Merge pull request 'chore(deps): update helm release authentik to v2026.8.4' (#124) from renovate/authentik-2026.x into main

Reviewed-on: #124

authentik/Chart.yaml

@@ -24,5 +24,5 @@ appVersion: "1.0"
 
 dependencies:
 - name: authentik
-  version: 2026.8.3
+  version: 2026.8.4
   repository: https://charts.goauthentik.io

netmaker/gateway.yaml

@@ -0,0 +1,18 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: Gateway
+metadata:
+  name: traefik
+spec:
+  gatewayClassName: traefik
+  listeners:
+    - name: https
+      protocol: HTTPS
+      port: 8443
+      tls:
+        mode: Terminate
+        certificateRefs:
+          - name: cert-dubyatp-xyz
+            namespace: cert-manager
+      allowedRoutes:
+        namespaces:
+          from: Same

netmaker/httproute.yaml

@@ -0,0 +1,19 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: netmaker-api
+spec:
+  parentRefs:
+    - name: traefik
+      sectionName: https
+      kind: Gateway
+  hostnames:
+    - api.netmaker.infra.dubyatp.xyz
+  rules:
+     - matches:
+        - path:
+            type: PathPrefix
+            value: /
+       backendRefs:
+        - name: netmaker-rest
+          port: 8081

netmaker/ingress.yaml

@@ -1,16 +0,0 @@
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: netmaker-api-ingress
-spec:
-  rules:
-  - host: api.netmaker.infra.dubyatp.xyz
-    http:
-      paths:
-      - pathType: Prefix
-        path: "/"
-        backend:
-          service:
-            name: netmaker-rest
-            port: 
-              number: 8081

netmaker/mosquitto/httproute.yaml

@@ -0,0 +1,19 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: mosquitto
+spec:
+  parentRefs:
+    - name: traefik
+      sectionName: https
+      kind: Gateway
+  hostnames:
+    - broker.netmaker.infra.dubyatp.xyz
+  rules:
+     - matches:
+        - path:
+            type: PathPrefix
+            value: /
+       backendRefs:
+        - name: mq
+          port: 8883

netmaker/mosquitto/ingress.yaml

@@ -1,18 +0,0 @@
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: mosquitto-ingress
-  labels:
-    app.kubernetes.io/name: mosquitto-ingress
-spec:
-  rules:
-  - host: broker.netmaker.infra.dubyatp.xyz
-    http:
-      paths:
-      - pathType: Prefix
-        path: "/"
-        backend:
-          service:
-            name: mq
-            port: 
-              number: 8883

netmaker/ui/httproute.yaml

@@ -0,0 +1,19 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: netmaker-ui
+spec:
+  parentRefs:
+    - name: traefik
+      sectionName: https
+      kind: Gateway
+  hostnames:
+    - dashboard.netmaker.infra.dubyatp.xyz
+  rules:
+     - matches:
+        - path:
+            type: PathPrefix
+            value: /
+       backendRefs:
+        - name: netmaker-ui
+          port: 80

netmaker/ui/ingress.yaml

@@ -1,16 +0,0 @@
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: netmaker-ui-ingress
-spec:
-  rules:
-  - host: dashboard.netmaker.infra.dubyatp.xyz
-    http:
-      paths:
-      - pathType: Prefix
-        path: "/"
-        backend:
-          service:
-            name: netmaker-ui
-            port: 
-              number: 80

nextcloud/gateway.yaml

@@ -0,0 +1,18 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: Gateway
+metadata:
+  name: traefik
+spec:
+  gatewayClassName: traefik
+  listeners:
+    - name: https
+      protocol: HTTPS
+      port: 8443
+      tls:
+        mode: Terminate
+        certificateRefs:
+          - name: cert-dubyatp-xyz
+            namespace: cert-manager
+      allowedRoutes:
+        namespaces:
+          from: Same

nextcloud/httproute.yaml

@@ -0,0 +1,19 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: nextcloud
+spec:
+  parentRefs:
+    - name: traefik
+      sectionName: https
+      kind: Gateway
+  hostnames:
+    - nextcloud.dubyatp.xyz
+  rules:
+     - matches:
+        - path:
+            type: PathPrefix
+            value: /
+       backendRefs:
+        - name: nextcloud
+          port: 80

nextcloud/ingress.yaml

@@ -1,24 +0,0 @@
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: nextcloud
-  annotations:
-    traefik.ingress.kubernetes.io/router.middlewares: nextcloud-nextcloud-headers@kubernetescrd,nextcloud-nextcloud-redirectregex@kubernetescrd
-  labels:
-    name: nextcloud
-spec:
-  rules:
-  - host: nextcloud.dubyatp.xyz
-    http:
-      paths:
-      - pathType: Prefix
-        path: "/"
-        backend:
-          service:
-            name: nextcloud
-            port: 
-              number: 80
-  tls:
-    - secretName: cert-dubyatp-xyz
-      hosts:
-        - nextcloud.dubyatp.xyz

vaultwarden/deployment.yaml

@@ -17,7 +17,7 @@ spec:
     spec:
       containers:
       - name: vaultwarden
-        image: vaultwarden/server:1.37.0-alpine
+        image: vaultwarden/server:1.37.4-alpine
         livenessProbe:
           exec:
             command:

vaultwarden/gateway.yaml

@@ -0,0 +1,18 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: Gateway
+metadata:
+  name: traefik
+spec:
+  gatewayClassName: traefik
+  listeners:
+    - name: https
+      protocol: HTTPS
+      port: 8443
+      tls:
+        mode: Terminate
+        certificateRefs:
+          - name: cert-dubyatp-xyz
+            namespace: cert-manager
+      allowedRoutes:
+        namespaces:
+          from: Same

vaultwarden/httproute.yaml

@@ -0,0 +1,19 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: vaultwarden
+spec:
+  parentRefs:
+    - name: traefik
+      sectionName: https
+      kind: Gateway
+  hostnames:
+    - vaultwarden.dubyatp.xyz
+  rules:
+     - matches:
+        - path:
+            type: PathPrefix
+            value: /
+       backendRefs:
+        - name: vaultwarden-svc
+          port: 80

vaultwarden/ingress.yaml

@@ -1,24 +0,0 @@
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: vaultwarden
-  labels:
-    name: vaultwarden
-  annotations:
-    traefik.ingress.kubernetes.io/router.middlewares: cloudflarewarp@file
-spec:
-  rules:
-  - host: vaultwarden.dubyatp.xyz
-    http:
-      paths:
-      - pathType: Prefix
-        path: "/"
-        backend:
-          service:
-            name: vaultwarden-svc
-            port: 
-              number: 80
-  tls:
-  - hosts:
-    - vaultwarden.dubyatp.xyz
-    secretName: cert-dubyatp-xyz

whatismyip/gateway.yaml

@@ -0,0 +1,18 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: Gateway
+metadata:
+  name: traefik
+spec:
+  gatewayClassName: traefik
+  listeners:
+    - name: https
+      protocol: HTTPS
+      port: 8443
+      tls:
+        mode: Terminate
+        certificateRefs:
+          - name: cert-dubyatp-xyz
+            namespace: cert-manager
+      allowedRoutes:
+        namespaces:
+          from: Same

whatismyip/httproute.yaml

@@ -0,0 +1,25 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: whatismyip-ingress
+spec:
+  parentRefs:
+    - name: traefik
+      sectionName: https
+      kind: Gateway
+  hostnames:
+    - whatismyip.dubyatp.xyz
+  rules:
+     - matches:
+        - path:
+            type: PathPrefix
+            value: /
+       backendRefs:
+        - name: whatismyip-svc
+          port: 8080
+       filters:
+        - type: ExtensionRef
+          extensionRef:
+            group: traefik.io
+            kind: Middleware
+            name: cloudflarewarp

whatismyip/ingress.yaml

@@ -1,22 +0,0 @@
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: whatismyip-ingress
-  annotations:
-    traefik.ingress.kubernetes.io/router.middlewares: cloudflarewarp@file
-spec:
-  rules:
-  - host: whatismyip.dubyatp.xyz
-    http:
-      paths:
-      - pathType: Prefix
-        path: "/"
-        backend:
-          service:
-            name: whatismyip-svc
-            port: 
-              number: 8080
-  tls:
-  - hosts:
-    - whatismyip.dubyatp.xyz
-    secretName: cert-dubyatp-xyz

whatismyip/middleware.yaml

@@ -0,0 +1,8 @@
+apiVersion: traefik.io/v1alpha1
+kind: Middleware
+metadata:
+  name: cloudflarewarp
+spec:
+  chain:
+    middlewares:
+      - name: cloudflarewarp@file