chore(chart-deps): update kube-prometheus-stack to version 79.10.0

chart/chart-index/Chart.yaml

@@ -65,7 +65,7 @@ dependencies:
     version: v0.16.0
     repository: oci://ghcr.io/kserve/charts/kserve
   - name: kube-prometheus-stack
-    version: 79.9.0
+    version: 79.10.0
     repository: https://prometheus-community.github.io/helm-charts
   - name: kyverno
     version: 3.5.2

charts/kube-prometheus-stack/Chart.lock

@@ -10,9 +10,9 @@ dependencies:
   version: 4.49.2
 - name: grafana
   repository: https://grafana.github.io/helm-charts
-  version: 10.2.0
+  version: 10.3.0
 - name: prometheus-windows-exporter
   repository: https://prometheus-community.github.io/helm-charts
   version: 0.12.2
-digest: sha256:7e66999c109cf735c850c1fa341018edb43bbbb9dbe31a899a4bf918b5fe4033
-generated: "2025-11-28T16:43:27.964772353Z"
+digest: sha256:51c9fda4bf3457c9651d1f0a9ad2e75d3342f73b6dd112c5e9146f1cf0999148
+generated: "2025-12-01T19:56:53.773728345Z"

charts/kube-prometheus-stack/Chart.yaml

@@ -26,7 +26,7 @@ dependencies:
 - condition: grafana.enabled
   name: grafana
   repository: https://grafana.github.io/helm-charts
-  version: 10.2.0
+  version: 10.3.0
 - condition: windowsMonitoring.enabled
   name: prometheus-windows-exporter
   repository: https://prometheus-community.github.io/helm-charts
@@ -72,4 +72,4 @@ sources:
 - https://github.com/prometheus-community/helm-charts
 - https://github.com/prometheus-operator/kube-prometheus
 type: application
-version: 79.9.0
+version: 79.10.0

charts/kube-prometheus-stack/charts/grafana/Chart.yaml

@@ -34,4 +34,4 @@ sources:
 - https://github.com/grafana/grafana
 - https://github.com/grafana/helm-charts
 type: application
-version: 10.2.0
+version: 10.3.0

charts/kube-prometheus-stack/charts/grafana/README.md

@@ -195,6 +195,8 @@ This ensures the expressions are preserved for Alertmanager instead of being ren
 | `sidecar.alerts.reloadURL`           | Full url of datasource configuration reload API endpoint, to invoke after a config-map change | `"http://localhost:3000/api/admin/provisioning/alerting/reload"` |
 | `sidecar.alerts.skipReload`          | Enabling this omits defining the REQ_URL and REQ_METHOD environment variables | `false` |
 | `sidecar.alerts.initAlerts`          | Set to true to deploy the alerts sidecar as an initContainer. This is needed if skipReload is true, to load any alerts defined at startup time. | `false` |
+| `sidecar.alerts.restartPolicy`        |  Set to `Always` to enable native sidecars. `sidecar.alerts.initAlerts` must be `true` | `""`|
+| `sidecar.alerts.startupProbe`         |  Startup probe for the native sidecar | `{}` |
 | `sidecar.alerts.extraMounts`         | Additional alerts sidecar volume mounts. | `[]`                               |
 | `sidecar.dashboards.enabled`              | Enables the cluster wide search for dashboards and adds/updates/deletes them in grafana | `false`       |
 | `sidecar.dashboards.env`                  | Extra environment variables passed to pods    | `{}`                                                    |
@@ -219,6 +221,9 @@ This ensures the expressions are preserved for Alertmanager instead of being ren
 | `sidecar.dashboards.script`               | Absolute path to shell script to execute after a configmap got reloaded. | `nil`                                |
 | `sidecar.dashboards.reloadURL`            | Full url of dashboards configuration reload API endpoint, to invoke after a config-map change | `"http://localhost:3000/api/admin/provisioning/dashboards/reload"` |
 | `sidecar.dashboards.skipReload`           | Enabling this omits defining the REQ_USERNAME, REQ_PASSWORD, REQ_URL and REQ_METHOD environment variables | `false` |
+| `sidecar.dashboards.initDashboards`     | Set to true to deploy the dashboards sidecar as an initContainer in addition to a container. This is needed if skipReload is true, to load any dashboards defined at startup time. | `false` |
+| `sidecar.dashboards.restartPolicy`        |  Set to `Always` to enable native sidecars. `sidecar.dashboards.initAlerts` must be `true` | `""`|
+| `sidecar.dashboards.startupProbe`         |  Startup probe for the native sidecar | `{}` |
 | `sidecar.dashboards.resource`             | Should the sidecar looks into secrets, configmaps or both. | `both`                               |
 | `sidecar.dashboards.extraMounts`          | Additional dashboard sidecar volume mounts. | `[]`                               |
 | `sidecar.datasources.enabled`             | Enables the cluster wide search for datasources and adds/updates/deletes them in grafana |`false`       |
@@ -230,6 +235,8 @@ This ensures the expressions are preserved for Alertmanager instead of being ren
 | `sidecar.datasources.reloadURL`           | Full url of datasource configuration reload API endpoint, to invoke after a config-map change | `"http://localhost:3000/api/admin/provisioning/datasources/reload"` |
 | `sidecar.datasources.skipReload`          | Enabling this omits defining the REQ_URL and REQ_METHOD environment variables | `false` |
 | `sidecar.datasources.initDatasources`     | Set to true to deploy the datasource sidecar as an initContainer in addition to a container. This is needed if skipReload is true, to load any datasources defined at startup time. | `false` |
+| `sidecar.datasources.restartPolicy`        |  Set to `Always` to enable native sidecars. `sidecar.datasources.initAlerts` must be `true` | `""`|
+| `sidecar.datasources.startupProbe`         |  Startup probe for the native sidecar | `{}` |
 | `sidecar.notifiers.enabled`               | Enables the cluster wide search for notifiers and adds/updates/deletes them in grafana | `false`        |
 | `sidecar.notifiers.label`                 | Label that config maps with notifiers should have to be added (can be templated) | `grafana_notifier`                               |
 | `sidecar.notifiers.labelValue`            | Label value that config maps with notifiers should have to be added (can be templated) | `""`                                |
@@ -239,6 +246,8 @@ This ensures the expressions are preserved for Alertmanager instead of being ren
 | `sidecar.notifiers.reloadURL`             | Full url of notifier configuration reload API endpoint, to invoke after a config-map change | `"http://localhost:3000/api/admin/provisioning/notifications/reload"` |
 | `sidecar.notifiers.skipReload`            | Enabling this omits defining the REQ_URL and REQ_METHOD environment variables | `false` |
 | `sidecar.notifiers.initNotifiers`         | Set to true to deploy the notifier sidecar as an initContainer in addition to a container. This is needed if skipReload is true, to load any notifiers defined at startup time. | `false` |
+| `sidecar.notifiers.restartPolicy`        |  Set to `Always` to enable native sidecars. `sidecar.notifiers.initAlerts` must be `true` | `""`|
+| `sidecar.notifiers.startupProbe`         |  Startup probe for the native sidecar | `{}` |
 | `smtp.existingSecret`                     | The name of an existing secret containing the SMTP credentials. | `""`                                  |
 | `smtp.userKey`                            | The key in the existing SMTP secret containing the username. | `"user"`                                 |
 | `smtp.passwordKey`                        | The key in the existing SMTP secret containing the password. | `"password"`                             |

charts/kube-prometheus-stack/charts/grafana/templates/_pod.tpl

@@ -121,6 +121,13 @@ initContainers:
     image: "{{ $registry }}/{{ .Values.sidecar.image.repository }}:{{ .Values.sidecar.image.tag }}"
     {{- end }}
     imagePullPolicy: {{ .Values.sidecar.imagePullPolicy }}
+    {{- if .Values.sidecar.alerts.restartPolicy }}
+    restartPolicy: {{ .Values.sidecar.alerts.restartPolicy }}
+    {{- with .Values.sidecar.alerts.startupProbe }}
+    startupProbe:
+      {{- toYaml . | nindent 6 }}
+    {{- end }}
+    {{- end }}
     env:
       {{- range $key, $value := .Values.sidecar.alerts.env }}
       - name: "{{ $key }}"
@@ -131,6 +138,10 @@ initContainers:
         valueFrom:
           {{- tpl (toYaml $value) $ | nindent 10 }}
       {{- end }}
+      {{- if .Values.sidecar.alerts.startupProbe }}
+      - name: HEALTH_PORT
+        value: "{{ .Values.sidecar.alerts.startupProbe.httpGet.port | default "8080" }}"
+      {{- end }}
       {{- if .Values.sidecar.alerts.ignoreAlreadyProcessed }}
       - name: IGNORE_ALREADY_PROCESSED
         value: "true"
@@ -199,6 +210,13 @@ initContainers:
     image: "{{ $registry }}/{{ .Values.sidecar.image.repository }}:{{ .Values.sidecar.image.tag }}"
     {{- end }}
     imagePullPolicy: {{ .Values.sidecar.imagePullPolicy }}
+    {{- if .Values.sidecar.datasources.restartPolicy }}
+    restartPolicy: {{ .Values.sidecar.datasources.restartPolicy }}
+    {{- with .Values.sidecar.datasources.startupProbe }}
+    startupProbe:
+      {{- toYaml . | nindent 6 }}
+    {{- end }}
+    {{- end }}
     env:
       {{- range $key, $value := .Values.sidecar.datasources.env }}
       - name: "{{ $key }}"
@@ -209,6 +227,10 @@ initContainers:
         valueFrom:
           {{- tpl (toYaml $value) $ | nindent 10 }}
       {{- end }}
+      {{- if .Values.sidecar.datasources.startupProbe }}
+      - name: HEALTH_PORT
+        value: "{{ .Values.sidecar.datasources.startupProbe.httpGet.port | default "8080" }}"
+      {{- end }}
       {{- if .Values.sidecar.datasources.ignoreAlreadyProcessed }}
       - name: IGNORE_ALREADY_PROCESSED
         value: "true"
@@ -268,6 +290,10 @@ initContainers:
         value: {{ .Values.sidecar.datasources.reloadURL }}
       - name: REQ_METHOD
         value: POST
+      {{- if eq .Values.sidecar.datasources.watchMethod "WATCH" }}
+      - name: REQ_SKIP_INIT
+        value: "true"
+      {{- end }}
       {{- end }}
       {{- if .Values.sidecar.datasources.watchServerTimeout }}
       {{- if ne .Values.sidecar.datasources.watchMethod "WATCH" }}
@@ -327,11 +353,22 @@ initContainers:
     image: "{{ $registry }}/{{ .Values.sidecar.image.repository }}:{{ .Values.sidecar.image.tag }}"
     {{- end }}
     imagePullPolicy: {{ .Values.sidecar.imagePullPolicy }}
+    {{- if .Values.sidecar.notifiers.restartPolicy }}
+    restartPolicy: {{ .Values.sidecar.notifiers.restartPolicy }}
+    {{- with .Values.sidecar.notifiers.startupProbe }}
+    startupProbe:
+      {{- toYaml . | nindent 6 }}
+    {{- end }}
+    {{- end }}
     env:
       {{- range $key, $value := .Values.sidecar.notifiers.env }}
       - name: "{{ $key }}"
         value: "{{ $value }}"
       {{- end }}
+      {{- if .Values.sidecar.notifiers.startupProbe }}
+      - name: HEALTH_PORT
+        value: "{{ .Values.sidecar.notifiers.startupProbe.httpGet.port | default "8080" }}"
+      {{- end }}
       {{- if .Values.sidecar.notifiers.ignoreAlreadyProcessed }}
       - name: IGNORE_ALREADY_PROCESSED
         value: "true"
@@ -400,6 +437,13 @@ initContainers:
     image: "{{ $registry }}/{{ .Values.sidecar.image.repository }}:{{ .Values.sidecar.image.tag }}"
     {{- end }}
     imagePullPolicy: {{ .Values.sidecar.imagePullPolicy }}
+    {{- if .Values.sidecar.dashboards.restartPolicy }}
+    restartPolicy: {{ .Values.sidecar.dashboards.restartPolicy }}
+    {{- with .Values.sidecar.dashboards.startupProbe }}
+    startupProbe:
+      {{- toYaml . | nindent 6 }}u
+    {{- end }}
+    {{- end }}
     env:
       {{- range $key, $value := .Values.sidecar.dashboards.env }}
       - name: "{{ $key }}"
@@ -410,6 +454,10 @@ initContainers:
         valueFrom:
           {{- tpl (toYaml $value) $ | nindent 10 }}
       {{- end }}
+      {{- if .Values.sidecar.dashboards.startupProbe }}
+      - name: HEALTH_PORT
+        value: "{{ .Values.sidecar.dashboards.startupProbe.httpGet.port | default "8080" }}"
+      {{- end }}
       {{- if .Values.sidecar.dashboards.ignoreAlreadyProcessed }}
       - name: IGNORE_ALREADY_PROCESSED
         value: "true"
@@ -473,6 +521,10 @@ initContainers:
         value: {{ .Values.sidecar.dashboards.reloadURL }}
       - name: REQ_METHOD
         value: POST
+      {{- if eq .Values.sidecar.dashboards.watchMethod "WATCH" }}
+      - name: REQ_SKIP_INIT
+        value: "true"
+      {{- end }}
       {{- end }}
       {{- if .Values.sidecar.dashboards.watchServerTimeout }}
       {{- if ne .Values.sidecar.dashboards.watchMethod "WATCH" }}
@@ -612,6 +664,10 @@ containers:
         value: {{ .Values.sidecar.alerts.reloadURL }}
       - name: REQ_METHOD
         value: POST
+      {{- if eq .Values.sidecar.alerts.watchMethod "WATCH" }}
+      - name: REQ_SKIP_INIT
+        value: "true"
+      {{- end }}
       {{- end }}
       {{- if .Values.sidecar.alerts.watchServerTimeout }}
       {{- if ne .Values.sidecar.alerts.watchMethod "WATCH" }}
@@ -744,6 +800,10 @@ containers:
         value: {{ .Values.sidecar.dashboards.reloadURL }}
       - name: REQ_METHOD
         value: POST
+      {{- if eq .Values.sidecar.dashboards.watchMethod "WATCH" }}
+      - name: REQ_SKIP_INIT
+        value: "true"
+      {{- end }}
       {{- end }}
       {{- if .Values.sidecar.dashboards.watchServerTimeout }}
       {{- if ne .Values.sidecar.dashboards.watchMethod "WATCH" }}
@@ -872,6 +932,10 @@ containers:
         value: {{ .Values.sidecar.datasources.reloadURL }}
       - name: REQ_METHOD
         value: POST
+      {{- if eq .Values.sidecar.datasources.watchMethod "WATCH" }}
+      - name: REQ_SKIP_INIT
+        value: "true"
+      {{- end }}
       {{- end }}
       {{- if .Values.sidecar.datasources.watchServerTimeout }}
       {{- if ne .Values.sidecar.datasources.watchMethod "WATCH" }}
@@ -995,6 +1059,10 @@ containers:
         value: {{ .Values.sidecar.notifiers.reloadURL }}
       - name: REQ_METHOD
         value: POST
+      {{- if eq .Values.sidecar.notifiers.watchMethod "WATCH" }}
+      - name: REQ_SKIP_INIT
+        value: "true"
+      {{- end }}
       {{- end }}
       {{- if .Values.sidecar.notifiers.watchServerTimeout }}
       {{- if ne .Values.sidecar.notifiers.watchMethod "WATCH" }}
@@ -1118,6 +1186,10 @@ containers:
         value: {{ .Values.sidecar.plugins.reloadURL }}
       - name: REQ_METHOD
         value: POST
+      {{- if eq .Values.sidecar.plugins.watchMethod "WATCH" }}
+      - name: REQ_SKIP_INIT
+        value: "true"
+      {{- end }}
       {{- end }}
       {{- if .Values.sidecar.plugins.watchServerTimeout }}
       {{- if ne .Values.sidecar.plugins.watchMethod "WATCH" }}

charts/kube-prometheus-stack/charts/grafana/values.yaml

@@ -959,7 +959,7 @@ sidecar:
     # -- The Docker registry
     registry: quay.io
     repository: kiwigrid/k8s-sidecar
-    tag: 1.30.10
+    tag: 2.1.2
     sha: ""
   imagePullPolicy: IfNotPresent
   resources: {}
@@ -1060,6 +1060,16 @@ sidecar:
     # This is needed if skipReload is true, to load any alerts defined at startup time.
     # Deploy the alert sidecar as an initContainer.
     initAlerts: false
+    # Use native sidecar https://kubernetes.io/docs/concepts/workloads/pods/sidecar-containers/
+    # restartPolicy: Always
+    # # only applies to native sidecars
+    # startupProbe:
+    #   httpGet:
+    #     path: /healthz
+    #     port: 8080
+    #   initialDelaySeconds: 5
+    #   periodSeconds: 5
+    #   failureThreshold: 60 # 5 minutes
     # Additional alerts sidecar volume mounts
     extraMounts: []
     # Sets the size limit of the alert sidecar emptyDir volume
@@ -1139,6 +1149,16 @@ sidecar:
     # This is needed if skipReload is true, to load any dashboards defined at startup time.
     # Deploy the dashboard sidecar as an initContainer.
     initDashboards: false
+    # Use native sidecar https://kubernetes.io/docs/concepts/workloads/pods/sidecar-containers/
+    # restartPolicy: Always
+    # # only applies to native sidecars
+    # startupProbe:
+    #   httpGet:
+    #     path: /healthz
+    #     port: 8080
+    #   initialDelaySeconds: 5
+    #   periodSeconds: 5
+    #   failureThreshold: 60 # 5 minutes
     # watchServerTimeout: request to the server, asking it to cleanly close the connection after that.
     # defaults to 60sec; much higher values like 3600 seconds (1h) are feasible for non-Azure K8S
     # watchServerTimeout: 3600
@@ -1248,6 +1268,16 @@ sidecar:
     # This is needed if skipReload is true, to load any datasources defined at startup time.
     # Deploy the datasources sidecar as an initContainer.
     initDatasources: false
+    # Use native sidecar https://kubernetes.io/docs/concepts/workloads/pods/sidecar-containers/
+    # restartPolicy: Always
+    # # only applies to native sidecars
+    # startupProbe:
+    #   httpGet:
+    #     path: /healthz
+    #     port: 8080
+    #   initialDelaySeconds: 5
+    #   periodSeconds: 5
+    #   failureThreshold: 60 # 5 minutes
     # Additional datasources sidecar volume mounts
     extraMounts: []
     # Sets the size limit of the datasource sidecar emptyDir volume
@@ -1384,6 +1414,16 @@ sidecar:
     # Deploy the notifier sidecar as an initContainer in addition to a container.
     # This is needed if skipReload is true, to load any notifiers defined at startup time.
     initNotifiers: false
+    # Use native sidecar https://kubernetes.io/docs/concepts/workloads/pods/sidecar-containers/
+    # restartPolicy: Always
+    # # only applies to native sidecars
+    # startupProbe:
+    #   httpGet:
+    #     path: /healthz
+    #     port: 8080
+    #   initialDelaySeconds: 5
+    #   periodSeconds: 5
+    #   failureThreshold: 60 # 5 minutes
     # Additional notifiers sidecar volume mounts
     extraMounts: []
     # Sets the size limit of the notifier sidecar emptyDir volume

charts/kube-prometheus-stack/templates/grafana/dashboards-1.14/alertmanager-overview.yaml

@@ -1,5 +1,5 @@
 {{- /*
-Generated from 'alertmanager-overview' from https://raw.githubusercontent.com/prometheus-operator/kube-prometheus/480b5ad6c5814fe56db7fca9fc14aaabaa223908/manifests/grafana-dashboardDefinitions.yaml
+Generated from 'alertmanager-overview' from https://raw.githubusercontent.com/prometheus-operator/kube-prometheus/7c81f7ede12db220eabae114074e9d01e4285194/manifests/grafana-dashboardDefinitions.yaml
 Do not change in-place! In order to change this file first read following link:
 https://github.com/prometheus-community/helm-charts/tree/main/charts/kube-prometheus-stack/hack
 */ -}}

charts/kube-prometheus-stack/templates/grafana/dashboards-1.14/apiserver.yaml

@@ -1,5 +1,5 @@
 {{- /*
-Generated from 'apiserver' from https://raw.githubusercontent.com/prometheus-operator/kube-prometheus/480b5ad6c5814fe56db7fca9fc14aaabaa223908/manifests/grafana-dashboardDefinitions.yaml
+Generated from 'apiserver' from https://raw.githubusercontent.com/prometheus-operator/kube-prometheus/7c81f7ede12db220eabae114074e9d01e4285194/manifests/grafana-dashboardDefinitions.yaml
 Do not change in-place! In order to change this file first read following link:
 https://github.com/prometheus-community/helm-charts/tree/main/charts/kube-prometheus-stack/hack
 */ -}}

charts/kube-prometheus-stack/templates/grafana/dashboards-1.14/controller-manager.yaml

@@ -1,5 +1,5 @@
 {{- /*
-Generated from 'controller-manager' from https://raw.githubusercontent.com/prometheus-operator/kube-prometheus/480b5ad6c5814fe56db7fca9fc14aaabaa223908/manifests/grafana-dashboardDefinitions.yaml
+Generated from 'controller-manager' from https://raw.githubusercontent.com/prometheus-operator/kube-prometheus/7c81f7ede12db220eabae114074e9d01e4285194/manifests/grafana-dashboardDefinitions.yaml
 Do not change in-place! In order to change this file first read following link:
 https://github.com/prometheus-community/helm-charts/tree/main/charts/kube-prometheus-stack/hack
 */ -}}

charts/kube-prometheus-stack/templates/grafana/dashboards-1.14/grafana-overview.yaml

@@ -1,5 +1,5 @@
 {{- /*
-Generated from 'grafana-overview' from https://raw.githubusercontent.com/prometheus-operator/kube-prometheus/480b5ad6c5814fe56db7fca9fc14aaabaa223908/manifests/grafana-dashboardDefinitions.yaml
+Generated from 'grafana-overview' from https://raw.githubusercontent.com/prometheus-operator/kube-prometheus/7c81f7ede12db220eabae114074e9d01e4285194/manifests/grafana-dashboardDefinitions.yaml
 Do not change in-place! In order to change this file first read following link:
 https://github.com/prometheus-community/helm-charts/tree/main/charts/kube-prometheus-stack/hack
 */ -}}

charts/kube-prometheus-stack/templates/grafana/dashboards-1.14/k8s-resources-cluster.yaml

@@ -1,5 +1,5 @@
 {{- /*
-Generated from 'k8s-resources-cluster' from https://raw.githubusercontent.com/prometheus-operator/kube-prometheus/480b5ad6c5814fe56db7fca9fc14aaabaa223908/manifests/grafana-dashboardDefinitions.yaml
+Generated from 'k8s-resources-cluster' from https://raw.githubusercontent.com/prometheus-operator/kube-prometheus/7c81f7ede12db220eabae114074e9d01e4285194/manifests/grafana-dashboardDefinitions.yaml
 Do not change in-place! In order to change this file first read following link:
 https://github.com/prometheus-community/helm-charts/tree/main/charts/kube-prometheus-stack/hack
 */ -}}