feat(helm)!: Update snapshot-controller (3.0.6 → 4.0.0)

[bot-blake]

This PR contains the following updates:

Package	Update	Change
snapshot-controller	major	3.0.6 -> 4.0.0

---

Release Notes

piraeusdatastore/helm-charts (snapshot-controller)

v4.0.0

Compare Source

Deploys a Snapshot Controller in a cluster. Snapshot Controllers are often bundled with the Kubernetes distribution, this chart is meant for cases where it is not.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[bot-blake]

--- HelmRelease: volsync-system/snapshot-controller ServiceAccount: volsync-system/snapshot-validation-webhook

+++ HelmRelease: volsync-system/snapshot-controller ServiceAccount: volsync-system/snapshot-validation-webhook

@@ -1,10 +0,0 @@

----
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: snapshot-validation-webhook
-  labels:
-    app.kubernetes.io/name: snapshot-validation-webhook
-    app.kubernetes.io/instance: snapshot-controller
-    app.kubernetes.io/managed-by: Helm
-
--- HelmRelease: volsync-system/snapshot-controller ClusterRole: volsync-system/snapshot-controller

+++ HelmRelease: volsync-system/snapshot-controller ClusterRole: volsync-system/snapshot-controller

@@ -59,12 +59,13 @@

   - patch
 - apiGroups:
   - snapshot.storage.k8s.io
   resources:
   - volumesnapshots
   verbs:
+  - create
   - get
   - list
   - watch
   - update
   - patch
   - delete
--- HelmRelease: volsync-system/snapshot-controller ClusterRole: volsync-system/snapshot-validation-webhook

+++ HelmRelease: volsync-system/snapshot-controller ClusterRole: volsync-system/snapshot-validation-webhook

@@ -1,23 +0,0 @@

----
-kind: ClusterRole
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
-  name: snapshot-validation-webhook
-rules:
-- apiGroups:
-  - snapshot.storage.k8s.io
-  resources:
-  - volumesnapshotclasses
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - groupsnapshot.storage.k8s.io
-  resources:
-  - volumegroupsnapshotclasses
-  verbs:
-  - get
-  - list
-  - watch
-
--- HelmRelease: volsync-system/snapshot-controller ClusterRoleBinding: volsync-system/snapshot-validation-webhook

+++ HelmRelease: volsync-system/snapshot-controller ClusterRoleBinding: volsync-system/snapshot-validation-webhook

@@ -1,14 +0,0 @@

----
-kind: ClusterRoleBinding
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
-  name: snapshot-validation-webhook
-subjects:
-- kind: ServiceAccount
-  name: snapshot-validation-webhook
-  namespace: volsync-system
-roleRef:
-  kind: ClusterRole
-  name: snapshot-validation-webhook
-  apiGroup: rbac.authorization.k8s.io
-
--- HelmRelease: volsync-system/snapshot-controller Service: volsync-system/snapshot-validation-webhook

+++ HelmRelease: volsync-system/snapshot-controller Service: volsync-system/snapshot-validation-webhook

@@ -1,20 +0,0 @@

----
-apiVersion: v1
-kind: Service
-metadata:
-  name: snapshot-validation-webhook
-  labels:
-    app.kubernetes.io/name: snapshot-validation-webhook
-    app.kubernetes.io/instance: snapshot-controller
-    app.kubernetes.io/managed-by: Helm
-spec:
-  type: ClusterIP
-  ports:
-  - port: 443
-    targetPort: https
-    protocol: TCP
-    name: https
-  selector:
-    app.kubernetes.io/name: snapshot-validation-webhook
-    app.kubernetes.io/instance: snapshot-controller
-
--- HelmRelease: volsync-system/snapshot-controller Deployment: volsync-system/snapshot-controller

+++ HelmRelease: volsync-system/snapshot-controller Deployment: volsync-system/snapshot-controller

@@ -28,13 +28,13 @@

           capabilities:
             drop:
             - ALL
           readOnlyRootFilesystem: true
           runAsNonRoot: true
           runAsUser: 1000
-        image: registry.k8s.io/sig-storage/snapshot-controller:v8.1.0
+        image: registry.k8s.io/sig-storage/snapshot-controller:v8.2.0
         imagePullPolicy: IfNotPresent
         args:
         - --http-endpoint=:8080
         - --leader-election=true
         - --leader-election-namespace=$(NAMESPACE)
         ports:
--- HelmRelease: volsync-system/snapshot-controller Deployment: volsync-system/snapshot-validation-webhook

+++ HelmRelease: volsync-system/snapshot-controller Deployment: volsync-system/snapshot-validation-webhook

@@ -1,64 +0,0 @@

----
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: snapshot-validation-webhook
-  labels:
-    app.kubernetes.io/name: snapshot-validation-webhook
-    app.kubernetes.io/instance: snapshot-controller
-    app.kubernetes.io/managed-by: Helm
-spec:
-  replicas: 1
-  revisionHistoryLimit: 10
-  selector:
-    matchLabels:
-      app.kubernetes.io/name: snapshot-validation-webhook
-      app.kubernetes.io/instance: snapshot-controller
-  template:
-    metadata:
-      labels:
-        app.kubernetes.io/name: snapshot-validation-webhook
-        app.kubernetes.io/instance: snapshot-controller
-    spec:
-      serviceAccountName: snapshot-validation-webhook
-      securityContext: {}
-      containers:
-      - name: snapshot-validation-webhook
-        securityContext:
-          capabilities:
-            drop:
-            - ALL
-          readOnlyRootFilesystem: true
-          runAsNonRoot: true
-          runAsUser: 1000
-        image: registry.k8s.io/sig-storage/snapshot-validation-webhook:v8.1.0
-        imagePullPolicy: IfNotPresent
-        args:
-        - --port=8443
-        - --tls-cert-file=/etc/snapshot-validation/tls.crt
-        - --tls-private-key-file=/etc/snapshot-validation/tls.key
-        ports:
-        - name: https
-          containerPort: 8443
-          protocol: TCP
-        volumeMounts:
-        - mountPath: /etc/snapshot-validation
-          name: tls-config
-        livenessProbe:
-          httpGet:
-            path: /readyz
-            port: https
-            scheme: HTTPS
-        readinessProbe:
-          httpGet:
-            path: /readyz
-            port: https
-            scheme: HTTPS
-        resources: {}
-      volumes:
-      - name: tls-config
-        secret:
-          secretName: snapshot-validation-webhook-tls
-      hostNetwork: false
-      dnsPolicy: ClusterFirst
-
--- HelmRelease: volsync-system/snapshot-controller ValidatingWebhookConfiguration: volsync-system/snapshot-validation-webhook

+++ HelmRelease: volsync-system/snapshot-controller ValidatingWebhookConfiguration: volsync-system/snapshot-validation-webhook

@@ -1,59 +0,0 @@

----
-apiVersion: admissionregistration.k8s.io/v1
-kind: ValidatingWebhookConfiguration
-metadata:
-  name: snapshot-validation-webhook
-  labels:
-    app.kubernetes.io/name: snapshot-validation-webhook
-    app.kubernetes.io/instance: snapshot-controller
-    app.kubernetes.io/managed-by: Helm
-webhooks:
-- name: snapshot-validation-webhook.snapshot.storage.k8s.io
-  rules:
-  - apiGroups:
-    - snapshot.storage.k8s.io
-    apiVersions:
-    - v1
-    operations:
-    - CREATE
-    - UPDATE
-    resources:
-    - volumesnapshotclasses
-    scope: '*'
-  clientConfig:
-    service:
-      namespace: volsync-system
-      name: snapshot-validation-webhook
-      path: /volumesnapshot
-    caBundle: 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
-  admissionReviewVersions:
-  - v1
-  - v1beta1
-  sideEffects: None
-  failurePolicy: Fail
-  timeoutSeconds: 2
-- name: snapshot-validation-webhook.groupsnapshot.storage.k8s.io
-  rules:
-  - apiGroups:
-    - groupsnapshot.storage.k8s.io
-    apiVersions:
-    - v1alpha1
-    operations:
-    - CREATE
-    - UPDATE
-    resources:
-    - volumegroupsnapshotclasses
-    scope: '*'
-  clientConfig:
-    service:
-      namespace: volsync-system
-      name: snapshot-validation-webhook
-      path: /volumegroupsnapshot
-    caBundle: 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
-  admissionReviewVersions:
-  - v1
-  - v1beta1
-  sideEffects: None
-  failurePolicy: Fail
-  timeoutSeconds: 2
-

[bot-blake]

--- kubernetes/apps/volsync-system/snapshot-controller/app Kustomization: flux-system/snapshot-controller HelmRelease: volsync-system/snapshot-controller

+++ kubernetes/apps/volsync-system/snapshot-controller/app Kustomization: flux-system/snapshot-controller HelmRelease: volsync-system/snapshot-controller

@@ -13,13 +13,13 @@

     spec:
       chart: snapshot-controller
       sourceRef:
         kind: HelmRepository
         name: piraeus
         namespace: flux-system
-      version: 3.0.6
+      version: 4.0.0
   install:
     crds: CreateReplace
     remediation:
       retries: 3
   interval: 30m
   upgrade: