clusters/cl01tl/manifests/headlamp/ClusterRoleBinding-headlamp-admin.yaml

@@ -3,10 +3,10 @@ kind: ClusterRoleBinding
 metadata:
   name: headlamp-admin
   labels:
-    helm.sh/chart: headlamp-0.38.0
+    helm.sh/chart: headlamp-0.39.0
     app.kubernetes.io/name: headlamp
     app.kubernetes.io/instance: headlamp
-    app.kubernetes.io/version: "0.38.0"
+    app.kubernetes.io/version: "0.39.0"
     app.kubernetes.io/managed-by: Helm
 roleRef:
   apiGroup: rbac.authorization.k8s.io

clusters/cl01tl/manifests/headlamp/ConfigMap-headlamp-plugin-config.yaml

@@ -4,10 +4,10 @@ metadata:
   name: headlamp-plugin-config
   namespace: headlamp
   labels:
-    helm.sh/chart: headlamp-0.38.0
+    helm.sh/chart: headlamp-0.39.0
     app.kubernetes.io/name: headlamp
     app.kubernetes.io/instance: headlamp
-    app.kubernetes.io/version: "0.38.0"
+    app.kubernetes.io/version: "0.39.0"
     app.kubernetes.io/managed-by: Helm
 data:
   plugin.yml: |

clusters/cl01tl/manifests/headlamp/Deployment-headlamp.yaml

@@ -4,10 +4,10 @@ metadata:
   name: headlamp
   namespace: headlamp
   labels:
-    helm.sh/chart: headlamp-0.38.0
+    helm.sh/chart: headlamp-0.39.0
     app.kubernetes.io/name: headlamp
     app.kubernetes.io/instance: headlamp
-    app.kubernetes.io/version: "0.38.0"
+    app.kubernetes.io/version: "0.39.0"
     app.kubernetes.io/managed-by: Helm
 spec:
   replicas: 2
@@ -31,7 +31,7 @@ spec:
             runAsGroup: 101
             runAsNonRoot: true
             runAsUser: 100
-          image: "ghcr.io/headlamp-k8s/headlamp:v0.38.0"
+          image: "ghcr.io/headlamp-k8s/headlamp:v0.39.0"
           imagePullPolicy: IfNotPresent
           envFrom:
             - secretRef:

clusters/cl01tl/manifests/headlamp/Service-headlamp.yaml

@@ -4,10 +4,10 @@ metadata:
   name: headlamp
   namespace: headlamp
   labels:
-    helm.sh/chart: headlamp-0.38.0
+    helm.sh/chart: headlamp-0.39.0
     app.kubernetes.io/name: headlamp
     app.kubernetes.io/instance: headlamp
-    app.kubernetes.io/version: "0.38.0"
+    app.kubernetes.io/version: "0.39.0"
     app.kubernetes.io/managed-by: Helm
 spec:
   type: ClusterIP

clusters/cl01tl/manifests/headlamp/ServiceAccount-headlamp.yaml

@@ -4,8 +4,8 @@ metadata:
   name: headlamp
   namespace: headlamp
   labels:
-    helm.sh/chart: headlamp-0.38.0
+    helm.sh/chart: headlamp-0.39.0
     app.kubernetes.io/name: headlamp
     app.kubernetes.io/instance: headlamp
-    app.kubernetes.io/version: "0.38.0"
+    app.kubernetes.io/version: "0.39.0"
     app.kubernetes.io/managed-by: Helm

clusters/cl01tl/manifests/tailscale-operator/CustomResourceDefinition-recorders.tailscale.com.yaml

@@ -68,6 +68,11 @@ spec:
                     Corresponds to --ui tsrecorder flag https://tailscale.com/kb/1246/tailscale-ssh-session-recording#deploy-a-recorder-node.
                     Required if S3 storage is not set up, to ensure that recordings are accessible.
                   type: boolean
+                replicas:
+                  description: Replicas specifies how many instances of tsrecorder to run. Defaults to 1.
+                  type: integer
+                  format: int32
+                  minimum: 0
                 statefulSet:
                   description: |-
                     Configuration parameters for the Recorder's StatefulSet. The operator
@@ -1683,6 +1688,9 @@ spec:
                   items:
                     type: string
                     pattern: ^tag:[a-zA-Z][a-zA-Z0-9-]*$
+              x-kubernetes-validations:
+                - rule: '!(self.replicas > 1 && (!has(self.storage) || !has(self.storage.s3)))'
+                  message: S3 storage must be used when deploying multiple Recorder replicas
             status:
               description: |-
                 RecorderStatus describes the status of the recorder. This is set

clusters/cl01tl/manifests/tailscale-operator/Deployment-operator.yaml

@@ -22,7 +22,7 @@ spec:
             secretName: operator-oauth
       containers:
         - name: operator
-          image: tailscale/k8s-operator:v1.90.9
+          image: tailscale/k8s-operator:v1.92.4
           imagePullPolicy: Always
           env:
             - name: OPERATOR_INITIAL_TAGS
@@ -46,7 +46,7 @@ spec:
             - name: CLIENT_SECRET_FILE
               value: /oauth/client_secret
             - name: PROXY_IMAGE
-              value: tailscale/tailscale:v1.90.9
+              value: tailscale/tailscale:v1.92.4
             - name: PROXY_TAGS
               value: tag:k8s
             - name: APISERVER_PROXY