chore(deps): update helm release vault to v0.28.1

[public-glueops-renovatebot]

This PR contains the following updates:

Package	Update	Change
vault (source)	minor	0.25.0 -> 0.28.1

---

Release Notes

hashicorp/vault-helm (vault)

v0.28.1

Compare Source

Changes:

• Default vault version updated to 1.17.2
• Default vault-k8s version updated to 1.4.2
• Default vault-csi-provider version updated to 1.4.3
• Tested with Kubernetes versions 1.26-1.30

Improvements:

• Configurable tlsConfig and authorization for Prometheus ServiceMonitor GH-1025
• Remove UPDATE from injector-mutating-webhook GH-783
• Add scope to mutating webhook GH-1037

v0.28.0

Compare Source

Changes:

• Default vault version updated to 1.16.1
• Default vault-k8s version updated to 1.4.1
• Default vault-csi-provider version updated to 1.4.2
• Tested with Kubernetes versions 1.25-1.29

Features:

• server: Add annotation on config change GH-1001

Bugs:

• injector: add missing get nodes permission to ClusterRole GH-1005

v0.27.0

Compare Source

Changes:

• Default vault version updated to 1.15.2

Features:

• server: Support setting persistentVolumeClaimRetentionPolicy on the StatefulSet GH-965
• server: Support setting labels on PVCs GH-969
• server: Support setting ingress rules for networkPolicy GH-877

Improvements:

• Support exec in the server liveness probe GH-971

v0.26.1

Compare Source

Bugs:

• Fix templating of server.ha.replicas when set via override file. The 0.26.0 chart would ignore server.ha.replicas and always deploy 3 server replicas when server.ha.enabled=true unless overridden by command line when issuing the helm command: --set server.ha.replicas=<some_number>. Fixed in GH-961

v0.26.0

Compare Source

Changes:

• Default vault version updated to 1.15.1
• Default vault-k8s version updated to 1.3.1
• Default vault-csi-provider version updated to 1.4.1
• Tested with Kubernetes versions 1.24-1.28
• server: OpenShift default readiness probe returns 204 when uninitialized GH-966

Features:

• server: Add support for dual stack clusters GH-833
• server: Support hostAliases for the StatefulSet pods GH-955
• server: Add server.service.active.annotations and server.service.standby.annotations GH-896
• server: Add long-lived service account token option GH-923

Bugs:

• csi: Add namespace field to csi-role and csi-rolebindings. GH-909

Improvements:

• global: Add global.namespace to override the helm installation namespace. GH-909
• server: use vault.fullname in Helm test GH-912
• server: Allow scaling HA replicas to zero GH-943

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud