Automated Manifest Update (#2698)

This PR contains newly rendered Kubernetes manifests automatically generated by the CI workflow.

Reviewed-on: #2698
Co-authored-by: gitea-bot <gitea-bot@alexlebens.net>
Co-committed-by: gitea-bot <gitea-bot@alexlebens.net>

clusters/cl01tl/manifests/matrix-synapse/StatefulSet-mautrix-whatsapp.yaml

@@ -67,7 +67,7 @@ spec:
               readOnly: true
               subPath: mautrix-whatsapp-registration.yaml
       containers:
-        - image: dock.mau.dev/mautrix/whatsapp:v0.2512.0
+        - image: dock.mau.dev/mautrix/whatsapp:v0.2511.0
           imagePullPolicy: IfNotPresent
           name: main
           resources:

clusters/cl01tl/manifests/tailscale-operator/CustomResourceDefinition-recorders.tailscale.com.yaml

@@ -68,11 +68,6 @@ spec:
                     Corresponds to --ui tsrecorder flag https://tailscale.com/kb/1246/tailscale-ssh-session-recording#deploy-a-recorder-node.
                     Required if S3 storage is not set up, to ensure that recordings are accessible.
                   type: boolean
-                replicas:
-                  description: Replicas specifies how many instances of tsrecorder to run. Defaults to 1.
-                  type: integer
-                  format: int32
-                  minimum: 0
                 statefulSet:
                   description: |-
                     Configuration parameters for the Recorder's StatefulSet. The operator
@@ -1688,9 +1683,6 @@ spec:
                   items:
                     type: string
                     pattern: ^tag:[a-zA-Z][a-zA-Z0-9-]*$
-              x-kubernetes-validations:
-                - rule: '!(self.replicas > 1 && (!has(self.storage) || !has(self.storage.s3)))'
-                  message: S3 storage must be used when deploying multiple Recorder replicas
             status:
               description: |-
                 RecorderStatus describes the status of the recorder. This is set

clusters/cl01tl/manifests/tailscale-operator/Deployment-operator.yaml

@@ -16,9 +16,13 @@ spec:
         app: operator
     spec:
       serviceAccountName: operator
+      volumes:
+        - name: oauth
+          secret:
+            secretName: operator-oauth
       containers:
         - name: operator
-          image: tailscale/k8s-operator:v1.92.3
+          image: tailscale/k8s-operator:v1.90.9
           imagePullPolicy: Always
           env:
             - name: OPERATOR_INITIAL_TAGS
@@ -37,8 +41,12 @@ spec:
               value:
             - name: OPERATOR_INGRESS_CLASS_NAME
               value: tailscale
+            - name: CLIENT_ID_FILE
+              value: /oauth/client_id
+            - name: CLIENT_SECRET_FILE
+              value: /oauth/client_secret
             - name: PROXY_IMAGE
-              value: tailscale/tailscale:v1.92.3
+              value: tailscale/tailscale:v1.90.9
             - name: PROXY_TAGS
               value: tag:k8s
             - name: APISERVER_PROXY
@@ -55,5 +63,9 @@ spec:
               valueFrom:
                 fieldRef:
                   fieldPath: metadata.uid
+          volumeMounts:
+            - name: oauth
+              mountPath: /oauth
+              readOnly: true
       nodeSelector:
         kubernetes.io/os: linux