Update a bunch of images

namespaces/ai/openwebui/extra/gatus-endpoints.yaml

@@ -8,7 +8,7 @@ data:
   owui-internal-gatus-endpoints.yaml: |
     endpoints:
       - name: Open WebUI
-        url: http://open-webui.ai.svc.cluster.local/
+        url: http://open-webui-chart.ai.svc.cluster.local/
         group: Internal/AI
         interval: 5m 
         alerts:

namespaces/ai/openwebui/kustomization.yaml

@@ -91,7 +91,7 @@ replacements:
 labels:
   - includeSelectors: true
     pairs:
-      app.kubernetes.io/appName: open-webui
+      app.kubernetes.io/appName: open-webui-chart
   - pairs:
       app.kubernetes.io/appNamespace: ai
   - pairs:

namespaces/apps/linkwarden/kustomization.yaml

@@ -1,6 +1,11 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 
+images:
+  - name: image
+    newName: ghcr.io/linkwarden/linkwarden
+    newTag: v2.14.0
+
 transformers:
   - |-
     apiVersion: builtin

namespaces/apps/linkwarden/patches/deployment.yaml

@@ -7,7 +7,8 @@ spec:
     spec:
       containers:
         - name: linkwarden
-          image: ghcr.io/linkwarden/linkwarden:v2.9.1
+          image: image
+          imagePullPolicy: IfNotPresent
           envFrom:
             - configMapRef:
                 name: linkwarden-config

namespaces/apps/paperless/kustomization.yaml

@@ -1,6 +1,11 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 
+images:
+  - name: image
+    newName: ghcr.io/paperless-ngx/paperless-ngx
+    newTag: 2.20.14
+
 transformers:
   - |-
     apiVersion: builtin
@@ -106,7 +111,7 @@ configMapGenerator:
       - PAPERLESS_FILENAME_DATE_ORDER=MDY
       - PAPERLESS_FILENAME_FORMAT="{{created_year}}/{{created_month}}/{{created_day}}/{{title}}"
       - PAPERLESS_PORT="8000"
-      - PAPERLESS_BIND_ADDR="[::]"
+      - PAPERLESS_BIND_ADDR="::"
       - PAPERLESS_CONSUMER_POLLING="30"
       # Setup SMTP
       - PAPERLESS_EMAIL_HOST=blizzard.mxrouting.net

namespaces/apps/paperless/patches/deployment.yaml

@@ -14,10 +14,10 @@ spec:
                   - key: kubernetes.io/hostname
                     operator: In
                     values:
-                      - arthur
+                      - blackstaff
       containers:
         - name: paperless
-          image: ghcr.io/paperless-ngx/paperless-ngx:2.14.7
+          image: image
           imagePullPolicy: IfNotPresent
           volumeMounts:
             - name: consume-volume

namespaces/apps/syncthing/patches/statefulset.yaml

@@ -8,7 +8,7 @@ spec:
       restartPolicy: Always
       containers:
         - name: syncthing
-          image: syncthing/syncthing:1.29
+          image: syncthing/syncthing:2.0.10
           ports:
             - name: syncthing
               containerPort: 8384

namespaces/auth/authentik/patches/chart.yaml

@@ -5,7 +5,7 @@ metadata:
 spec:
   chart: authentik
   repo: https://charts.goauthentik.io
-  version: 2025.6.4
+  version: 2025.12.3
   targetNamespace: auth
   createNamespace: true
   valuesContent: |-

namespaces/kube-system/kustomization.yaml

@@ -0,0 +1,14 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+configMapGenerator:
+  - name: coredns-custom
+    namespace: kube-system
+    options:
+      disableNameSuffixHash: true
+    literals:
+      - |
+        tailnet.server=leechpepin.tailnet:53 {
+            forward . 100.100.100.100
+            cache 30
+        }

namespaces/kustomization.yaml

@@ -2,6 +2,7 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 
 resources:
+  - kube-system
   - cert-manager/post-crd
   - ai/
   - apps/

namespaces/longhorn/longhorn/patches/chart.yaml

@@ -8,7 +8,7 @@ metadata:
   generation: 1
   name: longhorn-install
 spec:
-  version: v1.7.2
+  version: v1.10.2
   chart: longhorn
   repo: https://charts.longhorn.io
   failurePolicy: abort

namespaces/monitoring/gatus/kustomization.yaml

@@ -1,6 +1,10 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 
+images:
+  - name: image
+    newName: twinproduction/gatus
+    newTag: v5.35.0
 transformers:
   - |-
     apiVersion: builtin

namespaces/monitoring/gatus/patches/deployment.yaml

@@ -23,8 +23,12 @@ spec:
                       - "true"
       containers:
         - name: gatus
-          image: twinproduction/gatus:v5.17.0
+          image: image
           imagePullPolicy: IfNotPresent
+          securityContext:
+            capabilities:
+              add:
+                - NET_RAW
           ports:
             - containerPort: 8080
               name: gatus

restore/pgdump.yaml

@@ -0,0 +1,17 @@
+apiVersion: v1
+kind: Pod
+metadata:
+  name: pvc-inspector
+  namespace: core
+spec:
+  containers:
+    - name: inspector
+      image: busybox
+      command: ["sleep", "3600"]
+      volumeMounts:
+        - name: my-volume
+          mountPath: /data
+  volumes:
+    - name: my-volume
+      persistentVolumeClaim:
+        claimName: backup-pvc