chore(deps): update helm release kube-prometheus-stack to v82.3.0

2026-02-25 07:00:44 +00:00
15 changed files with 17 additions and 33 deletions
--- a/black-start/services/talos-discovery/docker-compose.yaml
+++ b/black-start/services/talos-discovery/docker-compose.yaml
@@ -2,7 +2,7 @@ version: "3.8"
 services:
  discovery:
    restart: unless-stopped
-    image: ghcr.io/siderolabs/discovery-service:v1.0.17
+    image: ghcr.io/siderolabs/discovery-service:v1.0.14
    ports:
      - 10.105.6.215:3000:3000
      - 10.105.6.215:3001:3001
--- a/black-start/services/vault/docker-compose.yaml
+++ b/black-start/services/vault/docker-compose.yaml
@@ -5,7 +5,7 @@ services:
    command: tunnel run weyma-vault
    env_file: ".env"
  vault:
-    image: hashicorp/vault:2.0
+    image: hashicorp/vault:1.21
    env_file: ".env.vault"
    environment:
      VAULT_ADDR: "https://weyma-vault.infra.dubyatp.xyz:8200"
--- a/renovate.json
+++ b/renovate.json
@@ -15,9 +15,10 @@
  ],
  "packageRules": [
    {
-      "description": "Consolidate patch and minor updates to one PR",
-      "matchUpdateTypes": ["minor", "patch"],
-      "groupName": "all-minor-patch-updates"
+      "description": "Automerge patch updates",
+      "matchUpdateTypes": ["patch"],
+      "matchCurrentVersion": "!/^0/",
+      "automerge": true
    },
    {
      "description": "Rook Ceph - auto-update minor and patch versions only",
--- a/system-apps/argocd/Chart.yaml
+++ b/system-apps/argocd/Chart.yaml
@@ -24,5 +24,5 @@ appVersion: "1.0"

 dependencies:
 - name: argo-cd
-  version: 9.5.2
+  version: 9.4.4
  repository: https://argoproj.github.io/argo-helm
--- a/system-apps/argocd/values.yaml
+++ b/system-apps/argocd/values.yaml
@@ -131,7 +131,6 @@ argo-cd:
            conversionStrategy: Default
            decodingStrategy: None
            metadataPolicy: None
-            nullBytePolicy: Ignore
        - secretKey: admin.password
          remoteRef:
            key: argo-cd
@@ -139,7 +138,6 @@ argo-cd:
            conversionStrategy: Default
            decodingStrategy: None
            metadataPolicy: None
-            nullBytePolicy: Ignore
        - secretKey: admin.passwordMtime
          remoteRef:
            key: argo-cd
@@ -147,7 +145,6 @@ argo-cd:
            conversionStrategy: Default
            decodingStrategy: None
            metadataPolicy: None
-            nullBytePolicy: Ignore
        - secretKey: dex.authentik.clientSecret
          remoteRef:
            key: argo-cd
@@ -155,7 +152,6 @@ argo-cd:
            conversionStrategy: Default
            decodingStrategy: None
            metadataPolicy: None
-            nullBytePolicy: Ignore
    - apiVersion: external-secrets.io/v1
      kind: ExternalSecret
      metadata:
@@ -179,7 +175,6 @@ argo-cd:
            conversionStrategy: Default
            decodingStrategy: None
            metadataPolicy: None
-            nullBytePolicy: Ignore
        - secretKey: type
          remoteRef:
            key: argo-cd-git
@@ -187,7 +182,6 @@ argo-cd:
            conversionStrategy: Default
            decodingStrategy: None
            metadataPolicy: None
-            nullBytePolicy: Ignore
        - secretKey: url
          remoteRef:
            key: argo-cd-git
@@ -195,7 +189,6 @@ argo-cd:
            conversionStrategy: Default
            decodingStrategy: None
            metadataPolicy: None
-            nullBytePolicy: Ignore
    - apiVersion: external-secrets.io/v1
      kind: ExternalSecret
      metadata:
@@ -219,7 +212,6 @@ argo-cd:
            conversionStrategy: Default
            decodingStrategy: None
            metadataPolicy: None
-            nullBytePolicy: Ignore
        - secretKey: type
          remoteRef:
            key: argo-cd-git
@@ -227,7 +219,6 @@ argo-cd:
            conversionStrategy: Default
            decodingStrategy: None
            metadataPolicy: None
-            nullBytePolicy: Ignore
        - secretKey: url
          remoteRef:
            key: argo-cd-git
@@ -235,7 +226,6 @@ argo-cd:
            conversionStrategy: Default
            decodingStrategy: None
            metadataPolicy: None
-            nullBytePolicy: Ignore
    - apiVersion: external-secrets.io/v1
      kind: ExternalSecret
      metadata:
@@ -259,7 +249,6 @@ argo-cd:
            conversionStrategy: Default
            decodingStrategy: None
            metadataPolicy: None
-            nullBytePolicy: Ignore
        - secretKey: type
          remoteRef:
            key: argo-cd-git
@@ -267,7 +256,6 @@ argo-cd:
            conversionStrategy: Default
            decodingStrategy: None
            metadataPolicy: None
-            nullBytePolicy: Ignore
        - secretKey: url
          remoteRef:
            key: argo-cd-git
@@ -275,7 +263,6 @@ argo-cd:
            conversionStrategy: Default
            decodingStrategy: None
            metadataPolicy: None
-            nullBytePolicy: Ignore
    - apiVersion: external-secrets.io/v1
      kind: ExternalSecret
      metadata:
@@ -299,7 +286,6 @@ argo-cd:
            conversionStrategy: Default
            decodingStrategy: None
            metadataPolicy: None
-            nullBytePolicy: Ignore
        - secretKey: type
          remoteRef:
            key: argo-cd-git
@@ -307,12 +293,10 @@ argo-cd:
            conversionStrategy: Default
            decodingStrategy: None
            metadataPolicy: None
-            nullBytePolicy: Ignore
        - secretKey: url
          remoteRef:
            key: argo-cd-git
            property: url.db-operators
            conversionStrategy: Default
            decodingStrategy: None
-            metadataPolicy: None
-            nullBytePolicy: Ignore
+            metadataPolicy: None
--- a/system-apps/cert-manager/Chart.yaml
+++ b/system-apps/cert-manager/Chart.yaml
@@ -24,5 +24,5 @@ appVersion: "1.0"

 dependencies:
 - name: cert-manager
-  version: v1.20.2
+  version: v1.19.4
  repository: https://charts.jetstack.io
--- a/system-apps/external-secrets/chart/Chart.yaml
+++ b/system-apps/external-secrets/chart/Chart.yaml
@@ -24,5 +24,5 @@ appVersion: "1.0"

 dependencies:
 - name: external-secrets
-  version: 2.3.0
+  version: 2.0.1
  repository: https://charts.external-secrets.io
--- a/system-apps/kite/Chart.yaml
+++ b/system-apps/kite/Chart.yaml
@@ -24,5 +24,5 @@ appVersion: "1.0"

 dependencies:
 - name: kite
-  version: 0.9.0
+  version: 0.7.8
  repository: https://zxh326.github.io/kite
--- a/system-apps/monitoring/Chart.yaml
+++ b/system-apps/monitoring/Chart.yaml
@@ -24,5 +24,5 @@ appVersion: "1.0"

 dependencies:
 - name: kube-prometheus-stack
-  version: 83.6.0
+  version: 82.3.0
  repository: https://prometheus-community.github.io/helm-charts
--- a/system-apps/monitoring/templates/discord-webhook-secret.yaml
+++ b/system-apps/monitoring/templates/discord-webhook-secret.yaml
@@ -17,6 +17,5 @@ spec:
      conversionStrategy: Default
      decodingStrategy: None
      metadataPolicy: None
-      nullBytePolicy: Ignore
      key: monitoring
      property: discord_webhook
--- a/system-apps/rook-ceph/operator/Chart.yaml
+++ b/system-apps/rook-ceph/operator/Chart.yaml
@@ -24,5 +24,5 @@ appVersion: "1.0"

 dependencies:
 - name: rook-ceph
-  version: v1.19.4
+  version: v1.19.2
  repository: https://charts.rook.io/release
--- a/system-apps/traefik/Chart.yaml
+++ b/system-apps/traefik/Chart.yaml
@@ -24,5 +24,5 @@ appVersion: "1.0"

 dependencies:
 - name: traefik
-  version: 39.0.8
+  version: 39.0.2
  repository: https://traefik.github.io/charts
--- a/system-apps/traefik/values.yaml
+++ b/system-apps/traefik/values.yaml
@@ -37,7 +37,7 @@ traefik:
    kind: DaemonSet
    additionalContainers:
    - name: cloudflared
-      image: cloudflare/cloudflared:2026.3.0
+      image: cloudflare/cloudflared:2026.2.0
      command:
        - cloudflared
        - tunnel
--- a/system-apps/velero/Chart.yaml
+++ b/system-apps/velero/Chart.yaml
@@ -24,5 +24,5 @@ appVersion: "1.0"

 dependencies:
 - name: velero
-  version: 12.0.0
+  version: 11.3.2
  repository: https://vmware-tanzu.github.io/helm-charts
--- a/system-apps/velero/values.yaml
+++ b/system-apps/velero/values.yaml
@@ -59,7 +59,7 @@ velero:
        insecureSkipTLSVerify: "true"
  initContainers:
  - name: velero-plugin-for-aws
-    image: velero/velero-plugin-for-aws:v1.14.0
+    image: velero/velero-plugin-for-aws:v1.13.2
    imagePullPolicy: IfNotPresent
    volumeMounts:
      - mountPath: /target