chore(deps): update dependency victoriametrics/operator to v0.67.0

[renovate]

This PR contains the following updates:

Package	Update	Change
VictoriaMetrics/operator	minor	0.62.0 → 0.67.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

VictoriaMetrics/operator (VictoriaMetrics/operator)

v0.67.0

Compare Source

Update note 1: removed 3rd-party config reloaders. Now VMAlert, VMAgent, VMAuth and VMAlertmanager are using only VM config reloader.
Update note 2: removed deprecated VMAgent spec.aPIServerConfig property
Update note 3: removed deprecated VMCluster spec.vmselect.persistentVolume property
Update note 4: VM_CUSTOMCONFIGRELOADERIMAGE is deprecated and will be removed in next releases. Use VM_CONFIG_RELOADER_IMAGE instead.
Update note 5: VMAgent's, VMAuth's, VMAlert's and VMAlertmanager's spec.configReloaderImageTag is deprecated and will be removed in next releases. Use spec.configReloaderImage instead.
Update note 6: VMAgent's spec.vmAgentExternalLabelName is deprecated and will be removed in next releases. Use spec.externalLabelName instead.
Update note 7: VMAuth's spec.unauthorizedUserAccessSpec.url_prefix and spec.unauthorizedUserAccessSpec.url_map are deprecated and will be removed in next releases. Use spec.unauthorizedUserAccessSpec.targetRef instead.

• Dependency: vmoperator: Updated default versions for VM apps to v1.134.0 version

• Dependency: vmoperator: Updated default versions for VL apps to v1.43.1.

• Dependency: vmoperator: Updated default versions for VT apps to v0.7.0 version.

• Dependency: vmoperator: Updated default versions for VMAnomaly to v1.28.5 version

• FEATURE: vmagent: support namespace parameter in attach_metadata section for all scrape configurations. See #​1654.

• FEATURE: vlagent: support logs collection. See #​1501.

• FEATURE: vmoperator: use operator_bad_objects_total metric with object_namespace and crd labels to track invalid objects managed by VMAgent, VMAuth, VMAlert and VMAlertmanager. Old operator_alertmanager_bad_objects_count and operator_vmalert_bad_objects_count are deprecated and will be removed in next releases.

• FEATURE: vmoperator: added HPA support for all cluster CR storage. See #​1678.

• FEATURE: vlagent, vlsingle and vlcluster: support license options. See #​2649.

• FEATURE: vmanomaly: add support of spec.server configuration.

• FEATURE: vlagent: add collector extraFilter, includePodLabels, includePodAnnotations, includeNodeLabels and includeNodeAnnotations support for more flexible Kubernetes logs by metadata selection.

• FEATURE: vlagent: use a single volume for all VLAgent data by default instead of separate volumes/paths for checkpoints and remote write data.

• FEATURE: vmagent: global sample limit per scrape target is supported via sampleLimit option in scrape config. See #​10168.

• BUGFIX: vmoperator: fixed HPA cleanup logic for all cluster resources, before it was constantly recreated. Bug introduced in this commit.

• BUGFIX: VMCluster, VLCluster and VTCluster: prevent cluster load balancer secret from infinite reconcile.

• BUGFIX: vmsingle, vlsingle and vtsingle: do not mount emptydir if storage data volume is already present in volumes list. Before it was impossible to mount external PVC without overriding default storageDataPath using spec.extraArgs and without having unneeded emptydir listed among pod volumes. Related issues #​1477.

• BUGFIX: vmoperator: use Service labels instead of selector in VMServiceScrape selector. See #​1709.

• BUGFIX: vmoperator: update Alertmanager dependency to fix config validation for Incident.io. See #​1730.

• BUGFIX: vmoperator: do not add -enterprise suffix to image, if tag contains @ symbol. See #​1723.

• BUGFIX: vmoperator: use 127.0.0.1 instead of localhost in reload and snapshot url for setups without IPV6 enabled.

• BUGFIX: vmscrapeconfig: properly convert prometheus ScrapeConfig's role into VMScrapeConfig. See #​1735.

• BUGFIX: vmagent: make vmagent container default. See #​1740.

• BUGFIX: vmoperator: use 127.0.0.1 instead of localhost in reload url for setups without IPV6 enabled.

• BUGFIX: VLAgent: update strict security mode configuration to work correctly with K8sCollector.

v0.66.1

Compare Source

v0.66.1

Release date: 06 December 2025

SECURITY: upgrade Go builder from Go1.25.4 to Go1.25.5. See the list of issues addressed in Go1.25.5.

• BUGFIX: vmoperator: remove orphaned ServiceAccount and RBAC resources. See #​1665.
• BUGFIX: vmanomaly: properly handle configuration which is missing reader.queries in either configRawYaml or configSecret. Previously, it would lead to panic.
• BUGFIX: vmanomaly: fix configuration parsing when running in UI mode. Previously, configuration required to use preset: ui:version instead of preset: ui.

v0.66.0

Compare Source

v0.66.0

Release date: 03 December 2025

Update note 1: labels and annotations inheritance is removed. It was deprecated in v0.51.0. Consider moving all needed labels and annotations to the spec.managedMetadata fields.

Update node 2: removed VMCluster's status.clusterStatus and VMSingle's status.singleStatus, that were deprecated in v0.51.0.

• Dependency: vmoperator: Updated default versions for VM apps to v1.131.0 version

• Dependency: vmoperator: Updated default versions for VT apps to v0.5.0 version.

• FEATURE: config-reloader: set default config reloader image version equal to current operator version. See #​2562.

• FEATURE: vmagent: do not set promscrape.cluster.membersCount and promscrape.cluster.memberNum flags in ingestOnly mode. See #​1594.

• FEATURE: vmalertmanagerconfig: support incident.io receiver. See #​1637.

• FEATURE: vmauth: Add httproute support for vmauth. See#​1625

• FEATURE: vmauth: allow overriding default path for embedded ingress. See #​1617.

• FEATURE: vmoperator: add VM_ENABLETCP6 variable that runs all operator CRs in IPv6 mode. See #​1581.

• FEATURE: vmuser: introduce spec.managedMetadata for custom labels and annotations that should be attached to a Secret.

• FEATURE: vmuser: introduce query_args parameter that allows to append query arguments for backend url generation

• BUGFIX: converter: properly convert Prometheus ScrapeConfig scrapeInterval into VM ScrapeConfig scrape_interval. Before it was ignored. See #​1645.

• BUGFIX: vmalertmanager: check mute_time_intervals in subroutes: See #​1618.

• BUGFIX: vmoperator: remove incorrect key argument in structured log for when the actual PVC storage size is larger than the currently configured size and properly indicate which is the new and which is the existing size: See PR #​1636 for details.

• BUGFIX: vtcluster: properly print status replicas for insert, select and storage components.

v0.65.0

Compare Source

v0.65.0

Release date: 31 October 2025

• FEATURE: vmauth: added HPA support with spec.hpa field for the VMAuth. See this issue #​1573 for details. Thanks to the @​endesapt

• FEATURE: converter: support ServiceMonitor's ServiceDiscoveryRole.

• BUGFIX: vmoperator: properly set default useVMConfigReloader value. See #​1589.

• BUGFIX: vmoperator: properly check StatefulSet ready status for rollingUpdateStrategy: RollingUpdate. See this issue #​1579 for details.

• BUGFIX: vmpodscrape, vmnodescrape, vmservicescrape, vmscrapeconfig, vmscrapeconfig and vmprobe: use int type instead of uint64 for scrapes seriesLimit and sampleLimit parameters.

v0.64.1

Compare Source

v0.64.1

Release date: 30 October 2025

• BUGFIX: VLCluster: fix -storageNode argument generation for vlinsert. Bug was introduced in ff722eb.

v0.64.0

Compare Source

Update Note 1: This release deprecates 3rd party config-reloader containers - jimmidyson/configmap-reload and quay.io/prometheus-operator/prometheus-config-reloader in favor of own implementation -
victoriametrics/operator:config-reloader.
This change could be reverted by providing env variable VM_USECUSTOMCONFIGRELOADER=false to the operator binary.

• SECURITY: upgrade Go builder from Go1.25.0 to Go1.25.3. See the list of issues addressed in Go1.25.3.

• Dependency: vmoperator: Updated default versions for VL apps to v1.36.1.

• Dependency: vmoperator: Updated default versions for VM apps to v1.128.0 version

• Dependency: vmoperator: Updated default versions for VT apps to v0.4.0 version

• Dependency: vmoperator: Updated default versions for VMAnomaly to v1.26.1 version

• FEATURE: vmanomaly: support ui preset mode, support vlogs reader type. See #​1532.

• FEATURE: vmoperator: change default value of env variable VM_USECUSTOMCONFIGRELOADER to true, which instructs operator to use own config-reloader implementation by default.

• FEATURE: vmoperator: add unhealthyPodEvictionPolicy to the podDisruptionBudget specification. See this issue #​1534 for details.

• FEATURE: vmoperator: add rollingUpdate and updateStrategy fields to VMAuth.spec, VMCluster.spec.requestsLoadBalancer.spec, VLCluster.spec.requestsLoadBalancer.spec and VTCluster.spec.requestsLoadBalancer.spec. See this issue #​1540 for details.

• FEATURE: vmoperator: preserve 3rd party labels on object during reconcile. Previously, operator allowed to keep only managedMetadata.labels. See this issue #​1533. Thanks to the @​lllamnyp

• FEATURE: VLCluster: added spec.vlselect.extraStorageNodes to specify list of additional storage nodes, that are available for select only.

• FEATURE: VTCluster: added spec.vtselect.extraStorageNodes to specify list of additional storage nodes, that are available for select only.

• FEATURE: vmagent: add scrapeClass spec definition and scrapeClassName reference to the VMServiceScrape, VMPodScrape, VMProbe, VMScrapeConfig, VMStaticScrape and VMNodeScrape. See this issue #​1531 for details. Thanks to the @​endesapt.

• BUGFIX: vmoperator: properly generate oauth2 configuration with missing clientID. Previously, it could break whole config generation. See this PR #​1563 for details.

• BUGFIX: vmoperator: fix an issue where the return value from a couple of controllers was always nil. See #​1532 for details.

• BUGFIX: VMCluster: emit warning if vmcluster.spec.vmselect.persistentVolume is set, previously it was emitted for vmcluster.spec.vmselect.storage.

• BUGFIX: vmoperator: Prevent endless Service reconcile loop by correctly track changes to Service.spec.LoadBalancerClass. See this issue #​1550 for details.

v0.63.0

Compare Source

v0.63.0

Release date: 12 Sep 2025

• Dependency: vmoperator: Updated default versions for VM apps to v1.125.0 version

• Dependency: vmoperator: Updated default versions for VL apps to v1.33.0.

• FEATURE: vmuser: add VLSingle, VLAgent,VLCluster/vlinsert,VLCluster/vlselect, VLCluster/vlstorage, VTSingle, VTCluster/vtinsert,VTCluster/vtselect, VTCluster/vtstorage to the targetRef.crd.kind.

• FEATURE: operator: introduce new resources VLSingle and VTCluster. See #​1498 for details.

• FEATURE: vmagent: support stream aggregation ignore_first_sample_interval property. See #​1518.

• FEATURE: vmalert: add mutually exclusive checks for notifier configs in admission webhook validation. See #​1511.

• FEATURE: vmalertmanager: add enforcedNamespaceLabel field to allow changing the top route namespace matcher key for VMAlertmanagerConfig. See #​1480.

• BUGFIX: vmoperator: properly release finalizer on VMAlert delete. See this issue #​1527 for details.

• BUGFIX: vmoperator: properly reconcile Service on value of loadbalancerClass change. Previously it produced error may not change once set. See PR #​1522 for details.

• BUGFIX: vmuser: simplify path based routing for src_paths when using VMCluster/vminsert or VMCluster/vmselect as targetRefs. See this PR #​1519 for details.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.