fix(helm): update chart kubelet-csr-approver to 1.2.13

[renovate]

This PR contains the following updates:

Package	Update	Change
kubelet-csr-approver	patch	1.2.6 → 1.2.13

---

Release Notes

postfinance/kubelet-csr-approver (kubelet-csr-approver)

v1.2.13

Compare Source

Full Changelog: postfinance/kubelet-csr-approver@v1.2.12...v1.2.13

🚀 Features

• Add API capability check for ServiceMonitor - (1bc29bc)

⚙️ Miscellaneous Tasks

• Update changelog - (fbe13a2)
• Change default capabilities to upper case ALL - (6939f7b)

v1.2.12

Compare Source

Full Changelog: postfinance/kubelet-csr-approver@v1.2.11...v1.2.12

🐛 Bug Fixes

• Update Go version in publish workflow - (ee6d86d)
• Upgrade Go version from 1.24 to 1.25 in workflows - (6b9467a)

⚙️ Miscellaneous Tasks

• Update changelog - (2037fcc)

Build

• (deps) Bump actions/setup-go from 5 to 6 - (f181281)
• (deps) Bump actions/setup-python from 5 to 6 - (941f1b9)
• (deps) Bump sigs.k8s.io/controller-runtime from 0.22.0 to 0.22.3 - (0bd131b)

v1.2.11

Compare Source

Full Changelog: postfinance/kubelet-csr-approver@v1.2.11...v1.2.12

🐛 Bug Fixes

• Update Go version in publish workflow - (ee6d86d)
• Upgrade Go version from 1.24 to 1.25 in workflows - (6b9467a)

⚙️ Miscellaneous Tasks

• Update changelog - (2037fcc)

Build

• (deps) Bump actions/setup-go from 5 to 6 - (f181281)
• (deps) Bump actions/setup-python from 5 to 6 - (941f1b9)
• (deps) Bump sigs.k8s.io/controller-runtime from 0.22.0 to 0.22.3 - (0bd131b)

v1.2.10

Compare Source

v1.2.8

Compare Source

Full Changelog: postfinance/kubelet-csr-approver@v1.2.8...v1.2.9

🐛 Bug Fixes

• (helm) Add global.clusterDomain config - (f44800e)

Build

• (gh-action) Add automated github release creation - (8b29ff6)
• (helm) Improve helm test - (a2b4e3f)
• Add automatic git-cliff changelog.md - (4d35bda)

v1.2.7

Compare Source

Full Changelog: postfinance/kubelet-csr-approver@v1.2.7...v1.2.8

Build

• (deps) Bump golang.org/x/net from 0.36.0 to 0.38.0 - (292db56)
• (deps) Bump actions/checkout from 3 to 4 - (792df13)
• (deps) Bump golangci/golangci-lint-action from 7.0.0 to 8.0.0 - (b4e0b1c)
• (deps) Bump k8s.io/client-go from 0.33.0 to 0.33.1 - (f1cf168)
• Update to k8s api 1.33 - (f9d1a3c)
• Fix helm chart following helm 3.18 - (c41aa13)
• Update controller-runtime to v0.21.0 - (0344ec5)

---

Configuration

📅 Schedule: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

--- kubernetes/apps/kube-system/kubelet-csr-approver/app Kustomization: flux-system/kubelet-csr-approver HelmRelease: kube-system/kubelet-csr-approver

+++ kubernetes/apps/kube-system/kubelet-csr-approver/app Kustomization: flux-system/kubelet-csr-approver HelmRelease: kube-system/kubelet-csr-approver

@@ -13,13 +13,13 @@

     spec:
       chart: kubelet-csr-approver
       sourceRef:
         kind: HelmRepository
         name: postfinance
         namespace: flux-system
-      version: 1.2.6
+      version: 1.2.13
   install:
     remediation:
       retries: 3
   interval: 30m
   upgrade:
     cleanupOnFail: true

[github-actions]

--- HelmRelease: kube-system/kubelet-csr-approver Deployment: kube-system/kubelet-csr-approver

+++ HelmRelease: kube-system/kubelet-csr-approver Deployment: kube-system/kubelet-csr-approver

@@ -25,21 +25,21 @@

       containers:
       - name: kubelet-csr-approver
         securityContext:
           allowPrivilegeEscalation: false
           capabilities:
             drop:
-            - all
+            - ALL
           privileged: false
           readOnlyRootFilesystem: true
           runAsGroup: 65532
           runAsNonRoot: true
           runAsUser: 65532
           seccompProfile:
             type: RuntimeDefault
-        image: ghcr.io/postfinance/kubelet-csr-approver:v1.2.6
+        image: ghcr.io/postfinance/kubelet-csr-approver:v1.2.13
         imagePullPolicy: IfNotPresent
         args:
         - -metrics-bind-address
         - :8080
         - -health-probe-bind-address
         - :8081
--- HelmRelease: kube-system/kubelet-csr-approver ServiceMonitor: kube-system/kubelet-csr-approver

+++ HelmRelease: kube-system/kubelet-csr-approver ServiceMonitor: kube-system/kubelet-csr-approver

@@ -1,26 +0,0 @@

----
-apiVersion: monitoring.coreos.com/v1
-kind: ServiceMonitor
-metadata:
-  name: kubelet-csr-approver
-  namespace: kube-system
-  labels:
-    app.kubernetes.io/name: kubelet-csr-approver
-    app.kubernetes.io/instance: kubelet-csr-approver
-    app.kubernetes.io/managed-by: Helm
-spec:
-  jobLabel: kubelet-csr-approver
-  namespaceSelector:
-    matchNames:
-    - kube-system
-  selector:
-    matchLabels:
-      app.kubernetes.io/name: kubelet-csr-approver
-      app.kubernetes.io/instance: kubelet-csr-approver
-  endpoints:
-  - port: metrics
-    path: /metrics
-    scheme: http
-    interval: 1m
-    scrapeTimeout: 10s
-