chore(deps): update azure/k8s-set-context action to v5 (#64)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [azure/k8s-set-context](https://github.com/azure/k8s-set-context) | action | major | `v4.0.2` → `v5.0.0` |

---

### Release Notes

<details>
<summary>azure/k8s-set-context (azure/k8s-set-context)</summary>

### [`v5.0.0`](https://github.com/Azure/k8s-set-context/releases/tag/v5.0.0)

[Compare Source](https://github.com/azure/k8s-set-context/compare/v4.0.2...v5.0.0)

##### Features

- [#&#8203;227](https://github.com/azure/k8s-set-context/issues/227) Migrate to ESM with esbuild, vitest

##### Runtime and platform

- [#&#8203;222](https://github.com/azure/k8s-set-context/issues/222) Update Node version from 20 to 24

##### Dependabot updates

- [#&#8203;231](https://github.com/azure/k8s-set-context/issues/231) Bump github/codeql-action in /.github/workflows in the actions group
- [#&#8203;230](https://github.com/azure/k8s-set-context/issues/230) Bump typescript in the actions group across 1 directory
- [#&#8203;228](https://github.com/azure/k8s-set-context/issues/228) Bump picomatch
- [#&#8203;226](https://github.com/azure/k8s-set-context/issues/226) Bump github/codeql-action in /.github/workflows in the actions group
- [#&#8203;223](https://github.com/azure/k8s-set-context/issues/223) Bump undici from 6.23.0 to 6.24.0
- [#&#8203;221](https://github.com/azure/k8s-set-context/issues/221) Bump the actions group in /.github/workflows with 2 updates
- [#&#8203;218](https://github.com/azure/k8s-set-context/issues/218) Bump the actions group in /.github/workflows with 2 updates
- [#&#8203;219](https://github.com/azure/k8s-set-context/issues/219) Bump minimatch
- [#&#8203;217](https://github.com/azure/k8s-set-context/issues/217) Bump undici and [@&#8203;actions/http-client](https://github.com/actions/http-client)
- [#&#8203;216](https://github.com/azure/k8s-set-context/issues/216) Bump github/codeql-action in /.github/workflows in the actions group
- [#&#8203;214](https://github.com/azure/k8s-set-context/issues/214) Bump the actions group in /.github/workflows with 2 updates
- [#&#8203;212](https://github.com/azure/k8s-set-context/issues/212) Bump the actions group in /.github/workflows with 2 updates
- [#&#8203;211](https://github.com/azure/k8s-set-context/issues/211) Bump the actions group with 3 updates
- [#&#8203;210](https://github.com/azure/k8s-set-context/issues/210) Bump the actions group with 2 updates
- [#&#8203;208](https://github.com/azure/k8s-set-context/issues/208) Bump [@&#8203;types/node](https://github.com/types/node) from 25.0.2 to 25.0.3 in the actions group
- [#&#8203;209](https://github.com/azure/k8s-set-context/issues/209) Bump github/codeql-action in /.github/workflows in the actions group
- [#&#8203;206](https://github.com/azure/k8s-set-context/issues/206) Bump the actions group with 3 updates
- [#&#8203;207](https://github.com/azure/k8s-set-context/issues/207) Bump github/codeql-action in /.github/workflows in the actions group
- [#&#8203;205](https://github.com/azure/k8s-set-context/issues/205) Bump the actions group in /.github/workflows with 4 updates
- [#&#8203;204](https://github.com/azure/k8s-set-context/issues/204) Bump the actions group with 2 updates
- [#&#8203;202](https://github.com/azure/k8s-set-context/issues/202) Bump the actions group in /.github/workflows with 2 updates
- [#&#8203;203](https://github.com/azure/k8s-set-context/issues/203) Bump prettier from 3.6.2 to 3.7.3 in the actions group
- [#&#8203;201](https://github.com/azure/k8s-set-context/issues/201) Bump glob from 10.4.5 to 10.5.0
- [#&#8203;200](https://github.com/azure/k8s-set-context/issues/200) Bump js-yaml from 3.14.1 to 3.14.2
- [#&#8203;198](https://github.com/azure/k8s-set-context/issues/198) Bump js-yaml from 4.1.0 to 4.1.1
- [#&#8203;199](https://github.com/azure/k8s-set-context/issues/199) Bump the actions group with 2 updates

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My41LjQiLCJ1cGRhdGVkSW5WZXIiOiI0My41LjQiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImFjdGlvbiIsImRlcHMiXX0=-->

Reviewed-on: https://gitea.t000-n.de/t.behrendt/k/pulls/64
Reviewed-by: t.behrendt <t.behrendt@noreply.localhost>
Co-authored-by: Renovate Bot <renovate@t00n.de>
Co-committed-by: Renovate Bot <renovate@t00n.de>

.gitea/workflows/deploy.yaml

@@ -13,7 +13,6 @@ jobs:
       node-labels: ${{ steps.filter.outputs.node-labels }}
       coredns: ${{ steps.filter.outputs.coredns }}
       traefik: ${{ steps.filter.outputs.traefik }}
-      crowdsec: ${{ steps.filter.outputs.crowdsec }}
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
@@ -28,8 +27,6 @@ jobs:
               - 'coredns/**'
             traefik:
               - 'traefik/**'
-            crowdsec:
-              - 'crowdsec/**'
 
   deploy-node-labels:
     runs-on: ubuntu-latest
@@ -37,8 +34,8 @@ jobs:
     if: ${{ needs.check-changes.outputs.node-labels == 'true' || github.event_name == 'workflow_dispatch' }}
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - uses: azure/setup-kubectl@776406bce94f63e41d621b960d78ee25c8b76ede # v4.0.1
+      - uses: azure/setup-kubectl@15650b3ad78fff148532a140b8a4c821796b2d7b # v5.0.0
-      - uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4.0.2
+      - uses: azure/k8s-set-context@89b837d75b40a7bd2ddafde837473c212db8b313 # v5.0.0
         with:
           method: kubeconfig
           kubeconfig: ${{ secrets.KUBECONFIG }}
@@ -52,8 +49,8 @@ jobs:
     if: ${{ needs.check-changes.outputs.coredns == 'true' || github.event_name == 'workflow_dispatch' }}
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - uses: azure/setup-kubectl@776406bce94f63e41d621b960d78ee25c8b76ede # v4.0.1
+      - uses: azure/setup-kubectl@15650b3ad78fff148532a140b8a4c821796b2d7b # v5.0.0
-      - uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4.0.2
+      - uses: azure/k8s-set-context@89b837d75b40a7bd2ddafde837473c212db8b313 # v5.0.0
         with:
           method: kubeconfig
           kubeconfig: ${{ secrets.KUBECONFIG }}
@@ -70,8 +67,8 @@ jobs:
     if: ${{ needs.check-changes.outputs.traefik == 'true' || github.event_name == 'workflow_dispatch' }}
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - uses: azure/setup-kubectl@776406bce94f63e41d621b960d78ee25c8b76ede # v4.0.1
+      - uses: azure/setup-kubectl@15650b3ad78fff148532a140b8a4c821796b2d7b # v5.0.0
-      - uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4.0.2
+      - uses: azure/k8s-set-context@89b837d75b40a7bd2ddafde837473c212db8b313 # v5.0.0
         with:
           method: kubeconfig
           kubeconfig: ${{ secrets.KUBECONFIG }}
@@ -95,16 +92,6 @@ jobs:
             {
               "auth": "${{ secrets.ADMIN_BASIC_AUTH_CREDENTIALS }}"
             }
-      - name: Set crowdsec bouncer api key
-        uses: azure/k8s-create-secret@6e0ba8047235646753f2a3a3b359b4d0006ff218 # v5.0.1
-        with:
-          namespace: kube-system
-          secret-name: crowdsec-bouncer-api-key
-          secret-type: generic
-          data: |
-            {
-              "api-key": "${{ secrets.CROWDSEC_BOUNCER_API_KEY }}"
-            }
       - name: Deploy
         uses: azure/k8s-deploy@c8cfec839dc09896b3b8cc40cd13d04792680771 # v5.1.0
         with:
@@ -113,37 +100,13 @@ jobs:
           strategy: basic
           namespace: kube-system
 
-  deploy-crowdsec:
-    runs-on: ubuntu-latest
-    needs: check-changes
-    if: ${{ needs.check-changes.outputs.crowdsec == 'true' || github.event_name == 'workflow_dispatch' }}
-    steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - uses: https://gitea.t000-n.de/t.behrendt/k_deploy_workflows/.gitea/actions/extract-namespace-from-repo-name@a7cfa06300b45468b86d351e78a0330ee3ef483d # 0.0.4
-        id: namespace
-        with:
-          repo: ${{ github.repository }}
-      - uses: azure/setup-kubectl@776406bce94f63e41d621b960d78ee25c8b76ede # v4.0.1
-      - uses: azure/setup-helm@1a275c3b69536ee54be43f2070a358922e12c8d4 # v4
-        with:
-          version: "3.15.0"
-      - uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4.0.2
-        with:
-          method: kubeconfig
-          kubeconfig: ${{ secrets.KUBECONFIG }}
-      - name: Deploy helm
-        uses: helmfile/helmfile-action@c58e4737b8a69764d8294a70fcbcb0a63573dae9 # v2.3.1
-        with:
-          helmfile-args: apply
-          helmfile-workdirectory: "crowdsec"
-
   deploy-docker-registry-secret:
     runs-on: ubuntu-latest
     needs: check-changes
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - uses: azure/setup-kubectl@776406bce94f63e41d621b960d78ee25c8b76ede # v4.0.1
+      - uses: azure/setup-kubectl@15650b3ad78fff148532a140b8a4c821796b2d7b # v5.0.0
-      - uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4.0.2
+      - uses: azure/k8s-set-context@89b837d75b40a7bd2ddafde837473c212db8b313 # v5.0.0
         with:
           method: kubeconfig
           kubeconfig: ${{ secrets.KUBECONFIG }}

.gitea/workflows/validate.yaml

@@ -10,8 +10,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - uses: azure/setup-kubectl@776406bce94f63e41d621b960d78ee25c8b76ede # v4.0.1
+      - uses: azure/setup-kubectl@15650b3ad78fff148532a140b8a4c821796b2d7b # v5.0.0
-      - uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4.0.2
+      - uses: azure/k8s-set-context@89b837d75b40a7bd2ddafde837473c212db8b313 # v5.0.0
         with:
           method: kubeconfig
           kubeconfig: ${{ secrets.KUBECONFIG }}
@@ -23,8 +23,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - uses: azure/setup-kubectl@776406bce94f63e41d621b960d78ee25c8b76ede # v4.0.1
+      - uses: azure/setup-kubectl@15650b3ad78fff148532a140b8a4c821796b2d7b # v5.0.0
-      - uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4.0.2
+      - uses: azure/k8s-set-context@89b837d75b40a7bd2ddafde837473c212db8b313 # v5.0.0
         with:
           method: kubeconfig
           kubeconfig: ${{ secrets.KUBECONFIG }}
@@ -36,8 +36,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - uses: azure/setup-kubectl@776406bce94f63e41d621b960d78ee25c8b76ede # v4.0.1
+      - uses: azure/setup-kubectl@15650b3ad78fff148532a140b8a4c821796b2d7b # v5.0.0
-      - uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4.0.2
+      - uses: azure/k8s-set-context@89b837d75b40a7bd2ddafde837473c212db8b313 # v5.0.0
         with:
           method: kubeconfig
           kubeconfig: ${{ secrets.KUBECONFIG }}
@@ -47,23 +47,3 @@ jobs:
           namespace: kube-system
           lintType: dryrun
           manifests: "traefik/"
-
-  validate-crowdsec:
-    runs-on:
-      - ubuntu-latest
-      - linux_amd64
-    steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - uses: azure/setup-kubectl@776406bce94f63e41d621b960d78ee25c8b76ede # v4.0.1
-      - uses: azure/setup-helm@1a275c3b69536ee54be43f2070a358922e12c8d4 # v4
-        with:
-          version: "3.15.0"
-      - uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4.0.2
-        with:
-          method: kubeconfig
-          kubeconfig: ${{ secrets.KUBECONFIG }}
-      - name: Validate Helm
-        uses: helmfile/helmfile-action@c58e4737b8a69764d8294a70fcbcb0a63573dae9 # v2.3.1
-        with:
-          helmfile-args: diff
-          helmfile-workdirectory: "crowdsec"

crowdsec/helmfile.yaml

@@ -1,12 +0,0 @@
-repositories:
-  - name: crowdsec
-    url: https://crowdsecurity.github.io/helm-charts
-
-releases:
-  - name: crowdsec
-    namespace: kube-system
-    createNamespace: false
-    chart: crowdsec/crowdsec
-    version: 0.20.0
-    values:
-      - values.yaml

crowdsec/values.yaml

@@ -1,35 +0,0 @@
-container_runtime: containerd
-
-agent:
-  enabled: true
-  acquisition:
-    - namespace: kube-system
-      podName: traefik-*
-      program: traefik
-  metrics:
-    enabled: false
-
-lapi:
-  enabled: true
-  replicas: 1
-  metrics:
-    enabled: true
-  persistentVolume:
-    data:
-      enabled: true
-      size: 1Gi
-    config:
-      enabled: true
-      size: 100Mi
-
-config:
-  config.yaml.local: |
-    api:
-      server:
-        auto_registration:
-          enabled: true
-          token: "${REGISTRATION_TOKEN}"
-          allowed_ranges:
-            - "10.0.0.0/8"
-            - "172.16.0.0/12"
-            - "192.168.0.0/16"

traefik/pvc.yaml

@@ -0,0 +1,34 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: pv-traefik-hostpath-static
+spec:
+  capacity:
+    storage: 10Gi
+  accessModes:
+    - ReadWriteOnce
+  persistentVolumeReclaimPolicy: Retain
+  storageClassName: traefik-certificates
+  local:
+    path: /mnt/longhorn1/svc/kube-system/main/traefik/data
+  nodeAffinity:
+    required:
+      nodeSelectorTerms:
+        - matchExpressions:
+            - key: kubernetes.io/hostname
+              operator: In
+              values:
+                - k3sh0
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: pvc-traefik
+  namespace: kube-system
+spec:
+  accessModes:
+    - ReadWriteOnce
+  storageClassName: traefik-certificates
+  resources:
+    requests:
+      storage: 10Gi

traefik/traefik-config.yaml

@@ -32,11 +32,6 @@ spec:
           secretKeyRef:
             key: apiKey
             name: ionos-api-credentials
-      - name: CROWDSEC_BOUNCER_API_KEY
-        valueFrom:
-          secretKeyRef:
-            name: crowdsec-bouncer-api-key
-            key: api-key
     ports:
       web:
         port: 8000
@@ -65,16 +60,5 @@ spec:
     persistence:
       enabled: true
       name: data
-      accessMode: ReadWriteMany
+      existingClaim: pvc-traefik
-      size: 1Gi
-      storageClass: longhorn
       path: /data
-    #experimental:
-    #  plugins:
-    #    crowdsec-bouncer-traefik-plugin:
-    #      moduleName: github.com/maxlerebourg/crowdsec-bouncer-traefik-plugin
-    #      version: v1.4.6
-    #additionalArguments:
-    #  - "--providers.kubernetescrd"
-    #  - "--entrypoints.web.http.middlewares=crowdsec-bouncer@kubernetescrd"
-    #  - "--entrypoints.websecure.http.middlewares=kube-system-crowdsec-bouncer@kubernetescrd"