From 55c891b33226488128ab63eae906b95f08f08a81 Mon Sep 17 00:00:00 2001
From: Alex Lebens <alexanderlebens@gmail.com>
Date: Sun, 15 Mar 2026 17:47:45 -0500
Subject: [PATCH 1/2] feat: remove systemd mounts

---
 clusters/cl01tl/helm/trivy/values.yaml | 40 ++++++++++++++++++++++++++
 1 file changed, 40 insertions(+)

diff --git a/clusters/cl01tl/helm/trivy/values.yaml b/clusters/cl01tl/helm/trivy/values.yaml
index 5d6cce425..fd4220dd4 100644
--- a/clusters/cl01tl/helm/trivy/values.yaml
+++ b/clusters/cl01tl/helm/trivy/values.yaml
@@ -2,6 +2,7 @@ trivy-operator:
   targetWorkloads: "pod,replicaset,replicationcontroller,statefulset,daemonset,cronjob,job"
   operator:
     replicas: 1
+    scanJobsConcurrentLimit: 3
     vulnerabilityScannerEnabled: true
     sbomGenerationEnabled: true
     clusterSbomCacheEnabled: true
@@ -45,3 +46,42 @@ trivy-operator:
           cpu: 200m
           memory: 512Mi
       replicas: 1
+nodeCollector:
+  volumeMounts:
+    - name: var-lib-etcd
+      mountPath: /var/lib/etcd
+      readOnly: true
+    - name: var-lib-kubelet
+      mountPath: /var/lib/kubelet
+      readOnly: true
+    - name: var-lib-kube-scheduler
+      mountPath: /var/lib/kube-scheduler
+      readOnly: true
+    - name: var-lib-kube-controller-manager
+      mountPath: /var/lib/kube-controller-manager
+      readOnly: true
+    - name: etc-kubernetes
+      mountPath: /etc/kubernetes
+      readOnly: true
+    - name: etc-cni-netd
+      mountPath: /etc/cni/net.d/
+      readOnly: true
+  volumes:
+    - name: var-lib-etcd
+      hostPath:
+        path: /var/lib/etcd
+    - name: var-lib-kubelet
+      hostPath:
+        path: /var/lib/kubelet
+    - name: var-lib-kube-scheduler
+      hostPath:
+        path: /var/lib/kube-scheduler
+    - name: var-lib-kube-controller-manager
+      hostPath:
+        path: /var/lib/kube-controller-manager
+    - name: etc-kubernetes
+      hostPath:
+        path: /etc/kubernetes
+    - name: etc-cni-netd
+      hostPath:
+        path: /etc/cni/net.d/
-- 
2.49.1


From 773dbadfdf62091a802ca60f6ce0c538b7d04866 Mon Sep 17 00:00:00 2001
From: Renovate Bot <renovate-bot@alexlebens.net>
Date: Sun, 15 Mar 2026 22:34:42 +0000
Subject: [PATCH 2/2] chore(deps): update ghcr.io/linuxserver/plex:1.43.0
 docker digest to 84f8646 (#4773)

---
 clusters/cl01tl/helm/plex/values.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/clusters/cl01tl/helm/plex/values.yaml b/clusters/cl01tl/helm/plex/values.yaml
index e8683b332..1ee25cfd4 100644
--- a/clusters/cl01tl/helm/plex/values.yaml
+++ b/clusters/cl01tl/helm/plex/values.yaml
@@ -9,7 +9,7 @@ plex:
         main:
           image:
             repository: ghcr.io/linuxserver/plex
-            tag: 1.43.0@sha256:79dfc89947410ec120a3e34cf68f746f6f154de20772e6f27b9998ca9bd65a5e
+            tag: 1.43.0@sha256:84f8646e799f6636876ab4f283d9fc8f6c51d56098ea74cba82bfb85074b68df
             pullPolicy: IfNotPresent
           env:
             - name: TZ
-- 
2.49.1