chore(chart-deps): update policy-reporter to version 3.5.0 (#2520)

Co-authored-by: merll <merll@users.noreply.github.com>

Author: svcAPLBot

apps.yaml

@@ -353,7 +353,7 @@ appsInfo:
     integration: When enabled, Velero can be used to automatically create backups of APL platform services. Based on the selected provider, APL installs required plug-ins. APL also installs the Restic integration for Velero to back up and restore almost any type of Kubernetes volume.
   policy-reporter:
     title: policy-reporter
-    appVersion: 3.4.2
+    appVersion: 3.5.0
     repo: https://github.com/kyverno/policy-reporter
     maintainers: Frank Jogeleit
     license: Apache 2.0

chart/chart-index/Chart.yaml

@@ -100,7 +100,7 @@ dependencies:
     version: 0.98.0
     repository: https://open-telemetry.github.io/opentelemetry-helm-charts
   - name: policy-reporter
-    version: 3.4.2
+    version: 3.5.0
     repository: https://kyverno.github.io/policy-reporter
   - name: prometheus-blackbox-exporter
     version: 11.4.1

charts/policy-reporter/Chart.yaml

@@ -1,5 +1,5 @@
 apiVersion: v2
-appVersion: 3.4.2
+appVersion: 3.5.0
 description: 'Policy Reporter watches for PolicyReport Resources. It creates Prometheus
   Metrics and can send rule validation events to different targets like Loki, Elasticsearch,
   Slack or Discord '
@@ -12,4 +12,4 @@ name: policy-reporter
 sources:
 - https://github.com/kyverno/policy-reporter
 type: application
-version: 3.4.2
+version: 3.5.0

charts/policy-reporter/README.md

@@ -3,7 +3,7 @@
 Policy Reporter watches for PolicyReport Resources.
 It creates Prometheus Metrics and can send rule validation events to different targets like Loki, Elasticsearch, Slack or Discord
 
-![Version: 3.4.2](https://img.shields.io/badge/Version-3.4.2-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 3.4.2](https://img.shields.io/badge/AppVersion-3.4.2-informational?style=flat-square)
+![Version: 3.5.0](https://img.shields.io/badge/Version-3.5.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 3.5.0](https://img.shields.io/badge/AppVersion-3.5.0-informational?style=flat-square)
 
 ## Documentation
 
@@ -360,6 +360,12 @@ Open `http://localhost:8082/` in your browser.
 | database.host | string | `""` | Host Address |
 | database.enableSSL | bool | `false` | Enables SSL |
 | database.dsn | string | `""` | Instead of configure the individual values you can also provide an DSN string example postgres: postgres://postgres:password@localhost:5432/postgres?sslmode=disable example mysql: root:password@tcp(localhost:3306)/test?tls=false |
+| database.maxOpenConnections | int | `25` | Maximum number of open connections, supported for mysql and postgres |
+| database.maxIdleConnections | int | `25` | Maximum number of idle connections, supported for mysql and postgres |
+| database.connectionMaxLifetime | int | `0` | Maximum amount of time in minutes a connection may be reused, supported for mysql and postgres |
+| database.connectionMaxIdleTime | int | `0` | Maximum amount of time in minutes a connection may be idle, supported for mysql and postgres |
+| database.timeout | int | `10` | Timeout for database operations in seconds, supported for mysql and postgres |
+| database.metrics | bool | `false` | Enables database related metrics, connection status and query histogram |
 | database.secretRef | string | `""` | Read configuration from an existing Secret supported fields: username, password, host, dsn, database |
 | database.mountedSecret | string | `""` |  |
 | periodicSync.enabled | bool | `false` |  |
@@ -381,7 +387,7 @@ Open `http://localhost:8082/` in your browser.
 | ui.image.registry | string | `"ghcr.io"` | Image registry |
 | ui.image.repository | string | `"kyverno/policy-reporter-ui"` | Image repository |
 | ui.image.pullPolicy | string | `"IfNotPresent"` | Image PullPolicy |
-| ui.image.tag | string | `"2.4.2"` | Image tag |
+| ui.image.tag | string | `"2.4.3"` | Image tag |
 | ui.replicaCount | int | `1` | Deployment replica count |
 | ui.priorityClassName | string | `""` | Deployment priorityClassName |
 | ui.logging.api | bool | `false` | Enables external api request logging |
@@ -462,14 +468,15 @@ Open `http://localhost:8082/` in your browser.
 | ui.nodeSelector | object | `{}` | Node labels for pod assignment |
 | ui.tolerations | list | `[]` | List of node taints to tolerate |
 | ui.affinity | object | `{}` | Affinity constraints. |
+| ui.topologySpreadConstraints | object | `{}` | Pod Topology Spread Constraints for the policy-reporter-ui. |
 | ui.extraVolumes.volumeMounts | list | `[]` | Deployment volumeMounts |
 | ui.extraVolumes.volumes | list | `[]` | Deployment values |
 | ui.extraConfig | object | `{}` | Extra configuration options appended to UI settings |
 | plugin.kyverno.enabled | bool | `false` | Enable Kyverno Plugin |
 | plugin.kyverno.image.registry | string | `"ghcr.io"` | Image registry |
 | plugin.kyverno.image.repository | string | `"kyverno/policy-reporter/kyverno-plugin"` | Image repository |
 | plugin.kyverno.image.pullPolicy | string | `"IfNotPresent"` | Image PullPolicy |
-| plugin.kyverno.image.tag | string | `"0.5.0"` | Image tag |
+| plugin.kyverno.image.tag | string | `"0.5.1"` | Image tag |
 | plugin.kyverno.replicaCount | int | `1` | Deployment replica count |
 | plugin.kyverno.priorityClassName | string | `""` | Deployment priorityClassName |
 | plugin.kyverno.logging.api | bool | `false` | Enables external API request logging |
@@ -535,7 +542,7 @@ Open `http://localhost:8082/` in your browser.
 | plugin.trivy.image.registry | string | `"ghcr.io"` | Image registry |
 | plugin.trivy.image.repository | string | `"kyverno/policy-reporter/trivy-plugin"` | Image repository |
 | plugin.trivy.image.pullPolicy | string | `"IfNotPresent"` | Image PullPolicy |
-| plugin.trivy.image.tag | string | `"0.4.9"` | Image tag Defaults to `Chart.AppVersion` if omitted |
+| plugin.trivy.image.tag | string | `"0.4.10"` | Image tag Defaults to `Chart.AppVersion` if omitted |
 | plugin.trivy.cli.image.registry | string | `"ghcr.io"` | Image registry |
 | plugin.trivy.cli.image.repository | string | `"aquasecurity/trivy"` | Image repository |
 | plugin.trivy.cli.image.pullPolicy | string | `"IfNotPresent"` | Image PullPolicy |

charts/policy-reporter/configs/core.tmpl

@@ -195,6 +195,12 @@ database:
   host: {{ .Values.database.host }}
   enableSSL: {{ .Values.database.enableSSL }}
   dsn: {{ .Values.database.dsn }}
+  maxOpenConnections: {{ .Values.database.maxOpenConnections }}
+  maxIdleConnections: {{ .Values.database.maxIdleConnections }}
+  connectionMaxIdleTime: {{ .Values.database.connectionMaxIdleTime }}
+  connectionMaxLifetime: {{ .Values.database.connectionMaxLifetime }}
+  timeout: {{ .Values.database.timeout }}
+  metrics: {{ .Values.database.metrics }}
   secretRef: {{ .Values.database.secretRef }}
   mountedSecret: {{ .Values.database.mountedSecret }}
 

charts/policy-reporter/templates/monitoring/clusterpolicy-details.dashboard.yaml

@@ -720,7 +720,7 @@ data:
         "pluginVersion": "7.1.5",
         "targets": [
             {
-            "expr": "max(sum(cluster_policy_report_result{policy=~\"$policy\", category=~\"$category\", severity=~\"$severity\", source=~\"$source\", kind=~\"$kind\", status=\"warn\"{{ range $filters }}, {{.}}=~\"${{.}}\"{{ end }} }) by (pod, policy,rule,kind,name,status,severity,category,source{{ range $filters }},{{.}}{{ end }})) by (policy,rule,kind,name,status,severity,category,source{{ range $filters }},{{.}}{{ end }})",
+            "expr": "max(sum(cluster_policy_report_result{policy=~\"$policy\", category=~\"$category\", severity=~\"$severity\", source=~\"$source\", kind=~\"$kind\", status=\"error\"{{ range $filters }}, {{.}}=~\"${{.}}\"{{ end }} }) by (pod, policy,rule,kind,name,status,severity,category,source{{ range $filters }},{{.}}{{ end }})) by (policy,rule,kind,name,status,severity,category,source{{ range $filters }},{{.}}{{ end }})",
             "format": "table",
             "instant": true,
             "interval": "",

charts/policy-reporter/templates/ui/deployment.yaml

@@ -111,6 +111,10 @@ spec:
       affinity:
         {{- toYaml . | nindent 8 }}
       {{- end }}
+      {{- with .Values.ui.topologySpreadConstraints }}
+      topologySpreadConstraints:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
       {{- with .Values.ui.tolerations }}
       tolerations:
         {{- toYaml . | nindent 8 }}

charts/policy-reporter/values.yaml

@@ -871,6 +871,18 @@ database:
   # example postgres: postgres://postgres:password@localhost:5432/postgres?sslmode=disable
   # example mysql: root:password@tcp(localhost:3306)/test?tls=false
   dsn: ""
+  # -- Maximum number of open connections, supported for mysql and postgres
+  maxOpenConnections: 25
+  # -- Maximum number of idle connections, supported for mysql and postgres
+  maxIdleConnections: 25
+  # -- Maximum amount of time in minutes a connection may be reused, supported for mysql and postgres
+  connectionMaxLifetime: 0
+  # -- Maximum amount of time in minutes a connection may be idle, supported for mysql and postgres
+  connectionMaxIdleTime: 0
+  # -- Timeout for database operations in seconds, supported for mysql and postgres
+  timeout: 10
+  # -- Enables database related metrics, connection status and query histogram
+  metrics: false
   # -- Read configuration from an existing Secret
   # supported fields: username, password, host, dsn, database
   secretRef: ""
@@ -949,7 +961,7 @@ ui:
     # -- (string) Image PullPolicy
     pullPolicy: IfNotPresent
     # -- (string) Image tag
-    tag: "2.4.2"
+    tag: "2.4.3"
 
   # -- Deployment replica count
   replicaCount: 1
@@ -1267,6 +1279,9 @@ ui:
     # -- Affinity constraints.
   affinity: {}
 
+  # -- Pod Topology Spread Constraints for the policy-reporter-ui.
+  topologySpreadConstraints: {}
+
   extraVolumes:
     # -- Deployment volumeMounts
     volumeMounts: []
@@ -1289,7 +1304,7 @@ plugin:
       # -- (string) Image PullPolicy
       pullPolicy: IfNotPresent
       # -- (string) Image tag
-      tag: "0.5.0"
+      tag: "0.5.1"
 
     # -- Deployment replica count
     replicaCount: 1
@@ -1503,7 +1518,7 @@ plugin:
       pullPolicy: IfNotPresent
         # -- (string) Image tag
         # Defaults to `Chart.AppVersion` if omitted
-      tag: "0.4.9"
+      tag: "0.4.10"
 
     cli:
       image: