From 53e682fbdd48fa6ac0d5d7d5f3f760e6dc491bc8 Mon Sep 17 00:00:00 2001
From: Konstantin Renner <konstantin@renner.uno>
Date: Tue, 7 Jul 2026 12:32:54 +0200
Subject: [PATCH] immich: Update auf v3.0.1 (Image-Policy 2.x -> 3.x)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Immich hat am 2026-07-02 v3.0.0/v3.0.1 released; die ImagePolicy war
bewusst auf semver 2.x gegated, daher blieb v2.7.5 stehen.

Preflight fuer den Major-Bump:
- pgvecto.rs-Removal betrifft uns nicht: DB_VECTOR_EXTENSION unset,
  v2.7.5 laeuft bereits auf VectorChord (dual-extension CNPG-Image)
- keine der entfernten ML-Env-Vars (MACHINE_LEARNING_PRELOAD__*,
  IMMICH_MACHINE_LEARNING_PING_TIMEOUT) in den Manifests
- oauth.issuerUrl ist valide HTTPS-URL (strengere v3-Validierung ok)
- Gatus probt /api/server/ping — nicht auf der Removed-Endpoints-Liste

Policy-Gate wandert auf 3.x; 4.x-Cutover braucht wieder manuellen Review.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
---
 kubernetes/apps/immich/machine-learning.yaml           | 2 +-
 kubernetes/apps/immich/server.yaml                     | 2 +-
 kubernetes/infrastructure/image-automation/immich.yaml | 6 +++---
 3 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/kubernetes/apps/immich/machine-learning.yaml b/kubernetes/apps/immich/machine-learning.yaml
index a96cc767..81bb75a6 100644
--- a/kubernetes/apps/immich/machine-learning.yaml
+++ b/kubernetes/apps/immich/machine-learning.yaml
@@ -25,7 +25,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: immich-machine-learning
-          image: ghcr.io/immich-app/immich-machine-learning:v2.7.5 # {"$imagepolicy": "flux-system:immich-machine-learning"}
+          image: ghcr.io/immich-app/immich-machine-learning:v3.0.1 # {"$imagepolicy": "flux-system:immich-machine-learning"}
           ports:
             - name: http
               containerPort: 3003
diff --git a/kubernetes/apps/immich/server.yaml b/kubernetes/apps/immich/server.yaml
index 4de58327..4e97ebce 100644
--- a/kubernetes/apps/immich/server.yaml
+++ b/kubernetes/apps/immich/server.yaml
@@ -81,7 +81,7 @@ spec:
               mountPath: /ca
       containers:
         - name: immich-server
-          image: ghcr.io/immich-app/immich-server:v2.7.5 # {"$imagepolicy": "flux-system:immich-server"}
+          image: ghcr.io/immich-app/immich-server:v3.0.1 # {"$imagepolicy": "flux-system:immich-server"}
           ports:
             - name: http
               containerPort: 3001
diff --git a/kubernetes/infrastructure/image-automation/immich.yaml b/kubernetes/infrastructure/image-automation/immich.yaml
index 17d73220..901824be 100644
--- a/kubernetes/infrastructure/image-automation/immich.yaml
+++ b/kubernetes/infrastructure/image-automation/immich.yaml
@@ -7,7 +7,7 @@ spec:
   image: ghcr.io/immich-app/immich-server
   interval: 1h
 ---
-# v-prefix tags only, semver 2.x. The 3.x cutover would need manual
+# v-prefix tags only, semver 3.x. The 4.x cutover would need manual
 # review — Immich major bumps historically require migration.
 apiVersion: image.toolkit.fluxcd.io/v1
 kind: ImagePolicy
@@ -22,7 +22,7 @@ spec:
     extract: '$ver'
   policy:
     semver:
-      range: "2.x"
+      range: "3.x"
 ---
 apiVersion: image.toolkit.fluxcd.io/v1
 kind: ImageRepository
@@ -48,4 +48,4 @@ spec:
     extract: '$ver'
   policy:
     semver:
-      range: "2.x"
+      range: "3.x"
-- 
2.54.0