chore: Update manifests after change

clusters/cl01tl/manifests/rybbit/Deployment-rybbit-backend.yaml

@@ -29,7 +29,7 @@ spec:
         app.kubernetes.io/name: rybbit
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
+      serviceAccountName: rybbit
       automountServiceAccountToken: false
       hostIPC: false
       hostNetwork: false

clusters/cl01tl/manifests/rybbit/Deployment-rybbit-clickhouse.yaml

@@ -29,7 +29,7 @@ spec:
         app.kubernetes.io/name: rybbit
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
+      serviceAccountName: rybbit
       automountServiceAccountToken: false
       hostIPC: false
       hostNetwork: false

clusters/cl01tl/manifests/rybbit/Deployment-rybbit-client.yaml

@@ -29,7 +29,7 @@ spec:
         app.kubernetes.io/name: rybbit
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
+      serviceAccountName: rybbit
       automountServiceAccountToken: false
       hostIPC: false
       hostNetwork: false

clusters/cl01tl/manifests/rybbit/Deployment-rybbit-cloudflared.yaml

@@ -8,7 +8,7 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cloudflared
     app.kubernetes.io/version: 2026.3.0
-    helm.sh/chart: cloudflared-2.6.0
+    helm.sh/chart: cloudflared-3.2.0
   namespace: rybbit
 spec:
   revisionHistoryLimit: 3
@@ -28,8 +28,8 @@ spec:
         app.kubernetes.io/name: cloudflared
     spec:
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: rybbit-cloudflared
+      automountServiceAccountToken: false
       hostIPC: false
       hostNetwork: false
       hostPID: false
@@ -38,8 +38,9 @@ spec:
         - args:
             - tunnel
             - --protocol
-            - http2
+            - auto
             - --no-autoupdate
+            - --metrics 0.0.0.0:20241
             - run
             - --token
             - $(CF_MANAGED_TUNNEL_TOKEN)

clusters/cl01tl/manifests/rybbit/ExternalSecret-rybbit-cloudflared-secret.yaml

@@ -4,10 +4,10 @@ metadata:
   name: rybbit-cloudflared-secret
   namespace: rybbit
   labels:
-    helm.sh/chart: cloudflared-2.6.0
+    helm.sh/chart: cloudflared-3.2.0
     app.kubernetes.io/instance: rybbit
     app.kubernetes.io/part-of: rybbit
-    app.kubernetes.io/version: "2.6.0"
+    app.kubernetes.io/version: "3.2.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: rybbit-cloudflared-secret
 spec:

clusters/cl01tl/manifests/rybbit/Service-rybbit-cloudflared.yaml

@@ -0,0 +1,23 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: rybbit-cloudflared
+  labels:
+    app.kubernetes.io/instance: rybbit
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: cloudflared
+    app.kubernetes.io/service: rybbit-cloudflared
+    app.kubernetes.io/version: 2026.3.0
+    helm.sh/chart: cloudflared-3.2.0
+  namespace: rybbit
+spec:
+  type: ClusterIP
+  ports:
+    - port: 20241
+      targetPort: 20241
+      protocol: TCP
+      name: metrics
+  selector:
+    app.kubernetes.io/controller: main
+    app.kubernetes.io/instance: rybbit
+    app.kubernetes.io/name: cloudflared

clusters/cl01tl/manifests/rybbit/ServiceAccount-rybbit-cloudflared.yaml

@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: rybbit-cloudflared
+  labels:
+    app.kubernetes.io/instance: rybbit
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: cloudflared
+    app.kubernetes.io/version: 2026.3.0
+    helm.sh/chart: cloudflared-3.2.0
+  namespace: rybbit

clusters/cl01tl/manifests/rybbit/ServiceAccount-rybbit.yaml

@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: rybbit
+  labels:
+    app.kubernetes.io/instance: rybbit
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: rybbit
+    helm.sh/chart: rybbit-5.0.0
+  namespace: rybbit

clusters/cl01tl/manifests/rybbit/ServiceMonitor-rybbit-cloudflared.yaml

@@ -0,0 +1,25 @@
+apiVersion: monitoring.coreos.com/v1
+kind: ServiceMonitor
+metadata:
+  name: rybbit-cloudflared
+  labels:
+    app.kubernetes.io/instance: rybbit
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: cloudflared
+    app.kubernetes.io/version: 2026.3.0
+    helm.sh/chart: cloudflared-3.2.0
+  namespace: rybbit
+spec:
+  jobLabel: app.kubernetes.io/name
+  namespaceSelector:
+    matchNames:
+      - rybbit
+  selector:
+    matchLabels:
+      app.kubernetes.io/instance: cloudflared
+      app.kubernetes.io/name: cloudflared
+  endpoints:
+    - interval: 30s
+      path: /metrics
+      port: metrics
+      scrapeTimeout: 10s

clusters/cl01tl/manifests/rybbit/ServiceMonitor-rybbit.yaml

@@ -9,7 +9,7 @@ metadata:
     helm.sh/chart: rybbit-5.0.0
   namespace: rybbit
 spec:
-  jobLabel: rybbit
+  jobLabel: app.kubernetes.io/name
   namespaceSelector:
     matchNames:
       - rybbit