Update certmanager chart dependency version (signalfx#1140)

Co-authored-by: jvoravong <[email protected]>

.chloggen/update-certmanager.yaml

@@ -0,0 +1,12 @@
+# One of 'breaking', 'deprecation', 'new_component', 'enhancement', 'bug_fix'
+change_type: enhancement
+# The name of the component, or a single word describing the area of concern, (e.g. agent, clusterReceiver, gateway, operator, chart, other)
+component: operator
+# A brief description of the change. Surround your text with quotes ("") if it needs to start with a backtick (`).
+note: Bump certmanager to v1.14.1 in helm-charts/splunk-otel-collector/Chart.yaml
+# One or more tracking issues related to the change
+issues: [1140]
+# (Optional) One or more lines of additional information to render under the primary note.
+# These lines will be padded with 2 spaces and then inserted directly into the document.
+# Use pipe (|) for multiline entries.
+subtext:

examples/enable-operator-and-auto-instrumentation/rendered_manifests/certmanager/cainjector-deployment.yaml

@@ -10,11 +10,12 @@ metadata:
     app.kubernetes.io/name: cainjector
     app.kubernetes.io/instance: default
     app.kubernetes.io/component: "cainjector"
-    app.kubernetes.io/version: "v1.13.3"
+    app.kubernetes.io/version: "v1.14.1"
     app.kubernetes.io/managed-by: Helm
-    helm.sh/chart: certmanager-v1.13.3
+    helm.sh/chart: certmanager-v1.14.1
 spec:
   replicas: 1
+  revisionHistoryLimit: 
   selector:
     matchLabels:
       app.kubernetes.io/name: cainjector
@@ -27,9 +28,9 @@ spec:
         app.kubernetes.io/name: cainjector
         app.kubernetes.io/instance: default
         app.kubernetes.io/component: "cainjector"
-        app.kubernetes.io/version: "v1.13.3"
+        app.kubernetes.io/version: "v1.14.1"
         app.kubernetes.io/managed-by: Helm
-        helm.sh/chart: certmanager-v1.13.3
+        helm.sh/chart: certmanager-v1.14.1
     spec:
       serviceAccountName: default-certmanager-cainjector
       enableServiceLinks: false
@@ -39,7 +40,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: certmanager-cainjector
-          image: "quay.io/jetstack/cert-manager-cainjector:v1.13.3"
+          image: "quay.io/jetstack/cert-manager-cainjector:v1.14.1"
           imagePullPolicy: IfNotPresent
           args:
           - --v=2
@@ -54,5 +55,6 @@ spec:
             capabilities:
               drop:
               - ALL
+            readOnlyRootFilesystem: true
       nodeSelector:
         kubernetes.io/os: linux

examples/enable-operator-and-auto-instrumentation/rendered_manifests/certmanager/cainjector-rbac.yaml

@@ -9,9 +9,9 @@ metadata:
     app.kubernetes.io/name: cainjector
     app.kubernetes.io/instance: default
     app.kubernetes.io/component: "cainjector"
-    app.kubernetes.io/version: "v1.13.3"
+    app.kubernetes.io/version: "v1.14.1"
     app.kubernetes.io/managed-by: Helm
-    helm.sh/chart: certmanager-v1.13.3
+    helm.sh/chart: certmanager-v1.14.1
 rules:
   - apiGroups: ["cert-manager.io"]
     resources: ["certificates"]
@@ -42,9 +42,9 @@ metadata:
     app.kubernetes.io/name: cainjector
     app.kubernetes.io/instance: default
     app.kubernetes.io/component: "cainjector"
-    app.kubernetes.io/version: "v1.13.3"
+    app.kubernetes.io/version: "v1.14.1"
     app.kubernetes.io/managed-by: Helm
-    helm.sh/chart: certmanager-v1.13.3
+    helm.sh/chart: certmanager-v1.14.1
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole
@@ -66,9 +66,9 @@ metadata:
     app.kubernetes.io/name: cainjector
     app.kubernetes.io/instance: default
     app.kubernetes.io/component: "cainjector"
-    app.kubernetes.io/version: "v1.13.3"
+    app.kubernetes.io/version: "v1.14.1"
     app.kubernetes.io/managed-by: Helm
-    helm.sh/chart: certmanager-v1.13.3
+    helm.sh/chart: certmanager-v1.14.1
 rules:
   # Used for leader election by the controller
   # cert-manager-cainjector-leader-election is used by the CertificateBased injector controller
@@ -96,9 +96,9 @@ metadata:
     app.kubernetes.io/name: cainjector
     app.kubernetes.io/instance: default
     app.kubernetes.io/component: "cainjector"
-    app.kubernetes.io/version: "v1.13.3"
+    app.kubernetes.io/version: "v1.14.1"
     app.kubernetes.io/managed-by: Helm
-    helm.sh/chart: certmanager-v1.13.3
+    helm.sh/chart: certmanager-v1.14.1
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: Role

examples/enable-operator-and-auto-instrumentation/rendered_manifests/certmanager/cainjector-serviceaccount.yaml

@@ -11,6 +11,6 @@ metadata:
     app.kubernetes.io/name: cainjector
     app.kubernetes.io/instance: default
     app.kubernetes.io/component: "cainjector"
-    app.kubernetes.io/version: "v1.13.3"
+    app.kubernetes.io/version: "v1.14.1"
     app.kubernetes.io/managed-by: Helm
-    helm.sh/chart: certmanager-v1.13.3
+    helm.sh/chart: certmanager-v1.14.1

examples/enable-operator-and-auto-instrumentation/rendered_manifests/certmanager/deployment.yaml

@@ -10,11 +10,12 @@ metadata:
     app.kubernetes.io/name: certmanager
     app.kubernetes.io/instance: default
     app.kubernetes.io/component: "controller"
-    app.kubernetes.io/version: "v1.13.3"
+    app.kubernetes.io/version: "v1.14.1"
     app.kubernetes.io/managed-by: Helm
-    helm.sh/chart: certmanager-v1.13.3
+    helm.sh/chart: certmanager-v1.14.1
 spec:
   replicas: 1
+  revisionHistoryLimit: 
   selector:
     matchLabels:
       app.kubernetes.io/name: certmanager
@@ -27,9 +28,9 @@ spec:
         app.kubernetes.io/name: certmanager
         app.kubernetes.io/instance: default
         app.kubernetes.io/component: "controller"
-        app.kubernetes.io/version: "v1.13.3"
+        app.kubernetes.io/version: "v1.14.1"
         app.kubernetes.io/managed-by: Helm
-        helm.sh/chart: certmanager-v1.13.3
+        helm.sh/chart: certmanager-v1.14.1
       annotations:
         prometheus.io/path: "/metrics"
         prometheus.io/scrape: 'true'
@@ -43,13 +44,13 @@ spec:
           type: RuntimeDefault
       containers:
         - name: certmanager-controller
-          image: "quay.io/jetstack/cert-manager-controller:v1.13.3"
+          image: "quay.io/jetstack/cert-manager-controller:v1.14.1"
           imagePullPolicy: IfNotPresent
           args:
           - --v=2
           - --cluster-resource-namespace=$(POD_NAMESPACE)
           - --leader-election-namespace=kube-system
-          - --acme-http01-solver-image=quay.io/jetstack/cert-manager-acmesolver:v1.13.3
+          - --acme-http01-solver-image=quay.io/jetstack/cert-manager-acmesolver:v1.14.1
           - --max-concurrent-challenges=60
           ports:
           - containerPort: 9402
@@ -63,10 +64,24 @@ spec:
             capabilities:
               drop:
               - ALL
+            readOnlyRootFilesystem: true
           env:
           - name: POD_NAMESPACE
             valueFrom:
               fieldRef:
                 fieldPath: metadata.namespace
+          # LivenessProbe settings are based on those used for the Kubernetes
+          # controller-manager. See:
+          # https://github.com/kubernetes/kubernetes/blob/806b30170c61a38fedd54cc9ede4cd6275a1ad3b/cmd/kubeadm/app/util/staticpod/utils.go#L241-L245
+          livenessProbe:
+            httpGet:
+              port: http-healthz
+              path: /livez
+              scheme: HTTP
+            initialDelaySeconds: 10
+            periodSeconds: 10
+            timeoutSeconds: 15
+            successThreshold: 1
+            failureThreshold: 8
       nodeSelector:
         kubernetes.io/os: linux