blumeops/argocd/manifests
Erich Blume c8da243663 Run alloy-tracing as root for eBPF capabilities
The nix-built Alloy image sets User=65534 (nobody). Even with
privileged: true, a non-root user gets no effective capabilities
(CapEff=0). Override with runAsUser: 0 so Beyla gets CAP_BPF and
CAP_SYS_ADMIN needed for eBPF instrumentation.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-18 08:42:26 -07:00
..
1password-connect Migrate 1Password Connect from Helm to kustomize (1.8.1 → 1.8.2) (#326) 2026-04-06 07:31:40 -07:00
alloy-k8s Add seccomp RuntimeDefault profiles to alloy-k8s and immich pods 2026-04-06 10:21:23 -07:00
alloy-ringtail Deploy Tor Snowflake proxy on ringtail (#311) 2026-03-24 20:51:40 -07:00
alloy-tracing-ringtail Run alloy-tracing as root for eBPF capabilities 2026-04-18 08:42:26 -07:00
argocd Upgrade ArgoCD v3.3.2 → v3.3.6, SHA-pin install manifest 2026-04-07 08:21:11 -07:00
authentik Deploy Paperless-ngx document management (#328) 2026-04-08 17:54:12 -07:00
cloudnative-pg Port CloudNative-PG off Helm to direct release manifest (#268) 2026-02-25 17:37:53 -08:00
cv Add RuntimeDefault seccomp profiles to all managed workloads 2026-03-24 16:19:40 -07:00
databases Deploy Paperless-ngx document management (#328) 2026-04-08 17:54:12 -07:00
devpi Deploy devpi 6.19.3 2026-04-18 08:04:23 -07:00
docs Update docs release to v1.15.7 2026-04-18 08:14:58 -07:00
external-secrets Upgrade External Secrets Operator v2.2.0 + migrate Helm to kustomize (#312) 2026-03-25 15:56:41 -07:00
forgejo-runner Update navidrome, miniflux, forgejo-runner image tags to Alpine 3.23 builds [main] 2026-04-16 15:37:30 -07:00
frigate Fix Frigate preview config and services-check NoData detection 2026-04-08 11:12:42 -07:00
grafana Switch Fly proxy to upstream keepalive pools (#337) 2026-04-17 16:39:52 -07:00
grafana-config Move forge-specific latency panels to Forgejo dashboard 2026-04-17 15:13:40 -07:00
homepage Deploy Homepage v1.11.0-e375859 2026-03-26 10:25:07 -07:00
immich Add seccomp RuntimeDefault profiles to alloy-k8s and immich pods 2026-04-06 10:21:23 -07:00
kingfisher Add compensating controls framework and date-based report dirs (#320) 2026-03-30 17:44:11 -07:00
kiwix Update kiwix-serve to Dagger-built container (Alpine 3.23) 2026-04-17 14:27:42 -07:00
kube-state-metrics Pin kube-state-metrics to main-SHA container tags 2026-04-07 16:10:14 -07:00
kube-state-metrics-ringtail Pin kube-state-metrics to main-SHA container tags 2026-04-07 16:10:14 -07:00
loki Add RuntimeDefault seccomp profiles to all managed workloads 2026-03-24 16:19:40 -07:00
mealie Add RuntimeDefault seccomp profiles to all managed workloads 2026-03-24 16:19:40 -07:00
miniflux Update navidrome, miniflux, forgejo-runner image tags to Alpine 3.23 builds [main] 2026-04-16 15:37:30 -07:00
navidrome Update navidrome, miniflux, forgejo-runner image tags to Alpine 3.23 builds [main] 2026-04-16 15:37:30 -07:00
ntfy Add RuntimeDefault seccomp profiles to all managed workloads 2026-03-24 16:19:40 -07:00
nvidia-device-plugin Upgrade nvidia-device-plugin v0.18.2 → v0.19.0 and add reference card 2026-03-27 07:19:24 -07:00
ollama Upgrade ollama from 0.17.5 to 0.20.4 2026-04-09 06:42:05 -07:00
paperless Fix paperless redis: use upstream valkey instead of amd64-only nix image 2026-04-13 17:48:20 -07:00
prometheus Add RuntimeDefault seccomp profiles to all managed workloads 2026-03-24 16:19:40 -07:00
prowler Update prowler image tag to v5.23.0-7c1cd11 [main] 2026-04-14 13:51:26 -07:00
tailscale-operator Expose Forgejo publicly at forge.eblu.me (#278) 2026-03-03 08:40:41 -08:00
tailscale-operator-base Switch Fly proxy to upstream keepalive pools (#337) 2026-04-17 16:39:52 -07:00
tailscale-operator-ringtail Deploy Tailscale operator on ringtail k3s cluster (#215) 2026-02-19 09:33:05 -08:00
tempo Point Tempo at main-built container v2.10.3-75f9ba4 2026-04-02 13:45:57 -07:00
teslamate Document devpi cold cache failure mode and deploy teslamate v3.0.0-08c698e 2026-04-14 07:38:06 -07:00
torrent Deploy transmission containers from Dagger builds 2026-04-15 11:34:28 -07:00
unpoller Add RuntimeDefault seccomp profiles to all managed workloads 2026-03-24 16:19:40 -07:00