feat(github-release): update rancher/system-upgrade-controller to v0.12.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
rancher/system-upgrade-controller	Kustomization	minor	v0.11.0 -> v0.12.0

---

Release Notes

rancher/system-upgrade-controller (rancher/system-upgrade-controller)

v0.12.0

Compare Source

What's Changed

• Bump to wrangler v1.1.1 / Kubernetes 1.25 / ginkgo v2 by @​brandond in https://github.com/rancher/system-upgrade-controller/pull/240
• Allow Plan to specify Job deadline by @​connorkuehl in https://github.com/rancher/system-upgrade-controller/pull/244

New Contributors

• @​connorkuehl made their first contribution in https://github.com/rancher/system-upgrade-controller/pull/244

Full Changelog: rancher/system-upgrade-controller@v0.11.0...v0.11.1

---

Configuration

📅 Schedule: Branch creation - "before 6am" in timezone America/Detroit, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[madbuda-bot]

--- kubernetes/apps/system-upgrade/system-upgrade-controller/app Kustomization: flux-system/cluster-apps-system-upgrade-controller Deployment: system-upgrade/system-upgrade-controller

+++ kubernetes/apps/system-upgrade/system-upgrade-controller/app Kustomization: flux-system/cluster-apps-system-upgrade-controller Deployment: system-upgrade/system-upgrade-controller

@@ -22,13 +22,13 @@

     spec:
       affinity:
         nodeAffinity:
           requiredDuringSchedulingIgnoredDuringExecution:
             nodeSelectorTerms:
             - matchExpressions:
-              - key: node-role.kubernetes.io/master
+              - key: node-role.kubernetes.io/control-plane
                 operator: Exists
       containers:
       - env:
         - name: SYSTEM_UPGRADE_CONTROLLER_NAME
           valueFrom:
             fieldRef:
@@ -40,19 +40,32 @@

         envFrom:
         - configMapRef:
             name: default-controller-env
         image: rancher/system-upgrade-controller:v0.11.0
         imagePullPolicy: IfNotPresent
         name: system-upgrade-controller
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
+          runAsGroup: 65534
+          runAsNonRoot: true
+          runAsUser: 65534
+          seccompProfile:
+            type: RuntimeDefault
         volumeMounts:
         - mountPath: /etc/ssl
           name: etc-ssl
+          readOnly: true
         - mountPath: /etc/pki
           name: etc-pki
+          readOnly: true
         - mountPath: /etc/ca-certificates
           name: etc-ca-certificates
+          readOnly: true
         - mountPath: /tmp
           name: tmp
       serviceAccountName: system-upgrade
       tolerations:
       - key: CriticalAddonsOnly
         operator: Exists
@@ -68,13 +81,13 @@

       - effect: NoExecute
         key: node-role.kubernetes.io/etcd
         operator: Exists
       volumes:
       - hostPath:
           path: /etc/ssl
-          type: Directory
+          type: DirectoryOrCreate
         name: etc-ssl
       - hostPath:
           path: /etc/pki
           type: DirectoryOrCreate
         name: etc-pki
       - hostPath:
--- kubernetes/apps/system-upgrade/system-upgrade-controller/app Kustomization: flux-system/cluster-apps-system-upgrade-controller ConfigMap: system-upgrade/default-controller-env

+++ kubernetes/apps/system-upgrade/system-upgrade-controller/app Kustomization: flux-system/cluster-apps-system-upgrade-controller ConfigMap: system-upgrade/default-controller-env

@@ -3,13 +3,13 @@

 data:
   SYSTEM_UPGRADE_CONTROLLER_DEBUG: 'false'
   SYSTEM_UPGRADE_CONTROLLER_THREADS: '2'
   SYSTEM_UPGRADE_JOB_ACTIVE_DEADLINE_SECONDS: '900'
   SYSTEM_UPGRADE_JOB_BACKOFF_LIMIT: '99'
   SYSTEM_UPGRADE_JOB_IMAGE_PULL_POLICY: Always
-  SYSTEM_UPGRADE_JOB_KUBECTL_IMAGE: rancher/kubectl:v1.21.9
+  SYSTEM_UPGRADE_JOB_KUBECTL_IMAGE: rancher/kubectl:v1.25.4
   SYSTEM_UPGRADE_JOB_PRIVILEGED: 'true'
   SYSTEM_UPGRADE_JOB_TTL_SECONDS_AFTER_FINISH: '900'
   SYSTEM_UPGRADE_PLAN_POLLING_INTERVAL: 15m
 kind: ConfigMap
 metadata:
   labels:

[madbuda-bot]

🦙 MegaLinter status: ✅ SUCCESS

Descriptor	Linter	Files	Fixed	Errors	Elapsed time
✅ COPYPASTE	jscpd	yes		no	1.87s
✅ REPOSITORY	git_diff	yes		no	0.03s
✅ REPOSITORY	secretlint	yes		no	2.76s
✅ YAML	prettier	1		0	0.7s
✅ YAML	yamllint	1		0	0.25s

See detailed report in MegaLinter reports
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

MegaLinter is graciously provided by