feat(container): update image redis to v18.19.4 #129
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
--- HelmRelease: database/redis ConfigMap: database/redis-scripts
+++ HelmRelease: database/redis ConfigMap: database/redis-scripts
@@ -299,13 +299,13 @@
full_hostname="${hostname}.${HEADLESS_SERVICE}"
echo "${full_hostname}"
}
run_sentinel_command() {
if is_boolean_yes "$REDIS_SENTINEL_TLS_ENABLED"; then
- redis-cli -h "$REDIS_SERVICE" -p "$REDIS_SENTINEL_PORT" --tls --cert "$REDIS_SENTINEL_TLS_CERT_FILE" --key "$REDIS_SENTINEL_TLS_KEY_FILE" --cacert "$REDIS_SENTINEL_TLS_CA_FILE" sentinel "$@"
+ redis-cli -h "$REDIS_SERVICE" -p "$REDIS_SENTINEL_TLS_PORT_NUMBER" --tls --cert "$REDIS_SENTINEL_TLS_CERT_FILE" --key "$REDIS_SENTINEL_TLS_KEY_FILE" --cacert "$REDIS_SENTINEL_TLS_CA_FILE" sentinel "$@"
else
redis-cli -h "$REDIS_SERVICE" -p "$REDIS_SENTINEL_PORT" sentinel "$@"
fi
}
sentinel_failover_finished() {
REDIS_SENTINEL_INFO=($(run_sentinel_command get-master-addr-by-name "redis-master"))
@@ -354,13 +354,13 @@
full_hostname="${hostname}.${HEADLESS_SERVICE}"
echo "${full_hostname}"
}
run_sentinel_command() {
if is_boolean_yes "$REDIS_SENTINEL_TLS_ENABLED"; then
- env -u REDISCLI_AUTH redis-cli -h "$REDIS_SERVICE" -p "$REDIS_SENTINEL_PORT" --tls --cert "$REDIS_SENTINEL_TLS_CERT_FILE" --key "$REDIS_SENTINEL_TLS_KEY_FILE" --cacert "$REDIS_SENTINEL_TLS_CA_FILE" sentinel "$@"
+ env -u REDISCLI_AUTH redis-cli -h "$REDIS_SERVICE" -p "$REDIS_SENTINEL_TLS_PORT_NUMBER" --tls --cert "$REDIS_SENTINEL_TLS_CERT_FILE" --key "$REDIS_SENTINEL_TLS_KEY_FILE" --cacert "$REDIS_SENTINEL_TLS_CA_FILE" sentinel "$@"
else
env -u REDISCLI_AUTH redis-cli -h "$REDIS_SERVICE" -p "$REDIS_SENTINEL_PORT" sentinel "$@"
fi
}
sentinel_failover_finished() {
REDIS_SENTINEL_INFO=($(run_sentinel_command get-master-addr-by-name "redis-master"))
--- HelmRelease: database/redis StatefulSet: database/redis-node
+++ HelmRelease: database/redis StatefulSet: database/redis-node
@@ -26,13 +26,13 @@
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: redis
app.kubernetes.io/component: node
annotations:
checksum/configmap: 44827545caa1794c0c6696c4406beb71e64dd804ef278fe070efe561c4bc71b7
checksum/health: 07a9e9f1ff08347b0d2cd65e962feb94d6390f5b64a77ed1346867af2559df4a
- checksum/scripts: 04c034490f9758104676b11f6819c4f159bb0e4956d61091bf6dd68a76b327aa
+ checksum/scripts: a93789f2bd8271272636f0f49605b7e14ae3372e1d044028876b20cbc35d08ac
checksum/secret: 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
prometheus.io/port: '9121'
prometheus.io/scrape: 'true'
spec:
automountServiceAccountToken: false
securityContext:
@@ -55,13 +55,13 @@
weight: 1
nodeAffinity: null
enableServiceLinks: true
terminationGracePeriodSeconds: 30
containers:
- name: redis
- image: docker.io/bitnami/redis:7.2.4-debian-11-r2
+ image: docker.io/bitnami/redis:7.2.4-debian-12-r9
imagePullPolicy: IfNotPresent
lifecycle:
preStop:
exec:
command:
- /bin/bash
@@ -69,12 +69,13 @@
- /opt/bitnami/scripts/start-scripts/prestop-redis.sh
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
+ readOnlyRootFilesystem: false
runAsGroup: 0
runAsNonRoot: true
runAsUser: 1001
seLinuxOptions: null
seccompProfile:
type: RuntimeDefault
@@ -133,30 +134,29 @@
failureThreshold: 5
exec:
command:
- sh
- -c
- /health/ping_readiness_local.sh 1
- resources:
- limits: {}
- requests: {}
volumeMounts:
- name: start-scripts
mountPath: /opt/bitnami/scripts/start-scripts
- name: health
mountPath: /health
- name: redis-data
mountPath: /data
- name: config
mountPath: /opt/bitnami/redis/mounted-etc
- - name: redis-tmp-conf
+ - name: empty-dir
mountPath: /opt/bitnami/redis/etc
- - name: tmp
+ subPath: app-conf-dir
+ - name: empty-dir
mountPath: /tmp
+ subPath: tmp-dir
- name: sentinel
- image: docker.io/bitnami/redis-sentinel:7.2.4-debian-11-r3
+ image: docker.io/bitnami/redis-sentinel:7.2.4-debian-12-r7
imagePullPolicy: IfNotPresent
lifecycle:
preStop:
exec:
command:
- /bin/bash
@@ -164,12 +164,13 @@
- /opt/bitnami/scripts/start-scripts/prestop-sentinel.sh
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
+ readOnlyRootFilesystem: false
runAsGroup: 0
runAsNonRoot: true
runAsUser: 1001
seLinuxOptions: null
seccompProfile:
type: RuntimeDefault
@@ -220,34 +221,35 @@
failureThreshold: 6
exec:
command:
- sh
- -c
- /health/ping_sentinel.sh 1
- resources:
- limits: {}
- requests: {}
volumeMounts:
+ - name: empty-dir
+ mountPath: /tmp
+ subPath: tmp-dir
- name: start-scripts
mountPath: /opt/bitnami/scripts/start-scripts
- name: health
mountPath: /health
- name: sentinel-data
mountPath: /opt/bitnami/redis-sentinel/etc
- name: redis-data
mountPath: /data
- name: config
mountPath: /opt/bitnami/redis-sentinel/mounted-etc
- name: metrics
- image: docker.io/bitnami/redis-exporter:1.56.0-debian-11-r1
+ image: docker.io/bitnami/redis-exporter:1.58.0-debian-12-r4
imagePullPolicy: IfNotPresent
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
+ readOnlyRootFilesystem: false
runAsGroup: 0
runAsNonRoot: true
runAsUser: 1001
seLinuxOptions: null
seccompProfile:
type: RuntimeDefault
@@ -259,12 +261,14 @@
export REDIS_PASSWORD=$(cat /secrets/redis-password)
fi
redis_exporter
env:
- name: REDIS_ALIAS
value: redis
+ - name: REDIS_EXPORTER_WEB_LISTEN_ADDRESS
+ value: :9121
ports:
- name: metrics
containerPort: 9121
livenessProbe:
failureThreshold: 5
initialDelaySeconds: 10
@@ -279,16 +283,16 @@
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 1
httpGet:
path: /
port: metrics
- resources:
- limits: {}
- requests: {}
- volumeMounts: null
+ volumeMounts:
+ - name: empty-dir
+ mountPath: /tmp
+ subPath: tmp-dir
volumes:
- name: start-scripts
configMap:
name: redis-scripts
defaultMode: 493
- name: health
@@ -297,13 +301,11 @@
defaultMode: 493
- name: config
configMap:
name: redis-configuration
- name: sentinel-data
emptyDir: {}
- - name: redis-tmp-conf
- emptyDir: {}
- - name: tmp
+ - name: empty-dir
emptyDir: {}
- name: redis-data
emptyDir: {}
--- HelmRelease: database/redis NetworkPolicy: database/redis
+++ HelmRelease: database/redis NetworkPolicy: database/redis
@@ -0,0 +1,27 @@
+---
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: redis
+ namespace: database
+ labels:
+ app.kubernetes.io/instance: redis
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: redis
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: redis
+ app.kubernetes.io/name: redis
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 6379
+ - port: 26379
+ - ports:
+ - port: 9121
+
--- HelmRelease: database/staging-redis ServiceAccount: database/staging-redis-master
+++ HelmRelease: database/staging-redis ServiceAccount: database/staging-redis-master
@@ -1,10 +1,10 @@
---
apiVersion: v1
kind: ServiceAccount
-automountServiceAccountToken: true
+automountServiceAccountToken: false
metadata:
name: staging-redis-master
namespace: database
labels:
app.kubernetes.io/instance: staging-redis
app.kubernetes.io/managed-by: Helm
--- HelmRelease: database/staging-redis StatefulSet: database/staging-redis-master
+++ HelmRelease: database/staging-redis StatefulSet: database/staging-redis-master
@@ -31,14 +31,17 @@
checksum/health: aff24913d801436ea469d8d374b2ddb3ec4c43ee7ab24663d5f8ff1a1b6991a9
checksum/scripts: 43cdf68c28f3abe25ce017a82f74dbf2437d1900fd69df51a55a3edf6193d141
checksum/secret: 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
spec:
securityContext:
fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
serviceAccountName: staging-redis-master
- automountServiceAccountToken: true
+ automountServiceAccountToken: false
affinity:
podAffinity: null
podAntiAffinity:
preferredDuringSchedulingIgnoredDuringExecution:
- podAffinityTerm:
labelSelector:
@@ -50,22 +53,24 @@
weight: 1
nodeAffinity: null
enableServiceLinks: true
terminationGracePeriodSeconds: 30
containers:
- name: redis
- image: docker.io/bitnami/redis:7.2.2-debian-11-r0
+ image: docker.io/bitnami/redis:7.2.4-debian-12-r9
imagePullPolicy: IfNotPresent
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
+ readOnlyRootFilesystem: false
runAsGroup: 0
runAsNonRoot: true
runAsUser: 1001
+ seLinuxOptions: null
seccompProfile:
type: RuntimeDefault
command:
- /bin/bash
args:
- -c
@@ -103,41 +108,38 @@
failureThreshold: 5
exec:
command:
- sh
- -c
- /health/ping_readiness_local.sh 1
- resources:
- limits: {}
- requests: {}
volumeMounts:
- name: start-scripts
mountPath: /opt/bitnami/scripts/start-scripts
- name: health
mountPath: /health
- name: redis-data
mountPath: /data
- name: config
mountPath: /opt/bitnami/redis/mounted-etc
- - name: redis-tmp-conf
+ - name: empty-dir
mountPath: /opt/bitnami/redis/etc/
- - name: tmp
+ subPath: app-conf-dir
+ - name: empty-dir
mountPath: /tmp
+ subPath: tmp-dir
volumes:
- name: start-scripts
configMap:
name: staging-redis-scripts
defaultMode: 493
- name: health
configMap:
name: staging-redis-health
defaultMode: 493
- name: config
configMap:
name: staging-redis-configuration
- - name: redis-tmp-conf
- emptyDir: {}
- - name: tmp
+ - name: empty-dir
emptyDir: {}
- name: redis-data
emptyDir: {}
--- HelmRelease: database/staging-redis NetworkPolicy: database/staging-redis
+++ HelmRelease: database/staging-redis NetworkPolicy: database/staging-redis
@@ -0,0 +1,24 @@
+---
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: staging-redis
+ namespace: database
+ labels:
+ app.kubernetes.io/instance: staging-redis
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: redis
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: staging-redis
+ app.kubernetes.io/name: redis
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 6379
+
--- HelmRelease: comabase/comabase-redis ServiceAccount: comabase/comabase-redis-master
+++ HelmRelease: comabase/comabase-redis ServiceAccount: comabase/comabase-redis-master
@@ -1,10 +1,10 @@
---
apiVersion: v1
kind: ServiceAccount
-automountServiceAccountToken: true
+automountServiceAccountToken: false
metadata:
name: comabase-redis-master
namespace: comabase
labels:
app.kubernetes.io/instance: comabase-redis
app.kubernetes.io/managed-by: Helm
--- HelmRelease: comabase/comabase-redis StatefulSet: comabase/comabase-redis-master
+++ HelmRelease: comabase/comabase-redis StatefulSet: comabase/comabase-redis-master
@@ -31,14 +31,17 @@
checksum/health: aff24913d801436ea469d8d374b2ddb3ec4c43ee7ab24663d5f8ff1a1b6991a9
checksum/scripts: 560c33ff34d845009b51830c332aa05fa211444d1877d3526d3599be7543aaa5
checksum/secret: 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
spec:
securityContext:
fsGroup: 1001
+ fsGroupChangePolicy: Always
+ supplementalGroups: []
+ sysctls: []
serviceAccountName: comabase-redis-master
- automountServiceAccountToken: true
+ automountServiceAccountToken: false
affinity:
podAffinity: null
podAntiAffinity:
preferredDuringSchedulingIgnoredDuringExecution:
- podAffinityTerm:
labelSelector:
@@ -50,22 +53,24 @@
weight: 1
nodeAffinity: null
enableServiceLinks: true
terminationGracePeriodSeconds: 30
containers:
- name: redis
- image: docker.io/bitnami/redis:7.2.2-debian-11-r0
+ image: docker.io/bitnami/redis:7.2.4-debian-12-r9
imagePullPolicy: IfNotPresent
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
+ readOnlyRootFilesystem: false
runAsGroup: 0
runAsNonRoot: true
runAsUser: 1001
+ seLinuxOptions: null
seccompProfile:
type: RuntimeDefault
command:
- /bin/bash
args:
- -c
@@ -108,41 +113,38 @@
failureThreshold: 5
exec:
command:
- sh
- -c
- /health/ping_readiness_local.sh 1
- resources:
- limits: {}
- requests: {}
volumeMounts:
- name: start-scripts
mountPath: /opt/bitnami/scripts/start-scripts
- name: health
mountPath: /health
- name: redis-data
mountPath: /data
- name: config
mountPath: /opt/bitnami/redis/mounted-etc
- - name: redis-tmp-conf
+ - name: empty-dir
mountPath: /opt/bitnami/redis/etc/
- - name: tmp
+ subPath: app-conf-dir
+ - name: empty-dir
mountPath: /tmp
+ subPath: tmp-dir
volumes:
- name: start-scripts
configMap:
name: comabase-redis-scripts
defaultMode: 493
- name: health
configMap:
name: comabase-redis-health
defaultMode: 493
- name: config
configMap:
name: comabase-redis-configuration
- - name: redis-tmp-conf
- emptyDir: {}
- - name: tmp
+ - name: empty-dir
emptyDir: {}
- name: redis-data
emptyDir: {}
--- HelmRelease: comabase/comabase-redis NetworkPolicy: comabase/comabase-redis
+++ HelmRelease: comabase/comabase-redis NetworkPolicy: comabase/comabase-redis
@@ -0,0 +1,24 @@
+---
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+ name: comabase-redis
+ namespace: comabase
+ labels:
+ app.kubernetes.io/instance: comabase-redis
+ app.kubernetes.io/managed-by: Helm
+ app.kubernetes.io/name: redis
+spec:
+ podSelector:
+ matchLabels:
+ app.kubernetes.io/instance: comabase-redis
+ app.kubernetes.io/name: redis
+ policyTypes:
+ - Ingress
+ - Egress
+ egress:
+ - {}
+ ingress:
+ - ports:
+ - port: 6379
+ |
--- kubernetes/apps/business/comabase/redis Kustomization: flux-system/cluster-apps-business-comabase-redis HelmRelease: comabase/comabase-redis
+++ kubernetes/apps/business/comabase/redis Kustomization: flux-system/cluster-apps-business-comabase-redis HelmRelease: comabase/comabase-redis
@@ -13,13 +13,13 @@
chart: redis
interval: 15m
sourceRef:
kind: HelmRepository
name: bitnami
namespace: flux-system
- version: 18.2.0
+ version: 18.19.4
install:
remediation:
retries: 3
interval: 15m
maxHistory: 2
uninstall:
--- kubernetes/apps/database/redis/app Kustomization: flux-system/cluster-apps-redis HelmRelease: database/redis
+++ kubernetes/apps/database/redis/app Kustomization: flux-system/cluster-apps-redis HelmRelease: database/redis
@@ -12,13 +12,13 @@
spec:
chart: redis
sourceRef:
kind: HelmRepository
name: bitnami
namespace: flux-system
- version: 18.9.0
+ version: 18.19.4
install:
remediation:
retries: 3
interval: 30m
maxHistory: 2
timeout: 15m
--- kubernetes/apps/database/staging-redis/app Kustomization: flux-system/cluster-apps-staging-redis HelmRelease: database/staging-redis
+++ kubernetes/apps/database/staging-redis/app Kustomization: flux-system/cluster-apps-staging-redis HelmRelease: database/staging-redis
@@ -13,13 +13,13 @@
chart: redis
interval: 15m
sourceRef:
kind: HelmRepository
name: bitnami
namespace: flux-system
- version: 18.2.0
+ version: 18.19.4
install:
remediation:
retries: 3
interval: 15m
maxHistory: 2
uninstall: |
renovate
bot
force-pushed
the
renovate/redis-18.x
branch
from
b04f2d1 to
e109ab6
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/redis-18.x
branch
from
e109ab6 to
64f5669
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/redis-18.x
branch
from
64f5669 to
27bd6be
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/redis-18.x
branch
from
27bd6be to
ec4ed55
Compare
renovate
bot
changed the title
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/redis-18.x
branch
2 times, most recently
from
a955c2b to
5792bd7
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/redis-18.x
branch
from
5792bd7 to
b2aaa5d
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/redis-18.x
branch
from
b2aaa5d to
f1490cb
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/redis-18.x
branch
from
f1490cb to
daba0ee
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/redis-18.x
branch
from
daba0ee to
7c2cce5
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/redis-18.x
branch
from
7c2cce5 to
e9aa126
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/redis-18.x
branch
from
e9aa126 to
8424e22
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/redis-18.x
branch
from
8424e22 to
14235e5
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/redis-18.x
branch
from
14235e5 to
ae64d02
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/redis-18.x
branch
3 times, most recently
from
81706a2 to
036cca0
Compare
renovate
bot
force-pushed
the
renovate/redis-18.x
branch
3 times, most recently
from
6d506b1 to
fd67fef
Compare
renovate
bot
force-pushed
the
renovate/redis-18.x
branch
6 times, most recently
from
ea0cc67 to
cdf9d9e
Compare
renovate
bot
force-pushed
the
renovate/redis-18.x
branch
from
cdf9d9e to
255c101
Compare
renovate
bot
force-pushed
the
renovate/redis-18.x
branch
from
255c101 to
256ec5c
Compare
renovate
bot
force-pushed
the
renovate/redis-18.x
branch
from
256ec5c to
5b26073
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
18.2.0->18.19.418.9.0->18.19.4Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
bitnami/charts (redis)
v18.19.4v18.19.3v18.19.2v18.19.1v18.19.0v18.18.1v18.18.0v18.17.1v18.17.0v18.16.1v18.16.0v18.15.1v18.13.0v18.12.1v18.12.0v18.11.1v18.11.0v18.10.0v18.9.1v18.9.0v18.8.3v18.8.2v18.8.0v18.7.1v18.7.0v18.6.4v18.6.3v18.6.2v18.6.1v18.6.0v18.5.0v18.4.0v18.3.3v18.3.2v18.3.1v18.3.0v18.2.2v18.2.1Configuration
📅 Schedule: Branch creation - "on saturday" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR was generated by Mend Renovate. View the repository job log.