Merge branch 'main' into auto-update-readme-20251118-220250

Update k8s/apps/jellyfin/qbittorent.yaml
Update external-secrets
2025-11-24 13:57:40 +00:00 · 2025-11-24 12:12:24 +00:00 · 2025-11-24 14:01:13 +02:00 · 2025-11-24 11:58:05 +00:00 · 2025-11-24 11:54:25 +00:00 · 2025-11-24 13:51:59 +02:00
48 changed files with 300 additions and 83 deletions
--- a/README.md
+++ b/README.md
@@ -40,6 +40,7 @@ ArgoCD homelab project
 | **greece-notifier** | [![greece-notifier](https://ag.hexor.cy/api/badge?name=greece-notifier&revision=true)](https://ag.hexor.cy/applications/argocd/greece-notifier) |
 | **hexound** | [![hexound](https://ag.hexor.cy/api/badge?name=hexound&revision=true)](https://ag.hexor.cy/applications/argocd/hexound) |
 | **immich** | [![immich](https://ag.hexor.cy/api/badge?name=immich&revision=true)](https://ag.hexor.cy/applications/argocd/immich) |
+| **iperf3** | [![iperf3](https://ag.hexor.cy/api/badge?name=iperf3&revision=true)](https://ag.hexor.cy/applications/argocd/iperf3) |
 | **jellyfin** | [![jellyfin](https://ag.hexor.cy/api/badge?name=jellyfin&revision=true)](https://ag.hexor.cy/applications/argocd/jellyfin) |
 | **k8s-secrets** | [![k8s-secrets](https://ag.hexor.cy/api/badge?name=k8s-secrets&revision=true)](https://ag.hexor.cy/applications/argocd/k8s-secrets) |
 | **khm** | [![khm](https://ag.hexor.cy/api/badge?name=khm&revision=true)](https://ag.hexor.cy/applications/argocd/khm) |
--- a/k8s/apps/gitea/deployment.yaml
+++ b/k8s/apps/gitea/deployment.yaml
@@ -36,7 +36,7 @@ spec:
              cpu: "200m"
            limits:
              memory: "2Gi"
-              cpu: "1000m"
+              cpu: "1500m"
          env:
            - name: GITEA__service__REGISTER_MANUAL_CONFIRM
              value: "true"
@@ -129,7 +129,7 @@ spec:
              memory: "256Mi"
              ephemeral-storage: "1Gi"   # reserve ephemeral storage
            limits:
-              cpu: "2000m"
+              cpu: "3000m"
              memory: "4Gi"
              ephemeral-storage: "28Gi"   # hard cap for /data usage
          volumeMounts:
--- a/k8s/apps/gitea/external-secrets.yaml
+++ b/k8s/apps/gitea/external-secrets.yaml
@@ -1,5 +1,5 @@
 ---
-apiVersion: external-secrets.io/v1beta1
+apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
  name: gitea-runner-token
@@ -24,7 +24,7 @@ spec:
        property: login.password

 ---
-apiVersion: external-secrets.io/v1beta1
+apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
  name: gitea-recapcha-creds
--- a/k8s/apps/greece-notifier/deployment.yaml
+++ b/k8s/apps/greece-notifier/deployment.yaml
@@ -30,7 +30,7 @@ spec:
              cpu: "100m"
              memory: "256Mi"
            limits:
-              cpu: "2000m"
+              cpu: "3000m"
              memory: "1Gi"
          volumeMounts:
            - name: data
--- a/k8s/apps/greece-notifier/external-secrets.yaml
+++ b/k8s/apps/greece-notifier/external-secrets.yaml
@@ -1,5 +1,5 @@
 ---
-apiVersion: external-secrets.io/v1beta1
+apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
  name: greece-notifier-creds
--- a/k8s/apps/hexound/deployment.yaml
+++ b/k8s/apps/hexound/deployment.yaml
@@ -30,7 +30,7 @@ spec:
              cpu: "50m"
            limits:
              memory: "128Mi"
-              cpu: "200m"
+              cpu: "300m"
          command:
            - git
            - clone
@@ -49,7 +49,7 @@ spec:
              cpu: "50m"
            limits:
              memory: "256Mi"
-              cpu: "200m"
+              cpu: "300m"
          volumeMounts:
            - name: hexound-repo
              mountPath: /var/www/html
--- a/k8s/apps/immich/deployments.yaml
+++ b/k8s/apps/immich/deployments.yaml
@@ -23,7 +23,7 @@ spec:
            cpu: "500m"
          limits:
            memory: "4Gi"
-            cpu: "2000m"
+            cpu: "3000m"
        ports:
        - containerPort: 2283
        env:
@@ -160,7 +160,7 @@ spec:
            cpu: "1000m"
          limits:
            memory: "8Gi"
-            cpu: "4000m"
+            cpu: "6000m"
        env:
        - name: TZ
          value: Asia/Nicosia
@@ -201,7 +201,7 @@ spec:
              cpu: "100m"
            limits:
              memory: "512Mi"
-              cpu: "500m"
+              cpu: "750m"
          readinessProbe:
            exec:
              command: ["redis-cli", "ping"]
--- a/k8s/apps/iperf3/daemonset.yaml
+++ b/k8s/apps/iperf3/daemonset.yaml
@@ -11,23 +11,61 @@ spec:
      labels:
        app: iperf3-server
    spec:
+      serviceAccountName: iperf3-server
      subdomain: iperf3
      initContainers:
-      - name: set-hostname
-        image: busybox:1.35
-        command: ['sh', '-c']
-        args:
-          - |
-            NODE_NAME=$(echo $NODE_NAME | cut -d'.' -f1 | tr '[:upper:]' '[:lower:]')
-            echo "iperf3-${NODE_NAME}" > /etc/hostname
-            hostname "iperf3-${NODE_NAME}"
-        securityContext:
-          privileged: true
+      - name: create-service
+        image: bitnami/kubectl:latest
        env:
        - name: NODE_NAME
          valueFrom:
            fieldRef:
              fieldPath: spec.nodeName
+        - name: POD_IP
+          valueFrom:
+            fieldRef:
+              fieldPath: status.podIP
+        command:
+          - /bin/bash
+          - -c
+          - |
+            # Clean node name for service name
+            NODE_CLEAN=$(echo "$NODE_NAME" | cut -d'.' -f1 | tr '[:upper:]' '[:lower:]' | tr '_' '-')
+            SERVICE_NAME="iperf3-${NODE_CLEAN}"
+            
+            # Create service for this pod
+            kubectl apply -f - <<EOF
+            apiVersion: v1
+            kind: Service
+            metadata:
+              name: ${SERVICE_NAME}
+              namespace: iperf3
+              labels:
+                app: iperf3-node-service
+                target-node: "${NODE_NAME}"
+            spec:
+              type: ClusterIP
+              ports:
+                - name: iperf3
+                  port: 5201
+                  protocol: TCP
+            ---
+            apiVersion: v1
+            kind: Endpoints
+            metadata:
+              name: ${SERVICE_NAME}
+              namespace: iperf3
+              labels:
+                app: iperf3-node-service
+                target-node: "${NODE_NAME}"
+            subsets:
+              - addresses:
+                  - ip: ${POD_IP}
+                ports:
+                  - name: iperf3
+                    port: 5201
+                    protocol: TCP
+            EOF
      containers:
      - name: iperf3-server
        image: networkstatic/iperf3:latest
@@ -40,15 +78,13 @@ spec:
          valueFrom:
            fieldRef:
              fieldPath: spec.nodeName
-        - name: HOSTNAME
-          value: $(NODE_NAME)
        resources:
          requests:
            memory: "64Mi"
            cpu: "100m"
          limits:
            memory: "256Mi"
-            cpu: "500m"
+            cpu: "750m"
      tolerations:
      - effect: NoSchedule
        operator: Exists
--- a/k8s/apps/iperf3/iperf3-exporter-daemonset.yaml
+++ b/k8s/apps/iperf3/iperf3-exporter-daemonset.yaml
@@ -14,6 +14,58 @@ spec:
      labels:
        app: iperf3-exporter
    spec:
+      serviceAccountName: iperf3-server
+      initContainers:
+      - name: create-exporter-service
+        image: bitnami/kubectl:latest
+        env:
+        - name: NODE_NAME
+          valueFrom:
+            fieldRef:
+              fieldPath: spec.nodeName
+        - name: POD_IP
+          valueFrom:
+            fieldRef:
+              fieldPath: status.podIP
+        command:
+          - /bin/bash
+          - -c
+          - |
+            NODE_CLEAN=$(echo "$NODE_NAME" | cut -d'.' -f1 | tr '[:upper:]' '[:lower:]' | tr '_' '-')
+            SERVICE_NAME="iperf3-exporter-${NODE_CLEAN}"
+            
+            kubectl apply -f - <<EOF
+            apiVersion: v1
+            kind: Service
+            metadata:
+              name: ${SERVICE_NAME}
+              namespace: iperf3
+              labels:
+                app: iperf3-exporter-service
+                target-node: "${NODE_NAME}"
+            spec:
+              type: ClusterIP
+              ports:
+                - name: metrics
+                  port: 9579
+                  protocol: TCP
+            ---
+            apiVersion: v1
+            kind: Endpoints
+            metadata:
+              name: ${SERVICE_NAME}
+              namespace: iperf3
+              labels:
+                app: iperf3-exporter-service
+                target-node: "${NODE_NAME}"
+            subsets:
+              - addresses:
+                  - ip: ${POD_IP}
+                ports:
+                  - name: metrics
+                    port: 9579
+                    protocol: TCP
+            EOF
      containers:
      - name: iperf3-exporter
        image: ghcr.io/edgard/iperf3_exporter:1.2.2
@@ -27,7 +79,7 @@ spec:
            cpu: "50m"
          limits:
            memory: "128Mi"
-            cpu: "200m"
+            cpu: "300m"
        env:
        - name: NODE_NAME
          valueFrom:
--- a/k8s/apps/iperf3/kustomization.yaml
+++ b/k8s/apps/iperf3/kustomization.yaml
@@ -2,6 +2,7 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization

 resources:
+  - rbac.yaml
  - daemonset.yaml
  - service-headless.yaml
  - iperf3-exporter-daemonset.yaml
--- a/k8s/apps/iperf3/rbac.yaml
+++ b/k8s/apps/iperf3/rbac.yaml
@@ -0,0 +1,36 @@
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: iperf3-server
+  namespace: iperf3
+  labels:
+    app: iperf3-server
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: iperf3-service-manager
+  namespace: iperf3
+  labels:
+    app: iperf3-server
+rules:
+  - apiGroups: [""]
+    resources: ["services", "endpoints"]
+    verbs: ["get", "list", "create", "update", "patch", "delete"]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: iperf3-service-manager
+  namespace: iperf3
+  labels:
+    app: iperf3-server
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: iperf3-service-manager
+subjects:
+  - kind: ServiceAccount
+    name: iperf3-server
+    namespace: iperf3
--- a/k8s/apps/iperf3/servicemonitor.yaml
+++ b/k8s/apps/iperf3/servicemonitor.yaml
@@ -3,7 +3,6 @@ apiVersion: monitoring.coreos.com/v1
 kind: ServiceMonitor
 metadata:
  name: iperf3-exporter
-  namespace: default
  labels:
    app: iperf3-exporter
    release: prometheus
@@ -17,21 +16,107 @@ spec:
      interval: 5m
      scrapeTimeout: 30s
      params:
-        duration:
-          - "10"
-        streams:
-          - "4"
+        target: ['iperf3-ch.iperf3.svc.cluster.local:5201']
+        period: ['10s']
+        streams: ['4']
      relabelings:
-        - sourceLabels: [__address__]
-          targetLabel: __param_target
-          regex: (.+):9579
-          replacement: iperf3-${1}.iperf3.default.svc.cluster.local:5201
        - sourceLabels: [__param_target]
          targetLabel: instance
        - targetLabel: __address__
-          replacement: iperf3-exporter.default.svc.cluster.local:9579
+          replacement: iperf3-exporter-ch.iperf3.svc:9579
+    - port: metrics
+      path: /probe
+      interval: 5m
+      scrapeTimeout: 30s
+      params:
+        target: ['iperf3-us.iperf3.svc.cluster.local:5201']
+        period: ['10s']
+        streams: ['4']
+      relabelings:
+        - sourceLabels: [__param_target]
+          targetLabel: instance
+        - targetLabel: __address__
+          replacement: iperf3-exporter-us.iperf3.svc:9579
+    - port: metrics
+      path: /probe
+      interval: 5m
+      scrapeTimeout: 30s
+      params:
+        target: ['iperf3-iris.iperf3.svc.cluster.local:5201']
+        period: ['10s']
+        streams: ['4']
+      relabelings:
+        - sourceLabels: [__param_target]
+          targetLabel: instance
+        - targetLabel: __address__
+          replacement: iperf3-exporter-iris.iperf3.svc:9579
+    - port: metrics
+      path: /probe
+      interval: 5m
+      scrapeTimeout: 30s
+      params:
+        target: ['iperf3-home.iperf3.svc.cluster.local:5201']
+        period: ['10s']
+        streams: ['4']
+      relabelings:
+        - sourceLabels: [__param_target]
+          targetLabel: instance
+        - targetLabel: __address__
+          replacement: iperf3-exporter-home.iperf3.svc:9579
+    - port: metrics
+      path: /probe
+      interval: 5m
+      scrapeTimeout: 30s
+      params:
+        target: ['iperf3-master.iperf3.svc.cluster.local:5201']
+        period: ['10s']
+        streams: ['4']
+      relabelings:
+        - sourceLabels: [__param_target]
+          targetLabel: instance
+        - targetLabel: __address__
+          replacement: iperf3-exporter-master.iperf3.svc:9579
+    - port: metrics
+      path: /probe
+      interval: 5m
+      scrapeTimeout: 30s
+      params:
+        target: ['iperf3-it.iperf3.svc.cluster.local:5201']
+        period: ['10s']
+        streams: ['4']
+      relabelings:
+        - sourceLabels: [__param_target]
+          targetLabel: instance
+        - targetLabel: __address__
+          replacement: iperf3-exporter-it.iperf3.svc:9579
+    - port: metrics
+      path: /probe
+      interval: 5m
+      scrapeTimeout: 30s
+      params:
+        target: ['iperf3-nas.iperf3.svc.cluster.local:5201']
+        period: ['10s']
+        streams: ['4']
+      relabelings:
+        - sourceLabels: [__param_target]
+          targetLabel: instance
+        - targetLabel: __address__
+          replacement: iperf3-exporter-nas.iperf3.svc:9579
+    - port: metrics
+      path: /probe
+      interval: 5m
+      scrapeTimeout: 30s
+      params:
+        target: ['iperf3-spb.iperf3.svc.cluster.local:5201']
+        period: ['10s']
+        streams: ['4']
+      relabelings:
+        - sourceLabels: [__param_target]
+          targetLabel: instance
+        - targetLabel: __address__
+          replacement: iperf3-exporter-spb.iperf3.svc:9579
      metricRelabelings:
        - sourceLabels: [__name__]
          regex: iperf3_(.+)
          targetLabel: __name__
-          replacement: network_${1}
+          replacement: network_${1}
--- a/k8s/apps/jellyfin/qbittorent.yaml
+++ b/k8s/apps/jellyfin/qbittorent.yaml
@@ -1,5 +1,5 @@
 ---
-apiVersion: external-secrets.io/v1beta1
+apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
  name: vpn-creds
@@ -76,11 +76,14 @@ spec:
                secretKeyRef:
                  name: vpn-creds
                  key: ss_link
-          command: ["/bin/bash", "-c", "rm /etc/shadowsocks-rust/config.json && sslocal  --online-config-url $SS_LINK --local-addr 127.0.0.1:8081 -U --protocol http"]
+          command: ["/bin/bash", "-c", "rm /etc/shadowsocks-rust/config.json && sslocal --server-url $SS_LINK --local-addr 127.0.0.1:8081 -U --protocol http"]
          resources:
            requests:
              memory: "64Mi"
-              cpu: "200m"
+              cpu: "300m"
+            limits:
+              memory: "128Mi"
+              cpu: "300m"
 ---
 apiVersion: v1
 kind: Service
--- a/k8s/apps/jellyfin/values.yaml
+++ b/k8s/apps/jellyfin/values.yaml
@@ -6,7 +6,7 @@ resources:
    cpu: "1000m"
  limits:
    memory: "8Gi"
-    cpu: "4000m"
+    cpu: "6000m"
 nodeSelector:
  kubernetes.io/hostname: master.tail2fe2d.ts.net
 persistence:
--- a/k8s/apps/k8s-secrets/deployment.yaml
+++ b/k8s/apps/k8s-secrets/deployment.yaml
@@ -40,7 +40,7 @@ spec:
            cpu: "50m"
          limits:
            memory: "128Mi"
-            cpu: "100m"
+            cpu: "150m"
        livenessProbe:
          httpGet:
            path: /health
--- a/k8s/apps/k8s-secrets/external-secret.yaml
+++ b/k8s/apps/k8s-secrets/external-secret.yaml
@@ -1,5 +1,5 @@
 ---
-apiVersion: external-secrets.io/v1beta1
+apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
  name: openai-creds
--- a/k8s/apps/khm/deployment.yaml
+++ b/k8s/apps/khm/deployment.yaml
@@ -29,7 +29,7 @@ spec:
              cpu: "100m"
            limits:
              memory: "1Gi"
-              cpu: "500m"
+              cpu: "750m"
          command:
            - /bin/sh
            - -c
--- a/k8s/apps/khm/external-secrets.yaml
+++ b/k8s/apps/khm/external-secrets.yaml
@@ -1,5 +1,5 @@
 ---
-apiVersion: external-secrets.io/v1beta1
+apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
  name: khm-pg-creds
--- a/k8s/apps/ollama/external-secrets.yaml
+++ b/k8s/apps/ollama/external-secrets.yaml
@@ -1,5 +1,5 @@
 ---
-apiVersion: external-secrets.io/v1beta1
+apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
  name: oidc-secret
--- a/k8s/apps/paperless/external-secrets.yaml
+++ b/k8s/apps/paperless/external-secrets.yaml
@@ -1,5 +1,5 @@
 ---
-apiVersion: external-secrets.io/v1beta1
+apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
  name: postgres-and-oauth-creds
--- a/k8s/apps/paperless/gotenberg-values.yaml
+++ b/k8s/apps/paperless/gotenberg-values.yaml
@@ -13,7 +13,7 @@ resources:
    cpu: "200m"
  limits:
    memory: "2Gi"
-    cpu: "1000m"
+    cpu: "1500m"

 service:
  type: ClusterIP
--- a/k8s/apps/paperless/paperless-values.yaml
+++ b/k8s/apps/paperless/paperless-values.yaml
@@ -6,7 +6,7 @@ resources:
    cpu: "500m"
  limits:
    memory: "4Gi"
-    cpu: "2000m"
+    cpu: "3000m"
 initContainers:
  install-tesseract-langs:
    image: ghcr.io/paperless-ngx/paperless-ngx:2.18.2
@@ -16,7 +16,7 @@ initContainers:
        cpu: "100m"
      limits:
        memory: "1Gi"
-        cpu: "500m"
+        cpu: "750m"
    command: ["/bin/sh", "-c"]
    args:
      - apt-get update && apt-get install -y --reinstall tesseract-ocr-rus tesseract-ocr-jpn tesseract-ocr-chi-sim tesseract-ocr-eng tesseract-ocr-ell && cp -v -r /usr/share/tesseract-ocr/5/tessdata/* /custom-tessdata/
--- a/k8s/apps/paperless/tika-values.yaml
+++ b/k8s/apps/paperless/tika-values.yaml
@@ -13,7 +13,7 @@ resources:
    cpu: "100m"
  limits:
    memory: "1Gi"
-    cpu: "500m"
+    cpu: "750m"

 service:
  type: ClusterIP
--- a/k8s/apps/pasarguard/daemonset.yaml
+++ b/k8s/apps/pasarguard/daemonset.yaml
@@ -144,7 +144,7 @@ spec:
              cpu: "50m"
            limits:
              memory: "128Mi"
-              cpu: "100m"
+              cpu: "150m"
          volumeMounts:
            - name: shared-data
              mountPath: /shared
@@ -204,7 +204,7 @@ spec:
              cpu: "100m"
            limits:
              memory: "512Mi"
-              cpu: "500m"
+              cpu: "750m"
          volumeMounts:
            - name: shared-data
              mountPath: /shared
--- a/k8s/apps/pasarguard/external-secrets.yaml
+++ b/k8s/apps/pasarguard/external-secrets.yaml
@@ -1,5 +1,5 @@
 ---
-apiVersion: external-secrets.io/v1beta1
+apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
  name: pasarguard-secrets
--- a/k8s/apps/rustdesk/deployment.yaml
+++ b/k8s/apps/rustdesk/deployment.yaml
@@ -27,7 +27,7 @@ spec:
            cpu: "100m"
          limits:
            memory: "512Mi"
-            cpu: "500m"
+            cpu: "750m"
        command: ["hbbs"]
        args:
          - "--relay-servers"
@@ -98,7 +98,7 @@ spec:
            cpu: "100m"
          limits:
            memory: "512Mi"
-            cpu: "500m"
+            cpu: "750m"
        command: ["hbbr"]
        args:
          - "--port"
--- a/k8s/apps/rustdesk/external-secrets.yaml
+++ b/k8s/apps/rustdesk/external-secrets.yaml
@@ -1,5 +1,5 @@
 ---
-apiVersion: external-secrets.io/v1beta1
+apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
  name: rustdesk-keys
--- a/k8s/apps/sonarr-stack/bazarr-values.yaml
+++ b/k8s/apps/sonarr-stack/bazarr-values.yaml
@@ -4,7 +4,7 @@ resources:
    cpu: "100m"
  limits:
    memory: "1Gi"
-    cpu: "500m"
+    cpu: "750m"
 nodeSelector:
  kubernetes.io/hostname: master.tail2fe2d.ts.net

--- a/k8s/apps/sonarr-stack/prowlarr-values.yaml
+++ b/k8s/apps/sonarr-stack/prowlarr-values.yaml
@@ -6,7 +6,7 @@ resources:
    cpu: "100m"
  limits:
    memory: "1Gi"
-    cpu: "500m"
+    cpu: "750m"
 nodeSelector:
  kubernetes.io/hostname: master.tail2fe2d.ts.net

--- a/k8s/apps/sonarr-stack/sonarr-values.yaml
+++ b/k8s/apps/sonarr-stack/sonarr-values.yaml
@@ -6,7 +6,7 @@ resources:
    cpu: "200m"
  limits:
    memory: "2Gi"
-    cpu: "1000m"
+    cpu: "1500m"
 nodeSelector:
  kubernetes.io/hostname: master.tail2fe2d.ts.net

--- a/k8s/apps/stirling-pdf/values.yaml
+++ b/k8s/apps/stirling-pdf/values.yaml
@@ -33,7 +33,7 @@ resources:
    cpu: "200m"
  limits:
    memory: "2Gi"
-    cpu: "1000m"
+    cpu: "1500m"

 probes:
  liveness:
--- a/k8s/apps/tg-bots/external-secrets.yaml
+++ b/k8s/apps/tg-bots/external-secrets.yaml
@@ -1,5 +1,5 @@
 ---
-apiVersion: external-secrets.io/v1beta1
+apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
  name: get-id-bot
@@ -24,7 +24,7 @@ spec:
        property: fields[0].value

 ---
-apiVersion: external-secrets.io/v1beta1
+apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
  name: desubot
--- a/k8s/apps/vaultwarden/deployment.yaml
+++ b/k8s/apps/vaultwarden/deployment.yaml
@@ -37,7 +37,7 @@ spec:
              cpu: "100m"
            limits:
              memory: "1Gi"
-              cpu: "500m"
+              cpu: "750m"
          env:
            - name: DOMAIN
              value: https://vw.hexor.cy
--- a/k8s/apps/vaultwarden/external-secrets.yaml
+++ b/k8s/apps/vaultwarden/external-secrets.yaml
@@ -1,5 +1,5 @@
 ---
-apiVersion: external-secrets.io/v1beta1
+apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
  name: admin-token
--- a/k8s/apps/vpn/external-secrets.yaml
+++ b/k8s/apps/vpn/external-secrets.yaml
@@ -1,5 +1,5 @@
 ---
-apiVersion: external-secrets.io/v1beta1
+apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
  name: outfleet-secrets
@@ -51,7 +51,7 @@ spec:
        property: fields[1].value

 ---
-apiVersion: external-secrets.io/v1beta1
+apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
  name: outline-config
--- a/k8s/apps/vpn/xray.yaml
+++ b/k8s/apps/vpn/xray.yaml
@@ -174,7 +174,7 @@ spec:
        resources:
          limits:
            memory: "512Mi"
-            cpu: "500m"
+            cpu: "750m"
          requests:
            memory: "256Mi"
            cpu: "250m"
--- a/k8s/core/argocd/external-secrets.yaml
+++ b/k8s/core/argocd/external-secrets.yaml
@@ -1,5 +1,5 @@
 ---
-apiVersion: external-secrets.io/v1beta1
+apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
  name: oidc-creds
--- a/k8s/core/argocd/kustomization.yaml
+++ b/k8s/core/argocd/kustomization.yaml
@@ -10,7 +10,7 @@ resources:
 helmCharts:
  - name: argo-cd
    repo: https://argoproj.github.io/argo-helm
-    version: 8.1.3
+    version: 9.1.4
    releaseName: argocd
    namespace: argocd
    valuesFile: values.yaml
--- a/k8s/core/authentik/external-secrets.yaml
+++ b/k8s/core/authentik/external-secrets.yaml
@@ -1,5 +1,5 @@
 ---
-apiVersion: external-secrets.io/v1beta1
+apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
  name: authentik-creds
--- a/k8s/core/cert-manager/external-secrets.yaml
+++ b/k8s/core/cert-manager/external-secrets.yaml
@@ -1,5 +1,5 @@
 ---
-apiVersion: external-secrets.io/v1beta1
+apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
  name: cloudflare-creds
@@ -22,7 +22,7 @@ spec:
        key: 8ae1dcb1-1182-48a1-8733-ca1144ea754b
        property: fields[0].value
 ---
-apiVersion: external-secrets.io/v1beta1
+apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
  name: aws-creds
--- a/k8s/core/cert-manager/kustomization.yaml
+++ b/k8s/core/cert-manager/kustomization.yaml
@@ -10,7 +10,7 @@ resources:
 helmCharts:
  - name: cert-manager
    repo: https://charts.jetstack.io
-    version: 1.17.1
+    version: 1.19.1
    releaseName: cert-manager
    namespace: cert-manager
    valuesFile: values.yaml
--- a/k8s/core/cert-manager/values.yaml
+++ b/k8s/core/cert-manager/values.yaml
@@ -1,2 +1,6 @@
 crds:
  enabled: true
+prometheus:
+  enabled: true
+  servicemonitor:
+    enabled: true
--- a/k8s/core/external-secrets/app.yaml
+++ b/k8s/core/external-secrets/app.yaml
@@ -18,4 +18,4 @@ spec:
      prune: true
    syncOptions:
      - CreateNamespace=true
-
+      - ServerSideApply=true
--- a/k8s/core/external-secrets/bitwarden-store.yaml
+++ b/k8s/core/external-secrets/bitwarden-store.yaml
@@ -128,7 +128,7 @@ spec:
              app.kubernetes.io/name: external-secrets

 ---
-apiVersion: external-secrets.io/v1beta1
+apiVersion: external-secrets.io/v1
 kind: ClusterSecretStore
 metadata:
  name: vaultwarden-login
@@ -141,7 +141,7 @@ spec:
      result:
        jsonPath: "$.data.{{ .remoteRef.property }}"
 ---
-apiVersion: external-secrets.io/v1beta1
+apiVersion: external-secrets.io/v1
 kind: ClusterSecretStore
 metadata:
  name: vaultwarden-fields
--- a/k8s/core/external-secrets/kustomization.yaml
+++ b/k8s/core/external-secrets/kustomization.yaml
@@ -2,13 +2,12 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization

 resources:
-  - app.yaml
  - bitwarden-store.yaml

 helmCharts:
  - name: external-secrets
    repo: https://charts.external-secrets.io
-    version: 0.16.2
+    version: 1.1.0
    releaseName: external-secrets
    namespace: external-secrets
    valuesFile: values.yaml
--- a/k8s/core/postgresql/external-secrets.yaml
+++ b/k8s/core/postgresql/external-secrets.yaml
@@ -1,5 +1,5 @@
 ---
-apiVersion: external-secrets.io/v1beta1
+apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
  name: postgres-creds
@@ -90,7 +90,7 @@ spec:
        key: 832042b9-7edb-4f4c-9254-3c8884ba9733
        property: fields[2].value
 ---
-apiVersion: external-secrets.io/v1beta1
+apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
  name: postgres-users
--- a/k8s/core/prom-stack/external-secrets.yaml
+++ b/k8s/core/prom-stack/external-secrets.yaml
@@ -1,5 +1,5 @@
 ---
-apiVersion: external-secrets.io/v1beta1
+apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
  name: grafana-admin
--- a/k8s/core/prom-stack/kustomization.yaml
+++ b/k8s/core/prom-stack/kustomization.yaml
@@ -9,7 +9,7 @@ resources:
 helmCharts:
  - name: kube-prometheus-stack
    repo: https://prometheus-community.github.io/helm-charts
-    version: 70.4.2
+    version: 79.7.1
    releaseName: prometheus
    namespace: prometheus
    valuesFile: prom-values.yaml
@@ -17,7 +17,7 @@ helmCharts:

  - name: grafana
    repo: https://grafana.github.io/helm-charts
-    version: 8.11.4
+    version: 10.2.0
    releaseName: grafana
    namespace: prometheus
    valuesFile: grafana-values.yaml
Author	SHA1	Message	Date
ab	2180396281	Merge branch 'main' into auto-update-readme-20251118-220250 All checks were successful Terraform / Terraform (pull_request) Successful in 42s Details	2025-11-24 13:57:40 +00:00
ab	06f8b620ae	Update k8s/apps/jellyfin/qbittorent.yaml All checks were successful Update Kubernetes Services Wiki / Generate and Update K8s Wiki (push) Successful in 12s Details Check with kubeconform / lint (push) Successful in 12s Details Auto-update README / Generate README and Create MR (push) Successful in 6s Details	2025-11-24 12:12:24 +00:00
Ultradesu	a3c02b3510	Update external-secrets All checks were successful Update Kubernetes Services Wiki / Generate and Update K8s Wiki (push) Successful in 12s Details Check with kubeconform / lint (push) Successful in 17s Details Auto-update README / Generate README and Create MR (push) Successful in 7s Details	2025-11-24 14:01:13 +02:00
ab	b1acb37700	Update k8s/apps/gitea/external-secrets.yaml All checks were successful Update Kubernetes Services Wiki / Generate and Update K8s Wiki (push) Successful in 11s Details Check with kubeconform / lint (push) Successful in 12s Details Auto-update README / Generate README and Create MR (push) Successful in 6s Details	2025-11-24 11:58:05 +00:00
ab	a1288f4c99	Update k8s/core/external-secrets/app.yaml All checks were successful Update Kubernetes Services Wiki / Generate and Update K8s Wiki (push) Successful in 11s Details Check with kubeconform / lint (push) Successful in 12s Details Auto-update README / Generate README and Create MR (push) Successful in 8s Details	2025-11-24 11:54:25 +00:00
Ultradesu	1672cdf402	Update external-secrets All checks were successful Update Kubernetes Services Wiki / Generate and Update K8s Wiki (push) Successful in 10s Details Check with kubeconform / lint (push) Successful in 13s Details Auto-update README / Generate README and Create MR (push) Successful in 7s Details	2025-11-24 13:51:59 +02:00
Ultradesu	e96a75880e	Update external-secrets Some checks failed Update Kubernetes Services Wiki / Generate and Update K8s Wiki (push) Successful in 11s Details Auto-update README / Generate README and Create MR (push) Has been cancelled Details Check with kubeconform / lint (push) Has been cancelled Details	2025-11-24 13:51:37 +02:00
ab	6c79543b84	Update k8s/core/external-secrets/app.yaml All checks were successful Update Kubernetes Services Wiki / Generate and Update K8s Wiki (push) Successful in 11s Details Check with kubeconform / lint (push) Successful in 14s Details Auto-update README / Generate README and Create MR (push) Successful in 7s Details	2025-11-24 11:46:33 +00:00
ab	f41b86bad4	Update k8s/core/external-secrets/kustomization.yaml All checks were successful Update Kubernetes Services Wiki / Generate and Update K8s Wiki (push) Successful in 12s Details Check with kubeconform / lint (push) Successful in 14s Details Auto-update README / Generate README and Create MR (push) Successful in 9s Details	2025-11-24 11:43:04 +00:00
ab	d44ade2298	Update k8s/core/argocd/kustomization.yaml All checks were successful Update Kubernetes Services Wiki / Generate and Update K8s Wiki (push) Successful in 12s Details Check with kubeconform / lint (push) Successful in 14s Details Auto-update README / Generate README and Create MR (push) Successful in 10s Details	2025-11-24 11:41:20 +00:00
ab	462cb9189d	Update k8s/core/prom-stack/kustomization.yaml All checks were successful Update Kubernetes Services Wiki / Generate and Update K8s Wiki (push) Successful in 11s Details Check with kubeconform / lint (push) Successful in 20s Details Auto-update README / Generate README and Create MR (push) Successful in 9s Details	2025-11-24 11:39:51 +00:00
ab	37bb407a77	Update k8s/core/cert-manager/kustomization.yaml All checks were successful Update Kubernetes Services Wiki / Generate and Update K8s Wiki (push) Successful in 12s Details Check with kubeconform / lint (push) Successful in 12s Details Auto-update README / Generate README and Create MR (push) Successful in 9s Details	2025-11-24 11:38:05 +00:00
ab	cae1c42004	Update k8s/core/cert-manager/values.yaml All checks were successful Update Kubernetes Services Wiki / Generate and Update K8s Wiki (push) Successful in 12s Details Check with kubeconform / lint (push) Successful in 15s Details Auto-update README / Generate README and Create MR (push) Successful in 10s Details	2025-11-24 11:36:56 +00:00
ab	663f2e7504	Update k8s/core/cert-manager/values.yaml All checks were successful Update Kubernetes Services Wiki / Generate and Update K8s Wiki (push) Successful in 11s Details Check with kubeconform / lint (push) Successful in 26s Details Auto-update README / Generate README and Create MR (push) Successful in 6s Details	2025-11-24 11:31:25 +00:00
ab	8679dbf47e	Merge pull request 'Auto-update README with k8s applications' (#24 ) from auto-update-readme-20251124-111959 into main All checks were successful Update Kubernetes Services Wiki / Generate and Update K8s Wiki (push) Successful in 13s Details Reviewed-on: #24	2025-11-24 11:28:23 +00:00
Gitea Actions Bot	1ace105757	Auto-update README with current k8s applications All checks were successful Terraform / Terraform (pull_request) Successful in 1m14s Details Generated by CI/CD workflow on 2025-11-24 11:19:59 This PR updates the README.md file with the current list of applications found in the k8s/ directory structure.	2025-11-24 11:19:59 +00:00
Ultradesu	ce4172b435	Increase CPU limits Some checks are pending Auto-update README / Generate README and Create MR (push) Waiting to run Details Update Kubernetes Services Wiki / Generate and Update K8s Wiki (push) Successful in 12s Details Check with kubeconform / lint (push) Successful in 23s Details	2025-11-24 13:19:04 +02:00
Gitea Actions Bot	1dd8d17fed	Auto-update README with current k8s applications All checks were successful Terraform / Terraform (pull_request) Successful in 40s Details Generated by CI/CD workflow on 2025-11-18 22:02:50 This PR updates the README.md file with the current list of applications found in the k8s/ directory structure.	2025-11-18 22:02:50 +00:00
Ultradesu	c841f95bd2	Fixed iperf3 monitor All checks were successful Update Kubernetes Services Wiki / Generate and Update K8s Wiki (push) Successful in 12s Details Check with kubeconform / lint (push) Successful in 12s Details Auto-update README / Generate README and Create MR (push) Successful in 11s Details	2025-11-19 00:02:10 +02:00
Ultradesu	fb651bc6fe	Fixed iperf3 monitor All checks were successful Update Kubernetes Services Wiki / Generate and Update K8s Wiki (push) Successful in 13s Details Check with kubeconform / lint (push) Successful in 13s Details Auto-update README / Generate README and Create MR (push) Successful in 10s Details	2025-11-18 23:57:43 +02:00
Ultradesu	04330aa474	Fixed iperf3 monitor All checks were successful Update Kubernetes Services Wiki / Generate and Update K8s Wiki (push) Successful in 13s Details Check with kubeconform / lint (push) Successful in 15s Details Auto-update README / Generate README and Create MR (push) Successful in 14s Details	2025-11-18 22:30:15 +02:00
Ultradesu	57d517af77	Fixed iperf3 monitor All checks were successful Update Kubernetes Services Wiki / Generate and Update K8s Wiki (push) Successful in 58s Details Check with kubeconform / lint (push) Successful in 1m20s Details Auto-update README / Generate README and Create MR (push) Successful in 23s Details	2025-11-18 22:21:17 +02:00
Ultradesu	1f7d9e41c8	Fixed iperf3 monitor All checks were successful Update Kubernetes Services Wiki / Generate and Update K8s Wiki (push) Successful in 30s Details Check with kubeconform / lint (push) Successful in 1m8s Details Auto-update README / Generate README and Create MR (push) Successful in 37s Details	2025-11-18 22:16:11 +02:00
Ultradesu	39a27c596f	Fixed iperf3 All checks were successful Update Kubernetes Services Wiki / Generate and Update K8s Wiki (push) Successful in 12s Details Check with kubeconform / lint (push) Successful in 20s Details Auto-update README / Generate README and Create MR (push) Successful in 11s Details	2025-11-18 22:13:12 +02:00
Ultradesu	353bb877be	Fixed iperf3 All checks were successful Update Kubernetes Services Wiki / Generate and Update K8s Wiki (push) Successful in 12s Details Check with kubeconform / lint (push) Successful in 14s Details Auto-update README / Generate README and Create MR (push) Successful in 15s Details	2025-11-18 21:45:26 +02:00
Ultradesu	e523bb8bea	Fixed iperf3 All checks were successful Update Kubernetes Services Wiki / Generate and Update K8s Wiki (push) Successful in 12s Details Check with kubeconform / lint (push) Successful in 14s Details Auto-update README / Generate README and Create MR (push) Successful in 12s Details	2025-11-18 21:44:00 +02:00