feat: refactor apps (#5428)

Reviewed-on: #5428

clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: kube-prometheus-stack
   repository: oci://ghcr.io/prometheus-community/charts
-  version: 82.16.1
+  version: 82.16.2
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
   version: 4.6.2
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.4.0
-digest: sha256:ece31be37d2fa7c7c59058e2d47e8190bea3baa742b4f04fe793956cd2d52f7f
-generated: "2026-04-02T07:03:55.367235416Z"
+  version: 0.5.0
+digest: sha256:6f3598d0d38a17736419fe8d0e5e0899b774d91c38ef9a4f87743f81c729584c
+generated: "2026-04-02T20:00:01.560565-05:00"

clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml

@@ -5,17 +5,15 @@ description: Kube Prometheus Stack
 keywords:
   - kube-prometheus-stack
   - prometheus
-  - alertmanager
-  - metrics
-  - alerts
-  - kubernetes
-home: https://wiki.alexlebens.dev/s/cd9fc3a4-aa88-4285-8886-91a6c5aecf7d
+home: https://docs.alexlebens.dev/applications/kube-prometheus-stack/
 sources:
   - https://github.com/prometheus/prometheus
   - https://github.com/prometheus-operator/kube-prometheus
-  - https://github.com/alexbakker/alertmanager-ntfy
+  - https://git.xenrox.net/~xenrox/ntfy-alertmanager/
+  - https://hub.docker.com/r/xenrox/ntfy-alertmanager
   - https://github.com/prometheus-community/helm-charts/tree/main/charts/kube-prometheus-stack
   - https://github.com/bjw-s/helm-charts/blob/main/charts/other/app-template
+  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/valkey
 maintainers:
   - name: alexlebens
 dependencies:
@@ -28,7 +26,7 @@ dependencies:
     version: 4.6.2
   - name: valkey
     alias: valkey
-    version: 0.4.0
+    version: 0.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/prometheus.png
 # renovate: datasource=github-releases depName=prometheus-operator/prometheus-operator

clusters/cl01tl/helm/kube-prometheus-stack/templates/external-secret.yaml

@@ -14,10 +14,7 @@ spec:
   data:
     - secretKey: ntfy_password
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /cl01tl/kube-prometheus-stack/ntfy-alertmanager
-        metadataPolicy: None
         property: ntfy_password
 
 ---
@@ -37,10 +34,7 @@ spec:
   data:
     - secretKey: token
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /garage/token
-        metadataPolicy: None
         property: metric
 
 ---
@@ -60,15 +54,9 @@ spec:
   data:
     - secretKey: ntfy_password
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /cl01tl/kube-prometheus-stack/ntfy-alertmanager
-        metadataPolicy: None
         property: ntfy_password
     - secretKey: config
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /cl01tl/kube-prometheus-stack/ntfy-alertmanager
-        metadataPolicy: None
         property: config

clusters/cl01tl/helm/kube-prometheus-stack/values.yaml

@@ -9,10 +9,8 @@ kube-prometheus-stack:
       kubeSchedulerRecording: false
   global:
     rbac:
-      create: true
       createAggregateClusterRoles: true
   alertmanager:
-    enabled: true
     config:
       route:
         group_by: ["namespace", "alertname"]
@@ -36,8 +34,6 @@ kube-prometheus-stack:
     route:
       main:
         enabled: true
-        apiVersion: gateway.networking.k8s.io/v1
-        kind: HTTPRoute
         hostnames:
           - alertmanager.alexlebens.net
         parentRefs:
@@ -45,14 +41,9 @@ kube-prometheus-stack:
             kind: Gateway
             name: traefik-gateway
             namespace: traefik
-        matches:
-          - path:
-              type: PathPrefix
-              value: /
     alertmanagerSpec:
       secrets:
         - alertmanager-config-secret
-      replicas: 1
   grafana:
     enabled: false
   kubeApiServer:
@@ -61,11 +52,13 @@ kube-prometheus-stack:
   kubeControllerManager:
     enabled: false
   kubeEtcd:
-    enabled: true
     service:
       selector:
         k8s-app: kube-controller-manager
     serviceMonitor:
+      metricRelabelings:
+        - action: labeldrop
+          regex: pod
       relabelings:
         - sourceLabels: [__meta_kubernetes_pod_node_name]
           separator: ;
@@ -73,22 +66,12 @@ kube-prometheus-stack:
           targetLabel: nodename
           replacement: $1
           action: replace
-      metricRelabelings:
-        - action: labeldrop
-          regex: pod
   kubeScheduler:
     enabled: false
   kubeProxy:
     enabled: false
-  kubeStateMetrics:
-    enabled: true
-  nodeExporter:
-    operatingSystems:
-      darwin:
-        enabled: false
   prometheusOperator:
     admissionWebhooks:
-      enabled: true
       annotations:
         argocd.argoproj.io/hook: PreSync
         argocd.argoproj.io/hook-delete-policy: HookSucceeded
@@ -106,8 +89,6 @@ kube-prometheus-stack:
     route:
       main:
         enabled: true
-        apiVersion: gateway.networking.k8s.io/v1
-        kind: HTTPRoute
         hostnames:
           - prometheus.alexlebens.net
         parentRefs:
@@ -115,13 +96,10 @@ kube-prometheus-stack:
             kind: Gateway
             name: traefik-gateway
             namespace: traefik
-        matches:
-          - path:
-              type: PathPrefix
-              value: /
     prometheusSpec:
       scrapeInterval: 30s
-      retention: 30d
+      retention: 45d
+      retentionSize: 240GiB
       externalUrl: https://prometheus.alexlebens.net
       ruleSelectorNilUsesHelmValues: false
       serviceMonitorSelectorNilUsesHelmValues: false
@@ -142,14 +120,11 @@ ntfy-alertmanager:
     main:
       type: deployment
       replicas: 1
-      strategy: Recreate
-      revisionHistoryLimit: 3
       containers:
         main:
           image:
             repository: xenrox/ntfy-alertmanager
-            tag: 1.0.0
-            pullPolicy: IfNotPresent
+            tag: 1.0.0@sha256:81788c7905774b7b0b2ed6833b2bc4826a90a42e4b738706edcedd5f489e7a73
   service:
     main:
       controller: main
@@ -157,7 +132,6 @@ ntfy-alertmanager:
         http:
           port: 80
           targetPort: 8080
-          protocol: HTTP
   persistence:
     config:
       enabled: true