feat: refactor apps (#5172)

Reviewed-on: #5172

clusters/cl01tl/helm/external-secrets/Chart.lock

@@ -2,5 +2,5 @@ dependencies:
 - name: external-secrets
   repository: https://charts.external-secrets.io
   version: 2.2.0
-digest: sha256:832fc3f8d3728bdea2b696a6044e4c18967cd9ab9c5cc74adbf40aaa270a84b4
-generated: "2026-03-20T20:53:08.407747649Z"
+digest: sha256:3894df20e1f3d56bc9789177181a84d8ae1402ef76ec6328e417ce5a568738ae
+generated: "2026-03-26T19:19:15.734454-05:00"

clusters/cl01tl/helm/external-secrets/Chart.yaml

@@ -5,15 +5,16 @@ description: External Secrets
 keywords:
   - external-secrets
   - secrets
-  - vault
-home: https://wiki.alexlebens.dev/s/d29044fb-0d63-4500-8853-2971964f356a
+  - operator
+home: https://docs.alexlebens.dev/applications/eraser/
 sources:
   - https://github.com/external-secrets/external-secrets
   - https://github.com/external-secrets/external-secrets/tree/main/deploy/charts/external-secrets
 dependencies:
   - name: external-secrets
+    alias: external-secrets
     version: 2.2.0
     repository: https://charts.external-secrets.io
-icon: https://avatars.githubusercontent.com/u/68335991?s=48&v=4
+icon: https://raw.githubusercontent.com/external-secrets/external-secrets/refs/heads/main/assets/eso-logo-large.png
 # renovate: datasource=github-releases depName=external-secrets/external-secrets
 appVersion: v2.2.0

clusters/cl01tl/helm/external-secrets/values.yaml

@@ -0,0 +1,44 @@
+external-secrets:
+  replicaCount: 1
+  image:
+    repository: ghcr.io/external-secrets/external-secrets
+    tag: v2.2.0@sha256:876e627dbee5b0edd12da49b035469d12418cd6c3c4be5e383ae6a82e8bd4565
+  installCRDs: true
+  crds:
+    createClusterExternalSecret: true
+    createClusterSecretStore: true
+    createSecretStore: true
+    createClusterGenerator: true
+    createClusterPushSecret: true
+    createPushSecret: true
+  leaderElect: true
+  extendedMetricLabels: true
+  resources:
+    requests:
+      cpu: 5m
+      memory: 50Mi
+  serviceMonitor:
+    enabled: true
+  livenessProbe:
+    enabled: true
+  readinessProbe:
+    enabled: true
+  podDisruptionBudget:
+    enabled: true
+    minAvailable: 1
+  webhook:
+    image:
+      repository: ghcr.io/external-secrets/external-secrets
+      tag: v2.2.0@sha256:876e627dbee5b0edd12da49b035469d12418cd6c3c4be5e383ae6a82e8bd4565
+    resources:
+      requests:
+        cpu: 1m
+        memory: 30Mi
+  certController:
+    image:
+      repository: ghcr.io/external-secrets/external-secrets
+      tag: v2.2.0@sha256:876e627dbee5b0edd12da49b035469d12418cd6c3c4be5e383ae6a82e8bd4565
+    resources:
+      requests:
+        cpu: 1m
+        memory: 60Mi