Skip to content

feat(helm)!: Update app-template ( 4.6.2 ➔ 5.1.0 ) - #738

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/app-template-5.x
Open

feat(helm)!: Update app-template ( 4.6.2 ➔ 5.1.0 )#738
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/app-template-5.x

Conversation

@renovate

@renovate renovate Bot commented May 7, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
app-template major 4.6.2 → 5.1.0
app-template HelmChart major 4.6.2 → 5.1.0

Release Notes

bjw-s-labs/helm-charts (app-template)

v5.1.0

Compare Source

Changelog:
Changed

v5.0.1

Compare Source

Changelog:
Changed

v5.0.0

Compare Source

Changelog:
Changed

Configuration

📅 Schedule: (in timezone Asia/Jerusalem)

  • Branch creation
    • "after 2am and before 7am"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@github-actions

github-actions Bot commented May 7, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Argo CD Diff Preview

Summary:

Modified (24):
± apps (+22|-22)
± bazarr (+12|-2)
± cross-seed (+12|-2)
± idrac-fan-control (+24|-4)
± infra (+1|-1)
± kometa (+12|-2)
± kopia-nas-backup (+12|-2)
± kopia-server (+14|-4)
± kromgo (+12|-2)
± mosquitto (+12|-2)
± n8n (+13|-3)
± overseerr (+12|-2)
± plex (+12|-2)
± plex-auto-languages (+12|-2)
± prowlarr (+12|-2)
± qbrr (+12|-2)
± radarr (+12|-2)
± recyclarr (+12|-2)
± rotki (+12|-2)
± sabnzbd (+12|-2)
± sonarr (+12|-2)
± stirling-pdf (+12|-2)
± tautulli (+12|-2)
± tqm (+14|-4)
apps (kubernetes/bootstrap/apps.yaml)

Application: argocd/bazarr

   destination:
     namespace: media
     server: https://kubernetes.default.svc
   info:
   - name: Chart
-    value: app-template@4.6.2
+    value: app-template@5.1.0
   - name: Image
     value: ghcr.io/home-operations/bazarr:1.6.0@sha256:cd63bbd0986c93e238eb8b9442604d249f0d4080099b389f822abe2062044417
   project: default
   source:
     path: kubernetes/apps/bazarr/

Application: argocd/cross-seed

   destination:
     namespace: media
     server: https://kubernetes.default.svc
   info:
   - name: Chart
-    value: app-template@4.6.2
+    value: app-template@5.1.0
   - name: Image
     value: ghcr.io/cross-seed/cross-seed:6.13.7@sha256:a1fed512261fd968c55cb03c51cff9c6620aa76a34b3b591afca95c890aa8225
   project: default
   source:
     path: kubernetes/apps/cross-seed/

Application: argocd/idrac-fan-control

   destination:
     namespace: utilities
     server: https://kubernetes.default.svc
   info:
   - name: Chart
-    value: app-template@4.6.2
+    value: app-template@5.1.0
   - name: Image
     value: ghcr.io/tigerblue77/dell_idrac_fan_controller:latest@sha256:23c1c4af0ea81e719355af39c10c5333d9ff9103b9e1e39bd5a734cd0b650268
   project: default
   source:
     path: kubernetes/apps/idrac-fan-control/

Application: argocd/kometa

   destination:
     namespace: media
     server: https://kubernetes.default.svc
   info:
   - name: Chart
-    value: app-template@4.6.2
+    value: app-template@5.1.0
   - name: Image
     value: kometateam/kometa:v2.4.8@sha256:c58f6d4af511613f218b6dafbfc84078af4e5a6089790c1fdba58fd7c5dad70a
   project: default
   source:
     path: kubernetes/apps/kometa/

Application: argocd/kopia-nas-backup

   destination:
     namespace: backup
     server: https://kubernetes.default.svc
   info:
   - name: Chart
-    value: app-template@4.6.2
+    value: app-template@5.1.0
   - name: Image
     value: ghcr.io/home-operations/kopia:0.22.3@sha256:17ab64542280197a5368247deaefadc3e3bbe15714ab666c2455a06824e86efd
   project: default
   source:
     path: kubernetes/apps/kopia-nas-backup/

Application: argocd/kopia-server

   destination:
     namespace: backup
     server: https://kubernetes.default.svc
   info:
   - name: Chart
-    value: app-template@4.6.2
+    value: app-template@5.1.0
   - name: Image
     value: ghcr.io/home-operations/kopia:0.22.3@sha256:17ab64542280197a5368247deaefadc3e3bbe15714ab666c2455a06824e86efd
   project: default
   source:
     path: kubernetes/apps/kopia-server/

Application: argocd/mosquitto

   destination:
     namespace: smarthome
     server: https://kubernetes.default.svc
   info:
   - name: Chart
-    value: app-template@4.6.2
+    value: app-template@5.1.0
   - name: Image
     value: docker.io/library/eclipse-mosquitto:2.0.22@sha256:212f89e1eaeb2c322d6441b64396e3346026674db8fa9c27beac293405c32b3c
   project: default
   source:
     path: kubernetes/apps/mosquitto/

Application: argocd/n8n

   destination:
     namespace: selfhosted
     server: https://kubernetes.default.svc
   info:
   - name: Chart
-    value: app-template@4.6.2
+    value: app-template@5.1.0
   - name: Image
-    value: ghcr.io/n8n-io/n8n:2.37.4@sha256:3ef785400f1a03361584e5533a2e3eb72de56311fd4dc996ac4031a7fdede8bc
+    value: ghcr.io/n8n-io/n8n:2.37.1@sha256:303088e67eb9b545253de11d7ad8a1074e781abe018565fe6fccb05278371178
   project: default
   source:
     path: kubernetes/apps/n8n/
     repoURL: https://github.com/mpeterson/homelab
     targetRevision: main

Application: argocd/overseerr

   destination:
     namespace: media
     server: https://kubernetes.default.svc
   info:
   - name: Chart
-    value: app-template@4.6.2
+    value: app-template@5.1.0
   - name: Image
     value: ghcr.io/seerr-team/seerr:v3.4.1@sha256:f4768de5f616248d723e05891f3345a1402123775d03bf0890dbfedc0831bda1
   project: default
   source:
     path: kubernetes/apps/seerr/

Application: argocd/plex

   destination:
     namespace: media
     server: https://kubernetes.default.svc
   info:
   - name: Chart
-    value: app-template@4.6.2
+    value: app-template@5.1.0
   - name: Image
     value: ghcr.io/home-operations/plex:1.43.3.10896@sha256:4f1d88882a9883cc525e7c84b22c67c57416b7d3b35c3412329eeb07786433a7
   project: default
   source:
     path: kubernetes/apps/plex/

Application: argocd/plex-auto-languages

   destination:
     namespace: media
     server: https://kubernetes.default.svc
   info:
   - name: Chart
-    value: app-template@4.6.2
+    value: app-template@5.1.0
   - name: Image
     value: ghcr.io/journeydocker/plex-auto-languages:1.6.0@sha256:9b00a7877f9f85e0228a5d9aa3df5e6671f1116f1e9a8654e9d3f8ed40f2d694
   project: default
   source:
     path: kubernetes/apps/plex-auto-languages/

Application: argocd/prowlarr

   destination:
     namespace: media
     server: https://kubernetes.default.svc
   info:
   - name: Chart
-    value: app-template@4.6.2
+    value: app-template@5.1.0
   - name: Image
     value: ghcr.io/home-operations/prowlarr:2.6.2.5562@sha256:13c576d2ad93764ab78d4e75c80447bc5489a06a15fd39e89c0be0be01e2ba3a
   project: default
   source:
     path: kubernetes/apps/prowlarr/

Application: argocd/qbrr

   destination:
     namespace: media
     server: https://kubernetes.default.svc
   info:
   - name: Chart
-    value: app-template@4.6.2
+    value: app-template@5.1.0
   - name: Image
     value: ghcr.io/buroa/qbrr:0.1.4@sha256:35dce0dafb56f20d628b84eeb0e0214ee55fe18d452e27c850e62d163e239d8f
   project: default
   source:
     path: kubernetes/apps/qbrr/

Application: argocd/radarr

   destination:
     namespace: media
     server: https://kubernetes.default.svc
   info:
   - name: Chart
-    value: app-template@4.6.2
+    value: app-template@5.1.0
   - name: Image
     value: ghcr.io/home-operations/radarr:6.4.2.10590@sha256:01ab4edc881b117e30972482ae4362c13ca76ee73c891a7581cffe597d43ca31
   project: default
   source:
     path: kubernetes/apps/radarr/

Application: argocd/recyclarr

   destination:
     namespace: media
     server: https://kubernetes.default.svc
   info:
   - name: Chart
-    value: app-template@4.6.2
+    value: app-template@5.1.0
   - name: Image
     value: ghcr.io/recyclarr/recyclarr:8.7.1@sha256:73303ba5ee647b6492fee917d3a781c6e59b6cab08f9dfce9482a950846f564f
   project: default
   source:
     path: kubernetes/apps/recyclarr/

Application: argocd/rotki

   destination:
     namespace: selfhosted
     server: https://kubernetes.default.svc
   info:
   - name: Chart
-    value: app-template@4.6.2
+    value: app-template@5.1.0
   - name: Image
     value: rotki/rotki:v1.44.0@sha256:918e35cfbcce68633eafc9cdcc206bb2b45a1110f86e544d48d1fded04c280ff
   project: default
   source:
     path: kubernetes/apps/rotki/

Application: argocd/sabnzbd

   destination:
     namespace: media
     server: https://kubernetes.default.svc
   info:
   - name: Chart
-    value: app-template@4.6.2
+    value: app-template@5.1.0
   - name: Image
     value: ghcr.io/home-operations/sabnzbd:4.5.5@sha256:f5570c0a370596ab656db6d3baa830b90a6fd9952b71ae805d022a2dcb3db12f
   project: default
   source:
     path: kubernetes/apps/sabnzbd/

Application: argocd/sonarr

   destination:
     namespace: media
     server: https://kubernetes.default.svc
   info:
   - name: Chart
-    value: app-template@4.6.2
+    value: app-template@5.1.0
   - name: Image
     value: ghcr.io/home-operations/sonarr:4.0.19.3007@sha256:57ddf9972fa347a025504135bf73f5c84e4b67d33285b43f170a501145d8c43b
   project: default
   source:
     path: kubernetes/apps/sonarr/

Application: argocd/stirling-pdf

   destination:
     namespace: selfhosted
     server: https://kubernetes.default.svc
   info:
   - name: Chart
-    value: app-template@4.6.2
+    value: app-template@5.1.0
   - name: Image
     value: ghcr.io/stirling-tools/s-pdf:2.14.3-fat@sha256:444c2a995e5266e585cbc22d9613d5b4c11c8ea6ac486a9a05869b55d1775f6a
   project: default
   source:
     path: kubernetes/apps/stirling-pdf/

Application: argocd/tautulli

   destination:
     namespace: media
     server: https://kubernetes.default.svc
   info:
   - name: Chart
-    value: app-template@4.6.2
+    value: app-template@5.1.0
   - name: Image
     value: ghcr.io/home-operations/tautulli:2.18.1@sha256:2cc92abed174f89d4fa75ab98e39af0114f37829e9c675718b264cc80931c4f5
   project: default
   source:
     path: kubernetes/apps/tautulli/

Application: argocd/tqm

   destination:
     namespace: media
     server: https://kubernetes.default.svc
   info:
   - name: Chart
-    value: app-template@4.6.2
+    value: app-template@5.1.0
   - name: Image
     value: ghcr.io/home-operations/tqm:1.19.0@sha256:025ee0c0c8b75f4c7bffa90216eedb494b9884e092a47e9c49824fe63427808c
   project: default
   source:
     path: kubernetes/apps/tqm/
bazarr (kubernetes/apps/bazarr/app.yaml)

Deployment: media/bazarr

       labels:
         app.kubernetes.io/controller: bazarr
         app.kubernetes.io/instance: bazarr
         app.kubernetes.io/name: bazarr
     spec:
-      automountServiceAccountToken: true
+      automountServiceAccountToken: false
       containers:
       - image: ghcr.io/home-operations/bazarr:1.6.0@sha256:cd63bbd0986c93e238eb8b9442604d249f0d4080099b389f822abe2062044417
         livenessProbe:
           failureThreshold: 3
           httpGet:
@@ skipped 39 lines (36 -> 74) @@
       securityContext:
         fsGroup: 65534
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 100
         runAsUser: 65534
-      serviceAccountName: default
+      serviceAccountName: bazarr
       volumes:
       - name: config
         persistentVolumeClaim:
           claimName: bazarr
       - name: nfs-nas-media

ServiceAccount: media/bazarr

+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: bazarr
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: bazarr
+    helm.sh/chart: app-template-5.1.0
+  name: bazarr
+  namespace: media
cross-seed (kubernetes/apps/cross-seed/app.yaml)

Deployment: media/cross-seed

       labels:
         app.kubernetes.io/controller: cross-seed
         app.kubernetes.io/instance: cross-seed
         app.kubernetes.io/name: cross-seed
     spec:
-      automountServiceAccountToken: true
+      automountServiceAccountToken: false
       containers:
       - args:
         - daemon
         - -v
         image: ghcr.io/cross-seed/cross-seed:6.13.7@sha256:a1fed512261fd968c55cb03c51cff9c6620aa76a34b3b591afca95c890aa8225
@@ skipped 52 lines (36 -> 87) @@
       securityContext:
         fsGroup: 65534
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 100
         runAsUser: 65534
-      serviceAccountName: default
+      serviceAccountName: cross-seed
       volumes:
       - name: config
         persistentVolumeClaim:
           claimName: cross-seed
       - name: config-file

ServiceAccount: media/cross-seed

+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: cross-seed
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: cross-seed
+    helm.sh/chart: app-template-5.1.0
+  name: cross-seed
+  namespace: media
idrac-fan-control (kubernetes/apps/idrac-fan-control/app.yaml)

Deployment: utilities/pve-01-idrac-fan-control

       labels:
         app.kubernetes.io/controller: pve-01-idrac-fan-control
         app.kubernetes.io/instance: pve-01-idrac-fan-control
         app.kubernetes.io/name: pve-01-idrac-fan-control
     spec:
-      automountServiceAccountToken: true
+      automountServiceAccountToken: false
       containers:
       - env:
         - name: CHECK_INTERVAL
           value: "30"
         - name: CPU_TEMPERATURE_THRESHOLD
@@ skipped 38 lines (36 -> 73) @@
       securityContext:
         fsGroup: 65534
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 100
         runAsUser: 65534
-      serviceAccountName: default
+      serviceAccountName: pve-01-idrac-fan-control

Deployment: utilities/pve-02-idrac-fan-control

       labels:
         app.kubernetes.io/controller: pve-02-idrac-fan-control
         app.kubernetes.io/instance: pve-02-idrac-fan-control
         app.kubernetes.io/name: pve-02-idrac-fan-control
     spec:
-      automountServiceAccountToken: true
+      automountServiceAccountToken: false
       containers:
       - env:
         - name: CHECK_INTERVAL
           value: "30"
         - name: CPU_TEMPERATURE_THRESHOLD
@@ skipped 38 lines (36 -> 73) @@
       securityContext:
         fsGroup: 65534
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 100
         runAsUser: 65534
-      serviceAccountName: default
+      serviceAccountName: pve-02-idrac-fan-control

ServiceAccount: utilities/pve-01-idrac-fan-control

+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: pve-01-idrac-fan-control
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: pve-01-idrac-fan-control
+    helm.sh/chart: app-template-5.1.0
+  name: pve-01-idrac-fan-control
+  namespace: utilities

ServiceAccount: utilities/pve-02-idrac-fan-control

+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: pve-02-idrac-fan-control
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: pve-02-idrac-fan-control
+    helm.sh/chart: app-template-5.1.0
+  name: pve-02-idrac-fan-control
+  namespace: utilities
infra (kubernetes/bootstrap/infra.yaml)

Application: argocd/kromgo

   destination:
     namespace: monitoring
     server: https://kubernetes.default.svc
   info:
   - name: Chart
-    value: app-template@4.6.2
+    value: app-template@5.1.0
   - name: Image
     value: ghcr.io/kashalls/kromgo:v0.10.0@sha256:965ecc92d68dc1a4a969397855367bbc70da03227a941ea607b73bb7e0b78fd6
   project: default
   source:
     path: kubernetes/infra/kromgo/
kometa (kubernetes/apps/kometa/app.yaml)

CronJob: media/kometa

           labels:
             app.kubernetes.io/controller: kometa
             app.kubernetes.io/instance: kometa
             app.kubernetes.io/name: kometa
         spec:
-          automountServiceAccountToken: true
+          automountServiceAccountToken: false
           containers:
           - args:
             - |
               mkdir /config/assets 2>/dev/null || true;
               python3 kometa.py --run --read-only-config
@@ skipped 39 lines (32 -> 70) @@
             fsGroup: 100
             fsGroupChangePolicy: OnRootMismatch
             runAsGroup: 100
             runAsNonRoot: true
             runAsUser: 65534
-          serviceAccountName: default
+          serviceAccountName: kometa
           volumes:
           - name: config
             persistentVolumeClaim:
               claimName: kometa
           - configMap:

ServiceAccount: media/kometa

+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: kometa
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: kometa
+    helm.sh/chart: app-template-5.1.0
+  name: kometa
+  namespace: media
kopia-nas-backup (kubernetes/apps/kopia-nas-backup/app.yaml)

CronJob: backup/kopia-nas-backup

           labels:
             app.kubernetes.io/controller: kopia-nas-backup
             app.kubernetes.io/instance: kopia-nas-backup
             app.kubernetes.io/name: kopia-nas-backup
         spec:
-          automountServiceAccountToken: true
+          automountServiceAccountToken: false
           containers:
           - command:
             - /bin/bash
             - /scripts/backup.sh
             env:
@@ skipped 46 lines (34 -> 79) @@
             fsGroup: 100
             fsGroupChangePolicy: OnRootMismatch
             runAsGroup: 100
             runAsNonRoot: true
             runAsUser: 65534
-          serviceAccountName: default
+          serviceAccountName: kopia-nas-backup
           volumes:
           - name: kopia-cache
             persistentVolumeClaim:
               claimName: kopia-nas-backup
           - emptyDir: {}

ServiceAccount: backup/kopia-nas-backup

+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: kopia-nas-backup
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: kopia-nas-backup
+    helm.sh/chart: app-template-5.1.0
+  name: kopia-nas-backup
+  namespace: backup
kopia-server (kubernetes/apps/kopia-server/app.yaml)

Deployment: backup/kopia-server

       labels:
         app.kubernetes.io/controller: kopia-server
         app.kubernetes.io/instance: kopia-server
         app.kubernetes.io/name: kopia-server
     spec:
-      automountServiceAccountToken: true
+      automountServiceAccountToken: false
       containers:
       - args:
         - --tls-cert-file=/tls/tls.crt
         - --tls-key-file=/tls/tls.key
         - --server-username=$(KOPIA_SERVER_USERNAME)
@@ skipped 98 lines (38 -> 135) @@
         fsGroup: 100
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 100
         runAsNonRoot: true
         runAsUser: 65534
-      serviceAccountName: default
+      serviceAccountName: kopia-server
       volumes:
       - name: kopia-cache
         persistentVolumeClaim:
           claimName: kopia-server
       - emptyDir: {}

CronJob: backup/kopia-server-offsite-sync

           labels:
             app.kubernetes.io/controller: offsite-sync
             app.kubernetes.io/instance: kopia-server
             app.kubernetes.io/name: kopia-server
         spec:
-          automountServiceAccountToken: true
+          automountServiceAccountToken: false
           containers:
           - command:
             - /bin/bash
             - /scripts/sync-offsite.sh
             env:
@@ skipped 44 lines (32 -> 75) @@
             fsGroup: 100
             fsGroupChangePolicy: OnRootMismatch
             runAsGroup: 100
             runAsNonRoot: true
             runAsUser: 65534
-          serviceAccountName: default
+          serviceAccountName: kopia-server
           volumes:
           - emptyDir: {}
             name: kopia-config
           - emptyDir: {}
             name: kopia-logs

ServiceAccount: backup/kopia-server

+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: kopia-server
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: kopia-server
+    helm.sh/chart: app-template-5.1.0
+  name: kopia-server
+  namespace: backup
kromgo (kubernetes/infra/kromgo/app.yaml)

Deployment: monitoring/kromgo

       labels:
         app.kubernetes.io/controller: kromgo
         app.kubernetes.io/instance: kromgo
         app.kubernetes.io/name: kromgo
     spec:
-      automountServiceAccountToken: true
+      automountServiceAccountToken: false
       containers:
       - env:
         - name: HEALTH_HOST
           value: 0.0.0.0
         - name: HEALTH_PORT
@@ skipped 41 lines (36 -> 76) @@
       dnsPolicy: ClusterFirst
       enableServiceLinks: false
       hostIPC: false
       hostNetwork: false
       hostPID: false
-      serviceAccountName: default
+      serviceAccountName: kromgo
       volumes:
       - configMap:
           name: kromgo-config-8km4dhhc6h
         name: config-file

ServiceAccount: monitoring/kromgo

+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: kromgo
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: kromgo
+    helm.sh/chart: app-template-5.1.0
+  name: kromgo
+  namespace: monitoring
mosquitto (kubernetes/apps/mosquitto/app.yaml)

Deployment: smarthome/mosquitto

       labels:
         app.kubernetes.io/controller: mosquitto
         app.kubernetes.io/instance: mosquitto
         app.kubernetes.io/name: mosquitto
     spec:
-      automountServiceAccountToken: true
+      automountServiceAccountToken: false
       containers:
       - image: docker.io/library/eclipse-mosquitto:2.0.22@sha256:212f89e1eaeb2c322d6441b64396e3346026674db8fa9c27beac293405c32b3c
         livenessProbe:
           failureThreshold: 3
           initialDelaySeconds: 0
@@ skipped 65 lines (36 -> 100) @@
         runAsGroup: 568
         runAsNonRoot: true
         runAsUser: 568
         seccompProfile:
           type: RuntimeDefault
-      serviceAccountName: default
+      serviceAccountName: mosquitto
       volumes:
       - configMap:
           name: mosquitto-acl
         name: acl
       - configMap:

ServiceAccount: smarthome/mosquitto

+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: mosquitto
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mosquitto
+    helm.sh/chart: app-template-5.1.0
+  name: mosquitto
+  namespace: smarthome
n8n (kubernetes/apps/n8n/app.yaml)

Deployment: selfhosted/n8n

       labels:
         app.kubernetes.io/controller: n8n
         app.kubernetes.io/instance: n8n
         app.kubernetes.io/name: n8n
     spec:
-      automountServiceAccountToken: true
+      automountServiceAccountToken: false
       containers:
       - env:
         - name: DB_SQLITE_VACUUM_ON_STARTUP
           value: "true"
         - name: EXECUTIONS_DATA_MAX_AGE
@@ skipped 23 lines (36 -> 58) @@
           value: "8080"
         - name: N8N_PROTOCOL
           value: https
         - name: WEBHOOK_URL
           value: https://n8n-webhook.peterson.com.ar/
-        image: ghcr.io/n8n-io/n8n:2.37.4@sha256:3ef785400f1a03361584e5533a2e3eb72de56311fd4dc996ac4031a7fdede8bc
+        image: ghcr.io/n8n-io/n8n:2.37.1@sha256:303088e67eb9b545253de11d7ad8a1074e781abe018565fe6fccb05278371178
         name: app
         resources:
           limits:
             memory: 2Gi
           requests:
@@ skipped 10 lines (71 -> 80) @@
       securityContext:
         fsGroup: 1000
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 1000
         runAsUser: 1000
-      serviceAccountName: default
+      serviceAccountName: n8n
       volumes:
       - name: data
         persistentVolumeClaim:
           claimName: n8n

ServiceAccount: selfhosted/n8n

+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: n8n
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: n8n
+    helm.sh/chart: app-template-5.1.0
+  name: n8n
+  namespace: selfhosted
overseerr (kubernetes/apps/seerr/app.yaml)

Deployment: media/overseerr

       labels:
         app.kubernetes.io/controller: overseerr
         app.kubernetes.io/instance: overseerr
         app.kubernetes.io/name: overseerr
     spec:
-      automountServiceAccountToken: true
+      automountServiceAccountToken: false
       containers:
       - env:
         - name: PORT
           value: "5055"
         - name: TZ
@@ skipped 45 lines (38 -> 82) @@
       securityContext:
         fsGroup: 1000
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 1000
         runAsUser: 1000
-      serviceAccountName: default
+      serviceAccountName: overseerr
       volumes:
       - name: cache
         persistentVolumeClaim:
           claimName: overseerr-cache
       - name: config

ServiceAccount: media/overseerr

+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: overseerr
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: overseerr
+    helm.sh/chart: app-template-5.1.0
+  name: overseerr
+  namespace: media
plex (kubernetes/apps/plex/app.yaml)

Deployment: media/plex

       labels:
         app.kubernetes.io/controller: plex
         app.kubernetes.io/instance: plex
         app.kubernetes.io/name: plex
     spec:
-      automountServiceAccountToken: true
+      automountServiceAccountToken: false
       containers:
       - env:
         - name: PLEX_ADVERTISE_URL
           value: https://plex.peterson.com.ar:443,http://10.3.1.5:32400
         - name: PLEX_NO_AUTH_NETWORKS
@@ skipped 59 lines (38 -> 96) @@
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 100
         runAsUser: 65534
         supplementalGroups:
         - 44
-      serviceAccountName: default
+      serviceAccountName: plex
       volumes:
       - name: cache
         persistentVolumeClaim:
           claimName: plex-cache
       - name: config

ServiceAccount: media/plex

+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: plex
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: plex
+    helm.sh/chart: app-template-5.1.0
+  name: plex
+  namespace: media
plex-auto-languages (kubernetes/apps/plex-auto-languages/app.yaml)

Deployment: media/plex-auto-languages

       labels:
         app.kubernetes.io/controller: plex-auto-languages
         app.kubernetes.io/instance: plex-auto-languages
         app.kubernetes.io/name: plex-auto-languages
     spec:
-      automountServiceAccountToken: true
+      automountServiceAccountToken: false
       containers:
       - env:
         - name: TZ
           value: Asia/Jerusalem
         envFrom:
@@ skipped 54 lines (36 -> 89) @@
       securityContext:
         fsGroup: 100
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 100
         runAsUser: 65534
-      serviceAccountName: default
+      serviceAccountName: plex-auto-languages
       volumes:
       - emptyDir: {}
         name: config
       - configMap:
           name: plex-auto-languages-configmap-782dbh8mgt

ServiceAccount: media/plex-auto-languages

+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: plex-auto-languages
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: plex-auto-languages
+    helm.sh/chart: app-template-5.1.0
+  name: plex-auto-languages
+  namespace: media
prowlarr (kubernetes/apps/prowlarr/app.yaml)

Deployment: media/prowlarr

       labels:
         app.kubernetes.io/controller: prowlarr
         app.kubernetes.io/instance: prowlarr
         app.kubernetes.io/name: prowlarr
     spec:
-      automountServiceAccountToken: true
+      automountServiceAccountToken: false
       containers:
       - image: ghcr.io/home-operations/prowlarr:2.6.2.5562@sha256:13c576d2ad93764ab78d4e75c80447bc5489a06a15fd39e89c0be0be01e2ba3a
         livenessProbe:
           failureThreshold: 3
           httpGet:
@@ skipped 36 lines (36 -> 71) @@
       securityContext:
         fsGroup: 65534
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 65534
         runAsUser: 65534
-      serviceAccountName: default
+      serviceAccountName: prowlarr
       volumes:
       - name: config
         persistentVolumeClaim:
           claimName: prowlarr
       - emptyDir: {}

ServiceAccount: media/prowlarr

+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: prowlarr
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: prowlarr
+    helm.sh/chart: app-template-5.1.0
+  name: prowlarr
+  namespace: media
qbrr (kubernetes/apps/qbrr/app.yaml)

Deployment: media/qbrr

       labels:
         app.kubernetes.io/controller: reannounce
         app.kubernetes.io/instance: qbrr
         app.kubernetes.io/name: qbrr
     spec:
-      automountServiceAccountToken: true
+      automountServiceAccountToken: false
       containers:
       - env:
         - name: QBITTORRENT_HOST
           value: http://qbittorrent.media.svc.cluster.local
         image: ghcr.io/buroa/qbrr:0.1.4@sha256:35dce0dafb56f20d628b84eeb0e0214ee55fe18d452e27c850e62d163e239d8f
@@ skipped 18 lines (36 -> 53) @@
       securityContext:
         fsGroup: 65534
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 100
         runAsUser: 65534
-      serviceAccountName: default
+      serviceAccountName: qbrr

ServiceAccount: media/qbrr

+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: qbrr
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: qbrr
+    helm.sh/chart: app-template-5.1.0
+  name: qbrr
+  namespace: media
radarr (kubernetes/apps/radarr/app.yaml)

Deployment: media/radarr

       labels:
         app.kubernetes.io/controller: radarr
         app.kubernetes.io/instance: radarr
         app.kubernetes.io/name: radarr
     spec:
-      automountServiceAccountToken: true
+      automountServiceAccountToken: false
       containers:
       - env:
         - name: TORRENT_CLIENTS
           value: qBittorrent
         - name: USENET_CLIENTS
@@ skipped 58 lines (36 -> 93) @@
       securityContext:
         fsGroup: 65534
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 100
         runAsUser: 65534
-      serviceAccountName: default
+      serviceAccountName: radarr
       volumes:
       - name: config
         persistentVolumeClaim:
           claimName: radarr
       - name: nfs-nas-media

ServiceAccount: media/radarr

+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: radarr
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: radarr
+    helm.sh/chart: app-template-5.1.0
+  name: radarr
+  namespace: media
recyclarr (kubernetes/apps/recyclarr/app.yaml)

CronJob: media/recyclarr

           labels:
             app.kubernetes.io/controller: recyclarr
             app.kubernetes.io/instance: recyclarr
             app.kubernetes.io/name: recyclarr
         spec:
-          automountServiceAccountToken: true
+          automountServiceAccountToken: false
           containers:
           - args:
             - sync
             image: ghcr.io/recyclarr/recyclarr:8.7.1@sha256:73303ba5ee647b6492fee917d3a781c6e59b6cab08f9dfce9482a950846f564f
             name: app
@@ skipped 83 lines (32 -> 114) @@
             fsGroup: 1000
             fsGroupChangePolicy: OnRootMismatch
             runAsGroup: 1000
             runAsNonRoot: true
             runAsUser: 1000
-          serviceAccountName: default
+          serviceAccountName: recyclarr
           volumes:
           - name: config
             persistentVolumeClaim:
               claimName: recyclarr
           - configMap:

ServiceAccount: media/recyclarr

+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: recyclarr
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: recyclarr
+    helm.sh/chart: app-template-5.1.0
+  name: recyclarr
+  namespace: media
rotki (kubernetes/apps/rotki/app.yaml)

Deployment: selfhosted/rotki

       labels:
         app.kubernetes.io/controller: rotki
         app.kubernetes.io/instance: rotki
         app.kubernetes.io/name: rotki
     spec:
-      automountServiceAccountToken: true
+      automountServiceAccountToken: false
       containers:
       - env:
         - name: ROTKI_ACCEPT_DOCKER_RISK
           value: "1"
         - name: TZ
@@ skipped 30 lines (36 -> 65) @@
       dnsPolicy: ClusterFirst
       enableServiceLinks: false
       hostIPC: false
       hostNetwork: false
       hostPID: false
-      serviceAccountName: default
+      serviceAccountName: rotki
       volumes:
       - name: config
         persistentVolumeClaim:
           claimName: rotki
       - emptyDir: {}

ServiceAccount: selfhosted/rotki

+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: rotki
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: rotki
+    helm.sh/chart: app-template-5.1.0
+  name: rotki
+  namespace: selfhosted
sabnzbd (kubernetes/apps/sabnzbd/app.yaml)

Deployment: media/sabnzbd

       labels:
         app.kubernetes.io/controller: sabnzbd
         app.kubernetes.io/instance: sabnzbd
         app.kubernetes.io/name: sabnzbd
     spec:
-      automountServiceAccountToken: true
+      automountServiceAccountToken: false
       containers:
       - env:
         - name: SABNZBD__HOST_WHITELIST_ENTRIES
           value: sabnzbd, sabnzbd.media, sabnzbd.media.svc, sabnzbd.media.svc.cluster,
             sabnzbd.media.svc.cluster.local, sabnzbd.lan.peterson.com.ar
@@ skipped 59 lines (36 -> 94) @@
       securityContext:
         fsGroup: 65534
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 100
         runAsUser: 65534
-      serviceAccountName: default
+      serviceAccountName: sabnzbd
       volumes:
       - name: config
         persistentVolumeClaim:
           claimName: sabnzbd
       - name: downloads

ServiceAccount: media/sabnzbd

+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: sabnzbd
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: sabnzbd
+    helm.sh/chart: app-template-5.1.0
+  name: sabnzbd
+  namespace: media
sonarr (kubernetes/apps/sonarr/app.yaml)

Deployment: media/sonarr

       labels:
         app.kubernetes.io/controller: sonarr
         app.kubernetes.io/instance: sonarr
         app.kubernetes.io/name: sonarr
     spec:
-      automountServiceAccountToken: true
+      automountServiceAccountToken: false
       containers:
       - env:
         - name: TORRENT_CLIENTS
           value: qBittorrent
         - name: USENET_CLIENTS
@@ skipped 58 lines (36 -> 93) @@
       securityContext:
         fsGroup: 65534
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 100
         runAsUser: 65534
-      serviceAccountName: default
+      serviceAccountName: sonarr
       volumes:
       - name: config
         persistentVolumeClaim:
           claimName: sonarr
       - name: nfs-nas-media

ServiceAccount: media/sonarr

+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: sonarr
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: sonarr
+    helm.sh/chart: app-template-5.1.0
+  name: sonarr
+  namespace: media
stirling-pdf (kubernetes/apps/stirling-pdf/app.yaml)

Deployment: selfhosted/stirling-pdf

       labels:
         app.kubernetes.io/controller: stirling-pdf
         app.kubernetes.io/instance: stirling-pdf
         app.kubernetes.io/name: stirling-pdf
     spec:
-      automountServiceAccountToken: true
+      automountServiceAccountToken: false
       containers:
       - env:
         - name: DOCKER_ENABLE_SECURITY
           value: "true"
         - name: PGID
@@ skipped 68 lines (38 -> 105) @@
       hostNetwork: false
       hostPID: false
       securityContext:
         fsGroup: 1000
         fsGroupChangePolicy: OnRootMismatch
-      serviceAccountName: default
+      serviceAccountName: stirling-pdf
       volumes:
       - name: configs
         persistentVolumeClaim:
           claimName: stirling-pdf-configs
       - name: logs

ServiceAccount: selfhosted/stirling-pdf

+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: stirling-pdf
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: stirling-pdf
+    helm.sh/chart: app-template-5.1.0
+  name: stirling-pdf
+  namespace: selfhosted
tautulli (kubernetes/apps/tautulli/app.yaml)

Deployment: media/tautulli

       labels:
         app.kubernetes.io/controller: tautulli
         app.kubernetes.io/instance: tautulli
         app.kubernetes.io/name: tautulli
     spec:
-      automountServiceAccountToken: true
+      automountServiceAccountToken: false
       containers:
       - image: ghcr.io/home-operations/tautulli:2.18.1@sha256:2cc92abed174f89d4fa75ab98e39af0114f37829e9c675718b264cc80931c4f5
         livenessProbe:
           failureThreshold: 3
           httpGet:
@@ skipped 28 lines (36 -> 63) @@
       securityContext:
         fsGroup: 65534
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 65534
         runAsUser: 65534
-      serviceAccountName: default
+      serviceAccountName: tautulli
       volumes:
       - name: config
         persistentVolumeClaim:
           claimName: tautulli

ServiceAccount: media/tautulli

+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: tautulli
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: tautulli
+    helm.sh/chart: app-template-5.1.0
+  name: tautulli
+  namespace: media
tqm (kubernetes/apps/tqm/app.yaml)

CronJob: media/tqm

           labels:
             app.kubernetes.io/controller: tqm
             app.kubernetes.io/instance: tqm
             app.kubernetes.io/name: tqm
         spec:
-          automountServiceAccountToken: true
+          automountServiceAccountToken: false
           containers:
           - args:
             - clean
             - qb
             image: ghcr.io/home-operations/tqm:1.19.0@sha256:025ee0c0c8b75f4c7bffa90216eedb494b9884e092a47e9c49824fe63427808c
@@ skipped 57 lines (32 -> 88) @@
           securityContext:
             fsGroup: 65534
             fsGroupChangePolicy: OnRootMismatch
             runAsGroup: 100
             runAsUser: 65534
-          serviceAccountName: default
+          serviceAccountName: tqm
           volumes:
           - emptyDir: {}
             name: config
           - name: config-file
             secret:

CronJob: media/tqm-orphaned

           labels:
             app.kubernetes.io/controller: orphaned
             app.kubernetes.io/instance: tqm
             app.kubernetes.io/name: tqm
         spec:
-          automountServiceAccountToken: true
+          automountServiceAccountToken: false
           containers:
           - args:
             - orphan
             - qb
             image: ghcr.io/home-operations/tqm:1.19.0@sha256:025ee0c0c8b75f4c7bffa90216eedb494b9884e092a47e9c49824fe63427808c
@@ skipped 29 lines (32 -> 60) @@
           securityContext:
             fsGroup: 65534
             fsGroupChangePolicy: OnRootMismatch
             runAsGroup: 100
             runAsUser: 65534
-          serviceAccountName: default
+          serviceAccountName: tqm
           volumes:
           - emptyDir: {}
             name: config
           - name: config-file
             secret:

ServiceAccount: media/tqm

+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: tqm
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: tqm
+    helm.sh/chart: app-template-5.1.0
+  name: tqm
+  namespace: media

Stats:
[Applications: 86], [Full Run: 1m47s], [Rendering: 42s], [Cluster: 19s], [Argo CD: 47s]

@renovate
renovate Bot force-pushed the renovate/app-template-5.x branch 15 times, most recently from e1316db to fbb30fe Compare May 13, 2026 09:12
@renovate
renovate Bot force-pushed the renovate/app-template-5.x branch 2 times, most recently from 90b5e10 to cabb1fa Compare May 14, 2026 21:53
@renovate renovate Bot changed the title feat(helm)!: Update app-template ( 4.6.2 ➔ 5.0.0 ) feat(helm)!: Update app-template ( 4.6.2 ➔ 5.0.1 ) May 14, 2026
@renovate
renovate Bot force-pushed the renovate/app-template-5.x branch 9 times, most recently from 443d727 to f2dd05b Compare May 21, 2026 04:59
@renovate
renovate Bot force-pushed the renovate/app-template-5.x branch 6 times, most recently from 7a9c527 to 6f64998 Compare July 22, 2026 03:16
@renovate
renovate Bot force-pushed the renovate/app-template-5.x branch 23 times, most recently from b8bf33b to abacaec Compare August 7, 2026 15:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

area/kubernetes manual-review

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants