Escape sed metacharacters in secret substitution (fixes #343) (#475)

* Escape sed metacharacters in secret substitution (fixes #343)

The prepare-config init container inlined each secret value into a sed
s/// command's replacement side. When the value contained /, &, or \
(the reporter's case: WireGuard's 10.0.0.2/16), sed choked with
"unknown option to 's'" and the init container crash-looped.

Pre-escape the value in a shell variable using the standard
sed 's|[&/\]|\\&|g' trick before it reaches the substitution. No new
dependencies; only the range block inside the prepare-config script
changes.

The bug is invisible to helm lint, check-jsonschema, and kubeconform
because it fails at runtime inside the container.

* Bump media-servarr-base to 0.15.2 across all charts

Patch bump of the base and every consumer chart, plus the
media-servarr-base dependency pin in each. The base template changed
in the previous commit, so consumers ship with fresh releases carrying
the fix. Generated with ./scripts/update_base.sh patch.

Author: drinkataco

Chart.yaml

@@ -2,5 +2,5 @@ apiVersion: 'v2'
 name: 'media-servarr-base'
 description: 'Base chart for media-servarr charts'
 type: 'application'
-version: 0.15.1
+version: 0.15.2
 icon: 'https://github.com/drinkataco/media-servarr/blob/main/icon.png?raw=true'

charts/bazarr/Chart.yaml

@@ -13,12 +13,12 @@ keywords:
   - 'bazarr'
 kubeVersion: ">=1.24.0-0"
 type: 'application'
-version: 0.16.0
+version: 0.16.1
 appVersion: 1.6.0
 icon: 'https://github.com/drinkataco/media-servarr/blob/main/charts/bazarr/icon.png?raw=true'
 dependencies:
   - name: 'media-servarr-base'
-    version: 0.15.1
+    version: 0.15.2
     repository: "file://../.."
 maintainers:
   - name: 'media-servarr'

charts/cleanuparr/Chart.yaml

@@ -12,12 +12,12 @@ keywords:
   - 'whisparr'
 kubeVersion: ">=1.24.0-0"
 type: 'application'
-version: 0.17.0
+version: 0.17.1
 appVersion: 2.10.5
 icon: 'https://github.com/drinkataco/media-servarr/blob/main/charts/cleanuparr/icon.png?raw=true'
 dependencies:
   - name: 'media-servarr-base'
-    version: 0.15.1
+    version: 0.15.2
     repository: "file://../.."
 maintainers:
   - name: 'media-servarr'

charts/flaresolverr/Chart.yaml

@@ -9,12 +9,12 @@ keywords:
   - 'bypass'
 kubeVersion: ">=1.24.0-0"
 type: 'application'
-version: 0.16.0
+version: 0.16.1
 appVersion: v3.5.0
 icon: 'https://github.com/drinkataco/media-servarr/blob/main/charts/flaresolverr/icon.png?raw=true'
 dependencies:
   - name: 'media-servarr-base'
-    version: 0.15.1
+    version: 0.15.2
     repository: "file://../.."
 maintainers:
   - name: 'media-servarr'

charts/homarr/Chart.yaml

@@ -7,12 +7,12 @@ keywords:
   - 'homarr'
 kubeVersion: ">=1.24.0-0"
 type: 'application'
-version: 0.51.0
+version: 0.51.1
 appVersion: v1.75.0
 icon: 'https://github.com/drinkataco/media-servarr/blob/main/charts/homarr/icon.png?raw=true'
 dependencies:
   - name: 'media-servarr-base'
-    version: 0.15.1
+    version: 0.15.2
     repository: "file://../.."
 maintainers:
   - name: 'media-servarr'

charts/jellyfin/Chart.yaml

@@ -15,12 +15,12 @@ keywords:
   - 'jellyfin'
 kubeVersion: ">=1.24.0-0"
 type: 'application'
-version: 0.15.0
+version: 0.15.1
 appVersion: 10.11.11
 icon: 'https://github.com/drinkataco/media-servarr/blob/main/charts/jellyfin/icon.png?raw=true'
 dependencies:
   - name: 'media-servarr-base'
-    version: 0.15.1
+    version: 0.15.2
     repository: "file://../.."
 maintainers:
   - name: 'media-servarr'

charts/lidarr/Chart.yaml

@@ -11,12 +11,12 @@ keywords:
   - 'lidarr'
 kubeVersion: ">=1.24.0-0"
 type: 'application'
-version: 1.6.0
+version: 1.6.1
 appVersion: 3.1.0
 icon: 'https://github.com/drinkataco/media-servarr/blob/main/charts/radarr/icon.png?raw=true'
 dependencies:
   - name: 'media-servarr-base'
-    version: 0.15.1
+    version: 0.15.2
     repository: "file://../.."
 maintainers:
   - name: 'media-servarr'

charts/profilarr/Chart.yaml

@@ -10,7 +10,7 @@ keywords:
   - 'profilarr'
 kubeVersion: ">=1.24.0-0"
 type: 'application'
-version: 2.1.0
+version: 2.1.1
 appVersion: 2.2.0
 icon: 'https://github.com/drinkataco/media-servarr/blob/main/charts/profilarr/icon.png?raw=true'
 maintainers:
@@ -23,5 +23,5 @@ sources:
   - 'https://github.com/drinkataco/media-servarr/tree/main/charts/profilarr'
 dependencies:
   - name: 'media-servarr-base'
-    version: 0.15.1
+    version: 0.15.2
     repository: "file://../.."

charts/prowlarr/Chart.yaml

@@ -10,12 +10,12 @@ keywords:
   - 'prowlarr'
 kubeVersion: ">=1.24.0-0"
 type: 'application'
-version: 0.27.0
+version: 0.27.1
 appVersion: 2.5.2
 icon: 'https://github.com/drinkataco/media-servarr/blob/main/charts/prowlarr/icon.png?raw=true'
 dependencies:
   - name: 'media-servarr-base'
-    version: 0.15.1
+    version: 0.15.2
     repository: "file://../.."
 maintainers:
   - name: 'media-servarr'

charts/radarr/Chart.yaml

@@ -12,12 +12,12 @@ keywords:
   - 'radarr'
 kubeVersion: ">=1.24.0-0"
 type: 'application'
-version: 1.9.0
+version: 1.9.1
 appVersion: 6.3.0
 icon: 'https://github.com/drinkataco/media-servarr/blob/main/charts/radarr/icon.png?raw=true'
 dependencies:
   - name: 'media-servarr-base'
-    version: 0.15.1
+    version: 0.15.2
     repository: "file://../.."
 maintainers:
   - name: 'media-servarr'