⏫(cont): image kube-prometheus-stack ( 60.3.0 → 60.4.0 )

[ktvbot]

This PR contains the following updates:

Package	Update	Change
kube-prometheus-stack (source)	minor	60.3.0 -> 60.4.0

---

Configuration

📅 Schedule: Branch creation - "after 8am,before 11pm" in timezone America/New_York, Automerge - "after 8am,before 11pm" in timezone America/New_York.

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[trunk-io]

⏱️ 3m total CI duration on this PR

Job	Cumulative Duration	Recent Runs
Enforce PR labels	1m	🟩 🟩 🟩 🟩
Kubeconform	43s	🟩
Trunk Check Runner	32s	🟩
Flux Diff (kubernetes, helmrelease)	31s	🟩
Flux Diff (kubernetes, kustomization)	18s	🟩
Labeler	3s	🟩
Label Size	2s	🟩

_{settings ⋅ feedback ⋅ docs ⋅ learn more about trunk.io}

[github-actions]

--- kubernetes/apps/observability/kube-prometheus-stack/app Kustomization: flux-system/kube-prometheus-stack HelmRelease: observability/kube-prometheus-stack

+++ kubernetes/apps/observability/kube-prometheus-stack/app Kustomization: flux-system/kube-prometheus-stack HelmRelease: observability/kube-prometheus-stack

@@ -13,13 +13,13 @@

     spec:
       chart: kube-prometheus-stack
       sourceRef:
         kind: HelmRepository
         name: prometheus-community
         namespace: flux-system
-      version: 60.3.0
+      version: 60.4.0
   dependsOn:
   - name: prometheus-operator-crds
     namespace: observability
   - name: openebs
     namespace: openebs-system
   - name: thanos

[github-actions]

--- HelmRelease: observability/kube-prometheus-stack Deployment: observability/kube-state-metrics

+++ HelmRelease: observability/kube-prometheus-stack Deployment: observability/kube-state-metrics

@@ -69,12 +69,13 @@

             port: 8080
             scheme: HTTP
           initialDelaySeconds: 5
           periodSeconds: 10
           successThreshold: 1
           timeoutSeconds: 5
+        resources: {}
         securityContext:
           allowPrivilegeEscalation: false
           capabilities:
             drop:
             - ALL
           readOnlyRootFilesystem: true
--- HelmRelease: observability/kube-prometheus-stack Prometheus: observability/kube-prometheus-stack

+++ HelmRelease: observability/kube-prometheus-stack Prometheus: observability/kube-prometheus-stack

@@ -9,12 +9,13 @@

     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/instance: kube-prometheus-stack
     app.kubernetes.io/part-of: kube-prometheus-stack
     release: kube-prometheus-stack
     heritage: Helm
 spec:
+  automountServiceAccountToken: true
   alerting:
     alertmanagers:
     - namespace: observability
       name: kube-prometheus-stack-alertmanager
       port: http-web
       pathPrefix: /