Update charts with latest changes

Author: circleci-wiz

flux2/Chart.yaml

@@ -8,8 +8,8 @@ name: flux2
 sources:
   - https://github.com/fluxcd-community/helm-charts
 type: application
-version: 2026.7.1
+version: 2026.7.9
 dependencies:
   - name: wiz-outpost-common
-    version: 2026.7.1
+    version: 2026.7.9
     repository: https://wiz-sec.github.io/charts

flux2/values.yaml

@@ -41,7 +41,7 @@ cli:
 helmController:
   create: true
   image: public-registry.wiz.io/wiz-helm-controller
-  tag: v1.4.5-15
+  tag: v1.4.5-16
   resources:
     limits:
       cpu: 2
@@ -245,7 +245,7 @@ notificationController:
 sourceController:
   create: true
   image: public-registry.wiz.io/wiz-source-controller
-  tag: v1.7.4-19
+  tag: v1.7.4-20
   resources:
     limits:
       cpu: 2

git-proxy/Chart.yaml

@@ -13,12 +13,12 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 2026.7.1
+version: 2026.7.9
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
 # follow Semantic Versioning. They should reflect the version the application is using.
 appVersion: 0.0.1
 dependencies:
   - name: wiz-outpost-common
-    version: 2026.7.1
+    version: 2026.7.9
     repository: https://wiz-sec.github.io/charts

wiz-kubernetes-integration/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v2
 name: wiz-kubernetes-integration
 description: A Helm chart for Kubernetes
 type: application
-version: 0.3.56
+version: 0.3.57
 appVersion: ""
 #    Dependencies for wiz-kubernetes connector and wiz-admission-controller and wiz-sensor
 dependencies:
@@ -16,5 +16,5 @@ dependencies:
     condition: wiz-admission-controller.enabled
   - name: wiz-sensor
     repository: https://wiz-sec.github.io/charts
-    version: ">=1.0.11492"
+    version: ">=1.0.11678"
     condition: wiz-sensor.enabled

wiz-outpost-common/Chart.yaml

@@ -2,4 +2,4 @@ apiVersion: v2
 name: wiz-outpost-common
 description: Common library chart for shared outpost templates
 type: library
-version: 2026.7.1
+version: 2026.7.9

wiz-outpost-configuration/Chart.yaml

@@ -2,5 +2,5 @@ apiVersion: v2
 name: wiz-outpost-configuration
 description: A Helm chart for Kubernetes
 type: application
-version: 2026.7.5
+version: 2026.7.9
 appVersion: 0.0.1

wiz-outpost-configuration/values.yaml

@@ -117,7 +117,7 @@ outpostController:
     name: wiz-outpost-controller
     pullPolicy: Always
     # Overrides the image tag whose default is the chart appVersion.
-    tag: 2705a14d6af2b30e112e76d3f4d413934f172dad-multiarch
+    tag: 092c42ce4380384b108ce5c53e6d4bd991f2ad11-multiarch
   resources: {}
 clusterRegistrar:
   enabled: false
@@ -127,7 +127,7 @@ clusterRegistrar:
     name: wiz-outpost-cluster-registrar
     pullPolicy: Always
     # Overrides the image tag whose default is the chart appVersion.
-    tag: d18bb24d8a164d94029a17992a38730c731c7c90-multiarch
+    tag: 092c42ce4380384b108ce5c53e6d4bd991f2ad11-multiarch
   # Single configuration object that gets passed as JSON
   config:
     cloudProvider: "" # Required: aws, azure, gcp, or oci

wiz-sensor/Chart.yaml

@@ -3,8 +3,8 @@ name: wiz-sensor
 description: Wiz Sensor helm chart
 type: application
 home: https://www.wiz.io/
-version: 1.0.11492
-appVersion: 1.0.11492
+version: 1.0.11678
+appVersion: 1.0.11678
 annotations:
   diskScanAppVersion: 1.1.52
   windowsAppVersion: 1.0.11446

wiz-sensor/templates/daemonset-windows.yaml

@@ -4,6 +4,10 @@ kind: DaemonSet
 metadata:
   name: {{ include "wiz-sensor.fullname" . }}-windows
   labels: {{- include "wiz-sensor.windowsLabels" . | nindent 4 }}
+  {{- with .Values.daemonset.windowsAnnotations }}
+  annotations:
+    {{- toYaml . | nindent 4 }}
+  {{- end }}
   namespace: {{ .Release.Namespace }}
 spec:
   selector:

wiz-sensor/templates/daemonset.yaml

@@ -5,6 +5,10 @@ kind: DaemonSet
 metadata:
   name: {{ include "wiz-sensor.fullname" . }}
   labels: {{- include "wiz-sensor.labels" . | nindent 4 }}
+  {{- with .Values.daemonset.annotations }}
+  annotations:
+    {{- toYaml . | nindent 4 }}
+  {{- end }}
   namespace: {{ .Release.Namespace }}
 
 spec:
@@ -42,7 +46,7 @@ spec:
     spec:
       {{- if .Values.setFsGroup }}
       securityContext:
-        fsGroup: {{- if .Values.privileged }} 0 {{- else }} 2202 {{- end }}
+        fsGroup: {{- if or .Values.privileged .Values.runAsRoot }} 0 {{- else }} 2202 {{- end }}
       {{- end }}
 
       serviceAccountName: {{ include "wiz-sensor.serviceAccountName" . }}
@@ -160,9 +164,14 @@ spec:
             - KILL # response
           {{- end }}
           privileged: false
+          {{- if .Values.runAsRoot }}
+          runAsUser: 0
+          runAsGroup: 0
+          {{- else }}
           runAsNonRoot: true
           runAsUser: 2202
           runAsGroup: 2202
+          {{- end }}
         {{- end }}
           readOnlyRootFilesystem: true
 
@@ -480,9 +489,14 @@ spec:
             - SYS_PTRACE # Fine-tune OOM behavior.
             - IPC_LOCK # Fine-tune page thrashing behaviour.
           privileged: false
+          {{- if .Values.runAsRoot }}
+          runAsUser: 0
+          runAsGroup: 0
+          {{- else }}
           runAsNonRoot: true
           runAsUser: 2202
           runAsGroup: 2202
+          {{- end }}
         {{- end }}
           readOnlyRootFilesystem: true
           {{- if or (.Values.newAppArmorAnnotation) (and (semverCompare ">=1.30" $kubeVersion) (not .Values.oldAppArmorAnnotation)) }}