Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[kube-prometheus-stack] SecurityContext for webhook job create/patch container #2406

Merged
merged 8 commits into from
Aug 31, 2022

Conversation

ybelMekk
Copy link
Contributor

@ybelMekk ybelMekk commented Aug 29, 2022

What this PR does / why we need it

Stumbled in to this when working with kyverno and enforced strict policies.

Kyverno and using strict policy configuration, job create for ingress-nginx-admission-create fails with policies require-drop-alland disallow-privilege-escalation.

Adding the ability to configure containers in webhooks create and patch from helm values.

k describe job monitoring-kube-prometheus-admission-patch

resource Pod/my-namespace/monitoring-kube-prometheus-admission-patch-njdkq was blocked due to the following policies

disallow-capabilities-strict:
  require-drop-all: 'validation failure: Containers must drop `ALL` capabilities.'
disallow-privilege-escalation:
  privilege-escalation: 'validation error: Privilege escalation is disallowed. The
    fields spec.containers[*].securityContext.allowPrivilegeEscalation, spec.initContainers[*].securityContext.allowPrivilegeEscalation,
    and spec.ephemeralContainers[*].securityContext.allowPrivilegeEscalation must
    be set to `false`. Rule privilege-escalation failed at path /spec/containers/0/securityContext/'

Which issue this PR fixes

(optional, in fixes #<issue number>(, fixes #<issue_number>, ...) format, will close that issue when PR gets merged)

  • fixes #

Special notes for your reviewer

Checklist

  • DCO signed
  • Chart Version bumped
  • Title of the PR starts with chart name (e.g. [prometheus-couchdb-exporter])

@ybelMekk ybelMekk changed the title kube-prometheus-stack [kube-prometheus-stack] SecurityContext for webhook job create/patch container Aug 29, 2022
Copy link
Member

@Xtigyro Xtigyro left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for the contribution, @ybelMekk! 🥇

Could you please bump the minor (and not the bugfix) chart version in Chart.yaml?

@Xtigyro
Copy link
Member

Xtigyro commented Aug 31, 2022

@Xtigyro
Copy link
Member

Xtigyro commented Aug 31, 2022

@ybelMekk The issue basically means - we shouldn't be putting anything there if there are no values in .Values.controller.admissionWebhooks.patchWebhookJob.securityContext:

…icies.

Kyverno and using strict policy configuration, job create for `ingress-nginx-admission-create` fails with policies `require-drop-all`and `disallow-privilege-escalation`. Adding the ability to configure containers in webhooks create and patch from helm values.

> k describe job monitoring-kube-prometheus-admission-patch
```
resource Pod/my-namespace/monitoring-kube-prometheus-admission-patch-njdkq was blocked due to the following policies

disallow-capabilities-strict:
  require-drop-all: 'validation failure: Containers must drop `ALL` capabilities.'
disallow-privilege-escalation:
  privilege-escalation: 'validation error: Privilege escalation is disallowed. The
    fields spec.containers[*].securityContext.allowPrivilegeEscalation, spec.initContainers[*].securityContext.allowPrivilegeEscalation,
    and spec.ephemeralContainers[*].securityContext.allowPrivilegeEscalation must
    be set to `false`. Rule privilege-escalation failed at path /spec/containers/0/securityContext/'
```

Signed-off-by: ybelMekk <[email protected]>
Signed-off-by: ybelMekk <[email protected]>
Signed-off-by: ybelMekk <[email protected]>
Signed-off-by: Youssef Bel Mekki <[email protected]>
@ybelMekk
Copy link
Contributor Author

sry, forgot to sign commit 😅

@ybelMekk ybelMekk requested a review from Xtigyro August 31, 2022 10:42
Signed-off-by: ybelMekk <[email protected]>
@ybelMekk
Copy link
Contributor Author

@ybelMekk The issue basically means - we shouldn't be putting anything there if there are no values in .Values.controller.admissionWebhooks.patchWebhookJob.securityContext:

@Xtigyro should be okay now!

Copy link
Member

@Xtigyro Xtigyro left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you, @ybelMekk!

@Xtigyro Xtigyro merged commit 14af09b into prometheus-community:main Aug 31, 2022
monotek added a commit that referenced this pull request Sep 10, 2022
* [prometheus-smartctl-exporter] Initial stab at a prometheus-smartctl-exporter chart (#2357)

* Initial stab at a prometheus-smartctl-exporter chart

Signed-off-by: Kevin Fox <[email protected]>

* Update values.yaml

Signed-off-by: MH <[email protected]>

Signed-off-by: MH <[email protected]>

* Update CODEOWNERS

Signed-off-by: MH <[email protected]>

Signed-off-by: MH <[email protected]>

* Update Chart.yaml

Signed-off-by: MH <[email protected]>

Signed-off-by: MH <[email protected]>

* Update tolerations to match node exporters

Signed-off-by: kfox1111 <[email protected]>

* Fix spacing on tolerations

Signed-off-by: Kevin Fox <[email protected]>

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: MH <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: MH <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [prometheus-adapter] Update To v0.10.0 (#2366)

Signed-off-by: Dan Peric <[email protected]>

Signed-off-by: Dan Peric <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [kube-prometheus-stack] add thanosRulerSpec.alertmanagersConfig config (#2358)

Signed-off-by: GitHub <[email protected]>

Signed-off-by: GitHub <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* Bump helm/chart-testing-action from 2.2.1 to 2.3.0 (#2368)

Bumps [helm/chart-testing-action](https://github.com/helm/chart-testing-action) from 2.2.1 to 2.3.0.
- [Release notes](https://github.com/helm/chart-testing-action/releases)
- [Commits](helm/chart-testing-action@v2.2.1...v2.3.0)

---
updated-dependencies:
- dependency-name: helm/chart-testing-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: andrejshapal <[email protected]>

* feat[kube-state-metrics]: add image sha support for image specified (#2370)

* feat[kube-state-metrics]: add image sha support for image specified

Signed-off-by: francisco.rangel-heb <[email protected]>

* chore: bump kube-state-metrics chart version

Signed-off-by: francisco.rangel-heb <[email protected]>

* chore: fix semantic version for kube-state-metrics chart

Signed-off-by: francisco.rangel-heb <[email protected]>

Signed-off-by: francisco.rangel-heb <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* Update Chart.yaml (#2371)

Signed-off-by: André Bauer <[email protected]>

Signed-off-by: André Bauer <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* Fix smartctl image and servicemonitor. (#2365)

Signed-off-by: Kevin Fox <[email protected]>

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* feat[prometheus-node-exporter]: add image sha support for image specified (#2377)

Signed-off-by: francisco.rangel-heb <[email protected]>

Signed-off-by: francisco.rangel-heb <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [kube-prometheus-stack] Add evaluationInterval to Thanos Ruler (#2374)

* feat:add evaluationintervar to ruler

Signed-off-by: helia.barroso <[email protected]>

* feat:change chartversion

Signed-off-by: helia.barroso <[email protected]>

* feat:change chartversion

Signed-off-by: helia.barroso <[email protected]>

* feat:change evaluationInterval

Signed-off-by: helia.barroso <[email protected]>

* fix:trailingspaces

Signed-off-by: helia.barroso <[email protected]>

Signed-off-by: helia.barroso <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [prometheus-stackdriver-exporter] Fix spec.serviceAccountName (#2378)

* fix spec.serviceAccountName

Signed-off-by: Tuan Anh Nguyen <[email protected]>

* kubernetes/kubernetes#72519

Signed-off-by: Tuan Anh Nguyen <[email protected]>

* Update charts/prometheus-stackdriver-exporter/Chart.yaml

Co-authored-by: André Bauer <[email protected]>
Signed-off-by: Tuan Anh Nguyen <[email protected]>

Signed-off-by: Tuan Anh Nguyen <[email protected]>
Co-authored-by: André Bauer <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* fix(prometheus-postgres-exporter): convert port variable to int (#2372)

Signed-off-by: sagdeevrr <[email protected]>

Signed-off-by: sagdeevrr <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [kube-prometheus-stack] Setting a custom timeout in admission mutatingWebhookConfiguration - Prometheus Operator chart Template (#2233)

* [kube-prometheus-stack] Setting a custom timeout in admission mutatingWebhookConfiguration - Prometheus Operator chart Template

Signed-off-by: Staz <[email protected]>

* Update charts/kube-prometheus-stack/Chart.yaml

Signed-off-by: André Bauer <[email protected]>

* Update Chart.yaml

Signed-off-by: André Bauer <[email protected]>

* Remove line

Signed-off-by: André Bauer <[email protected]>

* Remove whitespace

Signed-off-by: André Bauer <[email protected]>

Signed-off-by: Staz <[email protected]>
Signed-off-by: André Bauer <[email protected]>
Co-authored-by: André Bauer <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* feat: bump nats-exporter version (#2387)

Signed-off-by: Mikhail Naletov <[email protected]>

Signed-off-by: Mikhail Naletov <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [prometheus-node-exporter] Update labels to match best practices (#2212)

* [prometheus-node-exporter] Update labels

Signed-off-by: QuentinBisson <[email protected]>

* Fix readme

Signed-off-by: QuentinBisson <[email protected]>

* Fix readme and notes after successfull upgrade

Signed-off-by: QuentinBisson <[email protected]>

* Fix readme

Signed-off-by: QuentinBisson <[email protected]>

* Update charts/prometheus-node-exporter/README.md

Signed-off-by: QuentinBisson <[email protected]>

* Fix labels for service account

Signed-off-by: QuentinBisson <[email protected]>

Signed-off-by: QuentinBisson <[email protected]>
Co-authored-by: André Bauer <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [prometheus-postgres-exporter] Fix indentation (#2388)

Signed-off-by: Sébastien Prud'homme <[email protected]>

Signed-off-by: Sébastien Prud'homme <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [prometheus-snmp-exporter] make DaemonSet available (#2394)

Signed-off-by: Taro Kitano <[email protected]>

Signed-off-by: Taro Kitano <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [prometheus-mongodb-exporter] fixing default mongodb uri (#2379)

* fixed default mongo endpoint for mongodb exporter

Signed-off-by: Ihor16 <[email protected]>

* changing it back

Signed-off-by: Ihor16 <[email protected]>

* signing off now

Signed-off-by: Ihor16 <[email protected]>

* update chart version

Signed-off-by: André Bauer <[email protected]>

Signed-off-by: Ihor16 <[email protected]>
Signed-off-by: André Bauer <[email protected]>
Co-authored-by: André Bauer <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [prometheus-redis-exporter] support redis password file secret volume mount (#2401)

* [prometheus-redis-exporter] support redis password file secret volume mount

Signed-off-by: sat-devopsnow <[email protected]>

* Remove extraneous newline

Signed-off-by: sat-devopsnow <[email protected]>

Signed-off-by: sat-devopsnow <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [kube-prometheus-stack] Hint offline sources (#2411)

[kube-prometheus-stack]

* Hint for replacing image sources for containers:
	- grafana
	- sidecar
	- kube-state-metrics
	- prometheus-node-exporter

Signed-off-by: moroviintaas <[email protected]>

[kube-prometheus-stack]

* Bump chart version

Signed-off-by: moroviintaas <[email protected]>

Signed-off-by: moroviintaas <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [kube-prometheus-stack] SecurityContext for webhook job create/patch container (#2406)

* Stumbled in to this when working with kyverno and enforced strict policies.

Kyverno and using strict policy configuration, job create for `ingress-nginx-admission-create` fails with policies `require-drop-all`and `disallow-privilege-escalation`. Adding the ability to configure containers in webhooks create and patch from helm values.

> k describe job monitoring-kube-prometheus-admission-patch
```
resource Pod/my-namespace/monitoring-kube-prometheus-admission-patch-njdkq was blocked due to the following policies

disallow-capabilities-strict:
  require-drop-all: 'validation failure: Containers must drop `ALL` capabilities.'
disallow-privilege-escalation:
  privilege-escalation: 'validation error: Privilege escalation is disallowed. The
    fields spec.containers[*].securityContext.allowPrivilegeEscalation, spec.initContainers[*].securityContext.allowPrivilegeEscalation,
    and spec.ephemeralContainers[*].securityContext.allowPrivilegeEscalation must
    be set to `false`. Rule privilege-escalation failed at path /spec/containers/0/securityContext/'
```

Signed-off-by: ybelMekk <[email protected]>

* Chart Version bumped

Signed-off-by: ybelMekk <[email protected]>

* merge master

Signed-off-by: ybelMekk <[email protected]>

* issue with nil pointer for if, use with

Signed-off-by: ybelMekk <[email protected]>

* check for nil earlier

Signed-off-by: ybelMekk <[email protected]>

* leard something about helm today, i need to spec the path right to get it to work..

Signed-off-by: ybelMekk <[email protected]>

* tidy values.yaml, remove extra newlines

Signed-off-by: ybelMekk <[email protected]>

Signed-off-by: ybelMekk <[email protected]>
Signed-off-by: Youssef Bel Mekki <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [kube-state-metrics] Fix selfMonitor port (#2418)

[kube-state-metrics] Fix selfMonitor port (#2418)

Signed-off-by: Zhaojun Li <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [prometheus-snmp-exporter] update ingress api version template to support multiple kubernetes versions (#2395)

* update support of ingress api version

Signed-off-by: He, David (SIPD) <[email protected]>

* update the chart version

Signed-off-by: He, David (SIPD) <[email protected]>

Signed-off-by: He, David (SIPD) <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [prometheus-json-exporter] open service configuration (#2414)

* [prometheus-json-exporter] open service configuration

Signed-off-by: gaoxiang <hs@38658>

* [prometheus-json-exporter] open service configuration

Signed-off-by: gaoxiang <hs@38658>

Signed-off-by: gaoxiang <hs@38658>
Signed-off-by: andrejshapal <[email protected]>

* [kube-state-metrics] Bump kube-state-metrics version to v2.6.0 (#2422)

Bumps the version of the referenced kube-state-metrics image to the latest released version v2.6.0.

Signed-off-by: Christian Schlotter <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* Updated chart version and dependecies

Signed-off-by: andrejshapal <[email protected]>

* Bumping version again

Signed-off-by: andrejshapal <[email protected]>

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: MH <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Signed-off-by: andrejshapal <[email protected]>
Signed-off-by: Dan Peric <[email protected]>
Signed-off-by: GitHub <[email protected]>
Signed-off-by: dependabot[bot] <[email protected]>
Signed-off-by: francisco.rangel-heb <[email protected]>
Signed-off-by: André Bauer <[email protected]>
Signed-off-by: helia.barroso <[email protected]>
Signed-off-by: Tuan Anh Nguyen <[email protected]>
Signed-off-by: sagdeevrr <[email protected]>
Signed-off-by: Staz <[email protected]>
Signed-off-by: Mikhail Naletov <[email protected]>
Signed-off-by: QuentinBisson <[email protected]>
Signed-off-by: Sébastien Prud'homme <[email protected]>
Signed-off-by: Taro Kitano <[email protected]>
Signed-off-by: Ihor16 <[email protected]>
Signed-off-by: sat-devopsnow <[email protected]>
Signed-off-by: moroviintaas <[email protected]>
Signed-off-by: ybelMekk <[email protected]>
Signed-off-by: Youssef Bel Mekki <[email protected]>
Signed-off-by: Zhaojun Li <[email protected]>
Signed-off-by: He, David (SIPD) <[email protected]>
Signed-off-by: gaoxiang <hs@38658>
Signed-off-by: Christian Schlotter <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
Co-authored-by: MH <[email protected]>
Co-authored-by: dpericaxon <[email protected]>
Co-authored-by: Zadkiel Aharonian <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Francisco Rangel <[email protected]>
Co-authored-by: André Bauer <[email protected]>
Co-authored-by: heliapb <[email protected]>
Co-authored-by: Tuan Anh Nguyen <[email protected]>
Co-authored-by: Rustem Sagdeev <[email protected]>
Co-authored-by: Staz <[email protected]>
Co-authored-by: Mikhail Naletov <[email protected]>
Co-authored-by: Quentin Bisson <[email protected]>
Co-authored-by: Sébastien Prud'homme <[email protected]>
Co-authored-by: tkit <[email protected]>
Co-authored-by: Ihor Parkhomenko <[email protected]>
Co-authored-by: sat-devopsnow <[email protected]>
Co-authored-by: moroviintaas <[email protected]>
Co-authored-by: Youssef Bel Mekki <[email protected]>
Co-authored-by: Zhaojun Li <[email protected]>
Co-authored-by: David He <[email protected]>
Co-authored-by: gitgaoxiang <[email protected]>
Co-authored-by: Christian Schlotter <[email protected]>
monotek added a commit that referenced this pull request Sep 11, 2022
* Updated chart version and dependecies

Signed-off-by: andrejshapal <[email protected]>

* [prometheus-postgres-exporter] DATA_SOURCE_PASS_FILE support (#2437)

Signed-off-by: Anthony TREUILLIER <[email protected]>

Signed-off-by: Anthony TREUILLIER <[email protected]>
Co-authored-by: Anthony TREUILLIER <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [kube-prometheus-stack] bump grafana 6.37.1 (9.1.2) (#2431)

* [prometheus-smartctl-exporter] Initial stab at a prometheus-smartctl-exporter chart (#2357)

* Initial stab at a prometheus-smartctl-exporter chart

Signed-off-by: Kevin Fox <[email protected]>

* Update values.yaml

Signed-off-by: MH <[email protected]>

Signed-off-by: MH <[email protected]>

* Update CODEOWNERS

Signed-off-by: MH <[email protected]>

Signed-off-by: MH <[email protected]>

* Update Chart.yaml

Signed-off-by: MH <[email protected]>

Signed-off-by: MH <[email protected]>

* Update tolerations to match node exporters

Signed-off-by: kfox1111 <[email protected]>

* Fix spacing on tolerations

Signed-off-by: Kevin Fox <[email protected]>

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: MH <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: MH <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [prometheus-adapter] Update To v0.10.0 (#2366)

Signed-off-by: Dan Peric <[email protected]>

Signed-off-by: Dan Peric <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [kube-prometheus-stack] add thanosRulerSpec.alertmanagersConfig config (#2358)

Signed-off-by: GitHub <[email protected]>

Signed-off-by: GitHub <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* Bump helm/chart-testing-action from 2.2.1 to 2.3.0 (#2368)

Bumps [helm/chart-testing-action](https://github.com/helm/chart-testing-action) from 2.2.1 to 2.3.0.
- [Release notes](https://github.com/helm/chart-testing-action/releases)
- [Commits](helm/chart-testing-action@v2.2.1...v2.3.0)

---
updated-dependencies:
- dependency-name: helm/chart-testing-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: andrejshapal <[email protected]>

* feat[kube-state-metrics]: add image sha support for image specified (#2370)

* feat[kube-state-metrics]: add image sha support for image specified

Signed-off-by: francisco.rangel-heb <[email protected]>

* chore: bump kube-state-metrics chart version

Signed-off-by: francisco.rangel-heb <[email protected]>

* chore: fix semantic version for kube-state-metrics chart

Signed-off-by: francisco.rangel-heb <[email protected]>

Signed-off-by: francisco.rangel-heb <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* Update Chart.yaml (#2371)

Signed-off-by: André Bauer <[email protected]>

Signed-off-by: André Bauer <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* Fix smartctl image and servicemonitor. (#2365)

Signed-off-by: Kevin Fox <[email protected]>

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* feat[prometheus-node-exporter]: add image sha support for image specified (#2377)

Signed-off-by: francisco.rangel-heb <[email protected]>

Signed-off-by: francisco.rangel-heb <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [kube-prometheus-stack] Add evaluationInterval to Thanos Ruler (#2374)

* feat:add evaluationintervar to ruler

Signed-off-by: helia.barroso <[email protected]>

* feat:change chartversion

Signed-off-by: helia.barroso <[email protected]>

* feat:change chartversion

Signed-off-by: helia.barroso <[email protected]>

* feat:change evaluationInterval

Signed-off-by: helia.barroso <[email protected]>

* fix:trailingspaces

Signed-off-by: helia.barroso <[email protected]>

Signed-off-by: helia.barroso <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [prometheus-stackdriver-exporter] Fix spec.serviceAccountName (#2378)

* fix spec.serviceAccountName

Signed-off-by: Tuan Anh Nguyen <[email protected]>

* kubernetes/kubernetes#72519

Signed-off-by: Tuan Anh Nguyen <[email protected]>

* Update charts/prometheus-stackdriver-exporter/Chart.yaml

Co-authored-by: André Bauer <[email protected]>
Signed-off-by: Tuan Anh Nguyen <[email protected]>

Signed-off-by: Tuan Anh Nguyen <[email protected]>
Co-authored-by: André Bauer <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* fix(prometheus-postgres-exporter): convert port variable to int (#2372)

Signed-off-by: sagdeevrr <[email protected]>

Signed-off-by: sagdeevrr <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [kube-prometheus-stack] Setting a custom timeout in admission mutatingWebhookConfiguration - Prometheus Operator chart Template (#2233)

* [kube-prometheus-stack] Setting a custom timeout in admission mutatingWebhookConfiguration - Prometheus Operator chart Template

Signed-off-by: Staz <[email protected]>

* Update charts/kube-prometheus-stack/Chart.yaml

Signed-off-by: André Bauer <[email protected]>

* Update Chart.yaml

Signed-off-by: André Bauer <[email protected]>

* Remove line

Signed-off-by: André Bauer <[email protected]>

* Remove whitespace

Signed-off-by: André Bauer <[email protected]>

Signed-off-by: Staz <[email protected]>
Signed-off-by: André Bauer <[email protected]>
Co-authored-by: André Bauer <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* feat: bump nats-exporter version (#2387)

Signed-off-by: Mikhail Naletov <[email protected]>

Signed-off-by: Mikhail Naletov <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [prometheus-node-exporter] Update labels to match best practices (#2212)

* [prometheus-node-exporter] Update labels

Signed-off-by: QuentinBisson <[email protected]>

* Fix readme

Signed-off-by: QuentinBisson <[email protected]>

* Fix readme and notes after successfull upgrade

Signed-off-by: QuentinBisson <[email protected]>

* Fix readme

Signed-off-by: QuentinBisson <[email protected]>

* Update charts/prometheus-node-exporter/README.md

Signed-off-by: QuentinBisson <[email protected]>

* Fix labels for service account

Signed-off-by: QuentinBisson <[email protected]>

Signed-off-by: QuentinBisson <[email protected]>
Co-authored-by: André Bauer <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [prometheus-postgres-exporter] Fix indentation (#2388)

Signed-off-by: Sébastien Prud'homme <[email protected]>

Signed-off-by: Sébastien Prud'homme <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [prometheus-snmp-exporter] make DaemonSet available (#2394)

Signed-off-by: Taro Kitano <[email protected]>

Signed-off-by: Taro Kitano <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [prometheus-mongodb-exporter] fixing default mongodb uri (#2379)

* fixed default mongo endpoint for mongodb exporter

Signed-off-by: Ihor16 <[email protected]>

* changing it back

Signed-off-by: Ihor16 <[email protected]>

* signing off now

Signed-off-by: Ihor16 <[email protected]>

* update chart version

Signed-off-by: André Bauer <[email protected]>

Signed-off-by: Ihor16 <[email protected]>
Signed-off-by: André Bauer <[email protected]>
Co-authored-by: André Bauer <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [prometheus-redis-exporter] support redis password file secret volume mount (#2401)

* [prometheus-redis-exporter] support redis password file secret volume mount

Signed-off-by: sat-devopsnow <[email protected]>

* Remove extraneous newline

Signed-off-by: sat-devopsnow <[email protected]>

Signed-off-by: sat-devopsnow <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [kube-prometheus-stack] Hint offline sources (#2411)

[kube-prometheus-stack]

* Hint for replacing image sources for containers:
	- grafana
	- sidecar
	- kube-state-metrics
	- prometheus-node-exporter

Signed-off-by: moroviintaas <[email protected]>

[kube-prometheus-stack]

* Bump chart version

Signed-off-by: moroviintaas <[email protected]>

Signed-off-by: moroviintaas <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [kube-prometheus-stack] SecurityContext for webhook job create/patch container (#2406)

* Stumbled in to this when working with kyverno and enforced strict policies.

Kyverno and using strict policy configuration, job create for `ingress-nginx-admission-create` fails with policies `require-drop-all`and `disallow-privilege-escalation`. Adding the ability to configure containers in webhooks create and patch from helm values.

> k describe job monitoring-kube-prometheus-admission-patch
```
resource Pod/my-namespace/monitoring-kube-prometheus-admission-patch-njdkq was blocked due to the following policies

disallow-capabilities-strict:
  require-drop-all: 'validation failure: Containers must drop `ALL` capabilities.'
disallow-privilege-escalation:
  privilege-escalation: 'validation error: Privilege escalation is disallowed. The
    fields spec.containers[*].securityContext.allowPrivilegeEscalation, spec.initContainers[*].securityContext.allowPrivilegeEscalation,
    and spec.ephemeralContainers[*].securityContext.allowPrivilegeEscalation must
    be set to `false`. Rule privilege-escalation failed at path /spec/containers/0/securityContext/'
```

Signed-off-by: ybelMekk <[email protected]>

* Chart Version bumped

Signed-off-by: ybelMekk <[email protected]>

* merge master

Signed-off-by: ybelMekk <[email protected]>

* issue with nil pointer for if, use with

Signed-off-by: ybelMekk <[email protected]>

* check for nil earlier

Signed-off-by: ybelMekk <[email protected]>

* leard something about helm today, i need to spec the path right to get it to work..

Signed-off-by: ybelMekk <[email protected]>

* tidy values.yaml, remove extra newlines

Signed-off-by: ybelMekk <[email protected]>

Signed-off-by: ybelMekk <[email protected]>
Signed-off-by: Youssef Bel Mekki <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [kube-state-metrics] Fix selfMonitor port (#2418)

[kube-state-metrics] Fix selfMonitor port (#2418)

Signed-off-by: Zhaojun Li <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [prometheus-snmp-exporter] update ingress api version template to support multiple kubernetes versions (#2395)

* update support of ingress api version

Signed-off-by: He, David (SIPD) <[email protected]>

* update the chart version

Signed-off-by: He, David (SIPD) <[email protected]>

Signed-off-by: He, David (SIPD) <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [prometheus-json-exporter] open service configuration (#2414)

* [prometheus-json-exporter] open service configuration

Signed-off-by: gaoxiang <hs@38658>

* [prometheus-json-exporter] open service configuration

Signed-off-by: gaoxiang <hs@38658>

Signed-off-by: gaoxiang <hs@38658>
Signed-off-by: andrejshapal <[email protected]>

* [kube-state-metrics] Bump kube-state-metrics version to v2.6.0 (#2422)

Bumps the version of the referenced kube-state-metrics image to the latest released version v2.6.0.

Signed-off-by: Christian Schlotter <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* Updated chart version and dependecies

Signed-off-by: andrejshapal <[email protected]>

* Bumping version again

Signed-off-by: andrejshapal <[email protected]>

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: MH <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Signed-off-by: andrejshapal <[email protected]>
Signed-off-by: Dan Peric <[email protected]>
Signed-off-by: GitHub <[email protected]>
Signed-off-by: dependabot[bot] <[email protected]>
Signed-off-by: francisco.rangel-heb <[email protected]>
Signed-off-by: André Bauer <[email protected]>
Signed-off-by: helia.barroso <[email protected]>
Signed-off-by: Tuan Anh Nguyen <[email protected]>
Signed-off-by: sagdeevrr <[email protected]>
Signed-off-by: Staz <[email protected]>
Signed-off-by: Mikhail Naletov <[email protected]>
Signed-off-by: QuentinBisson <[email protected]>
Signed-off-by: Sébastien Prud'homme <[email protected]>
Signed-off-by: Taro Kitano <[email protected]>
Signed-off-by: Ihor16 <[email protected]>
Signed-off-by: sat-devopsnow <[email protected]>
Signed-off-by: moroviintaas <[email protected]>
Signed-off-by: ybelMekk <[email protected]>
Signed-off-by: Youssef Bel Mekki <[email protected]>
Signed-off-by: Zhaojun Li <[email protected]>
Signed-off-by: He, David (SIPD) <[email protected]>
Signed-off-by: gaoxiang <hs@38658>
Signed-off-by: Christian Schlotter <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
Co-authored-by: MH <[email protected]>
Co-authored-by: dpericaxon <[email protected]>
Co-authored-by: Zadkiel Aharonian <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Francisco Rangel <[email protected]>
Co-authored-by: André Bauer <[email protected]>
Co-authored-by: heliapb <[email protected]>
Co-authored-by: Tuan Anh Nguyen <[email protected]>
Co-authored-by: Rustem Sagdeev <[email protected]>
Co-authored-by: Staz <[email protected]>
Co-authored-by: Mikhail Naletov <[email protected]>
Co-authored-by: Quentin Bisson <[email protected]>
Co-authored-by: Sébastien Prud'homme <[email protected]>
Co-authored-by: tkit <[email protected]>
Co-authored-by: Ihor Parkhomenko <[email protected]>
Co-authored-by: sat-devopsnow <[email protected]>
Co-authored-by: moroviintaas <[email protected]>
Co-authored-by: Youssef Bel Mekki <[email protected]>
Co-authored-by: Zhaojun Li <[email protected]>
Co-authored-by: David He <[email protected]>
Co-authored-by: gitgaoxiang <[email protected]>
Co-authored-by: Christian Schlotter <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* Blumping grafana version

Signed-off-by: andrejshapal <[email protected]>

* Reising version as minor

Signed-off-by: andrejshapal <[email protected]>

Signed-off-by: andrejshapal <[email protected]>
Signed-off-by: Anthony TREUILLIER <[email protected]>
Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: MH <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Signed-off-by: andrejshapal <[email protected]>
Signed-off-by: Dan Peric <[email protected]>
Signed-off-by: GitHub <[email protected]>
Signed-off-by: dependabot[bot] <[email protected]>
Signed-off-by: francisco.rangel-heb <[email protected]>
Signed-off-by: André Bauer <[email protected]>
Signed-off-by: helia.barroso <[email protected]>
Signed-off-by: Tuan Anh Nguyen <[email protected]>
Signed-off-by: sagdeevrr <[email protected]>
Signed-off-by: Staz <[email protected]>
Signed-off-by: Mikhail Naletov <[email protected]>
Signed-off-by: QuentinBisson <[email protected]>
Signed-off-by: Sébastien Prud'homme <[email protected]>
Signed-off-by: Taro Kitano <[email protected]>
Signed-off-by: Ihor16 <[email protected]>
Signed-off-by: sat-devopsnow <[email protected]>
Signed-off-by: moroviintaas <[email protected]>
Signed-off-by: ybelMekk <[email protected]>
Signed-off-by: Youssef Bel Mekki <[email protected]>
Signed-off-by: Zhaojun Li <[email protected]>
Signed-off-by: He, David (SIPD) <[email protected]>
Signed-off-by: gaoxiang <hs@38658>
Signed-off-by: Christian Schlotter <[email protected]>
Co-authored-by: antrema <[email protected]>
Co-authored-by: Anthony TREUILLIER <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
Co-authored-by: MH <[email protected]>
Co-authored-by: dpericaxon <[email protected]>
Co-authored-by: Zadkiel Aharonian <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Francisco Rangel <[email protected]>
Co-authored-by: André Bauer <[email protected]>
Co-authored-by: heliapb <[email protected]>
Co-authored-by: Tuan Anh Nguyen <[email protected]>
Co-authored-by: Rustem Sagdeev <[email protected]>
Co-authored-by: Staz <[email protected]>
Co-authored-by: Mikhail Naletov <[email protected]>
Co-authored-by: Quentin Bisson <[email protected]>
Co-authored-by: Sébastien Prud'homme <[email protected]>
Co-authored-by: tkit <[email protected]>
Co-authored-by: Ihor Parkhomenko <[email protected]>
Co-authored-by: sat-devopsnow <[email protected]>
Co-authored-by: moroviintaas <[email protected]>
Co-authored-by: Youssef Bel Mekki <[email protected]>
Co-authored-by: Zhaojun Li <[email protected]>
Co-authored-by: David He <[email protected]>
Co-authored-by: gitgaoxiang <[email protected]>
Co-authored-by: Christian Schlotter <[email protected]>
stamzid pushed a commit to Unstructured-IO/prometheus-community-helm-charts that referenced this pull request Mar 3, 2023
…container (prometheus-community#2406)

* Stumbled in to this when working with kyverno and enforced strict policies.

Kyverno and using strict policy configuration, job create for `ingress-nginx-admission-create` fails with policies `require-drop-all`and `disallow-privilege-escalation`. Adding the ability to configure containers in webhooks create and patch from helm values.

> k describe job monitoring-kube-prometheus-admission-patch
```
resource Pod/my-namespace/monitoring-kube-prometheus-admission-patch-njdkq was blocked due to the following policies

disallow-capabilities-strict:
  require-drop-all: 'validation failure: Containers must drop `ALL` capabilities.'
disallow-privilege-escalation:
  privilege-escalation: 'validation error: Privilege escalation is disallowed. The
    fields spec.containers[*].securityContext.allowPrivilegeEscalation, spec.initContainers[*].securityContext.allowPrivilegeEscalation,
    and spec.ephemeralContainers[*].securityContext.allowPrivilegeEscalation must
    be set to `false`. Rule privilege-escalation failed at path /spec/containers/0/securityContext/'
```

Signed-off-by: ybelMekk <[email protected]>

* Chart Version bumped

Signed-off-by: ybelMekk <[email protected]>

* merge master

Signed-off-by: ybelMekk <[email protected]>

* issue with nil pointer for if, use with

Signed-off-by: ybelMekk <[email protected]>

* check for nil earlier

Signed-off-by: ybelMekk <[email protected]>

* leard something about helm today, i need to spec the path right to get it to work..

Signed-off-by: ybelMekk <[email protected]>

* tidy values.yaml, remove extra newlines

Signed-off-by: ybelMekk <[email protected]>

Signed-off-by: ybelMekk <[email protected]>
Signed-off-by: Youssef Bel Mekki <[email protected]>
stamzid pushed a commit to Unstructured-IO/prometheus-community-helm-charts that referenced this pull request Mar 3, 2023
…nity#2431)

* [prometheus-smartctl-exporter] Initial stab at a prometheus-smartctl-exporter chart (prometheus-community#2357)

* Initial stab at a prometheus-smartctl-exporter chart

Signed-off-by: Kevin Fox <[email protected]>

* Update values.yaml

Signed-off-by: MH <[email protected]>

Signed-off-by: MH <[email protected]>

* Update CODEOWNERS

Signed-off-by: MH <[email protected]>

Signed-off-by: MH <[email protected]>

* Update Chart.yaml

Signed-off-by: MH <[email protected]>

Signed-off-by: MH <[email protected]>

* Update tolerations to match node exporters

Signed-off-by: kfox1111 <[email protected]>

* Fix spacing on tolerations

Signed-off-by: Kevin Fox <[email protected]>

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: MH <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: MH <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [prometheus-adapter] Update To v0.10.0 (prometheus-community#2366)

Signed-off-by: Dan Peric <[email protected]>

Signed-off-by: Dan Peric <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [kube-prometheus-stack] add thanosRulerSpec.alertmanagersConfig config (prometheus-community#2358)

Signed-off-by: GitHub <[email protected]>

Signed-off-by: GitHub <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* Bump helm/chart-testing-action from 2.2.1 to 2.3.0 (prometheus-community#2368)

Bumps [helm/chart-testing-action](https://github.com/helm/chart-testing-action) from 2.2.1 to 2.3.0.
- [Release notes](https://github.com/helm/chart-testing-action/releases)
- [Commits](helm/chart-testing-action@v2.2.1...v2.3.0)

---
updated-dependencies:
- dependency-name: helm/chart-testing-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: andrejshapal <[email protected]>

* feat[kube-state-metrics]: add image sha support for image specified (prometheus-community#2370)

* feat[kube-state-metrics]: add image sha support for image specified

Signed-off-by: francisco.rangel-heb <[email protected]>

* chore: bump kube-state-metrics chart version

Signed-off-by: francisco.rangel-heb <[email protected]>

* chore: fix semantic version for kube-state-metrics chart

Signed-off-by: francisco.rangel-heb <[email protected]>

Signed-off-by: francisco.rangel-heb <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* Update Chart.yaml (prometheus-community#2371)

Signed-off-by: André Bauer <[email protected]>

Signed-off-by: André Bauer <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* Fix smartctl image and servicemonitor. (prometheus-community#2365)

Signed-off-by: Kevin Fox <[email protected]>

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* feat[prometheus-node-exporter]: add image sha support for image specified (prometheus-community#2377)

Signed-off-by: francisco.rangel-heb <[email protected]>

Signed-off-by: francisco.rangel-heb <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [kube-prometheus-stack] Add evaluationInterval to Thanos Ruler (prometheus-community#2374)

* feat:add evaluationintervar to ruler

Signed-off-by: helia.barroso <[email protected]>

* feat:change chartversion

Signed-off-by: helia.barroso <[email protected]>

* feat:change chartversion

Signed-off-by: helia.barroso <[email protected]>

* feat:change evaluationInterval

Signed-off-by: helia.barroso <[email protected]>

* fix:trailingspaces

Signed-off-by: helia.barroso <[email protected]>

Signed-off-by: helia.barroso <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [prometheus-stackdriver-exporter] Fix spec.serviceAccountName (prometheus-community#2378)

* fix spec.serviceAccountName

Signed-off-by: Tuan Anh Nguyen <[email protected]>

* kubernetes/kubernetes#72519

Signed-off-by: Tuan Anh Nguyen <[email protected]>

* Update charts/prometheus-stackdriver-exporter/Chart.yaml

Co-authored-by: André Bauer <[email protected]>
Signed-off-by: Tuan Anh Nguyen <[email protected]>

Signed-off-by: Tuan Anh Nguyen <[email protected]>
Co-authored-by: André Bauer <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* fix(prometheus-postgres-exporter): convert port variable to int (prometheus-community#2372)

Signed-off-by: sagdeevrr <[email protected]>

Signed-off-by: sagdeevrr <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [kube-prometheus-stack] Setting a custom timeout in admission mutatingWebhookConfiguration - Prometheus Operator chart Template (prometheus-community#2233)

* [kube-prometheus-stack] Setting a custom timeout in admission mutatingWebhookConfiguration - Prometheus Operator chart Template

Signed-off-by: Staz <[email protected]>

* Update charts/kube-prometheus-stack/Chart.yaml

Signed-off-by: André Bauer <[email protected]>

* Update Chart.yaml

Signed-off-by: André Bauer <[email protected]>

* Remove line

Signed-off-by: André Bauer <[email protected]>

* Remove whitespace

Signed-off-by: André Bauer <[email protected]>

Signed-off-by: Staz <[email protected]>
Signed-off-by: André Bauer <[email protected]>
Co-authored-by: André Bauer <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* feat: bump nats-exporter version (prometheus-community#2387)

Signed-off-by: Mikhail Naletov <[email protected]>

Signed-off-by: Mikhail Naletov <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [prometheus-node-exporter] Update labels to match best practices (prometheus-community#2212)

* [prometheus-node-exporter] Update labels

Signed-off-by: QuentinBisson <[email protected]>

* Fix readme

Signed-off-by: QuentinBisson <[email protected]>

* Fix readme and notes after successfull upgrade

Signed-off-by: QuentinBisson <[email protected]>

* Fix readme

Signed-off-by: QuentinBisson <[email protected]>

* Update charts/prometheus-node-exporter/README.md

Signed-off-by: QuentinBisson <[email protected]>

* Fix labels for service account

Signed-off-by: QuentinBisson <[email protected]>

Signed-off-by: QuentinBisson <[email protected]>
Co-authored-by: André Bauer <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [prometheus-postgres-exporter] Fix indentation (prometheus-community#2388)

Signed-off-by: Sébastien Prud'homme <[email protected]>

Signed-off-by: Sébastien Prud'homme <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [prometheus-snmp-exporter] make DaemonSet available (prometheus-community#2394)

Signed-off-by: Taro Kitano <[email protected]>

Signed-off-by: Taro Kitano <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [prometheus-mongodb-exporter] fixing default mongodb uri (prometheus-community#2379)

* fixed default mongo endpoint for mongodb exporter

Signed-off-by: Ihor16 <[email protected]>

* changing it back

Signed-off-by: Ihor16 <[email protected]>

* signing off now

Signed-off-by: Ihor16 <[email protected]>

* update chart version

Signed-off-by: André Bauer <[email protected]>

Signed-off-by: Ihor16 <[email protected]>
Signed-off-by: André Bauer <[email protected]>
Co-authored-by: André Bauer <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [prometheus-redis-exporter] support redis password file secret volume mount (prometheus-community#2401)

* [prometheus-redis-exporter] support redis password file secret volume mount

Signed-off-by: sat-devopsnow <[email protected]>

* Remove extraneous newline

Signed-off-by: sat-devopsnow <[email protected]>

Signed-off-by: sat-devopsnow <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [kube-prometheus-stack] Hint offline sources (prometheus-community#2411)

[kube-prometheus-stack]

* Hint for replacing image sources for containers:
	- grafana
	- sidecar
	- kube-state-metrics
	- prometheus-node-exporter

Signed-off-by: moroviintaas <[email protected]>

[kube-prometheus-stack]

* Bump chart version

Signed-off-by: moroviintaas <[email protected]>

Signed-off-by: moroviintaas <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [kube-prometheus-stack] SecurityContext for webhook job create/patch container (prometheus-community#2406)

* Stumbled in to this when working with kyverno and enforced strict policies.

Kyverno and using strict policy configuration, job create for `ingress-nginx-admission-create` fails with policies `require-drop-all`and `disallow-privilege-escalation`. Adding the ability to configure containers in webhooks create and patch from helm values.

> k describe job monitoring-kube-prometheus-admission-patch
```
resource Pod/my-namespace/monitoring-kube-prometheus-admission-patch-njdkq was blocked due to the following policies

disallow-capabilities-strict:
  require-drop-all: 'validation failure: Containers must drop `ALL` capabilities.'
disallow-privilege-escalation:
  privilege-escalation: 'validation error: Privilege escalation is disallowed. The
    fields spec.containers[*].securityContext.allowPrivilegeEscalation, spec.initContainers[*].securityContext.allowPrivilegeEscalation,
    and spec.ephemeralContainers[*].securityContext.allowPrivilegeEscalation must
    be set to `false`. Rule privilege-escalation failed at path /spec/containers/0/securityContext/'
```

Signed-off-by: ybelMekk <[email protected]>

* Chart Version bumped

Signed-off-by: ybelMekk <[email protected]>

* merge master

Signed-off-by: ybelMekk <[email protected]>

* issue with nil pointer for if, use with

Signed-off-by: ybelMekk <[email protected]>

* check for nil earlier

Signed-off-by: ybelMekk <[email protected]>

* leard something about helm today, i need to spec the path right to get it to work..

Signed-off-by: ybelMekk <[email protected]>

* tidy values.yaml, remove extra newlines

Signed-off-by: ybelMekk <[email protected]>

Signed-off-by: ybelMekk <[email protected]>
Signed-off-by: Youssef Bel Mekki <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [kube-state-metrics] Fix selfMonitor port (prometheus-community#2418)

[kube-state-metrics] Fix selfMonitor port (prometheus-community#2418)

Signed-off-by: Zhaojun Li <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [prometheus-snmp-exporter] update ingress api version template to support multiple kubernetes versions (prometheus-community#2395)

* update support of ingress api version

Signed-off-by: He, David (SIPD) <[email protected]>

* update the chart version

Signed-off-by: He, David (SIPD) <[email protected]>

Signed-off-by: He, David (SIPD) <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [prometheus-json-exporter] open service configuration (prometheus-community#2414)

* [prometheus-json-exporter] open service configuration

Signed-off-by: gaoxiang <hs@38658>

* [prometheus-json-exporter] open service configuration

Signed-off-by: gaoxiang <hs@38658>

Signed-off-by: gaoxiang <hs@38658>
Signed-off-by: andrejshapal <[email protected]>

* [kube-state-metrics] Bump kube-state-metrics version to v2.6.0 (prometheus-community#2422)

Bumps the version of the referenced kube-state-metrics image to the latest released version v2.6.0.

Signed-off-by: Christian Schlotter <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* Updated chart version and dependecies

Signed-off-by: andrejshapal <[email protected]>

* Bumping version again

Signed-off-by: andrejshapal <[email protected]>

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: MH <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Signed-off-by: andrejshapal <[email protected]>
Signed-off-by: Dan Peric <[email protected]>
Signed-off-by: GitHub <[email protected]>
Signed-off-by: dependabot[bot] <[email protected]>
Signed-off-by: francisco.rangel-heb <[email protected]>
Signed-off-by: André Bauer <[email protected]>
Signed-off-by: helia.barroso <[email protected]>
Signed-off-by: Tuan Anh Nguyen <[email protected]>
Signed-off-by: sagdeevrr <[email protected]>
Signed-off-by: Staz <[email protected]>
Signed-off-by: Mikhail Naletov <[email protected]>
Signed-off-by: QuentinBisson <[email protected]>
Signed-off-by: Sébastien Prud'homme <[email protected]>
Signed-off-by: Taro Kitano <[email protected]>
Signed-off-by: Ihor16 <[email protected]>
Signed-off-by: sat-devopsnow <[email protected]>
Signed-off-by: moroviintaas <[email protected]>
Signed-off-by: ybelMekk <[email protected]>
Signed-off-by: Youssef Bel Mekki <[email protected]>
Signed-off-by: Zhaojun Li <[email protected]>
Signed-off-by: He, David (SIPD) <[email protected]>
Signed-off-by: gaoxiang <hs@38658>
Signed-off-by: Christian Schlotter <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
Co-authored-by: MH <[email protected]>
Co-authored-by: dpericaxon <[email protected]>
Co-authored-by: Zadkiel Aharonian <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Francisco Rangel <[email protected]>
Co-authored-by: André Bauer <[email protected]>
Co-authored-by: heliapb <[email protected]>
Co-authored-by: Tuan Anh Nguyen <[email protected]>
Co-authored-by: Rustem Sagdeev <[email protected]>
Co-authored-by: Staz <[email protected]>
Co-authored-by: Mikhail Naletov <[email protected]>
Co-authored-by: Quentin Bisson <[email protected]>
Co-authored-by: Sébastien Prud'homme <[email protected]>
Co-authored-by: tkit <[email protected]>
Co-authored-by: Ihor Parkhomenko <[email protected]>
Co-authored-by: sat-devopsnow <[email protected]>
Co-authored-by: moroviintaas <[email protected]>
Co-authored-by: Youssef Bel Mekki <[email protected]>
Co-authored-by: Zhaojun Li <[email protected]>
Co-authored-by: David He <[email protected]>
Co-authored-by: gitgaoxiang <[email protected]>
Co-authored-by: Christian Schlotter <[email protected]>
stamzid pushed a commit to Unstructured-IO/prometheus-community-helm-charts that referenced this pull request Mar 3, 2023
…theus-community#2443)

* Updated chart version and dependecies

Signed-off-by: andrejshapal <[email protected]>

* [prometheus-postgres-exporter] DATA_SOURCE_PASS_FILE support (prometheus-community#2437)

Signed-off-by: Anthony TREUILLIER <[email protected]>

Signed-off-by: Anthony TREUILLIER <[email protected]>
Co-authored-by: Anthony TREUILLIER <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [kube-prometheus-stack] bump grafana 6.37.1 (9.1.2) (prometheus-community#2431)

* [prometheus-smartctl-exporter] Initial stab at a prometheus-smartctl-exporter chart (prometheus-community#2357)

* Initial stab at a prometheus-smartctl-exporter chart

Signed-off-by: Kevin Fox <[email protected]>

* Update values.yaml

Signed-off-by: MH <[email protected]>

Signed-off-by: MH <[email protected]>

* Update CODEOWNERS

Signed-off-by: MH <[email protected]>

Signed-off-by: MH <[email protected]>

* Update Chart.yaml

Signed-off-by: MH <[email protected]>

Signed-off-by: MH <[email protected]>

* Update tolerations to match node exporters

Signed-off-by: kfox1111 <[email protected]>

* Fix spacing on tolerations

Signed-off-by: Kevin Fox <[email protected]>

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: MH <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: MH <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [prometheus-adapter] Update To v0.10.0 (prometheus-community#2366)

Signed-off-by: Dan Peric <[email protected]>

Signed-off-by: Dan Peric <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [kube-prometheus-stack] add thanosRulerSpec.alertmanagersConfig config (prometheus-community#2358)

Signed-off-by: GitHub <[email protected]>

Signed-off-by: GitHub <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* Bump helm/chart-testing-action from 2.2.1 to 2.3.0 (prometheus-community#2368)

Bumps [helm/chart-testing-action](https://github.com/helm/chart-testing-action) from 2.2.1 to 2.3.0.
- [Release notes](https://github.com/helm/chart-testing-action/releases)
- [Commits](helm/chart-testing-action@v2.2.1...v2.3.0)

---
updated-dependencies:
- dependency-name: helm/chart-testing-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: andrejshapal <[email protected]>

* feat[kube-state-metrics]: add image sha support for image specified (prometheus-community#2370)

* feat[kube-state-metrics]: add image sha support for image specified

Signed-off-by: francisco.rangel-heb <[email protected]>

* chore: bump kube-state-metrics chart version

Signed-off-by: francisco.rangel-heb <[email protected]>

* chore: fix semantic version for kube-state-metrics chart

Signed-off-by: francisco.rangel-heb <[email protected]>

Signed-off-by: francisco.rangel-heb <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* Update Chart.yaml (prometheus-community#2371)

Signed-off-by: André Bauer <[email protected]>

Signed-off-by: André Bauer <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* Fix smartctl image and servicemonitor. (prometheus-community#2365)

Signed-off-by: Kevin Fox <[email protected]>

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* feat[prometheus-node-exporter]: add image sha support for image specified (prometheus-community#2377)

Signed-off-by: francisco.rangel-heb <[email protected]>

Signed-off-by: francisco.rangel-heb <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [kube-prometheus-stack] Add evaluationInterval to Thanos Ruler (prometheus-community#2374)

* feat:add evaluationintervar to ruler

Signed-off-by: helia.barroso <[email protected]>

* feat:change chartversion

Signed-off-by: helia.barroso <[email protected]>

* feat:change chartversion

Signed-off-by: helia.barroso <[email protected]>

* feat:change evaluationInterval

Signed-off-by: helia.barroso <[email protected]>

* fix:trailingspaces

Signed-off-by: helia.barroso <[email protected]>

Signed-off-by: helia.barroso <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [prometheus-stackdriver-exporter] Fix spec.serviceAccountName (prometheus-community#2378)

* fix spec.serviceAccountName

Signed-off-by: Tuan Anh Nguyen <[email protected]>

* kubernetes/kubernetes#72519

Signed-off-by: Tuan Anh Nguyen <[email protected]>

* Update charts/prometheus-stackdriver-exporter/Chart.yaml

Co-authored-by: André Bauer <[email protected]>
Signed-off-by: Tuan Anh Nguyen <[email protected]>

Signed-off-by: Tuan Anh Nguyen <[email protected]>
Co-authored-by: André Bauer <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* fix(prometheus-postgres-exporter): convert port variable to int (prometheus-community#2372)

Signed-off-by: sagdeevrr <[email protected]>

Signed-off-by: sagdeevrr <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [kube-prometheus-stack] Setting a custom timeout in admission mutatingWebhookConfiguration - Prometheus Operator chart Template (prometheus-community#2233)

* [kube-prometheus-stack] Setting a custom timeout in admission mutatingWebhookConfiguration - Prometheus Operator chart Template

Signed-off-by: Staz <[email protected]>

* Update charts/kube-prometheus-stack/Chart.yaml

Signed-off-by: André Bauer <[email protected]>

* Update Chart.yaml

Signed-off-by: André Bauer <[email protected]>

* Remove line

Signed-off-by: André Bauer <[email protected]>

* Remove whitespace

Signed-off-by: André Bauer <[email protected]>

Signed-off-by: Staz <[email protected]>
Signed-off-by: André Bauer <[email protected]>
Co-authored-by: André Bauer <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* feat: bump nats-exporter version (prometheus-community#2387)

Signed-off-by: Mikhail Naletov <[email protected]>

Signed-off-by: Mikhail Naletov <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [prometheus-node-exporter] Update labels to match best practices (prometheus-community#2212)

* [prometheus-node-exporter] Update labels

Signed-off-by: QuentinBisson <[email protected]>

* Fix readme

Signed-off-by: QuentinBisson <[email protected]>

* Fix readme and notes after successfull upgrade

Signed-off-by: QuentinBisson <[email protected]>

* Fix readme

Signed-off-by: QuentinBisson <[email protected]>

* Update charts/prometheus-node-exporter/README.md

Signed-off-by: QuentinBisson <[email protected]>

* Fix labels for service account

Signed-off-by: QuentinBisson <[email protected]>

Signed-off-by: QuentinBisson <[email protected]>
Co-authored-by: André Bauer <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [prometheus-postgres-exporter] Fix indentation (prometheus-community#2388)

Signed-off-by: Sébastien Prud'homme <[email protected]>

Signed-off-by: Sébastien Prud'homme <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [prometheus-snmp-exporter] make DaemonSet available (prometheus-community#2394)

Signed-off-by: Taro Kitano <[email protected]>

Signed-off-by: Taro Kitano <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [prometheus-mongodb-exporter] fixing default mongodb uri (prometheus-community#2379)

* fixed default mongo endpoint for mongodb exporter

Signed-off-by: Ihor16 <[email protected]>

* changing it back

Signed-off-by: Ihor16 <[email protected]>

* signing off now

Signed-off-by: Ihor16 <[email protected]>

* update chart version

Signed-off-by: André Bauer <[email protected]>

Signed-off-by: Ihor16 <[email protected]>
Signed-off-by: André Bauer <[email protected]>
Co-authored-by: André Bauer <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [prometheus-redis-exporter] support redis password file secret volume mount (prometheus-community#2401)

* [prometheus-redis-exporter] support redis password file secret volume mount

Signed-off-by: sat-devopsnow <[email protected]>

* Remove extraneous newline

Signed-off-by: sat-devopsnow <[email protected]>

Signed-off-by: sat-devopsnow <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [kube-prometheus-stack] Hint offline sources (prometheus-community#2411)

[kube-prometheus-stack]

* Hint for replacing image sources for containers:
	- grafana
	- sidecar
	- kube-state-metrics
	- prometheus-node-exporter

Signed-off-by: moroviintaas <[email protected]>

[kube-prometheus-stack]

* Bump chart version

Signed-off-by: moroviintaas <[email protected]>

Signed-off-by: moroviintaas <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [kube-prometheus-stack] SecurityContext for webhook job create/patch container (prometheus-community#2406)

* Stumbled in to this when working with kyverno and enforced strict policies.

Kyverno and using strict policy configuration, job create for `ingress-nginx-admission-create` fails with policies `require-drop-all`and `disallow-privilege-escalation`. Adding the ability to configure containers in webhooks create and patch from helm values.

> k describe job monitoring-kube-prometheus-admission-patch
```
resource Pod/my-namespace/monitoring-kube-prometheus-admission-patch-njdkq was blocked due to the following policies

disallow-capabilities-strict:
  require-drop-all: 'validation failure: Containers must drop `ALL` capabilities.'
disallow-privilege-escalation:
  privilege-escalation: 'validation error: Privilege escalation is disallowed. The
    fields spec.containers[*].securityContext.allowPrivilegeEscalation, spec.initContainers[*].securityContext.allowPrivilegeEscalation,
    and spec.ephemeralContainers[*].securityContext.allowPrivilegeEscalation must
    be set to `false`. Rule privilege-escalation failed at path /spec/containers/0/securityContext/'
```

Signed-off-by: ybelMekk <[email protected]>

* Chart Version bumped

Signed-off-by: ybelMekk <[email protected]>

* merge master

Signed-off-by: ybelMekk <[email protected]>

* issue with nil pointer for if, use with

Signed-off-by: ybelMekk <[email protected]>

* check for nil earlier

Signed-off-by: ybelMekk <[email protected]>

* leard something about helm today, i need to spec the path right to get it to work..

Signed-off-by: ybelMekk <[email protected]>

* tidy values.yaml, remove extra newlines

Signed-off-by: ybelMekk <[email protected]>

Signed-off-by: ybelMekk <[email protected]>
Signed-off-by: Youssef Bel Mekki <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [kube-state-metrics] Fix selfMonitor port (prometheus-community#2418)

[kube-state-metrics] Fix selfMonitor port (prometheus-community#2418)

Signed-off-by: Zhaojun Li <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [prometheus-snmp-exporter] update ingress api version template to support multiple kubernetes versions (prometheus-community#2395)

* update support of ingress api version

Signed-off-by: He, David (SIPD) <[email protected]>

* update the chart version

Signed-off-by: He, David (SIPD) <[email protected]>

Signed-off-by: He, David (SIPD) <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [prometheus-json-exporter] open service configuration (prometheus-community#2414)

* [prometheus-json-exporter] open service configuration

Signed-off-by: gaoxiang <hs@38658>

* [prometheus-json-exporter] open service configuration

Signed-off-by: gaoxiang <hs@38658>

Signed-off-by: gaoxiang <hs@38658>
Signed-off-by: andrejshapal <[email protected]>

* [kube-state-metrics] Bump kube-state-metrics version to v2.6.0 (prometheus-community#2422)

Bumps the version of the referenced kube-state-metrics image to the latest released version v2.6.0.

Signed-off-by: Christian Schlotter <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* Updated chart version and dependecies

Signed-off-by: andrejshapal <[email protected]>

* Bumping version again

Signed-off-by: andrejshapal <[email protected]>

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: MH <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Signed-off-by: andrejshapal <[email protected]>
Signed-off-by: Dan Peric <[email protected]>
Signed-off-by: GitHub <[email protected]>
Signed-off-by: dependabot[bot] <[email protected]>
Signed-off-by: francisco.rangel-heb <[email protected]>
Signed-off-by: André Bauer <[email protected]>
Signed-off-by: helia.barroso <[email protected]>
Signed-off-by: Tuan Anh Nguyen <[email protected]>
Signed-off-by: sagdeevrr <[email protected]>
Signed-off-by: Staz <[email protected]>
Signed-off-by: Mikhail Naletov <[email protected]>
Signed-off-by: QuentinBisson <[email protected]>
Signed-off-by: Sébastien Prud'homme <[email protected]>
Signed-off-by: Taro Kitano <[email protected]>
Signed-off-by: Ihor16 <[email protected]>
Signed-off-by: sat-devopsnow <[email protected]>
Signed-off-by: moroviintaas <[email protected]>
Signed-off-by: ybelMekk <[email protected]>
Signed-off-by: Youssef Bel Mekki <[email protected]>
Signed-off-by: Zhaojun Li <[email protected]>
Signed-off-by: He, David (SIPD) <[email protected]>
Signed-off-by: gaoxiang <hs@38658>
Signed-off-by: Christian Schlotter <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
Co-authored-by: MH <[email protected]>
Co-authored-by: dpericaxon <[email protected]>
Co-authored-by: Zadkiel Aharonian <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Francisco Rangel <[email protected]>
Co-authored-by: André Bauer <[email protected]>
Co-authored-by: heliapb <[email protected]>
Co-authored-by: Tuan Anh Nguyen <[email protected]>
Co-authored-by: Rustem Sagdeev <[email protected]>
Co-authored-by: Staz <[email protected]>
Co-authored-by: Mikhail Naletov <[email protected]>
Co-authored-by: Quentin Bisson <[email protected]>
Co-authored-by: Sébastien Prud'homme <[email protected]>
Co-authored-by: tkit <[email protected]>
Co-authored-by: Ihor Parkhomenko <[email protected]>
Co-authored-by: sat-devopsnow <[email protected]>
Co-authored-by: moroviintaas <[email protected]>
Co-authored-by: Youssef Bel Mekki <[email protected]>
Co-authored-by: Zhaojun Li <[email protected]>
Co-authored-by: David He <[email protected]>
Co-authored-by: gitgaoxiang <[email protected]>
Co-authored-by: Christian Schlotter <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* Blumping grafana version

Signed-off-by: andrejshapal <[email protected]>

* Reising version as minor

Signed-off-by: andrejshapal <[email protected]>

Signed-off-by: andrejshapal <[email protected]>
Signed-off-by: Anthony TREUILLIER <[email protected]>
Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: MH <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Signed-off-by: andrejshapal <[email protected]>
Signed-off-by: Dan Peric <[email protected]>
Signed-off-by: GitHub <[email protected]>
Signed-off-by: dependabot[bot] <[email protected]>
Signed-off-by: francisco.rangel-heb <[email protected]>
Signed-off-by: André Bauer <[email protected]>
Signed-off-by: helia.barroso <[email protected]>
Signed-off-by: Tuan Anh Nguyen <[email protected]>
Signed-off-by: sagdeevrr <[email protected]>
Signed-off-by: Staz <[email protected]>
Signed-off-by: Mikhail Naletov <[email protected]>
Signed-off-by: QuentinBisson <[email protected]>
Signed-off-by: Sébastien Prud'homme <[email protected]>
Signed-off-by: Taro Kitano <[email protected]>
Signed-off-by: Ihor16 <[email protected]>
Signed-off-by: sat-devopsnow <[email protected]>
Signed-off-by: moroviintaas <[email protected]>
Signed-off-by: ybelMekk <[email protected]>
Signed-off-by: Youssef Bel Mekki <[email protected]>
Signed-off-by: Zhaojun Li <[email protected]>
Signed-off-by: He, David (SIPD) <[email protected]>
Signed-off-by: gaoxiang <hs@38658>
Signed-off-by: Christian Schlotter <[email protected]>
Co-authored-by: antrema <[email protected]>
Co-authored-by: Anthony TREUILLIER <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
Co-authored-by: MH <[email protected]>
Co-authored-by: dpericaxon <[email protected]>
Co-authored-by: Zadkiel Aharonian <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Francisco Rangel <[email protected]>
Co-authored-by: André Bauer <[email protected]>
Co-authored-by: heliapb <[email protected]>
Co-authored-by: Tuan Anh Nguyen <[email protected]>
Co-authored-by: Rustem Sagdeev <[email protected]>
Co-authored-by: Staz <[email protected]>
Co-authored-by: Mikhail Naletov <[email protected]>
Co-authored-by: Quentin Bisson <[email protected]>
Co-authored-by: Sébastien Prud'homme <[email protected]>
Co-authored-by: tkit <[email protected]>
Co-authored-by: Ihor Parkhomenko <[email protected]>
Co-authored-by: sat-devopsnow <[email protected]>
Co-authored-by: moroviintaas <[email protected]>
Co-authored-by: Youssef Bel Mekki <[email protected]>
Co-authored-by: Zhaojun Li <[email protected]>
Co-authored-by: David He <[email protected]>
Co-authored-by: gitgaoxiang <[email protected]>
Co-authored-by: Christian Schlotter <[email protected]>
Matiasmct pushed a commit to giffgaff/prometheus-charts-backup that referenced this pull request May 16, 2023
…container (prometheus-community#2406)

* Stumbled in to this when working with kyverno and enforced strict policies.

Kyverno and using strict policy configuration, job create for `ingress-nginx-admission-create` fails with policies `require-drop-all`and `disallow-privilege-escalation`. Adding the ability to configure containers in webhooks create and patch from helm values.

> k describe job monitoring-kube-prometheus-admission-patch
```
resource Pod/my-namespace/monitoring-kube-prometheus-admission-patch-njdkq was blocked due to the following policies

disallow-capabilities-strict:
  require-drop-all: 'validation failure: Containers must drop `ALL` capabilities.'
disallow-privilege-escalation:
  privilege-escalation: 'validation error: Privilege escalation is disallowed. The
    fields spec.containers[*].securityContext.allowPrivilegeEscalation, spec.initContainers[*].securityContext.allowPrivilegeEscalation,
    and spec.ephemeralContainers[*].securityContext.allowPrivilegeEscalation must
    be set to `false`. Rule privilege-escalation failed at path /spec/containers/0/securityContext/'
```

Signed-off-by: ybelMekk <[email protected]>

* Chart Version bumped

Signed-off-by: ybelMekk <[email protected]>

* merge master

Signed-off-by: ybelMekk <[email protected]>

* issue with nil pointer for if, use with

Signed-off-by: ybelMekk <[email protected]>

* check for nil earlier

Signed-off-by: ybelMekk <[email protected]>

* leard something about helm today, i need to spec the path right to get it to work..

Signed-off-by: ybelMekk <[email protected]>

* tidy values.yaml, remove extra newlines

Signed-off-by: ybelMekk <[email protected]>

Signed-off-by: ybelMekk <[email protected]>
Signed-off-by: Youssef Bel Mekki <[email protected]>
Matiasmct pushed a commit to giffgaff/prometheus-charts-backup that referenced this pull request May 16, 2023
…nity#2431)

* [prometheus-smartctl-exporter] Initial stab at a prometheus-smartctl-exporter chart (prometheus-community#2357)

* Initial stab at a prometheus-smartctl-exporter chart

Signed-off-by: Kevin Fox <[email protected]>

* Update values.yaml

Signed-off-by: MH <[email protected]>

Signed-off-by: MH <[email protected]>

* Update CODEOWNERS

Signed-off-by: MH <[email protected]>

Signed-off-by: MH <[email protected]>

* Update Chart.yaml

Signed-off-by: MH <[email protected]>

Signed-off-by: MH <[email protected]>

* Update tolerations to match node exporters

Signed-off-by: kfox1111 <[email protected]>

* Fix spacing on tolerations

Signed-off-by: Kevin Fox <[email protected]>

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: MH <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: MH <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [prometheus-adapter] Update To v0.10.0 (prometheus-community#2366)

Signed-off-by: Dan Peric <[email protected]>

Signed-off-by: Dan Peric <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [kube-prometheus-stack] add thanosRulerSpec.alertmanagersConfig config (prometheus-community#2358)

Signed-off-by: GitHub <[email protected]>

Signed-off-by: GitHub <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* Bump helm/chart-testing-action from 2.2.1 to 2.3.0 (prometheus-community#2368)

Bumps [helm/chart-testing-action](https://github.com/helm/chart-testing-action) from 2.2.1 to 2.3.0.
- [Release notes](https://github.com/helm/chart-testing-action/releases)
- [Commits](helm/chart-testing-action@v2.2.1...v2.3.0)

---
updated-dependencies:
- dependency-name: helm/chart-testing-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: andrejshapal <[email protected]>

* feat[kube-state-metrics]: add image sha support for image specified (prometheus-community#2370)

* feat[kube-state-metrics]: add image sha support for image specified

Signed-off-by: francisco.rangel-heb <[email protected]>

* chore: bump kube-state-metrics chart version

Signed-off-by: francisco.rangel-heb <[email protected]>

* chore: fix semantic version for kube-state-metrics chart

Signed-off-by: francisco.rangel-heb <[email protected]>

Signed-off-by: francisco.rangel-heb <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* Update Chart.yaml (prometheus-community#2371)

Signed-off-by: André Bauer <[email protected]>

Signed-off-by: André Bauer <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* Fix smartctl image and servicemonitor. (prometheus-community#2365)

Signed-off-by: Kevin Fox <[email protected]>

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* feat[prometheus-node-exporter]: add image sha support for image specified (prometheus-community#2377)

Signed-off-by: francisco.rangel-heb <[email protected]>

Signed-off-by: francisco.rangel-heb <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [kube-prometheus-stack] Add evaluationInterval to Thanos Ruler (prometheus-community#2374)

* feat:add evaluationintervar to ruler

Signed-off-by: helia.barroso <[email protected]>

* feat:change chartversion

Signed-off-by: helia.barroso <[email protected]>

* feat:change chartversion

Signed-off-by: helia.barroso <[email protected]>

* feat:change evaluationInterval

Signed-off-by: helia.barroso <[email protected]>

* fix:trailingspaces

Signed-off-by: helia.barroso <[email protected]>

Signed-off-by: helia.barroso <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [prometheus-stackdriver-exporter] Fix spec.serviceAccountName (prometheus-community#2378)

* fix spec.serviceAccountName

Signed-off-by: Tuan Anh Nguyen <[email protected]>

* kubernetes/kubernetes#72519

Signed-off-by: Tuan Anh Nguyen <[email protected]>

* Update charts/prometheus-stackdriver-exporter/Chart.yaml

Co-authored-by: André Bauer <[email protected]>
Signed-off-by: Tuan Anh Nguyen <[email protected]>

Signed-off-by: Tuan Anh Nguyen <[email protected]>
Co-authored-by: André Bauer <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* fix(prometheus-postgres-exporter): convert port variable to int (prometheus-community#2372)

Signed-off-by: sagdeevrr <[email protected]>

Signed-off-by: sagdeevrr <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [kube-prometheus-stack] Setting a custom timeout in admission mutatingWebhookConfiguration - Prometheus Operator chart Template (prometheus-community#2233)

* [kube-prometheus-stack] Setting a custom timeout in admission mutatingWebhookConfiguration - Prometheus Operator chart Template

Signed-off-by: Staz <[email protected]>

* Update charts/kube-prometheus-stack/Chart.yaml

Signed-off-by: André Bauer <[email protected]>

* Update Chart.yaml

Signed-off-by: André Bauer <[email protected]>

* Remove line

Signed-off-by: André Bauer <[email protected]>

* Remove whitespace

Signed-off-by: André Bauer <[email protected]>

Signed-off-by: Staz <[email protected]>
Signed-off-by: André Bauer <[email protected]>
Co-authored-by: André Bauer <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* feat: bump nats-exporter version (prometheus-community#2387)

Signed-off-by: Mikhail Naletov <[email protected]>

Signed-off-by: Mikhail Naletov <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [prometheus-node-exporter] Update labels to match best practices (prometheus-community#2212)

* [prometheus-node-exporter] Update labels

Signed-off-by: QuentinBisson <[email protected]>

* Fix readme

Signed-off-by: QuentinBisson <[email protected]>

* Fix readme and notes after successfull upgrade

Signed-off-by: QuentinBisson <[email protected]>

* Fix readme

Signed-off-by: QuentinBisson <[email protected]>

* Update charts/prometheus-node-exporter/README.md

Signed-off-by: QuentinBisson <[email protected]>

* Fix labels for service account

Signed-off-by: QuentinBisson <[email protected]>

Signed-off-by: QuentinBisson <[email protected]>
Co-authored-by: André Bauer <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [prometheus-postgres-exporter] Fix indentation (prometheus-community#2388)

Signed-off-by: Sébastien Prud'homme <[email protected]>

Signed-off-by: Sébastien Prud'homme <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [prometheus-snmp-exporter] make DaemonSet available (prometheus-community#2394)

Signed-off-by: Taro Kitano <[email protected]>

Signed-off-by: Taro Kitano <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [prometheus-mongodb-exporter] fixing default mongodb uri (prometheus-community#2379)

* fixed default mongo endpoint for mongodb exporter

Signed-off-by: Ihor16 <[email protected]>

* changing it back

Signed-off-by: Ihor16 <[email protected]>

* signing off now

Signed-off-by: Ihor16 <[email protected]>

* update chart version

Signed-off-by: André Bauer <[email protected]>

Signed-off-by: Ihor16 <[email protected]>
Signed-off-by: André Bauer <[email protected]>
Co-authored-by: André Bauer <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [prometheus-redis-exporter] support redis password file secret volume mount (prometheus-community#2401)

* [prometheus-redis-exporter] support redis password file secret volume mount

Signed-off-by: sat-devopsnow <[email protected]>

* Remove extraneous newline

Signed-off-by: sat-devopsnow <[email protected]>

Signed-off-by: sat-devopsnow <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [kube-prometheus-stack] Hint offline sources (prometheus-community#2411)

[kube-prometheus-stack]

* Hint for replacing image sources for containers:
	- grafana
	- sidecar
	- kube-state-metrics
	- prometheus-node-exporter

Signed-off-by: moroviintaas <[email protected]>

[kube-prometheus-stack]

* Bump chart version

Signed-off-by: moroviintaas <[email protected]>

Signed-off-by: moroviintaas <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [kube-prometheus-stack] SecurityContext for webhook job create/patch container (prometheus-community#2406)

* Stumbled in to this when working with kyverno and enforced strict policies.

Kyverno and using strict policy configuration, job create for `ingress-nginx-admission-create` fails with policies `require-drop-all`and `disallow-privilege-escalation`. Adding the ability to configure containers in webhooks create and patch from helm values.

> k describe job monitoring-kube-prometheus-admission-patch
```
resource Pod/my-namespace/monitoring-kube-prometheus-admission-patch-njdkq was blocked due to the following policies

disallow-capabilities-strict:
  require-drop-all: 'validation failure: Containers must drop `ALL` capabilities.'
disallow-privilege-escalation:
  privilege-escalation: 'validation error: Privilege escalation is disallowed. The
    fields spec.containers[*].securityContext.allowPrivilegeEscalation, spec.initContainers[*].securityContext.allowPrivilegeEscalation,
    and spec.ephemeralContainers[*].securityContext.allowPrivilegeEscalation must
    be set to `false`. Rule privilege-escalation failed at path /spec/containers/0/securityContext/'
```

Signed-off-by: ybelMekk <[email protected]>

* Chart Version bumped

Signed-off-by: ybelMekk <[email protected]>

* merge master

Signed-off-by: ybelMekk <[email protected]>

* issue with nil pointer for if, use with

Signed-off-by: ybelMekk <[email protected]>

* check for nil earlier

Signed-off-by: ybelMekk <[email protected]>

* leard something about helm today, i need to spec the path right to get it to work..

Signed-off-by: ybelMekk <[email protected]>

* tidy values.yaml, remove extra newlines

Signed-off-by: ybelMekk <[email protected]>

Signed-off-by: ybelMekk <[email protected]>
Signed-off-by: Youssef Bel Mekki <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [kube-state-metrics] Fix selfMonitor port (prometheus-community#2418)

[kube-state-metrics] Fix selfMonitor port (prometheus-community#2418)

Signed-off-by: Zhaojun Li <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [prometheus-snmp-exporter] update ingress api version template to support multiple kubernetes versions (prometheus-community#2395)

* update support of ingress api version

Signed-off-by: He, David (SIPD) <[email protected]>

* update the chart version

Signed-off-by: He, David (SIPD) <[email protected]>

Signed-off-by: He, David (SIPD) <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [prometheus-json-exporter] open service configuration (prometheus-community#2414)

* [prometheus-json-exporter] open service configuration

Signed-off-by: gaoxiang <hs@38658>

* [prometheus-json-exporter] open service configuration

Signed-off-by: gaoxiang <hs@38658>

Signed-off-by: gaoxiang <hs@38658>
Signed-off-by: andrejshapal <[email protected]>

* [kube-state-metrics] Bump kube-state-metrics version to v2.6.0 (prometheus-community#2422)

Bumps the version of the referenced kube-state-metrics image to the latest released version v2.6.0.

Signed-off-by: Christian Schlotter <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* Updated chart version and dependecies

Signed-off-by: andrejshapal <[email protected]>

* Bumping version again

Signed-off-by: andrejshapal <[email protected]>

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: MH <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Signed-off-by: andrejshapal <[email protected]>
Signed-off-by: Dan Peric <[email protected]>
Signed-off-by: GitHub <[email protected]>
Signed-off-by: dependabot[bot] <[email protected]>
Signed-off-by: francisco.rangel-heb <[email protected]>
Signed-off-by: André Bauer <[email protected]>
Signed-off-by: helia.barroso <[email protected]>
Signed-off-by: Tuan Anh Nguyen <[email protected]>
Signed-off-by: sagdeevrr <[email protected]>
Signed-off-by: Staz <[email protected]>
Signed-off-by: Mikhail Naletov <[email protected]>
Signed-off-by: QuentinBisson <[email protected]>
Signed-off-by: Sébastien Prud'homme <[email protected]>
Signed-off-by: Taro Kitano <[email protected]>
Signed-off-by: Ihor16 <[email protected]>
Signed-off-by: sat-devopsnow <[email protected]>
Signed-off-by: moroviintaas <[email protected]>
Signed-off-by: ybelMekk <[email protected]>
Signed-off-by: Youssef Bel Mekki <[email protected]>
Signed-off-by: Zhaojun Li <[email protected]>
Signed-off-by: He, David (SIPD) <[email protected]>
Signed-off-by: gaoxiang <hs@38658>
Signed-off-by: Christian Schlotter <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
Co-authored-by: MH <[email protected]>
Co-authored-by: dpericaxon <[email protected]>
Co-authored-by: Zadkiel Aharonian <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Francisco Rangel <[email protected]>
Co-authored-by: André Bauer <[email protected]>
Co-authored-by: heliapb <[email protected]>
Co-authored-by: Tuan Anh Nguyen <[email protected]>
Co-authored-by: Rustem Sagdeev <[email protected]>
Co-authored-by: Staz <[email protected]>
Co-authored-by: Mikhail Naletov <[email protected]>
Co-authored-by: Quentin Bisson <[email protected]>
Co-authored-by: Sébastien Prud'homme <[email protected]>
Co-authored-by: tkit <[email protected]>
Co-authored-by: Ihor Parkhomenko <[email protected]>
Co-authored-by: sat-devopsnow <[email protected]>
Co-authored-by: moroviintaas <[email protected]>
Co-authored-by: Youssef Bel Mekki <[email protected]>
Co-authored-by: Zhaojun Li <[email protected]>
Co-authored-by: David He <[email protected]>
Co-authored-by: gitgaoxiang <[email protected]>
Co-authored-by: Christian Schlotter <[email protected]>
Matiasmct pushed a commit to giffgaff/prometheus-charts-backup that referenced this pull request May 16, 2023
…theus-community#2443)

* Updated chart version and dependecies

Signed-off-by: andrejshapal <[email protected]>

* [prometheus-postgres-exporter] DATA_SOURCE_PASS_FILE support (prometheus-community#2437)

Signed-off-by: Anthony TREUILLIER <[email protected]>

Signed-off-by: Anthony TREUILLIER <[email protected]>
Co-authored-by: Anthony TREUILLIER <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [kube-prometheus-stack] bump grafana 6.37.1 (9.1.2) (prometheus-community#2431)

* [prometheus-smartctl-exporter] Initial stab at a prometheus-smartctl-exporter chart (prometheus-community#2357)

* Initial stab at a prometheus-smartctl-exporter chart

Signed-off-by: Kevin Fox <[email protected]>

* Update values.yaml

Signed-off-by: MH <[email protected]>

Signed-off-by: MH <[email protected]>

* Update CODEOWNERS

Signed-off-by: MH <[email protected]>

Signed-off-by: MH <[email protected]>

* Update Chart.yaml

Signed-off-by: MH <[email protected]>

Signed-off-by: MH <[email protected]>

* Update tolerations to match node exporters

Signed-off-by: kfox1111 <[email protected]>

* Fix spacing on tolerations

Signed-off-by: Kevin Fox <[email protected]>

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: MH <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Co-authored-by: MH <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [prometheus-adapter] Update To v0.10.0 (prometheus-community#2366)

Signed-off-by: Dan Peric <[email protected]>

Signed-off-by: Dan Peric <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [kube-prometheus-stack] add thanosRulerSpec.alertmanagersConfig config (prometheus-community#2358)

Signed-off-by: GitHub <[email protected]>

Signed-off-by: GitHub <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* Bump helm/chart-testing-action from 2.2.1 to 2.3.0 (prometheus-community#2368)

Bumps [helm/chart-testing-action](https://github.com/helm/chart-testing-action) from 2.2.1 to 2.3.0.
- [Release notes](https://github.com/helm/chart-testing-action/releases)
- [Commits](helm/chart-testing-action@v2.2.1...v2.3.0)

---
updated-dependencies:
- dependency-name: helm/chart-testing-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: andrejshapal <[email protected]>

* feat[kube-state-metrics]: add image sha support for image specified (prometheus-community#2370)

* feat[kube-state-metrics]: add image sha support for image specified

Signed-off-by: francisco.rangel-heb <[email protected]>

* chore: bump kube-state-metrics chart version

Signed-off-by: francisco.rangel-heb <[email protected]>

* chore: fix semantic version for kube-state-metrics chart

Signed-off-by: francisco.rangel-heb <[email protected]>

Signed-off-by: francisco.rangel-heb <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* Update Chart.yaml (prometheus-community#2371)

Signed-off-by: André Bauer <[email protected]>

Signed-off-by: André Bauer <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* Fix smartctl image and servicemonitor. (prometheus-community#2365)

Signed-off-by: Kevin Fox <[email protected]>

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* feat[prometheus-node-exporter]: add image sha support for image specified (prometheus-community#2377)

Signed-off-by: francisco.rangel-heb <[email protected]>

Signed-off-by: francisco.rangel-heb <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [kube-prometheus-stack] Add evaluationInterval to Thanos Ruler (prometheus-community#2374)

* feat:add evaluationintervar to ruler

Signed-off-by: helia.barroso <[email protected]>

* feat:change chartversion

Signed-off-by: helia.barroso <[email protected]>

* feat:change chartversion

Signed-off-by: helia.barroso <[email protected]>

* feat:change evaluationInterval

Signed-off-by: helia.barroso <[email protected]>

* fix:trailingspaces

Signed-off-by: helia.barroso <[email protected]>

Signed-off-by: helia.barroso <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [prometheus-stackdriver-exporter] Fix spec.serviceAccountName (prometheus-community#2378)

* fix spec.serviceAccountName

Signed-off-by: Tuan Anh Nguyen <[email protected]>

* kubernetes/kubernetes#72519

Signed-off-by: Tuan Anh Nguyen <[email protected]>

* Update charts/prometheus-stackdriver-exporter/Chart.yaml

Co-authored-by: André Bauer <[email protected]>
Signed-off-by: Tuan Anh Nguyen <[email protected]>

Signed-off-by: Tuan Anh Nguyen <[email protected]>
Co-authored-by: André Bauer <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* fix(prometheus-postgres-exporter): convert port variable to int (prometheus-community#2372)

Signed-off-by: sagdeevrr <[email protected]>

Signed-off-by: sagdeevrr <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [kube-prometheus-stack] Setting a custom timeout in admission mutatingWebhookConfiguration - Prometheus Operator chart Template (prometheus-community#2233)

* [kube-prometheus-stack] Setting a custom timeout in admission mutatingWebhookConfiguration - Prometheus Operator chart Template

Signed-off-by: Staz <[email protected]>

* Update charts/kube-prometheus-stack/Chart.yaml

Signed-off-by: André Bauer <[email protected]>

* Update Chart.yaml

Signed-off-by: André Bauer <[email protected]>

* Remove line

Signed-off-by: André Bauer <[email protected]>

* Remove whitespace

Signed-off-by: André Bauer <[email protected]>

Signed-off-by: Staz <[email protected]>
Signed-off-by: André Bauer <[email protected]>
Co-authored-by: André Bauer <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* feat: bump nats-exporter version (prometheus-community#2387)

Signed-off-by: Mikhail Naletov <[email protected]>

Signed-off-by: Mikhail Naletov <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [prometheus-node-exporter] Update labels to match best practices (prometheus-community#2212)

* [prometheus-node-exporter] Update labels

Signed-off-by: QuentinBisson <[email protected]>

* Fix readme

Signed-off-by: QuentinBisson <[email protected]>

* Fix readme and notes after successfull upgrade

Signed-off-by: QuentinBisson <[email protected]>

* Fix readme

Signed-off-by: QuentinBisson <[email protected]>

* Update charts/prometheus-node-exporter/README.md

Signed-off-by: QuentinBisson <[email protected]>

* Fix labels for service account

Signed-off-by: QuentinBisson <[email protected]>

Signed-off-by: QuentinBisson <[email protected]>
Co-authored-by: André Bauer <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [prometheus-postgres-exporter] Fix indentation (prometheus-community#2388)

Signed-off-by: Sébastien Prud'homme <[email protected]>

Signed-off-by: Sébastien Prud'homme <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [prometheus-snmp-exporter] make DaemonSet available (prometheus-community#2394)

Signed-off-by: Taro Kitano <[email protected]>

Signed-off-by: Taro Kitano <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [prometheus-mongodb-exporter] fixing default mongodb uri (prometheus-community#2379)

* fixed default mongo endpoint for mongodb exporter

Signed-off-by: Ihor16 <[email protected]>

* changing it back

Signed-off-by: Ihor16 <[email protected]>

* signing off now

Signed-off-by: Ihor16 <[email protected]>

* update chart version

Signed-off-by: André Bauer <[email protected]>

Signed-off-by: Ihor16 <[email protected]>
Signed-off-by: André Bauer <[email protected]>
Co-authored-by: André Bauer <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [prometheus-redis-exporter] support redis password file secret volume mount (prometheus-community#2401)

* [prometheus-redis-exporter] support redis password file secret volume mount

Signed-off-by: sat-devopsnow <[email protected]>

* Remove extraneous newline

Signed-off-by: sat-devopsnow <[email protected]>

Signed-off-by: sat-devopsnow <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [kube-prometheus-stack] Hint offline sources (prometheus-community#2411)

[kube-prometheus-stack]

* Hint for replacing image sources for containers:
	- grafana
	- sidecar
	- kube-state-metrics
	- prometheus-node-exporter

Signed-off-by: moroviintaas <[email protected]>

[kube-prometheus-stack]

* Bump chart version

Signed-off-by: moroviintaas <[email protected]>

Signed-off-by: moroviintaas <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [kube-prometheus-stack] SecurityContext for webhook job create/patch container (prometheus-community#2406)

* Stumbled in to this when working with kyverno and enforced strict policies.

Kyverno and using strict policy configuration, job create for `ingress-nginx-admission-create` fails with policies `require-drop-all`and `disallow-privilege-escalation`. Adding the ability to configure containers in webhooks create and patch from helm values.

> k describe job monitoring-kube-prometheus-admission-patch
```
resource Pod/my-namespace/monitoring-kube-prometheus-admission-patch-njdkq was blocked due to the following policies

disallow-capabilities-strict:
  require-drop-all: 'validation failure: Containers must drop `ALL` capabilities.'
disallow-privilege-escalation:
  privilege-escalation: 'validation error: Privilege escalation is disallowed. The
    fields spec.containers[*].securityContext.allowPrivilegeEscalation, spec.initContainers[*].securityContext.allowPrivilegeEscalation,
    and spec.ephemeralContainers[*].securityContext.allowPrivilegeEscalation must
    be set to `false`. Rule privilege-escalation failed at path /spec/containers/0/securityContext/'
```

Signed-off-by: ybelMekk <[email protected]>

* Chart Version bumped

Signed-off-by: ybelMekk <[email protected]>

* merge master

Signed-off-by: ybelMekk <[email protected]>

* issue with nil pointer for if, use with

Signed-off-by: ybelMekk <[email protected]>

* check for nil earlier

Signed-off-by: ybelMekk <[email protected]>

* leard something about helm today, i need to spec the path right to get it to work..

Signed-off-by: ybelMekk <[email protected]>

* tidy values.yaml, remove extra newlines

Signed-off-by: ybelMekk <[email protected]>

Signed-off-by: ybelMekk <[email protected]>
Signed-off-by: Youssef Bel Mekki <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [kube-state-metrics] Fix selfMonitor port (prometheus-community#2418)

[kube-state-metrics] Fix selfMonitor port (prometheus-community#2418)

Signed-off-by: Zhaojun Li <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [prometheus-snmp-exporter] update ingress api version template to support multiple kubernetes versions (prometheus-community#2395)

* update support of ingress api version

Signed-off-by: He, David (SIPD) <[email protected]>

* update the chart version

Signed-off-by: He, David (SIPD) <[email protected]>

Signed-off-by: He, David (SIPD) <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* [prometheus-json-exporter] open service configuration (prometheus-community#2414)

* [prometheus-json-exporter] open service configuration

Signed-off-by: gaoxiang <hs@38658>

* [prometheus-json-exporter] open service configuration

Signed-off-by: gaoxiang <hs@38658>

Signed-off-by: gaoxiang <hs@38658>
Signed-off-by: andrejshapal <[email protected]>

* [kube-state-metrics] Bump kube-state-metrics version to v2.6.0 (prometheus-community#2422)

Bumps the version of the referenced kube-state-metrics image to the latest released version v2.6.0.

Signed-off-by: Christian Schlotter <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* Updated chart version and dependecies

Signed-off-by: andrejshapal <[email protected]>

* Bumping version again

Signed-off-by: andrejshapal <[email protected]>

Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: MH <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Signed-off-by: andrejshapal <[email protected]>
Signed-off-by: Dan Peric <[email protected]>
Signed-off-by: GitHub <[email protected]>
Signed-off-by: dependabot[bot] <[email protected]>
Signed-off-by: francisco.rangel-heb <[email protected]>
Signed-off-by: André Bauer <[email protected]>
Signed-off-by: helia.barroso <[email protected]>
Signed-off-by: Tuan Anh Nguyen <[email protected]>
Signed-off-by: sagdeevrr <[email protected]>
Signed-off-by: Staz <[email protected]>
Signed-off-by: Mikhail Naletov <[email protected]>
Signed-off-by: QuentinBisson <[email protected]>
Signed-off-by: Sébastien Prud'homme <[email protected]>
Signed-off-by: Taro Kitano <[email protected]>
Signed-off-by: Ihor16 <[email protected]>
Signed-off-by: sat-devopsnow <[email protected]>
Signed-off-by: moroviintaas <[email protected]>
Signed-off-by: ybelMekk <[email protected]>
Signed-off-by: Youssef Bel Mekki <[email protected]>
Signed-off-by: Zhaojun Li <[email protected]>
Signed-off-by: He, David (SIPD) <[email protected]>
Signed-off-by: gaoxiang <hs@38658>
Signed-off-by: Christian Schlotter <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
Co-authored-by: MH <[email protected]>
Co-authored-by: dpericaxon <[email protected]>
Co-authored-by: Zadkiel Aharonian <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Francisco Rangel <[email protected]>
Co-authored-by: André Bauer <[email protected]>
Co-authored-by: heliapb <[email protected]>
Co-authored-by: Tuan Anh Nguyen <[email protected]>
Co-authored-by: Rustem Sagdeev <[email protected]>
Co-authored-by: Staz <[email protected]>
Co-authored-by: Mikhail Naletov <[email protected]>
Co-authored-by: Quentin Bisson <[email protected]>
Co-authored-by: Sébastien Prud'homme <[email protected]>
Co-authored-by: tkit <[email protected]>
Co-authored-by: Ihor Parkhomenko <[email protected]>
Co-authored-by: sat-devopsnow <[email protected]>
Co-authored-by: moroviintaas <[email protected]>
Co-authored-by: Youssef Bel Mekki <[email protected]>
Co-authored-by: Zhaojun Li <[email protected]>
Co-authored-by: David He <[email protected]>
Co-authored-by: gitgaoxiang <[email protected]>
Co-authored-by: Christian Schlotter <[email protected]>
Signed-off-by: andrejshapal <[email protected]>

* Blumping grafana version

Signed-off-by: andrejshapal <[email protected]>

* Reising version as minor

Signed-off-by: andrejshapal <[email protected]>

Signed-off-by: andrejshapal <[email protected]>
Signed-off-by: Anthony TREUILLIER <[email protected]>
Signed-off-by: Kevin Fox <[email protected]>
Signed-off-by: MH <[email protected]>
Signed-off-by: kfox1111 <[email protected]>
Signed-off-by: andrejshapal <[email protected]>
Signed-off-by: Dan Peric <[email protected]>
Signed-off-by: GitHub <[email protected]>
Signed-off-by: dependabot[bot] <[email protected]>
Signed-off-by: francisco.rangel-heb <[email protected]>
Signed-off-by: André Bauer <[email protected]>
Signed-off-by: helia.barroso <[email protected]>
Signed-off-by: Tuan Anh Nguyen <[email protected]>
Signed-off-by: sagdeevrr <[email protected]>
Signed-off-by: Staz <[email protected]>
Signed-off-by: Mikhail Naletov <[email protected]>
Signed-off-by: QuentinBisson <[email protected]>
Signed-off-by: Sébastien Prud'homme <[email protected]>
Signed-off-by: Taro Kitano <[email protected]>
Signed-off-by: Ihor16 <[email protected]>
Signed-off-by: sat-devopsnow <[email protected]>
Signed-off-by: moroviintaas <[email protected]>
Signed-off-by: ybelMekk <[email protected]>
Signed-off-by: Youssef Bel Mekki <[email protected]>
Signed-off-by: Zhaojun Li <[email protected]>
Signed-off-by: He, David (SIPD) <[email protected]>
Signed-off-by: gaoxiang <hs@38658>
Signed-off-by: Christian Schlotter <[email protected]>
Co-authored-by: antrema <[email protected]>
Co-authored-by: Anthony TREUILLIER <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
Co-authored-by: MH <[email protected]>
Co-authored-by: dpericaxon <[email protected]>
Co-authored-by: Zadkiel Aharonian <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Francisco Rangel <[email protected]>
Co-authored-by: André Bauer <[email protected]>
Co-authored-by: heliapb <[email protected]>
Co-authored-by: Tuan Anh Nguyen <[email protected]>
Co-authored-by: Rustem Sagdeev <[email protected]>
Co-authored-by: Staz <[email protected]>
Co-authored-by: Mikhail Naletov <[email protected]>
Co-authored-by: Quentin Bisson <[email protected]>
Co-authored-by: Sébastien Prud'homme <[email protected]>
Co-authored-by: tkit <[email protected]>
Co-authored-by: Ihor Parkhomenko <[email protected]>
Co-authored-by: sat-devopsnow <[email protected]>
Co-authored-by: moroviintaas <[email protected]>
Co-authored-by: Youssef Bel Mekki <[email protected]>
Co-authored-by: Zhaojun Li <[email protected]>
Co-authored-by: David He <[email protected]>
Co-authored-by: gitgaoxiang <[email protected]>
Co-authored-by: Christian Schlotter <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants