eblume/blumeops
1
1
Fork 0
Code Issues Pull requests Projects Releases 83 Packages Wiki Activity Actions

Update all container images to new upstream-version tagging scheme (#238)

Browse source 
## Summary
- Updates all 15 container image references across 14 ArgoCD manifest files
- Migrates from old internal `vX.Y.Z` tags to new `v<upstream-version>-<sha>` format
- Covers: authentik, cv, devpi, forgejo-runner, homepage, kiwix-serve, kubectl, miniflux, navidrome, ntfy, quartz, teslamate, transmission

## Deployment and Testing
- [ ] Sync all ArgoCD apps on branch revision
- [ ] Verify all services come up healthy
- [ ] Merge and re-sync on main
- [ ] Clean up old-style tags from zot registry

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Reviewed-on: https://forge.ops.eblu.me/eblume/blumeops/pulls/238
This commit is contained in:
Erich Blume 2026-02-21 15:58:11 -08:00
commit a72a0d8e8e
14 changed files with 15 additions and 15 deletions
Download patch file Download diff file Expand all files Collapse all files

2
argocd/manifests/authentik/deployment-server.yaml
View file

@ -18,7 +18,7 @@ spec:
spec:
containers:
- name: server
image: registry.ops.eblu.me/blumeops/authentik:v1.1.2-nix
image: registry.ops.eblu.me/blumeops/authentik:v2025.10.1-b8bc0bf-nix
args: ["server"]
ports:
- name: http

2
argocd/manifests/authentik/deployment-worker.yaml
View file

@ -18,7 +18,7 @@ spec:
spec:
containers:
- name: worker
image: registry.ops.eblu.me/blumeops/authentik:v1.1.2-nix
image: registry.ops.eblu.me/blumeops/authentik:v2025.10.1-b8bc0bf-nix
args: ["worker"]
env:
- name: AUTHENTIK_SECRET_KEY

2
argocd/manifests/cv/deployment.yaml
View file

@ -16,7 +16,7 @@ spec:
spec:
containers:
- name: cv
image: registry.ops.eblu.me/blumeops/cv:v1.0.0
image: registry.ops.eblu.me/blumeops/cv:v1.0.3-ffa8727
ports:
- containerPort: 80
name: http

2
argocd/manifests/devpi/statefulset.yaml
View file

@ -18,7 +18,7 @@ spec:
fsGroup: 1000
containers:
- name: devpi
image: registry.ops.eblu.me/blumeops/devpi:v1.0.0
image: registry.ops.eblu.me/blumeops/devpi:v6.19.1-ffa8727
env:
- name: DEVPI_ROOT_PASSWORD
valueFrom:

2
argocd/manifests/docs/deployment.yaml
View file

@ -16,7 +16,7 @@ spec:
spec:
containers:
- name: docs
image: registry.ops.eblu.me/blumeops/quartz:v1.0.0
image: registry.ops.eblu.me/blumeops/quartz:v1.28.2-ffa8727
ports:
- containerPort: 80
name: http

2
argocd/manifests/forgejo-runner/deployment.yaml
View file

@ -29,7 +29,7 @@ spec:
- name: RUNNER_NAME
value: "k8s-runner"
- name: RUNNER_LABELS
value: "k8s:docker://registry.ops.eblu.me/blumeops/forgejo-runner:v3.2.0"
value: "k8s:docker://registry.ops.eblu.me/blumeops/forgejo-runner:v0.19.11-96a2d42"
command:
- /bin/sh
- -c

2
argocd/manifests/homepage/deployment.yaml
View file

@ -20,7 +20,7 @@ spec:
fsGroup: 1000
containers:
- name: homepage
image: registry.ops.eblu.me/blumeops/homepage:v1.0.0
image: registry.ops.eblu.me/blumeops/homepage:v1.10.1-ffa8727
securityContext:
runAsNonRoot: true
allowPrivilegeEscalation: false

2
argocd/manifests/kiwix/cronjob-zim-watcher.yaml
View file

@ -15,7 +15,7 @@ spec:
serviceAccountName: zim-watcher
containers:
- name: watcher
image: registry.ops.eblu.me/blumeops/kubectl:v1.1.0
image: registry.ops.eblu.me/blumeops/kubectl:v1.34.4-ffa8727
command: ["/bin/bash", "-c"]
args:
- |

4
argocd/manifests/kiwix/deployment.yaml
View file

@ -20,7 +20,7 @@ spec:
containers:
# Main kiwix-serve container
- name: kiwix-serve
image: registry.ops.eblu.me/blumeops/kiwix-serve:v1.1.0
image: registry.ops.eblu.me/blumeops/kiwix-serve:v3.8.1-ffa8727
args:
- "/bin/sh"
- "-c"
@ -53,7 +53,7 @@ spec:
# Sidecar: Syncs declarative ZIM torrents to transmission
- name: torrent-sync
image: registry.ops.eblu.me/blumeops/transmission:v1.1.0
image: registry.ops.eblu.me/blumeops/transmission:v4.0.6-r4-ffa8727
command: ["/bin/bash", "-c"]
args:
- |

2
argocd/manifests/miniflux/deployment.yaml
View file

@ -15,7 +15,7 @@ spec:
spec:
containers:
- name: miniflux
image: registry.ops.eblu.me/blumeops/miniflux:v1.1.0
image: registry.ops.eblu.me/blumeops/miniflux:v2.2.17-ffa8727
ports:
- containerPort: 8080
env:

2
argocd/manifests/navidrome/deployment.yaml
View file

@ -20,7 +20,7 @@ spec:
fsGroup: 1000
containers:
- name: navidrome
image: registry.ops.eblu.me/blumeops/navidrome:v1.0.3
image: registry.ops.eblu.me/blumeops/navidrome:v0.60.3-ffa8727
securityContext:
runAsNonRoot: true
allowPrivilegeEscalation: false

2
argocd/manifests/ntfy/deployment.yaml
View file

@ -16,7 +16,7 @@ spec:
spec:
containers:
- name: ntfy
image: registry.ops.eblu.me/blumeops/ntfy:v1.1.0-nix
image: registry.ops.eblu.me/blumeops/ntfy:v2.17.0-ffa8727-nix
args: ["serve", "--config", "/etc/ntfy/server.yml"]
ports:
- containerPort: 80

2
argocd/manifests/teslamate/deployment.yaml
View file

@ -15,7 +15,7 @@ spec:
spec:
containers:
- name: teslamate
image: registry.ops.eblu.me/blumeops/teslamate:v1.0.1
image: registry.ops.eblu.me/blumeops/teslamate:v2.2.0-ffa8727
ports:
- containerPort: 4000
env:

2
argocd/manifests/torrent/deployment.yaml
View file

@ -16,7 +16,7 @@ spec:
spec:
containers:
- name: transmission
image: registry.ops.eblu.me/blumeops/transmission:v1.1.0
image: registry.ops.eblu.me/blumeops/transmission:v4.0.6-r4-ffa8727
env:
- name: PUID
value: "1000"