[prometheus-blackbox-exporter] ICMP Pod Security Policy Update #3925

sachasmart · 2023-10-20T13:16:26Z

What this PR does / why we need it

The current way with adding NET_RAW capability is not sufficient for the ICMP module to working correctly. Interestingly, the solution doesn't even require adding NET_RAW as a value, yet I kept it as is incase there is intention elsewhere.

Which issue this PR fixes

Looks like other people had similar issues:
(optional, in fixes #<issue number>(, fixes #<issue_number>, ...) format, will close that issue when PR gets merged)

fixes:
- [prometheus-blackbox-exporter] Adding NET_RAW capability is not enough to run rootless container #2483
- [prometheus-blackbox-exporter] New icmp handling with capabilities as documented breaks icmp checks #2360

Checklist

DCO signed
Chart Version bumped
Title of the PR starts with chart name (e.g. [prometheus-couchdb-exporter])

andrejshapal · 2023-12-13T17:42:20Z

Hello,
It would be more clean to add in podSpec:

helm-charts/charts/prometheus-blackbox-exporter/templates/_helpers.tpl

Line 108 in 16219b7

- Black Box ICMP Module needs additional PSP fields - Signed-off-by: Sacha Smart <sacha.smart@gmail.com> Signed-off-by: Sacha <sacha.smart@gmail.com>

@GMartinez-Sisti

* [kube-prometheus-stack] Allow to directory config prometheus.spec and alertmanager.spec Signed-off-by: Jan-Otto Kröpke <joe@cloudeteer.de> * Add tests Signed-off-by: Jan-Otto Kröpke <joe@cloudeteer.de> * Update charts/kube-prometheus-stack/values.yaml Co-authored-by: Gabriel Martinez <19713226+GMartinez-Sisti@users.noreply.github.com> Signed-off-by: Jan-Otto Kröpke <github@jkroepke.de> --------- Signed-off-by: Jan-Otto Kröpke <joe@cloudeteer.de> Signed-off-by: Jan-Otto Kröpke <github@jkroepke.de> Co-authored-by: Gabriel Martinez <19713226+GMartinez-Sisti@users.noreply.github.com> Signed-off-by: Sacha <sacha.smart@gmail.com> pod security spec updates - Update to the podSpec in `_helpers.tpl` with `customPingGroupRange` and included sensible default for ping range - Update to the `deployment.yaml` to reflect updates Signed-off-by: Sacha <sacha.smart@gmail.com> [prometheus] Allow setting automountServiceAccountToken (prometheus-community#3911) * Allow turning setting automountServiceAccountToken Signed-off-by: drfaust92 <ilia.lazebnik@gmail.com> * Allow turning setting automountServiceAccountToken Signed-off-by: drfaust92 <ilia.lazebnik@gmail.com> --------- Signed-off-by: drfaust92 <ilia.lazebnik@gmail.com> Signed-off-by: Sacha <sacha.smart@gmail.com> [prometheus-json-exporter] fix configmap name according to standard (prometheus-community#3926) Signed-off-by: t3mi <t3mi@users.noreply.github.com> Signed-off-by: Sacha <sacha.smart@gmail.com> [prometheus] Allow setting scrape_config_files in prometheus config (prometheus-community#3930) Signed-off-by: Roshan Jobanputra <roshan@materialize.com> Signed-off-by: Sacha <sacha.smart@gmail.com> [kube-prometheus-stack] fixes thanos configs (prometheus-community#3918) * break: kube-prom-stack thanos-ruler config secrets Signed-off-by: ThameezBo <thameezbo@double.cloud> * fix: linting Signed-off-by: ThameezBo <thameezbo@double.cloud> * fix: update README Signed-off-by: ThameezBo <thameezbo@double.cloud> * fix: linting Signed-off-by: ThameezBo <thameezbo@double.cloud> * fix: comments Signed-off-by: ThameezBo <thameezbo@double.cloud> * Update charts/kube-prometheus-stack/values.yaml Co-authored-by: Gabriel Martinez <19713226+GMartinez-Sisti@users.noreply.github.com> Signed-off-by: thameezb <thameezbo@double.cloud> * fix: cater for prom.promSpec.thanos Signed-off-by: ThameezBo <thameezbo@double.cloud> * fix: linting Signed-off-by: ThameezBo <thameezbo@double.cloud> * fix: cater for all three permutations Signed-off-by: ThameezBo <thameezbo@double.cloud> --------- Signed-off-by: ThameezBo <thameezbo@double.cloud> Signed-off-by: thameezb <thameezbo@double.cloud> Signed-off-by: thameezbo <thameezbo@double.cloud> Co-authored-by: Gabriel Martinez <19713226+GMartinez-Sisti@users.noreply.github.com> Signed-off-by: Sacha <sacha.smart@gmail.com> [prometheus] Loosen typing for pdb.maxUnavailable (prometheus-community#3927) * Loosen PDB typing Signed-off-by: drfaust92 <ilia.lazebnik@gmail.com> * Loosen PDB typing Signed-off-by: drfaust92 <ilia.lazebnik@gmail.com> --------- Signed-off-by: drfaust92 <ilia.lazebnik@gmail.com> Signed-off-by: zeritti <47476160+zeritti@users.noreply.github.com> Co-authored-by: zeritti <47476160+zeritti@users.noreply.github.com> Signed-off-by: Sacha <sacha.smart@gmail.com> [kube-prometheus-stack] Update Thanos with critical fixes for objstorage and HTTP/2 CVE (prometheus-community#3935) * [kube-prometheus-stack] Update Thanos Ruler with critical fixes for objstorage Signed-off-by: Dmitriy Alekseev <1865999+dragoangel@users.noreply.github.com> * Update values.yaml Signed-off-by: Dmitriy Alekseev <1865999+dragoangel@users.noreply.github.com> * Update values.yaml Signed-off-by: Dmitriy Alekseev <1865999+dragoangel@users.noreply.github.com> --------- Signed-off-by: Dmitriy Alekseev <1865999+dragoangel@users.noreply.github.com> Signed-off-by: Sacha <sacha.smart@gmail.com> Populating dynamic honorLabels and honorTimestamps in kubelet ServiceMonitor (prometheus-community#3934) * Implementing dynamic honorLables and honorTimestamp in kubelet ServiceMonitor Signed-off-by: andrejshapal <njuhaandrej@mail.ru> * Updating values with default honorTimestamp and honorLables Signed-off-by: andrejshapal <njuhaandrej@mail.ru> * Bumping chart version Signed-off-by: andrejshapal <njuhaandrej@mail.ru> * Linting Signed-off-by: andrejshapal <njuhaandrej@mail.ru> * Linting Signed-off-by: andrejshapal <njuhaandrej@mail.ru> * Linting Signed-off-by: andrejshapal <njuhaandrej@mail.ru> * Update Chart.yaml Signed-off-by: andrejshapal <njuhaandrej@mail.ru> * Update charts/kube-prometheus-stack/Chart.yaml Co-authored-by: Gabriel Martinez <19713226+GMartinez-Sisti@users.noreply.github.com> Signed-off-by: andrejshapal <njuhaandrej@mail.ru> * Update charts/kube-prometheus-stack/Chart.yaml Co-authored-by: Gabriel Martinez <19713226+GMartinez-Sisti@users.noreply.github.com> Signed-off-by: andrejshapal <njuhaandrej@mail.ru> --------- Signed-off-by: andrejshapal <njuhaandrej@mail.ru> Co-authored-by: Gabriel Martinez <19713226+GMartinez-Sisti@users.noreply.github.com> Signed-off-by: Sacha <sacha.smart@gmail.com> [prometheus] Upgrade Prometheus, update deps (prometheus-community#3947) * update deps Signed-off-by: drfaust92 <ilia.lazebnik@gmail.com> * Update charts/prometheus/Chart.yaml Co-authored-by: zeritti <47476160+zeritti@users.noreply.github.com> Signed-off-by: Ilia Lazebnik <Ilia.lazebnik@gmail.com> * Update charts/prometheus/Chart.yaml Co-authored-by: zeritti <47476160+zeritti@users.noreply.github.com> Signed-off-by: Ilia Lazebnik <Ilia.lazebnik@gmail.com> --------- Signed-off-by: drfaust92 <ilia.lazebnik@gmail.com> Signed-off-by: Ilia Lazebnik <Ilia.lazebnik@gmail.com> Co-authored-by: zeritti <47476160+zeritti@users.noreply.github.com> Signed-off-by: Sacha <sacha.smart@gmail.com> [prometheus-stackdriver-exporter] bump stackdriver exporter to 0.14.1 (prometheus-community#3847) * bump stackdriver exporter to 0.14.1 Signed-off-by: drfaust92 <ilia.lazebnik@gmail.com> * bump stackdriver exporter to 0.14.1 Signed-off-by: drfaust92 <ilia.lazebnik@gmail.com> * Update Chart.yaml Signed-off-by: Ilia Lazebnik <Ilia.lazebnik@gmail.com> --------- Signed-off-by: drfaust92 <ilia.lazebnik@gmail.com> Signed-off-by: Ilia Lazebnik <Ilia.lazebnik@gmail.com> Signed-off-by: Sacha <sacha.smart@gmail.com> [CI] Fix linter job (prometheus-community#3962) Signed-off-by: Jan-Otto Kröpke <mail@jkroepke.de> Co-authored-by: Ben Kochie <superq@gmail.com> Signed-off-by: Sacha <sacha.smart@gmail.com> [jiralert] Fix template error in ingress (prometheus-community#3936) Co-authored-by: MH <zanhsieh@gmail.com> Signed-off-by: Sacha <sacha.smart@gmail.com> [prometheus-adapter] allow customize clusterrole resources (prometheus-community#3944) Allow end user to change cluster role resources in external and custom metrics Signed-off-by: Mao-Hsiang Lien <6195019+titanlien@users.noreply.github.com> Signed-off-by: Sacha <sacha.smart@gmail.com> [prometheus-postgres-exporter] Upgrade postgres-exporter version (prometheus-community#3976) * [prometheus-postgres-exporter] Upgrade postgres-exporter version Signed-off-by: tukak <lukas.kutner@productboard.com> * [prometheus-postgres-exporter] Bump chart version Signed-off-by: tukak <lukas.kutner@productboard.com> --------- Signed-off-by: tukak <lukas.kutner@productboard.com> Signed-off-by: Sacha <sacha.smart@gmail.com> [prometheus-adapter] Fix security context capabilities (prometheus-community#3952) K8s Pod security standards capabilities should be all uppercase Signed-off-by: Krishna <gskrishna719@gmail.com> Signed-off-by: drfaust92 <ilia.lazebnik@gmail.com> Signed-off-by: Ilia Lazebnik <Ilia.lazebnik@gmail.com> Co-authored-by: Ilia Lazebnik <Ilia.lazebnik@gmail.com> Signed-off-by: Sacha <sacha.smart@gmail.com> [kube-state-metrics] Add http2 support on servicemonitor (prometheus-community#3955) Signed-off-by: nikhil bhat <nikhilbhat2008@gmail.com> Signed-off-by: Sacha <sacha.smart@gmail.com> [kube-state-metrics] Add templating support in ServiceMonitor labels/annotations (prometheus-community#3975) Signed-off-by: birca <birca@adobe.com> Signed-off-by: Sacha <sacha.smart@gmail.com> [prometheus-memcached-exporter] Fix: allow to configure extra labels and annotations for the Service (prometheus-community#3943) Signed-off-by: R.Sicart <roger.sicart@gmail.com> Signed-off-by: Sacha <sacha.smart@gmail.com> Bump to 0.69.1 (prometheus-community#3990) Signed-off-by: drfaust92 <ilia.lazebnik@gmail.com> Signed-off-by: Sacha <sacha.smart@gmail.com> [prometheus-operator-admission-webhook] Bump to 0.69.1 (prometheus-community#3989) Signed-off-by: drfaust92 <ilia.lazebnik@gmail.com> Signed-off-by: Sacha <sacha.smart@gmail.com> [prometheus-pushgateway] Bump to 1.6.2 (prometheus-community#3995) * Bump to 1.6.2 Signed-off-by: drfaust92 <ilia.lazebnik@gmail.com> * Bump to 1.6.2 Signed-off-by: drfaust92 <ilia.lazebnik@gmail.com> --------- Signed-off-by: drfaust92 <ilia.lazebnik@gmail.com> Signed-off-by: Sacha <sacha.smart@gmail.com> Bump helm/chart-releaser-action from 1.5.0 to 1.6.0 (prometheus-community#3967) Bumps [helm/chart-releaser-action](https://github.com/helm/chart-releaser-action) from 1.5.0 to 1.6.0. - [Release notes](https://github.com/helm/chart-releaser-action/releases) - [Commits](helm/chart-releaser-action@v1.5.0...v1.6.0) --- updated-dependencies: - dependency-name: helm/chart-releaser-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ben Kochie <superq@gmail.com> Signed-off-by: Sacha <sacha.smart@gmail.com> Bump to 2.10.1 (prometheus-community#3996) Signed-off-by: drfaust92 <ilia.lazebnik@gmail.com> Signed-off-by: Sacha <sacha.smart@gmail.com> [prometheus] Bump deps (prometheus-community#3997) Signed-off-by: drfaust92 <ilia.lazebnik@gmail.com> Signed-off-by: Sacha <sacha.smart@gmail.com> [prometheus] Support retention size, attach volume labels to PVC (prometheus-community#3985) * Remove unused helper template prometheus.daemonset.apiVersion Signed-off-by: zeritti <47476160+zeritti@users.noreply.github.com> * Attach labels to standalone PVC Signed-off-by: zeritti <47476160+zeritti@users.noreply.github.com> * Minor corrections in comments Signed-off-by: zeritti <47476160+zeritti@users.noreply.github.com> * Do not render resources unless set Signed-off-by: zeritti <47476160+zeritti@users.noreply.github.com> * Update values schema Signed-off-by: zeritti <47476160+zeritti@users.noreply.github.com> * Add support for data retention size Signed-off-by: zeritti <47476160+zeritti@users.noreply.github.com> * Bump chart version Signed-off-by: zeritti <47476160+zeritti@users.noreply.github.com> * Insert commonMetaLabels in values file Signed-off-by: zeritti <47476160+zeritti@users.noreply.github.com> * Add header to values file Signed-off-by: zeritti <47476160+zeritti@users.noreply.github.com> * Bump chart version Signed-off-by: zeritti <47476160+zeritti@users.noreply.github.com> --------- Signed-off-by: zeritti <47476160+zeritti@users.noreply.github.com> Co-authored-by: MH <zanhsieh@gmail.com> Signed-off-by: Sacha <sacha.smart@gmail.com> Bump to 0.69.1 (prometheus-community#3988) Signed-off-by: drfaust92 <ilia.lazebnik@gmail.com> Signed-off-by: Sacha <sacha.smart@gmail.com> [kube-prometheus-stack] Bump grafana and kube-state-metrics charts (prometheus-community#4000) * [kube-prometheus-stack] Bump grafana and kube-state-metrics charts Signed-off-by: Jan-Otto Kröpke <mail@jkroepke.de> * fix readme Signed-off-by: Jan-Otto Kröpke <mail@jkroepke.de> --------- Signed-off-by: Jan-Otto Kröpke <mail@jkroepke.de> Signed-off-by: Sacha <sacha.smart@gmail.com> [kube-prometheus-stack] Add missing RABC permission for Prometheus Operator (prometheus-community#4005) Signed-off-by: Jan-Otto Kröpke <joe@cloudeteer.de> Signed-off-by: Sacha <sacha.smart@gmail.com> Add priorityClassName, fix typePrefixes (prometheus-community#3932) Signed-off-by: Rimantas Ragainis <rimantas.ragainis@gmail.com> Co-authored-by: Rico Pahlisch <pahli88@googlemail.com> Signed-off-by: Sacha <sacha.smart@gmail.com> Bump to 1.7.0 (prometheus-community#4012) Signed-off-by: drfaust92 <ilia.lazebnik@gmail.com> Signed-off-by: Sacha <sacha.smart@gmail.com> [prometheus-blackbox-exporter] fix issue when set extra containers (prometheus-community#3850) * fix issue when set extra containers Signed-off-by: Allan Hung <hung.allan@gmail.com> * consistent indentation Signed-off-by: Allan Hung <hung.allan@gmail.com> --------- Signed-off-by: Allan Hung <hung.allan@gmail.com> Signed-off-by: allanhung <hung.allan@gmail.com> Co-authored-by: MH <zanhsieh@gmail.com> Signed-off-by: Sacha <sacha.smart@gmail.com> fix(prometheus-mysql-exporter): set serviceaccount lifecycle (prometheus-community#3949) Signed-off-by: Marcelo Clavel <marcelo.clavel@buda.com> Signed-off-by: Sacha <sacha.smart@gmail.com> [blackbox] Allow helm values in extraArgs (prometheus-community#3937) Signed-off-by: Jan-Otto Kröpke <mail@jkroepke.de> Signed-off-by: André Bauer <monotek@users.noreply.github.com> Co-authored-by: André Bauer <monotek@users.noreply.github.com> Signed-off-by: Sacha <sacha.smart@gmail.com> [prometheus-mysql-exporter] Support multiple target (prometheus-community#3751) * [prometheus-mysql-exporter]: multi-target probe support Signed-off-by: Remy Mollandin <remy.mollandin@skale-5.com> * [prometheus-mysql-exporter]: updating value comments for targets structure Signed-off-by: Remy Mollandin <remy.mollandin@skale-5.com> * [prometheus-mysql-exporter]: add default relabeling for multiple target Signed-off-by: Remy Mollandin <remy.mollandin@skale-5.com> * feat(prometheus-mysql-exporter): modify values structure and now support shared credentials pattern Signed-off-by: Remy Mollandin <remy.mollandin@skale-5.com> * [prometheus-mysql-exporter]: modify values comment Signed-off-by: Remy Mollandin <remy.mollandin@skale-5.com> * chore: bump chart version to 2.2.0 Signed-off-by: Remy Mollandin <remy.mollandin@skale-5.com> * docs: indent targets doc string Signed-off-by: Remy Mollandin <remy.mollandin@skale-5.com> * Update charts/prometheus-mysql-exporter/values.yaml Signed-off-by: André Bauer <monotek@users.noreply.github.com> * Update charts/prometheus-mysql-exporter/values.yaml Signed-off-by: André Bauer <monotek@users.noreply.github.com> --------- Signed-off-by: Remy Mollandin <remy.mollandin@skale-5.com> Signed-off-by: André Bauer <monotek@users.noreply.github.com> Co-authored-by: André Bauer <monotek@users.noreply.github.com> Signed-off-by: Sacha <sacha.smart@gmail.com> [kube-prometheus-stack] Generate windows dashboard from hack/sync (prometheus-community#4013) Signed-off-by: Jan-Otto Kröpke <mail@jkroepke.de> Co-authored-by: Gabriel Martinez <19713226+GMartinez-Sisti@users.noreply.github.com> Signed-off-by: Sacha <sacha.smart@gmail.com> [prometheus-blackbox-exporter] support podMonitoring CR for Google Ma… (prometheus-community#3959) * [prometheus-blackbox-exporter] support podMonitoring CR for Google Managed Prometheus Signed-off-by: Calvin Pham <calvin@inboxs.com> * [prometheus-blackbox-exporter] remove version bump in README Signed-off-by: Calvin Pham <calvin@inboxs.com> * [prometheus-blackbox-exporter] bump chart version Signed-off-by: Calvin Pham <calvin@inboxs.com> --------- Signed-off-by: Calvin Pham <calvin@inboxs.com> Co-authored-by: Calvin Pham <calvin@inboxs.com> Signed-off-by: Sacha <sacha.smart@gmail.com> [prometheus-blackbox-exporter] add action=replace to metricsRelabelings (prometheus-community#3857) This (default) parameter is automatically added by k8s, causing the in-cluster object to differ from the manifest created by this chart. This discrepancy causes GitOps tooling to consider the resource out of date, as described in prometheus-community#3626 Signed-off-by: Alex Miller <alex@thinkmassive.org> Signed-off-by: André Bauer <monotek@users.noreply.github.com> Co-authored-by: André Bauer <monotek@users.noreply.github.com> Signed-off-by: Sacha <sacha.smart@gmail.com> [prometheus-adapter] Bump prom adapter to 0.11.2 (prometheus-community#4021) * Bump prom adapter to 0.11.2 Signed-off-by: drfaust92 <ilia.lazebnik@gmail.com> * Bump prom adapter to 0.11.2 Signed-off-by: drfaust92 <ilia.lazebnik@gmail.com> --------- Signed-off-by: drfaust92 <ilia.lazebnik@gmail.com> Signed-off-by: Sacha <sacha.smart@gmail.com> [prometheus-adapter] Only set priorityClassName if non-empty (prometheus-community#4026) Argo CD rejects the deployment when the priorityClassName key is present without a value. Signed-off-by: Ian Gudger <ian.gudger@applovin.com> Signed-off-by: Sacha <sacha.smart@gmail.com> [jiralert] add envFrom config (prometheus-community#4014) Signed-off-by: Sacha <sacha.smart@gmail.com> [prometheus] automountServiceAccountToken to be configurable (prometheus-community#3998) Signed-off-by: Ian H. Lee <ianhlee2018@outlook.com> Signed-off-by: MH <zanhsieh@gmail.com> Co-authored-by: MH <zanhsieh@gmail.com> Signed-off-by: Sacha <sacha.smart@gmail.com> [prometheus-windows-exporter] add memory collector to windows-exporter values.yaml (prometheus-community#4028) Signed-off-by: Sacha <sacha.smart@gmail.com> Bump prom to 2.48.0 (prometheus-community#4018) Signed-off-by: drfaust92 <ilia.lazebnik@gmail.com> Signed-off-by: zeritti <47476160+zeritti@users.noreply.github.com> Co-authored-by: zeritti <47476160+zeritti@users.noreply.github.com> Signed-off-by: Sacha <sacha.smart@gmail.com> [kube-prometheus-stack] Configure additional aggregation labels + k8s.rules split (prometheus-community#3883) * [kube-prometheus-stack] Configure additional aggregation labels Signed-off-by: Jan-Otto Kröpke <joe@cloudeteer.de> * Re-run sync Signed-off-by: Jan-Otto Kröpke <mail@jkroepke.de> * Re-run sync Signed-off-by: Jan-Otto Kröpke <mail@jkroepke.de> * Add new values for rules Signed-off-by: Jan-Otto Kröpke <mail@jkroepke.de> * Add new values for rules Signed-off-by: Jan-Otto Kröpke <mail@jkroepke.de> * Add new values for rules Signed-off-by: Jan-Otto Kröpke <mail@jkroepke.de> * [kube-prometheus-stack] Fix names Signed-off-by: Jan-Otto Kröpke <joe@cloudeteer.de> * bump version Signed-off-by: Jan-Otto Kröpke <joe@cloudeteer.de> --------- Signed-off-by: Jan-Otto Kröpke <joe@cloudeteer.de> Signed-off-by: Jan-Otto Kröpke <github@jkroepke.de> Signed-off-by: Jan-Otto Kröpke <mail@jkroepke.de> Co-authored-by: Gabriel Martinez <19713226+GMartinez-Sisti@users.noreply.github.com> Signed-off-by: Sacha <sacha.smart@gmail.com> [kube-prometheus-stack] Bump prom to 2.48.0 + node exporter dep (prometheus-community#4017) * Bump prom to 2.48.0 Signed-off-by: drfaust92 <ilia.lazebnik@gmail.com> * Bump prom to 2.48.0 Signed-off-by: drfaust92 <ilia.lazebnik@gmail.com> * Bump prom to 2.48.0 Signed-off-by: drfaust92 <ilia.lazebnik@gmail.com> --------- Signed-off-by: drfaust92 <ilia.lazebnik@gmail.com> Co-authored-by: Gabriel Martinez <19713226+GMartinez-Sisti@users.noreply.github.com> Signed-off-by: Sacha <sacha.smart@gmail.com> Fixing configmaps Datasource when Prometheus Replicas and Exemplar Trace Id Destinations enabled (prometheus-community#4032) Signed-off-by: Wes Brown <wes.brown@favordelivery.com> Signed-off-by: Wes Brown <87991518+wesbrownfavor@users.noreply.github.com> Signed-off-by: Sacha <sacha.smart@gmail.com> [prometheus-ipmi-exporter] Bump ipmi to 1.7.0 (prometheus-community#4022) * Bump ipmi to 1.7.0 Signed-off-by: drfaust92 <ilia.lazebnik@gmail.com> * Bump ipmi to 1.7.0 Signed-off-by: drfaust92 <ilia.lazebnik@gmail.com> --------- Signed-off-by: drfaust92 <ilia.lazebnik@gmail.com> Co-authored-by: MH <zanhsieh@gmail.com> Signed-off-by: Sacha <sacha.smart@gmail.com> [prometheus-adapter] - Added pod security policy specific annotations (prometheus-community#4035) Signed-off-by: James Neate <jamesmneate@gmail.com> Signed-off-by: Sacha <sacha.smart@gmail.com> [prometheus-operator-crds] Bump crds to 0.70.0 (prometheus-community#4047) Signed-off-by: Sacha <sacha.smart@gmail.com> [prometheus-operator-admission-webhook] Bump to 0.70.0 (prometheus-community#4048) Signed-off-by: drfaust92 <ilia.lazebnik@gmail.com> Signed-off-by: Sacha <sacha.smart@gmail.com> [prometheus-operator-crds] Fix accidental space (prometheus-community#4049) Signed-off-by: Sacha <sacha.smart@gmail.com> [kube-prometheus-stack] Bump operator to 0.70.0 (prometheus-community#4046) Signed-off-by: Sacha <sacha.smart@gmail.com> [prometheus] bump reloader to 0.70.0 (prometheus-community#4064) * bump reloader to 0.70.0 Signed-off-by: drfaust92 <ilia.lazebnik@gmail.com> * Update charts/prometheus/Chart.yaml Co-authored-by: MH <zanhsieh@gmail.com> Signed-off-by: Ilia Lazebnik <Ilia.lazebnik@gmail.com> --------- Signed-off-by: drfaust92 <ilia.lazebnik@gmail.com> Signed-off-by: Ilia Lazebnik <Ilia.lazebnik@gmail.com> Co-authored-by: MH <zanhsieh@gmail.com> Signed-off-by: Sacha <sacha.smart@gmail.com> bump memcached to 0.14.1 (prometheus-community#4062) Signed-off-by: drfaust92 <ilia.lazebnik@gmail.com> Signed-off-by: Sacha <sacha.smart@gmail.com> [prometheus-statsd-exporter] Bump to 0.26.0 (prometheus-community#3993) * Bump to 0.25.0 Signed-off-by: drfaust92 <ilia.lazebnik@gmail.com> * Update Chart.yaml Signed-off-by: Ilia Lazebnik <Ilia.lazebnik@gmail.com> --------- Signed-off-by: drfaust92 <ilia.lazebnik@gmail.com> Signed-off-by: Ilia Lazebnik <Ilia.lazebnik@gmail.com> Signed-off-by: Sacha <sacha.smart@gmail.com> [CI] Introduce CI CODEOWNER (prometheus-community#4019) * [CI] Introduce CI CODEOWNER Signed-off-by: Jan-Otto Kröpke <mail@jkroepke.de> * [CI] Introduce CI CODEOWNER Signed-off-by: Jan-Otto Kröpke <mail@jkroepke.de> * [CI] Add @GMartinez-Sisti Signed-off-by: Gabriel Martinez <gabrielmartinez@sisti.pt> --------- Signed-off-by: Jan-Otto Kröpke <mail@jkroepke.de> Signed-off-by: Gabriel Martinez <gabrielmartinez@sisti.pt> Co-authored-by: Gabriel Martinez <gabrielmartinez@sisti.pt> Signed-off-by: Sacha <sacha.smart@gmail.com> [CI] Introduce interface for additional lint tasks (prometheus-community#3987) Signed-off-by: Jan-Otto Kröpke <mail@jkroepke.de> Co-authored-by: Quentin Bisson <quentin.bisson@gmail.com> Signed-off-by: Sacha <sacha.smart@gmail.com> [prometheus-opencost-exporter] new OpenCost Prometheus exporter chart (prometheus-community#3872) * Initial commits Signed-off-by: Matt Ray <github@mattray.dev> * Migrated over ServiceAccount from the opencost-helm-chart repo Signed-off-by: Matt Ray <github@mattray.dev> * Imported ClusterRole and ClusterRoleBinding Signed-off-by: Matt Ray <github@mattray.dev> * Add the Deployment from opencost-helm-chart Signed-off-by: Matt Ray <github@mattray.dev> * Add the Service from opencost-helm-chart, edited for exporter-only Signed-off-by: Matt Ray <github@mattray.dev> * Updated with recommendations from review and latest OpenCost release Signed-off-by: Matt Ray <github@mattray.dev> * Updated to sync with upstream https://github.com/opencost/opencost-helm-chart Once that's merged it'll be the upstream to here. Signed-off-by: Matt Ray <github@mattray.dev> * Updating the `home` field based on feedback and version bump Signed-off-by: Matt Ray <github@mattray.dev> * fix url Signed-off-by: André Bauer <monotek@users.noreply.github.com> --------- Signed-off-by: Matt Ray <github@mattray.dev> Signed-off-by: André Bauer <monotek@users.noreply.github.com> Co-authored-by: André Bauer <monotek@users.noreply.github.com> Signed-off-by: Sacha <sacha.smart@gmail.com> [prometheus-postgres-exporter] - introduced priorityClassName (prometheus-community#4069) * introduced priorityClassName Signed-off-by: Joachim Winkler <jwinkler@telekom.de> * add suggestions Signed-off-by: Joachim Winkler <jwinkler@telekom.de> * remove space Signed-off-by: Joachim Winkler <jwinkler@telekom.de> --------- Signed-off-by: Joachim Winkler <jwinkler@telekom.de> Signed-off-by: Sacha <sacha.smart@gmail.com> [kube-prometheus-stack] Add custom CI actions (prometheus-community#4065) * [kube-prometheus-stack] Add custom CI actions Signed-off-by: Jan-Otto Kröpke <mail@jkroepke.de> * Apply suggestions from code review Co-authored-by: Gabriel Martinez <19713226+GMartinez-Sisti@users.noreply.github.com> Signed-off-by: Jan-Otto Kröpke <github@jkroepke.de> --------- Signed-off-by: Jan-Otto Kröpke <mail@jkroepke.de> Signed-off-by: Jan-Otto Kröpke <github@jkroepke.de> Co-authored-by: Gabriel Martinez <19713226+GMartinez-Sisti@users.noreply.github.com> Signed-off-by: Sacha <sacha.smart@gmail.com> [kube-prometheus-stack] Allow run Prometheus Operator Webhook receiver separately (prometheus-community#4023) * [kube-prometheus-stack] Allow run Prometheus Operator Webhook receiver separately Signed-off-by: Jan-Otto Kröpke <joe@cloudeteer.de> * [kube-prometheus-stack] unify hostnames Signed-off-by: Jan-Otto Kröpke <joe@cloudeteer.de> * Add PDB Signed-off-by: Jan-Otto Kröpke <mail@jkroepke.de> * [kube-prometheus-stack] revert unify hostnames Signed-off-by: Jan-Otto Kröpke <joe@cloudeteer.de> * [kube-prometheus-stack] fix pdb Signed-off-by: Jan-Otto Kröpke <joe@cloudeteer.de> * [kube-prometheus-stack] add probes Signed-off-by: Jan-Otto Kröpke <joe@cloudeteer.de> * revert template calls Signed-off-by: Jan-Otto Kröpke <joe@cloudeteer.de> --------- Signed-off-by: Jan-Otto Kröpke <joe@cloudeteer.de> Signed-off-by: Jan-Otto Kröpke <github@jkroepke.de> Signed-off-by: Jan-Otto Kröpke <mail@jkroepke.de> Signed-off-by: Sacha <sacha.smart@gmail.com> [CI] Run shellcheck on custom lint file (prometheus-community#4072) Signed-off-by: Gabriel Martinez <gabrielmartinez@sisti.pt> Signed-off-by: Sacha <sacha.smart@gmail.com> Bump actions/setup-python from 4 to 5 (prometheus-community#4079) Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Sacha <sacha.smart@gmail.com> [kube-prometheus-stack] Shellcheck linter file (prometheus-community#4073) * [kube-prometheus-stack] Shellcheck linter file Signed-off-by: Gabriel Martinez <gabrielmartinez@sisti.pt> * bump chart Signed-off-by: Gabriel Martinez <gabrielmartinez@sisti.pt> --------- Signed-off-by: Gabriel Martinez <gabrielmartinez@sisti.pt> Signed-off-by: Sacha <sacha.smart@gmail.com> [kube-prometheus-stack] Allow to define editable property on dashboards (prometheus-community#4024) * [kube-prometheus-stack] Allow to define editable property on dashboards Signed-off-by: Jan-Otto Kröpke <joe@cloudeteer.de> * resolve MR conflict Signed-off-by: Jan-Otto Kröpke <joe@cloudeteer.de> * Update Chart.yaml Signed-off-by: Jan-Otto Kröpke <mail@jkroepke.de> --------- Signed-off-by: Jan-Otto Kröpke <joe@cloudeteer.de> Signed-off-by: Jan-Otto Kröpke <github@jkroepke.de> Signed-off-by: Jan-Otto Kröpke <mail@jkroepke.de> Signed-off-by: Sacha <sacha.smart@gmail.com> [kube-prometheus-stack] Allow configuration of sessionAffinityConfig (prometheus-community#4076) * [kube-prometheus-stack] Allow configuration of sessionAffinityConfig Signed-off-by: karloramone <karlo.krupljan@gmail.com> * [kube-prometheus-stack] Bump chart version to 55.2.0 Signed-off-by: karloramone <karlo.krupljan@gmail.com> * [kube-prometheus-stack] Bump chart version to 55.3.0 Signed-off-by: karloramone <karlo.krupljan@gmail.com> --------- Signed-off-by: karloramone <karlo.krupljan@gmail.com> Signed-off-by: Karlo <72765825+karloramone@users.noreply.github.com> Co-authored-by: Quentin Bisson <quentin.bisson@gmail.com> Signed-off-by: Sacha <sacha.smart@gmail.com> [kube-prometheus-stack] bump prometheus image tag to 2.48.1 (prometheus-community#4082) Signed-off-by: Lukas Monkevicius <lukas.monkevicius@unity3d.com> Signed-off-by: Sacha <sacha.smart@gmail.com> [prometheus-json-exporter] feat: allow namespace override (prometheus-community#4067) Signed-off-by: t3mi <t3mi@users.noreply.github.com> Co-authored-by: MH <zanhsieh@gmail.com> Signed-off-by: Sacha <sacha.smart@gmail.com> [prometheus] bump prom to 2.48.1 (prometheus-community#4083) Signed-off-by: drfaust92 <ilia.lazebnik@gmail.com> Signed-off-by: Sacha <sacha.smart@gmail.com> [kube-prometheus-stack] allow setting `GOGC` env configure (prometheus-community#4058) * add GOGC env setting Signed-off-by: dongjiang1989 <dongjiang1989@126.com> * fix lint checker Signed-off-by: dongjiang1989 <dongjiang1989@126.com> * fix value quote Signed-off-by: dongjiang1989 <dongjiang1989@126.com> * Update charts/kube-prometheus-stack/values.yaml Signed-off-by: dongjiang <dongjiang1989@126.com> * update chart version Signed-off-by: dongjiang1989 <dongjiang1989@126.com> * fix shellcheck lint Signed-off-by: dongjiang1989 <dongjiang1989@126.com> --------- Signed-off-by: dongjiang1989 <dongjiang1989@126.com> Signed-off-by: dongjiang <dongjiang1989@126.com> Signed-off-by: Sacha <sacha.smart@gmail.com> bump mongo to 0.40 (prometheus-community#4084) Signed-off-by: drfaust92 <ilia.lazebnik@gmail.com> Signed-off-by: Sacha <sacha.smart@gmail.com> [prometheus-fastly-exporter] Bump to 7.6.1 (prometheus-community#4002) * Bump to 7.6.1 Signed-off-by: drfaust92 <ilia.lazebnik@gmail.com> * fix chart app version Signed-off-by: drfaust92 <ilia.lazebnik@gmail.com> --------- Signed-off-by: drfaust92 <ilia.lazebnik@gmail.com> Signed-off-by: Sacha <sacha.smart@gmail.com> feat: bump prometheus-nats-exporter to 0.13.0 (prometheus-community#3956) Signed-off-by: Mikhail Naletov <okgolove@markeloff.net> Signed-off-by: Sacha <sacha.smart@gmail.com> Bump to 1.5.0 (prometheus-community#3994) Signed-off-by: drfaust92 <ilia.lazebnik@gmail.com> Signed-off-by: Sacha <sacha.smart@gmail.com> fix(kube-prometheus-stack): re-enable memory working set rule (prometheus-community#4044) This rule was accidentally left out while migrating to the new layout for rules in release 54 Signed-off-by: Jan Jungnickel <jan@jungnickel.com> Signed-off-by: Sacha <sacha.smart@gmail.com>

Signed-off-by: MH <zanhsieh@gmail.com> Signed-off-by: MH <zanhsieh@gmail.com>

Signed-off-by: André Bauer <monotek@users.noreply.github.com>

monotek

not sure if a comment in the readme (like in #3616) is preferable to adding other option automatically which are not reflected in the values?

stale · 2024-03-13T10:49:39Z

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Any further update will cause the issue/pull request to no longer be considered stale. Thank you for your contributions.

Signed-off-by: MH <zanhsieh@gmail.com>

stale · 2024-04-22T09:30:26Z

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Any further update will cause the issue/pull request to no longer be considered stale. Thank you for your contributions.

sachasmart requested review from desaintmartin, gianrubio, monotek and rsotnychenko as code owners October 20, 2023 13:16

sachasmart force-pushed the icmp-psp-update branch from 5d02d75 to f3f5c9b Compare October 20, 2023 13:23

sachasmart force-pushed the icmp-psp-update branch from 3187c96 to 8e16bff Compare December 14, 2023 21:57

ICMP PSP Update

44c6976

- Black Box ICMP Module needs additional PSP fields - Signed-off-by: Sacha Smart <sacha.smart@gmail.com> Signed-off-by: Sacha <sacha.smart@gmail.com>

sachasmart force-pushed the icmp-psp-update branch from 8e16bff to 1550a37 Compare December 14, 2023 21:58

sachasmart requested a review from a team as a code owner December 14, 2023 21:58

sachasmart force-pushed the icmp-psp-update branch from 1550a37 to 5edddcc Compare December 14, 2023 22:00

Merge branch 'main' into icmp-psp-update

32208cb

sachasmart closed this Dec 14, 2023

sachasmart reopened this Dec 14, 2023

zanhsieh and others added 3 commits December 19, 2023 11:06

Merge branch 'main' into icmp-psp-update

934f466

Update Chart.yaml

cf8a9fc

Signed-off-by: MH <zanhsieh@gmail.com> Signed-off-by: MH <zanhsieh@gmail.com>

Merge branch 'main' into icmp-psp-update

dd4bd0d

Signed-off-by: André Bauer <monotek@users.noreply.github.com>

monotek reviewed Jan 8, 2024

View reviewed changes

Merge branch 'main' into icmp-psp-update

49652aa

stale bot added the lifecycle/stale label Mar 13, 2024

Merge branch 'main' into icmp-psp-update

d231eed

Signed-off-by: MH <zanhsieh@gmail.com>

stale bot removed the lifecycle/stale label Mar 16, 2024

stale bot added the lifecycle/stale label Apr 22, 2024

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[prometheus-blackbox-exporter] ICMP Pod Security Policy Update #3925

[prometheus-blackbox-exporter] ICMP Pod Security Policy Update #3925

sachasmart commented Oct 20, 2023 •

edited

andrejshapal commented Dec 13, 2023

monotek left a comment

stale bot commented Mar 13, 2024

stale bot commented Apr 22, 2024

[prometheus-blackbox-exporter] ICMP Pod Security Policy Update #3925

Are you sure you want to change the base?

[prometheus-blackbox-exporter] ICMP Pod Security Policy Update #3925

Conversation

sachasmart commented Oct 20, 2023 • edited

What this PR does / why we need it

Which issue this PR fixes

Checklist

andrejshapal commented Dec 13, 2023

monotek left a comment

Choose a reason for hiding this comment

stale bot commented Mar 13, 2024

stale bot commented Apr 22, 2024

sachasmart commented Oct 20, 2023 •

edited