Update renovate/renovate Docker tag to v40.59.3

Reviewed-on: https://gitea.akshun-lab.uk/akshun/public-k3s/pulls/14

.drone.yml

@@ -13,13 +13,13 @@ environment:
 
 steps:
   - name: renovate - validate config
-    image: renovate/renovate:40.57.1
+    image: renovate/renovate:40.59.3
     commands:
       - unset GIT_COMMITTER_NAME GIT_COMMITTER_EMAIL GIT_AUTHOR_NAME GIT_AUTHOR_EMAIL
       - renovate-config-validator
 
   - name: renovate
-    image: renovate/renovate:40.57.1
+    image: renovate/renovate:40.59.3
     commands:
       - unset GIT_COMMITTER_NAME GIT_COMMITTER_EMAIL GIT_AUTHOR_NAME GIT_AUTHOR_EMAIL
       - renovate

cluster/apps/gitea/gitea-pvc.yml

@@ -25,17 +25,3 @@ spec:
   resources:
     requests:
       storage: 5Gi
-
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: longhorn-gitea-dind
-  namespace: default
-spec:
-  accessModes:
-    - ReadWriteMany
-  storageClassName: longhorn
-  resources:
-    requests:
-      storage: 10Gi

cluster/flux-system/gotk-components.yaml

@@ -1,6 +1,6 @@
 ---
 # This manifest was generated by flux. DO NOT EDIT.
-# Flux Version: v2.6.1
+# Flux Version: v2.6.2
 # Components: source-controller,kustomize-controller,helm-controller,notification-controller
 apiVersion: v1
 kind: Namespace
@@ -8,7 +8,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.6.1
+    app.kubernetes.io/version: v2.6.2
     pod-security.kubernetes.io/warn: restricted
     pod-security.kubernetes.io/warn-version: latest
   name: flux-system
@@ -19,7 +19,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.6.1
+    app.kubernetes.io/version: v2.6.2
   name: allow-egress
   namespace: flux-system
 spec:
@@ -39,7 +39,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.6.1
+    app.kubernetes.io/version: v2.6.2
   name: allow-scraping
   namespace: flux-system
 spec:
@@ -59,7 +59,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.6.1
+    app.kubernetes.io/version: v2.6.2
   name: allow-webhooks
   namespace: flux-system
 spec:
@@ -78,7 +78,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.6.1
+    app.kubernetes.io/version: v2.6.2
   name: critical-pods-flux-system
   namespace: flux-system
 spec:
@@ -98,7 +98,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.6.1
+    app.kubernetes.io/version: v2.6.2
   name: crd-controller-flux-system
 rules:
 - apiGroups:
@@ -198,7 +198,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.6.1
+    app.kubernetes.io/version: v2.6.2
     rbac.authorization.k8s.io/aggregate-to-admin: "true"
     rbac.authorization.k8s.io/aggregate-to-edit: "true"
   name: flux-edit-flux-system
@@ -224,7 +224,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.6.1
+    app.kubernetes.io/version: v2.6.2
     rbac.authorization.k8s.io/aggregate-to-admin: "true"
     rbac.authorization.k8s.io/aggregate-to-edit: "true"
     rbac.authorization.k8s.io/aggregate-to-view: "true"
@@ -249,7 +249,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.6.1
+    app.kubernetes.io/version: v2.6.2
   name: cluster-reconciler-flux-system
 roleRef:
   apiGroup: rbac.authorization.k8s.io
@@ -269,7 +269,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.6.1
+    app.kubernetes.io/version: v2.6.2
   name: crd-controller-flux-system
 roleRef:
   apiGroup: rbac.authorization.k8s.io
@@ -304,7 +304,7 @@ metadata:
     app.kubernetes.io/component: source-controller
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.6.1
+    app.kubernetes.io/version: v2.6.2
   name: buckets.source.toolkit.fluxcd.io
 spec:
   group: source.toolkit.fluxcd.io
@@ -1293,7 +1293,7 @@ metadata:
     app.kubernetes.io/component: source-controller
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.6.1
+    app.kubernetes.io/version: v2.6.2
   name: gitrepositories.source.toolkit.fluxcd.io
 spec:
   group: source.toolkit.fluxcd.io
@@ -2571,7 +2571,7 @@ metadata:
     app.kubernetes.io/component: source-controller
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.6.1
+    app.kubernetes.io/version: v2.6.2
   name: helmcharts.source.toolkit.fluxcd.io
 spec:
   group: source.toolkit.fluxcd.io
@@ -3552,7 +3552,7 @@ metadata:
     app.kubernetes.io/component: source-controller
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.6.1
+    app.kubernetes.io/version: v2.6.2
   name: helmrepositories.source.toolkit.fluxcd.io
 spec:
   group: source.toolkit.fluxcd.io
@@ -4401,7 +4401,7 @@ metadata:
     app.kubernetes.io/component: source-controller
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.6.1
+    app.kubernetes.io/version: v2.6.2
   name: ocirepositories.source.toolkit.fluxcd.io
 spec:
   group: source.toolkit.fluxcd.io
@@ -5225,7 +5225,7 @@ metadata:
     app.kubernetes.io/component: source-controller
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.6.1
+    app.kubernetes.io/version: v2.6.2
   name: source-controller
   namespace: flux-system
 ---
@@ -5236,7 +5236,7 @@ metadata:
     app.kubernetes.io/component: source-controller
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.6.1
+    app.kubernetes.io/version: v2.6.2
     control-plane: controller
   name: source-controller
   namespace: flux-system
@@ -5257,7 +5257,7 @@ metadata:
     app.kubernetes.io/component: source-controller
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.6.1
+    app.kubernetes.io/version: v2.6.2
     control-plane: controller
   name: source-controller
   namespace: flux-system
@@ -5302,7 +5302,7 @@ spec:
             resourceFieldRef:
               containerName: manager
               resource: limits.memory
-        image: ghcr.io/fluxcd/source-controller:v1.6.0
+        image: ghcr.io/fluxcd/source-controller:v1.6.1
         imagePullPolicy: IfNotPresent
         livenessProbe:
           httpGet:
@@ -5366,7 +5366,7 @@ metadata:
     app.kubernetes.io/component: kustomize-controller
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.6.1
+    app.kubernetes.io/version: v2.6.2
   name: kustomizations.kustomize.toolkit.fluxcd.io
 spec:
   group: kustomize.toolkit.fluxcd.io
@@ -7153,7 +7153,7 @@ metadata:
     app.kubernetes.io/component: kustomize-controller
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.6.1
+    app.kubernetes.io/version: v2.6.2
   name: kustomize-controller
   namespace: flux-system
 ---
@@ -7164,7 +7164,7 @@ metadata:
     app.kubernetes.io/component: kustomize-controller
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.6.1
+    app.kubernetes.io/version: v2.6.2
     control-plane: controller
   name: kustomize-controller
   namespace: flux-system
@@ -7260,7 +7260,7 @@ metadata:
     app.kubernetes.io/component: helm-controller
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.6.1
+    app.kubernetes.io/version: v2.6.2
   name: helmreleases.helm.toolkit.fluxcd.io
 spec:
   group: helm.toolkit.fluxcd.io
@@ -10955,7 +10955,7 @@ metadata:
     app.kubernetes.io/component: helm-controller
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.6.1
+    app.kubernetes.io/version: v2.6.2
   name: helm-controller
   namespace: flux-system
 ---
@@ -10966,7 +10966,7 @@ metadata:
     app.kubernetes.io/component: helm-controller
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.6.1
+    app.kubernetes.io/version: v2.6.2
     control-plane: controller
   name: helm-controller
   namespace: flux-system
@@ -11062,7 +11062,7 @@ metadata:
     app.kubernetes.io/component: notification-controller
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.6.1
+    app.kubernetes.io/version: v2.6.2
   name: alerts.notification.toolkit.fluxcd.io
 spec:
   group: notification.toolkit.fluxcd.io
@@ -11644,7 +11644,7 @@ metadata:
     app.kubernetes.io/component: notification-controller
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.6.1
+    app.kubernetes.io/version: v2.6.2
   name: providers.notification.toolkit.fluxcd.io
 spec:
   group: notification.toolkit.fluxcd.io
@@ -12205,7 +12205,7 @@ metadata:
     app.kubernetes.io/component: notification-controller
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.6.1
+    app.kubernetes.io/version: v2.6.2
   name: receivers.notification.toolkit.fluxcd.io
 spec:
   group: notification.toolkit.fluxcd.io
@@ -12887,7 +12887,7 @@ metadata:
     app.kubernetes.io/component: notification-controller
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.6.1
+    app.kubernetes.io/version: v2.6.2
   name: notification-controller
   namespace: flux-system
 ---
@@ -12898,7 +12898,7 @@ metadata:
     app.kubernetes.io/component: notification-controller
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.6.1
+    app.kubernetes.io/version: v2.6.2
     control-plane: controller
   name: notification-controller
   namespace: flux-system
@@ -12919,7 +12919,7 @@ metadata:
     app.kubernetes.io/component: notification-controller
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.6.1
+    app.kubernetes.io/version: v2.6.2
     control-plane: controller
   name: webhook-receiver
   namespace: flux-system
@@ -12940,7 +12940,7 @@ metadata:
     app.kubernetes.io/component: notification-controller
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.6.1
+    app.kubernetes.io/version: v2.6.2
     control-plane: controller
   name: notification-controller
   namespace: flux-system

cluster/helm/ollama/ollama-release.yml

@@ -26,11 +26,13 @@ spec:
       gpu:
         enabled: true
         type: nvidia
+      models:
+        pull:
+          - gemma3:4b
+        run:
+          - gemma3:4b
     nodeSelector:
       type: immich
-    models:
-      pull:
-        - gemma2:2b
     service:
       type: LoadBalancer
       port: 3210
@@ -39,3 +41,5 @@ spec:
       enabled: true
       size: 10Gi
       storageClassName: longhorn
+      accessModes: 
+        - ReadWriteMany