Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

chore: migrate to immutable image digests, move to home-operations #45

Merged
merged 1 commit into from
Mar 19, 2025
Merged

chore: migrate to immutable image digests, move to home-operations #45

merged 1 commit into from
Mar 19, 2025

Conversation

parsec
Copy link
Owner

@parsec parsec commented Mar 19, 2025

ghcr.io

@github-actions GitHub Actions
Copy link 

--- kubernetes/apps/storage/volsync/app Kustomization: flux-system/volsync HelmRelease: storage/volsync

+++ kubernetes/apps/storage/volsync/app Kustomization: flux-system/volsync HelmRelease: storage/volsync

@@ -30,18 +30,18 @@

   upgrade:
     cleanupOnFail: true
     remediation:
       retries: 3
   values:
     image:
-      repository: ghcr.io/onedr0p/volsync
-      tag: 0.12.0
+      repository: ghcr.io/home-operations/volsync
+      tag: v0.12.0@sha256:95a572c6a9937ac8e7f1e7c82466e6ab4cf5914078ddbef27d11293e4659716f
     manageCRDs: true
     metrics:
       disableAuth: true
     rclone:
-      repository: ghcr.io/onedr0p/volsync
-      tag: 0.12.0
+      repository: ghcr.io/home-operations/volsync
+      tag: v0.12.0@sha256:95a572c6a9937ac8e7f1e7c82466e6ab4cf5914078ddbef27d11293e4659716f
     restic:
-      repository: ghcr.io/onedr0p/volsync
-      tag: 0.12.0
+      repository: ghcr.io/home-operations/volsync
+      tag: v0.12.0@sha256:95a572c6a9937ac8e7f1e7c82466e6ab4cf5914078ddbef27d11293e4659716f
 
--- kubernetes/apps/media/plex/app Kustomization: flux-system/plex HelmRelease: media/plex

+++ kubernetes/apps/media/plex/app Kustomization: flux-system/plex HelmRelease: media/plex

@@ -44,14 +44,14 @@

             env:
               ALLOWED_NETWORKS: 10.1.0.0/255.255.255.0,10.5.0.0/255.255.255.0,10.1.10.0/255.255.255.0
               NVIDIA_DRIVER_CAPABILITIES: all
               NVIDIA_VISIBLE_DEVICES: all
               TZ: America/New_York
             image:
-              repository: ghcr.io/onedr0p/plex-beta
-              tag: 1.41.3.9314-a0bfb8370
+              repository: ghcr.io/home-operations/plex
+              tag: rolling@sha256:59286dc90c7a0bab47602f6dbbb07ab48f4d919f2a5011932fbc76190654da2c
             probes:
               liveness:
                 custom: true
                 enabled: true
                 spec:
                   failureThreshold: 3
--- kubernetes/apps/media/tautulli/app Kustomization: flux-system/tautulli HelmRelease: media/tautulli

+++ kubernetes/apps/media/tautulli/app Kustomization: flux-system/tautulli HelmRelease: media/tautulli

@@ -59,14 +59,14 @@

                 - ALL
               readOnlyRootFilesystem: true
           main:
             env:
               TZ: America/New_York
             image:
-              repository: ghcr.io/onedr0p/tautulli
-              tag: 2.15.1@sha256:2d5a1bce27a8e29e287aec1735001e68fc23dea08806c7124587cdbfaf0ddcff
+              repository: ghcr.io/home-operations/tautulli
+              tag: rolling@sha256:eb003c796104556ae3ac5e84892641801688c1b0ec7a25eec6a8aba9a0d60c95
             probes:
               liveness:
                 custom: true
                 enabled: true
                 spec:
                   failureThreshold: 3
--- kubernetes/apps/default/home-assistant/app Kustomization: default/home-assistant HelmRelease: default/home-assistant

+++ kubernetes/apps/default/home-assistant/app Kustomization: default/home-assistant HelmRelease: default/home-assistant

@@ -43,14 +43,14 @@

               HASS_HTTP_TRUSTED_PROXY_2: 10.42.0.0/16
               TZ: America/New_York
             envFrom:
             - secretRef:
                 name: home-assistant-secret
             image:
-              repository: ghcr.io/onedr0p/home-assistant
-              tag: 2025.3.2@sha256:bc6ac31069eae42f4ff41d2dd0d600aaf8f02b109664cd6aff46709d13eff779
+              repository: ghcr.io/home-operations/home-assistant
+              tag: rolling@sha256:e3031ef1c4aaf1a6c22eecf3439bfb097dcf15e2519041eeea3d7aa6041b8809
             resources:
               limits:
                 memory: 1Gi
               requests:
                 cpu: 10m
             securityContext:
--- kubernetes/apps/media/sabnzbd/app Kustomization: flux-system/sabnzbd HelmRelease: media/sabnzbd

+++ kubernetes/apps/media/sabnzbd/app Kustomization: flux-system/sabnzbd HelmRelease: media/sabnzbd

@@ -46,14 +46,14 @@

               SABNZBD__PORT: 80
               TZ: America/New_York
             envFrom:
             - secretRef:
                 name: sabnzbd-secret
             image:
-              repository: ghcr.io/onedr0p/sabnzbd
-              tag: 4.4.1@sha256:b7380cd5a93a0a232c5ce25803531b1575453953e99de4e6b8a1398e73442e5b
+              repository: ghcr.io/home-operations/sabnzbd
+              tag: rolling@sha256:b26d5abc3e2572e35f251abf2d8ec6ee657599e5f69238c39bd41847a4d0016e
             probes:
               liveness:
                 custom: true
                 enabled: true
                 spec:
                   failureThreshold: 3
--- kubernetes/apps/media/lidarr/app Kustomization: flux-system/lidarr HelmRelease: media/lidarr

+++ kubernetes/apps/media/lidarr/app Kustomization: flux-system/lidarr HelmRelease: media/lidarr

@@ -45,14 +45,14 @@

               PUSHOVER_PRIORITY: '0'
               TZ: null
             envFrom:
             - secretRef:
                 name: lidarr-secret
             image:
-              repository: ghcr.io/onedr0p/lidarr-develop
-              tag: 2.5.2.4316@sha256:6b1b51ca85dad4f0376b6f86df4cb24d1d6c621ba9d47c1bde26cdb940f2aeb6
+              repository: ghcr.io/home-operations/lidarr
+              tag: rolling@sha256:651c5f4f16bdb51cb5ef383dc43d930a4a9c154a94825f357cc3d590dc763c7c
             resources:
               limits:
                 memory: 2000Mi
               requests:
                 cpu: 10m
                 memory: 250Mi
--- kubernetes/apps/media/prowlarr/app Kustomization: flux-system/prowlarr HelmRelease: media/prowlarr

+++ kubernetes/apps/media/prowlarr/app Kustomization: flux-system/prowlarr HelmRelease: media/prowlarr

@@ -46,14 +46,14 @@

               PROWLARR__UPDATE__BRANCH: develop
               TZ: America/New_York
             envFrom:
             - secretRef:
                 name: prowlarr-secret
             image:
-              repository: ghcr.io/onedr0p/prowlarr-develop
-              tag: 1.31.2.4975@sha256:fa776c72b6cdd900f36df88a8c3980ac91da16830157ae19eb1c044e2c09e2a7
+              repository: ghcr.io/home-operations/prowlarr
+              tag: rolling@sha256:951fd4f076a117effe552e5f7b7811b5ef75f6019fc64534008356e9b7ab88be
             probes:
               liveness:
                 custom: true
                 enabled: true
                 spec:
                   failureThreshold: 3
--- kubernetes/apps/actions-runner-system/actions-runner-controller/runners Kustomization: flux-system/actions-runner-controller-runners HelmRelease: actions-runner-system/home-ops-runner

+++ kubernetes/apps/actions-runner-system/actions-runner-controller/runners Kustomization: flux-system/actions-runner-controller-runners HelmRelease: actions-runner-system/home-ops-runner

@@ -48,13 +48,13 @@

           - name: ACTIONS_RUNNER_REQUIRE_JOB_CONTAINER
             value: 'false'
           - name: NODE
             valueFrom:
               fieldRef:
                 fieldPath: status.hostIP
-          image: ghcr.io/onedr0p/actions-runner:2.322.0@sha256:9db27092b7caab08b1dc08d5e639a3340f6e0d6ae2f91aaf93e740bd28ad9306
+          image: ghcr.io/home-operations/actions-runner:2.322.0@sha256:d43550ef9d5655d4380da07cde8d0b67e2c54e8f4e9894a240b8e1bbc83557fa
           name: runner
           volumeMounts:
           - mountPath: /var/run/secrets/talos.dev
             name: talos
             readOnly: true
         serviceAccountName: home-ops-runner
--- kubernetes/apps/media/sonarr/app Kustomization: flux-system/sonarr HelmRelease: media/sonarr

+++ kubernetes/apps/media/sonarr/app Kustomization: flux-system/sonarr HelmRelease: media/sonarr

@@ -48,14 +48,14 @@

               SONARR__SERVER__PORT: 80
               TZ: America/New_York
             envFrom:
             - secretRef:
                 name: sonarr-secret
             image:
-              repository: ghcr.io/onedr0p/sonarr
-              tag: 4.0.13.2932@sha256:b2217e5c81155ba002e0497932c2de197b8f5c1ac9c9fff7210e9a6381caab41
+              repository: ghcr.io/home-operations/sonarr
+              tag: rolling@sha256:dbd17368d7c24511d5e3a0dacb11d699d52457d5cf3eb48c9b46fc0e3ac6c4eb
             probes:
               liveness:
                 custom: true
                 enabled: true
                 spec:
                   failureThreshold: 3
--- kubernetes/apps/media/radarr/app Kustomization: flux-system/radarr HelmRelease: media/radarr

+++ kubernetes/apps/media/radarr/app Kustomization: flux-system/radarr HelmRelease: media/radarr

@@ -50,14 +50,14 @@

               RADARR__UPDATE__BRANCH: develop
               TZ: America/New_York
             envFrom:
             - secretRef:
                 name: radarr-secret
             image:
-              repository: ghcr.io/onedr0p/radarr
-              tag: 5.19.3.9730@sha256:7218cd42b646bb773a2c683b95860c51103c3ca7e0b9171b4bc549b95ddc6896
+              repository: ghcr.io/home-operations/radarr
+              tag: rolling@sha256:ae48a7e3060a849dbe266084cad892b324155359242dcaaeddb6ba11ea70f3e1
             probes:
               liveness:
                 custom: true
                 enabled: true
                 spec:
                   failureThreshold: 3

@github-actions GitHub Actions
Copy link 

--- HelmRelease: storage/volsync Deployment: storage/volsync

+++ HelmRelease: storage/volsync Deployment: storage/volsync

@@ -60,21 +60,21 @@

             memory: 64Mi
       - name: manager
         args:
         - --health-probe-bind-address=:8081
         - --metrics-bind-address=127.0.0.1:8080
         - --leader-elect
-        - --rclone-container-image=ghcr.io/onedr0p/volsync:0.12.0
-        - --restic-container-image=ghcr.io/onedr0p/volsync:0.12.0
+        - --rclone-container-image=ghcr.io/home-operations/volsync:v0.12.0@sha256:95a572c6a9937ac8e7f1e7c82466e6ab4cf5914078ddbef27d11293e4659716f
+        - --restic-container-image=ghcr.io/home-operations/volsync:v0.12.0@sha256:95a572c6a9937ac8e7f1e7c82466e6ab4cf5914078ddbef27d11293e4659716f
         - --rsync-container-image=quay.io/backube/volsync:0.12.0
         - --rsync-tls-container-image=quay.io/backube/volsync:0.12.0
         - --syncthing-container-image=quay.io/backube/volsync:0.12.0
         - --scc-name=volsync-privileged-mover
         command:
         - /manager
-        image: ghcr.io/onedr0p/volsync:0.12.0
+        image: ghcr.io/home-operations/volsync:v0.12.0@sha256:95a572c6a9937ac8e7f1e7c82466e6ab4cf5914078ddbef27d11293e4659716f
         imagePullPolicy: IfNotPresent
         env:
         - name: VOLSYNC_NAMESPACE
           valueFrom:
             fieldRef:
               fieldPath: metadata.namespace
--- HelmRelease: actions-runner-system/home-ops-runner AutoscalingRunnerSet: actions-runner-system/home-ops-runner

+++ HelmRelease: actions-runner-system/home-ops-runner AutoscalingRunnerSet: actions-runner-system/home-ops-runner

@@ -10,13 +10,13 @@

     app.kubernetes.io/instance: home-ops-runner
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: gha-rs
     actions.github.com/scale-set-name: home-ops-runner
     actions.github.com/scale-set-namespace: actions-runner-system
   annotations:
-    actions.github.com/values-hash: bcf22df749eabf615cc164b3fd0e5a679c6003c48817ccd04793ac59de12c54
+    actions.github.com/values-hash: 285ad4e5fbb302315289bb728415d17e2f0af9302b65f5d1d2858b3b64dd976
     actions.github.com/cleanup-manager-role-binding: home-ops-runner-gha-rs-manager
     actions.github.com/cleanup-manager-role-name: home-ops-runner-gha-rs-manager
 spec:
   githubConfigUrl: https://github.com/parsec/home-ops
   githubConfigSecret: actions-runner-secret
   maxRunners: 3
@@ -24,13 +24,13 @@

   template:
     spec:
       restartPolicy: Never
       serviceAccountName: home-ops-runner
       initContainers:
       - name: init-dind-externals
-        image: ghcr.io/onedr0p/actions-runner:2.322.0@sha256:9db27092b7caab08b1dc08d5e639a3340f6e0d6ae2f91aaf93e740bd28ad9306
+        image: ghcr.io/home-operations/actions-runner:2.322.0@sha256:d43550ef9d5655d4380da07cde8d0b67e2c54e8f4e9894a240b8e1bbc83557fa
         command:
         - cp
         args:
         - -r
         - -v
         - /home/runner/externals/.
@@ -39,13 +39,13 @@

         - name: dind-externals
           mountPath: /home/runner/tmpDir
       containers:
       - name: runner
         command:
         - /home/runner/run.sh
-        image: ghcr.io/onedr0p/actions-runner:2.322.0@sha256:9db27092b7caab08b1dc08d5e639a3340f6e0d6ae2f91aaf93e740bd28ad9306
+        image: ghcr.io/home-operations/actions-runner:2.322.0@sha256:d43550ef9d5655d4380da07cde8d0b67e2c54e8f4e9894a240b8e1bbc83557fa
         env:
         - name: ACTIONS_RUNNER_REQUIRE_JOB_CONTAINER
           value: 'false'
         - name: NODE
           valueFrom:
             fieldRef:
--- HelmRelease: media/sabnzbd Deployment: media/sabnzbd

+++ HelmRelease: media/sabnzbd Deployment: media/sabnzbd

@@ -51,13 +51,13 @@

           value: '80'
         - name: TZ
           value: America/New_York
         envFrom:
         - secretRef:
             name: sabnzbd-secret
-        image: ghcr.io/onedr0p/sabnzbd:4.4.1@sha256:b7380cd5a93a0a232c5ce25803531b1575453953e99de4e6b8a1398e73442e5b
+        image: ghcr.io/home-operations/sabnzbd:rolling@sha256:b26d5abc3e2572e35f251abf2d8ec6ee657599e5f69238c39bd41847a4d0016e
         livenessProbe:
           failureThreshold: 3
           httpGet:
             path: /api?mode=version
             port: 80
           initialDelaySeconds: 0
--- HelmRelease: media/tautulli Deployment: media/tautulli

+++ HelmRelease: media/tautulli Deployment: media/tautulli

@@ -40,13 +40,13 @@

       hostPID: false
       dnsPolicy: ClusterFirst
       containers:
       - env:
         - name: TZ
           value: America/New_York
-        image: ghcr.io/onedr0p/tautulli:2.15.1@sha256:2d5a1bce27a8e29e287aec1735001e68fc23dea08806c7124587cdbfaf0ddcff
+        image: ghcr.io/home-operations/tautulli:rolling@sha256:eb003c796104556ae3ac5e84892641801688c1b0ec7a25eec6a8aba9a0d60c95
         livenessProbe:
           failureThreshold: 3
           httpGet:
             path: /status
             port: 8181
           initialDelaySeconds: 0
--- HelmRelease: media/prowlarr Deployment: media/prowlarr

+++ HelmRelease: media/prowlarr Deployment: media/prowlarr

@@ -73,13 +73,13 @@

           value: develop
         - name: TZ
           value: America/New_York
         envFrom:
         - secretRef:
             name: prowlarr-secret
-        image: ghcr.io/onedr0p/prowlarr-develop:1.31.2.4975@sha256:fa776c72b6cdd900f36df88a8c3980ac91da16830157ae19eb1c044e2c09e2a7
+        image: ghcr.io/home-operations/prowlarr:rolling@sha256:951fd4f076a117effe552e5f7b7811b5ef75f6019fc64534008356e9b7ab88be
         livenessProbe:
           failureThreshold: 3
           httpGet:
             path: /ping
             port: 80
           initialDelaySeconds: 0
--- HelmRelease: media/sonarr Deployment: media/sonarr

+++ HelmRelease: media/sonarr Deployment: media/sonarr

@@ -79,13 +79,13 @@

           value: '80'
         - name: TZ
           value: America/New_York
         envFrom:
         - secretRef:
             name: sonarr-secret
-        image: ghcr.io/onedr0p/sonarr:4.0.13.2932@sha256:b2217e5c81155ba002e0497932c2de197b8f5c1ac9c9fff7210e9a6381caab41
+        image: ghcr.io/home-operations/sonarr:rolling@sha256:dbd17368d7c24511d5e3a0dacb11d699d52457d5cf3eb48c9b46fc0e3ac6c4eb
         livenessProbe:
           failureThreshold: 3
           httpGet:
             path: /ping
             port: 80
           initialDelaySeconds: 0
--- HelmRelease: media/radarr Deployment: media/radarr

+++ HelmRelease: media/radarr Deployment: media/radarr

@@ -83,13 +83,13 @@

           value: develop
         - name: TZ
           value: America/New_York
         envFrom:
         - secretRef:
             name: radarr-secret
-        image: ghcr.io/onedr0p/radarr:5.19.3.9730@sha256:7218cd42b646bb773a2c683b95860c51103c3ca7e0b9171b4bc549b95ddc6896
+        image: ghcr.io/home-operations/radarr:rolling@sha256:ae48a7e3060a849dbe266084cad892b324155359242dcaaeddb6ba11ea70f3e1
         livenessProbe:
           failureThreshold: 3
           httpGet:
             path: /ping
             port: 80
           initialDelaySeconds: 0
--- HelmRelease: media/plex Deployment: media/plex

+++ HelmRelease: media/plex Deployment: media/plex

@@ -53,13 +53,13 @@

         - name: NVIDIA_DRIVER_CAPABILITIES
           value: all
         - name: NVIDIA_VISIBLE_DEVICES
           value: all
         - name: TZ
           value: America/New_York
-        image: ghcr.io/onedr0p/plex-beta:1.41.3.9314-a0bfb8370
+        image: ghcr.io/home-operations/plex:rolling@sha256:59286dc90c7a0bab47602f6dbbb07ab48f4d919f2a5011932fbc76190654da2c
         livenessProbe:
           failureThreshold: 3
           httpGet:
             path: /identity
             port: 32400
           initialDelaySeconds: 0
--- HelmRelease: media/lidarr Deployment: media/lidarr

+++ HelmRelease: media/lidarr Deployment: media/lidarr

@@ -72,13 +72,13 @@

           value: '0'
         - name: TZ
           value: null
         envFrom:
         - secretRef:
             name: lidarr-secret
-        image: ghcr.io/onedr0p/lidarr-develop:2.5.2.4316@sha256:6b1b51ca85dad4f0376b6f86df4cb24d1d6c621ba9d47c1bde26cdb940f2aeb6
+        image: ghcr.io/home-operations/lidarr:rolling@sha256:651c5f4f16bdb51cb5ef383dc43d930a4a9c154a94825f357cc3d590dc763c7c
         livenessProbe:
           failureThreshold: 3
           initialDelaySeconds: 0
           periodSeconds: 10
           tcpSocket:
             port: 80
--- HelmRelease: default/home-assistant Deployment: default/home-assistant

+++ HelmRelease: default/home-assistant Deployment: default/home-assistant

@@ -48,13 +48,13 @@

           value: 10.42.0.0/16
         - name: TZ
           value: America/New_York
         envFrom:
         - secretRef:
             name: home-assistant-secret
-        image: ghcr.io/onedr0p/home-assistant:2025.3.2@sha256:bc6ac31069eae42f4ff41d2dd0d600aaf8f02b109664cd6aff46709d13eff779
+        image: ghcr.io/home-operations/home-assistant:rolling@sha256:e3031ef1c4aaf1a6c22eecf3439bfb097dcf15e2519041eeea3d7aa6041b8809
         name: app
         resources:
           limits:
             memory: 1Gi
           requests:
             cpu: 10m

@parsec parsec merged commit 1902e4e into main Mar 19, 2025
15 checks passed
@parsec parsec deleted the chore/home-ops-mirror-migration branch March 19, 2025 02:32
parsec added a commit that referenced this pull request Mar 19, 2025
@parsec
Revert "chore: migrate to immutable image digests, move to home-opera…
fabd573 
…tions (#45)"

This reverts commit 1902e4e.
@parsec parsec mentioned this pull request Mar 19, 2025
Merged
parsec added a commit that referenced this pull request Mar 19, 2025
@parsec
Revert "chore: migrate to immutable image digests, move to home-opera…
39a8ffd 
…tions" (#48)

Revert "chore: migrate to immutable image digests, move to home-operations (#45)"

This reverts commit 1902e4e.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
area/kubernetes
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@parsec