feat(container)!: Update image kube-prometheus-stack to v67

[renovate]

This PR contains the following updates:

Package	Update	Change
kube-prometheus-stack (source)	major	66.3.1 -> 67.5.0

---

Release Notes

prometheus-community/helm-charts (kube-prometheus-stack)

v67.5.0

Compare Source

v67.4.0

Compare Source

v67.3.1

Compare Source

kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.

What's Changed

• [kube-prometheus-stack]: bump to 0.79.2 by @​mjnagel in https://github.com/prometheus-community/helm-charts/pull/5075

Full Changelog: prometheus-community/helm-charts@kube-prometheus-stack-67.3.0...kube-prometheus-stack-67.3.1

v67.3.0

Compare Source

kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.

What's Changed

• [kube-prometheus-stack] regenerate dashboards and rules (fix #​5043) by @​ironashram in https://github.com/prometheus-community/helm-charts/pull/5073

New Contributors

• @​ironashram made their first contribution in https://github.com/prometheus-community/helm-charts/pull/5073

Full Changelog: prometheus-community/helm-charts@kube-prometheus-stack-67.2.1...kube-prometheus-stack-67.3.0

v67.2.1

Compare Source

v67.2.0

Compare Source

kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.

What's Changed

• [kube-prometheus-stack] Feat: Improve cAdvisor metrics scrape by @​SuperQ in https://github.com/prometheus-community/helm-charts/pull/5063

Full Changelog: prometheus-community/helm-charts@prometheus-operator-admission-webhook-0.18.0...kube-prometheus-stack-67.2.0

v67.1.0

Compare Source

kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.

What's Changed

• [kube-prometheus-stack] Upgrade Grafana to 8.8.* by @​muffl0n in https://github.com/prometheus-community/helm-charts/pull/5068

Full Changelog: prometheus-community/helm-charts@kube-prometheus-stack-67.0.0...kube-prometheus-stack-67.1.0

v67.0.0

Compare Source

v66.7.1

Compare Source

kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.

What's Changed

• [kube-prometheus-stack] Chore: Improve kubelet ServiceMonitor by @​SuperQ in https://github.com/prometheus-community/helm-charts/pull/5061

Full Changelog: prometheus-community/helm-charts@prometheus-nats-exporter-2.18.0...kube-prometheus-stack-66.7.1

v66.7.0

Compare Source

v66.6.0

Compare Source

kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.

What's Changed

• [kube-prometheus-stack] bump thanos 0.37.2 + deps and refresh dashboards by @​DrFaust92 in https://github.com/prometheus-community/helm-charts/pull/5055

Full Changelog: prometheus-community/helm-charts@prometheus-conntrack-stats-exporter-0.5.14...kube-prometheus-stack-66.6.0

v66.5.0

Compare Source

kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.

What's Changed

• [kube-prometheus-stack] Add downward compat for Prom CRD by @​schnatterer in https://github.com/prometheus-community/helm-charts/pull/5051

Full Changelog: prometheus-community/helm-charts@prometheus-stackdriver-exporter-4.7.0...kube-prometheus-stack-66.5.0

v66.4.0

Compare Source

kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.

What's Changed

• [kube-prometheus-stack] feature(kubelet): Add trackTimestampsStaleness by @​Breee in https://github.com/prometheus-community/helm-charts/pull/5050

New Contributors

• @​Breee made their first contribution in https://github.com/prometheus-community/helm-charts/pull/5050

Full Changelog: prometheus-community/helm-charts@prometheus-postgres-exporter-6.7.1...kube-prometheus-stack-66.4.0

---

Configuration

📅 Schedule: Branch creation - "on saturday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[jsaveker]

Here is an automated review from ChatGPT of this pull request.

Based on the provided git diff, there are no direct security issues evident from the change itself. The diff indicates an update of the kube-prometheus-stack chart version from 66.3.1 to 67.4.0 in two Helm release templates.

Considerations:

1. Version Security Patches: Upgrading versions can be a security improvement if the new version includes patches for security vulnerabilities. It's recommended to review the release notes of kube-prometheus-stack version 67.4.0 to ensure it doesn't introduce any new vulnerabilities or security regressions.

2. Dependency Checking: Ensure that the new version of kube-prometheus-stack does not introduce dependencies with known vulnerabilities. Using tools like Helm's built-in dependency checks or external vulnerability scanners can help identify any risky dependencies.

3. Compatibility Check: Ensure that the new version is compatible with your existing Kubernetes setup and other integrated services or plugins. Incompatibilities might not pose direct security issues but can lead to misconfigurations or outages, indirectly affecting security posture.

Suggested Fixes/Checks:

Since there are no direct security flaws visible in the diff, here are some recommended general practices instead of specific fixes:

- **Release Notes Review**: Review the [kube-prometheus-stack release notes](https://github.com/prometheus-community/helm-charts/releases) for version 67.4.0 to identify any security fixes or potential vulnerabilities introduced in this version.
- **Vulnerability Scanning**: Use tools like [Trivy](https://github.com/aquasecurity/trivy) or [Snyk](https://snyk.io/) to scan the new version for dependencies with known vulnerabilities.
- **Compatibility Verification**: Ensure all changes are tested in a controlled environment before pushing to production. Verify compatibility with existing Kubernetes resources and configurations to prevent unexpected behavior.
- **Automated Security Policies**: Implement policies using admission controllers or OPA/Gatekeeper to automatically review Helm releases for security considerations.

In summary, the git diff does not directly introduce identifiable security issues, but due diligence is required to ensure the version update is safe and compatible with your environment.