From 05b2d5557dc86d1cd5d271c397da19e0720694a7 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Tue, 8 Sep 2026 12:10:42 +0000 Subject: [PATCH] Update cloud-provider-openstack to v2.36.5 Signed-off-by: Renovate Bot --- class/defaults.yml | 2 +- .../templates/clusterrole.yaml | 2 +- .../templates/clusterrolebinding-sm.yaml | 2 +- .../templates/clusterrolebinding.yaml | 2 +- .../templates/daemonset.yaml | 16 ++++++++++++++-- .../templates/role.yaml | 2 +- .../templates/rolebinding.yaml | 2 +- .../templates/service-sm.yaml | 2 +- .../templates/serviceaccount.yaml | 2 +- .../templates/servicemonitor.yaml | 5 +---- .../templates/clusterrole.yaml | 2 +- .../templates/clusterrolebinding.yaml | 2 +- .../templates/daemonset.yaml | 16 ++++++++++++++-- .../templates/role.yaml | 2 +- .../templates/rolebinding.yaml | 2 +- .../templates/serviceaccount.yaml | 2 +- 16 files changed, 42 insertions(+), 21 deletions(-) diff --git a/class/defaults.yml b/class/defaults.yml index 46c855b..f7368dd 100644 --- a/class/defaults.yml +++ b/class/defaults.yml @@ -10,7 +10,7 @@ parameters: charts: openstack-cloud-controller-manager: source: https://kubernetes.github.io/cloud-provider-openstack - version: "2.36.4" + version: "2.36.5" openstack-cinder-csi: source: https://kubernetes.github.io/cloud-provider-openstack version: "2.36.5" diff --git a/tests/golden/cloud-config/cloud-provider-openstack/cloud-provider-openstack/10_ccm_helm_chart/openstack-cloud-controller-manager/templates/clusterrole.yaml b/tests/golden/cloud-config/cloud-provider-openstack/cloud-provider-openstack/10_ccm_helm_chart/openstack-cloud-controller-manager/templates/clusterrole.yaml index 2f0d894..f624223 100644 --- a/tests/golden/cloud-config/cloud-provider-openstack/cloud-provider-openstack/10_ccm_helm_chart/openstack-cloud-controller-manager/templates/clusterrole.yaml +++ b/tests/golden/cloud-config/cloud-provider-openstack/cloud-provider-openstack/10_ccm_helm_chart/openstack-cloud-controller-manager/templates/clusterrole.yaml @@ -7,7 +7,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: openstack-cloud-controller-manager app.kubernetes.io/version: v1.36.0 - helm.sh/chart: openstack-cloud-controller-manager-2.36.4 + helm.sh/chart: openstack-cloud-controller-manager-2.36.5 name: system:cloud-controller-manager rules: - apiGroups: diff --git a/tests/golden/cloud-config/cloud-provider-openstack/cloud-provider-openstack/10_ccm_helm_chart/openstack-cloud-controller-manager/templates/clusterrolebinding-sm.yaml b/tests/golden/cloud-config/cloud-provider-openstack/cloud-provider-openstack/10_ccm_helm_chart/openstack-cloud-controller-manager/templates/clusterrolebinding-sm.yaml index 58e8e47..f81f8e5 100644 --- a/tests/golden/cloud-config/cloud-provider-openstack/cloud-provider-openstack/10_ccm_helm_chart/openstack-cloud-controller-manager/templates/clusterrolebinding-sm.yaml +++ b/tests/golden/cloud-config/cloud-provider-openstack/cloud-provider-openstack/10_ccm_helm_chart/openstack-cloud-controller-manager/templates/clusterrolebinding-sm.yaml @@ -7,7 +7,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: openstack-cloud-controller-manager app.kubernetes.io/version: v1.36.0 - helm.sh/chart: openstack-cloud-controller-manager-2.36.4 + helm.sh/chart: openstack-cloud-controller-manager-2.36.5 name: system:openstack-cloud-controller-manager:auth-delegate roleRef: apiGroup: rbac.authorization.k8s.io diff --git a/tests/golden/cloud-config/cloud-provider-openstack/cloud-provider-openstack/10_ccm_helm_chart/openstack-cloud-controller-manager/templates/clusterrolebinding.yaml b/tests/golden/cloud-config/cloud-provider-openstack/cloud-provider-openstack/10_ccm_helm_chart/openstack-cloud-controller-manager/templates/clusterrolebinding.yaml index 4c78e59..64d470f 100644 --- a/tests/golden/cloud-config/cloud-provider-openstack/cloud-provider-openstack/10_ccm_helm_chart/openstack-cloud-controller-manager/templates/clusterrolebinding.yaml +++ b/tests/golden/cloud-config/cloud-provider-openstack/cloud-provider-openstack/10_ccm_helm_chart/openstack-cloud-controller-manager/templates/clusterrolebinding.yaml @@ -7,7 +7,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: openstack-cloud-controller-manager app.kubernetes.io/version: v1.36.0 - helm.sh/chart: openstack-cloud-controller-manager-2.36.4 + helm.sh/chart: openstack-cloud-controller-manager-2.36.5 name: system:cloud-controller-manager roleRef: apiGroup: rbac.authorization.k8s.io diff --git a/tests/golden/cloud-config/cloud-provider-openstack/cloud-provider-openstack/10_ccm_helm_chart/openstack-cloud-controller-manager/templates/daemonset.yaml b/tests/golden/cloud-config/cloud-provider-openstack/cloud-provider-openstack/10_ccm_helm_chart/openstack-cloud-controller-manager/templates/daemonset.yaml index dad73fb..7dba453 100644 --- a/tests/golden/cloud-config/cloud-provider-openstack/cloud-provider-openstack/10_ccm_helm_chart/openstack-cloud-controller-manager/templates/daemonset.yaml +++ b/tests/golden/cloud-config/cloud-provider-openstack/cloud-provider-openstack/10_ccm_helm_chart/openstack-cloud-controller-manager/templates/daemonset.yaml @@ -7,7 +7,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: openstack-cloud-controller-manager app.kubernetes.io/version: v1.36.0 - helm.sh/chart: openstack-cloud-controller-manager-2.36.4 + helm.sh/chart: openstack-cloud-controller-manager-2.36.5 name: openstack-cloud-controller-manager namespace: syn-cloud-provider-openstack spec: @@ -22,7 +22,7 @@ spec: checksum/config: b0b31d6311d187dd53758033396c83505652c1ec8a62bef0b9afe7f9572f8db4 labels: app: openstack-cloud-controller-manager - chart: openstack-cloud-controller-manager-2.36.4 + chart: openstack-cloud-controller-manager-2.36.5 component: controllermanager heritage: Helm release: openstack-ccm @@ -54,6 +54,15 @@ spec: requests: cpu: 50m memory: 64Mi + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + readOnlyRootFilesystem: true + runAsNonRoot: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /etc/config name: cloud-config-volume @@ -62,8 +71,11 @@ spec: hostNetwork: true nodeSelector: node-role.kubernetes.io/control-plane: '' + priorityClassName: system-node-critical securityContext: runAsUser: 1001 + seccompProfile: + type: RuntimeDefault serviceAccountName: cloud-controller-manager tolerations: - effect: NoSchedule diff --git a/tests/golden/cloud-config/cloud-provider-openstack/cloud-provider-openstack/10_ccm_helm_chart/openstack-cloud-controller-manager/templates/role.yaml b/tests/golden/cloud-config/cloud-provider-openstack/cloud-provider-openstack/10_ccm_helm_chart/openstack-cloud-controller-manager/templates/role.yaml index 6953ae5..db1679f 100644 --- a/tests/golden/cloud-config/cloud-provider-openstack/cloud-provider-openstack/10_ccm_helm_chart/openstack-cloud-controller-manager/templates/role.yaml +++ b/tests/golden/cloud-config/cloud-provider-openstack/cloud-provider-openstack/10_ccm_helm_chart/openstack-cloud-controller-manager/templates/role.yaml @@ -7,7 +7,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: openstack-cloud-controller-manager app.kubernetes.io/version: v1.36.0 - helm.sh/chart: openstack-cloud-controller-manager-2.36.4 + helm.sh/chart: openstack-cloud-controller-manager-2.36.5 name: system:cloud-controller-manager:secret-reader namespace: syn-cloud-provider-openstack rules: diff --git a/tests/golden/cloud-config/cloud-provider-openstack/cloud-provider-openstack/10_ccm_helm_chart/openstack-cloud-controller-manager/templates/rolebinding.yaml b/tests/golden/cloud-config/cloud-provider-openstack/cloud-provider-openstack/10_ccm_helm_chart/openstack-cloud-controller-manager/templates/rolebinding.yaml index e2f5e1c..be3cf0a 100644 --- a/tests/golden/cloud-config/cloud-provider-openstack/cloud-provider-openstack/10_ccm_helm_chart/openstack-cloud-controller-manager/templates/rolebinding.yaml +++ b/tests/golden/cloud-config/cloud-provider-openstack/cloud-provider-openstack/10_ccm_helm_chart/openstack-cloud-controller-manager/templates/rolebinding.yaml @@ -7,7 +7,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: openstack-cloud-controller-manager app.kubernetes.io/version: v1.36.0 - helm.sh/chart: openstack-cloud-controller-manager-2.36.4 + helm.sh/chart: openstack-cloud-controller-manager-2.36.5 name: system:cloud-controller-manager:secret-reader namespace: syn-cloud-provider-openstack roleRef: diff --git a/tests/golden/cloud-config/cloud-provider-openstack/cloud-provider-openstack/10_ccm_helm_chart/openstack-cloud-controller-manager/templates/service-sm.yaml b/tests/golden/cloud-config/cloud-provider-openstack/cloud-provider-openstack/10_ccm_helm_chart/openstack-cloud-controller-manager/templates/service-sm.yaml index 6b9e9e6..5cd81bc 100644 --- a/tests/golden/cloud-config/cloud-provider-openstack/cloud-provider-openstack/10_ccm_helm_chart/openstack-cloud-controller-manager/templates/service-sm.yaml +++ b/tests/golden/cloud-config/cloud-provider-openstack/cloud-provider-openstack/10_ccm_helm_chart/openstack-cloud-controller-manager/templates/service-sm.yaml @@ -7,7 +7,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: openstack-cloud-controller-manager app.kubernetes.io/version: v1.36.0 - helm.sh/chart: openstack-cloud-controller-manager-2.36.4 + helm.sh/chart: openstack-cloud-controller-manager-2.36.5 name: openstack-cloud-controller-manager namespace: syn-cloud-provider-openstack spec: diff --git a/tests/golden/cloud-config/cloud-provider-openstack/cloud-provider-openstack/10_ccm_helm_chart/openstack-cloud-controller-manager/templates/serviceaccount.yaml b/tests/golden/cloud-config/cloud-provider-openstack/cloud-provider-openstack/10_ccm_helm_chart/openstack-cloud-controller-manager/templates/serviceaccount.yaml index f5b269a..bfd374a 100644 --- a/tests/golden/cloud-config/cloud-provider-openstack/cloud-provider-openstack/10_ccm_helm_chart/openstack-cloud-controller-manager/templates/serviceaccount.yaml +++ b/tests/golden/cloud-config/cloud-provider-openstack/cloud-provider-openstack/10_ccm_helm_chart/openstack-cloud-controller-manager/templates/serviceaccount.yaml @@ -7,6 +7,6 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: openstack-cloud-controller-manager app.kubernetes.io/version: v1.36.0 - helm.sh/chart: openstack-cloud-controller-manager-2.36.4 + helm.sh/chart: openstack-cloud-controller-manager-2.36.5 name: cloud-controller-manager namespace: syn-cloud-provider-openstack diff --git a/tests/golden/cloud-config/cloud-provider-openstack/cloud-provider-openstack/10_ccm_helm_chart/openstack-cloud-controller-manager/templates/servicemonitor.yaml b/tests/golden/cloud-config/cloud-provider-openstack/cloud-provider-openstack/10_ccm_helm_chart/openstack-cloud-controller-manager/templates/servicemonitor.yaml index 7287a8e..dfe7cc6 100644 --- a/tests/golden/cloud-config/cloud-provider-openstack/cloud-provider-openstack/10_ccm_helm_chart/openstack-cloud-controller-manager/templates/servicemonitor.yaml +++ b/tests/golden/cloud-config/cloud-provider-openstack/cloud-provider-openstack/10_ccm_helm_chart/openstack-cloud-controller-manager/templates/servicemonitor.yaml @@ -7,7 +7,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: openstack-cloud-controller-manager app.kubernetes.io/version: v1.36.0 - helm.sh/chart: openstack-cloud-controller-manager-2.36.4 + helm.sh/chart: openstack-cloud-controller-manager-2.36.5 name: openstack-cloud-controller-manager namespace: syn-cloud-provider-openstack spec: @@ -21,7 +21,4 @@ spec: selector: matchLabels: app.kubernetes.io/instance: openstack-ccm - app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: openstack-cloud-controller-manager - app.kubernetes.io/version: v1.36.0 - helm.sh/chart: openstack-cloud-controller-manager-2.36.4 diff --git a/tests/golden/defaults/cloud-provider-openstack/cloud-provider-openstack/10_ccm_helm_chart/openstack-cloud-controller-manager/templates/clusterrole.yaml b/tests/golden/defaults/cloud-provider-openstack/cloud-provider-openstack/10_ccm_helm_chart/openstack-cloud-controller-manager/templates/clusterrole.yaml index 2f0d894..f624223 100644 --- a/tests/golden/defaults/cloud-provider-openstack/cloud-provider-openstack/10_ccm_helm_chart/openstack-cloud-controller-manager/templates/clusterrole.yaml +++ b/tests/golden/defaults/cloud-provider-openstack/cloud-provider-openstack/10_ccm_helm_chart/openstack-cloud-controller-manager/templates/clusterrole.yaml @@ -7,7 +7,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: openstack-cloud-controller-manager app.kubernetes.io/version: v1.36.0 - helm.sh/chart: openstack-cloud-controller-manager-2.36.4 + helm.sh/chart: openstack-cloud-controller-manager-2.36.5 name: system:cloud-controller-manager rules: - apiGroups: diff --git a/tests/golden/defaults/cloud-provider-openstack/cloud-provider-openstack/10_ccm_helm_chart/openstack-cloud-controller-manager/templates/clusterrolebinding.yaml b/tests/golden/defaults/cloud-provider-openstack/cloud-provider-openstack/10_ccm_helm_chart/openstack-cloud-controller-manager/templates/clusterrolebinding.yaml index 4c78e59..64d470f 100644 --- a/tests/golden/defaults/cloud-provider-openstack/cloud-provider-openstack/10_ccm_helm_chart/openstack-cloud-controller-manager/templates/clusterrolebinding.yaml +++ b/tests/golden/defaults/cloud-provider-openstack/cloud-provider-openstack/10_ccm_helm_chart/openstack-cloud-controller-manager/templates/clusterrolebinding.yaml @@ -7,7 +7,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: openstack-cloud-controller-manager app.kubernetes.io/version: v1.36.0 - helm.sh/chart: openstack-cloud-controller-manager-2.36.4 + helm.sh/chart: openstack-cloud-controller-manager-2.36.5 name: system:cloud-controller-manager roleRef: apiGroup: rbac.authorization.k8s.io diff --git a/tests/golden/defaults/cloud-provider-openstack/cloud-provider-openstack/10_ccm_helm_chart/openstack-cloud-controller-manager/templates/daemonset.yaml b/tests/golden/defaults/cloud-provider-openstack/cloud-provider-openstack/10_ccm_helm_chart/openstack-cloud-controller-manager/templates/daemonset.yaml index 83eb4af..234ed1b 100644 --- a/tests/golden/defaults/cloud-provider-openstack/cloud-provider-openstack/10_ccm_helm_chart/openstack-cloud-controller-manager/templates/daemonset.yaml +++ b/tests/golden/defaults/cloud-provider-openstack/cloud-provider-openstack/10_ccm_helm_chart/openstack-cloud-controller-manager/templates/daemonset.yaml @@ -7,7 +7,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: openstack-cloud-controller-manager app.kubernetes.io/version: v1.36.0 - helm.sh/chart: openstack-cloud-controller-manager-2.36.4 + helm.sh/chart: openstack-cloud-controller-manager-2.36.5 name: openstack-cloud-controller-manager namespace: syn-cloud-provider-openstack spec: @@ -22,7 +22,7 @@ spec: checksum/config: b0b31d6311d187dd53758033396c83505652c1ec8a62bef0b9afe7f9572f8db4 labels: app: openstack-cloud-controller-manager - chart: openstack-cloud-controller-manager-2.36.4 + chart: openstack-cloud-controller-manager-2.36.5 component: controllermanager heritage: Helm release: openstack-ccm @@ -48,6 +48,15 @@ spec: requests: cpu: 50m memory: 64Mi + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + readOnlyRootFilesystem: true + runAsNonRoot: true + seccompProfile: + type: RuntimeDefault volumeMounts: - mountPath: /etc/config name: cloud-config-volume @@ -56,8 +65,11 @@ spec: hostNetwork: true nodeSelector: node-role.kubernetes.io/control-plane: '' + priorityClassName: system-node-critical securityContext: runAsUser: 1001 + seccompProfile: + type: RuntimeDefault serviceAccountName: cloud-controller-manager tolerations: - effect: NoSchedule diff --git a/tests/golden/defaults/cloud-provider-openstack/cloud-provider-openstack/10_ccm_helm_chart/openstack-cloud-controller-manager/templates/role.yaml b/tests/golden/defaults/cloud-provider-openstack/cloud-provider-openstack/10_ccm_helm_chart/openstack-cloud-controller-manager/templates/role.yaml index 6953ae5..db1679f 100644 --- a/tests/golden/defaults/cloud-provider-openstack/cloud-provider-openstack/10_ccm_helm_chart/openstack-cloud-controller-manager/templates/role.yaml +++ b/tests/golden/defaults/cloud-provider-openstack/cloud-provider-openstack/10_ccm_helm_chart/openstack-cloud-controller-manager/templates/role.yaml @@ -7,7 +7,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: openstack-cloud-controller-manager app.kubernetes.io/version: v1.36.0 - helm.sh/chart: openstack-cloud-controller-manager-2.36.4 + helm.sh/chart: openstack-cloud-controller-manager-2.36.5 name: system:cloud-controller-manager:secret-reader namespace: syn-cloud-provider-openstack rules: diff --git a/tests/golden/defaults/cloud-provider-openstack/cloud-provider-openstack/10_ccm_helm_chart/openstack-cloud-controller-manager/templates/rolebinding.yaml b/tests/golden/defaults/cloud-provider-openstack/cloud-provider-openstack/10_ccm_helm_chart/openstack-cloud-controller-manager/templates/rolebinding.yaml index e2f5e1c..be3cf0a 100644 --- a/tests/golden/defaults/cloud-provider-openstack/cloud-provider-openstack/10_ccm_helm_chart/openstack-cloud-controller-manager/templates/rolebinding.yaml +++ b/tests/golden/defaults/cloud-provider-openstack/cloud-provider-openstack/10_ccm_helm_chart/openstack-cloud-controller-manager/templates/rolebinding.yaml @@ -7,7 +7,7 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: openstack-cloud-controller-manager app.kubernetes.io/version: v1.36.0 - helm.sh/chart: openstack-cloud-controller-manager-2.36.4 + helm.sh/chart: openstack-cloud-controller-manager-2.36.5 name: system:cloud-controller-manager:secret-reader namespace: syn-cloud-provider-openstack roleRef: diff --git a/tests/golden/defaults/cloud-provider-openstack/cloud-provider-openstack/10_ccm_helm_chart/openstack-cloud-controller-manager/templates/serviceaccount.yaml b/tests/golden/defaults/cloud-provider-openstack/cloud-provider-openstack/10_ccm_helm_chart/openstack-cloud-controller-manager/templates/serviceaccount.yaml index f5b269a..bfd374a 100644 --- a/tests/golden/defaults/cloud-provider-openstack/cloud-provider-openstack/10_ccm_helm_chart/openstack-cloud-controller-manager/templates/serviceaccount.yaml +++ b/tests/golden/defaults/cloud-provider-openstack/cloud-provider-openstack/10_ccm_helm_chart/openstack-cloud-controller-manager/templates/serviceaccount.yaml @@ -7,6 +7,6 @@ metadata: app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: openstack-cloud-controller-manager app.kubernetes.io/version: v1.36.0 - helm.sh/chart: openstack-cloud-controller-manager-2.36.4 + helm.sh/chart: openstack-cloud-controller-manager-2.36.5 name: cloud-controller-manager namespace: syn-cloud-provider-openstack