feat(container)!: Update ghcr.io/bjw-s-labs/helm/app-template ( 4.6.2 → 5.0.1 ) by renovate[bot] · Pull Request #321 · eivarin/Athena-Ops

renovate · 2026-05-09T00:28:42Z

This PR contains the following updates:

Package	Update	Change
ghcr.io/bjw-s-labs/helm/app-template	major	`4.6.2` → `5.0.1`

Release Notes

bjw-s-labs/helm-charts (ghcr.io/bjw-s-labs/helm/app-template)

`v5.0.1`

Changelog:

Fixed

Pod spec.serviceAccountName now properly uses the resolved name (including global.nameOverride) when auto-detecting a single serviceAccount.
Allow omitting namespace in route parentRefs.

Changed

Allow setting namespace field on rawResources.

`v5.0.0`

Changelog:

Changed

Upgraded the common library to v5.0.0
- Upgrade notes
- Detailed release notes

Configuration

📅 Schedule: (in timezone Europe/Lisbon)

Branch creation
- "every weekend"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

github-actions · 2026-05-09T00:29:14Z

--- kubernetes/flux Kustomization: flux-system/cluster OCIRepository: flux-system/app-template

+++ kubernetes/flux Kustomization: flux-system/cluster OCIRepository: flux-system/app-template

@@ -10,11 +10,11 @@

 spec:
   interval: 1h
   layerSelector:
     mediaType: application/vnd.cncf.helm.chart.content.v1.tar+gzip
     operation: copy
   ref:
-    tag: 4.6.2
+    tag: 5.0.1
   url: oci://ghcr.io/bjw-s-labs/helm/app-template
   verify:
     provider: cosign

github-actions · 2026-05-09T00:29:19Z

--- HelmRelease: flux-system/capacitor Deployment: flux-system/capacitor

+++ HelmRelease: flux-system/capacitor Deployment: flux-system/capacitor

@@ -28,13 +28,13 @@

         app.kubernetes.io/controller: app
         app.kubernetes.io/instance: capacitor
         app.kubernetes.io/name: capacitor
     spec:
       enableServiceLinks: false
       serviceAccountName: capacitor
-      automountServiceAccountToken: true
+      automountServiceAccountToken: false
       hostname: capacitor
       hostIPC: false
       hostNetwork: false
       hostPID: false
       dnsPolicy: ClusterFirst
       containers:
--- HelmRelease: default/atuin Deployment: default/atuin

+++ HelmRelease: default/atuin Deployment: default/atuin

@@ -27,14 +27,14 @@

       labels:
         app.kubernetes.io/controller: app
         app.kubernetes.io/instance: atuin
         app.kubernetes.io/name: atuin
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: atuin
+      automountServiceAccountToken: false
       securityContext:
         fsGroup: 2000
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 2000
         runAsNonRoot: true
         runAsUser: 2000
--- HelmRelease: default/atuin ServiceAccount: default/atuin

+++ HelmRelease: default/atuin ServiceAccount: default/atuin

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: atuin
+  labels:
+    app.kubernetes.io/instance: atuin
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: atuin
+  namespace: default
+
--- HelmRelease: databases/dragonfly-operator Deployment: databases/dragonfly-operator

+++ HelmRelease: databases/dragonfly-operator Deployment: databases/dragonfly-operator

@@ -29,13 +29,13 @@

         app.kubernetes.io/instance: dragonfly-operator
         app.kubernetes.io/name: dragonfly-operator
         control-plane: controller-manager
     spec:
       enableServiceLinks: false
       serviceAccountName: dragonfly-operator
-      automountServiceAccountToken: true
+      automountServiceAccountToken: false
       securityContext:
         runAsGroup: 65534
         runAsNonRoot: true
         runAsUser: 65534
         seccompProfile:
           type: RuntimeDefault
--- HelmRelease: databases/dragonfly-operator ServiceMonitor: databases/dragonfly-operator

+++ HelmRelease: databases/dragonfly-operator ServiceMonitor: databases/dragonfly-operator

@@ -6,13 +6,13 @@

   labels:
     app.kubernetes.io/instance: dragonfly-operator
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: dragonfly-operator
   namespace: databases
 spec:
-  jobLabel: dragonfly-operator
+  jobLabel: app.kubernetes.io/name
   namespaceSelector:
     matchNames:
     - databases
   selector:
     matchLabels:
       app.kubernetes.io/service: dragonfly-operator
--- HelmRelease: entertainment/jellystat Deployment: entertainment/jellystat

+++ HelmRelease: entertainment/jellystat Deployment: entertainment/jellystat

@@ -24,14 +24,14 @@

       labels:
         app.kubernetes.io/controller: app
         app.kubernetes.io/instance: jellystat
         app.kubernetes.io/name: jellystat
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: jellystat
+      automountServiceAccountToken: false
       hostIPC: false
       hostNetwork: false
       hostPID: false
       dnsPolicy: ClusterFirst
       affinity:
         nodeAffinity:
--- HelmRelease: entertainment/jellystat ServiceAccount: entertainment/jellystat

+++ HelmRelease: entertainment/jellystat ServiceAccount: entertainment/jellystat

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: jellystat
+  labels:
+    app.kubernetes.io/instance: jellystat
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: jellystat
+  namespace: entertainment
+
--- HelmRelease: entertainment/calibre Deployment: entertainment/calibre

+++ HelmRelease: entertainment/calibre Deployment: entertainment/calibre

@@ -27,14 +27,14 @@

       labels:
         app.kubernetes.io/controller: app
         app.kubernetes.io/instance: calibre
         app.kubernetes.io/name: calibre
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: calibre
+      automountServiceAccountToken: false
       hostname: calibre
       hostIPC: false
       hostNetwork: false
       hostPID: false
       dnsPolicy: ClusterFirst
       affinity:
--- HelmRelease: entertainment/calibre ServiceAccount: entertainment/calibre

+++ HelmRelease: entertainment/calibre ServiceAccount: entertainment/calibre

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: calibre
+  labels:
+    app.kubernetes.io/instance: calibre
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: calibre
+  namespace: entertainment
+
--- HelmRelease: entertainment/flaresolverr Deployment: entertainment/flaresolverr

+++ HelmRelease: entertainment/flaresolverr Deployment: entertainment/flaresolverr

@@ -27,14 +27,14 @@

       labels:
         app.kubernetes.io/controller: app
         app.kubernetes.io/instance: flaresolverr
         app.kubernetes.io/name: flaresolverr
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: flaresolverr
+      automountServiceAccountToken: false
       hostname: flaresolverr
       hostIPC: false
       hostNetwork: false
       hostPID: false
       dnsPolicy: ClusterFirst
       affinity:
--- HelmRelease: entertainment/flaresolverr ServiceAccount: entertainment/flaresolverr

+++ HelmRelease: entertainment/flaresolverr ServiceAccount: entertainment/flaresolverr

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: flaresolverr
+  labels:
+    app.kubernetes.io/instance: flaresolverr
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: flaresolverr
+  namespace: entertainment
+
--- HelmRelease: entertainment/tdarr-server Deployment: entertainment/tdarr-server

+++ HelmRelease: entertainment/tdarr-server Deployment: entertainment/tdarr-server

@@ -27,14 +27,14 @@

       labels:
         app.kubernetes.io/controller: app
         app.kubernetes.io/instance: tdarr-server
         app.kubernetes.io/name: tdarr-server
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: tdarr-server
+      automountServiceAccountToken: false
       hostname: tdarr-server
       hostIPC: false
       hostNetwork: false
       hostPID: false
       dnsPolicy: ClusterFirst
       affinity:
--- HelmRelease: entertainment/tdarr-server ServiceAccount: entertainment/tdarr-server

+++ HelmRelease: entertainment/tdarr-server ServiceAccount: entertainment/tdarr-server

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: tdarr-server
+  labels:
+    app.kubernetes.io/instance: tdarr-server
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: tdarr-server
+  namespace: entertainment
+
--- HelmRelease: default/immich Deployment: default/immich

+++ HelmRelease: default/immich Deployment: default/immich

@@ -27,14 +27,14 @@

       labels:
         app.kubernetes.io/controller: immich
         app.kubernetes.io/instance: immich
         app.kubernetes.io/name: immich
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: immich
+      automountServiceAccountToken: false
       hostname: immich
       hostIPC: false
       hostNetwork: false
       hostPID: false
       dnsPolicy: ClusterFirst
       nodeSelector:
--- HelmRelease: default/immich Deployment: default/immich-machine-learning

+++ HelmRelease: default/immich Deployment: default/immich-machine-learning

@@ -24,14 +24,14 @@

       labels:
         app.kubernetes.io/controller: machine-learning
         app.kubernetes.io/instance: immich
         app.kubernetes.io/name: immich
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: immich
+      automountServiceAccountToken: false
       hostIPC: false
       hostNetwork: false
       hostPID: false
       dnsPolicy: ClusterFirst
       affinity:
         nodeAffinity:
--- HelmRelease: default/immich ServiceAccount: default/immich

+++ HelmRelease: default/immich ServiceAccount: default/immich

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: immich
+  labels:
+    app.kubernetes.io/instance: immich
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: immich
+  namespace: default
+
--- HelmRelease: entertainment/prowlarr Deployment: entertainment/prowlarr

+++ HelmRelease: entertainment/prowlarr Deployment: entertainment/prowlarr

@@ -27,14 +27,14 @@

       labels:
         app.kubernetes.io/controller: app
         app.kubernetes.io/instance: prowlarr
         app.kubernetes.io/name: prowlarr
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: prowlarr
+      automountServiceAccountToken: false
       hostname: prowlarr
       hostIPC: false
       hostNetwork: false
       hostPID: false
       dnsPolicy: ClusterFirst
       affinity:
--- HelmRelease: entertainment/prowlarr ServiceAccount: entertainment/prowlarr

+++ HelmRelease: entertainment/prowlarr ServiceAccount: entertainment/prowlarr

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: prowlarr
+  labels:
+    app.kubernetes.io/instance: prowlarr
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: prowlarr
+  namespace: entertainment
+
--- HelmRelease: default/kitchenowl Deployment: default/kitchenowl

+++ HelmRelease: default/kitchenowl Deployment: default/kitchenowl

@@ -24,14 +24,14 @@

       labels:
         app.kubernetes.io/controller: app
         app.kubernetes.io/instance: kitchenowl
         app.kubernetes.io/name: kitchenowl
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: kitchenowl
+      automountServiceAccountToken: false
       securityContext:
         fsGroup: 1000
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 1000
         runAsNonRoot: true
         runAsUser: 1000
--- HelmRelease: default/kitchenowl ServiceAccount: default/kitchenowl

+++ HelmRelease: default/kitchenowl ServiceAccount: default/kitchenowl

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: kitchenowl
+  labels:
+    app.kubernetes.io/instance: kitchenowl
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: kitchenowl
+  namespace: default
+
--- HelmRelease: default/spoolman Deployment: default/spoolman

+++ HelmRelease: default/spoolman Deployment: default/spoolman

@@ -27,14 +27,14 @@

       labels:
         app.kubernetes.io/controller: app
         app.kubernetes.io/instance: spoolman
         app.kubernetes.io/name: spoolman
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: spoolman
+      automountServiceAccountToken: false
       securityContext:
         fsGroup: 100
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 100
         runAsNonRoot: true
         runAsUser: 1000
--- HelmRelease: default/spoolman ServiceAccount: default/spoolman

+++ HelmRelease: default/spoolman ServiceAccount: default/spoolman

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: spoolman
+  labels:
+    app.kubernetes.io/instance: spoolman
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: spoolman
+  namespace: default
+
--- HelmRelease: entertainment/jellyseerr Deployment: entertainment/jellyseerr

+++ HelmRelease: entertainment/jellyseerr Deployment: entertainment/jellyseerr

@@ -27,14 +27,14 @@

       labels:
         app.kubernetes.io/controller: app
         app.kubernetes.io/instance: jellyseerr
         app.kubernetes.io/name: jellyseerr
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: jellyseerr
+      automountServiceAccountToken: false
       hostname: jellyseerr
       hostIPC: false
       hostNetwork: false
       hostPID: false
       dnsPolicy: ClusterFirst
       affinity:
--- HelmRelease: entertainment/jellyseerr ServiceAccount: entertainment/jellyseerr

+++ HelmRelease: entertainment/jellyseerr ServiceAccount: entertainment/jellyseerr

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: jellyseerr
+  labels:
+    app.kubernetes.io/instance: jellyseerr
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: jellyseerr
+  namespace: entertainment
+
--- HelmRelease: entertainment/qbittorrent Deployment: entertainment/qbittorrent

+++ HelmRelease: entertainment/qbittorrent Deployment: entertainment/qbittorrent

@@ -27,14 +27,14 @@

       labels:
         app.kubernetes.io/controller: app
         app.kubernetes.io/instance: qbittorrent
         app.kubernetes.io/name: qbittorrent
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: qbittorrent
+      automountServiceAccountToken: false
       hostname: qbittorrent
       hostIPC: false
       hostNetwork: false
       hostPID: false
       dnsPolicy: ClusterFirst
       affinity:
--- HelmRelease: entertainment/qbittorrent ServiceAccount: entertainment/qbittorrent

+++ HelmRelease: entertainment/qbittorrent ServiceAccount: entertainment/qbittorrent

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: qbittorrent
+  labels:
+    app.kubernetes.io/instance: qbittorrent
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: qbittorrent
+  namespace: entertainment
+
--- HelmRelease: default/trek Deployment: default/trek

+++ HelmRelease: default/trek Deployment: default/trek

@@ -27,14 +27,14 @@

       labels:
         app.kubernetes.io/controller: app
         app.kubernetes.io/instance: trek
         app.kubernetes.io/name: trek
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: trek
+      automountServiceAccountToken: false
       hostname: trek
       hostIPC: false
       hostNetwork: false
       hostPID: false
       dnsPolicy: ClusterFirst
       affinity:
--- HelmRelease: default/trek ServiceAccount: default/trek

+++ HelmRelease: default/trek ServiceAccount: default/trek

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: trek
+  labels:
+    app.kubernetes.io/instance: trek
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: trek
+  namespace: default
+
--- HelmRelease: entertainment/radarr Deployment: entertainment/radarr

+++ HelmRelease: entertainment/radarr Deployment: entertainment/radarr

@@ -27,14 +27,14 @@

       labels:
         app.kubernetes.io/controller: app
         app.kubernetes.io/instance: radarr
         app.kubernetes.io/name: radarr
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: radarr
+      automountServiceAccountToken: false
       hostname: radarr
       hostIPC: false
       hostNetwork: false
       hostPID: false
       dnsPolicy: ClusterFirst
       affinity:
--- HelmRelease: entertainment/radarr ServiceAccount: entertainment/radarr

+++ HelmRelease: entertainment/radarr ServiceAccount: entertainment/radarr

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: radarr
+  labels:
+    app.kubernetes.io/instance: radarr
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: radarr
+  namespace: entertainment
+
--- HelmRelease: default/syncthing Deployment: default/syncthing

+++ HelmRelease: default/syncthing Deployment: default/syncthing

@@ -27,14 +27,14 @@

       labels:
         app.kubernetes.io/controller: app
         app.kubernetes.io/instance: syncthing
         app.kubernetes.io/name: syncthing
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: syncthing
+      automountServiceAccountToken: false
       securityContext:
         fsGroup: 1000
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 1000
         runAsUser: 1000
         seccompProfile:
--- HelmRelease: default/syncthing ServiceAccount: default/syncthing

+++ HelmRelease: default/syncthing ServiceAccount: default/syncthing

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: syncthing
+  labels:
+    app.kubernetes.io/instance: syncthing
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: syncthing
+  namespace: default
+
--- HelmRelease: entertainment/sonarr Deployment: entertainment/sonarr

+++ HelmRelease: entertainment/sonarr Deployment: entertainment/sonarr

@@ -27,14 +27,14 @@

       labels:
         app.kubernetes.io/controller: app
         app.kubernetes.io/instance: sonarr
         app.kubernetes.io/name: sonarr
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: sonarr
+      automountServiceAccountToken: false
       hostname: sonarr
       hostIPC: false
       hostNetwork: false
       hostPID: false
       dnsPolicy: ClusterFirst
       affinity:
--- HelmRelease: entertainment/sonarr ServiceAccount: entertainment/sonarr

+++ HelmRelease: entertainment/sonarr ServiceAccount: entertainment/sonarr

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: sonarr
+  labels:
+    app.kubernetes.io/instance: sonarr
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: sonarr
+  namespace: entertainment
+
--- HelmRelease: entertainment/romm Deployment: entertainment/romm

+++ HelmRelease: entertainment/romm Deployment: entertainment/romm

@@ -27,14 +27,14 @@

       labels:
         app.kubernetes.io/controller: app
         app.kubernetes.io/instance: romm
         app.kubernetes.io/name: romm
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: romm
+      automountServiceAccountToken: false
       hostname: romm
       hostIPC: false
       hostNetwork: false
       hostPID: false
       dnsPolicy: ClusterFirst
       affinity:
--- HelmRelease: entertainment/romm ServiceAccount: entertainment/romm

+++ HelmRelease: entertainment/romm ServiceAccount: entertainment/romm

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: romm
+  labels:
+    app.kubernetes.io/instance: romm
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: romm
+  namespace: entertainment
+
--- HelmRelease: observability/uptime-kuma Deployment: observability/uptime-kuma

+++ HelmRelease: observability/uptime-kuma Deployment: observability/uptime-kuma

@@ -24,14 +24,14 @@

       labels:
         app.kubernetes.io/controller: app
         app.kubernetes.io/instance: uptime-kuma
         app.kubernetes.io/name: uptime-kuma
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: uptime-kuma
+      automountServiceAccountToken: false
       hostIPC: false
       hostNetwork: false
       hostPID: false
       dnsPolicy: ClusterFirst
       containers:
       - env:
--- HelmRelease: observability/uptime-kuma ServiceAccount: observability/uptime-kuma

+++ HelmRelease: observability/uptime-kuma ServiceAccount: observability/uptime-kuma

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: uptime-kuma
+  labels:
+    app.kubernetes.io/instance: uptime-kuma
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: uptime-kuma
+  namespace: observability
+
--- HelmRelease: entertainment/kavita Deployment: entertainment/kavita

+++ HelmRelease: entertainment/kavita Deployment: entertainment/kavita

@@ -27,14 +27,14 @@

       labels:
         app.kubernetes.io/controller: app
         app.kubernetes.io/instance: kavita
         app.kubernetes.io/name: kavita
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: kavita
+      automountServiceAccountToken: false
       hostname: kavita
       hostIPC: false
       hostNetwork: false
       hostPID: false
       dnsPolicy: ClusterFirst
       affinity:
--- HelmRelease: entertainment/kavita ServiceAccount: entertainment/kavita

+++ HelmRelease: entertainment/kavita ServiceAccount: entertainment/kavita

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: kavita
+  labels:
+    app.kubernetes.io/instance: kavita
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: kavita
+  namespace: entertainment
+
--- HelmRelease: default/actual Deployment: default/actual

+++ HelmRelease: default/actual Deployment: default/actual

@@ -24,14 +24,14 @@

       labels:
         app.kubernetes.io/controller: app
         app.kubernetes.io/instance: actual
         app.kubernetes.io/name: actual
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: actual
+      automountServiceAccountToken: false
       hostIPC: false
       hostNetwork: false
       hostPID: false
       dnsPolicy: ClusterFirst
       affinity:
         nodeAffinity:
--- HelmRelease: default/actual ServiceAccount: default/actual

+++ HelmRelease: default/actual ServiceAccount: default/actual

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: actual
+  labels:
+    app.kubernetes.io/instance: actual
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: actual
+  namespace: default
+
--- HelmRelease: default/homepage Deployment: default/homepage

+++ HelmRelease: default/homepage Deployment: default/homepage

@@ -25,13 +25,13 @@

         app.kubernetes.io/controller: app
         app.kubernetes.io/instance: homepage
         app.kubernetes.io/name: homepage
     spec:
       enableServiceLinks: false
       serviceAccountName: homepage
-      automountServiceAccountToken: true
+      automountServiceAccountToken: false
       hostIPC: false
       hostNetwork: false
       hostPID: false
       dnsPolicy: ClusterFirst
       affinity:
         nodeAffinity:
--- HelmRelease: entertainment/jellyfin Deployment: entertainment/jellyfin

+++ HelmRelease: entertainment/jellyfin Deployment: entertainment/jellyfin

@@ -27,14 +27,14 @@

       labels:
         app.kubernetes.io/controller: app
         app.kubernetes.io/instance: jellyfin
         app.kubernetes.io/name: jellyfin
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: jellyfin
+      automountServiceAccountToken: false
       hostname: jellyfin
       hostIPC: false
       hostNetwork: false
       hostPID: false
       dnsPolicy: ClusterFirst
       nodeSelector:
--- HelmRelease: entertainment/jellyfin ServiceAccount: entertainment/jellyfin

+++ HelmRelease: entertainment/jellyfin ServiceAccount: entertainment/jellyfin

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: jellyfin
+  labels:
+    app.kubernetes.io/instance: jellyfin
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: jellyfin
+  namespace: entertainment
+
--- HelmRelease: entertainment/sabnzbd Deployment: entertainment/sabnzbd

+++ HelmRelease: entertainment/sabnzbd Deployment: entertainment/sabnzbd

@@ -27,14 +27,14 @@

       labels:
         app.kubernetes.io/controller: app
         app.kubernetes.io/instance: sabnzbd
         app.kubernetes.io/name: sabnzbd
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: sabnzbd
+      automountServiceAccountToken: false
       hostname: sabnzbd
       hostIPC: false
       hostNetwork: false
       hostPID: false
       dnsPolicy: ClusterFirst
       affinity:
--- HelmRelease: entertainment/sabnzbd ServiceAccount: entertainment/sabnzbd

+++ HelmRelease: entertainment/sabnzbd ServiceAccount: entertainment/sabnzbd

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: sabnzbd
+  labels:
+    app.kubernetes.io/instance: sabnzbd
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: sabnzbd
+  namespace: entertainment
+
--- HelmRelease: entertainment/bookshelf Deployment: entertainment/bookshelf

+++ HelmRelease: entertainment/bookshelf Deployment: entertainment/bookshelf

@@ -27,14 +27,14 @@

       labels:
         app.kubernetes.io/controller: app
         app.kubernetes.io/instance: bookshelf
         app.kubernetes.io/name: bookshelf
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: bookshelf
+      automountServiceAccountToken: false
       hostname: bookshelf
       hostIPC: false
       hostNetwork: false
       hostPID: false
       dnsPolicy: ClusterFirst
       affinity:
--- HelmRelease: entertainment/bookshelf ServiceAccount: entertainment/bookshelf

+++ HelmRelease: entertainment/bookshelf ServiceAccount: entertainment/bookshelf

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: bookshelf
+  labels:
+    app.kubernetes.io/instance: bookshelf
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: bookshelf
+  namespace: entertainment
+

… → 5.0.1 )

renovate Bot added renovate/container type/major labels May 9, 2026

github-actions Bot added the area/kubernetes label May 9, 2026

renovate Bot changed the title ~~feat(container)!: Update ghcr.io/bjw-s-labs/helm/app-template ( 4.6.2 → 5.0.0 )~~ feat(container)!: Update ghcr.io/bjw-s-labs/helm/app-template ( 4.6.2 → 5.0.1 ) May 14, 2026

renovate Bot force-pushed the renovate/ghcr.io-bjw-s-labs-helm-app-template-5.x branch 2 times, most recently from fe86a31 to 7832891 Compare May 18, 2026 20:08

renovate Bot force-pushed the renovate/ghcr.io-bjw-s-labs-helm-app-template-5.x branch from 7832891 to 153fc44 Compare June 11, 2026 17:07

feat(container)!: Update ghcr.io/bjw-s-labs/helm/app-template ( 4.6.2…

d1c93dc

… → 5.0.1 )

renovate Bot force-pushed the renovate/ghcr.io-bjw-s-labs-helm-app-template-5.x branch from 153fc44 to d1c93dc Compare June 22, 2026 18:00

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat(container)!: Update ghcr.io/bjw-s-labs/helm/app-template ( 4.6.2 → 5.0.1 )#321

feat(container)!: Update ghcr.io/bjw-s-labs/helm/app-template ( 4.6.2 → 5.0.1 )#321
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/ghcr.io-bjw-s-labs-helm-app-template-5.x

renovate Bot commented May 9, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented May 9, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented May 9, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented May 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v5.0.1

Changelog:

Fixed

Changed

v5.0.0

Changelog:

Changed

Configuration

Uh oh!

github-actions Bot commented May 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented May 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented May 9, 2026 •

edited

Loading

`v5.0.1`

`v5.0.0`

github-actions Bot commented May 9, 2026 •

edited

Loading

github-actions Bot commented May 9, 2026 •

edited

Loading