build(deps): update image ghcr.io/home-operations/charts/tuppr ( 0.2.6 ➜ 0.2.8 )

[renovate]

This PR contains the following updates:

Package	Update	Change
ghcr.io/home-operations/charts/tuppr	patch	0.2.6 → 0.2.8

---

Release Notes

home-operations/tuppr (ghcr.io/home-operations/charts/tuppr)

v0.2.8

Compare Source

Features

• add waitForVolumeDetach policy to wait for CSI detach before reboot (#​360) (9b2e3cf)
• container: update image ghcr.io/siderolabs/installer (v1.11.0 → v1.13.4) (#​354) (0fc9cb8)
• container: update image ghcr.io/siderolabs/kubelet (v1.34.0 → v1.36.2) (#​355) (9118404)
• deps: update module github.com/onsi/ginkgo/v2 (v2.30.0 → v2.32.0) (#​337) (8269165)
• deps: update module github.com/onsi/gomega (v1.41.0 → v1.42.1) (#​338) (8fa0fc1)
• serve metrics and health on a single 8081 port (#​349) (29a2318)

Bug Fixes

• chart: honor serviceAccount.automount=false (#​348) (b81036f)
• container: update image ghcr.io/siderolabs/installer (v1.13.4 → v1.13.5) (#​357) (b3aa84b)
• deps: update k8s.io/utils digest (ff6756f → be93311) (#​344) (fd927e5)
• deps: update kubernetes monorepo (v0.36.1 → v0.36.2) (#​333) (85a94b2)
• deps: update module github.com/google/go-containerregistry (v0.21.6 → v0.21.7) (#​346) (bfffdfd)
• deps: update module github.com/siderolabs/talos/pkg/machinery (v1.13.3 → v1.13.5) (#​322) (a0d97ff)

Miscellaneous Chores

• add minimumGroupSize to Go toolchain configuration (528c432)
• mise: Update tool hcloud (1.65.0 → 1.66.0) (#​359) (bf64e9e)
• mise: update tool helm (4.2.0 → 4.2.2) (#​331) (bb0f62f)
• mise: Update tool jq (1.8.1 → 1.8.2) (#​351) (47e4780)
• mise: update tool opentofu (1.12.1 → 1.12.2) (#​332) (bf1e1ef)
• mise: Update tool opentofu (1.12.2 → 1.12.3) (#​350) (777c933)
• mise: update tool oxfmt (0.54.0 → 0.55.0) (#​341) (b300587)
• mise: Update tool oxfmt (0.55.0 → 0.56.0) (#​353) (b110e5a)
• mise: Update tool talosctl (1.13.4 → 1.13.5) (#​356) (2ec0f5d)
• mise: Update tool zizmor (1.25.2 → 1.26.1) (#​352) (26a5190)
• remove devcontainer (a8a9465)

v0.2.7

Compare Source

Bug Fixes

• controllers: surface reconcile errors in TalosUpgrade/Kubernetes Upgrade status (#​342) (02af953)

---

Configuration

📅 Schedule: (in timezone America/Chicago)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

--- kubernetes/apps/system-upgrade/tuppr/app Kustomization: system-upgrade/tuppr OCIRepository: system-upgrade/tuppr

+++ kubernetes/apps/system-upgrade/tuppr/app Kustomization: system-upgrade/tuppr OCIRepository: system-upgrade/tuppr

@@ -10,9 +10,9 @@

 spec:
   interval: 15m
   layerSelector:
     mediaType: application/vnd.cncf.helm.chart.content.v1.tar+gzip
     operation: copy
   ref:
-    tag: 0.2.6
+    tag: 0.2.8
   url: oci://ghcr.io/home-operations/charts/tuppr
 

[github-actions]

--- HelmRelease: system-upgrade/tuppr Service: system-upgrade/tuppr-metrics-service

+++ HelmRelease: system-upgrade/tuppr Service: system-upgrade/tuppr-metrics-service

@@ -8,13 +8,13 @@

     app.kubernetes.io/name: tuppr
     app.kubernetes.io/instance: tuppr
     app.kubernetes.io/managed-by: Helm
 spec:
   type: ClusterIP
   ports:
-  - port: 8080
+  - port: 8081
     targetPort: metrics
     protocol: TCP
     name: metrics
   selector:
     app.kubernetes.io/name: tuppr
     app.kubernetes.io/instance: tuppr
--- HelmRelease: system-upgrade/tuppr Deployment: system-upgrade/tuppr

+++ HelmRelease: system-upgrade/tuppr Deployment: system-upgrade/tuppr

@@ -23,32 +23,33 @@

     spec:
       enableServiceLinks: false
       serviceAccountName: tuppr
       priorityClassName: system-node-critical
       securityContext:
         fsGroup: 65532
+        runAsGroup: 65532
         runAsNonRoot: true
         runAsUser: 65532
       containers:
       - name: manager
         securityContext:
           allowPrivilegeEscalation: false
           capabilities:
             drop:
             - ALL
           readOnlyRootFilesystem: true
           runAsNonRoot: true
           runAsUser: 65532
-        image: ghcr.io/home-operations/tuppr@sha256:4f539ec06db87a669330faae85ed53567465f028f76d3b397b715e34b0f92d88
+        image: ghcr.io/home-operations/tuppr@sha256:9785944f4ebf52ddaede37abdc9c55b106d427e408e0696955486351c74f33b0
         imagePullPolicy: IfNotPresent
         command:
         - /manager
         args:
         - --log-level=debug
         - --leader-elect=true
-        - --metrics-bind-address=:8080
+        - --metrics-bind-address=:8081
         - --health-probe-bind-address=:8081
         - --talosconfig-secret=tuppr-talosconfig
         - --metrics-secure=false
         - --metrics-service-name=tuppr-metrics-service
         - --webhook-config-name=tuppr-validating-webhook
         - --webhook-service-name=tuppr-webhook-service
@@ -68,15 +69,12 @@

               fieldPath: metadata.name
         ports:
         - name: webhook-server
           containerPort: 9443
           protocol: TCP
         - name: metrics
-          containerPort: 8080
-          protocol: TCP
-        - name: health
           containerPort: 8081
           protocol: TCP
         livenessProbe:
           httpGet:
             path: /healthz
             port: 8081