feat(container)!: Update ghcr.io/kiwigrid/k8s-sidecar ( 1.30.1 → 2.6.0 )

[parsec-renovate]

This PR contains the following updates:

Package	Update	Change
ghcr.io/kiwigrid/k8s-sidecar	major	1.30.1 → 2.6.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

kiwigrid/k8s-sidecar (ghcr.io/kiwigrid/k8s-sidecar)

v2.6.0

Compare Source

📦 Dependencies

• build(deps): bump python from 3.13.12-alpine3.23 to 3.14.3-alpine3.23
  • PR: #​555

v2.5.5

Compare Source

📦 Dependencies

• build(deps): bump actions/download-artifact from 8.0.0 to 8.0.1
  • PR: #​543
• build(deps): bump docker/build-push-action from 6.19.2 to 7.0.0
  • PR: #​544
• build(deps): bump docker/setup-buildx-action from 3.12.0 to 4.0.0
  • PR: #​541
• build(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0
  • PR: #​551
• build(deps): bump docker/setup-qemu-action from 3.7.0 to 4.0.0
  • PR: #​542
• Pin python version
  • PR: #​552

v2.5.4

Compare Source

Breaking Change: Removal of :latest Tag

Starting with version 2.5.4, we no longer publish the :latest Docker image tag. This is part of our move towards immutable artifacts to improve deployment stability and predictability.

Please update your configurations to use a specific version tag.

v2.5.3

Compare Source

📦 Dependencies

• build(deps): bump github/codeql-action from 4.32.2 to 4.32.4
  • PR: #​532
• build(deps): bump actions/stale from 10.1.1 to 10.2.0
  • PR: #​529
• build(deps): bump docker/build-push-action from 6.18.0 to 6.19.2
  • PR: #​527
• build(deps): bump actions/download-artifact from 7.0.0 to 8.0.0
  • PR: #​535
• build(deps): bump helm/kind-action from 1.13.0 to 1.14.0
  • PR: #​530

v2.5.2

Compare Source

📦 Dependencies

• build(deps): bump python-json-logger from 4.0.0 to 4.1.0 in /src
  • PR: #​540
• build(deps): bump logfmter from 0.0.11 to 0.0.12 in /src
  • PR: #​536
• build(deps): bump requests from 2.32.5 to 2.33.1 in /src
  • PR: #​539

v2.5.0

Compare Source

🚀 Features

• feat: add DISABLE_X509_STRICT_VERIFICATION env var
  • PR: #​474

v2.4.0

Compare Source

🚀 Features

• Ensure health server supports dual-stack
  • PR: #​511

v2.3.0

Compare Source

🚀 Features

• feat: removes fastapi for liveness probe, using ThreadingHTTPServer now
• feat: batch fetching secrets/configmaps, rather than getting them all at once
  • PR: #​506

📦 Dependencies

• Bump docker/setup-buildx-action from 3.11.1 to 3.12.0
  • PR: #​503
• build(deps): bump github/codeql-action from 4.31.9 to 4.31.10
  • PR: #​508

v2.2.3

Compare Source

v2.2.2

Compare Source

📦 Dependencies

• Bump uvicorn from 0.38.0 to 0.40.0 in /src
  • PR: #​497

v2.2.1

Compare Source

📦 Dependencies

• Bump softprops/action-gh-release from 2.4.2 to 2.5.0
  • PR: #​477
• Bump github/codeql-action from 4.31.5 to 4.31.8
  • PR: #​491
• Bump actions/download-artifact from 6.0.0 to 7.0.0
  • PR: #​494
• Bump actions/upload-artifact from 5.0.0 to 6.0.0
  • PR: #​492
• Bump actions/stale from 10.1.0 to 10.1.1
  • PR: #​482
• Bump fastapi from 0.122.0 to 0.128.0 in /src
  • PR: #​501

v2.2.0

Compare Source

🚀 Features

• feat: Use threads instead of processes for watchers
  • PR: #​490

📦 Dependencies

• Bump actions/checkout from 6.0.0 to 6.0.1
  • PR: #​480

v2.1.4

Compare Source

📦 Dependencies

• Bump actions/checkout from 5.0.1 to 6.0.0
  • PR: #​472
• Bump actions/upload-artifact from 4.6.2 to 5.0.0
  • PR: #​459
• Bump actions/download-artifact from 5.0.0 to 6.0.0
  • PR: #​456
• Bump fastapi from 0.121.0 to 0.122.0 in /src
  • PR: #​470

v2.1.3

Compare Source

📦 Dependencies

• Bump github/codeql-action from 4.31.2 to 4.31.3
  • PR: #​466
• Bump actions/checkout from 5.0.0 to 5.0.1
  • PR: #​467
• Bump softprops/action-gh-release from 2.4.1 to 2.4.2
  • PR: #​463
• Bump github/codeql-action from 4.31.3 to 4.31.5
  • PR: #​471

v2.1.2

Compare Source

📦 Dependencies

• Bump mikepenz/release-changelog-builder-action from 6.0.0 to 6.0.1
  • PR: #​458
• Bump docker/setup-qemu-action from 3.6.0 to 3.7.0
  • PR: #​457
• Bump fastapi from 0.115.2 to 0.121.0 in /src
  • PR: #​452

v2.1.1

Compare Source

📦 Dependencies

• Bump mikepenz/release-changelog-builder-action from 6.0.0 to 6.0.1
  • PR: #​458
• Bump docker/setup-qemu-action from 3.6.0 to 3.7.0
  • PR: #​457
• Bump fastapi from 0.115.2 to 0.121.0 in /src
  • PR: #​452

v2.1.0

Compare Source

🚀 Features

• wyn_skip_init: - add flag to skip initial request to REQ_URL when using WATCH
  • PR: #​433

📦 Dependencies

• Bump actions/upload-artifact from 4 to 5
  • PR: #​439
• Bump actions/download-artifact from 5 to 6
  • PR: #​440

v2.0.3

Compare Source

Build

• Drop support for ppc64le (#​445)
• Drop support for s390x (#​444)

Enhancements

• Add health endpoint with readiness and liveness probes (#​416)

• New /healthz Endpoint: A new HTTP endpoint is available on port 8080 (configurable via the HEALTH_PORT environment variable)

  • Readiness Probe:

    • The sidecar now reports as "ready" (HTTP 200) only after the initial synchronization of all configured resources is complete
    • This prevents the main application container from starting or receiving traffic prematurely, ensuring all configuration files are present at startup

  • Liveness Probe:

    • The probe continuously monitors the sidecar's health by checking two critical conditions:
      • Kubernetes API Contact: Verifies that the sidecar has had successful contact with the Kubernetes API within the last 60 seconds
      • Watcher Process Health: Ensures that all internal watcher subprocesses are running correctly
    • If any check fails, the probe fails, signaling Kubernetes to restart the container

• Reduced Log Noise: Access logs for frequent /healthz requests are automatically filtered out to keep application logs clean and focused

• Fail-Fast on Process Death: The main process now exits immediately if a critical watcher subprocess dies, ensuring a prompt restart by Kubernetes

Testing

• The CI pipeline has been enhanced with new tests to validate this functionality:
  • A test to confirm the Uvicorn health server starts successfully
  • A liveness test that simulates a watcher process failure and asserts that Kubernetes restarts the pod as expected
  • A Kubernetes Config load test for Sleep and Watch based sidecar

v1.30.11

Compare Source

⚠️ YANKED/UNSTABLE ⚠️: Do not use 1.30.11 due to #​431
Use 1.30.9 as latest stable

📦 Dependencies

• Bump python-json-logger from 3.3.0 to 4.0.0 in /src
  • PR: #​424

v1.30.10

Compare Source

⚠️ YANKED/UNSTABLE ⚠️: Do not use 1.30.10 due to #​431
Use 1.30.9 as latest stable

📦 Dependencies

• Bump requests from 2.32.4 to 2.32.5 in /src
  • PR: #​418

v1.30.9

Compare Source

🚀 Features

• Extend exception handling
  • PR: #​403
• Add check for 'none' response
  • PR: #​413

📦 Dependencies

• Bump actions/download-artifact from 4 to 5
  • PR: #​408
• Bump actions/checkout from 4 to 5
  • PR: #​409

v1.30.8

Compare Source

📦 Dependencies

• Bump logfmter from 0.0.9 to 0.0.10 in /src
  • PR: #​406

v1.30.7

Compare Source

v1.30.6

Compare Source

v1.30.5

Compare Source

📦 Dependencies

• Bump requests from 2.32.3 to 2.32.4 in /src
  • PR: #​397
• Bump kubernetes from 32.0.1 to 33.1.0 in /src
  • PR: #​398

v1.30.4

Compare Source

v1.30.3

Compare Source

v1.30.2

Compare Source

📦 Dependencies

• Bump python-json-logger from 3.2.1 to 3.3.0 in /src
  • PR: #​391

---

Configuration

📅 Schedule: (in timezone America/New_York)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.