From 1be12f352c8fbb86914f9cb93572790df222105c Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sat, 31 Aug 2024 08:00:08 +0000
Subject: [PATCH 01/40] fix(charts): update helm release
 victoria-metrics-k8s-stack to v0.25.9 (#2943)

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 helm-dependencies.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/helm-dependencies.yaml b/helm-dependencies.yaml
index 0931d7767..17a0b3d2c 100644
--- a/helm-dependencies.yaml
+++ b/helm-dependencies.yaml
@@ -114,7 +114,7 @@ dependencies:
     version: 7.1.5
     repository: https://vmware-tanzu.github.io/helm-charts
   - name: victoria-metrics-k8s-stack
-    version: 0.25.8
+    version: 0.25.9
     repository: https://victoriametrics.github.io/helm-charts/
   - name: yet-another-cloudwatch-exporter
     version: 0.14.0

From e147e23a64872e00a70d212b42936f45cd6c8bf7 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sat, 31 Aug 2024 20:04:07 +0000
Subject: [PATCH 02/40] fix(charts): update helm release
 victoria-metrics-k8s-stack to v0.25.10 (#2944)

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 helm-dependencies.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/helm-dependencies.yaml b/helm-dependencies.yaml
index 17a0b3d2c..9008d9bed 100644
--- a/helm-dependencies.yaml
+++ b/helm-dependencies.yaml
@@ -114,7 +114,7 @@ dependencies:
     version: 7.1.5
     repository: https://vmware-tanzu.github.io/helm-charts
   - name: victoria-metrics-k8s-stack
-    version: 0.25.9
+    version: 0.25.10
     repository: https://victoriametrics.github.io/helm-charts/
   - name: yet-another-cloudwatch-exporter
     version: 0.14.0

From cca1127545ea6072e2335c2e44098b2a93c5108c Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Mon, 2 Sep 2024 07:04:45 +0000
Subject: [PATCH 03/40] feat(charts): update helm release loki to v6.11.0
 (#2945)

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 helm-dependencies.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/helm-dependencies.yaml b/helm-dependencies.yaml
index 9008d9bed..91d317b75 100644
--- a/helm-dependencies.yaml
+++ b/helm-dependencies.yaml
@@ -72,7 +72,7 @@ dependencies:
     version: 30.12.11
     repository: https://helm.linkerd.io/stable
   - name: loki
-    version: 6.10.2
+    version: 6.11.0
     repository: https://grafana.github.io/helm-charts
   - name: promtail
     version: 6.16.5

From b24c38925c498f3b7d57f5688ed9c7021a482afc Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 3 Sep 2024 07:16:00 +0000
Subject: [PATCH 04/40] fix(charts): update helm release memcached to v7.4.13
 (#2946)

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 helm-dependencies.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/helm-dependencies.yaml b/helm-dependencies.yaml
index 91d317b75..4e81ec432 100644
--- a/helm-dependencies.yaml
+++ b/helm-dependencies.yaml
@@ -108,7 +108,7 @@ dependencies:
     version: 30.1.0
     repository: https://helm.traefik.io/traefik
   - name: memcached
-    version: 7.4.12
+    version: 7.4.13
     repository: https://charts.bitnami.com/bitnami
   - name: velero
     version: 7.1.5

From db948df6dc90f548e1dad3746b1f3adf301e4be5 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 3 Sep 2024 09:47:15 +0000
Subject: [PATCH 05/40] fix(charts): update helm release
 victoria-metrics-k8s-stack to v0.25.11 (#2947)

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 helm-dependencies.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/helm-dependencies.yaml b/helm-dependencies.yaml
index 4e81ec432..0017ba158 100644
--- a/helm-dependencies.yaml
+++ b/helm-dependencies.yaml
@@ -114,7 +114,7 @@ dependencies:
     version: 7.1.5
     repository: https://vmware-tanzu.github.io/helm-charts
   - name: victoria-metrics-k8s-stack
-    version: 0.25.10
+    version: 0.25.11
     repository: https://victoriametrics.github.io/helm-charts/
   - name: yet-another-cloudwatch-exporter
     version: 0.14.0

From f36151379b4366dc51bd467cbfc7833b1fb86c45 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 3 Sep 2024 13:47:52 +0000
Subject: [PATCH 06/40] fix(charts): update helm release
 victoria-metrics-k8s-stack to v0.25.12 (#2948)

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 helm-dependencies.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/helm-dependencies.yaml b/helm-dependencies.yaml
index 0017ba158..cf8d93393 100644
--- a/helm-dependencies.yaml
+++ b/helm-dependencies.yaml
@@ -114,7 +114,7 @@ dependencies:
     version: 7.1.5
     repository: https://vmware-tanzu.github.io/helm-charts
   - name: victoria-metrics-k8s-stack
-    version: 0.25.11
+    version: 0.25.12
     repository: https://victoriametrics.github.io/helm-charts/
   - name: yet-another-cloudwatch-exporter
     version: 0.14.0

From 14b606b8b5af8c72ff73cf07eb93c3b7bc7998d7 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 3 Sep 2024 19:27:51 +0000
Subject: [PATCH 07/40] feat(charts): update helm release loki to v6.12.0
 (#2949)

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 helm-dependencies.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/helm-dependencies.yaml b/helm-dependencies.yaml
index cf8d93393..70886d3fa 100644
--- a/helm-dependencies.yaml
+++ b/helm-dependencies.yaml
@@ -72,7 +72,7 @@ dependencies:
     version: 30.12.11
     repository: https://helm.linkerd.io/stable
   - name: loki
-    version: 6.11.0
+    version: 6.12.0
     repository: https://grafana.github.io/helm-charts
   - name: promtail
     version: 6.16.5

From 68ad3480f0e6e14d1933e4ac9603451b8129b3b5 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Wed, 4 Sep 2024 08:04:58 +0000
Subject: [PATCH 08/40] fix(charts): update helm release
 victoria-metrics-k8s-stack to v0.25.14 (#2951)

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 helm-dependencies.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/helm-dependencies.yaml b/helm-dependencies.yaml
index 70886d3fa..95997cbac 100644
--- a/helm-dependencies.yaml
+++ b/helm-dependencies.yaml
@@ -114,7 +114,7 @@ dependencies:
     version: 7.1.5
     repository: https://vmware-tanzu.github.io/helm-charts
   - name: victoria-metrics-k8s-stack
-    version: 0.25.12
+    version: 0.25.14
     repository: https://victoriametrics.github.io/helm-charts/
   - name: yet-another-cloudwatch-exporter
     version: 0.14.0

From aba48f272b032b8e935b265a2031379958fcb2ef Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Wed, 4 Sep 2024 08:07:50 +0000
Subject: [PATCH 09/40] feat(charts): update helm release velero to v7.2.0
 (#2952)

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 helm-dependencies.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/helm-dependencies.yaml b/helm-dependencies.yaml
index 95997cbac..2b557d931 100644
--- a/helm-dependencies.yaml
+++ b/helm-dependencies.yaml
@@ -111,7 +111,7 @@ dependencies:
     version: 7.4.13
     repository: https://charts.bitnami.com/bitnami
   - name: velero
-    version: 7.1.5
+    version: 7.2.0
     repository: https://vmware-tanzu.github.io/helm-charts
   - name: victoria-metrics-k8s-stack
     version: 0.25.14

From ff0629cf94fd23a7c41f279534dbcc13d9d82cc3 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Wed, 4 Sep 2024 22:24:58 +0000
Subject: [PATCH 10/40] feat(charts): update helm release kube-prometheus-stack
 to v62.4.0 (#2953)

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 helm-dependencies.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/helm-dependencies.yaml b/helm-dependencies.yaml
index 2b557d931..4027742d6 100644
--- a/helm-dependencies.yaml
+++ b/helm-dependencies.yaml
@@ -57,7 +57,7 @@ dependencies:
     version: 2.41.0
     repository: https://charts.konghq.com
   - name: kube-prometheus-stack
-    version: 62.3.1
+    version: 62.4.0
     repository: https://prometheus-community.github.io/helm-charts
   - name: linkerd2-cni
     version: 30.12.2

From b4a772c9caa46f9d242a0db24dc7204cd39bd94d Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Thu, 5 Sep 2024 07:15:20 +0000
Subject: [PATCH 11/40] fix(charts): update helm release velero to v7.2.1
 (#2954)

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 helm-dependencies.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/helm-dependencies.yaml b/helm-dependencies.yaml
index 4027742d6..556d27a9f 100644
--- a/helm-dependencies.yaml
+++ b/helm-dependencies.yaml
@@ -111,7 +111,7 @@ dependencies:
     version: 7.4.13
     repository: https://charts.bitnami.com/bitnami
   - name: velero
-    version: 7.2.0
+    version: 7.2.1
     repository: https://vmware-tanzu.github.io/helm-charts
   - name: victoria-metrics-k8s-stack
     version: 0.25.14

From b5a72f75d78f92894de1269b67a5ab55b61ae1c8 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Thu, 5 Sep 2024 09:48:10 +0000
Subject: [PATCH 12/40] fix(charts): update helm release thanos to v15.7.24
 (#2956)

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 helm-dependencies.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/helm-dependencies.yaml b/helm-dependencies.yaml
index 556d27a9f..de419244f 100644
--- a/helm-dependencies.yaml
+++ b/helm-dependencies.yaml
@@ -99,7 +99,7 @@ dependencies:
     version: 2.16.1
     repository: https://bitnami-labs.github.io/sealed-secrets
   - name: thanos
-    version: 15.7.23
+    version: 15.7.24
     repository: https://charts.bitnami.com/bitnami
   - name: tigera-operator
     version: v3.28.1

From 60e0225e2e354fe119636ae4294e2990d7686c91 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Thu, 5 Sep 2024 09:51:07 +0000
Subject: [PATCH 13/40] fix(charts): update helm release kong to v2.41.1
 (#2955)

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 helm-dependencies.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/helm-dependencies.yaml b/helm-dependencies.yaml
index de419244f..31f4cddc0 100644
--- a/helm-dependencies.yaml
+++ b/helm-dependencies.yaml
@@ -54,7 +54,7 @@ dependencies:
     version: 2.15.1
     repository: https://kedacore.github.io/charts
   - name: kong
-    version: 2.41.0
+    version: 2.41.1
     repository: https://charts.konghq.com
   - name: kube-prometheus-stack
     version: 62.4.0

From cf31f42b4a04555a2846dd70062c2f1feedf3221 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Thu, 5 Sep 2024 12:50:44 +0000
Subject: [PATCH 14/40] fix(charts): update helm release
 victoria-metrics-k8s-stack to v0.25.15 (#2957)

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 helm-dependencies.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/helm-dependencies.yaml b/helm-dependencies.yaml
index 31f4cddc0..a50021237 100644
--- a/helm-dependencies.yaml
+++ b/helm-dependencies.yaml
@@ -114,7 +114,7 @@ dependencies:
     version: 7.2.1
     repository: https://vmware-tanzu.github.io/helm-charts
   - name: victoria-metrics-k8s-stack
-    version: 0.25.14
+    version: 0.25.15
     repository: https://victoriametrics.github.io/helm-charts/
   - name: yet-another-cloudwatch-exporter
     version: 0.14.0

From 43f26fe853400ac55d76207dfd537d2d38c074e1 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 6 Sep 2024 03:48:51 +0000
Subject: [PATCH 15/40] fix(charts): update helm release memcached to v7.4.14
 (#2959)

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 helm-dependencies.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/helm-dependencies.yaml b/helm-dependencies.yaml
index a50021237..fc7684c92 100644
--- a/helm-dependencies.yaml
+++ b/helm-dependencies.yaml
@@ -108,7 +108,7 @@ dependencies:
     version: 30.1.0
     repository: https://helm.traefik.io/traefik
   - name: memcached
-    version: 7.4.13
+    version: 7.4.14
     repository: https://charts.bitnami.com/bitnami
   - name: velero
     version: 7.2.1

From f6375994ee2265c2cef5c4111c49f22fae2463f5 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 6 Sep 2024 08:09:34 +0000
Subject: [PATCH 16/40] fix(charts): update helm release thanos to v15.7.25
 (#2960)

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 helm-dependencies.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/helm-dependencies.yaml b/helm-dependencies.yaml
index fc7684c92..db3764a83 100644
--- a/helm-dependencies.yaml
+++ b/helm-dependencies.yaml
@@ -99,7 +99,7 @@ dependencies:
     version: 2.16.1
     repository: https://bitnami-labs.github.io/sealed-secrets
   - name: thanos
-    version: 15.7.24
+    version: 15.7.25
     repository: https://charts.bitnami.com/bitnami
   - name: tigera-operator
     version: v3.28.1

From 2bc22fe665d05777e6f6a161aaac11746dba98b6 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 6 Sep 2024 22:02:59 +0000
Subject: [PATCH 17/40] chore(ci): update clowdhaus/terraform-composite-actions
 action to v1.10.0 (#2961)

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 .github/workflows/pre-commit.yml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml
index f5951f7e4..093764080 100644
--- a/.github/workflows/pre-commit.yml
+++ b/.github/workflows/pre-commit.yml
@@ -22,7 +22,7 @@ jobs:
 
       - name: Get root directories
         id: dirs
-        uses: clowdhaus/terraform-composite-actions/directories@v1.9.0
+        uses: clowdhaus/terraform-composite-actions/directories@v1.10.0
 
   preCommitMinVersions:
     name: Min TF pre-commit
@@ -44,7 +44,7 @@ jobs:
       - name: Pre-commit Terraform ${{ steps.minMax.outputs.minVersion }}
         # Run only validate pre-commit check on min version supported
         if: ${{ matrix.directory !=  '.' }}
-        uses: clowdhaus/terraform-composite-actions/pre-commit@v1.9.0
+        uses: clowdhaus/terraform-composite-actions/pre-commit@v1.10.0
         with:
           terraform-version: ${{ steps.minMax.outputs.minVersion }}
           args: 'terraform_validate --color=always --show-diff-on-failure --files ${{ matrix.directory }}/*'
@@ -52,7 +52,7 @@ jobs:
       - name: Pre-commit Terraform ${{ steps.minMax.outputs.minVersion }}
         # Run only validate pre-commit check on min version supported
         if: ${{ matrix.directory ==  '.' }}
-        uses: clowdhaus/terraform-composite-actions/pre-commit@v1.9.0
+        uses: clowdhaus/terraform-composite-actions/pre-commit@v1.10.0
         with:
           terraform-version: ${{ steps.minMax.outputs.minVersion }}
           args: 'terraform_validate --color=always --show-diff-on-failure --files $(ls *.tf)'
@@ -73,7 +73,7 @@ jobs:
         uses: clowdhaus/terraform-min-max@v1.3.1
 
       - name: Pre-commit Terraform ${{ steps.minMax.outputs.maxVersion }}
-        uses: clowdhaus/terraform-composite-actions/pre-commit@v1.9.0
+        uses: clowdhaus/terraform-composite-actions/pre-commit@v1.10.0
         with:
           terraform-version: ${{ steps.minMax.outputs.maxVersion }}
           terraform-docs-version: ${{ env.TERRAFORM_DOCS_VERSION }}

From 0ae7ddd02d8129f1ea26390d94e3dffc21279527 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sat, 7 Sep 2024 09:55:45 +0000
Subject: [PATCH 18/40] feat(charts): update helm release kube-prometheus-stack
 to v62.5.0 (#2962)

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 helm-dependencies.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/helm-dependencies.yaml b/helm-dependencies.yaml
index db3764a83..4c998d0f1 100644
--- a/helm-dependencies.yaml
+++ b/helm-dependencies.yaml
@@ -57,7 +57,7 @@ dependencies:
     version: 2.41.1
     repository: https://charts.konghq.com
   - name: kube-prometheus-stack
-    version: 62.4.0
+    version: 62.5.0
     repository: https://prometheus-community.github.io/helm-charts
   - name: linkerd2-cni
     version: 30.12.2

From 2891d90b543f813bd255cfe9f757038a17d1eed7 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sat, 7 Sep 2024 16:47:25 +0000
Subject: [PATCH 19/40] fix(charts): update helm release kube-prometheus-stack
 to v62.5.1 (#2963)

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 helm-dependencies.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/helm-dependencies.yaml b/helm-dependencies.yaml
index 4c998d0f1..6856d4a32 100644
--- a/helm-dependencies.yaml
+++ b/helm-dependencies.yaml
@@ -57,7 +57,7 @@ dependencies:
     version: 2.41.1
     repository: https://charts.konghq.com
   - name: kube-prometheus-stack
-    version: 62.5.0
+    version: 62.5.1
     repository: https://prometheus-community.github.io/helm-charts
   - name: linkerd2-cni
     version: 30.12.2

From 25e4e13570d53c6169120fe28752f7a0c9e3a161 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sat, 7 Sep 2024 22:04:07 +0000
Subject: [PATCH 20/40] fix(charts): update helm release memcached to v7.4.15
 (#2964)

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 helm-dependencies.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/helm-dependencies.yaml b/helm-dependencies.yaml
index 6856d4a32..70ee28f2b 100644
--- a/helm-dependencies.yaml
+++ b/helm-dependencies.yaml
@@ -108,7 +108,7 @@ dependencies:
     version: 30.1.0
     repository: https://helm.traefik.io/traefik
   - name: memcached
-    version: 7.4.14
+    version: 7.4.15
     repository: https://charts.bitnami.com/bitnami
   - name: velero
     version: 7.2.1

From e97bc8328963dbfab103e1c6bf3c1cdcaf1a4659 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sun, 8 Sep 2024 09:42:24 +0000
Subject: [PATCH 21/40] feat(charts): update helm release kube-prometheus-stack
 to v62.6.0 (#2965)

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 helm-dependencies.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/helm-dependencies.yaml b/helm-dependencies.yaml
index 70ee28f2b..9784beecd 100644
--- a/helm-dependencies.yaml
+++ b/helm-dependencies.yaml
@@ -57,7 +57,7 @@ dependencies:
     version: 2.41.1
     repository: https://charts.konghq.com
   - name: kube-prometheus-stack
-    version: 62.5.1
+    version: 62.6.0
     repository: https://prometheus-community.github.io/helm-charts
   - name: linkerd2-cni
     version: 30.12.2

From 3f69863f033c7cd02e94d390353d4dc18161e23f Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Mon, 9 Sep 2024 17:29:37 +0000
Subject: [PATCH 22/40] chore(ci): update clowdhaus/terraform-composite-actions
 action to v1.11.0 (#2966)

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 .github/workflows/pre-commit.yml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml
index 093764080..7b2d85a91 100644
--- a/.github/workflows/pre-commit.yml
+++ b/.github/workflows/pre-commit.yml
@@ -22,7 +22,7 @@ jobs:
 
       - name: Get root directories
         id: dirs
-        uses: clowdhaus/terraform-composite-actions/directories@v1.10.0
+        uses: clowdhaus/terraform-composite-actions/directories@v1.11.0
 
   preCommitMinVersions:
     name: Min TF pre-commit
@@ -44,7 +44,7 @@ jobs:
       - name: Pre-commit Terraform ${{ steps.minMax.outputs.minVersion }}
         # Run only validate pre-commit check on min version supported
         if: ${{ matrix.directory !=  '.' }}
-        uses: clowdhaus/terraform-composite-actions/pre-commit@v1.10.0
+        uses: clowdhaus/terraform-composite-actions/pre-commit@v1.11.0
         with:
           terraform-version: ${{ steps.minMax.outputs.minVersion }}
           args: 'terraform_validate --color=always --show-diff-on-failure --files ${{ matrix.directory }}/*'
@@ -52,7 +52,7 @@ jobs:
       - name: Pre-commit Terraform ${{ steps.minMax.outputs.minVersion }}
         # Run only validate pre-commit check on min version supported
         if: ${{ matrix.directory ==  '.' }}
-        uses: clowdhaus/terraform-composite-actions/pre-commit@v1.10.0
+        uses: clowdhaus/terraform-composite-actions/pre-commit@v1.11.0
         with:
           terraform-version: ${{ steps.minMax.outputs.minVersion }}
           args: 'terraform_validate --color=always --show-diff-on-failure --files $(ls *.tf)'
@@ -73,7 +73,7 @@ jobs:
         uses: clowdhaus/terraform-min-max@v1.3.1
 
       - name: Pre-commit Terraform ${{ steps.minMax.outputs.maxVersion }}
-        uses: clowdhaus/terraform-composite-actions/pre-commit@v1.10.0
+        uses: clowdhaus/terraform-composite-actions/pre-commit@v1.11.0
         with:
           terraform-version: ${{ steps.minMax.outputs.maxVersion }}
           terraform-docs-version: ${{ env.TERRAFORM_DOCS_VERSION }}

From 2dc6635e28f1cd264be4a62b484af51f812cc15e Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 10 Sep 2024 00:48:54 +0000
Subject: [PATCH 23/40] fix(charts): update karpenter docker tag to v1.0.2
 (#2967)

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 helm-dependencies.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/helm-dependencies.yaml b/helm-dependencies.yaml
index 9784beecd..454813c3a 100644
--- a/helm-dependencies.yaml
+++ b/helm-dependencies.yaml
@@ -48,7 +48,7 @@ dependencies:
     version: 1.7.2
     repository: https://charts.helm.sh/stable
   - name: karpenter
-    version: 1.0.1
+    version: 1.0.2
     repository: oci://public.ecr.aws/karpenter
   - name: keda
     version: 2.15.1

From 9aae4d3a4fcfd1d7bc1e8825e9140f2f6e9212b9 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 10 Sep 2024 07:40:02 +0000
Subject: [PATCH 24/40] fix(charts): update helm release
 victoria-metrics-k8s-stack to v0.25.16 (#2968)

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 helm-dependencies.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/helm-dependencies.yaml b/helm-dependencies.yaml
index 454813c3a..c0309fba4 100644
--- a/helm-dependencies.yaml
+++ b/helm-dependencies.yaml
@@ -114,7 +114,7 @@ dependencies:
     version: 7.2.1
     repository: https://vmware-tanzu.github.io/helm-charts
   - name: victoria-metrics-k8s-stack
-    version: 0.25.15
+    version: 0.25.16
     repository: https://victoriametrics.github.io/helm-charts/
   - name: yet-another-cloudwatch-exporter
     version: 0.14.0

From 80e06ab6ead49cc166d555e965fe6fc7d0ec9755 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Wed, 11 Sep 2024 17:42:25 +0000
Subject: [PATCH 25/40] fix(charts): update helm release memcached to v7.4.16
 (#2971)

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 helm-dependencies.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/helm-dependencies.yaml b/helm-dependencies.yaml
index c0309fba4..02b674c42 100644
--- a/helm-dependencies.yaml
+++ b/helm-dependencies.yaml
@@ -108,7 +108,7 @@ dependencies:
     version: 30.1.0
     repository: https://helm.traefik.io/traefik
   - name: memcached
-    version: 7.4.15
+    version: 7.4.16
     repository: https://charts.bitnami.com/bitnami
   - name: velero
     version: 7.2.1

From 93230be492a198ac3a91422f930b4df43ec61116 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Wed, 11 Sep 2024 17:45:04 +0000
Subject: [PATCH 26/40] feat(charts): update helm release external-dns to
 v1.15.0 (#2972)

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 helm-dependencies.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/helm-dependencies.yaml b/helm-dependencies.yaml
index 02b674c42..3902d31e7 100644
--- a/helm-dependencies.yaml
+++ b/helm-dependencies.yaml
@@ -33,7 +33,7 @@ dependencies:
     version: 9.37.0
     repository: https://kubernetes.github.io/autoscaler
   - name: external-dns
-    version: 1.14.5
+    version: 1.15.0
     repository: https://kubernetes-sigs.github.io/external-dns/
   - name: flux
     version: 1.13.3

From e092c9866b573e5f140ebfba46cd4b8e56178113 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Thu, 12 Sep 2024 18:35:38 +0000
Subject: [PATCH 27/40] feat(charts): update helm release kube-prometheus-stack
 to v62.7.0 (#2973)

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 helm-dependencies.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/helm-dependencies.yaml b/helm-dependencies.yaml
index 3902d31e7..8be942e3a 100644
--- a/helm-dependencies.yaml
+++ b/helm-dependencies.yaml
@@ -57,7 +57,7 @@ dependencies:
     version: 2.41.1
     repository: https://charts.konghq.com
   - name: kube-prometheus-stack
-    version: 62.6.0
+    version: 62.7.0
     repository: https://prometheus-community.github.io/helm-charts
   - name: linkerd2-cni
     version: 30.12.2

From e52cfcf26d7033e1a1710af0ff7872b34679dcec Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 13 Sep 2024 19:00:59 +0000
Subject: [PATCH 28/40] feat(charts): update helm release aws-ebs-csi-driver to
 v2.35.0 (#2974)

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 helm-dependencies.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/helm-dependencies.yaml b/helm-dependencies.yaml
index 8be942e3a..609f350bc 100644
--- a/helm-dependencies.yaml
+++ b/helm-dependencies.yaml
@@ -9,7 +9,7 @@ dependencies:
     version: 1.4.5
     repository: https://kubernetes-sigs.github.io/secrets-store-csi-driver/charts
   - name: aws-ebs-csi-driver
-    version: 2.34.0
+    version: 2.35.0
     repository: https://kubernetes-sigs.github.io/aws-ebs-csi-driver
   - name: aws-efs-csi-driver
     version: 3.0.8

From 94661e60239fd55f320cfa22028641baba45acd5 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Mon, 16 Sep 2024 20:21:17 +0000
Subject: [PATCH 29/40] fix(charts): update helm release aws-ebs-csi-driver to
 v2.35.1 (#2976)

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 helm-dependencies.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/helm-dependencies.yaml b/helm-dependencies.yaml
index 609f350bc..e14b12c11 100644
--- a/helm-dependencies.yaml
+++ b/helm-dependencies.yaml
@@ -9,7 +9,7 @@ dependencies:
     version: 1.4.5
     repository: https://kubernetes-sigs.github.io/secrets-store-csi-driver/charts
   - name: aws-ebs-csi-driver
-    version: 2.35.0
+    version: 2.35.1
     repository: https://kubernetes-sigs.github.io/aws-ebs-csi-driver
   - name: aws-efs-csi-driver
     version: 3.0.8

From aee6bf17e5d8426618ffa7c35bf392f1aa95e2f9 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Mon, 16 Sep 2024 20:24:19 +0000
Subject: [PATCH 30/40] feat(charts): update helm release k8gb to v0.14.0
 (#2977)

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 helm-dependencies.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/helm-dependencies.yaml b/helm-dependencies.yaml
index e14b12c11..bf205276b 100644
--- a/helm-dependencies.yaml
+++ b/helm-dependencies.yaml
@@ -42,7 +42,7 @@ dependencies:
     version: 4.11.2
     repository: https://kubernetes.github.io/ingress-nginx
   - name: k8gb
-    version: v0.13.0
+    version: v0.14.0
     repository: https://www.k8gb.io
   - name: karma
     version: 1.7.2

From 561d4ed9b74f0c3aa1d88651d40bf9c7328df86b Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 17 Sep 2024 18:21:29 +0000
Subject: [PATCH 31/40] fix(charts): update helm release
 aws-load-balancer-controller to v1.8.3 (#2978)

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 helm-dependencies.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/helm-dependencies.yaml b/helm-dependencies.yaml
index bf205276b..a299a1823 100644
--- a/helm-dependencies.yaml
+++ b/helm-dependencies.yaml
@@ -18,7 +18,7 @@ dependencies:
     version: 0.1.34
     repository: https://aws.github.io/eks-charts
   - name: aws-load-balancer-controller
-    version: 1.8.2
+    version: 1.8.3
     repository: https://aws.github.io/eks-charts
   - name: aws-node-termination-handler
     version: 0.21.0

From 93fd01f1e4b827e67badca823d7d6fb7ba27ae8a Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 17 Sep 2024 23:03:19 +0000
Subject: [PATCH 32/40] fix(charts): update helm release promtail to v6.16.6
 (#2980)

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 helm-dependencies.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/helm-dependencies.yaml b/helm-dependencies.yaml
index a299a1823..d81f0c182 100644
--- a/helm-dependencies.yaml
+++ b/helm-dependencies.yaml
@@ -75,7 +75,7 @@ dependencies:
     version: 6.12.0
     repository: https://grafana.github.io/helm-charts
   - name: promtail
-    version: 6.16.5
+    version: 6.16.6
     repository: https://grafana.github.io/helm-charts
   - name: metrics-server
     version: 3.12.1

From 08b2904d62f1021eb80da7df494f539505e9e100 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Thu, 19 Sep 2024 11:30:50 +0000
Subject: [PATCH 33/40] fix(charts): update helm release tigera-operator to
 v3.28.2 (#2981)

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 helm-dependencies.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/helm-dependencies.yaml b/helm-dependencies.yaml
index d81f0c182..e2be6ca30 100644
--- a/helm-dependencies.yaml
+++ b/helm-dependencies.yaml
@@ -102,7 +102,7 @@ dependencies:
     version: 15.7.25
     repository: https://charts.bitnami.com/bitnami
   - name: tigera-operator
-    version: v3.28.1
+    version: v3.28.2
     repository: https://docs.projectcalico.org/charts
   - name: traefik
     version: 30.1.0

From 6b04636ff8c3513e8e5b9f83899b031d180d1869 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 20 Sep 2024 09:36:34 +0200
Subject: [PATCH 34/40] feat(charts): update helm release traefik to v31
 (#2950)

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 helm-dependencies.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/helm-dependencies.yaml b/helm-dependencies.yaml
index e2be6ca30..848511ba0 100644
--- a/helm-dependencies.yaml
+++ b/helm-dependencies.yaml
@@ -105,7 +105,7 @@ dependencies:
     version: v3.28.2
     repository: https://docs.projectcalico.org/charts
   - name: traefik
-    version: 30.1.0
+    version: 31.1.0
     repository: https://helm.traefik.io/traefik
   - name: memcached
     version: 7.4.16

From 290a1414c0f9317c64c0faf739c029dfb818827d Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 20 Sep 2024 07:39:16 +0000
Subject: [PATCH 35/40] fix(charts): update helm release
 victoria-metrics-k8s-stack to v0.25.17 (#2982)

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 helm-dependencies.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/helm-dependencies.yaml b/helm-dependencies.yaml
index 848511ba0..39f4bdec9 100644
--- a/helm-dependencies.yaml
+++ b/helm-dependencies.yaml
@@ -114,7 +114,7 @@ dependencies:
     version: 7.2.1
     repository: https://vmware-tanzu.github.io/helm-charts
   - name: victoria-metrics-k8s-stack
-    version: 0.25.16
+    version: 0.25.17
     repository: https://victoriametrics.github.io/helm-charts/
   - name: yet-another-cloudwatch-exporter
     version: 0.14.0

From 15da5996a47bdd39c57e766080af6bc8da5d5d89 Mon Sep 17 00:00:00 2001
From: rayanebel <rayane.bellazaar@gmail.com>
Date: Fri, 20 Sep 2024 09:58:20 +0200
Subject: [PATCH 36/40] feat: add a new velero module on scaleway (#2975)

* feat: add velero module on scaleway

Signed-off-by: Rayane Bellazaar <rayane.bellazaar@kiln.fi>

* fix: deprecated acl attribute on scaleway buckets

Signed-off-by: Rayane Bellazaar <rayane.bellazaar@kiln.fi>

* fix: remove duplicate variables

Signed-off-by: Rayane Bellazaar <rayane.bellazaar@kiln.fi>

* docs: lint and update docs

Signed-off-by: Rayane Bellazaar <rayane.bellazaar@kiln.fi>

---------

Signed-off-by: Rayane Bellazaar <rayane.bellazaar@kiln.fi>
Co-authored-by: Rayane Bellazaar <rayane.bellazaar@kiln.fi>
---
 README.md                              |   1 +
 modules/aws/variables-aws.tf           |   6 -
 modules/azure/README.md                |   1 +
 modules/google/variables-google.tf     |   6 -
 modules/scaleway/README.md             |  12 ++
 modules/scaleway/kube-prometheus.tf    |   7 +-
 modules/scaleway/locals-scaleway.tf    |   3 +
 modules/scaleway/loki-stack.tf         |   7 +-
 modules/scaleway/thanos.tf             |   7 +-
 modules/scaleway/variables-scaleway.tf |   6 +
 modules/scaleway/velero.tf             | 193 +++++++++++++++++++++++++
 variables.tf                           |   6 +
 12 files changed, 240 insertions(+), 15 deletions(-)
 create mode 100644 modules/scaleway/velero.tf

diff --git a/README.md b/README.md
index 19c4e6048..e7def03f5 100644
--- a/README.md
+++ b/README.md
@@ -313,6 +313,7 @@ No modules.
 | <a name="input_thanos-tls-querier"></a> [thanos-tls-querier](#input\_thanos-tls-querier) | Customize thanos chart, see `thanos.tf` for supported values | `any` | `{}` | no |
 | <a name="input_tigera-operator"></a> [tigera-operator](#input\_tigera-operator) | Customize tigera-operator chart, see `tigera-operator.tf` for supported values | `any` | `{}` | no |
 | <a name="input_traefik"></a> [traefik](#input\_traefik) | Customize traefik chart, see `traefik.tf` for supported values | `any` | `{}` | no |
+| <a name="input_velero"></a> [velero](#input\_velero) | Customize velero chart, see `velero.tf` for supported values | `any` | `{}` | no |
 | <a name="input_victoria-metrics-k8s-stack"></a> [victoria-metrics-k8s-stack](#input\_victoria-metrics-k8s-stack) | Customize Victoria Metrics chart, see `victoria-metrics-k8s-stack.tf` for supported values | `any` | `{}` | no |
 
 ## Outputs
diff --git a/modules/aws/variables-aws.tf b/modules/aws/variables-aws.tf
index f342dd765..5365cd601 100644
--- a/modules/aws/variables-aws.tf
+++ b/modules/aws/variables-aws.tf
@@ -82,12 +82,6 @@ variable "tags" {
   default     = {}
 }
 
-variable "velero" {
-  description = "Customize velero chart, see `velero.tf` for supported values"
-  type        = any
-  default     = {}
-}
-
 variable "yet-another-cloudwatch-exporter" {
   description = "Customize yet-another-cloudwatch-exporter chart, see `yet-another-cloudwatch-exporter.tf` for supported values"
   type        = any
diff --git a/modules/azure/README.md b/modules/azure/README.md
index 03ea67d9f..ef8bb9852 100644
--- a/modules/azure/README.md
+++ b/modules/azure/README.md
@@ -223,6 +223,7 @@ No modules.
 | <a name="input_thanos-tls-querier"></a> [thanos-tls-querier](#input\_thanos-tls-querier) | Customize thanos chart, see `thanos.tf` for supported values | `any` | `{}` | no |
 | <a name="input_tigera-operator"></a> [tigera-operator](#input\_tigera-operator) | Customize tigera-operator chart, see `tigera-operator.tf` for supported values | `any` | `{}` | no |
 | <a name="input_traefik"></a> [traefik](#input\_traefik) | Customize traefik chart, see `traefik.tf` for supported values | `any` | `{}` | no |
+| <a name="input_velero"></a> [velero](#input\_velero) | Customize velero chart, see `velero.tf` for supported values | `any` | `{}` | no |
 | <a name="input_victoria-metrics-k8s-stack"></a> [victoria-metrics-k8s-stack](#input\_victoria-metrics-k8s-stack) | Customize Victoria Metrics chart, see `victoria-metrics-k8s-stack.tf` for supported values | `any` | `{}` | no |
 
 ## Outputs
diff --git a/modules/google/variables-google.tf b/modules/google/variables-google.tf
index 64b40e86f..86f627292 100644
--- a/modules/google/variables-google.tf
+++ b/modules/google/variables-google.tf
@@ -33,9 +33,3 @@ variable "tags" {
   type        = map(any)
   default     = {}
 }
-
-variable "velero" {
-  description = "Customize velero chart, see `velero.tf` for supported values"
-  type        = any
-  default     = {}
-}
diff --git a/modules/scaleway/README.md b/modules/scaleway/README.md
index c20eb6b48..9def2c22b 100644
--- a/modules/scaleway/README.md
+++ b/modules/scaleway/README.md
@@ -82,6 +82,7 @@ No modules.
 | [helm_release.thanos-storegateway](https://registry.terraform.io/providers/hashicorp/helm/latest/docs/resources/release) | resource |
 | [helm_release.thanos-tls-querier](https://registry.terraform.io/providers/hashicorp/helm/latest/docs/resources/release) | resource |
 | [helm_release.traefik](https://registry.terraform.io/providers/hashicorp/helm/latest/docs/resources/release) | resource |
+| [helm_release.velero](https://registry.terraform.io/providers/hashicorp/helm/latest/docs/resources/release) | resource |
 | [helm_release.victoria-metrics-k8s-stack](https://registry.terraform.io/providers/hashicorp/helm/latest/docs/resources/release) | resource |
 | [kubectl_manifest.cert-manager_cluster_issuers](https://registry.terraform.io/providers/alekc/kubectl/latest/docs/resources/manifest) | resource |
 | [kubectl_manifest.csi-external-snapshotter](https://registry.terraform.io/providers/alekc/kubectl/latest/docs/resources/manifest) | resource |
@@ -111,6 +112,7 @@ No modules.
 | [kubernetes_namespace.sealed-secrets](https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/namespace) | resource |
 | [kubernetes_namespace.thanos](https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/namespace) | resource |
 | [kubernetes_namespace.traefik](https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/namespace) | resource |
+| [kubernetes_namespace.velero](https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/namespace) | resource |
 | [kubernetes_namespace.victoria-metrics-k8s-stack](https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/namespace) | resource |
 | [kubernetes_network_policy.admiralty_allow_namespace](https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/network_policy) | resource |
 | [kubernetes_network_policy.admiralty_default_deny](https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/network_policy) | resource |
@@ -168,6 +170,9 @@ No modules.
 | [kubernetes_network_policy.traefik_allow_monitoring](https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/network_policy) | resource |
 | [kubernetes_network_policy.traefik_allow_namespace](https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/network_policy) | resource |
 | [kubernetes_network_policy.traefik_default_deny](https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/network_policy) | resource |
+| [kubernetes_network_policy.velero_allow_monitoring](https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/network_policy) | resource |
+| [kubernetes_network_policy.velero_allow_namespace](https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/network_policy) | resource |
+| [kubernetes_network_policy.velero_default_deny](https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/network_policy) | resource |
 | [kubernetes_network_policy.victoria-metrics-k8s-stack_allow_control_plane](https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/network_policy) | resource |
 | [kubernetes_network_policy.victoria-metrics-k8s-stack_allow_ingress](https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/network_policy) | resource |
 | [kubernetes_network_policy.victoria-metrics-k8s-stack_allow_namespace](https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/network_policy) | resource |
@@ -186,6 +191,11 @@ No modules.
 | [scaleway_object_bucket.kube-prometheus-stack_thanos_bucket](https://registry.terraform.io/providers/scaleway/scaleway/latest/docs/resources/object_bucket) | resource |
 | [scaleway_object_bucket.loki_bucket](https://registry.terraform.io/providers/scaleway/scaleway/latest/docs/resources/object_bucket) | resource |
 | [scaleway_object_bucket.thanos_bucket](https://registry.terraform.io/providers/scaleway/scaleway/latest/docs/resources/object_bucket) | resource |
+| [scaleway_object_bucket.velero_bucket](https://registry.terraform.io/providers/scaleway/scaleway/latest/docs/resources/object_bucket) | resource |
+| [scaleway_object_bucket_acl.kube-prometheus-stack_bucket_acl](https://registry.terraform.io/providers/scaleway/scaleway/latest/docs/resources/object_bucket_acl) | resource |
+| [scaleway_object_bucket_acl.loki_bucket_acl](https://registry.terraform.io/providers/scaleway/scaleway/latest/docs/resources/object_bucket_acl) | resource |
+| [scaleway_object_bucket_acl.thanos_bucket_acl](https://registry.terraform.io/providers/scaleway/scaleway/latest/docs/resources/object_bucket_acl) | resource |
+| [scaleway_object_bucket_acl.velero_bucket_acl](https://registry.terraform.io/providers/scaleway/scaleway/latest/docs/resources/object_bucket_acl) | resource |
 | [time_sleep.cert-manager_sleep](https://registry.terraform.io/providers/hashicorp/time/latest/docs/resources/sleep) | resource |
 | [tls_cert_request.promtail-csr](https://registry.terraform.io/providers/hashicorp/tls/latest/docs/resources/cert_request) | resource |
 | [tls_cert_request.thanos-tls-querier-cert-csr](https://registry.terraform.io/providers/hashicorp/tls/latest/docs/resources/cert_request) | resource |
@@ -250,12 +260,14 @@ No modules.
 | <a name="input_scaleway"></a> [scaleway](#input\_scaleway) | Scaleway provider customization | `any` | `{}` | no |
 | <a name="input_sealed-secrets"></a> [sealed-secrets](#input\_sealed-secrets) | Customize sealed-secrets chart, see `sealed-secrets.tf` for supported values | `any` | `{}` | no |
 | <a name="input_secrets-store-csi-driver"></a> [secrets-store-csi-driver](#input\_secrets-store-csi-driver) | Customize secrets-store-csi-driver chart, see `secrets-store-csi-driver.tf` for supported values | `any` | `{}` | no |
+| <a name="input_tags"></a> [tags](#input\_tags) | Map of tags for Scaleway resources | `map(any)` | `{}` | no |
 | <a name="input_thanos"></a> [thanos](#input\_thanos) | Customize thanos chart, see `thanos.tf` for supported values | `any` | `{}` | no |
 | <a name="input_thanos-memcached"></a> [thanos-memcached](#input\_thanos-memcached) | Customize thanos chart, see `thanos.tf` for supported values | `any` | `{}` | no |
 | <a name="input_thanos-storegateway"></a> [thanos-storegateway](#input\_thanos-storegateway) | Customize thanos chart, see `thanos.tf` for supported values | `any` | `{}` | no |
 | <a name="input_thanos-tls-querier"></a> [thanos-tls-querier](#input\_thanos-tls-querier) | Customize thanos chart, see `thanos.tf` for supported values | `any` | `{}` | no |
 | <a name="input_tigera-operator"></a> [tigera-operator](#input\_tigera-operator) | Customize tigera-operator chart, see `tigera-operator.tf` for supported values | `any` | `{}` | no |
 | <a name="input_traefik"></a> [traefik](#input\_traefik) | Customize traefik chart, see `traefik.tf` for supported values | `any` | `{}` | no |
+| <a name="input_velero"></a> [velero](#input\_velero) | Customize velero chart, see `velero.tf` for supported values | `any` | `{}` | no |
 | <a name="input_victoria-metrics-k8s-stack"></a> [victoria-metrics-k8s-stack](#input\_victoria-metrics-k8s-stack) | Customize Victoria Metrics chart, see `victoria-metrics-k8s-stack.tf` for supported values | `any` | `{}` | no |
 
 ## Outputs
diff --git a/modules/scaleway/kube-prometheus.tf b/modules/scaleway/kube-prometheus.tf
index 11abc563f..cabfa7ec9 100644
--- a/modules/scaleway/kube-prometheus.tf
+++ b/modules/scaleway/kube-prometheus.tf
@@ -288,7 +288,12 @@ resource "kubernetes_namespace" "kube-prometheus-stack" {
 resource "scaleway_object_bucket" "kube-prometheus-stack_thanos_bucket" {
   count = local.kube-prometheus-stack["enabled"] && local.kube-prometheus-stack["thanos_sidecar_enabled"] && local.kube-prometheus-stack["thanos_create_bucket"] ? 1 : 0
   name  = local.kube-prometheus-stack["thanos_bucket"]
-  acl   = "private"
+}
+
+resource "scaleway_object_bucket_acl" "kube-prometheus-stack_bucket_acl" {
+  count  = local.kube-prometheus-stack["enabled"] && local.kube-prometheus-stack["thanos_sidecar_enabled"] && local.kube-prometheus-stack["thanos_create_bucket"] ? 1 : 0
+  bucket = scaleway_object_bucket.kube-prometheus-stack_thanos_bucket.0.id
+  acl    = "private"
 }
 
 resource "random_string" "grafana_password" {
diff --git a/modules/scaleway/locals-scaleway.tf b/modules/scaleway/locals-scaleway.tf
index de7550a82..543cfacf9 100644
--- a/modules/scaleway/locals-scaleway.tf
+++ b/modules/scaleway/locals-scaleway.tf
@@ -12,4 +12,7 @@ locals {
     var.scaleway
   )
 
+  tags = var.tags
+
+
 }
diff --git a/modules/scaleway/loki-stack.tf b/modules/scaleway/loki-stack.tf
index ef333f528..4d508acaf 100644
--- a/modules/scaleway/loki-stack.tf
+++ b/modules/scaleway/loki-stack.tf
@@ -233,7 +233,12 @@ resource "kubernetes_secret" "loki-stack-ca" {
 resource "scaleway_object_bucket" "loki_bucket" {
   count = local.loki-stack["enabled"] && local.loki-stack["create_bucket"] ? 1 : 0
   name  = local.loki-stack["bucket"]
-  acl   = "private"
+}
+
+resource "scaleway_object_bucket_acl" "loki_bucket_acl" {
+  count  = local.loki-stack["enabled"] && local.loki-stack["create_bucket"] ? 1 : 0
+  bucket = scaleway_object_bucket.loki_bucket.0.id
+  acl    = "private"
 }
 
 resource "tls_private_key" "promtail-key" {
diff --git a/modules/scaleway/thanos.tf b/modules/scaleway/thanos.tf
index 9df662700..3f5ac6b76 100644
--- a/modules/scaleway/thanos.tf
+++ b/modules/scaleway/thanos.tf
@@ -211,7 +211,12 @@ locals {
 resource "scaleway_object_bucket" "thanos_bucket" {
   count = local.thanos["enabled"] && local.thanos["create_bucket"] ? 1 : 0
   name  = local.thanos["bucket"]
-  acl   = "private"
+}
+
+resource "scaleway_object_bucket_acl" "thanos_bucket_acl" {
+  count  = local.thanos["enabled"] && local.thanos["create_bucket"] ? 1 : 0
+  bucket = scaleway_object_bucket.thanos_bucket.0.id
+  acl    = "private"
 }
 
 resource "kubernetes_namespace" "thanos" {
diff --git a/modules/scaleway/variables-scaleway.tf b/modules/scaleway/variables-scaleway.tf
index f455b463d..414ed9f48 100644
--- a/modules/scaleway/variables-scaleway.tf
+++ b/modules/scaleway/variables-scaleway.tf
@@ -15,3 +15,9 @@ variable "cert-manager_scaleway_webhook_dns" {
   type        = any
   default     = {}
 }
+
+variable "tags" {
+  description = "Map of tags for Scaleway resources"
+  type        = map(any)
+  default     = {}
+}
diff --git a/modules/scaleway/velero.tf b/modules/scaleway/velero.tf
new file mode 100644
index 000000000..908ab95ed
--- /dev/null
+++ b/modules/scaleway/velero.tf
@@ -0,0 +1,193 @@
+locals {
+  velero = merge(
+    local.helm_defaults,
+    {
+      name                   = local.helm_dependencies[index(local.helm_dependencies.*.name, "velero")].name
+      chart                  = local.helm_dependencies[index(local.helm_dependencies.*.name, "velero")].name
+      repository             = local.helm_dependencies[index(local.helm_dependencies.*.name, "velero")].repository
+      chart_version          = local.helm_dependencies[index(local.helm_dependencies.*.name, "velero")].version
+      namespace              = "velero"
+      service_account_name   = "velero"
+      enabled                = false
+      create_bucket          = true
+      bucket                 = "${var.cluster-name}-velero"
+      bucket_force_destroy   = false
+      default_network_policy = true
+      name_prefix            = "${var.cluster-name}-velero"
+      secret_name            = "velero-scaleway-credentials"
+    },
+    var.velero
+  )
+
+  values_velero = <<VALUES
+metrics:
+  serviceMonitor:
+    enabled: ${local.kube-prometheus-stack.enabled || local.victoria-metrics-k8s-stack.enabled}
+configuration:
+  namespace: ${local.velero.namespace}
+  backupStorageLocation:
+    - name: aws
+      provider: aws
+      bucket: ${local.velero.bucket}
+      default: true
+deployNodeAgent: true
+nodeAgent:
+  tolerations:
+    - effect: NoSchedule
+      operator: Exists
+    - key: CriticalAddonsOnly
+      operator: Exists
+    - effect: NoExecute
+      operator: Exists
+snapshotsEnabled: false
+serviceAccount:
+  server:
+    name: ${local.velero.service_account_name}
+priorityClassName: ${local.priority-class-ds.create ? kubernetes_priority_class.kubernetes_addons_ds[0].metadata[0].name : ""}
+credentials:
+  useSecret: true
+  existingSecret: ${local.velero.secret_name}
+initContainers:
+   - name: velero-plugin-for-aws
+     image: velero/velero-plugin-for-aws:v1.10.1
+     imagePullPolicy: IfNotPresent
+     volumeMounts:
+       - mountPath: /target
+         name: plugins
+VALUES
+}
+
+resource "scaleway_object_bucket" "velero_bucket" {
+  count = local.velero.enabled && local.velero.create_bucket ? 1 : 0
+  name  = local.velero.bucket
+
+  versioning {
+    enabled = true
+  }
+
+  force_destroy = local.velero.bucket_force_destroy
+
+  tags = local.tags
+}
+
+resource "scaleway_object_bucket_acl" "velero_bucket_acl" {
+  count  = local.velero.enabled && local.velero.create_bucket ? 1 : 0
+  bucket = scaleway_object_bucket.velero_bucket.0.id
+  acl    = "private"
+}
+
+resource "kubernetes_namespace" "velero" {
+  count = local.velero.enabled ? 1 : 0
+
+  metadata {
+    labels = {
+      name = local.velero.namespace
+    }
+
+    name = local.velero.namespace
+  }
+}
+
+resource "helm_release" "velero" {
+  count                 = local.velero.enabled ? 1 : 0
+  repository            = local.velero.repository
+  name                  = local.velero.name
+  chart                 = local.velero.chart
+  version               = local.velero.chart_version
+  timeout               = local.velero.timeout
+  force_update          = local.velero.force_update
+  recreate_pods         = local.velero.recreate_pods
+  wait                  = local.velero.wait
+  atomic                = local.velero.atomic
+  cleanup_on_fail       = local.velero.cleanup_on_fail
+  dependency_update     = local.velero.dependency_update
+  disable_crd_hooks     = local.velero.disable_crd_hooks
+  disable_webhooks      = local.velero.disable_webhooks
+  render_subchart_notes = local.velero.render_subchart_notes
+  replace               = local.velero.replace
+  reset_values          = local.velero.reset_values
+  reuse_values          = local.velero.reuse_values
+  skip_crds             = local.velero.skip_crds
+  verify                = local.velero.verify
+  values = compact([
+    local.values_velero,
+    local.velero.extra_values
+  ])
+  namespace = kubernetes_namespace.velero.*.metadata.0.name[count.index]
+
+  depends_on = [
+    kubectl_manifest.prometheus-operator_crds
+  ]
+}
+
+resource "kubernetes_network_policy" "velero_default_deny" {
+  count = local.velero.enabled && local.velero.default_network_policy ? 1 : 0
+
+  metadata {
+    name      = "${kubernetes_namespace.velero.*.metadata.0.name[count.index]}-default-deny"
+    namespace = kubernetes_namespace.velero.*.metadata.0.name[count.index]
+  }
+
+  spec {
+    pod_selector {
+    }
+    policy_types = ["Ingress"]
+  }
+}
+
+resource "kubernetes_network_policy" "velero_allow_namespace" {
+  count = local.velero.enabled && local.velero.default_network_policy ? 1 : 0
+
+  metadata {
+    name      = "${kubernetes_namespace.velero.*.metadata.0.name[count.index]}-allow-namespace"
+    namespace = kubernetes_namespace.velero.*.metadata.0.name[count.index]
+  }
+
+  spec {
+    pod_selector {
+    }
+
+    ingress {
+      from {
+        namespace_selector {
+          match_labels = {
+            name = kubernetes_namespace.velero.*.metadata.0.name[count.index]
+          }
+        }
+      }
+    }
+
+    policy_types = ["Ingress"]
+  }
+}
+
+resource "kubernetes_network_policy" "velero_allow_monitoring" {
+  count = local.velero.enabled && local.velero.default_network_policy ? 1 : 0
+
+  metadata {
+    name      = "${kubernetes_namespace.velero.*.metadata.0.name[count.index]}-allow-monitoring"
+    namespace = kubernetes_namespace.velero.*.metadata.0.name[count.index]
+  }
+
+  spec {
+    pod_selector {
+    }
+
+    ingress {
+      ports {
+        port     = "8085"
+        protocol = "TCP"
+      }
+
+      from {
+        namespace_selector {
+          match_labels = {
+            "${local.labels_prefix}/component" = "monitoring"
+          }
+        }
+      }
+    }
+
+    policy_types = ["Ingress"]
+  }
+}
diff --git a/variables.tf b/variables.tf
index 01679a804..66575f67f 100644
--- a/variables.tf
+++ b/variables.tf
@@ -231,3 +231,9 @@ variable "reloader" {
   type        = any
   default     = {}
 }
+
+variable "velero" {
+  description = "Customize velero chart, see `velero.tf` for supported values"
+  type        = any
+  default     = {}
+}

From 9464f07bb9963ce1f57eebb682c630274a942f06 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 20 Sep 2024 10:41:25 +0200
Subject: [PATCH 37/40] feat(tf): update terraform
 terraform-google-modules/kms/google to v3 (#2958)

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 modules/google/kube-prometheus.tf | 2 +-
 modules/google/loki-stack.tf      | 2 +-
 modules/google/thanos.tf          | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/modules/google/kube-prometheus.tf b/modules/google/kube-prometheus.tf
index 37fa6331d..3c708e38d 100644
--- a/modules/google/kube-prometheus.tf
+++ b/modules/google/kube-prometheus.tf
@@ -315,7 +315,7 @@ module "kube-prometheus-stack_grafana-iam-member" {
 module "kube-prometheus-stack_thanos_kms_bucket" {
   count   = local.kube-prometheus-stack["enabled"] && local.kube-prometheus-stack["thanos_create_bucket"] ? 1 : 0
   source  = "terraform-google-modules/kms/google"
-  version = "~> 2.2"
+  version = "~> 3.0"
 
   project_id = var.project_id
   location   = local.kube-prometheus-stack["thanos_kms_bucket_location"]
diff --git a/modules/google/loki-stack.tf b/modules/google/loki-stack.tf
index f4cd37033..9518d8677 100644
--- a/modules/google/loki-stack.tf
+++ b/modules/google/loki-stack.tf
@@ -162,7 +162,7 @@ resource "helm_release" "loki-stack" {
 module "loki-stack_kms_bucket" {
   count   = local.loki-stack["enabled"] && local.loki-stack["create_bucket"] ? 1 : 0
   source  = "terraform-google-modules/kms/google"
-  version = "~> 2.2"
+  version = "~> 3.0"
 
   project_id = var.project_id
   location   = local.loki-stack["kms_bucket_location"]
diff --git a/modules/google/thanos.tf b/modules/google/thanos.tf
index 55a1d62f7..bf5eb47ef 100644
--- a/modules/google/thanos.tf
+++ b/modules/google/thanos.tf
@@ -267,7 +267,7 @@ module "thanos_bucket" {
 module "thanos_kms_bucket" {
   count   = local.thanos["enabled"] && local.thanos["create_bucket"] ? 1 : 0
   source  = "terraform-google-modules/kms/google"
-  version = "~> 2.2"
+  version = "~> 3.0"
 
   project_id = var.project_id
   location   = local.thanos["kms_bucket_location"]

From a0c91386a42411bf7deafc882ee2ee0c437e7b5d Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 20 Sep 2024 10:41:34 +0200
Subject: [PATCH 38/40] feat(tf): update terraform
 terraform-google-modules/kubernetes-engine/google to v33 (#2969)

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 modules/google/cert-manager.tf        | 2 +-
 modules/google/external-dns.tf        | 2 +-
 modules/google/kube-prometheus.tf     | 4 ++--
 modules/google/loki-stack.tf          | 2 +-
 modules/google/thanos-storegateway.tf | 2 +-
 modules/google/thanos.tf              | 6 +++---
 6 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/modules/google/cert-manager.tf b/modules/google/cert-manager.tf
index bbae8e4f7..cc84d6065 100644
--- a/modules/google/cert-manager.tf
+++ b/modules/google/cert-manager.tf
@@ -57,7 +57,7 @@ VALUES
 module "cert_manager_workload_identity" {
   count               = local.cert-manager.create_iam_resources && local.cert-manager.enabled ? 1 : 0
   source              = "terraform-google-modules/kubernetes-engine/google//modules/workload-identity"
-  version             = "~> 32.0.0"
+  version             = "~> 33.0.0"
   name                = local.cert-manager.service_account_name
   namespace           = local.cert-manager.namespace
   project_id          = local.cert-manager.project_id
diff --git a/modules/google/external-dns.tf b/modules/google/external-dns.tf
index bef83b4b9..59b040799 100644
--- a/modules/google/external-dns.tf
+++ b/modules/google/external-dns.tf
@@ -55,7 +55,7 @@ locals {
 # to be allowed to use the workload identity on GKE.
 module "external_dns_workload_identity" {
   source  = "terraform-google-modules/kubernetes-engine/google//modules/workload-identity"
-  version = "~> 32.0.0"
+  version = "~> 33.0.0"
 
   for_each = { for k, v in local.external-dns : k => v if v.enabled && v.create_iam_resources }
 
diff --git a/modules/google/kube-prometheus.tf b/modules/google/kube-prometheus.tf
index 3c708e38d..7233c1b4c 100644
--- a/modules/google/kube-prometheus.tf
+++ b/modules/google/kube-prometheus.tf
@@ -255,7 +255,7 @@ VALUES
 module "iam_assumable_sa_kube-prometheus-stack_grafana" {
   count               = local.kube-prometheus-stack["enabled"] ? 1 : 0
   source              = "terraform-google-modules/kubernetes-engine/google//modules/workload-identity"
-  version             = "~> 32.0"
+  version             = "~> 33.0"
   namespace           = local.kube-prometheus-stack["namespace"]
   project_id          = var.project_id
   name                = local.kube-prometheus-stack["grafana_service_account_name"]
@@ -265,7 +265,7 @@ module "iam_assumable_sa_kube-prometheus-stack_grafana" {
 module "iam_assumable_sa_kube-prometheus-stack_thanos" {
   count               = local.kube-prometheus-stack["enabled"] && local.kube-prometheus-stack["thanos_sidecar_enabled"] ? 1 : 0
   source              = "terraform-google-modules/kubernetes-engine/google//modules/workload-identity"
-  version             = "~> 32.0"
+  version             = "~> 33.0"
   namespace           = local.kube-prometheus-stack["namespace"]
   project_id          = var.project_id
   name                = "${local.kube-prometheus-stack["name_prefix"]}-thanos"
diff --git a/modules/google/loki-stack.tf b/modules/google/loki-stack.tf
index 9518d8677..31ea6e81d 100644
--- a/modules/google/loki-stack.tf
+++ b/modules/google/loki-stack.tf
@@ -66,7 +66,7 @@ locals {
 module "iam_assumable_sa_loki-stack" {
   count      = local.loki-stack["enabled"] ? 1 : 0
   source     = "terraform-google-modules/kubernetes-engine/google//modules/workload-identity"
-  version    = "~> 32.0"
+  version    = "~> 33.0"
   namespace  = local.loki-stack["namespace"]
   project_id = var.project_id
   name       = local.loki-stack["name"]
diff --git a/modules/google/thanos-storegateway.tf b/modules/google/thanos-storegateway.tf
index ffe6a18e9..fa8d5f14b 100644
--- a/modules/google/thanos-storegateway.tf
+++ b/modules/google/thanos-storegateway.tf
@@ -58,7 +58,7 @@ locals {
 module "iam_assumable_sa_thanos-storegateway" {
   for_each   = local.thanos-storegateway
   source     = "terraform-google-modules/kubernetes-engine/google//modules/workload-identity"
-  version    = "~> 32.0"
+  version    = "~> 33.0"
   namespace  = each.value["namespace"]
   project_id = data.google_project.current.id
   name       = "${each.value["name_prefix"]}-${each.key}"
diff --git a/modules/google/thanos.tf b/modules/google/thanos.tf
index bf5eb47ef..e77f50fa6 100644
--- a/modules/google/thanos.tf
+++ b/modules/google/thanos.tf
@@ -224,7 +224,7 @@ locals {
 module "iam_assumable_sa_thanos" {
   count      = local.thanos["enabled"] ? 1 : 0
   source     = "terraform-google-modules/kubernetes-engine/google//modules/workload-identity"
-  version    = "~> 32.0"
+  version    = "~> 33.0"
   namespace  = local.thanos["namespace"]
   project_id = var.project_id
   name       = local.thanos["name"]
@@ -233,7 +233,7 @@ module "iam_assumable_sa_thanos" {
 module "iam_assumable_sa_thanos-compactor" {
   count      = local.thanos["enabled"] ? 1 : 0
   source     = "terraform-google-modules/kubernetes-engine/google//modules/workload-identity"
-  version    = "~> 32.0"
+  version    = "~> 33.0"
   namespace  = local.thanos["namespace"]
   project_id = var.project_id
   name       = "${local.thanos["name"]}-compactor"
@@ -242,7 +242,7 @@ module "iam_assumable_sa_thanos-compactor" {
 module "iam_assumable_sa_thanos-sg" {
   count      = local.thanos["enabled"] ? 1 : 0
   source     = "terraform-google-modules/kubernetes-engine/google//modules/workload-identity"
-  version    = "~> 32.0"
+  version    = "~> 33.0"
   namespace  = local.thanos["namespace"]
   project_id = var.project_id
   name       = "${local.thanos["name"]}-sg"

From e00ef2d84af314a98be6cbf926f881324bf135ae Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 20 Sep 2024 10:41:45 +0200
Subject: [PATCH 39/40] feat(tf): update terraform
 terraform-google-modules/iam/google to v8 (#2979)

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 modules/google/kube-prometheus.tf     | 2 +-
 modules/google/loki-stack.tf          | 2 +-
 modules/google/thanos-storegateway.tf | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/modules/google/kube-prometheus.tf b/modules/google/kube-prometheus.tf
index 7233c1b4c..d5a07f0cc 100644
--- a/modules/google/kube-prometheus.tf
+++ b/modules/google/kube-prometheus.tf
@@ -301,7 +301,7 @@ resource "google_storage_bucket_iam_member" "kube_prometheus_stack_thanos_bucket
 module "kube-prometheus-stack_grafana-iam-member" {
   count   = local.kube-prometheus-stack["enabled"] ? 1 : 0
   source  = "terraform-google-modules/iam/google//modules/member_iam"
-  version = "~> 7.6"
+  version = "~> 8.0"
 
   service_account_address = module.iam_assumable_sa_kube-prometheus-stack_grafana[0].gcp_service_account_email
   project_id              = var.project_id
diff --git a/modules/google/loki-stack.tf b/modules/google/loki-stack.tf
index 31ea6e81d..e730b0001 100644
--- a/modules/google/loki-stack.tf
+++ b/modules/google/loki-stack.tf
@@ -75,7 +75,7 @@ module "iam_assumable_sa_loki-stack" {
 module "loki-stack_bucket_iam" {
   count   = local.loki-stack["enabled"] ? 1 : 0
   source  = "terraform-google-modules/iam/google//modules/storage_buckets_iam"
-  version = "~> 7.6"
+  version = "~> 8.0"
 
   mode            = "additive"
   storage_buckets = [local.loki-stack["bucket"]]
diff --git a/modules/google/thanos-storegateway.tf b/modules/google/thanos-storegateway.tf
index fa8d5f14b..0d735574d 100644
--- a/modules/google/thanos-storegateway.tf
+++ b/modules/google/thanos-storegateway.tf
@@ -68,7 +68,7 @@ module "iam_assumable_sa_thanos-storegateway" {
 module "thanos-storegateway_bucket_iam" {
   for_each = local.thanos-storegateway
   source   = "terraform-google-modules/iam/google//modules/storage_buckets_iam"
-  version  = "~> 7.6"
+  version  = "~> 8.0"
 
   mode            = "additive"
   storage_buckets = [each.value["bucket"]]

From 4c32ba2e71c50a97cf3acfcb4ecdb04721b9c254 Mon Sep 17 00:00:00 2001
From: Kevin Lefevre <archi@kiln.fi>
Date: Fri, 20 Sep 2024 10:43:30 +0200
Subject: [PATCH 40/40] chore: update pre-commits & docs

Signed-off-by: Kevin Lefevre <archi@kiln.fi>
---
 .pre-commit-config.yaml    |  4 ++--
 README.md                  |  4 ++--
 modules/aws/README.md      |  4 ++--
 modules/azure/README.md    |  4 ++--
 modules/google/README.md   | 34 +++++++++++++++++-----------------
 modules/scaleway/README.md |  4 ++--
 6 files changed, 27 insertions(+), 27 deletions(-)

diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index dfc0f397a..6fb8bc17b 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -1,6 +1,6 @@
 repos:
 - repo: https://github.com/antonbabenko/pre-commit-terraform
-  rev: v1.92.2
+  rev: v1.96.1
   hooks:
     - id: terraform_fmt
     - id: terraform_validate
@@ -14,6 +14,6 @@ repos:
     - id: check-merge-conflict
     - id: end-of-file-fixer
 - repo: https://github.com/renovatebot/pre-commit-hooks
-  rev: 38.52.3
+  rev: 38.88.0
   hooks:
     - id: renovate-config-validator
diff --git a/README.md b/README.md
index e7def03f5..77cea3d4b 100644
--- a/README.md
+++ b/README.md
@@ -76,7 +76,7 @@ section.
 Full contributing [guidelines are covered
 here](https://github.com/particuleio/terraform-kubernetes-addons/blob/master/.github/CONTRIBUTING.md).
 
-<!-- BEGINNING OF PRE-COMMIT-TERRAFORM DOCS HOOK -->
+<!-- BEGIN_TF_DOCS -->
 ## Requirements
 
 | Name | Version |
@@ -324,4 +324,4 @@ No modules.
 | <a name="output_loki-stack-ca"></a> [loki-stack-ca](#output\_loki-stack-ca) | n/a |
 | <a name="output_promtail-cert"></a> [promtail-cert](#output\_promtail-cert) | n/a |
 | <a name="output_promtail-key"></a> [promtail-key](#output\_promtail-key) | n/a |
-<!-- END OF PRE-COMMIT-TERRAFORM DOCS HOOK -->
+<!-- END_TF_DOCS -->
diff --git a/modules/aws/README.md b/modules/aws/README.md
index 33d53b076..b1e2b2e55 100644
--- a/modules/aws/README.md
+++ b/modules/aws/README.md
@@ -15,7 +15,7 @@ User guides, feature documentation and examples are available [here](https://git
 
 This module can uses [IRSA](https://aws.amazon.com/blogs/opensource/introducing-fine-grained-iam-roles-service-accounts/).
 
-<!-- BEGINNING OF PRE-COMMIT-TERRAFORM DOCS HOOK -->
+<!-- BEGIN_TF_DOCS -->
 ## Requirements
 
 | Name | Version |
@@ -423,4 +423,4 @@ This module can uses [IRSA](https://aws.amazon.com/blogs/opensource/introducing-
 | <a name="output_promtail-cert"></a> [promtail-cert](#output\_promtail-cert) | n/a |
 | <a name="output_promtail-key"></a> [promtail-key](#output\_promtail-key) | n/a |
 | <a name="output_thanos_ca"></a> [thanos\_ca](#output\_thanos\_ca) | n/a |
-<!-- END OF PRE-COMMIT-TERRAFORM DOCS HOOK -->
+<!-- END_TF_DOCS -->
diff --git a/modules/azure/README.md b/modules/azure/README.md
index ef8bb9852..3169a341d 100644
--- a/modules/azure/README.md
+++ b/modules/azure/README.md
@@ -2,7 +2,7 @@
 
 Provides various Kubernetes addons that are often used on Kubernetes with Azure
 
-<!-- BEGINNING OF PRE-COMMIT-TERRAFORM DOCS HOOK -->
+<!-- BEGIN_TF_DOCS -->
 ## Requirements
 
 | Name | Version |
@@ -234,4 +234,4 @@ No modules.
 | <a name="output_loki-stack-ca"></a> [loki-stack-ca](#output\_loki-stack-ca) | n/a |
 | <a name="output_promtail-cert"></a> [promtail-cert](#output\_promtail-cert) | n/a |
 | <a name="output_promtail-key"></a> [promtail-key](#output\_promtail-key) | n/a |
-<!-- END OF PRE-COMMIT-TERRAFORM DOCS HOOK -->
+<!-- END_TF_DOCS -->
diff --git a/modules/google/README.md b/modules/google/README.md
index 56d291552..f01b4e00e 100644
--- a/modules/google/README.md
+++ b/modules/google/README.md
@@ -11,7 +11,7 @@ Provides various addons that are often used on Kubernetes with Google and GKE.
 
 Provides various Kubernetes addons that are often used on Kubernetes with GCP
 
-<!-- BEGINNING OF PRE-COMMIT-TERRAFORM DOCS HOOK -->
+<!-- BEGIN_TF_DOCS -->
 ## Requirements
 
 | Name | Version |
@@ -48,24 +48,24 @@ Provides various Kubernetes addons that are often used on Kubernetes with GCP
 
 | Name | Source | Version |
 |------|--------|---------|
-| <a name="module_cert_manager_workload_identity"></a> [cert\_manager\_workload\_identity](#module\_cert\_manager\_workload\_identity) | terraform-google-modules/kubernetes-engine/google//modules/workload-identity | ~> 32.0.0 |
-| <a name="module_external_dns_workload_identity"></a> [external\_dns\_workload\_identity](#module\_external\_dns\_workload\_identity) | terraform-google-modules/kubernetes-engine/google//modules/workload-identity | ~> 32.0.0 |
-| <a name="module_iam_assumable_sa_kube-prometheus-stack_grafana"></a> [iam\_assumable\_sa\_kube-prometheus-stack\_grafana](#module\_iam\_assumable\_sa\_kube-prometheus-stack\_grafana) | terraform-google-modules/kubernetes-engine/google//modules/workload-identity | ~> 32.0 |
-| <a name="module_iam_assumable_sa_kube-prometheus-stack_thanos"></a> [iam\_assumable\_sa\_kube-prometheus-stack\_thanos](#module\_iam\_assumable\_sa\_kube-prometheus-stack\_thanos) | terraform-google-modules/kubernetes-engine/google//modules/workload-identity | ~> 32.0 |
-| <a name="module_iam_assumable_sa_loki-stack"></a> [iam\_assumable\_sa\_loki-stack](#module\_iam\_assumable\_sa\_loki-stack) | terraform-google-modules/kubernetes-engine/google//modules/workload-identity | ~> 32.0 |
-| <a name="module_iam_assumable_sa_thanos"></a> [iam\_assumable\_sa\_thanos](#module\_iam\_assumable\_sa\_thanos) | terraform-google-modules/kubernetes-engine/google//modules/workload-identity | ~> 32.0 |
-| <a name="module_iam_assumable_sa_thanos-compactor"></a> [iam\_assumable\_sa\_thanos-compactor](#module\_iam\_assumable\_sa\_thanos-compactor) | terraform-google-modules/kubernetes-engine/google//modules/workload-identity | ~> 32.0 |
-| <a name="module_iam_assumable_sa_thanos-sg"></a> [iam\_assumable\_sa\_thanos-sg](#module\_iam\_assumable\_sa\_thanos-sg) | terraform-google-modules/kubernetes-engine/google//modules/workload-identity | ~> 32.0 |
-| <a name="module_iam_assumable_sa_thanos-storegateway"></a> [iam\_assumable\_sa\_thanos-storegateway](#module\_iam\_assumable\_sa\_thanos-storegateway) | terraform-google-modules/kubernetes-engine/google//modules/workload-identity | ~> 32.0 |
-| <a name="module_kube-prometheus-stack_grafana-iam-member"></a> [kube-prometheus-stack\_grafana-iam-member](#module\_kube-prometheus-stack\_grafana-iam-member) | terraform-google-modules/iam/google//modules/member_iam | ~> 7.6 |
+| <a name="module_cert_manager_workload_identity"></a> [cert\_manager\_workload\_identity](#module\_cert\_manager\_workload\_identity) | terraform-google-modules/kubernetes-engine/google//modules/workload-identity | ~> 33.0.0 |
+| <a name="module_external_dns_workload_identity"></a> [external\_dns\_workload\_identity](#module\_external\_dns\_workload\_identity) | terraform-google-modules/kubernetes-engine/google//modules/workload-identity | ~> 33.0.0 |
+| <a name="module_iam_assumable_sa_kube-prometheus-stack_grafana"></a> [iam\_assumable\_sa\_kube-prometheus-stack\_grafana](#module\_iam\_assumable\_sa\_kube-prometheus-stack\_grafana) | terraform-google-modules/kubernetes-engine/google//modules/workload-identity | ~> 33.0 |
+| <a name="module_iam_assumable_sa_kube-prometheus-stack_thanos"></a> [iam\_assumable\_sa\_kube-prometheus-stack\_thanos](#module\_iam\_assumable\_sa\_kube-prometheus-stack\_thanos) | terraform-google-modules/kubernetes-engine/google//modules/workload-identity | ~> 33.0 |
+| <a name="module_iam_assumable_sa_loki-stack"></a> [iam\_assumable\_sa\_loki-stack](#module\_iam\_assumable\_sa\_loki-stack) | terraform-google-modules/kubernetes-engine/google//modules/workload-identity | ~> 33.0 |
+| <a name="module_iam_assumable_sa_thanos"></a> [iam\_assumable\_sa\_thanos](#module\_iam\_assumable\_sa\_thanos) | terraform-google-modules/kubernetes-engine/google//modules/workload-identity | ~> 33.0 |
+| <a name="module_iam_assumable_sa_thanos-compactor"></a> [iam\_assumable\_sa\_thanos-compactor](#module\_iam\_assumable\_sa\_thanos-compactor) | terraform-google-modules/kubernetes-engine/google//modules/workload-identity | ~> 33.0 |
+| <a name="module_iam_assumable_sa_thanos-sg"></a> [iam\_assumable\_sa\_thanos-sg](#module\_iam\_assumable\_sa\_thanos-sg) | terraform-google-modules/kubernetes-engine/google//modules/workload-identity | ~> 33.0 |
+| <a name="module_iam_assumable_sa_thanos-storegateway"></a> [iam\_assumable\_sa\_thanos-storegateway](#module\_iam\_assumable\_sa\_thanos-storegateway) | terraform-google-modules/kubernetes-engine/google//modules/workload-identity | ~> 33.0 |
+| <a name="module_kube-prometheus-stack_grafana-iam-member"></a> [kube-prometheus-stack\_grafana-iam-member](#module\_kube-prometheus-stack\_grafana-iam-member) | terraform-google-modules/iam/google//modules/member_iam | ~> 8.0 |
 | <a name="module_kube-prometheus-stack_kube-prometheus-stack_bucket"></a> [kube-prometheus-stack\_kube-prometheus-stack\_bucket](#module\_kube-prometheus-stack\_kube-prometheus-stack\_bucket) | terraform-google-modules/cloud-storage/google//modules/simple_bucket | ~> 6.0 |
-| <a name="module_kube-prometheus-stack_thanos_kms_bucket"></a> [kube-prometheus-stack\_thanos\_kms\_bucket](#module\_kube-prometheus-stack\_thanos\_kms\_bucket) | terraform-google-modules/kms/google | ~> 2.2 |
+| <a name="module_kube-prometheus-stack_thanos_kms_bucket"></a> [kube-prometheus-stack\_thanos\_kms\_bucket](#module\_kube-prometheus-stack\_thanos\_kms\_bucket) | terraform-google-modules/kms/google | ~> 3.0 |
 | <a name="module_loki-stack_bucket"></a> [loki-stack\_bucket](#module\_loki-stack\_bucket) | terraform-google-modules/cloud-storage/google//modules/simple_bucket | ~> 6.0 |
-| <a name="module_loki-stack_bucket_iam"></a> [loki-stack\_bucket\_iam](#module\_loki-stack\_bucket\_iam) | terraform-google-modules/iam/google//modules/storage_buckets_iam | ~> 7.6 |
-| <a name="module_loki-stack_kms_bucket"></a> [loki-stack\_kms\_bucket](#module\_loki-stack\_kms\_bucket) | terraform-google-modules/kms/google | ~> 2.2 |
-| <a name="module_thanos-storegateway_bucket_iam"></a> [thanos-storegateway\_bucket\_iam](#module\_thanos-storegateway\_bucket\_iam) | terraform-google-modules/iam/google//modules/storage_buckets_iam | ~> 7.6 |
+| <a name="module_loki-stack_bucket_iam"></a> [loki-stack\_bucket\_iam](#module\_loki-stack\_bucket\_iam) | terraform-google-modules/iam/google//modules/storage_buckets_iam | ~> 8.0 |
+| <a name="module_loki-stack_kms_bucket"></a> [loki-stack\_kms\_bucket](#module\_loki-stack\_kms\_bucket) | terraform-google-modules/kms/google | ~> 3.0 |
+| <a name="module_thanos-storegateway_bucket_iam"></a> [thanos-storegateway\_bucket\_iam](#module\_thanos-storegateway\_bucket\_iam) | terraform-google-modules/iam/google//modules/storage_buckets_iam | ~> 8.0 |
 | <a name="module_thanos_bucket"></a> [thanos\_bucket](#module\_thanos\_bucket) | terraform-google-modules/cloud-storage/google//modules/simple_bucket | ~> 6.0 |
-| <a name="module_thanos_kms_bucket"></a> [thanos\_kms\_bucket](#module\_thanos\_kms\_bucket) | terraform-google-modules/kms/google | ~> 2.2 |
+| <a name="module_thanos_kms_bucket"></a> [thanos\_kms\_bucket](#module\_thanos\_kms\_bucket) | terraform-google-modules/kms/google | ~> 3.0 |
 
 ## Resources
 
@@ -291,4 +291,4 @@ Provides various Kubernetes addons that are often used on Kubernetes with GCP
 | <a name="output_promtail-cert"></a> [promtail-cert](#output\_promtail-cert) | n/a |
 | <a name="output_promtail-key"></a> [promtail-key](#output\_promtail-key) | n/a |
 | <a name="output_thanos_ca"></a> [thanos\_ca](#output\_thanos\_ca) | n/a |
-<!-- END OF PRE-COMMIT-TERRAFORM DOCS HOOK -->
+<!-- END_TF_DOCS -->
diff --git a/modules/scaleway/README.md b/modules/scaleway/README.md
index 9def2c22b..6577aded7 100644
--- a/modules/scaleway/README.md
+++ b/modules/scaleway/README.md
@@ -14,7 +14,7 @@ User guides, feature documentation and examples are available [here](https://git
 
 ## Terraform docs
 
-<!-- BEGINNING OF PRE-COMMIT-TERRAFORM DOCS HOOK -->
+<!-- BEGIN_TF_DOCS -->
 ## Requirements
 
 | Name | Version |
@@ -279,4 +279,4 @@ No modules.
 | <a name="output_promtail-cert"></a> [promtail-cert](#output\_promtail-cert) | n/a |
 | <a name="output_promtail-key"></a> [promtail-key](#output\_promtail-key) | n/a |
 | <a name="output_thanos_ca"></a> [thanos\_ca](#output\_thanos\_ca) | n/a |
-<!-- END OF PRE-COMMIT-TERRAFORM DOCS HOOK -->
+<!-- END_TF_DOCS -->