chore(deps): update helm release snapshot-controller to v2.0.3

[renovate]

This PR contains the following updates:

Package	Update	Change
snapshot-controller	patch	2.0.2 -> 2.0.3

---

Release Notes

piraeusdatastore/helm-charts (snapshot-controller)

v2.0.3

Compare Source

Deploys a Snapshot Controller in a cluster. Snapshot Controllers are often bundled with the Kubernetes distribution, this chart is meant for cases where it is not. Also deploys the Snapshot Validation Webhook and configures your cluster to validate every VolumeSnapshot and VolumeSnapshotContent resource by sending it to the webhook.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[github-actions]

--- . Kustomization: flux-system/flux-system HelmRelease: storage/snapshot-controller

+++ . Kustomization: flux-system/flux-system HelmRelease: storage/snapshot-controller

@@ -6,13 +6,13 @@

   namespace: storage
 spec:
   interval: 1h
   chart:
     spec:
       chart: snapshot-controller
-      version: 2.0.2
+      version: 2.0.3
       sourceRef:
         kind: HelmRepository
         name: piraeus-charts
         namespace: storage
   upgrade:
     crds: CreateReplace

[github-actions]

--- . HelmRelease: storage/snapshot-controller ValidatingWebhookConfiguration: storage/snapshot-validation-webhook

+++ . HelmRelease: storage/snapshot-controller ValidatingWebhookConfiguration: storage/snapshot-validation-webhook

@@ -25,13 +25,13 @@

     scope: '*'
   clientConfig:
     service:
       namespace: storage
       name: snapshot-validation-webhook
       path: /volumesnapshot
-    caBundle: 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
+    caBundle: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSURZVENDQWttZ0F3SUJBZ0lRUzQ0a3VacWRnRlZXQ1U2cnZsRFExVEFOQmdrcWhraUc5dzBCQVFzRkFEQXkKTVRBd0xnWURWUVFERXlkemJtRndjMmh2ZEMxMllXeHBaR0YwYVc5dUxYZGxZbWh2YjJzdWMzUnZjbUZuWlM1egpkbU13SGhjTk1qTXhNVEkzTVRJME5qSXpXaGNOTXpNeE1USTBNVEkwTmpJeldqQXlNVEF3TGdZRFZRUURFeWR6CmJtRndjMmh2ZEMxMllXeHBaR0YwYVc5dUxYZGxZbWh2YjJzdWMzUnZjbUZuWlM1emRtTXdnZ0VpTUEwR0NTcUcKU0liM0RRRUJBUVVBQTRJQkR3QXdnZ0VLQW9JQkFRREN3Y3cwczhaMkdqaHdEQ3NYUENuMjBOS1ZDWWVjVHlBawpuSzNtL0VXUkxneUlMY1NPNlU5TktQZWJIaGc4azlZNzBLRWM5Qngwem83YkNUb2FOTFBXMFZHLy9vYzQzQlFTClNhZmhic1IzZ2w1TWhuMlZleW5teFZERVRSRVZ3UFZZNHkwS2VUalVzazV3a1hJbHpDYzZpMDZqUU12QldoZ0oKdnZPbWhJRDZORHBaekhDbGdFc21EeDJ5T0R5Ymdxa1NFVXc4eXV0MDZ5Zlh1YUxCSHQxNGRRWEYvSGpiQ2JMZAppQTd3SGFBWUNVK1FrRk5zM1duWEllSGlpNmU0elBCUFpXajlYam9PTEtmMVoxaXFQSC9tRGZuTGI4VEJ6L0k2ClpOYnNROFVycHVYZmJndVZxYnE2V0ZYbndCMVUzUExiN3NiSmpobGFoZG1TZ3R1c051amhBZ01CQUFHamN6QngKTUE0R0ExVWREd0VCL3dRRUF3SUZvREFkQmdOVkhTVUVGakFVQmdnckJnRUZCUWNEQVFZSUt3WUJCUVVIQXdJdwpEQVlEVlIwVEFRSC9CQUl3QURBeUJnTlZIUkVFS3pBcGdpZHpibUZ3YzJodmRDMTJZV3hwWkdGMGFXOXVMWGRsClltaHZiMnN1YzNSdmNtRm5aUzV6ZG1Nd0RRWUpLb1pJaHZjTkFRRUxCUUFEZ2dFQkFJTEVCLzY2TUt1clhKc2MKaUQwT3p0bE9ldnVybFVFdy92SzQxOG1qb1V0SndtSGJhR1NxalZteVBKWjFRRVNMVGtHT1lpZ0gxRmJXZ0Mvcgo1SVJRS1gwaHhndnN0bkxWL1hNYlFNT3lyVEIyeWpBS1hLV1N5QU5HVjAzRUVtTU0yRURCeWl0Ym9YNFp2Wk9NCnJ0M0xWUGV5UEN6aFRVa2I4Uy8xc2sybm1LeDBOVW9qdlcvZTNpckNMTWlrQnBvN3NiVXh1allIVC9WS3JZYW8KK0VMd2hWWVhFbnc1eTNnK3VhTEVXdWlmMGJMVUx5cXZSeElQNEowV04wVlhUaHFvOENpQ2NDOGwwOTh3d2c1VgpLVXRkbldxY3V1a0Zpb3czM1B5ZXFxM3ZkWWJOcDczTGxGbEtVZEZ3QWVLV213NmVvY1FFTEd5Z2djcHNCV3RPCnVlc2xmSjA9Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K
   admissionReviewVersions:
   - v1
   - v1beta1
   sideEffects: None
   failurePolicy: Fail
   timeoutSeconds: 2
@@ -51,13 +51,13 @@

     scope: '*'
   clientConfig:
     service:
       namespace: storage
       name: snapshot-validation-webhook
       path: /volumegroupsnapshot
-    caBundle: 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
+    caBundle: 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
   admissionReviewVersions:
   - v1
   - v1beta1
   sideEffects: None
   failurePolicy: Fail
   timeoutSeconds: 2
--- . HelmRelease: storage/snapshot-controller Deployment: storage/snapshot-controller

+++ . HelmRelease: storage/snapshot-controller Deployment: storage/snapshot-controller

@@ -28,13 +28,13 @@

           capabilities:
             drop:
             - ALL
           readOnlyRootFilesystem: true
           runAsNonRoot: true
           runAsUser: 1000
-        image: registry.k8s.io/sig-storage/snapshot-controller:v6.3.1
+        image: registry.k8s.io/sig-storage/snapshot-controller:v6.3.2
         imagePullPolicy: IfNotPresent
         args:
         - --http-endpoint=:8080
         - --leader-election=true
         - --leader-election-namespace=$(NAMESPACE)
         ports:
@@ -44,7 +44,9 @@

         env:
         - name: NAMESPACE
           valueFrom:
             fieldRef:
               fieldPath: metadata.namespace
         resources: {}
+      hostNetwork: false
+      dnsPolicy: ClusterFirst
 
--- . HelmRelease: storage/snapshot-controller Deployment: storage/snapshot-validation-webhook

+++ . HelmRelease: storage/snapshot-controller Deployment: storage/snapshot-validation-webhook

@@ -28,13 +28,13 @@

           capabilities:
             drop:
             - ALL
           readOnlyRootFilesystem: true
           runAsNonRoot: true
           runAsUser: 1000
-        image: registry.k8s.io/sig-storage/snapshot-validation-webhook:v6.3.1
+        image: registry.k8s.io/sig-storage/snapshot-validation-webhook:v6.3.2
         imagePullPolicy: IfNotPresent
         args:
         - --port=8443
         - --tls-cert-file=/etc/snapshot-validation/tls.crt
         - --tls-private-key-file=/etc/snapshot-validation/tls.key
         ports:
@@ -56,7 +56,9 @@

             scheme: HTTPS
         resources: {}
       volumes:
       - name: tls-config
         secret:
           secretName: snapshot-validation-webhook-tls
+      hostNetwork: false
+      dnsPolicy: ClusterFirst