Merge pull request 'chore(deps): update helm release grafana to v10.3.0' (#62) from renovate/grafana-10.x into main

Reviewed-on: #62

authentik/Chart.yaml

@@ -24,5 +24,5 @@ appVersion: "1.0"
 
 dependencies:
 - name: authentik
-  version: 2025.10.1
+  version: 2025.10.2
   repository: https://charts.goauthentik.io

authentik/values.yaml

@@ -25,25 +25,6 @@ authentik:
       - name: cert-dubyatp-xyz
         secret:
           secretName: cert-dubyatp-xyz
-  redis:
-    enabled: true
-    architecture: standalone
-    auth:
-      enabled: false
-    master:
-      resourcesPreset: "none"
-      podAnnotations:
-        backup.velero.io/backup-volumes: redis-data
-    replica:
-      resourcesPreset: "none"
-    sentinel:
-      resourcesPreset: "none"
-    metrics:
-      resourcesPreset: "none"
-    volumePermissions:
-      resourcesPreset: "none"
-    sysctl:
-      resourcesPreset: "none"
   global:
     env:
       - name: AUTHENTIK_SECRET_KEY
@@ -52,7 +33,7 @@ authentik:
             name: authentik-credentials
             key: authentik-secret-key
       - name: AUTHENTIK_POSTGRESQL__HOST
-        value: weyma-pgsql-rw.cloudnativepg.svc.cluster.local
+        value: pooler-weyma-rw.cloudnativepg.svc.cluster.local
       - name: AUTHENTIK_POSTGRESQL__NAME
         value: authentik
       - name: AUTHENTIK_POSTGRESQL__USER

dispatcharr/deployment.yaml

@@ -13,6 +13,15 @@ spec:
       annotations:
         backup.velero.io/backup-volumes: data
     spec:
+      affinity:
+        nodeAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+            nodeSelectorTerms:
+            - matchExpressions:
+              - key: extensions.talos.dev/i915
+                operator: Exists
+      nodeSelector:
+        kubernetes.io/hostname: weyma-talos-testw04
       containers:
       - name: dispatcharr
         image: ghcr.io/dispatcharr/dispatcharr:0.8.0-amd64
@@ -25,9 +34,15 @@ spec:
             value: redis://localhost:6379/0
           - name: DISPATCHARR_LOG_LEVEL
             value: info
+          - name: UWSGI_NICE_LEVEL
+            value: "-5"
+          - name: CELERY_NICE_LEVEL
+            value: "-5"
         volumeMounts:
           - name: dispatcharr-data
             mountPath: /data
+          - name: dev-dri
+            mountPath: /dev/dri
         resources:
           limits:
             memory: "3Gi"
@@ -35,7 +50,12 @@ spec:
           requests:
             memory: "256Mi"
             cpu: "500m"
+        securityContext:
+          privileged: true
       volumes:
         - name: dispatcharr-data
           persistentVolumeClaim:
             claimName: dispatcharr
+        - name: dev-dri
+          hostPath:
+            path: /dev/dri

gitea/values.yaml

@@ -56,7 +56,7 @@ gitea:
     config:
       database:
         DB_TYPE: postgres
-        HOST: weyma-pgsql-rw.cloudnativepg.svc.cluster.local
+        HOST: pooler-weyma-rw.cloudnativepg.svc.cluster.local
         NAME: gitea
         USER: gitea
       server:
@@ -82,6 +82,10 @@ gitea:
         USER: gitea_dubyatp
       security:
         INSTALL_LOCK: true
+    metrics:
+      enabled: true
+      serviceMonitor:
+        enabled: true
   extraDeploy:
     - apiVersion: traefik.io/v1alpha1
       kind: IngressRouteTCP
@@ -180,3 +184,5 @@ gitea:
     enabled: false
   valkey-cluster:
     enabled: true
+    valkey:
+      resourcesPreset: "small"

grafana/Chart.yaml

@@ -24,5 +24,5 @@ appVersion: "1.0"
 
 dependencies:
 - name: grafana
-  version: 10.1.4
+  version: 10.3.0
   repository: https://grafana.github.io/helm-charts

grafana/values.yaml

@@ -191,6 +191,6 @@ grafana:
     image:
       registry: docker.io
       repository: bats/bats
-      tag: 1.12.0
+      tag: 1.13.0
     imagePullPolicy: IfNotPresent
   useStatefulSet: false

jellyfin/templates/metrics-block.yaml

@@ -0,0 +1,33 @@
+{{- if and (.Values.jellyfin.metrics.enabled) (.Values.jellyfin.ingress.enabled) -}}
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: dummy-svc
+  namespace: {{ .Release.Namespace }}
+spec:
+  selector:
+    app: dummy-svc
+  ports:
+    - protocol: TCP
+      port: 6767
+      targetPort: 6767
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: block-metrics
+  namespace: {{ .Release.Namespace }}
+spec:
+  rules:
+  - host: {{ (index .Values.jellyfin.ingress.hosts 0).host }}
+    http:
+      paths:
+      - pathType: Prefix
+        path: "/metrics"
+        backend:
+          service:
+            name: dummy-svc
+            port: 
+              number: 6767
+{{- end }}

jellyfin/values.yaml

@@ -41,6 +41,10 @@ jellyfin:
     - name: dev-dri
       hostPath:
         path: /dev/dri
+  metrics:
+    enabled: true
+    serviceMonitor:
+      enabled: true
   volumeMounts:
     - name: tv-shows
       mountPath: /mnt/tv-shows

netmaker/config.yaml

@@ -11,7 +11,7 @@ data:
   DNS_MODE: "off"
   DISPLAY_KEYS: "on"
   DATABASE: postgres
-  SQL_HOST: "weyma-pgsql-rw.cloudnativepg.svc.cluster.local"
+  SQL_HOST: "pooler-weyma-rw.cloudnativepg.svc.cluster.local"
   SQL_PORT: "5432"
   SQL_DB: "netmaker"
   SQL_USER: "netmaker"

peertube/config.yaml

@@ -8,7 +8,7 @@ data:
   POSTGRES_USER: peertube
   POSTGRES_DB: peertube
   PEERTUBE_DB_USERNAME: peertube
-  PEERTUBE_DB_HOSTNAME: weyma-pgsql-rw.cloudnativepg.svc.cluster.local
+  PEERTUBE_DB_HOSTNAME: pooler-weyma-rw.cloudnativepg.svc.cluster.local
   PEERTUBE_DB_PORT: "5432"
   PEERTUBE_WEBSERVER_HOSTNAME: "tube.dubyatp.xyz"
   PEERTUBE_TRUST_PROXY: '["127.0.0.1", "loopback", "172.18.0.0/16"]'

yt-dlp-bot/deployment.yaml

@@ -14,7 +14,7 @@ spec:
     spec:
       containers:
         - name: yt-dlp-bot
-          image: 'git.dubyatp.xyz/williamp/yt-dlp-bot:8eb6bf3'
+          image: 'git.dubyatp.xyz/williamp/yt-dlp-bot:1ef217f'
           env:
             - name: OUT_PATH
               value: /data/youtube-vids