feat(helm): update chart loki to 6.52.0

[renovate]

This PR contains the following updates:

Package	Update	Change
loki (source)	minor	6.28.0 → 6.52.0

---

Release Notes

grafana/helm-charts (loki)

v6.52.0

The leading tool for querying and visualizing time series and metrics.

v6.51.0

The leading tool for querying and visualizing time series and metrics.

v6.50.0

The leading tool for querying and visualizing time series and metrics.

v6.49.0

The leading tool for querying and visualizing time series and metrics.

v6.48.0

The leading tool for querying and visualizing time series and metrics.

v6.46.0

Helm chart for Grafana Loki and Grafana Enterprise Logs supporting monolithic, simple scalable, and microservices modes.

Source commit: grafana/loki@c47d189

Tag on source: https://github.com/grafana/loki/releases/tag/helm-loki-6.46.0

v6.45.2

The leading tool for querying and visualizing time series and metrics.

v6.45.1

The leading tool for querying and visualizing time series and metrics.

v6.45.0

The leading tool for querying and visualizing time series and metrics.

v6.44.0

The leading tool for querying and visualizing time series and metrics.

v6.43.0

The leading tool for querying and visualizing time series and metrics.

v6.42.0

The leading tool for querying and visualizing time series and metrics.

v6.41.1

Helm chart for Grafana Loki and Grafana Enterprise Logs supporting monolithic, simple scalable, and microservices modes.

Source commit: grafana/loki@bff985e

Tag on source: https://github.com/grafana/loki/releases/tag/helm-loki-6.41.1

v6.41.0

The leading tool for querying and visualizing time series and metrics.

v6.40.0

The leading tool for querying and visualizing time series and metrics.

v6.39.0

The leading tool for querying and visualizing time series and metrics.

v6.38.0

The leading tool for querying and visualizing time series and metrics.

v6.37.0

The leading tool for querying and visualizing time series and metrics.

v6.36.1

The leading tool for querying and visualizing time series and metrics.

v6.36.0

Helm chart for Grafana Loki and Grafana Enterprise Logs supporting monolithic, simple scalable, and microservices modes.

Source commit: grafana/loki@9dad1cc

Tag on source: https://github.com/grafana/loki/releases/tag/helm-loki-6.36.0

v6.35.1

Helm chart for Grafana Loki and Grafana Enterprise Logs supporting monolithic, simple scalable, and microservices modes.

Source commit: grafana/loki@e343238

Tag on source: https://github.com/grafana/loki/releases/tag/helm-loki-6.35.1

v6.35.0

The leading tool for querying and visualizing time series and metrics.

v6.34.0

The leading tool for querying and visualizing time series and metrics.

v6.33.0

The leading tool for querying and visualizing time series and metrics.

v6.32.0

The leading tool for querying and visualizing time series and metrics.

v6.31.0

The leading tool for querying and visualizing time series and metrics.

v6.30.1

The leading tool for querying and visualizing time series and metrics.

v6.30.0

The leading tool for querying and visualizing time series and metrics.

v6.29.0

The leading tool for querying and visualizing time series and metrics.

---

Configuration

📅 Schedule: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

--- kubernetes/apps/observability/loki/app Kustomization: flux-system/loki HelmRelease: observability/loki

+++ kubernetes/apps/observability/loki/app Kustomization: flux-system/loki HelmRelease: observability/loki

@@ -14,13 +14,13 @@

       chart: loki
       interval: 30m
       sourceRef:
         kind: HelmRepository
         name: grafana
         namespace: flux-system
-      version: 6.28.0
+      version: 6.52.0
   dependsOn:
   - name: longhorn
     namespace: storage
   interval: 30m
   timeout: 15m
   values:

[github-actions]

--- HelmRelease: observability/loki ConfigMap: observability/loki

+++ HelmRelease: observability/loki ConfigMap: observability/loki

@@ -19,13 +19,13 @@

       enabled: false
     bloom_gateway:
       client:
         addresses: ""
       enabled: false
     common:
-      compactor_address: 'http://loki:3100'
+      compactor_grpc_address: 'loki.observability.svc.cluster.local:9095'
       path_prefix: /var/loki
       replication_factor: 1
       storage:
         filesystem:
           chunks_directory: /var/loki/chunks
           rules_directory: /var/loki/rules
@@ -49,13 +49,13 @@

       reject_old_samples_max_age: 168h
       retention_period: 7d
       split_queries_by_interval: 15m
       volume_enabled: true
     memberlist:
       join_members:
-      - loki-memberlist
+      - loki-memberlist.observability.svc.cluster.local
     pattern_ingester:
       enabled: false
     query_range:
       align_queries_with_step: true
     ruler:
       storage:
@@ -89,9 +89,10 @@

         at: 250ms
         max_per_second: 20
         up_to: 3
       tsdb_shipper:
         index_gateway_client:
           server_address: ""
+      use_thanos_objstore: false
     tracing:
       enabled: false
 
--- HelmRelease: observability/loki ConfigMap: observability/loki-gateway

+++ HelmRelease: observability/loki ConfigMap: observability/loki-gateway

@@ -17,50 +17,63 @@

     \n  client_max_body_size  4M;\n\n  proxy_read_timeout    600; ## 10 minutes\n\
     \  proxy_send_timeout    600;\n  proxy_connect_timeout 600;\n\n  proxy_http_version\
     \    1.1;\n\n  default_type application/octet-stream;\n  log_format   main '$remote_addr\
     \ - $remote_user [$time_local]  $status '\n        '\"$request\" $body_bytes_sent\
     \ \"$http_referer\" '\n        '\"$http_user_agent\" \"$http_x_forwarded_for\"\
     ';\n  access_log   /dev/stderr  main;\n\n  sendfile     on;\n  tcp_nopush   on;\n\
-    \  resolver kube-dns.kube-system.svc.cluster.local.;\n  \n\n  server {\n    listen\
-    \             8080;\n    listen             [::]:8080;\n\n    location = / {\n\
-    \      return 200 'OK';\n      auth_basic off;\n    }\n\n    ########################################################\n\
-    \    # Configure backend targets\n    location ^~ /ui {\n      proxy_pass    \
-    \   http://loki.observability.svc.cluster.local:3100$request_uri;\n    }\n\n \
-    \   # Distributor\n    location = /api/prom/push {\n      proxy_pass       http://loki.observability.svc.cluster.local:3100$request_uri;\n\
-    \    }\n    location = /loki/api/v1/push {\n      proxy_pass       http://loki.observability.svc.cluster.local:3100$request_uri;\n\
-    \    }\n    location = /distributor/ring {\n      proxy_pass       http://loki.observability.svc.cluster.local:3100$request_uri;\n\
-    \    }\n    location = /otlp/v1/logs {\n      proxy_pass       http://loki.observability.svc.cluster.local:3100$request_uri;\n\
-    \    }\n\n    # Ingester\n    location = /flush {\n      proxy_pass       http://loki.observability.svc.cluster.local:3100$request_uri;\n\
-    \    }\n    location ^~ /ingester/ {\n      proxy_pass       http://loki.observability.svc.cluster.local:3100$request_uri;\n\
-    \    }\n    location = /ingester {\n      internal;        # to suppress 301\n\
-    \    }\n\n    # Ring\n    location = /ring {\n      proxy_pass       http://loki.observability.svc.cluster.local:3100$request_uri;\n\
-    \    }\n\n    # MemberListKV\n    location = /memberlist {\n      proxy_pass \
+    \  resolver kube-dns.kube-system.svc.cluster.local.;\n\n  # if the X-Query-Tags\
+    \ header is empty, set a noop= without a value as empty values are not logged\n\
+    \  map $http_x_query_tags $query_tags {\n    \"\"        \"noop=\";          \
+    \  # When header is empty, set noop=\n    default   $http_x_query_tags; # Otherwise,\
+    \ preserve the original value\n  }\n\n  server {\n    listen             8080;\n\
+    \    listen             [::]:8080;\n\n    location = / {\n      \n      return\
+    \ 200 'OK';\n      auth_basic off;\n    }\n\n    ########################################################\n\
+    \    # Configure backend targets\n    location ^~ /ui {\n      \n      proxy_pass\
+    \       http://loki.observability.svc.cluster.local:3100$request_uri;\n    }\n\
+    \n    # Distributor\n    location = /api/prom/push {\n      \n      proxy_pass\
+    \       http://loki.observability.svc.cluster.local:3100$request_uri;\n    }\n\
+    \    location = /loki/api/v1/push {\n      \n      proxy_pass       http://loki.observability.svc.cluster.local:3100$request_uri;\n\
+    \    }\n    location = /distributor/ring {\n      \n      proxy_pass       http://loki.observability.svc.cluster.local:3100$request_uri;\n\
+    \    }\n    location = /otlp/v1/logs {\n      \n      proxy_pass       http://loki.observability.svc.cluster.local:3100$request_uri;\n\
+    \    }\n\n    # Ingester\n    location = /flush {\n      \n      proxy_pass  \
+    \     http://loki.observability.svc.cluster.local:3100$request_uri;\n    }\n \
+    \   location ^~ /ingester/ {\n      \n      proxy_pass       http://loki.observability.svc.cluster.local:3100$request_uri;\n\
+    \    }\n    location = /ingester {\n      \n      internal;        # to suppress\
+    \ 301\n    }\n\n    # Ring\n    location = /ring {\n      \n      proxy_pass \
     \      http://loki.observability.svc.cluster.local:3100$request_uri;\n    }\n\n\
-    \    # Ruler\n    location = /ruler/ring {\n      proxy_pass       http://loki.observability.svc.cluster.local:3100$request_uri;\n\
-    \    }\n    location = /api/prom/rules {\n      proxy_pass       http://loki.observability.svc.cluster.local:3100$request_uri;\n\
-    \    }\n    location ^~ /api/prom/rules/ {\n      proxy_pass       http://loki.observability.svc.cluster.local:3100$request_uri;\n\
-    \    }\n    location = /loki/api/v1/rules {\n      proxy_pass       http://loki.observability.svc.cluster.local:3100$request_uri;\n\
-    \    }\n    location ^~ /loki/api/v1/rules/ {\n      proxy_pass       http://loki.observability.svc.cluster.local:3100$request_uri;\n\
-    \    }\n    location = /prometheus/api/v1/alerts {\n      proxy_pass       http://loki.observability.svc.cluster.local:3100$request_uri;\n\
-    \    }\n    location = /prometheus/api/v1/rules {\n      proxy_pass       http://loki.observability.svc.cluster.local:3100$request_uri;\n\
-    \    }\n\n    # Compactor\n    location = /compactor/ring {\n      proxy_pass\
-    \       http://loki.observability.svc.cluster.local:3100$request_uri;\n    }\n\
-    \    location = /loki/api/v1/delete {\n      proxy_pass       http://loki.observability.svc.cluster.local:3100$request_uri;\n\
-    \    }\n    location = /loki/api/v1/cache/generation_numbers {\n      proxy_pass\
-    \       http://loki.observability.svc.cluster.local:3100$request_uri;\n    }\n\
-    \n    # IndexGateway\n    location = /indexgateway/ring {\n      proxy_pass  \
+    \    # MemberListKV\n    location = /memberlist {\n      \n      proxy_pass  \
     \     http://loki.observability.svc.cluster.local:3100$request_uri;\n    }\n\n\
-    \    # QueryScheduler\n    location = /scheduler/ring {\n      proxy_pass    \
-    \   http://loki.observability.svc.cluster.local:3100$request_uri;\n    }\n\n \
-    \   # Config\n    location = /config {\n      proxy_pass       http://loki.observability.svc.cluster.local:3100$request_uri;\n\
-    \    }\n\n\n    # QueryFrontend, Querier\n    location = /api/prom/tail {\n  \
+    \    # Ruler\n    location = /ruler/ring {\n      \n      proxy_pass       http://loki.observability.svc.cluster.local:3100$request_uri;\n\
+    \    }\n    location = /api/prom/rules {\n      \n      proxy_pass       http://loki.observability.svc.cluster.local:3100$request_uri;\n\
+    \    }\n    location ^~ /api/prom/rules/ {\n      \n      proxy_pass       http://loki.observability.svc.cluster.local:3100$request_uri;\n\
+    \    }\n    location = /loki/api/v1/rules {\n      \n      proxy_pass       http://loki.observability.svc.cluster.local:3100$request_uri;\n\
+    \    }\n    location ^~ /loki/api/v1/rules/ {\n      \n      proxy_pass      \
+    \ http://loki.observability.svc.cluster.local:3100$request_uri;\n    }\n    location\
+    \ = /prometheus/api/v1/alerts {\n      \n      proxy_pass       http://loki.observability.svc.cluster.local:3100$request_uri;\n\
+    \    }\n    location = /prometheus/api/v1/rules {\n      \n      proxy_pass  \
+    \     http://loki.observability.svc.cluster.local:3100$request_uri;\n    }\n\n\
+    \    # Compactor\n    location = /compactor/ring {\n      \n      proxy_pass \
+    \      http://loki.observability.svc.cluster.local:3100$request_uri;\n    }\n\
+    \    location = /loki/api/v1/delete {\n      \n      proxy_pass       http://loki.observability.svc.cluster.local:3100$request_uri;\n\
+    \    }\n    location = /loki/api/v1/cache/generation_numbers {\n      \n     \
+    \ proxy_pass       http://loki.observability.svc.cluster.local:3100$request_uri;\n\
+    \    }\n\n    # IndexGateway\n    location = /indexgateway/ring {\n      \n  \
     \    proxy_pass       http://loki.observability.svc.cluster.local:3100$request_uri;\n\
-    \      proxy_set_header Upgrade $http_upgrade;\n      proxy_set_header Connection\
-    \ \"upgrade\";\n    }\n    location = /loki/api/v1/tail {\n      proxy_pass  \
-    \     http://loki.observability.svc.cluster.local:3100$request_uri;\n      proxy_set_header\
+    \    }\n\n    # QueryScheduler\n    location = /scheduler/ring {\n      \n   \
+    \   proxy_pass       http://loki.observability.svc.cluster.local:3100$request_uri;\n\
+    \    }\n\n    # Config\n    location = /config {\n      \n      proxy_pass   \
+    \    http://loki.observability.svc.cluster.local:3100$request_uri;\n    }\n\n\n\
+    \    # QueryFrontend, Querier\n    location = /api/prom/tail {\n      proxy_set_header\
     \ Upgrade $http_upgrade;\n      proxy_set_header Connection \"upgrade\";\n   \
-    \ }\n    location ^~ /api/prom/ {\n      proxy_pass       http://loki.observability.svc.cluster.local:3100$request_uri;\n\
-    \    }\n    location = /api/prom {\n      internal;        # to suppress 301\n\
-    \    }\n    location ^~ /loki/api/v1/ {\n      proxy_pass       http://loki.observability.svc.cluster.local:3100$request_uri;\n\
-    \    }\n    location = /loki/api/v1 {\n      internal;        # to suppress 301\n\
-    \    }\n  }\n}\n"
+    \   \n      proxy_pass       http://loki.observability.svc.cluster.local:3100$request_uri;\n\
+    \    }\n    location = /loki/api/v1/tail {\n      proxy_set_header Upgrade $http_upgrade;\n\
+    \      proxy_set_header Connection \"upgrade\";\n      \n      proxy_pass    \
+    \   http://loki.observability.svc.cluster.local:3100$request_uri;\n    }\n   \
+    \ location ^~ /api/prom/ {\n      \n      proxy_pass       http://loki.observability.svc.cluster.local:3100$request_uri;\n\
+    \    }\n    location = /api/prom {\n      \n      internal;        # to suppress\
+    \ 301\n    }\n    location ^~ /loki/api/v1/ {\n      # pass custom headers set\
+    \ by Grafana as X-Query-Tags which are logged as key/value pairs in metrics.go\
[Diff truncated by flux-local]
--- HelmRelease: observability/loki Deployment: observability/loki-gateway

+++ HelmRelease: observability/loki Deployment: observability/loki-gateway

@@ -32,13 +32,13 @@

         runAsGroup: 101
         runAsNonRoot: true
         runAsUser: 101
       terminationGracePeriodSeconds: 30
       containers:
       - name: nginx
-        image: docker.io/nginxinc/nginx-unprivileged:1.27-alpine
+        image: docker.io/nginxinc/nginx-unprivileged:1.29-alpine
         imagePullPolicy: IfNotPresent
         ports:
         - name: http-metrics
           containerPort: 8080
           protocol: TCP
         readinessProbe:
@@ -64,12 +64,14 @@

       affinity:
         podAntiAffinity:
           requiredDuringSchedulingIgnoredDuringExecution:
           - labelSelector:
               matchLabels:
                 app.kubernetes.io/component: gateway
+                app.kubernetes.io/instance: loki
+                app.kubernetes.io/name: loki
             topologyKey: kubernetes.io/hostname
       volumes:
       - name: config
         configMap:
           name: loki-gateway
       - name: tmp
--- HelmRelease: observability/loki StatefulSet: observability/loki

+++ HelmRelease: observability/loki StatefulSet: observability/loki

@@ -24,30 +24,77 @@

     matchLabels:
       app.kubernetes.io/name: loki
       app.kubernetes.io/instance: loki
       app.kubernetes.io/component: single-binary
   template:
     metadata:
+      annotations:
+        storage/size: 30Gi
+        kubectl.kubernetes.io/default-container: loki
       labels:
         app.kubernetes.io/name: loki
         app.kubernetes.io/instance: loki
         app.kubernetes.io/component: single-binary
         app.kubernetes.io/part-of: memberlist
     spec:
       serviceAccountName: loki
       automountServiceAccountToken: true
       enableServiceLinks: true
       securityContext:
         fsGroup: 10001
+        fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 10001
         runAsNonRoot: true
         runAsUser: 10001
       terminationGracePeriodSeconds: 30
       containers:
+      - name: loki
+        image: docker.io/grafana/loki:3.6.4
+        imagePullPolicy: IfNotPresent
+        args:
+        - -config.file=/etc/loki/config/config.yaml
+        - -target=all
+        ports:
+        - name: http-metrics
+          containerPort: 3100
+          protocol: TCP
+        - name: grpc
+          containerPort: 9095
+          protocol: TCP
+        - name: http-memberlist
+          containerPort: 7946
+          protocol: TCP
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
+          readOnlyRootFilesystem: true
+        readinessProbe:
+          failureThreshold: 3
+          httpGet:
+            path: /ready
+            port: http-metrics
+          initialDelaySeconds: 15
+          periodSeconds: 10
+          successThreshold: 1
+          timeoutSeconds: 1
+        volumeMounts:
+        - name: tmp
+          mountPath: /tmp
+        - name: config
+          mountPath: /etc/loki/config
+        - name: runtime-config
+          mountPath: /etc/loki/runtime-config
+        - name: storage
+          mountPath: /var/loki
+        - name: sc-rules-volume
+          mountPath: /rules
+        resources: {}
       - name: loki-sc-rules
-        image: ghcr.io/kiwigrid/k8s-sidecar:1.30.1
+        image: ghcr.io/kiwigrid/k8s-sidecar:1.30.9
         imagePullPolicy: IfNotPresent
         env:
         - name: METHOD
           value: WATCH
         - name: LABEL
           value: loki_rule
@@ -69,58 +116,20 @@

             drop:
             - ALL
           readOnlyRootFilesystem: true
         volumeMounts:
         - name: sc-rules-volume
           mountPath: /rules
-      - name: loki
-        image: docker.io/grafana/loki:3.4.2
-        imagePullPolicy: IfNotPresent
-        args:
-        - -config.file=/etc/loki/config/config.yaml
-        - -target=all
-        ports:
-        - name: http-metrics
-          containerPort: 3100
-          protocol: TCP
-        - name: grpc
-          containerPort: 9095
-          protocol: TCP
-        - name: http-memberlist
-          containerPort: 7946
-          protocol: TCP
-        securityContext:
-          allowPrivilegeEscalation: false
-          capabilities:
-            drop:
-            - ALL
-          readOnlyRootFilesystem: true
-        readinessProbe:
-          httpGet:
-            path: /ready
-            port: http-metrics
-          initialDelaySeconds: 30
-          timeoutSeconds: 1
-        volumeMounts:
-        - name: tmp
-          mountPath: /tmp
-        - name: config
-          mountPath: /etc/loki/config
-        - name: runtime-config
-          mountPath: /etc/loki/runtime-config
-        - name: storage
-          mountPath: /var/loki
-        - name: sc-rules-volume
-          mountPath: /rules
-        resources: {}
       affinity:
         podAntiAffinity:
           requiredDuringSchedulingIgnoredDuringExecution:
           - labelSelector:
               matchLabels:
                 app.kubernetes.io/component: single-binary
+                app.kubernetes.io/instance: loki
+                app.kubernetes.io/name: loki
             topologyKey: kubernetes.io/hostname
       volumes:
       - name: tmp
         emptyDir: {}
       - name: config
         configMap: