feat(container)!: Update kube-prometheus-stack ( 67.11.0 → 68.2.1 )

[stimpy-bot]

This PR contains the following updates:

Package	Update	Change
kube-prometheus-stack (source)	major	67.11.0 -> 68.2.1

---

Release Notes

prometheus-community/helm-charts (kube-prometheus-stack)

v68.2.1

Compare Source

v68.2.0

Compare Source

v68.1.1

Compare Source

v68.1.0

Compare Source

v68.0.0

Compare Source

---

Configuration

📅 Schedule: Branch creation - "every weekend" in timezone America/Chicago, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[github-actions]

--- kubernetes/apps/observability/kube-prometheus-stack/app Kustomization: flux-system/kube-prometheus-stack HelmRelease: observability/kube-prometheus-stack

+++ kubernetes/apps/observability/kube-prometheus-stack/app Kustomization: flux-system/kube-prometheus-stack HelmRelease: observability/kube-prometheus-stack

@@ -13,13 +13,13 @@

     spec:
       chart: kube-prometheus-stack
       sourceRef:
         kind: HelmRepository
         name: prometheus-community
         namespace: flux-system
-      version: 67.11.0
+      version: 68.2.1
   dependsOn:
   - name: prometheus-operator-crds
     namespace: observability
   - name: openebs
     namespace: storage
   install:

[github-actions]

--- HelmRelease: observability/kube-prometheus-stack Alertmanager: observability/kube-prometheus-stack

+++ HelmRelease: observability/kube-prometheus-stack Alertmanager: observability/kube-prometheus-stack

@@ -9,14 +9,14 @@

     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/instance: kube-prometheus-stack
     app.kubernetes.io/part-of: kube-prometheus-stack
     release: kube-prometheus-stack
     heritage: Helm
 spec:
-  image: quay.io/prometheus/alertmanager:v0.27.0
-  version: v0.27.0
+  image: quay.io/prometheus/alertmanager:v0.28.0
+  version: v0.28.0
   replicas: 1
   listenLocal: false
   serviceAccountName: kube-prometheus-stack-alertmanager
   automountServiceAccountToken: true
   externalUrl: http://alertmanager...PLACEHOLDER_SECRET_DOMAIN../
   paused: false
--- HelmRelease: observability/kube-prometheus-stack ServiceMonitor: observability/kube-prometheus-stack-apiserver

+++ HelmRelease: observability/kube-prometheus-stack ServiceMonitor: observability/kube-prometheus-stack-apiserver

@@ -15,13 +15,13 @@

   endpoints:
   - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token
     port: https
     scheme: https
     metricRelabelings:
     - action: drop
-      regex: apiserver_request_duration_seconds_bucket;(0.15|0.2|0.3|0.35|0.4|0.45|0.6|0.7|0.8|0.9|1.25|1.5|1.75|2|3|3.5|4|4.5|6|7|8|9|15|25|40|50)
+      regex: (etcd_request|apiserver_request_slo|apiserver_request_sli|apiserver_request)_duration_seconds_bucket;(0\.15|0\.2|0\.3|0\.35|0\.4|0\.45|0\.6|0\.7|0\.8|0\.9|1\.25|1\.5|1\.75|2|3|3\.5|4|4\.5|6|7|8|9|15|20|30|40|45|50)(\.0)?
       sourceLabels:
       - __name__
       - le
     tlsConfig:
       caFile: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt
       serverName: kubernetes
--- HelmRelease: observability/kube-prometheus-stack ServiceMonitor: observability/kube-prometheus-stack-kubelet

+++ HelmRelease: observability/kube-prometheus-stack ServiceMonitor: observability/kube-prometheus-stack-kubelet

@@ -28,12 +28,18 @@

     tlsConfig:
       caFile: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt
       insecureSkipVerify: true
     bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token
     honorLabels: true
     honorTimestamps: true
+    metricRelabelings:
+    - action: drop
+      regex: (csi_operations|storage_operation_duration)_seconds_bucket;(0.25|2.5|15|25|120|600)(\.0)?
+      sourceLabels:
+      - __name__
+      - le
     relabelings:
     - action: replace
       sourceLabels:
       - __metrics_path__
       targetLabel: metrics_path
   - port: https-metrics
@@ -62,12 +68,22 @@

       - __name__
     - action: drop
       regex: container_(file_descriptors|tasks_state|threads_max)
       sourceLabels:
       - __name__
     - action: drop
+      regex: container_memory_failures_total;hierarchy
+      sourceLabels:
+      - __name__
+      - scope
+    - action: drop
+      regex: container_network_.*;(cali|cilium|cni|lxc|nodelocaldns|tunl).*
+      sourceLabels:
+      - __name__
+      - interface
+    - action: drop
       regex: container_spec.*
       sourceLabels:
       - __name__
     - action: drop
       regex: .+;
       sourceLabels: