Update Helm release cert-manager to v1.12.4

Signed-off-by: Renovate Bot <tech+renovate@vshn.ch>
projectsyn · Sep 1, 2023 · 890e23f · 890e23f
1 parent 0780441
commit 890e23f
Show file tree

Hide file tree

Showing 20 changed files with 796 additions and 358 deletions.
diff --git a/class/defaults.yml b/class/defaults.yml
@@ -3,7 +3,7 @@ parameters:
     namespace: syn-cert-manager
     dns01-recursive-nameservers: "1.1.1.1:53"
     charts:
-      cert-manager: v1.8.2
+      cert-manager: v1.12.4
     http_proxy: ""
     https_proxy: ""
     no_proxy: ""

diff --git a/.../cert-manager/cert-manager/01_helmchart/cert-manager/templates/cainjector-deployment.yaml b/.../cert-manager/cert-manager/01_helmchart/cert-manager/templates/cainjector-deployment.yaml
@@ -7,8 +7,8 @@ metadata:
     app.kubernetes.io/instance: cert-manager
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cainjector
-    app.kubernetes.io/version: v1.8.2
-    helm.sh/chart: cert-manager-v1.8.2
+    app.kubernetes.io/version: v1.12.4
+    helm.sh/chart: cert-manager-v1.12.4
   name: cert-manager-cainjector
   namespace: syn-cert-manager
 spec:
@@ -26,8 +26,8 @@ spec:
         app.kubernetes.io/instance: cert-manager
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: cainjector
-        app.kubernetes.io/version: v1.8.2
-        helm.sh/chart: cert-manager-v1.8.2
+        app.kubernetes.io/version: v1.12.4
+        helm.sh/chart: cert-manager-v1.12.4
     spec:
       containers:
         - args:
@@ -38,17 +38,22 @@ spec:
               valueFrom:
                 fieldRef:
                   fieldPath: metadata.namespace
-          image: quay.io/jetstack/cert-manager-cainjector:v1.8.2
+          image: quay.io/jetstack/cert-manager-cainjector:v1.12.4
           imagePullPolicy: IfNotPresent
-          name: cert-manager
+          name: cert-manager-cainjector
           resources:
             requests:
               cpu: 50m
               memory: 512Mi
           securityContext:
             allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
       nodeSelector:
         kubernetes.io/os: linux
       securityContext:
         runAsNonRoot: true
+        seccompProfile:
+          type: RuntimeDefault
       serviceAccountName: cert-manager-cainjector
diff --git a/...faults/cert-manager/cert-manager/01_helmchart/cert-manager/templates/cainjector-rbac.yaml b/...faults/cert-manager/cert-manager/01_helmchart/cert-manager/templates/cainjector-rbac.yaml
@@ -7,8 +7,8 @@ metadata:
     app.kubernetes.io/instance: cert-manager
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cainjector
-    app.kubernetes.io/version: v1.8.2
-    helm.sh/chart: cert-manager-v1.8.2
+    app.kubernetes.io/version: v1.12.4
+    helm.sh/chart: cert-manager-v1.12.4
   name: cert-manager-cainjector
 rules:
   - apiGroups:
@@ -46,6 +46,7 @@ rules:
       - list
       - watch
       - update
+      - patch
   - apiGroups:
       - apiregistration.k8s.io
     resources:
@@ -55,6 +56,7 @@ rules:
       - list
       - watch
       - update
+      - patch
   - apiGroups:
       - apiextensions.k8s.io
     resources:
@@ -64,6 +66,7 @@ rules:
       - list
       - watch
       - update
+      - patch
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
@@ -74,8 +77,8 @@ metadata:
     app.kubernetes.io/instance: cert-manager
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cainjector
-    app.kubernetes.io/version: v1.8.2
-    helm.sh/chart: cert-manager-v1.8.2
+    app.kubernetes.io/version: v1.12.4
+    helm.sh/chart: cert-manager-v1.12.4
   name: cert-manager-cainjector
 roleRef:
   apiGroup: rbac.authorization.k8s.io
@@ -95,8 +98,8 @@ metadata:
     app.kubernetes.io/instance: cert-manager
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cainjector
-    app.kubernetes.io/version: v1.8.2
-    helm.sh/chart: cert-manager-v1.8.2
+    app.kubernetes.io/version: v1.12.4
+    helm.sh/chart: cert-manager-v1.12.4
   name: cert-manager-cainjector:leaderelection
   namespace: syn-cert-manager
 rules:
@@ -127,8 +130,8 @@ metadata:
     app.kubernetes.io/instance: cert-manager
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cainjector
-    app.kubernetes.io/version: v1.8.2
-    helm.sh/chart: cert-manager-v1.8.2
+    app.kubernetes.io/version: v1.12.4
+    helm.sh/chart: cert-manager-v1.12.4
   name: cert-manager-cainjector:leaderelection
   namespace: syn-cert-manager
 roleRef:

diff --git a/...t-manager/cert-manager/01_helmchart/cert-manager/templates/cainjector-serviceaccount.yaml b/...t-manager/cert-manager/01_helmchart/cert-manager/templates/cainjector-serviceaccount.yaml
@@ -8,7 +8,7 @@ metadata:
     app.kubernetes.io/instance: cert-manager
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cainjector
-    app.kubernetes.io/version: v1.8.2
-    helm.sh/chart: cert-manager-v1.8.2
+    app.kubernetes.io/version: v1.12.4
+    helm.sh/chart: cert-manager-v1.12.4
   name: cert-manager-cainjector
   namespace: syn-cert-manager
diff --git a/...s/golden/defaults/cert-manager/cert-manager/01_helmchart/cert-manager/templates/crds.yaml b/...s/golden/defaults/cert-manager/cert-manager/01_helmchart/cert-manager/templates/crds.yaml
diff --git a/...en/defaults/cert-manager/cert-manager/01_helmchart/cert-manager/templates/deployment.yaml b/...en/defaults/cert-manager/cert-manager/01_helmchart/cert-manager/templates/deployment.yaml
@@ -7,8 +7,8 @@ metadata:
     app.kubernetes.io/instance: cert-manager
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cert-manager
-    app.kubernetes.io/version: v1.8.2
-    helm.sh/chart: cert-manager-v1.8.2
+    app.kubernetes.io/version: v1.12.4
+    helm.sh/chart: cert-manager-v1.12.4
   name: cert-manager
   namespace: syn-cert-manager
 spec:
@@ -26,16 +26,18 @@ spec:
         app.kubernetes.io/instance: cert-manager
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: cert-manager
-        app.kubernetes.io/version: v1.8.2
-        helm.sh/chart: cert-manager-v1.8.2
+        app.kubernetes.io/version: v1.12.4
+        helm.sh/chart: cert-manager-v1.12.4
     spec:
       containers:
         - args:
             - --v=2
             - --cluster-resource-namespace=$(POD_NAMESPACE)
             - --leader-election-namespace=syn-cert-manager
+            - --acme-http01-solver-image=quay.io/jetstack/cert-manager-acmesolver:v1.12.4
             - --dns01-recursive-nameservers="1.1.1.1:53"
             - --dns01-recursive-nameservers-only
+            - --max-concurrent-challenges=60
           env:
             - name: POD_NAMESPACE
               valueFrom:
@@ -47,21 +49,29 @@ spec:
               value: ''
             - name: NO_PROXY
               value: ''
-          image: quay.io/jetstack/cert-manager-controller:v1.8.2
+          image: quay.io/jetstack/cert-manager-controller:v1.12.4
           imagePullPolicy: IfNotPresent
-          name: cert-manager
+          name: cert-manager-controller
           ports:
             - containerPort: 9402
               name: http-metrics
               protocol: TCP
+            - containerPort: 9403
+              name: http-healthz
+              protocol: TCP
           resources:
             requests:
               cpu: 50m
               memory: 512Mi
           securityContext:
             allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
       nodeSelector:
         kubernetes.io/os: linux
       securityContext:
         runAsNonRoot: true
+        seccompProfile:
+          type: RuntimeDefault
       serviceAccountName: cert-manager