chore: update renovate config and annotations

Signed-off-by: Devin Buhl <devin@buhl.casa>

.github/renovate.json5

@@ -73,16 +73,6 @@
       },
       "separateMinorPatch": true
     },
-    {
-      "description": ["System Upgrade Controller Group"],
-      "groupName": "System Upgrade Controller",
-      "matchPackagePatterns": ["rancher/system-upgrade-controller"],
-      "matchDatasources": ["docker", "github-releases"],
-      "group": {
-        "commitMessageTopic": "{{{groupName}}} group"
-      },
-      "separateMinorPatch": true
-    },
     // custom versioning
     {
       "description": ["Use custom versioning for k0s/k3s"],
@@ -229,19 +219,14 @@
   "customManagers": [
     {
       "customType": "regex",
-      "description": ["Process various other dependencies"],
+      "description": ["Process custom dependencies"],
       "fileMatch": [
         "(^|/).taskfiles/.+\\.ya?ml$",
         "(^|/)ansible/.+\\.ya?ml(\\.j2)?$",
         "(^|/)kubernetes/.+\\.ya?ml(\\.j2)?$"
       ],
       "matchStrings": [
-        // Example:
+        "(?m:# renovate: datasource=(?<datasource>\\S+) depName=(?<depName>\\S+)( repository=(?<registryUrl>\\S+))?\\n.+?: \"?(?<currentValue>\\S+?)\"?$)"
-        //   k3s_release_version: "v1.27.3+k3s1"
-        "datasource=(?<datasource>\\S+) depName=(?<depName>\\S+)( repository=(?<registryUrl>\\S+))?( extractVersion=(?<extractVersion>\\S+))?\n.*?\"(?<currentValue>.*)\"\n",
-        // Example:
-        //   - https://github.com/rancher/system-upgrade-controller/releases/download/v0.11.0/crd.yaml
-        "datasource=(?<datasource>\\S+) depName=(?<depName>\\S+)\n.*?-\\s(.*?)\/(?<currentValue>[^/]+)\/[^/]+\n"
       ],
       "datasourceTemplate": "{{#if datasource}}{{{datasource}}}{{else}}github-releases{{/if}}"
     }

.taskfiles/Flux/Taskfile.yaml

@@ -4,7 +4,7 @@ version: "3"
 
 vars:
   # renovate: datasource=github-releases depName=prometheus-operator/prometheus-operator
-  PROMETHEUS_OPERATOR_VERSION: "v0.71.0"
+  PROMETHEUS_OPERATOR_VERSION: v0.71.0
   CLUSTER_SECRET_SOPS_FILE: "{{.KUBERNETES_DIR}}/flux/vars/cluster-secrets.sops.yaml"
   CLUSTER_SECRET_USER_SOPS_FILE: "{{.KUBERNETES_DIR}}/flux/vars/cluster-secrets-user.sops.yaml"
   CLUSTER_SETTINGS_FILE: "{{.KUBERNETES_DIR}}/flux/vars/cluster-settings.yaml"

bootstrap/templates/ansible/inventory/group_vars/kubernetes/main.yaml.j2

@@ -1,7 +1,7 @@
 ---
 # https://github.com/PyratLabs/ansible-role-k3s
 # renovate: datasource=github-releases depName=k3s-io/k3s
-k3s_release_version: "v1.29.0+k3s1"
+k3s_release_version: v1.29.0+k3s1
 k3s_install_hard_links: true
 k3s_become: true
 k3s_etcd_datastore: true

bootstrap/templates/ansible/playbooks/templates/custom-cilium-helmchart.yaml.j2

@@ -9,7 +9,7 @@ spec:
   repo: https://helm.cilium.io/
   chart: cilium
   # renovate: datasource=helm depName=cilium repository=https://helm.cilium.io
-  version: "1.14.6"
+  version: 1.14.6
   targetNamespace: kube-system
   bootstrap: true
   valuesContent: |-

bootstrap/templates/kubernetes/k0s/k0sctl.yaml.j2

@@ -43,7 +43,7 @@ spec:
     #% endif %#
   k0s:
     # renovate: datasource=github-releases depName=k0sproject/k0s
-    version: "v1.28.6+k0s.0"
+    version: v1.28.6+k0s.0
     dynamicConfig: false
     config:
       spec:
@@ -91,7 +91,7 @@ spec:
               - name: cilium
                 chartname: cilium/cilium
                 # renovate: datasource=helm depName=cilium repository=https://helm.cilium.io
-                version: "1.14.6"
+                version: 1.14.6
                 namespace: kube-system
                 values: |2
                   #% filter indent(width=18, first=True) %#

bootstrap/templates/kubernetes/talos/talconfig.yaml.j2

@@ -1,9 +1,9 @@
 # yaml-language-server: $schema=https://raw.githubusercontent.com/budimanjojo/talhelper/master/pkg/config/schemas/talconfig.json
 ---
-# renovate: depName=ghcr.io/siderolabs/installer datasource=docker extractVersion=^(?<version>.*)$
+# renovate: datasource=docker depName=ghcr.io/siderolabs/installer
 talosVersion: v1.6.1
-# renovate: datasource=github-releases depName=kubernetes/kubernetes extractVersion=^v(?<version>.*)$
+# renovate: datasource=docker depName=ghcr.io/siderolabs/kubelet
-kubernetesVersion: 1.29.1
+kubernetesVersion: v1.29.1
 
 clusterName: &cluster home-kubernetes
 endpoint: https://#{ bootstrap_kube_api_addr }#:6443
@@ -13,7 +13,7 @@ clusterSvcNets:
   - "#{ bootstrap_service_cidr.split(',')[0] }#"
 additionalApiServerCertSans: &sans
   - "#{ bootstrap_kube_api_addr }#"
-  - 127.0.0.1 # KubePrism
+  - 127.0.0.1
   #% for item in bootstrap_kube_additional_tls_sans %#
   - "#{ item }#"
   #% endfor %#
@@ -156,17 +156,6 @@ controlPlane:
       - op: remove
         path: /cluster/apiServer/admissionControl
 
-    # Enable K8s Talos API Access
-    - |-
-      machine:
-        features:
-          kubernetesTalosAPIAccess:
-            enabled: true
-            allowedRoles:
-              - os:admin
-            allowedKubernetesNamespaces:
-              - kube-system
-
 worker:
   patches:
     - *containerdPatch