chore(deps): update helm release grafana to v8.12.0

helmfiles/applications.yaml

@@ -12,7 +12,7 @@ repositories:
 releases:
   - name: app-gitea
     chart: gitea/gitea
-    version: 11.0.0
+    version: 11.0.1
     namespace: org-badhouseplants
     inherit:
       - template: env-values

installations/monitoring/helmfile.yaml

@@ -20,7 +20,7 @@ releases:
   - name: grafana
     chart: grafana/grafana
     namespace: observability
-    version: 8.11.4
+    version: 8.12.0
     installed: true
     inherit:
       - template: default-env-values

values/badhouseplants/argocd/argocd/secrets.yaml

@@ -1,21 +1,21 @@
 configs:
     cm:
-        dex.config: ENC[AES256_GCM,data:/PUs7FdzvwQzsRpJ98cL9f9tYvIab8s34GaQY7vrCg0W8WJIU2EuzknA3WQVEHryL+qC6xS/CH/7R7arb8zkIoTpFle6Hz0+S9FO6FYBnmDuL1Koc8YuuwNqcUoALXa0trpqT+X7h+RyolbkO4wzLvRB468Kwqdg3Ed6spAt0HjviZRz+EqWx5T7/e+E4m30kY9oWE/GVtShRb1gTzknczh6zxDKDl6fMFNWsSSU1JMCW8+zM9WxZ4+AaFP/nPI+/IeAqSiPaVEsQgDfIegkBtzBXK0SZNDCoLryOAXhp2jqM5HT4uHXkbghPqXY570=,iv:EguMqSLbgYS+/9HW73VTi1l6i7uQW0LvyxJ7keyWeiI=,tag:evws7j6zoZ+bE2sBX8PgJg==,type:str]
+        dex.config: ENC[AES256_GCM,data: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,iv:IYCDqaokzM5AYLDe98yBHnxXrjDom9eMGSiR39XxoRs=,tag:SeyqDUzPMi3x9cqIeDaNKQ==,type:str]
     credentialTemplates:
         ssh-creds:
-            sshPrivateKey: ENC[AES256_GCM,data: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,iv:IKGB1ylSDqd5MvjgOQlF26u/rNYfg8u6rYwdbqauvSI=,tag:VrYXRz5l+d+h/JaViMt9mg==,type:str]
+            sshPrivateKey: ENC[AES256_GCM,data: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,iv:yHUhXmTkyWVr7k74jfva6Kt+vWfl//cMNAW2pjuKJts=,tag:v+zjRF1+yblMGbu+HNBgWA==,type:str]
 sops:
     age:
         - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGMDhFNGM2MHdBWnhpVG12
-            T0Q3cTF1WlRsb25zQzZiczBqVytNanlXZVR3CnVKamhvV0l4VjREN2JCMXJvakxi
-            KzNBdCs3QzVyZ2tMOGJDc0VXbHY1eUEKLS0tIE83TWdveFhiaGN4QTBoR3J0TXQx
-            bi9SNEI5eDFBWUxvU1p4Z0UwUFczSWcKtfjZsrEJSFZ5RSJsLU3X3WtapjE8yidF
-            S49BQXS6rEuWe8BH6i2me2j7/UiS/fY2w61TzZ5AQVZfwePN60g3BA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvMkxsVE85T0I2cjJmVDBa
+            M3FyTU9GdHBtWnozM3pSMytZUC8rTk9WUWtvCkNhdW1tZ3JuUS9LSVphRU1ub0Zh
+            VFR3NzBqRUNzVGRCbEpCN0xIbm9JSDgKLS0tIHVzSnJMdy9aU0QrSi9oLzhkckZ2
+            KzVpTGRhQ1dodDUwenZVNWZFY3JxLzAKtvmxzXc8sSuoylF1XGSUWkaiO8vhUXyW
+            yYBqCWTWB3i8rCMUYpzE2yaF3LXEpkS+uZZPg4HKOZxvxIG1o4+c7w==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-04-10T19:10:16Z"
-    mac: ENC[AES256_GCM,data:J/dmpRJYe4xtu4KWyCNbyyIieul0618jp7YtT/+zNLvKG8K70nsYuNvGxXbE8Qqj+zXNVClJbW1U8dKGwU03u8T7QDB2PVd7ViI7JdRPKfiNIPabi8i/BZwEdLnAlidpjm0UYkC4VIVOR8DzAowOtHrqe4uo5bGXEkUl9OqVH18=,iv:2bh0LHfhSYIliepDsb5GU3B2K/213naEFdLbanI9GlY=,tag:VWN34NbtH+Xh576mW0Dy+Q==,type:str]
+    lastmodified: "2025-04-12T15:49:08Z"
+    mac: ENC[AES256_GCM,data:ypJTtzANY/Amng0QJz1zZKUgQhiRaFuIW+c+M1GjFwV380FYkwMkjR2xyo46oMxFqxm3n0cuEmwF5qFlQZ6UcrvZbxluhAwZaDaN1aOUe4+B7uO5h7hjV1VouNabMiJQNIeI1gO0vYAGL55Ou10qu6F5DVPYkTqUir74oRyo3v8=,iv:JBuBBjNgRm+xbnKIiruflZStQmcLOwVh+bHYWX7NZc8=,tag:eLomRU0GQ5dgM6T3e3X2lQ==,type:str]
     unencrypted_suffix: _unencrypted
     version: 3.10.1

values/badhouseplants/argocd/argocd/values.yaml

@@ -42,7 +42,7 @@ redis:
       enabled: false
 
 global:
-  domain: argo.badhouseplants.net
+  domain: argocd.badhouseplants.net
 
 server:
   ingress:
@@ -71,7 +71,7 @@ server:
       kubernetes.io/ingress.global-static-ip-name: ""
       cert-manager.io/cluster-issuer: badhouseplants-issuer-http01
     ingressClassName: traefik
-    hostname: "argogrpc.badhouseplants.net"
+    hostname: "argocdgrpc.badhouseplants.net"
     path: /
     pathType: Prefix
     tls: true
@@ -95,10 +95,11 @@ configs:
       g, allanger@zohomail.com, role:admin
       g, allanger@badhouseplants.net, role:admin
       g, rodion.n.rodionov@gmail.com, role:admin
+      g, jacklull@badhouseplants.net, role:admin
       p, drone, applications, *, badhouseplants/*,allow
   cm:
     exec.enabled: "true"
-    url: https://argo.badhouseplants.net
+    url: https://argocd.badhouseplants.net
     kustomize.buildOptions: "--enable-alpha-plugins"
     accounts.drone: apiKey, login
     accounts.drone.enabled: "true"
@@ -115,6 +116,7 @@ configs:
       url: git@gitea.badhouseplants.net:sharing/go-test-project.git
       name: go-test
       type: git
+      project: default
 #applicationSet:
 #  metrics:
 #    enabled: false

values/badhouseplants/org-badhouseplants/app-gitea/values.yaml

@@ -24,11 +24,10 @@ replicaCount: 1
 clusterDomain: cluster.local
 resources:
   limits:
-    memory: 1024Mi
-    cpu: 1
+    memory: 1.5Gi
   requests:
-    cpu: 1
-    memory: 1024Mi
+    cpu: 1.5
+    memory: 1.5Gi
 persistence:
   enabled: true
   size: 15Gi
@@ -39,9 +38,9 @@ persistence:
 # ------------------------------------------
 gitea:
   metrics:
-    enabled: true
+    enabled: false
     serviceMonitor:
-      enabled: true
+      enabled: false
   config:
     database:
       DB_TYPE: postgres
@@ -65,7 +64,7 @@ gitea:
       LFS_START_SERVER: true
       LANDING_PAGE: explore
       START_SSH_SERVER: true
-      ENABLE_PPROF: true
+      ENABLE_PPROF: false
     storage:
       STORAGE_TYPE: minio
       MINIO_ENDPOINT: "s3.badhouseplants.net:443"
@@ -112,6 +111,10 @@ service:
     type: ClusterIP
     port: 22
     clusterIP:
+deployment:
+  env:
+    - name: REQUIRE_SIGNIN_VIEW
+      value: expensive
 extraDeploy:
   - |-
     apiVersion: kinda.rocks/v1beta1

values/badhouseplants/platform/authentik/secrets.yaml

@@ -1,24 +1,19 @@
 authentik:
-  email:
-    password: ENC[AES256_GCM,data:OtaK90UmvOkSjHYe/37W5aSlZo0=,iv:WQR0YIz4U5QIxc7YSQ2JZRLnA3ZF0JouZtnggTW674g=,tag:Us163wc95RbiN8XdXogt3g==,type:str]
-  secret_key: ENC[AES256_GCM,data:/6gM3ZUb6mIYaJO2CyCuVxLFOxdogTMbKb4c3HYXpvxZIqoFt0t9fHY+XU/mC0OGue4=,iv:TfGI7jXixrI/YBp++AFHz+rCliuo6zhbgXeMviw7rHY=,tag:G52eT7OlxDub1pL27LWHKw==,type:str]
+    email:
+        password: ENC[AES256_GCM,data:aP/oiXCzwLsEd0qAp8aAPufQ1Ko=,iv:T5YdegcjWEK4MDdzLhFmsvV56OPl0jkhmtepohujP/s=,tag:EXerXi4m06Ryy7WVD3ZURg==,type:str]
+    secret_key: ENC[AES256_GCM,data:Oh/csFD5+FDfyXUYRVCEPrBE6UXPFZkR5VEep1bkAjs4hltuOaO22Q==,iv:IiBtFjBbsjepC2VmEk6wEe7r14lv48DBX12SpXaUCmc=,tag:ITR6OJiCYMxUoTGnSCPTQQ==,type:str]
 sops:
-  kms: []
-  gcp_kms: []
-  azure_kv: []
-  hc_vault: []
-  age:
-    - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
-      enc: |
-        -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwNG9RVzltVnZraWNnTW1q
-        aUIvWDNWcEovWC9yWU5OdmxjamFyREgwSFhvCjNwM3FLNmZUV0tHK25tNDRsNGpn
-        UTZDUFIrVmQyRUNZa3d4R2NpbFZqM2cKLS0tIFVoMnBtSUNRd1VHVmx2RXVvdDN2
-        UzFDZDRJRzV6cUVpY0NNWmR5aU9qRlkK6dudxILhTOjvNi2Pwo5jg13GqRG52igd
-        3yXhaIzRp+fcgAXMlTTTwe2jBNRYCv84+wLvV2NkfHyPeE0t9Wh/ow==
-        -----END AGE ENCRYPTED FILE-----
-  lastmodified: "2024-10-14T08:08:22Z"
-  mac: ENC[AES256_GCM,data:qHD7CYM7sFBiJtGADcFeBHSFlmvEZaEVRGXTr02Tk+uLGWn9lP5CuOX1sU4x3Gd8nilwZy0fRAL523HDLvYQBPwsi26Vbp6OgZ9shjp5CvrQMUTg1qRCfjWAw66Y5NHHUJrrYc0sOPlTWXxRyU1Xk9aMvtRQi1ooum9wF3vhuoA=,iv:ADzHjgi72Ureve1CxQhkySvLZ07//Q1oBMKpvgXfNy4=,tag:RAIEupIsOviKYlQJO/rgsg==,type:str]
-  pgp: []
-  unencrypted_suffix: _unencrypted
-  version: 3.9.1
+    age:
+        - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsSUNmTVZ0ZC9LaytCUTZy
+            TTRNR0M0WDVmN0RPVllWTmR0dnMrdzBCOFJnCkMrNGVCc1FnYkZTaE1vUFRCVWI0
+            WERUTWMwanFZUDFnVExZL2NyVTNWTk0KLS0tIEN2K0wzQm8vUkw4azZPaE9LZGsx
+            UW05cHVjemNBeDFGbHhoVXR4ckUxUXMKgfTTlw0Q3J+pFSW+eEyfK1tkrbEd4ZzR
+            x0ONWS1GTx+um+r76NYNRI+W93FD5d4/jiiZGPB6rupMSje9DV41MQ==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-04-12T15:22:14Z"
+    mac: ENC[AES256_GCM,data:xwt0NRuygT/qAlhnfKHLqgVFfEMKMIgiGvjCl7baIplwl94Kxqhh6JMgCogjjtoI2iGrAY3QPamfTDQIOEItB/yqQ7S9NApWIfsXtA8t85YuWwnP3OTCDmpy6dcP1FOV4lGmSvsqr65+OYKALrPTRkA7pV9kGo3roO6BPJbpb+Y=,iv:5eY4EOBM0ZFSjiyKmOJ07YNStOg0+Db3cM27g8+Y//s=,tag:rT1aCz5M0k9AbxKSWhmJ1A==,type:str]
+    unencrypted_suffix: _unencrypted
+    version: 3.10.1