bump everything to common 14.0.1 (will need to fix inherently failing CI)

.all-contributorsrc

@@ -1910,60 +1910,6 @@
       "contributions": [
         "code"
       ]
-    },
-    {
-      "login": "cedstrom",
-      "name": "cedstrom",
-      "avatar_url": "https://avatars.githubusercontent.com/u/6175957?v=4",
-      "profile": "https://github.com/cedstrom",
-      "contributions": [
-        "code"
-      ]
-    },
-    {
-      "login": "v3DJG6GL",
-      "name": "v3DJG6GL",
-      "avatar_url": "https://avatars.githubusercontent.com/u/72495210?v=4",
-      "profile": "https://github.com/v3DJG6GL",
-      "contributions": [
-        "bug"
-      ]
-    },
-    {
-      "login": "polarstack",
-      "name": "polarstack",
-      "avatar_url": "https://avatars.githubusercontent.com/u/42521003?v=4",
-      "profile": "https://github.com/polarstack",
-      "contributions": [
-        "code"
-      ]
-    },
-    {
-      "login": "K1Hyve",
-      "name": "Keyvan",
-      "avatar_url": "https://avatars.githubusercontent.com/u/53298451?v=4",
-      "profile": "https://github.com/K1Hyve",
-      "contributions": [
-        "code"
-      ]
-    },
-    {
-      "login": "MickaelFontes",
-      "name": "MickaelFontes",
-      "avatar_url": "https://avatars.githubusercontent.com/u/81414455?v=4",
-      "profile": "https://github.com/MickaelFontes",
-      "contributions": [
-        "code"
-      ]
-    },
-    {
-      "login": "blastik",
-      "name": "David CM",
-      "avatar_url": "https://avatars.githubusercontent.com/u/3662083?v=4",
-      "profile": "https://github.com/blastik",
-      "contributions": [
-        "code"
-      ]
     }
   ],
   "contributorsPerLine": 7,

.github/README.md

@@ -124,7 +124,7 @@ A lot of our work is based on the great effort of others. We would love to exten
 ## Contributors ✨
 
 <!-- ALL-CONTRIBUTORS-BADGE:START - Do not remove or modify this section -->
-[![All Contributors](https://img.shields.io/badge/all_contributors-210-orange.svg?style=for-the-badge)](#contributors)
+[![All Contributors](https://img.shields.io/badge/all_contributors-204-orange.svg?style=for-the-badge)](#contributors)
 <!-- ALL-CONTRIBUTORS-BADGE:END -->
 
 Thanks goes to these wonderful people ([emoji key](https://allcontributors.org/docs/en/emoji-key)):
@@ -399,12 +399,6 @@ Thanks goes to these wonderful people ([emoji key](https://allcontributors.org/d
     </tr>
     <tr>
       <td align="center" valign="top" width="14.28%"><a href="https://github.com/Shrinks99"><img src="https://avatars.githubusercontent.com/u/5672810?v=4?s=100" width="100px;" alt="Henry Wilkinson"/><br /><sub><b>Henry Wilkinson</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=Shrinks99" title="Code">💻</a></td>
-      <td align="center" valign="top" width="14.28%"><a href="https://github.com/cedstrom"><img src="https://avatars.githubusercontent.com/u/6175957?v=4?s=100" width="100px;" alt="cedstrom"/><br /><sub><b>cedstrom</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=cedstrom" title="Code">💻</a></td>
-      <td align="center" valign="top" width="14.28%"><a href="https://github.com/v3DJG6GL"><img src="https://avatars.githubusercontent.com/u/72495210?v=4?s=100" width="100px;" alt="v3DJG6GL"/><br /><sub><b>v3DJG6GL</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3Av3DJG6GL" title="Bug reports">🐛</a></td>
-      <td align="center" valign="top" width="14.28%"><a href="https://github.com/polarstack"><img src="https://avatars.githubusercontent.com/u/42521003?v=4?s=100" width="100px;" alt="polarstack"/><br /><sub><b>polarstack</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=polarstack" title="Code">💻</a></td>
-      <td align="center" valign="top" width="14.28%"><a href="https://github.com/K1Hyve"><img src="https://avatars.githubusercontent.com/u/53298451?v=4?s=100" width="100px;" alt="Keyvan"/><br /><sub><b>Keyvan</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=K1Hyve" title="Code">💻</a></td>
-      <td align="center" valign="top" width="14.28%"><a href="https://github.com/MickaelFontes"><img src="https://avatars.githubusercontent.com/u/81414455?v=4?s=100" width="100px;" alt="MickaelFontes"/><br /><sub><b>MickaelFontes</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=MickaelFontes" title="Code">💻</a></td>
-      <td align="center" valign="top" width="14.28%"><a href="https://github.com/blastik"><img src="https://avatars.githubusercontent.com/u/3662083?v=4?s=100" width="100px;" alt="David CM"/><br /><sub><b>David CM</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=blastik" title="Code">💻</a></td>
     </tr>
   </tbody>
 </table>

.github/SUPPORT.md

@@ -20,10 +20,6 @@ We also document which versions of TrueNAS will receive TrueCharts updates and f
 | 22.12.0          | `master` | :white_check_mark:     | :white_check_mark:        | :white_check_mark:    | Stable Release as of 2022-12-13                                                                                |
 | 22.12.1          | `master` | :white_check_mark:     | :white_check_mark:        | :white_check_mark:    | Stable Release as of 2023-02-21                                                                                |
 | 22.12.2          | `master` | :white_check_mark:     | :white_check_mark:        | :white_check_mark:    | Stable Release as of 2023-04-11                                                                                |
-| 22.12.3          | `master` | :white_check_mark:     | :white_check_mark:        | :white_check_mark:    | Stable Release as of 2023-06-13                                                                                |
-| 22.12.3.1        | `master` | :white_check_mark:     | :white_check_mark:        | :white_check_mark:    | Stable Release as of 2023-06-20                                                                                |
-| 22.12.3.2        | `master` | :white_check_mark:     | :white_check_mark:        | :white_check_mark:    | Stable Release as of 2023-07-05                                                                                |
-| 22.12.3.3        | `master` | :white_check_mark:     | :white_check_mark:        | :white_check_mark:    | Stable Release as of 2023-07-25                                                                                |
 | Nightly          | `master` | :white_check_mark:     | :x:                       | :white_check_mark:    | Please only submit bug reports during codefreeze                                                               |
 
 :::warning Support Guidelines

.github/ct-install.yaml

@@ -12,16 +12,15 @@ chart-dirs:
 excluded-charts:
   - charts/dependency/subchart
   - charts/incubator/twingate-connector
-  - charts/incubator/eco
   - charts/incubator/midarr
   - charts/incubator/orbital-sync
   - charts/incubator/plex-meta-manager
+  - charts/incubator/tauticord
   - charts/library/common
   - charts/stable/alertmanager-bot
   - charts/stable/alertmanager-bot
   - charts/stable/alertmanager-discord
   - charts/stable/amcrest2mqtt
-  - charts/stable/tauticord
   - charts/stable/discordgsm
   - charts/stable/facebox
   - charts/stable/foundryvtt

.github/renovate.json5

@@ -20,12 +20,6 @@
     "fileMatch": ["charts/.+/Chart\\.yaml$"]
   },
   "packageRules": [
-    // Bundle Github Actions
-    {
-      "matchManagers": ["github-actions"],
-      "groupName": "Github-Actions",
-      "automerge": true
-    },
     // Setup datasources for dep updates
     {
       "datasources": ["helm"],

.github/scripts/tc-lint.sh

@@ -147,18 +147,17 @@ function lint_chart(){
         echo "👣 Helm Lint - [$chart_path]"
         helm_lint "$chart_path"
 
-        # FIXME: Comment out for now as it requires deps installed in linting.
-        # if [[ ! $(ls $chart_path/ci/*values.yaml) ]]; then
-        #     echo "👣 Helm Template - [$chart_path]"
-        #     helm_template "$chart_path"
-        # fi
+        if [[ ! $(ls $chart_path/ci/*values.yaml) ]]; then
+            echo "👣 Helm Template - [$chart_path]"
+            helm_template "$chart_path"
+        fi
 
-        # for values in $chart_path/ci/*values.yaml; do
-        #     if [ -f "${values}" ]; then
-        #         echo "👣 Helm Template - [$values]"
-        #         helm_template "$chart_path" "$values"
-        #     fi
-        # done
+        for values in $chart_path/ci/*values.yaml; do
+            if [ -f "${values}" ]; then
+                echo "👣 Helm Template - [$values]"
+                helm_template "$chart_path" "$values"
+            fi
+        done
 
         echo "👣 Chart Version - [$chart_path] against [$target_branch]"
         check_version "$chart_path" "$target_branch"

.github/scripts/updateTraefikMiddlewareVersions.sh

@@ -0,0 +1,53 @@
+#! /bin/bash
+
+trainsPath="./charts"
+traefikTrain="enterprise"
+
+get_latest_release() {
+    # Get latest release from GitHub api, NOTE: Remove the header when running locally (or add a valid token)
+    curl --silent \
+         --header 'authorization: Bearer ${{ secrets.GITHUB_TOKEN }}' \
+         --url "https://api.github.com/repos/$1/releases/latest" |
+    # Get tag line
+    grep '"tag_name":' |
+    # Pluck JSON value
+    sed -E 's/.*"([^"]+)".*/\1/'
+}
+
+set_key_to_version() {
+    key="$1"
+    version="$2"
+    traefikValuesFile="$trainsPath/$traefikTrain/traefik/values.yaml"
+    echo "Setting $key to $version..."
+    sed -i "s/${key}: .*/${key}: ${version}/" $traefikValuesFile
+
+    content=$(grep "$key:" "$traefikValuesFile" | sed "s/\s*${key}:\s*//" )
+    echo "New content of $key in values.yaml: $content"
+    echo ""
+}
+
+update_plugin() {
+    repo="$1"
+    key="$2"
+    pluginName="$3"
+
+    version=$(get_latest_release "$repo")
+    if [ -z "$version" ]
+    then
+        echo "Got empty version, skipping..."
+    else
+        echo "Fetched $pluginName plugin version: $version"
+        set_key_to_version "$key" "$version"
+    fi;
+}
+# Example
+# update_plugin "repo" "key_holding_version_in_values.yaml" "plugin_name_used_for_verbose_printing_only"
+
+# Real IP
+update_plugin "soulbalz/traefik-real-ip" "realIPVersion" "RealIP"
+
+# Theme Park
+update_plugin "packruler/traefik-themepark" "themeParkVersion" "ThemePark"
+
+# GeoBlock
+update_plugin "PascalMinder/geoblock" "geoBlockVersion" "GeoBlock"

.github/workflows/catalog-test.yaml

@@ -17,7 +17,7 @@ jobs:
     container:
       image: ghcr.io/truecharts/devcontainer:3.1.10@sha256:c239addf725eb5cedf79517f8089fdafdc32b5270d1893ee87ae6e511b9bcae3
     steps:
-      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+      - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
         name: Checkout
         with:
           fetch-depth: 100

.github/workflows/charts-lint.yaml

@@ -22,13 +22,13 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout [master]
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
         with:
           fetch-depth: 1
           ref: master
 
       - name: Checkout [commit]
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
         with:
           fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
@@ -108,7 +108,7 @@ jobs:
       - name: Create/Update comment
         if: steps.list-changed.outputs.detected == 'true'
         continue-on-error: true
-        uses: thollander/actions-comment-pull-request@d61db783da9abefc3437960d0cce08552c7c004f # v2
+        uses: thollander/actions-comment-pull-request@dadb7667129e23f12ca3925c90dc5cd7121ab57e # v2
         with:
           filePath: /tmp/lint_result.txt
           comment_tag: lint_results

.github/workflows/charts-release.yaml

@@ -17,13 +17,13 @@ jobs:
       image: ghcr.io/truecharts/devcontainer:3.1.10@sha256:c239addf725eb5cedf79517f8089fdafdc32b5270d1893ee87ae6e511b9bcae3
     steps:
       - name: Checkout
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
         with:
           token: ${{ secrets.BOT_TOKEN }}
           fetch-depth: 1
 
       - name: Checkout Helm-Staging
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
         with:
           fetch-depth: 1
           repository: truecharts/helm-staging
@@ -93,7 +93,7 @@ jobs:
           GPG_PASSPHRASE: "${{ secrets.GPG_PASSPHRASE }}"
 
       - name: Checkout
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
         with:
           token: ${{ secrets.BOT_TOKEN }}
           fetch-depth: 0
@@ -125,7 +125,7 @@ jobs:
           find . -name '*.sh' | xargs chmod +x
 
       - name: Checkout
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
         if: |
           steps.collect-changes.outputs.changesDetectedAfterTag == 'true'
         with:
@@ -240,7 +240,7 @@ jobs:
           git push
 
       - name: Checkout Catalog
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
         if: |
           steps.collect-changes.outputs.changesDetectedAfterTag == 'true'
         with:

.github/workflows/charts-test.yaml

@@ -50,7 +50,7 @@ jobs:
       detected6: ${{ steps.list-changed.outputs.detected6 }}
     steps:
       - name: Checkout
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
         with:
           fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
@@ -115,7 +115,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
         with:
           fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
@@ -146,28 +146,18 @@ jobs:
         run: |
           kubectl taint --all=true nodes node.cloudprovider.kubernetes.io/uninitialized- || true
 
-      - name: Prep Helm
-        run: |
-          helm repo add truecharts https://charts.truecharts.org
-          helm repo add truecharts-deps https://deps.truecharts.org
-          helm repo add truecharts-library https://library-charts.truecharts.org
-          helm repo add jetstack https://charts.jetstack.io
-          helm repo update
-
       - name: Add Dependencies
         run: |
-          if [[ "${{ matrix.chart }}" == "charts/operators/metallb-config" ]]; then
-            helm install metallb truecharts/metallb --namespace metallb --create-namespace --wait
-          fi
+          ## TODO: Move to our Helm Charts
           ## TODO: Only add when required
-          if [[ "${{ matrix.chart }}" == "charts/enterprise/clusterissuer" ]]; then
-            helm install cert-manager truecharts/cert-manager --namespace cert-manager --create-namespace --wait
+          if [[ "${{ matrix.chart }}" == "charts/operators/metallb-config" ]]; then
+            kubectl apply -f https://raw.githubusercontent.com/metallb/metallb/v0.13.10/config/manifests/metallb-native.yaml --server-side --force-conflicts || echo "error fetching metallb manifest"
           fi
           if [[ "${{ matrix.chart }}" != "charts/operators/cloudnative-pg" ]]; then
-            helm install cloudnative-pg truecharts/cloudnative-pg --namespace cloudnative-pg --create-namespace --wait
+            kubectl apply -f https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg/release-1.20/releases/cnpg-1.20.0.yaml  --server-side --force-conflicts || echo "error fetching cnpg manifest"
           fi
           if [[ "${{ matrix.chart }}" != "charts/operators/prometheus-operator" ]]; then
-            helm install prometheus-operator truecharts/prometheus-operator --namespace prometheus-operator --create-namespace --wait
+            kubectl apply -f  https://github.com/prometheus-operator/prometheus-operator/releases/download/v0.66.0/bundle.yaml --server-side --force-conflicts || echo "error fetching prometheus operator manifest"
           fi
 
       - name: Run chart-testing (install)
@@ -185,7 +175,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
         with:
           fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
@@ -219,17 +209,13 @@ jobs:
       - name: Add Dependencies
         run: |
           if [[ "${{ matrix.chart }}" == "charts/operators/metallb-config" ]]; then
-            helm install metallb truecharts/metallb --namespace metallb --create-namespace --wait
-          fi
-          ## TODO: Only add when required
-          if [[ "${{ matrix.chart }}" == "charts/enterprise/clusterissuer" ]]; then
-            helm install cert-manager truecharts/cert-manager --namespace cert-manager --create-namespace --wait
+            kubectl apply -f https://raw.githubusercontent.com/metallb/metallb/v0.13.10/config/manifests/metallb-native.yaml --server-side --force-conflicts || echo "error fetching metallb manifest"
           fi
           if [[ "${{ matrix.chart }}" != "charts/operators/cloudnative-pg" ]]; then
-            helm install cloudnative-pg truecharts/cloudnative-pg --namespace cloudnative-pg --create-namespace --wait
+            kubectl apply -f https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg/release-1.17/releases/cnpg-1.17.5.yaml  --server-side --force-conflicts || echo "error fetching cnpg manifest"
           fi
           if [[ "${{ matrix.chart }}" != "charts/operators/prometheus-operator" ]]; then
-            helm install prometheus-operator truecharts/prometheus-operator --namespace prometheus-operator --create-namespace --wait
+            kubectl apply -f  https://github.com/prometheus-operator/prometheus-operator/releases/download/v0.66.0/bundle.yaml --server-side --force-conflicts || echo "error fetching prometheus operator manifest"
           fi
 
       - name: Run chart-testing (install)
@@ -247,7 +233,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
         with:
           fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
@@ -281,17 +267,13 @@ jobs:
       - name: Add Dependencies
         run: |
           if [[ "${{ matrix.chart }}" == "charts/operators/metallb-config" ]]; then
-            helm install metallb truecharts/metallb --namespace metallb --create-namespace --wait
-          fi
-          ## TODO: Only add when required
-          if [[ "${{ matrix.chart }}" == "charts/enterprise/clusterissuer" ]]; then
-            helm install cert-manager truecharts/cert-manager --namespace cert-manager --create-namespace --wait
+            kubectl apply -f https://raw.githubusercontent.com/metallb/metallb/v0.13.10/config/manifests/metallb-native.yaml --server-side --force-conflicts || echo "error fetching metallb manifest"
           fi
           if [[ "${{ matrix.chart }}" != "charts/operators/cloudnative-pg" ]]; then
-            helm install cloudnative-pg truecharts/cloudnative-pg --namespace cloudnative-pg --create-namespace --wait
+            kubectl apply -f https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg/release-1.17/releases/cnpg-1.17.5.yaml  --server-side --force-conflicts || echo "error fetching cnpg manifest"
           fi
           if [[ "${{ matrix.chart }}" != "charts/operators/prometheus-operator" ]]; then
-            helm install prometheus-operator truecharts/prometheus-operator --namespace prometheus-operator --create-namespace --wait
+            kubectl apply -f  https://github.com/prometheus-operator/prometheus-operator/releases/download/v0.66.0/bundle.yaml --server-side --force-conflicts || echo "error fetching prometheus operator manifest"
           fi
 
       - name: Run chart-testing (install)
@@ -309,7 +291,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
         with:
           fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
@@ -343,17 +325,13 @@ jobs:
       - name: Add Dependencies
         run: |
           if [[ "${{ matrix.chart }}" == "charts/operators/metallb-config" ]]; then
-            helm install metallb truecharts/metallb --namespace metallb --create-namespace --wait
-          fi
-          ## TODO: Only add when required
-          if [[ "${{ matrix.chart }}" == "charts/enterprise/clusterissuer" ]]; then
-            helm install cert-manager truecharts/cert-manager --namespace cert-manager --create-namespace --wait
+            kubectl apply -f https://raw.githubusercontent.com/metallb/metallb/v0.13.10/config/manifests/metallb-native.yaml --server-side --force-conflicts || echo "error fetching metallb manifest"
           fi
           if [[ "${{ matrix.chart }}" != "charts/operators/cloudnative-pg" ]]; then
-            helm install cloudnative-pg truecharts/cloudnative-pg --namespace cloudnative-pg --create-namespace --wait
+            kubectl apply -f https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg/release-1.17/releases/cnpg-1.17.5.yaml  --server-side --force-conflicts || echo "error fetching cnpg manifest"
           fi
           if [[ "${{ matrix.chart }}" != "charts/operators/prometheus-operator" ]]; then
-            helm install prometheus-operator truecharts/prometheus-operator --namespace prometheus-operator --create-namespace --wait
+            kubectl apply -f  https://github.com/prometheus-operator/prometheus-operator/releases/download/v0.66.0/bundle.yaml --server-side --force-conflicts || echo "error fetching prometheus operator manifest"
           fi
 
       - name: Run chart-testing (install)
@@ -371,7 +349,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
         with:
           fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
@@ -405,18 +383,15 @@ jobs:
       - name: Add Dependencies
         run: |
           if [[ "${{ matrix.chart }}" == "charts/operators/metallb-config" ]]; then
-            helm install metallb truecharts/metallb --namespace metallb --create-namespace --wait
-          fi
-          ## TODO: Only add when required
-          if [[ "${{ matrix.chart }}" == "charts/enterprise/clusterissuer" ]]; then
-            helm install cert-manager truecharts/cert-manager --namespace cert-manager --create-namespace --wait
+            kubectl apply -f --server-side --force-conflicts https://raw.githubusercontent.com/metallb/metallb/v0.13.10/config/manifests/metallb-native.yaml
           fi
           if [[ "${{ matrix.chart }}" != "charts/operators/cloudnative-pg" ]]; then
-            helm install cloudnative-pg truecharts/cloudnative-pg --namespace cloudnative-pg --create-namespace --wait
+            kubectl apply -f --server-side --force-conflicts https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg/release-1.17/releases/cnpg-1.17.5.yaml
           fi
           if [[ "${{ matrix.chart }}" != "charts/operators/prometheus-operator" ]]; then
-            helm install prometheus-operator truecharts/prometheus-operator --namespace prometheus-operator --create-namespace --wait
+            kubectl apply -f --server-side --force-conflicts --server-side --force-conflicts https://github.com/prometheus-operator/prometheus-operator/releases/download/v0.66.0/bundle.yaml
           fi
+
       - name: Run chart-testing (install)
         run: ct install --config ".github/ct-install.yaml" --charts "${{ matrix.chart }}" # --upgrade
 
@@ -432,7 +407,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
         with:
           fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
@@ -466,17 +441,13 @@ jobs:
       - name: Add Dependencies
         run: |
           if [[ "${{ matrix.chart }}" == "charts/operators/metallb-config" ]]; then
-            helm install metallb truecharts/metallb --namespace metallb --create-namespace --wait
-          fi
-          ## TODO: Only add when required
-          if [[ "${{ matrix.chart }}" == "charts/enterprise/clusterissuer" ]]; then
-            helm install cert-manager truecharts/cert-manager --namespace cert-manager --create-namespace --wait
+            kubectl apply -f https://raw.githubusercontent.com/metallb/metallb/v0.13.10/config/manifests/metallb-native.yaml --server-side --force-conflicts || echo "error fetching metallb manifest"
           fi
           if [[ "${{ matrix.chart }}" != "charts/operators/cloudnative-pg" ]]; then
-            helm install cloudnative-pg truecharts/cloudnative-pg --namespace cloudnative-pg --create-namespace --wait
+            kubectl apply -f https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg/release-1.17/releases/cnpg-1.17.5.yaml  --server-side --force-conflicts || echo "error fetching cnpg manifest"
           fi
           if [[ "${{ matrix.chart }}" != "charts/operators/prometheus-operator" ]]; then
-            helm install prometheus-operator truecharts/prometheus-operator --namespace prometheus-operator --create-namespace --wait
+            kubectl apply -f  https://github.com/prometheus-operator/prometheus-operator/releases/download/v0.66.0/bundle.yaml --server-side --force-conflicts || echo "error fetching prometheus operator manifest"
           fi
 
       - name: Run chart-testing (install)

.github/workflows/daily.yaml

@@ -20,7 +20,7 @@ jobs:
       image: ghcr.io/truecharts/devcontainer:3.1.10@sha256:c239addf725eb5cedf79517f8089fdafdc32b5270d1893ee87ae6e511b9bcae3
     steps:
       - name: Checkout
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
         with:
           token: ${{ secrets.BOT_TOKEN }}
           fetch-depth: 1
@@ -55,7 +55,7 @@ jobs:
           done
 
       - name: Checkout
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
         with:
           repository: truecharts/website
           path: website
@@ -248,7 +248,7 @@ jobs:
           helm repo update
 
       - name: Checkout
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
         with:
           token: ${{ secrets.BOT_TOKEN }}
           fetch-depth: 1
@@ -257,7 +257,7 @@ jobs:
         run: git config --global --add safe.directory "$GITHUB_WORKSPACE"
 
       - name: Checkout website
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
         with:
           fetch-depth: 1
           repository: truecharts/website
@@ -377,12 +377,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
         with:
           token: ${{ secrets.BOT_TOKEN }}
           fetch-depth: 1
 
-      - uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # v3
+      - uses: actions/setup-node@e33196f7422957bea03ed53f6fbb155025ffc7b8 # v3
         with:
           node-version: 18
 

.github/workflows/pr-validate.yaml

@@ -17,7 +17,7 @@ jobs:
       addedOrModifiedCharts: ${{ steps.collect-changes.outputs.addedOrModifiedCharts }}
     steps:
       - name: Checkout
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
 
       - name: Collect changes
         id: collect-changes
@@ -57,7 +57,7 @@ jobs:
       head-commit-message: ${{ steps.get_head_commit_message.outputs.headCommitMsg }}
     steps:
       - name: Get repo
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
         with:
           ref: ${{ github.event.pull_request.head.sha }}
       - name: verbose head git commit message

.github/workflows/prune.yaml

@@ -9,7 +9,7 @@ jobs:
     name: "prune old releases"
     steps:
       - name: Checkout
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
         with:
           fetch-depth: 0
       - uses: actions/delete-package-versions@0d39a63126868f5eefaa47169615edd3c0f61e20 # v4

.github/workflows/renovate-bump.yaml

@@ -10,16 +10,16 @@ on:
 jobs:
   renovate-bump:
     name: Get changed Apps
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-20.04
     container:
       image: ghcr.io/truecharts/devcontainer:3.1.10@sha256:c239addf725eb5cedf79517f8089fdafdc32b5270d1893ee87ae6e511b9bcae3
     steps:
-      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+      - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
         name: Checkout
         with:
           fetch-depth: 0
           token: ${{ secrets.BOT_TOKEN }}
-      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+      - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
         name: Checkout
         with:
           fetch-depth: 0

.github/workflows/renovate.yml

@@ -8,11 +8,11 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
         with:
           token: ${{ secrets.BOT_TOKEN }}
       - name: Self-hosted Renovate
-        uses: renovatebot/github-action@3cef36a9aba515d8726b491905b3bc766832e221 # v39.0.5
+        uses: renovatebot/github-action@23a02fe7be9e93f857a953cc8162e57d2c8401ef # v39.0.1
         with:
           configurationFile: .github/renovate-config.js
           token: ${{ secrets.BOT_TOKEN }}

.github/workflows/schedule-sync-labels.yaml

@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
         with:
           token: ${{ secrets.BOT_TOKEN }}
 

.github/workflows/stale.yaml

@@ -8,7 +8,7 @@ on:
 
 jobs:
   stale:
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-20.04
     steps:
       - name: Check for stale issues and PRs
         uses: actions/stale@1160a2240286f5da8ec72b1c0816ce2481aabf84 # v8

charts/dependency/clickhouse/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "23.8.2.7"
+appVersion: "23.7.1.247"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.6
+    version: 14.0.1
 deprecated: false
 description: ClickHouse is a column-oriented database management system (DBMS) for online analytical processing of queries (OLAP).
 home: https://truecharts.org/charts/dependency/clickhouse
@@ -22,7 +22,7 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/dependency/clickhouse
   - https://clickhouse.com/
 type: application
-version: 7.0.7
+version: 7.0.0
 annotations:
   truecharts.org/catagories: |
     - database

charts/dependency/clickhouse/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/clickhouse
   pullPolicy: IfNotPresent
-  tag: v23.8.2.7@sha256:59d8931ff246dfe2740cfb53ae5db62242b05b1bd9f8dffac3dbbb634109fe0a
+  tag: v23.7.1.2470@sha256:fbec51f0c6b09733fe4601bba2584dc750f0a8a5077702b86163744bd6f4573f
 
 workload:
   main:

charts/dependency/kube-state-metrics/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "2.10.0"
+appVersion: "2.9.2"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.6
+    version: 14.0.1
 deprecated: false
 description: kube-state-metrics is a simple service that listens to the Kubernetes API server and generates metrics about the state of the objects.
 home: https://truecharts.org/charts/dependency/kube-state-metrics
@@ -21,7 +21,7 @@ name: kube-state-metrics
 sources:
   - https://github.com/truecharts/charts/tree/master/charts/dependency/kube-state-metrics
 type: application
-version: 3.0.13
+version: 3.0.0
 annotations:
   truecharts.org/catagories: |
     - metrics

charts/dependency/kube-state-metrics/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/kube-state-metrics
   pullPolicy: IfNotPresent
-  tag: v2.10.0@sha256:0e73ed04d6d91d0892f2b81cc6642624ee2499a333cb0f0ff6c89c9d2a787f0d
+  tag: v2.9.2@sha256:f97c4f80c68ea1fb7852ac7f0dd5a06e680d61c4c0b43b6f9feca282bd5958f4
 
 service:
   main:

charts/dependency/mariadb/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "11.0.3"
+appVersion: "11.0.2"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.6
+    version: 14.0.1
 deprecated: false
 description: Fast, reliable, scalable, and easy to use open-source relational database system.
 home: https://truecharts.org/charts/dependency/mariadb
@@ -25,7 +25,7 @@ sources:
   - https://github.com/prometheus/mysqld_exporter
   - https://mariadb.org
 type: application
-version: 9.0.15
+version: 9.0.0
 annotations:
   truecharts.org/catagories: |
     - database

charts/dependency/mariadb/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/mariadb
   pullPolicy: IfNotPresent
-  tag: v11.0.3@sha256:4a87c148792e6bb9bbc340e6a992255ee8596fa3e9b28de5038c632cf28ec93c
+  tag: v11.0.2@sha256:01c12c8ab605cf1a613f87ea781d34a1311cfa18aa61babcc76d0be61c5cb1f1
 
 workload:
   main:

charts/dependency/memcached/Chart.yaml

@@ -3,7 +3,7 @@ appVersion: "1.6.21"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.6
+    version: 14.0.1
 deprecated: false
 description: Memcached is a memory-backed database caching solution
 home: https://truecharts.org/charts/dependency/memcached
@@ -23,7 +23,7 @@ sources:
   - https://github.com/bitnami/bitnami-docker-memcached
   - http://memcached.org/
 type: application
-version: 8.0.16
+version: 8.0.0
 annotations:
   truecharts.org/catagories: |
     - database

charts/dependency/memcached/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/memcached
   pullPolicy: IfNotPresent
-  tag: v1.6.21@sha256:117c7f246c0854b46f655a73f411f418e8f78a50cafec5e92d6ebfdb49319331
+  tag: v1.6.21@sha256:a4405d38745d617d73119228f0043b72f80007af25735743e1c3ac86da75d4ac
 
 service:
   main:

charts/dependency/mongodb/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "6.0.9"
+appVersion: "6.0.8"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.6
+    version: 14.0.1
 deprecated: false
 description: Fast, reliable, scalable, and easy to use open-source no-sql database system.
 home: https://truecharts.org/charts/dependency/mongodb
@@ -23,7 +23,7 @@ sources:
   - https://github.com/bitnami/bitnami-docker-mongodb
   - https://www.mongodb.com
 type: application
-version: 8.0.11
+version: 8.0.0
 annotations:
   truecharts.org/catagories: |
     - database

charts/dependency/mongodb/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/mongodb
   pullPolicy: IfNotPresent
-  tag: v6.0.9@sha256:8a867b30c13acb263a0b9f29b8fb9d733fe6bd659d84563db06102c45571dd25
+  tag: v6.0.8@sha256:7435fdeb21aa12486de9efdce9d72e1ed1c4ed1d5f4af9b3e37b3e8eb31576be
 
 workload:
   main:

charts/dependency/node-exporter/Chart.yaml

@@ -3,7 +3,7 @@ appVersion: "1.6.1"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.6
+    version: 14.0.1
 deprecated: false
 description: Prometheus exporter for hardware and OS metrics exposed by UNIX kernels, with pluggable metric collectors.
 home: https://truecharts.org/charts/dependency/node-exporter
@@ -21,7 +21,7 @@ name: node-exporter
 sources:
   - https://github.com/truecharts/charts/tree/master/charts/dependency/node-exporter
 type: application
-version: 3.0.14
+version: 3.0.0
 annotations:
   truecharts.org/catagories: |
     - metrics

charts/dependency/node-exporter/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/node-exporter
   pullPolicy: IfNotPresent
-  tag: v1.6.1@sha256:0672c1a846be61018b11cd88ce0df3629d7a80ec895b93051b2b7a5c7fe8b080
+  tag: v1.6.1@sha256:6c481c3c3ddf83b604f207f7a27b3dbd469035c4e4783fc100e478bf05f9a9c5
 
 service:
   main:

charts/dependency/redis/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "7.2.1"
+appVersion: "7.0.12"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.6
+    version: 14.0.1
 deprecated: false
 description: Open source, advanced key-value store.
 home: https://truecharts.org/charts/dependency/redis
@@ -23,7 +23,7 @@ sources:
   - https://github.com/bitnami/bitnami-docker-redis
   - http://redis.io/
 type: application
-version: 8.0.19
+version: 8.0.0
 annotations:
   truecharts.org/catagories: |
     - database

charts/dependency/redis/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/redis
   pullPolicy: IfNotPresent
-  tag: v7.2.1@sha256:37dfec3b4ba963bb135f7948e82fec8753e0b52bf714307bf001a3e3d50f2fbf
+  tag: v7.0.12@sha256:4a7b38a055a1183d226d8e2eb8bb1a55d2ef4ba217a74fd9c1562513c51e5064
 
 workload:
   main:

charts/dependency/solr/Chart.yaml

@@ -3,7 +3,7 @@ appVersion: "9.3.0"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.6
+    version: 14.0.1
 deprecated: false
 description: Apache Solr
 home: https://truecharts.org/charts/dependency/solr
@@ -22,7 +22,7 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/dependency/solr
   - https://github.com/apache/solr
 type: application
-version: 6.0.16
+version: 6.0.0
 annotations:
   truecharts.org/catagories: |
     - search

charts/dependency/solr/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/solr
   pullPolicy: IfNotPresent
-  tag: v9.3.0@sha256:a4c234e4dd04d2ebc4c18b97097973cb153fdb22a4ade306ad7607c1a032980c
+  tag: v9.3.0@sha256:e4780b9d70fe771d1a6aa477fba5b3be92ddd8d858a685f334616f027f58772a
 
 workload:
   main:

charts/enterprise/authelia/Chart.yaml

@@ -35,7 +35,7 @@ sources:
   - https://github.com/authelia/chartrepo
   - https://github.com/authelia/authelia
 type: application
-version: 18.1.0
+version: 18.0.0
 annotations:
   truecharts.org/catagories: |
     - security

charts/enterprise/authelia/questions.yaml

@@ -98,95 +98,6 @@ questions:
           schema:
             type: int
             default: 1
-  - variable: password_policy
-    group: "App Configuration"
-    label: "Password Policy Configuration"
-    description: "Authelia allows administrators to configure an enforced password policy."
-    schema:
-      additional_attrs: true
-      type: dict
-      attrs:
-        - variable: enabled
-          label: "Enable"
-          schema:
-            type: boolean
-            default: false
-            show_subquestions_if: true
-            subquestions:
-              - variable: standard
-                label: Standard
-                schema:
-                  additional_attrs: true
-                  type: dict
-                  attrs:
-                    - variable: enabled
-                      label: Enabled
-                      schema:
-                        type: boolean
-                        default: false
-                    - variable: min_length
-                      label: "Minimum Password Length"
-                      description: "Minimum Password Length"
-                      schema:
-                        type: int
-                        required: true
-                        show_if: [["enabled", "=", true]]
-                        default: 8
-                    - variable: max_length
-                      label: "Max Passsword Length"
-                      description: "Max Password Length"
-                      schema:
-                        type: int
-                        required: true
-                        show_if: [["enabled", "=", true]]
-                        default: 0
-                    - variable: require_uppercase
-                      label: "Require Upppercase"
-                      schema:
-                        type: boolean
-                        default: false
-                        show_if: [["enabled", "=", true]]
-                        required: true
-                    - variable: require_lowercase
-                      label: "Require Lowercase"
-                      schema:
-                        type: boolean
-                        default: false
-                        show_if: [["enabled", "=", true]]
-                        required: true
-                    - variable: require_number
-                      label: "Require Numbers"
-                      description: "Require Numbers in the password"
-                      schema:
-                        type: boolean
-                        default: false
-                        show_if: [["enabled", "=", true]]
-                        required: true
-                    - variable: require_special
-                      label: "Require Special Characters"
-                      schema:
-                        type: boolean
-                        default: false
-                        show_if: [["enabled", "=", true]]
-              - variable: zxcvbn
-                label: zxcvbn
-                schema:
-                  additional_attrs: true
-                  type: dict
-                  attrs:
-                    - variable: enabled
-                      label: Enabled
-                      schema:
-                        type: boolean
-                        default: false
-                        required: true
-                    - variable: min_score
-                      label: "Min Score"
-                      schema:
-                        type: int
-                        required: true
-                        show_if: [["enabled", "=", true]]
-                        default: 3
   - variable: duo_api
     group: "App Configuration"
     label: "DUO API Configuration"

charts/enterprise/authelia/templates/_configmap.tpl

@@ -62,20 +62,6 @@ data:
       issuer: {{ .Values.totp.issuer | default .Values.domain }}
       period: {{ .Values.totp.period | default 30 }}
       skew: {{ .Values.totp.skew | default 1 }}
-    {{- if .Values.password_policy.enabled }}
-    password_policy:
-      standard:
-        enabled: {{ .Values.password_policy.standard.enabled | default false }}
-        min_length: {{ .Values.password_policy.standard.min_length | default 8 }}
-        max_length: {{ .Values.password_policy.standard.max_length | default 0 }}
-        require_uppercase: {{ .Values.password_policy.standard.require_uppercase | default false }}
-        require_lowercase: {{ .Values.password_policy.standard.require_lowercase | default false }}
-        require_number: {{ .Values.password_policy.standard.require_number | default false }}
-        require_special: {{ .Values.password_policy.standard.require_special | default false }}
-      zxcvbn:
-        enabled: {{ .Values.password_policy.zxcvbn.enabled | default false }}
-        min_score: {{ .Values.password_policy.zxcvbn.min_score | default 3 }}
-    {{- end -}}
     {{- if .Values.duo_api.enabled }}
     duo_api:
       hostname: {{ .Values.duo_api.hostname }}

charts/enterprise/authelia/values.yaml

@@ -117,25 +117,6 @@ totp:
   ## See: https://www.authelia.com/docs/configuration/one-time-password.html#period-and-skew to read the documentation.
   skew: 1
 
-##
-## Password Policy Config
-##
-## Parameters used for Password Policies
-password_policy:
-  ## See: https://www.authelia.com/configuration/security/password-policy/
-  standard:
-    enabled: false
-    min_length: 8
-    max_length: 0
-    require_uppercase: false
-    require_lowercase: false
-    require_number: false
-    require_special: false
-  zxcvbn:
-    ## See https://www.authelia.com/configuration/security/password-policy/#zxcvbn for more info
-    enabled: false
-    min_score: 3
-
 ##
 ## Duo Push API Configuration
 ##

charts/enterprise/clusterissuer/Chart.yaml

@@ -21,7 +21,7 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/enterprise/clusterissuer
   - https://cert-manager.io/
 type: application
-version: 4.0.1
+version: 4.0.0
 annotations:
   truecharts.org/catagories: |
     - core

charts/enterprise/clusterissuer/docs/how-to.md

@@ -10,7 +10,7 @@ This guide will walk you through setting up `clusterissuer`, certificate managem
 
 ## Set Scale Nameservers
 
-It is important to configure Scale with reliable nameserver to avoid issues handling DNS-01 challenges. Under Network -> Global Configuration-> Nameservers, we recommend setting 1.1.1.1/1.0.0.1 or 8.8.8.8/8.8.4.4.
+It is important to configure Scale with reliable nameserver to avoid issues handling DNS-01 challenges. Under Network -> Global Configuration-> Nameservers, we recommend setting 1.1.1.1, 9.9.9.9 or 8.8.8.8.
 
 ![clusterissuer scale nameservers](img/scale-network-nameserver.png)
 

charts/enterprise/grafana/Chart.yaml

@@ -1,5 +1,5 @@
 apiVersion: v2
-appVersion: "10.1.1"
+appVersion: "10.0.3"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
@@ -24,7 +24,7 @@ sources:
   - https://github.com/bitnami/bitnami-docker-grafana
   - https://grafana.com/
 type: application
-version: 9.0.12
+version: 9.0.0
 annotations:
   truecharts.org/catagories: |
     - metrics

charts/enterprise/grafana/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/grafana
   pullPolicy: IfNotPresent
-  tag: v10.1.1@sha256:53443845ac760237f6415b986b777facf9d14b9b6dfb32e9fef25c5a30279da1
+  tag: v10.0.3@sha256:c39406b61cd96aeb602fe1a2e6995053190fb3f09526cbc25886bcc252a2a016
 manifestManager:
   enabled: true
 securityContext:

charts/enterprise/prometheus/Chart.yaml

@@ -29,7 +29,7 @@ sources:
   - https://github.com/prometheus-community/helm-charts
   - https://github.com/prometheus-operator/kube-prometheus
 type: application
-version: 12.1.2
+version: 12.0.0
 annotations:
   truecharts.org/catagories: |
     - metrics

charts/enterprise/prometheus/questions.yaml

@@ -80,45 +80,6 @@ questions:
                 schema:
                   type: boolean
                   default: false
-              - variable: remoteWrite
-                label: "Remote Write"
-                schema:
-                  type: list
-                  default: []
-                  items:
-                    - variable: remoteWriteEntry
-                      label: Remote Write Entry
-                      schema:
-                        additional_attrs: true
-                        type: dict
-                        attrs:
-                          - variable: url
-                            label: URL
-                            description: Remote write destination URL
-                            schema:
-                              type: string
-                              required: true
-                              default: ""
-                          - variable: basicAuth
-                            label: Basic Auth
-                            description: Basic authentication for remote write
-                            schema:
-                              type: dict
-                              attrs:
-                                - variable: username
-                                  label: Username
-                                  description: Basic auth username
-                                  schema:
-                                    type: string
-                                    required: true
-                                    default: ""
-                                - variable: password
-                                  label: Password
-                                  description: Basic auth password
-                                  schema:
-                                    type: string
-                                    required: false
-                                    default: ""
 
   - variable: exporters
     group: "App Configuration"

charts/enterprise/prometheus/templates/prometheus/_prometheus.tpl

@@ -126,9 +126,8 @@ spec:
   {{- if .Values.prometheus.remoteRead }}
   remoteRead: {{- include "tc.v1.common.tplvalues.render" (dict "value" .Values.prometheus.remoteRead "context" $) | nindent 4 }}
   {{- end }}
-  {{- with .Values.prometheus.remoteWrite }}
-  remoteWrite:
-    {{- tpl (toYaml .) $ | nindent 4 }}
+  {{- if .Values.prometheus.remoteWrite }}
+  remoteWrite: {{- include "tc.v1.common.tplvalues.render" (dict "value" .Values.prometheus.remoteWrite "context" $) | nindent 4 }}
   {{- end }}
   {{- if .Values.prometheus.podSecurityContext.enabled }}
   securityContext: {{- omit .Values.prometheus.podSecurityContext "enabled" | toYaml | nindent 4 }}

charts/enterprise/traefik/Chart.yaml

@@ -23,7 +23,7 @@ sources:
   - https://github.com/traefik/traefik-helm-chart
   - https://traefik.io/
 type: application
-version: 21.0.4
+version: 21.0.0
 annotations:
   truecharts.org/catagories: |
     - network

charts/enterprise/traefik/templates/_args.tpl

@@ -173,14 +173,9 @@ args:
   {{/* End of GeoBlock */}}
   {{/* RealIP */}}
   {{- if .Values.middlewares.realIP }}
-  - "--experimental.localPlugins.traefik-real-ip.modulename=github.com/jramsgz/traefik-real-ip"
+  - "--experimental.localPlugins.traefik-real-ip.modulename=github.com/soulbalz/traefik-real-ip"
   {{- end }}
   {{/* End of RealIP */}}
-  {{/* ModSecurity */}}
-  {{- if .Values.middlewares.modsecurity }}
-  - "--experimental.localPlugins.traefik-modsecurity-plugin.modulename=github.com/acouvreur/traefik-modsecurity-plugin"
-  {{- end }}
-  {{/* End of ModSecurity */}}
   {{- with .Values.additionalArguments }}
   {{- range . }}
   - {{ . | quote }}

charts/enterprise/traefik/values.yaml

@@ -1,6 +1,6 @@
 image:
   repository: tccr.io/truecharts/traefik
-  tag: 2.10.4@sha256:77766fb3eb739197d7e229bfa8afb3a4a740886e3effef474ca4c9efdf65e5ab
+  tag: 2.10.4@sha256:028687caa7680c6189c52a6dd28ffd17c3d0a747885ad83b3027fa74023a0fec
   pullPolicy: IfNotPresent
 manifestManager:
   enabled: true

charts/incubator/acestream/Chart.yaml

@@ -21,7 +21,7 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/incubator/acestream
   - https://github.com/vstavrinov/acestream-service
 type: application
-version: 3.0.0
+version: 4.0.0
 annotations:
   truecharts.org/catagories: |
     - MediaServer-Video

charts/incubator/adguardhome-sync/Chart.yaml

@@ -21,7 +21,7 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/incubator/adguardhome-sync
   - https://github.com/bakito/adguardhome-sync/
 type: application
-version: 3.0.0
+version: 4.0.0
 annotations:
   truecharts.org/catagories: |
     - Other

charts/incubator/alienswarm-reactivedrop/Chart.yaml

@@ -25,4 +25,4 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/incubator/alienswarm-reactivedrop
   - https://www.steampowered.com/
 type: application
-version: 2.0.9
+version: 3.0.0

charts/incubator/alienswarm/Chart.yaml

@@ -25,4 +25,4 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/incubator/alienswarm
   - https://www.steampowered.com/
 type: application
-version: 2.0.8
+version: 3.0.0

charts/incubator/americasarmy-pg/Chart.yaml

@@ -25,4 +25,4 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/incubator/americasarmy-pg
   - https://www.americasarmy.com/
 type: application
-version: 2.0.9
+version: 3.0.0

charts/incubator/android-8-0/Chart.yaml

@@ -25,4 +25,4 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/incubator/android-8-0
   - https://registry.hub.docker.com/r/ulisses1478/docker-android
 type: application
-version: 2.0.9
+version: 3.0.0

charts/incubator/androiddebugbridge/Chart.yaml

@@ -24,4 +24,4 @@ name: androiddebugbridge
 sources:
   - https://github.com/truecharts/charts/tree/master/charts/incubator/androiddebugbridge
 type: application
-version: 2.0.9
+version: 3.0.0

charts/incubator/anki-sync-server/Chart.yaml

@@ -18,7 +18,7 @@ name: anki-sync-server
 sources:
   - https://github.com/truecharts/charts/tree/master/charts/incubator/anki-sync-server
   - https://github.com/ankicommunity/anki-devops-services
-version: 2.0.9
+version: 3.0.0
 annotations:
   truecharts.org/catagories: |
     - media

charts/incubator/anope/Chart.yaml

@@ -29,4 +29,4 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/incubator/anope
   - https://thelounge.chat/
 type: application
-version: 2.0.9
+version: 3.0.0

charts/incubator/apache-webdav/Chart.yaml

@@ -26,4 +26,4 @@ sources:
   - https://httpd.apache.org/docs/2.4/mod/mod_dav.html
   - https://github.com/mgutt/docker-apachewebdav
 type: application
-version: 2.0.9
+version: 3.0.0

charts/incubator/apprise-api/Chart.yaml

@@ -22,7 +22,7 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/incubator/apprise-api
   - https://github.com/caronc/apprise-api
 type: application
-version: 3.0.1
+version: 4.0.0
 annotations:
   truecharts.org/catagories: |
     - notifications

charts/incubator/appsmith/Chart.yaml

@@ -26,7 +26,7 @@ name: appsmith
 sources:
   - https://github.com/truecharts/charts/tree/master/charts/incubator/appsmith
   - https://github.com/appsmithorg/appsmith
-version: 5.0.34
+version: 6.0.0
 annotations:
   truecharts.org/catagories: |
     - productivity

charts/incubator/archiveteam-warrior/Chart.yaml

@@ -29,4 +29,4 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/incubator/archiveteam-warrior
   - https://wiki.archiveteam.org/index.php/ArchiveTeam_Warrior
 type: application
-version: 2.0.12
+version: 3.0.0

charts/incubator/arksurvivalevolved/Chart.yaml

@@ -25,4 +25,4 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/incubator/arksurvivalevolved
   - https://survivetheark.com/
 type: application
-version: 3.0.9
+version: 4.0.0

charts/incubator/arma3/Chart.yaml

@@ -25,4 +25,4 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/incubator/arma3
   - https://arma3.com/
 type: application
-version: 2.0.8
+version: 3.0.0

charts/incubator/arma3exilemod/Chart.yaml

@@ -25,4 +25,4 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/incubator/arma3exilemod
   - http://www.exilemod.com/
 type: application
-version: 2.0.9
+version: 3.0.0

charts/incubator/artifactory-oss/Chart.yaml

@@ -28,4 +28,4 @@ sources:
   - https://jfrog.com/
   - https://registry.hub.docker.com/r/docker.bintray.io/jfrog/artifactory-oss
 type: application
-version: 2.0.19
+version: 3.0.0

charts/incubator/assettocorsa/Chart.yaml

@@ -25,4 +25,4 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/incubator/assettocorsa
   - https://www.assettocorsa.net/
 type: application
-version: 2.0.9
+version: 3.0.0

charts/incubator/aurora-files/Chart.yaml

@@ -29,4 +29,4 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/incubator/aurora-files
   - https://github.com/afterlogic/docker-aurora-files
 type: application
-version: 2.0.10
+version: 3.0.0

charts/incubator/authentik/Chart.yaml

@@ -1,15 +1,15 @@
 apiVersion: v2
-appVersion: "2023.8.2"
+appVersion: "2023.6.1"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.1
+    version: 13.2.2
   - condition: redis.enabled
     name: redis
     repository: https://deps.truecharts.org
-    version: 8.0.0
+    version: 7.0.6
 description: Authentik is an open-source Identity Provider focused on flexibility and versatility.
-home: https://truecharts.org/charts/stable/authentik
+home: https://truecharts.org/charts/incubator/authentik
 icon: https://truecharts.org/img/hotlink-ok/chart-icons/authentik.png
 keywords:
   - authentik
@@ -20,10 +20,10 @@ maintainers:
     url: https://truecharts.org
 name: authentik
 sources:
-  - https://github.com/truecharts/charts/tree/master/charts/stable/authentik
+  - https://github.com/truecharts/charts/tree/master/charts/incubator/authentik
   - https://github.com/goauthentik/authentik
   - https://goauthentik.io/docs/
-version: 15.0.5
+version: 14.0.0
 annotations:
   truecharts.org/catagories: |
     - authentication

charts/incubator/authentik/questions.yaml

@@ -359,6 +359,15 @@ questions:
             additional_attrs: true
             type: dict
             attrs:
+              - variable: disableEmbeddedOutpost
+                label: EXPERIMENTAL - Disable Embedded Outpost
+                description: |
+                  Disables the embedded outpost.</br>
+                  This will disable the embedded outpost, and will require you to deploy your own outpost.</br>
+                  Only use this for testing, it might be removed without notice.
+                schema:
+                  type: boolean
+                  default: false
               - variable: proxy
                 label: Proxy
                 schema:

charts/incubator/authentik/templates/_config.tpl

@@ -24,6 +24,7 @@ server-worker:
 
     {{/* Outposts */}}
     AUTHENTIK_OUTPOSTS__DISCOVER: "false"
+    AUTHENTIK_OUTPOSTS__DISABLE_EMBEDDED_OUTPOST: {{ .Values.authentik.outposts.disableEmbeddedOutpost | quote }}
 
     {{/* GeoIP */}}
     {{- $geoipPath := (printf "/geoip/%v.mmdb" .Values.authentik.geoip.editionID) -}}

charts/incubator/authentik/templates/_secret.tpl

@@ -6,7 +6,7 @@
 
   {{- $secretKey := randAlphaNum 32 -}}
   {{- with (lookup "v1" "Secret" .Release.Namespace $fetchname) -}}
-    {{- $secretKey = index .data "AUTHENTIK_SECRET_KEY" | b64dec -}}
+    {{ $secretKey = index .data "AUTHENTIK_SECRET_KEY" }}
   {{- end }}
 
 server-worker:
@@ -30,10 +30,10 @@ server-worker:
     {{- with .Values.authentik.email.host }}
     AUTHENTIK_EMAIL__HOST: {{ . }}
     {{- end -}}
-    {{- with .Values.authentik.email.username }}
+    {{- with .Values.authentik.email.user }}
     AUTHENTIK_EMAIL__USERNAME: {{ . }}
     {{- end -}}
-    {{- with .Values.authentik.email.password }}
+    {{- with .Values.authentik.email.pass }}
     AUTHENTIK_EMAIL__PASSWORD: {{ . }}
     {{- end -}}
     {{- with .Values.authentik.email.from }}

charts/incubator/authentik/values.yaml

@@ -1,26 +1,26 @@
 image:
   repository: tccr.io/truecharts/authentik
-  tag: v2023.8.2@sha256:770d79c334141abafd3ecd60da6921a438ac46ee07e1d22eded6b9ea8245e943
+  tag: v2023.6.1@sha256:d0ff7fa405776b113dff914991a598a8a9754365e10f83232bede961e1903311
   pullPolicy: IfNotPresent
 
 geoipImage:
   repository: tccr.io/truecharts/geoipupdate
-  tag: v6.0.0@sha256:e057484036265c5bde379556463eed605f68f72016f328404202fb293f02a76a
+  tag: v5.1.0@sha256:9397c7e4d99ab79d620bd7c6ecbad3558ac581dfc2c9432d98dd066ae7d55c71
   pullPolicy: IfNotPresent
 
 ldapImage:
   repository: tccr.io/truecharts/authentik-ldap
-  tag: v2023.8.2@sha256:135a73c25b37bff5546da71848f64062c718d1dcb73c1d5707170887b188b317
+  tag: v2023.6.1@sha256:7c31bdcb9d9fa8b6f8591b2d8d9f1de1365cb2a639201cd6bdb985aa0c9c2620
   pullPolicy: IfNotPresent
 
 radiusImage:
   repository: tccr.io/truecharts/authentik-radius
-  tag: v2023.8.2@sha256:55ce58444bdc939f10a0cd40dd05a3ce6d6018f3d3d25b7c72bc183a3450ac34
+  tag: v2023.6.1@sha256:35c16ad6031b1ea82b275a7be36bc398f765dc4c44822036fab7f84b800c1c0e
   pullPolicy: IfNotPresent
 
 proxyImage:
   repository: tccr.io/truecharts/authentik-proxy
-  tag: v2023.8.2@sha256:447d28247d1d44dce5fb6865e765d41577ac67b4da753ca0c8af40b52ba7d499
+  tag: v2023.6.1@sha256:c0343cac900479531bb5bf0d2b40d8f1f57c6016a377b33a86b8aab526d76aa3
   pullPolicy: IfNotPresent
 
 authentik:
@@ -77,6 +77,8 @@ authentik:
     accountID: ""
     licenseKey: ""
   outposts:
+    # Experimental feature
+    disableEmbeddedOutpost: false
     proxy:
       enabled: false
       token: ""