feat(incubator): Move appsmith to unstable (#16583)

**Description**
<!--
Please include a summary of the change and which issue is fixed. Please
also include relevant motivation and context. List any dependencies that
are required for this change.
-->
⚒️ Fixes  # <!--(issue)-->

**⚙️ Type of change**

- [ ] ⚙️ Feature/App addition
- [ ] 🪛 Bugfix
- [ ] ⚠️ Breaking change (fix or feature that would cause existing
functionality to not work as expected)
- [ ] 🔃 Refactor of current code

**🧪 How Has This Been Tested?**
<!--
Please describe the tests that you ran to verify your changes. Provide
instructions so we can reproduce. Please also list any relevant details
for your test configuration
-->

**📃 Notes:**
<!-- Please enter any other relevant information here -->

**✔️ Checklist:**

- [ ] ⚖️ My code follows the style guidelines of this project
- [ ] 👀 I have performed a self-review of my own code
- [ ] #️⃣ I have commented my code, particularly in hard-to-understand
areas
- [ ] 📄 I have made corresponding changes to the documentation
- [ ] ⚠️ My changes generate no new warnings
- [ ] 🧪 I have added tests to this description that prove my fix is
effective or that my feature works
- [ ] ⬆️ I increased versions for any altered app according to semantic
versioning

**➕ App addition**

If this PR is an app addition please make sure you have done the
following.

- [ ] 🪞 I have opened a PR on
[truecharts/containers](https://github.com/truecharts/containers) adding
the container to TrueCharts mirror repo.
- [ ] 🖼️ I have added an icon in the Chart's root directory called
`icon.png`

---

_Please don't blindly check all the boxes. Read them and only check
those that apply.
Those checkboxes are there for the reviewer to see what is this all
about and
the status of this PR with a quick glance._

.all-contributorsrc

@@ -2072,6 +2072,70 @@
       "contributions": [
         "doc"
       ]
+    },
+    {
+      "login": "jndeverteuil",
+      "name": "Julien Nicolas de Verteuil",
+      "avatar_url": "https://avatars.githubusercontent.com/u/6644855?v=4",
+      "profile": "https://github.com/jndeverteuil",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "gabrieldonadel",
+      "name": "Gabriel Donadel Dall'Agnol",
+      "avatar_url": "https://avatars.githubusercontent.com/u/11707729?v=4",
+      "profile": "https://github.com/gabrieldonadel",
+      "contributions": [
+        "doc"
+      ]
+    },
+    {
+      "login": "jon-stumpf",
+      "name": "Jon S. Stumpf",
+      "avatar_url": "https://avatars.githubusercontent.com/u/7144996?v=4",
+      "profile": "https://github.com/jon-stumpf",
+      "contributions": [
+        "doc"
+      ]
+    },
+    {
+      "login": "Tanguille",
+      "name": "Tanguille",
+      "avatar_url": "https://avatars.githubusercontent.com/u/91473554?v=4",
+      "profile": "https://github.com/Tanguille",
+      "contributions": [
+        "doc"
+      ]
+    },
+    {
+      "login": "Plinsboorg",
+      "name": "Dennis",
+      "avatar_url": "https://avatars.githubusercontent.com/u/42300339?v=4",
+      "profile": "https://github.com/Plinsboorg",
+      "contributions": [
+        "bug",
+        "doc"
+      ]
+    },
+    {
+      "login": "TheIceCreamTroll",
+      "name": "TheIceCreamTroll",
+      "avatar_url": "https://avatars.githubusercontent.com/u/33820904?v=4",
+      "profile": "https://github.com/TheIceCreamTroll",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "atanaspam",
+      "name": "Atanas Pamukchiev",
+      "avatar_url": "https://avatars.githubusercontent.com/u/9085090?v=4",
+      "profile": "https://github.com/atanaspam",
+      "contributions": [
+        "code"
+      ]
     }
   ],
   "contributorsPerLine": 7,

.github/README.md

@@ -48,7 +48,7 @@ For big changes we do have a roadmap, every spot on the roadmap is synced to a T
 
 **Restructure of the Project - TrueNAS SCALE "Bluefin" 22.xx ALPHA 1**
 
-_The current project is hitting internal performance issues, for this reason we need to rework the structure and split some parts of the project into seperate repositories._
+_The current project is hitting internal performance issues, for this reason we need to rework the structure and split some parts of the project into separate repositories._
 
 <br />
 
@@ -60,7 +60,7 @@ _The shared Common (chart) basis, used by all our Charts, needs some significant
 
 **Increased test coverage - TrueNAS SCALE "Bluefin" 22.xx BETA 1**
 
-_With most parts of our project somewhat cleaned up, we need to work on increasing the coverage of our test system. Our unittests should cover all features and we should also take upgrades into account when testing Chart changes_
+_With most parts of our project somewhat cleaned up, we need to work on increasing the coverage of our test system. Our unit tests should cover all features and we should also take upgrades into account when testing Chart changes_
 
 <br />
 
@@ -124,7 +124,7 @@ A lot of our work is based on the great effort of others. We would love to exten
 ## Contributors ✨
 
 <!-- ALL-CONTRIBUTORS-BADGE:START - Do not remove or modify this section -->
-[![All Contributors](https://img.shields.io/badge/all_contributors-222-orange.svg?style=for-the-badge)](#contributors)
+[![All Contributors](https://img.shields.io/badge/all_contributors-229-orange.svg?style=for-the-badge)](#contributors)
 <!-- ALL-CONTRIBUTORS-BADGE:END -->
 
 Thanks goes to these wonderful people ([emoji key](https://allcontributors.org/docs/en/emoji-key)):
@@ -421,6 +421,15 @@ Thanks goes to these wonderful people ([emoji key](https://allcontributors.org/d
       <td align="center" valign="top" width="14.28%"><a href="https://github.com/sshcherbinin"><img src="https://avatars.githubusercontent.com/u/92396963?v=4?s=100" width="100px;" alt="Serhii Shcherbinin"/><br /><sub><b>Serhii Shcherbinin</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=sshcherbinin" title="Code">💻</a></td>
       <td align="center" valign="top" width="14.28%"><a href="https://github.com/qraynaud"><img src="https://avatars.githubusercontent.com/u/65991?v=4?s=100" width="100px;" alt="Quentin Raynaud"/><br /><sub><b>Quentin Raynaud</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3Aqraynaud" title="Bug reports">🐛</a></td>
       <td align="center" valign="top" width="14.28%"><a href="http://fachschaften.org"><img src="https://avatars.githubusercontent.com/u/22835?v=4?s=100" width="100px;" alt="Felix Schäfer"/><br /><sub><b>Felix Schäfer</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=thegcat" title="Documentation">📖</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/jndeverteuil"><img src="https://avatars.githubusercontent.com/u/6644855?v=4?s=100" width="100px;" alt="Julien Nicolas de Verteuil"/><br /><sub><b>Julien Nicolas de Verteuil</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=jndeverteuil" title="Code">💻</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/gabrieldonadel"><img src="https://avatars.githubusercontent.com/u/11707729?v=4?s=100" width="100px;" alt="Gabriel Donadel Dall'Agnol"/><br /><sub><b>Gabriel Donadel Dall'Agnol</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=gabrieldonadel" title="Documentation">📖</a></td>
+    </tr>
+    <tr>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/jon-stumpf"><img src="https://avatars.githubusercontent.com/u/7144996?v=4?s=100" width="100px;" alt="Jon S. Stumpf"/><br /><sub><b>Jon S. Stumpf</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=jon-stumpf" title="Documentation">📖</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/Tanguille"><img src="https://avatars.githubusercontent.com/u/91473554?v=4?s=100" width="100px;" alt="Tanguille"/><br /><sub><b>Tanguille</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=Tanguille" title="Documentation">📖</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/Plinsboorg"><img src="https://avatars.githubusercontent.com/u/42300339?v=4?s=100" width="100px;" alt="Dennis"/><br /><sub><b>Dennis</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3APlinsboorg" title="Bug reports">🐛</a> <a href="https://github.com/truecharts/charts/commits?author=Plinsboorg" title="Documentation">📖</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/TheIceCreamTroll"><img src="https://avatars.githubusercontent.com/u/33820904?v=4?s=100" width="100px;" alt="TheIceCreamTroll"/><br /><sub><b>TheIceCreamTroll</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=TheIceCreamTroll" title="Code">💻</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/atanaspam"><img src="https://avatars.githubusercontent.com/u/9085090?v=4?s=100" width="100px;" alt="Atanas Pamukchiev"/><br /><sub><b>Atanas Pamukchiev</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=atanaspam" title="Code">💻</a></td>
     </tr>
   </tbody>
 </table>

.github/SUPPORT.md

@@ -12,19 +12,37 @@ This document highlights which versions of TrueCharts (or rather branches), supp
 
 We also document which versions of TrueNAS will receive TrueCharts updates and for which versions we are accepting bug reports.
 
-### Supported Versions
+### Supported Versions of TrueNAS SCALE
 
-| TrueNAS version  | Branch   | Supported with updates | Accepting Support tickets | Accepting Bug Reports | Notes                                                                                                          |
-| ---------------- | -------- | ---------------------- | ------------------------- | --------------------- | -------------------------------------------------------------------------------------------------------------- |
-| 22.02.4 or prior | `master` | :x:                    | :x:                       | :x:                   | Advised to update to 22.12.2 release of [TrueNAS SCALE](https://www.truenas.com/docs/scale/scalereleasenotes/) |
-| 22.12.0          | `master` | :white_check_mark:     | :white_check_mark:        | :white_check_mark:    | Stable Release as of 2022-12-13                                                                                |
-| 22.12.1          | `master` | :white_check_mark:     | :white_check_mark:        | :white_check_mark:    | Stable Release as of 2023-02-21                                                                                |
-| 22.12.2          | `master` | :white_check_mark:     | :white_check_mark:        | :white_check_mark:    | Stable Release as of 2023-04-11                                                                                |
-| 22.12.3          | `master` | :white_check_mark:     | :white_check_mark:        | :white_check_mark:    | Stable Release as of 2023-06-13                                                                                |
-| 22.12.3.1        | `master` | :white_check_mark:     | :white_check_mark:        | :white_check_mark:    | Stable Release as of 2023-06-20                                                                                |
-| 22.12.3.2        | `master` | :white_check_mark:     | :white_check_mark:        | :white_check_mark:    | Stable Release as of 2023-07-05                                                                                |
-| 22.12.3.3        | `master` | :white_check_mark:     | :white_check_mark:        | :white_check_mark:    | Stable Release as of 2023-07-25                                                                                |
-| Nightly          | `master` | :white_check_mark:     | :x:                       | :white_check_mark:    | Please only submit bug reports during codefreeze                                                               |
+| TrueNAS version    | Branch   | Supported with updates | Accepting Support tickets | Accepting Bug Reports | Notes                                                                                          |
+| ------------------ | -------- | ---------------------- | ------------------------- | --------------------- | ---------------------------------------------------------------------------------------------- |
+| 22.12.4.2 or prior | `master` | :x:                    | :x:                       | :x:                   | Update to 23.10.X Supported Version [TrueNAS SCALE](https://www.truenas.com/docs/scale/23.10/) |
+| 23.10.0.1          | `master` | :white_check_mark:     | :x:                       | :x:                   | Update to 23.10.1 [TrueNAS SCALE](https://www.truenas.com/docs/scale/23.10/)                   |
+| 23.10.1            | `master` | :white_check_mark:     | :white_check_mark:        | :white_check_mark:    | Stable Release as of 2023-12-19                                                                |
+| Nightly            | `master` | :white_check_mark:     | :x:                       | :white_check_mark:    | Please only submit bug reports during codefreeze                                               |
+
+## TrueCharts on Talos-OS
+
+Support for Talos-OS with either Rancher or FluxCD are in early alpha.
+
+### Supported Versions of Talos-OS
+
+| Talos-OS version | Branch   | Supported with updates | Accepting Support tickets | Accepting Bug Reports | Notes |
+| ---------------- | -------- | ---------------------- | ------------------------- | --------------------- | ----- |
+| 1.5              | `master` | :white_check_mark:     | :x:                       | :x:                   |       |
+| 1.6              | `master` | :white_check_mark:     | :x:                       | :x:                   |       |
+
+### Supported Versions of FluxCD
+
+| FluxCD version | Branch   | Supported with updates | Accepting Support tickets | Accepting Bug Reports | Notes |
+| -------------- | -------- | ---------------------- | ------------------------- | --------------------- | ----- |
+| 1.2.1 or prior | `master` | :white_check_mark:     | :x:                       | :x:                   |       |
+
+### Rancher Versions of Rancher
+
+| TrueNAS version | Branch   | Supported with updates | Accepting Support tickets | Accepting Bug Reports | Notes |
+| --------------- | -------- | ---------------------- | ------------------------- | --------------------- | ----- |
+| v2.7.9 or prior | `master` | :white_check_mark:     | :x:                       | :x:                   |       |
 
 :::warning Support Guidelines
 

.github/containerscan/allowedlist.yaml

@@ -1 +0,0 @@
-CIS-DI-0006

.github/ct-install.yaml

@@ -11,14 +11,126 @@ chart-dirs:
   - charts/operators
 excluded-charts:
   - charts/dependency/subchart
+  - charts/incubator/alienswarm
+  - charts/incubator/alienswarm-reactivedrop
+  - charts/incubator/arma3
+  - charts/incubator/arma3exilemod
+  - charts/incubator/assettocorsa
+  - charts/incubator/craftopia
+  - charts/incubator/csgo
+  - charts/incubator/cssource
+  - charts/incubator/cstrike1-6
+  - charts/incubator/cstrikeconditionzero
+  - charts/incubator/dayofdefeatsource
+  - charts/incubator/fistfuloffrags
+  - charts/incubator/garrysmod
+  - charts/incubator/halflife2deathmatch
+  - charts/incubator/kerbalspaceprogram-lmp
+  - charts/incubator/left4dead
+  - charts/incubator/mindustry
+  - charts/incubator/neverwinternights-ee
+  - charts/incubator/openttd
+  - charts/incubator/pvk-ii
+  - charts/incubator/quake3
+  - charts/incubator/sdtd
+  - charts/incubator/starmade
+  - charts/incubator/terraria-tshock
+  - charts/incubator/urban-terror
+  - charts/incubator/vintage-story
   - charts/incubator/twingate-connector
   - charts/incubator/docassemble
   - charts/incubator/eco
   - charts/incubator/midarr
   - charts/incubator/orbital-sync
   - charts/incubator/plex-meta-manager
+  - charts/incubator/pushbits-server
   - charts/incubator/telepush
-  - charts/library/common
+  - charts/incubator/alertmanager-bot
+  - charts/incubator/alertmanager-bot
+  - charts/incubator/alertmanager-discord
+  - charts/incubator/amcrest2mqtt
+  - charts/incubator/arksurvivalevolved
+  - charts/incubator/tauticord
+  - charts/incubator/discordgsm
+  - charts/incubator/facebox
+  - charts/incubator/foundryvtt
+  - charts/incubator/heimdall
+  - charts/incubator/mc-router
+  - charts/incubator/multus
+  - charts/incubator/local-ai
+  - charts/incubator/orbital-sync
+  - charts/incubator/plex-meta-manager
+  - charts/incubator/pod-gateway
+  - charts/incubator/promcord
+  - charts/incubator/rdesktop
+  - charts/incubator/reg
+  - charts/incubator/romm
+  - charts/incubator/ser2sock
+  - charts/incubator/storj-node
+  - charts/incubator/tailscale
+  - charts/incubator/webtop
+  - charts/incubator/zalando-postgres-cluster
+  - charts/incubator/zigbee2mqtt
+  - charts/incubator/alertmanager-bot
+  - charts/incubator/alertmanager-discord
+  - charts/incubator/amcrest2mqtt
+  - charts/incubator/arksurvivalevolved
+  - charts/incubator/tauticord
+  - charts/incubator/discordgsm
+  - charts/incubator/facebox
+  - charts/incubator/foundryvtt
+  - charts/incubator/heimdall
+  - charts/incubator/mc-router
+  - charts/incubator/multus
+  - charts/incubator/local-ai
+  - charts/incubator/orbital-sync
+  - charts/incubator/plex-meta-manager
+  - charts/incubator/pod-gateway
+  - charts/incubator/promcord
+  - charts/incubator/rdesktop
+  - charts/incubator/reg
+  - charts/incubator/romm
+  - charts/incubator/ser2sock
+  - charts/incubator/storj-node
+  - charts/incubator/tailscale
+  - charts/incubator/webtop
+  - charts/incubator/zalando-postgres-cluster
+  - charts/incubator/zigbee2mqtt
+  - charts/incubator/adguardhome-sync
+  - charts/stable/adguardhome-sync
+  - charts/stable/alienswarm
+  - charts/stable/alienswarm-reactivedrop
+  - charts/stable/arma3
+  - charts/stable/arma3exilemod
+  - charts/stable/assettocorsa
+  - charts/stable/craftopia
+  - charts/stable/csgo
+  - charts/stable/cssource
+  - charts/stable/cstrike1-6
+  - charts/stable/cstrikeconditionzero
+  - charts/stable/dayofdefeatsource
+  - charts/stable/fistfuloffrags
+  - charts/stable/garrysmod
+  - charts/stable/halflife2deathmatch
+  - charts/stable/kerbalspaceprogram-lmp
+  - charts/stable/left4dead
+  - charts/stable/mindustry
+  - charts/stable/neverwinternights-ee
+  - charts/stable/openttd
+  - charts/stable/pvk-ii
+  - charts/stable/quake3
+  - charts/stable/sdtd
+  - charts/stable/starmade
+  - charts/stable/terraria-tshock
+  - charts/stable/urban-terror
+  - charts/stable/vintage-story
+  - charts/stable/twingate-connector
+  - charts/stable/docassemble
+  - charts/stable/eco
+  - charts/stable/midarr
+  - charts/stable/orbital-sync
+  - charts/stable/plex-meta-manager
+  - charts/stable/telepush
   - charts/stable/alertmanager-bot
   - charts/stable/alertmanager-bot
   - charts/stable/alertmanager-discord
@@ -45,8 +157,40 @@ excluded-charts:
   - charts/stable/webtop
   - charts/stable/zalando-postgres-cluster
   - charts/stable/zigbee2mqtt
+  - charts/stable/alertmanager-bot
+  - charts/stable/alertmanager-discord
+  - charts/stable/amcrest2mqtt
+  - charts/stable/arksurvivalevolved
+  - charts/stable/tauticord
+  - charts/stable/discordgsm
+  - charts/stable/facebox
+  - charts/stable/foundryvtt
+  - charts/stable/heimdall
+  - charts/stable/mc-router
+  - charts/stable/multus
+  - charts/stable/local-ai
+  - charts/stable/orbital-sync
+  - charts/stable/plex-meta-manager
+  - charts/stable/pod-gateway
+  - charts/stable/promcord
+  - charts/stable/rdesktop
+  - charts/stable/reg
+  - charts/stable/romm
+  - charts/stable/ser2sock
+  - charts/stable/storj-node
+  - charts/stable/tailscale
+  - charts/stable/webtop
+  - charts/stable/zalando-postgres-cluster
+  - charts/stable/zigbee2mqtt
 chart-repos:
   - truecharts=https://charts.truecharts.org
   - truecharts-library=https://library-charts.truecharts.org
   - truecharts-deps=https://deps.truecharts.org
   - jetstack=https://charts.jetstack.io
+  - vmwaretanzu=https://vmware-tanzu.github.io/helm-charts
+  - cnpg=https://cloudnative-pg.github.io/charts
+  - metallb=https://metallb.github.io/metallb
+  - prometheus-community=https://prometheus-community.github.io/helm-charts
+  - openebs=https://openebs.github.io/charts
+  - csi-driver-smb=https://raw.githubusercontent.com/kubernetes-csi/csi-driver-smb/master/charts
+  - csi-driver-nfs=https://raw.githubusercontent.com/kubernetes-csi/csi-driver-nfs/master/charts

.github/ct-lint.yaml

@@ -15,3 +15,10 @@ chart-repos:
   - truecharts-library=https://library-charts.truecharts.org
   - truecharts-deps=https://deps.truecharts.org
   - jetstack=https://charts.jetstack.io
+  - vmwaretanzu=https://vmware-tanzu.github.io/helm-charts
+  - cnpg=https://cloudnative-pg.github.io/charts
+  - metallb=https://metallb.github.io/metallb
+  - prometheus-community=https://prometheus-community.github.io/helm-charts
+  - openebs=https://openebs.github.io/charts
+  - csi-driver-smb=https://raw.githubusercontent.com/kubernetes-csi/csi-driver-smb/master/charts
+  - csi-driver-nfs=https://raw.githubusercontent.com/kubernetes-csi/csi-driver-nfs/master/charts

.github/renovate-config.js

@@ -1,23 +0,0 @@
-module.exports = {
-  dryRun: false,
-  username: "truecharts-admin",
-  gitAuthor: "truecharts-admin <bot@truecharts.org>",
-  onboarding: false,
-  platform: "github",
-  repositories: ["truecharts/charts"],
-  packageRules: [
-    {
-      description: "lockFileMaintenance",
-      matchUpdateTypes: [
-        "pin",
-        "digest",
-        "patch",
-        "minor",
-        "major",
-        "lockFileMaintenance",
-      ],
-      dependencyDashboardApproval: false,
-      stabilityDays: 0,
-    },
-  ],
-};

.github/renovate.json5

@@ -6,7 +6,7 @@
   "suppressNotifications": ["prIgnoreNotification"],
   "commitMessageTopic": "{{depName}}",
   "commitMessageExtra": "to {{newVersion}}",
-  "commitMessageSuffix": "",
+  "commitMessageSuffix": "By Renovate",
   "rebaseWhen": "conflicted",
   "prConcurrentLimit": 150,
   "timezone":"Europe/Amsterdam",
@@ -30,33 +30,40 @@
     {
       "datasources": ["helm"],
       "matchManagers": ["helmv3"],
-      "commitMessageTopic": "Helm chart {{depName}}"
+      "commitMessageTopic": "Helm chart {{depName}}",
+      "ignorePaths": ["charts/unstable/**"],
+      "autoApprove": true,
     },
     // global docker datasource settings
-    {
-      "datasources": ["docker"],
-      "matchManagers": ["helm-values"],
-      "enabled": true,
-      "pinDigests": true,
-      "automerge": false,
-      "commitMessageTopic": "container image {{depName}}",
-      "commitMessageExtra": "to {{#if isSingleVersion}}v{{{newVersion}}}{{else}}{{{newValue}}}{{/if}}",
-      "matchUpdateTypes": ["major", "minor", "patch", "digest"],
-    },
     {
       "datasources": ["docker"],
       "enabled": true,
       "pinDigests": true,
       "automerge": false,
+      "autoApprove": true,
       "separateMinorPatch": true,
+      "ignorePaths": ["charts/unstable/**"],
       "commitMessageTopic": "container image {{depName}}",
-      "commitMessageExtra": "to {{#if isSingleVersion}}v{{{newVersion}}}{{else}}{{{newValue}}}{{/if}}",
+      "commitMessageExtra": "to {{#if isSingleVersion}}v{{{newVersion}}}{{else}}{{{newValue}}}{{/if}}@{{newDigestShort}}",
     },
     // Setup datasources for github actions
     {
       "matchManagers": ["github-actions"],
       "excludePackageNames": ["stefanzweifel/git-auto-commit-action"],
+      "labels": ["automerge"],
       "automerge": true,
+      "autoApprove": true,
+    },
+    //
+    // catch to prevent stable updates
+    //
+    {
+      "automerge": false,
+      "labels": ["update/ignored"],
+      "groupName": ["ignored"],
+      "matchPaths": ["charts/unstable/**", "charts/dev/**", "charts/incubator/**", "templates/app/**"],
+      "commitMessageTopic": "Ignored Updates",
+      "autoApprove": false,
     },
     //
     // helm deps
@@ -68,50 +75,31 @@
       "bumpVersion": "major",
       "labels": ["update/helm/dependency/major"],
       "groupName": ["helm dependency major"],
-      "matchPaths": ["charts/dependency/**", "templates/**"],
+      "matchPaths": ["charts/dependency/**"],
+      "autoApprove": false,
+    },
+
+    {
+      "matchDatasources": ["helm"],
+      "automerge": true,
+      "matchUpdateTypes": [
+        "minor",
+      ],
+      "bumpVersion": "minor",
+      "labels": ["update/helm/dependency/minor", "automerge"],
+      "matchPaths": ["charts/dependency/**"],
+      "groupName": "helm dependency minor",
     },
     {
       "matchDatasources": ["helm"],
-      "automerge": false,
+      "automerge": true,
       "matchUpdateTypes": [
-        "minor",
         "patch"
       ],
       "bumpVersion": "patch",
-      "labels": ["update/helm/dependency/non-major", "automerge"],
-      "matchPaths": ["charts/dependency/**", "templates/**"],
-      "groupName": "helm dependency non-major",
-    },
-    //
-    // helm ent and operators
-    //
-    {
-      "matchDatasources": ["helm"],
-      "updateTypes": ["major"],
-      "bumpVersion": "major",
-      "enabled": true,
-      "labels": ["update/helm/general/major"],
-      "groupName": ["helm general major"],
-      "matchPaths": ["charts/enterprise/**", "charts/operators/**"],
-      "schedule": [
-        "before 10pm on tuesday"
-      ],
-    },
-    {
-      "matchDatasources": ["helm"],
-      "automerge": false,
-      "matchUpdateTypes": [
-        "minor",
-        "patch"
-      ],
-      "enabled": true,
-      "bumpVersion": "patch",
-      "labels": ["update/helm/general/non-major", "automerge"],
-      "groupName": "helm general non-major",
-      "matchPaths": ["charts/enterprise/**", "charts/operators/**"],
-      "schedule": [
-        "before 10pm on tuesday"
-      ],
+      "labels": ["update/helm/dependency/patch", "automerge"],
+      "matchPaths": ["charts/dependency/**"],
+      "groupName": "helm dependency patch",
     },
     //
     // helm charts
@@ -120,129 +108,81 @@
       "matchDatasources": ["helm"],
       "updateTypes": ["major"],
       "bumpVersion": "major",
-      "enabled": false,
+      "enabled": true,
       "labels": ["update/helm/general/major"],
+      "automerge": false,
       "groupName": ["helm general major"],
-      "matchPaths": ["charts/incubator/**", "charts/SCALE/**", "charts/dev/**", "charts/stable/**", "templates/app/**"],
+      "matchPaths": ["charts/stable/**", "charts/enterprise/**", "charts/operators/**"],
+      "schedule": [
+        "before 10pm on tuesday"
+      ],
+      "autoApprove": false,
+    },
+    {
+      "matchDatasources": ["helm"],
+      "automerge": true,
+      "enabled": true,
+      "matchUpdateTypes": [
+        "minor"
+      ],
+      "bumpVersion": "minor",
+      "labels": ["update/helm/general/minor", "automerge"],
+      "groupName": "helm general minor",
+      "matchPaths": ["charts/stable/**", "charts/enterprise/**", "charts/operators/**"],
       "schedule": [
         "before 10pm on tuesday"
       ],
     },
     {
       "matchDatasources": ["helm"],
-      "automerge": false,
+      "automerge": true,
       "enabled": true,
       "matchUpdateTypes": [
-        "minor",
-        "patch"
+        "digest",
+        "patch",
+        "pin"
       ],
       "bumpVersion": "patch",
       "labels": ["update/helm/general/non-major", "automerge"],
       "groupName": "helm general non-major",
-      "matchPaths": ["charts/incubator/**", "charts/SCALE/**", "charts/dev/**", "charts/stable/**", "templates/app/**"],
+      "matchPaths": ["charts/stable/**", "charts/enterprise/**", "charts/operators/**"],
       "schedule": [
         "before 10pm on tuesday"
       ],
     },
     //
-    // Tag updates for semantic tags on enterprise and operatorApps
-    //
-    {
-      "matchDatasources": ["docker"],
-      "updateTypes": ["major"],
-      "enabled": true,
-      "bumpVersion": "major",
-      "labels": ["update/docker/enterprise/major"],
-      "matchPaths": ["charts/enterprise/**", "charts/operators/**"],
-    },
-    {
-      "matchDatasources": ["docker"],
-      "automerge": false,
-      "matchUpdateTypes": [
-        "minor",
-      ],
-      "enabled": true,
-      "bumpVersion": "patch",
-      "labels": ["update/docker/enterprise/minor"],
-      "matchPaths": ["charts/enterprise/**", "charts/operators/**"],
-    },
-    {
-      "matchDatasources": ["docker"],
-      "automerge": false,
-      "matchUpdateTypes": [
-        "patch",
-        "digest",
-        "pin",
-      ],
-      "bumpVersion": "patch",
-      "enabled": true,
-      "labels": ["update/docker/enterprise/patch", "automerge"],
-      "matchPaths": ["charts/enterprise/**"],
-    },
-    {
-      "matchDatasources": ["docker"],
-      "automerge": false,
-      "matchUpdateTypes": [
-        "patch",
-        "digest",
-        "pin",
-      ],
-      "bumpVersion": "patch",
-      "enabled": true,
-      "labels": ["update/docker/operator/patch"],
-      "matchPaths": ["charts/operator/**"],
-    },
-    //
-    // Tag updates for semantic tags on incubator and dev charts
-    //
-    {
-      "matchDatasources": ["docker"],
-      "updateTypes": ["major"],
-      "bumpVersion": "minor",
-      "enabled": false,
-      "labels": ["update/docker/incubator/major", "automerge"],
-      "matchPaths": ["charts/incubator/**", "charts/dev/**"],
-    },
-    {
-      "matchDatasources": ["docker"],
-      "automerge": false,
-      "matchUpdateTypes": [
-        "minor",
-        "patch",
-        "digest",
-      ],
-      "bumpVersion": "patch",
-      "enabled": false,
-      "labels": ["update/docker/incubator/non-major", "automerge"],
-      "matchPaths": ["charts/incubator/**", "charts/dev/**"],
-    },
-    {
-      "matchDatasources": ["docker"],
-      "automerge": false,
-      "matchUpdateTypes": [
-        "pin",
-      ],
-      "bumpVersion": "patch",
-      "enabled": true,
-      "labels": ["update/docker/incubator/non-major", "automerge"],
-      "matchPaths": ["charts/incubator/**", "charts/dev/**"],
-    },
-    //
-    // Tag updates for semantic tags on all but enterprise, operator and incubator Apps
+    // Tag updates for semantic tags
     //
     {
       "matchDatasources": ["docker"],
       "updateTypes": ["major"],
       "bumpVersion": "minor",
       "enabled": true,
-      "labels": ["update/docker/general/major", "automerge"],
-      "matchPaths": ["charts/dependency/**", "charts/SCALE/**", "charts/stable/**", "templates/app/**"],
+      "labels": ["update/docker/general/major"],
+      "matchPaths": ["charts/dependency/**", "charts/stable/**", "charts/incubator/**", "charts/enterprise/**", "charts/operators/**"],
+      "schedule": [
+        "before 10pm on monday"
+      ],
+      "autoApprove": false,
     },
     {
       "matchDatasources": ["docker"],
-      "automerge": false,
+      "automerge": true,
       "matchUpdateTypes": [
         "minor",
+      ],
+      "bumpVersion": "minor",
+      "enabled": true,
+      "labels": ["update/docker/general/non-major", "automerge"],
+      "matchPaths": ["charts/dependency/**", "charts/stable/**", "charts/incubator/**", "charts/enterprise/**", "charts/operators/**"],
+      "schedule": [
+        "before 10pm on monday"
+      ],
+    },
+    {
+      "matchDatasources": ["docker"],
+      "automerge": true,
+      "matchUpdateTypes": [
         "patch",
         "digest",
         "pin",
@@ -250,7 +190,10 @@
       "bumpVersion": "patch",
       "enabled": true,
       "labels": ["update/docker/general/non-major", "automerge"],
-      "matchPaths": ["charts/dependency/**", "charts/SCALE/**", "charts/library/**", "charts/stable/**", "templates/app/**"],
+      "matchPaths": ["charts/dependency/**", "charts/stable/**", "charts/incubator/**", "charts/enterprise/**", "charts/operators/**"],
+      "schedule": [
+        "before 10pm on monday"
+      ],
     },
     //
     // Tag semantic version type based on regex
@@ -273,7 +216,7 @@
     {
       "matchDatasources": ["docker"],
       "versioning": "regex:^v(?<major>\\d+)-(?<minor>\\d+)$",
-      "matchPackagePrefixes": ["tccr.io/truecharts/jupyter"],
+      "matchPackagePrefixes": ["jupyter"],
       "groupName": "jupyter",
     },
     {
@@ -284,12 +227,12 @@
     },
     {
       "matchDatasources": ["docker"],
-      "matchPackagePrefixes": ["tccr.io/truecharts/immich"],
+      "matchPackagePrefixes": ["altran1502/immich"],
       "groupName": "immich",
     },
     {
       "matchDatasources": ["docker"],
-      "matchPackagePrefixes": ["tccr.io/truecharts/portainer"],
+      "matchPackagePrefixes": ["portainer"],
       "groupName": "portainer",
     },
     {
@@ -299,9 +242,14 @@
     },
     {
       "matchDatasources": ["docker"],
-      "matchPackagePrefixes": ["tccr.io/truecharts/webtop"],
+      "matchPackagePrefixes": ["lscr.io/linuxserver/webtop"],
       "groupName": "webtop",
     },
+    {
+      "matchDatasources": ["docker"],
+      "matchPackagePrefixes": ["lscr.io/linuxserver/rdesktop"],
+      "groupName": "rdesktop",
+    },
     {
       "matchDatasources": ["docker"],
       "matchPackagePrefixes": ["tccr.io/truecharts/metallb"],
@@ -314,7 +262,7 @@
     },
     {
       "matchDatasources": ["docker"],
-      "matchPackagePrefixes": ["tccr.io/truecharts/vikunja"],
+      "matchPackagePrefixes": ["vikunja"],
       "groupName": "vikunja",
     },
     {
@@ -324,12 +272,12 @@
     },
     {
       "matchDatasources": ["docker"],
-      "matchPackagePrefixes": ["tccr.io/truecharts/bungeecord"],
+      "matchPackagePrefixes": ["itzg/bungeecord"],
       "groupName": "bungeecord",
     },
     {
       "matchDatasources": ["docker"],
-      "matchPackagePrefixes": ["tccr.io/truecharts/minecraft-java"],
+      "matchPackagePrefixes": ["itzg/minecraft-java"],
       "groupName": "minecraft-java",
     },
     {
@@ -349,7 +297,7 @@
     },
     {
       "matchDatasources": ["docker"],
-      "matchPackagePrefixes": ["tccr.io/truecharts/authentik"],
+      "matchPackagePrefixes": ["ghcr.io/goauthentik/"],
       "groupName": "authentik",
     },
     {
@@ -391,6 +339,305 @@
       "matchDatasources": ["docker"],
       "matchPackagePrefixes": ["tccr.io/truecharts/ersatztv"],
       "groupName": "ersatztv",
-    }
+    },
+    // matchPackagePatterns
+    {
+      "matchDatasources": ["docker"],
+      "versioning": "regex:^(?<major>14)\\.(?<minor>\\d+)\\.(?<patch>\\d+)$",
+      "matchPackagePatterns": ["^bitnami/postgresql$"],
+      "automerge": true,
+    },
+    {
+      "matchDatasources": ["docker"],
+      "versioning": "regex:^(?<major>\\d{4})-(?<minor>\\d{2})-(?<patch>\\d{2})$",
+      "matchPackagePatterns": ["^.*oznu\\/homebridge$"],
+      "automerge": true,
+    },
+    {
+      "matchDatasources": ["docker"],
+      "versioning": "regex:^(?<major>\\d+)-(?<minor>\\d+)-(?<patch>\\d+)$",
+      "matchPackagePatterns": ["^jupyter\\/.+$"],
+      "automerge": true,
+    },
+    {
+      "matchDatasources": ["docker"],
+      "versioning": "regex:^(?<major>\\d+)\\.(?<minor>\\d+)\\.(?<patch>\\d+)-ubuntu$",
+      "matchPackagePatterns": ["^zabbix\\/zabbix-.*$"],
+      "automerge": true,
+    },
+    {
+      "matchDatasources": ["docker"],
+      "versioning": "regex:^stable-(?<major>\\d{1})(?<minor>\\d{1})(?<patch>\\d{2}).*$",
+      "matchPackagePatterns": ["^jitsi\\/.*$"],
+      "automerge": true,
+    },
+    {
+      "matchDatasources": ["docker"],
+      "versioning": "regex:^(?<major>\\d+)\\.(?<minor>\\d+)\\.(?<patch>\\d+)$",
+      "matchPackagePatterns": ["^penpot\\/.*$"],
+      "automerge": true,
+    },
+    {
+      "matchDatasources": ["docker"],
+      "versioning": "regex:^\\d*-jammy-(?<variant>.+)-v(?<major>\\d+)\\.(?<minor>\\d+)\\.(?<patch>\\d+)$",
+      "matchPackagePatterns": ["^.+\\/koush\\/scrypted$"],
+      "automerge": true,
+    },
+    {
+      "matchDatasources": ["docker"],
+      "versioning": "regex:^version-(?<major>\\d+)\\.(?<minor>\\d+)\\.(?<patch>\\d+)-.*$",
+      "matchPackagePatterns": ["^.*linuxserver\\/deluge$"],
+      "automerge": true,
+    },
+    // matchPackageNames
+    {
+      "matchDatasources": ["docker"],
+      "versioning": "regex:^(?<major>\\d+)\\.(?<minor>\\d+)\\.(?<patch>\\d+)-postgres-tomcat$",
+      "matchPackageNames": ["xwiki"],
+      "automerge": true,
+    },
+    {
+      "matchDatasources": ["docker"],
+      "versioning": "regex:^version-(?<major>\\d+)\\.(?<minor>\\d+)\\.(?<patch>\\d+)$",
+      "matchPackageNames": ["fireflyiii/core"],
+      "automerge": true,
+    },
+    {
+      "matchDatasources": ["docker"],
+      "versioning": "regex:^v(?<major>\\d+)\\.(?<minor>\\d+)\\.(?<patch>\\d+)-\\d+\\.\\d+\\.\\d+$",
+      "matchPackageNames": ["netboxcommunity/netbox"],
+      "automerge": true,
+    },
+    {
+      "matchDatasources": ["docker"],
+      "versioning": "regex:^(?<major>\\d{2})(?<minor>\\d{2})(?<patch>\\d{2})$",
+      "matchPackageNames": ["photoprism/photoprism"],
+      "automerge": true,
+    },
+    {
+      "matchDatasources": ["docker"],
+      "versioning": "regex:^(?<major>\\d+)\\.(?<minor>\\d+)\\.(?<patch>\\d+)$",
+      "matchPackageNames": ["cloudflare/cloudflared"],
+      "automerge": true,
+    },
+    {
+      "matchDatasources": ["docker"],
+      "versioning": "regex:^version-(?<major>\\d+)\\.(?<minor>\\d+)\\.(?<patch>\\d+)$",
+      "matchPackageNames": ["linuxserver/calibre-web"],
+      "automerge": true,
+    },
+    {
+      "matchDatasources": ["docker"],
+      "versioning": "regex:^version-v(?<major>\\d+)\\.(?<minor>\\d+)\\.(?<patch>\\d+)$",
+      "matchPackageNames": ["linuxserver/heimdall"],
+      "automerge": true,
+    },
+    {
+      "matchDatasources": ["docker"],
+      "versioning": "regex:^postgresql-v(?<major>\\d+)\\.(?<minor>\\d+)\\.(?<patch>\\d+)$",
+      "matchPackageNames": ["ghcr.io/umami-software/umami"],
+      "automerge": true,
+    },
+    {
+      "matchDatasources": ["docker"],
+      "versioning": "regex:^version-v(?<major>\\d+)\\.(?<minor>\\d+)\\.?(?<patch>\\d*)$",
+      "matchPackageNames": ["linuxserver/mylar3"],
+      "automerge": true,
+    },
+    {
+      "matchDatasources": ["docker"],
+      "versioning": "regex:^[a-z0-9]{9}-v(?<major>\\d+)\\.(?<minor>\\d+)\\.(?<patch>\\d+)-go\\d+\\.\\d+\\.\\d+$",
+      "matchPackageNames": ["storjlabs/storagenode"],
+      "automerge": true,
+    },
+    {
+      "matchDatasources": ["docker"],
+      "versioning": "regex:^(?<major>\\d+)\\.(?<minor>\\d+)\\.(?<patch>\\d+)-php8\\.0-apache$",
+      "matchPackageNames": ["joyqi/typecho"],
+      "automerge": true,
+    },
+    {
+      "matchDatasources": ["docker"],
+      "versioning": "regex:^v\\.(?<major>\\d+)\\.(?<minor>\\d+)\\.(?<patch>\\d+)$",
+      "matchPackageNames": ["difegue/lanraragi"],
+      "automerge": true,
+    },
+    {
+      "matchDatasources": ["docker"],
+      "versioning": "regex:^RELEASE\\.(?<major>\\d+)-(?<minor>\\d+)-(?<patch>\\d+)T\\d+-\\d+-\\d+Z$",
+      "matchPackageNames": ["minio/minio"],
+      "automerge": true,
+    },
+    {
+      "matchDatasources": ["docker"],
+      "versioning": "regex:^RELEASE\\.(?<major>\\d+)-(?<minor>\\d+)-(?<patch>\\d+)T\\d+-\\d+-\\d+Z$",
+      "matchPackageNames": ["minio/mc"],
+      "automerge": true,
+    },
+    {
+      "matchDatasources": ["docker"],
+      "versioning": "regex:^apache-(?<major>\\d+)\\.(?<minor>\\d+)\\.?(?<patch>\\d*)-prod$",
+      "matchPackageNames": ["kimai/kimai2"],
+      "automerge": true,
+    },
+    {
+      "matchDatasources": ["docker"],
+      "versioning": "regex:^(?<major>\\d+)-(?<minor>\\d+)-(?<patch>\\d+)$",
+      "matchPackageNames": ["rssbridge/rss-bridge"],
+      "automerge": true,
+    },
+    {
+      "matchDatasources": ["docker"],
+      "versioning": "regex:^(?<major>\\d+)-(?<minor>\\d+)-(?<patch>\\d+)$",
+      "matchPackageNames": ["alexta69/metube"],
+      "automerge": true,
+    },
+    {
+      "matchDatasources": ["docker"],
+      "versioning": "regex:^focal-(?<major>\\d+)\\.(?<minor>\\d+)\\.(?<patch>\\d+)$",
+      "matchPackageNames": ["codeproject/senseai-server"],
+      "automerge": true,
+    },
+    {
+      "matchDatasources": ["docker"],
+      "versioning": "regex:^latest-(?<major>\\d+)-(?<minor>\\d+)-(?<patch>\\d+)$",
+      "matchPackageNames": ["wangqiru/ttrss"],
+      "automerge": true,
+    },
+    {
+      "matchDatasources": ["docker"],
+      "versioning": "regex:^(?<major>\\d+)\\.(?<minor>\\d+)\\.(?<patch>\\d+)(-\\d+)?$",
+      "matchPackageNames": ["kiwix/kiwix-serve"],
+      "automerge": true,
+    },
+    {
+      "matchDatasources": ["docker"],
+      "versioning": "regex:^v(?<major>\\d+)\\.(?<minor>\\d+)\\.(?<patch>\\d+)-omnibus$",
+      "matchPackageNames": ["ghcr.io/analogj/scrutiny"],
+      "automerge": true,
+    },
+    {
+      "matchDatasources": ["docker"],
+      "versioning": "regex:^(?<major>\\d+)-(?<minor>\\d+)-(?<patch>\\d+)$",
+      "matchPackageNames": ["diygod/rsshub"],
+      "automerge": true,
+    },
+    {
+      "matchDatasources": ["docker"],
+      "versioning": "regex:^(?<major>\\d+)\\.(?<minor>\\d+)\\.(?<patch>\\d+)-amd64(nvidia)?$",
+      "matchPackageNames": ["blakeblackshear/frigate"],
+      "automerge": true,
+    },
+    {
+      "matchDatasources": ["docker"],
+      "versioning": "regex:^(?<major>\\d{1,4})\\.(?<minor>\\d+)\\.(?<patch>\\d+)$",
+      "matchPackageNames": ["kopia/kopia"],
+      "automerge": true,
+    },
+    {
+      "matchDatasources": ["docker"],
+      "versioning": "regex:^(?<major>\\d{4})\\.(?<minor>\\d{1,2})\\.(?<patch>\\d{1,2).*$",
+      "matchPackageNames": ["alicevision/meshroom"],
+      "automerge": true,
+    },
+    {
+      "matchDatasources": ["docker"],
+      "versioning": "regex:^(?<major>\\d{4})\\.(?<minor>\\d{1,2})\\.(?<patch>\\d{1,2})$",
+      "matchPackageNames": ["itzg/bungeecord"],
+      "automerge": true,
+    },
+    {
+      "matchDatasources": ["docker"],
+      "versioning": "regex:^java8-(?<major>\\d{4})\\.(?<minor>\\d{1,2})\\.(?<patch>\\d{1,2})$",
+      "matchPackageNames": ["itzg/bungeecord"],
+      "automerge": true,
+    },
+    {
+      "matchDatasources": ["docker"],
+      "versioning": "regex:^java11-(?<major>\\d{4})\\.(?<minor>\\d{1,2})\\.(?<patch>\\d{1,2})$",
+      "matchPackageNames": ["itzg/bungeecord"],
+      "automerge": true,
+    },
+    {
+      "matchDatasources": ["docker"],
+      "versioning": "regex:^java17-(?<major>\\d{4})\\.(?<minor>\\d{1,2})\\.(?<patch>\\d{1,2})$",
+      "matchPackageNames": ["itzg/bungeecord"],
+      "automerge": true,
+    },
+    {
+      "matchDatasources": ["docker"],
+      "versioning": "regex:^(?<major>\\d{4})\\.(?<minor>\d{1,2})\\.(?<patch>\\d{1,2})(-java\\d{1,2}.*)?$",
+      "matchPackageNames": ["itzg/minecraft-server"],
+      "automerge": true,
+    },
+    {
+      "matchDatasources": ["docker"],
+      "versioning": "regex:^(?<major>\\d{4})(?<minor>\\d{2})(?<patch>\\d{2})$",
+      "matchPackageNames": ["ankicommunity/anki-sync-server"],
+      "automerge": true,
+    },
+    {
+      "matchDatasources": ["docker"],
+      "versioning": "regex:^(?<major>\\d+)\\.(?<minor>\\d+)-jdk17$",
+      "matchPackageNames": ["jenkins/jenkins"],
+      "automerge": true,
+    },
+    {
+      "matchDatasources": ["docker"],
+      "versioning": "regex:^x64-v(?<major>\\d*)\\.(?<minor>\\d*)\\.(?<patch>\\d*)$",
+      "matchPackageNames": ["housewrecker/gaps"],
+      "automerge": true,
+    },
+    {
+      "matchDatasources": ["docker"],
+      "versioning": "regex:^(?<major>\\d*)\\.(?<minor>\\d*)\\.(?<patch>\\d*)-\\d*$",
+      "matchPackageNames": ["sameersbn/apt-cacher-ng"],
+      "automerge": true,
+    },
+    {
+      "matchDatasources": ["docker"],
+      "versioning": "regex:^release-(?<major>\\d*)\\.(?<minor>\\d*)$",
+      "matchPackageNames": ["mattermost/mattermost-enterprise-edition"],
+      "automerge": true,
+    },
+    {
+      "matchDatasources": ["docker"],
+      "versioning": "regex:^(?<major>\\d+)\\.(?<minor>\\d+)\\.(?<patch>\\d+)-.+$",
+      "matchPackageNames": ["corentinth/it-tools"],
+      "automerge": true,
+    },
+    //
+    // Version strategies
+    //
+    // Versioning for linuxserver two-three digit container versions
+    {
+      "packagePatterns": ["^linuxserver\\/","^deepquestai\\/"],
+      "versionScheme": "regex:^(?<compatibility>.*?(\\d+\\.)??)(?<major>\\d+)\\.(?<minor>\\d+)\\.?(?<patch>\\d+)?(-r?p?\\d)?$"
+    },
+    {
+      "matchDatasources": [
+        "docker"
+      ],
+      "versioning": "loose",
+      "matchPackageNames": [
+        "ghcr.io/onedr0p/plex",
+        "ghcr.io/onedr0p/qbittorrent",
+        "sirfragalot/hyperion.ng",
+      ],
+    },
+    {
+      "matchDatasources": [
+        "docker"
+      ],
+      "matchPackageNames": [
+        "quay.io/helmpack/chart-releaser",
+        "jnorwood/helm-docs",
+        "quay.io/git-chglog/git-chglog"
+      ],
+      "automerge": false,
+      "matchUpdateTypes": ["major", "minor", "patch", "digest", "pin"],
+      "labels": ["renovate/image", "ci"],
+    },
+
   ]
 }

.github/scripts/build-catalog.sh

@@ -74,7 +74,8 @@ patch_apps() {
     cat ${target}/Chart.yaml | grep "icon" >> catalog/${train}/${chartname}/item.yaml
     sed -i "s|^icon:|icon_url:|g" catalog/${train}/${chartname}/item.yaml
     echo "categories:" >> catalog/${train}/${chartname}/item.yaml
-    cat ${target}/Chart.yaml | yq '.annotations."truecharts.org/catagories"' -r >> catalog/${train}/${chartname}/item.yaml
+    category=$(cat ${target}/Chart.yaml | yq '.annotations."truecharts.org/category"' -r)
+    echo "- $category" >> catalog/${train}/${chartname}/item.yaml
 
     # Generate screenshots
     screenshots=""
@@ -123,6 +124,7 @@ copy_apps() {
 }
 export -f copy_apps
 
+rm -rf charts/unstable
 if [[ -d "charts/${1}" ]]; then
     echo "Start processing charts/${1} ..."
     chartversion=$(cat charts/${1}/Chart.yaml | grep "^version: " | awk -F" " '{ print $2 }')

.github/scripts/check-releasenotes.sh

@@ -1,49 +0,0 @@
-#!/usr/bin/env bash
-
-set -e
-
-# Check if release notes have been changed
-# Usage ./check-releasenotes.sh path
-
-# require yq
-command -v yq >/dev/null 2>&1 || {
-    printf >&2 "%s\n" "yq (https://github.com/mikefarah/yq) is not installed. Aborting."
-    exit 1
-}
-
-# Absolute path of repository
-repository=$(git rev-parse --show-toplevel)
-
-# Allow for a specific chart to be passed in as a argument
-if [ $# -ge 1 ] && [ -n "$1" ]; then
-    root="$1"
-    chart_file="${1}/Chart.yaml"
-    if [ ! -f "$chart_file" ]; then
-        printf >&2 "File %s\n does not exist.\n" "${chart_file}"
-        exit 1
-    fi
-
-    cd $root
-
-    if [ -z "$DEFAULT_BRANCH" ]; then
-      DEFAULT_BRANCH=$(git remote show origin | awk '/HEAD branch/ {print $NF}')
-    fi
-
-    CURRENT=$(cat Chart.yaml | yq e '.annotations."artifacthub.io/changes"' -P -)
-
-    if [ "$CURRENT" == "" ] || [ "$CURRENT" == "null" ]; then
-      printf >&2 "Changelog annotation has not been set in %s!\n" "$chart_file"
-      exit 1
-    fi
-
-    DEFAULT_BRANCH=$(git remote show origin | awk '/HEAD branch/ {print $NF}')
-    ORIGINAL=$(git show origin/$DEFAULT_BRANCH:./Chart.yaml | yq e '.annotations."artifacthub.io/changes"' -P -)
-
-    if [ "$CURRENT" == "$ORIGINAL" ]; then
-      printf >&2 "Changelog annotation has not been updated in %s!\n" "$chart_file"
-      exit 1
-    fi
-else
-    printf >&2 "%s\n" "No chart folder has been specified."
-    exit 1
-fi

.github/scripts/fetch_helm_deps.sh

@@ -1,179 +0,0 @@
-#!/bin/bash
-
-# require go-yq
-command -v go-yq >/dev/null 2>&1 || {
-    printf >&2 "%s\n" "❌ go-yq (https://github.com/mikefarah/yq) is not installed. Aborting."
-    exit 1
-}
-
-# define defaults
-cache_path=${cache_path:-./tgz_cache}
-charts_path=${charts_path:-./charts}
-# Do NOT persist this directory, in order to always have the latest index for this run.
-index_cache=${index_cache:-./index_cache}
-
-mkdir -p "$cache_path"
-
-trains=(
-    "enterprise"
-    "stable"
-    "incubator"
-    "dependency"
-    "operators"
-)
-
-load_gpg_key() {
-echo ""
-echo "⏬ Downloading and Loading TrueCharts pgp Public Key"
-gpg_dir=.cr-gpg
-mkdir -p "$gpg_dir"
-curl --silent https://keybase.io/truecharts/pgp_keys.asc | gpg --dearmor > $gpg_dir/pubring.gpg || echo "❌ Couldn't load  Public Key."
-curl --silent https://cert-manager.io/public-keys/cert-manager-keyring-2021-09-20-1020CF3C033D4F35BAE1C19E1226061C665DF13E.gpg > $gpg_dir/certman.gpg || echo "❌ Couldn't load certman Public Key."
-echo "✅ Public Key loaded successfully..."
-echo ""
-}
-export -f load_gpg_key
-
-download_deps() {
-local train_chart="$1"
-
-# Extract dependencies for the Chart
-deps=$(go-yq '.dependencies' "$charts_path/$train_chart/Chart.yaml")
-# Find how many deps exist, so we can loop through them
-length=$(echo "$deps" | go-yq '. | length')
-
-echo "🤖🔨 Processing <$charts_path/$train_chart>... Dependencies: $length"
-echo ""
-
-for idx in $(eval echo "{0..$length}"); do
-    # Retrieve info for the dep in the current index..
-    curr_dep=$(echo "$deps" | pos="$idx" go-yq '.[env(pos)]')
-
-    if [ ! "$curr_dep" == null ]; then
-        name=$(echo "$curr_dep" | go-yq '.name')
-        version=$(echo "$curr_dep" | go-yq '.version')
-        repo=$(echo "$curr_dep" | go-yq '.repository')
-
-        # Remove http:// or https:// from url to create a dir name
-        repo_dir="${repo#http://}"
-        repo_dir="${repo#https://}"
-
-        echo "**********"
-        echo "🔗 Dependency: $name"
-        echo "🆚 Version: $version"
-        echo "🏠 Repository: $repo"
-        echo ""
-
-        if [ -f "$cache_path/$repo_dir/$name-$version.tgz" ]; then
-            echo "✅ Dependency exists in cache..."
-        else
-            echo "🤷‍♂️ Dependency does not exists in cache..."
-
-            repo_url="$repo/index.yaml"
-            if [ -f "$index_cache/$repo_dir/index.yaml" ]; then
-                echo "✅ Index for <$repo> exists!"
-            else
-                echo "⏬ Index for <$repo> is missing. Downloading from <$repo_url>..."
-
-                mkdir -p $index_cache/$repo_dir
-                wget --quiet "$repo_url" -O "$index_cache/$repo_dir/index.yaml"
-                if [ ! $? ]; then
-                    echo "❌ wget encountered an error..."
-                    exit 1
-                fi
-
-                if [ -f "$index_cache/$repo_dir/index.yaml" ]; then
-                    echo "✅ Downloaded index for <$repo>!"
-                else
-                    echo "❌ Failed to download index for <$repo> from <$repo_url>"
-                    exit 1
-                fi
-            fi
-
-            # At the time of writing this, only 1 url existed (.urls[0]) pointing to the actual tgz.
-            # Extract url from repo_url. It's under .entries.DEP_NAME.urls. We filter the specific version first (.version)
-            dep_url=$(v="$version" n="$name" go-yq '.entries.[env(n)].[] | select (.version == env(v)) | .urls.[0]' "$index_cache/$repo_dir/index.yaml")
-
-            # tmp hotpatch for cert-manager
-            if [[ !  "$dep_url" == "https"* ]]; then
-              dep_url="https://charts.jetstack.io/${dep_url}"
-            fi
-
-            echo ""
-            echo "⏬ Downloading dependency $name-$version from $dep_url..."
-            mkdir -p "$cache_path/$repo_dir"
-            wget --quiet "$dep_url" -P "$cache_path/$repo_dir"
-            wget --quiet "$dep_url.prov" -P "$cache_path/$repo_dir" || echo "failed downloading .prov"
-
-            if [ ! $? ]; then
-                echo "❌ wget encountered an error..."
-              if [[ "$train_chart" =~ incubator\/.* ]]; then
-                  helm dependency build "$charts_path/$train_chart/Chart.yaml" || \
-                  helm dependency update "$charts_path/$train_chart/Chart.yaml"|| exit 1
-              elif [[ "$name" =~ "cert-manager" ]]; then
-                  helm dependency build "$charts_path/$train_chart/Chart.yaml" --verify --keyring $gpg_dir/certman.gpg || \
-                  helm dependency update "$charts_path/$train_chart/Chart.yaml" --verify --keyring $gpg_dir/certman.gpg || exit 1
-              else
-                  helm dependency build "$charts_path/$train_chart/Chart.yaml" --verify --keyring $gpg_dir/pubring.gpg || \
-                  helm dependency update "$charts_path/$train_chart/Chart.yaml" --verify --keyring $gpg_dir/pubring.gpg || exit 1
-              fi
-            fi
-
-            if [ -f "$cache_path/$repo_dir/$name-$version.tgz" ]; then
-                echo "✅ Dependency Downloaded!"
-                if [[ "$name" =~ "cert-manager" ]]; then
-                  helm verify $cache_path/$repo_dir/$name-$version.tgz --keyring $gpg_dir/certman.gpg || \
-                  helm verify $cache_path/$repo_dir/$name-$version.tgz --keyring $gpg_dir/certman.gpg || exit 1
-                elif [[ ! "$train_chart" =~ incubator\/.* ]]; then
-                  echo "Validating dependency signature..."
-                  helm verify $cache_path/$repo_dir/$name-$version.tgz --keyring $gpg_dir/pubring.gpg || \
-                  helm verify $cache_path/$repo_dir/$name-$version.tgz --keyring $gpg_dir/pubring.gpg || exit 1
-                else
-                  echo "Skipping dependency signature verification for $train_chart..."
-                fi
-            else
-                echo "❌ Failed to download dependency"
-                # Try helm dependency build/update or otherwise fail fast if a dep fails to download...
-              if [[ "$train_chart" =~ incubator\/.* ]]; then
-                  helm dependency build "$charts_path/$train_chart/Chart.yaml" || \
-                  helm dependency update "$charts_path/$train_chart/Chart.yaml"|| exit 1
-              elif [[ "$name" =~ "cert-manager" ]]; then
-                  helm dependency build "$charts_path/$train_chart/Chart.yaml" --verify --keyring $gpg_dir/certman.gpg || \
-                  helm dependency update "$charts_path/$train_chart/Chart.yaml" --verify --keyring $gpg_dir/certman.gpg || exit 1
-              else
-                  helm dependency build "$charts_path/$train_chart/Chart.yaml" --verify --keyring $gpg_dir/pubring.gpg || \
-                  helm dependency update "$charts_path/$train_chart/Chart.yaml" --verify --keyring $gpg_dir/pubring.gpg || exit 1
-              fi
-            fi
-        fi
-        echo ""
-
-        mkdir -p "$charts_path/$train_chart/charts"
-        echo "📝 Copying dependency <$name-$version.tgz> to <$charts_path/$train_chart/charts>..."
-        cp "$cache_path/$repo_dir/$name-$version.tgz" "$charts_path/$train_chart/charts"
-
-        if [ -f "$charts_path/$train_chart/charts/$name-$version.tgz" ]; then
-            echo "✅ Dependency copied!"
-            echo ""
-        else
-            echo "❌ Failed to copy dependency"
-            # Try helm dependency build/update or otherwise fail fast if a dep fails to copy...
-            helm dependency build "$charts_path/$train_chart/Chart.yaml" || \
-            helm dependency update "$charts_path/$train_chart/Chart.yaml" || exit 1
-        fi
-    fi
-done
-}
-export -f download_deps
-
-load_gpg_key
-
-if [ -z "$1" ]; then
-  for train in "${trains[@]}"; do
-      for chart in $(ls "$charts_path/$train"); do
-        download_deps "${train}/${chart}"
-      done
-  done
-else
-  download_deps "$1"
-fi

.github/scripts/renovate-releasenotes.sh

@@ -1,52 +0,0 @@
-#!/usr/bin/env bash
-
-set -e
-
-# Check if release notes have been changed
-# Usage ./check-releasenotes.sh path
-
-# require yq
-command -v yq >/dev/null 2>&1 || {
-    printf >&2 "%s\n" "yq (https://github.com/mikefarah/yq) is not installed. Aborting."
-    exit 1
-}
-
-# Allow for a specific chart to be passed in as a argument
-if [ $# -ge 1 ] && [ -n "$1" ]; then
-    root="$1"
-    chart_file="${1}/Chart.yaml"
-    if [ ! -f "$chart_file" ]; then
-        printf >&2 "File %s does not exist.\n" "${chart_file}"
-        exit 1
-    fi
-    cd "${root}"
-
-    if [ -z "$DEFAULT_BRANCH" ]; then
-      DEFAULT_BRANCH=$(git remote show origin | awk '/HEAD branch/ {print $NF}')
-    fi
-
-    printf "Updating changelog annotation for chart %s\n" "$root"
-
-    # Loop over all dependencies in current chart version
-    NEW_DEPENDENCIES=()
-    while IFS='' read -r line; do NEW_DEPENDENCIES+=("$line"); done < <(yq e '.dependencies[].name' -P Chart.yaml | LC_ALL=C sort)
-    OLD_DEPENDENCIES=$(git show "origin/$DEFAULT_BRANCH:./Chart.yaml" | yq e '.dependencies[].name' -P - | LC_ALL=C sort)
-
-    tmpfile=$(mktemp)
-    trap 'rm -f "$tmpfile"' EXIT
-
-    for DEP_NAME in "${NEW_DEPENDENCIES[@]}"
-    do
-      NEW_VERSION=$(yq e ".dependencies[] | select(.name == \"$DEP_NAME\") | .version" -P Chart.yaml)
-      OLD_VERSION=$(git show "origin/$DEFAULT_BRANCH:./Chart.yaml" | yq e ".dependencies[] | select(.name == \"$DEP_NAME\") | .version" -P -)
-      if [ "${NEW_VERSION}" != "${OLD_VERSION}" ]; then
-        printf "%s\n" "- kind: changed" >> "${tmpfile}"
-        printf "  description: Upgraded \`%s\` chart dependency to version \`%s\`.\n" "${DEP_NAME}" "${NEW_VERSION}" >> "${tmpfile}"
-      fi
-    done
-
-    yq eval-all --inplace 'select(fileIndex == 0).annotations."artifacthub.io/changes" = (select(fileIndex == 1) | to_yaml) | select(fileIndex==0)' Chart.yaml "${tmpfile}"
-else
-    printf >&2 "%s\n" "No chart folder has been specified."
-    exit 1
-fi

.github/workflows/catalog-test.yaml

@@ -17,7 +17,7 @@ jobs:
     container:
       image: ghcr.io/truecharts/devcontainer:3.1.10@sha256:c239addf725eb5cedf79517f8089fdafdc32b5270d1893ee87ae6e511b9bcae3
     steps:
-      - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         name: Checkout
         with:
           fetch-depth: 100

.github/workflows/charts-lint.yaml

@@ -22,13 +22,13 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout [master]
-        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           fetch-depth: 1
           ref: master
 
       - name: Checkout [commit]
-        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
@@ -47,12 +47,24 @@ jobs:
         run: |
           pip3 install --no-cache-dir pre-commit yamale yamllint
 
+      - name: Install Helm
+        uses: azure/setup-helm@5119fcb9089d432beecbf79bb2c7915207344b78 # v3
+        with:
+          version: v3.13.2
+
       - name: Prep Helm
         run: |
           helm repo add truecharts https://charts.truecharts.org
           helm repo add truecharts-deps https://deps.truecharts.org
           helm repo add truecharts-library https://library-charts.truecharts.org
           helm repo add jetstack https://charts.jetstack.io
+          helm repo add vmwaretanzu https://vmware-tanzu.github.io/helm-charts
+          helm repo add cnpg https://cloudnative-pg.github.io/charts
+          helm repo add metallb https://metallb.github.io/metallb
+          helm repo add prometheus-community https://prometheus-community.github.io/helm-charts
+          helm repo add  openebs https://openebs.github.io/charts
+          helm repo add  csi-driver-smb https://raw.githubusercontent.com/kubernetes-csi/csi-driver-smb/master/charts
+          helm repo add  csi-driver-nfs https://raw.githubusercontent.com/kubernetes-csi/csi-driver-nfs/master/charts
           helm repo update
 
       - name: Collect changes (branch-based)
@@ -90,9 +102,7 @@ jobs:
           charts_path: "./"
         run: |
           CHANGED=$(echo '${{ steps.list-changed.outputs.CHANGED_CHARTS }}' | jq --raw-output '.[]')
-          for changed in ${CHANGED}; do
-            .github/scripts/fetch_helm_deps.sh "${changed}"
-          done
+          ./charttool deps ${CHANGED}
 
       - name: Run Chart Linting
         continue-on-error: true
@@ -108,7 +118,7 @@ jobs:
       - name: Create/Update comment
         if: steps.list-changed.outputs.detected == 'true'
         continue-on-error: true
-        uses: thollander/actions-comment-pull-request@d61db783da9abefc3437960d0cce08552c7c004f # v2
+        uses: thollander/actions-comment-pull-request@1d3973dc4b8e1399c0620d3f2b1aa5e795465308 # v2
         with:
           filePath: /tmp/lint_result.txt
           comment_tag: lint_results

.github/workflows/charts-release.yaml

@@ -17,13 +17,13 @@ jobs:
       image: ghcr.io/truecharts/devcontainer:3.1.10@sha256:c239addf725eb5cedf79517f8089fdafdc32b5270d1893ee87ae6e511b9bcae3
     steps:
       - name: Checkout
-        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           token: ${{ secrets.BOT_TOKEN }}
           fetch-depth: 1
 
       - name: Checkout Helm-Staging
-        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           fetch-depth: 1
           repository: truecharts/helm-staging
@@ -66,7 +66,7 @@ jobs:
         with:
           setup-tools: |
             helmv3
-          helm: "3.8.0"
+          helm: "3.13.2"
 
       - name: Prep Helm
         run: |
@@ -74,6 +74,9 @@ jobs:
           helm repo add truecharts-library https://library-charts.truecharts.org
           helm repo add truecharts-deps https://deps.truecharts.org
           helm repo add jetstack https://charts.jetstack.io
+          helm repo add vmwaretanzu https://vmware-tanzu.github.io/helm-charts
+          helm repo add cnpg https://cloudnative-pg.github.io/charts
+          helm repo add metallb https://metallb.github.io/metallb
           helm repo update
 
       # Optional step if GPG signing is used
@@ -93,7 +96,7 @@ jobs:
           GPG_PASSPHRASE: "${{ secrets.GPG_PASSPHRASE }}"
 
       - name: Checkout
-        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           token: ${{ secrets.BOT_TOKEN }}
           fetch-depth: 0
@@ -125,7 +128,7 @@ jobs:
           find . -name '*.sh' | xargs chmod +x
 
       - name: Checkout
-        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         if: |
           steps.collect-changes.outputs.changesDetectedAfterTag == 'true'
         with:
@@ -244,7 +247,7 @@ jobs:
           git push
 
       - name: Checkout Catalog
-        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         if: |
           steps.collect-changes.outputs.changesDetectedAfterTag == 'true'
         with:
@@ -260,10 +263,7 @@ jobs:
           steps.collect-changes.outputs.changesDetectedAfterTag == 'true'
         run: |
           CHARTS=(${{ steps.collect-changes.outputs.modifiedChartsAfterTag }})
-          charts_path="charts"
-          for changed in ${CHARTS[@]}; do
-            .github/scripts/fetch_helm_deps.sh "${changed}"
-          done
+          ./charttool deps
           pip install yq
           parthreads=$(($(nproc) * 2))
           parallel -j ${parthreads} .github/scripts/build-catalog.sh '2>&1' ::: ${CHARTS[@]}
@@ -307,7 +307,7 @@ jobs:
           GPG_PASSPHRASE: "${{ secrets.GPG_PASSPHRASE }}"
 
       - name: Run chart-releaser for dependency apps
-        uses: helm/chart-releaser-action@be16258da8010256c6e82849661221415f031968 # v1.5.0
+        uses: helm/chart-releaser-action@a917fd15b20e8b64b94d9158ad54cd6345335584 # v1.6.0
         if: |
           steps.collect-changes.outputs.changesDetectedAfterTag == 'true'
         with:

.github/workflows/charts-test.yaml

@@ -50,7 +50,7 @@ jobs:
       detected6: ${{ steps.list-changed.outputs.detected6 }}
     steps:
       - name: Checkout
-        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
@@ -115,29 +115,27 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
 
-      - name: Install Kubernetes tools
-        uses: yokawasa/action-setup-kube-tools@af4ebb1af1efd30c5bd84a2e9773355ad6362a33 # v0.9.3
+      - name: Install Helm
+        uses: azure/setup-helm@5119fcb9089d432beecbf79bb2c7915207344b78 # v3
         with:
-          setup-tools: |
-            helmv3
-          helm: "3.9.4"
+          version: v3.13.2
 
-      - uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4
+      - uses: actions/setup-python@0a5c61591373683505ea898e09a3ea4f39ef2b9c # v5
         with:
           python-version: "3.11"
 
       - name: Set up chart-testing
-        uses: helm/chart-testing-action@e8788873172cb653a90ca2e819d79d65a66d4e76 # v2.4.0
+        uses: helm/chart-testing-action@e6669bcd63d7cb57cb4380c33043eebe5d111992 # v2.6.1
 
       - name: Create k3d cluster
         uses: nolar/setup-k3d-k3s@v1
         with:
-          version: v1.24
+          version: latest
           # Flags found here https://github.com/k3d-io/k3d
           k3d-args: --k3s-arg --disable=metrics-server@server:*
           github-token: ${{ secrets.GITHUB_TOKEN }}
@@ -152,6 +150,13 @@ jobs:
           helm repo add truecharts-deps https://deps.truecharts.org
           helm repo add truecharts-library https://library-charts.truecharts.org
           helm repo add jetstack https://charts.jetstack.io
+          helm repo add vmwaretanzu https://vmware-tanzu.github.io/helm-charts
+          helm repo add cnpg https://cloudnative-pg.github.io/charts
+          helm repo add metallb https://metallb.github.io/metallb
+          helm repo add prometheus-community https://prometheus-community.github.io/helm-charts
+          helm repo add  openebs https://openebs.github.io/charts
+          helm repo add  csi-driver-smb https://raw.githubusercontent.com/kubernetes-csi/csi-driver-smb/master/charts
+          helm repo add  csi-driver-nfs https://raw.githubusercontent.com/kubernetes-csi/csi-driver-nfs/master/charts
           helm repo update
 
       - name: Add Dependencies
@@ -188,29 +193,27 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
 
-      - name: Install Kubernetes tools
-        uses: yokawasa/action-setup-kube-tools@af4ebb1af1efd30c5bd84a2e9773355ad6362a33 # v0.9.3
+      - name: Install Helm
+        uses: azure/setup-helm@5119fcb9089d432beecbf79bb2c7915207344b78 # v3
         with:
-          setup-tools: |
-            helmv3
-          helm: "3.9.4"
+          version: v3.13.2
 
-      - uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4
+      - uses: actions/setup-python@0a5c61591373683505ea898e09a3ea4f39ef2b9c # v5
         with:
           python-version: "3.11"
 
       - name: Set up chart-testing
-        uses: helm/chart-testing-action@e8788873172cb653a90ca2e819d79d65a66d4e76 # v2.4.0
+        uses: helm/chart-testing-action@e6669bcd63d7cb57cb4380c33043eebe5d111992 # v2.6.1
 
       - name: Create k3d cluster
         uses: nolar/setup-k3d-k3s@v1
         with:
-          version: v1.24
+          version: latest
           # Flags found here https://github.com/k3d-io/k3d
           k3d-args: --k3s-arg --disable=metrics-server@server:*
           github-token: ${{ secrets.GITHUB_TOKEN }}
@@ -219,6 +222,21 @@ jobs:
         run: |
           kubectl taint --all=true nodes node.cloudprovider.kubernetes.io/uninitialized- || true
 
+      - name: Prep Helm
+        run: |
+          helm repo add truecharts https://charts.truecharts.org
+          helm repo add truecharts-deps https://deps.truecharts.org
+          helm repo add truecharts-library https://library-charts.truecharts.org
+          helm repo add jetstack https://charts.jetstack.io
+          helm repo add vmwaretanzu https://vmware-tanzu.github.io/helm-charts
+          helm repo add cnpg https://cloudnative-pg.github.io/charts
+          helm repo add metallb https://metallb.github.io/metallb
+          helm repo add prometheus-community https://prometheus-community.github.io/helm-charts
+          helm repo add  openebs https://openebs.github.io/charts
+          helm repo add  csi-driver-smb https://raw.githubusercontent.com/kubernetes-csi/csi-driver-smb/master/charts
+          helm repo add  csi-driver-nfs https://raw.githubusercontent.com/kubernetes-csi/csi-driver-nfs/master/charts
+          helm repo update
+
       - name: Add Dependencies
         run: |
           if [[ "${{ matrix.chart }}" == "charts/operators/metallb-config" ]]; then
@@ -253,29 +271,27 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
 
-      - name: Install Kubernetes tools
-        uses: yokawasa/action-setup-kube-tools@af4ebb1af1efd30c5bd84a2e9773355ad6362a33 # v0.9.3
+      - name: Install Helm
+        uses: azure/setup-helm@5119fcb9089d432beecbf79bb2c7915207344b78 # v3
         with:
-          setup-tools: |
-            helmv3
-          helm: "3.9.4"
+          version: v3.13.2
 
-      - uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4
+      - uses: actions/setup-python@0a5c61591373683505ea898e09a3ea4f39ef2b9c # v5
         with:
           python-version: "3.11"
 
       - name: Set up chart-testing
-        uses: helm/chart-testing-action@e8788873172cb653a90ca2e819d79d65a66d4e76 # v2.4.0
+        uses: helm/chart-testing-action@e6669bcd63d7cb57cb4380c33043eebe5d111992 # v2.6.1
 
       - name: Create k3d cluster
         uses: nolar/setup-k3d-k3s@v1
         with:
-          version: v1.24
+          version: latest
           # Flags found here https://github.com/k3d-io/k3d
           k3d-args: --k3s-arg --disable=metrics-server@server:*
           github-token: ${{ secrets.GITHUB_TOKEN }}
@@ -284,6 +300,21 @@ jobs:
         run: |
           kubectl taint --all=true nodes node.cloudprovider.kubernetes.io/uninitialized- || true
 
+      - name: Prep Helm
+        run: |
+          helm repo add truecharts https://charts.truecharts.org
+          helm repo add truecharts-deps https://deps.truecharts.org
+          helm repo add truecharts-library https://library-charts.truecharts.org
+          helm repo add jetstack https://charts.jetstack.io
+          helm repo add vmwaretanzu https://vmware-tanzu.github.io/helm-charts
+          helm repo add cnpg https://cloudnative-pg.github.io/charts
+          helm repo add metallb https://metallb.github.io/metallb
+          helm repo add prometheus-community https://prometheus-community.github.io/helm-charts
+          helm repo add  openebs https://openebs.github.io/charts
+          helm repo add  csi-driver-smb https://raw.githubusercontent.com/kubernetes-csi/csi-driver-smb/master/charts
+          helm repo add  csi-driver-nfs https://raw.githubusercontent.com/kubernetes-csi/csi-driver-nfs/master/charts
+          helm repo update
+
       - name: Add Dependencies
         run: |
           if [[ "${{ matrix.chart }}" == "charts/operators/metallb-config" ]]; then
@@ -318,29 +349,27 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
 
-      - name: Install Kubernetes tools
-        uses: yokawasa/action-setup-kube-tools@af4ebb1af1efd30c5bd84a2e9773355ad6362a33 # v0.9.3
+      - name: Install Helm
+        uses: azure/setup-helm@5119fcb9089d432beecbf79bb2c7915207344b78 # v3
         with:
-          setup-tools: |
-            helmv3
-          helm: "3.9.4"
+          version: v3.13.2
 
-      - uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4
+      - uses: actions/setup-python@0a5c61591373683505ea898e09a3ea4f39ef2b9c # v5
         with:
           python-version: "3.11"
 
       - name: Set up chart-testing
-        uses: helm/chart-testing-action@e8788873172cb653a90ca2e819d79d65a66d4e76 # v2.4.0
+        uses: helm/chart-testing-action@e6669bcd63d7cb57cb4380c33043eebe5d111992 # v2.6.1
 
       - name: Create k3d cluster
         uses: nolar/setup-k3d-k3s@v1
         with:
-          version: v1.24
+          version: latest
           # Flags found here https://github.com/k3d-io/k3d
           k3d-args: --k3s-arg --disable=metrics-server@server:*
           github-token: ${{ secrets.GITHUB_TOKEN }}
@@ -349,6 +378,21 @@ jobs:
         run: |
           kubectl taint --all=true nodes node.cloudprovider.kubernetes.io/uninitialized- || true
 
+      - name: Prep Helm
+        run: |
+          helm repo add truecharts https://charts.truecharts.org
+          helm repo add truecharts-deps https://deps.truecharts.org
+          helm repo add truecharts-library https://library-charts.truecharts.org
+          helm repo add jetstack https://charts.jetstack.io
+          helm repo add vmwaretanzu https://vmware-tanzu.github.io/helm-charts
+          helm repo add cnpg https://cloudnative-pg.github.io/charts
+          helm repo add metallb https://metallb.github.io/metallb
+          helm repo add prometheus-community https://prometheus-community.github.io/helm-charts
+          helm repo add  openebs https://openebs.github.io/charts
+          helm repo add  csi-driver-smb https://raw.githubusercontent.com/kubernetes-csi/csi-driver-smb/master/charts
+          helm repo add  csi-driver-nfs https://raw.githubusercontent.com/kubernetes-csi/csi-driver-nfs/master/charts
+          helm repo update
+
       - name: Add Dependencies
         run: |
           if [[ "${{ matrix.chart }}" == "charts/operators/metallb-config" ]]; then
@@ -383,29 +427,27 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
 
-      - name: Install Kubernetes tools
-        uses: yokawasa/action-setup-kube-tools@af4ebb1af1efd30c5bd84a2e9773355ad6362a33 # v0.9.3
+      - name: Install Helm
+        uses: azure/setup-helm@5119fcb9089d432beecbf79bb2c7915207344b78 # v3
         with:
-          setup-tools: |
-            helmv3
-          helm: "3.9.4"
+          version: v3.13.2
 
-      - uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4
+      - uses: actions/setup-python@0a5c61591373683505ea898e09a3ea4f39ef2b9c # v5
         with:
           python-version: "3.11"
 
       - name: Set up chart-testing
-        uses: helm/chart-testing-action@e8788873172cb653a90ca2e819d79d65a66d4e76 # v2.4.0
+        uses: helm/chart-testing-action@e6669bcd63d7cb57cb4380c33043eebe5d111992 # v2.6.1
 
       - name: Create k3d cluster
         uses: nolar/setup-k3d-k3s@v1
         with:
-          version: v1.24
+          version: latest
           # Flags found here https://github.com/k3d-io/k3d
           k3d-args: --k3s-arg --disable=metrics-server@server:*
           github-token: ${{ secrets.GITHUB_TOKEN }}
@@ -414,6 +456,21 @@ jobs:
         run: |
           kubectl taint --all=true nodes node.cloudprovider.kubernetes.io/uninitialized- || true
 
+      - name: Prep Helm
+        run: |
+          helm repo add truecharts https://charts.truecharts.org
+          helm repo add truecharts-deps https://deps.truecharts.org
+          helm repo add truecharts-library https://library-charts.truecharts.org
+          helm repo add jetstack https://charts.jetstack.io
+          helm repo add vmwaretanzu https://vmware-tanzu.github.io/helm-charts
+          helm repo add cnpg https://cloudnative-pg.github.io/charts
+          helm repo add metallb https://metallb.github.io/metallb
+          helm repo add prometheus-community https://prometheus-community.github.io/helm-charts
+          helm repo add  openebs https://openebs.github.io/charts
+          helm repo add  csi-driver-smb https://raw.githubusercontent.com/kubernetes-csi/csi-driver-smb/master/charts
+          helm repo add  csi-driver-nfs https://raw.githubusercontent.com/kubernetes-csi/csi-driver-nfs/master/charts
+          helm repo update
+
       - name: Add Dependencies
         run: |
           if [[ "${{ matrix.chart }}" == "charts/operators/metallb-config" ]]; then
@@ -448,29 +505,27 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
 
-      - name: Install Kubernetes tools
-        uses: yokawasa/action-setup-kube-tools@af4ebb1af1efd30c5bd84a2e9773355ad6362a33 # v0.9.3
+      - name: Install Helm
+        uses: azure/setup-helm@5119fcb9089d432beecbf79bb2c7915207344b78 # v3
         with:
-          setup-tools: |
-            helmv3
-          helm: "3.9.4"
+          version: v3.13.2
 
-      - uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4
+      - uses: actions/setup-python@0a5c61591373683505ea898e09a3ea4f39ef2b9c # v5
         with:
           python-version: "3.11"
 
       - name: Set up chart-testing
-        uses: helm/chart-testing-action@e8788873172cb653a90ca2e819d79d65a66d4e76 # v2.4.0
+        uses: helm/chart-testing-action@e6669bcd63d7cb57cb4380c33043eebe5d111992 # v2.6.1
 
       - name: Create k3d cluster
         uses: nolar/setup-k3d-k3s@v1
         with:
-          version: v1.24
+          version: latest
           # Flags found here https://github.com/k3d-io/k3d
           k3d-args: --k3s-arg --disable=metrics-server@server:*
           github-token: ${{ secrets.GITHUB_TOKEN }}
@@ -479,6 +534,21 @@ jobs:
         run: |
           kubectl taint --all=true nodes node.cloudprovider.kubernetes.io/uninitialized- || true
 
+      - name: Prep Helm
+        run: |
+          helm repo add truecharts https://charts.truecharts.org
+          helm repo add truecharts-deps https://deps.truecharts.org
+          helm repo add truecharts-library https://library-charts.truecharts.org
+          helm repo add jetstack https://charts.jetstack.io
+          helm repo add vmwaretanzu https://vmware-tanzu.github.io/helm-charts
+          helm repo add cnpg https://cloudnative-pg.github.io/charts
+          helm repo add metallb https://metallb.github.io/metallb
+          helm repo add prometheus-community https://prometheus-community.github.io/helm-charts
+          helm repo add  openebs https://openebs.github.io/charts
+          helm repo add  csi-driver-smb https://raw.githubusercontent.com/kubernetes-csi/csi-driver-smb/master/charts
+          helm repo add  csi-driver-nfs https://raw.githubusercontent.com/kubernetes-csi/csi-driver-nfs/master/charts
+          helm repo update
+
       - name: Add Dependencies
         run: |
           if [[ "${{ matrix.chart }}" == "charts/operators/metallb-config" ]]; then

.github/workflows/daily.yaml

@@ -1,397 +0,0 @@
-name: "Chore: Daily Tasks"
-
-on:
-  schedule:
-    - cron: "0 0 * * *"
-  workflow_dispatch:
-
-permissions:
-  issues: write
-  pull-requests: write
-
-concurrency:
-  group: lock
-
-jobs:
-  generate-readme:
-    runs-on: ubuntu-latest
-    name: "Generate readme files"
-    container:
-      image: ghcr.io/truecharts/devcontainer:3.1.10@sha256:c239addf725eb5cedf79517f8089fdafdc32b5270d1893ee87ae6e511b9bcae3
-    steps:
-      - name: Checkout
-        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
-        with:
-          token: ${{ secrets.BOT_TOKEN }}
-          fetch-depth: 1
-
-      - name: Setting repo parent dir as safe safe.directory
-        run: git config --global --add safe.directory "$GITHUB_WORKSPACE"
-
-      - name: generate readme.md
-        shell: bash
-        run: |
-          for train in stable operators SCALE incubator games enterprise develop non-free deprecated dependency core; do
-            for chart in charts/${train}/*; do
-              if [ -d "${chart}" ]; then
-                echo "Generating readme.md for ${train}/${chart}"
-                cp "templates/README.md.tpl" "${chart}/README.md"
-                sed -i "s/TRAINPLACEHOLDER/${train}/" "${chart}/README.md"
-                sed -i "s/CHARTPLACEHOLDER/${chartname}/" "${chart}/README.md"
-              fi
-            done
-          done
-      - name: generate HelmIgnore
-        shell: bash
-        run: |
-          for train in stable operators SCALE incubator games enterprise develop non-free deprecated dependency core; do
-            for chart in charts/${train}/*; do
-              if [ -d "${chart}" ]; then
-                echo "Attempting to sync HelmIgnore file for: ${chartname}"
-                rm -rf ${chart}/.helmignore
-                cp templates/chart/.helmignore ${chart}/
-              fi
-            done
-          done
-
-      - name: Checkout
-        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
-        with:
-          repository: truecharts/website
-          path: website
-          fetch-depth: 1
-          token: ${{ secrets.BOT_TOKEN }}
-
-      - name: Bump and Sync
-        shell: bash
-        run: |
-          # Designed to ensure the appversion in Chart.yaml is in sync with the primary Chart tag if found
-          # Also makes sure that home link is pointing to the correct url
-          sync_tag() {
-            local chart="$1"
-            local chartname="$2"
-            local train="$3"
-            echo "Attempting to sync primary tag with appversion for: ${chartname}"
-            local tag="$(cat ${chart}/values.yaml | grep '^  tag: ' | awk -F" " '{ print $2 }' | head -1)"
-            tag="${tag%%@*}"
-            tag="${tag:-auto}"
-            tag=$(echo $tag | sed "s/release-//g")
-            tag=$(echo $tag | sed "s/release_//g")
-            tag=$(echo $tag | sed "s/version-//g")
-            tag=$(echo $tag | sed "s/version_//g")
-            tag="${tag#*V.}"
-            tag="${tag#*v-}"
-            tag="${tag#*v}"
-            tag="${tag%-*}"
-            tag="${tag:0:10}"
-            tag="${tag%-}"
-            tag="${tag%_}"
-            tag="${tag%.}"
-            echo "Updating tag of ${chartname} to ${tag}..."
-            sed -i -e "s|appVersion: .*|appVersion: \"${tag}\"|" "${chart}/Chart.yaml"
-            echo "Updating icon of ${chartname}..."
-            sed -i -e "s|icon: .*|icon: https:\/\/truecharts.org\/img\/hotlink-ok\/chart-icons\/${chartname}.png|" "${chart}/Chart.yaml"
-            echo "Updating home of ${chartname}..."
-            sed -i -e "s|home: .*|home: https:\/\/truecharts.org\/charts\/${train}\/${chartname}|" "${chart}/Chart.yaml"
-            echo "Attempting to update sources of ${chartname}..."
-            echo "Using go-yq verion: <$(go-yq -V)>"
-            # Get current sources, exluding those that may have been added automatically.
-            curr_sources=$(
-              go-yq '
-                .sources[] |
-                select(
-                  . != "https://github.com/truecharts*" and
-                  . != "https://ghcr*" and
-                  . != "docker.io*" and
-                  . != "https://docker.io*" and
-                  . != "https://hub.docker*" and
-                  . != "https://fleet.*" and
-                  . != "https://github.com/truecharts/containers/tree/master/mirror/*" and
-                  . != "https://public.ecr.aws*" and
-                  . != "https://ocir.io*" and
-                  . != "https://gcr*" and
-                  . != "https://azurecr*" and
-                  . != "https://quay*" and
-                  . != "https://lscr*" and
-                  . != "https://github.com/truecharts/containers*" and
-                  . == "http*"
-                )
-                ' \
-              "${chart}/Chart.yaml"
-            )
-            # Empty sources list in-place
-            go-yq -i 'del(.sources.[])' "${chart}/Chart.yaml"
-            # Add truechart source
-            tcsource="https://github.com/truecharts/charts/tree/master/charts/$train/$chartname" go-yq -i '.sources += env(tcsource)' "${chart}/Chart.yaml"
-            # Get the container image name that was parsed out of the Dockerfile for the website.
-            container=$(cat website/docs/charts/description_list.md | grep "\[${chartname}\]" | cut -f3 -d '|' | grep -v 'Not Found' || echo "")
-            # Convert the container image name to a URL.
-            if [ ! -z "$container" ]; then
-              prefix=""
-              case "$container" in
-                lscr.io/linuxserver/*)
-                  prefix="https://fleet.linuxserver.io/image?name="
-                  container=${container#lscr.io/}
-                  ;;
-                tccr.io/truecharts/*)
-                  prefix="https://github.com/truecharts/containers/tree/master/mirror"
-                  container=${container#tccr.io/truecharts/}
-                  ;;
-                mcr.microsoft.com/*)
-                  prefix=""
-                  ;;
-                public.ecr.aws/*)
-                  prefix="https://gallery.ecr.aws/"
-                  container=${container#public.ecr.aws/}
-                  ;;
-                ghcr.io/*)
-                  prefix="https://"
-                  ;;
-                quay.io/*)
-                  prefix="https://"
-                  ;;
-                gcr.io/*)
-                  prefix="https://"
-                  ;;
-                *.azurecr.io/*)
-                  prefix=""
-                  ;;
-                *.ocir.io/*)
-                  prefix=""
-                  ;;
-                # There have been a number of domains used for the Docker Hub registry over the years.
-                # NOTE:  This is also the default case!
-                docker.io/*|index.docker.io/*|registry-1.docker.io/*|registry.hub.docker.com/*|*)
-                  prefix="https://hub.docker.com/r/"
-                  container=${container#docker.io/}
-                  container=${container#index.docker.io/}
-                  container=${container#registry-1.docker.io/}
-                  container=${container#registry.hub.docker.com/}
-                  # If the image name does not contain a slash it is a Docker Official Image.
-                  if [ "$container" == "${container////}" ]; then
-                    prefix="https://hub.docker.com/_/"
-                  # If the user name is library it is a Docker Official Image.
-                  elif [ "${container%%/*}" == "library" ]; then
-                    prefix="https://hub.docker.com/_/"
-                    container=${container#library/}
-                  fi
-                  # Avoid creating a bad link since an unsupported registry may have been used.
-                  slashes=${container//[^\/]/}
-                  # Bail out if the image name has more than 1 slash.
-                  if [ ${#slashes} -gt 1 ]; then
-                    prefix=""
-                    echo "WARNING: Not assuming '$container' is a Docker Hub image"
-                  fi
-                  ;;
-              esac
-              if [ -n "${prefix}" ]; then
-                container="${prefix}${container}" go-yq -i '.sources += env(container) | .sources |= unique' "${chart}/Chart.yaml"
-              fi
-            fi
-            # Add the rest of the sources
-            while IFS= read -r line; do
-              src="$line" go-yq -i '.sources += env(src)' "${chart}/Chart.yaml" || echo "src set error"
-            done <<< "$curr_sources"
-            echo "Sources of ${chartname} updated!"
-          }
-          export -f sync_tag
-
-          for train in enterprise stable operators incubator dependency; do
-            echo "Correcting Chart.yaml for Train: ${train}..."
-            for chart in $(ls "charts/${train}"); do
-              echo "Correcting Chart.yaml for Chart: ${chart}..."
-              sync_tag "charts/${train}/${chart}" "${chart}" "${train}"
-            done
-          done
-
-      - name: Fix Fixable Pre-Commit issues
-        shell: bash
-        if: inputs.chartChangesDetected == 'true'
-        run: |
-          echo "Running pre-commit test-and-cleanup..."
-          pre-commit run --all ||:
-          # Fix sh files to always be executable
-          find . -name '*.sh' | xargs chmod +x
-
-      - name: Cleanup
-        run: |
-          rm -rf changes.json
-          rm -rf master
-
-      - name: Commit changes
-        run: |
-          git config user.name "TrueCharts-Bot"
-          git config user.email "bot@truecharts.org"
-          git pull
-          git add --all
-          git commit -sm "Commit daily changes" || exit 0
-          git push
-
-  generate-security-reports:
-    runs-on: ubuntu-latest
-    name: "Generate Security Reports"
-    container:
-      image: ghcr.io/truecharts/devcontainer:3.1.10@sha256:c239addf725eb5cedf79517f8089fdafdc32b5270d1893ee87ae6e511b9bcae3
-    steps:
-      - name: Install Kubernetes tools
-        uses: yokawasa/action-setup-kube-tools@af4ebb1af1efd30c5bd84a2e9773355ad6362a33 # v0.9.3
-        with:
-          setup-tools: |
-            helmv3
-          helm: "3.8.0"
-
-      - name: Prep Helm
-        run: |
-          helm repo add truecharts https://charts.truecharts.org
-          helm repo add truecharts-library https://library-charts.truecharts.org
-          helm repo add truecharts-deps https://deps.truecharts.org
-          helm repo update
-
-      - name: Checkout
-        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
-        with:
-          token: ${{ secrets.BOT_TOKEN }}
-          fetch-depth: 1
-
-      - name: Setting repo parent dir as safe safe.directory
-        run: git config --global --add safe.directory "$GITHUB_WORKSPACE"
-
-      - name: Checkout website
-        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
-        with:
-          fetch-depth: 1
-          repository: truecharts/website
-          token: ${{ secrets.BOT_TOKEN }}
-          path: website
-
-      - name: fetch dependencies
-        shell: bash
-        run: |
-          .github/scripts/fetch_helm_deps.sh
-
-      - name: generate security reports
-        shell: bash
-        run: |
-          #!/bin/bash
-          render() {
-              local chart="$1"
-              local chartname="$2"
-              local train="$3"
-              echo "Rendering helm-template for ${chartname}"
-              mkdir -p ${chart}/render
-              helm template ${chart} >> ${chart}/render/app.yaml || echo "Helm template failed..."
-          }
-          helm_sec_scan() {
-              local chart="$1"
-              local chartname="$2"
-              local train="$3"
-              echo "Scanning helm security for ${chartname}"
-              mkdir -p ${chart}/render
-              rm -rf website/docs/charts/${train}/${chartname}/helm-security.md || echo "removing old helm-security file failed..."
-              echo "# Helm Security" >> website/docs/charts/${train}/${chartname}/helm-security.md
-              echo "" >> website/docs/charts/${train}/${chartname}/helm-security.md
-              echo "## Helm-Chart" >> website/docs/charts/${train}/${chartname}/helm-security.md
-              echo "" >> website/docs/charts/${train}/${chartname}/helm-security.md
-              echo "##### Scan Results" >> website/docs/charts/${train}/${chartname}/helm-security.md
-              echo "" >> website/docs/charts/${train}/${chartname}/helm-security.md
-              trivy config --namespaces builtin.kubernetes.* -f template --template "@./templates/trivy-config.tpl" ${chart}/render >> website/docs/charts/${train}/${chartname}/helm-security.md || echo "trivy scan failed..."
-              }
-          container_sec_scan() {
-              local chart="$1"
-              local chartname="$2"
-              local train="$3"
-              echo "Scanning container security for ${chartname}"
-              mkdir -p ${chart}/render
-              rm -rf website/docs/charts/${train}/${chartname}/container-security.md || echo "removing old container-security file failed..."
-              echo "# Container Security" >> website/docs/charts/${train}/${chartname}/container-security.md
-              echo "" >> website/docs/charts/${train}/${chartname}/container-security.md
-              echo "##### Detected Containers" >> website/docs/charts/${train}/${chartname}/container-security.md
-              echo "" >> website/docs/charts/${train}/${chartname}/container-security.md
-              find ${chart}/render/ -name '*.yaml' -type f -exec cat {} \; | grep image: | sed "s/image: //g" | sed "s/\"//g" >> ${chart}/render/containers.tmp
-              cat ${chart}/render/containers.tmp >> website/docs/charts/${train}/${chartname}/container-security.md
-              echo "" >> website/docs/charts/${train}/${chartname}/container-security.md
-              echo "##### Scan Results" >> website/docs/charts/${train}/${chartname}/container-security.md
-              echo "" >> website/docs/charts/${train}/${chartname}/container-security.md
-              for container in $(cat ${chart}/render/containers.tmp | sort | uniq); do
-                if [[ "$container" == *"truecharts/alpine"* || "$container" == *"truecharts/ubuntu"* || "$container" == *"truecharts/kubectl"* ]]; then
-                  echo "Skipping ${container}, as it's a shared common container..."
-                else
-                  echo "**Container: ${container}**" >> website/docs/charts/${train}/${chartname}/container-security.md
-                  echo "" >> website/docs/charts/${train}/${chartname}/container-security.md
-                  trivy image --security-checks vuln -f template --template "@./templates/trivy-container.tpl" ${container} >> website/docs/charts/${train}/${chartname}/container-security.md || echo "trivy container scan failed..."
-                  echo "" >> website/docs/charts/${train}/${chartname}/container-security.md
-                fi
-              done
-              }
-          cleanfiles() {
-              local chart="$1"
-              local chartname="$2"
-              local train="$3"
-              echo "sanitising website output for ${chartname}..."
-              rm -rf ${chart}/render
-              sed -i 's|<br>|<br />|g' website/docs/charts/${train}/${chartname}/helm-security.md ||:
-              sed -i 's|<br>|<br />|g' website/docs/charts/${train}/${chartname}/container-security.md ||:
-              sed -i 's|<hr>|<hr />|g' website/docs/charts/${train}/${chartname}/helm-security.md ||:
-              sed -i 's|<hr>|<hr />|g' website/docs/charts/${train}/${chartname}/container-security.md ||:
-              }
-          for train in enterprise stable operators incubator dependency; do
-            echo "Processing Charts for Train: ${train}..."
-            for chart in $(ls "charts/${train}"); do
-              render "charts/${train}/${chart}" ${chart} ${train} || echo "rendering failed for ${chart}"
-             helm_sec_scan "charts/${train}/${chart}" ${chart} ${train} || echo "helm chart processing failed for ${chart}"
-              if [ ${train} == "enterprise" ]; then
-                container_sec_scan "charts/${train}/${chart}" ${chart} ${train} || echo "container processing failed for ${chart}"
-              fi
-              cleanfiles "charts/${train}/${chart}" ${chart} ${train} || echo "cleaning failed for ${chart}"
-            done
-          done
-          echo "finsihed security scan"
-
-      - name: Commit Website Changes
-        run: |
-          cd website
-          git config user.name "TrueCharts-Bot"
-          git config user.email "bot@truecharts.org"
-          git pull
-          git add --all
-          git commit -sm "Commit released docs for TrueCharts" || exit 0
-          git push
-
-  lock-threads:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: dessant/lock-threads@be8aa5be94131386884a6da4189effda9b14aa21 # v4
-        with:
-          github-token: ${{ secrets.BOT_TOKEN }}
-          issue-inactive-days: "7"
-          exclude-any-issue-labels: ""
-          issue-comment: "This issue is locked to prevent necro-posting on closed issues. Please create a new issue or contact staff on discord of the problem persists"
-          issue-lock-reason: ""
-          pr-inactive-days: "7"
-          pr-comment: "This PR is locked to prevent necro-posting on closed PRs. Please create a issue or contact staff on discord if you want to further discuss this"
-          pr-lock-reason: "resolved"
-          log-output: true
-
-  check-contributors:
-    name: Check Contributors
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout
-        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
-        with:
-          token: ${{ secrets.BOT_TOKEN }}
-          fetch-depth: 1
-
-      - uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # v3
-        with:
-          node-version: 18
-
-      - uses: borales/actions-yarn@97ba8bebfe5b549bb7999261698a52a81fd62f1b # v4.2.0
-        with:
-          cmd: install --frozen-lockfile
-
-      - name: List missing and unknown contributors
-        env:
-          PRIVATE_TOKEN: ${{ secrets.BOT_TOKEN }}
-        run: |
-          awk -F', ' '{ for( i=1; i<=NF; i++ ) print $i }' <<<$(yarn all-contributors check)

.github/workflows/pr-validate.yaml

@@ -17,7 +17,7 @@ jobs:
       addedOrModifiedCharts: ${{ steps.collect-changes.outputs.addedOrModifiedCharts }}
     steps:
       - name: Checkout
-        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
 
       - name: Collect changes
         id: collect-changes
@@ -57,7 +57,7 @@ jobs:
       head-commit-message: ${{ steps.get_head_commit_message.outputs.headCommitMsg }}
     steps:
       - name: Get repo
-        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           ref: ${{ github.event.pull_request.head.sha }}
       - name: verbose head git commit message
@@ -73,7 +73,7 @@ jobs:
       - charts-test
       - charts-lint
       - print_head_msg
-    if: needs.print_head_msg.outputs.head-commit-message == 'Commit bumped Chart Version'
+    if: ${{ contains( needs.print_head_msg.outputs.head-commit-message, 'By Renovate' ) }}
     name: Automerge and Approve build
     runs-on: ubuntu-latest
     steps:

.github/workflows/prune.yaml

@@ -9,7 +9,7 @@ jobs:
     name: "prune old releases"
     steps:
       - name: Checkout
-        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           fetch-depth: 0
       - uses: actions/delete-package-versions@0d39a63126868f5eefaa47169615edd3c0f61e20 # v4

.github/workflows/renovate-bump.yaml

@@ -1,149 +0,0 @@
-name: "Renovate: Bump on Push"
-
-on:
-  push:
-    branches:
-      - "renovate/**"
-    tags-ignore:
-      - "**"
-
-jobs:
-  renovate-bump:
-    name: Get changed Apps
-    runs-on: ubuntu-22.04
-    container:
-      image: ghcr.io/truecharts/devcontainer:3.1.10@sha256:c239addf725eb5cedf79517f8089fdafdc32b5270d1893ee87ae6e511b9bcae3
-    steps:
-      - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
-        name: Checkout
-        with:
-          fetch-depth: 0
-          token: ${{ secrets.BOT_TOKEN }}
-      - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
-        name: Checkout
-        with:
-          fetch-depth: 0
-          ref: master
-          path: master
-
-      - name: Setting repo parent dir as safe safe.directory
-        run: git config --global --add safe.directory "$GITHUB_WORKSPACE"
-
-      - uses: dorny/paths-filter@v2
-        id: filter
-        with:
-          list-files: json
-          filters: |
-            changed:
-            - 'charts/stable/**'
-            - 'charts/incubator/**'
-            - 'charts/SCALE/**'
-            - 'charts/library/**'
-            - 'charts/dependency/**'
-            - 'charts/core/**'
-            - 'charts/enterprise/**'
-            - 'charts/games/**'
-      - name: Filter filter-output
-        run: echo '${{ toJson(steps.filter.outputs) }}' > changes.json
-
-      - name: Bump and Sync
-        shell: bash
-        run: |
-          # Designed to ensure the appversion in Chart.yaml is in sync with the primary Chart tag if found
-          # Also makes sure that home link is pointing to the correct url
-          sync_tag() {
-              local chart="$1"
-              local chartname="$2"
-              local train="$3"
-              echo "Attempting to sync primary tag with appversion for: ${chartname}"
-              local tag="$(cat ${chart}/values.yaml | grep '^  tag: ' | awk -F" " '{ print $2 }' | head -1)"
-              tag="${tag%%@*}"
-              tag="${tag:-auto}"
-              tag=$(echo $tag | sed "s/release-//g")
-              tag=$(echo $tag | sed "s/release_//g")
-              tag=$(echo $tag | sed "s/version-//g")
-              tag=$(echo $tag | sed "s/version_//g")
-              tag="${tag#*V.}"
-              tag="${tag#*v-}"
-              tag="${tag#*v}"
-              tag="${tag%-*}"
-              tag="${tag:0:10}"
-              tag="${tag%-}"
-              tag="${tag%_}"
-              tag="${tag%.}"
-              echo "Updating tag of ${chartname} to ${tag}..."
-              sed -i -e "s|appVersion: .*|appVersion: \"${tag}\"|" "${chart}/Chart.yaml"
-              echo "Updating icon of ${chartname}..."
-              sed -i -e "s|icon: .*|icon: https:\/\/truecharts.org\/img\/hotlink-ok\/chart-icons\/${chartname}.png|" "${chart}/Chart.yaml"
-              echo "Updating home of ${chartname}..."
-              sed -i -e "s|home: .*|home: https:\/\/truecharts.org\/charts\/${train}\/${chartname}|" "${chart}/Chart.yaml"
-              echo "Attempting to update sources of ${chartname}..."
-              echo "Using go-yq verion: <$(go-yq -V)>"
-              # Get all sources (except truecharts)
-              curr_sources=$(go-yq '.sources[] | select(. != "https://github.com/truecharts*")' "${chart}/Chart.yaml")
-              # Empty sources list in-place
-              go-yq -i 'del(.sources.[])' "${chart}/Chart.yaml"
-              # Add truechart source
-              tcsource="https://github.com/truecharts/charts/tree/master/charts/$train/$chartname" go-yq -i '.sources += env(tcsource)' "${chart}/Chart.yaml"
-              # Add the rest of the sources
-              while IFS= read -r line; do
-                src="$line" go-yq -i '.sources += env(src)' "${chart}/Chart.yaml" || echo "src set error"
-              done <<< "$curr_sources"
-              echo "Sources of ${chartname} updated!"
-              }
-          export -f sync_tag
-
-          # The actual script
-          APPS=$(jq --raw-output '.changed_files | fromjson | .[] |= sub("(?<filepath>(?<first_directory>(?<root1>[\/]?)[^\/]+\/)(?<second_directory>(?<root2>[\/]?)[^\/]+\/)(?<third_directory>(?<root3>[\/]?)[^\/]+)(?<extra_paths>.+))"; "\(.third_directory)") | unique' changes.json  |  jq -r '.[]')
-          echo "changed apps: ${APPS[*]}"
-          for chart in ${APPS[*]}
-          do
-            if [[ "${chart}" == '.gitkeep' ]]; then
-              echo "Skipping..."
-              return
-            elif test -f "./charts/stable/${chart}/Chart.yaml"; then
-              train="stable"
-            elif test -f "./charts/incubator/${chart}/Chart.yaml"; then
-              train="incubator"
-            elif test -f "./charts/SCALE/${chart}/Chart.yaml"; then
-              train="SCALE"
-            elif test -f "./charts/library/${chart}/Chart.yaml"; then
-              train="library"
-            elif test -f "./charts/dependency/${chart}/Chart.yaml"; then
-              train="dependency"
-            elif test -f "./charts/core/${chart}/Chart.yaml"; then
-              train="core"
-            elif test -f "./charts/games/${chart}/Chart.yaml"; then
-              train="games"
-            elif test -f "./charts/enterprise/${chart}/Chart.yaml"; then
-              train="enterprise"
-            elif test -f "./charts/operators/${chart}/Chart.yaml"; then
-              train="operators"
-            else
-              train="incubator"
-            fi
-            echo "Comparing versions for ${train}/${chart}"
-            master=$(cat ./master/charts/${train}/${chart}/Chart.yaml | grep "^version")
-            current=$(cat ./charts/${train}/${chart}/Chart.yaml | grep "^version")
-            echo "master version: ${master}"
-            echo "current version: ${current}"
-            if [[ "${master}" != "${current}" ]]; then
-              echo "Version does not have to be bumped"
-            else
-              echo "Bumping patch version for ${train}/${chart}"
-              ./tools/bump.sh patch ./charts/${train}/${chart}
-            fi
-
-            sync_tag "charts/${train}/${chart}" "${chart}" "${train}"
-          done
-      - name: Cleanup
-        run: |
-          rm -rf changes.json
-          rm -rf master
-      - name: Commit and Push new version
-        run: |
-          git config user.name "TrueCharts-Bot"
-          git config user.email "bot@truecharts.org"
-          git add --all
-          git commit -sm "Commit bumped Chart Version" || exit 0
-          git push

.github/workflows/renovate.yml

@@ -1,18 +0,0 @@
-name: Renovate
-on:
-  workflow_dispatch:
-  schedule:
-    - cron: "0 */1 * * *"
-jobs:
-  renovate:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout
-        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0
-        with:
-          token: ${{ secrets.BOT_TOKEN }}
-      - name: Self-hosted Renovate
-        uses: renovatebot/github-action@3cef36a9aba515d8726b491905b3bc766832e221 # v39.0.5
-        with:
-          configurationFile: .github/renovate-config.js
-          token: ${{ secrets.BOT_TOKEN }}

.github/workflows/schedule-sync-labels.yaml

@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           token: ${{ secrets.BOT_TOKEN }}
 

.github/workflows/stale.yaml

@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Check for stale issues and PRs
-        uses: actions/stale@1160a2240286f5da8ec72b1c0816ce2481aabf84 # v8
+        uses: actions/stale@28ca1036281a5e5922ead5184a1bbf96e5fc984e # v9
         with:
           repo-token: ${{ secrets.BOT_TOKEN }}
           days-before-issue-stale: 180

Gemfile

@@ -1,12 +0,0 @@
-# frozen_string_literal: true
-
-source 'https://rubygems.org'
-
-group :test do
-  gem 'm'
-  gem 'minitest'
-  gem 'minitest-implicit-subject'
-  gem 'minitest-reporters'
-  gem 'pry'
-  gem 'ruby-jq'
-end

NOTICE

@@ -1,4 +0,0 @@
-This product includes software developed at
-The K8S-At-Home (https://k8s-at-home.com/).
-
-This Product Contains modified Apache2.0 Licensed software

charts/dependency/clickhouse/Chart.yaml

@@ -1,30 +1,38 @@
+kubeVersion: '>=1.24.0-0'
 apiVersion: v2
-appVersion: "23.8.3.48"
-dependencies:
-  - name: common
-    repository: https://library-charts.truecharts.org
-    version: 14.0.12
-deprecated: false
+name: clickhouse
+version: 9.0.7
+appVersion: 23.11.2.11
 description: ClickHouse is a column-oriented database management system (DBMS) for online analytical processing of queries (OLAP).
 home: https://truecharts.org/charts/dependency/clickhouse
 icon: https://truecharts.org/img/hotlink-ok/chart-icons/clickhouse.png
-keywords:
-  - database
-  - clickhouse
-  - sql
-kubeVersion: ">=1.16.0-0"
-maintainers:
-  - email: info@truecharts.org
-    name: TrueCharts
-    url: https://truecharts.org
-name: clickhouse
+deprecated: false
 sources:
-  - https://github.com/truecharts/charts/tree/master/charts/dependency/clickhouse
-  - https://clickhouse.com/
-type: application
-version: 7.0.11
-annotations:
-  truecharts.org/catagories: |
+    - https://clickhouse.com/
+    - https://github.com/truecharts/charts/tree/master/charts/dependency/clickhouse
+    - https://hub.docker.com/r/clickhouse/clickhouse-server
+maintainers:
+    - name: TrueCharts
+      email: info@truecharts.org
+      url: https://truecharts.org
+keywords:
     - database
-  truecharts.org/SCALE-support: "true"
-  truecharts.org/grade: U
+    - clickhouse
+    - sql
+dependencies:
+    - name: common
+      version: 16.2.9
+      repository: https://library-charts.truecharts.org
+      condition: ""
+      alias: ""
+      tags: []
+      import-values: []
+annotations:
+    max_scale_version: 23.10.2
+    min_scale_version: 23.10.0
+    truecharts.org/SCALE-support: "true"
+    truecharts.org/category: database
+    truecharts.org/max_helm_version: "3.13"
+    truecharts.org/min_helm_version: "3.12"
+    truecharts.org/train: dependency
+type: application

charts/dependency/clickhouse/README.md

@@ -5,7 +5,7 @@
 TrueCharts can be installed as both *normal* Helm Charts or as Apps on TrueNAS SCALE.
 However only installations using the TrueNAS SCALE Apps system are supported.
 
-For more information about this App, please check the docs on the TrueCharts [website](https://truecharts.org/charts/dependency/)
+For more information about this App, please check the docs on the TrueCharts [website](https://truecharts.org/charts/dependency/clickhouse)
 
 **This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/charts/issues/new/choose)**
 

charts/dependency/clickhouse/values.yaml

@@ -1,8 +1,7 @@
 image:
-  repository: tccr.io/truecharts/clickhouse
+  repository: clickhouse/clickhouse-server
   pullPolicy: IfNotPresent
-  tag: v23.8.3.48@sha256:6dfb2322a26e5990b908cc3f49ceee230b241a67e791886ec76965df1a8aff11
-
+  tag: 23.11.2.11@sha256:109fe43e0cdb7716a933ea712ac2f285ecb9acb05e40b016765b5b3c428ca560
 workload:
   main:
     replicas: 1
@@ -28,7 +27,6 @@ workload:
             startup:
               type: http
               path: /ping
-
 securityContext:
   container:
     readOnlyRootFilesystem: false
@@ -41,7 +39,6 @@ securityContext:
     #     - IPC_LOCK
     #     - NET_ADMIN
     #     - SYS_NICE
-
 service:
   main:
     ports:
@@ -49,30 +46,24 @@ service:
         port: 8123
         protocol: http
         targetPort: 8123
-
 persistence:
   data:
     enabled: true
     mountPath: /var/lib/clickhouse
-
 clickhouseDatabase: "test"
 clickhouseUsername: "test"
 clickhouseDefaultAccessManagement: 0
-
 # -- Secret or password
 # One of these options is required, unless used as a dependency for another TrueCharts chart.
 clickhousePassword: ""
 existingSecret: ""
-
 secret:
   credentials:
     enabled: true
     data:
       clickhouse-password: '{{ ( .Values.clickhousePassword | default "empty" ) }}'
-
 portal:
   open:
     enabled: false
-
 manifestManager:
   enabled: false

charts/dependency/kube-state-metrics/Chart.yaml

@@ -1,29 +1,37 @@
+kubeVersion: '>=1.24.0-0'
 apiVersion: v2
-appVersion: "2.10.0"
-dependencies:
-  - name: common
-    repository: https://library-charts.truecharts.org
-    version: 14.0.12
-deprecated: false
+name: kube-state-metrics
+version: 5.0.6
+appVersion: 2.10.1
 description: kube-state-metrics is a simple service that listens to the Kubernetes API server and generates metrics about the state of the objects.
 home: https://truecharts.org/charts/dependency/kube-state-metrics
 icon: https://truecharts.org/img/hotlink-ok/chart-icons/kube-state-metrics.png
-keywords:
-  - prometheus
-  - kube-state-metrics
-  - monitoring
-kubeVersion: ">=1.16.0-0"
-maintainers:
-  - email: info@truecharts.org
-    name: TrueCharts
-    url: https://truecharts.org
-name: kube-state-metrics
+deprecated: false
 sources:
-  - https://github.com/truecharts/charts/tree/master/charts/dependency/kube-state-metrics
-type: application
-version: 3.0.26
+    - https://github.com/truecharts/charts/tree/master/charts/dependency/kube-state-metrics
+    - https://hub.docker.com/r/bitnami/kube-state-metrics
+maintainers:
+    - name: TrueCharts
+      email: info@truecharts.org
+      url: https://truecharts.org
+keywords:
+    - prometheus
+    - kube-state-metrics
+    - monitoring
+dependencies:
+    - name: common
+      version: 16.2.9
+      repository: https://library-charts.truecharts.org
+      condition: ""
+      alias: ""
+      tags: []
+      import-values: []
 annotations:
-  truecharts.org/catagories: |
-    - metrics
-  truecharts.org/SCALE-support: "true"
-  truecharts.org/grade: U
+    max_scale_version: 23.10.2
+    min_scale_version: 23.10.0
+    truecharts.org/SCALE-support: "true"
+    truecharts.org/category: metrics
+    truecharts.org/max_helm_version: "3.13"
+    truecharts.org/min_helm_version: "3.12"
+    truecharts.org/train: dependency
+type: application

charts/dependency/kube-state-metrics/README.md

@@ -5,7 +5,7 @@
 TrueCharts can be installed as both *normal* Helm Charts or as Apps on TrueNAS SCALE.
 However only installations using the TrueNAS SCALE Apps system are supported.
 
-For more information about this App, please check the docs on the TrueCharts [website](https://truecharts.org/charts/dependency/)
+For more information about this App, please check the docs on the TrueCharts [website](https://truecharts.org/charts/dependency/kube-state-metrics)
 
 **This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/charts/issues/new/choose)**
 

charts/dependency/kube-state-metrics/values.yaml

@@ -1,8 +1,7 @@
 image:
-  repository: tccr.io/truecharts/kube-state-metrics
+  repository: bitnami/kube-state-metrics
   pullPolicy: IfNotPresent
-  tag: v2.10.0@sha256:538721a09681e1a5ee190cc348b7a27b0543eb2bade4afa4a2a89e21ca846f9d
-
+  tag: 2.10.1@sha256:9e8a6bbd41c9a5624051d3da5647c3b19e1fec939b9b727e6e24de2035b4b265
 service:
   main:
     ports:
@@ -16,7 +15,6 @@ service:
         enabled: true
         protocol: http
         port: 8081
-
 workload:
   main:
     podSpec:
@@ -51,28 +49,22 @@ workload:
             # - --resources=verticalpodautoscalers
             - --resources=validatingwebhookconfigurations
             - --resources=volumeattachments
-
           probes:
             liveness:
               path: /healthz
               port: main
-
             readiness:
               path: /healthz
               port: main
-
             startup:
               type: tcp
               port: main
-
 podOptions:
   automountServiceAccountToken: true
-
 serviceAccount:
   main:
     enabled: true
     primary: true
-
 rbac:
   main:
     enabled: true
@@ -279,7 +271,10 @@ rbac:
         verbs:
           - list
           - watch
-
+      - apiGroups: ["discovery.k8s.io"]
+        resources:
+          - endpointslices
+        verbs: ["list", "watch"]
 metrics:
   main:
     # -- Enable and configure a Prometheus serviceMonitor for the chart under this key.
@@ -296,18 +291,16 @@ metrics:
       labels: {}
       # -- Configure additionial rules for the chart under this key.
       # @default -- See prometheusrules.yaml
-      rules:
-        []
-        # - alert: UnifiPollerAbsent
-        #   annotations:
-        #     description: Unifi Poller has disappeared from Prometheus service discovery.
-        #     summary: Unifi Poller is down.
-        #   expr: |
-        #     absent(up{job=~".*unifi-poller.*"} == 1)
-        #   for: 5m
-        #   labels:
-        #     severity: critical
-
+      rules: []
+      # - alert: UnifiPollerAbsent
+      #   annotations:
+      #     description: Unifi Poller has disappeared from Prometheus service discovery.
+      #     summary: Unifi Poller is down.
+      #   expr: |
+      #     absent(up{job=~".*unifi-poller.*"} == 1)
+      #   for: 5m
+      #   labels:
+      #     severity: critical
 portal:
   open:
     enabled: false

charts/dependency/mariadb/Chart.yaml

@@ -1,33 +1,41 @@
+kubeVersion: '>=1.24.0-0'
 apiVersion: v2
-appVersion: "11.0.3"
-dependencies:
-  - name: common
-    repository: https://library-charts.truecharts.org
-    version: 14.0.12
-deprecated: false
+name: mariadb
+version: 11.0.7
+appVersion: 11.1.3
 description: Fast, reliable, scalable, and easy to use open-source relational database system.
 home: https://truecharts.org/charts/dependency/mariadb
 icon: https://truecharts.org/img/hotlink-ok/chart-icons/mariadb.png
-keywords:
-  - mariadb
-  - mysql
-  - database
-  - sql
-kubeVersion: ">=1.16.0-0"
-maintainers:
-  - email: info@truecharts.org
-    name: TrueCharts
-    url: https://truecharts.org
-name: mariadb
+deprecated: false
 sources:
-  - https://github.com/truecharts/charts/tree/master/charts/dependency/mariadb
-  - https://github.com/bitnami/bitnami-docker-mariadb
-  - https://github.com/prometheus/mysqld_exporter
-  - https://mariadb.org
-type: application
-version: 9.0.29
-annotations:
-  truecharts.org/catagories: |
+    - https://github.com/prometheus/mysqld_exporter
+    - https://github.com/truecharts/charts/tree/master/charts/dependency/mariadb
+    - https://hub.docker.com/r/bitnami/mariadb
+    - https://mariadb.org
+    - https://github.com/bitnami/bitnami-docker-mariadb
+maintainers:
+    - name: TrueCharts
+      email: info@truecharts.org
+      url: https://truecharts.org
+keywords:
+    - mariadb
+    - mysql
     - database
-  truecharts.org/SCALE-support: "true"
-  truecharts.org/grade: U
+    - sql
+dependencies:
+    - name: common
+      version: 16.2.9
+      repository: https://library-charts.truecharts.org
+      condition: ""
+      alias: ""
+      tags: []
+      import-values: []
+annotations:
+    max_scale_version: 23.10.2
+    min_scale_version: 23.10.0
+    truecharts.org/SCALE-support: "true"
+    truecharts.org/category: database
+    truecharts.org/max_helm_version: "3.13"
+    truecharts.org/min_helm_version: "3.12"
+    truecharts.org/train: dependency
+type: application

charts/dependency/mariadb/README.md

@@ -5,7 +5,7 @@
 TrueCharts can be installed as both *normal* Helm Charts or as Apps on TrueNAS SCALE.
 However only installations using the TrueNAS SCALE Apps system are supported.
 
-For more information about this App, please check the docs on the TrueCharts [website](https://truecharts.org/charts/dependency/)
+For more information about this App, please check the docs on the TrueCharts [website](https://truecharts.org/charts/dependency/mariadb)
 
 **This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/charts/issues/new/choose)**
 

charts/dependency/mariadb/values.yaml

@@ -1,8 +1,7 @@
 image:
-  repository: tccr.io/truecharts/mariadb
+  repository: bitnami/mariadb
   pullPolicy: IfNotPresent
-  tag: v11.0.3@sha256:aeb1d81f269a5c37db7dcdc4dbcd221582f150f5ad15dc21893c6f63c46f5fbc
-
+  tag: 11.1.3@sha256:256bba825841017077b0dcd9fabafd1d0a54dfde957cd4bf71c2cb291b454a25
 workload:
   main:
     podSpec:
@@ -43,43 +42,35 @@ workload:
                 - /bin/bash
                 - -ec
                 - "until /opt/bitnami/scripts/mariadb/healthcheck.sh; do sleep 2; done"
-
 service:
   main:
     ports:
       main:
         port: 3306
         targetPort: 3306
-
 securityContext:
   container:
     readOnlyRootFilesystem: false
     runAsGroup: 0
-
 secret:
   credentials:
     enabled: true
     data:
       mariadb-password: '{{ ( .Values.mariadbPassword | default "empty" ) }}'
       mariadb-root-password: '{{ ( .Values.mariadbRootPassword | default "empty" ) }}'
-
 persistence:
   data:
     enabled: true
     mountPath: "/bitnami/mariadb"
-
 mariadbUsername: "test"
 mariadbDatabase: "test"
 mariadbRootPassword: "testroot"
-
 # -- Secret or password
 # One of these options is required, unless used as a dependency for another TrueCharts chart.
 mariadbPassword: ""
 existingSecret: ""
-
 portal:
   open:
     enabled: false
-
 manifestManager:
   enabled: false

charts/dependency/memcached/Chart.yaml

@@ -1,32 +1,38 @@
+kubeVersion: '>=1.24.0-0'
 apiVersion: v2
-appVersion: "1.6.21"
-dependencies:
-  - name: common
-    repository: https://library-charts.truecharts.org
-    version: 14.0.12
-deprecated: false
+name: memcached
+version: 10.0.7
+appVersion: 1.6.22
 description: Memcached is a memory-backed database caching solution
 home: https://truecharts.org/charts/dependency/memcached
 icon: https://truecharts.org/img/hotlink-ok/chart-icons/memcached.png
-keywords:
-  - memcached
-  - database
-  - cache
-kubeVersion: ">=1.16.0-0"
-maintainers:
-  - email: info@truecharts.org
-    name: TrueCharts
-    url: https://truecharts.org
-name: memcached
+deprecated: false
 sources:
-  - https://github.com/truecharts/charts/tree/master/charts/dependency/memcached
-  - https://github.com/bitnami/bitnami-docker-memcached
-  - http://memcached.org/
-type: application
-version: 8.0.30
-annotations:
-  truecharts.org/catagories: |
+    - https://github.com/bitnami/bitnami-docker-memcached
+    - https://github.com/truecharts/charts/tree/master/charts/dependency/memcached
+    - https://hub.docker.com/r/bitnami/memcached
+maintainers:
+    - name: TrueCharts
+      email: info@truecharts.org
+      url: https://truecharts.org
+keywords:
+    - memcached
     - database
     - cache
-  truecharts.org/SCALE-support: "true"
-  truecharts.org/grade: U
+dependencies:
+    - name: common
+      version: 16.2.9
+      repository: https://library-charts.truecharts.org
+      condition: ""
+      alias: ""
+      tags: []
+      import-values: []
+annotations:
+    max_scale_version: 23.10.2
+    min_scale_version: 23.10.0
+    truecharts.org/SCALE-support: "true"
+    truecharts.org/category: database
+    truecharts.org/max_helm_version: "3.13"
+    truecharts.org/min_helm_version: "3.12"
+    truecharts.org/train: dependency
+type: application

charts/dependency/memcached/README.md

@@ -5,7 +5,7 @@
 TrueCharts can be installed as both *normal* Helm Charts or as Apps on TrueNAS SCALE.
 However only installations using the TrueNAS SCALE Apps system are supported.
 
-For more information about this App, please check the docs on the TrueCharts [website](https://truecharts.org/charts/dependency/)
+For more information about this App, please check the docs on the TrueCharts [website](https://truecharts.org/charts/dependency/memcached)
 
 **This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/charts/issues/new/choose)**
 

charts/dependency/memcached/values.yaml

@@ -1,8 +1,7 @@
 image:
-  repository: tccr.io/truecharts/memcached
+  repository: bitnami/memcached
   pullPolicy: IfNotPresent
-  tag: v1.6.21@sha256:66ac27883febf5687134c4c7c4724437174d704565a3bf5e8ea0038d2f9e7c7b
-
+  tag: 1.6.22@sha256:f7f5768ac781be374fbb550004dfa7755a4d10e66e3811725b3daa6958e636ff
 service:
   main:
     ports:
@@ -10,10 +9,8 @@ service:
         port: 11211
         protocol: tcp
         targetPort: 11211
-
 portal:
   open:
     enabled: false
-
 manifestManager:
   enabled: false

charts/dependency/mongodb/Chart.yaml

@@ -1,31 +1,39 @@
+kubeVersion: '>=1.24.0-0'
 apiVersion: v2
-appVersion: "7.0.2"
-dependencies:
-  - name: common
-    repository: https://library-charts.truecharts.org
-    version: 14.0.12
-deprecated: false
+name: mongodb
+version: 10.0.6
+appVersion: 7.0.4
 description: Fast, reliable, scalable, and easy to use open-source no-sql database system.
 home: https://truecharts.org/charts/dependency/mongodb
 icon: https://truecharts.org/img/hotlink-ok/chart-icons/mongodb.png
-keywords:
-  - mongodb
-  - database
-  - nosql
-kubeVersion: ">=1.16.0-0"
-maintainers:
-  - email: info@truecharts.org
-    name: TrueCharts
-    url: https://truecharts.org
-name: mongodb
+deprecated: false
 sources:
-  - https://github.com/truecharts/charts/tree/master/charts/dependency/mongodb
-  - https://github.com/bitnami/bitnami-docker-mongodb
-  - https://www.mongodb.com
-type: application
-version: 8.0.26
-annotations:
-  truecharts.org/catagories: |
+    - https://www.mongodb.com
+    - https://github.com/bitnami/bitnami-docker-mongodb
+    - https://github.com/truecharts/charts/tree/master/charts/dependency/mongodb
+    - https://hub.docker.com/r/bitnami/mongodb
+maintainers:
+    - name: TrueCharts
+      email: info@truecharts.org
+      url: https://truecharts.org
+keywords:
+    - mongodb
     - database
-  truecharts.org/SCALE-support: "true"
-  truecharts.org/grade: U
+    - nosql
+dependencies:
+    - name: common
+      version: 16.2.9
+      repository: https://library-charts.truecharts.org
+      condition: ""
+      alias: ""
+      tags: []
+      import-values: []
+annotations:
+    max_scale_version: 23.10.2
+    min_scale_version: 23.10.0
+    truecharts.org/SCALE-support: "true"
+    truecharts.org/category: database
+    truecharts.org/max_helm_version: "3.13"
+    truecharts.org/min_helm_version: "3.12"
+    truecharts.org/train: dependency
+type: application

charts/dependency/mongodb/README.md

@@ -5,7 +5,7 @@
 TrueCharts can be installed as both *normal* Helm Charts or as Apps on TrueNAS SCALE.
 However only installations using the TrueNAS SCALE Apps system are supported.
 
-For more information about this App, please check the docs on the TrueCharts [website](https://truecharts.org/charts/dependency/)
+For more information about this App, please check the docs on the TrueCharts [website](https://truecharts.org/charts/dependency/mongodb)
 
 **This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/charts/issues/new/choose)**
 

charts/dependency/mongodb/values.yaml

@@ -1,8 +1,7 @@
 image:
-  repository: tccr.io/truecharts/mongodb
+  repository: bitnami/mongodb
   pullPolicy: IfNotPresent
-  tag: v7.0.2@sha256:6dd833c278dd211f6c8b5aa8cc32de2f886e53c347cb676cc8d8eb1e0de848f3
-
+  tag: 7.0.4@sha256:137b905769fdfce83add50343ceb391726ece52afe6163cb354856c1927dc661
 workload:
   main:
     replicas: 1
@@ -42,7 +41,6 @@ workload:
                     - /bin/bash
                     - -ec
                     - echo "db.runCommand(\"ping\")" | mongosh --host localhost --port 27017 ${MONGODB_DATABASE} --quiet
-
             # -- Redainess probe configuration
             # @default -- See below
             readiness:
@@ -59,7 +57,6 @@ workload:
                     - /bin/bash
                     - -ec
                     - echo "db.runCommand(\"ping\")" | mongosh --host localhost --port 27017 ${MONGODB_DATABASE} --quiet
-
             # -- Startup probe configuration
             # @default -- See below
             startup:
@@ -75,43 +72,35 @@ workload:
                     - /bin/bash
                     - -ec
                     - echo "db.runCommand(\"ping\")" | mongosh --host localhost --port 27017 ${MONGODB_DATABASE} --quiet
-
 service:
   main:
     ports:
       main:
         port: 27017
         targetPort: 27017
-
 securityContext:
   container:
     runAsGroup: 0
     readOnlyRootFilesystem: false
-
 persistence:
   data:
     enabled: true
     mountPath: "/bitnami/mongodb"
-
 mongodbUsername: "test"
 mongodbDatabase: "test"
 mongodbRootPassword: "testroot"
-
 # -- Secret or password
 # One of these options is required, unless used as a dependency for another TrueCharts chart.
 mongodbPassword: ""
 existingSecret: ""
-
 secret:
   credentials:
     enabled: true
     data:
       mongodb-password: '{{ ( .Values.mongodbPassword | default "empty" ) }}'
       mongodb-root-password: '{{ ( .Values.mongodbRootPassword | default "empty" ) }}'
-
 portal:
   open:
     enabled: false
-
 manifestManager:
   enabled: false

charts/dependency/node-exporter/Chart.yaml

@@ -1,29 +1,37 @@
+kubeVersion: '>=1.24.0-0'
 apiVersion: v2
-appVersion: "1.6.1"
-dependencies:
-  - name: common
-    repository: https://library-charts.truecharts.org
-    version: 14.0.12
-deprecated: false
+name: node-exporter
+version: 5.0.6
+appVersion: 1.7.0
 description: Prometheus exporter for hardware and OS metrics exposed by UNIX kernels, with pluggable metric collectors.
 home: https://truecharts.org/charts/dependency/node-exporter
 icon: https://truecharts.org/img/hotlink-ok/chart-icons/node-exporter.png
-keywords:
-  - prometheus
-  - node-exporter
-  - monitoring
-kubeVersion: ">=1.16.0-0"
-maintainers:
-  - email: info@truecharts.org
-    name: TrueCharts
-    url: https://truecharts.org
-name: node-exporter
+deprecated: false
 sources:
-  - https://github.com/truecharts/charts/tree/master/charts/dependency/node-exporter
-type: application
-version: 3.0.29
+    - https://hub.docker.com/r/bitnami/node-exporter
+    - https://github.com/truecharts/charts/tree/master/charts/dependency/node-exporter
+maintainers:
+    - name: TrueCharts
+      email: info@truecharts.org
+      url: https://truecharts.org
+keywords:
+    - prometheus
+    - node-exporter
+    - monitoring
+dependencies:
+    - name: common
+      version: 16.2.9
+      repository: https://library-charts.truecharts.org
+      condition: ""
+      alias: ""
+      tags: []
+      import-values: []
 annotations:
-  truecharts.org/catagories: |
-    - metrics
-  truecharts.org/SCALE-support: "true"
-  truecharts.org/grade: U
+    max_scale_version: 23.10.2
+    min_scale_version: 23.10.0
+    truecharts.org/SCALE-support: "true"
+    truecharts.org/category: metrics
+    truecharts.org/max_helm_version: "3.13"
+    truecharts.org/min_helm_version: "3.12"
+    truecharts.org/train: dependency
+type: application

charts/dependency/node-exporter/README.md

@@ -5,7 +5,7 @@
 TrueCharts can be installed as both *normal* Helm Charts or as Apps on TrueNAS SCALE.
 However only installations using the TrueNAS SCALE Apps system are supported.
 
-For more information about this App, please check the docs on the TrueCharts [website](https://truecharts.org/charts/dependency/)
+For more information about this App, please check the docs on the TrueCharts [website](https://truecharts.org/charts/dependency/node-exporter)
 
 **This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/charts/issues/new/choose)**
 

charts/dependency/node-exporter/values.yaml

@@ -1,15 +1,13 @@
 image:
-  repository: tccr.io/truecharts/node-exporter
+  repository: bitnami/node-exporter
   pullPolicy: IfNotPresent
-  tag: v1.6.1@sha256:c150064746d1155d557663650603ea428eacd22c40da62f2ec3078b4c2ade1ba
-
+  tag: 1.7.0@sha256:f9dcaba4dbae2896cbd5831b1e5b0c955b6e538c8514cff2af44a77177ca2e57
 service:
   main:
     ports:
       main:
         protocol: http
         port: 9910
-
 workload:
   main:
     type: DaemonSet
@@ -29,19 +27,15 @@ workload:
             liveness:
               path: /
               port: main
-
             readiness:
               path: /
               port: main
-
             startup:
               type: tcp
               port: main
-
 podOptions:
   hostNetwork: true
   hostPID: true
-
 persistence:
   host:
     enabled: true
@@ -61,7 +55,6 @@ persistence:
     hostPath: /sys
     mountPath: /hostsys
     readOnly: true
-
 metrics:
   main:
     # -- Enable and configure a Prometheus serviceMonitor for the chart under this key.
@@ -78,18 +71,16 @@ metrics:
       labels: {}
       # -- Configure additionial rules for the chart under this key.
       # @default -- See prometheusrules.yaml
-      rules:
-        []
-        # - alert: UnifiPollerAbsent
-        #   annotations:
-        #     description: Unifi Poller has disappeared from Prometheus service discovery.
-        #     summary: Unifi Poller is down.
-        #   expr: |
-        #     absent(up{job=~".*unifi-poller.*"} == 1)
-        #   for: 5m
-        #   labels:
-        #     severity: critical
-
+      rules: []
+      # - alert: UnifiPollerAbsent
+      #   annotations:
+      #     description: Unifi Poller has disappeared from Prometheus service discovery.
+      #     summary: Unifi Poller is down.
+      #   expr: |
+      #     absent(up{job=~".*unifi-poller.*"} == 1)
+      #   for: 5m
+      #   labels:
+      #     severity: critical
 portal:
   open:
     enabled: false

charts/dependency/redis/Chart.yaml

@@ -1,32 +1,38 @@
+kubeVersion: '>=1.24.0-0'
 apiVersion: v2
-appVersion: "7.2.1"
-dependencies:
-  - name: common
-    repository: https://library-charts.truecharts.org
-    version: 14.0.12
-deprecated: false
+name: redis
+version: 10.0.7
+appVersion: 7.2.3
 description: Open source, advanced key-value store.
 home: https://truecharts.org/charts/dependency/redis
 icon: https://truecharts.org/img/hotlink-ok/chart-icons/redis.png
-keywords:
-  - redis
-  - keyvalue
-  - database
-kubeVersion: ">=1.16.0-0"
-maintainers:
-  - email: info@truecharts.org
-    name: TrueCharts
-    url: https://truecharts.org
-name: redis
+deprecated: false
 sources:
-  - https://github.com/truecharts/charts/tree/master/charts/dependency/redis
-  - https://github.com/bitnami/bitnami-docker-redis
-  - http://redis.io/
-type: application
-version: 8.0.32
-annotations:
-  truecharts.org/catagories: |
+    - https://github.com/truecharts/charts/tree/master/charts/dependency/redis
+    - https://hub.docker.com/r/bitnami/redis
+    - https://github.com/bitnami/bitnami-docker-redis
+maintainers:
+    - name: TrueCharts
+      email: info@truecharts.org
+      url: https://truecharts.org
+keywords:
+    - redis
+    - keyvalue
     - database
-    - cache
-  truecharts.org/SCALE-support: "true"
-  truecharts.org/grade: U
+dependencies:
+    - name: common
+      version: 16.2.9
+      repository: https://library-charts.truecharts.org
+      condition: ""
+      alias: ""
+      tags: []
+      import-values: []
+annotations:
+    max_scale_version: 23.10.2
+    min_scale_version: 23.10.0
+    truecharts.org/SCALE-support: "true"
+    truecharts.org/category: database
+    truecharts.org/max_helm_version: "3.13"
+    truecharts.org/min_helm_version: "3.12"
+    truecharts.org/train: dependency
+type: application

charts/dependency/redis/README.md

@@ -5,7 +5,7 @@
 TrueCharts can be installed as both *normal* Helm Charts or as Apps on TrueNAS SCALE.
 However only installations using the TrueNAS SCALE Apps system are supported.
 
-For more information about this App, please check the docs on the TrueCharts [website](https://truecharts.org/charts/dependency/)
+For more information about this App, please check the docs on the TrueCharts [website](https://truecharts.org/charts/dependency/redis)
 
 **This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/charts/issues/new/choose)**
 

charts/dependency/redis/values.yaml

@@ -1,8 +1,7 @@
 image:
-  repository: tccr.io/truecharts/redis
+  repository: bitnami/redis
   pullPolicy: IfNotPresent
-  tag: v7.2.1@sha256:01e1cd968ac2fa89c5c9008d49e63531d843c396eebff62f910784cbe2873811
-
+  tag: 7.2.3@sha256:9ac3bbf7740969d32689e360ddcfa5f672538c47f6f6cf296173c3078de0edf2
 workload:
   main:
     replicas: 1
@@ -45,12 +44,10 @@ workload:
                 - sh
                 - -c
                 - /health/ping_readiness_local.sh 2
-
 securityContext:
   container:
     readOnlyRootFilesystem: false
     runAsGroup: 0
-
 configmap:
   health:
     enabled: true
@@ -123,31 +120,30 @@ configmap:
         "$script_dir/ping_liveness_local.sh" $1 || exit_status=$?
         "$script_dir/ping_liveness_master.sh" $1 || exit_status=$?
         exit $exit_status
-
 secret:
   credentials:
     enabled: true
     data:
       redis-password: '{{ ( .Values.redisPassword | default "nothing" ) }}'
-
 # -- Secret or password
 # One of these options is required, unless used as a dependency for another TrueCharts chart.
 redisPassword: ""
 existingSecret: ""
-
 service:
   main:
     ports:
       main:
         port: 6379
         targetPort: 6379
-
 volumeClaimTemplates:
   data:
-    enabled: true
+    enabled: false
     mountPath: "/bitnami/redis"
-
 persistence:
+  data:
+    enabled: true
+    type: emptyDir
+    mountPath: "/bitnami/redis"
   redis-health:
     enabled: true
     type: configmap
@@ -167,10 +163,8 @@ persistence:
         path: ping_liveness_local_and_master.sh
       - key: ping_readiness_local_and_master.sh
         path: ping_readiness_local_and_master.sh
-
 portal:
   open:
     enabled: false
-
 manifestManager:
   enabled: false

charts/dependency/solr/Chart.yaml

@@ -1,30 +1,38 @@
+kubeVersion: '>=1.24.0-0'
 apiVersion: v2
-appVersion: "9.3.0"
-dependencies:
-  - name: common
-    repository: https://library-charts.truecharts.org
-    version: 14.0.12
-deprecated: false
+name: solr
+version: 8.0.6
+appVersion: 9.4.0
 description: Apache Solr
 home: https://truecharts.org/charts/dependency/solr
 icon: https://truecharts.org/img/hotlink-ok/chart-icons/solr.png
-keywords:
-  - solr
-  - apache
-  - search
-kubeVersion: ">=1.16.0-0"
-maintainers:
-  - email: info@truecharts.org
-    name: TrueCharts
-    url: https://truecharts.org
-name: solr
+deprecated: false
 sources:
-  - https://github.com/truecharts/charts/tree/master/charts/dependency/solr
-  - https://github.com/apache/solr
-type: application
-version: 6.0.29
-annotations:
-  truecharts.org/catagories: |
+    - https://github.com/apache/solr
+    - https://github.com/truecharts/charts/tree/master/charts/dependency/solr
+    - https://hub.docker.com/r/bitnami/solr
+maintainers:
+    - name: TrueCharts
+      email: info@truecharts.org
+      url: https://truecharts.org
+keywords:
+    - solr
+    - apache
     - search
-  truecharts.org/SCALE-support: "true"
-  truecharts.org/grade: U
+dependencies:
+    - name: common
+      version: 16.2.9
+      repository: https://library-charts.truecharts.org
+      condition: ""
+      alias: ""
+      tags: []
+      import-values: []
+annotations:
+    max_scale_version: 23.10.2
+    min_scale_version: 23.10.0
+    truecharts.org/SCALE-support: "true"
+    truecharts.org/category: search
+    truecharts.org/max_helm_version: "3.13"
+    truecharts.org/min_helm_version: "3.12"
+    truecharts.org/train: dependency
+type: application

charts/dependency/solr/README.md

@@ -5,7 +5,7 @@
 TrueCharts can be installed as both *normal* Helm Charts or as Apps on TrueNAS SCALE.
 However only installations using the TrueNAS SCALE Apps system are supported.
 
-For more information about this App, please check the docs on the TrueCharts [website](https://truecharts.org/charts/dependency/)
+For more information about this App, please check the docs on the TrueCharts [website](https://truecharts.org/charts/dependency/solr)
 
 **This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/charts/issues/new/choose)**
 

charts/dependency/solr/values.yaml

@@ -1,8 +1,7 @@
 image:
-  repository: tccr.io/truecharts/solr
+  repository: bitnami/solr
   pullPolicy: IfNotPresent
-  tag: v9.3.0@sha256:6006fc17d23089aa2807b51eff894a5a1c90d2f1f0175714b6015da6137a6dd4
-
+  tag: 9.4.0@sha256:3a4822a6a764b058c8e2954a2ccfc3a60381a1276ae533e93851573c39c29054
 workload:
   main:
     replicas: 1
@@ -19,7 +18,6 @@ workload:
                 expandObjectName: "{{ if .Values.solrPassword }}true{{ else }}false{{ end }}"
                 name: '{{ if .Values.solrPassword }}credentials{{ else if .Values.existingSecret }}{{ .Values.existingSecret }}{{ else }}{{ printf "%s-%s" .Release.Name "solrcreds" }}{{ end }}'
                 key: "solr-password"
-
           # -- Probe configuration
           # -- [[ref]](https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/)
           # @default -- See below
@@ -45,7 +43,6 @@ workload:
                       else
                         until curl --fail localhost:8983/solr/"${SOLR_CORES}"/admin/ping; do sleep 2; done
                       fi;
-
             # -- Redainess probe configuration
             # @default -- See below
             readiness:
@@ -87,47 +84,39 @@ workload:
                       else
                         until curl --fail localhost:8983/solr/"${SOLR_CORES}"/admin/ping; do sleep 2; done
                       fi;
-
 securityContext:
   container:
     runAsNonRoot: false
     readOnlyRootFilesystem: false
     runAsUser: 1001
     runAsGroup: 0
-
 service:
   main:
     ports:
       main:
         port: 8983
         targetPort: 8983
-
 persistence:
   db:
     enabled: true
     mountPath: "/bitnami/solr"
-
 # Currently only single core is supported, with multiple cores, probes will fail.
 solrCores: "testcore"
 solrEnableAuthentication: "yes"
 solrUsername: "test"
 # Used to pass a comma separated list of optional options like '-XX:G1HeapRegionSize=8m'
 solrOpts: ""
-
 # -- Secret or password
 # One of these options is required, unless used as a dependency for another TrueCharts chart.
 existingSecret: ""
 solrPassword: ""
-
 secret:
   credentials:
     enabled: true
     data:
       solr-password: '{{ ( .Values.solrPassword | default "empty" ) }}'
-
 portal:
   open:
     enabled: true
-
 manifestManager:
   enabled: false

charts/dev/checkmk/Chart.yaml

@@ -0,0 +1,37 @@
+kubeVersion: '>=1.24.0-0'
+apiVersion: v2
+name: checkmk
+version: 1.0.7
+appVersion: 2.2.0-latest
+description: Checkmk is a leading tool for Infrastructure and Application Monitoring. Simple configuration, scalable, flexible. It provides powerful monitoring of networks, servers, clouds, containers and applications.
+home: https://truecharts.org/charts/incubator/checkmk
+icon: https://truecharts.org/img/hotlink-ok/chart-icons/checkmk.png
+deprecated: false
+sources:
+    - https://github.com/tribe29/checkmk
+    - https://github.com/truecharts/charts/tree/master/charts/incubator/checkmk
+    - https://hub.docker.com/r/checkmk/check-mk-raw
+maintainers:
+    - name: TrueCharts
+      email: info@truecharts.org
+      url: https://truecharts.org
+keywords:
+    - checkmk
+    - monitoring
+dependencies:
+    - name: common
+      version: 16.2.7
+      repository: https://library-charts.truecharts.org
+      condition: ""
+      alias: ""
+      tags: []
+      import-values: []
+annotations:
+    max_scale_version: 23.10.2
+    min_scale_version: 23.10.0
+    truecharts.org/SCALE-support: "true"
+    truecharts.org/category: monitoring
+    truecharts.org/max_helm_version: "3.13"
+    truecharts.org/min_helm_version: "3.12"
+    truecharts.org/train: incubator
+type: application

charts/dev/checkmk/README.md

@@ -0,0 +1,27 @@
+# README
+
+## General Info
+
+TrueCharts can be installed as both *normal* Helm Charts or as Apps on TrueNAS SCALE.
+However only installations using the TrueNAS SCALE Apps system are supported.
+
+For more information about this App, please check the docs on the TrueCharts [website](https://truecharts.org/charts/incubator/checkmk)
+
+**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/charts/issues/new/choose)**
+
+
+## Support
+
+- Please check our [quick-start guides for TrueNAS SCALE](https://truecharts.org/manual/SCALE/guides/scale-intro).
+- See the [Website](https://truecharts.org)
+- Check our [Discord](https://discord.gg/tVsPTHWTtr)
+- Open a [issue](https://github.com/truecharts/charts/issues/new/choose)
+
+---
+
+## Sponsor TrueCharts
+
+TrueCharts can only exist due to the incredible effort of our staff.
+Please consider making a [donation](https://truecharts.org/sponsor) or contributing back to the project any way you can!
+
+*All Rights Reserved - The TrueCharts Project*

charts/dev/checkmk/questions.yaml

@@ -0,0 +1,175 @@
+# Include{groups}
+portals:
+  open:
+# Include{portalLink}
+questions:
+# Include{global}
+# Include{workload}
+# Include{workloadDeployment}
+
+# Include{replicas1}
+# Include{podSpec}
+# Include{containerMain}
+# Include{containerBasic}
+# Include{containerAdvanced}
+# Include{containerConfig}
+# Include{podOptions}
+
+  - variable: cmk
+    group: App Configuration
+    label: Check-mk Configuration
+    schema:
+      additional_attrs: true
+      type: dict
+      attrs:
+        - variable: password
+          label: Initial Password
+          description: Sets the initial password for cmkadmin user
+          schema:
+            type: string
+            required: true
+            private: true
+            default: ""
+        - variable: site_id
+          label: Site ID
+          description: Sets the siteID
+          schema:
+            type: string
+            required: true
+            default: cmk
+        - variable: livestatus_tcp
+          label: Livestatus TCP
+          description: Enables the livestatus TCP
+          schema:
+            type: boolean
+            default: false
+        - variable: mail_relay_host
+          label: Mail Relay Host
+          description: Sets the Mail Relay Host
+          schema:
+            type: string
+            default: ""
+
+# Include{serviceRoot}
+        - variable: main
+          label: Main Service
+          description: The Primary service on which the healthcheck runs, often the webUI
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{serviceSelectorLoadBalancer}
+# Include{serviceSelectorExtras}
+                    - variable: main
+                      label: Main Service Port Configuration
+                      schema:
+                        additional_attrs: true
+                        type: dict
+                        attrs:
+                          - variable: port
+                            label: Port
+                            description: This port exposes the container port on the service
+                            schema:
+                              type: int
+                              default: 15000
+                              required: true
+        - variable: receiver
+          label: Receiver Service
+          description: The Receiver service
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{serviceSelectorLoadBalancer}
+# Include{serviceSelectorExtras}
+                    - variable: receiver
+                      label: Receiver Service Port Configuration
+                      schema:
+                        additional_attrs: true
+                        type: dict
+                        attrs:
+                          - variable: port
+                            label: Port
+                            description: This port exposes the container port on the service
+                            schema:
+                              type: int
+                              default: 18000
+                              required: true
+        - variable: livestatustcp
+          label: Livestatus TCP Service
+          description: The Livestatus TCP service
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{serviceSelectorLoadBalancer}
+# Include{serviceSelectorExtras}
+                    - variable: livestatustcp
+                      label: Livestatus TCP Service Port Configuration
+                      schema:
+                        additional_attrs: true
+                        type: dict
+                        attrs:
+                          - variable: port
+                            label: Port
+                            description: This port exposes the container port on the service
+                            schema:
+                              type: int
+                              default: 6557
+                              required: true
+# Include{serviceExpertRoot}
+# Include{serviceExpert}
+# Include{serviceList}
+# Include{persistenceRoot}
+        - variable: config
+          label: App Config Storage
+          description: Stores the Application Configuration.
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{persistenceBasic}
+# Include{persistenceList}
+# Include{ingressRoot}
+        - variable: main
+          label: Main Ingress
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{ingressDefault}
+# Include{ingressTLS}
+# Include{ingressTraefik}
+# Include{ingressAdvanced}
+# Include{ingressList}
+
+# Include{securityContextRoot}
+              - variable: runAsUser
+                label: "runAsUser"
+                description: "The UserID of the user running the application"
+                schema:
+                  type: int
+                  default: 0
+              - variable: runAsGroup
+                label: "runAsGroup"
+                description: "The groupID of the user running the application"
+                schema:
+                  type: int
+                  default: 0
+# Include{securityContextContainer}
+# Include{securityContextAdvanced}
+# Include{securityContextPod}
+              - variable: fsGroup
+                label: "fsGroup"
+                description: "The group that should own ALL storage."
+                schema:
+                  type: int
+                  default: 568
+
+# Include{resources}
+# Include{advanced}
+# Include{addons}
+# Include{codeserver}
+# Include{netshoot}
+# Include{vpn}
+# Include{documentation}

charts/dev/checkmk/templates/_secret.tpl

@@ -0,0 +1,13 @@
+{{/* Define the secret */}}
+{{- define "checkmk.secret" -}}
+
+{{- $secretName := printf "%s-secret" (include "tc.v1.common.names.fullname" .) }}
+enabled: true
+data:
+  CMK_PASSWORD: {{ .Values.cmk.password | quote }}
+  CMK_SITE_ID: {{ .Values.cmk.site_id | quote }}
+  CMK_LIVESTATUS_TCP: {{ ternary "on" "off" .Values.cmk.livestatus_tcp | quote }}
+  {{- with .Values.cmk.mail_relay_host }}
+  MAIL_RELAY_HOST: {{ . | quote }}
+  {{- end }}
+{{- end }}

charts/dev/checkmk/templates/common.yaml

@@ -0,0 +1,8 @@
+{{/* Make sure all variables are set properly */}}
+{{- include "tc.v1.common.loader.init" . }}
+
+{{/* Render secret */}}
+{{- include "checkmk.secret" . }}
+
+{{/* Render the templates */}}
+{{ include "tc.v1.common.loader.apply" . }}

charts/dev/checkmk/values.yaml

@@ -0,0 +1,79 @@
+cmk:
+  livestatus_tcp: true
+  mail_relay_host: ""
+  password: secret
+  site_id: cmk
+image:
+  pullPolicy: IfNotPresent
+  repository: checkmk/check-mk-raw
+  tag: 2.2.0-latest@sha256:69baf5cd496fdd623ad36ccc466399aaab2de492f54787f4cc94e3cdf14ea378
+persistence:
+  cmk-cron:
+    enabled: true
+    mountPath: /var/spool/cron/crontabs
+    type: emptyDir
+  cmk-temp:
+    enabled: true
+    mountPath: /omd/sites/cmk/tmp
+    type: emptyDir
+  config:
+    enabled: true
+    mountPath: /omd/sites
+portal:
+  open:
+    enabled: true
+securityContext:
+  container:
+    readOnlyRootFilesystem: false
+    runAsGroup: 0
+    runAsUser: 0
+service:
+  livestatustcp:
+    enabled: true
+    ports:
+      livestatustcp:
+        enabled: true
+        port: 6557
+        targetPort: 6557
+  main:
+    ports:
+      main:
+        port: 15000
+        protocol: http
+        targetPort: 5000
+  receiver:
+    enabled: true
+    ports:
+      receiver:
+        enabled: true
+        port: 18000
+        protocol: http
+        targetPort: 8000
+workload:
+  main:
+    podSpec:
+      containers:
+        main:
+          envFrom:
+            - secretRef:
+                name: "secret"
+          probes:
+            liveness:
+              spec:
+                exec:
+                  command:
+                    - /bin/sh
+                    - -c
+                    - omd status
+            readiness:
+              exec:
+                command:
+                  - /bin/sh
+                  - -c
+                  - omd status
+            startup:
+              exec:
+                command:
+                  - /bin/sh
+                  - -c
+                  - omd status

charts/dev/cherry/Chart.yaml

@@ -0,0 +1,37 @@
+kubeVersion: '>=1.24.0-0'
+apiVersion: v2
+name: cherry
+version: 3.0.7
+appVersion: 0.0.7
+description: An open source self-hosted bookmark service
+home: https://truecharts.org/charts/incubator/cherry
+icon: https://truecharts.org/img/hotlink-ok/chart-icons/cherry.png
+deprecated: false
+sources:
+    - https://github.com/truecharts/charts/tree/master/charts/incubator/cherry
+    - https://hub.docker.com/r/haishanh/cherry
+    - https://cherry.haishan.me/
+    - https://github.com/haishanh/cherry
+maintainers:
+    - name: TrueCharts
+      email: info@truecharts.org
+      url: https://truecharts.org
+keywords:
+    - bookmark
+dependencies:
+    - name: common
+      version: 16.2.7
+      repository: https://library-charts.truecharts.org
+      condition: ""
+      alias: ""
+      tags: []
+      import-values: []
+annotations:
+    max_scale_version: 23.10.2
+    min_scale_version: 23.10.0
+    truecharts.org/SCALE-support: "true"
+    truecharts.org/category: bookmark
+    truecharts.org/max_helm_version: "3.13"
+    truecharts.org/min_helm_version: "3.12"
+    truecharts.org/train: incubator
+type: application

charts/dev/cherry/README.md

@@ -0,0 +1,27 @@
+# README
+
+## General Info
+
+TrueCharts can be installed as both *normal* Helm Charts or as Apps on TrueNAS SCALE.
+However only installations using the TrueNAS SCALE Apps system are supported.
+
+For more information about this App, please check the docs on the TrueCharts [website](https://truecharts.org/charts/incubator/cherry)
+
+**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/charts/issues/new/choose)**
+
+
+## Support
+
+- Please check our [quick-start guides for TrueNAS SCALE](https://truecharts.org/manual/SCALE/guides/scale-intro).
+- See the [Website](https://truecharts.org)
+- Check our [Discord](https://discord.gg/tVsPTHWTtr)
+- Open a [issue](https://github.com/truecharts/charts/issues/new/choose)
+
+---
+
+## Sponsor TrueCharts
+
+TrueCharts can only exist due to the incredible effort of our staff.
+Please consider making a [donation](https://truecharts.org/sponsor) or contributing back to the project any way you can!
+
+*All Rights Reserved - The TrueCharts Project*

charts/dev/cherry/questions.yaml

@@ -0,0 +1,136 @@
+# Include{groups}
+portals:
+  open:
+# Include{portalLink}
+questions:
+# Include{global}
+# Include{workload}
+# Include{workloadDeployment}
+
+# Include{replicas1}
+# Include{podSpec}
+# Include{containerMain}
+# Include{containerBasic}
+# Include{containerAdvanced}
+# Include{containerConfig}
+# Include{podOptions}
+
+  - variable: cherry
+    group: App Configuration
+    label: Cherry Configuration
+    schema:
+      additional_attrs: true
+      type: dict
+      attrs:
+        - variable: insecure_cookie
+          label: Insecure Cookie
+          schema:
+            type: boolean
+            default: false
+        - variable: public_registration
+          label: Public Registration
+          schema:
+            type: boolean
+            default: true
+        - variable: page_bookmark_limit
+          label: Page Bookmark Limit
+          schema:
+            type: int
+            default: 60
+        - variable: google_oauth_uri
+          label: Google OAuth URI
+          schema:
+            type: string
+            default: ""
+        - variable: google_oauth_id
+          label: Google OAuth ID
+          schema:
+            type: string
+            private: true
+            default: ""
+        - variable: google_oauth_secret
+          label: Google OAuth Secret
+          schema:
+            type: string
+            private: true
+            default: ""
+
+# Include{serviceRoot}
+        - variable: main
+          label: Main Service
+          description: The Primary service on which the healthcheck runs, often the webUI
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{serviceSelectorLoadBalancer}
+# Include{serviceSelectorExtras}
+                    - variable: main
+                      label: Main Service Port Configuration
+                      schema:
+                        additional_attrs: true
+                        type: dict
+                        attrs:
+                          - variable: port
+                            label: Port
+                            description: This port exposes the container port on the service
+                            schema:
+                              type: int
+                              default: 10303
+                              required: true
+# Include{serviceExpertRoot}
+# Include{serviceExpert}
+# Include{serviceList}
+# Include{persistenceRoot}
+        - variable: data
+          label: App Data Storage
+          description: Stores the Application Data.
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{persistenceBasic}
+# Include{persistenceList}
+# Include{ingressRoot}
+        - variable: main
+          label: Main Ingress
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{ingressDefault}
+# Include{ingressTLS}
+# Include{ingressTraefik}
+# Include{ingressAdvanced}
+# Include{ingressList}
+
+# Include{securityContextRoot}
+              - variable: runAsUser
+                label: "runAsUser"
+                description: "The UserID of the user running the application"
+                schema:
+                  type: int
+                  default: 0
+              - variable: runAsGroup
+                label: "runAsGroup"
+                description: "The groupID of the user running the application"
+                schema:
+                  type: int
+                  default: 0
+# Include{securityContextContainer}
+# Include{securityContextAdvanced}
+# Include{securityContextPod}
+              - variable: fsGroup
+                label: "fsGroup"
+                description: "The group that should own ALL storage."
+                schema:
+                  type: int
+                  default: 568
+
+# Include{resources}
+# Include{advanced}
+# Include{addons}
+# Include{codeserver}
+# Include{netshoot}
+# Include{vpn}
+# Include{documentation}

charts/dev/cherry/templates/_config.tpl

@@ -0,0 +1,15 @@
+{{/* Define the configmap */}}
+{{- define "cherry.configmap" -}}
+
+{{- $configName := printf "%s-cherry-configmap" (include "tc.v1.common.names.fullname" .) }}
+
+enabled: true
+data:
+  DATABASE_PATH: /data/cherry.sqlite
+  ENABLE_PUBLIC_REGISTRATION: {{ ternary "1" "0" .Values.cherry.public_registration  | quote }}
+  USE_INSECURE_COOKIE: {{ ternary "1" "0" .Values.cherry.insecure_cookie | quote }}
+  PAGE_BOOKMARK_LIMIT: {{ .Values.cherry.page_bookmark_limit | quote }}
+  {{- with .Values.cherry.google_oauth_uri }}
+  GOOGLE_OAUTH_REDIRECT_URI: {{ . }}
+  {{- end }}
+{{- end -}}

charts/dev/cherry/templates/_secrets.tpl

@@ -0,0 +1,19 @@
+{{/* Define the secrets */}}
+{{- define "cherry.secrets" -}}
+
+{{- $secretName := printf "%s-cherry-secret" (include "tc.v1.common.names.fullname" .) }}
+
+enabled: true
+data:
+  {{- with (lookup "v1" "Secret" .Release.Namespace $secretName) }}
+  JWT_SECRET: {{ index .data "JWT_SECRET" }}
+  {{- else }}
+  JWT_SECRET: {{ randAlphaNum 32 }}
+  {{- end }}
+  {{- with .Values.cherry.google_oauth_id }}
+  GOOGLE_OAUTH_CLIENT_ID: {{ . }}
+  {{- end }}
+  {{- with .Values.cherry.google_oauth_secret }}
+  GOOGLE_OAUTH_CLIENT_SECRET: {{ . }}
+  {{- end }}
+{{- end -}}

charts/dev/cherry/templates/common.yaml

@@ -0,0 +1,7 @@
+{{- include "tc.v1.common.loader.init" . }}
+
+{{- include "cherry.configmap" . }}
+
+{{ include "cherry.secrets" . }}
+
+{{ include "tc.v1.common.loader.apply" . }}

charts/dev/cherry/values.yaml

@@ -0,0 +1,50 @@
+cherry:
+  google_oauth_id: ""
+  google_oauth_secret: ""
+  google_oauth_uri: ""
+  insecure_cookie: true
+  page_bookmark_limit: 60
+  public_registration: true
+image:
+  pullPolicy: IfNotPresent
+  repository: haishanh/cherry
+  tag: v0.0.7@sha256:ac38d09dc167501882b60c882931ba89a2cdc4feb2f30e768098f142dde8b9ee
+persistence:
+  data:
+    enabled: true
+    mountPath: /data
+portal:
+  open:
+    enabled: true
+securityContext:
+  container:
+    readOnlyRootFilesystem: false
+    runAsGroup: 0
+    runAsUser: 0
+service:
+  main:
+    ports:
+      main:
+        port: 10303
+        protocol: http
+        targetPort: 8000
+workload:
+  main:
+    podSpec:
+      containers:
+        main:
+          envFrom:
+            - secretRef:
+                name: "cherry-secret"
+            - configMapRef:
+                name: "cherry-configmap"
+          probes:
+            liveness:
+              path: /
+              type: http
+            readiness:
+              path: /
+              type: http
+            startup:
+              path: /
+              type: http

charts/dev/cleanarr/Chart.yaml

@@ -0,0 +1,36 @@
+kubeVersion: '>=1.24.0-0'
+apiVersion: v2
+name: cleanarr
+version: 3.0.7
+appVersion: 2.5.0
+description: A simple UI to help find and delete duplicate and sample files from your Plex server.
+home: https://truecharts.org/charts/incubator/cleanarr
+icon: https://truecharts.org/img/hotlink-ok/chart-icons/cleanarr.png
+deprecated: false
+sources:
+    - https://hub.docker.com/r/selexin/cleanarr
+    - https://github.com/se1exin/cleanarr
+    - https://github.com/truecharts/charts/tree/master/charts/incubator/cleanarr
+maintainers:
+    - name: TrueCharts
+      email: info@truecharts.org
+      url: https://truecharts.org
+keywords:
+    - cleanarr
+dependencies:
+    - name: common
+      version: 16.2.7
+      repository: https://library-charts.truecharts.org
+      condition: ""
+      alias: ""
+      tags: []
+      import-values: []
+annotations:
+    max_scale_version: 23.10.2
+    min_scale_version: 23.10.0
+    truecharts.org/SCALE-support: "true"
+    truecharts.org/category: Media
+    truecharts.org/max_helm_version: "3.13"
+    truecharts.org/min_helm_version: "3.12"
+    truecharts.org/train: incubator
+type: application

charts/dev/cleanarr/README.md

@@ -0,0 +1,27 @@
+# README
+
+## General Info
+
+TrueCharts can be installed as both *normal* Helm Charts or as Apps on TrueNAS SCALE.
+However only installations using the TrueNAS SCALE Apps system are supported.
+
+For more information about this App, please check the docs on the TrueCharts [website](https://truecharts.org/charts/incubator/cleanarr)
+
+**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/charts/issues/new/choose)**
+
+
+## Support
+
+- Please check our [quick-start guides for TrueNAS SCALE](https://truecharts.org/manual/SCALE/guides/scale-intro).
+- See the [Website](https://truecharts.org)
+- Check our [Discord](https://discord.gg/tVsPTHWTtr)
+- Open a [issue](https://github.com/truecharts/charts/issues/new/choose)
+
+---
+
+## Sponsor TrueCharts
+
+TrueCharts can only exist due to the incredible effort of our staff.
+Please consider making a [donation](https://truecharts.org/sponsor) or contributing back to the project any way you can!
+
+*All Rights Reserved - The TrueCharts Project*

charts/dev/cleanarr/questions.yaml

@@ -0,0 +1,129 @@
+# Include{groups}
+portals:
+  open:
+# Include{portalLink}
+questions:
+# Include{global}
+# Include{workload}
+# Include{workloadDeployment}
+
+# Include{replicas1}
+# Include{podSpec}
+# Include{containerMain}
+
+                                - variable: env
+                                  label: Image Environment
+                                  schema:
+                                    additional_attrs: true
+                                    type: dict
+                                    attrs:
+                                      - variable: PLEX_BASE_URL
+                                        label: "PLEX_BASE_URL"
+                                        description: "Plex Server Address (e.g. http://192.169.1.100:32400)"
+                                        schema:
+                                          type: string
+                                          default: ""
+                                      - variable: PLEX_TOKEN
+                                        label: "PLEX_TOKEN"
+                                        description: "A valid Plex token for your Plex Server "
+                                        schema:
+                                          type: string
+                                          private: true
+                                          default: ""
+                                      - variable: LIBRARY_NAMES
+                                        label: "LIBRARY_NAMES"
+                                        description: "Name(s) of your Plex Libraries to search. Separate multiple library names with semi-colon *;*"
+                                        schema:
+                                          type: string
+                                          default: ""
+                                      - variable: PAGE_SIZE
+                                        label: "PAGE_SIZE"
+                                        description: "To avoid plex timeouts, results are loaded in pages (or chunks)"
+                                        schema:
+                                          type: int
+                                          default: 50
+                                      - variable: BYPASS_SSL_VERIFY_BOOL
+                                        label: "BYPASS_SSL_VERIFY"
+                                        description: "Disable SSL certificate verification."
+                                        schema:
+                                          type: boolean
+                                          default: false
+# Include{serviceRoot}
+        - variable: main
+          label: "Main Service"
+          description: "The Primary service on which the healthcheck runs, often the webUI"
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{serviceSelectorLoadBalancer}
+# Include{serviceSelectorExtras}
+                    - variable: main
+                      label: "Main Service Port Configuration"
+                      schema:
+                        additional_attrs: true
+                        type: dict
+                        attrs:
+                          - variable: port
+                            label: "Port"
+                            description: "This port exposes the container port on the service"
+                            schema:
+                              type: int
+                              default: 10247
+                              required: true
+# Include{serviceExpertRoot}
+# Include{serviceExpert}
+# Include{serviceList}
+# Include{persistenceRoot}
+        - variable: config
+          label: "config Storage"
+          description: "Container Path frontend"
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{persistenceBasic}
+# Include{persistenceList}
+# Include{ingressRoot}
+        - variable: main
+          label: "Main Ingress"
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{ingressDefault}
+# Include{ingressTLS}
+# Include{ingressTraefik}
+# Include{ingressAdvanced}
+# Include{ingressList}
+# Include{securityContextRoot}
+
+              - variable: runAsUser
+                label: "runAsUser"
+                description: "The UserID of the user running the application"
+                schema:
+                  type: int
+                  default: 0
+              - variable: runAsGroup
+                label: "runAsGroup"
+                description: "The groupID of the user running the application"
+                schema:
+                  type: int
+                  default: 0
+# Include{securityContextContainer}
+# Include{securityContextAdvanced}
+# Include{securityContextPod}
+              - variable: fsGroup
+                label: "fsGroup"
+                description: "The group that should own ALL storage."
+                schema:
+                  type: int
+                  default: 568
+
+# Include{resources}
+# Include{advanced}
+# Include{addons}
+# Include{codeserver}
+# Include{netshoot}
+# Include{vpn}
+# Include{documentation}

charts/dev/cleanarr/values.yaml

@@ -0,0 +1,35 @@
+image:
+  pullPolicy: IfNotPresent
+  repository: selexin/cleanarr
+  tag: v2.5.0@sha256:26d636d29701431fdb1297e2f1aeeae88084e1dd952f133dcd08efb1220fc034
+persistence:
+  config:
+    enabled: true
+    mountPath: /config
+portal:
+  open:
+    enabled: true
+securityContext:
+  container:
+    readOnlyRootFilesystem: false
+    runAsGroup: 0
+    runAsUser: 0
+service:
+  main:
+    ports:
+      main:
+        port: 10247
+        protocol: http
+        targetPort: 80
+workload:
+  main:
+    podSpec:
+      containers:
+        main:
+          env:
+            BYPASS_SSL_VERIFY: '{{ ternary "1" "0" .Values.workload.main.podSpec.containers.main.env.BYPASS_SSL_VERIFY_BOOL}}'
+            BYPASS_SSL_VERIFY_BOOL: "true"
+            LIBRARY_NAMES: ""
+            PAGE_SIZE: "50"
+            PLEX_BASE_URL: ""
+            PLEX_TOKEN: ""

charts/dev/coupon-store/Chart.yaml

@@ -0,0 +1,36 @@
+kubeVersion: '>=1.24.0-0'
+apiVersion: v2
+name: coupon-store
+version: 4.0.7
+appVersion: 1.3.0
+description: A home for all your coupons and loyalty cards.
+home: https://truecharts.org/charts/incubator/coupon-store
+icon: https://truecharts.org/img/hotlink-ok/chart-icons/coupon-store.png
+deprecated: false
+sources:
+    - https://github.com/linuxserver/docker-airsonic
+    - https://github.com/truecharts/charts/tree/master/charts/incubator/coupon-store
+    - https://hub.docker.com/r/metikular/coupon-store
+maintainers:
+    - name: TrueCharts
+      email: info@truecharts.org
+      url: https://truecharts.org
+keywords:
+    - coupons
+dependencies:
+    - name: common
+      version: 16.2.7
+      repository: https://library-charts.truecharts.org
+      condition: ""
+      alias: ""
+      tags: []
+      import-values: []
+annotations:
+    max_scale_version: 23.10.2
+    min_scale_version: 23.10.0
+    truecharts.org/SCALE-support: "true"
+    truecharts.org/category: utilities
+    truecharts.org/max_helm_version: "3.13"
+    truecharts.org/min_helm_version: "3.12"
+    truecharts.org/train: incubator
+type: application

charts/dev/coupon-store/README.md

@@ -0,0 +1,27 @@
+# README
+
+## General Info
+
+TrueCharts can be installed as both *normal* Helm Charts or as Apps on TrueNAS SCALE.
+However only installations using the TrueNAS SCALE Apps system are supported.
+
+For more information about this App, please check the docs on the TrueCharts [website](https://truecharts.org/charts/incubator/coupon-store)
+
+**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/charts/issues/new/choose)**
+
+
+## Support
+
+- Please check our [quick-start guides for TrueNAS SCALE](https://truecharts.org/manual/SCALE/guides/scale-intro).
+- See the [Website](https://truecharts.org)
+- Check our [Discord](https://discord.gg/tVsPTHWTtr)
+- Open a [issue](https://github.com/truecharts/charts/issues/new/choose)
+
+---
+
+## Sponsor TrueCharts
+
+TrueCharts can only exist due to the incredible effort of our staff.
+Please consider making a [donation](https://truecharts.org/sponsor) or contributing back to the project any way you can!
+
+*All Rights Reserved - The TrueCharts Project*

charts/dev/coupon-store/questions.yaml

@@ -0,0 +1,88 @@
+# Include{groups}
+portals:
+  open:
+# Include{portalLink}
+questions:
+# Include{global}
+# Include{workload}
+# Include{workloadDeployment}
+
+# Include{replicas1}
+# Include{podSpec}
+# Include{containerMain}
+# Include{containerBasic}
+# Include{containerAdvanced}
+
+# Include{containerConfig}
+# Include{podOptions}
+# Include{serviceRoot}
+        - variable: main
+          label: Main Service
+          description: The Primary service on which the healthcheck runs, often the webUI
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{serviceSelectorLoadBalancer}
+# Include{serviceSelectorExtras}
+                    - variable: main
+                      label: Main Service Port Configuration
+                      schema:
+                        additional_attrs: true
+                        type: dict
+                        attrs:
+                          - variable: port
+                            label: Port
+                            description: This port exposes the container port on the service
+                            schema:
+                              type: int
+                              default: 10304
+                              required: true
+# Include{serviceExpertRoot}
+# Include{serviceExpert}
+# Include{serviceList}
+# Include{persistenceList}
+# Include{ingressRoot}
+        - variable: main
+          label: Main Ingress
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{ingressDefault}
+# Include{ingressTLS}
+# Include{ingressTraefik}
+# Include{ingressAdvanced}
+# Include{ingressList}
+
+# Include{securityContextRoot}
+              - variable: runAsUser
+                label: "runAsUser"
+                description: "The UserID of the user running the application"
+                schema:
+                  type: int
+                  default: 0
+              - variable: runAsGroup
+                label: "runAsGroup"
+                description: "The groupID of the user running the application"
+                schema:
+                  type: int
+                  default: 0
+# Include{securityContextContainer}
+# Include{securityContextAdvanced}
+# Include{securityContextPod}
+              - variable: fsGroup
+                label: "fsGroup"
+                description: "The group that should own ALL storage."
+                schema:
+                  type: int
+                  default: 568
+
+# Include{resources}
+# Include{postgresql}
+# Include{advanced}
+# Include{addons}
+# Include{codeserver}
+# Include{netshoot}
+# Include{vpn}
+# Include{documentation}

charts/dev/coupon-store/templates/_secrets.tpl

@@ -0,0 +1,21 @@
+{{/* Define the secrets */}}
+{{- define "couponstore.secrets" -}}
+
+{{- $secretName := printf "%s-couponstore-secret" (include "tc.v1.common.names.fullname" .) }}
+
+---
+{{- $pg := .Values.cnpg.main }}
+
+apiVersion: v1
+kind: Secret
+type: Opaque
+metadata:
+  name: {{ $secretName }}
+data:
+  {{- with (lookup "v1" "Secret" .Release.Namespace $secretName) }}
+  SECRET_KEY_BASE: {{ index .data "SECRET_KEY_BASE" }}
+  {{- else }}
+  SECRET_KEY_BASE: {{ randAlphaNum 32 }}
+  {{- end }}
+  DATABASE_URL: {{ printf "postgres://%v:%v@%v-postgresql:5432/%v" $pg.user ($pg.postgresqlPassword | trimAll "\"") .Release.Name $pg.database  }}
+{{- end -}}

charts/dev/coupon-store/templates/common.yaml

@@ -0,0 +1,5 @@
+{{- include "tc.v1.common.loader.init" . }}
+
+{{ include "couponstore.secrets" . }}
+
+{{ include "tc.v1.common.loader.apply" . }}

charts/dev/coupon-store/values.yaml

@@ -0,0 +1,35 @@
+image:
+  pullPolicy: IfNotPresent
+  repository: metikular/coupon-store
+  tag: v1.3.0@sha256:54ef3454ea23109096eef277af48f89707bfb7e31d14097466c02ac381670572
+portal:
+  open:
+    enabled: true
+cnpg:
+  main:
+    enabled: true
+    database: coupon-store
+    user: coupon-store
+securityContext:
+  container:
+    readOnlyRootFilesystem: false
+    runAsGroup: 0
+    runAsUser: 0
+service:
+  main:
+    ports:
+      main:
+        port: 10304
+workload:
+  main:
+    podSpec:
+      containers:
+        main:
+          command:
+            - bash
+            - -c
+            - rm -f tmp/pids/server.pid && bundle exec rails s -p {{ .Values.service.main.ports.main.port
+              }} -b '0.0.0.0'
+          envFrom:
+            - secretRef:
+                name: "couponstore-secret"

charts/dev/dsmr-reader/Chart.yaml

@@ -0,0 +1,38 @@
+kubeVersion: '>=1.24.0-0'
+apiVersion: v2
+name: dsmr-reader
+version: 13.0.7
+appVersion: 2021.09.02
+description: DSMR-protocol reader, telegram data storage and energy consumption visualizer.
+home: https://truecharts.org/charts/incubator/dsmr-reader
+icon: https://truecharts.org/img/hotlink-ok/chart-icons/dsmr-reader.png
+deprecated: false
+sources:
+    - https://github.com/xirixiz/dsmr-reader-docker
+    - https://github.com/dsmrreader/dsmr-reader
+    - https://github.com/truecharts/charts/tree/master/charts/incubator/dsmr-reader
+    - https://hub.docker.com/r/xirixiz/dsmr-reader-docker
+maintainers:
+    - name: TrueCharts
+      email: info@truecharts.org
+      url: https://truecharts.org
+keywords:
+    - dsmr-reader
+    - energy
+dependencies:
+    - name: common
+      version: 16.2.7
+      repository: https://library-charts.truecharts.org
+      condition: ""
+      alias: ""
+      tags: []
+      import-values: []
+annotations:
+    max_scale_version: 23.10.2
+    min_scale_version: 23.10.0
+    truecharts.org/SCALE-support: "true"
+    truecharts.org/category: media
+    truecharts.org/max_helm_version: "3.13"
+    truecharts.org/min_helm_version: "3.12"
+    truecharts.org/train: incubator
+type: application

charts/dev/dsmr-reader/README.md

@@ -0,0 +1,27 @@
+# README
+
+## General Info
+
+TrueCharts can be installed as both *normal* Helm Charts or as Apps on TrueNAS SCALE.
+However only installations using the TrueNAS SCALE Apps system are supported.
+
+For more information about this App, please check the docs on the TrueCharts [website](https://truecharts.org/charts/incubator/dsmr-reader)
+
+**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/charts/issues/new/choose)**
+
+
+## Support
+
+- Please check our [quick-start guides for TrueNAS SCALE](https://truecharts.org/manual/SCALE/guides/scale-intro).
+- See the [Website](https://truecharts.org)
+- Check our [Discord](https://discord.gg/tVsPTHWTtr)
+- Open a [issue](https://github.com/truecharts/charts/issues/new/choose)
+
+---
+
+## Sponsor TrueCharts
+
+TrueCharts can only exist due to the incredible effort of our staff.
+Please consider making a [donation](https://truecharts.org/sponsor) or contributing back to the project any way you can!
+
+*All Rights Reserved - The TrueCharts Project*

charts/dev/dsmr-reader/questions.yaml

@@ -0,0 +1,96 @@
+# Include{groups}
+portals:
+  open:
+# Include{portalLink}
+questions:
+# Include{global}
+# Include{workload}
+# Include{workloadDeployment}
+
+# Include{replicas1}
+# Include{podSpec}
+# Include{containerMain}
+# Include{containerBasic}
+# Include{containerAdvanced}
+# Include{containerConfig}
+# Include{podOptions}
+# Include{serviceRoot}
+        - variable: main
+          label: "Main Service"
+          description: "The Primary service on which the healthcheck runs, often the webUI"
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{serviceSelectorLoadBalancer}
+# Include{serviceSelectorExtras}
+                    - variable: main
+                      label: "Main Service Port Configuration"
+                      schema:
+                        additional_attrs: true
+                        type: dict
+                        attrs:
+                          - variable: port
+                            label: "Port"
+                            description: "This port exposes the container port on the service"
+                            schema:
+                              type: int
+                              default: 10009
+                              required: true
+# Include{serviceExpertRoot}
+# Include{serviceExpert}
+# Include{serviceList}
+# Include{persistenceRoot}
+        - variable: config
+          label: "App Config Storage"
+          description: "Stores the Application Configuration."
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{persistenceBasic}
+# Include{persistenceList}
+# Include{ingressRoot}
+        - variable: main
+          label: "Main Ingress"
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{ingressDefault}
+# Include{ingressTLS}
+# Include{ingressTraefik}
+# Include{ingressAdvanced}
+# Include{ingressList}
+# Include{securityContextRoot}
+
+              - variable: runAsUser
+                label: "runAsUser"
+                description: "The UserID of the user running the application"
+                schema:
+                  type: int
+                  default: 0
+              - variable: runAsGroup
+                label: "runAsGroup"
+                description: "The groupID of the user running the application"
+                schema:
+                  type: int
+                  default: 0
+# Include{securityContextContainer}
+# Include{securityContextAdvanced}
+# Include{securityContextPod}
+              - variable: fsGroup
+                label: "fsGroup"
+                description: "The group that should own ALL storage."
+                schema:
+                  type: int
+                  default: 568
+
+# Include{resources}
+# Include{postgresql}
+# Include{advanced}
+# Include{addons}
+# Include{codeserver}
+# Include{netshoot}
+# Include{vpn}
+# Include{documentation}

charts/dev/dsmr-reader/values.yaml

@@ -0,0 +1,46 @@
+image:
+  pullPolicy: IfNotPresent
+  repository: xirixiz/dsmr-reader-docker
+  tag: latest-2021.09.02-amd64@sha256:4858edb1ae63a20639a0ef9c51c7b2cf599686db5c582ead7b37b2a288122935
+persistence:
+  config:
+    enabled: true
+    mountPath: /config
+portal:
+  open:
+    enabled: true
+cnpg:
+  main:
+    enabled: true
+    database: dsmr-reader
+    user: dsmr-reader
+securityContext:
+  container:
+    readOnlyRootFilesystem: false
+    runAsGroup: 0
+    runAsUser: 0
+service:
+  main:
+    ports:
+      main:
+        port: 10009
+        targetPort: 80
+workload:
+  main:
+    podSpec:
+      containers:
+        main:
+          env:
+            DJANGO_DATABASE_ENGINE: django.db.backends.postgresql
+            DJANGO_DATABASE_HOST:
+              secretKeyRef:
+                key: plainhost
+                name: dbcreds
+            DJANGO_DATABASE_NAME: "{{ .Values.cnpg.main.database }}"
+            DJANGO_DATABASE_PASSWORD:
+              secretKeyRef:
+                key: postgresql-password
+                name: dbcreds
+            DJANGO_DATABASE_PORT: "5432"
+            DJANGO_DATABASE_USER: "{{ .Values.cnpg.main.user }}"
+            DJANGO_TIME_ZONE: "{{ .Values.TZ }}"

charts/dev/euterpe/Chart.yaml

@@ -0,0 +1,40 @@
+kubeVersion: '>=1.24.0-0'
+apiVersion: v2
+name: euterpe
+version: 4.0.7
+appVersion: 1.5.4
+description: Self-hosted streaming service for music, formerly known as HTTP Media Server.
+home: https://truecharts.org/charts/incubator/euterpe
+icon: https://truecharts.org/img/hotlink-ok/chart-icons/euterpe.png
+deprecated: false
+sources:
+    - https://github.com/ironsmile/euterpe
+    - https://github.com/truecharts/charts/tree/master/charts/incubator/euterpe
+    - https://hub.docker.com/r/ironsmile/euterpe
+maintainers:
+    - name: TrueCharts
+      email: info@truecharts.org
+      url: https://truecharts.org
+keywords:
+    - euterpe
+    - Productivity
+    - Tools-Utilities
+    - MediaApp-Music
+    - MediaServer-Music
+dependencies:
+    - name: common
+      version: 16.2.7
+      repository: https://library-charts.truecharts.org
+      condition: ""
+      alias: ""
+      tags: []
+      import-values: []
+annotations:
+    max_scale_version: 23.10.2
+    min_scale_version: 23.10.0
+    truecharts.org/SCALE-support: "true"
+    truecharts.org/category: Productivity
+    truecharts.org/max_helm_version: "3.13"
+    truecharts.org/min_helm_version: "3.12"
+    truecharts.org/train: incubator
+type: application

charts/dev/euterpe/README.md

@@ -0,0 +1,27 @@
+# README
+
+## General Info
+
+TrueCharts can be installed as both *normal* Helm Charts or as Apps on TrueNAS SCALE.
+However only installations using the TrueNAS SCALE Apps system are supported.
+
+For more information about this App, please check the docs on the TrueCharts [website](https://truecharts.org/charts/incubator/euterpe)
+
+**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/charts/issues/new/choose)**
+
+
+## Support
+
+- Please check our [quick-start guides for TrueNAS SCALE](https://truecharts.org/manual/SCALE/guides/scale-intro).
+- See the [Website](https://truecharts.org)
+- Check our [Discord](https://discord.gg/tVsPTHWTtr)
+- Open a [issue](https://github.com/truecharts/charts/issues/new/choose)
+
+---
+
+## Sponsor TrueCharts
+
+TrueCharts can only exist due to the incredible effort of our staff.
+Please consider making a [donation](https://truecharts.org/sponsor) or contributing back to the project any way you can!
+
+*All Rights Reserved - The TrueCharts Project*

charts/dev/euterpe/questions.yaml

@@ -0,0 +1,212 @@
+# Include{groups}
+portals:
+  open:
+# Include{portalLink}
+questions:
+# Include{global}
+# Include{workload}
+# Include{workloadDeployment}
+
+# Include{replicas1}
+# Include{podSpec}
+# Include{containerMain}
+# Include{containerBasic}
+# Include{containerAdvanced}
+# Include{containerConfig}
+# Include{podOptions}
+
+  - variable: euterpe
+    group: App Configuration
+    label: Discord GSM Configuration
+    schema:
+      additional_attrs: true
+      type: dict
+      attrs:
+        - variable: basic_authenticate
+          label: Enable Basic Authenticate
+          schema:
+            type: boolean
+            default: false
+            show_subquestions_if: true
+            subquestions:
+              - variable: authentication
+                label: Authentication
+                schema:
+                  additional_attrs: true
+                  type: dict
+                  attrs:
+                    - variable: user
+                      label: Basic Auth Username
+                      schema:
+                        type: string
+                        required: true
+                        default: ""
+                    - variable: password
+                      label: Basic Auth Password
+                      schema:
+                        type: string
+                        required: true
+                        default: ""
+        - variable: libraries
+          label: Libraries
+          description: The `/root/Music` library is automatically added.
+          schema:
+            type: list
+            default: []
+            items:
+              - variable: libraryEntry
+                label: Library Entry
+                schema:
+                  type: string
+                  required: true
+                  default: ""
+        - variable: library_scan
+          label: Library Scan
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+              - variable: initial_wait_duration
+                label: Initial Wait Duration
+                schema:
+                  type: string
+                  default: 1s
+              - variable: files_per_operation
+                label: Files Per Operation
+                schema:
+                  type: int
+                  default: 1500
+              - variable: sleep_after_operation
+                label: Sleep After Operation
+                schema:
+                  type: string
+                  default: 15ms
+        - variable: discogs
+          label: Discogs Settings
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+              - variable: discogs_auth_token
+                label: Discogs Auth Token
+                schema:
+                  type: string
+                  default: ""
+              - variable: download_artwork
+                label: Download Artwork
+                schema:
+                  type: boolean
+                  default: false
+        - variable: show_danger_zone
+          label: Show Danger Zone Settings
+          schema:
+            type: boolean
+            default: false
+            show_subquestions_if: true
+            subquestions:
+              - variable: danger_zone
+                label: Danger Zone Settings
+                schema:
+                  additional_attrs: true
+                  type: dict
+                  attrs:
+                    - variable: gzip
+                      label: gzip
+                      schema:
+                        type: boolean
+                        default: true
+                    - variable: read_timeout
+                      label: Read Timeout
+                      schema:
+                        type: int
+                        default: 15
+                    - variable: write_timeout
+                      label: Write Timeout
+                      schema:
+                        type: int
+                        default: 1200
+                    - variable: max_header_bytes
+                      label: Max Header Bytes
+                      schema:
+                        type: int
+                        default: 1048576
+
+# Include{serviceRoot}
+        - variable: main
+          label: Main Service
+          description: The Primary service on which the healthcheck runs, often the webUI
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{serviceSelectorLoadBalancer}
+# Include{serviceSelectorExtras}
+                    - variable: main
+                      label: Main Service Port Configuration
+                      schema:
+                        additional_attrs: true
+                        type: dict
+                        attrs:
+                          - variable: port
+                            label: Port
+                            description: This port exposes the container port on the service
+                            schema:
+                              type: int
+                              default: 9996
+                              required: true
+# Include{serviceExpertRoot}
+# Include{serviceExpert}
+# Include{serviceList}
+# Include{persistenceRoot}
+        - variable: music
+          label: App Music Storage
+          description: Stores the Application Music.
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{persistenceBasic}
+# Include{persistenceList}
+# Include{ingressRoot}
+        - variable: main
+          label: Main Ingress
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{ingressDefault}
+# Include{ingressTLS}
+# Include{ingressTraefik}
+# Include{ingressAdvanced}
+# Include{ingressList}
+
+# Include{securityContextRoot}
+              - variable: runAsUser
+                label: "runAsUser"
+                description: "The UserID of the user running the application"
+                schema:
+                  type: int
+                  default: 0
+              - variable: runAsGroup
+                label: "runAsGroup"
+                description: "The groupID of the user running the application"
+                schema:
+                  type: int
+                  default: 0
+# Include{securityContextContainer}
+# Include{securityContextAdvanced}
+# Include{securityContextPod}
+              - variable: fsGroup
+                label: "fsGroup"
+                description: "The group that should own ALL storage."
+                schema:
+                  type: int
+                  default: 568
+
+# Include{resources}
+# Include{advanced}
+# Include{addons}
+# Include{codeserver}
+# Include{netshoot}
+# Include{vpn}
+# Include{documentation}

charts/dev/euterpe/templates/_secret.tpl

@@ -0,0 +1,64 @@
+{{/* Define the secret */}}
+{{- define "euterpe.secret" -}}
+
+{{- $secretName := printf "%s-secret" (include "tc.v1.common.names.fullname" .) }}
+{{- $secretStorageName := printf "%s-storage-secret" (include "tc.v1.common.names.fullname" .) }}
+
+{{- $secretKey := "" }}
+{{- with (lookup "v1" "Secret" .Release.Namespace $secretStorageName) }}
+  {{- $secretKey = (index .data "secret") | b64dec }}
+{{- else }}
+  {{- $secretKey = randAlphaNum 32 }}
+{{- end }}
+enabled: true
+data:
+  config.json: |
+    {
+      "listen": {{ printf ":%v" .Values.service.main.ports.main.port | quote }},
+      "ssl": false,
+
+      "basic_authenticate": {{ .Values.euterpe.basic_authenticate }},
+      "authentication": {
+          {{- with .Values.euterpe.authentication.user }}
+          "user": {{ . | quote }},
+          {{- end }}
+          {{- with .Values.euterpe.authentication.password }}
+          "password": {{ . | quote }},
+          {{- end }}
+          "secret": {{ $secretKey | quote }}
+      },
+
+      {{- $libraries := .Values.euterpe.libraries -}}
+      {{- $libraries = append $libraries .Values.persistence.music.mountPath }}
+
+      "libraries": [
+        {{- range initial $libraries }}
+          {{ . | quote }},
+        {{- end }}
+          {{ last $libraries | quote }}
+      ],
+
+      "library_scan": {
+          "initial_wait_duration": {{ .Values.euterpe.library_scan.initial_wait_duration | quote }},
+          "files_per_operation": {{ .Values.euterpe.library_scan.files_per_operation }},
+          "sleep_after_operation": {{ .Values.euterpe.library_scan.sleep_after_operation | quote }}
+      },
+
+      "download_artwork": {{ .Values.euterpe.discogs.download_artwork }},
+
+      {{- with .Values.euterpe.discogs.discogs_auth_token }}
+      "discogs_auth_token": {{ . | quote }},
+      {{- end }}
+
+      "gzip": {{ .Values.euterpe.danger_zone.gzip }},
+      "log_file": {{ .Values.euterpe.danger_zone.log_file | quote }},
+      "sqlite_database": {{ .Values.euterpe.danger_zone.sqlite_database | quote }},
+      "read_timeout": {{ .Values.euterpe.danger_zone.read_timeout }},
+      "write_timeout": {{ .Values.euterpe.danger_zone.write_timeout }},
+      "max_header_bytes": {{ .Values.euterpe.danger_zone.max_header_bytes | int }}
+    }
+enabled: true
+data:
+  {{/* Store secretKey to reuse */}}
+  secret: {{ $secretKey }}
+{{- end }}