Update renovate/renovate Docker tag to v41.21.1

.drone.yml

@@ -13,13 +13,13 @@ environment:
 
 steps:
   - name: renovate - validate config
-    image: renovate/renovate:41.23.1
+    image: renovate/renovate:41.21.1
     commands:
       - unset GIT_COMMITTER_NAME GIT_COMMITTER_EMAIL GIT_AUTHOR_NAME GIT_AUTHOR_EMAIL
       - renovate-config-validator
 
   - name: renovate
-    image: renovate/renovate:41.23.1
+    image: renovate/renovate:41.21.1
     commands:
       - unset GIT_COMMITTER_NAME GIT_COMMITTER_EMAIL GIT_AUTHOR_NAME GIT_AUTHOR_EMAIL
       - renovate

cluster/apps/bazarr/bazarr-pvc.yml

@@ -1,34 +1,13 @@
----
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: bazarr-pv
-  namespace: default
-spec:
-  capacity:
-    storage: 1Gi
-  volumeMode: Filesystem
-  accessModes:
-    - ReadWriteMany
-  persistentVolumeReclaimPolicy: Retain
-  mountOptions:
-    - hard
-    - nfsvers=4.1
-  nfs:
-    path: /k3s/volumes/bazarr
-    server: 10.0.0.123
-
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim
 metadata:
-  name: bazarr-pvc
+  name: longhorn-bazarr
   namespace: default
 spec:
   accessModes:
     - ReadWriteMany
-  volumeName: bazarr-pv
-  storageClassName: ""
+  storageClassName: longhorn
   resources:
     requests:
       storage: 1Gi

cluster/apps/bazarr/bazarr.yml

@@ -14,6 +14,10 @@ spec:
       labels:
         app: bazarr
     spec:
+      securityContext:
+        runAsUser: 1000
+        runAsGroup: 1000
+        fsGroup: 1000
       containers:
       - name: bazarr
         image: linuxserver/bazarr:1.5.2
@@ -36,7 +40,7 @@ spec:
       volumes:
       - name: config
         persistentVolumeClaim:
-          claimName: bazarr-pvc
+          claimName: longhorn-bazarr
       - name: tv
         nfs:
           server: 10.0.0.123

cluster/apps/code-server/code-server-pvc.yml

@@ -1,34 +1,13 @@
----
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: code-server-pv
-  namespace: default
-spec:
-  capacity:
-    storage: 1Gi
-  volumeMode: Filesystem
-  accessModes:
-    - ReadWriteMany
-  persistentVolumeReclaimPolicy: Retain
-  mountOptions:
-    - hard
-    - nfsvers=4.1
-  nfs:
-    path: /k3s/volumes/code-server
-    server: 10.0.0.123
-
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim
 metadata:
-  name: code-server-pvc
+  name: longhorn-code-server
   namespace: default
 spec:
   accessModes:
     - ReadWriteMany
-  storageClassName: ""
-  volumeName: code-server-pv
+  storageClassName: longhorn-static
   resources:
     requests:
-      storage: 1Gi
+      storage: 1Gi

cluster/apps/code-server/code-server.yml

@@ -44,4 +44,4 @@ spec:
       volumes:
       - name: code-server
         persistentVolumeClaim:
-          claimName: code-server-pvc
+          claimName: longhorn-code-server

cluster/apps/drone/drone-pvc.yml

@@ -1,34 +1,13 @@
----
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: drone-pv
-  namespace: default
-spec:
-  capacity:
-    storage: 1Gi
-  volumeMode: Filesystem
-  accessModes:
-    - ReadWriteMany
-  persistentVolumeReclaimPolicy: Retain
-  mountOptions:
-    - hard
-    - nfsvers=4.1
-  nfs:
-    path: /k3s/volumes/drone
-    server: 10.0.0.123
-
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim
 metadata:
-  name: drone-pvc
+  name: longhorn-drone
   namespace: default
 spec:
   accessModes:
     - ReadWriteMany
-  storageClassName: ""
-  volumeName: drone-pv
+  storageClassName: longhorn
   resources:
     requests:
-      storage: 1Gi
+      storage: 1Gi

cluster/apps/drone/drone.yml

@@ -72,4 +72,4 @@ spec:
       volumes:
       - name: drone-data
         persistentVolumeClaim:
-          claimName: drone-pvc
+          claimName: longhorn-drone

cluster/apps/ersatztv/ersatztv-pv.yml

@@ -0,0 +1,23 @@
+---
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: jellyfin-intel-pv
+  namespace: default
+spec:
+  capacity:
+    storage: 10Gi
+  accessModes:
+    - ReadOnlyMany
+  storageClassName: jellyfin-intel-pv
+  hostPath:
+    path: "/dev/dri/renderD128"
+  nodeAffinity:
+    required:
+      nodeSelectorTerms:
+        - matchExpressions:
+            - key: gpu
+              operator: In
+              values:
+              - intel
+

cluster/apps/ersatztv/ersatztv-pvc.yml

@@ -1,34 +1,27 @@
 ---
 apiVersion: v1
-kind: PersistentVolume
+kind: PersistentVolumeClaim
 metadata:
-  name: ersatztv-pv
+  name: jellyfin-intel-pvc
   namespace: default
 spec:
-  capacity:
-    storage: 1Gi
-  volumeMode: Filesystem
+  storageClassName: jellyfin-intel-pv
+  resources:
+    requests:
+      storage: 10Gi
   accessModes:
-    - ReadWriteMany
-  persistentVolumeReclaimPolicy: Retain
-  mountOptions:
-    - hard
-    - nfsvers=4.1
-  nfs:
-    path: /k3s/volumes/ersatztv
-    server: 10.0.0.123
+    - ReadOnlyMany
 
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim
 metadata:
-  name: ersatztv-pvc
+  name: longhorn-ersatztv
   namespace: default
 spec:
   accessModes:
     - ReadWriteMany
-  storageClassName: ""
-  volumeName: ersatztv-pv
+  storageClassName: longhorn
   resources:
     requests:
-      storage: 1Gi
+      storage: 1Gi

cluster/apps/ersatztv/ersatztv.yml

@@ -14,6 +14,13 @@ spec:
       labels:
         app: ersatztv
     spec:
+      securityContext:
+        runAsGroup: 0
+        runAsUser: 0
+        supplementalGroups:
+        - 128
+        - 226
+        - 106
       containers:
       - name: ersatztv
         image: jasongdove/ersatztv:v25.2.0-vaapi
@@ -22,29 +29,24 @@ spec:
         volumeMounts:
         - name: data
           mountPath: /root/.local/share/ersatztv
-        - name: i915
-          mountPath: /dev/dri/
+        - name: intel
+          mountPath: /dev/dri/renderD128
         - name: transcode
           mountPath: /root/.local/share/etv-transcode
         - name: merge
           mountPath: /mnt/merge
         securityContext:
           privileged: true
-        resources:
-          requests:
-            gpu.intel.com/i915: "1"
-          limits:
-            gpu.intel.com/i915: "1"
       volumes:
       - name: data
         persistentVolumeClaim:
-          claimName: ersatztv-pvc
-      - name: i915
-        hostPath:
-          path: /dev/dri
+          claimName: longhorn-ersatztv
+      - name: transcode
+        emptyDir: {}
+      - name: intel
+        persistentVolumeClaim:
+          claimName: jellyfin-intel-pvc
       - name: merge
         nfs:
           server: 10.0.0.123
           path: /merge
-      - name: transcode
-        emptyDir: {}

cluster/apps/ghostfolio/ghostfolio.yml

@@ -76,7 +76,7 @@ spec:
               key: postgres-password
       containers:
       - name: ghostfolio
-        image: docker.io/ghostfolio/ghostfolio:2.178.0
+        image: docker.io/ghostfolio/ghostfolio:2.177.0
         securityContext:
           capabilities:
             drop:

cluster/apps/jellyfin/jellyfin-pvc.yml

@@ -1,13 +0,0 @@
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: longhorn-jellyfin
-  namespace: default
-spec:
-  accessModes:
-    - ReadWriteMany
-  storageClassName: longhorn
-  resources:
-    requests:
-      storage: 25Gi

cluster/apps/jellyfin/jellyfin.yml

@@ -14,8 +14,17 @@ spec:
       labels:
         app: jellyfin
     spec:
+      securityContext:
+        runAsGroup: 1000
+        runAsUser: 1000
+        supplementalGroups:
+        - 128
+        - 226
+        - 106
+        - 44
+        - 104
       nodeSelector:
-        kubernetes.io/hostname: master-4
+        type: jellyfin
       containers:
       - name: jellyfin
         image: jellyfin/jellyfin:10.10.7
@@ -30,27 +39,23 @@ spec:
           mountPath: /config
         - name: cache
           mountPath: /cache
-        - name: i915
-          mountPath: /dev/dri
+        - name: card
+          mountPath: /dev/dri/renderD128
         securityContext:
             privileged: true
-        resources:
-          requests:
-            gpu.intel.com/i915: "1"
-          limits:
-            gpu.intel.com/i915: "1"
       volumes:
       - name: config
         hostPath:
-          path: /home/akshun/jellyfin
+          path: /home/akshun/jellyfin/
+          type: Directory
       - name: cache
         hostPath:
-          path: /tmp/
+          path: /home/akshun/jellyfin/cache
           type: Directory
       - name: media
         nfs:
           server: 10.0.0.123
           path: /merge
-      - name: i915
-        hostPath:
-          path: /dev/dri
+      - name: card
+        persistentVolumeClaim:
+          claimName: jellyfin-intel-pvc