77 Commits

Author SHA1 Message Date
renovate 4cc387ad4d chore(deps): update postgres:18.4-alpine docker digest to 1b1689b (#280) 2026-06-18 03:06:25 +00:00
renovate d79ac7797f chore(deps): update postgres:18.4-alpine docker digest to d3e64d3 (#279) 2026-06-17 07:06:51 +00:00
renovate 22fd59e8f6 chore(deps): update helm release external-secrets to v2.6.0 (#277) 2026-06-10 07:07:07 +00:00
renovate 966b70717f chore(deps): update cloudamqp/lavinmq docker tag to v2.8.1 (#276) 2026-05-21 12:06:52 +00:00
renovate 661c5f89d6 chore(deps): update postgres docker tag to v18.4 (#275) 2026-05-19 06:09:06 +00:00
renovate d6ec45eb04 chore(deps): update helm release external-secrets to v2.5.0 (#274) 2026-05-18 13:18:36 +00:00
renovate 2bb1203bcb chore(deps): update cloudamqp/lavinmq docker tag to v2.8.0 (#270) 2026-05-10 10:07:22 +00:00
renovate 72b5509c75 chore(deps): update helm release external-secrets to v2.4.1 (#267)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [external-secrets](https://github.com/external-secrets/external-secrets) | HelmChart | patch | `2.4.0` → `2.4.1` |

---

### Release Notes

<details>
<summary>external-secrets/external-secrets (external-secrets)</summary>

### [`v2.4.1`](https://github.com/external-secrets/external-secrets/releases/tag/v2.4.1)

[Compare Source](https://github.com/external-secrets/external-secrets/compare/v2.4.0...v2.4.1)

Image: `ghcr.io/external-secrets/external-secrets:v2.4.1`
Image: `ghcr.io/external-secrets/external-secrets:v2.4.1-ubi`
Image: `ghcr.io/external-secrets/external-secrets:v2.4.1-ubi-boringssl`

<!-- Release notes generated using configuration in .github/release.yml at main -->

#### What's Changed

##### General

- chore: release chart for v2.4.0 by [@&#8203;Skarlso](https://github.com/Skarlso) in [#&#8203;6277](https://github.com/external-secrets/external-secrets/pull/6277)
- feat(gcp): support multiple replicationLocations on PushSecret by [@&#8203;alliasgher](https://github.com/alliasgher) in [#&#8203;6225](https://github.com/external-secrets/external-secrets/pull/6225)
- feat(passbolt): add custom CA bundle / CA provider support by [@&#8203;alliasgher](https://github.com/alliasgher) in [#&#8203;6224](https://github.com/external-secrets/external-secrets/pull/6224)
- feat(azure): add contentType support for PushSecret by [@&#8203;ppatel1604](https://github.com/ppatel1604) in [#&#8203;6249](https://github.com/external-secrets/external-secrets/pull/6249)
- feat(charts): add liveness probes to cert-controller and webhook by [@&#8203;mattcarp12](https://github.com/mattcarp12) in [#&#8203;6147](https://github.com/external-secrets/external-secrets/pull/6147)
- fix: prevent creation of specific type of secrets by [@&#8203;Skarlso](https://github.com/Skarlso) in [#&#8203;6280](https://github.com/external-secrets/external-secrets/pull/6280)

##### Dependencies

- chore(deps): bump golang from `f853308` to `f853308` by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6282](https://github.com/external-secrets/external-secrets/pull/6282)
- chore(deps): bump alpine from `2510918` to `5b10f43` in /hack/api-docs by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6285](https://github.com/external-secrets/external-secrets/pull/6285)
- chore(deps): bump aquasecurity/trivy-action from 0.35.0 to 0.36.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6283](https://github.com/external-secrets/external-secrets/pull/6283)
- chore(deps): bump goreleaser/goreleaser-action from 7.1.0 to 7.2.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6284](https://github.com/external-secrets/external-secrets/pull/6284)
- chore(deps): bump ubi9/ubi from `cf13fe2` to `fd3612e` by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6281](https://github.com/external-secrets/external-secrets/pull/6281)

**Full Changelog**: <https://github.com/external-secrets/external-secrets/compare/v2.4.0...v2.4.1>

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNDAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjE0MC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #267
Co-authored-by: Renovate Bot <renovate@unbound.se>
Co-committed-by: Renovate Bot <renovate@unbound.se>
2026-05-01 16:23:36 +00:00
renovate 91db221d07 chore(deps): update cloudamqp/lavinmq docker tag to v2.7.2 (#266) 2026-05-01 13:06:10 +00:00
renovate 9339ceae0e chore(deps): update helm release external-secrets to v2.4.0 (#265) 2026-04-27 19:06:33 +00:00
renovate 95aaf27dd5 chore(deps): update cloudamqp/lavinmq docker tag to v2.7.1 (#264) 2026-04-27 09:09:57 +00:00
renovate e2957f15de chore(deps): update postgres:18.3-alpine docker digest to 54451ec (#263) 2026-04-22 09:06:58 +00:00
renovate e2d5d970b7 chore(deps): update postgres:18.3-alpine docker digest to d164db0 (#262) 2026-04-22 03:05:30 +00:00
renovate 4f0115148d chore(deps): update cloudamqp/lavinmq docker tag to v2.7.0 (#260) 2026-04-19 11:07:49 +00:00
argoyle 73ccafab68 fix(postgres): remove memory limit and add document database (#259)
## Summary

- Remove the 600Mi memory limit on the local Postgres Deployment. With `shared_buffers=384MB` + `max_connections=300` the pod was being repeatedly OOMKilled under real workloads, leaving clients with intermittent `connect: connection refused`. Keep the 400Mi request for scheduling.
- Add `document` to the seeded database list in `initdb.sh`.

## Test plan

- [x] `kubectl --context kind-unbound apply -f k8s/infra/postgres.yaml` — rollout succeeds
- [x] Postgres pod stable (0 restarts) after apply
- [ ] On a fresh cluster (`./setup`), verify the `document` database is created (requires empty `data/postgres/`)

Reviewed-on: #259
2026-04-18 16:34:17 +00:00
renovate b6918819aa chore(deps): update cloudamqp/lavinmq docker tag to v2.6.11 (#258) 2026-04-18 13:06:24 +00:00
renovate eb3ca05bfb chore(deps): update postgres:18.3-alpine docker digest to 5209801 (#257) 2026-04-16 16:11:16 +00:00
renovate bf2332e1ac chore(deps): update postgres:18.3-alpine docker digest to c48f944 (#256) 2026-04-16 02:07:49 +00:00
renovate 8ed20f7e58 chore(deps): update postgres:18.3-alpine docker digest to b73cfac (#255) 2026-04-16 00:06:36 +00:00
renovate 17c97b4333 chore(deps): update helm release cert-manager to v1.20.2 (#253) 2026-04-14 15:06:49 +00:00
renovate a79fb8df5a chore(deps): update helm release external-secrets to v2.3.0 (#252) 2026-04-13 16:05:54 +00:00
renovate 068537b11d chore(deps): update helm release cert-manager to v1.20.1 (#251) 2026-03-27 20:05:31 +00:00
renovate 5c3d6736dc chore(deps): update helm release external-secrets to v2.2.0 (#250) 2026-03-20 17:05:24 +00:00
renovate 99968b13b7 chore(deps): update helm release cert-manager to v1.20.0 (#248) 2026-03-10 16:06:09 +00:00
renovate 03bfdf847f chore(deps): update cloudamqp/lavinmq docker tag to v2.6.10 (#246) 2026-03-09 11:13:40 +00:00
renovate 9a066ac5d0 chore(deps): update helm release external-secrets to v2.1.0 (#245) 2026-03-07 18:05:18 +00:00
renovate b7f407e2d5 chore(deps): update cloudamqp/lavinmq docker tag to v2.6.9 (#244) 2026-03-03 18:08:05 +00:00
renovate f5aac44bd6 chore(deps): update postgres:18.3-alpine docker digest to 4da1a48 (#243) 2026-02-28 09:05:40 +00:00
renovate 9ff876b158 chore(deps): pin cloudamqp/lavinmq docker tag to b564dd1 (#242) 2026-02-27 14:07:24 +00:00
argoyle d89ec816a0 feat(infra): replace RabbitMQ with LavinMQ 2026-02-27 14:42:27 +01:00
renovate 5c0d102410 chore(deps): update postgres:18.3-alpine docker digest to 97e0c20 (#240) 2026-02-26 23:06:05 +00:00
renovate 34d214609d chore(deps): update postgres docker tag to v18.3 (#239) 2026-02-26 19:27:55 +00:00
renovate ed5068ae50 chore(deps): update rabbitmq:4.2.4-management docker digest to d998227 (#238) 2026-02-25 10:07:04 +00:00
renovate 5048ff2c75 chore(deps): update rabbitmq:4.2.4-management docker digest to d957c24 (#237) 2026-02-25 05:05:35 +00:00
renovate 30d9343114 chore(deps): update helm release cert-manager to v1.19.4 2026-02-24 16:08:09 +00:00
renovate 1d9202c985 chore(deps): update rabbitmq:4.2.4-management docker digest to ae4a462 2026-02-21 00:05:23 +00:00
renovate 96b2c82124 chore(deps): update helm release external-secrets to v2.0.1 2026-02-20 14:18:52 +00:00
renovate 88074eac07 chore(deps): update postgres:18.2-alpine docker digest to 035b9ab 2026-02-19 02:21:07 +00:00
renovate 3fde6c72da chore(deps): update rabbitmq:4.2.4-management docker digest to 1b5ac1f 2026-02-18 11:07:09 +00:00
renovate dddf77edaa chore(deps): update rabbitmq:4.2.4-management docker digest to f88cfa9 2026-02-18 02:06:06 +00:00
renovate 0f1e7d4fb3 chore(deps): update rabbitmq docker tag to v4.2.4 2026-02-17 20:05:57 +00:00
renovate 2fd4ac7dc7 chore(deps): update postgres:18.2-alpine docker digest to 88f300b (#229) 2026-02-13 02:05:25 +00:00
renovate 50d01cf6a5 chore(deps): update postgres docker tag to v18.2 (#228) 2026-02-12 22:05:30 +00:00
renovate 00d4bb401f chore(deps): update rabbitmq:4.2.3-management docker digest to be25dc3 (#227) 2026-02-10 02:04:49 +00:00
renovate a6cbc05f1e chore(deps): update rabbitmq:4.2.3-management docker digest to 55d9fa8 (#226) 2026-02-08 06:05:53 +00:00
renovate 5915562f2b chore(deps): update helm release external-secrets to v2 2026-02-06 16:06:28 +00:00
renovate 02f7fe89a5 chore(deps): update rabbitmq:4.2.3-management docker digest to 1c04fc9 (#224) 2026-02-05 23:05:56 +00:00
renovate 5e87c78b4a chore(deps): update rabbitmq:4.2.3-management docker digest to 497a531 (#223) 2026-02-03 23:30:20 +00:00
renovate 0e110bc22a chore(deps): update helm release external-secrets to v1.3.2 (#222) 2026-02-03 21:45:59 +00:00
renovate 4e1b3562bf chore(deps): update rabbitmq:4.2.3-management docker digest to c4249e1 (#221) 2026-02-03 20:10:55 +00:00