chore(deps): update helm release eck-operator to v2.11.0

[renovate]

This PR contains the following updates:

Package	Update	Change
eck-operator	minor	2.7.0 -> 2.11.0

---

Release Notes

elastic/cloud-on-k8s (eck-operator)

v2.11.0

Compare Source

Elastic Cloud on Kubernetes 2.11.0

• Release highlights
• Quickstart guide

New features

• Introduce Kibana config field in stack config policy #​7324
• Introduce Elasticsearch config and additional secret mounts to stack config policy #​7233
• Add StatefulSet as a deployment option for Elastic Agent #​7357

Enhancements

• Allow Agent and Elastic stack in different namespaces. #​7382 (issue: #​7352)
• Support -ubi suffix starting 8.12.0 and 7.17.16 #​7368
• Update to ubi9 and use -ubi prefix for operator image #​7321
• Allow setting additional operator flags via the Helm chart #​7252 (issue: #​6091)
• Support configuring "ca-dir" operator setting via helm #​7243 (issues: #​6091, #​6435)

Bug fixes

• Update eck-elasticsearch default secureSettings values to be slice. #​7397
• Fix recipe name to run Fleet as non-root #​7313 (issue: #​7312)

Documentation improvements

• Document how to use stack config policies to manage authentication #​7381
• Fix secure settings link on stack config policy page #​7377
• Document known issue with Kibana 8.11.2 using secure settings #​7373 (issue: #​7371)
• Add details about rolling restart behavior #​7372
• Update node configuration documentation to note reserved settings. #​7351
• Use docker.io/bash for sleep container of max-map-count-setter Daemonset #​7332
• Update Beats stack monitoring recipe #​7322
• Document basic snapshot repository setup for Azure #​7308
• Documentation link replaced with markup in 2.10 release notes #​7306
• Make plugin installation via initContainer more robust #​7305
• Add additional details on CA requirements. #​7271
• Document how to provide container registry credentials in air-gapped environments #​7256)

Misc

• Bump golang.org/x/crypto from 0.16.0 to 0.17.0 #​7394
• chore(deps): update docker.io/library/golang docker tag to v1.21.5 #​7366
• fix(deps): update module github.com/google/go-containerregistry to v0.17.0 #​7355
• fix(deps): update module go.elastic.co/apm/v2 to v2.4.7 #​7337
• Bump github.com/go-jose/go-jose/v3 from 3.0.0 to 3.0.1 #​7329
• chore(deps): update registry.access.redhat.com/ubi9/ubi-minimal docker tag to v9 #​7326
• fix(deps): update k8s to v0.28.4 #​7319
• fix(deps): update module github.com/spf13/cobra to v1.8.0 #​7288
• Update docker v24.0.7+incompatible #​7282
• fix(deps): update module k8s.io/klog/v2 to v2.110.1 #​7278
• fix(deps): update module github.com/go-logr/logr to v1.3.0 #​7272
• fix(deps): update module github.com/google/uuid to v1.4.0 #​7270
• fix(deps): update module sigs.k8s.io/controller-runtime to v0.16.3 #​7249
• fix(deps): update module github.com/prometheus/common to v0.45.0 #​7246

v2.10.0

Compare Source

Elastic Cloud on Kubernetes 2.10.0

• Release highlights
• Quickstart guide

Enhancements

• Allow setting additional operator flags via the Helm chart #​7252
• Support configuring "ca-dir" operator setting via Helm #​7243
• Logstash Elastic Stack Helm Chart #​7143
• Support for Logstash secure settings from Kubernetes Secrets using keystore #​7024
• Support running Agent as a non-root #​6700

Bug fixes

• Update ECK-Beats default values to not include ElasticsearchRef. #​7228
• Updating scripts configMap no longer causes Elasticsearch restart #​7114 (issue: #​6963)
• Remove volumeClaimTemplates status sub-resource from Elasticsearch CRD #​7097
• Fix indentation to specify affinity, nodeSelector and tolerations in operator Helm chart #​7084

Documentation improvements

• Better sample command outputs in the Agent Fleet documentation #​7213
• Improved documentation about how to reset the default user's password #​7181 (issue: #​7182)
• Removed trailing whitespaces from operator's values.yaml file. #​7179 (issue: #​7178)
• Update beat/agent doc with missing RBAC rules required from 8.9.0 #​7161 (issue: #​6946)
• Better documentation of podDisruptionBudget for Elasticsearch.spec #​7155
• Kubernetes 1.28 added to supported versions #​7147
• Fix incorrect Pod template spec in Logstash docs #​7124
• SAML documentation examples no longer use a deprecated callback URL #​7117 (issue:#​7118)
• SAML documentation examples have a trailing slash in sp.entity_id #​7115 (issue: #​7116)
• Fix manifest example to update JVM options for Logstash #​7113
• Stack monitoring documentation examples updated to use v1alpha1 as Logstash k8s api version #​7111
• Update saml-authentication.asciidoc #​7101
• Fix sed command to use FIPS compatible operator image in FIPS doc #​7076
• Update docs concerning intermediate CAs #​7066
• Stack config policies are no longer marked as experimental #​7044
• Air-gapped documentation describes how to use a mirrored operator image #​7019
• Update Fleet Server quickstart documentation to use emptyDir for agent-data volumes #​6563

Misc

• Update module golang.org/x/net to 0.17.0 #​7229
• fix(deps): update module go.elastic.co/apm/v2 to v2.4.5 #​7218
• fix(deps): update module github.com/google/go-cmp to v0.6.0 #​7216
• chore(deps): update docker.io/library/golang docker tag to v1.21.3 #​7215
• fix(deps): update module google.golang.org/api to v0.146.0 #​7211
• chore(deps): update registry.access.redhat.com/ubi8/ubi-minimal docker tag to v8.8-1072.1696517598 #​7210
• fix(deps): update module github.com/spf13/viper to v1.17.0 #​7209
• fix(deps): update module golang.org/x/crypto to v0.14.0 #​7203
• fix(deps): update module github.com/hashicorp/golang-lru/v2 to v2.0.7 #​7193
• fix(deps): update module github.com/prometheus/client_golang to v1.17.0 #​7186
• fix(deps): update module sigs.k8s.io/controller-runtime to v0.16.2 #​7185
• fix(deps): update module go.uber.org/zap to v1.26.0 #​7169
• fix(deps): update k8s to v0.28.2 #​7165
• fix(deps): update module github.com/hashicorp/vault/api to v1.10.0 #​7152
• Update module github.com/google/go-containerregistry to v0.16.1 #​7073
• Update module go.uber.org/automaxprocs to v1.5.3 #​7042
• Update module sigs.k8s.io/controller-tools to v0.12.1 #​7011

v2.9.0

Compare Source

Elastic Cloud on Kubernetes 2.9.0

• Release highlights
• Quickstart guide

Breaking changes

• Add Support for volumeClaimTemplates for Logstash controller #​6884

Enhancements

• Enable runAsNonRoot=true for Beats >= 8.8.x #​6793

Bug fixes

• Validating policy ID only when running in Fleet mode for Elastic Agent #​6938 (issue: #​6903)
• Add Selector to Logstash status #​6854

Documentation improvements

• Document Logstash connection to external Elasticsearch #​6895

Misc

• Update module golang.org/x/text to v0.11.0 #​6976
• Update registry.access.redhat.com/ubi8/ubi-minimal Docker tag to v8.8-1014 #​6962
• Disable test agent with fleet mode in 8.0.1 #​6957 (issues: #​6331, #​6956)
• Update module go.elastic.co/apm/v2 to v2.4.3 #​6942
• Update module github.com/hashicorp/golang-lru/v2 to v2.0.4 #​6935
• Update module github.com/imdario/mergo to v1 #​6925
• Update module github.com/prometheus/client_golang to v1.16.0 #​6909
• Update k8s to v0.27.3 #​6908
• Update module golang.org/x/crypto to v0.10.0 #​6900
• Update docker.io/library/golang Docker tag to v1.20.5 #​6887
• Update module github.com/spf13/viper to v1.16.0 #​6867
• Update module github.com/stretchr/testify to v1.8.4 #​6866
• Update module sigs.k8s.io/controller-runtime to v0.15.0 #​6847
• Update module github.com/prometheus/common to v0.44.0 #​6835
• Update module github.com/google/go-containerregistry to v0.15.2 #​6817
• Update module golang.org/x/oauth2 to v0.8.0 #​6771
• Update module golang.org/x/net to v0.10.0 #​6770

v2.8.0: 2.8.0

Compare Source

Elastic Cloud on Kubernetes 2.8.0

Warning This release includes a hardened default security context for Elasticsearch containers. It is highly recommended to test against a staging environment before deploying to production.

• Release highlights
• Quickstart guide

Breaking changes

• Use provided base path for stackconfigpolicy's snapshot repository #​6689 (issue: #​6692)
• APM Server: Fix secret token config for APM Server 8.0+ #​6769 (issue: #​6768)

New features

• Introduce the Logstash operator for ECK #​6732 (issue: #​1453)

Enhancements

Elasticsearch

• Call _nodes/shutdown from pre-stop hook #​6544 (issue: #​6478)
• Create Elasticsearch client for observer only if needed #​6407 (issue: #​6090)
• Add the full CA certificate chain to trusted HTTP certs for Elasticsearch #​6681 (issue: #​6574)
• Allow custom certificates on the transport layer #​6727 (issue: #​6479)
• Hardened Security Context for Elasticsearch #​6703 (issue: #​6126)

Helm charts

• Enable hostNetwork support in eck-operator Helm chart #​6636
• Add PodDisruptionBudget to eck-operator Helm chart #​6671

ECK Operator

• Add operator flag to define webhook port #​6691 (issue: #​6655)
• Add operator flag to define global container repository #​6737 (issue: #​6643)

Fleet

• Deprecate is_default and is_default_fleet_server flags #​6724 (issue: #​6678)

Bug fixes

• Fix doc attributes in stack-helm-chart.asciidoc #​6742
• Do not set FLEET_CA for well-known CAs #​6733 (issue: #​6673)
• Fix default elasticsearch-data volumeMount configuration #​6725 (issue: #​6186)
• Conditionally set container-suffix in ECK config #​6711 (issue: #​6695)
• [helm-chart] Include webhook client configuration CA only when certificates are not managed by the operator or cert-manager #​6642 (issue: #​6641)
• Remove default for daemonset/deployment in eck-beats & eck-agent Helm Charts #​6621 (issue: #​6330)

Documentation improvements

• Documentation for running ECK, Elasticsearch, and Kibana on GKE Autopilot #​6760
• Contributing page updated with Helm chart tests suite #​6744
• Documentation for Logstash on ECK #​6743
• Add 2.6 and 2.7 to the triggered restart list #​6786 (issue: #​6765)

Misc

• Bump github.com/docker/distribution from 2.8.1+incompatible to 2.8.2+incompatible #​6801
• Bump google.golang.org/protobuf from 1.29.0 to 1.29.1 #​6549
• Update docker.io/library/golang Docker tag to v1.20.4 #​6752
• Update github.com/docker/docker #​6654
• Update k8s to v0.26.3 #​6546
• Update k8s.io/client-go to v0.26.5 #​6849
• Update module cloud.google.com/go/storage to v1.30.0 #​6531
• Update module github.com/go-git/go-git/v5 to v5.6.1 #​6536
• Update module github.com/go-logr/logr to v1.2.4 #​6625
• Update module github.com/google/go-containerregistry to v0.14.0 #​6532
• Update module github.com/hashicorp/vault/api to v1.9.1 #​6707
• Update module github.com/imdario/mergo to v0.3.15 #​6581
• Update module github.com/operator-framework/operator-registry to v1.26.5 #​6622
• Update module github.com/prometheus/client_golang to v1.15.0 #​6686
• Update module github.com/spf13/cobra to v1.7.0 #​6647
• Update module go.elastic.co/apm/module/apmelasticsearch/v2 to v2.3.0 #​6631
• Update module go.elastic.co/apm/module/apmzap/v2 to v2.3.0 #​6633
• Update module go.uber.org/automaxprocs to v1.5.2 #​6547
• Update module golang.org/x/crypto to v0.8.0 #​6669
• Update module golang.org/x/text to v0.9.0 #​6666
• Update module google.golang.org/api to v0.115.0 #​6651
• Update module sigs.k8s.io/controller-runtime to v0.14.6 #​6614
• Update module sigs.k8s.io/controller-tools to v0.11.4 #​6718
• Update modules go.elastic.co/apm/* to v2.4.1 #​6739
• Update registry.access.redhat.com/ubi8/ubi-minimal Docker tag to v8.7-1107 #​6646

---

Configuration

📅 Schedule: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.