chore(deps): update all-minor-patch-updates

2026-08-18 15:00:28 +00:00
8 changed files with 11 additions and 33 deletions
@@ -1,9 +1,9 @@
 kind: Cluster
 name: weyma-talos
 kubernetes:
-  version: v1.36.4
+  version: v1.35.4
 talos:
-  version: v1.13.9
+  version: v1.12.7
 features:
  backupConfiguration:
    interval: 6h0m0s
@@ -310,7 +310,7 @@ patches:
                          }

                          rewrite name git.dubyatp.xyz traefik-local.traefik.svc.cluster.local
-
+                          
                          forward . /etc/resolv.conf {
                            max_concurrent 1000
                          }
@@ -24,5 +24,5 @@ appVersion: "1.0"

 dependencies:
 - name: argo-cd
-  version: 10.6.0
+  version: 10.4.0
  repository: https://argoproj.github.io/argo-helm
@@ -24,5 +24,5 @@ appVersion: "1.0"

 dependencies:
 - name: external-secrets
-  version: 2.10.0
+  version: 2.9.0
  repository: https://charts.external-secrets.io
@@ -24,5 +24,5 @@ appVersion: "1.0"

 dependencies:
 - name: kube-prometheus-stack
-  version: 88.6.2
+  version: 88.4.0
  repository: https://prometheus-community.github.io/helm-charts
@@ -21,24 +21,11 @@ spec:
    # versions running within the cluster. See tags available at https://hub.docker.com/r/ceph/ceph/tags/.
    # If you want to be more precise, you can always use a timestamp tag such as quay.io/ceph/ceph:v19.2.1-20250202
    # This tag might not contain a new Ceph version, just security fixes from the underlying operating system, which will reduce vulnerabilities
-    image: quay.io/ceph/ceph:v20.2.4-20260818
+    image: quay.io/ceph/ceph:v20.2.0-20251104
    # Whether to allow unsupported versions of Ceph. Currently Reef and Squid are supported.
    # Future versions such as Tentacle (v20) would require this to be set to `true`.
    # Do not set to true in production.
    allowUnsupported: false
-  security:
-    cephx:
-      daemon:
-        keyRotationPolicy: KeyGeneration
-        keyGeneration: 2 # must be greater than the current keyGeneration
-      csi:
-        keyRotationPolicy: KeyGeneration
-        keyGeneration: 3 # must be greater than the current keyGeneration
-        keyType: aes # Talos kernel 6.18 / cephcsi v3.17.0 don't support aes256k yet
-      rbdMirrorPeer:
-        keyRotationPolicy: KeyGeneration
-        keyGeneration: 3 # must be greater than the current keyGeneration
-        keyType: aes # Talos kernel 6.18 / cephcsi v3.17.0 don't support aes256k yet
  # The path on the host where configuration files will be persisted. Must be specified. If there are multiple clusters, the directory must be unique for each cluster.
  # Important: if you reinstall the cluster, make sure you delete this directory from each host or else the mons will fail to start on the new cluster.
  # In Minikube, the '/data' directory is configured to persist across reboots. Use "/data/rook" in Minikube environment.
@@ -77,7 +64,7 @@ spec:
      # List of modules to optionally enable or disable.
      # Note the "dashboard" and "monitoring" modules are already configured by other settings in the cluster CR.
      - name: rook
-        enabled: false
+        enabled: true
  # enable the ceph dashboard for viewing cluster status
  dashboard:
    enabled: true
@@ -371,12 +358,3 @@ spec:
        disabled: false
      osd:
        disabled: false
-    muteHealthWarning: # Remove these after Talos uses 7.0+ kernel
-      AUTH_INSECURE_ROTATING_SERVICE_KEY_TYPE:
-        policy: mute
-      AUTH_INSECURE_CLIENT_KEY_TYPE:
-        policy: mute
-      AUTH_INSECURE_KEYS_ALLOWED:
-        policy: mute
-      AUTH_INSECURE_KEYS_CREATABLE:
-        policy: mute
@@ -24,7 +24,7 @@ appVersion: "1.0"

 dependencies:
 - name: rook-ceph
-  version: v1.20.6
+  version: v1.20.4
  repository: https://charts.rook.io/release
 - name: ceph-csi-drivers
  version: 1.0.4
@@ -24,5 +24,5 @@ appVersion: "1.0"

 dependencies:
 - name: traefik
-  version: 41.4.0
+  version: 41.2.0
  repository: https://traefik.github.io/charts
@@ -37,7 +37,7 @@ traefik:
    kind: DaemonSet
    additionalContainers:
    - name: cloudflared
-      image: cloudflare/cloudflared:2026.8.3
+      image: cloudflare/cloudflared:2026.8.2
      command:
        - cloudflared
        - tunnel