cert-manager: bump to v1.12.1, helm chart v1.12.1

metallb: bump to v0.13.10, helm chart v0.13.10

inventory/ghp/sample/group_vars/all/versions.yaml

@@ -1,12 +1,12 @@
 # MetalLB balancer
-metallb_version: 0.13.9
+metallb_version: 0.13.10
 
 # NFS provisioners
 nfs_client_provisioner_hdd_version: 4.0.14
 nfs_client_provisioner_ssd_version: 4.0.14
 
 # Cert-manager
-cert_manager_version: 1.11.1
+cert_manager_version: 1.12.1
 
 # External-DNS
 external_dns_version: 6.8.1
@@ -27,7 +27,7 @@ postgres_operator_ui_version: 1.9.0
 openldap_version: 1.2.7
 
 # Adguard Home
-adguard_version: 2.3.11
+adguard_version: 2.3.13
 
 # Bitwarden (aka Vaultwarden)
 bitwarden_version: 2.0.20
@@ -39,10 +39,10 @@ drone_runner_kube_version: 0.1.10
 # Gitea
 gitea_ingress_nginx_version: 4.2.0
 gitea_dns_version: 6.8.1
-gitea_version: 7.0.4
+gitea_version: 8.3.0
 
 # Docker and Helm chart registries
-harbor_version: 1.9.4
+harbor_version: 1.10.4
 
 # Mastodon
 mastodon_version: 4.0.0
@@ -54,7 +54,7 @@ nextcloud_version: 3.5.1
 dovecot_version: 0.1.4
 postfix_version: 0.1.3
 roundcube_version: 0.3.0
-rspamd_version: 0.4.2
+rspamd_version: 0.4.3
 
 # Pypi server
 pypiserver_version: 2.5.0

requirements.txt

@@ -1,29 +1,28 @@
-ansible==6.0.0
-ansible-core==2.13.1
-cachetools==5.2.0
-certifi==2022.6.15
+ansible==7.5.0
+ansible-core==2.14.5
+cachetools==5.3.0
+certifi==2023.5.7
 cffi==1.15.1
-charset-normalizer==2.1.0
-cryptography==37.0.4
-google-auth==2.9.0
-idna==3.3
+charset-normalizer==3.1.0
+cryptography==40.0.2
+google-auth==2.18.0
+idna==3.4
 Jinja2==3.1.2
-kubernetes==24.2.0
-MarkupSafe==2.1.1
-oauthlib==3.2.0
+kubernetes==26.1.0
+MarkupSafe==2.1.2
+oauthlib==3.2.2
 openshift==0.13.1
-packaging==21.3
-pyasn1==0.4.8
-pyasn1-modules==0.2.8
+packaging==23.1
+pyasn1==0.5.0
+pyasn1-modules==0.3.0
 pycparser==2.21
-pyparsing==3.0.9
 python-dateutil==2.8.2
 python-string-utils==1.0.0
 PyYAML==6.0
-requests==2.28.1
+requests==2.30.0
 requests-oauthlib==1.3.1
 resolvelib==0.8.1
-rsa==4.8
+rsa==4.9
 six==1.16.0
-urllib3==1.26.10
-websocket-client==1.3.3
+urllib3==1.26.15
+websocket-client==1.5.1

roles/harbor/defaults/main.yaml

@@ -55,11 +55,12 @@ harbor_default_values:
         accessMode: "{{ harbor_charts_storage_mode | default(harbor_storage_mode) | default('ReadWriteMany') }}"
         size: "{{ harbor_charts_size | default('50Gi') }}"
       jobservice:
-        existingClaim: ""
-        storageClass: "{{ harbor_jobservice_storage | default(harbor_storage) | default('nfs-ssd') }}"
-        subPath: ""
-        accessMode: "{{ harbor_jobservice_storage_mode | default(harbor_storage_mode) | default('ReadWriteMany') }}"
-        size: "{{ harbor_jobservice_size | default('5Gi') }}"
+        jobLog:
+          existingClaim: ""
+          storageClass: "{{ harbor_jobservice_storage | default(harbor_storage) | default('nfs-ssd') }}"
+          subPath: ""
+          accessMode: "{{ harbor_jobservice_storage_mode | default(harbor_storage_mode) | default('ReadWriteMany') }}"
+          size: "{{ harbor_jobservice_size | default('5Gi') }}"
       # If external database is used, the following settings for database will
       # be ignored
       database:

roles/postfix/defaults/main.yaml

@@ -78,6 +78,7 @@ postfix_default_values:
         smtpd_helo_required = yes
         #smtpd_recipient_restrictions = permit_sasl_authenticated, permit_mynetworks, reject_unauth_destination, reject_unknown_sender_domain, reject_invalid_helo_hostname, reject_unauth_destination
         smtpd_recipient_restrictions = permit_sasl_authenticated, permit_mynetworks, reject_unauth_destination, reject_non_fqdn_sender, reject_unknown_sender_domain, reject_invalid_helo_hostname, reject_non_fqdn_helo_hostname, reject_unauth_destination
+        smtpd_discard_ehlo_keywords = ''
         
         # SASL auth with dovecot options
         smtpd_sasl_auth_enable = yes