clusters/cl01tl/manifests/authentik/Deployment-authentik-server.yaml

@@ -4,13 +4,13 @@ metadata:
   name: authentik-server
   namespace: "authentik"
   labels:
-    helm.sh/chart: "authentik-2025.10.3"
+    helm.sh/chart: "authentik-2025.12.1"
     app.kubernetes.io/name: "authentik"
     app.kubernetes.io/instance: "authentik"
     app.kubernetes.io/component: "server"
     app.kubernetes.io/managed-by: "Helm"
     app.kubernetes.io/part-of: "authentik"
-    app.kubernetes.io/version: "2025.10.3"
+    app.kubernetes.io/version: "2025.12.1"
 spec:
   replicas: 1
   revisionHistoryLimit: 3
@@ -22,20 +22,20 @@ spec:
   template:
     metadata:
       labels:
-        helm.sh/chart: "authentik-2025.10.3"
+        helm.sh/chart: "authentik-2025.12.1"
         app.kubernetes.io/name: "authentik"
         app.kubernetes.io/instance: "authentik"
         app.kubernetes.io/component: "server"
         app.kubernetes.io/managed-by: "Helm"
         app.kubernetes.io/part-of: "authentik"
-        app.kubernetes.io/version: "2025.10.3"
+        app.kubernetes.io/version: "2025.12.1"
       annotations:
-        checksum/secret: 81023a537ff1b052b9aa8885a264a3bc8d874319f2925e0905ff49b51381495c
+        checksum/secret: a62d2991999b23c5469919025e75ddddf7da78b65876b9570e27b51015e1160a
     spec:
       terminationGracePeriodSeconds: 30
       containers:
         - name: server
-          image: ghcr.io/goauthentik/server:2025.10.3
+          image: ghcr.io/goauthentik/server:2025.12.1
           imagePullPolicy: IfNotPresent
           args:
             - server

clusters/cl01tl/manifests/authentik/Deployment-authentik-worker.yaml

@@ -4,13 +4,13 @@ metadata:
   name: authentik-worker
   namespace: "authentik"
   labels:
-    helm.sh/chart: "authentik-2025.10.3"
+    helm.sh/chart: "authentik-2025.12.1"
     app.kubernetes.io/name: "authentik"
     app.kubernetes.io/instance: "authentik"
     app.kubernetes.io/component: "worker"
     app.kubernetes.io/managed-by: "Helm"
     app.kubernetes.io/part-of: "authentik"
-    app.kubernetes.io/version: "2025.10.3"
+    app.kubernetes.io/version: "2025.12.1"
 spec:
   replicas: 1
   revisionHistoryLimit: 3
@@ -22,21 +22,21 @@ spec:
   template:
     metadata:
       labels:
-        helm.sh/chart: "authentik-2025.10.3"
+        helm.sh/chart: "authentik-2025.12.1"
         app.kubernetes.io/name: "authentik"
         app.kubernetes.io/instance: "authentik"
         app.kubernetes.io/component: "worker"
         app.kubernetes.io/managed-by: "Helm"
         app.kubernetes.io/part-of: "authentik"
-        app.kubernetes.io/version: "2025.10.3"
+        app.kubernetes.io/version: "2025.12.1"
       annotations:
-        checksum/secret: 81023a537ff1b052b9aa8885a264a3bc8d874319f2925e0905ff49b51381495c
+        checksum/secret: a62d2991999b23c5469919025e75ddddf7da78b65876b9570e27b51015e1160a
     spec:
       serviceAccountName: authentik
       terminationGracePeriodSeconds: 30
       containers:
         - name: worker
-          image: ghcr.io/goauthentik/server:2025.10.3
+          image: ghcr.io/goauthentik/server:2025.12.1
           imagePullPolicy: IfNotPresent
           args:
             - worker

clusters/cl01tl/manifests/authentik/HTTPRoute-authentik-server.yaml

@@ -4,13 +4,13 @@ metadata:
   name: authentik-server
   namespace: "authentik"
   labels:
-    helm.sh/chart: "authentik-2025.10.3"
+    helm.sh/chart: "authentik-2025.12.1"
     app.kubernetes.io/name: "authentik"
     app.kubernetes.io/instance: "authentik"
     app.kubernetes.io/component: "server"
     app.kubernetes.io/managed-by: "Helm"
     app.kubernetes.io/part-of: "authentik"
-    app.kubernetes.io/version: "2025.10.3"
+    app.kubernetes.io/version: "2025.12.1"
 spec:
   parentRefs:
     - group: gateway.networking.k8s.io

clusters/cl01tl/manifests/authentik/PrometheusRule-authentik.yaml

@@ -4,12 +4,12 @@ metadata:
   name: authentik
   namespace: "authentik"
   labels:
-    helm.sh/chart: "authentik-2025.10.3"
+    helm.sh/chart: "authentik-2025.12.1"
     app.kubernetes.io/name: "authentik"
     app.kubernetes.io/instance: "authentik"
     app.kubernetes.io/managed-by: "Helm"
     app.kubernetes.io/part-of: "authentik"
-    app.kubernetes.io/version: "2025.10.3"
+    app.kubernetes.io/version: "2025.12.1"
 spec:
   groups:
     - name: authentik Aggregate request counters

clusters/cl01tl/manifests/authentik/Secret-authentik.yaml

@@ -4,12 +4,12 @@ metadata:
   name: authentik
   namespace: "authentik"
   labels:
-    helm.sh/chart: "authentik-2025.10.3"
+    helm.sh/chart: "authentik-2025.12.1"
     app.kubernetes.io/name: "authentik"
     app.kubernetes.io/instance: "authentik"
     app.kubernetes.io/managed-by: "Helm"
     app.kubernetes.io/part-of: "authentik"
-    app.kubernetes.io/version: "2025.10.3"
+    app.kubernetes.io/version: "2025.12.1"
 data:
   AUTHENTIK_EMAIL__PORT: "NTg3"
   AUTHENTIK_EMAIL__TIMEOUT: "MzA="

clusters/cl01tl/manifests/authentik/Service-authentik-server-metrics.yaml

@@ -4,13 +4,13 @@ metadata:
   name: authentik-server-metrics
   namespace: "authentik"
   labels:
-    helm.sh/chart: "authentik-2025.10.3"
+    helm.sh/chart: "authentik-2025.12.1"
     app.kubernetes.io/name: "authentik"
     app.kubernetes.io/instance: "authentik"
     app.kubernetes.io/component: "server-metrics"
     app.kubernetes.io/managed-by: "Helm"
     app.kubernetes.io/part-of: "authentik"
-    app.kubernetes.io/version: "2025.10.3"
+    app.kubernetes.io/version: "2025.12.1"
 spec:
   type: ClusterIP
   ports:

clusters/cl01tl/manifests/authentik/Service-authentik-server.yaml

@@ -4,13 +4,13 @@ metadata:
   name: authentik-server
   namespace: "authentik"
   labels:
-    helm.sh/chart: "authentik-2025.10.3"
+    helm.sh/chart: "authentik-2025.12.1"
     app.kubernetes.io/name: "authentik"
     app.kubernetes.io/instance: "authentik"
     app.kubernetes.io/component: "server"
     app.kubernetes.io/managed-by: "Helm"
     app.kubernetes.io/part-of: "authentik"
-    app.kubernetes.io/version: "2025.10.3"
+    app.kubernetes.io/version: "2025.12.1"
 spec:
   type: ClusterIP
   ports:

clusters/cl01tl/manifests/authentik/ServiceMonitor-authentik-server.yaml

@@ -4,13 +4,13 @@ metadata:
   name: authentik-server
   namespace: "authentik"
   labels:
-    helm.sh/chart: "authentik-2025.10.3"
+    helm.sh/chart: "authentik-2025.12.1"
     app.kubernetes.io/name: "authentik"
     app.kubernetes.io/instance: "authentik"
     app.kubernetes.io/component: "server-metrics"
     app.kubernetes.io/managed-by: "Helm"
     app.kubernetes.io/part-of: "authentik"
-    app.kubernetes.io/version: "2025.10.3"
+    app.kubernetes.io/version: "2025.12.1"
 spec:
   endpoints:
     - port: metrics

clusters/cl01tl/manifests/backrest/Deployment-backrest.yaml

@@ -45,7 +45,7 @@ spec:
               value: /cache
             - name: TMPDIR
               value: /tmp
-          image: garethgeorge/backrest:v1.10.1
+          image: garethgeorge/backrest:v1.11.1
           imagePullPolicy: IfNotPresent
           name: main
           resources:

clusters/cl01tl/manifests/vault/ConfigMap-vault-config.yaml

@@ -4,7 +4,7 @@ metadata:
   name: vault-config
   namespace: vault
   labels:
-    helm.sh/chart: vault-0.31.0
+    helm.sh/chart: vault-0.32.0
     app.kubernetes.io/name: vault
     app.kubernetes.io/instance: vault
     app.kubernetes.io/managed-by: Helm

clusters/cl01tl/manifests/vault/PodDisruptionBudget-vault.yaml

@@ -4,7 +4,7 @@ metadata:
   name: vault
   namespace: vault
   labels:
-    helm.sh/chart: vault-0.31.0
+    helm.sh/chart: vault-0.32.0
     app.kubernetes.io/name: vault
     app.kubernetes.io/instance: vault
     app.kubernetes.io/managed-by: Helm

clusters/cl01tl/manifests/vault/PrometheusRule-vault.yaml

@@ -3,7 +3,7 @@ kind: PrometheusRule
 metadata:
   name: vault
   labels:
-    helm.sh/chart: vault-0.31.0
+    helm.sh/chart: vault-0.32.0
     app.kubernetes.io/name: vault
     app.kubernetes.io/instance: vault
     app.kubernetes.io/managed-by: Helm

clusters/cl01tl/manifests/vault/Role-vault-discovery-role.yaml

@@ -4,7 +4,7 @@ metadata:
   namespace: vault
   name: vault-discovery-role
   labels:
-    helm.sh/chart: vault-0.31.0
+    helm.sh/chart: vault-0.32.0
     app.kubernetes.io/name: vault
     app.kubernetes.io/instance: vault
     app.kubernetes.io/managed-by: Helm

clusters/cl01tl/manifests/vault/RoleBinding-vault-discovery-rolebinding.yaml

@@ -4,7 +4,7 @@ metadata:
   name: vault-discovery-rolebinding
   namespace: vault
   labels:
-    helm.sh/chart: vault-0.31.0
+    helm.sh/chart: vault-0.32.0
     app.kubernetes.io/name: vault
     app.kubernetes.io/instance: vault
     app.kubernetes.io/managed-by: Helm

clusters/cl01tl/manifests/vault/Service-vault-active.yaml

@@ -4,7 +4,7 @@ metadata:
   name: vault-active
   namespace: vault
   labels:
-    helm.sh/chart: vault-0.31.0
+    helm.sh/chart: vault-0.32.0
     app.kubernetes.io/name: vault
     app.kubernetes.io/instance: vault
     app.kubernetes.io/managed-by: Helm

clusters/cl01tl/manifests/vault/Service-vault-internal.yaml

@@ -4,7 +4,7 @@ metadata:
   name: vault-internal
   namespace: vault
   labels:
-    helm.sh/chart: vault-0.31.0
+    helm.sh/chart: vault-0.32.0
     app.kubernetes.io/name: vault
     app.kubernetes.io/instance: vault
     app.kubernetes.io/managed-by: Helm

clusters/cl01tl/manifests/vault/Service-vault-ui.yaml

@@ -4,7 +4,7 @@ metadata:
   name: vault-ui
   namespace: vault
   labels:
-    helm.sh/chart: vault-0.31.0
+    helm.sh/chart: vault-0.32.0
     app.kubernetes.io/name: vault-ui
     app.kubernetes.io/instance: vault
     app.kubernetes.io/managed-by: Helm

clusters/cl01tl/manifests/vault/Service-vault.yaml

@@ -4,7 +4,7 @@ metadata:
   name: vault
   namespace: vault
   labels:
-    helm.sh/chart: vault-0.31.0
+    helm.sh/chart: vault-0.32.0
     app.kubernetes.io/name: vault
     app.kubernetes.io/instance: vault
     app.kubernetes.io/managed-by: Helm

clusters/cl01tl/manifests/vault/ServiceAccount-vault.yaml

@@ -4,7 +4,7 @@ metadata:
   name: vault
   namespace: vault
   labels:
-    helm.sh/chart: vault-0.31.0
+    helm.sh/chart: vault-0.32.0
     app.kubernetes.io/name: vault
     app.kubernetes.io/instance: vault
     app.kubernetes.io/managed-by: Helm

clusters/cl01tl/manifests/vault/ServiceMonitor-vault.yaml

@@ -3,7 +3,7 @@ kind: ServiceMonitor
 metadata:
   name: vault
   labels:
-    helm.sh/chart: vault-0.31.0
+    helm.sh/chart: vault-0.32.0
     app.kubernetes.io/name: vault
     app.kubernetes.io/instance: vault
     app.kubernetes.io/managed-by: Helm

clusters/cl01tl/manifests/vault/StatefulSet-vault.yaml

@@ -21,7 +21,7 @@ spec:
   template:
     metadata:
       labels:
-        helm.sh/chart: vault-0.31.0
+        helm.sh/chart: vault-0.32.0
         app.kubernetes.io/name: vault
         app.kubernetes.io/instance: vault
         component: server
@@ -138,7 +138,9 @@ spec:
                   - "-c"
                   - "sleep 5 && kill -SIGTERM $(pidof vault)"
   volumeClaimTemplates:
-    - metadata:
+    - apiVersion: v1
+      kind: PersistentVolumeClaim
+      metadata:
         name: data
       spec:
         accessModes: