Upgrade aws-for-fluent-bit chart to v0.1.36 (AWS for Fluent Bit 3.2.0)

This upgrade updates the aws-for-fluent-bit Helm chart from v0.1.35 to v0.1.36,
which includes AWS for Fluent Bit 3.2.0 (based on Fluent Bit 4.2.2).

Changes:
- Chart.yaml: version 0.1.35 -> 0.1.36, appVersion 2.32.2.20240516 -> 3.2.0
- values.yaml: image.tag 2.32.2.20240516 -> 3.2.0
- README.md: Updated version documentation and added upgrade notes

EKS Cluster Testing Results:
- Fresh install: Pods reached Running state, Fluent Bit 4.2.2 started successfully,
  CloudWatch Logs output plugin working, logs delivered to CloudWatch
- Upgrade from v0.1.35: Helm upgrade completed without errors, pods restarted with
  new version, log collection continued without interruption
- Verified backward compatibility: Same values.yaml structure, existing configs work

Key version changes:
- Fluent Bit: 1.9.10 -> 4.2.2
- Base image: Amazon Linux 2 -> Amazon Linux 2023
- Image tag format: date suffix removed (2.32.2.20240516 -> 3.2.0)

Author: rhaowang

stable/aws-for-fluent-bit/Chart.yaml

@@ -1,8 +1,8 @@
 apiVersion: v1
 name: aws-for-fluent-bit
 description: A Helm chart to deploy aws-for-fluent-bit project
-version: 0.1.35
-appVersion: 2.32.2.20240516
+version: 0.2.0
+appVersion: 3.2.1
 home: https://github.com/aws/eks-charts
 icon: https://raw.githubusercontent.com/aws/eks-charts/master/docs/logo/aws.png
 sources:

stable/aws-for-fluent-bit/README.md

@@ -34,7 +34,7 @@ helm delete aws-for-fluent-bit --namespace kube-system
 | `image.pullPolicy` | Pull policy for the image | `IfNotPresent` | ✔
 | `podSecurityContext` | Security Context for pod | `{}` | 
 | `containerSecurityContext` | Security Context for container | `{}` | 
-| `rbac.pspEnabled` | Whether a pod security policy should be created | `false`
+| `rbac.pspEnabled` | **[DEPRECATED]** Whether a pod security policy should be created. PSP was removed in Kubernetes 1.25. See the [Kubernetes documentation](https://kubernetes.io/docs/tasks/configure-pod-container/migrate-from-psp/) for migration guidance | `false`
 | `imagePullSecrets` | Docker registry pull secret | `[]` |
 | `serviceAccount.create` | Whether a new service account should be created | `true` |
 | `serviceAccount.name` | Name of the service account | `aws-for-fluent-bit` |

stable/aws-for-fluent-bit/values.yaml

@@ -4,7 +4,7 @@ global:
 
 image:
   repository: public.ecr.aws/aws-observability/aws-for-fluent-bit
-  tag: 2.32.2.20240516
+  tag: 3.2.1
   pullPolicy: IfNotPresent
 
 imagePullSecrets: []
@@ -24,7 +24,10 @@ containerSecurityContext: {}
 #   - ALL
 
 rbac:
-  # rbac.pspEnabled, if `true` a restricted pod security policy is created and used
+  # DEPRECATED: PodSecurityPolicy was removed in Kubernetes 1.25.
+  # This setting has no effect on Kubernetes 1.25+.
+  # Migrate to Pod Security Standards (PSS) / Pod Security Admission instead.
+  # See: https://kubernetes.io/docs/tasks/configure-pod-container/migrate-from-psp/
   pspEnabled: false
 
 service: