feat(helm)!: Update chart thanos to 15.7.25 #851
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![chii-bot[bot]](https://avatars.githubusercontent.com/in/220539?s=60&v=4){kind=small}
chii-bot
bot
added
type/major
size/XS
|
Path: @@ -1,84 +1,296 @@
---
+# Source: thanos/templates/bucketweb/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-bucketweb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: bucketweb
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: bucketweb
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 8080
+ - port: 8080
+---
+# Source: thanos/templates/compactor/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-compactor
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: compactor
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: compactor
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 9090
+---
+# Source: thanos/templates/query/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-query
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 10901
+ - port: 9090
+ - port: 10901
+---
+# Source: thanos/templates/ruler/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-ruler
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: ruler
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: ruler
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 9090
+ - port: 10901
+ - port: 10901
+---
+# Source: thanos/templates/storegateway/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-storegateway
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: storegateway
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: storegateway
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 9090
+ - port: 10901
+ - port: 10901
+---
+# Source: thanos/templates/bucketweb/pdb.yaml
+apiVersion: policy/v1beta1
+kind: PodDisruptionBudget
+metadata:
+ name: thanos-bucketweb
+ namespace: default
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: bucketweb
+spec:
+ maxUnavailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: bucketweb
+---
+# Source: thanos/templates/query/pdb.yaml
+apiVersion: policy/v1beta1
+kind: PodDisruptionBudget
+metadata:
+ name: thanos-query
+ namespace: default
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query
+spec:
+ maxUnavailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query
+---
+# Source: thanos/templates/ruler/pdb.yaml
+apiVersion: policy/v1beta1
+kind: PodDisruptionBudget
+metadata:
+ name: thanos-ruler
+ namespace: default
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: ruler
+spec:
+ maxUnavailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: ruler
+---
+# Source: thanos/templates/storegateway/pdb.yaml
+apiVersion: policy/v1beta1
+kind: PodDisruptionBudget
+metadata:
+ name: thanos-storegateway
+ namespace: default
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: storegateway
+spec:
+ maxUnavailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: storegateway
+---
# Source: thanos/templates/bucketweb/serviceaccount.yaml
apiVersion: v1
kind: ServiceAccount
metadata:
name: thanos-bucketweb
- namespace: "default"
+ namespace: default
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: bucketweb
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
---
# Source: thanos/templates/compactor/serviceaccount.yaml
apiVersion: v1
kind: ServiceAccount
metadata:
name: thanos-compactor
- namespace: "default"
+ namespace: default
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: compactor
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
---
# Source: thanos/templates/query/serviceaccount.yaml
apiVersion: v1
kind: ServiceAccount
metadata:
name: thanos-query
- namespace: "default"
+ namespace: default
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: query
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
---
# Source: thanos/templates/ruler/serviceaccount.yaml
apiVersion: v1
kind: ServiceAccount
metadata:
name: thanos-ruler
- namespace: "default"
+ namespace: default
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: ruler
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
---
# Source: thanos/templates/storegateway/serviceaccount.yaml
apiVersion: v1
kind: ServiceAccount
metadata:
name: thanos-storegateway
- namespace: "default"
+ namespace: default
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: storegateway
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
---
# Source: thanos/templates/objstore-secret.yaml
apiVersion: v1
kind: Secret
metadata:
name: thanos-objstore-secret
- namespace: "default"
+ namespace: default
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
data:
objstore.yml: |-
Y29uZmlnOgogIGluc2VjdXJlOiB0cnVlCnR5cGU6IHMz
@@ -87,12 +299,12 @@
apiVersion: v1
kind: ConfigMap
metadata:
- name: thanos-ruler-configmap
- namespace: "default"
+ name: thanos-ruler
+ namespace: default
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: ruler
data:
ruler.yml: |-
@@ -107,11 +319,11 @@
apiVersion: v1
metadata:
name: thanos-compactor
- namespace: "default"
+ namespace: default
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: compactor
spec:
accessModes:
@@ -126,13 +338,13 @@
kind: Service
metadata:
name: thanos-bucketweb
- namespace: "default"
+ namespace: default
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: bucketweb
- annotations:
+ prometheus-operator/monitor: 'true'
spec:
type: ClusterIP
ports:
@@ -142,8 +354,8 @@
name: http
nodePort: null
selector:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: bucketweb
---
# Source: thanos/templates/compactor/service.yaml
@@ -151,13 +363,13 @@
kind: Service
metadata:
name: thanos-compactor
- namespace: "default"
+ namespace: default
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: compactor
- annotations:
+ prometheus-operator/monitor: 'true'
spec:
type: ClusterIP
ports:
@@ -167,8 +379,8 @@
name: http
nodePort: null
selector:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: compactor
---
# Source: thanos/templates/query/service-grpc.yaml
@@ -176,13 +388,12 @@
kind: Service
metadata:
name: thanos-query-grpc
- namespace: "default"
+ namespace: default
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: query
- annotations:
spec:
type: ClusterIP
ports:
@@ -192,8 +403,8 @@
name: grpc
nodePort: null
selector:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: query
---
# Source: thanos/templates/query/service.yaml
@@ -201,13 +412,13 @@
kind: Service
metadata:
name: thanos-query
- namespace: "default"
+ namespace: default
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: query
- annotations:
+ prometheus-operator/monitor: 'true'
spec:
type: ClusterIP
ports:
@@ -217,8 +428,8 @@
name: http
nodePort: null
selector:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: query
---
# Source: thanos/templates/ruler/service.yaml
@@ -226,14 +437,13 @@
kind: Service
metadata:
name: thanos-ruler
- namespace: "default"
+ namespace: default
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: ruler
prometheus-operator/monitor: 'true'
- annotations:
spec:
type: ClusterIP
ports:
@@ -248,8 +458,8 @@
name: grpc
nodePort: null
selector:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: ruler
---
# Source: thanos/templates/storegateway/service.yaml
@@ -257,14 +467,13 @@
kind: Service
metadata:
name: thanos-storegateway
- namespace: "default"
+ namespace: default
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: storegateway
prometheus-operator/monitor: 'true'
- annotations:
spec:
type: ClusterIP
ports:
@@ -279,8 +488,8 @@
name: grpc
nodePort: null
selector:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: storegateway
---
# Source: thanos/templates/bucketweb/deployment.yaml
@@ -288,14 +497,15 @@
kind: Deployment
metadata:
name: thanos-bucketweb
- namespace: "default"
+ namespace: default
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: bucketweb
spec:
replicas: 3
+ revisionHistoryLimit: 10
strategy:
rollingUpdate:
maxSurge: 1
@@ -303,20 +513,20 @@
type: RollingUpdate
selector:
matchLabels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: bucketweb
template:
metadata:
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: bucketweb
annotations:
- checksum/ojbstore-configuration: 0b890f19ba31e0ad26c4d4b967083a9da02bd790fdfb56cda1af0ed7e24ab6ce
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
spec:
- serviceAccount: thanos-bucketweb
+ serviceAccountName: thanos-bucketweb
automountServiceAccountToken: true
affinity:
podAffinity:
@@ -324,24 +534,33 @@
requiredDuringSchedulingIgnoredDuringExecution:
- labelSelector:
matchLabels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: bucketweb
- namespaces:
- - "default"
topologyKey: kubernetes.io/hostname
nodeAffinity:
securityContext:
fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
containers:
- name: bucketweb
- image: docker.io/bitnami/thanos:0.27.0-scratch-r5
+ image: docker.io/bitnami/thanos:0.36.1-debian-12-r2
imagePullPolicy: "IfNotPresent"
securityContext:
allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
readOnlyRootFilesystem: true
+ runAsGroup: 1001
runAsNonRoot: true
runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
args:
- tools
- bucket
@@ -365,6 +584,7 @@
httpGet:
path: /-/healthy
port: http
+ scheme: HTTP
readinessProbe:
failureThreshold: 6
initialDelaySeconds: 30
@@ -374,9 +594,16 @@
httpGet:
path: /-/ready
port: http
+ scheme: HTTP
resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 2Gi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
volumeMounts:
- name: objstore-config
mountPath: /conf
@@ -390,32 +617,33 @@
kind: Deployment
metadata:
name: thanos-compactor
- namespace: "default"
+ namespace: default
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: compactor
spec:
replicas: 1
+ revisionHistoryLimit: 10
strategy:
type: Recreate
selector:
matchLabels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: compactor
template:
metadata:
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: compactor
annotations:
- checksum/ojbstore-configuration: 0b890f19ba31e0ad26c4d4b967083a9da02bd790fdfb56cda1af0ed7e24ab6ce
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
spec:
- serviceAccount: thanos-compactor
+ serviceAccountName: thanos-compactor
automountServiceAccountToken: true
affinity:
podAffinity:
@@ -424,25 +652,34 @@
- podAffinityTerm:
labelSelector:
matchLabels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: compactor
- namespaces:
- - "default"
topologyKey: kubernetes.io/hostname
weight: 1
nodeAffinity:
securityContext:
fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
containers:
- name: compactor
- image: docker.io/bitnami/thanos:0.27.0-scratch-r5
+ image: docker.io/bitnami/thanos:0.36.1-debian-12-r2
imagePullPolicy: "IfNotPresent"
securityContext:
allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
readOnlyRootFilesystem: true
+ runAsGroup: 1001
runAsNonRoot: true
runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
args:
- compact
- --log.level=info
@@ -470,6 +707,7 @@
httpGet:
path: /-/healthy
port: http
+ scheme: HTTP
readinessProbe:
failureThreshold: 6
initialDelaySeconds: 30
@@ -479,9 +717,16 @@
httpGet:
path: /-/ready
port: http
+ scheme: HTTP
resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 2Gi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
volumeMounts:
- name: objstore-config
mountPath: /conf
@@ -500,30 +745,31 @@
kind: Deployment
metadata:
name: thanos-query
- namespace: "default"
+ namespace: default
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: query
spec:
replicas: 3
+ revisionHistoryLimit: 10
strategy:
type: RollingUpdate
selector:
matchLabels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: query
template:
metadata:
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: query
spec:
- serviceAccount: thanos-query
+ serviceAccountName: thanos-query
automountServiceAccountToken: true
affinity:
podAffinity:
@@ -532,25 +778,34 @@
- podAffinityTerm:
labelSelector:
matchLabels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: query
- namespaces:
- - "default"
topologyKey: kubernetes.io/hostname
weight: 1
nodeAffinity:
securityContext:
fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
containers:
- name: query
- image: docker.io/bitnami/thanos:0.27.0-scratch-r5
+ image: docker.io/bitnami/thanos:0.36.1-debian-12-r2
imagePullPolicy: "IfNotPresent"
securityContext:
allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
readOnlyRootFilesystem: true
+ runAsGroup: 1001
runAsNonRoot: true
runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
args:
- query
- --log.level=info
@@ -561,6 +816,7 @@
- --endpoint=dnssrv+_grpc._tcp.kube-prometheus-stack-thanos-discovery.monitoring.svc.cluster.local
- --endpoint=dnssrv+_grpc._tcp.thanos-storegateway.default.svc.cluster.local
- --endpoint=dnssrv+_grpc._tcp.thanos-ruler.default.svc.cluster.local
+ - --alert.query-url=http://thanos-query.default.svc.cluster.local:9090
ports:
- name: http
containerPort: 10902
@@ -577,6 +833,7 @@
httpGet:
path: /-/healthy
port: http
+ scheme: HTTP
readinessProbe:
failureThreshold: 6
initialDelaySeconds: 30
@@ -586,9 +843,16 @@
httpGet:
path: /-/ready
port: http
+ scheme: HTTP
resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 2Gi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
volumeMounts:
volumes:
---
@@ -597,35 +861,36 @@
kind: StatefulSet
metadata:
name: thanos-ruler
- namespace: "default"
+ namespace: default
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: ruler
spec:
replicas: 3
+ revisionHistoryLimit: 10
podManagementPolicy: OrderedReady
serviceName: thanos-ruler-headless
updateStrategy:
type: RollingUpdate
selector:
matchLabels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: ruler
template:
metadata:
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: ruler
annotations:
- checksum/ojbstore-configuration: 0b890f19ba31e0ad26c4d4b967083a9da02bd790fdfb56cda1af0ed7e24ab6ce
- checksum/ruler-configuration: 8e1d8f4911a1e93eeb6076775ededc064ce389a57580291c958bbc623b1858fc
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
+ checksum/ruler-configuration: b35799093da107f873e2a979b49d64483f166909c932e0533e46a3651d5dd847
spec:
- serviceAccount: thanos-ruler
+ serviceAccountName: thanos-ruler
automountServiceAccountToken: true
affinity:
podAffinity:
@@ -633,24 +898,33 @@
requiredDuringSchedulingIgnoredDuringExecution:
- labelSelector:
matchLabels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: ruler
- namespaces:
- - "default"
topologyKey: kubernetes.io/hostname
nodeAffinity:
securityContext:
fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
containers:
- name: ruler
- image: docker.io/bitnami/thanos:0.27.0-scratch-r5
+ image: docker.io/bitnami/thanos:0.36.1-debian-12-r2
imagePullPolicy: "IfNotPresent"
securityContext:
allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
readOnlyRootFilesystem: true
+ runAsGroup: 1001
runAsNonRoot: true
runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
args:
- rule
- --log.level=info
@@ -661,6 +935,7 @@
- --eval-interval=1m
- --alertmanagers.url=http://kube-prometheus-stack-alertmanager.monitoring:9093
- --query=dnssrv+_http._tcp.thanos-query.default.svc.cluster.local
+ - --alert.query-url=http://thanos-query.default.svc.cluster.local:9090
- --label=replica="$(POD_NAME)"
- --label=ruler_cluster="${CLUSTER_NAME}"
- --alert.label-drop=replica
@@ -688,6 +963,7 @@
httpGet:
path: /-/healthy
port: http
+ scheme: HTTP
readinessProbe:
failureThreshold: 6
initialDelaySeconds: 30
@@ -697,9 +973,16 @@
httpGet:
path: /-/ready
port: http
+ scheme: HTTP
resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 2Gi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
volumeMounts:
- name: ruler-config
mountPath: /conf/rules
@@ -710,12 +993,14 @@
volumes:
- name: ruler-config
configMap:
- name: thanos-ruler-configmap
+ name: thanos-ruler
- name: objstore-config
secret:
secretName: thanos-objstore-secret
volumeClaimTemplates:
- - metadata:
+ - apiVersion: v1
+ kind: PersistentVolumeClaim
+ metadata:
name: data
spec:
accessModes:
@@ -730,34 +1015,35 @@
kind: StatefulSet
metadata:
name: thanos-storegateway
- namespace: "default"
+ namespace: default
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: storegateway
spec:
replicas: 3
+ revisionHistoryLimit: 10
podManagementPolicy: OrderedReady
serviceName: thanos-storegateway-headless
updateStrategy:
type: RollingUpdate
selector:
matchLabels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: storegateway
template:
metadata:
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: storegateway
annotations:
- checksum/ojbstore-configuration: 0b890f19ba31e0ad26c4d4b967083a9da02bd790fdfb56cda1af0ed7e24ab6ce
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
spec:
- serviceAccount: thanos-storegateway
+ serviceAccountName: thanos-storegateway
automountServiceAccountToken: true
affinity:
podAffinity:
@@ -765,24 +1051,33 @@
requiredDuringSchedulingIgnoredDuringExecution:
- labelSelector:
matchLabels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: storegateway
- namespaces:
- - "default"
topologyKey: kubernetes.io/hostname
nodeAffinity:
securityContext:
fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
containers:
- name: storegateway
- image: docker.io/bitnami/thanos:0.27.0-scratch-r5
+ image: docker.io/bitnami/thanos:0.36.1-debian-12-r2
imagePullPolicy: "IfNotPresent"
securityContext:
allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
readOnlyRootFilesystem: true
+ runAsGroup: 1001
runAsNonRoot: true
runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
args:
- store
- --log.level=info
@@ -807,6 +1102,7 @@
httpGet:
path: /-/healthy
port: http
+ scheme: HTTP
readinessProbe:
failureThreshold: 6
initialDelaySeconds: 30
@@ -816,9 +1112,16 @@
httpGet:
path: /-/ready
port: http
+ scheme: HTTP
resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 2Gi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
volumeMounts:
- name: objstore-config
mountPath: /conf
@@ -829,7 +1132,9 @@
secret:
secretName: thanos-objstore-secret
volumeClaimTemplates:
- - metadata:
+ - apiVersion: v1
+ kind: PersistentVolumeClaim
+ metadata:
name: data
spec:
accessModes:
@@ -844,11 +1149,11 @@
kind: Ingress
metadata:
name: thanos-bucketweb
- namespace: "default"
+ namespace: default
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: bucketweb
annotations:
hajimari.io/enable: "false"
@@ -874,11 +1179,11 @@
kind: Ingress
metadata:
name: thanos-compactor
- namespace: "default"
+ namespace: default
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: compactor
annotations:
hajimari.io/enable: "false"
@@ -904,11 +1209,11 @@
kind: Ingress
metadata:
name: thanos-query
- namespace: "default"
+ namespace: default
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: query
annotations:
hajimari.io/icon: table-search
@@ -934,11 +1239,11 @@
kind: Ingress
metadata:
name: thanos-ruler
- namespace: "default"
+ namespace: default
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: ruler
annotations:
hajimari.io/enable: "false"
@@ -964,11 +1269,11 @@
kind: Ingress
metadata:
name: thanos-storegateway
- namespace: "default"
+ namespace: default
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: storegateway
annotations:
hajimari.io/enable: "false"
@@ -996,9 +1301,9 @@
name: thanos-bucketweb
namespace: "default"
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: bucketweb
spec:
endpoints:
@@ -1008,9 +1313,10 @@
- "default"
selector:
matchLabels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: bucketweb
+ prometheus-operator/monitor: 'true'
---
# Source: thanos/templates/compactor/servicemonitor.yaml
apiVersion: monitoring.coreos.com/v1
@@ -1019,9 +1325,9 @@
name: thanos-compactor
namespace: "default"
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: compactor
spec:
endpoints:
@@ -1031,9 +1337,10 @@
- "default"
selector:
matchLabels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: compactor
+ prometheus-operator/monitor: 'true'
---
# Source: thanos/templates/query/servicemonitor.yaml
apiVersion: monitoring.coreos.com/v1
@@ -1042,9 +1349,9 @@
name: thanos-query
namespace: "default"
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: query
spec:
endpoints:
@@ -1054,9 +1361,10 @@
- "default"
selector:
matchLabels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: query
+ prometheus-operator/monitor: 'true'
---
# Source: thanos/templates/ruler/servicemonitor.yaml
apiVersion: monitoring.coreos.com/v1
@@ -1065,9 +1373,9 @@
name: thanos-ruler
namespace: "default"
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: ruler
spec:
endpoints:
@@ -1077,9 +1385,10 @@
- "default"
selector:
matchLabels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: ruler
+ prometheus-operator/monitor: 'true'
---
# Source: thanos/templates/storegateway/servicemonitor.yaml
apiVersion: monitoring.coreos.com/v1
@@ -1088,9 +1397,9 @@
name: thanos-storegateway
namespace: "default"
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: storegateway
spec:
endpoints:
@@ -1100,6 +1409,7 @@
- "default"
selector:
matchLabels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: storegateway
+ prometheus-operator/monitor: 'true' |
MegaLinter status: ❌ ERROR
See errors details in artifact MegaLinter reports on CI Job page |
chii-bot
bot
changed the title
chii-bot
bot
force-pushed
the
renovate/thanos-15.x
branch
from
e214dd2
to
fab4b70
Compare
chii-bot
bot
changed the title
chii-bot
bot
force-pushed
the
renovate/thanos-15.x
branch
from
fab4b70
to
e19290b
Compare
chii-bot
bot
changed the title
chii-bot
bot
force-pushed
the
renovate/thanos-15.x
branch
from
e19290b
to
4c7cd57
Compare
|
This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation. |
chii-bot
bot
changed the title
chii-bot
bot
force-pushed
the
renovate/thanos-15.x
branch
from
4c7cd57
to
76e53d3
Compare
chii-bot
bot
changed the title
chii-bot
bot
force-pushed
the
renovate/thanos-15.x
branch
from
76e53d3
to
dc81427
Compare
chii-bot
bot
changed the title
chii-bot
bot
force-pushed
the
renovate/thanos-15.x
branch
from
dc81427
to
4668b0f
Compare
chii-bot
bot
changed the title
chii-bot
bot
force-pushed
the
renovate/thanos-15.x
branch
from
4668b0f
to
cbc30c2
Compare
chii-bot
bot
changed the title
chii-bot
bot
force-pushed
the
renovate/thanos-15.x
branch
from
cbc30c2
to
e458a11
Compare
chii-bot
bot
changed the title
chii-bot
bot
force-pushed
the
renovate/thanos-15.x
branch
from
e458a11
to
d1336ad
Compare
chii-bot
bot
changed the title
chii-bot
bot
force-pushed
the
renovate/thanos-15.x
branch
from
d1336ad
to
ef5b079
Compare
chii-bot
bot
changed the title
chii-bot
bot
force-pushed
the
renovate/thanos-15.x
branch
from
ef5b079
to
5e3310c
Compare
chii-bot
bot
changed the title
chii-bot
bot
force-pushed
the
renovate/thanos-15.x
branch
from
627bf15
to
4d3870b
Compare
chii-bot
bot
changed the title
chii-bot
bot
force-pushed
the
renovate/thanos-15.x
branch
from
4d3870b
to
e7de812
Compare
chii-bot
bot
changed the title
chii-bot
bot
force-pushed
the
renovate/thanos-15.x
branch
from
e7de812
to
2693c9d
Compare
chii-bot
bot
changed the title
chii-bot
bot
force-pushed
the
renovate/thanos-15.x
branch
from
2693c9d
to
932b126
Compare
chii-bot
bot
changed the title
chii-bot
bot
force-pushed
the
renovate/thanos-15.x
branch
from
932b126
to
35b386a
Compare
chii-bot
bot
changed the title
chii-bot
bot
force-pushed
the
renovate/thanos-15.x
branch
from
35b386a
to
82a85f7
Compare
chii-bot
bot
changed the title
chii-bot
bot
force-pushed
the
renovate/thanos-15.x
branch
from
82a85f7
to
8f806cb
Compare
chii-bot
bot
changed the title
chii-bot
bot
force-pushed
the
renovate/thanos-15.x
branch
from
8f806cb
to
3410094
Compare
chii-bot
bot
changed the title
chii-bot
bot
force-pushed
the
renovate/thanos-15.x
branch
from
3410094
to
4684310
Compare
chii-bot
bot
changed the title
chii-bot
bot
force-pushed
the
renovate/thanos-15.x
branch
from
4684310
to
f54e96d
Compare
chii-bot
bot
changed the title
chii-bot
bot
force-pushed
the
renovate/thanos-15.x
branch
from
f54e96d
to
2969e0a
Compare
chii-bot
bot
changed the title
chii-bot
bot
force-pushed
the
renovate/thanos-15.x
branch
from
2969e0a
to
42c8966
Compare
chii-bot
bot
changed the title
chii-bot
bot
force-pushed
the
renovate/thanos-15.x
branch
from
42c8966
to
bfc5968
Compare
chii-bot
bot
changed the title
| datasource | package | from | to | | ---------- | ------- | ------ | ------- | | helm | thanos | 11.1.2 | 15.7.25 |
chii-bot
bot
force-pushed
the
renovate/thanos-15.x
branch
from
bfc5968
to
768df67
Compare
chii-bot
bot
changed the title
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
11.1.2->15.7.25⚠ Dependency Lookup Warnings ⚠
Warnings were logged while processing this repo. Please check the Dependency Dashboard for more information.
Release Notes
bitnami/charts
v15.7.25v15.7.24v15.7.23v15.7.22v15.7.21v15.7.20v15.7.19v15.7.18v15.7.17v15.7.16v15.7.15v15.7.14v15.7.13v15.7.12v15.7.11v15.7.10v15.7.9v15.7.8v15.7.7v15.7.6v15.7.5v15.7.4v15.7.3v15.7.2v15.7.1v15.7.0v15.6.2v15.6.1v15.6.0v15.5.1v15.5.0v15.4.7v15.4.6v15.4.4v15.4.3v15.4.2v15.4.1v15.4.0v15.3.0v15.2.2v15.2.1v15.2.0v15.1.3v15.1.2v15.1.1v15.1.0v15.0.5v15.0.4v15.0.3v15.0.2v15.0.1v15.0.0v14.0.2v14.0.1v14.0.0v13.4.1v13.4.0v13.3.0v13.2.2v13.2.1v13.1.0v13.0.0v12.23.2v12.23.1v12.23.0v12.22.1v12.22.0v12.21.1v12.21.0v12.20.4v12.20.3v12.20.2v12.20.1v12.20.0v12.19.1v12.19.0v12.18.0v12.17.0v12.16.2v12.16.1v12.16.0v12.15.0v12.14.2v12.14.1v12.14.0v12.13.13v12.13.12v12.13.11v12.13.10v12.13.9v12.13.8v12.13.7v12.13.6v12.13.5v12.13.4v12.13.3v12.13.2v12.13.1v12.13.0v12.12.1v12.12.0v12.11.4v12.11.3v12.11.2v12.11.1v12.11.0v12.10.1v12.10.0v12.9.1v12.9.0v12.8.6v12.8.5v12.8.4v12.8.3v12.8.2v12.8.1v12.8.0v12.7.0v12.6.3v12.6.2Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Renovate Bot.