From 2f3f781494175b19d47768ed597cd57d9b1b337e Mon Sep 17 00:00:00 2001
From: "feisar-bot[bot]" <98277827+feisar-bot[bot]@users.noreply.github.com>
Date: Mon, 14 Apr 2025 18:28:24 +0000
Subject: [PATCH] =?UTF-8?q?=E2=AC=86=EF=B8=8F=20Update=20ghcr.io/external-?=
 =?UTF-8?q?secrets/charts/external-secrets=20(=200.15.1=20=E2=86=92=200.16?=
 =?UTF-8?q?.0=20)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

| datasource | package                                          | from   | to     |
| ---------- | ------------------------------------------------ | ------ | ------ |
| docker     | ghcr.io/external-secrets/charts/external-secrets | 0.15.1 | 0.16.0 |
---
 .../external-secrets/app/helmrelease.yaml     |  2 +-
 kubernetes/bootstrap/apps/helmfile.yaml       | 78 +++++++++++++++++++
 2 files changed, 79 insertions(+), 1 deletion(-)

diff --git a/kubernetes/apps/external-secrets/external-secrets/app/helmrelease.yaml b/kubernetes/apps/external-secrets/external-secrets/app/helmrelease.yaml
index 91f99b495..6d8f35725 100644
--- a/kubernetes/apps/external-secrets/external-secrets/app/helmrelease.yaml
+++ b/kubernetes/apps/external-secrets/external-secrets/app/helmrelease.yaml
@@ -10,7 +10,7 @@ spec:
     mediaType: application/vnd.cncf.helm.chart.content.v1.tar+gzip
     operation: copy
   ref:
-    tag: 0.15.1
+    tag: 0.16.0@sha256:73d56ac13a838ae4d6025e0f5e021dca4e48f833b5b0aa1e2f81a51d5e33f6d1
   url: oci://ghcr.io/external-secrets/charts/external-secrets
   verify:
     provider: cosign
diff --git a/kubernetes/bootstrap/apps/helmfile.yaml b/kubernetes/bootstrap/apps/helmfile.yaml
index 9939fbb02..60fd04af4 100644
--- a/kubernetes/bootstrap/apps/helmfile.yaml
+++ b/kubernetes/bootstrap/apps/helmfile.yaml
@@ -16,9 +16,87 @@ repositories:
     url: https://postfinance.github.io/kubelet-csr-approver
 
 releases:
+  - name: kube-prometheus-stack-crds
+    namespace: observability
+    chart: oci://ghcr.io/prometheus-community/charts/prometheus-operator-crds
+    version: 19.0.0
+
+  - name: cilium
+    namespace: kube-system
+    atomic: true
+    chart: oci://ghcr.io/home-operations/charts-mirror/cilium
+    version: 1.17.3
+    values: ["../../apps/kube-system/cilium/app/helm-values.yaml"]
+    hooks:
+      - # Wait for cilium CRDs to be available
+        events: ['postsync']
+        command: bash
+        args:
+          - -c
+          - until kubectl get crd ciliumbgppeeringpolicies.cilium.io ciliuml2announcementpolicies.cilium.io ciliumloadbalancerippools.cilium.io &>/dev/null; do sleep 10; done
+        showlogs: true
+    needs: ["observability/kube-prometheus-stack-crds"]
+
+  - name: coredns
+    namespace: kube-system
+    atomic: true
+    chart: oci://ghcr.io/coredns/charts/coredns
+    version: 1.39.2
+    values: ["../../apps/kube-system/coredns/app/helm-values.yaml"]
+    needs: ["kube-system/cilium"]
+
+  - name: kubelet-csr-approver
+    namespace: kube-system
+    atomic: true
+    chart: postfinance/kubelet-csr-approver
+    version: 1.2.6
+    values: ["../../apps/kube-system/kubelet-csr-approver/app/helm-values.yaml"]
+    needs: ["kube-system/coredns"]
+
+  - name: spegel
+    namespace: kube-system
+    atomic: true
+    chart: oci://ghcr.io/spegel-org/helm-charts/spegel
+    version: 0.1.1
+    values: ["../../apps/kube-system/spegel/app/helm-values.yaml"]
+    needs: ["kube-system/kubelet-csr-approver"]
+
+  - name: cert-manager
+    namespace: cert-manager
+    atomic: true
+    chart: oci://ghcr.io/home-operations/charts-mirror/cert-manager
+    version: v1.17.1
+    values: ['../../apps/cert-manager/cert-manager/app/helm/values.yaml']
+    needs: ['kube-system/spegel']
+
+  - name: external-secrets
+    namespace: external-secrets
+    atomic: true
+    chart: oci://ghcr.io/external-secrets/charts/external-secrets
+    version: 0.16.0
+    values: ['../../apps/external-secrets/external-secrets/app/helm/values.yaml']
+    needs: ['cert-manager/cert-manager']
+
   - name: onepassword-connect
     namespace: external-secrets
     atomic: true
     chart: oci://ghcr.io/bjw-s/helm/app-template
     version: 3.7.3
     values: ['../../apps/external-secrets/external-secrets/stores/onepassword/helm/values.yaml']
+    needs: ['external-secrets/external-secrets']
+
+  - name: flux-operator
+    namespace: flux-system
+    atomic: true
+    chart: oci://ghcr.io/controlplaneio-fluxcd/charts/flux-operator
+    version: 0.18.0
+    values: ['../../apps/flux-system/flux-operator/app/helm/values.yaml']
+    needs: ['external-secrets/external-secrets']
+
+  - name: flux-instance
+    namespace: flux-system
+    atomic: true
+    chart: oci://ghcr.io/controlplaneio-fluxcd/charts/flux-instance
+    version: 0.18.0
+    values: ['../../apps/flux-system/flux-instance/app/helm/values.yaml']
+    needs: ['flux-system/flux-operator']