chore(deps): update helm release snapshot-controller to v2

[renovate]

This PR contains the following updates:

Package	Update	Change
snapshot-controller	major	1.9.2 -> 2.0.2

---

Release Notes

piraeusdatastore/helm-charts (snapshot-controller)

v2.0.2

Compare Source

Deploys a Snapshot Controller in a cluster. Snapshot Controllers are often bundled with the Kubernetes distribution, this chart is meant for cases where it is not. Also deploys the Snapshot Validation Webhook and configures your cluster to validate every VolumeSnapshot and VolumeSnapshotContent resource by sending it to the webhook.

v2.0.1

Compare Source

Deploys a Snapshot Controller in a cluster. Snapshot Controllers are often bundled with the Kubernetes distribution, this chart is meant for cases where it is not. Also deploys the Snapshot Validation Webhook and configures your cluster to validate every VolumeSnapshot and VolumeSnapshotContent resource by sending it to the webhook.

v2.0.0

Compare Source

Deploys a Snapshot Controller in a cluster. Snapshot Controllers are often bundled with the Kubernetes distribution, this chart is meant for cases where it is not. Also deploys the Snapshot Validation Webhook and configures your cluster to validate every VolumeSnapshot and VolumeSnapshotContent resource by sending it to the webhook.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[github-actions]

--- . Kustomization: flux-system/flux-system HelmRelease: storage/snapshot-controller

+++ . Kustomization: flux-system/flux-system HelmRelease: storage/snapshot-controller

@@ -6,13 +6,13 @@

   namespace: storage
 spec:
   interval: 1h
   chart:
     spec:
       chart: snapshot-controller
-      version: 1.9.2
+      version: 2.0.2
       sourceRef:
         kind: HelmRepository
         name: piraeus-charts
         namespace: storage
   upgrade:
     crds: CreateReplace

[github-actions]

--- . HelmRelease: storage/snapshot-controller ClusterRole: storage/snapshot-validation-webhook

+++ . HelmRelease: storage/snapshot-controller ClusterRole: storage/snapshot-validation-webhook

@@ -0,0 +1,16 @@

+---
+kind: ClusterRole
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: snapshot-validation-webhook
+rules:
+- apiGroups:
+  - snapshot.storage.k8s.io
+  - groupsnapshot.storage.k8s.io
+  resources:
+  - volumesnapshotclasses
+  - volumegroupsnapshotclasses
+  verbs:
+  - list
+  - watch
+
--- . HelmRelease: storage/snapshot-controller ClusterRoleBinding: storage/snapshot-validation-webhook

+++ . HelmRelease: storage/snapshot-controller ClusterRoleBinding: storage/snapshot-validation-webhook

@@ -0,0 +1,14 @@

+---
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: snapshot-validation-webhook
+subjects:
+- kind: ServiceAccount
+  name: snapshot-validation-webhook
+  namespace: storage
+roleRef:
+  kind: ClusterRole
+  name: snapshot-validation-webhook
+  apiGroup: rbac.authorization.k8s.io
+
--- . HelmRelease: storage/snapshot-controller ServiceAccount: storage/snapshot-validation-webhook

+++ . HelmRelease: storage/snapshot-controller ServiceAccount: storage/snapshot-validation-webhook

@@ -0,0 +1,10 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: snapshot-validation-webhook
+  labels:
+    app.kubernetes.io/name: snapshot-validation-webhook
+    app.kubernetes.io/instance: snapshot-controller
+    app.kubernetes.io/managed-by: Helm
+
--- . HelmRelease: storage/snapshot-controller Deployment: storage/snapshot-controller

+++ . HelmRelease: storage/snapshot-controller Deployment: storage/snapshot-controller

@@ -6,12 +6,13 @@

   labels:
     app.kubernetes.io/name: snapshot-controller
     app.kubernetes.io/instance: snapshot-controller
     app.kubernetes.io/managed-by: Helm
 spec:
   replicas: 1
+  revisionHistoryLimit: 10
   selector:
     matchLabels:
       app.kubernetes.io/name: snapshot-controller
       app.kubernetes.io/instance: snapshot-controller
   template:
     metadata:
--- . HelmRelease: storage/snapshot-controller Deployment: storage/snapshot-validation-webhook

+++ . HelmRelease: storage/snapshot-controller Deployment: storage/snapshot-validation-webhook

@@ -0,0 +1,62 @@

+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: snapshot-validation-webhook
+  labels:
+    app.kubernetes.io/name: snapshot-validation-webhook
+    app.kubernetes.io/instance: snapshot-controller
+    app.kubernetes.io/managed-by: Helm
+spec:
+  replicas: 1
+  revisionHistoryLimit: 10
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: snapshot-validation-webhook
+      app.kubernetes.io/instance: snapshot-controller
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/name: snapshot-validation-webhook
+        app.kubernetes.io/instance: snapshot-controller
+    spec:
+      serviceAccountName: snapshot-validation-webhook
+      securityContext: {}
+      containers:
+      - name: snapshot-validation-webhook
+        securityContext:
+          capabilities:
+            drop:
+            - ALL
+          readOnlyRootFilesystem: true
+          runAsNonRoot: true
+          runAsUser: 1000
+        image: registry.k8s.io/sig-storage/snapshot-validation-webhook:v6.3.1
+        imagePullPolicy: IfNotPresent
+        args:
+        - --port=8443
+        - --tls-cert-file=/etc/snapshot-validation/tls.crt
+        - --tls-private-key-file=/etc/snapshot-validation/tls.key
+        ports:
+        - name: https
+          containerPort: 8443
+          protocol: TCP
+        volumeMounts:
+        - mountPath: /etc/snapshot-validation
+          name: tls-config
+        livenessProbe:
+          httpGet:
+            path: /readyz
+            port: https
+            scheme: HTTPS
+        readinessProbe:
+          httpGet:
+            path: /readyz
+            port: https
+            scheme: HTTPS
+        resources: {}
+      volumes:
+      - name: tls-config
+        secret:
+          secretName: snapshot-validation-webhook-tls
+
--- . HelmRelease: storage/snapshot-controller Service: storage/snapshot-validation-webhook

+++ . HelmRelease: storage/snapshot-controller Service: storage/snapshot-validation-webhook

@@ -0,0 +1,20 @@

+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: snapshot-validation-webhook
+  labels:
+    app.kubernetes.io/name: snapshot-validation-webhook
+    app.kubernetes.io/instance: snapshot-controller
+    app.kubernetes.io/managed-by: Helm
+spec:
+  type: ClusterIP
+  ports:
+  - port: 443
+    targetPort: https
+    protocol: TCP
+    name: https
+  selector:
+    app.kubernetes.io/name: snapshot-validation-webhook
+    app.kubernetes.io/instance: snapshot-controller
+
--- . HelmRelease: storage/snapshot-controller ValidatingWebhookConfiguration: storage/snapshot-validation-webhook

+++ . HelmRelease: storage/snapshot-controller ValidatingWebhookConfiguration: storage/snapshot-validation-webhook

@@ -0,0 +1,64 @@

+---
+apiVersion: admissionregistration.k8s.io/v1
+kind: ValidatingWebhookConfiguration
+metadata:
+  name: snapshot-validation-webhook
+  labels:
+    app.kubernetes.io/name: snapshot-validation-webhook
+    app.kubernetes.io/instance: snapshot-controller
+    app.kubernetes.io/managed-by: Helm
+webhooks:
+- name: snapshot-validation-webhook.snapshot.storage.k8s.io
+  rules:
+  - apiGroups:
+    - snapshot.storage.k8s.io
+    apiVersions:
+    - v1
+    - v1beta1
+    operations:
+    - CREATE
+    - UPDATE
+    resources:
+    - volumesnapshots
+    - volumesnapshotclasses
+    - volumesnapshotcontents
+    scope: '*'
+  clientConfig:
+    service:
+      namespace: storage
+      name: snapshot-validation-webhook
+      path: /volumesnapshot
+    caBundle: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSURZVENDQWttZ0F3SUJBZ0lRWENVWEhyNjYvZ3NBYVZKNGZqVlpNakFOQmdrcWhraUc5dzBCQVFzRkFEQXkKTVRBd0xnWURWUVFERXlkemJtRndjMmh2ZEMxMllXeHBaR0YwYVc5dUxYZGxZbWh2YjJzdWMzUnZjbUZuWlM1egpkbU13SGhjTk1qTXhNVEUzTVRJMU9UVXhXaGNOTXpNeE1URTBNVEkxT1RVeFdqQXlNVEF3TGdZRFZRUURFeWR6CmJtRndjMmh2ZEMxMllXeHBaR0YwYVc5dUxYZGxZbWh2YjJzdWMzUnZjbUZuWlM1emRtTXdnZ0VpTUEwR0NTcUcKU0liM0RRRUJBUVVBQTRJQkR3QXdnZ0VLQW9JQkFRQ3hKOGlJTFVLRDJycUdPNE5qR1Q5eGZKd0hnZjZkeE94YQp1ZlExOWl5UzVqNWRrY1V6My92bUFyWVlJU2YrNjVKc0E0QlFneE41d0xLWGhrV1lsdlZUb0wwLzh6cWJVam41CkE5b1F2TWQxbGtNQWRBQUhBZDkzMnR3UnFBQXVmMnZva2pMc3Nhb2RsSWdjV2s4R3dZTUdoWDlycnl4RlJEd2IKaFV0N0txRGdKdmhuVk1kNVFsVFpaRTYrNHM4RFZhWjhyZ0JZTm1IZEhiK2hIcUsxL2IzUEQvTkZwZy9aeUVUbAp4SjM1Z2VndjlQMEpnYVhGdml2OWZkdmFJN2tmM1ozQTBZYUxvSzR4YjBrc2ZJYkF0U3c0RGxZWkx3WTk3eFhICloyQlpMazlTSkFvNThSSWd1bDRBNGUyY0xNSlM2ZmtMV0M4a0JwVUUwenRLbUtkQ2QxZWxBZ01CQUFHamN6QngKTUE0R0ExVWREd0VCL3dRRUF3SUZvREFkQmdOVkhTVUVGakFVQmdnckJnRUZCUWNEQVFZSUt3WUJCUVVIQXdJdwpEQVlEVlIwVEFRSC9CQUl3QURBeUJnTlZIUkVFS3pBcGdpZHpibUZ3YzJodmRDMTJZV3hwWkdGMGFXOXVMWGRsClltaHZiMnN1YzNSdmNtRm5aUzV6ZG1Nd0RRWUpLb1pJaHZjTkFRRUxCUUFEZ2dFQkFCc0JTTkNaY091VHpYUWkKdHdrMnRGQTJwTFdJd3FwMFNSQ3N4c2EzUWJuNUhJYzVIMkliUlR0VGFDMURGVmxMTWxOWHlEeHI4SkxQV2hkNgo0RmMxSDI2azQ2b3lnU3JJS3MyMFlKdXhQMFNUZ1FWbXpPa0tnWk82OVFob2RPL0Nvcmt5RzhQeVJBRmVJdGU2CmdtNlI1KzNtb1dLWGk1cE8xZ0FPK25aUjB1bmU5amt5emNUcEQ5YW9WbWdHaXZQSWNlQm4xWGc4dkpUbEZ5bkwKMW5nSmtJVC9aQS9QRW1MUGE3bkVJTFR6NWI3OWMzb0toNy84dHNKRWZpWTIyTHBuU25aejR6TlJWb2FsaWxhZwpESHZyWHFIMVUxUjBDYTA2dkNQMFBta01OUGw2NW5jWklOVGp4eEJ4ZXd2ZlhCRGRSc2pxNW41aHpyTm8wQUhRClNSSlpYamc9Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K
+  admissionReviewVersions:
+  - v1
+  - v1beta1
+  sideEffects: None
+  failurePolicy: Fail
+  timeoutSeconds: 2
+- name: snapshot-validation-webhook.groupsnapshot.storage.k8s.io
+  rules:
+  - apiGroups:
+    - groupsnapshot.storage.k8s.io
+    apiVersions:
+    - v1alpha1
+    operations:
+    - CREATE
+    - UPDATE
+    resources:
+    - volumegroupsnapshots
+    - volumegroupsnapshotcontents
+    - volumegroupsnapshotclasses
+    scope: '*'
+  clientConfig:
+    service:
+      namespace: storage
+      name: snapshot-validation-webhook
+      path: /volumegroupsnapshot
+    caBundle: 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
+  admissionReviewVersions:
+  - v1
+  - v1beta1
+  sideEffects: None
+  failurePolicy: Fail
+  timeoutSeconds: 2
+