feat(helm/csi-driver-nfs): update v4.6.0 ➼ v4.9.0

[tinfoild]

This PR contains the following updates:

Package	Update	Change
csi-driver-nfs	minor	v4.6.0 -> v4.9.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[cloudflare-workers-and-pages]

Deploying jjgadgets-biohazard with    Cloudflare Pages

Latest commit:	19f0f40
Status:	✅  Deploy successful!
Preview URL:	https://3c8b0c5e.jjgadgets-biohazard.pages.dev
Branch Preview URL:	https://renovate-csi-driver-nfs-4-x.jjgadgets-biohazard.pages.dev

View logs

[tinfoild]

--- kube/deploy/core/storage/csi-driver-nfs/app Kustomization: flux-system/1-core-storage-csi-driver-nfs-app HelmRelease: kube-system/csi-driver-nfs

+++ kube/deploy/core/storage/csi-driver-nfs/app Kustomization: flux-system/1-core-storage-csi-driver-nfs-app HelmRelease: kube-system/csi-driver-nfs

@@ -12,13 +12,13 @@

     spec:
       chart: csi-driver-nfs
       sourceRef:
         kind: HelmRepository
         name: csi-driver-nfs
         namespace: flux-system
-      version: v4.6.0
+      version: v4.9.0
   driftDetection:
     ignore:
     - paths:
       - /spec/replicas
     mode: warn
   install:

[tinfoild]

--- HelmRelease: kube-system/csi-driver-nfs ClusterRole: kube-system/nfs-external-provisioner-role

+++ HelmRelease: kube-system/csi-driver-nfs ClusterRole: kube-system/nfs-external-provisioner-role

@@ -14,12 +14,13 @@

   - persistentvolumes
   verbs:
   - get
   - list
   - watch
   - create
+  - patch
   - delete
 - apiGroups:
   - ''
   resources:
   - persistentvolumeclaims
   verbs:
--- HelmRelease: kube-system/csi-driver-nfs DaemonSet: kube-system/csi-nfs-node

+++ HelmRelease: kube-system/csi-driver-nfs DaemonSet: kube-system/csi-nfs-node

@@ -34,13 +34,13 @@

       nodeSelector:
         kubernetes.io/os: linux
       tolerations:
       - operator: Exists
       containers:
       - name: liveness-probe
-        image: registry.k8s.io/sig-storage/livenessprobe:v2.12.0
+        image: registry.k8s.io/sig-storage/livenessprobe:v2.13.1
         args:
         - --csi-address=/csi/csi.sock
         - --probe-timeout=3s
         - --http-endpoint=localhost:29653
         - --v=2
         imagePullPolicy: IfNotPresent
@@ -56,13 +56,13 @@

         securityContext:
           readOnlyRootFilesystem: true
           capabilities:
             drop:
             - ALL
       - name: node-driver-registrar
-        image: registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.10.0
+        image: registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.11.1
         livenessProbe:
           exec:
             command:
             - /csi-node-driver-registrar
             - --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)
             - --mode=kubelet-registration-probe
@@ -101,13 +101,13 @@

           capabilities:
             add:
             - SYS_ADMIN
             drop:
             - ALL
           allowPrivilegeEscalation: true
-        image: registry.k8s.io/sig-storage/nfsplugin:v4.6.0
+        image: registry.k8s.io/sig-storage/nfsplugin:v4.9.0
         args:
         - --v=5
         - --nodeid=$(NODE_ID)
         - --endpoint=$(CSI_ENDPOINT)
         - --drivername=nfs.csi.k8s.io
         - --mount-permissions=0
--- HelmRelease: kube-system/csi-driver-nfs Deployment: kube-system/csi-nfs-controller

+++ HelmRelease: kube-system/csi-driver-nfs Deployment: kube-system/csi-nfs-controller

@@ -41,19 +41,20 @@

         operator: Exists
       - effect: NoSchedule
         key: node-role.kubernetes.io/control-plane
         operator: Exists
       containers:
       - name: csi-provisioner
-        image: registry.k8s.io/sig-storage/csi-provisioner:v4.0.0
+        image: registry.k8s.io/sig-storage/csi-provisioner:v5.0.2
         args:
         - -v=2
         - --csi-address=$(ADDRESS)
         - --leader-election
         - --leader-election-namespace=kube-system
         - --extra-create-metadata=true
+        - --feature-gates=HonorPVReclaimPolicy=true
         - --timeout=1200s
         env:
         - name: ADDRESS
           value: /csi/csi.sock
         imagePullPolicy: IfNotPresent
         volumeMounts:
@@ -68,13 +69,13 @@

         securityContext:
           readOnlyRootFilesystem: true
           capabilities:
             drop:
             - ALL
       - name: csi-snapshotter
-        image: registry.k8s.io/sig-storage/csi-snapshotter:v6.3.3
+        image: registry.k8s.io/sig-storage/csi-snapshotter:v8.0.1
         args:
         - --v=2
         - --csi-address=$(ADDRESS)
         - --leader-election-namespace=kube-system
         - --leader-election
         - --timeout=1200s
@@ -93,13 +94,13 @@

           mountPath: /csi
         securityContext:
           capabilities:
             drop:
             - ALL
       - name: liveness-probe
-        image: registry.k8s.io/sig-storage/livenessprobe:v2.12.0
+        image: registry.k8s.io/sig-storage/livenessprobe:v2.13.1
         args:
         - --csi-address=/csi/csi.sock
         - --probe-timeout=3s
         - --http-endpoint=localhost:29652
         - --v=2
         imagePullPolicy: IfNotPresent
@@ -115,13 +116,13 @@

         securityContext:
           readOnlyRootFilesystem: true
           capabilities:
             drop:
             - ALL
       - name: nfs
-        image: registry.k8s.io/sig-storage/nfsplugin:v4.6.0
+        image: registry.k8s.io/sig-storage/nfsplugin:v4.9.0
         securityContext:
           privileged: true
           capabilities:
             add:
             - SYS_ADMIN
             drop:
@@ -155,14 +156,12 @@

         volumeMounts:
         - name: pods-mount-dir
           mountPath: /var/lib/kubelet/pods
           mountPropagation: Bidirectional
         - mountPath: /csi
           name: socket-dir
-        - mountPath: /tmp
-          name: tmp-dir
         resources:
           limits:
             memory: 200Mi
           requests:
             cpu: 10m
             memory: 20Mi
@@ -170,9 +169,7 @@

       - name: pods-mount-dir
         hostPath:
           path: /var/lib/kubelet/pods
           type: Directory
       - name: socket-dir
         emptyDir: {}
-      - name: tmp-dir
-        emptyDir: {}