fix: [alert] KubeDeploymentRolloutStuck (paperless) (#452 )

chore(image-automation): bump ghcr.io/music-assistant/server:2.9.10
Updates managed by image-automation-controller.
2026-07-30 14:46:09 +00:00 · 2026-07-30 13:32:16 +00:00 · 2026-07-30 12:52:47 +00:00
2 changed files with 11 additions and 2 deletions
@@ -52,7 +52,7 @@ spec:
        # stdlib only; Flux keeps the tag in lockstep via the shared image
        # policy) — no extra dependency.
        - name: reconcile-publish-ip
-          image: ghcr.io/music-assistant/server:2.9.9 # {"$imagepolicy": "flux-system:music-assistant"}
+          image: ghcr.io/music-assistant/server:2.9.10 # {"$imagepolicy": "flux-system:music-assistant"}
          command: ["/app/venv/bin/python", "/scripts/reconcile.py"]
          volumeMounts:
            - name: data
@@ -62,7 +62,7 @@ spec:
              readOnly: true
      containers:
        - name: music-assistant
-          image: ghcr.io/music-assistant/server:2.9.9 # {"$imagepolicy": "flux-system:music-assistant"}
+          image: ghcr.io/music-assistant/server:2.9.10 # {"$imagepolicy": "flux-system:music-assistant"}
          env:
            - name: LOG_LEVEL
              value: info
@@ -36,6 +36,15 @@ spec:
    kubeProxyReplacement: true
    socketLB:
      enabled: true
+    prometheus:
+      # The agent exported no metrics at all, so BPF map utilisation was
+      # invisible: when per-endpoint policy maps (cilium_policy_v3_*) run out
+      # of space the agent only says "no space left on device" in its log and
+      # pod sandbox creation fails (issue #452). cilium_bpf_map_pressure makes
+      # that observable — and alertable — before it stalls a rollout.
+      enabled: true
+      serviceMonitor:
+        enabled: true
    bpf:
      # Let pods reach the cluster's own LoadBalancer external IPs; Cilium
      # redirects the socket directly to the backend pod instead of sending
Author	SHA1	Message	Date
issue-fix-bot	a3dcdacd30	fix: [alert] KubeDeploymentRolloutStuck (paperless) (#452 ) ci/woodpecker/pr/ci-scripts-test Pipeline is pending Details ci/woodpecker/pr/pr-review Pipeline is pending Details	2026-07-30 14:46:09 +00:00
security-bot	37de60ccff	chore(image-automation): bump ghcr.io/music-assistant/server:2.9.10 ci/woodpecker/cron/issue-fix Pipeline was successful Details ci/woodpecker/cron/alert-monitor Pipeline was successful Details Updates managed by image-automation-controller.	2026-07-30 13:32:16 +00:00
k.renner	57d333a2f1	Merge pull request 'fix(paperless): drop runtime apk add from fetch-bridge-cert' (#448 ) from paperless-drop-apk into master ci/woodpecker/push/build-ci-images Pipeline was successful Details ci/woodpecker/cron/alert-monitor Pipeline was successful Details Reviewed-on: k.renner/homelab#448	2026-07-30 12:52:47 +00:00