fix(loki): update helm-release ( 6.24.0 → 6.24.1 )

[tyriis-automation]

This PR contains the following updates:

Package	Update	Change	OpenSSF
loki (source)	patch	6.24.0 -> 6.24.1

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[tyriis-automation]

🦙 MegaLinter status: ✅ SUCCESS

Descriptor	Linter	Files	Fixed	Errors	Elapsed time
✅ EDITORCONFIG	editorconfig-checker	1		0	0.01s
✅ REPOSITORY	gitleaks	yes		no	4.06s
✅ YAML	prettier	1		0	0.55s
✅ YAML	yamllint	1		0	0.36s

See detailed report in MegaLinter reports
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

MegaLinter is graciously provided by OX Security

[tyriis-automation]

--- kubernetes/talos-flux/apps/observability/loki/app Kustomization: flux-system/apps-loki HelmRelease: observability/loki

+++ kubernetes/talos-flux/apps/observability/loki/app Kustomization: flux-system/apps-loki HelmRelease: observability/loki

@@ -15,13 +15,13 @@

       chart: loki
       interval: 30m
       sourceRef:
         kind: HelmRepository
         name: grafana-charts
         namespace: flux-system
-      version: 6.24.0
+      version: 6.24.1
   install:
     remediation:
       retries: 3
   interval: 30m
   maxHistory: 10
   timeout: 5m

[tyriis-automation]

--- HelmRelease: observability/loki StatefulSet: observability/loki

+++ HelmRelease: observability/loki StatefulSet: observability/loki

@@ -43,13 +43,13 @@

         runAsGroup: 10001
         runAsNonRoot: true
         runAsUser: 10001
       terminationGracePeriodSeconds: 30
       containers:
       - name: loki-sc-rules
-        image: kiwigrid/k8s-sidecar:1.28.0
+        image: kiwigrid/k8s-sidecar:1.29.0
         imagePullPolicy: IfNotPresent
         env:
         - name: METHOD
           value: WATCH
         - name: LABEL
           value: loki_rule
@@ -62,12 +62,18 @@

         - name: WATCH_SERVER_TIMEOUT
           value: '60'
         - name: WATCH_CLIENT_TIMEOUT
           value: '60'
         - name: LOG_LEVEL
           value: INFO
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
+          readOnlyRootFilesystem: true
         volumeMounts:
         - name: sc-rules-volume
           mountPath: /rules/fake
       - name: loki
         image: docker.io/grafana/loki:3.3.2
         imagePullPolicy: IfNotPresent