feat(helm): update chart robusta ( 0.30.0 ➔ 0.31.1 )

[renovate]

This PR contains the following updates:

Package	Update	Change
robusta	minor	0.30.0 → 0.31.1

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

--- kubernetes/apps/observability/robusta/app Kustomization: observability/robusta HelmRelease: observability/robusta

+++ kubernetes/apps/observability/robusta/app Kustomization: observability/robusta HelmRelease: observability/robusta

@@ -12,13 +12,13 @@

   chart:
     spec:
       chart: robusta
       sourceRef:
         kind: HelmRepository
         name: robusta
-      version: 0.30.0
+      version: 0.31.1
   driftDetection:
     mode: enabled
   install:
     remediation:
       retries: -1
   interval: 1h

[github-actions]

--- HelmRelease: observability/robusta ConfigMap: observability/custom-toolsets-configmap

+++ HelmRelease: observability/robusta ConfigMap: observability/custom-toolsets-configmap

@@ -4,11 +4,12 @@

 metadata:
   name: custom-toolsets-configmap
   namespace: observability
 data:
   custom_toolset.yaml: "toolsets: \n  internet:\n    enabled: true\n  kubernetes/core:\n\
     \    enabled: true\n  kubernetes/logs:\n    enabled: true\n  prometheus/metrics:\n\
-    \    enabled: true\n  robusta:\n    enabled: true\nmcp_servers: \n  {}"
+    \    enabled: true\n  robusta:\n    enabled: true\n  runbook:\n    enabled: true\n\
+    mcp_servers: \n  {}"
   model_list.yaml: |2-
 
     {}
 
--- HelmRelease: observability/robusta ClusterRole: observability/robusta-holmes-cluster-role

+++ HelmRelease: observability/robusta ClusterRole: observability/robusta-holmes-cluster-role

@@ -181,7 +181,176 @@

   - probes
   - prometheusrules
   verbs:
   - get
   - list
   - watch
+- apiGroups:
+  - argoproj.io
+  resources:
+  - applications
+  - applicationsets
+  - appprojects
+  - workflows
+  - workflowtemplates
+  - cronworkflows
+  - rollouts
+  - analysisruns
+  - analysistemplates
+  - experiments
+  - eventsources
+  - sensors
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - source.toolkit.fluxcd.io
+  resources:
+  - gitrepositories
+  - helmrepositories
+  - helmcharts
+  - buckets
+  - ocirepositories
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - kustomize.toolkit.fluxcd.io
+  resources:
+  - kustomizations
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - helm.toolkit.fluxcd.io
+  resources:
+  - helmreleases
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - notification.toolkit.fluxcd.io
+  resources:
+  - alerts
+  - providers
+  - receivers
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - kafka.strimzi.io
+  resources:
+  - kafkas
+  - kafkatopics
+  - kafkausers
+  - kafkaconnects
+  - kafkaconnectors
+  - kafkamirrormakers
+  - kafkabridges
+  - kafkarebalances
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - keda.sh
+  resources:
+  - scaledobjects
+  - scaledjobs
+  - triggerauthentications
+  - clustertriggerauthentications
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - pkg.crossplane.io
+  resources:
+  - providers
+  - configurations
+  - functions
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - apiextensions.crossplane.io
+  resources:
+  - compositions
+  - compositeresourcedefinitions
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - networking.istio.io
+  resources:
+  - virtualservices
+  - destinationrules
+  - gateways
+  - serviceentries
+  - sidecars
+  - workloadentries
+  - workloadgroups
+  - proxyconfigs
+  - envoyfilters
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - telemetry.istio.io
+  resources:
+  - telemetries
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - gateway.networking.k8s.io
+  resources:
+  - gatewayclasses
+  - gateways
+  - httproutes
+  - tcproutes
+  - tlsroutes
+  - udproutes
+  - grpcroutes
+  - referencegrants
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - velero.io
+  resources:
+  - backups
+  - restores
+  - schedules
+  - backupstoragelocations
+  - volumesnapshotlocations
+  - podvolumebackups
+  - podvolumerestores
+  - downloadrequests
+  - deletebackuprequests
+  - serverstatusrequests
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - external-secrets.io
+  resources:
+  - externalsecrets
+  - secretstores
+  - clustersecretstores
+  - clusterexternalsecrets
+  verbs:
+  - get
+  - list
+  - watch
 
--- HelmRelease: observability/robusta ClusterRole: observability/robusta-runner-cluster-role

+++ HelmRelease: observability/robusta ClusterRole: observability/robusta-runner-cluster-role

@@ -196,7 +196,195 @@

   - clusterrolebindings
   - roles
   - rolebindings
   verbs:
   - get
   - list
+- apiGroups:
+  - argoproj.io
+  resources:
+  - applications
+  - applicationsets
+  - appprojects
+  - workflows
+  - workflowtemplates
+  - cronworkflows
+  - rollouts
+  - analysisruns
+  - analysistemplates
+  - experiments
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - source.toolkit.fluxcd.io
+  resources:
+  - gitrepositories
+  - helmrepositories
+  - helmcharts
+  - ocirepositories
+  - buckets
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - kustomize.toolkit.fluxcd.io
+  resources:
+  - kustomizations
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - helm.toolkit.fluxcd.io
+  resources:
+  - helmreleases
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - notification.toolkit.fluxcd.io
+  resources:
+  - alerts
+  - providers
+  - receivers
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - image.toolkit.fluxcd.io
+  resources:
+  - imagepolicies
+  - imagerepositories
+  - imageupdateautomations
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - kafka.strimzi.io
+  resources:
+  - kafkas
+  - kafkatopics
+  - kafkausers
+  - kafkaconnects
+  - kafkaconnectors
+  - kafkamirrormakers
+  - kafkamirrormaker2s
+  - kafkabridges
+  - kafkarebalances
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - core.strimzi.io
+  resources:
+  - strimzipodsets
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - keda.sh
+  resources:
+  - scaledobjects
+  - scaledjobs
+  - triggerauthentications
+  - clustertriggerauthentications
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - pkg.crossplane.io
+  resources:
+  - providers
+  - configurations
+  - providerrevisions
+  - configurationrevisions
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - apiextensions.crossplane.io
+  resources:
+  - compositeresourcedefinitions
+  - compositions
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - networking.istio.io
+  resources:
+  - virtualservices
+  - destinationrules
+  - gateways
+  - serviceentries
+  - sidecars
+  - envoyfilters
+  - workloadentries
+  - workloadgroups
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - security.istio.io
+  resources:
+  - peerauthentications
+  - requestauthentications
+  - authorizationpolicies
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - gateway.networking.k8s.io
+  resources:
+  - gateways
+  - gatewayclasses
+  - httproutes
+  - grpcroutes
+  - tcproutes
+  - udproutes
+  - tlsroutes
+  - referencegrants
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - velero.io
+  resources:
+  - backups
+  - restores
+  - schedules
+  - backupstoragelocations
+  - volumesnapshotlocations
+  - podvolumebackups
+  - podvolumerestores
+  - downloadrequests
+  - deletebackuprequests
+  - serverstatusrequests
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - external-secrets.io
+  resources:
+  - externalsecrets
+  - secretstores
+  - clustersecretstores
+  - clusterexternalsecrets
+  verbs:
+  - get
+  - list
+  - watch
 
--- HelmRelease: observability/robusta Deployment: observability/robusta-holmes

+++ HelmRelease: observability/robusta Deployment: observability/robusta-holmes

@@ -14,23 +14,42 @@

       app: holmes
   template:
     metadata:
       labels:
         app: holmes
       annotations:
-        checksum/toolset-config: 060a20b330e0bf168372da8663876175c6c04457fa71e341212351d1b97bd703
+        checksum/toolset-config: dab30b38109241ae45f821f5d50113ab9c47e5a865b4da215d8f52af87e00b5e
     spec:
       serviceAccountName: robusta-holmes-service-account
       containers:
       - name: holmes
-        image: robustadev/holmes:0.17.0
+        image: robustadev/holmes:0.18.1
         imagePullPolicy: Always
         command:
         - python3
         - -u
         - server.py
+        ports:
+        - containerPort: 5050
+          name: http
+        livenessProbe:
+          httpGet:
+            path: /healthz
+            port: http
+          initialDelaySeconds: 30
+          periodSeconds: 10
+          timeoutSeconds: 5
+          failureThreshold: 3
+        readinessProbe:
+          httpGet:
+            path: /readyz
+            port: http
+          initialDelaySeconds: 15
+          periodSeconds: 5
+          timeoutSeconds: 3
+          failureThreshold: 3
         env:
         - name: LOG_LEVEL
           value: INFO
         - name: ENABLE_TELEMETRY
           value: 'true'
         - name: SENTRY_DSN
--- HelmRelease: observability/robusta Deployment: observability/robusta-runner

+++ HelmRelease: observability/robusta Deployment: observability/robusta-runner

@@ -20,13 +20,13 @@

         robustaComponent: runner
     spec:
       serviceAccountName: robusta-runner-service-account
       automountServiceAccountToken: true
       containers:
       - name: runner
-        image: robustadev/robusta-runner:0.30.0
+        image: robustadev/robusta-runner:0.31.1
         imagePullPolicy: IfNotPresent
         securityContext:
           allowPrivilegeEscalation: false
           capabilities: {}
           privileged: false
           readOnlyRootFilesystem: false
@@ -47,13 +47,13 @@

           valueFrom:
             fieldRef:
               fieldPath: metadata.namespace
         - name: HOLMES_ENABLED
           value: 'True'
         - name: RUNNER_VERSION
-          value: 0.30.0
+          value: 0.31.1
         - name: CERTIFICATE
           value: null
         - name: IMAGE_REGISTRY
           value: robustadev
         - name: CLUSTER_DOMAIN
           value: cluster.local