feat(helm): update loki ( 6.24.0 → 6.25.0 )

[layla-bot]

This PR contains the following updates:

Package	Update	Change
loki (source)	minor	6.24.0 -> 6.25.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[layla-bot]

--- kubernetes/main/apps/observability/loki/app Kustomization: flux-system/loki HelmRelease: observability/loki

+++ kubernetes/main/apps/observability/loki/app Kustomization: flux-system/loki HelmRelease: observability/loki

@@ -13,13 +13,13 @@

     spec:
       chart: loki
       sourceRef:
         kind: HelmRepository
         name: grafana
         namespace: flux-system
-      version: 6.24.0
+      version: 6.25.0
   dependsOn:
   - name: openebs
     namespace: openebs-system
   install:
     crds: Skip
     remediation:

[layla-bot]

--- HelmRelease: observability/loki StatefulSet: observability/loki

+++ HelmRelease: observability/loki StatefulSet: observability/loki

@@ -41,13 +41,13 @@

         runAsGroup: 10001
         runAsNonRoot: true
         runAsUser: 10001
       terminationGracePeriodSeconds: 30
       containers:
       - name: loki-sc-rules
-        image: ghcr.io/kiwigrid/k8s-sidecar:1.28.0
+        image: ghcr.io/kiwigrid/k8s-sidecar:1.29.0
         imagePullPolicy: IfNotPresent
         env:
         - name: METHOD
           value: WATCH
         - name: LABEL
           value: loki_rule
@@ -60,12 +60,18 @@

         - name: WATCH_SERVER_TIMEOUT
           value: '60'
         - name: WATCH_CLIENT_TIMEOUT
           value: '60'
         - name: LOG_LEVEL
           value: INFO
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
+          readOnlyRootFilesystem: true
         volumeMounts:
         - name: sc-rules-volume
           mountPath: /rules
       - name: loki
         image: docker.io/grafana/loki:3.3.2
         imagePullPolicy: IfNotPresent