chore(deps): update helm charts#143
Conversation
|
--- cluster-talos/kubernetes/infrastructure/platform/descheduler/app Kustomization: flux-system/descheduler HelmRelease: kube-system/descheduler
+++ cluster-talos/kubernetes/infrastructure/platform/descheduler/app Kustomization: flux-system/descheduler HelmRelease: kube-system/descheduler
@@ -13,13 +13,13 @@
chart: descheduler
interval: 1h
sourceRef:
kind: HelmRepository
name: descheduler
namespace: flux-system
- version: 0.35.x
+ version: 0.36.x
install:
remediation:
retries: 3
interval: 1h
upgrade:
remediation:
--- cluster-talos/kubernetes/infrastructure/flux-system/flux-operator/app Kustomization: flux-system/flux-operator OCIRepository: flux-system/flux-operator
+++ cluster-talos/kubernetes/infrastructure/flux-system/flux-operator/app Kustomization: flux-system/flux-operator OCIRepository: flux-system/flux-operator
@@ -7,9 +7,9 @@
kustomize.toolkit.fluxcd.io/namespace: flux-system
name: flux-operator
namespace: flux-system
spec:
interval: 1h
ref:
- tag: 0.49.0
+ tag: 0.50.0
url: oci://ghcr.io/controlplaneio-fluxcd/charts/flux-operator
--- cluster-talos/kubernetes/bootstrap Kustomization: flux-system/flux-system Deployment: flux-system/source-controller
+++ cluster-talos/kubernetes/bootstrap Kustomization: flux-system/flux-system Deployment: flux-system/source-controller
@@ -47,13 +47,13 @@
value: /tmp/.sigstore
- name: GOMEMLIMIT
valueFrom:
resourceFieldRef:
containerName: manager
resource: limits.memory
- image: ghcr.io/fluxcd/source-controller:v1.8.4
+ image: ghcr.io/fluxcd/source-controller:v1.8.5
imagePullPolicy: IfNotPresent
livenessProbe:
httpGet:
path: /healthz
port: healthz
name: manager
--- cluster-talos/kubernetes/bootstrap Kustomization: flux-system/flux-system Deployment: flux-system/helm-controller
+++ cluster-talos/kubernetes/bootstrap Kustomization: flux-system/flux-system Deployment: flux-system/helm-controller
@@ -41,13 +41,13 @@
fieldPath: metadata.namespace
- name: GOMEMLIMIT
valueFrom:
resourceFieldRef:
containerName: manager
resource: limits.memory
- image: ghcr.io/fluxcd/helm-controller:v1.5.4
+ image: ghcr.io/fluxcd/helm-controller:v1.5.5
imagePullPolicy: IfNotPresent
livenessProbe:
httpGet:
path: /healthz
port: healthz
name: manager
--- cluster-talos/kubernetes/infrastructure/platform/spegel/app Kustomization: flux-system/spegel OCIRepository: spegel/spegel
+++ cluster-talos/kubernetes/infrastructure/platform/spegel/app Kustomization: flux-system/spegel OCIRepository: spegel/spegel
@@ -7,9 +7,9 @@
kustomize.toolkit.fluxcd.io/namespace: flux-system
name: spegel
namespace: spegel
spec:
interval: 1h
ref:
- tag: 0.7.0
+ tag: 0.7.1
url: oci://ghcr.io/spegel-org/helm-charts/spegel
--- cluster-talos/kubernetes/infrastructure/platform/tuppr/app Kustomization: flux-system/tuppr OCIRepository: system-upgrade/tuppr
+++ cluster-talos/kubernetes/infrastructure/platform/tuppr/app Kustomization: flux-system/tuppr OCIRepository: system-upgrade/tuppr
@@ -10,9 +10,9 @@
spec:
interval: 1h
layerSelector:
mediaType: application/vnd.cncf.helm.chart.content.v1.tar+gzip
operation: copy
ref:
- tag: 0.1.35
+ tag: 0.1.36
url: oci://ghcr.io/home-operations/charts/tuppr
--- cluster-talos/kubernetes/infrastructure/flux-system/flux-instance/app Kustomization: flux-system/flux-instance OCIRepository: flux-system/flux-instance
+++ cluster-talos/kubernetes/infrastructure/flux-system/flux-instance/app Kustomization: flux-system/flux-instance OCIRepository: flux-system/flux-instance
@@ -7,9 +7,9 @@
kustomize.toolkit.fluxcd.io/namespace: flux-system
name: flux-instance
namespace: flux-system
spec:
interval: 1h
ref:
- tag: 0.49.0
+ tag: 0.50.0
url: oci://ghcr.io/controlplaneio-fluxcd/charts/flux-instance
--- cluster-talos/kubernetes/apps/tools/gatus/app Kustomization: flux-system/gatus HelmRelease: gatus/gatus
+++ cluster-talos/kubernetes/apps/tools/gatus/app Kustomization: flux-system/gatus HelmRelease: gatus/gatus
@@ -121,13 +121,13 @@
gatus-sidecar:
args:
- --enable-httproute
- --gateway-name=main
image:
repository: ghcr.io/home-operations/gatus-sidecar
- tag: 0.0.14
+ tag: 0.0.18
resources:
limits:
memory: 64Mi
requests:
cpu: 10m
restartPolicy: Always
--- cluster-talos/kubernetes/infrastructure/platform/authentik/app Kustomization: flux-system/authentik HelmRelease: authentik/authentik
+++ cluster-talos/kubernetes/infrastructure/platform/authentik/app Kustomization: flux-system/authentik HelmRelease: authentik/authentik
@@ -12,13 +12,13 @@
spec:
chart: authentik
sourceRef:
kind: HelmRepository
name: authentik
namespace: flux-system
- version: 2026.2.3
+ version: 2026.5.0
install:
remediation:
retries: 3
interval: 30m
maxHistory: 2
upgrade:
--- cluster-talos/kubernetes/apps/tools/netbox/app Kustomization: flux-system/netbox HelmRelease: netbox/netbox
+++ cluster-talos/kubernetes/apps/tools/netbox/app Kustomization: flux-system/netbox HelmRelease: netbox/netbox
@@ -13,13 +13,13 @@
chart: netbox
interval: 30m
sourceRef:
kind: HelmRepository
name: netbox
namespace: flux-system
- version: 8.2.*
+ version: 8.3.*
install:
remediation:
retries: 3
timeout: 30m
interval: 30m
upgrade:
--- cluster-talos/kubernetes/infrastructure/platform/tanzu-system-logging/app Kustomization: flux-system/tanzu-system-logging HelmRelease: tanzu-system-logging/fluent-bit
+++ cluster-talos/kubernetes/infrastructure/platform/tanzu-system-logging/app Kustomization: flux-system/tanzu-system-logging HelmRelease: tanzu-system-logging/fluent-bit
@@ -12,13 +12,13 @@
spec:
chart: fluent-bit
sourceRef:
kind: HelmRepository
name: fluent
namespace: flux-system
- version: 0.57.5
+ version: 0.57.6
install:
remediation:
retries: 3
interval: 30m
upgrade:
cleanupOnFail: true |
f282f5b to
68e9956
Compare
|
--- HelmRelease: kube-system/descheduler CronJob: kube-system/descheduler
+++ HelmRelease: kube-system/descheduler CronJob: kube-system/descheduler
@@ -14,13 +14,13 @@
jobTemplate:
spec:
template:
metadata:
name: descheduler
annotations:
- checksum/config: 06949c487cb1f7034d670f32457845bde01aff000953da5e9c7c0a767c62fc56
+ checksum/config: e708aa3946e6d5ad50737dc7ff199955e96349890183b5310ce114041cc53547
labels:
app.kubernetes.io/name: descheduler
app.kubernetes.io/instance: descheduler
spec:
tolerations:
- effect: NoSchedule
@@ -32,13 +32,13 @@
value: 'true'
priorityClassName: system-cluster-critical
serviceAccountName: descheduler
restartPolicy: Never
containers:
- name: descheduler
- image: registry.k8s.io/descheduler/descheduler:v0.35.1
+ image: registry.k8s.io/descheduler/descheduler:v0.36.0
imagePullPolicy: IfNotPresent
command:
- /bin/descheduler
args:
- --policy-config-file=/policy-dir/policy.yaml
- --v=3
--- HelmRelease: tanzu-system-logging/fluent-bit DaemonSet: tanzu-system-logging/fluent-bit
+++ HelmRelease: tanzu-system-logging/fluent-bit DaemonSet: tanzu-system-logging/fluent-bit
@@ -21,13 +21,13 @@
spec:
serviceAccountName: fluent-bit
hostNetwork: false
dnsPolicy: ClusterFirst
containers:
- name: fluent-bit
- image: cr.fluentbit.io/fluent/fluent-bit:5.0.5
+ image: cr.fluentbit.io/fluent/fluent-bit:5.0.6
imagePullPolicy: IfNotPresent
command:
- /fluent-bit/bin/fluent-bit
args:
- --workdir=/fluent-bit/etc
- --config=/fluent-bit/etc/conf/fluent-bit.conf
--- HelmRelease: authentik/authentik Deployment: authentik/authentik-server
+++ HelmRelease: authentik/authentik Deployment: authentik/authentik-server
@@ -24,28 +24,22 @@
app.kubernetes.io/name: authentik
app.kubernetes.io/instance: authentik
app.kubernetes.io/component: server
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/part-of: authentik
annotations:
- checksum/secret: 9ef9ea8da7260610cc5f31195be7ada2f3b43259481edba21d9c45124db617ec
+ checksum/secret: d7a01bf7431db4170810ec549b2681b3cadd702018ea94cdb4ef9a0186d11203
spec:
terminationGracePeriodSeconds: 30
containers:
- name: server
- image: ghcr.io/goauthentik/server:2026.2.3
+ image: ghcr.io/goauthentik/server:2026.5.0
imagePullPolicy: IfNotPresent
args:
- server
- env:
- - name: AUTHENTIK_LISTEN__HTTP
- value: 0.0.0.0:9000
- - name: AUTHENTIK_LISTEN__HTTPS
- value: 0.0.0.0:9443
- - name: AUTHENTIK_LISTEN__METRICS
- value: 0.0.0.0:9300
+ env: null
envFrom:
- secretRef:
name: authentik
- secretRef:
name: authentik-extra-env
volumeMounts:
--- HelmRelease: authentik/authentik Deployment: authentik/authentik-worker
+++ HelmRelease: authentik/authentik Deployment: authentik/authentik-worker
@@ -24,27 +24,23 @@
app.kubernetes.io/name: authentik
app.kubernetes.io/instance: authentik
app.kubernetes.io/component: worker
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/part-of: authentik
annotations:
- checksum/secret: 9ef9ea8da7260610cc5f31195be7ada2f3b43259481edba21d9c45124db617ec
+ checksum/secret: d7a01bf7431db4170810ec549b2681b3cadd702018ea94cdb4ef9a0186d11203
spec:
serviceAccountName: authentik
terminationGracePeriodSeconds: 30
containers:
- name: worker
- image: ghcr.io/goauthentik/server:2026.2.3
+ image: ghcr.io/goauthentik/server:2026.5.0
imagePullPolicy: IfNotPresent
args:
- worker
- env:
- - name: AUTHENTIK_LISTEN__HTTP
- value: 0.0.0.0:9000
- - name: AUTHENTIK_LISTEN__METRICS
- value: 0.0.0.0:9300
+ env: null
envFrom:
- secretRef:
name: authentik
- secretRef:
name: authentik-extra-env
ports:
--- HelmRelease: gatus/gatus Deployment: gatus/gatus
+++ HelmRelease: gatus/gatus Deployment: gatus/gatus
@@ -48,13 +48,13 @@
- key: intel.feature.node.kubernetes.io/gpu
operator: DoesNotExist
initContainers:
- args:
- --enable-httproute
- --gateway-name=main
- image: ghcr.io/home-operations/gatus-sidecar:0.0.14
+ image: ghcr.io/home-operations/gatus-sidecar:0.0.18
name: gatus-sidecar
resources:
limits:
memory: 64Mi
requests:
cpu: 10m
--- HelmRelease: spegel/spegel DaemonSet: spegel/spegel
+++ HelmRelease: spegel/spegel DaemonSet: spegel/spegel
@@ -26,13 +26,13 @@
spec:
serviceAccountName: spegel
securityContext: {}
priorityClassName: system-node-critical
initContainers:
- name: configuration
- image: ghcr.io/spegel-org/spegel@sha256:1109b33fabac86809b06f831eef7359b12232f5708554aef39efd036dce40748
+ image: ghcr.io/spegel-org/spegel@sha256:bfb81b01f3cb0512044f7af2f8dd4aae9163ca36a35253a2d91c30c1b5dcf626
imagePullPolicy: IfNotPresent
securityContext:
readOnlyRootFilesystem: true
args:
- configuration
- --log-level=INFO
@@ -55,13 +55,13 @@
memory: 50Mi
volumeMounts:
- name: containerd-config
mountPath: /etc/cri/conf.d/hosts
containers:
- name: registry
- image: ghcr.io/spegel-org/spegel@sha256:1109b33fabac86809b06f831eef7359b12232f5708554aef39efd036dce40748
+ image: ghcr.io/spegel-org/spegel@sha256:bfb81b01f3cb0512044f7af2f8dd4aae9163ca36a35253a2d91c30c1b5dcf626
imagePullPolicy: IfNotPresent
securityContext:
readOnlyRootFilesystem: true
args:
- registry
- --log-level=INFO
--- HelmRelease: spegel/spegel DaemonSet: spegel/spegel-cleanup
+++ HelmRelease: spegel/spegel DaemonSet: spegel/spegel-cleanup
@@ -27,13 +27,13 @@
app.kubernetes.io/instance: spegel
spec:
securityContext: {}
priorityClassName: system-node-critical
containers:
- name: cleanup
- image: ghcr.io/spegel-org/spegel@sha256:1109b33fabac86809b06f831eef7359b12232f5708554aef39efd036dce40748
+ image: ghcr.io/spegel-org/spegel@sha256:bfb81b01f3cb0512044f7af2f8dd4aae9163ca36a35253a2d91c30c1b5dcf626
imagePullPolicy: IfNotPresent
args:
- cleanup
- --containerd-registry-config-path=/etc/cri/conf.d/hosts
- --addr=:8080
readinessProbe:
--- HelmRelease: spegel/spegel Pod: spegel/spegel-cleanup-wait
+++ HelmRelease: spegel/spegel Pod: spegel/spegel-cleanup-wait
@@ -13,13 +13,13 @@
helm.sh/hook: post-delete
helm.sh/hook-delete-policy: before-hook-creation, hook-succeeded
helm.sh/hook-weight: '1'
spec:
containers:
- name: cleanup-wait
- image: ghcr.io/spegel-org/spegel@sha256:1109b33fabac86809b06f831eef7359b12232f5708554aef39efd036dce40748
+ image: ghcr.io/spegel-org/spegel@sha256:bfb81b01f3cb0512044f7af2f8dd4aae9163ca36a35253a2d91c30c1b5dcf626
imagePullPolicy: IfNotPresent
args:
- cleanup-wait
- --probe-endpoint=spegel-cleanup.spegel.svc.cluster.local.:8080
restartPolicy: Never
terminationGracePeriodSeconds: 0
--- HelmRelease: system-upgrade/tuppr Deployment: system-upgrade/tuppr
+++ HelmRelease: system-upgrade/tuppr Deployment: system-upgrade/tuppr
@@ -35,13 +35,13 @@
capabilities:
drop:
- ALL
readOnlyRootFilesystem: true
runAsNonRoot: true
runAsUser: 65532
- image: ghcr.io/home-operations/tuppr:0.1.35
+ image: ghcr.io/home-operations/tuppr:0.1.36
imagePullPolicy: IfNotPresent
command:
- /manager
args:
- --log-level=debug
- --leader-elect=true
--- HelmRelease: netbox/netbox CronJob: netbox/netbox-housekeeping
+++ HelmRelease: netbox/netbox CronJob: netbox/netbox-housekeeping
@@ -16,25 +16,25 @@
successfulJobsHistoryLimit: 5
suspend: false
jobTemplate:
metadata:
labels:
app.kubernetes.io/name: netbox
- helm.sh/chart: netbox-8.2.19
+ helm.sh/chart: netbox-8.3.0
app.kubernetes.io/instance: netbox
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/version: v4.6.1
spec:
template:
metadata:
labels:
app.kubernetes.io/instance: netbox
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: netbox
app.kubernetes.io/version: v4.6.1
- helm.sh/chart: netbox-8.2.19
+ helm.sh/chart: netbox-8.3.0
app.kubernetes.io/component: housekeeping
spec:
serviceAccountName: netbox
automountServiceAccountToken: false
securityContext:
fsGroup: 1000
--- HelmRelease: flux-system/flux-operator Deployment: flux-system/flux-operator
+++ HelmRelease: flux-system/flux-operator Deployment: flux-system/flux-operator
@@ -44,13 +44,13 @@
drop:
- ALL
readOnlyRootFilesystem: true
runAsNonRoot: true
seccompProfile:
type: RuntimeDefault
- image: ghcr.io/controlplaneio-fluxcd/flux-operator:v0.49.0
+ image: ghcr.io/controlplaneio-fluxcd/flux-operator:v0.50.0
imagePullPolicy: IfNotPresent
ports:
- name: http-metrics
containerPort: 8080
protocol: TCP
- name: http |
77b367c to
da16f35
Compare
|
No actionable comments were generated in the recent review. 🎉 ℹ️ Recent review info⚙️ Run configurationConfiguration used: Organization UI Review profile: ASSERTIVE Plan: Pro Plus Run ID: 📒 Files selected for processing (10)
📝 WalkthroughWalkthroughFlux bootstrap manifests upgraded from v2.8.7 → v2.8.8 with controller label/image updates; Flux OCIRepository tags bumped to 0.50.0; several application HelmRelease/OCIRepository chart and image tags incremented (gatus, netbox, authentik, descheduler, spegel, fluent-bit, tuppr). ChangesDependency Version Updates
Estimated code review effort🎯 3 (Moderate) | ⏱️ ~20 minutes Poem
🚥 Pre-merge checks | ✅ 5✅ Passed checks (5 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing Touches🧪 Generate unit tests (beta)
Comment |
d77ce70 to
0406737
Compare
0406737 to
34bb6a3
Compare
This PR contains the following updates:
2026.2.3→2026.5.00.35.x→0.36.x0.57.5→0.57.6v2.8.7→v2.8.80.49.0→0.50.00.49.0→0.50.00.1.35→0.1.360.0.14→0.0.180.7.0→0.7.18.2.*→8.3.*Release Notes
goauthentik/helm (authentik)
v2026.5.0Compare Source
authentik is an open-source Identity Provider focused on flexibility and versatility
See https://docs.goauthentik.io/releases/2026.5/
What's Changed
Full Changelog: goauthentik/helm@authentik-2026.2.3...authentik-2026.5.0
kubernetes-sigs/descheduler (descheduler)
v0.36.0: Descheduler v0.36.0Compare Source
What's Changed
New Contributors
Full Changelog: kubernetes-sigs/descheduler@v0.35.0...v0.36.0
fluent/helm-charts (fluent-bit)
v0.57.6Compare Source
Changed
fluxcd/flux2 (fluxcd/flux2)
v2.8.8Compare Source
Highlights
Flux v2.8.8 is a patch release that includes CVE fixes via go-git v5.19.1 (source-controller, image-automation-controller), reliability fixes in helm-controller and source-controller, the move of Helm back to upstream v4.2.0, support for GCP sovereign cloud artifact registries, and dependency updates. Users are encouraged to upgrade for the best experience.
ℹ️ Please follow the Upgrade Procedure for Flux v2.7+ for a smooth upgrade from Flux v2.6 to the latest version.
Fixes:
crds/directory (helm-controller)Improvements:
Components changelog
CLI changelog
Full Changelog: fluxcd/flux2@v2.8.7...v2.8.8
controlplaneio-fluxcd/flux-operator (ghcr.io/controlplaneio-fluxcd/charts/flux-instance)
v0.50.0Compare Source
What's Changed
ubi8-microby @matheuscscp in #864Full Changelog: controlplaneio-fluxcd/flux-operator@v0.49.0...v0.50.0
home-operations/tuppr (ghcr.io/home-operations/charts/tuppr)
v0.1.36Compare Source
Bug Fixes
Miscellaneous Chores
home-operations/gatus-sidecar (ghcr.io/home-operations/gatus-sidecar)
v0.0.18Compare Source
Code Refactoring
v0.0.17Compare Source
Features
v0.0.16Compare Source
Features
v0.0.15Compare Source
Bug Fixes
Miscellaneous Chores
netbox-community/netbox-chart (netbox)
v8.3.0Compare Source
IP address management (IPAM) and data center infrastructure management (DCIM) tool
What's Changed
Full Changelog: netbox-community/netbox-chart@netbox-operator-1.2.80...netbox-8.3.0
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Mend Renovate.
Summary by CodeRabbit