chore(deps): update helm release cilium to v1.19.2

feat: refactor (#5110 )
Reviewed-on: #5110
2026-03-25 00:15:36 +00:00 · 2026-03-25 00:13:09 +00:00 · 2026-03-24 23:00:06 +00:00 · 2026-03-24 22:57:44 +00:00 · 2026-03-24 22:57:24 +00:00 · 2026-03-24 22:57:09 +00:00
16 changed files with 63 additions and 67 deletions
--- a/.gitea/workflows/renovate.yaml
+++ b/.gitea/workflows/renovate.yaml
@@ -13,7 +13,7 @@ on:
 jobs:
  renovate:
    runs-on: ubuntu-latest
-    container: ghcr.io/renovatebot/renovate:43.89.2@sha256:a823bf9ff1f04c31d46267b78330e06f802dbf6e1af899e21c6a8e3197d45354
+    container: ghcr.io/renovatebot/renovate:43.89.3@sha256:95ef56f2595ea6ee1acac7c9ef6c8e2112a9be0699a42df9921310923aed7167
    steps:
      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
--- a/clusters/cl01tl/helm/argocd/values.yaml
+++ b/clusters/cl01tl/helm/argocd/values.yaml
@@ -91,7 +91,7 @@ argo-cd:
    enabled: true
    image:
      repository: redis
-      tag: 8.6.1-alpine@sha256:315270d166080f537bbdf1b489b603aaaa213cb55a544acfa51feb7481abb1c0
+      tag: 8.6.2-alpine@sha256:81b6f81d6a6c5b9019231a2e8eb10085e3a139a34f833dcc965a8a959b040b72
    persistentVolume:
      enabled: true
    redis:
--- a/clusters/cl01tl/helm/cert-manager/Chart.yaml
+++ b/clusters/cl01tl/helm/cert-manager/Chart.yaml
@@ -5,8 +5,7 @@ description: Cert Manager
 keywords:
  - cert-manager
  - certificates
-  - kubernetes
-home: https://wiki.alexlebens.dev/s/368fe718-eedb-40e0-a5a7-fad03cdc6b09
+home: https://docs.alexlebens.dev/applications/cert-manager/
 sources:
  - https://github.com/cert-manager/cert-manager
  - https://github.com/cert-manager/cert-manager/tree/master/deploy/charts/cert-manager
@@ -16,6 +15,6 @@ dependencies:
  - name: cert-manager
    version: v1.20.0
    repository: https://charts.jetstack.io
-icon: https://raw.githubusercontent.com/walkxcode/dashboard-icons/main/png/cert-manager.png
+icon: https://raw.githubusercontent.com/cert-manager/cert-manager/refs/heads/master/logo/logo.png
 # renovate: datasource=github-releases depName=cert-manager/cert-manager
 appVersion: v1.20.0
--- a/clusters/cl01tl/helm/cert-manager/templates/cluster-issuer.yaml
+++ b/clusters/cl01tl/helm/cert-manager/templates/cluster-issuer.yaml
@@ -2,6 +2,11 @@ apiVersion: cert-manager.io/v1
 kind: ClusterIssuer
 metadata:
  name: letsencrypt-issuer
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: letsencrypt-issuer
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
  acme:
    email: alexanderlebens@gmail.com
--- a/clusters/cl01tl/helm/cert-manager/templates/external-secret.yaml
+++ b/clusters/cl01tl/helm/cert-manager/templates/external-secret.yaml
@@ -14,8 +14,5 @@ spec:
  data:
    - secretKey: api-token
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cloudflare/alexlebens.net/clusterissuer
-        metadataPolicy: None
        property: token
--- a/clusters/cl01tl/helm/cert-manager/values.yaml
+++ b/clusters/cl01tl/helm/cert-manager/values.yaml
@@ -3,10 +3,16 @@ cert-manager:
    enabled: true
    keep: true
  replicaCount: 2
+  podDisruptionBudget:
+    enabled: true
+    minAvailable: 1
  extraArgs:
    - --enable-gateway-api
+  resources:
+    requests:
+      cpu: 10m
+      memory: 64Mi
  prometheus:
-    enabled: true
    servicemonitor:
      enabled: true
      honorLabels: true
--- a/clusters/cl01tl/helm/cilium/Chart.lock
+++ b/clusters/cl01tl/helm/cilium/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: cilium
  repository: https://helm.cilium.io/
-  version: 1.18.6
-digest: sha256:8ea328ac238524b5b423e6289f5e25d05ef64e6aa19cfd5de238f1d5dd533e9b
-generated: "2026-02-05T12:00:20.15778-06:00"
+  version: 1.19.2
+digest: sha256:11f8eef4733b70c2b9a91ce39fe3c1ea1ad3fa3c46750efb015e03ff6ea3655b
+generated: "2026-03-25T00:15:27.521801416Z"
--- a/clusters/cl01tl/helm/cilium/Chart.yaml
+++ b/clusters/cl01tl/helm/cilium/Chart.yaml
@@ -4,19 +4,18 @@ version: 1.0.0
 description: Cilium
 keywords:
  - cilium
-  - cni
+  - operator
  - network
-  - kubernetes
-home: https://wiki.alexlebens.dev/s/9e6f5b17-e186-4af0-81cd-af647b162d3d
+home: https://docs.alexlebens.dev/applications/cilium/
 sources:
  - https://github.com/cilium/cilium
-  - https://github.com/cilium/charts
+  - https://github.com/cilium/cilium/tree/main/install/kubernetes/cilium
 maintainers:
  - name: alexlebens
 dependencies:
  - name: cilium
-    version: 1.18.6
+    version: 1.19.2
    repository: https://helm.cilium.io/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/cilium.png
 # renovate: datasource=github-releases depName=cilium/cilium
-appVersion: 1.19.2
+appVersion: 1.18.6
--- a/clusters/cl01tl/helm/cilium/values.yaml
+++ b/clusters/cl01tl/helm/cilium/values.yaml
@@ -25,36 +25,24 @@ cilium:
        - NET_ADMIN
        - SYS_ADMIN
        - SYS_RESOURCE
-  l2announcements:
-    enabled: false
  bgpControlPlane:
    enabled: false
-    secretsNamespace:
-      name: kube-system
-    statusReport:
-      enabled: true
-    routerIDAllocation:
-      mode: "default"
  bpf:
    hostLegacyRouting: true
  devices: end0 enp6s0
  ciliumEndpointSlice:
    enabled: true
-  ingressController:
-    enabled: false
  gatewayAPI:
    enabled: true
-    enableAlpn: true
    enableAppProtocol: true
-    gatewayClass:
-      create: auto
-  externalIPs:
-    enabled: true
+    enableAlpn: true
+    secretsNamespace:
+      create: false
+      name: kube-system
  socketLB:
    enabled: true
    hostNamespaceOnly: true
  hubble:
-    enabled: true
    metrics:
      serviceMonitor:
        enabled: true
@@ -68,8 +56,6 @@ cilium:
          enabled: true
    ui:
      enabled: true
-      ingress:
-        enabled: false
  ipam:
    mode: "kubernetes"
  ipv4:
@@ -77,12 +63,11 @@ cilium:
  ipv6:
    enabled: false
  kubeProxyReplacement: true
-  l7Proxy: true
  prometheus:
    enabled: true
    serviceMonitor:
-      trustCRDsExist: true
      enabled: true
+      trustCRDsExist: true
  envoy:
    enabled: true
    securityContext:
@@ -94,14 +79,11 @@ cilium:
          - PERFMON
          - BPF
    prometheus:
-      enabled: true
      serviceMonitor:
        enabled: true
  operator:
-    enabled: true
    rollOutPods: true
    prometheus:
-      enabled: true
      serviceMonitor:
        enabled: true
  cgroup:
--- a/clusters/cl01tl/helm/cloudnative-pg/Chart.yaml
+++ b/clusters/cl01tl/helm/cloudnative-pg/Chart.yaml
@@ -6,10 +6,11 @@ keywords:
  - cloudnative-pg
  - operator
  - postgresql
-  - kubernetes
-home: https://wiki.alexlebens.dev/s/9fb10833-0278-4e64-a34c-d348d833839f
+home: https://docs.alexlebens.dev/applications/cloudnative-pg/
 sources:
  - https://github.com/cloudnative-pg/cloudnative-pg
+  - https://github.com/cloudnative-pg/plugin-barman-cloud
+  - https://github.com/cloudnative-pg/postgres-containers/pkgs/container/postgresql
  - https://github.com/cloudnative-pg/charts/tree/main/charts/cloudnative-pg
  - https://github.com/cloudnative-pg/charts/tree/main/charts/plugin-barman-cloud
 maintainers:
@@ -21,6 +22,6 @@ dependencies:
  - name: plugin-barman-cloud
    version: 0.5.0
    repository: https://cloudnative-pg.io/charts/
-icon: https://avatars.githubusercontent.com/u/100373852?s=200&v=4
+icon: https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg.github.io/refs/heads/main/assets/images/hero_image.png
 # renovate: datasource=github-releases depName=cloudnative-pg/cloudnative-pg
 appVersion: 1.28.1
--- a/clusters/cl01tl/helm/cloudnative-pg/values.yaml
+++ b/clusters/cl01tl/helm/cloudnative-pg/values.yaml
@@ -1,16 +1,16 @@
 cloudnative-pg:
  replicaCount: 2
+  resources:
+    requests:
+      cpu: 10m
+      memory: 64Mi
  monitoring:
    podMonitorEnabled: true
 plugin-barman-cloud:
-  replicaCount: 1
-  image:
-    registry: ghcr.io
-    repository: cloudnative-pg/plugin-barman-cloud
-    tag: v0.11.0
-  sidecarImage:
-    registry: ghcr.io
-    repository: cloudnative-pg/plugin-barman-cloud-sidecar
-    tag: v0.11.0
+  replicaCount: 2
  crds:
    create: true
+  resources:
+    requests:
+      cpu: 10m
+      memory: 64Mi
--- a/clusters/cl01tl/helm/music-grabber/values.yaml
+++ b/clusters/cl01tl/helm/music-grabber/values.yaml
@@ -9,7 +9,7 @@ music-grabber:
        main:
          image:
            repository: g33kphr33k/musicgrabber
-            tag: 2.5.1
+            tag: 2.5.2
            pullPolicy: IfNotPresent
          env:
            - name: MUSIC_DIR
--- a/clusters/cl01tl/helm/rook-ceph/Chart.lock
+++ b/clusters/cl01tl/helm/rook-ceph/Chart.lock
@@ -1,12 +1,9 @@
 dependencies:
 - name: rook-ceph
  repository: https://charts.rook.io/release
-  version: v1.19.2
+  version: v1.19.3
 - name: rook-ceph-cluster
  repository: https://charts.rook.io/release
-  version: v1.19.2
- name: cloudflared
-  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.4.0
-digest: sha256:4bd2987d8b6b91e0c4dc026c5d20419c69bd81c82063d7850bbfe8d7dbea3b82
-generated: "2026-03-09T22:05:44.444530464Z"
+  version: v1.19.3
+digest: sha256:f485e0ac0fe7a70972491078f37b8be4aff2c6dfa7346bdb18d296f1dbd15b1e
+generated: "2026-03-24T22:57:30.323965591Z"
--- a/clusters/cl01tl/helm/rook-ceph/Chart.yaml
+++ b/clusters/cl01tl/helm/rook-ceph/Chart.yaml
@@ -16,11 +16,11 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: rook-ceph
-    version: v1.19.2
+    version: v1.19.3
    repository: https://charts.rook.io/release
  - name: rook-ceph-cluster
-    version: v1.19.2
+    version: v1.19.3
    repository: https://charts.rook.io/release
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ceph.png
 # renovate: datasource=github-releases depName=rook/rook
-appVersion: v1.19.2
+appVersion: v1.19.3
--- a/clusters/cl01tl/helm/talos/values.yaml
+++ b/clusters/cl01tl/helm/talos/values.yaml
@@ -405,7 +405,7 @@ etcd-defrag:
        main:
          image:
            repository: ghcr.io/siderolabs/talosctl
-            tag: v1.12.5
+            tag: v1.12.6
            pullPolicy: IfNotPresent
          args:
            - etcd
@@ -438,7 +438,7 @@ etcd-defrag:
        main:
          image:
            repository: ghcr.io/siderolabs/talosctl
-            tag: v1.12.5
+            tag: v1.12.6
            pullPolicy: IfNotPresent
          args:
            - etcd
@@ -471,7 +471,7 @@ etcd-defrag:
        main:
          image:
            repository: ghcr.io/siderolabs/talosctl
-            tag: v1.12.5
+            tag: v1.12.6
            pullPolicy: IfNotPresent
          args:
            - etcd
--- a/renovate.json
+++ b/renovate.json
@@ -260,6 +260,16 @@
        "/^docker\\.io/home-assistant//"
      ]
    },
+    {
+      "description": "Group Rook Ceph dependencies",
+      "groupName": "rook-ceph",
+      "groupSlug": "unified-rook-ceph",
+      "matchPackageNames": [
+        "rook/rook",
+        "/^rook-ceph/",
+        "/^rook\/ceph/"
+      ]
+    },
    {
      "description": "Group Element Web updates",
      "groupName": "element-web",
Author	SHA1	Message	Date
Renovate Bot	758252cee6	chore(deps): update helm release cilium to v1.19.2 All checks were successful lint-test-helm / lint-helm (pull_request) Successful in 27s Details lint-test-helm / validate-kubeconform (pull_request) Successful in 12s Details	2026-03-25 00:15:36 +00:00
Alex Lebens	673377e300	feat: refactor (#5110 ) All checks were successful lint-test-helm / lint-helm (push) Successful in 14s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 2m29s Details Reviewed-on: #5110	2026-03-25 00:13:09 +00:00
Renovate Bot	82e4d5b389	chore(config): migrate Renovate config (#5102 ) All checks were successful renovate / renovate (push) Successful in 4m43s Details The Renovate config in this repository needs migrating. Typically this is because one or more configuration options you are using have been renamed. You don't need to merge this PR right away, because Renovate will continue to migrate these fields internally each time it runs. But later some of these fields may be fully deprecated and the migrations removed. So it's a good idea to merge this migration PR soon. 🔕 Ignore: Close this PR and you won't be reminded about config migration again, but one day your current config may no longer be valid. ❓ Got questions? Does something look wrong to you? Please don't hesitate to [request help here](https://github.com/renovatebot/renovate/discussions). --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). Reviewed-on: #5102 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>	2026-03-24 23:00:06 +00:00
Renovate Bot	637eec39ae	chore(deps): update rook-ceph to v1.19.3 (#5101 ) Some checks failed lint-test-helm / lint-helm (push) Successful in 1m16s Details renovate / renovate (push) Has been cancelled Details lint-test-helm / validate-kubeconform (push) Has been skipped Details	2026-03-24 22:57:44 +00:00
Renovate Bot	eb8eeb6477	chore(deps): update redis docker tag to v8.6.2 (#5100 ) Some checks failed lint-test-helm / lint-helm (push) Has been cancelled Details lint-test-helm / validate-kubeconform (push) Has been cancelled Details renovate / renovate (push) Has been cancelled Details	2026-03-24 22:57:24 +00:00
Renovate Bot	ba0461f9e0	chore(deps): update ghcr.io/siderolabs/talosctl docker tag to v1.12.6 (#5099 ) Some checks failed lint-test-helm / validate-kubeconform (push) Has been cancelled Details lint-test-helm / lint-helm (push) Has been cancelled Details renovate / renovate (push) Has been cancelled Details	2026-03-24 22:57:09 +00:00
Renovate Bot	bddeffd721	chore(deps): update ghcr.io/renovatebot/renovate docker tag to v43.89.3 (#5098 ) Some checks failed renovate / renovate (push) Has been cancelled Details	2026-03-24 22:56:48 +00:00
Renovate Bot	aa4c940d72	chore(deps): update g33kphr33k/musicgrabber docker tag to v2.5.2 (#5097 ) Some checks failed renovate / renovate (push) Has been cancelled Details lint-test-helm / validate-kubeconform (push) Has been cancelled Details lint-test-helm / lint-helm (push) Has started running Details	2026-03-24 22:56:28 +00:00
Alex Lebens	b6b8703f7e	ci: change rook group All checks were successful renovate / renovate (push) Successful in 2m56s Details	2026-03-24 17:49:47 -05:00
Alex Lebens	4812f72df8	ci: group rook All checks were successful renovate / renovate (push) Successful in 2m52s Details	2026-03-24 17:20:17 -05:00