feat(k3s): app版本升级 & 安装优化

apps/infra/data/cloudnative-pg/cnpg17-cluster-hk.yaml

@@ -21,11 +21,23 @@ spec:
                 operator: In
                 values:
                   - clawhk
-  instances: 1
   imageName: ghcr.io/cloudnative-pg/postgresql:17.4
   enableSuperuserAccess: true
+  enablePDB: false
+  instances: 1
   storage:
     size: 10Gi
   postgresql:
     parameters:
       archive_timeout: 30min
+  env:
+    - name: AWS_REQUEST_CHECKSUM_CALCULATION
+      value: when_required
+    - name: AWS_RESPONSE_CHECKSUM_VALIDATION
+      value: when_required
+  plugins:
+    - name: barman-cloud.cloudnative-pg.io
+      isWALArchiver: true
+      parameters:
+        barmanObjectName: cnpg17-objectstore-hw
+        serverName: cnpg17-cluster-hk

apps/infra/data/cloudnative-pg/cnpg17-cluster-sh.yaml

@@ -21,11 +21,23 @@ spec:
                 operator: In
                 values:
                   - homea
-  instances: 1
   imageName: ghcr.io/cloudnative-pg/postgresql:17.4
   enableSuperuserAccess: true
+  enablePDB: false
+  instances: 1
   storage:
     size: 10Gi
   postgresql:
     parameters:
-      archive_timeout: 30min
+      archive_timeout: 30min
+  env:
+    - name: AWS_REQUEST_CHECKSUM_CALCULATION
+      value: when_required
+    - name: AWS_RESPONSE_CHECKSUM_VALIDATION
+      value: when_required
+  plugins:
+    - name: barman-cloud.cloudnative-pg.io
+      isWALArchiver: true
+      parameters:
+        barmanObjectName: cnpg17-objectstore-hw
+        serverName: cnpg17-cluster-sh

apps/infra/data/cloudnative-pg/cnpg17-objectstore-hw.yaml

@@ -1,7 +1,7 @@
 apiVersion: barmancloud.cnpg.io/v1
 kind: ObjectStore
 metadata:
-  name: devcm-hw
+  name: cnpg17-objectstore-hw
   namespace: infra-data
 spec:
   retentionPolicy: "7d"
@@ -16,4 +16,5 @@ spec:
         name: s3-devcm-hw
         key: ACCESS_SECRET_KEY
     wal:
-      compression: gzip
+      compression: gzip
+      maxParallel: 8

apps/infra/devops/cert-manager/clusterissuer-dnspod.yaml

@@ -1,7 +1,7 @@
 apiVersion: cert-manager.io/v1
 kind: ClusterIssuer
 metadata:
-  name: cert-manager-webhook-dnspod
+  name: dnspod
   labels:
     app: cert-manager-webhook-dnspod
 spec:

apps/infra/devops/cert-manager/helmchart.yaml

@@ -44,7 +44,7 @@ spec:
     # 在删除证书时同时删除secret
     enableCertificateOwnerRef: true
     prometheus:
-      enabled: false
+      enabled: true
       servicemonitor:
         enabled: true
         interval: 300s

apps/infra/gitops/gitea/helmchart.yaml

@@ -7,7 +7,7 @@ spec:
   repo: https://dl.gitea.com/charts
   chart: gitea
   targetNamespace: infra-gitops
-  version: 12.3.0
+  version: 12.5.0
   valuesContent: |-
     affinity:
       podAffinity:
@@ -36,7 +36,7 @@ spec:
     postgresql-ha:
       enabled: false
     image:
-      tag: 1.25.3
+      tag: 1.25.4
     ingress:
       enabled: true
       className: nginx

apps/infra/monitor/loki/helmchart-loki.yaml

@@ -7,7 +7,7 @@ spec:
   repo: https://grafana.github.io/helm-charts
   chart: loki
   targetNamespace: infra-monitor
-  version: 6.49.0
+  version: 6.53.0
   valuesContent: |-
     deploymentMode: SingleBinary
     gateway:

apps/infra/monitor/prometheus/helmchart.yaml

@@ -7,7 +7,7 @@ spec:
   repo: https://prometheus-community.github.io/helm-charts
   chart: kube-prometheus-stack
   targetNamespace: infra-monitor
-  version: 81.5.0
+  version: 81.6.5
   valuesContent: |-
     kubeControllerManager:
       enabled: false

apps/infra/net/crowdsec/helmchart.yaml

@@ -7,11 +7,11 @@ spec:
   repo: https://crowdsecurity.github.io/helm-charts
   chart: crowdsec
   targetNamespace: infra-net
-  version: 0.21.1
+  version: 0.22.0
   valuesContent: |-
     container_runtime: containerd
     image:
-      tag: v1.7.4
+      tag: v1.7.6
     agent:
       affinity:
         podAffinity: