chore(deps): update helm release metallb to v0.14.9

[timtor-bot]

This PR contains the following updates:

Package	Update	Change
metallb (source)	minor	0.13.10 -> 0.14.9

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

metallb/metallb (metallb)

v0.14.9

Compare Source

See the release notes for the details

https://metallb.universe.tf/release-notes/#version-0-14-9

v0.14.8

Compare Source

See the release notes for the details

https://metallb.universe.tf/release-notes/#version-0-14-8

v0.14.7

Compare Source

See the release notes for the details

https://metallb.universe.tf/release-notes/#version-0-14-7

v0.14.6

Compare Source

See the release notes for the details

https://metallb.universe.tf/release-notes/#version-0-14-6

v0.14.5

Compare Source

See the release notes for details:

https://metallb.universe.tf/release-notes/#version-0-14-5

v0.14.4

Compare Source

See https://metallb.universe.tf/release-notes/ for details

v0.14.3

Compare Source

See https://metallb.universe.tf/release-notes/ for details

v0.14.2

Compare Source

See https://metallb.universe.tf/release-notes/ for details

v0.13.12

Compare Source

See https://metallb.universe.tf/release-notes/ for details

v0.13.11

Compare Source

See https://metallb.universe.tf/release-notes/ for details

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[github-actions]

--- kubernetes/metallb-system Kustomization: flux-system/1-metallb-system HelmRelease: metallb-system/metallb

+++ kubernetes/metallb-system Kustomization: flux-system/1-metallb-system HelmRelease: metallb-system/metallb

@@ -11,13 +11,13 @@

   chart:
     spec:
       chart: metallb
       sourceRef:
         kind: HelmRepository
         name: metallb
-      version: 0.13.10
+      version: 0.14.9
   install:
     crds: CreateReplace
   interval: 1h
   maxHistory: 1
   upgrade:
     crds: CreateReplace

[github-actions]

--- HelmRelease: metallb-system/metallb ServiceAccount: metallb-system/metallb-controller

+++ HelmRelease: metallb-system/metallb ServiceAccount: metallb-system/metallb-controller

@@ -1,11 +1,12 @@

 ---
 apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: metallb-controller
+  namespace: metallb-system
   labels:
     app.kubernetes.io/name: metallb
     app.kubernetes.io/instance: metallb
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/component: controller
 
--- HelmRelease: metallb-system/metallb ServiceAccount: metallb-system/metallb-speaker

+++ HelmRelease: metallb-system/metallb ServiceAccount: metallb-system/metallb-speaker

@@ -1,11 +1,12 @@

 ---
 apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: metallb-speaker
+  namespace: metallb-system
   labels:
     app.kubernetes.io/name: metallb
     app.kubernetes.io/instance: metallb
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/component: speaker
 
--- HelmRelease: metallb-system/metallb ConfigMap: metallb-system/metallb-excludel2

+++ HelmRelease: metallb-system/metallb ConfigMap: metallb-system/metallb-excludel2

@@ -1,22 +1,27 @@

 ---
 apiVersion: v1
 kind: ConfigMap
 metadata:
   name: metallb-excludel2
+  namespace: metallb-system
+  labels:
+    app.kubernetes.io/name: metallb
+    app.kubernetes.io/instance: metallb
+    app.kubernetes.io/managed-by: Helm
 data:
   excludel2.yaml: |
     announcedInterfacesToExclude:
-    - docker.*
-    - cbr.*
-    - dummy.*
-    - virbr.*
-    - lxcbr.*
-    - veth.*
-    - lo
+    - ^docker.*
+    - ^cbr.*
+    - ^dummy.*
+    - ^virbr.*
+    - ^lxcbr.*
+    - ^veth.*
+    - ^lo$
     - ^cali.*
     - ^tunl.*
-    - flannel.*
-    - kube-ipvs.*
-    - cni.*
+    - ^flannel.*
+    - ^kube-ipvs.*
+    - ^cni.*
     - ^nodelocaldns.*
 
--- HelmRelease: metallb-system/metallb ClusterRole: metallb-system/metallb:controller

+++ HelmRelease: metallb-system/metallb ClusterRole: metallb-system/metallb:controller

@@ -37,13 +37,12 @@

   - create
   - patch
 - apiGroups:
   - admissionregistration.k8s.io
   resources:
   - validatingwebhookconfigurations
-  - mutatingwebhookconfigurations
   resourceNames:
   - metallb-webhook-configuration
   verbs:
   - create
   - delete
   - get
@@ -52,22 +51,20 @@

   - update
   - watch
 - apiGroups:
   - admissionregistration.k8s.io
   resources:
   - validatingwebhookconfigurations
-  - mutatingwebhookconfigurations
   verbs:
   - list
   - watch
 - apiGroups:
   - apiextensions.k8s.io
   resources:
   - customresourcedefinitions
   resourceNames:
-  - addresspools.metallb.io
   - bfdprofiles.metallb.io
   - bgpadvertisements.metallb.io
   - bgppeers.metallb.io
   - ipaddresspools.metallb.io
   - l2advertisements.metallb.io
   - communities.metallb.io
--- HelmRelease: metallb-system/metallb ClusterRole: metallb-system/metallb:speaker

+++ HelmRelease: metallb-system/metallb ClusterRole: metallb-system/metallb:speaker

@@ -31,7 +31,14 @@

   - ''
   resources:
   - events
   verbs:
   - create
   - patch
+- apiGroups:
+  - metallb.io
+  resources:
+  - servicel2statuses
+  - servicel2statuses/status
+  verbs:
+  - '*'
 
--- HelmRelease: metallb-system/metallb Role: metallb-system/metallb-pod-lister

+++ HelmRelease: metallb-system/metallb Role: metallb-system/metallb-pod-lister

@@ -1,42 +1,36 @@

 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:
   name: metallb-pod-lister
+  namespace: metallb-system
   labels:
     app.kubernetes.io/name: metallb
     app.kubernetes.io/instance: metallb
     app.kubernetes.io/managed-by: Helm
 rules:
 - apiGroups:
   - ''
   resources:
   - pods
   verbs:
   - list
+  - get
 - apiGroups:
   - ''
   resources:
   - secrets
   verbs:
   - get
   - list
   - watch
 - apiGroups:
   - ''
   resources:
   - configmaps
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - metallb.io
-  resources:
-  - addresspools
   verbs:
   - get
   - list
   - watch
 - apiGroups:
   - metallb.io
--- HelmRelease: metallb-system/metallb Role: metallb-system/metallb-controller

+++ HelmRelease: metallb-system/metallb Role: metallb-system/metallb-controller

@@ -1,11 +1,12 @@

 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:
   name: metallb-controller
+  namespace: metallb-system
   labels:
     app.kubernetes.io/name: metallb
     app.kubernetes.io/instance: metallb
     app.kubernetes.io/managed-by: Helm
 rules:
 - apiGroups:
@@ -41,20 +42,12 @@

   - create
   - delete
   - get
   - list
   - patch
   - update
-  - watch
-- apiGroups:
-  - metallb.io
-  resources:
-  - addresspools
-  verbs:
-  - get
-  - list
   - watch
 - apiGroups:
   - metallb.io
   resources:
   - ipaddresspools
   verbs:
--- HelmRelease: metallb-system/metallb RoleBinding: metallb-system/metallb-pod-lister

+++ HelmRelease: metallb-system/metallb RoleBinding: metallb-system/metallb-pod-lister

@@ -1,11 +1,12 @@

 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
 metadata:
   name: metallb-pod-lister
+  namespace: metallb-system
   labels:
     app.kubernetes.io/name: metallb
     app.kubernetes.io/instance: metallb
     app.kubernetes.io/managed-by: Helm
 roleRef:
   apiGroup: rbac.authorization.k8s.io
--- HelmRelease: metallb-system/metallb RoleBinding: metallb-system/metallb-controller

+++ HelmRelease: metallb-system/metallb RoleBinding: metallb-system/metallb-controller

@@ -1,11 +1,12 @@

 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
 metadata:
   name: metallb-controller
+  namespace: metallb-system
   labels:
     app.kubernetes.io/name: metallb
     app.kubernetes.io/instance: metallb
     app.kubernetes.io/managed-by: Helm
 roleRef:
   apiGroup: rbac.authorization.k8s.io
--- HelmRelease: metallb-system/metallb Service: metallb-system/metallb-webhook-service

+++ HelmRelease: metallb-system/metallb Service: metallb-system/metallb-webhook-service

@@ -1,11 +1,12 @@

 ---
 apiVersion: v1
 kind: Service
 metadata:
   name: metallb-webhook-service
+  namespace: metallb-system
   labels:
     app.kubernetes.io/name: metallb
     app.kubernetes.io/instance: metallb
     app.kubernetes.io/managed-by: Helm
 spec:
   ports:
--- HelmRelease: metallb-system/metallb DaemonSet: metallb-system/metallb-speaker

+++ HelmRelease: metallb-system/metallb DaemonSet: metallb-system/metallb-speaker

@@ -1,11 +1,12 @@

 ---
 apiVersion: apps/v1
 kind: DaemonSet
 metadata:
   name: metallb-speaker
+  namespace: metallb-system
   labels:
     app.kubernetes.io/name: metallb
     app.kubernetes.io/instance: metallb
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/component: speaker
 spec:
@@ -34,13 +35,13 @@

       - name: metallb-excludel2
         configMap:
           defaultMode: 256
           name: metallb-excludel2
       containers:
       - name: speaker
-        image: quay.io/metallb/speaker:v0.13.10
+        image: quay.io/metallb/speaker:v0.14.9
         args:
         - --port=7472
         - --log-level=info
         env:
         - name: METALLB_NODE_NAME
           valueFrom:
@@ -57,12 +58,16 @@

         - name: METALLB_ML_LABELS
           value: app.kubernetes.io/name=metallb,app.kubernetes.io/component=speaker
         - name: METALLB_ML_BIND_PORT
           value: '7946'
         - name: METALLB_ML_SECRET_KEY_PATH
           value: /etc/ml_secret_key
+        - name: METALLB_POD_NAME
+          valueFrom:
+            fieldRef:
+              fieldPath: metadata.name
         ports:
         - name: monitoring
           containerPort: 7472
         - name: memberlist-tcp
           containerPort: 7946
           protocol: TCP
--- HelmRelease: metallb-system/metallb Deployment: metallb-system/metallb-controller

+++ HelmRelease: metallb-system/metallb Deployment: metallb-system/metallb-controller

@@ -1,11 +1,12 @@

 ---
 apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: metallb-controller
+  namespace: metallb-system
   labels:
     app.kubernetes.io/name: metallb
     app.kubernetes.io/instance: metallb
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/component: controller
 spec:
@@ -28,17 +29,17 @@

       securityContext:
         fsGroup: 65534
         runAsNonRoot: true
         runAsUser: 65534
       containers:
       - name: controller
-        image: quay.io/metallb/controller:v0.13.10
+        image: quay.io/metallb/controller:v0.14.9
         args:
         - --port=7472
         - --log-level=info
-        - --cert-service-name=metallb-webhook-service
+        - --tls-min-version=VersionTLS12
         env:
         - name: METALLB_ML_SECRET_NAME
           value: metallb-memberlist
         - name: METALLB_DEPLOYMENT
           value: metallb-controller
         ports:
@@ -78,8 +79,8 @@

       nodeSelector:
         kubernetes.io/os: linux
       volumes:
       - name: cert
         secret:
           defaultMode: 420
-          secretName: webhook-server-cert
+          secretName: metallb-webhook-cert
 
--- HelmRelease: metallb-system/metallb ValidatingWebhookConfiguration: metallb-system/metallb-webhook-configuration

+++ HelmRelease: metallb-system/metallb ValidatingWebhookConfiguration: metallb-system/metallb-webhook-configuration

@@ -5,32 +5,12 @@

   name: metallb-webhook-configuration
   labels:
     app.kubernetes.io/name: metallb
     app.kubernetes.io/instance: metallb
     app.kubernetes.io/managed-by: Helm
 webhooks:
-- admissionReviewVersions:
-  - v1
-  clientConfig:
-    service:
-      name: metallb-webhook-service
-      namespace: metallb-system
-      path: /validate-metallb-io-v1beta1-addresspool
-  failurePolicy: Fail
-  name: addresspoolvalidationwebhook.metallb.io
-  rules:
-  - apiGroups:
-    - metallb.io
-    apiVersions:
-    - v1beta1
-    operations:
-    - CREATE
-    - UPDATE
-    resources:
-    - addresspools
-  sideEffects: None
 - admissionReviewVersions:
   - v1
   clientConfig:
     service:
       name: metallb-webhook-service
       namespace: metallb-system