Conventions batch 1: icons, template file names, cosmetics

- Add icon: to all 17 Chart.yaml (official project icons); removes the
  last helm lint --strict INFO finding across the repo
- Rename template files to the <app>.<kind>.yaml scheme (apache-tika,
  gotenberg, teamspeak-server PVC, paperless-ngx configmap) - pure
  git mv, no content changes
- template-chart: fix missing space in {{ .Chart.Name}} and rename the
  ConfigMap resource -config-map -> -configmap (chart is never published)
- rallly: fix typos in required messages (rallySecret -> ralllySecret,
  databseSecret -> databaseSecret)
- README: document the deliberate PVC-name exception from the naming
  scheme (renames would provision new empty volumes)
- Patch-bump all 16 published charts

Rendered resources are byte-identical for all published charts (only
helm's '# Source:' comments change for the renamed files); the only
render change is the template-chart ConfigMap name.

Part of #32

README.md

@@ -72,6 +72,7 @@ For runtime verification (do the workloads actually start, do probes/security se
 ## Chart conventions
 
 - Resources are named `{{ .Release.Name }}-{{ .Chart.Name }}-<kind>`; template files are named `<app>.<kind>.yaml` (StatefulSets use `.sfs.yaml`).
+  - **Deliberate exception — existing PVC names**: PVCs of already-published charts keep their historical names even where they deviate from the scheme. Renaming a PVC makes Kubernetes provision a new, empty volume, so a rename would orphan the existing data. New charts name PVCs `{{ .Release.Name }}-{{ .Chart.Name }}-pvc` per the scheme. StatefulSet names *are* being aligned (data survives because the charts use standalone PVC templates, not `volumeClaimTemplates`); each rename ships in its own major-bump PR with a one-time migration note (`kubectl delete statefulset <old> --cascade=orphan` before upgrading).
 - Image tags come from `{{ .Chart.AppVersion }}`.
 - Auxiliary/sidecar images (images other than the app image, currently only the delegation nginx in matrix-synapse) are pinned via values (`<workload>.image.repository` / `<workload>.image.tag`) instead of being hardcoded in templates, and their pinned versions are reviewed alongside every app-version update round.
 - Secrets are **1Password `OnePasswordItem` CRs**: values expose `secrets.<name>SecretRef` holding an `op://` item path; the 1Password operator materializes the Kubernetes Secret in-cluster.

apache-tika/Chart.yaml

@@ -1,8 +1,9 @@
 apiVersion: v2
 name: apache-tika
 description: A Helm chart to deploy Apache Tika on Kubernetes
+icon: https://www.apache.org/logos/res/tika/default.png
 
 type: application
 
-version: 7.1.1+up3.3.1.0.full
+version: 7.1.2+up3.3.1.0.full
 appVersion: "3.3.1.0-full"

calibre-web-automated/Chart.yaml

@@ -3,8 +3,9 @@ type: application
 
 name: calibre-web-automated
 description: A Helm chart to deploy calibere-web-automated
+icon: https://raw.githubusercontent.com/crocodilestick/Calibre-Web-Automated/main/README_images/cwa-logo-round-dark.png
 
-version: 3.1.0+upv4.0.6
+version: 3.1.1+upv4.0.6
 appVersion: v4.0.6
 
 maintainers:

cyberchef/Chart.yaml

@@ -1,10 +1,11 @@
 apiVersion: v2
 name: cyberchef
 description: A Helm chart to deploy Cyberchef on Kubernetes
+icon: https://raw.githubusercontent.com/gchq/CyberChef/master/src/web/static/images/cyberchef-128x128.png
 
 type: application
 
-version: 5.0.0+up11.4.0
+version: 5.0.1+up11.4.0
 appVersion: "11.4.0"
 
 maintainers:

gotenberg/Chart.yaml

@@ -1,10 +1,11 @@
 apiVersion: v2
 name: gotenberg
 description: A Helm chart to deploy Gotenberg on Kubernetes
+icon: https://gotenberg.dev/img/logo.png
 
 type: application
 
-version: 4.1.1+up8.36.0
+version: 4.1.2+up8.36.0
 appVersion: "8.36.0"
 
 maintainers:

homeassistant/Chart.yaml

@@ -1,9 +1,10 @@
 apiVersion: v2
 name: homeassistant
 description: A Helm chart to deploy Home Assistant on Kubernetes
+icon: https://www.home-assistant.io/images/home-assistant-logo.svg
 type: application
 
-version: 4.1.1+up2026.8.3
+version: 4.1.2+up2026.8.3
 
 appVersion: "2026.8.3"
 

matrix-synapse/Chart.yaml

@@ -1,8 +1,9 @@
 apiVersion: v2
 name: matrix-synapse
 description: A Helm chart to deploy a Matrix Synapse server on Kubernetes
+icon: https://raw.githubusercontent.com/element-hq/synapse/develop/docs/favicon.png
 type: application
-version: 4.2.0+upv1.159.0
+version: 4.2.1+upv1.159.0
 appVersion: "v1.159.0"
 maintainers:
   - name: jklein

outline/Chart.yaml

@@ -1,10 +1,11 @@
 apiVersion: v2
 name: outline
 description: A Helm chart to deploy Outline on Kubernetes
+icon: https://raw.githubusercontent.com/outline/outline/main/public/images/icon-512.png
 
 type: application
 
-version: 3.1.0+up1.9.2
+version: 3.1.1+up1.9.2
 appVersion: 1.9.2
 
 maintainers:

paperless-ngx/Chart.yaml

@@ -1,10 +1,11 @@
 apiVersion: v2
 name: paperless-ngx
 description: A Helm chart to deploy Paperless-NGX on Kubernetes
+icon: https://raw.githubusercontent.com/paperless-ngx/paperless-ngx/dev/src-ui/src/apple-touch-icon.png
 
 type: application
 
-version: 8.0.0+up3.0.5
+version: 8.0.1+up3.0.5
 
 appVersion: 3.0.5
 

patchmon/Chart.yaml

@@ -1,10 +1,11 @@
 apiVersion: v2
 name: patchmon
 description: A Helm chart to deploy Patchmon on Kubernetes
+icon: https://raw.githubusercontent.com/PatchMon/PatchMon/main/frontend/public/assets/logo_square_default.svg
 
 type: application
 
-version: 5.0.0+up2.1.3
+version: 5.0.1+up2.1.3
 appVersion: "2.1.3"
 
 maintainers:

rallly/Chart.yaml

@@ -1,10 +1,11 @@
 apiVersion: v2
 name: rallly
 description: A Helm chart to deploy Rallly on Kubernetes
+icon: https://raw.githubusercontent.com/lukevella/rallly/main/apps/landing/public/apple-touch-icon.png
 
 type: application
 
-version: 3.1.1+up4.12.3
+version: 3.1.2+up4.12.3
 appVersion: "4.12.3"
 
 maintainers:

rallly/templates/database.secret.yaml

@@ -3,4 +3,4 @@ kind: OnePasswordItem
 metadata:
   name: {{ .Release.Name }}-{{ .Chart.Name }}-database-secret
 spec:
-  itemPath: {{ required "You must provide a databseSecret Reference" .Values.secrets.databaseSecretRef }}
+  itemPath: {{ required "You must provide a databaseSecret Reference" .Values.secrets.databaseSecretRef }}

rallly/templates/rallly.secret.yaml

@@ -3,4 +3,4 @@ kind: OnePasswordItem
 metadata:
   name: {{ .Release.Name }}-{{ .Chart.Name }}-secret
 spec:
-  itemPath: {{ required "You must provide a rallySecret Reference" .Values.secrets.ralllySecretRef }}
+  itemPath: {{ required "You must provide a ralllySecret Reference" .Values.secrets.ralllySecretRef }}

samba/Chart.yaml

@@ -1,9 +1,10 @@
 apiVersion: v2
 name: samba
 description: A Helm chart for Samba
+icon: https://avatars.githubusercontent.com/u/13281359
 
 type: application
 
-version: 3.1.1+up4.23.10
+version: 3.1.2+up4.23.10
 
 appVersion: 4.23.10

satisfactory/Chart.yaml

@@ -1,8 +1,9 @@
 apiVersion: v2
 name: satisfactory
 description: A Helm chart to deploy a Satisfactory Gameserver on Kubernetes
+icon: https://raw.githubusercontent.com/wolveix/satisfactory-server/main/.github/logo.png
 type: application
-version: 3.1.0+upv1.9.10
+version: 3.1.1+upv1.9.10
 appVersion: "v1.9.10"
 maintainers:
   - name: jklein

teamspeak-server/Chart.yaml

@@ -1,8 +1,9 @@
 apiVersion: v2
 name: teamspeak-server
 description: A Helm chart for deploying a teamspeak-server on Kubernetes
+icon: https://avatars.githubusercontent.com/u/136759148
 
 type: application
 
-version: 3.1.1+up6.0.0.beta12.1
+version: 3.1.2+up6.0.0.beta12.1
 appVersion: "6.0.0-beta12.1"

template-chart/Chart.yaml

@@ -1,6 +1,7 @@
 apiVersion: v2
 name: xxx
 description: A Helm chart to deploy xxx on Kubernetes
+icon: https://helm.sh/img/helm.svg
 
 type: application
 

template-chart/templates/xxx.configmap.yaml

@@ -1,6 +1,6 @@
 apiVersion: v1
 kind: ConfigMap
 metadata:
-  name: "{{ .Release.Name }}-{{ .Chart.Name}}-config-map"
+  name: "{{ .Release.Name }}-{{ .Chart.Name }}-configmap"
 data:
   key: "value"

urlaubsverwaltung/Chart.yaml

@@ -1,7 +1,8 @@
 apiVersion: v2
 name: urlaubsverwaltung
 description: A Helm chart to deploy urlaubsverwaltung on Kubernetes
+icon: https://raw.githubusercontent.com/urlaubsverwaltung/urlaubsverwaltung/main/src/main/resources/static/favicons/apple-touch-icon.png
 type: application
 
-version: 4.1.1+up6.7.0
+version: 4.1.2+up6.7.0
 appVersion: 6.7.0

voucher-vault/Chart.yaml

@@ -1,10 +1,11 @@
 apiVersion: v2
 name: voucher-vault
 description: A Helm chart to deploy VoucherVault on Kubernetes
+icon: https://raw.githubusercontent.com/l4rm4nd/VoucherVault/main/myapp/static/assets/img/logo.png
 
 type: application
 
-version: 3.1.1+up1.30.1
+version: 3.1.2+up1.30.1
 appVersion: "1.30.1"
 
 maintainers:

zipline/Chart.yaml

@@ -1,6 +1,7 @@
 apiVersion: v2
 name: zipline
 description: A Helm chart for deploying Zipline on Kubernetes
+icon: https://raw.githubusercontent.com/diced/zipline/trunk/public/favicon-128x128.png
 
 # A chart can be either an 'application' or a 'library' chart.
 #
@@ -15,7 +16,7 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 4.1.1+up4.7.0
+version: 4.1.2+up4.7.0
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to