feat(helm): update chart loki ( 6.21.0 → 6.42.0 )

[renovate]

Note

Mend has cancelled the proposed renaming of the Renovate GitHub app being renamed to mend[bot].

This notice will be removed on 2025-10-07.

---

This PR contains the following updates:

Package	Update	Change
loki (source)	minor	6.21.0 -> 6.42.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

grafana/helm-charts (loki)

v6.41.1

Helm chart for Grafana Loki and Grafana Enterprise Logs supporting monolithic, simple scalable, and microservices modes.

Source commit: grafana/loki@bff985e

Tag on source: https://github.com/grafana/loki/releases/tag/helm-loki-6.41.1

v6.41.0

The leading tool for querying and visualizing time series and metrics.

v6.40.0

The leading tool for querying and visualizing time series and metrics.

v6.39.0

The leading tool for querying and visualizing time series and metrics.

v6.38.0

The leading tool for querying and visualizing time series and metrics.

v6.37.0

The leading tool for querying and visualizing time series and metrics.

v6.36.1

The leading tool for querying and visualizing time series and metrics.

v6.29.0

The leading tool for querying and visualizing time series and metrics.

v6.28.0

The leading tool for querying and visualizing time series and metrics.

v6.27.0

The leading tool for querying and visualizing time series and metrics.

v6.24.1

The leading tool for querying and visualizing time series and metrics.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[carpenike-bot]

--- HelmRelease: monitoring/loki ServiceAccount: monitoring/loki

+++ HelmRelease: monitoring/loki ServiceAccount: monitoring/loki

@@ -4,9 +4,8 @@

 metadata:
   name: loki
   namespace: monitoring
   labels:
     app.kubernetes.io/name: loki
     app.kubernetes.io/instance: loki
-    app.kubernetes.io/managed-by: Helm
 automountServiceAccountToken: true
 
--- HelmRelease: monitoring/loki ConfigMap: monitoring/loki

+++ HelmRelease: monitoring/loki ConfigMap: monitoring/loki

@@ -4,13 +4,12 @@

 metadata:
   name: loki
   namespace: monitoring
   labels:
     app.kubernetes.io/name: loki
     app.kubernetes.io/instance: loki
-    app.kubernetes.io/managed-by: Helm
 data:
   config.yaml: |2
 
     analytics:
       reporting_enabled: false
     auth_enabled: false
@@ -58,12 +57,14 @@

       enabled: false
     query_range:
       align_queries_with_step: true
     ruler:
       storage:
         type: local
+      wal:
+        dir: /var/loki/ruler-wal
     runtime_config:
       file: /etc/loki/runtime-config/runtime-config.yaml
     schema_config:
       configs:
       - from: "2024-04-01"
         index:
--- HelmRelease: monitoring/loki ConfigMap: monitoring/loki-gateway

+++ HelmRelease: monitoring/loki ConfigMap: monitoring/loki-gateway

@@ -4,13 +4,12 @@

 metadata:
   name: loki-gateway
   namespace: monitoring
   labels:
     app.kubernetes.io/name: loki
     app.kubernetes.io/instance: loki
-    app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/component: gateway
 data:
   nginx.conf: "worker_processes  5;  ## Default: 1\nerror_log  /dev/stderr;\npid \
     \       /tmp/nginx.pid;\nworker_rlimit_nofile 8192;\n\nevents {\n  worker_connections\
     \  4096;  ## Default: 1024\n}\n\nhttp {\n  client_body_temp_path /tmp/client_temp;\n\
     \  proxy_temp_path       /tmp/proxy_temp_path;\n  fastcgi_temp_path     /tmp/fastcgi_temp;\n\
@@ -21,14 +20,15 @@

     \ - $remote_user [$time_local]  $status '\n        '\"$request\" $body_bytes_sent\
     \ \"$http_referer\" '\n        '\"$http_user_agent\" \"$http_x_forwarded_for\"\
     ';\n  access_log   /dev/stderr  main;\n\n  sendfile     on;\n  tcp_nopush   on;\n\
     \  resolver kube-dns.kube-system.svc.cluster.local.;\n  \n\n  server {\n    listen\
     \             8080;\n    listen             [::]:8080;\n\n    location = / {\n\
     \      return 200 'OK';\n      auth_basic off;\n    }\n\n    ########################################################\n\
-    \    # Configure backend targets# Distributor\n    location = /api/prom/push {\n\
-    \      proxy_pass       http://loki.monitoring.svc.cluster.local:3100$request_uri;\n\
+    \    # Configure backend targets\n    location ^~ /ui {\n      proxy_pass    \
+    \   http://loki.monitoring.svc.cluster.local:3100$request_uri;\n    }\n\n    #\
+    \ Distributor\n    location = /api/prom/push {\n      proxy_pass       http://loki.monitoring.svc.cluster.local:3100$request_uri;\n\
     \    }\n    location = /loki/api/v1/push {\n      proxy_pass       http://loki.monitoring.svc.cluster.local:3100$request_uri;\n\
     \    }\n    location = /distributor/ring {\n      proxy_pass       http://loki.monitoring.svc.cluster.local:3100$request_uri;\n\
     \    }\n    location = /otlp/v1/logs {\n      proxy_pass       http://loki.monitoring.svc.cluster.local:3100$request_uri;\n\
     \    }\n\n    # Ingester\n    location = /flush {\n      proxy_pass       http://loki.monitoring.svc.cluster.local:3100$request_uri;\n\
     \    }\n    location ^~ /ingester/ {\n      proxy_pass       http://loki.monitoring.svc.cluster.local:3100$request_uri;\n\
     \    }\n    location = /ingester {\n      internal;        # to suppress 301\n\
@@ -56,10 +56,16 @@

     \      proxy_set_header Upgrade $http_upgrade;\n      proxy_set_header Connection\
     \ \"upgrade\";\n    }\n    location = /loki/api/v1/tail {\n      proxy_pass  \
     \     http://loki.monitoring.svc.cluster.local:3100$request_uri;\n      proxy_set_header\
     \ Upgrade $http_upgrade;\n      proxy_set_header Connection \"upgrade\";\n   \
     \ }\n    location ^~ /api/prom/ {\n      proxy_pass       http://loki.monitoring.svc.cluster.local:3100$request_uri;\n\
     \    }\n    location = /api/prom {\n      internal;        # to suppress 301\n\
-    \    }\n    location ^~ /loki/api/v1/ {\n      proxy_pass       http://loki.monitoring.svc.cluster.local:3100$request_uri;\n\
+    \    }\n    # if the X-Query-Tags header is empty, set a noop= without a value\
+    \ as empty values are not logged\n    set $query_tags $http_x_query_tags;\n  \
+    \  if ($query_tags !~* '') {\n      set $query_tags \"noop=\";\n    }\n    location\
+    \ ^~ /loki/api/v1/ {\n      # pass custom headers set by Grafana as X-Query-Tags\
+    \ which are logged as key/value pairs in metrics.go log messages\n      proxy_set_header\
+    \ X-Query-Tags \"${query_tags},user=${http_x_grafana_user},dashboard_id=${http_x_dashboard_uid},dashboard_title=${http_x_dashboard_title},panel_id=${http_x_panel_id},panel_title=${http_x_panel_title},source_rule_uid=${http_x_rule_uid},rule_name=${http_x_rule_name},rule_folder=${http_x_rule_folder},rule_version=${http_x_rule_version},rule_source=${http_x_rule_source},rule_type=${http_x_rule_type}\"\
+    ;\n      proxy_pass       http://loki.monitoring.svc.cluster.local:3100$request_uri;\n\
     \    }\n    location = /loki/api/v1 {\n      internal;        # to suppress 301\n\
     \    }\n  }\n}\n"
 
--- HelmRelease: monitoring/loki ConfigMap: monitoring/loki-runtime

+++ HelmRelease: monitoring/loki ConfigMap: monitoring/loki-runtime

@@ -4,11 +4,10 @@

 metadata:
   name: loki-runtime
   namespace: monitoring
   labels:
     app.kubernetes.io/name: loki
     app.kubernetes.io/instance: loki
-    app.kubernetes.io/managed-by: Helm
 data:
   runtime-config.yaml: |
     {}
 
--- HelmRelease: monitoring/loki ClusterRole: monitoring/loki-clusterrole

+++ HelmRelease: monitoring/loki ClusterRole: monitoring/loki-clusterrole

@@ -2,13 +2,12 @@

 kind: ClusterRole
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
   labels:
     app.kubernetes.io/name: loki
     app.kubernetes.io/instance: loki
-    app.kubernetes.io/managed-by: Helm
   name: loki-clusterrole
 rules:
 - apiGroups:
   - ''
   resources:
   - configmaps
--- HelmRelease: monitoring/loki ClusterRoleBinding: monitoring/loki-clusterrolebinding

+++ HelmRelease: monitoring/loki ClusterRoleBinding: monitoring/loki-clusterrolebinding

@@ -3,13 +3,12 @@

 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
   name: loki-clusterrolebinding
   labels:
     app.kubernetes.io/name: loki
     app.kubernetes.io/instance: loki
-    app.kubernetes.io/managed-by: Helm
 subjects:
 - kind: ServiceAccount
   name: loki
   namespace: monitoring
 roleRef:
   kind: ClusterRole
--- HelmRelease: monitoring/loki Service: monitoring/loki-gateway

+++ HelmRelease: monitoring/loki Service: monitoring/loki-gateway

@@ -4,14 +4,14 @@

 metadata:
   name: loki-gateway
   namespace: monitoring
   labels:
     app.kubernetes.io/name: loki
     app.kubernetes.io/instance: loki
-    app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/component: gateway
+    prometheus.io/service-monitor: 'false'
 spec:
   type: ClusterIP
   ports:
   - name: http-metrics
     port: 80
     targetPort: http-metrics
--- HelmRelease: monitoring/loki Service: monitoring/loki-memberlist

+++ HelmRelease: monitoring/loki Service: monitoring/loki-memberlist

@@ -4,13 +4,12 @@

 metadata:
   name: loki-memberlist
   namespace: monitoring
   labels:
     app.kubernetes.io/name: loki
     app.kubernetes.io/instance: loki
-    app.kubernetes.io/managed-by: Helm
 spec:
   type: ClusterIP
   clusterIP: None
   ports:
   - name: tcp
     port: 7946
--- HelmRelease: monitoring/loki Service: monitoring/loki-headless

+++ HelmRelease: monitoring/loki Service: monitoring/loki-headless

@@ -4,13 +4,12 @@

 metadata:
   name: loki-headless
   namespace: monitoring
   labels:
     app.kubernetes.io/name: loki
     app.kubernetes.io/instance: loki
-    app.kubernetes.io/managed-by: Helm
     variant: headless
     prometheus.io/service-monitor: 'false'
 spec:
   clusterIP: None
   ports:
   - name: http-metrics
--- HelmRelease: monitoring/loki Service: monitoring/loki

+++ HelmRelease: monitoring/loki Service: monitoring/loki

@@ -4,13 +4,12 @@

 metadata:
   name: loki
   namespace: monitoring
   labels:
     app.kubernetes.io/name: loki
     app.kubernetes.io/instance: loki
-    app.kubernetes.io/managed-by: Helm
 spec:
   type: ClusterIP
   ports:
   - name: http-metrics
     port: 3100
     targetPort: http-metrics
--- HelmRelease: monitoring/loki Deployment: monitoring/loki-gateway

+++ HelmRelease: monitoring/loki Deployment: monitoring/loki-gateway

@@ -4,13 +4,12 @@

 metadata:
   name: loki-gateway
   namespace: monitoring
   labels:
     app.kubernetes.io/name: loki
     app.kubernetes.io/instance: loki
-    app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/component: gateway
 spec:
   replicas: 0
   strategy:
     type: RollingUpdate
   revisionHistoryLimit: 10
--- HelmRelease: monitoring/loki StatefulSet: monitoring/loki

+++ HelmRelease: monitoring/loki StatefulSet: monitoring/loki

@@ -4,13 +4,12 @@

 metadata:
   name: loki
   namespace: monitoring
   labels:
     app.kubernetes.io/name: loki
     app.kubernetes.io/instance: loki
-    app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/component: single-binary
     app.kubernetes.io/part-of: memberlist
 spec:
   replicas: 1
   podManagementPolicy: Parallel
   updateStrategy:
@@ -42,13 +41,13 @@

         runAsGroup: 10001
         runAsNonRoot: true
         runAsUser: 10001
       terminationGracePeriodSeconds: 30
       containers:
       - name: loki-sc-rules
-        image: ghcr.io/kiwigrid/k8s-sidecar:1.28.0
+        image: ghcr.io/kiwigrid/k8s-sidecar:1.30.2
         imagePullPolicy: IfNotPresent
         env:
         - name: METHOD
           value: WATCH
         - name: LABEL
           value: loki_rule
@@ -61,17 +60,23 @@

         - name: WATCH_SERVER_TIMEOUT
           value: '60'
         - name: WATCH_CLIENT_TIMEOUT
           value: '60'
         - name: LOG_LEVEL
           value: INFO
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
+          readOnlyRootFilesystem: true
         volumeMounts:
         - name: sc-rules-volume
           mountPath: /rules
       - name: loki
-        image: docker.io/grafana/loki:3.3.0
+        image: docker.io/grafana/loki:3.4.2
         imagePullPolicy: IfNotPresent
         args:
         - -config.file=/etc/loki/config/config.yaml
         - -target=all
         ports:
         - name: http-metrics

[carpenike-bot]

--- kubernetes/cluster-0/apps/monitoring/loki/app Kustomization: flux-system/loki HelmRelease: monitoring/loki

+++ kubernetes/cluster-0/apps/monitoring/loki/app Kustomization: flux-system/loki HelmRelease: monitoring/loki

@@ -14,13 +14,13 @@

       chart: loki
       interval: 30m
       sourceRef:
         kind: HelmRepository
         name: grafana
         namespace: flux-system
-      version: 6.21.0
+      version: 6.29.0
   interval: 30m
   timeout: 15m
   values:
     backend:
       replicas: 0
     chunksCache:

[carpenike-bot]

🦙 MegaLinter status: ❌ ERROR

Descriptor	Linter	Files	Fixed	Errors	Warnings	Elapsed time
❌ COPYPASTE	jscpd	yes		2	no	1.34s
✅ REPOSITORY	git_diff	yes		no	no	0.04s
✅ REPOSITORY	secretlint	yes		no	no	3.77s
✅ YAML	prettier	1		0	0	0.43s
✅ YAML	yamllint	1		0	0	0.63s

See detailed report in MegaLinter reports
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff