feat: upgrade k8s-sidecar to v2.2.3 with health probes (#515)

* chore(deps): update quay.io/kiwigrid/k8s-sidecar docker tag to v2

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* feat: upgrade k8s-sidecar to v2.2.3 with health probes

- Update k8s-sidecar image from 1.30.5 to 2.2.3
- Add liveness and readiness probes using /healthz endpoint (v2 feature)
- Add sidecar.env.skip_init option for SKIP_INIT env var (v2.1.0+)
- Update Chart.yaml annotations to reflect new sidecar version
- Bump chart version to 0.39.0
- Fix YAML lint issue in values.yaml

---------

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Author: dirien

charts/node-red/Chart.yaml

@@ -9,7 +9,7 @@ icon: https://nodered.org/about/resources/media/node-red-icon-2.png
 
 type: application
 
-version: 0.38.0
+version: 0.39.0
 appVersion: 4.1.2
 
 keywords:
@@ -30,11 +30,12 @@ annotations:
   artifacthub.io/containsSecurityUpdates: "false"
   artifacthub.io/changes: |
     - Update Node-RED to 4.1.2
+    - Update k8s-sidecar to 2.2.3 (major version upgrade with health endpoint support)
   artifacthub.io/images: |
     - name: node-red
       image: docker.io/nodered/node-red:4.1.2
     - name: node-red-sidecar
-      image: quay.io/kiwigrid/k8s-sidecar:1.30.5
+      image: quay.io/kiwigrid/k8s-sidecar:2.2.3
   artifacthub.io/license: Apache-2.0
   artifacthub.io/links: |
     - name: website

charts/node-red/README.md

@@ -1,6 +1,6 @@
 # node-red ⚙
 
-![Version: 0.38.0](https://img.shields.io/badge/Version-0.38.0-informational?style=for-the-badge)
+![Version: 0.39.0](https://img.shields.io/badge/Version-0.39.0-informational?style=for-the-badge)
 ![Type: application](https://img.shields.io/badge/Type-application-informational?style=for-the-badge)
 ![AppVersion: 4.1.2](https://img.shields.io/badge/AppVersion-4.1.2-informational?style=for-the-badge)
 
@@ -18,7 +18,7 @@ A Helm chart for Node-Red, a low-code programming for event-driven applications
 To install the chart using the OCI artifact, run:
 
 ```bash
-helm install node-red oci://ghcr.io/schwarzit/charts/node-red --version 0.38.0
+helm install node-red oci://ghcr.io/schwarzit/charts/node-red --version 0.39.0
 ```
 
 ## Usage
@@ -34,7 +34,7 @@ helm repo update
 To install the chart with the release name node-red run:
 
 ```bash
-helm install node-red node-red/node-red --version 0.38.0
+helm install node-red node-red/node-red --version 0.39.0
 ```
 
 After a few seconds, node-red should be running.
@@ -131,14 +131,17 @@ The command removes all the Kubernetes components associated with the chart and
 | sidecar.env.password | string | `""` | Password as key value pair |
 | sidecar.env.passwordFromExistingSecret | object | `{}` | Password from existing secret |
 | sidecar.env.script | string | `"flow_refresh.py"` | Absolute path to shell script to execute after a configmap got reloaded. |
+| sidecar.env.skip_init | bool | `false` | Skip the initial request to REQ_URL when using watch mode (v2.1.0+) |
 | sidecar.env.sleep_time_sidecar | string | `"5s"` | Set the sleep time for refresh script |
 | sidecar.env.username | string | `""` |  |
 | sidecar.extraEnv | list | `[]` | Extra Environments for the sidecar |
 | sidecar.extraNodeModules | list | `[]` | Extra Node-Modules that will be installed  from the sidecar script |
 | sidecar.image.pullPolicy | string | `"IfNotPresent"` | The image pull policy, default: `IfNotPresent` |
 | sidecar.image.registry | string | `"quay.io"` | The image registry to pull the sidecar from |
 | sidecar.image.repository | string | `"kiwigrid/k8s-sidecar"` | The image repository to pull from |
-| sidecar.image.tag | string | `"1.30.5"` | The image tag to pull, default: `1.28.4` |
+| sidecar.image.tag | string | `"2.2.3"` | The image tag to pull, default: `1.28.4` |
+| sidecar.livenessProbe | object | `{"httpGet":{"path":"/healthz","port":8080},"initialDelaySeconds":5,"periodSeconds":10}` | Liveness probe for the sidecar (k8s-sidecar v2+ exposes /healthz on port 8080) |
+| sidecar.readinessProbe | object | `{"httpGet":{"path":"/healthz","port":8080},"initialDelaySeconds":5,"periodSeconds":10}` | Readiness probe for the sidecar (reports ready after initial sync completes) |
 | sidecar.resources | object | `{}` | Resources for the sidecar |
 | sidecar.securityContext | object | `{}` | Security context for the sidecar |
 | sidecar.volumeMounts | list | `[]` | The extra volume mounts for the sidecar |
@@ -195,6 +198,17 @@ sidecar:
 ```
 To install the node modules successfully, the node red pod needs access to the `npmrc.registry` to download the declaired modules/packages.
 
+### Sidecar v2 Health Checks
+
+Starting with k8s-sidecar v2.x, the sidecar exposes a `/healthz` endpoint on port 8080 for health monitoring. This chart configures liveness and readiness probes by default:
+
+- **Readiness Probe**: Reports ready (HTTP 200) only after the initial synchronization completes
+- **Liveness Probe**: Monitors Kubernetes API connectivity and watcher subprocess status
+
+You can customize or disable these probes via `sidecar.livenessProbe` and `sidecar.readinessProbe` values.
+
+The `sidecar.env.skip_init` option (v2.1.0+) allows skipping the initial request to the Node-RED API when using watch mode.
+
 ## Contributing 🤝
 
 ### Contributing via GitHub

charts/node-red/README.md.gotmpl

@@ -113,6 +113,17 @@ sidecar:
 ```
 To install the node modules successfully, the node red pod needs access to the `npmrc.registry` to download the declaired modules/packages.
 
+### Sidecar v2 Health Checks
+
+Starting with k8s-sidecar v2.x, the sidecar exposes a `/healthz` endpoint on port 8080 for health monitoring. This chart configures liveness and readiness probes by default:
+
+- **Readiness Probe**: Reports ready (HTTP 200) only after the initial synchronization completes
+- **Liveness Probe**: Monitors Kubernetes API connectivity and watcher subprocess status
+
+You can customize or disable these probes via `sidecar.livenessProbe` and `sidecar.readinessProbe` values.
+
+The `sidecar.env.skip_init` option (v2.1.0+) allows skipping the initial request to the Node-RED API when using watch mode.
+
 ## Contributing 🤝
 
 ### Contributing via GitHub

charts/node-red/templates/deployment.yaml

@@ -85,9 +85,21 @@ spec:
                 name: {{ .Values.sidecar.env.passwordFromExistingSecret.name }}
           {{- end }}
           {{- end }}
+          {{- if .Values.sidecar.env.skip_init }}
+          - name: SKIP_INIT
+            value: "true"
+          {{- end }}
           image: "{{ .Values.sidecar.image.registry }}/{{ .Values.sidecar.image.repository }}:{{ .Values.sidecar.image.tag }}"
           imagePullPolicy: {{ .Values.sidecar.image.pullPolicy }}
           name: node-red-sidecar
+          {{- if .Values.sidecar.livenessProbe }}
+          livenessProbe:
+            {{- toYaml .Values.sidecar.livenessProbe | nindent 12 }}
+          {{- end }}
+          {{- if .Values.sidecar.readinessProbe }}
+          readinessProbe:
+            {{- toYaml .Values.sidecar.readinessProbe | nindent 12 }}
+          {{- end }}
           {{- if .Values.sidecar.resources }}
           resources:
             {{- toYaml .Values.sidecar.resources | nindent 12 }}

charts/node-red/values.yaml

@@ -131,7 +131,7 @@ metrics:
     # prometheus: kube-prometheus
 
     # -- Prometheus ServiceMonitor namespace
-    namespace: "" # "monitoring"
+    namespace: ""  # "monitoring"
     # -- Prometheus ServiceMonitor labels
     additionalLabels: {}
 
@@ -308,6 +308,8 @@ sidecar:
     #  name: node-red-api-admin-password
     # -- Key of the secret that contains the password
     #  key: password
+    # -- Skip the initial request to REQ_URL when using watch mode (v2.1.0+)
+    skip_init: false
   # -- Extra Node-Modules that will be installed  from the sidecar script
   extraNodeModules: []
   # -- Extra Environments for the sidecar
@@ -316,14 +318,28 @@ sidecar:
   resources: {}
   # -- Security context for the sidecar
   securityContext: {}
+  # -- Liveness probe for the sidecar (k8s-sidecar v2+ exposes /healthz on port 8080)
+  livenessProbe:
+    httpGet:
+      path: /healthz
+      port: 8080
+    initialDelaySeconds: 5
+    periodSeconds: 10
+  # -- Readiness probe for the sidecar (reports ready after initial sync completes)
+  readinessProbe:
+    httpGet:
+      path: /healthz
+      port: 8080
+    initialDelaySeconds: 5
+    periodSeconds: 10
   #  Image for the sidecar
   image:
     # -- The image registry to pull the sidecar from
     registry: quay.io
     # -- The image repository to pull from
     repository: kiwigrid/k8s-sidecar
     # -- The image tag to pull, default: `1.28.4`
-    tag: 1.30.5
+    tag: 2.2.3
     # -- The image pull policy, default: `IfNotPresent`
     pullPolicy: IfNotPresent
   # -- The extra volume mounts for the sidecar