feat(container)!: Update image ghcr.io/piraeusdatastore/helm-charts/snapshot-controller ( 4.2.0 → 5.0.3 )

[bot-syl]

This PR contains the following updates:

Package	Update	Change
ghcr.io/piraeusdatastore/helm-charts/snapshot-controller (source)	major	4.2.0 → 5.0.3

---

Release Notes

kubernetes-csi/external-snapshotter (ghcr.io/piraeusdatastore/helm-charts/snapshot-controller)

v5.0.1

Compare Source

Overall Status

Volume snapshotting has been a GA feature since Kubernetes v1.20.

Supported CSI Spec Versions

1.0-1.5

Minimum Kubernetes version

1.20

Recommended Kubernetes version

1.20+

Container

docker pull registry.k8s.io/sig-storage/snapshot-controller:v5.0.1
docker pull registry.k8s.io/sig-storage/csi-snapshotter:v5.0.1
docker pull registry.k8s.io/sig-storage/snapshot-validation-webhook:v5.0.1

Notable Changes in v5.0.1 compared to v5.0.0

• Update release tools and pull in the change to increase the timeout value to allow all snapshot images to be build before the timeout. (#​641, @​xing-yang)

Breaking Changes

• Replaces many VolumeSnapshot/VolumeSnapshotContent Update/UpdateStatus operations with Patch. This lowers the probability of the "object has been modified" update API errors occurring. This change introduces a dependency on two new RBAC rules for the CSI snapshotter sidecar: volumesnapshotcontents:patch, volumesnapshotcontents/status:patch and four new RBAC rules for the snapshot-controller: volumesnapshotcontents:patch, volumesnapshotcontents/status:patch, volumesnapshots:patch, and volumesnapshots/status: patch. (#​526, @​ggriffiths)

Feature

• Added short names for Volume Snapshot CRDs:
  • VolumeSnapshot - vs
  • VolumeSnapshotContent - vsc, vscs
  • VolumeSnapshotClass` - vsclass, vsclasses (#​604, @​robbie-demuth)
• Adds support for distributed snapshotting. This affects both snapshot controller and CSI snapshotter sidecar. (#​585, @​nearora-msft)
• Make the QPS and Burst of kube client config to be configurable in both snapshot-controller and CSI snapshotter sidecar (#​621, @​lintongj)

Design

• Added kustomization manifests to CRDs, snapshot controller, and CSI snapshotter sidecar components (#​606, @​itspngu)

Bug or Regression

• Fixed a bug introduced by #​621 which makes the QPS and Burst of kube client config configurable in both snapshot-controller and CSI snapshotter sidecar. This fix exposed the kube-api-qps cmd option properly (#​626, @​lintongj)
• Fixed deadlock in reporting metrics in snapshot controller. (#​581, @​jsafrane)
• Replaces many VolumeSnapshot/VolumeSnapshotContent Update/UpdateStatus operations with Patch. This lowers the probability of the "object has been modified" update API errors occurring. This change introduces a dependency on two new RBAC rules for the CSI snapshotter sidecar: volumesnapshotcontents:patch, volumesnapshotcontents/status:patch and four new RBAC rules for the snapshot-controller: volumesnapshotcontents:patch, volumesnapshotcontents/status:patch, volumesnapshots:patch, and volumesnapshots/status: patch. (#​526, @​ggriffiths)

Other (Cleanup or Flake)

• Rename KUBE_NODE_NAME to NODE_NAME for CSI snapshotter sidecar deployment. (#​616, @​zhucan)

Uncategorized

• Updated CertificateSigningRequest apiversion to V1 for Snapshot validation webhook deployment. (#​588, @​Kartik494)

Full Changelog

https://github.com/kubernetes-csi/external-snapshotter/blob/v5.0.1/CHANGELOG/CHANGELOG-5.0.md

v5.0.0

Compare Source

Overall Status

Volume snapshotting has been a GA feature since Kubernetes v1.20.

Supported CSI Spec Versions

1.0-1.5

Minimum Kubernetes version

1.20

Recommended Kubernetes version

1.20+

Container

docker pull registry.k8s.io/sig-storage/snapshot-controller:v5.0.0
docker pull registry.k8s.io/sig-storage/csi-snapshotter:v5.0.0
docker pull registry.k8s.io/sig-storage/snapshot-validation-webhook:v5.0.0 (Note: The snapshot-validation-webhook v5.0.0 image does not work for multi-arch due to the timeout issue. It is fixed in v5.0.1)

Breaking Changes

• Replaces many VolumeSnapshot/VolumeSnapshotContent Update/UpdateStatus operations with Patch. This lowers the probability of the "object has been modified" update API errors occurring. This change introduces a dependency on two new RBAC rules for the CSI snapshotter sidecar: volumesnapshotcontents:patch, volumesnapshotcontents/status:patch and four new RBAC rules for the snapshot-controller: volumesnapshotcontents:patch, volumesnapshotcontents/status:patch, volumesnapshots:patch, and volumesnapshots/status: patch. (#​526, @​ggriffiths)

Feature

• Added short names for Volume Snapshot CRDs:
  • VolumeSnapshot - vs
  • VolumeSnapshotContent - vsc, vscs
  • VolumeSnapshotClass` - vsclass, vsclasses (#​604, @​robbie-demuth)
• Adds support for distributed snapshotting. This affects both snapshot controller and CSI snapshotter sidecar. (#​585, @​nearora-msft)
• Make the QPS and Burst of kube client config to be configurable in both snapshot-controller and CSI snapshotter sidecar (#​621, @​lintongj)

Design

• Added kustomization manifests to CRDs, snapshot controller, and CSI snapshotter sidecar components (#​606, @​itspngu)

Bug or Regression

• Fixed a bug introduced by #​621 which makes the QPS and Burst of kube client config configurable in both snapshot-controller and CSI snapshotter sidecar. This fix exposed the kube-api-qps cmd option properly (#​626, @​lintongj)
• Fixed deadlock in reporting metrics in snapshot controller. (#​581, @​jsafrane)
• Replaces many VolumeSnapshot/VolumeSnapshotContent Update/UpdateStatus operations with Patch. This lowers the probability of the "object has been modified" update API errors occurring. This change introduces a dependency on two new RBAC rules for the CSI snapshotter sidecar: volumesnapshotcontents:patch, volumesnapshotcontents/status:patch and four new RBAC rules for the snapshot-controller: volumesnapshotcontents:patch, volumesnapshotcontents/status:patch, volumesnapshots:patch, and volumesnapshots/status: patch. (#​526, @​ggriffiths)

Other (Cleanup or Flake)

• Rename KUBE_NODE_NAME to NODE_NAME for CSI snapshotter sidecar deployment. (#​616, @​zhucan)

Uncategorized

• Updated CertificateSigningRequest apiversion to V1 for Snapshot validation webhook deployment. (#​588, @​Kartik494)

Full Changelog

https://github.com/kubernetes-csi/external-snapshotter/blob/v5.0.0/CHANGELOG/CHANGELOG-5.0.md

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[bot-syl]

--- HelmRelease: kube-system/snapshot-controller Deployment: kube-system/snapshot-controller

+++ HelmRelease: kube-system/snapshot-controller Deployment: kube-system/snapshot-controller

@@ -29,15 +29,16 @@

           capabilities:
             drop:
             - ALL
           readOnlyRootFilesystem: true
           runAsNonRoot: true
           runAsUser: 1000
-        image: registry.k8s.io/sig-storage/snapshot-controller:v8.4.0
+        image: registry.k8s.io/sig-storage/snapshot-controller:v8.5.0
         imagePullPolicy: IfNotPresent
         args:
+        - --feature-gates=CSIVolumeGroupSnapshot=true
         - --http-endpoint=:8080
         - --leader-election=true
         - --leader-election-namespace=$(NAMESPACE)
         ports:
         - name: http
           containerPort: 8080
--- HelmRelease: kube-system/snapshot-controller ServiceAccount: kube-system/snapshot-controller-conversion-webhook

+++ HelmRelease: kube-system/snapshot-controller ServiceAccount: kube-system/snapshot-controller-conversion-webhook

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: snapshot-controller-conversion-webhook
+  namespace: kube-system
+  labels:
+    app.kubernetes.io/name: conversion-webhook
+    app.kubernetes.io/instance: snapshot-controller
+    app.kubernetes.io/managed-by: Helm
+
--- HelmRelease: kube-system/snapshot-controller Service: kube-system/snapshot-controller-conversion-webhook

+++ HelmRelease: kube-system/snapshot-controller Service: kube-system/snapshot-controller-conversion-webhook

@@ -0,0 +1,19 @@

+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: snapshot-controller-conversion-webhook
+  namespace: kube-system
+  labels:
+    app.kubernetes.io/name: conversion-webhook
+    app.kubernetes.io/instance: snapshot-controller
+    app.kubernetes.io/managed-by: Helm
+spec:
+  ports:
+  - port: 443
+    targetPort: 8443
+    name: https
+  selector:
+    app.kubernetes.io/name: conversion-webhook
+    app.kubernetes.io/instance: snapshot-controller
+
--- HelmRelease: kube-system/snapshot-controller Deployment: kube-system/snapshot-controller-conversion-webhook

+++ HelmRelease: kube-system/snapshot-controller Deployment: kube-system/snapshot-controller-conversion-webhook

@@ -0,0 +1,61 @@

+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: snapshot-controller-conversion-webhook
+  namespace: kube-system
+  labels:
+    app.kubernetes.io/name: conversion-webhook
+    app.kubernetes.io/instance: snapshot-controller
+    app.kubernetes.io/managed-by: Helm
+spec:
+  replicas: 1
+  revisionHistoryLimit: 10
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: conversion-webhook
+      app.kubernetes.io/instance: snapshot-controller
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/name: conversion-webhook
+        app.kubernetes.io/instance: snapshot-controller
+    spec:
+      serviceAccountName: snapshot-controller-conversion-webhook
+      securityContext: {}
+      containers:
+      - name: conversion-webhook
+        securityContext:
+          capabilities:
+            drop:
+            - ALL
+          readOnlyRootFilesystem: true
+          runAsNonRoot: true
+          runAsUser: 1000
+        image: ghcr.io/piraeusdatastore/snapshot-conversion-webhook:v8.5.0
+        imagePullPolicy: IfNotPresent
+        args:
+        - --port=8443
+        - --tls-cert-file=/etc/webhook/tls.crt
+        - --tls-private-key-file=/etc/webhook/tls.key
+        ports:
+        - name: https
+          containerPort: 8443
+          protocol: TCP
+        livenessProbe:
+          httpGet:
+            port: https
+            path: /readyz
+            scheme: HTTPS
+        resources: {}
+        volumeMounts:
+        - name: tls
+          mountPath: /etc/webhook
+          readOnly: true
+      hostNetwork: false
+      dnsPolicy: ClusterFirst
+      volumes:
+      - name: tls
+        secret:
+          secretName: snapshot-controller-conversion-webhook
+

[bot-syl]

--- kubernetes/apps/kube-system/snapshot-controller/app Kustomization: kube-system/snapshot-controller OCIRepository: kube-system/snapshot-controller

+++ kubernetes/apps/kube-system/snapshot-controller/app Kustomization: kube-system/snapshot-controller OCIRepository: kube-system/snapshot-controller

@@ -11,9 +11,9 @@

 spec:
   interval: 5m
   layerSelector:
     mediaType: application/vnd.cncf.helm.chart.content.v1.tar+gzip
     operation: copy
   ref:
-    tag: 4.2.0
+    tag: 5.0.3
   url: oci://ghcr.io/piraeusdatastore/helm-charts/snapshot-controller