Update renovate/renovate Docker tag to v41.18.0

Makefile

@@ -3,7 +3,7 @@ install-router:
 
 gen-talos-config:
 	mkdir -p talos/generated
-	talosctl gen config --with-secrets secrets.yaml --config-patch @talos/patches/controlplane.patch --config-patch @talos/patches/openebs.patch --config-patch @talos/patches/openbao.patch --config-patch @talos/patches/anapistula-delrosalae.patch --output-types controlplane -o talos/generated/anapistula-delrosalae.yaml homelab https://kube-api.homelab.lumpiasty.xyz:6443
+	talosctl gen config --with-secrets secrets.yaml --config-patch @talos/patches/controlplane.patch --config-patch @talos/patches/openebs.patch --config-patch @talos/patches/openbao.patch --config-patch @talos/patches/ollama.patch --config-patch @talos/patches/frigate.patch --config-patch @talos/patches/anapistula-delrosalae.patch --output-types controlplane -o talos/generated/anapistula-delrosalae.yaml homelab https://kube-api.homelab.lumpiasty.xyz:6443
 	talosctl gen config --with-secrets secrets.yaml --config-patch @talos/patches/controlplane.patch --output-types worker -o talos/generated/worker.yaml homelab https://kube-api.homelab.lumpiasty.xyz:6443
 	talosctl gen config --with-secrets secrets.yaml --output-types talosconfig -o talos/generated/talosconfig homelab https://kube-api.homelab.lumpiasty.xyz:6443
 	talosctl config endpoint kube-api.homelab.lumpiasty.xyz

apps/frigate/release.yaml

@@ -51,6 +51,8 @@ spec:
                   - audio
                   - detect
                   - record
+            output_args:
+              record: preset-record-generic-audio-copy
         garaz:
           enabled: True
           ffmpeg:
@@ -60,6 +62,23 @@ spec:
                   - audio
                   - detect
                   - record
+            output_args:
+              record: preset-record-generic-audio-copy
+
+      ffmpeg:
+        hwaccel_args: preset-vaapi
+
+      detectors:
+        ov_0:
+          type: openvino
+          device: CPU
+      model:
+        width: 300
+        height: 300
+        input_tensor: nhwc
+        input_pixel_format: bgr
+        path: /openvino-model/ssdlite_mobilenet_v2.xml
+        labelmap_path: /openvino-model/coco_91cl_bkgr.txt
 
       go2rtc:
         streams:
@@ -73,12 +92,12 @@ spec:
     persistence:
       media:
         enabled: true
-        size: 100Gi
+        size: 500Gi
         storageClass: mayastor-single-hdd
         skipuninstall: true
       config:
         enabled: true
-        size: 100Mi
+        size: 1Gi
         storageClass: mayastor-single-hdd
         skipuninstall: true
     envFromSecrets:
@@ -98,3 +117,21 @@ spec:
         - hosts:
             - frigate.lumpiasty.xyz
           secretName: frigate-ingress
+
+    nodeSelector:
+      kubernetes.io/hostname: anapistula-delrosalae
+
+    # GPU access
+    extraVolumes:
+      - name: dri
+        hostPath:
+          path: /dev/dri/renderD128
+          type: CharDevice
+
+    extraVolumeMounts:
+      - name: dri
+        mountPath: /dev/dri/renderD128
+
+    securityContext:
+      # Not ideal
+      privileged: true

apps/renovate/cronjob.yaml

@@ -15,7 +15,7 @@ spec:
             - name: renovate
               # Update this to the latest available and then enable Renovate on
               # the manifest
-              image: renovate/renovate:41.15.0-full
+              image: renovate/renovate:41.18.0-full
               envFrom:
                 - secretRef:
                     name: renovate-gitea-token

infra/configs/single-hdd-sc.yaml

@@ -16,3 +16,5 @@ parameters:
   poolAffinityTopologyLabel: |
     type: hdd
 provisioner: io.openebs.csi-mayastor
+# Allow expansion of volumes
+allowVolumeExpansion: true

talos/patches/frigate.patch

@@ -0,0 +1,11 @@
+# CSI driver requirement
+cluster:
+  apiServer:
+    admissionControl:
+      - name: PodSecurity
+        configuration:
+          apiVersion: pod-security.admission.config.k8s.io/v1beta1
+          kind: PodSecurityConfiguration
+          exemptions:
+            namespaces:
+              - frigate