chore(platform): update helm release grafana -> v13

[renovate]

This PR contains the following updates:

Package	Update	Change
grafana (source)	major	12.11.2 → 13.2.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

grafana-community/helm-charts (grafana)

v13.2.0

Compare Source

Helm chart for Grafana Loki supporting monolithic, simple scalable, and microservices modes.

What's Changed

• [loki] Update docker.io/nginxinc/nginx-unprivileged Docker tag to v1.30 by @​renovate[bot] in #​382

Full Changelog: grafana-community/helm-charts@tempo-distributed-2.15.0...loki-13.2.0

v13.1.0

Compare Source

Helm chart for Grafana Loki supporting monolithic, simple scalable, and microservices modes.

What's Changed

• [loki] Add liveness probe for sidecar and loki + IPv6 support for memberlist + GRPC optimized defaults. by @​jkroepke in #​346

Full Changelog: grafana-community/helm-charts@loki-13.0.3...loki-13.1.0

v13.0.1

Compare Source

The leading tool for querying and visualizing time series and metrics.

What's Changed

• [grafana] Update quay.io/kiwigrid/k8s-sidecar Docker tag to v2.10.3 by @​renovate[bot] in #​774

Full Changelog: grafana-community/helm-charts@loki-18.11.6...grafana-13.0.1

v13.0.0

Compare Source

The leading tool for querying and visualizing time series and metrics.

What's Changed

• [grafana] Set readOnlyRootFilesystem=true and use distroless image tag by @​jkroepke in #​756

Full Changelog: grafana-community/helm-charts@synthetic-monitoring-agent-1.18.0...grafana-13.0.0

---

Configuration

📅 Schedule: (in timezone Asia/Taipei)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

--- HelmRelease: grafana/grafana Deployment: grafana/grafana

+++ HelmRelease: grafana/grafana Deployment: grafana/grafana

@@ -34,23 +34,26 @@

         runAsGroup: 472
         runAsNonRoot: true
         runAsUser: 472
       enableServiceLinks: true
       containers:
       - name: grafana
-        image: docker.io/grafana/grafana:13.2.0
+        image: docker.io/grafana/grafana:13.2.1-distroless
         imagePullPolicy: IfNotPresent
         securityContext:
           allowPrivilegeEscalation: false
           capabilities:
             drop:
             - ALL
           privileged: false
+          readOnlyRootFilesystem: true
           seccompProfile:
             type: RuntimeDefault
         volumeMounts:
+        - name: tmp
+          mountPath: /tmp
         - name: config
           mountPath: /etc/grafana/grafana.ini
           subPath: grafana.ini
         - name: storage
           mountPath: /var/lib/grafana
         - name: search
@@ -126,12 +129,14 @@

           limits:
             memory: 512Mi
           requests:
             cpu: 100m
             memory: 512Mi
       volumes:
+      - name: tmp
+        emptyDir: {}
       - name: config
         configMap:
           name: grafana
       - name: storage
         emptyDir: {}
       - name: search

[github-actions]

--- kubernetes/grafana Kustomization: flux-system/5-grafana HelmRelease: grafana/grafana

+++ kubernetes/grafana Kustomization: flux-system/5-grafana HelmRelease: grafana/grafana

@@ -12,13 +12,13 @@

     spec:
       chart: grafana
       sourceRef:
         kind: HelmRepository
         name: grafana-community
         namespace: grafana
-      version: 12.11.2
+      version: 13.2.0
   interval: 1h
   maxHistory: 1
   values:
     admin:
       existingSecret: grafana-secret
       passwordKey: ADMIN_PASSWORD