feat(container): update image thanos to v13.4.1

[renovate]

This PR contains the following updates:

Package	Update	Change	OpenSSF
thanos (source)	minor	13.2.2 -> 13.4.1

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[github-actions]

--- kubernetes/apps/monitoring/thanos/app Kustomization: flux-system/thanos HelmRelease: monitoring/thanos

+++ kubernetes/apps/monitoring/thanos/app Kustomization: flux-system/thanos HelmRelease: monitoring/thanos

@@ -13,13 +13,13 @@

     spec:
       chart: thanos
       sourceRef:
         kind: HelmRepository
         name: bitnami
         namespace: flux-system
-      version: 13.2.2
+      version: 13.4.1
   dependsOn:
   - name: local-path-provisioner
     namespace: kube-system
   - name: redis
     namespace: database
   install:

[github-actions]

--- HelmRelease: monitoring/thanos Deployment: monitoring/thanos-bucketweb

+++ HelmRelease: monitoring/thanos Deployment: monitoring/thanos-bucketweb

@@ -57,12 +57,13 @@

           allowPrivilegeEscalation: false
           capabilities:
             drop:
             - ALL
           privileged: false
           readOnlyRootFilesystem: true
+          runAsGroup: 1001
           runAsNonRoot: true
           runAsUser: 1001
           seLinuxOptions: null
           seccompProfile:
             type: RuntimeDefault
         args:
--- HelmRelease: monitoring/thanos Deployment: monitoring/thanos-compactor

+++ HelmRelease: monitoring/thanos Deployment: monitoring/thanos-compactor

@@ -57,12 +57,13 @@

           allowPrivilegeEscalation: false
           capabilities:
             drop:
             - ALL
           privileged: false
           readOnlyRootFilesystem: true
+          runAsGroup: 1001
           runAsNonRoot: true
           runAsUser: 1001
           seLinuxOptions: null
           seccompProfile:
             type: RuntimeDefault
         args:
--- HelmRelease: monitoring/thanos Deployment: monitoring/thanos-query-frontend

+++ HelmRelease: monitoring/thanos Deployment: monitoring/thanos-query-frontend

@@ -24,13 +24,13 @@

       labels:
         app.kubernetes.io/instance: thanos
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: thanos
         app.kubernetes.io/component: query-frontend
       annotations:
-        checksum/query-frontend-configuration: 9a977c117ca09529222b0627b2d01d967e62e1ab2c7d480f6bb74184edab9121
+        checksum/query-frontend-configuration: b50d77712994c2c3537de3e22f5fe35306aee4523673e5836a0844b8b639ef87
     spec:
       serviceAccountName: thanos-query-frontend
       automountServiceAccountToken: true
       affinity:
         podAffinity: null
         podAntiAffinity:
@@ -57,12 +57,13 @@

           allowPrivilegeEscalation: false
           capabilities:
             drop:
             - ALL
           privileged: false
           readOnlyRootFilesystem: true
+          runAsGroup: 1001
           runAsNonRoot: true
           runAsUser: 1001
           seLinuxOptions: null
           seccompProfile:
             type: RuntimeDefault
         args:
--- HelmRelease: monitoring/thanos Deployment: monitoring/thanos-query

+++ HelmRelease: monitoring/thanos Deployment: monitoring/thanos-query

@@ -55,12 +55,13 @@

           allowPrivilegeEscalation: false
           capabilities:
             drop:
             - ALL
           privileged: false
           readOnlyRootFilesystem: true
+          runAsGroup: 1001
           runAsNonRoot: true
           runAsUser: 1001
           seLinuxOptions: null
           seccompProfile:
             type: RuntimeDefault
         args:
--- HelmRelease: monitoring/thanos StatefulSet: monitoring/thanos-ruler

+++ HelmRelease: monitoring/thanos StatefulSet: monitoring/thanos-ruler

@@ -27,13 +27,13 @@

         app.kubernetes.io/instance: thanos
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: thanos
         app.kubernetes.io/component: ruler
       annotations:
         checksum/objstore-configuration: 01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
-        checksum/ruler-configuration: 9d4a82030950eb55b9fbc216b10152d66d22510f3ce5352e32c88a9ca5493133
+        checksum/ruler-configuration: 25fc07af3b5a2f9c89118370d69f40c1159fb5711b50371026a48f6cb2ab4a52
     spec:
       serviceAccountName: thanos-ruler
       automountServiceAccountToken: true
       affinity:
         podAffinity: null
         podAntiAffinity:
@@ -60,12 +60,13 @@

           allowPrivilegeEscalation: false
           capabilities:
             drop:
             - ALL
           privileged: false
           readOnlyRootFilesystem: true
+          runAsGroup: 1001
           runAsNonRoot: true
           runAsUser: 1001
           seLinuxOptions: null
           seccompProfile:
             type: RuntimeDefault
         args:
--- HelmRelease: monitoring/thanos StatefulSet: monitoring/thanos-storegateway

+++ HelmRelease: monitoring/thanos StatefulSet: monitoring/thanos-storegateway

@@ -27,13 +27,13 @@

         app.kubernetes.io/instance: thanos
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: thanos
         app.kubernetes.io/component: storegateway
       annotations:
         checksum/objstore-configuration: 01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
-        checksum/storegateway-configuration: 3c4ad8d520dbf3b2968566ed07389bcc2ac6f27592e009cd9a5da41d3610e245
+        checksum/storegateway-configuration: 90fe9740445ba7dd549b49c457010bb4e26e82d75007d1a3733a80033fbc6344
     spec:
       serviceAccountName: thanos-storegateway
       automountServiceAccountToken: true
       affinity:
         podAffinity: null
         podAntiAffinity:
@@ -60,12 +60,13 @@

           allowPrivilegeEscalation: false
           capabilities:
             drop:
             - ALL
           privileged: false
           readOnlyRootFilesystem: true
+          runAsGroup: 1001
           runAsNonRoot: true
           runAsUser: 1001
           seLinuxOptions: null
           seccompProfile:
             type: RuntimeDefault
         args: