oss/cert-manager-mixin/-/raw/master/dashboards/cert-manager.json?ref_type=heads
           datasource: Prometheus
+        dcgm-exporter:
+          url: https://raw.githubusercontent.com/NVIDIA/dcgm-exporter/main/grafana/dcgm-exporter-dashboard.json
+          datasource: Prometheus
         external-secrets:
           url: https://raw.githubusercontent.com/external-secrets/external-secrets/main/docs/snippets/dashboard.json
           datasource: Prometheus

kubernetes/apps/qbittorrent/qbittorrent/app/helmrelease.yaml

@@ -66,9 +66,15 @@ spec:
               capabilities:
                 drop:
                   - ALL
+            resources:
+              requests:
+                cpu: 100m
+                memory: 1024Mi
+              limits:
+                memory: 8Gi
     defaultPodOptions:
       nodeSelector: # ~~testing~~
-        kubernetes.io/hostname: gandalf-01
+        kubernetes.io/hostname: shadowfax-01
       securityContext:
         runAsNonRoot: true
         runAsUser: 568

kubernetes/templates/volsync/kustomization.yaml

@@ -4,5 +4,5 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
   - ./claim.yaml
-  - ./minio.yaml
+  - ./nfs.yaml
   - ./r2.yaml

shell.nix

@@ -15,6 +15,8 @@ pkgs.mkShell {
     gitleaks
     helmfile
     k9s
+    krew
+    kubectl
     kubevirt
     kubernetes-helm
     pre-commit
@@ -23,6 +25,5 @@ pkgs.mkShell {
     mqttui
     kustomize
     yq-go
-    go-task
   ];
 }