chore(deps): update kube-prometheus-stack docker tag to v82.4.0

2026-02-25 18:52:50 +00:00
26 changed files with 12 additions and 387 deletions
--- a/clusters/cl01tl/helm/authentik/templates/reference-grant.yaml
+++ b/clusters/cl01tl/helm/authentik/templates/reference-grant.yaml
@@ -1,39 +0,0 @@
-apiVersion: gateway.networking.k8s.io/v1beta1
-kind: ReferenceGrant
-metadata:
-  name: allow-outpost-cross-namespace-access
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: allow-outpost-cross-namespace-access
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  from:
-    - group: gateway.networking.k8s.io
-      kind: HTTPRoute
-      namespace: lidarr
-    - group: gateway.networking.k8s.io
-      kind: HTTPRoute
-      namespace: radarr
-    - group: gateway.networking.k8s.io
-      kind: HTTPRoute
-      namespace: radarr-4k
-    - group: gateway.networking.k8s.io
-      kind: HTTPRoute
-      namespace: radarr-anime
-    - group: gateway.networking.k8s.io
-      kind: HTTPRoute
-      namespace: radarr-standup
-    - group: gateway.networking.k8s.io
-      kind: HTTPRoute
-      namespace: sonarr
-    - group: gateway.networking.k8s.io
-      kind: HTTPRoute
-      namespace: sonarr-4k
-    - group: gateway.networking.k8s.io
-      kind: HTTPRoute
-      namespace: sonarr-anime
-  to:
-    - group: ""
-      kind: Service
-      name: ak-outpost-traefik-proxy-auth
--- a/clusters/cl01tl/helm/booklore/Chart.yaml
+++ b/clusters/cl01tl/helm/booklore/Chart.yaml
@@ -30,4 +30,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/booklore.png
 # renovate: datasource=github-releases depName=booklore-app/BookLore
-appVersion: v2.0.2
+appVersion: v2.0.1
--- a/clusters/cl01tl/helm/booklore/values.yaml
+++ b/clusters/cl01tl/helm/booklore/values.yaml
@@ -9,7 +9,7 @@ booklore:
        main:
          image:
            repository: ghcr.io/booklore-app/booklore
-            tag: v2.0.2
+            tag: v2.0.1
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/helm/cilium/Chart.lock
+++ b/clusters/cl01tl/helm/cilium/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: cilium
  repository: https://helm.cilium.io/
-  version: 1.19.1
-digest: sha256:bf5e8b3233c18bdb9409bb98c9a7ea4114e0e04e8489a49fdb2d29ded0cfa429
-generated: "2026-02-26T11:05:40.711161375Z"
+  version: 1.18.6
+digest: sha256:8ea328ac238524b5b423e6289f5e25d05ef64e6aa19cfd5de238f1d5dd533e9b
+generated: "2026-02-05T12:00:20.15778-06:00"
--- a/clusters/cl01tl/helm/cilium/Chart.yaml
+++ b/clusters/cl01tl/helm/cilium/Chart.yaml
@@ -15,7 +15,7 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: cilium
-    version: 1.19.1
+    version: 1.18.6
    repository: https://helm.cilium.io/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/cilium.png
 # renovate: datasource=github-releases depName=cilium/cilium
--- a/clusters/cl01tl/helm/elastic-operator/Chart.yaml
+++ b/clusters/cl01tl/helm/elastic-operator/Chart.yaml
@@ -19,4 +19,4 @@ dependencies:
    repository: https://helm.elastic.co
 icon: https://helm.elastic.co/icons/eck.png
 # renovate: datasource=github-releases depName=elastic/cloud-on-k8s
-appVersion: v3.3.1
+appVersion: v3.3.0
--- a/clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock
+++ b/clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock
@@ -9,4 +9,4 @@ dependencies:
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 1.0.4
 digest: sha256:24214c0bc1e6aed9954385aa61b403a7fa4b4e92bac09777504635cba98735ba
-generated: "2026-02-25T23:46:14.059155578Z"
+generated: "2026-02-25T18:52:40.220449517Z"
--- a/clusters/cl01tl/helm/lidarr/templates/middleware.yaml
+++ b/clusters/cl01tl/helm/lidarr/templates/middleware.yaml
@@ -1,26 +0,0 @@
-apiVersion: traefik.io/v1alpha1
-kind: Middleware
-metadata:
-  name: oidc-forward-auth
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: oidc-forward-auth
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  forwardAuth:
-    address: http://ak-outpost-traefik-proxy-auth.authentik.svc.cluster.local:9000/outpost.goauthentik.io/auth/traefik
-    trustForwardHeader: true
-    authResponseHeaders:
-      - X-authentik-username
-      - X-authentik-groups
-      - X-authentik-entitlements
-      - X-authentik-email
-      - X-authentik-name
-      - X-authentik-uid
-      - X-authentik-jwt
-      - X-authentik-meta-jwks
-      - X-authentik-meta-outpost
-      - X-authentik-meta-provider
-      - X-authentik-meta-app
-      - X-authentik-meta-version
--- a/clusters/cl01tl/helm/lidarr/values.yaml
+++ b/clusters/cl01tl/helm/lidarr/values.yaml
@@ -84,28 +84,12 @@ lidarr:
      hostnames:
        - lidarr.alexlebens.net
      rules:
-        - backendRefs:
-            - name: ak-outpost-traefik-proxy-auth
-              namespace: authentik
-              port: 9000
-              weight: 100
-          filters: []
-          matches:
-            - path:
-                type: PathPrefix
-                value: /outpost.goauthentik.io
        - backendRefs:
            - group: ''
              kind: Service
              name: lidarr
              port: 80
              weight: 100
-          filters:
-            - type: ExtensionRef
-              extensionRef:
-                group: traefik.io
-                kind: Middleware
-                name: oidc-forward-auth
          matches:
            - path:
                type: PathPrefix
--- a/clusters/cl01tl/helm/radarr-4k/templates/middleware.yaml
+++ b/clusters/cl01tl/helm/radarr-4k/templates/middleware.yaml
@@ -1,26 +0,0 @@
-apiVersion: traefik.io/v1alpha1
-kind: Middleware
-metadata:
-  name: oidc-forward-auth
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: oidc-forward-auth
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  forwardAuth:
-    address: http://ak-outpost-traefik-proxy-auth.authentik.svc.cluster.local:9000/outpost.goauthentik.io/auth/traefik
-    trustForwardHeader: true
-    authResponseHeaders:
-      - X-authentik-username
-      - X-authentik-groups
-      - X-authentik-entitlements
-      - X-authentik-email
-      - X-authentik-name
-      - X-authentik-uid
-      - X-authentik-jwt
-      - X-authentik-meta-jwks
-      - X-authentik-meta-outpost
-      - X-authentik-meta-provider
-      - X-authentik-meta-app
-      - X-authentik-meta-version
--- a/clusters/cl01tl/helm/radarr-4k/values.yaml
+++ b/clusters/cl01tl/helm/radarr-4k/values.yaml
@@ -84,28 +84,12 @@ radarr-4k:
      hostnames:
        - radarr-4k.alexlebens.net
      rules:
-        - backendRefs:
-            - name: ak-outpost-traefik-proxy-auth
-              namespace: authentik
-              port: 9000
-              weight: 100
-          filters: []
-          matches:
-            - path:
-                type: PathPrefix
-                value: /outpost.goauthentik.io
        - backendRefs:
            - group: ''
              kind: Service
              name: radarr-4k
              port: 80
              weight: 100
-          filters:
-            - type: ExtensionRef
-              extensionRef:
-                group: traefik.io
-                kind: Middleware
-                name: oidc-forward-auth
          matches:
            - path:
                type: PathPrefix
--- a/clusters/cl01tl/helm/radarr-anime/templates/middleware.yaml
+++ b/clusters/cl01tl/helm/radarr-anime/templates/middleware.yaml
@@ -1,26 +0,0 @@
-apiVersion: traefik.io/v1alpha1
-kind: Middleware
-metadata:
-  name: oidc-forward-auth
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: oidc-forward-auth
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  forwardAuth:
-    address: http://ak-outpost-traefik-proxy-auth.authentik.svc.cluster.local:9000/outpost.goauthentik.io/auth/traefik
-    trustForwardHeader: true
-    authResponseHeaders:
-      - X-authentik-username
-      - X-authentik-groups
-      - X-authentik-entitlements
-      - X-authentik-email
-      - X-authentik-name
-      - X-authentik-uid
-      - X-authentik-jwt
-      - X-authentik-meta-jwks
-      - X-authentik-meta-outpost
-      - X-authentik-meta-provider
-      - X-authentik-meta-app
-      - X-authentik-meta-version
--- a/clusters/cl01tl/helm/radarr-anime/values.yaml
+++ b/clusters/cl01tl/helm/radarr-anime/values.yaml
@@ -82,28 +82,12 @@ radarr-anime:
      hostnames:
        - radarr-anime.alexlebens.net
      rules:
-        - backendRefs:
-            - name: ak-outpost-traefik-proxy-auth
-              namespace: authentik
-              port: 9000
-              weight: 100
-          filters: []
-          matches:
-            - path:
-                type: PathPrefix
-                value: /outpost.goauthentik.io
        - backendRefs:
            - group: ''
              kind: Service
              name: radarr-anime
              port: 80
              weight: 100
-          filters:
-            - type: ExtensionRef
-              extensionRef:
-                group: traefik.io
-                kind: Middleware
-                name: oidc-forward-auth
          matches:
            - path:
                type: PathPrefix
--- a/clusters/cl01tl/helm/radarr-standup/templates/middleware.yaml
+++ b/clusters/cl01tl/helm/radarr-standup/templates/middleware.yaml
@@ -1,26 +0,0 @@
-apiVersion: traefik.io/v1alpha1
-kind: Middleware
-metadata:
-  name: oidc-forward-auth
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: oidc-forward-auth
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  forwardAuth:
-    address: http://ak-outpost-traefik-proxy-auth.authentik.svc.cluster.local:9000/outpost.goauthentik.io/auth/traefik
-    trustForwardHeader: true
-    authResponseHeaders:
-      - X-authentik-username
-      - X-authentik-groups
-      - X-authentik-entitlements
-      - X-authentik-email
-      - X-authentik-name
-      - X-authentik-uid
-      - X-authentik-jwt
-      - X-authentik-meta-jwks
-      - X-authentik-meta-outpost
-      - X-authentik-meta-provider
-      - X-authentik-meta-app
-      - X-authentik-meta-version
--- a/clusters/cl01tl/helm/radarr-standup/values.yaml
+++ b/clusters/cl01tl/helm/radarr-standup/values.yaml
@@ -82,28 +82,12 @@ radarr-standup:
      hostnames:
        - radarr-standup.alexlebens.net
      rules:
-        - backendRefs:
-            - name: ak-outpost-traefik-proxy-auth
-              namespace: authentik
-              port: 9000
-              weight: 100
-          filters: []
-          matches:
-            - path:
-                type: PathPrefix
-                value: /outpost.goauthentik.io
        - backendRefs:
            - group: ''
              kind: Service
              name: radarr-standup
              port: 80
              weight: 100
-          filters:
-            - type: ExtensionRef
-              extensionRef:
-                group: traefik.io
-                kind: Middleware
-                name: oidc-forward-auth
          matches:
            - path:
                type: PathPrefix
--- a/clusters/cl01tl/helm/radarr/templates/middleware.yaml
+++ b/clusters/cl01tl/helm/radarr/templates/middleware.yaml
@@ -1,26 +0,0 @@
-apiVersion: traefik.io/v1alpha1
-kind: Middleware
-metadata:
-  name: oidc-forward-auth
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: oidc-forward-auth
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  forwardAuth:
-    address: http://ak-outpost-traefik-proxy-auth.authentik.svc.cluster.local:9000/outpost.goauthentik.io/auth/traefik
-    trustForwardHeader: true
-    authResponseHeaders:
-      - X-authentik-username
-      - X-authentik-groups
-      - X-authentik-entitlements
-      - X-authentik-email
-      - X-authentik-name
-      - X-authentik-uid
-      - X-authentik-jwt
-      - X-authentik-meta-jwks
-      - X-authentik-meta-outpost
-      - X-authentik-meta-provider
-      - X-authentik-meta-app
-      - X-authentik-meta-version
--- a/clusters/cl01tl/helm/radarr/values.yaml
+++ b/clusters/cl01tl/helm/radarr/values.yaml
@@ -84,28 +84,12 @@ radarr:
      hostnames:
        - radarr.alexlebens.net
      rules:
-        - backendRefs:
-            - name: ak-outpost-traefik-proxy-auth
-              namespace: authentik
-              port: 9000
-              weight: 100
-          filters: []
-          matches:
-            - path:
-                type: PathPrefix
-                value: /outpost.goauthentik.io
        - backendRefs:
            - group: ''
              kind: Service
              name: radarr
              port: 80
              weight: 100
-          filters:
-            - type: ExtensionRef
-              extensionRef:
-                group: traefik.io
-                kind: Middleware
-                name: oidc-forward-auth
          matches:
            - path:
                type: PathPrefix
--- a/clusters/cl01tl/helm/searxng/values.yaml
+++ b/clusters/cl01tl/helm/searxng/values.yaml
@@ -9,7 +9,7 @@ searxng:
        main:
          image:
            repository: searxng/searxng
-            tag: latest@sha256:2c86f95c22dde03f5354a81b027ec882830748c5fe6454f03c7ec8fc384e54ea
+            tag: latest@sha256:edf110a2816d8963949d03879c72a7e19c221b5f7bfb7952a33ae073f96ccb18
            pullPolicy: IfNotPresent
          env:
            - name: SEARXNG_BASE_URL
@@ -39,7 +39,7 @@ searxng:
        main:
          image:
            repository: searxng/searxng
-            tag: latest@sha256:2c86f95c22dde03f5354a81b027ec882830748c5fe6454f03c7ec8fc384e54ea
+            tag: latest@sha256:edf110a2816d8963949d03879c72a7e19c221b5f7bfb7952a33ae073f96ccb18
            pullPolicy: IfNotPresent
          env:
            - name: SEARXNG_BASE_URL
--- a/clusters/cl01tl/helm/site-documentation/values.yaml
+++ b/clusters/cl01tl/helm/site-documentation/values.yaml
@@ -11,7 +11,7 @@ site-documentation:
        main:
          image:
            repository: harbor.alexlebens.net/images/site-documentation
-            tag: 0.1.6
+            tag: 0.1.5
            pullPolicy: IfNotPresent
          resources:
            requests:
--- a/clusters/cl01tl/helm/site-profile/values.yaml
+++ b/clusters/cl01tl/helm/site-profile/values.yaml
@@ -11,7 +11,7 @@ site-profile:
        main:
          image:
            repository: harbor.alexlebens.net/images/site-profile
-            tag: 2.16.0
+            tag: 2.15.1
            pullPolicy: IfNotPresent
          resources:
            requests:
--- a/clusters/cl01tl/helm/sonarr-4k/templates/middleware.yaml
+++ b/clusters/cl01tl/helm/sonarr-4k/templates/middleware.yaml
@@ -1,26 +0,0 @@
-apiVersion: traefik.io/v1alpha1
-kind: Middleware
-metadata:
-  name: oidc-forward-auth
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: oidc-forward-auth
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  forwardAuth:
-    address: http://ak-outpost-traefik-proxy-auth.authentik.svc.cluster.local:9000/outpost.goauthentik.io/auth/traefik
-    trustForwardHeader: true
-    authResponseHeaders:
-      - X-authentik-username
-      - X-authentik-groups
-      - X-authentik-entitlements
-      - X-authentik-email
-      - X-authentik-name
-      - X-authentik-uid
-      - X-authentik-jwt
-      - X-authentik-meta-jwks
-      - X-authentik-meta-outpost
-      - X-authentik-meta-provider
-      - X-authentik-meta-app
-      - X-authentik-meta-version
--- a/clusters/cl01tl/helm/sonarr-4k/values.yaml
+++ b/clusters/cl01tl/helm/sonarr-4k/values.yaml
@@ -82,28 +82,12 @@ sonarr-4k:
      hostnames:
        - sonarr-4k.alexlebens.net
      rules:
-        - backendRefs:
-            - name: ak-outpost-traefik-proxy-auth
-              namespace: authentik
-              port: 9000
-              weight: 100
-          filters: []
-          matches:
-            - path:
-                type: PathPrefix
-                value: /outpost.goauthentik.io
        - backendRefs:
            - group: ''
              kind: Service
              name: sonarr-4k
              port: 80
              weight: 100
-          filters:
-            - type: ExtensionRef
-              extensionRef:
-                group: traefik.io
-                kind: Middleware
-                name: oidc-forward-auth
          matches:
            - path:
                type: PathPrefix
--- a/clusters/cl01tl/helm/sonarr-anime/templates/middleware.yaml
+++ b/clusters/cl01tl/helm/sonarr-anime/templates/middleware.yaml
@@ -1,26 +0,0 @@
-apiVersion: traefik.io/v1alpha1
-kind: Middleware
-metadata:
-  name: oidc-forward-auth
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: oidc-forward-auth
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  forwardAuth:
-    address: http://ak-outpost-traefik-proxy-auth.authentik.svc.cluster.local:9000/outpost.goauthentik.io/auth/traefik
-    trustForwardHeader: true
-    authResponseHeaders:
-      - X-authentik-username
-      - X-authentik-groups
-      - X-authentik-entitlements
-      - X-authentik-email
-      - X-authentik-name
-      - X-authentik-uid
-      - X-authentik-jwt
-      - X-authentik-meta-jwks
-      - X-authentik-meta-outpost
-      - X-authentik-meta-provider
-      - X-authentik-meta-app
-      - X-authentik-meta-version
--- a/clusters/cl01tl/helm/sonarr-anime/values.yaml
+++ b/clusters/cl01tl/helm/sonarr-anime/values.yaml
@@ -82,28 +82,12 @@ sonarr-anime:
      hostnames:
        - sonarr-anime.alexlebens.net
      rules:
-        - backendRefs:
-            - name: ak-outpost-traefik-proxy-auth
-              namespace: authentik
-              port: 9000
-              weight: 100
-          filters: []
-          matches:
-            - path:
-                type: PathPrefix
-                value: /outpost.goauthentik.io
        - backendRefs:
            - group: ''
              kind: Service
              name: sonarr-anime
              port: 80
              weight: 100
-          filters:
-            - type: ExtensionRef
-              extensionRef:
-                group: traefik.io
-                kind: Middleware
-                name: oidc-forward-auth
          matches:
            - path:
                type: PathPrefix
--- a/clusters/cl01tl/helm/sonarr/templates/middleware.yaml
+++ b/clusters/cl01tl/helm/sonarr/templates/middleware.yaml
@@ -1,26 +0,0 @@
-apiVersion: traefik.io/v1alpha1
-kind: Middleware
-metadata:
-  name: oidc-forward-auth
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: oidc-forward-auth
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  forwardAuth:
-    address: http://ak-outpost-traefik-proxy-auth.authentik.svc.cluster.local:9000/outpost.goauthentik.io/auth/traefik
-    trustForwardHeader: true
-    authResponseHeaders:
-      - X-authentik-username
-      - X-authentik-groups
-      - X-authentik-entitlements
-      - X-authentik-email
-      - X-authentik-name
-      - X-authentik-uid
-      - X-authentik-jwt
-      - X-authentik-meta-jwks
-      - X-authentik-meta-outpost
-      - X-authentik-meta-provider
-      - X-authentik-meta-app
-      - X-authentik-meta-version
--- a/clusters/cl01tl/helm/sonarr/values.yaml
+++ b/clusters/cl01tl/helm/sonarr/values.yaml
@@ -82,28 +82,12 @@ sonarr:
      hostnames:
        - sonarr.alexlebens.net
      rules:
-        - backendRefs:
-            - name: ak-outpost-traefik-proxy-auth
-              namespace: authentik
-              port: 9000
-              weight: 100
-          filters: []
-          matches:
-            - path:
-                type: PathPrefix
-                value: /outpost.goauthentik.io
        - backendRefs:
            - group: ''
              kind: Service
              name: sonarr
              port: 80
              weight: 100
-          filters:
-            - type: ExtensionRef
-              extensionRef:
-                group: traefik.io
-                kind: Middleware
-                name: oidc-forward-auth
          matches:
            - path:
                type: PathPrefix