feat(apps): 应用版本升级

apps/infra/devops/cert-manager/helmchart.yaml

@@ -9,7 +9,7 @@ spec:
   repo: https://charts.jetstack.io
   chart: cert-manager
   targetNamespace: infra-devops
-  version: v1.18.2
+  version: v1.19.1
   valuesContent: |-
     affinity:
       nodeAffinity:

apps/infra/devops/gitea/helmchart.yaml

@@ -7,7 +7,7 @@ spec:
   repo: https://dl.gitea.com/charts
   chart: gitea
   targetNamespace: infra-devops
-  version: 12.1.3
+  version: 12.3.0
   valuesContent: |-
     affinity:
       podAffinity:
@@ -36,7 +36,7 @@ spec:
     postgresql-ha:
       enabled: false
     image:
-      tag: 1.24.5
+      tag: 1.25.1
     ingress:
       enabled: true
       className: nginx

apps/infra/devops/reflector/helmchart.yaml

@@ -7,7 +7,7 @@ spec:
   repo: https://emberstack.github.io/helm-charts
   chart: reflector
   targetNamespace: infra-devops
-  version: 9.1.25
+  version: 9.1.38
   valuesContent: |-
     affinity:
       nodeAffinity:

apps/infra/devops/velero/helmchart.yaml

@@ -7,7 +7,7 @@ spec:
   repo: https://vmware-tanzu.github.io/helm-charts
   chart: velero
   targetNamespace: infra-devops
-  version: 10.1.0
+  version: 11.1.1
   valuesContent: |-
     affinity:
       nodeAffinity:
@@ -32,7 +32,9 @@ spec:
       backupSyncPeriod: 1h0m0s
       defaultRepoMaintainFrequency: 3h0m0s
       repositoryMaintenanceJob:
-        latestJobsCount: 1
+        repositoryConfigData: 
+          global:
+            keepLatestMaintenanceJobs: 1
       backupStorageLocation:
         - name: devcm-hw
           default: true
@@ -53,7 +55,7 @@ spec:
           aws_secret_access_key = ky1n3OlNNu7wjgctVjCqb03HWxjZucRGhvcEBp51
     initContainers:
       - name: velero-plugin-for-aws
-        image: velero/velero-plugin-for-aws:v1.11.0
+        image: velero/velero-plugin-for-aws:v1.13.0
         volumeMounts:
           - mountPath: /target
             name: plugins

apps/infra/monitor/loki/helmchart-loki.yaml

@@ -7,7 +7,7 @@ spec:
   repo: https://grafana.github.io/helm-charts
   chart: loki
   targetNamespace: infra-monitor
-  version: 6.36.1
+  version: 6.46.0
   valuesContent: |-
     deploymentMode: SingleBinary
     gateway:

apps/infra/monitor/prometheus/helmchart.yaml

@@ -7,7 +7,7 @@ spec:
   repo: https://prometheus-community.github.io/helm-charts
   chart: kube-prometheus-stack
   targetNamespace: infra-monitor
-  version: 75.13.0
+  version: 79.2.1
   valuesContent: |-
     kubeControllerManager:
       enabled: false
@@ -55,6 +55,8 @@ spec:
           - /
       assertNoLeakedSecrets: false
       grafana.ini:
+        public_dashboards:
+          enabled: false
         help:
           enabled: false
         news:

apps/infra/net/crowdsec/helmchart.yaml

@@ -7,11 +7,11 @@ spec:
   repo: https://crowdsecurity.github.io/helm-charts
   chart: crowdsec
   targetNamespace: infra-net
-  version: 0.19.5
+  version: 0.20.1
   valuesContent: |-
     container_runtime: containerd
     image:
-      tag: v1.6.11
+      tag: v1.7.3
     agent:
       affinity:
         podAffinity:

apps/infra/net/tailscale/helmchart-sh.yaml

@@ -1,35 +0,0 @@
-apiVersion: helm.cattle.io/v1
-kind: HelmChart
-metadata:
-  name: tailscale-derp-sh
-  namespace: infra-net
-spec:
-  repo: https://devcm-repo.github.io/helm-charts
-  chart: tailscale-derp
-  version: 0.0.9
-  targetNamespace: infra-net
-  valuesContent: |-
-    nodeSelector:
-      kubernetes.io/hostname: tcd
-    image:
-      tag: v1.90.6
-    hostNetwork: true
-    extraVolumes:
-      - name: cert-volume
-        secret:
-          secretName: dev-cm-crt
-          items:
-            - key: tls.key
-              path: tcd.node.dev.cm.key
-            - key: tls.crt
-              path: tcd.node.dev.cm.crt
-    extraVolumeMounts:
-      - name: cert-volume
-        mountPath: /certs
-    derp:
-      hostname: 'tcd.node.dev.cm'
-      verify_clients: true
-      http_port: -1
-      https_port: 30443
-      stun_port: 33478
-      certdir: /certs