78 Commits
Author SHA1 Message Date
enix-renovate[bot] c8701f689c chore: update renovate to v44.17.3 2026-08-10 10:34:54 +02:00
Thibault VINCENT 02c166925a test(dagger): run negative schema fixtures through helm template 2026-08-05 19:14:52 +02:00
enix-renovate[bot] b2a973e598 chore: update renovate to v44.13.2 2026-08-05 17:45:18 +02:00
github-actions[bot] 84bd399989 build(dagger): regenerate module deps 2026-08-04 20:01:10 +02:00
enix-renovate[bot] 5152e260e6 chore: update renovate to v44 2026-08-04 20:01:10 +02:00
github-actions[bot] ea10fb6a38 build(dagger): regenerate module deps 2026-08-04 19:26:19 +02:00
enix-renovate[bot] ff46fde944 chore: update helm to v4.2.3 2026-08-04 19:26:19 +02:00
enix-renovate[bot] b64676344f security: update module go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp to v0.19.0 [security] 2026-08-04 19:25:06 +02:00
github-actions[bot] 10682f7a11 build(dagger): regenerate module deps 2026-08-04 19:16:43 +02:00
enix-renovate[bot] 27b146105c security: update module golang.org/x/text to v0.39.0 [security] 2026-08-04 19:16:43 +02:00
enix-renovate[bot] 56c693ef85 chore: update renovate to v43.288.0 2026-08-04 19:15:08 +02:00
github-actions[bot] 66a59296a5 build(dagger): regenerate module deps 2026-08-04 19:14:41 +02:00
enix-renovate[bot] 60acfb98cf security: update module go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp to v0.19.0 [security] 2026-08-04 19:14:41 +02:00
enix-renovate[bot] a7e8dc51e5 security: update module google.golang.org/grpc to v1.82.1 [security] 2026-08-04 19:12:56 +02:00
github-actions[bot] 091a31f729 build(dagger): regenerate module deps 2026-08-04 19:11:59 +02:00
enix-renovate[bot] 8abe476fd5 fix: update go modules (minor) 2026-08-04 19:11:59 +02:00
enix-renovate[bot] a57f83e8d0 chore: update trivy docker tag to v0.73.0 2026-08-04 19:10:35 +02:00
enix-renovate[bot] 130f55b94b chore: update helmschema docker tag to v0.23.4 2026-08-04 18:57:28 +02:00
github-actions[bot] ed2e86dc02 build(dagger): regenerate module deps 2026-08-04 18:55:41 +02:00
enix-renovate[bot] 2a9b2f36bf security: update module go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp to v0.19.0 [security] 2026-08-04 18:55:41 +02:00
github-actions[bot] 680782ddf0 build(dagger): regenerate module deps 2026-08-04 18:46:59 +02:00
Thibault VINCENT 625fc11e68 build(dagger): fix helm-schema image tag to match its v-prefixed registry tag 2026-08-04 18:46:59 +02:00
enix-renovate[bot] 7ef251ed85 fix: update go modules (patch) 2026-08-04 16:13:37 +02:00
enix-renovate[bot] bacc15ad7a chore: update markdownlint docker tag to v0.23.2 2026-08-04 16:12:35 +02:00
enix-renovate[bot] 22a72e6239 chore: update go toolchain to v1.26.5 2026-08-04 15:26:54 +02:00
enix-renovate[bot] 02bb0990d1 security: update go toolchain to v1.26.5 [security] 2026-08-04 15:26:00 +02:00
enix-renovate[bot] b6f58e69a0 fix: update dagger sdk + engine 2026-06-30 18:44:37 +02:00
enix-renovate[bot] 0347819cbb fix: update go modules (patch) 2026-06-30 18:44:08 +02:00
enix-renovate[bot] 766365e907 chore: update renovate docker tag to v43.249.2 2026-06-30 18:43:18 +02:00
enix-renovate[bot] bd9778e4ce chore: update trivy docker tag to v0.72.0 2026-06-30 18:42:12 +02:00
enix-renovate[bot] 9453000f47 chore: update alpine docker tag to v3.24.1 2026-06-30 18:41:17 +02:00
enix-renovate[bot] c650c98cfe chore: update helm docker tag to v4.2.2 2026-06-30 18:15:20 +02:00
enix-renovate[bot] c35c7c9005 chore: update trivy docker tag to v0.71.2 2026-06-30 18:14:59 +02:00
enix-renovate[bot] 64a0b33733 chore: update golang toolchain 2026-06-30 18:01:02 +02:00
Thibault VINCENT 1266ec8b74 ci(security): scan secrets via gitleaks CLI in Dagger, not gitleaks-action 2026-06-16 17:49:18 +02:00
Thibault VINCENT b0fb9cee31 bump(go): upgrade dependencies 2026-06-15 17:30:35 +02:00
Thibault VINCENT b0df976080 feat(container): bump Alpine base image to 3.24.0 2026-06-15 17:30:35 +02:00
Thibault VINCENT a6d321f188 ci: bump renovate version 2026-06-15 17:30:35 +02:00
enix-renovate[bot] 56d52a5088 fix: update go modules (patch) 2026-06-15 17:10:20 +02:00
enix-renovate[bot] 2f0311a354 chore: update trivy docker tag to v0.71.1 2026-06-15 17:02:14 +02:00
enix-renovate[bot] 5c16c3e611 security: update go toolchain to v1.26.4 [security] 2026-06-15 16:56:45 +02:00
enix-renovate[bot] f3e4b78e47 chore: update trivy docker tag to v0.71.0 2026-06-15 16:55:44 +02:00
enix-renovate[bot] e08da567af chore: update golang toolchain to v1.26.4 2026-06-15 16:55:20 +02:00
enix-renovate[bot] 0dc0d9d976 chore: update helm docker tag to v4.2.1 2026-06-15 16:54:59 +02:00
Thibault VINCENT d73f3c0c76 feat(chart): per-alert expr and for overrides + render ratchet
Two new value maps under `prometheusRules`:

- `alertExprOverrides` — alertName -> custom Prometheus expression
  that replaces the default `expr:`. Closes #253: multi-cluster setups
  can inject `max by (cluster, …)` aggregations or label filters
  without having to disableBuiltinAlertGroup and reconstruct everything.
- `alertForOverrides` — alertName -> `for:` duration that replaces
  the default. Schema-validated against Prometheus's duration syntax.

Both maps key on bare alert names (no `rulePrefix`). Overrides are
taken whole — no merge with the default. Single-line and multi-line
strings both render correctly: the template now emits each `expr:`
via `| quote` which wraps in a YAML double-quoted scalar (newlines
serialise to \n; Prometheus parses the resulting string identically
to the multi-line form).

Test ratchets added alongside:

- test/schema/valid/prometheusrules-alert-overrides.yaml — valid case
  covering both maps, with a multi-line expr to exercise the quoting
  path.
- test/schema/invalid/prometheusrules-alertforoverrides-bad-duration
  — paired with .expect.txt, ensures the duration regex rejects
  natural-language inputs ("30 minutes").
- test/render/prometheusrules-default-alerts.{yaml,expect-pass.txt} —
  new ratchet under the existing TestHelmRender machinery (extended
  to support "positive substring" checks via .expect-pass.txt). Locks
  in the exact 13 alert names the chart ships by default: any rename
  or accidental removal breaks the test at PR time.

Docs:

- chart/README.md.gotmpl alert table refreshed — was still on the v3
  layout (X509ExporterReadErrors + 3 cert alerts). Now lists all 13.
- values.yaml gets the two new map keys with descriptions and
  commented examples.
2026-05-25 19:18:58 +02:00
enix-renovate[bot] 50ee4ab72f security: update module golang.org/x/net to v0.55.0 [security] 2026-05-25 11:33:15 +02:00
enix-renovate[bot] d04b6fb4ad chore: update renovate docker tag to v43.195.4 2026-05-25 11:26:50 +02:00
enix-renovate[bot] 6eee8cc597 chore: update renovate docker tag to v43.182.2 2026-05-18 11:13:51 +02:00
Thibault VINCENT b4d9c109cb bump(dagger): upgrade go dep + renovate 2026-05-15 15:41:05 +02:00
Thibault VINCENT 33fa779161 chore: bump renovate version 2026-05-13 21:49:51 +02:00