clusters/cl01tl/manifests/authentik/Deployment-authentik-cloudflared.yaml

@@ -7,8 +7,8 @@ metadata:
     app.kubernetes.io/instance: authentik
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cloudflared
-    app.kubernetes.io/version: 2026.2.0
+    app.kubernetes.io/version: 2026.3.0
-    helm.sh/chart: cloudflared-2.3.0
+    helm.sh/chart: cloudflared-2.4.0
   namespace: authentik
 spec:
   revisionHistoryLimit: 3
@@ -49,7 +49,7 @@ spec:
                 secretKeyRef:
                   key: cf-tunnel-token
                   name: authentik-cloudflared-secret
-          image: cloudflare/cloudflared:2026.2.0
+          image: cloudflare/cloudflared:2026.3.0
           imagePullPolicy: IfNotPresent
           name: main
           resources:

clusters/cl01tl/manifests/authentik/ExternalSecret-authentik-cloudflared-secret.yaml

@@ -4,10 +4,10 @@ metadata:
   name: authentik-cloudflared-secret
   namespace: authentik
   labels:
-    helm.sh/chart: cloudflared-2.3.0
+    helm.sh/chart: cloudflared-2.4.0
     app.kubernetes.io/instance: authentik
     app.kubernetes.io/part-of: authentik
-    app.kubernetes.io/version: "2.3.0"
+    app.kubernetes.io/version: "2.4.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: authentik-cloudflared-secret
 spec:

clusters/cl01tl/manifests/code-server/Deployment-code-server-cloudflared.yaml

@@ -7,8 +7,8 @@ metadata:
     app.kubernetes.io/instance: code-server
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cloudflared
-    app.kubernetes.io/version: 2026.2.0
+    app.kubernetes.io/version: 2026.3.0
-    helm.sh/chart: cloudflared-2.3.0
+    helm.sh/chart: cloudflared-2.4.0
   namespace: code-server
 spec:
   revisionHistoryLimit: 3
@@ -49,7 +49,7 @@ spec:
                 secretKeyRef:
                   key: cf-tunnel-token
                   name: code-server-cloudflared-secret
-          image: cloudflare/cloudflared:2026.2.0
+          image: cloudflare/cloudflared:2026.3.0
           imagePullPolicy: IfNotPresent
           name: main
           resources:

clusters/cl01tl/manifests/code-server/Deployment-code-server.yaml

@@ -46,7 +46,7 @@ spec:
           envFrom:
             - secretRef:
                 name: codeserver-password-secret
-          image: ghcr.io/linuxserver/code-server:4.109.5@sha256:aa43fb2fc31127e9d2166e903c7f13792351e38658ba29645662a89ff04ff90d
+          image: ghcr.io/linuxserver/code-server:4.110.0@sha256:8473aa16fba93fccc3ca772173d095bccd2e44d4d3104467fee923df10d57cd2
           imagePullPolicy: IfNotPresent
           name: main
           resources:

clusters/cl01tl/manifests/code-server/ExternalSecret-code-server-cloudflared-secret.yaml

@@ -4,10 +4,10 @@ metadata:
   name: code-server-cloudflared-secret
   namespace: code-server
   labels:
-    helm.sh/chart: cloudflared-2.3.0
+    helm.sh/chart: cloudflared-2.4.0
     app.kubernetes.io/instance: code-server
     app.kubernetes.io/part-of: code-server
-    app.kubernetes.io/version: "2.3.0"
+    app.kubernetes.io/version: "2.4.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: code-server-cloudflared-secret
 spec:

clusters/cl01tl/manifests/descheduler/ClusterRole-descheduler.yaml

@@ -4,9 +4,9 @@ metadata:
   name: descheduler
   labels:
     app.kubernetes.io/name: descheduler
-    helm.sh/chart: descheduler-0.35.0
+    helm.sh/chart: descheduler-0.35.1
     app.kubernetes.io/instance: descheduler
-    app.kubernetes.io/version: "0.35.0"
+    app.kubernetes.io/version: "0.35.1"
     app.kubernetes.io/managed-by: Helm
 rules:
   - apiGroups: ["events.k8s.io"]
@@ -30,3 +30,6 @@ rules:
   - apiGroups: ["policy"]
     resources: ["poddisruptionbudgets"]
     verbs: ["get", "watch", "list"]
+  - apiGroups: [""]
+    resources: ["persistentvolumeclaims"]
+    verbs: ["get", "watch", "list"]

clusters/cl01tl/manifests/descheduler/ClusterRoleBinding-descheduler.yaml

@@ -4,9 +4,9 @@ metadata:
   name: descheduler
   labels:
     app.kubernetes.io/name: descheduler
-    helm.sh/chart: descheduler-0.35.0
+    helm.sh/chart: descheduler-0.35.1
     app.kubernetes.io/instance: descheduler
-    app.kubernetes.io/version: "0.35.0"
+    app.kubernetes.io/version: "0.35.1"
     app.kubernetes.io/managed-by: Helm
 roleRef:
   apiGroup: rbac.authorization.k8s.io

clusters/cl01tl/manifests/descheduler/ConfigMap-descheduler.yaml

@@ -5,9 +5,9 @@ metadata:
   namespace: descheduler
   labels:
     app.kubernetes.io/name: descheduler
-    helm.sh/chart: descheduler-0.35.0
+    helm.sh/chart: descheduler-0.35.1
     app.kubernetes.io/instance: descheduler
-    app.kubernetes.io/version: "0.35.0"
+    app.kubernetes.io/version: "0.35.1"
     app.kubernetes.io/managed-by: Helm
 data:
   policy.yaml: |

clusters/cl01tl/manifests/descheduler/Deployment-descheduler.yaml

@@ -5,9 +5,9 @@ metadata:
   namespace: descheduler
   labels:
     app.kubernetes.io/name: descheduler
-    helm.sh/chart: descheduler-0.35.0
+    helm.sh/chart: descheduler-0.35.1
     app.kubernetes.io/instance: descheduler
-    app.kubernetes.io/version: "0.35.0"
+    app.kubernetes.io/version: "0.35.1"
     app.kubernetes.io/managed-by: Helm
 spec:
   replicas: 1
@@ -21,13 +21,13 @@ spec:
         app.kubernetes.io/name: descheduler
         app.kubernetes.io/instance: descheduler
       annotations:
-        checksum/config: 9c15e0539cb3d0fc2a8df7efa48ce9a6ba134ee9fa63e8d4112ed13c5bd576d3
+        checksum/config: 52cdde3aae105c8d407cdec96dbaf5f9d630289083aa3d4fbf77f0d5962eda6d
     spec:
       priorityClassName: system-cluster-critical
       serviceAccountName: descheduler
       containers:
         - name: descheduler
-          image: "registry.k8s.io/descheduler/descheduler:v0.35.0"
+          image: "registry.k8s.io/descheduler/descheduler:v0.35.1"
           imagePullPolicy: IfNotPresent
           command:
             - /bin/descheduler

clusters/cl01tl/manifests/descheduler/Service-descheduler.yaml

@@ -3,9 +3,9 @@ kind: Service
 metadata:
   labels:
     app.kubernetes.io/name: descheduler
-    helm.sh/chart: descheduler-0.35.0
+    helm.sh/chart: descheduler-0.35.1
     app.kubernetes.io/instance: descheduler
-    app.kubernetes.io/version: "0.35.0"
+    app.kubernetes.io/version: "0.35.1"
     app.kubernetes.io/managed-by: Helm
   name: descheduler
   namespace: descheduler

clusters/cl01tl/manifests/descheduler/ServiceAccount-descheduler.yaml

@@ -5,7 +5,7 @@ metadata:
   namespace: descheduler
   labels:
     app.kubernetes.io/name: descheduler
-    helm.sh/chart: descheduler-0.35.0
+    helm.sh/chart: descheduler-0.35.1
     app.kubernetes.io/instance: descheduler
-    app.kubernetes.io/version: "0.35.0"
+    app.kubernetes.io/version: "0.35.1"
     app.kubernetes.io/managed-by: Helm

clusters/cl01tl/manifests/descheduler/ServiceMonitor-descheduler-servicemonitor.yaml

@@ -5,9 +5,9 @@ metadata:
   namespace: descheduler
   labels:
     app.kubernetes.io/name: descheduler
-    helm.sh/chart: descheduler-0.35.0
+    helm.sh/chart: descheduler-0.35.1
     app.kubernetes.io/instance: descheduler
-    app.kubernetes.io/version: "0.35.0"
+    app.kubernetes.io/version: "0.35.1"
     app.kubernetes.io/managed-by: Helm
 spec:
   jobLabel: jobLabel

clusters/cl01tl/manifests/element-web/Deployment-element-web-cloudflared.yaml

@@ -7,8 +7,8 @@ metadata:
     app.kubernetes.io/instance: element-web
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cloudflared
-    app.kubernetes.io/version: 2026.2.0
+    app.kubernetes.io/version: 2026.3.0
-    helm.sh/chart: cloudflared-2.3.0
+    helm.sh/chart: cloudflared-2.4.0
   namespace: element-web
 spec:
   revisionHistoryLimit: 3
@@ -49,7 +49,7 @@ spec:
                 secretKeyRef:
                   key: cf-tunnel-token
                   name: element-web-cloudflared-secret
-          image: cloudflare/cloudflared:2026.2.0
+          image: cloudflare/cloudflared:2026.3.0
           imagePullPolicy: IfNotPresent
           name: main
           resources:

clusters/cl01tl/manifests/element-web/ExternalSecret-element-web-cloudflared-secret.yaml

@@ -4,10 +4,10 @@ metadata:
   name: element-web-cloudflared-secret
   namespace: element-web
   labels:
-    helm.sh/chart: cloudflared-2.3.0
+    helm.sh/chart: cloudflared-2.4.0
     app.kubernetes.io/instance: element-web
     app.kubernetes.io/part-of: element-web
-    app.kubernetes.io/version: "2.3.0"
+    app.kubernetes.io/version: "2.4.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: element-web-cloudflared-secret
 spec:

clusters/cl01tl/manifests/freshrss/Deployment-freshrss-cloudflared.yaml

@@ -7,8 +7,8 @@ metadata:
     app.kubernetes.io/instance: freshrss
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cloudflared
-    app.kubernetes.io/version: 2026.2.0
+    app.kubernetes.io/version: 2026.3.0
-    helm.sh/chart: cloudflared-2.3.0
+    helm.sh/chart: cloudflared-2.4.0
   namespace: freshrss
 spec:
   revisionHistoryLimit: 3
@@ -49,7 +49,7 @@ spec:
                 secretKeyRef:
                   key: cf-tunnel-token
                   name: freshrss-cloudflared-secret
-          image: cloudflare/cloudflared:2026.2.0
+          image: cloudflare/cloudflared:2026.3.0
           imagePullPolicy: IfNotPresent
           name: main
           resources:

clusters/cl01tl/manifests/freshrss/ExternalSecret-freshrss-cloudflared-secret.yaml

@@ -4,10 +4,10 @@ metadata:
   name: freshrss-cloudflared-secret
   namespace: freshrss
   labels:
-    helm.sh/chart: cloudflared-2.3.0
+    helm.sh/chart: cloudflared-2.4.0
     app.kubernetes.io/instance: freshrss
     app.kubernetes.io/part-of: freshrss
-    app.kubernetes.io/version: "2.3.0"
+    app.kubernetes.io/version: "2.4.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: freshrss-cloudflared-secret
 spec:

clusters/cl01tl/manifests/gitea/Deployment-gitea-cloudflared.yaml

@@ -7,8 +7,8 @@ metadata:
     app.kubernetes.io/instance: gitea
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cloudflared
-    app.kubernetes.io/version: 2026.2.0
+    app.kubernetes.io/version: 2026.3.0
-    helm.sh/chart: cloudflared-2.3.0
+    helm.sh/chart: cloudflared-2.4.0
   namespace: gitea
 spec:
   revisionHistoryLimit: 3
@@ -49,7 +49,7 @@ spec:
                 secretKeyRef:
                   key: cf-tunnel-token
                   name: gitea-cloudflared-secret
-          image: cloudflare/cloudflared:2026.2.0
+          image: cloudflare/cloudflared:2026.3.0
           imagePullPolicy: IfNotPresent
           name: main
           resources:

clusters/cl01tl/manifests/gitea/ExternalSecret-gitea-cloudflared-secret.yaml

@@ -4,10 +4,10 @@ metadata:
   name: gitea-cloudflared-secret
   namespace: gitea
   labels:
-    helm.sh/chart: cloudflared-2.3.0
+    helm.sh/chart: cloudflared-2.4.0
     app.kubernetes.io/instance: gitea
     app.kubernetes.io/part-of: gitea
-    app.kubernetes.io/version: "2.3.0"
+    app.kubernetes.io/version: "2.4.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: gitea-cloudflared-secret
 spec:

clusters/cl01tl/manifests/home-assistant/Deployment-home-assistant.yaml

@@ -46,7 +46,7 @@ spec:
           envFrom:
             - secretRef:
                 name: home-assistant-code-server-password-secret
-          image: ghcr.io/linuxserver/code-server:4.109.5@sha256:aa43fb2fc31127e9d2166e903c7f13792351e38658ba29645662a89ff04ff90d
+          image: ghcr.io/linuxserver/code-server:4.110.0@sha256:8473aa16fba93fccc3ca772173d095bccd2e44d4d3104467fee923df10d57cd2
           imagePullPolicy: IfNotPresent
           name: code-server
           resources:

clusters/cl01tl/manifests/karakeep/Deployment-karakeep-cloudflared.yaml

@@ -7,8 +7,8 @@ metadata:
     app.kubernetes.io/instance: karakeep
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cloudflared
-    app.kubernetes.io/version: 2026.2.0
+    app.kubernetes.io/version: 2026.3.0
-    helm.sh/chart: cloudflared-2.3.0
+    helm.sh/chart: cloudflared-2.4.0
   namespace: karakeep
 spec:
   revisionHistoryLimit: 3
@@ -49,7 +49,7 @@ spec:
                 secretKeyRef:
                   key: cf-tunnel-token
                   name: karakeep-cloudflared-secret
-          image: cloudflare/cloudflared:2026.2.0
+          image: cloudflare/cloudflared:2026.3.0
           imagePullPolicy: IfNotPresent
           name: main
           resources:

clusters/cl01tl/manifests/karakeep/ExternalSecret-karakeep-cloudflared-secret.yaml

@@ -4,10 +4,10 @@ metadata:
   name: karakeep-cloudflared-secret
   namespace: karakeep
   labels:
-    helm.sh/chart: cloudflared-2.3.0
+    helm.sh/chart: cloudflared-2.4.0
     app.kubernetes.io/instance: karakeep
     app.kubernetes.io/part-of: karakeep
-    app.kubernetes.io/version: "2.3.0"
+    app.kubernetes.io/version: "2.4.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: karakeep-cloudflared-secret
 spec:

clusters/cl01tl/manifests/matrix-synapse/Deployment-matrix-synapse-hookshot-cloudflared.yaml

@@ -7,8 +7,8 @@ metadata:
     app.kubernetes.io/instance: matrix-synapse
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: hookshot-cloudflared
-    app.kubernetes.io/version: 2026.2.0
+    app.kubernetes.io/version: 2026.3.0
-    helm.sh/chart: cloudflared-hookshot-2.3.0
+    helm.sh/chart: cloudflared-hookshot-2.4.0
   namespace: matrix-synapse
 spec:
   revisionHistoryLimit: 3
@@ -49,7 +49,7 @@ spec:
                 secretKeyRef:
                   key: cf-tunnel-token
                   name: matrix-synapse-hookshot-cloudflared-secret
-          image: cloudflare/cloudflared:2026.2.0
+          image: cloudflare/cloudflared:2026.3.0
           imagePullPolicy: IfNotPresent
           name: main
           resources:

clusters/cl01tl/manifests/matrix-synapse/Deployment-matrix-synapse-synapse-cloudflared.yaml

@@ -7,8 +7,8 @@ metadata:
     app.kubernetes.io/instance: matrix-synapse
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: synapse-cloudflared
-    app.kubernetes.io/version: 2026.2.0
+    app.kubernetes.io/version: 2026.3.0
-    helm.sh/chart: cloudflared-synapse-2.3.0
+    helm.sh/chart: cloudflared-synapse-2.4.0
   namespace: matrix-synapse
 spec:
   revisionHistoryLimit: 3
@@ -49,7 +49,7 @@ spec:
                 secretKeyRef:
                   key: cf-tunnel-token
                   name: matrix-synapse-synapse-cloudflared-secret
-          image: cloudflare/cloudflared:2026.2.0
+          image: cloudflare/cloudflared:2026.3.0
           imagePullPolicy: IfNotPresent
           name: main
           resources:

clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-matrix-synapse-hookshot-cloudflared-secret.yaml

@@ -4,10 +4,10 @@ metadata:
   name: matrix-synapse-hookshot-cloudflared-secret
   namespace: matrix-synapse
   labels:
-    helm.sh/chart: cloudflared-hookshot-2.3.0
+    helm.sh/chart: cloudflared-hookshot-2.4.0
     app.kubernetes.io/instance: matrix-synapse
     app.kubernetes.io/part-of: matrix-synapse
-    app.kubernetes.io/version: "2.3.0"
+    app.kubernetes.io/version: "2.4.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: matrix-synapse-hookshot-cloudflared-secret
 spec:

clusters/cl01tl/manifests/matrix-synapse/ExternalSecret-matrix-synapse-synapse-cloudflared-secret.yaml

@@ -4,10 +4,10 @@ metadata:
   name: matrix-synapse-synapse-cloudflared-secret
   namespace: matrix-synapse
   labels:
-    helm.sh/chart: cloudflared-synapse-2.3.0
+    helm.sh/chart: cloudflared-synapse-2.4.0
     app.kubernetes.io/instance: matrix-synapse
     app.kubernetes.io/part-of: matrix-synapse
-    app.kubernetes.io/version: "2.3.0"
+    app.kubernetes.io/version: "2.4.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: matrix-synapse-synapse-cloudflared-secret
 spec:

clusters/cl01tl/manifests/outline/Deployment-outline-cloudflared.yaml

@@ -7,8 +7,8 @@ metadata:
     app.kubernetes.io/instance: outline
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cloudflared
-    app.kubernetes.io/version: 2026.2.0
+    app.kubernetes.io/version: 2026.3.0
-    helm.sh/chart: cloudflared-2.3.0
+    helm.sh/chart: cloudflared-2.4.0
   namespace: outline
 spec:
   revisionHistoryLimit: 3
@@ -49,7 +49,7 @@ spec:
                 secretKeyRef:
                   key: cf-tunnel-token
                   name: outline-cloudflared-secret
-          image: cloudflare/cloudflared:2026.2.0
+          image: cloudflare/cloudflared:2026.3.0
           imagePullPolicy: IfNotPresent
           name: main
           resources:

clusters/cl01tl/manifests/outline/ExternalSecret-outline-cloudflared-secret.yaml

@@ -4,10 +4,10 @@ metadata:
   name: outline-cloudflared-secret
   namespace: outline
   labels:
-    helm.sh/chart: cloudflared-2.3.0
+    helm.sh/chart: cloudflared-2.4.0
     app.kubernetes.io/instance: outline
     app.kubernetes.io/part-of: outline
-    app.kubernetes.io/version: "2.3.0"
+    app.kubernetes.io/version: "2.4.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: outline-cloudflared-secret
 spec:

clusters/cl01tl/manifests/postiz/Deployment-postiz-cloudflared.yaml

@@ -7,8 +7,8 @@ metadata:
     app.kubernetes.io/instance: postiz
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cloudflared
-    app.kubernetes.io/version: 2026.2.0
+    app.kubernetes.io/version: 2026.3.0
-    helm.sh/chart: cloudflared-2.3.0
+    helm.sh/chart: cloudflared-2.4.0
   namespace: postiz
 spec:
   revisionHistoryLimit: 3
@@ -49,7 +49,7 @@ spec:
                 secretKeyRef:
                   key: cf-tunnel-token
                   name: postiz-cloudflared-secret
-          image: cloudflare/cloudflared:2026.2.0
+          image: cloudflare/cloudflared:2026.3.0
           imagePullPolicy: IfNotPresent
           name: main
           resources:

clusters/cl01tl/manifests/postiz/ExternalSecret-postiz-cloudflared-secret.yaml

@@ -4,10 +4,10 @@ metadata:
   name: postiz-cloudflared-secret
   namespace: postiz
   labels:
-    helm.sh/chart: cloudflared-2.3.0
+    helm.sh/chart: cloudflared-2.4.0
     app.kubernetes.io/instance: postiz
     app.kubernetes.io/part-of: postiz
-    app.kubernetes.io/version: "2.3.0"
+    app.kubernetes.io/version: "2.4.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: postiz-cloudflared-secret
 spec:

clusters/cl01tl/manifests/rook-ceph/Deployment-rook-ceph-rgw-cloudflared.yaml

@@ -7,8 +7,8 @@ metadata:
     app.kubernetes.io/instance: rook-ceph
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: rgw-cloudflared
-    app.kubernetes.io/version: 2026.2.0
+    app.kubernetes.io/version: 2026.3.0
-    helm.sh/chart: cloudflared-rgw-2.3.0
+    helm.sh/chart: cloudflared-rgw-2.4.0
   namespace: rook-ceph
 spec:
   revisionHistoryLimit: 3
@@ -49,7 +49,7 @@ spec:
                 secretKeyRef:
                   key: cf-tunnel-token
                   name: rook-ceph-rgw-cloudflared-secret
-          image: cloudflare/cloudflared:2026.2.0
+          image: cloudflare/cloudflared:2026.3.0
           imagePullPolicy: IfNotPresent
           name: main
           resources:

clusters/cl01tl/manifests/rook-ceph/ExternalSecret-rook-ceph-rgw-cloudflared-secret.yaml

@@ -4,10 +4,10 @@ metadata:
   name: rook-ceph-rgw-cloudflared-secret
   namespace: rook-ceph
   labels:
-    helm.sh/chart: cloudflared-rgw-2.3.0
+    helm.sh/chart: cloudflared-rgw-2.4.0
     app.kubernetes.io/instance: rook-ceph
     app.kubernetes.io/part-of: rook-ceph
-    app.kubernetes.io/version: "2.3.0"
+    app.kubernetes.io/version: "2.4.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: rook-ceph-rgw-cloudflared-secret
 spec:

clusters/cl01tl/manifests/rybbit/Deployment-rybbit-cloudflared.yaml

@@ -7,8 +7,8 @@ metadata:
     app.kubernetes.io/instance: rybbit
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cloudflared
-    app.kubernetes.io/version: 2026.2.0
+    app.kubernetes.io/version: 2026.3.0
-    helm.sh/chart: cloudflared-2.3.0
+    helm.sh/chart: cloudflared-2.4.0
   namespace: rybbit
 spec:
   revisionHistoryLimit: 3
@@ -49,7 +49,7 @@ spec:
                 secretKeyRef:
                   key: cf-tunnel-token
                   name: rybbit-cloudflared-secret
-          image: cloudflare/cloudflared:2026.2.0
+          image: cloudflare/cloudflared:2026.3.0
           imagePullPolicy: IfNotPresent
           name: main
           resources:

clusters/cl01tl/manifests/rybbit/ExternalSecret-rybbit-cloudflared-secret.yaml

@@ -4,10 +4,10 @@ metadata:
   name: rybbit-cloudflared-secret
   namespace: rybbit
   labels:
-    helm.sh/chart: cloudflared-2.3.0
+    helm.sh/chart: cloudflared-2.4.0
     app.kubernetes.io/instance: rybbit
     app.kubernetes.io/part-of: rybbit
-    app.kubernetes.io/version: "2.3.0"
+    app.kubernetes.io/version: "2.4.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: rybbit-cloudflared-secret
 spec:

clusters/cl01tl/manifests/site-documentation/Deployment-site-documentation-cloudflared.yaml

@@ -7,8 +7,8 @@ metadata:
     app.kubernetes.io/instance: site-documentation
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cloudflared
-    app.kubernetes.io/version: 2026.2.0
+    app.kubernetes.io/version: 2026.3.0
-    helm.sh/chart: cloudflared-2.3.0
+    helm.sh/chart: cloudflared-2.4.0
   namespace: site-documentation
 spec:
   revisionHistoryLimit: 3
@@ -49,7 +49,7 @@ spec:
                 secretKeyRef:
                   key: cf-tunnel-token
                   name: site-documentation-cloudflared-secret
-          image: cloudflare/cloudflared:2026.2.0
+          image: cloudflare/cloudflared:2026.3.0
           imagePullPolicy: IfNotPresent
           name: main
           resources:

clusters/cl01tl/manifests/site-documentation/ExternalSecret-site-documentation-cloudflared-secret.yaml

@@ -4,10 +4,10 @@ metadata:
   name: site-documentation-cloudflared-secret
   namespace: site-documentation
   labels:
-    helm.sh/chart: cloudflared-2.3.0
+    helm.sh/chart: cloudflared-2.4.0
     app.kubernetes.io/instance: site-documentation
     app.kubernetes.io/part-of: site-documentation
-    app.kubernetes.io/version: "2.3.0"
+    app.kubernetes.io/version: "2.4.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: site-documentation-cloudflared-secret
 spec:

clusters/cl01tl/manifests/site-profile/Deployment-site-profile-cloudflared.yaml

@@ -7,8 +7,8 @@ metadata:
     app.kubernetes.io/instance: site-profile
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cloudflared
-    app.kubernetes.io/version: 2026.2.0
+    app.kubernetes.io/version: 2026.3.0
-    helm.sh/chart: cloudflared-2.3.0
+    helm.sh/chart: cloudflared-2.4.0
   namespace: site-profile
 spec:
   revisionHistoryLimit: 3
@@ -49,7 +49,7 @@ spec:
                 secretKeyRef:
                   key: cf-tunnel-token
                   name: site-profile-cloudflared-secret
-          image: cloudflare/cloudflared:2026.2.0
+          image: cloudflare/cloudflared:2026.3.0
           imagePullPolicy: IfNotPresent
           name: main
           resources:

clusters/cl01tl/manifests/site-profile/ExternalSecret-site-profile-cloudflared-secret.yaml

@@ -4,10 +4,10 @@ metadata:
   name: site-profile-cloudflared-secret
   namespace: site-profile
   labels:
-    helm.sh/chart: cloudflared-2.3.0
+    helm.sh/chart: cloudflared-2.4.0
     app.kubernetes.io/instance: site-profile
     app.kubernetes.io/part-of: site-profile
-    app.kubernetes.io/version: "2.3.0"
+    app.kubernetes.io/version: "2.4.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: site-profile-cloudflared-secret
 spec:

clusters/cl01tl/manifests/vaultwarden/Deployment-vaultwarden-cloudflared.yaml

@@ -7,8 +7,8 @@ metadata:
     app.kubernetes.io/instance: vaultwarden
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cloudflared
-    app.kubernetes.io/version: 2026.2.0
+    app.kubernetes.io/version: 2026.3.0
-    helm.sh/chart: cloudflared-2.3.0
+    helm.sh/chart: cloudflared-2.4.0
   namespace: vaultwarden
 spec:
   revisionHistoryLimit: 3
@@ -49,7 +49,7 @@ spec:
                 secretKeyRef:
                   key: cf-tunnel-token
                   name: vaultwarden-cloudflared-secret
-          image: cloudflare/cloudflared:2026.2.0
+          image: cloudflare/cloudflared:2026.3.0
           imagePullPolicy: IfNotPresent
           name: main
           resources:

clusters/cl01tl/manifests/vaultwarden/ExternalSecret-vaultwarden-cloudflared-secret.yaml

@@ -4,10 +4,10 @@ metadata:
   name: vaultwarden-cloudflared-secret
   namespace: vaultwarden
   labels:
-    helm.sh/chart: cloudflared-2.3.0
+    helm.sh/chart: cloudflared-2.4.0
     app.kubernetes.io/instance: vaultwarden
     app.kubernetes.io/part-of: vaultwarden
-    app.kubernetes.io/version: "2.3.0"
+    app.kubernetes.io/version: "2.4.0"
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: vaultwarden-cloudflared-secret
 spec: