-
Notifications
You must be signed in to change notification settings - Fork 1
feat(helm): update π network: dns (minor) #623
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. Weβll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Conversation
|
Important Review skippedBot user detected. To trigger a single review, invoke the You can disable this status message by setting the Comment |
βΉοΈ SOPS Encryption CheckNo SOPS files detected in this pull request.
No encryption validation required for this PR. |
β Gitleaks Secret Scan PassedNo secrets detected in this pull request.
|
--- HelmRelease: network/unifi-dns ServiceAccount: network/unifi-dns
+++ HelmRelease: network/unifi-dns ServiceAccount: network/unifi-dns
@@ -5,8 +5,8 @@
name: unifi-dns
namespace: network
labels:
app.kubernetes.io/name: external-dns
app.kubernetes.io/instance: unifi-dns
app.kubernetes.io/managed-by: Helm
-automountServiceAccountToken: null
+automountServiceAccountToken: true
--- HelmRelease: network/unifi-dns ClusterRole: network/unifi-dns
+++ HelmRelease: network/unifi-dns ClusterRole: network/unifi-dns
@@ -24,13 +24,20 @@
- watch
- list
- apiGroups:
- ''
resources:
- services
- - endpoints
+ verbs:
+ - get
+ - watch
+ - list
+- apiGroups:
+ - discovery.k8s.io
+ resources:
+ - endpointslices
verbs:
- get
- watch
- list
- apiGroups:
- gateway.networking.k8s.io
--- HelmRelease: network/unifi-dns Deployment: network/unifi-dns
+++ HelmRelease: network/unifi-dns Deployment: network/unifi-dns
@@ -19,12 +19,13 @@
template:
metadata:
labels:
app.kubernetes.io/name: external-dns
app.kubernetes.io/instance: unifi-dns
spec:
+ automountServiceAccountToken: true
serviceAccountName: unifi-dns
securityContext:
fsGroup: 65534
runAsNonRoot: true
seccompProfile:
type: RuntimeDefault
@@ -37,13 +38,13 @@
- ALL
privileged: false
readOnlyRootFilesystem: true
runAsGroup: 65532
runAsNonRoot: true
runAsUser: 65532
- image: registry.k8s.io/external-dns/external-dns:v0.15.1
+ image: registry.k8s.io/external-dns/external-dns:v0.20.0
imagePullPolicy: IfNotPresent
args:
- --log-level=info
- --log-format=json
- --interval=5m
- --source=gateway-httproute
@@ -81,13 +82,13 @@
cpu: 100m
memory: 100Mi
requests:
cpu: 10m
memory: 50Mi
- name: webhook
- image: ghcr.io/kashalls/external-dns-unifi-webhook:v0.7.0
+ image: ghcr.io/kashalls/external-dns-unifi-webhook:v0.8.1
imagePullPolicy: IfNotPresent
env:
- name: UNIFI_USER
valueFrom:
secretKeyRef:
key: UNIFI_USER
--- HelmRelease: network/k8s-gateway Deployment: network/k8s-gateway
+++ HelmRelease: network/k8s-gateway Deployment: network/k8s-gateway
@@ -20,13 +20,13 @@
app.kubernetes.io/instance: k8s-gateway
app.kubernetes.io/managed-by: Helm
spec:
serviceAccountName: k8s-gateway
containers:
- name: k8s-gateway
- image: ghcr.io/k8s-gateway/k8s_gateway:1.6.0
+ image: ghcr.io/k8s-gateway/k8s_gateway:1.6.2
imagePullPolicy: IfNotPresent
args:
- -conf
- /etc/coredns/Corefile
securityContext:
runAsUser: 1000
--- HelmRelease: network/cloudflare-dns Deployment: network/cloudflare-dns
+++ HelmRelease: network/cloudflare-dns Deployment: network/cloudflare-dns
@@ -40,13 +40,13 @@
- ALL
privileged: false
readOnlyRootFilesystem: true
runAsGroup: 65532
runAsNonRoot: true
runAsUser: 65532
- image: registry.k8s.io/external-dns/external-dns:v0.19.0
+ image: registry.k8s.io/external-dns/external-dns:v0.20.0
imagePullPolicy: IfNotPresent
env:
- name: CF_API_TOKEN
valueFrom:
secretKeyRef:
key: api-token |
--- kubernetes/apps/network/unifi-dns/app Kustomization: network/unifi-dns HelmRelease: network/unifi-dns
+++ kubernetes/apps/network/unifi-dns/app Kustomization: network/unifi-dns HelmRelease: network/unifi-dns
@@ -13,13 +13,13 @@
chart: external-dns
interval: 30m
sourceRef:
kind: HelmRepository
name: external-dns
namespace: network
- version: 1.15.2
+ version: 1.20.0
install:
crds: CreateReplace
strategy:
name: RetryOnFailure
interval: 30m
rollback:
@@ -61,13 +61,13 @@
key: UNIFI_HOST
name: unifi-dns-secret
- name: UNIFI_SKIP_TLS_VERIFY
value: 'true'
image:
repository: ghcr.io/kashalls/external-dns-unifi-webhook
- tag: v0.7.0
+ tag: v0.8.1
livenessProbe:
httpGet:
path: /healthz
port: http-webhook
initialDelaySeconds: 10
periodSeconds: 10
--- kubernetes/apps/network/k8s-gateway/app Kustomization: network/k8s-gateway OCIRepository: network/k8s-gateway
+++ kubernetes/apps/network/k8s-gateway/app Kustomization: network/k8s-gateway OCIRepository: network/k8s-gateway
@@ -10,9 +10,9 @@
spec:
interval: 1h
layerSelector:
mediaType: application/vnd.cncf.helm.chart.content.v1.tar+gzip
operation: copy
ref:
- tag: 3.2.8
+ tag: 3.4.1
url: oci://ghcr.io/k8s-gateway/charts/k8s-gateway
--- kubernetes/apps/network/cloudflare-dns/app Kustomization: network/cloudflare-dns OCIRepository: network/cloudflare-dns
+++ kubernetes/apps/network/cloudflare-dns/app Kustomization: network/cloudflare-dns OCIRepository: network/cloudflare-dns
@@ -10,9 +10,9 @@
spec:
interval: 15m
layerSelector:
mediaType: application/vnd.cncf.helm.chart.content.v1.tar+gzip
operation: copy
ref:
- tag: 1.19.0
+ tag: 1.20.0
url: oci://ghcr.io/home-operations/charts-mirror/external-dns
|
a082c99 to
75c0ee7
Compare
4f14946 to
24c5f0b
Compare
24c5f0b to
dc8306f
Compare
dc8306f to
f3484d1
Compare
This PR contains the following updates:
1.15.2β1.20.01.19.0β1.20.03.2.8β3.4.1v0.7.0βv0.8.1Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
π Talos CATTLE: Major/minor version requires manual approval. Full VM rebuild via Terraform.
Release Notes
kashalls/external-dns-unifi-webhook (ghcr.io/kashalls/external-dns-unifi-webhook)
v0.8.1Compare Source
What's Changed
Full Changelog: kashalls/external-dns-unifi-webhook@v0.8.0...v0.8.1
v0.8.0Compare Source
What's Changed
New Contributors
Full Changelog: kashalls/external-dns-unifi-webhook@v0.7.0...v0.8.0
Configuration
π Schedule: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).
π¦ Automerge: Disabled by config. Please merge this manually once you are satisfied.
β» Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
π» Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Renovate Bot.