feat(helm): update chart volsync to 0.11.0

[renovate]

This PR contains the following updates:

Package	Update	Change
volsync (source)	minor	0.7.1 -> 0.11.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

backube/volsync (volsync)

v0.11.0

Compare Source

Changed

• Restic updated to v0.17.0
• Syncthing updated to v1.27.12

Added

• moverAffinity added to spec to allow for specifying the podAffinity assigned
  to a VolSync mover pod
• cleanupTempPVC option added for direct users to allow for deleting the
  dynamically provisioned destination PVC after a completed replication.
• cleanupCachePVC option for restic to allow for deleting the cache PVC
  after a completed replication.
• enableFileDeletion restic option to allow for restoring to an existing
  PVC (for example running multiple restores) and delete files that do
  not exist in the backup being restored.

v0.10.0

Compare Source

Fixed

• Fix for rsync-tls to handle replication when there are many files in the pvc root
• Fix for rsync-tls to handle files in the pvc root that start with #

Changed

• Syncthing upgraded to v1.27.8

Added

• Debug mode for mover jobs added

v0.9.1

Compare Source

Fixed

• Allow restic restore from empty or non-initialized path
• Ignore lost+found on restic backup when checking for empty source volume

v0.9.0

Compare Source

Changed

• Syncthing upgraded to v1.27.3
• Restic upgraded to v0.16.4
• Updated release to build on golang 1.21

Added

• Allow customization of resource requirements and limits on mover job containers
• Include additional restic environment variables from the restic secret
  (RESTIC_REST_USERNAME, RESTIC_REST_PASSWORD, AZURE_ENDPOINT_SUFFIX)
• Copy trigger pvc annotations. Allows copy-trigger annotations on the pvc to
  pause/trigger snapshots or clones in a sync
• Include all RCLONE_ env vars from the rclone secret to be set in the rclone
  mover job

Fixed

• Exclude lost+found for restic backups
• Check if ipv6 is enabled before assigning 'STUNNEL_LISTEN_PORT' in mover-rsync-tls
  server script

v0.8.1

Compare Source

Changed

• Updated release to build on golang 1.21

Fixed

• Capture error on restic restore when connecting to repository

v0.8.0

Compare Source

Added

• Restic - ReplicationSource/ReplicationDestination can now specify a CustomCA
  that is from a configmap rather than only from a secret.
• Rclone - ReplicationSource/ReplicationDestination can now specify a CustomCA
  that is contained in either a configmap or secret.
• Restic - New option to run a restic unlock before the backup in the next sync.
• Restic - Allow passing through of RCLONE_ env vars from the restic secret to
  the mover job.
• Volume Populator added for ReplicationDestinations.

Changed

• Syncthing upgraded to v1.25.0
• Restic upgraded to v0.16.2
• Rclone upgraded to v1.63.1

---

Configuration

📅 Schedule: Branch creation - "on saturday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

--- kubernetes HelmRelease: volsync/volsync Deployment: volsync/volsync

+++ kubernetes HelmRelease: volsync/volsync Deployment: volsync/volsync

@@ -33,17 +33,18 @@

         securityContext:
           allowPrivilegeEscalation: false
           capabilities:
             drop:
             - ALL
           readOnlyRootFilesystem: true
-        image: quay.io/brancz/kube-rbac-proxy:v0.14.0
+        image: quay.io/brancz/kube-rbac-proxy:v0.17.1
         args:
         - --secure-listen-address=0.0.0.0:8443
         - --upstream=http://127.0.0.1:8080/
         - --logtostderr=true
+        - --tls-min-version=VersionTLS12
         - --v=0
         - --ignore-paths=/metrics
         ports:
         - containerPort: 8443
           protocol: TCP
           name: https
@@ -56,21 +57,21 @@

             memory: 64Mi
       - name: manager
         args:
         - --health-probe-bind-address=:8081
         - --metrics-bind-address=127.0.0.1:8080
         - --leader-elect
-        - --rclone-container-image=quay.io/backube/volsync:0.7.1
-        - --restic-container-image=quay.io/backube/volsync:0.7.1
-        - --rsync-container-image=quay.io/backube/volsync:0.7.1
-        - --rsync-tls-container-image=quay.io/backube/volsync:0.7.1
-        - --syncthing-container-image=quay.io/backube/volsync:0.7.1
+        - --rclone-container-image=quay.io/backube/volsync:0.10.0
+        - --restic-container-image=quay.io/backube/volsync:0.10.0
+        - --rsync-container-image=quay.io/backube/volsync:0.10.0
+        - --rsync-tls-container-image=quay.io/backube/volsync:0.10.0
+        - --syncthing-container-image=quay.io/backube/volsync:0.10.0
         - --scc-name=volsync-privileged-mover
         command:
         - /manager
-        image: quay.io/backube/volsync:0.7.1
+        image: quay.io/backube/volsync:0.10.0
         imagePullPolicy: IfNotPresent
         livenessProbe:
           httpGet:
             path: /healthz
             port: 8081
           initialDelaySeconds: 15
@@ -81,13 +82,13 @@

             port: 8081
           initialDelaySeconds: 5
           periodSeconds: 10
         resources:
           limits:
             cpu: 1000m
-            memory: 300Mi
+            memory: 1Gi
           requests:
             cpu: 100m
             memory: 64Mi
         securityContext:
           allowPrivilegeEscalation: false
           capabilities:
--- kubernetes HelmRelease: volsync/volsync ClusterRole: volsync/volsync-manager

+++ kubernetes HelmRelease: volsync/volsync ClusterRole: volsync/volsync-manager

@@ -34,12 +34,20 @@

   - patch
   - update
   - watch
 - apiGroups:
   - ''
   resources:
+  - configmaps
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - ''
+  resources:
   - events
   verbs:
   - create
   - patch
   - update
 - apiGroups:
@@ -71,12 +79,33 @@

   - patch
   - update
   - watch
 - apiGroups:
   - ''
   resources:
+  - persistentvolumeclaims/finalizers
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
+- apiGroups:
+  - ''
+  resources:
+  - persistentvolumes
+  verbs:
+  - get
+  - list
+  - patch
+  - watch
+- apiGroups:
+  - ''
+  resources:
   - pods
   verbs:
   - get
   - list
   - watch
 - apiGroups:
@@ -128,12 +157,23 @@

   resources:
   - events
   verbs:
   - create
   - patch
   - update
+- apiGroups:
+  - populator.storage.k8s.io
+  resources:
+  - volumepopulators
+  verbs:
+  - create
+  - get
+  - list
+  - patch
+  - update
+  - watch
 - apiGroups:
   - rbac.authorization.k8s.io
   resources:
   - rolebindings
   verbs:
   - create
@@ -185,12 +225,20 @@

   - get
   - list
   - patch
   - update
   - watch
 - apiGroups:
+  - storage.k8s.io
+  resources:
+  - storageclasses
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
   - volsync.backube
   resources:
   - replicationdestinations
   verbs:
   - create
   - delete

[github-actions]

--- kubernetes/apps/volsync/volsync/app Kustomization: flux-system/cluster-apps-volsync HelmRelease: volsync/volsync

+++ kubernetes/apps/volsync/volsync/app Kustomization: flux-system/cluster-apps-volsync HelmRelease: volsync/volsync

@@ -9,13 +9,13 @@

     spec:
       chart: volsync
       sourceRef:
         kind: HelmRepository
         name: backube
         namespace: flux-system
-      version: 0.7.1
+      version: 0.10.0
   install:
     remediation:
       retries: 3
   interval: 30m
   maxHistory: 2
   postRenderers: