feat(helm)!: Update chart mongodb ( 14.13.0 → 15.6.14 )

[samip5-bot]

This PR contains the following updates:

Package	Update	Change
mongodb (source)	major	14.13.0 -> 15.6.14

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

bitnami/charts (mongodb)

v15.6.14

• [bitnami/mongodb] Global StorageClass as default value (#​28061)

v15.6.13

• [bitnami/mongodb] Fix autoDiscovery initContainer template (#​27953) (c3955b0), closes #​27953

v15.6.12

• [bitnami/*] Update README changing TAC wording (#​27530) (52dfed6), closes #​27530
• [bitnami/mongodb] Release 15.6.12 (#​27590) (97d0ec8), closes #​27590

v15.6.11

• [bitnami/mongodb] add space back so script works again (#​27183) (e880657), closes #​27183
• [bitnami/mongodb] Recover logging to stdout (#​27510) (33bbddd), closes #​27510

v15.6.9

• [bitnami/mongodb] Release 15.6.9 (#​27382) (d59a4b1), closes #​27382

v15.6.8

• [bitnami/mongodb] Release 15.6.8 (#​27317) (71d3b7e), closes #​27317

v15.6.7

• [bitnami/mongodb] Release 15.6.7 (#​27254) (33a8fd2), closes #​27254

v15.6.6

• [bitnami/mongodb] Add securityContext to generate-tls in replicaset (#​26606) (34ff09b), closes #​26606

v15.6.5

• [bitnami/mongodb] Release 15.6.5 (#​26988) (1b8c210), closes #​26988

v15.6.4

• [bitnami/mongodb] Release 15.6.4 (#​26907) (0fbcf92), closes #​26907

v15.6.2

• [bitnami/mongodb] Remove UTF-8 chars (#​26607) (9ab3365), closes #​26607

v15.6.1

• [bitnami/mongodb] Global StorageClass as default value (#​28061)

v15.6.0

• [bitnami/mongodb] PDB review (#​26154) (a4ecaf9), closes #​26154

v15.5.3

• [bitnami/mongodb]Add "or" condition between .Values.auth.existingSecret and .Values.auth.rootPasswor (5f2204f), closes #​25944 #​25885

v15.5.2

• [bitnami/mongodb] Allow templating for initdbScriptsConfigMap (#​26324) (dc5fe4b), closes #​26324

v15.5.1

• [bitnami/mongodb] Use different liveness/readiness probes (#​26152) (c8b04d4), closes #​26152

v15.4.5

• [bitnami/mongodb] Fix volumePermissions rendering (#​26120) (63a739e), closes #​26120

v15.4.4

• [bitnami/mongodb] Release 15.4.4 updating components versions (#​26050) (838329e), closes #​26050

v15.4.3

• [bitnami/mongodb] Release 15.4.3 updating components versions (#​25849) (8a4f695), closes #​25849

v15.4.2

• [bitnami/mongodb] Release 15.4.2 updating components versions (#​25845) (13aef1b), closes #​25845

v15.4.1

• [bitnami/mongodb] Release 15.4.1 updating components versions (#​25734) (27fba2f), closes #​25734

v15.4.0

• bitnami/mongodb: Allow labels for volumeClaimTemplates (#​25571) (7605c31), closes #​25571 #​25678 #​25680 #​25685 #​25688

v15.3.1

• [bitnami/mongodb] Release 15.3.1 updating components versions (#​25707) (5120460), closes #​25707

v15.3.0

• [bitnami/mongodb] Simplify and fix externalAccess configuration (#​25397) (90b73a8), closes #​25397

v15.2.0

• [bitnami/*] Change non-root and rolling-tags doc URLs (#​25628) (b067c94), closes #​25628
• [bitnami/*] Set new header/owner (#​25558) (8d1dc11), closes #​25558
• [bitnami/mongodb] Network policy review (#​25519) (54c44d3), closes #​25519

v15.1.7

• [bitnami/mongodb] Release 15.1.7 updating components versions (#​25431) (d7cae59), closes #​25431

v15.1.6

• [bitnami/mongodb] Release 15.1.6 updating components versions (#​25416) (0f0b8ed), closes #​25416
• [bitnami/multiple charts] Fix typo: "NetworkPolice" vs "NetworkPolicy" (#​25348) (6970c1b), closes #​25348
• Replace VMware by Broadcom copyright text (#​25306) (a5e4bd0), closes #​25306

v15.1.5

• [bitnami/mongodb] Fix validations and Autodiscovery (#​25283) (288a544), closes #​25283

v15.1.4

• [bitnami/mongodb] Release 15.1.4 updating components versions (#​25082) (e364fc1), closes #​25082

v15.1.3

• [bitnami/mongodb] Release 15.1.3 updating components versions (#​24969) (0d95685), closes #​24969

v15.1.2

• [bitnami/mongodb] Release 15.1.2 (#​24901) (3687a3c), closes #​24901
• Update resourcesPreset comments (#​24467) (92e3e8a), closes #​24467

v15.1.1

• Fix invalid secret pointer in MongoDB ServiceAccount (#​24751) (bccb4e6), closes #​24751

v15.1.0

• [bitnami/mongodb] feat: backoffLimit should be configurable in backup cronjob (#​24505) (5b46a67), closes #​24505 #​24326

v15.0.2

• [bitnami/mongodb] fix: 🐛 Mount emptyDir in /bitnami/mongodb in arbiter node (#​24535) (798a885), closes #​24535

v15.0.1

• [bitnami/mongodb] Release 15.0.1 updating components versions (#​24523) (1e9d09e), closes #​24523

v15.0.0

• [bitnami/*] Reorder Chart sections (#​24455) (0cf4048), closes #​24455
• [bitnami/mongodb] feat!: 🔒 💥 Improve security defaults (#​24374) (8057b1f), closes #​24374

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[samip5-bot]

--- k8s/nebula/apps/databases/mongodb/app Kustomization: flux-system/mongodb HelmRelease: databases/mongodb

+++ k8s/nebula/apps/databases/mongodb/app Kustomization: flux-system/mongodb HelmRelease: databases/mongodb

@@ -13,13 +13,13 @@

     spec:
       chart: mongodb
       sourceRef:
         kind: HelmRepository
         name: bitnami
         namespace: flux-system
-      version: 14.13.0
+      version: 15.6.13
   interval: 10m0s
   values:
     architecture: standalone
     auth:
       enabled: false
     backup:

[github-advanced-security]

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.

[samip5-bot]

--- HelmRelease: databases/mongodb StatefulSet: databases/mongodb

+++ HelmRelease: databases/mongodb StatefulSet: databases/mongodb

@@ -45,27 +45,61 @@

       securityContext:
         fsGroup: 1001
         fsGroupChangePolicy: Always
         supplementalGroups: []
         sysctls: []
       enableServiceLinks: true
+      initContainers:
+      - name: log-dir
+        image: registry.skysolutions.fi/docker/bitnami/mongodb:7.0
+        imagePullPolicy: IfNotPresent
+        command:
+        - /bin/bash
+        args:
+        - -ec
+        - |
+          ln -sf /dev/stdout "/opt/bitnami/mongodb/logs/mongodb.log"
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
+          privileged: false
+          readOnlyRootFilesystem: true
+          runAsGroup: 1001
+          runAsNonRoot: true
+          runAsUser: 1001
+          seLinuxOptions: {}
+          seccompProfile:
+            type: RuntimeDefault
+        resources:
+          limits:
+            cpu: 900m
+            memory: 400Mi
+          requests:
+            cpu: 10m
+            memory: 100Mi
+        volumeMounts:
+        - name: empty-dir
+          mountPath: /opt/bitnami/mongodb/logs
+          subPath: app-logs-dir
       containers:
       - name: mongodb
         image: registry.skysolutions.fi/docker/bitnami/mongodb:7.0
         imagePullPolicy: IfNotPresent
         securityContext:
           allowPrivilegeEscalation: false
           capabilities:
             drop:
             - ALL
           privileged: false
-          readOnlyRootFilesystem: false
-          runAsGroup: 0
+          readOnlyRootFilesystem: true
+          runAsGroup: 1001
           runAsNonRoot: true
           runAsUser: 1001
-          seLinuxOptions: null
+          seLinuxOptions: {}
           seccompProfile:
             type: RuntimeDefault
         env:
         - name: BITNAMI_DEBUG
           value: 'false'
         - name: ALLOW_EMPTY_PASSWORD
@@ -122,12 +156,15 @@

         - name: empty-dir
           mountPath: /opt/bitnami/mongodb/tmp
           subPath: app-tmp-dir
         - name: empty-dir
           mountPath: /opt/bitnami/mongodb/logs
           subPath: app-logs-dir
+        - name: empty-dir
+          mountPath: /.mongodb
+          subPath: mongosh-home
         - name: datadir
           mountPath: /bitnami/mongodb
           subPath: null
         - name: common-scripts
           mountPath: /bitnami/scripts
       volumes:
--- HelmRelease: databases/mongodb PodDisruptionBudget: databases/mongodb

+++ HelmRelease: databases/mongodb PodDisruptionBudget: databases/mongodb

@@ -0,0 +1,19 @@

+---
+apiVersion: policy/v1
+kind: PodDisruptionBudget
+metadata:
+  name: mongodb
+  namespace: databases
+  labels:
+    app.kubernetes.io/instance: mongodb
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mongodb
+    app.kubernetes.io/component: mongodb
+spec:
+  maxUnavailable: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/instance: mongodb
+      app.kubernetes.io/name: mongodb
+      app.kubernetes.io/component: mongodb
+