fix(container): update image kube-prometheus-stack to v61.7.2

[layla-bot]

This PR contains the following updates:

Package	Update	Change
kube-prometheus-stack (source)	patch	61.7.1 -> 61.7.2

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[layla-bot]

--- kubernetes/main/apps/observability/kube-prometheus-stack/app Kustomization: flux-system/kube-prometheus-stack HelmRelease: observability/kube-prometheus-stack

+++ kubernetes/main/apps/observability/kube-prometheus-stack/app Kustomization: flux-system/kube-prometheus-stack HelmRelease: observability/kube-prometheus-stack

@@ -13,13 +13,13 @@

     spec:
       chart: kube-prometheus-stack
       sourceRef:
         kind: HelmRepository
         name: prometheus-community
         namespace: flux-system
-      version: 61.7.1
+      version: 61.7.2
   dependsOn:
   - name: prometheus-operator-crds
     namespace: observability
   - name: openebs
     namespace: openebs-system
   install:

[layla-bot]

--- kubernetes/storage/apps/observability/kube-prometheus-stack/app Kustomization: flux-system/kube-prometheus-stack HelmRelease: observability/kube-prometheus-stack

+++ kubernetes/storage/apps/observability/kube-prometheus-stack/app Kustomization: flux-system/kube-prometheus-stack HelmRelease: observability/kube-prometheus-stack

@@ -13,13 +13,13 @@

     spec:
       chart: kube-prometheus-stack
       sourceRef:
         kind: HelmRepository
         name: prometheus-community
         namespace: flux-system
-      version: 61.7.1
+      version: 61.7.2
   dependsOn:
   - name: openebs
     namespace: openebs-system
   install:
     crds: CreateReplace
     remediation:

[layla-bot]

--- HelmRelease: observability/kube-prometheus-stack DaemonSet: observability/node-exporter

+++ HelmRelease: observability/kube-prometheus-stack DaemonSet: observability/node-exporter

@@ -95,12 +95,13 @@

         - name: root
           mountPath: /host/root
           mountPropagation: HostToContainer
           readOnly: true
       hostNetwork: true
       hostPID: true
+      hostIPC: false
       nodeSelector:
         kubernetes.io/os: linux
       tolerations:
       - effect: NoSchedule
         operator: Exists
       volumes:
--- HelmRelease: observability/kube-prometheus-stack Deployment: observability/kube-prometheus-stack-operator

+++ HelmRelease: observability/kube-prometheus-stack Deployment: observability/kube-prometheus-stack-operator

@@ -65,12 +65,32 @@

             - ALL
           readOnlyRootFilesystem: true
         volumeMounts:
         - name: tls-secret
           mountPath: /cert
           readOnly: true
+        readinessProbe:
+          httpGet:
+            path: /healthz
+            port: https
+            scheme: HTTPS
+          initialDelaySeconds: 0
+          periodSeconds: 10
+          timeoutSeconds: 1
+          successThreshold: 1
+          failureThreshold: 3
+        livenessProbe:
+          httpGet:
+            path: /healthz
+            port: https
+            scheme: HTTPS
+          initialDelaySeconds: 0
+          periodSeconds: 10
+          timeoutSeconds: 1
+          successThreshold: 1
+          failureThreshold: 3
       volumes:
       - name: tls-secret
         secret:
           defaultMode: 420
           secretName: kube-prometheus-stack-admission
       securityContext:

[layla-bot]

--- HelmRelease: observability/kube-prometheus-stack DaemonSet: observability/node-exporter

+++ HelmRelease: observability/kube-prometheus-stack DaemonSet: observability/node-exporter

@@ -95,12 +95,13 @@

         - name: root
           mountPath: /host/root
           mountPropagation: HostToContainer
           readOnly: true
       hostNetwork: true
       hostPID: true
+      hostIPC: false
       nodeSelector:
         kubernetes.io/os: linux
       tolerations:
       - effect: NoSchedule
         operator: Exists
       volumes:
--- HelmRelease: observability/kube-prometheus-stack Deployment: observability/kube-prometheus-stack-operator

+++ HelmRelease: observability/kube-prometheus-stack Deployment: observability/kube-prometheus-stack-operator

@@ -65,12 +65,32 @@

             - ALL
           readOnlyRootFilesystem: true
         volumeMounts:
         - name: tls-secret
           mountPath: /cert
           readOnly: true
+        readinessProbe:
+          httpGet:
+            path: /healthz
+            port: https
+            scheme: HTTPS
+          initialDelaySeconds: 0
+          periodSeconds: 10
+          timeoutSeconds: 1
+          successThreshold: 1
+          failureThreshold: 3
+        livenessProbe:
+          httpGet:
+            path: /healthz
+            port: https
+            scheme: HTTPS
+          initialDelaySeconds: 0
+          periodSeconds: 10
+          timeoutSeconds: 1
+          successThreshold: 1
+          failureThreshold: 3
       volumes:
       - name: tls-secret
         secret:
           defaultMode: 420
           secretName: kube-prometheus-stack-admission
       securityContext: