Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

feat(helm)!: Update chart thanos to 15.7.7 - autoclosed #1119

Closed
wants to merge 1 commit into from
Closed

feat(helm)!: Update chart thanos to 15.7.7 - autoclosed #1119

wants to merge 1 commit into from

Conversation

homeops-gh-bot[bot]
Copy link
Contributor

@homeops-gh-bot homeops-gh-bot bot commented Apr 2, 2024 •
edited
Loading

This PR contains the following updates:

Package Update Change
thanos (source) major 11.6.8 -> 15.7.7

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

bitnami/charts (thanos)

v15.7.7

  • [bitnami/thanos] Release 15.7.7 (#​27294)

v15.7.6

v15.7.5

v15.7.4

v15.7.3

v15.7.2

v15.7.1

v15.7.0

v15.6.2

v15.6.1

v15.6.0

  • [bitnami/thanos] Receive, ruler & storegateway statefulsets persistentVolumeClaimRetentionPolicy sup (c955b0e), closes #​25676

v15.5.1

v15.5.0

v15.4.7

v15.4.6

v15.4.4

v15.4.3

v15.4.2

v15.4.1

v15.4.0

v15.3.0

v15.2.2

v15.2.1

v15.2.0

v15.1.3

v15.1.2

v15.1.1

v15.1.0

v15.0.5

v15.0.4

v15.0.3

v15.0.2

v15.0.1

v15.0.0

v14.0.2

v14.0.1

v14.0.0

v13.4.1

v13.4.0

  • [bitnami/thanos] feat: ✨ 🔒 Add automatic adaptation for Openshift restricted-v2 SCC (# (8583f41), closes #​24161

v13.3.0

v13.2.2

v13.2.1

v13.1.0

v13.0.0

v12.23.2

v12.23.1

v12.23.0

v12.22.1

v12.22.0

v12.21.1

v12.21.0

  • [bitnami/thanos] fix: 🔒 Improve podSecurityContext and containerSecurityContext with essential (c6fc750), closes #​22195

v12.20.4

v12.20.3

v12.20.2

v12.20.1

  • [bitnami/thanos]: Removing replicas in storegateway in sharded mode when autoscaling is enabled (#​21 (fcb2dbb), closes #​21515

v12.20.0

v12.19.1

v12.19.0

v12.18.0

v12.17.0

v12.16.2

v12.16.1

v12.16.0

  • [bitnami/*] Remove relative links to non-README sections, add verification for that and update TL;DR (1103633), closes #​20967
  • [bitnami/thanos] feat: add generic ephemeral volume option for compactor (#​21030) (5f9344f), closes #​21030

v12.15.0

  • [bitnami/thanos] Automatically apply query-frontend's ingress hostname to alert.queryURL (#​20795) (fe05d92), closes #​20795

v12.14.2

v12.14.1

v12.14.0

v12.13.13

v12.13.12

v12.13.11

v12.13.10

v12.13.9

v12.13.8

v12.13.7

v12.13.6

v12.13.5

v12.13.4

v12.13.3

v12.13.2

v12.13.1

v12.13.0

v12.12.1

v12.12.0

v12.11.4

  • [bitnami/thanos] thanos/receive/ingress.yaml: support custom portName on extraHosts (#​17173) (d81bc2c), closes #​17173

v12.11.3

v12.11.2

v12.11.1

v12.11.0

  • [bitnami/thanos] Allow customizing the thanos-sidecar's job name in prometheus alerts (#​18140) (7c285a8), closes #​18140

v12.10.1

v12.10.0

v12.9.1

v12.9.0

v12.8.6

v12.8.5

v12.8.4

v12.8.3

v12.8.2

v12.8.1

v12.8.0

v12.7.0

v12.6.3

v12.6.2

v12.6.1

v12.5.2

v12.5.1

v12.4.3

v12.4.2

v12.4.1

v12.4.0

v12.3.2

v12.3.1

v12.3.0

v12.2.1

v12.2.0

v12.1.2

  • [bitnami/thanos]: Replace deprecated spec.serviceAccount field with spec.serviceAccountName (#​15180) (f9ab87f), closes #​15180

v12.1.1

v12.1.0

v12.0.6

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@homeops-gh-bot homeops-gh-bot bot added renovate/helm type/major size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. labels Apr 2, 2024
@homeops-gh-bot
Copy link
Contributor Author

homeops-gh-bot bot commented Apr 2, 2024

Path: cluster/apps/monitoring/thanos/helm-release.yaml
Version: 11.6.8 -> 15.0.0

@@ -1,84 +1,278 @@
 ---
+# Source: thanos/templates/bucketweb/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-bucketweb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: bucketweb
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: bucketweb
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 8080
+ - port: 8080
+---
+# Source: thanos/templates/compactor/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-compactor
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: compactor
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: compactor
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 9090
+---
+# Source: thanos/templates/query-frontend/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-query-frontend
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query-frontend
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query-frontend
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 9090
+ - port: 9090
+---
+# Source: thanos/templates/query/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-query
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 10901
+ - port: 9090
+ - port: 10901
+---
+# Source: thanos/templates/receive/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-receive
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: receive
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: receive
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 10902
+ - port: 10901
+ - port: 10901
+ - port: 19291
+ - port: 19291
+---
+# Source: thanos/templates/ruler/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-ruler
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: ruler
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: ruler
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 9090
+ - port: 10901
+ - port: 10901
+---
+# Source: thanos/templates/storegateway/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-storegateway
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: storegateway
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: storegateway
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 9090
+ - port: 10901
+ - port: 10901
+---
 # Source: thanos/templates/bucketweb/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/compactor/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/query/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/ruler/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/storegateway/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/objstore-secret.yaml
 apiVersion: v1
 kind: Secret
 metadata:
 name: thanos-objstore-secret
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 data:
 objstore.yml: |-
 Y29uZmlnOgogIGluc2VjdXJlOiB0cnVlCnR5cGU6IHMz
@@ -87,12 +281,12 @@
 apiVersion: v1
 kind: ConfigMap
 metadata:
- name: thanos-ruler-configmap
- namespace: "default"
+ name: thanos-ruler
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 data:
 ruler.yml: |-
@@ -107,11 +301,11 @@
 apiVersion: v1
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 spec:
 accessModes:
@@ -126,13 +320,13 @@
 kind: Service
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
- annotations:
+ prometheus-operator/monitor: 'true'
 spec:
 type: ClusterIP
 ports:
@@ -142,8 +336,8 @@
 name: http
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 ---
 # Source: thanos/templates/compactor/service.yaml
@@ -151,13 +345,13 @@
 kind: Service
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
- annotations:
+ prometheus-operator/monitor: 'true'
 spec:
 type: ClusterIP
 ports:
@@ -167,8 +361,8 @@
 name: http
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 ---
 # Source: thanos/templates/query/service-grpc.yaml
@@ -176,13 +370,12 @@
 kind: Service
 metadata:
 name: thanos-query-grpc
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
- annotations:
 spec:
 type: ClusterIP
 ports:
@@ -192,8 +385,8 @@
 name: grpc
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 ---
 # Source: thanos/templates/query/service.yaml
@@ -201,13 +394,13 @@
 kind: Service
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
- annotations:
+ prometheus-operator/monitor: 'true'
 spec:
 type: ClusterIP
 ports:
@@ -217,8 +410,8 @@
 name: http
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 ---
 # Source: thanos/templates/ruler/service.yaml
@@ -226,14 +419,13 @@
 kind: Service
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 prometheus-operator/monitor: 'true'
- annotations:
 spec:
 type: ClusterIP
 ports:
@@ -248,8 +440,8 @@
 name: grpc
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 ---
 # Source: thanos/templates/storegateway/service.yaml
@@ -257,14 +449,13 @@
 kind: Service
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 prometheus-operator/monitor: 'true'
- annotations:
 spec:
 type: ClusterIP
 ports:
@@ -279,8 +470,8 @@
 name: grpc
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 ---
 # Source: thanos/templates/bucketweb/deployment.yaml
@@ -288,14 +479,15 @@
 kind: Deployment
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 strategy:
 rollingUpdate:
 maxSurge: 1
@@ -303,20 +495,20 @@
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
 spec:
- serviceAccount: thanos-bucketweb
+ serviceAccountName: thanos-bucketweb
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -324,22 +516,33 @@
 requiredDuringSchedulingIgnoredDuringExecution:
 - labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 topologyKey: kubernetes.io/hostname
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: bucketweb
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.34.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - tools
 - bucket
@@ -375,8 +578,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: objstore-config
 mountPath: /conf
@@ -390,32 +599,33 @@
 kind: Deployment
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 spec:
 replicas: 1
+ revisionHistoryLimit: 10
 strategy:
 type: Recreate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
 spec:
- serviceAccount: thanos-compactor
+ serviceAccountName: thanos-compactor
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -424,23 +634,34 @@
 - podAffinityTerm:
 labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 topologyKey: kubernetes.io/hostname
 weight: 1
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: compactor
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.34.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - compact
 - --log.level=info
@@ -480,8 +701,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: objstore-config
 mountPath: /conf
@@ -500,30 +727,31 @@
 kind: Deployment
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 strategy:
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 spec:
- serviceAccount: thanos-query
+ serviceAccountName: thanos-query
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -532,23 +760,34 @@
 - podAffinityTerm:
 labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 topologyKey: kubernetes.io/hostname
 weight: 1
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: query
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.34.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - query
 - --log.level=info
@@ -587,8 +826,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 volumes:
 ---
@@ -597,35 +842,36 @@
 kind: StatefulSet
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 podManagementPolicy: OrderedReady
 serviceName: thanos-ruler-headless
 updateStrategy:
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
- checksum/ruler-configuration: 7afcad4879bbb799b132d7e34633031899e8cf18d4ad6762b1b08fbec4111f11
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
+ checksum/ruler-configuration: d11db702b3cb233ba465cddebeb4117c00ebdbda6ad18dd38964228345883c6a
 spec:
- serviceAccount: thanos-ruler
+ serviceAccountName: thanos-ruler
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -633,22 +879,33 @@
 requiredDuringSchedulingIgnoredDuringExecution:
 - labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 topologyKey: kubernetes.io/hostname
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: ruler
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.34.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - rule
 - --log.level=info
@@ -659,6 +916,7 @@
 - --eval-interval=1m
 - --alertmanagers.url=http://kube-prometheus-stack-alertmanager.monitoring:9093
 - --query=dnssrv+_http._tcp.thanos-query.default.svc.cluster.local
+ - --alert.query-url=http://thanos-query.default.svc.cluster.local:9090
 - --label=replica="$(POD_NAME)"
 - --label=ruler_cluster="${CLUSTER_NAME}"
 - --alert.label-drop=replica
@@ -698,8 +956,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: ruler-config
 mountPath: /conf/rules
@@ -710,7 +974,7 @@
 volumes:
 - name: ruler-config
 configMap:
- name: thanos-ruler-configmap
+ name: thanos-ruler
 - name: objstore-config
 secret:
 secretName: thanos-objstore-secret
@@ -730,34 +994,35 @@
 kind: StatefulSet
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 podManagementPolicy: OrderedReady
 serviceName: thanos-storegateway-headless
 updateStrategy:
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
 spec:
- serviceAccount: thanos-storegateway
+ serviceAccountName: thanos-storegateway
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -765,22 +1030,33 @@
 requiredDuringSchedulingIgnoredDuringExecution:
 - labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 topologyKey: kubernetes.io/hostname
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: storegateway
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.34.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - store
 - --log.level=info
@@ -817,8 +1093,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: objstore-config
 mountPath: /conf
@@ -844,11 +1126,11 @@
 kind: Ingress
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 annotations:
 hajimari.io/enable: "false"
@@ -875,11 +1157,11 @@
 kind: Ingress
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 annotations:
 hajimari.io/enable: "false"
@@ -906,11 +1188,11 @@
 kind: Ingress
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 annotations:
 hajimari.io/icon: table-search
@@ -937,11 +1219,11 @@
 kind: Ingress
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 annotations:
 hajimari.io/enable: "false"
@@ -968,11 +1250,11 @@
 kind: Ingress
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 annotations:
 hajimari.io/enable: "false"
@@ -1001,9 +1283,9 @@
 name: thanos-bucketweb
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 spec:
 endpoints:
@@ -1013,9 +1295,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/compactor/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1024,9 +1307,9 @@
 name: thanos-compactor
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 spec:
 endpoints:
@@ -1036,9 +1319,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/query/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1047,9 +1331,9 @@
 name: thanos-query
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 spec:
 endpoints:
@@ -1059,9 +1343,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/ruler/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1070,9 +1355,9 @@
 name: thanos-ruler
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 spec:
 endpoints:
@@ -1082,9 +1367,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/storegateway/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1093,9 +1379,9 @@
 name: thanos-storegateway
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 spec:
 endpoints:
@@ -1105,6 +1391,7 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
+ prometheus-operator/monitor: 'true'

@homeops-gh-bot
Copy link
Contributor Author

homeops-gh-bot bot commented Apr 2, 2024 •
edited
Loading

🦙 MegaLinter status: ✅ SUCCESS

Descriptor Linter Files Fixed Errors Elapsed time
✅ REPOSITORY git_diff yes no 0.03s
✅ REPOSITORY secretlint yes no 1.42s
✅ YAML prettier 1 0 0.43s
✅ YAML yamllint 1 0 0.27s

See detailed report in MegaLinter reports
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

MegaLinter is graciously provided by OX Security

@homeops-gh-bot homeops-gh-bot bot force-pushed the renovate/thanos-15.x branch from 37e3a57 to 8f5f04c Compare April 3, 2024 09:13
@homeops-gh-bot homeops-gh-bot bot changed the title feat(helm)!: Update chart thanos to 15.0.0 feat(helm)!: Update chart thanos to 15.0.1 Apr 3, 2024
@homeops-gh-bot
Copy link
Contributor Author

homeops-gh-bot bot commented Apr 3, 2024

Path: cluster/apps/monitoring/thanos/helm-release.yaml
Version: 11.6.8 -> 15.0.1

@@ -1,84 +1,278 @@
 ---
+# Source: thanos/templates/bucketweb/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-bucketweb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: bucketweb
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: bucketweb
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 8080
+ - port: 8080
+---
+# Source: thanos/templates/compactor/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-compactor
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: compactor
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: compactor
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 9090
+---
+# Source: thanos/templates/query-frontend/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-query-frontend
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query-frontend
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query-frontend
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 9090
+ - port: 9090
+---
+# Source: thanos/templates/query/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-query
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 10901
+ - port: 9090
+ - port: 10901
+---
+# Source: thanos/templates/receive/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-receive
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: receive
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: receive
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 10902
+ - port: 10901
+ - port: 10901
+ - port: 19291
+ - port: 19291
+---
+# Source: thanos/templates/ruler/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-ruler
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: ruler
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: ruler
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 9090
+ - port: 10901
+ - port: 10901
+---
+# Source: thanos/templates/storegateway/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-storegateway
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: storegateway
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: storegateway
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 9090
+ - port: 10901
+ - port: 10901
+---
 # Source: thanos/templates/bucketweb/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/compactor/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/query/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/ruler/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/storegateway/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/objstore-secret.yaml
 apiVersion: v1
 kind: Secret
 metadata:
 name: thanos-objstore-secret
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 data:
 objstore.yml: |-
 Y29uZmlnOgogIGluc2VjdXJlOiB0cnVlCnR5cGU6IHMz
@@ -87,12 +281,12 @@
 apiVersion: v1
 kind: ConfigMap
 metadata:
- name: thanos-ruler-configmap
- namespace: "default"
+ name: thanos-ruler
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 data:
 ruler.yml: |-
@@ -107,11 +301,11 @@
 apiVersion: v1
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 spec:
 accessModes:
@@ -126,13 +320,13 @@
 kind: Service
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
- annotations:
+ prometheus-operator/monitor: 'true'
 spec:
 type: ClusterIP
 ports:
@@ -142,8 +336,8 @@
 name: http
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 ---
 # Source: thanos/templates/compactor/service.yaml
@@ -151,13 +345,13 @@
 kind: Service
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
- annotations:
+ prometheus-operator/monitor: 'true'
 spec:
 type: ClusterIP
 ports:
@@ -167,8 +361,8 @@
 name: http
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 ---
 # Source: thanos/templates/query/service-grpc.yaml
@@ -176,13 +370,12 @@
 kind: Service
 metadata:
 name: thanos-query-grpc
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
- annotations:
 spec:
 type: ClusterIP
 ports:
@@ -192,8 +385,8 @@
 name: grpc
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 ---
 # Source: thanos/templates/query/service.yaml
@@ -201,13 +394,13 @@
 kind: Service
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
- annotations:
+ prometheus-operator/monitor: 'true'
 spec:
 type: ClusterIP
 ports:
@@ -217,8 +410,8 @@
 name: http
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 ---
 # Source: thanos/templates/ruler/service.yaml
@@ -226,14 +419,13 @@
 kind: Service
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 prometheus-operator/monitor: 'true'
- annotations:
 spec:
 type: ClusterIP
 ports:
@@ -248,8 +440,8 @@
 name: grpc
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 ---
 # Source: thanos/templates/storegateway/service.yaml
@@ -257,14 +449,13 @@
 kind: Service
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 prometheus-operator/monitor: 'true'
- annotations:
 spec:
 type: ClusterIP
 ports:
@@ -279,8 +470,8 @@
 name: grpc
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 ---
 # Source: thanos/templates/bucketweb/deployment.yaml
@@ -288,14 +479,15 @@
 kind: Deployment
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 strategy:
 rollingUpdate:
 maxSurge: 1
@@ -303,20 +495,20 @@
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
 spec:
- serviceAccount: thanos-bucketweb
+ serviceAccountName: thanos-bucketweb
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -324,22 +516,33 @@
 requiredDuringSchedulingIgnoredDuringExecution:
 - labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 topologyKey: kubernetes.io/hostname
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: bucketweb
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.34.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - tools
 - bucket
@@ -375,8 +578,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: objstore-config
 mountPath: /conf
@@ -390,32 +599,33 @@
 kind: Deployment
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 spec:
 replicas: 1
+ revisionHistoryLimit: 10
 strategy:
 type: Recreate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
 spec:
- serviceAccount: thanos-compactor
+ serviceAccountName: thanos-compactor
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -424,23 +634,34 @@
 - podAffinityTerm:
 labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 topologyKey: kubernetes.io/hostname
 weight: 1
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: compactor
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.34.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - compact
 - --log.level=info
@@ -480,8 +701,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: objstore-config
 mountPath: /conf
@@ -500,30 +727,31 @@
 kind: Deployment
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 strategy:
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 spec:
- serviceAccount: thanos-query
+ serviceAccountName: thanos-query
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -532,23 +760,34 @@
 - podAffinityTerm:
 labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 topologyKey: kubernetes.io/hostname
 weight: 1
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: query
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.34.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - query
 - --log.level=info
@@ -559,6 +798,7 @@
 - --endpoint=dnssrv+_grpc._tcp.kube-prometheus-stack-thanos-discovery.monitoring.svc.cluster.local
 - --endpoint=dnssrv+_grpc._tcp.thanos-storegateway.default.svc.cluster.local
 - --endpoint=dnssrv+_grpc._tcp.thanos-ruler.default.svc.cluster.local
+ - --alert.query-url=http://thanos-query.default.svc.cluster.local:9090
 ports:
 - name: http
 containerPort: 10902
@@ -587,8 +827,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 volumes:
 ---
@@ -597,35 +843,36 @@
 kind: StatefulSet
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 podManagementPolicy: OrderedReady
 serviceName: thanos-ruler-headless
 updateStrategy:
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
- checksum/ruler-configuration: 7afcad4879bbb799b132d7e34633031899e8cf18d4ad6762b1b08fbec4111f11
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
+ checksum/ruler-configuration: d11db702b3cb233ba465cddebeb4117c00ebdbda6ad18dd38964228345883c6a
 spec:
- serviceAccount: thanos-ruler
+ serviceAccountName: thanos-ruler
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -633,22 +880,33 @@
 requiredDuringSchedulingIgnoredDuringExecution:
 - labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 topologyKey: kubernetes.io/hostname
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: ruler
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.34.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - rule
 - --log.level=info
@@ -659,6 +917,7 @@
 - --eval-interval=1m
 - --alertmanagers.url=http://kube-prometheus-stack-alertmanager.monitoring:9093
 - --query=dnssrv+_http._tcp.thanos-query.default.svc.cluster.local
+ - --alert.query-url=http://thanos-query.default.svc.cluster.local:9090
 - --label=replica="$(POD_NAME)"
 - --label=ruler_cluster="${CLUSTER_NAME}"
 - --alert.label-drop=replica
@@ -698,8 +957,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: ruler-config
 mountPath: /conf/rules
@@ -710,7 +975,7 @@
 volumes:
 - name: ruler-config
 configMap:
- name: thanos-ruler-configmap
+ name: thanos-ruler
 - name: objstore-config
 secret:
 secretName: thanos-objstore-secret
@@ -730,34 +995,35 @@
 kind: StatefulSet
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 podManagementPolicy: OrderedReady
 serviceName: thanos-storegateway-headless
 updateStrategy:
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
 spec:
- serviceAccount: thanos-storegateway
+ serviceAccountName: thanos-storegateway
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -765,22 +1031,33 @@
 requiredDuringSchedulingIgnoredDuringExecution:
 - labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 topologyKey: kubernetes.io/hostname
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: storegateway
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.34.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - store
 - --log.level=info
@@ -817,8 +1094,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: objstore-config
 mountPath: /conf
@@ -844,11 +1127,11 @@
 kind: Ingress
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 annotations:
 hajimari.io/enable: "false"
@@ -875,11 +1158,11 @@
 kind: Ingress
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 annotations:
 hajimari.io/enable: "false"
@@ -906,11 +1189,11 @@
 kind: Ingress
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 annotations:
 hajimari.io/icon: table-search
@@ -937,11 +1220,11 @@
 kind: Ingress
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 annotations:
 hajimari.io/enable: "false"
@@ -968,11 +1251,11 @@
 kind: Ingress
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 annotations:
 hajimari.io/enable: "false"
@@ -1001,9 +1284,9 @@
 name: thanos-bucketweb
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 spec:
 endpoints:
@@ -1013,9 +1296,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/compactor/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1024,9 +1308,9 @@
 name: thanos-compactor
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 spec:
 endpoints:
@@ -1036,9 +1320,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/query/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1047,9 +1332,9 @@
 name: thanos-query
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 spec:
 endpoints:
@@ -1059,9 +1344,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/ruler/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1070,9 +1356,9 @@
 name: thanos-ruler
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 spec:
 endpoints:
@@ -1082,9 +1368,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/storegateway/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1093,9 +1380,9 @@
 name: thanos-storegateway
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 spec:
 endpoints:
@@ -1105,6 +1392,7 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
+ prometheus-operator/monitor: 'true'

@homeops-gh-bot homeops-gh-bot bot force-pushed the renovate/thanos-15.x branch from 8f5f04c to efd6428 Compare April 3, 2024 10:13
@homeops-gh-bot homeops-gh-bot bot changed the title feat(helm)!: Update chart thanos to 15.0.1 feat(helm)!: Update chart thanos to 15.0.2 Apr 3, 2024
@homeops-gh-bot
Copy link
Contributor Author

homeops-gh-bot bot commented Apr 3, 2024

Path: cluster/apps/monitoring/thanos/helm-release.yaml
Version: 11.6.8 -> 15.0.2

@@ -1,84 +1,278 @@
 ---
+# Source: thanos/templates/bucketweb/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-bucketweb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: bucketweb
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: bucketweb
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 8080
+ - port: 8080
+---
+# Source: thanos/templates/compactor/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-compactor
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: compactor
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: compactor
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 9090
+---
+# Source: thanos/templates/query-frontend/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-query-frontend
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query-frontend
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query-frontend
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 9090
+ - port: 9090
+---
+# Source: thanos/templates/query/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-query
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 10901
+ - port: 9090
+ - port: 10901
+---
+# Source: thanos/templates/receive/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-receive
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: receive
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: receive
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 10902
+ - port: 10901
+ - port: 10901
+ - port: 19291
+ - port: 19291
+---
+# Source: thanos/templates/ruler/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-ruler
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: ruler
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: ruler
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 9090
+ - port: 10901
+ - port: 10901
+---
+# Source: thanos/templates/storegateway/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-storegateway
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: storegateway
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: storegateway
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 9090
+ - port: 10901
+ - port: 10901
+---
 # Source: thanos/templates/bucketweb/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/compactor/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/query/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/ruler/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/storegateway/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/objstore-secret.yaml
 apiVersion: v1
 kind: Secret
 metadata:
 name: thanos-objstore-secret
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 data:
 objstore.yml: |-
 Y29uZmlnOgogIGluc2VjdXJlOiB0cnVlCnR5cGU6IHMz
@@ -87,12 +281,12 @@
 apiVersion: v1
 kind: ConfigMap
 metadata:
- name: thanos-ruler-configmap
- namespace: "default"
+ name: thanos-ruler
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 data:
 ruler.yml: |-
@@ -107,11 +301,11 @@
 apiVersion: v1
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 spec:
 accessModes:
@@ -126,13 +320,13 @@
 kind: Service
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
- annotations:
+ prometheus-operator/monitor: 'true'
 spec:
 type: ClusterIP
 ports:
@@ -142,8 +336,8 @@
 name: http
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 ---
 # Source: thanos/templates/compactor/service.yaml
@@ -151,13 +345,13 @@
 kind: Service
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
- annotations:
+ prometheus-operator/monitor: 'true'
 spec:
 type: ClusterIP
 ports:
@@ -167,8 +361,8 @@
 name: http
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 ---
 # Source: thanos/templates/query/service-grpc.yaml
@@ -176,13 +370,12 @@
 kind: Service
 metadata:
 name: thanos-query-grpc
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
- annotations:
 spec:
 type: ClusterIP
 ports:
@@ -192,8 +385,8 @@
 name: grpc
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 ---
 # Source: thanos/templates/query/service.yaml
@@ -201,13 +394,13 @@
 kind: Service
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
- annotations:
+ prometheus-operator/monitor: 'true'
 spec:
 type: ClusterIP
 ports:
@@ -217,8 +410,8 @@
 name: http
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 ---
 # Source: thanos/templates/ruler/service.yaml
@@ -226,14 +419,13 @@
 kind: Service
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 prometheus-operator/monitor: 'true'
- annotations:
 spec:
 type: ClusterIP
 ports:
@@ -248,8 +440,8 @@
 name: grpc
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 ---
 # Source: thanos/templates/storegateway/service.yaml
@@ -257,14 +449,13 @@
 kind: Service
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 prometheus-operator/monitor: 'true'
- annotations:
 spec:
 type: ClusterIP
 ports:
@@ -279,8 +470,8 @@
 name: grpc
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 ---
 # Source: thanos/templates/bucketweb/deployment.yaml
@@ -288,14 +479,15 @@
 kind: Deployment
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 strategy:
 rollingUpdate:
 maxSurge: 1
@@ -303,20 +495,20 @@
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
 spec:
- serviceAccount: thanos-bucketweb
+ serviceAccountName: thanos-bucketweb
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -324,22 +516,33 @@
 requiredDuringSchedulingIgnoredDuringExecution:
 - labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 topologyKey: kubernetes.io/hostname
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: bucketweb
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.34.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - tools
 - bucket
@@ -375,8 +578,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: objstore-config
 mountPath: /conf
@@ -390,32 +599,33 @@
 kind: Deployment
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 spec:
 replicas: 1
+ revisionHistoryLimit: 10
 strategy:
 type: Recreate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
 spec:
- serviceAccount: thanos-compactor
+ serviceAccountName: thanos-compactor
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -424,23 +634,34 @@
 - podAffinityTerm:
 labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 topologyKey: kubernetes.io/hostname
 weight: 1
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: compactor
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.34.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - compact
 - --log.level=info
@@ -480,8 +701,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: objstore-config
 mountPath: /conf
@@ -500,30 +727,31 @@
 kind: Deployment
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 strategy:
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 spec:
- serviceAccount: thanos-query
+ serviceAccountName: thanos-query
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -532,23 +760,34 @@
 - podAffinityTerm:
 labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 topologyKey: kubernetes.io/hostname
 weight: 1
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: query
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.34.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - query
 - --log.level=info
@@ -559,6 +798,7 @@
 - --endpoint=dnssrv+_grpc._tcp.kube-prometheus-stack-thanos-discovery.monitoring.svc.cluster.local
 - --endpoint=dnssrv+_grpc._tcp.thanos-storegateway.default.svc.cluster.local
 - --endpoint=dnssrv+_grpc._tcp.thanos-ruler.default.svc.cluster.local
+ - --alert.query-url=http://thanos-query.default.svc.cluster.local:9090
 ports:
 - name: http
 containerPort: 10902
@@ -587,8 +827,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 volumes:
 ---
@@ -597,35 +843,36 @@
 kind: StatefulSet
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 podManagementPolicy: OrderedReady
 serviceName: thanos-ruler-headless
 updateStrategy:
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
- checksum/ruler-configuration: 7afcad4879bbb799b132d7e34633031899e8cf18d4ad6762b1b08fbec4111f11
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
+ checksum/ruler-configuration: d11db702b3cb233ba465cddebeb4117c00ebdbda6ad18dd38964228345883c6a
 spec:
- serviceAccount: thanos-ruler
+ serviceAccountName: thanos-ruler
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -633,22 +880,33 @@
 requiredDuringSchedulingIgnoredDuringExecution:
 - labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 topologyKey: kubernetes.io/hostname
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: ruler
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.34.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - rule
 - --log.level=info
@@ -659,6 +917,7 @@
 - --eval-interval=1m
 - --alertmanagers.url=http://kube-prometheus-stack-alertmanager.monitoring:9093
 - --query=dnssrv+_http._tcp.thanos-query.default.svc.cluster.local
+ - --alert.query-url=http://thanos-query.default.svc.cluster.local:9090
 - --label=replica="$(POD_NAME)"
 - --label=ruler_cluster="${CLUSTER_NAME}"
 - --alert.label-drop=replica
@@ -698,8 +957,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: ruler-config
 mountPath: /conf/rules
@@ -710,7 +975,7 @@
 volumes:
 - name: ruler-config
 configMap:
- name: thanos-ruler-configmap
+ name: thanos-ruler
 - name: objstore-config
 secret:
 secretName: thanos-objstore-secret
@@ -730,34 +995,35 @@
 kind: StatefulSet
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 podManagementPolicy: OrderedReady
 serviceName: thanos-storegateway-headless
 updateStrategy:
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
 spec:
- serviceAccount: thanos-storegateway
+ serviceAccountName: thanos-storegateway
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -765,22 +1031,33 @@
 requiredDuringSchedulingIgnoredDuringExecution:
 - labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 topologyKey: kubernetes.io/hostname
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: storegateway
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.34.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - store
 - --log.level=info
@@ -817,8 +1094,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: objstore-config
 mountPath: /conf
@@ -844,11 +1127,11 @@
 kind: Ingress
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 annotations:
 hajimari.io/enable: "false"
@@ -875,11 +1158,11 @@
 kind: Ingress
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 annotations:
 hajimari.io/enable: "false"
@@ -906,11 +1189,11 @@
 kind: Ingress
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 annotations:
 hajimari.io/icon: table-search
@@ -937,11 +1220,11 @@
 kind: Ingress
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 annotations:
 hajimari.io/enable: "false"
@@ -968,11 +1251,11 @@
 kind: Ingress
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 annotations:
 hajimari.io/enable: "false"
@@ -1001,9 +1284,9 @@
 name: thanos-bucketweb
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 spec:
 endpoints:
@@ -1013,9 +1296,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/compactor/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1024,9 +1308,9 @@
 name: thanos-compactor
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 spec:
 endpoints:
@@ -1036,9 +1320,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/query/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1047,9 +1332,9 @@
 name: thanos-query
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 spec:
 endpoints:
@@ -1059,9 +1344,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/ruler/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1070,9 +1356,9 @@
 name: thanos-ruler
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 spec:
 endpoints:
@@ -1082,9 +1368,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/storegateway/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1093,9 +1380,9 @@
 name: thanos-storegateway
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 spec:
 endpoints:
@@ -1105,6 +1392,7 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
+ prometheus-operator/monitor: 'true'

@homeops-gh-bot homeops-gh-bot bot force-pushed the renovate/thanos-15.x branch from efd6428 to 41b3a7b Compare April 3, 2024 11:11
@homeops-gh-bot homeops-gh-bot bot changed the title feat(helm)!: Update chart thanos to 15.0.2 feat(helm)!: Update chart thanos to 15.0.0 Apr 3, 2024
@homeops-gh-bot
Copy link
Contributor Author

homeops-gh-bot bot commented Apr 3, 2024

Path: cluster/apps/monitoring/thanos/helm-release.yaml
Version: 11.6.8 -> 15.0.0

@@ -1,84 +1,278 @@
 ---
+# Source: thanos/templates/bucketweb/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-bucketweb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: bucketweb
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: bucketweb
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 8080
+ - port: 8080
+---
+# Source: thanos/templates/compactor/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-compactor
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: compactor
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: compactor
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 9090
+---
+# Source: thanos/templates/query-frontend/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-query-frontend
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query-frontend
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query-frontend
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 9090
+ - port: 9090
+---
+# Source: thanos/templates/query/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-query
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 10901
+ - port: 9090
+ - port: 10901
+---
+# Source: thanos/templates/receive/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-receive
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: receive
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: receive
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 10902
+ - port: 10901
+ - port: 10901
+ - port: 19291
+ - port: 19291
+---
+# Source: thanos/templates/ruler/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-ruler
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: ruler
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: ruler
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 9090
+ - port: 10901
+ - port: 10901
+---
+# Source: thanos/templates/storegateway/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-storegateway
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: storegateway
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: storegateway
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 9090
+ - port: 10901
+ - port: 10901
+---
 # Source: thanos/templates/bucketweb/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/compactor/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/query/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/ruler/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/storegateway/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/objstore-secret.yaml
 apiVersion: v1
 kind: Secret
 metadata:
 name: thanos-objstore-secret
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 data:
 objstore.yml: |-
 Y29uZmlnOgogIGluc2VjdXJlOiB0cnVlCnR5cGU6IHMz
@@ -87,12 +281,12 @@
 apiVersion: v1
 kind: ConfigMap
 metadata:
- name: thanos-ruler-configmap
- namespace: "default"
+ name: thanos-ruler
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 data:
 ruler.yml: |-
@@ -107,11 +301,11 @@
 apiVersion: v1
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 spec:
 accessModes:
@@ -126,13 +320,13 @@
 kind: Service
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
- annotations:
+ prometheus-operator/monitor: 'true'
 spec:
 type: ClusterIP
 ports:
@@ -142,8 +336,8 @@
 name: http
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 ---
 # Source: thanos/templates/compactor/service.yaml
@@ -151,13 +345,13 @@
 kind: Service
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
- annotations:
+ prometheus-operator/monitor: 'true'
 spec:
 type: ClusterIP
 ports:
@@ -167,8 +361,8 @@
 name: http
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 ---
 # Source: thanos/templates/query/service-grpc.yaml
@@ -176,13 +370,12 @@
 kind: Service
 metadata:
 name: thanos-query-grpc
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
- annotations:
 spec:
 type: ClusterIP
 ports:
@@ -192,8 +385,8 @@
 name: grpc
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 ---
 # Source: thanos/templates/query/service.yaml
@@ -201,13 +394,13 @@
 kind: Service
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
- annotations:
+ prometheus-operator/monitor: 'true'
 spec:
 type: ClusterIP
 ports:
@@ -217,8 +410,8 @@
 name: http
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 ---
 # Source: thanos/templates/ruler/service.yaml
@@ -226,14 +419,13 @@
 kind: Service
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 prometheus-operator/monitor: 'true'
- annotations:
 spec:
 type: ClusterIP
 ports:
@@ -248,8 +440,8 @@
 name: grpc
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 ---
 # Source: thanos/templates/storegateway/service.yaml
@@ -257,14 +449,13 @@
 kind: Service
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 prometheus-operator/monitor: 'true'
- annotations:
 spec:
 type: ClusterIP
 ports:
@@ -279,8 +470,8 @@
 name: grpc
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 ---
 # Source: thanos/templates/bucketweb/deployment.yaml
@@ -288,14 +479,15 @@
 kind: Deployment
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 strategy:
 rollingUpdate:
 maxSurge: 1
@@ -303,20 +495,20 @@
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
 spec:
- serviceAccount: thanos-bucketweb
+ serviceAccountName: thanos-bucketweb
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -324,22 +516,33 @@
 requiredDuringSchedulingIgnoredDuringExecution:
 - labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 topologyKey: kubernetes.io/hostname
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: bucketweb
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.34.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - tools
 - bucket
@@ -375,8 +578,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: objstore-config
 mountPath: /conf
@@ -390,32 +599,33 @@
 kind: Deployment
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 spec:
 replicas: 1
+ revisionHistoryLimit: 10
 strategy:
 type: Recreate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
 spec:
- serviceAccount: thanos-compactor
+ serviceAccountName: thanos-compactor
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -424,23 +634,34 @@
 - podAffinityTerm:
 labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 topologyKey: kubernetes.io/hostname
 weight: 1
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: compactor
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.34.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - compact
 - --log.level=info
@@ -480,8 +701,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: objstore-config
 mountPath: /conf
@@ -500,30 +727,31 @@
 kind: Deployment
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 strategy:
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 spec:
- serviceAccount: thanos-query
+ serviceAccountName: thanos-query
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -532,23 +760,34 @@
 - podAffinityTerm:
 labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 topologyKey: kubernetes.io/hostname
 weight: 1
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: query
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.34.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - query
 - --log.level=info
@@ -587,8 +826,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 volumes:
 ---
@@ -597,35 +842,36 @@
 kind: StatefulSet
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 podManagementPolicy: OrderedReady
 serviceName: thanos-ruler-headless
 updateStrategy:
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
- checksum/ruler-configuration: 7afcad4879bbb799b132d7e34633031899e8cf18d4ad6762b1b08fbec4111f11
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
+ checksum/ruler-configuration: d11db702b3cb233ba465cddebeb4117c00ebdbda6ad18dd38964228345883c6a
 spec:
- serviceAccount: thanos-ruler
+ serviceAccountName: thanos-ruler
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -633,22 +879,33 @@
 requiredDuringSchedulingIgnoredDuringExecution:
 - labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 topologyKey: kubernetes.io/hostname
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: ruler
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.34.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - rule
 - --log.level=info
@@ -659,6 +916,7 @@
 - --eval-interval=1m
 - --alertmanagers.url=http://kube-prometheus-stack-alertmanager.monitoring:9093
 - --query=dnssrv+_http._tcp.thanos-query.default.svc.cluster.local
+ - --alert.query-url=http://thanos-query.default.svc.cluster.local:9090
 - --label=replica="$(POD_NAME)"
 - --label=ruler_cluster="${CLUSTER_NAME}"
 - --alert.label-drop=replica
@@ -698,8 +956,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: ruler-config
 mountPath: /conf/rules
@@ -710,7 +974,7 @@
 volumes:
 - name: ruler-config
 configMap:
- name: thanos-ruler-configmap
+ name: thanos-ruler
 - name: objstore-config
 secret:
 secretName: thanos-objstore-secret
@@ -730,34 +994,35 @@
 kind: StatefulSet
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 podManagementPolicy: OrderedReady
 serviceName: thanos-storegateway-headless
 updateStrategy:
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
 spec:
- serviceAccount: thanos-storegateway
+ serviceAccountName: thanos-storegateway
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -765,22 +1030,33 @@
 requiredDuringSchedulingIgnoredDuringExecution:
 - labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 topologyKey: kubernetes.io/hostname
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: storegateway
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.34.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - store
 - --log.level=info
@@ -817,8 +1093,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: objstore-config
 mountPath: /conf
@@ -844,11 +1126,11 @@
 kind: Ingress
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 annotations:
 hajimari.io/enable: "false"
@@ -875,11 +1157,11 @@
 kind: Ingress
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 annotations:
 hajimari.io/enable: "false"
@@ -906,11 +1188,11 @@
 kind: Ingress
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 annotations:
 hajimari.io/icon: table-search
@@ -937,11 +1219,11 @@
 kind: Ingress
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 annotations:
 hajimari.io/enable: "false"
@@ -968,11 +1250,11 @@
 kind: Ingress
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 annotations:
 hajimari.io/enable: "false"
@@ -1001,9 +1283,9 @@
 name: thanos-bucketweb
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 spec:
 endpoints:
@@ -1013,9 +1295,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/compactor/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1024,9 +1307,9 @@
 name: thanos-compactor
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 spec:
 endpoints:
@@ -1036,9 +1319,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/query/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1047,9 +1331,9 @@
 name: thanos-query
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 spec:
 endpoints:
@@ -1059,9 +1343,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/ruler/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1070,9 +1355,9 @@
 name: thanos-ruler
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 spec:
 endpoints:
@@ -1082,9 +1367,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/storegateway/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1093,9 +1379,9 @@
 name: thanos-storegateway
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 spec:
 endpoints:
@@ -1105,6 +1391,7 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
+ prometheus-operator/monitor: 'true'

@homeops-gh-bot homeops-gh-bot bot force-pushed the renovate/thanos-15.x branch from 41b3a7b to 0712d84 Compare April 3, 2024 12:22
@homeops-gh-bot homeops-gh-bot bot changed the title feat(helm)!: Update chart thanos to 15.0.0 feat(helm)!: Update chart thanos to 15.0.2 Apr 3, 2024
@homeops-gh-bot
Copy link
Contributor Author

homeops-gh-bot bot commented Apr 3, 2024

Path: cluster/apps/monitoring/thanos/helm-release.yaml
Version: 11.6.8 -> 15.0.2

@@ -1,84 +1,278 @@
 ---
+# Source: thanos/templates/bucketweb/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-bucketweb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: bucketweb
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: bucketweb
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 8080
+ - port: 8080
+---
+# Source: thanos/templates/compactor/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-compactor
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: compactor
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: compactor
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 9090
+---
+# Source: thanos/templates/query-frontend/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-query-frontend
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query-frontend
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query-frontend
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 9090
+ - port: 9090
+---
+# Source: thanos/templates/query/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-query
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 10901
+ - port: 9090
+ - port: 10901
+---
+# Source: thanos/templates/receive/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-receive
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: receive
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: receive
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 10902
+ - port: 10901
+ - port: 10901
+ - port: 19291
+ - port: 19291
+---
+# Source: thanos/templates/ruler/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-ruler
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: ruler
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: ruler
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 9090
+ - port: 10901
+ - port: 10901
+---
+# Source: thanos/templates/storegateway/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-storegateway
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: storegateway
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: storegateway
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 9090
+ - port: 10901
+ - port: 10901
+---
 # Source: thanos/templates/bucketweb/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/compactor/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/query/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/ruler/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/storegateway/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/objstore-secret.yaml
 apiVersion: v1
 kind: Secret
 metadata:
 name: thanos-objstore-secret
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 data:
 objstore.yml: |-
 Y29uZmlnOgogIGluc2VjdXJlOiB0cnVlCnR5cGU6IHMz
@@ -87,12 +281,12 @@
 apiVersion: v1
 kind: ConfigMap
 metadata:
- name: thanos-ruler-configmap
- namespace: "default"
+ name: thanos-ruler
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 data:
 ruler.yml: |-
@@ -107,11 +301,11 @@
 apiVersion: v1
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 spec:
 accessModes:
@@ -126,13 +320,13 @@
 kind: Service
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
- annotations:
+ prometheus-operator/monitor: 'true'
 spec:
 type: ClusterIP
 ports:
@@ -142,8 +336,8 @@
 name: http
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 ---
 # Source: thanos/templates/compactor/service.yaml
@@ -151,13 +345,13 @@
 kind: Service
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
- annotations:
+ prometheus-operator/monitor: 'true'
 spec:
 type: ClusterIP
 ports:
@@ -167,8 +361,8 @@
 name: http
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 ---
 # Source: thanos/templates/query/service-grpc.yaml
@@ -176,13 +370,12 @@
 kind: Service
 metadata:
 name: thanos-query-grpc
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
- annotations:
 spec:
 type: ClusterIP
 ports:
@@ -192,8 +385,8 @@
 name: grpc
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 ---
 # Source: thanos/templates/query/service.yaml
@@ -201,13 +394,13 @@
 kind: Service
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
- annotations:
+ prometheus-operator/monitor: 'true'
 spec:
 type: ClusterIP
 ports:
@@ -217,8 +410,8 @@
 name: http
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 ---
 # Source: thanos/templates/ruler/service.yaml
@@ -226,14 +419,13 @@
 kind: Service
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 prometheus-operator/monitor: 'true'
- annotations:
 spec:
 type: ClusterIP
 ports:
@@ -248,8 +440,8 @@
 name: grpc
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 ---
 # Source: thanos/templates/storegateway/service.yaml
@@ -257,14 +449,13 @@
 kind: Service
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 prometheus-operator/monitor: 'true'
- annotations:
 spec:
 type: ClusterIP
 ports:
@@ -279,8 +470,8 @@
 name: grpc
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 ---
 # Source: thanos/templates/bucketweb/deployment.yaml
@@ -288,14 +479,15 @@
 kind: Deployment
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 strategy:
 rollingUpdate:
 maxSurge: 1
@@ -303,20 +495,20 @@
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
 spec:
- serviceAccount: thanos-bucketweb
+ serviceAccountName: thanos-bucketweb
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -324,22 +516,33 @@
 requiredDuringSchedulingIgnoredDuringExecution:
 - labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 topologyKey: kubernetes.io/hostname
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: bucketweb
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.34.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - tools
 - bucket
@@ -375,8 +578,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: objstore-config
 mountPath: /conf
@@ -390,32 +599,33 @@
 kind: Deployment
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 spec:
 replicas: 1
+ revisionHistoryLimit: 10
 strategy:
 type: Recreate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
 spec:
- serviceAccount: thanos-compactor
+ serviceAccountName: thanos-compactor
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -424,23 +634,34 @@
 - podAffinityTerm:
 labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 topologyKey: kubernetes.io/hostname
 weight: 1
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: compactor
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.34.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - compact
 - --log.level=info
@@ -480,8 +701,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: objstore-config
 mountPath: /conf
@@ -500,30 +727,31 @@
 kind: Deployment
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 strategy:
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 spec:
- serviceAccount: thanos-query
+ serviceAccountName: thanos-query
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -532,23 +760,34 @@
 - podAffinityTerm:
 labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 topologyKey: kubernetes.io/hostname
 weight: 1
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: query
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.34.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - query
 - --log.level=info
@@ -559,6 +798,7 @@
 - --endpoint=dnssrv+_grpc._tcp.kube-prometheus-stack-thanos-discovery.monitoring.svc.cluster.local
 - --endpoint=dnssrv+_grpc._tcp.thanos-storegateway.default.svc.cluster.local
 - --endpoint=dnssrv+_grpc._tcp.thanos-ruler.default.svc.cluster.local
+ - --alert.query-url=http://thanos-query.default.svc.cluster.local:9090
 ports:
 - name: http
 containerPort: 10902
@@ -587,8 +827,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 volumes:
 ---
@@ -597,35 +843,36 @@
 kind: StatefulSet
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 podManagementPolicy: OrderedReady
 serviceName: thanos-ruler-headless
 updateStrategy:
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
- checksum/ruler-configuration: 7afcad4879bbb799b132d7e34633031899e8cf18d4ad6762b1b08fbec4111f11
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
+ checksum/ruler-configuration: d11db702b3cb233ba465cddebeb4117c00ebdbda6ad18dd38964228345883c6a
 spec:
- serviceAccount: thanos-ruler
+ serviceAccountName: thanos-ruler
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -633,22 +880,33 @@
 requiredDuringSchedulingIgnoredDuringExecution:
 - labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 topologyKey: kubernetes.io/hostname
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: ruler
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.34.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - rule
 - --log.level=info
@@ -659,6 +917,7 @@
 - --eval-interval=1m
 - --alertmanagers.url=http://kube-prometheus-stack-alertmanager.monitoring:9093
 - --query=dnssrv+_http._tcp.thanos-query.default.svc.cluster.local
+ - --alert.query-url=http://thanos-query.default.svc.cluster.local:9090
 - --label=replica="$(POD_NAME)"
 - --label=ruler_cluster="${CLUSTER_NAME}"
 - --alert.label-drop=replica
@@ -698,8 +957,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: ruler-config
 mountPath: /conf/rules
@@ -710,7 +975,7 @@
 volumes:
 - name: ruler-config
 configMap:
- name: thanos-ruler-configmap
+ name: thanos-ruler
 - name: objstore-config
 secret:
 secretName: thanos-objstore-secret
@@ -730,34 +995,35 @@
 kind: StatefulSet
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 podManagementPolicy: OrderedReady
 serviceName: thanos-storegateway-headless
 updateStrategy:
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
 spec:
- serviceAccount: thanos-storegateway
+ serviceAccountName: thanos-storegateway
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -765,22 +1031,33 @@
 requiredDuringSchedulingIgnoredDuringExecution:
 - labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 topologyKey: kubernetes.io/hostname
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: storegateway
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.34.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - store
 - --log.level=info
@@ -817,8 +1094,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: objstore-config
 mountPath: /conf
@@ -844,11 +1127,11 @@
 kind: Ingress
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 annotations:
 hajimari.io/enable: "false"
@@ -875,11 +1158,11 @@
 kind: Ingress
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 annotations:
 hajimari.io/enable: "false"
@@ -906,11 +1189,11 @@
 kind: Ingress
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 annotations:
 hajimari.io/icon: table-search
@@ -937,11 +1220,11 @@
 kind: Ingress
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 annotations:
 hajimari.io/enable: "false"
@@ -968,11 +1251,11 @@
 kind: Ingress
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 annotations:
 hajimari.io/enable: "false"
@@ -1001,9 +1284,9 @@
 name: thanos-bucketweb
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 spec:
 endpoints:
@@ -1013,9 +1296,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/compactor/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1024,9 +1308,9 @@
 name: thanos-compactor
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 spec:
 endpoints:
@@ -1036,9 +1320,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/query/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1047,9 +1332,9 @@
 name: thanos-query
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 spec:
 endpoints:
@@ -1059,9 +1344,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/ruler/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1070,9 +1356,9 @@
 name: thanos-ruler
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 spec:
 endpoints:
@@ -1082,9 +1368,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/storegateway/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1093,9 +1380,9 @@
 name: thanos-storegateway
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 spec:
 endpoints:
@@ -1105,6 +1392,7 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
+ prometheus-operator/monitor: 'true'

@homeops-gh-bot homeops-gh-bot bot force-pushed the renovate/thanos-15.x branch from 0712d84 to 414b17c Compare April 5, 2024 01:46
@homeops-gh-bot homeops-gh-bot bot changed the title feat(helm)!: Update chart thanos to 15.0.2 feat(helm)!: Update chart thanos to 15.0.3 Apr 5, 2024
@homeops-gh-bot
Copy link
Contributor Author

homeops-gh-bot bot commented Apr 5, 2024

Path: cluster/apps/monitoring/thanos/helm-release.yaml
Version: 11.6.8 -> 15.0.3

@@ -1,84 +1,278 @@
 ---
+# Source: thanos/templates/bucketweb/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-bucketweb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: bucketweb
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: bucketweb
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 8080
+ - port: 8080
+---
+# Source: thanos/templates/compactor/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-compactor
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: compactor
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: compactor
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 9090
+---
+# Source: thanos/templates/query-frontend/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-query-frontend
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query-frontend
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query-frontend
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 9090
+ - port: 9090
+---
+# Source: thanos/templates/query/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-query
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 10901
+ - port: 9090
+ - port: 10901
+---
+# Source: thanos/templates/receive/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-receive
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: receive
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: receive
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 10902
+ - port: 10901
+ - port: 10901
+ - port: 19291
+ - port: 19291
+---
+# Source: thanos/templates/ruler/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-ruler
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: ruler
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: ruler
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 9090
+ - port: 10901
+ - port: 10901
+---
+# Source: thanos/templates/storegateway/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-storegateway
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: storegateway
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: storegateway
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 9090
+ - port: 10901
+ - port: 10901
+---
 # Source: thanos/templates/bucketweb/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/compactor/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/query/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/ruler/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/storegateway/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/objstore-secret.yaml
 apiVersion: v1
 kind: Secret
 metadata:
 name: thanos-objstore-secret
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 data:
 objstore.yml: |-
 Y29uZmlnOgogIGluc2VjdXJlOiB0cnVlCnR5cGU6IHMz
@@ -87,12 +281,12 @@
 apiVersion: v1
 kind: ConfigMap
 metadata:
- name: thanos-ruler-configmap
- namespace: "default"
+ name: thanos-ruler
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 data:
 ruler.yml: |-
@@ -107,11 +301,11 @@
 apiVersion: v1
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 spec:
 accessModes:
@@ -126,13 +320,13 @@
 kind: Service
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
- annotations:
+ prometheus-operator/monitor: 'true'
 spec:
 type: ClusterIP
 ports:
@@ -142,8 +336,8 @@
 name: http
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 ---
 # Source: thanos/templates/compactor/service.yaml
@@ -151,13 +345,13 @@
 kind: Service
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
- annotations:
+ prometheus-operator/monitor: 'true'
 spec:
 type: ClusterIP
 ports:
@@ -167,8 +361,8 @@
 name: http
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 ---
 # Source: thanos/templates/query/service-grpc.yaml
@@ -176,13 +370,12 @@
 kind: Service
 metadata:
 name: thanos-query-grpc
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
- annotations:
 spec:
 type: ClusterIP
 ports:
@@ -192,8 +385,8 @@
 name: grpc
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 ---
 # Source: thanos/templates/query/service.yaml
@@ -201,13 +394,13 @@
 kind: Service
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
- annotations:
+ prometheus-operator/monitor: 'true'
 spec:
 type: ClusterIP
 ports:
@@ -217,8 +410,8 @@
 name: http
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 ---
 # Source: thanos/templates/ruler/service.yaml
@@ -226,14 +419,13 @@
 kind: Service
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 prometheus-operator/monitor: 'true'
- annotations:
 spec:
 type: ClusterIP
 ports:
@@ -248,8 +440,8 @@
 name: grpc
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 ---
 # Source: thanos/templates/storegateway/service.yaml
@@ -257,14 +449,13 @@
 kind: Service
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 prometheus-operator/monitor: 'true'
- annotations:
 spec:
 type: ClusterIP
 ports:
@@ -279,8 +470,8 @@
 name: grpc
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 ---
 # Source: thanos/templates/bucketweb/deployment.yaml
@@ -288,14 +479,15 @@
 kind: Deployment
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 strategy:
 rollingUpdate:
 maxSurge: 1
@@ -303,20 +495,20 @@
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
 spec:
- serviceAccount: thanos-bucketweb
+ serviceAccountName: thanos-bucketweb
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -324,22 +516,33 @@
 requiredDuringSchedulingIgnoredDuringExecution:
 - labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 topologyKey: kubernetes.io/hostname
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: bucketweb
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.34.1-debian-12-r2
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - tools
 - bucket
@@ -375,8 +578,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: objstore-config
 mountPath: /conf
@@ -390,32 +599,33 @@
 kind: Deployment
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 spec:
 replicas: 1
+ revisionHistoryLimit: 10
 strategy:
 type: Recreate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
 spec:
- serviceAccount: thanos-compactor
+ serviceAccountName: thanos-compactor
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -424,23 +634,34 @@
 - podAffinityTerm:
 labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 topologyKey: kubernetes.io/hostname
 weight: 1
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: compactor
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.34.1-debian-12-r2
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - compact
 - --log.level=info
@@ -480,8 +701,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: objstore-config
 mountPath: /conf
@@ -500,30 +727,31 @@
 kind: Deployment
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 strategy:
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 spec:
- serviceAccount: thanos-query
+ serviceAccountName: thanos-query
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -532,23 +760,34 @@
 - podAffinityTerm:
 labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 topologyKey: kubernetes.io/hostname
 weight: 1
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: query
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.34.1-debian-12-r2
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - query
 - --log.level=info
@@ -559,6 +798,7 @@
 - --endpoint=dnssrv+_grpc._tcp.kube-prometheus-stack-thanos-discovery.monitoring.svc.cluster.local
 - --endpoint=dnssrv+_grpc._tcp.thanos-storegateway.default.svc.cluster.local
 - --endpoint=dnssrv+_grpc._tcp.thanos-ruler.default.svc.cluster.local
+ - --alert.query-url=http://thanos-query.default.svc.cluster.local:9090
 ports:
 - name: http
 containerPort: 10902
@@ -587,8 +827,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 volumes:
 ---
@@ -597,35 +843,36 @@
 kind: StatefulSet
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 podManagementPolicy: OrderedReady
 serviceName: thanos-ruler-headless
 updateStrategy:
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
- checksum/ruler-configuration: 7afcad4879bbb799b132d7e34633031899e8cf18d4ad6762b1b08fbec4111f11
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
+ checksum/ruler-configuration: d11db702b3cb233ba465cddebeb4117c00ebdbda6ad18dd38964228345883c6a
 spec:
- serviceAccount: thanos-ruler
+ serviceAccountName: thanos-ruler
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -633,22 +880,33 @@
 requiredDuringSchedulingIgnoredDuringExecution:
 - labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 topologyKey: kubernetes.io/hostname
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: ruler
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.34.1-debian-12-r2
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - rule
 - --log.level=info
@@ -659,6 +917,7 @@
 - --eval-interval=1m
 - --alertmanagers.url=http://kube-prometheus-stack-alertmanager.monitoring:9093
 - --query=dnssrv+_http._tcp.thanos-query.default.svc.cluster.local
+ - --alert.query-url=http://thanos-query.default.svc.cluster.local:9090
 - --label=replica="$(POD_NAME)"
 - --label=ruler_cluster="${CLUSTER_NAME}"
 - --alert.label-drop=replica
@@ -698,8 +957,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: ruler-config
 mountPath: /conf/rules
@@ -710,7 +975,7 @@
 volumes:
 - name: ruler-config
 configMap:
- name: thanos-ruler-configmap
+ name: thanos-ruler
 - name: objstore-config
 secret:
 secretName: thanos-objstore-secret
@@ -730,34 +995,35 @@
 kind: StatefulSet
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 podManagementPolicy: OrderedReady
 serviceName: thanos-storegateway-headless
 updateStrategy:
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
 spec:
- serviceAccount: thanos-storegateway
+ serviceAccountName: thanos-storegateway
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -765,22 +1031,33 @@
 requiredDuringSchedulingIgnoredDuringExecution:
 - labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 topologyKey: kubernetes.io/hostname
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: storegateway
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.34.1-debian-12-r2
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - store
 - --log.level=info
@@ -817,8 +1094,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: objstore-config
 mountPath: /conf
@@ -844,11 +1127,11 @@
 kind: Ingress
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 annotations:
 hajimari.io/enable: "false"
@@ -875,11 +1158,11 @@
 kind: Ingress
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 annotations:
 hajimari.io/enable: "false"
@@ -906,11 +1189,11 @@
 kind: Ingress
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 annotations:
 hajimari.io/icon: table-search
@@ -937,11 +1220,11 @@
 kind: Ingress
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 annotations:
 hajimari.io/enable: "false"
@@ -968,11 +1251,11 @@
 kind: Ingress
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 annotations:
 hajimari.io/enable: "false"
@@ -1001,9 +1284,9 @@
 name: thanos-bucketweb
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 spec:
 endpoints:
@@ -1013,9 +1296,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/compactor/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1024,9 +1308,9 @@
 name: thanos-compactor
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 spec:
 endpoints:
@@ -1036,9 +1320,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/query/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1047,9 +1332,9 @@
 name: thanos-query
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 spec:
 endpoints:
@@ -1059,9 +1344,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/ruler/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1070,9 +1356,9 @@
 name: thanos-ruler
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 spec:
 endpoints:
@@ -1082,9 +1368,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/storegateway/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1093,9 +1380,9 @@
 name: thanos-storegateway
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 spec:
 endpoints:
@@ -1105,6 +1392,7 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
+ prometheus-operator/monitor: 'true'

@github-advanced-security
Copy link

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.

@homeops-gh-bot homeops-gh-bot bot force-pushed the renovate/thanos-15.x branch from 414b17c to 9b2e70f Compare April 5, 2024 19:20
@homeops-gh-bot homeops-gh-bot bot changed the title feat(helm)!: Update chart thanos to 15.0.3 feat(helm)!: Update chart thanos to 15.0.4 Apr 5, 2024
@homeops-gh-bot
Copy link
Contributor Author

homeops-gh-bot bot commented Apr 5, 2024

Path: cluster/apps/monitoring/thanos/helm-release.yaml
Version: 11.6.8 -> 15.0.4

@@ -1,84 +1,278 @@
 ---
+# Source: thanos/templates/bucketweb/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-bucketweb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: bucketweb
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: bucketweb
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 8080
+ - port: 8080
+---
+# Source: thanos/templates/compactor/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-compactor
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: compactor
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: compactor
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 9090
+---
+# Source: thanos/templates/query-frontend/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-query-frontend
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query-frontend
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query-frontend
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 9090
+ - port: 9090
+---
+# Source: thanos/templates/query/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-query
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 10901
+ - port: 9090
+ - port: 10901
+---
+# Source: thanos/templates/receive/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-receive
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: receive
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: receive
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 10902
+ - port: 10901
+ - port: 10901
+ - port: 19291
+ - port: 19291
+---
+# Source: thanos/templates/ruler/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-ruler
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: ruler
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: ruler
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 9090
+ - port: 10901
+ - port: 10901
+---
+# Source: thanos/templates/storegateway/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-storegateway
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: storegateway
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: storegateway
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 9090
+ - port: 10901
+ - port: 10901
+---
 # Source: thanos/templates/bucketweb/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/compactor/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/query/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/ruler/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/storegateway/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/objstore-secret.yaml
 apiVersion: v1
 kind: Secret
 metadata:
 name: thanos-objstore-secret
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 data:
 objstore.yml: |-
 Y29uZmlnOgogIGluc2VjdXJlOiB0cnVlCnR5cGU6IHMz
@@ -87,12 +281,12 @@
 apiVersion: v1
 kind: ConfigMap
 metadata:
- name: thanos-ruler-configmap
- namespace: "default"
+ name: thanos-ruler
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 data:
 ruler.yml: |-
@@ -107,11 +301,11 @@
 apiVersion: v1
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 spec:
 accessModes:
@@ -126,13 +320,13 @@
 kind: Service
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
- annotations:
+ prometheus-operator/monitor: 'true'
 spec:
 type: ClusterIP
 ports:
@@ -142,8 +336,8 @@
 name: http
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 ---
 # Source: thanos/templates/compactor/service.yaml
@@ -151,13 +345,13 @@
 kind: Service
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
- annotations:
+ prometheus-operator/monitor: 'true'
 spec:
 type: ClusterIP
 ports:
@@ -167,8 +361,8 @@
 name: http
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 ---
 # Source: thanos/templates/query/service-grpc.yaml
@@ -176,13 +370,12 @@
 kind: Service
 metadata:
 name: thanos-query-grpc
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
- annotations:
 spec:
 type: ClusterIP
 ports:
@@ -192,8 +385,8 @@
 name: grpc
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 ---
 # Source: thanos/templates/query/service.yaml
@@ -201,13 +394,13 @@
 kind: Service
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
- annotations:
+ prometheus-operator/monitor: 'true'
 spec:
 type: ClusterIP
 ports:
@@ -217,8 +410,8 @@
 name: http
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 ---
 # Source: thanos/templates/ruler/service.yaml
@@ -226,14 +419,13 @@
 kind: Service
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 prometheus-operator/monitor: 'true'
- annotations:
 spec:
 type: ClusterIP
 ports:
@@ -248,8 +440,8 @@
 name: grpc
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 ---
 # Source: thanos/templates/storegateway/service.yaml
@@ -257,14 +449,13 @@
 kind: Service
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 prometheus-operator/monitor: 'true'
- annotations:
 spec:
 type: ClusterIP
 ports:
@@ -279,8 +470,8 @@
 name: grpc
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 ---
 # Source: thanos/templates/bucketweb/deployment.yaml
@@ -288,14 +479,15 @@
 kind: Deployment
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 strategy:
 rollingUpdate:
 maxSurge: 1
@@ -303,20 +495,20 @@
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
 spec:
- serviceAccount: thanos-bucketweb
+ serviceAccountName: thanos-bucketweb
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -324,22 +516,33 @@
 requiredDuringSchedulingIgnoredDuringExecution:
 - labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 topologyKey: kubernetes.io/hostname
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: bucketweb
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.34.1-debian-12-r3
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - tools
 - bucket
@@ -375,8 +578,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: objstore-config
 mountPath: /conf
@@ -390,32 +599,33 @@
 kind: Deployment
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 spec:
 replicas: 1
+ revisionHistoryLimit: 10
 strategy:
 type: Recreate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
 spec:
- serviceAccount: thanos-compactor
+ serviceAccountName: thanos-compactor
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -424,23 +634,34 @@
 - podAffinityTerm:
 labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 topologyKey: kubernetes.io/hostname
 weight: 1
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: compactor
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.34.1-debian-12-r3
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - compact
 - --log.level=info
@@ -480,8 +701,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: objstore-config
 mountPath: /conf
@@ -500,30 +727,31 @@
 kind: Deployment
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 strategy:
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 spec:
- serviceAccount: thanos-query
+ serviceAccountName: thanos-query
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -532,23 +760,34 @@
 - podAffinityTerm:
 labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 topologyKey: kubernetes.io/hostname
 weight: 1
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: query
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.34.1-debian-12-r3
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - query
 - --log.level=info
@@ -559,6 +798,7 @@
 - --endpoint=dnssrv+_grpc._tcp.kube-prometheus-stack-thanos-discovery.monitoring.svc.cluster.local
 - --endpoint=dnssrv+_grpc._tcp.thanos-storegateway.default.svc.cluster.local
 - --endpoint=dnssrv+_grpc._tcp.thanos-ruler.default.svc.cluster.local
+ - --alert.query-url=http://thanos-query.default.svc.cluster.local:9090
 ports:
 - name: http
 containerPort: 10902
@@ -587,8 +827,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 volumes:
 ---
@@ -597,35 +843,36 @@
 kind: StatefulSet
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 podManagementPolicy: OrderedReady
 serviceName: thanos-ruler-headless
 updateStrategy:
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
- checksum/ruler-configuration: 7afcad4879bbb799b132d7e34633031899e8cf18d4ad6762b1b08fbec4111f11
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
+ checksum/ruler-configuration: d11db702b3cb233ba465cddebeb4117c00ebdbda6ad18dd38964228345883c6a
 spec:
- serviceAccount: thanos-ruler
+ serviceAccountName: thanos-ruler
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -633,22 +880,33 @@
 requiredDuringSchedulingIgnoredDuringExecution:
 - labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 topologyKey: kubernetes.io/hostname
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: ruler
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.34.1-debian-12-r3
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - rule
 - --log.level=info
@@ -659,6 +917,7 @@
 - --eval-interval=1m
 - --alertmanagers.url=http://kube-prometheus-stack-alertmanager.monitoring:9093
 - --query=dnssrv+_http._tcp.thanos-query.default.svc.cluster.local
+ - --alert.query-url=http://thanos-query.default.svc.cluster.local:9090
 - --label=replica="$(POD_NAME)"
 - --label=ruler_cluster="${CLUSTER_NAME}"
 - --alert.label-drop=replica
@@ -698,8 +957,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: ruler-config
 mountPath: /conf/rules
@@ -710,7 +975,7 @@
 volumes:
 - name: ruler-config
 configMap:
- name: thanos-ruler-configmap
+ name: thanos-ruler
 - name: objstore-config
 secret:
 secretName: thanos-objstore-secret
@@ -730,34 +995,35 @@
 kind: StatefulSet
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 podManagementPolicy: OrderedReady
 serviceName: thanos-storegateway-headless
 updateStrategy:
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
 spec:
- serviceAccount: thanos-storegateway
+ serviceAccountName: thanos-storegateway
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -765,22 +1031,33 @@
 requiredDuringSchedulingIgnoredDuringExecution:
 - labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 topologyKey: kubernetes.io/hostname
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: storegateway
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.34.1-debian-12-r3
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - store
 - --log.level=info
@@ -817,8 +1094,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: objstore-config
 mountPath: /conf
@@ -844,11 +1127,11 @@
 kind: Ingress
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 annotations:
 hajimari.io/enable: "false"
@@ -875,11 +1158,11 @@
 kind: Ingress
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 annotations:
 hajimari.io/enable: "false"
@@ -906,11 +1189,11 @@
 kind: Ingress
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 annotations:
 hajimari.io/icon: table-search
@@ -937,11 +1220,11 @@
 kind: Ingress
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 annotations:
 hajimari.io/enable: "false"
@@ -968,11 +1251,11 @@
 kind: Ingress
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 annotations:
 hajimari.io/enable: "false"
@@ -1001,9 +1284,9 @@
 name: thanos-bucketweb
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 spec:
 endpoints:
@@ -1013,9 +1296,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/compactor/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1024,9 +1308,9 @@
 name: thanos-compactor
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 spec:
 endpoints:
@@ -1036,9 +1320,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/query/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1047,9 +1332,9 @@
 name: thanos-query
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 spec:
 endpoints:
@@ -1059,9 +1344,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/ruler/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1070,9 +1356,9 @@
 name: thanos-ruler
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 spec:
 endpoints:
@@ -1082,9 +1368,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/storegateway/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1093,9 +1380,9 @@
 name: thanos-storegateway
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 spec:
 endpoints:
@@ -1105,6 +1392,7 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
+ prometheus-operator/monitor: 'true'

@homeops-gh-bot homeops-gh-bot bot force-pushed the renovate/thanos-15.x branch from 9b2e70f to e55c963 Compare April 11, 2024 08:16
@homeops-gh-bot homeops-gh-bot bot changed the title feat(helm)!: Update chart thanos to 15.0.4 feat(helm)!: Update chart thanos to 15.0.5 Apr 11, 2024
@homeops-gh-bot
Copy link
Contributor Author

Path: cluster/apps/monitoring/thanos/helm-release.yaml
Version: 11.6.8 -> 15.0.5

@@ -1,84 +1,278 @@
 ---
+# Source: thanos/templates/bucketweb/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-bucketweb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: bucketweb
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: bucketweb
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 8080
+ - port: 8080
+---
+# Source: thanos/templates/compactor/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-compactor
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: compactor
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: compactor
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 9090
+---
+# Source: thanos/templates/query-frontend/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-query-frontend
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query-frontend
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query-frontend
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 9090
+ - port: 9090
+---
+# Source: thanos/templates/query/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-query
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 10901
+ - port: 9090
+ - port: 10901
+---
+# Source: thanos/templates/receive/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-receive
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: receive
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: receive
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 10902
+ - port: 10901
+ - port: 10901
+ - port: 19291
+ - port: 19291
+---
+# Source: thanos/templates/ruler/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-ruler
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: ruler
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: ruler
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 9090
+ - port: 10901
+ - port: 10901
+---
+# Source: thanos/templates/storegateway/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-storegateway
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: storegateway
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: storegateway
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 9090
+ - port: 10901
+ - port: 10901
+---
 # Source: thanos/templates/bucketweb/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/compactor/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/query/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/ruler/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/storegateway/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/objstore-secret.yaml
 apiVersion: v1
 kind: Secret
 metadata:
 name: thanos-objstore-secret
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 data:
 objstore.yml: |-
 Y29uZmlnOgogIGluc2VjdXJlOiB0cnVlCnR5cGU6IHMz
@@ -87,12 +281,12 @@
 apiVersion: v1
 kind: ConfigMap
 metadata:
- name: thanos-ruler-configmap
- namespace: "default"
+ name: thanos-ruler
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 data:
 ruler.yml: |-
@@ -107,11 +301,11 @@
 apiVersion: v1
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 spec:
 accessModes:
@@ -126,13 +320,13 @@
 kind: Service
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
- annotations:
+ prometheus-operator/monitor: 'true'
 spec:
 type: ClusterIP
 ports:
@@ -142,8 +336,8 @@
 name: http
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 ---
 # Source: thanos/templates/compactor/service.yaml
@@ -151,13 +345,13 @@
 kind: Service
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
- annotations:
+ prometheus-operator/monitor: 'true'
 spec:
 type: ClusterIP
 ports:
@@ -167,8 +361,8 @@
 name: http
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 ---
 # Source: thanos/templates/query/service-grpc.yaml
@@ -176,13 +370,12 @@
 kind: Service
 metadata:
 name: thanos-query-grpc
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
- annotations:
 spec:
 type: ClusterIP
 ports:
@@ -192,8 +385,8 @@
 name: grpc
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 ---
 # Source: thanos/templates/query/service.yaml
@@ -201,13 +394,13 @@
 kind: Service
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
- annotations:
+ prometheus-operator/monitor: 'true'
 spec:
 type: ClusterIP
 ports:
@@ -217,8 +410,8 @@
 name: http
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 ---
 # Source: thanos/templates/ruler/service.yaml
@@ -226,14 +419,13 @@
 kind: Service
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 prometheus-operator/monitor: 'true'
- annotations:
 spec:
 type: ClusterIP
 ports:
@@ -248,8 +440,8 @@
 name: grpc
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 ---
 # Source: thanos/templates/storegateway/service.yaml
@@ -257,14 +449,13 @@
 kind: Service
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 prometheus-operator/monitor: 'true'
- annotations:
 spec:
 type: ClusterIP
 ports:
@@ -279,8 +470,8 @@
 name: grpc
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 ---
 # Source: thanos/templates/bucketweb/deployment.yaml
@@ -288,14 +479,15 @@
 kind: Deployment
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 strategy:
 rollingUpdate:
 maxSurge: 1
@@ -303,20 +495,20 @@
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
 spec:
- serviceAccount: thanos-bucketweb
+ serviceAccountName: thanos-bucketweb
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -324,22 +516,33 @@
 requiredDuringSchedulingIgnoredDuringExecution:
 - labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 topologyKey: kubernetes.io/hostname
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: bucketweb
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.34.1-debian-12-r3
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - tools
 - bucket
@@ -375,8 +578,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: objstore-config
 mountPath: /conf
@@ -390,32 +599,33 @@
 kind: Deployment
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 spec:
 replicas: 1
+ revisionHistoryLimit: 10
 strategy:
 type: Recreate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
 spec:
- serviceAccount: thanos-compactor
+ serviceAccountName: thanos-compactor
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -424,23 +634,34 @@
 - podAffinityTerm:
 labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 topologyKey: kubernetes.io/hostname
 weight: 1
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: compactor
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.34.1-debian-12-r3
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - compact
 - --log.level=info
@@ -480,8 +701,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: objstore-config
 mountPath: /conf
@@ -500,30 +727,31 @@
 kind: Deployment
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 strategy:
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 spec:
- serviceAccount: thanos-query
+ serviceAccountName: thanos-query
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -532,23 +760,34 @@
 - podAffinityTerm:
 labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 topologyKey: kubernetes.io/hostname
 weight: 1
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: query
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.34.1-debian-12-r3
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - query
 - --log.level=info
@@ -559,6 +798,7 @@
 - --endpoint=dnssrv+_grpc._tcp.kube-prometheus-stack-thanos-discovery.monitoring.svc.cluster.local
 - --endpoint=dnssrv+_grpc._tcp.thanos-storegateway.default.svc.cluster.local
 - --endpoint=dnssrv+_grpc._tcp.thanos-ruler.default.svc.cluster.local
+ - --alert.query-url=http://thanos-query.default.svc.cluster.local:9090
 ports:
 - name: http
 containerPort: 10902
@@ -587,8 +827,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 volumes:
 ---
@@ -597,35 +843,36 @@
 kind: StatefulSet
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 podManagementPolicy: OrderedReady
 serviceName: thanos-ruler-headless
 updateStrategy:
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
- checksum/ruler-configuration: 7afcad4879bbb799b132d7e34633031899e8cf18d4ad6762b1b08fbec4111f11
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
+ checksum/ruler-configuration: d11db702b3cb233ba465cddebeb4117c00ebdbda6ad18dd38964228345883c6a
 spec:
- serviceAccount: thanos-ruler
+ serviceAccountName: thanos-ruler
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -633,22 +880,33 @@
 requiredDuringSchedulingIgnoredDuringExecution:
 - labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 topologyKey: kubernetes.io/hostname
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: ruler
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.34.1-debian-12-r3
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - rule
 - --log.level=info
@@ -659,6 +917,7 @@
 - --eval-interval=1m
 - --alertmanagers.url=http://kube-prometheus-stack-alertmanager.monitoring:9093
 - --query=dnssrv+_http._tcp.thanos-query.default.svc.cluster.local
+ - --alert.query-url=http://thanos-query.default.svc.cluster.local:9090
 - --label=replica="$(POD_NAME)"
 - --label=ruler_cluster="${CLUSTER_NAME}"
 - --alert.label-drop=replica
@@ -698,8 +957,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: ruler-config
 mountPath: /conf/rules
@@ -710,7 +975,7 @@
 volumes:
 - name: ruler-config
 configMap:
- name: thanos-ruler-configmap
+ name: thanos-ruler
 - name: objstore-config
 secret:
 secretName: thanos-objstore-secret
@@ -730,34 +995,35 @@
 kind: StatefulSet
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 podManagementPolicy: OrderedReady
 serviceName: thanos-storegateway-headless
 updateStrategy:
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
 spec:
- serviceAccount: thanos-storegateway
+ serviceAccountName: thanos-storegateway
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -765,22 +1031,33 @@
 requiredDuringSchedulingIgnoredDuringExecution:
 - labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 topologyKey: kubernetes.io/hostname
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: storegateway
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.34.1-debian-12-r3
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - store
 - --log.level=info
@@ -817,8 +1094,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: objstore-config
 mountPath: /conf
@@ -844,11 +1127,11 @@
 kind: Ingress
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 annotations:
 hajimari.io/enable: "false"
@@ -875,11 +1158,11 @@
 kind: Ingress
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 annotations:
 hajimari.io/enable: "false"
@@ -906,11 +1189,11 @@
 kind: Ingress
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 annotations:
 hajimari.io/icon: table-search
@@ -937,11 +1220,11 @@
 kind: Ingress
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 annotations:
 hajimari.io/enable: "false"
@@ -968,11 +1251,11 @@
 kind: Ingress
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 annotations:
 hajimari.io/enable: "false"
@@ -1001,9 +1284,9 @@
 name: thanos-bucketweb
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 spec:
 endpoints:
@@ -1013,9 +1296,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/compactor/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1024,9 +1308,9 @@
 name: thanos-compactor
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 spec:
 endpoints:
@@ -1036,9 +1320,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/query/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1047,9 +1332,9 @@
 name: thanos-query
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 spec:
 endpoints:
@@ -1059,9 +1344,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/ruler/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1070,9 +1356,9 @@
 name: thanos-ruler
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 spec:
 endpoints:
@@ -1082,9 +1368,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/storegateway/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1093,9 +1380,9 @@
 name: thanos-storegateway
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 spec:
 endpoints:
@@ -1105,6 +1392,7 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
+ prometheus-operator/monitor: 'true'

@homeops-gh-bot homeops-gh-bot bot force-pushed the renovate/thanos-15.x branch from e55c963 to 3d5c35b Compare April 18, 2024 16:15
@homeops-gh-bot homeops-gh-bot bot changed the title feat(helm)!: Update chart thanos to 15.0.5 feat(helm)!: Update chart thanos to 15.1.0 Apr 18, 2024
@homeops-gh-bot
Copy link
Contributor Author

Path: cluster/apps/monitoring/thanos/helm-release.yaml
Version: 11.6.8 -> 15.1.0

@@ -1,84 +1,278 @@
 ---
+# Source: thanos/templates/bucketweb/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-bucketweb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: bucketweb
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: bucketweb
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 8080
+ - port: 8080
+---
+# Source: thanos/templates/compactor/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-compactor
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: compactor
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: compactor
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 9090
+---
+# Source: thanos/templates/query-frontend/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-query-frontend
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query-frontend
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query-frontend
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 9090
+ - port: 9090
+---
+# Source: thanos/templates/query/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-query
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 10901
+ - port: 9090
+ - port: 10901
+---
+# Source: thanos/templates/receive/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-receive
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: receive
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: receive
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 10902
+ - port: 10901
+ - port: 10901
+ - port: 19291
+ - port: 19291
+---
+# Source: thanos/templates/ruler/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-ruler
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: ruler
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: ruler
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 9090
+ - port: 10901
+ - port: 10901
+---
+# Source: thanos/templates/storegateway/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-storegateway
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: storegateway
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: storegateway
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 9090
+ - port: 10901
+ - port: 10901
+---
 # Source: thanos/templates/bucketweb/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/compactor/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/query/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/ruler/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/storegateway/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/objstore-secret.yaml
 apiVersion: v1
 kind: Secret
 metadata:
 name: thanos-objstore-secret
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 data:
 objstore.yml: |-
 Y29uZmlnOgogIGluc2VjdXJlOiB0cnVlCnR5cGU6IHMz
@@ -87,12 +281,12 @@
 apiVersion: v1
 kind: ConfigMap
 metadata:
- name: thanos-ruler-configmap
- namespace: "default"
+ name: thanos-ruler
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 data:
 ruler.yml: |-
@@ -107,11 +301,11 @@
 apiVersion: v1
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 spec:
 accessModes:
@@ -126,13 +320,13 @@
 kind: Service
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
- annotations:
+ prometheus-operator/monitor: 'true'
 spec:
 type: ClusterIP
 ports:
@@ -142,8 +336,8 @@
 name: http
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 ---
 # Source: thanos/templates/compactor/service.yaml
@@ -151,13 +345,13 @@
 kind: Service
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
- annotations:
+ prometheus-operator/monitor: 'true'
 spec:
 type: ClusterIP
 ports:
@@ -167,8 +361,8 @@
 name: http
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 ---
 # Source: thanos/templates/query/service-grpc.yaml
@@ -176,13 +370,12 @@
 kind: Service
 metadata:
 name: thanos-query-grpc
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
- annotations:
 spec:
 type: ClusterIP
 ports:
@@ -192,8 +385,8 @@
 name: grpc
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 ---
 # Source: thanos/templates/query/service.yaml
@@ -201,13 +394,13 @@
 kind: Service
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
- annotations:
+ prometheus-operator/monitor: 'true'
 spec:
 type: ClusterIP
 ports:
@@ -217,8 +410,8 @@
 name: http
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 ---
 # Source: thanos/templates/ruler/service.yaml
@@ -226,14 +419,13 @@
 kind: Service
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 prometheus-operator/monitor: 'true'
- annotations:
 spec:
 type: ClusterIP
 ports:
@@ -248,8 +440,8 @@
 name: grpc
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 ---
 # Source: thanos/templates/storegateway/service.yaml
@@ -257,14 +449,13 @@
 kind: Service
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 prometheus-operator/monitor: 'true'
- annotations:
 spec:
 type: ClusterIP
 ports:
@@ -279,8 +470,8 @@
 name: grpc
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 ---
 # Source: thanos/templates/bucketweb/deployment.yaml
@@ -288,14 +479,15 @@
 kind: Deployment
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 strategy:
 rollingUpdate:
 maxSurge: 1
@@ -303,20 +495,20 @@
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
 spec:
- serviceAccount: thanos-bucketweb
+ serviceAccountName: thanos-bucketweb
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -324,22 +516,33 @@
 requiredDuringSchedulingIgnoredDuringExecution:
 - labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 topologyKey: kubernetes.io/hostname
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: bucketweb
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.34.1-debian-12-r3
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - tools
 - bucket
@@ -375,8 +578,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: objstore-config
 mountPath: /conf
@@ -390,32 +599,33 @@
 kind: Deployment
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 spec:
 replicas: 1
+ revisionHistoryLimit: 10
 strategy:
 type: Recreate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
 spec:
- serviceAccount: thanos-compactor
+ serviceAccountName: thanos-compactor
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -424,23 +634,34 @@
 - podAffinityTerm:
 labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 topologyKey: kubernetes.io/hostname
 weight: 1
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: compactor
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.34.1-debian-12-r3
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - compact
 - --log.level=info
@@ -480,8 +701,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: objstore-config
 mountPath: /conf
@@ -500,30 +727,31 @@
 kind: Deployment
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 strategy:
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 spec:
- serviceAccount: thanos-query
+ serviceAccountName: thanos-query
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -532,23 +760,34 @@
 - podAffinityTerm:
 labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 topologyKey: kubernetes.io/hostname
 weight: 1
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: query
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.34.1-debian-12-r3
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - query
 - --log.level=info
@@ -559,6 +798,7 @@
 - --endpoint=dnssrv+_grpc._tcp.kube-prometheus-stack-thanos-discovery.monitoring.svc.cluster.local
 - --endpoint=dnssrv+_grpc._tcp.thanos-storegateway.default.svc.cluster.local
 - --endpoint=dnssrv+_grpc._tcp.thanos-ruler.default.svc.cluster.local
+ - --alert.query-url=http://thanos-query.default.svc.cluster.local:9090
 ports:
 - name: http
 containerPort: 10902
@@ -587,8 +827,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 volumes:
 ---
@@ -597,35 +843,36 @@
 kind: StatefulSet
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 podManagementPolicy: OrderedReady
 serviceName: thanos-ruler-headless
 updateStrategy:
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
- checksum/ruler-configuration: 7afcad4879bbb799b132d7e34633031899e8cf18d4ad6762b1b08fbec4111f11
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
+ checksum/ruler-configuration: d11db702b3cb233ba465cddebeb4117c00ebdbda6ad18dd38964228345883c6a
 spec:
- serviceAccount: thanos-ruler
+ serviceAccountName: thanos-ruler
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -633,22 +880,33 @@
 requiredDuringSchedulingIgnoredDuringExecution:
 - labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 topologyKey: kubernetes.io/hostname
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: ruler
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.34.1-debian-12-r3
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - rule
 - --log.level=info
@@ -659,6 +917,7 @@
 - --eval-interval=1m
 - --alertmanagers.url=http://kube-prometheus-stack-alertmanager.monitoring:9093
 - --query=dnssrv+_http._tcp.thanos-query.default.svc.cluster.local
+ - --alert.query-url=http://thanos-query.default.svc.cluster.local:9090
 - --label=replica="$(POD_NAME)"
 - --label=ruler_cluster="${CLUSTER_NAME}"
 - --alert.label-drop=replica
@@ -698,8 +957,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: ruler-config
 mountPath: /conf/rules
@@ -710,7 +975,7 @@
 volumes:
 - name: ruler-config
 configMap:
- name: thanos-ruler-configmap
+ name: thanos-ruler
 - name: objstore-config
 secret:
 secretName: thanos-objstore-secret
@@ -730,34 +995,35 @@
 kind: StatefulSet
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 podManagementPolicy: OrderedReady
 serviceName: thanos-storegateway-headless
 updateStrategy:
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
 spec:
- serviceAccount: thanos-storegateway
+ serviceAccountName: thanos-storegateway
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -765,22 +1031,33 @@
 requiredDuringSchedulingIgnoredDuringExecution:
 - labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 topologyKey: kubernetes.io/hostname
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: storegateway
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.34.1-debian-12-r3
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - store
 - --log.level=info
@@ -817,8 +1094,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: objstore-config
 mountPath: /conf
@@ -844,11 +1127,11 @@
 kind: Ingress
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 annotations:
 hajimari.io/enable: "false"
@@ -875,11 +1158,11 @@
 kind: Ingress
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 annotations:
 hajimari.io/enable: "false"
@@ -906,11 +1189,11 @@
 kind: Ingress
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 annotations:
 hajimari.io/icon: table-search
@@ -937,11 +1220,11 @@
 kind: Ingress
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 annotations:
 hajimari.io/enable: "false"
@@ -968,11 +1251,11 @@
 kind: Ingress
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 annotations:
 hajimari.io/enable: "false"
@@ -1001,9 +1284,9 @@
 name: thanos-bucketweb
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 spec:
 endpoints:
@@ -1013,9 +1296,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/compactor/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1024,9 +1308,9 @@
 name: thanos-compactor
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 spec:
 endpoints:
@@ -1036,9 +1320,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/query/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1047,9 +1332,9 @@
 name: thanos-query
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 spec:
 endpoints:
@@ -1059,9 +1344,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/ruler/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1070,9 +1356,9 @@
 name: thanos-ruler
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 spec:
 endpoints:
@@ -1082,9 +1368,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/storegateway/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1093,9 +1380,9 @@
 name: thanos-storegateway
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 spec:
 endpoints:
@@ -1105,6 +1392,7 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
+ prometheus-operator/monitor: 'true'

@homeops-gh-bot
Copy link
Contributor Author

homeops-gh-bot bot commented Jun 5, 2024

Path: cluster/apps/monitoring/thanos/helm-release.yaml
Version: 11.6.8 -> 15.7.1

@@ -1,84 +1,354 @@
 ---
+# Source: thanos/templates/bucketweb/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-bucketweb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: bucketweb
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: bucketweb
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 8080
+ - port: 8080
+---
+# Source: thanos/templates/compactor/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-compactor
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: compactor
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: compactor
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 9090
+---
+# Source: thanos/templates/query-frontend/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-query-frontend
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query-frontend
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query-frontend
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 9090
+ - port: 9090
+---
+# Source: thanos/templates/query/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-query
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 10901
+ - port: 9090
+ - port: 10901
+---
+# Source: thanos/templates/receive/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-receive
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: receive
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: receive
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 10902
+ - port: 10901
+ - port: 10901
+ - port: 19291
+ - port: 19291
+---
+# Source: thanos/templates/ruler/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-ruler
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: ruler
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: ruler
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 9090
+ - port: 10901
+ - port: 10901
+---
+# Source: thanos/templates/storegateway/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-storegateway
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: storegateway
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: storegateway
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 9090
+ - port: 10901
+ - port: 10901
+---
+# Source: thanos/templates/bucketweb/pdb.yaml
+apiVersion: policy/v1beta1
+kind: PodDisruptionBudget
+metadata:
+ name: thanos-bucketweb
+ namespace: default
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: bucketweb
+spec:
+ maxUnavailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: bucketweb
+---
+# Source: thanos/templates/query/pdb.yaml
+apiVersion: policy/v1beta1
+kind: PodDisruptionBudget
+metadata:
+ name: thanos-query
+ namespace: default
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query
+spec:
+ maxUnavailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query
+---
+# Source: thanos/templates/ruler/pdb.yaml
+apiVersion: policy/v1beta1
+kind: PodDisruptionBudget
+metadata:
+ name: thanos-ruler
+ namespace: default
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: ruler
+spec:
+ maxUnavailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: ruler
+---
+# Source: thanos/templates/storegateway/pdb.yaml
+apiVersion: policy/v1beta1
+kind: PodDisruptionBudget
+metadata:
+ name: thanos-storegateway
+ namespace: default
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: storegateway
+spec:
+ maxUnavailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: storegateway
+---
 # Source: thanos/templates/bucketweb/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/compactor/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/query/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/ruler/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/storegateway/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/objstore-secret.yaml
 apiVersion: v1
 kind: Secret
 metadata:
 name: thanos-objstore-secret
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 data:
 objstore.yml: |-
 Y29uZmlnOgogIGluc2VjdXJlOiB0cnVlCnR5cGU6IHMz
@@ -87,12 +357,12 @@
 apiVersion: v1
 kind: ConfigMap
 metadata:
- name: thanos-ruler-configmap
- namespace: "default"
+ name: thanos-ruler
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 data:
 ruler.yml: |-
@@ -107,11 +377,11 @@
 apiVersion: v1
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 spec:
 accessModes:
@@ -126,13 +396,13 @@
 kind: Service
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
- annotations:
+ prometheus-operator/monitor: 'true'
 spec:
 type: ClusterIP
 ports:
@@ -142,8 +412,8 @@
 name: http
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 ---
 # Source: thanos/templates/compactor/service.yaml
@@ -151,13 +421,13 @@
 kind: Service
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
- annotations:
+ prometheus-operator/monitor: 'true'
 spec:
 type: ClusterIP
 ports:
@@ -167,8 +437,8 @@
 name: http
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 ---
 # Source: thanos/templates/query/service-grpc.yaml
@@ -176,13 +446,12 @@
 kind: Service
 metadata:
 name: thanos-query-grpc
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
- annotations:
 spec:
 type: ClusterIP
 ports:
@@ -192,8 +461,8 @@
 name: grpc
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 ---
 # Source: thanos/templates/query/service.yaml
@@ -201,13 +470,13 @@
 kind: Service
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
- annotations:
+ prometheus-operator/monitor: 'true'
 spec:
 type: ClusterIP
 ports:
@@ -217,8 +486,8 @@
 name: http
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 ---
 # Source: thanos/templates/ruler/service.yaml
@@ -226,14 +495,13 @@
 kind: Service
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 prometheus-operator/monitor: 'true'
- annotations:
 spec:
 type: ClusterIP
 ports:
@@ -248,8 +516,8 @@
 name: grpc
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 ---
 # Source: thanos/templates/storegateway/service.yaml
@@ -257,14 +525,13 @@
 kind: Service
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 prometheus-operator/monitor: 'true'
- annotations:
 spec:
 type: ClusterIP
 ports:
@@ -279,8 +546,8 @@
 name: grpc
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 ---
 # Source: thanos/templates/bucketweb/deployment.yaml
@@ -288,14 +555,15 @@
 kind: Deployment
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 strategy:
 rollingUpdate:
 maxSurge: 1
@@ -303,20 +571,20 @@
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
 spec:
- serviceAccount: thanos-bucketweb
+ serviceAccountName: thanos-bucketweb
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -324,22 +592,33 @@
 requiredDuringSchedulingIgnoredDuringExecution:
 - labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 topologyKey: kubernetes.io/hostname
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: bucketweb
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.35.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - tools
 - bucket
@@ -375,8 +654,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: objstore-config
 mountPath: /conf
@@ -390,32 +675,33 @@
 kind: Deployment
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 spec:
 replicas: 1
+ revisionHistoryLimit: 10
 strategy:
 type: Recreate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
 spec:
- serviceAccount: thanos-compactor
+ serviceAccountName: thanos-compactor
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -424,23 +710,34 @@
 - podAffinityTerm:
 labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 topologyKey: kubernetes.io/hostname
 weight: 1
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: compactor
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.35.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - compact
 - --log.level=info
@@ -480,8 +777,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: objstore-config
 mountPath: /conf
@@ -500,30 +803,31 @@
 kind: Deployment
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 strategy:
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 spec:
- serviceAccount: thanos-query
+ serviceAccountName: thanos-query
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -532,23 +836,34 @@
 - podAffinityTerm:
 labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 topologyKey: kubernetes.io/hostname
 weight: 1
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: query
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.35.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - query
 - --log.level=info
@@ -559,6 +874,7 @@
 - --endpoint=dnssrv+_grpc._tcp.kube-prometheus-stack-thanos-discovery.monitoring.svc.cluster.local
 - --endpoint=dnssrv+_grpc._tcp.thanos-storegateway.default.svc.cluster.local
 - --endpoint=dnssrv+_grpc._tcp.thanos-ruler.default.svc.cluster.local
+ - --alert.query-url=http://thanos-query.default.svc.cluster.local:9090
 ports:
 - name: http
 containerPort: 10902
@@ -587,8 +903,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 volumes:
 ---
@@ -597,35 +919,36 @@
 kind: StatefulSet
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 podManagementPolicy: OrderedReady
 serviceName: thanos-ruler-headless
 updateStrategy:
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
- checksum/ruler-configuration: 7afcad4879bbb799b132d7e34633031899e8cf18d4ad6762b1b08fbec4111f11
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
+ checksum/ruler-configuration: b35799093da107f873e2a979b49d64483f166909c932e0533e46a3651d5dd847
 spec:
- serviceAccount: thanos-ruler
+ serviceAccountName: thanos-ruler
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -633,22 +956,33 @@
 requiredDuringSchedulingIgnoredDuringExecution:
 - labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 topologyKey: kubernetes.io/hostname
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: ruler
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.35.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - rule
 - --log.level=info
@@ -659,6 +993,7 @@
 - --eval-interval=1m
 - --alertmanagers.url=http://kube-prometheus-stack-alertmanager.monitoring:9093
 - --query=dnssrv+_http._tcp.thanos-query.default.svc.cluster.local
+ - --alert.query-url=http://thanos-query.default.svc.cluster.local:9090
 - --label=replica="$(POD_NAME)"
 - --label=ruler_cluster="${CLUSTER_NAME}"
 - --alert.label-drop=replica
@@ -698,8 +1033,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: ruler-config
 mountPath: /conf/rules
@@ -710,7 +1051,7 @@
 volumes:
 - name: ruler-config
 configMap:
- name: thanos-ruler-configmap
+ name: thanos-ruler
 - name: objstore-config
 secret:
 secretName: thanos-objstore-secret
@@ -730,34 +1071,35 @@
 kind: StatefulSet
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 podManagementPolicy: OrderedReady
 serviceName: thanos-storegateway-headless
 updateStrategy:
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
 spec:
- serviceAccount: thanos-storegateway
+ serviceAccountName: thanos-storegateway
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -765,22 +1107,33 @@
 requiredDuringSchedulingIgnoredDuringExecution:
 - labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 topologyKey: kubernetes.io/hostname
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: storegateway
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.35.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - store
 - --log.level=info
@@ -817,8 +1170,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: objstore-config
 mountPath: /conf
@@ -844,11 +1203,11 @@
 kind: Ingress
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 annotations:
 hajimari.io/enable: "false"
@@ -875,11 +1234,11 @@
 kind: Ingress
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 annotations:
 hajimari.io/enable: "false"
@@ -906,11 +1265,11 @@
 kind: Ingress
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 annotations:
 hajimari.io/icon: table-search
@@ -937,11 +1296,11 @@
 kind: Ingress
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 annotations:
 hajimari.io/enable: "false"
@@ -968,11 +1327,11 @@
 kind: Ingress
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 annotations:
 hajimari.io/enable: "false"
@@ -1001,9 +1360,9 @@
 name: thanos-bucketweb
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 spec:
 endpoints:
@@ -1013,9 +1372,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/compactor/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1024,9 +1384,9 @@
 name: thanos-compactor
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 spec:
 endpoints:
@@ -1036,9 +1396,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/query/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1047,9 +1408,9 @@
 name: thanos-query
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 spec:
 endpoints:
@@ -1059,9 +1420,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/ruler/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1070,9 +1432,9 @@
 name: thanos-ruler
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 spec:
 endpoints:
@@ -1082,9 +1444,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/storegateway/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1093,9 +1456,9 @@
 name: thanos-storegateway
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 spec:
 endpoints:
@@ -1105,6 +1468,7 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
+ prometheus-operator/monitor: 'true'

@homeops-gh-bot homeops-gh-bot bot changed the title feat(helm)!: Update chart thanos to 15.6.0 feat(helm)!: Update chart thanos to 15.7.1 Jun 5, 2024
@homeops-gh-bot homeops-gh-bot bot force-pushed the renovate/thanos-15.x branch from c83680c to c2a6c7b Compare June 6, 2024 18:17
@homeops-gh-bot
Copy link
Contributor Author

homeops-gh-bot bot commented Jun 6, 2024

Path: cluster/apps/monitoring/thanos/helm-release.yaml
Version: 11.6.8 -> 15.7.2

@@ -1,84 +1,354 @@
 ---
+# Source: thanos/templates/bucketweb/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-bucketweb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: bucketweb
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: bucketweb
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 8080
+ - port: 8080
+---
+# Source: thanos/templates/compactor/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-compactor
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: compactor
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: compactor
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 9090
+---
+# Source: thanos/templates/query-frontend/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-query-frontend
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query-frontend
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query-frontend
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 9090
+ - port: 9090
+---
+# Source: thanos/templates/query/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-query
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 10901
+ - port: 9090
+ - port: 10901
+---
+# Source: thanos/templates/receive/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-receive
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: receive
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: receive
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 10902
+ - port: 10901
+ - port: 10901
+ - port: 19291
+ - port: 19291
+---
+# Source: thanos/templates/ruler/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-ruler
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: ruler
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: ruler
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 9090
+ - port: 10901
+ - port: 10901
+---
+# Source: thanos/templates/storegateway/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-storegateway
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: storegateway
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: storegateway
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 9090
+ - port: 10901
+ - port: 10901
+---
+# Source: thanos/templates/bucketweb/pdb.yaml
+apiVersion: policy/v1beta1
+kind: PodDisruptionBudget
+metadata:
+ name: thanos-bucketweb
+ namespace: default
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: bucketweb
+spec:
+ maxUnavailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: bucketweb
+---
+# Source: thanos/templates/query/pdb.yaml
+apiVersion: policy/v1beta1
+kind: PodDisruptionBudget
+metadata:
+ name: thanos-query
+ namespace: default
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query
+spec:
+ maxUnavailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query
+---
+# Source: thanos/templates/ruler/pdb.yaml
+apiVersion: policy/v1beta1
+kind: PodDisruptionBudget
+metadata:
+ name: thanos-ruler
+ namespace: default
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: ruler
+spec:
+ maxUnavailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: ruler
+---
+# Source: thanos/templates/storegateway/pdb.yaml
+apiVersion: policy/v1beta1
+kind: PodDisruptionBudget
+metadata:
+ name: thanos-storegateway
+ namespace: default
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: storegateway
+spec:
+ maxUnavailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: storegateway
+---
 # Source: thanos/templates/bucketweb/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/compactor/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/query/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/ruler/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/storegateway/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/objstore-secret.yaml
 apiVersion: v1
 kind: Secret
 metadata:
 name: thanos-objstore-secret
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 data:
 objstore.yml: |-
 Y29uZmlnOgogIGluc2VjdXJlOiB0cnVlCnR5cGU6IHMz
@@ -87,12 +357,12 @@
 apiVersion: v1
 kind: ConfigMap
 metadata:
- name: thanos-ruler-configmap
- namespace: "default"
+ name: thanos-ruler
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 data:
 ruler.yml: |-
@@ -107,11 +377,11 @@
 apiVersion: v1
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 spec:
 accessModes:
@@ -126,13 +396,13 @@
 kind: Service
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
- annotations:
+ prometheus-operator/monitor: 'true'
 spec:
 type: ClusterIP
 ports:
@@ -142,8 +412,8 @@
 name: http
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 ---
 # Source: thanos/templates/compactor/service.yaml
@@ -151,13 +421,13 @@
 kind: Service
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
- annotations:
+ prometheus-operator/monitor: 'true'
 spec:
 type: ClusterIP
 ports:
@@ -167,8 +437,8 @@
 name: http
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 ---
 # Source: thanos/templates/query/service-grpc.yaml
@@ -176,13 +446,12 @@
 kind: Service
 metadata:
 name: thanos-query-grpc
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
- annotations:
 spec:
 type: ClusterIP
 ports:
@@ -192,8 +461,8 @@
 name: grpc
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 ---
 # Source: thanos/templates/query/service.yaml
@@ -201,13 +470,13 @@
 kind: Service
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
- annotations:
+ prometheus-operator/monitor: 'true'
 spec:
 type: ClusterIP
 ports:
@@ -217,8 +486,8 @@
 name: http
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 ---
 # Source: thanos/templates/ruler/service.yaml
@@ -226,14 +495,13 @@
 kind: Service
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 prometheus-operator/monitor: 'true'
- annotations:
 spec:
 type: ClusterIP
 ports:
@@ -248,8 +516,8 @@
 name: grpc
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 ---
 # Source: thanos/templates/storegateway/service.yaml
@@ -257,14 +525,13 @@
 kind: Service
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 prometheus-operator/monitor: 'true'
- annotations:
 spec:
 type: ClusterIP
 ports:
@@ -279,8 +546,8 @@
 name: grpc
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 ---
 # Source: thanos/templates/bucketweb/deployment.yaml
@@ -288,14 +555,15 @@
 kind: Deployment
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 strategy:
 rollingUpdate:
 maxSurge: 1
@@ -303,20 +571,20 @@
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
 spec:
- serviceAccount: thanos-bucketweb
+ serviceAccountName: thanos-bucketweb
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -324,22 +592,33 @@
 requiredDuringSchedulingIgnoredDuringExecution:
 - labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 topologyKey: kubernetes.io/hostname
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: bucketweb
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.35.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - tools
 - bucket
@@ -375,8 +654,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: objstore-config
 mountPath: /conf
@@ -390,32 +675,33 @@
 kind: Deployment
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 spec:
 replicas: 1
+ revisionHistoryLimit: 10
 strategy:
 type: Recreate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
 spec:
- serviceAccount: thanos-compactor
+ serviceAccountName: thanos-compactor
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -424,23 +710,34 @@
 - podAffinityTerm:
 labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 topologyKey: kubernetes.io/hostname
 weight: 1
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: compactor
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.35.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - compact
 - --log.level=info
@@ -480,8 +777,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: objstore-config
 mountPath: /conf
@@ -500,30 +803,31 @@
 kind: Deployment
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 strategy:
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 spec:
- serviceAccount: thanos-query
+ serviceAccountName: thanos-query
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -532,23 +836,34 @@
 - podAffinityTerm:
 labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 topologyKey: kubernetes.io/hostname
 weight: 1
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: query
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.35.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - query
 - --log.level=info
@@ -559,6 +874,7 @@
 - --endpoint=dnssrv+_grpc._tcp.kube-prometheus-stack-thanos-discovery.monitoring.svc.cluster.local
 - --endpoint=dnssrv+_grpc._tcp.thanos-storegateway.default.svc.cluster.local
 - --endpoint=dnssrv+_grpc._tcp.thanos-ruler.default.svc.cluster.local
+ - --alert.query-url=http://thanos-query.default.svc.cluster.local:9090
 ports:
 - name: http
 containerPort: 10902
@@ -587,8 +903,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 volumes:
 ---
@@ -597,35 +919,36 @@
 kind: StatefulSet
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 podManagementPolicy: OrderedReady
 serviceName: thanos-ruler-headless
 updateStrategy:
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
- checksum/ruler-configuration: 7afcad4879bbb799b132d7e34633031899e8cf18d4ad6762b1b08fbec4111f11
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
+ checksum/ruler-configuration: b35799093da107f873e2a979b49d64483f166909c932e0533e46a3651d5dd847
 spec:
- serviceAccount: thanos-ruler
+ serviceAccountName: thanos-ruler
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -633,22 +956,33 @@
 requiredDuringSchedulingIgnoredDuringExecution:
 - labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 topologyKey: kubernetes.io/hostname
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: ruler
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.35.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - rule
 - --log.level=info
@@ -659,6 +993,7 @@
 - --eval-interval=1m
 - --alertmanagers.url=http://kube-prometheus-stack-alertmanager.monitoring:9093
 - --query=dnssrv+_http._tcp.thanos-query.default.svc.cluster.local
+ - --alert.query-url=http://thanos-query.default.svc.cluster.local:9090
 - --label=replica="$(POD_NAME)"
 - --label=ruler_cluster="${CLUSTER_NAME}"
 - --alert.label-drop=replica
@@ -698,8 +1033,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: ruler-config
 mountPath: /conf/rules
@@ -710,7 +1051,7 @@
 volumes:
 - name: ruler-config
 configMap:
- name: thanos-ruler-configmap
+ name: thanos-ruler
 - name: objstore-config
 secret:
 secretName: thanos-objstore-secret
@@ -730,34 +1071,35 @@
 kind: StatefulSet
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 podManagementPolicy: OrderedReady
 serviceName: thanos-storegateway-headless
 updateStrategy:
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
 spec:
- serviceAccount: thanos-storegateway
+ serviceAccountName: thanos-storegateway
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -765,22 +1107,33 @@
 requiredDuringSchedulingIgnoredDuringExecution:
 - labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 topologyKey: kubernetes.io/hostname
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: storegateway
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.35.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - store
 - --log.level=info
@@ -817,8 +1170,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: objstore-config
 mountPath: /conf
@@ -844,11 +1203,11 @@
 kind: Ingress
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 annotations:
 hajimari.io/enable: "false"
@@ -875,11 +1234,11 @@
 kind: Ingress
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 annotations:
 hajimari.io/enable: "false"
@@ -906,11 +1265,11 @@
 kind: Ingress
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 annotations:
 hajimari.io/icon: table-search
@@ -937,11 +1296,11 @@
 kind: Ingress
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 annotations:
 hajimari.io/enable: "false"
@@ -968,11 +1327,11 @@
 kind: Ingress
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 annotations:
 hajimari.io/enable: "false"
@@ -1001,9 +1360,9 @@
 name: thanos-bucketweb
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 spec:
 endpoints:
@@ -1013,9 +1372,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/compactor/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1024,9 +1384,9 @@
 name: thanos-compactor
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 spec:
 endpoints:
@@ -1036,9 +1396,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/query/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1047,9 +1408,9 @@
 name: thanos-query
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 spec:
 endpoints:
@@ -1059,9 +1420,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/ruler/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1070,9 +1432,9 @@
 name: thanos-ruler
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 spec:
 endpoints:
@@ -1082,9 +1444,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/storegateway/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1093,9 +1456,9 @@
 name: thanos-storegateway
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 spec:
 endpoints:
@@ -1105,6 +1468,7 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
+ prometheus-operator/monitor: 'true'

@homeops-gh-bot homeops-gh-bot bot changed the title feat(helm)!: Update chart thanos to 15.7.1 feat(helm)!: Update chart thanos to 15.7.2 Jun 6, 2024
@homeops-gh-bot homeops-gh-bot bot force-pushed the renovate/thanos-15.x branch from c2a6c7b to 456bc1d Compare June 7, 2024 09:15
@homeops-gh-bot
Copy link
Contributor Author

homeops-gh-bot bot commented Jun 7, 2024

Path: cluster/apps/monitoring/thanos/helm-release.yaml
Version: 11.6.8 -> 15.7.1

@@ -1,84 +1,354 @@
 ---
+# Source: thanos/templates/bucketweb/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-bucketweb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: bucketweb
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: bucketweb
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 8080
+ - port: 8080
+---
+# Source: thanos/templates/compactor/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-compactor
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: compactor
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: compactor
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 9090
+---
+# Source: thanos/templates/query-frontend/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-query-frontend
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query-frontend
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query-frontend
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 9090
+ - port: 9090
+---
+# Source: thanos/templates/query/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-query
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 10901
+ - port: 9090
+ - port: 10901
+---
+# Source: thanos/templates/receive/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-receive
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: receive
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: receive
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 10902
+ - port: 10901
+ - port: 10901
+ - port: 19291
+ - port: 19291
+---
+# Source: thanos/templates/ruler/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-ruler
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: ruler
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: ruler
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 9090
+ - port: 10901
+ - port: 10901
+---
+# Source: thanos/templates/storegateway/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-storegateway
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: storegateway
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: storegateway
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 9090
+ - port: 10901
+ - port: 10901
+---
+# Source: thanos/templates/bucketweb/pdb.yaml
+apiVersion: policy/v1beta1
+kind: PodDisruptionBudget
+metadata:
+ name: thanos-bucketweb
+ namespace: default
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: bucketweb
+spec:
+ maxUnavailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: bucketweb
+---
+# Source: thanos/templates/query/pdb.yaml
+apiVersion: policy/v1beta1
+kind: PodDisruptionBudget
+metadata:
+ name: thanos-query
+ namespace: default
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query
+spec:
+ maxUnavailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query
+---
+# Source: thanos/templates/ruler/pdb.yaml
+apiVersion: policy/v1beta1
+kind: PodDisruptionBudget
+metadata:
+ name: thanos-ruler
+ namespace: default
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: ruler
+spec:
+ maxUnavailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: ruler
+---
+# Source: thanos/templates/storegateway/pdb.yaml
+apiVersion: policy/v1beta1
+kind: PodDisruptionBudget
+metadata:
+ name: thanos-storegateway
+ namespace: default
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: storegateway
+spec:
+ maxUnavailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: storegateway
+---
 # Source: thanos/templates/bucketweb/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/compactor/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/query/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/ruler/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/storegateway/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/objstore-secret.yaml
 apiVersion: v1
 kind: Secret
 metadata:
 name: thanos-objstore-secret
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 data:
 objstore.yml: |-
 Y29uZmlnOgogIGluc2VjdXJlOiB0cnVlCnR5cGU6IHMz
@@ -87,12 +357,12 @@
 apiVersion: v1
 kind: ConfigMap
 metadata:
- name: thanos-ruler-configmap
- namespace: "default"
+ name: thanos-ruler
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 data:
 ruler.yml: |-
@@ -107,11 +377,11 @@
 apiVersion: v1
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 spec:
 accessModes:
@@ -126,13 +396,13 @@
 kind: Service
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
- annotations:
+ prometheus-operator/monitor: 'true'
 spec:
 type: ClusterIP
 ports:
@@ -142,8 +412,8 @@
 name: http
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 ---
 # Source: thanos/templates/compactor/service.yaml
@@ -151,13 +421,13 @@
 kind: Service
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
- annotations:
+ prometheus-operator/monitor: 'true'
 spec:
 type: ClusterIP
 ports:
@@ -167,8 +437,8 @@
 name: http
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 ---
 # Source: thanos/templates/query/service-grpc.yaml
@@ -176,13 +446,12 @@
 kind: Service
 metadata:
 name: thanos-query-grpc
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
- annotations:
 spec:
 type: ClusterIP
 ports:
@@ -192,8 +461,8 @@
 name: grpc
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 ---
 # Source: thanos/templates/query/service.yaml
@@ -201,13 +470,13 @@
 kind: Service
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
- annotations:
+ prometheus-operator/monitor: 'true'
 spec:
 type: ClusterIP
 ports:
@@ -217,8 +486,8 @@
 name: http
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 ---
 # Source: thanos/templates/ruler/service.yaml
@@ -226,14 +495,13 @@
 kind: Service
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 prometheus-operator/monitor: 'true'
- annotations:
 spec:
 type: ClusterIP
 ports:
@@ -248,8 +516,8 @@
 name: grpc
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 ---
 # Source: thanos/templates/storegateway/service.yaml
@@ -257,14 +525,13 @@
 kind: Service
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 prometheus-operator/monitor: 'true'
- annotations:
 spec:
 type: ClusterIP
 ports:
@@ -279,8 +546,8 @@
 name: grpc
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 ---
 # Source: thanos/templates/bucketweb/deployment.yaml
@@ -288,14 +555,15 @@
 kind: Deployment
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 strategy:
 rollingUpdate:
 maxSurge: 1
@@ -303,20 +571,20 @@
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
 spec:
- serviceAccount: thanos-bucketweb
+ serviceAccountName: thanos-bucketweb
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -324,22 +592,33 @@
 requiredDuringSchedulingIgnoredDuringExecution:
 - labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 topologyKey: kubernetes.io/hostname
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: bucketweb
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.35.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - tools
 - bucket
@@ -375,8 +654,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: objstore-config
 mountPath: /conf
@@ -390,32 +675,33 @@
 kind: Deployment
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 spec:
 replicas: 1
+ revisionHistoryLimit: 10
 strategy:
 type: Recreate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
 spec:
- serviceAccount: thanos-compactor
+ serviceAccountName: thanos-compactor
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -424,23 +710,34 @@
 - podAffinityTerm:
 labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 topologyKey: kubernetes.io/hostname
 weight: 1
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: compactor
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.35.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - compact
 - --log.level=info
@@ -480,8 +777,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: objstore-config
 mountPath: /conf
@@ -500,30 +803,31 @@
 kind: Deployment
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 strategy:
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 spec:
- serviceAccount: thanos-query
+ serviceAccountName: thanos-query
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -532,23 +836,34 @@
 - podAffinityTerm:
 labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 topologyKey: kubernetes.io/hostname
 weight: 1
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: query
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.35.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - query
 - --log.level=info
@@ -559,6 +874,7 @@
 - --endpoint=dnssrv+_grpc._tcp.kube-prometheus-stack-thanos-discovery.monitoring.svc.cluster.local
 - --endpoint=dnssrv+_grpc._tcp.thanos-storegateway.default.svc.cluster.local
 - --endpoint=dnssrv+_grpc._tcp.thanos-ruler.default.svc.cluster.local
+ - --alert.query-url=http://thanos-query.default.svc.cluster.local:9090
 ports:
 - name: http
 containerPort: 10902
@@ -587,8 +903,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 volumes:
 ---
@@ -597,35 +919,36 @@
 kind: StatefulSet
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 podManagementPolicy: OrderedReady
 serviceName: thanos-ruler-headless
 updateStrategy:
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
- checksum/ruler-configuration: 7afcad4879bbb799b132d7e34633031899e8cf18d4ad6762b1b08fbec4111f11
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
+ checksum/ruler-configuration: b35799093da107f873e2a979b49d64483f166909c932e0533e46a3651d5dd847
 spec:
- serviceAccount: thanos-ruler
+ serviceAccountName: thanos-ruler
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -633,22 +956,33 @@
 requiredDuringSchedulingIgnoredDuringExecution:
 - labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 topologyKey: kubernetes.io/hostname
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: ruler
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.35.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - rule
 - --log.level=info
@@ -659,6 +993,7 @@
 - --eval-interval=1m
 - --alertmanagers.url=http://kube-prometheus-stack-alertmanager.monitoring:9093
 - --query=dnssrv+_http._tcp.thanos-query.default.svc.cluster.local
+ - --alert.query-url=http://thanos-query.default.svc.cluster.local:9090
 - --label=replica="$(POD_NAME)"
 - --label=ruler_cluster="${CLUSTER_NAME}"
 - --alert.label-drop=replica
@@ -698,8 +1033,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: ruler-config
 mountPath: /conf/rules
@@ -710,7 +1051,7 @@
 volumes:
 - name: ruler-config
 configMap:
- name: thanos-ruler-configmap
+ name: thanos-ruler
 - name: objstore-config
 secret:
 secretName: thanos-objstore-secret
@@ -730,34 +1071,35 @@
 kind: StatefulSet
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 podManagementPolicy: OrderedReady
 serviceName: thanos-storegateway-headless
 updateStrategy:
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
 spec:
- serviceAccount: thanos-storegateway
+ serviceAccountName: thanos-storegateway
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -765,22 +1107,33 @@
 requiredDuringSchedulingIgnoredDuringExecution:
 - labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 topologyKey: kubernetes.io/hostname
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: storegateway
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.35.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - store
 - --log.level=info
@@ -817,8 +1170,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: objstore-config
 mountPath: /conf
@@ -844,11 +1203,11 @@
 kind: Ingress
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 annotations:
 hajimari.io/enable: "false"
@@ -875,11 +1234,11 @@
 kind: Ingress
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 annotations:
 hajimari.io/enable: "false"
@@ -906,11 +1265,11 @@
 kind: Ingress
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 annotations:
 hajimari.io/icon: table-search
@@ -937,11 +1296,11 @@
 kind: Ingress
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 annotations:
 hajimari.io/enable: "false"
@@ -968,11 +1327,11 @@
 kind: Ingress
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 annotations:
 hajimari.io/enable: "false"
@@ -1001,9 +1360,9 @@
 name: thanos-bucketweb
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 spec:
 endpoints:
@@ -1013,9 +1372,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/compactor/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1024,9 +1384,9 @@
 name: thanos-compactor
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 spec:
 endpoints:
@@ -1036,9 +1396,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/query/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1047,9 +1408,9 @@
 name: thanos-query
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 spec:
 endpoints:
@@ -1059,9 +1420,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/ruler/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1070,9 +1432,9 @@
 name: thanos-ruler
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 spec:
 endpoints:
@@ -1082,9 +1444,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/storegateway/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1093,9 +1456,9 @@
 name: thanos-storegateway
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 spec:
 endpoints:
@@ -1105,6 +1468,7 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
+ prometheus-operator/monitor: 'true'

@homeops-gh-bot homeops-gh-bot bot changed the title feat(helm)!: Update chart thanos to 15.7.2 feat(helm)!: Update chart thanos to 15.7.1 Jun 7, 2024
@homeops-gh-bot homeops-gh-bot bot force-pushed the renovate/thanos-15.x branch from 456bc1d to 29e13ae Compare June 7, 2024 10:14
@homeops-gh-bot
Copy link
Contributor Author

homeops-gh-bot bot commented Jun 7, 2024

Path: cluster/apps/monitoring/thanos/helm-release.yaml
Version: 11.6.8 -> 15.7.2

@@ -1,84 +1,354 @@
 ---
+# Source: thanos/templates/bucketweb/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-bucketweb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: bucketweb
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: bucketweb
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 8080
+ - port: 8080
+---
+# Source: thanos/templates/compactor/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-compactor
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: compactor
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: compactor
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 9090
+---
+# Source: thanos/templates/query-frontend/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-query-frontend
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query-frontend
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query-frontend
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 9090
+ - port: 9090
+---
+# Source: thanos/templates/query/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-query
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 10901
+ - port: 9090
+ - port: 10901
+---
+# Source: thanos/templates/receive/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-receive
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: receive
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: receive
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 10902
+ - port: 10901
+ - port: 10901
+ - port: 19291
+ - port: 19291
+---
+# Source: thanos/templates/ruler/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-ruler
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: ruler
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: ruler
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 9090
+ - port: 10901
+ - port: 10901
+---
+# Source: thanos/templates/storegateway/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-storegateway
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: storegateway
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: storegateway
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 9090
+ - port: 10901
+ - port: 10901
+---
+# Source: thanos/templates/bucketweb/pdb.yaml
+apiVersion: policy/v1beta1
+kind: PodDisruptionBudget
+metadata:
+ name: thanos-bucketweb
+ namespace: default
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: bucketweb
+spec:
+ maxUnavailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: bucketweb
+---
+# Source: thanos/templates/query/pdb.yaml
+apiVersion: policy/v1beta1
+kind: PodDisruptionBudget
+metadata:
+ name: thanos-query
+ namespace: default
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query
+spec:
+ maxUnavailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query
+---
+# Source: thanos/templates/ruler/pdb.yaml
+apiVersion: policy/v1beta1
+kind: PodDisruptionBudget
+metadata:
+ name: thanos-ruler
+ namespace: default
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: ruler
+spec:
+ maxUnavailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: ruler
+---
+# Source: thanos/templates/storegateway/pdb.yaml
+apiVersion: policy/v1beta1
+kind: PodDisruptionBudget
+metadata:
+ name: thanos-storegateway
+ namespace: default
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: storegateway
+spec:
+ maxUnavailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: storegateway
+---
 # Source: thanos/templates/bucketweb/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/compactor/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/query/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/ruler/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/storegateway/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/objstore-secret.yaml
 apiVersion: v1
 kind: Secret
 metadata:
 name: thanos-objstore-secret
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 data:
 objstore.yml: |-
 Y29uZmlnOgogIGluc2VjdXJlOiB0cnVlCnR5cGU6IHMz
@@ -87,12 +357,12 @@
 apiVersion: v1
 kind: ConfigMap
 metadata:
- name: thanos-ruler-configmap
- namespace: "default"
+ name: thanos-ruler
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 data:
 ruler.yml: |-
@@ -107,11 +377,11 @@
 apiVersion: v1
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 spec:
 accessModes:
@@ -126,13 +396,13 @@
 kind: Service
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
- annotations:
+ prometheus-operator/monitor: 'true'
 spec:
 type: ClusterIP
 ports:
@@ -142,8 +412,8 @@
 name: http
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 ---
 # Source: thanos/templates/compactor/service.yaml
@@ -151,13 +421,13 @@
 kind: Service
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
- annotations:
+ prometheus-operator/monitor: 'true'
 spec:
 type: ClusterIP
 ports:
@@ -167,8 +437,8 @@
 name: http
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 ---
 # Source: thanos/templates/query/service-grpc.yaml
@@ -176,13 +446,12 @@
 kind: Service
 metadata:
 name: thanos-query-grpc
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
- annotations:
 spec:
 type: ClusterIP
 ports:
@@ -192,8 +461,8 @@
 name: grpc
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 ---
 # Source: thanos/templates/query/service.yaml
@@ -201,13 +470,13 @@
 kind: Service
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
- annotations:
+ prometheus-operator/monitor: 'true'
 spec:
 type: ClusterIP
 ports:
@@ -217,8 +486,8 @@
 name: http
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 ---
 # Source: thanos/templates/ruler/service.yaml
@@ -226,14 +495,13 @@
 kind: Service
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 prometheus-operator/monitor: 'true'
- annotations:
 spec:
 type: ClusterIP
 ports:
@@ -248,8 +516,8 @@
 name: grpc
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 ---
 # Source: thanos/templates/storegateway/service.yaml
@@ -257,14 +525,13 @@
 kind: Service
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 prometheus-operator/monitor: 'true'
- annotations:
 spec:
 type: ClusterIP
 ports:
@@ -279,8 +546,8 @@
 name: grpc
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 ---
 # Source: thanos/templates/bucketweb/deployment.yaml
@@ -288,14 +555,15 @@
 kind: Deployment
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 strategy:
 rollingUpdate:
 maxSurge: 1
@@ -303,20 +571,20 @@
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
 spec:
- serviceAccount: thanos-bucketweb
+ serviceAccountName: thanos-bucketweb
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -324,22 +592,33 @@
 requiredDuringSchedulingIgnoredDuringExecution:
 - labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 topologyKey: kubernetes.io/hostname
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: bucketweb
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.35.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - tools
 - bucket
@@ -375,8 +654,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: objstore-config
 mountPath: /conf
@@ -390,32 +675,33 @@
 kind: Deployment
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 spec:
 replicas: 1
+ revisionHistoryLimit: 10
 strategy:
 type: Recreate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
 spec:
- serviceAccount: thanos-compactor
+ serviceAccountName: thanos-compactor
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -424,23 +710,34 @@
 - podAffinityTerm:
 labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 topologyKey: kubernetes.io/hostname
 weight: 1
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: compactor
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.35.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - compact
 - --log.level=info
@@ -480,8 +777,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: objstore-config
 mountPath: /conf
@@ -500,30 +803,31 @@
 kind: Deployment
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 strategy:
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 spec:
- serviceAccount: thanos-query
+ serviceAccountName: thanos-query
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -532,23 +836,34 @@
 - podAffinityTerm:
 labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 topologyKey: kubernetes.io/hostname
 weight: 1
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: query
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.35.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - query
 - --log.level=info
@@ -559,6 +874,7 @@
 - --endpoint=dnssrv+_grpc._tcp.kube-prometheus-stack-thanos-discovery.monitoring.svc.cluster.local
 - --endpoint=dnssrv+_grpc._tcp.thanos-storegateway.default.svc.cluster.local
 - --endpoint=dnssrv+_grpc._tcp.thanos-ruler.default.svc.cluster.local
+ - --alert.query-url=http://thanos-query.default.svc.cluster.local:9090
 ports:
 - name: http
 containerPort: 10902
@@ -587,8 +903,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 volumes:
 ---
@@ -597,35 +919,36 @@
 kind: StatefulSet
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 podManagementPolicy: OrderedReady
 serviceName: thanos-ruler-headless
 updateStrategy:
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
- checksum/ruler-configuration: 7afcad4879bbb799b132d7e34633031899e8cf18d4ad6762b1b08fbec4111f11
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
+ checksum/ruler-configuration: b35799093da107f873e2a979b49d64483f166909c932e0533e46a3651d5dd847
 spec:
- serviceAccount: thanos-ruler
+ serviceAccountName: thanos-ruler
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -633,22 +956,33 @@
 requiredDuringSchedulingIgnoredDuringExecution:
 - labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 topologyKey: kubernetes.io/hostname
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: ruler
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.35.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - rule
 - --log.level=info
@@ -659,6 +993,7 @@
 - --eval-interval=1m
 - --alertmanagers.url=http://kube-prometheus-stack-alertmanager.monitoring:9093
 - --query=dnssrv+_http._tcp.thanos-query.default.svc.cluster.local
+ - --alert.query-url=http://thanos-query.default.svc.cluster.local:9090
 - --label=replica="$(POD_NAME)"
 - --label=ruler_cluster="${CLUSTER_NAME}"
 - --alert.label-drop=replica
@@ -698,8 +1033,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: ruler-config
 mountPath: /conf/rules
@@ -710,7 +1051,7 @@
 volumes:
 - name: ruler-config
 configMap:
- name: thanos-ruler-configmap
+ name: thanos-ruler
 - name: objstore-config
 secret:
 secretName: thanos-objstore-secret
@@ -730,34 +1071,35 @@
 kind: StatefulSet
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 podManagementPolicy: OrderedReady
 serviceName: thanos-storegateway-headless
 updateStrategy:
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
 spec:
- serviceAccount: thanos-storegateway
+ serviceAccountName: thanos-storegateway
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -765,22 +1107,33 @@
 requiredDuringSchedulingIgnoredDuringExecution:
 - labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 topologyKey: kubernetes.io/hostname
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: storegateway
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.35.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - store
 - --log.level=info
@@ -817,8 +1170,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: objstore-config
 mountPath: /conf
@@ -844,11 +1203,11 @@
 kind: Ingress
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 annotations:
 hajimari.io/enable: "false"
@@ -875,11 +1234,11 @@
 kind: Ingress
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 annotations:
 hajimari.io/enable: "false"
@@ -906,11 +1265,11 @@
 kind: Ingress
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 annotations:
 hajimari.io/icon: table-search
@@ -937,11 +1296,11 @@
 kind: Ingress
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 annotations:
 hajimari.io/enable: "false"
@@ -968,11 +1327,11 @@
 kind: Ingress
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 annotations:
 hajimari.io/enable: "false"
@@ -1001,9 +1360,9 @@
 name: thanos-bucketweb
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 spec:
 endpoints:
@@ -1013,9 +1372,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/compactor/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1024,9 +1384,9 @@
 name: thanos-compactor
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 spec:
 endpoints:
@@ -1036,9 +1396,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/query/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1047,9 +1408,9 @@
 name: thanos-query
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 spec:
 endpoints:
@@ -1059,9 +1420,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/ruler/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1070,9 +1432,9 @@
 name: thanos-ruler
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 spec:
 endpoints:
@@ -1082,9 +1444,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/storegateway/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1093,9 +1456,9 @@
 name: thanos-storegateway
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 spec:
 endpoints:
@@ -1105,6 +1468,7 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
+ prometheus-operator/monitor: 'true'

@homeops-gh-bot homeops-gh-bot bot changed the title feat(helm)!: Update chart thanos to 15.7.1 feat(helm)!: Update chart thanos to 15.7.2 Jun 7, 2024
@homeops-gh-bot homeops-gh-bot bot force-pushed the renovate/thanos-15.x branch from 29e13ae to 40ef7ac Compare June 10, 2024 12:25
@homeops-gh-bot
Copy link
Contributor Author

Path: cluster/apps/monitoring/thanos/helm-release.yaml
Version: 11.6.8 -> 15.7.3

@@ -1,84 +1,354 @@
 ---
+# Source: thanos/templates/bucketweb/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-bucketweb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: bucketweb
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: bucketweb
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 8080
+ - port: 8080
+---
+# Source: thanos/templates/compactor/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-compactor
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: compactor
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: compactor
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 9090
+---
+# Source: thanos/templates/query-frontend/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-query-frontend
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query-frontend
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query-frontend
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 9090
+ - port: 9090
+---
+# Source: thanos/templates/query/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-query
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 10901
+ - port: 9090
+ - port: 10901
+---
+# Source: thanos/templates/receive/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-receive
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: receive
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: receive
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 10902
+ - port: 10901
+ - port: 10901
+ - port: 19291
+ - port: 19291
+---
+# Source: thanos/templates/ruler/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-ruler
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: ruler
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: ruler
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 9090
+ - port: 10901
+ - port: 10901
+---
+# Source: thanos/templates/storegateway/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-storegateway
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: storegateway
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: storegateway
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 9090
+ - port: 10901
+ - port: 10901
+---
+# Source: thanos/templates/bucketweb/pdb.yaml
+apiVersion: policy/v1beta1
+kind: PodDisruptionBudget
+metadata:
+ name: thanos-bucketweb
+ namespace: default
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: bucketweb
+spec:
+ maxUnavailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: bucketweb
+---
+# Source: thanos/templates/query/pdb.yaml
+apiVersion: policy/v1beta1
+kind: PodDisruptionBudget
+metadata:
+ name: thanos-query
+ namespace: default
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query
+spec:
+ maxUnavailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query
+---
+# Source: thanos/templates/ruler/pdb.yaml
+apiVersion: policy/v1beta1
+kind: PodDisruptionBudget
+metadata:
+ name: thanos-ruler
+ namespace: default
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: ruler
+spec:
+ maxUnavailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: ruler
+---
+# Source: thanos/templates/storegateway/pdb.yaml
+apiVersion: policy/v1beta1
+kind: PodDisruptionBudget
+metadata:
+ name: thanos-storegateway
+ namespace: default
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: storegateway
+spec:
+ maxUnavailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: storegateway
+---
 # Source: thanos/templates/bucketweb/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/compactor/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/query/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/ruler/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/storegateway/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/objstore-secret.yaml
 apiVersion: v1
 kind: Secret
 metadata:
 name: thanos-objstore-secret
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 data:
 objstore.yml: |-
 Y29uZmlnOgogIGluc2VjdXJlOiB0cnVlCnR5cGU6IHMz
@@ -87,12 +357,12 @@
 apiVersion: v1
 kind: ConfigMap
 metadata:
- name: thanos-ruler-configmap
- namespace: "default"
+ name: thanos-ruler
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 data:
 ruler.yml: |-
@@ -107,11 +377,11 @@
 apiVersion: v1
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 spec:
 accessModes:
@@ -126,13 +396,13 @@
 kind: Service
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
- annotations:
+ prometheus-operator/monitor: 'true'
 spec:
 type: ClusterIP
 ports:
@@ -142,8 +412,8 @@
 name: http
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 ---
 # Source: thanos/templates/compactor/service.yaml
@@ -151,13 +421,13 @@
 kind: Service
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
- annotations:
+ prometheus-operator/monitor: 'true'
 spec:
 type: ClusterIP
 ports:
@@ -167,8 +437,8 @@
 name: http
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 ---
 # Source: thanos/templates/query/service-grpc.yaml
@@ -176,13 +446,12 @@
 kind: Service
 metadata:
 name: thanos-query-grpc
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
- annotations:
 spec:
 type: ClusterIP
 ports:
@@ -192,8 +461,8 @@
 name: grpc
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 ---
 # Source: thanos/templates/query/service.yaml
@@ -201,13 +470,13 @@
 kind: Service
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
- annotations:
+ prometheus-operator/monitor: 'true'
 spec:
 type: ClusterIP
 ports:
@@ -217,8 +486,8 @@
 name: http
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 ---
 # Source: thanos/templates/ruler/service.yaml
@@ -226,14 +495,13 @@
 kind: Service
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 prometheus-operator/monitor: 'true'
- annotations:
 spec:
 type: ClusterIP
 ports:
@@ -248,8 +516,8 @@
 name: grpc
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 ---
 # Source: thanos/templates/storegateway/service.yaml
@@ -257,14 +525,13 @@
 kind: Service
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 prometheus-operator/monitor: 'true'
- annotations:
 spec:
 type: ClusterIP
 ports:
@@ -279,8 +546,8 @@
 name: grpc
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 ---
 # Source: thanos/templates/bucketweb/deployment.yaml
@@ -288,14 +555,15 @@
 kind: Deployment
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 strategy:
 rollingUpdate:
 maxSurge: 1
@@ -303,20 +571,20 @@
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
 spec:
- serviceAccount: thanos-bucketweb
+ serviceAccountName: thanos-bucketweb
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -324,22 +592,33 @@
 requiredDuringSchedulingIgnoredDuringExecution:
 - labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 topologyKey: kubernetes.io/hostname
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: bucketweb
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.35.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - tools
 - bucket
@@ -375,8 +654,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: objstore-config
 mountPath: /conf
@@ -390,32 +675,33 @@
 kind: Deployment
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 spec:
 replicas: 1
+ revisionHistoryLimit: 10
 strategy:
 type: Recreate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
 spec:
- serviceAccount: thanos-compactor
+ serviceAccountName: thanos-compactor
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -424,23 +710,34 @@
 - podAffinityTerm:
 labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 topologyKey: kubernetes.io/hostname
 weight: 1
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: compactor
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.35.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - compact
 - --log.level=info
@@ -480,8 +777,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: objstore-config
 mountPath: /conf
@@ -500,30 +803,31 @@
 kind: Deployment
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 strategy:
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 spec:
- serviceAccount: thanos-query
+ serviceAccountName: thanos-query
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -532,23 +836,34 @@
 - podAffinityTerm:
 labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 topologyKey: kubernetes.io/hostname
 weight: 1
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: query
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.35.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - query
 - --log.level=info
@@ -559,6 +874,7 @@
 - --endpoint=dnssrv+_grpc._tcp.kube-prometheus-stack-thanos-discovery.monitoring.svc.cluster.local
 - --endpoint=dnssrv+_grpc._tcp.thanos-storegateway.default.svc.cluster.local
 - --endpoint=dnssrv+_grpc._tcp.thanos-ruler.default.svc.cluster.local
+ - --alert.query-url=http://thanos-query.default.svc.cluster.local:9090
 ports:
 - name: http
 containerPort: 10902
@@ -587,8 +903,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 volumes:
 ---
@@ -597,35 +919,36 @@
 kind: StatefulSet
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 podManagementPolicy: OrderedReady
 serviceName: thanos-ruler-headless
 updateStrategy:
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
- checksum/ruler-configuration: 7afcad4879bbb799b132d7e34633031899e8cf18d4ad6762b1b08fbec4111f11
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
+ checksum/ruler-configuration: b35799093da107f873e2a979b49d64483f166909c932e0533e46a3651d5dd847
 spec:
- serviceAccount: thanos-ruler
+ serviceAccountName: thanos-ruler
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -633,22 +956,33 @@
 requiredDuringSchedulingIgnoredDuringExecution:
 - labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 topologyKey: kubernetes.io/hostname
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: ruler
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.35.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - rule
 - --log.level=info
@@ -659,6 +993,7 @@
 - --eval-interval=1m
 - --alertmanagers.url=http://kube-prometheus-stack-alertmanager.monitoring:9093
 - --query=dnssrv+_http._tcp.thanos-query.default.svc.cluster.local
+ - --alert.query-url=http://thanos-query.default.svc.cluster.local:9090
 - --label=replica="$(POD_NAME)"
 - --label=ruler_cluster="${CLUSTER_NAME}"
 - --alert.label-drop=replica
@@ -698,8 +1033,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: ruler-config
 mountPath: /conf/rules
@@ -710,7 +1051,7 @@
 volumes:
 - name: ruler-config
 configMap:
- name: thanos-ruler-configmap
+ name: thanos-ruler
 - name: objstore-config
 secret:
 secretName: thanos-objstore-secret
@@ -730,34 +1071,35 @@
 kind: StatefulSet
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 podManagementPolicy: OrderedReady
 serviceName: thanos-storegateway-headless
 updateStrategy:
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
 spec:
- serviceAccount: thanos-storegateway
+ serviceAccountName: thanos-storegateway
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -765,22 +1107,33 @@
 requiredDuringSchedulingIgnoredDuringExecution:
 - labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 topologyKey: kubernetes.io/hostname
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: storegateway
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.35.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - store
 - --log.level=info
@@ -817,8 +1170,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: objstore-config
 mountPath: /conf
@@ -844,11 +1203,11 @@
 kind: Ingress
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 annotations:
 hajimari.io/enable: "false"
@@ -875,11 +1234,11 @@
 kind: Ingress
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 annotations:
 hajimari.io/enable: "false"
@@ -906,11 +1265,11 @@
 kind: Ingress
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 annotations:
 hajimari.io/icon: table-search
@@ -937,11 +1296,11 @@
 kind: Ingress
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 annotations:
 hajimari.io/enable: "false"
@@ -968,11 +1327,11 @@
 kind: Ingress
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 annotations:
 hajimari.io/enable: "false"
@@ -1001,9 +1360,9 @@
 name: thanos-bucketweb
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 spec:
 endpoints:
@@ -1013,9 +1372,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/compactor/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1024,9 +1384,9 @@
 name: thanos-compactor
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 spec:
 endpoints:
@@ -1036,9 +1396,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/query/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1047,9 +1408,9 @@
 name: thanos-query
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 spec:
 endpoints:
@@ -1059,9 +1420,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/ruler/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1070,9 +1432,9 @@
 name: thanos-ruler
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 spec:
 endpoints:
@@ -1082,9 +1444,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/storegateway/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1093,9 +1456,9 @@
 name: thanos-storegateway
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 spec:
 endpoints:
@@ -1105,6 +1468,7 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
+ prometheus-operator/monitor: 'true'

@homeops-gh-bot homeops-gh-bot bot changed the title feat(helm)!: Update chart thanos to 15.7.2 feat(helm)!: Update chart thanos to 15.7.3 Jun 10, 2024
@homeops-gh-bot homeops-gh-bot bot force-pushed the renovate/thanos-15.x branch from 40ef7ac to a9b5dab Compare June 11, 2024 11:13
@homeops-gh-bot
Copy link
Contributor Author

Path: cluster/apps/monitoring/thanos/helm-release.yaml
Version: 11.6.8 -> 15.7.4

@@ -1,84 +1,354 @@
 ---
+# Source: thanos/templates/bucketweb/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-bucketweb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: bucketweb
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: bucketweb
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 8080
+ - port: 8080
+---
+# Source: thanos/templates/compactor/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-compactor
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: compactor
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: compactor
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 9090
+---
+# Source: thanos/templates/query-frontend/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-query-frontend
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query-frontend
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query-frontend
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 9090
+ - port: 9090
+---
+# Source: thanos/templates/query/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-query
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 10901
+ - port: 9090
+ - port: 10901
+---
+# Source: thanos/templates/receive/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-receive
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: receive
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: receive
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 10902
+ - port: 10901
+ - port: 10901
+ - port: 19291
+ - port: 19291
+---
+# Source: thanos/templates/ruler/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-ruler
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: ruler
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: ruler
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 9090
+ - port: 10901
+ - port: 10901
+---
+# Source: thanos/templates/storegateway/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-storegateway
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: storegateway
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: storegateway
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 9090
+ - port: 10901
+ - port: 10901
+---
+# Source: thanos/templates/bucketweb/pdb.yaml
+apiVersion: policy/v1beta1
+kind: PodDisruptionBudget
+metadata:
+ name: thanos-bucketweb
+ namespace: default
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: bucketweb
+spec:
+ maxUnavailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: bucketweb
+---
+# Source: thanos/templates/query/pdb.yaml
+apiVersion: policy/v1beta1
+kind: PodDisruptionBudget
+metadata:
+ name: thanos-query
+ namespace: default
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query
+spec:
+ maxUnavailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query
+---
+# Source: thanos/templates/ruler/pdb.yaml
+apiVersion: policy/v1beta1
+kind: PodDisruptionBudget
+metadata:
+ name: thanos-ruler
+ namespace: default
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: ruler
+spec:
+ maxUnavailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: ruler
+---
+# Source: thanos/templates/storegateway/pdb.yaml
+apiVersion: policy/v1beta1
+kind: PodDisruptionBudget
+metadata:
+ name: thanos-storegateway
+ namespace: default
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: storegateway
+spec:
+ maxUnavailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: storegateway
+---
 # Source: thanos/templates/bucketweb/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/compactor/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/query/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/ruler/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/storegateway/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/objstore-secret.yaml
 apiVersion: v1
 kind: Secret
 metadata:
 name: thanos-objstore-secret
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 data:
 objstore.yml: |-
 Y29uZmlnOgogIGluc2VjdXJlOiB0cnVlCnR5cGU6IHMz
@@ -87,12 +357,12 @@
 apiVersion: v1
 kind: ConfigMap
 metadata:
- name: thanos-ruler-configmap
- namespace: "default"
+ name: thanos-ruler
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 data:
 ruler.yml: |-
@@ -107,11 +377,11 @@
 apiVersion: v1
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 spec:
 accessModes:
@@ -126,13 +396,13 @@
 kind: Service
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
- annotations:
+ prometheus-operator/monitor: 'true'
 spec:
 type: ClusterIP
 ports:
@@ -142,8 +412,8 @@
 name: http
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 ---
 # Source: thanos/templates/compactor/service.yaml
@@ -151,13 +421,13 @@
 kind: Service
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
- annotations:
+ prometheus-operator/monitor: 'true'
 spec:
 type: ClusterIP
 ports:
@@ -167,8 +437,8 @@
 name: http
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 ---
 # Source: thanos/templates/query/service-grpc.yaml
@@ -176,13 +446,12 @@
 kind: Service
 metadata:
 name: thanos-query-grpc
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
- annotations:
 spec:
 type: ClusterIP
 ports:
@@ -192,8 +461,8 @@
 name: grpc
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 ---
 # Source: thanos/templates/query/service.yaml
@@ -201,13 +470,13 @@
 kind: Service
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
- annotations:
+ prometheus-operator/monitor: 'true'
 spec:
 type: ClusterIP
 ports:
@@ -217,8 +486,8 @@
 name: http
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 ---
 # Source: thanos/templates/ruler/service.yaml
@@ -226,14 +495,13 @@
 kind: Service
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 prometheus-operator/monitor: 'true'
- annotations:
 spec:
 type: ClusterIP
 ports:
@@ -248,8 +516,8 @@
 name: grpc
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 ---
 # Source: thanos/templates/storegateway/service.yaml
@@ -257,14 +525,13 @@
 kind: Service
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 prometheus-operator/monitor: 'true'
- annotations:
 spec:
 type: ClusterIP
 ports:
@@ -279,8 +546,8 @@
 name: grpc
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 ---
 # Source: thanos/templates/bucketweb/deployment.yaml
@@ -288,14 +555,15 @@
 kind: Deployment
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 strategy:
 rollingUpdate:
 maxSurge: 1
@@ -303,20 +571,20 @@
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
 spec:
- serviceAccount: thanos-bucketweb
+ serviceAccountName: thanos-bucketweb
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -324,22 +592,33 @@
 requiredDuringSchedulingIgnoredDuringExecution:
 - labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 topologyKey: kubernetes.io/hostname
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: bucketweb
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.35.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - tools
 - bucket
@@ -375,8 +654,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: objstore-config
 mountPath: /conf
@@ -390,32 +675,33 @@
 kind: Deployment
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 spec:
 replicas: 1
+ revisionHistoryLimit: 10
 strategy:
 type: Recreate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
 spec:
- serviceAccount: thanos-compactor
+ serviceAccountName: thanos-compactor
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -424,23 +710,34 @@
 - podAffinityTerm:
 labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 topologyKey: kubernetes.io/hostname
 weight: 1
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: compactor
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.35.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - compact
 - --log.level=info
@@ -480,8 +777,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: objstore-config
 mountPath: /conf
@@ -500,30 +803,31 @@
 kind: Deployment
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 strategy:
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 spec:
- serviceAccount: thanos-query
+ serviceAccountName: thanos-query
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -532,23 +836,34 @@
 - podAffinityTerm:
 labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 topologyKey: kubernetes.io/hostname
 weight: 1
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: query
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.35.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - query
 - --log.level=info
@@ -559,6 +874,7 @@
 - --endpoint=dnssrv+_grpc._tcp.kube-prometheus-stack-thanos-discovery.monitoring.svc.cluster.local
 - --endpoint=dnssrv+_grpc._tcp.thanos-storegateway.default.svc.cluster.local
 - --endpoint=dnssrv+_grpc._tcp.thanos-ruler.default.svc.cluster.local
+ - --alert.query-url=http://thanos-query.default.svc.cluster.local:9090
 ports:
 - name: http
 containerPort: 10902
@@ -587,8 +903,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 volumes:
 ---
@@ -597,35 +919,36 @@
 kind: StatefulSet
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 podManagementPolicy: OrderedReady
 serviceName: thanos-ruler-headless
 updateStrategy:
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
- checksum/ruler-configuration: 7afcad4879bbb799b132d7e34633031899e8cf18d4ad6762b1b08fbec4111f11
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
+ checksum/ruler-configuration: b35799093da107f873e2a979b49d64483f166909c932e0533e46a3651d5dd847
 spec:
- serviceAccount: thanos-ruler
+ serviceAccountName: thanos-ruler
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -633,22 +956,33 @@
 requiredDuringSchedulingIgnoredDuringExecution:
 - labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 topologyKey: kubernetes.io/hostname
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: ruler
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.35.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - rule
 - --log.level=info
@@ -659,6 +993,7 @@
 - --eval-interval=1m
 - --alertmanagers.url=http://kube-prometheus-stack-alertmanager.monitoring:9093
 - --query=dnssrv+_http._tcp.thanos-query.default.svc.cluster.local
+ - --alert.query-url=http://thanos-query.default.svc.cluster.local:9090
 - --label=replica="$(POD_NAME)"
 - --label=ruler_cluster="${CLUSTER_NAME}"
 - --alert.label-drop=replica
@@ -698,8 +1033,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: ruler-config
 mountPath: /conf/rules
@@ -710,7 +1051,7 @@
 volumes:
 - name: ruler-config
 configMap:
- name: thanos-ruler-configmap
+ name: thanos-ruler
 - name: objstore-config
 secret:
 secretName: thanos-objstore-secret
@@ -730,34 +1071,35 @@
 kind: StatefulSet
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 podManagementPolicy: OrderedReady
 serviceName: thanos-storegateway-headless
 updateStrategy:
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
 spec:
- serviceAccount: thanos-storegateway
+ serviceAccountName: thanos-storegateway
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -765,22 +1107,33 @@
 requiredDuringSchedulingIgnoredDuringExecution:
 - labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 topologyKey: kubernetes.io/hostname
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: storegateway
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.35.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - store
 - --log.level=info
@@ -817,8 +1170,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: objstore-config
 mountPath: /conf
@@ -844,11 +1203,11 @@
 kind: Ingress
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 annotations:
 hajimari.io/enable: "false"
@@ -875,11 +1234,11 @@
 kind: Ingress
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 annotations:
 hajimari.io/enable: "false"
@@ -906,11 +1265,11 @@
 kind: Ingress
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 annotations:
 hajimari.io/icon: table-search
@@ -937,11 +1296,11 @@
 kind: Ingress
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 annotations:
 hajimari.io/enable: "false"
@@ -968,11 +1327,11 @@
 kind: Ingress
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 annotations:
 hajimari.io/enable: "false"
@@ -1001,9 +1360,9 @@
 name: thanos-bucketweb
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 spec:
 endpoints:
@@ -1013,9 +1372,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/compactor/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1024,9 +1384,9 @@
 name: thanos-compactor
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 spec:
 endpoints:
@@ -1036,9 +1396,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/query/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1047,9 +1408,9 @@
 name: thanos-query
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 spec:
 endpoints:
@@ -1059,9 +1420,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/ruler/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1070,9 +1432,9 @@
 name: thanos-ruler
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 spec:
 endpoints:
@@ -1082,9 +1444,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/storegateway/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1093,9 +1456,9 @@
 name: thanos-storegateway
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 spec:
 endpoints:
@@ -1105,6 +1468,7 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
+ prometheus-operator/monitor: 'true'

@homeops-gh-bot homeops-gh-bot bot changed the title feat(helm)!: Update chart thanos to 15.7.3 feat(helm)!: Update chart thanos to 15.7.4 Jun 11, 2024
@homeops-gh-bot homeops-gh-bot bot force-pushed the renovate/thanos-15.x branch from a9b5dab to 238bccf Compare June 11, 2024 16:17
@homeops-gh-bot
Copy link
Contributor Author

Path: cluster/apps/monitoring/thanos/helm-release.yaml
Version: 11.6.8 -> 15.7.5

@@ -1,84 +1,296 @@
 ---
+# Source: thanos/templates/bucketweb/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-bucketweb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: bucketweb
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: bucketweb
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 8080
+ - port: 8080
+---
+# Source: thanos/templates/compactor/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-compactor
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: compactor
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: compactor
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 9090
+---
+# Source: thanos/templates/query/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-query
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 10901
+ - port: 9090
+ - port: 10901
+---
+# Source: thanos/templates/ruler/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-ruler
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: ruler
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: ruler
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 9090
+ - port: 10901
+ - port: 10901
+---
+# Source: thanos/templates/storegateway/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-storegateway
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: storegateway
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: storegateway
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 9090
+ - port: 10901
+ - port: 10901
+---
+# Source: thanos/templates/bucketweb/pdb.yaml
+apiVersion: policy/v1beta1
+kind: PodDisruptionBudget
+metadata:
+ name: thanos-bucketweb
+ namespace: default
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: bucketweb
+spec:
+ maxUnavailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: bucketweb
+---
+# Source: thanos/templates/query/pdb.yaml
+apiVersion: policy/v1beta1
+kind: PodDisruptionBudget
+metadata:
+ name: thanos-query
+ namespace: default
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query
+spec:
+ maxUnavailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query
+---
+# Source: thanos/templates/ruler/pdb.yaml
+apiVersion: policy/v1beta1
+kind: PodDisruptionBudget
+metadata:
+ name: thanos-ruler
+ namespace: default
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: ruler
+spec:
+ maxUnavailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: ruler
+---
+# Source: thanos/templates/storegateway/pdb.yaml
+apiVersion: policy/v1beta1
+kind: PodDisruptionBudget
+metadata:
+ name: thanos-storegateway
+ namespace: default
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: storegateway
+spec:
+ maxUnavailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: storegateway
+---
 # Source: thanos/templates/bucketweb/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/compactor/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/query/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/ruler/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/storegateway/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/objstore-secret.yaml
 apiVersion: v1
 kind: Secret
 metadata:
 name: thanos-objstore-secret
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 data:
 objstore.yml: |-
 Y29uZmlnOgogIGluc2VjdXJlOiB0cnVlCnR5cGU6IHMz
@@ -87,12 +299,12 @@
 apiVersion: v1
 kind: ConfigMap
 metadata:
- name: thanos-ruler-configmap
- namespace: "default"
+ name: thanos-ruler
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 data:
 ruler.yml: |-
@@ -107,11 +319,11 @@
 apiVersion: v1
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 spec:
 accessModes:
@@ -126,13 +338,13 @@
 kind: Service
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
- annotations:
+ prometheus-operator/monitor: 'true'
 spec:
 type: ClusterIP
 ports:
@@ -142,8 +354,8 @@
 name: http
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 ---
 # Source: thanos/templates/compactor/service.yaml
@@ -151,13 +363,13 @@
 kind: Service
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
- annotations:
+ prometheus-operator/monitor: 'true'
 spec:
 type: ClusterIP
 ports:
@@ -167,8 +379,8 @@
 name: http
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 ---
 # Source: thanos/templates/query/service-grpc.yaml
@@ -176,13 +388,12 @@
 kind: Service
 metadata:
 name: thanos-query-grpc
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
- annotations:
 spec:
 type: ClusterIP
 ports:
@@ -192,8 +403,8 @@
 name: grpc
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 ---
 # Source: thanos/templates/query/service.yaml
@@ -201,13 +412,13 @@
 kind: Service
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
- annotations:
+ prometheus-operator/monitor: 'true'
 spec:
 type: ClusterIP
 ports:
@@ -217,8 +428,8 @@
 name: http
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 ---
 # Source: thanos/templates/ruler/service.yaml
@@ -226,14 +437,13 @@
 kind: Service
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 prometheus-operator/monitor: 'true'
- annotations:
 spec:
 type: ClusterIP
 ports:
@@ -248,8 +458,8 @@
 name: grpc
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 ---
 # Source: thanos/templates/storegateway/service.yaml
@@ -257,14 +467,13 @@
 kind: Service
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 prometheus-operator/monitor: 'true'
- annotations:
 spec:
 type: ClusterIP
 ports:
@@ -279,8 +488,8 @@
 name: grpc
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 ---
 # Source: thanos/templates/bucketweb/deployment.yaml
@@ -288,14 +497,15 @@
 kind: Deployment
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 strategy:
 rollingUpdate:
 maxSurge: 1
@@ -303,20 +513,20 @@
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
 spec:
- serviceAccount: thanos-bucketweb
+ serviceAccountName: thanos-bucketweb
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -324,22 +534,33 @@
 requiredDuringSchedulingIgnoredDuringExecution:
 - labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 topologyKey: kubernetes.io/hostname
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: bucketweb
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.35.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - tools
 - bucket
@@ -375,8 +596,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: objstore-config
 mountPath: /conf
@@ -390,32 +617,33 @@
 kind: Deployment
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 spec:
 replicas: 1
+ revisionHistoryLimit: 10
 strategy:
 type: Recreate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
 spec:
- serviceAccount: thanos-compactor
+ serviceAccountName: thanos-compactor
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -424,23 +652,34 @@
 - podAffinityTerm:
 labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 topologyKey: kubernetes.io/hostname
 weight: 1
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: compactor
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.35.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - compact
 - --log.level=info
@@ -480,8 +719,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: objstore-config
 mountPath: /conf
@@ -500,30 +745,31 @@
 kind: Deployment
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 strategy:
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 spec:
- serviceAccount: thanos-query
+ serviceAccountName: thanos-query
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -532,23 +778,34 @@
 - podAffinityTerm:
 labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 topologyKey: kubernetes.io/hostname
 weight: 1
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: query
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.35.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - query
 - --log.level=info
@@ -559,6 +816,7 @@
 - --endpoint=dnssrv+_grpc._tcp.kube-prometheus-stack-thanos-discovery.monitoring.svc.cluster.local
 - --endpoint=dnssrv+_grpc._tcp.thanos-storegateway.default.svc.cluster.local
 - --endpoint=dnssrv+_grpc._tcp.thanos-ruler.default.svc.cluster.local
+ - --alert.query-url=http://thanos-query.default.svc.cluster.local:9090
 ports:
 - name: http
 containerPort: 10902
@@ -587,8 +845,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 volumes:
 ---
@@ -597,35 +861,36 @@
 kind: StatefulSet
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 podManagementPolicy: OrderedReady
 serviceName: thanos-ruler-headless
 updateStrategy:
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
- checksum/ruler-configuration: 7afcad4879bbb799b132d7e34633031899e8cf18d4ad6762b1b08fbec4111f11
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
+ checksum/ruler-configuration: b35799093da107f873e2a979b49d64483f166909c932e0533e46a3651d5dd847
 spec:
- serviceAccount: thanos-ruler
+ serviceAccountName: thanos-ruler
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -633,22 +898,33 @@
 requiredDuringSchedulingIgnoredDuringExecution:
 - labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 topologyKey: kubernetes.io/hostname
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: ruler
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.35.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - rule
 - --log.level=info
@@ -659,6 +935,7 @@
 - --eval-interval=1m
 - --alertmanagers.url=http://kube-prometheus-stack-alertmanager.monitoring:9093
 - --query=dnssrv+_http._tcp.thanos-query.default.svc.cluster.local
+ - --alert.query-url=http://thanos-query.default.svc.cluster.local:9090
 - --label=replica="$(POD_NAME)"
 - --label=ruler_cluster="${CLUSTER_NAME}"
 - --alert.label-drop=replica
@@ -698,8 +975,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: ruler-config
 mountPath: /conf/rules
@@ -710,7 +993,7 @@
 volumes:
 - name: ruler-config
 configMap:
- name: thanos-ruler-configmap
+ name: thanos-ruler
 - name: objstore-config
 secret:
 secretName: thanos-objstore-secret
@@ -730,34 +1013,35 @@
 kind: StatefulSet
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 podManagementPolicy: OrderedReady
 serviceName: thanos-storegateway-headless
 updateStrategy:
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
 spec:
- serviceAccount: thanos-storegateway
+ serviceAccountName: thanos-storegateway
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -765,22 +1049,33 @@
 requiredDuringSchedulingIgnoredDuringExecution:
 - labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 topologyKey: kubernetes.io/hostname
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: storegateway
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.35.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - store
 - --log.level=info
@@ -817,8 +1112,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: objstore-config
 mountPath: /conf
@@ -844,11 +1145,11 @@
 kind: Ingress
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 annotations:
 hajimari.io/enable: "false"
@@ -875,11 +1176,11 @@
 kind: Ingress
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 annotations:
 hajimari.io/enable: "false"
@@ -906,11 +1207,11 @@
 kind: Ingress
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 annotations:
 hajimari.io/icon: table-search
@@ -937,11 +1238,11 @@
 kind: Ingress
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 annotations:
 hajimari.io/enable: "false"
@@ -968,11 +1269,11 @@
 kind: Ingress
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 annotations:
 hajimari.io/enable: "false"
@@ -1001,9 +1302,9 @@
 name: thanos-bucketweb
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 spec:
 endpoints:
@@ -1013,9 +1314,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/compactor/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1024,9 +1326,9 @@
 name: thanos-compactor
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 spec:
 endpoints:
@@ -1036,9 +1338,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/query/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1047,9 +1350,9 @@
 name: thanos-query
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 spec:
 endpoints:
@@ -1059,9 +1362,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/ruler/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1070,9 +1374,9 @@
 name: thanos-ruler
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 spec:
 endpoints:
@@ -1082,9 +1386,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/storegateway/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1093,9 +1398,9 @@
 name: thanos-storegateway
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 spec:
 endpoints:
@@ -1105,6 +1410,7 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
+ prometheus-operator/monitor: 'true'

@homeops-gh-bot homeops-gh-bot bot changed the title feat(helm)!: Update chart thanos to 15.7.4 feat(helm)!: Update chart thanos to 15.7.5 Jun 11, 2024
@homeops-gh-bot homeops-gh-bot bot force-pushed the renovate/thanos-15.x branch from 238bccf to 951c751 Compare June 12, 2024 16:17
@homeops-gh-bot
Copy link
Contributor Author

Path: cluster/apps/monitoring/thanos/helm-release.yaml
Version: 11.6.8 -> 15.7.6

@@ -1,84 +1,296 @@
 ---
+# Source: thanos/templates/bucketweb/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-bucketweb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: bucketweb
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: bucketweb
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 8080
+ - port: 8080
+---
+# Source: thanos/templates/compactor/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-compactor
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: compactor
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: compactor
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 9090
+---
+# Source: thanos/templates/query/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-query
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 10901
+ - port: 9090
+ - port: 10901
+---
+# Source: thanos/templates/ruler/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-ruler
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: ruler
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: ruler
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 9090
+ - port: 10901
+ - port: 10901
+---
+# Source: thanos/templates/storegateway/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-storegateway
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: storegateway
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: storegateway
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 9090
+ - port: 10901
+ - port: 10901
+---
+# Source: thanos/templates/bucketweb/pdb.yaml
+apiVersion: policy/v1beta1
+kind: PodDisruptionBudget
+metadata:
+ name: thanos-bucketweb
+ namespace: default
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: bucketweb
+spec:
+ maxUnavailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: bucketweb
+---
+# Source: thanos/templates/query/pdb.yaml
+apiVersion: policy/v1beta1
+kind: PodDisruptionBudget
+metadata:
+ name: thanos-query
+ namespace: default
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query
+spec:
+ maxUnavailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query
+---
+# Source: thanos/templates/ruler/pdb.yaml
+apiVersion: policy/v1beta1
+kind: PodDisruptionBudget
+metadata:
+ name: thanos-ruler
+ namespace: default
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: ruler
+spec:
+ maxUnavailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: ruler
+---
+# Source: thanos/templates/storegateway/pdb.yaml
+apiVersion: policy/v1beta1
+kind: PodDisruptionBudget
+metadata:
+ name: thanos-storegateway
+ namespace: default
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: storegateway
+spec:
+ maxUnavailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: storegateway
+---
 # Source: thanos/templates/bucketweb/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/compactor/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/query/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/ruler/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/storegateway/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/objstore-secret.yaml
 apiVersion: v1
 kind: Secret
 metadata:
 name: thanos-objstore-secret
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 data:
 objstore.yml: |-
 Y29uZmlnOgogIGluc2VjdXJlOiB0cnVlCnR5cGU6IHMz
@@ -87,12 +299,12 @@
 apiVersion: v1
 kind: ConfigMap
 metadata:
- name: thanos-ruler-configmap
- namespace: "default"
+ name: thanos-ruler
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 data:
 ruler.yml: |-
@@ -107,11 +319,11 @@
 apiVersion: v1
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 spec:
 accessModes:
@@ -126,13 +338,13 @@
 kind: Service
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
- annotations:
+ prometheus-operator/monitor: 'true'
 spec:
 type: ClusterIP
 ports:
@@ -142,8 +354,8 @@
 name: http
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 ---
 # Source: thanos/templates/compactor/service.yaml
@@ -151,13 +363,13 @@
 kind: Service
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
- annotations:
+ prometheus-operator/monitor: 'true'
 spec:
 type: ClusterIP
 ports:
@@ -167,8 +379,8 @@
 name: http
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 ---
 # Source: thanos/templates/query/service-grpc.yaml
@@ -176,13 +388,12 @@
 kind: Service
 metadata:
 name: thanos-query-grpc
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
- annotations:
 spec:
 type: ClusterIP
 ports:
@@ -192,8 +403,8 @@
 name: grpc
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 ---
 # Source: thanos/templates/query/service.yaml
@@ -201,13 +412,13 @@
 kind: Service
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
- annotations:
+ prometheus-operator/monitor: 'true'
 spec:
 type: ClusterIP
 ports:
@@ -217,8 +428,8 @@
 name: http
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 ---
 # Source: thanos/templates/ruler/service.yaml
@@ -226,14 +437,13 @@
 kind: Service
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 prometheus-operator/monitor: 'true'
- annotations:
 spec:
 type: ClusterIP
 ports:
@@ -248,8 +458,8 @@
 name: grpc
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 ---
 # Source: thanos/templates/storegateway/service.yaml
@@ -257,14 +467,13 @@
 kind: Service
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 prometheus-operator/monitor: 'true'
- annotations:
 spec:
 type: ClusterIP
 ports:
@@ -279,8 +488,8 @@
 name: grpc
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 ---
 # Source: thanos/templates/bucketweb/deployment.yaml
@@ -288,14 +497,15 @@
 kind: Deployment
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 strategy:
 rollingUpdate:
 maxSurge: 1
@@ -303,20 +513,20 @@
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
 spec:
- serviceAccount: thanos-bucketweb
+ serviceAccountName: thanos-bucketweb
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -324,22 +534,33 @@
 requiredDuringSchedulingIgnoredDuringExecution:
 - labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 topologyKey: kubernetes.io/hostname
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: bucketweb
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.35.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - tools
 - bucket
@@ -375,8 +596,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: objstore-config
 mountPath: /conf
@@ -390,32 +617,33 @@
 kind: Deployment
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 spec:
 replicas: 1
+ revisionHistoryLimit: 10
 strategy:
 type: Recreate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
 spec:
- serviceAccount: thanos-compactor
+ serviceAccountName: thanos-compactor
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -424,23 +652,34 @@
 - podAffinityTerm:
 labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 topologyKey: kubernetes.io/hostname
 weight: 1
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: compactor
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.35.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - compact
 - --log.level=info
@@ -480,8 +719,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: objstore-config
 mountPath: /conf
@@ -500,30 +745,31 @@
 kind: Deployment
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 strategy:
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 spec:
- serviceAccount: thanos-query
+ serviceAccountName: thanos-query
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -532,23 +778,34 @@
 - podAffinityTerm:
 labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 topologyKey: kubernetes.io/hostname
 weight: 1
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: query
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.35.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - query
 - --log.level=info
@@ -559,6 +816,7 @@
 - --endpoint=dnssrv+_grpc._tcp.kube-prometheus-stack-thanos-discovery.monitoring.svc.cluster.local
 - --endpoint=dnssrv+_grpc._tcp.thanos-storegateway.default.svc.cluster.local
 - --endpoint=dnssrv+_grpc._tcp.thanos-ruler.default.svc.cluster.local
+ - --alert.query-url=http://thanos-query.default.svc.cluster.local:9090
 ports:
 - name: http
 containerPort: 10902
@@ -587,8 +845,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 volumes:
 ---
@@ -597,35 +861,36 @@
 kind: StatefulSet
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 podManagementPolicy: OrderedReady
 serviceName: thanos-ruler-headless
 updateStrategy:
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
- checksum/ruler-configuration: 7afcad4879bbb799b132d7e34633031899e8cf18d4ad6762b1b08fbec4111f11
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
+ checksum/ruler-configuration: b35799093da107f873e2a979b49d64483f166909c932e0533e46a3651d5dd847
 spec:
- serviceAccount: thanos-ruler
+ serviceAccountName: thanos-ruler
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -633,22 +898,33 @@
 requiredDuringSchedulingIgnoredDuringExecution:
 - labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 topologyKey: kubernetes.io/hostname
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: ruler
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.35.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - rule
 - --log.level=info
@@ -659,6 +935,7 @@
 - --eval-interval=1m
 - --alertmanagers.url=http://kube-prometheus-stack-alertmanager.monitoring:9093
 - --query=dnssrv+_http._tcp.thanos-query.default.svc.cluster.local
+ - --alert.query-url=http://thanos-query.default.svc.cluster.local:9090
 - --label=replica="$(POD_NAME)"
 - --label=ruler_cluster="${CLUSTER_NAME}"
 - --alert.label-drop=replica
@@ -698,8 +975,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: ruler-config
 mountPath: /conf/rules
@@ -710,7 +993,7 @@
 volumes:
 - name: ruler-config
 configMap:
- name: thanos-ruler-configmap
+ name: thanos-ruler
 - name: objstore-config
 secret:
 secretName: thanos-objstore-secret
@@ -730,34 +1013,35 @@
 kind: StatefulSet
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 podManagementPolicy: OrderedReady
 serviceName: thanos-storegateway-headless
 updateStrategy:
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
 spec:
- serviceAccount: thanos-storegateway
+ serviceAccountName: thanos-storegateway
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -765,22 +1049,33 @@
 requiredDuringSchedulingIgnoredDuringExecution:
 - labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 topologyKey: kubernetes.io/hostname
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: storegateway
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.35.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - store
 - --log.level=info
@@ -817,8 +1112,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: objstore-config
 mountPath: /conf
@@ -844,11 +1145,11 @@
 kind: Ingress
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 annotations:
 hajimari.io/enable: "false"
@@ -875,11 +1176,11 @@
 kind: Ingress
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 annotations:
 hajimari.io/enable: "false"
@@ -906,11 +1207,11 @@
 kind: Ingress
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 annotations:
 hajimari.io/icon: table-search
@@ -937,11 +1238,11 @@
 kind: Ingress
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 annotations:
 hajimari.io/enable: "false"
@@ -968,11 +1269,11 @@
 kind: Ingress
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 annotations:
 hajimari.io/enable: "false"
@@ -1001,9 +1302,9 @@
 name: thanos-bucketweb
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 spec:
 endpoints:
@@ -1013,9 +1314,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/compactor/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1024,9 +1326,9 @@
 name: thanos-compactor
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 spec:
 endpoints:
@@ -1036,9 +1338,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/query/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1047,9 +1350,9 @@
 name: thanos-query
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 spec:
 endpoints:
@@ -1059,9 +1362,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/ruler/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1070,9 +1374,9 @@
 name: thanos-ruler
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 spec:
 endpoints:
@@ -1082,9 +1386,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/storegateway/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1093,9 +1398,9 @@
 name: thanos-storegateway
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 spec:
 endpoints:
@@ -1105,6 +1410,7 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
+ prometheus-operator/monitor: 'true'

@homeops-gh-bot homeops-gh-bot bot changed the title feat(helm)!: Update chart thanos to 15.7.5 feat(helm)!: Update chart thanos to 15.7.6 Jun 12, 2024
@homeops-gh-bot
feat(helm)!: Update chart thanos to 15.7.7
c6f47e8 
| datasource | package | from   | to     |
| ---------- | ------- | ------ | ------ |
| helm       | thanos  | 11.6.8 | 15.7.7 |
@homeops-gh-bot homeops-gh-bot bot force-pushed the renovate/thanos-15.x branch from 951c751 to c6f47e8 Compare June 17, 2024 14:14
@homeops-gh-bot
Copy link
Contributor Author

Path: cluster/apps/monitoring/thanos/helm-release.yaml
Version: 11.6.8 -> 15.7.7

@@ -1,84 +1,296 @@
 ---
+# Source: thanos/templates/bucketweb/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-bucketweb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: bucketweb
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: bucketweb
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 8080
+ - port: 8080
+---
+# Source: thanos/templates/compactor/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-compactor
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: compactor
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: compactor
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 9090
+---
+# Source: thanos/templates/query/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-query
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 10901
+ - port: 9090
+ - port: 10901
+---
+# Source: thanos/templates/ruler/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-ruler
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: ruler
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: ruler
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 9090
+ - port: 10901
+ - port: 10901
+---
+# Source: thanos/templates/storegateway/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-storegateway
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: storegateway
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: storegateway
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 9090
+ - port: 10901
+ - port: 10901
+---
+# Source: thanos/templates/bucketweb/pdb.yaml
+apiVersion: policy/v1beta1
+kind: PodDisruptionBudget
+metadata:
+ name: thanos-bucketweb
+ namespace: default
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: bucketweb
+spec:
+ maxUnavailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: bucketweb
+---
+# Source: thanos/templates/query/pdb.yaml
+apiVersion: policy/v1beta1
+kind: PodDisruptionBudget
+metadata:
+ name: thanos-query
+ namespace: default
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query
+spec:
+ maxUnavailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query
+---
+# Source: thanos/templates/ruler/pdb.yaml
+apiVersion: policy/v1beta1
+kind: PodDisruptionBudget
+metadata:
+ name: thanos-ruler
+ namespace: default
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: ruler
+spec:
+ maxUnavailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: ruler
+---
+# Source: thanos/templates/storegateway/pdb.yaml
+apiVersion: policy/v1beta1
+kind: PodDisruptionBudget
+metadata:
+ name: thanos-storegateway
+ namespace: default
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: storegateway
+spec:
+ maxUnavailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: storegateway
+---
 # Source: thanos/templates/bucketweb/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/compactor/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/query/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/ruler/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/storegateway/serviceaccount.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: thanos/templates/objstore-secret.yaml
 apiVersion: v1
 kind: Secret
 metadata:
 name: thanos-objstore-secret
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 data:
 objstore.yml: |-
 Y29uZmlnOgogIGluc2VjdXJlOiB0cnVlCnR5cGU6IHMz
@@ -87,12 +299,12 @@
 apiVersion: v1
 kind: ConfigMap
 metadata:
- name: thanos-ruler-configmap
- namespace: "default"
+ name: thanos-ruler
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 data:
 ruler.yml: |-
@@ -107,11 +319,11 @@
 apiVersion: v1
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 spec:
 accessModes:
@@ -126,13 +338,13 @@
 kind: Service
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
- annotations:
+ prometheus-operator/monitor: 'true'
 spec:
 type: ClusterIP
 ports:
@@ -142,8 +354,8 @@
 name: http
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 ---
 # Source: thanos/templates/compactor/service.yaml
@@ -151,13 +363,13 @@
 kind: Service
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
- annotations:
+ prometheus-operator/monitor: 'true'
 spec:
 type: ClusterIP
 ports:
@@ -167,8 +379,8 @@
 name: http
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 ---
 # Source: thanos/templates/query/service-grpc.yaml
@@ -176,13 +388,12 @@
 kind: Service
 metadata:
 name: thanos-query-grpc
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
- annotations:
 spec:
 type: ClusterIP
 ports:
@@ -192,8 +403,8 @@
 name: grpc
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 ---
 # Source: thanos/templates/query/service.yaml
@@ -201,13 +412,13 @@
 kind: Service
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
- annotations:
+ prometheus-operator/monitor: 'true'
 spec:
 type: ClusterIP
 ports:
@@ -217,8 +428,8 @@
 name: http
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 ---
 # Source: thanos/templates/ruler/service.yaml
@@ -226,14 +437,13 @@
 kind: Service
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 prometheus-operator/monitor: 'true'
- annotations:
 spec:
 type: ClusterIP
 ports:
@@ -248,8 +458,8 @@
 name: grpc
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 ---
 # Source: thanos/templates/storegateway/service.yaml
@@ -257,14 +467,13 @@
 kind: Service
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 prometheus-operator/monitor: 'true'
- annotations:
 spec:
 type: ClusterIP
 ports:
@@ -279,8 +488,8 @@
 name: grpc
 nodePort: null
 selector:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 ---
 # Source: thanos/templates/bucketweb/deployment.yaml
@@ -288,14 +497,15 @@
 kind: Deployment
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 strategy:
 rollingUpdate:
 maxSurge: 1
@@ -303,20 +513,20 @@
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
 spec:
- serviceAccount: thanos-bucketweb
+ serviceAccountName: thanos-bucketweb
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -324,22 +534,33 @@
 requiredDuringSchedulingIgnoredDuringExecution:
 - labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 topologyKey: kubernetes.io/hostname
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: bucketweb
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.35.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - tools
 - bucket
@@ -375,8 +596,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: objstore-config
 mountPath: /conf
@@ -390,32 +617,33 @@
 kind: Deployment
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 spec:
 replicas: 1
+ revisionHistoryLimit: 10
 strategy:
 type: Recreate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
 spec:
- serviceAccount: thanos-compactor
+ serviceAccountName: thanos-compactor
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -424,23 +652,34 @@
 - podAffinityTerm:
 labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 topologyKey: kubernetes.io/hostname
 weight: 1
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: compactor
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.35.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - compact
 - --log.level=info
@@ -480,8 +719,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: objstore-config
 mountPath: /conf
@@ -500,30 +745,31 @@
 kind: Deployment
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 strategy:
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 spec:
- serviceAccount: thanos-query
+ serviceAccountName: thanos-query
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -532,23 +778,34 @@
 - podAffinityTerm:
 labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 topologyKey: kubernetes.io/hostname
 weight: 1
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: query
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.35.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - query
 - --log.level=info
@@ -559,6 +816,7 @@
 - --endpoint=dnssrv+_grpc._tcp.kube-prometheus-stack-thanos-discovery.monitoring.svc.cluster.local
 - --endpoint=dnssrv+_grpc._tcp.thanos-storegateway.default.svc.cluster.local
 - --endpoint=dnssrv+_grpc._tcp.thanos-ruler.default.svc.cluster.local
+ - --alert.query-url=http://thanos-query.default.svc.cluster.local:9090
 ports:
 - name: http
 containerPort: 10902
@@ -587,8 +845,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 volumes:
 ---
@@ -597,35 +861,36 @@
 kind: StatefulSet
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 podManagementPolicy: OrderedReady
 serviceName: thanos-ruler-headless
 updateStrategy:
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
- checksum/ruler-configuration: 7afcad4879bbb799b132d7e34633031899e8cf18d4ad6762b1b08fbec4111f11
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
+ checksum/ruler-configuration: b35799093da107f873e2a979b49d64483f166909c932e0533e46a3651d5dd847
 spec:
- serviceAccount: thanos-ruler
+ serviceAccountName: thanos-ruler
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -633,22 +898,33 @@
 requiredDuringSchedulingIgnoredDuringExecution:
 - labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 topologyKey: kubernetes.io/hostname
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: ruler
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.35.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - rule
 - --log.level=info
@@ -659,6 +935,7 @@
 - --eval-interval=1m
 - --alertmanagers.url=http://kube-prometheus-stack-alertmanager.monitoring:9093
 - --query=dnssrv+_http._tcp.thanos-query.default.svc.cluster.local
+ - --alert.query-url=http://thanos-query.default.svc.cluster.local:9090
 - --label=replica="$(POD_NAME)"
 - --label=ruler_cluster="${CLUSTER_NAME}"
 - --alert.label-drop=replica
@@ -698,8 +975,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: ruler-config
 mountPath: /conf/rules
@@ -710,7 +993,7 @@
 volumes:
 - name: ruler-config
 configMap:
- name: thanos-ruler-configmap
+ name: thanos-ruler
 - name: objstore-config
 secret:
 secretName: thanos-objstore-secret
@@ -730,34 +1013,35 @@
 kind: StatefulSet
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 spec:
 replicas: 2
+ revisionHistoryLimit: 10
 podManagementPolicy: OrderedReady
 serviceName: thanos-storegateway-headless
 updateStrategy:
 type: RollingUpdate
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 template:
 metadata:
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 annotations:
- checksum/objstore-configuration: a93da925c3c359a7dc21156a96e83bec545b7769f9fc941080d74a9a8b72025a
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
 spec:
- serviceAccount: thanos-storegateway
+ serviceAccountName: thanos-storegateway
 automountServiceAccountToken: true
 affinity:
 podAffinity:
@@ -765,22 +1049,33 @@
 requiredDuringSchedulingIgnoredDuringExecution:
 - labelSelector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 topologyKey: kubernetes.io/hostname
 nodeAffinity:
 securityContext:
 fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
 containers:
 - name: storegateway
- image: docker.io/bitnami/thanos:0.30.1-scratch-r0
+ image: docker.io/bitnami/thanos:0.35.1-debian-12-r1
 imagePullPolicy: "IfNotPresent"
 securityContext:
 allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
 readOnlyRootFilesystem: true
+ runAsGroup: 1001
 runAsNonRoot: true
 runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
 args:
 - store
 - --log.level=info
@@ -817,8 +1112,14 @@
 port: http
 scheme: HTTP
 resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 1024Mi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
 volumeMounts:
 - name: objstore-config
 mountPath: /conf
@@ -844,11 +1145,11 @@
 kind: Ingress
 metadata:
 name: thanos-bucketweb
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 annotations:
 hajimari.io/enable: "false"
@@ -875,11 +1176,11 @@
 kind: Ingress
 metadata:
 name: thanos-compactor
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 annotations:
 hajimari.io/enable: "false"
@@ -906,11 +1207,11 @@
 kind: Ingress
 metadata:
 name: thanos-query
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 annotations:
 hajimari.io/icon: table-search
@@ -937,11 +1238,11 @@
 kind: Ingress
 metadata:
 name: thanos-ruler
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 annotations:
 hajimari.io/enable: "false"
@@ -968,11 +1269,11 @@
 kind: Ingress
 metadata:
 name: thanos-storegateway
- namespace: "default"
+ namespace: default
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 annotations:
 hajimari.io/enable: "false"
@@ -1001,9 +1302,9 @@
 name: thanos-bucketweb
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
 spec:
 endpoints:
@@ -1013,9 +1314,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: bucketweb
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/compactor/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1024,9 +1326,9 @@
 name: thanos-compactor
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
 spec:
 endpoints:
@@ -1036,9 +1338,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: compactor
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/query/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1047,9 +1350,9 @@
 name: thanos-query
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
 spec:
 endpoints:
@@ -1059,9 +1362,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: query
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/ruler/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1070,9 +1374,9 @@
 name: thanos-ruler
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
 spec:
 endpoints:
@@ -1082,9 +1386,10 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: ruler
+ prometheus-operator/monitor: 'true'
 ---
 # Source: thanos/templates/storegateway/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
@@ -1093,9 +1398,9 @@
 name: thanos-storegateway
 namespace: "default"
 labels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
 app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
 spec:
 endpoints:
@@ -1105,6 +1410,7 @@
 - "default"
 selector:
 matchLabels:
- app.kubernetes.io/name: thanos
 app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
 app.kubernetes.io/component: storegateway
+ prometheus-operator/monitor: 'true'

@homeops-gh-bot homeops-gh-bot bot changed the title feat(helm)!: Update chart thanos to 15.7.6 feat(helm)!: Update chart thanos to 15.7.7 Jun 17, 2024
@homeops-gh-bot homeops-gh-bot bot changed the title feat(helm)!: Update chart thanos to 15.7.7 feat(helm)!: Update chart thanos to 15.7.7 - autoclosed Jun 17, 2024
@homeops-gh-bot homeops-gh-bot bot closed this Jun 17, 2024
@homeops-gh-bot homeops-gh-bot bot deleted the renovate/thanos-15.x branch June 17, 2024 15:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
area/cluster Changes made in the cluster directory renovate/helm size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. type/major
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants