unkin/argocd-apps
3
0
Fork 0
Code Issues 7 Pull Requests 2 Actions Packages Projects Releases Wiki Activity

Deploy arrstack S3 TLS-trust fix (arrstack images -unkin4 -> -unkin5) #392

Merged
benvin merged 1 commits from benvin/arrstack-unkin5 into main 2026-08-22 23:15:12 +10:00
Conversation 0 Commits 1 Files Changed 3
+3 -3
unkin-agent commented 2026-08-22 23:08:44 +10:00
Member
Copy Link
Copy Source

Why

Ben merged the S3 TLS-trust fix into each Servarr fork's main (sonarr#10, radarr#11, prowlarr#10, branch benvin/s3-tls-trust-fix). The fix corrects TLS trust for the leaf-only certificate presentation of the Ceph RGW endpoint, so backups and MediaCover uploads to S3 succeed across all replicas instead of failing the TLS handshake.

The -unkin5 images carrying the fix are built and pushed to artifactapi.k8s.syd1.au.unkin.net/docker-internal/<app>. This PR rolls them out.

Changes

  • Bump apps/base/arrstack/sonarr/deployment.yaml app image v5.0.0-unkin4 -> v5.0.0-unkin5
  • Bump apps/base/arrstack/radarr/deployment.yaml app image v6.4.2-unkin4 -> v6.4.2-unkin5
  • Bump apps/base/arrstack/prowlarr/deployment.yaml app image v2.6.2-unkin4 -> v2.6.2-unkin5

Only the application container image: line changes in each file; the waitfordb initContainer and bucket YAML are untouched.

## Why Ben merged the S3 TLS-trust fix into each Servarr fork's `main` (sonarr#10, radarr#11, prowlarr#10, branch `benvin/s3-tls-trust-fix`). The fix corrects TLS trust for the leaf-only certificate presentation of the Ceph RGW endpoint, so backups and MediaCover uploads to S3 succeed across all replicas instead of failing the TLS handshake. The `-unkin5` images carrying the fix are built and pushed to `artifactapi.k8s.syd1.au.unkin.net/docker-internal/<app>`. This PR rolls them out. ## Changes - Bump `apps/base/arrstack/sonarr/deployment.yaml` app image `v5.0.0-unkin4` -> `v5.0.0-unkin5` - Bump `apps/base/arrstack/radarr/deployment.yaml` app image `v6.4.2-unkin4` -> `v6.4.2-unkin5` - Bump `apps/base/arrstack/prowlarr/deployment.yaml` app image `v2.6.2-unkin4` -> `v2.6.2-unkin5` Only the application container `image:` line changes in each file; the `waitfordb` initContainer and bucket YAML are untouched.
unkin-agent added 1 commit 2026-08-22 23:08:45 +10:00
Bump arrstack Sonarr/Radarr/Prowlarr images to -unkin5
ci/woodpecker/pr/vector-test Pipeline was successful
Details
ci/woodpecker/pr/pre-commit Pipeline was successful
Details
ci/woodpecker/pr/kubeconform Pipeline was successful
Details
4859d6d4fd 
Deploys the S3 TLS-trust fix (leaf-only Ceph RGW certificate presentation)
so backups and MediaCover uploads to S3 succeed on all replicas.

- sonarr: v5.0.0-unkin4 -> v5.0.0-unkin5
- radarr: v6.4.2-unkin4 -> v6.4.2-unkin5
- prowlarr: v2.6.2-unkin4 -> v2.6.2-unkin5
benvin merged commit 7c49a9f3ad into main 2026-08-22 23:15:12 +10:00
benvin deleted branch benvin/arrstack-unkin5 2026-08-22 23:15:12 +10:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
benvin (BenVincent) unkin-agent (Unkin Agent) unkinben (Ben Vincent)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: unkin/argocd-apps#392
Delete Branch "benvin/arrstack-unkin5"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?