chore: Update manifests after change

clusters/cl01tl/manifests/authentik/Deployment-authentik-cloudflared.yaml

@@ -8,7 +8,7 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cloudflared
     app.kubernetes.io/version: 2026.3.0
-    helm.sh/chart: cloudflared-2.7.1
+    helm.sh/chart: cloudflared-3.2.0
   namespace: authentik
 spec:
   revisionHistoryLimit: 3
@@ -28,7 +28,7 @@ spec:
         app.kubernetes.io/name: cloudflared
     spec:
       enableServiceLinks: false
-      serviceAccountName: authentik
+      serviceAccountName: authentik-cloudflared
       automountServiceAccountToken: false
       hostIPC: false
       hostNetwork: false
@@ -38,8 +38,9 @@ spec:
         - args:
             - tunnel
             - --protocol
-            - http2
+            - auto
             - --no-autoupdate
+            - --metrics 0.0.0.0:20241
             - run
             - --token
             - $(CF_MANAGED_TUNNEL_TOKEN)

clusters/cl01tl/manifests/authentik/ExternalSecret-authentik-cloudflared-secret.yaml

@@ -4,10 +4,10 @@ metadata:
   name: authentik-cloudflared-secret
   namespace: authentik
   labels:
-    helm.sh/chart: cloudflared-2.7.1
+    helm.sh/chart: cloudflared-3.2.0
     app.kubernetes.io/instance: authentik
     app.kubernetes.io/part-of: authentik
-    app.kubernetes.io/version: "2.7.1"
+    app.kubernetes.io/version: "3.2.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: authentik-cloudflared-secret
 spec:

clusters/cl01tl/manifests/authentik/Service-authentik-cloudflared.yaml

@@ -0,0 +1,23 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: authentik-cloudflared
+  labels:
+    app.kubernetes.io/instance: authentik
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: cloudflared
+    app.kubernetes.io/service: authentik-cloudflared
+    app.kubernetes.io/version: 2026.3.0
+    helm.sh/chart: cloudflared-3.2.0
+  namespace: authentik
+spec:
+  type: ClusterIP
+  ports:
+    - port: 20241
+      targetPort: 20241
+      protocol: TCP
+      name: metrics
+  selector:
+    app.kubernetes.io/controller: main
+    app.kubernetes.io/instance: authentik
+    app.kubernetes.io/name: cloudflared

clusters/cl01tl/manifests/authentik/ServiceAccount-authentik-cloudflared.yaml

@@ -7,5 +7,5 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cloudflared
     app.kubernetes.io/version: 2026.3.0
-    helm.sh/chart: cloudflared-2.7.1
+    helm.sh/chart: cloudflared-3.2.0
   namespace: authentik

clusters/cl01tl/manifests/authentik/ServiceMonitor-authentik-cloudflared.yaml

@@ -0,0 +1,25 @@
+apiVersion: monitoring.coreos.com/v1
+kind: ServiceMonitor
+metadata:
+  name: authentik-cloudflared
+  labels:
+    app.kubernetes.io/instance: authentik
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: cloudflared
+    app.kubernetes.io/version: 2026.3.0
+    helm.sh/chart: cloudflared-3.2.0
+  namespace: authentik
+spec:
+  jobLabel: app.kubernetes.io/name
+  namespaceSelector:
+    matchNames:
+      - authentik
+  selector:
+    matchLabels:
+      app.kubernetes.io/instance: cloudflared
+      app.kubernetes.io/name: cloudflared
+  endpoints:
+    - interval: 30s
+      path: /metrics
+      port: metrics
+      scrapeTimeout: 10s