feat(container): update image ghcr.io/k8s-gateway/charts/k8s-gateway ( 3.2.7 → 3.4.0 )

[renovate]

This PR contains the following updates:

Package	Update	Change
ghcr.io/k8s-gateway/charts/k8s-gateway	minor	3.2.7 → 3.4.0

---

Configuration

📅 Schedule: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

--- kubernetes/apps/media/jellyfin/app Kustomization: media/jellyfin HelmRelease: media/jellyfin

+++ kubernetes/apps/media/jellyfin/app Kustomization: media/jellyfin HelmRelease: media/jellyfin

@@ -1,125 +0,0 @@

----
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  labels:
-    app.kubernetes.io/name: jellyfin
-    kustomize.toolkit.fluxcd.io/name: jellyfin
-    kustomize.toolkit.fluxcd.io/namespace: media
-  name: jellyfin
-  namespace: media
-spec:
-  chartRef:
-    kind: OCIRepository
-    name: app-template
-  dependsOn:
-  - name: intel-device-plugin-gpu
-    namespace: kube-system
-  - name: rook-ceph-cluster
-    namespace: rook-ceph
-  - name: volsync
-    namespace: volsync-system
-  install:
-    createNamespace: true
-    remediation:
-      retries: 5
-  interval: 15m
-  upgrade:
-    remediation:
-      retries: 5
-  values:
-    controllers:
-      jellyfin:
-        containers:
-          main:
-            image:
-              repository: ghcr.io/jellyfin/jellyfin
-              tag: 10.11.3
-            probes:
-              liveness:
-                enabled: false
-              readiness:
-                enabled: false
-              startup:
-                enabled: false
-            resources:
-              limits:
-                gpu.intel.com/i915: 1
-                memory: 4Gi
-              requests:
-                cpu: 100m
-                gpu.intel.com/i915: 1
-                memory: 512Mi
-        pod:
-          affinity:
-            nodeAffinity:
-              preferredDuringSchedulingIgnoredDuringExecution:
-              - preference:
-                  matchExpressions:
-                  - key: kubernetes.io/hostname
-                    operator: In
-                    values:
-                    - talos-03
-                weight: 100
-              requiredDuringSchedulingIgnoredDuringExecution:
-                nodeSelectorTerms:
-                - matchExpressions:
-                  - key: intel.feature.node.kubernetes.io/gpu
-                    operator: In
-                    values:
-                    - 'true'
-          nodeSelector:
-            intel.feature.node.kubernetes.io/gpu: 'true'
-          securityContext:
-            supplementalGroups:
-            - 44
-            - 109
-            - 122
-    defaultPodOptions:
-      automountServiceAccountToken: false
-      securityContext:
-        fsGroup: 3001
-        fsGroupChangePolicy: OnRootMismatch
-        runAsGroup: 3001
-        runAsUser: 3001
-    persistence:
-      cache:
-        enabled: true
-        globalMounts:
-        - path: /cache
-        type: emptyDir
-      config:
-        enabled: true
-        existingClaim: jellyfin
-        globalMounts:
-        - path: /config
-      media:
-        enabled: true
-        globalMounts:
-        - path: /media
-        path: /mnt/core/media
-        server: 10.0.2.3
-        type: nfs
-      transcode:
-        enabled: true
-        globalMounts:
-        - path: /transcode
-        type: emptyDir
-    route:
-      app:
-        hostnames:
-        - jf...PLACEHOLDER_SECRET_DOMAIN..
-        parentRefs:
-        - name: envoy-external
-          namespace: network
-          sectionName: https
-        rules:
-        - backendRefs:
-          - identifier: main
-            port: 8096
-    service:
-      main:
-        ports:
-          http:
-            port: 8096
-
--- kubernetes/apps/media/jellyfin/app Kustomization: media/jellyfin PersistentVolumeClaim: media/jellyfin-transcode

+++ kubernetes/apps/media/jellyfin/app Kustomization: media/jellyfin PersistentVolumeClaim: media/jellyfin-transcode

@@ -1,18 +0,0 @@

----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  labels:
-    app.kubernetes.io/name: jellyfin
-    kustomize.toolkit.fluxcd.io/name: jellyfin
-    kustomize.toolkit.fluxcd.io/namespace: media
-  name: jellyfin-transcode
-  namespace: media
-spec:
-  accessModes:
-  - ReadWriteOnce
-  resources:
-    requests:
-      storage: 40Gi
-  storageClassName: ceph-block
-
--- kubernetes/apps/media/jellyfin/app Kustomization: media/jellyfin PersistentVolumeClaim: media/jellyfin

+++ kubernetes/apps/media/jellyfin/app Kustomization: media/jellyfin PersistentVolumeClaim: media/jellyfin

@@ -1,22 +0,0 @@

----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  labels:
-    app.kubernetes.io/name: jellyfin
-    kustomize.toolkit.fluxcd.io/name: jellyfin
-    kustomize.toolkit.fluxcd.io/namespace: media
-  name: jellyfin
-  namespace: media
-spec:
-  accessModes:
-  - ReadWriteOnce
-  dataSourceRef:
-    apiGroup: volsync.backube
-    kind: ReplicationDestination
-    name: jellyfin-dst
-  resources:
-    requests:
-      storage: 20Gi
-  storageClassName: ceph-block
-
--- kubernetes/apps/media/jellyfin/app Kustomization: media/jellyfin ExternalSecret: media/jellyfin-volsync

+++ kubernetes/apps/media/jellyfin/app Kustomization: media/jellyfin ExternalSecret: media/jellyfin-volsync

@@ -1,33 +0,0 @@

----
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  labels:
-    app.kubernetes.io/name: jellyfin
-    kustomize.toolkit.fluxcd.io/name: jellyfin
-    kustomize.toolkit.fluxcd.io/namespace: media
-  name: jellyfin-volsync
-  namespace: media
-spec:
-  dataFrom:
-  - extract:
-      key: Minio
-  - extract:
-      key: Restic
-    rewrite:
-    - regexp:
-        source: (.*)
-        target: RESTIC_$1
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: onepassword-connect
-  target:
-    name: jellyfin-volsync-secret
-    template:
-      data:
-        AWS_ACCESS_KEY_ID: '{{ .accessKey }}'
-        AWS_SECRET_ACCESS_KEY: '{{ .secretKey }}'
-        RESTIC_PASSWORD: '{{ .RESTIC_password }}'
-        RESTIC_REPOSITORY: '{{ .RESTIC_REPOSITORY_TEMPLATE }}/jellyfin'
-      engineVersion: v2
-
--- kubernetes/apps/media/jellyfin/app Kustomization: media/jellyfin ReplicationSource: media/jellyfin

+++ kubernetes/apps/media/jellyfin/app Kustomization: media/jellyfin ReplicationSource: media/jellyfin

@@ -1,32 +0,0 @@

----
-apiVersion: volsync.backube/v1alpha1
-kind: ReplicationSource
-metadata:
-  labels:
-    app.kubernetes.io/name: jellyfin
-    kustomize.toolkit.fluxcd.io/name: jellyfin
-    kustomize.toolkit.fluxcd.io/namespace: media
-  name: jellyfin
-  namespace: media
-spec:
-  restic:
-    accessModes:
-    - ReadWriteOnce
-    cacheCapacity: 20Gi
-    copyMethod: Snapshot
-    moverSecurityContext:
-      fsGroup: 568
-      runAsGroup: 568
-      runAsUser: 568
-    pruneIntervalDays: 7
-    repository: jellyfin-volsync-secret
-    retain:
-      daily: 7
-      hourly: 24
-      weekly: 5
-    storageClassName: ceph-block
-    volumeSnapshotClassName: csi-ceph-blockpool
-  sourcePVC: jellyfin
-  trigger:
-    schedule: 0 0 * * *
-
--- kubernetes/apps/media/jellyfin/app Kustomization: media/jellyfin ReplicationDestination: media/jellyfin-dst

+++ kubernetes/apps/media/jellyfin/app Kustomization: media/jellyfin ReplicationDestination: media/jellyfin-dst

@@ -1,27 +0,0 @@

----
-apiVersion: volsync.backube/v1alpha1
-kind: ReplicationDestination
-metadata:
-  labels:
-    app.kubernetes.io/name: jellyfin
-    kustomize.toolkit.fluxcd.io/name: jellyfin
-    kustomize.toolkit.fluxcd.io/namespace: media
-  name: jellyfin-dst
-  namespace: media
-spec:
-  restic:
-    accessModes:
-    - ReadWriteOnce
-    cacheCapacity: 20Gi
-    capacity: 20Gi
-    copyMethod: Snapshot
-    moverSecurityContext:
-      fsGroup: 568
-      runAsGroup: 568
-      runAsUser: 568
-    repository: jellyfin-volsync-secret
-    storageClassName: ceph-block
-    volumeSnapshotClassName: csi-ceph-blockpool
-  trigger:
-    manual: restore-once
-
--- kubernetes/apps Kustomization: flux-system/cluster-apps Kustomization: media/jellyfin

+++ kubernetes/apps Kustomization: flux-system/cluster-apps Kustomization: media/jellyfin

@@ -1,40 +0,0 @@

----
-apiVersion: kustomize.toolkit.fluxcd.io/v1
-kind: Kustomization
-metadata:
-  labels:
-    kustomize.toolkit.fluxcd.io/name: cluster-apps
-    kustomize.toolkit.fluxcd.io/namespace: flux-system
-  name: jellyfin
-  namespace: media
-spec:
-  commonMetadata:
-    labels:
-      app.kubernetes.io/name: jellyfin
-  decryption:
-    provider: sops
-    secretRef:
-      name: sops-age
-  interval: 1h
-  path: ./kubernetes/apps/media/jellyfin/app
-  postBuild:
-    substitute:
-      APP: jellyfin
-      GATUS_SUBDOMAIN: jf
-      VOLSYNC_CACHE_CAPACITY: 20Gi
-      VOLSYNC_CAPACITY: 20Gi
-    substituteFrom:
-    - kind: Secret
-      name: cluster-secrets
-    - kind: ConfigMap
-      name: cluster-settings
-  prune: true
-  retryInterval: 2m
-  sourceRef:
-    kind: GitRepository
-    name: flux-system
-    namespace: flux-system
-  targetNamespace: media
-  timeout: 5m
-  wait: false
-

[github-actions]

--- HelmRelease: media/jellyfin Service: media/jellyfin

+++ HelmRelease: media/jellyfin Service: media/jellyfin

@@ -1,23 +0,0 @@

----
-apiVersion: v1
-kind: Service
-metadata:
-  name: jellyfin
-  labels:
-    app.kubernetes.io/instance: jellyfin
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: jellyfin
-    app.kubernetes.io/service: jellyfin
-  namespace: media
-spec:
-  type: ClusterIP
-  ports:
-  - port: 8096
-    targetPort: 8096
-    protocol: TCP
-    name: http
-  selector:
-    app.kubernetes.io/controller: jellyfin
-    app.kubernetes.io/instance: jellyfin
-    app.kubernetes.io/name: jellyfin
-
--- HelmRelease: media/jellyfin Deployment: media/jellyfin

+++ HelmRelease: media/jellyfin Deployment: media/jellyfin

@@ -1,92 +0,0 @@

----
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: jellyfin
-  labels:
-    app.kubernetes.io/controller: jellyfin
-    app.kubernetes.io/instance: jellyfin
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: jellyfin
-  namespace: media
-spec:
-  revisionHistoryLimit: 3
-  replicas: 1
-  strategy:
-    type: Recreate
-  selector:
-    matchLabels:
-      app.kubernetes.io/controller: jellyfin
-      app.kubernetes.io/name: jellyfin
-      app.kubernetes.io/instance: jellyfin
-  template:
-    metadata:
-      labels:
-        app.kubernetes.io/controller: jellyfin
-        app.kubernetes.io/instance: jellyfin
-        app.kubernetes.io/name: jellyfin
-    spec:
-      enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: false
-      securityContext:
-        supplementalGroups:
-        - 44
-        - 109
-        - 122
-      hostIPC: false
-      hostNetwork: false
-      hostPID: false
-      dnsPolicy: ClusterFirst
-      nodeSelector:
-        intel.feature.node.kubernetes.io/gpu: 'true'
-      affinity:
-        nodeAffinity:
-          preferredDuringSchedulingIgnoredDuringExecution:
-          - preference:
-              matchExpressions:
-              - key: kubernetes.io/hostname
-                operator: In
-                values:
-                - talos-03
-            weight: 100
-          requiredDuringSchedulingIgnoredDuringExecution:
-            nodeSelectorTerms:
-            - matchExpressions:
-              - key: intel.feature.node.kubernetes.io/gpu
-                operator: In
-                values:
-                - 'true'
-      containers:
-      - image: ghcr.io/jellyfin/jellyfin:10.11.3
-        name: main
-        resources:
-          limits:
-            gpu.intel.com/i915: 1
-            memory: 4Gi
-          requests:
-            cpu: 100m
-            gpu.intel.com/i915: 1
-            memory: 512Mi
-        volumeMounts:
-        - mountPath: /cache
-          name: cache
-        - mountPath: /config
-          name: config
-        - mountPath: /media
-          name: media
-        - mountPath: /transcode
-          name: transcode
-      volumes:
-      - emptyDir: {}
-        name: cache
-      - name: config
-        persistentVolumeClaim:
-          claimName: jellyfin
-      - name: media
-        nfs:
-          path: /mnt/core/media
-          server: 10.0.2.3
-      - emptyDir: {}
-        name: transcode
-
--- HelmRelease: media/jellyfin HTTPRoute: media/jellyfin

+++ HelmRelease: media/jellyfin HTTPRoute: media/jellyfin

@@ -1,28 +0,0 @@

----
-apiVersion: gateway.networking.k8s.io/v1alpha2
-kind: HTTPRoute
-metadata:
-  name: jellyfin
-  labels:
-    app.kubernetes.io/instance: jellyfin
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: jellyfin
-  namespace: media
-spec:
-  parentRefs:
-  - group: gateway.networking.k8s.io
-    kind: Gateway
-    name: envoy-external
-    namespace: network
-    sectionName: https
-  hostnames:
-  - jf...PLACEHOLDER_SECRET_DOMAIN..
-  rules:
-  - backendRefs:
-    - group: ''
-      kind: Service
-      name: jellyfin
-      namespace: media
-      port: 8096
-      weight: 1
-