viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: pin ~28 images to specific versions, enable DIUN monitoring, add app-stacks pipeline

Browse source 
Pin third-party images from :latest to current stable versions:
- Platform: cloudflared, technitium, snmp-exporter, pve-exporter,
  headscale, shadowsocks, xray
- Apps: paperless-ngx, linkwarden, wealthfolio, speedtest, synapse,
  n8n, prowlarr, qbittorrent, lidarr, rybbit, ollama, immichframe,
  cyberchef, networking-toolbox, echo, coturn, shlink, affine

Enable DIUN annotations on all pinned deployments with per-image
tag patterns. Add Woodpecker app-stacks pipeline for selective
terragrunt apply on changed app stacks.
This commit is contained in:
Viktor Barzin 2026-04-06 14:27:13 +03:00
parent a81f7df2a0
commit 09b4bad958
30 changed files with 233 additions and 46 deletions
Download patch file Download diff file Expand all files Collapse all files

6
stacks/rybbit/main.tf
View file

@ -316,12 +316,14 @@ resource "kubernetes_deployment" "rybbit" {
app = "rybbit"
}
annotations = {
"diun.enable" = "true"
"diun.include_tags" = "^v?\\d+\\.\\d+\\.\\d+$"
"dependency.kyverno.io/wait-for" = "postgresql.dbaas:5432,clickhouse.rybbit:8123"
}
}
spec {
container {
image = "ghcr.io/rybbit-io/rybbit-backend:latest"
image = "ghcr.io/rybbit-io/rybbit-backend:v1.0.21"
name = "rybbit"
env {
@ -477,7 +479,7 @@ resource "kubernetes_deployment" "rybbit-client" {
spec {
container {
name = "rybbit-client"
image = "ghcr.io/rybbit-io/rybbit-client:latest"
image = "ghcr.io/rybbit-io/rybbit-client:v1.0.20"
env {
name = "NODE_ENV"
value = "production"