grafana/grafana-operator v5.22.1

on GitHub

Changes worth paying attention to

• new emptyDir volume with /tmp mount point and deprecation of TMPDIR env:
  • starting from Grafana v12.4.0, plugins no longer have access to all environment variables by default (PR). It means that TMPDIR env, which we have previously used to override temporary location for plugin downloads, is now ignored. To mitigate that change on the operator side, we backed /tmp by an emptyDir volume and stopped adding TMPDIR env (the alternative was to generate forward_host_env_vars setting in plugins section of a configMap, which would be overly complex for our needs). It works with any Grafana version, so should be a transparent change for most users. In case you, for some reasons, have some manual volume overrides for /tmp as well, it would be a good idea to remove those;
• deprecation of pre-provisioned receivers:
  • starting from Grafana v12.4.0, the pre-provisioned set of receivers has changed (PR), so, if you happen to rely on one of those (e.g. default-receiver, grafana-default-email), before upgrading to v12.4.0+, you should migrate to a custom receiver (use GrafanaContactPoint CR to provision one). It's also an option to rely on empty receiver instead, but it's available only in v12.4.0+, so you'd have to upgrade all matching Grafana instances at once;
• RBAC for events:
  • with v5.22.0, you might have noticed in logs that the operator fails to generate LeaderElection events. It appears that controller-runtime still depends on core API ("") to generate this specific event. All the other events get recorded using events.k8s.io API group. Our RBAC manifests have been extended to accomodate both groups (thanks to @tamcore).

What's Changed

Breaking changes

• chore(deps): update docker.io/grafana/grafana docker tag to v12.4.0 by @renovate-sh-app[bot] in #2539

Fixes

• chore(deps): update dependency autoprefixer to ^10.4.24 by @renovate-sh-app[bot] in #2541
• fix(RBAC): LeaderElection events generation by @tamcore in #2548
• fix(logging): --zap-devel=true does not enable debug logs by @Baarsgaard in #2563
• fix(Helm RBAC): Remove extra rolebinding when namespaceScope=true is set without watchNamespaces by @Baarsgaard in #2570
• fix(grafana): tmp dir permissions for plugin installation in grafana v12.4.0+ by @weisdd in #2574

Dependencies

• fix(deps): update module k8s.io/apimachinery to v0.35.2 by @renovate-sh-app[bot] in #2537
• chore(deps): bump gateway-api to v1.5.0 by @weisdd in #2538
• chore(deps): update fluxcd/flux2 action to v2.8.0 by @renovate-sh-app[bot] in #2540
• chore(deps): update actions/upload-artifact action to v7 by @renovate-sh-app[bot] in #2542
• fix(deps): update kubernetes packages to v0.35.2 by @renovate-sh-app[bot] in #2545
• chore(deps): update fluxcd/flux2 action to v2.8.1 by @renovate-sh-app[bot] in #2547
• fix(deps): update module k8s.io/apiextensions-apiserver to v0.35.2 by @renovate-sh-app[bot] in #2546
• chore(deps): update actions/attest-build-provenance action to v4 by @renovate-sh-app[bot] in #2543
• chore(deps): lock file maintenance by @renovate-sh-app[bot] in #2544
• chore(deps): update aquasecurity/trivy-action action to v0.34.2 by @renovate-sh-app[bot] in #2551
• fix(deps): update module k8s.io/klog/v2 to v2.140.0 by @renovate-sh-app[bot] in #2554
• chore(deps): update docker/login-action action to v4 by @renovate-sh-app[bot] in #2555
• chore(deps): update aquasecurity/trivy-action action to v0.35.0 by @renovate-sh-app[bot] in #2556
• chore(deps): update dependency kubernetes-sigs/controller-runtime to v0.23.3 by @renovate-sh-app[bot] in #2558
• fix(deps): update module sigs.k8s.io/controller-runtime to v0.23.3 by @renovate-sh-app[bot] in #2559
• chore(deps): lock file maintenance by @renovate-sh-app[bot] in #2560
• fix(deps): update go-openapi packages by @renovate-sh-app[bot] in #2567
• chore(deps): update module golang.org/x/net to v0.51.0 [security] by @renovate-sh-app[bot] in #2571
• chore(deps): update docker.io/grafana/grafana docker tag to v12.4.1 by @renovate-sh-app[bot] in #2572

Documentation

• docs: dashboard v2 example by @theSuess in #2568

Other Changes

• chore(tk8s): add more helpers, simplify range checking in getReceivers by @weisdd in #2532
• chore(workflows): drop support for k8s v1.32 by @weisdd in #2550
• chore(go): bump to 1.26.1 by @weisdd in #2557
• chore(test): Extend Grafana testcontainer wait time by @Baarsgaard in #2562
• chore(NotificationPolicy): Remove duplicate nil check of annotations map by @Baarsgaard in #2564

Full Changelog: v5.22.0...v5.22.1