This PR contains the following updates: | Package | Update | Change | |---|---|---| | [kube-prometheus-stack](https://togithub.com/prometheus-operator/kube-prometheus) ([source](https://togithub.com/prometheus-community/helm-charts)) | major | `56.21.0` -> `59.0.0` | | registry.k8s.io/sig-storage/snapshot-controller | major | `v7.0.1` -> `v8.0.0` | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://togithub.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://togithub.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4zNDIuMSIsInVwZGF0ZWRJblZlciI6IjM3LjM3OS4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbInVwZGF0ZS9kb2NrZXIvZ2VuZXJhbC9tYWpvciJdfQ==-->
134 lines
3.6 KiB
YAML
134 lines
3.6 KiB
YAML
image:
|
|
pullPolicy: IfNotPresent
|
|
repository: registry.k8s.io/sig-storage/snapshot-controller
|
|
tag: v8.0.0@sha256:d60a4f302a80f7effa0c9c3f6da7de6a49afede590abc39e30e959e844e46a41
|
|
|
|
portal:
|
|
open:
|
|
enabled: false
|
|
service:
|
|
main:
|
|
enabled: true
|
|
ports:
|
|
main:
|
|
enabled: true
|
|
port: 8080
|
|
protocol: http
|
|
webhook:
|
|
enabled: true
|
|
ports:
|
|
webhook:
|
|
enabled: true
|
|
port: 8443
|
|
protocol: https
|
|
|
|
podOptions:
|
|
automountServiceAccountToken: true
|
|
|
|
workload:
|
|
main:
|
|
podSpec:
|
|
containers:
|
|
main:
|
|
args:
|
|
- "--http-endpoint=:{{ .Values.service.main.ports.main.port }}"
|
|
- "--leader-election=true"
|
|
- "--leader-election-namespace={{ .Release.Namespace }}"
|
|
probes:
|
|
liveness:
|
|
path: /metrics
|
|
readiness:
|
|
path: /metrics
|
|
startup:
|
|
path: /metrics
|
|
webhook:
|
|
enabled: false
|
|
podSpec:
|
|
containers:
|
|
webhook:
|
|
enabled: false
|
|
args:
|
|
- "--tlsPrivateKeyFile=/etc/snapshot-validation/tls.key"
|
|
- "--tlsCertFile=/etc/snapshot-validation/tls.crt"
|
|
- "--port={{ .Values.service.webhook.ports.webhook.port }}"
|
|
probes:
|
|
liveness:
|
|
enabled: true
|
|
type: https
|
|
path: /readyz
|
|
port: 8443
|
|
readiness:
|
|
enabled: true
|
|
type: https
|
|
path: /readyz
|
|
port: 8443
|
|
startup:
|
|
enabled: true
|
|
type: https
|
|
path: /readyz
|
|
port: 8443
|
|
|
|
metrics:
|
|
main:
|
|
enabled: true
|
|
type: servicemonitor
|
|
endpoints:
|
|
- port: main
|
|
path: /metrics
|
|
targetSelector: main
|
|
|
|
serviceAccount:
|
|
main:
|
|
enabled: true
|
|
primary: true
|
|
targetSelectAll: true
|
|
|
|
rbac:
|
|
main:
|
|
enabled: true
|
|
primary: true
|
|
clusterWide: true
|
|
rules:
|
|
- apiGroups: [""]
|
|
resources: ["persistentvolumes"]
|
|
verbs: ["get", "list", "watch"]
|
|
- apiGroups: [""]
|
|
resources: ["persistentvolumeclaims"]
|
|
verbs: ["get", "list", "watch", "update"]
|
|
- apiGroups: ["storage.k8s.io"]
|
|
resources: ["storageclasses"]
|
|
verbs: ["get", "list", "watch"]
|
|
- apiGroups: [""]
|
|
resources: ["events"]
|
|
verbs: ["list", "watch", "create", "update", "patch"]
|
|
- apiGroups: ["snapshot.storage.k8s.io"]
|
|
resources: ["volumesnapshotclasses"]
|
|
verbs: ["get", "list", "watch"]
|
|
- apiGroups: ["snapshot.storage.k8s.io"]
|
|
resources: ["volumesnapshotcontents"]
|
|
verbs: ["create", "get", "list", "watch", "update", "patch", "delete"]
|
|
- apiGroups: ["snapshot.storage.k8s.io"]
|
|
resources: ["volumesnapshotcontents/status"]
|
|
verbs: ["patch"]
|
|
- apiGroups: ["snapshot.storage.k8s.io"]
|
|
resources: ["volumesnapshots"]
|
|
verbs: ["get", "list", "watch", "update", "patch"]
|
|
- apiGroups: ["snapshot.storage.k8s.io"]
|
|
resources: ["volumesnapshots/status"]
|
|
verbs: ["update", "patch"]
|
|
- apiGroups: [""]
|
|
resources: ["nodes"]
|
|
verbs: ["get", "list", "watch"]
|
|
- apiGroups: ["snapshot.storage.k8s.io", "groupsnapshot.storage.k8s.io"]
|
|
resources: ["volumesnapshotclasses", "volumegroupsnapshotclasses"]
|
|
verbs: ["list", "watch"]
|
|
role:
|
|
enabled: true
|
|
primary: false
|
|
clusterWide: false
|
|
serviceAccounts: ["main"]
|
|
rules:
|
|
- apiGroups: ["coordination.k8s.io"]
|
|
resources: ["leases"]
|
|
verbs: ["get", "watch", "list", "delete", "update", "create"]
|