chore(deps): update cilium to v1.19.3

Merge pull request 'chore(deps): update searxng/searxng:latest docker digest to 0bbe85f' (#6023 ) from renovate/unified-searxng into main
chore(deps): update searxng/searxng:latest docker digest to 0bbe85f
2026-04-17 13:05:16 +00:00 · 2026-04-17 13:02:50 +00:00 · 2026-04-17 13:02:32 +00:00 · 2026-04-17 06:03:30 +00:00 · 2026-04-17 06:03:07 +00:00 · 2026-04-17 01:35:07 +00:00
15 changed files with 37 additions and 21 deletions
--- a/clusters/cl01tl/helm/cilium/Chart.lock
+++ b/clusters/cl01tl/helm/cilium/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: cilium
  repository: https://helm.cilium.io/
-  version: 1.18.6
-digest: sha256:8ea328ac238524b5b423e6289f5e25d05ef64e6aa19cfd5de238f1d5dd533e9b
-generated: "2026-02-05T12:00:20.15778-06:00"
+  version: 1.19.3
+digest: sha256:0fb32249f6ab7d68568a1e44796a8ee1ee5da2294b29a9c720153db8f055888b
+generated: "2026-04-17T13:05:11.031527954Z"
--- a/clusters/cl01tl/helm/cilium/Chart.yaml
+++ b/clusters/cl01tl/helm/cilium/Chart.yaml
@@ -14,8 +14,8 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: cilium
-    version: 1.18.6
+    version: 1.19.3
    repository: https://helm.cilium.io/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/cilium.png
 # renovate: datasource=github-releases depName=cilium/cilium
-appVersion: 1.18.6
+appVersion: 1.19.3
--- a/clusters/cl01tl/helm/garage/Chart.yaml
+++ b/clusters/cl01tl/helm/garage/Chart.yaml
@@ -21,4 +21,4 @@ dependencies:
    version: 4.6.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/garage.png
 # renovate: datasource=docker depName=dxflrs/garage
-appVersion: v2.2.0
+appVersion: v2.3.0
--- a/clusters/cl01tl/helm/garage/values.yaml
+++ b/clusters/cl01tl/helm/garage/values.yaml
@@ -21,7 +21,7 @@ garage:
        main:
          image:
            repository: dxflrs/garage
-            tag: v2.2.0@sha256:45a61ce3f7c9c24fc23d9ed2b09b27ed560ab87b34605d175d5c588f539c24e4
+            tag: v2.3.0@sha256:866bd13ed2038ba7e7190e840482bc27234c4afaf77be8cfa439ae088c1e4690
          envFrom:
            - secretRef:
                name: garage-token-secret
@@ -50,7 +50,7 @@ garage:
        main:
          image:
            repository: dxflrs/garage
-            tag: v2.2.0@sha256:45a61ce3f7c9c24fc23d9ed2b09b27ed560ab87b34605d175d5c588f539c24e4
+            tag: v2.3.0@sha256:866bd13ed2038ba7e7190e840482bc27234c4afaf77be8cfa439ae088c1e4690
          envFrom:
            - secretRef:
                name: garage-token-secret
@@ -79,7 +79,7 @@ garage:
        main:
          image:
            repository: dxflrs/garage
-            tag: v2.2.0@sha256:45a61ce3f7c9c24fc23d9ed2b09b27ed560ab87b34605d175d5c588f539c24e4
+            tag: v2.3.0@sha256:866bd13ed2038ba7e7190e840482bc27234c4afaf77be8cfa439ae088c1e4690
          envFrom:
            - secretRef:
                name: garage-token-secret
--- a/clusters/cl01tl/helm/gitea/values.yaml
+++ b/clusters/cl01tl/helm/gitea/values.yaml
@@ -194,7 +194,7 @@ gitea-actions:
      registry: docker.io
      repository: gitea/act_runner
      # renovate: datasource=docker depName=gitea/act_runner
-      tag: 0.3.1@sha256:c2a169c5e99864c25e32527cef3d82203225e09558773022bf3dc164a2e6d762
+      tag: 0.4.0@sha256:e7364b8252e74d5eb047abe64c98a856da37d9dad848af51e011b249206b36ba
      extraVolumeMounts:
        - name: workspace-vol
          mountPath: /workspace
--- a/clusters/cl01tl/helm/home-assistant/values.yaml
+++ b/clusters/cl01tl/helm/home-assistant/values.yaml
@@ -23,7 +23,7 @@ home-assistant:
        code-server:
          image:
            repository: ghcr.io/linuxserver/code-server
-            tag: 4.115.0-ls331@sha256:308f49acac8734542560f797d79b15e4c872c4d3f97d1b22862633fcce2af62a
+            tag: 4.116.0-ls333@sha256:4620adace18935dd6ca79d77e3bc1c379e21875392192f970cf5d6b0fb4aefcd
          env:
            - name: TZ
              value: America/Chicago
--- a/clusters/cl01tl/helm/houndarr/Chart.yaml
+++ b/clusters/cl01tl/helm/houndarr/Chart.yaml
@@ -25,4 +25,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/houndarr.png
 # renovate: datasource=github-releases depName=av1155/houndarr
-appVersion: v1.7.0
+appVersion: v1.8.0
--- a/clusters/cl01tl/helm/houndarr/values.yaml
+++ b/clusters/cl01tl/helm/houndarr/values.yaml
@@ -8,7 +8,7 @@ houndarr:
        main:
          image:
            repository: ghcr.io/av1155/houndarr
-            tag: v1.7.0@sha256:8ae2a8b86497cbc54d11591c12220f3be3319039c2bdd0c8b041b2b7c2fd7943
+            tag: v1.8.0@sha256:6d213dadb625e0cebdd6e28358e2815f9ceccf133bb5469b6bc837cf1a70c9e2
          env:
            - name: TZ
              value: America/Chicago
--- a/clusters/cl01tl/helm/matrix-synapse/values.yaml
+++ b/clusters/cl01tl/helm/matrix-synapse/values.yaml
@@ -332,7 +332,7 @@ mautrix-whatsapp:
        main:
          image:
            repository: dock.mau.dev/mautrix/whatsapp
-            tag: v0.2603.0@sha256:b49009312361d9ea0d7090716fd09f2323f477b32bd119648c6ca2d558a3e236
+            tag: v0.2604.0@sha256:9f28c04c746af9fe8e93163489dae0f4191626e2ca02a9302df62afbeefc9eba
          resources:
            requests:
              cpu: 1m
--- a/clusters/cl01tl/helm/openbao/values.yaml
+++ b/clusters/cl01tl/helm/openbao/values.yaml
@@ -25,6 +25,15 @@ openbao:
            kind: Gateway
            name: traefik-gateway
            namespace: traefik
+      httpRoute:
+        enabled: true
+        hosts:
+          - bao.alexlebens.net
+        parentRefs:
+          - group: gateway.networking.k8s.io
+            kind: Gateway
+            name: traefik-gateway
+            namespace: traefik
    authDelegator:
      enabled: true
    livenessProbe:
@@ -68,6 +77,13 @@ openbao:
            }
          }

+          audit "file" "to-stdout" {
+            options {
+              file_path = "/openbao/audit/openbao_audit.log"
+              log_raw = "true"
+            }
+          }
+
          service_registration "kubernetes" {}

          telemetry {
@@ -125,7 +141,7 @@ openbao:
      s3Bucket: openbao-backups
      s3Uri: s3://openbao-backups
      s3ExpireDays: "30"
-      s3cmdExtraFlag: "-v"
+      s3cmdExtraFlag: "-v --no-ssl"
      baoAuthPath: kubernetes
      baoRole: bao-snapshot
 unseal:
--- a/clusters/cl01tl/helm/searxng/values.yaml
+++ b/clusters/cl01tl/helm/searxng/values.yaml
@@ -8,7 +8,7 @@ searxng:
        main:
          image:
            repository: searxng/searxng
-            tag: latest@sha256:222b4c11534e0bd9b5ed80081680094a1d663413cbe1d142e184515c4035fc23
+            tag: latest@sha256:0bbe85fb9bebe413a26c0e385c76309d15c91fdb9dc8a6bf01b35b714d0ece43
          env:
            - name: SEARXNG_BASE_URL
              value: http://searxng-api.searxng:8080
@@ -36,7 +36,7 @@ searxng:
        main:
          image:
            repository: searxng/searxng
-            tag: latest@sha256:222b4c11534e0bd9b5ed80081680094a1d663413cbe1d142e184515c4035fc23
+            tag: latest@sha256:0bbe85fb9bebe413a26c0e385c76309d15c91fdb9dc8a6bf01b35b714d0ece43
          env:
            - name: SEARXNG_BASE_URL
              value: https://searxng.alexlebens.net/
--- a/clusters/cl01tl/helm/secrets-store-csi-driver/Chart.yaml
+++ b/clusters/cl01tl/helm/secrets-store-csi-driver/Chart.yaml
@@ -21,4 +21,4 @@ dependencies:
    repository: https://kubernetes-sigs.github.io/secrets-store-csi-driver/charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 # renovate: datasource=github-releases depName=kubernetes-sigs/secrets-store-csi-driver
-appVersion: 0.8.1
+appVersion: v1.5.6
--- a/clusters/cl01tl/helm/site-documentation/values.yaml
+++ b/clusters/cl01tl/helm/site-documentation/values.yaml
@@ -10,7 +10,7 @@ site-documentation:
        main:
          image:
            repository: harbor.alexlebens.net/images/site-documentation
-            tag: 0.25.0@sha256:1509b20e703617ce8e6fc78fa599a56c09be178541adc82da406632f9af15d97
+            tag: 0.26.0@sha256:fbd3167788a75a637aef0be6ef32bef685ce4af59f45e955cc6eb57ed8b1fd87
          resources:
            requests:
              cpu: 10m
--- a/clusters/cl01tl/helm/site-profile/values.yaml
+++ b/clusters/cl01tl/helm/site-profile/values.yaml
@@ -10,7 +10,7 @@ site-profile:
        main:
          image:
            repository: harbor.alexlebens.net/images/site-profile
-            tag: 3.18.1@sha256:94c120ecd381b4e1568e1fe6619b3472d58870a5a5c5da4bc4b40e0e6b6cbfb1
+            tag: 3.18.2@sha256:8deb9624b2564fabd1f5cc6822306fd198b245858317be2d9ab4ca044ae3ded5
          resources:
            requests:
              cpu: 10m
--- a/hosts/ps10rp/garage/compose.yaml
+++ b/hosts/ps10rp/garage/compose.yaml
@@ -39,7 +39,7 @@ services:
            - /dev/net/tun:/dev/net/tun

    garage:
-        image: dxflrs/garage:v2.2.0@sha256:45a61ce3f7c9c24fc23d9ed2b09b27ed560ab87b34605d175d5c588f539c24e4
+        image: dxflrs/garage:v2.3.0@sha256:866bd13ed2038ba7e7190e840482bc27234c4afaf77be8cfa439ae088c1e4690
        container_name: garage
        env_file:
            - .env
Author	SHA1	Message	Date
Renovate Bot	490fdec70e	chore(deps): update cilium to v1.19.3 All checks were successful lint-test-helm / lint-helm (pull_request) Successful in 32s Details lint-test-helm / validate-kubeconform (pull_request) Successful in 45s Details	2026-04-17 13:05:16 +00:00
Renovate Bot	65e8752345	Merge pull request 'chore(deps): update searxng/searxng:latest docker digest to 0bbe85f' (#6023 ) from renovate/unified-searxng into main All checks were successful lint-test-helm / lint-helm (push) Successful in 26s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 2m27s Details	2026-04-17 13:02:50 +00:00
Renovate Bot	ca59e30823	chore(deps): update searxng/searxng:latest docker digest to 0bbe85f All checks were successful render-manifests / render-manifests (pull_request) Successful in 1m11s Details lint-test-helm / lint-helm (pull_request) Successful in 1m29s Details lint-test-helm / validate-kubeconform (pull_request) Has been skipped Details	2026-04-17 13:02:32 +00:00
Renovate Bot	9716aab3c6	Merge pull request 'chore(deps): update searxng/searxng:latest docker digest to 9d797e9' (#6021 ) from renovate/unified-searxng into main All checks were successful lint-test-helm / lint-helm (push) Successful in 21s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 2m9s Details	2026-04-17 06:03:30 +00:00
Renovate Bot	6e58b89efb	chore(deps): update searxng/searxng:latest docker digest to 9d797e9 All checks were successful lint-test-helm / lint-helm (pull_request) Successful in 27s Details lint-test-helm / validate-kubeconform (pull_request) Successful in 20s Details render-manifests / render-manifests (pull_request) Successful in 1m8s Details	2026-04-17 06:03:07 +00:00
Alex Lebens	25db09f40e	Merge pull request 'feat: change audit' (#6018 ) from tmp/openbao-6 into main All checks were successful lint-test-helm / lint-helm (push) Successful in 21s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 2m57s Details Reviewed-on: #6018	2026-04-17 01:35:07 +00:00
Alex Lebens	fbcc18babb	feat: change audit All checks were successful lint-test-helm / lint-helm (pull_request) Successful in 23s Details lint-test-helm / validate-kubeconform (pull_request) Successful in 27s Details render-manifests / render-manifests (pull_request) Successful in 1m5s Details	2026-04-16 20:33:17 -05:00
Alex Lebens	51e4d0dfe8	Merge pull request 'feat: change flags' (#6016 ) from tmp/openbao-5 into main All checks were successful lint-test-helm / lint-helm (push) Successful in 26s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 2m7s Details Reviewed-on: #6016	2026-04-17 00:32:48 +00:00
Alex Lebens	5ceb85fff0	feat: change flags All checks were successful lint-test-helm / lint-helm (pull_request) Successful in 30s Details lint-test-helm / validate-kubeconform (pull_request) Successful in 30s Details render-manifests / render-manifests (pull_request) Successful in 1m7s Details	2026-04-16 19:31:05 -05:00
Alex Lebens	5dd6d5087f	Merge pull request 'feat: add audit to config' (#6015 ) from tmp/openbao-4 into main All checks were successful lint-test-helm / lint-helm (push) Successful in 1m4s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 2m51s Details Reviewed-on: #6015	2026-04-17 00:17:49 +00:00
Alex Lebens	eb2e076b60	feat: add audit to config	2026-04-17 00:17:49 +00:00
Alex Lebens	e5d49c29a6	Merge pull request 'feat: switch to httproute' (#6013 ) from tmp/openbao-3 into main All checks were successful lint-test-helm / lint-helm (push) Successful in 37s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 4m38s Details Reviewed-on: #6013	2026-04-16 23:58:48 +00:00
Alex Lebens	c703ad6f1b	feat: switch to httproute All checks were successful lint-test-helm / lint-helm (pull_request) Successful in 30s Details lint-test-helm / validate-kubeconform (pull_request) Successful in 27s Details render-manifests / render-manifests (pull_request) Successful in 1m12s Details	2026-04-16 18:55:03 -05:00
Alex Lebens	5692754466	Merge pull request 'chore(deps): update harbor.alexlebens.net/images/site-documentation docker tag to v0.26.0' (#6010 ) from renovate/unified-site-documentation into main All checks were successful lint-test-helm / lint-helm (push) Successful in 21s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 2m50s Details Reviewed-on: #6010	2026-04-16 22:07:30 +00:00
Renovate Bot	7199c265e7	chore(deps): update harbor.alexlebens.net/images/site-documentation docker tag to v0.26.0	2026-04-16 22:07:30 +00:00
Alex Lebens	35fa1ecb7e	Merge pull request 'chore(deps): update houndarr to v1.8.0' (#6011 ) from renovate/unified-houndarr into main Some checks failed lint-test-helm / lint-helm (push) Successful in 44s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Has been cancelled Details Reviewed-on: #6011	2026-04-16 22:05:36 +00:00
Renovate Bot	8504fe8f8b	chore(deps): update houndarr to v1.8.0 All checks were successful lint-test-helm / lint-helm (pull_request) Successful in 3m1s Details lint-test-helm / validate-kubeconform (pull_request) Successful in 25s Details render-manifests / render-manifests (pull_request) Successful in 1m29s Details	2026-04-16 21:25:28 +00:00
Alex Lebens	d0353a599d	Merge pull request 'chore(deps): update dxflrs/garage docker tag to v2.3.0' (#6007 ) from renovate/unified-garage into main All checks were successful lint-test-docker / lint-docker-compose (push) Successful in 6m31s Details lint-test-helm / lint-helm (push) Successful in 15m5s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 4m49s Details Reviewed-on: #6007	2026-04-16 21:19:21 +00:00
Renovate Bot	f38f9db7f1	chore(deps): update dxflrs/garage docker tag to v2.3.0 All checks were successful lint-test-docker / lint-docker-compose (pull_request) Successful in 43s Details lint-test-helm / lint-helm (pull_request) Successful in 1m38s Details lint-test-helm / validate-kubeconform (pull_request) Successful in 21s Details render-manifests / render-manifests (pull_request) Successful in 16m12s Details	2026-04-16 21:02:05 +00:00
Alex Lebens	2303acc664	Merge pull request 'chore(deps): update dock.mau.dev/mautrix/whatsapp docker tag to v0.2604.0' (#5995 ) from renovate/unified-whatsapp into main All checks were successful lint-test-helm / lint-helm (push) Successful in 30s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 3m19s Details Reviewed-on: #5995	2026-04-16 20:59:05 +00:00
Renovate Bot	c743c2160b	chore(deps): update dock.mau.dev/mautrix/whatsapp docker tag to v0.2604.0 All checks were successful lint-test-helm / lint-helm (pull_request) Successful in 33s Details lint-test-helm / validate-kubeconform (pull_request) Successful in 33s Details render-manifests / render-manifests (pull_request) Successful in 1m12s Details	2026-04-16 20:51:10 +00:00
Alex Lebens	7c6a82a43f	Merge pull request 'feat: update version' (#6009 ) from tmp/garage into main All checks were successful lint-test-helm / lint-helm (push) Successful in 45s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 4m9s Details Reviewed-on: #6009	2026-04-16 20:47:22 +00:00
Alex Lebens	e5edaae980	feat: update version All checks were successful lint-test-helm / lint-helm (pull_request) Successful in 26s Details lint-test-helm / validate-kubeconform (pull_request) Successful in 26s Details render-manifests / render-manifests (pull_request) Successful in 1m19s Details	2026-04-16 15:46:49 -05:00
Alex Lebens	49c2b47cc2	Merge pull request 'chore(deps): update ghcr.io/linuxserver/code-server docker tag to v4.116.0-ls333' (#6004 ) from renovate/unified-code-server into main Some checks failed lint-test-helm / lint-helm (push) Successful in 37s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Has been cancelled Details Reviewed-on: #6004	2026-04-16 20:45:14 +00:00
Renovate Bot	a98a2dad86	chore(deps): update ghcr.io/linuxserver/code-server docker tag to v4.116.0-ls333	2026-04-16 20:45:14 +00:00
Alex Lebens	1ce2139576	Merge pull request 'chore(deps): update harbor.alexlebens.net/images/site-profile docker tag to v3.18.2' (#6002 ) from renovate/unified-site-profile into main Some checks failed lint-test-helm / lint-helm (push) Successful in 33s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Has been cancelled Details Reviewed-on: #6002	2026-04-16 20:42:04 +00:00
Renovate Bot	b5ed3aff84	chore(deps): update harbor.alexlebens.net/images/site-profile docker tag to v3.18.2	2026-04-16 20:42:04 +00:00
Alex Lebens	10a7012ba9	Merge pull request 'chore(deps): update gitea/act_runner docker tag to v0.4.0' (#5943 ) from renovate/unified-act_runner into main Some checks failed lint-test-helm / validate-kubeconform (push) Has been cancelled Details lint-test-helm / lint-helm (push) Has started running Details renovate / renovate (push) Has been cancelled Details Reviewed-on: #5943	2026-04-16 20:41:37 +00:00
Renovate Bot	04cf657591	chore(deps): update gitea/act_runner docker tag to v0.4.0	2026-04-16 20:41:37 +00:00
Alex Lebens	218fc2ac38	feat: update version Some checks failed lint-test-helm / lint-helm (push) Successful in 52s Details lint-test-helm / validate-kubeconform (push) Has been cancelled Details renovate / renovate (push) Has been cancelled Details	2026-04-16 15:40:47 -05:00