chore(deps): update kube prometheus stack to 85.2.0

[merll]

📌 Summary

🔍 Reviewer Notes

🧹 Checklist

• Code is readable, maintainable, and robust.
• Unit tests added/updated

[svcAPLBot]

Comparison of Helm chart templating output:

# kube-prometheus-stack/charts/prometheus-node-exporter/templates/daemonset.yaml

@@ spec.template.spec.containers.node-exporter.image @@
! ± value change
- quay.io/prometheus/node-exporter:v1.11.1
+ quay.io/prometheus/node-exporter:v1.11.1-distroless

# kube-prometheus-stack/templates/alertmanager/alertmanager.yaml

# kube-prometheus-stack/templates/alertmanager/route.yaml

# kube-prometheus-stack/templates/alertmanager/service.yaml

# kube-prometheus-stack/templates/alertmanager/serviceaccount.yaml

# kube-prometheus-stack/templates/alertmanager/servicemonitor.yaml

# kube-prometheus-stack/templates/exporters/core-dns/service.yaml

# kube-prometheus-stack/templates/exporters/core-dns/servicemonitor.yaml

# kube-prometheus-stack/templates/exporters/kube-api-server/servicemonitor.yaml

# kube-prometheus-stack/templates/exporters/kube-etcd/service.yaml

# kube-prometheus-stack/templates/exporters/kube-etcd/servicemonitor.yaml

# kube-prometheus-stack/templates/exporters/kubelet/servicemonitor.yaml

# kube-prometheus-stack/templates/prometheus/additionalPrometheusRules.yaml

# kube-prometheus-stack/templates/prometheus/additionalScrapeConfigs.yaml

# kube-prometheus-stack/templates/prometheus/clusterrole.yaml

# kube-prometheus-stack/templates/prometheus/clusterrolebinding.yaml

# kube-prometheus-stack/templates/prometheus/prometheus.yaml

@@ spec.image @@
! ± value change
- quay.io/prometheus/prometheus:v3.11.3
+ quay.io/prometheus/prometheus:v3.11.3-distroless

@@ spec.version @@
! ± value change
- v3.11.3
+ v3.11.3-distroless

# kube-prometheus-stack/templates/prometheus/route.yaml

# kube-prometheus-stack/templates/prometheus/rules-1.14/alertmanager.rules.yaml

# kube-prometheus-stack/templates/prometheus/rules-1.14/config-reloaders.yaml

# kube-prometheus-stack/templates/prometheus/rules-1.14/etcd.yaml

# kube-prometheus-stack/templates/prometheus/rules-1.14/general.rules.yaml

# kube-prometheus-stack/templates/prometheus/rules-1.14/k8s.rules.container_cpu_usage_seconds_total.yaml

# kube-prometheus-stack/templates/prometheus/rules-1.14/k8s.rules.container_memory_cache.yaml

# kube-prometheus-stack/templates/prometheus/rules-1.14/k8s.rules.container_memory_rss.yaml

# kube-prometheus-stack/templates/prometheus/rules-1.14/k8s.rules.container_memory_swap.yaml

# kube-prometheus-stack/templates/prometheus/rules-1.14/k8s.rules.container_memory_working_set_bytes.yaml

# kube-prometheus-stack/templates/prometheus/rules-1.14/k8s.rules.container_resource.yaml

# kube-prometheus-stack/templates/prometheus/rules-1.14/k8s.rules.pod_owner.yaml

# kube-prometheus-stack/templates/prometheus/rules-1.14/kube-apiserver-availability.rules.yaml

# kube-prometheus-stack/templates/prometheus/rules-1.14/kube-apiserver-burnrate.rules.yaml

# kube-prometheus-stack/templates/prometheus/rules-1.14/kube-apiserver-histogram.rules.yaml

# kube-prometheus-stack/templates/prometheus/rules-1.14/kube-apiserver-slos.yaml

# kube-prometheus-stack/templates/prometheus/rules-1.14/kube-prometheus-general.rules.yaml

# kube-prometheus-stack/templates/prometheus/rules-1.14/kube-prometheus-node-recording.rules.yaml

# kube-prometheus-stack/templates/prometheus/rules-1.14/kube-state-metrics.yaml

# kube-prometheus-stack/templates/prometheus/rules-1.14/kubelet.rules.yaml

# kube-prometheus-stack/templates/prometheus/rules-1.14/kubernetes-apps.yaml

@@ spec.groups.kubernetes-apps.rules.KubePodNotReady.expr @@
! ± value change in multiline text (one insert, one deletion)
  sum by (namespace, pod, job, cluster) (
    max by (namespace, pod, job, cluster) (
      kube_pod_status_phase{job="kube-state-metrics", namespace=~".*", phase=~"Pending|Unknown"}
-   ) * on (namespace, pod, cluster) group_left(owner_kind) topk by (namespace, pod, cluster) (
+   ) * on (namespace, pod, cluster) group_left() topk by (namespace, pod, cluster) (
      1, max by (namespace, pod, owner_kind, cluster) (kube_pod_owner{owner_kind!="Job"})
    )
  ) > 0

@@ spec.groups.kubernetes-apps.rules.KubeHpaMaxedOut.expr @@
! ± value change in multiline text (one insert, one deletion)
  (
    kube_horizontalpodautoscaler_status_current_replicas{job="kube-state-metrics", namespace=~".*"}
      ==
    kube_horizontalpodautoscaler_spec_max_replicas{job="kube-state-metrics", namespace=~".*"}
  )
- and on (namespace, horizontalpodautoscaler) (
+ and on (namespace, horizontalpodautoscaler, cluster) (
    kube_horizontalpodautoscaler_spec_max_replicas{job="kube-state-metrics", namespace=~".*"}
      !=
    kube_horizontalpodautoscaler_spec_min_replicas{job="kube-state-metrics", namespace=~".*"}
  )

# kube-prometheus-stack/templates/prometheus/rules-1.14/kubernetes-resources.yaml

# kube-prometheus-stack/templates/prometheus/rules-1.14/kubernetes-storage.yaml

# kube-prometheus-stack/templates/prometheus/rules-1.14/kubernetes-system-apiserver.yaml

@@ spec.groups.kubernetes-system-apiserver.rules @@
! + one list entry added:
+ - alert: KubeAPIInstanceUnreachable
+   annotations:
+     description: "A KubeAPI instance has been unreachable for more than 15 minutes."
+     runbook_url: "https://runbooks.prometheus-operator.dev/runbooks/kubernetes/kubeapiinstanceunreachable"
+     summary: "KubeAPI instance is unreachable."
+   expr: "up{job=\"apiserver\"} == 0"
+   for: 15m
+   labels:
+     severity: warning

# kube-prometheus-stack/templates/prometheus/rules-1.14/kubernetes-system-kubelet.yaml

@@ spec.groups.kubernetes-system-kubelet.rules @@
! + one list entry added:
+ - alert: KubeletInstanceUnreachable
+   annotations:
+     description: "A Kubelet instance has been unreachable for more than 15 minutes."
+     runbook_url: "https://runbooks.prometheus-operator.dev/runbooks/kubernetes/kubeletinstanceunreachable"
+     summary: "Kubelet instance is unreachable."
+   expr: "up{job=\"kubelet\", metrics_path=\"/metrics\"} == 0"
+   for: 15m
+   labels:
+     severity: warning

# kube-prometheus-stack/templates/prometheus/rules-1.14/kubernetes-system.yaml

# kube-prometheus-stack/templates/prometheus/rules-1.14/node-exporter.rules.yaml

# kube-prometheus-stack/templates/prometheus/rules-1.14/node-exporter.yaml

# kube-prometheus-stack/templates/prometheus/rules-1.14/node-network.yaml

# kube-prometheus-stack/templates/prometheus/rules-1.14/node.rules.yaml

# kube-prometheus-stack/templates/prometheus/rules-1.14/prometheus-operator.yaml

# kube-prometheus-stack/templates/prometheus/rules-1.14/prometheus.yaml

# kube-prometheus-stack/templates/prometheus/service.yaml

# kube-prometheus-stack/templates/prometheus/serviceaccount.yaml

# kube-prometheus-stack/templates/prometheus/servicemonitor.yaml

# kube-prometheus-stack/templates/prometheus/servicemonitors.yaml

# kube-prometheus-stack/templates/prometheus-operator/admission-webhooks/mutatingWebhookConfiguration.yaml

# kube-prometheus-stack/templates/prometheus-operator/admission-webhooks/validatingWebhookConfiguration.yaml

# kube-prometheus-stack/templates/prometheus-operator/clusterrole.yaml

# kube-prometheus-stack/templates/prometheus-operator/clusterrolebinding.yaml

# kube-prometheus-stack/templates/prometheus-operator/deployment.yaml

# kube-prometheus-stack/templates/prometheus-operator/service.yaml

# kube-prometheus-stack/templates/prometheus-operator/serviceaccount.yaml

# kube-prometheus-stack/templates/prometheus-operator/servicemonitor.yaml

# rabbitmq-cluster-operator/templates/messaging-topology-operator/validating-webhook-configuration.yaml

# kube-prometheus-stack/charts/grafana/templates/clusterrole.yaml

# kube-prometheus-stack/charts/grafana/templates/clusterrolebinding.yaml

# kube-prometheus-stack/charts/grafana/templates/configmap-dashboard-provider.yaml

# kube-prometheus-stack/charts/grafana/templates/configmap.yaml

# kube-prometheus-stack/charts/grafana/templates/deployment.yaml

@@ spec.template.spec.containers.demo-po-grafana-sc-dashboard.image @@
! ± value change
- quay.io/kiwigrid/k8s-sidecar:2.7.1
+ quay.io/kiwigrid/k8s-sidecar:2.7.3

@@ spec.template.spec.containers.demo-po-grafana-sc-datasources.image @@
! ± value change
- quay.io/kiwigrid/k8s-sidecar:2.7.1
+ quay.io/kiwigrid/k8s-sidecar:2.7.3

@@ spec.template.spec.containers.grafana.image @@
! ± value change
- docker.io/grafana/grafana:13.0.1
+ docker.io/grafana/grafana:13.0.1-security-01

# Old file deleted: kube-prometheus-stack/charts/grafana/templates/role.yaml
# Old file deleted: kube-prometheus-stack/charts/grafana/templates/rolebinding.yaml
# kube-prometheus-stack/charts/grafana/templates/route.yaml

# kube-prometheus-stack/charts/grafana/templates/service.yaml

# kube-prometheus-stack/charts/grafana/templates/serviceaccount.yaml

# kube-prometheus-stack/templates/alertmanager/alertmanager.yaml

# kube-prometheus-stack/templates/alertmanager/route.yaml

# kube-prometheus-stack/templates/alertmanager/service.yaml

# kube-prometheus-stack/templates/alertmanager/serviceaccount.yaml

# kube-prometheus-stack/templates/grafana/configmaps-datasources.yaml

# kube-prometheus-stack/charts/grafana/templates/clusterrole.yaml

# kube-prometheus-stack/charts/grafana/templates/clusterrolebinding.yaml

# kube-prometheus-stack/charts/grafana/templates/configmap-dashboard-provider.yaml

# kube-prometheus-stack/charts/grafana/templates/configmap.yaml

# kube-prometheus-stack/charts/grafana/templates/deployment.yaml

@@ spec.template.spec.containers.dev-po-grafana-sc-dashboard.image @@
! ± value change
- quay.io/kiwigrid/k8s-sidecar:2.7.1
+ quay.io/kiwigrid/k8s-sidecar:2.7.3

@@ spec.template.spec.containers.dev-po-grafana-sc-datasources.image @@
! ± value change
- quay.io/kiwigrid/k8s-sidecar:2.7.1
+ quay.io/kiwigrid/k8s-sidecar:2.7.3

@@ spec.template.spec.containers.grafana.image @@
! ± value change
- docker.io/grafana/grafana:13.0.1
+ docker.io/grafana/grafana:13.0.1-security-01

# Old file deleted: kube-prometheus-stack/charts/grafana/templates/role.yaml
# Old file deleted: kube-prometheus-stack/charts/grafana/templates/rolebinding.yaml
# kube-prometheus-stack/charts/grafana/templates/route.yaml

# kube-prometheus-stack/charts/grafana/templates/service.yaml

# kube-prometheus-stack/charts/grafana/templates/serviceaccount.yaml

# kube-prometheus-stack/templates/alertmanager/alertmanager.yaml

# kube-prometheus-stack/templates/alertmanager/route.yaml

# kube-prometheus-stack/templates/alertmanager/service.yaml

# kube-prometheus-stack/templates/alertmanager/serviceaccount.yaml

# kube-prometheus-stack/templates/grafana/configmaps-datasources.yaml

# values-repo.yaml