feat(helm): update chart goldilocks ( 10.3.0 ➔ 10.4.1 )

[renovate]

This PR contains the following updates:

Package	Update	Change
goldilocks	minor	10.3.0 → 10.4.1

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "every weekend"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

--- kubernetes/apps/observability/goldilocks/app Kustomization: observability/goldilocks HelmRelease: observability/goldilocks

+++ kubernetes/apps/observability/goldilocks/app Kustomization: observability/goldilocks HelmRelease: observability/goldilocks

@@ -12,13 +12,13 @@

     spec:
       chart: goldilocks
       interval: 15m
       sourceRef:
         kind: HelmRepository
         name: fairwinds-stable
-      version: 10.3.0
+      version: 10.4.1
   install:
     crds: CreateReplace
     strategy:
       name: RetryOnFailure
   interval: 1h
   rollback:

[github-actions]

--- HelmRelease: observability/goldilocks ServiceAccount: observability/goldilocks-vpa-recommender

+++ HelmRelease: observability/goldilocks ServiceAccount: observability/goldilocks-vpa-recommender

@@ -1,12 +1,13 @@

 ---
 apiVersion: v1
 kind: ServiceAccount
 automountServiceAccountToken: true
 metadata:
   name: goldilocks-vpa-recommender
+  namespace: observability
   labels:
     app.kubernetes.io/name: vpa
     app.kubernetes.io/instance: goldilocks
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/component: recommender
 
--- HelmRelease: observability/goldilocks Deployment: observability/goldilocks-vpa-recommender

+++ HelmRelease: observability/goldilocks Deployment: observability/goldilocks-vpa-recommender

@@ -1,11 +1,12 @@

 ---
 apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: goldilocks-vpa-recommender
+  namespace: observability
   labels:
     app.kubernetes.io/component: recommender
     app.kubernetes.io/name: vpa
     app.kubernetes.io/instance: goldilocks
     app.kubernetes.io/managed-by: Helm
 spec:
@@ -34,13 +35,13 @@

         securityContext:
           allowPrivilegeEscalation: false
           capabilities:
             drop:
             - ALL
           readOnlyRootFilesystem: true
-        image: registry.k8s.io/autoscaling/vpa-recommender:1.4.1
+        image: registry.k8s.io/autoscaling/vpa-recommender:1.6.0
         imagePullPolicy: Always
         args:
         - --pod-recommendation-min-cpu-millicores=15
         - --pod-recommendation-min-memory-mb=100
         - --v=4
         livenessProbe:
--- HelmRelease: observability/goldilocks ClusterRole: observability/vpa-updater-in-place

+++ HelmRelease: observability/goldilocks ClusterRole: observability/vpa-updater-in-place

@@ -0,0 +1,14 @@

+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: vpa-updater-in-place
+rules:
+- apiGroups:
+  - ''
+  resources:
+  - pods/resize
+  - pods
+  verbs:
+  - patch
+