feat: refactor

clusters/cl01tl/helm/cert-manager/Chart.yaml

@@ -5,8 +5,7 @@ description: Cert Manager
 keywords:
   - cert-manager
   - certificates
-  - kubernetes
+home: https://docs.alexlebens.dev/applications/cert-manager/
-home: https://wiki.alexlebens.dev/s/368fe718-eedb-40e0-a5a7-fad03cdc6b09
 sources:
   - https://github.com/cert-manager/cert-manager
   - https://github.com/cert-manager/cert-manager/tree/master/deploy/charts/cert-manager
@@ -16,6 +15,6 @@ dependencies:
   - name: cert-manager
     version: v1.20.0
     repository: https://charts.jetstack.io
-icon: https://raw.githubusercontent.com/walkxcode/dashboard-icons/main/png/cert-manager.png
+icon: https://raw.githubusercontent.com/cert-manager/cert-manager/refs/heads/master/logo/logo.png
 # renovate: datasource=github-releases depName=cert-manager/cert-manager
 appVersion: v1.20.0

clusters/cl01tl/helm/cert-manager/templates/cluster-issuer.yaml

@@ -2,6 +2,11 @@ apiVersion: cert-manager.io/v1
 kind: ClusterIssuer
 metadata:
   name: letsencrypt-issuer
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: letsencrypt-issuer
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   acme:
     email: alexanderlebens@gmail.com

clusters/cl01tl/helm/cert-manager/templates/external-secret.yaml

@@ -14,8 +14,5 @@ spec:
   data:
     - secretKey: api-token
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /cloudflare/alexlebens.net/clusterissuer
-        metadataPolicy: None
         property: token

clusters/cl01tl/helm/cert-manager/values.yaml

@@ -3,10 +3,16 @@ cert-manager:
     enabled: true
     keep: true
   replicaCount: 2
+  podDisruptionBudget:
+    enabled: true
+    minAvailable: 1
   extraArgs:
     - --enable-gateway-api
+  resources:
+    requests:
+      cpu: 10m
+      memory: 64Mi
   prometheus:
-    enabled: true
     servicemonitor:
       enabled: true
       honorLabels: true

clusters/cl01tl/helm/cilium/Chart.yaml

@@ -4,13 +4,12 @@ version: 1.0.0
 description: Cilium
 keywords:
   - cilium
-  - cni
+  - operator
   - network
-  - kubernetes
+home: https://docs.alexlebens.dev/applications/cilium/
-home: https://wiki.alexlebens.dev/s/9e6f5b17-e186-4af0-81cd-af647b162d3d
 sources:
   - https://github.com/cilium/cilium
-  - https://github.com/cilium/charts
+  - https://github.com/cilium/cilium/tree/main/install/kubernetes/cilium
 maintainers:
   - name: alexlebens
 dependencies:
@@ -19,4 +18,4 @@ dependencies:
     repository: https://helm.cilium.io/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/cilium.png
 # renovate: datasource=github-releases depName=cilium/cilium
-appVersion: 1.19.2
+appVersion: 1.18.6

clusters/cl01tl/helm/cilium/values.yaml

@@ -25,36 +25,24 @@ cilium:
         - NET_ADMIN
         - SYS_ADMIN
         - SYS_RESOURCE
-  l2announcements:
-    enabled: false
   bgpControlPlane:
     enabled: false
-    secretsNamespace:
-      name: kube-system
-    statusReport:
-      enabled: true
-    routerIDAllocation:
-      mode: "default"
   bpf:
     hostLegacyRouting: true
   devices: end0 enp6s0
   ciliumEndpointSlice:
     enabled: true
-  ingressController:
-    enabled: false
   gatewayAPI:
     enabled: true
-    enableAlpn: true
     enableAppProtocol: true
-    gatewayClass:
+    enableAlpn: true
-      create: auto
+    secretsNamespace:
-  externalIPs:
+      create: false
-    enabled: true
+      name: kube-system
   socketLB:
     enabled: true
     hostNamespaceOnly: true
   hubble:
-    enabled: true
     metrics:
       serviceMonitor:
         enabled: true
@@ -68,8 +56,6 @@ cilium:
           enabled: true
     ui:
       enabled: true
-      ingress:
-        enabled: false
   ipam:
     mode: "kubernetes"
   ipv4:
@@ -77,12 +63,11 @@ cilium:
   ipv6:
     enabled: false
   kubeProxyReplacement: true
-  l7Proxy: true
   prometheus:
     enabled: true
     serviceMonitor:
-      trustCRDsExist: true
       enabled: true
+      trustCRDsExist: true
   envoy:
     enabled: true
     securityContext:
@@ -94,14 +79,11 @@ cilium:
           - PERFMON
           - BPF
     prometheus:
-      enabled: true
       serviceMonitor:
         enabled: true
   operator:
-    enabled: true
     rollOutPods: true
     prometheus:
-      enabled: true
       serviceMonitor:
         enabled: true
   cgroup:

clusters/cl01tl/helm/cloudnative-pg/Chart.yaml

@@ -6,10 +6,11 @@ keywords:
   - cloudnative-pg
   - operator
   - postgresql
-  - kubernetes
+home: https://docs.alexlebens.dev/applications/cloudnative-pg/
-home: https://wiki.alexlebens.dev/s/9fb10833-0278-4e64-a34c-d348d833839f
 sources:
   - https://github.com/cloudnative-pg/cloudnative-pg
+  - https://github.com/cloudnative-pg/plugin-barman-cloud
+  - https://github.com/cloudnative-pg/postgres-containers/pkgs/container/postgresql
   - https://github.com/cloudnative-pg/charts/tree/main/charts/cloudnative-pg
   - https://github.com/cloudnative-pg/charts/tree/main/charts/plugin-barman-cloud
 maintainers:
@@ -21,6 +22,6 @@ dependencies:
   - name: plugin-barman-cloud
     version: 0.5.0
     repository: https://cloudnative-pg.io/charts/
-icon: https://avatars.githubusercontent.com/u/100373852?s=200&v=4
+icon: https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg.github.io/refs/heads/main/assets/images/hero_image.png
 # renovate: datasource=github-releases depName=cloudnative-pg/cloudnative-pg
 appVersion: 1.28.1

clusters/cl01tl/helm/cloudnative-pg/values.yaml

@@ -1,16 +1,16 @@
 cloudnative-pg:
   replicaCount: 2
+  resources:
+    requests:
+      cpu: 10m
+      memory: 64Mi
   monitoring:
     podMonitorEnabled: true
 plugin-barman-cloud:
-  replicaCount: 1
+  replicaCount: 2
-  image:
-    registry: ghcr.io
-    repository: cloudnative-pg/plugin-barman-cloud
-    tag: v0.11.0
-  sidecarImage:
-    registry: ghcr.io
-    repository: cloudnative-pg/plugin-barman-cloud-sidecar
-    tag: v0.11.0
   crds:
     create: true
+  resources:
+    requests:
+      cpu: 10m
+      memory: 64Mi