alexlebens/infrastructure
1
0
Fork 0
Code Issues 1 Pull Requests 2 Actions Activity

Compare commits

base: alexlebens:f38f9db7f185b52ab969a4ea94a99f855e40dd61
Branches Tags
alexlebens:main alexlebens:renovate/major-unified-vault alexlebens:renovate/unified-cilium alexlebens:manifests
...
compare: alexlebens:renovate/major-unified-vault
Branches Tags
alexlebens:renovate/major-unified-vault alexlebens:renovate/unified-cilium alexlebens:manifests alexlebens:main

42 Commits
f38f9db7f1 ... renovate/m

Author SHA1 Message Date
Renovate Bot
a5734db1a7 chore(deps): update vault to v2
All checks were successful
lint-test-helm / lint-helm (pull_request) Successful in 1m24s
Details
lint-test-helm / validate-kubeconform (pull_request) Successful in 1m46s
Details
2026-04-18 00:25:56 +00:00
Alex Lebens
392b85063c Merge pull request 'feat: add openbao provider' (#6042) from tmp/external-secrets-1 into main
All checks were successful
lint-test-helm / lint-helm (push) Successful in 38s
Details
lint-test-helm / validate-kubeconform (push) Has been skipped
Details
renovate / renovate (push) Successful in 2m41s
Details 
Reviewed-on: #6042
 2026-04-18 00:21:32 +00:00
Alex Lebens
28e42346bc feat: add openbao provider 2026-04-18 00:21:32 +00:00
Alex Lebens
399d4dcd1f Merge pull request 'chore(deps): update gotenberg/gotenberg docker tag to v8.31.0' (#6025) from renovate/unified-gotenberg into main
Some checks failed
lint-test-helm / lint-helm (push) Successful in 1m9s
Details
lint-test-helm / validate-kubeconform (push) Has been skipped
Details
renovate / renovate (push) Has been cancelled
Details 
Reviewed-on: #6025
 2026-04-18 00:19:15 +00:00
Renovate Bot
705bbef630 chore(deps): update gotenberg/gotenberg docker tag to v8.31.0 2026-04-18 00:19:15 +00:00
Alex Lebens
6d8962f4f3 Merge pull request 'chore(deps): update ollama to v0.21.0' (#6020) from renovate/unified-ollama into main
Some checks failed
lint-test-helm / lint-helm (push) Successful in 43s
Details
lint-test-helm / validate-kubeconform (push) Has been skipped
Details
renovate / renovate (push) Has been cancelled
Details 
Reviewed-on: #6020
 2026-04-18 00:15:56 +00:00
Renovate Bot
f3dab16ef6 chore(deps): update ollama to v0.21.0
All checks were successful
lint-test-helm / lint-helm (pull_request) Successful in 34s
Details
lint-test-helm / validate-kubeconform (pull_request) Successful in 27s
Details
render-manifests / render-manifests (pull_request) Successful in 1m59s
Details
2026-04-17 22:56:04 +00:00
Renovate Bot
be8533eb51 Merge pull request 'chore(deps): update ghcr.io/renovatebot/renovate docker tag to v43.129.0' (#6041) from renovate/unified-renovate into main
All checks were successful
renovate / renovate (push) Successful in 8m52s
Details
2026-04-17 22:52:41 +00:00
Renovate Bot
a0dc068b4c chore(deps): update ghcr.io/renovatebot/renovate docker tag to v43.129.0
Some checks are pending
renovate/stability-days Updates have not met minimum release age requirement
Details
2026-04-17 22:52:23 +00:00
Renovate Bot
2f96f0fbd5 Merge pull request 'chore(deps): update home-assistant to v2026.4.3' (#6039) from renovate/unified-home-assistant into main
Some checks failed
lint-test-helm / lint-helm (push) Successful in 1m43s
Details
lint-test-helm / validate-kubeconform (push) Has been skipped
Details
renovate / renovate (push) Has been cancelled
Details
2026-04-17 22:47:43 +00:00
Renovate Bot
0e1084a47c chore(deps): update home-assistant to v2026.4.3
Some checks are pending
renovate/stability-days Updates have not met minimum release age requirement
Details
lint-test-helm / lint-helm (pull_request) Successful in 1m44s
Details
lint-test-helm / validate-kubeconform (pull_request) Has been skipped
Details
render-manifests / render-manifests (pull_request) Successful in 1m39s
Details
2026-04-17 22:47:08 +00:00
Alex Lebens
37eb4013c5 Merge pull request 'feat: increase disk' (#6037) from tmp/foldergram-10 into main
Some checks failed
lint-test-helm / lint-helm (push) Successful in 1m29s
Details
lint-test-helm / validate-kubeconform (push) Has been skipped
Details
renovate / renovate (push) Has been cancelled
Details 
Reviewed-on: #6037
 2026-04-17 22:40:17 +00:00
Alex Lebens
e924d44575 feat: increase disk
All checks were successful
lint-test-helm / lint-helm (pull_request) Successful in 1m11s
Details
lint-test-helm / validate-kubeconform (pull_request) Successful in 26s
Details
render-manifests / render-manifests (pull_request) Successful in 47s
Details
2026-04-17 17:25:13 -05:00
Renovate Bot
18f5c877fc Merge pull request 'chore(deps): update kube-prometheus-stack docker tag to v83.6.0' (#6033) from renovate/unified-kube-prometheus-stack into main
All checks were successful
lint-test-helm / lint-helm (push) Successful in 45s
Details
lint-test-helm / validate-kubeconform (push) Has been skipped
Details
renovate / renovate (push) Successful in 5m24s
Details
2026-04-17 16:11:41 +00:00
Renovate Bot
20c3975ac0 chore(deps): update kube-prometheus-stack docker tag to v83.6.0 2026-04-17 16:11:41 +00:00
Renovate Bot
596f78ee46 Merge pull request 'chore(deps): update ghcr.io/renovatebot/renovate docker tag to v43.128.0' (#6031) from renovate/unified-renovate into main
Some checks failed
renovate / renovate (push) Has been cancelled
Details
2026-04-17 16:10:34 +00:00
Renovate Bot
d139bb6c64 chore(deps): update ghcr.io/renovatebot/renovate docker tag to v43.128.0 2026-04-17 16:10:34 +00:00
Renovate Bot
07de43b11d Merge pull request 'chore(deps): update quay.io/openbao/openbao-csi-provider docker tag to v2.0.2' (#6029) from renovate/unified-openbao-csi-provider into main
Some checks failed
renovate / renovate (push) Has been cancelled
Details
lint-test-helm / validate-kubeconform (push) Has been cancelled
Details
lint-test-helm / lint-helm (push) Has been cancelled
Details
2026-04-17 16:09:38 +00:00
Renovate Bot
a7e75b2490 chore(deps): update quay.io/openbao/openbao-csi-provider docker tag to v2.0.2 2026-04-17 16:09:38 +00:00
Renovate Bot
608b297a2f Merge pull request 'chore(deps): update helm release traefik to v39.0.8' (#6028) from renovate/unified-traefik into main
Some checks failed
lint-test-helm / lint-helm (push) Has been cancelled
Details
lint-test-helm / validate-kubeconform (push) Has been cancelled
Details
renovate / renovate (push) Has been cancelled
Details
2026-04-17 16:09:08 +00:00
Renovate Bot
f7046cdde9 chore(deps): update helm release traefik to v39.0.8 2026-04-17 16:09:08 +00:00
Renovate Bot
64d0b4dcaa Merge pull request 'chore(deps): update helm release argo-cd to v9.5.2' (#6027) from renovate/unified-argo-cd into main
Some checks failed
lint-test-helm / validate-kubeconform (push) Has been cancelled
Details
lint-test-helm / lint-helm (push) Has been cancelled
Details
renovate / renovate (push) Has been cancelled
Details
2026-04-17 16:08:14 +00:00
Renovate Bot
fb944ff6a0 chore(deps): update helm release argo-cd to v9.5.2 2026-04-17 16:08:14 +00:00
Renovate Bot
40083248df Merge pull request 'chore(deps): update g33kphr33k/musicgrabber docker tag to v2.6.4' (#6026) from renovate/unified-musicgrabber into main
Some checks failed
lint-test-helm / validate-kubeconform (push) Has been cancelled
Details
lint-test-helm / lint-helm (push) Has been cancelled
Details
renovate / renovate (push) Has been cancelled
Details
2026-04-17 16:07:33 +00:00
Renovate Bot
490ff01333 chore(deps): update g33kphr33k/musicgrabber docker tag to v2.6.4
Some checks are pending
renovate/stability-days Updates have not met minimum release age requirement
Details
lint-test-helm / lint-helm (pull_request) Successful in 2m20s
Details
render-manifests / render-manifests (pull_request) Successful in 2m39s
Details
lint-test-helm / validate-kubeconform (pull_request) Successful in 58s
Details
2026-04-17 16:07:02 +00:00
Renovate Bot
65e8752345 Merge pull request 'chore(deps): update searxng/searxng:latest docker digest to 0bbe85f' (#6023) from renovate/unified-searxng into main
All checks were successful
lint-test-helm / lint-helm (push) Successful in 26s
Details
lint-test-helm / validate-kubeconform (push) Has been skipped
Details
render-manifests / render-manifests (push) Successful in 10m10s
Details
renovate / renovate (push) Successful in 11m16s
Details
2026-04-17 13:02:50 +00:00
Renovate Bot
ca59e30823 chore(deps): update searxng/searxng:latest docker digest to 0bbe85f
All checks were successful
render-manifests / render-manifests (pull_request) Successful in 1m11s
Details
lint-test-helm / lint-helm (pull_request) Successful in 1m29s
Details
lint-test-helm / validate-kubeconform (pull_request) Has been skipped
Details
2026-04-17 13:02:32 +00:00
Renovate Bot
9716aab3c6 Merge pull request 'chore(deps): update searxng/searxng:latest docker digest to 9d797e9' (#6021) from renovate/unified-searxng into main
All checks were successful
lint-test-helm / lint-helm (push) Successful in 21s
Details
lint-test-helm / validate-kubeconform (push) Has been skipped
Details
renovate / renovate (push) Successful in 2m9s
Details
2026-04-17 06:03:30 +00:00
Renovate Bot
6e58b89efb chore(deps): update searxng/searxng:latest docker digest to 9d797e9
All checks were successful
lint-test-helm / lint-helm (pull_request) Successful in 27s
Details
lint-test-helm / validate-kubeconform (pull_request) Successful in 20s
Details
render-manifests / render-manifests (pull_request) Successful in 1m8s
Details
2026-04-17 06:03:07 +00:00
Alex Lebens
25db09f40e Merge pull request 'feat: change audit' (#6018) from tmp/openbao-6 into main
All checks were successful
lint-test-helm / lint-helm (push) Successful in 21s
Details
lint-test-helm / validate-kubeconform (push) Has been skipped
Details
renovate / renovate (push) Successful in 2m57s
Details 
Reviewed-on: #6018
 2026-04-17 01:35:07 +00:00
Alex Lebens
fbcc18babb feat: change audit
All checks were successful
lint-test-helm / lint-helm (pull_request) Successful in 23s
Details
lint-test-helm / validate-kubeconform (pull_request) Successful in 27s
Details
render-manifests / render-manifests (pull_request) Successful in 1m5s
Details
2026-04-16 20:33:17 -05:00
Alex Lebens
51e4d0dfe8 Merge pull request 'feat: change flags' (#6016) from tmp/openbao-5 into main
All checks were successful
lint-test-helm / lint-helm (push) Successful in 26s
Details
lint-test-helm / validate-kubeconform (push) Has been skipped
Details
renovate / renovate (push) Successful in 2m7s
Details 
Reviewed-on: #6016
 2026-04-17 00:32:48 +00:00
Alex Lebens
5ceb85fff0 feat: change flags
All checks were successful
lint-test-helm / lint-helm (pull_request) Successful in 30s
Details
lint-test-helm / validate-kubeconform (pull_request) Successful in 30s
Details
render-manifests / render-manifests (pull_request) Successful in 1m7s
Details
2026-04-16 19:31:05 -05:00
Alex Lebens
5dd6d5087f Merge pull request 'feat: add audit to config' (#6015) from tmp/openbao-4 into main
All checks were successful
lint-test-helm / lint-helm (push) Successful in 1m4s
Details
lint-test-helm / validate-kubeconform (push) Has been skipped
Details
renovate / renovate (push) Successful in 2m51s
Details 
Reviewed-on: #6015
 2026-04-17 00:17:49 +00:00
Alex Lebens
eb2e076b60 feat: add audit to config 2026-04-17 00:17:49 +00:00
Alex Lebens
e5d49c29a6 Merge pull request 'feat: switch to httproute' (#6013) from tmp/openbao-3 into main
All checks were successful
lint-test-helm / lint-helm (push) Successful in 37s
Details
lint-test-helm / validate-kubeconform (push) Has been skipped
Details
renovate / renovate (push) Successful in 4m38s
Details 
Reviewed-on: #6013
 2026-04-16 23:58:48 +00:00
Alex Lebens
c703ad6f1b feat: switch to httproute
All checks were successful
lint-test-helm / lint-helm (pull_request) Successful in 30s
Details
lint-test-helm / validate-kubeconform (pull_request) Successful in 27s
Details
render-manifests / render-manifests (pull_request) Successful in 1m12s
Details
2026-04-16 18:55:03 -05:00
Alex Lebens
5692754466 Merge pull request 'chore(deps): update harbor.alexlebens.net/images/site-documentation docker tag to v0.26.0' (#6010) from renovate/unified-site-documentation into main
All checks were successful
lint-test-helm / lint-helm (push) Successful in 21s
Details
lint-test-helm / validate-kubeconform (push) Has been skipped
Details
renovate / renovate (push) Successful in 2m50s
Details 
Reviewed-on: #6010
 2026-04-16 22:07:30 +00:00
Renovate Bot
7199c265e7 chore(deps): update harbor.alexlebens.net/images/site-documentation docker tag to v0.26.0 2026-04-16 22:07:30 +00:00
Alex Lebens
35fa1ecb7e Merge pull request 'chore(deps): update houndarr to v1.8.0' (#6011) from renovate/unified-houndarr into main
Some checks failed
lint-test-helm / lint-helm (push) Successful in 44s
Details
lint-test-helm / validate-kubeconform (push) Has been skipped
Details
renovate / renovate (push) Has been cancelled
Details 
Reviewed-on: #6011
 2026-04-16 22:05:36 +00:00
Renovate Bot
8504fe8f8b chore(deps): update houndarr to v1.8.0
All checks were successful
lint-test-helm / lint-helm (pull_request) Successful in 3m1s
Details
lint-test-helm / validate-kubeconform (pull_request) Successful in 25s
Details
render-manifests / render-manifests (pull_request) Successful in 1m29s
Details
2026-04-16 21:25:28 +00:00
Alex Lebens
d0353a599d Merge pull request 'chore(deps): update dxflrs/garage docker tag to v2.3.0' (#6007) from renovate/unified-garage into main
All checks were successful
lint-test-docker / lint-docker-compose (push) Successful in 6m31s
Details
lint-test-helm / lint-helm (push) Successful in 15m5s
Details
lint-test-helm / validate-kubeconform (push) Has been skipped
Details
renovate / renovate (push) Successful in 4m49s
Details 
Reviewed-on: #6007
 2026-04-16 21:19:21 +00:00
24 changed files with 89 additions and 31 deletions
Expand all files Collapse all files

2
.gitea/workflows/renovate.yaml
View File

@@ -13,7 +13,7 @@ on:
jobs:
renovate:
runs-on: ubuntu-latest
container: ghcr.io/renovatebot/renovate:43.125.1@sha256:c85cf1a918a3deaaed3d60ffb885ae8b0afaf9eb43effef0e857a2fe246a234a
container: ghcr.io/renovatebot/renovate:43.129.0@sha256:e4abd88d1d6326fe8a702b38c5ee76487d94b455ba4f305bd904521aba9f5a08
steps:
- name: Checkout
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6

2
clusters/cl01tl/helm/argocd/Chart.yaml
View File

@@ -13,7 +13,7 @@ maintainers:
- name: alexlebens
dependencies:
- name: argo-cd
version: 9.5.1
version: 9.5.2
repository: https://argoproj.github.io/argo-helm
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
# renovate: datasource=github-releases depName=argoproj/argo-cd

2
clusters/cl01tl/helm/external-secrets/Chart.yaml
View File

@@ -18,4 +18,4 @@ dependencies:
repository: https://charts.external-secrets.io
icon: https://raw.githubusercontent.com/external-secrets/external-secrets/refs/heads/main/assets/eso-logo-large.png
# renovate: datasource=github-releases depName=external-secrets/external-secrets
appVersion: vv2.3.0
appVersion: v2.3.0

17
clusters/cl01tl/helm/external-secrets/templates/cluster-role-binding.yaml Normal file
View File

@@ -0,0 +1,17 @@
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
name: external-secrets
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: external-secrets
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: system:auth-delegator
subjects:
- kind: ServiceAccount
name: external-secrets
namespace: {{ .Release.Namespace }}

25
clusters/cl01tl/helm/external-secrets/templates/cluster-secret-store.yaml
View File

@@ -17,3 +17,28 @@ spec:
namespace: vault
name: vault-token
key: token
---
apiVersion: external-secrets.io/v1
kind: ClusterSecretStore
metadata:
name: openbao
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: openbao
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec:
provider:
vault:
server: http://openbao-internal.openbao:8200
path: secret
version: v2
auth:
kubernetes:
mountPath: kubernetes
role: external-secrets
serviceAccountRef:
name: external-secrets
audiences:
- openbao

2
clusters/cl01tl/helm/foldergram/values.yaml
View File

@@ -70,7 +70,7 @@ foldergram:
forceRename: foldergram-data
storageClass: synology-iscsi-delete
accessMode: ReadWriteOnce
size: 150Gi
size: 250Gi
advancedMounts:
main:
main:

2
clusters/cl01tl/helm/home-assistant/Chart.yaml
View File

@@ -24,4 +24,4 @@ dependencies:
repository: oci://harbor.alexlebens.net/helm-charts
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/home-assistant.png
# renovate: datasource=github-releases depName=home-assistant/core
appVersion: 2026.4.2
appVersion: 2026.4.3

2
clusters/cl01tl/helm/home-assistant/values.yaml
View File

@@ -12,7 +12,7 @@ home-assistant:
main:
image:
repository: ghcr.io/home-assistant/home-assistant
tag: 2026.4.2@sha256:4c940155cfd5b0187a6faee2db5d52b98bb573edc1aeee95d0818bb17b6534d7
tag: 2026.4.3@sha256:ae0800c81fea16bc1241ce03bddb9c6260566e90f58b09d3e5a629e4f68bdc0b
env:
- name: TZ
value: America/Chicago

2
clusters/cl01tl/helm/houndarr/Chart.yaml
View File

@@ -25,4 +25,4 @@ dependencies:
repository: oci://harbor.alexlebens.net/helm-charts
icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/houndarr.png
# renovate: datasource=github-releases depName=av1155/houndarr
appVersion: v1.7.0
appVersion: v1.8.0

2
clusters/cl01tl/helm/houndarr/values.yaml
View File

@@ -8,7 +8,7 @@ houndarr:
main:
image:
repository: ghcr.io/av1155/houndarr
tag: v1.7.0@sha256:8ae2a8b86497cbc54d11591c12220f3be3319039c2bdd0c8b041b2b7c2fd7943
tag: v1.8.0@sha256:6d213dadb625e0cebdd6e28358e2815f9ceccf133bb5469b6bc837cf1a70c9e2
env:
- name: TZ
value: America/Chicago

6
clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock
View File

@@ -1,7 +1,7 @@
dependencies:
- name: kube-prometheus-stack
repository: oci://ghcr.io/prometheus-community/charts
version: 83.5.0
version: 83.6.0
- name: prometheus-operator-crds
repository: oci://ghcr.io/prometheus-community/charts
version: 28.0.1
@@ -11,5 +11,5 @@ dependencies:
- name: valkey
repository: oci://harbor.alexlebens.net/helm-charts
version: 0.6.1
digest: sha256:555ebcb0a43ef44e1c0eb4b0603a54027e757eb24c6041e0051075641656fdd2
generated: "2026-04-16T16:11:08.272959931Z"
digest: sha256:f80cb9a91bb13c3538ffdf4bc95b0750202a76167b05a3958f5aff2220484b0c
generated: "2026-04-17T16:10:54.211656328Z"

2
clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml
View File

@@ -20,7 +20,7 @@ maintainers:
- name: alexlebens
dependencies:
- name: kube-prometheus-stack
version: 83.5.0
version: 83.6.0
repository: oci://ghcr.io/prometheus-community/charts
- name: prometheus-operator-crds
version: 28.0.1

2
clusters/cl01tl/helm/music-grabber/Chart.yaml
View File

@@ -24,4 +24,4 @@ dependencies:
repository: oci://harbor.alexlebens.net/helm-charts
icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/music-grabber.png
# renovate: datasource=docker depName=g33kphr33k/musicgrabber
appVersion: 2.6.3
appVersion: 2.6.4

2
clusters/cl01tl/helm/music-grabber/values.yaml
View File

@@ -12,7 +12,7 @@ music-grabber:
main:
image:
repository: g33kphr33k/musicgrabber
tag: 2.6.3@sha256:33ccf823b27387c5080da6df7e1b22f1e6443f878cfbf14fb06a6abcef79991d
tag: 2.6.4@sha256:e54d4b7abb395cd95ed4d9c9c8ca230ea789620484da148cc128b3981577c066
env:
- name: MUSIC_DIR
value: /mnt/store/Music Grabber/

2
clusters/cl01tl/helm/ollama/Chart.yaml
View File

@@ -31,4 +31,4 @@ dependencies:
repository: oci://harbor.alexlebens.net/helm-charts
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ollama.png
# renovate: datasource=github-releases depName=ollama/ollama
appVersion: 0.20.7
appVersion: 0.21.0

6
clusters/cl01tl/helm/ollama/values.yaml
View File

@@ -21,7 +21,7 @@ ollama:
main:
image:
repository: ollama/ollama
tag: 0.20.7@sha256:487324a9312240e3e122446f351b1f1e3f68d884ef854c246db2e08792440d94
tag: 0.21.0@sha256:d3d553bdfbcc7f55dd5ddf42c4cbe3a927aa9bb1802710d35e94656ca5aea02b
env:
- name: OLLAMA_KEEP_ALIVE
value: 24h
@@ -55,7 +55,7 @@ ollama:
main:
image:
repository: ollama/ollama
tag: 0.20.7@sha256:487324a9312240e3e122446f351b1f1e3f68d884ef854c246db2e08792440d94
tag: 0.21.0@sha256:d3d553bdfbcc7f55dd5ddf42c4cbe3a927aa9bb1802710d35e94656ca5aea02b
env:
- name: OLLAMA_KEEP_ALIVE
value: 24h
@@ -89,7 +89,7 @@ ollama:
main:
image:
repository: ollama/ollama
tag: 0.20.7@sha256:487324a9312240e3e122446f351b1f1e3f68d884ef854c246db2e08792440d94
tag: 0.21.0@sha256:d3d553bdfbcc7f55dd5ddf42c4cbe3a927aa9bb1802710d35e94656ca5aea02b
env:
- name: OLLAMA_KEEP_ALIVE
value: 24h

20
clusters/cl01tl/helm/openbao/values.yaml
View File

@@ -25,6 +25,15 @@ openbao:
kind: Gateway
name: traefik-gateway
namespace: traefik
httpRoute:
enabled: true
hosts:
- bao.alexlebens.net
parentRefs:
- group: gateway.networking.k8s.io
kind: Gateway
name: traefik-gateway
namespace: traefik
authDelegator:
enabled: true
livenessProbe:
@@ -68,6 +77,13 @@ openbao:
}
}
audit "file" "to-stdout" {
options {
file_path = "/openbao/audit/openbao_audit.log"
log_raw = "true"
}
}
service_registration "kubernetes" {}
telemetry {
@@ -79,7 +95,7 @@ openbao:
image:
registry: quay.io
repository: openbao/openbao-csi-provider
tag: 2.0.1@sha256:a3bd5e8183da778b5dc79ee1a3d7313ac77dc599b623b4106a91b19362674f27
tag: 2.0.2@sha256:3cb312e88c62c926caec03bf69497a16805a29daabb5ad2c7a236ab43bb241db
resources:
requests:
cpu: 50m
@@ -125,7 +141,7 @@ openbao:
s3Bucket: openbao-backups
s3Uri: s3://openbao-backups
s3ExpireDays: "30"
s3cmdExtraFlag: "-v"
s3cmdExtraFlag: "-v --no-ssl"
baoAuthPath: kubernetes
baoRole: bao-snapshot
unseal:

2
clusters/cl01tl/helm/paperless-ngx/values.yaml
View File

@@ -86,7 +86,7 @@ paperless-ngx:
gotenberg:
image:
repository: gotenberg/gotenberg
tag: 8.30.1@sha256:206a6c708fc6d05257367d9ac902d6c56c50d2e3284d0596ea000814ef97f22c
tag: 8.31.0@sha256:f0d86e8a1dbc7b33a5a65cb251d02bb271a48ffa989da3feb5ed7d954fe4d4b3
service:
main:
controller: main

4
clusters/cl01tl/helm/searxng/values.yaml
View File

@@ -8,7 +8,7 @@ searxng:
main:
image:
repository: searxng/searxng
tag: latest@sha256:222b4c11534e0bd9b5ed80081680094a1d663413cbe1d142e184515c4035fc23
tag: latest@sha256:0bbe85fb9bebe413a26c0e385c76309d15c91fdb9dc8a6bf01b35b714d0ece43
env:
- name: SEARXNG_BASE_URL
value: http://searxng-api.searxng:8080
@@ -36,7 +36,7 @@ searxng:
main:
image:
repository: searxng/searxng
tag: latest@sha256:222b4c11534e0bd9b5ed80081680094a1d663413cbe1d142e184515c4035fc23
tag: latest@sha256:0bbe85fb9bebe413a26c0e385c76309d15c91fdb9dc8a6bf01b35b714d0ece43
env:
- name: SEARXNG_BASE_URL
value: https://searxng.alexlebens.net/

2
clusters/cl01tl/helm/site-documentation/values.yaml
View File

@@ -10,7 +10,7 @@ site-documentation:
main:
image:
repository: harbor.alexlebens.net/images/site-documentation
tag: 0.25.0@sha256:1509b20e703617ce8e6fc78fa599a56c09be178541adc82da406632f9af15d97
tag: 0.26.0@sha256:fbd3167788a75a637aef0be6ef32bef685ce4af59f45e955cc6eb57ed8b1fd87
resources:
requests:
cpu: 10m

6
clusters/cl01tl/helm/traefik/Chart.lock
View File

@@ -1,9 +1,9 @@
dependencies:
- name: traefik
repository: https://traefik.github.io/charts
version: 39.0.7
version: 39.0.8
- name: traefik-crds
repository: https://traefik.github.io/charts
version: 1.16.0
digest: sha256:42a2f2844385eb79724b6d7b49ed8adfd4f8237ee63ea55aa6ec7b3b3636dd3e
generated: "2026-03-31T21:37:50.410289754Z"
digest: sha256:e63ea5a588f53e421e33372390b0755609974029827762aa17ff5caec3ddd90c
generated: "2026-04-17T16:08:27.772737904Z"

2
clusters/cl01tl/helm/traefik/Chart.yaml
View File

@@ -14,7 +14,7 @@ maintainers:
- name: alexlebens
dependencies:
- name: traefik
version: 39.0.7
version: 39.0.8
repository: https://traefik.github.io/charts
- name: traefik-crds
version: 1.16.0

2
clusters/cl01tl/helm/vault/Chart.yaml
View File

@@ -31,4 +31,4 @@ dependencies:
version: 4.6.2
icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/hashicorp-vault.png
# renovate: datasource=github-releases depName=hashicorp/vault
appVersion: 1.21.4
appVersion: 2.0.0

4
clusters/cl01tl/helm/vault/values.yaml
View File

@@ -8,7 +8,7 @@ vault:
enabled: true
image:
repository: hashicorp/vault
tag: 1.21.4@sha256:4e33b126a59c0c333b76fb4e894722462659a6bec7c48c9ee8cea56fccfd2569
tag: 2.0.0@sha256:e40c741ed95bb271425e3e6ca6c222d620cf8682f6f7a1b1e7c9d49d0aba484b
updateStrategyType: RollingUpdate
logLevel: debug
logFormat: standard
@@ -111,7 +111,7 @@ snapshot:
snapshot:
image:
repository: hashicorp/vault
tag: 1.21.4@sha256:4e33b126a59c0c333b76fb4e894722462659a6bec7c48c9ee8cea56fccfd2569
tag: 2.0.0@sha256:e40c741ed95bb271425e3e6ca6c222d620cf8682f6f7a1b1e7c9d49d0aba484b
command:
- /bin/ash
args: