feat(helm): update volsync ( 0.11.0 → 0.12.1 )

[bot-akira]

This PR contains the following updates:

Package	Update	Change
volsync (source)	minor	0.11.0 -> 0.12.1

---

Release Notes

backube/volsync (volsync)

v0.12.1

Compare Source

Security

• Update golang.org/x/crypto to v0.36.0 for CVE-2025-22869
• Update golang.org/x/oauth2 to v0.28.0 for CVE-2025-22868

v0.12.0

Compare Source

Changed

• imagePullSecrets in helm charts will be copied from volsync controller
  namespace to the mover namespace so mover jobs can use them
• Updated release to build on golang 1.23
• Syncthing updated to v1.29.2
• kube-rbac-proxy image configurable in helm chart values
• mover scripts updated to use sync -f to only sync the target filesystem at
  the end of mover tasks
• Updates the ensure_initialized function in the restic mover script to
  follow restic recommendations

Fixed

• All movers should return error if not able to EnsurePVCFromSrc
• Fix for mover job/service name length too long (>63 chars) if the
  replicationsource or replicationdestination CR name is too long

Security

• kube-rbac-proxy upgraded to 0.18.2

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[bot-akira]

--- kubernetes/apps/volsync-system/volsync/app Kustomization: flux-system/volsync HelmRelease: volsync-system/volsync

+++ kubernetes/apps/volsync-system/volsync/app Kustomization: flux-system/volsync HelmRelease: volsync-system/volsync

@@ -13,13 +13,13 @@

     spec:
       chart: volsync
       sourceRef:
         kind: HelmRepository
         name: backube
         namespace: flux-system
-      version: 0.11.0
+      version: 0.12.1
   dependsOn:
   - name: kyverno
     namespace: kyverno
   - name: snapshot-controller
     namespace: volsync-system
   install:

[bot-akira]

--- HelmRelease: volsync-system/volsync Deployment: volsync-system/volsync

+++ HelmRelease: volsync-system/volsync Deployment: volsync-system/volsync

@@ -36,13 +36,13 @@

         securityContext:
           allowPrivilegeEscalation: false
           capabilities:
             drop:
             - ALL
           readOnlyRootFilesystem: true
-        image: quay.io/brancz/kube-rbac-proxy:v0.18.0
+        image: quay.io/brancz/kube-rbac-proxy:v0.18.2
         args:
         - --secure-listen-address=0.0.0.0:8443
         - --upstream=http://127.0.0.1:8080/
         - --logtostderr=true
         - --tls-min-version=VersionTLS12
         - --v=0
@@ -60,22 +60,27 @@

             memory: 64Mi
       - name: manager
         args:
         - --health-probe-bind-address=:8081
         - --metrics-bind-address=127.0.0.1:8080
         - --leader-elect
-        - --rclone-container-image=quay.io/backube/volsync:0.11.0
-        - --restic-container-image=quay.io/backube/volsync:0.11.0
-        - --rsync-container-image=quay.io/backube/volsync:0.11.0
-        - --rsync-tls-container-image=quay.io/backube/volsync:0.11.0
-        - --syncthing-container-image=quay.io/backube/volsync:0.11.0
+        - --rclone-container-image=quay.io/backube/volsync:0.12.1
+        - --restic-container-image=quay.io/backube/volsync:0.12.1
+        - --rsync-container-image=quay.io/backube/volsync:0.12.1
+        - --rsync-tls-container-image=quay.io/backube/volsync:0.12.1
+        - --syncthing-container-image=quay.io/backube/volsync:0.12.1
         - --scc-name=volsync-privileged-mover
         command:
         - /manager
-        image: quay.io/backube/volsync:0.11.0
+        image: quay.io/backube/volsync:0.12.1
         imagePullPolicy: IfNotPresent
+        env:
+        - name: VOLSYNC_NAMESPACE
+          valueFrom:
+            fieldRef:
+              fieldPath: metadata.namespace
         livenessProbe:
           httpGet:
             path: /healthz
             port: 8081
           initialDelaySeconds: 15
           periodSeconds: 20