feat(oci/helm/app-template)!: Update 4.6.2 ➼ 5.0.1

[tinfoild]

This PR contains the following updates:

Package	Update	Change	OpenSSF
ghcr.io/bjw-s-labs/helm/app-template	major	4.6.2 → 5.0.1

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Configuration

📅 Schedule: (in timezone Asia/Singapore)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[cloudflare-workers-and-pages]

Deploying jjgadgets-biohazard with    Cloudflare Pages

Latest commit:	d405fcb
Status:	🚫  Build failed.

View logs

[tinfoild]

kube/helmrelease/out00

--- HelmRelease: cinny/cinny Deployment: cinny/cinny

+++ HelmRelease: cinny/cinny Deployment: cinny/cinny

@@ -25,13 +25,13 @@

         app.kubernetes.io/controller: app
         app.kubernetes.io/instance: cinny
         app.kubernetes.io/name: cinny
         ingress.home.arpa/envoy-internal: allow
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
+      serviceAccountName: cinny
       automountServiceAccountToken: false
       runtimeClassName: kata
       securityContext:
         fsGroup: 65534
         fsGroupChangePolicy: Always
         runAsGroup: 65534
--- HelmRelease: cinny/cinny ServiceAccount: cinny/cinny

+++ HelmRelease: cinny/cinny ServiceAccount: cinny/cinny

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: cinny
+  labels:
+    app.kubernetes.io/instance: cinny
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: cinny
+  namespace: cinny
+
--- HelmRelease: atuin/atuin Deployment: atuin/atuin

+++ HelmRelease: atuin/atuin Deployment: atuin/atuin

@@ -25,13 +25,13 @@

         app.kubernetes.io/controller: app
         app.kubernetes.io/instance: atuin
         app.kubernetes.io/name: atuin
         ingress.home.arpa/envoy-internal: allow
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
+      serviceAccountName: atuin
       automountServiceAccountToken: false
       securityContext:
         fsGroup: 1000
         fsGroupChangePolicy: Always
         runAsGroup: 1000
         runAsNonRoot: true
--- HelmRelease: atuin/atuin ServiceAccount: atuin/atuin

+++ HelmRelease: atuin/atuin ServiceAccount: atuin/atuin

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: atuin
+  labels:
+    app.kubernetes.io/instance: atuin
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: atuin
+  namespace: atuin
+
--- HelmRelease: media/copyparty Deployment: media/copyparty

+++ HelmRelease: media/copyparty Deployment: media/copyparty

@@ -26,13 +26,13 @@

         app.kubernetes.io/instance: copyparty
         app.kubernetes.io/name: copyparty
         ingress.home.arpa/envoy-internal: allow
         ingress.home.arpa/jjgadgets: allow
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
+      serviceAccountName: copyparty
       automountServiceAccountToken: false
       securityContext:
         fsGroup: 6969
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 6969
         runAsNonRoot: true
--- HelmRelease: media/copyparty ServiceAccount: media/copyparty

+++ HelmRelease: media/copyparty ServiceAccount: media/copyparty

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: copyparty
+  labels:
+    app.kubernetes.io/instance: copyparty
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: copyparty
+  namespace: media
+
--- HelmRelease: gotosocial/gotosocial Deployment: gotosocial/gotosocial

+++ HelmRelease: gotosocial/gotosocial Deployment: gotosocial/gotosocial

@@ -29,13 +29,13 @@

         egress.home.arpa/internet: allow
         ingress.home.arpa/envoy-external: allow
         ingress.home.arpa/envoy-internal: allow
         prom.home.arpa/kps: allow
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
+      serviceAccountName: gotosocial
       automountServiceAccountToken: false
       runtimeClassName: kata
       securityContext:
         fsGroup: 65534
         fsGroupChangePolicy: Always
         runAsGroup: 65534
--- HelmRelease: gotosocial/gotosocial ServiceMonitor: gotosocial/gotosocial

+++ HelmRelease: gotosocial/gotosocial ServiceMonitor: gotosocial/gotosocial

@@ -6,13 +6,13 @@

   labels:
     app.kubernetes.io/instance: gotosocial
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: gotosocial
   namespace: gotosocial
 spec:
-  jobLabel: gotosocial
+  jobLabel: app.kubernetes.io/name
   namespaceSelector:
     matchNames:
     - gotosocial
   selector:
     matchLabels:
       app.kubernetes.io/service: gotosocial
--- HelmRelease: gotosocial/gotosocial ServiceAccount: gotosocial/gotosocial

+++ HelmRelease: gotosocial/gotosocial ServiceAccount: gotosocial/gotosocial

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: gotosocial
+  labels:
+    app.kubernetes.io/instance: gotosocial
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: gotosocial
+  namespace: gotosocial
+
--- HelmRelease: insurgency-sandstorm/insurgency-sandstorm Deployment: insurgency-sandstorm/insurgency-sandstorm-app

+++ HelmRelease: insurgency-sandstorm/insurgency-sandstorm Deployment: insurgency-sandstorm/insurgency-sandstorm-app

@@ -26,13 +26,13 @@

         app.kubernetes.io/instance: insurgency-sandstorm
         app.kubernetes.io/name: insurgency-sandstorm
         dns.home.arpa/l7: 'true'
         ingress.home.arpa/world: allow
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
+      serviceAccountName: insurgency-sandstorm
       automountServiceAccountToken: false
       runtimeClassName: kata
       securityContext:
         fsGroup: 1001
         fsGroupChangePolicy: Always
         runAsGroup: 1001
--- HelmRelease: insurgency-sandstorm/insurgency-sandstorm CronJob: insurgency-sandstorm/insurgency-sandstorm-download

+++ HelmRelease: insurgency-sandstorm/insurgency-sandstorm CronJob: insurgency-sandstorm/insurgency-sandstorm-download

@@ -27,13 +27,13 @@

             app.kubernetes.io/controller: download
             app.kubernetes.io/instance: insurgency-sandstorm
             app.kubernetes.io/name: insurgency-sandstorm
             egress.home.arpa/internet: allow
         spec:
           enableServiceLinks: false
-          serviceAccountName: default
+          serviceAccountName: insurgency-sandstorm
           automountServiceAccountToken: false
           securityContext:
             fsGroup: 1001
             fsGroupChangePolicy: Always
             runAsGroup: 1001
             runAsNonRoot: true
--- HelmRelease: insurgency-sandstorm/insurgency-sandstorm ServiceAccount: insurgency-sandstorm/insurgency-sandstorm

+++ HelmRelease: insurgency-sandstorm/insurgency-sandstorm ServiceAccount: insurgency-sandstorm/insurgency-sandstorm

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: insurgency-sandstorm
+  labels:
+    app.kubernetes.io/instance: insurgency-sandstorm
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: insurgency-sandstorm
+  namespace: insurgency-sandstorm
+
--- HelmRelease: continuwuity/continuwuity Deployment: continuwuity/continuwuity

+++ HelmRelease: continuwuity/continuwuity Deployment: continuwuity/continuwuity

@@ -32,13 +32,13 @@

         egress.home.arpa/internet: allow
         egress.home.arpa/ntfy: allow
         ingress.home.arpa/envoy-external: allow
         ingress.home.arpa/envoy-internal: allow
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
+      serviceAccountName: continuwuity
       automountServiceAccountToken: false
       runtimeClassName: gvisor
       securityContext:
         fsGroup: 65534
         fsGroupChangePolicy: Always
         runAsGroup: 65534
--- HelmRelease: continuwuity/continuwuity ServiceAccount: continuwuity/continuwuity

+++ HelmRelease: continuwuity/continuwuity ServiceAccount: continuwuity/continuwuity

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: continuwuity
+  labels:
+    app.kubernetes.io/instance: continuwuity
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: continuwuity
+  namespace: continuwuity
+
--- HelmRelease: cyberchef/cyberchef Deployment: cyberchef/cyberchef

+++ HelmRelease: cyberchef/cyberchef Deployment: cyberchef/cyberchef

@@ -25,13 +25,13 @@

         app.kubernetes.io/controller: app
         app.kubernetes.io/instance: cyberchef
         app.kubernetes.io/name: cyberchef
         ingress.home.arpa/envoy-internal: allow
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
+      serviceAccountName: cyberchef
       automountServiceAccountToken: false
       securityContext:
         fsGroup: 1000
         fsGroupChangePolicy: Always
         runAsGroup: 1000
         runAsNonRoot: true
--- HelmRelease: cyberchef/cyberchef ServiceAccount: cyberchef/cyberchef

+++ HelmRelease: cyberchef/cyberchef ServiceAccount: cyberchef/cyberchef

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: cyberchef
+  labels:
+    app.kubernetes.io/instance: cyberchef
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: cyberchef
+  namespace: cyberchef
+
--- HelmRelease: mollysocket/mollysocket Deployment: mollysocket/mollysocket

+++ HelmRelease: mollysocket/mollysocket Deployment: mollysocket/mollysocket

@@ -30,13 +30,13 @@

         app.kubernetes.io/name: mollysocket
         egress.home.arpa/internet: allow
         egress.home.arpa/ntfy: allow
         ingress.home.arpa/envoy-internal: allow
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
+      serviceAccountName: mollysocket
       automountServiceAccountToken: false
       securityContext:
         fsGroup: 1000
         fsGroupChangePolicy: Always
         runAsGroup: 1000
         runAsNonRoot: true
--- HelmRelease: mollysocket/mollysocket ServiceAccount: mollysocket/mollysocket

+++ HelmRelease: mollysocket/mollysocket ServiceAccount: mollysocket/mollysocket

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: mollysocket
+  labels:
+    app.kubernetes.io/instance: mollysocket
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mollysocket
+  namespace: mollysocket
+
--- HelmRelease: out-of-your-element/out-of-your-element Deployment: out-of-your-element/out-of-your-element

+++ HelmRelease: out-of-your-element/out-of-your-element Deployment: out-of-your-element/out-of-your-element

@@ -27,13 +27,13 @@

         app.kubernetes.io/name: out-of-your-element
         egress.home.arpa/internet: allow
         ingress.home.arpa/envoy-external: allow
         ingress.home.arpa/envoy-internal: allow
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
+      serviceAccountName: out-of-your-element
       automountServiceAccountToken: false
       runtimeClassName: kata
       securityContext:
         fsGroup: 1000
         fsGroupChangePolicy: Always
         runAsGroup: 1000
--- HelmRelease: out-of-your-element/out-of-your-element ServiceAccount: out-of-your-element/out-of-your-element

+++ HelmRelease: out-of-your-element/out-of-your-element ServiceAccount: out-of-your-element/out-of-your-element

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: out-of-your-element
+  labels:
+    app.kubernetes.io/instance: out-of-your-element
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: out-of-your-element
+  namespace: out-of-your-element
+
--- HelmRelease: ntfy/ntfy Deployment: ntfy/ntfy

+++ HelmRelease: ntfy/ntfy Deployment: ntfy/ntfy

@@ -25,13 +25,13 @@

         app.kubernetes.io/controller: app
         app.kubernetes.io/instance: ntfy
         app.kubernetes.io/name: ntfy
         ingress.home.arpa/envoy-internal: allow
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
+      serviceAccountName: ntfy
       automountServiceAccountToken: false
       runtimeClassName: gvisor
       securityContext:
         fsGroup: 65534
         fsGroupChangePolicy: Always
         runAsGroup: 65534
--- HelmRelease: ntfy/ntfy ServiceAccount: ntfy/ntfy

+++ HelmRelease: ntfy/ntfy ServiceAccount: ntfy/ntfy

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: ntfy
+  labels:
+    app.kubernetes.io/instance: ntfy
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: ntfy
+  namespace: ntfy
+
--- HelmRelease: llama-cpp/llama-cpp Deployment: llama-cpp/llama-cpp-app

+++ HelmRelease: llama-cpp/llama-cpp Deployment: llama-cpp/llama-cpp-app

@@ -26,13 +26,13 @@

         app.kubernetes.io/instance: llama-cpp
         app.kubernetes.io/name: llama-cpp
         ingress.home.arpa/envoy-internal: allow
         prom.home.arpa/kps: allow
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
+      serviceAccountName: llama-cpp
       automountServiceAccountToken: false
       securityContext:
         fsGroup: 98341
         fsGroupChangePolicy: Always
         runAsGroup: 98341
         runAsNonRoot: true
--- HelmRelease: llama-cpp/llama-cpp Deployment: llama-cpp/llama-cpp-embedding

+++ HelmRelease: llama-cpp/llama-cpp Deployment: llama-cpp/llama-cpp-embedding

@@ -26,13 +26,13 @@

         app.kubernetes.io/instance: llama-cpp
         app.kubernetes.io/name: llama-cpp
         ingress.home.arpa/envoy-internal: allow
         prom.home.arpa/kps: allow
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
+      serviceAccountName: llama-cpp
       automountServiceAccountToken: false
       securityContext:
         fsGroup: 98341
         fsGroupChangePolicy: Always
         runAsGroup: 98341
         runAsNonRoot: true
--- HelmRelease: llama-cpp/llama-cpp Job: llama-cpp/llama-cpp-pull

+++ HelmRelease: llama-cpp/llama-cpp Job: llama-cpp/llama-cpp-pull

@@ -18,13 +18,13 @@

         app.kubernetes.io/controller: pull
         app.kubernetes.io/instance: llama-cpp
         app.kubernetes.io/name: llama-cpp
         egress.home.arpa/internet: allow
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
+      serviceAccountName: llama-cpp
       automountServiceAccountToken: false
       securityContext:
         fsGroup: 98341
         fsGroupChangePolicy: Always
         runAsGroup: 98341
         runAsNonRoot: true
--- HelmRelease: llama-cpp/llama-cpp Job: llama-cpp/llama-cpp-pull-embedding

+++ HelmRelease: llama-cpp/llama-cpp Job: llama-cpp/llama-cpp-pull-embedding

@@ -18,13 +18,13 @@

         app.kubernetes.io/controller: pull-embedding
         app.kubernetes.io/instance: llama-cpp
         app.kubernetes.io/name: llama-cpp
         egress.home.arpa/internet: allow
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
+      serviceAccountName: llama-cpp
       automountServiceAccountToken: false
       securityContext:
         fsGroup: 98341
         fsGroupChangePolicy: Always
         runAsGroup: 98341
         runAsNonRoot: true
--- HelmRelease: llama-cpp/llama-cpp ServiceMonitor: llama-cpp/llama-cpp-app

+++ HelmRelease: llama-cpp/llama-cpp ServiceMonitor: llama-cpp/llama-cpp-app

@@ -6,13 +6,13 @@

   labels:
     app.kubernetes.io/instance: llama-cpp
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: llama-cpp
   namespace: llama-cpp
 spec:
-  jobLabel: llama-cpp-app
+  jobLabel: app.kubernetes.io/name
   namespaceSelector:
     matchNames:
     - llama-cpp
   selector:
     matchLabels:
       app.kubernetes.io/service: llama-cpp
--- HelmRelease: llama-cpp/llama-cpp ServiceMonitor: llama-cpp/llama-cpp-embedding

+++ HelmRelease: llama-cpp/llama-cpp ServiceMonitor: llama-cpp/llama-cpp-embedding

@@ -6,13 +6,13 @@

   labels:
     app.kubernetes.io/instance: llama-cpp
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: llama-cpp
   namespace: llama-cpp
 spec:
-  jobLabel: llama-cpp-embedding
+  jobLabel: app.kubernetes.io/name
   namespaceSelector:
     matchNames:
     - llama-cpp
   selector:
     matchLabels:
       app.kubernetes.io/service: llama-cpp-embedding
--- HelmRelease: llama-cpp/llama-cpp ServiceAccount: llama-cpp/llama-cpp

+++ HelmRelease: llama-cpp/llama-cpp ServiceAccount: llama-cpp/llama-cpp

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: llama-cpp
+  labels:
+    app.kubernetes.io/instance: llama-cpp
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: llama-cpp
+  namespace: llama-cpp
+