feat: Upgrade Go to 1.25.8 (release-3.6.x) by DylanGuedes · Pull Request #21240 · grafana/loki

DylanGuedes · 2026-03-24T17:31:54Z

What this PR does / why we need it:

Which issue(s) this PR fixes:
Fixes #

Special notes for your reviewer:

Checklist

Reviewed the CONTRIBUTING.md guide (required)
Documentation added
Tests updated
Title matches the required conventional commits format, see here
- Note that Promtail is considered to be feature complete, and future development for logs collection will be in Grafana Alloy. As such, feat PRs are unlikely to be accepted unless a case can be made for the feature actually being a bug fix to existing behavior.
Changes that require user attention or interaction to upgrade are documented in docs/sources/setup/upgrade/_index.md
If the change is deprecating or removing a configuration option, update the deprecated-config.yaml and deleted-config.yaml files respectively in the tools/deprecated-config-checker directory. Example PR

github-actions · 2026-03-24T17:33:28Z

Helm Diff Output - Summary

Default Values Scenario-diff-output

default, loki, ConfigMap (v1) has changed:
  # Source: loki/templates/config.yaml
  apiVersion: v1
  kind: ConfigMap
  metadata:
    name: loki
    namespace: default
    labels:
-     helm.sh/chart: loki-6.55.0
+     helm.sh/chart: loki-6.43.0
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.6.7"
+     app.kubernetes.io/version: "3.5.5"
  data:
    config.yaml: |
      
      auth_enabled: true
      bloom_build:
        builder:
          planner_address: loki-backend-headless.default.svc.cluster.local:9095
        enabled: false
      bloom_gateway:
        client:
          addresses: dnssrvnoa+_grpc._tcp.loki-backend-headless.default.svc.cluster.local
        enabled: false
      chunk_store_config:
        chunk_cache_config:
          background:
            writeback_buffer: 500000
            writeback_goroutines: 1
            writeback_size_limit: 500MB
          default_validity: 0s
          memcached:
            batch_size: 4
            parallelism: 5
          memcached_client:
-           addresses: dnssrvnoa+_memcached-client._tcp.loki-release-chunks-cache.default.svc.cluster.local
+           addresses: dnssrvnoa+_memcached-client._tcp.loki-release-chunks-cache.default.svc
            consistent_hash: true
            max_idle_conns: 72
            timeout: 2000ms
      common:
        compactor_grpc_address: 'loki-backend.default.svc.cluster.local:9095'
        path_prefix: /var/loki
        replication_factor: 1
        storage:
          s3:
            bucketnames: chunks
            insecure: false
            s3forcepathstyle: false
      frontend:
        scheduler_address: ""
        tail_proxy_url: ""
      frontend_worker:
        scheduler_address: ""
      index_gateway:
        mode: simple
      limits_config:
        max_cache_freshness_per_query: 10m
        query_timeout: 300s
        reject_old_samples: true
        reject_old_samples_max_age: 168h
        split_queries_by_interval: 15m
        volume_enabled: true
      memberlist:
        join_members:
-       - loki-release-memberlist.default.svc.cluster.local
+       - loki-memberlist
      pattern_ingester:
        enabled: false
      query_range:
        align_queries_with_step: true
        cache_results: true
        results_cache:
          cache:
            background:
              writeback_buffer: 500000
              writeback_goroutines: 1
              writeback_size_limit: 500MB
            default_validity: 12h
            memcached_client:
-             addresses: dnssrvnoa+_memcached-client._tcp.loki-release-results-cache.default.svc.cluster.local
+             addresses: dnssrvnoa+_memcached-client._tcp.loki-release-results-cache.default.svc
              consistent_hash: true
              timeout: 500ms
              update_interval: 1m
      ruler:
        storage:
          s3:
            bucketnames: ruler
            insecure: false
            s3forcepathstyle: false
          type: s3
        wal:
          dir: /var/loki/ruler-wal
      runtime_config:
        file: /etc/loki/runtime-config/runtime-config.yaml
      schema_config:
        configs:
        - from: "2024-04-01"
          index:
            period: 24h
            prefix: index_
          object_store: 'filesystem'
          schema: v13
          store: tsdb
      server:
        grpc_listen_port: 9095
        http_listen_port: 3100
        http_server_read_timeout: 600s
        http_server_write_timeout: 600s
      storage_config:
        bloom_shipper:
          working_directory: /var/loki/data/bloomshipper
        boltdb_shipper:
          index_gateway_client:
            server_address: dns+loki-backend-headless.default.svc.cluster.local:9095
        hedging:
          at: 250ms
          max_per_second: 20
          up_to: 3
        tsdb_shipper:
          index_gateway_client:
            server_address: dns+loki-backend-headless.default.svc.cluster.local:9095
        use_thanos_objstore: false
      tracing:
        enabled: false
default, loki-backend, Service (v1) has changed:
  # Source: loki/templates/backend/service-backend.yaml
  apiVersion: v1
  kind: Service
  metadata:
    name: loki-backend
    namespace: default
    labels:
-     helm.sh/chart: loki-6.55.0
+     helm.sh/chart: loki-6.43.0
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.6.7"
+     app.kubernetes.io/version: "3.5.5"
      app.kubernetes.io/component: backend
    annotations:
  spec:
    type: ClusterIP
    ports:
      - name: http-metrics
        port: 3100
        targetPort: http-metrics
        protocol: TCP
      - name: grpc
        port: 9095
        targetPort: grpc
        protocol: TCP
    selector:
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
      app.kubernetes.io/component: backend
default, loki-backend, StatefulSet (apps) has changed:
  # Source: loki/templates/backend/statefulset-backend.yaml
  apiVersion: apps/v1
  kind: StatefulSet
  metadata:
    name: loki-backend
    namespace: default
    labels:
-     helm.sh/chart: loki-6.55.0
+     helm.sh/chart: loki-6.43.0
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.6.7"
+     app.kubernetes.io/version: "3.5.5"
      app.kubernetes.io/component: backend
      app.kubernetes.io/part-of: memberlist
  spec:
    replicas: 1
    podManagementPolicy: Parallel
    updateStrategy:
      rollingUpdate:
        partition: 0
    serviceName: loki-backend-headless
    revisionHistoryLimit: 10
    
    persistentVolumeClaimRetentionPolicy:
      whenDeleted: Delete
      whenScaled: Delete
    selector:
      matchLabels:
        app.kubernetes.io/name: loki
        app.kubernetes.io/instance: loki-release
        app.kubernetes.io/component: backend
    template:
      metadata:
        annotations:
-         checksum/config: 6457764bbaed49d2a88ffc0b26082e5b83bf59c884c9bd0b327e36a23e468f89
+         checksum/config: afc4770faa248a744723fe521d644449dbc7de4a189a88072560a74feacd35fc
          kubectl.kubernetes.io/default-container: "loki"
        labels:
-         helm.sh/chart: loki-6.55.0
+         helm.sh/chart: loki-6.43.0
          app.kubernetes.io/name: loki
          app.kubernetes.io/instance: loki-release
-         app.kubernetes.io/version: "3.6.7"
+         app.kubernetes.io/version: "3.5.5"
          app.kubernetes.io/component: backend
          app.kubernetes.io/part-of: memberlist
      spec:
-       serviceAccountName: loki-release
+       serviceAccountName: loki
        automountServiceAccountToken: true
        
        securityContext:
          fsGroup: 10001
-         fsGroupChangePolicy: OnRootMismatch
          runAsGroup: 10001
          runAsNonRoot: true
          runAsUser: 10001
        terminationGracePeriodSeconds: 300
        containers:
          - name: loki
-           image: docker.io/grafana/loki:3.6.7
+           image: docker.io/grafana/loki:3.5.5
            imagePullPolicy: IfNotPresent
            args:
              - -config.file=/etc/loki/config/config.yaml
              - -target=backend
              - -legacy-read-mode=false
            ports:
              - name: http-metrics
                containerPort: 3100
                protocol: TCP
              - name: grpc
                containerPort: 9095
                protocol: TCP
              - name: http-memberlist
                containerPort: 7946
                protocol: TCP
            securityContext:
              allowPrivilegeEscalation: false
              capabilities:
                drop:
                - ALL
              readOnlyRootFilesystem: true
            readinessProbe:
-             failureThreshold: 3
              httpGet:
                path: /ready
                port: http-metrics
-             initialDelaySeconds: 15
-             periodSeconds: 10
-             successThreshold: 1
+             initialDelaySeconds: 30
              timeoutSeconds: 1
            volumeMounts:
              - name: config
                mountPath: /etc/loki/config
              - name: runtime-config
                mountPath: /etc/loki/runtime-config
              - name: tmp
                mountPath: /tmp
              - name: data
                mountPath: /var/loki
              - name: sc-rules-volume
                mountPath: "/rules"
            resources:
              {}
          - name: loki-sc-rules
-           image: docker.io/kiwigrid/k8s-sidecar:2.5.0
+           image: "docker.io/kiwigrid/k8s-sidecar:1.30.10"
            imagePullPolicy: IfNotPresent
            env:
              - name: METHOD
                value: WATCH
              - name: LABEL
                value: "loki_rule"
              - name: FOLDER
                value: "/rules"
              - name: RESOURCE
                value: "both"
              - name: WATCH_SERVER_TIMEOUT
                value: "60"
              - name: WATCH_CLIENT_TIMEOUT
                value: "60"
              - name: LOG_LEVEL
                value: "INFO"
            securityContext:
              allowPrivilegeEscalation: false
              capabilities:
                drop:
                - ALL
              readOnlyRootFilesystem: true
            volumeMounts:
-             - name: tmp
-               mountPath: /tmp
              - name: sc-rules-volume
                mountPath: "/rules"
        affinity:
          podAntiAffinity:
            requiredDuringSchedulingIgnoredDuringExecution:
            - labelSelector:
                matchLabels:
                  app.kubernetes.io/component: backend
                  app.kubernetes.io/instance: 'loki-release'
                  app.kubernetes.io/name: 'loki'
              topologyKey: kubernetes.io/hostname
        volumes:
          - name: tmp
            emptyDir: {}
          - name: config
            configMap:
              name: loki
              items:
                - key: "config.yaml"
                  path: "config.yaml"
          - name: runtime-config
            configMap:
              name: loki-runtime
          - name: sc-rules-volume
            emptyDir: {}
    volumeClaimTemplates:
      - apiVersion: v1
        kind: PersistentVolumeClaim
        metadata:
          name: data
        spec:
          accessModes:
            - ReadWriteOnce
          resources:
            requests:
              storage: "10Gi"
default, loki-canary, DaemonSet (apps) has changed:
  # Source: loki/templates/loki-canary/daemonset.yaml
  apiVersion: apps/v1
  kind: DaemonSet
  metadata:
    name: loki-canary
    namespace: default
    labels:
-     helm.sh/chart: loki-6.55.0
+     helm.sh/chart: loki-6.43.0
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.6.7"
+     app.kubernetes.io/version: "3.5.5"
      app.kubernetes.io/component: canary
  spec:
    selector:
      matchLabels:
        app.kubernetes.io/name: loki
        app.kubernetes.io/instance: loki-release
        app.kubernetes.io/component: canary
    updateStrategy:
      rollingUpdate:
        maxUnavailable: 1
      type: RollingUpdate
    template:
      metadata:
        labels:
          app.kubernetes.io/name: loki
          app.kubernetes.io/instance: loki-release
          app.kubernetes.io/component: canary
      spec:
        serviceAccountName: loki-canary
        
        securityContext:
          fsGroup: 10001
-         fsGroupChangePolicy: OnRootMismatch
          runAsGroup: 10001
          runAsNonRoot: true
          runAsUser: 10001
        containers:
          - name: loki-canary
-           image: docker.io/grafana/loki-canary:3.6.7
+           image: docker.io/grafana/loki-canary:3.5.5
            imagePullPolicy: IfNotPresent
            args:
              - -addr=loki-release-gateway.default.svc.cluster.local.:80
              - -labelname=pod
              - -labelvalue=$(POD_NAME)
              - -user=self-monitoring
              - -tenant-id=self-monitoring
              - -pass=
              - -push=true
            securityContext:
              allowPrivilegeEscalation: false
              capabilities:
                drop:
                - ALL
              readOnlyRootFilesystem: true
            volumeMounts:
            ports:
              - name: http-metrics
                containerPort: 3500
                protocol: TCP
            env:
              - name: POD_NAME
                valueFrom:
                  fieldRef:
                    fieldPath: metadata.name
              
            readinessProbe:
              httpGet:
                path: /metrics
                port: http-metrics
              initialDelaySeconds: 15
              timeoutSeconds: 1
        volumes:
default, loki-canary, Service (v1) has changed:
  # Source: loki/templates/loki-canary/service.yaml
  apiVersion: v1
  kind: Service
  metadata:
    name: loki-canary
    namespace: default
    labels:
-     helm.sh/chart: loki-6.55.0
+     helm.sh/chart: loki-6.43.0
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.6.7"
+     app.kubernetes.io/version: "3.5.5"
      app.kubernetes.io/component: canary
    annotations:
  spec:
    type: ClusterIP
    ports:
      - name: http-metrics
        port: 3500
        targetPort: http-metrics
        protocol: TCP
    selector:
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
      app.kubernetes.io/component: canary
default, loki-canary, ServiceAccount (v1) has changed:
  # Source: loki/templates/loki-canary/serviceaccount.yaml
  apiVersion: v1
  kind: ServiceAccount
  metadata:
    name: loki-canary
    namespace: default
    labels:
-     helm.sh/chart: loki-6.55.0
+     helm.sh/chart: loki-6.43.0
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.6.7"
+     app.kubernetes.io/version: "3.5.5"
      app.kubernetes.io/component: canary
  automountServiceAccountToken: true
default, loki-read, Deployment (apps) has changed:
  # Source: loki/templates/read/deployment-read.yaml
  apiVersion: apps/v1
  kind: Deployment
  metadata:
    name: loki-read
    namespace: default
    labels:
      app.kubernetes.io/part-of: memberlist
-     helm.sh/chart: loki-6.55.0
+     helm.sh/chart: loki-6.43.0
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.6.7"
+     app.kubernetes.io/version: "3.5.5"
      app.kubernetes.io/component: read
  spec:
    replicas: 1
    strategy:
      rollingUpdate:
        maxSurge: 0
        maxUnavailable: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        app.kubernetes.io/name: loki
        app.kubernetes.io/instance: loki-release
        app.kubernetes.io/component: read
    template:
      metadata:
        annotations:
-         checksum/config: 6457764bbaed49d2a88ffc0b26082e5b83bf59c884c9bd0b327e36a23e468f89
+         checksum/config: afc4770faa248a744723fe521d644449dbc7de4a189a88072560a74feacd35fc
        labels:
          app.kubernetes.io/part-of: memberlist
          app.kubernetes.io/name: loki
          app.kubernetes.io/instance: loki-release
          app.kubernetes.io/component: read
      spec:
-       serviceAccountName: loki-release
+       serviceAccountName: loki
        automountServiceAccountToken: true
        
        securityContext:
          fsGroup: 10001
-         fsGroupChangePolicy: OnRootMismatch
          runAsGroup: 10001
          runAsNonRoot: true
          runAsUser: 10001
        terminationGracePeriodSeconds: 30
        containers:
          - name: loki
-           image: docker.io/grafana/loki:3.6.7
+           image: docker.io/grafana/loki:3.5.5
            imagePullPolicy: IfNotPresent
            args:
              - -config.file=/etc/loki/config/config.yaml
              - -target=read
              - -legacy-read-mode=false
              - -common.compactor-grpc-address=loki-backend.default.svc.cluster.local:9095
            ports:
              - name: http-metrics
                containerPort: 3100
                protocol: TCP
              - name: grpc
                containerPort: 9095
                protocol: TCP
              - name: http-memberlist
                containerPort: 7946
                protocol: TCP
            securityContext:
              allowPrivilegeEscalation: false
              capabilities:
                drop:
                - ALL
              readOnlyRootFilesystem: true
            readinessProbe:
-             failureThreshold: 3
              httpGet:
                path: /ready
                port: http-metrics
-             initialDelaySeconds: 15
-             periodSeconds: 10
-             successThreshold: 1
+             initialDelaySeconds: 30
              timeoutSeconds: 1
            volumeMounts:
              - name: config
                mountPath: /etc/loki/config
              - name: runtime-config
                mountPath: /etc/loki/runtime-config
              - name: tmp
                mountPath: /tmp
              - name: data
                mountPath: /var/loki
            resources:
              {}
        affinity:
          podAntiAffinity:
            requiredDuringSchedulingIgnoredDuringExecution:
            - labelSelector:
                matchLabels:
                  app.kubernetes.io/component: read
                  app.kubernetes.io/instance: 'loki-release'
                  app.kubernetes.io/name: 'loki'
              topologyKey: kubernetes.io/hostname
        volumes:
          - name: tmp
            emptyDir: {}
          - name: data
            emptyDir: {}
          - name: config
            configMap:
              name: loki
              items:
                - key: "config.yaml"
                  path: "config.yaml"
          - name: runtime-config
            configMap:
              name: loki-runtime
default, loki-read, Service (v1) has changed:
  # Source: loki/templates/read/service-read.yaml
  apiVersion: v1
  kind: Service
  metadata:
    name: loki-read
    namespace: default
    labels:
-     helm.sh/chart: loki-6.55.0
+     helm.sh/chart: loki-6.43.0
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.6.7"
+     app.kubernetes.io/version: "3.5.5"
      app.kubernetes.io/component: read
    annotations:
  spec:
    type: ClusterIP
    ports:
      - name: http-metrics
        port: 3100
        targetPort: http-metrics
        protocol: TCP
      - name: grpc
        port: 9095
        targetPort: grpc
        protocol: TCP
    selector:
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
      app.kubernetes.io/component: read
default, loki-release-chunks-cache, Service (v1) has changed:
  # Source: loki/templates/chunks-cache/service-chunks-cache-headless.yaml
  apiVersion: v1
  kind: Service
  metadata:
    name: loki-release-chunks-cache
    labels:
-     helm.sh/chart: loki-6.55.0
+     helm.sh/chart: loki-6.43.0
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.6.7"
+     app.kubernetes.io/version: "3.5.5"
      app.kubernetes.io/component: "memcached-chunks-cache"
    annotations:
      {}
    namespace: "default"
  spec:
    type: ClusterIP
    clusterIP: None
    ports:
      - name: memcached-client
        port: 11211
        targetPort: client
      - name: http-metrics
        port: 9150
        targetPort: http-metrics
      
    selector:
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
      app.kubernetes.io/component: "memcached-chunks-cache"
default, loki-release-chunks-cache, StatefulSet (apps) has changed:
  # Source: loki/templates/chunks-cache/statefulset-chunks-cache.yaml
  apiVersion: apps/v1
  kind: StatefulSet
  metadata:
    name: loki-release-chunks-cache
    labels:
-     helm.sh/chart: loki-6.55.0
+     helm.sh/chart: loki-6.43.0
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.6.7"
+     app.kubernetes.io/version: "3.5.5"
      app.kubernetes.io/component: "memcached-chunks-cache"
      name: "memcached-chunks-cache"
    annotations:
      {}
    namespace: "default"
  spec:
    podManagementPolicy: Parallel
    replicas: 1
    selector:
      matchLabels:
        app.kubernetes.io/name: loki
        app.kubernetes.io/instance: loki-release
        app.kubernetes.io/component: "memcached-chunks-cache"
        name: "memcached-chunks-cache"
    updateStrategy:
      type: RollingUpdate
    serviceName: loki-release-chunks-cache
    template:
      metadata:
        labels:
          app.kubernetes.io/name: loki
          app.kubernetes.io/instance: loki-release
          app.kubernetes.io/component: "memcached-chunks-cache"
          name: "memcached-chunks-cache"
        annotations:
      spec:
-       serviceAccountName: loki-release
+       serviceAccountName: loki
        securityContext:
          fsGroup: 11211
          runAsGroup: 11211
          runAsNonRoot: true
          runAsUser: 11211
        initContainers:
          []
        nodeSelector:
          {}
        affinity:
          {}
        topologySpreadConstraints:
          []
        tolerations:
          []
        terminationGracePeriodSeconds: 60
        containers:
          - name: memcached
            image: memcached:1.6.39-alpine
            imagePullPolicy: IfNotPresent
            resources:
              limits:
                memory: 9830Mi
              requests:
                cpu: 500m
                memory: 9830Mi
            ports:
              - containerPort: 11211
                name: client
            args:
              - -m 8192
              - --extended=modern,track_sizes
              - -I 5m
              - -c 16384
              - -v
              - -u 11211
            env:
            envFrom:
            securityContext:
              allowPrivilegeEscalation: false
              capabilities:
                drop:
                - ALL
              readOnlyRootFilesystem: true
            readinessProbe:
              failureThreshold: 6
              initialDelaySeconds: 5
              periodSeconds: 5
              tcpSocket:
                port: client
              timeoutSeconds: 3
            livenessProbe:
              failureThreshold: 3
              initialDelaySeconds: 30
              periodSeconds: 10
              tcpSocket:
                port: client
              timeoutSeconds: 5
          - name: exporter
-           image: prom/memcached-exporter:v0.15.4
+           image: prom/memcached-exporter:v0.15.3
            imagePullPolicy: IfNotPresent
            ports:
              - containerPort: 9150
                name: http-metrics
            args:
              - "--memcached.address=localhost:11211"
              - "--web.listen-address=0.0.0.0:9150"
            resources:
              limits: {}
              requests: {}
            securityContext:
              allowPrivilegeEscalation: false
              capabilities:
                drop:
                - ALL
              readOnlyRootFilesystem: true
            readinessProbe:
              failureThreshold: 3
              httpGet:
                path: /metrics
                port: http-metrics
              initialDelaySeconds: 5
              periodSeconds: 5
              timeoutSeconds: 3
            livenessProbe:
              failureThreshold: 3
              httpGet:
                path: /metrics
                port: http-metrics
              initialDelaySeconds: 30
              periodSeconds: 10
              timeoutSeconds: 5
default, loki-release-clusterrole, ClusterRole (rbac.authorization.k8s.io) has changed:
  # Source: loki/templates/backend/clusterrole.yaml
  kind: ClusterRole
  apiVersion: rbac.authorization.k8s.io/v1
  metadata:
    labels:
-     helm.sh/chart: loki-6.55.0
+     helm.sh/chart: loki-6.43.0
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.6.7"
+     app.kubernetes.io/version: "3.5.5"
    name: loki-release-clusterrole
  rules:
  - apiGroups: [""] # "" indicates the core API group
    resources: ["configmaps", "secrets"]
    verbs: ["get", "watch", "list"]
default, loki-release-clusterrolebinding, ClusterRoleBinding (rbac.authorization.k8s.io) has changed:
  # Source: loki/templates/backend/clusterrolebinding.yaml
  kind: ClusterRoleBinding
  apiVersion: rbac.authorization.k8s.io/v1
  metadata:
    name: loki-release-clusterrolebinding
    labels:
-     helm.sh/chart: loki-6.55.0
+     helm.sh/chart: loki-6.43.0
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.6.7"
+     app.kubernetes.io/version: "3.5.5"
  subjects:
    - kind: ServiceAccount
-     name: loki-release
+     name: loki
      namespace: default
  roleRef:
    kind: ClusterRole
    name: loki-release-clusterrole
    apiGroup: rbac.authorization.k8s.io
default, loki-release-gateway, ConfigMap (v1) has changed:
  # Source: loki/templates/gateway/configmap-gateway.yaml
  apiVersion: v1
  kind: ConfigMap
  metadata:
    name: loki-release-gateway
    namespace: default
    labels:
-     helm.sh/chart: loki-6.55.0
+     helm.sh/chart: loki-6.43.0
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.6.7"
+     app.kubernetes.io/version: "3.5.5"
      app.kubernetes.io/component: gateway
  data:
    nginx.conf: |
      worker_processes  5;  ## Default: 1
      error_log  /dev/stderr;
      pid        /tmp/nginx.pid;
      worker_rlimit_nofile 8192;
      
      events {
        worker_connections  4096;  ## Default: 1024
      }
      
      http {
        client_body_temp_path /tmp/client_temp;
        proxy_temp_path       /tmp/proxy_temp_path;
        fastcgi_temp_path     /tmp/fastcgi_temp;
        uwsgi_temp_path       /tmp/uwsgi_temp;
        scgi_temp_path        /tmp/scgi_temp;
      
        client_max_body_size  4M;
      
        proxy_read_timeout    600; ## 10 minutes
        proxy_send_timeout    600;
        proxy_connect_timeout 600;
      
        proxy_http_version    1.1;
      
        default_type application/octet-stream;
        log_format   main '$remote_addr - $remote_user [$time_local]  $status '
              '"$request" $body_bytes_sent "$http_referer" '
              '"$http_user_agent" "$http_x_forwarded_for"';
        access_log   /dev/stderr  main;
      
        sendfile     on;
        tcp_nopush   on;
        resolver kube-dns.kube-system.svc.cluster.local.;
      
        # if the X-Query-Tags header is empty, set a noop= without a value as empty values are not logged
        map $http_x_query_tags $query_tags {
          ""        "noop=";            # When header is empty, set noop=
          default   $http_x_query_tags; # Otherwise, preserve the original value
        }
      
        server {
          listen             8080;
          listen             [::]:8080;
      
          location = / {
            
            return 200 'OK';
            auth_basic off;
          }
      
          ########################################################
          # Configure backend targets
          location ^~ /ui {
            
            proxy_pass       http://loki-read.default.svc.cluster.local:3100$request_uri;
          }
      
          # Distributor
          location = /api/prom/push {
            
            proxy_pass       http://loki-write.default.svc.cluster.local:3100$request_uri;
          }
          location = /loki/api/v1/push {
            
            proxy_pass       http://loki-write.default.svc.cluster.local:3100$request_uri;
          }
          location = /distributor/ring {
            
            proxy_pass       http://loki-write.default.svc.cluster.local:3100$request_uri;
          }
          location = /otlp/v1/logs {
            
            proxy_pass       http://loki-write.default.svc.cluster.local:3100$request_uri;
          }
      
          # Ingester
          location = /flush {
            
            proxy_pass       http://loki-write.default.svc.cluster.local:3100$request_uri;
          }
          location ^~ /ingester/ {
            
            proxy_pass       http://loki-write.default.svc.cluster.local:3100$request_uri;
          }
          location = /ingester {
            
            internal;        # to suppress 301
          }
      
          # Ring
          location = /ring {
            
            proxy_pass       http://loki-write.default.svc.cluster.local:3100$request_uri;
          }
      
          # MemberListKV
          location = /memberlist {
            
            proxy_pass       http://loki-write.default.svc.cluster.local:3100$request_uri;
          }
      
          # Ruler
          location = /ruler/ring {
            
            proxy_pass       http://loki-backend.default.svc.cluster.local:3100$request_uri;
          }
          location = /api/prom/rules {
            
            proxy_pass       http://loki-backend.default.svc.cluster.local:3100$request_uri;
          }
          location ^~ /api/prom/rules/ {
            
            proxy_pass       http://loki-backend.default.svc.cluster.local:3100$request_uri;
          }
          location = /loki/api/v1/rules {
            
            proxy_pass       http://loki-backend.default.svc.cluster.local:3100$request_uri;
          }
          location ^~ /loki/api/v1/rules/ {
            
            proxy_pass       http://loki-backend.default.svc.cluster.local:3100$request_uri;
          }
          location = /prometheus/api/v1/alerts {
            
            proxy_pass       http://loki-backend.default.svc.cluster.local:3100$request_uri;
          }
          location = /prometheus/api/v1/rules {
            
            proxy_pass       http://loki-backend.default.svc.cluster.local:3100$request_uri;
          }
      
          # Compactor
          location = /compactor/ring {
            
            proxy_pass       http://loki-backend.default.svc.cluster.local:3100$request_uri;
          }
          location = /loki/api/v1/delete {
            
            proxy_pass       http://loki-backend.default.svc.cluster.local:3100$request_uri;
          }
          location = /loki/api/v1/cache/generation_numbers {
            
            proxy_pass       http://loki-backend.default.svc.cluster.local:3100$request_uri;
          }
      
          # IndexGateway
          location = /indexgateway/ring {
            
            proxy_pass       http://loki-backend.default.svc.cluster.local:3100$request_uri;
          }
      
          # QueryScheduler
          location = /scheduler/ring {
            
            proxy_pass       http://loki-backend.default.svc.cluster.local:3100$request_uri;
          }
      
          # Config
          location = /config {
            
            proxy_pass       http://loki-write.default.svc.cluster.local:3100$request_uri;
          }
      
      
          # QueryFrontend, Querier
          location = /api/prom/tail {
            proxy_set_header Upgrade $http_upgrade;
            proxy_set_header Connection "upgrade";
            
            proxy_pass       http://loki-read.default.svc.cluster.local:3100$request_uri;
          }
          location = /loki/api/v1/tail {
            proxy_set_header Upgrade $http_upgrade;
            proxy_set_header Connection "upgrade";
            
            proxy_pass       http://loki-read.default.svc.cluster.local:3100$request_uri;
          }
          location ^~ /api/prom/ {
            
            proxy_pass       http://loki-read.default.svc.cluster.local:3100$request_uri;
          }
          location = /api/prom {
            
            internal;        # to suppress 301
          }
          location ^~ /loki/api/v1/ {
            # pass custom headers set by Grafana as X-Query-Tags which are logged as key/value pairs in metrics.go log messages
            proxy_set_header X-Query-Tags "${query_tags},user=${http_x_grafana_user},dashboard_id=${http_x_dashboard_uid},dashboard_title=${http_x_dashboard_title},panel_id=${http_x_panel_id},panel_title=${http_x_panel_title},source_rule_uid=${http_x_rule_uid},rule_name=${http_x_rule_name},rule_folder=${http_x_rule_folder},rule_version=${http_x_rule_version},rule_source=${http_x_rule_source},rule_type=${http_x_rule_type}";
            
            proxy_pass       http://loki-read.default.svc.cluster.local:3100$request_uri;
          }
          location = /loki/api/v1 {
            
            internal;        # to suppress 301
          }
        }
      }
default, loki-release-gateway, Deployment (apps) has changed:
  # Source: loki/templates/gateway/deployment-gateway-nginx.yaml
  apiVersion: apps/v1
  kind: Deployment
  metadata:
    name: loki-release-gateway
    namespace: default
    labels:
-     helm.sh/chart: loki-6.55.0
+     helm.sh/chart: loki-6.43.0
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.6.7"
+     app.kubernetes.io/version: "3.5.5"
      app.kubernetes.io/component: gateway
  spec:
    replicas: 1
    strategy:
      type: RollingUpdate
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        app.kubernetes.io/name: loki
        app.kubernetes.io/instance: loki-release
        app.kubernetes.io/component: gateway
    template:
      metadata:
        annotations:
          checksum/config: ecbb4c11aa9b4964a7b820c403987fd36eade50462bb97d94b137186a441fa33
        labels:
          app.kubernetes.io/name: loki
          app.kubernetes.io/instance: loki-release
          app.kubernetes.io/component: gateway
      spec:
-       serviceAccountName: loki-release
+       serviceAccountName: loki
        enableServiceLinks: true
        
        securityContext:
          fsGroup: 101
          runAsGroup: 101
          runAsNonRoot: true
          runAsUser: 101
        terminationGracePeriodSeconds: 30
        containers:
          - name: nginx
            image: docker.io/nginxinc/nginx-unprivileged:1.29-alpine
            imagePullPolicy: IfNotPresent
            ports:
              - name: http-metrics
                containerPort: 8080
                protocol: TCP
            readinessProbe:
              httpGet:
                path: /
                port: http-metrics
              initialDelaySeconds: 15
              timeoutSeconds: 1
            securityContext:
              allowPrivilegeEscalation: false
              capabilities:
                drop:
                - ALL
              readOnlyRootFilesystem: true
            volumeMounts:
              - name: config
                mountPath: /etc/nginx
              - name: tmp
                mountPath: /tmp
              - name: docker-entrypoint-d-override
                mountPath: /docker-entrypoint.d
            resources:
              {}
        affinity:
          podAntiAffinity:
            requiredDuringSchedulingIgnoredDuringExecution:
            - labelSelector:
                matchLabels:
                  app.kubernetes.io/component: gateway
                  app.kubernetes.io/instance: 'loki-release'
                  app.kubernetes.io/name: 'loki'
              topologyKey: kubernetes.io/hostname
        volumes:
          - name: config
            configMap:
              name: loki-release-gateway
          - name: tmp
            emptyDir: {}
          - name: docker-entrypoint-d-override
            emptyDir: {}
default, loki-release-gateway, Service (v1) has changed:
  # Source: loki/templates/gateway/service-gateway.yaml
  apiVersion: v1
  kind: Service
  metadata:
    name: loki-release-gateway
    namespace: default
    labels:
-     helm.sh/chart: loki-6.55.0
+     helm.sh/chart: loki-6.43.0
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.6.7"
+     app.kubernetes.io/version: "3.5.5"
      app.kubernetes.io/component: gateway
      prometheus.io/service-monitor: "false"
    annotations:
  spec:
    type: ClusterIP
    ports:
      - name: http-metrics
        port: 80
        targetPort: http-metrics
        protocol: TCP
    selector:
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
      app.kubernetes.io/component: gateway
default, loki-release-results-cache, Service (v1) has changed:
  # Source: loki/templates/results-cache/service-results-cache-headless.yaml
  apiVersion: v1
  kind: Service
  metadata:
    name: loki-release-results-cache
    labels:
-     helm.sh/chart: loki-6.55.0
+     helm.sh/chart: loki-6.43.0
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.6.7"
+     app.kubernetes.io/version: "3.5.5"
      app.kubernetes.io/component: "memcached-results-cache"
    annotations:
      {}
    namespace: "default"
  spec:
    type: ClusterIP
    clusterIP: None
    ports:
      - name: memcached-client
        port: 11211
        targetPort: client
      - name: http-metrics
        port: 9150
        targetPort: http-metrics
      
    selector:
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
      app.kubernetes.io/component: "memcached-results-cache"
default, loki-release-results-cache, StatefulSet (apps) has changed:
  # Source: loki/templates/results-cache/statefulset-results-cache.yaml
  apiVersion: apps/v1
  kind: StatefulSet
  metadata:
    name: loki-release-results-cache
    labels:
-     helm.sh/chart: loki-6.55.0
+     helm.sh/chart: loki-6.43.0
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.6.7"
+     app.kubernetes.io/version: "3.5.5"
      app.kubernetes.io/component: "memcached-results-cache"
      name: "memcached-results-cache"
    annotations:
      {}
    namespace: "default"
  spec:
    podManagementPolicy: Parallel
    replicas: 1
    selector:
      matchLabels:
        app.kubernetes.io/name: loki
        app.kubernetes.io/instance: loki-release
        app.kubernetes.io/component: "memcached-results-cache"
        name: "memcached-results-cache"
    updateStrategy:
      type: RollingUpdate
    serviceName: loki-release-results-cache
    template:
      metadata:
        labels:
          app.kubernetes.io/name: loki
          app.kubernetes.io/instance: loki-release
          app.kubernetes.io/component: "memcached-results-cache"
          name: "memcached-results-cache"
        annotations:
      spec:
-       serviceAccountName: loki-release
+       serviceAccountName: loki
        securityContext:
          fsGroup: 11211
          runAsGroup: 11211
          runAsNonRoot: true
          runAsUser: 11211
        initContainers:
          []
        nodeSelector:
          {}
        affinity:
          {}
        topologySpreadConstraints:
          []
        tolerations:
          []
        terminationGracePeriodSeconds: 60
        containers:
          - name: memcached
            image: memcached:1.6.39-alpine
            imagePullPolicy: IfNotPresent
            resources:
              limits:
                memory: 1229Mi
              requests:
                cpu: 500m
                memory: 1229Mi
            ports:
              - containerPort: 11211
                name: client
            args:
              - -m 1024
              - --extended=modern,track_sizes
              - -I 5m
              - -c 16384
              - -v
              - -u 11211
            env:
            envFrom:
            securityContext:
              allowPrivilegeEscalation: false
              capabilities:
                drop:
                - ALL
              readOnlyRootFilesystem: true
            readinessProbe:
              failureThreshold: 6
              initialDelaySeconds: 5
              periodSeconds: 5
              tcpSocket:
                port: client
              timeoutSeconds: 3
            livenessProbe:
              failureThreshold: 3
              initialDelaySeconds: 30
              periodSeconds: 10
              tcpSocket:
                port: client
              timeoutSeconds: 5
          - name: exporter
-           image: prom/memcached-exporter:v0.15.4
+           image: prom/memcached-exporter:v0.15.3
            imagePullPolicy: IfNotPresent
            ports:
              - containerPort: 9150
                name: http-metrics
            args:
              - "--memcached.address=localhost:11211"
              - "--web.listen-address=0.0.0.0:9150"
            resources:
              limits: {}
              requests: {}
            securityContext:
              allowPrivilegeEscalation: false
              capabilities:
                drop:
                - ALL
              readOnlyRootFilesystem: true
            readinessProbe:
              failureThreshold: 3
              httpGet:
                path: /metrics
                port: http-metrics
              initialDelaySeconds: 5
              periodSeconds: 5
              timeoutSeconds: 3
            livenessProbe:
              failureThreshold: 3
              httpGet:
                path: /metrics
                port: http-metrics
              initialDelaySeconds: 30
              periodSeconds: 10
              timeoutSeconds: 5
default, loki-runtime, ConfigMap (v1) has changed:
  # Source: loki/templates/runtime-configmap.yaml
  apiVersion: v1
  kind: ConfigMap
  metadata:
    name: loki-runtime
    namespace: default
    labels:
-     helm.sh/chart: loki-6.55.0
+     helm.sh/chart: loki-6.43.0
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.6.7"
+     app.kubernetes.io/version: "3.5.5"
  data:
    runtime-config.yaml: |
      {}
default, loki-write, Service (v1) has changed:
  # Source: loki/templates/write/service-write.yaml
  apiVersion: v1
  kind: Service
  metadata:
    name: loki-write
    namespace: default
    labels:
-     helm.sh/chart: loki-6.55.0
+     helm.sh/chart: loki-6.43.0
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.6.7"
+     app.kubernetes.io/version: "3.5.5"
      app.kubernetes.io/component: write
    annotations:
  spec:
    type: ClusterIP
    ports:
      - name: http-metrics
        port: 3100
        targetPort: http-metrics
        protocol: TCP
      - name: grpc
        port: 9095
        targetPort: grpc
        protocol: TCP
    selector:
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
      app.kubernetes.io/component: write
default, loki-write, StatefulSet (apps) has changed:
  # Source: loki/templates/write/statefulset-write.yaml
  apiVersion: apps/v1
  kind: StatefulSet
  metadata:
    name: loki-write
    namespace: default
    labels:
-     helm.sh/chart: loki-6.55.0
+     helm.sh/chart: loki-6.43.0
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.6.7"
+     app.kubernetes.io/version: "3.5.5"
      app.kubernetes.io/component: write
      app.kubernetes.io/part-of: memberlist
  spec:
    replicas: 1
    podManagementPolicy: Parallel
    updateStrategy:
      rollingUpdate:
        partition: 0
    serviceName: loki-write-headless
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        app.kubernetes.io/name: loki
        app.kubernetes.io/instance: loki-release
        app.kubernetes.io/component: write
    template:
      metadata:
        annotations:
-         checksum/config: 6457764bbaed49d2a88ffc0b26082e5b83bf59c884c9bd0b327e36a23e468f89
+         checksum/config: afc4770faa248a744723fe521d644449dbc7de4a189a88072560a74feacd35fc
        labels:
-         helm.sh/chart: loki-6.55.0
+         helm.sh/chart: loki-6.43.0
          app.kubernetes.io/name: loki
          app.kubernetes.io/instance: loki-release
-         app.kubernetes.io/version: "3.6.7"
+         app.kubernetes.io/version: "3.5.5"
          app.kubernetes.io/component: write
          app.kubernetes.io/part-of: memberlist
      spec:
-       serviceAccountName: loki-release
+       serviceAccountName: loki
        automountServiceAccountToken: true
        enableServiceLinks: true
        
        securityContext:
          fsGroup: 10001
-         fsGroupChangePolicy: OnRootMismatch
          runAsGroup: 10001
          runAsNonRoot: true
          runAsUser: 10001
        terminationGracePeriodSeconds: 300
        containers:
          - name: loki
-           image: docker.io/grafana/loki:3.6.7
+           image: docker.io/grafana/loki:3.5.5
            imagePullPolicy: IfNotPresent
            args:
              - -config.file=/etc/loki/config/config.yaml
              - -target=write
            ports:
              - name: http-metrics
                containerPort: 3100
                protocol: TCP
              - name: grpc
                containerPort: 9095
                protocol: TCP
              - name: http-memberlist
                containerPort: 7946
                protocol: TCP
            securityContext:
              allowPrivilegeEscalation: false
              capabilities:
                drop:
                - ALL
              readOnlyRootFilesystem: true
            readinessProbe:
-             failureThreshold: 3
              httpGet:
                path: /ready
                port: http-metrics
-             initialDelaySeconds: 15
-             periodSeconds: 10
-             successThreshold: 1
+             initialDelaySeconds: 30
              timeoutSeconds: 1
            volumeMounts:
              - name: config
                mountPath: /etc/loki/config
              - name: runtime-config
                mountPath: /etc/loki/runtime-config
              - name: data
                mountPath: /var/loki
            resources:
              {}
        affinity:
          podAntiAffinity:
            requiredDuringSchedulingIgnoredDuringExecution:
            - labelSelector:
                matchLabels:
                  app.kubernetes.io/component: write
                  app.kubernetes.io/instance: 'loki-release'
                  app.kubernetes.io/name: 'loki'
              topologyKey: kubernetes.io/hostname
        volumes:
          - name: config
            configMap:
              name: loki
              items:
                - key: "config.yaml"
                  path: "config.yaml"
          - name: runtime-config
            configMap:
              name: loki-runtime
    volumeClaimTemplates:
      - apiVersion: v1
        kind: PersistentVolumeClaim
        metadata:
          name: data
        spec:
          accessModes:
            - ReadWriteOnce
          resources:
            requests:
              storage: "10Gi"
default, loki-release, ServiceAccount (v1) has been removed:
- # Source: loki/templates/serviceaccount.yaml
- apiVersion: v1
- kind: ServiceAccount
- metadata:
-   name: loki-release
-   namespace: default
-   labels:
-     helm.sh/chart: loki-6.55.0
-     app.kubernetes.io/name: loki
-     app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.6.7"
- automountServiceAccountToken: true
+ 
default, loki-release-memberlist, Service (v1) has been removed:
- # Source: loki/templates/service-memberlist.yaml
- apiVersion: v1
- kind: Service
- metadata:
-   name: loki-release-memberlist
-   namespace: default
-   labels:
-     helm.sh/chart: loki-6.55.0
-     app.kubernetes.io/name: loki
-     app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.6.7"
-   annotations:
- spec:
-   type: ClusterIP
-   clusterIP: None
-   ports:
-     - name: tcp
-       port: 7946
-       targetPort: http-memberlist
-       protocol: TCP
-   selector:
-     app.kubernetes.io/name: loki
-     app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/part-of: memberlist
+ 
default, loki, ServiceAccount (v1) has been added:
- 
+ # Source: loki/templates/serviceaccount.yaml
+ apiVersion: v1
+ kind: ServiceAccount
+ metadata:
+   name: loki
+   namespace: default
+   labels:
+     helm.sh/chart: loki-6.43.0
+     app.kubernetes.io/name: loki
+     app.kubernetes.io/instance: loki-release
+     app.kubernetes.io/version: "3.5.5"
+ automountServiceAccountToken: true
default, loki-memberlist, Service (v1) has been added:
- 
+ # Source: loki/templates/service-memberlist.yaml
+ apiVersion: v1
+ kind: Service
+ metadata:
+   name: loki-memberlist
+   namespace: default
+   labels:
+     helm.sh/chart: loki-6.43.0
+     app.kubernetes.io/name: loki
+     app.kubernetes.io/instance: loki-release
+     app.kubernetes.io/version: "3.5.5"
+   annotations:
+ spec:
+   type: ClusterIP
+   clusterIP: None
+   ports:
+     - name: tcp
+       port: 7946
+       targetPort: http-memberlist
+       protocol: TCP
+   selector:
+     app.kubernetes.io/name: loki
+     app.kubernetes.io/instance: loki-release
+     app.kubernetes.io/part-of: memberlist

Distributed Scenario-diff-output

default, loki, ConfigMap (v1) has changed:
  # Source: loki/templates/config.yaml
  apiVersion: v1
  kind: ConfigMap
  metadata:
    name: loki
    namespace: default
    labels:
-     helm.sh/chart: loki-6.55.0
+     helm.sh/chart: loki-6.43.0
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.6.7"
+     app.kubernetes.io/version: "3.5.5"
  data:
    config.yaml: |
      
      auth_enabled: true
      bloom_build:
        builder:
          planner_address: loki-release-bloom-planner-headless.default.svc.cluster.local:9095
        enabled: false
      bloom_gateway:
        client:
          addresses: dnssrvnoa+_grpc._tcp.loki-release-bloom-gateway-headless.default.svc.cluster.local
        enabled: false
      chunk_store_config:
        chunk_cache_config:
          background:
            writeback_buffer: 500000
            writeback_goroutines: 1
            writeback_size_limit: 500MB
          default_validity: 0s
          memcached:
            batch_size: 4
            parallelism: 5
          memcached_client:
-           addresses: dnssrvnoa+_memcached-client._tcp.loki-release-chunks-cache.default.svc.cluster.local
+           addresses: dnssrvnoa+_memcached-client._tcp.loki-release-chunks-cache.default.svc
            consistent_hash: true
            max_idle_conns: 72
            timeout: 2000ms
      common:
        compactor_grpc_address: 'loki-release-compactor.default.svc.cluster.local:9095'
        path_prefix: /var/loki
        replication_factor: 3
        storage:
          s3:
            access_key_id: root-user
            bucketnames: chunks
            endpoint: loki-release-minio.default.svc:9000
            insecure: true
            s3forcepathstyle: true
            secret_access_key: supersecretpassword
      frontend:
        scheduler_address: loki-release-query-scheduler.default.svc.cluster.local:9095
        tail_proxy_url: http://loki-release-querier.default.svc.cluster.local:3100
      frontend_worker:
        scheduler_address: loki-release-query-scheduler.default.svc.cluster.local:9095
      index_gateway:
        mode: simple
      ingester:
        chunk_encoding: snappy
      limits_config:
        max_cache_freshness_per_query: 10m
        query_timeout: 300s
        reject_old_samples: true
        reject_old_samples_max_age: 168h
        split_queries_by_interval: 15m
        volume_enabled: true
      memberlist:
        join_members:
-       - loki-release-memberlist.default.svc.cluster.local
+       - loki-memberlist
      pattern_ingester:
        enabled: false
      querier:
        max_concurrent: 4
      query_range:
        align_queries_with_step: true
        cache_results: true
        results_cache:
          cache:
            background:
              writeback_buffer: 500000
              writeback_goroutines: 1
              writeback_size_limit: 500MB
            default_validity: 12h
            memcached_client:
-             addresses: dnssrvnoa+_memcached-client._tcp.loki-release-results-cache.default.svc.cluster.local
+             addresses: dnssrvnoa+_memcached-client._tcp.loki-release-results-cache.default.svc
              consistent_hash: true
              timeout: 500ms
              update_interval: 1m
      ruler:
        storage:
          s3:
            bucketnames: ruler
          type: s3
        wal:
          dir: /var/loki/ruler-wal
      runtime_config:
        file: /etc/loki/runtime-config/runtime-config.yaml
      schema_config:
        configs:
        - from: "2024-04-01"
          index:
            period: 24h
            prefix: loki_index_
          object_store: s3
          schema: v13
          store: tsdb
      server:
        grpc_listen_port: 9095
        http_listen_port: 3100
        http_server_read_timeout: 600s
        http_server_write_timeout: 600s
      storage_config:
        bloom_shipper:
          working_directory: /var/loki/data/bloomshipper
        boltdb_shipper:
          index_gateway_client:
            server_address: dns+loki-release-index-gateway-headless.default.svc.cluster.local:9095
        hedging:
          at: 250ms
          max_per_second: 20
          up_to: 3
        tsdb_shipper:
          index_gateway_client:
            server_address: dns+loki-release-index-gateway-headless.default.svc.cluster.local:9095
        use_thanos_objstore: false
      tracing:
        enabled: true
default, loki-canary, DaemonSet (apps) has changed:
  # Source: loki/templates/loki-canary/daemonset.yaml
  apiVersion: apps/v1
  kind: DaemonSet
  metadata:
    name: loki-canary
    namespace: default
    labels:
-     helm.sh/chart: loki-6.55.0
+     helm.sh/chart: loki-6.43.0
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.6.7"
+     app.kubernetes.io/version: "3.5.5"
      app.kubernetes.io/component: canary
  spec:
    selector:
      matchLabels:
        app.kubernetes.io/name: loki
        app.kubernetes.io/instance: loki-release
        app.kubernetes.io/component: canary
    updateStrategy:
      rollingUpdate:
        maxUnavailable: 1
      type: RollingUpdate
    template:
      metadata:
        labels:
          app.kubernetes.io/name: loki
          app.kubernetes.io/instance: loki-release
          app.kubernetes.io/component: canary
      spec:
        serviceAccountName: loki-canary
        
        securityContext:
          fsGroup: 10001
-         fsGroupChangePolicy: OnRootMismatch
          runAsGroup: 10001
          runAsNonRoot: true
          runAsUser: 10001
        containers:
          - name: loki-canary
-           image: docker.io/grafana/loki-canary:3.6.7
+           image: docker.io/grafana/loki-canary:3.5.5
            imagePullPolicy: IfNotPresent
            args:
              - -addr=loki-release-gateway.default.svc.cluster.local.:80
              - -labelname=pod
              - -labelvalue=$(POD_NAME)
              - -user=self-monitoring
              - -tenant-id=self-monitoring
              - -pass=
              - -push=true
            securityContext:
              allowPrivilegeEscalation: false
              capabilities:
                drop:
                - ALL
              readOnlyRootFilesystem: true
            volumeMounts:
            ports:
              - name: http-metrics
                containerPort: 3500
                protocol: TCP
            env:
              - name: POD_NAME
                valueFrom:
                  fieldRef:
                    fieldPath: metadata.name
              
            readinessProbe:
              httpGet:
                path: /metrics
                port: http-metrics
              initialDelaySeconds: 15
              timeoutSeconds: 1
        volumes:
default, loki-canary, Service (v1) has changed:
  # Source: loki/templates/loki-canary/service.yaml
  apiVersion: v1
  kind: Service
  metadata:
    name: loki-canary
    namespace: default
    labels:
-     helm.sh/chart: loki-6.55.0
+     helm.sh/chart: loki-6.43.0
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.6.7"
+     app.kubernetes.io/version: "3.5.5"
      app.kubernetes.io/component: canary
    annotations:
  spec:
    type: ClusterIP
    ports:
      - name: http-metrics
        port: 3500
        targetPort: http-metrics
        protocol: TCP
    selector:
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
      app.kubernetes.io/component: canary
default, loki-canary, ServiceAccount (v1) has changed:
  # Source: loki/templates/loki-canary/serviceaccount.yaml
  apiVersion: v1
  kind: ServiceAccount
  metadata:
    name: loki-canary
    namespace: default
    labels:
-     helm.sh/chart: loki-6.55.0
+     helm.sh/chart: loki-6.43.0
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.6.7"
+     app.kubernetes.io/version: "3.5.5"
      app.kubernetes.io/component: canary
  automountServiceAccountToken: true
default, loki-release-chunks-cache, Service (v1) has changed:
  # Source: loki/templates/chunks-cache/service-chunks-cache-headless.yaml
  apiVersion: v1
  kind: Service
  metadata:
    name: loki-release-chunks-cache
    labels:
-     helm.sh/chart: loki-6.55.0
+     helm.sh/chart: loki-6.43.0
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.6.7"
+     app.kubernetes.io/version: "3.5.5"
      app.kubernetes.io/component: "memcached-chunks-cache"
    annotations:
      {}
    namespace: "default"
  spec:
    type: ClusterIP
    clusterIP: None
    ports:
      - name: memcached-client
        port: 11211
        targetPort: client
      - name: http-metrics
        port: 9150
        targetPort: http-metrics
      
    selector:
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
      app.kubernetes.io/component: "memcached-chunks-cache"
default, loki-release-chunks-cache, StatefulSet (apps) has changed:
  # Source: loki/templates/chunks-cache/statefulset-chunks-cache.yaml
  apiVersion: apps/v1
  kind: StatefulSet
  metadata:
    name: loki-release-chunks-cache
    labels:
-     helm.sh/chart: loki-6.55.0
+     helm.sh/chart: loki-6.43.0
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.6.7"
+     app.kubernetes.io/version: "3.5.5"
      app.kubernetes.io/component: "memcached-chunks-cache"
      name: "memcached-chunks-cache"
    annotations:
      {}
    namespace: "default"
  spec:
    podManagementPolicy: Parallel
    replicas: 1
    selector:
      matchLabels:
        app.kubernetes.io/name: loki
        app.kubernetes.io/instance: loki-release
        app.kubernetes.io/component: "memcached-chunks-cache"
        name: "memcached-chunks-cache"
    updateStrategy:
      type: RollingUpdate
    serviceName: loki-release-chunks-cache
    template:
      metadata:
        labels:
          app.kubernetes.io/name: loki
          app.kubernetes.io/instance: loki-release
          app.kubernetes.io/component: "memcached-chunks-cache"
          name: "memcached-chunks-cache"
        annotations:
      spec:
-       serviceAccountName: loki-release
+       serviceAccountName: loki
        securityContext:
          fsGroup: 11211
          runAsGroup: 11211
          runAsNonRoot: true
          runAsUser: 11211
        initContainers:
          []
        nodeSelector:
          {}
        affinity:
          {}
        topologySpreadConstraints:
          []
        tolerations:
          []
        terminationGracePeriodSeconds: 60
        containers:
          - name: memcached
            image: memcached:1.6.39-alpine
            imagePullPolicy: IfNotPresent
            resources:
              limits:
                memory: 9830Mi
              requests:
                cpu: 500m
                memory: 9830Mi
            ports:
              - containerPort: 11211
                name: client
            args:
              - -m 8192
              - --extended=modern,track_sizes
              - -I 5m
              - -c 16384
              - -v
              - -u 11211
            env:
            envFrom:
            securityContext:
              allowPrivilegeEscalation: false
              capabilities:
                drop:
                - ALL
              readOnlyRootFilesystem: true
            readinessProbe:
              failureThreshold: 6
              initialDelaySeconds: 5
              periodSeconds: 5
              tcpSocket:
                port: client
              timeoutSeconds: 3
            livenessProbe:
              failureThreshold: 3
              initialDelaySeconds: 30
              periodSeconds: 10
              tcpSocket:
                port: client
              timeoutSeconds: 5
          - name: exporter
-           image: prom/memcached-exporter:v0.15.4
+           image: prom/memcached-exporter:v0.15.3
            imagePullPolicy: IfNotPresent
            ports:
              - containerPort: 9150
                name: http-metrics
            args:
              - "--memcached.address=localhost:11211"
              - "--web.listen-address=0.0.0.0:9150"
            resources:
              limits: {}
              requests: {}
            securityContext:
              allowPrivilegeEscalation: false
              capabilities:
                drop:
                - ALL
              readOnlyRootFilesystem: true
            readinessProbe:
              failureThreshold: 3
              httpGet:
                path: /metrics
                port: http-metrics
              initialDelaySeconds: 5
              periodSeconds: 5
              timeoutSeconds: 3
            livenessProbe:
              failureThreshold: 3
              httpGet:
                path: /metrics
                port: http-metrics
              initialDelaySeconds: 30
              periodSeconds: 10
              timeoutSeconds: 5
default, loki-release-clusterrole, ClusterRole (rbac.authorization.k8s.io) has changed:
  # Source: loki/templates/backend/clusterrole.yaml
  kind: ClusterRole
  apiVersion: rbac.authorization.k8s.io/v1
  metadata:
    labels:
-     helm.sh/chart: loki-6.55.0
+     helm.sh/chart: loki-6.43.0
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.6.7"
+     app.kubernetes.io/version: "3.5.5"
    name: loki-release-clusterrole
  rules:
  - apiGroups: [""] # "" indicates the core API group
    resources: ["configmaps", "secrets"]
    verbs: ["get", "watch", "list"]
default, loki-release-clusterrolebinding, ClusterRoleBinding (rbac.authorization.k8s.io) has changed:
  # Source: loki/templates/backend/clusterrolebinding.yaml
  kind: ClusterRoleBinding
  apiVersion: rbac.authorization.k8s.io/v1
  metadata:
    name: loki-release-clusterrolebinding
    labels:
-     helm.sh/chart: loki-6.55.0
+     helm.sh/chart: loki-6.43.0
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.6.7"
+     app.kubernetes.io/version: "3.5.5"
  subjects:
    - kind: ServiceAccount
-     name: loki-release
+     name: loki
      namespace: default
  roleRef:
    kind: ClusterRole
    name: loki-release-clusterrole
    apiGroup: rbac.authorization.k8s.io
default, loki-release-compactor, Service (v1) has changed:
  # Source: loki/templates/compactor/service-compactor.yaml
  apiVersion: v1
  kind: Service
  metadata:
    name: loki-release-compactor
    namespace: default
    labels:
-     helm.sh/chart: loki-6.55.0
+     helm.sh/chart: loki-6.43.0
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
-     app.kubernetes.io/version: "3.6.7"
+     app.kubernetes.io/version: "3.5.5"
      app.kubernetes.io/component: compactor
    annotations:
  spec:
    type: ClusterIP
    ports:
      - name: http-metrics
        port: 3100
        targetPort: http-metrics
        protocol: TCP
      - name: grpc
        port: 9095
        targetPort: grpc
        protocol: TCP
    selector:
      app.kubernetes.io/name: loki
      app.kubernetes.io/instance: loki-release
      app.kubernetes.io/component: compactor
default, loki-release-compactor, StatefulSet (apps) has changed:
  # Source: loki/templates/compactor/statefulset-compactor.yaml
  apiVersion: apps/v1
  kind: StatefulSet
  metadata:
    name: loki-release-compactor
    namespace: default
    labels:
-     helm.sh/chart: loki-6.55.0
+     helm.
<!-- Sticky Pull Request CommentHelm Diff Output - Summary -->

Upgrade go std lib

5667872

DylanGuedes requested review from a team, JoaoBraveCoding, periklis and xperimental as code owners March 24, 2026 17:31

pull-request-size Bot added the size/M label Mar 24, 2026

DylanGuedes added 2 commits March 24, 2026 14:34

undo operator and promtail changes

5589232

reference 1.25.8 everywhere

de290fc

pull-request-size Bot added size/L and removed size/M labels Mar 24, 2026

dont touch the build image

a03038e

pull-request-size Bot added size/M and removed size/L labels Mar 24, 2026

DylanGuedes added 4 commits March 24, 2026 14:51

undo querytee changes

70a6873

undo other changes

74a5acc

undo these too

ea7dbff

run make update workflows

b3832f8

pull-request-size Bot added size/L and removed size/M labels Mar 24, 2026

paul1r approved these changes Mar 24, 2026

View reviewed changes

DylanGuedes enabled auto-merge (squash) March 24, 2026 18:20

DylanGuedes disabled auto-merge March 24, 2026 18:20

refresh vendor/modules.txt

7a07fd8

DylanGuedes merged commit 10d2666 into release-3.6.x Mar 24, 2026
93 checks passed

DylanGuedes deleted the upgrade-go-stdlib branch March 24, 2026 18:59

loki-gh-app Bot mentioned this pull request Mar 25, 2026

chore(release-3.6.x): release 3.6.8 #20957

Merged

BrewTestBot mentioned this pull request Mar 25, 2026

logcli loki promtail 3.6.8 Homebrew/homebrew-core#274156

Merged

loki-gh-app Bot mentioned this pull request Apr 2, 2026

chore(release-3.6.x): release 3.6.10 #21380

Merged

loki-gh-app Bot mentioned this pull request Jun 23, 2026

chore(release-3.6.x): Release 3.6.0 #22541

Closed

loki-gh-app Bot mentioned this pull request Jun 24, 2026

chore(release-3.6.x): Release 3.6.12 #22588

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

feat: Upgrade Go to 1.25.8 (release-3.6.x) - #21240

feat: Upgrade Go to 1.25.8 (release-3.6.x)#21240
DylanGuedes merged 9 commits into
release-3.6.xfrom
upgrade-go-stdlib

DylanGuedes commented Mar 24, 2026

github-actions Bot commented Mar 24, 2026

Uh oh!

Labels

2 participants

Uh oh!

Conversation

DylanGuedes commented Mar 24, 2026

github-actions Bot commented Mar 24, 2026

Helm Diff Output - Summary

Uh oh!

Labels

2 participants