Update Helm release cert-manager to v1.11.2

Signed-off-by: Renovate Bot <[email protected]>
projectsyn · May 9, 2023 · dc67d20 · dc67d20
1 parent 551d9e0
commit dc67d20
Show file tree

Hide file tree

Showing 20 changed files with 640 additions and 326 deletions.
diff --git a/class/defaults.yml b/class/defaults.yml
@@ -3,7 +3,7 @@ parameters:
     namespace: syn-cert-manager
     dns01-recursive-nameservers: "1.1.1.1:53"
     charts:
-      cert-manager: v1.8.2
+      cert-manager: v1.11.2
     http_proxy: ""
     https_proxy: ""
     no_proxy: ""

diff --git a/.../cert-manager/cert-manager/01_helmchart/cert-manager/templates/cainjector-deployment.yaml b/.../cert-manager/cert-manager/01_helmchart/cert-manager/templates/cainjector-deployment.yaml
@@ -7,8 +7,8 @@ metadata:
     app.kubernetes.io/instance: cert-manager
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cainjector
-    app.kubernetes.io/version: v1.8.2
-    helm.sh/chart: cert-manager-v1.8.2
+    app.kubernetes.io/version: v1.11.2
+    helm.sh/chart: cert-manager-v1.11.2
   name: cert-manager-cainjector
   namespace: syn-cert-manager
 spec:
@@ -26,8 +26,8 @@ spec:
         app.kubernetes.io/instance: cert-manager
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: cainjector
-        app.kubernetes.io/version: v1.8.2
-        helm.sh/chart: cert-manager-v1.8.2
+        app.kubernetes.io/version: v1.11.2
+        helm.sh/chart: cert-manager-v1.11.2
     spec:
       containers:
         - args:
@@ -38,17 +38,22 @@ spec:
               valueFrom:
                 fieldRef:
                   fieldPath: metadata.namespace
-          image: quay.io/jetstack/cert-manager-cainjector:v1.8.2
+          image: quay.io/jetstack/cert-manager-cainjector:v1.11.2
           imagePullPolicy: IfNotPresent
-          name: cert-manager
+          name: cert-manager-cainjector
           resources:
             requests:
               cpu: 50m
               memory: 512Mi
           securityContext:
             allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
       nodeSelector:
         kubernetes.io/os: linux
       securityContext:
         runAsNonRoot: true
+        seccompProfile:
+          type: RuntimeDefault
       serviceAccountName: cert-manager-cainjector
diff --git a/...faults/cert-manager/cert-manager/01_helmchart/cert-manager/templates/cainjector-rbac.yaml b/...faults/cert-manager/cert-manager/01_helmchart/cert-manager/templates/cainjector-rbac.yaml
@@ -7,8 +7,8 @@ metadata:
     app.kubernetes.io/instance: cert-manager
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cainjector
-    app.kubernetes.io/version: v1.8.2
-    helm.sh/chart: cert-manager-v1.8.2
+    app.kubernetes.io/version: v1.11.2
+    helm.sh/chart: cert-manager-v1.11.2
   name: cert-manager-cainjector
   namespace: syn-cert-manager
 rules:
@@ -75,8 +75,8 @@ metadata:
     app.kubernetes.io/instance: cert-manager
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cainjector
-    app.kubernetes.io/version: v1.8.2
-    helm.sh/chart: cert-manager-v1.8.2
+    app.kubernetes.io/version: v1.11.2
+    helm.sh/chart: cert-manager-v1.11.2
   name: cert-manager-cainjector
   namespace: syn-cert-manager
 roleRef:
@@ -97,8 +97,8 @@ metadata:
     app.kubernetes.io/instance: cert-manager
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cainjector
-    app.kubernetes.io/version: v1.8.2
-    helm.sh/chart: cert-manager-v1.8.2
+    app.kubernetes.io/version: v1.11.2
+    helm.sh/chart: cert-manager-v1.11.2
   name: cert-manager-cainjector:leaderelection
   namespace: syn-cert-manager
 rules:
@@ -129,8 +129,8 @@ metadata:
     app.kubernetes.io/instance: cert-manager
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cainjector
-    app.kubernetes.io/version: v1.8.2
-    helm.sh/chart: cert-manager-v1.8.2
+    app.kubernetes.io/version: v1.11.2
+    helm.sh/chart: cert-manager-v1.11.2
   name: cert-manager-cainjector:leaderelection
   namespace: syn-cert-manager
 roleRef:

diff --git a/...t-manager/cert-manager/01_helmchart/cert-manager/templates/cainjector-serviceaccount.yaml b/...t-manager/cert-manager/01_helmchart/cert-manager/templates/cainjector-serviceaccount.yaml
@@ -8,7 +8,7 @@ metadata:
     app.kubernetes.io/instance: cert-manager
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cainjector
-    app.kubernetes.io/version: v1.8.2
-    helm.sh/chart: cert-manager-v1.8.2
+    app.kubernetes.io/version: v1.11.2
+    helm.sh/chart: cert-manager-v1.11.2
   name: cert-manager-cainjector
   namespace: syn-cert-manager
diff --git a/...s/golden/defaults/cert-manager/cert-manager/01_helmchart/cert-manager/templates/crds.yaml b/...s/golden/defaults/cert-manager/cert-manager/01_helmchart/cert-manager/templates/crds.yaml
diff --git a/...en/defaults/cert-manager/cert-manager/01_helmchart/cert-manager/templates/deployment.yaml b/...en/defaults/cert-manager/cert-manager/01_helmchart/cert-manager/templates/deployment.yaml
@@ -7,8 +7,8 @@ metadata:
     app.kubernetes.io/instance: cert-manager
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cert-manager
-    app.kubernetes.io/version: v1.8.2
-    helm.sh/chart: cert-manager-v1.8.2
+    app.kubernetes.io/version: v1.11.2
+    helm.sh/chart: cert-manager-v1.11.2
   name: cert-manager
   namespace: syn-cert-manager
 spec:
@@ -26,16 +26,18 @@ spec:
         app.kubernetes.io/instance: cert-manager
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: cert-manager
-        app.kubernetes.io/version: v1.8.2
-        helm.sh/chart: cert-manager-v1.8.2
+        app.kubernetes.io/version: v1.11.2
+        helm.sh/chart: cert-manager-v1.11.2
     spec:
       containers:
         - args:
             - --v=2
             - --cluster-resource-namespace=$(POD_NAMESPACE)
             - --leader-election-namespace=syn-cert-manager
+            - --acme-http01-solver-image=quay.io/jetstack/cert-manager-acmesolver:v1.11.2
             - --dns01-recursive-nameservers="1.1.1.1:53"
             - --dns01-recursive-nameservers-only
+            - --max-concurrent-challenges=60
           env:
             - name: POD_NAMESPACE
               valueFrom:
@@ -47,9 +49,9 @@ spec:
               value: ''
             - name: NO_PROXY
               value: ''
-          image: quay.io/jetstack/cert-manager-controller:v1.8.2
+          image: quay.io/jetstack/cert-manager-controller:v1.11.2
           imagePullPolicy: IfNotPresent
-          name: cert-manager
+          name: cert-manager-controller
           ports:
             - containerPort: 9402
               name: http-metrics
@@ -60,8 +62,13 @@ spec:
               memory: 512Mi
           securityContext:
             allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
       nodeSelector:
         kubernetes.io/os: linux
       securityContext:
         runAsNonRoot: true
+        seccompProfile:
+          type: RuntimeDefault
       serviceAccountName: cert-manager
diff --git a/...s/golden/defaults/cert-manager/cert-manager/01_helmchart/cert-manager/templates/rbac.yaml b/...s/golden/defaults/cert-manager/cert-manager/01_helmchart/cert-manager/templates/rbac.yaml
@@ -7,8 +7,8 @@ metadata:
     app.kubernetes.io/instance: cert-manager
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cert-manager
-    app.kubernetes.io/version: v1.8.2
-    helm.sh/chart: cert-manager-v1.8.2
+    app.kubernetes.io/version: v1.11.2
+    helm.sh/chart: cert-manager-v1.11.2
   name: cert-manager-controller-issuers
   namespace: syn-cert-manager
 rules:
@@ -56,8 +56,8 @@ metadata:
     app.kubernetes.io/instance: cert-manager
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cert-manager
-    app.kubernetes.io/version: v1.8.2
-    helm.sh/chart: cert-manager-v1.8.2
+    app.kubernetes.io/version: v1.11.2
+    helm.sh/chart: cert-manager-v1.11.2
   name: cert-manager-controller-clusterissuers
   namespace: syn-cert-manager
 rules:
@@ -105,8 +105,8 @@ metadata:
     app.kubernetes.io/instance: cert-manager
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cert-manager
-    app.kubernetes.io/version: v1.8.2
-    helm.sh/chart: cert-manager-v1.8.2
+    app.kubernetes.io/version: v1.11.2
+    helm.sh/chart: cert-manager-v1.11.2
   name: cert-manager-controller-certificates
   namespace: syn-cert-manager
 rules:
@@ -177,8 +177,8 @@ metadata:
     app.kubernetes.io/instance: cert-manager
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cert-manager
-    app.kubernetes.io/version: v1.8.2
-    helm.sh/chart: cert-manager-v1.8.2
+    app.kubernetes.io/version: v1.11.2
+    helm.sh/chart: cert-manager-v1.11.2
   name: cert-manager-controller-orders
   namespace: syn-cert-manager
 rules:
@@ -246,8 +246,8 @@ metadata:
     app.kubernetes.io/instance: cert-manager
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cert-manager
-    app.kubernetes.io/version: v1.8.2
-    helm.sh/chart: cert-manager-v1.8.2
+    app.kubernetes.io/version: v1.11.2
+    helm.sh/chart: cert-manager-v1.11.2
   name: cert-manager-controller-challenges
   namespace: syn-cert-manager
 rules:
@@ -354,8 +354,8 @@ metadata:
     app.kubernetes.io/instance: cert-manager
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cert-manager
-    app.kubernetes.io/version: v1.8.2
-    helm.sh/chart: cert-manager-v1.8.2
+    app.kubernetes.io/version: v1.11.2
+    helm.sh/chart: cert-manager-v1.11.2
   name: cert-manager-controller-ingress-shim
   namespace: syn-cert-manager
 rules:
@@ -426,8 +426,8 @@ metadata:
     app.kubernetes.io/instance: cert-manager
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cert-manager
-    app.kubernetes.io/version: v1.8.2
-    helm.sh/chart: cert-manager-v1.8.2
+    app.kubernetes.io/version: v1.11.2
+    helm.sh/chart: cert-manager-v1.11.2
     rbac.authorization.k8s.io/aggregate-to-admin: 'true'
     rbac.authorization.k8s.io/aggregate-to-edit: 'true'
     rbac.authorization.k8s.io/aggregate-to-view: 'true'
@@ -463,8 +463,8 @@ metadata:
     app.kubernetes.io/instance: cert-manager
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cert-manager
-    app.kubernetes.io/version: v1.8.2
-    helm.sh/chart: cert-manager-v1.8.2
+    app.kubernetes.io/version: v1.11.2
+    helm.sh/chart: cert-manager-v1.11.2
     rbac.authorization.k8s.io/aggregate-to-admin: 'true'
     rbac.authorization.k8s.io/aggregate-to-edit: 'true'
   name: cert-manager-edit
@@ -509,8 +509,8 @@ metadata:
     app.kubernetes.io/instance: cert-manager
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cert-manager
-    app.kubernetes.io/version: v1.8.2
-    helm.sh/chart: cert-manager-v1.8.2
+    app.kubernetes.io/version: v1.11.2
+    helm.sh/chart: cert-manager-v1.11.2
   name: cert-manager-controller-approve:cert-manager-io
   namespace: syn-cert-manager
 rules:
@@ -533,8 +533,8 @@ metadata:
     app.kubernetes.io/instance: cert-manager
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cert-manager
-    app.kubernetes.io/version: v1.8.2
-    helm.sh/chart: cert-manager-v1.8.2
+    app.kubernetes.io/version: v1.11.2
+    helm.sh/chart: cert-manager-v1.11.2
   name: cert-manager-controller-certificatesigningrequests
   namespace: syn-cert-manager
 rules:
@@ -579,8 +579,8 @@ metadata:
     app.kubernetes.io/instance: cert-manager
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cert-manager
-    app.kubernetes.io/version: v1.8.2
-    helm.sh/chart: cert-manager-v1.8.2
+    app.kubernetes.io/version: v1.11.2
+    helm.sh/chart: cert-manager-v1.11.2
   name: cert-manager-controller-issuers
   namespace: syn-cert-manager
 roleRef:
@@ -601,8 +601,8 @@ metadata:
     app.kubernetes.io/instance: cert-manager
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cert-manager
-    app.kubernetes.io/version: v1.8.2
-    helm.sh/chart: cert-manager-v1.8.2
+    app.kubernetes.io/version: v1.11.2
+    helm.sh/chart: cert-manager-v1.11.2
   name: cert-manager-controller-clusterissuers
   namespace: syn-cert-manager
 roleRef:
@@ -623,8 +623,8 @@ metadata:
     app.kubernetes.io/instance: cert-manager
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cert-manager
-    app.kubernetes.io/version: v1.8.2
-    helm.sh/chart: cert-manager-v1.8.2
+    app.kubernetes.io/version: v1.11.2
+    helm.sh/chart: cert-manager-v1.11.2
   name: cert-manager-controller-certificates
   namespace: syn-cert-manager
 roleRef:
@@ -645,8 +645,8 @@ metadata:
     app.kubernetes.io/instance: cert-manager
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cert-manager
-    app.kubernetes.io/version: v1.8.2
-    helm.sh/chart: cert-manager-v1.8.2
+    app.kubernetes.io/version: v1.11.2
+    helm.sh/chart: cert-manager-v1.11.2
   name: cert-manager-controller-orders
   namespace: syn-cert-manager
 roleRef:
@@ -667,8 +667,8 @@ metadata:
     app.kubernetes.io/instance: cert-manager
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cert-manager
-    app.kubernetes.io/version: v1.8.2
-    helm.sh/chart: cert-manager-v1.8.2
+    app.kubernetes.io/version: v1.11.2
+    helm.sh/chart: cert-manager-v1.11.2
   name: cert-manager-controller-challenges
   namespace: syn-cert-manager
 roleRef:
@@ -689,8 +689,8 @@ metadata:
     app.kubernetes.io/instance: cert-manager
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cert-manager
-    app.kubernetes.io/version: v1.8.2
-    helm.sh/chart: cert-manager-v1.8.2
+    app.kubernetes.io/version: v1.11.2
+    helm.sh/chart: cert-manager-v1.11.2
   name: cert-manager-controller-ingress-shim
   namespace: syn-cert-manager
 roleRef:
@@ -711,8 +711,8 @@ metadata:
     app.kubernetes.io/instance: cert-manager
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cert-manager
-    app.kubernetes.io/version: v1.8.2
-    helm.sh/chart: cert-manager-v1.8.2
+    app.kubernetes.io/version: v1.11.2
+    helm.sh/chart: cert-manager-v1.11.2
   name: cert-manager-controller-approve:cert-manager-io
   namespace: syn-cert-manager
 roleRef:
@@ -733,8 +733,8 @@ metadata:
     app.kubernetes.io/instance: cert-manager
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cert-manager
-    app.kubernetes.io/version: v1.8.2
-    helm.sh/chart: cert-manager-v1.8.2
+    app.kubernetes.io/version: v1.11.2
+    helm.sh/chart: cert-manager-v1.11.2
   name: cert-manager-controller-certificatesigningrequests
   namespace: syn-cert-manager
 roleRef:
@@ -755,8 +755,8 @@ metadata:
     app.kubernetes.io/instance: cert-manager
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cert-manager
-    app.kubernetes.io/version: v1.8.2
-    helm.sh/chart: cert-manager-v1.8.2
+    app.kubernetes.io/version: v1.11.2
+    helm.sh/chart: cert-manager-v1.11.2
   name: cert-manager:leaderelection
   namespace: syn-cert-manager
 rules:
@@ -786,8 +786,8 @@ metadata:
     app.kubernetes.io/instance: cert-manager
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cert-manager
-    app.kubernetes.io/version: v1.8.2
-    helm.sh/chart: cert-manager-v1.8.2
+    app.kubernetes.io/version: v1.11.2
+    helm.sh/chart: cert-manager-v1.11.2
   name: cert-manager:leaderelection
   namespace: syn-cert-manager
 roleRef:

diff --git a/...olden/defaults/cert-manager/cert-manager/01_helmchart/cert-manager/templates/service.yaml b/...olden/defaults/cert-manager/cert-manager/01_helmchart/cert-manager/templates/service.yaml
@@ -7,8 +7,8 @@ metadata:
     app.kubernetes.io/instance: cert-manager
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: cert-manager
-    app.kubernetes.io/version: v1.8.2
-    helm.sh/chart: cert-manager-v1.8.2
+    app.kubernetes.io/version: v1.11.2
+    helm.sh/chart: cert-manager-v1.11.2
   name: cert-manager
   namespace: syn-cert-manager
 spec: