Merge branch 'main' of github.com:tyriis/home-ops

tyriis · May 24, 2024 · 5d023ad · 5d023ad
2 parents a3a0c43 + 25912d6
commit 5d023ad
Show file tree

Hide file tree

Showing 47 changed files with 62 additions and 62 deletions.
diff --git a/.github/workflows/dependency-review.yaml b/.github/workflows/dependency-review.yaml
@@ -22,7 +22,7 @@ jobs:
     steps:
       # https://github.com/marketplace/actions/harden-runner
       - name: Harden Runner
-        uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1
+        uses: step-security/harden-runner@f086349bfa2bd1361f7909c78558e816508cdc10 # v2.8.0
         with:
           egress-policy: audit
 

diff --git a/.github/workflows/flux-diff.yaml b/.github/workflows/flux-diff.yaml
@@ -22,7 +22,7 @@ jobs:
     steps:
       # https://github.com/marketplace/actions/harden-runner
       - name: Harden Runner
-        uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1
+        uses: step-security/harden-runner@f086349bfa2bd1361f7909c78558e816508cdc10 # v2.8.0
         with:
           egress-policy: audit
 
@@ -36,7 +36,7 @@ jobs:
       # https://github.com/marketplace/actions/changed-files
       - name: Get Changed Clusters
         id: changed-clusters
-        uses: tj-actions/changed-files@1754cd4b9e661d1f0eced3b33545a8d8b3bc46d8 # v44.5.0
+        uses: tj-actions/changed-files@03334d095e2739fa9ac4034ec16f66d5d01e9eba # v44.5.1
         with:
           files: kubernetes/**
           dir_names: true

diff --git a/.github/workflows/mega-linter.yaml b/.github/workflows/mega-linter.yaml
@@ -13,7 +13,7 @@ jobs:
     steps:
       # https://github.com/marketplace/actions/harden-runner
       - name: Harden Runner
-        uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1
+        uses: step-security/harden-runner@f086349bfa2bd1361f7909c78558e816508cdc10 # v2.8.0
         with:
           egress-policy: audit
 

diff --git a/.github/workflows/pr-labeler.yaml b/.github/workflows/pr-labeler.yaml
@@ -18,7 +18,7 @@ jobs:
     steps:
       # https://github.com/marketplace/actions/harden-runner
       - name: Harden Runner
-        uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1
+        uses: step-security/harden-runner@f086349bfa2bd1361f7909c78558e816508cdc10 # v2.8.0
         with:
           egress-policy: audit
 

diff --git a/.github/workflows/run-trivy.yaml b/.github/workflows/run-trivy.yaml
@@ -15,7 +15,7 @@ jobs:
     steps:
       # https://github.com/marketplace/actions/harden-runner
       - name: Harden Runner
-        uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1
+        uses: step-security/harden-runner@f086349bfa2bd1361f7909c78558e816508cdc10 # v2.8.0
         with:
           egress-policy: audit
 
@@ -25,7 +25,7 @@ jobs:
 
       # https://github.com/marketplace/actions/aqua-security-trivy
       - name: Run Trivy vulnerability scanner in IaC mode
-        uses: aquasecurity/trivy-action@b2933f565dbc598b29947660e66259e3c7bc8561 # 0.20.0
+        uses: aquasecurity/trivy-action@fd25fed6972e341ff0007ddb61f77e88103953c2 # 0.21.0
         with:
           scan-type: config
           hide-progress: false

diff --git a/.github/workflows/scorecards.yaml b/.github/workflows/scorecards.yaml
@@ -37,7 +37,7 @@ jobs:
     steps:
       # https://github.com/marketplace/actions/harden-runner
       - name: Harden Runner
-        uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1
+        uses: step-security/harden-runner@f086349bfa2bd1361f7909c78558e816508cdc10 # v2.8.0
         with:
           egress-policy: audit
 

diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
@@ -19,7 +19,7 @@ repos:
           - --notitle
 
   - repo: https://github.com/antonbabenko/pre-commit-terraform
-    rev: v1.89.1
+    rev: v1.90.0
     hooks:
       - id: terraform_docs
         args:

diff --git a/infra/nixos/flake.lock b/infra/nixos/flake.lock
diff --git a/infra/nixos/flake.nix b/infra/nixos/flake.nix
@@ -3,7 +3,7 @@
 
   inputs = {
     # NixOS official package source, using the nixos-23.11 branch here
-    nixpkgs.url = "github:NixOS/nixpkgs/nixos-23.11";
+    nixpkgs.url = "github:NixOS/nixpkgs/nixos-24.05";
     # NixOS official package source, using the unstable branch here
     unstable.url = "github:NixOS/nixpkgs/nixos-unstable";
     # home-manager, used for managing user configuration

diff --git a/infra/terraform/cloudflare/main.tf b/infra/terraform/cloudflare/main.tf
@@ -1,5 +1,5 @@
 terraform {
-  required_version = "<= 1.8.3"
+  required_version = "<= 1.8.4"
   required_providers {
     cloudflare = {
       source  = "cloudflare/cloudflare"

diff --git a/infra/terraform/main.tf b/infra/terraform/main.tf
@@ -1,5 +1,5 @@
 terraform {
-  required_version = "<= 1.8.3"
+  required_version = "<= 1.8.4"
   required_providers {
     cloudflare = {
       source  = "cloudflare/cloudflare"

diff --git a/kubernetes/kube-nas/apps/default/echo-server/app/helm-release.yaml b/kubernetes/kube-nas/apps/default/echo-server/app/helm-release.yaml
@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: app-template
-      version: 3.1.0
+      version: 3.2.1
       sourceRef:
         kind: HelmRepository
         name: bjw-s-charts

diff --git a/kubernetes/talos-flux/apps/atlantis/atlantis/app/helm-release.yaml b/kubernetes/talos-flux/apps/atlantis/atlantis/app/helm-release.yaml
@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: atlantis
-      version: 5.0.2
+      version: 5.1.0
       sourceRef:
         kind: HelmRepository
         name: runatlantis-charts
@@ -41,7 +41,7 @@ spec:
 
     image:
       repository: ghcr.io/runatlantis/atlantis
-      tag: v0.27.3@sha256:5ad2e3fe752104a614374490d111ed1230f8ebf5409552d0ad3b716de356dc45
+      tag: v0.28.1@sha256:f82aae61fddc4dc8ebf6f006385447cc4eb26139de854ac37bf8344d4e9a0a42
 
     ## Use Server Side Repo Config,
     ## ref: https://www.runatlantis.io/docs/server-side-repo-config.html

diff --git a/kubernetes/talos-flux/apps/atlantis/atlantis/tyriis/helm-release.yaml b/kubernetes/talos-flux/apps/atlantis/atlantis/tyriis/helm-release.yaml
@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: atlantis
-      version: 5.0.2
+      version: 5.1.0
       sourceRef:
         kind: HelmRepository
         name: runatlantis-charts
@@ -36,7 +36,7 @@ spec:
 
     image:
       repository: ghcr.io/runatlantis/atlantis
-      tag: v0.27.3@sha256:5ad2e3fe752104a614374490d111ed1230f8ebf5409552d0ad3b716de356dc45
+      tag: v0.28.1@sha256:f82aae61fddc4dc8ebf6f006385447cc4eb26139de854ac37bf8344d4e9a0a42
 
     ## Use Server Side Repo Config,
     ## ref: https://www.runatlantis.io/docs/server-side-repo-config.html

diff --git a/kubernetes/talos-flux/apps/backstage/backstage/app/helm-release.yaml b/kubernetes/talos-flux/apps/backstage/backstage/app/helm-release.yaml
@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: app-template
-      version: 3.1.0
+      version: 3.2.1
       sourceRef:
         kind: HelmRepository
         name: bjw-s-charts

diff --git a/kubernetes/talos-flux/apps/database/dragonfly/operator/helm-release.yaml b/kubernetes/talos-flux/apps/database/dragonfly/operator/helm-release.yaml
@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: app-template
-      version: 3.1.0
+      version: 3.2.1
       sourceRef:
         kind: HelmRepository
         name: bjw-s-charts

diff --git a/kubernetes/talos-flux/apps/database/redis/app/helm-release.yaml b/kubernetes/talos-flux/apps/database/redis/app/helm-release.yaml
@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: redis
-      version: 19.4.0
+      version: 19.5.0
       sourceRef:
         kind: HelmRepository
         name: bitnami-charts

diff --git a/kubernetes/talos-flux/apps/default/echo-server/app/helm-release.yaml b/kubernetes/talos-flux/apps/default/echo-server/app/helm-release.yaml
@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: app-template
-      version: 3.1.0
+      version: 3.2.1
       sourceRef:
         kind: HelmRepository
         name: bjw-s-charts

diff --git a/kubernetes/talos-flux/apps/devops/tekton/app/kustomization.yaml b/kubernetes/talos-flux/apps/devops/tekton/app/kustomization.yaml
@@ -6,15 +6,15 @@ kind: Kustomization
 resources:
   # https://github.com/tektoncd/pipeline/releases
   # renovate: depName=tektoncd/pipeline datasource=github-releases
-  - https://github.com/tektoncd/pipeline/releases/download/v0.59.0/release.yaml
+  - https://github.com/tektoncd/pipeline/releases/download/v0.60.0/release.yaml
   # https://github.com/tektoncd/triggers/releases
   # renovate: depName=tektoncd/triggers datasource=github-releases
-  - https://github.com/tektoncd/triggers/releases/download/v0.25.3/release.yaml
+  - https://github.com/tektoncd/triggers/releases/download/v0.27.0/release.yaml
   # renovate: depName=tektoncd/triggers datasource=github-releases
-  - https://github.com/tektoncd/triggers/releases/download/v0.25.3/interceptors.yaml
+  - https://github.com/tektoncd/triggers/releases/download/v0.27.0/interceptors.yaml
   # https://github.com/tektoncd/dashboard/releases
   # renovate: depName=tektoncd/dashboard datasource=github-releases
-  - https://github.com/tektoncd/dashboard/releases/download/v0.42.0/release.yaml
+  - https://github.com/tektoncd/dashboard/releases/download/v0.47.0/release.yaml
   - ./ingress.yaml
 # patches:
 #   # Remove namesapce tekton-pipelines

diff --git a/kubernetes/talos-flux/apps/devops/tekton/krr-cron/helm-release.yaml b/kubernetes/talos-flux/apps/devops/tekton/krr-cron/helm-release.yaml
@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: app-template
-      version: 3.1.0
+      version: 3.2.1
       sourceRef:
         kind: HelmRepository
         name: bjw-s-charts
@@ -44,7 +44,7 @@ spec:
           cron:
             image:
               repository: curlimages/curl
-              tag: 8.7.1@sha256:25d29daeb9b14b89e2fa8cc17c70e4b188bca1466086907c2d9a4b56b59d8e21
+              tag: 8.8.0@sha256:73e4d532ea62d7505c5865b517d3704966ffe916609bedc22af6833dc9969bcd
             args:
               - curl
               - -X

diff --git a/kubernetes/talos-flux/apps/discord/musicbot/app/helm-release.yaml b/kubernetes/talos-flux/apps/discord/musicbot/app/helm-release.yaml
@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: app-template
-      version: 3.1.0
+      version: 3.2.1
       sourceRef:
         kind: HelmRepository
         name: bjw-s-charts

diff --git a/kubernetes/talos-flux/apps/flux-system/capacitor/app/helm-release.yaml b/kubernetes/talos-flux/apps/flux-system/capacitor/app/helm-release.yaml
@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: app-template
-      version: 3.1.0
+      version: 3.2.1
       sourceRef:
         kind: HelmRepository
         name: bjw-s-charts

diff --git a/kubernetes/talos-flux/apps/gaming/minecraft-bedrock/app/helm-release.yaml b/kubernetes/talos-flux/apps/gaming/minecraft-bedrock/app/helm-release.yaml
@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: app-template
-      version: 3.1.0
+      version: 3.2.1
       sourceRef:
         kind: HelmRepository
         name: bjw-s-charts

diff --git a/kubernetes/talos-flux/apps/home-automation/aircon/app/helm-release.yaml b/kubernetes/talos-flux/apps/home-automation/aircon/app/helm-release.yaml
@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: app-template
-      version: 3.1.0
+      version: 3.2.1
       interval: 15m
       sourceRef:
         kind: HelmRepository

diff --git a/kubernetes/talos-flux/apps/home-automation/esphome/app/helm-release.yaml b/kubernetes/talos-flux/apps/home-automation/esphome/app/helm-release.yaml
@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: app-template
-      version: 3.1.0
+      version: 3.2.1
       interval: 15m
       sourceRef:
         kind: HelmRepository

diff --git a/kubernetes/talos-flux/apps/home-automation/home-assistant/app/helm-release.yaml b/kubernetes/talos-flux/apps/home-automation/home-assistant/app/helm-release.yaml
@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: app-template
-      version: 3.1.0
+      version: 3.2.1
       interval: 15m
       sourceRef:
         kind: HelmRepository

diff --git a/kubernetes/talos-flux/apps/home-automation/locking-service/app/helm-release.yaml b/kubernetes/talos-flux/apps/home-automation/locking-service/app/helm-release.yaml
@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: app-template
-      version: 3.1.0
+      version: 3.2.1
       interval: 15m
       sourceRef:
         kind: HelmRepository

diff --git a/kubernetes/talos-flux/apps/home-automation/node-red/app/helm-release.yaml b/kubernetes/talos-flux/apps/home-automation/node-red/app/helm-release.yaml
@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: app-template
-      version: 3.1.0
+      version: 3.2.1
       interval: 30m
       sourceRef:
         kind: HelmRepository

diff --git a/kubernetes/talos-flux/apps/home-automation/zigbee2mqtt/basement/helm-release.yaml b/kubernetes/talos-flux/apps/home-automation/zigbee2mqtt/basement/helm-release.yaml
@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: app-template
-      version: 3.1.0
+      version: 3.2.1
       sourceRef:
         kind: HelmRepository
         name: bjw-s-charts

diff --git a/kubernetes/talos-flux/apps/home-automation/zigbee2mqtt/downstairs/helm-release.yaml b/kubernetes/talos-flux/apps/home-automation/zigbee2mqtt/downstairs/helm-release.yaml
@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: app-template
-      version: 3.1.0
+      version: 3.2.1
       sourceRef:
         kind: HelmRepository
         name: bjw-s-charts

diff --git a/kubernetes/talos-flux/apps/home-automation/zigbee2mqtt/upstairs/helm-release.yaml b/kubernetes/talos-flux/apps/home-automation/zigbee2mqtt/upstairs/helm-release.yaml
@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: app-template
-      version: 3.1.0
+      version: 3.2.1
       sourceRef:
         kind: HelmRepository
         name: bjw-s-charts

diff --git a/kubernetes/talos-flux/apps/kyverno/kyverno/app/helm-release.yaml b/kubernetes/talos-flux/apps/kyverno/kyverno/app/helm-release.yaml
@@ -10,7 +10,7 @@ spec:
   chart:
     spec:
       chart: kyverno
-      version: 3.2.2
+      version: 3.2.3
       sourceRef:
         kind: HelmRepository
         name: kyverno-charts

diff --git a/kubernetes/talos-flux/apps/networking/cloudflared/app/helm-release.yaml b/kubernetes/talos-flux/apps/networking/cloudflared/app/helm-release.yaml
@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: app-template
-      version: 3.1.0
+      version: 3.2.1
       sourceRef:
         kind: HelmRepository
         name: bjw-s-charts

diff --git a/kubernetes/talos-flux/apps/networking/unifi/app/helm-release.yaml b/kubernetes/talos-flux/apps/networking/unifi/app/helm-release.yaml
@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: app-template
-      version: 3.1.0
+      version: 3.2.1
       interval: 30m
       sourceRef:
         kind: HelmRepository

diff --git a/kubernetes/talos-flux/apps/observability/alertmanager-discord/app/helm-release.yaml b/kubernetes/talos-flux/apps/observability/alertmanager-discord/app/helm-release.yaml
@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: app-template
-      version: 3.1.0
+      version: 3.2.1
       sourceRef:
         kind: HelmRepository
         name: bjw-s-charts