From c2b8a18100335983fff175ac80ebf9a0dfc62131 Mon Sep 17 00:00:00 2001 From: "azykov@mail.ru" Date: Sun, 23 Aug 2026 15:25:16 +0300 Subject: [PATCH] apps pinned to exact version numbers --- clusters/base/apps/authelia/helmrelease.yaml | 2 +- clusters/base/apps/davical/helmrelease-postgres.yaml | 2 +- clusters/base/apps/fava/helmrelease.yaml | 2 +- clusters/base/apps/immich/helmrelease-redis.yaml | 2 +- clusters/base/apps/immich/helmrelease-server.yaml | 2 ++ clusters/base/apps/markdown-vault-mcp/helmrelease.yaml | 2 +- clusters/base/apps/mosquitto/chart/values.yaml | 2 +- clusters/base/apps/mosquitto/helmrelease.yaml | 2 +- clusters/base/apps/nfs-ganesha/helmrelease.yaml | 6 ++++++ clusters/base/apps/webdav/helmrelease.yaml | 2 +- 10 files changed, 16 insertions(+), 8 deletions(-) diff --git a/clusters/base/apps/authelia/helmrelease.yaml b/clusters/base/apps/authelia/helmrelease.yaml index 5b2422e..cf1577b 100644 --- a/clusters/base/apps/authelia/helmrelease.yaml +++ b/clusters/base/apps/authelia/helmrelease.yaml @@ -17,7 +17,7 @@ spec: app: image: repository: authelia/authelia - tag: latest + tag: v4.39.20 probes: liveness: enabled: true diff --git a/clusters/base/apps/davical/helmrelease-postgres.yaml b/clusters/base/apps/davical/helmrelease-postgres.yaml index 630fe2c..3d713fa 100644 --- a/clusters/base/apps/davical/helmrelease-postgres.yaml +++ b/clusters/base/apps/davical/helmrelease-postgres.yaml @@ -17,7 +17,7 @@ spec: app: image: repository: postgres - tag: "16-alpine" + tag: "16.14-alpine" env: TZ: Europe/Moscow POSTGRES_PASSWORD: diff --git a/clusters/base/apps/fava/helmrelease.yaml b/clusters/base/apps/fava/helmrelease.yaml index 296a168..20e3c1d 100644 --- a/clusters/base/apps/fava/helmrelease.yaml +++ b/clusters/base/apps/fava/helmrelease.yaml @@ -29,7 +29,7 @@ spec: app: image: repository: yegle/fava - tag: latest + tag: "1.30.4" env: TZ: Europe/Moscow BEANCOUNT_FILE: /documents/main.beancount diff --git a/clusters/base/apps/immich/helmrelease-redis.yaml b/clusters/base/apps/immich/helmrelease-redis.yaml index 62c18d6..a61a70a 100644 --- a/clusters/base/apps/immich/helmrelease-redis.yaml +++ b/clusters/base/apps/immich/helmrelease-redis.yaml @@ -17,7 +17,7 @@ spec: app: image: repository: docker.io/valkey/valkey - tag: "9" + tag: "9.1.1" resources: requests: cpu: 20m diff --git a/clusters/base/apps/immich/helmrelease-server.yaml b/clusters/base/apps/immich/helmrelease-server.yaml index 94cdd62..6446224 100644 --- a/clusters/base/apps/immich/helmrelease-server.yaml +++ b/clusters/base/apps/immich/helmrelease-server.yaml @@ -21,6 +21,8 @@ spec: image: repository: hectorm/nfs-ganesha tag: v10 + # hectorm does not publish exact versions, v10.0 digest is 93df70b78... + digest: sha256:93df70b78aae56957f4a4f5c606c4250d84b729435f76132dca07b7290f5bfce command: - sh - -c diff --git a/clusters/base/apps/markdown-vault-mcp/helmrelease.yaml b/clusters/base/apps/markdown-vault-mcp/helmrelease.yaml index 5149c2a..19e75cd 100644 --- a/clusters/base/apps/markdown-vault-mcp/helmrelease.yaml +++ b/clusters/base/apps/markdown-vault-mcp/helmrelease.yaml @@ -17,7 +17,7 @@ spec: app: image: repository: ghcr.io/pvliesdonk/markdown-vault-mcp - tag: latest + tag: "3.1.0" env: MARKDOWN_VAULT_MCP_SOURCE_DIR: /vault MARKDOWN_VAULT_MCP_INDEX_PATH: /data/state/index.db diff --git a/clusters/base/apps/mosquitto/chart/values.yaml b/clusters/base/apps/mosquitto/chart/values.yaml index 507742a..e985cac 100644 --- a/clusters/base/apps/mosquitto/chart/values.yaml +++ b/clusters/base/apps/mosquitto/chart/values.yaml @@ -1,6 +1,6 @@ image: repository: eclipse-mosquitto - tag: "2" + tag: "2.1.2" pullPolicy: IfNotPresent # not really needed, as StatefulSet has hardcoded "replicas: 1" diff --git a/clusters/base/apps/mosquitto/helmrelease.yaml b/clusters/base/apps/mosquitto/helmrelease.yaml index 8b81f35..2c55a89 100644 --- a/clusters/base/apps/mosquitto/helmrelease.yaml +++ b/clusters/base/apps/mosquitto/helmrelease.yaml @@ -18,7 +18,7 @@ spec: values: image: repository: eclipse-mosquitto - tag: "2" + tag: "2.1.2" pullPolicy: IfNotPresent replicaCount: 1 diff --git a/clusters/base/apps/nfs-ganesha/helmrelease.yaml b/clusters/base/apps/nfs-ganesha/helmrelease.yaml index 99ac5c2..6fb4933 100644 --- a/clusters/base/apps/nfs-ganesha/helmrelease.yaml +++ b/clusters/base/apps/nfs-ganesha/helmrelease.yaml @@ -21,6 +21,8 @@ spec: image: repository: hectorm/nfs-ganesha tag: v10 + # hectorm does not publish exact versions, v10.0 digest is 93df70b78... + digest: sha256:93df70b78aae56957f4a4f5c606c4250d84b729435f76132dca07b7290f5bfce command: - sh - -c @@ -29,6 +31,8 @@ spec: image: repository: hectorm/nfs-ganesha tag: v10 + # hectorm does not publish exact versions, v10.0 digest is 93df70b78... + digest: sha256:93df70b78aae56957f4a4f5c606c4250d84b729435f76132dca07b7290f5bfce command: - sh - -c @@ -38,6 +42,8 @@ spec: image: repository: hectorm/nfs-ganesha tag: v10 + # hectorm does not publish exact versions, v10.0 digest is 93df70b78... + digest: sha256:93df70b78aae56957f4a4f5c606c4250d84b729435f76132dca07b7290f5bfce securityContext: readOnlyRootFilesystem: true capabilities: diff --git a/clusters/base/apps/webdav/helmrelease.yaml b/clusters/base/apps/webdav/helmrelease.yaml index de1a244..8a275b7 100644 --- a/clusters/base/apps/webdav/helmrelease.yaml +++ b/clusters/base/apps/webdav/helmrelease.yaml @@ -24,7 +24,7 @@ spec: app: image: repository: ghcr.io/hacdias/webdav - tag: latest + tag: v5.14.2 args: - "-c" - "/config.yml"