chore(harbor): apply image updates

services/harbor/helmrelease.yaml

@@ -75,7 +75,7 @@ spec:
       internal:
         image:
           repository: registry.bstein.dev/infra/harbor-redis
-          tag: v2.14.1-arm64 # {"$imagepolicy": "harbor:harbor-redis:tag"}
+          tag: v2.14.1-arm64.16 # {"$imagepolicy": "harbor:harbor-redis:tag"}
         nodeSelector:
           kubernetes.io/hostname: titan-05
         affinity:
@@ -111,7 +111,7 @@ spec:
     core:
       image:
         repository: registry.bstein.dev/infra/harbor-core
-        tag: v2.14.1-arm64 # {"$imagepolicy": "harbor:harbor-core:tag"}
+        tag: v2.14.1-arm64.16 # {"$imagepolicy": "harbor:harbor-core:tag"}
       nodeSelector:
         kubernetes.io/hostname: titan-05
       existingSecret: harbor-core
@@ -141,7 +141,7 @@ spec:
     jobservice:
       image:
         repository: registry.bstein.dev/infra/harbor-jobservice
-        tag: v2.14.1-arm64 # {"$imagepolicy": "harbor:harbor-jobservice:tag"}
+        tag: v2.14.1-arm64.16 # {"$imagepolicy": "harbor:harbor-jobservice:tag"}
       nodeSelector:
         kubernetes.io/hostname: titan-05
       affinity:
@@ -168,7 +168,7 @@ spec:
     portal:
       image:
         repository: registry.bstein.dev/infra/harbor-portal
-        tag: v2.14.1-arm64 # {"$imagepolicy": "harbor:harbor-portal:tag"}
+        tag: v2.14.1-arm64.16 # {"$imagepolicy": "harbor:harbor-portal:tag"}
       nodeSelector:
         kubernetes.io/hostname: titan-05
       affinity:
@@ -196,11 +196,11 @@ spec:
       registry:
         image:
           repository: registry.bstein.dev/infra/harbor-registry
-          tag: v2.14.1-arm64 # {"$imagepolicy": "harbor:harbor-registry:tag"}
+          tag: v2.14.1-arm64.16 # {"$imagepolicy": "harbor:harbor-registry:tag"}
       controller:
         image:
           repository: registry.bstein.dev/infra/harbor-registryctl
-          tag: v2.14.1-arm64 # {"$imagepolicy": "harbor:harbor-registryctl:tag"}
+          tag: v2.14.1-arm64.16 # {"$imagepolicy": "harbor:harbor-registryctl:tag"}
       nodeSelector:
         kubernetes.io/hostname: titan-05
       affinity:
@@ -227,7 +227,7 @@ spec:
     nginx:
       image:
         repository: registry.bstein.dev/infra/harbor-nginx
-        tag: v2.14.1-arm64 # {"$imagepolicy": "harbor:harbor-nginx:tag"}
+        tag: v2.14.1-arm64.16 # {"$imagepolicy": "harbor:harbor-nginx:tag"}
       nodeSelector:
         kubernetes.io/hostname: titan-05
       affinity:
@@ -254,6 +254,6 @@ spec:
     prepare:
       image:
         repository: registry.bstein.dev/infra/harbor-prepare
-        tag: v2.14.1-arm64 # {"$imagepolicy": "harbor:harbor-prepare:tag"}
+        tag: v2.14.1-arm64.16 # {"$imagepolicy": "harbor:harbor-prepare:tag"}
     updateStrategy:
       type: Recreate

services/pegasus/deployment.yaml

@@ -11,9 +11,9 @@ spec:
     rollingUpdate:
       maxSurge: 0
       maxUnavailable: 1
-  selector: { matchLabels: { app: pegasus } }
+  selector: {matchLabels: {app: pegasus}}
   template:
-    metadata: { labels: { app: pegasus } }
+    metadata: {labels: {app: pegasus}}
     spec:
       nodeSelector:
         kubernetes.io/arch: amd64
@@ -52,48 +52,47 @@ spec:
             runAsNonRoot: false
             allowPrivilegeEscalation: false
           volumeMounts:
-            - { name: media, mountPath: /media }
-
+            - {name: media, mountPath: /media}
       containers:
         - name: pegasus
-          image: registry.bstein.dev/streaming/pegasus:1.2.32 # {"$imagepolicy": "jellyfin:pegasus"}
+          image: registry.bstein.dev/streaming/pegasus-vault:1.2.32 # {"$imagepolicy": "jellyfin:pegasus"}
           imagePullPolicy: Always
           command: ["/pegasus"]
           env:
             - name: PEGASUS_MEDIA_ROOT
-              valueFrom: { configMapKeyRef: { name: pegasus-config, key: PEGASUS_MEDIA_ROOT } }
+              valueFrom: {configMapKeyRef: {name: pegasus-config, key: PEGASUS_MEDIA_ROOT}}
             - name: PEGASUS_BIND
-              valueFrom: { configMapKeyRef: { name: pegasus-config, key: PEGASUS_BIND } }
+              valueFrom: {configMapKeyRef: {name: pegasus-config, key: PEGASUS_BIND}}
             - name: PEGASUS_USER_MAP_FILE
               value: "/config/user-map.yaml"
             - name: PEGASUS_SESSION_KEY
-              valueFrom: { secretKeyRef: { name: pegasus-secrets, key: PEGASUS_SESSION_KEY } }
+              valueFrom: {secretKeyRef: {name: pegasus-secrets, key: PEGASUS_SESSION_KEY}}
             - name: JELLYFIN_URL
-              valueFrom: { secretKeyRef: { name: pegasus-secrets, key: JELLYFIN_URL } }
+              valueFrom: {secretKeyRef: {name: pegasus-secrets, key: JELLYFIN_URL}}
             - name: JELLYFIN_API_KEY
-              valueFrom: { secretKeyRef: { name: pegasus-secrets, key: JELLYFIN_API_KEY } }
+              valueFrom: {secretKeyRef: {name: pegasus-secrets, key: JELLYFIN_API_KEY}}
             - name: PEGASUS_DEBUG
               value: "1"
             - name: PEGASUS_DRY_RUN
               value: "0"
-          ports: [{ name: http, containerPort: 8080 }]
+          ports: [{name: http, containerPort: 8080}]
           readinessProbe:
-            httpGet: { path: /healthz, port: http }
+            httpGet: {path: /healthz, port: http}
             initialDelaySeconds: 2
             periodSeconds: 5
             timeoutSeconds: 1
           livenessProbe:
-            httpGet: { path: /healthz, port: http }
+            httpGet: {path: /healthz, port: http}
             initialDelaySeconds: 10
             periodSeconds: 10
             timeoutSeconds: 2
           securityContext:
             allowPrivilegeEscalation: false
             readOnlyRootFilesystem: true
-            capabilities: { drop: ["ALL"] }
+            capabilities: {drop: ["ALL"]}
           resources:
-            requests: { cpu: 100m, memory: 256Mi }
-            limits:   { cpu: 1000m, memory: 1Gi }
+            requests: {cpu: 100m, memory: 256Mi}
+            limits: {cpu: 1000m, memory: 1Gi}
           volumeMounts:
             - name: media
               mountPath: /media
@@ -107,6 +106,6 @@ spec:
           persistentVolumeClaim:
             claimName: jellyfin-media-asteria-new
         - name: config
-          configMap: { name: pegasus-user-map }
+          configMap: {name: pegasus-user-map}
         - name: tmp
           emptyDir: {}