From bf6bdb0b57a0121b03529349ec641f8966a12e80 Mon Sep 17 00:00:00 2001 From: gitea-bot Date: Fri, 8 May 2026 02:27:20 +0000 Subject: [PATCH] chore: Update manifests after change --- .../authentik/Deployment-authentik-cloudflared.yaml | 6 +++--- .../ExternalSecret-authentik-cloudflared-secret.yaml | 4 ++-- .../ServiceAccount-authentik-cloudflared.yaml | 11 +++++++++++ .../Deployment-element-web-cloudflared.yaml | 6 +++--- ...ExternalSecret-element-web-cloudflared-secret.yaml | 4 ++-- .../ServiceAccount-element-web-cloudflared.yaml | 11 +++++++++++ .../foldergram/Deployment-foldergram-cloudflared.yaml | 6 +++--- .../manifests/foldergram/Deployment-foldergram.yaml | 2 +- .../ExternalSecret-foldergram-cloudflared-secret.yaml | 4 ++-- .../ServiceAccount-foldergram-cloudflared.yaml | 11 +++++++++++ .../foldergram/ServiceAccount-foldergram.yaml | 10 ++++++++++ .../freshrss/Deployment-freshrss-cloudflared.yaml | 6 +++--- .../manifests/freshrss/Deployment-freshrss.yaml | 2 +- .../ExternalSecret-freshrss-cloudflared-secret.yaml | 4 ++-- .../freshrss/ServiceAccount-freshrss-cloudflared.yaml | 11 +++++++++++ .../manifests/freshrss/ServiceAccount-freshrss.yaml | 10 ++++++++++ .../manifests/gitea/Deployment-gitea-cloudflared.yaml | 6 +++--- .../ExternalSecret-gitea-cloudflared-secret.yaml | 4 ++-- .../gitea/ServiceAccount-gitea-cloudflared.yaml | 11 +++++++++++ ...nJob-karakeep-karakeep-assets-external-rclone.yaml | 2 +- .../CronJob-karakeep-karakeep-assets-rclone.yaml | 2 +- .../karakeep/Deployment-karakeep-cloudflared.yaml | 6 +++--- .../manifests/karakeep/Deployment-karakeep.yaml | 2 +- .../ExternalSecret-karakeep-cloudflared-secret.yaml | 4 ++-- .../karakeep/ServiceAccount-karakeep-cloudflared.yaml | 11 +++++++++++ ...ount-karakeep-karakeep-assets-external-rclone.yaml | 11 +++++++++++ ...erviceAccount-karakeep-karakeep-assets-rclone.yaml | 11 +++++++++++ .../manifests/karakeep/ServiceAccount-karakeep.yaml | 10 ++++++++++ .../manifests/karakeep/ServiceMonitor-karakeep.yaml | 2 +- ...eployment-matrix-synapse-hookshot-cloudflared.yaml | 6 +++--- ...Deployment-matrix-synapse-synapse-cloudflared.yaml | 6 +++--- ...et-matrix-synapse-hookshot-cloudflared-secret.yaml | 4 ++-- ...ret-matrix-synapse-synapse-cloudflared-secret.yaml | 4 ++-- .../ServiceAccount-matrix-hookshot.yaml | 10 ++++++++++ ...ceAccount-matrix-synapse-hookshot-cloudflared.yaml | 11 +++++++++++ ...iceAccount-matrix-synapse-synapse-cloudflared.yaml | 11 +++++++++++ .../ServiceAccount-mautrix-discord.yaml | 10 ++++++++++ .../ServiceAccount-mautrix-whatsapp.yaml | 10 ++++++++++ .../ServiceMonitor-matrix-hookshot.yaml | 2 +- .../matrix-synapse/StatefulSet-mautrix-discord.yaml | 2 +- .../matrix-synapse/StatefulSet-mautrix-whatsapp.yaml | 2 +- .../outline/Deployment-outline-cloudflared.yaml | 6 +++--- .../cl01tl/manifests/outline/Deployment-outline.yaml | 2 +- .../ExternalSecret-outline-cloudflared-secret.yaml | 4 ++-- .../outline/ServiceAccount-outline-cloudflared.yaml | 11 +++++++++++ .../manifests/outline/ServiceAccount-outline.yaml | 10 ++++++++++ .../postiz/Deployment-postiz-cloudflared.yaml | 6 +++--- .../manifests/postiz/Deployment-postiz-main.yaml | 2 +- .../manifests/postiz/Deployment-postiz-spotlight.yaml | 2 +- .../ExternalSecret-postiz-cloudflared-secret.yaml | 4 ++-- .../postiz/ServiceAccount-postiz-cloudflared.yaml | 11 +++++++++++ .../manifests/postiz/ServiceAccount-postiz.yaml | 10 ++++++++++ .../manifests/rybbit/Deployment-rybbit-backend.yaml | 2 +- .../rybbit/Deployment-rybbit-clickhouse.yaml | 2 +- .../manifests/rybbit/Deployment-rybbit-client.yaml | 2 +- .../rybbit/Deployment-rybbit-cloudflared.yaml | 6 +++--- .../ExternalSecret-rybbit-cloudflared-secret.yaml | 4 ++-- .../rybbit/ServiceAccount-rybbit-cloudflared.yaml | 11 +++++++++++ .../manifests/rybbit/ServiceAccount-rybbit.yaml | 10 ++++++++++ .../manifests/rybbit/ServiceMonitor-rybbit.yaml | 2 +- .../Deployment-site-documentation-cloudflared.yaml | 6 +++--- .../Deployment-site-documentation.yaml | 2 +- ...lSecret-site-documentation-cloudflared-secret.yaml | 4 ++-- ...ServiceAccount-site-documentation-cloudflared.yaml | 11 +++++++++++ .../ServiceAccount-site-documentation.yaml | 10 ++++++++++ .../Deployment-site-profile-cloudflared.yaml | 6 +++--- .../site-profile/Deployment-site-profile.yaml | 2 +- ...xternalSecret-site-profile-cloudflared-secret.yaml | 4 ++-- .../ServiceAccount-site-profile-cloudflared.yaml | 11 +++++++++++ .../site-profile/ServiceAccount-site-profile.yaml | 10 ++++++++++ .../Deployment-site-saralebens-cloudflared.yaml | 6 +++--- .../site-saralebens/Deployment-site-saralebens.yaml | 2 +- ...rnalSecret-site-saralebens-cloudflared-secret.yaml | 4 ++-- .../ServiceAccount-site-saralebens-cloudflared.yaml | 11 +++++++++++ .../ServiceAccount-site-saralebens.yaml | 10 ++++++++++ .../Deployment-vaultwarden-cloudflared.yaml | 6 +++--- .../manifests/vaultwarden/Deployment-vaultwarden.yaml | 2 +- ...ExternalSecret-vaultwarden-cloudflared-secret.yaml | 4 ++-- .../ServiceAccount-vaultwarden-cloudflared.yaml | 11 +++++++++++ .../vaultwarden/ServiceAccount-vaultwarden.yaml | 10 ++++++++++ 80 files changed, 412 insertions(+), 95 deletions(-) create mode 100644 clusters/cl01tl/manifests/authentik/ServiceAccount-authentik-cloudflared.yaml create mode 100644 clusters/cl01tl/manifests/element-web/ServiceAccount-element-web-cloudflared.yaml create mode 100644 clusters/cl01tl/manifests/foldergram/ServiceAccount-foldergram-cloudflared.yaml create mode 100644 clusters/cl01tl/manifests/foldergram/ServiceAccount-foldergram.yaml create mode 100644 clusters/cl01tl/manifests/freshrss/ServiceAccount-freshrss-cloudflared.yaml create mode 100644 clusters/cl01tl/manifests/freshrss/ServiceAccount-freshrss.yaml create mode 100644 clusters/cl01tl/manifests/gitea/ServiceAccount-gitea-cloudflared.yaml create mode 100644 clusters/cl01tl/manifests/karakeep/ServiceAccount-karakeep-cloudflared.yaml create mode 100644 clusters/cl01tl/manifests/karakeep/ServiceAccount-karakeep-karakeep-assets-external-rclone.yaml create mode 100644 clusters/cl01tl/manifests/karakeep/ServiceAccount-karakeep-karakeep-assets-rclone.yaml create mode 100644 clusters/cl01tl/manifests/karakeep/ServiceAccount-karakeep.yaml create mode 100644 clusters/cl01tl/manifests/matrix-synapse/ServiceAccount-matrix-hookshot.yaml create mode 100644 clusters/cl01tl/manifests/matrix-synapse/ServiceAccount-matrix-synapse-hookshot-cloudflared.yaml create mode 100644 clusters/cl01tl/manifests/matrix-synapse/ServiceAccount-matrix-synapse-synapse-cloudflared.yaml create mode 100644 clusters/cl01tl/manifests/matrix-synapse/ServiceAccount-mautrix-discord.yaml create mode 100644 clusters/cl01tl/manifests/matrix-synapse/ServiceAccount-mautrix-whatsapp.yaml create mode 100644 clusters/cl01tl/manifests/outline/ServiceAccount-outline-cloudflared.yaml create mode 100644 clusters/cl01tl/manifests/outline/ServiceAccount-outline.yaml create mode 100644 clusters/cl01tl/manifests/postiz/ServiceAccount-postiz-cloudflared.yaml create mode 100644 clusters/cl01tl/manifests/postiz/ServiceAccount-postiz.yaml create mode 100644 clusters/cl01tl/manifests/rybbit/ServiceAccount-rybbit-cloudflared.yaml create mode 100644 clusters/cl01tl/manifests/rybbit/ServiceAccount-rybbit.yaml create mode 100644 clusters/cl01tl/manifests/site-documentation/ServiceAccount-site-documentation-cloudflared.yaml create mode 100644 clusters/cl01tl/manifests/site-documentation/ServiceAccount-site-documentation.yaml create mode 100644 clusters/cl01tl/manifests/site-profile/ServiceAccount-site-profile-cloudflared.yaml create mode 100644 clusters/cl01tl/manifests/site-profile/ServiceAccount-site-profile.yaml create mode 100644 clusters/cl01tl/manifests/site-saralebens/ServiceAccount-site-saralebens-cloudflared.yaml create mode 100644 clusters/cl01tl/manifests/site-saralebens/ServiceAccount-site-saralebens.yaml create mode 100644 clusters/cl01tl/manifests/vaultwarden/ServiceAccount-vaultwarden-cloudflared.yaml create mode 100644 clusters/cl01tl/manifests/vaultwarden/ServiceAccount-vaultwarden.yaml diff --git a/clusters/cl01tl/manifests/authentik/Deployment-authentik-cloudflared.yaml b/clusters/cl01tl/manifests/authentik/Deployment-authentik-cloudflared.yaml index 8541440a9..2de658fe1 100644 --- a/clusters/cl01tl/manifests/authentik/Deployment-authentik-cloudflared.yaml +++ b/clusters/cl01tl/manifests/authentik/Deployment-authentik-cloudflared.yaml @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: cloudflared app.kubernetes.io/version: 2026.3.0 - helm.sh/chart: cloudflared-2.6.0 + helm.sh/chart: cloudflared-2.7.1 namespace: authentik spec: revisionHistoryLimit: 3 @@ -28,8 +28,8 @@ spec: app.kubernetes.io/name: cloudflared spec: enableServiceLinks: false - serviceAccountName: default - automountServiceAccountToken: true + serviceAccountName: authentik + automountServiceAccountToken: false hostIPC: false hostNetwork: false hostPID: false diff --git a/clusters/cl01tl/manifests/authentik/ExternalSecret-authentik-cloudflared-secret.yaml b/clusters/cl01tl/manifests/authentik/ExternalSecret-authentik-cloudflared-secret.yaml index dc05ce37c..a13a359a0 100644 --- a/clusters/cl01tl/manifests/authentik/ExternalSecret-authentik-cloudflared-secret.yaml +++ b/clusters/cl01tl/manifests/authentik/ExternalSecret-authentik-cloudflared-secret.yaml @@ -4,10 +4,10 @@ metadata: name: authentik-cloudflared-secret namespace: authentik labels: - helm.sh/chart: cloudflared-2.6.0 + helm.sh/chart: cloudflared-2.7.1 app.kubernetes.io/instance: authentik app.kubernetes.io/part-of: authentik - app.kubernetes.io/version: "2.6.0" + app.kubernetes.io/version: "2.7.1" app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: authentik-cloudflared-secret spec: diff --git a/clusters/cl01tl/manifests/authentik/ServiceAccount-authentik-cloudflared.yaml b/clusters/cl01tl/manifests/authentik/ServiceAccount-authentik-cloudflared.yaml new file mode 100644 index 000000000..9163704f9 --- /dev/null +++ b/clusters/cl01tl/manifests/authentik/ServiceAccount-authentik-cloudflared.yaml @@ -0,0 +1,11 @@ +apiVersion: v1 +kind: ServiceAccount +metadata: + name: authentik-cloudflared + labels: + app.kubernetes.io/instance: authentik + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: cloudflared + app.kubernetes.io/version: 2026.3.0 + helm.sh/chart: cloudflared-2.7.1 + namespace: authentik diff --git a/clusters/cl01tl/manifests/element-web/Deployment-element-web-cloudflared.yaml b/clusters/cl01tl/manifests/element-web/Deployment-element-web-cloudflared.yaml index f2f0238fc..0287aecb7 100644 --- a/clusters/cl01tl/manifests/element-web/Deployment-element-web-cloudflared.yaml +++ b/clusters/cl01tl/manifests/element-web/Deployment-element-web-cloudflared.yaml @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: cloudflared app.kubernetes.io/version: 2026.3.0 - helm.sh/chart: cloudflared-2.6.0 + helm.sh/chart: cloudflared-2.7.1 namespace: element-web spec: revisionHistoryLimit: 3 @@ -28,8 +28,8 @@ spec: app.kubernetes.io/name: cloudflared spec: enableServiceLinks: false - serviceAccountName: default - automountServiceAccountToken: true + serviceAccountName: element-web + automountServiceAccountToken: false hostIPC: false hostNetwork: false hostPID: false diff --git a/clusters/cl01tl/manifests/element-web/ExternalSecret-element-web-cloudflared-secret.yaml b/clusters/cl01tl/manifests/element-web/ExternalSecret-element-web-cloudflared-secret.yaml index 19da4f19e..36d13c342 100644 --- a/clusters/cl01tl/manifests/element-web/ExternalSecret-element-web-cloudflared-secret.yaml +++ b/clusters/cl01tl/manifests/element-web/ExternalSecret-element-web-cloudflared-secret.yaml @@ -4,10 +4,10 @@ metadata: name: element-web-cloudflared-secret namespace: element-web labels: - helm.sh/chart: cloudflared-2.6.0 + helm.sh/chart: cloudflared-2.7.1 app.kubernetes.io/instance: element-web app.kubernetes.io/part-of: element-web - app.kubernetes.io/version: "2.6.0" + app.kubernetes.io/version: "2.7.1" app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: element-web-cloudflared-secret spec: diff --git a/clusters/cl01tl/manifests/element-web/ServiceAccount-element-web-cloudflared.yaml b/clusters/cl01tl/manifests/element-web/ServiceAccount-element-web-cloudflared.yaml new file mode 100644 index 000000000..e9b8b1bfa --- /dev/null +++ b/clusters/cl01tl/manifests/element-web/ServiceAccount-element-web-cloudflared.yaml @@ -0,0 +1,11 @@ +apiVersion: v1 +kind: ServiceAccount +metadata: + name: element-web-cloudflared + labels: + app.kubernetes.io/instance: element-web + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: cloudflared + app.kubernetes.io/version: 2026.3.0 + helm.sh/chart: cloudflared-2.7.1 + namespace: element-web diff --git a/clusters/cl01tl/manifests/foldergram/Deployment-foldergram-cloudflared.yaml b/clusters/cl01tl/manifests/foldergram/Deployment-foldergram-cloudflared.yaml index b033a5e99..4bda3a653 100644 --- a/clusters/cl01tl/manifests/foldergram/Deployment-foldergram-cloudflared.yaml +++ b/clusters/cl01tl/manifests/foldergram/Deployment-foldergram-cloudflared.yaml @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: cloudflared app.kubernetes.io/version: 2026.3.0 - helm.sh/chart: cloudflared-2.6.0 + helm.sh/chart: cloudflared-2.7.1 namespace: foldergram spec: revisionHistoryLimit: 3 @@ -28,8 +28,8 @@ spec: app.kubernetes.io/name: cloudflared spec: enableServiceLinks: false - serviceAccountName: default - automountServiceAccountToken: true + serviceAccountName: foldergram + automountServiceAccountToken: false hostIPC: false hostNetwork: false hostPID: false diff --git a/clusters/cl01tl/manifests/foldergram/Deployment-foldergram.yaml b/clusters/cl01tl/manifests/foldergram/Deployment-foldergram.yaml index 69ced1359..0648126d3 100644 --- a/clusters/cl01tl/manifests/foldergram/Deployment-foldergram.yaml +++ b/clusters/cl01tl/manifests/foldergram/Deployment-foldergram.yaml @@ -27,7 +27,7 @@ spec: app.kubernetes.io/name: foldergram spec: enableServiceLinks: false - serviceAccountName: default + serviceAccountName: foldergram automountServiceAccountToken: false securityContext: fsGroup: 1000 diff --git a/clusters/cl01tl/manifests/foldergram/ExternalSecret-foldergram-cloudflared-secret.yaml b/clusters/cl01tl/manifests/foldergram/ExternalSecret-foldergram-cloudflared-secret.yaml index 3e44a263c..32e06db03 100644 --- a/clusters/cl01tl/manifests/foldergram/ExternalSecret-foldergram-cloudflared-secret.yaml +++ b/clusters/cl01tl/manifests/foldergram/ExternalSecret-foldergram-cloudflared-secret.yaml @@ -4,10 +4,10 @@ metadata: name: foldergram-cloudflared-secret namespace: foldergram labels: - helm.sh/chart: cloudflared-2.6.0 + helm.sh/chart: cloudflared-2.7.1 app.kubernetes.io/instance: foldergram app.kubernetes.io/part-of: foldergram - app.kubernetes.io/version: "2.6.0" + app.kubernetes.io/version: "2.7.1" app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: foldergram-cloudflared-secret spec: diff --git a/clusters/cl01tl/manifests/foldergram/ServiceAccount-foldergram-cloudflared.yaml b/clusters/cl01tl/manifests/foldergram/ServiceAccount-foldergram-cloudflared.yaml new file mode 100644 index 000000000..1e5525e1e --- /dev/null +++ b/clusters/cl01tl/manifests/foldergram/ServiceAccount-foldergram-cloudflared.yaml @@ -0,0 +1,11 @@ +apiVersion: v1 +kind: ServiceAccount +metadata: + name: foldergram-cloudflared + labels: + app.kubernetes.io/instance: foldergram + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: cloudflared + app.kubernetes.io/version: 2026.3.0 + helm.sh/chart: cloudflared-2.7.1 + namespace: foldergram diff --git a/clusters/cl01tl/manifests/foldergram/ServiceAccount-foldergram.yaml b/clusters/cl01tl/manifests/foldergram/ServiceAccount-foldergram.yaml new file mode 100644 index 000000000..dc57ea366 --- /dev/null +++ b/clusters/cl01tl/manifests/foldergram/ServiceAccount-foldergram.yaml @@ -0,0 +1,10 @@ +apiVersion: v1 +kind: ServiceAccount +metadata: + name: foldergram + labels: + app.kubernetes.io/instance: foldergram + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: foldergram + helm.sh/chart: foldergram-5.0.0 + namespace: foldergram diff --git a/clusters/cl01tl/manifests/freshrss/Deployment-freshrss-cloudflared.yaml b/clusters/cl01tl/manifests/freshrss/Deployment-freshrss-cloudflared.yaml index e6458af57..82cb1df48 100644 --- a/clusters/cl01tl/manifests/freshrss/Deployment-freshrss-cloudflared.yaml +++ b/clusters/cl01tl/manifests/freshrss/Deployment-freshrss-cloudflared.yaml @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: cloudflared app.kubernetes.io/version: 2026.3.0 - helm.sh/chart: cloudflared-2.6.0 + helm.sh/chart: cloudflared-2.7.1 namespace: freshrss spec: revisionHistoryLimit: 3 @@ -28,8 +28,8 @@ spec: app.kubernetes.io/name: cloudflared spec: enableServiceLinks: false - serviceAccountName: default - automountServiceAccountToken: true + serviceAccountName: freshrss + automountServiceAccountToken: false hostIPC: false hostNetwork: false hostPID: false diff --git a/clusters/cl01tl/manifests/freshrss/Deployment-freshrss.yaml b/clusters/cl01tl/manifests/freshrss/Deployment-freshrss.yaml index 55a2aaf21..ef03086a4 100644 --- a/clusters/cl01tl/manifests/freshrss/Deployment-freshrss.yaml +++ b/clusters/cl01tl/manifests/freshrss/Deployment-freshrss.yaml @@ -27,7 +27,7 @@ spec: app.kubernetes.io/name: freshrss spec: enableServiceLinks: false - serviceAccountName: default + serviceAccountName: freshrss automountServiceAccountToken: false hostIPC: false hostNetwork: false diff --git a/clusters/cl01tl/manifests/freshrss/ExternalSecret-freshrss-cloudflared-secret.yaml b/clusters/cl01tl/manifests/freshrss/ExternalSecret-freshrss-cloudflared-secret.yaml index 32afa07ee..4efd75784 100644 --- a/clusters/cl01tl/manifests/freshrss/ExternalSecret-freshrss-cloudflared-secret.yaml +++ b/clusters/cl01tl/manifests/freshrss/ExternalSecret-freshrss-cloudflared-secret.yaml @@ -4,10 +4,10 @@ metadata: name: freshrss-cloudflared-secret namespace: freshrss labels: - helm.sh/chart: cloudflared-2.6.0 + helm.sh/chart: cloudflared-2.7.1 app.kubernetes.io/instance: freshrss app.kubernetes.io/part-of: freshrss - app.kubernetes.io/version: "2.6.0" + app.kubernetes.io/version: "2.7.1" app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: freshrss-cloudflared-secret spec: diff --git a/clusters/cl01tl/manifests/freshrss/ServiceAccount-freshrss-cloudflared.yaml b/clusters/cl01tl/manifests/freshrss/ServiceAccount-freshrss-cloudflared.yaml new file mode 100644 index 000000000..3dfe0b20f --- /dev/null +++ b/clusters/cl01tl/manifests/freshrss/ServiceAccount-freshrss-cloudflared.yaml @@ -0,0 +1,11 @@ +apiVersion: v1 +kind: ServiceAccount +metadata: + name: freshrss-cloudflared + labels: + app.kubernetes.io/instance: freshrss + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: cloudflared + app.kubernetes.io/version: 2026.3.0 + helm.sh/chart: cloudflared-2.7.1 + namespace: freshrss diff --git a/clusters/cl01tl/manifests/freshrss/ServiceAccount-freshrss.yaml b/clusters/cl01tl/manifests/freshrss/ServiceAccount-freshrss.yaml new file mode 100644 index 000000000..5015344f0 --- /dev/null +++ b/clusters/cl01tl/manifests/freshrss/ServiceAccount-freshrss.yaml @@ -0,0 +1,10 @@ +apiVersion: v1 +kind: ServiceAccount +metadata: + name: freshrss + labels: + app.kubernetes.io/instance: freshrss + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: freshrss + helm.sh/chart: freshrss-5.0.0 + namespace: freshrss diff --git a/clusters/cl01tl/manifests/gitea/Deployment-gitea-cloudflared.yaml b/clusters/cl01tl/manifests/gitea/Deployment-gitea-cloudflared.yaml index ed6384613..e007dacd0 100644 --- a/clusters/cl01tl/manifests/gitea/Deployment-gitea-cloudflared.yaml +++ b/clusters/cl01tl/manifests/gitea/Deployment-gitea-cloudflared.yaml @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: cloudflared app.kubernetes.io/version: 2026.3.0 - helm.sh/chart: cloudflared-2.6.0 + helm.sh/chart: cloudflared-2.7.1 namespace: gitea spec: revisionHistoryLimit: 3 @@ -28,8 +28,8 @@ spec: app.kubernetes.io/name: cloudflared spec: enableServiceLinks: false - serviceAccountName: default - automountServiceAccountToken: true + serviceAccountName: gitea + automountServiceAccountToken: false hostIPC: false hostNetwork: false hostPID: false diff --git a/clusters/cl01tl/manifests/gitea/ExternalSecret-gitea-cloudflared-secret.yaml b/clusters/cl01tl/manifests/gitea/ExternalSecret-gitea-cloudflared-secret.yaml index 895189b60..7e6b26e50 100644 --- a/clusters/cl01tl/manifests/gitea/ExternalSecret-gitea-cloudflared-secret.yaml +++ b/clusters/cl01tl/manifests/gitea/ExternalSecret-gitea-cloudflared-secret.yaml @@ -4,10 +4,10 @@ metadata: name: gitea-cloudflared-secret namespace: gitea labels: - helm.sh/chart: cloudflared-2.6.0 + helm.sh/chart: cloudflared-2.7.1 app.kubernetes.io/instance: gitea app.kubernetes.io/part-of: gitea - app.kubernetes.io/version: "2.6.0" + app.kubernetes.io/version: "2.7.1" app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: gitea-cloudflared-secret spec: diff --git a/clusters/cl01tl/manifests/gitea/ServiceAccount-gitea-cloudflared.yaml b/clusters/cl01tl/manifests/gitea/ServiceAccount-gitea-cloudflared.yaml new file mode 100644 index 000000000..ccd9067ab --- /dev/null +++ b/clusters/cl01tl/manifests/gitea/ServiceAccount-gitea-cloudflared.yaml @@ -0,0 +1,11 @@ +apiVersion: v1 +kind: ServiceAccount +metadata: + name: gitea-cloudflared + labels: + app.kubernetes.io/instance: gitea + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: cloudflared + app.kubernetes.io/version: 2026.3.0 + helm.sh/chart: cloudflared-2.7.1 + namespace: gitea diff --git a/clusters/cl01tl/manifests/karakeep/CronJob-karakeep-karakeep-assets-external-rclone.yaml b/clusters/cl01tl/manifests/karakeep/CronJob-karakeep-karakeep-assets-external-rclone.yaml index e97ed8a95..2b1e112a7 100644 --- a/clusters/cl01tl/manifests/karakeep/CronJob-karakeep-karakeep-assets-external-rclone.yaml +++ b/clusters/cl01tl/manifests/karakeep/CronJob-karakeep-karakeep-assets-external-rclone.yaml @@ -30,7 +30,7 @@ spec: app.kubernetes.io/name: karakeep-assets-external-rclone spec: enableServiceLinks: false - serviceAccountName: default + serviceAccountName: karakeep automountServiceAccountToken: true hostIPC: false hostNetwork: false diff --git a/clusters/cl01tl/manifests/karakeep/CronJob-karakeep-karakeep-assets-rclone.yaml b/clusters/cl01tl/manifests/karakeep/CronJob-karakeep-karakeep-assets-rclone.yaml index a35870137..475e792c6 100644 --- a/clusters/cl01tl/manifests/karakeep/CronJob-karakeep-karakeep-assets-rclone.yaml +++ b/clusters/cl01tl/manifests/karakeep/CronJob-karakeep-karakeep-assets-rclone.yaml @@ -30,7 +30,7 @@ spec: app.kubernetes.io/name: karakeep-assets-rclone spec: enableServiceLinks: false - serviceAccountName: default + serviceAccountName: karakeep automountServiceAccountToken: true hostIPC: false hostNetwork: false diff --git a/clusters/cl01tl/manifests/karakeep/Deployment-karakeep-cloudflared.yaml b/clusters/cl01tl/manifests/karakeep/Deployment-karakeep-cloudflared.yaml index 98ed6c169..cd2549c66 100644 --- a/clusters/cl01tl/manifests/karakeep/Deployment-karakeep-cloudflared.yaml +++ b/clusters/cl01tl/manifests/karakeep/Deployment-karakeep-cloudflared.yaml @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: cloudflared app.kubernetes.io/version: 2026.3.0 - helm.sh/chart: cloudflared-2.6.0 + helm.sh/chart: cloudflared-2.7.1 namespace: karakeep spec: revisionHistoryLimit: 3 @@ -28,8 +28,8 @@ spec: app.kubernetes.io/name: cloudflared spec: enableServiceLinks: false - serviceAccountName: default - automountServiceAccountToken: true + serviceAccountName: karakeep + automountServiceAccountToken: false hostIPC: false hostNetwork: false hostPID: false diff --git a/clusters/cl01tl/manifests/karakeep/Deployment-karakeep.yaml b/clusters/cl01tl/manifests/karakeep/Deployment-karakeep.yaml index 41b6ee78b..e8f525e06 100644 --- a/clusters/cl01tl/manifests/karakeep/Deployment-karakeep.yaml +++ b/clusters/cl01tl/manifests/karakeep/Deployment-karakeep.yaml @@ -27,7 +27,7 @@ spec: app.kubernetes.io/name: karakeep spec: enableServiceLinks: false - serviceAccountName: default + serviceAccountName: karakeep automountServiceAccountToken: false hostIPC: false hostNetwork: false diff --git a/clusters/cl01tl/manifests/karakeep/ExternalSecret-karakeep-cloudflared-secret.yaml b/clusters/cl01tl/manifests/karakeep/ExternalSecret-karakeep-cloudflared-secret.yaml index 4c08b7c21..175e17df4 100644 --- a/clusters/cl01tl/manifests/karakeep/ExternalSecret-karakeep-cloudflared-secret.yaml +++ b/clusters/cl01tl/manifests/karakeep/ExternalSecret-karakeep-cloudflared-secret.yaml @@ -4,10 +4,10 @@ metadata: name: karakeep-cloudflared-secret namespace: karakeep labels: - helm.sh/chart: cloudflared-2.6.0 + helm.sh/chart: cloudflared-2.7.1 app.kubernetes.io/instance: karakeep app.kubernetes.io/part-of: karakeep - app.kubernetes.io/version: "2.6.0" + app.kubernetes.io/version: "2.7.1" app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: karakeep-cloudflared-secret spec: diff --git a/clusters/cl01tl/manifests/karakeep/ServiceAccount-karakeep-cloudflared.yaml b/clusters/cl01tl/manifests/karakeep/ServiceAccount-karakeep-cloudflared.yaml new file mode 100644 index 000000000..2ef91bf26 --- /dev/null +++ b/clusters/cl01tl/manifests/karakeep/ServiceAccount-karakeep-cloudflared.yaml @@ -0,0 +1,11 @@ +apiVersion: v1 +kind: ServiceAccount +metadata: + name: karakeep-cloudflared + labels: + app.kubernetes.io/instance: karakeep + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: cloudflared + app.kubernetes.io/version: 2026.3.0 + helm.sh/chart: cloudflared-2.7.1 + namespace: karakeep diff --git a/clusters/cl01tl/manifests/karakeep/ServiceAccount-karakeep-karakeep-assets-external-rclone.yaml b/clusters/cl01tl/manifests/karakeep/ServiceAccount-karakeep-karakeep-assets-external-rclone.yaml new file mode 100644 index 000000000..650f9f785 --- /dev/null +++ b/clusters/cl01tl/manifests/karakeep/ServiceAccount-karakeep-karakeep-assets-external-rclone.yaml @@ -0,0 +1,11 @@ +apiVersion: v1 +kind: ServiceAccount +metadata: + name: karakeep-karakeep-assets-external-rclone + labels: + app.kubernetes.io/instance: karakeep + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: karakeep-assets-external-rclone + app.kubernetes.io/version: v1.74.0 + helm.sh/chart: rclone-karakeep-assets-external-0.7.0 + namespace: karakeep diff --git a/clusters/cl01tl/manifests/karakeep/ServiceAccount-karakeep-karakeep-assets-rclone.yaml b/clusters/cl01tl/manifests/karakeep/ServiceAccount-karakeep-karakeep-assets-rclone.yaml new file mode 100644 index 000000000..dec95f5d2 --- /dev/null +++ b/clusters/cl01tl/manifests/karakeep/ServiceAccount-karakeep-karakeep-assets-rclone.yaml @@ -0,0 +1,11 @@ +apiVersion: v1 +kind: ServiceAccount +metadata: + name: karakeep-karakeep-assets-rclone + labels: + app.kubernetes.io/instance: karakeep + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: karakeep-assets-rclone + app.kubernetes.io/version: v1.74.0 + helm.sh/chart: rclone-karakeep-assets-remote-0.7.0 + namespace: karakeep diff --git a/clusters/cl01tl/manifests/karakeep/ServiceAccount-karakeep.yaml b/clusters/cl01tl/manifests/karakeep/ServiceAccount-karakeep.yaml new file mode 100644 index 000000000..1883030ad --- /dev/null +++ b/clusters/cl01tl/manifests/karakeep/ServiceAccount-karakeep.yaml @@ -0,0 +1,10 @@ +apiVersion: v1 +kind: ServiceAccount +metadata: + name: karakeep + labels: + app.kubernetes.io/instance: karakeep + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: karakeep + helm.sh/chart: karakeep-5.0.0 + namespace: karakeep diff --git a/clusters/cl01tl/manifests/karakeep/ServiceMonitor-karakeep.yaml b/clusters/cl01tl/manifests/karakeep/ServiceMonitor-karakeep.yaml index 41e99cabf..e459fab80 100644 --- a/clusters/cl01tl/manifests/karakeep/ServiceMonitor-karakeep.yaml +++ b/clusters/cl01tl/manifests/karakeep/ServiceMonitor-karakeep.yaml @@ -9,7 +9,7 @@ metadata: helm.sh/chart: karakeep-5.0.0 namespace: karakeep spec: - jobLabel: karakeep + jobLabel: app.kubernetes.io/name namespaceSelector: matchNames: - karakeep diff --git a/clusters/cl01tl/manifests/matrix-synapse/Deployment-matrix-synapse-hookshot-cloudflared.yaml b/clusters/cl01tl/manifests/matrix-synapse/Deployment-matrix-synapse-hookshot-cloudflared.yaml index 3a93bf9c3..35dee7113 100644 --- a/clusters/cl01tl/manifests/matrix-synapse/Deployment-matrix-synapse-hookshot-cloudflared.yaml +++ b/clusters/cl01tl/manifests/matrix-synapse/Deployment-matrix-synapse-hookshot-cloudflared.yaml @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: hookshot-cloudflared app.kubernetes.io/version: 2026.3.0 - helm.sh/chart: cloudflared-hookshot-2.6.0 + helm.sh/chart: cloudflared-hookshot-2.7.1 namespace: matrix-synapse spec: revisionHistoryLimit: 3 @@ -28,8 +28,8 @@ spec: app.kubernetes.io/name: hookshot-cloudflared spec: enableServiceLinks: false - serviceAccountName: default - automountServiceAccountToken: true + serviceAccountName: matrix-synapse + automountServiceAccountToken: false hostIPC: false hostNetwork: false hostPID: false diff --git a/clusters/cl01tl/manifests/matrix-synapse/Deployment-matrix-synapse-synapse-cloudflared.yaml b/clusters/cl01tl/manifests/matrix-synapse/Deployment-matrix-synapse-synapse-cloudflared.yaml index a73c06efa..221559db0 100644 --- a/clusters/cl01tl/manifests/matrix-synapse/Deployment-matrix-synapse-synapse-cloudflared.yaml +++ b/clusters/cl01tl/manifests/matrix-synapse/Deployment-matrix-synapse-synapse-cloudflared.yaml @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: synapse-cloudflared app.kubernetes.io/version: 2026.3.0 - helm.sh/chart: cloudflared-synapse-2.6.0 + helm.sh/chart: cloudflared-synapse-2.7.1 namespace: matrix-synapse spec: revisionHistoryLimit: 3 @@ -28,8 +28,8 @@ spec: app.kubernetes.io/name: synapse-cloudflared spec: enableServiceLinks: false - serviceAccountName: default - automountServiceAccountToken: true + serviceAccountName: matrix-synapse + automountServiceAccountToken: false hostIPC: false hostNetwork: false hostPID: false diff --git a/clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-matrix-synapse-hookshot-cloudflared-secret.yaml b/clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-matrix-synapse-hookshot-cloudflared-secret.yaml index bfab93b3d..8f753322b 100644 --- a/clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-matrix-synapse-hookshot-cloudflared-secret.yaml +++ b/clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-matrix-synapse-hookshot-cloudflared-secret.yaml @@ -4,10 +4,10 @@ metadata: name: matrix-synapse-hookshot-cloudflared-secret namespace: matrix-synapse labels: - helm.sh/chart: cloudflared-hookshot-2.6.0 + helm.sh/chart: cloudflared-hookshot-2.7.1 app.kubernetes.io/instance: matrix-synapse app.kubernetes.io/part-of: matrix-synapse - app.kubernetes.io/version: "2.6.0" + app.kubernetes.io/version: "2.7.1" app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: matrix-synapse-hookshot-cloudflared-secret spec: diff --git a/clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-matrix-synapse-synapse-cloudflared-secret.yaml b/clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-matrix-synapse-synapse-cloudflared-secret.yaml index c457b91b4..e14894b5b 100644 --- a/clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-matrix-synapse-synapse-cloudflared-secret.yaml +++ b/clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-matrix-synapse-synapse-cloudflared-secret.yaml @@ -4,10 +4,10 @@ metadata: name: matrix-synapse-synapse-cloudflared-secret namespace: matrix-synapse labels: - helm.sh/chart: cloudflared-synapse-2.6.0 + helm.sh/chart: cloudflared-synapse-2.7.1 app.kubernetes.io/instance: matrix-synapse app.kubernetes.io/part-of: matrix-synapse - app.kubernetes.io/version: "2.6.0" + app.kubernetes.io/version: "2.7.1" app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: matrix-synapse-synapse-cloudflared-secret spec: diff --git a/clusters/cl01tl/manifests/matrix-synapse/ServiceAccount-matrix-hookshot.yaml b/clusters/cl01tl/manifests/matrix-synapse/ServiceAccount-matrix-hookshot.yaml new file mode 100644 index 000000000..beeeda61f --- /dev/null +++ b/clusters/cl01tl/manifests/matrix-synapse/ServiceAccount-matrix-hookshot.yaml @@ -0,0 +1,10 @@ +apiVersion: v1 +kind: ServiceAccount +metadata: + name: matrix-hookshot + labels: + app.kubernetes.io/instance: matrix-synapse + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: matrix-hookshot + helm.sh/chart: matrix-hookshot-5.0.0 + namespace: matrix-synapse diff --git a/clusters/cl01tl/manifests/matrix-synapse/ServiceAccount-matrix-synapse-hookshot-cloudflared.yaml b/clusters/cl01tl/manifests/matrix-synapse/ServiceAccount-matrix-synapse-hookshot-cloudflared.yaml new file mode 100644 index 000000000..942bbe57e --- /dev/null +++ b/clusters/cl01tl/manifests/matrix-synapse/ServiceAccount-matrix-synapse-hookshot-cloudflared.yaml @@ -0,0 +1,11 @@ +apiVersion: v1 +kind: ServiceAccount +metadata: + name: matrix-synapse-hookshot-cloudflared + labels: + app.kubernetes.io/instance: matrix-synapse + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: hookshot-cloudflared + app.kubernetes.io/version: 2026.3.0 + helm.sh/chart: cloudflared-hookshot-2.7.1 + namespace: matrix-synapse diff --git a/clusters/cl01tl/manifests/matrix-synapse/ServiceAccount-matrix-synapse-synapse-cloudflared.yaml b/clusters/cl01tl/manifests/matrix-synapse/ServiceAccount-matrix-synapse-synapse-cloudflared.yaml new file mode 100644 index 000000000..12256cda7 --- /dev/null +++ b/clusters/cl01tl/manifests/matrix-synapse/ServiceAccount-matrix-synapse-synapse-cloudflared.yaml @@ -0,0 +1,11 @@ +apiVersion: v1 +kind: ServiceAccount +metadata: + name: matrix-synapse-synapse-cloudflared + labels: + app.kubernetes.io/instance: matrix-synapse + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: synapse-cloudflared + app.kubernetes.io/version: 2026.3.0 + helm.sh/chart: cloudflared-synapse-2.7.1 + namespace: matrix-synapse diff --git a/clusters/cl01tl/manifests/matrix-synapse/ServiceAccount-mautrix-discord.yaml b/clusters/cl01tl/manifests/matrix-synapse/ServiceAccount-mautrix-discord.yaml new file mode 100644 index 000000000..c29ee3039 --- /dev/null +++ b/clusters/cl01tl/manifests/matrix-synapse/ServiceAccount-mautrix-discord.yaml @@ -0,0 +1,10 @@ +apiVersion: v1 +kind: ServiceAccount +metadata: + name: mautrix-discord + labels: + app.kubernetes.io/instance: matrix-synapse + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: mautrix-discord + helm.sh/chart: mautrix-discord-5.0.0 + namespace: matrix-synapse diff --git a/clusters/cl01tl/manifests/matrix-synapse/ServiceAccount-mautrix-whatsapp.yaml b/clusters/cl01tl/manifests/matrix-synapse/ServiceAccount-mautrix-whatsapp.yaml new file mode 100644 index 000000000..fb5ee5ef2 --- /dev/null +++ b/clusters/cl01tl/manifests/matrix-synapse/ServiceAccount-mautrix-whatsapp.yaml @@ -0,0 +1,10 @@ +apiVersion: v1 +kind: ServiceAccount +metadata: + name: mautrix-whatsapp + labels: + app.kubernetes.io/instance: matrix-synapse + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: mautrix-whatsapp + helm.sh/chart: mautrix-whatsapp-5.0.0 + namespace: matrix-synapse diff --git a/clusters/cl01tl/manifests/matrix-synapse/ServiceMonitor-matrix-hookshot.yaml b/clusters/cl01tl/manifests/matrix-synapse/ServiceMonitor-matrix-hookshot.yaml index 9e268fce0..7c3b6e9f3 100644 --- a/clusters/cl01tl/manifests/matrix-synapse/ServiceMonitor-matrix-hookshot.yaml +++ b/clusters/cl01tl/manifests/matrix-synapse/ServiceMonitor-matrix-hookshot.yaml @@ -9,7 +9,7 @@ metadata: helm.sh/chart: matrix-hookshot-5.0.0 namespace: matrix-synapse spec: - jobLabel: matrix-hookshot + jobLabel: app.kubernetes.io/name namespaceSelector: matchNames: - matrix-synapse diff --git a/clusters/cl01tl/manifests/matrix-synapse/StatefulSet-mautrix-discord.yaml b/clusters/cl01tl/manifests/matrix-synapse/StatefulSet-mautrix-discord.yaml index 7414d04bb..940126615 100644 --- a/clusters/cl01tl/manifests/matrix-synapse/StatefulSet-mautrix-discord.yaml +++ b/clusters/cl01tl/manifests/matrix-synapse/StatefulSet-mautrix-discord.yaml @@ -29,7 +29,7 @@ spec: app.kubernetes.io/name: mautrix-discord spec: enableServiceLinks: false - serviceAccountName: default + serviceAccountName: matrix-synapse automountServiceAccountToken: false hostIPC: false hostNetwork: false diff --git a/clusters/cl01tl/manifests/matrix-synapse/StatefulSet-mautrix-whatsapp.yaml b/clusters/cl01tl/manifests/matrix-synapse/StatefulSet-mautrix-whatsapp.yaml index 0f7dbc5cb..086e1d2f9 100644 --- a/clusters/cl01tl/manifests/matrix-synapse/StatefulSet-mautrix-whatsapp.yaml +++ b/clusters/cl01tl/manifests/matrix-synapse/StatefulSet-mautrix-whatsapp.yaml @@ -29,7 +29,7 @@ spec: app.kubernetes.io/name: mautrix-whatsapp spec: enableServiceLinks: false - serviceAccountName: default + serviceAccountName: matrix-synapse automountServiceAccountToken: false hostIPC: false hostNetwork: false diff --git a/clusters/cl01tl/manifests/outline/Deployment-outline-cloudflared.yaml b/clusters/cl01tl/manifests/outline/Deployment-outline-cloudflared.yaml index 65cf9cf4a..047d03606 100644 --- a/clusters/cl01tl/manifests/outline/Deployment-outline-cloudflared.yaml +++ b/clusters/cl01tl/manifests/outline/Deployment-outline-cloudflared.yaml @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: cloudflared app.kubernetes.io/version: 2026.3.0 - helm.sh/chart: cloudflared-2.6.0 + helm.sh/chart: cloudflared-2.7.1 namespace: outline spec: revisionHistoryLimit: 3 @@ -28,8 +28,8 @@ spec: app.kubernetes.io/name: cloudflared spec: enableServiceLinks: false - serviceAccountName: default - automountServiceAccountToken: true + serviceAccountName: outline + automountServiceAccountToken: false hostIPC: false hostNetwork: false hostPID: false diff --git a/clusters/cl01tl/manifests/outline/Deployment-outline.yaml b/clusters/cl01tl/manifests/outline/Deployment-outline.yaml index db19008a2..8b65c8830 100644 --- a/clusters/cl01tl/manifests/outline/Deployment-outline.yaml +++ b/clusters/cl01tl/manifests/outline/Deployment-outline.yaml @@ -27,7 +27,7 @@ spec: app.kubernetes.io/name: outline spec: enableServiceLinks: false - serviceAccountName: default + serviceAccountName: outline automountServiceAccountToken: false securityContext: fsGroup: 1001 diff --git a/clusters/cl01tl/manifests/outline/ExternalSecret-outline-cloudflared-secret.yaml b/clusters/cl01tl/manifests/outline/ExternalSecret-outline-cloudflared-secret.yaml index 2e5a81261..f47054b54 100644 --- a/clusters/cl01tl/manifests/outline/ExternalSecret-outline-cloudflared-secret.yaml +++ b/clusters/cl01tl/manifests/outline/ExternalSecret-outline-cloudflared-secret.yaml @@ -4,10 +4,10 @@ metadata: name: outline-cloudflared-secret namespace: outline labels: - helm.sh/chart: cloudflared-2.6.0 + helm.sh/chart: cloudflared-2.7.1 app.kubernetes.io/instance: outline app.kubernetes.io/part-of: outline - app.kubernetes.io/version: "2.6.0" + app.kubernetes.io/version: "2.7.1" app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: outline-cloudflared-secret spec: diff --git a/clusters/cl01tl/manifests/outline/ServiceAccount-outline-cloudflared.yaml b/clusters/cl01tl/manifests/outline/ServiceAccount-outline-cloudflared.yaml new file mode 100644 index 000000000..c5eb02f43 --- /dev/null +++ b/clusters/cl01tl/manifests/outline/ServiceAccount-outline-cloudflared.yaml @@ -0,0 +1,11 @@ +apiVersion: v1 +kind: ServiceAccount +metadata: + name: outline-cloudflared + labels: + app.kubernetes.io/instance: outline + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: cloudflared + app.kubernetes.io/version: 2026.3.0 + helm.sh/chart: cloudflared-2.7.1 + namespace: outline diff --git a/clusters/cl01tl/manifests/outline/ServiceAccount-outline.yaml b/clusters/cl01tl/manifests/outline/ServiceAccount-outline.yaml new file mode 100644 index 000000000..2640ff409 --- /dev/null +++ b/clusters/cl01tl/manifests/outline/ServiceAccount-outline.yaml @@ -0,0 +1,10 @@ +apiVersion: v1 +kind: ServiceAccount +metadata: + name: outline + labels: + app.kubernetes.io/instance: outline + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: outline + helm.sh/chart: outline-5.0.0 + namespace: outline diff --git a/clusters/cl01tl/manifests/postiz/Deployment-postiz-cloudflared.yaml b/clusters/cl01tl/manifests/postiz/Deployment-postiz-cloudflared.yaml index 55005da14..94d94957d 100644 --- a/clusters/cl01tl/manifests/postiz/Deployment-postiz-cloudflared.yaml +++ b/clusters/cl01tl/manifests/postiz/Deployment-postiz-cloudflared.yaml @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: cloudflared app.kubernetes.io/version: 2026.3.0 - helm.sh/chart: cloudflared-2.6.0 + helm.sh/chart: cloudflared-2.7.1 namespace: postiz spec: revisionHistoryLimit: 3 @@ -28,8 +28,8 @@ spec: app.kubernetes.io/name: cloudflared spec: enableServiceLinks: false - serviceAccountName: default - automountServiceAccountToken: true + serviceAccountName: postiz + automountServiceAccountToken: false hostIPC: false hostNetwork: false hostPID: false diff --git a/clusters/cl01tl/manifests/postiz/Deployment-postiz-main.yaml b/clusters/cl01tl/manifests/postiz/Deployment-postiz-main.yaml index 84ae0396c..adf21aee1 100644 --- a/clusters/cl01tl/manifests/postiz/Deployment-postiz-main.yaml +++ b/clusters/cl01tl/manifests/postiz/Deployment-postiz-main.yaml @@ -27,7 +27,7 @@ spec: app.kubernetes.io/name: postiz spec: enableServiceLinks: false - serviceAccountName: default + serviceAccountName: postiz automountServiceAccountToken: false hostIPC: false hostNetwork: false diff --git a/clusters/cl01tl/manifests/postiz/Deployment-postiz-spotlight.yaml b/clusters/cl01tl/manifests/postiz/Deployment-postiz-spotlight.yaml index 1d521fdad..2fd1984d0 100644 --- a/clusters/cl01tl/manifests/postiz/Deployment-postiz-spotlight.yaml +++ b/clusters/cl01tl/manifests/postiz/Deployment-postiz-spotlight.yaml @@ -27,7 +27,7 @@ spec: app.kubernetes.io/name: postiz spec: enableServiceLinks: false - serviceAccountName: default + serviceAccountName: postiz automountServiceAccountToken: false hostIPC: false hostNetwork: false diff --git a/clusters/cl01tl/manifests/postiz/ExternalSecret-postiz-cloudflared-secret.yaml b/clusters/cl01tl/manifests/postiz/ExternalSecret-postiz-cloudflared-secret.yaml index 732074cb8..648552e96 100644 --- a/clusters/cl01tl/manifests/postiz/ExternalSecret-postiz-cloudflared-secret.yaml +++ b/clusters/cl01tl/manifests/postiz/ExternalSecret-postiz-cloudflared-secret.yaml @@ -4,10 +4,10 @@ metadata: name: postiz-cloudflared-secret namespace: postiz labels: - helm.sh/chart: cloudflared-2.6.0 + helm.sh/chart: cloudflared-2.7.1 app.kubernetes.io/instance: postiz app.kubernetes.io/part-of: postiz - app.kubernetes.io/version: "2.6.0" + app.kubernetes.io/version: "2.7.1" app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: postiz-cloudflared-secret spec: diff --git a/clusters/cl01tl/manifests/postiz/ServiceAccount-postiz-cloudflared.yaml b/clusters/cl01tl/manifests/postiz/ServiceAccount-postiz-cloudflared.yaml new file mode 100644 index 000000000..d67610346 --- /dev/null +++ b/clusters/cl01tl/manifests/postiz/ServiceAccount-postiz-cloudflared.yaml @@ -0,0 +1,11 @@ +apiVersion: v1 +kind: ServiceAccount +metadata: + name: postiz-cloudflared + labels: + app.kubernetes.io/instance: postiz + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: cloudflared + app.kubernetes.io/version: 2026.3.0 + helm.sh/chart: cloudflared-2.7.1 + namespace: postiz diff --git a/clusters/cl01tl/manifests/postiz/ServiceAccount-postiz.yaml b/clusters/cl01tl/manifests/postiz/ServiceAccount-postiz.yaml new file mode 100644 index 000000000..afcbb18d3 --- /dev/null +++ b/clusters/cl01tl/manifests/postiz/ServiceAccount-postiz.yaml @@ -0,0 +1,10 @@ +apiVersion: v1 +kind: ServiceAccount +metadata: + name: postiz + labels: + app.kubernetes.io/instance: postiz + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: postiz + helm.sh/chart: postiz-5.0.0 + namespace: postiz diff --git a/clusters/cl01tl/manifests/rybbit/Deployment-rybbit-backend.yaml b/clusters/cl01tl/manifests/rybbit/Deployment-rybbit-backend.yaml index f105c95bd..abc959638 100644 --- a/clusters/cl01tl/manifests/rybbit/Deployment-rybbit-backend.yaml +++ b/clusters/cl01tl/manifests/rybbit/Deployment-rybbit-backend.yaml @@ -29,7 +29,7 @@ spec: app.kubernetes.io/name: rybbit spec: enableServiceLinks: false - serviceAccountName: default + serviceAccountName: rybbit automountServiceAccountToken: false hostIPC: false hostNetwork: false diff --git a/clusters/cl01tl/manifests/rybbit/Deployment-rybbit-clickhouse.yaml b/clusters/cl01tl/manifests/rybbit/Deployment-rybbit-clickhouse.yaml index 71d59e00e..d823016a7 100644 --- a/clusters/cl01tl/manifests/rybbit/Deployment-rybbit-clickhouse.yaml +++ b/clusters/cl01tl/manifests/rybbit/Deployment-rybbit-clickhouse.yaml @@ -29,7 +29,7 @@ spec: app.kubernetes.io/name: rybbit spec: enableServiceLinks: false - serviceAccountName: default + serviceAccountName: rybbit automountServiceAccountToken: false hostIPC: false hostNetwork: false diff --git a/clusters/cl01tl/manifests/rybbit/Deployment-rybbit-client.yaml b/clusters/cl01tl/manifests/rybbit/Deployment-rybbit-client.yaml index a6266a237..a458128b8 100644 --- a/clusters/cl01tl/manifests/rybbit/Deployment-rybbit-client.yaml +++ b/clusters/cl01tl/manifests/rybbit/Deployment-rybbit-client.yaml @@ -29,7 +29,7 @@ spec: app.kubernetes.io/name: rybbit spec: enableServiceLinks: false - serviceAccountName: default + serviceAccountName: rybbit automountServiceAccountToken: false hostIPC: false hostNetwork: false diff --git a/clusters/cl01tl/manifests/rybbit/Deployment-rybbit-cloudflared.yaml b/clusters/cl01tl/manifests/rybbit/Deployment-rybbit-cloudflared.yaml index e19ba7691..bdabd5f77 100644 --- a/clusters/cl01tl/manifests/rybbit/Deployment-rybbit-cloudflared.yaml +++ b/clusters/cl01tl/manifests/rybbit/Deployment-rybbit-cloudflared.yaml @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: cloudflared app.kubernetes.io/version: 2026.3.0 - helm.sh/chart: cloudflared-2.6.0 + helm.sh/chart: cloudflared-2.7.1 namespace: rybbit spec: revisionHistoryLimit: 3 @@ -28,8 +28,8 @@ spec: app.kubernetes.io/name: cloudflared spec: enableServiceLinks: false - serviceAccountName: default - automountServiceAccountToken: true + serviceAccountName: rybbit + automountServiceAccountToken: false hostIPC: false hostNetwork: false hostPID: false diff --git a/clusters/cl01tl/manifests/rybbit/ExternalSecret-rybbit-cloudflared-secret.yaml b/clusters/cl01tl/manifests/rybbit/ExternalSecret-rybbit-cloudflared-secret.yaml index d4bf7547d..8d5ece5d0 100644 --- a/clusters/cl01tl/manifests/rybbit/ExternalSecret-rybbit-cloudflared-secret.yaml +++ b/clusters/cl01tl/manifests/rybbit/ExternalSecret-rybbit-cloudflared-secret.yaml @@ -4,10 +4,10 @@ metadata: name: rybbit-cloudflared-secret namespace: rybbit labels: - helm.sh/chart: cloudflared-2.6.0 + helm.sh/chart: cloudflared-2.7.1 app.kubernetes.io/instance: rybbit app.kubernetes.io/part-of: rybbit - app.kubernetes.io/version: "2.6.0" + app.kubernetes.io/version: "2.7.1" app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: rybbit-cloudflared-secret spec: diff --git a/clusters/cl01tl/manifests/rybbit/ServiceAccount-rybbit-cloudflared.yaml b/clusters/cl01tl/manifests/rybbit/ServiceAccount-rybbit-cloudflared.yaml new file mode 100644 index 000000000..47788408d --- /dev/null +++ b/clusters/cl01tl/manifests/rybbit/ServiceAccount-rybbit-cloudflared.yaml @@ -0,0 +1,11 @@ +apiVersion: v1 +kind: ServiceAccount +metadata: + name: rybbit-cloudflared + labels: + app.kubernetes.io/instance: rybbit + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: cloudflared + app.kubernetes.io/version: 2026.3.0 + helm.sh/chart: cloudflared-2.7.1 + namespace: rybbit diff --git a/clusters/cl01tl/manifests/rybbit/ServiceAccount-rybbit.yaml b/clusters/cl01tl/manifests/rybbit/ServiceAccount-rybbit.yaml new file mode 100644 index 000000000..7a1a2650f --- /dev/null +++ b/clusters/cl01tl/manifests/rybbit/ServiceAccount-rybbit.yaml @@ -0,0 +1,10 @@ +apiVersion: v1 +kind: ServiceAccount +metadata: + name: rybbit + labels: + app.kubernetes.io/instance: rybbit + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: rybbit + helm.sh/chart: rybbit-5.0.0 + namespace: rybbit diff --git a/clusters/cl01tl/manifests/rybbit/ServiceMonitor-rybbit.yaml b/clusters/cl01tl/manifests/rybbit/ServiceMonitor-rybbit.yaml index 9a08e9cef..e43bdb17b 100644 --- a/clusters/cl01tl/manifests/rybbit/ServiceMonitor-rybbit.yaml +++ b/clusters/cl01tl/manifests/rybbit/ServiceMonitor-rybbit.yaml @@ -9,7 +9,7 @@ metadata: helm.sh/chart: rybbit-5.0.0 namespace: rybbit spec: - jobLabel: rybbit + jobLabel: app.kubernetes.io/name namespaceSelector: matchNames: - rybbit diff --git a/clusters/cl01tl/manifests/site-documentation/Deployment-site-documentation-cloudflared.yaml b/clusters/cl01tl/manifests/site-documentation/Deployment-site-documentation-cloudflared.yaml index 69a6404e4..57badf9b9 100644 --- a/clusters/cl01tl/manifests/site-documentation/Deployment-site-documentation-cloudflared.yaml +++ b/clusters/cl01tl/manifests/site-documentation/Deployment-site-documentation-cloudflared.yaml @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: cloudflared app.kubernetes.io/version: 2026.3.0 - helm.sh/chart: cloudflared-2.6.0 + helm.sh/chart: cloudflared-2.7.1 namespace: site-documentation spec: revisionHistoryLimit: 3 @@ -28,8 +28,8 @@ spec: app.kubernetes.io/name: cloudflared spec: enableServiceLinks: false - serviceAccountName: default - automountServiceAccountToken: true + serviceAccountName: site-documentation + automountServiceAccountToken: false hostIPC: false hostNetwork: false hostPID: false diff --git a/clusters/cl01tl/manifests/site-documentation/Deployment-site-documentation.yaml b/clusters/cl01tl/manifests/site-documentation/Deployment-site-documentation.yaml index db7e76934..d519c45d6 100644 --- a/clusters/cl01tl/manifests/site-documentation/Deployment-site-documentation.yaml +++ b/clusters/cl01tl/manifests/site-documentation/Deployment-site-documentation.yaml @@ -27,7 +27,7 @@ spec: app.kubernetes.io/name: site-documentation spec: enableServiceLinks: false - serviceAccountName: default + serviceAccountName: site-documentation automountServiceAccountToken: false hostIPC: false hostNetwork: false diff --git a/clusters/cl01tl/manifests/site-documentation/ExternalSecret-site-documentation-cloudflared-secret.yaml b/clusters/cl01tl/manifests/site-documentation/ExternalSecret-site-documentation-cloudflared-secret.yaml index b46ab4f90..6dd40ee79 100644 --- a/clusters/cl01tl/manifests/site-documentation/ExternalSecret-site-documentation-cloudflared-secret.yaml +++ b/clusters/cl01tl/manifests/site-documentation/ExternalSecret-site-documentation-cloudflared-secret.yaml @@ -4,10 +4,10 @@ metadata: name: site-documentation-cloudflared-secret namespace: site-documentation labels: - helm.sh/chart: cloudflared-2.6.0 + helm.sh/chart: cloudflared-2.7.1 app.kubernetes.io/instance: site-documentation app.kubernetes.io/part-of: site-documentation - app.kubernetes.io/version: "2.6.0" + app.kubernetes.io/version: "2.7.1" app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: site-documentation-cloudflared-secret spec: diff --git a/clusters/cl01tl/manifests/site-documentation/ServiceAccount-site-documentation-cloudflared.yaml b/clusters/cl01tl/manifests/site-documentation/ServiceAccount-site-documentation-cloudflared.yaml new file mode 100644 index 000000000..3e8966dd6 --- /dev/null +++ b/clusters/cl01tl/manifests/site-documentation/ServiceAccount-site-documentation-cloudflared.yaml @@ -0,0 +1,11 @@ +apiVersion: v1 +kind: ServiceAccount +metadata: + name: site-documentation-cloudflared + labels: + app.kubernetes.io/instance: site-documentation + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: cloudflared + app.kubernetes.io/version: 2026.3.0 + helm.sh/chart: cloudflared-2.7.1 + namespace: site-documentation diff --git a/clusters/cl01tl/manifests/site-documentation/ServiceAccount-site-documentation.yaml b/clusters/cl01tl/manifests/site-documentation/ServiceAccount-site-documentation.yaml new file mode 100644 index 000000000..941dd40d8 --- /dev/null +++ b/clusters/cl01tl/manifests/site-documentation/ServiceAccount-site-documentation.yaml @@ -0,0 +1,10 @@ +apiVersion: v1 +kind: ServiceAccount +metadata: + name: site-documentation + labels: + app.kubernetes.io/instance: site-documentation + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: site-documentation + helm.sh/chart: site-documentation-5.0.0 + namespace: site-documentation diff --git a/clusters/cl01tl/manifests/site-profile/Deployment-site-profile-cloudflared.yaml b/clusters/cl01tl/manifests/site-profile/Deployment-site-profile-cloudflared.yaml index f9b49509b..257c2028c 100644 --- a/clusters/cl01tl/manifests/site-profile/Deployment-site-profile-cloudflared.yaml +++ b/clusters/cl01tl/manifests/site-profile/Deployment-site-profile-cloudflared.yaml @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: cloudflared app.kubernetes.io/version: 2026.3.0 - helm.sh/chart: cloudflared-2.6.0 + helm.sh/chart: cloudflared-2.7.1 namespace: site-profile spec: revisionHistoryLimit: 3 @@ -28,8 +28,8 @@ spec: app.kubernetes.io/name: cloudflared spec: enableServiceLinks: false - serviceAccountName: default - automountServiceAccountToken: true + serviceAccountName: site-profile + automountServiceAccountToken: false hostIPC: false hostNetwork: false hostPID: false diff --git a/clusters/cl01tl/manifests/site-profile/Deployment-site-profile.yaml b/clusters/cl01tl/manifests/site-profile/Deployment-site-profile.yaml index fd889515e..f72124200 100644 --- a/clusters/cl01tl/manifests/site-profile/Deployment-site-profile.yaml +++ b/clusters/cl01tl/manifests/site-profile/Deployment-site-profile.yaml @@ -27,7 +27,7 @@ spec: app.kubernetes.io/name: site-profile spec: enableServiceLinks: false - serviceAccountName: default + serviceAccountName: site-profile automountServiceAccountToken: false hostIPC: false hostNetwork: false diff --git a/clusters/cl01tl/manifests/site-profile/ExternalSecret-site-profile-cloudflared-secret.yaml b/clusters/cl01tl/manifests/site-profile/ExternalSecret-site-profile-cloudflared-secret.yaml index 5609cad95..4d77a5bbb 100644 --- a/clusters/cl01tl/manifests/site-profile/ExternalSecret-site-profile-cloudflared-secret.yaml +++ b/clusters/cl01tl/manifests/site-profile/ExternalSecret-site-profile-cloudflared-secret.yaml @@ -4,10 +4,10 @@ metadata: name: site-profile-cloudflared-secret namespace: site-profile labels: - helm.sh/chart: cloudflared-2.6.0 + helm.sh/chart: cloudflared-2.7.1 app.kubernetes.io/instance: site-profile app.kubernetes.io/part-of: site-profile - app.kubernetes.io/version: "2.6.0" + app.kubernetes.io/version: "2.7.1" app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: site-profile-cloudflared-secret spec: diff --git a/clusters/cl01tl/manifests/site-profile/ServiceAccount-site-profile-cloudflared.yaml b/clusters/cl01tl/manifests/site-profile/ServiceAccount-site-profile-cloudflared.yaml new file mode 100644 index 000000000..e977897ce --- /dev/null +++ b/clusters/cl01tl/manifests/site-profile/ServiceAccount-site-profile-cloudflared.yaml @@ -0,0 +1,11 @@ +apiVersion: v1 +kind: ServiceAccount +metadata: + name: site-profile-cloudflared + labels: + app.kubernetes.io/instance: site-profile + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: cloudflared + app.kubernetes.io/version: 2026.3.0 + helm.sh/chart: cloudflared-2.7.1 + namespace: site-profile diff --git a/clusters/cl01tl/manifests/site-profile/ServiceAccount-site-profile.yaml b/clusters/cl01tl/manifests/site-profile/ServiceAccount-site-profile.yaml new file mode 100644 index 000000000..375ea6d27 --- /dev/null +++ b/clusters/cl01tl/manifests/site-profile/ServiceAccount-site-profile.yaml @@ -0,0 +1,10 @@ +apiVersion: v1 +kind: ServiceAccount +metadata: + name: site-profile + labels: + app.kubernetes.io/instance: site-profile + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: site-profile + helm.sh/chart: site-profile-5.0.0 + namespace: site-profile diff --git a/clusters/cl01tl/manifests/site-saralebens/Deployment-site-saralebens-cloudflared.yaml b/clusters/cl01tl/manifests/site-saralebens/Deployment-site-saralebens-cloudflared.yaml index 64eb7edcc..28961973c 100644 --- a/clusters/cl01tl/manifests/site-saralebens/Deployment-site-saralebens-cloudflared.yaml +++ b/clusters/cl01tl/manifests/site-saralebens/Deployment-site-saralebens-cloudflared.yaml @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: cloudflared app.kubernetes.io/version: 2026.3.0 - helm.sh/chart: cloudflared-2.6.0 + helm.sh/chart: cloudflared-2.7.1 namespace: site-saralebens spec: revisionHistoryLimit: 3 @@ -28,8 +28,8 @@ spec: app.kubernetes.io/name: cloudflared spec: enableServiceLinks: false - serviceAccountName: default - automountServiceAccountToken: true + serviceAccountName: site-saralebens + automountServiceAccountToken: false hostIPC: false hostNetwork: false hostPID: false diff --git a/clusters/cl01tl/manifests/site-saralebens/Deployment-site-saralebens.yaml b/clusters/cl01tl/manifests/site-saralebens/Deployment-site-saralebens.yaml index 5dc6b430d..9693eba3b 100644 --- a/clusters/cl01tl/manifests/site-saralebens/Deployment-site-saralebens.yaml +++ b/clusters/cl01tl/manifests/site-saralebens/Deployment-site-saralebens.yaml @@ -27,7 +27,7 @@ spec: app.kubernetes.io/name: site-saralebens spec: enableServiceLinks: false - serviceAccountName: default + serviceAccountName: site-saralebens automountServiceAccountToken: false hostIPC: false hostNetwork: false diff --git a/clusters/cl01tl/manifests/site-saralebens/ExternalSecret-site-saralebens-cloudflared-secret.yaml b/clusters/cl01tl/manifests/site-saralebens/ExternalSecret-site-saralebens-cloudflared-secret.yaml index 57ae28b72..1121783fb 100644 --- a/clusters/cl01tl/manifests/site-saralebens/ExternalSecret-site-saralebens-cloudflared-secret.yaml +++ b/clusters/cl01tl/manifests/site-saralebens/ExternalSecret-site-saralebens-cloudflared-secret.yaml @@ -4,10 +4,10 @@ metadata: name: site-saralebens-cloudflared-secret namespace: site-saralebens labels: - helm.sh/chart: cloudflared-2.6.0 + helm.sh/chart: cloudflared-2.7.1 app.kubernetes.io/instance: site-saralebens app.kubernetes.io/part-of: site-saralebens - app.kubernetes.io/version: "2.6.0" + app.kubernetes.io/version: "2.7.1" app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: site-saralebens-cloudflared-secret spec: diff --git a/clusters/cl01tl/manifests/site-saralebens/ServiceAccount-site-saralebens-cloudflared.yaml b/clusters/cl01tl/manifests/site-saralebens/ServiceAccount-site-saralebens-cloudflared.yaml new file mode 100644 index 000000000..6917f23dc --- /dev/null +++ b/clusters/cl01tl/manifests/site-saralebens/ServiceAccount-site-saralebens-cloudflared.yaml @@ -0,0 +1,11 @@ +apiVersion: v1 +kind: ServiceAccount +metadata: + name: site-saralebens-cloudflared + labels: + app.kubernetes.io/instance: site-saralebens + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: cloudflared + app.kubernetes.io/version: 2026.3.0 + helm.sh/chart: cloudflared-2.7.1 + namespace: site-saralebens diff --git a/clusters/cl01tl/manifests/site-saralebens/ServiceAccount-site-saralebens.yaml b/clusters/cl01tl/manifests/site-saralebens/ServiceAccount-site-saralebens.yaml new file mode 100644 index 000000000..970f0340b --- /dev/null +++ b/clusters/cl01tl/manifests/site-saralebens/ServiceAccount-site-saralebens.yaml @@ -0,0 +1,10 @@ +apiVersion: v1 +kind: ServiceAccount +metadata: + name: site-saralebens + labels: + app.kubernetes.io/instance: site-saralebens + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: site-saralebens + helm.sh/chart: site-saralebens-5.0.0 + namespace: site-saralebens diff --git a/clusters/cl01tl/manifests/vaultwarden/Deployment-vaultwarden-cloudflared.yaml b/clusters/cl01tl/manifests/vaultwarden/Deployment-vaultwarden-cloudflared.yaml index fbac1e3fb..7eb63261e 100644 --- a/clusters/cl01tl/manifests/vaultwarden/Deployment-vaultwarden-cloudflared.yaml +++ b/clusters/cl01tl/manifests/vaultwarden/Deployment-vaultwarden-cloudflared.yaml @@ -8,7 +8,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: cloudflared app.kubernetes.io/version: 2026.3.0 - helm.sh/chart: cloudflared-2.6.0 + helm.sh/chart: cloudflared-2.7.1 namespace: vaultwarden spec: revisionHistoryLimit: 3 @@ -28,8 +28,8 @@ spec: app.kubernetes.io/name: cloudflared spec: enableServiceLinks: false - serviceAccountName: default - automountServiceAccountToken: true + serviceAccountName: vaultwarden + automountServiceAccountToken: false hostIPC: false hostNetwork: false hostPID: false diff --git a/clusters/cl01tl/manifests/vaultwarden/Deployment-vaultwarden.yaml b/clusters/cl01tl/manifests/vaultwarden/Deployment-vaultwarden.yaml index d294f3227..e731f5d8b 100644 --- a/clusters/cl01tl/manifests/vaultwarden/Deployment-vaultwarden.yaml +++ b/clusters/cl01tl/manifests/vaultwarden/Deployment-vaultwarden.yaml @@ -27,7 +27,7 @@ spec: app.kubernetes.io/name: vaultwarden spec: enableServiceLinks: false - serviceAccountName: default + serviceAccountName: vaultwarden automountServiceAccountToken: false hostIPC: false hostNetwork: false diff --git a/clusters/cl01tl/manifests/vaultwarden/ExternalSecret-vaultwarden-cloudflared-secret.yaml b/clusters/cl01tl/manifests/vaultwarden/ExternalSecret-vaultwarden-cloudflared-secret.yaml index 8e3d67ee3..a8bc16a80 100644 --- a/clusters/cl01tl/manifests/vaultwarden/ExternalSecret-vaultwarden-cloudflared-secret.yaml +++ b/clusters/cl01tl/manifests/vaultwarden/ExternalSecret-vaultwarden-cloudflared-secret.yaml @@ -4,10 +4,10 @@ metadata: name: vaultwarden-cloudflared-secret namespace: vaultwarden labels: - helm.sh/chart: cloudflared-2.6.0 + helm.sh/chart: cloudflared-2.7.1 app.kubernetes.io/instance: vaultwarden app.kubernetes.io/part-of: vaultwarden - app.kubernetes.io/version: "2.6.0" + app.kubernetes.io/version: "2.7.1" app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: vaultwarden-cloudflared-secret spec: diff --git a/clusters/cl01tl/manifests/vaultwarden/ServiceAccount-vaultwarden-cloudflared.yaml b/clusters/cl01tl/manifests/vaultwarden/ServiceAccount-vaultwarden-cloudflared.yaml new file mode 100644 index 000000000..dfd0ed649 --- /dev/null +++ b/clusters/cl01tl/manifests/vaultwarden/ServiceAccount-vaultwarden-cloudflared.yaml @@ -0,0 +1,11 @@ +apiVersion: v1 +kind: ServiceAccount +metadata: + name: vaultwarden-cloudflared + labels: + app.kubernetes.io/instance: vaultwarden + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: cloudflared + app.kubernetes.io/version: 2026.3.0 + helm.sh/chart: cloudflared-2.7.1 + namespace: vaultwarden diff --git a/clusters/cl01tl/manifests/vaultwarden/ServiceAccount-vaultwarden.yaml b/clusters/cl01tl/manifests/vaultwarden/ServiceAccount-vaultwarden.yaml new file mode 100644 index 000000000..8b8897c6c --- /dev/null +++ b/clusters/cl01tl/manifests/vaultwarden/ServiceAccount-vaultwarden.yaml @@ -0,0 +1,10 @@ +apiVersion: v1 +kind: ServiceAccount +metadata: + name: vaultwarden + labels: + app.kubernetes.io/instance: vaultwarden + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: vaultwarden + helm.sh/chart: vaultwarden-5.0.0 + namespace: vaultwarden