chore(deps): update kube-prometheus-stack docker tag to v82.4.0

clusters/cl01tl/helm/authentik/templates/reference-grant.yaml

@@ -9,30 +9,9 @@ metadata:
     app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   from:
-    - group: gateway.networking.k8s.io
-      kind: HTTPRoute
-      namespace: lidarr
-    - group: gateway.networking.k8s.io
-      kind: HTTPRoute
-      namespace: radarr
-    - group: gateway.networking.k8s.io
-      kind: HTTPRoute
-      namespace: radarr-4k
-    - group: gateway.networking.k8s.io
-      kind: HTTPRoute
-      namespace: radarr-anime
-    - group: gateway.networking.k8s.io
-      kind: HTTPRoute
-      namespace: radarr-standup
-    - group: gateway.networking.k8s.io
-      kind: HTTPRoute
-      namespace: sonarr
     - group: gateway.networking.k8s.io
       kind: HTTPRoute
       namespace: sonarr-4k
-    - group: gateway.networking.k8s.io
-      kind: HTTPRoute
-      namespace: sonarr-anime
   to:
     - group: ""
       kind: Service

clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock

@@ -9,4 +9,4 @@ dependencies:
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.0.4
 digest: sha256:24214c0bc1e6aed9954385aa61b403a7fa4b4e92bac09777504635cba98735ba
-generated: "2026-02-25T23:46:14.059155578Z"
+generated: "2026-02-25T23:11:49.560013935Z"

clusters/cl01tl/helm/lidarr/templates/middleware.yaml

@@ -1,26 +0,0 @@
-apiVersion: traefik.io/v1alpha1
-kind: Middleware
-metadata:
-  name: oidc-forward-auth
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: oidc-forward-auth
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  forwardAuth:
-    address: http://ak-outpost-traefik-proxy-auth.authentik.svc.cluster.local:9000/outpost.goauthentik.io/auth/traefik
-    trustForwardHeader: true
-    authResponseHeaders:
-      - X-authentik-username
-      - X-authentik-groups
-      - X-authentik-entitlements
-      - X-authentik-email
-      - X-authentik-name
-      - X-authentik-uid
-      - X-authentik-jwt
-      - X-authentik-meta-jwks
-      - X-authentik-meta-outpost
-      - X-authentik-meta-provider
-      - X-authentik-meta-app
-      - X-authentik-meta-version

clusters/cl01tl/helm/lidarr/values.yaml

@@ -84,28 +84,12 @@ lidarr:
       hostnames:
         - lidarr.alexlebens.net
       rules:
-        - backendRefs:
-            - name: ak-outpost-traefik-proxy-auth
-              namespace: authentik
-              port: 9000
-              weight: 100
-          filters: []
-          matches:
-            - path:
-                type: PathPrefix
-                value: /outpost.goauthentik.io
         - backendRefs:
             - group: ''
               kind: Service
               name: lidarr
               port: 80
               weight: 100
-          filters:
-            - type: ExtensionRef
-              extensionRef:
-                group: traefik.io
-                kind: Middleware
-                name: oidc-forward-auth
           matches:
             - path:
                 type: PathPrefix

clusters/cl01tl/helm/radarr-4k/templates/middleware.yaml

@@ -1,26 +0,0 @@
-apiVersion: traefik.io/v1alpha1
-kind: Middleware
-metadata:
-  name: oidc-forward-auth
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: oidc-forward-auth
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  forwardAuth:
-    address: http://ak-outpost-traefik-proxy-auth.authentik.svc.cluster.local:9000/outpost.goauthentik.io/auth/traefik
-    trustForwardHeader: true
-    authResponseHeaders:
-      - X-authentik-username
-      - X-authentik-groups
-      - X-authentik-entitlements
-      - X-authentik-email
-      - X-authentik-name
-      - X-authentik-uid
-      - X-authentik-jwt
-      - X-authentik-meta-jwks
-      - X-authentik-meta-outpost
-      - X-authentik-meta-provider
-      - X-authentik-meta-app
-      - X-authentik-meta-version

clusters/cl01tl/helm/radarr-4k/values.yaml

@@ -84,28 +84,12 @@ radarr-4k:
       hostnames:
         - radarr-4k.alexlebens.net
       rules:
-        - backendRefs:
-            - name: ak-outpost-traefik-proxy-auth
-              namespace: authentik
-              port: 9000
-              weight: 100
-          filters: []
-          matches:
-            - path:
-                type: PathPrefix
-                value: /outpost.goauthentik.io
         - backendRefs:
             - group: ''
               kind: Service
               name: radarr-4k
               port: 80
               weight: 100
-          filters:
-            - type: ExtensionRef
-              extensionRef:
-                group: traefik.io
-                kind: Middleware
-                name: oidc-forward-auth
           matches:
             - path:
                 type: PathPrefix

clusters/cl01tl/helm/radarr-anime/templates/middleware.yaml

@@ -1,26 +0,0 @@
-apiVersion: traefik.io/v1alpha1
-kind: Middleware
-metadata:
-  name: oidc-forward-auth
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: oidc-forward-auth
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  forwardAuth:
-    address: http://ak-outpost-traefik-proxy-auth.authentik.svc.cluster.local:9000/outpost.goauthentik.io/auth/traefik
-    trustForwardHeader: true
-    authResponseHeaders:
-      - X-authentik-username
-      - X-authentik-groups
-      - X-authentik-entitlements
-      - X-authentik-email
-      - X-authentik-name
-      - X-authentik-uid
-      - X-authentik-jwt
-      - X-authentik-meta-jwks
-      - X-authentik-meta-outpost
-      - X-authentik-meta-provider
-      - X-authentik-meta-app
-      - X-authentik-meta-version

clusters/cl01tl/helm/radarr-anime/values.yaml

@@ -82,28 +82,12 @@ radarr-anime:
       hostnames:
         - radarr-anime.alexlebens.net
       rules:
-        - backendRefs:
-            - name: ak-outpost-traefik-proxy-auth
-              namespace: authentik
-              port: 9000
-              weight: 100
-          filters: []
-          matches:
-            - path:
-                type: PathPrefix
-                value: /outpost.goauthentik.io
         - backendRefs:
             - group: ''
               kind: Service
               name: radarr-anime
               port: 80
               weight: 100
-          filters:
-            - type: ExtensionRef
-              extensionRef:
-                group: traefik.io
-                kind: Middleware
-                name: oidc-forward-auth
           matches:
             - path:
                 type: PathPrefix

clusters/cl01tl/helm/radarr-standup/templates/middleware.yaml

@@ -1,26 +0,0 @@
-apiVersion: traefik.io/v1alpha1
-kind: Middleware
-metadata:
-  name: oidc-forward-auth
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: oidc-forward-auth
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  forwardAuth:
-    address: http://ak-outpost-traefik-proxy-auth.authentik.svc.cluster.local:9000/outpost.goauthentik.io/auth/traefik
-    trustForwardHeader: true
-    authResponseHeaders:
-      - X-authentik-username
-      - X-authentik-groups
-      - X-authentik-entitlements
-      - X-authentik-email
-      - X-authentik-name
-      - X-authentik-uid
-      - X-authentik-jwt
-      - X-authentik-meta-jwks
-      - X-authentik-meta-outpost
-      - X-authentik-meta-provider
-      - X-authentik-meta-app
-      - X-authentik-meta-version

clusters/cl01tl/helm/radarr-standup/values.yaml

@@ -82,28 +82,12 @@ radarr-standup:
       hostnames:
         - radarr-standup.alexlebens.net
       rules:
-        - backendRefs:
-            - name: ak-outpost-traefik-proxy-auth
-              namespace: authentik
-              port: 9000
-              weight: 100
-          filters: []
-          matches:
-            - path:
-                type: PathPrefix
-                value: /outpost.goauthentik.io
         - backendRefs:
             - group: ''
               kind: Service
               name: radarr-standup
               port: 80
               weight: 100
-          filters:
-            - type: ExtensionRef
-              extensionRef:
-                group: traefik.io
-                kind: Middleware
-                name: oidc-forward-auth
           matches:
             - path:
                 type: PathPrefix

clusters/cl01tl/helm/radarr/templates/middleware.yaml

@@ -1,26 +0,0 @@
-apiVersion: traefik.io/v1alpha1
-kind: Middleware
-metadata:
-  name: oidc-forward-auth
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: oidc-forward-auth
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  forwardAuth:
-    address: http://ak-outpost-traefik-proxy-auth.authentik.svc.cluster.local:9000/outpost.goauthentik.io/auth/traefik
-    trustForwardHeader: true
-    authResponseHeaders:
-      - X-authentik-username
-      - X-authentik-groups
-      - X-authentik-entitlements
-      - X-authentik-email
-      - X-authentik-name
-      - X-authentik-uid
-      - X-authentik-jwt
-      - X-authentik-meta-jwks
-      - X-authentik-meta-outpost
-      - X-authentik-meta-provider
-      - X-authentik-meta-app
-      - X-authentik-meta-version

clusters/cl01tl/helm/radarr/values.yaml

@@ -84,28 +84,12 @@ radarr:
       hostnames:
         - radarr.alexlebens.net
       rules:
-        - backendRefs:
-            - name: ak-outpost-traefik-proxy-auth
-              namespace: authentik
-              port: 9000
-              weight: 100
-          filters: []
-          matches:
-            - path:
-                type: PathPrefix
-                value: /outpost.goauthentik.io
         - backendRefs:
             - group: ''
               kind: Service
               name: radarr
               port: 80
               weight: 100
-          filters:
-            - type: ExtensionRef
-              extensionRef:
-                group: traefik.io
-                kind: Middleware
-                name: oidc-forward-auth
           matches:
             - path:
                 type: PathPrefix

clusters/cl01tl/helm/searxng/values.yaml

@@ -9,7 +9,7 @@ searxng:
         main:
           image:
             repository: searxng/searxng
-            tag: latest@sha256:2c86f95c22dde03f5354a81b027ec882830748c5fe6454f03c7ec8fc384e54ea
+            tag: latest@sha256:edf110a2816d8963949d03879c72a7e19c221b5f7bfb7952a33ae073f96ccb18
             pullPolicy: IfNotPresent
           env:
             - name: SEARXNG_BASE_URL
@@ -39,7 +39,7 @@ searxng:
         main:
           image:
             repository: searxng/searxng
-            tag: latest@sha256:2c86f95c22dde03f5354a81b027ec882830748c5fe6454f03c7ec8fc384e54ea
+            tag: latest@sha256:edf110a2816d8963949d03879c72a7e19c221b5f7bfb7952a33ae073f96ccb18
             pullPolicy: IfNotPresent
           env:
             - name: SEARXNG_BASE_URL

clusters/cl01tl/helm/site-documentation/values.yaml

@@ -11,7 +11,7 @@ site-documentation:
         main:
           image:
             repository: harbor.alexlebens.net/images/site-documentation
-            tag: 0.1.6
+            tag: 0.1.5
             pullPolicy: IfNotPresent
           resources:
             requests:

clusters/cl01tl/helm/site-profile/values.yaml

@@ -11,7 +11,7 @@ site-profile:
         main:
           image:
             repository: harbor.alexlebens.net/images/site-profile
-            tag: 2.16.0
+            tag: 2.15.1
             pullPolicy: IfNotPresent
           resources:
             requests:

clusters/cl01tl/helm/sonarr-4k/templates/middleware.yaml

@@ -11,7 +11,10 @@ spec:
   forwardAuth:
     address: http://ak-outpost-traefik-proxy-auth.authentik.svc.cluster.local:9000/outpost.goauthentik.io/auth/traefik
     trustForwardHeader: true
+    authRequestHeaders:
+      - X-Forwarded-Proto
     authResponseHeaders:
+      - Set-Cookie
       - X-authentik-username
       - X-authentik-groups
       - X-authentik-entitlements

clusters/cl01tl/helm/sonarr-4k/values.yaml

@@ -86,8 +86,6 @@ sonarr-4k:
             - name: ak-outpost-traefik-proxy-auth
               namespace: authentik
               port: 9000
-              weight: 100
-          filters: []
           matches:
             - path:
                 type: PathPrefix

clusters/cl01tl/helm/sonarr-anime/templates/middleware.yaml

@@ -1,26 +0,0 @@
-apiVersion: traefik.io/v1alpha1
-kind: Middleware
-metadata:
-  name: oidc-forward-auth
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: oidc-forward-auth
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  forwardAuth:
-    address: http://ak-outpost-traefik-proxy-auth.authentik.svc.cluster.local:9000/outpost.goauthentik.io/auth/traefik
-    trustForwardHeader: true
-    authResponseHeaders:
-      - X-authentik-username
-      - X-authentik-groups
-      - X-authentik-entitlements
-      - X-authentik-email
-      - X-authentik-name
-      - X-authentik-uid
-      - X-authentik-jwt
-      - X-authentik-meta-jwks
-      - X-authentik-meta-outpost
-      - X-authentik-meta-provider
-      - X-authentik-meta-app
-      - X-authentik-meta-version

clusters/cl01tl/helm/sonarr-anime/values.yaml

@@ -82,28 +82,12 @@ sonarr-anime:
       hostnames:
         - sonarr-anime.alexlebens.net
       rules:
-        - backendRefs:
-            - name: ak-outpost-traefik-proxy-auth
-              namespace: authentik
-              port: 9000
-              weight: 100
-          filters: []
-          matches:
-            - path:
-                type: PathPrefix
-                value: /outpost.goauthentik.io
         - backendRefs:
             - group: ''
               kind: Service
               name: sonarr-anime
               port: 80
               weight: 100
-          filters:
-            - type: ExtensionRef
-              extensionRef:
-                group: traefik.io
-                kind: Middleware
-                name: oidc-forward-auth
           matches:
             - path:
                 type: PathPrefix

clusters/cl01tl/helm/sonarr/templates/middleware.yaml

@@ -1,26 +0,0 @@
-apiVersion: traefik.io/v1alpha1
-kind: Middleware
-metadata:
-  name: oidc-forward-auth
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: oidc-forward-auth
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  forwardAuth:
-    address: http://ak-outpost-traefik-proxy-auth.authentik.svc.cluster.local:9000/outpost.goauthentik.io/auth/traefik
-    trustForwardHeader: true
-    authResponseHeaders:
-      - X-authentik-username
-      - X-authentik-groups
-      - X-authentik-entitlements
-      - X-authentik-email
-      - X-authentik-name
-      - X-authentik-uid
-      - X-authentik-jwt
-      - X-authentik-meta-jwks
-      - X-authentik-meta-outpost
-      - X-authentik-meta-provider
-      - X-authentik-meta-app
-      - X-authentik-meta-version

clusters/cl01tl/helm/sonarr/values.yaml

@@ -82,28 +82,12 @@ sonarr:
       hostnames:
         - sonarr.alexlebens.net
       rules:
-        - backendRefs:
-            - name: ak-outpost-traefik-proxy-auth
-              namespace: authentik
-              port: 9000
-              weight: 100
-          filters: []
-          matches:
-            - path:
-                type: PathPrefix
-                value: /outpost.goauthentik.io
         - backendRefs:
             - group: ''
               kind: Service
               name: sonarr
               port: 80
               weight: 100
-          filters:
-            - type: ExtensionRef
-              extensionRef:
-                group: traefik.io
-                kind: Middleware
-                name: oidc-forward-auth
           matches:
             - path:
                 type: PathPrefix