From d891c5a7c64159067a8cd81451b3b0daada00028 Mon Sep 17 00:00:00 2001 From: gitea-bot Date: Sat, 20 Dec 2025 00:18:09 +0000 Subject: [PATCH] Automated Manifest Update (#2723) This PR contains newly rendered Kubernetes manifests automatically generated by the CI workflow. Reviewed-on: https://gitea.alexlebens.dev/alexlebens/infrastructure/pulls/2723 Co-authored-by: gitea-bot Co-committed-by: gitea-bot --- .../headlamp/ClusterRoleBinding-headlamp-admin.yaml | 4 ++-- .../headlamp/ConfigMap-headlamp-plugin-config.yaml | 4 ++-- .../cl01tl/manifests/headlamp/Deployment-headlamp.yaml | 6 +++--- clusters/cl01tl/manifests/headlamp/Service-headlamp.yaml | 4 ++-- .../manifests/headlamp/ServiceAccount-headlamp.yaml | 4 ++-- .../CustomResourceDefinition-recorders.tailscale.com.yaml | 8 ++++++++ .../manifests/tailscale-operator/Deployment-operator.yaml | 4 ++-- 7 files changed, 21 insertions(+), 13 deletions(-) diff --git a/clusters/cl01tl/manifests/headlamp/ClusterRoleBinding-headlamp-admin.yaml b/clusters/cl01tl/manifests/headlamp/ClusterRoleBinding-headlamp-admin.yaml index 0e7130a07..0f6f028bc 100644 --- a/clusters/cl01tl/manifests/headlamp/ClusterRoleBinding-headlamp-admin.yaml +++ b/clusters/cl01tl/manifests/headlamp/ClusterRoleBinding-headlamp-admin.yaml @@ -3,10 +3,10 @@ kind: ClusterRoleBinding metadata: name: headlamp-admin labels: - helm.sh/chart: headlamp-0.38.0 + helm.sh/chart: headlamp-0.39.0 app.kubernetes.io/name: headlamp app.kubernetes.io/instance: headlamp - app.kubernetes.io/version: "0.38.0" + app.kubernetes.io/version: "0.39.0" app.kubernetes.io/managed-by: Helm roleRef: apiGroup: rbac.authorization.k8s.io diff --git a/clusters/cl01tl/manifests/headlamp/ConfigMap-headlamp-plugin-config.yaml b/clusters/cl01tl/manifests/headlamp/ConfigMap-headlamp-plugin-config.yaml index df97d64d8..6badf8b5f 100644 --- a/clusters/cl01tl/manifests/headlamp/ConfigMap-headlamp-plugin-config.yaml +++ b/clusters/cl01tl/manifests/headlamp/ConfigMap-headlamp-plugin-config.yaml @@ -4,10 +4,10 @@ metadata: name: headlamp-plugin-config namespace: headlamp labels: - helm.sh/chart: headlamp-0.38.0 + helm.sh/chart: headlamp-0.39.0 app.kubernetes.io/name: headlamp app.kubernetes.io/instance: headlamp - app.kubernetes.io/version: "0.38.0" + app.kubernetes.io/version: "0.39.0" app.kubernetes.io/managed-by: Helm data: plugin.yml: | diff --git a/clusters/cl01tl/manifests/headlamp/Deployment-headlamp.yaml b/clusters/cl01tl/manifests/headlamp/Deployment-headlamp.yaml index 3df9d8a22..c98ccf61b 100644 --- a/clusters/cl01tl/manifests/headlamp/Deployment-headlamp.yaml +++ b/clusters/cl01tl/manifests/headlamp/Deployment-headlamp.yaml @@ -4,10 +4,10 @@ metadata: name: headlamp namespace: headlamp labels: - helm.sh/chart: headlamp-0.38.0 + helm.sh/chart: headlamp-0.39.0 app.kubernetes.io/name: headlamp app.kubernetes.io/instance: headlamp - app.kubernetes.io/version: "0.38.0" + app.kubernetes.io/version: "0.39.0" app.kubernetes.io/managed-by: Helm spec: replicas: 2 @@ -31,7 +31,7 @@ spec: runAsGroup: 101 runAsNonRoot: true runAsUser: 100 - image: "ghcr.io/headlamp-k8s/headlamp:v0.38.0" + image: "ghcr.io/headlamp-k8s/headlamp:v0.39.0" imagePullPolicy: IfNotPresent envFrom: - secretRef: diff --git a/clusters/cl01tl/manifests/headlamp/Service-headlamp.yaml b/clusters/cl01tl/manifests/headlamp/Service-headlamp.yaml index 293f2e7a8..37b65cb03 100644 --- a/clusters/cl01tl/manifests/headlamp/Service-headlamp.yaml +++ b/clusters/cl01tl/manifests/headlamp/Service-headlamp.yaml @@ -4,10 +4,10 @@ metadata: name: headlamp namespace: headlamp labels: - helm.sh/chart: headlamp-0.38.0 + helm.sh/chart: headlamp-0.39.0 app.kubernetes.io/name: headlamp app.kubernetes.io/instance: headlamp - app.kubernetes.io/version: "0.38.0" + app.kubernetes.io/version: "0.39.0" app.kubernetes.io/managed-by: Helm spec: type: ClusterIP diff --git a/clusters/cl01tl/manifests/headlamp/ServiceAccount-headlamp.yaml b/clusters/cl01tl/manifests/headlamp/ServiceAccount-headlamp.yaml index bf6e8bd12..803d27666 100644 --- a/clusters/cl01tl/manifests/headlamp/ServiceAccount-headlamp.yaml +++ b/clusters/cl01tl/manifests/headlamp/ServiceAccount-headlamp.yaml @@ -4,8 +4,8 @@ metadata: name: headlamp namespace: headlamp labels: - helm.sh/chart: headlamp-0.38.0 + helm.sh/chart: headlamp-0.39.0 app.kubernetes.io/name: headlamp app.kubernetes.io/instance: headlamp - app.kubernetes.io/version: "0.38.0" + app.kubernetes.io/version: "0.39.0" app.kubernetes.io/managed-by: Helm diff --git a/clusters/cl01tl/manifests/tailscale-operator/CustomResourceDefinition-recorders.tailscale.com.yaml b/clusters/cl01tl/manifests/tailscale-operator/CustomResourceDefinition-recorders.tailscale.com.yaml index 0f3dcfcca..48db3ef4b 100644 --- a/clusters/cl01tl/manifests/tailscale-operator/CustomResourceDefinition-recorders.tailscale.com.yaml +++ b/clusters/cl01tl/manifests/tailscale-operator/CustomResourceDefinition-recorders.tailscale.com.yaml @@ -68,6 +68,11 @@ spec: Corresponds to --ui tsrecorder flag https://tailscale.com/kb/1246/tailscale-ssh-session-recording#deploy-a-recorder-node. Required if S3 storage is not set up, to ensure that recordings are accessible. type: boolean + replicas: + description: Replicas specifies how many instances of tsrecorder to run. Defaults to 1. + type: integer + format: int32 + minimum: 0 statefulSet: description: |- Configuration parameters for the Recorder's StatefulSet. The operator @@ -1683,6 +1688,9 @@ spec: items: type: string pattern: ^tag:[a-zA-Z][a-zA-Z0-9-]*$ + x-kubernetes-validations: + - rule: '!(self.replicas > 1 && (!has(self.storage) || !has(self.storage.s3)))' + message: S3 storage must be used when deploying multiple Recorder replicas status: description: |- RecorderStatus describes the status of the recorder. This is set diff --git a/clusters/cl01tl/manifests/tailscale-operator/Deployment-operator.yaml b/clusters/cl01tl/manifests/tailscale-operator/Deployment-operator.yaml index ab239dd16..e4e043ec5 100644 --- a/clusters/cl01tl/manifests/tailscale-operator/Deployment-operator.yaml +++ b/clusters/cl01tl/manifests/tailscale-operator/Deployment-operator.yaml @@ -22,7 +22,7 @@ spec: secretName: operator-oauth containers: - name: operator - image: tailscale/k8s-operator:v1.90.9 + image: tailscale/k8s-operator:v1.92.4 imagePullPolicy: Always env: - name: OPERATOR_INITIAL_TAGS @@ -46,7 +46,7 @@ spec: - name: CLIENT_SECRET_FILE value: /oauth/client_secret - name: PROXY_IMAGE - value: tailscale/tailscale:v1.90.9 + value: tailscale/tailscale:v1.92.4 - name: PROXY_TAGS value: tag:k8s - name: APISERVER_PROXY