Skip to content

chore(deps): update grafana #2206

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
renovate wants to merge 1 commit into
base: main
Choose a base branch
from
Open

chore(deps): update grafana #2206

renovate wants to merge 1 commit into from

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Dec 11, 2025 •
edited
Loading

This PR contains the following updates:

Package Update Change
docker.io/grafana/grafana patch 12.3.0 → 12.3.1
ghcr.io/kiwigrid/k8s-sidecar major 1.30.10 → 2.1.4
grafana (source) minor 10.3.1 → 10.4.3
quay.io/rfcurated/grafana patch 12.3.0-jammy-scratch-fips-rfcurated → 12.3.1-jammy-scratch-fips-rfcurated
quay.io/rfcurated/kiwigrid/k8s-sidecar major 1.30.10-jammy-scratch-fips-rfcurated-rfhardened → 2.1.4-jammy-scratch-fips-rfcurated-rfhardened
registry1.dso.mil/ironbank/kiwigrid/k8s-sidecar (source) major 1.30.10 → 2.1.4
registry1.dso.mil/ironbank/opensource/grafana/grafana (source) patch 12.3.0 → 12.3.1

Release Notes

grafana/grafana (docker.io/grafana/grafana)

v12.3.1

Compare Source

Features and enhancements
Bug fixes
kiwigrid/k8s-sidecar (ghcr.io/kiwigrid/k8s-sidecar)

v2.1.4

Compare Source

📦 Dependencies
  • Bump actions/checkout from 5.0.1 to 6.0.0
  • Bump actions/upload-artifact from 4.6.2 to 5.0.0
  • Bump actions/download-artifact from 5.0.0 to 6.0.0
  • Bump fastapi from 0.121.0 to 0.122.0 in /src

v2.1.3

Compare Source

📦 Dependencies
  • Bump github/codeql-action from 4.31.2 to 4.31.3
  • Bump actions/checkout from 5.0.0 to 5.0.1
  • Bump softprops/action-gh-release from 2.4.1 to 2.4.2
  • Bump github/codeql-action from 4.31.3 to 4.31.5

v2.1.2

Compare Source

📦 Dependencies
  • Bump mikepenz/release-changelog-builder-action from 6.0.0 to 6.0.1
  • Bump docker/setup-qemu-action from 3.6.0 to 3.7.0
  • Bump fastapi from 0.115.2 to 0.121.0 in /src

v2.1.1

Compare Source

📦 Dependencies
  • Bump mikepenz/release-changelog-builder-action from 6.0.0 to 6.0.1
  • Bump docker/setup-qemu-action from 3.6.0 to 3.7.0
  • Bump fastapi from 0.115.2 to 0.121.0 in /src

v2.1.0

Compare Source

🚀 Features
  • wyn_skip_init: - add flag to skip initial request to REQ_URL when using WATCH
📦 Dependencies
  • Bump actions/upload-artifact from 4 to 5
  • Bump actions/download-artifact from 5 to 6

v2.0.3

Compare Source

Build
Enhancements

  • Add health endpoint with readiness and liveness probes (#​416)

  • New /healthz Endpoint: A new HTTP endpoint is available on port 8080 (configurable via the HEALTH_PORT environment variable)

    • Readiness Probe:

      • The sidecar now reports as "ready" (HTTP 200) only after the initial synchronization of all configured resources is complete
      • This prevents the main application container from starting or receiving traffic prematurely, ensuring all configuration files are present at startup

    • Liveness Probe:

      • The probe continuously monitors the sidecar's health by checking two critical conditions:
        • Kubernetes API Contact: Verifies that the sidecar has had successful contact with the Kubernetes API within the last 60 seconds
        • Watcher Process Health: Ensures that all internal watcher subprocesses are running correctly
      • If any check fails, the probe fails, signaling Kubernetes to restart the container

  • Reduced Log Noise: Access logs for frequent /healthz requests are automatically filtered out to keep application logs clean and focused

  • Fail-Fast on Process Death: The main process now exits immediately if a critical watcher subprocess dies, ensuring a prompt restart by Kubernetes

Testing
  • The CI pipeline has been enhanced with new tests to validate this functionality:
    • A test to confirm the Uvicorn health server starts successfully
    • A liveness test that simulates a watcher process failure and asserts that Kubernetes restarts the pod as expected
    • A Kubernetes Config load test for Sleep and Watch based sidecar

v1.30.11

Compare Source

⚠️ YANKED/UNSTABLE ⚠️: Do not use 1.30.11 due to #​431
Use 1.30.9 as latest stable

📦 Dependencies
  • Bump python-json-logger from 3.3.0 to 4.0.0 in /src
grafana/helm-charts (grafana)

v10.4.3

Compare Source

The leading tool for querying and visualizing time series and metrics.

What's Changed

  • [grafana] Set proper server.domain in grafana.ini even if Gateway API is used by @​kofuk in #​4067

New Contributors

Full Changelog: grafana/helm-charts@grafana-10.4.2...grafana-10.4.3

v10.4.2

Compare Source

The leading tool for querying and visualizing time series and metrics.

What's Changed

Full Changelog: grafana/helm-charts@grafana-10.4.1...grafana-10.4.2

v10.4.1

Compare Source

The leading tool for querying and visualizing time series and metrics.

What's Changed

Full Changelog: grafana/helm-charts@enterprise-logs-2.5.1...grafana-10.4.1

v10.4.0

Compare Source

The leading tool for querying and visualizing time series and metrics.

What's Changed

  • [grafana] Fix route template linebreaks and add https redirect support by @​guoard in #​4055

New Contributors

Full Changelog: grafana/helm-charts@beyla-1.10.3...grafana-10.4.0

v10.3.2

Compare Source

The leading tool for querying and visualizing time series and metrics.

What's Changed
New Contributors

Full Changelog: grafana/helm-charts@grafana-operator-5.21.2...grafana-10.3.2

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested a review from a team as a code owner December 11, 2025 14:07
@github-actions github-actions bot added the helm-chart-only Renovate Upgrade for Helm Chart Only label Dec 11, 2025
@mjnagel mjnagel mentioned this pull request Dec 16, 2025
Merged
5 tasks
@renovate renovate bot force-pushed the renovate/grafana branch from 214f6c9 to 2ddcc12 Compare December 16, 2025 22:07
@renovate renovate bot changed the title chore(deps): update grafana to v10.3.1 chore(deps): update grafana Dec 16, 2025
@github-actions github-actions bot added waiting on ironbank This PR is waiting on an image update for ironbank waiting on rapidfort This PR is waiting on an image update for Rapidfort and removed helm-chart-only Renovate Upgrade for Helm Chart Only labels Dec 16, 2025
slaskawi added a commit that referenced this pull request Dec 17, 2025
@slaskawi @mjnagel
fix: downgrade k8s-sidecar for Grafana to 1.30.10, pin helm unittest …
d78eecd 
…install (#2219)

## Description

This Pull Request fixes the `main` branch build. 

It root cause of the failures (like
[this](https://github.com/defenseunicorns/uds-core/actions/runs/20259499091/job/58168267972))
was a combination of two things:

1. The `HELM_UNITTEST_VERSION=v1.0.3 helm plugin install
https://github.com/helm-unittest/helm-unittest.git --version
"$HELM_UNITTEST_VERSION"` incorrectly propagates the environment
variable. At the time of invoking the `helm` command the
`$HELM_UNITTEST_VERSION` is undefined. This can be easily illustrated
with the following script:

```bash
$ bash
$ set -x
$ TEST=ok true "$TEST"
+ TEST=ok
+ true '' <-- Note that this is empty, it's not "ok"!!!
```

2. The helm-unittest/helm-unittest#790
introduced an incompatible with Helm 3 change which was causing the
plugin installation to fail. Originally a previous release (1.0.3) was
retagged, but this has since been reverted so that 1.0.3 can be pulled
down.

This also includes the helm chart bump for Grafana 10.3.1, resolving
[this issue](https://www.github.com/grafana/helm-charts/issues/4039)
(this replaces #2206)
and [enables the
WAL](https://grafana.com/docs/grafana/latest/setup-grafana/configure-grafana/#wal)
to allow for more seamless upgrades on the internal DB. Finally it
downgrades the k8s-sidecar image due to a number of upstream issues with
2.x images.

## Type of change

- [x] Bug fix (non-breaking change which fixes an issue)
- [ ] New feature (non-breaking change which adds functionality)
- [ ] Other (security config, docs update, etc)

## Steps to Validate

Verified automatically

## Checklist before merging

- [x] Test, docs, adr added or updated as needed
- [x] [Contributor
Guide](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md)
followed

---------

Co-authored-by: Micah Nagel <micah.nagel@gmail.com>
Co-authored-by: Micah Nagel <micah.nagel@defenseunicorns.com>
@renovate renovate bot force-pushed the renovate/grafana branch from 2ddcc12 to 0029916 Compare December 17, 2025 10:17
@github-actions github-actions bot added the major-image-update Label for Renovate PRs contain a major version bump to an image label Dec 17, 2025
@renovate renovate bot force-pushed the renovate/grafana branch from 0029916 to 36502f7 Compare December 17, 2025 14:23
mjnagel
mjnagel reviewed Dec 17, 2025
View reviewed changes
src/grafana/values/registry1-values.yaml
registry: registry1.dso.mil
repository: ironbank/kiwigrid/k8s-sidecar
tag: 1.30.10
tag: 2.1.4
Copy link
Contributor

@mjnagel mjnagel Dec 17, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We'll want to avoid the 2.x stream for now pending upstream fixes. Probably need to get a renovate config update to block these.

chance-coleman pushed a commit that referenced this pull request Dec 17, 2025
@slaskawi @mjnagel @chance-coleman
fix: downgrade k8s-sidecar for Grafana to 1.30.10, pin helm unittest …
8ae85aa 
…install (#2219)

## Description

This Pull Request fixes the `main` branch build.

It root cause of the failures (like
[this](https://github.com/defenseunicorns/uds-core/actions/runs/20259499091/job/58168267972))
was a combination of two things:

1. The `HELM_UNITTEST_VERSION=v1.0.3 helm plugin install
https://github.com/helm-unittest/helm-unittest.git --version
"$HELM_UNITTEST_VERSION"` incorrectly propagates the environment
variable. At the time of invoking the `helm` command the
`$HELM_UNITTEST_VERSION` is undefined. This can be easily illustrated
with the following script:

```bash
$ bash
$ set -x
$ TEST=ok true "$TEST"
+ TEST=ok
+ true '' <-- Note that this is empty, it's not "ok"!!!
```

2. The helm-unittest/helm-unittest#790
introduced an incompatible with Helm 3 change which was causing the
plugin installation to fail. Originally a previous release (1.0.3) was
retagged, but this has since been reverted so that 1.0.3 can be pulled
down.

This also includes the helm chart bump for Grafana 10.3.1, resolving
[this issue](https://www.github.com/grafana/helm-charts/issues/4039)
(this replaces #2206)
and [enables the
WAL](https://grafana.com/docs/grafana/latest/setup-grafana/configure-grafana/#wal)
to allow for more seamless upgrades on the internal DB. Finally it
downgrades the k8s-sidecar image due to a number of upstream issues with
2.x images.

## Type of change

- [x] Bug fix (non-breaking change which fixes an issue)
- [ ] New feature (non-breaking change which adds functionality)
- [ ] Other (security config, docs update, etc)

## Steps to Validate

Verified automatically

## Checklist before merging

- [x] Test, docs, adr added or updated as needed
- [x] [Contributor
Guide](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md)
followed

---------

Co-authored-by: Micah Nagel <micah.nagel@gmail.com>
Co-authored-by: Micah Nagel <micah.nagel@defenseunicorns.com>
(cherry picked from commit d78eecd)
@renovate renovate bot force-pushed the renovate/grafana branch from 36502f7 to 2079a7e Compare December 17, 2025 20:08
@github-actions github-actions bot removed the waiting on ironbank This PR is waiting on an image update for ironbank label Dec 17, 2025
@renovate renovate bot force-pushed the renovate/grafana branch 2 times, most recently from 20ff253 to adb2648 Compare December 24, 2025 10:53
@github-actions github-actions bot added needs-review Label used for Renovate PRs that are ready for review/test and removed waiting on rapidfort This PR is waiting on an image update for Rapidfort labels Dec 24, 2025
@renovate renovate bot force-pushed the renovate/grafana branch 2 times, most recently from 0cf321d to 1d912a6 Compare December 30, 2025 19:13
@renovate
chore(deps): update grafana
52697ca 
| datasource | package                                               | from    | to     |
| ---------- | ----------------------------------------------------- | ------- | ------ |
| docker     | docker.io/grafana/grafana                             | 12.3.0  | 12.3.1 |
| docker     | ghcr.io/kiwigrid/k8s-sidecar                          | 1.30.10 | 2.1.4  |
| helm       | grafana                                               | 10.3.1  | 10.4.3 |
| docker     | quay.io/rfcurated/grafana                             | 12.3.0  | 12.3.1 |
| docker     | quay.io/rfcurated/kiwigrid/k8s-sidecar                | 1.30.10 | 2.1.4  |
| docker     | registry1.dso.mil/ironbank/kiwigrid/k8s-sidecar       | 1.30.10 | 2.1.4  |
| docker     | registry1.dso.mil/ironbank/opensource/grafana/grafana | 12.3.0  | 12.3.1 |
@renovate renovate bot force-pushed the renovate/grafana branch from 1d912a6 to 52697ca Compare December 31, 2025 11:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@mjnagel mjnagel mjnagel left review comments

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

major-image-update Label for Renovate PRs contain a major version bump to an image needs-review Label used for Renovate PRs that are ready for review/test

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@mjnagel