chore(deps): update docker.io/bats/bats docker tag to v1.14.0

Reviewed-on: #112

arr-stack/tunnel/deployment.yaml

@@ -14,7 +14,7 @@ spec:
       containers:
       - name: deluge-tunnel
         image: kroniak/ssh-client:3.21
-        command: ["/bin/sh", "-c", "ssh -o StrictHostKeyChecking=no weyma-talos@45.152.211.243 -p 2222 -L 0.0.0.0:58846:127.0.0.1:58846 -L 0.0.0.0:8112:127.0.0.1:8112 -N"]
+        command: ["/bin/sh", "-c", "ssh -o StrictHostKeyChecking=no weyma-talos@184.107.106.14 -L 0.0.0.0:58846:127.0.0.1:58846 -L 0.0.0.0:8112:127.0.0.1:8112 -N"]
         volumeMounts:
           - name: ssh-keys
             mountPath: /root/.ssh

attic/cert-dubyatp-xyz.yaml

@@ -1,10 +0,0 @@
-apiVersion: v1
-kind: Secret
-metadata:
-  name: cert-dubyatp-xyz
-  annotations:
-    replicator.v1.mittwald.de/replicate-from: "cert-manager/cert-dubyatp-xyz"
-    replicator.v1.mittwald.de/replicated-keys: "tls.crt,tls.key"
-data:
-  tls.crt: ""
-  tls.key: ""

attic/gateway.yaml

@@ -0,0 +1,18 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: Gateway
+metadata:
+  name: traefik
+spec:
+  gatewayClassName: traefik
+  listeners:
+    - name: https
+      protocol: HTTPS
+      port: 8443
+      tls:
+        mode: Terminate
+        certificateRefs:
+          - name: cert-dubyatp-xyz
+            namespace: cert-manager
+      allowedRoutes:
+        namespaces:
+          from: Same

attic/httproute.yaml

@@ -0,0 +1,19 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: attic
+spec:
+  parentRefs:
+    - name: traefik
+      sectionName: https
+      kind: Gateway
+  hostnames:
+    - nix-cache.dubyatp.xyz
+  rules:
+     - matches:
+        - path:
+            type: PathPrefix
+            value: /
+       backendRefs:
+        - name: attic-svc
+          port: 8080

authentik/Chart.yaml

@@ -24,5 +24,5 @@ appVersion: "1.0"
 
 dependencies:
 - name: authentik
-  version: 2026.2.2
+  version: 2026.5.5
   repository: https://charts.goauthentik.io

authentik/values.yaml

@@ -77,6 +77,24 @@ authentik:
             name: authentik-files
             key: AWS_SECRET_ACCESS_KEY      
   additionalObjects:
+    - apiVersion: gateway.networking.k8s.io/v1
+      kind: Gateway
+      metadata:
+        name: traefik
+      spec:
+        gatewayClassName: traefik
+        listeners:
+          - name: https
+            protocol: HTTPS
+            port: 8443
+            tls:
+              mode: Terminate
+              certificateRefs:
+                - name: cert-dubyatp-xyz
+                  namespace: cert-manager
+            allowedRoutes:
+              namespaces:
+                from: Same
     - apiVersion: networking.k8s.io/v1
       kind: Ingress
       metadata:

gitea/Chart.yaml

@@ -24,5 +24,5 @@ appVersion: "1.0"
 
 dependencies:
 - name: gitea
-  version: 12.5.10
+  version: 12.7.0
   repository: https://weyma-s3.infra.dubyatp.xyz/helm-bucket-ea34bc44-ef19-480d-a16a-1e583991f123/charts/

gitea/values.yaml

@@ -1,15 +1,27 @@
 gitea:
   replicaCount: 3
-  ingress:
+#  ingress:
+#    enabled: true
+#    hosts:
+#      - host: git.dubyatp.xyz
+#        paths:
+#          - path: /
+#    tls:
+#      - secretName: cert-dubyatp-xyz
+#        hosts:
+#          - git.dubyatp.xyz
+  gateway:
+    httpRoute:
       enabled: true
-    hosts:
+      hostnames:
-      - host: git.dubyatp.xyz
+        - git.dubyatp.xyz
+      parentRefs:
+        - name: traefik
+          sectionName: https
+          kind: Gateway
+      pathType: PathPrefix
       paths:
         - path: /
-    tls:
-      - secretName: cert-dubyatp-xyz
-        hosts:
-          - git.dubyatp.xyz
   persistence:
     enabled: true
     create: true
@@ -105,16 +117,24 @@ gitea:
           services:
           - name: gitea-ssh
             port: 22
-    - apiVersion: v1
+    - apiVersion: gateway.networking.k8s.io/v1
-      kind: Secret
+      kind: Gateway
       metadata:
-        name: cert-dubyatp-xyz
+        name: traefik
-        annotations:
+      spec:
-          replicator.v1.mittwald.de/replicate-from: "cert-manager/cert-dubyatp-xyz"
+        gatewayClassName: traefik
-          replicator.v1.mittwald.de/replicated-keys: "tls.crt,tls.key"
+        listeners:
-      data:
+          - name: https
-        tls.crt: ""
+            protocol: HTTPS
-        tls.key: ""
+            port: 8443
+            tls:
+              mode: Terminate
+              certificateRefs:
+                - name: cert-dubyatp-xyz
+                  namespace: cert-manager
+            allowedRoutes:
+              namespaces:
+                from: Same
     - apiVersion: external-secrets.io/v1
       kind: ExternalSecret
       metadata:

grafana/values.yaml

@@ -191,6 +191,6 @@ grafana:
     image:
       registry: docker.io
       repository: bats/bats
-      tag: 1.13.0
+      tag: 1.14.0
     imagePullPolicy: IfNotPresent
   useStatefulSet: false

jellyfin/Chart.yaml

@@ -24,5 +24,5 @@ appVersion: "1.0"
 
 dependencies:
 - name: jellyfin
-  version: 3.0.0
+  version: 3.2.0
   repository: https://jellyfin.github.io/jellyfin-helm

jellyfin/templates/gateway.yaml

@@ -0,0 +1,18 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: Gateway
+metadata:
+  name: traefik
+spec:
+  gatewayClassName: traefik
+  listeners:
+    - name: https
+      protocol: HTTPS
+      port: 8443
+      tls:
+        mode: Terminate
+        certificateRefs:
+          - name: cert-dubyatp-xyz
+            namespace: cert-manager
+      allowedRoutes:
+        namespaces:
+          from: Same

jellyfin/templates/metrics-block.yaml

@@ -1,4 +1,4 @@
-{{- if and (.Values.jellyfin.metrics.enabled) (.Values.jellyfin.ingress.enabled) -}}
+{{- if and (.Values.jellyfin.metrics.enabled) (.Values.jellyfin.httpRoute.enabled) -}}
 ---
 apiVersion: v1
 kind: Service
@@ -13,21 +13,22 @@ spec:
       port: 6767
       targetPort: 6767
 ---
-apiVersion: networking.k8s.io/v1
+apiVersion: gateway.networking.k8s.io/v1
-kind: Ingress
+kind: HTTPRoute
 metadata:
   name: block-metrics
   namespace: {{ .Release.Namespace }}
 spec:
+  parentRefs:
+    {{- toYaml .Values.jellyfin.httpRoute.parentRefs | nindent 4 }}
+  hostnames:
+    {{- toYaml .Values.jellyfin.httpRoute.hostnames | nindent 4 }}
   rules:
-  - host: {{ (index .Values.jellyfin.ingress.hosts 0).host }}
+    - matches:
-    http:
+        - path:
-      paths:
+            type: PathPrefix
-      - pathType: Prefix
+            value: /metrics
-        path: "/metrics"
+      backendRefs:
-        backend:
+        - name: dummy-svc
-          service:
+          port: 6767
-            name: dummy-svc
-            port: 
-              number: 6767
 {{- end }}

jellyfin/templates/ssl-cert.yaml

@@ -1,11 +0,0 @@
-apiVersion: v1
-data:
-  tls.crt:
-  tls.key:
-kind: Secret
-metadata:
-  annotations:
-    replicator.v1.mittwald.de/replicate-from: cert-manager/cert-dubyatp-xyz
-    replicator.v1.mittwald.de/replicated-keys: tls.crt,tls.key
-  name: cert-dubyatp-xyz
-type: Opaque

jellyfin/values.yaml

@@ -1,16 +1,13 @@
 jellyfin:
   deploymentStrategy:
     type: Recreate
-  ingress:
+  httpRoute:
     enabled: true
-    hosts:
+    parentRefs:
-      - host: jellyfin.dubyatp.xyz
+      - name: traefik
-        paths:
+        sectionName: https
-          - path: /
+        kind: Gateway
-            pathType: ImplementationSpecific
+    hostnames:
-    tls:
-      - secretName: cert-dubyatp.xyz
-        hosts:
       - jellyfin.dubyatp.xyz
   persistence:
     config:

netmaker/statefulset.yaml

@@ -54,7 +54,7 @@ spec:
         envFrom:
           - configMapRef:
               name: netmaker-config
-        image: gravitl/netmaker:v1.4.0
+        image: gravitl/netmaker:v1.6.0
         imagePullPolicy: Always
         name: netmaker
         ports:

netmaker/ui/deployment.yaml

@@ -14,7 +14,7 @@ spec:
     spec:
       containers:
       - name: netmaker-ui
-        image: gravitl/netmaker-ui:v1.1.0
+        image: gravitl/netmaker-ui:v1.6.0
         env:
         - name: BACKEND_URL
           value: 'https://api.netmaker.infra.dubyatp.xyz'

searxng/Chart.yaml

@@ -0,0 +1,28 @@
+apiVersion: v2
+name: searxng
+description: A Helm chart for Kubernetes
+
+# A chart can be either an 'application' or a 'library' chart.
+#
+# Application charts are a collection of templates that can be packaged into versioned archives
+# to be deployed.
+#
+# Library charts provide useful utilities or functions for the chart developer. They're included as
+# a dependency of application charts to inject those utilities and functions into the rendering
+# pipeline. Library charts do not define any templates and therefore cannot be deployed.
+type: application
+
+# This is the chart version. This version number should be incremented each time you make changes
+# to the chart and its templates, including the app version.
+# Versions are expected to follow Semantic Versioning (https://semver.org/)
+version: 0.1.0
+
+# This is the version number of the application being deployed. This version number should be
+# incremented each time you make changes to the application. Versions are not expected to
+# follow Semantic Versioning. They should reflect the version the application is using.
+appVersion: "1.0"
+
+dependencies:
+- name: searxng
+  version: 1.1.4
+  repository: https://charts.kubito.dev

yt-dlp-bot/deployment.yaml

@@ -14,7 +14,7 @@ spec:
     spec:
       containers:
         - name: yt-dlp-bot
-          image: 'git.dubyatp.xyz/williamp/yt-dlp-bot:5465bd4'
+          image: 'git.dubyatp.xyz/williamp/yt-dlp-bot:f48776c'
           env:
             - name: OUT_PATH
               value: /data/youtube-vids