chore(deps): update dependency victoriametrics/operator to v0.49.1

[renovate]

This PR contains the following updates:

Package	Update	Change
VictoriaMetrics/operator	minor	0.42.3 -> 0.49.1

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

VictoriaMetrics/operator (VictoriaMetrics/operator)

v0.49.1

Compare Source

v0.49.1 - 11 Nov 2024

• vmrule: properly validate rules for vlogs group type.
• operator: properly apply changes to the converted VMScrapeConfig during operator start-up.
• operator: properly set operational update status for CRDs. Previously, operational status could be set before rollout finishes at Kubernetes due to bug at Kubernetes controller-manager.

New Contributors

• @​rl0nergan made their first contribution in https://github.com/VictoriaMetrics/operator/pull/1147

Full Changelog: VictoriaMetrics/operator@v0.49.0...v0.49.1

v0.49.0

Compare Source

v0.49.0 - 05 Nov 2024

• operator: properly apply useStrictSecurity: true to the initContainers for VMAuth, VMAgent and VMAlertmanager. See this issue for details.
• vmauth: Moved spec.configSecret to spec.externalConfig.secretRef.name and added spec.externalConfig.localPath to be able to provide custom configs via sidecar.
• vmcluster: adds requestsLoadBalancer configuration to the VMCluster.spec. See this issue for details.
• vmcluster: properly configure monitoring for VMCluster with enabled backup.
• vmalertmanager: properly trigger reload when ConfigMap provided via .spec.configMap are changed.
• operator: fixed operator reconcile on storage size change
• operator: fixed converting AlertmanagerConfig to VMAlertmanagerConfig
• vmoperator: bump default version of VictoriaMetrics components to 1.106.0.

v0.48.4

Compare Source

v0.48.4 - 15 Oct 2024

• api: adds new fields maxDiskUsagePerUrl andforceVMProto to the VMagent remoteWriteSpec
• vmuser: fixes the protocol of generated CRD target access url for vminsert and vmstorage when TLS is enabled.
• vmagent: properly make transition to statefulMode. See this issue for details.
• vmagent: properly assign OwnerRefrence for Role and RoleBinding at single-namespace operator mode.
• operator: fixes pod scheduling with useStrictSecurity enabled by removing default values for AppArmorProfile and SeccompProfile. See this issue for details.

New Contributors

• @​leandregagnonlewis made their first contribution in https://github.com/VictoriaMetrics/operator/pull/1117

Full Changelog: VictoriaMetrics/operator@v0.48.3...v0.48.4

v0.48.3

Compare Source

v0.48.3 - 29 Sep 2024

• vmcluster: properly apply global container registry from configuration. It was ignored for VMCluster since v0.48.0 release. See this issue for details.
• operator: updates default vlogs app version to v0.32.0
• operator: adds new flag --disableControllerForCRD. It allows to disable reconcile controller for the given comma-separated list of CRD names. See this issue for details.

v0.48.2

Compare Source

v0.48.2 - 27 Sep 2024

• operator: properly expose vm_app_version metric tag with version and short_version build info. It was broken since v0.46.0 release.
• operator: changes default value for controller.maxConcurrentReconciles from 1 to 5. It should improve reconcile performance for the most installations.
• operator: expose new runtime metrics rest_client_request_duration_seconds, sched_latencies_seconds. It allows to better debug operator reconcile latencies.

v0.48.1

Compare Source

v0.48.1 - 26 Sep 2024

• vmalertmanager: properly build service, previously port by number instead of name was used. It produced updating service log messages.
• vmcluster: properly add imagePullSecrets to the components. Due to bug at 0.48.0 operator ignored vmcluster.spec.imagePullSecrets See this issue for details.

v0.48.0

Compare Source

v0.48.0 - 25 Sep 2024

• api: adds new fields useVMConfigReloader, configReloaderImageTag, configReloaderResources to the VMagent, VMAlert, VMAuth, and VMAlertmanager.
• api/vmalertmanager: adds new field enforcedTopRouteMatchers. It adds given alert label matchers to the top route of any VMAlertmanagerConfig. See this issue for details.
• api: adds underscore version of host_aliases setting, which has priority over hostAliases.
• api: adds useDefaultResources setting to the all applications. It has priority over global operator setting.
• api: adds clusterDomainName to the VMCluster and VMAlertmanager. It defines optional suffix for in-cluster addresses.
• api: adds disableSelfServiceScrape setting to the all applications. It has priority over global operator setting.
• api: Extends applications securityContext and apply security configuration parameters to the containers.
• api: deletes unused env variables: VM_DEFAULTLABELS, VM_PODWAITREADYINITDELAY. Adds new variable VM_APPREADYTIMEOUT.
• vmalert: adds missing hostAliases fields to spec. See this issue for details.
• operator: updates default vm apps version to v1.103.0
• vmsingle/vlogs: makes better compatible with argo-cd by adding ownerReference to PersistentVolumeClaim. See this issue for details.
• operator: reduces reconcile latency. See this commit for details.
• operator: reduces load on kubernetes api-server. See this commits: commit-0, commit-1, commit-2.
• operator: enables client cache back for secrets and configmaps. Adds new flag -controller.disableCacheFor=seccret,configmap to disable it if needed.
• operator: made webhook port configurable. See this issue for details.
• operator: operator trims spaces from Secret and Configmap values by default. This behaviour could be changed with flag disableSecretKeySpaceTrim. Related issue.
• operator: expose again only command-line flags related to the operator. Release v0.45.0 added regression with incorrectly exposed flags.
• operator: bump vm version to 1.103.0 by @​hagen1778 in https://github.com/VictoriaMetrics/operator/pull/1088
• operator: respect the enabled status of PDB by @​Dentrax in https://github.com/VictoriaMetrics/operator/pull/1109

New Contributors

• @​func25 made their first contribution in https://github.com/VictoriaMetrics/operator/pull/1097
• @​Dentrax made their first contribution in https://github.com/VictoriaMetrics/operator/pull/1109

Full Changelog: VictoriaMetrics/operator@v0.47.3...v0.48.0

v0.47.3

Compare Source

v0.47.3 - 28 Aug 2024

• operator: fixes statefulset reconcile endless loop for kubernetes versions < 1.27. Bug introduced at v0.47.0 version with commit.

v0.47.2

Compare Source

v0.47.2 - 26 Aug 2024

• vmalertmanager: allow to change webserver listen port with spec.Port. See this PR for details.
• operator: updates default vm apps version to v1.102.1
• operator: fixes statefulset rollingUpdate strategyType readiness check.
• operator: fixes statefulset reconcile endless loop bug introduced at v0.47.1 version with commit.
• vmuser: fixes crd.kind enum param for VMAlertmanager, it now supports both VMAlertmanager and VMAlertManager. See this issue for details.
• operator: adds sorting for configReloaderExtraArgs.

v0.47.1

Compare Source

v0.47.1 - 23 Aug 2024

It is recommended upgrading to operator v0.47.2 because v0.47.1 contains a bug, which can lead to endless statefulset reconcile loop.

• operator: properly update statefulset on revisionHistoryLimitCount change. See this issue for details.
• vmalertmanagerconfig: properly construct tls_config for emails notifications. See this issue for details.
• operator: fixed Prometheus scrape config metricsPath conversion. See this issue
• config-reloader: Added reload prefix to all config-reloader tls* flags to avoid collision with flags from external package. See this issue

v0.47.0

Compare Source

v0.47.0 - 15 Aug 2024

Breaking changes

• Update note 1: operator now forbids cross VMAlertmanagerConfig or global receiver references. VMAlertmanagerConfig must include only local receivers .

• Update note 2: removed deprecated mute_time_intervals from VMAlertmanagerConfig.spec. Use VMAlertmanagerConfig.spec.time_intervals instead.

• Update note 3: operator adds blackhole as default route for VMalertmanager if root route receiver is empty. Previously it added a first VMAlertmanagerConfig receiver. Update global VMalertmanager configuration with proper route receiver if needed

• victoria-logs: added VLogs resource for VictoriaLogs management. Related issue.

• config-reloader: adds new flags tlsCaFile, tlsCertFile,tlsKeyFile,tlsServerName,tlsInsecureSkipVerify. It allows to configure tls for reload endpoint. Related issue.

• vmuser: adds status.lastSyncError field, adds server-side validation for spec.targetRefs.crd.kind. Adds small refactoring.

• vmuser: allows to skip VMUser from VMAuth config generation if it has misconfigured fields. Such as references to non-exist CRD objects or missing fields. It's highly recommended to enable Validation webhook for VMUsers, it should reduce surface of potential misconfiguration. See this issue for details.

• vmagent: adds status and lastSyncError status fields to all scrape objects - VMServiceScrape, VMPodScrape, VMNodeScrape,VMPodScrape, VMStaticScrape and VMScrapeConfig. It allows to track config generation for vmagent from scrape objects.

• operator: refactors config builder for VMAgent. It fixes minor bug with incorrect skip of scrape object with incorrect references for secrets and configmaps.

• operator: allows to secure metrics-bind-address webserver with TLS and mTLS protection via flags tls.enable,tls.certDir,tls.certName,tls.key``,mtls.enable,mtls.clietCA`. See this issue for details.

• operator: fixes bug with possible tlsConfig SecretOrConfigmap references clash. Operator adds configmap prefix to the configmap refrenced tls asset. See this issue for details.

• operator: properly release PodDisruptionBudget object finalizer. Previously it could be kept due to typo. See this issue for details.

• operator: refactors finalizers usage. Simplifies finalizer manipulation with helper functions

• operator: adds tls_config and authKey settings to auto-created VMServiceScrape for CRD objects from extraArgs. See this issue for details.

• vmalertmanagerconfig: Improves config validation. Now it properly tracks required fields and provides better feedback for misconfiguration. Adds new status fields - status and lastSyncError. Related issue.

• vmalertmanager: adds webConfig that simplifies tls configuration for alertmanager and allows to properly build probes and access urls for alertmanager. See this issue for details.

• vmalertmanager: adds gossipConfig to setup client and server TLS configuration for alertmanager.

• vmagent/vmsingle: sync stream aggregation options dropInputLabels, ignoreFirstIntervals, ignoreOldSamples from upstream, and support using configMap as the source of aggregation rules.

• operator: added -client.qps and -client.burst flags to override default QPS and burst K8S params. Related issue.

v0.46.4

Compare Source

v0.46.4 - 9 Jul 2024

Breaking changes

• Update note 1: for operatorhub based VMAgent deployment serviceAccount vmagent must be removed. It's no longer shipped with bundle. After deletion operator will create new account with needed permissions.

• [manifests]: properly add webhook.enable for operatorhub deployments. See this commit 7a460b0 for details.

• [manifests]: removes exact user from runAsUser setting. It must be defined at docker image or security profile level. See this commit 1cc4a0e for details. by @​AndrewChubatiuk

• operator: switches from distroless to scratch base image. See this commit 768bf76 for details. by @​AndrewChubatiuk

• config-reloader: do not specify command for container. command configured at docker image level. See this commit 2192115 for details. by @​AndrewChubatiuk

• [build-scripts]: fixed replaced version extraction by @​AndrewChubatiuk in https://github.com/VictoriaMetrics/operator/pull/1026

Full Changelog: VictoriaMetrics/operator@v0.46.3...v0.46.4

v0.46.3

Compare Source

v0.46.3 - 5 Jul 2024

• operator: fixes config-reloader image tag name after 0.46.0 release. See this issue for details.
• prometheus-converter: fixes panic at PodMonitor convertion with configured tlsConfig. See this issue for details.
• api: return back targetPort for VMPodScrape definition. See this issue for details.
• fixed not yet existing operator path by @​AndrewChubatiuk in https://github.com/VictoriaMetrics/operator/pull/1016
• fixed yaml by @​AndrewChubatiuk in https://github.com/VictoriaMetrics/operator/pull/1019
• fixed olm manifest generation by @​AndrewChubatiuk in https://github.com/VictoriaMetrics/operator/pull/1020
• fixed envdocs by @​AndrewChubatiuk in https://github.com/VictoriaMetrics/operator/pull/1024
• added ability to test olm packages locally, added examples and annotations to OLM, restored operator-sdk descriptors by @​AndrewChubatiuk in https://github.com/VictoriaMetrics/operator/pull/1023

Full Changelog: VictoriaMetrics/operator@v0.46.2...v0.46.3

v0.46.2

Compare Source

v0.46.2 - 4 Jul 2024

Updates

• Typos fixes by @​AndrewChubatiuk in https://github.com/VictoriaMetrics/operator/pull/1014
• api: return back targetPort for VMPodScrape definition. See this issue for details.

Full Changelog: VictoriaMetrics/operator@v0.46.0...v0.46.2

v0.46.1

Compare Source

v0.46.1 - 3 Jul 2024

Breaking changes

• Update note 1: the --metrics-addr command-line flag at operator was deprecated. Use --metrics-bind-address instead.
• Update note 2: the --enable-leader-election command-line flag at operator was deprecated. Use --leader-elect instead.
• Update note 3: the --http.readyListenAddr command-line flag at operator was deprecated. Use --health-probe-bind-address instead.
• Update note 4: multitenant endpoints suffix /insert/multitenant/<suffix> needs to be added in remoteWrite.url if storage supports multitenancy when using remoteWriteSettings.useMultiTenantMode, as upstream vmagent has deprecated -remoteWrite.multitenantURL command-line flag since v1.102.0.

Updates

• operator: adds tls flag check for AsURL method. It must allow to use https configuration for VMUser service discovery. See this issue for details.
• operator: kubebuilder v2 -> v4 upgrade
• operator: operator docker images are now distroless based
• operator: upgraded certificates.cert-manager.io/v1alpha2 to certificates.cert-manager.io/v1
• operator: code-generator v0.27.11 -> v0.30.0 upgrade
• vmalertmanagerconfig: adds missing handleReconcileErr callback to the reconcile loop. It must properly handle errors and deregister objects.
• vmrule: sync group attributes eval_offset, eval_delay and eval_alignment from upstream.
• operator: fix VM CRs' xxNamespaceSelector and xxSelector options, previously they are inverted. See this issue for details.
• vmnodescrape: remove duplicated series_limit and sample_limit fields in generated scrape_config. See this issue.

v0.46.0

Compare Source

v0.46.0 - 3 Jul 2024

Breaking changes

• Update note 1: the --metrics-addr command-line flag at operator was deprecated. Use --metrics-bind-address instead.
• Update note 2: the --enable-leader-election command-line flag at operator was deprecated. Use --leader-elect instead.
• Update note 3: the --http.readyListenAddr command-line flag at operator was deprecated. Use --health-probe-bind-address instead.
• Update note 4: multitenant endpoints suffix /insert/multitenant/<suffix> needs to be added in remoteWrite.url if storage supports multitenancy when using remoteWriteSettings.useMultiTenantMode, as upstream vmagent has deprecated -remoteWrite.multitenantURL command-line flag since v1.102.0.

Updates

• operator: adds tls flag check for AsURL method. It must allow to use https configuration for VMUser service discovery. See this issue for details.
• operator: kubebuilder v2 -> v4 upgrade
• operator: operator docker images are now distroless based
• operator: upgraded certificates.cert-manager.io/v1alpha2 to certificates.cert-manager.io/v1
• operator: code-generator v0.27.11 -> v0.30.0 upgrade
• vmalertmanagerconfig: adds missing handleReconcileErr callback to the reconcile loop. It must properly handle errors and deregister objects.
• vmrule: sync group attributes eval_offset, eval_delay and eval_alignment from upstream.
• operator: fix VM CRs' xxNamespaceSelector and xxSelector options, previously they are inverted. See this issue for details.
• vmnodescrape: remove duplicated series_limit and sample_limit fields in generated scrape_config. See this issue.

v0.45.0

Compare Source

v0.45.0 - 10 Jun 2024

• operator: expose only command-line flags related to the operator. Remove all transitive dependency flags. See this issue for details.
• vmalertmanager: ignores content of cr.spec.configSecret if it's name clashes with secret used by operator for storing alertmanager config. See this issue for details.
• operator: remove finalizer for child objects with non-empty DeletetionTimestamp. See this issue for details.
• operator: skip storageClass check if there is no PVC size change. See this issue for details.
• vmauth: fix url when default http port is changed in targetRef. See this issue for details.
• vmauth: fix deployment when custom reloader is used. See this pull request.
• prometheus-converter: removed dependence on getting the list of API resources for all API groups in the cluster (including those that are not used by the operator). Now API resources are requested only for the required groups (monitoring.coreos.com/*).
• alertmanagerconfig-converter: fix alertmanagerconfig converting with receiver opsgenie_configs. See this issue.

v0.44.0

Compare Source

v0.44.0 - 9 May 2024

• vmagent: adds new fields into streamAggrConfig: dedup_interval, ignore_old_samples, keep_metric_names, no_align_flush_to_interval. It's only possible to use it with v1.100+ version of vmagent. See this issue for details.
• operator: use Patch for finalizers set/unset operations. It must fix possible issues with CRD objects mutations. See this issue for details.
• operator: adds spec.pause field to VMAgent, VMAlert, VMAuth, VMCluster, VMAlertmanager and VMSingle. It allows to suspend object reconcile by operator. See this issue for details. Thanks @​just1900
• vmagent: set status.selector field. It allows correctly use VPA with vmagent. See this issue for details.
• prometheus-converter: fixes bug with prometheus-operator ScrapeConfig converter. Only copy spec field for it. See this issue for details.
• vmscrapeconfig: authorization section in sd configs works properly with empty type field (default value for this field is Bearer).
• prometheus-converter: fixes owner reference type on VMScrapeConfig objects
• vmauth&vmuser: sync config fields from upstream, e.g., src_query_args, discover_backend_ips.

v0.43.5

Compare Source

What's Changed

• Update VictoriaMetrics image tags to v1.101.0.

Full Changelog: VictoriaMetrics/operator@v0.43.4...v0.43.5

v0.43.4

Compare Source

v0.43.4 - 25 Apr 2024

• operator: properly set status to expanding for VMCluster during initial creation. Previously, it was always operational.
• operator: adds more context to Deployment and Statefulset watch ready functions. Now, it reports state of unhealthy pod. It allows to find issue with it faster.

v0.43.3

Compare Source

v0.43.3 - 23 Apr 2024

• operator: fix conversion from ServiceMonitor to VMServiceScrape, bearerTokenSecret is dropped mistakenly since v0.43.0. See this issue.
• operator: fix selector match for config resources like VMUser, VMRule... , before it could be ignored when update resource labels.

v0.43.2

Compare Source

v0.43.2 - 22 Apr 2024

• vmagent: fixes bug with ServiceAccount not found with ingestOnlyMode.
• vmagent: fixes unknown long flag '--rules-dir' for prometheus-config-reloader.

v0.43.1

Compare Source

Full Changelog: VictoriaMetrics/operator@v0.43.0...v0.43.1

v0.43.0

Compare Source

v0.43. - 18 Apr 2024

Update note: vmcluster: remove fields VMClusterSpec.VMInsert.Name, VMClusterSpec.VMStorage.Name, VMClusterSpec.VMSelect.Name, they're marked as deprecated since v0.21.0. See this pull request.
Update note: PodSecurityPolicy supports was deleted. Operator no long creates PSP related objects since it's no longer supported by Kubernetes actual versions. See this doc for details.
Update note: PodDisruptionBudget at betav1 API is no longer supported. Operator uses v1 stable version. See this doc for details.
Update note: Alertmanager versions below v0.22.0 are no longer supported. Version must upgraded - manually for resources or use default version bundled with operator config.

• operator: properly reconcile ServiceAccount specified for CRDs. Previously operator didn't perform a check for actual owner of ServiceAccount. Now it creates and updates ServiceAccount only if this field is omitted at CRD definition. It fixes possible ownership race conditions.
• Update VictoriaMetrics image tags to v1.100.1.
• operator: reduce number of watched resources owned by CRDs. Operator no longer watches for Service, Secret, Configmap changes owned by CRD object. It must reduce logging output, CPU and memory usage for operator.
• operator: exposes config-reloader-http port with 8435 number for the customer config-reloader containers. Operator may use own config-reloader implementation for VMAuth, VMAlertmanager and VMAgent.
• operator: adds new field configReloaderExtraArgs for VMAgent, VMAlert, VMAuth and VMAlertmanager CRDs. It allows to configure config-reloader container.
• config-reloader: adds error metrics to the config-reloader container - configreloader_last_reload_successful, configreloader_last_reload_errors_total, configreloader_config_last_reload_total, configreloader_k8s_watch_errors_total, configreloader_secret_content_update_errors_total, configreloader_last_reload_success_timestamp_seconds. See this issue for details.
• operator: Changes error handling for reconcile. Operator sends Events into kubernetes API, if any error happened during object reconcile. See this issue for details.
• operator: updates base Docker image and prometheus_client to versions with with CVE fixes
• operator: adds reconcile retries on conflicts. See this issue for details.
• operator: allows adjust Service generated by operator with useAsDefault option set to true for serviceSpec field. See this issue for details.
• vmagent: allows to modify serviceName field for vmagent at statefulMode with custom service. See this issue for details. Thanks @​yilmazo
• vmagent: change service for statefulMode to the headless instead of clusterIP. See this issue for details.
• vmservicescrape&vmpodscrape: add attach_metadata option under VMServiceScrapeSpec&VMPodScrapeSpec, the same way like prometheus serviceMonitor&podMonitor do. See this issue for details.
• vmagent: allows multi-line regex at relabelConfig. See this docs and this issue for details.
• vmalertmanagerconfig: fix struct field tags under Sigv4Config.
• vmalertmanagerconfig: adds own config-reloader container. It must improve speed of config updates. See this issue for details.
• vmalertmanager: bump default alertmanager version to v0.27.0, which supports new receivers like msteams_configs.
• vmalertmanager: supports alertmanager version v0.22.0 or higher. Previous versions are no longer supported and must be upgraded before using new operator release.
• vmscrapeconfig: add crd VMScrapeConfig, which can define a scrape config using any of the service discovery options supported in victoriametrics.
• vmuser: adds targetRefBasicAuth field targetRef, which allow to configure basic authorization for target_url. See this issue for details. Thanks @​mohammadkhavari
• vmprobe: add field proxy_url, see this issue for details.
• scrape CRDs: add field series_limit, which can be used to limit the number of unique time series a single scrape target can expose.
• scrape CRDs: fix scrape_config filed disable_keep_alive, before it's misconfigured as disable_keepalive and won't work.
• scrape CRDs: deprecated option relabel_debug and metric_relabel_debug, they were deprecated since v1.85.0.

v0.42.4

Compare Source

Full Changelog: VictoriaMetrics/operator@v0.42.3...v0.42.4

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.