2025-12-03 21:56:29 +00:00
33 changed files with 825 additions and 825 deletions
--- a/clusters/cl01tl/manifests/audiobookshelf/audiobookshelf.yaml
+++ b/clusters/cl01tl/manifests/audiobookshelf/audiobookshelf.yaml
@@ -198,7 +198,7 @@ spec:
        - env:
          - name: TZ
            value: US/Central
-          image: ghcr.io/advplyr/audiobookshelf:2.30.0
+          image: ghcr.io/advplyr/audiobookshelf:2.31.0
          imagePullPolicy: IfNotPresent
          name: main
          resources:
--- a/clusters/cl01tl/manifests/authentik/authentik.yaml
+++ b/clusters/cl01tl/manifests/authentik/authentik.yaml
@@ -525,7 +525,7 @@ metadata:
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: cloudflared
    app.kubernetes.io/version: 2025.10.0
-    helm.sh/chart: cloudflared-1.23.0
+    helm.sh/chart: cloudflared-1.23.1
  namespace: authentik
 spec:
  revisionHistoryLimit: 3
--- a/clusters/cl01tl/manifests/backrest/backrest.yaml
+++ b/clusters/cl01tl/manifests/backrest/backrest.yaml
@@ -53,27 +53,6 @@ spec:
 ---
 kind: PersistentVolumeClaim
 apiVersion: v1
-metadata:
-  name: backrest-config
-  labels:
-    app.kubernetes.io/instance: backrest
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: backrest
-    helm.sh/chart: backrest-4.4.0
-  annotations:
-    helm.sh/resource-policy: keep
-  namespace: backrest
-spec:
-  accessModes:
-    - "ReadWriteOnce"
-  resources:
-    requests:
-      storage: "1Gi"
-  storageClassName: "ceph-block"
---
-# Source: backrest/charts/backrest/templates/common.yaml
-kind: PersistentVolumeClaim
-apiVersion: v1
 metadata:
  name: backrest-data
  labels:
@@ -92,6 +71,27 @@ spec:
      storage: "10Gi"
  storageClassName: "ceph-block"
 ---
+# Source: backrest/charts/backrest/templates/common.yaml
+kind: PersistentVolumeClaim
+apiVersion: v1
+metadata:
+  name: backrest-config
+  labels:
+    app.kubernetes.io/instance: backrest
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: backrest
+    helm.sh/chart: backrest-4.4.0
+  annotations:
+    helm.sh/resource-policy: keep
+  namespace: backrest
+spec:
+  accessModes:
+    - "ReadWriteOnce"
+  resources:
+    requests:
+      storage: "1Gi"
+  storageClassName: "ceph-block"
+---
 # Source: backrest/templates/persistent-volume-claim.yaml
 apiVersion: v1
 kind: PersistentVolumeClaim
--- a/clusters/cl01tl/manifests/cilium/cilium.yaml
+++ b/clusters/cl01tl/manifests/cilium/cilium.yaml
@@ -51,8 +51,8 @@ metadata:
  name: cilium-ca
  namespace: kube-system
 data:
-  ca.crt: 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
-  ca.key: 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
+  ca.crt: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSURGRENDQWZ5Z0F3SUJBZ0lSQUxVVmVmaHJqaHNIdklvTFZjUXU2WUV3RFFZSktvWklodmNOQVFFTEJRQXcKRkRFU01CQUdBMVVFQXhNSlEybHNhWFZ0SUVOQk1CNFhEVEkxTVRJd016SXhORFUxTkZvWERUSTRNVEl3TWpJeApORFUxTkZvd0ZERVNNQkFHQTFVRUF4TUpRMmxzYVhWdElFTkJNSUlCSWpBTkJna3Foa2lHOXcwQkFRRUZBQU9DCkFROEFNSUlCQ2dLQ0FRRUF4U3c4VHE1ZmZUNXhnV0c1eCt5blVYQUJpR0NoZ0wvblIzZWpGU2FxSzVSQUlPRysKZ0VkL0FDU1hpQ2ZXWk1Kc0xvR0d4WXZtL1BFamhOaklJQjNZY2ZRYkYxYVFNS2JtSVJ4WmpvUHV1Qnp0SGtMMQorZ3Nwd1JMbjc0WUY0SXFuSUJ1UDJubE1seUM4RmxWZ2lySjMwUW0vYW1oSU9TQ1Y2L0lUaWQ1L29hTGx0UTlWClFKOGl4S0I3TEE0MEwxZG4xeHptM3pFdkJXQW5hc2NtT1hLUjZhRDNCZ2J5T2x5Vi9ZZHFwL3QzKzhtY050TzUKVEhOUG9HQ0hSM0dwb0RVZzMwbHVkZk5vWHZRRzdYSVdXM0t0UG1iUk1pTVN6cFNGdGN1L2F6bDl3ZUlObi9YbgorZkJXRTYxNGN4VFdSWmRDSDlvSlVKN2tJSnIydWVnMktWb1lDd0lEQVFBQm8yRXdYekFPQmdOVkhROEJBZjhFCkJBTUNBcVF3SFFZRFZSMGxCQll3RkFZSUt3WUJCUVVIQXdFR0NDc0dBUVVGQndNQ01BOEdBMVVkRXdFQi93UUYKTUFNQkFmOHdIUVlEVlIwT0JCWUVGSTA0MloxM2pqVFVCbWJkOHExT3NjcXZybmFETUEwR0NTcUdTSWIzRFFFQgpDd1VBQTRJQkFRQSswSThjVVdzVnVXdXcxbW0ybXpZQjFxL2ttdVkvcHF6YjNNSnFVVElqTlI1eldPVGk3NmYyCjRhSXhLbUM5Qm1lSHlZa0Nyczg1UXo5UlNXMFNOUlJXRUZscmE0N0MyeWhBd01yUGRNS2VGV2tqRUw1elZOUGoKNGd4Q0doYzROaFdTSjBIOG5rVXdFdEplZkF4WWV1OVdqdVZ5S1A1QUxEQ0xYUlRUdW4zMmVtNVZ1MW1pZytJbgoyUzUrOWlHNHpyUExNVlI3emYwbnFLZkMwNmJyWWtrMkw5ZTM5TWVnYlFWa0NFSThQakcrVGlHbVJJa0FON2tpCkVLcDZqZGpNVDNzZnJ6dXNFWkNwdVllSDFHYml3WDVET1B5SEsvM1ZZVnNZQ1dvN1hFd0twS1lwczVXSHp5RFoKNmp2cFRQaTBwd1FWbFpzeUdKYWdaMGRjVkx6amZRY3UKLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo=
+  ca.key: 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
 ---
 # Source: cilium/charts/cilium/templates/hubble/tls-helm/relay-client-secret.yaml
 apiVersion: v1
@@ -62,9 +62,9 @@ metadata:
  namespace: kube-system
 type: kubernetes.io/tls
 data:
-  ca.crt:  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
-  tls.crt: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSURTVENDQWpHZ0F3SUJBZ0lSQVBxWTZFOTMvbU9zb001R1J3bXNZaGN3RFFZSktvWklodmNOQVFFTEJRQXcKRkRFU01CQUdBMVVFQXhNSlEybHNhWFZ0SUVOQk1CNFhEVEkxTVRJd016QTBORGMwTWxvWERUSTJNVEl3TXpBMApORGMwTWxvd0l6RWhNQjhHQTFVRUF3d1lLaTVvZFdKaWJHVXRjbVZzWVhrdVkybHNhWFZ0TG1sdk1JSUJJakFOCkJna3Foa2lHOXcwQkFRRUZBQU9DQVE4QU1JSUJDZ0tDQVFFQStqL1VXNG43Ty9NOC9nNk1aU1BNTUI5M0NoamwKT3l1OUxWbGpXZ3A0WHJqcm9UTnpqbnRlVmhMU0w3TFo2L1VRVkluRmFKS3NTOS8weE1ETEFob1ZsRVNEblB2egoyaGJuSmtCQU1PS25TeWUyQmNLTW1HdmNLc3VHR2M2bmVCbG5kSmpLVzZNS29Ub0laWUxEQTQrRFZUQm9YNmRiCjZXZGZ6WVJ6SzdWOEdmVUFOa3hLZzZ5eUQ3VHFtK2c5N1VFRENQYVNUenk1OUZvTXZXWHdCRWc4bys5b1lHRTIKbXE4cytMQk5BTzZhUE9CeEFPUnVtTEU1b2pIYm43WlBNN1BnaTIvWFVsTVNnTjFMVkQzdFM2aG9EV1hSa0FKTQpQQlZuem9YenRRa2NxYllrdUl6Y3B3TGhycnV6VmdBZEV0N3RCTHdTU3VOd3I3MFZEa0xBeStNenJ3SURBUUFCCm80R0dNSUdETUE0R0ExVWREd0VCL3dRRUF3SUZvREFkQmdOVkhTVUVGakFVQmdnckJnRUZCUWNEQVFZSUt3WUIKQlFVSEF3SXdEQVlEVlIwVEFRSC9CQUl3QURBZkJnTlZIU01FR0RBV2dCUTI1K2creWtGdW52U1RtOEJHNmU4ZQpSTUtvdURBakJnTlZIUkVFSERBYWdoZ3FMbWgxWW1Kc1pTMXlaV3hoZVM1amFXeHBkVzB1YVc4d0RRWUpLb1pJCmh2Y05BUUVMQlFBRGdnRUJBS2hoQ1pXTjZURys5VjlLUXBpV2ZyWUJ2NzlrRjg0Y0M1Tnc2M0UrSWQ3RFN6MEcKaHRxbGhCclhXb2lVSkdzYUl4eGVEYlkrektmZXRHRjFRTXZQbFVMOTBZdWV2aXg5SXprVXA0M0tJL3RFTVppcwo2SW5GTlJmV3ltRm5jek1nQ0FkaEpEYzZ6MlFpT1htY1ozT3FYanB0bGFFMTQ0SjFkQy9lbXlONzM2VlRkMnR1Cml2QnFDTktLWHdoSGJEYkNWVThtRE9BcmkwbFU1bTdFdklVZ29vWUJZTUFreE9sK3RYT0dla3ZWTnZKOUlPVTUKM3RERU9QeHNGRUVqWFp0V096RFZEWm16UHZwbThPSGo4YjRHQU10M0NqZDFvWVNuaDZpeWFkUXdkODdiRis2Vgo1MXhSNW1ja1hvU2RQTkRaa1NLTjRHc0p4eXd6d0YwU3pXUnU3Q0k9Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K
-  tls.key: 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
+  ca.crt:  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
+  tls.crt: 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
+  tls.key: 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
 ---
 # Source: cilium/charts/cilium/templates/hubble/tls-helm/server-secret.yaml
 apiVersion: v1
@@ -74,9 +74,9 @@ metadata:
  namespace: kube-system
 type: kubernetes.io/tls
 data:
-  ca.crt:  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
-  tls.crt: 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
-  tls.key: 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
+  ca.crt:  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
+  tls.crt: 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
+  tls.key: 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
 ---
 # Source: cilium/charts/cilium/templates/cilium-configmap.yaml
 apiVersion: v1
--- a/clusters/cl01tl/manifests/code-server/code-server.yaml
+++ b/clusters/cl01tl/manifests/code-server/code-server.yaml
@@ -53,7 +53,7 @@ metadata:
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: cloudflared
    app.kubernetes.io/version: 2025.10.0
-    helm.sh/chart: cloudflared-1.23.0
+    helm.sh/chart: cloudflared-1.23.1
  namespace: code-server
 spec:
  revisionHistoryLimit: 3
@@ -152,7 +152,7 @@ spec:
          envFrom:
          - secretRef:
              name: codeserver-password-secret
-          image: ghcr.io/linuxserver/code-server:4.106.2@sha256:a98afdbcb59559f11e5e8df284062e55da1076b2e470e13db4aae133ea82bad0
+          image: ghcr.io/linuxserver/code-server:4.106.3@sha256:aab9520fe923b2d93dccc2c806f3dc60649c2f4a2847fcd40c942227d0f1ae8f
          imagePullPolicy: IfNotPresent
          name: main
          resources:
--- a/clusters/cl01tl/manifests/directus/directus.yaml
+++ b/clusters/cl01tl/manifests/directus/directus.yaml
@@ -34,7 +34,7 @@ metadata:
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: cloudflared-directus
    app.kubernetes.io/version: 2025.10.0
-    helm.sh/chart: cloudflared-directus-1.23.0
+    helm.sh/chart: cloudflared-directus-1.23.1
  namespace: directus
 spec:
  revisionHistoryLimit: 3
--- a/clusters/cl01tl/manifests/element-web/element-web.yaml
+++ b/clusters/cl01tl/manifests/element-web/element-web.yaml
@@ -5,10 +5,10 @@ kind: ServiceAccount
 metadata:
  name: element-web
  labels:
-    helm.sh/chart: element-web-1.4.24
+    helm.sh/chart: element-web-1.4.25
    app.kubernetes.io/name: element-web
    app.kubernetes.io/instance: element-web
-    app.kubernetes.io/version: "1.12.4"
+    app.kubernetes.io/version: "1.12.5"
    app.kubernetes.io/managed-by: Helm
 ---
 # Source: element-web/charts/element-web/templates/configuration-nginx.yaml
@@ -17,10 +17,10 @@ kind: ConfigMap
 metadata:
  name: element-web-nginx
  labels:
-    helm.sh/chart: element-web-1.4.24
+    helm.sh/chart: element-web-1.4.25
    app.kubernetes.io/name: element-web
    app.kubernetes.io/instance: element-web
-    app.kubernetes.io/version: "1.12.4"
+    app.kubernetes.io/version: "1.12.5"
    app.kubernetes.io/managed-by: Helm
 data:
  default.conf: |
@@ -53,10 +53,10 @@ kind: ConfigMap
 metadata:
  name: element-web
  labels:
-    helm.sh/chart: element-web-1.4.24
+    helm.sh/chart: element-web-1.4.25
    app.kubernetes.io/name: element-web
    app.kubernetes.io/instance: element-web
-    app.kubernetes.io/version: "1.12.4"
+    app.kubernetes.io/version: "1.12.5"
    app.kubernetes.io/managed-by: Helm
 data:
  config.json: |
@@ -68,10 +68,10 @@ kind: Service
 metadata:
  name: element-web
  labels:
-    helm.sh/chart: element-web-1.4.24
+    helm.sh/chart: element-web-1.4.25
    app.kubernetes.io/name: element-web
    app.kubernetes.io/instance: element-web
-    app.kubernetes.io/version: "1.12.4"
+    app.kubernetes.io/version: "1.12.5"
    app.kubernetes.io/managed-by: Helm
 spec:
  type: ClusterIP
@@ -95,7 +95,7 @@ metadata:
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: cloudflared
    app.kubernetes.io/version: 2025.10.0
-    helm.sh/chart: cloudflared-1.23.0
+    helm.sh/chart: cloudflared-1.23.1
  namespace: element-web
 spec:
  revisionHistoryLimit: 3
@@ -150,10 +150,10 @@ kind: Deployment
 metadata:
  name: element-web
  labels:
-    helm.sh/chart: element-web-1.4.24
+    helm.sh/chart: element-web-1.4.25
    app.kubernetes.io/name: element-web
    app.kubernetes.io/instance: element-web
-    app.kubernetes.io/version: "1.12.4"
+    app.kubernetes.io/version: "1.12.5"
    app.kubernetes.io/managed-by: Helm
 spec:
  replicas: 1
@@ -164,8 +164,8 @@ spec:
  template:
    metadata:
      annotations:
-        checksum/config: e4e49fadd0eaedd59d5adab594fb3e159fcaaecf883c31012f72a55c7785e1c4
-        checksum/config-nginx: 0d6dce57e41259f77d072cd0381296fb272ba1c62d8817d5fd742da9ccce5aa1
+        checksum/config: 56344f23348d9f23f4ee58f5e94f1e8a01c276826ab55a6bb0975907f6ce6368
+        checksum/config-nginx: 19f0b467482655111c7c2fc39a7d251348ba77eb8eac32a75f34e841f88b1d99
      labels:
        app.kubernetes.io/name: element-web
        app.kubernetes.io/instance: element-web
@@ -177,7 +177,7 @@ spec:
        - name: element-web
          securityContext:
            {}
-          image: "vectorim/element-web:v1.12.4"
+          image: "vectorim/element-web:v1.12.5"
          imagePullPolicy: IfNotPresent
          env:
            - name: ELEMENT_WEB_PORT
@@ -242,10 +242,10 @@ kind: Pod
 metadata:
  name: "element-web-test-connection"
  labels:
-    helm.sh/chart: element-web-1.4.24
+    helm.sh/chart: element-web-1.4.25
    app.kubernetes.io/name: element-web
    app.kubernetes.io/instance: element-web
-    app.kubernetes.io/version: "1.12.4"
+    app.kubernetes.io/version: "1.12.5"
    app.kubernetes.io/managed-by: Helm
  annotations:
    "helm.sh/hook": test-success
--- a/clusters/cl01tl/manifests/ephemera/ephemera.yaml
+++ b/clusters/cl01tl/manifests/ephemera/ephemera.yaml
@@ -156,7 +156,7 @@ spec:
            value: none
          - name: TZ
            value: America/Chicago
-          image: ghcr.io/flaresolverr/flaresolverr:v3.4.5
+          image: ghcr.io/flaresolverr/flaresolverr:v3.4.6
          imagePullPolicy: IfNotPresent
          name: flaresolverr
          resources:
--- a/clusters/cl01tl/manifests/freshrss/freshrss.yaml
+++ b/clusters/cl01tl/manifests/freshrss/freshrss.yaml
@@ -77,7 +77,7 @@ metadata:
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: cloudflared
    app.kubernetes.io/version: 2025.10.0
-    helm.sh/chart: cloudflared-1.23.0
+    helm.sh/chart: cloudflared-1.23.1
  namespace: freshrss
 spec:
  revisionHistoryLimit: 3
--- a/clusters/cl01tl/manifests/gitea/gitea.yaml
+++ b/clusters/cl01tl/manifests/gitea/gitea.yaml
@@ -692,7 +692,7 @@ metadata:
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: cloudflared
    app.kubernetes.io/version: 2025.10.0
-    helm.sh/chart: cloudflared-1.23.0
+    helm.sh/chart: cloudflared-1.23.1
  namespace: gitea
 spec:
  revisionHistoryLimit: 3
--- a/clusters/cl01tl/manifests/harbor/harbor.yaml
+++ b/clusters/cl01tl/manifests/harbor/harbor.yaml
@@ -74,9 +74,9 @@ metadata:
    app.kubernetes.io/version: "2.14.0"
 type: Opaque
 data:
-  tls.crt: "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"
-  tls.key: "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"
-  ca.crt: "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"
+  tls.crt: "LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSURRakNDQWlxZ0F3SUJBZ0lRVHY5b1I0bHdmS21QdEw5SFJ5RmlrakFOQmdrcWhraUc5dzBCQVFzRkFEQVUKTVJJd0VBWURWUVFERXdsb1lYSmliM0l0WTJFd0hoY05NalV4TWpBek1qRTBOek13V2hjTk1qWXhNakF6TWpFMApOek13V2pBZ01SNHdIQVlEVlFRREV4Vm9ZWEppYjNJdVlXeGxlR3hsWW1WdWN5NXVaWFF3Z2dFaU1BMEdDU3FHClNJYjNEUUVCQVFVQUE0SUJEd0F3Z2dFS0FvSUJBUUNlVTA4RmtqTngveldrWjFsdlJZN2MxWC9PUUkrS2drbTAKTTZqMVNzRko1QjZZdkNFT2xEMUROM0pyd0V0cHEwc2VBcHFYTzRFbS9GZ0NVM3lpNmIxc2U5ekdTUWEzWlc5VQpDVE5hTnJXY25laWVaelZjWW13TXVDRmh1dE5GWVV3R3l2eXVpK0dJMjMvNEhVcGpMVEhzTmV3TlY2RHM0Vk16CkZHTFBaQmZLMU5DdDVLSmhTRUwvd0RJZ2F0UmNoR1ZJenFRaDFEd1dlM3plVjkxcE4wdmNnREZKWUs3YTFCWFQKaGVKODZTL1g5TUtPNUtCM09ETGU1YUgwVXNBR2JNRmpBSHdiVEMyZlNHMktpNzN6LzlpWmNUMnN5c1RPdnlTdAo4dDB2Z1VGaWVUUzRkaXNJd1E3RmZKRk52QWZ4bmM2ajdwOTNGRFB4cWNLaFYzbmVVWk5UQWdNQkFBR2pnWU13CmdZQXdEZ1lEVlIwUEFRSC9CQVFEQWdXZ01CMEdBMVVkSlFRV01CUUdDQ3NHQVFVRkJ3TUJCZ2dyQmdFRkJRY0QKQWpBTUJnTlZIUk1CQWY4RUFqQUFNQjhHQTFVZEl3UVlNQmFBRkl0Y0xUVVZzemxqbm5YRkJodTM3NEwwcXBNYQpNQ0FHQTFVZEVRUVpNQmVDRldoaGNtSnZjaTVoYkdWNGJHVmlaVzV6TG01bGREQU5CZ2txaGtpRzl3MEJBUXNGCkFBT0NBUUVBcE12UVRTYjVrVkRaMDRBQU1MUFZIYlFqSDZBSkpVMFk2dStoMS9EaGN3MEsxT2tOdVZMbmFmVnkKY1kyNS8rTGpGd0dXbHlTaDlwOHdCdm9KWElYaTZDTkxJNU0xMjk4a2FRbE9Qb2dLYU5qYlJZZTQwelZFVTVyUgo0MFBqYUNnV3VYL3NGWVlEYy9DUitYbHFKRFlha1FKTlBSdDgrWDRRQ3R3S05HT2tNQXk2ck5xYUF6UzdIekswCm1JWXFLcDdMSHdPelQwelVjbDJjc3RYTE83VEN6Wmt5ZHZ3WTlPRURudFd1WW5YcVE2TmIyVmcweUMvYStFMjIKWjQ1eE5NQk1ZODdIM0V3bXI4RHJ5cTRiSFdZKzM3d0xFMmZNYnV0enFxRGN2SHNNZzhneDh1U0dLS3Zub0NlZgpWQWJCU3NYNkQ1Vk85aXFmK3BqVlJJbGdBdkNsSEE9PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg=="
+  tls.key: "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"
+  ca.crt: "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"
 ---
 # Source: harbor/charts/harbor/templates/registry/registry-secret.yaml
 apiVersion: v1
@@ -1268,7 +1268,7 @@ spec:
        app.kubernetes.io/component: nginx
      annotations:
        checksum/configmap: 55921b41f4478ded4d60da7edb83b828382ba722214816271ce3ffd2a77aed35
-        checksum/secret: d7cbfaf80e2422e5607f47c317a6822352928575c7033776779eeb4a488eedf0
+        checksum/secret: abd41fc187a1f0860253f4926839efac5c632560d2e993bfd08e4165cc1510ae
    spec:
      securityContext:
        runAsUser: 10000
--- a/clusters/cl01tl/manifests/home-assistant/home-assistant.yaml
+++ b/clusters/cl01tl/manifests/home-assistant/home-assistant.yaml
@@ -116,7 +116,7 @@ spec:
          envFrom:
          - secretRef:
              name: home-assistant-code-server-password-secret
-          image: ghcr.io/linuxserver/code-server:4.106.2@sha256:a98afdbcb59559f11e5e8df284062e55da1076b2e470e13db4aae133ea82bad0
+          image: ghcr.io/linuxserver/code-server:4.106.3@sha256:aab9520fe923b2d93dccc2c806f3dc60649c2f4a2847fcd40c942227d0f1ae8f
          imagePullPolicy: IfNotPresent
          name: code-server
          resources:
--- a/clusters/cl01tl/manifests/homepage-dev/homepage-dev.yaml
+++ b/clusters/cl01tl/manifests/homepage-dev/homepage-dev.yaml
@@ -147,7 +147,7 @@ metadata:
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: cloudflared
    app.kubernetes.io/version: 2025.10.0
-    helm.sh/chart: cloudflared-1.23.0
+    helm.sh/chart: cloudflared-1.23.1
  namespace: homepage-dev
 spec:
  revisionHistoryLimit: 3
--- a/clusters/cl01tl/manifests/jellyfin/jellyfin.yaml
+++ b/clusters/cl01tl/manifests/jellyfin/jellyfin.yaml
@@ -177,7 +177,7 @@ spec:
            value: "true"
          - name: JELLYFIN_PublishedServerUrl
            value: https://jellyfin.alexlebens.net/
-          image: ghcr.io/jellyfin/jellyfin:10.11.3
+          image: ghcr.io/jellyfin/jellyfin:10.11.4
          imagePullPolicy: IfNotPresent
          name: main
          resources:
--- a/clusters/cl01tl/manifests/karakeep/karakeep.yaml
+++ b/clusters/cl01tl/manifests/karakeep/karakeep.yaml
@@ -138,7 +138,7 @@ metadata:
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: cloudflared
    app.kubernetes.io/version: 2025.10.0
-    helm.sh/chart: cloudflared-1.23.0
+    helm.sh/chart: cloudflared-1.23.1
  namespace: karakeep
 spec:
  revisionHistoryLimit: 3
--- a/clusters/cl01tl/manifests/kiwix/kiwix.yaml
+++ b/clusters/cl01tl/manifests/kiwix/kiwix.yaml
@@ -110,7 +110,7 @@ spec:
          env:
          - name: PORT
            value: "8080"
-          image: ghcr.io/kiwix/kiwix-serve:3.8.0
+          image: ghcr.io/kiwix/kiwix-serve:3.8.1
          imagePullPolicy: IfNotPresent
          name: main
          resources:
--- a/clusters/cl01tl/manifests/komodo/komodo.yaml
+++ b/clusters/cl01tl/manifests/komodo/komodo.yaml
@@ -109,6 +109,57 @@ spec:
 # Source: komodo/charts/komodo/templates/common.yaml
 apiVersion: apps/v1
 kind: Deployment
+metadata:
+  name: komodo-ferretdb-2
+  labels:
+    app.kubernetes.io/controller: ferretdb-2
+    app.kubernetes.io/instance: komodo
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: komodo
+    helm.sh/chart: komodo-4.4.0
+  namespace: komodo
+spec:
+  revisionHistoryLimit: 3
+  replicas: 1
+  strategy:
+    type: Recreate
+  selector:
+    matchLabels:
+      app.kubernetes.io/controller: ferretdb-2
+      app.kubernetes.io/name: komodo
+      app.kubernetes.io/instance: komodo
+  template:
+    metadata:
+      labels: 
+        app.kubernetes.io/controller: ferretdb-2
+        app.kubernetes.io/instance: komodo
+        app.kubernetes.io/name: komodo
+    spec: 
+      enableServiceLinks: false
+      serviceAccountName: default
+      automountServiceAccountToken: true
+      hostIPC: false
+      hostNetwork: false
+      hostPID: false
+      dnsPolicy: ClusterFirst
+      containers: 
+        - env:
+          - name: FERRETDB_POSTGRESQL_URL
+            valueFrom:
+              secretKeyRef:
+                key: uri
+                name: komodo-postgresql-17-fdb-cluster-app
+          image: ghcr.io/ferretdb/ferretdb:2.7.0
+          imagePullPolicy: IfNotPresent
+          name: main
+          resources:
+            requests:
+              cpu: 10m
+              memory: 128Mi
+---
+# Source: komodo/charts/komodo/templates/common.yaml
+apiVersion: apps/v1
+kind: Deployment
 metadata:
  name: komodo-main
  labels:
@@ -234,57 +285,6 @@ spec:
          persistentVolumeClaim:
            claimName: komodo-syncs
 ---
-# Source: komodo/charts/komodo/templates/common.yaml
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: komodo-ferretdb-2
-  labels:
-    app.kubernetes.io/controller: ferretdb-2
-    app.kubernetes.io/instance: komodo
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: komodo
-    helm.sh/chart: komodo-4.4.0
-  namespace: komodo
-spec:
-  revisionHistoryLimit: 3
-  replicas: 1
-  strategy:
-    type: Recreate
-  selector:
-    matchLabels:
-      app.kubernetes.io/controller: ferretdb-2
-      app.kubernetes.io/name: komodo
-      app.kubernetes.io/instance: komodo
-  template:
-    metadata:
-      labels: 
-        app.kubernetes.io/controller: ferretdb-2
-        app.kubernetes.io/instance: komodo
-        app.kubernetes.io/name: komodo
-    spec: 
-      enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
-      hostIPC: false
-      hostNetwork: false
-      hostPID: false
-      dnsPolicy: ClusterFirst
-      containers: 
-        - env:
-          - name: FERRETDB_POSTGRESQL_URL
-            valueFrom:
-              secretKeyRef:
-                key: uri
-                name: komodo-postgresql-17-fdb-cluster-app
-          image: ghcr.io/ferretdb/ferretdb:2.7.0
-          imagePullPolicy: IfNotPresent
-          name: main
-          resources:
-            requests:
-              cpu: 10m
-              memory: 128Mi
---
 # Source: komodo/charts/postgresql-17-fdb-cluster/templates/cluster.yaml
 apiVersion: postgresql.cnpg.io/v1
 kind: Cluster
--- a/clusters/cl01tl/manifests/kube-prometheus-stack/kube-prometheus-stack.yaml
+++ b/clusters/cl01tl/manifests/kube-prometheus-stack/kube-prometheus-stack.yaml
@@ -18,7 +18,7 @@ kind: ServiceAccount
 automountServiceAccountToken: true
 metadata:
  labels:    
-    helm.sh/chart: kube-state-metrics-6.4.1
+    helm.sh/chart: kube-state-metrics-6.4.2
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/component: metrics
    app.kubernetes.io/part-of: kube-state-metrics
@@ -36,7 +36,7 @@ metadata:
  name: kube-prometheus-stack-prometheus-node-exporter
  namespace: kube-prometheus-stack
  labels:
-    helm.sh/chart: prometheus-node-exporter-4.49.1
+    helm.sh/chart: prometheus-node-exporter-4.49.2
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/component: metrics
    app.kubernetes.io/part-of: prometheus-node-exporter
@@ -59,9 +59,9 @@ metadata:
    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
 automountServiceAccountToken: true
@@ -76,9 +76,9 @@ metadata:
    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
    app: kube-prometheus-stack-operator
@@ -99,9 +99,9 @@ metadata:
    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
 automountServiceAccountToken: true
@@ -117,9 +117,9 @@ metadata:
    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
 data:
@@ -130,7 +130,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
  labels:    
-    helm.sh/chart: kube-state-metrics-6.4.1
+    helm.sh/chart: kube-state-metrics-6.4.2
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/component: metrics
    app.kubernetes.io/part-of: kube-state-metrics
@@ -293,9 +293,9 @@ metadata:
    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
    app: kube-prometheus-stack-operator
@@ -317,9 +317,9 @@ metadata:
    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
    app: kube-prometheus-stack-operator
@@ -339,9 +339,9 @@ metadata:
    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
    app: kube-prometheus-stack-operator
@@ -465,9 +465,9 @@ metadata:
    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
 rules:
@@ -499,7 +499,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
  labels:    
-    helm.sh/chart: kube-state-metrics-6.4.1
+    helm.sh/chart: kube-state-metrics-6.4.2
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/component: metrics
    app.kubernetes.io/part-of: kube-state-metrics
@@ -526,9 +526,9 @@ metadata:
    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
    app: kube-prometheus-stack-operator
@@ -553,9 +553,9 @@ metadata:
    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
 roleRef:
@@ -574,7 +574,7 @@ metadata:
  name: kube-prometheus-stack-kube-state-metrics
  namespace: kube-prometheus-stack
  labels:    
-    helm.sh/chart: kube-state-metrics-6.4.1
+    helm.sh/chart: kube-state-metrics-6.4.2
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/component: metrics
    app.kubernetes.io/part-of: kube-state-metrics
@@ -602,7 +602,7 @@ metadata:
  name: kube-prometheus-stack-prometheus-node-exporter
  namespace: kube-prometheus-stack
  labels:
-    helm.sh/chart: prometheus-node-exporter-4.49.1
+    helm.sh/chart: prometheus-node-exporter-4.49.2
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/component: metrics
    app.kubernetes.io/part-of: prometheus-node-exporter
@@ -636,9 +636,9 @@ metadata:
    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
 spec:
@@ -668,9 +668,9 @@ metadata:
    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
  namespace: kube-system
@@ -695,9 +695,9 @@ metadata:
    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
  namespace: kube-system
@@ -722,9 +722,9 @@ metadata:
    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
    app: kube-prometheus-stack-operator
@@ -752,9 +752,9 @@ metadata:
    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
 spec:
@@ -836,7 +836,7 @@ metadata:
  name: kube-prometheus-stack-prometheus-node-exporter
  namespace: kube-prometheus-stack
  labels:
-    helm.sh/chart: prometheus-node-exporter-4.49.1
+    helm.sh/chart: prometheus-node-exporter-4.49.2
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/component: metrics
    app.kubernetes.io/part-of: prometheus-node-exporter
@@ -859,7 +859,7 @@ spec:
      annotations:
        cluster-autoscaler.kubernetes.io/safe-to-evict: "true"
      labels:
-        helm.sh/chart: prometheus-node-exporter-4.49.1
+        helm.sh/chart: prometheus-node-exporter-4.49.2
        app.kubernetes.io/managed-by: Helm
        app.kubernetes.io/component: metrics
        app.kubernetes.io/part-of: prometheus-node-exporter
@@ -969,7 +969,7 @@ metadata:
  name: kube-prometheus-stack-kube-state-metrics
  namespace: kube-prometheus-stack
  labels:    
-    helm.sh/chart: kube-state-metrics-6.4.1
+    helm.sh/chart: kube-state-metrics-6.4.2
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/component: metrics
    app.kubernetes.io/part-of: kube-state-metrics
@@ -989,7 +989,7 @@ spec:
  template:
    metadata:
      labels:        
-        helm.sh/chart: kube-state-metrics-6.4.1
+        helm.sh/chart: kube-state-metrics-6.4.2
        app.kubernetes.io/managed-by: Helm
        app.kubernetes.io/component: metrics
        app.kubernetes.io/part-of: kube-state-metrics
@@ -1060,9 +1060,9 @@ metadata:
    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
    app: kube-prometheus-stack-operator
@@ -1081,9 +1081,9 @@ spec:
        
        app.kubernetes.io/managed-by: Helm
        app.kubernetes.io/instance: kube-prometheus-stack
-        app.kubernetes.io/version: "79.7.1"
+        app.kubernetes.io/version: "79.11.0"
        app.kubernetes.io/part-of: kube-prometheus-stack
-        chart: kube-prometheus-stack-79.7.1
+        chart: kube-prometheus-stack-79.11.0
        release: "kube-prometheus-stack"
        heritage: "Helm"
        app: kube-prometheus-stack-operator
@@ -1228,9 +1228,9 @@ metadata:
    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
 spec:
@@ -1434,9 +1434,9 @@ metadata:
    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
    app.kubernetes.io/name: kube-prometheus-stack-prometheus-operator
@@ -1474,9 +1474,9 @@ metadata:
    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
 spec:
@@ -1488,9 +1488,9 @@ spec:
        port: http-web
        pathPrefix: "/"
        apiVersion: v2
-  image: "quay.io/prometheus/prometheus:v3.7.3"
+  image: "quay.io/prometheus/prometheus:v3.8.0"
  imagePullPolicy: "IfNotPresent"
-  version: v3.7.3
+  version: v3.8.0
  externalUrl: "https://prometheus.alexlebens.net"
  paused: false
  replicas: 1
@@ -1560,9 +1560,9 @@ metadata:
    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
 spec:
@@ -1703,9 +1703,9 @@ metadata:
    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
 spec:
@@ -1735,9 +1735,9 @@ metadata:
    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
 spec:
@@ -1903,9 +1903,9 @@ metadata:
    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
 spec:
@@ -1971,9 +1971,9 @@ metadata:
    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
 spec:
@@ -2006,9 +2006,9 @@ metadata:
    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
 spec:
@@ -2033,9 +2033,9 @@ metadata:
    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
 spec:
@@ -2060,9 +2060,9 @@ metadata:
    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
 spec:
@@ -2087,9 +2087,9 @@ metadata:
    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
 spec:
@@ -2114,9 +2114,9 @@ metadata:
    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
 spec:
@@ -2203,9 +2203,9 @@ metadata:
    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
 spec:
@@ -2351,9 +2351,9 @@ metadata:
    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
 spec:
@@ -2473,9 +2473,9 @@ metadata:
    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
 spec:
@@ -2795,9 +2795,9 @@ metadata:
    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
 spec:
@@ -2826,9 +2826,9 @@ metadata:
    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
 spec:
@@ -2903,9 +2903,9 @@ metadata:
    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
 spec:
@@ -2928,9 +2928,9 @@ metadata:
    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
 spec:
@@ -2961,9 +2961,9 @@ metadata:
    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
 spec:
@@ -3030,9 +3030,9 @@ metadata:
    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
 spec:
@@ -3081,9 +3081,9 @@ metadata:
    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
 spec:
@@ -3355,9 +3355,9 @@ metadata:
    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
 spec:
@@ -3555,9 +3555,9 @@ metadata:
    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
 spec:
@@ -3669,9 +3669,9 @@ metadata:
    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
 spec:
@@ -3750,9 +3750,9 @@ metadata:
    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
 spec:
@@ -3942,9 +3942,9 @@ metadata:
    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
 spec:
@@ -3985,9 +3985,9 @@ metadata:
    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
 spec:
@@ -4068,9 +4068,9 @@ metadata:
    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
 spec:
@@ -4406,9 +4406,9 @@ metadata:
    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
 spec:
@@ -4436,9 +4436,9 @@ metadata:
    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
 spec:
@@ -4493,9 +4493,9 @@ metadata:
    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
 spec:
@@ -4586,9 +4586,9 @@ metadata:
    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
 spec:
@@ -4989,7 +4989,7 @@ metadata:
  name: kube-prometheus-stack-kube-state-metrics
  namespace: kube-prometheus-stack
  labels:    
-    helm.sh/chart: kube-state-metrics-6.4.1
+    helm.sh/chart: kube-state-metrics-6.4.2
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/component: metrics
    app.kubernetes.io/part-of: kube-state-metrics
@@ -5014,7 +5014,7 @@ metadata:
  name: kube-prometheus-stack-prometheus-node-exporter
  namespace: kube-prometheus-stack
  labels:
-    helm.sh/chart: prometheus-node-exporter-4.49.1
+    helm.sh/chart: prometheus-node-exporter-4.49.2
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/component: metrics
    app.kubernetes.io/part-of: prometheus-node-exporter
@@ -5046,9 +5046,9 @@ metadata:
    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
 spec:
@@ -5079,9 +5079,9 @@ metadata:
    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
 spec:
@@ -5109,9 +5109,9 @@ metadata:
    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
 spec:
@@ -5150,9 +5150,9 @@ metadata:
    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
 spec:
@@ -5190,9 +5190,9 @@ metadata:
    app: kube-prometheus-stack-kubelet    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
 spec:
@@ -5304,9 +5304,9 @@ metadata:
    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
    app: kube-prometheus-stack-operator
@@ -5344,9 +5344,9 @@ metadata:
    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
 spec:
@@ -5399,9 +5399,9 @@ metadata:
    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
    app.kubernetes.io/name: kube-prometheus-stack-prometheus-operator
@@ -5462,9 +5462,9 @@ metadata:
    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
    app.kubernetes.io/name: kube-prometheus-stack-prometheus-operator
@@ -5484,9 +5484,9 @@ metadata:
    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
    app.kubernetes.io/name: kube-prometheus-stack-prometheus-operator
@@ -5514,9 +5514,9 @@ metadata:
    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
    app.kubernetes.io/name: kube-prometheus-stack-prometheus-operator
@@ -5544,9 +5544,9 @@ metadata:
    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
    app.kubernetes.io/name: kube-prometheus-stack-prometheus-operator
@@ -5574,9 +5574,9 @@ metadata:
    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
    app.kubernetes.io/name: kube-prometheus-stack-prometheus-operator
@@ -5606,9 +5606,9 @@ metadata:
    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
    app.kubernetes.io/name: kube-prometheus-stack-prometheus-operator
@@ -5623,9 +5623,9 @@ spec:
        
        app.kubernetes.io/managed-by: Helm
        app.kubernetes.io/instance: kube-prometheus-stack
-        app.kubernetes.io/version: "79.7.1"
+        app.kubernetes.io/version: "79.11.0"
        app.kubernetes.io/part-of: kube-prometheus-stack
-        chart: kube-prometheus-stack-79.7.1
+        chart: kube-prometheus-stack-79.11.0
        release: "kube-prometheus-stack"
        heritage: "Helm"
        app.kubernetes.io/name: kube-prometheus-stack-prometheus-operator
@@ -5633,7 +5633,7 @@ spec:
    spec:
      containers:
        - name: create
-          image: registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.6.4
+          image: registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.6.5
          imagePullPolicy: IfNotPresent
          args:
            - create
@@ -5674,9 +5674,9 @@ metadata:
    
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/instance: kube-prometheus-stack
-    app.kubernetes.io/version: "79.7.1"
+    app.kubernetes.io/version: "79.11.0"
    app.kubernetes.io/part-of: kube-prometheus-stack
-    chart: kube-prometheus-stack-79.7.1
+    chart: kube-prometheus-stack-79.11.0
    release: "kube-prometheus-stack"
    heritage: "Helm"
    app.kubernetes.io/name: kube-prometheus-stack-prometheus-operator
@@ -5691,9 +5691,9 @@ spec:
        
        app.kubernetes.io/managed-by: Helm
        app.kubernetes.io/instance: kube-prometheus-stack
-        app.kubernetes.io/version: "79.7.1"
+        app.kubernetes.io/version: "79.11.0"
        app.kubernetes.io/part-of: kube-prometheus-stack
-        chart: kube-prometheus-stack-79.7.1
+        chart: kube-prometheus-stack-79.11.0
        release: "kube-prometheus-stack"
        heritage: "Helm"
        app.kubernetes.io/name: kube-prometheus-stack-prometheus-operator
@@ -5701,7 +5701,7 @@ spec:
    spec:
      containers:
        - name: patch
-          image: registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.6.4
+          image: registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.6.5
          imagePullPolicy: IfNotPresent
          args:
            - patch
--- a/clusters/cl01tl/manifests/matrix-synapse/matrix-synapse.yaml
+++ b/clusters/cl01tl/manifests/matrix-synapse/matrix-synapse.yaml
@@ -14,7 +14,7 @@ stringData:
  config.yaml: |
    ## Registration ##

-    registration_shared_secret: "arSpBc1NIUWBdw0B1l5gBZns"
+    registration_shared_secret: "aG4hsOyfNI8LeeYJt0ipx5kk"

    ## API Configuration ##

@@ -345,7 +345,7 @@ metadata:
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: cloudflared-hookshot
    app.kubernetes.io/version: 2025.10.0
-    helm.sh/chart: cloudflared-hookshot-1.23.0
+    helm.sh/chart: cloudflared-hookshot-1.23.1
  namespace: matrix-synapse
 spec:
  revisionHistoryLimit: 3
@@ -405,7 +405,7 @@ metadata:
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: cloudflared-synapse
    app.kubernetes.io/version: 2025.10.0
-    helm.sh/chart: cloudflared-synapse-1.23.0
+    helm.sh/chart: cloudflared-synapse-1.23.1
  namespace: matrix-synapse
 spec:
  revisionHistoryLimit: 3
@@ -552,7 +552,7 @@ spec:
    metadata:
      annotations:
        checksum/config: e77b3b25301ed2f4b5eac2f16ed5d058374ed1ffcd7e9ca4d8eef44867647feb
-        checksum/secrets: baa114801e675282534274953a14345f1154ca25fc468388e78788b4c5e4b2b2
+        checksum/secrets: bcbce552aa1a027f292c7818024deba14d30656b0fc65997635ce48f4a31db86
      labels:
        app.kubernetes.io/name: matrix-synapse
        app.kubernetes.io/instance: matrix-synapse
--- a/clusters/cl01tl/manifests/n8n/n8n.yaml
+++ b/clusters/cl01tl/manifests/n8n/n8n.yaml
@@ -22,6 +22,30 @@ spec:
 # Source: n8n/charts/n8n/templates/common.yaml
 apiVersion: v1
 kind: Service
+metadata:
+  name: n8n-worker
+  labels:
+    app.kubernetes.io/instance: n8n
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: n8n
+    app.kubernetes.io/service: n8n-worker
+    helm.sh/chart: n8n-4.4.0
+  namespace: n8n
+spec:
+  type: ClusterIP
+  ports:
+    - port: 80
+      targetPort: 5678
+      protocol: TCP
+      name: http
+  selector:
+    app.kubernetes.io/controller: worker
+    app.kubernetes.io/instance: n8n
+    app.kubernetes.io/name: n8n
+---
+# Source: n8n/charts/n8n/templates/common.yaml
+apiVersion: v1
+kind: Service
 metadata:
  name: n8n-main
  labels:
@@ -68,30 +92,6 @@ spec:
    app.kubernetes.io/name: n8n
 ---
 # Source: n8n/charts/n8n/templates/common.yaml
-apiVersion: v1
-kind: Service
-metadata:
-  name: n8n-worker
-  labels:
-    app.kubernetes.io/instance: n8n
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: n8n
-    app.kubernetes.io/service: n8n-worker
-    helm.sh/chart: n8n-4.4.0
-  namespace: n8n
-spec:
-  type: ClusterIP
-  ports:
-    - port: 80
-      targetPort: 5678
-      protocol: TCP
-      name: http
-  selector:
-    app.kubernetes.io/controller: worker
-    app.kubernetes.io/instance: n8n
-    app.kubernetes.io/name: n8n
---
-# Source: n8n/charts/n8n/templates/common.yaml
 apiVersion: apps/v1
 kind: DaemonSet
 metadata:
@@ -182,7 +182,7 @@ spec:
            value: "false"
          - name: N8N_VERSION_NOTIFICATIONS_ENABLED
            value: "false"
-          image: ghcr.io/n8n-io/n8n:1.121.2
+          image: ghcr.io/n8n-io/n8n:1.123.0
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 3
@@ -305,7 +305,7 @@ spec:
                name: n8n-config-secret
          - name: WEBHOOK_URL
            value: https://n8n.alexlebens.net/
-          image: ghcr.io/n8n-io/n8n:1.121.2
+          image: ghcr.io/n8n-io/n8n:1.123.0
          imagePullPolicy: IfNotPresent
          name: main
          resources:
@@ -401,7 +401,7 @@ spec:
                name: n8n-config-secret
          - name: WEBHOOK_URL
            value: https://n8n.alexlebens.net/
-          image: ghcr.io/n8n-io/n8n:1.121.2
+          image: ghcr.io/n8n-io/n8n:1.123.0
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 3
--- a/clusters/cl01tl/manifests/ollama/ollama.yaml
+++ b/clusters/cl01tl/manifests/ollama/ollama.yaml
@@ -3,48 +3,6 @@
 ---
 kind: PersistentVolumeClaim
 apiVersion: v1
-metadata:
-  name: ollama-server-1
-  labels:
-    app.kubernetes.io/instance: ollama
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: ollama
-    helm.sh/chart: ollama-4.4.0
-  annotations:
-    helm.sh/resource-policy: keep
-  namespace: ollama
-spec:
-  accessModes:
-    - "ReadWriteOnce"
-  resources:
-    requests:
-      storage: "40Gi"
-  storageClassName: "ceph-block"
---
-# Source: ollama/charts/ollama/templates/common.yaml
-kind: PersistentVolumeClaim
-apiVersion: v1
-metadata:
-  name: ollama-server-2
-  labels:
-    app.kubernetes.io/instance: ollama
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: ollama
-    helm.sh/chart: ollama-4.4.0
-  annotations:
-    helm.sh/resource-policy: keep
-  namespace: ollama
-spec:
-  accessModes:
-    - "ReadWriteOnce"
-  resources:
-    requests:
-      storage: "40Gi"
-  storageClassName: "ceph-block"
---
-# Source: ollama/charts/ollama/templates/common.yaml
-kind: PersistentVolumeClaim
-apiVersion: v1
 metadata:
  name: ollama-server-3
  labels:
@@ -85,6 +43,48 @@ spec:
  storageClassName: "ceph-block"
 ---
 # Source: ollama/charts/ollama/templates/common.yaml
+kind: PersistentVolumeClaim
+apiVersion: v1
+metadata:
+  name: ollama-server-1
+  labels:
+    app.kubernetes.io/instance: ollama
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: ollama
+    helm.sh/chart: ollama-4.4.0
+  annotations:
+    helm.sh/resource-policy: keep
+  namespace: ollama
+spec:
+  accessModes:
+    - "ReadWriteOnce"
+  resources:
+    requests:
+      storage: "40Gi"
+  storageClassName: "ceph-block"
+---
+# Source: ollama/charts/ollama/templates/common.yaml
+kind: PersistentVolumeClaim
+apiVersion: v1
+metadata:
+  name: ollama-server-2
+  labels:
+    app.kubernetes.io/instance: ollama
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: ollama
+    helm.sh/chart: ollama-4.4.0
+  annotations:
+    helm.sh/resource-policy: keep
+  namespace: ollama
+spec:
+  accessModes:
+    - "ReadWriteOnce"
+  resources:
+    requests:
+      storage: "40Gi"
+  storageClassName: "ceph-block"
+---
+# Source: ollama/charts/ollama/templates/common.yaml
 apiVersion: v1
 kind: Service
 metadata:
@@ -265,7 +265,7 @@ spec:
            value: 24h
          - name: OLLAMA_HOST
            value: 0.0.0.0
-          image: ollama/ollama:0.13.0
+          image: ollama/ollama:0.13.1
          imagePullPolicy: IfNotPresent
          name: main
          resources:
@@ -336,7 +336,7 @@ spec:
            value: 24h
          - name: OLLAMA_HOST
            value: 0.0.0.0
-          image: ollama/ollama:0.13.0
+          image: ollama/ollama:0.13.1
          imagePullPolicy: IfNotPresent
          name: main
          resources:
@@ -407,7 +407,7 @@ spec:
            value: 24h
          - name: OLLAMA_HOST
            value: 0.0.0.0
-          image: ollama/ollama:0.13.0
+          image: ollama/ollama:0.13.1
          imagePullPolicy: IfNotPresent
          name: main
          resources:
@@ -505,7 +505,7 @@ spec:
            value: Authentik
          - name: OPENID_PROVIDER_URL
            value: https://authentik.alexlebens.net/application/o/ollama/.well-known/openid-configuration
-          image: ghcr.io/open-webui/open-webui:v0.6.37
+          image: ghcr.io/open-webui/open-webui:0.6.41
          imagePullPolicy: IfNotPresent
          name: main
          resources:
--- a/clusters/cl01tl/manifests/outline/outline.yaml
+++ b/clusters/cl01tl/manifests/outline/outline.yaml
@@ -34,7 +34,7 @@ metadata:
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: cloudflared-outline
    app.kubernetes.io/version: 2025.10.0
-    helm.sh/chart: cloudflared-outline-1.23.0
+    helm.sh/chart: cloudflared-outline-1.23.1
  namespace: outline
 spec:
  revisionHistoryLimit: 3
--- a/clusters/cl01tl/manifests/postiz/postiz.yaml
+++ b/clusters/cl01tl/manifests/postiz/postiz.yaml
@@ -77,7 +77,7 @@ metadata:
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: cloudflared-postiz
    app.kubernetes.io/version: 2025.10.0
-    helm.sh/chart: cloudflared-1.23.0
+    helm.sh/chart: cloudflared-1.23.1
  namespace: postiz
 spec:
  revisionHistoryLimit: 3
@@ -221,7 +221,7 @@ spec:
                name: postiz-oidc-secret
          - name: POSTIZ_OAUTH_SCOPE
            value: openid profile email
-          image: ghcr.io/gitroomhq/postiz-app:v2.8.3
+          image: ghcr.io/gitroomhq/postiz-app:v2.9.0
          imagePullPolicy: IfNotPresent
          name: main
          resources:
--- a/clusters/cl01tl/manifests/qbittorrent/qbittorrent.yaml
+++ b/clusters/cl01tl/manifests/qbittorrent/qbittorrent.yaml
@@ -439,6 +439,218 @@ spec:
 # Source: qbittorrent/charts/qbittorrent/templates/common.yaml
 apiVersion: apps/v1
 kind: Deployment
+metadata:
+  name: qbittorrent-qbit-manage
+  labels:
+    app.kubernetes.io/controller: qbit-manage
+    app.kubernetes.io/instance: qbittorrent
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: qbittorrent
+    helm.sh/chart: qbittorrent-4.4.0
+  annotations:
+    reloader.stakater.com/auto: "true"
+  namespace: qbittorrent
+spec:
+  revisionHistoryLimit: 3
+  replicas: 1
+  strategy:
+    type: Recreate
+  selector:
+    matchLabels:
+      app.kubernetes.io/controller: qbit-manage
+      app.kubernetes.io/name: qbittorrent
+      app.kubernetes.io/instance: qbittorrent
+  template:
+    metadata:
+      labels: 
+        app.kubernetes.io/controller: qbit-manage
+        app.kubernetes.io/instance: qbittorrent
+        app.kubernetes.io/name: qbittorrent
+    spec: 
+      enableServiceLinks: false
+      serviceAccountName: default
+      automountServiceAccountToken: true
+      hostIPC: false
+      hostNetwork: false
+      hostPID: false
+      dnsPolicy: ClusterFirst
+      initContainers: 
+        - command:
+          - /bin/sh
+          - -ec
+          - |
+            cp /config/config.yml /app/config/config.yml
+          image: busybox:1.37.0
+          imagePullPolicy: IfNotPresent
+          name: init-copy-config
+          resources:
+            requests:
+              cpu: 10m
+              memory: 128Mi
+          volumeMounts:
+          - mountPath: /config/config.yml
+            mountPropagation: None
+            name: qbit-manage-config
+            readOnly: true
+            subPath: config.yml
+          - mountPath: /app/config
+            name: qbit-manage-config-data
+      containers: 
+        - env:
+          - name: TZ
+            value: US/Central
+          - name: PGID
+            value: "1000"
+          - name: PUID
+            value: "1000"
+          - name: APPRISE_STORAGE_MODE
+            value: memory
+          - name: APPRISE_STATEFUL_MODE
+            value: disabled
+          - name: APPRISE_WORKER_COUNT
+            value: "1"
+          - name: APPRISE_STATELESS_URLS
+            valueFrom:
+              secretKeyRef:
+                key: ntfy-url
+                name: qbittorrent-qbit-manage-config
+          image: caronc/apprise:1.2.6
+          imagePullPolicy: IfNotPresent
+          name: apprise-api
+          resources:
+            requests:
+              cpu: 10m
+              memory: 128Mi
+        - env:
+          - name: TZ
+            value: US/Central
+          - name: QBT_SCHEDULE
+            value: 0 * * * *
+          - name: QBT_STARTUP_DELAY
+            value: "360"
+          - name: QBT_CONFIG_DIR
+            value: /app/config/
+          - name: QBT_LOGFILE
+            value: /app/var/activity.log
+          - name: QBT_LOG_LEVEL
+            value: INFO
+          image: ghcr.io/stuffanthings/qbit_manage:v4.6.5
+          imagePullPolicy: IfNotPresent
+          name: qbit-manage
+          resources:
+            requests:
+              cpu: 10m
+              memory: 64Mi
+          volumeMounts:
+          - mountPath: /qbittorrent
+            name: config
+          - mountPath: /config/config.yml
+            mountPropagation: None
+            name: qbit-manage-config
+            readOnly: true
+            subPath: config.yml
+          - mountPath: /app/config
+            name: qbit-manage-config-data
+          - mountPath: /app/var
+            name: qbit-manage-config-var
+          - mountPath: /mnt/store
+            name: storage
+      volumes: 
+        - name: config
+          persistentVolumeClaim:
+            claimName: qbittorrent-config
+        - configMap:
+            name: qbit-manage-config
+          name: qbit-manage-config
+        - name: qbit-manage-config-data
+          persistentVolumeClaim:
+            claimName: qbittorrent-qbit-manage-config-data
+        - emptyDir: {}
+          name: qbit-manage-config-var
+        - name: storage
+          persistentVolumeClaim:
+            claimName: qbittorrent-nfs-storage
+---
+# Source: qbittorrent/charts/qbittorrent/templates/common.yaml
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: qbittorrent-qui
+  labels:
+    app.kubernetes.io/controller: qui
+    app.kubernetes.io/instance: qbittorrent
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: qbittorrent
+    helm.sh/chart: qbittorrent-4.4.0
+  namespace: qbittorrent
+spec:
+  revisionHistoryLimit: 3
+  replicas: 1
+  strategy:
+    type: Recreate
+  selector:
+    matchLabels:
+      app.kubernetes.io/controller: qui
+      app.kubernetes.io/name: qbittorrent
+      app.kubernetes.io/instance: qbittorrent
+  template:
+    metadata:
+      labels: 
+        app.kubernetes.io/controller: qui
+        app.kubernetes.io/instance: qbittorrent
+        app.kubernetes.io/name: qbittorrent
+    spec: 
+      enableServiceLinks: false
+      serviceAccountName: default
+      automountServiceAccountToken: true
+      hostIPC: false
+      hostNetwork: false
+      hostPID: false
+      dnsPolicy: ClusterFirst
+      containers: 
+        - env:
+          - name: QUI__METRICS_ENABLED
+            value: "true"
+          - name: QUI__METRICS_HOST
+            value: 0.0.0.0
+          - name: QUI__METRICS_PORT
+            value: "9074"
+          - name: QUI__OIDC_ENABLED
+            value: "true"
+          - name: QUI__OIDC_ISSUER
+            value: https://auth.alexlebens.dev/application/o/qui/
+          - name: QUI__OIDC_CLIENT_ID
+            valueFrom:
+              secretKeyRef:
+                key: client
+                name: qui-oidc-secret
+          - name: QUI__OIDC_CLIENT_SECRET
+            valueFrom:
+              secretKeyRef:
+                key: secret
+                name: qui-oidc-secret
+          - name: QUI__OIDC_REDIRECT_URL
+            value: https://qui.alexlebens.net/api/auth/oidc/callback
+          - name: QUI__OIDC_DISABLE_BUILT_IN_LOGIN
+            value: "false"
+          image: ghcr.io/autobrr/qui:v1.7.0
+          imagePullPolicy: IfNotPresent
+          name: qui
+          resources:
+            requests:
+              cpu: 10m
+              memory: 128Mi
+          volumeMounts:
+          - mountPath: /config
+            name: qui-config-data
+      volumes: 
+        - name: qui-config-data
+          persistentVolumeClaim:
+            claimName: qbittorrent-qui-config-data
+---
+# Source: qbittorrent/charts/qbittorrent/templates/common.yaml
+apiVersion: apps/v1
+kind: Deployment
 metadata:
  name: qbittorrent-main
  labels:
@@ -594,218 +806,6 @@ spec:
            name: glutun-update-script
          name: update-script
 ---
-# Source: qbittorrent/charts/qbittorrent/templates/common.yaml
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: qbittorrent-qbit-manage
-  labels:
-    app.kubernetes.io/controller: qbit-manage
-    app.kubernetes.io/instance: qbittorrent
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: qbittorrent
-    helm.sh/chart: qbittorrent-4.4.0
-  annotations:
-    reloader.stakater.com/auto: "true"
-  namespace: qbittorrent
-spec:
-  revisionHistoryLimit: 3
-  replicas: 1
-  strategy:
-    type: Recreate
-  selector:
-    matchLabels:
-      app.kubernetes.io/controller: qbit-manage
-      app.kubernetes.io/name: qbittorrent
-      app.kubernetes.io/instance: qbittorrent
-  template:
-    metadata:
-      labels: 
-        app.kubernetes.io/controller: qbit-manage
-        app.kubernetes.io/instance: qbittorrent
-        app.kubernetes.io/name: qbittorrent
-    spec: 
-      enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
-      hostIPC: false
-      hostNetwork: false
-      hostPID: false
-      dnsPolicy: ClusterFirst
-      initContainers: 
-        - command:
-          - /bin/sh
-          - -ec
-          - |
-            cp /config/config.yml /app/config/config.yml
-          image: busybox:1.37.0
-          imagePullPolicy: IfNotPresent
-          name: init-copy-config
-          resources:
-            requests:
-              cpu: 10m
-              memory: 128Mi
-          volumeMounts:
-          - mountPath: /config/config.yml
-            mountPropagation: None
-            name: qbit-manage-config
-            readOnly: true
-            subPath: config.yml
-          - mountPath: /app/config
-            name: qbit-manage-config-data
-      containers: 
-        - env:
-          - name: TZ
-            value: US/Central
-          - name: PGID
-            value: "1000"
-          - name: PUID
-            value: "1000"
-          - name: APPRISE_STORAGE_MODE
-            value: memory
-          - name: APPRISE_STATEFUL_MODE
-            value: disabled
-          - name: APPRISE_WORKER_COUNT
-            value: "1"
-          - name: APPRISE_STATELESS_URLS
-            valueFrom:
-              secretKeyRef:
-                key: ntfy-url
-                name: qbittorrent-qbit-manage-config
-          image: caronc/apprise:1.2.6
-          imagePullPolicy: IfNotPresent
-          name: apprise-api
-          resources:
-            requests:
-              cpu: 10m
-              memory: 128Mi
-        - env:
-          - name: TZ
-            value: US/Central
-          - name: QBT_SCHEDULE
-            value: 0 * * * *
-          - name: QBT_STARTUP_DELAY
-            value: "360"
-          - name: QBT_CONFIG_DIR
-            value: /app/config/
-          - name: QBT_LOGFILE
-            value: /app/var/activity.log
-          - name: QBT_LOG_LEVEL
-            value: INFO
-          image: ghcr.io/stuffanthings/qbit_manage:v4.6.4
-          imagePullPolicy: IfNotPresent
-          name: qbit-manage
-          resources:
-            requests:
-              cpu: 10m
-              memory: 64Mi
-          volumeMounts:
-          - mountPath: /qbittorrent
-            name: config
-          - mountPath: /config/config.yml
-            mountPropagation: None
-            name: qbit-manage-config
-            readOnly: true
-            subPath: config.yml
-          - mountPath: /app/config
-            name: qbit-manage-config-data
-          - mountPath: /app/var
-            name: qbit-manage-config-var
-          - mountPath: /mnt/store
-            name: storage
-      volumes: 
-        - name: config
-          persistentVolumeClaim:
-            claimName: qbittorrent-config
-        - configMap:
-            name: qbit-manage-config
-          name: qbit-manage-config
-        - name: qbit-manage-config-data
-          persistentVolumeClaim:
-            claimName: qbittorrent-qbit-manage-config-data
-        - emptyDir: {}
-          name: qbit-manage-config-var
-        - name: storage
-          persistentVolumeClaim:
-            claimName: qbittorrent-nfs-storage
---
-# Source: qbittorrent/charts/qbittorrent/templates/common.yaml
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: qbittorrent-qui
-  labels:
-    app.kubernetes.io/controller: qui
-    app.kubernetes.io/instance: qbittorrent
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: qbittorrent
-    helm.sh/chart: qbittorrent-4.4.0
-  namespace: qbittorrent
-spec:
-  revisionHistoryLimit: 3
-  replicas: 1
-  strategy:
-    type: Recreate
-  selector:
-    matchLabels:
-      app.kubernetes.io/controller: qui
-      app.kubernetes.io/name: qbittorrent
-      app.kubernetes.io/instance: qbittorrent
-  template:
-    metadata:
-      labels: 
-        app.kubernetes.io/controller: qui
-        app.kubernetes.io/instance: qbittorrent
-        app.kubernetes.io/name: qbittorrent
-    spec: 
-      enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
-      hostIPC: false
-      hostNetwork: false
-      hostPID: false
-      dnsPolicy: ClusterFirst
-      containers: 
-        - env:
-          - name: QUI__METRICS_ENABLED
-            value: "true"
-          - name: QUI__METRICS_HOST
-            value: 0.0.0.0
-          - name: QUI__METRICS_PORT
-            value: "9074"
-          - name: QUI__OIDC_ENABLED
-            value: "true"
-          - name: QUI__OIDC_ISSUER
-            value: https://auth.alexlebens.dev/application/o/qui/
-          - name: QUI__OIDC_CLIENT_ID
-            valueFrom:
-              secretKeyRef:
-                key: client
-                name: qui-oidc-secret
-          - name: QUI__OIDC_CLIENT_SECRET
-            valueFrom:
-              secretKeyRef:
-                key: secret
-                name: qui-oidc-secret
-          - name: QUI__OIDC_REDIRECT_URL
-            value: https://qui.alexlebens.net/api/auth/oidc/callback
-          - name: QUI__OIDC_DISABLE_BUILT_IN_LOGIN
-            value: "false"
-          image: ghcr.io/autobrr/qui:v1.7.0
-          imagePullPolicy: IfNotPresent
-          name: qui
-          resources:
-            requests:
-              cpu: 10m
-              memory: 128Mi
-          volumeMounts:
-          - mountPath: /config
-            name: qui-config-data
-      volumes: 
-        - name: qui-config-data
-          persistentVolumeClaim:
-            claimName: qbittorrent-qui-config-data
---
 # Source: qbittorrent/templates/external-secret.yaml
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
--- a/clusters/cl01tl/manifests/rook-ceph/rook-ceph.yaml
+++ b/clusters/cl01tl/manifests/rook-ceph/rook-ceph.yaml
@@ -122,11 +122,11 @@ metadata:
    storage-backend: ceph
    app.kubernetes.io/name: rook-ceph
    app.kubernetes.io/instance: rook-ceph
-    app.kubernetes.io/version: v1.18.7
+    app.kubernetes.io/version: v1.18.8
    app.kubernetes.io/part-of: rook-ceph-operator
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/created-by: helm
-    helm.sh/chart: "rook-ceph-v1.18.7"
+    helm.sh/chart: "rook-ceph-v1.18.8"
 # imagePullSecrets:
 #   - name: my-registry-secret
 ---
@@ -142,11 +142,11 @@ metadata:
    storage-backend: ceph
    app.kubernetes.io/name: rook-ceph
    app.kubernetes.io/instance: rook-ceph
-    app.kubernetes.io/version: v1.18.7
+    app.kubernetes.io/version: v1.18.8
    app.kubernetes.io/part-of: rook-ceph-operator
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/created-by: helm
-    helm.sh/chart: "rook-ceph-v1.18.7"
+    helm.sh/chart: "rook-ceph-v1.18.8"
 # imagePullSecrets:
 #   - name: my-registry-secret
 ---
@@ -162,11 +162,11 @@ metadata:
    storage-backend: ceph
    app.kubernetes.io/name: rook-ceph
    app.kubernetes.io/instance: rook-ceph
-    app.kubernetes.io/version: v1.18.7
+    app.kubernetes.io/version: v1.18.8
    app.kubernetes.io/part-of: rook-ceph-operator
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/created-by: helm
-    helm.sh/chart: "rook-ceph-v1.18.7"
+    helm.sh/chart: "rook-ceph-v1.18.8"
 # imagePullSecrets:
 #   - name: my-registry-secret
 ---
@@ -182,11 +182,11 @@ metadata:
    storage-backend: ceph
    app.kubernetes.io/name: rook-ceph
    app.kubernetes.io/instance: rook-ceph
-    app.kubernetes.io/version: v1.18.7
+    app.kubernetes.io/version: v1.18.8
    app.kubernetes.io/part-of: rook-ceph-operator
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/created-by: helm
-    helm.sh/chart: "rook-ceph-v1.18.7"
+    helm.sh/chart: "rook-ceph-v1.18.8"
 # imagePullSecrets:
 #   - name: my-registry-secret
 ---
@@ -202,11 +202,11 @@ metadata:
    storage-backend: ceph
    app.kubernetes.io/name: rook-ceph
    app.kubernetes.io/instance: rook-ceph
-    app.kubernetes.io/version: v1.18.7
+    app.kubernetes.io/version: v1.18.8
    app.kubernetes.io/part-of: rook-ceph-operator
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/created-by: helm
-    helm.sh/chart: "rook-ceph-v1.18.7"
+    helm.sh/chart: "rook-ceph-v1.18.8"
 # imagePullSecrets:
 #   - name: my-registry-secret
 ---
@@ -222,11 +222,11 @@ metadata:
    storage-backend: ceph
    app.kubernetes.io/name: rook-ceph
    app.kubernetes.io/instance: rook-ceph
-    app.kubernetes.io/version: v1.18.7
+    app.kubernetes.io/version: v1.18.8
    app.kubernetes.io/part-of: rook-ceph-operator
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/created-by: helm
-    helm.sh/chart: "rook-ceph-v1.18.7"
+    helm.sh/chart: "rook-ceph-v1.18.8"
 # imagePullSecrets:
 #   - name: my-registry-secret
 ---
@@ -242,11 +242,11 @@ metadata:
    storage-backend: ceph
    app.kubernetes.io/name: rook-ceph
    app.kubernetes.io/instance: rook-ceph
-    app.kubernetes.io/version: v1.18.7
+    app.kubernetes.io/version: v1.18.8
    app.kubernetes.io/part-of: rook-ceph-operator
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/created-by: helm
-    helm.sh/chart: "rook-ceph-v1.18.7"
+    helm.sh/chart: "rook-ceph-v1.18.8"
 # imagePullSecrets:
 #   - name: my-registry-secret
 ---
@@ -262,11 +262,11 @@ metadata:
    storage-backend: ceph
    app.kubernetes.io/name: rook-ceph
    app.kubernetes.io/instance: rook-ceph
-    app.kubernetes.io/version: v1.18.7
+    app.kubernetes.io/version: v1.18.8
    app.kubernetes.io/part-of: rook-ceph-operator
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/created-by: helm
-    helm.sh/chart: "rook-ceph-v1.18.7"
+    helm.sh/chart: "rook-ceph-v1.18.8"
 # imagePullSecrets:
 #   - name: my-registry-secret
 ---
@@ -282,11 +282,11 @@ metadata:
    storage-backend: ceph
    app.kubernetes.io/name: rook-ceph
    app.kubernetes.io/instance: rook-ceph
-    app.kubernetes.io/version: v1.18.7
+    app.kubernetes.io/version: v1.18.8
    app.kubernetes.io/part-of: rook-ceph-operator
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/created-by: helm
-    helm.sh/chart: "rook-ceph-v1.18.7"
+    helm.sh/chart: "rook-ceph-v1.18.8"
 # imagePullSecrets:
 #   - name: my-registry-secret
 ---
@@ -302,11 +302,11 @@ metadata:
    storage-backend: ceph
    app.kubernetes.io/name: rook-ceph
    app.kubernetes.io/instance: rook-ceph
-    app.kubernetes.io/version: v1.18.7
+    app.kubernetes.io/version: v1.18.8
    app.kubernetes.io/part-of: rook-ceph-operator
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/created-by: helm
-    helm.sh/chart: "rook-ceph-v1.18.7"
+    helm.sh/chart: "rook-ceph-v1.18.8"
 # imagePullSecrets:
 #   - name: my-registry-secret
 ---
@@ -322,11 +322,11 @@ metadata:
    storage-backend: ceph
    app.kubernetes.io/name: rook-ceph
    app.kubernetes.io/instance: rook-ceph
-    app.kubernetes.io/version: v1.18.7
+    app.kubernetes.io/version: v1.18.8
    app.kubernetes.io/part-of: rook-ceph-operator
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/created-by: helm
-    helm.sh/chart: "rook-ceph-v1.18.7"
+    helm.sh/chart: "rook-ceph-v1.18.8"
 # imagePullSecrets:
 #   - name: my-registry-secret
 ---
@@ -357,11 +357,11 @@ metadata:
    storage-backend: ceph
    app.kubernetes.io/name: rook-ceph
    app.kubernetes.io/instance: rook-ceph
-    app.kubernetes.io/version: v1.18.7
+    app.kubernetes.io/version: v1.18.8
    app.kubernetes.io/part-of: rook-ceph-operator
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/created-by: helm
-    helm.sh/chart: "rook-ceph-v1.18.7"
+    helm.sh/chart: "rook-ceph-v1.18.8"
 data:
  ROOK_LOG_LEVEL: "INFO"
  ROOK_CEPH_COMMANDS_TIMEOUT_SECONDS: "15"
@@ -46446,11 +46446,11 @@ metadata:
    storage-backend: ceph
    app.kubernetes.io/name: rook-ceph
    app.kubernetes.io/instance: rook-ceph
-    app.kubernetes.io/version: v1.18.7
+    app.kubernetes.io/version: v1.18.8
    app.kubernetes.io/part-of: rook-ceph-operator
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/created-by: helm
-    helm.sh/chart: "rook-ceph-v1.18.7"
+    helm.sh/chart: "rook-ceph-v1.18.8"
 rules:
  # Most resources are represented by a string representation of their name, such as "pods", just as it appears in the URL for the relevant API endpoint.
  # However, some Kubernetes APIs involve a "subresource", such as the logs for a pod. [...]
@@ -46492,11 +46492,11 @@ metadata:
    storage-backend: ceph
    app.kubernetes.io/name: rook-ceph
    app.kubernetes.io/instance: rook-ceph
-    app.kubernetes.io/version: v1.18.7
+    app.kubernetes.io/version: v1.18.8
    app.kubernetes.io/part-of: rook-ceph-operator
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/created-by: helm
-    helm.sh/chart: "rook-ceph-v1.18.7"
+    helm.sh/chart: "rook-ceph-v1.18.8"
 rules:
  - apiGroups:
      - ""
@@ -46532,11 +46532,11 @@ metadata:
    storage-backend: ceph
    app.kubernetes.io/name: rook-ceph
    app.kubernetes.io/instance: rook-ceph
-    app.kubernetes.io/version: v1.18.7
+    app.kubernetes.io/version: v1.18.8
    app.kubernetes.io/part-of: rook-ceph-operator
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/created-by: helm
-    helm.sh/chart: "rook-ceph-v1.18.7"
+    helm.sh/chart: "rook-ceph-v1.18.8"
 rules:
  - apiGroups:
      - ""
@@ -46742,11 +46742,11 @@ metadata:
    storage-backend: ceph
    app.kubernetes.io/name: rook-ceph
    app.kubernetes.io/instance: rook-ceph
-    app.kubernetes.io/version: v1.18.7
+    app.kubernetes.io/version: v1.18.8
    app.kubernetes.io/part-of: rook-ceph-operator
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/created-by: helm
-    helm.sh/chart: "rook-ceph-v1.18.7"
+    helm.sh/chart: "rook-ceph-v1.18.8"
 rules:
  - apiGroups:
      - ""
@@ -46789,11 +46789,11 @@ metadata:
    storage-backend: ceph
    app.kubernetes.io/name: rook-ceph
    app.kubernetes.io/instance: rook-ceph
-    app.kubernetes.io/version: v1.18.7
+    app.kubernetes.io/version: v1.18.8
    app.kubernetes.io/part-of: rook-ceph-operator
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/created-by: helm
-    helm.sh/chart: "rook-ceph-v1.18.7"
+    helm.sh/chart: "rook-ceph-v1.18.8"
 rules:
  - apiGroups:
      - ""
@@ -46817,11 +46817,11 @@ metadata:
    storage-backend: ceph
    app.kubernetes.io/name: rook-ceph
    app.kubernetes.io/instance: rook-ceph
-    app.kubernetes.io/version: v1.18.7
+    app.kubernetes.io/version: v1.18.8
    app.kubernetes.io/part-of: rook-ceph-operator
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/created-by: helm
-    helm.sh/chart: "rook-ceph-v1.18.7"
+    helm.sh/chart: "rook-ceph-v1.18.8"
 rules:
  - apiGroups: [""]
    resources: ["secrets", "configmaps"]
@@ -46884,11 +46884,11 @@ metadata:
    storage-backend: ceph
    app.kubernetes.io/name: rook-ceph
    app.kubernetes.io/instance: rook-ceph
-    app.kubernetes.io/version: v1.18.7
+    app.kubernetes.io/version: v1.18.8
    app.kubernetes.io/part-of: rook-ceph-operator
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/created-by: helm
-    helm.sh/chart: "rook-ceph-v1.18.7"
+    helm.sh/chart: "rook-ceph-v1.18.8"
 rules:
 - apiGroups:
  - ""
@@ -46908,11 +46908,11 @@ metadata:
    storage-backend: ceph
    app.kubernetes.io/name: rook-ceph
    app.kubernetes.io/instance: rook-ceph
-    app.kubernetes.io/version: v1.18.7
+    app.kubernetes.io/version: v1.18.8
    app.kubernetes.io/part-of: rook-ceph-operator
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/created-by: helm
-    helm.sh/chart: "rook-ceph-v1.18.7"
+    helm.sh/chart: "rook-ceph-v1.18.8"
 rules:
  - apiGroups: [""]
    resources: ["nodes"]
@@ -46940,11 +46940,11 @@ metadata:
    storage-backend: ceph
    app.kubernetes.io/name: rook-ceph
    app.kubernetes.io/instance: rook-ceph
-    app.kubernetes.io/version: v1.18.7
+    app.kubernetes.io/version: v1.18.8
    app.kubernetes.io/part-of: rook-ceph-operator
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/created-by: helm
-    helm.sh/chart: "rook-ceph-v1.18.7"
+    helm.sh/chart: "rook-ceph-v1.18.8"
 rules:
  - apiGroups: [""]
    resources: ["secrets"]
@@ -47020,11 +47020,11 @@ metadata:
    storage-backend: ceph
    app.kubernetes.io/name: rook-ceph
    app.kubernetes.io/instance: rook-ceph
-    app.kubernetes.io/version: v1.18.7
+    app.kubernetes.io/version: v1.18.8
    app.kubernetes.io/part-of: rook-ceph-operator
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/created-by: helm
-    helm.sh/chart: "rook-ceph-v1.18.7"
+    helm.sh/chart: "rook-ceph-v1.18.8"
 rules:
  - apiGroups: [""]
    resources: ["secrets"]
@@ -47061,11 +47061,11 @@ metadata:
    storage-backend: ceph
    app.kubernetes.io/name: rook-ceph
    app.kubernetes.io/instance: rook-ceph
-    app.kubernetes.io/version: v1.18.7
+    app.kubernetes.io/version: v1.18.8
    app.kubernetes.io/part-of: rook-ceph-operator
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/created-by: helm
-    helm.sh/chart: "rook-ceph-v1.18.7"
+    helm.sh/chart: "rook-ceph-v1.18.8"
 rules:
  - apiGroups: [""]
    resources: ["secrets"]
@@ -47344,11 +47344,11 @@ metadata:
    storage-backend: ceph
    app.kubernetes.io/name: rook-ceph
    app.kubernetes.io/instance: rook-ceph
-    app.kubernetes.io/version: v1.18.7
+    app.kubernetes.io/version: v1.18.8
    app.kubernetes.io/part-of: rook-ceph-operator
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/created-by: helm
-    helm.sh/chart: "rook-ceph-v1.18.7"
+    helm.sh/chart: "rook-ceph-v1.18.8"
 roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
@@ -47369,11 +47369,11 @@ metadata:
    storage-backend: ceph
    app.kubernetes.io/name: rook-ceph
    app.kubernetes.io/instance: rook-ceph
-    app.kubernetes.io/version: v1.18.7
+    app.kubernetes.io/version: v1.18.8
    app.kubernetes.io/part-of: rook-ceph-operator
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/created-by: helm
-    helm.sh/chart: "rook-ceph-v1.18.7"
+    helm.sh/chart: "rook-ceph-v1.18.8"
 roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
@@ -47393,11 +47393,11 @@ metadata:
    storage-backend: ceph
    app.kubernetes.io/name: rook-ceph
    app.kubernetes.io/instance: rook-ceph
-    app.kubernetes.io/version: v1.18.7
+    app.kubernetes.io/version: v1.18.8
    app.kubernetes.io/part-of: rook-ceph-operator
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/created-by: helm
-    helm.sh/chart: "rook-ceph-v1.18.7"
+    helm.sh/chart: "rook-ceph-v1.18.8"
 roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
@@ -47418,11 +47418,11 @@ metadata:
    storage-backend: ceph
    app.kubernetes.io/name: rook-ceph
    app.kubernetes.io/instance: rook-ceph
-    app.kubernetes.io/version: v1.18.7
+    app.kubernetes.io/version: v1.18.8
    app.kubernetes.io/part-of: rook-ceph-operator
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/created-by: helm
-    helm.sh/chart: "rook-ceph-v1.18.7"
+    helm.sh/chart: "rook-ceph-v1.18.8"
 roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
@@ -47443,11 +47443,11 @@ metadata:
    storage-backend: ceph
    app.kubernetes.io/name: rook-ceph
    app.kubernetes.io/instance: rook-ceph
-    app.kubernetes.io/version: v1.18.7
+    app.kubernetes.io/version: v1.18.8
    app.kubernetes.io/part-of: rook-ceph-operator
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/created-by: helm
-    helm.sh/chart: "rook-ceph-v1.18.7"
+    helm.sh/chart: "rook-ceph-v1.18.8"
 roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
@@ -47467,11 +47467,11 @@ metadata:
    storage-backend: ceph
    app.kubernetes.io/name: rook-ceph
    app.kubernetes.io/instance: rook-ceph
-    app.kubernetes.io/version: v1.18.7
+    app.kubernetes.io/version: v1.18.8
    app.kubernetes.io/part-of: rook-ceph-operator
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/created-by: helm
-    helm.sh/chart: "rook-ceph-v1.18.7"
+    helm.sh/chart: "rook-ceph-v1.18.8"
 subjects:
  - kind: ServiceAccount
    name: rook-csi-rbd-plugin-sa
@@ -47491,11 +47491,11 @@ metadata:
    storage-backend: ceph
    app.kubernetes.io/name: rook-ceph
    app.kubernetes.io/instance: rook-ceph
-    app.kubernetes.io/version: v1.18.7
+    app.kubernetes.io/version: v1.18.8
    app.kubernetes.io/part-of: rook-ceph-operator
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/created-by: helm
-    helm.sh/chart: "rook-ceph-v1.18.7"
+    helm.sh/chart: "rook-ceph-v1.18.8"
 subjects:
  - kind: ServiceAccount
    name: rook-csi-cephfs-provisioner-sa
@@ -47517,11 +47517,11 @@ metadata:
    storage-backend: ceph
    app.kubernetes.io/name: rook-ceph
    app.kubernetes.io/instance: rook-ceph
-    app.kubernetes.io/version: v1.18.7
+    app.kubernetes.io/version: v1.18.8
    app.kubernetes.io/part-of: rook-ceph-operator
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/created-by: helm
-    helm.sh/chart: "rook-ceph-v1.18.7"
+    helm.sh/chart: "rook-ceph-v1.18.8"
 subjects:
  - kind: ServiceAccount
    name: rook-csi-cephfs-plugin-sa
@@ -47541,11 +47541,11 @@ metadata:
    storage-backend: ceph
    app.kubernetes.io/name: rook-ceph
    app.kubernetes.io/instance: rook-ceph
-    app.kubernetes.io/version: v1.18.7
+    app.kubernetes.io/version: v1.18.8
    app.kubernetes.io/part-of: rook-ceph-operator
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/created-by: helm
-    helm.sh/chart: "rook-ceph-v1.18.7"
+    helm.sh/chart: "rook-ceph-v1.18.8"
 subjects:
  - kind: ServiceAccount
    name: rook-csi-rbd-provisioner-sa
@@ -47823,11 +47823,11 @@ metadata:
    storage-backend: ceph
    app.kubernetes.io/name: rook-ceph
    app.kubernetes.io/instance: rook-ceph
-    app.kubernetes.io/version: v1.18.7
+    app.kubernetes.io/version: v1.18.8
    app.kubernetes.io/part-of: rook-ceph-operator
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/created-by: helm
-    helm.sh/chart: "rook-ceph-v1.18.7"
+    helm.sh/chart: "rook-ceph-v1.18.8"
 rules:
  # this is needed for rook's "key-management" CLI to fetch the vault token from the secret when
  # validating the connection details and for key rotation operations.
@@ -47853,11 +47853,11 @@ metadata:
    storage-backend: ceph
    app.kubernetes.io/name: rook-ceph
    app.kubernetes.io/instance: rook-ceph
-    app.kubernetes.io/version: v1.18.7
+    app.kubernetes.io/version: v1.18.8
    app.kubernetes.io/part-of: rook-ceph-operator
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/created-by: helm
-    helm.sh/chart: "rook-ceph-v1.18.7"
+    helm.sh/chart: "rook-ceph-v1.18.8"
 rules:
  - apiGroups:
      - ""
@@ -47937,11 +47937,11 @@ metadata:
    storage-backend: ceph
    app.kubernetes.io/name: rook-ceph
    app.kubernetes.io/instance: rook-ceph
-    app.kubernetes.io/version: v1.18.7
+    app.kubernetes.io/version: v1.18.8
    app.kubernetes.io/part-of: rook-ceph-operator
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/created-by: helm
-    helm.sh/chart: "rook-ceph-v1.18.7"
+    helm.sh/chart: "rook-ceph-v1.18.8"
 rules:
  - apiGroups:
      - ""
@@ -47968,11 +47968,11 @@ metadata:
    storage-backend: ceph
    app.kubernetes.io/name: rook-ceph
    app.kubernetes.io/instance: rook-ceph
-    app.kubernetes.io/version: v1.18.7
+    app.kubernetes.io/version: v1.18.8
    app.kubernetes.io/part-of: rook-ceph-operator
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/created-by: helm
-    helm.sh/chart: "rook-ceph-v1.18.7"
+    helm.sh/chart: "rook-ceph-v1.18.8"
 rules:
  - apiGroups: [""]
    resources: ["configmaps"]
@@ -47998,11 +47998,11 @@ metadata:
    storage-backend: ceph
    app.kubernetes.io/name: rook-ceph
    app.kubernetes.io/instance: rook-ceph
-    app.kubernetes.io/version: v1.18.7
+    app.kubernetes.io/version: v1.18.8
    app.kubernetes.io/part-of: rook-ceph-operator
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/created-by: helm
-    helm.sh/chart: "rook-ceph-v1.18.7"
+    helm.sh/chart: "rook-ceph-v1.18.8"
 rules:
  - apiGroups:
      - "monitoring.coreos.com"
@@ -48028,11 +48028,11 @@ metadata:
    storage-backend: ceph
    app.kubernetes.io/name: rook-ceph
    app.kubernetes.io/instance: rook-ceph
-    app.kubernetes.io/version: v1.18.7
+    app.kubernetes.io/version: v1.18.8
    app.kubernetes.io/part-of: rook-ceph-operator
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/created-by: helm
-    helm.sh/chart: "rook-ceph-v1.18.7"
+    helm.sh/chart: "rook-ceph-v1.18.8"
 rules:
  - apiGroups:
      - monitoring.coreos.com
@@ -48056,11 +48056,11 @@ metadata:
    storage-backend: ceph
    app.kubernetes.io/name: rook-ceph
    app.kubernetes.io/instance: rook-ceph
-    app.kubernetes.io/version: v1.18.7
+    app.kubernetes.io/version: v1.18.8
    app.kubernetes.io/part-of: rook-ceph-operator
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/created-by: helm
-    helm.sh/chart: "rook-ceph-v1.18.7"
+    helm.sh/chart: "rook-ceph-v1.18.8"
 rules:
  - apiGroups:
      - ""
@@ -48125,11 +48125,11 @@ metadata:
    storage-backend: ceph
    app.kubernetes.io/name: rook-ceph
    app.kubernetes.io/instance: rook-ceph
-    app.kubernetes.io/version: v1.18.7
+    app.kubernetes.io/version: v1.18.8
    app.kubernetes.io/part-of: rook-ceph-operator
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/created-by: helm
-    helm.sh/chart: "rook-ceph-v1.18.7"
+    helm.sh/chart: "rook-ceph-v1.18.8"
 rules:
  - apiGroups: ["coordination.k8s.io"]
    resources: ["leases"]
@@ -48146,11 +48146,11 @@ metadata:
    storage-backend: ceph
    app.kubernetes.io/name: rook-ceph
    app.kubernetes.io/instance: rook-ceph
-    app.kubernetes.io/version: v1.18.7
+    app.kubernetes.io/version: v1.18.8
    app.kubernetes.io/part-of: rook-ceph-operator
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/created-by: helm
-    helm.sh/chart: "rook-ceph-v1.18.7"
+    helm.sh/chart: "rook-ceph-v1.18.8"
 rules:
  - apiGroups: ["coordination.k8s.io"]
    resources: ["leases"]
@@ -48268,11 +48268,11 @@ metadata:
    storage-backend: ceph
    app.kubernetes.io/name: rook-ceph
    app.kubernetes.io/instance: rook-ceph
-    app.kubernetes.io/version: v1.18.7
+    app.kubernetes.io/version: v1.18.8
    app.kubernetes.io/part-of: rook-ceph-operator
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/created-by: helm
-    helm.sh/chart: "rook-ceph-v1.18.7"
+    helm.sh/chart: "rook-ceph-v1.18.8"
 roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
@@ -48294,11 +48294,11 @@ metadata:
    storage-backend: ceph
    app.kubernetes.io/name: rook-ceph
    app.kubernetes.io/instance: rook-ceph
-    app.kubernetes.io/version: v1.18.7
+    app.kubernetes.io/version: v1.18.8
    app.kubernetes.io/part-of: rook-ceph-operator
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/created-by: helm
-    helm.sh/chart: "rook-ceph-v1.18.7"
+    helm.sh/chart: "rook-ceph-v1.18.8"
 roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: Role
@@ -48320,11 +48320,11 @@ metadata:
    storage-backend: ceph
    app.kubernetes.io/name: rook-ceph
    app.kubernetes.io/instance: rook-ceph
-    app.kubernetes.io/version: v1.18.7
+    app.kubernetes.io/version: v1.18.8
    app.kubernetes.io/part-of: rook-ceph-operator
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/created-by: helm
-    helm.sh/chart: "rook-ceph-v1.18.7"
+    helm.sh/chart: "rook-ceph-v1.18.8"
 roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: Role
@@ -48346,11 +48346,11 @@ metadata:
    storage-backend: ceph
    app.kubernetes.io/name: rook-ceph
    app.kubernetes.io/instance: rook-ceph
-    app.kubernetes.io/version: v1.18.7
+    app.kubernetes.io/version: v1.18.8
    app.kubernetes.io/part-of: rook-ceph-operator
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/created-by: helm
-    helm.sh/chart: "rook-ceph-v1.18.7"
+    helm.sh/chart: "rook-ceph-v1.18.8"
 roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
@@ -48371,11 +48371,11 @@ metadata:
    storage-backend: ceph
    app.kubernetes.io/name: rook-ceph
    app.kubernetes.io/instance: rook-ceph
-    app.kubernetes.io/version: v1.18.7
+    app.kubernetes.io/version: v1.18.8
    app.kubernetes.io/part-of: rook-ceph-operator
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/created-by: helm
-    helm.sh/chart: "rook-ceph-v1.18.7"
+    helm.sh/chart: "rook-ceph-v1.18.8"
 roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: Role
@@ -48397,11 +48397,11 @@ metadata:
    storage-backend: ceph
    app.kubernetes.io/name: rook-ceph
    app.kubernetes.io/instance: rook-ceph
-    app.kubernetes.io/version: v1.18.7
+    app.kubernetes.io/version: v1.18.8
    app.kubernetes.io/part-of: rook-ceph-operator
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/created-by: helm
-    helm.sh/chart: "rook-ceph-v1.18.7"
+    helm.sh/chart: "rook-ceph-v1.18.8"
 roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: Role
@@ -48423,11 +48423,11 @@ metadata:
    storage-backend: ceph
    app.kubernetes.io/name: rook-ceph
    app.kubernetes.io/instance: rook-ceph
-    app.kubernetes.io/version: v1.18.7
+    app.kubernetes.io/version: v1.18.8
    app.kubernetes.io/part-of: rook-ceph-operator
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/created-by: helm
-    helm.sh/chart: "rook-ceph-v1.18.7"
+    helm.sh/chart: "rook-ceph-v1.18.8"
 roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: Role
@@ -48449,11 +48449,11 @@ metadata:
    storage-backend: ceph
    app.kubernetes.io/name: rook-ceph
    app.kubernetes.io/instance: rook-ceph
-    app.kubernetes.io/version: v1.18.7
+    app.kubernetes.io/version: v1.18.8
    app.kubernetes.io/part-of: rook-ceph-operator
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/created-by: helm
-    helm.sh/chart: "rook-ceph-v1.18.7"
+    helm.sh/chart: "rook-ceph-v1.18.8"
 roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: Role
@@ -48475,11 +48475,11 @@ metadata:
    storage-backend: ceph
    app.kubernetes.io/name: rook-ceph
    app.kubernetes.io/instance: rook-ceph
-    app.kubernetes.io/version: v1.18.7
+    app.kubernetes.io/version: v1.18.8
    app.kubernetes.io/part-of: rook-ceph-operator
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/created-by: helm
-    helm.sh/chart: "rook-ceph-v1.18.7"
+    helm.sh/chart: "rook-ceph-v1.18.8"
 roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: Role
@@ -48500,11 +48500,11 @@ metadata:
    storage-backend: ceph
    app.kubernetes.io/name: rook-ceph
    app.kubernetes.io/instance: rook-ceph
-    app.kubernetes.io/version: v1.18.7
+    app.kubernetes.io/version: v1.18.8
    app.kubernetes.io/part-of: rook-ceph-operator
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/created-by: helm
-    helm.sh/chart: "rook-ceph-v1.18.7"
+    helm.sh/chart: "rook-ceph-v1.18.8"
 subjects:
  - kind: ServiceAccount
    name: rook-csi-cephfs-provisioner-sa
@@ -48525,11 +48525,11 @@ metadata:
    storage-backend: ceph
    app.kubernetes.io/name: rook-ceph
    app.kubernetes.io/instance: rook-ceph
-    app.kubernetes.io/version: v1.18.7
+    app.kubernetes.io/version: v1.18.8
    app.kubernetes.io/part-of: rook-ceph-operator
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/created-by: helm
-    helm.sh/chart: "rook-ceph-v1.18.7"
+    helm.sh/chart: "rook-ceph-v1.18.8"
 subjects:
  - kind: ServiceAccount
    name: rook-csi-rbd-provisioner-sa
@@ -48550,7 +48550,7 @@ metadata:
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: cloudflared-rgw
    app.kubernetes.io/version: 2025.10.0
-    helm.sh/chart: cloudflared-rgw-1.23.0
+    helm.sh/chart: cloudflared-rgw-1.23.1
  namespace: rook-ceph
 spec:
  revisionHistoryLimit: 3
@@ -48826,11 +48826,11 @@ metadata:
    storage-backend: ceph
    app.kubernetes.io/name: rook-ceph
    app.kubernetes.io/instance: rook-ceph
-    app.kubernetes.io/version: v1.18.7
+    app.kubernetes.io/version: v1.18.8
    app.kubernetes.io/part-of: rook-ceph-operator
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/created-by: helm
-    helm.sh/chart: "rook-ceph-v1.18.7"
+    helm.sh/chart: "rook-ceph-v1.18.8"
 spec:
  replicas: 1
  selector:
@@ -48842,7 +48842,7 @@ spec:
    metadata:
      labels:
        app: rook-ceph-operator
-        helm.sh/chart: "rook-ceph-v1.18.7"
+        helm.sh/chart: "rook-ceph-v1.18.8"
    spec:
      tolerations:
        - effect: NoExecute
@@ -48851,7 +48851,7 @@ spec:
          tolerationSeconds: 5
      containers:
        - name: rook-ceph-operator
-          image: "docker.io/rook/ceph:v1.18.7"
+          image: "docker.io/rook/ceph:v1.18.8"
          imagePullPolicy: IfNotPresent
          args: ["ceph", "operator"]
          securityContext:
--- a/clusters/cl01tl/manifests/searxng/searxng.yaml
+++ b/clusters/cl01tl/manifests/searxng/searxng.yaml
@@ -41,6 +41,30 @@ spec:
 # Source: searxng/charts/searxng/templates/common.yaml
 apiVersion: v1
 kind: Service
+metadata:
+  name: searxng-browser
+  labels:
+    app.kubernetes.io/instance: searxng
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: searxng
+    app.kubernetes.io/service: searxng-browser
+    helm.sh/chart: searxng-4.4.0
+  namespace: searxng
+spec:
+  type: ClusterIP
+  ports:
+    - port: 80
+      targetPort: 8080
+      protocol: TCP
+      name: mail
+  selector:
+    app.kubernetes.io/controller: browser
+    app.kubernetes.io/instance: searxng
+    app.kubernetes.io/name: searxng
+---
+# Source: searxng/charts/searxng/templates/common.yaml
+apiVersion: v1
+kind: Service
 metadata:
  name: searxng-api
  labels:
@@ -63,28 +87,69 @@ spec:
    app.kubernetes.io/name: searxng
 ---
 # Source: searxng/charts/searxng/templates/common.yaml
-apiVersion: v1
-kind: Service
+apiVersion: apps/v1
+kind: Deployment
 metadata:
  name: searxng-browser
  labels:
+    app.kubernetes.io/controller: browser
    app.kubernetes.io/instance: searxng
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: searxng
-    app.kubernetes.io/service: searxng-browser
    helm.sh/chart: searxng-4.4.0
  namespace: searxng
 spec:
-  type: ClusterIP
-  ports:
-    - port: 80
-      targetPort: 8080
-      protocol: TCP
-      name: mail
+  revisionHistoryLimit: 3
+  replicas: 1
+  strategy:
+    type: Recreate
  selector:
+    matchLabels:
+      app.kubernetes.io/controller: browser
+      app.kubernetes.io/name: searxng
+      app.kubernetes.io/instance: searxng
+  template:
+    metadata:
+      labels: 
        app.kubernetes.io/controller: browser
        app.kubernetes.io/instance: searxng
        app.kubernetes.io/name: searxng
+    spec: 
+      enableServiceLinks: false
+      serviceAccountName: default
+      automountServiceAccountToken: true
+      hostIPC: false
+      hostNetwork: false
+      hostPID: false
+      dnsPolicy: ClusterFirst
+      containers: 
+        - env:
+          - name: SEARXNG_BASE_URL
+            value: https://searxng.alexlebens.net/
+          - name: SEARXNG_QUERY_URL
+            value: https://searxng.alexlebens.net/search?q=<query>
+          - name: SEARXNG_HOSTNAME
+            value: searxng.alexlebens.net
+          - name: SEARXNG_REDIS_URL
+            value: redis://redis-replication-searxng-master.searxng:6379/0
+          - name: UWSGI_WORKERS
+            value: "4"
+          - name: UWSGI_THREADS
+            value: "4"
+          image: searxng/searxng:latest@sha256:09dfc123bd7c118ed086471b42d17ed57964827beffeb8d7f012dae3d2608545
+          imagePullPolicy: IfNotPresent
+          name: main
+          resources:
+            requests:
+              cpu: 10m
+              memory: 256Mi
+          volumeMounts:
+          - mountPath: /etc/searxng
+            name: browser-data
+      volumes: 
+        - name: browser-data
+          persistentVolumeClaim:
+            claimName: searxng-browser-data
 ---
 # Source: searxng/charts/searxng/templates/common.yaml
 apiVersion: apps/v1
@@ -142,7 +207,7 @@ spec:
            value: "3"
          - name: RAG_WEB_SEARCH_CONCURRENT_REQUESTS
            value: "10"
-          image: searxng/searxng:latest@sha256:277cb4b82fbdd69d88812089a5755860d379de907f09fb511443ff03d35191af
+          image: searxng/searxng:latest@sha256:09dfc123bd7c118ed086471b42d17ed57964827beffeb8d7f012dae3d2608545
          imagePullPolicy: IfNotPresent
          name: main
          resources:
@@ -170,71 +235,6 @@ spec:
          secret:
            secretName: searxng-api-config-secret
 ---
-# Source: searxng/charts/searxng/templates/common.yaml
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: searxng-browser
-  labels:
-    app.kubernetes.io/controller: browser
-    app.kubernetes.io/instance: searxng
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: searxng
-    helm.sh/chart: searxng-4.4.0
-  namespace: searxng
-spec:
-  revisionHistoryLimit: 3
-  replicas: 1
-  strategy:
-    type: Recreate
-  selector:
-    matchLabels:
-      app.kubernetes.io/controller: browser
-      app.kubernetes.io/name: searxng
-      app.kubernetes.io/instance: searxng
-  template:
-    metadata:
-      labels: 
-        app.kubernetes.io/controller: browser
-        app.kubernetes.io/instance: searxng
-        app.kubernetes.io/name: searxng
-    spec: 
-      enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
-      hostIPC: false
-      hostNetwork: false
-      hostPID: false
-      dnsPolicy: ClusterFirst
-      containers: 
-        - env:
-          - name: SEARXNG_BASE_URL
-            value: https://searxng.alexlebens.net/
-          - name: SEARXNG_QUERY_URL
-            value: https://searxng.alexlebens.net/search?q=<query>
-          - name: SEARXNG_HOSTNAME
-            value: searxng.alexlebens.net
-          - name: SEARXNG_REDIS_URL
-            value: redis://redis-replication-searxng-master.searxng:6379/0
-          - name: UWSGI_WORKERS
-            value: "4"
-          - name: UWSGI_THREADS
-            value: "4"
-          image: searxng/searxng:latest@sha256:277cb4b82fbdd69d88812089a5755860d379de907f09fb511443ff03d35191af
-          imagePullPolicy: IfNotPresent
-          name: main
-          resources:
-            requests:
-              cpu: 10m
-              memory: 256Mi
-          volumeMounts:
-          - mountPath: /etc/searxng
-            name: browser-data
-      volumes: 
-        - name: browser-data
-          persistentVolumeClaim:
-            claimName: searxng-browser-data
---
 # Source: searxng/templates/external-secret.yaml
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
--- a/clusters/cl01tl/manifests/site-documentation/site-documentation.yaml
+++ b/clusters/cl01tl/manifests/site-documentation/site-documentation.yaml
@@ -34,7 +34,7 @@ metadata:
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: cloudflared-site
    app.kubernetes.io/version: 2025.10.0
-    helm.sh/chart: cloudflared-site-1.23.0
+    helm.sh/chart: cloudflared-site-1.23.1
  namespace: site-documentation
 spec:
  revisionHistoryLimit: 3
@@ -121,7 +121,7 @@ spec:
      hostPID: false
      dnsPolicy: ClusterFirst
      containers: 
-        - image: harbor.alexlebens.net/images/site-documentation:0.0.3
+        - image: harbor.alexlebens.net/images/site-documentation:0.0.4
          imagePullPolicy: IfNotPresent
          name: main
          resources:
--- a/clusters/cl01tl/manifests/site-profile/site-profile.yaml
+++ b/clusters/cl01tl/manifests/site-profile/site-profile.yaml
@@ -34,7 +34,7 @@ metadata:
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: cloudflared-site
    app.kubernetes.io/version: 2025.10.0
-    helm.sh/chart: cloudflared-site-1.23.0
+    helm.sh/chart: cloudflared-site-1.23.1
  namespace: site-profile
 spec:
  revisionHistoryLimit: 3
@@ -121,7 +121,7 @@ spec:
      hostPID: false
      dnsPolicy: ClusterFirst
      containers: 
-        - image: harbor.alexlebens.net/images/site-profile:2.1.0
+        - image: harbor.alexlebens.net/images/site-profile:2.1.1
          imagePullPolicy: IfNotPresent
          name: main
          resources:
--- a/clusters/cl01tl/manifests/talos/talos.yaml
+++ b/clusters/cl01tl/manifests/talos/talos.yaml
@@ -186,78 +186,6 @@ spec:
 ---
 apiVersion: batch/v1
 kind: CronJob
-metadata:
-  name: etcd-defrag-defrag-3
-  labels:
-    app.kubernetes.io/controller: defrag-3
-    app.kubernetes.io/instance: talos
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: talos
-    helm.sh/chart: etcd-defrag-4.4.0
-  namespace: talos
-spec:
-  suspend: false
-  concurrencyPolicy: Forbid
-  startingDeadlineSeconds: 90
-  timeZone: US/Central
-  schedule: "20 0 * * 0"
-  successfulJobsHistoryLimit: 3
-  failedJobsHistoryLimit: 3
-  jobTemplate:
-    spec:
-      parallelism: 1
-      backoffLimit: 3
-      template:
-        metadata:
-          labels: 
-            app.kubernetes.io/controller: defrag-3
-            app.kubernetes.io/instance: talos
-            app.kubernetes.io/name: talos
-        spec: 
-          enableServiceLinks: false
-          serviceAccountName: default
-          automountServiceAccountToken: true
-          hostIPC: false
-          hostNetwork: false
-          hostPID: false
-          dnsPolicy: ClusterFirst
-          restartPolicy: Never
-          nodeSelector: 
-            node-role.kubernetes.io/control-plane: ""
-          tolerations: 
-            - effect: NoSchedule
-              key: node-role.kubernetes.io/control-plane
-              operator: Exists
-          containers: 
-            - args:
-              - etcd
-              - defrag
-              - -n
-              - 10.232.1.13
-              env:
-              - name: TALOSCONFIG
-                value: /tmp/.talos/config
-              image: ghcr.io/siderolabs/talosctl:v1.11.5
-              imagePullPolicy: IfNotPresent
-              name: main
-              resources:
-                requests:
-                  cpu: 100m
-                  memory: 128Mi
-              volumeMounts:
-              - mountPath: /tmp/.talos/config
-                mountPropagation: None
-                name: talos-config-3
-                readOnly: true
-                subPath: config
-          volumes: 
-            - name: talos-config-3
-              secret:
-                secretName: talos-etcd-defrag-secret
---
-# Source: talos/charts/etcd-defrag/templates/common.yaml
-apiVersion: batch/v1
-kind: CronJob
 metadata:
  name: etcd-defrag-defrag-1
  labels:
@@ -399,6 +327,78 @@ spec:
              secret:
                secretName: talos-etcd-defrag-secret
 ---
+# Source: talos/charts/etcd-defrag/templates/common.yaml
+apiVersion: batch/v1
+kind: CronJob
+metadata:
+  name: etcd-defrag-defrag-3
+  labels:
+    app.kubernetes.io/controller: defrag-3
+    app.kubernetes.io/instance: talos
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: talos
+    helm.sh/chart: etcd-defrag-4.4.0
+  namespace: talos
+spec:
+  suspend: false
+  concurrencyPolicy: Forbid
+  startingDeadlineSeconds: 90
+  timeZone: US/Central
+  schedule: "20 0 * * 0"
+  successfulJobsHistoryLimit: 3
+  failedJobsHistoryLimit: 3
+  jobTemplate:
+    spec:
+      parallelism: 1
+      backoffLimit: 3
+      template:
+        metadata:
+          labels: 
+            app.kubernetes.io/controller: defrag-3
+            app.kubernetes.io/instance: talos
+            app.kubernetes.io/name: talos
+        spec: 
+          enableServiceLinks: false
+          serviceAccountName: default
+          automountServiceAccountToken: true
+          hostIPC: false
+          hostNetwork: false
+          hostPID: false
+          dnsPolicy: ClusterFirst
+          restartPolicy: Never
+          nodeSelector: 
+            node-role.kubernetes.io/control-plane: ""
+          tolerations: 
+            - effect: NoSchedule
+              key: node-role.kubernetes.io/control-plane
+              operator: Exists
+          containers: 
+            - args:
+              - etcd
+              - defrag
+              - -n
+              - 10.232.1.13
+              env:
+              - name: TALOSCONFIG
+                value: /tmp/.talos/config
+              image: ghcr.io/siderolabs/talosctl:v1.11.5
+              imagePullPolicy: IfNotPresent
+              name: main
+              resources:
+                requests:
+                  cpu: 100m
+                  memory: 128Mi
+              volumeMounts:
+              - mountPath: /tmp/.talos/config
+                mountPropagation: None
+                name: talos-config-3
+                readOnly: true
+                subPath: config
+          volumes: 
+            - name: talos-config-3
+              secret:
+                secretName: talos-etcd-defrag-secret
+---
 # Source: talos/templates/external-secret.yaml
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
--- a/clusters/cl01tl/manifests/tdarr/tdarr.yaml
+++ b/clusters/cl01tl/manifests/tdarr/tdarr.yaml
@@ -29,7 +29,7 @@ spec:
 kind: PersistentVolumeClaim
 apiVersion: v1
 metadata:
-  name: tdarr-server
+  name: tdarr-config
  labels:
    app.kubernetes.io/instance: tdarr
    app.kubernetes.io/managed-by: Helm
@@ -50,7 +50,7 @@ spec:
 kind: PersistentVolumeClaim
 apiVersion: v1
 metadata:
-  name: tdarr-config
+  name: tdarr-server
  labels:
    app.kubernetes.io/instance: tdarr
    app.kubernetes.io/managed-by: Helm
--- a/clusters/cl01tl/manifests/vaultwarden/vaultwarden.yaml
+++ b/clusters/cl01tl/manifests/vaultwarden/vaultwarden.yaml
@@ -56,7 +56,7 @@ metadata:
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: cloudflared
    app.kubernetes.io/version: 2025.10.0
-    helm.sh/chart: cloudflared-1.23.0
+    helm.sh/chart: cloudflared-1.23.1
  namespace: vaultwarden
 spec:
  revisionHistoryLimit: 3
--- a/clusters/cl01tl/manifests/whodb/whodb.yaml
+++ b/clusters/cl01tl/manifests/whodb/whodb.yaml
@@ -66,7 +66,7 @@ spec:
            value: ollama-server-2.ollama
          - name: WHODB_OLLAMA_PORT
            value: "11434"
-          image: clidey/whodb:0.80.0
+          image: clidey/whodb:0.81.0
          imagePullPolicy: IfNotPresent
          name: main
          resources:
--- a/clusters/cl01tl/manifests/yamtrack/yamtrack.yaml
+++ b/clusters/cl01tl/manifests/yamtrack/yamtrack.yaml
@@ -107,7 +107,7 @@ spec:
              secretKeyRef:
                key: port
                name: yamtrack-postgresql-17-cluster-app
-          image: ghcr.io/fuzzygrim/yamtrack:0.24.7
+          image: ghcr.io/fuzzygrim/yamtrack:0.24.8
          imagePullPolicy: IfNotPresent
          name: main
          resources: