feat(container)!: Update ghcr.io/prometheus-community/charts/kube-prometheus-stack (86.3.2 → 87.10.1)

[home-infrastructure-renovate]

This PR contains the following updates:

Package	Update	Change
ghcr.io/prometheus-community/charts/kube-prometheus-stack (source)	major	86.3.2 → 87.10.1

---

Configuration

📅 Schedule: (in timezone Europe/Berlin)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[github-actions]

--- kubernetes/infrastructure/monitoring/kube-prometheus-stack/app Kustomization: flux-system/kube-prometheus-stack OCIRepository: monitoring/kube-prometheus-stack

+++ kubernetes/infrastructure/monitoring/kube-prometheus-stack/app Kustomization: flux-system/kube-prometheus-stack OCIRepository: monitoring/kube-prometheus-stack

@@ -11,9 +11,9 @@

 spec:
   interval: 1h
   layerSelector:
     mediaType: application/vnd.cncf.helm.chart.content.v1.tar+gzip
     operation: copy
   ref:
-    tag: 86.3.2
+    tag: 87.10.1
   url: oci://ghcr.io/prometheus-community/charts/kube-prometheus-stack
 

[github-actions]

--- HelmRelease: monitoring/kube-prometheus-stack Deployment: monitoring/kube-prometheus-stack-operator

+++ HelmRelease: monitoring/kube-prometheus-stack Deployment: monitoring/kube-prometheus-stack-operator

@@ -31,20 +31,20 @@

         app: kube-prometheus-stack-operator
         app.kubernetes.io/name: kube-prometheus-stack-prometheus-operator
         app.kubernetes.io/component: prometheus-operator
     spec:
       containers:
       - name: kube-prometheus-stack
-        image: quay.io/prometheus-operator/prometheus-operator:v0.91.0
+        image: quay.io/prometheus-operator/prometheus-operator:v0.92.1
         imagePullPolicy: IfNotPresent
         args:
         - --kubelet-service=kube-system/kube-prometheus-stack-kubelet
         - --kubelet-endpoints=true
         - --kubelet-endpointslice=false
         - --localhost=127.0.0.1
-        - --prometheus-config-reloader=quay.io/prometheus-operator/prometheus-config-reloader:v0.91.0
+        - --prometheus-config-reloader=quay.io/prometheus-operator/prometheus-config-reloader:v0.92.1
         - --config-reloader-cpu-request=10m
         - --config-reloader-cpu-limit=0
         - --config-reloader-memory-request=40Mi
         - --config-reloader-memory-limit=40Mi
         - --thanos-default-base-image=quay.io/thanos/thanos:v0.41.0
         - --secret-field-selector=type!=kubernetes.io/dockercfg,type!=kubernetes.io/service-account-token,type!=helm.sh/release.v1
--- HelmRelease: monitoring/kube-prometheus-stack Alertmanager: monitoring/kube-prometheus-stack-alertmanager

+++ HelmRelease: monitoring/kube-prometheus-stack Alertmanager: monitoring/kube-prometheus-stack-alertmanager

@@ -9,15 +9,15 @@

     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/instance: kube-prometheus-stack
     app.kubernetes.io/part-of: kube-prometheus-stack
     release: kube-prometheus-stack
     heritage: Helm
 spec:
-  image: quay.io/prometheus/alertmanager:v0.33.0
+  image: quay.io/prometheus/alertmanager:v0.33.1
   imagePullPolicy: IfNotPresent
-  version: v0.33.0
+  version: v0.33.1
   replicas: 1
   listenLocal: false
   serviceAccountName: kube-prometheus-stack-alertmanager
   automountServiceAccountToken: true
   externalUrl: https://alertmanager.internal.denniseffing.de
   paused: false
--- HelmRelease: monitoring/kube-prometheus-stack Prometheus: monitoring/kube-prometheus-stack-prometheus

+++ HelmRelease: monitoring/kube-prometheus-stack Prometheus: monitoring/kube-prometheus-stack-prometheus

@@ -17,15 +17,15 @@

     alertmanagers:
     - namespace: monitoring
       name: kube-prometheus-stack-alertmanager
       port: http-web
       pathPrefix: /
       apiVersion: v2
-  image: quay.io/prometheus/prometheus:v3.12.0-distroless
+  image: quay.io/prometheus/prometheus:v3.13.0-distroless
   imagePullPolicy: IfNotPresent
-  version: v3.12.0-distroless
+  version: v3.13.0-distroless
   externalUrl: https://prometheus.internal.denniseffing.de
   paused: false
   replicas: 1
   shards: 1
   logLevel: info
   logFormat: logfmt
--- HelmRelease: monitoring/kube-prometheus-stack PrometheusRule: monitoring/kube-prometheus-stack-alertmanager.rules

+++ HelmRelease: monitoring/kube-prometheus-stack PrometheusRule: monitoring/kube-prometheus-stack-alertmanager.rules

@@ -152,7 +152,20 @@

           )
         )
         >= 0.5
       for: 5m
       labels:
         severity: critical
+    - alert: AlertmanagerClusterFailedPeers
+      annotations:
+        description: Alertmanager {{ $labels.namespace }}/{{ $labels.pod}} has {{
+          $value }} failed peers in the {{$labels.job}} cluster.
+        runbook_url: https://runbooks.prometheus-operator.dev/runbooks/alertmanager/alertmanagerclusterfailedpeers
+        summary: An Alertmanager instance has failed peers in the cluster.
+      expr: |-
+        # Without max_over_time, failed scrapes could create false negatives, see
+        # https://www.robustperception.io/alerting-on-gauges-in-prometheus-2-0 for details.
+        max_over_time(alertmanager_cluster_failed_peers{job="kube-prometheus-stack-alertmanager",container="alertmanager",namespace="monitoring"}[5m]) > 0
+      for: 15m
+      labels:
+        severity: warning