chore: Update manifests after change

2026-05-08 03:52:37 +00:00
parent bf6bdb0b57
commit a4655e50db
146 changed files with 919 additions and 184 deletions
--- a/clusters/cl01tl/manifests/authentik/ConfigMap-authentik-valkey-init-scripts.yaml
+++ b/clusters/cl01tl/manifests/authentik/ConfigMap-authentik-valkey-init-scripts.yaml
@@ -6,7 +6,7 @@ metadata:
    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: authentik
-    app.kubernetes.io/version: "9.0.3"
+    app.kubernetes.io/version: "9.0.4"
    app.kubernetes.io/managed-by: Helm
 data:
  init.sh: |-
--- a/clusters/cl01tl/manifests/authentik/Deployment-authentik-cloudflared.yaml
+++ b/clusters/cl01tl/manifests/authentik/Deployment-authentik-cloudflared.yaml
@@ -8,7 +8,7 @@ metadata:
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: cloudflared
    app.kubernetes.io/version: 2026.3.0
-    helm.sh/chart: cloudflared-2.7.1
+    helm.sh/chart: cloudflared-3.0.0
  namespace: authentik
 spec:
  revisionHistoryLimit: 3
@@ -28,7 +28,7 @@ spec:
        app.kubernetes.io/name: cloudflared
    spec:
      enableServiceLinks: false
-      serviceAccountName: authentik
+      serviceAccountName: cloudflared
      automountServiceAccountToken: false
      hostIPC: false
      hostNetwork: false
@@ -38,8 +38,9 @@ spec:
        - args:
            - tunnel
            - --protocol
-            - http2
+            - auto
            - --no-autoupdate
+            - --metrics 0.0.0.0:20241
            - run
            - --token
            - $(CF_MANAGED_TUNNEL_TOKEN)
--- a/clusters/cl01tl/manifests/authentik/ExternalSecret-authentik-cloudflared-secret.yaml
+++ b/clusters/cl01tl/manifests/authentik/ExternalSecret-authentik-cloudflared-secret.yaml
@@ -4,10 +4,10 @@ metadata:
  name: authentik-cloudflared-secret
  namespace: authentik
  labels:
-    helm.sh/chart: cloudflared-2.7.1
+    helm.sh/chart: cloudflared-3.0.0
    app.kubernetes.io/instance: authentik
    app.kubernetes.io/part-of: authentik
-    app.kubernetes.io/version: "2.7.1"
+    app.kubernetes.io/version: "3.0.0"
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: authentik-cloudflared-secret
 spec:
--- a/clusters/cl01tl/manifests/authentik/PodMonitor-authentik-valkey.yaml
+++ b/clusters/cl01tl/manifests/authentik/PodMonitor-authentik-valkey.yaml
@@ -6,7 +6,7 @@ metadata:
    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: authentik
-    app.kubernetes.io/version: "9.0.3"
+    app.kubernetes.io/version: "9.0.4"
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/part-of: valkey
    app.kubernetes.io/component: podmonitor
--- a/clusters/cl01tl/manifests/authentik/PrometheusRule-authentik-valkey.yaml
+++ b/clusters/cl01tl/manifests/authentik/PrometheusRule-authentik-valkey.yaml
@@ -6,7 +6,7 @@ metadata:
    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: authentik
-    app.kubernetes.io/version: "9.0.3"
+    app.kubernetes.io/version: "9.0.4"
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/part-of: valkey
 spec:
--- a/clusters/cl01tl/manifests/authentik/Service-authentik-cloudflared.yaml
+++ b/clusters/cl01tl/manifests/authentik/Service-authentik-cloudflared.yaml
@@ -0,0 +1,23 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: authentik-cloudflared
+  labels:
+    app.kubernetes.io/instance: authentik
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: cloudflared
+    app.kubernetes.io/service: authentik-cloudflared
+    app.kubernetes.io/version: 2026.3.0
+    helm.sh/chart: cloudflared-3.0.0
+  namespace: authentik
+spec:
+  type: ClusterIP
+  ports:
+    - port: 20241
+      targetPort: 20241
+      protocol: TCP
+      name: metrics
+  selector:
+    app.kubernetes.io/controller: main
+    app.kubernetes.io/instance: authentik
+    app.kubernetes.io/name: cloudflared
--- a/clusters/cl01tl/manifests/authentik/Service-authentik-valkey-headless.yaml
+++ b/clusters/cl01tl/manifests/authentik/Service-authentik-valkey-headless.yaml
@@ -6,7 +6,7 @@ metadata:
    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: authentik
-    app.kubernetes.io/version: "9.0.3"
+    app.kubernetes.io/version: "9.0.4"
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/component: headless
 spec:
--- a/clusters/cl01tl/manifests/authentik/Service-authentik-valkey-metrics.yaml
+++ b/clusters/cl01tl/manifests/authentik/Service-authentik-valkey-metrics.yaml
@@ -6,7 +6,7 @@ metadata:
    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: authentik
-    app.kubernetes.io/version: "9.0.3"
+    app.kubernetes.io/version: "9.0.4"
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/component: metrics
    app.kubernetes.io/part-of: valkey
--- a/clusters/cl01tl/manifests/authentik/Service-authentik-valkey-read.yaml
+++ b/clusters/cl01tl/manifests/authentik/Service-authentik-valkey-read.yaml
@@ -6,7 +6,7 @@ metadata:
    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: authentik
-    app.kubernetes.io/version: "9.0.3"
+    app.kubernetes.io/version: "9.0.4"
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/component: read
 spec:
--- a/clusters/cl01tl/manifests/authentik/Service-authentik-valkey.yaml
+++ b/clusters/cl01tl/manifests/authentik/Service-authentik-valkey.yaml
@@ -6,7 +6,7 @@ metadata:
    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: authentik
-    app.kubernetes.io/version: "9.0.3"
+    app.kubernetes.io/version: "9.0.4"
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/component: primary
 spec:
--- a/clusters/cl01tl/manifests/authentik/ServiceAccount-authentik-cloudflared.yaml
+++ b/clusters/cl01tl/manifests/authentik/ServiceAccount-authentik-cloudflared.yaml
@@ -7,5 +7,5 @@ metadata:
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: cloudflared
    app.kubernetes.io/version: 2026.3.0
-    helm.sh/chart: cloudflared-2.7.1
+    helm.sh/chart: cloudflared-3.0.0
  namespace: authentik
--- a/clusters/cl01tl/manifests/authentik/ServiceAccount-authentik-valkey.yaml
+++ b/clusters/cl01tl/manifests/authentik/ServiceAccount-authentik-valkey.yaml
@@ -6,6 +6,6 @@ metadata:
    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: authentik
-    app.kubernetes.io/version: "9.0.3"
+    app.kubernetes.io/version: "9.0.4"
    app.kubernetes.io/managed-by: Helm
 automountServiceAccountToken: false
--- a/clusters/cl01tl/manifests/authentik/ServiceMonitor-authentik-cloudflared.yaml
+++ b/clusters/cl01tl/manifests/authentik/ServiceMonitor-authentik-cloudflared.yaml
@@ -0,0 +1,25 @@
+apiVersion: monitoring.coreos.com/v1
+kind: ServiceMonitor
+metadata:
+  name: authentik-cloudflared
+  labels:
+    app.kubernetes.io/instance: authentik
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: cloudflared
+    app.kubernetes.io/version: 2026.3.0
+    helm.sh/chart: cloudflared-3.0.0
+  namespace: authentik
+spec:
+  jobLabel: app.kubernetes.io/name
+  namespaceSelector:
+    matchNames:
+      - authentik
+  selector:
+    matchLabels:
+      app.kubernetes.io/instance: cloudflared
+      app.kubernetes.io/name: cloudflared
+  endpoints:
+    - interval: 30s
+      path: /metrics
+      port: metrics
+      scrapeTimeout: 10s
--- a/clusters/cl01tl/manifests/authentik/ServiceMonitor-authentik-valkey.yaml
+++ b/clusters/cl01tl/manifests/authentik/ServiceMonitor-authentik-valkey.yaml
@@ -6,7 +6,7 @@ metadata:
    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: authentik
-    app.kubernetes.io/version: "9.0.3"
+    app.kubernetes.io/version: "9.0.4"
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/part-of: valkey
    app.kubernetes.io/component: service-monitor
--- a/clusters/cl01tl/manifests/authentik/StatefulSet-authentik-valkey.yaml
+++ b/clusters/cl01tl/manifests/authentik/StatefulSet-authentik-valkey.yaml
@@ -6,7 +6,7 @@ metadata:
    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: authentik
-    app.kubernetes.io/version: "9.0.3"
+    app.kubernetes.io/version: "9.0.4"
    app.kubernetes.io/managed-by: Helm
 spec:
  serviceName: authentik-valkey-headless
@@ -32,7 +32,7 @@ spec:
        app.kubernetes.io/name: valkey
        app.kubernetes.io/instance: authentik
      annotations:
-        checksum/initconfig: "5891897632e2eabc8b0c61cc49fea0f6"
+        checksum/initconfig: "89a44900a681d6ea516ee7bd3b55d326"
    spec:
      automountServiceAccountToken: false
      serviceAccountName: authentik-valkey
@@ -44,7 +44,7 @@ spec:
          type: RuntimeDefault
      initContainers:
        - name: authentik-valkey-init
-          image: docker.io/valkey/valkey:9.0.3@sha256:3b55fbaa0cd93cf0d9d961f405e4dfcc70efe325e2d84da207a0a8e6d8fde4f9
+          image: docker.io/valkey/valkey:9.0.4@sha256:8436e10bc65c94886a91d4415b6a6dfa9cb5a306fb3b996e5bb67cd2b4854193
          imagePullPolicy: IfNotPresent
          securityContext:
            allowPrivilegeEscalation: false
@@ -67,7 +67,7 @@ spec:
              mountPath: /scripts
      containers:
        - name: authentik-valkey
-          image: docker.io/valkey/valkey:9.0.3@sha256:3b55fbaa0cd93cf0d9d961f405e4dfcc70efe325e2d84da207a0a8e6d8fde4f9
+          image: docker.io/valkey/valkey:9.0.4@sha256:8436e10bc65c94886a91d4415b6a6dfa9cb5a306fb3b996e5bb67cd2b4854193
          imagePullPolicy: IfNotPresent
          command: ["valkey-server"]
          args: ["/data/conf/valkey.conf"]