search

volschin / home-ops

Repository for my home infrastructure and Kubernetes cluster which adheres to Infrastructure as Code (IaC) and GitOps practices where possible
https://k8s.olschi.de/
MIT License
2 stars 0 forks source link

feat(helm): update chart longhorn ( 1.6.2 → 1.7.0 ) #658

Closed renovate[bot] closed 3 weeks ago

renovate[bot] commented 3 weeks ago

Mend Renovate

This PR contains the following updates:

Package Update Change OpenSSF
longhorn (source) minor 1.6.2 -> 1.7.0 OpenSSF Scorecard

Release Notes

longhorn/charts (longhorn) ### [`v1.7.0`](https://togithub.com/longhorn/charts/releases/tag/longhorn-1.7.0) [Compare Source](https://togithub.com/longhorn/charts/compare/longhorn-1.6.2...longhorn-1.7.0) Longhorn is a distributed block storage system for Kubernetes.

Configuration

📅 Schedule: Branch creation - "after 8am every weekday,before 7pm every weekday" in timezone Europe/Berlin, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

This PR was generated by Mend Renovate. View the repository job log.

github-actions[bot] commented 3 weeks ago 
--- kubernetes/apps/storage/longhorn/app Kustomization: flux-system/longhorn HelmRelease: storage/longhorn

+++ kubernetes/apps/storage/longhorn/app Kustomization: flux-system/longhorn HelmRelease: storage/longhorn

@@ -13,13 +13,13 @@

     spec:
       chart: longhorn
       sourceRef:
         kind: HelmRepository
         name: longhorn
         namespace: flux-system
-      version: 1.6.2
+      version: 1.7.0
   install:
     remediation:
       retries: 3
   interval: 30m
   upgrade:
     cleanupOnFail: true
--- kubernetes/apps/external-secrets/external-secrets/app Kustomization: flux-system/external-secrets HelmRelease: external-secrets/external-secrets

+++ kubernetes/apps/external-secrets/external-secrets/app Kustomization: flux-system/external-secrets HelmRelease: external-secrets/external-secrets

@@ -30,13 +30,13 @@

         enabled: true
         interval: 1m
     grafana:
       enabled: true
     image:
       repository: ghcr.io/external-secrets/external-secrets
-      tag: main@sha256:322f6a0b99231260f38a6e4df024fb0dddd087f0565f7acbd598bd19e1fcb1f4
+      tag: main@sha256:2a520d847ec0ca2430ed4c83976a0c3a46ef40ce7c68395ce8c8d702db3b4c6c
     installCRDs: true
     reportsController:
       serviceMonitor:
         enabled: true
         interval: 1m
     serviceMonitor:
github-actions[bot] commented 3 weeks ago 
--- HelmRelease: storage/longhorn ConfigMap: storage/longhorn-default-setting

+++ HelmRelease: storage/longhorn ConfigMap: storage/longhorn-default-setting

@@ -15,9 +15,10 @@

     storage-minimal-available-percentage: 1
     storage-reserved-percentage-for-default-disk: 10
     default-data-locality: true
     default-longhorn-static-storage-class: longhorn
     priority-class: longhorn-critical
     node-down-pod-deletion-policy: delete-both-statefulset-and-deployment-pod
+    disable-revision-counter: true
     concurrent-automatic-engine-upgrade-per-node-limit: 3
     orphan-auto-deletion: true

--- HelmRelease: storage/longhorn ConfigMap: storage/longhorn-storageclass

+++ HelmRelease: storage/longhorn ConfigMap: storage/longhorn-storageclass

@@ -24,7 +24,8 @@

       numberOfReplicas: "1"
       staleReplicaTimeout: "30"
       fromBackup: ""
       fsType: "ext4"
       dataLocality: "disabled"
       unmapMarkSnapChainRemoved: "ignored"
+      disableRevisionCounter: "true"

--- HelmRelease: storage/longhorn ClusterRole: storage/longhorn-role

+++ HelmRelease: storage/longhorn ClusterRole: storage/longhorn-role

@@ -94,12 +94,13 @@

   - volumes/status
   - engines
   - engines/status
   - replicas
   - replicas/status
   - settings
+  - settings/status
   - engineimages
   - engineimages/status
   - nodes
   - nodes/status
   - instancemanagers
   - instancemanagers/status
--- HelmRelease: storage/longhorn Service: storage/longhorn-conversion-webhook

+++ HelmRelease: storage/longhorn Service: storage/longhorn-conversion-webhook

@@ -9,12 +9,12 @@

     app: longhorn-conversion-webhook
   name: longhorn-conversion-webhook
   namespace: storage
 spec:
   type: ClusterIP
   selector:
-    app: longhorn-manager
+    longhorn.io/conversion-webhook: longhorn-conversion-webhook
   ports:
   - name: conversion-webhook
     port: 9501
     targetPort: conversion-wh

--- HelmRelease: storage/longhorn Service: storage/longhorn-admission-webhook

+++ HelmRelease: storage/longhorn Service: storage/longhorn-admission-webhook

@@ -9,12 +9,12 @@

     app: longhorn-admission-webhook
   name: longhorn-admission-webhook
   namespace: storage
 spec:
   type: ClusterIP
   selector:
-    app: longhorn-manager
+    longhorn.io/admission-webhook: longhorn-admission-webhook
   ports:
   - name: admission-webhook
     port: 9502
     targetPort: admission-wh

--- HelmRelease: storage/longhorn Service: storage/longhorn-recovery-backend

+++ HelmRelease: storage/longhorn Service: storage/longhorn-recovery-backend

@@ -9,12 +9,12 @@

     app: longhorn-recovery-backend
   name: longhorn-recovery-backend
   namespace: storage
 spec:
   type: ClusterIP
   selector:
-    app: longhorn-manager
+    longhorn.io/recovery-backend: longhorn-recovery-backend
   ports:
   - name: recovery-backend
     port: 9503
     targetPort: recov-backend

--- HelmRelease: storage/longhorn Service: storage/longhorn-engine-manager

+++ HelmRelease: storage/longhorn Service: storage/longhorn-engine-manager

@@ -1,16 +0,0 @@

----
-apiVersion: v1
-kind: Service
-metadata:
-  labels:
-    app.kubernetes.io/name: longhorn
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/instance: longhorn
-  name: longhorn-engine-manager
-  namespace: storage
-spec:
-  clusterIP: None
-  selector:
-    longhorn.io/component: instance-manager
-    longhorn.io/instance-manager-type: engine
-
--- HelmRelease: storage/longhorn Service: storage/longhorn-replica-manager

+++ HelmRelease: storage/longhorn Service: storage/longhorn-replica-manager

@@ -1,16 +0,0 @@

----
-apiVersion: v1
-kind: Service
-metadata:
-  labels:
-    app.kubernetes.io/name: longhorn
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/instance: longhorn
-  name: longhorn-replica-manager
-  namespace: storage
-spec:
-  clusterIP: None
-  selector:
-    longhorn.io/component: instance-manager
-    longhorn.io/instance-manager-type: replica
-
--- HelmRelease: storage/longhorn DaemonSet: storage/longhorn-manager

+++ HelmRelease: storage/longhorn DaemonSet: storage/longhorn-manager

@@ -20,32 +20,32 @@

         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/instance: longhorn
         app: longhorn-manager
     spec:
       containers:
       - name: longhorn-manager
-        image: longhornio/longhorn-manager:v1.6.2
+        image: longhornio/longhorn-manager:v1.7.0
         imagePullPolicy: IfNotPresent
         securityContext:
           privileged: true
         command:
         - longhorn-manager
         - -d
         - daemon
         - --engine-image
-        - longhornio/longhorn-engine:v1.6.2
+        - longhornio/longhorn-engine:v1.7.0
         - --instance-manager-image
-        - longhornio/longhorn-instance-manager:v1.6.2
+        - longhornio/longhorn-instance-manager:v1.7.0
         - --share-manager-image
-        - longhornio/longhorn-share-manager:v1.6.2
+        - longhornio/longhorn-share-manager:v1.7.0
         - --backing-image-manager-image
-        - longhornio/backing-image-manager:v1.6.2
+        - longhornio/backing-image-manager:v1.7.0
         - --support-bundle-manager-image
-        - longhornio/support-bundle-kit:v0.0.37
+        - longhornio/support-bundle-kit:v0.0.41
         - --manager-image
-        - longhornio/longhorn-manager:v1.6.2
+        - longhornio/longhorn-manager:v1.7.0
         - --service-account
         - longhorn-service-account
         - --upgrade-version-check
         ports:
         - containerPort: 9500
           name: manager
@@ -68,24 +68,35 @@

         - name: longhorn
           mountPath: /var/lib/longhorn/
           mountPropagation: Bidirectional
         - name: longhorn-grpc-tls
           mountPath: /tls-files/
         env:
+        - name: POD_NAME
+          valueFrom:
+            fieldRef:
+              fieldPath: metadata.name
         - name: POD_NAMESPACE
           valueFrom:
             fieldRef:
               fieldPath: metadata.namespace
         - name: POD_IP
           valueFrom:
             fieldRef:
               fieldPath: status.podIP
         - name: NODE_NAME
           valueFrom:
             fieldRef:
               fieldPath: spec.nodeName
+      - name: pre-pull-share-manager-image
+        imagePullPolicy: IfNotPresent
+        image: longhornio/longhorn-share-manager:v1.7.0
+        command:
+        - sh
+        - -c
+        - echo share-manager image pulled && sleep infinity
       volumes:
       - name: dev
         hostPath:
           path: /dev/
       - name: proc
         hostPath:
--- HelmRelease: storage/longhorn Deployment: storage/longhorn-driver-deployer

+++ HelmRelease: storage/longhorn Deployment: storage/longhorn-driver-deployer

@@ -20,28 +20,28 @@

         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/instance: longhorn
         app: longhorn-driver-deployer
     spec:
       initContainers:
       - name: wait-longhorn-manager
-        image: longhornio/longhorn-manager:v1.6.2
+        image: longhornio/longhorn-manager:v1.7.0
         command:
         - sh
         - -c
         - while [ $(curl -m 1 -s -o /dev/null -w "%{http_code}" http://longhorn-backend:9500/v1)
           != "200" ]; do echo waiting; sleep 2; done
       containers:
       - name: longhorn-driver-deployer
-        image: longhornio/longhorn-manager:v1.6.2
+        image: longhornio/longhorn-manager:v1.7.0
         imagePullPolicy: IfNotPresent
         command:
         - longhorn-manager
         - -d
         - deploy-driver
         - --manager-image
-        - longhornio/longhorn-manager:v1.6.2
+        - longhornio/longhorn-manager:v1.7.0
         - --manager-url
         - http://longhorn-backend:9500/v1
         env:
         - name: POD_NAMESPACE
           valueFrom:
             fieldRef:
@@ -52,23 +52,23 @@

               fieldPath: spec.nodeName
         - name: SERVICE_ACCOUNT
           valueFrom:
             fieldRef:
               fieldPath: spec.serviceAccountName
         - name: CSI_ATTACHER_IMAGE
-          value: longhornio/csi-attacher:v4.5.1
+          value: longhornio/csi-attacher:v4.6.1
         - name: CSI_PROVISIONER_IMAGE
-          value: longhornio/csi-provisioner:v3.6.4
+          value: longhornio/csi-provisioner:v4.0.1
         - name: CSI_NODE_DRIVER_REGISTRAR_IMAGE
-          value: longhornio/csi-node-driver-registrar:v2.9.2
+          value: longhornio/csi-node-driver-registrar:v2.11.1
         - name: CSI_RESIZER_IMAGE
-          value: longhornio/csi-resizer:v1.10.1
+          value: longhornio/csi-resizer:v1.11.1
         - name: CSI_SNAPSHOTTER_IMAGE
-          value: longhornio/csi-snapshotter:v6.3.4
+          value: longhornio/csi-snapshotter:v7.0.2
         - name: CSI_LIVENESS_PROBE_IMAGE
-          value: longhornio/livenessprobe:v2.12.0
+          value: longhornio/livenessprobe:v2.13.1
         - name: CSI_ATTACHER_REPLICA_COUNT
           value: '1'
         - name: CSI_PROVISIONER_REPLICA_COUNT
           value: '1'
         - name: CSI_RESIZER_REPLICA_COUNT
           value: '1'
--- HelmRelease: storage/longhorn Deployment: storage/longhorn-ui

+++ HelmRelease: storage/longhorn Deployment: storage/longhorn-ui

@@ -34,13 +34,13 @@

                   operator: In
                   values:
                   - longhorn-ui
               topologyKey: kubernetes.io/hostname
       containers:
       - name: longhorn-ui
-        image: longhornio/longhorn-ui:v1.6.2
+        image: longhornio/longhorn-ui:v1.7.0
         imagePullPolicy: IfNotPresent
         volumeMounts:
         - name: nginx-cache
           mountPath: /var/cache/nginx/
         - name: nginx-config
           mountPath: /var/config/nginx/
--- HelmRelease: storage/longhorn Job: storage/longhorn-post-upgrade

+++ HelmRelease: storage/longhorn Job: storage/longhorn-post-upgrade

@@ -21,13 +21,13 @@

         app.kubernetes.io/name: longhorn
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/instance: longhorn
     spec:
       containers:
       - name: longhorn-post-upgrade
-        image: longhornio/longhorn-manager:v1.6.2
+        image: longhornio/longhorn-manager:v1.7.0
         imagePullPolicy: IfNotPresent
         command:
         - longhorn-manager
         - post-upgrade
         env:
         - name: POD_NAMESPACE
--- HelmRelease: storage/longhorn Job: storage/longhorn-pre-upgrade

+++ HelmRelease: storage/longhorn Job: storage/longhorn-pre-upgrade

@@ -21,19 +21,28 @@

         app.kubernetes.io/name: longhorn
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/instance: longhorn
     spec:
       containers:
       - name: longhorn-pre-upgrade
-        image: longhornio/longhorn-manager:v1.6.2
+        image: longhornio/longhorn-manager:v1.7.0
         imagePullPolicy: IfNotPresent
+        securityContext:
+          privileged: true
         command:
         - longhorn-manager
         - pre-upgrade
+        volumeMounts:
+        - name: proc
+          mountPath: /host/proc/
         env:
         - name: POD_NAMESPACE
           valueFrom:
             fieldRef:
               fieldPath: metadata.namespace
+      volumes:
+      - name: proc
+        hostPath:
+          path: /proc/
       restartPolicy: OnFailure
       serviceAccountName: longhorn-service-account

--- HelmRelease: storage/longhorn Job: storage/longhorn-uninstall

+++ HelmRelease: storage/longhorn Job: storage/longhorn-uninstall

@@ -21,13 +21,13 @@

         app.kubernetes.io/name: longhorn
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/instance: longhorn
     spec:
       containers:
       - name: longhorn-uninstall
-        image: longhornio/longhorn-manager:v1.6.2
+        image: longhornio/longhorn-manager:v1.7.0
         imagePullPolicy: IfNotPresent
         command:
         - longhorn-manager
         - uninstall
         - --force
         env:
--- HelmRelease: external-secrets/external-secrets Deployment: external-secrets/external-secrets

+++ HelmRelease: external-secrets/external-secrets Deployment: external-secrets/external-secrets

@@ -34,13 +34,13 @@

             - ALL
           readOnlyRootFilesystem: true
           runAsNonRoot: true
           runAsUser: 1000
           seccompProfile:
             type: RuntimeDefault
-        image: ghcr.io/external-secrets/external-secrets:main@sha256:322f6a0b99231260f38a6e4df024fb0dddd087f0565f7acbd598bd19e1fcb1f4
+        image: ghcr.io/external-secrets/external-secrets:main@sha256:2a520d847ec0ca2430ed4c83976a0c3a46ef40ce7c68395ce8c8d702db3b4c6c
         imagePullPolicy: IfNotPresent
         args:
         - --concurrent=1
         - --metrics-addr=:8080
         - --loglevel=info
         - --zap-time-encoding=epoch