feat(helm)!: Update chart vpa to 4.4.6

[chii-bot]

This PR contains the following updates:

Package	Update	Change
vpa (source)	major	1.4.0 -> 4.4.6

---

⚠ Dependency Lookup Warnings ⚠

Warnings were logged while processing this repo. Please check the Dependency Dashboard for more information.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, click this checkbox.

---

This PR has been generated by Renovate Bot.

[chii-bot]

Path: cluster/apps/monitoring/vpa/helm-release.yaml
Version: 1.4.0 -> 4.4.6

@@ -1,518 +1 @@
----
-# Source: vpa/templates/recommender-service-account.yaml
-apiVersion: v1
-kind: ServiceAccount
-automountServiceAccountToken: true
-metadata:
- name: vpa-recommender
- labels:
- app.kubernetes.io/name: vpa
- app.kubernetes.io/instance: vpa
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/component: recommender
----
-# Source: vpa/templates/updater-service-account.yaml
-apiVersion: v1
-kind: ServiceAccount
-automountServiceAccountToken: true
-metadata:
- name: vpa-updater
- labels:
- app.kubernetes.io/name: vpa
- app.kubernetes.io/instance: vpa
- app.kubernetes.io/managed-by: Helm
- app.kubernetes.io/component: updater
----
-# Source: vpa/templates/clusterroles.yaml
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
- name: vpa-metrics-reader
-rules:
- - apiGroups:
- - "metrics.k8s.io"
- resources:
- - pods
- verbs:
- - get
- - list
----
-# Source: vpa/templates/clusterroles.yaml
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
- name: vpa-actor
-rules:
- - apiGroups:
- - ""
- resources:
- - pods
- - nodes
- - limitranges
- verbs:
- - get
- - list
- - watch
- - apiGroups:
- - ""
- resources:
- - events
- verbs:
- - get
- - list
- - watch
- - create
- - apiGroups:
- - "poc.autoscaling.k8s.io"
- resources:
- - verticalpodautoscalers
- verbs:
- - get
- - list
- - watch
- - patch
- - apiGroups:
- - "autoscaling.k8s.io"
- resources:
- - verticalpodautoscalers
- verbs:
- - get
- - list
- - watch
- - patch
----
-# Source: vpa/templates/clusterroles.yaml
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
- name: vpa-checkpoint-actor
-rules:
- - apiGroups:
- - "poc.autoscaling.k8s.io"
- resources:
- - verticalpodautoscalercheckpoints
- verbs:
- - get
- - list
- - watch
- - create
- - patch
- - delete
- - apiGroups:
- - "autoscaling.k8s.io"
- resources:
- - verticalpodautoscalercheckpoints
- verbs:
- - get
- - list
- - watch
- - create
- - patch
- - delete
- - apiGroups:
- - ""
- resources:
- - namespaces
- verbs:
- - get
- - list
----
-# Source: vpa/templates/clusterroles.yaml
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
- name: vpa-evictioner
-rules:
- - apiGroups:
- - "apps"
- - "extensions"
- resources:
- - replicasets
- verbs:
- - get
- - apiGroups:
- - ""
- resources:
- - pods/eviction
- verbs:
- - create
----
-# Source: vpa/templates/clusterroles.yaml
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
- name: vpa-target-reader
-rules:
- - apiGroups:
- - '*'
- resources:
- - '*/scale'
- verbs:
- - get
- - watch
- - apiGroups:
- - ""
- resources:
- - replicationcontrollers
- verbs:
- - get
- - list
- - watch
- - apiGroups:
- - apps
- resources:
- - daemonsets
- - deployments
- - replicasets
- - statefulsets
- verbs:
- - get
- - list
- - watch
- - apiGroups:
- - batch
- resources:
- - jobs
- - cronjobs
- verbs:
- - get
- - list
- - watch
----
-# Source: vpa/templates/clusterroles.yaml
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
- name: vpa-status-reader
-rules:
- - apiGroups:
- - "coordination.k8s.io"
- resources:
- - leases
- verbs:
- - get
- - list
- - watch
----
-# Source: vpa/templates/clusterrolebindings.yaml
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
- name: vpa-metrics-reader
-roleRef:
- apiGroup: rbac.authorization.k8s.io
- kind: ClusterRole
- name: vpa-metrics-reader
-subjects:
- - kind: ServiceAccount
- name: vpa-recommender
- namespace: default
----
-# Source: vpa/templates/clusterrolebindings.yaml
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
- name: vpa-checkpoint-actor
-roleRef:
- apiGroup: rbac.authorization.k8s.io
- kind: ClusterRole
- name: vpa-checkpoint-actor
-subjects:
- - kind: ServiceAccount
- name: vpa-recommender
- namespace: default
----
-# Source: vpa/templates/clusterrolebindings.yaml
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
- name: vpa-actor
-roleRef:
- apiGroup: rbac.authorization.k8s.io
- kind: ClusterRole
- name: vpa-actor
-subjects:
- - kind: ServiceAccount
- name: vpa-recommender
- namespace: default
----
-# Source: vpa/templates/clusterrolebindings.yaml
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
- name: vpa-target-reader-binding
-roleRef:
- apiGroup: rbac.authorization.k8s.io
- kind: ClusterRole
- name: vpa-target-reader
-subjects:
- - kind: ServiceAccount
- name: vpa-recommender
- namespace: default
----
-# Source: vpa/templates/recommender-deployment.yaml
-apiVersion: apps/v1
-kind: Deployment
-metadata:
- name: vpa-recommender
- labels:
- app.kubernetes.io/component: recommender
- app.kubernetes.io/name: vpa
- app.kubernetes.io/instance: vpa
- app.kubernetes.io/managed-by: Helm
-spec:
- replicas: 1
- selector:
- matchLabels:
- app.kubernetes.io/component: recommender
- app.kubernetes.io/name: vpa
- app.kubernetes.io/instance: vpa
- template:
- metadata:
- labels:
- app.kubernetes.io/component: recommender
- app.kubernetes.io/name: vpa
- app.kubernetes.io/instance: vpa
- spec:
- serviceAccountName: vpa-recommender
- securityContext:
- runAsNonRoot: true
- runAsUser: 65534
- containers:
- - name: vpa
- securityContext: {}
- image: "k8s.gcr.io/autoscaling/vpa-recommender:0.10.0"
- imagePullPolicy: Always
- args:
- - --pod-recommendation-min-cpu-millicores=15
- - --pod-recommendation-min-memory-mb=100
- - --prometheus-address=http://thanos-query.monitoring.svc.cluster.local:9090
- - --storage=prometheus
- - --v=4
- livenessProbe:
- failureThreshold: 6
- httpGet:
- path: /health-check
- port: metrics
- scheme: HTTP
- periodSeconds: 5
- successThreshold: 1
- timeoutSeconds: 3
- readinessProbe:
- failureThreshold: 120
- httpGet:
- path: /health-check
- port: metrics
- scheme: HTTP
- periodSeconds: 5
- successThreshold: 1
- timeoutSeconds: 3
- ports:
- - name: metrics
- containerPort: 8942
- protocol: TCP
- resources:
- limits:
- cpu: 200m
- memory: 1000Mi
- requests:
- cpu: 50m
- memory: 500Mi
----
-# Source: vpa/templates/tests/rbac.yaml
-apiVersion: v1
-kind: ServiceAccount
-metadata:
- annotations:
- "helm.sh/hook": "test"
- "helm.sh/hook-delete-policy": "hook-succeeded,before-hook-creation,hook-failed"
- "helm.sh/hook-weight": "10"
- name: vpa-test
----
-# Source: vpa/templates/tests/rbac.yaml
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
- name: vpa-test
- labels:
- app.kubernetes.io/name: vpa
- app.kubernetes.io/instance: vpa
- app.kubernetes.io/managed-by: Helm
- annotations:
- "helm.sh/hook": "test"
- "helm.sh/hook-delete-policy": "hook-succeeded,before-hook-creation,hook-failed"
- "helm.sh/hook-weight": "20"
-rules:
- - apiGroups:
- - "metrics.k8s.io"
- resources:
- - "nodes"
- verbs:
- - list
- - apiGroups:
- - "apiextensions.k8s.io"
- resources:
- - customresourcedefinitions
- verbs:
- - get
- - list
- - watch
- - apiGroups:
- - "autoscaling.k8s.io"
- resources:
- - verticalpodautoscalers
- verbs:
- - get
- - list
- - watch
- - create
- - delete
- - apiGroups:
- - "autoscaling.k8s.io"
- resources:
- - verticalpodautoscalercheckpoints
- verbs:
- - get
- - list
- - watch
----
-# Source: vpa/templates/tests/rbac.yaml
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
- name: vpa-test
- labels:
- app.kubernetes.io/name: vpa
- app.kubernetes.io/instance: vpa
- app.kubernetes.io/managed-by: Helm
- annotations:
- "helm.sh/hook": "test"
- "helm.sh/hook-delete-policy": "hook-succeeded,before-hook-creation,hook-failed"
- "helm.sh/hook-weight": "30"
-roleRef:
- apiGroup: rbac.authorization.k8s.io
- kind: ClusterRole
- name: vpa-test
-subjects:
- - kind: ServiceAccount
- name: vpa-test
- namespace: default
----
-# Source: vpa/templates/tests/crd-available.yaml
-apiVersion: v1
-kind: Pod
-metadata:
- name: vpa-checkpoint-crd-available
- labels:
- app.kubernetes.io/name: vpa
- app.kubernetes.io/instance: vpa
- app.kubernetes.io/managed-by: Helm
- annotations:
- "helm.sh/hook": test
- "helm.sh/hook-delete-policy": "hook-succeeded,before-hook-creation"
- "helm.sh/hook-weight": "50"
-spec:
- serviceAccountName: vpa-test
- containers:
- - name: test
- image: quay.io/reactiveops/ci-images:v11-alpine
- command: ['kubectl']
- args:
- - get
- - crd
- - verticalpodautoscalercheckpoints.autoscaling.k8s.io
- restartPolicy: Never
----
-# Source: vpa/templates/tests/crd-available.yaml
-apiVersion: v1
-kind: Pod
-metadata:
- name: vpa-crd-available
- labels:
- app.kubernetes.io/name: vpa
- app.kubernetes.io/instance: vpa
- app.kubernetes.io/managed-by: Helm
- annotations:
- "helm.sh/hook": test
- "helm.sh/hook-delete-policy": "hook-succeeded,before-hook-creation"
- "helm.sh/hook-weight": "50"
-spec:
- serviceAccountName: vpa-test
- containers:
- - name: test
- image: quay.io/reactiveops/ci-images:v11-alpine
- command: ['kubectl']
- args:
- - get
- - crd
- - verticalpodautoscalers.autoscaling.k8s.io
- restartPolicy: Never
----
-# Source: vpa/templates/tests/create-vpa.yaml
-apiVersion: v1
-kind: Pod
-metadata:
- name: vpa-test-create-vpa
- labels:
- app.kubernetes.io/name: vpa
- app.kubernetes.io/instance: vpa
- app.kubernetes.io/managed-by: Helm
- annotations:
- "helm.sh/hook": test
- "helm.sh/hook-delete-policy": "before-hook-creation,hook-succeeded"
- "helm.sh/hook-weight": "100"
-spec:
- serviceAccountName: vpa-test
- containers:
- - name: test
- image: quay.io/reactiveops/ci-images:v11-alpine
- command: ['bash']
- args:
- - -c
- - |
- #!/bin/bash
 
- set -e
- set -x
- cat <<EOF | kubectl -n default apply -f -
- apiVersion: autoscaling.k8s.io/v1
- kind: VerticalPodAutoscaler
- metadata:
- name: test-vpa
- spec:
- targetRef:
- apiVersion: "apps/v1"
- kind: Deployment
- name: my-app
- updatePolicy:
- updateMode: "Off"
- EOF
-
- kubectl -n default describe vpa test-vpa
- kubectl -n default delete vpa test-vpa
- restartPolicy: Never
----
-# Source: vpa/templates/tests/metrics.yaml
-apiVersion: v1
-kind: Pod
-metadata:
- name: vpa-metrics-api-available
- labels:
- app.kubernetes.io/name: vpa
- app.kubernetes.io/instance: vpa
- app.kubernetes.io/managed-by: Helm
- annotations:
- "helm.sh/hook": test
- "helm.sh/hook-delete-policy": "before-hook-creation,hook-succeeded"
- "helm.sh/hook-weight": "70"
-spec:
- serviceAccountName: vpa-test
- containers:
- - name: test
- image: quay.io/reactiveops/ci-images:v11-alpine
- command: ['kubectl']
- args:
- - get
- - --raw
- - "/apis/metrics.k8s.io/v1beta1/nodes"
- restartPolicy: Never

[github-advanced-security]

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.

[chii-bot]

MegaLinter status: ❌ ERROR

Descriptor	Linter	Files	Fixed	Errors	Elapsed time
❌ COPYPASTE	jscpd	yes		2	0.93s
✅ REPOSITORY	git_diff	yes		no	0.02s
✅ REPOSITORY	secretlint	yes		no	1.16s
✅ YAML	prettier	1		0	0.49s
✅ YAML	yamllint	1		0	0.13s

See errors details in artifact MegaLinter reports on CI Job page
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff