feat(container): update image kube-prometheus-stack to v55.11.0

[obocaman]

This PR contains the following updates:

Package	Update	Change
kube-prometheus-stack (source)	minor	55.1.0 -> 55.11.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Configuration

📅 Schedule: Branch creation - "on saturday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[github-actions]

--- kubernetes/apps/observability/kube-prometheus-stack/app Kustomization: flux-system/cluster-apps-kube-prometheus-stack HelmRelease: observability/kube-prometheus-stack

+++ kubernetes/apps/observability/kube-prometheus-stack/app Kustomization: flux-system/cluster-apps-kube-prometheus-stack HelmRelease: observability/kube-prometheus-stack

@@ -9,13 +9,13 @@

     spec:
       chart: kube-prometheus-stack
       sourceRef:
         kind: HelmRepository
         name: prometheus-community
         namespace: flux-system
-      version: 55.1.0
+      version: 55.11.0
   dependsOn:
   - name: local-path-provisioner
     namespace: kube-system
   install:
     crds: CreateReplace
     createNamespace: true

[github-actions]

--- kubernetes HelmRelease: observability/kube-prometheus-stack Service: observability/kube-prometheus-stack-alertmanager

+++ kubernetes HelmRelease: observability/kube-prometheus-stack Service: observability/kube-prometheus-stack-alertmanager

@@ -22,8 +22,9 @@

     appProtocol: http
     port: 8080
     targetPort: reloader-web
   selector:
     app.kubernetes.io/name: alertmanager
     alertmanager: kube-prometheus-stack
+  sessionAffinity: None
   type: ClusterIP
 
--- kubernetes HelmRelease: observability/kube-prometheus-stack ServiceAccount: observability/kube-prometheus-stack-kube-state-metrics

+++ kubernetes HelmRelease: observability/kube-prometheus-stack ServiceAccount: observability/kube-prometheus-stack-kube-state-metrics

@@ -8,8 +8,7 @@

     app.kubernetes.io/part-of: kube-state-metrics
     app.kubernetes.io/name: kube-state-metrics
     app.kubernetes.io/instance: kube-prometheus-stack
     release: kube-prometheus-stack
   name: kube-prometheus-stack-kube-state-metrics
   namespace: observability
-imagePullSecrets: null
 
--- kubernetes HelmRelease: observability/kube-prometheus-stack Deployment: observability/kube-prometheus-stack-operator

+++ kubernetes HelmRelease: observability/kube-prometheus-stack Deployment: observability/kube-prometheus-stack-operator

@@ -37,22 +37,25 @@

         - --localhost=127.0.0.1
         - --prometheus-config-reloader=quay.io/prometheus-operator/prometheus-config-reloader:v0.70.0
         - --config-reloader-cpu-request=0
         - --config-reloader-cpu-limit=0
         - --config-reloader-memory-request=0
         - --config-reloader-memory-limit=0
-        - --thanos-default-base-image=quay.io/thanos/thanos:v0.32.5
+        - --thanos-default-base-image=quay.io/thanos/thanos:v0.33.0
         - --secret-field-selector=type!=kubernetes.io/dockercfg,type!=kubernetes.io/service-account-token,type!=helm.sh/release.v1
         - --web.enable-tls=true
         - --web.cert-file=/cert/cert
         - --web.key-file=/cert/key
         - --web.listen-address=:10250
         - --web.tls-min-version=VersionTLS13
         ports:
         - containerPort: 10250
           name: https
+        env:
+        - name: GOGC
+          value: '30'
         resources: {}
         securityContext:
           allowPrivilegeEscalation: false
           capabilities:
             drop:
             - ALL
--- kubernetes HelmRelease: observability/kube-prometheus-stack Service: observability/kube-prometheus-stack-prometheus

+++ kubernetes HelmRelease: observability/kube-prometheus-stack Service: observability/kube-prometheus-stack-prometheus

@@ -22,8 +22,9 @@

     port: 8080
     targetPort: reloader-web
   publishNotReadyAddresses: false
   selector:
     app.kubernetes.io/name: prometheus
     operator.prometheus.io/name: kube-prometheus-stack
+  sessionAffinity: None
   type: ClusterIP
 
--- kubernetes HelmRelease: observability/kube-prometheus-stack Prometheus: observability/kube-prometheus-stack

+++ kubernetes HelmRelease: observability/kube-prometheus-stack Prometheus: observability/kube-prometheus-stack

@@ -16,14 +16,14 @@

     alertmanagers:
     - namespace: observability
       name: kube-prometheus-stack-alertmanager
       port: http-web
       pathPrefix: /
       apiVersion: v2
-  image: quay.io/prometheus/prometheus:v2.48.0
-  version: v2.48.0
+  image: quay.io/prometheus/prometheus:v2.48.1
+  version: v2.48.1
   externalLabels:
     cluster: apps
   replicaExternalLabelName: __replica__
   externalUrl: http://prometheus.${SECRET_DOMAIN}/
   paused: false
   replicas: 1
--- kubernetes HelmRelease: observability/kube-prometheus-stack Deployment: observability/kube-prometheus-stack-kube-state-metrics

+++ kubernetes HelmRelease: observability/kube-prometheus-stack Deployment: observability/kube-prometheus-stack-kube-state-metrics

@@ -48,22 +48,32 @@

         imagePullPolicy: IfNotPresent
         image: registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.10.1
         ports:
         - containerPort: 8080
           name: http
         livenessProbe:
+          failureThreshold: 3
           httpGet:
+            httpHeaders: null
             path: /healthz
             port: 8080
+            scheme: HTTP
           initialDelaySeconds: 5
+          periodSeconds: 10
+          successThreshold: 1
           timeoutSeconds: 5
         readinessProbe:
+          failureThreshold: 3
           httpGet:
+            httpHeaders: null
             path: /
             port: 8080
+            scheme: HTTP
           initialDelaySeconds: 5
+          periodSeconds: 10
+          successThreshold: 1
           timeoutSeconds: 5
         securityContext:
           allowPrivilegeEscalation: false
           capabilities:
             drop:
             - ALL