feat(container)!: Update image ghcr.io/bjw-s-labs/helm/app-template to v5.0.1

[parsec-renovate]

This PR contains the following updates:

Package	Update	Change
ghcr.io/bjw-s-labs/helm/app-template	major	4.5.0 → 5.0.1
ghcr.io/bjw-s-labs/helm/app-template	patch	5.0.0 → 5.0.1

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Configuration

📅 Schedule: (in timezone America/New_York)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[github-actions]

--- kubernetes/flux/meta Kustomization: flux-system/cluster-meta OCIRepository: flux-system/app-template

+++ kubernetes/flux/meta Kustomization: flux-system/cluster-meta OCIRepository: flux-system/app-template

@@ -10,9 +10,9 @@

 spec:
   interval: 15m
   layerSelector:
     mediaType: application/vnd.cncf.helm.chart.content.v1.tar+gzip
     operation: copy
   ref:
-    tag: 4.5.0
+    tag: 5.0.1
   url: oci://ghcr.io/bjw-s-labs/helm/app-template
 
--- kubernetes/apps/media/maintainerr/app Kustomization: flux-system/maintainerr OCIRepository: media/maintainerr

+++ kubernetes/apps/media/maintainerr/app Kustomization: flux-system/maintainerr OCIRepository: media/maintainerr

@@ -11,9 +11,9 @@

 spec:
   interval: 15m
   layerSelector:
     mediaType: application/vnd.cncf.helm.chart.content.v1.tar+gzip
     operation: copy
   ref:
-    tag: 5.0.0
+    tag: 5.0.1
   url: oci://ghcr.io/bjw-s-labs/helm/app-template
 
--- kubernetes/apps/media/bazarr/app Kustomization: flux-system/bazarr OCIRepository: media/bazarr

+++ kubernetes/apps/media/bazarr/app Kustomization: flux-system/bazarr OCIRepository: media/bazarr

@@ -11,9 +11,9 @@

 spec:
   interval: 15m
   layerSelector:
     mediaType: application/vnd.cncf.helm.chart.content.v1.tar+gzip
     operation: copy
   ref:
-    tag: 4.5.0
+    tag: 5.0.1
   url: oci://ghcr.io/bjw-s-labs/helm/app-template
 

[github-actions]

--- HelmRelease: selfhosted/actual Deployment: selfhosted/actual

+++ HelmRelease: selfhosted/actual Deployment: selfhosted/actual

@@ -26,14 +26,14 @@

       labels:
         app.kubernetes.io/controller: actual
         app.kubernetes.io/instance: actual
         app.kubernetes.io/name: actual
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: actual
+      automountServiceAccountToken: false
       securityContext:
         fsGroup: 2000
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 2000
         runAsUser: 2000
       hostIPC: false
--- HelmRelease: selfhosted/actual ServiceAccount: selfhosted/actual

+++ HelmRelease: selfhosted/actual ServiceAccount: selfhosted/actual

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: actual
+  labels:
+    app.kubernetes.io/instance: actual
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: actual
+  namespace: selfhosted
+
--- HelmRelease: media/bazarr Deployment: media/bazarr

+++ HelmRelease: media/bazarr Deployment: media/bazarr

@@ -26,14 +26,14 @@

       labels:
         app.kubernetes.io/controller: bazarr
         app.kubernetes.io/instance: bazarr
         app.kubernetes.io/name: bazarr
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: bazarr
+      automountServiceAccountToken: false
       securityContext:
         fsGroup: 1000
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 1000
         runAsNonRoot: true
         runAsUser: 1000
--- HelmRelease: media/bazarr ServiceAccount: media/bazarr

+++ HelmRelease: media/bazarr ServiceAccount: media/bazarr

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: bazarr
+  labels:
+    app.kubernetes.io/instance: bazarr
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: bazarr
+  namespace: media
+
--- HelmRelease: network/cloudflared Deployment: network/cloudflared

+++ HelmRelease: network/cloudflared Deployment: network/cloudflared

@@ -26,14 +26,14 @@

       labels:
         app.kubernetes.io/controller: cloudflared
         app.kubernetes.io/instance: cloudflared
         app.kubernetes.io/name: cloudflared
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: cloudflared
+      automountServiceAccountToken: false
       securityContext:
         runAsGroup: 65534
         runAsNonRoot: true
         runAsUser: 65534
         seccompProfile:
           type: RuntimeDefault
--- HelmRelease: network/cloudflared ServiceMonitor: network/cloudflared

+++ HelmRelease: network/cloudflared ServiceMonitor: network/cloudflared

@@ -6,13 +6,13 @@

   labels:
     app.kubernetes.io/instance: cloudflared
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cloudflared
   namespace: network
 spec:
-  jobLabel: cloudflared
+  jobLabel: app.kubernetes.io/name
   namespaceSelector:
     matchNames:
     - network
   selector:
     matchLabels:
       app.kubernetes.io/service: cloudflared
--- HelmRelease: network/cloudflared ServiceAccount: network/cloudflared

+++ HelmRelease: network/cloudflared ServiceAccount: network/cloudflared

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: cloudflared
+  labels:
+    app.kubernetes.io/instance: cloudflared
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: cloudflared
+  namespace: network
+
--- HelmRelease: selfhosted/n8n Deployment: selfhosted/n8n

+++ HelmRelease: selfhosted/n8n Deployment: selfhosted/n8n

@@ -26,14 +26,14 @@

       labels:
         app.kubernetes.io/controller: n8n
         app.kubernetes.io/instance: n8n
         app.kubernetes.io/name: n8n
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: n8n
+      automountServiceAccountToken: false
       securityContext:
         fsGroup: 1000
         fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 1000
         runAsUser: 1000
       hostIPC: false
--- HelmRelease: selfhosted/n8n ServiceAccount: selfhosted/n8n

+++ HelmRelease: selfhosted/n8n ServiceAccount: selfhosted/n8n

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: n8n
+  labels:
+    app.kubernetes.io/instance: n8n
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: n8n
+  namespace: selfhosted
+
--- HelmRelease: default/echo-server Deployment: default/echo-server

+++ HelmRelease: default/echo-server Deployment: default/echo-server

@@ -24,14 +24,14 @@

       labels:
         app.kubernetes.io/controller: echo-server
         app.kubernetes.io/instance: echo-server
         app.kubernetes.io/name: echo-server
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: echo-server
+      automountServiceAccountToken: false
       securityContext:
         runAsGroup: 65534
         runAsNonRoot: true
         runAsUser: 65534
         seccompProfile:
           type: RuntimeDefault
--- HelmRelease: default/echo-server ServiceMonitor: default/echo-server

+++ HelmRelease: default/echo-server ServiceMonitor: default/echo-server

@@ -6,13 +6,13 @@

   labels:
     app.kubernetes.io/instance: echo-server
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: echo-server
   namespace: default
 spec:
-  jobLabel: echo-server
+  jobLabel: app.kubernetes.io/name
   namespaceSelector:
     matchNames:
     - default
   selector:
     matchLabels:
       app.kubernetes.io/service: echo-server
--- HelmRelease: default/echo-server ServiceAccount: default/echo-server

+++ HelmRelease: default/echo-server ServiceAccount: default/echo-server

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: echo-server
+  labels:
+    app.kubernetes.io/instance: echo-server
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: echo-server
+  namespace: default
+
--- HelmRelease: selfhosted/paperless Deployment: selfhosted/paperless-redis

+++ HelmRelease: selfhosted/paperless Deployment: selfhosted/paperless-redis

@@ -24,14 +24,14 @@

       labels:
         app.kubernetes.io/controller: redis
         app.kubernetes.io/instance: paperless
         app.kubernetes.io/name: paperless
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: paperless
+      automountServiceAccountToken: false
       hostIPC: false
       hostNetwork: false
       hostPID: false
       dnsPolicy: ClusterFirst
       containers:
       - image: docker.io/valkey/valkey:9.0.1
--- HelmRelease: selfhosted/paperless Deployment: selfhosted/paperless

+++ HelmRelease: selfhosted/paperless Deployment: selfhosted/paperless

@@ -26,14 +26,14 @@

       labels:
         app.kubernetes.io/controller: paperless
         app.kubernetes.io/instance: paperless
         app.kubernetes.io/name: paperless
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: paperless
+      automountServiceAccountToken: false
       hostIPC: false
       hostNetwork: false
       hostPID: false
       dnsPolicy: ClusterFirst
       containers:
       - env:
--- HelmRelease: selfhosted/paperless ServiceAccount: selfhosted/paperless

+++ HelmRelease: selfhosted/paperless ServiceAccount: selfhosted/paperless

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: paperless
+  labels:
+    app.kubernetes.io/instance: paperless
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: paperless
+  namespace: selfhosted
+