chore(deps): update all-minor-patch-updates

omni/weyma-talos.yaml

@@ -1,9 +1,9 @@
 kind: Cluster
 name: weyma-talos
 kubernetes:
-  version: v1.35.4
+  version: v1.34.2
 talos:
-  version: v1.12.7
+  version: v1.11.5
 features:
   backupConfiguration:
     interval: 6h0m0s
@@ -332,7 +332,7 @@ kind: ControlPlane
 machines:
   - 20b4c826-e699-43b3-826d-73eb5173680b
   - 5fdea709-56ad-45f2-966d-5e344dbe4fdf
-  - 30303031-3030-3030-6335-303731636600
+  - 30303031-3030-3030-6335-303731636665
 ---
 kind: Workers
 machines:
@@ -427,9 +427,9 @@ patches:
               interface: br0
 ---
 kind: Machine
-name: 30303031-3030-3030-6335-303731636600
+name: 30303031-3030-3030-6335-303731636665
 patches:
-  - idOverride: 400-cm-30303031-3030-3030-6335-303731636600
+  - idOverride: 400-cm-30303031-3030-3030-6335-303731636665
     inline:
       machine:
         network:

system-apps/argocd/Chart.yaml

@@ -24,5 +24,5 @@ appVersion: "1.0"
 
 dependencies:
 - name: argo-cd
-  version: 10.1.4
+  version: 9.5.4
   repository: https://argoproj.github.io/argo-helm

system-apps/cert-manager/Chart.yaml

@@ -24,5 +24,5 @@ appVersion: "1.0"
 
 dependencies:
 - name: cert-manager
-  version: v1.21.0
+  version: v1.20.2
   repository: https://charts.jetstack.io

system-apps/cert-manager/config/ReferenceGrants/argocd.yaml

@@ -1,14 +0,0 @@
-apiVersion: gateway.networking.k8s.io/v1
-kind: ReferenceGrant
-metadata:
-  name: argocd
-  namespace: cert-manager
-spec:
-  from:
-  - group: gateway.networking.k8s.io
-    kind: Gateway
-    namespace: argocd
-  to:
-  - group: ""
-    kind: Secret
-    name: cert-dubyatp-xyz

system-apps/cert-manager/config/ReferenceGrants/attic.yaml

@@ -1,14 +0,0 @@
-apiVersion: gateway.networking.k8s.io/v1
-kind: ReferenceGrant
-metadata:
-  name: attic
-  namespace: cert-manager
-spec:
-  from:
-  - group: gateway.networking.k8s.io
-    kind: Gateway
-    namespace: attic
-  to:
-  - group: ""
-    kind: Secret
-    name: cert-dubyatp-xyz

system-apps/cert-manager/config/ReferenceGrants/authentik.yaml

@@ -1,14 +0,0 @@
-apiVersion: gateway.networking.k8s.io/v1
-kind: ReferenceGrant
-metadata:
-  name: authentik
-  namespace: cert-manager
-spec:
-  from:
-  - group: gateway.networking.k8s.io
-    kind: Gateway
-    namespace: authentik
-  to:
-  - group: ""
-    kind: Secret
-    name: cert-dubyatp-xyz

system-apps/cert-manager/config/ReferenceGrants/duby-blog.yaml

@@ -1,14 +0,0 @@
-apiVersion: gateway.networking.k8s.io/v1
-kind: ReferenceGrant
-metadata:
-  name: duby-blog
-  namespace: cert-manager
-spec:
-  from:
-  - group: gateway.networking.k8s.io
-    kind: Gateway
-    namespace: duby-blog
-  to:
-  - group: ""
-    kind: Secret
-    name: cert-dubyatp-xyz

system-apps/cert-manager/config/ReferenceGrants/dubyatp-xyz.yaml

@@ -1,14 +0,0 @@
-apiVersion: gateway.networking.k8s.io/v1
-kind: ReferenceGrant
-metadata:
-  name: dubyatp-xyz
-  namespace: cert-manager
-spec:
-  from:
-  - group: gateway.networking.k8s.io
-    kind: Gateway
-    namespace: dubyatp-xyz
-  to:
-  - group: ""
-    kind: Secret
-    name: cert-dubyatp-xyz

system-apps/cert-manager/config/ReferenceGrants/frenworld-archive.yaml

@@ -1,14 +0,0 @@
-apiVersion: gateway.networking.k8s.io/v1
-kind: ReferenceGrant
-metadata:
-  name: frenworld-archive
-  namespace: cert-manager
-spec:
-  from:
-  - group: gateway.networking.k8s.io
-    kind: Gateway
-    namespace: frenworld-archive
-  to:
-  - group: ""
-    kind: Secret
-    name: cert-frenworld-archive-io

system-apps/cert-manager/config/ReferenceGrants/gitea.yaml

@@ -1,14 +0,0 @@
-apiVersion: gateway.networking.k8s.io/v1
-kind: ReferenceGrant
-metadata:
-  name: gitea
-  namespace: cert-manager
-spec:
-  from:
-  - group: gateway.networking.k8s.io
-    kind: Gateway
-    namespace: gitea
-  to:
-  - group: ""
-    kind: Secret
-    name: cert-dubyatp-xyz

system-apps/cert-manager/config/ReferenceGrants/grafana.yaml

@@ -1,14 +0,0 @@
-apiVersion: gateway.networking.k8s.io/v1
-kind: ReferenceGrant
-metadata:
-  name: grafana
-  namespace: cert-manager
-spec:
-  from:
-  - group: gateway.networking.k8s.io
-    kind: Gateway
-    namespace: grafana
-  to:
-  - group: ""
-    kind: Secret
-    name: cert-dubyatp-xyz

system-apps/cert-manager/config/ReferenceGrants/jellyfin.yaml

@@ -1,14 +0,0 @@
-apiVersion: gateway.networking.k8s.io/v1
-kind: ReferenceGrant
-metadata:
-  name: jellyfin
-  namespace: cert-manager
-spec:
-  from:
-  - group: gateway.networking.k8s.io
-    kind: Gateway
-    namespace: jellyfin
-  to:
-  - group: ""
-    kind: Secret
-    name: cert-dubyatp-xyz

system-apps/cert-manager/config/ReferenceGrants/kite.yaml

@@ -1,14 +0,0 @@
-apiVersion: gateway.networking.k8s.io/v1
-kind: ReferenceGrant
-metadata:
-  name: kite
-  namespace: cert-manager
-spec:
-  from:
-  - group: gateway.networking.k8s.io
-    kind: Gateway
-    namespace: kite
-  to:
-  - group: ""
-    kind: Secret
-    name: cert-dubyatp-xyz

system-apps/cert-manager/config/ReferenceGrants/lumfao-dubyatp-xyz.yaml

@@ -1,14 +0,0 @@
-apiVersion: gateway.networking.k8s.io/v1
-kind: ReferenceGrant
-metadata:
-  name: lumfao-dubyatp-xyz
-  namespace: cert-manager
-spec:
-  from:
-  - group: gateway.networking.k8s.io
-    kind: Gateway
-    namespace: lumfao-dubyatp-xyz
-  to:
-  - group: ""
-    kind: Secret
-    name: cert-dubyatp-xyz

system-apps/cert-manager/config/ReferenceGrants/netmaker.yaml

@@ -1,14 +0,0 @@
-apiVersion: gateway.networking.k8s.io/v1
-kind: ReferenceGrant
-metadata:
-  name: netmaker
-  namespace: cert-manager
-spec:
-  from:
-  - group: gateway.networking.k8s.io
-    kind: Gateway
-    namespace: netmaker
-  to:
-  - group: ""
-    kind: Secret
-    name: cert-dubyatp-xyz

system-apps/cert-manager/config/ReferenceGrants/nextcloud.yaml

@@ -1,14 +0,0 @@
-apiVersion: gateway.networking.k8s.io/v1
-kind: ReferenceGrant
-metadata:
-  name: nextcloud
-  namespace: cert-manager
-spec:
-  from:
-  - group: gateway.networking.k8s.io
-    kind: Gateway
-    namespace: nextcloud
-  to:
-  - group: ""
-    kind: Secret
-    name: cert-dubyatp-xyz

system-apps/cert-manager/config/ReferenceGrants/rook-ceph.yaml

@@ -1,14 +0,0 @@
-apiVersion: gateway.networking.k8s.io/v1
-kind: ReferenceGrant
-metadata:
-  name: rook-ceph
-  namespace: cert-manager
-spec:
-  from:
-  - group: gateway.networking.k8s.io
-    kind: Gateway
-    namespace: rook-ceph
-  to:
-  - group: ""
-    kind: Secret
-    name: cert-dubyatp-xyz

system-apps/cert-manager/config/ReferenceGrants/test.yaml

@@ -1,14 +0,0 @@
-apiVersion: gateway.networking.k8s.io/v1
-kind: ReferenceGrant
-metadata:
-  name: test-dubyatp-xyz
-  namespace: cert-manager
-spec:
-  from:
-  - group: gateway.networking.k8s.io
-    kind: Gateway
-    namespace: default
-  to:
-  - group: ""
-    kind: Secret
-    name: cert-dubyatp-xyz

system-apps/cert-manager/config/ReferenceGrants/traefik.yaml

@@ -1,14 +0,0 @@
-apiVersion: gateway.networking.k8s.io/v1
-kind: ReferenceGrant
-metadata:
-  name: traefik
-  namespace: cert-manager
-spec:
-  from:
-  - group: gateway.networking.k8s.io
-    kind: Gateway
-    namespace: traefik
-  to:
-  - group: ""
-    kind: Secret
-    name: cert-dubyatp-xyz

system-apps/cert-manager/config/ReferenceGrants/vaultwarden.yaml

@@ -1,14 +0,0 @@
-apiVersion: gateway.networking.k8s.io/v1
-kind: ReferenceGrant
-metadata:
-  name: vaultwarden
-  namespace: cert-manager
-spec:
-  from:
-  - group: gateway.networking.k8s.io
-    kind: Gateway
-    namespace: vaultwarden
-  to:
-  - group: ""
-    kind: Secret
-    name: cert-dubyatp-xyz

system-apps/cert-manager/config/ReferenceGrants/whatismyip.yaml

@@ -1,14 +0,0 @@
-apiVersion: gateway.networking.k8s.io/v1
-kind: ReferenceGrant
-metadata:
-  name: whatismyip
-  namespace: cert-manager
-spec:
-  from:
-  - group: gateway.networking.k8s.io
-    kind: Gateway
-    namespace: whatismyip
-  to:
-  - group: ""
-    kind: Secret
-    name: cert-dubyatp-xyz

system-apps/cert-manager/config/ReferenceGrants/williamtpeebles-com.yaml

@@ -1,14 +0,0 @@
-apiVersion: gateway.networking.k8s.io/v1
-kind: ReferenceGrant
-metadata:
-  name: williamtpeebles-com
-  namespace: cert-manager
-spec:
-  from:
-  - group: gateway.networking.k8s.io
-    kind: Gateway
-    namespace: williamtpeebles-com
-  to:
-  - group: ""
-    kind: Secret
-    name: cert-williamtpeebles-com

system-apps/external-secrets/chart/Chart.yaml

@@ -24,5 +24,5 @@ appVersion: "1.0"
 
 dependencies:
 - name: external-secrets
-  version: 2.7.0
+  version: 2.4.0
   repository: https://charts.external-secrets.io

system-apps/kite/Chart.yaml

@@ -24,5 +24,5 @@ appVersion: "1.0"
 
 dependencies:
 - name: kite
-  version: 0.13.0
+  version: 0.10.0
   repository: https://zxh326.github.io/kite

system-apps/kubernetes-replicator/Chart.yaml

@@ -24,5 +24,5 @@ appVersion: "1.0"
 
 dependencies:
 - name: kubernetes-replicator
-  version: 2.12.4
+  version: 2.12.3
   repository: https://helm.mittwald.de

system-apps/metallb/Chart.yaml

@@ -24,5 +24,5 @@ appVersion: "1.0"
 
 dependencies:
 - name: metallb
-  version: 0.16.1
+  version: 0.15.3
   repository: https://metallb.github.io/metallb

system-apps/metallb/values.yaml

@@ -1,6 +1,4 @@
 metallb:
-  frrk8s:
-    enabled: false
   prometheus:
     rbacPrometheus: false
     podMonitor:

system-apps/monitoring/Chart.yaml

@@ -24,5 +24,5 @@ appVersion: "1.0"
 
 dependencies:
 - name: kube-prometheus-stack
-  version: 87.17.0
+  version: 84.2.0
   repository: https://prometheus-community.github.io/helm-charts

system-apps/rook-ceph/operator/Chart.yaml

@@ -24,8 +24,5 @@ appVersion: "1.0"
 
 dependencies:
 - name: rook-ceph
-  version: v1.20.2
+  version: v1.19.4
-  repository: https://charts.rook.io/release
+  repository: https://charts.rook.io/release
-- name: ceph-csi-drivers
-  version: 1.0.4
-  repository: https://ceph.github.io/ceph-csi-operator

system-apps/rook-ceph/operator/values.yaml

@@ -1,12 +1,2 @@
 monitoring:
-  enabled: true
+  enabled: true
-ceph-csi-drivers:
-  drivers:
-    rbd:
-      name: rook-ceph.rbd.csi.ceph.com
-    cephfs:
-      name: rook-ceph.cephfs.csi.ceph.com
-    nvmeof:
-      enabled: false
-    nfs:
-      enabled: false

system-apps/traefik/Chart.yaml

@@ -24,5 +24,5 @@ appVersion: "1.0"
 
 dependencies:
 - name: traefik
-  version: 41.0.2
+  version: 39.0.8
   repository: https://traefik.github.io/charts

system-apps/traefik/values.yaml

@@ -37,7 +37,7 @@ traefik:
     kind: DaemonSet
     additionalContainers:
     - name: cloudflared
-      image: cloudflare/cloudflared:2026.7.2
+      image: cloudflare/cloudflared:2026.3.0
       command:
         - cloudflared
         - tunnel
@@ -69,12 +69,10 @@ traefik:
     dashboard:
       enabled: true
   providers:
-    kubernetesGateway:
-      enabled: true
     file:
       enabled: true
       watch: true
-      content:
+      content: |
         http:
           middlewares:
             cloudflarewarp:

system-apps/velero/Chart.yaml

@@ -24,5 +24,5 @@ appVersion: "1.0"
 
 dependencies:
 - name: velero
-  version: 12.1.0
+  version: 12.0.1
   repository: https://vmware-tanzu.github.io/helm-charts

system-apps/velero/values.yaml

@@ -59,7 +59,7 @@ velero:
         insecureSkipTLSVerify: "true"
   initContainers:
   - name: velero-plugin-for-aws
-    image: velero/velero-plugin-for-aws:v1.14.2
+    image: velero/velero-plugin-for-aws:v1.14.0
     imagePullPolicy: IfNotPresent
     volumeMounts:
       - mountPath: /target