Compatibility Matrix Update 2026-05-15

[github-actions]

Automated Pull Request to update compatibility matrix

[greptile-apps]

Greptile Summary

This automated PR updates the compatibility matrix for three add-ons: adds aws-ebs-csi-driver v1.60.0, populates the external-secrets v0.10.7 summary, and bumps kube-prometheus-stack from 85.0.2 to 85.0.3 (including a security-patched Grafana image).

• aws-ebs-csi-driver v1.60.0: New entry added with chart version 2.60.0; however, the images list contains us-central1-docker.pkg.dev/k8s-staging-test-infra/images/kubekins-e2e:v20260512-1f34ef0df3-master, a Kubernetes CI test tooling image that is not a runtime component of the driver and should be removed.
• external-secrets v0.10.7: summary: null replaced with structured content describing a YAML encoding feature and an Azure Key Vault URL fix.
• kube-prometheus-stack 85.0.3: Version and chart bumped, Grafana image updated to the 13.0.1-security-01 security patch tag, and chart_updates summary reworded.

Confidence Score: 3/5

The aws-ebs-csi-driver entry should not be merged as-is due to a CI test image appearing in the production image list.

The kubekins-e2e image from k8s-staging-test-infra embedded in the aws-ebs-csi-driver v1.60.0 image list does not belong in a production compatibility matrix — it is a Kubernetes e2e test tool from a staging registry. Consumers that parse this list to pre-pull or validate images would encounter a non-driver, ephemeral CI artifact. The other changes (external-secrets summary, kube-prometheus-stack bump with security-patched Grafana) look correct.

static/compatibilities/aws-ebs-csi-driver.yaml and the corresponding aws-ebs-csi-driver section in static/compatibilities.yaml — both carry the spurious test image reference.

Important Files Changed

Filename	Overview
static/compatibilities/aws-ebs-csi-driver.yaml	Adds v1.60.0 entry, but the images list incorrectly includes a kubekins-e2e CI test image from k8s-staging-test-infra, which is not a production component of the driver.
static/compatibilities.yaml	Mirrors the aws-ebs-csi-driver.yaml addition (v1.60.0 with the same spurious kubekins-e2e image), plus updates external-secrets summary and bumps kube-prometheus-stack to 85.0.3 with a security-patched Grafana image.
static/compatibilities/external-secrets.yaml	Adds structured summary for v0.10.7, replacing null. Changes look accurate and well-formed.
static/compatibilities/kube-prometheus-stack.yaml	Version bumped from 85.0.2 to 85.0.3; Grafana image updated to security-patched tag 13.0.1-security-01; chart_updates summary reworded. Changes appear correct.

_{Reviews (1): Last reviewed commit: "Updated compatibility matrix 2026-05-15" | Re-trigger Greptile}

[greptile-apps]

Test infrastructure image included in production image list

The image us-central1-docker.pkg.dev/k8s-staging-test-infra/images/kubekins-e2e:v20260512-1f34ef0df3-master is a Kubernetes end-to-end test tooling image from the k8s-staging-test-infra GCP project. It is not a runtime component of the aws-ebs-csi-driver and should not appear in the compatibility matrix images list. Including it may cause consumers of this data to attempt pulling a staging/ephemeral CI image as part of driver deployments, and the staging registry is not guaranteed to be stable or long-lived.