chore(deps): update helm release renovate to v39.219.2

charts/issuer/templates/issuer.yaml

@@ -1,23 +1,10 @@
-{{- range $name, $issuer := .Values.clusterIssuers }}
 ---
 apiVersion: cert-manager.io/v1
 kind: ClusterIssuer
 metadata:
   labels:
-    {{- include "issuer.labels" $ | nindent 4 }}
+    {{- include "issuer.labels" . | nindent 4 }}
-  name: "{{ $name }}"
+  name: "{{ .Values.name }}"
 spec:
-{{ $issuer.spec | toYaml | indent 2 }}
+  acme:
-{{- end }}
+{{ .Values.spec | toYaml | indent 2 }}
-{{- range $name, $issuer := .Values.issuers }}
----
-apiVersion: cert-manager.io/v1
-kind: Issuer
-metadata:
-  labels:
-    {{- include "issuer.labels" $ | nindent 4 }}
-  name: "{{ $name }}"
-  namespace: {{ $issuer.namespace }}
-spec:
-{{ $issuer.spec | toYaml | indent 2 }}
-{{- end }}

helmfiles/system.yaml

@@ -9,8 +9,6 @@ repositories:
     url: https://kubernetes-sigs.github.io/metrics-server/
   - name: jetstack
     url: https://charts.jetstack.io
-  - name: metallb
-    url: https://metallb.github.io/metallb
 
 releases:
   - name: coredns
@@ -30,26 +28,6 @@ releases:
       - template: common-values
       - template: common-values-tpl
 
-  - name: cert-manager
-    chart: jetstack/cert-manager
-    version: v1.17.1
-    namespace: kube-system
-    missingFileHandler: Warn
-    needs:
-      - kube-system/cilium
-    inherit:
-      - template: common-values
-      - template: common-values-tpl
-
-  - name: issuer
-    chart: ./charts/issuer
-    namespace: kube-system
-    missingFileHandler: Warn
-    needs:
-      - kube-system/cert-manager
-    inherit:
-      - template: common-values
-
   - name: zot
     chart: zot/zot
     version: 0.1.67
@@ -71,13 +49,23 @@ releases:
     inherit:
       - template: common-values-tpl
 
-  - name: metallb
+  - name: cert-manager
-    chart: metallb/metallb
+    chart: jetstack/cert-manager
+    version: v1.17.1
     namespace: kube-system
-    condition: base.enabled
+    missingFileHandler: Warn
-    version: 0.14.9
     needs:
-      - registry/zot
+      - kube-system/cilium
     inherit:
       - template: common-values
       - template: common-values-tpl
+
+      #- name: issuer
+      #  chart: '{{ requiredEnv "PWD" }}/charts/issuer'
+      #  namespace: kube-public
+      #  missingFileHandler: Warn
+      #  needs:
+      #    - kube-system/zot-mirror
+      #  inherit:
+      #    - template: common-values
+      #    - template: env-values

installations/pipelines/helmfile.yaml

@@ -20,7 +20,7 @@ releases:
   - name: renovate-gitea
     chart: renovate/renovate
     namespace: pipelines
-    version: 39.220.3
+    version: 39.219.2
     inherit:
       - template: default-env-values
       - template: default-env-secrets
@@ -28,7 +28,7 @@ releases:
     chart: renovate/renovate
     installed: false
     namespace: pipelines
-    version: 39.220.3
+    version: 39.219.2
     inherit:
       - template: default-env-values
       - template: default-env-secrets

values/common/kube-system/cilium/values.gotmpl

@@ -12,13 +12,4 @@ operator:
   image:
     repository: {{ .Values.registry }}/quay/cilium/operator
     useDigest: false
-hubble:
-  tls:
-    auto:
-      method: certmanager
-      certValidityDuration: 14
-      certManagerIssuerRef:
-        group: cert-manager.io
-        kind: Issuer
-        name: selfsigned
 {{- end }}

values/common/kube-system/issuer/values.yaml

@@ -1,17 +0,0 @@
-clusterIssuers:
-  badhouseplants-issuer-http01:
-    spec:
-      acme:
-        email: allanger@badhouseplants.net
-        preferredChain: ""
-        privateKeySecretRef:
-          name: badhouseplants-http01-issuer-account-key
-        server: https://acme-v02.api.letsencrypt.org/directory
-        solvers:
-          - http01:
-              ingress:
-                ingressClassName: traefik
-issuers:
-  selfsigned:
-    spec:
-      selfSigned: {}

values/common/kube-system/metallb/values.gotmpl

@@ -1,13 +0,0 @@
-imagePullSecrets:
-  - name: regcred
-
-controller:
-  image:
-    repository: {{ .Values.registry }}/quay/metallb/controller
-
-speaker:
-  image:
-    repository: {{ .Values.registry }}/quay/metallb/speaker
-  frr:
-    image:
-      repository: {{ .Values.registry }}/quay/frrouting/frr

values/common/values.issuer.yaml

@@ -0,0 +1,12 @@
+name: badhouseplants-issuer-http01
+spec:
+  acme:
+    email: allanger@badhouseplants.net
+    preferredChain: ""
+    privateKeySecretRef:
+      name: badhouseplants-http01-issuer-account-key
+    server: https://acme-v02.api.letsencrypt.org/directory
+    solvers:
+      - http01:
+          ingress:
+            ingressClassName: traefik

values/common/values.metallb.yaml

@@ -1,6 +1,10 @@
 controller:
   enabled: true
   logLevel: warn
+  image:
+    repository: quay.io/metallb/controller
+    tag:
+    pullPolicy:
   strategy:
     type: RollingUpdate
   securityContext:
@@ -33,6 +37,10 @@ speaker:
   enabled: true
   logLevel: warn
   tolerateMaster: true
+  image:
+    repository: quay.io/metallb/speaker
+    tag:
+    pullPolicy:
   securityContext: {}
   resources:
     requests:

values/etersoft/values.issuer.yaml

@@ -0,0 +1,12 @@
+name: badhouseplants-issuer-http01
+spec:
+  acme:
+    email: allanger@badhouseplants.net
+    preferredChain: ""
+    privateKeySecretRef:
+      name: badhouseplants-http01-issuer-account-key
+    server: https://acme-v02.api.letsencrypt.org/directory
+    solvers:
+      - http01:
+          ingress:
+            ingressClassName: traefik