feat(container)!: Update image ghcr.io/bjw-s-labs/helm/app-template ( 4.6.2 ➔ 5.0.1 )

[renovate]

This PR contains the following updates:

Package	Update	Change
ghcr.io/bjw-s-labs/helm/app-template	major	4.6.2 → 5.0.1

---

Release Notes

bjw-s-labs/helm-charts (ghcr.io/bjw-s-labs/helm/app-template)

v5.0.1

Changelog:

Changed

• Upgraded the common library to v5.0.1
  • Upgrade notes
  • Detailed release notes

v5.0.0

Changelog:

Changed

• Upgraded the common library to v5.0.0
  • Upgrade notes
  • Detailed release notes

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "every weekend"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

--- kubernetes/apps/default/echo/app Kustomization: default/echo OCIRepository: default/echo

+++ kubernetes/apps/default/echo/app Kustomization: default/echo OCIRepository: default/echo

@@ -10,9 +10,9 @@

 spec:
   interval: 15m
   layerSelector:
     mediaType: application/vnd.cncf.helm.chart.content.v1.tar+gzip
     operation: copy
   ref:
-    tag: 4.6.2
+    tag: 5.0.1
   url: oci://ghcr.io/bjw-s-labs/helm/app-template
 
--- kubernetes/apps/bakery-site/server/app Kustomization: bakery-site/bakery-server OCIRepository: bakery-site/bakery-server

+++ kubernetes/apps/bakery-site/server/app Kustomization: bakery-site/bakery-server OCIRepository: bakery-site/bakery-server

@@ -10,9 +10,9 @@

 spec:
   interval: 15m
   layerSelector:
     mediaType: application/vnd.cncf.helm.chart.content.v1.tar+gzip
     operation: copy
   ref:
-    tag: 4.6.2
+    tag: 5.0.1
   url: oci://ghcr.io/bjw-s-labs/helm/app-template
 
--- kubernetes/apps/network/cloudflare-tunnel/app Kustomization: network/cloudflare-tunnel OCIRepository: network/cloudflare-tunnel

+++ kubernetes/apps/network/cloudflare-tunnel/app Kustomization: network/cloudflare-tunnel OCIRepository: network/cloudflare-tunnel

@@ -10,9 +10,9 @@

 spec:
   interval: 15m
   layerSelector:
     mediaType: application/vnd.cncf.helm.chart.content.v1.tar+gzip
     operation: copy
   ref:
-    tag: 4.6.2
+    tag: 5.0.1
   url: oci://ghcr.io/bjw-s-labs/helm/app-template
 

[github-actions]

--- HelmRelease: network/cloudflare-tunnel Deployment: network/cloudflare-tunnel

+++ HelmRelease: network/cloudflare-tunnel Deployment: network/cloudflare-tunnel

@@ -28,14 +28,14 @@

       labels:
         app.kubernetes.io/controller: cloudflare-tunnel
         app.kubernetes.io/instance: cloudflare-tunnel
         app.kubernetes.io/name: cloudflare-tunnel
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: cloudflare-tunnel
+      automountServiceAccountToken: false
       priorityClassName: system-cluster-critical
       securityContext:
         runAsGroup: 65534
         runAsNonRoot: true
         runAsUser: 65534
       hostIPC: false
--- HelmRelease: network/cloudflare-tunnel ServiceMonitor: network/cloudflare-tunnel

+++ HelmRelease: network/cloudflare-tunnel ServiceMonitor: network/cloudflare-tunnel

@@ -6,13 +6,13 @@

   labels:
     app.kubernetes.io/instance: cloudflare-tunnel
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cloudflare-tunnel
   namespace: network
 spec:
-  jobLabel: cloudflare-tunnel
+  jobLabel: app.kubernetes.io/name
   namespaceSelector:
     matchNames:
     - network
   selector:
     matchLabels:
       app.kubernetes.io/service: cloudflare-tunnel
--- HelmRelease: network/cloudflare-tunnel ServiceAccount: network/cloudflare-tunnel

+++ HelmRelease: network/cloudflare-tunnel ServiceAccount: network/cloudflare-tunnel

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: cloudflare-tunnel
+  labels:
+    app.kubernetes.io/instance: cloudflare-tunnel
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: cloudflare-tunnel
+  namespace: network
+
--- HelmRelease: default/echo Deployment: default/echo

+++ HelmRelease: default/echo Deployment: default/echo

@@ -24,14 +24,14 @@

       labels:
         app.kubernetes.io/controller: echo
         app.kubernetes.io/instance: echo
         app.kubernetes.io/name: echo
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: echo
+      automountServiceAccountToken: false
       securityContext:
         runAsGroup: 65534
         runAsNonRoot: true
         runAsUser: 65534
       hostIPC: false
       hostNetwork: false
--- HelmRelease: default/echo ServiceMonitor: default/echo

+++ HelmRelease: default/echo ServiceMonitor: default/echo

@@ -6,13 +6,13 @@

   labels:
     app.kubernetes.io/instance: echo
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: echo
   namespace: default
 spec:
-  jobLabel: echo
+  jobLabel: app.kubernetes.io/name
   namespaceSelector:
     matchNames:
     - default
   selector:
     matchLabels:
       app.kubernetes.io/service: echo
--- HelmRelease: default/echo ServiceAccount: default/echo

+++ HelmRelease: default/echo ServiceAccount: default/echo

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: echo
+  labels:
+    app.kubernetes.io/instance: echo
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: echo
+  namespace: default
+
--- HelmRelease: bakery-site/bakery-server Deployment: bakery-site/bakery-server

+++ HelmRelease: bakery-site/bakery-server Deployment: bakery-site/bakery-server

@@ -24,14 +24,14 @@

       labels:
         app.kubernetes.io/controller: server
         app.kubernetes.io/instance: bakery-server
         app.kubernetes.io/name: bakery-server
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: bakery-server
+      automountServiceAccountToken: false
       securityContext:
         runAsGroup: 65534
         runAsNonRoot: true
         runAsUser: 65534
       hostIPC: false
       hostNetwork: false
--- HelmRelease: bakery-site/bakery-server ServiceAccount: bakery-site/bakery-server

+++ HelmRelease: bakery-site/bakery-server ServiceAccount: bakery-site/bakery-server

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: bakery-server
+  labels:
+    app.kubernetes.io/instance: bakery-server
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: bakery-server
+  namespace: bakery-site
+