chore(deps): update helm release cilium to v1.19.0

clusters/cl01tl/helm/blocky/values.yaml

@@ -124,7 +124,7 @@ blocky:
               home                            IN      CNAME   traefik-cl01tl
               home-assistant                  IN      CNAME   traefik-cl01tl
               home-assistant-code-server      IN      CNAME   traefik-cl01tl
-              hubble                          IN      CNAME   traefik-cl01tl
+              hubble                          IN      CNAME   cilium-cl01tl
               huntarr                         IN      CNAME   traefik-cl01tl
               immich                          IN      CNAME   traefik-cl01tl
               jellyfin                        IN      CNAME   traefik-cl01tl

clusters/cl01tl/helm/cilium/Chart.lock

@@ -3,4 +3,4 @@ dependencies:
   repository: https://helm.cilium.io/
   version: 1.19.0
 digest: sha256:d2319facc93cab2a0a137588d8bd93315b52025b3ec86bc89edb0e236a74c814
-generated: "2026-02-05T20:44:32.172064251Z"
+generated: "2026-02-05T20:33:43.742976764Z"

clusters/cl01tl/helm/cilium/templates/cilium-l2-announcement-policy.yaml

@@ -1,18 +1,18 @@
-# apiVersion: "cilium.io/v2alpha1"
+apiVersion: "cilium.io/v2alpha1"
-# kind: CiliumL2AnnouncementPolicy
+kind: CiliumL2AnnouncementPolicy
-# metadata:
+metadata:
-#   name: node-gateway-l2-policy
+  name: node-gateway-l2-policy
-#   namespace: {{ .Release.Namespace }}
+  namespace: {{ .Release.Namespace }}
-#   labels:
+  labels:
-#     app.kubernetes.io/name: node-gateway-l2-policy
+    app.kubernetes.io/name: node-gateway-l2-policy
-#     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/instance: {{ .Release.Name }}
-#     app.kubernetes.io/part-of: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
-# spec:
+spec:
-#   nodeSelector:
+  nodeSelector:
-#     matchLabels:
+    matchLabels:
-#       kubernetes.io/hostname: talos-ix7-xku
+      kubernetes.io/hostname: talos-ix7-xku
-#   interfaces:
+  interfaces:
-#     - end0
+    - end0
-#     - enp6s0
+    - enp6s0
-#   externalIPs: true
+  externalIPs: true
-#   loadBalancerIPs: true
+  loadBalancerIPs: true

clusters/cl01tl/helm/cilium/templates/gateway.yaml

@@ -1,46 +1,46 @@
-# apiVersion: gateway.networking.k8s.io/v1
+apiVersion: gateway.networking.k8s.io/v1
-# kind: Gateway
+kind: Gateway
-# metadata:
+metadata:
-#   name: cilium-tls-gateway
+  name: cilium-tls-gateway
-#   namespace: {{ .Release.Namespace }}
+  namespace: {{ .Release.Namespace }}
-#   labels:
+  labels:
-#     app.kubernetes.io/name: cilium-tls-gateway
+    app.kubernetes.io/name: cilium-tls-gateway
-#     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/instance: {{ .Release.Name }}
-#     app.kubernetes.io/part-of: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
-#   annotations:
+  annotations:
-#     cert-manager.io/cluster-issuer: letsencrypt-issuer
+    cert-manager.io/cluster-issuer: letsencrypt-issuer
-#     io.cilium/lb-ipam-ips: "10.232.1.23"
+    io.cilium/lb-ipam-ips: "10.232.1.23"
-# spec:
+spec:
-#   addresses:
+  addresses:
-#     - type: IPAddress
+    - type: IPAddress
-#       value: 10.232.1.23
+      value: 10.232.1.23
-#   gatewayClassName: cilium
+  gatewayClassName: cilium
-#   listeners:
+  listeners:
-#     - allowedRoutes:
+    - allowedRoutes:
-#         namespaces:
+        namespaces:
-#           from: All
+          from: All
-#       hostname: '*.alexlebens.net'
+      hostname: '*.alexlebens.net'
-#       name: https
+      name: https
-#       port: 443
+      port: 443
-#       protocol: HTTPS
+      protocol: HTTPS
-#       tls:
+      tls:
-#         certificateRefs:
+        certificateRefs:
-#           - group: ''
+          - group: ''
-#             kind: Secret
+            kind: Secret
-#             name: https-gateway-cert
+            name: https-gateway-cert
-#             namespace: kube-system
+            namespace: kube-system
-#         mode: Terminate
+        mode: Terminate
-#     - allowedRoutes:
+    - allowedRoutes:
-#         namespaces:
+        namespaces:
-#           from: All
+          from: All
-#       hostname: 'alexlebens.net'
+      hostname: 'alexlebens.net'
-#       name: https-domain
+      name: https-domain
-#       port: 443
+      port: 443
-#       protocol: HTTPS
+      protocol: HTTPS
-#       tls:
+      tls:
-#         certificateRefs:
+        certificateRefs:
-#           - group: ''
+          - group: ''
-#             kind: Secret
+            kind: Secret
-#             name: https-gateway-cert
+            name: https-gateway-cert
-#             namespace: kube-system
+            namespace: kube-system
-#         mode: Terminate
+        mode: Terminate

clusters/cl01tl/helm/cilium/templates/http-route.yaml

@@ -11,8 +11,8 @@ spec:
   parentRefs:
     - group: gateway.networking.k8s.io
       kind: Gateway
-      name: traefik-gateway
+      name: cilium-tls-gateway
-      namespace: traefik
+      namespace: kube-system
   hostnames:
     - hubble.alexlebens.net
   rules:

clusters/cl01tl/helm/cilium/values.yaml

@@ -26,7 +26,7 @@ cilium:
         - SYS_ADMIN
         - SYS_RESOURCE
   l2announcements:
-    enabled: false
+    enabled: true
   bgpControlPlane:
     enabled: false
     secretsNamespace:

hosts/ps08rp/blocky/config.yml

@@ -99,7 +99,7 @@ customDNS:
     home                            IN      CNAME   traefik-cl01tl
     home-assistant                  IN      CNAME   traefik-cl01tl
     home-assistant-code-server      IN      CNAME   traefik-cl01tl
-    hubble                          IN      CNAME   traefik-cl01tl
+    hubble                          IN      CNAME   cilium-cl01tl
     huntarr                         IN      CNAME   traefik-cl01tl
     immich                          IN      CNAME   traefik-cl01tl
     jellyfin                        IN      CNAME   traefik-cl01tl

hosts/ps09rp/blocky/config.yml

@@ -120,7 +120,7 @@ customDNS:
     home                            IN      CNAME   traefik-cl01tl
     home-assistant                  IN      CNAME   traefik-cl01tl
     home-assistant-code-server      IN      CNAME   traefik-cl01tl
-    hubble                          IN      CNAME   traefik-cl01tl
+    hubble                          IN      CNAME   cilium-cl01tl
     huntarr                         IN      CNAME   traefik-cl01tl
     immich                          IN      CNAME   traefik-cl01tl
     jellyfin                        IN      CNAME   traefik-cl01tl