Commit new Chart releases for TrueCharts

Signed-off-by: TrueCharts-Bot <bot@truecharts.org>

stable/authentik/19.2.9/CHANGELOG.md

@@ -0,0 +1,99 @@
+---
+title: Changelog
+---
+
+**Important:**
+*for the complete changelog, please refer to the website*
+
+
+
+## [authentik-19.2.9](https://github.com/truecharts/charts/compare/authentik-19.2.5...authentik-19.2.9) (2024-01-29)
+
+### Chore
+
+
+
+- update authentik to v2023.10.7[@c483b0a](https://github.com/c483b0a) by renovate (patch) ([#17752](https://github.com/truecharts/charts/issues/17752))
+
+
+## [authentik-19.2.5](https://github.com/truecharts/charts/compare/authentik-19.2.4...authentik-19.2.5) (2024-01-27)
+
+### Chore
+
+
+
+- update helm general non-major by renovate ([#17525](https://github.com/truecharts/charts/issues/17525))
+
+
+## [authentik-19.2.4](https://github.com/truecharts/charts/compare/authentik-19.2.3...authentik-19.2.4) (2024-01-26)
+
+### Chore
+
+
+
+- update container image common to v17.2.29[@d7c41a3](https://github.com/d7c41a3) by renovate ([#17545](https://github.com/truecharts/charts/issues/17545))
+
+
+## [authentik-19.2.3](https://github.com/truecharts/charts/compare/authentik-19.2.2...authentik-19.2.3) (2024-01-21)
+
+### Chore
+
+
+
+- update container image common to v17.2.28[@918b4c5](https://github.com/918b4c5) by renovate ([#17478](https://github.com/truecharts/charts/issues/17478))
+
+
+## [authentik-19.2.2](https://github.com/truecharts/charts/compare/authentik-19.2.1...authentik-19.2.2) (2024-01-21)
+
+### Chore
+
+
+
+- update container image common to v17.2.26[@24c98f7](https://github.com/24c98f7) by renovate ([#17409](https://github.com/truecharts/charts/issues/17409))
+
+
+## [authentik-19.2.1](https://github.com/truecharts/charts/compare/authentik-19.2.0...authentik-19.2.1) (2024-01-21)
+
+### Chore
+
+
+
+- update metadata in chart.yaml ([#17457](https://github.com/truecharts/charts/issues/17457))
+
+
+## [authentik-19.2.0](https://github.com/truecharts/charts/compare/authentik-19.1.13...authentik-19.2.0) (2024-01-14)
+
+### Chore
+
+
+
+- update container image ghcr.io/maxmind/geoipupdate to v6.1.0[@cdd36d3](https://github.com/cdd36d3) by renovate ([#17203](https://github.com/truecharts/charts/issues/17203))
+
+
+## [authentik-19.1.13](https://github.com/truecharts/charts/compare/authentik-19.1.9...authentik-19.1.13) (2024-01-13)
+
+### Chore
+
+
+
+- update authentik to v2023.10.6[@1a17c68](https://github.com/1a17c68) by renovate (patch) ([#17101](https://github.com/truecharts/charts/issues/17101))
+
+
+## [authentik-19.1.9](https://github.com/truecharts/charts/compare/authentik-19.1.8...authentik-19.1.9) (2024-01-09)
+
+### Chore
+
+
+
+- update container image common to v17.2.22[@e7c9056](https://github.com/e7c9056) by renovate ([#16986](https://github.com/truecharts/charts/issues/16986))
+
+
+## [authentik-19.1.8](https://github.com/truecharts/charts/compare/authentik-19.1.7...authentik-19.1.8) (2024-01-02)
+
+### Chore
+
+
+
+- update helm general non-major by renovate ([#16820](https://github.com/truecharts/charts/issues/16820))
+
+

stable/authentik/19.2.9/Chart.yaml

@@ -0,0 +1,48 @@
+annotations:
+  max_scale_version: 23.10.2
+  min_scale_version: 23.10.0
+  truecharts.org/SCALE-support: "true"
+  truecharts.org/category: authentication
+  truecharts.org/max_helm_version: "3.14"
+  truecharts.org/min_helm_version: "3.12"
+  truecharts.org/train: stable
+apiVersion: v2
+appVersion: 2023.10.7
+dependencies:
+  - name: common
+    version: 17.2.29
+    repository: oci://tccr.io/truecharts
+    condition: ""
+    alias: ""
+    tags: []
+    import-values: []
+  - name: redis
+    version: 11.1.16
+    repository: https://deps.truecharts.org
+    condition: redis.enabled
+    alias: ""
+    tags: []
+    import-values: []
+deprecated: false
+description: Authentik is an open-source Identity Provider focused on flexibility and versatility.
+home: https://truecharts.org/charts/stable/authentik
+icon: https://truecharts.org/img/hotlink-ok/chart-icons/authentik.png
+keywords:
+  - authentik
+kubeVersion: ">=1.24.0-0"
+maintainers:
+  - name: TrueCharts
+    email: info@truecharts.org
+    url: https://truecharts.org
+name: authentik
+sources:
+  - https://goauthentik.io/docs/
+  - https://github.com/goauthentik/authentik
+  - https://github.com/truecharts/charts/tree/master/charts/stable/authentik
+  - https://ghcr.io/goauthentik/ldap
+  - https://ghcr.io/goauthentik/radius
+  - https://ghcr.io/goauthentik/proxy
+  - https://ghcr.io/goauthentik/server
+  - https://ghcr.io/maxmind/geoipupdate
+type: application
+version: 19.2.9

stable/authentik/19.2.9/README.md

@@ -0,0 +1,28 @@
+---
+title: README
+---
+
+## General Info
+
+TrueCharts can be installed as both _normal_ Helm Charts or as Apps on TrueNAS SCALE.
+However only installations using the TrueNAS SCALE Apps system are supported.
+
+For more information about this App, please check the docs on the TrueCharts [website](https://truecharts.org/charts/stable/authentik)
+
+**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/charts/issues/new/choose)**
+
+## Support
+
+- Please check our [quick-start guides for TrueNAS SCALE](https://truecharts.org/manual/SCALE/guides/scale-intro).
+- See the [Website](https://truecharts.org)
+- Check our [Discord](https://discord.gg/tVsPTHWTtr)
+- Open a [issue](https://github.com/truecharts/charts/issues/new/choose)
+
+---
+
+## Sponsor TrueCharts
+
+TrueCharts can only exist due to the incredible effort of our staff.
+Please consider making a [donation](https://truecharts.org/sponsor) or contributing back to the project any way you can!
+
+_All Rights Reserved - The TrueCharts Project_

stable/authentik/19.2.9/app-changelog.md

@@ -0,0 +1,9 @@
+
+
+## [authentik-19.2.9](https://github.com/truecharts/charts/compare/authentik-19.2.5...authentik-19.2.9) (2024-01-29)
+
+### Chore
+
+
+
+- update authentik to v2023.10.7[@c483b0a](https://github.com/c483b0a) by renovate (patch) ([#17752](https://github.com/truecharts/charts/issues/17752))

stable/authentik/19.2.9/app-readme.md

@@ -0,0 +1,8 @@
+Authentik is an open-source Identity Provider focused on flexibility and versatility.
+
+This App is supplied by TrueCharts, for more information visit the manual: [https://truecharts.org/charts/stable/authentik](https://truecharts.org/charts/stable/authentik)
+
+---
+
+TrueCharts can only exist due to the incredible effort of our staff.
+Please consider making a [donation](https://truecharts.org/sponsor) or contributing back to the project any way you can!

stable/authentik/19.2.9/ix_values.yaml

@@ -0,0 +1,502 @@
+image:
+  repository: ghcr.io/goauthentik/server
+  tag: 2023.10.7@sha256:8ebdd51a95d3efdcb0cf3b26ed849cc0f9a8c032adb8cd595cabb59a1f321161
+  pullPolicy: IfNotPresent
+geoipImage:
+  repository: ghcr.io/maxmind/geoipupdate
+  tag: v6.1.0@sha256:cdd36d36c2e1d353a990a48e5a36d42ee75089d5d9064d80d36d90c147fd2606
+  pullPolicy: IfNotPresent
+ldapImage:
+  repository: ghcr.io/goauthentik/ldap
+  tag: 2023.10.7@sha256:c483b0adf9a2123ab3d0498450d3d0f91344c97248dba789a4f80fdd3f6eb213
+  pullPolicy: IfNotPresent
+radiusImage:
+  repository: ghcr.io/goauthentik/radius
+  tag: 2023.10.7@sha256:ae095ce83ec6ff40e03104ff04a315269a7f2094df7310317140fa5f00fa74ff
+  pullPolicy: IfNotPresent
+proxyImage:
+  repository: ghcr.io/goauthentik/proxy
+  tag: 2023.10.7@sha256:082cd5860274a1edd2c291ef81eb795fed95fa36d65a3014bf158db291dacd58
+  pullPolicy: IfNotPresent
+authentik:
+  credentials:
+    # Only works on initial install
+    email: my-mail@example.com
+    password: my-password
+    # Optional, only set if you want to use it
+    bootstrapToken: ""
+  general:
+    disableUpdateCheck: false
+    disableStartupAnalytics: true
+    allowUserChangeName: true
+    allowUserChangeEmail: true
+    allowUserChangeUsername: true
+    overwriteDefaultBlueprints: false
+    gdprCompliance: true
+    tokenLength: 128
+    impersonation: true
+    avatars:
+      - gravatar
+      - initials
+    footerLinks:
+      - name: Authentik
+        href: https://goauthentik.io
+  email:
+    host: ""
+    port: 587
+    username:
+    password:
+    useTLS: true
+    useSSL: false
+    timeout: 10
+    from: ""
+  ldap:
+    tlsCiphers: "null"
+    taskTimeoutHours: 2
+  logging:
+    # info, debug, warning, error, trace
+    logLevel: info
+  errorReporting:
+    enabled: false
+    sendPII: false
+    environment: customer
+    sentryDSN: ""
+  geoip:
+    enabled: false
+    # Ignored if enabled is true
+    # If enabled is false, and this is true, the
+    # built-in GeoIP database will be wiped
+    wipeBuiltInDb: false
+    editionID: GeoLite2-City
+    frequency: 8
+    accountID: ""
+    licenseKey: ""
+  outposts:
+    proxy:
+      enabled: false
+      token: ""
+    radius:
+      enabled: false
+      token: ""
+    ldap:
+      enabled: false
+      token: ""
+# ===== DO NOT EDIT BELOW THIS LINE =====
+workload:
+  # ===== Server =====
+  main:
+    enabled: true
+    type: Deployment
+    podSpec:
+      containers:
+        main:
+          enabled: true
+          primary: true
+          imageSelector: image
+          securityContext:
+            runAsUser: 1000
+            runAsGroup: 1000
+            # readOnlyRootFilesystem: false
+          envFrom:
+            - configMapRef:
+                name: server
+            - secretRef:
+                name: server-worker
+            - configMapRef:
+                name: server-worker
+          args:
+            - server
+          probes:
+            liveness:
+              enabled: true
+              type: exec
+              command:
+                - /lifecycle/ak
+                - healthcheck
+            readiness:
+              enabled: true
+              type: exec
+              command:
+                - /lifecycle/ak
+                - healthcheck
+            startup:
+              enabled: true
+              type: exec
+              command:
+                - /lifecycle/ak
+                - healthcheck
+  # ===== Worker =====
+  worker:
+    enabled: true
+    type: Deployment
+    podSpec:
+      containers:
+        worker:
+          enabled: true
+          primary: true
+          imageSelector: image
+          securityContext:
+            runAsUser: 1000
+            runAsGroup: 1000
+            # readOnlyRootFilesystem: false
+          envFrom:
+            - secretRef:
+                name: server-worker
+            - configMapRef:
+                name: server-worker
+          args:
+            - worker
+          probes:
+            liveness:
+              enabled: true
+              type: exec
+              command:
+                - /lifecycle/ak
+                - healthcheck
+            readiness:
+              enabled: true
+              type: exec
+              command:
+                - /lifecycle/ak
+                - healthcheck
+            startup:
+              enabled: true
+              type: exec
+              command:
+                - /lifecycle/ak
+                - healthcheck
+  # ===== PROXY =====
+  proxy:
+    enabled: true
+    type: Deployment
+    podSpec:
+      containers:
+        proxy:
+          enabled: true
+          primary: true
+          imageSelector: proxyImage
+          securityContext:
+            runAsUser: 1000
+            runAsGroup: 1000
+          envFrom:
+            - configMapRef:
+                name: proxy
+            - secretRef:
+                name: proxy
+          probes:
+            liveness:
+              enabled: true
+              type: exec
+              command:
+                - /proxy
+                - healthcheck
+            readiness:
+              enabled: true
+              type: exec
+              command:
+                - /proxy
+                - healthcheck
+            startup:
+              enabled: true
+              type: exec
+              command:
+                - /proxy
+                - healthcheck
+  # ===== RADIUS =====
+  radius:
+    enabled: true
+    type: Deployment
+    podSpec:
+      containers:
+        radius:
+          enabled: true
+          primary: true
+          imageSelector: radiusImage
+          securityContext:
+            runAsUser: 1000
+            runAsGroup: 1000
+          envFrom:
+            - configMapRef:
+                name: radius
+            - secretRef:
+                name: radius
+          probes:
+            liveness:
+              enabled: true
+              type: exec
+              command:
+                - /radius
+                - healthcheck
+            readiness:
+              enabled: true
+              type: exec
+              command:
+                - /radius
+                - healthcheck
+            startup:
+              enabled: true
+              type: exec
+              command:
+                - /radius
+                - healthcheck
+  # ===== LDAP =====
+  ldap:
+    enabled: true
+    type: Deployment
+    podSpec:
+      containers:
+        ldap:
+          enabled: true
+          primary: true
+          imageSelector: ldapImage
+          securityContext:
+            runAsUser: 1000
+            runAsGroup: 1000
+          envFrom:
+            - configMapRef:
+                name: ldap
+            - secretRef:
+                name: ldap
+          probes:
+            liveness:
+              enabled: true
+              type: exec
+              command:
+                - /ldap
+                - healthcheck
+            readiness:
+              enabled: true
+              type: exec
+              command:
+                - /ldap
+                - healthcheck
+            startup:
+              enabled: true
+              type: exec
+              command:
+                - /ldap
+                - healthcheck
+  # ===== GeoIP Updater =====
+  geoip:
+    enabled: true
+    type: Deployment
+    podSpec:
+      containers:
+        geoip:
+          enabled: true
+          primary: true
+          imageSelector: geoipImage
+          securityContext:
+            runAsUser: 0
+            runAsGroup: 0
+            capabilities:
+              disableS6Caps: true
+          envFrom:
+            - configMapRef:
+                name: geoip
+            - secretRef:
+                name: geoip
+          probes:
+            liveness:
+              enabled: false
+            readiness:
+              enabled: false
+            startup:
+              enabled: false
+service:
+  # Server HTTPS
+  main:
+    ports:
+      main:
+        protocol: https
+        port: 10229
+  # Server HTTP
+  http:
+    enabled: true
+    type: ClusterIP
+    ports:
+      http:
+        enabled: true
+        protocol: http
+        port: 10230
+  # Proxy
+  proxy:
+    enabled: true
+    targetSelector: proxy
+    ports:
+      http:
+        enabled: true
+        protocol: http
+        port: 10227
+        targetSelector: proxy
+      https:
+        enabled: true
+        protocol: https
+        port: 10228
+        targetSelector: proxy
+  # Radius
+  radius:
+    enabled: true
+    targetSelector: radius
+    ports:
+      radius:
+        enabled: true
+        protocol: udp
+        targetSelector: radius
+        port: 1812
+  # LDAP
+  ldap:
+    enabled: true
+    targetSelector: ldap
+    ports:
+      ldap:
+        enabled: true
+        port: 389
+        targetSelector: ldap
+  # LDAPS
+  ldaps:
+    enabled: true
+    targetSelector: ldap
+    ports:
+      ldaps:
+        enabled: true
+        port: 636
+        targetSelector: ldap
+  # Server Metrics
+  servermetrics:
+    enabled: true
+    type: ClusterIP
+    ports:
+      servermetrics:
+        enabled: true
+        protocol: http
+        port: 10231
+  # Radius Metrics
+  radiusmetrics:
+    enabled: true
+    type: ClusterIP
+    targetSelector: radius
+    ports:
+      radiusmetrics:
+        enabled: true
+        protocol: http
+        port: 10232
+        targetSelector: radius
+  # LDAP Metrics
+  ldapmetrics:
+    enabled: true
+    type: ClusterIP
+    targetSelector: ldap
+    ports:
+      ldapmetrics:
+        enabled: true
+        protocol: http
+        port: 10233
+        targetSelector: ldap
+  # Proxy Metrics
+  proxymetrics:
+    enabled: true
+    type: ClusterIP
+    targetSelector: proxy
+    ports:
+      proxymetrics:
+        enabled: true
+        protocol: http
+        port: 10234
+        targetSelector: proxy
+persistence:
+  media:
+    enabled: true
+    targetSelector:
+      main:
+        main:
+          mountPath: /media
+      worker:
+        worker:
+          mountPath: /media
+  templates:
+    enabled: true
+    targetSelector:
+      main:
+        main:
+          mountPath: /templates
+      worker:
+        worker:
+          mountPath: /templates
+  blueprints:
+    enabled: true
+    targetSelector:
+      worker:
+        worker:
+          # This will automatically change to `/blueprints`
+          # if `overwriteDefaultBlueprints` is set to `true
+          # Otherwise it will respect the value specified here
+          mountPath: /blueprints/custom
+  certs:
+    enabled: true
+    mountPath: /certs
+    targetSelector:
+      worker:
+        worker:
+          mountPath: /certs
+  geoip:
+    enabled: true
+    targetSelector:
+      main:
+        main:
+          mountPath: /geoip
+      worker:
+        worker:
+          mountPath: /geoip
+      geoip:
+        geoip:
+          mountPath: /usr/share/GeoIP
+cnpg:
+  main:
+    enabled: true
+    user: authentik
+    database: authentik
+redis:
+  enabled: true
+portal:
+  open:
+    enabled: true
+metrics:
+  # FIXME: Metrics do not work yet
+  servermetrics:
+    enabled: true
+    type: servicemonitor
+    endpoints:
+      - port: "{{ .Values.service.servermetrics.ports.servermetrics.port }}"
+        path: /metrics
+    prometheusRule:
+      enabled: false
+  radiusmetrics:
+    enabled: true
+    type: servicemonitor
+    endpoints:
+      - port: "{{ .Values.service.radiusmetrics.ports.radiusmetrics.port }}"
+        path: /metrics
+    prometheusRule:
+      enabled: false
+  ldapmetrics:
+    enabled: true
+    type: servicemonitor
+    endpoints:
+      - port: "{{ .Values.service.ldapmetrics.ports.ldapmetrics.port }}"
+        path: /metrics
+    prometheusRule:
+      enabled: false
+  proxymetrics:
+    enabled: true
+    type: servicemonitor
+    endpoints:
+      - port: "{{ .Values.service.proxymetrics.ports.proxymetrics.port }}"
+        path: /metrics
+    prometheusRule:
+      enabled: false
+updated: true
+
+ingress:
+  main:
+    required: true

stable/authentik/19.2.9/templates/_config.tpl

@@ -0,0 +1,128 @@
+{{/* Define the configmaps */}}
+{{- define "authentik.configmaps" -}}
+
+  {{- $fullname := include "tc.v1.common.lib.chart.names.fullname" $ -}}
+  {{- $serverHost := printf "https://%v:%v" $fullname .Values.service.main.ports.main.port -}}
+  {{- $host := .Values.chartContext.appUrl }}
+server:
+  enabled: true
+  data:
+    AUTHENTIK_LISTEN__HTTPS: {{ printf "0.0.0.0:%v" .Values.service.main.ports.main.port | quote }}
+    AUTHENTIK_LISTEN__HTTP: {{ printf "0.0.0.0:%v" .Values.service.http.ports.http.port | quote }}
+    AUTHENTIK_LISTEN__METRICS: {{ printf "0.0.0.0:%v" .Values.service.servermetrics.ports.servermetrics.port | quote }}
+
+server-worker:
+  enabled: true
+  data:
+    {{/* Dependencies */}}
+    AUTHENTIK_POSTGRESQL__NAME: {{ .Values.cnpg.main.database }}
+    AUTHENTIK_POSTGRESQL__USER: {{ .Values.cnpg.main.user }}
+    AUTHENTIK_POSTGRESQL__HOST: {{ .Values.cnpg.main.creds.host }}
+    AUTHENTIK_POSTGRESQL__PORT: "5432"
+    AUTHENTIK_REDIS__HOST: {{ .Values.redis.creds.plain }}
+    AUTHENTIK_REDIS__PORT: "6379"
+
+    {{/* Outposts */}}
+    AUTHENTIK_OUTPOSTS__DISCOVER: "false"
+
+    {{/* GeoIP */}}
+    {{- $geoipPath := (printf "/geoip/%v.mmdb" .Values.authentik.geoip.editionID) -}}
+    {{- if not .Values.authentik.geoip.enabled -}}
+      {{- $geoipPath = "/tmp/non-existent-file" -}}
+    {{- end -}}
+
+    {{- if or .Values.authentik.geoip.enabled .Values.authentik.geoip.wipeBuiltInDb }}
+    AUTHENTIK_GEOIP: {{ $geoipPath }}
+    {{- end }}
+
+    {{/* Mail */}}
+    AUTHENTIK_EMAIL__USE_TLS: {{ .Values.authentik.email.useTLS | quote }}
+    AUTHENTIK_EMAIL__USE_SSL: {{ .Values.authentik.email.useSSL | quote }}
+    {{- with .Values.authentik.email.port }}
+    AUTHENTIK_EMAIL__PORT: {{ . | quote }}
+    {{- end -}}
+    {{- with .Values.authentik.email.timeout }}
+    AUTHENTIK_EMAIL__TIMEOUT: {{ . | quote }}
+    {{- end }}
+
+    {{/* LDAP */}}
+    AUTHENTIK_LDAP__TASK_TIMEOUT_HOURS: {{ .Values.authentik.ldap.taskTimeoutHours | quote }}
+    AUTHENTIK_LDAP__TLS__CIPHERS: {{ .Values.authentik.ldap.tlsCiphers | quote }}
+
+    {{/* Logging */}}
+    AUTHENTIK_LOG_LEVEL: {{ .Values.authentik.logging.logLevel }}
+
+    {{/* Error Reporting */}}
+    AUTHENTIK_ERROR_REPORTING__ENABLED: {{ .Values.authentik.errorReporting.enabled | quote }}
+    AUTHENTIK_ERROR_REPORTING__SEND_PII: {{ .Values.authentik.errorReporting.sendPII | quote }}
+    {{- with .Values.authentik.errorReporting.environment }}
+    AUTHENTIK_ERROR_REPORTING__ENVIRONMENT: {{ . | quote }}
+    {{- end -}}
+    {{- with .Values.authentik.errorReporting.sentryDSN }}
+    AUTHENTIK_ERROR_REPORTING__SENTRY_DSN: {{ . | quote }}
+    {{- end -}}
+    {{- with .Values.authentik.general.avatars }}
+    AUTHENTIK_AVATARS: {{ join "," . }}
+    {{- end -}}
+    {{- with .Values.authentik.general.footerLinks }}
+    AUTHENTIK_FOOTER_LINKS: {{ toJson . | squote }}
+    {{- end }}
+
+    {{/* General */}}
+    AUTHENTIK_DISABLE_UPDATE_CHECK: {{ .Values.authentik.general.disableUpdateCheck | quote }}
+    AUTHENTIK_DISABLE_STARTUP_ANALYTICS: {{ .Values.authentik.general.disableStartupAnalytics | quote }}
+    AUTHENTIK_DEFAULT_USER_CHANGE_NAME: {{ .Values.authentik.general.allowUserChangeName | quote }}
+    AUTHENTIK_DEFAULT_USER_CHANGE_EMAIL: {{ .Values.authentik.general.allowUserChangeEmail | quote }}
+    AUTHENTIK_DEFAULT_USER_CHANGE_USERNAME: {{ .Values.authentik.general.allowUserChangeUsername | quote }}
+    AUTHENTIK_GDPR_COMPLIANCE: {{ .Values.authentik.general.gdprCompliance | quote }}
+    AUTHENTIK_DEFAULT_TOKEN_LENGTH: {{ .Values.authentik.general.tokenLength | quote }}
+    AUTHENTIK_IMPERSONATION: {{ .Values.authentik.general.impersonation | quote }}
+
+{{- if .Values.authentik.outposts.proxy.enabled }}
+proxy:
+  enabled: true
+  data:
+    AUTHENTIK_LISTEN__HTTP: {{ printf "0.0.0.0:%v" .Values.service.proxy.ports.http.port | quote }}
+    AUTHENTIK_LISTEN__HTTPS: {{ printf "0.0.0.0:%v" .Values.service.proxy.ports.https.port | quote }}
+    AUTHENTIK_LISTEN__METRICS: {{ printf "0.0.0.0:%v" .Values.service.proxymetrics.ports.proxymetrics.port | quote }}
+    AUTHENTIK_HOST: {{ $serverHost }}
+    AUTHENTIK_INSECURE: "true"
+    # TODO: node ip or ingress host
+    AUTHENTIK_HOST_BROWSER: {{ $host }}
+{{- end -}}
+
+{{- if .Values.authentik.outposts.radius.enabled }}
+radius:
+  enabled: true
+  data:
+    AUTHENTIK_LISTEN__RADIUS: {{ printf "0.0.0.0:%v" .Values.service.radius.ports.radius.port | quote }}
+    AUTHENTIK_LISTEN__METRICS: {{ printf "0.0.0.0:%v" .Values.service.radiusmetrics.ports.radiusmetrics.port | quote }}
+    AUTHENTIK_HOST: {{ $serverHost }}
+    AUTHENTIK_INSECURE: "true"
+    # TODO: node ip or ingress host
+    AUTHENTIK_HOST_BROWSER: {{ $host }}
+{{- end -}}
+
+{{- if .Values.authentik.outposts.ldap.enabled }}
+ldap:
+  enabled: true
+  data:
+    AUTHENTIK_LISTEN__LDAP: {{ printf "0.0.0.0:%v" .Values.service.ldap.ports.ldap.port | quote }}
+    AUTHENTIK_LISTEN__LDAPS: {{ printf "0.0.0.0:%v" .Values.service.ldaps.ports.ldaps.port | quote }}
+    AUTHENTIK_LISTEN__METRICS: {{ printf "0.0.0.0:%v" .Values.service.ldapmetrics.ports.ldapmetrics.port | quote }}
+    AUTHENTIK_HOST: {{ $serverHost }}
+    AUTHENTIK_INSECURE: "true"
+    # TODO: node ip or ingress host
+    AUTHENTIK_HOST_BROWSER: {{ $host }}
+{{- end -}}
+
+{{- if .Values.authentik.geoip.enabled }}
+geoip:
+  enabled: true
+  data:
+    GEOIPUPDATE_EDITION_IDS: {{ .Values.authentik.geoip.editionID }}
+    GEOIPUPDATE_FREQUENCY: {{ .Values.authentik.geoip.frequency | quote }}
+    GEOIPUPDATE_DB_DIR: {{ .Values.persistence.geoip.targetSelector.geoip.geoip.mountPath | quote }}
+{{- end -}}
+
+{{- end -}}

stable/authentik/19.2.9/templates/_secret.tpl

@@ -0,0 +1,74 @@
+{{/* Define the secrets */}}
+{{- define "authentik.secrets" -}}
+
+  {{- $fullname := include "tc.v1.common.lib.chart.names.fullname" $ -}}
+  {{- $fetchname := printf "%v-server-worker" $fullname -}}
+
+  {{- $secretKey := randAlphaNum 32 -}}
+  {{- with (lookup "v1" "Secret" .Release.Namespace $fetchname) -}}
+    {{- $secretKey = index .data "AUTHENTIK_SECRET_KEY" | b64dec -}}
+  {{- end }}
+
+server-worker:
+  enabled: true
+  data:
+    {{/* Dependencies */}}
+    AUTHENTIK_POSTGRESQL__PASSWORD: {{ .Values.cnpg.main.creds.password | trimAll "\"" }}
+    AUTHENTIK_REDIS__PASSWORD: {{ .Values.redis.creds.redisPassword | trimAll "\"" }}
+
+    {{/* Secret Key */}}
+    AUTHENTIK_SECRET_KEY: {{ $secretKey }}
+
+    {{/* Initial credentials */}}
+    AUTHENTIK_BOOTSTRAP_EMAIL: {{ .Values.authentik.credentials.email | quote }}
+    AUTHENTIK_BOOTSTRAP_PASSWORD: {{ .Values.authentik.credentials.password | quote }}
+    {{- with .Values.authentik.credentials.bootstrapToken }}
+    AUTHENTIK_BOOTSTRAP_TOKEN: {{ . }}
+    {{- end }}
+
+    {{/* Mail */}}
+    {{- with .Values.authentik.email.host }}
+    AUTHENTIK_EMAIL__HOST: {{ . }}
+    {{- end -}}
+    {{- with .Values.authentik.email.username }}
+    AUTHENTIK_EMAIL__USERNAME: {{ . }}
+    {{- end -}}
+    {{- with .Values.authentik.email.password }}
+    AUTHENTIK_EMAIL__PASSWORD: {{ . }}
+    {{- end -}}
+    {{- with .Values.authentik.email.from }}
+    AUTHENTIK_EMAIL__FROM: {{ . }}
+    {{- end -}}
+
+{{- if .Values.authentik.geoip.enabled }}
+geoip:
+  enabled: true
+  data:
+    GEOIPUPDATE_VERBOSE: "0"
+    GEOIPUPDATE_PRESERVE_FILE_TIMES: "1"
+    GEOIPUPDATE_ACCOUNT_ID: {{ .Values.authentik.geoip.accountID | quote }}
+    GEOIPUPDATE_LICENSE_KEY: {{ .Values.authentik.geoip.licenseKey | quote }}
+{{- end -}}
+
+{{- if .Values.authentik.outposts.proxy.enabled }}
+proxy:
+  enabled: true
+  data:
+    AUTHENTIK_TOKEN: {{ .Values.authentik.outposts.proxy.token | quote }}
+{{- end -}}
+
+{{- if .Values.authentik.outposts.radius.enabled }}
+radius:
+  enabled: true
+  data:
+    AUTHENTIK_TOKEN: {{ .Values.authentik.outposts.radius.token | quote }}
+{{- end -}}
+
+{{- if .Values.authentik.outposts.ldap.enabled }}
+ldap:
+  enabled: true
+  data:
+    AUTHENTIK_TOKEN: {{ .Values.authentik.outposts.ldap.token | quote }}
+{{- end -}}
+
+{{- end -}}

stable/authentik/19.2.9/templates/_validation.tpl

@@ -0,0 +1,23 @@
+{{- define "authentik.validation" -}}
+  {{- range $outpost, $values := .Values.authentik.outposts -}}
+    {{- if (kindIs "dict" $values) -}}
+      {{- if and $values.enabled (not $values.token) -}}
+        {{- fail (printf "Authentik - Outpost [%v] is enabled, but [token] was not provided" ($outpost | upper)) -}}
+      {{- end -}}
+    {{- end -}}
+  {{- end -}}
+
+  {{- if .Values.authentik.geoip.enabled -}}
+    {{- if not .Values.authentik.geoip.accountID -}}
+      {{- fail "Authentik - GeoIP is enabled but [accountID] was not provided" -}}
+    {{- end -}}
+
+    {{- if not .Values.authentik.geoip.licenseKey -}}
+      {{- fail "Authentik - GeoIP is enabled but [licenseKey] was not provided" -}}
+    {{- end -}}
+
+    {{- if contains " " .Values.authentik.geoip.editionID -}}
+      {{- fail "Authentik - GeoIP is enabled but [editionID] cannot contain spaces" -}}
+    {{- end -}}
+  {{- end -}}
+{{- end -}}

stable/authentik/19.2.9/templates/_waitAuthentik.tpl

@@ -0,0 +1,20 @@
+{{- define "authentik.wait.server" -}}
+{{- $fullname := (include "tc.v1.common.lib.chart.names.fullname" $) -}}
+{{- $serverUrl := printf "https://%v:%v/-/health/ready/" $fullname .Values.service.main.ports.main.port }}
+enabled: true
+type: init
+imageSelector: alpineImage
+command: /bin/sh
+args:
+  - -c
+  - |
+    echo "Waiting Authentik Server [{{ $serverUrl }}] to be ready..."
+    until wget --no-check-certificate --spider --quiet "{{ $serverUrl }}";
+    do
+      echo "Waiting Authentik Server [{{ $serverUrl }}] to be ready..."
+      sleep 3
+    done
+
+    echo "Authentik [{{ $serverUrl }}] is ready..."
+    echo "Starting Outpost..."
+{{- end -}}

stable/authentik/19.2.9/templates/common.yaml

@@ -0,0 +1,97 @@
+{{/* Make sure all variables are set properly */}}
+{{- include "tc.v1.common.loader.init" . }}
+
+{{- include "authentik.validation" $ -}}
+
+{{/* Render secrets for authentik and friends */}}
+{{- $secrets := include "authentik.secrets" . | fromYaml -}}
+{{- if $secrets -}}
+  {{ $secrets := (mustMergeOverwrite .Values.secret $secrets) }}
+  {{- $_ := set .Values "secret" $secrets -}}
+{{- end -}}
+
+{{/* Render configmaps for authentik and friends */}}
+{{- $configmaps := include "authentik.configmaps" . | fromYaml -}}
+{{- if $configmaps -}}
+  {{ $configmaps := (mustMergeOverwrite .Values.configmap $configmaps) }}
+  {{- $_ := set .Values "configmap" $configmaps -}}
+{{- end -}}
+
+{{- if .Values.authentik.general.overwriteDefaultBlueprints -}}
+  {{- $_ := set .Values.persistence.blueprints.targetSelector.worker.worker "mountPath" "/blueprints" -}}
+{{- end -}}
+
+{{- if .Values.authentik.geoip.enabled -}}
+  {{- $_ := set .Values.workload.geoip "enabled" true -}}
+{{- else -}}
+  {{- $_ := set .Values.workload.geoip "enabled" false -}}
+  {{- $_ := set .Values.persistence.geoip "enabled" false -}}
+{{- end -}}
+
+{{- if or .Values.authentik.geoip.enabled .Values.authentik.geoip.wipeBuiltInDb -}}
+  {{- $_ := set .Values.persistence.geoip "enabled" true -}}
+{{- end -}}
+
+{{- if .Values.authentik.outposts.proxy.enabled -}}
+  {{- $_ := set .Values.workload.proxy "enabled" true -}}
+  {{- if not .Values.workload.proxy.podSpec.initContainers -}}
+    {{- $_ := set .Values.workload.proxy.podSpec "initContainers" dict -}}
+  {{- end -}}
+  {{- $_ := set .Values.workload.proxy.podSpec.initContainers "wait-server" (include "authentik.wait.server" . | fromYaml) -}}
+  {{- $_ := set .Values.service.proxy "enabled" true -}}
+  {{- $_ := set .Values.service.proxymetrics "enabled" true -}}
+  {{- $_ := set .Values.metrics.proxymetrics "enabled" true -}}
+{{- else -}}
+  {{- $_ := set .Values.workload.proxy "enabled" false -}}
+  {{- $_ := set .Values.service.proxy "enabled" false -}}
+  {{- $_ := set .Values.service.proxymetrics "enabled" false -}}
+  {{- $_ := set .Values.metrics.proxymetrics "enabled" false -}}
+{{- end -}}
+
+{{- if .Values.authentik.outposts.radius.enabled -}}
+  {{- $_ := set .Values.workload.radius "enabled" true -}}
+  {{- if not .Values.workload.radius.podSpec.initContainers -}}
+    {{- $_ := set .Values.workload.radius.podSpec "initContainers" dict -}}
+  {{- end -}}
+  {{- $_ := set .Values.workload.radius.podSpec.initContainers "wait-server" (include "authentik.wait.server" . | fromYaml) -}}
+  {{- $_ := set .Values.service.radius "enabled" true -}}
+  {{- $_ := set .Values.service.radiusmetrics "enabled" true -}}
+  {{- $_ := set .Values.metrics.radiusmetrics "enabled" true -}}
+{{- else -}}
+  {{- $_ := set .Values.workload.radius "enabled" false -}}
+  {{- $_ := set .Values.service.radius "enabled" false -}}
+  {{- $_ := set .Values.service.radiusmetrics "enabled" false -}}
+  {{- $_ := set .Values.metrics.radiusmetrics "enabled" false -}}
+{{- end -}}
+
+{{- if .Values.authentik.outposts.ldap.enabled -}}
+  {{- $_ := set .Values.workload.ldap "enabled" true -}}
+  {{- if not .Values.workload.ldap.podSpec.initContainers -}}
+    {{- $_ := set .Values.workload.ldap.podSpec "initContainers" dict -}}
+  {{- end -}}
+  {{- $_ := set .Values.workload.ldap.podSpec.initContainers "wait-server" (include "authentik.wait.server" . | fromYaml) -}}
+  {{- $_ := set .Values.service.ldap "enabled" true -}}
+  {{- $_ := set .Values.service.ldaps "enabled" true -}}
+  {{- $_ := set .Values.service.ldapmetrics "enabled" true -}}
+  {{- $_ := set .Values.metrics.ldapmetrics "enabled" true -}}
+{{- else -}}
+  {{- $_ := set .Values.workload.ldap "enabled" false -}}
+  {{- $_ := set .Values.service.ldap "enabled" false -}}
+  {{- $_ := set .Values.service.ldaps "enabled" false -}}
+  {{- $_ := set .Values.service.ldapmetrics "enabled" false -}}
+  {{- $_ := set .Values.metrics.ldapmetrics "enabled" false -}}
+{{- end -}}
+
+{{/* FIXME: See values.yaml */}}
+{{- $_ := set .Values.service.servermetrics "enabled" false -}}
+{{- $_ := set .Values.service.proxymetrics "enabled" false -}}
+{{- $_ := set .Values.service.radiusmetrics "enabled" false -}}
+{{- $_ := set .Values.service.ldapmetrics "enabled" false -}}
+
+{{- $_ := set .Values.metrics.servermetrics "enabled" false -}}
+{{- $_ := set .Values.metrics.proxymetrics "enabled" false -}}
+{{- $_ := set .Values.metrics.radiusmetrics "enabled" false -}}
+{{- $_ := set .Values.metrics.ldapmetrics "enabled" false -}}
+
+{{/* Render the templates */}}
+{{ include "tc.v1.common.loader.apply" . }}

stable/automatic-ripping-machine/2.1.27/app-changelog.md

@@ -1,9 +0,0 @@
-
-
-## [automatic-ripping-machine-2.1.27](https://github.com/truecharts/charts/compare/automatic-ripping-machine-2.1.26...automatic-ripping-machine-2.1.27) (2024-01-29)
-
-### Chore
-
-
-
-- update container image automaticrippingmachine/automatic-ripping-machine to 2.6.69[@ecd1c5f](https://github.com/ecd1c5f) by renovate ([#17716](https://github.com/truecharts/charts/issues/17716))

stable/automatic-ripping-machine/2.1.28/CHANGELOG.md

@@ -7,6 +7,15 @@ title: Changelog
 
 
 
+## [automatic-ripping-machine-2.1.28](https://github.com/truecharts/charts/compare/automatic-ripping-machine-2.1.27...automatic-ripping-machine-2.1.28) (2024-01-29)
+
+### Chore
+
+
+
+- update container image automaticrippingmachine/automatic-ripping-machine to v2.6.70[@c4d9f18](https://github.com/c4d9f18) by renovate ([#17753](https://github.com/truecharts/charts/issues/17753))
+
+
 ## [automatic-ripping-machine-2.1.27](https://github.com/truecharts/charts/compare/automatic-ripping-machine-2.1.26...automatic-ripping-machine-2.1.27) (2024-01-29)
 
 ### Chore
@@ -88,12 +97,3 @@ title: Changelog
 - update container image automaticrippingmachine/automatic-ripping-machine to v2.6.69[@c364433](https://github.com/c364433) by renovate ([#17405](https://github.com/truecharts/charts/issues/17405))
 
 
-## [automatic-ripping-machine-2.1.18](https://github.com/truecharts/charts/compare/automatic-ripping-machine-2.1.17...automatic-ripping-machine-2.1.18) (2024-01-21)
-
-### Chore
-
-
-
-- update container image automaticrippingmachine/automatic-ripping-machine to v[@f3f40e8](https://github.com/f3f40e8) by renovate ([#17322](https://github.com/truecharts/charts/issues/17322))
-
-

stable/automatic-ripping-machine/2.1.28/Chart.yaml

@@ -7,7 +7,7 @@ annotations:
   truecharts.org/min_helm_version: "3.12"
   truecharts.org/train: stable
 apiVersion: v2
-appVersion: 2.6.69
+appVersion: 2.6.70
 dependencies:
   - name: common
     version: 17.2.29
@@ -34,4 +34,4 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/stable/automatic-ripping-machine
   - https://hub.docker.com/r/automaticrippingmachine/automatic-ripping-machine
 type: application
-version: 2.1.27
+version: 2.1.28

stable/automatic-ripping-machine/2.1.28/app-changelog.md

@@ -0,0 +1,9 @@
+
+
+## [automatic-ripping-machine-2.1.28](https://github.com/truecharts/charts/compare/automatic-ripping-machine-2.1.27...automatic-ripping-machine-2.1.28) (2024-01-29)
+
+### Chore
+
+
+
+- update container image automaticrippingmachine/automatic-ripping-machine to v2.6.70[@c4d9f18](https://github.com/c4d9f18) by renovate ([#17753](https://github.com/truecharts/charts/issues/17753))

stable/automatic-ripping-machine/2.1.28/ix_values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: automaticrippingmachine/automatic-ripping-machine
   pullPolicy: IfNotPresent
-  tag: 2.6.69@sha256:ecd1c5f4d1455463f327b992c92d4dc54aff47590d204396d9a05b578fe832b3
+  tag: 2.6.70@sha256:c4d9f183b5c0abfd2a7f1aec847e31cffffbf5a7dcc5cd0db19c042163c95e0e
 
 securityContext:
   container:

stable/cloudflareddns/8.1.15/app-changelog.md

@@ -1,9 +0,0 @@
-
-
-## [cloudflareddns-8.1.15](https://github.com/truecharts/charts/compare/cloudflareddns-8.1.14...cloudflareddns-8.1.15) (2024-01-29)
-
-### Chore
-
-
-
-- update container image ghcr.io/hotio/cloudflareddns to latest[@0e6077f](https://github.com/0e6077f) by renovate ([#17593](https://github.com/truecharts/charts/issues/17593))

stable/cloudflareddns/8.1.16/CHANGELOG.md

@@ -7,6 +7,15 @@ title: Changelog
 
 
 
+## [cloudflareddns-8.1.16](https://github.com/truecharts/charts/compare/cloudflareddns-8.1.15...cloudflareddns-8.1.16) (2024-01-29)
+
+### Chore
+
+
+
+- update container image ghcr.io/hotio/cloudflareddns to latest[@e4e570d](https://github.com/e4e570d) by renovate ([#17743](https://github.com/truecharts/charts/issues/17743))
+
+
 ## [cloudflareddns-8.1.15](https://github.com/truecharts/charts/compare/cloudflareddns-8.1.14...cloudflareddns-8.1.15) (2024-01-29)
 
 ### Chore
@@ -88,12 +97,3 @@ title: Changelog
 
 
 - force bump to ensure up-to-date catalogs
-
-
-## [cloudflareddns-8.1.6](https://github.com/truecharts/charts/compare/cloudflareddns-8.1.5...cloudflareddns-8.1.6) (2024-01-02)
-
-### Chore
-
-
-
-- bump common ([#16751](https://github.com/truecharts/charts/issues/16751))

stable/cloudflareddns/8.1.16/Chart.yaml

@@ -36,4 +36,4 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/stable/cloudflareddns
   - https://ghcr.io/hotio/cloudflareddns
 type: application
-version: 8.1.15
+version: 8.1.16

stable/cloudflareddns/8.1.16/app-changelog.md

@@ -0,0 +1,9 @@
+
+
+## [cloudflareddns-8.1.16](https://github.com/truecharts/charts/compare/cloudflareddns-8.1.15...cloudflareddns-8.1.16) (2024-01-29)
+
+### Chore
+
+
+
+- update container image ghcr.io/hotio/cloudflareddns to latest[@e4e570d](https://github.com/e4e570d) by renovate ([#17743](https://github.com/truecharts/charts/issues/17743))

stable/cloudflareddns/8.1.16/ix_values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: ghcr.io/hotio/cloudflareddns
   pullPolicy: IfNotPresent
-  tag: latest@sha256:0e6077f16300695ecc6c5907ceac71438588602d6b8a66d0ad9c2d45f7a2f1c1
+  tag: latest@sha256:e4e570d04abb9d4bfd650d85a7622348f89cf24eeb308511aef277706487e28c
 securityContext:
   container:
     runAsNonRoot: false

stable/grafana-image-renderer/4.1.10/app-changelog.md

@@ -1,9 +0,0 @@
-
-
-## [grafana-image-renderer-4.1.10](https://github.com/truecharts/charts/compare/grafana-image-renderer-4.1.9...grafana-image-renderer-4.1.10) (2024-01-26)
-
-### Chore
-
-
-
-- update container image common to v17.2.29[@d7c41a3](https://github.com/d7c41a3) by renovate ([#17545](https://github.com/truecharts/charts/issues/17545))

stable/grafana-image-renderer/4.1.11/CHANGELOG.md

@@ -7,6 +7,15 @@ title: Changelog
 
 
 
+## [grafana-image-renderer-4.1.11](https://github.com/truecharts/charts/compare/grafana-image-renderer-4.1.10...grafana-image-renderer-4.1.11) (2024-01-29)
+
+### Chore
+
+
+
+- update container image grafana/grafana-image-renderer to latest[@748842f](https://github.com/748842f) by renovate ([#17745](https://github.com/truecharts/charts/issues/17745))
+
+
 ## [grafana-image-renderer-4.1.10](https://github.com/truecharts/charts/compare/grafana-image-renderer-4.1.9...grafana-image-renderer-4.1.10) (2024-01-26)
 
 ### Chore
@@ -88,12 +97,3 @@ title: Changelog
 
 - update container image common to v17.2.18[@085ba3c](https://github.com/085ba3c) by renovate ([#16732](https://github.com/truecharts/charts/issues/16732))
 
-- standardize ./img references ([#16704](https://github.com/truecharts/charts/issues/16704))
-
-- lints some docs, uses front-matter instead of # h1, and fix list items in changelog ([#16589](https://github.com/truecharts/charts/issues/16589))
-
-
-## [grafana-image-renderer-4.1.2](https://github.com/truecharts/charts/compare/grafana-image-renderer-4.1.0...grafana-image-renderer-4.1.2) (2024-01-01)
-
-### Chore
-

stable/grafana-image-renderer/4.1.11/Chart.yaml

@@ -34,4 +34,4 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/stable/grafana-image-renderer
   - https://hub.docker.com/r/grafana/grafana-image-renderer
 type: application
-version: 4.1.10
+version: 4.1.11

stable/grafana-image-renderer/4.1.11/app-changelog.md

@@ -0,0 +1,9 @@
+
+
+## [grafana-image-renderer-4.1.11](https://github.com/truecharts/charts/compare/grafana-image-renderer-4.1.10...grafana-image-renderer-4.1.11) (2024-01-29)
+
+### Chore
+
+
+
+- update container image grafana/grafana-image-renderer to latest[@748842f](https://github.com/748842f) by renovate ([#17745](https://github.com/truecharts/charts/issues/17745))

stable/grafana-image-renderer/4.1.11/ix_values.yaml

@@ -1,7 +1,7 @@
 image:
   pullPolicy: IfNotPresent
   repository: grafana/grafana-image-renderer
-  tag: latest@sha256:a1e0c69aaa5c1fe106c89ba4c5569563d8b2ac0b04e0f121b12b5c2a5b4c3f94
+  tag: latest@sha256:748842f9ce6068976f4a20687be8e4f6f2a3246e4dfa516d71461e5193908d4c
 persistence: {}
 portal:
   open:

stable/invidious/8.1.11/app-changelog.md

@@ -1,9 +0,0 @@
-
-
-## [invidious-8.1.11](https://github.com/truecharts/charts/compare/invidious-8.1.10...invidious-8.1.11) (2024-01-26)
-
-### Chore
-
-
-
-- update container image common to v17.2.29[@d7c41a3](https://github.com/d7c41a3) by renovate ([#17545](https://github.com/truecharts/charts/issues/17545))

stable/invidious/8.1.12/CHANGELOG.md

@@ -7,6 +7,15 @@ title: Changelog
 
 
 
+## [invidious-8.1.12](https://github.com/truecharts/charts/compare/invidious-8.1.11...invidious-8.1.12) (2024-01-29)
+
+### Chore
+
+
+
+- update container image quay.io/invidious/invidious to latest[@fc25ef2](https://github.com/fc25ef2) by renovate ([#17749](https://github.com/truecharts/charts/issues/17749))
+
+
 ## [invidious-8.1.11](https://github.com/truecharts/charts/compare/invidious-8.1.10...invidious-8.1.11) (2024-01-26)
 
 ### Chore
@@ -88,12 +97,3 @@ title: Changelog
 ### Chore
 
 
-
-- bump all charts for OCI test push
-
-- move everything to consume OCI-hosted common-chart dependency
-
-- update container image common to v17.2.19[@4ebb688](https://github.com/4ebb688) by renovate ([#16733](https://github.com/truecharts/charts/issues/16733))
-
-- update container image common to v17.2.18[@085ba3c](https://github.com/085ba3c) by renovate ([#16732](https://github.com/truecharts/charts/issues/16732))
-

stable/invidious/8.1.12/Chart.yaml

@@ -36,4 +36,4 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/stable/invidious
   - https://quay.io/invidious/invidious
 type: application
-version: 8.1.11
+version: 8.1.12

stable/invidious/8.1.12/LICENSE

@@ -0,0 +1,106 @@
+Business Source License 1.1
+
+Parameters
+
+Licensor:             The TrueCharts Project, it's owner and it's contributors
+Licensed Work:        The TrueCharts "Blocky" Helm Chart
+Additional Use Grant: You may use the licensed work in production, as long
+                      as it is directly sourced from a TrueCharts provided
+                      official repository, catalog or source. You may also make private
+                      modification to the directly sourced licenced work,
+                      when used in production.
+
+                      The following cases are, due to their nature, also
+                      defined as 'production use' and explicitly prohibited:
+                      - Bundling, including or displaying the licensed work
+                      with(in) another work intended for production use,
+                      with the apparent intend of facilitating and/or
+                      promoting production use by third parties in
+                      violation of this license.
+
+Change Date:          2050-01-01
+
+Change License:       3-clause BSD license
+
+For information about alternative licensing arrangements for the Software,
+please contact: legal@truecharts.org
+
+Notice
+
+The Business Source License (this document, or the “License”) is not an Open
+Source license. However, the Licensed Work will eventually be made available
+under an Open Source License, as stated in this License.
+
+License text copyright (c) 2017 MariaDB Corporation Ab, All Rights Reserved.
+“Business Source License” is a trademark of MariaDB Corporation Ab.
+
+-----------------------------------------------------------------------------
+
+Business Source License 1.1
+
+Terms
+
+The Licensor hereby grants you the right to copy, modify, create derivative
+works, redistribute, and make non-production use of the Licensed Work. The
+Licensor may make an Additional Use Grant, above, permitting limited
+production use.
+
+Effective on the Change Date, or the fourth anniversary of the first publicly
+available distribution of a specific version of the Licensed Work under this
+License, whichever comes first, the Licensor hereby grants you rights under
+the terms of the Change License, and the rights granted in the paragraph
+above terminate.
+
+If your use of the Licensed Work does not comply with the requirements
+currently in effect as described in this License, you must purchase a
+commercial license from the Licensor, its affiliated entities, or authorized
+resellers, or you must refrain from using the Licensed Work.
+
+All copies of the original and modified Licensed Work, and derivative works
+of the Licensed Work, are subject to this License. This License applies
+separately for each version of the Licensed Work and the Change Date may vary
+for each version of the Licensed Work released by Licensor.
+
+You must conspicuously display this License on each original or modified copy
+of the Licensed Work. If you receive the Licensed Work in original or
+modified form from a third party, the terms and conditions set forth in this
+License apply to your use of that work.
+
+Any use of the Licensed Work in violation of this License will automatically
+terminate your rights under this License for the current and all other
+versions of the Licensed Work.
+
+This License does not grant you any right in any trademark or logo of
+Licensor or its affiliates (provided that you may use a trademark or logo of
+Licensor as expressly required by this License).
+
+TO THE EXTENT PERMITTED BY APPLICABLE LAW, THE LICENSED WORK IS PROVIDED ON
+AN “AS IS” BASIS. LICENSOR HEREBY DISCLAIMS ALL WARRANTIES AND CONDITIONS,
+EXPRESS OR IMPLIED, INCLUDING (WITHOUT LIMITATION) WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND
+TITLE.
+
+MariaDB hereby grants you permission to use this License’s text to license
+your works, and to refer to it using the trademark “Business Source License”,
+as long as you comply with the Covenants of Licensor below.
+
+Covenants of Licensor
+
+In consideration of the right to use this License’s text and the “Business
+Source License” name and trademark, Licensor covenants to MariaDB, and to all
+other recipients of the licensed work to be provided by Licensor:
+
+1. To specify as the Change License the GPL Version 2.0 or any later version,
+   or a license that is compatible with GPL Version 2.0 or a later version,
+   where “compatible” means that software provided under the Change License can
+   be included in a program with software provided under GPL Version 2.0 or a
+   later version. Licensor may specify additional Change Licenses without
+   limitation.
+
+2. To either: (a) specify an additional grant of rights to use that does not
+   impose any additional restriction on the right granted in this License, as
+   the Additional Use Grant; or (b) insert the text “None”.
+
+3. To specify a Change Date.
+
+4. Not to modify this License in any other way.

stable/invidious/8.1.12/app-changelog.md

@@ -0,0 +1,9 @@
+
+
+## [invidious-8.1.12](https://github.com/truecharts/charts/compare/invidious-8.1.11...invidious-8.1.12) (2024-01-29)
+
+### Chore
+
+
+
+- update container image quay.io/invidious/invidious to latest[@fc25ef2](https://github.com/fc25ef2) by renovate ([#17749](https://github.com/truecharts/charts/issues/17749))

stable/invidious/8.1.12/ix_values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: quay.io/invidious/invidious
   pullPolicy: IfNotPresent
-  tag: latest@sha256:7da41b32475a5619cf0591ca966041f03cc91e7bb02bff15ff8483686b698abf
+  tag: latest@sha256:fc25ef270edb96a4fc10c26073dca2dec231a9bdd804a35a84c44666f0f414ed
 securityContext:
   container:
     readOnlyRootFilesystem: false

stable/kdenlive/4.1.13/app-changelog.md

@@ -1,9 +0,0 @@
-
-
-## [kdenlive-4.1.13](https://github.com/truecharts/charts/compare/kdenlive-4.1.12...kdenlive-4.1.13) (2024-01-26)
-
-### Chore
-
-
-
-- update container image common to v17.2.29[@d7c41a3](https://github.com/d7c41a3) by renovate ([#17545](https://github.com/truecharts/charts/issues/17545))

stable/kdenlive/4.1.14/CHANGELOG.md

@@ -7,6 +7,15 @@ title: Changelog
 
 
 
+## [kdenlive-4.1.14](https://github.com/truecharts/charts/compare/kdenlive-4.1.13...kdenlive-4.1.14) (2024-01-29)
+
+### Chore
+
+
+
+- update container image lscr.io/linuxserver/kdenlive to latest[@02dc593](https://github.com/02dc593) by renovate ([#17747](https://github.com/truecharts/charts/issues/17747))
+
+
 ## [kdenlive-4.1.13](https://github.com/truecharts/charts/compare/kdenlive-4.1.12...kdenlive-4.1.13) (2024-01-26)
 
 ### Chore
@@ -88,12 +97,3 @@ title: Changelog
 
 
 - force bump to ensure up-to-date catalogs
-
-
-## [kdenlive-4.1.4](https://github.com/truecharts/charts/compare/kdenlive-4.1.3...kdenlive-4.1.4) (2024-01-01)
-
-### Chore
-
-
-
-- increase common version for oci fixes

stable/kdenlive/4.1.14/Chart.yaml

@@ -36,4 +36,4 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/stable/kdenlive
   - https://fleet.linuxserver.io/image?name=linuxserver/kdenlive
 type: application
-version: 4.1.13
+version: 4.1.14

stable/kdenlive/4.1.14/app-changelog.md

@@ -0,0 +1,9 @@
+
+
+## [kdenlive-4.1.14](https://github.com/truecharts/charts/compare/kdenlive-4.1.13...kdenlive-4.1.14) (2024-01-29)
+
+### Chore
+
+
+
+- update container image lscr.io/linuxserver/kdenlive to latest[@02dc593](https://github.com/02dc593) by renovate ([#17747](https://github.com/truecharts/charts/issues/17747))

stable/kdenlive/4.1.14/ix_values.yaml

@@ -1,7 +1,7 @@
 image:
   pullPolicy: IfNotPresent
   repository: lscr.io/linuxserver/kdenlive
-  tag: latest@sha256:0eaa1082ccefc8e0c368c263401e8c976a26d56468eb06c307f56d223f3a30cd
+  tag: latest@sha256:02dc593d493ea00234c0d23a7f265629cdcb0da786017f23aca4d9717149cd6c
 persistence:
   config:
     enabled: true

stable/metabase/2.1.12/app-changelog.md

@@ -1,9 +0,0 @@
-
-
-## [metabase-2.1.12](https://github.com/truecharts/charts/compare/metabase-2.1.11...metabase-2.1.12) (2024-01-26)
-
-### Chore
-
-
-
-- update container image common to v17.2.29[@d7c41a3](https://github.com/d7c41a3) by renovate ([#17545](https://github.com/truecharts/charts/issues/17545))

stable/metabase/2.1.13/CHANGELOG.md

@@ -7,6 +7,15 @@ title: Changelog
 
 
 
+## [metabase-2.1.13](https://github.com/truecharts/charts/compare/metabase-2.1.12...metabase-2.1.13) (2024-01-29)
+
+### Chore
+
+
+
+- update container image metabase/metabase to v0.48.4[@fb0eb5b](https://github.com/fb0eb5b) by renovate ([#17754](https://github.com/truecharts/charts/issues/17754))
+
+
 ## [metabase-2.1.12](https://github.com/truecharts/charts/compare/metabase-2.1.11...metabase-2.1.12) (2024-01-26)
 
 ### Chore
@@ -88,12 +97,3 @@ title: Changelog
 
 
 - increase common version for oci fixes
-
-- remove non-existent template refs ([#16738](https://github.com/truecharts/charts/issues/16738))
-
-
-## [metabase-2.1.3](https://github.com/truecharts/charts/compare/metabase-2.1.0...metabase-2.1.3) (2024-01-01)
-
-### Chore
-
-

stable/metabase/2.1.13/Chart.yaml

@@ -7,7 +7,7 @@ annotations:
   truecharts.org/min_helm_version: "3.12"
   truecharts.org/train: stable
 apiVersion: v2
-appVersion: 0.48.3
+appVersion: 0.48.4
 dependencies:
   - name: common
     version: 17.2.29
@@ -33,4 +33,4 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/stable/metabase
   - https://hub.docker.com/r/metabase/metabase
 type: application
-version: 2.1.12
+version: 2.1.13

stable/metabase/2.1.13/app-changelog.md

@@ -0,0 +1,9 @@
+
+
+## [metabase-2.1.13](https://github.com/truecharts/charts/compare/metabase-2.1.12...metabase-2.1.13) (2024-01-29)
+
+### Chore
+
+
+
+- update container image metabase/metabase to v0.48.4[@fb0eb5b](https://github.com/fb0eb5b) by renovate ([#17754](https://github.com/truecharts/charts/issues/17754))

stable/metabase/2.1.13/ix_values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: metabase/metabase
   pullPolicy: IfNotPresent
-  tag: v0.48.3@sha256:2f788f9710ca327691af925bd708ad54ca5f58e01d256ad18c35c25ada226312
+  tag: v0.48.4@sha256:fb0eb5b79deb9872061f53b967ee857e8210c42a6ad2f5f2322bcef3d7dd1931
 service:
   main:
     ports:

stable/metatube/4.1.11/app-changelog.md

@@ -1,9 +0,0 @@
-
-
-## [metatube-4.1.11](https://github.com/truecharts/charts/compare/metatube-4.1.10...metatube-4.1.11) (2024-01-29)
-
-### Chore
-
-
-
-- update container image jvt038/metatube to latest[@fdf8d21](https://github.com/fdf8d21) by renovate ([#17639](https://github.com/truecharts/charts/issues/17639))

stable/metatube/4.1.12/CHANGELOG.md

@@ -7,6 +7,15 @@ title: Changelog
 
 
 
+## [metatube-4.1.12](https://github.com/truecharts/charts/compare/metatube-4.1.11...metatube-4.1.12) (2024-01-29)
+
+### Chore
+
+
+
+- update container image jvt038/metatube to latest[@67755ab](https://github.com/67755ab) by renovate ([#17746](https://github.com/truecharts/charts/issues/17746))
+
+
 ## [metatube-4.1.11](https://github.com/truecharts/charts/compare/metatube-4.1.10...metatube-4.1.11) (2024-01-29)
 
 ### Chore
@@ -88,12 +97,3 @@ title: Changelog
 ### Chore
 
 
-
-- bump all charts for OCI test push
-
-- move everything to consume OCI-hosted common-chart dependency
-
-- update container image common to v17.2.19[@4ebb688](https://github.com/4ebb688) by renovate ([#16733](https://github.com/truecharts/charts/issues/16733))
-
-- update container image common to v17.2.18[@085ba3c](https://github.com/085ba3c) by renovate ([#16732](https://github.com/truecharts/charts/issues/16732))
-

stable/metatube/4.1.12/Chart.yaml

@@ -36,4 +36,4 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/stable/metatube
   - https://hub.docker.com/r/jvt038/metatube
 type: application
-version: 4.1.11
+version: 4.1.12

stable/metatube/4.1.12/app-changelog.md

@@ -0,0 +1,9 @@
+
+
+## [metatube-4.1.12](https://github.com/truecharts/charts/compare/metatube-4.1.11...metatube-4.1.12) (2024-01-29)
+
+### Chore
+
+
+
+- update container image jvt038/metatube to latest[@67755ab](https://github.com/67755ab) by renovate ([#17746](https://github.com/truecharts/charts/issues/17746))

stable/metatube/4.1.12/ix_values.yaml

@@ -1,7 +1,7 @@
 image:
   pullPolicy: IfNotPresent
   repository: jvt038/metatube
-  tag: latest@sha256:fdf8d218b09f4af053c6f97477dcb21381e99f0d28edf9794259b1583fd86f79
+  tag: latest@sha256:67755abd2aad6498e4bb92a05137af595143615d43370bf89f30db4647225da3
 persistence:
   storagedatabase:
     enabled: true