Update chart snapshot-controller from 1.9.2 to 2.1.0 #332

renovate · 2023-10-27T13:49:50Z

This PR contains the following updates:

Package	Update	Change
snapshot-controller	major	`1.9.2` -> `2.1.0`

Release Notes

piraeusdatastore/helm-charts (snapshot-controller)

`v2.1.0`

Compare Source

Deploys a Snapshot Controller in a cluster. Snapshot Controllers are often bundled with the Kubernetes distribution, this chart is meant for cases where it is not. Also deploys the Snapshot Validation Webhook and configures your cluster to validate every VolumeSnapshot and VolumeSnapshotContent resource by sending it to the webhook.

`v2.0.4`

Compare Source

Deploys a Snapshot Controller in a cluster. Snapshot Controllers are often bundled with the Kubernetes distribution, this chart is meant for cases where it is not. Also deploys the Snapshot Validation Webhook and configures your cluster to validate every VolumeSnapshot and VolumeSnapshotContent resource by sending it to the webhook.

`v2.0.3`

Compare Source

Deploys a Snapshot Controller in a cluster. Snapshot Controllers are often bundled with the Kubernetes distribution, this chart is meant for cases where it is not. Also deploys the Snapshot Validation Webhook and configures your cluster to validate every VolumeSnapshot and VolumeSnapshotContent resource by sending it to the webhook.

`v2.0.2`

Compare Source

Deploys a Snapshot Controller in a cluster. Snapshot Controllers are often bundled with the Kubernetes distribution, this chart is meant for cases where it is not. Also deploys the Snapshot Validation Webhook and configures your cluster to validate every VolumeSnapshot and VolumeSnapshotContent resource by sending it to the webhook.

`v2.0.1`

Compare Source

Deploys a Snapshot Controller in a cluster. Snapshot Controllers are often bundled with the Kubernetes distribution, this chart is meant for cases where it is not. Also deploys the Snapshot Validation Webhook and configures your cluster to validate every VolumeSnapshot and VolumeSnapshotContent resource by sending it to the webhook.

`v2.0.0`

Compare Source

Deploys a Snapshot Controller in a cluster. Snapshot Controllers are often bundled with the Kubernetes distribution, this chart is meant for cases where it is not. Also deploys the Snapshot Validation Webhook and configures your cluster to validate every VolumeSnapshot and VolumeSnapshotContent resource by sending it to the webhook.

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

github-actions · 2023-10-27T18:29:13Z

--- cluster/apps Kustomization: flux-system/apps HelmRelease: kube-system/snapshot-controller

+++ cluster/apps Kustomization: flux-system/apps HelmRelease: kube-system/snapshot-controller

@@ -13,13 +13,13 @@

       chart: snapshot-controller
       interval: 15m
       sourceRef:
         kind: HelmRepository
         name: piraeus-charts
         namespace: flux-system
-      version: 1.9.2
+      version: 2.1.0
   install:
     crds: CreateReplace
     createNamespace: true
     remediation:
       retries: 3
   interval: 15m

github-actions · 2023-10-27T18:29:16Z

--- HelmRelease: kube-system/snapshot-controller Deployment: kube-system/snapshot-controller

+++ HelmRelease: kube-system/snapshot-controller Deployment: kube-system/snapshot-controller

@@ -6,12 +6,13 @@

   labels:
     app.kubernetes.io/name: snapshot-controller
     app.kubernetes.io/instance: snapshot-controller
     app.kubernetes.io/managed-by: Helm
 spec:
   replicas: 1
+  revisionHistoryLimit: 10
   selector:
     matchLabels:
       app.kubernetes.io/name: snapshot-controller
       app.kubernetes.io/instance: snapshot-controller
   template:
     metadata:
@@ -27,13 +28,13 @@

           capabilities:
             drop:
             - ALL
           readOnlyRootFilesystem: true
           runAsNonRoot: true
           runAsUser: 1000
-        image: registry.k8s.io/sig-storage/snapshot-controller:v6.3.1
+        image: registry.k8s.io/sig-storage/snapshot-controller:v7.0.0
         imagePullPolicy: IfNotPresent
         args:
         - --http-endpoint=:8080
         - --leader-election=true
         - --leader-election-namespace=$(NAMESPACE)
         ports:
@@ -43,7 +44,9 @@

         env:
         - name: NAMESPACE
           valueFrom:
             fieldRef:
               fieldPath: metadata.namespace
         resources: {}
+      hostNetwork: false
+      dnsPolicy: ClusterFirst
 
--- HelmRelease: kube-system/snapshot-controller VolumeSnapshotClass: kube-system/csi-ceph-blockpool

+++ HelmRelease: kube-system/snapshot-controller VolumeSnapshotClass: kube-system/csi-ceph-blockpool

@@ -1,18 +0,0 @@

----
-kind: VolumeSnapshotClass
-apiVersion: snapshot.storage.k8s.io/v1
-metadata:
-  name: csi-ceph-blockpool
-  annotations:
-    snapshot.storage.kubernetes.io/is-default-class: 'true'
-  labels:
-    app.kubernetes.io/name: snapshot-controller
-    app.kubernetes.io/instance: snapshot-controller
-    app.kubernetes.io/managed-by: Helm
-driver: rook-ceph.rbd.csi.ceph.com
-deletionPolicy: Delete
-parameters:
-  clusterID: rook-ceph
-  csi.storage.k8s.io/snapshotter-secret-name: rook-csi-rbd-provisioner
-  csi.storage.k8s.io/snapshotter-secret-namespace: rook-ceph
-
--- HelmRelease: kube-system/snapshot-controller ServiceAccount: kube-system/snapshot-validation-webhook

+++ HelmRelease: kube-system/snapshot-controller ServiceAccount: kube-system/snapshot-validation-webhook

@@ -0,0 +1,10 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: snapshot-validation-webhook
+  labels:
+    app.kubernetes.io/name: snapshot-validation-webhook
+    app.kubernetes.io/instance: snapshot-controller
+    app.kubernetes.io/managed-by: Helm
+
--- HelmRelease: kube-system/snapshot-controller ClusterRole: kube-system/snapshot-validation-webhook

+++ HelmRelease: kube-system/snapshot-controller ClusterRole: kube-system/snapshot-validation-webhook

@@ -0,0 +1,16 @@

+---
+kind: ClusterRole
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: snapshot-validation-webhook
+rules:
+- apiGroups:
+  - snapshot.storage.k8s.io
+  - groupsnapshot.storage.k8s.io
+  resources:
+  - volumesnapshotclasses
+  - volumegroupsnapshotclasses
+  verbs:
+  - list
+  - watch
+
--- HelmRelease: kube-system/snapshot-controller ClusterRoleBinding: kube-system/snapshot-validation-webhook

+++ HelmRelease: kube-system/snapshot-controller ClusterRoleBinding: kube-system/snapshot-validation-webhook

@@ -0,0 +1,14 @@

+---
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: snapshot-validation-webhook
+subjects:
+- kind: ServiceAccount
+  name: snapshot-validation-webhook
+  namespace: kube-system
+roleRef:
+  kind: ClusterRole
+  name: snapshot-validation-webhook
+  apiGroup: rbac.authorization.k8s.io
+
--- HelmRelease: kube-system/snapshot-controller Service: kube-system/snapshot-validation-webhook

+++ HelmRelease: kube-system/snapshot-controller Service: kube-system/snapshot-validation-webhook

@@ -0,0 +1,20 @@

+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: snapshot-validation-webhook
+  labels:
+    app.kubernetes.io/name: snapshot-validation-webhook
+    app.kubernetes.io/instance: snapshot-controller
+    app.kubernetes.io/managed-by: Helm
+spec:
+  type: ClusterIP
+  ports:
+  - port: 443
+    targetPort: https
+    protocol: TCP
+    name: https
+  selector:
+    app.kubernetes.io/name: snapshot-validation-webhook
+    app.kubernetes.io/instance: snapshot-controller
+
--- HelmRelease: kube-system/snapshot-controller Deployment: kube-system/snapshot-validation-webhook

+++ HelmRelease: kube-system/snapshot-controller Deployment: kube-system/snapshot-validation-webhook

@@ -0,0 +1,64 @@

+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: snapshot-validation-webhook
+  labels:
+    app.kubernetes.io/name: snapshot-validation-webhook
+    app.kubernetes.io/instance: snapshot-controller
+    app.kubernetes.io/managed-by: Helm
+spec:
+  replicas: 1
+  revisionHistoryLimit: 10
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: snapshot-validation-webhook
+      app.kubernetes.io/instance: snapshot-controller
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/name: snapshot-validation-webhook
+        app.kubernetes.io/instance: snapshot-controller
+    spec:
+      serviceAccountName: snapshot-validation-webhook
+      securityContext: {}
+      containers:
+      - name: snapshot-validation-webhook
+        securityContext:
+          capabilities:
+            drop:
+            - ALL
+          readOnlyRootFilesystem: true
+          runAsNonRoot: true
+          runAsUser: 1000
+        image: registry.k8s.io/sig-storage/snapshot-validation-webhook:v7.0.0
+        imagePullPolicy: IfNotPresent
+        args:
+        - --port=8443
+        - --tls-cert-file=/etc/snapshot-validation/tls.crt
+        - --tls-private-key-file=/etc/snapshot-validation/tls.key
+        ports:
+        - name: https
+          containerPort: 8443
+          protocol: TCP
+        volumeMounts:
+        - mountPath: /etc/snapshot-validation
+          name: tls-config
+        livenessProbe:
+          httpGet:
+            path: /readyz
+            port: https
+            scheme: HTTPS
+        readinessProbe:
+          httpGet:
+            path: /readyz
+            port: https
+            scheme: HTTPS
+        resources: {}
+      volumes:
+      - name: tls-config
+        secret:
+          secretName: snapshot-validation-webhook-tls
+      hostNetwork: false
+      dnsPolicy: ClusterFirst
+
--- HelmRelease: kube-system/snapshot-controller ValidatingWebhookConfiguration: kube-system/snapshot-validation-webhook

+++ HelmRelease: kube-system/snapshot-controller ValidatingWebhookConfiguration: kube-system/snapshot-validation-webhook

@@ -0,0 +1,64 @@

+---
+apiVersion: admissionregistration.k8s.io/v1
+kind: ValidatingWebhookConfiguration
+metadata:
+  name: snapshot-validation-webhook
+  labels:
+    app.kubernetes.io/name: snapshot-validation-webhook
+    app.kubernetes.io/instance: snapshot-controller
+    app.kubernetes.io/managed-by: Helm
+webhooks:
+- name: snapshot-validation-webhook.snapshot.storage.k8s.io
+  rules:
+  - apiGroups:
+    - snapshot.storage.k8s.io
+    apiVersions:
+    - v1
+    - v1beta1
+    operations:
+    - CREATE
+    - UPDATE
+    resources:
+    - volumesnapshots
+    - volumesnapshotclasses
+    - volumesnapshotcontents
+    scope: '*'
+  clientConfig:
+    service:
+      namespace: kube-system
+      name: snapshot-validation-webhook
+      path: /volumesnapshot
+    caBundle: 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
+  admissionReviewVersions:
+  - v1
+  - v1beta1
+  sideEffects: None
+  failurePolicy: Fail
+  timeoutSeconds: 2
+- name: snapshot-validation-webhook.groupsnapshot.storage.k8s.io
+  rules:
+  - apiGroups:
+    - groupsnapshot.storage.k8s.io
+    apiVersions:
+    - v1alpha1
+    operations:
+    - CREATE
+    - UPDATE
+    resources:
+    - volumegroupsnapshots
+    - volumegroupsnapshotcontents
+    - volumegroupsnapshotclasses
+    scope: '*'
+  clientConfig:
+    service:
+      namespace: kube-system
+      name: snapshot-validation-webhook
+      path: /volumegroupsnapshot
+    caBundle: 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
+  admissionReviewVersions:
+  - v1
+  - v1beta1
+  sideEffects: None
+  failurePolicy: Fail
+  timeoutSeconds: 2
+

renovate · 2024-02-13T10:18:08Z

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠ Warning: custom changes will be lost.

github-actions · 2024-02-19T11:12:49Z

--- cluster/apps Kustomization: flux-system/apps HelmRelease: kube-system/snapshot-controller

+++ cluster/apps Kustomization: flux-system/apps HelmRelease: kube-system/snapshot-controller

@@ -13,32 +13,33 @@

       chart: snapshot-controller
       interval: 15m
       sourceRef:
         kind: HelmRepository
         name: piraeus-charts
         namespace: flux-system
-      version: 1.9.2
+      version: 2.1.0
   driftDetection:
     mode: enabled
   install:
     crds: CreateReplace
     createNamespace: true
     remediation:
       retries: 3
   interval: 15m
   upgrade:
     remediation:
       retries: 3
   values:
-    serviceMonitor:
-      create: false
-    volumeSnapshotClasses:
-    - annotations:
-        snapshot.storage.kubernetes.io/is-default-class: 'true'
-      deletionPolicy: Delete
-      driver: rook-ceph.rbd.csi.ceph.com
-      name: csi-ceph-blockpool
-      parameters:
-        clusterID: rook-ceph
-        csi.storage.k8s.io/snapshotter-secret-name: rook-csi-rbd-provisioner
-        csi.storage.k8s.io/snapshotter-secret-namespace: rook-ceph
+    controller:
+      serviceMonitor:
+        create: false
+      volumeSnapshotClasses:
+      - annotations:
+          snapshot.storage.kubernetes.io/is-default-class: 'true'
+        deletionPolicy: Delete
+        driver: rook-ceph.rbd.csi.ceph.com
+        name: csi-ceph-blockpool
+        parameters:
+          clusterID: rook-ceph
+          csi.storage.k8s.io/snapshotter-secret-name: rook-csi-rbd-provisioner
+          csi.storage.k8s.io/snapshotter-secret-namespace: rook-ceph

github-actions · 2024-02-19T11:19:00Z

--- HelmRelease: kube-system/snapshot-controller Deployment: kube-system/snapshot-controller

+++ HelmRelease: kube-system/snapshot-controller Deployment: kube-system/snapshot-controller

@@ -6,12 +6,13 @@

   labels:
     app.kubernetes.io/name: snapshot-controller
     app.kubernetes.io/instance: snapshot-controller
     app.kubernetes.io/managed-by: Helm
 spec:
   replicas: 1
+  revisionHistoryLimit: 10
   selector:
     matchLabels:
       app.kubernetes.io/name: snapshot-controller
       app.kubernetes.io/instance: snapshot-controller
   template:
     metadata:
@@ -27,13 +28,13 @@

           capabilities:
             drop:
             - ALL
           readOnlyRootFilesystem: true
           runAsNonRoot: true
           runAsUser: 1000
-        image: registry.k8s.io/sig-storage/snapshot-controller:v6.3.1
+        image: registry.k8s.io/sig-storage/snapshot-controller:v7.0.0
         imagePullPolicy: IfNotPresent
         args:
         - --http-endpoint=:8080
         - --leader-election=true
         - --leader-election-namespace=$(NAMESPACE)
         ports:
@@ -43,7 +44,9 @@

         env:
         - name: NAMESPACE
           valueFrom:
             fieldRef:
               fieldPath: metadata.namespace
         resources: {}
+      hostNetwork: false
+      dnsPolicy: ClusterFirst
 
--- HelmRelease: kube-system/snapshot-controller ServiceAccount: kube-system/snapshot-validation-webhook

+++ HelmRelease: kube-system/snapshot-controller ServiceAccount: kube-system/snapshot-validation-webhook

@@ -0,0 +1,10 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: snapshot-validation-webhook
+  labels:
+    app.kubernetes.io/name: snapshot-validation-webhook
+    app.kubernetes.io/instance: snapshot-controller
+    app.kubernetes.io/managed-by: Helm
+
--- HelmRelease: kube-system/snapshot-controller ClusterRole: kube-system/snapshot-validation-webhook

+++ HelmRelease: kube-system/snapshot-controller ClusterRole: kube-system/snapshot-validation-webhook

@@ -0,0 +1,16 @@

+---
+kind: ClusterRole
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: snapshot-validation-webhook
+rules:
+- apiGroups:
+  - snapshot.storage.k8s.io
+  - groupsnapshot.storage.k8s.io
+  resources:
+  - volumesnapshotclasses
+  - volumegroupsnapshotclasses
+  verbs:
+  - list
+  - watch
+
--- HelmRelease: kube-system/snapshot-controller ClusterRoleBinding: kube-system/snapshot-validation-webhook

+++ HelmRelease: kube-system/snapshot-controller ClusterRoleBinding: kube-system/snapshot-validation-webhook

@@ -0,0 +1,14 @@

+---
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: snapshot-validation-webhook
+subjects:
+- kind: ServiceAccount
+  name: snapshot-validation-webhook
+  namespace: kube-system
+roleRef:
+  kind: ClusterRole
+  name: snapshot-validation-webhook
+  apiGroup: rbac.authorization.k8s.io
+
--- HelmRelease: kube-system/snapshot-controller Service: kube-system/snapshot-validation-webhook

+++ HelmRelease: kube-system/snapshot-controller Service: kube-system/snapshot-validation-webhook

@@ -0,0 +1,20 @@

+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: snapshot-validation-webhook
+  labels:
+    app.kubernetes.io/name: snapshot-validation-webhook
+    app.kubernetes.io/instance: snapshot-controller
+    app.kubernetes.io/managed-by: Helm
+spec:
+  type: ClusterIP
+  ports:
+  - port: 443
+    targetPort: https
+    protocol: TCP
+    name: https
+  selector:
+    app.kubernetes.io/name: snapshot-validation-webhook
+    app.kubernetes.io/instance: snapshot-controller
+
--- HelmRelease: kube-system/snapshot-controller Deployment: kube-system/snapshot-validation-webhook

+++ HelmRelease: kube-system/snapshot-controller Deployment: kube-system/snapshot-validation-webhook

@@ -0,0 +1,64 @@

+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: snapshot-validation-webhook
+  labels:
+    app.kubernetes.io/name: snapshot-validation-webhook
+    app.kubernetes.io/instance: snapshot-controller
+    app.kubernetes.io/managed-by: Helm
+spec:
+  replicas: 1
+  revisionHistoryLimit: 10
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: snapshot-validation-webhook
+      app.kubernetes.io/instance: snapshot-controller
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/name: snapshot-validation-webhook
+        app.kubernetes.io/instance: snapshot-controller
+    spec:
+      serviceAccountName: snapshot-validation-webhook
+      securityContext: {}
+      containers:
+      - name: snapshot-validation-webhook
+        securityContext:
+          capabilities:
+            drop:
+            - ALL
+          readOnlyRootFilesystem: true
+          runAsNonRoot: true
+          runAsUser: 1000
+        image: registry.k8s.io/sig-storage/snapshot-validation-webhook:v7.0.0
+        imagePullPolicy: IfNotPresent
+        args:
+        - --port=8443
+        - --tls-cert-file=/etc/snapshot-validation/tls.crt
+        - --tls-private-key-file=/etc/snapshot-validation/tls.key
+        ports:
+        - name: https
+          containerPort: 8443
+          protocol: TCP
+        volumeMounts:
+        - mountPath: /etc/snapshot-validation
+          name: tls-config
+        livenessProbe:
+          httpGet:
+            path: /readyz
+            port: https
+            scheme: HTTPS
+        readinessProbe:
+          httpGet:
+            path: /readyz
+            port: https
+            scheme: HTTPS
+        resources: {}
+      volumes:
+      - name: tls-config
+        secret:
+          secretName: snapshot-validation-webhook-tls
+      hostNetwork: false
+      dnsPolicy: ClusterFirst
+
--- HelmRelease: kube-system/snapshot-controller ValidatingWebhookConfiguration: kube-system/snapshot-validation-webhook

+++ HelmRelease: kube-system/snapshot-controller ValidatingWebhookConfiguration: kube-system/snapshot-validation-webhook

@@ -0,0 +1,64 @@

+---
+apiVersion: admissionregistration.k8s.io/v1
+kind: ValidatingWebhookConfiguration
+metadata:
+  name: snapshot-validation-webhook
+  labels:
+    app.kubernetes.io/name: snapshot-validation-webhook
+    app.kubernetes.io/instance: snapshot-controller
+    app.kubernetes.io/managed-by: Helm
+webhooks:
+- name: snapshot-validation-webhook.snapshot.storage.k8s.io
+  rules:
+  - apiGroups:
+    - snapshot.storage.k8s.io
+    apiVersions:
+    - v1
+    - v1beta1
+    operations:
+    - CREATE
+    - UPDATE
+    resources:
+    - volumesnapshots
+    - volumesnapshotclasses
+    - volumesnapshotcontents
+    scope: '*'
+  clientConfig:
+    service:
+      namespace: kube-system
+      name: snapshot-validation-webhook
+      path: /volumesnapshot
+    caBundle: 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
+  admissionReviewVersions:
+  - v1
+  - v1beta1
+  sideEffects: None
+  failurePolicy: Fail
+  timeoutSeconds: 2
+- name: snapshot-validation-webhook.groupsnapshot.storage.k8s.io
+  rules:
+  - apiGroups:
+    - groupsnapshot.storage.k8s.io
+    apiVersions:
+    - v1alpha1
+    operations:
+    - CREATE
+    - UPDATE
+    resources:
+    - volumegroupsnapshots
+    - volumegroupsnapshotcontents
+    - volumegroupsnapshotclasses
+    scope: '*'
+  clientConfig:
+    service:
+      namespace: kube-system
+      name: snapshot-validation-webhook
+      path: /volumegroupsnapshot
+    caBundle: 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
+  admissionReviewVersions:
+  - v1
+  - v1beta1
+  sideEffects: None
+  failurePolicy: Fail
+  timeoutSeconds: 2
+

renovate bot changed the title ~~Update chart snapshot-controller from 1.9.2 to 2.0.0~~ Update chart snapshot-controller from 1.9.2 to 2.0.1 Nov 14, 2023

renovate bot force-pushed the renovate/snapshot-controller-2.x branch from 308144d to 55a1954 Compare November 14, 2023 07:29

renovate bot changed the title ~~Update chart snapshot-controller from 1.9.2 to 2.0.1~~ Update chart snapshot-controller from 1.9.2 to 2.0.2 Nov 17, 2023

renovate bot force-pushed the renovate/snapshot-controller-2.x branch from 55a1954 to 0111efc Compare November 17, 2023 13:09

renovate bot changed the title ~~Update chart snapshot-controller from 1.9.2 to 2.0.2~~ Update chart snapshot-controller from 1.9.2 to 2.0.3 Nov 27, 2023

renovate bot force-pushed the renovate/snapshot-controller-2.x branch from 0111efc to acd8e8e Compare November 27, 2023 11:28

renovate bot changed the title ~~Update chart snapshot-controller from 1.9.2 to 2.0.3~~ Update chart snapshot-controller from 1.9.2 to 2.0.4 Dec 27, 2023

renovate bot force-pushed the renovate/snapshot-controller-2.x branch 2 times, most recently from b65e03f to 5551556 Compare January 2, 2024 09:33

Update chart snapshot-controller from 1.9.2 to 2.1.0

08a7a32

renovate bot changed the title ~~Update chart snapshot-controller from 1.9.2 to 2.0.4~~ Update chart snapshot-controller from 1.9.2 to 2.1.0 Feb 1, 2024

renovate bot force-pushed the renovate/snapshot-controller-2.x branch from 5551556 to 08a7a32 Compare February 1, 2024 11:18

snapshot-controller: fix changes for v2

c828d72

Merge branch 'main' into renovate/snapshot-controller-2.x

6ff1337

TomCranitch merged commit 2158169 into main Feb 19, 2024
2 checks passed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Update chart snapshot-controller from 1.9.2 to 2.1.0 #332

Update chart snapshot-controller from 1.9.2 to 2.1.0 #332

renovate bot commented Oct 27, 2023 •

edited

Loading

github-actions bot commented Oct 27, 2023 •

edited

Loading

github-actions bot commented Oct 27, 2023 •

edited

Loading

renovate bot commented Feb 13, 2024

github-actions bot commented Feb 19, 2024 •

edited

Loading

github-actions bot commented Feb 19, 2024

Update chart snapshot-controller from 1.9.2 to 2.1.0 #332

Update chart snapshot-controller from 1.9.2 to 2.1.0 #332

Conversation

renovate bot commented Oct 27, 2023 • edited Loading

Release Notes

v2.1.0

v2.0.4

v2.0.3

v2.0.2

v2.0.1

v2.0.0

Configuration

github-actions bot commented Oct 27, 2023 • edited Loading

github-actions bot commented Oct 27, 2023 • edited Loading

renovate bot commented Feb 13, 2024

Edited/Blocked Notification

github-actions bot commented Feb 19, 2024 • edited Loading

github-actions bot commented Feb 19, 2024

renovate bot commented Oct 27, 2023 •

edited

Loading

`v2.1.0`

`v2.0.4`

`v2.0.3`

`v2.0.2`

`v2.0.1`

`v2.0.0`

github-actions bot commented Oct 27, 2023 •

edited

Loading

github-actions bot commented Oct 27, 2023 •

edited

Loading

github-actions bot commented Feb 19, 2024 •

edited

Loading