Update renovate/renovate Docker tag to v41.31.0

Reviewed-on: https://gitea.akshun-lab.uk/akshun/public-k3s/pulls/78

cluster/apps/immich/immich-db.yml

@@ -15,7 +15,7 @@ spec:
     spec:
       containers:
       - name: redis
-        image: docker.io/valkey/valkey:8-bookworm@sha256:620286c7b6c9db39c9be8bae9cc1f187a47d4b52d1b513bdf5e0cc869e65d55d
+        image: docker.io/valkey/valkey:8-bookworm@sha256:facc1d2c3462975c34e10fccb167bfa92b0e0dbd992fc282c29a61c3243afb11
         env:
         - name: REDIS_HOSTNAME
           value: "immich-redis"

cluster/apps/renovate/renovate-job.yml

@@ -15,7 +15,7 @@ spec:
         spec:
           hostNetwork: true
           containers:
-            - image: renovate/renovate:41.30.3
+            - image: renovate/renovate:41.31.0
               name: renovate-bot
               env:
                 - name: RENOVATE_TOKEN

cluster/apps/searxng/searxng.yml

@@ -16,7 +16,7 @@ spec:
     spec:
       containers:
       - name: searxng
-        image: searxng/searxng@sha256:8f757f615fe5dc634ba16fae8576a5189b695b55fc225f6bae2efb5b9aa8d3da
+        image: searxng/searxng@sha256:a8de13bc467fc7e8d9edf35f71e99dcbb4ead0c965f120f689ab8dffc2999ecc
         ports:
         - containerPort: 8080
         env:

cluster/config/namespaces/namespaces.yml

@@ -13,3 +13,11 @@ metadata:
   name: cert-manager
   labels:
     name: cert-manager
+
+---
+kind: Namespace
+apiVersion: v1
+metadata:
+  name: monitoring
+  labels:
+    name: monitoring

cluster/helm/prometheus/prometheus-release.yml

@@ -0,0 +1,28 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: prometheus
+  namespace: monitoring
+spec:
+  interval: 24h
+  chart:
+    spec:
+      chart: prometheus
+      version: "27.23.0"
+      sourceRef:
+        kind: HelmRepository
+        name: prometheus-community
+        namespace: flux-system
+      interval: 24h
+  install:
+    remediation:
+      retries: 3
+  upgrade:
+    remediation:
+      retries: 3
+  values:
+    service:
+      enabled: true
+      type: LoadBalancer
+      servicePort: 9090

cluster/helm/prometheus/prometheus-repo.yml

@@ -0,0 +1,9 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: HelmRepository
+metadata:
+  name: prometheus-community
+  namespace: flux-system
+spec:
+  interval: 24h
+  url: https://prometheus-community.github.io/helm-charts

cluster/helm/sealed-secrets/sealed-secrets-release.yaml

@@ -3,26 +3,22 @@ apiVersion: helm.toolkit.fluxcd.io/v2
 kind: HelmRelease
 metadata:
   name: sealed-secrets
-  namespace: flux-system
+  namespace: kube-system
 spec:
   chart:
     spec:
       chart: sealed-secrets
-      reconcileStrategy: ChartVersion
       sourceRef:
         kind: HelmRepository
         name: sealed-secrets
+        namespace: flux-system
       version: '>=1.15.0-0'
   install:
     crds: Create
   interval: 24h
-  releaseName: sealed-secrets
-  targetNamespace: flux-system
+  releaseName: sealed-secrets-controller
   upgrade:
     crds: CreateReplace
   values:
-    service:
-      type: LoadBalancer
-      nodePort: 30081
     networkPolicy:
       enabled: true