Skip to content

chore(deps): otel-collector 0.169.0, with the image following the chart - #195

Merged
stxkxs merged 1 commit into
mainfrom
otel-0-169
Aug 8, 2026
Merged

chore(deps): otel-collector 0.169.0, with the image following the chart#195
stxkxs merged 1 commit into
mainfrom
otel-0-169

Conversation

@stxkxs

@stxkxs stxkxs commented Aug 8, 2026

Copy link
Copy Markdown
Member

Three chart pins move 0.166.00.169.0, and the three hand-set image tags come out.

The tags are the point

chart appVersion image tag in values
before 0.166.0 0.157.0 "0.157.0" — agreed, by hand
chart bump alone 0.169.0 0.158.0 "0.157.0"diverged
this PR 0.169.0 0.158.0 unset → 0.158.0

They agreed only because someone kept them agreeing. Bumping the chart alone would have opened a divergence where none existed, in the direction that misleads — the chart ahead of the binary it names.

Nothing would have reported it. Renovate reaches the chart pin through the argocd manager and does not read these values files: enabledManagers is ["argocd", "gomod", "custom.regex", "github-actions"], no helm-values. So it moves the chart and structurally cannot move the image. That is how the two spent a stretch a full release apart before.

The fix is structural

The chart renders .Values.image.tag | default .Chart.AppVersion (_pod.tpl:56), so deleting the tag makes the image a function of the pin rather than a second fact maintained beside it. Every future chart bump carries its image with no second act.

Checked, not assumed

  • The rendered Deployment resolves to otel/opentelemetry-collector-contrib:0.158.0 — so the default is actually reached and nothing else overrides it.
  • The contrib distro genuinely publishes the versions the appVersion tracks. That appVersion follows the core collector and contrib is a different repository, so this needed confirming rather than assuming: both 0.157.0 and 0.158.0 return HTTP 200 from the registry.
  • task validate: 109 addon×env combinations, 0 failed. No 0.157.0 remains under addons/ or applicationsets/.

kx mirrors this chart and follows in a paired PR once this lands.

Three chart pins move 0.166.0 -> 0.169.0, and the three hand-set image tags come
out.

The tags are the point. Chart 0.166.0 declares appVersion 0.157.0 and all three
values files pinned the image at 0.157.0, so the two agreed — but only by hand,
and only for as long as nobody moved one. Chart 0.169.0 declares appVersion
0.158.0, so bumping the chart alone would have opened a divergence where none
existed, in the direction that misleads: the chart ahead of the binary it names.

Nothing would have reported it. Renovate reaches the chart pin through the
argocd manager and does not read these values files at all — eks-gitops sets
enabledManagers to argocd, gomod, custom.regex and github-actions, with no
helm-values — so it moves the chart and cannot move the image. That is how the
two spent a stretch a full release apart before.

The chart renders `.Values.image.tag | default .Chart.AppVersion`, so deleting
the tag makes the image a function of the pin rather than a second fact
maintained beside it. Every future chart bump now carries its image with no
second act.

Two things checked rather than assumed. The rendered Deployment resolves to
otel/opentelemetry-collector-contrib:0.158.0, so the default is reached and the
values files are not overriding it somewhere else. And the contrib distro
genuinely publishes the version numbers the appVersion tracks — that appVersion
follows the core collector, and contrib is a different repository — confirmed
against the registry for both 0.157.0 and 0.158.0.

task validate passes: 109 addon×env combinations, 0 failed, and no 0.157.0
remains anywhere under addons/ or applicationsets/.

kx mirrors this chart and follows in a paired change.
@github-actions

github-actions Bot commented Aug 8, 2026

Copy link
Copy Markdown

CI Results

Check Status
Zero-placeholder gate ✅ success
YAML Lint ✅ success
Dashboard gate (live grafana.com ids + AMG-saveable) ✅ success
Kyverno policy tests (+ verify-images contract) ✅ success
Fork-safety gate (no hardcoded org, blocking) ✅ success
Helm-render (every addon × every env) ✅ success
Policy-admission (Enforce-tier Kyverno vs the fleet) ✅ success
ApplicationSet schema + sync waves ✅ success
Appset render (Karpenter subnet selector) ✅ success
Secret scan (gitleaks) ✅ success
Render + assert + schema + misconfig (all environments) ✅ success

All checks passed.

@stxkxs
stxkxs merged commit 9c7ce04 into main Aug 8, 2026
21 checks passed
@stxkxs
stxkxs deleted the otel-0-169 branch August 11, 2026 17:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant