Automatic update CHANGELOGs and READMEs

charts/victoria-metrics-common/CHANGELOG.md

@@ -2,6 +2,14 @@
 
 ## Next release
 
+- TODO
+
+## 0.0.34
+
+**Release date:** 2024-12-11
+
+![Helm: v3](https://img.shields.io/static/v1?label=Helm&message=v3&color=informational&logo=helm)
+
 - moved helm chart requirement to a common template
 
 ## 0.0.33

charts/victoria-metrics-common/README.md

@@ -1,4 +1,4 @@
-![Type: library](https://img.shields.io/badge/Type-library-informational?style=flat-square) ![Version: 0.0.33](https://img.shields.io/badge/Version-0.0.33-informational?style=flat-square)
+![Type: library](https://img.shields.io/badge/Type-library-informational?style=flat-square) ![Version: 0.0.34](https://img.shields.io/badge/Version-0.0.34-informational?style=flat-square)
 [![Artifact Hub](https://img.shields.io/endpoint?url=https://artifacthub.io/badge/repository/victoriametrics)](https://artifacthub.io/packages/helm/victoriametrics/victoria-metrics-common)
 
 Victoria Metrics Common - contains shared templates for all Victoria Metrics helm charts

charts/victoria-metrics-operator/README.md

@@ -191,6 +191,36 @@ helm-docs
 
 The markdown generation is entirely go template driven. The tool parses metadata from charts and generates a number of sub-templates that can be referenced in a template file (by default ``README.md.gotmpl``). If no template file is provided, the tool has a default internal template that will generate a reasonably formatted README.
 
+## Disabling automatic ServiceAccount token mount
+
+There are cases when it is required to disable automatic ServiceAccount token mount due to hardening reasons. To disable it, set the following values:
+```
+serviceAccount:
+  automountServiceAccountToken: false
+
+extraVolumes:
+  - name: operator
+    projected:
+      sources:
+        - downwardAPI:
+            items:
+              - fieldRef:
+                  apiVersion: v1
+                  fieldPath: metadata.namespace
+                path: namespace
+        - configMap:
+            name: kube-root-ca.crt
+        - serviceAccountToken:
+            expirationSeconds: 7200
+            path: token
+
+extraVolumeMounts:
+  - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
+    name: operator
+```
+
+This configuration disables the automatic ServiceAccount token mount and mounts the token explicitly.
+
 ## Parameters
 
 The following tables lists the configurable parameters of the chart and their default values.
@@ -981,6 +1011,17 @@ view:
 </pre>
 </td>
       <td><p>Service webhook port</p>
+</td>
+    </tr>
+    <tr>
+      <td>serviceAccount.automountServiceAccountToken</td>
+      <td>bool</td>
+      <td><pre class="helm-vars-default-value" language-yaml" lang="">
+<code class="language-yaml">true
+</code>
+</pre>
+</td>
+      <td><p>Whether to automount the service account token. Note that token needs to be mounted manually if this is disabled.</p>
 </td>
     </tr>
     <tr>