feat(helm): update chart volsync ( 0.11.0 → 0.12.0 )

[repo-jeeves]

This PR contains the following updates:

Package	Update	Change
volsync (source)	minor	0.11.0 -> 0.12.0

---

Release Notes

backube/volsync (volsync)

v0.12.0

Compare Source

Changed

• imagePullSecrets in helm charts will be copied from volsync controller
  namespace to the mover namespace so mover jobs can use them
• Updated release to build on golang 1.23
• Syncthing updated to v1.29.2
• kube-rbac-proxy image configurable in helm chart values
• mover scripts updated to use sync -f to only sync the target filesystem at
  the end of mover tasks
• Updates the ensure_initialized function in the restic mover script to
  follow restic recommendations

Fixed

• All movers should return error if not able to EnsurePVCFromSrc
• Fix for mover job/service name length too long (>63 chars) if the
  replicationsource or replicationdestination CR name is too long

Security

• kube-rbac-proxy upgraded to 0.18.2

[repo-jeeves]

--- kubernetes/staging/apps/volsync-system/volsync/app Kustomization: volsync-system/volsync HelmRelease: volsync-system/volsync

+++ kubernetes/staging/apps/volsync-system/volsync/app Kustomization: volsync-system/volsync HelmRelease: volsync-system/volsync

@@ -13,13 +13,13 @@

     spec:
       chart: volsync
       sourceRef:
         kind: HelmRepository
         name: backube-charts
         namespace: flux-system
-      version: 0.11.0
+      version: 0.12.0
   dependsOn:
   - name: snapshot-controller
     namespace: volsync-system
   install:
     createNamespace: true
     remediation:

[repo-jeeves]

--- HelmRelease: volsync-system/volsync Deployment: volsync-system/volsync

+++ HelmRelease: volsync-system/volsync Deployment: volsync-system/volsync

@@ -25,21 +25,24 @@

         app.kubernetes.io/instance: volsync
     spec:
       serviceAccountName: volsync
       securityContext:
         runAsNonRoot: true
         runAsUser: 65534
+        runAsGroup: 65534
+        seccompProfile:
+          type: RuntimeDefault
       containers:
       - name: kube-rbac-proxy
         securityContext:
           allowPrivilegeEscalation: false
           capabilities:
             drop:
             - ALL
           readOnlyRootFilesystem: true
-        image: quay.io/brancz/kube-rbac-proxy:v0.18.0
+        image: quay.io/brancz/kube-rbac-proxy:v0.18.2
         args:
         - --secure-listen-address=0.0.0.0:8443
         - --upstream=http://127.0.0.1:8080/
         - --logtostderr=true
         - --tls-min-version=VersionTLS12
         - --v=0
@@ -57,22 +60,27 @@

             memory: 64Mi
       - name: manager
         args:
         - --health-probe-bind-address=:8081
         - --metrics-bind-address=127.0.0.1:8080
         - --leader-elect
-        - --rclone-container-image=quay.io/backube/volsync:0.11.0
-        - --restic-container-image=quay.io/backube/volsync:0.11.0
-        - --rsync-container-image=quay.io/backube/volsync:0.11.0
-        - --rsync-tls-container-image=quay.io/backube/volsync:0.11.0
-        - --syncthing-container-image=quay.io/backube/volsync:0.11.0
+        - --rclone-container-image=quay.io/backube/volsync:0.12.0
+        - --restic-container-image=quay.io/backube/volsync:0.12.0
+        - --rsync-container-image=quay.io/backube/volsync:0.12.0
+        - --rsync-tls-container-image=quay.io/backube/volsync:0.12.0
+        - --syncthing-container-image=quay.io/backube/volsync:0.12.0
         - --scc-name=volsync-privileged-mover
         command:
         - /manager
-        image: quay.io/backube/volsync:0.11.0
+        image: quay.io/backube/volsync:0.12.0
         imagePullPolicy: IfNotPresent
+        env:
+        - name: VOLSYNC_NAMESPACE
+          valueFrom:
+            fieldRef:
+              fieldPath: metadata.namespace
         livenessProbe:
           httpGet:
             path: /healthz
             port: 8081
           initialDelaySeconds: 15
           periodSeconds: 20