Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat(deps): update helm release yourls to 5.15.0 #2285

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Mar 22, 2023

This PR contains the following updates:

Package Update Change
yourls (source) minor 5.2.7 -> 5.15.0

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

YOURLS/charts (yourls)

v5.15.0

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.14.12...yourls-5.15.0

v5.14.12

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.14.11...yourls-5.14.12

v5.14.11

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.14.10...yourls-5.14.11

v5.14.10

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.14.9...yourls-5.14.10

v5.14.9

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.14.8...yourls-5.14.9

v5.14.8

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.14.7...yourls-5.14.8

v5.14.7

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.14.6...yourls-5.14.7

v5.14.6

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.14.5...yourls-5.14.6

v5.14.5

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.14.4...yourls-5.14.5

v5.14.4

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.14.3...yourls-5.14.4

v5.14.3

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.14.2...yourls-5.14.3

v5.14.2

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.14.1...yourls-5.14.2

v5.14.1

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.14.0...yourls-5.14.1

v5.14.0

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.13.3...yourls-5.14.0

v5.13.3

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.13.2...yourls-5.13.3

v5.13.2

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.13.1...yourls-5.13.2

v5.13.1

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.13.0...yourls-5.13.1

v5.13.0

Compare Source

Your Own URL Shortener

What's Changed
New Contributors

Full Changelog: YOURLS/charts@yourls-5.12.10...yourls-5.13.0

v5.12.10

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.12.9...yourls-5.12.10

v5.12.9

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.12.8...yourls-5.12.9

v5.12.8

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.12.7...yourls-5.12.8

v5.12.7

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.12.6...yourls-5.12.7

v5.12.6

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.12.5...yourls-5.12.6

v5.12.5

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.12.4...yourls-5.12.5

v5.12.4

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.12.3...yourls-5.12.4

v5.12.3

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.12.2...yourls-5.12.3

v5.12.2

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.12.1...yourls-5.12.2

v5.12.1

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.12.0...yourls-5.12.1

v5.12.0

Compare Source

Your Own URL Shortener

Full Changelog: YOURLS/charts@yourls-5.11.3...yourls-5.12.0

v5.11.3

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.11.2...yourls-5.11.3

v5.11.2

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.11.1...yourls-5.11.2

v5.11.1

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.11.0...yourls-5.11.1

v5.11.0

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.10.7...yourls-5.11.0

v5.10.7

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.10.6...yourls-5.10.7

v5.10.6

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.10.5...yourls-5.10.6

v5.10.5

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.10.4...yourls-5.10.5

v5.10.4

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.10.3...yourls-5.10.4

v5.10.3

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.10.2...yourls-5.10.3

v5.10.2

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.10.1...yourls-5.10.2

v5.10.1

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.10.0...yourls-5.10.1

v5.10.0

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.9.1...yourls-5.10.0

v5.9.1

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.9.0...yourls-5.9.1

v5.9.0

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.8.17...yourls-5.9.0

v5.8.17

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.8.16...yourls-5.8.17

v5.8.16

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.8.15...yourls-5.8.16

v5.8.15

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.8.14...yourls-5.8.15

v5.8.14

Compare Source

Your Own URL Shortener

What's Changed
New Contributors

Full Changelog: YOURLS/charts@yourls-5.8.13...yourls-5.8.14

v5.8.13

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.8.12...yourls-5.8.13

v5.8.12

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.8.11...yourls-5.8.12

v5.8.11

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.8.10...yourls-5.8.11

v5.8.10

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.8.9...yourls-5.8.10

v5.8.9

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.8.8...yourls-5.8.9

v5.8.8

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.8.7...yourls-5.8.8

v5.8.7

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.8.6...yourls-5.8.7

v5.8.6

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.8.5...yourls-5.8.6

v5.8.5

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.8.4...yourls-5.8.5

v5.8.4

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.8.3...yourls-5.8.4

v5.8.3

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.8.2...yourls-5.8.3

v5.8.2

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.8.1...yourls-5.8.2

v5.8.1

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.8.0...yourls-5.8.1

v5.8.0

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.7.6...yourls-5.8.0

v5.7.6

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.7.5...yourls-5.7.6

v5.7.5

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.7.4...yourls-5.7.5

v5.7.4

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.7.3...yourls-5.7.4

v5.7.3

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.7.2...yourls-5.7.3

v5.7.2

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.7.1...yourls-5.7.2

v5.7.1

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.7.0...yourls-5.7.1

v5.7.0

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.6.10...yourls-5.7.0

v5.6.10

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.6.9...yourls-5.6.10

v5.6.9

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.6.8...yourls-5.6.9

v5.6.8

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.6.7...yourls-5.6.8

v5.6.7

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.6.6...yourls-5.6.7

v5.6.6

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.6.5...yourls-5.6.6

v5.6.5

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.6.4...yourls-5.6.5

v5.6.4

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.6.3...yourls-5.6.4

v5.6.3

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.6.2...yourls-5.6.3

v5.6.2

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.6.1...yourls-5.6.2

v5.6.1

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.6.0...yourls-5.6.1

v5.6.0

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.5.21...yourls-5.6.0

v5.5.21

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.5.20...yourls-5.5.21

v5.5.20

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.5.19...yourls-5.5.20

v5.5.19

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.5.18...yourls-5.5.19

v5.5.18

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.5.17...yourls-5.5.18

v5.5.17

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.5.16...yourls-5.5.17

v5.5.16

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.5.15...yourls-5.5.16

v5.5.15

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.5.14...yourls-5.5.15

v5.5.14

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.5.13...yourls-5.5.14

v5.5.13

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.5.12...yourls-5.5.13

v5.5.12

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.5.11...yourls-5.5.12

v5.5.11

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.5.10...yourls-5.5.11

v5.5.10

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.5.9...yourls-5.5.10

v5.5.9

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.5.8...yourls-5.5.9

v5.5.8

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.5.7...yourls-5.5.8

v5.5.7

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.5.6...yourls-5.5.7

v5.5.6

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.5.5...yourls-5.5.6

v5.5.5

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.5.4...yourls-5.5.5

v5.5.4

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.5.3...yourls-5.5.4

v5.5.3

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.5.2...yourls-5.5.3

v5.5.2

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.5.1...yourls-5.5.2

v5.5.1

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.5.0...yourls-5.5.1

v5.5.0

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.4.17...yourls-5.5.0

v5.4.17

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.4.16...yourls-5.4.17

v5.4.16

Compare Source

Your Own URL Shortener

What's Changed

Full Changelog: YOURLS/charts@yourls-5.4.15...yourls-5.4.16

[v5.4.15](https://r


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested a review from dfroberg as a code owner March 22, 2023 08:03
@github-actions
Copy link

Path: cluster/apps/collab/yourls/helm-release.yaml
Version: 5.2.7 -> 5.3.4

@@ -23,8 +23,8 @@
     app.kubernetes.io/managed-by: Helm
 type: Opaque
 data:
-  mariadb-root-password: "VEJIdEc1Unh4Zw=="
-  mariadb-password: "c0RndkJBMHR4Sg=="
+  mariadb-root-password: "QU9rbVlYNVpOYg=="
+  mariadb-password: "MVg2SlhnRDVBVw=="
 ---
 # Source: yourls/templates/secrets.yaml
 apiVersion: v1
@@ -206,8 +206,6 @@
                   matchLabels:
                     app.kubernetes.io/name: yourls
                     app.kubernetes.io/instance: yourls
-                namespaces:
-                  - "default"
                 topologyKey: kubernetes.io/hostname
               weight: 1
         nodeAffinity:
@@ -344,7 +342,7 @@
   template:
     metadata:
       annotations:
-        checksum/configuration: af5c671ff745ded0f8434c386e4bfffd387106e11527eecb5adb4f3e6fa0a454
+        checksum/configuration: 72f03b2abc138158ade679ea695b74ad684c3421e93d85ef7afab78bb4d3c9d5
       labels:
         app.kubernetes.io/name: mariadb
         app.kubernetes.io/instance: yourls
@@ -362,8 +360,6 @@
                     app.kubernetes.io/name: mariadb
                     app.kubernetes.io/instance: yourls
                     app.kubernetes.io/component: primary
-                namespaces:
-                  - "default"
                 topologyKey: kubernetes.io/hostname
               weight: 1
         nodeAffinity:
@@ -371,9 +367,11 @@
         fsGroup: 1001
       containers:
         - name: mariadb
-          image: docker.io/bitnami/mariadb:10.6.10-debian-11-r6
+          image: docker.io/bitnami/mariadb:10.6.12-debian-11-r13
           imagePullPolicy: "IfNotPresent"
           securityContext:
+            allowPrivilegeEscalation: false
+            privileged: false
             runAsNonRoot: true
             runAsUser: 1001
           env:

@renovate renovate bot changed the title feat(deps): update helm release yourls to 5.3.4 feat(deps): update helm release yourls to 5.3.5 Mar 22, 2023
@renovate renovate bot force-pushed the renovate/yourls-5.x branch from a3fe883 to 8cc1ece Compare March 22, 2023 11:17
@github-actions
Copy link

Path: cluster/apps/collab/yourls/helm-release.yaml
Version: 5.2.7 -> 5.3.5

@@ -23,8 +23,8 @@
     app.kubernetes.io/managed-by: Helm
 type: Opaque
 data:
-  mariadb-root-password: "Y0cyTWpSZmREUg=="
-  mariadb-password: "bThBNW1GMDZsRg=="
+  mariadb-root-password: "eHhYTHlHNUI5Rw=="
+  mariadb-password: "UlF0TGJKTWNKMg=="
 ---
 # Source: yourls/templates/secrets.yaml
 apiVersion: v1
@@ -206,8 +206,6 @@
                   matchLabels:
                     app.kubernetes.io/name: yourls
                     app.kubernetes.io/instance: yourls
-                namespaces:
-                  - "default"
                 topologyKey: kubernetes.io/hostname
               weight: 1
         nodeAffinity:
@@ -344,7 +342,7 @@
   template:
     metadata:
       annotations:
-        checksum/configuration: af5c671ff745ded0f8434c386e4bfffd387106e11527eecb5adb4f3e6fa0a454
+        checksum/configuration: 8946c9aa44d8eb80d978aec44d327ad5d04755239bdf93997a79e62d60c9937b
       labels:
         app.kubernetes.io/name: mariadb
         app.kubernetes.io/instance: yourls
@@ -362,8 +360,6 @@
                     app.kubernetes.io/name: mariadb
                     app.kubernetes.io/instance: yourls
                     app.kubernetes.io/component: primary
-                namespaces:
-                  - "default"
                 topologyKey: kubernetes.io/hostname
               weight: 1
         nodeAffinity:
@@ -371,9 +367,11 @@
         fsGroup: 1001
       containers:
         - name: mariadb
-          image: docker.io/bitnami/mariadb:10.6.10-debian-11-r6
+          image: docker.io/bitnami/mariadb:10.6.12-debian-11-r13
           imagePullPolicy: "IfNotPresent"
           securityContext:
+            allowPrivilegeEscalation: false
+            privileged: false
             runAsNonRoot: true
             runAsUser: 1001
           env:

@renovate renovate bot force-pushed the renovate/yourls-5.x branch from 8cc1ece to 6dd6a9a Compare April 3, 2023 11:07
@renovate renovate bot changed the title feat(deps): update helm release yourls to 5.3.5 feat(deps): update helm release yourls to 5.3.6 Apr 3, 2023
@github-actions
Copy link

github-actions bot commented Apr 3, 2023

Path: cluster/apps/collab/yourls/helm-release.yaml
Version: 5.2.7 -> 5.3.6

@@ -23,8 +23,8 @@
     app.kubernetes.io/managed-by: Helm
 type: Opaque
 data:
-  mariadb-root-password: "WDlMbEVmdHJmSA=="
-  mariadb-password: "SDFPMERoMlZRVw=="
+  mariadb-root-password: "Z2paWUx6RVNJMQ=="
+  mariadb-password: "c01adk81aVNtOA=="
 ---
 # Source: yourls/templates/secrets.yaml
 apiVersion: v1
@@ -206,8 +206,6 @@
                   matchLabels:
                     app.kubernetes.io/name: yourls
                     app.kubernetes.io/instance: yourls
-                namespaces:
-                  - "default"
                 topologyKey: kubernetes.io/hostname
               weight: 1
         nodeAffinity:
@@ -344,7 +342,7 @@
   template:
     metadata:
       annotations:
-        checksum/configuration: af5c671ff745ded0f8434c386e4bfffd387106e11527eecb5adb4f3e6fa0a454
+        checksum/configuration: ef998bfce9e33438f8444e5130264dfb1d46fac0a5df9d5ddc6d88029a44d7f2
       labels:
         app.kubernetes.io/name: mariadb
         app.kubernetes.io/instance: yourls
@@ -362,8 +360,6 @@
                     app.kubernetes.io/name: mariadb
                     app.kubernetes.io/instance: yourls
                     app.kubernetes.io/component: primary
-                namespaces:
-                  - "default"
                 topologyKey: kubernetes.io/hostname
               weight: 1
         nodeAffinity:
@@ -371,9 +367,11 @@
         fsGroup: 1001
       containers:
         - name: mariadb
-          image: docker.io/bitnami/mariadb:10.6.10-debian-11-r6
+          image: docker.io/bitnami/mariadb:10.6.12-debian-11-r16
           imagePullPolicy: "IfNotPresent"
           securityContext:
+            allowPrivilegeEscalation: false
+            privileged: false
             runAsNonRoot: true
             runAsUser: 1001
           env:

@renovate renovate bot changed the title feat(deps): update helm release yourls to 5.3.6 feat(deps): update helm release yourls to 5.4.11 May 29, 2023
@renovate renovate bot force-pushed the renovate/yourls-5.x branch from 6dd6a9a to 51a6b19 Compare May 29, 2023 12:09
@github-actions
Copy link

Path: cluster/apps/collab/yourls/helm-release.yaml
Version: 5.2.7 -> 5.4.11

@@ -23,8 +23,8 @@
     app.kubernetes.io/managed-by: Helm
 type: Opaque
 data:
-  mariadb-root-password: "N2g3ODdYTWszag=="
-  mariadb-password: "M0V1WFhYeU52OA=="
+  mariadb-root-password: "eDBFRklsMmZHcg=="
+  mariadb-password: "RmZNcHpSWkp1RQ=="
 ---
 # Source: yourls/templates/secrets.yaml
 apiVersion: v1
@@ -206,8 +206,6 @@
                   matchLabels:
                     app.kubernetes.io/name: yourls
                     app.kubernetes.io/instance: yourls
-                namespaces:
-                  - "default"
                 topologyKey: kubernetes.io/hostname
               weight: 1
         nodeAffinity:
@@ -344,7 +342,7 @@
   template:
     metadata:
       annotations:
-        checksum/configuration: af5c671ff745ded0f8434c386e4bfffd387106e11527eecb5adb4f3e6fa0a454
+        checksum/configuration: 983157388203a6d94c17a01cce90e1519bea5143af080c5b9b0929e6f5083ba2
       labels:
         app.kubernetes.io/name: mariadb
         app.kubernetes.io/instance: yourls
@@ -362,8 +360,6 @@
                     app.kubernetes.io/name: mariadb
                     app.kubernetes.io/instance: yourls
                     app.kubernetes.io/component: primary
-                namespaces:
-                  - "default"
                 topologyKey: kubernetes.io/hostname
               weight: 1
         nodeAffinity:
@@ -371,9 +367,11 @@
         fsGroup: 1001
       containers:
         - name: mariadb
-          image: docker.io/bitnami/mariadb:10.6.10-debian-11-r6
+          image: docker.io/bitnami/mariadb:10.11.3-debian-11-r5
           imagePullPolicy: "IfNotPresent"
           securityContext:
+            allowPrivilegeEscalation: false
+            privileged: false
             runAsNonRoot: true
             runAsUser: 1001
           env:

@renovate renovate bot force-pushed the renovate/yourls-5.x branch from 51a6b19 to e735d5f Compare June 7, 2023 21:19
@renovate renovate bot changed the title feat(deps): update helm release yourls to 5.4.11 feat(deps): update helm release yourls to 5.4.12 Jun 7, 2023
@github-actions
Copy link

github-actions bot commented Jun 7, 2023

Path: cluster/apps/collab/yourls/helm-release.yaml
Version: 5.2.7 -> 5.4.12

@@ -23,8 +23,8 @@
     app.kubernetes.io/managed-by: Helm
 type: Opaque
 data:
-  mariadb-root-password: "NU1XSDh1T2xlbg=="
-  mariadb-password: "RVU5UlcwUFN3VQ=="
+  mariadb-root-password: "UnBUMmZnU1FWRA=="
+  mariadb-password: "OUsyQVVoTXRYdA=="
 ---
 # Source: yourls/templates/secrets.yaml
 apiVersion: v1
@@ -206,8 +206,6 @@
                   matchLabels:
                     app.kubernetes.io/name: yourls
                     app.kubernetes.io/instance: yourls
-                namespaces:
-                  - "default"
                 topologyKey: kubernetes.io/hostname
               weight: 1
         nodeAffinity:
@@ -344,7 +342,7 @@
   template:
     metadata:
       annotations:
-        checksum/configuration: af5c671ff745ded0f8434c386e4bfffd387106e11527eecb5adb4f3e6fa0a454
+        checksum/configuration: 908941649bfab65b09741b56e7ca1ddd643a74a3cf632fd9e2221229d142960b
       labels:
         app.kubernetes.io/name: mariadb
         app.kubernetes.io/instance: yourls
@@ -362,8 +360,6 @@
                     app.kubernetes.io/name: mariadb
                     app.kubernetes.io/instance: yourls
                     app.kubernetes.io/component: primary
-                namespaces:
-                  - "default"
                 topologyKey: kubernetes.io/hostname
               weight: 1
         nodeAffinity:
@@ -371,9 +367,11 @@
         fsGroup: 1001
       containers:
         - name: mariadb
-          image: docker.io/bitnami/mariadb:10.6.10-debian-11-r6
+          image: docker.io/bitnami/mariadb:10.11.4-debian-11-r0
           imagePullPolicy: "IfNotPresent"
           securityContext:
+            allowPrivilegeEscalation: false
+            privileged: false
             runAsNonRoot: true
             runAsUser: 1001
           env:

@renovate renovate bot force-pushed the renovate/yourls-5.x branch from e735d5f to 60d3c9f Compare June 30, 2023 16:48
@renovate renovate bot changed the title feat(deps): update helm release yourls to 5.4.12 feat(deps): update helm release yourls to 5.4.13 Jun 30, 2023
@github-actions
Copy link

Path: cluster/apps/collab/yourls/helm-release.yaml
Version: 5.2.7 -> 5.4.13

@@ -23,8 +23,8 @@
     app.kubernetes.io/managed-by: Helm
 type: Opaque
 data:
-  mariadb-root-password: "YTBLWEd5SnVpQg=="
-  mariadb-password: "bmZkbnM5SkV3TQ=="
+  mariadb-root-password: "cE1pR3NoYTI3Sw=="
+  mariadb-password: "aGd2R0FlSTdXTA=="
 ---
 # Source: yourls/templates/secrets.yaml
 apiVersion: v1
@@ -206,8 +206,6 @@
                   matchLabels:
                     app.kubernetes.io/name: yourls
                     app.kubernetes.io/instance: yourls
-                namespaces:
-                  - "default"
                 topologyKey: kubernetes.io/hostname
               weight: 1
         nodeAffinity:
@@ -344,7 +342,7 @@
   template:
     metadata:
       annotations:
-        checksum/configuration: af5c671ff745ded0f8434c386e4bfffd387106e11527eecb5adb4f3e6fa0a454
+        checksum/configuration: 908941649bfab65b09741b56e7ca1ddd643a74a3cf632fd9e2221229d142960b
       labels:
         app.kubernetes.io/name: mariadb
         app.kubernetes.io/instance: yourls
@@ -362,8 +360,6 @@
                     app.kubernetes.io/name: mariadb
                     app.kubernetes.io/instance: yourls
                     app.kubernetes.io/component: primary
-                namespaces:
-                  - "default"
                 topologyKey: kubernetes.io/hostname
               weight: 1
         nodeAffinity:
@@ -371,9 +367,11 @@
         fsGroup: 1001
       containers:
         - name: mariadb
-          image: docker.io/bitnami/mariadb:10.6.10-debian-11-r6
+          image: docker.io/bitnami/mariadb:10.11.4-debian-11-r0
           imagePullPolicy: "IfNotPresent"
           securityContext:
+            allowPrivilegeEscalation: false
+            privileged: false
             runAsNonRoot: true
             runAsUser: 1001
           env:

@renovate renovate bot force-pushed the renovate/yourls-5.x branch from 60d3c9f to 8d2f5c3 Compare July 4, 2023 15:41
@renovate renovate bot changed the title feat(deps): update helm release yourls to 5.4.13 feat(deps): update helm release yourls to 5.4.14 Jul 4, 2023
@github-actions
Copy link

github-actions bot commented Jul 4, 2023

Path: cluster/apps/collab/yourls/helm-release.yaml
Version: 5.2.7 -> 5.4.14

@@ -23,8 +23,8 @@
     app.kubernetes.io/managed-by: Helm
 type: Opaque
 data:
-  mariadb-root-password: "bFAxTEFUQVYySw=="
-  mariadb-password: "eE5XVkltN0pEUA=="
+  mariadb-root-password: "Z1RTNlVuYmNXWQ=="
+  mariadb-password: "VTYydlhKdjlQaQ=="
 ---
 # Source: yourls/templates/secrets.yaml
 apiVersion: v1
@@ -206,8 +206,6 @@
                   matchLabels:
                     app.kubernetes.io/name: yourls
                     app.kubernetes.io/instance: yourls
-                namespaces:
-                  - "default"
                 topologyKey: kubernetes.io/hostname
               weight: 1
         nodeAffinity:
@@ -344,7 +342,7 @@
   template:
     metadata:
       annotations:
-        checksum/configuration: af5c671ff745ded0f8434c386e4bfffd387106e11527eecb5adb4f3e6fa0a454
+        checksum/configuration: 908941649bfab65b09741b56e7ca1ddd643a74a3cf632fd9e2221229d142960b
       labels:
         app.kubernetes.io/name: mariadb
         app.kubernetes.io/instance: yourls
@@ -362,8 +360,6 @@
                     app.kubernetes.io/name: mariadb
                     app.kubernetes.io/instance: yourls
                     app.kubernetes.io/component: primary
-                namespaces:
-                  - "default"
                 topologyKey: kubernetes.io/hostname
               weight: 1
         nodeAffinity:
@@ -371,9 +367,11 @@
         fsGroup: 1001
       containers:
         - name: mariadb
-          image: docker.io/bitnami/mariadb:10.6.10-debian-11-r6
+          image: docker.io/bitnami/mariadb:10.11.4-debian-11-r0
           imagePullPolicy: "IfNotPresent"
           securityContext:
+            allowPrivilegeEscalation: false
+            privileged: false
             runAsNonRoot: true
             runAsUser: 1001
           env:

@renovate renovate bot force-pushed the renovate/yourls-5.x branch from 8d2f5c3 to 3c918a5 Compare July 7, 2023 20:36
@renovate renovate bot changed the title feat(deps): update helm release yourls to 5.4.14 feat(deps): update helm release yourls to 5.4.15 Jul 7, 2023
@github-actions
Copy link

github-actions bot commented Jul 7, 2023

Path: cluster/apps/collab/yourls/helm-release.yaml
Version: 5.2.7 -> 5.4.15

@@ -23,8 +23,8 @@
     app.kubernetes.io/managed-by: Helm
 type: Opaque
 data:
-  mariadb-root-password: "QWFZcE5XYWZuYg=="
-  mariadb-password: "NlJNRWtpOWdmUQ=="
+  mariadb-root-password: "YURudVVNbzY4VA=="
+  mariadb-password: "dDFKaHlYTG14dA=="
 ---
 # Source: yourls/templates/secrets.yaml
 apiVersion: v1
@@ -58,6 +58,7 @@
     skip-name-resolve
     explicit_defaults_for_timestamp
     basedir=/opt/bitnami/mariadb
+    datadir=/bitnami/mariadb/data
     plugin_dir=/opt/bitnami/mariadb/plugin
     port=3306
     socket=/opt/bitnami/mariadb/tmp/mysql.sock
@@ -69,7 +70,6 @@
     character-set-server=UTF8
     collation-server=utf8_general_ci
     slow_query_log=0
-    slow_query_log_file=/opt/bitnami/mariadb/logs/mysqld.log
     long_query_time=10.0
 
     [client]
@@ -206,8 +206,6 @@
                   matchLabels:
                     app.kubernetes.io/name: yourls
                     app.kubernetes.io/instance: yourls
-                namespaces:
-                  - "default"
                 topologyKey: kubernetes.io/hostname
               weight: 1
         nodeAffinity:
@@ -344,7 +342,7 @@
   template:
     metadata:
       annotations:
-        checksum/configuration: af5c671ff745ded0f8434c386e4bfffd387106e11527eecb5adb4f3e6fa0a454
+        checksum/configuration: 68b6609dc83be2d1df85dac897ffcacebe86b0a492ec73cccebbc0d67d70852b
       labels:
         app.kubernetes.io/name: mariadb
         app.kubernetes.io/instance: yourls
@@ -362,8 +360,6 @@
                     app.kubernetes.io/name: mariadb
                     app.kubernetes.io/instance: yourls
                     app.kubernetes.io/component: primary
-                namespaces:
-                  - "default"
                 topologyKey: kubernetes.io/hostname
               weight: 1
         nodeAffinity:
@@ -371,9 +367,11 @@
         fsGroup: 1001
       containers:
         - name: mariadb
-          image: docker.io/bitnami/mariadb:10.6.10-debian-11-r6
+          image: docker.io/bitnami/mariadb:10.11.4-debian-11-r10
           imagePullPolicy: "IfNotPresent"
           securityContext:
+            allowPrivilegeEscalation: false
+            privileged: false
             runAsNonRoot: true
             runAsUser: 1001
           env:

@renovate renovate bot force-pushed the renovate/yourls-5.x branch from 3c918a5 to d4cf643 Compare July 13, 2023 20:30
@renovate renovate bot changed the title feat(deps): update helm release yourls to 5.4.15 feat(deps): update helm release yourls to 5.4.16 Jul 13, 2023
@github-actions
Copy link

Path: cluster/apps/collab/yourls/helm-release.yaml
Version: 5.2.7 -> 5.4.16

@@ -23,8 +23,8 @@
     app.kubernetes.io/managed-by: Helm
 type: Opaque
 data:
-  mariadb-root-password: "ZmRycFI3Qlc0Zg=="
-  mariadb-password: "b2VJQ0FCS1B5Ug=="
+  mariadb-root-password: "d0NJNjliNnA3Qw=="
+  mariadb-password: "MWtZYWFqbWJ4eA=="
 ---
 # Source: yourls/templates/secrets.yaml
 apiVersion: v1
@@ -58,6 +58,7 @@
     skip-name-resolve
     explicit_defaults_for_timestamp
     basedir=/opt/bitnami/mariadb
+    datadir=/bitnami/mariadb/data
     plugin_dir=/opt/bitnami/mariadb/plugin
     port=3306
     socket=/opt/bitnami/mariadb/tmp/mysql.sock
@@ -69,7 +70,6 @@
     character-set-server=UTF8
     collation-server=utf8_general_ci
     slow_query_log=0
-    slow_query_log_file=/opt/bitnami/mariadb/logs/mysqld.log
     long_query_time=10.0
 
     [client]
@@ -206,8 +206,6 @@
                   matchLabels:
                     app.kubernetes.io/name: yourls
                     app.kubernetes.io/instance: yourls
-                namespaces:
-                  - "default"
                 topologyKey: kubernetes.io/hostname
               weight: 1
         nodeAffinity:
@@ -344,7 +342,7 @@
   template:
     metadata:
       annotations:
-        checksum/configuration: af5c671ff745ded0f8434c386e4bfffd387106e11527eecb5adb4f3e6fa0a454
+        checksum/configuration: 8d3c7b6ffa3e040f56cfde6e9e2d5b02d96242656696f0c98423be99c4664108
       labels:
         app.kubernetes.io/name: mariadb
         app.kubernetes.io/instance: yourls
@@ -362,8 +360,6 @@
                     app.kubernetes.io/name: mariadb
                     app.kubernetes.io/instance: yourls
                     app.kubernetes.io/component: primary
-                namespaces:
-                  - "default"
                 topologyKey: kubernetes.io/hostname
               weight: 1
         nodeAffinity:
@@ -371,9 +367,11 @@
         fsGroup: 1001
       containers:
         - name: mariadb
-          image: docker.io/bitnami/mariadb:10.6.10-debian-11-r6
+          image: docker.io/bitnami/mariadb:10.11.4-debian-11-r12
           imagePullPolicy: "IfNotPresent"
           securityContext:
+            allowPrivilegeEscalation: false
+            privileged: false
             runAsNonRoot: true
             runAsUser: 1001
           env:

@renovate renovate bot force-pushed the renovate/yourls-5.x branch from d4cf643 to b077989 Compare July 26, 2023 06:24
@renovate renovate bot changed the title feat(deps): update helm release yourls to 5.4.16 feat(deps): update helm release yourls to 5.4.17 Jul 26, 2023
@github-actions
Copy link

Path: cluster/apps/collab/yourls/helm-release.yaml
Version: 5.2.7 -> 5.4.17

@@ -23,8 +23,8 @@
     app.kubernetes.io/managed-by: Helm
 type: Opaque
 data:
-  mariadb-root-password: "R0JDWVJoR0JyZw=="
-  mariadb-password: "OW9Fckp4dDZVMA=="
+  mariadb-root-password: "WWtNUk1ub1pZTQ=="
+  mariadb-password: "T25EQjI5RVBZaw=="
 ---
 # Source: yourls/templates/secrets.yaml
 apiVersion: v1
@@ -58,6 +58,7 @@
     skip-name-resolve
     explicit_defaults_for_timestamp
     basedir=/opt/bitnami/mariadb
+    datadir=/bitnami/mariadb/data
     plugin_dir=/opt/bitnami/mariadb/plugin
     port=3306
     socket=/opt/bitnami/mariadb/tmp/mysql.sock
@@ -69,7 +70,6 @@
     character-set-server=UTF8
     collation-server=utf8_general_ci
     slow_query_log=0
-    slow_query_log_file=/opt/bitnami/mariadb/logs/mysqld.log
     long_query_time=10.0
 
     [client]
@@ -206,8 +206,6 @@
                   matchLabels:
                     app.kubernetes.io/name: yourls
                     app.kubernetes.io/instance: yourls
-                namespaces:
-                  - "default"
                 topologyKey: kubernetes.io/hostname
               weight: 1
         nodeAffinity:
@@ -344,7 +342,7 @@
   template:
     metadata:
       annotations:
-        checksum/configuration: af5c671ff745ded0f8434c386e4bfffd387106e11527eecb5adb4f3e6fa0a454
+        checksum/configuration: f089ab7986bd9e9da7f12fdd41786329a458ccca9c6559e83d9ac24f367c1454
       labels:
         app.kubernetes.io/name: mariadb
         app.kubernetes.io/instance: yourls
@@ -362,8 +360,6 @@
                     app.kubernetes.io/name: mariadb
                     app.kubernetes.io/instance: yourls
                     app.kubernetes.io/component: primary
-                namespaces:
-                  - "default"
                 topologyKey: kubernetes.io/hostname
               weight: 1
         nodeAffinity:
@@ -371,9 +367,11 @@
         fsGroup: 1001
       containers:
         - name: mariadb
-          image: docker.io/bitnami/mariadb:10.6.10-debian-11-r6
+          image: docker.io/bitnami/mariadb:10.11.4-debian-11-r46
           imagePullPolicy: "IfNotPresent"
           securityContext:
+            allowPrivilegeEscalation: false
+            privileged: false
             runAsNonRoot: true
             runAsUser: 1001
           env:

@renovate renovate bot changed the title feat(deps): update helm release yourls to 5.14.3 feat(deps): update helm release yourls to 5.14.4 Jul 25, 2024
Copy link

Path: cluster/apps/collab/yourls/helm-release.yaml
Version: 5.2.7 -> 5.14.4

@@ -1,3 +1,50 @@
+# Source: yourls/charts/mariadb/templates/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+  name: yourls-mariadb
+  namespace: "default"
+  labels:
+    app.kubernetes.io/instance: yourls
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mariadb
+spec:
+  podSelector:
+    matchLabels:
+      app.kubernetes.io/instance: yourls
+      app.kubernetes.io/managed-by: Helm
+      app.kubernetes.io/name: mariadb
+      app.kubernetes.io/version: 11.4.2
+      helm.sh/chart: mariadb-19.0.3
+  policyTypes:
+    - Ingress
+    - Egress
+  egress:
+    - {}
+  ingress:
+    - ports:
+        - port: 3306
+        - port: 3306
+---
+# Source: yourls/charts/mariadb/templates/primary/pdb.yaml
+apiVersion: policy/v1
+kind: PodDisruptionBudget
+metadata:
+  name: yourls-mariadb
+  namespace: "default"
+  labels:
+    app.kubernetes.io/instance: yourls
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mariadb
+    app.kubernetes.io/component: primary
+spec:
+  maxUnavailable: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/instance: yourls
+      app.kubernetes.io/name: mariadb
+      app.kubernetes.io/component: primary
+---
 # Source: yourls/charts/mariadb/templates/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
@@ -5,10 +52,9 @@
   name: yourls-mariadb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: mariadb
     app.kubernetes.io/instance: yourls
     app.kubernetes.io/managed-by: Helm
-  annotations:
+    app.kubernetes.io/name: mariadb
 automountServiceAccountToken: false
 ---
 # Source: yourls/charts/mariadb/templates/secrets.yaml
@@ -18,13 +64,13 @@
   name: yourls-mariadb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: mariadb
     app.kubernetes.io/instance: yourls
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mariadb
 type: Opaque
 data:
-  mariadb-root-password: "a1hFNjVNSnlpdg=="
-  mariadb-password: "MFNiMTA1NUhwRQ=="
+  mariadb-root-password: "NnpOeVp4NmhZNA=="
+  mariadb-password: "NDgxcWJyUm9ycw=="
 ---
 # Source: yourls/templates/secrets.yaml
 apiVersion: v1
@@ -48,9 +94,9 @@
   name: yourls-mariadb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: mariadb
     app.kubernetes.io/instance: yourls
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mariadb
     app.kubernetes.io/component: primary
 data:
   my.cnf: |-
@@ -58,6 +104,7 @@
     skip-name-resolve
     explicit_defaults_for_timestamp
     basedir=/opt/bitnami/mariadb
+    datadir=/bitnami/mariadb/data
     plugin_dir=/opt/bitnami/mariadb/plugin
     port=3306
     socket=/opt/bitnami/mariadb/tmp/mysql.sock
@@ -69,7 +116,6 @@
     character-set-server=UTF8
     collation-server=utf8_general_ci
     slow_query_log=0
-    slow_query_log_file=/opt/bitnami/mariadb/logs/mysqld.log
     long_query_time=10.0
 
     [client]
@@ -90,9 +136,9 @@
   name: yourls-mariadb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: mariadb
     app.kubernetes.io/instance: yourls
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mariadb
     app.kubernetes.io/component: primary
   annotations:
 spec:
@@ -105,8 +151,8 @@
       targetPort: mysql
       nodePort: null
   selector:
-    app.kubernetes.io/name: mariadb
     app.kubernetes.io/instance: yourls
+    app.kubernetes.io/name: mariadb
     app.kubernetes.io/component: primary
 ---
 # Source: yourls/templates/metrics-svc.yaml
@@ -177,7 +223,6 @@
       app.kubernetes.io/name: yourls
       app.kubernetes.io/instance: yourls
   strategy:
-    rollingUpdate: {}
     type: RollingUpdate
   replicas: 1
   template:
@@ -204,10 +249,8 @@
             - podAffinityTerm:
                 labelSelector:
                   matchLabels:
-                    app.kubernetes.io/name: yourls
                     app.kubernetes.io/instance: yourls
-                namespaces:
-                  - "default"
+                    app.kubernetes.io/name: yourls
                 topologyKey: kubernetes.io/hostname
               weight: 1
         nodeAffinity:
@@ -290,7 +333,7 @@
             - mountPath: /var/www/html
               name: yourls-data
         - name: metrics
-          image: docker.io/bitnami/apache-exporter:0.11.0-debian-10-r36
+          image: docker.io/bitnami/apache-exporter:1.0.8-debian-12-r5
           imagePullPolicy: "Always"
           command:
             - /bin/apache_exporter
@@ -326,17 +369,17 @@
   name: yourls-mariadb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: mariadb
     app.kubernetes.io/instance: yourls
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mariadb
     app.kubernetes.io/component: primary
 spec:
   replicas: 1
   revisionHistoryLimit: 10
   selector:
     matchLabels:
-      app.kubernetes.io/name: mariadb
       app.kubernetes.io/instance: yourls
+      app.kubernetes.io/name: mariadb
       app.kubernetes.io/component: primary
   serviceName: yourls-mariadb
   updateStrategy:
@@ -344,13 +387,14 @@
   template:
     metadata:
       annotations:
-        checksum/configuration: af5c671ff745ded0f8434c386e4bfffd387106e11527eecb5adb4f3e6fa0a454
+        checksum/configuration: 3c5c102bfa99bc96e6102eb722dce1b11f902fef246585ff222fb0037cf9890f
       labels:
-        app.kubernetes.io/name: mariadb
         app.kubernetes.io/instance: yourls
         app.kubernetes.io/managed-by: Helm
+        app.kubernetes.io/name: mariadb
         app.kubernetes.io/component: primary
     spec:
+      automountServiceAccountToken: false
       serviceAccountName: yourls-mariadb
       affinity:
         podAffinity:
@@ -359,23 +403,75 @@
             - podAffinityTerm:
                 labelSelector:
                   matchLabels:
-                    app.kubernetes.io/name: mariadb
                     app.kubernetes.io/instance: yourls
+                    app.kubernetes.io/name: mariadb
                     app.kubernetes.io/component: primary
-                namespaces:
-                  - "default"
                 topologyKey: kubernetes.io/hostname
               weight: 1
         nodeAffinity:
       securityContext:
         fsGroup: 1001
+        fsGroupChangePolicy: Always
+        supplementalGroups: []
+        sysctls: []
+      initContainers:
+        - name: preserve-logs-symlinks
+          image: docker.io/bitnami/mariadb:11.4.2-debian-12-r2
+          imagePullPolicy: "IfNotPresent"
+          securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
+            privileged: false
+            readOnlyRootFilesystem: true
+            runAsGroup: 1001
+            runAsNonRoot: true
+            runAsUser: 1001
+            seLinuxOptions: {}
+            seccompProfile:
+              type: RuntimeDefault
+          resources:
+            limits:
+              cpu: 375m
+              ephemeral-storage: 2Gi
+              memory: 384Mi
+            requests:
+              cpu: 250m
+              ephemeral-storage: 50Mi
+              memory: 256Mi
+          command:
+            - /bin/bash
+          args:
+            - -ec
+            - |
+              #!/bin/bash
+
+              . /opt/bitnami/scripts/libfs.sh
+              # We copy the logs folder because it has symlinks to stdout and stderr
+              if ! is_dir_empty /opt/bitnami/mariadb/logs; then
+                cp -r /opt/bitnami/mariadb/logs /emptydir/app-logs-dir
+              fi
+          volumeMounts:
+            - name: empty-dir
+              mountPath: /emptydir
       containers:
         - name: mariadb
-          image: docker.io/bitnami/mariadb:10.6.10-debian-11-r6
+          image: docker.io/bitnami/mariadb:11.4.2-debian-12-r2
           imagePullPolicy: "IfNotPresent"
           securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
+            privileged: false
+            readOnlyRootFilesystem: true
+            runAsGroup: 1001
             runAsNonRoot: true
             runAsUser: 1001
+            seLinuxOptions: {}
+            seccompProfile:
+              type: RuntimeDefault
           env:
             - name: BITNAMI_DEBUG
               value: "false"
@@ -427,17 +523,37 @@
                   if [[ -f "${MARIADB_ROOT_PASSWORD_FILE:-}" ]]; then
                       password_aux=$(cat "$MARIADB_ROOT_PASSWORD_FILE")
                   fi
-                  mysqladmin status -uroot -p"${password_aux}"
+                  mysqladmin ping -uroot -p"${password_aux}"
           resources:
-            limits: {}
-            requests: {}
+            limits:
+              cpu: 375m
+              ephemeral-storage: 2Gi
+              memory: 384Mi
+            requests:
+              cpu: 250m
+              ephemeral-storage: 50Mi
+              memory: 256Mi
           volumeMounts:
             - name: data
               mountPath: /bitnami/mariadb
             - name: config
               mountPath: /opt/bitnami/mariadb/conf/my.cnf
               subPath: my.cnf
+            - name: empty-dir
+              mountPath: /tmp
+              subPath: tmp-dir
+            - name: empty-dir
+              mountPath: /opt/bitnami/mariadb/conf
+              subPath: app-conf-dir
+            - name: empty-dir
+              mountPath: /opt/bitnami/mariadb/tmp
+              subPath: app-tmp-dir
+            - name: empty-dir
+              mountPath: /opt/bitnami/mariadb/logs
+              subPath: app-logs-dir
       volumes:
+        - name: empty-dir
+          emptyDir: {}
         - name: config
           configMap:
             name: yourls-mariadb
@@ -445,8 +561,8 @@
     - metadata:
         name: data
         labels:
-          app.kubernetes.io/name: mariadb
           app.kubernetes.io/instance: yourls
+          app.kubernetes.io/name: mariadb
           app.kubernetes.io/component: primary
       spec:
         accessModes:

@renovate renovate bot force-pushed the renovate/yourls-5.x branch from 17039e9 to 2fe37b7 Compare July 25, 2024 23:25
@renovate renovate bot changed the title feat(deps): update helm release yourls to 5.14.4 feat(deps): update helm release yourls to 5.14.5 Jul 25, 2024
Copy link

Path: cluster/apps/collab/yourls/helm-release.yaml
Version: 5.2.7 -> 5.14.5

@@ -1,3 +1,50 @@
+# Source: yourls/charts/mariadb/templates/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+  name: yourls-mariadb
+  namespace: "default"
+  labels:
+    app.kubernetes.io/instance: yourls
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mariadb
+spec:
+  podSelector:
+    matchLabels:
+      app.kubernetes.io/instance: yourls
+      app.kubernetes.io/managed-by: Helm
+      app.kubernetes.io/name: mariadb
+      app.kubernetes.io/version: 11.4.2
+      helm.sh/chart: mariadb-19.0.3
+  policyTypes:
+    - Ingress
+    - Egress
+  egress:
+    - {}
+  ingress:
+    - ports:
+        - port: 3306
+        - port: 3306
+---
+# Source: yourls/charts/mariadb/templates/primary/pdb.yaml
+apiVersion: policy/v1
+kind: PodDisruptionBudget
+metadata:
+  name: yourls-mariadb
+  namespace: "default"
+  labels:
+    app.kubernetes.io/instance: yourls
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mariadb
+    app.kubernetes.io/component: primary
+spec:
+  maxUnavailable: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/instance: yourls
+      app.kubernetes.io/name: mariadb
+      app.kubernetes.io/component: primary
+---
 # Source: yourls/charts/mariadb/templates/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
@@ -5,10 +52,9 @@
   name: yourls-mariadb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: mariadb
     app.kubernetes.io/instance: yourls
     app.kubernetes.io/managed-by: Helm
-  annotations:
+    app.kubernetes.io/name: mariadb
 automountServiceAccountToken: false
 ---
 # Source: yourls/charts/mariadb/templates/secrets.yaml
@@ -18,13 +64,13 @@
   name: yourls-mariadb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: mariadb
     app.kubernetes.io/instance: yourls
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mariadb
 type: Opaque
 data:
-  mariadb-root-password: "R0NMZFZwclNieQ=="
-  mariadb-password: "M202R3Rsek9INA=="
+  mariadb-root-password: "bllJWGxHcW13Rg=="
+  mariadb-password: "VUd5TTJZSHYyaA=="
 ---
 # Source: yourls/templates/secrets.yaml
 apiVersion: v1
@@ -48,9 +94,9 @@
   name: yourls-mariadb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: mariadb
     app.kubernetes.io/instance: yourls
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mariadb
     app.kubernetes.io/component: primary
 data:
   my.cnf: |-
@@ -58,6 +104,7 @@
     skip-name-resolve
     explicit_defaults_for_timestamp
     basedir=/opt/bitnami/mariadb
+    datadir=/bitnami/mariadb/data
     plugin_dir=/opt/bitnami/mariadb/plugin
     port=3306
     socket=/opt/bitnami/mariadb/tmp/mysql.sock
@@ -69,7 +116,6 @@
     character-set-server=UTF8
     collation-server=utf8_general_ci
     slow_query_log=0
-    slow_query_log_file=/opt/bitnami/mariadb/logs/mysqld.log
     long_query_time=10.0
 
     [client]
@@ -90,9 +136,9 @@
   name: yourls-mariadb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: mariadb
     app.kubernetes.io/instance: yourls
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mariadb
     app.kubernetes.io/component: primary
   annotations:
 spec:
@@ -105,8 +151,8 @@
       targetPort: mysql
       nodePort: null
   selector:
-    app.kubernetes.io/name: mariadb
     app.kubernetes.io/instance: yourls
+    app.kubernetes.io/name: mariadb
     app.kubernetes.io/component: primary
 ---
 # Source: yourls/templates/metrics-svc.yaml
@@ -177,7 +223,6 @@
       app.kubernetes.io/name: yourls
       app.kubernetes.io/instance: yourls
   strategy:
-    rollingUpdate: {}
     type: RollingUpdate
   replicas: 1
   template:
@@ -204,10 +249,8 @@
             - podAffinityTerm:
                 labelSelector:
                   matchLabels:
-                    app.kubernetes.io/name: yourls
                     app.kubernetes.io/instance: yourls
-                namespaces:
-                  - "default"
+                    app.kubernetes.io/name: yourls
                 topologyKey: kubernetes.io/hostname
               weight: 1
         nodeAffinity:
@@ -290,7 +333,7 @@
             - mountPath: /var/www/html
               name: yourls-data
         - name: metrics
-          image: docker.io/bitnami/apache-exporter:0.11.0-debian-10-r36
+          image: docker.io/bitnami/apache-exporter:1.0.8-debian-12-r6
           imagePullPolicy: "Always"
           command:
             - /bin/apache_exporter
@@ -326,17 +369,17 @@
   name: yourls-mariadb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: mariadb
     app.kubernetes.io/instance: yourls
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mariadb
     app.kubernetes.io/component: primary
 spec:
   replicas: 1
   revisionHistoryLimit: 10
   selector:
     matchLabels:
-      app.kubernetes.io/name: mariadb
       app.kubernetes.io/instance: yourls
+      app.kubernetes.io/name: mariadb
       app.kubernetes.io/component: primary
   serviceName: yourls-mariadb
   updateStrategy:
@@ -344,13 +387,14 @@
   template:
     metadata:
       annotations:
-        checksum/configuration: af5c671ff745ded0f8434c386e4bfffd387106e11527eecb5adb4f3e6fa0a454
+        checksum/configuration: 3c5c102bfa99bc96e6102eb722dce1b11f902fef246585ff222fb0037cf9890f
       labels:
-        app.kubernetes.io/name: mariadb
         app.kubernetes.io/instance: yourls
         app.kubernetes.io/managed-by: Helm
+        app.kubernetes.io/name: mariadb
         app.kubernetes.io/component: primary
     spec:
+      automountServiceAccountToken: false
       serviceAccountName: yourls-mariadb
       affinity:
         podAffinity:
@@ -359,23 +403,75 @@
             - podAffinityTerm:
                 labelSelector:
                   matchLabels:
-                    app.kubernetes.io/name: mariadb
                     app.kubernetes.io/instance: yourls
+                    app.kubernetes.io/name: mariadb
                     app.kubernetes.io/component: primary
-                namespaces:
-                  - "default"
                 topologyKey: kubernetes.io/hostname
               weight: 1
         nodeAffinity:
       securityContext:
         fsGroup: 1001
+        fsGroupChangePolicy: Always
+        supplementalGroups: []
+        sysctls: []
+      initContainers:
+        - name: preserve-logs-symlinks
+          image: docker.io/bitnami/mariadb:11.4.2-debian-12-r2
+          imagePullPolicy: "IfNotPresent"
+          securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
+            privileged: false
+            readOnlyRootFilesystem: true
+            runAsGroup: 1001
+            runAsNonRoot: true
+            runAsUser: 1001
+            seLinuxOptions: {}
+            seccompProfile:
+              type: RuntimeDefault
+          resources:
+            limits:
+              cpu: 375m
+              ephemeral-storage: 2Gi
+              memory: 384Mi
+            requests:
+              cpu: 250m
+              ephemeral-storage: 50Mi
+              memory: 256Mi
+          command:
+            - /bin/bash
+          args:
+            - -ec
+            - |
+              #!/bin/bash
+
+              . /opt/bitnami/scripts/libfs.sh
+              # We copy the logs folder because it has symlinks to stdout and stderr
+              if ! is_dir_empty /opt/bitnami/mariadb/logs; then
+                cp -r /opt/bitnami/mariadb/logs /emptydir/app-logs-dir
+              fi
+          volumeMounts:
+            - name: empty-dir
+              mountPath: /emptydir
       containers:
         - name: mariadb
-          image: docker.io/bitnami/mariadb:10.6.10-debian-11-r6
+          image: docker.io/bitnami/mariadb:11.4.2-debian-12-r2
           imagePullPolicy: "IfNotPresent"
           securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
+            privileged: false
+            readOnlyRootFilesystem: true
+            runAsGroup: 1001
             runAsNonRoot: true
             runAsUser: 1001
+            seLinuxOptions: {}
+            seccompProfile:
+              type: RuntimeDefault
           env:
             - name: BITNAMI_DEBUG
               value: "false"
@@ -427,17 +523,37 @@
                   if [[ -f "${MARIADB_ROOT_PASSWORD_FILE:-}" ]]; then
                       password_aux=$(cat "$MARIADB_ROOT_PASSWORD_FILE")
                   fi
-                  mysqladmin status -uroot -p"${password_aux}"
+                  mysqladmin ping -uroot -p"${password_aux}"
           resources:
-            limits: {}
-            requests: {}
+            limits:
+              cpu: 375m
+              ephemeral-storage: 2Gi
+              memory: 384Mi
+            requests:
+              cpu: 250m
+              ephemeral-storage: 50Mi
+              memory: 256Mi
           volumeMounts:
             - name: data
               mountPath: /bitnami/mariadb
             - name: config
               mountPath: /opt/bitnami/mariadb/conf/my.cnf
               subPath: my.cnf
+            - name: empty-dir
+              mountPath: /tmp
+              subPath: tmp-dir
+            - name: empty-dir
+              mountPath: /opt/bitnami/mariadb/conf
+              subPath: app-conf-dir
+            - name: empty-dir
+              mountPath: /opt/bitnami/mariadb/tmp
+              subPath: app-tmp-dir
+            - name: empty-dir
+              mountPath: /opt/bitnami/mariadb/logs
+              subPath: app-logs-dir
       volumes:
+        - name: empty-dir
+          emptyDir: {}
         - name: config
           configMap:
             name: yourls-mariadb
@@ -445,8 +561,8 @@
     - metadata:
         name: data
         labels:
-          app.kubernetes.io/name: mariadb
           app.kubernetes.io/instance: yourls
+          app.kubernetes.io/name: mariadb
           app.kubernetes.io/component: primary
       spec:
         accessModes:

@renovate renovate bot force-pushed the renovate/yourls-5.x branch from 2fe37b7 to 4b6670b Compare August 5, 2024 21:39
@renovate renovate bot changed the title feat(deps): update helm release yourls to 5.14.5 feat(deps): update helm release yourls to 5.14.6 Aug 5, 2024
Copy link

github-actions bot commented Aug 5, 2024

Path: cluster/apps/collab/yourls/helm-release.yaml
Version: 5.2.7 -> 5.14.6

@@ -1,3 +1,50 @@
+# Source: yourls/charts/mariadb/templates/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+  name: yourls-mariadb
+  namespace: "default"
+  labels:
+    app.kubernetes.io/instance: yourls
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mariadb
+spec:
+  podSelector:
+    matchLabels:
+      app.kubernetes.io/instance: yourls
+      app.kubernetes.io/managed-by: Helm
+      app.kubernetes.io/name: mariadb
+      app.kubernetes.io/version: 11.4.2
+      helm.sh/chart: mariadb-19.0.3
+  policyTypes:
+    - Ingress
+    - Egress
+  egress:
+    - {}
+  ingress:
+    - ports:
+        - port: 3306
+        - port: 3306
+---
+# Source: yourls/charts/mariadb/templates/primary/pdb.yaml
+apiVersion: policy/v1
+kind: PodDisruptionBudget
+metadata:
+  name: yourls-mariadb
+  namespace: "default"
+  labels:
+    app.kubernetes.io/instance: yourls
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mariadb
+    app.kubernetes.io/component: primary
+spec:
+  maxUnavailable: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/instance: yourls
+      app.kubernetes.io/name: mariadb
+      app.kubernetes.io/component: primary
+---
 # Source: yourls/charts/mariadb/templates/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
@@ -5,10 +52,9 @@
   name: yourls-mariadb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: mariadb
     app.kubernetes.io/instance: yourls
     app.kubernetes.io/managed-by: Helm
-  annotations:
+    app.kubernetes.io/name: mariadb
 automountServiceAccountToken: false
 ---
 # Source: yourls/charts/mariadb/templates/secrets.yaml
@@ -18,13 +64,13 @@
   name: yourls-mariadb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: mariadb
     app.kubernetes.io/instance: yourls
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mariadb
 type: Opaque
 data:
-  mariadb-root-password: "bGQxc2NGUzlPeA=="
-  mariadb-password: "RFNPSFJ5T0h3dw=="
+  mariadb-root-password: "d2VVR1dJRUZleg=="
+  mariadb-password: "Z1VvWHRhOWlUYw=="
 ---
 # Source: yourls/templates/secrets.yaml
 apiVersion: v1
@@ -48,9 +94,9 @@
   name: yourls-mariadb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: mariadb
     app.kubernetes.io/instance: yourls
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mariadb
     app.kubernetes.io/component: primary
 data:
   my.cnf: |-
@@ -58,6 +104,7 @@
     skip-name-resolve
     explicit_defaults_for_timestamp
     basedir=/opt/bitnami/mariadb
+    datadir=/bitnami/mariadb/data
     plugin_dir=/opt/bitnami/mariadb/plugin
     port=3306
     socket=/opt/bitnami/mariadb/tmp/mysql.sock
@@ -69,7 +116,6 @@
     character-set-server=UTF8
     collation-server=utf8_general_ci
     slow_query_log=0
-    slow_query_log_file=/opt/bitnami/mariadb/logs/mysqld.log
     long_query_time=10.0
 
     [client]
@@ -90,9 +136,9 @@
   name: yourls-mariadb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: mariadb
     app.kubernetes.io/instance: yourls
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mariadb
     app.kubernetes.io/component: primary
   annotations:
 spec:
@@ -105,8 +151,8 @@
       targetPort: mysql
       nodePort: null
   selector:
-    app.kubernetes.io/name: mariadb
     app.kubernetes.io/instance: yourls
+    app.kubernetes.io/name: mariadb
     app.kubernetes.io/component: primary
 ---
 # Source: yourls/templates/metrics-svc.yaml
@@ -177,7 +223,6 @@
       app.kubernetes.io/name: yourls
       app.kubernetes.io/instance: yourls
   strategy:
-    rollingUpdate: {}
     type: RollingUpdate
   replicas: 1
   template:
@@ -204,10 +249,8 @@
             - podAffinityTerm:
                 labelSelector:
                   matchLabels:
-                    app.kubernetes.io/name: yourls
                     app.kubernetes.io/instance: yourls
-                namespaces:
-                  - "default"
+                    app.kubernetes.io/name: yourls
                 topologyKey: kubernetes.io/hostname
               weight: 1
         nodeAffinity:
@@ -290,7 +333,7 @@
             - mountPath: /var/www/html
               name: yourls-data
         - name: metrics
-          image: docker.io/bitnami/apache-exporter:0.11.0-debian-10-r36
+          image: docker.io/bitnami/apache-exporter:1.0.8-debian-12-r6
           imagePullPolicy: "Always"
           command:
             - /bin/apache_exporter
@@ -326,17 +369,17 @@
   name: yourls-mariadb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: mariadb
     app.kubernetes.io/instance: yourls
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mariadb
     app.kubernetes.io/component: primary
 spec:
   replicas: 1
   revisionHistoryLimit: 10
   selector:
     matchLabels:
-      app.kubernetes.io/name: mariadb
       app.kubernetes.io/instance: yourls
+      app.kubernetes.io/name: mariadb
       app.kubernetes.io/component: primary
   serviceName: yourls-mariadb
   updateStrategy:
@@ -344,13 +387,14 @@
   template:
     metadata:
       annotations:
-        checksum/configuration: af5c671ff745ded0f8434c386e4bfffd387106e11527eecb5adb4f3e6fa0a454
+        checksum/configuration: 3c5c102bfa99bc96e6102eb722dce1b11f902fef246585ff222fb0037cf9890f
       labels:
-        app.kubernetes.io/name: mariadb
         app.kubernetes.io/instance: yourls
         app.kubernetes.io/managed-by: Helm
+        app.kubernetes.io/name: mariadb
         app.kubernetes.io/component: primary
     spec:
+      automountServiceAccountToken: false
       serviceAccountName: yourls-mariadb
       affinity:
         podAffinity:
@@ -359,23 +403,75 @@
             - podAffinityTerm:
                 labelSelector:
                   matchLabels:
-                    app.kubernetes.io/name: mariadb
                     app.kubernetes.io/instance: yourls
+                    app.kubernetes.io/name: mariadb
                     app.kubernetes.io/component: primary
-                namespaces:
-                  - "default"
                 topologyKey: kubernetes.io/hostname
               weight: 1
         nodeAffinity:
       securityContext:
         fsGroup: 1001
+        fsGroupChangePolicy: Always
+        supplementalGroups: []
+        sysctls: []
+      initContainers:
+        - name: preserve-logs-symlinks
+          image: docker.io/bitnami/mariadb:11.4.2-debian-12-r2
+          imagePullPolicy: "IfNotPresent"
+          securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
+            privileged: false
+            readOnlyRootFilesystem: true
+            runAsGroup: 1001
+            runAsNonRoot: true
+            runAsUser: 1001
+            seLinuxOptions: {}
+            seccompProfile:
+              type: RuntimeDefault
+          resources:
+            limits:
+              cpu: 375m
+              ephemeral-storage: 2Gi
+              memory: 384Mi
+            requests:
+              cpu: 250m
+              ephemeral-storage: 50Mi
+              memory: 256Mi
+          command:
+            - /bin/bash
+          args:
+            - -ec
+            - |
+              #!/bin/bash
+
+              . /opt/bitnami/scripts/libfs.sh
+              # We copy the logs folder because it has symlinks to stdout and stderr
+              if ! is_dir_empty /opt/bitnami/mariadb/logs; then
+                cp -r /opt/bitnami/mariadb/logs /emptydir/app-logs-dir
+              fi
+          volumeMounts:
+            - name: empty-dir
+              mountPath: /emptydir
       containers:
         - name: mariadb
-          image: docker.io/bitnami/mariadb:10.6.10-debian-11-r6
+          image: docker.io/bitnami/mariadb:11.4.2-debian-12-r2
           imagePullPolicy: "IfNotPresent"
           securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
+            privileged: false
+            readOnlyRootFilesystem: true
+            runAsGroup: 1001
             runAsNonRoot: true
             runAsUser: 1001
+            seLinuxOptions: {}
+            seccompProfile:
+              type: RuntimeDefault
           env:
             - name: BITNAMI_DEBUG
               value: "false"
@@ -427,17 +523,37 @@
                   if [[ -f "${MARIADB_ROOT_PASSWORD_FILE:-}" ]]; then
                       password_aux=$(cat "$MARIADB_ROOT_PASSWORD_FILE")
                   fi
-                  mysqladmin status -uroot -p"${password_aux}"
+                  mysqladmin ping -uroot -p"${password_aux}"
           resources:
-            limits: {}
-            requests: {}
+            limits:
+              cpu: 375m
+              ephemeral-storage: 2Gi
+              memory: 384Mi
+            requests:
+              cpu: 250m
+              ephemeral-storage: 50Mi
+              memory: 256Mi
           volumeMounts:
             - name: data
               mountPath: /bitnami/mariadb
             - name: config
               mountPath: /opt/bitnami/mariadb/conf/my.cnf
               subPath: my.cnf
+            - name: empty-dir
+              mountPath: /tmp
+              subPath: tmp-dir
+            - name: empty-dir
+              mountPath: /opt/bitnami/mariadb/conf
+              subPath: app-conf-dir
+            - name: empty-dir
+              mountPath: /opt/bitnami/mariadb/tmp
+              subPath: app-tmp-dir
+            - name: empty-dir
+              mountPath: /opt/bitnami/mariadb/logs
+              subPath: app-logs-dir
       volumes:
+        - name: empty-dir
+          emptyDir: {}
         - name: config
           configMap:
             name: yourls-mariadb
@@ -445,8 +561,8 @@
     - metadata:
         name: data
         labels:
-          app.kubernetes.io/name: mariadb
           app.kubernetes.io/instance: yourls
+          app.kubernetes.io/name: mariadb
           app.kubernetes.io/component: primary
       spec:
         accessModes:

@renovate renovate bot force-pushed the renovate/yourls-5.x branch from 4b6670b to 64cd2d2 Compare August 7, 2024 17:42
@renovate renovate bot changed the title feat(deps): update helm release yourls to 5.14.6 feat(deps): update helm release yourls to 5.14.7 Aug 7, 2024
Copy link

github-actions bot commented Aug 7, 2024

Path: cluster/apps/collab/yourls/helm-release.yaml
Version: 5.2.7 -> 5.14.7

@@ -1,3 +1,50 @@
+# Source: yourls/charts/mariadb/templates/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+  name: yourls-mariadb
+  namespace: "default"
+  labels:
+    app.kubernetes.io/instance: yourls
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mariadb
+spec:
+  podSelector:
+    matchLabels:
+      app.kubernetes.io/instance: yourls
+      app.kubernetes.io/managed-by: Helm
+      app.kubernetes.io/name: mariadb
+      app.kubernetes.io/version: 11.4.2
+      helm.sh/chart: mariadb-19.0.3
+  policyTypes:
+    - Ingress
+    - Egress
+  egress:
+    - {}
+  ingress:
+    - ports:
+        - port: 3306
+        - port: 3306
+---
+# Source: yourls/charts/mariadb/templates/primary/pdb.yaml
+apiVersion: policy/v1
+kind: PodDisruptionBudget
+metadata:
+  name: yourls-mariadb
+  namespace: "default"
+  labels:
+    app.kubernetes.io/instance: yourls
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mariadb
+    app.kubernetes.io/component: primary
+spec:
+  maxUnavailable: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/instance: yourls
+      app.kubernetes.io/name: mariadb
+      app.kubernetes.io/component: primary
+---
 # Source: yourls/charts/mariadb/templates/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
@@ -5,10 +52,9 @@
   name: yourls-mariadb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: mariadb
     app.kubernetes.io/instance: yourls
     app.kubernetes.io/managed-by: Helm
-  annotations:
+    app.kubernetes.io/name: mariadb
 automountServiceAccountToken: false
 ---
 # Source: yourls/charts/mariadb/templates/secrets.yaml
@@ -18,13 +64,13 @@
   name: yourls-mariadb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: mariadb
     app.kubernetes.io/instance: yourls
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mariadb
 type: Opaque
 data:
-  mariadb-root-password: "bGVOVVlSOFlVbA=="
-  mariadb-password: "NElJM1N4WjlReQ=="
+  mariadb-root-password: "ckM1QmdjYVBubw=="
+  mariadb-password: "NUxyMTlBZERBYw=="
 ---
 # Source: yourls/templates/secrets.yaml
 apiVersion: v1
@@ -48,9 +94,9 @@
   name: yourls-mariadb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: mariadb
     app.kubernetes.io/instance: yourls
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mariadb
     app.kubernetes.io/component: primary
 data:
   my.cnf: |-
@@ -58,6 +104,7 @@
     skip-name-resolve
     explicit_defaults_for_timestamp
     basedir=/opt/bitnami/mariadb
+    datadir=/bitnami/mariadb/data
     plugin_dir=/opt/bitnami/mariadb/plugin
     port=3306
     socket=/opt/bitnami/mariadb/tmp/mysql.sock
@@ -69,7 +116,6 @@
     character-set-server=UTF8
     collation-server=utf8_general_ci
     slow_query_log=0
-    slow_query_log_file=/opt/bitnami/mariadb/logs/mysqld.log
     long_query_time=10.0
 
     [client]
@@ -90,9 +136,9 @@
   name: yourls-mariadb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: mariadb
     app.kubernetes.io/instance: yourls
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mariadb
     app.kubernetes.io/component: primary
   annotations:
 spec:
@@ -105,8 +151,8 @@
       targetPort: mysql
       nodePort: null
   selector:
-    app.kubernetes.io/name: mariadb
     app.kubernetes.io/instance: yourls
+    app.kubernetes.io/name: mariadb
     app.kubernetes.io/component: primary
 ---
 # Source: yourls/templates/metrics-svc.yaml
@@ -177,7 +223,6 @@
       app.kubernetes.io/name: yourls
       app.kubernetes.io/instance: yourls
   strategy:
-    rollingUpdate: {}
     type: RollingUpdate
   replicas: 1
   template:
@@ -204,10 +249,8 @@
             - podAffinityTerm:
                 labelSelector:
                   matchLabels:
-                    app.kubernetes.io/name: yourls
                     app.kubernetes.io/instance: yourls
-                namespaces:
-                  - "default"
+                    app.kubernetes.io/name: yourls
                 topologyKey: kubernetes.io/hostname
               weight: 1
         nodeAffinity:
@@ -290,7 +333,7 @@
             - mountPath: /var/www/html
               name: yourls-data
         - name: metrics
-          image: docker.io/bitnami/apache-exporter:0.11.0-debian-10-r36
+          image: docker.io/bitnami/apache-exporter:1.0.8-debian-12-r7
           imagePullPolicy: "Always"
           command:
             - /bin/apache_exporter
@@ -326,17 +369,17 @@
   name: yourls-mariadb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: mariadb
     app.kubernetes.io/instance: yourls
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mariadb
     app.kubernetes.io/component: primary
 spec:
   replicas: 1
   revisionHistoryLimit: 10
   selector:
     matchLabels:
-      app.kubernetes.io/name: mariadb
       app.kubernetes.io/instance: yourls
+      app.kubernetes.io/name: mariadb
       app.kubernetes.io/component: primary
   serviceName: yourls-mariadb
   updateStrategy:
@@ -344,13 +387,14 @@
   template:
     metadata:
       annotations:
-        checksum/configuration: af5c671ff745ded0f8434c386e4bfffd387106e11527eecb5adb4f3e6fa0a454
+        checksum/configuration: 3c5c102bfa99bc96e6102eb722dce1b11f902fef246585ff222fb0037cf9890f
       labels:
-        app.kubernetes.io/name: mariadb
         app.kubernetes.io/instance: yourls
         app.kubernetes.io/managed-by: Helm
+        app.kubernetes.io/name: mariadb
         app.kubernetes.io/component: primary
     spec:
+      automountServiceAccountToken: false
       serviceAccountName: yourls-mariadb
       affinity:
         podAffinity:
@@ -359,23 +403,75 @@
             - podAffinityTerm:
                 labelSelector:
                   matchLabels:
-                    app.kubernetes.io/name: mariadb
                     app.kubernetes.io/instance: yourls
+                    app.kubernetes.io/name: mariadb
                     app.kubernetes.io/component: primary
-                namespaces:
-                  - "default"
                 topologyKey: kubernetes.io/hostname
               weight: 1
         nodeAffinity:
       securityContext:
         fsGroup: 1001
+        fsGroupChangePolicy: Always
+        supplementalGroups: []
+        sysctls: []
+      initContainers:
+        - name: preserve-logs-symlinks
+          image: docker.io/bitnami/mariadb:11.4.2-debian-12-r2
+          imagePullPolicy: "IfNotPresent"
+          securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
+            privileged: false
+            readOnlyRootFilesystem: true
+            runAsGroup: 1001
+            runAsNonRoot: true
+            runAsUser: 1001
+            seLinuxOptions: {}
+            seccompProfile:
+              type: RuntimeDefault
+          resources:
+            limits:
+              cpu: 375m
+              ephemeral-storage: 2Gi
+              memory: 384Mi
+            requests:
+              cpu: 250m
+              ephemeral-storage: 50Mi
+              memory: 256Mi
+          command:
+            - /bin/bash
+          args:
+            - -ec
+            - |
+              #!/bin/bash
+
+              . /opt/bitnami/scripts/libfs.sh
+              # We copy the logs folder because it has symlinks to stdout and stderr
+              if ! is_dir_empty /opt/bitnami/mariadb/logs; then
+                cp -r /opt/bitnami/mariadb/logs /emptydir/app-logs-dir
+              fi
+          volumeMounts:
+            - name: empty-dir
+              mountPath: /emptydir
       containers:
         - name: mariadb
-          image: docker.io/bitnami/mariadb:10.6.10-debian-11-r6
+          image: docker.io/bitnami/mariadb:11.4.2-debian-12-r2
           imagePullPolicy: "IfNotPresent"
           securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
+            privileged: false
+            readOnlyRootFilesystem: true
+            runAsGroup: 1001
             runAsNonRoot: true
             runAsUser: 1001
+            seLinuxOptions: {}
+            seccompProfile:
+              type: RuntimeDefault
           env:
             - name: BITNAMI_DEBUG
               value: "false"
@@ -427,17 +523,37 @@
                   if [[ -f "${MARIADB_ROOT_PASSWORD_FILE:-}" ]]; then
                       password_aux=$(cat "$MARIADB_ROOT_PASSWORD_FILE")
                   fi
-                  mysqladmin status -uroot -p"${password_aux}"
+                  mysqladmin ping -uroot -p"${password_aux}"
           resources:
-            limits: {}
-            requests: {}
+            limits:
+              cpu: 375m
+              ephemeral-storage: 2Gi
+              memory: 384Mi
+            requests:
+              cpu: 250m
+              ephemeral-storage: 50Mi
+              memory: 256Mi
           volumeMounts:
             - name: data
               mountPath: /bitnami/mariadb
             - name: config
               mountPath: /opt/bitnami/mariadb/conf/my.cnf
               subPath: my.cnf
+            - name: empty-dir
+              mountPath: /tmp
+              subPath: tmp-dir
+            - name: empty-dir
+              mountPath: /opt/bitnami/mariadb/conf
+              subPath: app-conf-dir
+            - name: empty-dir
+              mountPath: /opt/bitnami/mariadb/tmp
+              subPath: app-tmp-dir
+            - name: empty-dir
+              mountPath: /opt/bitnami/mariadb/logs
+              subPath: app-logs-dir
       volumes:
+        - name: empty-dir
+          emptyDir: {}
         - name: config
           configMap:
             name: yourls-mariadb
@@ -445,8 +561,8 @@
     - metadata:
         name: data
         labels:
-          app.kubernetes.io/name: mariadb
           app.kubernetes.io/instance: yourls
+          app.kubernetes.io/name: mariadb
           app.kubernetes.io/component: primary
       spec:
         accessModes:

@renovate renovate bot force-pushed the renovate/yourls-5.x branch from 64cd2d2 to 12db629 Compare August 9, 2024 14:59
@renovate renovate bot changed the title feat(deps): update helm release yourls to 5.14.7 feat(deps): update helm release yourls to 5.14.8 Aug 9, 2024
Copy link

github-actions bot commented Aug 9, 2024

Path: cluster/apps/collab/yourls/helm-release.yaml
Version: 5.2.7 -> 5.14.8

@@ -1,3 +1,50 @@
+# Source: yourls/charts/mariadb/templates/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+  name: yourls-mariadb
+  namespace: "default"
+  labels:
+    app.kubernetes.io/instance: yourls
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mariadb
+spec:
+  podSelector:
+    matchLabels:
+      app.kubernetes.io/instance: yourls
+      app.kubernetes.io/managed-by: Helm
+      app.kubernetes.io/name: mariadb
+      app.kubernetes.io/version: 11.4.2
+      helm.sh/chart: mariadb-19.0.3
+  policyTypes:
+    - Ingress
+    - Egress
+  egress:
+    - {}
+  ingress:
+    - ports:
+        - port: 3306
+        - port: 3306
+---
+# Source: yourls/charts/mariadb/templates/primary/pdb.yaml
+apiVersion: policy/v1
+kind: PodDisruptionBudget
+metadata:
+  name: yourls-mariadb
+  namespace: "default"
+  labels:
+    app.kubernetes.io/instance: yourls
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mariadb
+    app.kubernetes.io/component: primary
+spec:
+  maxUnavailable: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/instance: yourls
+      app.kubernetes.io/name: mariadb
+      app.kubernetes.io/component: primary
+---
 # Source: yourls/charts/mariadb/templates/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
@@ -5,10 +52,9 @@
   name: yourls-mariadb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: mariadb
     app.kubernetes.io/instance: yourls
     app.kubernetes.io/managed-by: Helm
-  annotations:
+    app.kubernetes.io/name: mariadb
 automountServiceAccountToken: false
 ---
 # Source: yourls/charts/mariadb/templates/secrets.yaml
@@ -18,13 +64,13 @@
   name: yourls-mariadb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: mariadb
     app.kubernetes.io/instance: yourls
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mariadb
 type: Opaque
 data:
-  mariadb-root-password: "N0lPTzl1T2xLYw=="
-  mariadb-password: "R0VjazRoMlpJbw=="
+  mariadb-root-password: "OWJCRU0xYlhBZg=="
+  mariadb-password: "OVp6MWVVeTk1UA=="
 ---
 # Source: yourls/templates/secrets.yaml
 apiVersion: v1
@@ -48,9 +94,9 @@
   name: yourls-mariadb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: mariadb
     app.kubernetes.io/instance: yourls
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mariadb
     app.kubernetes.io/component: primary
 data:
   my.cnf: |-
@@ -58,6 +104,7 @@
     skip-name-resolve
     explicit_defaults_for_timestamp
     basedir=/opt/bitnami/mariadb
+    datadir=/bitnami/mariadb/data
     plugin_dir=/opt/bitnami/mariadb/plugin
     port=3306
     socket=/opt/bitnami/mariadb/tmp/mysql.sock
@@ -69,7 +116,6 @@
     character-set-server=UTF8
     collation-server=utf8_general_ci
     slow_query_log=0
-    slow_query_log_file=/opt/bitnami/mariadb/logs/mysqld.log
     long_query_time=10.0
 
     [client]
@@ -90,9 +136,9 @@
   name: yourls-mariadb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: mariadb
     app.kubernetes.io/instance: yourls
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mariadb
     app.kubernetes.io/component: primary
   annotations:
 spec:
@@ -105,8 +151,8 @@
       targetPort: mysql
       nodePort: null
   selector:
-    app.kubernetes.io/name: mariadb
     app.kubernetes.io/instance: yourls
+    app.kubernetes.io/name: mariadb
     app.kubernetes.io/component: primary
 ---
 # Source: yourls/templates/metrics-svc.yaml
@@ -177,7 +223,6 @@
       app.kubernetes.io/name: yourls
       app.kubernetes.io/instance: yourls
   strategy:
-    rollingUpdate: {}
     type: RollingUpdate
   replicas: 1
   template:
@@ -204,10 +249,8 @@
             - podAffinityTerm:
                 labelSelector:
                   matchLabels:
-                    app.kubernetes.io/name: yourls
                     app.kubernetes.io/instance: yourls
-                namespaces:
-                  - "default"
+                    app.kubernetes.io/name: yourls
                 topologyKey: kubernetes.io/hostname
               weight: 1
         nodeAffinity:
@@ -290,7 +333,7 @@
             - mountPath: /var/www/html
               name: yourls-data
         - name: metrics
-          image: docker.io/bitnami/apache-exporter:0.11.0-debian-10-r36
+          image: docker.io/bitnami/apache-exporter:1.0.8-debian-12-r7
           imagePullPolicy: "Always"
           command:
             - /bin/apache_exporter
@@ -326,17 +369,17 @@
   name: yourls-mariadb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: mariadb
     app.kubernetes.io/instance: yourls
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mariadb
     app.kubernetes.io/component: primary
 spec:
   replicas: 1
   revisionHistoryLimit: 10
   selector:
     matchLabels:
-      app.kubernetes.io/name: mariadb
       app.kubernetes.io/instance: yourls
+      app.kubernetes.io/name: mariadb
       app.kubernetes.io/component: primary
   serviceName: yourls-mariadb
   updateStrategy:
@@ -344,13 +387,14 @@
   template:
     metadata:
       annotations:
-        checksum/configuration: af5c671ff745ded0f8434c386e4bfffd387106e11527eecb5adb4f3e6fa0a454
+        checksum/configuration: 3c5c102bfa99bc96e6102eb722dce1b11f902fef246585ff222fb0037cf9890f
       labels:
-        app.kubernetes.io/name: mariadb
         app.kubernetes.io/instance: yourls
         app.kubernetes.io/managed-by: Helm
+        app.kubernetes.io/name: mariadb
         app.kubernetes.io/component: primary
     spec:
+      automountServiceAccountToken: false
       serviceAccountName: yourls-mariadb
       affinity:
         podAffinity:
@@ -359,23 +403,75 @@
             - podAffinityTerm:
                 labelSelector:
                   matchLabels:
-                    app.kubernetes.io/name: mariadb
                     app.kubernetes.io/instance: yourls
+                    app.kubernetes.io/name: mariadb
                     app.kubernetes.io/component: primary
-                namespaces:
-                  - "default"
                 topologyKey: kubernetes.io/hostname
               weight: 1
         nodeAffinity:
       securityContext:
         fsGroup: 1001
+        fsGroupChangePolicy: Always
+        supplementalGroups: []
+        sysctls: []
+      initContainers:
+        - name: preserve-logs-symlinks
+          image: docker.io/bitnami/mariadb:11.4.2-debian-12-r2
+          imagePullPolicy: "IfNotPresent"
+          securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
+            privileged: false
+            readOnlyRootFilesystem: true
+            runAsGroup: 1001
+            runAsNonRoot: true
+            runAsUser: 1001
+            seLinuxOptions: {}
+            seccompProfile:
+              type: RuntimeDefault
+          resources:
+            limits:
+              cpu: 375m
+              ephemeral-storage: 2Gi
+              memory: 384Mi
+            requests:
+              cpu: 250m
+              ephemeral-storage: 50Mi
+              memory: 256Mi
+          command:
+            - /bin/bash
+          args:
+            - -ec
+            - |
+              #!/bin/bash
+
+              . /opt/bitnami/scripts/libfs.sh
+              # We copy the logs folder because it has symlinks to stdout and stderr
+              if ! is_dir_empty /opt/bitnami/mariadb/logs; then
+                cp -r /opt/bitnami/mariadb/logs /emptydir/app-logs-dir
+              fi
+          volumeMounts:
+            - name: empty-dir
+              mountPath: /emptydir
       containers:
         - name: mariadb
-          image: docker.io/bitnami/mariadb:10.6.10-debian-11-r6
+          image: docker.io/bitnami/mariadb:11.4.2-debian-12-r2
           imagePullPolicy: "IfNotPresent"
           securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
+            privileged: false
+            readOnlyRootFilesystem: true
+            runAsGroup: 1001
             runAsNonRoot: true
             runAsUser: 1001
+            seLinuxOptions: {}
+            seccompProfile:
+              type: RuntimeDefault
           env:
             - name: BITNAMI_DEBUG
               value: "false"
@@ -427,17 +523,37 @@
                   if [[ -f "${MARIADB_ROOT_PASSWORD_FILE:-}" ]]; then
                       password_aux=$(cat "$MARIADB_ROOT_PASSWORD_FILE")
                   fi
-                  mysqladmin status -uroot -p"${password_aux}"
+                  mysqladmin ping -uroot -p"${password_aux}"
           resources:
-            limits: {}
-            requests: {}
+            limits:
+              cpu: 375m
+              ephemeral-storage: 2Gi
+              memory: 384Mi
+            requests:
+              cpu: 250m
+              ephemeral-storage: 50Mi
+              memory: 256Mi
           volumeMounts:
             - name: data
               mountPath: /bitnami/mariadb
             - name: config
               mountPath: /opt/bitnami/mariadb/conf/my.cnf
               subPath: my.cnf
+            - name: empty-dir
+              mountPath: /tmp
+              subPath: tmp-dir
+            - name: empty-dir
+              mountPath: /opt/bitnami/mariadb/conf
+              subPath: app-conf-dir
+            - name: empty-dir
+              mountPath: /opt/bitnami/mariadb/tmp
+              subPath: app-tmp-dir
+            - name: empty-dir
+              mountPath: /opt/bitnami/mariadb/logs
+              subPath: app-logs-dir
       volumes:
+        - name: empty-dir
+          emptyDir: {}
         - name: config
           configMap:
             name: yourls-mariadb
@@ -445,8 +561,8 @@
     - metadata:
         name: data
         labels:
-          app.kubernetes.io/name: mariadb
           app.kubernetes.io/instance: yourls
+          app.kubernetes.io/name: mariadb
           app.kubernetes.io/component: primary
       spec:
         accessModes:

@renovate renovate bot force-pushed the renovate/yourls-5.x branch from 12db629 to f467210 Compare August 14, 2024 18:51
@renovate renovate bot changed the title feat(deps): update helm release yourls to 5.14.8 feat(deps): update helm release yourls to 5.14.9 Aug 14, 2024
Copy link

Path: cluster/apps/collab/yourls/helm-release.yaml
Version: 5.2.7 -> 5.14.9

@@ -1,3 +1,50 @@
+# Source: yourls/charts/mariadb/templates/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+  name: yourls-mariadb
+  namespace: "default"
+  labels:
+    app.kubernetes.io/instance: yourls
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mariadb
+spec:
+  podSelector:
+    matchLabels:
+      app.kubernetes.io/instance: yourls
+      app.kubernetes.io/managed-by: Helm
+      app.kubernetes.io/name: mariadb
+      app.kubernetes.io/version: 11.4.3
+      helm.sh/chart: mariadb-19.0.4
+  policyTypes:
+    - Ingress
+    - Egress
+  egress:
+    - {}
+  ingress:
+    - ports:
+        - port: 3306
+        - port: 3306
+---
+# Source: yourls/charts/mariadb/templates/primary/pdb.yaml
+apiVersion: policy/v1
+kind: PodDisruptionBudget
+metadata:
+  name: yourls-mariadb
+  namespace: "default"
+  labels:
+    app.kubernetes.io/instance: yourls
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mariadb
+    app.kubernetes.io/component: primary
+spec:
+  maxUnavailable: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/instance: yourls
+      app.kubernetes.io/name: mariadb
+      app.kubernetes.io/component: primary
+---
 # Source: yourls/charts/mariadb/templates/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
@@ -5,10 +52,9 @@
   name: yourls-mariadb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: mariadb
     app.kubernetes.io/instance: yourls
     app.kubernetes.io/managed-by: Helm
-  annotations:
+    app.kubernetes.io/name: mariadb
 automountServiceAccountToken: false
 ---
 # Source: yourls/charts/mariadb/templates/secrets.yaml
@@ -18,13 +64,13 @@
   name: yourls-mariadb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: mariadb
     app.kubernetes.io/instance: yourls
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mariadb
 type: Opaque
 data:
-  mariadb-root-password: "bDAxMkdzNzc4QQ=="
-  mariadb-password: "blM1NzFlS1lxeA=="
+  mariadb-root-password: "N0lGTTRaZUFUYQ=="
+  mariadb-password: "OU9UWE5VaWNDaw=="
 ---
 # Source: yourls/templates/secrets.yaml
 apiVersion: v1
@@ -48,9 +94,9 @@
   name: yourls-mariadb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: mariadb
     app.kubernetes.io/instance: yourls
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mariadb
     app.kubernetes.io/component: primary
 data:
   my.cnf: |-
@@ -58,6 +104,7 @@
     skip-name-resolve
     explicit_defaults_for_timestamp
     basedir=/opt/bitnami/mariadb
+    datadir=/bitnami/mariadb/data
     plugin_dir=/opt/bitnami/mariadb/plugin
     port=3306
     socket=/opt/bitnami/mariadb/tmp/mysql.sock
@@ -69,7 +116,6 @@
     character-set-server=UTF8
     collation-server=utf8_general_ci
     slow_query_log=0
-    slow_query_log_file=/opt/bitnami/mariadb/logs/mysqld.log
     long_query_time=10.0
 
     [client]
@@ -90,9 +136,9 @@
   name: yourls-mariadb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: mariadb
     app.kubernetes.io/instance: yourls
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mariadb
     app.kubernetes.io/component: primary
   annotations:
 spec:
@@ -105,8 +151,8 @@
       targetPort: mysql
       nodePort: null
   selector:
-    app.kubernetes.io/name: mariadb
     app.kubernetes.io/instance: yourls
+    app.kubernetes.io/name: mariadb
     app.kubernetes.io/component: primary
 ---
 # Source: yourls/templates/metrics-svc.yaml
@@ -177,7 +223,6 @@
       app.kubernetes.io/name: yourls
       app.kubernetes.io/instance: yourls
   strategy:
-    rollingUpdate: {}
     type: RollingUpdate
   replicas: 1
   template:
@@ -204,10 +249,8 @@
             - podAffinityTerm:
                 labelSelector:
                   matchLabels:
-                    app.kubernetes.io/name: yourls
                     app.kubernetes.io/instance: yourls
-                namespaces:
-                  - "default"
+                    app.kubernetes.io/name: yourls
                 topologyKey: kubernetes.io/hostname
               weight: 1
         nodeAffinity:
@@ -290,7 +333,7 @@
             - mountPath: /var/www/html
               name: yourls-data
         - name: metrics
-          image: docker.io/bitnami/apache-exporter:0.11.0-debian-10-r36
+          image: docker.io/bitnami/apache-exporter:1.0.8-debian-12-r7
           imagePullPolicy: "Always"
           command:
             - /bin/apache_exporter
@@ -326,17 +369,17 @@
   name: yourls-mariadb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: mariadb
     app.kubernetes.io/instance: yourls
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mariadb
     app.kubernetes.io/component: primary
 spec:
   replicas: 1
   revisionHistoryLimit: 10
   selector:
     matchLabels:
-      app.kubernetes.io/name: mariadb
       app.kubernetes.io/instance: yourls
+      app.kubernetes.io/name: mariadb
       app.kubernetes.io/component: primary
   serviceName: yourls-mariadb
   updateStrategy:
@@ -344,13 +387,14 @@
   template:
     metadata:
       annotations:
-        checksum/configuration: af5c671ff745ded0f8434c386e4bfffd387106e11527eecb5adb4f3e6fa0a454
+        checksum/configuration: 7d0db77a992c64f298ab7bcc7b424b696b1d26cff5176d1a5e851eb05e2d21e3
       labels:
-        app.kubernetes.io/name: mariadb
         app.kubernetes.io/instance: yourls
         app.kubernetes.io/managed-by: Helm
+        app.kubernetes.io/name: mariadb
         app.kubernetes.io/component: primary
     spec:
+      automountServiceAccountToken: false
       serviceAccountName: yourls-mariadb
       affinity:
         podAffinity:
@@ -359,23 +403,75 @@
             - podAffinityTerm:
                 labelSelector:
                   matchLabels:
-                    app.kubernetes.io/name: mariadb
                     app.kubernetes.io/instance: yourls
+                    app.kubernetes.io/name: mariadb
                     app.kubernetes.io/component: primary
-                namespaces:
-                  - "default"
                 topologyKey: kubernetes.io/hostname
               weight: 1
         nodeAffinity:
       securityContext:
         fsGroup: 1001
+        fsGroupChangePolicy: Always
+        supplementalGroups: []
+        sysctls: []
+      initContainers:
+        - name: preserve-logs-symlinks
+          image: docker.io/bitnami/mariadb:11.4.3-debian-12-r0
+          imagePullPolicy: "IfNotPresent"
+          securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
+            privileged: false
+            readOnlyRootFilesystem: true
+            runAsGroup: 1001
+            runAsNonRoot: true
+            runAsUser: 1001
+            seLinuxOptions: {}
+            seccompProfile:
+              type: RuntimeDefault
+          resources:
+            limits:
+              cpu: 375m
+              ephemeral-storage: 2Gi
+              memory: 384Mi
+            requests:
+              cpu: 250m
+              ephemeral-storage: 50Mi
+              memory: 256Mi
+          command:
+            - /bin/bash
+          args:
+            - -ec
+            - |
+              #!/bin/bash
+
+              . /opt/bitnami/scripts/libfs.sh
+              # We copy the logs folder because it has symlinks to stdout and stderr
+              if ! is_dir_empty /opt/bitnami/mariadb/logs; then
+                cp -r /opt/bitnami/mariadb/logs /emptydir/app-logs-dir
+              fi
+          volumeMounts:
+            - name: empty-dir
+              mountPath: /emptydir
       containers:
         - name: mariadb
-          image: docker.io/bitnami/mariadb:10.6.10-debian-11-r6
+          image: docker.io/bitnami/mariadb:11.4.3-debian-12-r0
           imagePullPolicy: "IfNotPresent"
           securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
+            privileged: false
+            readOnlyRootFilesystem: true
+            runAsGroup: 1001
             runAsNonRoot: true
             runAsUser: 1001
+            seLinuxOptions: {}
+            seccompProfile:
+              type: RuntimeDefault
           env:
             - name: BITNAMI_DEBUG
               value: "false"
@@ -427,17 +523,37 @@
                   if [[ -f "${MARIADB_ROOT_PASSWORD_FILE:-}" ]]; then
                       password_aux=$(cat "$MARIADB_ROOT_PASSWORD_FILE")
                   fi
-                  mysqladmin status -uroot -p"${password_aux}"
+                  mysqladmin ping -uroot -p"${password_aux}"
           resources:
-            limits: {}
-            requests: {}
+            limits:
+              cpu: 375m
+              ephemeral-storage: 2Gi
+              memory: 384Mi
+            requests:
+              cpu: 250m
+              ephemeral-storage: 50Mi
+              memory: 256Mi
           volumeMounts:
             - name: data
               mountPath: /bitnami/mariadb
             - name: config
               mountPath: /opt/bitnami/mariadb/conf/my.cnf
               subPath: my.cnf
+            - name: empty-dir
+              mountPath: /tmp
+              subPath: tmp-dir
+            - name: empty-dir
+              mountPath: /opt/bitnami/mariadb/conf
+              subPath: app-conf-dir
+            - name: empty-dir
+              mountPath: /opt/bitnami/mariadb/tmp
+              subPath: app-tmp-dir
+            - name: empty-dir
+              mountPath: /opt/bitnami/mariadb/logs
+              subPath: app-logs-dir
       volumes:
+        - name: empty-dir
+          emptyDir: {}
         - name: config
           configMap:
             name: yourls-mariadb
@@ -445,8 +561,8 @@
     - metadata:
         name: data
         labels:
-          app.kubernetes.io/name: mariadb
           app.kubernetes.io/instance: yourls
+          app.kubernetes.io/name: mariadb
           app.kubernetes.io/component: primary
       spec:
         accessModes:

@renovate renovate bot force-pushed the renovate/yourls-5.x branch from f467210 to 2192373 Compare August 27, 2024 14:38
@renovate renovate bot changed the title feat(deps): update helm release yourls to 5.14.9 feat(deps): update helm release yourls to 5.14.10 Aug 27, 2024
Copy link

Path: cluster/apps/collab/yourls/helm-release.yaml
Version: 5.2.7 -> 5.14.10

@@ -1,3 +1,50 @@
+# Source: yourls/charts/mariadb/templates/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+  name: yourls-mariadb
+  namespace: "default"
+  labels:
+    app.kubernetes.io/instance: yourls
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mariadb
+spec:
+  podSelector:
+    matchLabels:
+      app.kubernetes.io/instance: yourls
+      app.kubernetes.io/managed-by: Helm
+      app.kubernetes.io/name: mariadb
+      app.kubernetes.io/version: 11.4.3
+      helm.sh/chart: mariadb-19.0.5
+  policyTypes:
+    - Ingress
+    - Egress
+  egress:
+    - {}
+  ingress:
+    - ports:
+        - port: 3306
+        - port: 3306
+---
+# Source: yourls/charts/mariadb/templates/primary/pdb.yaml
+apiVersion: policy/v1
+kind: PodDisruptionBudget
+metadata:
+  name: yourls-mariadb
+  namespace: "default"
+  labels:
+    app.kubernetes.io/instance: yourls
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mariadb
+    app.kubernetes.io/component: primary
+spec:
+  maxUnavailable: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/instance: yourls
+      app.kubernetes.io/name: mariadb
+      app.kubernetes.io/component: primary
+---
 # Source: yourls/charts/mariadb/templates/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
@@ -5,10 +52,9 @@
   name: yourls-mariadb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: mariadb
     app.kubernetes.io/instance: yourls
     app.kubernetes.io/managed-by: Helm
-  annotations:
+    app.kubernetes.io/name: mariadb
 automountServiceAccountToken: false
 ---
 # Source: yourls/charts/mariadb/templates/secrets.yaml
@@ -18,13 +64,13 @@
   name: yourls-mariadb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: mariadb
     app.kubernetes.io/instance: yourls
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mariadb
 type: Opaque
 data:
-  mariadb-root-password: "NjZFV2NrdXBhbg=="
-  mariadb-password: "QXJIT3BHM2R2Sg=="
+  mariadb-root-password: "MnFZRDVEcDR1bw=="
+  mariadb-password: "ZlhVUkdyUVN2aQ=="
 ---
 # Source: yourls/templates/secrets.yaml
 apiVersion: v1
@@ -48,9 +94,9 @@
   name: yourls-mariadb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: mariadb
     app.kubernetes.io/instance: yourls
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mariadb
     app.kubernetes.io/component: primary
 data:
   my.cnf: |-
@@ -58,6 +104,7 @@
     skip-name-resolve
     explicit_defaults_for_timestamp
     basedir=/opt/bitnami/mariadb
+    datadir=/bitnami/mariadb/data
     plugin_dir=/opt/bitnami/mariadb/plugin
     port=3306
     socket=/opt/bitnami/mariadb/tmp/mysql.sock
@@ -69,7 +116,6 @@
     character-set-server=UTF8
     collation-server=utf8_general_ci
     slow_query_log=0
-    slow_query_log_file=/opt/bitnami/mariadb/logs/mysqld.log
     long_query_time=10.0
 
     [client]
@@ -90,9 +136,9 @@
   name: yourls-mariadb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: mariadb
     app.kubernetes.io/instance: yourls
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mariadb
     app.kubernetes.io/component: primary
   annotations:
 spec:
@@ -105,8 +151,8 @@
       targetPort: mysql
       nodePort: null
   selector:
-    app.kubernetes.io/name: mariadb
     app.kubernetes.io/instance: yourls
+    app.kubernetes.io/name: mariadb
     app.kubernetes.io/component: primary
 ---
 # Source: yourls/templates/metrics-svc.yaml
@@ -177,7 +223,6 @@
       app.kubernetes.io/name: yourls
       app.kubernetes.io/instance: yourls
   strategy:
-    rollingUpdate: {}
     type: RollingUpdate
   replicas: 1
   template:
@@ -204,10 +249,8 @@
             - podAffinityTerm:
                 labelSelector:
                   matchLabels:
-                    app.kubernetes.io/name: yourls
                     app.kubernetes.io/instance: yourls
-                namespaces:
-                  - "default"
+                    app.kubernetes.io/name: yourls
                 topologyKey: kubernetes.io/hostname
               weight: 1
         nodeAffinity:
@@ -290,7 +333,7 @@
             - mountPath: /var/www/html
               name: yourls-data
         - name: metrics
-          image: docker.io/bitnami/apache-exporter:0.11.0-debian-10-r36
+          image: docker.io/bitnami/apache-exporter:1.0.8-debian-12-r7
           imagePullPolicy: "Always"
           command:
             - /bin/apache_exporter
@@ -326,17 +369,17 @@
   name: yourls-mariadb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: mariadb
     app.kubernetes.io/instance: yourls
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mariadb
     app.kubernetes.io/component: primary
 spec:
   replicas: 1
   revisionHistoryLimit: 10
   selector:
     matchLabels:
-      app.kubernetes.io/name: mariadb
       app.kubernetes.io/instance: yourls
+      app.kubernetes.io/name: mariadb
       app.kubernetes.io/component: primary
   serviceName: yourls-mariadb
   updateStrategy:
@@ -344,13 +387,14 @@
   template:
     metadata:
       annotations:
-        checksum/configuration: af5c671ff745ded0f8434c386e4bfffd387106e11527eecb5adb4f3e6fa0a454
+        checksum/configuration: 2b5c0af2ad6a298a5833ccdaaa74d00c2c308965853abd930394030a67360364
       labels:
-        app.kubernetes.io/name: mariadb
         app.kubernetes.io/instance: yourls
         app.kubernetes.io/managed-by: Helm
+        app.kubernetes.io/name: mariadb
         app.kubernetes.io/component: primary
     spec:
+      automountServiceAccountToken: false
       serviceAccountName: yourls-mariadb
       affinity:
         podAffinity:
@@ -359,23 +403,75 @@
             - podAffinityTerm:
                 labelSelector:
                   matchLabels:
-                    app.kubernetes.io/name: mariadb
                     app.kubernetes.io/instance: yourls
+                    app.kubernetes.io/name: mariadb
                     app.kubernetes.io/component: primary
-                namespaces:
-                  - "default"
                 topologyKey: kubernetes.io/hostname
               weight: 1
         nodeAffinity:
       securityContext:
         fsGroup: 1001
+        fsGroupChangePolicy: Always
+        supplementalGroups: []
+        sysctls: []
+      initContainers:
+        - name: preserve-logs-symlinks
+          image: docker.io/bitnami/mariadb:11.4.3-debian-12-r0
+          imagePullPolicy: "IfNotPresent"
+          securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
+            privileged: false
+            readOnlyRootFilesystem: true
+            runAsGroup: 1001
+            runAsNonRoot: true
+            runAsUser: 1001
+            seLinuxOptions: {}
+            seccompProfile:
+              type: RuntimeDefault
+          resources:
+            limits:
+              cpu: 375m
+              ephemeral-storage: 2Gi
+              memory: 384Mi
+            requests:
+              cpu: 250m
+              ephemeral-storage: 50Mi
+              memory: 256Mi
+          command:
+            - /bin/bash
+          args:
+            - -ec
+            - |
+              #!/bin/bash
+
+              . /opt/bitnami/scripts/libfs.sh
+              # We copy the logs folder because it has symlinks to stdout and stderr
+              if ! is_dir_empty /opt/bitnami/mariadb/logs; then
+                cp -r /opt/bitnami/mariadb/logs /emptydir/app-logs-dir
+              fi
+          volumeMounts:
+            - name: empty-dir
+              mountPath: /emptydir
       containers:
         - name: mariadb
-          image: docker.io/bitnami/mariadb:10.6.10-debian-11-r6
+          image: docker.io/bitnami/mariadb:11.4.3-debian-12-r0
           imagePullPolicy: "IfNotPresent"
           securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
+            privileged: false
+            readOnlyRootFilesystem: true
+            runAsGroup: 1001
             runAsNonRoot: true
             runAsUser: 1001
+            seLinuxOptions: {}
+            seccompProfile:
+              type: RuntimeDefault
           env:
             - name: BITNAMI_DEBUG
               value: "false"
@@ -411,7 +507,7 @@
                   if [[ -f "${MARIADB_ROOT_PASSWORD_FILE:-}" ]]; then
                       password_aux=$(cat "$MARIADB_ROOT_PASSWORD_FILE")
                   fi
-                  mysqladmin status -uroot -p"${password_aux}"
+                  mariadb-admin status -uroot -p"${password_aux}"
           readinessProbe:
             failureThreshold: 3
             initialDelaySeconds: 30
@@ -427,17 +523,37 @@
                   if [[ -f "${MARIADB_ROOT_PASSWORD_FILE:-}" ]]; then
                       password_aux=$(cat "$MARIADB_ROOT_PASSWORD_FILE")
                   fi
-                  mysqladmin status -uroot -p"${password_aux}"
+                  mariadb-admin ping -uroot -p"${password_aux}"
           resources:
-            limits: {}
-            requests: {}
+            limits:
+              cpu: 375m
+              ephemeral-storage: 2Gi
+              memory: 384Mi
+            requests:
+              cpu: 250m
+              ephemeral-storage: 50Mi
+              memory: 256Mi
           volumeMounts:
             - name: data
               mountPath: /bitnami/mariadb
             - name: config
               mountPath: /opt/bitnami/mariadb/conf/my.cnf
               subPath: my.cnf
+            - name: empty-dir
+              mountPath: /tmp
+              subPath: tmp-dir
+            - name: empty-dir
+              mountPath: /opt/bitnami/mariadb/conf
+              subPath: app-conf-dir
+            - name: empty-dir
+              mountPath: /opt/bitnami/mariadb/tmp
+              subPath: app-tmp-dir
+            - name: empty-dir
+              mountPath: /opt/bitnami/mariadb/logs
+              subPath: app-logs-dir
       volumes:
+        - name: empty-dir
+          emptyDir: {}
         - name: config
           configMap:
             name: yourls-mariadb
@@ -445,8 +561,8 @@
     - metadata:
         name: data
         labels:
-          app.kubernetes.io/name: mariadb
           app.kubernetes.io/instance: yourls
+          app.kubernetes.io/name: mariadb
           app.kubernetes.io/component: primary
       spec:
         accessModes:

@renovate renovate bot force-pushed the renovate/yourls-5.x branch from 2192373 to 24a1ca9 Compare August 28, 2024 22:57
@renovate renovate bot changed the title feat(deps): update helm release yourls to 5.14.10 feat(deps): update helm release yourls to 5.14.11 Aug 28, 2024
Copy link

Path: cluster/apps/collab/yourls/helm-release.yaml
Version: 5.2.7 -> 5.14.11

@@ -1,3 +1,50 @@
+# Source: yourls/charts/mariadb/templates/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+  name: yourls-mariadb
+  namespace: "default"
+  labels:
+    app.kubernetes.io/instance: yourls
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mariadb
+spec:
+  podSelector:
+    matchLabels:
+      app.kubernetes.io/instance: yourls
+      app.kubernetes.io/managed-by: Helm
+      app.kubernetes.io/name: mariadb
+      app.kubernetes.io/version: 11.4.3
+      helm.sh/chart: mariadb-19.0.5
+  policyTypes:
+    - Ingress
+    - Egress
+  egress:
+    - {}
+  ingress:
+    - ports:
+        - port: 3306
+        - port: 3306
+---
+# Source: yourls/charts/mariadb/templates/primary/pdb.yaml
+apiVersion: policy/v1
+kind: PodDisruptionBudget
+metadata:
+  name: yourls-mariadb
+  namespace: "default"
+  labels:
+    app.kubernetes.io/instance: yourls
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mariadb
+    app.kubernetes.io/component: primary
+spec:
+  maxUnavailable: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/instance: yourls
+      app.kubernetes.io/name: mariadb
+      app.kubernetes.io/component: primary
+---
 # Source: yourls/charts/mariadb/templates/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
@@ -5,10 +52,9 @@
   name: yourls-mariadb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: mariadb
     app.kubernetes.io/instance: yourls
     app.kubernetes.io/managed-by: Helm
-  annotations:
+    app.kubernetes.io/name: mariadb
 automountServiceAccountToken: false
 ---
 # Source: yourls/charts/mariadb/templates/secrets.yaml
@@ -18,13 +64,13 @@
   name: yourls-mariadb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: mariadb
     app.kubernetes.io/instance: yourls
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mariadb
 type: Opaque
 data:
-  mariadb-root-password: "aWFaaGZTSkx2VQ=="
-  mariadb-password: "eEVWRVhlTGRVZg=="
+  mariadb-root-password: "VEJ1dkppUnRpNQ=="
+  mariadb-password: "bjJJcHdwSExxUg=="
 ---
 # Source: yourls/templates/secrets.yaml
 apiVersion: v1
@@ -48,9 +94,9 @@
   name: yourls-mariadb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: mariadb
     app.kubernetes.io/instance: yourls
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mariadb
     app.kubernetes.io/component: primary
 data:
   my.cnf: |-
@@ -58,6 +104,7 @@
     skip-name-resolve
     explicit_defaults_for_timestamp
     basedir=/opt/bitnami/mariadb
+    datadir=/bitnami/mariadb/data
     plugin_dir=/opt/bitnami/mariadb/plugin
     port=3306
     socket=/opt/bitnami/mariadb/tmp/mysql.sock
@@ -69,7 +116,6 @@
     character-set-server=UTF8
     collation-server=utf8_general_ci
     slow_query_log=0
-    slow_query_log_file=/opt/bitnami/mariadb/logs/mysqld.log
     long_query_time=10.0
 
     [client]
@@ -90,9 +136,9 @@
   name: yourls-mariadb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: mariadb
     app.kubernetes.io/instance: yourls
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mariadb
     app.kubernetes.io/component: primary
   annotations:
 spec:
@@ -105,8 +151,8 @@
       targetPort: mysql
       nodePort: null
   selector:
-    app.kubernetes.io/name: mariadb
     app.kubernetes.io/instance: yourls
+    app.kubernetes.io/name: mariadb
     app.kubernetes.io/component: primary
 ---
 # Source: yourls/templates/metrics-svc.yaml
@@ -177,7 +223,6 @@
       app.kubernetes.io/name: yourls
       app.kubernetes.io/instance: yourls
   strategy:
-    rollingUpdate: {}
     type: RollingUpdate
   replicas: 1
   template:
@@ -204,10 +249,8 @@
             - podAffinityTerm:
                 labelSelector:
                   matchLabels:
-                    app.kubernetes.io/name: yourls
                     app.kubernetes.io/instance: yourls
-                namespaces:
-                  - "default"
+                    app.kubernetes.io/name: yourls
                 topologyKey: kubernetes.io/hostname
               weight: 1
         nodeAffinity:
@@ -290,7 +333,7 @@
             - mountPath: /var/www/html
               name: yourls-data
         - name: metrics
-          image: docker.io/bitnami/apache-exporter:0.11.0-debian-10-r36
+          image: docker.io/bitnami/apache-exporter:1.0.8-debian-12-r8
           imagePullPolicy: "Always"
           command:
             - /bin/apache_exporter
@@ -326,17 +369,17 @@
   name: yourls-mariadb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: mariadb
     app.kubernetes.io/instance: yourls
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mariadb
     app.kubernetes.io/component: primary
 spec:
   replicas: 1
   revisionHistoryLimit: 10
   selector:
     matchLabels:
-      app.kubernetes.io/name: mariadb
       app.kubernetes.io/instance: yourls
+      app.kubernetes.io/name: mariadb
       app.kubernetes.io/component: primary
   serviceName: yourls-mariadb
   updateStrategy:
@@ -344,13 +387,14 @@
   template:
     metadata:
       annotations:
-        checksum/configuration: af5c671ff745ded0f8434c386e4bfffd387106e11527eecb5adb4f3e6fa0a454
+        checksum/configuration: 2b5c0af2ad6a298a5833ccdaaa74d00c2c308965853abd930394030a67360364
       labels:
-        app.kubernetes.io/name: mariadb
         app.kubernetes.io/instance: yourls
         app.kubernetes.io/managed-by: Helm
+        app.kubernetes.io/name: mariadb
         app.kubernetes.io/component: primary
     spec:
+      automountServiceAccountToken: false
       serviceAccountName: yourls-mariadb
       affinity:
         podAffinity:
@@ -359,23 +403,75 @@
             - podAffinityTerm:
                 labelSelector:
                   matchLabels:
-                    app.kubernetes.io/name: mariadb
                     app.kubernetes.io/instance: yourls
+                    app.kubernetes.io/name: mariadb
                     app.kubernetes.io/component: primary
-                namespaces:
-                  - "default"
                 topologyKey: kubernetes.io/hostname
               weight: 1
         nodeAffinity:
       securityContext:
         fsGroup: 1001
+        fsGroupChangePolicy: Always
+        supplementalGroups: []
+        sysctls: []
+      initContainers:
+        - name: preserve-logs-symlinks
+          image: docker.io/bitnami/mariadb:11.4.3-debian-12-r0
+          imagePullPolicy: "IfNotPresent"
+          securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
+            privileged: false
+            readOnlyRootFilesystem: true
+            runAsGroup: 1001
+            runAsNonRoot: true
+            runAsUser: 1001
+            seLinuxOptions: {}
+            seccompProfile:
+              type: RuntimeDefault
+          resources:
+            limits:
+              cpu: 375m
+              ephemeral-storage: 2Gi
+              memory: 384Mi
+            requests:
+              cpu: 250m
+              ephemeral-storage: 50Mi
+              memory: 256Mi
+          command:
+            - /bin/bash
+          args:
+            - -ec
+            - |
+              #!/bin/bash
+
+              . /opt/bitnami/scripts/libfs.sh
+              # We copy the logs folder because it has symlinks to stdout and stderr
+              if ! is_dir_empty /opt/bitnami/mariadb/logs; then
+                cp -r /opt/bitnami/mariadb/logs /emptydir/app-logs-dir
+              fi
+          volumeMounts:
+            - name: empty-dir
+              mountPath: /emptydir
       containers:
         - name: mariadb
-          image: docker.io/bitnami/mariadb:10.6.10-debian-11-r6
+          image: docker.io/bitnami/mariadb:11.4.3-debian-12-r0
           imagePullPolicy: "IfNotPresent"
           securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
+            privileged: false
+            readOnlyRootFilesystem: true
+            runAsGroup: 1001
             runAsNonRoot: true
             runAsUser: 1001
+            seLinuxOptions: {}
+            seccompProfile:
+              type: RuntimeDefault
           env:
             - name: BITNAMI_DEBUG
               value: "false"
@@ -411,7 +507,7 @@
                   if [[ -f "${MARIADB_ROOT_PASSWORD_FILE:-}" ]]; then
                       password_aux=$(cat "$MARIADB_ROOT_PASSWORD_FILE")
                   fi
-                  mysqladmin status -uroot -p"${password_aux}"
+                  mariadb-admin status -uroot -p"${password_aux}"
           readinessProbe:
             failureThreshold: 3
             initialDelaySeconds: 30
@@ -427,17 +523,37 @@
                   if [[ -f "${MARIADB_ROOT_PASSWORD_FILE:-}" ]]; then
                       password_aux=$(cat "$MARIADB_ROOT_PASSWORD_FILE")
                   fi
-                  mysqladmin status -uroot -p"${password_aux}"
+                  mariadb-admin ping -uroot -p"${password_aux}"
           resources:
-            limits: {}
-            requests: {}
+            limits:
+              cpu: 375m
+              ephemeral-storage: 2Gi
+              memory: 384Mi
+            requests:
+              cpu: 250m
+              ephemeral-storage: 50Mi
+              memory: 256Mi
           volumeMounts:
             - name: data
               mountPath: /bitnami/mariadb
             - name: config
               mountPath: /opt/bitnami/mariadb/conf/my.cnf
               subPath: my.cnf
+            - name: empty-dir
+              mountPath: /tmp
+              subPath: tmp-dir
+            - name: empty-dir
+              mountPath: /opt/bitnami/mariadb/conf
+              subPath: app-conf-dir
+            - name: empty-dir
+              mountPath: /opt/bitnami/mariadb/tmp
+              subPath: app-tmp-dir
+            - name: empty-dir
+              mountPath: /opt/bitnami/mariadb/logs
+              subPath: app-logs-dir
       volumes:
+        - name: empty-dir
+          emptyDir: {}
         - name: config
           configMap:
             name: yourls-mariadb
@@ -445,8 +561,8 @@
     - metadata:
         name: data
         labels:
-          app.kubernetes.io/name: mariadb
           app.kubernetes.io/instance: yourls
+          app.kubernetes.io/name: mariadb
           app.kubernetes.io/component: primary
       spec:
         accessModes:

@renovate renovate bot force-pushed the renovate/yourls-5.x branch from 24a1ca9 to 014ee77 Compare September 6, 2024 12:24
@renovate renovate bot changed the title feat(deps): update helm release yourls to 5.14.11 feat(deps): update helm release yourls to 5.14.12 Sep 6, 2024
Copy link

github-actions bot commented Sep 6, 2024

Path: cluster/apps/collab/yourls/helm-release.yaml
Version: 5.2.7 -> 5.14.12

@@ -1,3 +1,50 @@
+# Source: yourls/charts/mariadb/templates/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+  name: yourls-mariadb
+  namespace: "default"
+  labels:
+    app.kubernetes.io/instance: yourls
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mariadb
+spec:
+  podSelector:
+    matchLabels:
+      app.kubernetes.io/instance: yourls
+      app.kubernetes.io/managed-by: Helm
+      app.kubernetes.io/name: mariadb
+      app.kubernetes.io/version: 11.4.3
+      helm.sh/chart: mariadb-19.0.5
+  policyTypes:
+    - Ingress
+    - Egress
+  egress:
+    - {}
+  ingress:
+    - ports:
+        - port: 3306
+        - port: 3306
+---
+# Source: yourls/charts/mariadb/templates/primary/pdb.yaml
+apiVersion: policy/v1
+kind: PodDisruptionBudget
+metadata:
+  name: yourls-mariadb
+  namespace: "default"
+  labels:
+    app.kubernetes.io/instance: yourls
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mariadb
+    app.kubernetes.io/component: primary
+spec:
+  maxUnavailable: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/instance: yourls
+      app.kubernetes.io/name: mariadb
+      app.kubernetes.io/component: primary
+---
 # Source: yourls/charts/mariadb/templates/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
@@ -5,10 +52,9 @@
   name: yourls-mariadb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: mariadb
     app.kubernetes.io/instance: yourls
     app.kubernetes.io/managed-by: Helm
-  annotations:
+    app.kubernetes.io/name: mariadb
 automountServiceAccountToken: false
 ---
 # Source: yourls/charts/mariadb/templates/secrets.yaml
@@ -18,13 +64,13 @@
   name: yourls-mariadb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: mariadb
     app.kubernetes.io/instance: yourls
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mariadb
 type: Opaque
 data:
-  mariadb-root-password: "Vm05TUFCa0pFVg=="
-  mariadb-password: "U0djWllsWEJ0RA=="
+  mariadb-root-password: "YmJLdzdTRGxwQg=="
+  mariadb-password: "bkdvV0MzZXhxZQ=="
 ---
 # Source: yourls/templates/secrets.yaml
 apiVersion: v1
@@ -48,9 +94,9 @@
   name: yourls-mariadb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: mariadb
     app.kubernetes.io/instance: yourls
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mariadb
     app.kubernetes.io/component: primary
 data:
   my.cnf: |-
@@ -58,6 +104,7 @@
     skip-name-resolve
     explicit_defaults_for_timestamp
     basedir=/opt/bitnami/mariadb
+    datadir=/bitnami/mariadb/data
     plugin_dir=/opt/bitnami/mariadb/plugin
     port=3306
     socket=/opt/bitnami/mariadb/tmp/mysql.sock
@@ -69,7 +116,6 @@
     character-set-server=UTF8
     collation-server=utf8_general_ci
     slow_query_log=0
-    slow_query_log_file=/opt/bitnami/mariadb/logs/mysqld.log
     long_query_time=10.0
 
     [client]
@@ -90,9 +136,9 @@
   name: yourls-mariadb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: mariadb
     app.kubernetes.io/instance: yourls
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mariadb
     app.kubernetes.io/component: primary
   annotations:
 spec:
@@ -105,8 +151,8 @@
       targetPort: mysql
       nodePort: null
   selector:
-    app.kubernetes.io/name: mariadb
     app.kubernetes.io/instance: yourls
+    app.kubernetes.io/name: mariadb
     app.kubernetes.io/component: primary
 ---
 # Source: yourls/templates/metrics-svc.yaml
@@ -177,7 +223,6 @@
       app.kubernetes.io/name: yourls
       app.kubernetes.io/instance: yourls
   strategy:
-    rollingUpdate: {}
     type: RollingUpdate
   replicas: 1
   template:
@@ -204,10 +249,8 @@
             - podAffinityTerm:
                 labelSelector:
                   matchLabels:
-                    app.kubernetes.io/name: yourls
                     app.kubernetes.io/instance: yourls
-                namespaces:
-                  - "default"
+                    app.kubernetes.io/name: yourls
                 topologyKey: kubernetes.io/hostname
               weight: 1
         nodeAffinity:
@@ -290,7 +333,7 @@
             - mountPath: /var/www/html
               name: yourls-data
         - name: metrics
-          image: docker.io/bitnami/apache-exporter:0.11.0-debian-10-r36
+          image: docker.io/bitnami/apache-exporter:1.0.8-debian-12-r9
           imagePullPolicy: "Always"
           command:
             - /bin/apache_exporter
@@ -326,17 +369,17 @@
   name: yourls-mariadb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: mariadb
     app.kubernetes.io/instance: yourls
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mariadb
     app.kubernetes.io/component: primary
 spec:
   replicas: 1
   revisionHistoryLimit: 10
   selector:
     matchLabels:
-      app.kubernetes.io/name: mariadb
       app.kubernetes.io/instance: yourls
+      app.kubernetes.io/name: mariadb
       app.kubernetes.io/component: primary
   serviceName: yourls-mariadb
   updateStrategy:
@@ -344,13 +387,14 @@
   template:
     metadata:
       annotations:
-        checksum/configuration: af5c671ff745ded0f8434c386e4bfffd387106e11527eecb5adb4f3e6fa0a454
+        checksum/configuration: 2b5c0af2ad6a298a5833ccdaaa74d00c2c308965853abd930394030a67360364
       labels:
-        app.kubernetes.io/name: mariadb
         app.kubernetes.io/instance: yourls
         app.kubernetes.io/managed-by: Helm
+        app.kubernetes.io/name: mariadb
         app.kubernetes.io/component: primary
     spec:
+      automountServiceAccountToken: false
       serviceAccountName: yourls-mariadb
       affinity:
         podAffinity:
@@ -359,23 +403,75 @@
             - podAffinityTerm:
                 labelSelector:
                   matchLabels:
-                    app.kubernetes.io/name: mariadb
                     app.kubernetes.io/instance: yourls
+                    app.kubernetes.io/name: mariadb
                     app.kubernetes.io/component: primary
-                namespaces:
-                  - "default"
                 topologyKey: kubernetes.io/hostname
               weight: 1
         nodeAffinity:
       securityContext:
         fsGroup: 1001
+        fsGroupChangePolicy: Always
+        supplementalGroups: []
+        sysctls: []
+      initContainers:
+        - name: preserve-logs-symlinks
+          image: docker.io/bitnami/mariadb:11.4.3-debian-12-r0
+          imagePullPolicy: "IfNotPresent"
+          securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
+            privileged: false
+            readOnlyRootFilesystem: true
+            runAsGroup: 1001
+            runAsNonRoot: true
+            runAsUser: 1001
+            seLinuxOptions: {}
+            seccompProfile:
+              type: RuntimeDefault
+          resources:
+            limits:
+              cpu: 375m
+              ephemeral-storage: 2Gi
+              memory: 384Mi
+            requests:
+              cpu: 250m
+              ephemeral-storage: 50Mi
+              memory: 256Mi
+          command:
+            - /bin/bash
+          args:
+            - -ec
+            - |
+              #!/bin/bash
+
+              . /opt/bitnami/scripts/libfs.sh
+              # We copy the logs folder because it has symlinks to stdout and stderr
+              if ! is_dir_empty /opt/bitnami/mariadb/logs; then
+                cp -r /opt/bitnami/mariadb/logs /emptydir/app-logs-dir
+              fi
+          volumeMounts:
+            - name: empty-dir
+              mountPath: /emptydir
       containers:
         - name: mariadb
-          image: docker.io/bitnami/mariadb:10.6.10-debian-11-r6
+          image: docker.io/bitnami/mariadb:11.4.3-debian-12-r0
           imagePullPolicy: "IfNotPresent"
           securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
+            privileged: false
+            readOnlyRootFilesystem: true
+            runAsGroup: 1001
             runAsNonRoot: true
             runAsUser: 1001
+            seLinuxOptions: {}
+            seccompProfile:
+              type: RuntimeDefault
           env:
             - name: BITNAMI_DEBUG
               value: "false"
@@ -411,7 +507,7 @@
                   if [[ -f "${MARIADB_ROOT_PASSWORD_FILE:-}" ]]; then
                       password_aux=$(cat "$MARIADB_ROOT_PASSWORD_FILE")
                   fi
-                  mysqladmin status -uroot -p"${password_aux}"
+                  mariadb-admin status -uroot -p"${password_aux}"
           readinessProbe:
             failureThreshold: 3
             initialDelaySeconds: 30
@@ -427,17 +523,37 @@
                   if [[ -f "${MARIADB_ROOT_PASSWORD_FILE:-}" ]]; then
                       password_aux=$(cat "$MARIADB_ROOT_PASSWORD_FILE")
                   fi
-                  mysqladmin status -uroot -p"${password_aux}"
+                  mariadb-admin ping -uroot -p"${password_aux}"
           resources:
-            limits: {}
-            requests: {}
+            limits:
+              cpu: 375m
+              ephemeral-storage: 2Gi
+              memory: 384Mi
+            requests:
+              cpu: 250m
+              ephemeral-storage: 50Mi
+              memory: 256Mi
           volumeMounts:
             - name: data
               mountPath: /bitnami/mariadb
             - name: config
               mountPath: /opt/bitnami/mariadb/conf/my.cnf
               subPath: my.cnf
+            - name: empty-dir
+              mountPath: /tmp
+              subPath: tmp-dir
+            - name: empty-dir
+              mountPath: /opt/bitnami/mariadb/conf
+              subPath: app-conf-dir
+            - name: empty-dir
+              mountPath: /opt/bitnami/mariadb/tmp
+              subPath: app-tmp-dir
+            - name: empty-dir
+              mountPath: /opt/bitnami/mariadb/logs
+              subPath: app-logs-dir
       volumes:
+        - name: empty-dir
+          emptyDir: {}
         - name: config
           configMap:
             name: yourls-mariadb
@@ -445,8 +561,8 @@
     - metadata:
         name: data
         labels:
-          app.kubernetes.io/name: mariadb
           app.kubernetes.io/instance: yourls
+          app.kubernetes.io/name: mariadb
           app.kubernetes.io/component: primary
       spec:
         accessModes:

@renovate renovate bot force-pushed the renovate/yourls-5.x branch from 014ee77 to 7e5b92b Compare September 6, 2024 16:22
@renovate renovate bot changed the title feat(deps): update helm release yourls to 5.14.12 feat(deps): update helm release yourls to 5.15.0 Sep 6, 2024
Copy link

github-actions bot commented Sep 6, 2024

Path: cluster/apps/collab/yourls/helm-release.yaml
Version: 5.2.7 -> 5.15.0

@@ -1,3 +1,50 @@
+# Source: yourls/charts/mariadb/templates/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+  name: yourls-mariadb
+  namespace: "default"
+  labels:
+    app.kubernetes.io/instance: yourls
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mariadb
+spec:
+  podSelector:
+    matchLabels:
+      app.kubernetes.io/instance: yourls
+      app.kubernetes.io/managed-by: Helm
+      app.kubernetes.io/name: mariadb
+      app.kubernetes.io/version: 11.4.3
+      helm.sh/chart: mariadb-19.0.5
+  policyTypes:
+    - Ingress
+    - Egress
+  egress:
+    - {}
+  ingress:
+    - ports:
+        - port: 3306
+        - port: 3306
+---
+# Source: yourls/charts/mariadb/templates/primary/pdb.yaml
+apiVersion: policy/v1
+kind: PodDisruptionBudget
+metadata:
+  name: yourls-mariadb
+  namespace: "default"
+  labels:
+    app.kubernetes.io/instance: yourls
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mariadb
+    app.kubernetes.io/component: primary
+spec:
+  maxUnavailable: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/instance: yourls
+      app.kubernetes.io/name: mariadb
+      app.kubernetes.io/component: primary
+---
 # Source: yourls/charts/mariadb/templates/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
@@ -5,10 +52,9 @@
   name: yourls-mariadb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: mariadb
     app.kubernetes.io/instance: yourls
     app.kubernetes.io/managed-by: Helm
-  annotations:
+    app.kubernetes.io/name: mariadb
 automountServiceAccountToken: false
 ---
 # Source: yourls/charts/mariadb/templates/secrets.yaml
@@ -18,13 +64,13 @@
   name: yourls-mariadb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: mariadb
     app.kubernetes.io/instance: yourls
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mariadb
 type: Opaque
 data:
-  mariadb-root-password: "OHFHTXpBTkh1MA=="
-  mariadb-password: "OUV6Y1k5aDEwUg=="
+  mariadb-root-password: "SnBQeVdQZ0lsWQ=="
+  mariadb-password: "WWVBU0luUWRYQg=="
 ---
 # Source: yourls/templates/secrets.yaml
 apiVersion: v1
@@ -48,9 +94,9 @@
   name: yourls-mariadb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: mariadb
     app.kubernetes.io/instance: yourls
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mariadb
     app.kubernetes.io/component: primary
 data:
   my.cnf: |-
@@ -58,6 +104,7 @@
     skip-name-resolve
     explicit_defaults_for_timestamp
     basedir=/opt/bitnami/mariadb
+    datadir=/bitnami/mariadb/data
     plugin_dir=/opt/bitnami/mariadb/plugin
     port=3306
     socket=/opt/bitnami/mariadb/tmp/mysql.sock
@@ -69,7 +116,6 @@
     character-set-server=UTF8
     collation-server=utf8_general_ci
     slow_query_log=0
-    slow_query_log_file=/opt/bitnami/mariadb/logs/mysqld.log
     long_query_time=10.0
 
     [client]
@@ -90,9 +136,9 @@
   name: yourls-mariadb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: mariadb
     app.kubernetes.io/instance: yourls
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mariadb
     app.kubernetes.io/component: primary
   annotations:
 spec:
@@ -105,8 +151,8 @@
       targetPort: mysql
       nodePort: null
   selector:
-    app.kubernetes.io/name: mariadb
     app.kubernetes.io/instance: yourls
+    app.kubernetes.io/name: mariadb
     app.kubernetes.io/component: primary
 ---
 # Source: yourls/templates/metrics-svc.yaml
@@ -177,7 +223,6 @@
       app.kubernetes.io/name: yourls
       app.kubernetes.io/instance: yourls
   strategy:
-    rollingUpdate: {}
     type: RollingUpdate
   replicas: 1
   template:
@@ -204,10 +249,8 @@
             - podAffinityTerm:
                 labelSelector:
                   matchLabels:
-                    app.kubernetes.io/name: yourls
                     app.kubernetes.io/instance: yourls
-                namespaces:
-                  - "default"
+                    app.kubernetes.io/name: yourls
                 topologyKey: kubernetes.io/hostname
               weight: 1
         nodeAffinity:
@@ -290,7 +333,7 @@
             - mountPath: /var/www/html
               name: yourls-data
         - name: metrics
-          image: docker.io/bitnami/apache-exporter:0.11.0-debian-10-r36
+          image: docker.io/bitnami/apache-exporter:1.0.8-debian-12-r9
           imagePullPolicy: "Always"
           command:
             - /bin/apache_exporter
@@ -326,17 +369,17 @@
   name: yourls-mariadb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: mariadb
     app.kubernetes.io/instance: yourls
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mariadb
     app.kubernetes.io/component: primary
 spec:
   replicas: 1
   revisionHistoryLimit: 10
   selector:
     matchLabels:
-      app.kubernetes.io/name: mariadb
       app.kubernetes.io/instance: yourls
+      app.kubernetes.io/name: mariadb
       app.kubernetes.io/component: primary
   serviceName: yourls-mariadb
   updateStrategy:
@@ -344,13 +387,14 @@
   template:
     metadata:
       annotations:
-        checksum/configuration: af5c671ff745ded0f8434c386e4bfffd387106e11527eecb5adb4f3e6fa0a454
+        checksum/configuration: 2b5c0af2ad6a298a5833ccdaaa74d00c2c308965853abd930394030a67360364
       labels:
-        app.kubernetes.io/name: mariadb
         app.kubernetes.io/instance: yourls
         app.kubernetes.io/managed-by: Helm
+        app.kubernetes.io/name: mariadb
         app.kubernetes.io/component: primary
     spec:
+      automountServiceAccountToken: false
       serviceAccountName: yourls-mariadb
       affinity:
         podAffinity:
@@ -359,23 +403,75 @@
             - podAffinityTerm:
                 labelSelector:
                   matchLabels:
-                    app.kubernetes.io/name: mariadb
                     app.kubernetes.io/instance: yourls
+                    app.kubernetes.io/name: mariadb
                     app.kubernetes.io/component: primary
-                namespaces:
-                  - "default"
                 topologyKey: kubernetes.io/hostname
               weight: 1
         nodeAffinity:
       securityContext:
         fsGroup: 1001
+        fsGroupChangePolicy: Always
+        supplementalGroups: []
+        sysctls: []
+      initContainers:
+        - name: preserve-logs-symlinks
+          image: docker.io/bitnami/mariadb:11.4.3-debian-12-r0
+          imagePullPolicy: "IfNotPresent"
+          securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
+            privileged: false
+            readOnlyRootFilesystem: true
+            runAsGroup: 1001
+            runAsNonRoot: true
+            runAsUser: 1001
+            seLinuxOptions: {}
+            seccompProfile:
+              type: RuntimeDefault
+          resources:
+            limits:
+              cpu: 375m
+              ephemeral-storage: 2Gi
+              memory: 384Mi
+            requests:
+              cpu: 250m
+              ephemeral-storage: 50Mi
+              memory: 256Mi
+          command:
+            - /bin/bash
+          args:
+            - -ec
+            - |
+              #!/bin/bash
+
+              . /opt/bitnami/scripts/libfs.sh
+              # We copy the logs folder because it has symlinks to stdout and stderr
+              if ! is_dir_empty /opt/bitnami/mariadb/logs; then
+                cp -r /opt/bitnami/mariadb/logs /emptydir/app-logs-dir
+              fi
+          volumeMounts:
+            - name: empty-dir
+              mountPath: /emptydir
       containers:
         - name: mariadb
-          image: docker.io/bitnami/mariadb:10.6.10-debian-11-r6
+          image: docker.io/bitnami/mariadb:11.4.3-debian-12-r0
           imagePullPolicy: "IfNotPresent"
           securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
+            privileged: false
+            readOnlyRootFilesystem: true
+            runAsGroup: 1001
             runAsNonRoot: true
             runAsUser: 1001
+            seLinuxOptions: {}
+            seccompProfile:
+              type: RuntimeDefault
           env:
             - name: BITNAMI_DEBUG
               value: "false"
@@ -411,7 +507,7 @@
                   if [[ -f "${MARIADB_ROOT_PASSWORD_FILE:-}" ]]; then
                       password_aux=$(cat "$MARIADB_ROOT_PASSWORD_FILE")
                   fi
-                  mysqladmin status -uroot -p"${password_aux}"
+                  mariadb-admin status -uroot -p"${password_aux}"
           readinessProbe:
             failureThreshold: 3
             initialDelaySeconds: 30
@@ -427,17 +523,37 @@
                   if [[ -f "${MARIADB_ROOT_PASSWORD_FILE:-}" ]]; then
                       password_aux=$(cat "$MARIADB_ROOT_PASSWORD_FILE")
                   fi
-                  mysqladmin status -uroot -p"${password_aux}"
+                  mariadb-admin ping -uroot -p"${password_aux}"
           resources:
-            limits: {}
-            requests: {}
+            limits:
+              cpu: 375m
+              ephemeral-storage: 2Gi
+              memory: 384Mi
+            requests:
+              cpu: 250m
+              ephemeral-storage: 50Mi
+              memory: 256Mi
           volumeMounts:
             - name: data
               mountPath: /bitnami/mariadb
             - name: config
               mountPath: /opt/bitnami/mariadb/conf/my.cnf
               subPath: my.cnf
+            - name: empty-dir
+              mountPath: /tmp
+              subPath: tmp-dir
+            - name: empty-dir
+              mountPath: /opt/bitnami/mariadb/conf
+              subPath: app-conf-dir
+            - name: empty-dir
+              mountPath: /opt/bitnami/mariadb/tmp
+              subPath: app-tmp-dir
+            - name: empty-dir
+              mountPath: /opt/bitnami/mariadb/logs
+              subPath: app-logs-dir
       volumes:
+        - name: empty-dir
+          emptyDir: {}
         - name: config
           configMap:
             name: yourls-mariadb
@@ -445,8 +561,8 @@
     - metadata:
         name: data
         labels:
-          app.kubernetes.io/name: mariadb
           app.kubernetes.io/instance: yourls
+          app.kubernetes.io/name: mariadb
           app.kubernetes.io/component: primary
       spec:
         accessModes:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants