Update rancher/mirrored-library-traefik Docker tag to v3

Reviewed-on: #712

manifests/auth-proxy/non-auth-ingress.yaml

@@ -19,6 +19,7 @@ spec:
     - bsky-feeds.cluster.fun
     - ai.cluster.fun
     - penpot.cluster.fun
+    - trek.cluster.fun
     secretName: non-auth-proxy-ingress
   rules:
   - host: hello-world.cluster.fun
@@ -71,3 +72,13 @@ spec:
             name: tailscale-proxy
             port:
               name: non-auth
+  - host: trek.cluster.fun
+    http:
+      paths:
+      - path: /
+        pathType: ImplementationSpecific
+        backend:
+          service:
+            name: tailscale-proxy
+            port:
+              name: non-auth

manifests/mealie/mealie.yaml

@@ -31,7 +31,7 @@ spec:
       priorityClassName: critical
       containers:
       - name: frontend
-        image: ghcr.io/mealie-recipes/mealie:v3.18.0
+        image: ghcr.io/mealie-recipes/mealie:v3.19.0
         imagePullPolicy: Always
         envFrom:
         - secretRef:

manifests/monitoring/kube-state-metrics.yaml

@@ -238,7 +238,7 @@ spec:
         - --resources=validatingwebhookconfigurations
         #- --resources=volumeattachments
         imagePullPolicy: IfNotPresent
-        image: "registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.0"
+        image: "registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.19.0"
         ports:
         - containerPort: 8080
         livenessProbe:

manifests/traefik/traefik.yaml

@@ -45,7 +45,7 @@ spec:
         - --entrypoints.websecure.http.tls=true
         - --entrypoints.web.http.redirections.entrypoint.to=websecure
         - --entrypoints.web.http.redirections.entrypoint.scheme=https
-        image: rancher/mirrored-library-traefik:2.11.42
+        image: rancher/mirrored-library-traefik:3.6.13
         imagePullPolicy: IfNotPresent
         livenessProbe:
           failureThreshold: 3