Automated Manifest Update (#3861)

This PR contains newly rendered Kubernetes manifests automatically generated by the CI workflow. Reviewed-on: #3861 Co-authored-by: gitea-bot <gitea-bot@alexlebens.net> Co-committed-by: gitea-bot <gitea-bot@alexlebens.net>
2026-02-09 22:55:59 +00:00
parent 2e747b776e
commit 9e8bb7170f
10 changed files with 40 additions and 91 deletions
--- a/clusters/cl01tl/manifests/blocky/ConfigMap-blocky.yaml
+++ b/clusters/cl01tl/manifests/blocky/ConfigMap-blocky.yaml
@@ -99,6 +99,7 @@ data:
        booklore                        IN      CNAME   traefik-cl01tl
        ceph                            IN      CNAME   traefik-cl01tl
        code-server                     IN      CNAME   traefik-cl01tl
+        directus                        IN      CNAME   traefik-cl01tl
        excalidraw                      IN      CNAME   traefik-cl01tl
        feishin                         IN      CNAME   traefik-cl01tl
        garage-s3                       IN      CNAME   traefik-cl01tl
--- a/clusters/cl01tl/manifests/blocky/Deployment-blocky.yaml
+++ b/clusters/cl01tl/manifests/blocky/Deployment-blocky.yaml
@@ -22,7 +22,7 @@ spec:
  template:
    metadata:
      annotations:
-        checksum/configMaps: 9634c9de81f40f8eeb0acee096a8802b02255efe8d18f8692322b0bbe6480644
+        checksum/configMaps: 419a353131ea9dd2c39350dc993b858c3a37a8ec80f597c3eee39c6f72843ab6
      labels:
        app.kubernetes.io/controller: main
        app.kubernetes.io/instance: blocky
--- a/clusters/cl01tl/manifests/directus/Deployment-directus-cloudflared.yaml
+++ b/clusters/cl01tl/manifests/directus/Deployment-directus-cloudflared.yaml
@@ -1,58 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: directus-cloudflared
-  labels:
-    app.kubernetes.io/controller: main
-    app.kubernetes.io/instance: directus
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: cloudflared
-    app.kubernetes.io/version: 2026.2.0
-    helm.sh/chart: cloudflared-2.3.0
-  namespace: directus
-spec:
-  revisionHistoryLimit: 3
-  replicas: 1
-  strategy:
-    type: Recreate
-  selector:
-    matchLabels:
-      app.kubernetes.io/controller: main
-      app.kubernetes.io/name: cloudflared
-      app.kubernetes.io/instance: directus
-  template:
-    metadata:
-      labels:
-        app.kubernetes.io/controller: main
-        app.kubernetes.io/instance: directus
-        app.kubernetes.io/name: cloudflared
-    spec:
-      enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
-      hostIPC: false
-      hostNetwork: false
-      hostPID: false
-      dnsPolicy: ClusterFirst
-      containers:
-        - args:
-            - tunnel
-            - --protocol
-            - http2
-            - --no-autoupdate
-            - run
-            - --token
-            - $(CF_MANAGED_TUNNEL_TOKEN)
-          env:
-            - name: CF_MANAGED_TUNNEL_TOKEN
-              valueFrom:
-                secretKeyRef:
-                  key: cf-tunnel-token
-                  name: directus-cloudflared-secret
-          image: cloudflare/cloudflared:2026.2.0
-          imagePullPolicy: IfNotPresent
-          name: main
-          resources:
-            requests:
-              cpu: 10m
-              memory: 128Mi
--- a/clusters/cl01tl/manifests/directus/Deployment-directus.yaml
+++ b/clusters/cl01tl/manifests/directus/Deployment-directus.yaml
@@ -36,7 +36,7 @@ spec:
      containers:
        - env:
            - name: PUBLIC_URL
-              value: https://directus.alexlebens.dev
+              value: https://directus.alexlebens.net
            - name: WEBSOCKETS_ENABLED
              value: "true"
            - name: ADMIN_EMAIL
@@ -148,7 +148,7 @@ spec:
            - name: AUTH_AUTHENTIK_SCOPE
              value: openid profile email
            - name: AUTH_AUTHENTIK_ISSUER_URL
-              value: https://auth.alexlebens.dev/application/o/directus/.well-known/openid-configuration
+              value: https://authentik.alexlebens.net/application/o/directus/.well-known/openid-configuration
            - name: AUTH_AUTHENTIK_IDENTIFIER_KEY
              value: email
            - name: AUTH_AUTHENTIK_ALLOW_PUBLIC_REGISTRATION
--- a/clusters/cl01tl/manifests/directus/ExternalSecret-directus-cloudflared-secret.yaml
+++ b/clusters/cl01tl/manifests/directus/ExternalSecret-directus-cloudflared-secret.yaml
@@ -1,24 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: directus-cloudflared-secret
-  namespace: directus
-  labels:
-    helm.sh/chart: cloudflared-2.3.0
-    app.kubernetes.io/instance: directus
-    app.kubernetes.io/part-of: directus
-    app.kubernetes.io/version: "2.3.0"
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: directus-cloudflared-secret
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: cf-tunnel-token
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cloudflare/tunnels/directus
-        metadataPolicy: None
-        property: token
--- a/clusters/cl01tl/manifests/directus/HTTPRoute-directus.yaml
+++ b/clusters/cl01tl/manifests/directus/HTTPRoute-directus.yaml
@@ -0,0 +1,30 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: directus
+  labels:
+    app.kubernetes.io/instance: directus
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: directus
+    helm.sh/chart: directus-4.6.2
+  namespace: directus
+spec:
+  parentRefs:
+    - group: gateway.networking.k8s.io
+      kind: Gateway
+      name: traefik-gateway
+      namespace: traefik
+  hostnames:
+    - "directus.alexlebens.net"
+  rules:
+    - backendRefs:
+        - group: ""
+          kind: Service
+          name: directus
+          namespace: directus
+          port: 80
+          weight: 100
+      matches:
+        - path:
+            type: PathPrefix
+            value: /
--- a/clusters/cl01tl/manifests/gatus/ConfigMap-gatus.yaml
+++ b/clusters/cl01tl/manifests/gatus/ConfigMap-gatus.yaml
@@ -625,7 +625,7 @@ data:
      group: external
      interval: 30s
      name: directus
-      url: https://directus.alexlebens.dev
+      url: https://directus.alexlebens.net
    - alerts:
      - type: ntfy
      conditions:
--- a/clusters/cl01tl/manifests/gatus/Deployment-gatus.yaml
+++ b/clusters/cl01tl/manifests/gatus/Deployment-gatus.yaml
@@ -26,7 +26,7 @@ spec:
        app.kubernetes.io/name: gatus
        app.kubernetes.io/instance: gatus
      annotations:
-        checksum/config: 06548718af8398213459def21a33ac7651e4d65617b6348e0318a10456e74996
+        checksum/config: c5532ddc87e9cdd5d2e221ebee4236beab521e173e9bc38aed7a6ea19716492a
    spec:
      serviceAccountName: default
      automountServiceAccountToken: false
--- a/clusters/cl01tl/manifests/homepage/ConfigMap-homepage.yaml
+++ b/clusters/cl01tl/manifests/homepage/ConfigMap-homepage.yaml
@@ -138,8 +138,8 @@ data:
        - Content Management:
            icon: directus.png
            description: Directus
-            href: https://directus.alexlebens.dev
-            siteMonitor: https://directus.alexlebens.dev
+            href: https://directus.alexlebens.net
+            siteMonitor: http://directus.directus:80
            statusStyle: dot
        - Social Media Management:
            icon: sh-postiz.webp
--- a/clusters/cl01tl/manifests/homepage/Deployment-homepage.yaml
+++ b/clusters/cl01tl/manifests/homepage/Deployment-homepage.yaml
@@ -13,7 +13,7 @@ metadata:
  namespace: homepage
 spec:
  revisionHistoryLimit: 3
-  replicas: 3
+  replicas: 1
  strategy:
    type: RollingUpdate
  selector:
@@ -24,7 +24,7 @@ spec:
  template:
    metadata:
      annotations:
-        checksum/configMaps: 5e45b049591fa8d09565f856b95c59e688e661a62cf2918d234d7f49d6083ebd
+        checksum/configMaps: c6196f73e276b9f461c09f2621e3435652242ba643d9342632d78d0c0a846909
        checksum/secrets: d3ba83f111cd32f92c909268c55ad8bbd4f9e299b74b35b33c1a011180d8b378
      labels:
        app.kubernetes.io/controller: main