feat: set metadata.namespace to release namespace on all charts

charts/ipsec-vpn-server/Chart.yaml

@@ -13,7 +13,7 @@ sources:
   - https://github.com/hwdsl2/docker-ipsec-vpn-server
   - https://github.com/taskmedia/helm
 type: application
-version: 2.2.1
+version: 2.2.2
 # hwdsl2/docker-ipsec-vpn-server does not provide versioning
 # see: https://github.com/hwdsl2/docker-ipsec-vpn-server/issues/98
 appVersion: "latest"
@@ -33,4 +33,4 @@ annotations:
       image: bash:alpine3.15
   artifacthub.io/changes: |
     - kind: changed
-      description: Add Artifact Hub metadata (category, links, images)
+      description: Set metadata.namespace to the release namespace on all resources

charts/ipsec-vpn-server/templates/configmap.yaml

@@ -2,6 +2,7 @@ apiVersion: v1
 kind: ConfigMap
 metadata:
   name: {{ include "ipsec-vpn-server.fullname" . }}-vpnscript
+  namespace: {{ .Release.Namespace }}
 data:
   create-env.sh: |-
     #!/usr/local/bin/bash

charts/ipsec-vpn-server/templates/deployment.yaml

@@ -3,6 +3,7 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: {{ template "ipsec-vpn-server.fullname" . }}-vpn-server
+  namespace: {{ .Release.Namespace }}
 spec:
   selector:
     matchLabels:

charts/ipsec-vpn-server/templates/ingress/traefik/ingressrouteudp.yaml

@@ -5,6 +5,7 @@ apiVersion: traefik.io/v1alpha1
 kind: IngressRouteUDP
 metadata:
   name: {{ $fullname_vpn_server }}-{{ .name }}
+  namespace: {{ .Release.Namespace }}
 spec:
   entryPoints:
     - {{ .name }}

charts/ipsec-vpn-server/templates/pvc.yaml

@@ -2,6 +2,7 @@ apiVersion: v1
 kind: PersistentVolumeClaim
 metadata:
   name: {{ include "ipsec-vpn-server.fullname" . }}-data
+  namespace: {{ .Release.Namespace }}
   labels:
       app.kubernetes.io/name: {{ template "ipsec-vpn-server.fullname" . }}-vpn-server
 spec:

charts/ipsec-vpn-server/templates/secret-sealed.yaml

@@ -3,6 +3,7 @@ apiVersion: bitnami.com/v1alpha1
 kind: SealedSecret
 metadata:
   name: {{ include "ipsec-vpn-server.fullname" . }}-vpnconfig
+  namespace: {{ .Release.Namespace }}
 spec:
   encryptedData:
     psk: {{ .Values.vpn.psk }}

charts/ipsec-vpn-server/templates/secret.yaml

@@ -3,6 +3,7 @@ apiVersion: v1
 kind: Secret
 metadata:
   name: {{ include "ipsec-vpn-server.fullname" . }}-vpnconfig
+  namespace: {{ .Release.Namespace }}
 data:
   psk: {{ .Values.vpn.psk | b64enc }}
 {{- range .Values.users }}

charts/ipsec-vpn-server/templates/service.yaml

@@ -3,6 +3,7 @@ apiVersion: v1
 kind: Service
 metadata:
   name: {{ template "ipsec-vpn-server.fullname" . }}-vpn-server
+  namespace: {{ .Release.Namespace }}
 spec:
   selector:
     app.kubernetes.io/name: {{ template "ipsec-vpn-server.fullname" . }}-vpn-server

charts/outprint/Chart.yaml

@@ -15,7 +15,7 @@ sources:
   - https://github.com/taskmedia/helm
 icon: https://media.task.media/images/logo.png
 type: application
-version: 1.3.3
+version: 1.3.4
 # outprint release tag without the leading v
 appVersion: "1.1.1"
 
@@ -33,4 +33,4 @@ annotations:
       image: ghcr.io/taskmedia/outprint-injector:1.1.1
   artifacthub.io/changes: |
     - kind: changed
-      description: Bump Outprint to 1.1.1
+      description: Set metadata.namespace to the release namespace on all resources

charts/outprint/templates/certificate.yaml

@@ -3,6 +3,7 @@ apiVersion: cert-manager.io/v1
 kind: Certificate
 metadata:
   name: "{{ include "outprint.fullname" . }}"
+  namespace: {{ .Release.Namespace }}
   labels:
     {{- include "outprint.labels" . | nindent 4 }}
 spec:

charts/outprint/templates/configmap.yaml

@@ -4,6 +4,7 @@ apiVersion: v1
 kind: ConfigMap
 metadata:
   name: {{ include "outprint.fullname" . }}-service
+  namespace: {{ .Release.Namespace }}
   labels:
     {{- include "outprint.labels" . | nindent 4 }}
 data:

charts/outprint/templates/gateway.yaml

@@ -4,6 +4,7 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: {{ $name }}
+  namespace: {{ .Release.Namespace }}
   labels:
     {{- include "outprint.labels" . | nindent 4 }}
     app.kubernetes.io/component: gateway
@@ -102,6 +103,7 @@ apiVersion: v1
 kind: Service
 metadata:
   name: {{ $name }}
+  namespace: {{ .Release.Namespace }}
   labels:
     {{- include "outprint.labels" . | nindent 4 }}
     app.kubernetes.io/component: gateway

charts/outprint/templates/ingressroute.yaml

@@ -7,6 +7,7 @@ apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
 metadata:
   name: "{{ include "outprint.fullname" . }}-injector"
+  namespace: {{ .Release.Namespace }}
   labels:
     {{- include "outprint.labels" . | nindent 4 }}
   {{- with .Values.ingressRoute.annotations }}

charts/outprint/templates/injector.yaml

@@ -5,6 +5,7 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: {{ $name }}
+  namespace: {{ .Release.Namespace }}
   labels:
     {{- include "outprint.labels" . | nindent 4 }}
     app.kubernetes.io/component: injector
@@ -82,6 +83,7 @@ apiVersion: v1
 kind: Service
 metadata:
   name: {{ $name }}
+  namespace: {{ .Release.Namespace }}
   labels:
     {{- include "outprint.labels" . | nindent 4 }}
     app.kubernetes.io/component: injector
@@ -99,6 +101,7 @@ apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   name: {{ $name }}
+  namespace: {{ .Release.Namespace }}
   labels:
     {{- include "outprint.labels" . | nindent 4 }}
     app.kubernetes.io/component: injector

charts/outprint/templates/packages-git.yaml

@@ -7,6 +7,7 @@ apiVersion: v1
 kind: PersistentVolumeClaim
 metadata:
   name: {{ $name }}
+  namespace: {{ .Release.Namespace }}
   labels:
     {{- include "outprint.labels" . | nindent 4 }}
     app.kubernetes.io/component: packages
@@ -25,6 +26,7 @@ apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: {{ $name }}
+  namespace: {{ .Release.Namespace }}
   labels:
     {{- include "outprint.labels" . | nindent 4 }}
     app.kubernetes.io/component: packages
@@ -34,6 +36,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:
   name: {{ $name }}
+  namespace: {{ .Release.Namespace }}
   labels:
     {{- include "outprint.labels" . | nindent 4 }}
     app.kubernetes.io/component: packages
@@ -49,6 +52,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
 metadata:
   name: {{ $name }}
+  namespace: {{ .Release.Namespace }}
   labels:
     {{- include "outprint.labels" . | nindent 4 }}
     app.kubernetes.io/component: packages
@@ -65,6 +69,7 @@ apiVersion: v1
 kind: ConfigMap
 metadata:
   name: {{ $name }}-sync
+  namespace: {{ .Release.Namespace }}
   labels:
     {{- include "outprint.labels" . | nindent 4 }}
     app.kubernetes.io/component: packages
@@ -82,6 +87,7 @@ apiVersion: batch/v1
 kind: CronJob
 metadata:
   name: {{ $name }}-sync
+  namespace: {{ .Release.Namespace }}
   labels:
     {{- include "outprint.labels" . | nindent 4 }}
     app.kubernetes.io/component: packages
@@ -109,6 +115,7 @@ apiVersion: batch/v1
 kind: Job
 metadata:
   name: {{ printf "%s-sync-%s" $name (include "outprint.packagesSources" . | sha256sum | trunc 8) }}
+  namespace: {{ .Release.Namespace }}
   labels:
     {{- include "outprint.labels" . | nindent 4 }}
     app.kubernetes.io/component: packages

charts/outprint/templates/secret.yaml

@@ -5,6 +5,7 @@ apiVersion: v1
 kind: Secret
 metadata:
   name: {{ $name }}
+  namespace: {{ .Release.Namespace }}
   labels:
     {{- include "outprint.labels" . | nindent 4 }}
 type: Opaque

charts/outprint/templates/worker.yaml

@@ -4,6 +4,7 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: {{ $name }}
+  namespace: {{ .Release.Namespace }}
   labels:
     {{- include "outprint.labels" . | nindent 4 }}
     app.kubernetes.io/component: worker
@@ -104,6 +105,7 @@ apiVersion: v1
 kind: Service
 metadata:
   name: {{ $name }}
+  namespace: {{ .Release.Namespace }}
   labels:
     {{- include "outprint.labels" . | nindent 4 }}
     app.kubernetes.io/component: worker
@@ -123,6 +125,7 @@ apiVersion: networking.k8s.io/v1
 kind: NetworkPolicy
 metadata:
   name: {{ $name }}
+  namespace: {{ .Release.Namespace }}
   labels:
     {{- include "outprint.labels" . | nindent 4 }}
     app.kubernetes.io/component: worker

charts/paperless-gpt/Chart.yaml

@@ -15,7 +15,7 @@ sources:
   - https://github.com/taskmedia/helm
 icon: https://media.task.media/images/logo.png
 type: application
-version: 0.3.0
+version: 0.3.1
 # upstream image tag without the leading v
 appVersion: "0.29.0"
 
@@ -30,5 +30,5 @@ annotations:
     - name: paperless-gpt
       image: icereed/paperless-gpt:v0.29.0
   artifacthub.io/changes: |
-    - kind: added
-      description: Optional Traefik IngressRoute (ingressRoute.*) with optional cert-manager Certificate
+    - kind: changed
+      description: Set metadata.namespace to the release namespace on all resources

charts/paperless-gpt/templates/certificate.yaml

@@ -3,6 +3,7 @@ apiVersion: cert-manager.io/v1
 kind: Certificate
 metadata:
   name: "{{ include "paperlessgpt.fullname" . }}"
+  namespace: {{ .Release.Namespace }}
   labels:
     {{- include "paperlessgpt.labels" . | nindent 4 }}
 spec:

charts/paperless-gpt/templates/deployment.yaml

@@ -7,6 +7,7 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: "{{ include "paperlessgpt.fullname" . }}"
+  namespace: {{ .Release.Namespace }}
   labels:
     {{- include "paperlessgpt.labels" . | nindent 4 }}
 spec:

charts/paperless-gpt/templates/ingress.yaml

@@ -3,6 +3,7 @@ apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   name: "{{ include "paperlessgpt.fullname" . }}"
+  namespace: {{ .Release.Namespace }}
   labels:
     {{- include "paperlessgpt.labels" . | nindent 4 }}
   {{- with .Values.ingress.annotations }}

charts/paperless-gpt/templates/ingressroute.yaml

@@ -4,6 +4,7 @@ apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
 metadata:
   name: "{{ include "paperlessgpt.fullname" . }}"
+  namespace: {{ .Release.Namespace }}
   labels:
     {{- include "paperlessgpt.labels" . | nindent 4 }}
   {{- with .Values.ingressRoute.annotations }}

charts/paperless-gpt/templates/pvc.yaml

@@ -3,6 +3,7 @@ apiVersion: v1
 kind: PersistentVolumeClaim
 metadata:
   name: "{{ include "paperlessgpt.fullname" . }}"
+  namespace: {{ .Release.Namespace }}
   labels:
     {{- include "paperlessgpt.labels" . | nindent 4 }}
   {{- with .Values.persistence.annotations }}

charts/paperless-gpt/templates/secret.yaml

@@ -3,6 +3,7 @@ apiVersion: v1
 kind: Secret
 metadata:
   name: "{{ include "paperlessgpt.fullname" . }}"
+  namespace: {{ .Release.Namespace }}
   labels:
     {{- include "paperlessgpt.labels" . | nindent 4 }}
 type: Opaque

charts/paperless-gpt/templates/service.yaml

@@ -2,6 +2,7 @@ apiVersion: v1
 kind: Service
 metadata:
   name: "{{ include "paperlessgpt.fullname" . }}"
+  namespace: {{ .Release.Namespace }}
   labels:
     {{- include "paperlessgpt.labels" . | nindent 4 }}
   {{- with .Values.service.annotations }}

charts/paperlessngx-backup/Chart.yaml

@@ -15,7 +15,7 @@ sources:
   - https://github.com/taskmedia/helm
 icon: https://media.task.media/images/logo.png
 type: application
-version: 1.1.2
+version: 1.1.3
 
 annotations:
   artifacthub.io/category: storage
@@ -29,4 +29,4 @@ annotations:
       image: ghcr.io/taskmedia/kubectl-gpg-ncftp:main
   artifacthub.io/changes: |
     - kind: changed
-      description: Add Artifact Hub metadata (category, links, images)
+      description: Set metadata.namespace to the release namespace on all resources

charts/paperlessngx-backup/templates/configmap.yaml

@@ -2,6 +2,7 @@ apiVersion: v1
 kind: ConfigMap
 metadata:
   name: "{{ include "plngxbackup.fullname" . }}"
+  namespace: {{ .Release.Namespace }}
 data:
   backup.sh: |
     #!/bin/sh

charts/paperlessngx-backup/templates/cronjob.yaml

@@ -2,6 +2,7 @@ apiVersion: batch/v1
 kind: CronJob
 metadata:
   name: "{{ include "plngxbackup.fullname" . }}"
+  namespace: {{ .Release.Namespace }}
 spec:
   schedule: "{{ .Values.cron }}"
   concurrencyPolicy: Forbid

charts/paperlessngx-backup/templates/rbac/role.yaml

@@ -2,6 +2,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:
   name: "{{ include "plngxbackup.fullname" . }}"
+  namespace: {{ .Release.Namespace }}
 rules:
   - apiGroups: [""]
     resources: ["pods"]

charts/paperlessngx-backup/templates/rbac/rolebinding.yaml

@@ -2,6 +2,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
 metadata:
   name: "{{ include "plngxbackup.fullname" . }}"
+  namespace: {{ .Release.Namespace }}
 subjects:
   - kind: ServiceAccount
     name: "{{ include "plngxbackup.fullname" . }}"

charts/paperlessngx-backup/templates/rbac/serviceaccount.yaml

@@ -2,3 +2,4 @@ apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: "{{ include "plngxbackup.fullname" . }}"
+  namespace: {{ .Release.Namespace }}

charts/paperlessngx-backup/templates/secret.yaml

@@ -3,6 +3,7 @@ apiVersion: v1
 kind: Secret
 metadata:
   name: "{{ include "plngxbackup.fullname" . }}"
+  namespace: {{ .Release.Namespace }}
 type: Opaque
 stringData:
   ftp-password: "{{ .Values.ftp.password }}"

charts/paperlessngx-ftp-bridge/Chart.yaml

@@ -15,7 +15,7 @@ sources:
   - https://github.com/taskmedia/helm
 icon: https://media.task.media/images/logo.png
 type: application
-version: 2.0.3
+version: 2.0.4
 # app image tag (v<appVersion>); bumped manually when the bridge repo releases
 appVersion: "2.1.1"
 
@@ -30,5 +30,5 @@ annotations:
     - name: paperlessngx-ftp-bridge
       image: ghcr.io/taskmedia/paperlessngx-ftp-bridge-image:v2.1.1
   artifacthub.io/changes: |
-    - kind: fixed
-      description: Only create the Secret when an inline password is configured
+    - kind: changed
+      description: Set metadata.namespace to the release namespace on all resources

charts/paperlessngx-ftp-bridge/templates/deployment.yaml

@@ -2,6 +2,7 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: "{{ include "plngxftpbridge.fullname" . }}"
+  namespace: {{ .Release.Namespace }}
   labels:
     {{- include "plngxftpbridge.labels" . | nindent 4 }}
 spec: