migrate to new chart

clusters/cl01tl/helm/rook-ceph/Chart.lock

@@ -7,6 +7,6 @@ dependencies:
   version: v1.18.8
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.23.2
-digest: sha256:22c958d439ac2f43c7bfd4a9544bc1f26ddd0758182173eef9dba4a9cf97bae3
-generated: "2025-12-07T02:55:52.670455114Z"
+  version: 2.0.1
+digest: sha256:796c19e79a794aa3a92d85328744bf43505fe747571991a9c59571f69901c3fe
+generated: "2025-12-17T16:42:59.123083-06:00"

clusters/cl01tl/helm/rook-ceph/Chart.yaml

@@ -24,6 +24,6 @@ dependencies:
   - name: cloudflared
     alias: cloudflared-rgw
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.23.2
+    version: 2.0.1
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ceph.png
 appVersion: v1.18.8

clusters/cl01tl/helm/rook-ceph/templates/external-secret.yaml

@@ -1,21 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: ceph-rgw-cloudflared-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: ceph-rgw-cloudflared-secret
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: cf-tunnel-token
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cloudflare/tunnels/ceph-rgw
-        metadataPolicy: None
-        property: token

clusters/cl01tl/helm/rook-ceph/values.yaml

@@ -194,7 +194,3 @@ rook-ceph-cluster:
         volumeBindingMode: "Immediate"
         parameters:
           region: us-east-1
-
-cloudflared-rgw:
-  existingSecretName: ceph-rgw-cloudflared-secret
-  name: cloudflared-rgw