chore(deps): update docker.io/grafana/loki docker tag to v3.5.3 (main)

[renovate]

This PR contains the following updates:

Package	Update	Change
docker.io/grafana/loki	patch	3.5.2 -> 3.5.3

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Helm Diff Output - Summary

Default Values Scenario-diff-output

default, loki, ConfigMap (v1) has changed:
  # Source: loki/templates/config.yaml
  apiVersion: v1
  kind: ConfigMap
  metadata:
    name: loki
    namespace: default
    labels:
      helm.sh/chart: loki-6.33.0
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.5.2"
+     app.kubernetes.io/version: "3.5.3"
  data:
    config.yaml: |
      
      auth_enabled: true
      bloom_build:
        builder:
          planner_address: loki-backend-headless.default.svc.cluster.local:9095
        enabled: false
      bloom_gateway:
        client:
          addresses: dnssrvnoa+_grpc._tcp.loki-backend-headless.default.svc.cluster.local
        enabled: false
      chunk_store_config:
        chunk_cache_config:
          background:
            writeback_buffer: 500000
            writeback_goroutines: 1
            writeback_size_limit: 500MB
          default_validity: 0s
          memcached:
            batch_size: 4
            parallelism: 5
          memcached_client:
            addresses: dnssrvnoa+_memcached-client._tcp.loki-release-chunks-cache.default.svc
            consistent_hash: true
            max_idle_conns: 72
            timeout: 2000ms
      common:
        compactor_address: 'http://loki-backend:3100'
        path_prefix: /var/loki
        replication_factor: 1
        storage:
          s3:
            bucketnames: chunks
            insecure: false
            s3forcepathstyle: false
      frontend:
        scheduler_address: ""
        tail_proxy_url: ""
      frontend_worker:
        scheduler_address: ""
      index_gateway:
        mode: simple
      limits_config:
        max_cache_freshness_per_query: 10m
        query_timeout: 300s
        reject_old_samples: true
        reject_old_samples_max_age: 168h
        split_queries_by_interval: 15m
        volume_enabled: true
      memberlist:
        join_members:
        - loki-memberlist
      pattern_ingester:
        enabled: false
      query_range:
        align_queries_with_step: true
        cache_results: true
        results_cache:
          cache:
            background:
              writeback_buffer: 500000
              writeback_goroutines: 1
              writeback_size_limit: 500MB
            default_validity: 12h
            memcached_client:
              addresses: dnssrvnoa+_memcached-client._tcp.loki-release-results-cache.default.svc
              consistent_hash: true
              timeout: 500ms
              update_interval: 1m
      ruler:
        storage:
          s3:
            bucketnames: ruler
            insecure: false
            s3forcepathstyle: false
          type: s3
        wal:
          dir: /var/loki/ruler-wal
      runtime_config:
        file: /etc/loki/runtime-config/runtime-config.yaml
      schema_config:
        configs:
        - from: "2024-04-01"
          index:
            period: 24h
            prefix: index_
          object_store: 'filesystem'
          schema: v13
          store: tsdb
      server:
        grpc_listen_port: 9095
        http_listen_port: 3100
        http_server_read_timeout: 600s
        http_server_write_timeout: 600s
      storage_config:
        bloom_shipper:
          working_directory: /var/loki/data/bloomshipper
        boltdb_shipper:
          index_gateway_client:
            server_address: dns+loki-backend-headless.default.svc.cluster.local:9095
        hedging:
          at: 250ms
          max_per_second: 20
          up_to: 3
        tsdb_shipper:
          index_gateway_client:
            server_address: dns+loki-backend-headless.default.svc.cluster.local:9095
        use_thanos_objstore: false
      tracing:
        enabled: false
default, loki, ServiceAccount (v1) has changed:
  # Source: loki/templates/serviceaccount.yaml
  apiVersion: v1
  kind: ServiceAccount
  metadata:
    name: loki
    namespace: default
    labels:
      helm.sh/chart: loki-6.33.0
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.5.2"
+     app.kubernetes.io/version: "3.5.3"
  automountServiceAccountToken: true
default, loki-backend, Service (v1) has changed:
  # Source: loki/templates/backend/service-backend.yaml
  apiVersion: v1
  kind: Service
  metadata:
    name: loki-backend
    namespace: default
    labels:
      helm.sh/chart: loki-6.33.0
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.5.2"
+     app.kubernetes.io/version: "3.5.3"
      app.kubernetes.io/component: backend
    annotations:
  spec:
    type: ClusterIP
    ports:
      - name: http-metrics
        port: 3100
        targetPort: http-metrics
        protocol: TCP
      - name: grpc
        port: 9095
        targetPort: grpc
        protocol: TCP
    selector:
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
      app.kubernetes.io/component: backend
default, loki-backend, StatefulSet (apps) has changed:
  # Source: loki/templates/backend/statefulset-backend.yaml
  apiVersion: apps/v1
  kind: StatefulSet
  metadata:
    name: loki-backend
    namespace: default
    labels:
      helm.sh/chart: loki-6.33.0
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.5.2"
+     app.kubernetes.io/version: "3.5.3"
      app.kubernetes.io/component: backend
      app.kubernetes.io/part-of: memberlist
  spec:
    replicas: 1
    podManagementPolicy: Parallel
    updateStrategy:
      rollingUpdate:
        partition: 0
    serviceName: loki-backend-headless
    revisionHistoryLimit: 10
    
    persistentVolumeClaimRetentionPolicy:
      whenDeleted: Delete
      whenScaled: Delete
    selector:
      matchLabels:
        app.kubernetes.io/name: loki
        app.kubernetes.io/instance: loki-release
        app.kubernetes.io/component: backend
    template:
      metadata:
        annotations:
          checksum/config: d44ac47f1bec49fac37c5234efe915579ab23d0b61fd828895d73842ca01d67c
          kubectl.kubernetes.io/default-container: "loki"
        labels:
          helm.sh/chart: loki-6.33.0
          app.kubernetes.io/name: loki
          app.kubernetes.io/instance: loki-release
-         app.kubernetes.io/version: "3.5.2"
+         app.kubernetes.io/version: "3.5.3"
          app.kubernetes.io/component: backend
          app.kubernetes.io/part-of: memberlist
      spec:
        serviceAccountName: loki
        automountServiceAccountToken: true
        
        securityContext:
          fsGroup: 10001
          runAsGroup: 10001
          runAsNonRoot: true
          runAsUser: 10001
        terminationGracePeriodSeconds: 300
        containers:
          - name: loki
-           image: docker.io/grafana/loki:3.5.2
+           image: docker.io/grafana/loki:3.5.3
            imagePullPolicy: IfNotPresent
            args:
              - -config.file=/etc/loki/config/config.yaml
              - -target=backend
              - -legacy-read-mode=false
            ports:
              - name: http-metrics
                containerPort: 3100
                protocol: TCP
              - name: grpc
                containerPort: 9095
                protocol: TCP
              - name: http-memberlist
                containerPort: 7946
                protocol: TCP
            securityContext:
              allowPrivilegeEscalation: false
              capabilities:
                drop:
                - ALL
              readOnlyRootFilesystem: true
            readinessProbe:
              httpGet:
                path: /ready
                port: http-metrics
              initialDelaySeconds: 30
              timeoutSeconds: 1
            volumeMounts:
              - name: config
                mountPath: /etc/loki/config
              - name: runtime-config
                mountPath: /etc/loki/runtime-config
              - name: tmp
                mountPath: /tmp
              - name: data
                mountPath: /var/loki
              - name: sc-rules-volume
                mountPath: "/rules"
            resources:
              {}
          - name: loki-sc-rules
            image: "kiwigrid/k8s-sidecar:1.30.7"
            imagePullPolicy: IfNotPresent
            env:
              - name: METHOD
                value: WATCH
              - name: LABEL
                value: "loki_rule"
              - name: FOLDER
                value: "/rules"
              - name: RESOURCE
                value: "both"
              - name: WATCH_SERVER_TIMEOUT
                value: "60"
              - name: WATCH_CLIENT_TIMEOUT
                value: "60"
              - name: LOG_LEVEL
                value: "INFO"
            securityContext:
              allowPrivilegeEscalation: false
              capabilities:
                drop:
                - ALL
              readOnlyRootFilesystem: true
            volumeMounts:
              - name: sc-rules-volume
                mountPath: "/rules"
        affinity:
          podAntiAffinity:
            requiredDuringSchedulingIgnoredDuringExecution:
            - labelSelector:
                matchLabels:
                  app.kubernetes.io/component: backend
              topologyKey: kubernetes.io/hostname
        volumes:
          - name: tmp
            emptyDir: {}
          - name: config
            configMap:
              name: loki
              items:
                - key: "config.yaml"
                  path: "config.yaml"
          - name: runtime-config
            configMap:
              name: loki-runtime
          - name: sc-rules-volume
            emptyDir: {}
    volumeClaimTemplates:
      - apiVersion: v1
        kind: PersistentVolumeClaim
        metadata:
          name: data
        spec:
          accessModes:
            - ReadWriteOnce
          resources:
            requests:
              storage: "10Gi"
default, loki-canary, DaemonSet (apps) has changed:
  # Source: loki/templates/loki-canary/daemonset.yaml
  apiVersion: apps/v1
  kind: DaemonSet
  metadata:
    name: loki-canary
    namespace: default
    labels:
      helm.sh/chart: loki-6.33.0
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.5.2"
+     app.kubernetes.io/version: "3.5.3"
      app.kubernetes.io/component: canary
  spec:
    selector:
      matchLabels:
        app.kubernetes.io/name: loki
        app.kubernetes.io/instance: loki-release
        app.kubernetes.io/component: canary
    updateStrategy:
      rollingUpdate:
        maxUnavailable: 1
      type: RollingUpdate
    template:
      metadata:
        labels:
          app.kubernetes.io/name: loki
          app.kubernetes.io/instance: loki-release
          app.kubernetes.io/component: canary
      spec:
        serviceAccountName: loki-canary
        
        securityContext:
          fsGroup: 10001
          runAsGroup: 10001
          runAsNonRoot: true
          runAsUser: 10001
        containers:
          - name: loki-canary
            image: docker.io/grafana/loki-canary:3.5.2
            imagePullPolicy: IfNotPresent
            args:
              - -addr=loki-release-gateway.default.svc.cluster.local.:80
              - -labelname=pod
              - -labelvalue=$(POD_NAME)
              - -user=self-monitoring
              - -tenant-id=self-monitoring
              - -pass=
              - -push=true
            securityContext:
              allowPrivilegeEscalation: false
              capabilities:
                drop:
                - ALL
              readOnlyRootFilesystem: true
            volumeMounts:
            ports:
              - name: http-metrics
                containerPort: 3500
                protocol: TCP
            env:
              - name: POD_NAME
                valueFrom:
                  fieldRef:
                    fieldPath: metadata.name
              
            readinessProbe:
              httpGet:
                path: /metrics
                port: http-metrics
              initialDelaySeconds: 15
              timeoutSeconds: 1
        volumes:
default, loki-canary, Service (v1) has changed:
  # Source: loki/templates/loki-canary/service.yaml
  apiVersion: v1
  kind: Service
  metadata:
    name: loki-canary
    namespace: default
    labels:
      helm.sh/chart: loki-6.33.0
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.5.2"
+     app.kubernetes.io/version: "3.5.3"
      app.kubernetes.io/component: canary
    annotations:
  spec:
    type: ClusterIP
    ports:
      - name: http-metrics
        port: 3500
        targetPort: http-metrics
        protocol: TCP
    selector:
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
      app.kubernetes.io/component: canary
default, loki-canary, ServiceAccount (v1) has changed:
  # Source: loki/templates/loki-canary/serviceaccount.yaml
  apiVersion: v1
  kind: ServiceAccount
  metadata:
    name: loki-canary
    namespace: default
    labels:
      helm.sh/chart: loki-6.33.0
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.5.2"
+     app.kubernetes.io/version: "3.5.3"
      app.kubernetes.io/component: canary
  automountServiceAccountToken: true
default, loki-memberlist, Service (v1) has changed:
  # Source: loki/templates/service-memberlist.yaml
  apiVersion: v1
  kind: Service
  metadata:
    name: loki-memberlist
    namespace: default
    labels:
      helm.sh/chart: loki-6.33.0
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.5.2"
+     app.kubernetes.io/version: "3.5.3"
    annotations:
  spec:
    type: ClusterIP
    clusterIP: None
    ports:
      - name: tcp
        port: 7946
        targetPort: http-memberlist
        protocol: TCP
    selector:
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
      app.kubernetes.io/part-of: memberlist
default, loki-read, Deployment (apps) has changed:
  # Source: loki/templates/read/deployment-read.yaml
  apiVersion: apps/v1
  kind: Deployment
  metadata:
    name: loki-read
    namespace: default
    labels:
      app.kubernetes.io/part-of: memberlist
      helm.sh/chart: loki-6.33.0
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.5.2"
+     app.kubernetes.io/version: "3.5.3"
      app.kubernetes.io/component: read
  spec:
    replicas: 1
    strategy:
      rollingUpdate:
        maxSurge: 0
        maxUnavailable: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        app.kubernetes.io/name: loki
        app.kubernetes.io/instance: loki-release
        app.kubernetes.io/component: read
    template:
      metadata:
        annotations:
          checksum/config: d44ac47f1bec49fac37c5234efe915579ab23d0b61fd828895d73842ca01d67c
        labels:
          app.kubernetes.io/part-of: memberlist
          app.kubernetes.io/name: loki
          app.kubernetes.io/instance: loki-release
          app.kubernetes.io/component: read
      spec:
        serviceAccountName: loki
        automountServiceAccountToken: true
        
        securityContext:
          fsGroup: 10001
          runAsGroup: 10001
          runAsNonRoot: true
          runAsUser: 10001
        terminationGracePeriodSeconds: 30
        containers:
          - name: loki
-           image: docker.io/grafana/loki:3.5.2
+           image: docker.io/grafana/loki:3.5.3
            imagePullPolicy: IfNotPresent
            args:
              - -config.file=/etc/loki/config/config.yaml
              - -target=read
              - -legacy-read-mode=false
              - -common.compactor-grpc-address=loki-backend.default.svc.cluster.local:9095
            ports:
              - name: http-metrics
                containerPort: 3100
                protocol: TCP
              - name: grpc
                containerPort: 9095
                protocol: TCP
              - name: http-memberlist
                containerPort: 7946
                protocol: TCP
            securityContext:
              allowPrivilegeEscalation: false
              capabilities:
                drop:
                - ALL
              readOnlyRootFilesystem: true
            readinessProbe:
              httpGet:
                path: /ready
                port: http-metrics
              initialDelaySeconds: 30
              timeoutSeconds: 1
            volumeMounts:
              - name: config
                mountPath: /etc/loki/config
              - name: runtime-config
                mountPath: /etc/loki/runtime-config
              - name: tmp
                mountPath: /tmp
              - name: data
                mountPath: /var/loki
            resources:
              {}
        affinity:
          podAntiAffinity:
            requiredDuringSchedulingIgnoredDuringExecution:
            - labelSelector:
                matchLabels:
                  app.kubernetes.io/component: read
              topologyKey: kubernetes.io/hostname
        volumes:
          - name: tmp
            emptyDir: {}
          - name: data
            emptyDir: {}
          - name: config
            configMap:
              name: loki
              items:
                - key: "config.yaml"
                  path: "config.yaml"
          - name: runtime-config
            configMap:
              name: loki-runtime
default, loki-read, Service (v1) has changed:
  # Source: loki/templates/read/service-read.yaml
  apiVersion: v1
  kind: Service
  metadata:
    name: loki-read
    namespace: default
    labels:
      helm.sh/chart: loki-6.33.0
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.5.2"
+     app.kubernetes.io/version: "3.5.3"
      app.kubernetes.io/component: read
    annotations:
  spec:
    type: ClusterIP
    ports:
      - name: http-metrics
        port: 3100
        targetPort: http-metrics
        protocol: TCP
      - name: grpc
        port: 9095
        targetPort: grpc
        protocol: TCP
    selector:
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
      app.kubernetes.io/component: read
default, loki-release-chunks-cache, Service (v1) has changed:
  # Source: loki/templates/chunks-cache/service-chunks-cache-headless.yaml
  apiVersion: v1
  kind: Service
  metadata:
    name: loki-release-chunks-cache
    labels:
      helm.sh/chart: loki-6.33.0
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.5.2"
+     app.kubernetes.io/version: "3.5.3"
      app.kubernetes.io/component: "memcached-chunks-cache"
    annotations:
      {}
    namespace: "default"
  spec:
    type: ClusterIP
    clusterIP: None
    ports:
      - name: memcached-client
        port: 11211
        targetPort: 11211
      - name: http-metrics
        port: 9150
        targetPort: 9150
      
    selector:
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
      app.kubernetes.io/component: "memcached-chunks-cache"
default, loki-release-chunks-cache, StatefulSet (apps) has changed:
  # Source: loki/templates/chunks-cache/statefulset-chunks-cache.yaml
  apiVersion: apps/v1
  kind: StatefulSet
  metadata:
    name: loki-release-chunks-cache
    labels:
      helm.sh/chart: loki-6.33.0
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.5.2"
+     app.kubernetes.io/version: "3.5.3"
      app.kubernetes.io/component: "memcached-chunks-cache"
      name: "memcached-chunks-cache"
    annotations:
      {}
    namespace: "default"
  spec:
    podManagementPolicy: Parallel
    replicas: 1
    selector:
      matchLabels:
        app.kubernetes.io/name: loki
        app.kubernetes.io/instance: loki-release
        app.kubernetes.io/component: "memcached-chunks-cache"
        name: "memcached-chunks-cache"
    updateStrategy:
      type: RollingUpdate
    serviceName: loki-release-chunks-cache

    template:
      metadata:
        labels:
          app.kubernetes.io/name: loki
          app.kubernetes.io/instance: loki-release
          app.kubernetes.io/component: "memcached-chunks-cache"
          name: "memcached-chunks-cache"
        annotations:

      spec:
        serviceAccountName: loki
        securityContext:
          fsGroup: 11211
          runAsGroup: 11211
          runAsNonRoot: true
          runAsUser: 11211
        initContainers:
          []
        nodeSelector:
          {}
        affinity:
          {}
        topologySpreadConstraints:
          []
        tolerations:
          []
        terminationGracePeriodSeconds: 60
        containers:
          - name: memcached
            image: memcached:1.6.38-alpine
            imagePullPolicy: IfNotPresent
            resources:
              limits:
                memory: 9830Mi
              requests:
                cpu: 500m
                memory: 9830Mi
            ports:
              - containerPort: 11211
                name: client
            args:
              - -m 8192
              - --extended=modern,track_sizes
              - -I 5m
              - -c 16384
              - -v
              - -u 11211
            env:
            envFrom:
            securityContext:
              allowPrivilegeEscalation: false
              capabilities:
                drop:
                - ALL
              readOnlyRootFilesystem: true
            readinessProbe:
              failureThreshold: 6
              initialDelaySeconds: 5
              periodSeconds: 5
              tcpSocket:
                port: client
              timeoutSeconds: 3
          - name: exporter
            image: prom/memcached-exporter:v0.15.3
            imagePullPolicy: IfNotPresent
            ports:
              - containerPort: 9150
                name: http-metrics
            args:
              - "--memcached.address=localhost:11211"
              - "--web.listen-address=0.0.0.0:9150"
            resources:
              limits: {}
              requests: {}
            securityContext:
              allowPrivilegeEscalation: false
              capabilities:
                drop:
                - ALL
              readOnlyRootFilesystem: true
default, loki-release-clusterrole, ClusterRole (rbac.authorization.k8s.io) has changed:
  # Source: loki/templates/backend/clusterrole.yaml
  kind: ClusterRole
  apiVersion: rbac.authorization.k8s.io/v1
  metadata:
    labels:
      helm.sh/chart: loki-6.33.0
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.5.2"
+     app.kubernetes.io/version: "3.5.3"
    name: loki-release-clusterrole
  rules:
  - apiGroups: [""] # "" indicates the core API group
    resources: ["configmaps", "secrets"]
    verbs: ["get", "watch", "list"]
default, loki-release-clusterrolebinding, ClusterRoleBinding (rbac.authorization.k8s.io) has changed:
  # Source: loki/templates/backend/clusterrolebinding.yaml
  kind: ClusterRoleBinding
  apiVersion: rbac.authorization.k8s.io/v1
  metadata:
    name: loki-release-clusterrolebinding
    labels:
      helm.sh/chart: loki-6.33.0
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.5.2"
+     app.kubernetes.io/version: "3.5.3"
  subjects:
    - kind: ServiceAccount
      name: loki
      namespace: default
  roleRef:
    kind: ClusterRole
    name: loki-release-clusterrole
    apiGroup: rbac.authorization.k8s.io
default, loki-release-gateway, ConfigMap (v1) has changed:
  # Source: loki/templates/gateway/configmap-gateway.yaml
  apiVersion: v1
  kind: ConfigMap
  metadata:
    name: loki-release-gateway
    namespace: default
    labels:
      helm.sh/chart: loki-6.33.0
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.5.2"
+     app.kubernetes.io/version: "3.5.3"
      app.kubernetes.io/component: gateway
  data:
    nginx.conf: |
      worker_processes  5;  ## Default: 1
      error_log  /dev/stderr;
      pid        /tmp/nginx.pid;
      worker_rlimit_nofile 8192;
      
      events {
        worker_connections  4096;  ## Default: 1024
      }
      
      http {
        client_body_temp_path /tmp/client_temp;
        proxy_temp_path       /tmp/proxy_temp_path;
        fastcgi_temp_path     /tmp/fastcgi_temp;
        uwsgi_temp_path       /tmp/uwsgi_temp;
        scgi_temp_path        /tmp/scgi_temp;
      
        client_max_body_size  4M;
      
        proxy_read_timeout    600; ## 10 minutes
        proxy_send_timeout    600;
        proxy_connect_timeout 600;
      
        proxy_http_version    1.1;
      
        default_type application/octet-stream;
        log_format   main '$remote_addr - $remote_user [$time_local]  $status '
              '"$request" $body_bytes_sent "$http_referer" '
              '"$http_user_agent" "$http_x_forwarded_for"';
        access_log   /dev/stderr  main;
      
        sendfile     on;
        tcp_nopush   on;
        resolver kube-dns.kube-system.svc.cluster.local.;
        
      
        # if the X-Query-Tags header is empty, set a noop= without a value as empty values are not logged
        map $http_x_query_tags $query_tags {
          ""        "noop=";            # When header is empty, set noop=
          default   $http_x_query_tags; # Otherwise, preserve the original value
        }
      
        # pass custom headers set by Grafana as X-Query-Tags which are logged as key/value pairs in metrics.go log messages
        proxy_set_header X-Query-Tags "${query_tags},user=${http_x_grafana_user},dashboard_id=${http_x_dashboard_uid},dashboard_title=${http_x_dashboard_title},panel_id=${http_x_panel_id},panel_title=${http_x_panel_title},source_rule_uid=${http_x_rule_uid},rule_name=${http_x_rule_name},rule_folder=${http_x_rule_folder},rule_version=${http_x_rule_version},rule_source=${http_x_rule_source},rule_type=${http_x_rule_type}";
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
      
        server {
          listen             8080;
          listen             [::]:8080;
      
          location = / {
            return 200 'OK';
            auth_basic off;
          }
      
          ########################################################
          # Configure backend targets
          location ^~ /ui {
            proxy_pass       http://loki-write.default.svc.cluster.local:3100$request_uri;
          }
      
          # Distributor
          location = /api/prom/push {
            proxy_pass       http://loki-write.default.svc.cluster.local:3100$request_uri;
          }
          location = /loki/api/v1/push {
            proxy_pass       http://loki-write.default.svc.cluster.local:3100$request_uri;
          }
          location = /distributor/ring {
            proxy_pass       http://loki-write.default.svc.cluster.local:3100$request_uri;
          }
          location = /otlp/v1/logs {
            proxy_pass       http://loki-write.default.svc.cluster.local:3100$request_uri;
          }
      
          # Ingester
          location = /flush {
            proxy_pass       http://loki-write.default.svc.cluster.local:3100$request_uri;
          }
          location ^~ /ingester/ {
            proxy_pass       http://loki-write.default.svc.cluster.local:3100$request_uri;
          }
          location = /ingester {
            internal;        # to suppress 301
          }
      
          # Ring
          location = /ring {
            proxy_pass       http://loki-write.default.svc.cluster.local:3100$request_uri;
          }
      
          # MemberListKV
          location = /memberlist {
            proxy_pass       http://loki-write.default.svc.cluster.local:3100$request_uri;
          }
      
          # Ruler
          location = /ruler/ring {
            proxy_pass       http://loki-backend.default.svc.cluster.local:3100$request_uri;
          }
          location = /api/prom/rules {
            proxy_pass       http://loki-backend.default.svc.cluster.local:3100$request_uri;
          }
          location ^~ /api/prom/rules/ {
            proxy_pass       http://loki-backend.default.svc.cluster.local:3100$request_uri;
          }
          location = /loki/api/v1/rules {
            proxy_pass       http://loki-backend.default.svc.cluster.local:3100$request_uri;
          }
          location ^~ /loki/api/v1/rules/ {
            proxy_pass       http://loki-backend.default.svc.cluster.local:3100$request_uri;
          }
          location = /prometheus/api/v1/alerts {
            proxy_pass       http://loki-backend.default.svc.cluster.local:3100$request_uri;
          }
          location = /prometheus/api/v1/rules {
            proxy_pass       http://loki-backend.default.svc.cluster.local:3100$request_uri;
          }
      
          # Compactor
          location = /compactor/ring {
            proxy_pass       http://loki-backend.default.svc.cluster.local:3100$request_uri;
          }
          location = /loki/api/v1/delete {
            proxy_pass       http://loki-backend.default.svc.cluster.local:3100$request_uri;
          }
          location = /loki/api/v1/cache/generation_numbers {
            proxy_pass       http://loki-backend.default.svc.cluster.local:3100$request_uri;
          }
      
          # IndexGateway
          location = /indexgateway/ring {
            proxy_pass       http://loki-backend.default.svc.cluster.local:3100$request_uri;
          }
      
          # QueryScheduler
          location = /scheduler/ring {
            proxy_pass       http://loki-backend.default.svc.cluster.local:3100$request_uri;
          }
      
          # Config
          location = /config {
            proxy_pass       http://loki-write.default.svc.cluster.local:3100$request_uri;
          }
      
      
          # QueryFrontend, Querier
          location = /api/prom/tail {
            proxy_pass       http://loki-read.default.svc.cluster.local:3100$request_uri;
          }
          location = /loki/api/v1/tail {
            proxy_pass       http://loki-read.default.svc.cluster.local:3100$request_uri;
          }
          location ^~ /api/prom/ {
            proxy_pass       http://loki-read.default.svc.cluster.local:3100$request_uri;
          }
          location = /api/prom {
            internal;        # to suppress 301
          }
          location ^~ /loki/api/v1/ {
            proxy_pass       http://loki-read.default.svc.cluster.local:3100$request_uri;
          }
          location = /loki/api/v1 {
            internal;        # to suppress 301
          }
        }
      }
default, loki-release-gateway, Deployment (apps) has changed:
  # Source: loki/templates/gateway/deployment-gateway-nginx.yaml
  apiVersion: apps/v1
  kind: Deployment
  metadata:
    name: loki-release-gateway
    namespace: default
    labels:
      helm.sh/chart: loki-6.33.0
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.5.2"
+     app.kubernetes.io/version: "3.5.3"
      app.kubernetes.io/component: gateway
  spec:
    replicas: 1
    strategy:
      type: RollingUpdate
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        app.kubernetes.io/name: loki
        app.kubernetes.io/instance: loki-release
        app.kubernetes.io/component: gateway
    template:
      metadata:
        annotations:
          checksum/config: 4d22ac1a71c996509122f8fcd1f8d386bdcf83bad8267dd473da5d4959fc14d6
        labels:
          app.kubernetes.io/name: loki
          app.kubernetes.io/instance: loki-release
          app.kubernetes.io/component: gateway
      spec:
        serviceAccountName: loki
        enableServiceLinks: true
        
        securityContext:
          fsGroup: 101
          runAsGroup: 101
          runAsNonRoot: true
          runAsUser: 101
        terminationGracePeriodSeconds: 30
        containers:
          - name: nginx
            image: docker.io/nginxinc/nginx-unprivileged:1.29-alpine
            imagePullPolicy: IfNotPresent
            ports:
              - name: http-metrics
                containerPort: 8080
                protocol: TCP
            readinessProbe:
              httpGet:
                path: /
                port: http-metrics
              initialDelaySeconds: 15
              timeoutSeconds: 1
            securityContext:
              allowPrivilegeEscalation: false
              capabilities:
                drop:
                - ALL
              readOnlyRootFilesystem: true
            volumeMounts:
              - name: config
                mountPath: /etc/nginx
              - name: tmp
                mountPath: /tmp
              - name: docker-entrypoint-d-override
                mountPath: /docker-entrypoint.d
            resources:
              {}
        affinity:
          podAntiAffinity:
            requiredDuringSchedulingIgnoredDuringExecution:
            - labelSelector:
                matchLabels:
                  app.kubernetes.io/component: gateway
              topologyKey: kubernetes.io/hostname
        volumes:
          - name: config
            configMap:
              name: loki-release-gateway
          - name: tmp
            emptyDir: {}
          - name: docker-entrypoint-d-override
            emptyDir: {}
default, loki-release-gateway, Service (v1) has changed:
  # Source: loki/templates/gateway/service-gateway.yaml
  apiVersion: v1
  kind: Service
  metadata:
    name: loki-release-gateway
    namespace: default
    labels:
      helm.sh/chart: loki-6.33.0
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.5.2"
+     app.kubernetes.io/version: "3.5.3"
      app.kubernetes.io/component: gateway
      prometheus.io/service-monitor: "false"
    annotations:
  spec:
    type: ClusterIP
    ports:
      - name: http-metrics
        port: 80
        targetPort: http-metrics
        protocol: TCP
    selector:
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
      app.kubernetes.io/component: gateway
default, loki-release-results-cache, Service (v1) has changed:
  # Source: loki/templates/results-cache/service-results-cache-headless.yaml
  apiVersion: v1
  kind: Service
  metadata:
    name: loki-release-results-cache
    labels:
      helm.sh/chart: loki-6.33.0
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.5.2"
+     app.kubernetes.io/version: "3.5.3"
      app.kubernetes.io/component: "memcached-results-cache"
    annotations:
      {}
    namespace: "default"
  spec:
    type: ClusterIP
    clusterIP: None
    ports:
      - name: memcached-client
        port: 11211
        targetPort: 11211
      - name: http-metrics
        port: 9150
        targetPort: 9150
      
    selector:
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
      app.kubernetes.io/component: "memcached-results-cache"
default, loki-release-results-cache, StatefulSet (apps) has changed:
  # Source: loki/templates/results-cache/statefulset-results-cache.yaml
  apiVersion: apps/v1
  kind: StatefulSet
  metadata:
    name: loki-release-results-cache
    labels:
      helm.sh/chart: loki-6.33.0
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.5.2"
+     app.kubernetes.io/version: "3.5.3"
      app.kubernetes.io/component: "memcached-results-cache"
      name: "memcached-results-cache"
    annotations:
      {}
    namespace: "default"
  spec:
    podManagementPolicy: Parallel
    replicas: 1
    selector:
      matchLabels:
        app.kubernetes.io/name: loki
        app.kubernetes.io/instance: loki-release
        app.kubernetes.io/component: "memcached-results-cache"
        name: "memcached-results-cache"
    updateStrategy:
      type: RollingUpdate
    serviceName: loki-release-results-cache

    template:
      metadata:
        labels:
          app.kubernetes.io/name: loki
          app.kubernetes.io/instance: loki-release
          app.kubernetes.io/component: "memcached-results-cache"
          name: "memcached-results-cache"
        annotations:

      spec:
        serviceAccountName: loki
        securityContext:
          fsGroup: 11211
          runAsGroup: 11211
          runAsNonRoot: true
          runAsUser: 11211
        initContainers:
          []
        nodeSelector:
          {}
        affinity:
          {}
        topologySpreadConstraints:
          []
        tolerations:
          []
        terminationGracePeriodSeconds: 60
        containers:
          - name: memcached
            image: memcached:1.6.38-alpine
            imagePullPolicy: IfNotPresent
            resources:
              limits:
                memory: 1229Mi
              requests:
                cpu: 500m
                memory: 1229Mi
            ports:
              - containerPort: 11211
                name: client
            args:
              - -m 1024
              - --extended=modern,track_sizes
              - -I 5m
              - -c 16384
              - -v
              - -u 11211
            env:
            envFrom:
            securityContext:
              allowPrivilegeEscalation: false
              capabilities:
                drop:
                - ALL
              readOnlyRootFilesystem: true
            readinessProbe:
              failureThreshold: 6
              initialDelaySeconds: 5
              periodSeconds: 5
              tcpSocket:
                port: client
              timeoutSeconds: 3
          - name: exporter
            image: prom/memcached-exporter:v0.15.3
            imagePullPolicy: IfNotPresent
            ports:
              - containerPort: 9150
                name: http-metrics
            args:
              - "--memcached.address=localhost:11211"
              - "--web.listen-address=0.0.0.0:9150"
            resources:
              limits: {}
              requests: {}
            securityContext:
              allowPrivilegeEscalation: false
              capabilities:
                drop:
                - ALL
              readOnlyRootFilesystem: true
default, loki-runtime, ConfigMap (v1) has changed:
  # Source: loki/templates/runtime-configmap.yaml
  apiVersion: v1
  kind: ConfigMap
  metadata:
    name: loki-runtime
    namespace: default
    labels:
      helm.sh/chart: loki-6.33.0
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.5.2"
+     app.kubernetes.io/version: "3.5.3"
  data:
    runtime-config.yaml: |
      {}
default, loki-write, Service (v1) has changed:
  # Source: loki/templates/write/service-write.yaml
  apiVersion: v1
  kind: Service
  metadata:
    name: loki-write
    namespace: default
    labels:
      helm.sh/chart: loki-6.33.0
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.5.2"
+     app.kubernetes.io/version: "3.5.3"
      app.kubernetes.io/component: write
    annotations:
  spec:
    type: ClusterIP
    ports:
      - name: http-metrics
        port: 3100
        targetPort: http-metrics
        protocol: TCP
      - name: grpc
        port: 9095
        targetPort: grpc
        protocol: TCP
    selector:
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
      app.kubernetes.io/component: write
default, loki-write, StatefulSet (apps) has changed:
  # Source: loki/templates/write/statefulset-write.yaml
  apiVersion: apps/v1
  kind: StatefulSet
  metadata:
    name: loki-write
    namespace: default
    labels:
      helm.sh/chart: loki-6.33.0
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.5.2"
+     app.kubernetes.io/version: "3.5.3"
      app.kubernetes.io/component: write
      app.kubernetes.io/part-of: memberlist
  spec:
    replicas: 1
    podManagementPolicy: Parallel
    updateStrategy:
      rollingUpdate:
        partition: 0
    serviceName: loki-write-headless
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        app.kubernetes.io/name: loki
        app.kubernetes.io/instance: loki-release
        app.kubernetes.io/component: write
    template:
      metadata:
        annotations:
          checksum/config: d44ac47f1bec49fac37c5234efe915579ab23d0b61fd828895d73842ca01d67c
        labels:
          helm.sh/chart: loki-6.33.0
          app.kubernetes.io/name: loki
          app.kubernetes.io/instance: loki-release
-         app.kubernetes.io/version: "3.5.2"
+         app.kubernetes.io/version: "3.5.3"
          app.kubernetes.io/component: write
          app.kubernetes.io/part-of: memberlist
      spec:
        serviceAccountName: loki
        automountServiceAccountToken: true
        enableServiceLinks: true
        
        securityContext:
          fsGroup: 10001
          runAsGroup: 10001
          runAsNonRoot: true
          runAsUser: 10001
        terminationGracePeriodSeconds: 300
        containers:
          - name: loki
-           image: docker.io/grafana/loki:3.5.2
+           image: docker.io/grafana/loki:3.5.3
            imagePullPolicy: IfNotPresent
            args:
              - -config.file=/etc/loki/config/config.yaml
              - -target=write
            ports:
              - name: http-metrics
                containerPort: 3100
                protocol: TCP
              - name: grpc
                containerPort: 9095
                protocol: TCP
              - name: http-memberlist
                containerPort: 7946
                protocol: TCP
            securityContext:
              allowPrivilegeEscalation: false
              capabilities:
                drop:
                - ALL
              readOnlyRootFilesystem: true
            readinessProbe:
              httpGet:
                path: /ready
                port: http-metrics
              initialDelaySeconds: 30
              timeoutSeconds: 1
            volumeMounts:
              - name: config
                mountPath: /etc/loki/config
              - name: runtime-config
                mountPath: /etc/loki/runtime-config
              - name: data
                mountPath: /var/loki
            resources:
              {}
        affinity:
          podAntiAffinity:
            requiredDuringSchedulingIgnoredDuringExecution:
            - labelSelector:
                matchLabels:
                  app.kubernetes.io/component: write
              topologyKey: kubernetes.io/hostname
        volumes:
          - name: config
            configMap:
              name: loki
              items:
                - key: "config.yaml"
                  path: "config.yaml"
          - name: runtime-config
            configMap:
              name: loki-runtime
    volumeClaimTemplates:
      - apiVersion: v1
        kind: PersistentVolumeClaim
        metadata:
          name: data
        spec:
          accessModes:
            - ReadWriteOnce
          resources:
            requests:
              storage: "10Gi"

Distributed Scenario-diff-output

default, loki, ConfigMap (v1) has changed:
  # Source: loki/templates/config.yaml
  apiVersion: v1
  kind: ConfigMap
  metadata:
    name: loki
    namespace: default
    labels:
      helm.sh/chart: loki-6.33.0
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.5.2"
+     app.kubernetes.io/version: "3.5.3"
  data:
    config.yaml: |
      
      auth_enabled: true
      bloom_build:
        builder:
          planner_address: loki-release-bloom-planner-headless.default.svc.cluster.local:9095
        enabled: false
      bloom_gateway:
        client:
          addresses: dnssrvnoa+_grpc._tcp.loki-release-bloom-gateway-headless.default.svc.cluster.local
        enabled: false
      chunk_store_config:
        chunk_cache_config:
          background:
            writeback_buffer: 500000
            writeback_goroutines: 1
            writeback_size_limit: 500MB
          default_validity: 0s
          memcached:
            batch_size: 4
            parallelism: 5
          memcached_client:
            addresses: dnssrvnoa+_memcached-client._tcp.loki-release-chunks-cache.default.svc
            consistent_hash: true
            max_idle_conns: 72
            timeout: 2000ms
      common:
        compactor_address: 'http://loki-release-compactor:3100'
        path_prefix: /var/loki
        replication_factor: 3
        storage:
          s3:
            access_key_id: root-user
            bucketnames: chunks
            endpoint: loki-release-minio.default.svc:9000
            insecure: true
            s3forcepathstyle: true
            secret_access_key: supersecretpassword
      frontend:
        scheduler_address: loki-release-query-scheduler.default.svc.cluster.local:9095
        tail_proxy_url: http://loki-release-querier.default.svc.cluster.local:3100
      frontend_worker:
        scheduler_address: loki-release-query-scheduler.default.svc.cluster.local:9095
      index_gateway:
        mode: simple
      ingester:
        chunk_encoding: snappy
      limits_config:
        max_cache_freshness_per_query: 10m
        query_timeout: 300s
        reject_old_samples: true
        reject_old_samples_max_age: 168h
        split_queries_by_interval: 15m
        volume_enabled: true
      memberlist:
        join_members:
        - loki-memberlist
      pattern_ingester:
        enabled: false
      querier:
        max_concurrent: 4
      query_range:
        align_queries_with_step: true
        cache_results: true
        results_cache:
          cache:
            background:
              writeback_buffer: 500000
              writeback_goroutines: 1
              writeback_size_limit: 500MB
            default_validity: 12h
            memcached_client:
              addresses: dnssrvnoa+_memcached-client._tcp.loki-release-results-cache.default.svc
              consistent_hash: true
              timeout: 500ms
              update_interval: 1m
      ruler:
        storage:
          s3:
            bucketnames: ruler
          type: s3
        wal:
          dir: /var/loki/ruler-wal
      runtime_config:
        file: /etc/loki/runtime-config/runtime-config.yaml
      schema_config:
        configs:
        - from: "2024-04-01"
          index:
            period: 24h
            prefix: loki_index_
          object_store: s3
          schema: v13
          store: tsdb
      server:
        grpc_listen_port: 9095
        http_listen_port: 3100
        http_server_read_timeout: 600s
        http_server_write_timeout: 600s
      storage_config:
        bloom_shipper:
          working_directory: /var/loki/data/bloomshipper
        boltdb_shipper:
          index_gateway_client:
            server_address: dns+loki-release-index-gateway-headless.default.svc.cluster.local:9095
        hedging:
          at: 250ms
          max_per_second: 20
          up_to: 3
        tsdb_shipper:
          index_gateway_client:
            server_address: dns+loki-release-index-gateway-headless.default.svc.cluster.local:9095
        use_thanos_objstore: false
      tracing:
        enabled: true
default, loki, ServiceAccount (v1) has changed:
  # Source: loki/templates/serviceaccount.yaml
  apiVersion: v1
  kind: ServiceAccount
  metadata:
    name: loki
    namespace: default
    labels:
      helm.sh/chart: loki-6.33.0
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.5.2"
+     app.kubernetes.io/version: "3.5.3"
  automountServiceAccountToken: true
default, loki-canary, DaemonSet (apps) has changed:
  # Source: loki/templates/loki-canary/daemonset.yaml
  apiVersion: apps/v1
  kind: DaemonSet
  metadata:
    name: loki-canary
    namespace: default
    labels:
      helm.sh/chart: loki-6.33.0
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.5.2"
+     app.kubernetes.io/version: "3.5.3"
      app.kubernetes.io/component: canary
  spec:
    selector:
      matchLabels:
        app.kubernetes.io/name: loki
        app.kubernetes.io/instance: loki-release
        app.kubernetes.io/component: canary
    updateStrategy:
      rollingUpdate:
        maxUnavailable: 1
      type: RollingUpdate
    template:
      metadata:
        labels:
          app.kubernetes.io/name: loki
          app.kubernetes.io/instance: loki-release
          app.kubernetes.io/component: canary
      spec:
        serviceAccountName: loki-canary
        
        securityContext:
          fsGroup: 10001
          runAsGroup: 10001
          runAsNonRoot: true
          runAsUser: 10001
        containers:
          - name: loki-canary
            image: docker.io/grafana/loki-canary:3.5.2
            imagePullPolicy: IfNotPresent
            args:
              - -addr=loki-release-gateway.default.svc.cluster.local.:80
              - -labelname=pod
              - -labelvalue=$(POD_NAME)
              - -user=self-monitoring
              - -tenant-id=self-monitoring
              - -pass=
              - -push=true
            securityContext:
              allowPrivilegeEscalation: false
              capabilities:
                drop:
                - ALL
              readOnlyRootFilesystem: true
            volumeMounts:
            ports:
              - name: http-metrics
                containerPort: 3500
                protocol: TCP
            env:
              - name: POD_NAME
                valueFrom:
                  fieldRef:
                    fieldPath: metadata.name
              
            readinessProbe:
              httpGet:
                path: /metrics
                port: http-metrics
              initialDelaySeconds: 15
              timeoutSeconds: 1
        volumes:
default, loki-canary, Service (v1) has changed:
  # Source: loki/templates/loki-canary/service.yaml
  apiVersion: v1
  kind: Service
  metadata:
    name: loki-canary
    namespace: default
    labels:
      helm.sh/chart: loki-6.33.0
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.5.2"
+     app.kubernetes.io/version: "3.5.3"
      app.kubernetes.io/component: canary
    annotations:
  spec:
    type: ClusterIP
    ports:
      - name: http-metrics
        port: 3500
        targetPort: http-metrics
        protocol: TCP
    selector:
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
      app.kubernetes.io/component: canary
default, loki-canary, ServiceAccount (v1) has changed:
  # Source: loki/templates/loki-canary/serviceaccount.yaml
  apiVersion: v1
  kind: ServiceAccount
  metadata:
    name: loki-canary
    namespace: default
    labels:
      helm.sh/chart: loki-6.33.0
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.5.2"
+     app.kubernetes.io/version: "3.5.3"
      app.kubernetes.io/component: canary
  automountServiceAccountToken: true
default, loki-memberlist, Service (v1) has changed:
  # Source: loki/templates/service-memberlist.yaml
  apiVersion: v1
  kind: Service
  metadata:
    name: loki-memberlist
    namespace: default
    labels:
      helm.sh/chart: loki-6.33.0
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.5.2"
+     app.kubernetes.io/version: "3.5.3"
    annotations:
  spec:
    type: ClusterIP
    clusterIP: None
    ports:
      - name: tcp
        port: 7946
        targetPort: http-memberlist
        protocol: TCP
    selector:
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
      app.kubernetes.io/part-of: memberlist
default, loki-release-chunks-cache, Service (v1) has changed:
  # Source: loki/templates/chunks-cache/service-chunks-cache-headless.yaml
  apiVersion: v1
  kind: Service
  metadata:
    name: loki-release-chunks-cache
    labels:
      helm.sh/chart: loki-6.33.0
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.5.2"
+     app.kubernetes.io/version: "3.5.3"
      app.kubernetes.io/component: "memcached-chunks-cache"
    annotations:
      {}
    namespace: "default"
  spec:
    type: ClusterIP
    clusterIP: None
    ports:
      - name: memcached-client
        port: 11211
        targetPort: 11211
      - name: http-metrics
        port: 9150
        targetPort: 9150
      
    selector:
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
      app.kubernetes.io/component: "memcached-chunks-cache"
default, loki-release-chunks-cache, StatefulSet (apps) has changed:
  # Source: loki/templates/chunks-cache/statefulset-chunks-cache.yaml
  apiVersion: apps/v1
  kind: StatefulSet
  metadata:
    name: loki-release-chunks-cache
    labels:
      helm.sh/chart: loki-6.33.0
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.5.2"
+     app.kubernetes.io/version: "3.5.3"
      app.kubernetes.io/component: "memcached-chunks-cache"
      name: "memcached-chunks-cache"
    annotations:
      {}
    namespace: "default"
  spec:
    podManagementPolicy: Parallel
    replicas: 1
    selector:
      matchLabels:
        app.kubernetes.io/name: loki
        app.kubernetes.io/instance: loki-release
        app.kubernetes.io/component: "memcached-chunks-cache"
        name: "memcached-chunks-cache"
    updateStrategy:
      type: RollingUpdate
    serviceName: loki-release-chunks-cache

    template:
      metadata:
        labels:
          app.kubernetes.io/name: loki
          app.kubernetes.io/instance: loki-release
          app.kubernetes.io/component: "memcached-chunks-cache"
          name: "memcached-chunks-cache"
        annotations:

      spec:
        serviceAccountName: loki
        securityContext:
          fsGroup: 11211
          runAsGroup: 11211
          runAsNonRoot: true
          runAsUser: 11211
        initContainers:
          []
        nodeSelector:
          {}
        affinity:
          {}
        topologySpreadConstraints:
          []
        tolerations:
          []
        terminationGracePeriodSeconds: 60
        containers:
          - name: memcached
            image: memcached:1.6.38-alpine
            imagePullPolicy: IfNotPresent
            resources:
              limits:
                memory: 9830Mi
              requests:
                cpu: 500m
                memory: 9830Mi
            ports:
              - containerPort: 11211
                name: client
            args:
              - -m 8192
              - --extended=modern,track_sizes
              - -I 5m
              - -c 16384
              - -v
              - -u 11211
            env:
            envFrom:
            securityContext:
              allowPrivilegeEscalation: false
              capabilities:
                drop:
                - ALL
              readOnlyRootFilesystem: true
            readinessProbe:
              failureThreshold: 6
              initialDelaySeconds: 5
              periodSeconds: 5
              tcpSocket:
                port: client
              timeoutSeconds: 3
          - name: exporter
            image: prom/memcached-exporter:v0.15.3
            imagePullPolicy: IfNotPresent
            ports:
              - containerPort: 9150
                name: http-metrics
            args:
              - "--memcached.address=localhost:11211"
              - "--web.listen-address=0.0.0.0:9150"
            resources:
              limits: {}
              requests: {}
            securityContext:
              allowPrivilegeEscalation: false
              capabilities:
                drop:
                - ALL
              readOnlyRootFilesystem: true
default, loki-release-clusterrole, ClusterRole (rbac.authorization.k8s.io) has changed:
  # Source: loki/templates/backend/clusterrole.yaml
  kind: ClusterRole
  apiVersion: rbac.authorization.k8s.io/v1
  metadata:
    labels:
      helm.sh/chart: loki-6.33.0
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.5.2"
+     app.kubernetes.io/version: "3.5.3"
    name: loki-release-clusterrole
  rules:
  - apiGroups: [""] # "" indicates the core API group
    resources: ["configmaps", "secrets"]
    verbs: ["get", "watch", "list"]
default, loki-release-clusterrolebinding, ClusterRoleBinding (rbac.authorization.k8s.io) has changed:
  # Source: loki/templates/backend/clusterrolebinding.yaml
  kind: ClusterRoleBinding
  apiVersion: rbac.authorization.k8s.io/v1
  metadata:
    name: loki-release-clusterrolebinding
    labels:
      helm.sh/chart: loki-6.33.0
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.5.2"
+     app.kubernetes.io/version: "3.5.3"
  subjects:
    - kind: ServiceAccount
      name: loki
      namespace: default
  roleRef:
    kind: ClusterRole
    name: loki-release-clusterrole
    apiGroup: rbac.authorization.k8s.io
default, loki-release-compactor, Service (v1) has changed:
  # Source: loki/templates/compactor/service-compactor.yaml
  apiVersion: v1
  kind: Service
  metadata:
    name: loki-release-compactor
    namespace: default
    labels:
      helm.sh/chart: loki-6.33.0
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.5.2"
+     app.kubernetes.io/version: "3.5.3"
      app.kubernetes.io/component: compactor
    annotations:
  spec:
    type: ClusterIP
    ports:
      - name: http-metrics
        port: 3100
        targetPort: http-metrics
        protocol: TCP
      - name: grpc
        port: 9095
        targetPort: grpc
        protocol: TCP
    selector:
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
      app.kubernetes.io/component: compactor
default, loki-release-compactor, StatefulSet (apps) has changed:
  # Source: loki/templates/compactor/statefulset-compactor.yaml
  apiVersion: apps/v1
  kind: StatefulSet
  metadata:
    name: loki-release-compactor
    namespace: default
    labels:
      helm.sh/chart: loki-6.33.0
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.5.2"
+     app.kubernetes.io/version: "3.5.3"
      app.kubernetes.io/component: compactor
      app.kubernetes.io/part-of: memberlist
  spec:
    replicas: 1
    podManagementPolicy: Parallel
    updateStrategy:
      rollingUpdate:
        partition: 0
    serviceName: loki-release-compactor-headless
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        app.kubernetes.io/name: loki
        app.kubernetes.io/instance: loki-release
        app.kubernetes.io/component: compactor
    template:
      metadata:
        annotations:
          checksum/config: 4c968d6fedf10be3e8b1aa1ab6a09402df60b6a059c8723292699c1339fe5006
        labels:
          helm.sh/chart: loki-6.33.0
          app.kubernetes.io/name: loki
          app.kubernetes.io/instance: loki-release
-         app.kubernetes.io/version: "3.5.2"
+         app.kubernetes.io/version: "3.5.3"
          app.kubernetes.io/component: compactor
          app.kubernetes.io/part-of: memberlist
      spec:
        serviceAccountName: loki
        
        securityContext:
          fsGroup: 10001
          runAsGroup: 10001
          runAsNonRoot: true
          runAsUser: 10001
        terminationGracePeriodSeconds: 30
        containers:
          - name: compactor
-           image: docker.io/grafana/loki:3.5.2
+           image: docker.io/grafana/loki:3.5.3
            imagePullPolicy: IfNotPresent
            args:
              - -config.file=/etc/loki/config/config.yaml
              - -target=compactor
            ports:
              - name: http-metrics
                containerPort: 3100
                protocol: TCP
              - name: grpc
                containerPort: 9095
                protocol: TCP
              - name: http-memberlist
                containerPort: 7946
                protocol: TCP
            securityContext:
              allowPrivilegeEscalation: false
              capabilities:
                drop:
                - ALL
              readOnlyRootFilesystem: true
            
            readinessProbe:
              httpGet:
                path: /ready
                port: http-metrics
              initialDelaySeconds: 30
              timeoutSeconds: 1
            
            volumeMounts:
              - name: temp
                mountPath: /tmp
              - name: config
                mountPath: /etc/loki/config
              - name: runtime-config
                mountPath: /etc/loki/runtime-config
              - name: data
                mountPath: /var/loki
        affinity:
          podAntiAffinity:
            requiredDuringSchedulingIgnoredDuringExecution:
            - labelSelector:
                matchLabels:
                  app.kubernetes.io/component: compactor
              topologyKey: kubernetes.io/hostname
        volumes:
          - name: temp
            emptyDir: {}
          - name: config
            configMap:
              name: loki
              items:
                - key: "config.yaml"
                  path: "config.yaml"
          - name: runtime-config
            configMap:
              name: loki-runtime
          - name: data
            emptyDir: {}
default, loki-release-distributor, Deployment (apps) has changed:
  # Source: loki/templates/distributor/deployment-distributor.yaml
  apiVersion: apps/v1
  kind: Deployment
  metadata:
    name: loki-release-distributor
    namespace: default
    labels:
      helm.sh/chart: loki-6.33.0
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.5.2"
+     app.kubernetes.io/version: "3.5.3"
      app.kubernetes.io/component: distributor
      app.kubernetes.io/part-of: memberlist
  spec:
    replicas: 3
    strategy:
      rollingUpdate:
        maxSurge: 0
        maxUnavailable: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        app.kubernetes.io/name: loki
        app.kubernetes.io/instance: loki-release
        app.kubernetes.io/component: distributor
    template:
      metadata:
        annotations:
          checksum/config: 4c968d6fedf10be3e8b1aa1ab6a09402df60b6a059c8723292699c1339fe5006
        labels:
          helm.sh/chart: loki-6.33.0
          app.kubernetes.io/name: loki
          app.kubernetes.io/instance: loki-release
-         app.kubernetes.io/version: "3.5.2"
+         app.kubernetes.io/version: "3.5.3"
          app.kubernetes.io/component: distributor
          app.kubernetes.io/part-of: memberlist
      spec:
        serviceAccountName: loki
        
        securityContext:
          fsGroup: 10001
          runAsGroup: 10001
          runAsNonRoot: true
          runAsUser: 10001
        terminationGracePeriodSeconds: 30
        containers:
          - name: distributor
-           image: docker.io/grafana/loki:3.5.2
+           image: docker.io/grafana/loki:3.5.3
            imagePullPolicy: IfNotPresent
            args:
              - -config.file=/etc/loki/config/config.yaml
              - -target=distributor
              - -distributor.zone-awareness-enabled=true
            ports:
              - name: http-metrics
                containerPort: 3100
                protocol: TCP
              - name: grpc
                containerPort: 9095
                protocol: TCP
              - name: http-memberlist
                containerPort: 7946
                protocol: TCP
            securityContext:
              allowPrivilegeEscalation: false
              capabilities:
                drop:
                - ALL
              readOnlyRootFilesystem: true
            readinessProbe:
              httpGet:
                path: /ready
                port: http-metrics
              initialDelaySeconds: 30
              timeoutSeconds: 1
            livenessProbe:
              null
            volumeMounts:
              - name: config
                mountPath: /etc/loki/config
              - name: runtime-config
                mountPath: /etc/loki/runtime-config
            resources:
              {}
        affinity:
          podAntiAffinity:
            requiredDuringSchedulingIgnoredDuringExecution:
            - labelSelector:
        
<!-- Sticky Pull Request CommentHelm Diff Output - Summary -->