From 640d9945dd6a8a31de4ae370d57ceb95aa1fea1d Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sat, 30 Nov 2024 12:17:43 +0000
Subject: [PATCH] chore(deps): pin dependencies

---
 kubernetes/raspberry/media/bazarr/app/helmrelease.yaml      | 2 +-
 kubernetes/raspberry/media/qbittorrent/app/helmrelease.yaml | 2 +-
 .../raspberry/network/cloudflared/app/helmrelease.yaml      | 2 +-
 kubernetes/raspberry/system-upgrade/k3s/app/plan.yaml       | 6 +++---
 .../system-upgrade-controller/app/helmrelease.yaml          | 2 +-
 kubernetes/turing/media/jellyfin/app/helmrelease.yaml       | 2 +-
 kubernetes/turing/system-upgrade/k3s/app/plan.yaml          | 6 +++---
 .../system-upgrade-controller/app/helmrelease.yaml          | 2 +-
 8 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/kubernetes/raspberry/media/bazarr/app/helmrelease.yaml b/kubernetes/raspberry/media/bazarr/app/helmrelease.yaml
index cd2c90b27..db026d975 100644
--- a/kubernetes/raspberry/media/bazarr/app/helmrelease.yaml
+++ b/kubernetes/raspberry/media/bazarr/app/helmrelease.yaml
@@ -42,7 +42,7 @@ spec:
           app:
             image:
               repository: ghcr.io/onedr0p/bazarr
-              tag: 1.4.5
+              tag: 1.4.5@sha256:c0bf91443c32f3978777b4ddd2732908f51b157bbe00cd3259b23f7716bb4af7
             env:
               TZ: ${TIMEZONE}
             probes:
diff --git a/kubernetes/raspberry/media/qbittorrent/app/helmrelease.yaml b/kubernetes/raspberry/media/qbittorrent/app/helmrelease.yaml
index 05a836ae6..5c5546568 100644
--- a/kubernetes/raspberry/media/qbittorrent/app/helmrelease.yaml
+++ b/kubernetes/raspberry/media/qbittorrent/app/helmrelease.yaml
@@ -79,7 +79,7 @@ spec:
           gluetun:
             image:
               repository: ghcr.io/qdm12/gluetun
-              tag: v3.39.1
+              tag: v3.39.1@sha256:6a8058e626763cbf735ac2f78c774dbb24fec2490bd9d9f7d67e22592cb4a991
             env:
               DOT: "off"
               FIREWALL_INPUT_PORTS: 8080
diff --git a/kubernetes/raspberry/network/cloudflared/app/helmrelease.yaml b/kubernetes/raspberry/network/cloudflared/app/helmrelease.yaml
index f1203d020..d5ebf9132 100644
--- a/kubernetes/raspberry/network/cloudflared/app/helmrelease.yaml
+++ b/kubernetes/raspberry/network/cloudflared/app/helmrelease.yaml
@@ -34,7 +34,7 @@ spec:
           app:
             image:
               repository: docker.io/cloudflare/cloudflared
-              tag: 2024.11.1
+              tag: 2024.11.1@sha256:665dda65335e35a782ed9319aa63e8404f88b34d2644d30adf3e91253604ffa0
             env:
               NO_AUTOUPDATE: true
               TUNNEL_CRED_FILE: /etc/cloudflared/creds/credentials.json
diff --git a/kubernetes/raspberry/system-upgrade/k3s/app/plan.yaml b/kubernetes/raspberry/system-upgrade/k3s/app/plan.yaml
index 3f5d561bc..a5672f36a 100644
--- a/kubernetes/raspberry/system-upgrade/k3s/app/plan.yaml
+++ b/kubernetes/raspberry/system-upgrade/k3s/app/plan.yaml
@@ -7,7 +7,7 @@ metadata:
 spec:
   version: "${KUBE_VERSION}"
   upgrade:
-    image: rancher/k3s-upgrade
+    image: rancher/k3s-upgrade@sha256:70a238fdf8da99b99fcdb835f8162c9176e8078c170f5d6f349d3b38c3bfed7b
   serviceAccountName: system-upgrade
   concurrency: 1
   cordon: true
@@ -46,10 +46,10 @@ spec:
       - key: node-role.kubernetes.io/control-plane
         operator: DoesNotExist
   prepare:
-    image: rancher/k3s-upgrade
+    image: rancher/k3s-upgrade@sha256:70a238fdf8da99b99fcdb835f8162c9176e8078c170f5d6f349d3b38c3bfed7b
     args: ["prepare", "controllers"]
   drain:
     force: true
     skipWaitForDeleteTimeout: 60
   upgrade:
-    image: rancher/k3s-upgrade
+    image: rancher/k3s-upgrade@sha256:70a238fdf8da99b99fcdb835f8162c9176e8078c170f5d6f349d3b38c3bfed7b
diff --git a/kubernetes/raspberry/system-upgrade/system-upgrade-controller/app/helmrelease.yaml b/kubernetes/raspberry/system-upgrade/system-upgrade-controller/app/helmrelease.yaml
index 2137071f3..93726d032 100644
--- a/kubernetes/raspberry/system-upgrade/system-upgrade-controller/app/helmrelease.yaml
+++ b/kubernetes/raspberry/system-upgrade/system-upgrade-controller/app/helmrelease.yaml
@@ -37,7 +37,7 @@ spec:
               SYSTEM_UPGRADE_JOB_ACTIVE_DEADLINE_SECONDS: 900
               SYSTEM_UPGRADE_JOB_BACKOFF_LIMIT: 99
               SYSTEM_UPGRADE_JOB_IMAGE_PULL_POLICY: IfNotPresent
-              SYSTEM_UPGRADE_JOB_KUBECTL_IMAGE: registry.k8s.io/kubectl:v1.31.3
+              SYSTEM_UPGRADE_JOB_KUBECTL_IMAGE: registry.k8s.io/kubectl:v1.31.3@sha256:f5735dae787c62a225536142b5eb0fbfd5515f7a80fcf2b3a5035401b681d1db
               SYSTEM_UPGRADE_JOB_PRIVILEGED: true
               SYSTEM_UPGRADE_JOB_TTL_SECONDS_AFTER_FINISH: 900
               SYSTEM_UPGRADE_PLAN_POLLING_INTERVAL: 1h
diff --git a/kubernetes/turing/media/jellyfin/app/helmrelease.yaml b/kubernetes/turing/media/jellyfin/app/helmrelease.yaml
index 78e9b16db..c956c8e98 100644
--- a/kubernetes/turing/media/jellyfin/app/helmrelease.yaml
+++ b/kubernetes/turing/media/jellyfin/app/helmrelease.yaml
@@ -39,7 +39,7 @@ spec:
           main:
             image:
               repository: jellyfin/jellyfin
-              tag: "10.10.3"
+              tag: "10.10.3@sha256:17c3a8d9dddb97789b5f37112840ebf96566442c14d4754193a6c2eb154bc221"
             env:
               DOTNET_SYSTEM_IO_DISABLEFILELOCKING: "true"
               JELLYFIN_FFmpeg__analyzeduration: 50000000
diff --git a/kubernetes/turing/system-upgrade/k3s/app/plan.yaml b/kubernetes/turing/system-upgrade/k3s/app/plan.yaml
index 3f5d561bc..a5672f36a 100644
--- a/kubernetes/turing/system-upgrade/k3s/app/plan.yaml
+++ b/kubernetes/turing/system-upgrade/k3s/app/plan.yaml
@@ -7,7 +7,7 @@ metadata:
 spec:
   version: "${KUBE_VERSION}"
   upgrade:
-    image: rancher/k3s-upgrade
+    image: rancher/k3s-upgrade@sha256:70a238fdf8da99b99fcdb835f8162c9176e8078c170f5d6f349d3b38c3bfed7b
   serviceAccountName: system-upgrade
   concurrency: 1
   cordon: true
@@ -46,10 +46,10 @@ spec:
       - key: node-role.kubernetes.io/control-plane
         operator: DoesNotExist
   prepare:
-    image: rancher/k3s-upgrade
+    image: rancher/k3s-upgrade@sha256:70a238fdf8da99b99fcdb835f8162c9176e8078c170f5d6f349d3b38c3bfed7b
     args: ["prepare", "controllers"]
   drain:
     force: true
     skipWaitForDeleteTimeout: 60
   upgrade:
-    image: rancher/k3s-upgrade
+    image: rancher/k3s-upgrade@sha256:70a238fdf8da99b99fcdb835f8162c9176e8078c170f5d6f349d3b38c3bfed7b
diff --git a/kubernetes/turing/system-upgrade/system-upgrade-controller/app/helmrelease.yaml b/kubernetes/turing/system-upgrade/system-upgrade-controller/app/helmrelease.yaml
index 2137071f3..93726d032 100644
--- a/kubernetes/turing/system-upgrade/system-upgrade-controller/app/helmrelease.yaml
+++ b/kubernetes/turing/system-upgrade/system-upgrade-controller/app/helmrelease.yaml
@@ -37,7 +37,7 @@ spec:
               SYSTEM_UPGRADE_JOB_ACTIVE_DEADLINE_SECONDS: 900
               SYSTEM_UPGRADE_JOB_BACKOFF_LIMIT: 99
               SYSTEM_UPGRADE_JOB_IMAGE_PULL_POLICY: IfNotPresent
-              SYSTEM_UPGRADE_JOB_KUBECTL_IMAGE: registry.k8s.io/kubectl:v1.31.3
+              SYSTEM_UPGRADE_JOB_KUBECTL_IMAGE: registry.k8s.io/kubectl:v1.31.3@sha256:f5735dae787c62a225536142b5eb0fbfd5515f7a80fcf2b3a5035401b681d1db
               SYSTEM_UPGRADE_JOB_PRIVILEGED: true
               SYSTEM_UPGRADE_JOB_TTL_SECONDS_AFTER_FINISH: 900
               SYSTEM_UPGRADE_PLAN_POLLING_INTERVAL: 1h