feat(helm): update loki ( 6.12.0 → 6.15.0 )

[bot-ross[bot]]

This PR contains the following updates:

Package	Update	Change
loki (source)	minor	6.12.0 -> 6.15.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• [ ] If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[bot-ross[bot]]

--- kubernetes/main/apps/observability/loki/app Kustomization: flux-system/loki HelmRelease: observability/loki

+++ kubernetes/main/apps/observability/loki/app Kustomization: flux-system/loki HelmRelease: observability/loki

@@ -13,13 +13,13 @@

     spec:
       chart: loki
       sourceRef:
         kind: HelmRepository
         name: grafana
         namespace: flux-system
-      version: 6.12.0
+      version: 6.15.0
   dependsOn:
   - name: openebs
     namespace: openebs-system
   install:
     crds: Skip
     remediation:
@@ -66,12 +66,17 @@

     lokiCanary:
       enabled: false
     read:
       replicas: 0
     resultsCache:
       enabled: false
+    sidecar:
+      image:
+        repository: ghcr.io/kiwigrid/k8s-sidecar
+      rules:
+        searchNamespace: ALL
     singleBinary:
       persistence:
         enabled: true
         size: 50Gi
         storageClass: openebs-hostpath
       replicas: 1

[bot-ross[bot]]

--- HelmRelease: observability/loki ConfigMap: observability/loki

+++ HelmRelease: observability/loki ConfigMap: observability/loki

@@ -11,12 +11,20 @@

 data:
   config.yaml: |2

     analytics:
       reporting_enabled: false
     auth_enabled: false
+    bloom_build:
+      builder:
+        planner_address: ""
+      enabled: false
+    bloom_gateway:
+      client:
+        addresses: ""
+      enabled: false
     common:
       compactor_address: 'http://loki:3100'
       path_prefix: /var/loki
       replication_factor: 1
       storage:
         filesystem:
@@ -64,12 +72,14 @@

       grpc_listen_port: 9095
       http_listen_port: 3100
       http_server_read_timeout: 600s
       http_server_write_timeout: 600s
       log_level: info
     storage_config:
+      bloom_shipper:
+        working_directory: /var/loki/data/bloomshipper
       boltdb_shipper:
         index_gateway_client:
           server_address: ""
       hedging:
         at: 250ms
         max_per_second: 20
--- HelmRelease: observability/loki StatefulSet: observability/loki

+++ HelmRelease: observability/loki StatefulSet: observability/loki

@@ -41,12 +41,35 @@

         fsGroup: 10001
         runAsGroup: 10001
         runAsNonRoot: true
         runAsUser: 10001
       terminationGracePeriodSeconds: 30
       containers:
+      - name: loki-sc-rules
+        image: ghcr.io/kiwigrid/k8s-sidecar:1.27.5
+        imagePullPolicy: IfNotPresent
+        env:
+        - name: METHOD
+          value: WATCH
+        - name: LABEL
+          value: loki_rule
+        - name: FOLDER
+          value: /rules
+        - name: RESOURCE
+          value: both
+        - name: NAMESPACE
+          value: ALL
+        - name: WATCH_SERVER_TIMEOUT
+          value: '60'
+        - name: WATCH_CLIENT_TIMEOUT
+          value: '60'
+        - name: LOG_LEVEL
+          value: INFO
+        volumeMounts:
+        - name: sc-rules-volume
+          mountPath: /rules
       - name: loki
         image: docker.io/grafana/loki:3.1.1
         imagePullPolicy: IfNotPresent
         args:
         - -config.file=/etc/loki/config/config.yaml
         - -target=all
@@ -78,12 +101,14 @@

         - name: config
           mountPath: /etc/loki/config
         - name: runtime-config
           mountPath: /etc/loki/runtime-config
         - name: storage
           mountPath: /var/loki
+        - name: sc-rules-volume
+          mountPath: /rules
         resources: {}
       affinity:
         podAntiAffinity:
           requiredDuringSchedulingIgnoredDuringExecution:
           - labelSelector:
               matchLabels:
@@ -98,12 +123,14 @@

           items:
           - key: config.yaml
             path: config.yaml
       - name: runtime-config
         configMap:
           name: loki-runtime
+      - name: sc-rules-volume
+        emptyDir: {}
   volumeClaimTemplates:
   - apiVersion: v1
     kind: PersistentVolumeClaim
     metadata:
       name: storage
     spec:
--- HelmRelease: observability/loki ClusterRole: observability/loki-clusterrole

+++ HelmRelease: observability/loki ClusterRole: observability/loki-clusterrole

@@ -0,0 +1,20 @@

+---
+kind: ClusterRole
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  labels:
+    app.kubernetes.io/name: loki
+    app.kubernetes.io/instance: loki
+    app.kubernetes.io/managed-by: Helm
+  name: loki-clusterrole
+rules:
+- apiGroups:
+  - ''
+  resources:
+  - configmaps
+  - secrets
+  verbs:
+  - get
+  - watch
+  - list
+
--- HelmRelease: observability/loki ClusterRoleBinding: observability/loki-clusterrolebinding

+++ HelmRelease: observability/loki ClusterRoleBinding: observability/loki-clusterrolebinding

@@ -0,0 +1,18 @@

+---
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: loki-clusterrolebinding
+  labels:
+    app.kubernetes.io/name: loki
+    app.kubernetes.io/instance: loki
+    app.kubernetes.io/managed-by: Helm
+subjects:
+- kind: ServiceAccount
+  name: loki
+  namespace: observability
+roleRef:
+  kind: ClusterRole
+  name: loki-clusterrole
+  apiGroup: rbac.authorization.k8s.io
+