Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat(deps): update helm release influxdb to 5.18.1 #2311

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented May 29, 2023

This PR contains the following updates:

Package Update Change
influxdb (source) minor 5.4.6 -> 5.18.1

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

bitnami/charts (influxdb)

v5.18.1

v5.18.0

  • [bitnami/influxdb] feat: ✨ 🔒 Add automatic adaptation for Openshift restricted-v2 SCC (c21a5db), closes #​24094

v5.17.1

v5.17.0

v5.16.3

v5.16.2

v5.16.1

v5.15.0

v5.14.2

v5.14.1

v5.14.0

v5.13.6

v5.13.5

v5.13.4

v5.13.3

v5.13.2

v5.13.0

  • [bitnami/influxdb] fix: 🔒 Move service-account token auto-mount to pod declaration (#​22412) (cb8e6f6), closes #​22412

v5.12.1

v5.12.0

  • [bitnami/influxdb] fix: 🔒 Improve podSecurityContext and containerSecurityContext with essentia (db1eb99), closes #​22130

v5.11.4

v5.11.3

v5.11.2

v5.11.1

v5.11.0

  • [bitnami/*] Remove relative links to non-README sections, add verification for that and update TL;DR (1103633), closes #​20967
  • [bitnami/influxdb] Add support custom endpoint s3 for backups (#​21211) (6e2af96), closes #​21211

v5.10.2

v5.10.1

v5.10.0

v5.9.11

v5.9.10

v5.9.9

v5.9.8

v5.9.7

v5.9.6

v5.9.5

v5.9.4

v5.9.3

v5.9.2

v5.9.1

v5.9.0

v5.8.3

v5.8.2

v5.8.1

v5.8.0

v5.7.3

v5.7.2

v5.7.1

v5.7.0

v5.6.2

v5.6.1

v5.5.2

v5.5.1

v5.4.23

v5.4.22

v5.4.21

v5.4.20

v5.4.19

v5.4.18

v5.4.17

v5.4.16

v5.4.15

v5.4.14

v5.4.13

v5.4.12

v5.4.11

v5.4.10

v5.4.9

v5.4.8

v5.4.7


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested a review from dfroberg as a code owner May 29, 2023 12:07
@github-actions
Copy link

Path: cluster/core/monitoring/influxdb/helm-release.yaml
Version: 5.4.6 -> 5.6.1

@@ -87,7 +87,6 @@
     spec:
       imagePullSecrets:
         - name: regcred
-        - name: regcred
       affinity:
         podAffinity:
         podAntiAffinity:
@@ -98,8 +97,6 @@
                     app.kubernetes.io/name: influxdb
                     app.kubernetes.io/instance: influxdb
                     app.kubernetes.io/component: influxdb
-                namespaces:
-                  - "default"
                 topologyKey: kubernetes.io/hostname
               weight: 1
         nodeAffinity:

@renovate renovate bot changed the title feat(deps): update helm release influxdb to 5.6.1 feat(deps): update helm release influxdb to 5.7.0 Jun 26, 2023
@renovate renovate bot force-pushed the renovate/influxdb-5.x branch from c778e00 to 3add9b2 Compare June 26, 2023 09:09
@github-actions
Copy link

Path: cluster/core/monitoring/influxdb/helm-release.yaml
Version: 5.4.6 -> 5.7.0

@@ -87,7 +87,6 @@
     spec:
       imagePullSecrets:
         - name: regcred
-        - name: regcred
       affinity:
         podAffinity:
         podAntiAffinity:
@@ -98,8 +97,6 @@
                     app.kubernetes.io/name: influxdb
                     app.kubernetes.io/instance: influxdb
                     app.kubernetes.io/component: influxdb
-                namespaces:
-                  - "default"
                 topologyKey: kubernetes.io/hostname
               weight: 1
         nodeAffinity:

1 similar comment
@github-actions
Copy link

Path: cluster/core/monitoring/influxdb/helm-release.yaml
Version: 5.4.6 -> 5.7.0

@@ -87,7 +87,6 @@
     spec:
       imagePullSecrets:
         - name: regcred
-        - name: regcred
       affinity:
         podAffinity:
         podAntiAffinity:
@@ -98,8 +97,6 @@
                     app.kubernetes.io/name: influxdb
                     app.kubernetes.io/instance: influxdb
                     app.kubernetes.io/component: influxdb
-                namespaces:
-                  - "default"
                 topologyKey: kubernetes.io/hostname
               weight: 1
         nodeAffinity:

@renovate renovate bot changed the title feat(deps): update helm release influxdb to 5.7.0 feat(deps): update helm release influxdb to 5.7.1 Jul 6, 2023
@renovate renovate bot force-pushed the renovate/influxdb-5.x branch from 3add9b2 to c5f15bd Compare July 6, 2023 12:06
@github-actions
Copy link

github-actions bot commented Jul 6, 2023

Path: cluster/core/monitoring/influxdb/helm-release.yaml
Version: 5.4.6 -> 5.7.1

@@ -87,7 +87,6 @@
     spec:
       imagePullSecrets:
         - name: regcred
-        - name: regcred
       affinity:
         podAffinity:
         podAntiAffinity:
@@ -98,8 +97,6 @@
                     app.kubernetes.io/name: influxdb
                     app.kubernetes.io/instance: influxdb
                     app.kubernetes.io/component: influxdb
-                namespaces:
-                  - "default"
                 topologyKey: kubernetes.io/hostname
               weight: 1
         nodeAffinity:

@renovate renovate bot changed the title feat(deps): update helm release influxdb to 5.7.1 feat(deps): update helm release influxdb to 5.7.2 Jul 15, 2023
@renovate renovate bot force-pushed the renovate/influxdb-5.x branch from c5f15bd to 5c59a11 Compare July 15, 2023 13:19
@github-actions
Copy link

Path: cluster/core/monitoring/influxdb/helm-release.yaml
Version: 5.4.6 -> 5.7.2

@@ -87,7 +87,6 @@
     spec:
       imagePullSecrets:
         - name: regcred
-        - name: regcred
       affinity:
         podAffinity:
         podAntiAffinity:
@@ -98,8 +97,6 @@
                     app.kubernetes.io/name: influxdb
                     app.kubernetes.io/instance: influxdb
                     app.kubernetes.io/component: influxdb
-                namespaces:
-                  - "default"
                 topologyKey: kubernetes.io/hostname
               weight: 1
         nodeAffinity:

@renovate renovate bot changed the title feat(deps): update helm release influxdb to 5.7.2 feat(deps): update helm release influxdb to 5.7.3 Jul 25, 2023
@renovate renovate bot force-pushed the renovate/influxdb-5.x branch from 5c59a11 to 6bd6d52 Compare July 25, 2023 19:21
@github-actions
Copy link

Path: cluster/core/monitoring/influxdb/helm-release.yaml
Version: 5.4.6 -> 5.7.3

@@ -87,7 +87,6 @@
     spec:
       imagePullSecrets:
         - name: regcred
-        - name: regcred
       affinity:
         podAffinity:
         podAntiAffinity:
@@ -98,8 +97,6 @@
                     app.kubernetes.io/name: influxdb
                     app.kubernetes.io/instance: influxdb
                     app.kubernetes.io/component: influxdb
-                namespaces:
-                  - "default"
                 topologyKey: kubernetes.io/hostname
               weight: 1
         nodeAffinity:

@renovate renovate bot changed the title feat(deps): update helm release influxdb to 5.7.3 feat(deps): update helm release influxdb to 5.8.0 Jul 26, 2023
@renovate renovate bot force-pushed the renovate/influxdb-5.x branch from 6bd6d52 to 448d86b Compare July 26, 2023 18:56
@github-actions
Copy link

Path: cluster/core/monitoring/influxdb/helm-release.yaml
Version: 5.4.6 -> 5.8.0

@@ -87,7 +87,6 @@
     spec:
       imagePullSecrets:
         - name: regcred
-        - name: regcred
       affinity:
         podAffinity:
         podAntiAffinity:
@@ -98,8 +97,6 @@
                     app.kubernetes.io/name: influxdb
                     app.kubernetes.io/instance: influxdb
                     app.kubernetes.io/component: influxdb
-                namespaces:
-                  - "default"
                 topologyKey: kubernetes.io/hostname
               weight: 1
         nodeAffinity:
@@ -115,8 +112,15 @@
           image: docker.io/bitnami/influxdb:2.2.0-debian-10-r12
           imagePullPolicy: "IfNotPresent"
           securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
+            runAsGroup: 0
             runAsNonRoot: true
             runAsUser: 1001
+            seccompProfile:
+              type: RuntimeDefault
           env:
             - name: BITNAMI_DEBUG
               value: "false"

@renovate renovate bot changed the title feat(deps): update helm release influxdb to 5.8.0 feat(deps): update helm release influxdb to 5.8.1 Jul 31, 2023
@renovate renovate bot force-pushed the renovate/influxdb-5.x branch from 448d86b to ed21f6e Compare July 31, 2023 10:54
@github-actions
Copy link

Path: cluster/core/monitoring/influxdb/helm-release.yaml
Version: 5.4.6 -> 5.8.1

@@ -87,7 +87,6 @@
     spec:
       imagePullSecrets:
         - name: regcred
-        - name: regcred
       affinity:
         podAffinity:
         podAntiAffinity:
@@ -98,8 +97,6 @@
                     app.kubernetes.io/name: influxdb
                     app.kubernetes.io/instance: influxdb
                     app.kubernetes.io/component: influxdb
-                namespaces:
-                  - "default"
                 topologyKey: kubernetes.io/hostname
               weight: 1
         nodeAffinity:
@@ -115,8 +112,15 @@
           image: docker.io/bitnami/influxdb:2.2.0-debian-10-r12
           imagePullPolicy: "IfNotPresent"
           securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
+            runAsGroup: 0
             runAsNonRoot: true
             runAsUser: 1001
+            seccompProfile:
+              type: RuntimeDefault
           env:
             - name: BITNAMI_DEBUG
               value: "false"

@renovate renovate bot changed the title feat(deps): update helm release influxdb to 5.8.1 feat(deps): update helm release influxdb to 5.8.2 Aug 17, 2023
@renovate renovate bot force-pushed the renovate/influxdb-5.x branch from ed21f6e to 423f499 Compare August 17, 2023 19:18
@github-actions
Copy link

Path: cluster/core/monitoring/influxdb/helm-release.yaml
Version: 5.4.6 -> 5.8.2

@@ -87,7 +87,6 @@
     spec:
       imagePullSecrets:
         - name: regcred
-        - name: regcred
       affinity:
         podAffinity:
         podAntiAffinity:
@@ -98,8 +97,6 @@
                     app.kubernetes.io/name: influxdb
                     app.kubernetes.io/instance: influxdb
                     app.kubernetes.io/component: influxdb
-                namespaces:
-                  - "default"
                 topologyKey: kubernetes.io/hostname
               weight: 1
         nodeAffinity:
@@ -115,8 +112,15 @@
           image: docker.io/bitnami/influxdb:2.2.0-debian-10-r12
           imagePullPolicy: "IfNotPresent"
           securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
+            runAsGroup: 0
             runAsNonRoot: true
             runAsUser: 1001
+            seccompProfile:
+              type: RuntimeDefault
           env:
             - name: BITNAMI_DEBUG
               value: "false"

@renovate renovate bot changed the title feat(deps): update helm release influxdb to 5.8.2 feat(deps): update helm release influxdb to 5.8.3 Aug 19, 2023
@renovate renovate bot force-pushed the renovate/influxdb-5.x branch from 423f499 to 020e6e5 Compare August 19, 2023 22:20
@github-actions
Copy link

Path: cluster/core/monitoring/influxdb/helm-release.yaml
Version: 5.4.6 -> 5.8.3

@@ -87,7 +87,6 @@
     spec:
       imagePullSecrets:
         - name: regcred
-        - name: regcred
       affinity:
         podAffinity:
         podAntiAffinity:
@@ -98,8 +97,6 @@
                     app.kubernetes.io/name: influxdb
                     app.kubernetes.io/instance: influxdb
                     app.kubernetes.io/component: influxdb
-                namespaces:
-                  - "default"
                 topologyKey: kubernetes.io/hostname
               weight: 1
         nodeAffinity:
@@ -115,8 +112,15 @@
           image: docker.io/bitnami/influxdb:2.2.0-debian-10-r12
           imagePullPolicy: "IfNotPresent"
           securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
+            runAsGroup: 0
             runAsNonRoot: true
             runAsUser: 1001
+            seccompProfile:
+              type: RuntimeDefault
           env:
             - name: BITNAMI_DEBUG
               value: "false"

@renovate renovate bot changed the title feat(deps): update helm release influxdb to 5.8.3 feat(deps): update helm release influxdb to 5.9.0 Aug 23, 2023
@renovate renovate bot force-pushed the renovate/influxdb-5.x branch from 020e6e5 to d9a4d8e Compare August 23, 2023 13:02
@renovate renovate bot changed the title feat(deps): update helm release influxdb to 5.14.0 feat(deps): update helm release influxdb to 5.14.1 Feb 7, 2024
Copy link

github-actions bot commented Feb 7, 2024

Path: cluster/core/monitoring/influxdb/helm-release.yaml
Version: 5.4.6 -> 5.14.1

@@ -5,12 +5,11 @@
   name: influxdb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: influxdb
     app.kubernetes.io/instance: influxdb
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: influxdb
     app.kubernetes.io/component: influxdb
-  annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: influxdb/templates/secrets.yaml
 apiVersion: v1
@@ -19,9 +18,9 @@
   name: influxdb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: influxdb
     app.kubernetes.io/instance: influxdb
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: influxdb
 type: Opaque
 data:
   admin-user-password: "JHtTRUNSRVRfSU5GTFVYX0FETUlOX1BBU1NXT1JEfQ=="
@@ -34,9 +33,9 @@
   name: influxdb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: influxdb
     app.kubernetes.io/instance: influxdb
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: influxdb
     app.kubernetes.io/component: influxdb
 spec:
   type: LoadBalancer
@@ -53,8 +52,8 @@
       protocol: TCP
       name: rpc
   selector:
-    app.kubernetes.io/name: influxdb
     app.kubernetes.io/instance: influxdb
+    app.kubernetes.io/name: influxdb
     app.kubernetes.io/component: influxdb
 ---
 # Source: influxdb/templates/deployment.yaml
@@ -64,9 +63,9 @@
   name: influxdb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: influxdb
     app.kubernetes.io/instance: influxdb
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: influxdb
     app.kubernetes.io/component: influxdb
 spec:
   replicas: 1
@@ -74,20 +73,19 @@
     type: RollingUpdate
   selector:
     matchLabels:
-      app.kubernetes.io/name: influxdb
       app.kubernetes.io/instance: influxdb
+      app.kubernetes.io/name: influxdb
       app.kubernetes.io/component: influxdb
   template:
     metadata:
       labels:
-        app.kubernetes.io/name: influxdb
         app.kubernetes.io/instance: influxdb
         app.kubernetes.io/managed-by: Helm
+        app.kubernetes.io/name: influxdb
         app.kubernetes.io/component: influxdb
     spec:
       imagePullSecrets:
         - name: regcred
-        - name: regcred
       affinity:
         podAffinity:
         podAntiAffinity:
@@ -95,11 +93,9 @@
             - podAffinityTerm:
                 labelSelector:
                   matchLabels:
-                    app.kubernetes.io/name: influxdb
                     app.kubernetes.io/instance: influxdb
+                    app.kubernetes.io/name: influxdb
                     app.kubernetes.io/component: influxdb
-                namespaces:
-                  - "default"
                 topologyKey: kubernetes.io/hostname
               weight: 1
         nodeAffinity:
@@ -108,6 +104,9 @@
         worker: true
       securityContext:
         fsGroup: 1001
+        fsGroupChangePolicy: Always
+        supplementalGroups: []
+        sysctls: []
       serviceAccountName: influxdb
       initContainers:
       containers:
@@ -115,8 +114,17 @@
           image: docker.io/bitnami/influxdb:2.2.0-debian-10-r12
           imagePullPolicy: "IfNotPresent"
           securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
+            privileged: false
+            readOnlyRootFilesystem: false
             runAsNonRoot: true
             runAsUser: 1001
+            seLinuxOptions: null
+            seccompProfile:
+              type: RuntimeDefault
           env:
             - name: BITNAMI_DEBUG
               value: "false"
@@ -210,9 +218,10 @@
   name: influxdb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: influxdb
     app.kubernetes.io/instance: influxdb
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: influxdb
+    app.kubernetes.io/component: influxdb
   annotations:
     kubernetes.io/tls-acme: "true"
     traefik.ingress.kubernetes.io/router.entrypoints: websecure

@renovate renovate bot force-pushed the renovate/influxdb-5.x branch from 394b0b3 to 0ba21bb Compare February 7, 2024 19:18
@renovate renovate bot changed the title feat(deps): update helm release influxdb to 5.14.1 feat(deps): update helm release influxdb to 5.14.2 Feb 7, 2024
Copy link

github-actions bot commented Feb 7, 2024

Path: cluster/core/monitoring/influxdb/helm-release.yaml
Version: 5.4.6 -> 5.14.2

@@ -5,12 +5,11 @@
   name: influxdb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: influxdb
     app.kubernetes.io/instance: influxdb
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: influxdb
     app.kubernetes.io/component: influxdb
-  annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: influxdb/templates/secrets.yaml
 apiVersion: v1
@@ -19,9 +18,9 @@
   name: influxdb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: influxdb
     app.kubernetes.io/instance: influxdb
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: influxdb
 type: Opaque
 data:
   admin-user-password: "JHtTRUNSRVRfSU5GTFVYX0FETUlOX1BBU1NXT1JEfQ=="
@@ -34,9 +33,9 @@
   name: influxdb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: influxdb
     app.kubernetes.io/instance: influxdb
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: influxdb
     app.kubernetes.io/component: influxdb
 spec:
   type: LoadBalancer
@@ -53,8 +52,8 @@
       protocol: TCP
       name: rpc
   selector:
-    app.kubernetes.io/name: influxdb
     app.kubernetes.io/instance: influxdb
+    app.kubernetes.io/name: influxdb
     app.kubernetes.io/component: influxdb
 ---
 # Source: influxdb/templates/deployment.yaml
@@ -64,9 +63,9 @@
   name: influxdb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: influxdb
     app.kubernetes.io/instance: influxdb
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: influxdb
     app.kubernetes.io/component: influxdb
 spec:
   replicas: 1
@@ -74,20 +73,19 @@
     type: RollingUpdate
   selector:
     matchLabels:
-      app.kubernetes.io/name: influxdb
       app.kubernetes.io/instance: influxdb
+      app.kubernetes.io/name: influxdb
       app.kubernetes.io/component: influxdb
   template:
     metadata:
       labels:
-        app.kubernetes.io/name: influxdb
         app.kubernetes.io/instance: influxdb
         app.kubernetes.io/managed-by: Helm
+        app.kubernetes.io/name: influxdb
         app.kubernetes.io/component: influxdb
     spec:
       imagePullSecrets:
         - name: regcred
-        - name: regcred
       affinity:
         podAffinity:
         podAntiAffinity:
@@ -95,11 +93,9 @@
             - podAffinityTerm:
                 labelSelector:
                   matchLabels:
-                    app.kubernetes.io/name: influxdb
                     app.kubernetes.io/instance: influxdb
+                    app.kubernetes.io/name: influxdb
                     app.kubernetes.io/component: influxdb
-                namespaces:
-                  - "default"
                 topologyKey: kubernetes.io/hostname
               weight: 1
         nodeAffinity:
@@ -108,6 +104,9 @@
         worker: true
       securityContext:
         fsGroup: 1001
+        fsGroupChangePolicy: Always
+        supplementalGroups: []
+        sysctls: []
       serviceAccountName: influxdb
       initContainers:
       containers:
@@ -115,8 +114,17 @@
           image: docker.io/bitnami/influxdb:2.2.0-debian-10-r12
           imagePullPolicy: "IfNotPresent"
           securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
+            privileged: false
+            readOnlyRootFilesystem: false
             runAsNonRoot: true
             runAsUser: 1001
+            seLinuxOptions: null
+            seccompProfile:
+              type: RuntimeDefault
           env:
             - name: BITNAMI_DEBUG
               value: "false"
@@ -210,9 +218,10 @@
   name: influxdb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: influxdb
     app.kubernetes.io/instance: influxdb
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: influxdb
+    app.kubernetes.io/component: influxdb
   annotations:
     kubernetes.io/tls-acme: "true"
     traefik.ingress.kubernetes.io/router.entrypoints: websecure

@renovate renovate bot force-pushed the renovate/influxdb-5.x branch from 0ba21bb to 159df06 Compare February 16, 2024 16:37
@renovate renovate bot changed the title feat(deps): update helm release influxdb to 5.14.2 feat(deps): update helm release influxdb to 5.15.0 Feb 16, 2024
Copy link

Path: cluster/core/monitoring/influxdb/helm-release.yaml
Version: 5.4.6 -> 5.15.0

@@ -5,12 +5,11 @@
   name: influxdb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: influxdb
     app.kubernetes.io/instance: influxdb
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: influxdb
     app.kubernetes.io/component: influxdb
-  annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: influxdb/templates/secrets.yaml
 apiVersion: v1
@@ -19,9 +18,9 @@
   name: influxdb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: influxdb
     app.kubernetes.io/instance: influxdb
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: influxdb
 type: Opaque
 data:
   admin-user-password: "JHtTRUNSRVRfSU5GTFVYX0FETUlOX1BBU1NXT1JEfQ=="
@@ -34,9 +33,9 @@
   name: influxdb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: influxdb
     app.kubernetes.io/instance: influxdb
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: influxdb
     app.kubernetes.io/component: influxdb
 spec:
   type: LoadBalancer
@@ -53,8 +52,8 @@
       protocol: TCP
       name: rpc
   selector:
-    app.kubernetes.io/name: influxdb
     app.kubernetes.io/instance: influxdb
+    app.kubernetes.io/name: influxdb
     app.kubernetes.io/component: influxdb
 ---
 # Source: influxdb/templates/deployment.yaml
@@ -64,9 +63,9 @@
   name: influxdb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: influxdb
     app.kubernetes.io/instance: influxdb
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: influxdb
     app.kubernetes.io/component: influxdb
 spec:
   replicas: 1
@@ -74,20 +73,19 @@
     type: RollingUpdate
   selector:
     matchLabels:
-      app.kubernetes.io/name: influxdb
       app.kubernetes.io/instance: influxdb
+      app.kubernetes.io/name: influxdb
       app.kubernetes.io/component: influxdb
   template:
     metadata:
       labels:
-        app.kubernetes.io/name: influxdb
         app.kubernetes.io/instance: influxdb
         app.kubernetes.io/managed-by: Helm
+        app.kubernetes.io/name: influxdb
         app.kubernetes.io/component: influxdb
     spec:
       imagePullSecrets:
         - name: regcred
-        - name: regcred
       affinity:
         podAffinity:
         podAntiAffinity:
@@ -95,11 +93,9 @@
             - podAffinityTerm:
                 labelSelector:
                   matchLabels:
-                    app.kubernetes.io/name: influxdb
                     app.kubernetes.io/instance: influxdb
+                    app.kubernetes.io/name: influxdb
                     app.kubernetes.io/component: influxdb
-                namespaces:
-                  - "default"
                 topologyKey: kubernetes.io/hostname
               weight: 1
         nodeAffinity:
@@ -108,6 +104,9 @@
         worker: true
       securityContext:
         fsGroup: 1001
+        fsGroupChangePolicy: Always
+        supplementalGroups: []
+        sysctls: []
       serviceAccountName: influxdb
       initContainers:
       containers:
@@ -115,8 +114,17 @@
           image: docker.io/bitnami/influxdb:2.2.0-debian-10-r12
           imagePullPolicy: "IfNotPresent"
           securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
+            privileged: false
+            readOnlyRootFilesystem: false
             runAsNonRoot: true
             runAsUser: 1001
+            seLinuxOptions: null
+            seccompProfile:
+              type: RuntimeDefault
           env:
             - name: BITNAMI_DEBUG
               value: "false"
@@ -210,9 +218,10 @@
   name: influxdb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: influxdb
     app.kubernetes.io/instance: influxdb
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: influxdb
+    app.kubernetes.io/component: influxdb
   annotations:
     kubernetes.io/tls-acme: "true"
     traefik.ingress.kubernetes.io/router.entrypoints: websecure

@renovate renovate bot force-pushed the renovate/influxdb-5.x branch from 159df06 to 9a90f9b Compare February 21, 2024 13:39
@renovate renovate bot changed the title feat(deps): update helm release influxdb to 5.15.0 feat(deps): update helm release influxdb to 5.16.1 Feb 21, 2024
Copy link

Path: cluster/core/monitoring/influxdb/helm-release.yaml
Version: 5.4.6 -> 5.16.1

@@ -5,12 +5,11 @@
   name: influxdb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: influxdb
     app.kubernetes.io/instance: influxdb
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: influxdb
     app.kubernetes.io/component: influxdb
-  annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: influxdb/templates/secrets.yaml
 apiVersion: v1
@@ -19,9 +18,9 @@
   name: influxdb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: influxdb
     app.kubernetes.io/instance: influxdb
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: influxdb
 type: Opaque
 data:
   admin-user-password: "JHtTRUNSRVRfSU5GTFVYX0FETUlOX1BBU1NXT1JEfQ=="
@@ -34,9 +33,9 @@
   name: influxdb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: influxdb
     app.kubernetes.io/instance: influxdb
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: influxdb
     app.kubernetes.io/component: influxdb
 spec:
   type: LoadBalancer
@@ -53,8 +52,8 @@
       protocol: TCP
       name: rpc
   selector:
-    app.kubernetes.io/name: influxdb
     app.kubernetes.io/instance: influxdb
+    app.kubernetes.io/name: influxdb
     app.kubernetes.io/component: influxdb
 ---
 # Source: influxdb/templates/deployment.yaml
@@ -64,9 +63,9 @@
   name: influxdb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: influxdb
     app.kubernetes.io/instance: influxdb
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: influxdb
     app.kubernetes.io/component: influxdb
 spec:
   replicas: 1
@@ -74,20 +73,19 @@
     type: RollingUpdate
   selector:
     matchLabels:
-      app.kubernetes.io/name: influxdb
       app.kubernetes.io/instance: influxdb
+      app.kubernetes.io/name: influxdb
       app.kubernetes.io/component: influxdb
   template:
     metadata:
       labels:
-        app.kubernetes.io/name: influxdb
         app.kubernetes.io/instance: influxdb
         app.kubernetes.io/managed-by: Helm
+        app.kubernetes.io/name: influxdb
         app.kubernetes.io/component: influxdb
     spec:
       imagePullSecrets:
         - name: regcred
-        - name: regcred
       affinity:
         podAffinity:
         podAntiAffinity:
@@ -95,11 +93,9 @@
             - podAffinityTerm:
                 labelSelector:
                   matchLabels:
-                    app.kubernetes.io/name: influxdb
                     app.kubernetes.io/instance: influxdb
+                    app.kubernetes.io/name: influxdb
                     app.kubernetes.io/component: influxdb
-                namespaces:
-                  - "default"
                 topologyKey: kubernetes.io/hostname
               weight: 1
         nodeAffinity:
@@ -108,6 +104,9 @@
         worker: true
       securityContext:
         fsGroup: 1001
+        fsGroupChangePolicy: Always
+        supplementalGroups: []
+        sysctls: []
       serviceAccountName: influxdb
       initContainers:
       containers:
@@ -115,8 +114,17 @@
           image: docker.io/bitnami/influxdb:2.2.0-debian-10-r12
           imagePullPolicy: "IfNotPresent"
           securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
+            privileged: false
+            readOnlyRootFilesystem: false
             runAsNonRoot: true
             runAsUser: 1001
+            seLinuxOptions: null
+            seccompProfile:
+              type: RuntimeDefault
           env:
             - name: BITNAMI_DEBUG
               value: "false"
@@ -210,9 +218,10 @@
   name: influxdb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: influxdb
     app.kubernetes.io/instance: influxdb
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: influxdb
+    app.kubernetes.io/component: influxdb
   annotations:
     kubernetes.io/tls-acme: "true"
     traefik.ingress.kubernetes.io/router.entrypoints: websecure

@renovate renovate bot force-pushed the renovate/influxdb-5.x branch from 9a90f9b to 409309c Compare February 21, 2024 15:43
@renovate renovate bot changed the title feat(deps): update helm release influxdb to 5.16.1 feat(deps): update helm release influxdb to 5.16.2 Feb 21, 2024
Copy link

Path: cluster/core/monitoring/influxdb/helm-release.yaml
Version: 5.4.6 -> 5.16.2

@@ -5,12 +5,11 @@
   name: influxdb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: influxdb
     app.kubernetes.io/instance: influxdb
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: influxdb
     app.kubernetes.io/component: influxdb
-  annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: influxdb/templates/secrets.yaml
 apiVersion: v1
@@ -19,9 +18,9 @@
   name: influxdb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: influxdb
     app.kubernetes.io/instance: influxdb
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: influxdb
 type: Opaque
 data:
   admin-user-password: "JHtTRUNSRVRfSU5GTFVYX0FETUlOX1BBU1NXT1JEfQ=="
@@ -34,9 +33,9 @@
   name: influxdb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: influxdb
     app.kubernetes.io/instance: influxdb
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: influxdb
     app.kubernetes.io/component: influxdb
 spec:
   type: LoadBalancer
@@ -53,8 +52,8 @@
       protocol: TCP
       name: rpc
   selector:
-    app.kubernetes.io/name: influxdb
     app.kubernetes.io/instance: influxdb
+    app.kubernetes.io/name: influxdb
     app.kubernetes.io/component: influxdb
 ---
 # Source: influxdb/templates/deployment.yaml
@@ -64,9 +63,9 @@
   name: influxdb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: influxdb
     app.kubernetes.io/instance: influxdb
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: influxdb
     app.kubernetes.io/component: influxdb
 spec:
   replicas: 1
@@ -74,20 +73,19 @@
     type: RollingUpdate
   selector:
     matchLabels:
-      app.kubernetes.io/name: influxdb
       app.kubernetes.io/instance: influxdb
+      app.kubernetes.io/name: influxdb
       app.kubernetes.io/component: influxdb
   template:
     metadata:
       labels:
-        app.kubernetes.io/name: influxdb
         app.kubernetes.io/instance: influxdb
         app.kubernetes.io/managed-by: Helm
+        app.kubernetes.io/name: influxdb
         app.kubernetes.io/component: influxdb
     spec:
       imagePullSecrets:
         - name: regcred
-        - name: regcred
       affinity:
         podAffinity:
         podAntiAffinity:
@@ -95,11 +93,9 @@
             - podAffinityTerm:
                 labelSelector:
                   matchLabels:
-                    app.kubernetes.io/name: influxdb
                     app.kubernetes.io/instance: influxdb
+                    app.kubernetes.io/name: influxdb
                     app.kubernetes.io/component: influxdb
-                namespaces:
-                  - "default"
                 topologyKey: kubernetes.io/hostname
               weight: 1
         nodeAffinity:
@@ -108,6 +104,9 @@
         worker: true
       securityContext:
         fsGroup: 1001
+        fsGroupChangePolicy: Always
+        supplementalGroups: []
+        sysctls: []
       serviceAccountName: influxdb
       initContainers:
       containers:
@@ -115,8 +114,17 @@
           image: docker.io/bitnami/influxdb:2.2.0-debian-10-r12
           imagePullPolicy: "IfNotPresent"
           securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
+            privileged: false
+            readOnlyRootFilesystem: false
             runAsNonRoot: true
             runAsUser: 1001
+            seLinuxOptions: null
+            seccompProfile:
+              type: RuntimeDefault
           env:
             - name: BITNAMI_DEBUG
               value: "false"
@@ -210,9 +218,10 @@
   name: influxdb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: influxdb
     app.kubernetes.io/instance: influxdb
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: influxdb
+    app.kubernetes.io/component: influxdb
   annotations:
     kubernetes.io/tls-acme: "true"
     traefik.ingress.kubernetes.io/router.entrypoints: websecure

@renovate renovate bot force-pushed the renovate/influxdb-5.x branch from 409309c to 4d148f6 Compare February 21, 2024 18:39
@renovate renovate bot changed the title feat(deps): update helm release influxdb to 5.16.2 feat(deps): update helm release influxdb to 5.16.3 Feb 21, 2024
Copy link

Path: cluster/core/monitoring/influxdb/helm-release.yaml
Version: 5.4.6 -> 5.16.3

@@ -5,12 +5,11 @@
   name: influxdb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: influxdb
     app.kubernetes.io/instance: influxdb
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: influxdb
     app.kubernetes.io/component: influxdb
-  annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: influxdb/templates/secrets.yaml
 apiVersion: v1
@@ -19,9 +18,9 @@
   name: influxdb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: influxdb
     app.kubernetes.io/instance: influxdb
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: influxdb
 type: Opaque
 data:
   admin-user-password: "JHtTRUNSRVRfSU5GTFVYX0FETUlOX1BBU1NXT1JEfQ=="
@@ -34,9 +33,9 @@
   name: influxdb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: influxdb
     app.kubernetes.io/instance: influxdb
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: influxdb
     app.kubernetes.io/component: influxdb
 spec:
   type: LoadBalancer
@@ -53,8 +52,8 @@
       protocol: TCP
       name: rpc
   selector:
-    app.kubernetes.io/name: influxdb
     app.kubernetes.io/instance: influxdb
+    app.kubernetes.io/name: influxdb
     app.kubernetes.io/component: influxdb
 ---
 # Source: influxdb/templates/deployment.yaml
@@ -64,9 +63,9 @@
   name: influxdb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: influxdb
     app.kubernetes.io/instance: influxdb
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: influxdb
     app.kubernetes.io/component: influxdb
 spec:
   replicas: 1
@@ -74,20 +73,19 @@
     type: RollingUpdate
   selector:
     matchLabels:
-      app.kubernetes.io/name: influxdb
       app.kubernetes.io/instance: influxdb
+      app.kubernetes.io/name: influxdb
       app.kubernetes.io/component: influxdb
   template:
     metadata:
       labels:
-        app.kubernetes.io/name: influxdb
         app.kubernetes.io/instance: influxdb
         app.kubernetes.io/managed-by: Helm
+        app.kubernetes.io/name: influxdb
         app.kubernetes.io/component: influxdb
     spec:
       imagePullSecrets:
         - name: regcred
-        - name: regcred
       affinity:
         podAffinity:
         podAntiAffinity:
@@ -95,11 +93,9 @@
             - podAffinityTerm:
                 labelSelector:
                   matchLabels:
-                    app.kubernetes.io/name: influxdb
                     app.kubernetes.io/instance: influxdb
+                    app.kubernetes.io/name: influxdb
                     app.kubernetes.io/component: influxdb
-                namespaces:
-                  - "default"
                 topologyKey: kubernetes.io/hostname
               weight: 1
         nodeAffinity:
@@ -108,6 +104,9 @@
         worker: true
       securityContext:
         fsGroup: 1001
+        fsGroupChangePolicy: Always
+        supplementalGroups: []
+        sysctls: []
       serviceAccountName: influxdb
       initContainers:
       containers:
@@ -115,8 +114,17 @@
           image: docker.io/bitnami/influxdb:2.2.0-debian-10-r12
           imagePullPolicy: "IfNotPresent"
           securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
+            privileged: false
+            readOnlyRootFilesystem: false
             runAsNonRoot: true
             runAsUser: 1001
+            seLinuxOptions: null
+            seccompProfile:
+              type: RuntimeDefault
           env:
             - name: BITNAMI_DEBUG
               value: "false"
@@ -210,9 +218,10 @@
   name: influxdb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: influxdb
     app.kubernetes.io/instance: influxdb
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: influxdb
+    app.kubernetes.io/component: influxdb
   annotations:
     kubernetes.io/tls-acme: "true"
     traefik.ingress.kubernetes.io/router.entrypoints: websecure

@renovate renovate bot force-pushed the renovate/influxdb-5.x branch from 4d148f6 to 2e80a5a Compare February 22, 2024 12:22
@renovate renovate bot changed the title feat(deps): update helm release influxdb to 5.16.3 feat(deps): update helm release influxdb to 5.17.0 Feb 22, 2024
Copy link

Path: cluster/core/monitoring/influxdb/helm-release.yaml
Version: 5.4.6 -> 5.17.0

@@ -5,12 +5,11 @@
   name: influxdb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: influxdb
     app.kubernetes.io/instance: influxdb
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: influxdb
     app.kubernetes.io/component: influxdb
-  annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: influxdb/templates/secrets.yaml
 apiVersion: v1
@@ -19,9 +18,9 @@
   name: influxdb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: influxdb
     app.kubernetes.io/instance: influxdb
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: influxdb
 type: Opaque
 data:
   admin-user-password: "JHtTRUNSRVRfSU5GTFVYX0FETUlOX1BBU1NXT1JEfQ=="
@@ -34,9 +33,9 @@
   name: influxdb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: influxdb
     app.kubernetes.io/instance: influxdb
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: influxdb
     app.kubernetes.io/component: influxdb
 spec:
   type: LoadBalancer
@@ -53,8 +52,8 @@
       protocol: TCP
       name: rpc
   selector:
-    app.kubernetes.io/name: influxdb
     app.kubernetes.io/instance: influxdb
+    app.kubernetes.io/name: influxdb
     app.kubernetes.io/component: influxdb
 ---
 # Source: influxdb/templates/deployment.yaml
@@ -64,9 +63,9 @@
   name: influxdb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: influxdb
     app.kubernetes.io/instance: influxdb
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: influxdb
     app.kubernetes.io/component: influxdb
 spec:
   replicas: 1
@@ -74,20 +73,19 @@
     type: RollingUpdate
   selector:
     matchLabels:
-      app.kubernetes.io/name: influxdb
       app.kubernetes.io/instance: influxdb
+      app.kubernetes.io/name: influxdb
       app.kubernetes.io/component: influxdb
   template:
     metadata:
       labels:
-        app.kubernetes.io/name: influxdb
         app.kubernetes.io/instance: influxdb
         app.kubernetes.io/managed-by: Helm
+        app.kubernetes.io/name: influxdb
         app.kubernetes.io/component: influxdb
     spec:
       imagePullSecrets:
         - name: regcred
-        - name: regcred
       affinity:
         podAffinity:
         podAntiAffinity:
@@ -95,11 +93,9 @@
             - podAffinityTerm:
                 labelSelector:
                   matchLabels:
-                    app.kubernetes.io/name: influxdb
                     app.kubernetes.io/instance: influxdb
+                    app.kubernetes.io/name: influxdb
                     app.kubernetes.io/component: influxdb
-                namespaces:
-                  - "default"
                 topologyKey: kubernetes.io/hostname
               weight: 1
         nodeAffinity:
@@ -108,6 +104,9 @@
         worker: true
       securityContext:
         fsGroup: 1001
+        fsGroupChangePolicy: Always
+        supplementalGroups: []
+        sysctls: []
       serviceAccountName: influxdb
       initContainers:
       containers:
@@ -115,8 +114,18 @@
           image: docker.io/bitnami/influxdb:2.2.0-debian-10-r12
           imagePullPolicy: "IfNotPresent"
           securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
+            privileged: false
+            readOnlyRootFilesystem: false
+            runAsGroup: 0
             runAsNonRoot: true
             runAsUser: 1001
+            seLinuxOptions: null
+            seccompProfile:
+              type: RuntimeDefault
           env:
             - name: BITNAMI_DEBUG
               value: "false"
@@ -196,9 +205,17 @@
               cpu: 50m
               memory: 263M
           volumeMounts:
+            - name: empty-dir
+              mountPath: /tmp
+              subPath: tmp-dir
+            - name: empty-dir
+              mountPath: /opt/bitnami/influxdb/etc
+              mountPath: app-conf-dir
             - name: data
               mountPath: /bitnami/influxdb
       volumes:
+        - name: empty-dir
+          emptyDir: {}
         - name: data
           persistentVolumeClaim:
             claimName: influx-db-v1
@@ -210,9 +227,10 @@
   name: influxdb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: influxdb
     app.kubernetes.io/instance: influxdb
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: influxdb
+    app.kubernetes.io/component: influxdb
   annotations:
     kubernetes.io/tls-acme: "true"
     traefik.ingress.kubernetes.io/router.entrypoints: websecure

@renovate renovate bot force-pushed the renovate/influxdb-5.x branch from 2e80a5a to b901a09 Compare February 26, 2024 11:21
@renovate renovate bot changed the title feat(deps): update helm release influxdb to 5.17.0 feat(deps): update helm release influxdb to 5.17.1 Feb 26, 2024
Copy link

Path: cluster/core/monitoring/influxdb/helm-release.yaml
Version: 5.4.6 -> 5.17.1

@@ -5,12 +5,11 @@
   name: influxdb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: influxdb
     app.kubernetes.io/instance: influxdb
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: influxdb
     app.kubernetes.io/component: influxdb
-  annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: influxdb/templates/secrets.yaml
 apiVersion: v1
@@ -19,9 +18,9 @@
   name: influxdb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: influxdb
     app.kubernetes.io/instance: influxdb
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: influxdb
 type: Opaque
 data:
   admin-user-password: "JHtTRUNSRVRfSU5GTFVYX0FETUlOX1BBU1NXT1JEfQ=="
@@ -34,9 +33,9 @@
   name: influxdb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: influxdb
     app.kubernetes.io/instance: influxdb
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: influxdb
     app.kubernetes.io/component: influxdb
 spec:
   type: LoadBalancer
@@ -53,8 +52,8 @@
       protocol: TCP
       name: rpc
   selector:
-    app.kubernetes.io/name: influxdb
     app.kubernetes.io/instance: influxdb
+    app.kubernetes.io/name: influxdb
     app.kubernetes.io/component: influxdb
 ---
 # Source: influxdb/templates/deployment.yaml
@@ -64,9 +63,9 @@
   name: influxdb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: influxdb
     app.kubernetes.io/instance: influxdb
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: influxdb
     app.kubernetes.io/component: influxdb
 spec:
   replicas: 1
@@ -74,20 +73,19 @@
     type: RollingUpdate
   selector:
     matchLabels:
-      app.kubernetes.io/name: influxdb
       app.kubernetes.io/instance: influxdb
+      app.kubernetes.io/name: influxdb
       app.kubernetes.io/component: influxdb
   template:
     metadata:
       labels:
-        app.kubernetes.io/name: influxdb
         app.kubernetes.io/instance: influxdb
         app.kubernetes.io/managed-by: Helm
+        app.kubernetes.io/name: influxdb
         app.kubernetes.io/component: influxdb
     spec:
       imagePullSecrets:
         - name: regcred
-        - name: regcred
       affinity:
         podAffinity:
         podAntiAffinity:
@@ -95,11 +93,9 @@
             - podAffinityTerm:
                 labelSelector:
                   matchLabels:
-                    app.kubernetes.io/name: influxdb
                     app.kubernetes.io/instance: influxdb
+                    app.kubernetes.io/name: influxdb
                     app.kubernetes.io/component: influxdb
-                namespaces:
-                  - "default"
                 topologyKey: kubernetes.io/hostname
               weight: 1
         nodeAffinity:
@@ -108,6 +104,9 @@
         worker: true
       securityContext:
         fsGroup: 1001
+        fsGroupChangePolicy: Always
+        supplementalGroups: []
+        sysctls: []
       serviceAccountName: influxdb
       initContainers:
       containers:
@@ -115,8 +114,18 @@
           image: docker.io/bitnami/influxdb:2.2.0-debian-10-r12
           imagePullPolicy: "IfNotPresent"
           securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
+            privileged: false
+            readOnlyRootFilesystem: false
+            runAsGroup: 0
             runAsNonRoot: true
             runAsUser: 1001
+            seLinuxOptions: null
+            seccompProfile:
+              type: RuntimeDefault
           env:
             - name: BITNAMI_DEBUG
               value: "false"
@@ -196,9 +205,17 @@
               cpu: 50m
               memory: 263M
           volumeMounts:
+            - name: empty-dir
+              mountPath: /tmp
+              subPath: tmp-dir
+            - name: empty-dir
+              mountPath: /opt/bitnami/influxdb/etc
+              subPath: app-conf-dir
             - name: data
               mountPath: /bitnami/influxdb
       volumes:
+        - name: empty-dir
+          emptyDir: {}
         - name: data
           persistentVolumeClaim:
             claimName: influx-db-v1
@@ -210,9 +227,10 @@
   name: influxdb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: influxdb
     app.kubernetes.io/instance: influxdb
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: influxdb
+    app.kubernetes.io/component: influxdb
   annotations:
     kubernetes.io/tls-acme: "true"
     traefik.ingress.kubernetes.io/router.entrypoints: websecure

@renovate renovate bot force-pushed the renovate/influxdb-5.x branch from b901a09 to f1720a8 Compare March 6, 2024 10:57
@renovate renovate bot changed the title feat(deps): update helm release influxdb to 5.17.1 feat(deps): update helm release influxdb to 5.18.0 Mar 6, 2024
Copy link

github-actions bot commented Mar 6, 2024

Path: cluster/core/monitoring/influxdb/helm-release.yaml
Version: 5.4.6 -> 5.18.0

@@ -5,12 +5,11 @@
   name: influxdb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: influxdb
     app.kubernetes.io/instance: influxdb
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: influxdb
     app.kubernetes.io/component: influxdb
-  annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: influxdb/templates/secrets.yaml
 apiVersion: v1
@@ -19,9 +18,9 @@
   name: influxdb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: influxdb
     app.kubernetes.io/instance: influxdb
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: influxdb
 type: Opaque
 data:
   admin-user-password: "JHtTRUNSRVRfSU5GTFVYX0FETUlOX1BBU1NXT1JEfQ=="
@@ -34,9 +33,9 @@
   name: influxdb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: influxdb
     app.kubernetes.io/instance: influxdb
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: influxdb
     app.kubernetes.io/component: influxdb
 spec:
   type: LoadBalancer
@@ -53,8 +52,8 @@
       protocol: TCP
       name: rpc
   selector:
-    app.kubernetes.io/name: influxdb
     app.kubernetes.io/instance: influxdb
+    app.kubernetes.io/name: influxdb
     app.kubernetes.io/component: influxdb
 ---
 # Source: influxdb/templates/deployment.yaml
@@ -64,9 +63,9 @@
   name: influxdb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: influxdb
     app.kubernetes.io/instance: influxdb
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: influxdb
     app.kubernetes.io/component: influxdb
 spec:
   replicas: 1
@@ -74,20 +73,19 @@
     type: RollingUpdate
   selector:
     matchLabels:
-      app.kubernetes.io/name: influxdb
       app.kubernetes.io/instance: influxdb
+      app.kubernetes.io/name: influxdb
       app.kubernetes.io/component: influxdb
   template:
     metadata:
       labels:
-        app.kubernetes.io/name: influxdb
         app.kubernetes.io/instance: influxdb
         app.kubernetes.io/managed-by: Helm
+        app.kubernetes.io/name: influxdb
         app.kubernetes.io/component: influxdb
     spec:
       imagePullSecrets:
         - name: regcred
-        - name: regcred
       affinity:
         podAffinity:
         podAntiAffinity:
@@ -95,11 +93,9 @@
             - podAffinityTerm:
                 labelSelector:
                   matchLabels:
-                    app.kubernetes.io/name: influxdb
                     app.kubernetes.io/instance: influxdb
+                    app.kubernetes.io/name: influxdb
                     app.kubernetes.io/component: influxdb
-                namespaces:
-                  - "default"
                 topologyKey: kubernetes.io/hostname
               weight: 1
         nodeAffinity:
@@ -108,6 +104,9 @@
         worker: true
       securityContext:
         fsGroup: 1001
+        fsGroupChangePolicy: Always
+        supplementalGroups: []
+        sysctls: []
       serviceAccountName: influxdb
       initContainers:
       containers:
@@ -115,8 +114,18 @@
           image: docker.io/bitnami/influxdb:2.2.0-debian-10-r12
           imagePullPolicy: "IfNotPresent"
           securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
+            privileged: false
+            readOnlyRootFilesystem: false
+            runAsGroup: 0
             runAsNonRoot: true
             runAsUser: 1001
+            seLinuxOptions: null
+            seccompProfile:
+              type: RuntimeDefault
           env:
             - name: BITNAMI_DEBUG
               value: "false"
@@ -196,9 +205,17 @@
               cpu: 50m
               memory: 263M
           volumeMounts:
+            - name: empty-dir
+              mountPath: /tmp
+              subPath: tmp-dir
+            - name: empty-dir
+              mountPath: /opt/bitnami/influxdb/etc
+              subPath: app-conf-dir
             - name: data
               mountPath: /bitnami/influxdb
       volumes:
+        - name: empty-dir
+          emptyDir: {}
         - name: data
           persistentVolumeClaim:
             claimName: influx-db-v1
@@ -210,9 +227,10 @@
   name: influxdb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: influxdb
     app.kubernetes.io/instance: influxdb
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: influxdb
+    app.kubernetes.io/component: influxdb
   annotations:
     kubernetes.io/tls-acme: "true"
     traefik.ingress.kubernetes.io/router.entrypoints: websecure

@renovate renovate bot force-pushed the renovate/influxdb-5.x branch from f1720a8 to e16a8a0 Compare March 6, 2024 21:29
@renovate renovate bot changed the title feat(deps): update helm release influxdb to 5.18.0 feat(deps): update helm release influxdb to 5.18.1 Mar 6, 2024
Copy link

github-actions bot commented Mar 6, 2024

Path: cluster/core/monitoring/influxdb/helm-release.yaml
Version: 5.4.6 -> 5.18.1

@@ -5,12 +5,11 @@
   name: influxdb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: influxdb
     app.kubernetes.io/instance: influxdb
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: influxdb
     app.kubernetes.io/component: influxdb
-  annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
 ---
 # Source: influxdb/templates/secrets.yaml
 apiVersion: v1
@@ -19,9 +18,9 @@
   name: influxdb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: influxdb
     app.kubernetes.io/instance: influxdb
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: influxdb
 type: Opaque
 data:
   admin-user-password: "JHtTRUNSRVRfSU5GTFVYX0FETUlOX1BBU1NXT1JEfQ=="
@@ -34,9 +33,9 @@
   name: influxdb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: influxdb
     app.kubernetes.io/instance: influxdb
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: influxdb
     app.kubernetes.io/component: influxdb
 spec:
   type: LoadBalancer
@@ -53,8 +52,8 @@
       protocol: TCP
       name: rpc
   selector:
-    app.kubernetes.io/name: influxdb
     app.kubernetes.io/instance: influxdb
+    app.kubernetes.io/name: influxdb
     app.kubernetes.io/component: influxdb
 ---
 # Source: influxdb/templates/deployment.yaml
@@ -64,9 +63,9 @@
   name: influxdb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: influxdb
     app.kubernetes.io/instance: influxdb
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: influxdb
     app.kubernetes.io/component: influxdb
 spec:
   replicas: 1
@@ -74,20 +73,19 @@
     type: RollingUpdate
   selector:
     matchLabels:
-      app.kubernetes.io/name: influxdb
       app.kubernetes.io/instance: influxdb
+      app.kubernetes.io/name: influxdb
       app.kubernetes.io/component: influxdb
   template:
     metadata:
       labels:
-        app.kubernetes.io/name: influxdb
         app.kubernetes.io/instance: influxdb
         app.kubernetes.io/managed-by: Helm
+        app.kubernetes.io/name: influxdb
         app.kubernetes.io/component: influxdb
     spec:
       imagePullSecrets:
         - name: regcred
-        - name: regcred
       affinity:
         podAffinity:
         podAntiAffinity:
@@ -95,11 +93,9 @@
             - podAffinityTerm:
                 labelSelector:
                   matchLabels:
-                    app.kubernetes.io/name: influxdb
                     app.kubernetes.io/instance: influxdb
+                    app.kubernetes.io/name: influxdb
                     app.kubernetes.io/component: influxdb
-                namespaces:
-                  - "default"
                 topologyKey: kubernetes.io/hostname
               weight: 1
         nodeAffinity:
@@ -108,6 +104,9 @@
         worker: true
       securityContext:
         fsGroup: 1001
+        fsGroupChangePolicy: Always
+        supplementalGroups: []
+        sysctls: []
       serviceAccountName: influxdb
       initContainers:
       containers:
@@ -115,8 +114,18 @@
           image: docker.io/bitnami/influxdb:2.2.0-debian-10-r12
           imagePullPolicy: "IfNotPresent"
           securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
+            privileged: false
+            readOnlyRootFilesystem: false
+            runAsGroup: 0
             runAsNonRoot: true
             runAsUser: 1001
+            seLinuxOptions: null
+            seccompProfile:
+              type: RuntimeDefault
           env:
             - name: BITNAMI_DEBUG
               value: "false"
@@ -196,9 +205,17 @@
               cpu: 50m
               memory: 263M
           volumeMounts:
+            - name: empty-dir
+              mountPath: /tmp
+              subPath: tmp-dir
+            - name: empty-dir
+              mountPath: /opt/bitnami/influxdb/etc
+              subPath: app-conf-dir
             - name: data
               mountPath: /bitnami/influxdb
       volumes:
+        - name: empty-dir
+          emptyDir: {}
         - name: data
           persistentVolumeClaim:
             claimName: influx-db-v1
@@ -210,9 +227,10 @@
   name: influxdb
   namespace: "default"
   labels:
-    app.kubernetes.io/name: influxdb
     app.kubernetes.io/instance: influxdb
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: influxdb
+    app.kubernetes.io/component: influxdb
   annotations:
     kubernetes.io/tls-acme: "true"
     traefik.ingress.kubernetes.io/router.entrypoints: websecure

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants