fix(container): update image ghcr.io/crowdsecurity/helm-charts/crowdsec ( 0.22.0 ➔ 0.22.1 )

[not-hydaz]

This PR contains the following updates:

Package	Update	Change
ghcr.io/crowdsecurity/helm-charts/crowdsec	patch	0.22.0 → 0.22.1

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[not-hydaz]

--- kubernetes/apps/security/crowdsec/app Kustomization: security/crowdsec OCIRepository: security/crowdsec

+++ kubernetes/apps/security/crowdsec/app Kustomization: security/crowdsec OCIRepository: security/crowdsec

@@ -10,9 +10,9 @@

 spec:
   interval: 15m
   layerSelector:
     mediaType: application/vnd.cncf.helm.chart.content.v1.tar+gzip
     operation: copy
   ref:
-    tag: 0.22.0
+    tag: 0.22.1
   url: oci://ghcr.io/crowdsecurity/helm-charts/crowdsec
 

[not-hydaz]

--- HelmRelease: security/crowdsec Job: security/crowdsec-capi-register-job

+++ HelmRelease: security/crowdsec Job: security/crowdsec-capi-register-job

@@ -18,34 +18,53 @@

         k8s-app: crowdsec
         type: capi-register-job
         version: v1
     spec:
       serviceAccountName: crowdsec-configmap-updater-sa
       restartPolicy: OnFailure
+      initContainers:
+      - name: install-kubectl
+        image: alpine/kubectl:latest
+        imagePullPolicy: IfNotPresent
+        command:
+        - /bin/sh
+        - -c
+        - |
+          cp "$(command -v kubectl)" /kubectl-bin/kubectl
+          chmod 0755 /kubectl-bin/kubectl
+        volumeMounts:
+        - name: kubectl-bin
+          mountPath: /kubectl-bin
       containers:
       - name: capi-register
         image: crowdsecurity/crowdsec:v1.7.6
         imagePullPolicy: IfNotPresent
+        volumeMounts:
+        - name: kubectl-bin
+          mountPath: /kubectl-bin
         command:
         - /bin/bash
         - -c
         - |
-          apk update && apk add kubectl
           set -ex
+          KUBECTL=/kubectl-bin/kubectl
           echo "Checking if the secret crowdsec-capi-credentials already exists..."
-          if kubectl -n security get secret crowdsec-capi-credentials >/dev/null 2>&1; then
+          if $KUBECTL -n security get secret crowdsec-capi-credentials >/dev/null 2>&1; then
             echo "Secret already exists. Skipping registration."
             exit 0
           fi
 
           echo "Secret does not exist. Registering instance to Central API."
           sed -i /staging/etc/crowdsec/config.yaml -e 's/#credentials_path/  credentials_path/'
 
           yq -i '.api.server.online_client.credentials_path="/tmp/online_api_credentials.yaml" | .api.server.profiles_path="/staging/etc/crowdsec/profiles.yaml"' /staging/etc/crowdsec/config.yaml
           touch /tmp/online_api_credentials.yaml
           cscli -c /staging/etc/crowdsec/config.yaml capi register
           yq -i '.papi_url="https://papi.api.crowdsec.net/"' /tmp/online_api_credentials.yaml
           echo "Creating secret crowdsec-capi-credentials..."
-          kubectl create secret generic crowdsec-capi-credentials \
+          $KUBECTL create secret generic crowdsec-capi-credentials \
             -n security \
             --from-file=online_api_credentials.yaml=/tmp/online_api_credentials.yaml
+      volumes:
+      - name: kubectl-bin
+        emptyDir: {}