chore(deps): update helm release vault to v0.28.0

[dare-renovate]

This PR contains the following updates:

Package	Update	Change
vault (source)	minor	0.24.1 -> 0.28.0

---

Release Notes

hashicorp/vault-helm (vault)

v0.28.0

Compare Source

Changes:

• Default vault version updated to 1.16.1
• Default vault-k8s version updated to 1.4.1
• Default vault-csi-provider version updated to 1.4.2
• Tested with Kubernetes versions 1.25-1.29

Features:

• server: Add annotation on config change GH-1001

Bugs:

• injector: add missing get nodes permission to ClusterRole GH-1005

v0.27.0

Compare Source

Changes:

• Default vault version updated to 1.15.2

Features:

• server: Support setting persistentVolumeClaimRetentionPolicy on the StatefulSet GH-965
• server: Support setting labels on PVCs GH-969
• server: Support setting ingress rules for networkPolicy GH-877

Improvements:

• Support exec in the server liveness probe GH-971

v0.26.1

Compare Source

Bugs:

• Fix templating of server.ha.replicas when set via override file. The 0.26.0 chart would ignore server.ha.replicas and always deploy 3 server replicas when server.ha.enabled=true unless overridden by command line when issuing the helm command: --set server.ha.replicas=<some_number>. Fixed in GH-961

v0.26.0

Compare Source

Changes:

• Default vault version updated to 1.15.1
• Default vault-k8s version updated to 1.3.1
• Default vault-csi-provider version updated to 1.4.1
• Tested with Kubernetes versions 1.24-1.28
• server: OpenShift default readiness probe returns 204 when uninitialized GH-966

Features:

• server: Add support for dual stack clusters GH-833
• server: Support hostAliases for the StatefulSet pods GH-955
• server: Add server.service.active.annotations and server.service.standby.annotations GH-896
• server: Add long-lived service account token option GH-923

Bugs:

• csi: Add namespace field to csi-role and csi-rolebindings. GH-909

Improvements:

• global: Add global.namespace to override the helm installation namespace. GH-909
• server: use vault.fullname in Helm test GH-912
• server: Allow scaling HA replicas to zero GH-943

v0.25.0

Compare Source

Changes:

• Latest Kubernetes version tested is now 1.27
• server: Headless service ignores server.service.publishNotReadyAddresses setting and always sets it as true GH-902
• vault updated to 1.14.0 GH-916
• vault-csi-provider updated to 1.4.0 GH-916

Improvements:

• CSI: Make nodeSelector and affinity configurable for CSI daemonset's pods GH-862
• injector: Add ephemeralLimit and ephemeralRequest as options for configuring Agent's ephemeral storage resources GH-798
• Minimum kubernetes version for chart reverted to 1.20.0 to allow installation on clusters older than the oldest tested version GH-916

Bugs:

• server: Set the default for prometheusRules.rules to an empty list GH-886

---

Configuration

📅 Schedule: Branch creation - "after 10pm,before 5am" in timezone Europe/London, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[dare-renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.