feat: update helm chart tigera-operator to v3.23.0

[bloopy-boi]

This PR contains the following updates:

Package	Update	Change
tigera-operator (source)	minor	v3.22.2 -> v3.23.0

---

Release Notes

projectcalico/calico

v3.23.0

Compare Source

Release notes can be found at https://projectcalico.docs.tigera.io/archive/v3.23/release-notes/

Attached to this release are the following artifacts:

• release-v3.23.0.tgz: container images, binaries, and kubernetes manifests.
• calico-windows-v3.23.0.zip: Calico for Windows.
• tigera-operator-v3.23.0.tgz: Calico Helm v3 chart.

---

Configuration

📅 Schedule: At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, click this checkbox.

---

This PR has been generated by Renovate Bot.

[bloopy-boi]

Path: cluster/core/tigera-operator/helm-release.yaml
Version: v3.22.2 -> v3.23.0

@@ -1,13 +1,4 @@
 ---
-# Source: tigera-operator/templates/tigera-operator/00-namespace-tigera-operator.yaml
-apiVersion: v1
-kind: Namespace
-metadata:
- name: tigera-operator
- annotations:
- labels:
- name: tigera-operator
----
 # Source: tigera-operator/templates/tigera-operator/02-podsecuritypolicy-tigera-operator.yaml
 # This should not be rendered for an OpenShift install.
 # OpenShift uses SecurityContextConstraints instead.
@@ -60,7 +51,7 @@
 kind: ServiceAccount
 metadata:
 name: tigera-operator
- namespace: tigera-operator
+ namespace: default
 ---
 # Source: tigera-operator/templates/tigera-operator/02-role-tigera-operator.yaml
 # Permissions required when running the operator for a Calico cluster.
@@ -197,6 +188,7 @@
 resources:
 - ippools
 - kubecontrollersconfigurations
+ - bgpconfigurations
 verbs:
 - get
 - list
@@ -280,7 +272,7 @@
 subjects:
 - kind: ServiceAccount
 name: tigera-operator
- namespace: tigera-operator
+ namespace: default
 roleRef:
 kind: ClusterRole
 name: tigera-operator
@@ -291,7 +283,7 @@
 kind: Deployment
 metadata:
 name: tigera-operator
- namespace: tigera-operator
+ namespace: default
 labels:
 k8s-app: tigera-operator
 spec:

[h3mmy]

kubectl patch installation default --type=merge -p '{"metadata": {"annotations": {"meta.helm.sh/release-namespace": "tigera-operator"}}}'
kubectl patch apiserver default --type=merge -p '{"metadata": {"annotations": {"meta.helm.sh/release-namespace": "tigera-operator"}}}'
kubectl patch podsecuritypolicy tigera-operator --type=merge -p '{"metadata": {"annotations": {"meta.helm.sh/release-namespace": "tigera-operator"}}}'
kubectl patch -n tigera-operator deployment tigera-operator --type=merge -p '{"metadata": {"annotations": {"meta.helm.sh/release-namespace": "tigera-operator"}}}'
kubectl patch -n tigera-operator serviceaccount tigera-operator --type=merge -p '{"metadata": {"annotations": {"meta.helm.sh/release-namespace": "tigera-operator"}}}'
kubectl patch clusterrole tigera-operator --type=merge -p '{"metadata": {"annotations": {"meta.helm.sh/release-namespace": "tigera-operator"}}}'
kubectl patch clusterrolebinding tigera-operator tigera-operator --type=merge -p '{"metadata": {"annotations": {"meta.helm.sh/release-namespace": "tigera-operator"}}}'

[h3mmy]

https://projectcalico.docs.tigera.io/maintenance/kubernetes-upgrade#upgrading-an-installation-that-was-installed-using-helm