chore(deps): update helm general non-major (#9197)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[common](https://togithub.com/truecharts/apps/tree/master/charts/common)
([source](https://togithub.com/truecharts/library-charts)) | patch |
`12.10.2` -> `12.10.4` |
| [mariadb](https://truecharts.org/charts/dependency/mariadb)
([source](https://togithub.com/truecharts/charts)) | patch | `7.0.33` ->
`7.0.34` |

---

### Release Notes

<details>
<summary>truecharts/library-charts</summary>

###
[`v12.10.4`](https://togithub.com/truecharts/library-charts/releases/tag/common-12.10.4)

[Compare
Source](https://togithub.com/truecharts/library-charts/compare/common-12.10.2...common-12.10.4)

Function library for TrueCharts

</details>

<details>
<summary>truecharts/charts</summary>

###
[`v7.0.34`](https://togithub.com/truecharts/charts/releases/tag/mariadb-7.0.34)

[Compare
Source](https://togithub.com/truecharts/charts/compare/mariadb-7.0.33...mariadb-7.0.34)

Fast, reliable, scalable, and easy to use open-source relational
database system.

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "before 10pm on tuesday" in timezone
Europe/Amsterdam, Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://togithub.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://togithub.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNS4xMDIuNyIsInVwZGF0ZWRJblZlciI6IjM1LjEwMi43IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIn0=-->

.github/CODEOWNERS

@@ -5,5 +5,5 @@
 /charts/dependency/     @truecharts/enterprise-maintainers @ornias1993
 /charts/enterprise/     @truecharts/enterprise-maintainers @ornias1993
 /charts/dev/            @ornias1993
-/.github/               @truecharts/ci-maintainers @ornias1993 
+/.github/               @truecharts/ci-maintainers @ornias1993
 docs/                   @truecharts/docs-maintainers @ornias1993

.github/SUPPORT.md

@@ -15,11 +15,11 @@ We also document which versions of TrueNAS will receive TrueCharts updates and f
 ### Supported Versions
 
 | TrueNAS version  | Branch   | Supported with updates | Accepting Support tickets | Accepting Bug Reports | Notes                                                                                                          |
-| ---------------- | -------- | ---------------------- | ------------------------- | --------------------- | -------------------------------------------------------------------------------------------------------------- | --- |
-| 22.02.4 or prior | `master` | :x:     | :x:                       | :x:                   | Advised to update to 22.12.2 release of [TrueNAS SCALE](https://www.truenas.com/docs/scale/scalereleasenotes/) |     |
-| 22.12.0          | `master` | :white_check_mark:     | :white_check_mark:        | :white_check_mark:    | Stable Release as of 2022-12-13                                                                               |
-| 22.12.1          | `master` | :white_check_mark:     | :white_check_mark:        | :white_check_mark:    | Stable Release as of 2023-02-21                                                                               |
-| 22.12.2          | `master` | :white_check_mark:     | :white_check_mark:        | :white_check_mark:    | Stable Release as of 2023-04-11                                                                               |
+| ---------------- | -------- | ---------------------- | ------------------------- | --------------------- | -------------------------------------------------------------------------------------------------------------- |
+| 22.02.4 or prior | `master` | :x:                    | :x:                       | :x:                   | Advised to update to 22.12.2 release of [TrueNAS SCALE](https://www.truenas.com/docs/scale/scalereleasenotes/) |
+| 22.12.0          | `master` | :white_check_mark:     | :white_check_mark:        | :white_check_mark:    | Stable Release as of 2022-12-13                                                                                |
+| 22.12.1          | `master` | :white_check_mark:     | :white_check_mark:        | :white_check_mark:    | Stable Release as of 2023-02-21                                                                                |
+| 22.12.2          | `master` | :white_check_mark:     | :white_check_mark:        | :white_check_mark:    | Stable Release as of 2023-04-11                                                                                |
 | Nightly          | `master` | :white_check_mark:     | :x:                       | :white_check_mark:    | Please only submit bug reports during codefreeze                                                               |
 
 :::warning Support Guidelines

.github/actions/label-from-status/action.yaml

@@ -1,48 +0,0 @@
-name: "Set issue labels based on status"
-description: "Sets / removes issue labels based on CI job status"
-inputs:
-  token:
-    required: true
-    description: "The Github API token to use"
-  issue-number:
-    required: true
-    description: "The issue to label"
-  prefix:
-    required: true
-    description: "The label prefix (e.g. lint, install)"
-  job-status:
-    required: true
-    description: "The status of the CI job"
-  remove-on-skipped:
-    required: false
-    default: false
-    description: "Remove the label if the job was skipped"
-
-runs:
-  using: "composite"
-  steps:
-    - name: Label success
-      uses: andymckay/labeler@e6c4322d0397f3240f0e7e30a33b5c5df2d39e90 # tag=1.0.4
-      if: ${{ inputs.job-status == 'success' }}
-      with:
-        repo-token: ${{ inputs.token }}
-        issue-number: ${{ inputs.issue-number }}
-        add-labels: "${{ inputs.prefix }}:ok"
-        remove-labels: "${{ inputs.prefix }}:failed"
-
-    - name: Label failure
-      uses: andymckay/labeler@e6c4322d0397f3240f0e7e30a33b5c5df2d39e90 # tag=1.0.4
-      if: ${{ inputs.job-status == 'failure' }}
-      with:
-        repo-token: ${{ inputs.token }}
-        issue-number: ${{ inputs.issue-number }}
-        add-labels: "${{ inputs.prefix }}:failed"
-        remove-labels: "${{ inputs.prefix }}:ok"
-
-    - name: Remove label
-      uses: andymckay/labeler@e6c4322d0397f3240f0e7e30a33b5c5df2d39e90 # tag=1.0.4
-      if: ${{ (inputs.job-status == 'skipped') && (inputs.remove-on-skipped == 'true') }}
-      with:
-        repo-token: ${{ inputs.token }}
-        issue-number: ${{ inputs.issue-number }}
-        remove-labels: "${{ inputs.prefix }}:ok, ${{ inputs.prefix }}:failed"

.github/scripts/fetch_helm_deps.sh

@@ -19,14 +19,15 @@ trains=(
     "stable"
     "incubator"
     "dependency"
+    "operators"
 )
 
 load_gpg_key() {
 echo ""
 echo "⏬ Downloading and Loading TrueCharts pgp Public Key"
 gpg_dir=.cr-gpg
-mkdir "$gpg_dir"
-curl https://keybase.io/truecharts/pgp_keys.asc | gpg --dearmor > $gpg_dir/pubring.gpg || echo "❌ Couldn't load  Public Key."
+mkdir -p "$gpg_dir"
+curl --silent https://keybase.io/truecharts/pgp_keys.asc | gpg --dearmor > $gpg_dir/pubring.gpg || echo "❌ Couldn't load  Public Key."
 echo "✅ Public Key loaded successfully..."
 echo ""
 }
@@ -100,17 +101,34 @@ for idx in $(eval echo "{0..$length}"); do
 
             if [ ! $? ]; then
                 echo "❌ wget encountered an error..."
-                helm dependency build "$charts_path/$train_chart/Chart.yaml" --verify --keyring $gpg_dir/pubring.gpg || helm dependency update "$charts_path/$train_chart/Chart.yaml" --verify --keyring $gpg_dir/pubring.gpg || exit 1
+              if [[ "$train_chart" =~ incubator\/.* ]]; then
+                  helm dependency build "$charts_path/$train_chart/Chart.yaml" || \
+                  helm dependency update "$charts_path/$train_chart/Chart.yaml"|| exit 1
+              else
+                  helm dependency build "$charts_path/$train_chart/Chart.yaml" --verify --keyring $gpg_dir/pubring.gpg || \
+                  helm dependency update "$charts_path/$train_chart/Chart.yaml" --verify --keyring $gpg_dir/pubring.gpg || exit 1
+              fi
             fi
 
             if [ -f "$cache_path/$repo_dir/$name-$version.tgz" ]; then
                 echo "✅ Dependency Downloaded!"
-                echo "Validating dependency signature..."
-                helm verify $cache_path/$repo_dir/$name-$version.tgz --keyring $gpg_dir/pubring.gpg || helm verify $cache_path/$repo_dir/$name-$version.tgz --keyring $gpg_dir/pubring.gpg ||  exit 1
+                if [[ ! "$train_chart" =~ incubator\/.* ]]; then
+                  echo "Validating dependency signature..."
+                  helm verify $cache_path/$repo_dir/$name-$version.tgz --keyring $gpg_dir/pubring.gpg || \
+                  helm verify $cache_path/$repo_dir/$name-$version.tgz --keyring $gpg_dir/pubring.gpg || exit 1
+                else
+                  echo "Skipping dependency signature verification for $train_chart..."
+                fi
             else
                 echo "❌ Failed to download dependency"
                 # Try helm dependency build/update or otherwise fail fast if a dep fails to download...
-                helm dependency build "$charts_path/$train_chart/Chart.yaml" --verify --keyring $gpg_dir/pubring.gpg || helm dependency update "$charts_path/$train_chart/Chart.yaml" --verify --keyring $gpg_dir/pubring.gpg || exit 1
+              if [[ "$train_chart" =~ incubator\/.* ]]; then
+                  helm dependency build "$charts_path/$train_chart/Chart.yaml" || \
+                  helm dependency update "$charts_path/$train_chart/Chart.yaml"|| exit 1
+              else
+                  helm dependency build "$charts_path/$train_chart/Chart.yaml" --verify --keyring $gpg_dir/pubring.gpg || \
+                  helm dependency update "$charts_path/$train_chart/Chart.yaml" --verify --keyring $gpg_dir/pubring.gpg || exit 1
+              fi
             fi
         fi
         echo ""
@@ -125,12 +143,13 @@ for idx in $(eval echo "{0..$length}"); do
         else
             echo "❌ Failed to copy dependency"
             # Try helm dependency build/update or otherwise fail fast if a dep fails to copy...
-            helm dependency build "$charts_path/$train_chart/Chart.yaml" || helm dependency update "$charts_path/$train_chart/Chart.yaml" || exit 1
+            helm dependency build "$charts_path/$train_chart/Chart.yaml" || \
+            helm dependency update "$charts_path/$train_chart/Chart.yaml" || exit 1
         fi
     fi
 done
 }
-export -f 
+export -f download_deps
 
 load_gpg_key
 

.github/scripts/tc-lint.sh

@@ -0,0 +1,182 @@
+#!/bin/bash
+
+function check_version() {
+    chart_path=${1:?"No chart path provided to [Version Check]"}
+    target_branch=${2:?"No target branch provided to [Version Check]"}
+
+    new=$(git diff "$target_branch" -- "$chart_path" | sed -nr 's/^\+version: (.*)$/\1/p')
+    old=$(git diff "$target_branch" -- "$chart_path" | sed -nr 's/^\-version: (.*)$/\1/p')
+
+    if [[ -z "$new" ]]; then
+        echo -e "\t❌ Chart version: Not changed"
+        curr_result=1
+    fi
+
+    echo -e "\t🔙 Old Chart Version: $old"
+    echo -e "\t🆕 New Chart Version: $new"
+
+    if [[ $(echo "$new\n$old" | sort -V -r | head -n1) != "$old" ]]; then
+        echo -e "\t✅ Chart version: Bumped"
+    else
+        echo -e "\t❌ Chart version: Not bumped or downgraded"
+        curr_result=1
+    fi
+}
+export -f check_version
+
+function check_chart_schema(){
+    chart_path=${1:?"No chart path provided to [Chart.yaml lint]"}
+
+    yamale_output=$(yamale --schema .github/chart_schema.yaml "$chart_path/Chart.yaml")
+    yamale_exit_code=$?
+    while IFS= read -r line; do
+        echo -e "\t$line"
+    done <<< "$yamale_output"
+
+    if [ $yamale_exit_code -ne 0 ]; then
+        echo -e "\t❌ Chart Schema: Failed"
+        curr_result=1
+    else
+        echo -e "\t✅ Chart Schema: Passed"
+    fi
+}
+export -f check_chart_schema
+
+function helm_lint(){
+    chart_path=${1:?"No chart path provided to [Helm lint]"}
+
+    # Print only errors and warnings
+    helm_lint_output=$(helm lint --quiet "$chart_path")
+    helm_lint_exit_code=$?
+    while IFS= read -r line; do
+        echo -e "\t$line"
+    done <<< "$helm_lint_output"
+
+    if [ $helm_lint_exit_code -ne 0 ]; then
+        echo -e "\t❌ Helm Lint: Failed"
+        curr_result=1
+    else
+        echo -e "\t✅ Helm Lint: Passed"
+    fi
+}
+export -f helm_lint
+
+function yaml_lint(){
+    file_path=${1:?"No file path provided to [YAML lint]"}
+
+    yaml_lint_output=$(yamllint --config-file .github/yaml-lint-conf.yaml "$file_path")
+    yaml_lint_exit_code=$?
+    while IFS= read -r line; do
+        echo -e "\t$line"
+    done <<< "$yaml_lint_output"
+
+    if [ $yaml_lint_exit_code -ne 0 ]; then
+        echo -e "\t❌ YAML Lint: Failed [$file_path]"
+        curr_result=1
+    else
+        echo -e "\t✅ YAML Lint: Passed [$file_path]"
+    fi
+}
+export -f yaml_lint
+
+function lint_chart(){
+    chart_path=${1:?"No chart path provided to [Lint Chart]"}
+    target_branch=${2:?"No target branch provided to [Lint Chart]"}
+    status_file=${3:?"No status file provided to [Lint Chart]"}
+
+    curr_result_file=/tmp/$(basename "$chart_path")
+    curr_result=0
+    {
+        start_time=$(date +%s)
+        echo '---------------------------------------------------------------------------------------'
+        echo "## 🔍Linting [$chart_path]"
+        echo '----------------------------------------------'
+        echo ''
+        echo "👣 Helm Lint - [$chart_path]"
+        helm_lint "$chart_path"
+
+        echo "👣 Chart Version - [$chart_path] against [$target_branch]"
+        check_version "$chart_path" "$target_branch"
+
+        echo "👣 Chart Schema - [$chart_path]"
+        check_chart_schema "$chart_path"
+
+        echo "👣 YAML Lint - [$chart_path/Chart.yaml]"
+        yaml_lint "$chart_path/Chart.yaml"
+
+        echo "👣 YAML Lint - [$chart_path/values.yaml]"
+        yaml_lint "$chart_path/values.yaml"
+
+        for values in $chart_path/ci/*values.yaml; do
+            if [ -f "${values}" ]; then
+                echo "👣 YAML Lint - [$values]"
+                yaml_lint "$values"
+            fi
+        done
+
+        end_time=$(date +%s)
+        diff_time=$((end_time - start_time))
+
+        echo -e "\nResult:"
+        if [ $curr_result -ne 0 ]; then
+            echo "❌ Linting [$chart_path]: Failed - Took $diff_time seconds" | tee -a "$result_file"
+        else
+            echo "✅ Linting [$chart_path]: Passed - Took $diff_time seconds" | tee -a "$result_file"
+        fi
+        echo '---------------------------------------------------------------------------------------'
+        echo ''
+    } > "$curr_result_file"
+    cat "$curr_result_file"
+    echo $curr_result >> "$status_file"
+}
+export -f lint_chart
+
+# Start of script
+
+charts=$1
+target_branch=${2:-"origin/master"}
+status_file="/tmp/status"
+exit_code=0
+
+result_file=${result_file:?"No result file provided"}
+
+changed=$(echo $charts | jq --raw-output '.[]')
+
+echo "📂 Charts to lint:"
+for chart in $changed; do
+    echo -e "\t- 📄 $chart"
+done
+echo ''
+
+start_time=$(date +%s)
+# Run lint_chart in parallel
+parallel --jobs $(($(nproc) * 2)) "lint_chart {} $target_branch $status_file" ::: $changed || true
+if grep -q 1 "$status_file"; then
+    exit_code=1
+fi
+end_time=$(date +%s)
+diff_time=$((end_time - start_time))
+
+echo '------------------------------------'
+
+# Print summary
+sorted=$(cat "$result_file" | sort)
+sorted=$(echo "$sorted" | sed 's/✅/:heavy_check_mark:/g')
+sorted=$(echo "$sorted" | sed 's/❌/:heavy_multiplication_x:/g')
+echo "# 📝 Linting results:" | tee "$result_file"
+echo '====================================================================================='
+echo "$sorted" | tee -a "$result_file"
+echo ''
+echo -e "Total Charts Linted: **$(echo "$sorted" | wc -l)**" | tee -a "$result_file"
+echo -e "Total Charts Passed: **$(echo "$sorted" | grep -c 'heavy_check_mark')**" | tee -a "$result_file"
+echo -e "Total Charts Failed: **$(echo "$sorted" | grep -c 'heavy_multiplication_x')**" | tee -a "$result_file"
+echo '====================================================================================='
+echo '' | tee -a "$result_file"
+
+if [ $exit_code -ne 0 ]; then
+    echo "❌ Linting: **Failed** - Took $diff_time seconds" | tee -a "$result_file"
+else
+    echo "✅ Linting: **Passed** - Took $diff_time seconds" | tee -a "$result_file"
+fi
+
+exit $exit_code

.github/workflows/charts-changelog.yaml

@@ -1,89 +0,0 @@
-name: "Charts: Update README"
-
-on:
-  workflow_dispatch:
-    inputs:
-      modifiedCharts:
-        required: true
-        type: string
-      isRenovatePR:
-        required: true
-        type: string
-    outputs:
-      commitHash:
-        description: "The most recent commit hash at the end of this workflow"
-        value: ${{ jobs.generate-changelog.outputs.commitHash }}
-
-jobs:
-  validate-changelog:
-    name: Validate changelog
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3
-        with:
-          fetch-depth: 0
-
-      - name: Check changelog annotations
-        if: inputs.isRenovatePR != 'true'
-        run: |
-          CHARTS=(${{ inputs.modifiedCharts }})
-          for i in "${CHARTS[@]}"
-          do
-              IFS='/' read -r -a chart_parts <<< "$i"
-              ./.github/scripts/check-releasenotes.sh "charts/${chart_parts[0]}/${chart_parts[1]}"
-              echo ""
-          done
-
-  generate-changelog:
-    name: Generate changelog annotations
-    runs-on: ubuntu-latest
-    needs:
-      - validate-changelog
-    outputs:
-      commitHash: ${{ steps.save-commit-hash.outputs.commit_hash }}
-    steps:
-      - name: Checkout
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3
-        with:
-          fetch-depth: 0
-
-      - name: Install Kubernetes tools
-        if: inputs.isRenovatePR == 'true'
-        uses: yokawasa/action-setup-kube-tools@af4ebb1af1efd30c5bd84a2e9773355ad6362a33 # v0.9.3
-        with:
-          setup-tools: |
-            yq
-          yq: "4.20.1"
-
-      - name: Annotate Charts.yaml for Renovate PR's
-        if: inputs.isRenovatePR == 'true'
-        env:
-          DEFAULT_BRANCH: "${{ github.event.repository.default_branch }}"
-        run: |
-          CHARTS=(${{ inputs.modifiedCharts }})
-          for i in "${CHARTS[@]}"
-          do
-              IFS='/' read -r -a chart_parts <<< "$i"
-                ./.github/scripts/renovate-releasenotes.sh "charts/${chart_parts[0]}/${chart_parts[1]}"
-              echo ""
-          done
-
-      - name: Create commit
-        id: create-commit
-        if: inputs.isRenovatePR == 'true'
-        uses: stefanzweifel/git-auto-commit-action@3ea6ae190baf489ba007f7c92608f33ce20ef04a # v4
-        with:
-          file_pattern: charts/**/
-          commit_message: "chore: Auto-update chart metadata [skip ci]"
-          commit_user_name: ${{ github.actor }}
-          commit_user_email: ${{ github.actor }}@users.noreply.github.com
-
-      - name: Save commit hash
-        id: save-commit-hash
-        run: |
-          if [ "${{ steps.create-commit.outputs.changes_detected || 'unknown' }}" == "true" ]; then
-            echo '::set-output name=commit_hash::${{ steps.create-commit.outputs.commit_hash }}'
-          else
-            echo "::set-output name=commit_hash::${GITHUB_SHA}"
-          fi

.github/workflows/charts-lint.yaml

@@ -9,402 +9,97 @@ on:
       chartChangesDetected:
         required: true
         type: string
+      modifiedFiles:
+        required: true
+        type: string
 
 jobs:
-  verify-dep-sig:
+  lint-and-verify:
+    name: Lint Charts and Verify Dependencies
     runs-on: ubuntu-latest
-    name: Verify Dependency Signatures
     container:
-      image: ghcr.io/truecharts/devcontainer:3.1.10@sha256:c239addf725eb5cedf79517f8089fdafdc32b5270d1893ee87ae6e511b9bcae3
+      image: tccr.io/truecharts/devcontainer:v3.1.38@sha256:2fd9355bc6791461430db87a04f5fe7b49c46bc5957bc348f1efbff4c6c7913d
     steps:
-      - name: Install Kubernetes tools
-        uses: yokawasa/action-setup-kube-tools@af4ebb1af1efd30c5bd84a2e9773355ad6362a33 # v0.9.3
-        with:
-          setup-tools: |
-            helmv3
-          helm: "3.8.0"
-
-      - name: Prep Helm
-        run: |
-          helm repo add truecharts https://charts.truecharts.org
-          helm repo add truecharts-library https://library-charts.truecharts.org
-          helm repo add truecharts-deps https://deps.truecharts.org
-          helm repo update
-
       - name: Checkout
         uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3
         with:
           fetch-depth: 0
+          ref: ${{ inputs.checkoutCommit }}
 
       - name: Setting repo parent dir as safe safe.directory
         run: git config --global --add safe.directory "$GITHUB_WORKSPACE"
 
-      - name: Collect changes
-        id: collect-changes
-        uses: ./.github/actions/collect-changes
-
-      - name: Fetch and Verify dependencies
-        shell: bash
-        if: |
-          steps.collect-changes.outputs.changesDetectedAfterTag == 'true'
+      - name: Prep Helm
         run: |
-          CHARTS=(${{ steps.collect-changes.outputs.modifiedChartsAfterTag }})
-          charts_path="charts"
-          for changed in ${CHARTS[@]}; do
-            .github/scripts/fetch_helm_deps.sh "${changed}"
-          done
+          helm repo add truecharts https://charts.truecharts.org
+          helm repo add truecharts-deps https://deps.truecharts.org
+          helm repo add truecharts-library https://library-charts.truecharts.org
+          helm repo add truecharts-deps https://deps.truecharts.org
+          helm repo update
 
-  generate-lint-matrix:
-    name: Generate matrix for lint
-    runs-on: ubuntu-latest
-    outputs:
-      matrix1: |
-        {
-          "chart": ${{ steps.list-changed.outputs.charts1 }}
-        }
-      matrix2: |
-        {
-          "chart": ${{ steps.list-changed.outputs.charts2 }}
-        }
-      matrix3: |
-        {
-          "chart": ${{ steps.list-changed.outputs.charts3 }}
-        }
-      matrix4: |
-        {
-          "chart": ${{ steps.list-changed.outputs.charts4 }}
-        }
-      matrix5: |
-        {
-          "chart": ${{ steps.list-changed.outputs.charts5 }}
-        }
-      matrix6: |
-        {
-          "chart": ${{ steps.list-changed.outputs.charts6 }}
-        }
-      detected1: ${{ steps.list-changed.outputs.detected1 }}
-      detected2: ${{ steps.list-changed.outputs.detected2 }}
-      detected3: ${{ steps.list-changed.outputs.detected3 }}
-      detected4: ${{ steps.list-changed.outputs.detected4 }}
-      detected5: ${{ steps.list-changed.outputs.detected5 }}
-      detected6: ${{ steps.list-changed.outputs.detected6 }}
-    steps:
-      - name: Checkout
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3
-        with:
-          fetch-depth: 0
-          ref: ${{ inputs.checkoutCommit }}
-
-      - name: Set up chart-testing
-        uses: helm/chart-testing-action@e8788873172cb653a90ca2e819d79d65a66d4e76 # v2.4.0
-
-      - name: Collect changes
+      - name: Collect changes (branch-based)
         id: list-changed
         if: inputs.chartChangesDetected == 'true'
         shell: bash
         run: |
-          EXCLUDED=$(yq eval -o=json '.excluded-charts // []' .github/ct-lint.yaml)
           CHARTS=$(ct list-changed --config .github/ct-lint.yaml)
-          CHARTS_JSON=$(echo "${CHARTS}" | jq -R -s -c 'split("\n")[:-1]')
-          OUTPUT_JSON=$(echo "{\"excluded\": ${EXCLUDED}, \"all\": ${CHARTS_JSON}}" | jq -c '.all-.excluded')
-          OUTPUT_JSON1=$((echo $OUTPUT_JSON | jq -r -c '.[:50]'; echo $OUTPUT_JSON | jq -r -c '.[301:350]'; echo $OUTPUT_JSON | jq -r -c '.[601:650]'; echo $OUTPUT_JSON | jq -r -c '.[901:950]'; echo $OUTPUT_JSON | jq -r -c '.[1201:1250]') | jq -s add)
-          OUTPUT_JSON2=$((echo $OUTPUT_JSON | jq -r -c '.[51:100]'; echo $OUTPUT_JSON | jq -r -c '.[351:400]'; echo $OUTPUT_JSON | jq -r -c '.[651:700]'; echo $OUTPUT_JSON | jq -r -c '.[951:1000]'; echo $OUTPUT_JSON | jq -r -c '.[1251:1300]') | jq -s add)
-          OUTPUT_JSON3=$((echo $OUTPUT_JSON | jq -r -c '.[101:150]'; echo $OUTPUT_JSON | jq -r -c '.[401:450]'; echo $OUTPUT_JSON | jq -r -c '.[701:750]'; echo $OUTPUT_JSON | jq -r -c '.[1001:1050]'; echo $OUTPUT_JSON | jq -r -c '.[1301:1350]') | jq -s add)
-          OUTPUT_JSON4=$((echo $OUTPUT_JSON | jq -r -c '.[151:200]'; echo $OUTPUT_JSON | jq -r -c '.[451:500]'; echo $OUTPUT_JSON | jq -r -c '.[751:800]'; echo $OUTPUT_JSON | jq -r -c '.[1051:1100]'; echo $OUTPUT_JSON | jq -r -c '.[1351:1400]') | jq -s add)
-          OUTPUT_JSON5=$((echo $OUTPUT_JSON | jq -r -c '.[201:250]'; echo $OUTPUT_JSON | jq -r -c '.[501:550]'; echo $OUTPUT_JSON | jq -r -c '.[801:850]'; echo $OUTPUT_JSON | jq -r -c '.[1101:1150]'; echo $OUTPUT_JSON | jq -r -c '.[1401:1450]') | jq -s add)
-          OUTPUT_JSON6=$((echo $OUTPUT_JSON | jq -r -c '.[251:300]'; echo $OUTPUT_JSON | jq -r -c '.[551:600]'; echo $OUTPUT_JSON | jq -r -c '.[851:900]'; echo $OUTPUT_JSON | jq -r -c '.[1151:1200]'; echo $OUTPUT_JSON | jq -r -c '.[1451:1500]') | jq -s add)
-          echo ::set-output name=charts1::${OUTPUT_JSON1}
-          echo ::set-output name=charts2::${OUTPUT_JSON2}
-          echo ::set-output name=charts3::${OUTPUT_JSON3}
-          echo ::set-output name=charts4::${OUTPUT_JSON4}
-          echo ::set-output name=charts5::${OUTPUT_JSON5}
-          echo ::set-output name=charts6::${OUTPUT_JSON6}
-          if [[ $(echo ${OUTPUT_JSON1} | jq -c '. | length') -gt 0 ]]; then
-            echo "::set-output name=detected1::true"
-          fi
-          if [[ $(echo ${OUTPUT_JSON2} | jq -c '. | length') -gt 0 ]]; then
-            echo "::set-output name=detected2::true"
-          fi
-          if [[ $(echo ${OUTPUT_JSON3} | jq -c '. | length') -gt 0 ]]; then
-            echo "::set-output name=detected3::true"
-          fi
-          if [[ $(echo ${OUTPUT_JSON4} | jq -c '. | length') -gt 0 ]]; then
-            echo "::set-output name=detected4::true"
-          fi
-          if [[ $(echo ${OUTPUT_JSON5} | jq -c '. | length') -gt 0 ]]; then
-            echo "::set-output name=detected5::true"
-          fi
-          if [[ $(echo ${OUTPUT_JSON6} | jq -c '. | length') -gt 0 ]]; then
-            echo "::set-output name=detected6::true"
+          EXCLUDED_JSON=$(go-yq eval -o=json '.excluded-charts // []' .github/ct-lint.yaml)
+          CHARTS_JSON=$(echo "${CHARTS}" | jq --raw-input '.' | jq --compact-output --slurp '.')
+          OUTPUT_JSON=$(echo "{\"excluded\": ${EXCLUDED_JSON}, \"all\": ${CHARTS_JSON}}" | jq --compact-output '.all-.excluded')
+
+          echo CHANGED_CHARTS=${OUTPUT_JSON} >> "$GITHUB_OUTPUT"
+          if [[ $(echo ${OUTPUT_JSON} | jq --compact-output '. | length') -gt 0 ]]; then
+            echo "detected=true" >> "$GITHUB_OUTPUT"
           fi
 
-  lint-charts1:
-    needs:
-      - generate-lint-matrix
-    if: needs.generate-lint-matrix.outputs.detected1 == 'true'
-    name: Lint charts Part 1
-    strategy:
-      matrix: ${{ fromJson(needs.generate-lint-matrix.outputs.matrix1) }}
-      fail-fast: false
-      max-parallel: 10
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3
-        with:
-          fetch-depth: 0
-          ref: ${{ inputs.checkoutCommit }}
-
-      - name: lint Kubernetes tools
-        uses: yokawasa/action-setup-kube-tools@af4ebb1af1efd30c5bd84a2e9773355ad6362a33 # v0.9.3
-        with:
-          setup-tools: |
-            helmv3
-          helm: "3.8.0"
-
-      - uses: actions/setup-python@57ded4d7d5e986d7296eab16560982c6dd7c923b # v4
-        with:
-          python-version: "3.10"
-
-      - name: Set up chart-testing
-        uses: helm/chart-testing-action@e8788873172cb653a90ca2e819d79d65a66d4e76 # v2.4.0
-
-      - name: Run chart-testing (lint)
-        run: ct lint --config ".github/ct-lint.yaml" --charts "${{ matrix.chart }}" || ct lint --config ".github/ct-lint.yaml" --charts "${{ matrix.chart }}"
-
-  lint-charts2:
-    needs:
-      - generate-lint-matrix
-    if: needs.generate-lint-matrix.outputs.detected2 == 'true'
-    name: Lint charts Part 2
-    strategy:
-      matrix: ${{ fromJson(needs.generate-lint-matrix.outputs.matrix2) }}
-      fail-fast: false
-      max-parallel: 10
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3
-        with:
-          fetch-depth: 0
-          ref: ${{ inputs.checkoutCommit }}
-
-      - name: lint Kubernetes tools
-        uses: yokawasa/action-setup-kube-tools@af4ebb1af1efd30c5bd84a2e9773355ad6362a33 # v0.9.3
-        with:
-          setup-tools: |
-            helmv3
-          helm: "3.8.0"
-
-      - uses: actions/setup-python@57ded4d7d5e986d7296eab16560982c6dd7c923b # v4
-        with:
-          python-version: "3.10"
-
-      - name: Set up chart-testing
-        uses: helm/chart-testing-action@e8788873172cb653a90ca2e819d79d65a66d4e76 # v2.4.0
-
-      - name: Run chart-testing (lint)
-        run: ct lint --config ".github/ct-lint.yaml" --charts "${{ matrix.chart }}" || ct lint --config ".github/ct-lint.yaml" --charts "${{ matrix.chart }}"
-
-  lint-charts3:
-    needs:
-      - generate-lint-matrix
-    if: needs.generate-lint-matrix.outputs.detected3 == 'true'
-    name: Lint charts Part 3
-    strategy:
-      matrix: ${{ fromJson(needs.generate-lint-matrix.outputs.matrix3) }}
-      fail-fast: false
-      max-parallel: 10
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3
-        with:
-          fetch-depth: 0
-          ref: ${{ inputs.checkoutCommit }}
-
-      - name: lint Kubernetes tools
-        uses: yokawasa/action-setup-kube-tools@af4ebb1af1efd30c5bd84a2e9773355ad6362a33 # v0.9.3
-        with:
-          setup-tools: |
-            helmv3
-          helm: "3.8.0"
-
-      - uses: actions/setup-python@57ded4d7d5e986d7296eab16560982c6dd7c923b # v4
-        with:
-          python-version: "3.10"
-
-      - name: Set up chart-testing
-        uses: helm/chart-testing-action@e8788873172cb653a90ca2e819d79d65a66d4e76 # v2.4.0
-
-      - name: Run chart-testing (lint)
-        run: ct lint --config ".github/ct-lint.yaml" --charts "${{ matrix.chart }}" || ct lint --config ".github/ct-lint.yaml" --charts "${{ matrix.chart }}"
-
-  lint-charts4:
-    needs:
-      - generate-lint-matrix
-    if: needs.generate-lint-matrix.outputs.detected4 == 'true'
-    name: Lint charts Part 4
-    strategy:
-      matrix: ${{ fromJson(needs.generate-lint-matrix.outputs.matrix4) }}
-      fail-fast: false
-      max-parallel: 10
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3
-        with:
-          fetch-depth: 0
-          ref: ${{ inputs.checkoutCommit }}
-
-      - name: lint Kubernetes tools
-        uses: yokawasa/action-setup-kube-tools@af4ebb1af1efd30c5bd84a2e9773355ad6362a33 # v0.9.3
-        with:
-          setup-tools: |
-            helmv3
-          helm: "3.8.0"
-
-      - uses: actions/setup-python@57ded4d7d5e986d7296eab16560982c6dd7c923b # v4
-        with:
-          python-version: "3.10"
-
-      - name: Set up chart-testing
-        uses: helm/chart-testing-action@e8788873172cb653a90ca2e819d79d65a66d4e76 # v2.4.0
-
-      - name: Run chart-testing (lint)
-        run: ct lint --config ".github/ct-lint.yaml" --charts "${{ matrix.chart }}" || ct lint --config ".github/ct-lint.yaml" --charts "${{ matrix.chart }}"
-
-  lint-charts5:
-    needs:
-      - generate-lint-matrix
-    if: needs.generate-lint-matrix.outputs.detected5 == 'true'
-    name: Lint charts Part 5
-    strategy:
-      matrix: ${{ fromJson(needs.generate-lint-matrix.outputs.matrix5) }}
-      fail-fast: false
-      max-parallel: 10
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3
-        with:
-          fetch-depth: 0
-          ref: ${{ inputs.checkoutCommit }}
-
-      - name: lint Kubernetes tools
-        uses: yokawasa/action-setup-kube-tools@af4ebb1af1efd30c5bd84a2e9773355ad6362a33 # v0.9.3
-        with:
-          setup-tools: |
-            helmv3
-          helm: "3.8.0"
-
-      - uses: actions/setup-python@57ded4d7d5e986d7296eab16560982c6dd7c923b # v4
-        with:
-          python-version: "3.10"
-
-      - name: Set up chart-testing
-        uses: helm/chart-testing-action@e8788873172cb653a90ca2e819d79d65a66d4e76 # v2.4.0
-
-      - name: Run chart-testing (lint)
-        run: ct lint --config ".github/ct-lint.yaml" --charts "${{ matrix.chart }}" || ct lint --config ".github/ct-lint.yaml" --charts "${{ matrix.chart }}"
-
-  lint-charts6:
-    needs:
-      - generate-lint-matrix
-    if: needs.generate-lint-matrix.outputs.detected6 == 'true'
-    name: Lint charts Part 6
-    strategy:
-      matrix: ${{ fromJson(needs.generate-lint-matrix.outputs.matrix6) }}
-      fail-fast: false
-      max-parallel: 10
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3
-        with:
-          fetch-depth: 0
-          ref: ${{ inputs.checkoutCommit }}
-
-      - name: lint Kubernetes tools
-        uses: yokawasa/action-setup-kube-tools@af4ebb1af1efd30c5bd84a2e9773355ad6362a33 # v0.9.3
-        with:
-          setup-tools: |
-            helmv3
-          helm: "3.8.0"
-
-      - uses: actions/setup-python@57ded4d7d5e986d7296eab16560982c6dd7c923b # v4
-        with:
-          python-version: "3.10"
-
-      - name: Set up chart-testing
-        uses: helm/chart-testing-action@e8788873172cb653a90ca2e819d79d65a66d4e76 # v2.4.0
-
-      - name: Run chart-testing (lint)
-        run: ct lint --config ".github/ct-lint.yaml" --charts "${{ matrix.chart }}" || ct lint --config ".github/ct-lint.yaml" --charts "${{ matrix.chart }}"
-
-  # Summarize matrix https://github.community/t/status-check-for-a-matrix-jobs/127354/7
-  lint_success:
-    needs:
-      - generate-lint-matrix
-      - lint-charts1
-      - lint-charts2
-      - lint-charts3
-      - lint-charts4
-      - lint-charts5
-      - lint-charts6
-    if: |
-      always()
-    name: Lint successful
-    runs-on: ubuntu-latest
-    steps:
-      - name: Check lint matrix status
+      - name: Test and Fix Pre-Commit Issues
+        shell: bash
+        if: inputs.chartChangesDetected == 'true'
         run: |
-          res1="${{needs.lint-charts1.result}}"
-          res2="${{needs.lint-charts2.result}}"
-          res3="${{needs.lint-charts3.result}}"
-          res4="${{needs.lint-charts4.result}}"
-          res5="${{needs.lint-charts5.result}}"
-          res6="${{needs.lint-charts6.result}}"
+          echo "Running pre-commit test-and-cleanup..."
+          pre-commit run --all ||:
+          # Fix sh files to always be executable
+          find . -name '*.sh' | xargs chmod +x
+          pre-commit run --all
 
-          if [[ $res1 == "success" || $res1 == "skipped" ]]; then
-            echo "lint tests 1 successfull..."
-          else
-            echo "lint tests 1 error, stopping due to failure..."
-            exit 1
-          fi
+      - name: Fetch and Verify dependencies
+        shell: bash
+        if: steps.list-changed.outputs.detected == 'true'
+        env:
+          charts_path: "./"
+        run: |
+          CHANGED=$(echo '${{ steps.list-changed.outputs.CHANGED_CHARTS }}' | jq --raw-output '.[]')
+          for changed in ${CHANGED}; do
+            .github/scripts/fetch_helm_deps.sh "${changed}"
+          done
 
-          if [[ $res2 == "success" || $res2 == "skipped" ]]; then
-            echo "lint tests 2 successfull..."
-          else
-            echo "lint tests 2 error, stopping due to failure..."
-            exit 1
-          fi
+      - name: Run Chart Linting
+        continue-on-error: true
+        id: lint
+        if: steps.list-changed.outputs.detected == 'true'
+        env:
+          result_file: /tmp/lint_result.txt
+        run: |
+          CHANGED=$(echo '${{ steps.list-changed.outputs.CHANGED_CHARTS }}' | jq --raw-output '.[]')
+          # If the github.base_ref is empty (eg it runs outside of a PR) it fails back to origin/master
+          .github/scripts/tc-lint.sh '${{ steps.list-changed.outputs.CHANGED_CHARTS }}' "origin/${{ github.base_ref }}"
 
-          if [[ $res3 == "success" || $res3 == "skipped" ]]; then
-            echo "lint tests 3 successfull..."
-          else
-            echo "lint tests 3 error, stopping due to failure..."
-            exit 1
-          fi
+      - name: Create/Update comment
+        if: steps.list-changed.outputs.detected == 'true'
+        continue-on-error: true
+        uses: thollander/actions-comment-pull-request@632cf9ce90574d125be56b5f3405cda41a84e2fd # v2
+        with:
+          filePath: /tmp/lint_result.txt
+          comment_tag: lint_results
+          mode: recreate
+          GITHUB_TOKEN: ${{ github.token }}
 
-          if [[ $res4 == "success" || $res4 == "skipped" ]]; then
-            echo "lint tests 4 successfull..."
-          else
-            echo "lint tests 4 error, stopping due to failure..."
-            exit 1
-          fi
-
-          if [[ $res5 == "success" || $res5 == "skipped" ]]; then
-            echo "lint tests 5 successfull..."
-          else
-            echo "lint tests 5 error, stopping due to failure..."
-            exit 1
-          fi
-
-          if [[ $res6 == "success" || $res6 == "skipped" ]]; then
-            echo "lint tests 6 successfull..."
-          else
-            echo "lint tests 6 error, stopping due to failure..."
+      - name: Lint Result
+        if: steps.list-changed.outputs.detected == 'true'
+        shell: bash
+        run: |
+          if [ "${{ steps.lint.outcome }}" != "success" ]; then
+            echo "Linting failed"
             exit 1
           fi
 

.github/workflows/charts-release.yaml

@@ -11,7 +11,6 @@ on:
       - "charts/**"
 
 jobs:
-
   release-helm:
     runs-on: ubuntu-latest
     container:
@@ -238,7 +237,6 @@ jobs:
           git commit -sm "Commit released docs for TrueCharts" || exit 0
           git push
 
-
       - name: Checkout Catalog
         uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3
         if: |

.github/workflows/charts-test.yaml

@@ -152,7 +152,7 @@ jobs:
             helmv3
           helm: "3.8.0"
 
-      - uses: actions/setup-python@57ded4d7d5e986d7296eab16560982c6dd7c923b # v4
+      - uses: actions/setup-python@bd6b4b6205c4dbad673328db7b31b7fab9e241c0 # v4
         with:
           python-version: "3.10"
 
@@ -197,7 +197,7 @@ jobs:
             helmv3
           helm: "3.8.0"
 
-      - uses: actions/setup-python@57ded4d7d5e986d7296eab16560982c6dd7c923b # v4
+      - uses: actions/setup-python@bd6b4b6205c4dbad673328db7b31b7fab9e241c0 # v4
         with:
           python-version: "3.10"
 
@@ -243,7 +243,7 @@ jobs:
             helmv3
           helm: "3.8.0"
 
-      - uses: actions/setup-python@57ded4d7d5e986d7296eab16560982c6dd7c923b # v4
+      - uses: actions/setup-python@bd6b4b6205c4dbad673328db7b31b7fab9e241c0 # v4
         with:
           python-version: "3.10"
 
@@ -288,7 +288,7 @@ jobs:
             helmv3
           helm: "3.8.0"
 
-      - uses: actions/setup-python@57ded4d7d5e986d7296eab16560982c6dd7c923b # v4
+      - uses: actions/setup-python@bd6b4b6205c4dbad673328db7b31b7fab9e241c0 # v4
         with:
           python-version: "3.10"
 
@@ -333,7 +333,7 @@ jobs:
             helmv3
           helm: "3.8.0"
 
-      - uses: actions/setup-python@57ded4d7d5e986d7296eab16560982c6dd7c923b # v4
+      - uses: actions/setup-python@bd6b4b6205c4dbad673328db7b31b7fab9e241c0 # v4
         with:
           python-version: "3.10"
 
@@ -378,7 +378,7 @@ jobs:
             helmv3
           helm: "3.8.0"
 
-      - uses: actions/setup-python@57ded4d7d5e986d7296eab16560982c6dd7c923b # v4
+      - uses: actions/setup-python@bd6b4b6205c4dbad673328db7b31b7fab9e241c0 # v4
         with:
           python-version: "3.10"
 

.github/workflows/daily.yaml

@@ -31,7 +31,7 @@ jobs:
       - name: generate readme.md
         shell: bash
         run: |
-          for train in stable SCALE incubator games enterprise develop non-free deprecated dependency core; do
+          for train in stable operators SCALE incubator games enterprise develop non-free deprecated dependency core; do
             for chart in charts/${train}/*; do
               if [ -d "${chart}" ]; then
                 echo "Generating readme.md for ${train}/${chart}"
@@ -44,7 +44,7 @@ jobs:
       - name: generate HelmIgnore
         shell: bash
         run: |
-          for train in stable SCALE incubator games enterprise develop non-free deprecated dependency core; do
+          for train in stable operators SCALE incubator games enterprise develop non-free deprecated dependency core; do
             for chart in charts/${train}/*; do
               if [ -d "${chart}" ]; then
                 echo "Attempting to sync HelmIgnore file for: ${chartname}"
@@ -196,13 +196,22 @@ jobs:
           }
           export -f sync_tag
 
-          for train in enterprise stable incubator dependency; do
+          for train in enterprise stable operators incubator dependency; do
             echo "Correcting Chart.yaml for Train: ${train}..."
             for chart in $(ls "charts/${train}"); do
               echo "Correcting Chart.yaml for Chart: ${chart}..."
               sync_tag "charts/${train}/${chart}" "${chart}" "${train}"
             done
           done
+          
+      - name: Fix Fixable Pre-Commit issues
+        shell: bash
+        if: inputs.chartChangesDetected == 'true'
+        run: |
+          echo "Running pre-commit test-and-cleanup..."
+          pre-commit run --all ||:
+          # Fix sh files to always be executable
+          find . -name '*.sh' | xargs chmod +x
 
       - name: Cleanup
         run: |
@@ -325,7 +334,7 @@ jobs:
               sed -i 's|<hr>|<hr />|g' website/docs/charts/${train}/${chartname}/helm-security.md ||:
               sed -i 's|<hr>|<hr />|g' website/docs/charts/${train}/${chartname}/container-security.md ||:
               }
-          for train in enterprise stable incubator dependency; do
+          for train in enterprise stable operators incubator dependency; do
             echo "Processing Charts for Train: ${train}..."
             for chart in $(ls "charts/${train}"); do
               render "charts/${train}/${chart}" ${chart} ${train} || echo "rendering failed for ${chart}"

.github/workflows/pr-metadata.yaml

@@ -1,60 +0,0 @@
-name: "Pull Request: Get metadata"
-
-on:
-  workflow_call:
-    outputs:
-      isRenovatePR:
-        description: "Is the PR coming from Renovate?"
-        value: ${{ jobs.pr-metadata.outputs.isRenovatePR }}
-      isFork:
-        description: "Is the PR coming from a forked repo?"
-        value: ${{ jobs.pr-metadata.outputs.isFork }}
-      addedOrModified:
-        description: "Does the PR contain any changes?"
-        value: ${{ jobs.pr-changes.outputs.addedOrModified }}
-      addedOrModifiedFiles:
-        description: "A list of the files changed in this PR"
-        value: ${{ jobs.pr-changes.outputs.addedOrModifiedFiles }}
-      addedOrModifiedCharts:
-        description: "A list of the charts changed in this PR"
-        value: ${{ jobs.pr-changes.outputs.addedOrModifiedCharts }}
-
-jobs:
-  pr-metadata:
-    name: Collect PR metadata
-    runs-on: ubuntu-latest
-    outputs:
-      isRenovatePR: ${{ startsWith(steps.branch-name.outputs.current_branch, 'renovate/') }}
-      isFork: ${{ github.event.pull_request.head.repo.full_name != github.repository }}
-    steps:
-      - name: Get branch name
-        id: branch-name
-        uses: tj-actions/branch-names@2e5354c6733793113f416314375826df030ada23 # v6.5
-
-      - name: Save PR data to file
-        env:
-          PR_NUMBER: ${{ github.event.number }}
-        run: |
-          echo $PR_NUMBER > pr_number.txt
-
-      - name: Store pr data in artifact
-        uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce # v3
-        with:
-          name: pr_metadata
-          path: ./pr_number.txt
-          retention-days: 5
-
-  pr-changes:
-    name: Collect PR changes
-    runs-on: ubuntu-latest
-    outputs:
-      addedOrModified: ${{ steps.collect-changes.outputs.changesDetected }}
-      addedOrModifiedFiles: ${{ steps.collect-changes.outputs.addedOrModifiedFiles }}
-      addedOrModifiedCharts: ${{ steps.collect-changes.outputs.addedOrModifiedCharts }}
-    steps:
-      - name: Checkout
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3
-
-      - name: Collect changes
-        id: collect-changes
-        uses: ./.github/actions/collect-changes

.github/workflows/pr-validate.yaml

@@ -8,52 +8,46 @@ concurrency:
   # cancel-in-progress: true
 
 jobs:
-  pr-metadata:
-    uses: ./.github/workflows/pr-metadata.yaml
+  pr-changes:
+    name: Collect PR changes
+    runs-on: ubuntu-latest
+    outputs:
+      addedOrModified: ${{ steps.collect-changes.outputs.changesDetected }}
+      addedOrModifiedFiles: ${{ steps.collect-changes.outputs.addedOrModifiedFiles }}
+      addedOrModifiedCharts: ${{ steps.collect-changes.outputs.addedOrModifiedCharts }}
+    steps:
+      - name: Checkout
+        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3
 
-  pre-commit-check:
-    uses: truecharts/.github/.github/workflows/pre-commit-check.yaml@main
-    needs:
-      - pr-metadata
-    with:
-      modifiedFiles: ${{ needs.pr-metadata.outputs.addedOrModifiedFiles }}
-
-  #charts-changelog:
-  #  uses: ./.github/workflows/charts-changelog.yaml
-  #  needs:
-  #    - pr-metadata
-  #    - pre-commit-check
-  #  with:
-  #    isRenovatePR: ${{ needs.pr-metadata.outputs.isRenovatePR }}
-  #    modifiedCharts: ${{ needs.pr-metadata.outputs.addedOrModifiedCharts }}
+      - name: Collect changes
+        id: collect-changes
+        uses: ./.github/actions/collect-changes
 
   charts-lint:
     uses: ./.github/workflows/charts-lint.yaml
     needs:
-      - pr-metadata
-    #  - charts-changelog
+      - pr-changes
     with:
       checkoutCommit: ${{ needs.charts-changelog.outputs.commitHash }}
-      chartChangesDetected: ${{ needs.pr-metadata.outputs.addedOrModified }}
+      chartChangesDetected: ${{ needs.pr-changes.outputs.addedOrModified }}
+      modifiedFiles: ${{ needs.pr-metadata.outputs.addedOrModifiedFiles }}
 
   charts-test:
     uses: ./.github/workflows/charts-test.yaml
     needs:
-      - pr-metadata
-      #  - charts-changelog
+      - pr-changes
       - charts-lint
     with:
       checkoutCommit: ${{ needs.charts-changelog.outputs.commitHash }}
-      chartChangesDetected: ${{ needs.pr-metadata.outputs.addedOrModified }}
+      chartChangesDetected: ${{ needs.pr-changes.outputs.addedOrModified }}
 
   catalog-test:
     uses: ./.github/workflows/catalog-test.yaml
     needs:
-      - pr-metadata
-    #  - charts-changelog
+      - pr-changes
     with:
       checkoutCommit: ${{ needs.charts-changelog.outputs.commitHash }}
-      chartChangesDetected: ${{ needs.pr-metadata.outputs.addedOrModified }}
+      chartChangesDetected: ${{ needs.pr-changes.outputs.addedOrModified }}
 
   print_head_msg:
     name: print commit message
@@ -73,7 +67,7 @@ jobs:
 
   automerge-and-approve:
     needs:
-      - pr-metadata
+      - pr-changes
       - catalog-test
       - charts-test
       - charts-lint

.github/workflows/renovate.yml

@@ -12,7 +12,7 @@ jobs:
         with:
           token: ${{ secrets.BOT_TOKEN }}
       - name: Self-hosted Renovate
-        uses: renovatebot/github-action@4cc203c40dc0eb6b356306893cabda6ff9d42f33 # v37.0.0
+        uses: renovatebot/github-action@f9a5a67d4271f326b1e80695ea86dd9398b61d58 # v38.1.0
         with:
           configurationFile: .github/renovate-config.js
           token: ${{ secrets.BOT_TOKEN }}

.github/yaml-lint-conf.yaml

@@ -0,0 +1,56 @@
+---
+rules:
+  anchors:
+    forbid-undeclared-aliases: true
+  braces:
+    forbid: non-empty
+    min-spaces-inside: 0
+    max-spaces-inside: 0
+    min-spaces-inside-empty: -1
+    max-spaces-inside-empty: -1
+  brackets:
+    forbid: false
+    min-spaces-inside: 0
+    max-spaces-inside: 0
+    min-spaces-inside-empty: -1
+    max-spaces-inside-empty: -1
+  colons:
+    max-spaces-before: 0
+    max-spaces-after: 1
+  commas:
+    max-spaces-before: 0
+    min-spaces-after: 1
+    max-spaces-after: 1
+  comments:
+    require-starting-space: true
+    min-spaces-from-content: 2
+  # No --- to start a file
+  document-start: disable
+  document-end: disable
+  empty-lines:
+    max: 1
+    max-start: 0
+    max-end: 0
+  float-values:
+    require-numeral-before-decimal: true
+    forbid-scientific-notation: true
+    forbid-nan: true
+    forbid-inf: true
+  hyphens:
+    max-spaces-after: 1
+  indentation:
+    spaces: 2
+    indent-sequences: true
+    check-multi-line-strings: false
+  key-duplicates: enable
+  # Lines can be any length
+  line-length: disable
+  new-line-at-end-of-file: enable
+  new-lines:
+    type: unix
+  octal-values:
+    forbid-implicit-octal: true
+    forbid-explicit-octal: true
+  trailing-spaces: enable
+  truthy:
+    allowed-values: ["true", "false"]

charts/dependency/clickhouse/Chart.yaml

@@ -3,7 +3,7 @@ appVersion: "23.4.2.11"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 12.9.2
+    version: 12.10.4
 deprecated: false
 description: ClickHouse is a column-oriented database management system (DBMS) for online analytical processing of queries (OLAP).
 home: https://truecharts.org/charts/dependency/clickhouse
@@ -22,7 +22,7 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/dependency/clickhouse
   - https://clickhouse.com/
 type: application
-version: 5.0.26
+version: 5.0.30
 annotations:
   truecharts.org/catagories: |
     - database

charts/dependency/kube-state-metrics/Chart.yaml

@@ -3,7 +3,7 @@ appVersion: "2.8.2"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 12.9.2
+    version: 12.10.4
 deprecated: false
 description: kube-state-metrics is a simple service that listens to the Kubernetes API server and generates metrics about the state of the objects.
 home: https://truecharts.org/charts/dependency/kube-state-metrics
@@ -21,7 +21,7 @@ name: kube-state-metrics
 sources:
   - https://github.com/truecharts/charts/tree/master/charts/dependency/kube-state-metrics
 type: application
-version: 1.0.2
+version: 1.0.8
 annotations:
   truecharts.org/catagories: |
     - metrics

charts/dependency/kube-state-metrics/README.md

@@ -5,7 +5,7 @@
 TrueCharts can be installed as both *normal* Helm Charts or as Apps on TrueNAS SCALE.
 However only installations using the TrueNAS SCALE Apps system are supported.
 
-For more information about this App, please check the docs on the TrueCharts [website](https://truecharts.org/charts/enterprise/)
+For more information about this App, please check the docs on the TrueCharts [website](https://truecharts.org/charts/dependency/)
 
 **This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/charts/issues/new/choose)**
 

charts/dependency/kube-state-metrics/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/kube-state-metrics
   pullPolicy: IfNotPresent
-  tag: v2.8.2@sha256:e7b9fbc67f29bb72043238ebaa397d5161f9e3d5cdb16ac888e2ffe152015700
+  tag: v2.8.2@sha256:35a4457d904190e4870a88d7955b26b6b2604a60ad82c108f9f672a3a6b09ab1
 
 service:
   main:
@@ -79,118 +79,206 @@ rbac:
     primary: true
     clusterWide: true
     rules:
-      - apiGroups: ["certificates.k8s.io"]
+      - apiGroups:
+          - certificates.k8s.io
         resources:
           - certificatesigningrequests
-        verbs: ["list", "watch"]
-      - apiGroups: [""]
+        verbs:
+          - list
+          - watch
+      - apiGroups:
+          - ""
         resources:
           - configmaps
-        verbs: ["list", "watch"]
-      - apiGroups: ["batch"]
+        verbs:
+          - list
+          - watch
+      - apiGroups:
+          - batch
         resources:
           - cronjobs
-        verbs: ["list", "watch"]
-      - apiGroups: ["extensions", "apps"]
+        verbs:
+          - list
+          - watch
+      - apiGroups:
+          - extensions
+          - apps
         resources:
           - daemonsets
-        verbs: ["list", "watch"]
-      - apiGroups: ["extensions", "apps"]
+        verbs:
+          - list
+          - watch
+      - apiGroups:
+          - extensions
+          - apps
         resources:
           - deployments
-        verbs: ["list", "watch"]
-      - apiGroups: [""]
+        verbs:
+          - list
+          - watch
+      - apiGroups:
+          - ""
         resources:
           - endpoints
-        verbs: ["list", "watch"]
-      - apiGroups: ["autoscaling"]
+        verbs:
+          - list
+          - watch
+      - apiGroups:
+          - autoscaling
         resources:
           - horizontalpodautoscalers
-        verbs: ["list", "watch"]
-      - apiGroups: ["extensions", "networking.k8s.io"]
+        verbs:
+          - list
+          - watch
+      - apiGroups:
+          - extensions
+          - networking.k8s.io
         resources:
           - ingresses
-        verbs: ["list", "watch"]
-      - apiGroups: ["batch"]
+        verbs:
+          - list
+          - watch
+      - apiGroups:
+          - batch
         resources:
           - jobs
-        verbs: ["list", "watch"]
-      - apiGroups: [""]
+        verbs:
+          - list
+          - watch
+      - apiGroups:
+          - ""
         resources:
           - limitranges
-        verbs: ["list", "watch"]
-      - apiGroups: ["admissionregistration.k8s.io"]
+        verbs:
+          - list
+          - watch
+      - apiGroups:
+          - admissionregistration.k8s.io
         resources:
           - mutatingwebhookconfigurations
-        verbs: ["list", "watch"]
-      - apiGroups: [""]
+        verbs:
+          - list
+          - watch
+      - apiGroups:
+          - ""
         resources:
           - namespaces
-        verbs: ["list", "watch"]
-      - apiGroups: ["networking.k8s.io"]
+        verbs:
+          - list
+          - watch
+      - apiGroups:
+          - networking.k8s.io
         resources:
           - networkpolicies
-        verbs: ["list", "watch"]
-      - apiGroups: [""]
+        verbs:
+          - list
+          - watch
+      - apiGroups:
+          - ""
         resources:
           - nodes
-        verbs: ["list", "watch"]
-      - apiGroups: [""]
+        verbs:
+          - list
+          - watch
+      - apiGroups:
+          - ""
         resources:
           - persistentvolumeclaims
-        verbs: ["list", "watch"]
-      - apiGroups: [""]
+        verbs:
+          - list
+          - watch
+      - apiGroups:
+          - ""
         resources:
           - persistentvolumes
-        verbs: ["list", "watch"]
-      - apiGroups: ["policy"]
+        verbs:
+          - list
+          - watch
+      - apiGroups:
+          - policy
         resources:
           - poddisruptionbudgets
-        verbs: ["list", "watch"]
-      - apiGroups: [""]
+        verbs:
+          - list
+          - watch
+      - apiGroups:
+          - ""
         resources:
           - pods
-        verbs: ["list", "watch"]
-      - apiGroups: ["extensions", "apps"]
+        verbs:
+          - list
+          - watch
+      - apiGroups:
+          - extensions
+          - apps
         resources:
           - replicasets
-        verbs: ["list", "watch"]
-      - apiGroups: [""]
+        verbs:
+          - list
+          - watch
+      - apiGroups:
+          - ""
         resources:
           - replicationcontrollers
-        verbs: ["list", "watch"]
-      - apiGroups: [""]
+        verbs:
+          - list
+          - watch
+      - apiGroups:
+          - ""
         resources:
           - resourcequotas
-        verbs: ["list", "watch"]
-      - apiGroups: [""]
+        verbs:
+          - list
+          - watch
+      - apiGroups:
+          - ""
         resources:
           - secrets
-        verbs: ["list", "watch"]
-      - apiGroups: [""]
+        verbs:
+          - list
+          - watch
+      - apiGroups:
+          - ""
         resources:
           - services
-        verbs: ["list", "watch"]
-      - apiGroups: ["apps"]
+        verbs:
+          - list
+          - watch
+      - apiGroups:
+          - apps
         resources:
           - statefulsets
-        verbs: ["list", "watch"]
-      - apiGroups: ["storage.k8s.io"]
+        verbs:
+          - list
+          - watch
+      - apiGroups:
+          - storage.k8s.io
         resources:
           - storageclasses
-        verbs: ["list", "watch"]
-      - apiGroups: ["autoscaling.k8s.io"]
+        verbs:
+          - list
+          - watch
+      - apiGroups:
+          - autoscaling.k8s.io
         resources:
           - verticalpodautoscalers
-        verbs: ["list", "watch"]
-      - apiGroups: ["admissionregistration.k8s.io"]
+        verbs:
+          - list
+          - watch
+      - apiGroups:
+          - admissionregistration.k8s.io
         resources:
           - validatingwebhookconfigurations
-        verbs: ["list", "watch"]
-      - apiGroups: ["storage.k8s.io"]
+        verbs:
+          - list
+          - watch
+      - apiGroups:
+          - storage.k8s.io
         resources:
           - volumeattachments
-        verbs: ["list", "watch"]
+        verbs:
+          - list
+          - watch
 
 metrics:
   main:

charts/dependency/mariadb/Chart.yaml

@@ -3,7 +3,7 @@ appVersion: "10.11.3"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 12.9.2
+    version: 12.10.4
 deprecated: false
 description: Fast, reliable, scalable, and easy to use open-source relational database system.
 home: https://truecharts.org/charts/dependency/mariadb
@@ -25,7 +25,7 @@ sources:
   - https://github.com/prometheus/mysqld_exporter
   - https://mariadb.org
 type: application
-version: 7.0.29
+version: 7.0.35
 annotations:
   truecharts.org/catagories: |
     - database

charts/dependency/mariadb/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/mariadb
   pullPolicy: IfNotPresent
-  tag: v10.11.3@sha256:357b6ab922eac2ce823e6581e6580e1df4bba8d5859462c918a12c50b36881b8
+  tag: v10.11.3@sha256:206b407bdff21e374d39b5ab2dbc1fcd91bb6e1be503a7d3e3a5cdf1edcacaf4
 
 workload:
   main:

charts/dependency/memcached/Chart.yaml

@@ -3,7 +3,7 @@ appVersion: "1.6.20"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 12.9.2
+    version: 12.10.4
 deprecated: false
 description: Memcached is a memory-backed database caching solution
 home: https://truecharts.org/charts/dependency/memcached
@@ -23,7 +23,7 @@ sources:
   - https://github.com/bitnami/bitnami-docker-memcached
   - http://memcached.org/
 type: application
-version: 6.0.40
+version: 6.0.45
 annotations:
   truecharts.org/catagories: |
     - database

charts/dependency/memcached/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/memcached
   pullPolicy: IfNotPresent
-  tag: v1.6.20@sha256:6e11823db1555e766c5eda1b7725f4cc5cc5513da404644541d38a8432820117
+  tag: v1.6.20@sha256:424c5fc3f7f175d6fc3b61cead1698690eec6d9ba496a5f641fb23323373942a
 
 service:
   main:

charts/dependency/mongodb/Chart.yaml

@@ -3,7 +3,7 @@ appVersion: "6.0.6"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 12.9.2
+    version: 12.10.4
 deprecated: false
 description: Fast, reliable, scalable, and easy to use open-source no-sql database system.
 home: https://truecharts.org/charts/dependency/mongodb
@@ -23,7 +23,7 @@ sources:
   - https://github.com/bitnami/bitnami-docker-mongodb
   - https://www.mongodb.com
 type: application
-version: 6.0.29
+version: 6.0.34
 annotations:
   truecharts.org/catagories: |
     - database

charts/dependency/mongodb/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/mongodb
   pullPolicy: IfNotPresent
-  tag: v6.0.6@sha256:9d10c8a26a1b98d7212bbc2fef5dd7bf35275390dad10e6b4680c8f01c8177e4
+  tag: v6.0.6@sha256:5fcbda39afd70ed0c4bb915c68ae9e827093877faa3833e632fbb739d6148030
 
 workload:
   main:

charts/dependency/node-exporter/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "9.5.2"
+appVersion: "1.5.0"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 12.9.2
+    version: 12.10.4
 deprecated: false
 description: Prometheus exporter for hardware and OS metrics exposed by UNIX kernels, with pluggable metric collectors.
 home: https://truecharts.org/charts/dependency/node-exporter
@@ -21,7 +21,7 @@ name: node-exporter
 sources:
   - https://github.com/truecharts/charts/tree/master/charts/dependency/node-exporter
 type: application
-version: 1.0.2
+version: 1.0.7
 annotations:
   truecharts.org/catagories: |
     - metrics

charts/dependency/node-exporter/README.md

@@ -5,7 +5,7 @@
 TrueCharts can be installed as both *normal* Helm Charts or as Apps on TrueNAS SCALE.
 However only installations using the TrueNAS SCALE Apps system are supported.
 
-For more information about this App, please check the docs on the TrueCharts [website](https://truecharts.org/charts/enterprise/)
+For more information about this App, please check the docs on the TrueCharts [website](https://truecharts.org/charts/dependency/)
 
 **This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/charts/issues/new/choose)**
 

charts/dependency/node-exporter/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/node-exporter
   pullPolicy: IfNotPresent
-  tag: v1.5.0@sha256:674e04af703ffb85daf5cbddc64c5fc92e75ba49a5e2b0c0d14a2a8ccace3590
+  tag: v1.5.0@sha256:3e66f61c18145bb2267e2caf74e8ac5dcf48f75ac276890838355ba8069952c9
 
 service:
   main:

charts/dependency/redis/Chart.yaml

@@ -3,7 +3,7 @@ appVersion: "7.0.11"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 12.9.2
+    version: 12.10.4
 deprecated: false
 description: Open source, advanced key-value store.
 home: https://truecharts.org/charts/dependency/redis
@@ -23,7 +23,7 @@ sources:
   - https://github.com/bitnami/bitnami-docker-redis
   - http://redis.io/
 type: application
-version: 6.0.43
+version: 6.0.47
 annotations:
   truecharts.org/catagories: |
     - database

charts/dependency/solr/Chart.yaml

@@ -3,7 +3,7 @@ appVersion: "9.2.1"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 12.9.2
+    version: 12.10.4
 deprecated: false
 description: Apache Solr
 home: https://truecharts.org/charts/dependency/solr
@@ -22,7 +22,7 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/dependency/solr
   - https://github.com/apache/solr
 type: application
-version: 4.0.28
+version: 4.0.34
 annotations:
   truecharts.org/catagories: |
     - search

charts/dependency/solr/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/solr
   pullPolicy: IfNotPresent
-  tag: v9.2.1@sha256:ac86d55cb5c338e59a4672d620253be93afea8b5bc453a375415230312d0aa16
+  tag: v9.2.1@sha256:87988fef502a8d4debe274fea68770a075f2c9277f86ccb6fbdca5e19d5888c5
 
 workload:
   main:

charts/enterprise/authelia/Chart.yaml

@@ -3,11 +3,11 @@ appVersion: "4.37.5"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 12.9.2
+    version: 12.10.4
   - condition: redis.enabled
     name: redis
     repository: https://deps.truecharts.org
-    version: 6.0.43
+    version: 6.0.46
 deprecated: false
 description: Authelia is a Single Sign-On Multi-Factor portal for web apps
 home: https://truecharts.org/charts/enterprise/authelia
@@ -35,7 +35,7 @@ sources:
   - https://github.com/authelia/chartrepo
   - https://github.com/authelia/authelia
 type: application
-version: 15.1.17
+version: 15.1.22
 annotations:
   truecharts.org/catagories: |
     - security

charts/enterprise/authelia/values.yaml

@@ -2,7 +2,8 @@ image:
   repository: tccr.io/truecharts/authelia
   pullPolicy: IfNotPresent
   tag: 4.37.5@sha256:76a4617539534cec140fd98a12f721b878524f2df3a3653f3df8ff2b7eaab586
-
+manifestManager:
+  enabled: true
 workload:
   main:
     replicas: 2
@@ -10,8 +11,10 @@ workload:
     podSpec:
       containers:
         main:
-          command: ["authelia"]
-          args: ["--config=/configuration.yaml"]
+          command:
+            - authelia
+          args:
+            - --config=/configuration.yaml
           envFrom:
             - configMapRef:
                 name: authelia-paths

charts/enterprise/blocky/Chart.yaml

@@ -3,11 +3,11 @@ appVersion: "0.21.0"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 12.9.2
+    version: 12.10.4
   - condition: redis.enabled
     name: redis
     repository: https://deps.truecharts.org
-    version: 6.0.43
+    version: 6.0.46
 description: Blocky is a DNS proxy, DNS enhancer and ad-blocker for the local network written in Go
 home: https://truecharts.org/charts/enterprise/blocky
 icon: https://truecharts.org/img/hotlink-ok/chart-icons/blocky.png
@@ -25,7 +25,7 @@ sources:
   - https://0xerr0r.github.io/blocky/
   - https://github.com/0xERR0R/blocky
   - https://github.com/Mozart409/blocky-frontend
-version: 5.0.31
+version: 5.0.34
 annotations:
   truecharts.org/catagories: |
     - network

charts/enterprise/blocky/values.yaml

@@ -7,7 +7,8 @@ k8sgatewayImage:
   repository: tccr.io/truecharts/k8s_gateway
   pullPolicy: IfNotPresent
   tag: 0.3.4@sha256:c49645e7b263e5cfc8fc269db2aef7d90149cecc7a50e2c2fe77ef935dd35742
-
+manifestManager:
+  enabled: true
 workload:
   main:
     replicas: 2

charts/enterprise/cert-manager/Chart.yaml

@@ -10,7 +10,7 @@ keywords:
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 12.9.2
+    version: 12.10.4
 kubeVersion: ">=1.16.0-0"
 maintainers:
   - email: info@truecharts.org
@@ -21,7 +21,7 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/enterprise/cert-manager
   - https://cert-manager.io/
 type: application
-version: 1.0.34
+version: 1.0.37
 annotations:
   truecharts.org/catagories: |
     - core

charts/enterprise/cert-manager/values.yaml

@@ -2,7 +2,8 @@ image:
   repository: tccr.io/truecharts/scratch
   tag: latest@sha256:9dd0f68d32ace452a3a75273bd8e3a074d0a14e4d38683389c73887432832fc3
   pullPolicy: IfNotPresent
-
+manifestManager:
+  enabled: true
 workload:
   main:
     enabled: false

charts/enterprise/grafana/Chart.yaml

@@ -3,7 +3,7 @@ appVersion: "9.5.2"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 12.9.2
+    version: 12.10.4
 deprecated: false
 description: Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, Elasticsearch, OpenTSDB, Prometheus and InfluxDB.
 home: https://truecharts.org/charts/enterprise/grafana
@@ -24,7 +24,7 @@ sources:
   - https://github.com/bitnami/bitnami-docker-grafana
   - https://grafana.com/
 type: application
-version: 7.0.37
+version: 7.0.41
 annotations:
   truecharts.org/catagories: |
     - metrics

charts/enterprise/grafana/values.yaml

@@ -1,8 +1,9 @@
 image:
   repository: tccr.io/truecharts/grafana
   pullPolicy: IfNotPresent
-  tag: v9.5.2@sha256:2835129a3364407fb10ce370ff5f83087373dbf99b067190e84bde8db2a77d5e
-
+  tag: v9.5.2@sha256:2016c468cf2bee3a11263b9884cad2a9dc6dce642fd1c1aa8809c25c33308fc7
+manifestManager:
+  enabled: true
 securityContext:
   container:
     readOnlyRootFilesystem: false

charts/enterprise/metallb/Chart.yaml

@@ -10,7 +10,7 @@ keywords:
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 12.9.2
+    version: 12.10.4
 kubeVersion: ">=1.16.0-0"
 maintainers:
   - email: info@truecharts.org
@@ -22,7 +22,7 @@ sources:
   - https://github.com/metallb/metallb
   - https://metallb.universe.tf
 type: application
-version: 8.0.29
+version: 8.0.32
 annotations:
   truecharts.org/catagories: |
     - core

charts/enterprise/metallb/values.yaml

@@ -2,7 +2,8 @@ image:
   repository: tccr.io/truecharts/scratch
   tag: latest@sha256:9dd0f68d32ace452a3a75273bd8e3a074d0a14e4d38683389c73887432832fc3
   pullPolicy: IfNotPresent
-
+manifestManager:
+  enabled: true
 workload:
   main:
     enabled: false

charts/enterprise/prometheus/Chart.yaml

@@ -3,15 +3,15 @@ appVersion: "2.44.0"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 12.9.2
+    version: 12.10.4
   - condition: exporters.enabled,exporters.node-exporter.enabled
     name: node-exporter
     repository: https://deps.truecharts.org
-    version: 1.0.2
+    version: 1.0.6
   - condition: exporters.enabled,exporters.kube-state-metrics.enabled
     name: kube-state-metrics
     repository: https://deps.truecharts.org
-    version: 1.0.2
+    version: 1.0.7
 deprecated: false
 description: kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.
 icon: https://truecharts.org/img/hotlink-ok/chart-icons/prometheus.png
@@ -29,7 +29,7 @@ sources:
   - https://github.com/prometheus-community/helm-charts
   - https://github.com/prometheus-operator/kube-prometheus
 type: application
-version: 9.0.5
+version: 9.0.13
 annotations:
   truecharts.org/catagories: |
     - metrics

charts/enterprise/prometheus/values.yaml

@@ -1,6 +1,6 @@
 image:
   repository: tccr.io/truecharts/prometheus
-  tag: v2.44.0@sha256:9d971b08b955f20a810f81a1d43b2a52d75903917cbaac27944bb0e30ef69a81
+  tag: v2.44.0@sha256:b4baeb2de94c734dbe36910e3e1a28c51e915ff355760863ad80af4fe7f88d29
 
 thanosImage:
   repository: tccr.io/truecharts/thanos
@@ -9,7 +9,8 @@ thanosImage:
 alertmanagerImage:
   repository: tccr.io/truecharts/alertmanager
   tag: 0.25.0@sha256:6b534671b83aa7fbd91d1b10bf0f1b29b948e4b300f8359a86043d0deba07207
-
+manifestManager:
+  enabled: true
 global:
   labels: {}
 workload:
@@ -972,7 +973,8 @@ alertmanager:
     global:
       resolve_timeout: 5m
     route:
-      group_by: ["job"]
+      group_by:
+        - job
       group_wait: 30s
       group_interval: 5m
       repeat_interval: 12h

charts/enterprise/traefik/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "2.9.10"
+appVersion: "2.10.1"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 12.9.2
+    version: 12.10.4
 deprecated: false
 description: Traefik is a flexible reverse proxy and Ingress Provider.
 home: https://truecharts.org/charts/enterprise/traefik
@@ -23,7 +23,7 @@ sources:
   - https://github.com/traefik/traefik-helm-chart
   - https://traefik.io/
 type: application
-version: 17.0.39
+version: 18.0.6
 annotations:
   truecharts.org/catagories: |
     - network

charts/enterprise/traefik/templates/_args.tpl

@@ -67,7 +67,7 @@ args:
   - "--providers.kubernetesingress.namespaces={{ template "providers.kubernetesIngress.namespaces" . }}"
   {{- end }}
   {{- end }}
-  {{- if .Values.ingressClass.enabled }}
+  {{- if $.Values.ingressClass.enabled }}
   - "--providers.kubernetesingress.ingressclass={{ .Release.Name }}"
   {{- end }}
   {{- range $entrypoint, $config := $ports }}

charts/enterprise/traefik/templates/_ingressclass.tpl

@@ -1,7 +1,7 @@
 {{/* Define the ingressClass */}}
 {{- define "traefik.ingressClass" -}}
 ---
-{{ if .Values.ingressClass.enabled }}
+{{ if $.Values.ingressClass.enabled }}
   {{- if .Capabilities.APIVersions.Has "networking.k8s.io/v1/IngressClass" }}
 apiVersion: networking.k8s.io/v1
   {{- else if .Capabilities.APIVersions.Has "networking.k8s.io/v1beta1/IngressClass" }}

charts/enterprise/traefik/templates/_portalhook.tpl

@@ -1,17 +1,13 @@
 {{/* Define the portalHook */}}
 {{- define "traefik.portalhook" -}}
 {{- if .Values.portalhook.enabled }}
-{{- $namespace := ( printf "ix-%s" .Release.Name ) }}
-{{- if or ( not .Values.ingressClass.enabled ) ( and ( .Values.ingressClass.enabled ) ( .Values.ingressClass.isDefaultClass ) ) }}
-{{- $namespace = "default" }}
-{{- end }}
 ---
 
 apiVersion: v1
 kind: ConfigMap
 metadata:
-  name: portalhook
-  namespace: {{ $namespace }}
+  name: {{ ternary "portalhook" (printf "portalhook-%v" .Release.Name ) $.Values.ingressClass.enabled }}
+  namespace: tc-system
 data:
   {{- $ports := dict }}
   {{- range $.Values.service }}

charts/enterprise/traefik/templates/_tlsoptions.tpl

@@ -2,7 +2,7 @@
 {{- define "traefik.tlsOptions" -}}
 {{- range $name, $config := .Values.tlsOptions }}
 ---
-apiVersion: traefik.containo.us/v1alpha1
+apiVersion: traefik.io/v1alpha1
 kind: TLSOption
 metadata:
   name: {{ $name }}

charts/enterprise/traefik/templates/middlewares/addPrefix.yaml

@@ -1,16 +1,13 @@
 {{- $values := .Values }}
-{{- $namespace := ( printf "ix-%s" .Release.Name ) }}
-{{- if or ( not .Values.ingressClass.enabled ) ( and ( .Values.ingressClass.enabled ) ( .Values.ingressClass.isDefaultClass ) ) }}
-{{- $namespace = "default" }}
-{{- end }}
+
 {{- range $index, $middlewareData := .Values.middlewares.addPrefix }}
 
 ---
-apiVersion: traefik.containo.us/v1alpha1
+apiVersion: traefik.io/v1alpha1
 kind: Middleware
 metadata:
-  name: {{ $middlewareData.name }}
-  namespace: {{ $namespace }}
+  name: {{ ternary (printf "%v-%v" $.Release.Name $middlewareData.name) $middlewareData.name $.Values.ingressClass.enabled }}
+  namespace: tc-system
 spec:
   addPrefix:
     prefix: {{ $middlewareData.prefix }}

charts/enterprise/traefik/templates/middlewares/basic-middleware.yaml

@@ -1,34 +1,30 @@
 {{- $values := .Values }}
-{{- $namespace := ( printf "ix-%s" .Release.Name ) }}
-{{- if or ( not .Values.ingressClass.enabled ) ( and ( .Values.ingressClass.enabled ) ( .Values.ingressClass.isDefaultClass ) ) }}
-{{- $namespace = "default" }}
-{{- end }}
 ---
-apiVersion: traefik.containo.us/v1alpha1
+apiVersion: traefik.io/v1alpha1
 kind: Middleware
 metadata:
-  name: compress
-  namespace: {{ $namespace }}
+  name: {{ ternary (printf "%v-compress" $.Release.Name) "compress" $.Values.ingressClass.enabled }}
+  namespace: tc-system
 spec:
   compress: {}
 ---
 # Here, an average of 300 requests per second is allowed.
 # In addition, a burst of 200 requests is allowed.
-apiVersion: traefik.containo.us/v1alpha1
+apiVersion: traefik.io/v1alpha1
 kind: Middleware
 metadata:
-  name: basic-ratelimit
-  namespace: {{ $namespace }}
+  name: {{ ternary (printf "%v-basic-ratelimit" $.Release.Name) "basic-ratelimit" $.Values.ingressClass.enabled }}
+  namespace: tc-system
 spec:
   rateLimit:
     average: 600
     burst: 400
 ---
-apiVersion: traefik.containo.us/v1alpha1
+apiVersion: traefik.io/v1alpha1
 kind: Middleware
 metadata:
-  name: basic-secure-headers
-  namespace: {{ $namespace }}
+  name: {{ ternary (printf "%v-basic-secure-headers" $.Release.Name) "basic-secure-headers" $.Values.ingressClass.enabled }}
+  namespace: tc-system
 spec:
   headers:
     accessControlAllowMethods:
@@ -49,14 +45,14 @@ spec:
     customResponseHeaders:
       server: ''
 ---
-apiVersion: traefik.containo.us/v1alpha1
+apiVersion: traefik.io/v1alpha1
 kind: Middleware
 metadata:
-  name: chain-basic
-  namespace: {{ $namespace }}
+  name: {{ ternary (printf "%v-chain-basic" $.Release.Name) "chain-basic" $.Values.ingressClass.enabled }}
+  namespace: tc-system
 spec:
   chain:
     middlewares:
-    - name: basic-ratelimit
-    - name: basic-secure-headers
-    - name: compress
+    - name: {{ ternary (printf "%v-basic-ratelimit" $.Release.Name) "basic-ratelimit" $.Values.ingressClass.enabled }}
+    - name: {{ ternary (printf "%v-basic-secure-headers" $.Release.Name) "basic-secure-headers" $.Values.ingressClass.enabled }}
+    - name: {{ ternary (printf "%v-compress" $.Release.Name) "compress" $.Values.ingressClass.enabled }}

charts/enterprise/traefik/templates/middlewares/basicauth.yaml

@@ -1,20 +1,17 @@
 {{- $values := .Values }}
-{{- $namespace := ( printf "ix-%s" .Release.Name ) }}
-{{- if or ( not .Values.ingressClass.enabled ) ( and ( .Values.ingressClass.enabled ) ( .Values.ingressClass.isDefaultClass ) ) }}
-{{- $namespace = "default" }}
-{{- end }}
+
 {{ range $index, $middlewareData := .Values.middlewares.basicAuth }}
 ---
 {{- $users := list }}
-{{ range $index, $userdata := $middlewareData.users }}
-    {{ $users = append $users ( htpasswd $userdata.username $userdata.password ) }}
-{{ end }}
+{{- range $index, $userdata := $middlewareData.users }}
+  {{- $users = append $users (htpasswd $userdata.username $userdata.password) }}
+{{- end }}
 
 apiVersion: v1
 kind: Secret
 metadata:
   name: {{printf "%v-%v" $middlewareData.name "secret" }}
-  namespace: {{ $namespace }}
+  namespace: tc-system
 type: Opaque
 stringData:
   users: |
@@ -23,12 +20,12 @@ stringData:
     {{- end }}
 ---
 # Declaring the user list
-apiVersion: traefik.containo.us/v1alpha1
+apiVersion: traefik.io/v1alpha1
 kind: Middleware
 metadata:
-  name: {{ $middlewareData.name }}
-  namespace: {{ $namespace }}
+  name: {{ ternary (printf "%v-%v" $.Release.Name $middlewareData.name) $middlewareData.name $.Values.ingressClass.enabled }}
+  namespace: tc-system
 spec:
   basicAuth:
-    secret: {{printf "%v-%v" $middlewareData.name "secret" }}
+    secret: {{ printf "%v-%v" $middlewareData.name "secret" }}
 {{ end }}

charts/enterprise/traefik/templates/middlewares/chain.yaml

@@ -1,17 +1,17 @@
 {{- $values := .Values }}
-{{- $namespace := ( printf "ix-%s" .Release.Name ) }}
-{{- if or ( not .Values.ingressClass.enabled ) ( and ( .Values.ingressClass.enabled ) ( .Values.ingressClass.isDefaultClass ) ) }}
-{{- $namespace = "default" }}
+{{- $namespace := "tc-system" }}
+{{- if $.Values.ingressClass.enabled }}
+{{- $namespace := ( printf "tc-system-%s" .Release.Name ) }}
 {{- end }}
 {{ range $index, $middlewareData := .Values.middlewares.chain }}
 
 ---
 # Declaring the user list
-apiVersion: traefik.containo.us/v1alpha1
+apiVersion: traefik.io/v1alpha1
 kind: Middleware
 metadata:
-  name: {{ $middlewareData.name }}
-  namespace: {{ $namespace }}
+  name: {{ ternary (printf "%v-%v" $.Release.Name $middlewareData.name) $middlewareData.name $.Values.ingressClass.enabled }}
+  namespace: tc-system
 spec:
   chain:
     middlewares:

charts/enterprise/traefik/templates/middlewares/forwardauth.yaml

@@ -1,15 +1,12 @@
 {{- $values := .Values }}
-{{- $namespace := ( printf "ix-%s" .Release.Name ) }}
-{{- if or ( not .Values.ingressClass.enabled ) ( and ( .Values.ingressClass.enabled ) ( .Values.ingressClass.isDefaultClass ) ) }}
-{{- $namespace = "default" }}
-{{- end }}
+
 {{ range $index, $middlewareData := .Values.middlewares.forwardAuth }}
 ---
-apiVersion: traefik.containo.us/v1alpha1
+apiVersion: traefik.io/v1alpha1
 kind: Middleware
 metadata:
-  name: {{ $middlewareData.name }}
-  namespace: {{ $namespace }}
+  name: {{ ternary (printf "%v-%v" $.Release.Name $middlewareData.name) $middlewareData.name $.Values.ingressClass.enabled }}
+  namespace: tc-system
 spec:
   forwardAuth:
     address: {{ $middlewareData.address }}

charts/enterprise/traefik/templates/middlewares/geoblock.yaml

@@ -1,16 +1,13 @@
 {{- $values := .Values }}
-{{- $namespace := ( printf "ix-%s" .Release.Name ) }}
-{{- if or ( not .Values.ingressClass.enabled ) ( and ( .Values.ingressClass.enabled ) ( .Values.ingressClass.isDefaultClass ) ) }}
-{{- $namespace = "default" }}
-{{- end }}
+
 {{- range $index, $middlewareData := .Values.middlewares.geoBlock }}
 
 ---
-apiVersion: traefik.containo.us/v1alpha1
+apiVersion: traefik.io/v1alpha1
 kind: Middleware
 metadata:
-  name: {{ $middlewareData.name }}
-  namespace: {{ $namespace }}
+  name: {{ ternary (printf "%v-%v" $.Release.Name $middlewareData.name) $middlewareData.name $.Values.ingressClass.enabled }}
+  namespace: tc-system
 spec:
   plugin:
     GeoBlock:

charts/enterprise/traefik/templates/middlewares/ipwhitelist.yaml

@@ -1,17 +1,14 @@
 {{- $values := .Values }}
-{{- $namespace := ( printf "ix-%s" .Release.Name ) }}
-{{- if or ( not .Values.ingressClass.enabled ) ( and ( .Values.ingressClass.enabled ) ( .Values.ingressClass.isDefaultClass ) ) }}
-{{- $namespace = "default" }}
-{{- end }}
+
 {{ range $index, $middlewareData := .Values.middlewares.ipWhiteList }}
 
 ---
 # Declaring the user list
-apiVersion: traefik.containo.us/v1alpha1
+apiVersion: traefik.io/v1alpha1
 kind: Middleware
 metadata:
-  name: {{ $middlewareData.name }}
-  namespace: {{ $namespace }}
+  name: {{ ternary (printf "%v-%v" $.Release.Name $middlewareData.name) $middlewareData.name $.Values.ingressClass.enabled }}
+  namespace: tc-system
 spec:
   ipWhiteList:
     sourceRange:

charts/enterprise/traefik/templates/middlewares/ratelimit.yaml

@@ -1,17 +1,14 @@
 {{- $values := .Values }}
-{{- $namespace := ( printf "ix-%s" .Release.Name ) }}
-{{- if or ( not .Values.ingressClass.enabled ) ( and ( .Values.ingressClass.enabled ) ( .Values.ingressClass.isDefaultClass ) ) }}
-{{- $namespace = "default" }}
-{{- end }}
+
 {{ range $index, $middlewareData := .Values.middlewares.rateLimit }}
 
 ---
 # Declaring the user list
-apiVersion: traefik.containo.us/v1alpha1
+apiVersion: traefik.io/v1alpha1
 kind: Middleware
 metadata:
-  name: {{ $middlewareData.name }}
-  namespace: {{ $namespace }}
+  name: {{ ternary (printf "%v-%v" $.Release.Name $middlewareData.name) $middlewareData.name $.Values.ingressClass.enabled }}
+  namespace: tc-system
 spec:
   rateLimit:
     average: {{ $middlewareData.average }}

charts/enterprise/traefik/templates/middlewares/real-ip.yaml

@@ -1,16 +1,13 @@
 {{- $values := .Values }}
-{{- $namespace := ( printf "ix-%s" .Release.Name ) }}
-{{- if or ( not .Values.ingressClass.enabled ) ( and ( .Values.ingressClass.enabled ) ( .Values.ingressClass.isDefaultClass ) ) }}
-{{- $namespace = "default" }}
-{{- end }}
+
 {{- range $index, $middlewareData := .Values.middlewares.realIP }}
 
 ---
-apiVersion: traefik.containo.us/v1alpha1
+apiVersion: traefik.io/v1alpha1
 kind: Middleware
 metadata:
-  name: {{ $middlewareData.name }}
-  namespace: {{ $namespace }}
+  name: {{ ternary (printf "%v-%v" $.Release.Name $middlewareData.name) $middlewareData.name $.Values.ingressClass.enabled }}
+  namespace: tc-system
 spec:
   plugin:
     traefik-real-ip:

charts/enterprise/traefik/templates/middlewares/redirectScheme.yaml

@@ -1,17 +1,14 @@
 {{- $values := .Values }}
-{{- $namespace := ( printf "ix-%s" .Release.Name ) }}
-{{- if or ( not .Values.ingressClass.enabled ) ( and ( .Values.ingressClass.enabled ) ( .Values.ingressClass.isDefaultClass ) ) }}
-{{- $namespace = "default" }}
-{{- end }}
+
 {{ range $index, $middlewareData := .Values.middlewares.redirectScheme }}
 
 ---
 # Declaring the user list
-apiVersion: traefik.containo.us/v1alpha1
+apiVersion: traefik.io/v1alpha1
 kind: Middleware
 metadata:
-  name: {{ $middlewareData.name }}
-  namespace: {{ $namespace }}
+  name: {{ ternary (printf "%v-%v" $.Release.Name $middlewareData.name) $middlewareData.name $.Values.ingressClass.enabled }}
+  namespace: tc-system
 spec:
   redirectScheme:
     scheme: {{ $middlewareData.scheme }}

charts/enterprise/traefik/templates/middlewares/redirectregex.yaml

@@ -1,17 +1,14 @@
 {{- $values := .Values }}
-{{- $namespace := ( printf "ix-%s" .Release.Name ) }}
-{{- if or ( not .Values.ingressClass.enabled ) ( and ( .Values.ingressClass.enabled ) ( .Values.ingressClass.isDefaultClass ) ) }}
-{{- $namespace = "default" }}
-{{- end }}
+
 {{ range $index, $middlewareData := .Values.middlewares.redirectRegex }}
 
 ---
 # Declaring the user list
-apiVersion: traefik.containo.us/v1alpha1
+apiVersion: traefik.io/v1alpha1
 kind: Middleware
 metadata:
-  name: {{ $middlewareData.name }}
-  namespace: {{ $namespace }}
+  name: {{ ternary (printf "%v-%v" $.Release.Name $middlewareData.name) $middlewareData.name $.Values.ingressClass.enabled }}
+  namespace: tc-system
 spec:
   redirectRegex:
     regex: {{ $middlewareData.regex | quote }}

charts/enterprise/traefik/templates/middlewares/stripPrefixRegex.yaml

@@ -1,16 +1,13 @@
 {{- $values := .Values }}
-{{- $namespace := ( printf "ix-%s" .Release.Name ) }}
-{{- if or ( not .Values.ingressClass.enabled ) ( and ( .Values.ingressClass.enabled ) ( .Values.ingressClass.isDefaultClass ) ) }}
-{{- $namespace = "default" }}
-{{- end }}
+
 
 {{ range $index, $middlewareData := .Values.middlewares.stripPrefixRegex }}
 ---
-apiVersion: traefik.containo.us/v1alpha1
+apiVersion: traefik.io/v1alpha1
 kind: Middleware
 metadata:
-  name: {{ $middlewareData.name }}
-  namespace: {{ $namespace }}
+  name: {{ ternary (printf "%v-%v" $.Release.Name $middlewareData.name) $middlewareData.name $.Values.ingressClass.enabled }}
+  namespace: tc-system
 spec:
   stripPrefixRegex:
     regex:

charts/enterprise/traefik/templates/middlewares/tc-chains.yaml

@@ -1,29 +1,26 @@
 {{- $values := .Values }}
-{{- $namespace := ( printf "ix-%s" .Release.Name ) }}
-{{- if or ( not .Values.ingressClass.enabled ) ( and ( .Values.ingressClass.enabled ) ( .Values.ingressClass.isDefaultClass ) ) }}
-{{- $namespace = "default" }}
-{{- end }}
+
 ---
-apiVersion: traefik.containo.us/v1alpha1
+apiVersion: traefik.io/v1alpha1
 kind: Middleware
 metadata:
-  name: tc-opencors-chain
-  namespace: {{ $namespace }}
+  name: {{ ternary (printf "%v-%v" $.Release.Name "tc-opencors-chain") "tc-opencors-chain" $.Values.ingressClass.enabled }}
+  namespace: tc-system
 spec:
   chain:
     middlewares:
-    - name: basic-ratelimit
-    - name: tc-opencors-headers
-    - name: compress
+    - name: {{ ternary (printf "%v-%v" $.Release.Name "basic-ratelimit") "basic-ratelimit" $.Values.ingressClass.enabled }}
+    - name: {{ ternary (printf "%v-%v" $.Release.Name "tc-opencors-headers") "tc-opencors-headers" $.Values.ingressClass.enabled }}
+    - name: {{ ternary (printf "%v-%v" $.Release.Name "compress") "compress" $.Values.ingressClass.enabled }}
 ---
-apiVersion: traefik.containo.us/v1alpha1
+apiVersion: traefik.io/v1alpha1
 kind: Middleware
 metadata:
-  name: tc-closedcors-chain
-  namespace: {{ $namespace }}
+  name: {{ ternary (printf "%v-%v" $.Release.Name "tc-closedcors-chain") "tc-closedcors-chain" $.Values.ingressClass.enabled }}
+  namespace: tc-system
 spec:
   chain:
     middlewares:
-    - name: basic-ratelimit
-    - name: tc-closedcors-headers
-    - name: compress
+    - name: {{ ternary (printf "%v-%v" $.Release.Name "basic-ratelimit") "basic-ratelimit" $.Values.ingressClass.enabled }}
+    - name: {{ ternary (printf "%v-%v" $.Release.Name "tc-closedcors-headers") "tc-closedcors-headers" $.Values.ingressClass.enabled }}
+    - name: {{ ternary (printf "%v-%v" $.Release.Name "compress") "compress" $.Values.ingressClass.enabled }}

charts/enterprise/traefik/templates/middlewares/tc-headers.yaml

@@ -1,14 +1,11 @@
 {{- $values := .Values }}
-{{- $namespace := ( printf "ix-%s" .Release.Name ) }}
-{{- if or ( not .Values.ingressClass.enabled ) ( and ( .Values.ingressClass.enabled ) ( .Values.ingressClass.isDefaultClass ) ) }}
-{{- $namespace = "default" }}
-{{- end }}
+
 ---
-apiVersion: traefik.containo.us/v1alpha1
+apiVersion: traefik.io/v1alpha1
 kind: Middleware
 metadata:
-  name: tc-opencors-headers
-  namespace: {{ $namespace }}
+  name: {{ ternary (printf "%v-%v" $.Release.Name "tc-opencors-headers") "tc-opencors-headers" $.Values.ingressClass.enabled }}
+  namespace: tc-system
 spec:
   headers:
     accessControlAllowHeaders:
@@ -34,11 +31,11 @@ spec:
     sslRedirect: true
     stsSeconds: 63072000
 ---
-apiVersion: traefik.containo.us/v1alpha1
+apiVersion: traefik.io/v1alpha1
 kind: Middleware
 metadata:
-  name: tc-closedcors-headers
-  namespace: {{ $namespace }}
+  name: {{ ternary (printf "%v-%v" $.Release.Name "tc-closedcors-headers") "tc-closedcors-headers" $.Values.ingressClass.enabled }}
+  namespace: tc-system
 spec:
   headers:
     accessControlAllowMethods:

charts/enterprise/traefik/templates/middlewares/tc-nextcloud.yaml

@@ -1,25 +1,22 @@
 {{- $values := .Values }}
-{{- $namespace := ( printf "ix-%s" .Release.Name ) }}
-{{- if or ( not .Values.ingressClass.enabled ) ( and ( .Values.ingressClass.enabled ) ( .Values.ingressClass.isDefaultClass ) ) }}
-{{- $namespace = "default" }}
-{{- end }}
+
 ---
-apiVersion: traefik.containo.us/v1alpha1
+apiVersion: traefik.io/v1alpha1
 kind: Middleware
 metadata:
-  name: tc-nextcloud-redirectregex-dav
-  namespace: {{ $namespace }}
+  name: {{ ternary (printf "%v-%v" $.Release.Name "tc-nextcloud-redirectregex-dav") "tc-nextcloud-redirectregex-dav" $.Values.ingressClass.enabled }}
+  namespace: tc-system
 spec:
   redirectRegex:
     regex: "https://(.*)/.well-known/(card|cal)dav"
     replacement: "https://${1}/remote.php/dav/"
 ---
-apiVersion: traefik.containo.us/v1alpha1
+apiVersion: traefik.io/v1alpha1
 kind: Middleware
 metadata:
-  name: tc-nextcloud-chain
-  namespace: {{ $namespace }}
+  name: {{ ternary (printf "%v-%v" $.Release.Name "tc-nextcloud-chain") "tc-nextcloud-chain" $.Values.ingressClass.enabled }}
+  namespace: tc-system
 spec:
   chain:
     middlewares:
-    - name: tc-nextcloud-redirectregex-dav
+    - name: {{ ternary (printf "%v-%v" $.Release.Name "tc-nextcloud-redirectregex-dav") "tc-nextcloud-redirectregex-dav" $.Values.ingressClass.enabled }}

charts/enterprise/traefik/templates/middlewares/theme-park.yaml

@@ -1,16 +1,13 @@
 {{- $values := .Values }}
-{{- $namespace := ( printf "ix-%s" .Release.Name ) }}
-{{- if or ( not .Values.ingressClass.enabled ) ( and ( .Values.ingressClass.enabled ) ( .Values.ingressClass.isDefaultClass ) ) }}
-{{- $namespace = "default" }}
-{{- end }}
+
 {{- range $index, $middlewareData := .Values.middlewares.themePark }}
 
 ---
-apiVersion: traefik.containo.us/v1alpha1
+apiVersion: traefik.io/v1alpha1
 kind: Middleware
 metadata:
-  name: {{ $middlewareData.name }}
-  namespace: {{ $namespace }}
+  name: {{ ternary (printf "%v-%v" $.Release.Name $middlewareData.name) $middlewareData.name $.Values.ingressClass.enabled }}
+  namespace: tc-system
 spec:
   plugin:
     traefik-themepark:

charts/enterprise/traefik/values.yaml

@@ -1,8 +1,9 @@
 image:
   repository: tccr.io/truecharts/traefik
-  tag: 2.9.10@sha256:53a8cc0ea5d6fb681aa1e39864fbf0d1ecec8fab3547df4a59f68989bdf10925
+  tag: 2.10.1@sha256:049aece2d3e7eddabed1e2e4c4bd03ceba372d3b9f461386b262b6cb69369fcf
   pullPolicy: IfNotPresent
-
+manifestManager:
+  enabled: true
 workload:
   main:
     replicas: 2
@@ -290,8 +291,8 @@ rbac:
         verbs:
           - update
       - apiGroups:
-          - traefik.io
           - traefik.containo.us
+          - traefik.io
         resources:
           - middlewares
           - middlewaretcps
@@ -413,5 +414,3 @@ portal:
   open:
     enabled: true
     path: /dashboard/
-    override:
-      protocol: http

charts/enterprise/vaultwarden/Chart.yaml

@@ -3,7 +3,7 @@ appVersion: "1.28.1"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 12.9.2
+    version: 12.10.4
 deprecated: false
 description: Unofficial Bitwarden compatible server written in Rust
 home: https://truecharts.org/charts/enterprise/vaultwarden
@@ -25,7 +25,7 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/enterprise/vaultwarden
   - https://github.com/dani-garcia/vaultwarden
 type: application
-version: 20.0.25
+version: 20.0.28
 annotations:
   truecharts.org/catagories: |
     - security

charts/enterprise/vaultwarden/values.yaml

@@ -2,7 +2,8 @@ image:
   repository: tccr.io/truecharts/vaultwarden
   pullPolicy: IfNotPresent
   tag: 1.28.1@sha256:b8e2476d869797abb514848b256e9e4a8591bffac44cf6574c061ec56aea6dbd
-
+manifestManager:
+  enabled: true
 service:
   main:
     ports:

charts/incubator/authentik/Chart.yaml

@@ -13,7 +13,7 @@ dependencies:
     repository: https://deps.truecharts.org
     version: 5.0.33
 description: authentik is an open-source Identity Provider focused on flexibility and versatility.
-home: https://truecharts.org/charts/stable/authentik
+home: https://truecharts.org/charts/incubator/authentik
 icon: https://truecharts.org/img/hotlink-ok/chart-icons/authentik.png
 keywords:
   - authentik
@@ -24,10 +24,10 @@ maintainers:
     url: https://truecharts.org
 name: authentik
 sources:
-  - https://github.com/truecharts/charts/tree/master/charts/stable/authentik
+  - https://github.com/truecharts/charts/tree/master/charts/incubator/authentik
   - https://github.com/goauthentik/authentik
   - https://goauthentik.io/docs/
-version: 10.0.46
+version: 11.0.0
 annotations:
   truecharts.org/catagories: |
     - authentication