Update Helm chart versions across multiple components to latest stable releases, including Argo CD (9.5.14), cert-manager (v1.20.2), Cilium (1.19.4), kube-prometheus-stack (85.0.3), Loki (7.0.0), Fluent Bit (0.57.5), Headlamp (0.42.0), Traefik (40.2.0), and Kyverno (3.8.0). Adjusted related documentation and values files to reflect these changes for improved deployment consistency and compatibility.

clusters/noble/bootstrap/argocd/README.md

@@ -10,7 +10,7 @@ helm repo update
 helm upgrade --install argocd argo/argo-cd \
   --namespace argocd \
   --create-namespace \
-  --version 9.4.17 \
+  --version 9.5.14 \
   -f clusters/noble/bootstrap/argocd/values.yaml \
   --wait
 ```
@@ -43,7 +43,7 @@ If **`helm upgrade --wait`** fails with *Secret was previously issued by `letsen
 kubectl -n argocd delete certificate argocd-server --ignore-not-found
 kubectl -n argocd delete secret argocd-server-tls --ignore-not-found
 helm upgrade --install argocd argo/argo-cd -n argocd --create-namespace \
-  --version 9.4.17 -f clusters/noble/bootstrap/argocd/values.yaml --wait
+  --version 9.5.14 -f clusters/noble/bootstrap/argocd/values.yaml --wait
 ```
 
 ## 3. Register this repo (if private)
@@ -112,4 +112,4 @@ After **`noble-bootstrap-root`** is automated and leaf apps are synced, **git**
 
 ## Versions
 
-Pinned in **`values.yaml`** comments (chart **9.4.17** / Argo CD **v3.3.6** at time of writing). Bump **`--version`** when upgrading.
+Pinned in **`values.yaml`** comments (chart **9.5.14** / Argo CD **v3.4.2** at time of writing). Bump **`--version`** when upgrading.

clusters/noble/bootstrap/argocd/app-of-apps/cert-manager-application.yaml

@@ -14,7 +14,7 @@ spec:
       path: clusters/noble/bootstrap/cert-manager
     - repoURL: https://charts.jetstack.io
       chart: cert-manager
-      targetRevision: v1.20.0
+      targetRevision: v1.20.2
       helm:
         releaseName: cert-manager
         valueFiles:

clusters/noble/bootstrap/argocd/app-of-apps/cilium-application.yaml

@@ -11,7 +11,7 @@ spec:
   sources:
     - repoURL: https://helm.cilium.io/
       chart: cilium
-      targetRevision: 1.16.6
+      targetRevision: 1.19.4
       helm:
         releaseName: cilium
         valueFiles:

clusters/noble/bootstrap/argocd/app-of-apps/fluent-bit-application.yaml

@@ -11,7 +11,7 @@ spec:
   sources:
     - repoURL: https://fluent.github.io/helm-charts
       chart: fluent-bit
-      targetRevision: 0.56.0
+      targetRevision: 0.57.5
       helm:
         releaseName: fluent-bit
         valueFiles:

clusters/noble/bootstrap/argocd/app-of-apps/headlamp-application.yaml

@@ -11,7 +11,7 @@ spec:
   sources:
     - repoURL: https://kubernetes-sigs.github.io/headlamp/
       chart: headlamp
-      targetRevision: 0.40.1
+      targetRevision: 0.42.0
       helm:
         releaseName: headlamp
         valueFiles:

clusters/noble/bootstrap/argocd/app-of-apps/kube-prometheus-application.yaml

@@ -11,7 +11,7 @@ spec:
   sources:
     - repoURL: https://prometheus-community.github.io/helm-charts
       chart: kube-prometheus-stack
-      targetRevision: 82.15.1
+      targetRevision: 85.0.3
       helm:
         skipCrds: true
         releaseName: kube-prometheus

clusters/noble/bootstrap/argocd/app-of-apps/kyverno-application.yaml

@@ -11,7 +11,7 @@ spec:
   sources:
     - repoURL: https://kyverno.github.io/kyverno/
       chart: kyverno
-      targetRevision: 3.7.1
+      targetRevision: 3.8.0
       helm:
         releaseName: kyverno
         valueFiles:

clusters/noble/bootstrap/argocd/app-of-apps/kyverno-policies-application.yaml

@@ -11,7 +11,7 @@ spec:
   sources:
     - repoURL: https://kyverno.github.io/kyverno/
       chart: kyverno-policies
-      targetRevision: 3.7.1
+      targetRevision: 3.8.0
       helm:
         releaseName: kyverno-policies
         valueFiles:

clusters/noble/bootstrap/argocd/app-of-apps/loki-application.yaml

@@ -11,7 +11,7 @@ spec:
   sources:
     - repoURL: https://grafana.github.io/helm-charts
       chart: loki
-      targetRevision: 6.55.0
+      targetRevision: 7.0.0
       helm:
         releaseName: loki
         valueFiles:

clusters/noble/bootstrap/argocd/app-of-apps/traefik-application.yaml

@@ -11,7 +11,7 @@ spec:
   sources:
     - repoURL: https://traefik.github.io/charts
       chart: traefik
-      targetRevision: 39.0.6
+      targetRevision: 40.2.0
       helm:
         releaseName: traefik
         valueFiles:

clusters/noble/bootstrap/argocd/values.yaml

@@ -1,13 +1,13 @@
 # Argo CD — noble lab (GitOps)
 #
-# Chart: argo/argo-cd — pin version on the helm command (e.g. 9.4.17).
+# Chart: argo/argo-cd — pin version on the helm command (e.g. 9.5.14).
 # UI/API: **Ingress** via **Traefik** at **argo.apps.noble.lab.pcenicni.dev** (TLS: cert-manager
 # ClusterIssuer + **`server.insecure`** so TLS terminates at Traefik).
 # DNS: **`argo.apps.noble.lab.pcenicni.dev`** → Traefik LB **192.168.50.211** (same wildcard as apps).
 #
 # helm repo add argo https://argoproj.github.io/argo-helm
 # helm upgrade --install argocd argo/argo-cd -n argocd --create-namespace \
-#   --version 9.4.17 -f clusters/noble/bootstrap/argocd/values.yaml --wait
+#   --version 9.5.14 -f clusters/noble/bootstrap/argocd/values.yaml --wait
 #
 # Initial admin password: kubectl -n argocd get secret argocd-initial-admin-secret -o jsonpath='{.data.password}' | base64 -d
 #