fix(helm): update teleport-cluster ( 16.4.6 → 16.4.7 )

[unsc-oni-ancilla]

This PR contains the following updates:

Package	Update	Change
teleport-cluster	patch	16.4.6 -> 16.4.7

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[github-actions]

--- HelmRelease: teleport/teleport ServiceAccount: teleport/teleport

+++ HelmRelease: teleport/teleport ServiceAccount: teleport/teleport

@@ -7,8 +7,12 @@

   labels:
     app.kubernetes.io/name: teleport-cluster
     app.kubernetes.io/instance: teleport
     app.kubernetes.io/component: auth
     app.kubernetes.io/managed-by: Helm
     teleport.dev/majorVersion: '16'
+  annotations:
+    helm.sh/hook: pre-install
+    helm.sh/hook-weight: '3'
+    helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded
 automountServiceAccountToken: false
 
--- HelmRelease: teleport/teleport ServiceAccount: teleport/teleport-proxy

+++ HelmRelease: teleport/teleport ServiceAccount: teleport/teleport-proxy

@@ -7,8 +7,12 @@

   labels:
     app.kubernetes.io/name: teleport-cluster
     app.kubernetes.io/instance: teleport
     app.kubernetes.io/component: proxy
     app.kubernetes.io/managed-by: Helm
     teleport.dev/majorVersion: '16'
+  annotations:
+    helm.sh/hook: pre-install
+    helm.sh/hook-weight: '3'
+    helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded
 automountServiceAccountToken: false
 
--- HelmRelease: teleport/teleport Deployment: teleport/teleport-auth

+++ HelmRelease: teleport/teleport Deployment: teleport/teleport-auth

@@ -31,13 +31,13 @@

         app: teleport
     spec:
       affinity:
         podAntiAffinity: null
       containers:
       - name: teleport
-        image: public.ecr.aws/gravitational/teleport-distroless:16.4.6
+        image: public.ecr.aws/gravitational/teleport-distroless:16.4.7
         imagePullPolicy: IfNotPresent
         args:
         - --diag-addr=0.0.0.0:3000
         - --apply-on-startup=/etc/teleport/apply-on-startup.yaml
         ports:
         - name: diag
--- HelmRelease: teleport/teleport Deployment: teleport/teleport-proxy

+++ HelmRelease: teleport/teleport Deployment: teleport/teleport-proxy

@@ -28,21 +28,21 @@

         teleport.dev/majorVersion: '16'
     spec:
       affinity:
         podAntiAffinity: null
       initContainers:
       - name: wait-auth-update
-        image: public.ecr.aws/gravitational/teleport-distroless:16.4.6
+        image: public.ecr.aws/gravitational/teleport-distroless:16.4.7
         command:
         - teleport
         - wait
         - no-resolve
         - teleport-auth-v15.teleport.svc.cluster.local
       containers:
       - name: teleport
-        image: public.ecr.aws/gravitational/teleport-distroless:16.4.6
+        image: public.ecr.aws/gravitational/teleport-distroless:16.4.7
         imagePullPolicy: IfNotPresent
         args:
         - --diag-addr=0.0.0.0:3000
         ports:
         - name: tls
           containerPort: 3080
--- HelmRelease: teleport/teleport Job: teleport/teleport-auth-test

+++ HelmRelease: teleport/teleport Job: teleport/teleport-auth-test

@@ -17,13 +17,13 @@

   backoffLimit: 1
   template:
     spec:
       restartPolicy: Never
       containers:
       - name: teleport-config-check
-        image: public.ecr.aws/gravitational/teleport-distroless:16.4.6
+        image: public.ecr.aws/gravitational/teleport-distroless:16.4.7
         imagePullPolicy: IfNotPresent
         command:
         - teleport
         - configure
         args:
         - --test
@@ -37,7 +37,8 @@

       volumes:
       - name: config
         configMap:
           name: teleport-auth-test
       - name: data
         emptyDir: {}
+      serviceAccountName: teleport
 
--- HelmRelease: teleport/teleport Job: teleport/teleport-proxy-test

+++ HelmRelease: teleport/teleport Job: teleport/teleport-proxy-test

@@ -18,13 +18,13 @@

   backoffLimit: 1
   template:
     spec:
       restartPolicy: Never
       containers:
       - name: teleport
-        image: public.ecr.aws/gravitational/teleport-distroless:16.4.6
+        image: public.ecr.aws/gravitational/teleport-distroless:16.4.7
         imagePullPolicy: IfNotPresent
         command:
         - teleport
         - configure
         args:
         - --test
@@ -45,7 +45,8 @@

           optional: true
       - name: config
         configMap:
           name: teleport-proxy-test
       - name: data
         emptyDir: {}
+      serviceAccountName: teleport-proxy
 

[github-actions]

--- kubernetes/apps/teleport/teleport/app Kustomization: flux-system/teleport HelmRelease: teleport/teleport

+++ kubernetes/apps/teleport/teleport/app Kustomization: flux-system/teleport HelmRelease: teleport/teleport

@@ -15,13 +15,13 @@

       chart: teleport-cluster
       interval: 15m
       sourceRef:
         kind: HelmRepository
         name: teleport
         namespace: flux-system
-      version: 16.4.6
+      version: 16.4.7
   interval: 15m
   values:
     annotations:
       ingress:
         cert-manager.io/cluster-issuer: letsencrypt-production
         external-dns.alpha.kubernetes.io/target: external...PLACEHOLDER_SECRET_DOMAIN..