[prometheus] Bump prometheus, config-reloader and chart deps (#3652)

* Bump Prometheus release

* Bump Prometheus to release 2.46.0

Signed-off-by: zeritti <47476160+zeritti@users.noreply.github.com>

* Bump config-reloader release

* Bump config-reloader to release 0.67.0

Signed-off-by: zeritti <47476160+zeritti@users.noreply.github.com>

* Bump chart dependencies

* kube-state-metrics 5.10.1
* prometheus-node-exporter 4.21.0

Signed-off-by: zeritti <47476160+zeritti@users.noreply.github.com>

* Correct cluster role with respect to PSP

Signed-off-by: zeritti <47476160+zeritti@users.noreply.github.com>

---------

Signed-off-by: zeritti <47476160+zeritti@users.noreply.github.com>

charts/prometheus/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 0.33.1
 - name: kube-state-metrics
   repository: https://prometheus-community.github.io/helm-charts
-  version: 5.8.2
+  version: 5.10.1
 - name: prometheus-node-exporter
   repository: https://prometheus-community.github.io/helm-charts
-  version: 4.18.1
+  version: 4.21.0
 - name: prometheus-pushgateway
   repository: https://prometheus-community.github.io/helm-charts
   version: 2.4.0
-digest: sha256:4c9532cc9070f769288379a49748d5a03291ec689e058f32bc9f03ffdd8c8835
-generated: "2023-07-10T22:40:16.1594561+09:00"
+digest: sha256:4062158e1b8cf004b8f42feb018340d1d19e8e97cc8db70b5b514e159788c1a1
+generated: "2023-07-28T13:17:20.309944342Z"

charts/prometheus/Chart.yaml

@@ -1,7 +1,7 @@
 apiVersion: v2
 name: prometheus
-appVersion: v2.45.0
-version: 23.1.0
+appVersion: v2.46.0
+version: 23.2.0
 kubeVersion: ">=1.16.0-0"
 description: Prometheus is a monitoring system and time series database.
 home: https://prometheus.io/
@@ -30,11 +30,11 @@ dependencies:
     repository: https://prometheus-community.github.io/helm-charts
     condition: alertmanager.enabled
   - name: kube-state-metrics
-    version: "5.8.*"
+    version: "5.10.*"
     repository: https://prometheus-community.github.io/helm-charts
     condition: kube-state-metrics.enabled
   - name: prometheus-node-exporter
-    version: "4.18.*"
+    version: "4.21.*"
     repository: https://prometheus-community.github.io/helm-charts
     condition: prometheus-node-exporter.enabled
   - name: prometheus-pushgateway

charts/prometheus/templates/clusterrole.yaml

@@ -6,7 +6,7 @@ metadata:
     {{- include "prometheus.server.labels" . | nindent 4 }}
   name: {{ include "prometheus.clusterRoleName" . }}
 rules:
-{{- if .Values.podSecurityPolicy.enabled }}
+{{- if and .Values.podSecurityPolicy.enabled (.Capabilities.APIVersions.Has "policy/v1beta1/PodSecurityPolicy") }}
   - apiGroups:
     - extensions
     resources:

charts/prometheus/values.yaml

@@ -48,7 +48,7 @@ configmapReload:
     ##
     image:
       repository: quay.io/prometheus-operator/prometheus-config-reloader
-      tag: v0.66.0
+      tag: v0.67.0
       # When digest is set to a non-empty value, images will be pulled by digest (regardless of tag value).
       digest: ""
       pullPolicy: IfNotPresent