feat(helm)!: Update chart snapshot-controller ( 3.0.6 → 4.0.0 )

[renovate]

This PR contains the following updates:

Package	Update	Change
snapshot-controller	major	3.0.6 -> 4.0.0

---

Release Notes

piraeusdatastore/helm-charts (snapshot-controller)

v4.0.0

Compare Source

Deploys a Snapshot Controller in a cluster. Snapshot Controllers are often bundled with the Kubernetes distribution, this chart is meant for cases where it is not.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

--- HelmRelease: system/snapshot-controller ServiceAccount: system/snapshot-validation-webhook

+++ HelmRelease: system/snapshot-controller ServiceAccount: system/snapshot-validation-webhook

@@ -1,10 +0,0 @@

----
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: snapshot-validation-webhook
-  labels:
-    app.kubernetes.io/name: snapshot-validation-webhook
-    app.kubernetes.io/instance: snapshot-controller
-    app.kubernetes.io/managed-by: Helm
-
--- HelmRelease: system/snapshot-controller ClusterRole: system/snapshot-controller

+++ HelmRelease: system/snapshot-controller ClusterRole: system/snapshot-controller

@@ -59,12 +59,13 @@

   - patch
 - apiGroups:
   - snapshot.storage.k8s.io
   resources:
   - volumesnapshots
   verbs:
+  - create
   - get
   - list
   - watch
   - update
   - patch
   - delete
--- HelmRelease: system/snapshot-controller ClusterRole: system/snapshot-validation-webhook

+++ HelmRelease: system/snapshot-controller ClusterRole: system/snapshot-validation-webhook

@@ -1,23 +0,0 @@

----
-kind: ClusterRole
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
-  name: snapshot-validation-webhook
-rules:
-- apiGroups:
-  - snapshot.storage.k8s.io
-  resources:
-  - volumesnapshotclasses
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - groupsnapshot.storage.k8s.io
-  resources:
-  - volumegroupsnapshotclasses
-  verbs:
-  - get
-  - list
-  - watch
-
--- HelmRelease: system/snapshot-controller ClusterRoleBinding: system/snapshot-validation-webhook

+++ HelmRelease: system/snapshot-controller ClusterRoleBinding: system/snapshot-validation-webhook

@@ -1,14 +0,0 @@

----
-kind: ClusterRoleBinding
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
-  name: snapshot-validation-webhook
-subjects:
-- kind: ServiceAccount
-  name: snapshot-validation-webhook
-  namespace: system
-roleRef:
-  kind: ClusterRole
-  name: snapshot-validation-webhook
-  apiGroup: rbac.authorization.k8s.io
-
--- HelmRelease: system/snapshot-controller Service: system/snapshot-validation-webhook

+++ HelmRelease: system/snapshot-controller Service: system/snapshot-validation-webhook

@@ -1,20 +0,0 @@

----
-apiVersion: v1
-kind: Service
-metadata:
-  name: snapshot-validation-webhook
-  labels:
-    app.kubernetes.io/name: snapshot-validation-webhook
-    app.kubernetes.io/instance: snapshot-controller
-    app.kubernetes.io/managed-by: Helm
-spec:
-  type: ClusterIP
-  ports:
-  - port: 443
-    targetPort: https
-    protocol: TCP
-    name: https
-  selector:
-    app.kubernetes.io/name: snapshot-validation-webhook
-    app.kubernetes.io/instance: snapshot-controller
-
--- HelmRelease: system/snapshot-controller Deployment: system/snapshot-controller

+++ HelmRelease: system/snapshot-controller Deployment: system/snapshot-controller

@@ -28,13 +28,13 @@

           capabilities:
             drop:
             - ALL
           readOnlyRootFilesystem: true
           runAsNonRoot: true
           runAsUser: 1000
-        image: registry.k8s.io/sig-storage/snapshot-controller:v8.1.0
+        image: registry.k8s.io/sig-storage/snapshot-controller:v8.2.0
         imagePullPolicy: IfNotPresent
         args:
         - --http-endpoint=:8080
         - --leader-election=true
         - --leader-election-namespace=$(NAMESPACE)
         ports:
--- HelmRelease: system/snapshot-controller Deployment: system/snapshot-validation-webhook

+++ HelmRelease: system/snapshot-controller Deployment: system/snapshot-validation-webhook

@@ -1,64 +0,0 @@

----
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: snapshot-validation-webhook
-  labels:
-    app.kubernetes.io/name: snapshot-validation-webhook
-    app.kubernetes.io/instance: snapshot-controller
-    app.kubernetes.io/managed-by: Helm
-spec:
-  replicas: 1
-  revisionHistoryLimit: 10
-  selector:
-    matchLabels:
-      app.kubernetes.io/name: snapshot-validation-webhook
-      app.kubernetes.io/instance: snapshot-controller
-  template:
-    metadata:
-      labels:
-        app.kubernetes.io/name: snapshot-validation-webhook
-        app.kubernetes.io/instance: snapshot-controller
-    spec:
-      serviceAccountName: snapshot-validation-webhook
-      securityContext: {}
-      containers:
-      - name: snapshot-validation-webhook
-        securityContext:
-          capabilities:
-            drop:
-            - ALL
-          readOnlyRootFilesystem: true
-          runAsNonRoot: true
-          runAsUser: 1000
-        image: registry.k8s.io/sig-storage/snapshot-validation-webhook:v8.1.0
-        imagePullPolicy: IfNotPresent
-        args:
-        - --port=8443
-        - --tls-cert-file=/etc/snapshot-validation/tls.crt
-        - --tls-private-key-file=/etc/snapshot-validation/tls.key
-        ports:
-        - name: https
-          containerPort: 8443
-          protocol: TCP
-        volumeMounts:
-        - mountPath: /etc/snapshot-validation
-          name: tls-config
-        livenessProbe:
-          httpGet:
-            path: /readyz
-            port: https
-            scheme: HTTPS
-        readinessProbe:
-          httpGet:
-            path: /readyz
-            port: https
-            scheme: HTTPS
-        resources: {}
-      volumes:
-      - name: tls-config
-        secret:
-          secretName: snapshot-validation-webhook-tls
-      hostNetwork: false
-      dnsPolicy: ClusterFirst
-
--- HelmRelease: system/snapshot-controller Certificate: system/snapshot-validation-webhook

+++ HelmRelease: system/snapshot-controller Certificate: system/snapshot-validation-webhook

@@ -1,19 +0,0 @@

----
-apiVersion: cert-manager.io/v1
-kind: Certificate
-metadata:
-  name: snapshot-validation-webhook
-  labels:
-    app.kubernetes.io/name: snapshot-validation-webhook
-    app.kubernetes.io/instance: snapshot-controller
-    app.kubernetes.io/managed-by: Helm
-spec:
-  secretName: snapshot-validation-webhook-tls
-  dnsNames:
-  - snapshot-validation-webhook.system.svc
-  issuerRef:
-    kind: Issuer
-    name: snapshot-controller-webhook-ca
-  privateKey:
-    rotationPolicy: Always
-
--- HelmRelease: system/snapshot-controller ValidatingWebhookConfiguration: system/snapshot-validation-webhook

+++ HelmRelease: system/snapshot-controller ValidatingWebhookConfiguration: system/snapshot-validation-webhook

@@ -1,59 +0,0 @@

----
-apiVersion: admissionregistration.k8s.io/v1
-kind: ValidatingWebhookConfiguration
-metadata:
-  name: snapshot-validation-webhook
-  labels:
-    app.kubernetes.io/name: snapshot-validation-webhook
-    app.kubernetes.io/instance: snapshot-controller
-    app.kubernetes.io/managed-by: Helm
-  annotations:
-    cert-manager.io/inject-ca-from: system/snapshot-validation-webhook
-webhooks:
-- name: snapshot-validation-webhook.snapshot.storage.k8s.io
-  rules:
-  - apiGroups:
-    - snapshot.storage.k8s.io
-    apiVersions:
-    - v1
-    operations:
-    - CREATE
-    - UPDATE
-    resources:
-    - volumesnapshotclasses
-    scope: '*'
-  clientConfig:
-    service:
-      namespace: system
-      name: snapshot-validation-webhook
-      path: /volumesnapshot
-  admissionReviewVersions:
-  - v1
-  - v1beta1
-  sideEffects: None
-  failurePolicy: Fail
-  timeoutSeconds: 2
-- name: snapshot-validation-webhook.groupsnapshot.storage.k8s.io
-  rules:
-  - apiGroups:
-    - groupsnapshot.storage.k8s.io
-    apiVersions:
-    - v1alpha1
-    operations:
-    - CREATE
-    - UPDATE
-    resources:
-    - volumegroupsnapshotclasses
-    scope: '*'
-  clientConfig:
-    service:
-      namespace: system
-      name: snapshot-validation-webhook
-      path: /volumegroupsnapshot
-  admissionReviewVersions:
-  - v1
-  - v1beta1
-  sideEffects: None
-  failurePolicy: Fail
-  timeoutSeconds: 2
-

[github-actions]

--- kubernetes/main/apps Kustomization: flux-system/cluster-apps Kustomization: flux-system/snapshot-controller

+++ kubernetes/main/apps Kustomization: flux-system/cluster-apps Kustomization: flux-system/snapshot-controller

@@ -12,14 +12,12 @@

     labels:
       app.kubernetes.io/name: snapshot-controller
   decryption:
     provider: sops
     secretRef:
       name: sops-age
-  dependsOn:
-  - name: cert-manager
   interval: 10m
   path: kubernetes/main/apps/system/snapshot-controller/app
   postBuild:
     substituteFrom:
     - kind: ConfigMap
       name: cluster-settings
--- kubernetes/main/apps/system/snapshot-controller/app Kustomization: flux-system/snapshot-controller HelmRelease: system/snapshot-controller

+++ kubernetes/main/apps/system/snapshot-controller/app Kustomization: flux-system/snapshot-controller HelmRelease: system/snapshot-controller

@@ -13,19 +13,14 @@

     spec:
       chart: snapshot-controller
       sourceRef:
         kind: HelmRepository
         name: piraeus
         namespace: flux-system
-      version: 3.0.6
+      version: 4.0.0
   install:
     crds: CreateReplace
   interval: 30m
   upgrade:
     crds: CreateReplace
-  values:
-    webhook:
-      tls:
-        certManagerIssuerRef:
-          kind: Issuer
-          name: snapshot-controller-webhook-ca
+  values: null
 
--- kubernetes/main/apps/system/snapshot-controller/app Kustomization: flux-system/snapshot-controller Issuer: system/snapshot-controller-webhook-selfsign

+++ kubernetes/main/apps/system/snapshot-controller/app Kustomization: flux-system/snapshot-controller Issuer: system/snapshot-controller-webhook-selfsign

@@ -1,13 +0,0 @@

----
-apiVersion: cert-manager.io/v1
-kind: Issuer
-metadata:
-  labels:
-    app.kubernetes.io/name: snapshot-controller
-    kustomize.toolkit.fluxcd.io/name: snapshot-controller
-    kustomize.toolkit.fluxcd.io/namespace: flux-system
-  name: snapshot-controller-webhook-selfsign
-  namespace: system
-spec:
-  selfSigned: {}
-
--- kubernetes/main/apps/system/snapshot-controller/app Kustomization: flux-system/snapshot-controller Certificate: system/snapshot-controller-webhook-ca

+++ kubernetes/main/apps/system/snapshot-controller/app Kustomization: flux-system/snapshot-controller Certificate: system/snapshot-controller-webhook-ca

@@ -1,19 +0,0 @@

----
-apiVersion: cert-manager.io/v1
-kind: Certificate
-metadata:
-  labels:
-    app.kubernetes.io/name: snapshot-controller
-    kustomize.toolkit.fluxcd.io/name: snapshot-controller
-    kustomize.toolkit.fluxcd.io/namespace: flux-system
-  name: snapshot-controller-webhook-ca
-  namespace: system
-spec:
-  commonName: ca.k8s-ycl.cert-manager
-  duration: 87600h
-  isCA: true
-  issuerRef:
-    kind: Issuer
-    name: snapshot-controller-webhook-selfsign
-  secretName: snapshot-controller-webhook-ca
-
--- kubernetes/main/apps/system/snapshot-controller/app Kustomization: flux-system/snapshot-controller Issuer: system/snapshot-controller-webhook-ca

+++ kubernetes/main/apps/system/snapshot-controller/app Kustomization: flux-system/snapshot-controller Issuer: system/snapshot-controller-webhook-ca

@@ -1,14 +0,0 @@

----
-apiVersion: cert-manager.io/v1
-kind: Issuer
-metadata:
-  labels:
-    app.kubernetes.io/name: snapshot-controller
-    kustomize.toolkit.fluxcd.io/name: snapshot-controller
-    kustomize.toolkit.fluxcd.io/namespace: flux-system
-  name: snapshot-controller-webhook-ca
-  namespace: system
-spec:
-  ca:
-    secretName: snapshot-controller-webhook-ca
-