fix(helm): update chart metallb to 0.14.5

[renovate]

This PR contains the following updates:

Package	Update	Change
metallb (source)	patch	0.14.3 -> 0.14.5

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

metallb/metallb (metallb)

v0.14.5

Compare Source

v0.14.4

Compare Source

See https://metallb.universe.tf/release-notes/ for details

---

Configuration

📅 Schedule: Branch creation - "after 9am,before 5pm" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[github-actions]

--- kubernetes/apps/networking/metallb/app Kustomization: flux-system/cluster-apps-metallb HelmRelease: networking/metallb

+++ kubernetes/apps/networking/metallb/app Kustomization: flux-system/cluster-apps-metallb HelmRelease: networking/metallb

@@ -12,13 +12,13 @@

     spec:
       chart: metallb
       sourceRef:
         kind: HelmRepository
         name: metallb
         namespace: flux-system
-      version: 0.14.3
+      version: 0.14.5
   install:
     createNamespace: true
     remediation:
       retries: 3
   interval: 15m
   maxHistory: 3

[github-actions]

--- HelmRelease: networking/metallb ConfigMap: networking/metallb-excludel2

+++ HelmRelease: networking/metallb ConfigMap: networking/metallb-excludel2

@@ -1,12 +1,16 @@

 ---
 apiVersion: v1
 kind: ConfigMap
 metadata:
   name: metallb-excludel2
   namespace: networking
+  labels:
+    app.kubernetes.io/name: metallb
+    app.kubernetes.io/instance: metallb
+    app.kubernetes.io/managed-by: Helm
 data:
   excludel2.yaml: |
     announcedInterfacesToExclude:
     - ^docker.*
     - ^cbr.*
     - ^dummy.*
--- HelmRelease: networking/metallb ClusterRole: networking/metallb:controller

+++ HelmRelease: networking/metallb ClusterRole: networking/metallb:controller

@@ -61,13 +61,12 @@

   - watch
 - apiGroups:
   - apiextensions.k8s.io
   resources:
   - customresourcedefinitions
   resourceNames:
-  - addresspools.metallb.io
   - bfdprofiles.metallb.io
   - bgpadvertisements.metallb.io
   - bgppeers.metallb.io
   - ipaddresspools.metallb.io
   - l2advertisements.metallb.io
   - communities.metallb.io
--- HelmRelease: networking/metallb ClusterRole: networking/metallb:speaker

+++ HelmRelease: networking/metallb ClusterRole: networking/metallb:speaker

@@ -31,7 +31,14 @@

   - ''
   resources:
   - events
   verbs:
   - create
   - patch
+- apiGroups:
+  - metallb.io
+  resources:
+  - servicel2statuses
+  - servicel2statuses/status
+  verbs:
+  - '*'
 
--- HelmRelease: networking/metallb Role: networking/metallb-pod-lister

+++ HelmRelease: networking/metallb Role: networking/metallb-pod-lister

@@ -24,20 +24,12 @@

   - list
   - watch
 - apiGroups:
   - ''
   resources:
   - configmaps
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - metallb.io
-  resources:
-  - addresspools
   verbs:
   - get
   - list
   - watch
 - apiGroups:
   - metallb.io
--- HelmRelease: networking/metallb Role: networking/metallb-controller

+++ HelmRelease: networking/metallb Role: networking/metallb-controller

@@ -46,20 +46,12 @@

   - patch
   - update
   - watch
 - apiGroups:
   - metallb.io
   resources:
-  - addresspools
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - metallb.io
-  resources:
   - ipaddresspools
   verbs:
   - get
   - list
   - watch
 - apiGroups:
--- HelmRelease: networking/metallb DaemonSet: networking/metallb-speaker

+++ HelmRelease: networking/metallb DaemonSet: networking/metallb-speaker

@@ -46,13 +46,13 @@

       - name: reloader
         emptyDir: {}
       - name: metrics
         emptyDir: {}
       initContainers:
       - name: cp-frr-files
-        image: quay.io/frrouting/frr:8.5.2
+        image: quay.io/frrouting/frr:9.0.2
         securityContext:
           runAsUser: 100
           runAsGroup: 101
         command:
         - /bin/sh
         - -c
@@ -60,33 +60,33 @@

         volumeMounts:
         - name: frr-startup
           mountPath: /tmp/frr
         - name: frr-conf
           mountPath: /etc/frr
       - name: cp-reloader
-        image: quay.io/metallb/speaker:v0.14.3
+        image: quay.io/metallb/speaker:v0.14.5
         command:
         - /bin/sh
         - -c
         - cp -f /frr-reloader.sh /etc/frr_reloader/
         volumeMounts:
         - name: reloader
           mountPath: /etc/frr_reloader
       - name: cp-metrics
-        image: quay.io/metallb/speaker:v0.14.3
+        image: quay.io/metallb/speaker:v0.14.5
         command:
         - /bin/sh
         - -c
         - cp -f /frr-metrics /etc/frr_metrics/
         volumeMounts:
         - name: metrics
           mountPath: /etc/frr_metrics
       shareProcessNamespace: true
       containers:
       - name: speaker
-        image: quay.io/metallb/speaker:v0.14.3
+        image: quay.io/metallb/speaker:v0.14.5
         args:
         - --port=7472
         - --log-level=info
         env:
         - name: METALLB_NODE_NAME
           valueFrom:
@@ -159,13 +159,13 @@

           capabilities:
             add:
             - NET_ADMIN
             - NET_RAW
             - SYS_ADMIN
             - NET_BIND_SERVICE
-        image: quay.io/frrouting/frr:8.5.2
+        image: quay.io/frrouting/frr:9.0.2
         env:
         - name: TINI_SUBREAPER
           value: 'true'
         volumeMounts:
         - name: frr-sockets
           mountPath: /var/run/frr
@@ -181,13 +181,13 @@

             sleep 1
             attempts=$(( $attempts + 1 ))
           done
           tail -f /etc/frr/frr.log
         livenessProbe:
           httpGet:
-            path: /livez
+            path: livez
             port: 7473
           initialDelaySeconds: 10
           periodSeconds: 10
           timeoutSeconds: 1
           successThreshold: 1
           failureThreshold: 3
@@ -195,24 +195,24 @@

           httpGet:
             path: /livez
             port: 7473
           failureThreshold: 30
           periodSeconds: 5
       - name: reloader
-        image: quay.io/frrouting/frr:8.5.2
+        image: quay.io/frrouting/frr:9.0.2
         command:
         - /etc/frr_reloader/frr-reloader.sh
         volumeMounts:
         - name: frr-sockets
           mountPath: /var/run/frr
         - name: frr-conf
           mountPath: /etc/frr
         - name: reloader
           mountPath: /etc/frr_reloader
       - name: frr-metrics
-        image: quay.io/frrouting/frr:8.5.2
+        image: quay.io/frrouting/frr:9.0.2
         command:
         - /etc/frr_metrics/frr-metrics
         args:
         - --metrics-port=7473
         ports:
         - containerPort: 7473
--- HelmRelease: networking/metallb Deployment: networking/metallb-controller

+++ HelmRelease: networking/metallb Deployment: networking/metallb-controller

@@ -29,17 +29,16 @@

       securityContext:
         fsGroup: 65534
         runAsNonRoot: true
         runAsUser: 65534
       containers:
       - name: controller
-        image: quay.io/metallb/controller:v0.14.3
+        image: quay.io/metallb/controller:v0.14.5
         args:
         - --port=7472
         - --log-level=info
-        - --cert-service-name=metallb-webhook-service
         - --tls-min-version=VersionTLS12
         env:
         - name: METALLB_ML_SECRET_NAME
           value: metallb-memberlist
         - name: METALLB_DEPLOYMENT
           value: metallb-controller
@@ -82,8 +81,8 @@

       nodeSelector:
         kubernetes.io/os: linux
       volumes:
       - name: cert
         secret:
           defaultMode: 420
-          secretName: webhook-server-cert
+          secretName: metallb-webhook-cert