SYS-677 wip

Author: instantlinux

images/haproxy-keepalived/Dockerfile

@@ -1,4 +1,4 @@
-FROM haproxy:3.3.6-alpine
+FROM haproxy:3.3.10-alpine
 ARG BUILD_DATE
 ARG VCS_REF
 LABEL org.opencontainers.image.authors="Rich Braun docker@instantlinux.net" \

images/haproxy-keepalived/helm/Chart.yaml

@@ -7,8 +7,8 @@ sources:
 - https://github.com/haproxy/haproxy
 - https://github.com/acassen/keepalived
 type: application
-version: 0.1.21
-appVersion: "3.3.6-alpine-2.3.4-r3"
+version: 0.1.22
+appVersion: "3.3.10-alpine-2.3.4-r3"
 dependencies:
 - name: chartlib
   version: 0.1.8

images/mysqldump/Dockerfile

@@ -18,7 +18,7 @@ ENV HOUR=3 MINUTE=30 \
     TZ=UTC
 ARG UID=210
 ARG BACKUP_GID=34
-ARG CLIENT_VERSION=11.4.10-r0
+ARG CLIENT_VERSION=11.4.11-r0
 
 RUN RMGROUP=$(grep :$BACKUP_GID: /etc/group | cut -d: -f 1) && \
     [ -z "$RMGROUP" ] || delgroup $RMGROUP && \

images/mysqldump/helm/Chart.yaml

@@ -6,8 +6,8 @@ sources:
 - https://github.com/instantlinux/docker-tools
 - https://github.com/mariadb/server/tree/10.5/client
 type: application
-version: 0.1.16
-appVersion: "11.4.10-r0"
+version: 0.1.17
+appVersion: "11.4.11-r0"
 dependencies:
 - name: chartlib
   version: 0.1.8

images/samba-dc/Dockerfile

@@ -24,7 +24,7 @@ ENV ADMIN_PASSWORD_SECRET=samba-admin-password \
     WINBIND_USE_DEFAULT_DOMAIN=yes \
     WORKGROUP=AD
 
-ARG SAMBA_VERSION=4.22.8-r0
+ARG SAMBA_VERSION=4.22.10-r0
 
 COPY *.conf.j2 /root/
 COPY entrypoint.sh /usr/local/bin/

images/samba-dc/helm/Chart.yaml

@@ -6,8 +6,8 @@ sources:
 - https://github.com/instantlinux/docker-tools
 - ttps://gitlab.com/samba-team/samba
 type: application
-version: 0.1.17
-appVersion: "4.22.8-r0"
+version: 0.1.18
+appVersion: "4.22.10-r0"
 dependencies:
 - name: chartlib
   version: 0.1.8

images/samba/Dockerfile

@@ -8,7 +8,7 @@ LABEL org.opencontainers.image.authors="Rich Braun docker@instantlinux.net" \
     org.label-schema.vcs-ref=$VCS_REF \
     org.label-schema.vcs-url=https://github.com/instantlinux/docker-tools
 
-ARG SAMBA_VERSION=4.22.8-r0
+ARG SAMBA_VERSION=4.22.10-r0
 ENV LOGON_DRIVE=H \
     NETBIOS_NAME=samba \
     SERVER_STRING="Samba Server" \

images/samba/helm/Chart.yaml

@@ -6,8 +6,8 @@ sources:
 - https://github.com/instantlinux/docker-tools
 - https://gitlab.com/samba-team/samba
 type: application
-version: 0.1.17
-appVersion: "4.22.8-r0"
+version: 0.1.18
+appVersion: "4.22.10-r0"
 dependencies:
 - name: chartlib
   version: 0.1.8

k8s/helm/gitea/Chart.yaml

@@ -6,8 +6,8 @@ sources:
 - https://github.com/instantlinux/docker-tools
 - https://github.com/go-gitea/gitea
 type: application
-version: 0.1.8
-appVersion: 1.25.3-rootless
+version: 0.1.9
+appVersion: 1.26.2-rootless
 dependencies:
 - name: chartlib
   version: 0.1.8

k8s/helm/immich/values.yaml

@@ -5,18 +5,20 @@ tlsHostname: photos.example.com
 deployment:
   env:
     # Note - the documentation of environment variables for immich under docker
-    #  is misleading. Do *not* use those variables under kubernetes, see the
-    #  volume mounts below.
+    #  is misleading. (See https://docs.immich.app/guides/custom-locations/ .)
+    #  Do *not* use those variables under kubernetes, see the volume mounts
+    #  below.
     db_database_name: immich
     db_hostname: immich-postgres
     db_username: immich
-#   immich_config_file: /config/immich-config.yaml
-    immich_machine_learning_url: http://k8s00:3003
+    immich_machine_learning_url: http://immich-ml:3003
     immich_watch_filesystem: "no"
-#   immich_workers_include: api
     redis_hostname: immich-valkey
     redis_port: 6379
     tz: UTC
+
+    # Add this if you want to configure via ConfigMap rather than database:
+    # immich_config_file: /config/immich-config.yaml
   xenv:
   - name: DB_PASSWORD
     valueFrom:
@@ -31,7 +33,8 @@ deployment:
     # gid values for video, render
     supplementalGroups: [ 44, 891 ]
   securityContext:
-    # TODO define GPU access properly instead of granting excess permissions
+    # GPU access requires privileges. The alternative is somewhat complicated,
+    #  see https://github.com/UntouchedWagons/K3S-Intel
     privileged: true
   resources:
     limits:
@@ -49,8 +52,8 @@ livenessProbe:
   httpGet:
     path: /api/server/ping
     port: 2283
-  # Override this with much larger value if "Reindexing clip_index" on startup
-  initialDelaySeconds: 120
+  # Override this with much larger value if "Reindexing XXX_index" on startup
+  initialDelaySeconds: 300
 readinessProbe:
   httpGet:
     path: /api/server/ping
@@ -64,15 +67,17 @@ volumeMounts:
 # Manually create the subdirectories you want on the NAS, and chown them
 #  to the immich user (default above is uid 1000). Here, it's assumed that
 #  four of the above directories will be subdirectories of an immich
-#  subdirectory on your NAS photo storage volume. Override the volumeMounts
-#  if you want a different layout than the one recommended here.
+#  subdirectory of the primary external-library photo storage volume on your
+#  NAS. Define the top-level NAS volume as an nfs-client PVC 'pictures' before
+#  applying this helm chart. Override the volumeMounts if you want a different
+#  layout than the one recommended here.
 - name: ssd
   mountPath: /data
   subPath: html
 - name: config
   mountPath: /config/immich-config.yaml
   subPath: immich-config.yaml
-- name: dri
+- name: gpu
   mountPath: /dev/dri
 - name: nas
   mountPath: /mnt/photos
@@ -107,11 +112,12 @@ volumes:
 - name: config
   configMap:
     name: immich
-- name: ssd
-  hostPath: { path: /var/lib/docker/k8s-volumes/immich }
-- name: dri
+    optional: true
+- name: gpu
   hostPath:
     path: /dev/dri
+- name: ssd
+  hostPath: { path: /var/lib/docker/k8s-volumes/immich }
 - name: nas
   persistentVolumeClaim:
     claimName: pictures
@@ -152,6 +158,7 @@ autoscaling:
 
 configmap:
   name: immich
+  enabled: false
   data:
     immich-config.yaml: |
       # Add custom settings here
@@ -187,7 +194,6 @@ postgres:
   - name: immich-config
     configMap:
       name: immich
-  psqlTag: 17.7
   image:
     repository: ghcr.io/immich-app/postgres
     tag: 17-vectorchord0.5.3-pgvector0.8.1
@@ -197,4 +203,4 @@ ml:
   image:
     tag: v2.7.5
   env:
-    immich_log_level: debug
+    immich_log_level: info