Skip to content

Conversation

@homebot-0
Copy link
Contributor

@homebot-0 homebot-0 bot commented Dec 20, 2025

This PR contains the following updates:

Package Update Change
external-dns minor 1.15.2 β†’ 1.20.0
ghcr.io/home-operations/charts-mirror/external-dns minor 1.19.0 β†’ 1.20.0
ghcr.io/k8s-gateway/charts/k8s-gateway minor 3.2.8 β†’ 3.4.1
ghcr.io/kashalls/external-dns-unifi-webhook minor v0.7.0 β†’ v0.8.1

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

πŸ„ Talos CATTLE: Major/minor version requires manual approval. Full VM rebuild via Terraform.


Release Notes

kashalls/external-dns-unifi-webhook (ghcr.io/kashalls/external-dns-unifi-webhook)

v0.8.1

Compare Source

What's Changed

Full Changelog: kashalls/external-dns-unifi-webhook@v0.8.0...v0.8.1

v0.8.0

Compare Source

What's Changed
New Contributors

Full Changelog: kashalls/external-dns-unifi-webhook@v0.7.0...v0.8.0


Configuration

πŸ“… Schedule: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

β™» Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

πŸ‘» Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@homebot-0 homebot-0 bot added deps/network Network components (Envoy, Cloudflare, VPN) renovate Dependency update by Renovate update/minor Minor version update - new features labels Dec 20, 2025
@coderabbitai
Copy link

coderabbitai bot commented Dec 20, 2025

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.


Comment @coderabbitai help to get the list of available commands and usage tips.

@homebot-0
Copy link
Contributor Author

homebot-0 bot commented Dec 20, 2025

ℹ️ SOPS Encryption Check

No SOPS files detected in this pull request.

Check Status
SOPS files in PR βœ… None detected

No encryption validation required for this PR.

@homebot-0 homebot-0 bot added the area/kubernetes Changes to Kubernetes manifests and apps label Dec 20, 2025
@homebot-0
Copy link
Contributor Author

homebot-0 bot commented Dec 20, 2025

βœ… Gitleaks Secret Scan Passed

No secrets detected in this pull request.

Check Status
Secret patterns βœ… Clean
Sensitive files βœ… None detected

@homebot-0
Copy link
Contributor Author

homebot-0 bot commented Dec 20, 2025

--- HelmRelease: network/unifi-dns ServiceAccount: network/unifi-dns

+++ HelmRelease: network/unifi-dns ServiceAccount: network/unifi-dns

@@ -5,8 +5,8 @@

   name: unifi-dns
   namespace: network
   labels:
     app.kubernetes.io/name: external-dns
     app.kubernetes.io/instance: unifi-dns
     app.kubernetes.io/managed-by: Helm
-automountServiceAccountToken: null
+automountServiceAccountToken: true
 
--- HelmRelease: network/unifi-dns ClusterRole: network/unifi-dns

+++ HelmRelease: network/unifi-dns ClusterRole: network/unifi-dns

@@ -24,13 +24,20 @@

   - watch
   - list
 - apiGroups:
   - ''
   resources:
   - services
-  - endpoints
+  verbs:
+  - get
+  - watch
+  - list
+- apiGroups:
+  - discovery.k8s.io
+  resources:
+  - endpointslices
   verbs:
   - get
   - watch
   - list
 - apiGroups:
   - gateway.networking.k8s.io
--- HelmRelease: network/unifi-dns Deployment: network/unifi-dns

+++ HelmRelease: network/unifi-dns Deployment: network/unifi-dns

@@ -19,12 +19,13 @@

   template:
     metadata:
       labels:
         app.kubernetes.io/name: external-dns
         app.kubernetes.io/instance: unifi-dns
     spec:
+      automountServiceAccountToken: true
       serviceAccountName: unifi-dns
       securityContext:
         fsGroup: 65534
         runAsNonRoot: true
         seccompProfile:
           type: RuntimeDefault
@@ -37,13 +38,13 @@

             - ALL
           privileged: false
           readOnlyRootFilesystem: true
           runAsGroup: 65532
           runAsNonRoot: true
           runAsUser: 65532
-        image: registry.k8s.io/external-dns/external-dns:v0.15.1
+        image: registry.k8s.io/external-dns/external-dns:v0.20.0
         imagePullPolicy: IfNotPresent
         args:
         - --log-level=info
         - --log-format=json
         - --interval=5m
         - --source=gateway-httproute
@@ -81,13 +82,13 @@

             cpu: 100m
             memory: 100Mi
           requests:
             cpu: 10m
             memory: 50Mi
       - name: webhook
-        image: ghcr.io/kashalls/external-dns-unifi-webhook:v0.7.0
+        image: ghcr.io/kashalls/external-dns-unifi-webhook:v0.8.1
         imagePullPolicy: IfNotPresent
         env:
         - name: UNIFI_USER
           valueFrom:
             secretKeyRef:
               key: UNIFI_USER
--- HelmRelease: network/k8s-gateway Deployment: network/k8s-gateway

+++ HelmRelease: network/k8s-gateway Deployment: network/k8s-gateway

@@ -20,13 +20,13 @@

         app.kubernetes.io/instance: k8s-gateway
         app.kubernetes.io/managed-by: Helm
     spec:
       serviceAccountName: k8s-gateway
       containers:
       - name: k8s-gateway
-        image: ghcr.io/k8s-gateway/k8s_gateway:1.6.0
+        image: ghcr.io/k8s-gateway/k8s_gateway:1.6.2
         imagePullPolicy: IfNotPresent
         args:
         - -conf
         - /etc/coredns/Corefile
         securityContext:
           runAsUser: 1000
--- HelmRelease: network/cloudflare-dns Deployment: network/cloudflare-dns

+++ HelmRelease: network/cloudflare-dns Deployment: network/cloudflare-dns

@@ -40,13 +40,13 @@

             - ALL
           privileged: false
           readOnlyRootFilesystem: true
           runAsGroup: 65532
           runAsNonRoot: true
           runAsUser: 65532
-        image: registry.k8s.io/external-dns/external-dns:v0.19.0
+        image: registry.k8s.io/external-dns/external-dns:v0.20.0
         imagePullPolicy: IfNotPresent
         env:
         - name: CF_API_TOKEN
           valueFrom:
             secretKeyRef:
               key: api-token

@homebot-0
Copy link
Contributor Author

homebot-0 bot commented Dec 20, 2025

--- kubernetes/apps/network/unifi-dns/app Kustomization: network/unifi-dns HelmRelease: network/unifi-dns

+++ kubernetes/apps/network/unifi-dns/app Kustomization: network/unifi-dns HelmRelease: network/unifi-dns

@@ -13,13 +13,13 @@

       chart: external-dns
       interval: 30m
       sourceRef:
         kind: HelmRepository
         name: external-dns
         namespace: network
-      version: 1.15.2
+      version: 1.20.0
   install:
     crds: CreateReplace
     strategy:
       name: RetryOnFailure
   interval: 30m
   rollback:
@@ -61,13 +61,13 @@

               key: UNIFI_HOST
               name: unifi-dns-secret
         - name: UNIFI_SKIP_TLS_VERIFY
           value: 'true'
         image:
           repository: ghcr.io/kashalls/external-dns-unifi-webhook
-          tag: v0.7.0
+          tag: v0.8.1
         livenessProbe:
           httpGet:
             path: /healthz
             port: http-webhook
           initialDelaySeconds: 10
           periodSeconds: 10
--- kubernetes/apps/network/k8s-gateway/app Kustomization: network/k8s-gateway OCIRepository: network/k8s-gateway

+++ kubernetes/apps/network/k8s-gateway/app Kustomization: network/k8s-gateway OCIRepository: network/k8s-gateway

@@ -10,9 +10,9 @@

 spec:
   interval: 1h
   layerSelector:
     mediaType: application/vnd.cncf.helm.chart.content.v1.tar+gzip
     operation: copy
   ref:
-    tag: 3.2.8
+    tag: 3.4.1
   url: oci://ghcr.io/k8s-gateway/charts/k8s-gateway
 
--- kubernetes/apps/network/cloudflare-dns/app Kustomization: network/cloudflare-dns OCIRepository: network/cloudflare-dns

+++ kubernetes/apps/network/cloudflare-dns/app Kustomization: network/cloudflare-dns OCIRepository: network/cloudflare-dns

@@ -10,9 +10,9 @@

 spec:
   interval: 15m
   layerSelector:
     mediaType: application/vnd.cncf.helm.chart.content.v1.tar+gzip
     operation: copy
   ref:
-    tag: 1.19.0
+    tag: 1.20.0
   url: oci://ghcr.io/home-operations/charts-mirror/external-dns
 

@homebot-0 homebot-0 bot force-pushed the renovate/network-dns branch from a082c99 to 75c0ee7 Compare December 25, 2025 01:39
@homebot-0 homebot-0 bot changed the title feat(helm): update external-dns to v1.19.0 feat(helm): update 🌐 network: dns (minor) Dec 25, 2025
@homebot-0 homebot-0 bot force-pushed the renovate/network-dns branch 4 times, most recently from 4f14946 to 24c5f0b Compare January 4, 2026 22:09
@homebot-0 homebot-0 bot force-pushed the renovate/network-dns branch from 24c5f0b to dc8306f Compare January 10, 2026 06:12
@homebot-0 homebot-0 bot force-pushed the renovate/network-dns branch from dc8306f to f3484d1 Compare January 15, 2026 05:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/kubernetes Changes to Kubernetes manifests and apps deps/network Network components (Envoy, Cloudflare, VPN) renovate Dependency update by Renovate update/minor Minor version update - new features

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants