feat: update vaultwarden to 1.37.1

k8s/argo-apps/vaultwarden.yaml

@@ -11,8 +11,8 @@ spec:
     server: https://kubernetes.default.svc
   sources:
     - repoURL: git.roboces.dev/catalin/fukuops
-      chart: vaultwarden/vaultwarden
-      targetRevision: 0.1.0
+      chart: vaultwarden
+      targetRevision: 0.1.1
       helm:
         valuesObject:
           conf:

k8s/charts/miniflux/Chart.yaml

@@ -3,4 +3,4 @@ name: miniflux
 description: A Helm chart for Miniflux RSS reader
 type: application
 version: 0.1.0
-appVersion: "2.2.18"
+appVersion: 2.2.18

k8s/charts/vaultwarden/Chart.yaml

@@ -3,4 +3,4 @@ name: vaultwarden
 description: A Helm chart for Vaultwarden password manager
 type: application
 version: 0.1.0
-appVersion: "1.37.0"
+appVersion: 1.37.1

k8s/charts/vaultwarden/templates/pvc.yaml

@@ -1,21 +0,0 @@
-{{- if and .Values.persistence.enabled (not .Values.persistence.existingClaim) }}
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: {{ include "vaultwarden.fullname" . }}-data
-  labels:
-    {{- include "vaultwarden.labels" . | nindent 4 }}
-spec:
-  accessModes:
-    - {{ .Values.persistence.accessMode }}
-  {{- if .Values.persistence.storageClass }}
-  {{- if eq "-" .Values.persistence.storageClass }}
-  storageClassName: ""
-  {{- else }}
-  storageClassName: "{{ .Values.persistence.storageClass }}"
-  {{- end }}
-  {{- end }}
-  resources:
-    requests:
-      storage: {{ .Values.persistence.size }}
-{{- end }}

k8s/charts/vaultwarden/templates/statefulset.yaml

@@ -1,18 +1,17 @@
 apiVersion: apps/v1
-kind: Deployment
+kind: StatefulSet
 metadata:
   name: {{ include "vaultwarden.fullname" . }}
   labels:
     {{- include "vaultwarden.labels" . | nindent 4 }}
 spec:
+  serviceName: {{ include "vaultwarden.fullname" . }}-headless
   {{- if not .Values.autoscaling.enabled }}
   replicas: {{ .Values.replicaCount }}
   {{- end }}
   selector:
     matchLabels:
       {{- include "vaultwarden.selectorLabels" . | nindent 6 }}
-  strategy:
-    type: Recreate
   template:
     metadata:
       {{- with .Values.podAnnotations }}
@@ -32,7 +31,7 @@ spec:
         - name: {{ .Chart.Name }}
           securityContext:
             {{- toYaml .Values.securityContext | nindent 12 }}
-          image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}"
+          image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default (printf "%s-alpine" .Chart.AppVersion) }}"
           imagePullPolicy: {{ .Values.image.pullPolicy }}
           envFrom:
             - secretRef:
@@ -69,15 +68,12 @@ spec:
           volumeMounts:
             - name: data
               mountPath: /data
+      {{- if .Values.persistence.existingClaim }}
       volumes:
         - name: data
-          {{- if .Values.persistence.existingClaim }}
           persistentVolumeClaim:
             claimName: {{ .Values.persistence.existingClaim }}
-          {{- else }}
-          persistentVolumeClaim:
-            claimName: {{ include "vaultwarden.fullname" . }}-data
-          {{- end }}
+      {{- end }}
       {{- with .Values.nodeSelector }}
       nodeSelector:
         {{- toYaml . | nindent 8 }}
@@ -92,3 +88,21 @@ spec:
       {{- end }}
       restartPolicy: Always
       automountServiceAccountToken: false
+  {{- if and .Values.persistence.enabled (not .Values.persistence.existingClaim) }}
+  volumeClaimTemplates:
+    - metadata:
+        name: data
+      spec:
+        accessModes:
+          - {{ .Values.persistence.accessMode }}
+        {{- if .Values.persistence.storageClass }}
+        {{- if eq "-" .Values.persistence.storageClass }}
+        storageClassName: ""
+        {{- else }}
+        storageClassName: {{ .Values.persistence.storageClass | quote }}
+        {{- end }}
+        {{- end }}
+        resources:
+          requests:
+            storage: {{ .Values.persistence.size }}
+  {{- end }}

k8s/charts/vaultwarden/values.yaml

@@ -4,7 +4,7 @@ replicaCount: 1
 image:
   repository: vaultwarden/server
   pullpolicy: Always
-  tag: "1.37.1-alpine"
+  tag: ""
 
 imagePullSecrets: []
 podAnnotations: {}