chore(home): upgrade home assistant chart

kubernetes/main/apps/home/home-assistant/app/helmrelease.yaml

@@ -1,23 +1,20 @@
 ---
-# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/helm.toolkit.fluxcd.io/helmrelease_v2beta1.json
+# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/helm.toolkit.fluxcd.io/helmrelease_v2beta2.json
 apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
   name: home-assistant
-  namespace: home
 spec:
-  interval: 15m
+  interval: 30m
   chart:
     spec:
       chart: app-template
-      version: 1.5.1
+      version: 2.4.0
       sourceRef:
         kind: HelmRepository
         name: bjw-s
         namespace: flux-system
-  maxHistory: 2
   install:
-    createNamespace: true
     remediation:
       retries: 3
   upgrade:
@@ -32,97 +29,78 @@ spec:
     - name: volsync
       namespace: volsync
   values:
-    controller:
-      type: statefulset
-    image:
-      repository: ghcr.io/onedr0p/home-assistant
-      tag: 2023.12.4
-    env:
-      TZ: America/Santiago
-    envFrom:
-      - secretRef:
-          name: home-assistant-secrets
+    controllers:
+      main:
+        annotations:
+          reloader.stakater.com/auto: "true"
+        containers:
+          main:
+            image:
+              repository: ghcr.io/onedr0p/home-assistant
+              tag: 2023.12.4@sha256:fbf40169fd70409280bfce460be144a2f49e1bb9f3350e3f775e308bd3379885
+            env:
+              TZ: America/Santiago
+            envFrom:
+              - secretRef:
+                  name: home-assistant-secret
+            probes:
+              liveness:
+                enabled: false
+              readiness:
+                enabled: false
+              startup:
+                enabled: false
+            securityContext:
+              allowPrivilegeEscalation: false
+              readOnlyRootFilesystem: true
+              capabilities: { drop: ["ALL"] }
+            resources:
+              limits: &resources
+                memory: 1Gi
+              requests:
+                <<: *resources
+                cpu: 10m
+        pod:
+          securityContext:
+            runAsUser: 568
+            runAsGroup: 568
+            runAsNonRoot: true
+            fsGroup: 568
+            fsGroupChangePolicy: OnRootMismatch
     service:
       main:
         type: LoadBalancer
-        loadBalancerIP: 10.2.1.100
+        annotations:
+          io.cilium/lb-ipam-ips: 10.2.1.100
         ports:
           http:
             port: 8123
     ingress:
       main:
         enabled: true
-        ingressClassName: external
+        className: external
         annotations:
-          external-dns.alpha.kubernetes.io/target: ingress.donoso.family
-          hajimari.io/icon: mdi:home-assistant
+          external-dns.alpha.kubernetes.io/target: external.donoso.family
         hosts:
-          - host: &host hass.donoso.family
+          - host: &host "{{ .Release.Name }}.donoso.family"
+            paths:
+              - path: /
+                service:
+                  name: main
+                  port: http
+          - host: &customHost hass.donoso.family
             paths:
               - path: /
-                pathType: Prefix
+                service:
+                  name: main
+                  port: http
         tls:
           - hosts:
               - *host
-    probes:
-      liveness:
-        enabled: false
-      readiness:
-        enabled: false
-      startup:
-        enabled: false
-    podSecurityContext:
-      runAsUser: 568
-      runAsGroup: 568
-      fsGroup: 568
-      fsGroupChangePolicy: OnRootMismatch
-    volumeClaimTemplates:
-      - name: config
-        mountPath: /config
-        accessMode: ReadWriteOnce
-        size: 4Gi
-        storageClass: ceph-block
-    resources:
-      requests:
-        cpu: 48m
-        memory: 443M
-      limits:
-        memory: 709M
-    addons:
-      codeserver:
+              - *customHost
+    persistence:
+      config:
         enabled: true
-        image:
-          repository: ghcr.io/coder/code-server
-          tag: 4.20.0
-        env:
-          TZ: America/Santiago
-          EMAIL: [email protected]
-          GIT_AUTHOR_NAME: Juan Ignacio Donoso
-        workingDir: '/config'
-        args:
-          - --auth
-          - 'none'
-          - --user-data-dir
-          - '/config/.vscode'
-          - --extensions-dir
-          - '/config/.vscode'
-        ingress:
-          enabled: true
-          ingressClassName: external
-          annotations:
-            external-dns.alpha.kubernetes.io/target: ingress.donoso.family
-            nginx.ingress.kubernetes.io/auth-url: https://auth.donoso.family/oauth2/auth
-            nginx.ingress.kubernetes.io/auth-signin: https://auth.donoso.family/oauth2/start
-            hajimari.io/appName: 'Hass Config'
-            hajimari.io/icon: cib:visual-studio-code
-          hosts:
-            - host: &hostvs 'hass-vscode.donoso.family'
-              paths:
-                - path: /
-                  pathType: Prefix
-          tls:
-            - hosts:
-                - *hostvs
-        volumeMounts:
-          - name: config
-            mountPath: /config
+        existingClaim: config-home-assistant-0
+      tmp:
+        type: emptyDir