feat(container): update app-template ( 3.5.1 → 3.6.0 )

[lumiere-bot]

This PR contains the following updates:

Package	Update	Change
app-template	minor	3.5.1 -> 3.6.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[lumiere-bot]

--- kubernetes/sol/apps/system-upgrade/system-upgrade-controller/app Kustomization: flux-system/system-upgrade-controller HelmRelease: system-upgrade/system-upgrade-controller

+++ kubernetes/sol/apps/system-upgrade/system-upgrade-controller/app Kustomization: flux-system/system-upgrade-controller HelmRelease: system-upgrade/system-upgrade-controller

@@ -13,13 +13,13 @@

     spec:
       chart: app-template
       sourceRef:
         kind: HelmRepository
         name: bjw-s
         namespace: flux-system
-      version: 3.5.1
+      version: 3.6.0
   install:
     remediation:
       retries: 3
   interval: 30m
   upgrade:
     cleanupOnFail: true
--- kubernetes/sol/apps/external-secrets/external-secrets/stores Kustomization: flux-system/external-secrets-stores HelmRelease: external-secrets/onepassword-connect

+++ kubernetes/sol/apps/external-secrets/external-secrets/stores Kustomization: flux-system/external-secrets-stores HelmRelease: external-secrets/onepassword-connect

@@ -13,13 +13,13 @@

     spec:
       chart: app-template
       sourceRef:
         kind: HelmRepository
         name: bjw-s
         namespace: flux-system
-      version: 3.5.1
+      version: 3.6.0
   install:
     remediation:
       retries: 3
   interval: 30m
   upgrade:
     cleanupOnFail: true
--- kubernetes/sol/apps/monitoring/vector/app Kustomization: flux-system/vector HelmRelease: monitoring/vector-agent

+++ kubernetes/sol/apps/monitoring/vector/app Kustomization: flux-system/vector HelmRelease: monitoring/vector-agent

@@ -13,13 +13,13 @@

     spec:
       chart: app-template
       sourceRef:
         kind: HelmRepository
         name: bjw-s
         namespace: flux-system
-      version: 3.5.1
+      version: 3.6.0
   install:
     remediation:
       retries: 3
   interval: 30m
   timeout: 15m
   upgrade:

[lumiere-bot]

--- HelmRelease: external-secrets/onepassword-connect Deployment: external-secrets/onepassword-connect

+++ HelmRelease: external-secrets/onepassword-connect Deployment: external-secrets/onepassword-connect

@@ -36,12 +36,13 @@

         runAsGroup: 999
         runAsNonRoot: true
         runAsUser: 999
       hostIPC: false
       hostNetwork: false
       hostPID: false
+      hostUsers: true
       dnsPolicy: ClusterFirst
       containers:
       - env:
         - name: OP_BUS_PEERS
           value: localhost:11221
         - name: OP_BUS_PORT
--- HelmRelease: monitoring/vector-agent DaemonSet: monitoring/vector-agent

+++ HelmRelease: monitoring/vector-agent DaemonSet: monitoring/vector-agent

@@ -29,12 +29,13 @@

       enableServiceLinks: false
       serviceAccountName: vector-agent
       automountServiceAccountToken: true
       hostIPC: false
       hostNetwork: false
       hostPID: false
+      hostUsers: true
       dnsPolicy: ClusterFirst
       containers:
       - args:
         - --config
         - /etc/vector/vector.yaml
         env:
--- HelmRelease: system-upgrade/system-upgrade-controller Deployment: system-upgrade/system-upgrade-controller

+++ HelmRelease: system-upgrade/system-upgrade-controller Deployment: system-upgrade/system-upgrade-controller

@@ -38,12 +38,13 @@

         runAsUser: 65534
         seccompProfile:
           type: RuntimeDefault
       hostIPC: false
       hostNetwork: false
       hostPID: false
+      hostUsers: true
       dnsPolicy: ClusterFirst
       affinity:
         nodeAffinity:
           requiredDuringSchedulingIgnoredDuringExecution:
             nodeSelectorTerms:
             - matchExpressions: