updates

.github/workflows/renovate.yml

@@ -1,15 +0,0 @@
-name: Renovate
-on:
-  workflow_dispatch:
-  schedule:
-    - cron: '0 */6 * * *'
-jobs:
-  renovate:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v4
-      - name: Self-hosted Renovate
-        uses: renovatebot/github-action@v40.2.2
-        with:
-          token: ${{ secrets.RENOVATE_TOKEN }}

.gitignore

@@ -1,4 +1,3 @@
 /secret.*.yaml
 /data/
-/.envrc
 *.DS_Store

charts/apps/home-assistant/templates/whisper.yaml

@@ -18,7 +18,7 @@ spec:
 
       containers:
         - name: "{{ .Release.Name }}-whisper"
-          image: "{{ .Values.whisper.image.repository }}:{{ .Values.whisper.image.tag }}"
+          image: "{{ .Values.whisper.image.repository }}:{{ .Values.piper.image.tag }}"
           imagePullPolicy: "{{ .Values.whisper.image.pullPolicy }}"
           args:
             - --model

charts/apps/zot/templates/config-map.yaml

@@ -36,9 +36,6 @@ data:
         },
         "auth": {
           "failDelay": 5,
-          "htpasswd": {
-            "path": "/etc/zot/htpasswd"
-          },
           "openid": {
             "providers": {
               "oidc": {
@@ -56,22 +53,12 @@ data:
             "actions": ["read", "create", "update", "delete"]
           },
           "repositories": {
-            "public/**": {
-              "anonymousPolicy": ["read"],
-              "defaultPolicy": ["read"],
-              "policies": [
-                {
-                  "users": ["*"],
-                  "actions": ["create", "update", "delete"]
-                }
-              ]
-            },
             "**": {
               "defaultPolicy": ["read"],
               "policies": [
                 {
                   "users": ["*"],
-                  "actions": ["create", "update", "delete"]
+                  "actions": ["push", "delete"]
                 }
               ]
             }

charts/apps/zot/templates/deployment.yaml

@@ -6,8 +6,6 @@ metadata:
     app: "{{ .Release.Name }}"
 spec:
   replicas: 1
-  strategy:
-    type: Recreate
   selector:
     matchLabels:
       app: "{{ .Release.Name }}"
@@ -16,6 +14,8 @@ spec:
       labels:
         app: "{{ .Release.Name }}"
     spec:
+      strategy:
+        type: Recreate
       initContainers:
         - name: render-config
           image: alpine:3.20
@@ -36,14 +36,9 @@ spec:
                 secretKeyRef:
                   name: "{{ .Release.Name }}-client"
                   key: clientSecret
-            - name: PASSWORD
-              valueFrom:
-                secretKeyRef:
-                  name: "{{ .Release.Name }}-cluster"
-                  key: password
           args:
             - |
-              apk add --no-cache gettext apache2-utils >/dev/null
+              apk add --no-cache gettext >/dev/null
               envsubst < /config-tpl/config.tpl.json > /config-out/config.json
               echo "Rendered /etc/zot/config.json"
               echo "---------------------------------------"
@@ -54,7 +49,6 @@ spec:
               echo "---------------------------------------"
               cat /config-out/secrets.json
               echo "---------------------------------------"
-              htpasswd -nbB cluster "$PASSWORD" > /config-out/htpasswd
           volumeMounts:
             - name: config-tpl
               mountPath: /config-tpl

charts/apps/zot/templates/secret.yaml

@@ -1,9 +0,0 @@
-apiVersion: homelab.mortenolsen.pro/v1
-kind: GenerateSecret
-metadata:
-  name: "{{ .Release.Name }}-cluster"
-spec:
-  fields:
-    - name: password
-      encoding: hex
-      length: 64

renovate.json5

@@ -1,26 +0,0 @@
-{
-  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "extends": [
-    "config:base"
-  ],
-  "packageRules": [
-    {
-      "matchDatasources": ["docker"],
-      "pinDigests": true
-    }
-  ],
-  "helm-values": {
-    "fileMatch": ["^charts/.*/values\\.yaml$"]
-  },
-  "regexManagers": [
-    {
-      "fileMatch": ["^charts/.*/values\\.yaml$"],
-      "matchStrings": [
-        "repository:\s*'(?<depName>.*?)'\n\s*tag:\s*'(?<currentValue>.*?)'",
-        "repository:\s*\"(?<depName>.*?)\"\n\s*tag:\s*\"(?<currentValue>.*?)\"",
-        "repository:\s*(?<depName>.*?)\n\s*tag:\s*(?<currentValue>.*)"
-      ],
-      "datasourceTemplate": "docker"
-    }
-  ]
-}