chore(deps): update helm release common to v5 - autoclosed

[renovate]

This PR contains the following updates:

Package	Update	Change
common (source)	major	4.6.2 → 5.0.1

---

Release Notes

bjw-s-labs/helm-charts (common)

v5.0.1

Changelog:

Fixed

• Pod spec.serviceAccountName now properly uses the resolved name (including global.nameOverride) when auto-detecting a single serviceAccount.
• Allow omitting namespace in route parentRefs.

Changed

• Allow setting namespace field on rawResources.

v5.0.0

Compare Source

Changelog:

Added

• NetworkPolicy now auto-detects and targets a single controller when no controller or podSelector is specified and exactly one controller exists.
• Allow creating HorizontalPodAutoscaler objects for controllers.
• Add support for creating PodMonitors in addition to ServiceMonitors
• Add support for setting container resizePolicy in Kubernetes versions >= 1.35
• Add support for setting Pod resizePolicy in Kubernetes versions >= 1.36
• Add native support for generic ephemeral volumes via the new ephemeral persistence type.

Changed

• Breaking: Restructured rawResources to use a manifest wrapper key for cleaner syntax. Previously the K8s manifest content was placed under a spec key which caused confusion. Global chart labels and annotations are automatically merged with user-provided ones.
• Breaking: automountServiceAccountToken now defaults to false to improve security posture.
• Breaking: Create an unprivileged serviceAccount by default. Can be disabled by setting global.createDefaultServiceAccount to false.
• Breaking: ServiceMonitor and PodMonitor jobLabel fields now default to app.kubernetes.io/name.
• Minimum required Kubernetes version has been increased to 1.31
• Minimum required Helm version has been increased to 3.18

Fixed

• Improve error messages
• Fix edge case in volumeMounts where default persistence type was not properly set
• Fix whitespace handling in Route backendRefs

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 9am on tuesday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Changes in Final Manifest

1 file changed:

• M manifest.yaml

1 modified M

Diff

manifest.yaml

@@ -1,6 +1,45 @@
 ---
 # Source: immich/templates/machine-learning.yaml
 apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: immich-machine-learning
+  labels:
+    app.kubernetes.io/instance: immich
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: machine-learning
+    app.kubernetes.io/version: v2.6.3
+    helm.sh/chart: immich-0.11.1
+  namespace: default
+---
+# Source: immich/templates/server.yaml
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: immich-server
+  labels:
+    app.kubernetes.io/instance: immich
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: server
+    app.kubernetes.io/version: v2.6.3
+    helm.sh/chart: immich-0.11.1
+  namespace: default
+---
+# Source: immich/templates/valkey.yaml
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: immich-valkey
+  labels:
+    app.kubernetes.io/instance: immich
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: valkey
+    app.kubernetes.io/version: v2.6.3
+    helm.sh/chart: immich-0.11.1
+  namespace: default
+---
+# Source: immich/templates/machine-learning.yaml
+apiVersion: v1
 kind: Service
 metadata:
   name: immich-machine-learning
@@ -107,8 +146,8 @@ spec:
         app.kubernetes.io/name: machine-learning
     spec: 
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: immich-machine-learning
+      automountServiceAccountToken: false
       hostIPC: false
       hostNetwork: false
       hostPID: false
@@ -194,8 +233,8 @@ spec:
         app.kubernetes.io/name: server
     spec: 
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: immich-server
+      automountServiceAccountToken: false
       hostIPC: false
       hostNetwork: false
       hostPID: false
@@ -276,8 +315,8 @@ spec:
         app.kubernetes.io/name: valkey
     spec: 
       enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
+      serviceAccountName: immich-valkey
+      automountServiceAccountToken: false
       hostIPC: false
       hostNetwork: false
       hostPID: false

GitHub Actions