Update Helm release loki to v6.25.0

class/defaults.yml

@@ -19,7 +19,7 @@ parameters:
     globalNodeSelector: {}
 
     charts:
-      loki: "6.12.0"
+      loki: "6.25.0"
 
     alerts:
       additionalRules: {}

tests/golden/defaults/loki/loki/10_helm_loki/loki/templates/backend/clusterrole.yaml

@@ -3,10 +3,9 @@ kind: ClusterRole
 metadata:
   labels:
     app.kubernetes.io/instance: loki
-    app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: loki
-    app.kubernetes.io/version: 3.1.1
-    helm.sh/chart: loki-6.12.0
+    app.kubernetes.io/version: 3.3.2
+    helm.sh/chart: loki-6.25.0
   name: loki-clusterrole
 rules:
   - apiGroups:

tests/golden/defaults/loki/loki/10_helm_loki/loki/templates/backend/clusterrolebinding.yaml

@@ -3,10 +3,9 @@ kind: RoleBinding
 metadata:
   labels:
     app.kubernetes.io/instance: loki
-    app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: loki
-    app.kubernetes.io/version: 3.1.1
-    helm.sh/chart: loki-6.12.0
+    app.kubernetes.io/version: 3.3.2
+    helm.sh/chart: loki-6.25.0
   name: loki-clusterrolebinding
 roleRef:
   apiGroup: rbac.authorization.k8s.io

tests/golden/defaults/loki/loki/10_helm_loki/loki/templates/backend/poddisruptionbudget-backend.yaml

@@ -4,10 +4,9 @@ metadata:
   labels:
     app.kubernetes.io/component: backend
     app.kubernetes.io/instance: loki
-    app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: loki
-    app.kubernetes.io/version: 3.1.1
-    helm.sh/chart: loki-6.12.0
+    app.kubernetes.io/version: 3.3.2
+    helm.sh/chart: loki-6.25.0
   name: loki-backend
   namespace: syn-loki
 spec:

tests/golden/defaults/loki/loki/10_helm_loki/loki/templates/backend/query-scheduler-discovery.yaml

@@ -1,6 +1,7 @@
 apiVersion: v1
 kind: Service
 metadata:
+  annotations: null
   labels:
     app.kubernetes.io/component: backend
     app.kubernetes.io/instance: loki

tests/golden/defaults/loki/loki/10_helm_loki/loki/templates/backend/service-backend-headless.yaml

@@ -17,7 +17,8 @@ spec:
       port: 3100
       protocol: TCP
       targetPort: http-metrics
-    - name: grpc
+    - appProtocol: tcp
+      name: grpc
       port: 9095
       protocol: TCP
       targetPort: grpc

tests/golden/defaults/loki/loki/10_helm_loki/loki/templates/backend/service-backend.yaml

@@ -5,10 +5,9 @@ metadata:
   labels:
     app.kubernetes.io/component: backend
     app.kubernetes.io/instance: loki
-    app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: loki
-    app.kubernetes.io/version: 3.1.1
-    helm.sh/chart: loki-6.12.0
+    app.kubernetes.io/version: 3.3.2
+    helm.sh/chart: loki-6.25.0
   name: loki-backend
   namespace: syn-loki
 spec:

tests/golden/defaults/loki/loki/10_helm_loki/loki/templates/backend/statefulset-backend.yaml

@@ -4,11 +4,10 @@ metadata:
   labels:
     app.kubernetes.io/component: backend
     app.kubernetes.io/instance: loki
-    app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: loki
     app.kubernetes.io/part-of: memberlist
-    app.kubernetes.io/version: 3.1.1
-    helm.sh/chart: loki-6.12.0
+    app.kubernetes.io/version: 3.3.2
+    helm.sh/chart: loki-6.25.0
   name: loki-backend
   namespace: syn-loki
 spec:
@@ -27,7 +26,7 @@ spec:
   template:
     metadata:
       annotations:
-        checksum/config: f75dace34ca1a3d7ac1dc1dacbe31a8fba51ccc104b73c6528308b9781a2ad11
+        checksum/config: 83d21be94a81ae836eb4e5ee4fcce1a791848d8a7cfa31666f5c451b4b8f9f7d
       labels:
         app.kubernetes.io/component: backend
         app.kubernetes.io/instance: loki
@@ -61,6 +60,12 @@ spec:
           image: docker.io/kiwigrid/k8s-sidecar:1.27.5
           imagePullPolicy: IfNotPresent
           name: loki-sc-rules
+          securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
+            readOnlyRootFilesystem: true
           volumeMounts:
             - mountPath: /rules
               name: sc-rules-volume
@@ -72,7 +77,7 @@ spec:
           envFrom:
             - secretRef:
                 name: loki-bucket-secret
-          image: docker.io/grafana/loki:3.1.1
+          image: docker.io/grafana/loki:3.3.2
           imagePullPolicy: IfNotPresent
           name: loki
           ports:

tests/golden/defaults/loki/loki/10_helm_loki/loki/templates/chunks-cache/service-chunks-cache-headless.yaml

@@ -5,10 +5,9 @@ metadata:
   labels:
     app.kubernetes.io/component: memcached-chunks-cache
     app.kubernetes.io/instance: loki
-    app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: loki
-    app.kubernetes.io/version: 3.1.1
-    helm.sh/chart: loki-6.12.0
+    app.kubernetes.io/version: 3.3.2
+    helm.sh/chart: loki-6.25.0
   name: loki-chunks-cache
   namespace: syn-loki
 spec:

tests/golden/defaults/loki/loki/10_helm_loki/loki/templates/chunks-cache/statefulset-chunks-cache.yaml

@@ -5,10 +5,9 @@ metadata:
   labels:
     app.kubernetes.io/component: memcached-chunks-cache
     app.kubernetes.io/instance: loki
-    app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: loki
-    app.kubernetes.io/version: 3.1.1
-    helm.sh/chart: loki-6.12.0
+    app.kubernetes.io/version: 3.3.2
+    helm.sh/chart: loki-6.25.0
     name: memcached-chunks-cache
   name: loki-chunks-cache
   namespace: syn-loki
@@ -82,7 +81,11 @@ spec:
             readOnlyRootFilesystem: true
       initContainers: []
       nodeSelector: {}
-      securityContext: {}
+      securityContext:
+        fsGroup: 11211
+        runAsGroup: 11211
+        runAsNonRoot: true
+        runAsUser: 11211
       serviceAccountName: loki
       terminationGracePeriodSeconds: 60
       tolerations: []

tests/golden/defaults/loki/loki/10_helm_loki/loki/templates/config.yaml

@@ -3,6 +3,14 @@ data:
   config.yaml: |2
 
     auth_enabled: true
+    bloom_build:
+      builder:
+        planner_address: loki-backend-headless.syn-loki.svc.cluster.local:9095
+      enabled: false
+    bloom_gateway:
+      client:
+        addresses: dnssrvnoa+_grpc._tcp.loki-backend-headless.syn-loki.svc.cluster.local
+      enabled: false
     chunk_store_config:
       chunk_cache_config:
         background:
@@ -79,6 +87,8 @@ data:
           s3forcepathstyle: true
           secret_access_key: ${S3_SECRET_ACCESS_KEY}
         type: s3
+      wal:
+        dir: /var/loki/ruler-wal
     runtime_config:
       file: /etc/loki/runtime-config/runtime-config.yaml
     schema_config:
@@ -96,6 +106,8 @@ data:
       http_server_read_timeout: 600s
       http_server_write_timeout: 600s
     storage_config:
+      bloom_shipper:
+        working_directory: /var/loki/data/bloomshipper
       boltdb_shipper:
         index_gateway_client:
           server_address: dns+loki-backend-headless.syn-loki.svc.cluster.local:9095
@@ -112,9 +124,8 @@ kind: ConfigMap
 metadata:
   labels:
     app.kubernetes.io/instance: loki
-    app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: loki
-    app.kubernetes.io/version: 3.1.1
-    helm.sh/chart: loki-6.12.0
+    app.kubernetes.io/version: 3.3.2
+    helm.sh/chart: loki-6.25.0
   name: loki
   namespace: syn-loki

tests/golden/defaults/loki/loki/10_helm_loki/loki/templates/gateway/configmap-gateway.yaml

@@ -58,9 +58,8 @@ metadata:
   labels:
     app.kubernetes.io/component: gateway
     app.kubernetes.io/instance: loki
-    app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: loki
-    app.kubernetes.io/version: 3.1.1
-    helm.sh/chart: loki-6.12.0
+    app.kubernetes.io/version: 3.3.2
+    helm.sh/chart: loki-6.25.0
   name: loki-gateway
   namespace: syn-loki

tests/golden/defaults/loki/loki/10_helm_loki/loki/templates/gateway/deployment-gateway-nginx.yaml

@@ -4,10 +4,9 @@ metadata:
   labels:
     app.kubernetes.io/component: gateway
     app.kubernetes.io/instance: loki
-    app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: loki
-    app.kubernetes.io/version: 3.1.1
-    helm.sh/chart: loki-6.12.0
+    app.kubernetes.io/version: 3.3.2
+    helm.sh/chart: loki-6.25.0
   name: loki-gateway
   namespace: syn-loki
 spec:
@@ -23,7 +22,7 @@ spec:
   template:
     metadata:
       annotations:
-        checksum/config: 4539f20113e95e569b38623fcb64e74bb161d820082cccad80eba1cbefa8d164
+        checksum/config: b27b5a541282c7634e20366004a98fd4e615f2fa731362b12c313344851435c6
       labels:
         app.kubernetes.io/component: gateway
         app.kubernetes.io/instance: loki

tests/golden/defaults/loki/loki/10_helm_loki/loki/templates/gateway/poddisruptionbudget-gateway.yaml

@@ -4,10 +4,9 @@ metadata:
   labels:
     app.kubernetes.io/component: gateway
     app.kubernetes.io/instance: loki
-    app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: loki
-    app.kubernetes.io/version: 3.1.1
-    helm.sh/chart: loki-6.12.0
+    app.kubernetes.io/version: 3.3.2
+    helm.sh/chart: loki-6.25.0
   name: loki-gateway
   namespace: syn-loki
 spec:

tests/golden/defaults/loki/loki/10_helm_loki/loki/templates/gateway/service-gateway.yaml

@@ -5,10 +5,9 @@ metadata:
   labels:
     app.kubernetes.io/component: gateway
     app.kubernetes.io/instance: loki
-    app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: loki
-    app.kubernetes.io/version: 3.1.1
-    helm.sh/chart: loki-6.12.0
+    app.kubernetes.io/version: 3.3.2
+    helm.sh/chart: loki-6.25.0
   name: loki-gateway
   namespace: syn-loki
 spec:

tests/golden/defaults/loki/loki/10_helm_loki/loki/templates/read/deployment-read.yaml

@@ -4,11 +4,10 @@ metadata:
   labels:
     app.kubernetes.io/component: read
     app.kubernetes.io/instance: loki
-    app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: loki
     app.kubernetes.io/part-of: memberlist
-    app.kubernetes.io/version: 3.1.1
-    helm.sh/chart: loki-6.12.0
+    app.kubernetes.io/version: 3.3.2
+    helm.sh/chart: loki-6.25.0
   name: loki-read
   namespace: syn-loki
 spec:
@@ -26,7 +25,7 @@ spec:
   template:
     metadata:
       annotations:
-        checksum/config: f75dace34ca1a3d7ac1dc1dacbe31a8fba51ccc104b73c6528308b9781a2ad11
+        checksum/config: 83d21be94a81ae836eb4e5ee4fcce1a791848d8a7cfa31666f5c451b4b8f9f7d
       labels:
         app.kubernetes.io/component: read
         app.kubernetes.io/instance: loki
@@ -51,7 +50,7 @@ spec:
           envFrom:
             - secretRef:
                 name: loki-bucket-secret
-          image: docker.io/grafana/loki:3.1.1
+          image: docker.io/grafana/loki:3.3.2
           imagePullPolicy: IfNotPresent
           name: loki
           ports:

tests/golden/defaults/loki/loki/10_helm_loki/loki/templates/read/poddisruptionbudget-read.yaml

@@ -4,10 +4,9 @@ metadata:
   labels:
     app.kubernetes.io/component: read
     app.kubernetes.io/instance: loki
-    app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: loki
-    app.kubernetes.io/version: 3.1.1
-    helm.sh/chart: loki-6.12.0
+    app.kubernetes.io/version: 3.3.2
+    helm.sh/chart: loki-6.25.0
   name: loki-read
   namespace: syn-loki
 spec:

tests/golden/defaults/loki/loki/10_helm_loki/loki/templates/read/service-read.yaml

@@ -5,10 +5,9 @@ metadata:
   labels:
     app.kubernetes.io/component: read
     app.kubernetes.io/instance: loki
-    app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: loki
-    app.kubernetes.io/version: 3.1.1
-    helm.sh/chart: loki-6.12.0
+    app.kubernetes.io/version: 3.3.2
+    helm.sh/chart: loki-6.25.0
   name: loki-read
   namespace: syn-loki
 spec:

tests/golden/defaults/loki/loki/10_helm_loki/loki/templates/results-cache/service-results-cache-headless.yaml

@@ -5,10 +5,9 @@ metadata:
   labels:
     app.kubernetes.io/component: memcached-results-cache
     app.kubernetes.io/instance: loki
-    app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: loki
-    app.kubernetes.io/version: 3.1.1
-    helm.sh/chart: loki-6.12.0
+    app.kubernetes.io/version: 3.3.2
+    helm.sh/chart: loki-6.25.0
   name: loki-results-cache
   namespace: syn-loki
 spec:

tests/golden/defaults/loki/loki/10_helm_loki/loki/templates/results-cache/statefulset-results-cache.yaml

@@ -5,10 +5,9 @@ metadata:
   labels:
     app.kubernetes.io/component: memcached-results-cache
     app.kubernetes.io/instance: loki
-    app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: loki
-    app.kubernetes.io/version: 3.1.1
-    helm.sh/chart: loki-6.12.0
+    app.kubernetes.io/version: 3.3.2
+    helm.sh/chart: loki-6.25.0
     name: memcached-results-cache
   name: loki-results-cache
   namespace: syn-loki
@@ -82,7 +81,11 @@ spec:
             readOnlyRootFilesystem: true
       initContainers: []
       nodeSelector: {}
-      securityContext: {}
+      securityContext:
+        fsGroup: 11211
+        runAsGroup: 11211
+        runAsNonRoot: true
+        runAsUser: 11211
       serviceAccountName: loki
       terminationGracePeriodSeconds: 60
       tolerations: []

tests/golden/defaults/loki/loki/10_helm_loki/loki/templates/runtime-configmap.yaml

@@ -6,9 +6,8 @@ kind: ConfigMap
 metadata:
   labels:
     app.kubernetes.io/instance: loki
-    app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: loki
-    app.kubernetes.io/version: 3.1.1
-    helm.sh/chart: loki-6.12.0
+    app.kubernetes.io/version: 3.3.2
+    helm.sh/chart: loki-6.25.0
   name: loki-runtime
   namespace: syn-loki

tests/golden/defaults/loki/loki/10_helm_loki/loki/templates/service-memberlist.yaml

@@ -1,12 +1,12 @@
 apiVersion: v1
 kind: Service
 metadata:
+  annotations: null
   labels:
     app.kubernetes.io/instance: loki
-    app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: loki
-    app.kubernetes.io/version: 3.1.1
-    helm.sh/chart: loki-6.12.0
+    app.kubernetes.io/version: 3.3.2
+    helm.sh/chart: loki-6.25.0
   name: loki-memberlist
   namespace: syn-loki
 spec: