beryju/k8s

Flux repository for my K8s clusters

'ello

I build software around Identity and SSO, and also other things sometimes.

I mainly work on authentik, an IDP focused on being easy to use and flexible, and also make a couple tools to test Identity protocols:

• saml-test-sp
• oidc-test-client
• oauth1-test-server

Also for some reason I decided to make my own DHCP and DNS Server, Gravity.

I also like to use a lot of IaC workflows for my lab, like infrastructure with Ansible/Puppet/Terraform and k8s with Flux.

k8s's Issues

Action Required: Fix Renovate Configuration

There is an error with this repository's Renovate configuration that needs to be fixed. As a precaution, Renovate will stop PRs until it is resolved.

Location: .github/renovate.json5
Error type: Invalid JSON5 (parsing failed)
Message: JSON5.parse error: JSON5: invalid character '{' at 80:5

initdb.sh throws an error with postgresql

When the deployment runs initdb.sh it does with an incorrect flag "--postgres", it should be "--postgresql" this causes the contents of initdb.sql to be:

sudo cat ./var/lib/kubelet/pods/0dc3b4c1-f48d-428f-8f5b-532be345066a/volumes/kubernetes.io~empty-dir/initdb/initdb.sql
Bad database type: --postgres
USAGE: /opt/guacamole/bin/initdb.sh [--postgresql | --mysql | --sqlserver]

And of course it fails. I just hacked in the correct flag into my deployment and carried on, but I figure you'd want to fix this in the chart.

Thanks for maintaining this!

Renovate Dashboard

This issue contains a list of Renovate updates and their statuses.

This repository currently has no open or pending branches.

---

• Check this box to trigger a request for Renovate to run again on this repository

Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Repository problems

These problems occurred while renovating this repository. View logs.

• WARN: Excess registryUrls found for datasource lookup - using first configured only

Ignored or Blocked

These are blocked by an existing closed PR and will not be recreated unless you click a checkbox below.

• chore(charts): update helm release postgresql to v15
• chore(images): update proxy.registry.beryju.org/library/postgres docker tag to v16

Detected dependencies

flux

clusters/beryjuio-home/actions-controller/helm.yaml

• actions-runner-controller 0.23.7

clusters/beryjuio-home/ansible-ara/postgres.yaml

• postgresql 12.12.10

clusters/beryjuio-home/authentik-testing/authentik.yaml

• authentik 2024.4.2

clusters/beryjuio-home/dl-stack/overseerr/helm.yaml

• overseerr 5.4.2

clusters/beryjuio-home/fleetdm/helm.yaml

• fleet v6.0.2

clusters/beryjuio-home/flux-system/gotk-components.yaml

• fluxcd/flux2 v2.2.3

clusters/beryjuio-home/flux-system/gotk-sync.yaml

clusters/beryjuio-home/gitlab/runner-helm.yaml

• gitlab-runner 0.64.1

clusters/beryjuio-home/monitoring-system/snmp-exporter.yaml

• prometheus-snmp-exporter 5.3.0

clusters/beryjuio-oci/flux-system/gotk-components.yaml

• fluxcd/flux2 v2.2.3

clusters/beryjuio-oci/flux-system/gotk-sync.yaml

clusters/beryjuio-prod/authentik/authentik.yaml

• authentik 2024.4.2

clusters/beryjuio-prod/flux-system/gotk-components.yaml

• fluxcd/flux2 v2.2.3

clusters/beryjuio-prod/flux-system/gotk-sync.yaml

clusters/beryjuio-prod/grafana/helm.yaml

• grafana 7.3.11

clusters/beryjuio-prod/vault/helm.yaml

• vault 0.28.0

common-backup/kyverno/kyverno.helm.yaml

• kyverno 3.2.2

common-ingress/cert-manager/cert-manager.helm.yaml

• cert-manager v1.14.5

common-logging/loki/helm.yaml

• promtail 6.15.5

common-metallb/metallb-system/helm.yaml

• metallb 0.14.5

common-monitoring/kube-system/metrics-server.helm.yaml

• metrics-server 3.12.1

common-monitoring/monitoring-system/helm.yaml

• kube-prometheus-stack 58.5.0

common-net/istio-system/helm-istio-base.yaml

• base 1.21.2

common-net/istio-system/helm-istio-gateway-eastwest.yaml

• gateway 1.21.2

common-net/istio-system/helm-istio-gateway-ingress.yaml

• gateway 1.21.2

common-net/istio-system/helm-istio-istiod.yaml

• istiod 1.21.2

common-net/istio-system/kiali.helm.yaml

• kiali-server 1.84.0

common/kube-system/external-secrets.helm.yaml

• external-secrets 0.9.17

github-actions

.github/workflows/chart-lint.yml

• actions/checkout v4
• azure/setup-helm v3.5
• actions/setup-python v5
• helm/chart-testing-action v2.6.1
• helm/kind-action v1.10.0
• ubuntu 22.04

.github/workflows/chart-release.yml

• actions/checkout v4
• azure/setup-helm v3.5
• helm/chart-releaser-action v1.6.0
• ubuntu 22.04

.github/workflows/flux-diff.yml

• allenporter/flux-local 5.2.0
• mshick/add-pr-comment v2

.github/workflows/lint.yml

• actions/checkout v4
• actions/setup-node v4

.github/workflows/loki-rules-sync.yml

• actions/checkout v4
• grafana/cortex-rules-action v0.9.1

.github/workflows/mimir-rules-sync.yml

• actions/checkout v4

.github/workflows/update-flux.yml

• actions/checkout v4
• actions/setup-node v4
• peter-evans/create-pull-request v6

helm-values

charts/guacamole/values.yaml

• bitnami/postgresql 14.3.0-debian-10-r9

clusters/beryjuio-home/actions-controller/runner.yaml

clusters/beryjuio-home/ansible-ara/deployment.yaml

clusters/beryjuio-home/authentik-testing/authentik.yaml

clusters/beryjuio-home/dl-stack/overseerr/helm.yaml

• ghcr.io/sct/overseerr 1.33.2

clusters/beryjuio-home/dl-stack/radarr/radarr-sts.yaml

• ghcr.io/onedr0p/radarr 5.4.6.8723

clusters/beryjuio-home/dl-stack/sabnzbd/sabnzbd-exporter.yaml

• proxy.registry.beryju.org/msroest/sabnzbd_exporter 0.1.70

clusters/beryjuio-home/dl-stack/sabnzbd/sabnzbd-sts.yaml

• ghcr.io/onedr0p/sabnzbd 4.3.1

clusters/beryjuio-home/dl-stack/sonarr/sonarr-sts.yaml

• ghcr.io/onedr0p/sonarr 4.0.4.1491

clusters/beryjuio-home/flux-system/gotk-components.yaml

clusters/beryjuio-home/gitlab/gitlab-deployment.yaml

• proxy.registry.beryju.org/gitlab/gitlab-ce 16.11.2-ce.0

clusters/beryjuio-home/gravity/image-repo.yaml

clusters/beryjuio-home/gravity/sts.yaml

• ghcr.io/beryju/gravity v0.8.1

clusters/beryjuio-home/kube-flannel/flannel.yml

• proxy.registry.beryju.org/flannel/flannel-cni-plugin v1.2.0
• proxy.registry.beryju.org/flannel/flannel v0.25.1
• proxy.registry.beryju.org/flannel/flannel v0.25.1

clusters/beryjuio-home/kube-system/intel-gpu-exporter-ds.yaml

clusters/beryjuio-home/monitoring-system/linode-exporter.yaml

clusters/beryjuio-home/oxidized/deployment.yaml

clusters/beryjuio-home/plex/sts.yaml

• proxy.registry.beryju.org/plexinc/pms-docker 1.40.2.8395-c67dce28e

clusters/beryjuio-home/terraform-agent/deploy.yaml

• docker.io/hashicorp/tfc-agent 1.15

clusters/beryjuio-home/unifi-controller/exporter-deploy.yaml

• ghcr.io/unpoller/unpoller v2.11.2

clusters/beryjuio-home/unifi-controller/sts.yaml

• ghcr.io/linuxserver/unifi-controller 8.0.24

clusters/beryjuio-oci/flux-system/gotk-components.yaml

clusters/beryjuio-oci/headscale/sts.yaml

• ghcr.io/juanfont/headscale 0.23.0-debug

clusters/beryjuio-oci/kube-flannel/flannel.yml

• proxy.registry.beryju.org/flannel/flannel-cni-plugin v1.2.0
• proxy.registry.beryju.org/flannel/flannel v0.25.1
• proxy.registry.beryju.org/flannel/flannel v0.25.1

clusters/beryjuio-prod/analytics/plausible-db.yaml

• proxy.registry.beryju.org/library/postgres 12

clusters/beryjuio-prod/analytics/plausible-events-db.yaml

• proxy.registry.beryju.org/clickhouse/clickhouse-server 24.4-alpine

clusters/beryjuio-prod/analytics/plausible.yaml

• proxy.registry.beryju.org/plausible/analytics v2.0.0
• proxy.registry.beryju.org/plausible/analytics v2.0.0

clusters/beryjuio-prod/authentik/authentik.yaml

clusters/beryjuio-prod/authentik/image-repo.yaml

clusters/beryjuio-prod/flux-system/gotk-components.yaml

clusters/beryjuio-prod/loki/sts.yaml

• proxy.registry.beryju.org/grafana/loki 3.0.0

clusters/beryjuio-prod/mimir/sts.yaml

• proxy.registry.beryju.org/grafana/mimir 2.12.0

clusters/beryjuio-prod/minio-backup/deployment.yaml

• quay.io/minio/minio RELEASE.2024-05-10T01-41-38Z

clusters/beryjuio-prod/minio/imagik-deployment.yaml

clusters/beryjuio-prod/minio/imagik-image-repo.yaml

clusters/beryjuio-prod/minio/minio-deployment.yaml

• quay.io/minio/minio RELEASE.2024-05-10T01-41-38Z

clusters/beryjuio-prod/redbot/deployment.yaml

• ghcr.io/rhomelab/red-discordbot 3.5.9

clusters/beryjuio-prod/redbot/influxdb_exporter-deployment.yaml

• quay.io/prometheus/influxdb-exporter v0.11.6

clusters/beryjuio-prod/registry/pullthrough-token/deployment.yaml

clusters/beryjuio-prod/registry/pullthrough/deployment.yaml

• docker.io/library/registry 3.0.0-alpha.1

clusters/beryjuio-prod/registry/pullthrough/garbage-collect-cron.yaml

clusters/beryjuio-prod/registry/standalone-token/deployment.yaml

clusters/beryjuio-prod/registry/standalone-token/image-repo.yaml

clusters/beryjuio-prod/registry/standalone/deployment.yaml

• docker.io/library/registry 3.0.0-alpha.1

clusters/beryjuio-prod/registry/standalone/garbage-collect-cron.yaml

clusters/beryjuio-prod/registry/ui/deployment.yaml

• proxy.registry.beryju.org/joxit/docker-registry-ui 2.5.7-debian

clusters/beryjuio-prod/tempo/sts.yaml

• proxy.registry.beryju.org/grafana/tempo 2.4.1

clusters/beryjuio-prod/workstation/deployment.yaml

• vault 1.13.3
• docker 26.1.2-dind

clusters/beryjuio-prod/workstation/image-repo.yaml

common-backup/kyverno/snapshot-cronjob-controller.yaml

• proxy.registry.beryju.org/kopia/kopia 0.17

common-logging/loki/event-router.yaml

common-net/istio-system/helm-istio-istiod.yaml

• ghcr.io/beryju/pilot 1.21.0

common-vpn/tailscale/ds.yaml

debug/small-wks/deploy.yaml

debug/whoami/deploy.yaml

kubernetes

charts/guacamole/templates/deployment-guacamole.yaml

• Deployment apps/v1

charts/guacamole/templates/deployment-guacd.yaml

• Deployment apps/v1

charts/guacamole/templates/ingress.yaml

• Ingress networking.k8s.io/v1

charts/guacamole/templates/tests/test-connection.yaml

clusters/beryjuio-home/actions-controller/helm.yaml

• HelmRelease helm.toolkit.fluxcd.io/v2beta2

clusters/beryjuio-home/actions-controller/runner.yaml

clusters/beryjuio-home/actions-controller/source.yaml

• HelmRepository source.toolkit.fluxcd.io/v1beta2

clusters/beryjuio-home/ansible-ara/deployment.yaml

• Deployment apps/v1

clusters/beryjuio-home/ansible-ara/ingress.yaml

• Ingress networking.k8s.io/v1

clusters/beryjuio-home/ansible-ara/postgres.yaml

• HelmRelease helm.toolkit.fluxcd.io/v2beta2

clusters/beryjuio-home/authentik-testing/authentik.yaml

• HelmRelease helm.toolkit.fluxcd.io/v2beta2

clusters/beryjuio-home/authentik-testing/helm-authentik.yaml

• HelmRepository source.toolkit.fluxcd.io/v1beta2

clusters/beryjuio-home/common-backup.yaml

• Kustomization kustomize.toolkit.fluxcd.io/v1

clusters/beryjuio-home/common-ingress.yaml

• Kustomization kustomize.toolkit.fluxcd.io/v1

clusters/beryjuio-home/common-logging.yaml

• Kustomization kustomize.toolkit.fluxcd.io/v1

clusters/beryjuio-home/common-metallb.yaml

• Kustomization kustomize.toolkit.fluxcd.io/v1

clusters/beryjuio-home/common-monitoring.yaml

• Kustomization kustomize.toolkit.fluxcd.io/v1

clusters/beryjuio-home/common-net.yaml

• Kustomization kustomize.toolkit.fluxcd.io/v1

clusters/beryjuio-home/common.yaml

• Kustomization kustomize.toolkit.fluxcd.io/v1

clusters/beryjuio-home/dl-stack/overseerr/helm.yaml

• HelmRelease helm.toolkit.fluxcd.io/v2beta2

clusters/beryjuio-home/dl-stack/radarr/radarr-ingress.yaml

• Ingress networking.k8s.io/v1

clusters/beryjuio-home/dl-stack/radarr/radarr-sts.yaml

• ghcr.io/onedr0p/radarr 5.4.6.8723
• StatefulSet apps/v1

clusters/beryjuio-home/dl-stack/sabnzbd/sabnzbd-exporter.yaml

• proxy.registry.beryju.org/msroest/sabnzbd_exporter 0.1.70
• Deployment apps/v1

clusters/beryjuio-home/dl-stack/sabnzbd/sabnzbd-ingress.yaml

• Ingress networking.k8s.io/v1

clusters/beryjuio-home/dl-stack/sabnzbd/sabnzbd-sts.yaml

• ghcr.io/onedr0p/sabnzbd 4.3.1
• StatefulSet apps/v1

clusters/beryjuio-home/dl-stack/sonarr/sonarr-ingress.yaml

• Ingress networking.k8s.io/v1

clusters/beryjuio-home/dl-stack/sonarr/sonarr-sts.yaml

• ghcr.io/onedr0p/sonarr 4.0.4.1491
• StatefulSet apps/v1

clusters/beryjuio-home/fleetdm/helm.yaml

• HelmRelease helm.toolkit.fluxcd.io/v2beta2

clusters/beryjuio-home/fleetdm/source.yaml

• HelmRepository source.toolkit.fluxcd.io/v1beta2

clusters/beryjuio-home/flux-system/gotk-components.yaml

• ClusterRole rbac.authorization.k8s.io/v1
• ClusterRole rbac.authorization.k8s.io/v1
• ClusterRole rbac.authorization.k8s.io/v1
• ClusterRoleBinding rbac.authorization.k8s.io/v1
• ClusterRoleBinding rbac.authorization.k8s.io/v1
• CustomResourceDefinition apiextensions.k8s.io/v1
• CustomResourceDefinition apiextensions.k8s.io/v1
• CustomResourceDefinition apiextensions.k8s.io/v1
• CustomResourceDefinition apiextensions.k8s.io/v1
• CustomResourceDefinition apiextensions.k8s.io/v1
• Deployment apps/v1
• CustomResourceDefinition apiextensions.k8s.io/v1
• Deployment apps/v1
• CustomResourceDefinition apiextensions.k8s.io/v1
• Deployment apps/v1
• CustomResourceDefinition apiextensions.k8s.io/v1
• CustomResourceDefinition apiextensions.k8s.io/v1
• CustomResourceDefinition apiextensions.k8s.io/v1
• Deployment apps/v1
• CustomResourceDefinition apiextensions.k8s.io/v1
• CustomResourceDefinition apiextensions.k8s.io/v1
• Deployment apps/v1
• CustomResourceDefinition apiextensions.k8s.io/v1
• Deployment apps/v1

clusters/beryjuio-home/flux-system/gotk-sync.yaml

• GitRepository source.toolkit.fluxcd.io/v1
• Kustomization kustomize.toolkit.fluxcd.io/v1

clusters/beryjuio-home/gitlab/gitlab-deployment.yaml

• proxy.registry.beryju.org/gitlab/gitlab-ce 16.11.2-ce.0
• Deployment apps/v1

clusters/beryjuio-home/gitlab/runner-helm.yaml

• HelmRelease helm.toolkit.fluxcd.io/v2beta2

clusters/beryjuio-home/gitlab/source.yaml

• HelmRepository source.toolkit.fluxcd.io/v1beta2

clusters/beryjuio-home/gravity/image-repo.yaml

• ImageRepository image.toolkit.fluxcd.io/v1beta2

clusters/beryjuio-home/gravity/ingress.yaml

• Ingress networking.k8s.io/v1

clusters/beryjuio-home/gravity/sts.yaml

• ghcr.io/beryju/gravity v0.8.1
• StatefulSet apps/v1

clusters/beryjuio-home/kube-flannel/flannel.yml

• proxy.registry.beryju.org/flannel/flannel-cni-plugin v1.2.0
• proxy.registry.beryju.org/flannel/flannel v0.25.1
• proxy.registry.beryju.org/flannel/flannel v0.25.1
• ClusterRole rbac.authorization.k8s.io/v1
• ClusterRoleBinding rbac.authorization.k8s.io/v1
• DaemonSet apps/v1

clusters/beryjuio-home/kube-system/intel-gpu-exporter-ds.yaml

• DaemonSet apps/v1

clusters/beryjuio-home/kube-system/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

clusters/beryjuio-home/local-path-storage/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

clusters/beryjuio-home/monitoring-system/linode-exporter.yaml

• Deployment apps/v1

clusters/beryjuio-home/monitoring-system/snmp-exporter.yaml

• HelmRelease helm.toolkit.fluxcd.io/v2beta2

clusters/beryjuio-home/oxidized/deployment.yaml

• Deployment apps/v1

clusters/beryjuio-home/oxidized/ingress.yaml

• Ingress networking.k8s.io/v1

clusters/beryjuio-home/plex/ingress.yaml

• Ingress networking.k8s.io/v1

clusters/beryjuio-home/plex/sts.yaml

• proxy.registry.beryju.org/plexinc/pms-docker 1.40.2.8395-c67dce28e
• StatefulSet apps/v1

clusters/beryjuio-home/terraform-agent/deploy.yaml

• docker.io/hashicorp/tfc-agent 1.15
• Deployment apps/v1

clusters/beryjuio-home/unifi-controller/exporter-deploy.yaml

• ghcr.io/unpoller/unpoller v2.11.2
• Deployment apps/v1

clusters/beryjuio-home/unifi-controller/sts.yaml

• ghcr.io/linuxserver/unifi-controller 8.0.24
• StatefulSet apps/v1

clusters/beryjuio-oci/common-backup.yaml

• Kustomization kustomize.toolkit.fluxcd.io/v1

clusters/beryjuio-oci/common-ingress.yaml

• Kustomization kustomize.toolkit.fluxcd.io/v1

clusters/beryjuio-oci/common-logging.yaml

• Kustomization kustomize.toolkit.fluxcd.io/v1

clusters/beryjuio-oci/common-metallb.yaml

• Kustomization kustomize.toolkit.fluxcd.io/v1

clusters/beryjuio-oci/common-monitoring.yaml

• Kustomization kustomize.toolkit.fluxcd.io/v1

clusters/beryjuio-oci/common-net.yaml

• Kustomization kustomize.toolkit.fluxcd.io/v1

clusters/beryjuio-oci/common-vpn.yaml

• Kustomization kustomize.toolkit.fluxcd.io/v1

clusters/beryjuio-oci/common.yaml

• Kustomization kustomize.toolkit.fluxcd.io/v1

clusters/beryjuio-oci/flux-system/gotk-components.yaml

• ClusterRole rbac.authorization.k8s.io/v1
• ClusterRole rbac.authorization.k8s.io/v1
• ClusterRole rbac.authorization.k8s.io/v1
• ClusterRoleBinding rbac.authorization.k8s.io/v1
• ClusterRoleBinding rbac.authorization.k8s.io/v1
• CustomResourceDefinition apiextensions.k8s.io/v1
• CustomResourceDefinition apiextensions.k8s.io/v1
• CustomResourceDefinition apiextensions.k8s.io/v1
• CustomResourceDefinition apiextensions.k8s.io/v1
• CustomResourceDefinition apiextensions.k8s.io/v1
• Deployment apps/v1
• CustomResourceDefinition apiextensions.k8s.io/v1
• Deployment apps/v1
• CustomResourceDefinition apiextensions.k8s.io/v1
• Deployment apps/v1
• CustomResourceDefinition apiextensions.k8s.io/v1
• CustomResourceDefinition apiextensions.k8s.io/v1
• CustomResourceDefinition apiextensions.k8s.io/v1
• Deployment apps/v1

clusters/beryjuio-oci/flux-system/gotk-sync.yaml

• GitRepository source.toolkit.fluxcd.io/v1
• Kustomization kustomize.toolkit.fluxcd.io/v1

clusters/beryjuio-oci/headscale/ingress.yaml

• Ingress networking.k8s.io/v1

clusters/beryjuio-oci/headscale/sts.yaml

• ghcr.io/juanfont/headscale 0.23.0-debug
• StatefulSet apps/v1

clusters/beryjuio-oci/kube-flannel/flannel.yml

• proxy.registry.beryju.org/flannel/flannel-cni-plugin v1.2.0
• proxy.registry.beryju.org/flannel/flannel v0.25.1
• proxy.registry.beryju.org/flannel/flannel v0.25.1
• ClusterRole rbac.authorization.k8s.io/v1
• ClusterRoleBinding rbac.authorization.k8s.io/v1
• DaemonSet apps/v1

clusters/beryjuio-oci/local-path-storage/kustomization.yaml

• Kustomization kustomize.config.k8s.io/v1beta1

clusters/beryjuio-prod/analytics/ingress.yaml

• Ingress networking.k8s.io/v1

clusters/beryjuio-prod/analytics/plausible-db.yaml

• proxy.registry.beryju.org/library/postgres 12
• StatefulSet apps/v1

clusters/beryjuio-prod/analytics/plausible-events-db.yaml

• proxy.registry.beryju.org/clickhouse/clickhouse-server 24.4-alpine
• StatefulSet apps/v1

clusters/beryjuio-prod/analytics/plausible.yaml

• proxy.registry.beryju.org/plausible/analytics v2.0.0
• proxy.registry.beryju.org/plausible/analytics v2.0.0
• Deployment apps/v1

clusters/beryjuio-prod/authentik/authentik-vault-cluster-role-binding.yaml

• ClusterRoleBinding rbac.authorization.k8s.io/v1

clusters/beryjuio-prod/authentik/authentik-vault-cluster-role.yaml

• ClusterRole rbac.authorization.k8s.io/v1

clusters/beryjuio-prod/authentik/authentik.yaml

• HelmRelease helm.toolkit.fluxcd.io/v2beta2

clusters/beryjuio-prod/authentik/helm-authentik.yaml

• HelmRepository source.toolkit.fluxcd.io/v1beta2

clusters/beryjuio-prod/authentik/image-repo.yaml

• ImageRepository image.toolkit.fluxcd.io/v1beta2

clusters/beryjuio-prod/common-backup.yaml

• Kustomization kustomize.toolkit.fluxcd.io/v1

clusters/beryjuio-prod/common-ingress.yaml

• Kustomization kustomize.toolkit.fluxcd.io/v1

clusters/beryjuio-prod/common-logging.yaml

• Kustomization kustomize.toolkit.fluxcd.io/v1

clusters/beryjuio-prod/common-monitoring.yaml

• Kustomization kustomize.toolkit.fluxcd.io/v1

clusters/beryjuio-prod/common-net.yaml

• Kustomization kustomize.toolkit.fluxcd.io/v1

clusters/beryjuio-prod/common.yaml

• Kustomization kustomize.toolkit.fluxcd.io/v1

clusters/beryjuio-prod/flux-system/gotk-components.yaml

• ClusterRole rbac.authorization.k8s.io/v1
• ClusterRole rbac.authorization.k8s.io/v1
• ClusterRole rbac.authorization.k8s.io/v1
• ClusterRoleBinding rbac.authorization.k8s.io/v1
• ClusterRoleBinding rbac.authorization.k8s.io/v1
• CustomResourceDefinition apiextensions.k8s.io/v1
• CustomResourceDefinition apiextensions.k8s.io/v1
• CustomResourceDefinition apiextensions.k8s.io/v1
• CustomResourceDefinition apiextensions.k8s.io/v1
• CustomResourceDefinition apiextensions.k8s.io/v1
• Deployment apps/v1
• CustomResourceDefinition apiextensions.k8s.io/v1
• Deployment apps/v1
• CustomResourceDefinition apiextensions.k8s.io/v1
• Deployment apps/v1
• CustomResourceDefinition apiextensions.k8s.io/v1
• CustomResourceDefinition apiextensions.k8s.io/v1
• CustomResourceDefinition apiextensions.k8s.io/v1
• Deployment apps/v1
• CustomResourceDefinition apiextensions.k8s.io/v1
• CustomResourceDefinition apiextensions.k8s.io/v1
• Deployment apps/v1
• CustomResourceDefinition apiextensions.k8s.io/v1
• Deployment apps/v1

clusters/beryjuio-prod/flux-system/gotk-sync.yaml

• GitRepository source.toolkit.fluxcd.io/v1
• Kustomization kustomize.toolkit.fluxcd.io/v1

clusters/beryjuio-prod/grafana/helm.yaml

• HelmRelease helm.toolkit.fluxcd.io/v2beta2

clusters/beryjuio-prod/loki/sts.yaml

• proxy.registry.beryju.org/grafana/loki 3.0.0
• StatefulSet apps/v1

clusters/beryjuio-prod/mimir/sts.yaml

• proxy.registry.beryju.org/grafana/mimir 2.12.0
• StatefulSet apps/v1

clusters/beryjuio-prod/minio-backup/deployment.yaml

• quay.io/minio/minio RELEASE.2024-05-10T01-41-38Z
• Deployment apps/v1

clusters/beryjuio-prod/minio/imagik-deployment.yaml

• Deployment apps/v1

clusters/beryjuio-prod/minio/imagik-image-repo.yaml

• ImageRepository image.toolkit.fluxcd.io/v1beta2

clusters/beryjuio-prod/minio/imagik-ingress.yaml

• Ingress networking.k8s.io/v1

clusters/beryjuio-prod/minio/minio-deployment.yaml

• quay.io/minio/minio RELEASE.2024-05-10T01-41-38Z
• Deployment apps/v1

clusters/beryjuio-prod/redbot/deployment.yaml

• ghcr.io/rhomelab/red-discordbot 3.5.9
• Deployment apps/v1

clusters/beryjuio-prod/redbot/influxdb_exporter-deployment.yaml

• quay.io/prometheus/influxdb-exporter v0.11.6
• Deployment apps/v1

clusters/beryjuio-prod/registry/pullthrough-token/deployment.yaml

• Deployment apps/v1

clusters/beryjuio-prod/registry/pullthrough/deployment.yaml

• docker.io/library/registry 3.0.0-alpha.1
• Deployment apps/v1

clusters/beryjuio-prod/registry/pullthrough/garbage-collect-cron.yaml

• CronJob batch/v1

clusters/beryjuio-prod/registry/pullthrough/hpa.yaml

• HorizontalPodAutoscaler autoscaling/v2

clusters/beryjuio-prod/registry/pullthrough/ingress.yaml

• Ingress networking.k8s.io/v1

clusters/beryjuio-prod/registry/standalone-token/deployment.yaml

• Deployment apps/v1

clusters/beryjuio-prod/registry/standalone-token/image-repo.yaml

• ImageRepository image.toolkit.fluxcd.io/v1beta2

clusters/beryjuio-prod/registry/standalone-token/ingress.yaml

• Ingress networking.k8s.io/v1

clusters/beryjuio-prod/registry/standalone/deployment.yaml

• docker.io/library/registry 3.0.0-alpha.1
• Deployment apps/v1

clusters/beryjuio-prod/registry/standalone/garbage-collect-cron.yaml

• CronJob batch/v1

clusters/beryjuio-prod/registry/standalone/hpa.yaml

• HorizontalPodAutoscaler autoscaling/v2

clusters/beryjuio-prod/registry/standalone/ingress.yaml

• Ingress networking.k8s.io/v1

clusters/beryjuio-prod/registry/ui/deployment.yaml

• proxy.registry.beryju.org/joxit/docker-registry-ui 2.5.7-debian
• Deployment apps/v1

clusters/beryjuio-prod/tempo/sts.yaml

• proxy.registry.beryju.org/grafana/tempo 2.4.1
• StatefulSet apps/v1

clusters/beryjuio-prod/vault/helm-hashicorp.yaml

• HelmRepository source.toolkit.fluxcd.io/v1beta2

clusters/beryjuio-prod/vault/helm.yaml

• HelmRelease helm.toolkit.fluxcd.io/v2beta2

clusters/beryjuio-prod/workstation/deployment.yaml

• vault 1.13.3
• docker 26.1.2-dind
• Deployment apps/v1

clusters/beryjuio-prod/workstation/image-repo.yaml

• ImageRepository image.toolkit.fluxcd.io/v1beta2

clusters/beryjuio-prod/workstation/role-binding.yaml

• ClusterRoleBinding rbac.authorization.k8s.io/v1

clusters/beryjuio-prod/workstation/role.yaml

• ClusterRole rbac.authorization.k8s.io/v1

common-backup/flux-system/source.yaml

• HelmRepository source.toolkit.fluxcd.io/v1beta2

common-backup/kyverno/kyverno.helm.yaml

• HelmRelease helm.toolkit.fluxcd.io/v2beta2

common-backup/kyverno/snapshot-cronjob-controller.rbac.yaml

• ClusterRole rbac.authorization.k8s.io/v1
• ClusterRoleBinding rbac.authorization.k8s.io/v1

common-backup/kyverno/snapshot-cronjob-controller.yaml

• proxy.registry.beryju.org/kopia/kopia 0.17

common-ingress/cert-manager/cert-manager.helm.yaml

• HelmRelease helm.toolkit.fluxcd.io/v2beta2

common-ingress/flux-system/helm-jetstack.yaml

• HelmRepository source.toolkit.fluxcd.io/v1beta2

common-logging/flux-system/source.yaml

• HelmRepository source.toolkit.fluxcd.io/v1beta2

common-logging/loki/event-router.yaml

• ClusterRole rbac.authorization.k8s.io/v1
• ClusterRoleBinding rbac.authorization.k8s.io/v1
• Deployment apps/v1

common-logging/loki/helm.yaml

• HelmRelease helm.toolkit.fluxcd.io/v2beta2

common-metallb/flux-system/helm-metallb.yaml

• HelmRepository source.toolkit.fluxcd.io/v1beta2

common-metallb/metallb-system/helm.yaml

• HelmRelease helm.toolkit.fluxcd.io/v2beta2

common-monitoring/flux-system/helm-kubernetes-metrics-server.yaml

• HelmRepository source.toolkit.fluxcd.io/v1beta2

common-monitoring/flux-system/helm-prometheus-community.yaml

• HelmRepository source.toolkit.fluxcd.io/v1beta2

common-monitoring/kube-system/metrics-server.helm.yaml

• HelmRelease helm.toolkit.fluxcd.io/v2beta2

common-monitoring/monitoring-system/cluster-role-binding.yaml

• ClusterRoleBinding rbac.authorization.k8s.io/v1

common-monitoring/monitoring-system/cluster-role.yaml

• ClusterRole rbac.authorization.k8s.io/v1

common-monitoring/monitoring-system/helm.yaml

• HelmRelease helm.toolkit.fluxcd.io/v2beta2

common-net/flux-system/helm-istio.yaml

• HelmRepository source.toolkit.fluxcd.io/v1beta2

common-net/flux-system/helm-kiali.yaml

• HelmRepository source.toolkit.fluxcd.io/v1beta2

common-net/ingress-class.yaml

• IngressClass networking.k8s.io/v1

common-net/istio-system/helm-istio-base.yaml

• HelmRelease helm.toolkit.fluxcd.io/v2beta2

common-net/istio-system/helm-istio-gateway-eastwest.yaml

• HelmRelease helm.toolkit.fluxcd.io/v2beta2

common-net/istio-system/helm-istio-gateway-ingress.yaml

• HelmRelease helm.toolkit.fluxcd.io/v2beta2

common-net/istio-system/helm-istio-istiod.yaml

• ghcr.io/beryju/pilot 1.21.0
• HelmRelease helm.toolkit.fluxcd.io/v2beta2

common-net/istio-system/kiali-rbac.yaml

• ClusterRoleBinding rbac.authorization.k8s.io/v1

common-net/istio-system/kiali.helm.yaml

• HelmRelease helm.toolkit.fluxcd.io/v2beta2

common-vpn/tailscale/ds.yaml

• DaemonSet apps/v1

common-vpn/tailscale/role.yaml

• Role rbac.authorization.k8s.io/v1

common-vpn/tailscale/rolebinding.yaml

• RoleBinding rbac.authorization.k8s.io/v1

common/flux-system/external-secrets.repo.yaml

• HelmRepository source.toolkit.fluxcd.io/v1beta2

common/flux-system/helm-beryju.yaml

• HelmRepository source.toolkit.fluxcd.io/v1beta2

common/flux-system/helm-bitnami.yaml

• HelmRepository source.toolkit.fluxcd.io/v1beta2

common/flux-system/helm-k8s-at-home.yaml

• HelmRepository source.toolkit.fluxcd.io/v1beta2

common/flux-system/helm-stable.yaml

• HelmRepository source.toolkit.fluxcd.io/v1beta2

common/flux-system/notification-github.yaml

• Provider notification.toolkit.fluxcd.io/v1beta3
• Alert notification.toolkit.fluxcd.io/v1beta3

common/kube-system/external-secrets.helm.yaml

• HelmRelease helm.toolkit.fluxcd.io/v2beta2

common/kube-system/oidc-cluster-role.yaml

• ClusterRoleBinding rbac.authorization.k8s.io/v1

debug/small-wks/deploy.yaml

• Deployment apps/v1

debug/whoami/deploy.yaml

• Deployment apps/v1

debug/whoami/ingress.yaml

• Ingress networking.k8s.io/v1

kustomize

clusters/beryjuio-home/kube-system/kustomization.yaml

• intel/intel-device-plugins-for-kubernetes v0.29.0

clusters/beryjuio-home/local-path-storage/kustomization.yaml

• rancher/local-path-provisioner v0.0.26

clusters/beryjuio-oci/local-path-storage/kustomization.yaml

• rancher/local-path-provisioner v0.0.26

npm

package.json

• prettier ^3.0.0

---

• Check this box to trigger a request for Renovate to run again on this repository

The authentication type 10 is not supported

Issue: The authentication type 10 is not supported
Chart version: 1.3.2
How to replicate:

# install postgres
helm uninstall postgresql; helm install postgresql bitnami/postgresql \
 --set global.postgresql.auth.username=guacamole \
 --set global.postgresql.auth.password=password \
 --set global.postgresql.auth.postgresPassword=password \
 --set global.postgresql.auth.database=guacamole --wait

# install guacamole
helm install guacamole . 

Try to access it and itll show the error in the logs

Error log:

### Error querying database.  Cause: org.postgresql.util.PSQLException: The authentication type 10 is not supported. Check that you have configured the pg_hba.conf file to include the client's IP address or subnet, and that it is using an authentication scheme supported by the driver.
### The error may exist in org/apache/guacamole/auth/jdbc/user/UserMapper.xml
### The error may involve org.apache.guacamole.auth.jdbc.user.UserMapper.selectOne
### The error occurred while executing a query
### Cause: org.postgresql.util.PSQLException: The authentication type 10 is not supported. Check that you have configured the pg_hba.conf file to include the client's IP address or subnet, and that it is using an authentication scheme supported by the driver.

Solution: Wait for the new version of guacamole docker image to be released (whatever is after 1.4.0).
https://lists.apache.org/thread/mp6gfxtxwhnnk215crcjbt0106w03o7l
https://issues.apache.org/jira/browse/GUACAMOLE-1433