chore(deps): update helm release cilium to v1.19.2

clusters/cl01tl/helm/cert-manager/Chart.yaml

@@ -5,7 +5,8 @@ description: Cert Manager
 keywords:
   - cert-manager
   - certificates
-home: https://docs.alexlebens.dev/applications/cert-manager/
+  - kubernetes
+home: https://wiki.alexlebens.dev/s/368fe718-eedb-40e0-a5a7-fad03cdc6b09
 sources:
   - https://github.com/cert-manager/cert-manager
   - https://github.com/cert-manager/cert-manager/tree/master/deploy/charts/cert-manager
@@ -15,6 +16,6 @@ dependencies:
   - name: cert-manager
     version: v1.20.0
     repository: https://charts.jetstack.io
-icon: https://raw.githubusercontent.com/cert-manager/cert-manager/refs/heads/master/logo/logo.png
+icon: https://raw.githubusercontent.com/walkxcode/dashboard-icons/main/png/cert-manager.png
 # renovate: datasource=github-releases depName=cert-manager/cert-manager
 appVersion: v1.20.0

clusters/cl01tl/helm/cert-manager/templates/cluster-issuer.yaml

@@ -2,11 +2,6 @@ apiVersion: cert-manager.io/v1
 kind: ClusterIssuer
 metadata:
   name: letsencrypt-issuer
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: letsencrypt-issuer
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   acme:
     email: alexanderlebens@gmail.com

clusters/cl01tl/helm/cert-manager/templates/external-secret.yaml

@@ -14,5 +14,8 @@ spec:
   data:
     - secretKey: api-token
       remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
         key: /cloudflare/alexlebens.net/clusterissuer
+        metadataPolicy: None
         property: token

clusters/cl01tl/helm/cert-manager/values.yaml

@@ -3,16 +3,10 @@ cert-manager:
     enabled: true
     keep: true
   replicaCount: 2
-  podDisruptionBudget:
-    enabled: true
-    minAvailable: 1
   extraArgs:
     - --enable-gateway-api
-  resources:
-    requests:
-      cpu: 10m
-      memory: 64Mi
   prometheus:
+    enabled: true
     servicemonitor:
       enabled: true
       honorLabels: true

clusters/cl01tl/helm/cilium/Chart.lock

@@ -3,4 +3,4 @@ dependencies:
   repository: https://helm.cilium.io/
   version: 1.19.2
 digest: sha256:11f8eef4733b70c2b9a91ce39fe3c1ea1ad3fa3c46750efb015e03ff6ea3655b
-generated: "2026-03-25T00:15:27.521801416Z"
+generated: "2026-03-24T23:04:19.232865972Z"

clusters/cl01tl/helm/cilium/Chart.yaml

@@ -4,12 +4,13 @@ version: 1.0.0
 description: Cilium
 keywords:
   - cilium
-  - operator
+  - cni
   - network
-home: https://docs.alexlebens.dev/applications/cilium/
+  - kubernetes
+home: https://wiki.alexlebens.dev/s/9e6f5b17-e186-4af0-81cd-af647b162d3d
 sources:
   - https://github.com/cilium/cilium
-  - https://github.com/cilium/cilium/tree/main/install/kubernetes/cilium
+  - https://github.com/cilium/charts
 maintainers:
   - name: alexlebens
 dependencies:
@@ -18,4 +19,4 @@ dependencies:
     repository: https://helm.cilium.io/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/cilium.png
 # renovate: datasource=github-releases depName=cilium/cilium
-appVersion: 1.18.6
+appVersion: 1.19.2

clusters/cl01tl/helm/cilium/values.yaml

@@ -25,24 +25,36 @@ cilium:
         - NET_ADMIN
         - SYS_ADMIN
         - SYS_RESOURCE
+  l2announcements:
+    enabled: false
   bgpControlPlane:
     enabled: false
+    secretsNamespace:
+      name: kube-system
+    statusReport:
+      enabled: true
+    routerIDAllocation:
+      mode: "default"
   bpf:
     hostLegacyRouting: true
   devices: end0 enp6s0
   ciliumEndpointSlice:
     enabled: true
+  ingressController:
+    enabled: false
   gatewayAPI:
     enabled: true
-    enableAppProtocol: true
     enableAlpn: true
-    secretsNamespace:
-      create: false
-      name: kube-system
+    enableAppProtocol: true
+    gatewayClass:
+      create: auto
+  externalIPs:
+    enabled: true
   socketLB:
     enabled: true
     hostNamespaceOnly: true
   hubble:
+    enabled: true
     metrics:
       serviceMonitor:
         enabled: true
@@ -56,6 +68,8 @@ cilium:
           enabled: true
     ui:
       enabled: true
+      ingress:
+        enabled: false
   ipam:
     mode: "kubernetes"
   ipv4:
@@ -63,11 +77,12 @@ cilium:
   ipv6:
     enabled: false
   kubeProxyReplacement: true
+  l7Proxy: true
   prometheus:
     enabled: true
     serviceMonitor:
-      enabled: true
       trustCRDsExist: true
+      enabled: true
   envoy:
     enabled: true
     securityContext:
@@ -79,11 +94,14 @@ cilium:
           - PERFMON
           - BPF
     prometheus:
+      enabled: true
       serviceMonitor:
         enabled: true
   operator:
+    enabled: true
     rollOutPods: true
     prometheus:
+      enabled: true
       serviceMonitor:
         enabled: true
   cgroup:

clusters/cl01tl/helm/cloudnative-pg/Chart.yaml

@@ -6,11 +6,10 @@ keywords:
   - cloudnative-pg
   - operator
   - postgresql
-home: https://docs.alexlebens.dev/applications/cloudnative-pg/
+  - kubernetes
+home: https://wiki.alexlebens.dev/s/9fb10833-0278-4e64-a34c-d348d833839f
 sources:
   - https://github.com/cloudnative-pg/cloudnative-pg
-  - https://github.com/cloudnative-pg/plugin-barman-cloud
-  - https://github.com/cloudnative-pg/postgres-containers/pkgs/container/postgresql
   - https://github.com/cloudnative-pg/charts/tree/main/charts/cloudnative-pg
   - https://github.com/cloudnative-pg/charts/tree/main/charts/plugin-barman-cloud
 maintainers:
@@ -22,6 +21,6 @@ dependencies:
   - name: plugin-barman-cloud
     version: 0.5.0
     repository: https://cloudnative-pg.io/charts/
-icon: https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg.github.io/refs/heads/main/assets/images/hero_image.png
+icon: https://avatars.githubusercontent.com/u/100373852?s=200&v=4
 # renovate: datasource=github-releases depName=cloudnative-pg/cloudnative-pg
 appVersion: 1.28.1

clusters/cl01tl/helm/cloudnative-pg/values.yaml

@@ -1,16 +1,16 @@
 cloudnative-pg:
   replicaCount: 2
-  resources:
-    requests:
-      cpu: 10m
-      memory: 64Mi
   monitoring:
     podMonitorEnabled: true
 plugin-barman-cloud:
-  replicaCount: 2
+  replicaCount: 1
+  image:
+    registry: ghcr.io
+    repository: cloudnative-pg/plugin-barman-cloud
+    tag: v0.11.0
+  sidecarImage:
+    registry: ghcr.io
+    repository: cloudnative-pg/plugin-barman-cloud-sidecar
+    tag: v0.11.0
   crds:
     create: true
-  resources:
-    requests:
-      cpu: 10m
-      memory: 64Mi