chore(helm): update image docker.io/library/registry 2.8.3 → 3.0.0

[viserion-renovate]

This PR contains the following updates:

Package	Update	Change
docker.io/library/registry	major	->

Add the preset :preserveSemverRanges to your config if you don't want to pin your dependencies.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[viserion-renovate]

--- clusters/main/kubernetes/apps/docker-registry/app Kustomization: flux-system/docker-registry HelmRelease: docker-registry/docker-registry

+++ clusters/main/kubernetes/apps/docker-registry/app Kustomization: flux-system/docker-registry HelmRelease: docker-registry/docker-registry

@@ -1,70 +0,0 @@

----
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  labels:
-    kustomize.toolkit.fluxcd.io/name: docker-registry
-    kustomize.toolkit.fluxcd.io/namespace: flux-system
-  name: docker-registry
-  namespace: docker-registry
-spec:
-  chart:
-    spec:
-      chart: docker-registry
-      interval: 15m
-      sourceRef:
-        kind: HelmRepository
-        name: twuni
-        namespace: flux-system
-      version: 2.3.0
-  driftDetection:
-    mode: warn
-  install:
-    createNamespace: true
-    remediation:
-      retries: 3
-  interval: 15m
-  maxHistory: 3
-  timeout: 20m
-  uninstall:
-    keepHistory: false
-  upgrade:
-    cleanupOnFail: true
-    remediation:
-      retries: 3
-  values:
-    configData:
-      compatibility:
-        schema1:
-          enabled: true
-    image:
-      repository: docker.io/library/registry
-      tag: 2.8.3
-    ingress:
-      annotations:
-        cert-manager.io/cluster-issuer: le-prod
-        cert-manager.io/private-key-rotation-policy: Always
-      className: ''
-      enabled: true
-      hosts:
-      - dockerhub.${DOMAIN_0}
-      labels: {}
-      path: /
-      tls:
-      - hosts:
-        - dockerhub.${DOMAIN_0}
-        secretName: dockerhub-tls-0
-    persistence:
-      enabled: true
-      size: 100Gi
-    proxy:
-      enabled: true
-      password: ${DOCKERHUB_PASSWORD}
-      remoteurl: https://registry-1.docker.io
-      username: ${DOCKERHUB_USER}
-    service:
-      annotations:
-        metallb.universe.tf/loadBalancerIPs: ${DOCKERMIRROR_IP}
-      port: 5000
-      type: LoadBalancer
-
--- clusters/main/kubernetes/apps/docker-registry/app Kustomization: flux-system/docker-registry HelmRelease: minio/minio

+++ clusters/main/kubernetes/apps/docker-registry/app Kustomization: flux-system/docker-registry HelmRelease: minio/minio

@@ -0,0 +1,70 @@

+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  labels:
+    kustomize.toolkit.fluxcd.io/name: docker-registry
+    kustomize.toolkit.fluxcd.io/namespace: flux-system
+  name: minio
+  namespace: minio
+spec:
+  chart:
+    spec:
+      chart: docker-registry
+      interval: 15m
+      sourceRef:
+        kind: HelmRepository
+        name: twuni
+        namespace: flux-system
+      version: 2.3.0
+  driftDetection:
+    mode: warn
+  install:
+    createNamespace: true
+    remediation:
+      retries: 3
+  interval: 15m
+  maxHistory: 3
+  timeout: 20m
+  uninstall:
+    keepHistory: false
+  upgrade:
+    cleanupOnFail: true
+    remediation:
+      retries: 3
+  values:
+    configData:
+      compatibility:
+        schema1:
+          enabled: true
+    image:
+      repository: docker.io/library/registry
+      tag: 3.0.0
+    ingress:
+      annotations:
+        cert-manager.io/cluster-issuer: le-prod
+        cert-manager.io/private-key-rotation-policy: Always
+      className: ''
+      enabled: true
+      hosts:
+      - dockerhub.${DOMAIN_0}
+      labels: {}
+      path: /
+      tls:
+      - hosts:
+        - dockerhub.${DOMAIN_0}
+        secretName: dockerhub-tls-0
+    persistence:
+      enabled: true
+      size: 100Gi
+    proxy:
+      enabled: true
+      password: ${DOCKERHUB_PASSWORD}
+      remoteurl: https://registry-1.docker.io
+      username: ${DOCKERHUB_USER}
+    service:
+      annotations:
+        metallb.universe.tf/loadBalancerIPs: ${DOCKERMIRROR_IP}
+      port: 5000
+      type: LoadBalancer
+

[viserion-renovate]

--- HelmRelease: docker-registry/docker-registry ConfigMap: docker-registry/docker-registry-config

+++ HelmRelease: docker-registry/docker-registry ConfigMap: docker-registry/docker-registry-config

@@ -1,37 +0,0 @@

----
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: docker-registry-config
-  namespace: docker-registry
-  labels:
-    heritage: Helm
-    release: docker-registry
-data:
-  config.yml: |-
-    compatibility:
-      schema1:
-        enabled: true
-    health:
-      storagedriver:
-        enabled: true
-        interval: 10s
-        threshold: 3
-    http:
-      addr: :5000
-      debug:
-        addr: :5001
-        prometheus:
-          enabled: false
-          path: /metrics
-      headers:
-        X-Content-Type-Options:
-        - nosniff
-    log:
-      fields:
-        service: registry
-    storage:
-      cache:
-        blobdescriptor: inmemory
-    version: 0.1
-
--- HelmRelease: docker-registry/docker-registry PersistentVolumeClaim: docker-registry/docker-registry

+++ HelmRelease: docker-registry/docker-registry PersistentVolumeClaim: docker-registry/docker-registry

@@ -1,16 +0,0 @@

----
-kind: PersistentVolumeClaim
-apiVersion: v1
-metadata:
-  name: docker-registry
-  namespace: docker-registry
-  labels:
-    release: docker-registry
-    heritage: Helm
-spec:
-  accessModes:
-  - ReadWriteOnce
-  resources:
-    requests:
-      storage: 100Gi
-
--- HelmRelease: docker-registry/docker-registry Service: docker-registry/docker-registry

+++ HelmRelease: docker-registry/docker-registry Service: docker-registry/docker-registry

@@ -1,22 +0,0 @@

----
-apiVersion: v1
-kind: Service
-metadata:
-  name: docker-registry
-  namespace: docker-registry
-  labels:
-    release: docker-registry
-    heritage: Helm
-  annotations:
-    metallb.universe.tf/loadBalancerIPs: ${DOCKERMIRROR_IP}
-spec:
-  type: LoadBalancer
-  ports:
-  - port: 5000
-    protocol: TCP
-    name: http-5000
-    targetPort: 5000
-  selector:
-    app: docker-registry
-    release: docker-registry
-
--- HelmRelease: docker-registry/docker-registry Deployment: docker-registry/docker-registry

+++ HelmRelease: docker-registry/docker-registry Deployment: docker-registry/docker-registry

@@ -1,93 +0,0 @@

----
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: docker-registry
-  namespace: docker-registry
-  labels:
-    release: docker-registry
-    heritage: Helm
-spec:
-  selector:
-    matchLabels:
-      app: docker-registry
-      release: docker-registry
-  replicas: 1
-  minReadySeconds: 5
-  template:
-    metadata:
-      labels:
-        release: docker-registry
-      annotations:
-        checksum/secret: 2fce886d9c51a5f4351f47c01c91df5a8780147eb65ada81903a4fffc4e6bc07
-    spec:
-      securityContext:
-        fsGroup: 1000
-        fsGroupChangePolicy: Always
-        supplementalGroups: []
-        sysctls: []
-      containers:
-      - name: docker-registry
-        image: docker.io/library/registry:2.8.3
-        imagePullPolicy: IfNotPresent
-        command:
-        - /bin/registry
-        - serve
-        - /etc/docker/registry/config.yml
-        ports:
-        - containerPort: 5000
-        livenessProbe:
-          httpGet:
-            path: /
-            port: 5000
-        readinessProbe:
-          httpGet:
-            path: /
-            port: 5000
-        resources: {}
-        env:
-        - name: REGISTRY_HTTP_SECRET
-          valueFrom:
-            secretKeyRef:
-              name: docker-registry-secret
-              key: haSharedSecret
-        - name: REGISTRY_STORAGE_FILESYSTEM_ROOTDIRECTORY
-          value: /var/lib/registry
-        - name: REGISTRY_PROXY_REMOTEURL
-          value: https://registry-1.docker.io
-        - name: REGISTRY_PROXY_USERNAME
-          valueFrom:
-            secretKeyRef:
-              name: docker-registry-secret
-              key: proxyUsername
-        - name: REGISTRY_PROXY_PASSWORD
-          valueFrom:
-            secretKeyRef:
-              name: docker-registry-secret
-              key: proxyPassword
-        securityContext:
-          allowPrivilegeEscalation: false
-          capabilities:
-            drop:
-            - ALL
-          privileged: false
-          readOnlyRootFilesystem: true
-          runAsGroup: 1000
-          runAsNonRoot: true
-          runAsUser: 1000
-          seLinuxOptions: {}
-          seccompProfile:
-            type: RuntimeDefault
-        volumeMounts:
-        - name: docker-registry-config
-          mountPath: /etc/docker/registry
-        - name: data
-          mountPath: /var/lib/registry/
-      volumes:
-      - name: docker-registry-config
-        configMap:
-          name: docker-registry-config
-      - name: data
-        persistentVolumeClaim:
-          claimName: docker-registry
-
--- HelmRelease: docker-registry/docker-registry Ingress: docker-registry/docker-registry

+++ HelmRelease: docker-registry/docker-registry Ingress: docker-registry/docker-registry

@@ -1,30 +0,0 @@

----
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: docker-registry
-  namespace: docker-registry
-  labels:
-    release: docker-registry
-    heritage: Helm
-  annotations:
-    cert-manager.io/cluster-issuer: le-prod
-    cert-manager.io/private-key-rotation-policy: Always
-spec:
-  ingressClassName: null
-  rules:
-  - host: dockerhub.${DOMAIN_0}
-    http:
-      paths:
-      - path: /
-        pathType: Prefix
-        backend:
-          service:
-            name: docker-registry
-            port:
-              number: 5000
-  tls:
-  - hosts:
-    - dockerhub.${DOMAIN_0}
-    secretName: dockerhub-tls-0
-