feat(helm)!: Update chart snapshot-controller to 4.0.1

[renovate]

This PR contains the following updates:

Package	Update	Change
snapshot-controller	major	3.0.6 -> 4.0.1

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

piraeusdatastore/helm-charts (snapshot-controller)

v4.0.1

Compare Source

Deploys a Snapshot Controller in a cluster. Snapshot Controllers are often bundled with the Kubernetes distribution, this chart is meant for cases where it is not.

v4.0.0

Compare Source

Deploys a Snapshot Controller in a cluster. Snapshot Controllers are often bundled with the Kubernetes distribution, this chart is meant for cases where it is not.

---

Configuration

📅 Schedule: Branch creation - "after 9am,before 5pm" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

--- HelmRelease: kube-system/snapshot-controller ServiceAccount: kube-system/snapshot-controller

+++ HelmRelease: kube-system/snapshot-controller ServiceAccount: kube-system/snapshot-controller

@@ -1,10 +1,11 @@

 ---
 apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: snapshot-controller
+  namespace: kube-system
   labels:
     app.kubernetes.io/name: snapshot-controller
     app.kubernetes.io/instance: snapshot-controller
     app.kubernetes.io/managed-by: Helm
 
--- HelmRelease: kube-system/snapshot-controller ServiceAccount: kube-system/snapshot-validation-webhook

+++ HelmRelease: kube-system/snapshot-controller ServiceAccount: kube-system/snapshot-validation-webhook

@@ -1,10 +0,0 @@

----
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: snapshot-validation-webhook
-  labels:
-    app.kubernetes.io/name: snapshot-validation-webhook
-    app.kubernetes.io/instance: snapshot-controller
-    app.kubernetes.io/managed-by: Helm
-
--- HelmRelease: kube-system/snapshot-controller ClusterRole: kube-system/snapshot-controller

+++ HelmRelease: kube-system/snapshot-controller ClusterRole: kube-system/snapshot-controller

@@ -59,12 +59,13 @@

   - patch
 - apiGroups:
   - snapshot.storage.k8s.io
   resources:
   - volumesnapshots
   verbs:
+  - create
   - get
   - list
   - watch
   - update
   - patch
   - delete
--- HelmRelease: kube-system/snapshot-controller ClusterRole: kube-system/snapshot-validation-webhook

+++ HelmRelease: kube-system/snapshot-controller ClusterRole: kube-system/snapshot-validation-webhook

@@ -1,23 +0,0 @@

----
-kind: ClusterRole
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
-  name: snapshot-validation-webhook
-rules:
-- apiGroups:
-  - snapshot.storage.k8s.io
-  resources:
-  - volumesnapshotclasses
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - groupsnapshot.storage.k8s.io
-  resources:
-  - volumegroupsnapshotclasses
-  verbs:
-  - get
-  - list
-  - watch
-
--- HelmRelease: kube-system/snapshot-controller ClusterRoleBinding: kube-system/snapshot-validation-webhook

+++ HelmRelease: kube-system/snapshot-controller ClusterRoleBinding: kube-system/snapshot-validation-webhook

@@ -1,14 +0,0 @@

----
-kind: ClusterRoleBinding
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
-  name: snapshot-validation-webhook
-subjects:
-- kind: ServiceAccount
-  name: snapshot-validation-webhook
-  namespace: kube-system
-roleRef:
-  kind: ClusterRole
-  name: snapshot-validation-webhook
-  apiGroup: rbac.authorization.k8s.io
-
--- HelmRelease: kube-system/snapshot-controller Role: kube-system/snapshot-controller

+++ HelmRelease: kube-system/snapshot-controller Role: kube-system/snapshot-controller

@@ -1,11 +1,12 @@

 ---
 kind: Role
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
   name: snapshot-controller
+  namespace: kube-system
 rules:
 - apiGroups:
   - coordination.k8s.io
   resources:
   - leases
   verbs:
--- HelmRelease: kube-system/snapshot-controller RoleBinding: kube-system/snapshot-controller

+++ HelmRelease: kube-system/snapshot-controller RoleBinding: kube-system/snapshot-controller

@@ -1,11 +1,12 @@

 ---
 kind: RoleBinding
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
   name: snapshot-controller
+  namespace: kube-system
 subjects:
 - kind: ServiceAccount
   name: snapshot-controller
 roleRef:
   kind: Role
   name: snapshot-controller
--- HelmRelease: kube-system/snapshot-controller Service: kube-system/snapshot-controller

+++ HelmRelease: kube-system/snapshot-controller Service: kube-system/snapshot-controller

@@ -1,11 +1,12 @@

 ---
 apiVersion: v1
 kind: Service
 metadata:
   name: snapshot-controller
+  namespace: kube-system
   labels:
     app.kubernetes.io/name: snapshot-controller
     app.kubernetes.io/instance: snapshot-controller
     app.kubernetes.io/managed-by: Helm
 spec:
   clusterIP: None
--- HelmRelease: kube-system/snapshot-controller Service: kube-system/snapshot-validation-webhook

+++ HelmRelease: kube-system/snapshot-controller Service: kube-system/snapshot-validation-webhook

@@ -1,20 +0,0 @@

----
-apiVersion: v1
-kind: Service
-metadata:
-  name: snapshot-validation-webhook
-  labels:
-    app.kubernetes.io/name: snapshot-validation-webhook
-    app.kubernetes.io/instance: snapshot-controller
-    app.kubernetes.io/managed-by: Helm
-spec:
-  type: ClusterIP
-  ports:
-  - port: 443
-    targetPort: https
-    protocol: TCP
-    name: https
-  selector:
-    app.kubernetes.io/name: snapshot-validation-webhook
-    app.kubernetes.io/instance: snapshot-controller
-
--- HelmRelease: kube-system/snapshot-controller Deployment: kube-system/snapshot-controller

+++ HelmRelease: kube-system/snapshot-controller Deployment: kube-system/snapshot-controller

@@ -1,11 +1,12 @@

 ---
 apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: snapshot-controller
+  namespace: kube-system
   labels:
     app.kubernetes.io/name: snapshot-controller
     app.kubernetes.io/instance: snapshot-controller
     app.kubernetes.io/managed-by: Helm
 spec:
   replicas: 1
@@ -28,13 +29,13 @@

           capabilities:
             drop:
             - ALL
           readOnlyRootFilesystem: true
           runAsNonRoot: true
           runAsUser: 1000
-        image: registry.k8s.io/sig-storage/snapshot-controller:v8.1.0
+        image: registry.k8s.io/sig-storage/snapshot-controller:v8.2.0
         imagePullPolicy: IfNotPresent
         args:
         - --http-endpoint=:8080
         - --leader-election=true
         - --leader-election-namespace=$(NAMESPACE)
         ports:
--- HelmRelease: kube-system/snapshot-controller Deployment: kube-system/snapshot-validation-webhook

+++ HelmRelease: kube-system/snapshot-controller Deployment: kube-system/snapshot-validation-webhook

@@ -1,64 +0,0 @@

----
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: snapshot-validation-webhook
-  labels:
-    app.kubernetes.io/name: snapshot-validation-webhook
-    app.kubernetes.io/instance: snapshot-controller
-    app.kubernetes.io/managed-by: Helm
-spec:
-  replicas: 1
-  revisionHistoryLimit: 10
-  selector:
-    matchLabels:
-      app.kubernetes.io/name: snapshot-validation-webhook
-      app.kubernetes.io/instance: snapshot-controller
-  template:
-    metadata:
-      labels:
-        app.kubernetes.io/name: snapshot-validation-webhook
-        app.kubernetes.io/instance: snapshot-controller
-    spec:
-      serviceAccountName: snapshot-validation-webhook
-      securityContext: {}
-      containers:
-      - name: snapshot-validation-webhook
-        securityContext:
-          capabilities:
-            drop:
-            - ALL
-          readOnlyRootFilesystem: true
-          runAsNonRoot: true
-          runAsUser: 1000
-        image: registry.k8s.io/sig-storage/snapshot-validation-webhook:v8.1.0
-        imagePullPolicy: IfNotPresent
-        args:
-        - --port=8443
-        - --tls-cert-file=/etc/snapshot-validation/tls.crt
-        - --tls-private-key-file=/etc/snapshot-validation/tls.key
-        ports:
-        - name: https
-          containerPort: 8443
-          protocol: TCP
-        volumeMounts:
-        - mountPath: /etc/snapshot-validation
-          name: tls-config
-        livenessProbe:
-          httpGet:
-            path: /readyz
-            port: https
-            scheme: HTTPS
-        readinessProbe:
-          httpGet:
-            path: /readyz
-            port: https
-            scheme: HTTPS
-        resources: {}
-      volumes:
-      - name: tls-config
-        secret:
-          secretName: snapshot-validation-webhook-tls
-      hostNetwork: false
-      dnsPolicy: ClusterFirst
-
--- HelmRelease: kube-system/snapshot-controller ServiceMonitor: kube-system/snapshot-controller

+++ HelmRelease: kube-system/snapshot-controller ServiceMonitor: kube-system/snapshot-controller

@@ -1,11 +1,12 @@

 ---
 apiVersion: monitoring.coreos.com/v1
 kind: ServiceMonitor
 metadata:
   name: snapshot-controller
+  namespace: kube-system
   labels:
     app.kubernetes.io/name: snapshot-controller
     app.kubernetes.io/instance: snapshot-controller
     app.kubernetes.io/managed-by: Helm
 spec:
   selector:
--- HelmRelease: kube-system/snapshot-controller ValidatingWebhookConfiguration: kube-system/snapshot-validation-webhook

+++ HelmRelease: kube-system/snapshot-controller ValidatingWebhookConfiguration: kube-system/snapshot-validation-webhook

@@ -1,59 +0,0 @@

----
-apiVersion: admissionregistration.k8s.io/v1
-kind: ValidatingWebhookConfiguration
-metadata:
-  name: snapshot-validation-webhook
-  labels:
-    app.kubernetes.io/name: snapshot-validation-webhook
-    app.kubernetes.io/instance: snapshot-controller
-    app.kubernetes.io/managed-by: Helm
-webhooks:
-- name: snapshot-validation-webhook.snapshot.storage.k8s.io
-  rules:
-  - apiGroups:
-    - snapshot.storage.k8s.io
-    apiVersions:
-    - v1
-    operations:
-    - CREATE
-    - UPDATE
-    resources:
-    - volumesnapshotclasses
-    scope: '*'
-  clientConfig:
-    service:
-      namespace: kube-system
-      name: snapshot-validation-webhook
-      path: /volumesnapshot
-    caBundle: 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
-  admissionReviewVersions:
-  - v1
-  - v1beta1
-  sideEffects: None
-  failurePolicy: Fail
-  timeoutSeconds: 2
-- name: snapshot-validation-webhook.groupsnapshot.storage.k8s.io
-  rules:
-  - apiGroups:
-    - groupsnapshot.storage.k8s.io
-    apiVersions:
-    - v1alpha1
-    operations:
-    - CREATE
-    - UPDATE
-    resources:
-    - volumegroupsnapshotclasses
-    scope: '*'
-  clientConfig:
-    service:
-      namespace: kube-system
-      name: snapshot-validation-webhook
-      path: /volumegroupsnapshot
-    caBundle: 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
-  admissionReviewVersions:
-  - v1
-  - v1beta1
-  sideEffects: None
-  failurePolicy: Fail
-  timeoutSeconds: 2
-

[github-actions]

--- kubernetes/apps/kube-system/snapshot-controller/app Kustomization: flux-system/cluster-apps-snapshot-controller HelmRelease: kube-system/snapshot-controller

+++ kubernetes/apps/kube-system/snapshot-controller/app Kustomization: flux-system/cluster-apps-snapshot-controller HelmRelease: kube-system/snapshot-controller

@@ -15,13 +15,13 @@

     spec:
       chart: snapshot-controller
       sourceRef:
         kind: HelmRepository
         name: piraeus
         namespace: flux-system
-      version: 3.0.6
+      version: 4.0.1
   install:
     crds: CreateReplace
     createNamespace: true
     remediation:
       retries: 3
   interval: 15m