chore(deps): update ghcr.io/traefik/traefik docker tag to v3.6.8

feat: disable l2 announcement
fix: change devices
2026-02-12 21:01:45 +00:00 · 2026-02-12 14:24:25 -06:00 · 2026-02-12 13:53:44 -06:00 · 2026-02-12 13:48:26 -06:00 · 2026-02-12 13:41:19 -06:00 · 2026-02-12 13:13:11 -06:00
8 changed files with 6 additions and 26 deletions
--- a/clusters/cl01tl/helm/cilium/templates/cilium-l2-announcement-policy.yaml
+++ b/clusters/cl01tl/helm/cilium/templates/cilium-l2-announcement-policy.yaml
@@ -1,18 +0,0 @@
-# apiVersion: "cilium.io/v2alpha1"
-# kind: CiliumL2AnnouncementPolicy
-# metadata:
-#   name: node-gateway-l2-policy
-#   namespace: {{ .Release.Namespace }}
-#   labels:
-#     app.kubernetes.io/name: node-gateway-l2-policy
-#     app.kubernetes.io/instance: {{ .Release.Name }}
-#     app.kubernetes.io/part-of: {{ .Release.Name }}
-# spec:
-#   nodeSelector:
-#     matchLabels:
-#       kubernetes.io/hostname: talos-ix7-xku
-#   interfaces:
-#     - end0
-#     - enp6s0
-#   externalIPs: true
-#   loadBalancerIPs: true
--- a/clusters/cl01tl/helm/cilium/templates/cilium-load-balancer-ip-pool.yaml
+++ b/clusters/cl01tl/helm/cilium/templates/cilium-load-balancer-ip-pool.yaml
@@ -11,8 +11,6 @@ spec:
  blocks:
    - start: "10.232.1.21"
      stop: "10.232.1.23"
-    - start: "10.232.2.21"
-      stop: "10.232.2.23"

 ---
 apiVersion: cilium.io/v2
--- a/clusters/cl01tl/helm/cilium/templates/gateway.yaml
+++ b/clusters/cl01tl/helm/cilium/templates/gateway.yaml
@@ -9,7 +9,6 @@
 #     app.kubernetes.io/part-of: {{ .Release.Name }}
 #   annotations:
 #     cert-manager.io/cluster-issuer: letsencrypt-issuer
-#     io.cilium/lb-ipam-ips: "10.232.1.23"
 # spec:
 #   addresses:
 #     - type: IPAddress
--- a/clusters/cl01tl/helm/cilium/values.yaml
+++ b/clusters/cl01tl/helm/cilium/values.yaml
@@ -38,7 +38,6 @@ cilium:
  bpf:
    hostLegacyRouting: true
  devices: end0 enp6s0
-  enableK8sEndpointSlice: true
  ciliumEndpointSlice:
    enabled: true
  ingressController:
@@ -47,6 +46,8 @@ cilium:
    enabled: true
    enableAlpn: true
    enableAppProtocol: true
+    gatewayClass:
+      create: auto
  externalIPs:
    enabled: true
  socketLB:
--- a/clusters/cl01tl/helm/snapshot-controller/Chart.yaml
+++ b/clusters/cl01tl/helm/snapshot-controller/Chart.yaml
@@ -19,4 +19,4 @@ dependencies:
    repository: https://piraeus.io/helm-charts/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 # renovate: datasource=github-releases depName=kubernetes-csi/external-snapshotter
-appVersion: v8.5.0
+appVersion: v8.4.0
--- a/hosts/ps08rp/traefik/compose.yaml
+++ b/hosts/ps08rp/traefik/compose.yaml
@@ -1,7 +1,7 @@
 ---
 services:
    traefik:
-        image: ghcr.io/traefik/traefik:v3.6.7
+        image: ghcr.io/traefik/traefik:v3.6.8
        container_name: traefik
        command:
            - "--global.checkNewVersion=false"
--- a/hosts/ps09rp/traefik/compose.yaml
+++ b/hosts/ps09rp/traefik/compose.yaml
@@ -1,7 +1,7 @@
 ---
 services:
    traefik:
-        image: ghcr.io/traefik/traefik:v3.6.7
+        image: ghcr.io/traefik/traefik:v3.6.8
        container_name: traefik
        command:
            - "--global.checkNewVersion=false"
--- a/hosts/ps10rp/traefik/compose.yaml
+++ b/hosts/ps10rp/traefik/compose.yaml
@@ -20,7 +20,7 @@ services:
            - /dev/net/tun:/dev/net/tun

    traefik:
-        image: ghcr.io/traefik/traefik:v3.6.7
+        image: ghcr.io/traefik/traefik:v3.6.8
        container_name: traefik
        command:
            - "--global.checkNewVersion=false"
Author	SHA1	Message	Date
Renovate Bot	2ee34dbd5e	chore(deps): update ghcr.io/traefik/traefik docker tag to v3.6.8 Some checks are pending renovate/stability-days Updates have not met minimum release age requirement Details lint-test-docker / lint-docker-compose (pull_request) Successful in 1m43s Details	2026-02-12 21:01:45 +00:00
Alex Lebens	b4919afab0	feat: disable l2 announcement All checks were successful lint-test-helm / lint-helm (push) Successful in 57s Details render-manifests-push / render-manifests-push (push) Successful in 2m12s Details renovate / renovate (push) Successful in 3m13s Details	2026-02-12 14:24:25 -06:00
Alex Lebens	a40b5916ea	fix: change devices All checks were successful lint-test-helm / lint-helm (push) Successful in 28s Details render-manifests-push / render-manifests-push (push) Successful in 39s Details renovate / renovate (push) Successful in 1m37s Details	2026-02-12 13:53:44 -06:00
Alex Lebens	d9090e17f4	feat: change ip range All checks were successful lint-test-helm / lint-helm (push) Successful in 12s Details render-manifests-push / render-manifests-push (push) Successful in 48s Details renovate / renovate (push) Successful in 1m29s Details	2026-02-12 13:48:26 -06:00
Alex Lebens	2613659827	fix: change cidr block All checks were successful lint-test-helm / lint-helm (push) Successful in 13s Details render-manifests-push / render-manifests-push (push) Successful in 36s Details renovate / renovate (push) Successful in 3m23s Details	2026-02-12 13:41:19 -06:00
Alex Lebens	2b301e503c	fix: change to auto All checks were successful lint-test-helm / lint-helm (push) Successful in 18s Details render-manifests-push / render-manifests-push (push) Successful in 1m26s Details renovate / renovate (push) Successful in 2m29s Details	2026-02-12 13:13:11 -06:00
Alex Lebens	7f4e75f2b5	feat: enable gateway and l2 Some checks failed lint-test-helm / lint-helm (push) Successful in 16s Details render-manifests-push / render-manifests-push (push) Failing after 1m48s Details renovate / renovate (push) Successful in 3m9s Details	2026-02-12 13:09:05 -06:00