feat: Bump kube-prometheus-stack to 63.0.0 (#2671)

* chore: Update kube-prometheus-stack 60.4.1 => 63.0.0

* chore: Move kube-prometheus-stack/60.4.1 => 63.0.0

* build: Updated licenses.d2iq.yaml

* feat(kps): Bump centralized-grafana

* feat: bump promethues stack

* build: Updated licenses.d2iq.yaml

---------

Co-authored-by: d2iq-mergebot <ci-mergebot@d2iq.com>
Co-authored-by: Grace Do <xgrace@gmail.com>
Co-authored-by: Shubham Gupta <shubham.gupta2@nutanix.com>

licenses.d2iq.yaml

@@ -29,7 +29,7 @@ resources:
         notice_path: NOTICE.md
         ref: v${image_tag%-d2iq.0}
         url: https://github.com/grafana/grafana
-  - container_image: docker.io/grafana/grafana:11.0.0
+  - container_image: docker.io/grafana/grafana:11.2.0
     sources:
       - license_path: LICENSE
         notice_path: NOTICE.md
@@ -480,13 +480,13 @@ resources:
       - license_path: LICENSE
         ref: ${image_tag%-d2iq.1}
         url: https://github.com/kiwigrid/k8s-sidecar
-  - container_image: quay.io/prometheus-operator/prometheus-config-reloader:v0.74.0
+  - container_image: quay.io/prometheus-operator/prometheus-config-reloader:v0.76.1
     sources:
       - license_path: LICENSE
         notice_path: NOTICE
         ref: ${image_tag}
         url: https://github.com/prometheus-operator/prometheus-operator
-  - container_image: quay.io/prometheus-operator/prometheus-operator:v0.74.0
+  - container_image: quay.io/prometheus-operator/prometheus-operator:v0.76.1
     sources:
       - license_path: LICENSE
         notice_path: NOTICE
@@ -504,7 +504,7 @@ resources:
         notice_path: NOTICE
         ref: ${image_tag}
         url: https://github.com/prometheus/alertmanager
-  - container_image: quay.io/prometheus/node-exporter:v1.8.1
+  - container_image: quay.io/prometheus/node-exporter:v1.8.2
     sources:
       - license_path: LICENSE
         notice_path: NOTICE
@@ -516,13 +516,13 @@ resources:
         notice_path: NOTICE
         ref: ${image_tag}
         url: https://github.com/prometheus/prometheus
-  - container_image: quay.io/prometheus/prometheus:v2.53.0
+  - container_image: quay.io/prometheus/prometheus:v2.54.1
     sources:
       - license_path: LICENSE
         notice_path: NOTICE
         ref: ${image_tag}
         url: https://github.com/prometheus/prometheus
-  - container_image: quay.io/thanos/thanos:v0.35.1
+  - container_image: quay.io/thanos/thanos:v0.36.1
     sources:
       - license_path: LICENSE
         ref: ${image_tag}
@@ -532,7 +532,7 @@ resources:
       - license_path: LICENSE
         ref: ${image_tag}
         url: https://github.com/kubernetes/kube-state-metrics
-  - container_image: registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.12.0
+  - container_image: registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.13.0
     sources:
       - license_path: LICENSE
         ref: ${image_tag}

services/centralized-grafana/60.4.1/centralized-grafana.yaml → services/centralized-grafana/63.0.0/centralized-grafana.yaml

@@ -11,7 +11,7 @@ spec:
         kind: HelmRepository
         name: mesosphere.github.io-charts-staging
         namespace: kommander-flux
-      version: 60.4.0
+      version: 63.0.0
   interval: 15s
   install:
     crds: CreateReplace
@@ -25,7 +25,7 @@ spec:
   releaseName: centralized-grafana
   valuesFrom:
     - kind: ConfigMap
-      name: centralized-grafana-60.4.1-d2iq-defaults
+      name: centralized-grafana-63.0.0-d2iq-defaults
   targetNamespace: ${releaseNamespace}
 ---
 apiVersion: v1

services/centralized-grafana/60.4.1/defaults/cm.yaml → services/centralized-grafana/63.0.0/defaults/cm.yaml

@@ -1,7 +1,7 @@
 apiVersion: v1
 kind: ConfigMap
 metadata:
-  name: centralized-grafana-60.4.1-d2iq-defaults
+  name: centralized-grafana-63.0.0-d2iq-defaults
   namespace: ${releaseNamespace}
 data:
   values.yaml: |

services/kube-prometheus-stack/60.4.1/defaults/cm.yaml → services/kube-prometheus-stack/63.0.0/defaults/cm.yaml

@@ -1,7 +1,7 @@
 apiVersion: v1
 kind: ConfigMap
 metadata:
-  name: kube-prometheus-stack-60.4.1-d2iq-defaults
+  name: kube-prometheus-stack-63.0.0-d2iq-defaults
   namespace: ${releaseNamespace}
 data:
   values.yaml: |

services/kube-prometheus-stack/60.4.1/etcd-metrics-proxy.yaml → services/kube-prometheus-stack/63.0.0/etcd-metrics-proxy.yaml

@@ -9,7 +9,7 @@ spec:
   wait: true
   interval: 6h
   retryInterval: 1m
-  path: ./services/kube-prometheus-stack/60.4.1/etcd-metrics-proxy
+  path: ./services/kube-prometheus-stack/63.0.0/etcd-metrics-proxy
   sourceRef:
     kind: GitRepository
     name: management

services/kube-prometheus-stack/60.4.1/helmrelease.yaml → services/kube-prometheus-stack/63.0.0/helmrelease.yaml

@@ -9,7 +9,7 @@ spec:
   wait: true
   interval: 6h
   retryInterval: 1m
-  path: ./services/kube-prometheus-stack/60.4.1/helmrelease
+  path: ./services/kube-prometheus-stack/63.0.0/helmrelease
   sourceRef:
     kind: GitRepository
     name: management

services/kube-prometheus-stack/60.4.1/helmrelease/kube-prometheus-stack.yaml → services/kube-prometheus-stack/63.0.0/helmrelease/kube-prometheus-stack.yaml

@@ -11,7 +11,7 @@ spec:
         kind: HelmRepository
         name: mesosphere.github.io-charts-staging
         namespace: kommander-flux
-      version: 60.4.0
+      version: 63.0.0
   interval: 15s
   install:
     timeout: 5m0s
@@ -27,7 +27,7 @@ spec:
   releaseName: kube-prometheus-stack
   valuesFrom:
     - kind: ConfigMap
-      name: kube-prometheus-stack-60.4.1-d2iq-defaults
+      name: kube-prometheus-stack-63.0.0-d2iq-defaults
     - kind: ConfigMap
       name: kube-prometheus-stack-mgmt-overrides
       optional: true

services/kube-prometheus-stack/63.0.0/rbac/alertmanager.yaml

@@ -0,0 +1,40 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: dkp-kube-prometheus-stack-alertmanager-admin
+rules:
+  - nonResourceURLs:
+      - /dkp/alertmanager
+      - /dkp/alertmanager/*
+    verbs:
+      - get
+      - head
+      - post
+      - put
+      - delete
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: dkp-kube-prometheus-stack-alertmanager-view
+rules:
+  - nonResourceURLs:
+      - /dkp/alertmanager
+      - /dkp/alertmanager/*
+    verbs:
+      - get
+      - head
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: dkp-kube-prometheus-stack-alertmanager-edit
+rules:
+  - nonResourceURLs:
+      - /dkp/alertmanager
+      - /dkp/alertmanager/*
+    verbs:
+      - get
+      - head
+      - post
+      - put

services/kube-prometheus-stack/63.0.0/rbac/grafana.yaml

@@ -0,0 +1,53 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: dkp-kube-prometheus-stack-grafana-admin
+  labels:
+    rbac.authorization.k8s.io/aggregate-to-admin: "true"
+rules:
+  - nonResourceURLs:
+      - /dkp/grafana
+      - /dkp/grafana/*
+    verbs:
+      - get
+      - head
+      - post
+      - put
+      - delete
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: dkp-kube-prometheus-stack-grafana-view
+  labels:
+    rbac.authorization.k8s.io/aggregate-to-view: "true"
+rules:
+  - nonResourceURLs:
+      - /dkp/grafana
+      - /dkp/grafana/*
+      - /dkp/grafana/api/datasources/proxy/*
+    verbs:
+      - get
+      - head
+  - nonResourceURLs:
+      - /dkp/grafana/api/datasources/proxy/*
+      - /dkp/grafana/api/ds/query
+      - /dkp/grafana/api/frontend-metrics
+    verbs:
+      - post
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: dkp-kube-prometheus-stack-grafana-edit
+  labels:
+    rbac.authorization.k8s.io/aggregate-to-edit: "true"
+rules:
+  - nonResourceURLs:
+      - /dkp/grafana
+      - /dkp/grafana/*
+    verbs:
+      - get
+      - head
+      - post
+      - put

services/kube-prometheus-stack/60.4.1/rbac/prometheus.yaml → services/kube-prometheus-stack/63.0.0/rbac/prometheus.yaml

@@ -3,38 +3,38 @@ kind: ClusterRole
 metadata:
   name: dkp-kube-prometheus-stack-prometheus-admin
 rules:
-- nonResourceURLs:
-  - /dkp/prometheus
-  - /dkp/prometheus/*
-  verbs:
-    - get
-    - head
-    - post
-    - put
-    - delete
+  - nonResourceURLs:
+      - /dkp/prometheus
+      - /dkp/prometheus/*
+    verbs:
+      - get
+      - head
+      - post
+      - put
+      - delete
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   name: dkp-kube-prometheus-stack-prometheus-view
 rules:
-- nonResourceURLs:
-  - /dkp/prometheus
-  - /dkp/prometheus/*
-  verbs:
-    - get
-    - head
+  - nonResourceURLs:
+      - /dkp/prometheus
+      - /dkp/prometheus/*
+    verbs:
+      - get
+      - head
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   name: dkp-kube-prometheus-stack-prometheus-edit
 rules:
-- nonResourceURLs:
-  - /dkp/prometheus
-  - /dkp/prometheus/*
-  verbs:
-    - get
-    - head
-    - post
-    - put
+  - nonResourceURLs:
+      - /dkp/prometheus
+      - /dkp/prometheus/*
+    verbs:
+      - get
+      - head
+      - post
+      - put