chore(deps): update helm release keda to v2.20.2

[renovate]

This PR contains the following updates:

Package	Update	Change
keda	patch	2.20.1 → 2.20.2

---

Release Notes

kedacore/keda (keda)

v2.20.2

Compare Source

Improvements

• General: Introduce a dedicated HPAActive condition on ScaledObject mirroring the HPA's own ScalingActive status, so transient HPA metric gaps no longer flip the Ready condition to False (#​7914)

Fixes

• General: Fix concurrent map writes panic in the shared root CA CertPool (#​7910)
• General: Fix nil pointer dereference in AWS Secret Manager TriggerAuthentication when awsSecretManager.credentials is omitted and no awsSecretManager.podIdentity is set (#​7927)
• General: Fix nil pointer dereference in customScalingStrategy.GetEffectiveMaxScale when customScalingQueueLengthDeduction is omitted; the optional field is now treated as zero deduction instead of panicking (#​7798)
• General: Fix nil pointer dereference in GetCurrentReplicas when a Deployment/StatefulSet/ReplicaSet is returned from the informer cache with an undefaulted spec.replicas; a nil value is now treated as the Kubernetes default of 1 instead of panicking (#​7863)
• General: Fix ScaledJob CRD validation to include "default" as a valid value for scalingStrategy.strategy (#​7855)
• General: Guard GetCurrentReplicas against nil Status.ScaleTargetGVKR to prevent operator panics under the cache race documented in (#​4389) / (#​4955)
• General: Restore core "" API group in events RBAC so that client-go's event broadcaster can write legacy events (#​7922)
• General: Restore gRPC reconnect backoff in the metrics service client; an unset Backoff in WithConnectParams disabled backoff and caused a zero-delay reconnect loop that flooded logs when keda-operator was unreachable (#​7856)
• General: Share HTTP transports across scalers to reuse connection pools and avoid re-dial storms at high ScaledObject counts (#​7789)
• General: Treat negative external metric values as zero to prevent incorrect HPA scaling (#​7880)
• Azure Blob Storage Scaler: Fix globPattern never matching when written in path-style with a leading /, since blob names never have one (#​6492)
• MongoDB Scaler: Disconnect the client when the initial Ping fails so the background topology-monitoring connections opened by mongo.Connect are not leaked (#​5612)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Helm Template Diff — keda — 2.20.1 → 2.20.2

166 changed lines

--- /tmp/old.yaml	2026-08-28 08:03:32.151395613 +0000
+++ /tmp/new.yaml	2026-08-28 08:03:31.920395057 +0000
@@ -6,11 +6,11 @@
   labels:
     app.kubernetes.io/name: keda-operator
     
-    helm.sh/chart: keda-2.20.1
+    helm.sh/chart: keda-2.20.2
     app.kubernetes.io/component: operator
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: keda-operator
-    app.kubernetes.io/version: 2.20.1
+    app.kubernetes.io/version: 2.20.2
     app.kubernetes.io/instance: keda
   name: keda-operator
   namespace: keda
@@ -23,11 +23,11 @@
   labels:
     app.kubernetes.io/name: keda-metrics-server
     
-    helm.sh/chart: keda-2.20.1
+    helm.sh/chart: keda-2.20.2
     app.kubernetes.io/component: operator
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: keda-operator
-    app.kubernetes.io/version: 2.20.1
+    app.kubernetes.io/version: 2.20.2
     app.kubernetes.io/instance: keda
   name: keda-metrics-server
   namespace: keda
@@ -40,11 +40,11 @@
   labels:
     app.kubernetes.io/name: keda-webhook
     
-    helm.sh/chart: keda-2.20.1
+    helm.sh/chart: keda-2.20.2
     app.kubernetes.io/component: operator
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: keda-operator
-    app.kubernetes.io/version: 2.20.1
+    app.kubernetes.io/version: 2.20.2
     app.kubernetes.io/instance: keda
   name: keda-webhook
   namespace: keda
@@ -58,11 +58,11 @@
     controller-gen.kubebuilder.io/version: v0.21.0
   labels:
     app.kubernetes.io/name: keda-operator    
-    helm.sh/chart: keda-2.20.1
+    helm.sh/chart: keda-2.20.2
     app.kubernetes.io/component: operator
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: keda-operator
-    app.kubernetes.io/version: 2.20.1
+    app.kubernetes.io/version: 2.20.2
   name: cloudeventsources.eventing.keda.sh
 spec:
   group: eventing.keda.sh
@@ -239,11 +239,11 @@
     controller-gen.kubebuilder.io/version: v0.21.0
   labels:
     app.kubernetes.io/name: keda-operator    
-    helm.sh/chart: keda-2.20.1
+    helm.sh/chart: keda-2.20.2
     app.kubernetes.io/component: operator
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: keda-operator
-    app.kubernetes.io/version: 2.20.1
+    app.kubernetes.io/version: 2.20.2
   name: clustercloudeventsources.eventing.keda.sh
 spec:
   group: eventing.keda.sh
@@ -418,11 +418,11 @@
     controller-gen.kubebuilder.io/version: v0.21.0
   labels:
     app.kubernetes.io/name: keda-operator    
-    helm.sh/chart: keda-2.20.1
+    helm.sh/chart: keda-2.20.2
     app.kubernetes.io/component: operator
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: keda-operator
-    app.kubernetes.io/version: 2.20.1
+    app.kubernetes.io/version: 2.20.2
   name: clustertriggerauthentications.keda.sh
 spec:
   group: keda.sh
@@ -1091,11 +1091,11 @@
     controller-gen.kubebuilder.io/version: v0.21.0
   labels:
     app.kubernetes.io/name: keda-operator    
-    helm.sh/chart: keda-2.20.1
+    helm.sh/chart: keda-2.20.2
     app.kubernetes.io/component: operator
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: keda-operator
-    app.kubernetes.io/version: 2.20.1
+    app.kubernetes.io/version: 2.20.2
   name: scaledjobs.keda.sh
 spec:
   group: keda.sh
@@ -1542,6 +1542,7 @@
                           namespace:
                             type: string
                         type: object
+                        x-kubernetes-preserve-unknown-fields: true
                       spec:
                         description: |-
                           Specification of the desired behavior of the pod.
@@ -3213,6 +3214,7 @@
                                         type: string
                                     required:
                                     - containerPort
+                                    - protocol
                                     type: object
                                   type: array
                                   x-kubernetes-list-map-keys:
@@ -4825,6 +4827,7 @@
                                         type: string
                                     required:
                                     - containerPort
+                                    - protocol
                                     type: object
                                   type: array
                                   x-kubernetes-list-map-keys:
@@ -6464,6 +6467,7 @@
                                         type: string
                                     required:
                                     - containerPort
+                                    - protocol
                                     type: object
                                   type: array
                                   x-kubernetes-list-map-keys:
@@ -10151,6 +10155,7 @@
                     type: array
                   strategy:
                     enum:
+                    - default
                     - custom
                     - accurate
                     - eager
@@ -10185,11 +10190,6 @@
                       additionalProperties:
                         type: string
                       type: object
-                    metricType:
-                      description: |-
-                        MetricTargetType specifies the type of metric being targeted, and should be either
-                        "Value", "AverageValue", or "Utilization"
-                      type: string
                     name:
                       type: string
                     type:
@@ -10271,11 +10271,11 @@
     controller-gen.kubebuilder.io/version: v0.21.0
   labels:
     app.kubernetes.io/name: keda-operator    
-    helm.sh/chart: keda-2.20.1
+    helm.sh/chart: keda-2.20.2
     app.kubernetes.io/component: operator
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: keda-operator
-    app.kubernetes.io/version: 2.20.1
+    app.kubernetes.io/version: 2.20.2
   name: scaledobjects.keda.sh
 spec:
   group: keda.sh
@@ -10413,6 +10413,8 @@
                                   - For scale up: 0 (i.e. no stabilization is done).
                                   - For scale down: 300 (i.e. the stabilization window is 300 seconds long).
                                 format: int32
+                                maximum: 3600
+                                minimum: 0
                                 type: integer
                               tolerance:
                                 anyOf:
@@ -10488,6 +10490,8 @@
                                   - For scale up: 0 (i.e. no stabilization is done).
                                   - For scale down: 300 (i.e. the stabilization window is 300 seconds long).
                                 format: int32
+                                maximum: 3600
+                                minimum: 0
                                 type: integer
                               tolerance:
                                 anyOf:
@@ -10759,11 +10763,11 @@
     controller-gen.kubebuilder.io/version: v0.21.0
   labels:
     app.kubernetes.io/name: keda-operator    
-    helm.sh/chart: keda-2.20.1
+    helm.sh/chart: keda-2.20.2
     app.kubernetes.io/component: operator
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: keda-operator
-    app.kubernetes.io/version: 2.20.1
+    app.kubernetes.io/version: 2.20.2
   name: triggerauthentications.keda.sh
 spec:
   group: keda.sh
@@ -11426,11 +11430,11 @@
 metadata:
   labels:
     app.kubernetes.io/name: keda-operator    
-    helm.sh/chart: keda-2.20.1
+    helm.sh/chart: keda-2.20.2
     app.kubernetes.io/component: operator
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: keda-operator
-    app.kubernetes.io/version: 2.20.1
+    app.kubernetes.io/version: 2.20.2
     app.kubernetes.io/instance: keda
   name: keda-operator
 rules:
@@ -11449,6 +11453,7 @@
   - watch
 - apiGroups:
   - events.k8s.io
+  - ""
   resources:
   - events
   verbs:
@@ -11567,11 +11572,11 @@
 metadata:
   labels:
     app.kubernetes.io/name: keda-operator-minimal-cluster-role    
-    helm.sh/chart: keda-2.20.1
+    helm.sh/chart: keda-2.20.2
     app.kubernetes.io/component: operator
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: keda-operator
-    app.kubernetes.io/version: 2.20.1
+    app.kubernetes.io/version: 2.20.2
     app.kubernetes.io/instance: keda
   name: keda-operator-minimal-cluster-role
 rules:
@@ -11627,11 +11632,11 @@
 metadata:
   labels:
     app.kubernetes.io/name: keda-operator-external-metrics-reader    
-    helm.sh/chart: keda-2.20.1
+    helm.sh/chart: keda-2.20.2
     app.kubernetes.io/component: operator
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: keda-operator
-    app.kubernetes.io/version: 2.20.1
+    app.kubernetes.io/version: 2.20.2
     app.kubernetes.io/instance: keda
   name: keda-operator-external-metrics-reader
 rules:
@@ -11648,11 +11653,11 @@
 metadata:
   labels:
     app.kubernetes.io/name: keda-operator-webhook    
-    helm.sh/chart: keda-2.20.1
+    helm.sh/chart: keda-2.20.2
     app.kubernetes.io/component: operator
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: keda-operator
-    app.kubernetes.io/version: 2.20.1
+    app.kubernetes.io/version: 2.20.2
     app.kubernetes.io/instance: keda
   name: keda-operator-webhook
 rules:
@@ -11699,11 +11704,11 @@
 metadata:
   labels:
     app.kubernetes.io/name: keda-operator    
-    helm.sh/chart: keda-2.20.1
+    helm.sh/chart: keda-2.20.2
     app.kubernetes.io/component: operator
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: keda-operator
-    app.kubernetes.io/version: 2.20.1
+    app.kubernetes.io/version: 2.20.2
     app.kubernetes.io/instance: keda
   name: keda-operator
 roleRef:
@@ -11722,11 +11727,11 @@
 metadata:
   labels:
     app.kubernetes.io/name: keda-operator-minimal    
-    helm.sh/chart: keda-2.20.1
+    helm.sh/chart: keda-2.20.2
     app.kubernetes.io/component: operator
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: keda-operator
-    app.kubernetes.io/version: 2.20.1
+    app.kubernetes.io/version: 2.20.2
     app.kubernetes.io/instance: keda
   name: keda-operator-minimal
 roleRef:
@@ -11745,11 +11750,11 @@
 metadata:
   labels:
     app.kubernetes.io/name: keda-operator-system-auth-delegator    
-    helm.sh/chart: keda-2.20.1
+    helm.sh/chart: keda-2.20.2
     app.kubernetes.io/component: operator
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: keda-operator
-    app.kubernetes.io/version: 2.20.1
+    app.kubernetes.io/version: 2.20.2
     app.kubernetes.io/instance: keda
   name: keda-operator-system-auth-delegator
 roleRef:
@@ -11768,11 +11773,11 @@
 metadata:
   labels:
     app.kubernetes.io/name: keda-operator-hpa-controller-external-metrics    
-    helm.sh/chart: keda-2.20.1
+    helm.sh/chart: keda-2.20.2
     app.kubernetes.io/component: operator
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: keda-operator
-    app.kubernetes.io/version: 2.20.1
+    app.kubernetes.io/version: 2.20.2
     app.kubernetes.io/instance: keda
   name: keda-operator-hpa-controller-external-metrics
 roleRef:
@@ -11790,11 +11795,11 @@
 metadata:
   labels:
     app.kubernetes.io/name: keda-operator-webhook    
-    helm.sh/chart: keda-2.20.1
+    helm.sh/chart: keda-2.20.2
     app.kubernetes.io/component: operator
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: keda-operator
-    app.kubernetes.io/version: 2.20.1
+    app.kubernetes.io/version: 2.20.2
     app.kubernetes.io/instance: keda
   name: keda-operator-webhook
 roleRef:
@@ -11813,11 +11818,11 @@
 metadata:
   labels:
     app.kubernetes.io/name: keda-operator-certs    
-    helm.sh/chart: keda-2.20.1
+    helm.sh/chart: keda-2.20.2
     app.kubernetes.io/component: operator
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: keda-operator
-    app.kubernetes.io/version: 2.20.1
+    app.kubernetes.io/version: 2.20.2
     app.kubernetes.io/instance: keda
   name: keda-operator-certs
   namespace: keda
@@ -11857,11 +11862,11 @@
 metadata:
   labels:
     app.kubernetes.io/name: keda-operator-certs    
-    helm.sh/chart: keda-2.20.1
+    helm.sh/chart: keda-2.20.2
     app.kubernetes.io/component: operator
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: keda-operator
-    app.kubernetes.io/version: 2.20.1
+    app.kubernetes.io/version: 2.20.2
     app.kubernetes.io/instance: keda
   name: keda-operator-certs
   namespace: keda
@@ -11882,11 +11887,11 @@
 metadata:
   labels:
     app.kubernetes.io/name: keda-operator-auth-reader    
-    helm.sh/chart: keda-2.20.1
+    helm.sh/chart: keda-2.20.2
     app.kubernetes.io/component: operator
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: keda-operator
-    app.kubernetes.io/version: 2.20.1
+    app.kubernetes.io/version: 2.20.2
     app.kubernetes.io/instance: keda
   name: keda-operator-auth-reader
   namespace: kube-system
@@ -11906,11 +11911,11 @@
 metadata:
   labels:
     app.kubernetes.io/name: keda-operator    
-    helm.sh/chart: keda-2.20.1
+    helm.sh/chart: keda-2.20.2
     app.kubernetes.io/component: operator
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: keda-operator
-    app.kubernetes.io/version: 2.20.1
+    app.kubernetes.io/version: 2.20.2
     app.kubernetes.io/instance: keda
   name: keda-operator
   namespace: keda
@@ -11930,11 +11935,11 @@
   labels:
     app.kubernetes.io/name: keda-operator-metrics-apiserver
     app: keda-operator-metrics-apiserver    
-    helm.sh/chart: keda-2.20.1
+    helm.sh/chart: keda-2.20.2
     app.kubernetes.io/component: operator
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: keda-operator
-    app.kubernetes.io/version: 2.20.1
+    app.kubernetes.io/version: 2.20.2
     app.kubernetes.io/instance: keda
   name: keda-operator-metrics-apiserver
   namespace: keda
@@ -11960,11 +11965,11 @@
 metadata:
   labels:
     app.kubernetes.io/name: keda-admission-webhooks    
-    helm.sh/chart: keda-2.20.1
+    helm.sh/chart: keda-2.20.2
     app.kubernetes.io/component: operator
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: keda-operator
-    app.kubernetes.io/version: 2.20.1
+    app.kubernetes.io/version: 2.20.2
     app.kubernetes.io/instance: keda
   name: keda-admission-webhooks
   namespace: keda
@@ -11989,11 +11994,11 @@
     app: keda-operator
     name: keda-operator
     app.kubernetes.io/name: keda-operator    
-    helm.sh/chart: keda-2.20.1
+    helm.sh/chart: keda-2.20.2
     app.kubernetes.io/component: operator
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: keda-operator
-    app.kubernetes.io/version: 2.20.1
+    app.kubernetes.io/version: 2.20.2
     app.kubernetes.io/instance: keda
 spec:
   revisionHistoryLimit: 10
@@ -12007,11 +12012,11 @@
         app: keda-operator
         name: keda-operator
         app.kubernetes.io/name: keda-operator        
-        helm.sh/chart: keda-2.20.1
+        helm.sh/chart: keda-2.20.2
         app.kubernetes.io/component: operator
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/part-of: keda-operator
-        app.kubernetes.io/version: 2.20.1
+        app.kubernetes.io/version: 2.20.2
         app.kubernetes.io/instance: keda
     spec:
       enableServiceLinks: true
@@ -12029,7 +12034,7 @@
             readOnlyRootFilesystem: true
             seccompProfile:
               type: RuntimeDefault
-          image: "ghcr.io/kedacore/keda:2.20.1"
+          image: "ghcr.io/kedacore/keda:2.20.2"
           command:
           - "/keda"
           args:
@@ -12048,6 +12053,9 @@
           - "--k8s-cluster-name=kubernetes-default"
           - "--k8s-cluster-domain=cluster.local"
           - "--enable-prometheus-metrics=false"
+          - "--http-max-idle-conns=0"
+          - "--http-max-idle-conns-per-host=1000"
+          - "--http-idle-conn-timeout=90s"
           imagePullPolicy: Always
           livenessProbe:
             httpGet:
@@ -12126,11 +12134,11 @@
   labels:
     app: keda-operator-metrics-apiserver
     app.kubernetes.io/name: keda-operator-metrics-apiserver    
-    helm.sh/chart: keda-2.20.1
+    helm.sh/chart: keda-2.20.2
     app.kubernetes.io/component: operator
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: keda-operator
-    app.kubernetes.io/version: 2.20.1
+    app.kubernetes.io/version: 2.20.2
     app.kubernetes.io/instance: keda
 spec:
   revisionHistoryLimit: 10
@@ -12143,11 +12151,11 @@
       labels:
         app: keda-operator-metrics-apiserver
         app.kubernetes.io/name: keda-operator-metrics-apiserver        
-        helm.sh/chart: keda-2.20.1
+        helm.sh/chart: keda-2.20.2
         app.kubernetes.io/component: operator
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/part-of: keda-operator
-        app.kubernetes.io/version: 2.20.1
+        app.kubernetes.io/version: 2.20.2
         app.kubernetes.io/instance: keda
     spec:
       enableServiceLinks: true
@@ -12165,7 +12173,7 @@
             readOnlyRootFilesystem: true
             seccompProfile:
               type: RuntimeDefault
-          image: "ghcr.io/kedacore/keda-metrics-apiserver:2.20.1"
+          image: "ghcr.io/kedacore/keda-metrics-apiserver:2.20.2"
           imagePullPolicy: Always
           livenessProbe:
             httpGet:
@@ -12260,11 +12268,11 @@
     app: keda-admission-webhooks
     name: keda-admission-webhooks
     app.kubernetes.io/name: keda-admission-webhooks    
-    helm.sh/chart: keda-2.20.1
+    helm.sh/chart: keda-2.20.2
     app.kubernetes.io/component: operator
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: keda-operator
-    app.kubernetes.io/version: 2.20.1
+    app.kubernetes.io/version: 2.20.2
     app.kubernetes.io/instance: keda
 spec:
   revisionHistoryLimit: 10
@@ -12278,11 +12286,11 @@
         app: keda-admission-webhooks
         name: keda-admission-webhooks
         app.kubernetes.io/name: keda-admission-webhooks        
-        helm.sh/chart: keda-2.20.1
+        helm.sh/chart: keda-2.20.2
         app.kubernetes.io/component: operator
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/part-of: keda-operator
-        app.kubernetes.io/version: 2.20.1
+        app.kubernetes.io/version: 2.20.2
         app.kubernetes.io/instance: keda
     spec:
       enableServiceLinks: true
@@ -12300,7 +12308,7 @@
             readOnlyRootFilesystem: true
             seccompProfile:
               type: RuntimeDefault
-          image: "ghcr.io/kedacore/keda-admission-webhooks:2.20.1"
+          image: "ghcr.io/kedacore/keda-admission-webhooks:2.20.2"
           command:
           - /keda-admission-webhooks
           args:
@@ -12371,11 +12379,11 @@
 metadata:
   labels:
     app.kubernetes.io/name: v1beta1.external.metrics.k8s.io    
-    helm.sh/chart: keda-2.20.1
+    helm.sh/chart: keda-2.20.2
     app.kubernetes.io/component: operator
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: keda-operator
-    app.kubernetes.io/version: 2.20.1
+    app.kubernetes.io/version: 2.20.2
     app.kubernetes.io/instance: keda
   name: v1beta1.external.metrics.k8s.io
 spec:
@@ -12395,11 +12403,11 @@
 metadata:
   labels:
     app.kubernetes.io/name: keda-admission-webhooks    
-    helm.sh/chart: keda-2.20.1
+    helm.sh/chart: keda-2.20.2
     app.kubernetes.io/component: operator
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: keda-operator
-    app.kubernetes.io/version: 2.20.1
+    app.kubernetes.io/version: 2.20.2
     app.kubernetes.io/instance: keda
   name: keda-admission
 webhooks:
@@ -12559,11 +12567,11 @@
     app: keda-operator
     name: keda-operator
     app.kubernetes.io/name: keda-operator    
-    helm.sh/chart: keda-2.20.1
+    helm.sh/chart: keda-2.20.2
     app.kubernetes.io/component: operator
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: keda-operator
-    app.kubernetes.io/version: 2.20.1
+    app.kubernetes.io/version: 2.20.2
     app.kubernetes.io/instance: keda
 spec:
   endpointSelector:
@@ -12588,11 +12596,11 @@
   labels:
     app: keda-operator-metrics-apiserver
     app.kubernetes.io/name: keda-operator-metrics-apiserver    
-    helm.sh/chart: keda-2.20.1
+    helm.sh/chart: keda-2.20.2
     app.kubernetes.io/component: operator
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: keda-operator
-    app.kubernetes.io/version: 2.20.1
+    app.kubernetes.io/version: 2.20.2
     app.kubernetes.io/instance: keda
 spec:
   endpointSelector:
@@ -12618,11 +12626,11 @@
     app: keda-admission-webhooks
     name: keda-admission-webhooks
     app.kubernetes.io/name: keda-admission-webhooks    
-    helm.sh/chart: keda-2.20.1
+    helm.sh/chart: keda-2.20.2
     app.kubernetes.io/component: operator
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: keda-operator
-    app.kubernetes.io/version: 2.20.1
+    app.kubernetes.io/version: 2.20.2
     app.kubernetes.io/instance: keda
 spec:
   endpointSelector:

[lunarys]

Renovate Review: keda 2.20.1 → 2.20.2 (patch, keda app)

Risk: 🟡 MEDIUM

Check	Result
Inputs	Complete — PR body has a real, categorized ### Release Notes (Improvements/Fixes); one matching diff comment (03-apps-apps-keda) present.
Description vs. diff	Consistent — sole file changed is 03_apps/apps/keda/app.yaml (helm.version: 2.20.1 → 2.20.2), matches the PR table, no scope beyond the keda app.
Rendered diff	Full, no truncation (166 changed lines, all shown) — mostly cosmetic label/version bumps and image tag bumps, plus additive CRD schema changes and three new operator startup args (--http-max-idle-conns=0, --http-max-idle-conns-per-host=1000, --http-idle-conn-timeout=90s, matching the changelog's "share HTTP transports across scalers" fix). One genuine RBAC rule change (below).
RBAC	ClusterRole/keda-operator — an existing rule's apiGroups gains "" alongside events.k8s.io for the events resource (verbs unchanged, not shown as they didn't diff). This matches the changelog's "Restore core "" API group in events RBAC so client-go's event broadcaster can write legacy events" fix — additive, narrow (events only, not secrets/pods/nodes), but it's a cluster-scoped grant change, so per policy it's treated as at least Medium on its own.
Changelog vs. config	No overlap with live config — 03_apps/apps/keda/values.yaml sets only networkPolicy.enabled: true; nothing there touches RBAC, CRD strategy fields, or HTTP transport settings.

Details:

• CRD schema (owned by keda, group keda.sh/eventing.keda.sh): scalingStrategy.strategy enum gains default (matches "Fix ScaledJob CRD validation to include 'default' as a valid value" exactly); containerPort schemas gain a required protocol field (×3, in CRDs scaledjobs.keda.sh); stabilizationWindowSeconds gains minimum: 0/maximum: 3600 bounds; a metricType field description is removed from a nested block in the same CRD area — all additive/tightening, none removes anything this repo instantiates.
• §6.6 cross-component check ran (keda owns CRDs and the changelog explicitly calls out a CRD validation fix): grepped the repo outside 03_apps/apps/keda/ for keda.sh/eventing.keda.sh in apiVersion: fields — zero hits. No other component in this repo creates ScaledObject/ScaledJob/TriggerAuthentication/CloudEventSource resources, so the CRD schema changes have no live blast radius.
• 03_apps/apps/keda/app.yaml requests additionalNamespaces: [kube-system] for the external-metrics ClusterRoleBinding — unrelated to this bump, unchanged.

Why MEDIUM: solely due to the ClusterRole/keda-operator rule change — a cluster-scoped RBAC grant addition is treated as at least Medium regardless of how narrow or well-documented it is; everything else in this diff is cosmetic or additive with no live-config overlap.

---

Generated by Claude Code