Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

feat(helm)!: Update chart operator to 6.0.4 #274

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

feat(helm)!: Update chart operator to 6.0.4 #274

wants to merge 1 commit into from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Jul 20, 2024 •
edited
Loading

This PR contains the following updates:

Package Update Change
operator (source) major 5.0.11 -> 6.0.4

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

minio/operator (operator)

v6.0.4: Version 6.0.4

Compare Source

Changelog

v6.0.3: Version 6.0.3

Compare Source

Changelog

v6.0.2: Version 6.0.2

Compare Source

Changelog

v6.0.1

Compare Source

What's Changed

Full Changelog: minio/operator@v6.0.0...v6.0.1

v6.0.0: Version 6.0.0

Compare Source

Changelog

v5.0.17

Compare Source

v5.0.16

Compare Source

v5.0.15: Version 5.0.15

Compare Source

Changelog

v5.0.14: Version 5.0.14

Compare Source

Changelog

v5.0.13: Version 5.0.13

Compare Source

Changelog

v5.0.12: Version 5.0.12

Compare Source

Changelog

Configuration

📅 Schedule: Branch creation - "on saturday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@github-actions GitHub Actions
Copy link

github-actions bot commented Jul 20, 2024 •
edited
Loading 

--- kubernetes/apps/storage/minio-s3/operator Kustomization: flux-system/cluster-apps-storage-minio-operator HelmRelease: storage/minio

+++ kubernetes/apps/storage/minio-s3/operator Kustomization: flux-system/cluster-apps-storage-minio-operator HelmRelease: storage/minio

@@ -13,13 +13,13 @@

       chart: operator
       interval: 15m
       sourceRef:
         kind: HelmRepository
         name: minio-operator
         namespace: flux-system
-      version: 5.0.11
+      version: 6.0.4
   install:
     remediation:
       retries: 3
   interval: 15m
   maxHistory: 2
   uninstall:

@github-actions GitHub Actions
Copy link

github-actions bot commented Jul 20, 2024 •
edited
Loading 

--- HelmRelease: storage/minio ServiceAccount: storage/console-sa

+++ HelmRelease: storage/minio ServiceAccount: storage/console-sa

@@ -1,7 +0,0 @@

----
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: console-sa
-  namespace: storage
-
--- HelmRelease: storage/minio ServiceAccount: storage/minio-operator

+++ HelmRelease: storage/minio ServiceAccount: storage/minio-operator

@@ -2,10 +2,8 @@

 apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: minio-operator
   namespace: storage
   labels:
-    app.kubernetes.io/name: operator
-    app.kubernetes.io/instance: minio
     app.kubernetes.io/managed-by: Helm
 
--- HelmRelease: storage/minio ConfigMap: storage/console-env

+++ HelmRelease: storage/minio ConfigMap: storage/console-env

@@ -1,10 +0,0 @@

----
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: console-env
-  namespace: storage
-data:
-  CONSOLE_PORT: '9090'
-  CONSOLE_TLS_PORT: '9443'
-
--- HelmRelease: storage/minio ClusterRole: storage/console-sa-role

+++ HelmRelease: storage/minio ClusterRole: storage/console-sa-role

@@ -1,239 +0,0 @@

----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  name: console-sa-role
-rules:
-- apiGroups:
-  - ''
-  resources:
-  - secrets
-  verbs:
-  - get
-  - watch
-  - create
-  - list
-  - patch
-  - update
-  - delete
-  - deletecollection
-- apiGroups:
-  - ''
-  resources:
-  - namespaces
-  - services
-  - events
-  - resourcequotas
-  - nodes
-  verbs:
-  - get
-  - watch
-  - create
-  - list
-  - patch
-- apiGroups:
-  - ''
-  resources:
-  - pods
-  verbs:
-  - get
-  - watch
-  - create
-  - list
-  - patch
-  - delete
-  - deletecollection
-- apiGroups:
-  - ''
-  resources:
-  - persistentvolumeclaims
-  verbs:
-  - deletecollection
-  - list
-  - get
-  - watch
-  - update
-- apiGroups:
-  - storage.k8s.io
-  resources:
-  - storageclasses
-  verbs:
-  - get
-  - watch
-  - create
-  - list
-  - patch
-- apiGroups:
-  - apps
-  resources:
-  - statefulsets
-  - deployments
-  verbs:
-  - get
-  - create
-  - list
-  - patch
-  - watch
-  - update
-  - delete
-- apiGroups:
-  - batch
-  resources:
-  - jobs
-  verbs:
-  - get
-  - create
-  - list
-  - patch
-  - watch
-  - update
-  - delete
-- apiGroups:
-  - certificates.k8s.io
-  resources:
-  - certificatesigningrequests
-  - certificatesigningrequests/approval
-  - certificatesigningrequests/status
-  verbs:
-  - update
-  - create
-  - get
-  - delete
-  - list
-- apiGroups:
-  - minio.min.io
-  resources:
-  - '*'
-  verbs:
-  - '*'
-- apiGroups:
-  - min.io
-  resources:
-  - '*'
-  verbs:
-  - '*'
-- apiGroups:
-  - ''
-  resources:
-  - persistentvolumes
-  verbs:
-  - get
-  - list
-  - watch
-  - create
-  - delete
-- apiGroups:
-  - ''
-  resources:
-  - persistentvolumeclaims
-  verbs:
-  - get
-  - list
-  - watch
-  - update
-- apiGroups:
-  - ''
-  resources:
-  - events
-  verbs:
-  - create
-  - list
-  - watch
-  - update
-  - patch
-- apiGroups:
-  - snapshot.storage.k8s.io
-  resources:
-  - volumesnapshots
-  verbs:
-  - get
-  - list
-- apiGroups:
-  - snapshot.storage.k8s.io
-  resources:
-  - volumesnapshotcontents
-  verbs:
-  - get
-  - list
-- apiGroups:
-  - storage.k8s.io
-  resources:
-  - csinodes
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - storage.k8s.io
-  resources:
-  - volumeattachments
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - ''
-  resources:
-  - endpoints
-  verbs:
-  - get
-  - list
-  - watch
-  - create
-  - update
-  - delete
-- apiGroups:
-  - coordination.k8s.io
-  resources:
-  - leases
-  verbs:
-  - get
-  - list
-  - watch
-  - create
-  - update
-  - delete
-- apiGroups:
-  - direct.csi.min.io
-  resources:
-  - volumes
-  verbs:
-  - get
-  - list
-  - watch
-  - create
-  - update
-  - delete
-- apiGroups:
-  - apiextensions.k8s.io
-  resources:
-  - customresourcedefinitions
-  verbs:
-  - get
-  - list
-  - watch
-  - create
-  - update
-  - delete
-- apiGroups:
-  - direct.csi.min.io
-  resources:
-  - directcsidrives
-  - directcsivolumes
-  verbs:
-  - get
-  - list
-  - watch
-  - create
-  - update
-  - delete
-- apiGroups:
-  - ''
-  resources:
-  - pod
-  - pods/log
-  verbs:
-  - get
-  - list
-  - watch
-
--- HelmRelease: storage/minio ClusterRole: storage/minio-operator-role

+++ HelmRelease: storage/minio ClusterRole: storage/minio-operator-role

@@ -1,11 +1,13 @@

 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   name: minio-operator-role
+  labels:
+    app.kubernetes.io/managed-by: Helm
 rules:
 - apiGroups:
   - apiextensions.k8s.io
   resources:
   - customresourcedefinitions
   verbs:
@@ -16,13 +18,12 @@

   resources:
   - persistentvolumeclaims
   verbs:
   - get
   - update
   - list
-  - delete
 - apiGroups:
   - ''
   resources:
   - namespaces
   - nodes
   verbs:
@@ -139,12 +140,13 @@

   - tokenreviews
   verbs:
   - create
 - apiGroups:
   - minio.min.io
   - sts.min.io
+  - job.min.io
   resources:
   - '*'
   verbs:
   - '*'
 - apiGroups:
   - min.io
@@ -153,14 +155,17 @@

   verbs:
   - '*'
 - apiGroups:
   - monitoring.coreos.com
   resources:
   - prometheuses
+  - prometheusagents
   verbs:
-  - '*'
+  - get
+  - update
+  - list
 - apiGroups:
   - coordination.k8s.io
   resources:
   - leases
   verbs:
   - get
--- HelmRelease: storage/minio ClusterRoleBinding: storage/console-sa-binding

+++ HelmRelease: storage/minio ClusterRoleBinding: storage/console-sa-binding

@@ -1,14 +0,0 @@

----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  name: console-sa-binding
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: console-sa-role
-subjects:
-- kind: ServiceAccount
-  name: console-sa
-  namespace: storage
-
--- HelmRelease: storage/minio ClusterRoleBinding: storage/minio-operator-binding

+++ HelmRelease: storage/minio ClusterRoleBinding: storage/minio-operator-binding

@@ -1,11 +1,13 @@

 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
   name: minio-operator-binding
+  labels:
+    app.kubernetes.io/managed-by: Helm
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole
   name: minio-operator-role
 subjects:
 - kind: ServiceAccount
--- HelmRelease: storage/minio Service: storage/console

+++ HelmRelease: storage/minio Service: storage/console

@@ -1,20 +0,0 @@

----
-apiVersion: v1
-kind: Service
-metadata:
-  name: console
-  namespace: storage
-  labels:
-    app.kubernetes.io/name: operator
-    app.kubernetes.io/instance: minio
-    app.kubernetes.io/managed-by: Helm
-spec:
-  ports:
-  - name: http
-    port: 9090
-  - name: https
-    port: 9443
-  selector:
-    app.kubernetes.io/name: operator
-    app.kubernetes.io/instance: minio-console
-
--- HelmRelease: storage/minio Service: storage/operator

+++ HelmRelease: storage/minio Service: storage/operator

@@ -2,14 +2,12 @@

 apiVersion: v1
 kind: Service
 metadata:
   name: operator
   namespace: storage
   labels:
-    app.kubernetes.io/name: operator
-    app.kubernetes.io/instance: minio
     app.kubernetes.io/managed-by: Helm
 spec:
   type: ClusterIP
   ports:
   - port: 4221
     name: http
--- HelmRelease: storage/minio Service: storage/sts

+++ HelmRelease: storage/minio Service: storage/sts

@@ -2,14 +2,12 @@

 apiVersion: v1
 kind: Service
 metadata:
   name: sts
   namespace: storage
   labels:
-    app.kubernetes.io/name: operator
-    app.kubernetes.io/instance: minio
     app.kubernetes.io/managed-by: Helm
 spec:
   type: ClusterIP
   ports:
   - port: 4223
     name: https
--- HelmRelease: storage/minio Deployment: storage/console

+++ HelmRelease: storage/minio Deployment: storage/console

@@ -1,63 +0,0 @@

----
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: console
-  namespace: storage
-  labels:
-    app.kubernetes.io/name: operator
-    app.kubernetes.io/instance: minio
-    app.kubernetes.io/managed-by: Helm
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app.kubernetes.io/name: operator
-      app.kubernetes.io/instance: minio-console
-  template:
-    metadata:
-      labels:
-        app.kubernetes.io/name: operator
-        app.kubernetes.io/instance: minio-console
-    spec:
-      serviceAccountName: console-sa
-      securityContext:
-        runAsNonRoot: true
-        runAsUser: 1000
-      affinity:
-        podAntiAffinity:
-          requiredDuringSchedulingIgnoredDuringExecution:
-          - labelSelector:
-              matchExpressions:
-              - key: name
-                operator: In
-                values:
-                - minio-operator
-            topologyKey: kubernetes.io/hostname
-      containers:
-      - name: operator
-        image: quay.io/minio/operator:v5.0.11
-        imagePullPolicy: IfNotPresent
-        ports:
-        - containerPort: 9090
-          name: http
-        - containerPort: 9443
-          name: https
-        args:
-        - ui
-        - --certs-dir=/tmp/certs
-        resources:
-          requests:
-            cpu: 0.25
-            memory: 512Mi
-        securityContext:
-          runAsNonRoot: true
-          runAsUser: 1000
-        volumeMounts:
-        - mountPath: /tmp/certs/CAs
-          name: tmp
-          readOnly: false
-      volumes:
-      - emptyDir: {}
-        name: tmp
-
--- HelmRelease: storage/minio Deployment: storage/minio-operator

+++ HelmRelease: storage/minio Deployment: storage/minio-operator

@@ -2,24 +2,23 @@

 apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: minio-operator
   namespace: storage
   labels:
-    app.kubernetes.io/name: operator
-    app.kubernetes.io/instance: minio
     app.kubernetes.io/managed-by: Helm
 spec:
   replicas: 2
   selector:
     matchLabels:
       app.kubernetes.io/name: operator
       app.kubernetes.io/instance: minio
   template:
     metadata:
       labels:
+        app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: operator
         app.kubernetes.io/instance: minio
     spec:
       serviceAccountName: minio-operator
       securityContext:
         fsGroup: 1000
@@ -35,23 +34,29 @@

                 operator: In
                 values:
                 - minio-operator
             topologyKey: kubernetes.io/hostname
       containers:
       - name: operator
-        image: quay.io/minio/operator:v5.0.11
+        image: quay.io/minio/operator:v6.0.4
         imagePullPolicy: IfNotPresent
         args:
         - controller
         env:
         - name: OPERATOR_STS_ENABLED
           value: 'on'
         resources:
           requests:
             cpu: 200m
             ephemeral-storage: 500Mi
             memory: 256Mi
         securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
           runAsGroup: 1000
           runAsNonRoot: true
           runAsUser: 1000
+          seccompProfile:
+            type: RuntimeDefault

@renovate renovate bot force-pushed the renovate/operator-6.x branch from a30e053 to 96f4fe1 Compare July 23, 2024 11:09
@renovate renovate bot changed the title feat(helm)!: Update chart operator to 6.0.0 feat(helm)!: Update chart operator to 6.0.1 Jul 23, 2024
@renovate renovate bot force-pushed the renovate/operator-6.x branch from 96f4fe1 to c8bff86 Compare August 12, 2024 18:03
@renovate renovate bot changed the title feat(helm)!: Update chart operator to 6.0.1 feat(helm)!: Update chart operator to 6.0.2 Aug 12, 2024
@renovate renovate bot changed the title feat(helm)!: Update chart operator to 6.0.2 feat(helm)!: Update chart operator to 6.0.2 - autoclosed Aug 25, 2024
@renovate renovate bot closed this Aug 25, 2024
@renovate renovate bot deleted the renovate/operator-6.x branch August 25, 2024 22:42
@renovate renovate bot changed the title feat(helm)!: Update chart operator to 6.0.2 - autoclosed feat(helm)!: Update chart operator to 6.0.2 Aug 26, 2024
@renovate renovate bot reopened this Aug 26, 2024
@renovate renovate bot restored the renovate/operator-6.x branch August 26, 2024 02:37
@renovate renovate bot force-pushed the renovate/operator-6.x branch from c8bff86 to 2be41dc Compare August 27, 2024 22:28
@renovate renovate bot changed the title feat(helm)!: Update chart operator to 6.0.2 feat(helm)!: Update chart operator to 6.0.3 Aug 27, 2024
@renovate renovate bot force-pushed the renovate/operator-6.x branch from 2be41dc to 89a7b54 Compare October 10, 2024 22:03
@renovate renovate bot changed the title feat(helm)!: Update chart operator to 6.0.3 feat(helm)!: Update chart operator to 6.0.4 Oct 10, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
renovate/helm type/major
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants