feat(helm)!: Update Helm release snapshot-controller to v4

[mchesterbot]

This PR contains the following updates:

Package	Update	Change
snapshot-controller	major	3.0.6 -> 4.0.0

---

Release Notes

piraeusdatastore/helm-charts (snapshot-controller)

v4.0.0

Compare Source

Deploys a Snapshot Controller in a cluster. Snapshot Controllers are often bundled with the Kubernetes distribution, this chart is meant for cases where it is not.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[mchesterbot]

--- kubernetes/apps/kube-system/snapshot-controller/app Kustomization: flux-system/cluster-apps-snapshot-controller HelmRelease: kube-system/snapshot-controller

+++ kubernetes/apps/kube-system/snapshot-controller/app Kustomization: flux-system/cluster-apps-snapshot-controller HelmRelease: kube-system/snapshot-controller

@@ -12,13 +12,13 @@

     spec:
       chart: snapshot-controller
       sourceRef:
         kind: HelmRepository
         name: piraeus-charts
         namespace: flux-system
-      version: 3.0.6
+      version: 4.0.0
   install:
     crds: CreateReplace
     createNamespace: true
     remediation:
       retries: 3
   interval: 30m

[mchesterbot]

--- HelmRelease: kube-system/snapshot-controller ServiceAccount: kube-system/snapshot-validation-webhook

+++ HelmRelease: kube-system/snapshot-controller ServiceAccount: kube-system/snapshot-validation-webhook

@@ -1,10 +0,0 @@

----
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: snapshot-validation-webhook
-  labels:
-    app.kubernetes.io/name: snapshot-validation-webhook
-    app.kubernetes.io/instance: snapshot-controller
-    app.kubernetes.io/managed-by: Helm
-
--- HelmRelease: kube-system/snapshot-controller ClusterRole: kube-system/snapshot-controller

+++ HelmRelease: kube-system/snapshot-controller ClusterRole: kube-system/snapshot-controller

@@ -59,12 +59,13 @@

   - patch
 - apiGroups:
   - snapshot.storage.k8s.io
   resources:
   - volumesnapshots
   verbs:
+  - create
   - get
   - list
   - watch
   - update
   - patch
   - delete
--- HelmRelease: kube-system/snapshot-controller ClusterRole: kube-system/snapshot-validation-webhook

+++ HelmRelease: kube-system/snapshot-controller ClusterRole: kube-system/snapshot-validation-webhook

@@ -1,23 +0,0 @@

----
-kind: ClusterRole
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
-  name: snapshot-validation-webhook
-rules:
-- apiGroups:
-  - snapshot.storage.k8s.io
-  resources:
-  - volumesnapshotclasses
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - groupsnapshot.storage.k8s.io
-  resources:
-  - volumegroupsnapshotclasses
-  verbs:
-  - get
-  - list
-  - watch
-
--- HelmRelease: kube-system/snapshot-controller ClusterRoleBinding: kube-system/snapshot-validation-webhook

+++ HelmRelease: kube-system/snapshot-controller ClusterRoleBinding: kube-system/snapshot-validation-webhook

@@ -1,14 +0,0 @@

----
-kind: ClusterRoleBinding
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
-  name: snapshot-validation-webhook
-subjects:
-- kind: ServiceAccount
-  name: snapshot-validation-webhook
-  namespace: kube-system
-roleRef:
-  kind: ClusterRole
-  name: snapshot-validation-webhook
-  apiGroup: rbac.authorization.k8s.io
-
--- HelmRelease: kube-system/snapshot-controller Service: kube-system/snapshot-validation-webhook

+++ HelmRelease: kube-system/snapshot-controller Service: kube-system/snapshot-validation-webhook

@@ -1,20 +0,0 @@

----
-apiVersion: v1
-kind: Service
-metadata:
-  name: snapshot-validation-webhook
-  labels:
-    app.kubernetes.io/name: snapshot-validation-webhook
-    app.kubernetes.io/instance: snapshot-controller
-    app.kubernetes.io/managed-by: Helm
-spec:
-  type: ClusterIP
-  ports:
-  - port: 443
-    targetPort: https
-    protocol: TCP
-    name: https
-  selector:
-    app.kubernetes.io/name: snapshot-validation-webhook
-    app.kubernetes.io/instance: snapshot-controller
-
--- HelmRelease: kube-system/snapshot-controller Deployment: kube-system/snapshot-controller

+++ HelmRelease: kube-system/snapshot-controller Deployment: kube-system/snapshot-controller

@@ -28,13 +28,13 @@

           capabilities:
             drop:
             - ALL
           readOnlyRootFilesystem: true
           runAsNonRoot: true
           runAsUser: 1000
-        image: registry.k8s.io/sig-storage/snapshot-controller:v8.1.0
+        image: registry.k8s.io/sig-storage/snapshot-controller:v8.2.0
         imagePullPolicy: IfNotPresent
         args:
         - --http-endpoint=:8080
         - --leader-election=true
         - --leader-election-namespace=$(NAMESPACE)
         ports:
--- HelmRelease: kube-system/snapshot-controller Deployment: kube-system/snapshot-validation-webhook

+++ HelmRelease: kube-system/snapshot-controller Deployment: kube-system/snapshot-validation-webhook

@@ -1,64 +0,0 @@

----
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: snapshot-validation-webhook
-  labels:
-    app.kubernetes.io/name: snapshot-validation-webhook
-    app.kubernetes.io/instance: snapshot-controller
-    app.kubernetes.io/managed-by: Helm
-spec:
-  replicas: 1
-  revisionHistoryLimit: 10
-  selector:
-    matchLabels:
-      app.kubernetes.io/name: snapshot-validation-webhook
-      app.kubernetes.io/instance: snapshot-controller
-  template:
-    metadata:
-      labels:
-        app.kubernetes.io/name: snapshot-validation-webhook
-        app.kubernetes.io/instance: snapshot-controller
-    spec:
-      serviceAccountName: snapshot-validation-webhook
-      securityContext: {}
-      containers:
-      - name: snapshot-validation-webhook
-        securityContext:
-          capabilities:
-            drop:
-            - ALL
-          readOnlyRootFilesystem: true
-          runAsNonRoot: true
-          runAsUser: 1000
-        image: registry.k8s.io/sig-storage/snapshot-validation-webhook:v8.1.0
-        imagePullPolicy: IfNotPresent
-        args:
-        - --port=8443
-        - --tls-cert-file=/etc/snapshot-validation/tls.crt
-        - --tls-private-key-file=/etc/snapshot-validation/tls.key
-        ports:
-        - name: https
-          containerPort: 8443
-          protocol: TCP
-        volumeMounts:
-        - mountPath: /etc/snapshot-validation
-          name: tls-config
-        livenessProbe:
-          httpGet:
-            path: /readyz
-            port: https
-            scheme: HTTPS
-        readinessProbe:
-          httpGet:
-            path: /readyz
-            port: https
-            scheme: HTTPS
-        resources: {}
-      volumes:
-      - name: tls-config
-        secret:
-          secretName: snapshot-validation-webhook-tls
-      hostNetwork: false
-      dnsPolicy: ClusterFirst
-
--- HelmRelease: kube-system/snapshot-controller ValidatingWebhookConfiguration: kube-system/snapshot-validation-webhook

+++ HelmRelease: kube-system/snapshot-controller ValidatingWebhookConfiguration: kube-system/snapshot-validation-webhook

@@ -1,59 +0,0 @@

----
-apiVersion: admissionregistration.k8s.io/v1
-kind: ValidatingWebhookConfiguration
-metadata:
-  name: snapshot-validation-webhook
-  labels:
-    app.kubernetes.io/name: snapshot-validation-webhook
-    app.kubernetes.io/instance: snapshot-controller
-    app.kubernetes.io/managed-by: Helm
-webhooks:
-- name: snapshot-validation-webhook.snapshot.storage.k8s.io
-  rules:
-  - apiGroups:
-    - snapshot.storage.k8s.io
-    apiVersions:
-    - v1
-    operations:
-    - CREATE
-    - UPDATE
-    resources:
-    - volumesnapshotclasses
-    scope: '*'
-  clientConfig:
-    service:
-      namespace: kube-system
-      name: snapshot-validation-webhook
-      path: /volumesnapshot
-    caBundle: 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
-  admissionReviewVersions:
-  - v1
-  - v1beta1
-  sideEffects: None
-  failurePolicy: Fail
-  timeoutSeconds: 2
-- name: snapshot-validation-webhook.groupsnapshot.storage.k8s.io
-  rules:
-  - apiGroups:
-    - groupsnapshot.storage.k8s.io
-    apiVersions:
-    - v1alpha1
-    operations:
-    - CREATE
-    - UPDATE
-    resources:
-    - volumegroupsnapshotclasses
-    scope: '*'
-  clientConfig:
-    service:
-      namespace: kube-system
-      name: snapshot-validation-webhook
-      path: /volumegroupsnapshot
-    caBundle: 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
-  admissionReviewVersions:
-  - v1
-  - v1beta1
-  sideEffects: None
-  failurePolicy: Fail
-  timeoutSeconds: 2
-