Update Helm release cert-manager to v1.13.2

Signed-off-by: Renovate Bot <tech+renovate@vshn.ch>
projectsyn · Dec 6, 2023 · af69026 · af69026
1 parent f455476
commit af69026
Show file tree

Hide file tree

Showing 21 changed files with 1,124 additions and 526 deletions.
diff --git a/class/defaults.yml b/class/defaults.yml
@@ -3,7 +3,7 @@ parameters:
     namespace: syn-cert-manager
     dns01-recursive-nameservers: "1.1.1.1:53"
     charts:
-      cert-manager: v1.8.2
+      cert-manager: v1.13.2
     http_proxy: ""
     https_proxy: ""
     no_proxy: ""

diff --git a/.../cert-manager/cert-manager/01_helmchart/cert-manager/templates/cainjector-deployment.yaml b/.../cert-manager/cert-manager/01_helmchart/cert-manager/templates/cainjector-deployment.yaml
@@ -7,8 +7,8 @@ metadata:
     app.kubernetes.io/instance: cert-manager
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cainjector
-    app.kubernetes.io/version: v1.8.2
-    helm.sh/chart: cert-manager-v1.8.2
+    app.kubernetes.io/version: v1.13.2
+    helm.sh/chart: cert-manager-v1.13.2
   name: cert-manager-cainjector
   namespace: syn-cert-manager
 spec:
@@ -26,8 +26,8 @@ spec:
         app.kubernetes.io/instance: cert-manager
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: cainjector
-        app.kubernetes.io/version: v1.8.2
-        helm.sh/chart: cert-manager-v1.8.2
+        app.kubernetes.io/version: v1.13.2
+        helm.sh/chart: cert-manager-v1.13.2
     spec:
       containers:
         - args:
@@ -38,17 +38,23 @@ spec:
               valueFrom:
                 fieldRef:
                   fieldPath: metadata.namespace
-          image: quay.io/jetstack/cert-manager-cainjector:v1.8.2
+          image: quay.io/jetstack/cert-manager-cainjector:v1.13.2
           imagePullPolicy: IfNotPresent
-          name: cert-manager
+          name: cert-manager-cainjector
           resources:
             requests:
               cpu: 50m
               memory: 512Mi
           securityContext:
             allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
+      enableServiceLinks: false
       nodeSelector:
         kubernetes.io/os: linux
       securityContext:
         runAsNonRoot: true
+        seccompProfile:
+          type: RuntimeDefault
       serviceAccountName: cert-manager-cainjector
diff --git a/...faults/cert-manager/cert-manager/01_helmchart/cert-manager/templates/cainjector-rbac.yaml b/...faults/cert-manager/cert-manager/01_helmchart/cert-manager/templates/cainjector-rbac.yaml
@@ -7,8 +7,8 @@ metadata:
     app.kubernetes.io/instance: cert-manager
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cainjector
-    app.kubernetes.io/version: v1.8.2
-    helm.sh/chart: cert-manager-v1.8.2
+    app.kubernetes.io/version: v1.13.2
+    helm.sh/chart: cert-manager-v1.13.2
   name: cert-manager-cainjector
 rules:
   - apiGroups:
@@ -46,6 +46,7 @@ rules:
       - list
       - watch
       - update
+      - patch
   - apiGroups:
       - apiregistration.k8s.io
     resources:
@@ -55,6 +56,7 @@ rules:
       - list
       - watch
       - update
+      - patch
   - apiGroups:
       - apiextensions.k8s.io
     resources:
@@ -64,6 +66,7 @@ rules:
       - list
       - watch
       - update
+      - patch
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
@@ -74,8 +77,8 @@ metadata:
     app.kubernetes.io/instance: cert-manager
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cainjector
-    app.kubernetes.io/version: v1.8.2
-    helm.sh/chart: cert-manager-v1.8.2
+    app.kubernetes.io/version: v1.13.2
+    helm.sh/chart: cert-manager-v1.13.2
   name: cert-manager-cainjector
 roleRef:
   apiGroup: rbac.authorization.k8s.io
@@ -95,8 +98,8 @@ metadata:
     app.kubernetes.io/instance: cert-manager
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cainjector
-    app.kubernetes.io/version: v1.8.2
-    helm.sh/chart: cert-manager-v1.8.2
+    app.kubernetes.io/version: v1.13.2
+    helm.sh/chart: cert-manager-v1.13.2
   name: cert-manager-cainjector:leaderelection
   namespace: syn-cert-manager
 rules:
@@ -127,8 +130,8 @@ metadata:
     app.kubernetes.io/instance: cert-manager
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cainjector
-    app.kubernetes.io/version: v1.8.2
-    helm.sh/chart: cert-manager-v1.8.2
+    app.kubernetes.io/version: v1.13.2
+    helm.sh/chart: cert-manager-v1.13.2
   name: cert-manager-cainjector:leaderelection
   namespace: syn-cert-manager
 roleRef:

diff --git a/...t-manager/cert-manager/01_helmchart/cert-manager/templates/cainjector-serviceaccount.yaml b/...t-manager/cert-manager/01_helmchart/cert-manager/templates/cainjector-serviceaccount.yaml
@@ -8,7 +8,7 @@ metadata:
     app.kubernetes.io/instance: cert-manager
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cainjector
-    app.kubernetes.io/version: v1.8.2
-    helm.sh/chart: cert-manager-v1.8.2
+    app.kubernetes.io/version: v1.13.2
+    helm.sh/chart: cert-manager-v1.13.2
   name: cert-manager-cainjector
   namespace: syn-cert-manager
diff --git a/...ults/cert-manager/cert-manager/01_helmchart/cert-manager/templates/controller-config.yaml b/...ults/cert-manager/cert-manager/01_helmchart/cert-manager/templates/controller-config.yaml
@@ -0,0 +1,14 @@
+apiVersion: v1
+data: null
+kind: ConfigMap
+metadata:
+  labels:
+    app: cert-manager
+    app.kubernetes.io/component: controller
+    app.kubernetes.io/instance: cert-manager
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: cert-manager
+    app.kubernetes.io/version: v1.13.2
+    helm.sh/chart: cert-manager-v1.13.2
+  name: cert-manager
+  namespace: syn-cert-manager