Skip to content

feat(container)!: Update image app-template ( 4.6.2 ➔ 5.0.1 )#3203

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/app-template-5.x
Open

feat(container)!: Update image app-template ( 4.6.2 ➔ 5.0.1 )#3203
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/app-template-5.x

Conversation

@renovate

@renovate renovate Bot commented May 4, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Update Change
app-template major 4.6.25.0.1

Release Notes

bjw-s-labs/helm-charts (app-template)

v5.0.1

Changelog:
Changed

v5.0.0

Changelog:
Changed

Configuration

📅 Schedule: (in timezone America/New_York)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@github-actions

github-actions Bot commented May 4, 2026

Copy link
Copy Markdown

qgr1-cluster-0 - kustomization

--- k8s/base/infra/unifi-os-server Kustomization: flux-system/infra-unifi-os-server HelmRelease: infra/unifi-os-server

+++ k8s/base/infra/unifi-os-server Kustomization: flux-system/infra-unifi-os-server HelmRelease: infra/unifi-os-server

@@ -12,13 +12,13 @@

     spec:
       chart: app-template
       sourceRef:
         kind: HelmRepository
         name: bjw-s
         namespace: flux-system
-      version: 4.6.2
+      version: 5.0.1
   interval: 10m
   values:
     controllers:
       unifi-os-server:
         annotations:
           secret.reloader.stakater.com/reload: unifi-os-server-tls
--- k8s/base/home/esphome Kustomization: flux-system/home-esphome HelmRelease: home/esphome

+++ k8s/base/home/esphome Kustomization: flux-system/home-esphome HelmRelease: home/esphome

@@ -12,13 +12,13 @@

     spec:
       chart: app-template
       sourceRef:
         kind: HelmRepository
         name: bjw-s
         namespace: flux-system
-      version: 4.6.2
+      version: 5.0.1
   interval: 10m
   values:
     controllers:
       esphome:
         containers:
           app:
--- k8s/base/home/home-assistant-nwk3 Kustomization: flux-system/home-home-assistant-nwk3 HelmRelease: home/home-assistant-nwk3

+++ k8s/base/home/home-assistant-nwk3 Kustomization: flux-system/home-home-assistant-nwk3 HelmRelease: home/home-assistant-nwk3

@@ -12,13 +12,13 @@

     spec:
       chart: app-template
       sourceRef:
         kind: HelmRepository
         name: bjw-s
         namespace: flux-system
-      version: 4.6.2
+      version: 5.0.1
   interval: 10m
   values:
     controllers:
       home-assistant:
         annotations:
           reloader.stakater.com/auto: 'true'
--- k8s/base/media/qui Kustomization: flux-system/media-qui HelmRelease: media/qui

+++ k8s/base/media/qui Kustomization: flux-system/media-qui HelmRelease: media/qui

@@ -12,13 +12,13 @@

     spec:
       chart: app-template
       sourceRef:
         kind: HelmRepository
         name: bjw-s
         namespace: flux-system
-      version: 4.6.2
+      version: 5.0.1
   install:
     remediation:
       retries: 3
   interval: 30m
   uninstall:
     keepHistory: false
--- k8s/base/media/autobrr Kustomization: flux-system/media-autobrr HelmRelease: media/autobrr

+++ k8s/base/media/autobrr Kustomization: flux-system/media-autobrr HelmRelease: media/autobrr

@@ -13,13 +13,13 @@

     spec:
       chart: app-template
       sourceRef:
         kind: HelmRepository
         name: bjw-s
         namespace: flux-system
-      version: 4.6.2
+      version: 5.0.1
   install:
     createNamespace: true
     remediation:
       retries: 50
     timeout: 15m
   interval: 30m
--- k8s/base/media/jellyfin Kustomization: flux-system/media-jellyfin HelmRelease: media/jellyfin

+++ k8s/base/media/jellyfin Kustomization: flux-system/media-jellyfin HelmRelease: media/jellyfin

@@ -13,13 +13,13 @@

     spec:
       chart: app-template
       sourceRef:
         kind: HelmRepository
         name: bjw-s
         namespace: flux-system
-      version: 4.6.2
+      version: 5.0.1
   install:
     createNamespace: true
     remediation:
       retries: 50
     timeout: 15m
   interval: 30m
--- k8s/base/media/plex Kustomization: flux-system/media-plex HelmRelease: media/plex

+++ k8s/base/media/plex Kustomization: flux-system/media-plex HelmRelease: media/plex

@@ -13,13 +13,13 @@

     spec:
       chart: app-template
       sourceRef:
         kind: HelmRepository
         name: bjw-s
         namespace: flux-system
-      version: 4.6.2
+      version: 5.0.1
   install:
     createNamespace: true
     remediation:
       retries: 50
     timeout: 15m
   interval: 30m
--- k8s/base/media/nzbget Kustomization: flux-system/media-nzbget HelmRelease: media/nzbget

+++ k8s/base/media/nzbget Kustomization: flux-system/media-nzbget HelmRelease: media/nzbget

@@ -13,13 +13,13 @@

     spec:
       chart: app-template
       sourceRef:
         kind: HelmRepository
         name: bjw-s
         namespace: flux-system
-      version: 4.6.2
+      version: 5.0.1
   install:
     createNamespace: true
     remediation:
       retries: 50
     timeout: 15m
   interval: 30m
--- k8s/base/media/bazarr Kustomization: flux-system/media-bazarr HelmRelease: media/bazarr

+++ k8s/base/media/bazarr Kustomization: flux-system/media-bazarr HelmRelease: media/bazarr

@@ -13,13 +13,13 @@

     spec:
       chart: app-template
       sourceRef:
         kind: HelmRepository
         name: bjw-s
         namespace: flux-system
-      version: 4.6.2
+      version: 5.0.1
   install:
     createNamespace: true
     remediation:
       retries: 50
     timeout: 15m
   interval: 30m
--- k8s/base/networking/cloudflare-tunnel Kustomization: flux-system/networking-cloudflare-tunnel HelmRelease: networking/cloudflare-tunnel

+++ k8s/base/networking/cloudflare-tunnel Kustomization: flux-system/networking-cloudflare-tunnel HelmRelease: networking/cloudflare-tunnel

@@ -13,13 +13,13 @@

       chart: app-template
       interval: 10m
       sourceRef:
         kind: HelmRepository
         name: bjw-s
         namespace: flux-system
-      version: 4.6.2
+      version: 5.0.1
   interval: 1h
   values:
     configMaps:
       config:
         data:
           config.yaml: |-
--- k8s/base/media/qbittorrent Kustomization: flux-system/media-qbittorrent HelmRelease: media/qbittorrent

+++ k8s/base/media/qbittorrent Kustomization: flux-system/media-qbittorrent HelmRelease: media/qbittorrent

@@ -13,13 +13,13 @@

     spec:
       chart: app-template
       sourceRef:
         kind: HelmRepository
         name: bjw-s
         namespace: flux-system
-      version: 4.6.2
+      version: 5.0.1
   install:
     createNamespace: true
     remediation:
       retries: 50
     timeout: 15m
   interval: 30m
--- k8s/base/media/cross-seed Kustomization: flux-system/media-cross-seed HelmRelease: media/cross-seed

+++ k8s/base/media/cross-seed Kustomization: flux-system/media-cross-seed HelmRelease: media/cross-seed

@@ -13,13 +13,13 @@

     spec:
       chart: app-template
       sourceRef:
         kind: HelmRepository
         name: bjw-s
         namespace: flux-system
-      version: 4.6.2
+      version: 5.0.1
   install:
     createNamespace: true
     remediation:
       retries: 50
     timeout: 15m
   interval: 30m
--- k8s/base/media/prowlarr Kustomization: flux-system/media-prowlarr HelmRelease: media/prowlarr

+++ k8s/base/media/prowlarr Kustomization: flux-system/media-prowlarr HelmRelease: media/prowlarr

@@ -13,13 +13,13 @@

     spec:
       chart: app-template
       sourceRef:
         kind: HelmRepository
         name: bjw-s
         namespace: flux-system
-      version: 4.6.2
+      version: 5.0.1
   install:
     createNamespace: true
     remediation:
       retries: 50
     timeout: 15m
   interval: 30m
--- k8s/base/media/radarr Kustomization: flux-system/media-radarr HelmRelease: media/radarr

+++ k8s/base/media/radarr Kustomization: flux-system/media-radarr HelmRelease: media/radarr

@@ -13,13 +13,13 @@

     spec:
       chart: app-template
       sourceRef:
         kind: HelmRepository
         name: bjw-s
         namespace: flux-system
-      version: 4.6.2
+      version: 5.0.1
   install:
     createNamespace: true
     remediation:
       retries: 50
     timeout: 15m
   interval: 30m
--- k8s/base/media/seerr Kustomization: flux-system/media-seerr HelmRelease: media/seerr

+++ k8s/base/media/seerr Kustomization: flux-system/media-seerr HelmRelease: media/seerr

@@ -13,13 +13,13 @@

     spec:
       chart: app-template
       sourceRef:
         kind: HelmRepository
         name: bjw-s
         namespace: flux-system
-      version: 4.6.2
+      version: 5.0.1
   install:
     createNamespace: true
     remediation:
       retries: 50
     timeout: 15m
   interval: 30m
--- k8s/base/media/recyclarr Kustomization: flux-system/media-recyclarr HelmRelease: media/recyclarr

+++ k8s/base/media/recyclarr Kustomization: flux-system/media-recyclarr HelmRelease: media/recyclarr

@@ -13,13 +13,13 @@

     spec:
       chart: app-template
       sourceRef:
         kind: HelmRepository
         name: bjw-s
         namespace: flux-system
-      version: 4.6.2
+      version: 5.0.1
   install:
     createNamespace: true
     remediation:
       retries: 50
     timeout: 15m
   interval: 30m
--- k8s/base/media/sonarr Kustomization: flux-system/media-sonarr HelmRelease: media/sonarr

+++ k8s/base/media/sonarr Kustomization: flux-system/media-sonarr HelmRelease: media/sonarr

@@ -13,13 +13,13 @@

     spec:
       chart: app-template
       sourceRef:
         kind: HelmRepository
         name: bjw-s
         namespace: flux-system
-      version: 4.6.2
+      version: 5.0.1
   install:
     createNamespace: true
     remediation:
       retries: 50
     timeout: 15m
   interval: 30m
--- k8s/base/media/syncthing Kustomization: flux-system/media-syncthing HelmRelease: media/syncthing

+++ k8s/base/media/syncthing Kustomization: flux-system/media-syncthing HelmRelease: media/syncthing

@@ -13,13 +13,13 @@

     spec:
       chart: app-template
       sourceRef:
         kind: HelmRepository
         name: bjw-s
         namespace: flux-system
-      version: 4.6.2
+      version: 5.0.1
   install:
     createNamespace: true
     remediation:
       retries: 50
     timeout: 15m
   interval: 30m
--- k8s/base/media/tqm Kustomization: flux-system/media-tqm HelmRelease: media/tqm

+++ k8s/base/media/tqm Kustomization: flux-system/media-tqm HelmRelease: media/tqm

@@ -13,13 +13,13 @@

     spec:
       chart: app-template
       sourceRef:
         kind: HelmRepository
         name: bjw-s
         namespace: flux-system
-      version: 4.6.2
+      version: 5.0.1
   install:
     createNamespace: true
     remediation:
       retries: 50
     timeout: 15m
   interval: 30m

@github-actions

github-actions Bot commented May 4, 2026

Copy link
Copy Markdown

qgr1-cluster-0 - helmrelease

--- HelmRelease: home/home-assistant-nwk3 Deployment: home/home-assistant-nwk3

+++ HelmRelease: home/home-assistant-nwk3 Deployment: home/home-assistant-nwk3

@@ -26,14 +26,14 @@

       labels:
         app.kubernetes.io/controller: home-assistant
         app.kubernetes.io/instance: home-assistant-nwk3
         app.kubernetes.io/name: home-assistant-nwk3
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: home-assistant-nwk3
+      automountServiceAccountToken: false
       securityContext:
         fsGroup: 1000
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 1000
         runAsNonRoot: true
         runAsUser: 1000
--- HelmRelease: home/home-assistant-nwk3 ServiceAccount: home/home-assistant-nwk3

+++ HelmRelease: home/home-assistant-nwk3 ServiceAccount: home/home-assistant-nwk3

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: home-assistant-nwk3
+  labels:
+    app.kubernetes.io/instance: home-assistant-nwk3
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: home-assistant-nwk3
+  namespace: home
+
--- HelmRelease: home/esphome Deployment: home/esphome

+++ HelmRelease: home/esphome Deployment: home/esphome

@@ -24,14 +24,14 @@

       labels:
         app.kubernetes.io/controller: esphome
         app.kubernetes.io/instance: esphome
         app.kubernetes.io/name: esphome
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: esphome
+      automountServiceAccountToken: false
       securityContext:
         fsGroup: 2000
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 2000
         runAsUser: 2000
       hostIPC: false
--- HelmRelease: home/esphome ServiceAccount: home/esphome

+++ HelmRelease: home/esphome ServiceAccount: home/esphome

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: esphome
+  labels:
+    app.kubernetes.io/instance: esphome
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: esphome
+  namespace: home
+
--- HelmRelease: infra/unifi-os-server Deployment: infra/unifi-os-server

+++ HelmRelease: infra/unifi-os-server Deployment: infra/unifi-os-server

@@ -26,14 +26,14 @@

       labels:
         app.kubernetes.io/controller: unifi-os-server
         app.kubernetes.io/instance: unifi-os-server
         app.kubernetes.io/name: unifi-os-server
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: unifi-os-server
+      automountServiceAccountToken: false
       hostIPC: false
       hostNetwork: false
       hostPID: false
       dnsPolicy: ClusterFirst
       initContainers:
       - command:
--- HelmRelease: infra/unifi-os-server ServiceAccount: infra/unifi-os-server

+++ HelmRelease: infra/unifi-os-server ServiceAccount: infra/unifi-os-server

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: unifi-os-server
+  labels:
+    app.kubernetes.io/instance: unifi-os-server
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: unifi-os-server
+  namespace: infra
+
--- HelmRelease: media/autobrr StatefulSet: media/autobrr

+++ HelmRelease: media/autobrr StatefulSet: media/autobrr

@@ -28,14 +28,14 @@

       labels:
         app.kubernetes.io/controller: autobrr
         app.kubernetes.io/instance: autobrr
         app.kubernetes.io/name: autobrr
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: autobrr
+      automountServiceAccountToken: false
       securityContext:
         fsGroup: 1000
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 1000
         runAsNonRoot: true
         runAsUser: 1000
--- HelmRelease: media/autobrr ServiceAccount: media/autobrr

+++ HelmRelease: media/autobrr ServiceAccount: media/autobrr

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: autobrr
+  labels:
+    app.kubernetes.io/instance: autobrr
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: autobrr
+  namespace: media
+
--- HelmRelease: media/jellyfin StatefulSet: media/jellyfin

+++ HelmRelease: media/jellyfin StatefulSet: media/jellyfin

@@ -28,14 +28,14 @@

       labels:
         app.kubernetes.io/controller: jellyfin
         app.kubernetes.io/instance: jellyfin
         app.kubernetes.io/name: jellyfin
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: jellyfin
+      automountServiceAccountToken: false
       priorityClassName: media-cluster-critical
       securityContext:
         fsGroup: 1000
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 1000
         runAsNonRoot: true
--- HelmRelease: media/jellyfin ServiceAccount: media/jellyfin

+++ HelmRelease: media/jellyfin ServiceAccount: media/jellyfin

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: jellyfin
+  labels:
+    app.kubernetes.io/instance: jellyfin
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: jellyfin
+  namespace: media
+
--- HelmRelease: media/qbittorrent StatefulSet: media/qbittorrent

+++ HelmRelease: media/qbittorrent StatefulSet: media/qbittorrent

@@ -30,14 +30,14 @@

       labels:
         app.kubernetes.io/controller: qbittorrent
         app.kubernetes.io/instance: qbittorrent
         app.kubernetes.io/name: qbittorrent
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: qbittorrent
+      automountServiceAccountToken: false
       securityContext:
         fsGroup: 1000
         fsGroupChangePolicy: OnRootMismatch
         seccompProfile:
           type: RuntimeDefault
         supplementalGroups:
--- HelmRelease: media/qbittorrent ServiceAccount: media/qbittorrent

+++ HelmRelease: media/qbittorrent ServiceAccount: media/qbittorrent

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: qbittorrent
+  labels:
+    app.kubernetes.io/instance: qbittorrent
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: qbittorrent
+  namespace: media
+
--- HelmRelease: media/plex StatefulSet: media/plex

+++ HelmRelease: media/plex StatefulSet: media/plex

@@ -28,14 +28,14 @@

       labels:
         app.kubernetes.io/controller: plex
         app.kubernetes.io/instance: plex
         app.kubernetes.io/name: plex
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: plex
+      automountServiceAccountToken: false
       priorityClassName: media-cluster-critical
       securityContext:
         fsGroup: 1000
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 1000
         runAsNonRoot: true
--- HelmRelease: media/plex ServiceAccount: media/plex

+++ HelmRelease: media/plex ServiceAccount: media/plex

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: plex
+  labels:
+    app.kubernetes.io/instance: plex
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: plex
+  namespace: media
+
--- HelmRelease: media/qui StatefulSet: media/qui

+++ HelmRelease: media/qui StatefulSet: media/qui

@@ -28,14 +28,14 @@

       labels:
         app.kubernetes.io/controller: qui
         app.kubernetes.io/instance: qui
         app.kubernetes.io/name: qui
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: qui
+      automountServiceAccountToken: false
       securityContext:
         fsGroup: 1000
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 1000
         runAsNonRoot: true
         runAsUser: 1000
--- HelmRelease: media/qui ServiceAccount: media/qui

+++ HelmRelease: media/qui ServiceAccount: media/qui

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: qui
+  labels:
+    app.kubernetes.io/instance: qui
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: qui
+  namespace: media
+
--- HelmRelease: media/prowlarr StatefulSet: media/prowlarr

+++ HelmRelease: media/prowlarr StatefulSet: media/prowlarr

@@ -28,14 +28,14 @@

       labels:
         app.kubernetes.io/controller: prowlarr
         app.kubernetes.io/instance: prowlarr
         app.kubernetes.io/name: prowlarr
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: prowlarr
+      automountServiceAccountToken: false
       securityContext:
         fsGroup: 1000
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 1000
         runAsNonRoot: true
         runAsUser: 1000
--- HelmRelease: media/prowlarr ServiceAccount: media/prowlarr

+++ HelmRelease: media/prowlarr ServiceAccount: media/prowlarr

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: prowlarr
+  labels:
+    app.kubernetes.io/instance: prowlarr
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: prowlarr
+  namespace: media
+
--- HelmRelease: media/syncthing StatefulSet: media/syncthing

+++ HelmRelease: media/syncthing StatefulSet: media/syncthing

@@ -28,14 +28,14 @@

       labels:
         app.kubernetes.io/controller: syncthing
         app.kubernetes.io/instance: syncthing
         app.kubernetes.io/name: syncthing
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: syncthing
+      automountServiceAccountToken: false
       securityContext:
         fsGroup: 1000
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 1000
         runAsNonRoot: true
         runAsUser: 1000
--- HelmRelease: media/syncthing ServiceAccount: media/syncthing

+++ HelmRelease: media/syncthing ServiceAccount: media/syncthing

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: syncthing
+  labels:
+    app.kubernetes.io/instance: syncthing
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: syncthing
+  namespace: media
+
--- HelmRelease: media/cross-seed StatefulSet: media/cross-seed

+++ HelmRelease: media/cross-seed StatefulSet: media/cross-seed

@@ -28,14 +28,14 @@

       labels:
         app.kubernetes.io/controller: cross-seed
         app.kubernetes.io/instance: cross-seed
         app.kubernetes.io/name: cross-seed
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: cross-seed
+      automountServiceAccountToken: false
       securityContext:
         fsGroup: 1000
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 1000
         runAsNonRoot: true
         runAsUser: 1000
--- HelmRelease: media/cross-seed ServiceAccount: media/cross-seed

+++ HelmRelease: media/cross-seed ServiceAccount: media/cross-seed

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: cross-seed
+  labels:
+    app.kubernetes.io/instance: cross-seed
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: cross-seed
+  namespace: media
+
--- HelmRelease: media/radarr StatefulSet: media/radarr

+++ HelmRelease: media/radarr StatefulSet: media/radarr

@@ -28,14 +28,14 @@

       labels:
         app.kubernetes.io/controller: radarr
         app.kubernetes.io/instance: radarr
         app.kubernetes.io/name: radarr
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: radarr
+      automountServiceAccountToken: false
       securityContext:
         fsGroup: 1000
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 1000
         runAsNonRoot: true
         runAsUser: 1000
--- HelmRelease: media/radarr ServiceAccount: media/radarr

+++ HelmRelease: media/radarr ServiceAccount: media/radarr

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: radarr
+  labels:
+    app.kubernetes.io/instance: radarr
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: radarr
+  namespace: media
+
--- HelmRelease: media/sonarr StatefulSet: media/sonarr

+++ HelmRelease: media/sonarr StatefulSet: media/sonarr

@@ -28,14 +28,14 @@

       labels:
         app.kubernetes.io/controller: sonarr
         app.kubernetes.io/instance: sonarr
         app.kubernetes.io/name: sonarr
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: sonarr
+      automountServiceAccountToken: false
       securityContext:
         fsGroup: 1000
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 1000
         runAsNonRoot: true
         runAsUser: 1000
--- HelmRelease: media/sonarr ServiceAccount: media/sonarr

+++ HelmRelease: media/sonarr ServiceAccount: media/sonarr

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: sonarr
+  labels:
+    app.kubernetes.io/instance: sonarr
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: sonarr
+  namespace: media
+
--- HelmRelease: media/seerr StatefulSet: media/seerr

+++ HelmRelease: media/seerr StatefulSet: media/seerr

@@ -26,14 +26,14 @@

       labels:
         app.kubernetes.io/controller: seerr
         app.kubernetes.io/instance: seerr
         app.kubernetes.io/name: seerr
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: seerr
+      automountServiceAccountToken: false
       priorityClassName: media-cluster-critical
       securityContext:
         fsGroup: 1000
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 1000
         runAsNonRoot: true
--- HelmRelease: media/seerr ServiceAccount: media/seerr

+++ HelmRelease: media/seerr ServiceAccount: media/seerr

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: seerr
+  labels:
+    app.kubernetes.io/instance: seerr
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: seerr
+  namespace: media
+
--- HelmRelease: media/nzbget StatefulSet: media/nzbget

+++ HelmRelease: media/nzbget StatefulSet: media/nzbget

@@ -26,14 +26,14 @@

       labels:
         app.kubernetes.io/controller: nzbget
         app.kubernetes.io/instance: nzbget
         app.kubernetes.io/name: nzbget
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: nzbget
+      automountServiceAccountToken: false
       securityContext:
         fsGroup: 1000
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 1000
         runAsNonRoot: true
         runAsUser: 1000
--- HelmRelease: media/nzbget ServiceAccount: media/nzbget

+++ HelmRelease: media/nzbget ServiceAccount: media/nzbget

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: nzbget
+  labels:
+    app.kubernetes.io/instance: nzbget
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: nzbget
+  namespace: media
+
--- HelmRelease: media/tqm CronJob: media/tqm-orphaned

+++ HelmRelease: media/tqm CronJob: media/tqm-orphaned

@@ -25,14 +25,14 @@

           labels:
             app.kubernetes.io/controller: orphaned
             app.kubernetes.io/instance: tqm
             app.kubernetes.io/name: tqm
         spec:
           enableServiceLinks: false
-          serviceAccountName: default
-          automountServiceAccountToken: true
+          serviceAccountName: tqm
+          automountServiceAccountToken: false
           securityContext:
             fsGroup: 1000
             fsGroupChangePolicy: OnRootMismatch
             runAsGroup: 1000
             runAsNonRoot: true
             runAsUser: 1000
--- HelmRelease: media/tqm CronJob: media/tqm

+++ HelmRelease: media/tqm CronJob: media/tqm

@@ -25,14 +25,14 @@

           labels:
             app.kubernetes.io/controller: tqm
             app.kubernetes.io/instance: tqm
             app.kubernetes.io/name: tqm
         spec:
           enableServiceLinks: false
-          serviceAccountName: default
-          automountServiceAccountToken: true
+          serviceAccountName: tqm
+          automountServiceAccountToken: false
           securityContext:
             fsGroup: 1000
             fsGroupChangePolicy: OnRootMismatch
             runAsGroup: 1000
             runAsNonRoot: true
             runAsUser: 1000
--- HelmRelease: media/tqm ServiceAccount: media/tqm

+++ HelmRelease: media/tqm ServiceAccount: media/tqm

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: tqm
+  labels:
+    app.kubernetes.io/instance: tqm
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: tqm
+  namespace: media
+
--- HelmRelease: media/recyclarr CronJob: media/recyclarr

+++ HelmRelease: media/recyclarr CronJob: media/recyclarr

@@ -27,14 +27,14 @@

           labels:
             app.kubernetes.io/controller: recyclarr
             app.kubernetes.io/instance: recyclarr
             app.kubernetes.io/name: recyclarr
         spec:
           enableServiceLinks: false
-          serviceAccountName: default
-          automountServiceAccountToken: true
+          serviceAccountName: recyclarr
+          automountServiceAccountToken: false
           securityContext:
             fsGroup: 1000
             fsGroupChangePolicy: OnRootMismatch
             runAsGroup: 1000
             runAsNonRoot: true
             runAsUser: 1000
--- HelmRelease: media/recyclarr ServiceAccount: media/recyclarr

+++ HelmRelease: media/recyclarr ServiceAccount: media/recyclarr

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: recyclarr
+  labels:
+    app.kubernetes.io/instance: recyclarr
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: recyclarr
+  namespace: media
+
--- HelmRelease: media/bazarr StatefulSet: media/bazarr

+++ HelmRelease: media/bazarr StatefulSet: media/bazarr

@@ -26,14 +26,14 @@

       labels:
         app.kubernetes.io/controller: bazarr
         app.kubernetes.io/instance: bazarr
         app.kubernetes.io/name: bazarr
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: bazarr
+      automountServiceAccountToken: false
       securityContext:
         fsGroup: 1000
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 1000
         runAsNonRoot: true
         runAsUser: 1000
--- HelmRelease: media/bazarr ServiceAccount: media/bazarr

+++ HelmRelease: media/bazarr ServiceAccount: media/bazarr

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: bazarr
+  labels:
+    app.kubernetes.io/instance: bazarr
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: bazarr
+  namespace: media
+
--- HelmRelease: networking/cloudflare-tunnel Deployment: networking/cloudflare-tunnel

+++ HelmRelease: networking/cloudflare-tunnel Deployment: networking/cloudflare-tunnel

@@ -28,14 +28,14 @@

       labels:
         app.kubernetes.io/controller: cloudflare-tunnel
         app.kubernetes.io/instance: cloudflare-tunnel
         app.kubernetes.io/name: cloudflare-tunnel
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: cloudflare-tunnel
+      automountServiceAccountToken: false
       securityContext:
         runAsGroup: 1000
         runAsNonRoot: true
         runAsUser: 1000
       hostIPC: false
       hostNetwork: false
--- HelmRelease: networking/cloudflare-tunnel ServiceMonitor: networking/cloudflare-tunnel

+++ HelmRelease: networking/cloudflare-tunnel ServiceMonitor: networking/cloudflare-tunnel

@@ -6,13 +6,13 @@

   labels:
     app.kubernetes.io/instance: cloudflare-tunnel
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cloudflare-tunnel
   namespace: networking
 spec:
-  jobLabel: cloudflare-tunnel
+  jobLabel: app.kubernetes.io/name
   namespaceSelector:
     matchNames:
     - networking
   selector:
     matchLabels:
       app.kubernetes.io/service: cloudflare-tunnel
--- HelmRelease: networking/cloudflare-tunnel ServiceAccount: networking/cloudflare-tunnel

+++ HelmRelease: networking/cloudflare-tunnel ServiceAccount: networking/cloudflare-tunnel

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: cloudflare-tunnel
+  labels:
+    app.kubernetes.io/instance: cloudflare-tunnel
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: cloudflare-tunnel
+  namespace: networking
+

@renovate renovate Bot force-pushed the renovate/app-template-5.x branch from a1193ef to 44c2439 Compare May 14, 2026 21:34
@renovate renovate Bot changed the title feat(container)!: Update image app-template ( 4.6.2 ➔ 5.0.0 ) feat(container)!: Update image app-template ( 4.6.2 ➔ 5.0.1 ) May 14, 2026
@renovate renovate Bot force-pushed the renovate/app-template-5.x branch 2 times, most recently from 024b84a to 4488799 Compare June 16, 2026 02:26
@renovate renovate Bot force-pushed the renovate/app-template-5.x branch 2 times, most recently from f694d38 to 668755d Compare June 23, 2026 01:12
@renovate renovate Bot force-pushed the renovate/app-template-5.x branch from 668755d to 9e9dc26 Compare June 24, 2026 00:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants