Update renovate/renovate Docker tag to v41.23.1

Reviewed-on: https://gitea.akshun-lab.uk/akshun/public-k3s/pulls/67

.drone.yml

@@ -13,13 +13,13 @@ environment:
 
 steps:
   - name: renovate - validate config
-    image: renovate/renovate:41.17.2
+    image: renovate/renovate:41.23.1
     commands:
       - unset GIT_COMMITTER_NAME GIT_COMMITTER_EMAIL GIT_AUTHOR_NAME GIT_AUTHOR_EMAIL
       - renovate-config-validator
 
   - name: renovate
-    image: renovate/renovate:41.17.2
+    image: renovate/renovate:41.23.1
     commands:
       - unset GIT_COMMITTER_NAME GIT_COMMITTER_EMAIL GIT_AUTHOR_NAME GIT_AUTHOR_EMAIL
       - renovate

cluster/apps/bazarr/bazarr-pvc.yml

@@ -1,13 +1,34 @@
+---
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: bazarr-pv
+  namespace: default
+spec:
+  capacity:
+    storage: 1Gi
+  volumeMode: Filesystem
+  accessModes:
+    - ReadWriteMany
+  persistentVolumeReclaimPolicy: Retain
+  mountOptions:
+    - hard
+    - nfsvers=4.1
+  nfs:
+    path: /k3s/volumes/bazarr
+    server: 10.0.0.123
+
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim
 metadata:
-  name: longhorn-bazarr
+  name: bazarr-pvc
   namespace: default
 spec:
   accessModes:
     - ReadWriteMany
-  storageClassName: longhorn
+  volumeName: bazarr-pv
+  storageClassName: ""
   resources:
     requests:
       storage: 1Gi

cluster/apps/bazarr/bazarr.yml

@@ -14,10 +14,6 @@ spec:
       labels:
         app: bazarr
     spec:
-      securityContext:
-        runAsUser: 1000
-        runAsGroup: 1000
-        fsGroup: 1000
       containers:
       - name: bazarr
         image: linuxserver/bazarr:1.5.2
@@ -40,7 +36,7 @@ spec:
       volumes:
       - name: config
         persistentVolumeClaim:
-          claimName: longhorn-bazarr
+          claimName: bazarr-pvc
       - name: tv
         nfs:
           server: 10.0.0.123

cluster/apps/code-server/code-server-pvc.yml

@@ -1,13 +1,34 @@
+---
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: code-server-pv
+  namespace: default
+spec:
+  capacity:
+    storage: 1Gi
+  volumeMode: Filesystem
+  accessModes:
+    - ReadWriteMany
+  persistentVolumeReclaimPolicy: Retain
+  mountOptions:
+    - hard
+    - nfsvers=4.1
+  nfs:
+    path: /k3s/volumes/code-server
+    server: 10.0.0.123
+
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim
 metadata:
-  name: longhorn-code-server
+  name: code-server-pvc
   namespace: default
 spec:
   accessModes:
     - ReadWriteMany
-  storageClassName: longhorn-static
+  storageClassName: ""
+  volumeName: code-server-pv
   resources:
     requests:
       storage: 1Gi

cluster/apps/code-server/code-server.yml

@@ -44,4 +44,4 @@ spec:
       volumes:
       - name: code-server
         persistentVolumeClaim:
-          claimName: longhorn-code-server
+          claimName: code-server-pvc

cluster/apps/drone/drone-pvc.yml

@@ -1,13 +1,34 @@
+---
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: drone-pv
+  namespace: default
+spec:
+  capacity:
+    storage: 1Gi
+  volumeMode: Filesystem
+  accessModes:
+    - ReadWriteMany
+  persistentVolumeReclaimPolicy: Retain
+  mountOptions:
+    - hard
+    - nfsvers=4.1
+  nfs:
+    path: /k3s/volumes/drone
+    server: 10.0.0.123
+
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim
 metadata:
-  name: longhorn-drone
+  name: drone-pvc
   namespace: default
 spec:
   accessModes:
     - ReadWriteMany
-  storageClassName: longhorn
+  storageClassName: ""
+  volumeName: drone-pv
   resources:
     requests:
       storage: 1Gi

cluster/apps/drone/drone.yml

@@ -72,4 +72,4 @@ spec:
       volumes:
       - name: drone-data
         persistentVolumeClaim:
-          claimName: longhorn-drone
+          claimName: drone-pvc

cluster/apps/ersatztv/ersatztv-pv.yml

@@ -1,23 +0,0 @@
----
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: jellyfin-intel-pv
-  namespace: default
-spec:
-  capacity:
-    storage: 10Gi
-  accessModes:
-    - ReadOnlyMany
-  storageClassName: jellyfin-intel-pv
-  hostPath:
-    path: "/dev/dri/renderD128"
-  nodeAffinity:
-    required:
-      nodeSelectorTerms:
-        - matchExpressions:
-            - key: gpu
-              operator: In
-              values:
-              - intel
-

cluster/apps/ersatztv/ersatztv-pvc.yml

@@ -1,27 +1,34 @@
 ---
 apiVersion: v1
-kind: PersistentVolumeClaim
+kind: PersistentVolume
 metadata:
-  name: jellyfin-intel-pvc
+  name: ersatztv-pv
   namespace: default
 spec:
-  storageClassName: jellyfin-intel-pv
-  resources:
-    requests:
-      storage: 10Gi
+  capacity:
+    storage: 1Gi
+  volumeMode: Filesystem
   accessModes:
-    - ReadOnlyMany
+    - ReadWriteMany
+  persistentVolumeReclaimPolicy: Retain
+  mountOptions:
+    - hard
+    - nfsvers=4.1
+  nfs:
+    path: /k3s/volumes/ersatztv
+    server: 10.0.0.123
 
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim
 metadata:
-  name: longhorn-ersatztv
+  name: ersatztv-pvc
   namespace: default
 spec:
   accessModes:
     - ReadWriteMany
-  storageClassName: longhorn
+  storageClassName: ""
+  volumeName: ersatztv-pv
   resources:
     requests:
       storage: 1Gi

cluster/apps/ersatztv/ersatztv.yml

@@ -14,13 +14,6 @@ spec:
       labels:
         app: ersatztv
     spec:
-      securityContext:
-        runAsGroup: 0
-        runAsUser: 0
-        supplementalGroups:
-        - 128
-        - 226
-        - 106
       containers:
       - name: ersatztv
         image: jasongdove/ersatztv:v25.2.0-vaapi
@@ -29,24 +22,29 @@ spec:
         volumeMounts:
         - name: data
           mountPath: /root/.local/share/ersatztv
-        - name: intel
-          mountPath: /dev/dri/renderD128
+        - name: i915
+          mountPath: /dev/dri/
         - name: transcode
           mountPath: /root/.local/share/etv-transcode
         - name: merge
           mountPath: /mnt/merge
         securityContext:
           privileged: true
+        resources:
+          requests:
+            gpu.intel.com/i915: "1"
+          limits:
+            gpu.intel.com/i915: "1"
       volumes:
       - name: data
         persistentVolumeClaim:
-          claimName: longhorn-ersatztv
-      - name: transcode
-        emptyDir: {}
-      - name: intel
-        persistentVolumeClaim:
-          claimName: jellyfin-intel-pvc
+          claimName: ersatztv-pvc
+      - name: i915
+        hostPath:
+          path: /dev/dri
       - name: merge
         nfs:
           server: 10.0.0.123
           path: /merge
+      - name: transcode
+        emptyDir: {}

cluster/apps/ghostfolio/ghostfolio.yml

@@ -76,7 +76,7 @@ spec:
               key: postgres-password
       containers:
       - name: ghostfolio
-        image: docker.io/ghostfolio/ghostfolio:2.177.0
+        image: docker.io/ghostfolio/ghostfolio:2.178.0
         securityContext:
           capabilities:
             drop:

cluster/apps/jellyfin/jellyfin-pvc.yml

@@ -0,0 +1,13 @@
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: longhorn-jellyfin
+  namespace: default
+spec:
+  accessModes:
+    - ReadWriteMany
+  storageClassName: longhorn
+  resources:
+    requests:
+      storage: 25Gi

cluster/apps/jellyfin/jellyfin.yml

@@ -14,17 +14,8 @@ spec:
       labels:
         app: jellyfin
     spec:
-      securityContext:
-        runAsGroup: 1000
-        runAsUser: 1000
-        supplementalGroups:
-        - 128
-        - 226
-        - 106
-        - 44
-        - 104
       nodeSelector:
-        type: jellyfin
+        kubernetes.io/hostname: master-4
       containers:
       - name: jellyfin
         image: jellyfin/jellyfin:10.10.7
@@ -39,23 +30,27 @@ spec:
           mountPath: /config
         - name: cache
           mountPath: /cache
-        - name: card
-          mountPath: /dev/dri/renderD128
+        - name: i915
+          mountPath: /dev/dri
         securityContext:
             privileged: true
+        resources:
+          requests:
+            gpu.intel.com/i915: "1"
+          limits:
+            gpu.intel.com/i915: "1"
       volumes:
       - name: config
         hostPath:
-          path: /home/akshun/jellyfin/
-          type: Directory
+          path: /home/akshun/jellyfin
       - name: cache
         hostPath:
-          path: /home/akshun/jellyfin/cache
+          path: /tmp/
           type: Directory
       - name: media
         nfs:
           server: 10.0.0.123
           path: /merge
-      - name: card
-        persistentVolumeClaim:
-          claimName: jellyfin-intel-pvc
+      - name: i915
+        hostPath:
+          path: /dev/dri