chore: update npins dependencies

Automated update of Nix dependencies via npins. Updated packages: + "hash": "sha256-RuGWBqXVEsZwwBvRGS/nRrA6PQyOQwVaAu139Z853Bk="
2026-01-30 14:59:50 +00:00
345 changed files with 1470 additions and 6099 deletions
@@ -1,16 +1,13 @@
 #!/usr/bin/env bash
 # the shebang is ignored, but nice for editors
-watch_file npins/sources.json
+watch_file nix/sources.json
+watch_file nix/checks.nix

 # Load .env file if it exists
 dotenv_if_exists

+# Set npins dir
+export NPINS_DIRECTORY="nix"
+
 # Activate development shell
-if type lorri &>/dev/null; then
-    echo "direnv: using lorri from PATH ($(type -p lorri))"
-    eval "$(lorri direnv)"
-else
-    # fall back to using direnv's builtin nix support
-    # to prevent bootstrapping problems.
-    use nix
-fi
+use nix
@@ -0,0 +1,54 @@
+# yaml-language-server: $schema=https://gitlab.com/gitlab-org/gitlab/-/raw/master/app/assets/javascripts/editor/schema/ci.json
+default:
+  tags:
+    - nix
+
+include:
+  - project: oceanbox/gitlab-ci
+    ref: v4.5
+    file: template/Base.gitlab-ci.yml
+# stages:
+# - release
+
+# image:
+# name: alpine/helm:latest
+# entrypoint: ["/bin/bash", "-c"]
+
+# release:
+# stage: release
+# rules:
+# - if: "$CI_COMMIT_BRANCH =~ /^main/"
+# when: always
+# - when: never
+# script:
+# - |
+# cd $CI_PROJECT_DIR
+# for i in $(git show --pretty="" --name-only | grep '^charts/.*/Chart.yaml' | cut -d/ -f2); do
+# pack=$(helm package ./charts/$i | sed 's/Success.*: \(.*\)/\1/')
+# if [ ! -z $pack ]; then
+# chart=$(basename $pack)
+# curl --request POST \
+# --user gitlab-ci-token:$CI_JOB_TOKEN \
+# --form "chart=@${chart}" \
+# "${CI_API_V4_URL}/projects/${CI_PROJECT_ID}/packages/helm/api/stable/charts"
+# fi
+# done
+
+# rebuild:
+# stage: release
+# rules:
+# - when: manual
+# allow_failure: true
+# script:
+# - |
+# cd $CI_PROJECT_DIR
+# for i in $(find ./charts -maxdepth 2 -name Chart.yaml | cut -d/ -f3); do
+# pack=$(helm package ./charts/$i | sed 's/Success.*: \(.*\)/\1/')
+# if [ ! -z $pack ]; then
+# chart=$(basename $pack)
+# curl --request POST \
+# --user gitlab-ci-token:$CI_JOB_TOKEN \
+# --form "chart=@${chart}" \
+# "${CI_API_V4_URL}/projects/${CI_PROJECT_ID}/packages/helm/api/stable/charts"
+# fi
+# done
@@ -1,4 +1,4 @@
-FROM ghcr.io/helmfile/helmfile:v1.3.1
+FROM ghcr.io/helmfile/helmfile:v1.1.9

 RUN mkdir -p /home/argocd/cmp-server/config/
 COPY plugin.yaml /home/argocd/cmp-server/config/
@@ -1,6 +1,6 @@
 #!/bin/sh

-img=git.oceanbox.io/platform/manifests/helmfile-cmp
+img=registry.gitlab.com/oceanbox/manifests/helmfile-cmp
 tag=${1:-latest}

 docker build -t "${img}":"${tag}" .
@@ -1,3 +0,0 @@
-FROM busybox
-
-COPY keycloak-themes/oceanbox /theme
@@ -1,47 +0,0 @@
-/* Oceanbox Keycloak Login Theme */
-
-/* Brand colours */
-:root {
-    --pf-v5-global--primary-color--100: #0bb4aa;
-    --pf-v5-global--primary-color--200: #099e95;
-    --pf-v5-global--link--Color: #0bb4aa;
-    --pf-v5-global--link--Color--hover: #031275;
-}
-
-/* Background */
-.login-pf body {
-    background: #f9fafd url("../img/oceanbox-bg.png") no-repeat center bottom fixed;
-    background-size: cover;
-}
-
-/* Logo */
-div.kc-logo-text {
-    background-image: url('../img/oceanbox-logo-text.png');
-    height: 80px;
-    width: 360px;
-    background-repeat: no-repeat;
-    background-size: contain;
-    background-position: center;
-    margin: 0 auto;
-}
-
-div.kc-logo-text span {
-    display: none;
-}
-
-/* Primary button */
-.pf-v5-c-button.pf-m-primary {
-    --pf-v5-c-button--m-primary--BackgroundColor: #0bb4aa;
-    --pf-v5-c-button--m-primary--hover--BackgroundColor: #099e95;
-    --pf-v5-c-button--m-primary--active--BackgroundColor: #37746F;
-    --pf-v5-c-button--m-primary--focus--BackgroundColor: #099e95;
-}
-
-/* Links */
-a, .pf-v5-c-button.pf-m-link {
-    color: #0bb4aa;
-}
-
-a:hover, .pf-v5-c-button.pf-m-link:hover {
-    color: #031275;
-}
@@ -1,5 +0,0 @@
-parent=keycloak.v2
-import=common/keycloak
-
-stylesCommon=vendor/patternfly-v5/patternfly.min.css vendor/patternfly-v5/patternfly-addons.css
-styles=css/styles.css css/oceanbox.css
@@ -13,7 +13,7 @@ applications:
      server: https://kubernetes.default.svc
    project: sys
    sources:
-      - repoURL: https://git.oceanbox.io/platform/manifests.git
+      - repoURL: https://gitlab.com/oceanbox//manifests.git
        targetRevision: HEAD
        path: helmfile.d
        plugin:
@@ -4,10 +4,10 @@ description: Atlantis map and simulation service
 type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
-version: v2.24.7
+version: v1.35.2
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application.
-appVersion: v2.24.7
+appVersion: v1.35.2
 dependencies:
  - name: diagrid-dashboard
    version: "0.1.0"
@@ -3,8 +3,8 @@
 # Declare variables to be passed into your templates.
 replicaCount: 1
 image:
-  repository: git.oceanbox.io/oceanbox/poseidon/atlantis
-  tag: v2.24.7
+  repository: registry.gitlab.com/oceanbox/poseidon/atlantis
+  tag: v1.35.2
  pullPolicy: IfNotPresent
 init:
  enabled: false
@@ -116,5 +116,6 @@ serviceMonitor:
 nodeSelector: {}
 tolerations: []
 affinity: {}
+
 diagrid-dashboard:
  enabled: false
@@ -13,9 +13,9 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: v2.24.7
+version: v1.35.2
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
 # follow Semantic Versioning. They should reflect the version the application is using.
 # It is recommended to use it with quotes.
-appVersion: "v2.24.7"
+appVersion: "v1.35.2"
@@ -6,11 +6,11 @@
 replicaCount: 1
 # This sets the container image more information can be found here: https://kubernetes.io/docs/concepts/containers/images/
 image:
-  repository: git.oceanbox.io/oceanbox/poseidon/codex
+  repository: registry.gitlab.com/oceanbox/poseidon/codex
  # This sets the pull policy for images.
  pullPolicy: IfNotPresent
  # Overrides the image tag whose default is the chart appVersion.
-  tag: v2.24.7
+  tag: v1.35.2
 # This is for the secrets for pulling an image from a private repository more information can be found here: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
 imagePullSecrets:
  - name: gitlab-pull-secret
@@ -8,7 +8,6 @@ data:
    kind: Component
    metadata:
      name: statestore
-      namespace: {{ .Values.statestore.namespace | default "default" }}
    scopes:
      - {{ .Values.statestore.scope }}
    spec:
@@ -18,10 +17,10 @@ data:
        - name: redisUsername
          value: default
        - name: redisPassword
-          value: {{ .Values.statestore.password | default "secret" }}
+          value: secret
        - name: actorStateStore
          value: "true"
        - name: redisDB
-          value: "{{ .Values.statestore.redisDB | default "0" }}"
+          value: "1"
      type: state.redis
      version: v1
@@ -5,9 +5,6 @@
 statestore:
  scope: my-scope
  redis: my-redis
-  namespace: default
-  password: secret
-  redisDB: "0"

 # This will set the replicaset count more information can be found here: https://kubernetes.io/docs/concepts/workloads/controllers/replicaset/
 replicaCount: 1
@@ -12,7 +12,7 @@ description: Oceanbox Documentation
 type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
-version: v0.0.2
+version: v0.1.0
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application.
-appVersion: v0.0.2
+appVersion: v0.1.0
@@ -42,11 +42,11 @@ spec:
              value: "3"
          livenessProbe:
            httpGet:
-              path: /healthz
+              path: /
              port: http
          readinessProbe:
            httpGet:
-              path: /healthz
+              path: /
              port: http
          resources:
            {{- toYaml .Values.resources | nindent 12 }}
@@ -3,8 +3,8 @@
 # Declare variables to be passed into your templates.
 replicaCount: 1
 image:
-  repository: git.oceanbox.io/oceanbox/documentation/docs
-  tag: v0.0.2
+  repository:  registry.gitlab.com/oceanbox/documentation
+  tag: v0.1.0
  pullPolicy: IfNotPresent
 init:
  enabled: false
@@ -21,9 +21,8 @@ env:
    valueFrom:
      fieldRef:
        fieldPath: metadata.namespace
-        # imagePullSecrets:
-# - name: gitea-pull-secret
-
+imagePullSecrets:
+  - name: gitea-pull-secret
 nameOverride: ""
 fullnameOverride: ""
 serviceAccount:
@@ -48,7 +47,7 @@ service:
  port: 8080
 ingress:
  enabled: true
-  className: haproxy
+  className: nginx
 persistence:
  enabled: false
  size: 1G
@@ -47,7 +47,7 @@ service:
  port: 8080
 ingress:
  enabled: true
-  className: haproxy
+  className: nginx
 persistence:
  enabled: false
  size: 1G
@@ -1,6 +0,0 @@
-dependencies:
- name: diagrid-dashboard
-  repository: file://../diagrid-dashboard
-  version: 0.1.0
-digest: sha256:4fdb3148a2a6439223d7844a3083da2de324dd47e5cb3ac4a5d9c436e6e2c775
-generated: "2026-02-25T16:15:48.608231856+01:00"
@@ -4,12 +4,7 @@ description: A Helm chart for Kubernetes
 type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
-version: v1.7.1
+version: v1.6.7
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application.
-appVersion: v1.7.1
-dependencies:
-  - name: diagrid-dashboard
-    version: "0.1.0"
-    repository: "file://../diagrid-dashboard"
-    condition: diagrid-dashboard.enabled
+appVersion: v1.6.7
@@ -3,8 +3,8 @@
 # Declare variables to be passed into your templates.
 replicaCount: 1
 image:
-  repository: git.oceanbox.io/oceanbox/plume/plume
-  tag: v1.7.1
+  repository: registry.gitlab.com/oceanbox/plume
+  tag: v1.6.7
  pullPolicy: IfNotPresent
 init:
  enabled: false
@@ -90,5 +90,3 @@ serviceMonitor:
 nodeSelector: {}
 tolerations: []
 affinity: {}
-diagrid-dashboard:
-  enabled: false
@@ -1,23 +0,0 @@
-# Patterns to ignore when building packages.
-# This supports shell glob matching, relative path matching, and
-# negation (prefixed with !). Only one pattern per line.
-.DS_Store
-# Common VCS dirs
-.git/
-.gitignore
-.bzr/
-.bzrignore
-.hg/
-.hgignore
-.svn/
-# Common backup files
-*.swp
-*.bak
-*.tmp
-*.orig
-*~
-# Various IDEs
-.project
-.idea/
-*.tmproj
-.vscode/
@@ -1,6 +0,0 @@
-apiVersion: v2
-name: proteus
-description: A Helm chart for Kubernetes
-type: application
-version: v2.24.7
-appVersion: "v2.24.7"
@@ -1,69 +0,0 @@
-{{- if eq .Values.environment "prod" }}
-apiVersion: temporal.io/v1alpha1
-kind: WorkerResourceTemplate
-metadata:
-  name: proteus-prod-hpa
-  namespace: proteus
-spec:
-  workerDeploymentRef:
-    name: proteus-prod
-  template:
-    apiVersion: autoscaling/v2
-    kind: HorizontalPodAutoscaler
-    spec:
-      scaleTargetRef: {} # NOTE: controller injects the versioned Deployment
-      minReplicas: 2
-      maxReplicas: 10
-      metrics:
-        - type: External
-          external:
-            metric:
-              name: temporal_approximate_backlog_count
-              selector:
-                matchLabels:
-                  task_type: "Activity"
-            target:
-              type: AverageValue
-              averageValue: "2"
-        - type: Resource
-          resource:
-            name: cpu
-            target:
-              type: Utilization
-              averageUtilization: 70
-{{- end }}
---
-{{- if eq .Values.environment "beta" }}
-apiVersion: temporal.io/v1alpha1
-kind: WorkerResourceTemplate
-metadata:
-  name: proteus-beta-hpa
-  namespace: proteus
-spec:
-  workerDeploymentRef:
-    name: proteus-beta
-  template:
-    apiVersion: autoscaling/v2
-    kind: HorizontalPodAutoscaler
-    spec:
-      scaleTargetRef: {}
-      minReplicas: 1
-      maxReplicas: 2
-      metrics:
-        - type: External
-          external:
-            metric:
-              name: temporal_approximate_backlog_count
-              selector:
-                matchLabels:
-                  task_type: "Activity"
-            target:
-              type: AverageValue
-              averageValue: "2"
-        - type: Resource
-          resource:
-            name: cpu
-            target:
-              type: Utilization
-              averageUtilization: 70
-{{- end }}
@@ -1,9 +0,0 @@
-{{- if eq .Values.environment "prod" }}
-apiVersion: temporal.io/v1alpha1
-kind: Connection
-metadata:
-  name: temporal
-  namespace: proteus
-spec:
-  hostPort: temporal-frontend.temporal:7233
-{{- end }}
@@ -1,39 +0,0 @@
-{{- if eq .Values.environment "prod" }}
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: pv-proteus-ceph-archives
-spec:
-  accessModes:
-  - ReadWriteMany
-  capacity:
-    storage: 1Gi
-  csi:
-    driver: rook-ceph.cephfs.csi.ceph.com
-    nodeStageSecretRef:
-      name: rook-csi-cephfs-node
-      namespace: rook-ceph
-    volumeAttributes:
-      clusterID: rook-ceph
-      fsName: data
-      rootPath: /
-      staticVolume: "true"
-    volumeHandle: pv-proteus-ceph-archives
-  persistentVolumeReclaimPolicy: Retain
-  volumeMode: Filesystem
---
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: proteus-ceph-archives
-  namespace: proteus
-spec:
-  accessModes:
-  - ReadWriteMany
-  resources:
-    requests:
-      storage: 1Gi
-  storageClassName: ""
-  volumeMode: Filesystem
-  volumeName: pv-proteus-ceph-archives
-{{- end }}
@@ -1,204 +0,0 @@
-{{- if eq .Values.environment "prod" }}
-apiVersion: temporal.io/v1alpha1
-kind: WorkerDeployment
-metadata:
-  name: proteus-prod
-  namespace: proteus
-spec:
-  replicas: 2
-  workerOptions:
-    temporalNamespace: prod-atlantis
-    connectionRef:
-      name: temporal
-  rollout:
-    strategy: AllAtOnce
-  sunset: {}
-  template:
-    spec:
-      securityContext:
-        runAsUser: 0
-        runAsGroup: 0
-      volumes:
-        - name: archives
-          persistentVolumeClaim:
-            claimName: proteus-ceph-archives
-      containers:
-        - name: proteus
-          image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
-          resources:
-            requests:
-              cpu: "1"
-              memory: 1Gi
-            limits:
-              cpu: "2"
-              memory: 4Gi
-          env:
-            - name: TEMPORAL_TASK_QUEUES
-              value: plume,xtract
-            - name: TEMPORAL_NAMESPACE
-              value: prod-atlantis
-            - name: APP_ENV
-              value: prod
-            - name: ARCHIVE_PVC
-              value: prod-queue-ceph-archives
-            - name: MAX_CONCURRENT_ACTIVITIES
-              value: "2"
-            - name: OTEL_EXPORTER_OTLP_ENDPOINT
-              value: http://10.255.241.12:4317
-          volumeMounts:
-            - name: archives
-              mountPath: /data
-          ports:
-            - name: health
-              containerPort: 8080
-          livenessProbe:
-            httpGet:
-              path: /healthz
-              port: health
-            initialDelaySeconds: 20
-            periodSeconds: 15
-            timeoutSeconds: 5
-            failureThreshold: 6
-          readinessProbe:
-            httpGet:
-              path: /readyz
-              port: health
-            initialDelaySeconds: 5
-            periodSeconds: 15
-            timeoutSeconds: 5
-            failureThreshold: 3
-{{- end }}
---
-{{- if eq .Values.environment "beta" }}
-apiVersion: temporal.io/v1alpha1
-kind: WorkerDeployment
-metadata:
-  name: proteus-beta
-  namespace: proteus
-spec:
-  replicas: 1
-  workerOptions:
-    temporalNamespace: beta-atlantis
-    connectionRef:
-      name: temporal
-  rollout:
-    strategy: AllAtOnce
-  sunset: {}
-  template:
-    spec:
-      securityContext:
-        runAsUser: 0
-        runAsGroup: 0
-      volumes:
-        - name: archives
-          persistentVolumeClaim:
-            claimName: proteus-ceph-archives
-      containers:
-        - name: proteus
-          image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
-          resources:
-            requests:
-              cpu: 250m
-              memory: 256Mi
-          env:
-            - name: TEMPORAL_TASK_QUEUES
-              value: plume,xtract
-            - name: TEMPORAL_NAMESPACE
-              value: beta-atlantis
-            - name: APP_ENV
-              value: beta
-            - name: ARCHIVE_PVC
-              value: prod-queue-ceph-archives
-            - name: MAX_CONCURRENT_ACTIVITIES
-              value: "2"
-            - name: OTEL_EXPORTER_OTLP_ENDPOINT
-              value: http://10.255.241.12:4317
-          volumeMounts:
-            - name: archives
-              mountPath: /data
-          ports:
-            - name: health
-              containerPort: 8080
-          livenessProbe:
-            httpGet:
-              path: /healthz
-              port: health
-            initialDelaySeconds: 20
-            periodSeconds: 15
-            timeoutSeconds: 5
-            failureThreshold: 6
-          readinessProbe:
-            httpGet:
-              path: /readyz
-              port: health
-            initialDelaySeconds: 5
-            periodSeconds: 15
-            timeoutSeconds: 5
-            failureThreshold: 3
-{{- end }}
---
-{{- if eq .Values.environment "staging" }}
-apiVersion: temporal.io/v1alpha1
-kind: WorkerDeployment
-metadata:
-  name: proteus-staging
-  namespace: proteus
-spec:
-  replicas: 1
-  workerOptions:
-    temporalNamespace: staging-atlantis
-    connectionRef:
-      name: temporal
-  rollout:
-    strategy: AllAtOnce
-  sunset: {}
-  template:
-    spec:
-      securityContext:
-        runAsUser: 0
-        runAsGroup: 0
-      volumes:
-        - name: archives
-          persistentVolumeClaim:
-            claimName: proteus-ceph-archives
-      containers:
-        - name: proteus
-          image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
-          resources:
-            requests:
-              cpu: 250m
-              memory: 256Mi
-            limits:
-              memory: 1Gi
-          env:
-            - name: TEMPORAL_TASK_QUEUES
-              value: plume,xtract
-            - name: TEMPORAL_NAMESPACE
-              value: staging-atlantis
-            - name: MAX_CONCURRENT_ACTIVITIES
-              value: "10"
-            - name: OTEL_EXPORTER_OTLP_ENDPOINT
-              value: http://10.255.241.12:4317
-          volumeMounts:
-            - name: archives
-              mountPath: /data
-          ports:
-            - name: health
-              containerPort: 8080
-          livenessProbe:
-            httpGet:
-              path: /healthz
-              port: health
-            initialDelaySeconds: 20
-            periodSeconds: 15
-            timeoutSeconds: 5
-            failureThreshold: 6
-          readinessProbe:
-            httpGet:
-              path: /readyz
-              port: health
-            initialDelaySeconds: 5
-            periodSeconds: 15
-            timeoutSeconds: 5
-            failureThreshold: 3
-{{- end }}
@@ -1,12 +0,0 @@
-# Default values for proteus.
-# This chart is installed three times, like atlantis: "proteus" (environment: prod, this
-# file's defaults), "proteus-staging" (environment: staging, values-staging.yaml), and
-# "proteus-beta" (environment: beta, values-beta.yaml). Each release has its own Values scope,
-# so all three can use the plain `image` key without colliding — the publish-container CI action
-# bumps .image.tag here directly on a tagged release (same convention as charts/atlantis/values.yaml)
-# and bumps values-staging.yaml's .image.tag on every merge to main. Beta's tag is manually pinned,
-# same as atlantis's values-beta.yaml.gotmpl.
-image:
-  repository: git.oceanbox.io/oceanbox/poseidon/proteus
-  tag: "v2.24.7"
-environment: prod
@@ -4,10 +4,10 @@ description: A Helm chart for Kubernetes
 type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
-version: v2.24.7
+version: v1.35.2
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application.
-appVersion: v2.24.7
+appVersion: v1.35.2
 dependencies:
  - name: diagrid-dashboard
    version: "0.1.0"
@@ -4,8 +4,8 @@

 replicaCount: 1
 image:
-  repository: git.oceanbox.io/oceanbox/poseidon/sorcerer
-  tag: v2.24.7
+  repository: registry.gitlab.com/oceanbox/poseidon/sorcerer
+  tag: v1.35.2
  pullPolicy: IfNotPresent
 init:
  enabled: false
@@ -108,6 +108,7 @@ serviceMonitor:
 nodeSelector: {}
 tolerations: []
 affinity: {}
+
 diagrid-dashboard:
  enabled: false
  statestore:
@@ -55,7 +55,7 @@ ingress:
      secretName: yolo-registry-tls
 persistence:
  enabled: true
-  size: 5G
+  size: 1G
  storageClass: ""
  accessMode: ReadWriteOnce
 cluster:
@@ -20,11 +20,4 @@ environments:
    - ../values/*/env.yaml.gotmpl
    - ../values/*/env-{{ requiredEnv "ARGOCD_ENV_CLUSTER_NAME" }}.yaml.gotmpl
    missingFileHandler: Info
-  beta:
-    values:
-    - ../values/env.yaml
-    - ../values/env-{{ requiredEnv "ARGOCD_ENV_CLUSTER_NAME" }}.yaml
-    - ../values/*/env.yaml.gotmpl
-    - ../values/*/env-{{ requiredEnv "ARGOCD_ENV_CLUSTER_NAME" }}.yaml.gotmpl
-    missingFileHandler: Info

@@ -15,7 +15,7 @@ releases:
 - name: argocd
  namespace: argocd
  chart: argo/argo-cd
-  version: 9.7.1
+  version: 7.9.1
  condition: argo.enabled
  values:
  - ../values/argo/values/argocd.yaml.gotmpl
@@ -27,7 +27,7 @@ releases:
 - name: argocd-apps
  namespace: argocd
  chart: argo/argocd-apps
-  version: 2.0.5
+  version: 2.0.4
  condition: argo.apps.enabled
  values:
  - ../values/argo/values/apps.yaml.gotmpl
@@ -35,7 +35,7 @@ releases:
 - name: argo-rollouts
  namespace: argocd
  chart: argo/argo-rollouts
-  version: 2.41.0
+  version: 2.40.5
  condition: argo.rollouts.enabled
  values:
  - ../values/argo/values/rollouts.yaml.gotmpl
@@ -43,7 +43,7 @@ releases:
 - name: argo-workflows
  namespace: argocd
  chart: argo/argo-workflows
-  version: 1.0.23
+  version: 0.45.27
  condition: argo.workflows.enabled
  missingFileHandler: Info
 - name: manifests
@@ -66,3 +66,4 @@ releases:
    - '{{`{{ .Environment.Name }}`}}'
    - ../values/argo/manifests
    - _argo
+
@@ -1,46 +0,0 @@
-# yaml-language-server: $schema=https://www.schemastore.org/helmfile.json
-
-bases:
- - ../envs/environments.yaml.gotmpl
-
-repositories:
- name: catalyst
-  oci: true
-  url: 'public.ecr.aws/diagrid'
-
-commonLabels:
-  tier: system
-
-releases:
- name: catalyst
-  namespace: cra-agent
-  chart: catalyst/catalyst
-  version: 1.47.0
-  condition: catalyst.enabled
-  values:
-  - ../values/catalyst/values/values.yaml
-  - ../values/catalyst/values/values-{{ .Environment.Name }}.yaml
-  postRenderer: ../bin/kustomizer
-  postRendererArgs:
-  - ../values/catalyst/kustomize/{{ .Environment.Name }}
-  missingFileHandler: Info
- name: manifests
-  namespace: cra-agent
-  chart: manifests
-  condition: catalyst.enabled
-  missingFileHandler: Info
-  values:
-  - ../values/env.yaml
-  - ../values/env-{{ requiredEnv "ARGOCD_ENV_CLUSTER_NAME" }}.yaml
-  - ../values/catalyst/env.yaml.gotmpl
-  - ../values/catalyst/env-{{ requiredEnv "ARGOCD_ENV_CLUSTER_NAME" }}.yaml.gotmpl
-  hooks:
-  - events: [ prepare, cleanup ]
-    showlogs: true
-    command: ../bin/helmify
-    args:
-    - '{{`{{ if eq .Event.Name "prepare" }}build{{ else }}clean{{ end }}`}}'
-    - '{{`{{ .Release.Chart }}`}}'
-    - '{{`{{ .Environment.Name }}`}}'
-    - ../values/catalyst/manifests
-    - manifests
@@ -13,7 +13,7 @@ releases:
 - name: cert-manager
  namespace: cert-manager
  chart: cert-manager/cert-manager
-  version: v1.20.2
+  version: v1.19.2
  condition: cert_manager.enabled
  values:
  - ../values/cert-manager/values/cert-manager.yaml.gotmpl
@@ -3,8 +3,7 @@ bases:

 repositories:
 - name: cilium
-  oci: true
-  url: 'quay.io/cilium/charts'
+  url: 'https://helm.cilium.io'

 commonLabels:
  tier: system
@@ -16,11 +15,11 @@ releases:
 - name: cilium
  namespace: kube-system
  chart: cilium/cilium
-  version: {{ if eq (requiredEnv "ARGOCD_ENV_CLUSTER_NAME") "hel1" }}1.19.1{{ else if eq (requiredEnv "ARGOCD_ENV_CLUSTER_NAME") "ekman" }}1.19.1{{ else }}1.16.19{{ end }}
+  version: 1.16.2
  condition: cilium.enabled
  values:
  - ../values/cilium/values/cilium.yaml.gotmpl
-  - ../values/cilium/values/cilium-{{ requiredEnv "ARGOCD_ENV_CLUSTER_NAME" }}.yaml.gotmpl
+  - ../values/cilium/values/cilium-{{ .Environment.Name }}.yaml.gotmpl
  missingFileHandler: Info
 - name: manifests
  namespace: cilium
@@ -56,3 +55,4 @@ releases:
    - '{{`{{ .Environment.Name }}`}}'
    - ../values/cilium/cilium-manifests
    - manifests
+
@@ -1,53 +0,0 @@
-bases:
- - ../envs/environments.yaml.gotmpl
-
-repositories:
- name: clickhouse
-  url: ghcr.io/clickhouse
-  oci: true
-
-commonLabels:
-  tier: system
-
-releases:
- name: clickhouse-operator
-  namespace: clickhouse
-  chart: clickhouse/clickhouse-operator-helm
-  version: 0.0.6
-  condition: clickhouse.enabled
-  values:
-  - ../values/clickhouse/values/operator.yaml.gotmpl
-  missingFileHandler: Info
- name: clickhouse-cluster
-  namespace: clickhouse
-  chart: clickhouse/clickhouse-cluster-helm
-  version: 0.0.6
-  condition: clickhouse.enabled
-  needs:
-  - clickhouse/clickhouse-operator
-  values:
-  - ../values/clickhouse/values/cluster.yaml.gotmpl
-  postRenderer: ../bin/kustomizer
-  postRendererArgs:
-  - ../values/clickhouse/kustomize/{{ .Environment.Name }}
-  missingFileHandler: Info
- name: manifests
-  namespace: clickhouse
-  chart: manifests
-  condition: clickhouse.enabled
-  missingFileHandler: Info
-  values:
-  - ../values/env.yaml
-  - ../values/env-{{ requiredEnv "ARGOCD_ENV_CLUSTER_NAME" }}.yaml
-  - ../values/clickhouse/env.yaml.gotmpl
-  - ../values/clickhouse/env-{{ requiredEnv "ARGOCD_ENV_CLUSTER_NAME" }}.yaml.gotmpl
-  hooks:
-  - events: [ prepare, cleanup ]
-    showlogs: true
-    command: ../bin/helmify
-    args:
-    - '{{`{{ if eq .Event.Name "prepare" }}build{{ else }}clean{{ end }}`}}'
-    - '{{`{{ .Release.Chart }}`}}'
-    - '{{`{{ .Environment.Name }}`}}'
-    - ../values/clickhouse/manifests
-    - manifests
@@ -6,7 +6,7 @@ commonLabels:

 releases:
 - name: docs
-  namespace: docs
+  namespace: {{ .Environment.Name }}-docs
  chart: ../charts/docs
  condition: docs.enabled
  values:
@@ -17,7 +17,7 @@ releases:
  - ../values/docs/kustomize/{{ .Environment.Name }}
  missingFileHandler: Info
 - name: manifests
-  namespace: docs
+  namespace: {{ .Environment.Name }}-docs
  chart: manifests
  condition: docs.enabled
  missingFileHandler: Info
@@ -13,7 +13,7 @@ releases:
 - name: dragonfly
  namespace: dragonfly
  chart: dragonfly/dragonfly-operator
-  version: v1.6.1
+  version: v1.3.1
  condition: dragonfly.enabled
  values:
  - ../values/dragonfly/values/dragonfly.yaml.gotmpl
@@ -12,7 +12,7 @@ releases:
 - name: gatus
  namespace: uptime
  chart: gatus/gatus
-  version: 1.5.0
+  version: 1.4.5
  condition: gatus.enabled
  values:
  - ../values/gatus/values/values.yaml
@@ -13,7 +13,7 @@ releases:
 - name: gitea
  namespace: gitea
  chart: gitea/gitea
-  version: 12.6.0
+  version: 12.5.0
  condition: gitea.enabled
  values:
  - ../values/gitea/values/values.yaml
@@ -2,9 +2,8 @@ bases:
 - ../envs/environments.yaml.gotmpl

 repositories:
- name: gabe565
-  oci: true
-  url: ghcr.io/gabe565/charts
+- name: headscale
+  url: https://charts.gabe565.com

 commonLabels:
  tier: system
@@ -12,8 +11,7 @@ commonLabels:
 releases:
 - name: headscale-router
  namespace: headscale
-  chart: gabe565/headscale
-  version: 0.16.0
+  chart: headscale/headscale
  condition: headscale.enabled
  values:
  - ../values/headscale-router/values/values.yaml
@@ -2,9 +2,8 @@ bases:
 - ../envs/environments.yaml.gotmpl

 repositories:
- name: gabe565
-  oci: true
-  url: ghcr.io/gabe565/charts
+- name: headscale
+  url: https://charts.gabe565.com

 commonLabels:
  tier: system
@@ -12,8 +11,7 @@ commonLabels:
 releases:
 - name: headscale
  namespace: headscale
-  chart: gabe565/headscale
-  version: 0.16.0
+  chart: headscale/headscale
  condition: headscale.enabled
  values:
  - ../values/headscale/values/values.yaml
@@ -1,27 +0,0 @@
-bases:
- - ../envs/environments.yaml.gotmpl
-
-commonLabels:
-  tier: system
-
-releases:
- name: manifests
-  namespace: ingest
-  chart: manifests
-  condition: ingest.enabled
-  missingFileHandler: Info
-  values:
-  - ../values/env.yaml
-  - ../values/env-{{ requiredEnv "ARGOCD_ENV_CLUSTER_NAME" }}.yaml
-  - ../values/ingest/env.yaml.gotmpl
-  - ../values/ingest/env-{{ requiredEnv "ARGOCD_ENV_CLUSTER_NAME" }}.yaml.gotmpl
-  hooks:
-  - events: [ prepare, cleanup ]
-    showlogs: true
-    command: ../bin/helmify
-    args:
-    - '{{`{{ if eq .Event.Name "prepare" }}build{{ else }}clean{{ end }}`}}'
-    - '{{`{{ .Release.Chart }}`}}'
-    - '{{`{{ .Environment.Name }}`}}'
-    - ../values/ingest/manifests
-    - manifests
@@ -1,44 +0,0 @@
-bases:
- - ../envs/environments.yaml.gotmpl
-
-repositories:
- name: haproxytech
-  oci: true
-  url: 'ghcr.io/haproxytech/helm-charts'
-
-commonLabels:
-  tier: system
-
-releases:
- name: ingress-haproxy
-  namespace: ingress-haproxy
-  chart: haproxytech/kubernetes-ingress
-  version: 1.52.1
-  condition: haproxy.enabled
-  values:
-  - ../values/ingress-haproxy/values/ingress-haproxy.yaml.gotmpl
-  - ../values/ingress-haproxy/values/ingress-haproxy-{{ .Environment.Name }}.yaml.gotmpl
-  postRenderer: ../bin/kustomizer
-  postRendererArgs:
-  - ../values/ingress-haproxy/kustomize/{{ .Environment.Name }}
-  missingFileHandler: Info
- name: manifests
-  namespace: ingress-haproxy
-  chart: manifests
-  condition: haproxy.enabled
-  missingFileHandler: Info
-  values:
-  - ../values/env.yaml
-  - ../values/env-{{ requiredEnv "ARGOCD_ENV_CLUSTER_NAME" }}.yaml
-  - ../values/ingress-haproxy/env.yaml.gotmpl
-  - ../values/ingress-haproxy/env-{{ requiredEnv "ARGOCD_ENV_CLUSTER_NAME" }}.yaml.gotmpl
-  hooks:
-  - events: [ prepare, cleanup ]
-    showlogs: true
-    command: ../bin/helmify
-    args:
-    - '{{`{{ if eq .Event.Name "prepare" }}build{{ else }}clean{{ end }}`}}'
-    - '{{`{{ .Release.Chart }}`}}'
-    - '{{`{{ .Environment.Name }}`}}'
-    - ../values/ingress-haproxy/manifests
-    - manifests
@@ -12,7 +12,7 @@ releases:
 - name: ingress-nginx
  namespace: ingress-nginx
  chart: ingress-nginx/ingress-nginx
-  version: 4.15.1
+  version: 4.14.1
  condition: nginx.enabled
  values:
  - ../values/ingress-nginx/values/ingress-nginx.yaml.gotmpl
@@ -1,41 +0,0 @@
-bases:
- - ../envs/environments.yaml.gotmpl
-
-repositories:
- name: jobset
-  oci: true
-  url: registry.k8s.io/jobset/charts
-
-releases:
- name: jobset
-  namespace: jobset-system
-  chart: jobset/jobset
-  version: 0.11.1
-  condition: jobset.enabled
-  values:
-  - ../values/jobset/values/jobset.yaml.gotmpl
-  - ../values/jobset/values/jobset-{{ .Environment.Name }}.yaml.gotmpl
-  postRenderer: ../bin/kustomizer
-  postRendererArgs:
-  - ../values/jobset/kustomize/{{ .Environment.Name }}
-  missingFileHandler: Info
- name: manifests
-  namespace: jobset-system
-  chart: manifests
-  condition: jobset.enabled
-  missingFileHandler: Info
-  values:
-  - ../values/env.yaml
-  - ../values/env-{{ requiredEnv "ARGOCD_ENV_CLUSTER_NAME" }}.yaml
-  - ../values/jobset/env.yaml.gotmpl
-  - ../values/jobset/env-{{ requiredEnv "ARGOCD_ENV_CLUSTER_NAME" }}.yaml.gotmpl
-  hooks:
-  - events: [ prepare, cleanup ]
-    showlogs: true
-    command: ../bin/helmify
-    args:
-    - '{{`{{ if eq .Event.Name "prepare" }}build{{ else }}clean{{ end }}`}}'
-    - '{{`{{ .Release.Chart }}`}}'
-    - '{{`{{ .Environment.Name }}`}}'
-    - ../values/jobset/manifests
-    - manifests
@@ -12,7 +12,7 @@ releases:
 - name: {{ .Environment.Name }}-keycloak
  namespace: keycloak
  chart: bitnami/keycloak
-  version: 25.2.0
+  version: 24.0.2
  condition: keycloak.enabled
  values:
  - ../values/keycloak/values/values.yaml
@@ -8,7 +8,7 @@ releases:
 - name: kueue
  namespace: kueue-system
  chart: oci://registry.k8s.io/kueue/charts/kueue
-  version: 0.18.1
+  version: 0.15.0
  condition: kueue.enabled
  values:
  - ../values/kueue/values/values.yaml
@@ -15,7 +15,7 @@ releases:
 - name: kyverno
  namespace: kyverno
  chart: kyverno/kyverno
-  version: 3.8.1
+  version: 3.6.1
  condition: kyverno.enabled
  values:
  - ../values/kyverno/values/kyverno.yaml.gotmpl
@@ -12,7 +12,7 @@ releases:
 - name: loki
  namespace: loki
  chart: loki/loki
-  version: 7.0.0
+  version: 6.42.0
  condition: loki.enabled
  values:
  - ../values/loki/values/loki.yaml.gotmpl
@@ -6,7 +6,7 @@ commonLabels:

 releases:
 - name: makai
-  namespace: makai
+  namespace: {{ .Environment.Name }}-makai
  chart: ../charts/makai
  condition: makai.enabled
  values:
@@ -17,7 +17,7 @@ releases:
  - ../values/makai/kustomize/{{ .Environment.Name }}
  missingFileHandler: Info
 - name: manifests
-  namespace: makai
+  namespace: {{ .Environment.Name }}-makai
  chart: manifests
  condition: makai.enabled
  missingFileHandler: Info
@@ -12,7 +12,7 @@ releases:
 - name: mariadb-operator
  namespace: mariadb-operator
  chart: mariadb-operator/mariadb-operator
-  version: 26.3.0
+  version: 25.10.3
  condition: mariadb_operator.enabled
  values:
  - ../values/mariadb-operator/values/mariadb-operator.yaml.gotmpl
@@ -12,7 +12,7 @@ releases:
 - name: metrics-server
  namespace: kube-system
  chart: metrics-server/metrics-server
-  version: 3.13.1
+  version: 3.13.0
  condition: metrics_server.enabled
  values:
  - ../values/metrics-server/values/metrics-server.yaml.gotmpl
@@ -1,27 +0,0 @@
-bases:
- - ../envs/environments.yaml.gotmpl
-
-commonLabels:
-  tier: system
-
-releases:
- name: manifests
-  namespace: niks3
-  chart: manifests
-  condition: niks3.enabled
-  missingFileHandler: Info
-  values:
-  - ../values/env.yaml
-  - ../values/env-{{ requiredEnv "ARGOCD_ENV_CLUSTER_NAME" }}.yaml
-  - ../values/niks3/env.yaml.gotmpl
-  - ../values/niks3/env-{{ requiredEnv "ARGOCD_ENV_CLUSTER_NAME" }}.yaml.gotmpl
-  hooks:
-  - events: [ prepare, cleanup ]
-    showlogs: true
-    command: ../bin/helmify
-    args:
-    - '{{`{{ if eq .Event.Name "prepare" }}build{{ else }}clean{{ end }}`}}'
-    - '{{`{{ .Release.Chart }}`}}'
-    - '{{`{{ .Environment.Name }}`}}'
-    - ../values/niks3/manifests
-    - manifests
@@ -16,7 +16,7 @@ releases:
  namespace: {{ .Environment.Name }}-openfga
  {{- end }}
  chart: openfga/openfga
-  version: 0.3.10
+  version: 0.2.50
  condition: openfga.enabled
  values:
  - ../values/openfga/values/values.yaml
@@ -12,10 +12,10 @@ releases:
 - name: opentelemetry-collector
  namespace: otel
  chart: open-telemetry/opentelemetry-collector
-  version: 0.159.1
+  version: 0.142.1
  condition: otel.enabled
  values:
-  - ../values/opentelemetry-collector/values/values.yaml.gotmpl
+  - ../values/opentelemetry-collector/values/values.yaml
  - ../values/opentelemetry-collector/values/values-{{ .Environment.Name }}.yaml
  postRenderer: ../bin/kustomizer
  postRendererArgs:
@@ -15,7 +15,7 @@ releases:
 - name: postgres-operator
  namespace: cnpg
  chart: cloudnative-pg/cloudnative-pg
-  version: 0.28.2
+  version: 0.27.0
  condition: postgres_operator.enabled
  values:
  - ../values/postgres-operator/values/postgres-operator.yaml.gotmpl
@@ -27,7 +27,7 @@ releases:
 - name: plugin-barman-cloud
  namespace: cnpg
  chart: cloudnative-pg/plugin-barman-cloud
-  version: 0.7.0
+  version: 0.3.1
  condition: postgres_operator.enabled
  values:
  - ../values/postgres-operator/values/plugin-barman-cloud.yaml.gotmpl
@@ -15,7 +15,7 @@ releases:
 - name: prometheus
  namespace: prometheus
  chart: prometheus/kube-prometheus-stack
-  version: 86.3.2
+  version: 72.7.0
  condition: prometheus.enabled
  values:
  - ../values/prometheus/values/prometheus.yaml.gotmpl
@@ -1,48 +0,0 @@
-bases:
- - ../envs/environments.yaml.gotmpl
-
-commonLabels:
-  tier: system
-
-releases:
- name: proteus
-  namespace: proteus
-  chart: ../charts/proteus
-  condition: proteus.enabled
-  values:
-  - ../values/proteus/values/values-prod.yaml
-  missingFileHandler: Info
- name: proteus-staging
-  namespace: proteus
-  chart: ../charts/proteus
-  condition: proteus.enabled
-  values:
-  - ../values/proteus/values/values-staging.yaml
-  missingFileHandler: Info
- name: proteus-beta
-  namespace: proteus
-  chart: ../charts/proteus
-  condition: proteus.enabled
-  values:
-  - ../values/proteus/values/values-beta.yaml
-  missingFileHandler: Info
- name: manifests
-  namespace: proteus
-  chart: manifests
-  condition: proteus.enabled
-  missingFileHandler: Info
-  values:
-  - ../values/env.yaml
-  - ../values/env-{{ requiredEnv "ARGOCD_ENV_CLUSTER_NAME" }}.yaml
-  - ../values/proteus/env.yaml.gotmpl
-  - ../values/proteus/env-{{ requiredEnv "ARGOCD_ENV_CLUSTER_NAME" }}.yaml.gotmpl
-  hooks:
-  - events: [ prepare, cleanup ]
-    showlogs: true
-    command: ../bin/helmify
-    args:
-    - '{{`{{ if eq .Event.Name "prepare" }}build{{ else }}clean{{ end }}`}}'
-    - '{{`{{ .Release.Chart }}`}}'
-    - '{{`{{ .Environment.Name }}`}}'
-    - ../values/proteus/manifests
-    - manifests
@@ -13,7 +13,7 @@ releases:
 - name: slurm-operator
  namespace: slinky
  chart: slurm-operator/slurm-operator
-  version: 1.0.3
+  version: 0.4.1
  condition: slurm_operator.enabled
  values:
  - ../values/slurm-operator/values/slurm-operator.yaml.gotmpl
@@ -13,7 +13,7 @@ releases:
 - name: slurm
  namespace: slurm
  chart: slurm/slurm
-  version: 1.0.3
+  version: 0.4.1
  condition: slurm.enabled
  values:
  - ../values/slurm/values/slurm.yaml.gotmpl
--- a/Show More
+++ b/Show More