chore(deps): update helm release zitadel to v9.25.0

[renovate]

This PR contains the following updates:

Package	Update	Change	Pending
zitadel (source)	minor	9.23.0 → 9.25.0	9.26.0

---

Release Notes

zitadel/zitadel-charts (zitadel)

v9.25.0

Compare Source

A Helm chart for ZITADEL

What's Changed

• fix: gate nginx ingress annotation on controller type by @​mridang in #​556

Full Changelog: zitadel/zitadel-charts@zitadel-9.24.0...zitadel-9.25.0

v9.24.0

Compare Source

A Helm chart for ZITADEL

What's Changed

• docs: improved the literature around the masterkey length by @​mridang in #​547
• feat: add explicit namespace to all namespaced resources by @​fmauNeko in #​554

New Contributors

• @​fmauNeko made their first contribution in #​554

Full Changelog: zitadel/zitadel-charts@zitadel-9.23.0...zitadel-9.24.0

---

Configuration

📅 Schedule: Branch creation - "before 9am on tuesday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

--- kubernetes/apps/authentication/zitadel/app Kustomization: flux-system/zitadel HelmRelease: authentication/zitadel

+++ kubernetes/apps/authentication/zitadel/app Kustomization: flux-system/zitadel HelmRelease: authentication/zitadel

@@ -14,13 +14,13 @@

       chart: zitadel
       interval: 5m
       sourceRef:
         kind: HelmRepository
         name: zitadel
         namespace: flux-system
-      version: 9.23.0
+      version: 9.25.0
   interval: 5m
   values:
     env:
     - name: ZITADEL_DATABASE_POSTGRES_HOST
       valueFrom:
         secretKeyRef:

[github-actions]

--- HelmRelease: authentication/zitadel Service: authentication/zitadel

+++ HelmRelease: authentication/zitadel Service: authentication/zitadel

@@ -1,11 +1,12 @@

 ---
 apiVersion: v1
 kind: Service
 metadata:
   name: zitadel
+  namespace: authentication
   annotations:
     traefik.ingress.kubernetes.io/service.serversscheme: h2c
   labels:
     app.kubernetes.io/name: zitadel
     app.kubernetes.io/instance: zitadel
     app.kubernetes.io/managed-by: Helm
--- HelmRelease: authentication/zitadel Deployment: authentication/zitadel

+++ HelmRelease: authentication/zitadel Deployment: authentication/zitadel

@@ -1,11 +1,12 @@

 ---
 apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: zitadel
+  namespace: authentication
   labels:
     app.kubernetes.io/name: zitadel
     app.kubernetes.io/instance: zitadel
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/component: start
 spec:
@@ -16,13 +17,13 @@

       app.kubernetes.io/name: zitadel
       app.kubernetes.io/instance: zitadel
       app.kubernetes.io/component: start
   template:
     metadata:
       annotations:
-        checksum/configmap: a2ee614dc44c31dbc9e81bfe745e43b5a7cd28f7c2fc2efc04bbe69535c3b289
+        checksum/configmap: 9835e4fb1065a44ba5d14dd1a4edaa3a2eceb778a0a9b7075705eb6d415896d2
         checksum/secret-db-ssl-ca-crt: 01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
         checksum/secret-zitadel-secrets: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
       labels:
         app.kubernetes.io/name: zitadel
         app.kubernetes.io/instance: zitadel
         app.kubernetes.io/managed-by: Helm
--- HelmRelease: authentication/zitadel Ingress: authentication/zitadel

+++ HelmRelease: authentication/zitadel Ingress: authentication/zitadel

@@ -1,11 +1,12 @@

 ---
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   name: zitadel
+  namespace: authentication
   labels:
     app.kubernetes.io/name: zitadel
     app.kubernetes.io/instance: zitadel
     app.kubernetes.io/managed-by: Helm
   annotations:
     cert-manager.io/cluster-issuer: letsencrypt-production
--- HelmRelease: authentication/zitadel ServiceAccount: authentication/zitadel

+++ HelmRelease: authentication/zitadel ServiceAccount: authentication/zitadel

@@ -1,11 +1,12 @@

 ---
 apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: zitadel
+  namespace: authentication
   labels:
     app.kubernetes.io/name: zitadel
     app.kubernetes.io/instance: zitadel
     app.kubernetes.io/managed-by: Helm
   annotations:
     helm.sh/hook: pre-install,pre-upgrade
--- HelmRelease: authentication/zitadel ConfigMap: authentication/zitadel-config-yaml

+++ HelmRelease: authentication/zitadel ConfigMap: authentication/zitadel-config-yaml

@@ -1,11 +1,12 @@

 ---
 apiVersion: v1
 kind: ConfigMap
 metadata:
   name: zitadel-config-yaml
+  namespace: authentication
   annotations:
     helm.sh/hook: pre-install,pre-upgrade
     helm.sh/hook-delete-policy: before-hook-creation
     helm.sh/hook-weight: '0'
   labels:
     app.kubernetes.io/name: zitadel
--- HelmRelease: authentication/zitadel Role: authentication/zitadel

+++ HelmRelease: authentication/zitadel Role: authentication/zitadel

@@ -1,11 +1,12 @@

 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:
   name: zitadel
+  namespace: authentication
   labels:
     app.kubernetes.io/name: zitadel
     app.kubernetes.io/instance: zitadel
     app.kubernetes.io/managed-by: Helm
   annotations:
     helm.sh/hook: pre-install,pre-upgrade
--- HelmRelease: authentication/zitadel RoleBinding: authentication/zitadel

+++ HelmRelease: authentication/zitadel RoleBinding: authentication/zitadel

@@ -1,11 +1,12 @@

 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
 metadata:
   name: zitadel
+  namespace: authentication
   labels:
     app.kubernetes.io/name: zitadel
     app.kubernetes.io/instance: zitadel
     app.kubernetes.io/managed-by: Helm
   annotations:
     helm.sh/hook: pre-install,pre-upgrade
--- HelmRelease: authentication/zitadel Job: authentication/zitadel-cleanup

+++ HelmRelease: authentication/zitadel Job: authentication/zitadel-cleanup

@@ -1,11 +1,12 @@

 ---
 apiVersion: batch/v1
 kind: Job
 metadata:
   name: zitadel-cleanup
+  namespace: authentication
   labels:
     app.kubernetes.io/name: zitadel
     app.kubernetes.io/instance: zitadel
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/component: cleanup
   annotations:
--- HelmRelease: authentication/zitadel Job: authentication/zitadel-init

+++ HelmRelease: authentication/zitadel Job: authentication/zitadel-init

@@ -1,11 +1,12 @@

 ---
 apiVersion: batch/v1
 kind: Job
 metadata:
   name: zitadel-init
+  namespace: authentication
   labels:
     app.kubernetes.io/name: zitadel
     app.kubernetes.io/instance: zitadel
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/component: init
   annotations:
--- HelmRelease: authentication/zitadel Job: authentication/zitadel-setup

+++ HelmRelease: authentication/zitadel Job: authentication/zitadel-setup

@@ -1,11 +1,12 @@

 ---
 apiVersion: batch/v1
 kind: Job
 metadata:
   name: zitadel-setup
+  namespace: authentication
   labels:
     app.kubernetes.io/name: zitadel
     app.kubernetes.io/instance: zitadel
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/component: setup
   annotations: