fix(deps): update module github.com/victoriametrics/operator/api to v0.63.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/VictoriaMetrics/operator/api	v0.51.3 -> v0.63.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

VictoriaMetrics/operator (github.com/VictoriaMetrics/operator/api)

v0.63.0

Compare Source

v0.63.0

Release date: 12 Sep 2025

• Dependency: vmoperator: Updated default versions for VM apps to v1.125.0 version

• Dependency: vmoperator: Updated default versions for VL apps to v1.33.0.

• FEATURE: vmuser: add VLSingle, VLAgent,VLCluster/vlinsert,VLCluster/vlselect, VLCluster/vlstorage, VTSingle, VTCluster/vtinsert,VTCluster/vtselect, VTCluster/vtstorage to the targetRef.crd.kind.

• FEATURE: operator: introduce new resources VLSingle and VTCluster. See #​1498 for details.

• FEATURE: vmagent: support stream aggregation ignore_first_sample_interval property. See #​1518.

• FEATURE: vmalert: add mutually exclusive checks for notifier configs in admission webhook validation. See #​1511.

• FEATURE: vmalertmanager: add enforcedNamespaceLabel field to allow changing the top route namespace matcher key for VMAlertmanagerConfig. See #​1480.

• BUGFIX: vmoperator: properly release finalizer on VMAlert delete. See this issue #​1527 for details.

• BUGFIX: vmoperator: properly reconcile Service on value of loadbalancerClass change. Previously it produced error may not change once set. See PR #​1522 for details.

• BUGFIX: vmuser: simplify path based routing for src_paths when using VMCluster/vminsert or VMCluster/vmselect as targetRefs. See this PR #​1519 for details.

v0.62.0

Compare Source

v0.62.0

Release date: 17 Aug 2025

• Dependency: vmoperator: Updated default versions for VM apps to v1.123.0 version

• Dependency: vmoperator: Updated default versions for VL apps to v1.28.0.

• Dependency: vmoperator: Updated default versions for VMAnomaly to v1.25.2 version

• FEATURE: upgrade Go builder from Go1.24.6 to Go1.25.0. See the list of changes in Go1.25.0.

• FEATURE: converter: support spec.limit, spec.labels, spec.query_offset and spec.group[*].keep_firing_for PrometheusRule properties conversion to VMRule. Related issue #​1485.

• FEATURE: vmoperator: reduce reconcile latency. See this PR #​1510 for details. Thanks to the @​vrutkovs

• FEATURE: vmoperator: expose operator configuration as metrics. Add flag and config_parameter metrics with name, is_set and value labels. See this issue #​1469 for details.

• BUGFIX: config-reloader: fixed config reloader command line arguments override. Related issue #​1378.

• BUGFIX: VLCluster and VMCluster: sort requestsLoadBalancer Deployment args in order to prevent endless update loop if extraArgs are set.

v0.61.2

Compare Source

v0.61.2

Release date: 19 July 2025

Dependency: vmoperator: Updated default versions for VM apps to v1.122.0 version

• BUGFIX: vmagent: properly add attach_metadata section to scrape configuration. See #​1476.
• BUGFIX: vmagent: properly update sharded VMAgent. Previously operator endlessly recreated Deployment/StatefulSet. See this issue #​1478 for details.

v0.61.1

Compare Source

v0.61.1

Release date: 19 July 2025

• BUGFIX: vmagent: properly add TLS configuration for scrape configuration. Previously, tls options were applied to the root of scrape configuration, which caused an error at vmagent startup. Bug was introduced in v0.60.0 release.
• BUGFIX: vmagent, vmalert, vmauth and vmalertmanager: reduce Kubernetes API-server and operator resource usage for objects discovery with NamespaceSelector: {}. See this 1468 issue for details.

v0.61.0

Compare Source

v0.61.0

Release date: 15 July 2025

Update Note 1: This release by transits VLogs resource into read-only state.
To perform migration to the VLSingle please follow this docs

Update Note 2:: This release requires an additional pods/eviction RBAC permssion for operator.

Update Note 3:: This release requires adds new CustomResource VLAgent. It requires to update CRD versions.

• SECURITY: upgrade Go builder from Go1.24.4 to Go1.24.5. See the list of issues addressed in Go1.24.5.

• Dependency: vmoperator: Updated default versions for VL apps to v1.25.1.

• Dependency: vmoperator: Updated default versions for VM apps to v1.121.0 version.

• BUGFIX: vmoperator: respect PodDisruptionBudget at StatefulSet updates. See this 1458 PR for details. Thanks to the @​vpedosyuk for the fix.

• BUGFIX: VLCluster and VMCluster: do not add spec.clusterVersion to the spec.requestsLoadBalancer.spec.image.tag as default value. See this 1365 issue for details.

• BUGFIX: vmagent: properly add remoteWrite streamAggr configuration. Previously, operator failed to mount volume with configution. Bug was introduced at v0.60.0 release at commit 8df334c. See this 9c47f448908edc80e3e6e89af9e3dac0ff8eb720 commit for details.

• BUGFIX: vmuser: properly generate format URL port for Vlogs and VLSingle at targetRef.crd. See 1465 this issue for details.

• FEATURE: vlcluster: added the maxUnavailable field to VLStorage specs to allow customization of rolling update behavior. See #​1457.

• FEATURE: vlsingle: add new field spec.syslogSpec for syslog data ingestion configuration. See this 1441 issue for details.

• FEATURE: vmanomaly: update shards concurrently. See #​1434.

• FEATURE: vmagent: update shards concurrently. See #​1434. Thanks to the @​xiaozongyang for 1272 pull request.

• FEATURE: vmoperator: deprecated acceptEula parameter in VMBackup. See #​1319.

• FEATURE: vmoperator: add new field persistentVolumeClaimRetentionPolicy in VMAnomaly, VMCluster, VMAlertmanager and VMAgent CRs, that support StatefulSet mode. See #​1226.

• FEATURE: vmoperator: add -enterprise suffix to default image.tag value, if license configuration is defined for CustomResource. See this 1365 issue for details.

• FEATURE: vmoperator: transit VLogs Custom Resource into read-only state. Operator ignores create and update requests for it.

• FEATURE: vmagent: added AWS section to VMAgent remoteWrite spec. See #​928.

• FEATURE: vmagent: introduce global scrape config for VMAgent. See #​1179.

• FEATURE: vmcluster: added the maxUnavailable field to VMStorage and VMSelect specs to allow customization of rolling update behavior. See #​1457 and minimum downtime update strategy doc. Thanks to the @​vpedosyuk for the 1458 Pull Request

• FEATURE: vmagent: Modify default remoteWrite.maxDiskUsagePerURL when statefulStorage.volumeClaimTemplate is set. See #​1209

v0.60.2

Compare Source

v0.60.2

Release date: 27 June 2025

• BUGFIX: vmoperator: clear status.reason when transitioning to expanding state. This makes less confusing as resource in expanding state is no longer affected by an error displayed in status.reason. See #​1426.
• BUGFIX: vmalert: properly load TLS secrets into VMAlert secret. See #​1437.

v0.60.1

Compare Source

v0.60.1

Release date: 24 June 2025

• SECURITY: upgrade Go builder from Go1.24.3 to Go1.24.4. See the list of issues addressed in Go1.24.4.

• Dependency: vmoperator: Updated default versions for VMAnomaly to v1.24.1 version

• BUGFIX: vmanomaly: fix marshaling of of .spec.configRawYaml.settings, previously it was skipped which caused VManomaly resource to be created with empty settings.

• BUGFIX: vmanomaly: fixed typo in VMAnomaly shard creation.

• BUGFIX: vmanomaly: properly apply strict security.

v0.60.0

Compare Source

Release date: 23 June 2025

• Dependency: vmoperator: Updated default versions for VM apps to v1.120.0 version

• Dependency: vmoperator: Updated default versions for VL apps to v1.24.0 version

• FEATURE: vmanomaly: add support of decay field for online models.

• FEATURE: operator: introduce new resource VMAnomaly. See 1136 issue for details.

• BUGFIX: vmagent: use scrape namespace instead of VMAgent one for VMStaticScrape secrets lookup.

• BUGFIX: vmagent: properly set ScrapeObjects failed status on missing references. See 1416 issue for details.

• BUGFIX: vmagent: properly validate ScrapeObjects syntax. Previously operator could panic in case of spec.selectors incorrect values. See 1415 issue for details.

• BUGFIX: vmalert: properly calculate Deployment prev spec diff with notifier.selectors. See 1418 issue for details.

• BUGFIX: vmanomaly: fix marshalling of .spec.reader.latencyOffset field. Previously, it was causing an error when trying to create VManomaly resource with latencyOffset.

• BUGFIX: vmanomaly: fix parsing of Inf value for data_range of .spec.configRawYaml.reader.queries.<query>.data_range.

• BUGFIX: vmanomaly: fix marshaling of of .spec.configRawYaml.settings, previously it was skipped which caused VManomaly resource to be created with empty settings.

• BUGFIX: VLCluster: properly set HPA target for vlselect component. See PR-1406 for details. Thanks to the @​bmiguel-teixeira.

• BUGFIX: Renamed metric operator_vmagent_config_fetch_secret_errors_total to operator_fetch_errors_total. Now it's incremented during each unsuccessful attempt to retrieve data from K8s secret or configmap, not only for VMAgent scrape objects.

v0.59.1

Compare Source

v0.59.1

Release date: 30 May 2025

Update Note 1: This release by deprecates VLogs resource. It will transit into read-only state after v0.61.0 release.
To perform migration to the VLSingle please follow this docs

• BUGFIX: vlcluster: properly apply replicaCount for VLSelect component

v0.59.0

Compare Source

v0.59.0

Release date: 30 May 2025

Update Note 1: This release by deprecates VLogs resource. It will transit into read-only state after v0.61.0 release.
To perform migration to the VLSingle please follow this docs

• Dependency: vmoperator: Updated default versions for VM apps to v1.118.0 version

• FEATURE: config-reloader: exclude hidden directories from watch. It should prevent possible errors with hidden symlinks, which may occur during dir walk. See this commit for details.

• FEATURE: operator: introduce new resource VLSingle. It replaces deprecated VLogs. See this issue for details.

• FEATURE: operator: introduce new resource VLCluster. See this issue and this doc for details.

• FEATURE: operator: manifests distributed via GitHub release artifacts now include the label app.kubernetes.io/instance: default, and the value of app.kubernetes.io/name has been changed to victoria-metrics-operator. See #​1364 for details.

• FEATURE: operator: add new field proxyURL to the VMagent remoteWriteSpec. See this PR for details. Thanks to the @​DanielLeone

• FEATURE: operator: introduce new flags for leader election configuration - leader-elect-lease-duration, leader-elect-renew-deadline. See this issue for details.

• FEATURE: operator: add spec.configMaps as volumeMounts for watch with config-reloader container for VMAgent and VMAlert components. See this issue for details.

• BUGFIX: converter: properly apply filter prefixes for objects with VM_FILTERPROMETHEUSCONVERTERLABELPREFIXES and VM_FILTERPROMETHEUSCONVERTERANNOTATIONPREFIXES env variables. See this PR 1391 for details. Thanks to the @​padlyuck

• BUGFIX: operator: remove alerting rule BadObjects as metric operator_controller_bad_objects_count isn't exposed anymore.

• BUGFIX: operator: properly validate HPA object. metrics and behaviour are optional fields.

• BUGFIX: vmcluster: fixes typo at addDefaults function for VMCLuster, it prevents possible panic if VMInsert is not configured. See this issue for details.

v0.58.1

Compare Source

v0.58.1

Release date: 28 May 2025

• Dependency: vmoperator: Updated default versions for VM apps to v1.118.0 version

v0.57.0

Compare Source

Release date: 09 May 2025

• Dependency: vmoperator: Updated default versions for VM apps to v1.116.0 version

• Dependency: vmoperator: Updated default VLogs v1.21.0 version

• Dependency: vmoperator: Updated default alertmanager to 0.28.1 version

• FEATURE: operator: introduce FIPS builds for operator and config-reloader containers with -fips tag prefix. See this issue for details.

• FEATURE: operator: introduce new field spec.configReloadAuthKeySecret for VMAgent, VMAlert and VMAuth components. It instructs application to use provided value for -configReload auth key. See this issue for details.

• FEATURE: converter: add msteamsv2_configs conversion from Prometheus resource AlertmanagerConfig. See this commit for details.

• FEATURE: upgrade Go builder from Go1.24.0 to Go1.24.4 See Go1.24 release notes.

• FEATURE: vmalertmanagerconfig: add timeout field to the webhook_configs definition. It's supported by alertmanager v0.28.0+. See this commit for details.

• FEATURE: vmsingle: add 8428 port alias to the VMSingle Service. See this issue for details.

• FEATURE: operator: made retentionPeriod in VMSingle and VMCluster optional; it now defaults to 1 (month) if not specified. Add a validation regexp ^[0-9]+(h|d|y)?$ for retentionPeriod. See #​1326 for details.

• BUGFIX: operator: fix typo in -remoteWrite.streamAggr.enableWindows flag when enableWindows is set to true in VMAgent resources. See this commit for details.

• BUGFIX: vmagent: properly build oauth2 clientSecret configuration for remoteWrite targets. See this issue for details. Thanks to the @​Unichron for catching this bug.

• BUGFIX: vmauth: properly create and delete VMServiceScrape with internalListenPort option configured. See this issue for details.

v0.56.0

Compare Source

v0.56.0

Release date: 15 Apr 2025

**Update note 1: config-reloader container now longer uses proxy-protocol for internal web-server if reload-use-proxy-protocol is set.

• Dependency: vmoperator: Updated default versions for VM apps to v1.115.0 version

• Dependency: vmoperator: Updated default VLogs v1.18.0 version

• FEATURE: operator: support VM_METRICS_VERSION and VM_LOGS_VERSION env variables as a source for all VM and VL related CR image versions

• FEATURE: vmauth: add new field internalListenPort for serving internal routes. See this issue and this docs.

• FEATURE: vmauth: add new field useProxyProtocol for enabling proxy protocol for vmauth. See this issue.

• FEATURE: vmalertmanager: add runtime configuration validation. See this issue for details.

• FEATURE: operator: add StatefulSet volumeMounts name validation. See this issue for details.

• BUGFIX: vmalertmanagerconfig: properly validate unknown fields at route.routes, http_config and tls_config. See this issue for details.

• BUGFIX: config-reloader: properly use reload-use-proxy-protocol flag. See this issue for details.

• BUGFIX: operator: fix shard count backward range bounds, as now it produced shard with negative index.

v0.55.0

Compare Source

v0.55.0

Release date: 02 Apr 2025

• Dependency: vmoperator: Updated default versions for VM apps to v1.114.0 version

• Dependency: vmoperator: make project layout compatible with [kubebuilder v4](https://book.kubebuilder.io/migration/v3vsv4)

• Dependency: vmoperator: Updated default VLogs v1.17.0 version

• FEATURE: [operator](https://docs.victoriametrics.com/operator: add tls_config and proxy_url fields to the oauth2 scrape target configurations. See this issue for details

• FEATURE: [operator](https://docs.victoriametrics.com/operator: add extraEnvsFrom field to all applications, which defines source for env variables as Secret or ConfigMap. See this issue for details.

• FEATURE: [operator](https://docs.victoriametrics.com/operator: set publishNotReadyAddresses: true to the vmstorage, vmselect, vmalertmanager services. See this issue for details.

• FEATURE: [operator](https://docs.victoriametrics.com/operator: log fields changes diff for Deployment, StatefulSet, Service, PDB, HPA and VMServiceScrape during reconcile process. See this issue for details.

• FEATURE: [operator](https://docs.victoriametrics.com/operator: add global env variables VM_CONFIG_RELOADER_LIMIT_CPU and VM_CONFIG_RELOADER_LIMIT_MEMORY with unlimited as default value. It controls global limits for config-reloader containers. See this issue for details.

• FEATURE: [operator](https://docs.victoriametrics.com/operator: add global env variables VM_CONFIG_RELOADER_REQUEST_CPU and VM_CONFIG_RELOADER_REQUEST_MEMORY with empty as default value. It controls global requests for config-reloader containers. See this issue for details. All per resource config-reloader requests env variables are now deprecated.

• FEATURE: vmagent: introduce daemonSetMode as a beta feature. See this issue and this docs for details.

• FEATURE: vmagent: reduce Kubernetes API server load on large scale by removing selectors from VMPodscrape kubernetes_sd_configs. Add new field VMAgent.spec.enableKubernetesAPISelectors, which restores original behaviour. See this issue for details.

• FEATURE: vmagent: allow to define remoteWrite.MaxDiskUsage as integer and adds validation to it. See this issue for details.

• FEATURE: vmagent: allow to define remoteWriteSettings.maxDiskUsagePerURL as string with bytes suffix and adds validation to it. See this issue for details.

• FEATURE: vmalertmanagerconfig: add content, username and avatar_url to discord_configs definition. It's supported by alertmanager v0.28.0+. See this commit for details.

• FEATURE: vmalertmanagerconfig: add new receiver jira_configs, which was added at alertmanager v0.28.0. See this issue for details.

• FEATURE: vmalertmanagerconfig: add new receiver rocketchat_configs, which was added at alertmanager v0.28.0. See this issue for details.

• FEATURE: vmalertmanagerconfig: add new receiver msteamsv2_configs, which was added at alertmanager v0.28.0. See this issue for details.

• BUGFIX: operator: properly throttle concurrent reconcile events on high load. By raising default value for the controller.maxConcurrentReconciles command-line flag from 5 to 15. See this issue for details.

• BUGFIX: vmoperator: properly track immutable fields changes for StatefulSet. See this issue for details.

• BUGFIX: vmcluster: properly propagate podMetadata to requestsLoadBalancer Deployment. See this PR for details. Thanks to the @​solidDoWant

• BUGFIX: vmauth: properly sort VMUsers at generated configuration. See this issue for details.

• BUGFIX: vmprobe: properly add vmProberSpec.scheme to the generated configuration. See this issue for details.

• BUGFIX: vmagent: properly apply remoteWriteSettings.maxDiskUsagePerURL global setting. Previously, if remoteWrite.MaxDiskUsage was set to 1 remoteWrite and others don't have this setting, default value was used instead of remoteWriteSettings. See this issue for details.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 51 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.22.3 -> 1.23.4
github.com/prometheus/prometheus	v0.49.1 -> v0.300.1
k8s.io/api	v0.30.2 -> v0.31.3
k8s.io/apiextensions-apiserver	v0.30.2 -> v0.31.3
github.com/Azure/azure-sdk-for-go/sdk/azcore	v1.12.0 -> v1.16.0
github.com/Azure/azure-sdk-for-go/sdk/azidentity	v1.6.0 -> v1.8.0
github.com/Azure/azure-sdk-for-go/sdk/internal	v1.9.0 -> v1.10.0
github.com/AzureAD/microsoft-authentication-library-for-go	v1.2.2 -> v1.3.2
github.com/VictoriaMetrics/VictoriaMetrics	v1.91.3 -> v1.107.0
github.com/VictoriaMetrics/metrics	v1.24.0 -> v1.35.1
github.com/VictoriaMetrics/metricsql	v0.56.2 -> v0.80.0
github.com/alecthomas/units	v0.0.0-20231202071711-9a357b53e9c9 -> v0.0.0-20240927000941-0f3dac36c52b
github.com/aws/aws-sdk-go	v1.53.3 -> v1.55.5
github.com/bmatcuk/doublestar/v4	v4.6.0 -> v4.7.1
github.com/go-logr/logr	v1.4.1 -> v1.4.2
github.com/grafana/regexp	v0.0.0-20221122212121-6b5c0a4cb7fd -> v0.0.0-20240518133315-a468a5bfb3bc
github.com/grpc-ecosystem/grpc-gateway/v2	v2.20.0 -> v2.22.0
github.com/klauspost/compress	v1.17.4 -> v1.17.11
github.com/prometheus/client_golang	v1.19.1 -> v1.20.5
github.com/prometheus/common	v0.53.0 -> v0.60.1
github.com/stretchr/testify	v1.9.0 -> v1.10.0
github.com/valyala/quicktemplate	v1.7.0 -> v1.8.0
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc	v0.51.0 -> v0.57.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	v0.51.0 -> v0.57.0
go.opentelemetry.io/otel	v1.27.0 -> v1.32.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace	v1.26.0 -> v1.30.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc	v1.26.0 -> v1.30.0
go.opentelemetry.io/otel/metric	v1.27.0 -> v1.32.0
go.opentelemetry.io/otel/sdk	v1.26.0 -> v1.32.0
go.opentelemetry.io/otel/trace	v1.27.0 -> v1.32.0
go.opentelemetry.io/proto/otlp	v1.2.0 -> v1.3.1
golang.org/x/crypto	v0.24.0 -> v0.31.0
golang.org/x/exp	v0.0.0-20240613232115-7f521ea00fb8 -> v0.0.0-20241108190413-2d47ceb2692f
golang.org/x/mod	v0.18.0 -> v0.22.0
golang.org/x/net	v0.26.0 -> v0.33.0
golang.org/x/oauth2	v0.20.0 -> v0.24.0
golang.org/x/sync	v0.7.0 -> v0.10.0
golang.org/x/sys	v0.21.0 -> v0.28.0
golang.org/x/term	v0.21.0 -> v0.27.0
golang.org/x/text	v0.16.0 -> v0.21.0
golang.org/x/time	v0.5.0 -> v0.8.0
golang.org/x/tools	v0.22.0 -> v0.27.0
google.golang.org/genproto/googleapis/api	v0.0.0-20240515191416-fc5f0ca64291 -> v0.0.0-20241118233622-e639e219e697
google.golang.org/genproto/googleapis/rpc	v0.0.0-20240624140628-dc46fd24d27d -> v0.0.0-20241118233622-e639e219e697
google.golang.org/grpc	v1.64.1 -> v1.68.0
google.golang.org/protobuf	v1.34.2 -> v1.35.2
k8s.io/apimachinery	v0.30.2 -> v0.31.3
k8s.io/apiserver	v0.30.2 -> v0.31.0
k8s.io/component-base	v0.30.2 -> v0.31.0
k8s.io/klog/v2	v2.120.1 -> v2.130.1
k8s.io/utils	v0.0.0-20240502163921-fe8a2dddb1d0 -> v0.0.0-20241104163129-6fe5fd82f078
sigs.k8s.io/controller-runtime	v0.18.4 -> v0.19.3

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: go get -t ./...
go: module github.com/VictoriaMetrics/operator/[email protected] requires go >= 1.25.0; switching to go1.25.2
go: downloading go1.25.2 (linux/amd64)
go: download go1.25.2: golang.org/[email protected]: verifying module: checksum database disabled by GOSUMDB=off