feat(deps): update helm release vpa to 1.7.5

[renovate]

This PR contains the following updates:

Package	Update	Change
vpa (source)	minor	1.5.0 -> 1.7.5

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Path: cluster/core/resource-control/vpa/vpa.yaml
Version: 1.5.0 -> 1.6.0

No changes in detected in resources

[github-actions]

Path: cluster/core/resource-control/vpa/vpa.yaml
Version: 1.5.0 -> 1.6.1

No changes in detected in resources

[github-actions]

Path: cluster/core/resource-control/vpa/vpa.yaml
Version: 1.5.0 -> 1.7.5

@@ -4,6 +4,7 @@
 automountServiceAccountToken: true
 metadata:
   name: vpa-recommender
+  namespace: default
   labels:
     app.kubernetes.io/name: vpa
     app.kubernetes.io/instance: vpa
@@ -16,6 +17,7 @@
 automountServiceAccountToken: true
 metadata:
   name: vpa-updater
+  namespace: default
   labels:
     app.kubernetes.io/name: vpa
     app.kubernetes.io/instance: vpa
@@ -254,6 +256,7 @@
 kind: Deployment
 metadata:
   name: vpa-recommender
+  namespace: default
   labels:
     app.kubernetes.io/component: recommender
     app.kubernetes.io/name: vpa
@@ -280,7 +283,7 @@
       containers:
         - name: vpa
           securityContext: {}
-          image: "k8s.gcr.io/autoscaling/vpa-recommender:0.11.0"
+          image: "registry.k8s.io/autoscaling/vpa-recommender:0.13.0"
           imagePullPolicy: Always
           args:
             - --pod-recommendation-min-cpu-millicores=15
@@ -318,6 +321,18 @@
               cpu: 50m
               memory: 500Mi
 ---
+# Source: vpa/templates/admission-controller-cleanup.yaml
+apiVersion: v1
+kind: ServiceAccount
+automountServiceAccountToken: true
+metadata:
+  annotations:
+    "helm.sh/hook": "post-delete"
+    "helm.sh/hook-delete-policy": "hook-succeeded,before-hook-creation,hook-failed"
+    "helm.sh/hook-weight": "-100"
+  name: vpa-cleanup
+  namespace: default
+---
 # Source: vpa/templates/tests/rbac.yaml
 apiVersion: v1
 kind: ServiceAccount
@@ -327,6 +342,7 @@
     "helm.sh/hook-delete-policy": "hook-succeeded,before-hook-creation,hook-failed"
     "helm.sh/hook-weight": "10"
   name: vpa-test
+  namespace: default
 ---
 # Source: vpa/templates/tests/rbac.yaml
 apiVersion: rbac.authorization.k8s.io/v1
@@ -375,6 +391,29 @@
       - list
       - watch
 ---
+# Source: vpa/templates/admission-controller-cleanup.yaml
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: vpa-cleanup
+  labels:
+    app.kubernetes.io/name: vpa
+    app.kubernetes.io/instance: vpa
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/component: cleanup
+  annotations:
+    "helm.sh/hook": "post-delete"
+    "helm.sh/hook-delete-policy": "hook-succeeded,before-hook-creation,hook-failed"
+    "helm.sh/hook-weight": "-90"
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: cluster-admin
+subjects:
+  - kind: ServiceAccount
+    name: vpa-cleanup
+    namespace: default
+---
 # Source: vpa/templates/tests/rbac.yaml
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
@@ -402,6 +441,7 @@
 kind: Pod
 metadata:
   name: vpa-checkpoint-crd-available
+  namespace: default
   labels:
     app.kubernetes.io/name: vpa
     app.kubernetes.io/instance: vpa
@@ -414,6 +454,14 @@
   serviceAccountName: vpa-test
   containers:
     - name: test
+      securityContext:
+        allowPrivilegeEscalation: false
+        capabilities:
+          drop:
+            - ALL
+        readOnlyRootFilesystem: true
+        runAsNonRoot: true
+        runAsUser: 10324
       image: quay.io/reactiveops/ci-images:v11-alpine
       command: ['kubectl']
       args:
@@ -427,6 +475,7 @@
 kind: Pod
 metadata:
   name: vpa-crd-available
+  namespace: default
   labels:
     app.kubernetes.io/name: vpa
     app.kubernetes.io/instance: vpa
@@ -439,6 +488,14 @@
   serviceAccountName: vpa-test
   containers:
     - name: test
+      securityContext:
+        allowPrivilegeEscalation: false
+        capabilities:
+          drop:
+            - ALL
+        readOnlyRootFilesystem: true
+        runAsNonRoot: true
+        runAsUser: 10324
       image: quay.io/reactiveops/ci-images:v11-alpine
       command: ['kubectl']
       args:
@@ -452,6 +509,7 @@
 kind: Pod
 metadata:
   name: vpa-test-create-vpa
+  namespace: default
   labels:
     app.kubernetes.io/name: vpa
     app.kubernetes.io/instance: vpa
@@ -464,6 +522,14 @@
   serviceAccountName: vpa-test
   containers:
     - name: test
+      securityContext:
+        allowPrivilegeEscalation: false
+        capabilities:
+          drop:
+            - ALL
+        readOnlyRootFilesystem: true
+        runAsNonRoot: true
+        runAsUser: 10324
       image: quay.io/reactiveops/ci-images:v11-alpine
       command: ['bash']
       args:
@@ -496,6 +562,7 @@
 kind: Pod
 metadata:
   name: vpa-metrics-api-available
+  namespace: default
   labels:
     app.kubernetes.io/name: vpa
     app.kubernetes.io/instance: vpa
@@ -508,6 +575,14 @@
   serviceAccountName: vpa-test
   containers:
     - name: test
+      securityContext:
+        allowPrivilegeEscalation: false
+        capabilities:
+          drop:
+            - ALL
+        readOnlyRootFilesystem: true
+        runAsNonRoot: true
+        runAsUser: 10324
       image: quay.io/reactiveops/ci-images:v11-alpine
       command: ['kubectl']
       args:
@@ -515,3 +590,42 @@
         - --raw
         - "/apis/metrics.k8s.io/v1beta1/nodes"
   restartPolicy: Never
+---
+# Source: vpa/templates/admission-controller-cleanup.yaml
+apiVersion: batch/v1
+kind: Job
+metadata:
+  name: vpa-cleanup
+  namespace: default
+  labels:
+    app.kubernetes.io/name: vpa
+    app.kubernetes.io/instance: vpa
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/component: cleanup
+  annotations:
+    "helm.sh/hook": "post-delete"
+    "helm.sh/hook-delete-policy": "hook-succeeded,before-hook-creation"
+    "helm.sh/hook-weight": "-70"
+spec:
+  template:
+    metadata:
+      name: vpa-cleanup
+      labels:
+        app.kubernetes.io/name: vpa
+        app.kubernetes.io/instance: vpa
+        app.kubernetes.io/managed-by: Helm
+        app.kubernetes.io/component: cleanup
+    spec:
+      restartPolicy: Never
+      serviceAccountName: vpa-cleanup
+      containers:
+        - name: cleanup
+          image: quay.io/reactiveops/ci-images:v11-alpine
+          command: ["bash"]
+          args:
+            - -c
+            - |
+              # From https://github.com/kubernetes/autoscaler/blob/vertical-pod-autoscaler-0.8.0/vertical-pod-autoscaler/pkg/admission-controller/delete-webhook.sh
+              echo "Unregistering VPA admission controller webhook"
+              kubectl delete -n default mutatingwebhookconfiguration.v1beta1.admissionregistration.k8s.io vpa-webhook-config || true
+              kubectl delete -n default secret vpa-tls-certs || true