From 7fb1c20a5b4b0cd9b97e96a87a644b450e106918 Mon Sep 17 00:00:00 2001 From: Timon Engelke Date: Fri, 25 Sep 2026 15:51:59 +0200 Subject: [PATCH 1/2] Update rollout-operator usage Signed-off-by: Timon Engelke --- Chart.yaml | 1 + .../migrate_to_zone_aware_replication.markdown | 2 ++ values.yaml | 17 +++++++++++++++-- 3 files changed, 18 insertions(+), 2 deletions(-) diff --git a/Chart.yaml b/Chart.yaml index 48cb9bbe..24d1d7ff 100644 --- a/Chart.yaml +++ b/Chart.yaml @@ -42,6 +42,7 @@ dependencies: repository: https://charts.bitnami.com/bitnami condition: memcached-parquet-labels.enabled - name: rollout-operator + alias: rollout_operator version: 0.51.1 repository: https://grafana.github.io/helm-charts condition: rollout_operator.enabled diff --git a/docs/guides/migrate_to_zone_aware_replication.markdown b/docs/guides/migrate_to_zone_aware_replication.markdown index 766e394b..cdb95416 100644 --- a/docs/guides/migrate_to_zone_aware_replication.markdown +++ b/docs/guides/migrate_to_zone_aware_replication.markdown @@ -42,6 +42,8 @@ Make sure to set the following settings before starting the migration: It is sufficient to set these settings on the querier using `querier.extraArgs`. Set `distributor.sharding-strategy` to `default` and `distributor.shard-by-all-labels` to `"true"` there. Warning: This may increase resource usage of the queriers. + To get the rollout-operator running, you will have to install its CRDs. Due to Helm's CRD handling, you have to apply [these manifests](https://github.com/grafana/helm-charts/tree/main/charts/rollout-operator/charts/crds/crds) manually + 1. Set `ingester.zoneAwareReplication.enabled=true`, `ingester.zoneAwareReplication.migration.enabled=true`, `ingester.zoneAwareReplication.zones` to the desired zones but with `replicas=0`. Set `rollout_operator.enabled=true`. Upgrade the chart. ```yaml ingester: diff --git a/values.yaml b/values.yaml index 39611289..aedf89af 100644 --- a/values.yaml +++ b/values.yaml @@ -1849,5 +1849,18 @@ rollout_operator: enabled: false webhooks: enabled: false - crds: - enabled: false + podSecurityContext: + fsGroup: 10001 + runAsGroup: 10001 + runAsNonRoot: true + runAsUser: 10001 + seccompProfile: + type: RuntimeDefault + securityContext: + readOnlyRootFilesystem: true + capabilities: + drop: [ALL] + allowPrivilegeEscalation: false + runAsNonRoot: true + seccompProfile: + type: RuntimeDefault From 76571c15d07718c1907c675aefaaea8c8f341555 Mon Sep 17 00:00:00 2001 From: Timon Engelke Date: Fri, 25 Sep 2026 15:58:39 +0200 Subject: [PATCH 2/2] Update changelog Signed-off-by: Timon Engelke --- CHANGELOG.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index b8fddc84..08a16ee4 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,6 +2,8 @@ ## master / unreleased +* [ENHANCEMENT] Update helm values and documentation for rollout operator #673 + ## 3.4.0 / 2026-09-21 * [FEATURE] Add remote-write OTLP endpoint in nginx #667