Automated Manifest Update (#2682)

This PR contains newly rendered Kubernetes manifests automatically generated by the CI workflow.

Reviewed-on: #2682
Co-authored-by: gitea-bot <gitea-bot@alexlebens.net>
Co-committed-by: gitea-bot <gitea-bot@alexlebens.net>

clusters/cl01tl/manifests/authentik/Deployment-authentik-cloudflared.yaml

@@ -8,7 +8,7 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cloudflared
     app.kubernetes.io/version: 2025.11.1
-    helm.sh/chart: cloudflared-1.23.2
+    helm.sh/chart: cloudflared-2.1.4
   namespace: authentik
 spec:
   revisionHistoryLimit: 3

clusters/cl01tl/manifests/authentik/ExternalSecret-authentik-cloudflared-secret.yaml

@@ -4,9 +4,12 @@ metadata:
   name: authentik-cloudflared-secret
   namespace: authentik
   labels:
-    app.kubernetes.io/name: authentik-cloudflared-secret
+    helm.sh/chart: cloudflared-2.1.4
     app.kubernetes.io/instance: authentik
     app.kubernetes.io/part-of: authentik
+    app.kubernetes.io/version: "2.1.4"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: authentik-cloudflared-secret
 spec:
   secretStoreRef:
     kind: ClusterSecretStore

clusters/cl01tl/manifests/code-server/Deployment-code-server-cloudflared.yaml

@@ -8,7 +8,7 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cloudflared
     app.kubernetes.io/version: 2025.11.1
-    helm.sh/chart: cloudflared-2.0.1
+    helm.sh/chart: cloudflared-2.1.4
   namespace: code-server
 spec:
   revisionHistoryLimit: 3

clusters/cl01tl/manifests/code-server/ExternalSecret-code-server-cloudflared-secret.yaml

@@ -4,10 +4,10 @@ metadata:
   name: code-server-cloudflared-secret
   namespace: code-server
   labels:
-    helm.sh/chart: cloudflared-2.0.1
+    helm.sh/chart: cloudflared-2.1.4
     app.kubernetes.io/instance: code-server
     app.kubernetes.io/part-of: code-server
-    app.kubernetes.io/version: "2.0.1"
+    app.kubernetes.io/version: "2.1.4"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: code-server-cloudflared-secret
 spec:

clusters/cl01tl/manifests/directus/Deployment-directus-cloudflared.yaml

@@ -1,14 +1,14 @@
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: directus-cloudflared-directus
+  name: directus-cloudflared
   labels:
     app.kubernetes.io/controller: main
     app.kubernetes.io/instance: directus
     app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: cloudflared-directus
+    app.kubernetes.io/name: cloudflared
     app.kubernetes.io/version: 2025.11.1
-    helm.sh/chart: cloudflared-directus-1.23.2
+    helm.sh/chart: cloudflared-2.1.4
   namespace: directus
 spec:
   revisionHistoryLimit: 3
@@ -18,14 +18,14 @@ spec:
   selector:
     matchLabels:
       app.kubernetes.io/controller: main
-      app.kubernetes.io/name: cloudflared-directus
+      app.kubernetes.io/name: cloudflared
       app.kubernetes.io/instance: directus
   template:
     metadata:
       labels:
         app.kubernetes.io/controller: main
         app.kubernetes.io/instance: directus
-        app.kubernetes.io/name: cloudflared-directus
+        app.kubernetes.io/name: cloudflared
     spec:
       enableServiceLinks: false
       serviceAccountName: default

clusters/cl01tl/manifests/directus/ExternalSecret-directus-cloudflared-secret.yaml

@@ -4,9 +4,12 @@ metadata:
   name: directus-cloudflared-secret
   namespace: directus
   labels:
-    app.kubernetes.io/name: directus-cloudflared-secret
+    helm.sh/chart: cloudflared-2.1.4
     app.kubernetes.io/instance: directus
     app.kubernetes.io/part-of: directus
+    app.kubernetes.io/version: "2.1.4"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: directus-cloudflared-secret
 spec:
   secretStoreRef:
     kind: ClusterSecretStore

clusters/cl01tl/manifests/element-web/Deployment-element-web-cloudflared.yaml

@@ -8,7 +8,7 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cloudflared
     app.kubernetes.io/version: 2025.11.1
-    helm.sh/chart: cloudflared-1.23.2
+    helm.sh/chart: cloudflared-2.1.4
   namespace: element-web
 spec:
   revisionHistoryLimit: 3

clusters/cl01tl/manifests/element-web/ExternalSecret-element-web-cloudflared-secret.yaml

@@ -4,9 +4,12 @@ metadata:
   name: element-web-cloudflared-secret
   namespace: element-web
   labels:
-    app.kubernetes.io/name: element-web-cloudflared-secret
+    helm.sh/chart: cloudflared-2.1.4
     app.kubernetes.io/instance: element-web
     app.kubernetes.io/part-of: element-web
+    app.kubernetes.io/version: "2.1.4"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: element-web-cloudflared-secret
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
@@ -16,6 +19,6 @@ spec:
       remoteRef:
         conversionStrategy: Default
         decodingStrategy: None
-        key: /cloudflare/tunnels/element
+        key: /cloudflare/tunnels/element-web
         metadataPolicy: None
         property: token

clusters/cl01tl/manifests/freshrss/Deployment-freshrss-cloudflared.yaml

@@ -8,7 +8,7 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cloudflared
     app.kubernetes.io/version: 2025.11.1
-    helm.sh/chart: cloudflared-1.23.2
+    helm.sh/chart: cloudflared-2.1.4
   namespace: freshrss
 spec:
   revisionHistoryLimit: 3

clusters/cl01tl/manifests/freshrss/ExternalSecret-freshrss-cloudflared-secret.yaml

@@ -4,9 +4,12 @@ metadata:
   name: freshrss-cloudflared-secret
   namespace: freshrss
   labels:
-    app.kubernetes.io/name: freshrss-cloudflared-secret
+    helm.sh/chart: cloudflared-2.1.4
     app.kubernetes.io/instance: freshrss
     app.kubernetes.io/part-of: freshrss
+    app.kubernetes.io/version: "2.1.4"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: freshrss-cloudflared-secret
 spec:
   secretStoreRef:
     kind: ClusterSecretStore

clusters/cl01tl/manifests/gitea/Deployment-gitea-cloudflared.yaml

@@ -8,7 +8,7 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cloudflared
     app.kubernetes.io/version: 2025.11.1
-    helm.sh/chart: cloudflared-1.23.2
+    helm.sh/chart: cloudflared-2.1.4
   namespace: gitea
 spec:
   revisionHistoryLimit: 3

clusters/cl01tl/manifests/gitea/ExternalSecret-gitea-cloudflared-secret.yaml

@@ -4,9 +4,12 @@ metadata:
   name: gitea-cloudflared-secret
   namespace: gitea
   labels:
-    app.kubernetes.io/name: gitea-cloudflared-secret
+    helm.sh/chart: cloudflared-2.1.4
     app.kubernetes.io/instance: gitea
     app.kubernetes.io/part-of: gitea
+    app.kubernetes.io/version: "2.1.4"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: gitea-cloudflared-secret
 spec:
   secretStoreRef:
     kind: ClusterSecretStore

clusters/cl01tl/manifests/homepage-dev/Deployment-homepage-dev-cloudflared.yaml

@@ -8,7 +8,7 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cloudflared
     app.kubernetes.io/version: 2025.11.1
-    helm.sh/chart: cloudflared-1.23.2
+    helm.sh/chart: cloudflared-2.1.4
   namespace: homepage-dev
 spec:
   revisionHistoryLimit: 3

clusters/cl01tl/manifests/homepage-dev/ExternalSecret-homepage-dev-cloudflared-secret.yaml

@@ -4,9 +4,12 @@ metadata:
   name: homepage-dev-cloudflared-secret
   namespace: homepage-dev
   labels:
-    app.kubernetes.io/name: homepage-dev-cloudflared-secret
+    helm.sh/chart: cloudflared-2.1.4
     app.kubernetes.io/instance: homepage-dev
     app.kubernetes.io/part-of: homepage-dev
+    app.kubernetes.io/version: "2.1.4"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: homepage-dev-cloudflared-secret
 spec:
   secretStoreRef:
     kind: ClusterSecretStore

clusters/cl01tl/manifests/karakeep/Deployment-karakeep-cloudflared.yaml

@@ -8,7 +8,7 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cloudflared
     app.kubernetes.io/version: 2025.11.1
-    helm.sh/chart: cloudflared-1.23.2
+    helm.sh/chart: cloudflared-2.1.4
   namespace: karakeep
 spec:
   revisionHistoryLimit: 3

clusters/cl01tl/manifests/karakeep/ExternalSecret-karakeep-cloudflared-secret.yaml

@@ -4,9 +4,12 @@ metadata:
   name: karakeep-cloudflared-secret
   namespace: karakeep
   labels:
-    app.kubernetes.io/name: karakeep-cloudflared-secret
+    helm.sh/chart: cloudflared-2.1.4
     app.kubernetes.io/instance: karakeep
     app.kubernetes.io/part-of: karakeep
+    app.kubernetes.io/version: "2.1.4"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: karakeep-cloudflared-secret
 spec:
   secretStoreRef:
     kind: ClusterSecretStore

clusters/cl01tl/manifests/matrix-synapse/Deployment-matrix-synapse-hookshot-cloudflared.yaml

@@ -1,14 +1,14 @@
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: matrix-synapse-cloudflared-hookshot
+  name: matrix-synapse-hookshot-cloudflared
   labels:
     app.kubernetes.io/controller: main
     app.kubernetes.io/instance: matrix-synapse
     app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: cloudflared-hookshot
+    app.kubernetes.io/name: hookshot-cloudflared
     app.kubernetes.io/version: 2025.11.1
-    helm.sh/chart: cloudflared-hookshot-1.23.2
+    helm.sh/chart: cloudflared-hookshot-2.1.4
   namespace: matrix-synapse
 spec:
   revisionHistoryLimit: 3
@@ -18,14 +18,14 @@ spec:
   selector:
     matchLabels:
       app.kubernetes.io/controller: main
-      app.kubernetes.io/name: cloudflared-hookshot
+      app.kubernetes.io/name: hookshot-cloudflared
       app.kubernetes.io/instance: matrix-synapse
   template:
     metadata:
       labels:
         app.kubernetes.io/controller: main
         app.kubernetes.io/instance: matrix-synapse
-        app.kubernetes.io/name: cloudflared-hookshot
+        app.kubernetes.io/name: hookshot-cloudflared
     spec:
       enableServiceLinks: false
       serviceAccountName: default
@@ -48,7 +48,7 @@ spec:
               valueFrom:
                 secretKeyRef:
                   key: cf-tunnel-token
-                  name: matrix-synapse-cloudflared-hookshot-secret
+                  name: matrix-synapse-hookshot-cloudflared-secret
           image: cloudflare/cloudflared:2025.11.1
           imagePullPolicy: IfNotPresent
           name: main

clusters/cl01tl/manifests/matrix-synapse/Deployment-matrix-synapse-synapse-cloudflared.yaml

@@ -1,14 +1,14 @@
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: matrix-synapse-cloudflared-synapse
+  name: matrix-synapse-synapse-cloudflared
   labels:
     app.kubernetes.io/controller: main
     app.kubernetes.io/instance: matrix-synapse
     app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: cloudflared-synapse
+    app.kubernetes.io/name: synapse-cloudflared
     app.kubernetes.io/version: 2025.11.1
-    helm.sh/chart: cloudflared-synapse-1.23.2
+    helm.sh/chart: cloudflared-synapse-2.1.4
   namespace: matrix-synapse
 spec:
   revisionHistoryLimit: 3
@@ -18,14 +18,14 @@ spec:
   selector:
     matchLabels:
       app.kubernetes.io/controller: main
-      app.kubernetes.io/name: cloudflared-synapse
+      app.kubernetes.io/name: synapse-cloudflared
       app.kubernetes.io/instance: matrix-synapse
   template:
     metadata:
       labels:
         app.kubernetes.io/controller: main
         app.kubernetes.io/instance: matrix-synapse
-        app.kubernetes.io/name: cloudflared-synapse
+        app.kubernetes.io/name: synapse-cloudflared
     spec:
       enableServiceLinks: false
       serviceAccountName: default
@@ -48,7 +48,7 @@ spec:
               valueFrom:
                 secretKeyRef:
                   key: cf-tunnel-token
-                  name: matrix-synapse-cloudflared-synapse-secret
+                  name: matrix-synapse-synapse-cloudflared-secret
           image: cloudflare/cloudflared:2025.11.1
           imagePullPolicy: IfNotPresent
           name: main

clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-matrix-synapse-hookshot-cloudflared-secret.yaml

@@ -1,12 +1,15 @@
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
-  name: matrix-synapse-cloudflared-hookshot-secret
+  name: matrix-synapse-hookshot-cloudflared-secret
   namespace: matrix-synapse
   labels:
-    app.kubernetes.io/name: matrix-synapse-cloudflared-hookshot-secret
+    helm.sh/chart: cloudflared-hookshot-2.1.4
     app.kubernetes.io/instance: matrix-synapse
     app.kubernetes.io/part-of: matrix-synapse
+    app.kubernetes.io/version: "2.1.4"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: matrix-synapse-hookshot-cloudflared-secret
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
@@ -16,6 +19,6 @@ spec:
       remoteRef:
         conversionStrategy: Default
         decodingStrategy: None
-        key: /cloudflare/tunnels/matrix-hookshot
+        key: /cloudflare/tunnels/matrix-synapse-hookshot
         metadataPolicy: None
         property: token

clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-matrix-synapse-synapse-cloudflared-secret.yaml

@@ -1,12 +1,15 @@
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
-  name: matrix-synapse-cloudflared-synapse-secret
+  name: matrix-synapse-synapse-cloudflared-secret
   namespace: matrix-synapse
   labels:
-    app.kubernetes.io/name: matrix-synapse-cloudflared-synapse-secret
+    helm.sh/chart: cloudflared-synapse-2.1.4
     app.kubernetes.io/instance: matrix-synapse
     app.kubernetes.io/part-of: matrix-synapse
+    app.kubernetes.io/version: "2.1.4"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: matrix-synapse-synapse-cloudflared-secret
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
@@ -16,6 +19,6 @@ spec:
       remoteRef:
         conversionStrategy: Default
         decodingStrategy: None
-        key: /cloudflare/tunnels/matrix-synapse
+        key: /cloudflare/tunnels/matrix-synapse-synapse
         metadataPolicy: None
         property: token

clusters/cl01tl/manifests/outline/Deployment-outline-cloudflared.yaml

@@ -1,14 +1,14 @@
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: outline-cloudflared-outline
+  name: outline-cloudflared
   labels:
     app.kubernetes.io/controller: main
     app.kubernetes.io/instance: outline
     app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: cloudflared-outline
+    app.kubernetes.io/name: cloudflared
     app.kubernetes.io/version: 2025.11.1
-    helm.sh/chart: cloudflared-outline-1.23.2
+    helm.sh/chart: cloudflared-2.1.4
   namespace: outline
 spec:
   revisionHistoryLimit: 3
@@ -18,14 +18,14 @@ spec:
   selector:
     matchLabels:
       app.kubernetes.io/controller: main
-      app.kubernetes.io/name: cloudflared-outline
+      app.kubernetes.io/name: cloudflared
       app.kubernetes.io/instance: outline
   template:
     metadata:
       labels:
         app.kubernetes.io/controller: main
         app.kubernetes.io/instance: outline
-        app.kubernetes.io/name: cloudflared-outline
+        app.kubernetes.io/name: cloudflared
     spec:
       enableServiceLinks: false
       serviceAccountName: default

clusters/cl01tl/manifests/outline/ExternalSecret-outline-cloudflared-secret.yaml

@@ -4,9 +4,12 @@ metadata:
   name: outline-cloudflared-secret
   namespace: outline
   labels:
-    app.kubernetes.io/name: outline-cloudflared-secret
+    helm.sh/chart: cloudflared-2.1.4
     app.kubernetes.io/instance: outline
     app.kubernetes.io/part-of: outline
+    app.kubernetes.io/version: "2.1.4"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: outline-cloudflared-secret
 spec:
   secretStoreRef:
     kind: ClusterSecretStore

clusters/cl01tl/manifests/postiz/Deployment-postiz-cloudflared.yaml

@@ -1,14 +1,14 @@
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: postiz-cloudflared-postiz
+  name: postiz-cloudflared
   labels:
     app.kubernetes.io/controller: main
     app.kubernetes.io/instance: postiz
     app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: cloudflared-postiz
+    app.kubernetes.io/name: cloudflared
     app.kubernetes.io/version: 2025.11.1
-    helm.sh/chart: cloudflared-1.23.2
+    helm.sh/chart: cloudflared-2.1.4
   namespace: postiz
 spec:
   revisionHistoryLimit: 3
@@ -18,14 +18,14 @@ spec:
   selector:
     matchLabels:
       app.kubernetes.io/controller: main
-      app.kubernetes.io/name: cloudflared-postiz
+      app.kubernetes.io/name: cloudflared
       app.kubernetes.io/instance: postiz
   template:
     metadata:
       labels:
         app.kubernetes.io/controller: main
         app.kubernetes.io/instance: postiz
-        app.kubernetes.io/name: cloudflared-postiz
+        app.kubernetes.io/name: cloudflared
     spec:
       enableServiceLinks: false
       serviceAccountName: default

clusters/cl01tl/manifests/postiz/ExternalSecret-postiz-cloudflared-secret.yaml

@@ -4,9 +4,12 @@ metadata:
   name: postiz-cloudflared-secret
   namespace: postiz
   labels:
-    app.kubernetes.io/name: postiz-cloudflared-secret
+    helm.sh/chart: cloudflared-2.1.4
     app.kubernetes.io/instance: postiz
     app.kubernetes.io/part-of: postiz
+    app.kubernetes.io/version: "2.1.4"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: postiz-cloudflared-secret
 spec:
   secretStoreRef:
     kind: ClusterSecretStore

clusters/cl01tl/manifests/rook-ceph/Deployment-rook-ceph-rgw-cloudflared.yaml

@@ -1,14 +1,14 @@
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: rook-ceph-cloudflared-rgw
+  name: rook-ceph-rgw-cloudflared
   labels:
     app.kubernetes.io/controller: main
     app.kubernetes.io/instance: rook-ceph
     app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: cloudflared-rgw
+    app.kubernetes.io/name: rgw-cloudflared
     app.kubernetes.io/version: 2025.11.1
-    helm.sh/chart: cloudflared-rgw-1.23.2
+    helm.sh/chart: cloudflared-rgw-2.1.4
   namespace: rook-ceph
 spec:
   revisionHistoryLimit: 3
@@ -18,14 +18,14 @@ spec:
   selector:
     matchLabels:
       app.kubernetes.io/controller: main
-      app.kubernetes.io/name: cloudflared-rgw
+      app.kubernetes.io/name: rgw-cloudflared
       app.kubernetes.io/instance: rook-ceph
   template:
     metadata:
       labels:
         app.kubernetes.io/controller: main
         app.kubernetes.io/instance: rook-ceph
-        app.kubernetes.io/name: cloudflared-rgw
+        app.kubernetes.io/name: rgw-cloudflared
     spec:
       enableServiceLinks: false
       serviceAccountName: default
@@ -48,7 +48,7 @@ spec:
               valueFrom:
                 secretKeyRef:
                   key: cf-tunnel-token
-                  name: ceph-rgw-cloudflared-secret
+                  name: rook-ceph-rgw-cloudflared-secret
           image: cloudflare/cloudflared:2025.11.1
           imagePullPolicy: IfNotPresent
           name: main

clusters/cl01tl/manifests/rook-ceph/ExternalSecret-rook-ceph-rgw-cloudflared-secret.yaml

@@ -1,12 +1,15 @@
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
-  name: ceph-rgw-cloudflared-secret
+  name: rook-ceph-rgw-cloudflared-secret
   namespace: rook-ceph
   labels:
-    app.kubernetes.io/name: ceph-rgw-cloudflared-secret
+    helm.sh/chart: cloudflared-rgw-2.1.4
     app.kubernetes.io/instance: rook-ceph
     app.kubernetes.io/part-of: rook-ceph
+    app.kubernetes.io/version: "2.1.4"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: rook-ceph-rgw-cloudflared-secret
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
@@ -16,6 +19,6 @@ spec:
       remoteRef:
         conversionStrategy: Default
         decodingStrategy: None
-        key: /cloudflare/tunnels/ceph-rgw
+        key: /cloudflare/tunnels/rook-ceph-rgw
         metadataPolicy: None
         property: token

clusters/cl01tl/manifests/site-documentation/Deployment-site-documentation-cloudflared.yaml

@@ -1,14 +1,14 @@
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: site-documentation-cloudflared-site
+  name: site-documentation-cloudflared
   labels:
     app.kubernetes.io/controller: main
     app.kubernetes.io/instance: site-documentation
     app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: cloudflared-site
+    app.kubernetes.io/name: cloudflared
     app.kubernetes.io/version: 2025.11.1
-    helm.sh/chart: cloudflared-site-1.23.2
+    helm.sh/chart: cloudflared-2.1.4
   namespace: site-documentation
 spec:
   revisionHistoryLimit: 3
@@ -18,14 +18,14 @@ spec:
   selector:
     matchLabels:
       app.kubernetes.io/controller: main
-      app.kubernetes.io/name: cloudflared-site
+      app.kubernetes.io/name: cloudflared
       app.kubernetes.io/instance: site-documentation
   template:
     metadata:
       labels:
         app.kubernetes.io/controller: main
         app.kubernetes.io/instance: site-documentation
-        app.kubernetes.io/name: cloudflared-site
+        app.kubernetes.io/name: cloudflared
     spec:
       enableServiceLinks: false
       serviceAccountName: default
@@ -48,7 +48,7 @@ spec:
               valueFrom:
                 secretKeyRef:
                   key: cf-tunnel-token
-                  name: site-documentation-cloudflared-api-secret
+                  name: site-documentation-cloudflared-secret
           image: cloudflare/cloudflared:2025.11.1
           imagePullPolicy: IfNotPresent
           name: main

clusters/cl01tl/manifests/site-documentation/ExternalSecret-site-documentation-cloudflared-secret.yaml

@@ -1,12 +1,15 @@
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
-  name: site-documentation-cloudflared-api-secret
+  name: site-documentation-cloudflared-secret
   namespace: site-documentation
   labels:
-    app.kubernetes.io/name: site-documentation-cloudflared-api-secret
+    helm.sh/chart: cloudflared-2.1.4
     app.kubernetes.io/instance: site-documentation
     app.kubernetes.io/part-of: site-documentation
+    app.kubernetes.io/version: "2.1.4"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: site-documentation-cloudflared-secret
 spec:
   secretStoreRef:
     kind: ClusterSecretStore

clusters/cl01tl/manifests/site-profile/Deployment-site-profile-cloudflared.yaml

@@ -1,14 +1,14 @@
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: site-profile-cloudflared-site
+  name: site-profile-cloudflared
   labels:
     app.kubernetes.io/controller: main
     app.kubernetes.io/instance: site-profile
     app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: cloudflared-site
+    app.kubernetes.io/name: cloudflared
     app.kubernetes.io/version: 2025.11.1
-    helm.sh/chart: cloudflared-site-1.23.2
+    helm.sh/chart: cloudflared-2.1.4
   namespace: site-profile
 spec:
   revisionHistoryLimit: 3
@@ -18,14 +18,14 @@ spec:
   selector:
     matchLabels:
       app.kubernetes.io/controller: main
-      app.kubernetes.io/name: cloudflared-site
+      app.kubernetes.io/name: cloudflared
       app.kubernetes.io/instance: site-profile
   template:
     metadata:
       labels:
         app.kubernetes.io/controller: main
         app.kubernetes.io/instance: site-profile
-        app.kubernetes.io/name: cloudflared-site
+        app.kubernetes.io/name: cloudflared
     spec:
       enableServiceLinks: false
       serviceAccountName: default
@@ -48,7 +48,7 @@ spec:
               valueFrom:
                 secretKeyRef:
                   key: cf-tunnel-token
-                  name: site-profile-cloudflared-api-secret
+                  name: site-profile-cloudflared-secret
           image: cloudflare/cloudflared:2025.11.1
           imagePullPolicy: IfNotPresent
           name: main

clusters/cl01tl/manifests/site-profile/ExternalSecret-site-profile-cloudflared-secret.yaml

@@ -1,12 +1,15 @@
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
-  name: site-profile-cloudflared-api-secret
+  name: site-profile-cloudflared-secret
   namespace: site-profile
   labels:
-    app.kubernetes.io/name: site-profile-cloudflared-api-secret
+    helm.sh/chart: cloudflared-2.1.4
     app.kubernetes.io/instance: site-profile
     app.kubernetes.io/part-of: site-profile
+    app.kubernetes.io/version: "2.1.4"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: site-profile-cloudflared-secret
 spec:
   secretStoreRef:
     kind: ClusterSecretStore

clusters/cl01tl/manifests/vaultwarden/Deployment-vaultwarden-cloudflared.yaml

@@ -8,7 +8,7 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cloudflared
     app.kubernetes.io/version: 2025.11.1
-    helm.sh/chart: cloudflared-1.23.2
+    helm.sh/chart: cloudflared-2.1.4
   namespace: vaultwarden
 spec:
   revisionHistoryLimit: 3

clusters/cl01tl/manifests/vaultwarden/ExternalSecret-vaultwarden-cloudflared-secret.yaml

@@ -4,9 +4,12 @@ metadata:
   name: vaultwarden-cloudflared-secret
   namespace: vaultwarden
   labels:
-    app.kubernetes.io/name: vaultwarden-cloudflared-secret
+    helm.sh/chart: cloudflared-2.1.4
     app.kubernetes.io/instance: vaultwarden
     app.kubernetes.io/part-of: vaultwarden
+    app.kubernetes.io/version: "2.1.4"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: vaultwarden-cloudflared-secret
 spec:
   secretStoreRef:
     kind: ClusterSecretStore