-
Notifications
You must be signed in to change notification settings - Fork 19
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
feat(helm)!: Update chart thanos to 15.7.29 #851
base: main
Are you sure you want to change the base?
Conversation
Path: @@ -1,84 +1,296 @@
---
+# Source: thanos/templates/bucketweb/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-bucketweb
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: bucketweb
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: bucketweb
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 8080
+ - port: 8080
+---
+# Source: thanos/templates/compactor/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-compactor
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: compactor
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: compactor
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 9090
+---
+# Source: thanos/templates/query/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-query
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 10901
+ - port: 9090
+ - port: 10901
+---
+# Source: thanos/templates/ruler/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-ruler
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: ruler
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: ruler
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 9090
+ - port: 10901
+ - port: 10901
+---
+# Source: thanos/templates/storegateway/networkpolicy.yaml
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: thanos-storegateway
+ namespace: "default"
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: storegateway
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: storegateway
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 10902
+ - port: 9090
+ - port: 10901
+ - port: 10901
+---
+# Source: thanos/templates/bucketweb/pdb.yaml
+apiVersion: policy/v1beta1
+kind: PodDisruptionBudget
+metadata:
+ name: thanos-bucketweb
+ namespace: default
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: bucketweb
+spec:
+ maxUnavailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: bucketweb
+---
+# Source: thanos/templates/query/pdb.yaml
+apiVersion: policy/v1beta1
+kind: PodDisruptionBudget
+metadata:
+ name: thanos-query
+ namespace: default
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query
+spec:
+ maxUnavailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: query
+---
+# Source: thanos/templates/ruler/pdb.yaml
+apiVersion: policy/v1beta1
+kind: PodDisruptionBudget
+metadata:
+ name: thanos-ruler
+ namespace: default
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: ruler
+spec:
+ maxUnavailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: ruler
+---
+# Source: thanos/templates/storegateway/pdb.yaml
+apiVersion: policy/v1beta1
+kind: PodDisruptionBudget
+metadata:
+ name: thanos-storegateway
+ namespace: default
+ labels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: storegateway
+spec:
+ maxUnavailable: 1
+ selector:
+ matchLabels:
+ app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
+ app.kubernetes.io/component: storegateway
+---
# Source: thanos/templates/bucketweb/serviceaccount.yaml
apiVersion: v1
kind: ServiceAccount
metadata:
name: thanos-bucketweb
- namespace: "default"
+ namespace: default
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: bucketweb
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
---
# Source: thanos/templates/compactor/serviceaccount.yaml
apiVersion: v1
kind: ServiceAccount
metadata:
name: thanos-compactor
- namespace: "default"
+ namespace: default
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: compactor
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
---
# Source: thanos/templates/query/serviceaccount.yaml
apiVersion: v1
kind: ServiceAccount
metadata:
name: thanos-query
- namespace: "default"
+ namespace: default
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: query
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
---
# Source: thanos/templates/ruler/serviceaccount.yaml
apiVersion: v1
kind: ServiceAccount
metadata:
name: thanos-ruler
- namespace: "default"
+ namespace: default
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: ruler
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
---
# Source: thanos/templates/storegateway/serviceaccount.yaml
apiVersion: v1
kind: ServiceAccount
metadata:
name: thanos-storegateway
- namespace: "default"
+ namespace: default
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: storegateway
- annotations:
-automountServiceAccountToken: true
+automountServiceAccountToken: false
---
# Source: thanos/templates/objstore-secret.yaml
apiVersion: v1
kind: Secret
metadata:
name: thanos-objstore-secret
- namespace: "default"
+ namespace: default
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
data:
objstore.yml: |-
Y29uZmlnOgogIGluc2VjdXJlOiB0cnVlCnR5cGU6IHMz
@@ -87,12 +299,12 @@
apiVersion: v1
kind: ConfigMap
metadata:
- name: thanos-ruler-configmap
- namespace: "default"
+ name: thanos-ruler
+ namespace: default
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: ruler
data:
ruler.yml: |-
@@ -107,11 +319,11 @@
apiVersion: v1
metadata:
name: thanos-compactor
- namespace: "default"
+ namespace: default
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: compactor
spec:
accessModes:
@@ -126,13 +338,13 @@
kind: Service
metadata:
name: thanos-bucketweb
- namespace: "default"
+ namespace: default
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: bucketweb
- annotations:
+ prometheus-operator/monitor: 'true'
spec:
type: ClusterIP
ports:
@@ -142,8 +354,8 @@
name: http
nodePort: null
selector:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: bucketweb
---
# Source: thanos/templates/compactor/service.yaml
@@ -151,13 +363,13 @@
kind: Service
metadata:
name: thanos-compactor
- namespace: "default"
+ namespace: default
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: compactor
- annotations:
+ prometheus-operator/monitor: 'true'
spec:
type: ClusterIP
ports:
@@ -167,8 +379,8 @@
name: http
nodePort: null
selector:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: compactor
---
# Source: thanos/templates/query/service-grpc.yaml
@@ -176,13 +388,12 @@
kind: Service
metadata:
name: thanos-query-grpc
- namespace: "default"
+ namespace: default
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: query
- annotations:
spec:
type: ClusterIP
ports:
@@ -192,8 +403,8 @@
name: grpc
nodePort: null
selector:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: query
---
# Source: thanos/templates/query/service.yaml
@@ -201,13 +412,13 @@
kind: Service
metadata:
name: thanos-query
- namespace: "default"
+ namespace: default
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: query
- annotations:
+ prometheus-operator/monitor: 'true'
spec:
type: ClusterIP
ports:
@@ -217,8 +428,8 @@
name: http
nodePort: null
selector:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: query
---
# Source: thanos/templates/ruler/service.yaml
@@ -226,14 +437,13 @@
kind: Service
metadata:
name: thanos-ruler
- namespace: "default"
+ namespace: default
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: ruler
prometheus-operator/monitor: 'true'
- annotations:
spec:
type: ClusterIP
ports:
@@ -248,8 +458,8 @@
name: grpc
nodePort: null
selector:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: ruler
---
# Source: thanos/templates/storegateway/service.yaml
@@ -257,14 +467,13 @@
kind: Service
metadata:
name: thanos-storegateway
- namespace: "default"
+ namespace: default
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: storegateway
prometheus-operator/monitor: 'true'
- annotations:
spec:
type: ClusterIP
ports:
@@ -279,8 +488,8 @@
name: grpc
nodePort: null
selector:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: storegateway
---
# Source: thanos/templates/bucketweb/deployment.yaml
@@ -288,14 +497,15 @@
kind: Deployment
metadata:
name: thanos-bucketweb
- namespace: "default"
+ namespace: default
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: bucketweb
spec:
replicas: 3
+ revisionHistoryLimit: 10
strategy:
rollingUpdate:
maxSurge: 1
@@ -303,20 +513,20 @@
type: RollingUpdate
selector:
matchLabels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: bucketweb
template:
metadata:
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: bucketweb
annotations:
- checksum/ojbstore-configuration: 0b890f19ba31e0ad26c4d4b967083a9da02bd790fdfb56cda1af0ed7e24ab6ce
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
spec:
- serviceAccount: thanos-bucketweb
+ serviceAccountName: thanos-bucketweb
automountServiceAccountToken: true
affinity:
podAffinity:
@@ -324,24 +534,33 @@
requiredDuringSchedulingIgnoredDuringExecution:
- labelSelector:
matchLabels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: bucketweb
- namespaces:
- - "default"
topologyKey: kubernetes.io/hostname
nodeAffinity:
securityContext:
fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
containers:
- name: bucketweb
- image: docker.io/bitnami/thanos:0.27.0-scratch-r5
+ image: docker.io/bitnami/thanos:0.36.1-debian-12-r3
imagePullPolicy: "IfNotPresent"
securityContext:
allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
readOnlyRootFilesystem: true
+ runAsGroup: 1001
runAsNonRoot: true
runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
args:
- tools
- bucket
@@ -365,6 +584,7 @@
httpGet:
path: /-/healthy
port: http
+ scheme: HTTP
readinessProbe:
failureThreshold: 6
initialDelaySeconds: 30
@@ -374,9 +594,16 @@
httpGet:
path: /-/ready
port: http
+ scheme: HTTP
resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 2Gi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
volumeMounts:
- name: objstore-config
mountPath: /conf
@@ -390,32 +617,33 @@
kind: Deployment
metadata:
name: thanos-compactor
- namespace: "default"
+ namespace: default
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: compactor
spec:
replicas: 1
+ revisionHistoryLimit: 10
strategy:
type: Recreate
selector:
matchLabels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: compactor
template:
metadata:
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: compactor
annotations:
- checksum/ojbstore-configuration: 0b890f19ba31e0ad26c4d4b967083a9da02bd790fdfb56cda1af0ed7e24ab6ce
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
spec:
- serviceAccount: thanos-compactor
+ serviceAccountName: thanos-compactor
automountServiceAccountToken: true
affinity:
podAffinity:
@@ -424,25 +652,34 @@
- podAffinityTerm:
labelSelector:
matchLabels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: compactor
- namespaces:
- - "default"
topologyKey: kubernetes.io/hostname
weight: 1
nodeAffinity:
securityContext:
fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
containers:
- name: compactor
- image: docker.io/bitnami/thanos:0.27.0-scratch-r5
+ image: docker.io/bitnami/thanos:0.36.1-debian-12-r3
imagePullPolicy: "IfNotPresent"
securityContext:
allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
readOnlyRootFilesystem: true
+ runAsGroup: 1001
runAsNonRoot: true
runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
args:
- compact
- --log.level=info
@@ -470,6 +707,7 @@
httpGet:
path: /-/healthy
port: http
+ scheme: HTTP
readinessProbe:
failureThreshold: 6
initialDelaySeconds: 30
@@ -479,9 +717,16 @@
httpGet:
path: /-/ready
port: http
+ scheme: HTTP
resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 2Gi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
volumeMounts:
- name: objstore-config
mountPath: /conf
@@ -500,30 +745,31 @@
kind: Deployment
metadata:
name: thanos-query
- namespace: "default"
+ namespace: default
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: query
spec:
replicas: 3
+ revisionHistoryLimit: 10
strategy:
type: RollingUpdate
selector:
matchLabels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: query
template:
metadata:
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: query
spec:
- serviceAccount: thanos-query
+ serviceAccountName: thanos-query
automountServiceAccountToken: true
affinity:
podAffinity:
@@ -532,25 +778,34 @@
- podAffinityTerm:
labelSelector:
matchLabels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: query
- namespaces:
- - "default"
topologyKey: kubernetes.io/hostname
weight: 1
nodeAffinity:
securityContext:
fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
containers:
- name: query
- image: docker.io/bitnami/thanos:0.27.0-scratch-r5
+ image: docker.io/bitnami/thanos:0.36.1-debian-12-r3
imagePullPolicy: "IfNotPresent"
securityContext:
allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
readOnlyRootFilesystem: true
+ runAsGroup: 1001
runAsNonRoot: true
runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
args:
- query
- --log.level=info
@@ -561,6 +816,7 @@
- --endpoint=dnssrv+_grpc._tcp.kube-prometheus-stack-thanos-discovery.monitoring.svc.cluster.local
- --endpoint=dnssrv+_grpc._tcp.thanos-storegateway.default.svc.cluster.local
- --endpoint=dnssrv+_grpc._tcp.thanos-ruler.default.svc.cluster.local
+ - --alert.query-url=http://thanos-query.default.svc.cluster.local:9090
ports:
- name: http
containerPort: 10902
@@ -577,6 +833,7 @@
httpGet:
path: /-/healthy
port: http
+ scheme: HTTP
readinessProbe:
failureThreshold: 6
initialDelaySeconds: 30
@@ -586,9 +843,16 @@
httpGet:
path: /-/ready
port: http
+ scheme: HTTP
resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 2Gi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
volumeMounts:
volumes:
---
@@ -597,35 +861,36 @@
kind: StatefulSet
metadata:
name: thanos-ruler
- namespace: "default"
+ namespace: default
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: ruler
spec:
replicas: 3
+ revisionHistoryLimit: 10
podManagementPolicy: OrderedReady
serviceName: thanos-ruler-headless
updateStrategy:
type: RollingUpdate
selector:
matchLabels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: ruler
template:
metadata:
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: ruler
annotations:
- checksum/ojbstore-configuration: 0b890f19ba31e0ad26c4d4b967083a9da02bd790fdfb56cda1af0ed7e24ab6ce
- checksum/ruler-configuration: 8e1d8f4911a1e93eeb6076775ededc064ce389a57580291c958bbc623b1858fc
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
+ checksum/ruler-configuration: b35799093da107f873e2a979b49d64483f166909c932e0533e46a3651d5dd847
spec:
- serviceAccount: thanos-ruler
+ serviceAccountName: thanos-ruler
automountServiceAccountToken: true
affinity:
podAffinity:
@@ -633,24 +898,33 @@
requiredDuringSchedulingIgnoredDuringExecution:
- labelSelector:
matchLabels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: ruler
- namespaces:
- - "default"
topologyKey: kubernetes.io/hostname
nodeAffinity:
securityContext:
fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
containers:
- name: ruler
- image: docker.io/bitnami/thanos:0.27.0-scratch-r5
+ image: docker.io/bitnami/thanos:0.36.1-debian-12-r3
imagePullPolicy: "IfNotPresent"
securityContext:
allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
readOnlyRootFilesystem: true
+ runAsGroup: 1001
runAsNonRoot: true
runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
args:
- rule
- --log.level=info
@@ -661,6 +935,7 @@
- --eval-interval=1m
- --alertmanagers.url=http://kube-prometheus-stack-alertmanager.monitoring:9093
- --query=dnssrv+_http._tcp.thanos-query.default.svc.cluster.local
+ - --alert.query-url=http://thanos-query.default.svc.cluster.local:9090
- --label=replica="$(POD_NAME)"
- --label=ruler_cluster="${CLUSTER_NAME}"
- --alert.label-drop=replica
@@ -688,6 +963,7 @@
httpGet:
path: /-/healthy
port: http
+ scheme: HTTP
readinessProbe:
failureThreshold: 6
initialDelaySeconds: 30
@@ -697,9 +973,16 @@
httpGet:
path: /-/ready
port: http
+ scheme: HTTP
resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 2Gi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
volumeMounts:
- name: ruler-config
mountPath: /conf/rules
@@ -710,12 +993,14 @@
volumes:
- name: ruler-config
configMap:
- name: thanos-ruler-configmap
+ name: thanos-ruler
- name: objstore-config
secret:
secretName: thanos-objstore-secret
volumeClaimTemplates:
- - metadata:
+ - apiVersion: v1
+ kind: PersistentVolumeClaim
+ metadata:
name: data
spec:
accessModes:
@@ -730,34 +1015,35 @@
kind: StatefulSet
metadata:
name: thanos-storegateway
- namespace: "default"
+ namespace: default
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: storegateway
spec:
replicas: 3
+ revisionHistoryLimit: 10
podManagementPolicy: OrderedReady
serviceName: thanos-storegateway-headless
updateStrategy:
type: RollingUpdate
selector:
matchLabels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: storegateway
template:
metadata:
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: storegateway
annotations:
- checksum/ojbstore-configuration: 0b890f19ba31e0ad26c4d4b967083a9da02bd790fdfb56cda1af0ed7e24ab6ce
+ checksum/objstore-configuration: ad0fe7703e3971c0a9fef7ac45a3321986468cf50c70c094cff319483f4a559d
spec:
- serviceAccount: thanos-storegateway
+ serviceAccountName: thanos-storegateway
automountServiceAccountToken: true
affinity:
podAffinity:
@@ -765,24 +1051,33 @@
requiredDuringSchedulingIgnoredDuringExecution:
- labelSelector:
matchLabels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: storegateway
- namespaces:
- - "default"
topologyKey: kubernetes.io/hostname
nodeAffinity:
securityContext:
fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
containers:
- name: storegateway
- image: docker.io/bitnami/thanos:0.27.0-scratch-r5
+ image: docker.io/bitnami/thanos:0.36.1-debian-12-r3
imagePullPolicy: "IfNotPresent"
securityContext:
allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ privileged: false
readOnlyRootFilesystem: true
+ runAsGroup: 1001
runAsNonRoot: true
runAsUser: 1001
+ seLinuxOptions: {}
+ seccompProfile:
+ type: RuntimeDefault
args:
- store
- --log.level=info
@@ -807,6 +1102,7 @@
httpGet:
path: /-/healthy
port: http
+ scheme: HTTP
readinessProbe:
failureThreshold: 6
initialDelaySeconds: 30
@@ -816,9 +1112,16 @@
httpGet:
path: /-/ready
port: http
+ scheme: HTTP
resources:
- limits: {}
- requests: {}
+ limits:
+ cpu: 150m
+ ephemeral-storage: 2Gi
+ memory: 192Mi
+ requests:
+ cpu: 100m
+ ephemeral-storage: 50Mi
+ memory: 128Mi
volumeMounts:
- name: objstore-config
mountPath: /conf
@@ -829,7 +1132,9 @@
secret:
secretName: thanos-objstore-secret
volumeClaimTemplates:
- - metadata:
+ - apiVersion: v1
+ kind: PersistentVolumeClaim
+ metadata:
name: data
spec:
accessModes:
@@ -844,11 +1149,11 @@
kind: Ingress
metadata:
name: thanos-bucketweb
- namespace: "default"
+ namespace: default
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: bucketweb
annotations:
hajimari.io/enable: "false"
@@ -874,11 +1179,11 @@
kind: Ingress
metadata:
name: thanos-compactor
- namespace: "default"
+ namespace: default
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: compactor
annotations:
hajimari.io/enable: "false"
@@ -904,11 +1209,11 @@
kind: Ingress
metadata:
name: thanos-query
- namespace: "default"
+ namespace: default
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: query
annotations:
hajimari.io/icon: table-search
@@ -934,11 +1239,11 @@
kind: Ingress
metadata:
name: thanos-ruler
- namespace: "default"
+ namespace: default
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: ruler
annotations:
hajimari.io/enable: "false"
@@ -964,11 +1269,11 @@
kind: Ingress
metadata:
name: thanos-storegateway
- namespace: "default"
+ namespace: default
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: storegateway
annotations:
hajimari.io/enable: "false"
@@ -996,9 +1301,9 @@
name: thanos-bucketweb
namespace: "default"
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: bucketweb
spec:
endpoints:
@@ -1008,9 +1313,10 @@
- "default"
selector:
matchLabels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: bucketweb
+ prometheus-operator/monitor: 'true'
---
# Source: thanos/templates/compactor/servicemonitor.yaml
apiVersion: monitoring.coreos.com/v1
@@ -1019,9 +1325,9 @@
name: thanos-compactor
namespace: "default"
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: compactor
spec:
endpoints:
@@ -1031,9 +1337,10 @@
- "default"
selector:
matchLabels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: compactor
+ prometheus-operator/monitor: 'true'
---
# Source: thanos/templates/query/servicemonitor.yaml
apiVersion: monitoring.coreos.com/v1
@@ -1042,9 +1349,9 @@
name: thanos-query
namespace: "default"
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: query
spec:
endpoints:
@@ -1054,9 +1361,10 @@
- "default"
selector:
matchLabels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: query
+ prometheus-operator/monitor: 'true'
---
# Source: thanos/templates/ruler/servicemonitor.yaml
apiVersion: monitoring.coreos.com/v1
@@ -1065,9 +1373,9 @@
name: thanos-ruler
namespace: "default"
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: ruler
spec:
endpoints:
@@ -1077,9 +1385,10 @@
- "default"
selector:
matchLabels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: ruler
+ prometheus-operator/monitor: 'true'
---
# Source: thanos/templates/storegateway/servicemonitor.yaml
apiVersion: monitoring.coreos.com/v1
@@ -1088,9 +1397,9 @@
name: thanos-storegateway
namespace: "default"
labels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: storegateway
spec:
endpoints:
@@ -1100,6 +1409,7 @@
- "default"
selector:
matchLabels:
- app.kubernetes.io/name: thanos
app.kubernetes.io/instance: thanos
+ app.kubernetes.io/name: thanos
app.kubernetes.io/component: storegateway
+ prometheus-operator/monitor: 'true' |
MegaLinter status: ❌ ERROR
See errors details in artifact MegaLinter reports on CI Job page |
e214dd2
to
fab4b70
Compare
fab4b70
to
e19290b
Compare
e19290b
to
4c7cd57
Compare
This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation. |
4c7cd57
to
76e53d3
Compare
76e53d3
to
dc81427
Compare
dc81427
to
4668b0f
Compare
4668b0f
to
cbc30c2
Compare
cbc30c2
to
e458a11
Compare
e458a11
to
d1336ad
Compare
d1336ad
to
ef5b079
Compare
ef5b079
to
5e3310c
Compare
2693c9d
to
932b126
Compare
932b126
to
35b386a
Compare
35b386a
to
82a85f7
Compare
82a85f7
to
8f806cb
Compare
8f806cb
to
3410094
Compare
3410094
to
4684310
Compare
4684310
to
f54e96d
Compare
f54e96d
to
2969e0a
Compare
2969e0a
to
42c8966
Compare
42c8966
to
bfc5968
Compare
bfc5968
to
768df67
Compare
768df67
to
205d8f2
Compare
205d8f2
to
138a6f6
Compare
| datasource | package | from | to | | ---------- | ------- | ------ | ------- | | helm | thanos | 11.1.2 | 15.7.29 |
138a6f6
to
2a10f0d
Compare
This PR contains the following updates:
11.1.2
->15.7.29
⚠ Dependency Lookup Warnings ⚠
Warnings were logged while processing this repo. Please check the Dependency Dashboard for more information.
Release Notes
bitnami/charts
v15.7.29
v15.7.28
v15.7.27
v15.7.26
v15.7.25
v15.7.24
v15.7.23
v15.7.22
v15.7.21
v15.7.20
v15.7.19
v15.7.18
v15.7.17
v15.7.16
v15.7.15
v15.7.14
v15.7.13
v15.7.12
v15.7.11
v15.7.10
v15.7.9
v15.7.8
v15.7.7
v15.7.6
v15.7.5
v15.7.4
v15.7.3
v15.7.2
v15.7.1
v15.7.0
v15.6.2
v15.6.1
v15.6.0
v15.5.1
v15.5.0
v15.4.7
v15.4.6
v15.4.4
v15.4.3
v15.4.2
v15.4.1
v15.4.0
v15.3.0
v15.2.2
v15.2.1
v15.2.0
v15.1.3
v15.1.2
v15.1.1
v15.1.0
v15.0.5
v15.0.4
v15.0.3
v15.0.2
v15.0.1
v15.0.0
v14.0.2
v14.0.1
v14.0.0
v13.4.1
v13.4.0
v13.3.0
v13.2.2
v13.2.1
v13.1.0
v13.0.0
v12.23.2
v12.23.1
v12.23.0
v12.22.1
v12.22.0
v12.21.1
v12.21.0
v12.20.4
v12.20.3
v12.20.2
v12.20.1
v12.20.0
v12.19.1
v12.19.0
v12.18.0
v12.17.0
v12.16.2
v12.16.1
v12.16.0
v12.15.0
v12.14.2
v12.14.1
v12.14.0
v12.13.13
v12.13.12
v12.13.11
v12.13.10
v12.13.9
v12.13.8
v12.13.7
v12.13.6
v12.13.5
v12.13.4
v12.13.3
v12.13.2
v12.13.1
v12.13.0
v12.12.1
v12.12.0
v12.11.4
v12.11.3
v12.11.2
v12.11.1
v12.11.0
v12.10.1
v12.10.0
v12.9.1
v12.9.0
v12.8.6
v12.8.5
v12.8.4
v12.8.3
v12.8.2
v12.8.1
v12.8.0
v12.7.0
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Renovate Bot.