Merge pull request 'chore(deps): update helm release authentik to v2026.5.5' (#112) from renovate/authentik-2026.x into main

Reviewed-on: #112

attic/cert-dubyatp-xyz.yaml

@@ -1,10 +0,0 @@
-apiVersion: v1
-kind: Secret
-metadata:
-  name: cert-dubyatp-xyz
-  annotations:
-    replicator.v1.mittwald.de/replicate-from: "cert-manager/cert-dubyatp-xyz"
-    replicator.v1.mittwald.de/replicated-keys: "tls.crt,tls.key"
-data:
-  tls.crt: ""
-  tls.key: ""

attic/gateway.yaml

@@ -0,0 +1,18 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: Gateway
+metadata:
+  name: traefik
+spec:
+  gatewayClassName: traefik
+  listeners:
+    - name: https
+      protocol: HTTPS
+      port: 8443
+      tls:
+        mode: Terminate
+        certificateRefs:
+          - name: cert-dubyatp-xyz
+            namespace: cert-manager
+      allowedRoutes:
+        namespaces:
+          from: Same

attic/httproute.yaml

@@ -0,0 +1,19 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: attic
+spec:
+  parentRefs:
+    - name: traefik
+      sectionName: https
+      kind: Gateway
+  hostnames:
+    - nix-cache.dubyatp.xyz
+  rules:
+     - matches:
+        - path:
+            type: PathPrefix
+            value: /
+       backendRefs:
+        - name: attic-svc
+          port: 8080

authentik/Chart.yaml

@@ -24,5 +24,5 @@ appVersion: "1.0"
 
 dependencies:
 - name: authentik
-  version: 2026.5.3
+  version: 2026.5.5
   repository: https://charts.goauthentik.io

authentik/values.yaml

@@ -77,6 +77,24 @@ authentik:
             name: authentik-files
             key: AWS_SECRET_ACCESS_KEY      
   additionalObjects:
+    - apiVersion: gateway.networking.k8s.io/v1
+      kind: Gateway
+      metadata:
+        name: traefik
+      spec:
+        gatewayClassName: traefik
+        listeners:
+          - name: https
+            protocol: HTTPS
+            port: 8443
+            tls:
+              mode: Terminate
+              certificateRefs:
+                - name: cert-dubyatp-xyz
+                  namespace: cert-manager
+            allowedRoutes:
+              namespaces:
+                from: Same
     - apiVersion: networking.k8s.io/v1
       kind: Ingress
       metadata:

gitea/Chart.yaml

@@ -24,5 +24,5 @@ appVersion: "1.0"
 
 dependencies:
 - name: gitea
-  version: 12.6.1
+  version: 12.7.0
   repository: https://weyma-s3.infra.dubyatp.xyz/helm-bucket-ea34bc44-ef19-480d-a16a-1e583991f123/charts/

gitea/values.yaml

@@ -1,15 +1,27 @@
 gitea:
   replicaCount: 3
-  ingress:
+#  ingress:
+#    enabled: true
+#    hosts:
+#      - host: git.dubyatp.xyz
+#        paths:
+#          - path: /
+#    tls:
+#      - secretName: cert-dubyatp-xyz
+#        hosts:
+#          - git.dubyatp.xyz
+  gateway:
+    httpRoute:
       enabled: true
-    hosts:
+      hostnames:
-      - host: git.dubyatp.xyz
+        - git.dubyatp.xyz
+      parentRefs:
+        - name: traefik
+          sectionName: https
+          kind: Gateway
+      pathType: PathPrefix
       paths:
         - path: /
-    tls:
-      - secretName: cert-dubyatp-xyz
-        hosts:
-          - git.dubyatp.xyz
   persistence:
     enabled: true
     create: true
@@ -105,16 +117,24 @@ gitea:
           services:
           - name: gitea-ssh
             port: 22
-    - apiVersion: v1
+    - apiVersion: gateway.networking.k8s.io/v1
-      kind: Secret
+      kind: Gateway
       metadata:
-        name: cert-dubyatp-xyz
+        name: traefik
-        annotations:
+      spec:
-          replicator.v1.mittwald.de/replicate-from: "cert-manager/cert-dubyatp-xyz"
+        gatewayClassName: traefik
-          replicator.v1.mittwald.de/replicated-keys: "tls.crt,tls.key"
+        listeners:
-      data:
+          - name: https
-        tls.crt: ""
+            protocol: HTTPS
-        tls.key: ""
+            port: 8443
+            tls:
+              mode: Terminate
+              certificateRefs:
+                - name: cert-dubyatp-xyz
+                  namespace: cert-manager
+            allowedRoutes:
+              namespaces:
+                from: Same
     - apiVersion: external-secrets.io/v1
       kind: ExternalSecret
       metadata:

jellyfin/templates/gateway.yaml

@@ -0,0 +1,18 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: Gateway
+metadata:
+  name: traefik
+spec:
+  gatewayClassName: traefik
+  listeners:
+    - name: https
+      protocol: HTTPS
+      port: 8443
+      tls:
+        mode: Terminate
+        certificateRefs:
+          - name: cert-dubyatp-xyz
+            namespace: cert-manager
+      allowedRoutes:
+        namespaces:
+          from: Same

jellyfin/templates/metrics-block.yaml

@@ -1,4 +1,4 @@
-{{- if and (.Values.jellyfin.metrics.enabled) (.Values.jellyfin.ingress.enabled) -}}
+{{- if and (.Values.jellyfin.metrics.enabled) (.Values.jellyfin.httpRoute.enabled) -}}
 ---
 apiVersion: v1
 kind: Service
@@ -13,21 +13,22 @@ spec:
       port: 6767
       targetPort: 6767
 ---
-apiVersion: networking.k8s.io/v1
+apiVersion: gateway.networking.k8s.io/v1
-kind: Ingress
+kind: HTTPRoute
 metadata:
   name: block-metrics
   namespace: {{ .Release.Namespace }}
 spec:
+  parentRefs:
+    {{- toYaml .Values.jellyfin.httpRoute.parentRefs | nindent 4 }}
+  hostnames:
+    {{- toYaml .Values.jellyfin.httpRoute.hostnames | nindent 4 }}
   rules:
-  - host: {{ (index .Values.jellyfin.ingress.hosts 0).host }}
+    - matches:
-    http:
+        - path:
-      paths:
+            type: PathPrefix
-      - pathType: Prefix
+            value: /metrics
-        path: "/metrics"
+      backendRefs:
-        backend:
+        - name: dummy-svc
-          service:
+          port: 6767
-            name: dummy-svc
-            port: 
-              number: 6767
 {{- end }}

jellyfin/templates/ssl-cert.yaml

@@ -1,11 +0,0 @@
-apiVersion: v1
-data:
-  tls.crt:
-  tls.key:
-kind: Secret
-metadata:
-  annotations:
-    replicator.v1.mittwald.de/replicate-from: cert-manager/cert-dubyatp-xyz
-    replicator.v1.mittwald.de/replicated-keys: tls.crt,tls.key
-  name: cert-dubyatp-xyz
-type: Opaque

jellyfin/values.yaml

@@ -1,16 +1,13 @@
 jellyfin:
   deploymentStrategy:
     type: Recreate
-  ingress:
+  httpRoute:
     enabled: true
-    hosts:
+    parentRefs:
-      - host: jellyfin.dubyatp.xyz
+      - name: traefik
-        paths:
+        sectionName: https
-          - path: /
+        kind: Gateway
-            pathType: ImplementationSpecific
+    hostnames:
-    tls:
-      - secretName: cert-dubyatp.xyz
-        hosts:
       - jellyfin.dubyatp.xyz
   persistence:
     config:

yt-dlp-bot/deployment.yaml

@@ -14,7 +14,7 @@ spec:
     spec:
       containers:
         - name: yt-dlp-bot
-          image: 'git.dubyatp.xyz/williamp/yt-dlp-bot:7c4c14d'
+          image: 'git.dubyatp.xyz/williamp/yt-dlp-bot:f48776c'
           env:
             - name: OUT_PATH
               value: /data/youtube-vids