SYS-654 more image and helm updates

images/dovecot/Dockerfile

@@ -1,4 +1,4 @@
-FROM instantlinux/postfix:3.9.0-r1
+FROM instantlinux/postfix:3.10.2-r0
 
 ARG BUILD_DATE
 ARG VCS_REF
@@ -8,7 +8,7 @@ LABEL org.opencontainers.image.authors="Rich Braun docker@instantlinux.net" \
     org.label-schema.vcs-ref=$VCS_REF \
     org.label-schema.vcs-url=https://github.com/instantlinux/docker-tools
 
-ARG DOVECOT_VERSION=2.3.21.1-r0
+ARG DOVECOT_VERSION=2.4.1-r2
 ARG MKCERT_SHA=24b6988d1709e71c24dcf94ffce5db93bd2e89dc5cbec1ac3c173de5274b68dd
 
 ENV LDAP_SECRETNAME=ldap-ro-password \
@@ -20,7 +20,7 @@ RUN echo '@old http://dl-cdn.alpinelinux.org/alpine/v3.11/main' \
     apk add --no-cache dovecot=$DOVECOT_VERSION dovecot-ldap=$DOVECOT_VERSION \
       procmail@old && \
     rm /etc/ssl/dovecot/server.* && cd /usr/local/bin && \
-    wget -q https://raw.githubusercontent.com/dovecot/core/release-2.3.21/doc/mkcert.sh && \
+    wget -q https://raw.githubusercontent.com/dovecot/core/release-2.4.1/doc/mkcert.sh && \
     echo "$MKCERT_SHA  mkcert.sh" | sha256sum -c && \
     chmod 755 /usr/local/bin/mkcert.sh
 

images/dovecot/helm/Chart.yaml

@@ -6,12 +6,12 @@ sources:
 - https://github.com/instantlinux/docker-tools
 - https://github.com/vdukhovni/dovecot
 type: application
-version: 0.1.10
-appVersion: "2.3.21.1-r0"
+version: 0.1.11
+appVersion: "2.4.1-r2"
 dependencies:
 - name: chartlib
   version: 0.1.8
   repository: https://instantlinux.github.io/docker-tools
 - name: data-sync
-  version: 0.1.3
+  version: 0.1.14
   repository: https://instantlinux.github.io/docker-tools

images/haproxy-keepalived/Dockerfile

@@ -1,4 +1,4 @@
-FROM haproxy:3.1.6-alpine
+FROM haproxy:3.2.1-alpine
 ARG BUILD_DATE
 ARG VCS_REF
 LABEL org.opencontainers.image.authors="Rich Braun docker@instantlinux.net" \

images/haproxy-keepalived/helm/Chart.yaml

@@ -7,8 +7,8 @@ sources:
 - https://github.com/haproxy/haproxy
 - https://github.com/acassen/keepalived
 type: application
-version: 0.1.17
-appVersion: "3.1.6-alpine-2.3.1-r0"
+version: 0.1.18
+appVersion: "3.2.1-alpine-2.3.1-r0"
 dependencies:
 - name: chartlib
   version: 0.1.8

images/mythtv-backend/Dockerfile

@@ -21,8 +21,7 @@ ARG APT_SIG=13551B881504888C
 ARG MYTHTV_GID=100
 ARG MYTHTV_UID=2021
 ARG MYTHTV_PPA=http://ppa.launchpad.net/mythbuntu/35
-ARG MYTHTV_VERSION=2:35.0+fixes.202504212209.eaa307f0b6~ubuntu24.04.1
-ARG PPA_BRANCH=33
+ARG MYTHTV_VERSION=2:35.0+fixes.202506081602.5f093cd977~ubuntu24.04.1
 ARG MYTHLINK_SHA=459cb8b60adae4b631a95a9cfb1b41dcb959cc4a0b9053582a711d58b8d8a0d2
 
 RUN \

images/mythtv-backend/helm/Chart.yaml

@@ -6,8 +6,8 @@ sources:
 - https://github.com/instantlinux/docker-tools
 - https://github.com/mythtv/mythtv
 type: application
-version: 0.1.13
-appVersion: "35.0-fixes.202504212209.eaa307f0b6"
+version: 0.1.14
+appVersion: "35.0-fixes.202506081602.5f093cd977"
 dependencies:
 - name: chartlib
   version: 0.1.8

images/postfix-python/Dockerfile

@@ -19,9 +19,9 @@ ENV BLACKLIST_USER_SECRETNAME=mysql-blacklist-user \
     INBOUND_RELAY="by mail.mydomain.com" \
     SPAMLIMIT=12 \
     SPAMC_HOST=spamassassin
-ARG GETPIP_SHA=5b9e2f9bb476ce76f84942bb7247dec8d6c0bb9dbc8c62ba2543b81fd7a4243c
-ARG GETPIP_URI=https://bootstrap.pypa.io/pip/3.7/get-pip.py
-ARG PYTHON_PIP_VERSION=25.1.1
+ARG GETPIP_SHA=6ed6e98282a504ee0a6632856e16c39f222d313fc38be33de216d4afb6ac12f7
+ARG GETPIP_URI=https://bootstrap.pypa.io/pip/3.8/get-pip.py
+ARG PYTHON_PIP_VERSION=25.0.1
 
 COPY requirements.txt /root/
 COPY src/ /usr/local/bin/
@@ -31,8 +31,8 @@ RUN apk add --no-cache --update \
     mkdir build && cd build && \
     wget -q -O get-pip.py $GETPIP_URI && \
     echo "$GETPIP_SHA  get-pip.py" | sha256sum -c && \
-    python3 get-pip.py --disable-pip-version-check --no-cache-dir \
-      pip==$PYTHON_PIP_VERSION --break-system-packages && \
+    python3 get-pip.py --no-cache-dir pip==$PYTHON_PIP_VERSION \
+      --break-system-packages && \
     apk add --no-cache --virtual .fetch-deps \
       gcc git freetype-dev jpeg-dev musl-dev zlib-dev && \
     pip install -r /root/requirements.txt --break-system-packages && \

images/samba-dc/Dockerfile

@@ -1,4 +1,4 @@
-FROM alpine:3.21
+FROM alpine:3.22
 ARG BUILD_DATE
 ARG VCS_REF
 LABEL org.opencontainers.image.authors="Rich Braun docker@instantlinux.net" \
@@ -24,7 +24,7 @@ ENV ADMIN_PASSWORD_SECRET=samba-admin-password \
     WINBIND_USE_DEFAULT_DOMAIN=yes \
     WORKGROUP=AD
 
-ARG SAMBA_VERSION=4.20.6-r1
+ARG SAMBA_VERSION=4.21.4-r4
 
 COPY *.conf.j2 /root/
 COPY entrypoint.sh /usr/local/bin/

images/samba-dc/helm/Chart.yaml

@@ -6,8 +6,8 @@ sources:
 - https://github.com/instantlinux/docker-tools
 - ttps://gitlab.com/samba-team/samba
 type: application
-version: 0.1.14
-appVersion: "4.20.6-r1"
+version: 0.1.15
+appVersion: "4.21.4-r4"
 dependencies:
 - name: chartlib
   version: 0.1.8

images/samba/Dockerfile

@@ -1,4 +1,4 @@
-FROM alpine:3.21
+FROM alpine:3.22
 ARG BUILD_DATE
 ARG VCS_REF
 LABEL org.opencontainers.image.authors="Rich Braun docker@instantlinux.net" \
@@ -8,7 +8,7 @@ LABEL org.opencontainers.image.authors="Rich Braun docker@instantlinux.net" \
     org.label-schema.vcs-ref=$VCS_REF \
     org.label-schema.vcs-url=https://github.com/instantlinux/docker-tools
 
-ARG SAMBA_VERSION=4.20.6-r1
+ARG SAMBA_VERSION=4.21.4-r4
 ENV LOGON_DRIVE=H \
     NETBIOS_NAME=samba \
     SERVER_STRING="Samba Server" \

images/samba/helm/Chart.yaml

@@ -6,8 +6,8 @@ sources:
 - https://github.com/instantlinux/docker-tools
 - https://gitlab.com/samba-team/samba
 type: application
-version: 0.1.14
-appVersion: "4.20.6-r1"
+version: 0.1.15
+appVersion: "4.21.4-r4"
 dependencies:
 - name: chartlib
   version: 0.1.8

k8s/helm/authelia/Chart.yaml

@@ -6,8 +6,8 @@ sources:
 - https://github.com/instantlinux/docker-tools
 - https://github.com/authelia/authelia
 type: application
-version: 0.1.8
-appVersion: "4.39.1"
+version: 0.1.9
+appVersion: "4.39.4"
 dependencies:
 - name: chartlib
   version: 0.1.8

k8s/helm/gitea/Chart.yaml

@@ -6,8 +6,8 @@ sources:
 - https://github.com/instantlinux/docker-tools
 - https://github.com/go-gitea/gitea
 type: application
-version: 0.1.5
-appVersion: 1.23.7-rootless
+version: 0.1.6
+appVersion: 1.24.2-rootless
 dependencies:
 - name: chartlib
   version: 0.1.8

k8s/helm/grafana/Chart.yaml

@@ -6,8 +6,8 @@ sources:
 - https://github.com/instantlinux/docker-tools
 - https://github.com/grafana/grafana
 type: application
-version: 0.1.0
-appVersion: 12.0.0
+version: 0.1.1
+appVersion: 12.0.2
 dependencies:
 - name: chartlib
   version: 0.1.8

k8s/helm/grafana/subcharts/prometheus/values.yaml

@@ -64,6 +64,20 @@ configmap:
       - job_name: prometheus
         static_configs:
         - targets: [ localhost:9090 ]
+      - job_name: kubernetes-api
+        bearer_token_file: /var/run/secrets/kubernetes.io/serviceaccount/token
+        kubernetes_sd_configs:
+        - role: endpoints
+        relabel_configs:
+        - action: keep
+          regex: default;kubernetes;https
+          source_labels:
+          - __meta_kubernetes_namespace
+          - __meta_kubernetes_service_name
+          - __meta_kubernetes_endpoint_port_name
+        scheme: https
+        tls_config:
+          ca_file: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt
       - job_name: hw-nodes
         file_sd_configs:
         - files: [ targets.json ]

k8s/helm/grafana/values.yaml

@@ -9,10 +9,15 @@ deployment:
     gf_database_name: grafana
     gf_database_password__file: /run/secrets/grafana-db-password
     gf_database_user: grafana
-    gf_remote_cache_type: redis
-    gf_remote_cache_connstr: addr=grafana-redis:6379,pool_size=100,db=0,ssl=false
+
+    # If a redis subchart is added, define remote-cache here; it's overkill
+    #   for most use-cases:
+    # gf_remote_cache_type: redis
+    # gf_remote_cache_connstr: addr=grafana-redis:6379,pool_size=100,db=0,ssl=false
+
     # See note in volumeMounts below
     # gf_security_admin_password__file: /run/secrets/admin_password
+
     gf_security_admin_email: admin@example.com
     gf_server_domain: grafana.example.com
     gf_server_root_url: https://grafana.example.com

k8s/helm/guacamole/Chart.yaml

@@ -7,17 +7,17 @@ sources:
 - https://github.com/apache/guacamole-client
 - https://github.com/apache/guacamole-server
 type: application
-version: 0.1.5
+version: 0.1.6
 # When updating appVersion, also update subcharts, and the dependencies
 #  for guacamole-server and guacd below
-appVersion: "1.5.5"
+appVersion: "1.6.0"
 dependencies:
 - name: chartlib
   version: 0.1.8
   repository: https://instantlinux.github.io/docker-tools
 - name: guacamole-server
-  version: 0.1.4
+  version: 0.1.5
   repository: file://subcharts/guacamole-server
 - name: guacd
-  version: 0.1.4
+  version: 0.1.5
   repository: file://subcharts/guacd

k8s/helm/guacamole/subcharts/guacamole-server/Chart.yaml

@@ -6,8 +6,8 @@ sources:
 - https://github.com/instantlinux/docker-tools
 - https://github.com/apache/guacamole-server
 type: application
-version: 0.1.4
-appVersion: "1.5.5"
+version: 0.1.5
+appVersion: "1.6.0"
 dependencies:
 - name: chartlib
   version: 0.1.8

k8s/helm/guacamole/subcharts/guacd/Chart.yaml

@@ -6,8 +6,8 @@ sources:
 - https://github.com/instantlinux/docker-tools
 - https://github.com/apache/guacamole-client
 type: application
-version: 0.1.4
-appVersion: "1.5.5"
+version: 0.1.5
+appVersion: "1.6.0"
 dependencies:
 - name: chartlib
   version: 0.1.8

k8s/helm/restic/Chart.yaml

@@ -6,10 +6,10 @@ sources:
 - https://github.com/instantlinux/docker-tools
 - https://github.com/restic/restic
 type: application
-version: 0.1.17
+version: 0.1.18
 # Remember to update restic==<ver> in values.yaml as releases are published;
 #  the values.yaml file is not able to reference .Chart.appVersion
-appVersion: "0.17.3-r4"
+appVersion: "0.18.0-r2"
 dependencies:
 - name: chartlib
   version: 0.1.8

k8s/helm/restic/values.yaml

@@ -17,7 +17,7 @@ deployment:
     mkdir -p /var/log/week && tail -f -n 0 /var/log/restic.log
   env:
     # Edit the version in Chart.yaml to keep consistent
-    app_version: 0.17.3-r4
+    app_version: 0.18.0-r2
     env: /etc/profile
     tz: UTC
   nodeSelector:
@@ -98,7 +98,7 @@ volumes:
 image:
   repository: alpine
   pullPolicy: IfNotPresent
-  tag: 3.21
+  tag: 3.22
 
 nameOverride: ""
 fullnameOverride: ""

k8s/helm/splunk/Chart.yaml

@@ -15,8 +15,8 @@ sources:
 - https://github.com/instantlinux/docker-tools
 - https://hub.docker.com/r/splunk/splunk
 type: application
-version: 0.1.13
-appVersion: "9.4.1"
+version: 0.1.14
+appVersion: "9.4.3"
 dependencies:
 - name: chartlib
   version: 0.1.8

k8s/helm/vaultwarden/Chart.yaml

@@ -5,8 +5,8 @@ home: https://github.com/instantlinux/docker-tools
 sources:
 - https://github.com/instantlinux/docker-tools
 type: application
-version: 0.1.7
-appVersion: "1.33.2-alpine"
+version: 0.1.8
+appVersion: "1.34.1-alpine"
 dependencies:
 - name: chartlib
   version: 0.1.8