From 9cdbe097f6c4090eb86f2f1dd2e605ad94cdfb52 Mon Sep 17 00:00:00 2001 From: jklein Date: Mon, 24 Aug 2026 15:23:35 +0200 Subject: [PATCH] Qualify the Docker Hub image names, drop the gluetun branding main qualified five charts' image references in 6c73ef8 on the same day this chart would otherwise arrive carrying the pattern that was just cleared out. The seven Docker Hub names now say where they come from: qmcgaw/gluetun, the five linuxserver.io images and the busybox init image, the last as docker.io/library/busybox since it is an official image. The three ghcr.io names were already qualified - checked rather than assumed. Verified with Renovate 44.41.0 in the official container (RENOVATE_PLATFORM= local, RENOVATE_DRY_RUN=lookup) that the prefixed form still resolves under the built-in helm-values manager, since that manager is the only thing keeping these images updated: it extracts all ten, datasource docker, no skipReason and no warnings, and returns concrete candidates for eight of them. A control run against the unqualified form produced byte-identical results, so the prefix changes nothing about what Renovate offers. Trivy's trusted-registry check (KSV-0125) drops from ten findings to none, which is what the registry list in ci/trivy/data/ksv0125.yaml documents as the point of writing images this way. Chart metadata: the icon was gluetun's logo and the description opened with a list of four of the nine projects, both suggesting a "main app" the stack does not have. The description now names none of them, and the icon field is omitted rather than filled with another project's logo - every other chart's icon is its one upstream's, and this chart has no such upstream. helm lint --strict notes "icon is recommended" as INFO and still exits 0. Rendered output differs in exactly the seven image prefixes and nothing else. --- freesailarr/Chart.yaml | 7 +++++-- freesailarr/values.yaml | 14 +++++++------- 2 files changed, 12 insertions(+), 9 deletions(-) diff --git a/freesailarr/Chart.yaml b/freesailarr/Chart.yaml index 95c686a..814a1cf 100644 --- a/freesailarr/Chart.yaml +++ b/freesailarr/Chart.yaml @@ -1,7 +1,10 @@ apiVersion: v2 name: freesailarr -description: A Helm chart to deploy a Wireguard-tunneled media automation stack (gluetun, qbittorrent, the *arrs, seerr) on Kubernetes -icon: https://raw.githubusercontent.com/qdm12/gluetun/master/doc/logo_256.png +description: A Helm chart to deploy a Wireguard-tunneled media automation stack on Kubernetes - a VPN gateway with indexer, downloader, library managers, subtitle fetcher and request front end in one pod, all reaching the internet only through the tunnel +# No icon on purpose: the stack has no single upstream, and every other chart's +# icon is its one project's logo. Picking any of the nine here would suggest +# the same false "main app" the versioning deliberately avoids. The field is +# optional, so it is omitted rather than filled with an arbitrary choice. type: application diff --git a/freesailarr/values.yaml b/freesailarr/values.yaml index 4f086db..45b9b50 100644 --- a/freesailarr/values.yaml +++ b/freesailarr/values.yaml @@ -127,7 +127,7 @@ gluetun: # Pinned here like every other image in this chart, so Renovate's helm-values # manager proposes gluetun updates too. Docker Hub tags carry a v prefix. image: - repository: qmcgaw/gluetun + repository: docker.io/qmcgaw/gluetun tag: v3.41.1 vpn: serviceProvider: mullvad @@ -208,7 +208,7 @@ gluetun: qbittorrent: enabled: true image: - repository: linuxserver/qbittorrent + repository: docker.io/linuxserver/qbittorrent tag: 5.2.1 # Every app gets its own Ingress object (named ---ingress) # with its own TLS secret tls----ingress, so the apps can @@ -245,7 +245,7 @@ qbittorrent: # Auxiliary busybox image for the init container, pinned here like every # other image in this chart and proposed by Renovate the same way. image: - repository: busybox + repository: docker.io/library/busybox tag: "1.38.0" resources: limitFactor: 3 @@ -320,7 +320,7 @@ qbittorrent: prowlarr: enabled: true image: - repository: linuxserver/prowlarr + repository: docker.io/linuxserver/prowlarr tag: 2.3.5 # See the qbittorrent ingress comment. ingress: @@ -433,7 +433,7 @@ flaresolverr: radarr: enabled: true image: - repository: linuxserver/radarr + repository: docker.io/linuxserver/radarr tag: 6.1.1 # See the qbittorrent ingress comment. ingress: @@ -543,7 +543,7 @@ recyclarr: sonarr: enabled: true image: - repository: linuxserver/sonarr + repository: docker.io/linuxserver/sonarr tag: 4.0.17 # See the qbittorrent ingress comment. ingress: @@ -656,7 +656,7 @@ seerr: bazarr: enabled: true image: - repository: linuxserver/bazarr + repository: docker.io/linuxserver/bazarr tag: 1.5.6 # See the qbittorrent ingress comment. ingress: