ci(deps): update renovatebot/github-action action to v32.4.1

cluster/apps/development/drone-runner-kube/drone-runner-kube-secrets-helm-release.yaml

@@ -17,6 +17,8 @@ spec:
         namespace: flux-system
       interval: 5m
   values:
+    image:
+      pullPolicy: Always
     rbac:
       enabled: false
     env:

cluster/apps/development/drone-runner-kube/helm-release.yaml

@@ -8,25 +8,23 @@ spec:
   interval: 5m
   chart:
     spec:
-      # renovate: registryUrl=https://charts.drone.io
-      chart: drone-runner-kube
-      version: 0.1.5
+      chart: drone-runner
+      version: 0.3.2
       sourceRef:
         kind: HelmRepository
-        name: drone-charts
+        name: drone-volker-charts
         namespace: flux-system
       interval: 5m
   values:
     image:
       repository: drone/drone-runner-kube
-      tag: 1.0.0-beta.6
-    env:
+      tag: 1.0.0-rc.2
+    config:
       DRONE_RPC_SECRET: ${SECRET_DRONE_RPC_SECRET}
       DRONE_RPC_PROTO: http
       DRONE_SECRET_PLUGIN_TOKEN: ${SECRET_DRONE_PLUGIN_TOKEN}
       DRONE_NAMESPACE_DEFAULT: development
       DRONE_RPC_HOST: drone
       DRONE_SECRET_PLUGIN_ENDPOINT: http://drone-kubernetes-secrets:3000
-    rbac:
-      buildNamespaces:
-        - development
+      # DRONE_RPC_DUMP_HTTP: "true"
+      # DRONE_DEBUG: "true"

cluster/apps/development/drone/helm-release.yaml

@@ -8,12 +8,11 @@ spec:
   interval: 5m
   chart:
     spec:
-      # renovate: registryUrl=https://charts.drone.io
       chart: drone
-      version: 0.1.7
+      version: 0.4.2
       sourceRef:
         kind: HelmRepository
-        name: drone-charts
+        name: drone-volker-charts
         namespace: flux-system
       interval: 5m
   values:
@@ -21,7 +20,7 @@ spec:
       repository: drone/drone
       tag: 2.11.0
 
-    env:
+    config:
       DRONE_DATABASE_DRIVER: postgres
       DRONE_DATABASE_DATASOURCE: ${SECRET_DRONE_DATABASE_DATASOURCE}
       DRONE_DATABASE_SECRET: ${SECRET_DRONE_DATABASE_SECRET}
@@ -30,34 +29,22 @@ spec:
       DRONE_GITEA_CLIENT_SECRET: ${SECRET_DRONE_GITEA_CLIENT_SECRET}
       DRONE_GITEA_SERVER: https://gitea.${SECRET_CLUSTER_DOMAIN}
       DRONE_GIT_ALWAYS_AUTH: true
-      DRONE_LOGS_TEXT: true
+      DRONE_LOGS_DEBUG: false
       DRONE_LOGS_PRETTY: true
       DRONE_LOGS_COLOR: true
+      DRONE_REGISTRATION_CLOSED: true
       DRONE_SERVER_PROTO: https
       DRONE_SERVER_HOST: drone.${SECRET_CLUSTER_DOMAIN}
 
-    updateStrategy:
-      type: Recreate
-
-    persistentVolume:
-      enabled: false
-
     ingress:
       enabled: true
+      className: "nginx"
       hosts:
         - host: "drone.${SECRET_CLUSTER_DOMAIN}"
-          paths: ["/"]
+          paths:
+            - path: /
+              pathType: ImplementationSpecific
       tls:
         - hosts:
             - "drone.${SECRET_CLUSTER_DOMAIN}"
           secretName: "${SECRET_CLUSTER_CERTIFICATE_DEFAULT}"
-  postRenderers:
-    - kustomize:
-        patchesJson6902:
-          - target:
-              kind: Ingress
-              name: drone
-            patch:
-              - op: add
-                path: /spec/ingressClassName
-                value: traefik

cluster/apps/development/gitea/helm-release.yaml

@@ -58,6 +58,8 @@ spec:
         service:
           DISABLE_REGISTRATION: true
           REQUIRE_SIGNIN_VIEW: true
+        webhook:
+          ALLOWED_HOST_LIST: "drone.k3s.xpander.ovh"
 
     postgresql:
       enabled: false

cluster/base-custom/charts/drone-volker-charts.yaml

@@ -0,0 +1,10 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1beta1
+kind: HelmRepository
+metadata:
+  name: drone-volker-charts
+  namespace: flux-system
+spec:
+  interval: 1h
+  url: https://charts.cryptic.systems/volker.raschek
+  timeout: 3m

cluster/base-custom/charts/kustomization.yaml

@@ -8,6 +8,7 @@ resources:
   - bitnami-charts.yaml
   - cert-manager-webhook-ovh.yaml
   - drone-charts.yaml
+  - drone-volker-charts.yaml
   - emxq-charts.yaml
   - gitea-charts.yaml
   - grafana-loki-charts.yaml

cluster/base-custom/secrets/cluster-secrets.yaml

@@ -1,9 +1,6 @@
 apiVersion: v1
 kind: Secret
 metadata:
-    annotations:
-        replicator.v1.mittwald.de/replication-allowed: "true"
-        replicator.v1.mittwald.de/replication-allowed-namespaces: development
     name: cluster-secrets
     namespace: flux-system
 stringData:
@@ -39,8 +36,8 @@ stringData:
     SECRET_DRONE_DATABASE_DATASOURCE: ENC[AES256_GCM,data:rMwhON/Pn9KKB7Zm3lLY+fgKyWlkMhq+MfTY1t0HGYuH5KjuXOB9nNRSrloZwELzbhRd/LNrWs8HSessI1aqnmSVuiMLh5lX/SW+YnHJuyuTgVKMCDHpvOZZmAkLo23TtCYcoQ==,iv:/xtHI89xoX3eSf2djUfwOTAxeh7ZhZ3vBRxB8BdJFtY=,tag:NvkUpzYKAk83iEzC8Yh/Cg==,type:str]
     SECRET_DRONE_DATABASE_SECRET: ENC[AES256_GCM,data:qp8YlciBmug9oyWsANKLc0A4UAUrCV04afoCCM4XHR4=,iv:p9FONbA3uPPm0dbusB0dS6Z6xtsSl0EjXyadCOxUyxg=,tag:LTu7L/f2DOYPmoiZlgLj6w==,type:str]
     SECRET_DRONE_GITEA_API_KEY: ENC[AES256_GCM,data:iFbxW4tii8Z9xnKp5lx9xqXY3aa3ES8kbwbeubZ5I+M23r5FJCrcHw==,iv:KzUKVQuRrPvVAD2GLsx+FDzTRe98STwuD8z6LUaruxo=,tag:Bl+5KfVsgSE0zkvWUYYJhQ==,type:str]
-    SECRET_DRONE_GITEA_CLIENT_ID: ENC[AES256_GCM,data:dYMCHvcgcrWq944i3qkKfyjY0NOqx3kwsmQJKmLURNGYI05N,iv:6fbE6Gdi9FetVY2TtzVIlDtGbxzOMdpiWFeMoB5w/u4=,tag:krpOI1CHpVXIdntOEhi6ww==,type:str]
-    SECRET_DRONE_GITEA_CLIENT_SECRET: ENC[AES256_GCM,data:3tBRysjBSTUHZLMTLR8UcRxCx1jIa3yd4H7snkvzMe1aj8kEbppLBTQ/XlY=,iv:TLFG7HhmVnosF/7M2CtS4R2R514YuxC0rPnL0cAHuA4=,tag:ZQMMPiL/C2Jul3lOvOWY7A==,type:str]
+    SECRET_DRONE_GITEA_CLIENT_ID: ENC[AES256_GCM,data:kBFH0XuS3F2iyz6ZyMxFC47iosSk8FV+91U+O83WDUHYo28Z,iv:wM7Rr8+GMcO+FLkkchWts72kYQ2ky2TReyzQhCQianE=,tag:+eNZCnqf5w9d0y9SBoOsdQ==,type:str]
+    SECRET_DRONE_GITEA_CLIENT_SECRET: ENC[AES256_GCM,data:pauYuTRK0o0tdsYZHtLL7cMiQ1UIg3Kn94IJgbrPG9yoWhUp5+u95Zflfr0=,iv:YI+eTpo7KUwTiwgUGa2wfRo3TZAR5TuYaoBGbkqvyJ8=,tag:t1iDyQTyb3k+2S/AvfcO3Q==,type:str]
     SECRET_DRONE_PLUGIN_TOKEN: ENC[AES256_GCM,data:+WB1bbswUk7bUvcTFBIB939fT7mk+dGUEctN7g==,iv:W16Q6FC3xPnAKkQnuvwt1shpdclhcseGWzuutMKI1OE=,tag:iGcf+PVKGXETZF8NRNQ6kg==,type:str]
     SECRET_DRONE_RPC_SECRET: ENC[AES256_GCM,data:o09RbdgITpO1wrE1gaxII2EDsf9MJraIDlm/vFoGCYQ=,iv:2a4GcQud79KlmZjkBBmatzZY2/Dd/81hkcs3trglR88=,tag:zcZQfEpIvdMFc4y/oIjz1A==,type:str]
     SECRET_DOCKER_REGISTRY_HTPASSWD: ENC[AES256_GCM,data:c/JYGx8RZA58vzgi9txcljaojcP+KhIjuuktohbynYk6da4ykd/4t0QD69PcozxKEKbKDV51v8STtOsDZZka7edtz48=,iv:f2hX6F412cjwT8sEhWBKbowO7sj5w5mL8k62yPXSfXU=,tag:KGv/8cuKTxIdvo/sB/bqcw==,type:str]
@@ -96,8 +93,8 @@ sops:
     azure_kv: []
     hc_vault: []
     age: []
-    lastmodified: "2022-02-13T22:40:38Z"
-    mac: ENC[AES256_GCM,data:avN2l5NvjeXrBrjPeatEtFyLAHscBANuX3c3MzH+otmlDQT39sTCfAigENCxEwXuX5L4Qk7SYHVCRVAPmmDrP8dgd5wv6j9Q4wnD+umRXa375Hfg2QYgU74GABa325l6hczDadH9Q49am3iJtUH1S72hTjG9qeGHz9AvmSwlRzc=,iv:Rp8Y6qNrWpGrnD8GqO1gPnSx7ifywLIsSoTLoOAxnmA=,tag:m4pjPDSA7yTNZvVCHodfTQ==,type:str]
+    lastmodified: "2022-03-14T20:58:52Z"
+    mac: ENC[AES256_GCM,data:DMVglQrFCyoZzmGFnk2Mw3z1+hBZyH3DWvzYp35SlsbZwjP1/mX1F5BRKtoLeL/qE+tpc5vj/5JC38yJvLVAfupCZ9Odb7+NAki/wFhILm9l67DsANxZtke4yiKAZKj+HxE72ZnRnsH2CRZYmqDDQiz69dV8AgiZOR09DPLkHic=,iv:6RgH0p3yzh3CHFE+nM2zS4h+0yUjN9Jwo/G7n3rhkcs=,tag:2v02L6f506jChbtUbzto9Q==,type:str]
     pgp:
         - created_at: "2021-07-17T21:14:34Z"
           enc: |
@@ -140,4 +137,4 @@ sops:
             -----END PGP MESSAGE-----
           fp: 5749D0AE39445C1CCA6006DF8913091C690BDD69
     encrypted_regex: ^(data|stringData)$
-    version: 3.7.1
+    version: 3.7.2

cluster/base-custom/secrets/drone-pipelines.yaml

@@ -7,6 +7,7 @@ stringData:
     registry-username: ENC[AES256_GCM,data:0feiw+FkNQ==,iv:qlqyZnDaxDWSotJudzuVBnGRv4Nm5BkzcYvtzdXGG/c=,tag:6LpLEQWy9Bl6NrpgqslXVQ==,type:str]
     registry-password: ENC[AES256_GCM,data:bXkbSETYKwDpoulIcEE=,iv:kbDngo9bEnY2wuyy42rXb+zUvgFLY3LEpHTmk2sXDog=,tag:Q2rIX1k5tNLLx7sTEOMPXQ==,type:str]
     registry-repo-terraexporter: ENC[AES256_GCM,data:NOZomVH6cbNULBSqHaRbcEn1EGMM/IgSCOZGaRtm0qFRDQH/AdQeGfO9O1ea3DY=,iv:V/kcOuVrQdbMLUD4euZuu9ODAyP6lbLowgWE5ifH1jQ=,tag:aBU888W8rb62b0IITNcuRA==,type:str]
+    registry-repo-custom-error-pages: ENC[AES256_GCM,data:NEXyDQgNDOfi5kKNlHnHN4RRfGJQ8JGMN+cVHafXFjshu9w9qwKUZkCLD0z9iBjIQ6SR,iv:vKVAbx3jtitZaG0xBDxjBaXhdKPdVQ/xzs/w0QSVDcU=,tag:7HfeJL7nPeLzI8ja1WlkVw==,type:str]
     registry-registry: ENC[AES256_GCM,data:vpwfYNgLHHsFWaVtiQZhc4wuG2oEOPR0,iv:lxHQDvx25zRrxe/vj+DYRQ4aowgi01nBYy6qTjthztk=,tag:zSIdHh36riRsqGzCTUZIPQ==,type:str]
     deployment-rsa-priv-key: ENC[AES256_GCM,data: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,iv:qO5xapgBk35sH0LUG1ZYacnzCaBTA+5WqkspCF/RIR0=,tag:3YbgE7o58r7tKVAIZAH1IQ==,type:str]
     minio-url: ENC[AES256_GCM,data:b0o1qKmEhN58Sh92Lu7m/5F7QZ6gs+bsIn4atTCl5v0=,iv:kA7tktyoDyRQX53+vugAzUrEbvXj13H7wtzMz3FVE94=,tag:LguimnEpBqk4IivECN3xzw==,type:str]
@@ -18,8 +19,8 @@ sops:
     azure_kv: []
     hc_vault: []
     age: []
-    lastmodified: "2021-08-23T15:15:45Z"
-    mac: ENC[AES256_GCM,data:/A8wT3zkhYHD6Lb/P2KW0IFgjKDcBj1y2EZ3PpOsM28pva8aeYiqyMWyFtQoXqZMY/P1dYcu0oZ1OIKromMWjj2DkUuGf8S0tET9DmTrvC9MttLflmT8BXtFcPDfWpIiKUkvsOfFxU+yZAlYpnjlJ+MxZwi2NvFChKCogPZiBAM=,iv:UIe0gbiC/cUNoOr1bNhRG1s/JIE8aP7tM946oQxuANI=,tag:NO7FocUAN+4RyyOsSKaucQ==,type:str]
+    lastmodified: "2022-03-14T21:46:41Z"
+    mac: ENC[AES256_GCM,data:JK3+Pl96TBq+k3gEwBz6tTTuDQ3nZ1POR8Bx/PlHGhCbo9gG2YJ/9RkLdFDr6kO0DMMTofzmIUeY7NBqjwP9vBot0fCVdQnX43ByTHFEAN0H+g9Sk5AM5lcjRaoSG8dl+b89vTqUzA+vNbUaCdNKdYqgTdg0vDcdJw44VxGswLg=,iv:yrlSYD1KbPT8ynqBNSQ6rhZnjBTFdLhnaT5KuAR8Dmk=,tag:qg/2bLBS5SrIf2k7AkwVSA==,type:str]
     pgp:
         - created_at: "2021-07-17T21:15:45Z"
           enc: |
@@ -62,4 +63,4 @@ sops:
             -----END PGP MESSAGE-----
           fp: 5749D0AE39445C1CCA6006DF8913091C690BDD69
     encrypted_regex: ^(data|stringData)$
-    version: 3.7.1
+    version: 3.7.2