feat(container)!: Update ghcr.io/kiwigrid/k8s-sidecar ( 1.30.0 → 2.5.0 )

[flowbie-bot]

This PR contains the following updates:

Package	Update	Change
ghcr.io/kiwigrid/k8s-sidecar	major	1.30.0 → 2.5.0

---

Release Notes

kiwigrid/k8s-sidecar (ghcr.io/kiwigrid/k8s-sidecar)

v2.5.0

Compare Source

🚀 Features

• feat: add DISABLE_X509_STRICT_VERIFICATION env var
  • PR: #​474

v2.4.0

Compare Source

🚀 Features

• Ensure health server supports dual-stack
  • PR: #​511

v2.3.0

Compare Source

🚀 Features

• feat: removes fastapi for liveness probe, using ThreadingHTTPServer now
• feat: batch fetching secrets/configmaps, rather than getting them all at once
  • PR: #​506

📦 Dependencies

• Bump docker/setup-buildx-action from 3.11.1 to 3.12.0
  • PR: #​503
• build(deps): bump github/codeql-action from 4.31.9 to 4.31.10
  • PR: #​508

v2.2.3

Compare Source

v2.2.2

Compare Source

📦 Dependencies

• Bump uvicorn from 0.38.0 to 0.40.0 in /src
  • PR: #​497

v2.2.1

Compare Source

📦 Dependencies

• Bump softprops/action-gh-release from 2.4.2 to 2.5.0
  • PR: #​477
• Bump github/codeql-action from 4.31.5 to 4.31.8
  • PR: #​491
• Bump actions/download-artifact from 6.0.0 to 7.0.0
  • PR: #​494
• Bump actions/upload-artifact from 5.0.0 to 6.0.0
  • PR: #​492
• Bump actions/stale from 10.1.0 to 10.1.1
  • PR: #​482
• Bump fastapi from 0.122.0 to 0.128.0 in /src
  • PR: #​501

v2.2.0

Compare Source

🚀 Features

• feat: Use threads instead of processes for watchers
  • PR: #​490

📦 Dependencies

• Bump actions/checkout from 6.0.0 to 6.0.1
  • PR: #​480

v2.1.4

Compare Source

📦 Dependencies

• Bump actions/checkout from 5.0.1 to 6.0.0
  • PR: #​472
• Bump actions/upload-artifact from 4.6.2 to 5.0.0
  • PR: #​459
• Bump actions/download-artifact from 5.0.0 to 6.0.0
  • PR: #​456
• Bump fastapi from 0.121.0 to 0.122.0 in /src
  • PR: #​470

v2.1.3

Compare Source

📦 Dependencies

• Bump github/codeql-action from 4.31.2 to 4.31.3
  • PR: #​466
• Bump actions/checkout from 5.0.0 to 5.0.1
  • PR: #​467
• Bump softprops/action-gh-release from 2.4.1 to 2.4.2
  • PR: #​463
• Bump github/codeql-action from 4.31.3 to 4.31.5
  • PR: #​471

v2.1.2

Compare Source

📦 Dependencies

• Bump mikepenz/release-changelog-builder-action from 6.0.0 to 6.0.1
  • PR: #​458
• Bump docker/setup-qemu-action from 3.6.0 to 3.7.0
  • PR: #​457
• Bump fastapi from 0.115.2 to 0.121.0 in /src
  • PR: #​452

v2.1.1

Compare Source

📦 Dependencies

• Bump mikepenz/release-changelog-builder-action from 6.0.0 to 6.0.1
  • PR: #​458
• Bump docker/setup-qemu-action from 3.6.0 to 3.7.0
  • PR: #​457
• Bump fastapi from 0.115.2 to 0.121.0 in /src
  • PR: #​452

v2.1.0

Compare Source

🚀 Features

• wyn_skip_init: - add flag to skip initial request to REQ_URL when using WATCH
  • PR: #​433

📦 Dependencies

• Bump actions/upload-artifact from 4 to 5
  • PR: #​439
• Bump actions/download-artifact from 5 to 6
  • PR: #​440

v2.0.3

Compare Source

Build

• Drop support for ppc64le (#​445)
• Drop support for s390x (#​444)

Enhancements

• Add health endpoint with readiness and liveness probes (#​416)

• New /healthz Endpoint: A new HTTP endpoint is available on port 8080 (configurable via the HEALTH_PORT environment variable)

  • Readiness Probe:

    • The sidecar now reports as "ready" (HTTP 200) only after the initial synchronization of all configured resources is complete
    • This prevents the main application container from starting or receiving traffic prematurely, ensuring all configuration files are present at startup

  • Liveness Probe:

    • The probe continuously monitors the sidecar's health by checking two critical conditions:
      • Kubernetes API Contact: Verifies that the sidecar has had successful contact with the Kubernetes API within the last 60 seconds
      • Watcher Process Health: Ensures that all internal watcher subprocesses are running correctly
    • If any check fails, the probe fails, signaling Kubernetes to restart the container

• Reduced Log Noise: Access logs for frequent /healthz requests are automatically filtered out to keep application logs clean and focused

• Fail-Fast on Process Death: The main process now exits immediately if a critical watcher subprocess dies, ensuring a prompt restart by Kubernetes

Testing

• The CI pipeline has been enhanced with new tests to validate this functionality:
  • A test to confirm the Uvicorn health server starts successfully
  • A liveness test that simulates a watcher process failure and asserts that Kubernetes restarts the pod as expected
  • A Kubernetes Config load test for Sleep and Watch based sidecar

v1.30.11

Compare Source

⚠️ YANKED/UNSTABLE ⚠️: Do not use 1.30.11 due to #​431
Use 1.30.9 as latest stable

📦 Dependencies

• Bump python-json-logger from 3.3.0 to 4.0.0 in /src
  • PR: #​424

v1.30.10

Compare Source

⚠️ YANKED/UNSTABLE ⚠️: Do not use 1.30.10 due to #​431
Use 1.30.9 as latest stable

📦 Dependencies

• Bump requests from 2.32.4 to 2.32.5 in /src
  • PR: #​418

v1.30.9

Compare Source

🚀 Features

• Extend exception handling
  • PR: #​403
• Add check for 'none' response
  • PR: #​413

📦 Dependencies

• Bump actions/download-artifact from 4 to 5
  • PR: #​408
• Bump actions/checkout from 4 to 5
  • PR: #​409

v1.30.8

Compare Source

📦 Dependencies

• Bump logfmter from 0.0.9 to 0.0.10 in /src
  • PR: #​406

v1.30.7

Compare Source

v1.30.6

Compare Source

v1.30.5

Compare Source

📦 Dependencies

• Bump requests from 2.32.3 to 2.32.4 in /src
  • PR: #​397
• Bump kubernetes from 32.0.1 to 33.1.0 in /src
  • PR: #​398

v1.30.4

Compare Source

v1.30.3

Compare Source

v1.30.2

Compare Source

📦 Dependencies

• Bump python-json-logger from 3.2.1 to 3.3.0 in /src
  • PR: #​391

v1.30.1

Compare Source

📦 Dependencies

• Bump kubernetes from 32.0.0 to 32.0.1 in /src
  • PR: #​390

---

Configuration

📅 Schedule: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[github-actions]

--- kubernetes/apps/observability/gatus/app Kustomization: flux-system/gatus HelmRelease: observability/gatus

+++ kubernetes/apps/observability/gatus/app Kustomization: flux-system/gatus HelmRelease: observability/gatus

@@ -92,13 +92,13 @@

               METHOD: WATCH
               NAMESPACE: ALL
               RESOURCE: both
               UNIQUE_FILENAMES: true
             image:
               repository: ghcr.io/kiwigrid/k8s-sidecar
-              tag: 1.30.0@sha256:9a326271c439b6f9e174f3b48ed132bbff71c00592c7dbd072ccdc334445bde2
+              tag: 2.5.0@sha256:a6b3f707f883108376514489a94d6629109a327b2978e1d826cd104c4ca436df
             resources:
               limits:
                 memory: 256Mi
               requests:
                 cpu: 10m
             restartPolicy: Always

[github-actions]

--- HelmRelease: observability/gatus Deployment: observability/gatus

+++ HelmRelease: observability/gatus Deployment: observability/gatus

@@ -57,13 +57,13 @@

         - name: NAMESPACE
           value: ALL
         - name: RESOURCE
           value: both
         - name: UNIQUE_FILENAMES
           value: 'true'
-        image: ghcr.io/kiwigrid/k8s-sidecar:1.30.0@sha256:9a326271c439b6f9e174f3b48ed132bbff71c00592c7dbd072ccdc334445bde2
+        image: ghcr.io/kiwigrid/k8s-sidecar:2.5.0@sha256:a6b3f707f883108376514489a94d6629109a327b2978e1d826cd104c4ca436df
         name: init-config
         resources:
           limits:
             memory: 256Mi
           requests:
             cpu: 10m