Compare commits

...

92 Commits

Author SHA1 Message Date
renovate-bot 01c6705205 chore(deps): update helm release rook-ceph to v1.20.0 2026-06-02 19:00:27 +00:00
williamp e97f789b83 Merge pull request 'chore(deps): update helm release velero to v12.0.2' (#325) from renovate/all-minor-patch-updates into main
Reviewed-on: #325
2026-06-01 21:38:10 +00:00
renovate-bot 83c4e9ac4a chore(deps): update helm release velero to v12.0.2 2026-06-01 06:00:32 +00:00
williamp 662e15c3ef Merge pull request 'chore(deps): update all-minor-patch-updates' (#324) from renovate/all-minor-patch-updates into main
Reviewed-on: #324
2026-05-29 23:02:34 +00:00
renovate-bot e071c1744e chore(deps): update all-minor-patch-updates 2026-05-29 18:00:28 +00:00
williamp 4821188bee Merge pull request 'chore(deps): update all-minor-patch-updates' (#323) from renovate/all-minor-patch-updates into main
Reviewed-on: #323
2026-05-29 00:04:39 +00:00
renovate-bot f5df07df08 chore(deps): update all-minor-patch-updates 2026-05-28 16:00:34 +00:00
williamp 44000eba76 rm metallb from renovate ignore 2026-05-27 19:38:48 -04:00
williamp 50ca706c5b metallb: disable frr-k8s, not needed w/ current config 2026-05-27 19:38:28 -04:00
williamp 7efdf3eb86 metallb: upgrade to 0.16.1 after upstream fixes were done 2026-05-27 19:35:29 -04:00
williamp 9abef4a475 Merge pull request 'chore(deps): update helm release kube-prometheus-stack to v86' (#322) from renovate/kube-prometheus-stack-86.x into main
Reviewed-on: #322
2026-05-27 22:01:14 +00:00
renovate-bot 2477c1f955 chore(deps): update helm release kube-prometheus-stack to v86 2026-05-27 22:00:23 +00:00
williamp c6cdd5ad22 Merge pull request 'chore(deps): update all-minor-patch-updates' (#321) from renovate/all-minor-patch-updates into main
Reviewed-on: #321
2026-05-27 21:45:09 +00:00
renovate-bot caa2b0ccd3 chore(deps): update all-minor-patch-updates 2026-05-27 19:00:35 +00:00
williamp 0c9a3db42f Merge pull request 'chore(deps): update cloudflare/cloudflared docker tag to v2026.5.1' (#320) from renovate/all-minor-patch-updates into main
Reviewed-on: #320
2026-05-25 15:17:41 +00:00
renovate-bot fdf2736021 chore(deps): update cloudflare/cloudflared docker tag to v2026.5.1 2026-05-25 11:00:30 +00:00
williamp a70e709bb8 Merge pull request 'chore(deps): update helm release kube-prometheus-stack to v85.3.3' (#319) from renovate/all-minor-patch-updates into main
Reviewed-on: #319
2026-05-25 04:20:52 +00:00
renovate-bot f9364b9c6e chore(deps): update helm release kube-prometheus-stack to v85.3.3 2026-05-24 16:00:36 +00:00
williamp 64877d4bc0 Merge pull request 'chore(deps): update helm release kube-prometheus-stack to v85.3.0' (#318) from renovate/all-minor-patch-updates into main
Reviewed-on: #318
2026-05-23 13:25:48 +00:00
renovate-bot abbc8b07d9 chore(deps): update helm release kube-prometheus-stack to v85.3.0 2026-05-23 05:00:22 +00:00
williamp c3830f0682 Merge pull request 'chore(deps): update all-minor-patch-updates' (#317) from renovate/all-minor-patch-updates into main
Reviewed-on: #317
2026-05-22 18:52:25 +00:00
renovate-bot dcaaeba125 chore(deps): update all-minor-patch-updates 2026-05-22 10:00:33 +00:00
williamp 73b4230d7e add metallb to ignored deps 2026-05-20 20:03:05 -04:00
williamp 4729708822 metallb: revert to 0.15.3 until upstream issues are resolved https://github.com/metallb/metallb/issues/3053 2026-05-20 19:51:33 -04:00
williamp a166620d28 Merge pull request 'chore(deps): update all-minor-patch-updates' (#315) from renovate/all-minor-patch-updates into main
Reviewed-on: #315
2026-05-20 23:25:55 +00:00
renovate-bot 7459ed9f70 chore(deps): update all-minor-patch-updates 2026-05-20 16:00:40 +00:00
williamp 89c6c91923 Merge pull request 'chore(deps): update helm release kube-prometheus-stack to v85.1.2' (#314) from renovate/all-minor-patch-updates into main
Reviewed-on: #314
2026-05-16 22:12:46 +00:00
renovate-bot dcdced6499 chore(deps): update helm release kube-prometheus-stack to v85.1.2 2026-05-16 19:00:22 +00:00
williamp cf917a57d7 Merge pull request 'chore(deps): update all-minor-patch-updates' (#313) from renovate/all-minor-patch-updates into main
Reviewed-on: #313
2026-05-15 22:29:47 +00:00
renovate-bot 7c3454b439 chore(deps): update all-minor-patch-updates 2026-05-15 22:00:28 +00:00
williamp 7da13df2d9 Merge pull request 'chore(deps): update all-minor-patch-updates' (#312) from renovate/all-minor-patch-updates into main
Reviewed-on: #312
2026-05-14 23:58:30 +00:00
renovate-bot 5a110d718e chore(deps): update all-minor-patch-updates 2026-05-14 07:00:28 +00:00
williamp dec862a5f4 Merge pull request 'chore(deps): update helm release kube-prometheus-stack to v85' (#310) from renovate/kube-prometheus-stack-85.x into main
Reviewed-on: #310
2026-05-12 22:29:07 +00:00
williamp c35f7db43c Merge pull request 'chore(deps): update helm release traefik to v40.1.0' (#311) from renovate/all-minor-patch-updates into main
Reviewed-on: #311
2026-05-12 22:06:39 +00:00
renovate-bot e3ac881844 chore(deps): update helm release kube-prometheus-stack to v85 2026-05-12 18:00:29 +00:00
renovate-bot cf61c7609e chore(deps): update helm release traefik to v40.1.0 2026-05-12 08:00:44 +00:00
williamp 39f321bf5e Merge pull request 'chore(deps): update helm release argo-cd to v9.5.13' (#309) from renovate/all-minor-patch-updates into main
Reviewed-on: #309
2026-05-08 21:39:17 +00:00
renovate-bot 80cb9788a0 chore(deps): update helm release argo-cd to v9.5.13 2026-05-08 18:02:31 +00:00
williamp 3b07fec227 Merge pull request 'chore(deps): update helm release traefik to v40' (#308) from renovate/traefik-40.x into main
Reviewed-on: #308
2026-05-07 22:46:36 +00:00
williamp cd49b8fc66 Merge pull request 'chore(deps): update helm release argo-cd to v9.5.12' (#307) from renovate/all-minor-patch-updates into main
Reviewed-on: #307
2026-05-07 22:44:53 +00:00
renovate-bot 640f735121 chore(deps): update helm release traefik to v40 2026-05-06 16:01:10 +00:00
renovate-bot 693ec7efda chore(deps): update helm release argo-cd to v9.5.12 2026-05-06 15:00:22 +00:00
williamp d9db0dedb7 Merge pull request 'chore(deps): update all-minor-patch-updates' (#306) from renovate/all-minor-patch-updates into main
Reviewed-on: #306
2026-05-04 23:00:34 +00:00
renovate-bot 4dd7d8550c chore(deps): update all-minor-patch-updates 2026-05-04 18:00:28 +00:00
williamp e7f0ad8006 omni: upgrade kubernetes to v1.35.4 2026-05-01 19:21:12 -04:00
williamp 78c384a8b1 Merge pull request 'chore(deps): update all-minor-patch-updates' (#305) from renovate/all-minor-patch-updates into main
Reviewed-on: #305
2026-05-01 21:55:04 +00:00
renovate-bot eb4207f8e2 chore(deps): update all-minor-patch-updates 2026-05-01 18:00:24 +00:00
williamp 28ff6422c4 omni: update uuid for weyma-talos-cp04 2026-04-29 22:58:32 -04:00
williamp 08634c018c talos: update OS to v1.12.7 to address exploit 2026-04-29 21:05:28 -04:00
williamp 3c462bde20 Merge pull request 'chore(deps): update all-minor-patch-updates' (#304) from renovate/all-minor-patch-updates into main
Reviewed-on: #304
2026-04-30 00:04:51 +00:00
renovate-bot 50379a84f1 chore(deps): update all-minor-patch-updates 2026-04-29 19:00:34 +00:00
williamp e8e83d262d Merge pull request 'chore(deps): update helm release argo-cd to v9.5.7' (#303) from renovate/all-minor-patch-updates into main
Reviewed-on: #303
2026-04-28 22:01:28 +00:00
renovate-bot 16e1870a4b chore(deps): update helm release argo-cd to v9.5.7 2026-04-28 22:00:48 +00:00
williamp bc677afea0 Merge pull request 'chore(deps): update all-minor-patch-updates' (#302) from renovate/all-minor-patch-updates into main
Reviewed-on: #302
2026-04-28 21:58:47 +00:00
renovate-bot d1886043bd chore(deps): update all-minor-patch-updates 2026-04-28 21:00:30 +00:00
williamp dd1cdd5da4 Merge pull request 'chore(deps): update all-minor-patch-updates' (#301) from renovate/all-minor-patch-updates into main
Reviewed-on: #301
2026-04-28 00:02:16 +00:00
renovate-bot 355093df0c chore(deps): update all-minor-patch-updates 2026-04-27 19:00:30 +00:00
williamp 9c702b1873 Merge pull request 'chore(deps): update helm release kube-prometheus-stack to v84.1.2' (#300) from renovate/all-minor-patch-updates into main
Reviewed-on: #300
2026-04-27 02:09:59 +00:00
renovate-bot a30f6d4e69 chore(deps): update helm release kube-prometheus-stack to v84.1.2 2026-04-27 02:00:27 +00:00
williamp f8c6a2f3e4 Merge pull request 'chore(deps): update helm release external-secrets to v2.4.0' (#299) from renovate/all-minor-patch-updates into main
Reviewed-on: #299
2026-04-25 20:08:47 +00:00
williamp 8f4d89f3d3 Merge pull request 'chore(deps): update helm release kube-prometheus-stack to v84' (#298) from renovate/kube-prometheus-stack-84.x into main
Reviewed-on: #298
2026-04-25 20:08:36 +00:00
renovate-bot fa0cfd8b67 chore(deps): update helm release kube-prometheus-stack to v84 2026-04-25 08:00:29 +00:00
renovate-bot 2af24792e7 chore(deps): update helm release external-secrets to v2.4.0 2026-04-24 19:00:39 +00:00
williamp 44246cc4c1 Merge pull request 'chore(deps): update all-minor-patch-updates' (#297) from renovate/all-minor-patch-updates into main
Reviewed-on: #297
2026-04-23 00:22:32 +00:00
renovate-bot 28e5bf90b5 chore(deps): update all-minor-patch-updates 2026-04-22 15:00:49 +00:00
williamp 7f65b1baef Merge pull request 'chore(deps): update all-minor-patch-updates' (#296) from renovate/all-minor-patch-updates into main
Reviewed-on: #296
2026-04-17 18:42:13 +00:00
renovate-bot 4fab22f7f1 chore(deps): update all-minor-patch-updates 2026-04-17 15:00:31 +00:00
williamp 5796307f10 argocd: add more 'nullBytePolicy: Ignore' to rest of external secrets 2026-04-15 10:53:59 -04:00
williamp e3858b302e argocd: add 'nullBytePolicy: Ignore' to externalsecret to avoid sync error 2026-04-15 10:52:17 -04:00
williamp b3a093d67d Merge pull request 'chore(deps): update hashicorp/vault docker tag to v2' (#295) from renovate/hashicorp-vault-2.x into main
Reviewed-on: #295
2026-04-15 14:40:42 +00:00
williamp c82138d4fe Merge pull request 'chore(deps): update all-minor-patch-updates' (#294) from renovate/all-minor-patch-updates into main
Reviewed-on: #294
2026-04-15 14:40:29 +00:00
renovate-bot 0d8af53572 chore(deps): update all-minor-patch-updates 2026-04-14 22:00:35 +00:00
renovate-bot 79751e2e7f chore(deps): update hashicorp/vault docker tag to v2 2026-04-14 21:01:03 +00:00
williamp 28ceaa11be monitoring: add nullbytePolicy to discord-webhook to fix argo sync issues 2026-04-10 12:22:25 -04:00
williamp 18eb6ac82f Merge pull request 'chore(deps): update all-minor-patch-updates' (#293) from renovate/all-minor-patch-updates into main
Reviewed-on: #293
2026-04-10 16:18:38 +00:00
renovate-bot 01fbbcef02 chore(deps): update all-minor-patch-updates 2026-04-10 15:00:31 +00:00
williamp dbf5e02807 Merge pull request 'chore(deps): update all-minor-patch-updates' (#292) from renovate/all-minor-patch-updates into main
Reviewed-on: #292
2026-04-09 01:43:46 +00:00
renovate-bot 379b2d9a2a chore(deps): update all-minor-patch-updates 2026-04-08 22:00:26 +00:00
williamp 9248d4c35a Merge pull request 'chore(deps): update helm release kube-prometheus-stack to v83.2.0' (#291) from renovate/all-minor-patch-updates into main
Reviewed-on: #291
2026-04-08 18:18:43 +00:00
renovate-bot 2f5c7b4c07 chore(deps): update helm release kube-prometheus-stack to v83.2.0 2026-04-08 18:00:35 +00:00
williamp 74b24988be Merge pull request 'chore(deps): update helm release kube-prometheus-stack to v83.1.0' (#290) from renovate/all-minor-patch-updates into main
Reviewed-on: #290
2026-04-08 12:57:08 +00:00
renovate-bot 2dd4502409 chore(deps): update helm release kube-prometheus-stack to v83.1.0 2026-04-08 10:01:18 +00:00
williamp 774cab3173 Merge pull request 'chore(deps): update helm release kube-prometheus-stack to v83.0.2' (#289) from renovate/all-minor-patch-updates into main
Reviewed-on: #289
2026-04-08 02:04:32 +00:00
renovate-bot abeaf0c881 chore(deps): update helm release kube-prometheus-stack to v83.0.2 2026-04-07 20:00:23 +00:00
williamp 7e57724ef8 Merge pull request 'chore(deps): update helm release kube-prometheus-stack to v83' (#288) from renovate/kube-prometheus-stack-83.x into main
Reviewed-on: #288
2026-04-07 15:22:36 +00:00
renovate-bot 1040199d45 chore(deps): update helm release kube-prometheus-stack to v83 2026-04-06 21:00:51 +00:00
williamp caae6992ee Merge pull request 'chore(deps): update helm release kube-prometheus-stack to v82.17.1' (#286) from renovate/all-minor-patch-updates into main
Reviewed-on: #286
2026-04-04 17:03:23 +00:00
renovate-bot 5fcedff675 chore(deps): update helm release kube-prometheus-stack to v82.17.1 2026-04-04 12:00:28 +00:00
williamp 88f65aeb67 Merge pull request 'chore(deps): update helm release kube-prometheus-stack to v82.17.0' (#285) from renovate/all-minor-patch-updates into main
Reviewed-on: #285
2026-04-04 00:39:17 +00:00
renovate-bot 49f29523c4 chore(deps): update helm release kube-prometheus-stack to v82.17.0 2026-04-03 18:00:53 +00:00
williamp c75c56d28e Merge pull request 'chore(deps): update helm release kube-prometheus-stack to v82.16.2' (#284) from renovate/all-minor-patch-updates into main
Reviewed-on: #284
2026-04-02 22:09:08 +00:00
renovate-bot 29fa53acc1 chore(deps): update helm release kube-prometheus-stack to v82.16.2 2026-04-02 22:00:30 +00:00
16 changed files with 37 additions and 18 deletions
@@ -5,7 +5,7 @@ services:
command: tunnel run weyma-vault
env_file: ".env"
vault:
image: hashicorp/vault:1.21
image: hashicorp/vault:2.0
env_file: ".env.vault"
environment:
VAULT_ADDR: "https://weyma-vault.infra.dubyatp.xyz:8200"
+5 -5
View File
@@ -1,9 +1,9 @@
kind: Cluster
name: weyma-talos
kubernetes:
version: v1.34.2
version: v1.35.4
talos:
version: v1.11.5
version: v1.12.7
features:
backupConfiguration:
interval: 6h0m0s
@@ -332,7 +332,7 @@ kind: ControlPlane
machines:
- 20b4c826-e699-43b3-826d-73eb5173680b
- 5fdea709-56ad-45f2-966d-5e344dbe4fdf
- 30303031-3030-3030-6335-303731636665
- 30303031-3030-3030-6335-303731636600
---
kind: Workers
machines:
@@ -427,9 +427,9 @@ patches:
interface: br0
---
kind: Machine
name: 30303031-3030-3030-6335-303731636665
name: 30303031-3030-3030-6335-303731636600
patches:
- idOverride: 400-cm-30303031-3030-3030-6335-303731636665
- idOverride: 400-cm-30303031-3030-3030-6335-303731636600
inline:
machine:
network:
+1 -1
View File
@@ -24,5 +24,5 @@ appVersion: "1.0"
dependencies:
- name: argo-cd
version: 9.4.17
version: 9.5.17
repository: https://argoproj.github.io/argo-helm
+16
View File
@@ -131,6 +131,7 @@ argo-cd:
conversionStrategy: Default
decodingStrategy: None
metadataPolicy: None
nullBytePolicy: Ignore
- secretKey: admin.password
remoteRef:
key: argo-cd
@@ -138,6 +139,7 @@ argo-cd:
conversionStrategy: Default
decodingStrategy: None
metadataPolicy: None
nullBytePolicy: Ignore
- secretKey: admin.passwordMtime
remoteRef:
key: argo-cd
@@ -145,6 +147,7 @@ argo-cd:
conversionStrategy: Default
decodingStrategy: None
metadataPolicy: None
nullBytePolicy: Ignore
- secretKey: dex.authentik.clientSecret
remoteRef:
key: argo-cd
@@ -152,6 +155,7 @@ argo-cd:
conversionStrategy: Default
decodingStrategy: None
metadataPolicy: None
nullBytePolicy: Ignore
- apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
@@ -175,6 +179,7 @@ argo-cd:
conversionStrategy: Default
decodingStrategy: None
metadataPolicy: None
nullBytePolicy: Ignore
- secretKey: type
remoteRef:
key: argo-cd-git
@@ -182,6 +187,7 @@ argo-cd:
conversionStrategy: Default
decodingStrategy: None
metadataPolicy: None
nullBytePolicy: Ignore
- secretKey: url
remoteRef:
key: argo-cd-git
@@ -189,6 +195,7 @@ argo-cd:
conversionStrategy: Default
decodingStrategy: None
metadataPolicy: None
nullBytePolicy: Ignore
- apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
@@ -212,6 +219,7 @@ argo-cd:
conversionStrategy: Default
decodingStrategy: None
metadataPolicy: None
nullBytePolicy: Ignore
- secretKey: type
remoteRef:
key: argo-cd-git
@@ -219,6 +227,7 @@ argo-cd:
conversionStrategy: Default
decodingStrategy: None
metadataPolicy: None
nullBytePolicy: Ignore
- secretKey: url
remoteRef:
key: argo-cd-git
@@ -226,6 +235,7 @@ argo-cd:
conversionStrategy: Default
decodingStrategy: None
metadataPolicy: None
nullBytePolicy: Ignore
- apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
@@ -249,6 +259,7 @@ argo-cd:
conversionStrategy: Default
decodingStrategy: None
metadataPolicy: None
nullBytePolicy: Ignore
- secretKey: type
remoteRef:
key: argo-cd-git
@@ -256,6 +267,7 @@ argo-cd:
conversionStrategy: Default
decodingStrategy: None
metadataPolicy: None
nullBytePolicy: Ignore
- secretKey: url
remoteRef:
key: argo-cd-git
@@ -263,6 +275,7 @@ argo-cd:
conversionStrategy: Default
decodingStrategy: None
metadataPolicy: None
nullBytePolicy: Ignore
- apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
@@ -286,6 +299,7 @@ argo-cd:
conversionStrategy: Default
decodingStrategy: None
metadataPolicy: None
nullBytePolicy: Ignore
- secretKey: type
remoteRef:
key: argo-cd-git
@@ -293,6 +307,7 @@ argo-cd:
conversionStrategy: Default
decodingStrategy: None
metadataPolicy: None
nullBytePolicy: Ignore
- secretKey: url
remoteRef:
key: argo-cd-git
@@ -300,3 +315,4 @@ argo-cd:
conversionStrategy: Default
decodingStrategy: None
metadataPolicy: None
nullBytePolicy: Ignore
+1 -1
View File
@@ -24,5 +24,5 @@ appVersion: "1.0"
dependencies:
- name: cert-manager
version: v1.20.1
version: v1.20.2
repository: https://charts.jetstack.io
@@ -24,5 +24,5 @@ appVersion: "1.0"
dependencies:
- name: external-secrets
version: 2.2.0
version: 2.5.0
repository: https://charts.external-secrets.io
+1 -1
View File
@@ -24,5 +24,5 @@ appVersion: "1.0"
dependencies:
- name: kite
version: 0.9.0
version: 0.12.2
repository: https://zxh326.github.io/kite
+1 -1
View File
@@ -24,5 +24,5 @@ appVersion: "1.0"
dependencies:
- name: metallb
version: 0.15.3
version: 0.16.1
repository: https://metallb.github.io/metallb
+2
View File
@@ -1,4 +1,6 @@
metallb:
frrk8s:
enabled: false
prometheus:
rbacPrometheus: false
podMonitor:
+1 -1
View File
@@ -24,5 +24,5 @@ appVersion: "1.0"
dependencies:
- name: kube-prometheus-stack
version: 82.16.0
version: 86.1.0
repository: https://prometheus-community.github.io/helm-charts
@@ -17,5 +17,6 @@ spec:
conversionStrategy: Default
decodingStrategy: None
metadataPolicy: None
nullBytePolicy: Ignore
key: monitoring
property: discord_webhook
+1 -1
View File
@@ -24,5 +24,5 @@ appVersion: "1.0"
dependencies:
- name: rook-ceph
version: v1.19.3
version: v1.20.0
repository: https://charts.rook.io/release
+1 -1
View File
@@ -24,5 +24,5 @@ appVersion: "1.0"
dependencies:
- name: traefik
version: 39.0.7
version: 40.2.0
repository: https://traefik.github.io/charts
+1 -1
View File
@@ -37,7 +37,7 @@ traefik:
kind: DaemonSet
additionalContainers:
- name: cloudflared
image: cloudflare/cloudflared:2026.3.0
image: cloudflare/cloudflared:2026.5.2
command:
- cloudflared
- tunnel
+1 -1
View File
@@ -24,5 +24,5 @@ appVersion: "1.0"
dependencies:
- name: velero
version: 12.0.0
version: 12.0.2
repository: https://vmware-tanzu.github.io/helm-charts
+1 -1
View File
@@ -59,7 +59,7 @@ velero:
insecureSkipTLSVerify: "true"
initContainers:
- name: velero-plugin-for-aws
image: velero/velero-plugin-for-aws:v1.14.0
image: velero/velero-plugin-for-aws:v1.14.1
imagePullPolicy: IfNotPresent
volumeMounts:
- mountPath: /target