fix(deps): update fosrl/newt ( 1.10.3 ➔ 1.10.4 )

[lab-assistant]

This PR contains the following updates:

Package	Update	Change
fosrl/newt	patch	1.10.3 → 1.10.4

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

fosrl/newt (fosrl/newt)

v1.10.4

Compare Source

Container Images

• GHCR: ghcr.io/fosrl/newt@sha256:ccd2b0e9a0492d7492c00dff1295d0c487a2f71f9f8fc80b1c61e597f5181aed
• Docker Hub: docker.io/fosrl/newt@sha256:ccd2b0e9a0492d7492c00dff1295d0c487a2f71f9f8fc80b1c61e597f5181aed
  Tag: 1.10.4

What's Changed

• feat(admin): Add pprof endpoints by @​LaurenceJJones in #​269
• fix(healthcheck): Support ipv6 healthchecks by @​LaurenceJJones in #​280
• refactor(proxy): cleanup basics - constants, remove dead code, fix de… by @​LaurenceJJones in #​274
• Implement deduplication on interval messages

Full Changelog: fosrl/newt@1.10.3...1.10.4

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[lab-assistant]

--- kubernetes/apps/network/newt/app Kustomization: network/newt HelmRelease: network/newt

+++ kubernetes/apps/network/newt/app Kustomization: network/newt HelmRelease: network/newt

@@ -30,13 +30,13 @@

       name: RemediateOnFailure
   values:
     global:
       deploymentAnnotations:
         reloader.stakater.com/auto: 'true'
       image:
-        tag: 1.10.3
+        tag: 1.10.4
       nativeMode:
         enabled: false
       networkPolicy:
         enabled: false
       prometheusRule:
         enabled: true

[lab-assistant]

--- HelmRelease: network/newt ClusterRole: network/newt-sidecar-crd-viewer

+++ HelmRelease: network/newt ClusterRole: network/newt-sidecar-crd-viewer

@@ -1,24 +0,0 @@

----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  name: newt-sidecar-crd-viewer
-  labels:
-    app.kubernetes.io/managed-by: Helm
-rules:
-- apiGroups:
-  - newt-sidecar.home-operations.com
-  resources:
-  - publicresources
-  - privateresources
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - ''
-  resources:
-  - secrets
-  verbs:
-  - get
-
--- HelmRelease: network/newt ServiceAccount: network/newt

+++ HelmRelease: network/newt ServiceAccount: network/newt

@@ -0,0 +1,12 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: newt
+  namespace: network
+  labels:
+    app.kubernetes.io/name: newt
+    app.kubernetes.io/instance: newt
+    app.kubernetes.io/managed-by: Helm
+automountServiceAccountToken: true
+
--- HelmRelease: network/newt ConfigMap: network/newt-newt-main-tunnel-env

+++ HelmRelease: network/newt ConfigMap: network/newt-newt-main-tunnel-env

@@ -0,0 +1,15 @@

+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: newt-newt-main-tunnel-env
+  labels:
+    app.kubernetes.io/name: newt
+    app.kubernetes.io/instance: newt
+    app.kubernetes.io/managed-by: Helm
+    newt.instance: main-tunnel
+data:
+  BLUEPRINT_FILE: /etc/newt/blueprint.yaml
+  NEWT_ADMIN_ADDR: 0.0.0.0:2112
+  NEWT_METRICS_PROMETHEUS_ENABLED: 'true'
+
--- HelmRelease: network/newt ClusterRole: network/newt-newt

+++ HelmRelease: network/newt ClusterRole: network/newt-newt

@@ -0,0 +1,19 @@

+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: newt-newt
+  labels:
+    app.kubernetes.io/name: newt
+    app.kubernetes.io/instance: newt
+    app.kubernetes.io/managed-by: Helm
+rules:
+- apiGroups:
+  - ''
+  resources:
+  - pods
+  verbs:
+  - get
+  - list
+  - watch
+
--- HelmRelease: network/newt ClusterRoleBinding: network/newt-newt

+++ HelmRelease: network/newt ClusterRoleBinding: network/newt-newt

@@ -0,0 +1,18 @@

+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: newt-newt
+  labels:
+    app.kubernetes.io/name: newt
+    app.kubernetes.io/instance: newt
+    app.kubernetes.io/managed-by: Helm
+subjects:
+- kind: ServiceAccount
+  name: newt
+  namespace: network
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: newt-newt
+
--- HelmRelease: network/newt Service: network/newt-newt-main-tunnel

+++ HelmRelease: network/newt Service: network/newt-newt-main-tunnel

@@ -0,0 +1,25 @@

+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: newt-newt-main-tunnel
+  labels:
+    app.kubernetes.io/name: newt
+    app.kubernetes.io/instance: newt
+    app.kubernetes.io/managed-by: Helm
+    newt.instance: main-tunnel
+spec:
+  type: ClusterIP
+  selector:
+    app.kubernetes.io/instance: newt
+    newt.instance: main-tunnel
+  ports:
+  - name: wg
+    port: 51820
+    targetPort: 51820
+    protocol: UDP
+  - name: tester
+    port: 51821
+    targetPort: 51821
+    protocol: UDP
+
--- HelmRelease: network/newt Deployment: network/newt-newt-main-tunnel

+++ HelmRelease: network/newt Deployment: network/newt-newt-main-tunnel

@@ -0,0 +1,132 @@

+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: newt-newt-main-tunnel
+  labels:
+    app.kubernetes.io/name: newt
+    app.kubernetes.io/instance: newt
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/component: newt
+    newt.instance: main-tunnel
+  annotations:
+    reloader.stakater.com/auto: 'true'
+spec:
+  revisionHistoryLimit: 3
+  replicas: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/instance: newt
+      newt.instance: main-tunnel
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/component: newt
+        app.kubernetes.io/instance: newt
+        newt.instance: main-tunnel
+    spec:
+      serviceAccountName: newt
+      automountServiceAccountToken: true
+      initContainers:
+      - args:
+        - --enable-service
+        env:
+        - name: NEWTSC_SITE_ID
+          valueFrom:
+            secretKeyRef:
+              key: NEWTSC_SITE_ID
+              name: newt-secret
+        - name: NEWTSC_DENY_COUNTRIES
+          value: RU,CN,KP,IR,BY,IL
+        - name: NEWTSC_GATEWAY_NAME
+          value: envoy-external
+        - name: NEWTSC_TARGET_HOSTNAME
+          value: envoy-external.network.svc.cluster.local
+        image: ghcr.io/home-operations/newt-sidecar:0.2.1
+        name: newt-sidecar
+        resources:
+          limits:
+            memory: 128Mi
+        restartPolicy: Always
+        volumeMounts:
+        - mountPath: /etc/newt
+          name: blueprint
+      - command:
+        - /bin/sh
+        - -c
+        - until test -f /etc/newt/blueprint.yaml; do sleep 1; done
+        image: ghcr.io/home-operations/busybox:1.37.0
+        name: wait-blueprint
+        resources:
+          limits:
+            memory: 16Mi
+          requests:
+            cpu: 10m
+        volumeMounts:
+        - mountPath: /etc/newt
+          name: blueprint
+      containers:
+      - name: newt
+        image: docker.io/fosrl/newt:1.10.4
+        imagePullPolicy: IfNotPresent
+        securityContext:
+          runAsUser: 65534
+          runAsNonRoot: true
+          allowPrivilegeEscalation: false
+          readOnlyRootFilesystem: true
+          capabilities:
+            drop:
+            - ALL
+        env:
+        - name: PANGOLIN_ENDPOINT
+          valueFrom:
+            secretKeyRef:
+              name: newt-secret
+              key: PANGOLIN_ENDPOINT
+        - name: NEWT_ID
+          valueFrom:
+            secretKeyRef:
+              name: newt-secret
+              key: NEWT_ID
+        - name: NEWT_SECRET
+          valueFrom:
+            secretKeyRef:
+              name: newt-secret
+              key: NEWT_SECRET
+        - name: LOG_LEVEL
+          value: INFO
+        - name: MTU
+          value: '1380'
+        - name: PING_INTERVAL
+          value: 60s
+        - name: ACCEPT_CLIENTS
+          value: 'true'
+        - name: BLUEPRINT_FILE
+          value: /etc/newt/blueprint.yaml
+        - name: NEWT_ADMIN_ADDR
+          value: 0.0.0.0:2112
+        - name: NEWT_METRICS_PROMETHEUS_ENABLED
+          value: 'true'
+        ports:
+        - name: wg
+          containerPort: 51820
+          protocol: UDP
+        - name: tester
+          containerPort: 51821
+          protocol: UDP
+        volumeMounts:
+        - mountPath: /etc/newt
+          name: blueprint
+        resources:
+          limits:
+            cpu: 200m
+            ephemeral-storage: 256Mi
+            memory: 256Mi
+          requests:
+            cpu: 100m
+            ephemeral-storage: 128Mi
+            memory: 128Mi
+      volumes:
+      - emptyDir: {}
+        name: blueprint
+