chore(main): [bot] release base-cluster:8.0.0

[teutonet-bot]

🤖 I have created a release beep boop

8.0.0 (2025-02-12)

⚠ BREAKING CHANGES

• base-cluster/rbac: allow to use the k8s default ClusterRoles (#1230)
• base-cluster/dependencies: update helm release descheduler to 0.31.x (#1173)
• base-cluster/kyverno: upgrade 🤮 (#784)

Features

• add helmrelease schemas 😍 (#792) (89ed7eb)
• base-cluster/descheduler: run as deployment and enable prometheus (#838) (47b7cdf)
• base-cluster/flux: add option to add a path inside the kustomiz… (#876) (358b9e2)
• base-cluster/grafana: add persistence and configuration options (#999) (ce0fff7)
• base-cluster/monitoring: create aggregate ClusterRoles (#1234) (cd037a0)
• base-cluster/monitoring: use different setup for tls for oauth-… (#852) (cc2e6a9)
• base-cluster/raise_api_version: raise api version for helm.tool… (#983) (1439938)
• base-cluster/rbac: allow to use the k8s default ClusterRoles (#1230) (a3b24e4)
• base-cluster/tetragon: add tetragon (#1056) (9be7543)
• base-cluster/tracing: add resources settings for ingester (#832) (eb211e5)
• base-cluster: add kdave for deprecated CRD metrics (#947) (4609be4)
• base-cluster: add kube-janitor (#1011) (2f8a414)
• base-cluster: allow creating git helmRepositories (#946) (e35415e)
• base-cluster: enable cilium dns proxy (#825) (73c97fa)
• base-cluster: enable velero servicemonitor if prometheus is enabled (#724) (4482223), closes #487
• base-cluster: overhaul resources (#835) (f39dba8)
• base-cluster: upgrade all HRs and enable driftDetection (#773) (fe6e71a)

Bug Fixes

• base-cluster-schema/schema: remove required for serviceLevelAgre… (#791) (d9917b5)
• base-cluster/backup: add defaultBackupStorageLocation flag for velero 🙄 (#779) (d0e9ff9)
• base-cluster/backup: fix formatting (#1063) (8da56f2)
• base-cluster/cert-manager: ciliumNetworkPolicy for cert-manager otherwise it can't correctly talk to letsencrypt, ... 🤣 (#1115) (a6919ca)
• base-cluster/flux: kustomization path templating (#890) (7e67787)
• base-cluster/flux: kustomization path templating (#900) (151257f)
• base-cluster/flux: kustomization path templating (#901) (6c5d844)
• base-cluster/flux: set fixed values for gpg key creation as defa… (#894) (f0afff3)
• base-cluster/grafana: oidc secret handling (#756) (73a15d2)
• base-cluster/kdave: deploy wrapped ServiceMonitor (#1267) (9698390)
• base-cluster/kdave: image 2.x.x is unsupported by the helm chart (#1062) (e7bc047)
• base-cluster/kube-janitor: enable artifacthub-values and correctly prefix docker.io registry (#1048) (17b9baf)
• base-cluster/kube-prometheus-stack: only disable PrometheusNotConnectedToAlertmanagers when Alertmanager is disabled as well (#1053) (dbb007a)
• base-cluster/kube-prometheus-stack: only register healthcheck if enabled on both sides (#1052) (21e966d)
• base-cluster/kube-prometheus-stack: set deployment strategy to r… (#1067) (19854b7)
• base-cluster/kyverno+flux: remove old policy they don't exist upstream anymore as well (#898) (ab5055e)
• base-cluster/kyverno: apparently the type changed (#1330) (aceafc3)
• base-cluster/kyverno: change image registry for the test image (#996) (1b77a34)
• base-cluster/kyverno: configure missing registry for kyverno images (#811) (83c44f5)
• base-cluster/metrics-server: remove mount, as it's fixed via chart (#818) (b8cbe36)
• base-cluster/monitoring: 🤦 (#1026) (20f57c1)
• base-cluster/monitoring: don't configure route without receiver (#1024) (fe3d87a)
• base-cluster/monitoring: missing UIDs and cross-connections (#824) (39b19d2)
• base-cluster/monitoring: only roll out alertmanager oauth-proxy when alertmanager is enabled 🤣 (#1180) (a1d8888)
• base-cluster/monitoring: overwritten wildcard certificates (#868) (26cf112)
• base-cluster/monitoring: send Watchdog alert to null if deadmansswitch is not configured (#1120) (1e93c60)
• base-cluster/monitoring: slipped through review as well... (#1033) (9a242a0)
• base-cluster/oauth-proxy: use correct secretName for certificate (#758) (eda417c)
• base-cluster/oidc: this fixes the wrongly rolled out outh config (#1000) (798a7c7)
• base-cluster/reflector: pin image to registry and add image to trusted_registries (#1090) (754c8b8)
• base-cluster/tetragon: only roll out tetragon repo when needed (#1220) (2252399)
• base-cluster/tracing: remove undefined exporter (#845) (f514b24)
• base-cluster/velero: remove dupplicated additionalLabels (#1058) (82a2aa7)
• base-cluster: add missing seccompProfiles (#988) (18b59c6)
• base-cluster: additionalItems is the wrong field (#1231) (0235cd6)
• base-cluster: allow all protocols for DNS (#1306) (829ed95)
• base-cluster: curl images imagePullPolicy (#1168) (bb1942d)
• base-cluster: definitely enable everything for artifacthub (#1064) (0157971)
• base-cluster: fix nodeCollector is not scheduleable (#974) (c7df73b)
• base-cluster: kyverno image registries (#987) (a931a2e)
• base-cluster: only toYaml if field exists (#1226) (d81cd38)
• base-cluster: set correct label for workinghours (#980) (06153d0)
• base-cluster: wrong image for crds.migration (#993) (3c43f0f)
• ci: better handling of generated values (#875) (f1300f8)
• helmrelease-schemas (#794) (6544385)

Miscellaneous Chores

• base-cluster/artifacthub-images: Update ArtifactHUB images (#786) (c9e14e4)
• base-cluster/backup: pin velero, as they don't follow semver (#781) (a87c79e)
• base-cluster/dependencies: pin docker.io/vladgh/gpg docker tag to 1ba48a7 (#1076) (23aa2dc)
• base-cluster/dependencies: update common docker tag to v1.2.1 (#1080) (25ec4e8)
• base-cluster/dependencies: update docker.io/bitnami/kubectl docker tag to v1.29.3 (#788) (622ddd3)
• base-cluster/dependencies: update docker.io/bitnami/kubectl docker tag to v1.29.4 (#871) (95d8c22)
• base-cluster/dependencies: update docker.io/bitnami/kubectl docker tag to v1.29.6 (#960) (e4919d6)
• base-cluster/dependencies: update docker.io/bitnami/kubectl docker tag to v1.29.8 (#1060) (93f059a)
• base-cluster/dependencies: update docker.io/bitnami/kubectl docker tag to v1.31.0 (#907) (8544d01)
• base-cluster/dependencies: update docker.io/bitnami/kubectl docker tag to v1.31.2 (#1191) (e3ffc13)
• base-cluster/dependencies: update docker.io/bitnami/kubectl:1.29.6 docker digest to 6f94559 (#1027) (075d171)
• base-cluster/dependencies: update docker.io/curlimages/curl docker tag to v8.10.1 (#1193) (54966a8)
• base-cluster/dependencies: update docker.io/curlimages/curl docker tag to v8.6.0 (#753) (ae31961)
• base-cluster/dependencies: update docker.io/curlimages/curl docker tag to v8.7.1 (#842) (d36d4f9)
• base-cluster/dependencies: update docker.io/curlimages/curl docker tag to v8.8.0 (#1014) (b7fe8f8)
• base-cluster/dependencies: update docker.io/curlimages/curl docker tag to v8.9.1 (#1079) (8f1a39c)
• base-cluster/dependencies: update docker.io/fluxcd/flux-cli docker tag to v2.2.3 (#764) (cf45276)
• base-cluster/dependencies: update docker.io/fluxcd/flux-cli docker tag to v2.3.0 (#953) (c650271)
• base-cluster/dependencies: update docker.io/fluxcd/flux-cli docker tag to v2.4.0 (#1212) (6519edf)
• base-cluster/dependencies: update external-dns docker tag to v7 (#827) (1ea1bf9)
• base-cluster/dependencies: update external-dns docker tag to v8 (#1021) (9eb94aa)
• base-cluster/dependencies: update grafana-tempo docker tag to v3 (#828) (7c0f9ba)
• base-cluster/dependencies: update helm release common to v2.16.1 (#782) (e6568d0)
• base-cluster/dependencies: update helm release common to v2.19.0 (#814) (5419c5c)
• base-cluster/dependencies: update helm release common to v2.19.1 (#839) (eb07e18)
• base-cluster/dependencies: update helm release descheduler to 0.29.x (#704) (61264cb)
• base-cluster/dependencies: update helm release descheduler to 0.30.x (#1015) (26a8e26)
• base-cluster/dependencies: update helm release descheduler to 0.31.x (#1173) (784958c)
• base-cluster/dependencies: update helm release descheduler to 0.31.x (#1236) (2504f6c)
• base-cluster/dependencies: update helm release kube-prometheus-stack to v57 (#820) (2e64dbe)
• base-cluster/dependencies: update helm release kube-prometheus-stack to v58 (#851) (6e79448)
• base-cluster/dependencies: update helm release kube-prometheus-stack to v61 (#1022) (49c905c)
• base-cluster/dependencies: update helm release kube-prometheus-stack to v62 (#1145) (8ab376a)
• base-cluster/dependencies: update helm release kube-prometheus-stack to v65 (#1214) (5f701ed)
• base-cluster/dependencies: update helm release velero to v5.4.1 (#798) (ab8a741)
• base-cluster/dependencies: update helm release velero to v6 (#812) (b09985e)
• base-cluster/dependencies: update helm release velero to v6.7.0 (#954) (84f7b52)
• base-cluster/dependencies: update helm release velero to v7 (#1023) (8b1f815)
• base-cluster/dependencies: update helm release velero to v7.1.5 (#1134) (32e0769)
• base-cluster/dependencies: update metrics-server docker tag to v7 (#821) (3ca7dbc)
• base-cluster/dependencies: update oauth2-proxy docker tag to v5 (#849) (fa4c495)
• base-cluster/dependencies: update oauth2-proxy docker tag to v6 (#1146) (9885aba)
• base-cluster/docs: mention validity of .x.x part in the versions (#1271) (7e0894c)
• base-cluster/docs: set vim modeline (#1290) (1276209)
• base-cluster/kyverno: upgrade 🤮 (#784) (1c62356)
• base-cluster/monitoring: remove unnecessary arg (#829) (f9cdd7d)
• base-cluster/oauth-proxy: adjust labels for proxies chore(base-cluster/oauth-proxy): adjust CiliumNetworkPolicy to correctly filter requests from ingress (#1116) (4f58b28)
• base-cluster: add missing resources for descheduler (#989) (39b3389)
• base-cluster: fix kyverno pdb version (#990) (fb08b9d)
• base-cluster: formatting (#1198) (b9bd4a4)
• base-cluster: make proxy-protocol configurable (#1293) (0af12c6)
• base-cluster: mustMerge* is the safer option (#1001) (95a932b)
• base-cluster: mustMerge* is the safer option (#1003) (4b49283)
• base-cluster: streamline imagePullPolicy (#757) (61f1c7f)
• base-cluster: this is now supported 🥳 (#1135) (515ce2d)
• base-cluster: use tag instead of digest for gpg image (#844) (13be21b)
• base-cluster: use template instead of duplicated value (#1050) (4ef2389)
• base-cluster: use teutonet common chart (#857) (a35b63c)
• main: [bot] release base-cluster:5.0.0 (#721) (d0bf855)
• main: [bot] release base-cluster:5.0.1 (#778) (10adf69)
• main: [bot] release base-cluster:6.0.0 (#780) (516a9b3)
• main: [bot] release base-cluster:6.1.0 (#843) (c486a57)
• main: [bot] release base-cluster:6.1.1 (#889) (385cca4)
• main: [bot] release base-cluster:6.1.2 (#895) (b387909)
• main: [bot] release base-cluster:6.1.3 (#896) (231bab1)
• main: [bot] release base-cluster:6.1.4 (#899) (acdc342)
• main: [bot] release base-cluster:6.2.0 (#902) (019019c)
• main: [bot] release base-cluster:6.3.0 (#985) (b77d4c7)
• main: [bot] release base-cluster:6.4.0 (#998) (7bc1446)
• main: [bot] release base-cluster:6.5.0 (#1010) (a61826b)
• main: [bot] release base-cluster:6.5.1 (#1019) (187464c)
• main: [bot] release base-cluster:6.6.0 (#1043) (b66e884)
• main: [bot] release base-cluster:6.6.1 (#1057) (c2fdf9f)
• main: [bot] release base-cluster:6.6.2 (#1059) (63e9b5f)
• main: [bot] release base-cluster:6.6.3 (#1093) (6574454)
• main: [bot] release base-cluster:6.7.0 (#1121) (99abb99)
• main: [bot] release base-cluster:7.0.0 (#1166) (45a0bdd)
• main: [bot] release base-cluster:7.1.0 (#1237) (80c1033)
• main: [bot] release base-cluster:7.1.1 (#1268) (0a4821c)
• main: [bot] release base-cluster:7.1.2 (#1279) (fe19c67)

---

This PR was generated with Release Please. See documentation.

[teutonet-bot]

🤖 I have diffed this beep boop

"/$namespace/$kind/$name.yaml" for normal resources
"/$namespace/HelmRelease/$name/$namespace/$kind/$name.yaml" for HelmReleases <- this is recursive
'null' means it's either cluster-scoped or it's in the default namespace for the HelmRelease

charts/base-cluster/ci/monitoring-ingress-unauthenticated-values.yaml

charts/base-cluster/ci/rbac-values.yaml

charts/base-cluster/ci/pagerduty-values.yaml

charts/base-cluster/ci/velero-backupStorageLocations-gen-values.yaml

charts/base-cluster/ci/flux-gitrepositories-gen-values.yaml

charts/base-cluster/ci/imagepullsecrets-values.yaml

charts/base-cluster/values.yaml

charts/base-cluster/ci/artifacthub-values.yaml

charts/base-cluster/ci/disabled-ingress-values.yaml

charts/base-cluster/ci/priorityclasses-values.yaml

[charts/base-cluster/ci/deadmansswitch-values.yaml](

<title> Error </title> <script src="https://unpkg.com/[email protected]" integrity="sha384-Y7hw+L/jvKeWIRRkqWYfPcvVxHzVzn5REgzbawhxAuQGwX1XWe70vji+VSeHOThJ" crossorigin="anonymous"></script> <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js"></script> <script defer src="https://media.ethicalads.io/media/client/ethicalads.min.js"></script> <script> function key(event, letter) { return (event.charCode == letter.charCodeAt() || event.charCode == letter.charCodeAt() + 32) } </script> <script>

    </script>
    <style></style>
    
    
</head>

<body hx-on:keydown="var path=window.location.pathname; if ((event.key=='n' || event.key=='N') && path && path !== '/' && !path.includes('/duplicate/') && !path.includes('/dashboard/') && !path.includes('/accounts/') && !path.includes('/properties/')) { window.location.href = '/'; }">
    <div id="container">
        
        <div class="topbuttons">
            
                <a href="/accounts/login/"
                   title="Personal dashboard, preferences, API token"
                   class="button"><b>Sign in</b></a>
            
            <a href="/" title="Create a new paste (shortcut: 'N')" class=" button">New</a>
            <a href="/api/v2/"
               title="Paste creation API, with code samples"
               class=" activebutton  button">API</a>
            <a href="/help/"
               title="Usage tips, shortcuts"
               class="  button">Help</a>
            <a href="/about/"
               title="Updates, stats, backstory"
               class=" button">About</a>
        </div>
        
<div class="error">
    <h3>Sorry!</h3>
    Sorry, maximum content size is 1,000,000 characters. Your submission is 2,508,489. Your IP will be blocked if you exceed this limit again in the next 60 seconds.
    <hr>
    <p>
        Something unexpected? Please create a <a href="https://dpaste.freshdesk.com/support/tickets/new">support ticket</a>.
    </p>
</div>
<p>
    <a class="button" href="{$ url 'create' %}" onclick="history.back();return false;">Go back</a>
</p>

    </div>
    
    
    <script>
        window.fwSettings={'widget_id':22000000180 };
        !function(){if("function"!=typeof window.FreshworksWidget){var n=function(){n.q.push(arguments)};n.q=[],window.FreshworksWidget=n}}();
    </script>
    <script defer src='https://widget.freshworks.com/widgets/22000000180.js'></script>
</body>

)

charts/base-cluster/ci/monitoring-oidc-values.yaml

charts/base-cluster/ci/basic-values.yaml

charts/base-cluster/ci/monitoring-oidc-ingress-disabled-values.yaml

charts/base-cluster/ci/limitrange-resourcequota-values.yaml