feat(helm)!: Update chart mongodb ( 14.13.0 → 15.1.7 )

[samip5-bot[bot]]

This PR contains the following updates:

Package	Update	Change
mongodb (source)	major	14.13.0 -> 15.1.7

---

[!WARNING] Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• [ ] If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[samip5-bot[bot]]

--- k8s/nebula/apps/databases/mongodb/app Kustomization: flux-system/mongodb HelmRelease: databases/mongodb

+++ k8s/nebula/apps/databases/mongodb/app Kustomization: flux-system/mongodb HelmRelease: databases/mongodb

@@ -13,13 +13,13 @@

     spec:
       chart: mongodb
       sourceRef:
         kind: HelmRepository
         name: bitnami
         namespace: flux-system
-      version: 14.13.0
+      version: 15.6.13
   interval: 10m0s
   values:
     architecture: standalone
     auth:
       enabled: false
     backup:

[github-advanced-security[bot]]

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.

[samip5-bot[bot]]

--- HelmRelease: databases/mongodb StatefulSet: databases/mongodb

+++ HelmRelease: databases/mongodb StatefulSet: databases/mongodb

@@ -45,27 +45,61 @@

       securityContext:
         fsGroup: 1001
         fsGroupChangePolicy: Always
         supplementalGroups: []
         sysctls: []
       enableServiceLinks: true
+      initContainers:
+      - name: log-dir
+        image: registry.skysolutions.fi/docker/bitnami/mongodb:7.0
+        imagePullPolicy: IfNotPresent
+        command:
+        - /bin/bash
+        args:
+        - -ec
+        - |
+          ln -sf /dev/stdout "/opt/bitnami/mongodb/logs/mongodb.log"
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
+          privileged: false
+          readOnlyRootFilesystem: true
+          runAsGroup: 1001
+          runAsNonRoot: true
+          runAsUser: 1001
+          seLinuxOptions: {}
+          seccompProfile:
+            type: RuntimeDefault
+        resources:
+          limits:
+            cpu: 900m
+            memory: 400Mi
+          requests:
+            cpu: 10m
+            memory: 100Mi
+        volumeMounts:
+        - name: empty-dir
+          mountPath: /opt/bitnami/mongodb/logs
+          subPath: app-logs-dir
       containers:
       - name: mongodb
         image: registry.skysolutions.fi/docker/bitnami/mongodb:7.0
         imagePullPolicy: IfNotPresent
         securityContext:
           allowPrivilegeEscalation: false
           capabilities:
             drop:
             - ALL
           privileged: false
-          readOnlyRootFilesystem: false
-          runAsGroup: 0
+          readOnlyRootFilesystem: true
+          runAsGroup: 1001
           runAsNonRoot: true
           runAsUser: 1001
-          seLinuxOptions: null
+          seLinuxOptions: {}
           seccompProfile:
             type: RuntimeDefault
         env:
         - name: BITNAMI_DEBUG
           value: 'false'
         - name: ALLOW_EMPTY_PASSWORD
@@ -122,12 +156,15 @@

         - name: empty-dir
           mountPath: /opt/bitnami/mongodb/tmp
           subPath: app-tmp-dir
         - name: empty-dir
           mountPath: /opt/bitnami/mongodb/logs
           subPath: app-logs-dir
+        - name: empty-dir
+          mountPath: /.mongodb
+          subPath: mongosh-home
         - name: datadir
           mountPath: /bitnami/mongodb
           subPath: null
         - name: common-scripts
           mountPath: /bitnami/scripts
       volumes:
--- HelmRelease: databases/mongodb PodDisruptionBudget: databases/mongodb

+++ HelmRelease: databases/mongodb PodDisruptionBudget: databases/mongodb

@@ -0,0 +1,19 @@

+---
+apiVersion: policy/v1
+kind: PodDisruptionBudget
+metadata:
+  name: mongodb
+  namespace: databases
+  labels:
+    app.kubernetes.io/instance: mongodb
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: mongodb
+    app.kubernetes.io/component: mongodb
+spec:
+  maxUnavailable: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/instance: mongodb
+      app.kubernetes.io/name: mongodb
+      app.kubernetes.io/component: mongodb
+