Skip to content

feat(helm)!: Update app-template ( 4.6.2 ➔ 5.0.1 )#738

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/app-template-5.x
Open

feat(helm)!: Update app-template ( 4.6.2 ➔ 5.0.1 )#738
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/app-template-5.x

Conversation

@renovate

@renovate renovate Bot commented May 7, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
app-template major 4.6.2 → 5.0.1
app-template HelmChart major 4.6.2 → 5.0.1

Release Notes

bjw-s-labs/helm-charts (app-template)

v5.0.1

Compare Source

Changelog:
Changed

v5.0.0

Compare Source

Changelog:
Changed

Configuration

📅 Schedule: (in timezone Asia/Jerusalem)

  • Branch creation
    • "after 2am and before 7am"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@github-actions

github-actions Bot commented May 7, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Argo CD Diff Preview

Summary:

Modified (24):
± apps (+21|-21)
± bazarr (+12|-2)
± cross-seed (+12|-2)
± idrac-fan-control (+24|-4)
± infra (+1|-1)
± kometa (+12|-2)
± kopia-nas-backup (+12|-2)
± kopia-server (+14|-4)
± kromgo (+12|-2)
± mosquitto (+12|-2)
± n8n (+12|-2)
± overseerr (+12|-2)
± plex (+12|-2)
± plex-auto-languages (+12|-2)
± prowlarr (+12|-2)
± qbrr (+12|-2)
± radarr (+12|-2)
± recyclarr (+12|-2)
± rotki (+12|-2)
± sabnzbd (+12|-2)
± sonarr (+12|-2)
± stirling-pdf (+12|-2)
± tautulli (+12|-2)
± tqm (+14|-4)
apps (kubernetes/bootstrap/apps.yaml)

Application: argocd/bazarr

   destination:
     namespace: media
     server: https://kubernetes.default.svc
   info:
   - name: Chart
-    value: app-template@4.6.2
+    value: app-template@5.0.1
   - name: Image
     value: ghcr.io/home-operations/bazarr:1.5.6@sha256:79fc37491f55c7e24427bcd669bce3df2d7415ca432a47ce9d53cc5988af8411
   project: default
   source:
     path: kubernetes/apps/bazarr/

Application: argocd/cross-seed

   destination:
     namespace: media
     server: https://kubernetes.default.svc
   info:
   - name: Chart
-    value: app-template@4.6.2
+    value: app-template@5.0.1
   - name: Image
     value: ghcr.io/cross-seed/cross-seed:6.13.7@sha256:a1fed512261fd968c55cb03c51cff9c6620aa76a34b3b591afca95c890aa8225
   project: default
   source:
     path: kubernetes/apps/cross-seed/

Application: argocd/idrac-fan-control

   destination:
     namespace: utilities
     server: https://kubernetes.default.svc
   info:
   - name: Chart
-    value: app-template@4.6.2
+    value: app-template@5.0.1
   - name: Image
     value: ghcr.io/tigerblue77/dell_idrac_fan_controller:latest@sha256:d308284e30302d4b8dc8ad2ba15e93576db48275339b394ea390f4d86a698d41
   project: default
   source:
     path: kubernetes/apps/idrac-fan-control/

Application: argocd/kometa

   destination:
     namespace: media
     server: https://kubernetes.default.svc
   info:
   - name: Chart
-    value: app-template@4.6.2
+    value: app-template@5.0.1
   - name: Image
     value: kometateam/kometa:v2.3.1@sha256:683c04827ef3fecf1cc5cb178f75f91f968aef6c6d89d34bc9c70966fd1d7259
   project: default
   source:
     path: kubernetes/apps/kometa/

Application: argocd/kopia-nas-backup

   destination:
     namespace: backup
     server: https://kubernetes.default.svc
   info:
   - name: Chart
-    value: app-template@4.6.2
+    value: app-template@5.0.1
   - name: Image
     value: ghcr.io/home-operations/kopia:0.22.3@sha256:17ab64542280197a5368247deaefadc3e3bbe15714ab666c2455a06824e86efd
   project: default
   source:
     path: kubernetes/apps/kopia-nas-backup/

Application: argocd/kopia-server

   destination:
     namespace: backup
     server: https://kubernetes.default.svc
   info:
   - name: Chart
-    value: app-template@4.6.2
+    value: app-template@5.0.1
   - name: Image
     value: ghcr.io/home-operations/kopia:0.22.3@sha256:17ab64542280197a5368247deaefadc3e3bbe15714ab666c2455a06824e86efd
   project: default
   source:
     path: kubernetes/apps/kopia-server/

Application: argocd/mosquitto

   destination:
     namespace: smarthome
     server: https://kubernetes.default.svc
   info:
   - name: Chart
-    value: app-template@4.6.2
+    value: app-template@5.0.1
   - name: Image
     value: docker.io/library/eclipse-mosquitto:2.0.22@sha256:914f529386804c8278a4e581526b9be5e1604df44b30daabc70aa97dcefe5268
   project: default
   source:
     path: kubernetes/apps/mosquitto/

Application: argocd/n8n

   destination:
     namespace: selfhosted
     server: https://kubernetes.default.svc
   info:
   - name: Chart
-    value: app-template@4.6.2
+    value: app-template@5.0.1
   - name: Image
     value: ghcr.io/n8n-io/n8n:2.23.1@sha256:a0aa4012094eec804c17ef8014b1e397a337d33f63faebf33b439388ada93289
   project: default
   source:
     path: kubernetes/apps/n8n/

Application: argocd/overseerr

   destination:
     namespace: media
     server: https://kubernetes.default.svc
   info:
   - name: Chart
-    value: app-template@4.6.2
+    value: app-template@5.0.1
   - name: Image
     value: ghcr.io/seerr-team/seerr:v3.2.0@sha256:c4cbd5121236ac2f70a843a0b920b68a27976be57917555f1c45b08a1e6b2aad
   project: default
   source:
     path: kubernetes/apps/seerr/

Application: argocd/plex

   destination:
     namespace: media
     server: https://kubernetes.default.svc
   info:
   - name: Chart
-    value: app-template@4.6.2
+    value: app-template@5.0.1
   - name: Image
     value: ghcr.io/home-operations/plex:1.43.2.10687@sha256:be00a2ad851ea3193cd870636f908eb6425ad89390f23cdb08daa35ab5cceacc
   project: default
   source:
     path: kubernetes/apps/plex/

Application: argocd/plex-auto-languages

   destination:
     namespace: media
     server: https://kubernetes.default.svc
   info:
   - name: Chart
-    value: app-template@4.6.2
+    value: app-template@5.0.1
   - name: Image
     value: ghcr.io/journeydocker/plex-auto-languages:1.5.3@sha256:976ad44607f5b1ad71f7cbc7a785d3b708c4abdb61b07f27b84d0a06f67e9ed0
   project: default
   source:
     path: kubernetes/apps/plex-auto-languages/

Application: argocd/prowlarr

   destination:
     namespace: media
     server: https://kubernetes.default.svc
   info:
   - name: Chart
-    value: app-template@4.6.2
+    value: app-template@5.0.1
   - name: Image
     value: ghcr.io/home-operations/prowlarr:2.3.7.5365@sha256:b9557d772c974901aed9285189d904b613f1f07750fca930eecfe78544bd3d48
   project: default
   source:
     path: kubernetes/apps/prowlarr/

Application: argocd/qbrr

   destination:
     namespace: media
     server: https://kubernetes.default.svc
   info:
   - name: Chart
-    value: app-template@4.6.2
+    value: app-template@5.0.1
   - name: Image
     value: ghcr.io/buroa/qbrr:0.1.4@sha256:35dce0dafb56f20d628b84eeb0e0214ee55fe18d452e27c850e62d163e239d8f
   project: default
   source:
     path: kubernetes/apps/qbrr/

Application: argocd/radarr

   destination:
     namespace: media
     server: https://kubernetes.default.svc
   info:
   - name: Chart
-    value: app-template@4.6.2
+    value: app-template@5.0.1
   - name: Image
     value: ghcr.io/home-operations/radarr:6.2.0.10390@sha256:be596a2f896fdf15077af027f44500f73e1f6fb7b450a6494b37dd25b7cc5927
   project: default
   source:
     path: kubernetes/apps/radarr/

Application: argocd/recyclarr

   destination:
     namespace: media
     server: https://kubernetes.default.svc
   info:
   - name: Chart
-    value: app-template@4.6.2
+    value: app-template@5.0.1
   - name: Image
     value: ghcr.io/recyclarr/recyclarr:8.6.0@sha256:3c38ceeb54438dd8327e4e65c9b48ba601a6d20fff833342d93c9b0bc4b1930b
   project: default
   source:
     path: kubernetes/apps/recyclarr/

Application: argocd/rotki

   destination:
     namespace: selfhosted
     server: https://kubernetes.default.svc
   info:
   - name: Chart
-    value: app-template@4.6.2
+    value: app-template@5.0.1
   - name: Image
     value: rotki/rotki:v1.43.1@sha256:98b472cf5bea6481445ed3cf7001497cc82e37cdf4495b1e378c051f2b0de962
   project: default
   source:
     path: kubernetes/apps/rotki/

Application: argocd/sabnzbd

   destination:
     namespace: media
     server: https://kubernetes.default.svc
   info:
   - name: Chart
-    value: app-template@4.6.2
+    value: app-template@5.0.1
   - name: Image
     value: ghcr.io/home-operations/sabnzbd:4.5.5@sha256:f5570c0a370596ab656db6d3baa830b90a6fd9952b71ae805d022a2dcb3db12f
   project: default
   source:
     path: kubernetes/apps/sabnzbd/

Application: argocd/sonarr

   destination:
     namespace: media
     server: https://kubernetes.default.svc
   info:
   - name: Chart
-    value: app-template@4.6.2
+    value: app-template@5.0.1
   - name: Image
     value: ghcr.io/home-operations/sonarr:4.0.17.2967@sha256:4ff5667a371e08b098858fa2457a99a5fef5f6a32640eb8567efe979d13ac9fc
   project: default
   source:
     path: kubernetes/apps/sonarr/

Application: argocd/stirling-pdf

   destination:
     namespace: selfhosted
     server: https://kubernetes.default.svc
   info:
   - name: Chart
-    value: app-template@4.6.2
+    value: app-template@5.0.1
   - name: Image
     value: ghcr.io/stirling-tools/s-pdf:2.11.0-fat@sha256:fc747128f97652a99318ae861f1cdd56abe9b105d1d62e07bff3c2d781ea595f
   project: default
   source:
     path: kubernetes/apps/stirling-pdf/

Application: argocd/tautulli

   destination:
     namespace: media
     server: https://kubernetes.default.svc
   info:
   - name: Chart
-    value: app-template@4.6.2
+    value: app-template@5.0.1
   - name: Image
     value: ghcr.io/home-operations/tautulli:2.17.1@sha256:2183820d45a1413b4b8868fc18ad5eb9259630ea0151348cdc9cfb4017a0dd33
   project: default
   source:
     path: kubernetes/apps/tautulli/

Application: argocd/tqm

   destination:
     namespace: media
     server: https://kubernetes.default.svc
   info:
   - name: Chart
-    value: app-template@4.6.2
+    value: app-template@5.0.1
   - name: Image
     value: ghcr.io/home-operations/tqm:1.19.0@sha256:025ee0c0c8b75f4c7bffa90216eedb494b9884e092a47e9c49824fe63427808c
   project: default
   source:
     path: kubernetes/apps/tqm/
bazarr (kubernetes/apps/bazarr/app.yaml)

Deployment: media/bazarr

       labels:
         app.kubernetes.io/controller: bazarr
         app.kubernetes.io/instance: bazarr
         app.kubernetes.io/name: bazarr
     spec:
-      automountServiceAccountToken: true
+      automountServiceAccountToken: false
       containers:
       - image: ghcr.io/home-operations/bazarr:1.5.6@sha256:79fc37491f55c7e24427bcd669bce3df2d7415ca432a47ce9d53cc5988af8411
         livenessProbe:
           failureThreshold: 3
           httpGet:
@@ skipped 39 lines (36 -> 74) @@
       securityContext:
         fsGroup: 65534
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 100
         runAsUser: 65534
-      serviceAccountName: default
+      serviceAccountName: bazarr
       volumes:
       - name: config
         persistentVolumeClaim:
           claimName: bazarr
       - name: nfs-nas-media

ServiceAccount: media/bazarr

+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: bazarr
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: bazarr
+    helm.sh/chart: app-template-5.0.1
+  name: bazarr
+  namespace: media
cross-seed (kubernetes/apps/cross-seed/app.yaml)

Deployment: media/cross-seed

       labels:
         app.kubernetes.io/controller: cross-seed
         app.kubernetes.io/instance: cross-seed
         app.kubernetes.io/name: cross-seed
     spec:
-      automountServiceAccountToken: true
+      automountServiceAccountToken: false
       containers:
       - args:
         - daemon
         - -v
         image: ghcr.io/cross-seed/cross-seed:6.13.7@sha256:a1fed512261fd968c55cb03c51cff9c6620aa76a34b3b591afca95c890aa8225
@@ skipped 52 lines (36 -> 87) @@
       securityContext:
         fsGroup: 65534
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 100
         runAsUser: 65534
-      serviceAccountName: default
+      serviceAccountName: cross-seed
       volumes:
       - name: config
         persistentVolumeClaim:
           claimName: cross-seed
       - name: config-file

ServiceAccount: media/cross-seed

+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: cross-seed
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: cross-seed
+    helm.sh/chart: app-template-5.0.1
+  name: cross-seed
+  namespace: media
idrac-fan-control (kubernetes/apps/idrac-fan-control/app.yaml)

Deployment: utilities/pve-01-idrac-fan-control

       labels:
         app.kubernetes.io/controller: pve-01-idrac-fan-control
         app.kubernetes.io/instance: pve-01-idrac-fan-control
         app.kubernetes.io/name: pve-01-idrac-fan-control
     spec:
-      automountServiceAccountToken: true
+      automountServiceAccountToken: false
       containers:
       - env:
         - name: CHECK_INTERVAL
           value: "30"
         - name: CPU_TEMPERATURE_THRESHOLD
@@ skipped 38 lines (36 -> 73) @@
       securityContext:
         fsGroup: 65534
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 100
         runAsUser: 65534
-      serviceAccountName: default
+      serviceAccountName: pve-01-idrac-fan-control

Deployment: utilities/pve-02-idrac-fan-control

       labels:
         app.kubernetes.io/controller: pve-02-idrac-fan-control
         app.kubernetes.io/instance: pve-02-idrac-fan-control
         app.kubernetes.io/name: pve-02-idrac-fan-control
     spec:
-      automountServiceAccountToken: true
+      automountServiceAccountToken: false
       containers:
       - env:
         - name: CHECK_INTERVAL
           value: "30"
         - name: CPU_TEMPERATURE_THRESHOLD
@@ skipped 38 lines (36 -> 73) @@
       securityContext:
         fsGroup: 65534
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 100
         runAsUser: 65534
-      serviceAccountName: default
+      serviceAccountName: pve-02-idrac-fan-control

ServiceAccount: utilities/pve-01-idrac-fan-control

+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: pve-01-idrac-fan-control
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: pve-01-idrac-fan-control
+    helm.sh/chart: app-template-5.0.1
+  name: pve-01-idrac-fan-control
+  namespace: utilities

ServiceAccount: utilities/pve-02-idrac-fan-control

+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: pve-02-idrac-fan-control
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: pve-02-idrac-fan-control
+    helm.sh/chart: app-template-5.0.1
+  name: pve-02-idrac-fan-control
+  namespace: utilities
infra (kubernetes/bootstrap/infra.yaml)

Application: argocd/kromgo

   destination:
     namespace: monitoring
     server: https://kubernetes.default.svc
   info:
   - name: Chart
-    value: app-template@4.6.2
+    value: app-template@5.0.1
   - name: Image
     value: ghcr.io/kashalls/kromgo:v0.10.0@sha256:965ecc92d68dc1a4a969397855367bbc70da03227a941ea607b73bb7e0b78fd6
   project: default
   source:
     path: kubernetes/infra/kromgo/
kometa (kubernetes/apps/kometa/app.yaml)

CronJob: media/kometa

           labels:
             app.kubernetes.io/controller: kometa
             app.kubernetes.io/instance: kometa
             app.kubernetes.io/name: kometa
         spec:
-          automountServiceAccountToken: true
+          automountServiceAccountToken: false
           containers:
           - args:
             - |
               mkdir /config/assets 2>/dev/null || true;
               python3 kometa.py --run --read-only-config
@@ skipped 39 lines (32 -> 70) @@
             fsGroup: 100
             fsGroupChangePolicy: OnRootMismatch
             runAsGroup: 100
             runAsNonRoot: true
             runAsUser: 65534
-          serviceAccountName: default
+          serviceAccountName: kometa
           volumes:
           - name: config
             persistentVolumeClaim:
               claimName: kometa
           - configMap:

ServiceAccount: media/kometa

+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: kometa
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: kometa
+    helm.sh/chart: app-template-5.0.1
+  name: kometa
+  namespace: media
kopia-nas-backup (kubernetes/apps/kopia-nas-backup/app.yaml)

CronJob: backup/kopia-nas-backup

           labels:
             app.kubernetes.io/controller: kopia-nas-backup
             app.kubernetes.io/instance: kopia-nas-backup
             app.kubernetes.io/name: kopia-nas-backup
         spec:
-          automountServiceAccountToken: true
+          automountServiceAccountToken: false
           containers:
           - command:
             - /bin/bash
             - /scripts/backup.sh
             env:
@@ skipped 46 lines (32 -> 77) @@
             fsGroup: 100
             fsGroupChangePolicy: OnRootMismatch
             runAsGroup: 100
             runAsNonRoot: true
             runAsUser: 65534
-          serviceAccountName: default
+          serviceAccountName: kopia-nas-backup
           volumes:
           - name: kopia-cache
             persistentVolumeClaim:
               claimName: kopia-nas-backup
           - emptyDir: {}

ServiceAccount: backup/kopia-nas-backup

+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: kopia-nas-backup
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: kopia-nas-backup
+    helm.sh/chart: app-template-5.0.1
+  name: kopia-nas-backup
+  namespace: backup
kopia-server (kubernetes/apps/kopia-server/app.yaml)

Deployment: backup/kopia-server

       labels:
         app.kubernetes.io/controller: kopia-server
         app.kubernetes.io/instance: kopia-server
         app.kubernetes.io/name: kopia-server
     spec:
-      automountServiceAccountToken: true
+      automountServiceAccountToken: false
       containers:
       - args:
         - --tls-cert-file=/tls/tls.crt
         - --tls-key-file=/tls/tls.key
         - --server-username=$(KOPIA_SERVER_USERNAME)
@@ skipped 98 lines (36 -> 133) @@
         fsGroup: 100
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 100
         runAsNonRoot: true
         runAsUser: 65534
-      serviceAccountName: default
+      serviceAccountName: kopia-server
       volumes:
       - name: kopia-cache
         persistentVolumeClaim:
           claimName: kopia-server
       - emptyDir: {}

CronJob: backup/kopia-server-offsite-sync

           labels:
             app.kubernetes.io/controller: offsite-sync
             app.kubernetes.io/instance: kopia-server
             app.kubernetes.io/name: kopia-server
         spec:
-          automountServiceAccountToken: true
+          automountServiceAccountToken: false
           containers:
           - command:
             - /bin/bash
             - /scripts/sync-offsite.sh
             env:
@@ skipped 44 lines (32 -> 75) @@
             fsGroup: 100
             fsGroupChangePolicy: OnRootMismatch
             runAsGroup: 100
             runAsNonRoot: true
             runAsUser: 65534
-          serviceAccountName: default
+          serviceAccountName: kopia-server
           volumes:
           - emptyDir: {}
             name: kopia-config
           - emptyDir: {}
             name: kopia-logs

ServiceAccount: backup/kopia-server

+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: kopia-server
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: kopia-server
+    helm.sh/chart: app-template-5.0.1
+  name: kopia-server
+  namespace: backup
kromgo (kubernetes/infra/kromgo/app.yaml)

Deployment: monitoring/kromgo

       labels:
         app.kubernetes.io/controller: kromgo
         app.kubernetes.io/instance: kromgo
         app.kubernetes.io/name: kromgo
     spec:
-      automountServiceAccountToken: true
+      automountServiceAccountToken: false
       containers:
       - env:
         - name: HEALTH_HOST
           value: 0.0.0.0
         - name: HEALTH_PORT
@@ skipped 41 lines (36 -> 76) @@
       dnsPolicy: ClusterFirst
       enableServiceLinks: false
       hostIPC: false
       hostNetwork: false
       hostPID: false
-      serviceAccountName: default
+      serviceAccountName: kromgo
       volumes:
       - configMap:
           name: kromgo-config-8km4dhhc6h
         name: config-file

ServiceAccount: monitoring/kromgo

+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: kromgo
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: kromgo
+    helm.sh/chart: app-template-5.0.1
+  name: kromgo
+  namespace: monitoring
mosquitto (kubernetes/apps/mosquitto/app.yaml)

Deployment: smarthome/mosquitto

       labels:
         app.kubernetes.io/controller: mosquitto
         app.kubernetes.io/instance: mosquitto
         app.kubernetes.io/name: mosquitto
     spec:
-      automountServiceAccountToken: true
+      automountServiceAccountToken: false
       containers:
       - image: docker.io/library/eclipse-mosquitto:2.0.22@sha256:914f529386804c8278a4e581526b9be5e1604df44b30daabc70aa97dcefe5268
         livenessProbe:
           failureThreshold: 3
           initialDelaySeconds: 0
@@ skipped 65 lines (36 -> 100) @@
         runAsGroup: 568
         runAsNonRoot: true
         runAsUser: 568
         seccompProfile:
           type: RuntimeDefault
-      serviceAccountName: default
+      serviceAccountName: mosquitto
       volumes:
       - configMap:
           name: mosquitto-acl
         name: acl
       - configMap:

ServiceAccount: smarthome/mosquitto

+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: mosquitto
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mosquitto
+    helm.sh/chart: app-template-5.0.1
+  name: mosquitto
+  namespace: smarthome
n8n (kubernetes/apps/n8n/app.yaml)

Deployment: selfhosted/n8n

       labels:
         app.kubernetes.io/controller: n8n
         app.kubernetes.io/instance: n8n
         app.kubernetes.io/name: n8n
     spec:
-      automountServiceAccountToken: true
+      automountServiceAccountToken: false
       containers:
       - env:
         - name: DB_SQLITE_VACUUM_ON_STARTUP
           value: "true"
         - name: EXECUTIONS_DATA_MAX_AGE
@@ skipped 44 lines (36 -> 79) @@
       securityContext:
         fsGroup: 1000
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 1000
         runAsUser: 1000
-      serviceAccountName: default
+      serviceAccountName: n8n
       volumes:
       - name: data
         persistentVolumeClaim:
           claimName: n8n

ServiceAccount: selfhosted/n8n

+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: n8n
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: n8n
+    helm.sh/chart: app-template-5.0.1
+  name: n8n
+  namespace: selfhosted
overseerr (kubernetes/apps/seerr/app.yaml)

Deployment: media/overseerr

       labels:
         app.kubernetes.io/controller: overseerr
         app.kubernetes.io/instance: overseerr
         app.kubernetes.io/name: overseerr
     spec:
-      automountServiceAccountToken: true
+      automountServiceAccountToken: false
       containers:
       - env:
         - name: PORT
           value: "5055"
         - name: TZ
@@ skipped 45 lines (36 -> 80) @@
       securityContext:
         fsGroup: 1000
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 1000
         runAsUser: 1000
-      serviceAccountName: default
+      serviceAccountName: overseerr
       volumes:
       - name: cache
         persistentVolumeClaim:
           claimName: overseerr-cache
       - name: config

ServiceAccount: media/overseerr

+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: overseerr
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: overseerr
+    helm.sh/chart: app-template-5.0.1
+  name: overseerr
+  namespace: media
plex (kubernetes/apps/plex/app.yaml)

Deployment: media/plex

       labels:
         app.kubernetes.io/controller: plex
         app.kubernetes.io/instance: plex
         app.kubernetes.io/name: plex
     spec:
-      automountServiceAccountToken: true
+      automountServiceAccountToken: false
       containers:
       - env:
         - name: PLEX_ADVERTISE_URL
           value: https://plex.peterson.com.ar:443,http://10.3.1.5:32400
         - name: PLEX_NO_AUTH_NETWORKS
@@ skipped 59 lines (36 -> 94) @@
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 100
         runAsUser: 65534
         supplementalGroups:
         - 44
-      serviceAccountName: default
+      serviceAccountName: plex
       volumes:
       - name: cache
         persistentVolumeClaim:
           claimName: plex-cache
       - name: config

ServiceAccount: media/plex

+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: plex
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: plex
+    helm.sh/chart: app-template-5.0.1
+  name: plex
+  namespace: media
plex-auto-languages (kubernetes/apps/plex-auto-languages/app.yaml)

Deployment: media/plex-auto-languages

       labels:
         app.kubernetes.io/controller: plex-auto-languages
         app.kubernetes.io/instance: plex-auto-languages
         app.kubernetes.io/name: plex-auto-languages
     spec:
-      automountServiceAccountToken: true
+      automountServiceAccountToken: false
       containers:
       - env:
         - name: TZ
           value: Asia/Jerusalem
         envFrom:
@@ skipped 54 lines (36 -> 89) @@
       securityContext:
         fsGroup: 100
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 100
         runAsUser: 65534
-      serviceAccountName: default
+      serviceAccountName: plex-auto-languages
       volumes:
       - emptyDir: {}
         name: config
       - configMap:
           name: plex-auto-languages-configmap-782dbh8mgt

ServiceAccount: media/plex-auto-languages

+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: plex-auto-languages
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: plex-auto-languages
+    helm.sh/chart: app-template-5.0.1
+  name: plex-auto-languages
+  namespace: media
prowlarr (kubernetes/apps/prowlarr/app.yaml)

Deployment: media/prowlarr

       labels:
         app.kubernetes.io/controller: prowlarr
         app.kubernetes.io/instance: prowlarr
         app.kubernetes.io/name: prowlarr
     spec:
-      automountServiceAccountToken: true
+      automountServiceAccountToken: false
       containers:
       - image: ghcr.io/home-operations/prowlarr:2.3.7.5365@sha256:b9557d772c974901aed9285189d904b613f1f07750fca930eecfe78544bd3d48
         livenessProbe:
           failureThreshold: 3
           httpGet:
@@ skipped 36 lines (36 -> 71) @@
       securityContext:
         fsGroup: 65534
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 65534
         runAsUser: 65534
-      serviceAccountName: default
+      serviceAccountName: prowlarr
       volumes:
       - name: config
         persistentVolumeClaim:
           claimName: prowlarr
       - emptyDir: {}

ServiceAccount: media/prowlarr

+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: prowlarr
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: prowlarr
+    helm.sh/chart: app-template-5.0.1
+  name: prowlarr
+  namespace: media
qbrr (kubernetes/apps/qbrr/app.yaml)

Deployment: media/qbrr

       labels:
         app.kubernetes.io/controller: reannounce
         app.kubernetes.io/instance: qbrr
         app.kubernetes.io/name: qbrr
     spec:
-      automountServiceAccountToken: true
+      automountServiceAccountToken: false
       containers:
       - env:
         - name: QBITTORRENT_HOST
           value: http://qbittorrent.media.svc.cluster.local
         image: ghcr.io/buroa/qbrr:0.1.4@sha256:35dce0dafb56f20d628b84eeb0e0214ee55fe18d452e27c850e62d163e239d8f
@@ skipped 18 lines (36 -> 53) @@
       securityContext:
         fsGroup: 65534
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 100
         runAsUser: 65534
-      serviceAccountName: default
+      serviceAccountName: qbrr

ServiceAccount: media/qbrr

+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: qbrr
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: qbrr
+    helm.sh/chart: app-template-5.0.1
+  name: qbrr
+  namespace: media
radarr (kubernetes/apps/radarr/app.yaml)

Deployment: media/radarr

       labels:
         app.kubernetes.io/controller: radarr
         app.kubernetes.io/instance: radarr
         app.kubernetes.io/name: radarr
     spec:
-      automountServiceAccountToken: true
+      automountServiceAccountToken: false
       containers:
       - env:
         - name: TORRENT_CLIENTS
           value: qBittorrent
         - name: USENET_CLIENTS
@@ skipped 58 lines (36 -> 93) @@
       securityContext:
         fsGroup: 65534
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 100
         runAsUser: 65534
-      serviceAccountName: default
+      serviceAccountName: radarr
       volumes:
       - name: config
         persistentVolumeClaim:
           claimName: radarr
       - name: nfs-nas-media

ServiceAccount: media/radarr

+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: radarr
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: radarr
+    helm.sh/chart: app-template-5.0.1
+  name: radarr
+  namespace: media
recyclarr (kubernetes/apps/recyclarr/app.yaml)

CronJob: media/recyclarr

           labels:
             app.kubernetes.io/controller: recyclarr
             app.kubernetes.io/instance: recyclarr
             app.kubernetes.io/name: recyclarr
         spec:
-          automountServiceAccountToken: true
+          automountServiceAccountToken: false
           containers:
           - args:
             - sync
             image: ghcr.io/recyclarr/recyclarr:8.6.0@sha256:3c38ceeb54438dd8327e4e65c9b48ba601a6d20fff833342d93c9b0bc4b1930b
             name: app
@@ skipped 83 lines (32 -> 114) @@
             fsGroup: 1000
             fsGroupChangePolicy: OnRootMismatch
             runAsGroup: 1000
             runAsNonRoot: true
             runAsUser: 1000
-          serviceAccountName: default
+          serviceAccountName: recyclarr
           volumes:
           - name: config
             persistentVolumeClaim:
               claimName: recyclarr
           - configMap:

ServiceAccount: media/recyclarr

+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: recyclarr
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: recyclarr
+    helm.sh/chart: app-template-5.0.1
+  name: recyclarr
+  namespace: media
rotki (kubernetes/apps/rotki/app.yaml)

Deployment: selfhosted/rotki

       labels:
         app.kubernetes.io/controller: rotki
         app.kubernetes.io/instance: rotki
         app.kubernetes.io/name: rotki
     spec:
-      automountServiceAccountToken: true
+      automountServiceAccountToken: false
       containers:
       - env:
         - name: ROTKI_ACCEPT_DOCKER_RISK
           value: "1"
         - name: TZ
@@ skipped 30 lines (36 -> 65) @@
       dnsPolicy: ClusterFirst
       enableServiceLinks: false
       hostIPC: false
       hostNetwork: false
       hostPID: false
-      serviceAccountName: default
+      serviceAccountName: rotki
       volumes:
       - name: config
         persistentVolumeClaim:
           claimName: rotki
       - emptyDir: {}

ServiceAccount: selfhosted/rotki

+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: rotki
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: rotki
+    helm.sh/chart: app-template-5.0.1
+  name: rotki
+  namespace: selfhosted
sabnzbd (kubernetes/apps/sabnzbd/app.yaml)

Deployment: media/sabnzbd

       labels:
         app.kubernetes.io/controller: sabnzbd
         app.kubernetes.io/instance: sabnzbd
         app.kubernetes.io/name: sabnzbd
     spec:
-      automountServiceAccountToken: true
+      automountServiceAccountToken: false
       containers:
       - env:
         - name: SABNZBD__HOST_WHITELIST_ENTRIES
           value: sabnzbd, sabnzbd.media, sabnzbd.media.svc, sabnzbd.media.svc.cluster,
             sabnzbd.media.svc.cluster.local, sabnzbd.lan.peterson.com.ar
@@ skipped 59 lines (36 -> 94) @@
       securityContext:
         fsGroup: 65534
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 100
         runAsUser: 65534
-      serviceAccountName: default
+      serviceAccountName: sabnzbd
       volumes:
       - name: config
         persistentVolumeClaim:
           claimName: sabnzbd
       - name: downloads

ServiceAccount: media/sabnzbd

+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: sabnzbd
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: sabnzbd
+    helm.sh/chart: app-template-5.0.1
+  name: sabnzbd
+  namespace: media
sonarr (kubernetes/apps/sonarr/app.yaml)

Deployment: media/sonarr

       labels:
         app.kubernetes.io/controller: sonarr
         app.kubernetes.io/instance: sonarr
         app.kubernetes.io/name: sonarr
     spec:
-      automountServiceAccountToken: true
+      automountServiceAccountToken: false
       containers:
       - env:
         - name: TORRENT_CLIENTS
           value: qBittorrent
         - name: USENET_CLIENTS
@@ skipped 58 lines (36 -> 93) @@
       securityContext:
         fsGroup: 65534
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 100
         runAsUser: 65534
-      serviceAccountName: default
+      serviceAccountName: sonarr
       volumes:
       - name: config
         persistentVolumeClaim:
           claimName: sonarr
       - name: nfs-nas-media

ServiceAccount: media/sonarr

+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: sonarr
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: sonarr
+    helm.sh/chart: app-template-5.0.1
+  name: sonarr
+  namespace: media
stirling-pdf (kubernetes/apps/stirling-pdf/app.yaml)

Deployment: selfhosted/stirling-pdf

       labels:
         app.kubernetes.io/controller: stirling-pdf
         app.kubernetes.io/instance: stirling-pdf
         app.kubernetes.io/name: stirling-pdf
     spec:
-      automountServiceAccountToken: true
+      automountServiceAccountToken: false
       containers:
       - env:
         - name: DOCKER_ENABLE_SECURITY
           value: "true"
         - name: PGID
@@ skipped 68 lines (36 -> 103) @@
       hostNetwork: false
       hostPID: false
       securityContext:
         fsGroup: 1000
         fsGroupChangePolicy: OnRootMismatch
-      serviceAccountName: default
+      serviceAccountName: stirling-pdf
       volumes:
       - name: configs
         persistentVolumeClaim:
           claimName: stirling-pdf-configs
       - name: logs

ServiceAccount: selfhosted/stirling-pdf

+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: stirling-pdf
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: stirling-pdf
+    helm.sh/chart: app-template-5.0.1
+  name: stirling-pdf
+  namespace: selfhosted
tautulli (kubernetes/apps/tautulli/app.yaml)

Deployment: media/tautulli

       labels:
         app.kubernetes.io/controller: tautulli
         app.kubernetes.io/instance: tautulli
         app.kubernetes.io/name: tautulli
     spec:
-      automountServiceAccountToken: true
+      automountServiceAccountToken: false
       containers:
       - image: ghcr.io/home-operations/tautulli:2.17.1@sha256:2183820d45a1413b4b8868fc18ad5eb9259630ea0151348cdc9cfb4017a0dd33
         livenessProbe:
           failureThreshold: 3
           httpGet:
@@ skipped 28 lines (36 -> 63) @@
       securityContext:
         fsGroup: 65534
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 65534
         runAsUser: 65534
-      serviceAccountName: default
+      serviceAccountName: tautulli
       volumes:
       - name: config
         persistentVolumeClaim:
           claimName: tautulli

ServiceAccount: media/tautulli

+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: tautulli
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: tautulli
+    helm.sh/chart: app-template-5.0.1
+  name: tautulli
+  namespace: media
tqm (kubernetes/apps/tqm/app.yaml)

CronJob: media/tqm

           labels:
             app.kubernetes.io/controller: tqm
             app.kubernetes.io/instance: tqm
             app.kubernetes.io/name: tqm
         spec:
-          automountServiceAccountToken: true
+          automountServiceAccountToken: false
           containers:
           - args:
             - clean
             - qb
             image: ghcr.io/home-operations/tqm:1.19.0@sha256:025ee0c0c8b75f4c7bffa90216eedb494b9884e092a47e9c49824fe63427808c
@@ skipped 57 lines (32 -> 88) @@
           securityContext:
             fsGroup: 65534
             fsGroupChangePolicy: OnRootMismatch
             runAsGroup: 100
             runAsUser: 65534
-          serviceAccountName: default
+          serviceAccountName: tqm
           volumes:
           - emptyDir: {}
             name: config
           - name: config-file
             secret:

CronJob: media/tqm-orphaned

           labels:
             app.kubernetes.io/controller: orphaned
             app.kubernetes.io/instance: tqm
             app.kubernetes.io/name: tqm
         spec:
-          automountServiceAccountToken: true
+          automountServiceAccountToken: false
           containers:
           - args:
             - orphan
             - qb
             image: ghcr.io/home-operations/tqm:1.19.0@sha256:025ee0c0c8b75f4c7bffa90216eedb494b9884e092a47e9c49824fe63427808c
@@ skipped 29 lines (32 -> 60) @@
           securityContext:
             fsGroup: 65534
             fsGroupChangePolicy: OnRootMismatch
             runAsGroup: 100
             runAsUser: 65534
-          serviceAccountName: default
+          serviceAccountName: tqm
           volumes:
           - emptyDir: {}
             name: config
           - name: config-file
             secret:

ServiceAccount: media/tqm

+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: tqm
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: tqm
+    helm.sh/chart: app-template-5.0.1
+  name: tqm
+  namespace: media

Stats:
[Applications: 86], [Full Run: 1m53s], [Rendering: 44s], [Cluster: 19s], [Argo CD: 49s]

@renovate renovate Bot force-pushed the renovate/app-template-5.x branch 15 times, most recently from e1316db to fbb30fe Compare May 13, 2026 09:12
@renovate renovate Bot force-pushed the renovate/app-template-5.x branch 2 times, most recently from 90b5e10 to cabb1fa Compare May 14, 2026 21:53
@renovate renovate Bot changed the title feat(helm)!: Update app-template ( 4.6.2 ➔ 5.0.0 ) feat(helm)!: Update app-template ( 4.6.2 ➔ 5.0.1 ) May 14, 2026
@renovate renovate Bot force-pushed the renovate/app-template-5.x branch 9 times, most recently from 443d727 to f2dd05b Compare May 21, 2026 04:59
@renovate renovate Bot force-pushed the renovate/app-template-5.x branch 8 times, most recently from 571b0ae to 957df59 Compare May 28, 2026 04:57
@renovate renovate Bot force-pushed the renovate/app-template-5.x branch 2 times, most recently from 5f5b679 to ca8f68e Compare May 30, 2026 06:05
@renovate renovate Bot force-pushed the renovate/app-template-5.x branch from ca8f68e to 9f9388e Compare June 1, 2026 03:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

area/kubernetes manual-review

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants