fix(helm): update grafana ( 8.5.6 → 8.5.8 )

[rosey-the-renovator-bot]

This PR contains the following updates:

Package	Update	Change
grafana (source)	patch	8.5.6 -> 8.5.8

---

Release Notes

grafana/helm-charts (grafana)

v8.5.8

Compare Source

The leading tool for querying and visualizing time series and metrics.

What's Changed

• [grafana] add extraMounts to plugins sidecar by @​coutug in https://github.com/grafana/helm-charts/pull/3355

New Contributors

• @​coutug made their first contribution in https://github.com/grafana/helm-charts/pull/3355

Full Changelog: grafana/helm-charts@grafana-8.5.7...grafana-8.5.8

v8.5.7

Compare Source

The leading tool for querying and visualizing time series and metrics.

What's Changed

• [grafana] use release with security fix for CVE-2024-9264 by @​kubicgruenfeld in https://github.com/grafana/helm-charts/pull/3369

Full Changelog: grafana/helm-charts@alloy-0.9.2...grafana-8.5.7

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[rosey-the-renovator-bot]

--- kubernetes/main/apps/monitoring/grafana/app Kustomization: flux-system/monitoring-grafana HelmRelease: monitoring/grafana

+++ kubernetes/main/apps/monitoring/grafana/app Kustomization: flux-system/monitoring-grafana HelmRelease: monitoring/grafana

@@ -12,13 +12,13 @@

     spec:
       chart: grafana
       sourceRef:
         kind: HelmRepository
         name: grafana-charts
         namespace: flux-system
-      version: 8.5.6
+      version: 8.5.8
   install:
     createNamespace: true
     remediation:
       retries: 3
   interval: 30m
   maxHistory: 3

[rosey-the-renovator-bot]

--- HelmRelease: monitoring/grafana Deployment: monitoring/grafana

+++ HelmRelease: monitoring/grafana Deployment: monitoring/grafana

@@ -20,15 +20,15 @@

   template:
     metadata:
       labels:
         app.kubernetes.io/name: grafana
         app.kubernetes.io/instance: grafana
       annotations:
-        checksum/dashboards-json-config: 426133dc0666949e3d7be9fd48be4b623510c8283d156a7740538edf6e910861
+        checksum/dashboards-json-config: 5fef51f3ce114a6bac5fef12d726de45ffb3b7364599049029155482468eb7c1
         checksum/sc-dashboard-provider-config: e70bf6a851099d385178a76de9757bb0bef8299da6d8443602590e44f05fdf24
-        checksum/secret: 64e8af9374b058ae6a1e620ad58e1b8d36fa4ae83134414187f74b0a33272526
+        checksum/secret: 5f6794a557ddd41dcdf95e49b6dbf07e2d8738fead1f82d55f9a7c88a0ff5191
         kubectl.kubernetes.io/default-container: grafana
         configmap.reloader.stakater.com/reload: grafana-config-dashboards,grafana-dashboards-default,*app
         secret.reloader.stakater.com/reload: grafana-secret
     spec:
       serviceAccountName: grafana
       automountServiceAccountToken: true
@@ -142,13 +142,13 @@

           seccompProfile:
             type: RuntimeDefault
         volumeMounts:
         - name: sc-datasources-volume
           mountPath: /etc/grafana/provisioning/datasources
       - name: grafana
-        image: docker.io/grafana/grafana:11.2.2
+        image: docker.io/grafana/grafana:11.2.2-security-01
         imagePullPolicy: IfNotPresent
         securityContext:
           allowPrivilegeEscalation: false
           capabilities:
             drop:
             - ALL