chore(deps): update helm general non-major (#14287)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [clickhouse](https://truecharts.org/charts/dependency/clickhouse)
([source](https://togithub.com/truecharts/charts)) | patch | `7.0.16` ->
`7.0.19` |
|
[common](https://togithub.com/truecharts/apps/tree/master/charts/common)
([source](https://togithub.com/truecharts/library-charts)) | patch |
`14.2.0` -> `14.2.2` |
|
[common](https://togithub.com/truecharts/apps/tree/master/charts/common)
([source](https://togithub.com/truecharts/library-charts)) | patch |
`14.2.1` -> `14.2.2` |
|
[kube-state-metrics](https://truecharts.org/charts/dependency/kube-state-metrics)
([source](https://togithub.com/truecharts/charts)) | patch | `3.0.31` ->
`3.0.33` |
| [mariadb](https://truecharts.org/charts/dependency/mariadb)
([source](https://togithub.com/truecharts/charts)) | patch | `9.0.34` ->
`9.0.36` |
|
[node-exporter](https://truecharts.org/charts/dependency/node-exporter)
([source](https://togithub.com/truecharts/charts)) | patch | `3.0.33` ->
`3.0.35` |
| [redis](https://truecharts.org/charts/dependency/redis)
([source](https://togithub.com/truecharts/charts)) | patch | `8.0.37` ->
`8.0.40` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>truecharts/charts (clickhouse)</summary>

###
[`v7.0.19`](https://togithub.com/truecharts/charts/releases/tag/clickhouse-7.0.19)

[Compare
Source](https://togithub.com/truecharts/charts/compare/clickhouse-7.0.18...clickhouse-7.0.19)

ClickHouse is a column-oriented database management system (DBMS) for
online analytical processing of queries (OLAP).

###
[`v7.0.18`](https://togithub.com/truecharts/charts/releases/tag/clickhouse-7.0.18)

[Compare
Source](https://togithub.com/truecharts/charts/compare/clickhouse-7.0.17...clickhouse-7.0.18)

ClickHouse is a column-oriented database management system (DBMS) for
online analytical processing of queries (OLAP).

###
[`v7.0.17`](https://togithub.com/truecharts/charts/releases/tag/clickhouse-7.0.17)

[Compare
Source](https://togithub.com/truecharts/charts/compare/clickhouse-7.0.16...clickhouse-7.0.17)

ClickHouse is a column-oriented database management system (DBMS) for
online analytical processing of queries (OLAP).

</details>

<details>
<summary>truecharts/library-charts (common)</summary>

###
[`v14.2.2`](https://togithub.com/truecharts/library-charts/releases/tag/common-14.2.2)

[Compare
Source](https://togithub.com/truecharts/library-charts/compare/common-14.2.1...common-14.2.2)

Function library for TrueCharts

###
[`v14.2.1`](https://togithub.com/truecharts/library-charts/releases/tag/common-14.2.1)

[Compare
Source](https://togithub.com/truecharts/library-charts/compare/common-14.2.0...common-14.2.1)

Function library for TrueCharts

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "before 10pm on tuesday" in timezone
Europe/Amsterdam, Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://togithub.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://togithub.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy40My4zIiwidXBkYXRlZEluVmVyIjoiMzcuNDMuMyIsInRhcmdldEJyYW5jaCI6Im1hc3RlciJ9-->

.all-contributorsrc

@@ -1964,6 +1964,141 @@
       "contributions": [
         "code"
       ]
+    },
+    {
+      "login": "aamirazad",
+      "name": "Aamir Azad",
+      "avatar_url": "https://avatars.githubusercontent.com/u/82281117?v=4",
+      "profile": "http://tigertutoringtool.aamira.me",
+      "contributions": [
+        "doc"
+      ]
+    },
+    {
+      "login": "jordan-woyak",
+      "name": "Jordan Woyak",
+      "avatar_url": "https://avatars.githubusercontent.com/u/1768214?v=4",
+      "profile": "https://github.com/jordan-woyak",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "simon-hofmann",
+      "name": "Simon Hofman",
+      "avatar_url": "https://avatars.githubusercontent.com/u/23562420?v=4",
+      "profile": "https://github.com/simon-hofmann",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "notyouraveragegamer",
+      "name": "notyouraveragegamer",
+      "avatar_url": "https://avatars.githubusercontent.com/u/104248676?v=4",
+      "profile": "https://github.com/NotYourAverageGamer",
+      "contributions": [
+        "doc"
+      ]
+    },
+    {
+      "login": "varac",
+      "name": "Varac",
+      "avatar_url": "https://avatars.githubusercontent.com/u/488213?v=4",
+      "profile": "https://www.varac.net",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "tuxpizza",
+      "name": "tuxsudo",
+      "avatar_url": "https://avatars.githubusercontent.com/u/84710786?v=4",
+      "profile": "https://tux.pizza",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "TylerRudie",
+      "name": "TylerRudie",
+      "avatar_url": "https://avatars.githubusercontent.com/u/2695916?v=4",
+      "profile": "https://github.com/TylerRudie",
+      "contributions": [
+        "doc"
+      ]
+    },
+    {
+      "login": "qnb59bny5x",
+      "name": "qnb59bny5x",
+      "avatar_url": "https://avatars.githubusercontent.com/u/108427982?v=4",
+      "profile": "https://github.com/qnb59bny5x",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "drndos",
+      "name": "Filip Bednárik",
+      "avatar_url": "https://avatars.githubusercontent.com/u/5576134?v=4",
+      "profile": "https://blog.drndos.sk",
+      "contributions": [
+        "bug"
+      ]
+    },
+    {
+      "login": "sshcherbinin",
+      "name": "Serhii Shcherbinin",
+      "avatar_url": "https://avatars.githubusercontent.com/u/92396963?v=4",
+      "profile": "https://github.com/sshcherbinin",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "qraynaud",
+      "name": "Quentin Raynaud",
+      "avatar_url": "https://avatars.githubusercontent.com/u/65991?v=4",
+      "profile": "https://github.com/qraynaud",
+      "contributions": [
+        "bug"
+      ]
+    },
+    {
+      "login": "thegcat",
+      "name": "Felix Schäfer",
+      "avatar_url": "https://avatars.githubusercontent.com/u/22835?v=4",
+      "profile": "http://fachschaften.org",
+      "contributions": [
+        "doc"
+      ]
+    },
+    {
+      "login": "jndeverteuil",
+      "name": "Julien Nicolas de Verteuil",
+      "avatar_url": "https://avatars.githubusercontent.com/u/6644855?v=4",
+      "profile": "https://github.com/jndeverteuil",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "gabrieldonadel",
+      "name": "Gabriel Donadel Dall'Agnol",
+      "avatar_url": "https://avatars.githubusercontent.com/u/11707729?v=4",
+      "profile": "https://github.com/gabrieldonadel",
+      "contributions": [
+        "doc"
+      ]
+    },
+    {
+      "login": "jon-stumpf",
+      "name": "Jon S. Stumpf",
+      "avatar_url": "https://avatars.githubusercontent.com/u/7144996?v=4",
+      "profile": "https://github.com/jon-stumpf",
+      "contributions": [
+        "doc"
+      ]
     }
   ],
   "contributorsPerLine": 7,

.github/README.md

@@ -48,7 +48,7 @@ For big changes we do have a roadmap, every spot on the roadmap is synced to a T
 
 **Restructure of the Project - TrueNAS SCALE "Bluefin" 22.xx ALPHA 1**
 
-_The current project is hitting internal performance issues, for this reason we need to rework the structure and split some parts of the project into seperate repositories._
+_The current project is hitting internal performance issues, for this reason we need to rework the structure and split some parts of the project into separate repositories._
 
 <br />
 
@@ -60,7 +60,7 @@ _The shared Common (chart) basis, used by all our Charts, needs some significant
 
 **Increased test coverage - TrueNAS SCALE "Bluefin" 22.xx BETA 1**
 
-_With most parts of our project somewhat cleaned up, we need to work on increasing the coverage of our test system. Our unittests should cover all features and we should also take upgrades into account when testing Chart changes_
+_With most parts of our project somewhat cleaned up, we need to work on increasing the coverage of our test system. Our unit tests should cover all features and we should also take upgrades into account when testing Chart changes_
 
 <br />
 
@@ -124,7 +124,7 @@ A lot of our work is based on the great effort of others. We would love to exten
 ## Contributors ✨
 
 <!-- ALL-CONTRIBUTORS-BADGE:START - Do not remove or modify this section -->
-[![All Contributors](https://img.shields.io/badge/all_contributors-210-orange.svg?style=for-the-badge)](#contributors)
+[![All Contributors](https://img.shields.io/badge/all_contributors-225-orange.svg?style=for-the-badge)](#contributors)
 <!-- ALL-CONTRIBUTORS-BADGE:END -->
 
 Thanks goes to these wonderful people ([emoji key](https://allcontributors.org/docs/en/emoji-key)):
@@ -406,6 +406,27 @@ Thanks goes to these wonderful people ([emoji key](https://allcontributors.org/d
       <td align="center" valign="top" width="14.28%"><a href="https://github.com/MickaelFontes"><img src="https://avatars.githubusercontent.com/u/81414455?v=4?s=100" width="100px;" alt="MickaelFontes"/><br /><sub><b>MickaelFontes</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=MickaelFontes" title="Code">💻</a></td>
       <td align="center" valign="top" width="14.28%"><a href="https://github.com/blastik"><img src="https://avatars.githubusercontent.com/u/3662083?v=4?s=100" width="100px;" alt="David CM"/><br /><sub><b>David CM</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=blastik" title="Code">💻</a></td>
     </tr>
+    <tr>
+      <td align="center" valign="top" width="14.28%"><a href="http://tigertutoringtool.aamira.me"><img src="https://avatars.githubusercontent.com/u/82281117?v=4?s=100" width="100px;" alt="Aamir Azad"/><br /><sub><b>Aamir Azad</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=aamirazad" title="Documentation">📖</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/jordan-woyak"><img src="https://avatars.githubusercontent.com/u/1768214?v=4?s=100" width="100px;" alt="Jordan Woyak"/><br /><sub><b>Jordan Woyak</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=jordan-woyak" title="Code">💻</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/simon-hofmann"><img src="https://avatars.githubusercontent.com/u/23562420?v=4?s=100" width="100px;" alt="Simon Hofman"/><br /><sub><b>Simon Hofman</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=simon-hofmann" title="Code">💻</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/NotYourAverageGamer"><img src="https://avatars.githubusercontent.com/u/104248676?v=4?s=100" width="100px;" alt="notyouraveragegamer"/><br /><sub><b>notyouraveragegamer</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=notyouraveragegamer" title="Documentation">📖</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://www.varac.net"><img src="https://avatars.githubusercontent.com/u/488213?v=4?s=100" width="100px;" alt="Varac"/><br /><sub><b>Varac</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=varac" title="Code">💻</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://tux.pizza"><img src="https://avatars.githubusercontent.com/u/84710786?v=4?s=100" width="100px;" alt="tuxsudo"/><br /><sub><b>tuxsudo</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=tuxpizza" title="Code">💻</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/TylerRudie"><img src="https://avatars.githubusercontent.com/u/2695916?v=4?s=100" width="100px;" alt="TylerRudie"/><br /><sub><b>TylerRudie</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=TylerRudie" title="Documentation">📖</a></td>
+    </tr>
+    <tr>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/qnb59bny5x"><img src="https://avatars.githubusercontent.com/u/108427982?v=4?s=100" width="100px;" alt="qnb59bny5x"/><br /><sub><b>qnb59bny5x</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=qnb59bny5x" title="Code">💻</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://blog.drndos.sk"><img src="https://avatars.githubusercontent.com/u/5576134?v=4?s=100" width="100px;" alt="Filip Bednárik"/><br /><sub><b>Filip Bednárik</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3Adrndos" title="Bug reports">🐛</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/sshcherbinin"><img src="https://avatars.githubusercontent.com/u/92396963?v=4?s=100" width="100px;" alt="Serhii Shcherbinin"/><br /><sub><b>Serhii Shcherbinin</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=sshcherbinin" title="Code">💻</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/qraynaud"><img src="https://avatars.githubusercontent.com/u/65991?v=4?s=100" width="100px;" alt="Quentin Raynaud"/><br /><sub><b>Quentin Raynaud</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3Aqraynaud" title="Bug reports">🐛</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="http://fachschaften.org"><img src="https://avatars.githubusercontent.com/u/22835?v=4?s=100" width="100px;" alt="Felix Schäfer"/><br /><sub><b>Felix Schäfer</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=thegcat" title="Documentation">📖</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/jndeverteuil"><img src="https://avatars.githubusercontent.com/u/6644855?v=4?s=100" width="100px;" alt="Julien Nicolas de Verteuil"/><br /><sub><b>Julien Nicolas de Verteuil</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=jndeverteuil" title="Code">💻</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/gabrieldonadel"><img src="https://avatars.githubusercontent.com/u/11707729?v=4?s=100" width="100px;" alt="Gabriel Donadel Dall'Agnol"/><br /><sub><b>Gabriel Donadel Dall'Agnol</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=gabrieldonadel" title="Documentation">📖</a></td>
+    </tr>
+    <tr>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/jon-stumpf"><img src="https://avatars.githubusercontent.com/u/7144996?v=4?s=100" width="100px;" alt="Jon S. Stumpf"/><br /><sub><b>Jon S. Stumpf</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=jon-stumpf" title="Documentation">📖</a></td>
+    </tr>
   </tbody>
 </table>
 

.github/SUPPORT.md

@@ -16,15 +16,12 @@ We also document which versions of TrueNAS will receive TrueCharts updates and f
 
 | TrueNAS version  | Branch   | Supported with updates | Accepting Support tickets | Accepting Bug Reports | Notes                                                                                                          |
 | ---------------- | -------- | ---------------------- | ------------------------- | --------------------- | -------------------------------------------------------------------------------------------------------------- |
-| 22.02.4 or prior | `master` | :x:                    | :x:                       | :x:                   | Advised to update to 22.12.2 release of [TrueNAS SCALE](https://www.truenas.com/docs/scale/scalereleasenotes/) |
-| 22.12.0          | `master` | :white_check_mark:     | :white_check_mark:        | :white_check_mark:    | Stable Release as of 2022-12-13                                                                                |
-| 22.12.1          | `master` | :white_check_mark:     | :white_check_mark:        | :white_check_mark:    | Stable Release as of 2023-02-21                                                                                |
-| 22.12.2          | `master` | :white_check_mark:     | :white_check_mark:        | :white_check_mark:    | Stable Release as of 2023-04-11                                                                                |
-| 22.12.3          | `master` | :white_check_mark:     | :white_check_mark:        | :white_check_mark:    | Stable Release as of 2023-06-13                                                                                |
-| 22.12.3.1        | `master` | :white_check_mark:     | :white_check_mark:        | :white_check_mark:    | Stable Release as of 2023-06-20                                                                                |
-| 22.12.3.2        | `master` | :white_check_mark:     | :white_check_mark:        | :white_check_mark:    | Stable Release as of 2023-07-05                                                                                |
-| 22.12.3.3        | `master` | :white_check_mark:     | :white_check_mark:        | :white_check_mark:    | Stable Release as of 2023-07-25                                                                                |
+| 22.12.4.1 or prior| `master` | :x:                    | :x:                       | :x:                   | Update to 23.10.X Supported Version [TrueNAS SCALE](https://www.truenas.com/docs/scale/23.10/)                |
+| 22.12.4.2        | `master` | :white_check_mark:     | :white_check_mark:        | :x:                   | Stable Release as of 2023-10-13 Recommended to update to 23.10.x  [TrueNAS SCALE](https://www.truenas.com/docs/scale/23.10/) |
+| 23.10.0          | `master` | :white_check_mark:     | :white_check_mark:        | :white_check_mark:    | Stable Release as of 2023-10-24                                                                                |
+| 23.10.0.1        | `master` | :white_check_mark:     | :white_check_mark:        | :white_check_mark:    | Stable Release as of 2023-10-31                                                                                |
 | Nightly          | `master` | :white_check_mark:     | :x:                       | :white_check_mark:    | Please only submit bug reports during codefreeze                                                               |
+| 23.10.1          | `master` | :white_check_mark:     | :x:                       | :x:                   | To Be Released                                                                                                 |
 
 :::warning Support Guidelines
 

.github/actions/collect-changes/action.yaml

@@ -50,7 +50,6 @@ runs:
         # Set output to changed charts
         echo "Changed charts: ${CHARTS[*]}"
         printf "::set-output name=addedOrModified::%s\n" "${CHARTS[*]}"
-        
 
     - name: Collect bumped charts after last tag
       id: filter-bumped-charts

.github/ct-install.yaml

@@ -12,15 +12,18 @@ chart-dirs:
 excluded-charts:
   - charts/dependency/subchart
   - charts/incubator/twingate-connector
+  - charts/incubator/docassemble
   - charts/incubator/eco
   - charts/incubator/midarr
   - charts/incubator/orbital-sync
   - charts/incubator/plex-meta-manager
+  - charts/incubator/telepush
   - charts/library/common
   - charts/stable/alertmanager-bot
   - charts/stable/alertmanager-bot
   - charts/stable/alertmanager-discord
   - charts/stable/amcrest2mqtt
+  - charts/stable/arksurvivalevolved
   - charts/stable/tauticord
   - charts/stable/discordgsm
   - charts/stable/facebox
@@ -28,6 +31,7 @@ excluded-charts:
   - charts/stable/heimdall
   - charts/stable/mc-router
   - charts/stable/multus
+  - charts/stable/local-ai
   - charts/stable/orbital-sync
   - charts/stable/plex-meta-manager
   - charts/stable/pod-gateway

.github/scripts/build-catalog.sh

@@ -74,7 +74,8 @@ patch_apps() {
     cat ${target}/Chart.yaml | grep "icon" >> catalog/${train}/${chartname}/item.yaml
     sed -i "s|^icon:|icon_url:|g" catalog/${train}/${chartname}/item.yaml
     echo "categories:" >> catalog/${train}/${chartname}/item.yaml
-    cat ${target}/Chart.yaml | yq '.annotations."truecharts.org/catagories"' -r >> catalog/${train}/${chartname}/item.yaml
+    category=$(cat ${target}/Chart.yaml | yq '.annotations."truecharts.org/category"' -r)
+    echo "- $category" >> catalog/${train}/${chartname}/item.yaml
 
     # Generate screenshots
     screenshots=""

.github/workflows/catalog-test.yaml

@@ -17,7 +17,7 @@ jobs:
     container:
       image: ghcr.io/truecharts/devcontainer:3.1.10@sha256:c239addf725eb5cedf79517f8089fdafdc32b5270d1893ee87ae6e511b9bcae3
     steps:
-      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         name: Checkout
         with:
           fetch-depth: 100

.github/workflows/charts-lint.yaml

@@ -22,13 +22,13 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout [master]
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           fetch-depth: 1
           ref: master
 
       - name: Checkout [commit]
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
@@ -108,7 +108,7 @@ jobs:
       - name: Create/Update comment
         if: steps.list-changed.outputs.detected == 'true'
         continue-on-error: true
-        uses: thollander/actions-comment-pull-request@d61db783da9abefc3437960d0cce08552c7c004f # v2
+        uses: thollander/actions-comment-pull-request@1d3973dc4b8e1399c0620d3f2b1aa5e795465308 # v2
         with:
           filePath: /tmp/lint_result.txt
           comment_tag: lint_results

.github/workflows/charts-release.yaml

@@ -17,13 +17,13 @@ jobs:
       image: ghcr.io/truecharts/devcontainer:3.1.10@sha256:c239addf725eb5cedf79517f8089fdafdc32b5270d1893ee87ae6e511b9bcae3
     steps:
       - name: Checkout
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           token: ${{ secrets.BOT_TOKEN }}
           fetch-depth: 1
 
       - name: Checkout Helm-Staging
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           fetch-depth: 1
           repository: truecharts/helm-staging
@@ -93,7 +93,7 @@ jobs:
           GPG_PASSPHRASE: "${{ secrets.GPG_PASSPHRASE }}"
 
       - name: Checkout
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           token: ${{ secrets.BOT_TOKEN }}
           fetch-depth: 0
@@ -125,7 +125,7 @@ jobs:
           find . -name '*.sh' | xargs chmod +x
 
       - name: Checkout
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         if: |
           steps.collect-changes.outputs.changesDetectedAfterTag == 'true'
         with:
@@ -206,6 +206,10 @@ jobs:
                 echo "" >> website/docs/charts/${train}/${chart}/index.md
                 cat charts/${train}/${chart}/Chart.yaml | yq .description -r >> website/docs/charts/${train}/${chart}/index.md
                 echo "" >> website/docs/charts/${train}/${chart}/index.md
+                echo "## Chart Sources" >> website/docs/charts/${train}/${chart}/index.md
+                echo "" >> website/docs/charts/${train}/${chart}/index.md
+                cat charts/${train}/${chart}/Chart.yaml | go-yq .sources -r >> website/docs/charts/${train}/${chart}/index.md
+                echo "" >> website/docs/charts/${train}/${chart}/index.md
                 echo "## Available Documentation" >> website/docs/charts/${train}/${chart}/index.md
                 echo "" >> website/docs/charts/${train}/${chart}/index.md
 
@@ -240,7 +244,7 @@ jobs:
           git push
 
       - name: Checkout Catalog
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         if: |
           steps.collect-changes.outputs.changesDetectedAfterTag == 'true'
         with:
@@ -303,7 +307,7 @@ jobs:
           GPG_PASSPHRASE: "${{ secrets.GPG_PASSPHRASE }}"
 
       - name: Run chart-releaser for dependency apps
-        uses: helm/chart-releaser-action@be16258da8010256c6e82849661221415f031968 # v1.5.0
+        uses: helm/chart-releaser-action@a917fd15b20e8b64b94d9158ad54cd6345335584 # v1.6.0
         if: |
           steps.collect-changes.outputs.changesDetectedAfterTag == 'true'
         with:

.github/workflows/charts-test.yaml

@@ -50,7 +50,7 @@ jobs:
       detected6: ${{ steps.list-changed.outputs.detected6 }}
     steps:
       - name: Checkout
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
@@ -115,7 +115,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
@@ -127,12 +127,12 @@ jobs:
             helmv3
           helm: "3.9.4"
 
-      - uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1 # v4
+      - uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4
         with:
           python-version: "3.11"
 
       - name: Set up chart-testing
-        uses: helm/chart-testing-action@e8788873172cb653a90ca2e819d79d65a66d4e76 # v2.4.0
+        uses: helm/chart-testing-action@b43128a8b25298e1e7b043b78ea6613844e079b1 # v2.6.0
 
       - name: Create k3d cluster
         uses: nolar/setup-k3d-k3s@v1
@@ -169,6 +169,9 @@ jobs:
           if [[ "${{ matrix.chart }}" != "charts/operators/prometheus-operator" ]]; then
             helm install prometheus-operator truecharts/prometheus-operator --namespace prometheus-operator --create-namespace --wait
           fi
+          if [[ "${{ matrix.chart }}" != "charts/enterprise/traefik" ]]; then
+            helm install traefik truecharts/traefik --namespace traefik --create-namespace --wait
+          fi
 
       - name: Run chart-testing (install)
         run: ct install --config ".github/ct-install.yaml" --charts "${{ matrix.chart }}" # --upgrade
@@ -185,7 +188,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
@@ -197,12 +200,12 @@ jobs:
             helmv3
           helm: "3.9.4"
 
-      - uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1 # v4
+      - uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4
         with:
           python-version: "3.11"
 
       - name: Set up chart-testing
-        uses: helm/chart-testing-action@e8788873172cb653a90ca2e819d79d65a66d4e76 # v2.4.0
+        uses: helm/chart-testing-action@b43128a8b25298e1e7b043b78ea6613844e079b1 # v2.6.0
 
       - name: Create k3d cluster
         uses: nolar/setup-k3d-k3s@v1
@@ -231,6 +234,9 @@ jobs:
           if [[ "${{ matrix.chart }}" != "charts/operators/prometheus-operator" ]]; then
             helm install prometheus-operator truecharts/prometheus-operator --namespace prometheus-operator --create-namespace --wait
           fi
+          if [[ "${{ matrix.chart }}" != "charts/enterprise/traefik" ]]; then
+            helm install traefik truecharts/traefik --namespace traefik --create-namespace --wait
+          fi
 
       - name: Run chart-testing (install)
         run: ct install --config ".github/ct-install.yaml" --charts "${{ matrix.chart }}" # --upgrade
@@ -247,7 +253,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
@@ -259,12 +265,12 @@ jobs:
             helmv3
           helm: "3.9.4"
 
-      - uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1 # v4
+      - uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4
         with:
           python-version: "3.11"
 
       - name: Set up chart-testing
-        uses: helm/chart-testing-action@e8788873172cb653a90ca2e819d79d65a66d4e76 # v2.4.0
+        uses: helm/chart-testing-action@b43128a8b25298e1e7b043b78ea6613844e079b1 # v2.6.0
 
       - name: Create k3d cluster
         uses: nolar/setup-k3d-k3s@v1
@@ -293,6 +299,9 @@ jobs:
           if [[ "${{ matrix.chart }}" != "charts/operators/prometheus-operator" ]]; then
             helm install prometheus-operator truecharts/prometheus-operator --namespace prometheus-operator --create-namespace --wait
           fi
+          if [[ "${{ matrix.chart }}" != "charts/enterprise/traefik" ]]; then
+            helm install traefik truecharts/traefik --namespace traefik --create-namespace --wait
+          fi
 
       - name: Run chart-testing (install)
         run: ct install --config ".github/ct-install.yaml" --charts "${{ matrix.chart }}" # --upgrade
@@ -309,7 +318,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
@@ -321,12 +330,12 @@ jobs:
             helmv3
           helm: "3.9.4"
 
-      - uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1 # v4
+      - uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4
         with:
           python-version: "3.11"
 
       - name: Set up chart-testing
-        uses: helm/chart-testing-action@e8788873172cb653a90ca2e819d79d65a66d4e76 # v2.4.0
+        uses: helm/chart-testing-action@b43128a8b25298e1e7b043b78ea6613844e079b1 # v2.6.0
 
       - name: Create k3d cluster
         uses: nolar/setup-k3d-k3s@v1
@@ -355,6 +364,9 @@ jobs:
           if [[ "${{ matrix.chart }}" != "charts/operators/prometheus-operator" ]]; then
             helm install prometheus-operator truecharts/prometheus-operator --namespace prometheus-operator --create-namespace --wait
           fi
+          if [[ "${{ matrix.chart }}" != "charts/enterprise/traefik" ]]; then
+            helm install traefik truecharts/traefik --namespace traefik --create-namespace --wait
+          fi
 
       - name: Run chart-testing (install)
         run: ct install --config ".github/ct-install.yaml" --charts "${{ matrix.chart }}" # --upgrade
@@ -371,7 +383,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
@@ -383,12 +395,12 @@ jobs:
             helmv3
           helm: "3.9.4"
 
-      - uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1 # v4
+      - uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4
         with:
           python-version: "3.11"
 
       - name: Set up chart-testing
-        uses: helm/chart-testing-action@e8788873172cb653a90ca2e819d79d65a66d4e76 # v2.4.0
+        uses: helm/chart-testing-action@b43128a8b25298e1e7b043b78ea6613844e079b1 # v2.6.0
 
       - name: Create k3d cluster
         uses: nolar/setup-k3d-k3s@v1
@@ -417,6 +429,10 @@ jobs:
           if [[ "${{ matrix.chart }}" != "charts/operators/prometheus-operator" ]]; then
             helm install prometheus-operator truecharts/prometheus-operator --namespace prometheus-operator --create-namespace --wait
           fi
+          if [[ "${{ matrix.chart }}" != "charts/enterprise/traefik" ]]; then
+            helm install traefik truecharts/traefik --namespace traefik --create-namespace --wait
+          fi
+
       - name: Run chart-testing (install)
         run: ct install --config ".github/ct-install.yaml" --charts "${{ matrix.chart }}" # --upgrade
 
@@ -432,7 +448,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
@@ -444,12 +460,12 @@ jobs:
             helmv3
           helm: "3.9.4"
 
-      - uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1 # v4
+      - uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4
         with:
           python-version: "3.11"
 
       - name: Set up chart-testing
-        uses: helm/chart-testing-action@e8788873172cb653a90ca2e819d79d65a66d4e76 # v2.4.0
+        uses: helm/chart-testing-action@b43128a8b25298e1e7b043b78ea6613844e079b1 # v2.6.0
 
       - name: Create k3d cluster
         uses: nolar/setup-k3d-k3s@v1
@@ -478,6 +494,9 @@ jobs:
           if [[ "${{ matrix.chart }}" != "charts/operators/prometheus-operator" ]]; then
             helm install prometheus-operator truecharts/prometheus-operator --namespace prometheus-operator --create-namespace --wait
           fi
+          if [[ "${{ matrix.chart }}" != "charts/enterprise/traefik" ]]; then
+            helm install traefik truecharts/traefik --namespace traefik --create-namespace --wait
+          fi
 
       - name: Run chart-testing (install)
         run: ct install --config ".github/ct-install.yaml" --charts "${{ matrix.chart }}" # --upgrade

.github/workflows/daily.yaml

@@ -20,7 +20,7 @@ jobs:
       image: ghcr.io/truecharts/devcontainer:3.1.10@sha256:c239addf725eb5cedf79517f8089fdafdc32b5270d1893ee87ae6e511b9bcae3
     steps:
       - name: Checkout
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           token: ${{ secrets.BOT_TOKEN }}
           fetch-depth: 1
@@ -55,7 +55,7 @@ jobs:
           done
 
       - name: Checkout
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           repository: truecharts/website
           path: website
@@ -248,7 +248,7 @@ jobs:
           helm repo update
 
       - name: Checkout
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           token: ${{ secrets.BOT_TOKEN }}
           fetch-depth: 1
@@ -257,7 +257,7 @@ jobs:
         run: git config --global --add safe.directory "$GITHUB_WORKSPACE"
 
       - name: Checkout website
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           fetch-depth: 1
           repository: truecharts/website
@@ -377,12 +377,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           token: ${{ secrets.BOT_TOKEN }}
           fetch-depth: 1
 
-      - uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # v3
+      - uses: actions/setup-node@8f152de45cc393bb48ce5d89d36b731f54556e65 # v4
         with:
           node-version: 18
 

.github/workflows/pr-validate.yaml

@@ -17,7 +17,7 @@ jobs:
       addedOrModifiedCharts: ${{ steps.collect-changes.outputs.addedOrModifiedCharts }}
     steps:
       - name: Checkout
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
 
       - name: Collect changes
         id: collect-changes
@@ -57,7 +57,7 @@ jobs:
       head-commit-message: ${{ steps.get_head_commit_message.outputs.headCommitMsg }}
     steps:
       - name: Get repo
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           ref: ${{ github.event.pull_request.head.sha }}
       - name: verbose head git commit message

.github/workflows/prune.yaml

@@ -9,7 +9,7 @@ jobs:
     name: "prune old releases"
     steps:
       - name: Checkout
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           fetch-depth: 0
       - uses: actions/delete-package-versions@0d39a63126868f5eefaa47169615edd3c0f61e20 # v4

.github/workflows/renovate-bump.yaml

@@ -14,12 +14,12 @@ jobs:
     container:
       image: ghcr.io/truecharts/devcontainer:3.1.10@sha256:c239addf725eb5cedf79517f8089fdafdc32b5270d1893ee87ae6e511b9bcae3
     steps:
-      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         name: Checkout
         with:
           fetch-depth: 0
           token: ${{ secrets.BOT_TOKEN }}
-      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         name: Checkout
         with:
           fetch-depth: 0

.github/workflows/renovate.yml

@@ -8,11 +8,11 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
         with:
           token: ${{ secrets.BOT_TOKEN }}
       - name: Self-hosted Renovate
-        uses: renovatebot/github-action@3cef36a9aba515d8726b491905b3bc766832e221 # v39.0.5
+        uses: renovatebot/github-action@5c6c06aa0e3d7a6a9b6cba05c078c51631b5f11a # v39.1.1
         with:
           configurationFile: .github/renovate-config.js
           token: ${{ secrets.BOT_TOKEN }}

.github/workflows/schedule-sync-labels.yaml

@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           token: ${{ secrets.BOT_TOKEN }}
 

charts/dependency/clickhouse/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "23.8.2.7"
+appVersion: "23.10.1.19"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.6
+    version: 14.2.2
 deprecated: false
 description: ClickHouse is a column-oriented database management system (DBMS) for online analytical processing of queries (OLAP).
 home: https://truecharts.org/charts/dependency/clickhouse
@@ -22,9 +22,8 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/dependency/clickhouse
   - https://clickhouse.com/
 type: application
-version: 7.0.7
+version: 7.0.20
 annotations:
-  truecharts.org/catagories: |
-    - database
+  truecharts.org/category: database
   truecharts.org/SCALE-support: "true"
   truecharts.org/grade: U

charts/dependency/clickhouse/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/clickhouse
   pullPolicy: IfNotPresent
-  tag: v23.8.2.7@sha256:59d8931ff246dfe2740cfb53ae5db62242b05b1bd9f8dffac3dbbb634109fe0a
+  tag: v23.10.1.1976@sha256:70a2209917d2dcfe33b09e60dda9012c4f6638e9335b3afefac2cb89ba0c670c
 
 workload:
   main:

charts/dependency/kube-state-metrics/Chart.yaml

@@ -3,7 +3,7 @@ appVersion: "2.10.0"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.6
+    version: 14.2.2
 deprecated: false
 description: kube-state-metrics is a simple service that listens to the Kubernetes API server and generates metrics about the state of the objects.
 home: https://truecharts.org/charts/dependency/kube-state-metrics
@@ -21,9 +21,8 @@ name: kube-state-metrics
 sources:
   - https://github.com/truecharts/charts/tree/master/charts/dependency/kube-state-metrics
 type: application
-version: 3.0.13
+version: 3.0.33
 annotations:
-  truecharts.org/catagories: |
-    - metrics
+  truecharts.org/category: metrics
   truecharts.org/SCALE-support: "true"
   truecharts.org/grade: U

charts/dependency/kube-state-metrics/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/kube-state-metrics
   pullPolicy: IfNotPresent
-  tag: v2.10.0@sha256:0e73ed04d6d91d0892f2b81cc6642624ee2499a333cb0f0ff6c89c9d2a787f0d
+  tag: v2.10.0@sha256:5dd17a0a28532d6dfba742e1ba39f894e653cd5ca13c313e21120ee4f9d81024
 
 service:
   main:

charts/dependency/mariadb/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "11.0.3"
+appVersion: "11.1.2"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.6
+    version: 14.2.2
 deprecated: false
 description: Fast, reliable, scalable, and easy to use open-source relational database system.
 home: https://truecharts.org/charts/dependency/mariadb
@@ -25,9 +25,8 @@ sources:
   - https://github.com/prometheus/mysqld_exporter
   - https://mariadb.org
 type: application
-version: 9.0.15
+version: 9.0.36
 annotations:
-  truecharts.org/catagories: |
-    - database
+  truecharts.org/category: database
   truecharts.org/SCALE-support: "true"
   truecharts.org/grade: U

charts/dependency/mariadb/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/mariadb
   pullPolicy: IfNotPresent
-  tag: v11.0.3@sha256:4a87c148792e6bb9bbc340e6a992255ee8596fa3e9b28de5038c632cf28ec93c
+  tag: v11.1.2@sha256:3ec39631c2e7c4a3564ccf0726a19078fd056601ee7a66761d62344b585e9289
 
 workload:
   main:

charts/dependency/memcached/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "1.6.21"
+appVersion: "1.6.22"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.6
+    version: 14.2.2
 deprecated: false
 description: Memcached is a memory-backed database caching solution
 home: https://truecharts.org/charts/dependency/memcached
@@ -23,10 +23,8 @@ sources:
   - https://github.com/bitnami/bitnami-docker-memcached
   - http://memcached.org/
 type: application
-version: 8.0.16
+version: 8.0.37
 annotations:
-  truecharts.org/catagories: |
-    - database
-    - cache
+  truecharts.org/category: database
   truecharts.org/SCALE-support: "true"
   truecharts.org/grade: U

charts/dependency/memcached/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/memcached
   pullPolicy: IfNotPresent
-  tag: v1.6.21@sha256:117c7f246c0854b46f655a73f411f418e8f78a50cafec5e92d6ebfdb49319331
+  tag: v1.6.22@sha256:1d021040b76aceb199a879ff295f836a007ec64cabdba1482c511fd245b3b7ec
 
 service:
   main:

charts/dependency/mongodb/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "6.0.9"
+appVersion: "7.0.2"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.6
+    version: 14.2.2
 deprecated: false
 description: Fast, reliable, scalable, and easy to use open-source no-sql database system.
 home: https://truecharts.org/charts/dependency/mongodb
@@ -23,9 +23,8 @@ sources:
   - https://github.com/bitnami/bitnami-docker-mongodb
   - https://www.mongodb.com
 type: application
-version: 8.0.11
+version: 8.0.34
 annotations:
-  truecharts.org/catagories: |
-    - database
+  truecharts.org/category: database
   truecharts.org/SCALE-support: "true"
   truecharts.org/grade: U

charts/dependency/mongodb/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/mongodb
   pullPolicy: IfNotPresent
-  tag: v6.0.9@sha256:8a867b30c13acb263a0b9f29b8fb9d733fe6bd659d84563db06102c45571dd25
+  tag: v7.0.2@sha256:2ecf33de2273eb9da76e778d5cad92e55ccbb8ade8e2e0a997e7f40afc058631
 
 workload:
   main:

charts/dependency/node-exporter/Chart.yaml

@@ -3,7 +3,7 @@ appVersion: "1.6.1"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.6
+    version: 14.2.2
 deprecated: false
 description: Prometheus exporter for hardware and OS metrics exposed by UNIX kernels, with pluggable metric collectors.
 home: https://truecharts.org/charts/dependency/node-exporter
@@ -21,9 +21,8 @@ name: node-exporter
 sources:
   - https://github.com/truecharts/charts/tree/master/charts/dependency/node-exporter
 type: application
-version: 3.0.14
+version: 3.0.35
 annotations:
-  truecharts.org/catagories: |
-    - metrics
+  truecharts.org/category: metrics
   truecharts.org/SCALE-support: "true"
   truecharts.org/grade: U

charts/dependency/node-exporter/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/node-exporter
   pullPolicy: IfNotPresent
-  tag: v1.6.1@sha256:0672c1a846be61018b11cd88ce0df3629d7a80ec895b93051b2b7a5c7fe8b080
+  tag: v1.6.1@sha256:c150064746d1155d557663650603ea428eacd22c40da62f2ec3078b4c2ade1ba
 
 service:
   main:

charts/dependency/redis/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "7.2.1"
+appVersion: "7.2.3"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.6
+    version: 14.2.2
 deprecated: false
 description: Open source, advanced key-value store.
 home: https://truecharts.org/charts/dependency/redis
@@ -23,10 +23,8 @@ sources:
   - https://github.com/bitnami/bitnami-docker-redis
   - http://redis.io/
 type: application
-version: 8.0.19
+version: 8.0.40
 annotations:
-  truecharts.org/catagories: |
-    - database
-    - cache
+  truecharts.org/category: database
   truecharts.org/SCALE-support: "true"
   truecharts.org/grade: U

charts/dependency/redis/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/redis
   pullPolicy: IfNotPresent
-  tag: v7.2.1@sha256:37dfec3b4ba963bb135f7948e82fec8753e0b52bf714307bf001a3e3d50f2fbf
+  tag: v7.2.3@sha256:9d51d05196beb255805741dbd3d843154de9a816f9f6a65e0fa0c8d43f48aa45
 
 workload:
   main:

charts/dependency/solr/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "9.3.0"
+appVersion: "9.4.0"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.6
+    version: 14.2.2
 deprecated: false
 description: Apache Solr
 home: https://truecharts.org/charts/dependency/solr
@@ -22,9 +22,8 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/dependency/solr
   - https://github.com/apache/solr
 type: application
-version: 6.0.16
+version: 6.0.37
 annotations:
-  truecharts.org/catagories: |
-    - search
+  truecharts.org/category: search
   truecharts.org/SCALE-support: "true"
   truecharts.org/grade: U

charts/dependency/solr/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/solr
   pullPolicy: IfNotPresent
-  tag: v9.3.0@sha256:a4c234e4dd04d2ebc4c18b97097973cb153fdb22a4ade306ad7607c1a032980c
+  tag: v9.4.0@sha256:4f2620c0115b8d36471f3247fc319dce25404db1d361ce0195e9ce8dfbf5143f
 
 workload:
   main:

charts/enterprise/authelia/Chart.yaml

@@ -3,11 +3,11 @@ appVersion: "4.37.5"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.1
+    version: 14.2.2
   - condition: redis.enabled
     name: redis
     repository: https://deps.truecharts.org
-    version: 7.0.6
+    version: 8.0.40
 deprecated: false
 description: Authelia is a Single Sign-On Multi-Factor portal for web apps
 home: https://truecharts.org/charts/enterprise/authelia
@@ -35,9 +35,8 @@ sources:
   - https://github.com/authelia/chartrepo
   - https://github.com/authelia/authelia
 type: application
-version: 18.1.0
+version: 19.0.5
 annotations:
-  truecharts.org/catagories: |
-    - security
+  truecharts.org/category: security
   truecharts.org/SCALE-support: "true"
   truecharts.org/grade: U

charts/enterprise/authelia/docs/Setup-Guide.md

@@ -103,6 +103,7 @@ The last step is adding the `forwardauth` along with the standard `ingress` sett
 - In this example we use the same name as above, or `auth`. Click `Add` to the `Traefik Middlewares` section, and enter your `forwardauth` name.
 
 ![TraefikForwardAuthMiddleware](img/TraefikForwardAuthMiddleware.png)
+
 ### References
 
 The origin material for this guide is available on the [LLDAP Github](https://github.com/lldap/lldap). While further information on Authelia can be found on their [Github](https://github.com/authelia/authelia) and [website](https://www.authelia.com/).

charts/enterprise/authelia/templates/_configmap.tpl

@@ -219,10 +219,10 @@ data:
         {{- with $notifier.smtp.username }}
         username: {{ . }}
         {{- end }}
-        sender: {{ $notifier.smtp.sender }}
-        identifier: {{ $notifier.smtp.identifier }}
+        sender: {{ $notifier.smtp.sender | quote }}
+        identifier: {{ $notifier.smtp.identifier | quote }}
         subject: {{ $notifier.smtp.subject | quote }}
-        startup_check_address: {{ $notifier.smtp.startup_check_address }}
+        startup_check_address: {{ $notifier.smtp.startup_check_address | quote }}
         disable_require_tls: {{ $notifier.smtp.disable_require_tls }}
         disable_html_emails: {{ $notifier.smtp.disable_html_emails }}
         tls:

charts/enterprise/blocky/Chart.yaml

@@ -1,13 +1,13 @@
 apiVersion: v2
-appVersion: "0.21.0"
+appVersion: "0.22.0"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.1
+    version: 14.2.2
   - condition: redis.enabled
     name: redis
     repository: https://deps.truecharts.org
-    version: 7.0.6
+    version: 8.0.40
 description: Blocky is a DNS proxy, DNS enhancer and ad-blocker for the local network written in Go
 home: https://truecharts.org/charts/enterprise/blocky
 icon: https://truecharts.org/img/hotlink-ok/chart-icons/blocky.png
@@ -25,9 +25,8 @@ sources:
   - https://0xerr0r.github.io/blocky/
   - https://github.com/0xERR0R/blocky
   - https://github.com/Mozart409/blocky-frontend
-version: 8.0.0
+version: 9.0.3
 annotations:
-  truecharts.org/catagories: |
-    - network
+  truecharts.org/category: network
   truecharts.org/SCALE-support: "true"
   truecharts.org/grade: U

charts/enterprise/blocky/docs/setup-guide.md

@@ -1,12 +1,29 @@
 # Blocky Setup Guide
 
-This will guide you through the basic setup of Blocky which is the preferred DNS solution for TrueCharts. This guide will cover basic setup options which will get you up and running and is not all inclusive.
+This will guide you through the basic setup of Blocky which is the preferred DNS solution for TrueCharts. This guide will cover basic setup options which will get you up and running and is not all inclusive. Configuring your devices to use Blocky is out of scope of this guide.
 
 ## Upstream DNS
 
-Blocky has multiple DNS entries configured by default these can be overridden to your personal preferences or left as default.
+Blocky has the following DNS entries configured by default. They can be overridden to your personal preferences or left as default. Here are some common ones:
 
-Blocky supports 3 methods for upstream DNS.
+- 1.1.1.1
+- 1.0.0.1
+- 8.8.8.8
+- 8.8.4.4
+- 9.9.9.9
+- 149.112.112.112
+- 208.67.222.222
+- 208.67.220.220
+- 8.26.56.26
+- 8.20.247.20
+- 185.228.168.9
+- 185.228.169.9
+- 76.76.19.19
+- 76.223.122.150
+- 76.76.2.0
+- 76.76.10.0
+
+Blocky supports 3 methods for upstream DNS. You can use any combination of the below.
 
 - UDP - Basic DNS
 - DoT - DNS over TLS
@@ -37,9 +54,9 @@ While UDP provides no security for DNS both DoT and DoH will encrypt DNS request
 
 ## Bootstrap DNS
 
-For DNS providers that do not use an IP address for DoT or DoH a bootstrap DNS provider
- is needed to resolve the DoT or DoH address. This provider can be any UDP upstream DNS.
- In the below example I am using Google DNS.
+If you entered a non-IP address (meaning you used a domain name) for DoT or DoH, then you need to ensure that a bootstrap DNS provider
+is configured to resolve the DoT or DoH address. This provider can be any UDP upstream DNS.
+In the below example I am using Google DNS.
 
 ![blocky-bootstrap-google](./img/blocky-bootstrap-google.png)
 
@@ -59,10 +76,17 @@ certain blocklists if you find legitimate traffic being blocked.
 
 1. Pick a Group Name for your blocklists.
 2. Add List entries for each blocklist by URL.
-  ![blocky-blacklist](./img/blocky-blacklist.png)
+   ![blocky-blacklist](./img/blocky-blacklist.png)
 3. Add a Clients Group Block and set Client Group Name to `default`
 4. Under Groups Entry enter the Group name you used above.
-  ![blocky-blacklist-group](./img/blocky-blacklist-group.png)
+   ![blocky-blacklist-group](./img/blocky-blacklist-group.png)
+
+## Networking
+
+If you want to use Blocky on your local network to take advantage of the filtering above, or the k8s-gateway below, you
+need to setup a static ip address and leave the default setting DNS TCP Service and DNS UDP Service as LoadBalancer.
+
+You need to configure the devices on your network to use the static IP address configured above. This can be done per device or by changing the DHCP or DNS settings on your router.
 
 ## k8s-Gateway Configuration
 
@@ -75,4 +99,3 @@ is to add your root domain in the Domain name block.
 ## Prometheus/Grafana
 
 TBD
-

charts/enterprise/blocky/values.yaml

@@ -1,6 +1,6 @@
 image:
   repository: tccr.io/truecharts/blocky
-  tag: v0.21.0@sha256:ed72f8a64307b7b734174589ac631726dd642cc8202c3bdf2eeb1de4adedbe0a
+  tag: v0.22.0@sha256:385055de8ad0b9074d2057d054768d649b8289c5dd566367e0b6289ba5d661a4
   pullPolicy: IfNotPresent
 
 k8sgatewayImage:

charts/enterprise/clusterissuer/Chart.yaml

@@ -10,7 +10,7 @@ keywords:
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.1
+    version: 14.2.2
 kubeVersion: ">=1.16.0-0"
 maintainers:
   - email: info@truecharts.org
@@ -21,9 +21,8 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/enterprise/clusterissuer
   - https://cert-manager.io/
 type: application
-version: 4.0.1
+version: 4.2.3
 annotations:
-  truecharts.org/catagories: |
-    - core
+  truecharts.org/category: core
   truecharts.org/SCALE-support: "true"
   truecharts.org/grade: U

charts/enterprise/clusterissuer/docs/how-to.md

@@ -14,7 +14,6 @@ It is important to configure Scale with reliable nameserver to avoid issues hand
 
 ![clusterissuer scale nameservers](img/scale-network-nameserver.png)
 
-
 ## Install clusterissuer App
 
 :::note
@@ -37,7 +36,7 @@ Login to Cloudflare dashboard and go to the [Cloudflare API Tokens](https://dash
 
 ![clusterissuer app card](img/cf-apitokens-template.png)
 
-The recommended  `API Token` permissions are below:
+The recommended `API Token` permissions are below:
 ![clusterissuer app card](img/cf-apitokens-perms.png)
 
 #### Cloudflare ACME Issuer Settings

charts/enterprise/clusterissuer/questions.yaml

@@ -47,6 +47,8 @@ questions:
                             description: rfc2136 (Advanced)
                           - value: HTTP01
                             description: HTTP01 (Experimental)
+                          - value: acmedns
+                            description: ACME DNS (Advanced)
                     - variable: server
                       label: Server
                       description: "Server for ACME, for example: letsencrypt"
@@ -195,7 +197,64 @@ questions:
                         type: string
                         required: true
                         default: ""
-
+                    - variable: acmednsHost
+                      label: ACME DNS host
+                      description: "ACME DNS API server address"
+                      schema:
+                        show_if: [["type", "=", "acmedns"]]
+                        type: string
+                        required: true
+                        default: "https://auth.acme-dns.io"
+                    - variable: acmednsConfig
+                      label: ACME DNS config
+                      description: "ACME DNS per-domain auth configuration"
+                      schema:
+                        show_if: [["type", "=", "acmedns"]]
+                        type: list
+                        default: []
+                        items:
+                          - variable: acmednsEntry
+                            label: 'ACME DNS entry'
+                            schema:
+                              type: dict
+                              attrs:
+                                - variable: domain
+                                  label: Domain
+                                  schema:
+                                    type: string
+                                    required: true
+                                - variable: username
+                                  label: Username
+                                  schema:
+                                    type: string
+                                    required: true
+                                - variable: password
+                                  label: Password
+                                  schema:
+                                    type: string
+                                    required: true
+                                - variable: fulldomain
+                                  label: Full domain
+                                  schema:
+                                    type: string
+                                    required: true
+                                - variable: subdomain
+                                  label: Subdomain
+                                  schema:
+                                    type: string
+                                    required: true
+                                - variable: allowFrom
+                                  label: Allow from
+                                  schema:
+                                    type: list
+                                    default: []
+                                    items:
+                                      - variable: cidr
+                                        label: CIDR
+                                        schema:
+                                          type: ipaddr
+                                          cidr: true
+                                          required: true
         - variable: CA
           label: Certificate Authority Issuer
           schema:
@@ -270,6 +329,59 @@ questions:
                   valid_chars: '^[a-z]+(-?[a-z]){0,63}-?[a-z]+$'
                   default: "selfsigned"
 
+  - variable: clusterCertificates
+    group: App Configuration
+    label: Cluster Wide Certificates (Experimental)
+    description: "Creates certificates for use within the entire cluster. Can be used to create wildcard certificates."
+    schema:
+      additional_attrs: true
+      type: dict
+      attrs:
+        - variable: certificates
+          label: Cluster Certificates
+          schema:
+            type: list
+            default: []
+            items:
+              - variable: CertEntry
+                label: 'Certificate Entry'
+                schema:
+                  additional_attrs: true
+                  type: dict
+                  attrs:
+                    - variable: enabled
+                      label: Enabled
+                      schema:
+                        type: boolean
+                        default: true
+                    - variable: name
+                      label: Certificate Name
+                      schema:
+                        type: string
+                        required: true
+                        default: ""
+                    - variable: certificateIssuer
+                      label: Cert-Manager clusterIssuer
+                      description: "One of the Cert-Manager clusterIssuers defined above"
+                      schema:
+                        type: string
+                        required: true
+                        valid_chars: '^[a-z]+(-?[a-z]){0,63}-?[a-z]+$'
+                        default: "selfsigned"
+                    - variable: hosts
+                      label: Certificate Hosts
+                      description: "NOTE: Creation of wildcard certificates with an ACME issuer requires a DNSO1 solver to be set up."
+                      schema:
+                        type: list
+                        default: []
+                        items:
+                          - variable: host
+                            label: Host
+                            schema:
+                              type: string
+                              default: ""
+                              required: true
+
   - variable: customMetrics
     group: Metrics
     label: Prometheus Metrics

charts/enterprise/clusterissuer/templates/clusterissuer/_ACME.tpl

@@ -1,15 +1,31 @@
 {{- define "certmanager.clusterissuer.acme" -}}
 {{- $operator := index $.Values.operator "cert-manager" -}}
 {{- $namespace := $operator.namespace | default "cert-manager" -}}
+
+{{- $rfctsigSecret := .rfctsigSecret | default "" -}}
+{{/* https://cert-manager.io/docs/configuration/acme/dns01/rfc2136/#troubleshooting */}}
+{{- if $rfctsigSecret -}} {{/* If we try to decode and fail, go on and encode it. */}}
+  {{- if (contains "illegal base64" (b64dec $rfctsigSecret)) -}}
+    {{- $rfctsigSecret = b64enc $rfctsigSecret -}}
+  {{- end -}}
+{{- end -}}
+
 {{- range .Values.clusterIssuer.ACME }}
-  {{- if not (mustRegexMatch "^[a-z]+(-?[a-z]){0,63}-?[a-z]+$" .name) -}}
+  {{- if or (not .name) (not (mustRegexMatch "^[a-z]+(-?[a-z]){0,63}-?[a-z]+$" .name)) -}}
     {{- fail "ACME - Expected name to be all lowercase with hyphens, but not start or end with a hyphen" -}}
   {{- end -}}
-  {{- $validTypes := list "HTTP01" "cloudflare" "route53" "digitalocean" "akamai" "rfc2136" -}}
+  {{- $validTypes := list "HTTP01" "cloudflare" "route53" "digitalocean" "akamai" "rfc2136" "acmedns" -}}
   {{- if not (mustHas .type $validTypes) -}}
     {{- fail (printf "Expected ACME type to be one of [%s], but got [%s]" (join ", " $validTypes) .type) -}}
   {{- end -}}
   {{- $issuerSecretName := printf "%s-clusterissuer-secret" .name }}
+  {{- $acmednsDict := dict -}}
+  {{- if and (eq .type "acmedns") (not .acmednsConfigJson) }}
+    {{- range .acmednsConfig }}
+      {{/* Transform to a dict with domain as a key, also remove domain from the dict */}}
+      {{- $_ := set $acmednsDict .domain (omit . "domain") -}}
+    {{- end }}
+  {{- end }}
 ---
 apiVersion: cert-manager.io/v1
 kind: ClusterIssuer
@@ -76,6 +92,12 @@ spec:
           tsigSecretSecretRef:
             name: {{ $issuerSecretName }}
             key: rfctsigSecret
+      {{- else if eq .type "acmedns" }}
+        acmeDNS:
+          host: {{ .acmednsHost }}
+          accountSecretRef:
+            name: {{ $issuerSecretName }}
+            key: acmednsJson
       {{- end -}}
     {{- end }}
 ---
@@ -93,6 +115,11 @@ stringData:
   akclientSecret: {{ .akclientSecret | default "" }}
   akaccessToken: {{ .akaccessToken | default "" }}
   doaccessToken: {{ .doaccessToken | default "" }}
-  rfctsigSecret: {{ .rfctsigSecret | default "" }}
-{{- end }}
+  rfctsigSecret: {{ $rfctsigSecret }}
+{{- if .acmednsConfigJson }}
+  acmednsJson: {{ .acmednsConfigJson }}
+{{- else if $acmednsDict }}
+  acmednsJson: {{ toJson $acmednsDict }}
+{{- end -}}
+  {{- end -}}
 {{- end -}}

charts/enterprise/clusterissuer/templates/clusterissuer/_clusterCertificates.tpl

@@ -0,0 +1,36 @@
+{{- define "certmanager.clusterissuer.clusterCertificates" -}}
+  {{- if .Values.clusterCertificates -}}
+    {{- $certs := dict -}}
+    {{- $secretTemplates := dict -}}
+    {{- $certNamespace := (include "tc.v1.common.lib.metadata.namespace" (dict "rootCtx" $ "objectData" $certs "caller" "ClusterCertificates")) -}}
+  {{- $replicationNamespaces := ".*" -}}
+  {{- if .Values.clusterCertificates.replicationNamespaces -}}
+    {{- $replicationNamespaces = .Values.clusterCertificates.replicationNamespaces -}}
+  {{- else if .Values.ixChartContext -}}
+    {{- $replicationNamespaces = "ix-.*" -}}
+  {{- end -}}
+    {{- $reflectorAnnotations := (dict
+        "reflector.v1.k8s.emberstack.com/reflection-allowed" "true"
+        "reflector.v1.k8s.emberstack.com/reflection-auto-enabled" "true"
+        "reflector.v1.k8s.emberstack.com/reflection-allowed-namespaces" (printf "%v,%v" $certNamespace $replicationNamespaces)
+        "reflector.v1.k8s.emberstack.com/reflection-auto-namespaces" $replicationNamespaces ) -}}
+    {{- $certAnnotations := (mustMerge ($reflectorAnnotations) (include "tc.v1.common.lib.metadata.allAnnotations" $ | fromYaml)) -}}
+
+    {{- $_ := set $secretTemplates "annotations" $certAnnotations -}}
+
+    {{- range .Values.clusterCertificates.certificates -}}
+      {{- $_ := set $certs .name dict -}}
+      {{- $currentCert := (index $certs (.name)) -}}
+      {{- $_ := set $currentCert "enabled" .enabled -}}
+      {{- $_ := set $currentCert "nameOverride" .name -}}
+      {{- $_ := set $currentCert "hosts" .hosts -}}
+      {{- $_ := set $currentCert "certificateIssuer" .certificateIssuer -}}
+      {{- $_ := set $currentCert "secretTemplate" $secretTemplates -}}
+    {{- end -}}
+
+  {{- $_ := set .Values "cert" $certs -}}
+  {{/* Render the ClusterWide Certificate(s) */}}
+  {{- include "tc.v1.common.spawner.certificate" . | nindent 0 -}}
+  {{- end -}}
+{{- end -}}
+

charts/enterprise/clusterissuer/templates/common.yaml

@@ -7,3 +7,8 @@
 {{- include "certmanager.clusterissuer.acme" . }}
 {{- include "certmanager.clusterissuer.selfsigned" . }}
 {{- include "certmanager.clusterissuer.ca" . }}
+
+{{/* Must be called after the initial loader.apply template,
+     because it overrides .Values.cert in order to generate
+     the additional cluster-wide certificates */}}
+{{- include "certmanager.clusterissuer.clusterCertificates" . }}

charts/enterprise/clusterissuer/values.yaml

@@ -1,6 +1,6 @@
 image:
   repository: tccr.io/truecharts/scratch
-  tag: latest@sha256:1a9a10a0a5f5cb5fe4b30ac6d9c56ff87ad47f3f3490bafb6938fc155230131b
+  tag: latest@sha256:7f821eeb99d04ac248c47f79cfbcc2482651fea48aff9ec5d2ba0ba34f1f5531
   pullPolicy: IfNotPresent
 manifestManager:
   enabled: true
@@ -59,7 +59,7 @@ clusterIssuer:
 #     # Used primarily for the SCALE GUI
 #     customServer: 'https://acme-staging-v02.api.letsencrypt.org/directory'
 #     email: ""
-#     # Options: HTTP01, cloudflare, route53
+#     # Options: HTTP01, cloudflare, route53, akamai, digitalocean, rfc2136, acmedns
 #     type: ""
 #     # for cloudflare
 #     cfapikey: ""
@@ -82,3 +82,27 @@ clusterIssuer:
 #     tsigKeyName: ""
 #     tsigAlgorithm: ""
 #     rfctsigSecret: ""
+#     # for acmedns
+#     name: sd
+#     acmednsHost: asdf
+#     # Pick one of the bellow acmednsConfig
+#     acmednsConfigJson:
+#     acmednsConfig:
+#       - domain: ""
+#         username: ""
+#         password: ""
+#         fulldomain: ""
+#         subdomain: ""
+#         allowFrom: []
+
+clusterCertificates:
+  # Namespaces in which the certificates must be available
+  # Accepts comma-separated regex expressions
+  # replicationNamespaces: 'ix-.*'
+  certificates: []
+  # - name: mycert
+  #   enabled: true
+  #   certificateIssuer: selfsigned
+  #   hosts:
+  #     - my.domain.com
+  #     - '*.my.domain.com'

charts/enterprise/grafana/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "10.1.1"
+appVersion: "10.2.0"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.1
+    version: 14.2.2
 deprecated: false
 description: Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, Elasticsearch, OpenTSDB, Prometheus and InfluxDB.
 home: https://truecharts.org/charts/enterprise/grafana
@@ -24,9 +24,8 @@ sources:
   - https://github.com/bitnami/bitnami-docker-grafana
   - https://grafana.com/
 type: application
-version: 9.0.12
+version: 9.0.31
 annotations:
-  truecharts.org/catagories: |
-    - metrics
+  truecharts.org/category: metrics
   truecharts.org/SCALE-support: "true"
   truecharts.org/grade: U

charts/enterprise/grafana/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/grafana
   pullPolicy: IfNotPresent
-  tag: v10.1.1@sha256:53443845ac760237f6415b986b777facf9d14b9b6dfb32e9fef25c5a30279da1
+  tag: v10.2.0@sha256:37149a3ed475cc9f0cedb4e6561f2566a782d5063cb0ff3f5a15d5e8f79ec33f
 manifestManager:
   enabled: true
 securityContext:

charts/enterprise/kubernetes-reflector/Chart.yaml

@@ -0,0 +1,31 @@
+apiVersion: v2
+appVersion: "7.1.217"
+deprecated: false
+description: Kubernetes-Reflector is a Kubernetes addon designed to monitor and reflect changes to secrets and configmaps across namespaces
+home: https://truecharts.org/charts/enterprise/kubernetes-reflector
+icon: https://truecharts.org/img/hotlink-ok/chart-icons/kubernetes-reflector.png
+keywords:
+  - reflector
+  - secrets
+  - configmaps
+  - cert-manager
+  - certificates
+dependencies:
+  - name: common
+    repository: https://library-charts.truecharts.org
+    version: 14.2.2
+kubeVersion: ">=1.16.0-0"
+maintainers:
+  - email: info@truecharts.org
+    name: TrueCharts
+    url: https://truecharts.org
+name: kubernetes-reflector
+sources:
+  - https://github.com/truecharts/charts/tree/master/charts/enterprise/kubernetes-reflector
+  - https://github.com/emberstack/kubernetes-reflector
+type: application
+version: 1.0.1
+annotations:
+  truecharts.org/category: operators
+  truecharts.org/SCALE-support: "true"
+  truecharts.org/grade: U

charts/enterprise/kubernetes-reflector/README.md

@@ -0,0 +1,27 @@
+# README
+
+## General Info
+
+TrueCharts can be installed as both *normal* Helm Charts or as Apps on TrueNAS SCALE.
+However only installations using the TrueNAS SCALE Apps system are supported.
+
+For more information about this App, please check the docs on the TrueCharts [website](https://truecharts.org/charts/enterprise/)
+
+**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/charts/issues/new/choose)**
+
+
+## Support
+
+- Please check our [quick-start guides for TrueNAS SCALE](https://truecharts.org/manual/SCALE/guides/scale-intro).
+- See the [Website](https://truecharts.org)
+- Check our [Discord](https://discord.gg/tVsPTHWTtr)
+- Open a [issue](https://github.com/truecharts/charts/issues/new/choose)
+
+---
+
+## Sponsor TrueCharts
+
+TrueCharts can only exist due to the incredible effort of our staff.
+Please consider making a [donation](https://truecharts.org/sponsor) or contributing back to the project any way you can!
+
+*All Rights Reserved - The TrueCharts Project*

charts/enterprise/kubernetes-reflector/questions.yaml

@@ -0,0 +1,42 @@
+# Include{groups}
+questions:
+# Include{global}
+# Include{workload}
+# Include{workloadDeployment}
+# Include{replicas1}
+# Include{podSpec}
+# Include{containerMain}
+# Include{containerBasic}
+# Include{containerAdvanced}
+  - variable: kubernetesReflector
+    group: "App Configuration"
+    label: "Kubernetes-Reflector Configuration"
+    schema:
+      additional_attrs: true
+      type: dict
+      attrs:
+        - variable: logLevel
+          label: "Log Level"
+          schema:
+            type: string
+            default: "Information"
+            enum:
+              - value: "Verbose"
+                description: "Trace"
+              - value: "Debug"
+                description: "Debug"
+              - value: "Information"
+                description: "Info"
+              - value: "Warning"
+                description: "Warnings"
+              - value: "Error"
+                description: "Errors"
+              - value: "Fatal"
+                description: "Fatal Errors"
+# Include{resources}
+# Include{advanced}
+# Include{addons}
+# Include{codeserver}
+# Include{netshoot}
+# Include{vpn}
+# Include{documentation}

charts/enterprise/kubernetes-reflector/templates/common.yaml

@@ -0,0 +1 @@
+{{- include "tc.v1.common.loader.all" . }}

charts/enterprise/kubernetes-reflector/values.yaml

@@ -0,0 +1,78 @@
+image:
+  repository: tccr.io/truecharts/kubernetes-reflector
+  pullPolicy: IfNotPresent
+  tag: v7.1.217@sha256:4ca9ce8c04441786ba0d343b3e5bfe9c638ac8efcc25aba0aaff3c6fb2363b5f
+
+operator:
+  register: true
+
+portal:
+  open:
+    enabled: false
+
+rbac:
+  main:
+    enabled: true
+    primary: true
+    clusterWide: true
+    rules:
+      - apiGroups:
+          - ""
+        resources:
+          - "configmaps"
+          - "secrets"
+        verbs:
+          - "get"
+          - "list"
+          - "watch"
+          - "create"
+          - "update"
+          - "patch"
+          - "delete"
+      - apiGroups:
+          - ""
+        resources:
+          - "namespaces"
+        verbs:
+          - "watch"
+          - "list"
+
+serviceAccount:
+  main:
+    enabled: true
+    primary: true
+
+
+kubernetesReflector:
+  logLevel: Information
+
+workload:
+  main:
+    podSpec:
+      automountServiceAccountToken: true
+      containers:
+        main:
+          securityContext:
+            readOnlyRootFilesystem: true
+            runAsNonRoot: true
+          env:
+            ES_Serilog__MinimumLevel__Default: '{{ .Values.kubernetesReflector.logLevel }}'
+            ES_Reflector__Watcher__Timeout: ""
+            ES_Reflector__Kubernetes__SkipTlsVerify: "false"
+          probes:
+            liveness:
+              type: http
+              path: /healthz
+              port: 25080
+            readiness:
+              type: http
+              path: /healthz
+              port: 25080
+            startup:
+              type: http
+              path: /healthz
+              port: 25080
+
+service:
+  main:
+    enabled: false

charts/enterprise/metallb-config/Chart.yaml

@@ -10,7 +10,7 @@ keywords:
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.1
+    version: 14.2.2
 kubeVersion: ">=1.16.0-0"
 maintainers:
   - email: info@truecharts.org
@@ -22,9 +22,8 @@ sources:
   - https://github.com/metallb/metallb
   - https://metallb.universe.tf
 type: application
-version: 3.0.0
+version: 3.0.6
 annotations:
-  truecharts.org/catagories: |
-    - core
+  truecharts.org/category: core
   truecharts.org/SCALE-support: "true"
   truecharts.org/grade: U

charts/enterprise/metallb-config/docs/setup-guide.md

@@ -4,7 +4,7 @@ The guide walks through a basic configuration of MetalLB for a single address po
 
 :::warning
 
-With MetalLB installed, apps will not be reachable using the integrated loadbalancer. You cannot combine two different loadbalancers in TrueNAS SCALE.
+With MetalLB installed, apps will not be reachable using the integrated LoadBalancer. You cannot combine two different LoadBalancers in TrueNAS SCALE.
 
 :::
 
@@ -14,6 +14,12 @@ With MetalLB installed, apps will not be reachable using the integrated loadbala
 
 ![metallb-addtrains](img/metallb_guide_trains.png)
 
+:::caution
+
+Our customized version of MetalLB is only intended for use with other TrueCharts applications. Other catalogs will likely not support our MetalLB application. MetalLB could technically work with TrueNAS catalog apps if they used the LoadBalancer service, but they don't as they use NodePort instead. These atypical configurations aren't officially supported nor encouraged by TrueCharts.
+
+:::
+
 ## 1. Install MetalLB Operator from Operators Train
 
 ![metallb-apps](img/metallb_guide_apps.png)
@@ -21,7 +27,7 @@ With MetalLB installed, apps will not be reachable using the integrated loadbala
 Install `metallb` from `operators` train first. There is no config, so just hit save.
 
 If you encounter an error upon install, run the following command as root from system settings -> shell and attempt the install again:
-```k3s kubectl delete  --grace-period 30 --v=4 -k https://github.com/truecharts/manifests/delete```
+`k3s kubectl delete --grace-period 30 --v=4 -k https://github.com/truecharts/manifests/delete`
 
 If you previously had `metallb` installed and encounter an error, delete the old version, then run the above command before proceeding to install the `metallb` operator.
 
@@ -57,21 +63,21 @@ Once installed, `metallb-config` will always show as Stopped.
 
 ![metallb-specifyIP](img/metallb_guide_specifyIP.png)
 
-With MetalLB installed, its is recommended (but optional) to specify IP addresses for your apps.
+With MetalLB installed, it's recommended (but optional) to specify IP addresses for your apps.
 
 For each app, under **Networking and Services**, select `LoadBalancer` Service Type for the Main Service.
 
 In the **LoadBalancer IP** field, specify an IP address that is within the MetalLB address pool that you configured. Apply the same IP address to the **LoadBalancer IP** field on other services within the app.
 
-## 4. Disable SCALE's Default Loadbalancer
+## 4. Disable SCALE's Default LoadBalancer
 
-With MetalLB installed and configured, you must now disable SCALE's default loadbalancer.
+With MetalLB installed and configured, you must now disable SCALE's default LoadBalancer.
 
 In the SCALE UI, under **Apps** > **Settings** > **Advanced Settings**
 
 ![metallb-disable](img/metallb_guide_disableLB.png)
 
-Uncheck `Enable Integrated Loadbalancer`.
+Uncheck `Enable Integrated LoadBalancer`.
 
 **This will trigger a restart of Kubernetes and all apps**. After roughly 5-10 minutes, your apps will redeploy using the MetalLB-assigned IP addresses.
 

charts/enterprise/metallb-config/values.yaml

@@ -1,6 +1,6 @@
 image:
   repository: tccr.io/truecharts/scratch
-  tag: latest@sha256:1a9a10a0a5f5cb5fe4b30ac6d9c56ff87ad47f3f3490bafb6938fc155230131b
+  tag: latest@sha256:7f821eeb99d04ac248c47f79cfbcc2482651fea48aff9ec5d2ba0ba34f1f5531
   pullPolicy: IfNotPresent
 manifestManager:
   enabled: false
@@ -26,7 +26,7 @@ service:
       main:
         enabled: false
         port: 9999
-        
+
 operator:
   verify:
     enabled: true

charts/enterprise/prometheus/Chart.yaml

@@ -1,17 +1,17 @@
 apiVersion: v2
-appVersion: "2.46.0"
+appVersion: "2.47.2"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.1
+    version: 14.2.2
   - condition: exporters.enabled,exporters.node-exporter.enabled
     name: node-exporter
     repository: https://deps.truecharts.org
-    version: 2.0.7
+    version: 3.0.35
   - condition: exporters.enabled,exporters.kube-state-metrics.enabled
     name: kube-state-metrics
     repository: https://deps.truecharts.org
-    version: 2.0.6
+    version: 3.0.33
 deprecated: false
 description: kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.
 icon: https://truecharts.org/img/hotlink-ok/chart-icons/prometheus.png
@@ -29,9 +29,8 @@ sources:
   - https://github.com/prometheus-community/helm-charts
   - https://github.com/prometheus-operator/kube-prometheus
 type: application
-version: 12.1.2
+version: 13.0.11
 annotations:
-  truecharts.org/catagories: |
-    - metrics
+  truecharts.org/category: metrics
   truecharts.org/SCALE-support: "true"
   truecharts.org/grade: U

charts/enterprise/prometheus/values.yaml

@@ -1,16 +1,15 @@
 image:
   repository: tccr.io/truecharts/prometheus
-  tag: v2.46.0@sha256:0b0dc821c06967e8562bf32ebd9055eef7f1ddd8851187acbf8871d8bd9c72a3
+  tag: v2.47.2@sha256:609ae6b1d62ee388d8dd552430985bbb332984b6aaa5df5dc62605dfe1f2e035
 
 thanosImage:
   repository: tccr.io/truecharts/thanos
-  tag: 0.31.0@sha256:28282d3e63f84cdeeb05e965b173b610d5597997acc7ce75d5849207b0f97b28
+  tag: v0.32.5@sha256:4cea5ca36f1567993344c3375b9a80d8073dbc8d530656644d36c90683f96464
 
 alertmanagerImage:
   repository: tccr.io/truecharts/alertmanager
-  tag: 0.25.0@sha256:6b534671b83aa7fbd91d1b10bf0f1b29b948e4b300f8359a86043d0deba07207
-manifestManager:
-  enabled: true
+  tag: v0.26.0@sha256:75279c577a514e90854126ba950cf7afaeac43eda85405fba394658b17ca0a6f
+
 global:
   labels: {}
 workload:

charts/enterprise/traefik/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "2.10.4"
+appVersion: "2.10.5"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.1
+    version: 14.2.2
 deprecated: false
 description: Traefik is a flexible reverse proxy and Ingress Provider.
 home: https://truecharts.org/charts/enterprise/traefik
@@ -23,9 +23,8 @@ sources:
   - https://github.com/traefik/traefik-helm-chart
   - https://traefik.io/
 type: application
-version: 21.0.4
+version: 21.1.3
 annotations:
-  truecharts.org/catagories: |
-    - network
+  truecharts.org/category: network
   truecharts.org/SCALE-support: "true"
   truecharts.org/grade: U

charts/enterprise/traefik/docs/Authelia-LLDAP-forwardauth.md

@@ -1,3 +1,3 @@
 # Authelia + LLDAP + Traefik ForwardAuth Setup guide
 
-Please refer to the full [Authelia + LLDAP + Traefik ForwardAuth Setup guide](https://truecharts.org/charts/enterprise/authelia/Setup-Guide) for a quick guide should take you through the steps necessary to setup `Authelia` as your `forwardAuth` for `Traefik`. 
+Please refer to the full [Authelia + LLDAP + Traefik ForwardAuth Setup guide](https://truecharts.org/charts/enterprise/authelia/Setup-Guide) for a quick guide should take you through the steps necessary to setup `Authelia` as your `forwardAuth` for `Traefik`.

charts/enterprise/traefik/questions.yaml

@@ -187,6 +187,7 @@ questions:
 # Include{bufferingMiddleware}
 # Include{customRequestHeadersMiddleware}
 # Include{customResponseHeadersMiddleware}
+# Include{rewriteResponseHeadersMiddleware}
 # Include{customFrameOptionsValueMiddleware}
 # Include{chainMiddleware}
 # Include{redirectSchemeMiddleware}

charts/enterprise/traefik/templates/_args.tpl

@@ -181,6 +181,11 @@ args:
   - "--experimental.localPlugins.traefik-modsecurity-plugin.modulename=github.com/acouvreur/traefik-modsecurity-plugin"
   {{- end }}
   {{/* End of ModSecurity */}}
+  {{/* RewriteResponseHeaders */}}
+  {{- if .Values.middlewares.rewriteResponseHeaders }}
+  - "--experimental.localPlugins.rewriteResponseHeaders.modulename=github.com/XciD/traefik-plugin-rewrite-headers"
+  {{- end }}
+  {{/* End of RewriteResponseHeaders */}}
   {{- with .Values.additionalArguments }}
   {{- range . }}
   - {{ . | quote }}

charts/enterprise/traefik/templates/middlewares/buffering.yaml

@@ -8,16 +8,16 @@ metadata:
   namespace: {{ $.Release.Namespace }}
 spec:
   buffering: {{/* Only render if its not <nil> and has a value of 0 or greater */}}
-    {{- if not (kindIs "invalid" $middlewareData.maxRequestBodyBytes) (ge ($middlewareData.maxRequestBodyBytes | int) 0) }}
+    {{- if and (not (kindIs "invalid" $middlewareData.maxRequestBodyBytes)) (ge ($middlewareData.maxRequestBodyBytes | int) 0) }}
     maxRequestBodyBytes: {{ $middlewareData.maxRequestBodyBytes }}
     {{- end -}}
-    {{- if not (kindIs "invalid" $middlewareData.memRequestBodyBytes) (ge ($middlewareData.memRequestBodyBytes | int) 0) }}
+    {{- if and (not (kindIs "invalid" $middlewareData.memRequestBodyBytes)) (ge ($middlewareData.memRequestBodyBytes | int) 0) }}
     memRequestBodyBytes: {{ $middlewareData.memRequestBodyBytes }}
     {{- end -}}
-    {{- if not (kindIs "invalid" $middlewareData.maxResponseBodyBytes) (ge ($middlewareData.maxResponseBodyBytes | int) 0) }}
+    {{- if and (not (kindIs "invalid" $middlewareData.maxResponseBodyBytes)) (ge ($middlewareData.maxResponseBodyBytes | int) 0) }}
     maxResponseBodyBytes: {{ $middlewareData.maxResponseBodyBytes }}
     {{- end -}}
-    {{- if not (kindIs "invalid" $middlewareData.memResponseBodyBytes) (ge ($middlewareData.memResponseBodyBytes | int) 0) }}
+    {{- if and (not (kindIs "invalid" $middlewareData.memResponseBodyBytes)) (ge ($middlewareData.memResponseBodyBytes | int) 0) }}
     memResponseBodyBytes: {{ $middlewareData.memResponseBodyBytes }}
     {{- end -}}
     {{- if $middlewareData.retryExpression }}

charts/enterprise/traefik/templates/middlewares/rewriteResponseHeaders.yaml

@@ -0,0 +1,17 @@
+{{- range $index, $middlewareData := .Values.middlewares.rewriteResponseHeaders }}
+---
+apiVersion: traefik.io/v1alpha1
+kind: Middleware
+metadata:
+  name: {{ ternary (printf "%v-%v" $.Release.Name $middlewareData.name) $middlewareData.name $.Values.ingressClass.enabled }}
+  namespace: {{ $.Release.Namespace }}
+spec:
+  plugin:
+    rewriteResponseHeaders:
+      rewrites:
+        {{- range $index, $rewriteResponseHeader := $middlewareData.headers }}
+        - header: {{ $rewriteResponseHeader.name }}
+          regex: {{ $rewriteResponseHeader.regex | quote }}
+          replacement: {{ $rewriteResponseHeader.replacement | quote }}
+        {{- end }}
+{{- end -}}

charts/enterprise/traefik/values.yaml

@@ -1,6 +1,6 @@
 image:
   repository: tccr.io/truecharts/traefik
-  tag: 2.10.4@sha256:77766fb3eb739197d7e229bfa8afb3a4a740886e3effef474ca4c9efdf65e5ab
+  tag: v2.10.5@sha256:b277733b5b8d7f9d2761813d97e161c1f64ec77960f9c06adde13868efbc8dce
   pullPolicy: IfNotPresent
 manifestManager:
   enabled: true
@@ -349,6 +349,15 @@ middlewares:
   #       value: "foobar"
   #     - name: X-Header-To-Remove
   #       value: ""
+  rewriteResponseHeaders: []
+  # - name: rewriteResponseHeadersName
+  #   headers:
+  #     - name: "Location"
+  #       regex: "^http://(.+)$"
+  #       replacement: "https://$1"
+  #     - name: "Date"
+  #       regex: "^[^,]+,\\s*(.+)$"
+  #       replacement: "$1"
   customFrameOptionsValue: []
   # - name: customFrameOptionsValueExample
   #   value: "SAMEORIGIN"

charts/enterprise/vaultwarden/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "1.29.1"
+appVersion: "1.29.2"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.1
+    version: 14.2.2
 deprecated: false
 description: Unofficial Bitwarden compatible server written in Rust
 home: https://truecharts.org/charts/enterprise/vaultwarden
@@ -25,9 +25,8 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/enterprise/vaultwarden
   - https://github.com/dani-garcia/vaultwarden
 type: application
-version: 22.0.0
+version: 23.0.4
 annotations:
-  truecharts.org/catagories: |
-    - security
+  truecharts.org/category: security
   truecharts.org/SCALE-support: "true"
   truecharts.org/grade: U

charts/enterprise/vaultwarden/docs/disable-admin-page-guide.md

@@ -0,0 +1,51 @@
+# Disabling the Admin Interface
+
+:::caution Backup Reminder
+
+Before proceeding, ensure that you have backed up important configurations, especially when making changes to configuration files or secrets. It's also advisable to back up the Vaultwarden database to prevent potential data loss.
+
+:::
+
+This guide is a combination of the [upstream documentation](https://github.com/dani-garcia/vaultwarden/wiki/Enabling-admin-page#disabling-the-admin-page) and how we implemented it.
+
+## Modify the Host Secret
+
+To start with the deactivation, you must first modify the secret on the host's shell. Execute the following command:
+
+```bash
+k3s kubectl patch secret vaultwarden-vaultwardensecret -n ix-vaultwarden --type='json' -p='[{"op": "remove", "path": "/data/ADMIN_TOKEN"}]'
+```
+
+:::info Command Explanation
+
+The command above utilizes `kubectl`, a command-line tool for interacting with Kubernetes clusters. Here's a breakdown:
+
+- `k3s`: This is a lightweight version of Kubernetes.
+- `patch secret vaultwarden-vaultwardensecret`: This indicates that we are patching (modifying) the secret named `vaultwarden-vaultwardensecret`.
+- `-n ix-vaultwarden`: This specifies the namespace (`ix-vaultwarden`) in which the secret resides.
+- `--type='json'`: Specifies that the patch content is of type JSON.
+- `-p='[{"op": "remove", "path": "/data/ADMIN_TOKEN"}]'`: This JSON patch instruction tells Kubernetes to remove the `ADMIN_TOKEN` field from the secret.
+
+:::
+
+## Update Container Config
+
+Next, while inside the Vaultwarden container, run the command below to modify the `config.json` file:
+
+```bash
+sed -i.bak '/admin_token/d' /data/config.json
+```
+
+:::info Command Explanation
+
+- The `sed` command is used to search and delete the line containing `admin_token` from the `config.json` file.
+- A backup of the original `config.json` is created with the `.bak` extension before making the change.
+
+:::
+
+## Adjust the App Configuration
+
+Finally, head to the Vaultwarden app's configuration:
+
+1. Find and disable the admin interface option (if it is still enabled).
+2. Click "Save" at the bottom to apply the changes.

charts/enterprise/vaultwarden/questions.yaml

@@ -200,14 +200,21 @@ questions:
                       schema:
                         type: string
                         default: ""
-                    - variable: ssl
+                    - variable: security
                       label: "Enable SSL connection"
                       schema:
-                        type: boolean
-                        default: true
+                        type: string
+                        default: "starttls"
+                        enum:
+                          - value: "starttls"
+                            description: "STARTTLS (587)"
+                          - value: "force_tls"
+                            description: "FORCE_TLS (465)"
+                          - value: "off"
+                            description: "OFF (25)"
                     - variable: port
                       label: "SMTP port"
-                      description: "Usually: 25 without SSL, 587 with SSL"
+                      description: "Usually: 587 with STARTTLS, 465 with FORCE_TLS, and 25 without SSL"
                       schema:
                         type: int
                         default: 587

charts/enterprise/vaultwarden/templates/_configmap.tpl

@@ -47,7 +47,7 @@ data:
   SMTP_FROM_NAME: {{ .Values.vaultwarden.smtp.fromName | quote }}
   {{- end }}
   {{- if .Values.vaultwarden.smtp.ssl }}
-  SMTP_SSL: {{ .Values.vaultwarden.smtp.ssl | quote }}
+  SMTP_SECURITY: {{ .Values.vaultwarden.smtp.security | quote }}
   {{- end }}
   {{- if .Values.vaultwarden.smtp.port }}
   SMTP_PORT: {{ .Values.vaultwarden.smtp.port | quote }}

charts/enterprise/vaultwarden/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/vaultwarden
   pullPolicy: IfNotPresent
-  tag: v1.29.1@sha256:5a670aee4b1a57a5a414607f9222f558ab365625f64ff78885f7776971c95b54
+  tag: v1.29.2@sha256:f5761cdd99e267221623b7a91d123153885afd0980b31c863de039245b73aad3
 manifestManager:
   enabled: true
 service:
@@ -95,8 +95,8 @@ vaultwarden:
     ## SMTP sender name, defaults to 'Bitwarden_RS'.
     # fromName: ""
     ## Enable SSL connection.
-    # ssl: true
-    ## SMTP port. Defaults to 25 without SSL, 587 with SSL.
+    # security: starttls
+    ## SMTP port. Defaults to 587 with STARTTLS, 465 with FORCE_TLS, and 25 without SSL.
     # port: 587
     ## SMTP Authentication Mechanisms. Comma-separated options: 'Plain', 'Login' and 'Xoauth2'. Defaults to 'Plain'.
     # authMechanism: Plain
@@ -126,7 +126,7 @@ vaultwarden:
   push:
     enabled: false
     # installationId:
-    # installationKey: 
+    # installationKey:
 
   ## Logging options. https://github.com/dani-garcia/bitwarden_rs/wiki/Logging
   log:

charts/incubator/acestream/Chart.yaml

@@ -23,7 +23,6 @@ sources:
 type: application
 version: 3.0.0
 annotations:
-  truecharts.org/catagories: |
-    - MediaServer-Video
+  truecharts.org/category: MediaServer-Video
   truecharts.org/SCALE-support: "true"
   truecharts.org/grade: U

charts/incubator/adguardhome-sync/Chart.yaml

@@ -23,7 +23,6 @@ sources:
 type: application
 version: 3.0.0
 annotations:
-  truecharts.org/catagories: |
-    - Other
+  truecharts.org/category: Other
   truecharts.org/SCALE-support: "true"
   truecharts.org/grade: U

charts/incubator/alienswarm-reactivedrop/Chart.yaml

@@ -1,7 +1,6 @@
 annotations:
   truecharts.org/SCALE-support: "true"
-  truecharts.org/catagories: |
-    - GameServers
+  truecharts.org/category: GameServers
 apiVersion: v2
 appVersion: "latest"
 dependencies:

charts/incubator/alienswarm/Chart.yaml

@@ -1,7 +1,6 @@
 annotations:
   truecharts.org/SCALE-support: "true"
-  truecharts.org/catagories: |
-    - GameServers
+  truecharts.org/category: GameServers
 apiVersion: v2
 appVersion: "latest"
 dependencies:

charts/incubator/americasarmy-pg/Chart.yaml

@@ -1,7 +1,6 @@
 annotations:
   truecharts.org/SCALE-support: "true"
-  truecharts.org/catagories: |
-    - GameServers
+  truecharts.org/category: GameServers
 apiVersion: v2
 appVersion: "latest"
 dependencies:

charts/incubator/android-8-0/Chart.yaml

@@ -1,7 +1,6 @@
 annotations:
   truecharts.org/SCALE-support: "true"
-  truecharts.org/catagories: |
-    - Other
+  truecharts.org/category: Other
 apiVersion: v2
 appVersion: "latest"
 dependencies:

charts/incubator/androiddebugbridge/Chart.yaml

@@ -1,7 +1,6 @@
 annotations:
   truecharts.org/SCALE-support: "true"
-  truecharts.org/catagories: |
-    - HomeAutomation
+  truecharts.org/category: HomeAutomation
 apiVersion: v2
 appVersion: "latest"
 dependencies:

charts/incubator/anki-sync-server/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "20220516"
+appVersion: "1.1.14"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 11.1.2
+    version: 14.2.2
 description: A cross-platform Anki sync server.
 home: https://truecharts.org/charts/incubator/anki-sync-server
 icon: https://truecharts.org/img/hotlink-ok/chart-icons/anki-sync-server.png
@@ -18,9 +18,8 @@ name: anki-sync-server
 sources:
   - https://github.com/truecharts/charts/tree/master/charts/incubator/anki-sync-server
   - https://github.com/ankicommunity/anki-devops-services
-version: 2.0.9
+version: 3.0.2
 annotations:
-  truecharts.org/catagories: |
-    - media
+  truecharts.org/category: media
   truecharts.org/SCALE-support: "true"
   truecharts.org/grade: U

charts/incubator/anki-sync-server/questions.yaml

@@ -10,18 +10,36 @@ questions:
 # Include{replicas1}
 # Include{podSpec}
 # Include{containerMain}
+
+                                - variable: env
+                                  group: "App Configuration"
+                                  label: "Image Environment"
+                                  schema:
+                                    additional_attrs: true
+                                    type: dict
+                                    attrs:
+                                      - variable: ANKISYNCD_USERNAME
+                                        label: "Default Username"
+                                        description: "Create your default username here"
+                                        schema:
+                                          type: string
+                                          required: true
+                                          default: ""
+                                      - variable: ANKISYNCD_PASSWORD
+                                        label: "Default Passowrd"
+                                        description: "Enter default password here"
+                                        schema:
+                                          type: string
+                                          private: true
+                                          required: true
+                                          default: ""
 # Include{containerBasic}
 # Include{containerAdvanced}
 
 # Include{containerConfig}
+# Include{podOptions}
 # Include{serviceRoot}
-        - variable: main
-          label: "Main Service"
-          description: "The Primary service on which the healthcheck runs, often the webUI"
-          schema:
-            additional_attrs: true
-            type: dict
-            attrs:
+# Include{serviceMain}
 # Include{serviceSelectorLoadBalancer}
 # Include{serviceSelectorExtras}
                     - variable: main
@@ -68,13 +86,13 @@ questions:
                 description: "The UserID of the user running the application"
                 schema:
                   type: int
-                  default: 568
-        - variable: runAsGroup
-          label: "runAsGroup"
-          description: "The groupID this App of the user running the application"
-          schema:
-            type: int
-            default: 568
+                  default: 0
+              - variable: runAsGroup
+                label: "runAsGroup"
+                description: "The groupID of the user running the application"
+                schema:
+                  type: int
+                  default: 0
 # Include{securityContextContainer}
 # Include{securityContextAdvanced}
 # Include{securityContextPod}

charts/incubator/anki-sync-server/templates/common.yaml

@@ -1 +1,2 @@
-{{ include "tc.common.loader.all" . }}
+{{/* Render the templates */}}
+{{ include "tc.v1.common.loader.all" . }}

charts/incubator/anki-sync-server/values.yaml

@@ -1,8 +1,34 @@
 image:
   repository: tccr.io/truecharts/anki-sync-server
-  tag: v20220516@sha256:444a0ae7b60a08128f3a2f02516ce60c4ca0879c13a6c27fe85db35b1ce4cef6
+  tag: v1.1.14@sha256:3951d969ee43c9a0e69394e49111c55a69d4b5784b1cfe121a0151c29dccd811
   pullPolicy: IfNotPresent
 
+securityContext:
+  container:
+    readOnlyRootFilesystem: false
+    runAsNonRoot: false
+    runAsGroup: 0
+    runAsUser: 0
+
+workload:
+  main:
+    podSpec:
+      containers:
+        main:
+          probes:
+            liveness:
+              type: http
+              path: /
+            readiness:
+              type: http
+              path: /
+            startup:
+              type: http
+              path: /
+          env:
+            ANKISYNCD_USERNAME: "test"
+            ANKISYNCD_PASSWORD: "123456"
+
 service:
   main:
     ports:
@@ -16,4 +42,5 @@ persistence:
     mountPath: /app/data
 
 portal:
-  enabled: true
+  open:
+    enabled: true

charts/incubator/anope/Chart.yaml

@@ -1,9 +1,6 @@
 annotations:
   truecharts.org/SCALE-support: "true"
-  truecharts.org/catagories: |
-    - Network-Other
-    - Productivity
-    - Tools-Utilities
+  truecharts.org/category: Network-Other
 apiVersion: v2
 appVersion: "latest"
 dependencies:

charts/incubator/answer/Chart.yaml

@@ -0,0 +1,27 @@
+apiVersion: v2
+appVersion: "1.2.0"
+dependencies:
+  - name: common
+    repository: https://library-charts.truecharts.org
+    version: 14.2.2
+deprecated: false
+description: A Q&A platform software for teams at any scales.
+home: https://truecharts.org/charts/incubator/answer
+icon: https://truecharts.org/img/hotlink-ok/chart-icons/answer.png
+keywords:
+  - answer
+  - forum
+kubeVersion: ">=1.16.0-0"
+maintainers:
+  - email: info@truecharts.org
+    name: TrueCharts
+    url: https://truecharts.org
+name: answer
+sources:
+  - https://github.com/truecharts/charts/tree/master/charts/incubator/answer
+  - https://github.com/answerdev/answer
+type: application
+version: 0.0.7
+annotations:
+  truecharts.org/category: forum
+  truecharts.org/SCALE-support: "true"

charts/incubator/answer/questions.yaml

@@ -11,83 +11,94 @@ questions:
 # Include{podSpec}
 # Include{containerMain}
 
+
 # Include{containerBasic}
 # Include{containerAdvanced}
 
-  - variable: odoo
+  - variable: answer
     group: App Configuration
-    label: Odoo
+    label: Answer
     schema:
       additional_attrs: true
       type: dict
       attrs:
-        - variable: admin
-          label: Admin Credentials
+        - variable: app
+          label: App Configuration
           schema:
             additional_attrs: true
             type: dict
             attrs:
-              - variable: passwd
+              - variable: language
+                label: Language
+                schema:
+                  type: string
+                  required: true
+                  default: "en-US"
+              - variable: log_level
+                label: Log Level
+                schema:
+                  type: string
+                  required: true
+                  default: DEBUG"
+                  enum:
+                    - value: DEBUG
+                      description: Debug
+                    - value: INFO
+                      description: Info
+                    - value: WARN
+                      description: Warn
+                    - value: ERROR
+                      description: Error
+        - variable: site
+          label: Site Configuration
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+              - variable: name
+                label: Name
+                schema:
+                  type: string
+                  required: true
+                  default: "Answer"
+              - variable: url
+                label: Url
+                schema:
+                  type: string
+                  required: true
+                  default: "http://localhost:9080"
+              - variable: contact_email
+                label: Contact Email
+                schema:
+                  type: string
+                  required: true
+                  default: ""
+        - variable: admin
+          label: Admin Configuration
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+              - variable: name
+                label: Admin Name
+                schema:
+                  type: string
+                  required: true
+                  default: ""
+              - variable: password
                 label: Admin Password
                 schema:
                   type: string
                   required: true
                   private: true
+                  min_length: 8
                   default: ""
-        - variable: db
-          label: DB Configuration
-          schema:
-            additional_attrs: true
-            type: dict
-            attrs:
-              - variable: filter
-                label: DB Filter
+              - variable: email
+                label: Admin Email
                 schema:
                   type: string
                   required: true
-                  default: "^mycompany.*$"
-        - variable: smtp
-          label: SMTP Configuration
-          schema:
-            additional_attrs: true
-            type: dict
-            attrs:
-              - variable: server
-                label: Server
-                schema:
-                  type: string
                   default: ""
-              - variable: port
-                label: Port
-                schema:
-                  type: int
-                  default: 587
-              - variable: user
-                label: User
-                schema:
-                  type: string
-                  default: ""
-              - variable: password
-                label: Password
-                schema:
-                  type: string
-                  private: true
-                  default: ""
-              - variable: from
-                label: Email From
-                schema:
-                  type: string
-                  default: ""
-              - variable: ssl
-                label: SSL
-                schema:
-                  type: string
-                  default: "False"
-                  enum:
-                    - value: "False"
-                      description: "False"
-                    - value: "True"
-                      description: "True"
 
 # Include{containerConfig}
 # Include{podOptions}
@@ -106,58 +117,15 @@ questions:
                             description: "This port exposes the container port on the service"
                             schema:
                               type: int
-                              default: 8069
-                              required: true
-        - variable: odoo
-          label: "Odoo Service"
-          description: "Odoo Services"
-          schema:
-            additional_attrs: true
-            type: dict
-            attrs:
-# Include{serviceSelectorLoadBalancer}
-# Include{serviceSelectorExtras}
-                    - variable: xmlrpcs
-                      label: "XMLR PCS Service Port Configuration"
-                      schema:
-                        additional_attrs: true
-                        type: dict
-                        attrs:
-                          - variable: port
-                            label: "Port"
-                            description: "This port exposes the container port on the service"
-                            schema:
-                              type: int
-                              default: 8071
-                              required: true
-                    - variable: longpolling
-                      label: "Long Polling Service Port Configuration"
-                      schema:
-                        additional_attrs: true
-                        type: dict
-                        attrs:
-                          - variable: port
-                            label: "Port"
-                            description: "This port exposes the container port on the service"
-                            schema:
-                              type: int
-                              default: 8072
+                              default: 9080
                               required: true
 # Include{serviceExpertRoot}
 # Include{serviceExpert}
 # Include{serviceList}
 # Include{persistenceRoot}
-        - variable: odoo
-          label: "App Config Storage"
-          description: "Stores the Application Configuration."
-          schema:
-            additional_attrs: true
-            type: dict
-            attrs:
-# Include{persistenceBasic}
-        - variable: addons
-          label: "App Addons Storage"
-          description: "Stores the Application addons."
+        - variable: data
+          label: App Data Storage
+          description: Stores the Application Data.
           schema:
             additional_attrs: true
             type: dict
@@ -183,13 +151,13 @@ questions:
                 description: "The UserID of the user running the application"
                 schema:
                   type: int
-                  default: 0
+                  default: 568
               - variable: runAsGroup
                 label: "runAsGroup"
-                description: "The groupID this App of the user running the application"
+                description: "The groupID of the user running the application"
                 schema:
                   type: int
-                  default: 0
+                  default: 568
 # Include{securityContextContainer}
 # Include{securityContextAdvanced}
 # Include{securityContextPod}

charts/incubator/answer/values.yaml

@@ -0,0 +1,84 @@
+image:
+  repository: tccr.io/truecharts/answer
+  pullPolicy: IfNotPresent
+  tag: v1.2.0@sha256:70a578170bca4a7a1040d44cb5ff143d5e9c2c2f32f9d48f1ad4519d61c35451
+
+
+service:
+  main:
+    ports:
+      main:
+        protocol: http
+        port: 9080
+        targetPort: 80
+
+answer:
+  app:
+    language: en-US
+    # DEBUG | INFO | WARN | ERROR
+    log_level: DEBUG
+  site:
+    name: Answer
+    url: http://localhost:9080
+    contact_email: contact@example.com
+  admin:
+    name: admin
+    password: super-secret-password
+    email: admin@example.com
+
+workload:
+  main:
+    podSpec:
+      containers:
+        main:
+          probes:
+            liveness:
+              path: /healthz
+            readiness:
+              path: /healthz
+            startup:
+              type: tcp
+          env:
+            AUTO_INSTALL: true
+            # Don't change this, its only used for the initial install
+            # Does not alter the port the app listens on
+            INSTALL_PORT: 80
+            DB_TYPE: postgres
+            DB_USERNAME: "{{ .Values.cnpg.main.user }}"
+            DB_PASSWORD:
+              secretKeyRef:
+                name: cnpg-main-user
+                key: password
+            # Host + port
+            DB_HOST: '{{ printf "%s:5432" (.Values.cnpg.main.creds.host | trimAll "\"") }}'
+            DB_NAME: "{{ .Values.cnpg.main.database }}"
+            # App
+            LANGUAGE: "{{ .Values.answer.app.language }}"
+            LOG_LEVEL: "{{ .Values.answer.app.log_level }}"
+            # Site
+            SITE_NAME: "{{ .Values.answer.site.name }}"
+            SITE_URL: "{{ .Values.answer.site.url }}"
+            CONTACT_EMAIL: "{{ .Values.answer.site.contact_email }}"
+            # Admin
+            ADMIN_NAME: "{{ .Values.answer.admin.name }}"
+            ADMIN_PASSWORD: "{{ .Values.answer.admin.password }}"
+            ADMIN_EMAIL: "{{ .Values.answer.admin.email }}"
+
+persistence:
+  data:
+    enabled: true
+    mountPath: /data
+
+cnpg:
+  main:
+    enabled: true
+    user: answer
+    database: answer
+
+portal:
+  open:
+    enabled: true
+
+operator:
+  verify:
+    enabled: false

charts/incubator/apache-webdav/Chart.yaml

@@ -1,7 +1,6 @@
 annotations:
   truecharts.org/SCALE-support: "true"
-  truecharts.org/catagories: |
-    - Cloud
+  truecharts.org/category: Cloud
 apiVersion: v2
 appVersion: "latest"
 dependencies:

charts/incubator/apprise-api/Chart.yaml

@@ -24,7 +24,6 @@ sources:
 type: application
 version: 3.0.1
 annotations:
-  truecharts.org/catagories: |
-    - notifications
+  truecharts.org/category: notifications
   truecharts.org/SCALE-support: "true"
   truecharts.org/grade: U

charts/incubator/apprise-api/values.yaml

@@ -9,7 +9,7 @@ podSecurityContext:
   fsGroup: 33
 
 securityContext:
-  readOnlyRootFilesystem: False
+  readOnlyRootFilesystem: false
   # runAsNonRoot: false
 
 secretEnv:
@@ -22,7 +22,7 @@ env:
   LOG_LEVEL: INFO
   DEBUG: "no"
   APPRISE_RECURSION_MAX: 1
-  APPRISE_CONFIG_LOCK: no
+  APPRISE_CONFIG_LOCK: false
   APPRISE_ALLOW_SERVICES: ""
   ALLOWED_HOSTS: "*"
   # APPRISE_STATELESS_URLS

charts/incubator/appsmith/Chart.yaml

@@ -28,7 +28,6 @@ sources:
   - https://github.com/appsmithorg/appsmith
 version: 5.0.34
 annotations:
-  truecharts.org/catagories: |
-    - productivity
+  truecharts.org/category: productivity
   truecharts.org/SCALE-support: "true"
   truecharts.org/grade: U

charts/incubator/archiveteam-warrior/Chart.yaml

@@ -1,9 +1,6 @@
 annotations:
   truecharts.org/SCALE-support: "true"
-  truecharts.org/catagories: |
-    - Backup
-    - Cloud
-    - Downloaders
+  truecharts.org/category: Backup
 apiVersion: v2
 appVersion: "latest"
 dependencies:

charts/incubator/arksurvivalevolved/templates/common.yaml

@@ -1,16 +0,0 @@
-{{/* Make sure all variables are set properly */}}
-{{- include "tc.common.loader.init" . }}
-
-{{- if ne (int .Values.service.udp2.ports.udp2.port) (add1 (int .Values.service.main.ports.main.port)) -}}
-  {{- fail (printf "In the service udp2, the port for udp2 must be greater by 1 than the main service's port. You have to set it to <%s>." (add1 .Values.service.main.ports.main.port)) }}
-{{- end -}}
-
-{{- if and (ge (int .Values.service.udpsteam.ports.udpsteam.port) 27020) (le (int .Values.service.udpsteam.ports.udpsteam.port) 27050) -}}
-  {{- fail "UDP Steam Service port cannot be between 27020 and 27050." -}}
-{{- end }}
-
-{{/* Render secret */}}
-{{- include "ark.secret" . }}
-
-{{/* Render the templates */}}
-{{ include "tc.common.loader.apply" . }}

charts/incubator/arksurvivalevolved/values.yaml

@@ -1,83 +0,0 @@
-image:
-  pullPolicy: IfNotPresent
-  repository: tccr.io/truecharts/arksurvivalevolved
-  tag: latest@sha256:6c3c2c8ce43c350b88e93943eb99265499680011f2eb5b912652e226a19bd47c
-
-podSecurityContext:
-  runAsGroup: 0
-  runAsUser: 0
-
-securityContext:
-  readOnlyRootFilesystem: false
-  runAsNonRoot: false
-
-ark:
-  srv_admin_pass: ""
-  srv_password: ""
-  username: ""
-  password: ""
-  game_id: "376030"
-  rcon_enabled: true
-  game_params: []
-  game_params_extra: []
-  easy_game_extra_params:
-    server: true
-    log: true
-    crossplay: true
-  map: TheIsland
-  # Used only for SCALE GUI
-  custom_map: ""
-  server_name: ""
-  validate: false
-
-envFrom:
-  - secretRef:
-      name: '{{ include "tc.common.names.fullname" . }}-secret'
-
-probes:
-  liveness:
-    port: "{{ .Values.service.rcontcp.ports.rcontcp.port }}"
-  readiness:
-    port: "{{ .Values.service.rcontcp.ports.rcontcp.port }}"
-  startup:
-    port: "{{ .Values.service.rcontcp.ports.rcontcp.port }}"
-
-service:
-  main:
-    ports:
-      main:
-        port: 7777
-        protocol: UDP
-  udp2:
-    enabled: true
-    ports:
-      udp2:
-        enabled: true
-        # This should always be main +1
-        port: 7778
-        protocol: UDP
-  udpsteam:
-    enabled: true
-    ports:
-      udpsteam:
-        enabled: true
-        port: 27015
-        protocol: UDP
-  rcontcp:
-    enabled: true
-    ports:
-      rcontcp:
-        enabled: true
-        port: 27020
-        protocol: TCP
-
-persistence:
-  serverfiles:
-    enabled: true
-    mountPath: /serverdata/serverfiles
-  steamcmd:
-    enabled: true
-    mountPath: /serverdata/steamcmd
-
-portal:
-  enabled: true