Merge branch 'main' into release

.github/workflows/renovate.yaml

@@ -15,4 +15,4 @@ jobs:
       uses: actions/checkout@v4
 
     - name: Validate Renovate Config
-      uses: suzuki-shunsuke/[email protected].0
+      uses: suzuki-shunsuke/[email protected].1

helm-dependencies.yaml

@@ -12,7 +12,7 @@ dependencies:
     version: 2.37.0
     repository: https://kubernetes-sigs.github.io/aws-ebs-csi-driver
   - name: aws-efs-csi-driver
-    version: 3.0.8
+    version: 3.1.1
     repository: https://kubernetes-sigs.github.io/aws-efs-csi-driver
   - name: aws-for-fluent-bit
     version: 0.1.34
@@ -48,13 +48,13 @@ dependencies:
     version: 1.7.2
     repository: https://charts.helm.sh/stable
   - name: karpenter
-    version: 1.0.8
+    version: 1.1.0
     repository: oci://public.ecr.aws/karpenter
   - name: keda
     version: 2.16.0
     repository: https://kedacore.github.io/charts
   - name: kong
-    version: 2.42.0
+    version: 2.43.0
     repository: https://charts.konghq.com
   - name: kube-prometheus-stack
     version: 65.8.1
@@ -72,7 +72,7 @@ dependencies:
     version: 30.12.11
     repository: https://helm.linkerd.io/stable
   - name: loki
-    version: 6.21.0
+    version: 6.22.0
     repository: https://grafana.github.io/helm-charts
   - name: promtail
     version: 6.16.6
@@ -99,22 +99,22 @@ dependencies:
     version: 2.16.2
     repository: https://bitnami-labs.github.io/sealed-secrets
   - name: thanos
-    version: 15.8.1
+    version: 15.8.2
     repository: https://charts.bitnami.com/bitnami
   - name: tigera-operator
     version: v3.29.1
     repository: https://docs.projectcalico.org/charts
   - name: traefik
-    version: 33.0.0
+    version: 33.1.0
     repository: https://helm.traefik.io/traefik
   - name: memcached
-    version: 7.5.2
+    version: 7.5.3
     repository: https://charts.bitnami.com/bitnami
   - name: velero
-    version: 8.0.0
+    version: 8.1.0
     repository: https://vmware-tanzu.github.io/helm-charts
   - name: victoria-metrics-k8s-stack
-    version: 0.28.4
+    version: 0.30.0
     repository: https://victoriametrics.github.io/helm-charts/
   - name: yet-another-cloudwatch-exporter
     version: 0.14.0

modules/aws/iam/aws-load-balancer-controller.json

@@ -29,6 +29,7 @@
         "ec2:DescribeTags",
         "ec2:GetCoipPoolUsage",
         "ec2:DescribeCoipPools",
+        "ec2:GetSecurityGroupsForVpc",
         "elasticloadbalancing:DescribeLoadBalancers",
         "elasticloadbalancing:DescribeLoadBalancerAttributes",
         "elasticloadbalancing:DescribeListeners",
@@ -38,7 +39,9 @@
         "elasticloadbalancing:DescribeTargetGroups",
         "elasticloadbalancing:DescribeTargetGroupAttributes",
         "elasticloadbalancing:DescribeTargetHealth",
-        "elasticloadbalancing:DescribeTags"
+        "elasticloadbalancing:DescribeTags",
+        "elasticloadbalancing:DescribeTrustStores",
+        "elasticloadbalancing:DescribeListenerAttributes"
       ],
       "Resource": "*"
     },