chore(deps): update helm release ingress-nginx to v4.12.0

[renovate]

This PR contains the following updates:

Package	Update	Change
ingress-nginx	minor	4.11.3 -> 4.12.0

---

Release Notes

kubernetes/ingress-nginx (ingress-nginx)

v4.12.0

Changelog

This file documents all notable changes to ingress-nginx Helm Chart. The release numbering uses semantic versioning.

4.12.0

• CI: Fix chart testing. (#​12258)
• Update Ingress-Nginx version controller-v1.12.0

Full Changelog: kubernetes/ingress-nginx@helm-chart-4.11.0...helm-chart-4.12.0

v4.11.4

Changelog

This file documents all notable changes to ingress-nginx Helm Chart. The release numbering uses semantic versioning.

4.11.4

• CI: Fix chart testing. (#​12259)
• Update Ingress-Nginx version controller-v1.11.4

Full Changelog: kubernetes/ingress-nginx@helm-chart-4.11.3...helm-chart-4.11.4

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Path: infra/ingress-nginx/helmrelease.yaml
Version: 4.11.3 -> 4.12.0

@@ -412,7 +412,7 @@
 dnsPolicy: ClusterFirst
 containers:
 - name: controller
- image: registry.k8s.io/ingress-nginx/controller:v1.11.3@sha256:d56f135b6462cfc476447cfe564b83a45e8bb7da2774963b00d12161112270b7
+ image: registry.k8s.io/ingress-nginx/controller:v1.12.0@sha256:e6b8de175acda6ca913891f0f727bca4527e797d52688cbe9fec9040d6f6b6fa
 imagePullPolicy: IfNotPresent
 lifecycle:
 preStop:
@@ -430,10 +430,12 @@
 - --validating-webhook=:8443
 - --validating-webhook-certificate=/usr/local/certificates/cert
 - --validating-webhook-key=/usr/local/certificates/key
+ - --enable-metrics=true
 - --default-ssl-certificate=ingress-nginx/${BASE_DOMAIN/./-}
 securityContext:
 runAsNonRoot: true
 runAsUser: 101
+ runAsGroup: 82
 allowPrivilegeEscalation: false
 seccompProfile:
 type: RuntimeDefault
@@ -541,6 +543,7 @@
 securityContext:
 runAsNonRoot: true
 runAsUser: 65534
+ runAsGroup: 65534
 allowPrivilegeEscalation: false
 seccompProfile:
 type: RuntimeDefault
@@ -608,9 +611,6 @@
 app.kubernetes.io/managed-by: Helm
 app.kubernetes.io/component: controller
 spec:
- endpoints:
- - port: metrics
- interval: 30s
 namespaceSelector:
 matchNames:
 - default
@@ -619,6 +619,9 @@
 app.kubernetes.io/name: ingress-nginx
 app.kubernetes.io/instance: ingress-nginx
 app.kubernetes.io/component: controller
+ endpoints:
+ - port: metrics
+ interval: 30s
 ---
 # Source: ingress-nginx/templates/admission-webhooks/validating-webhook.yaml
 # before changing this value, check the required kubernetes version
@@ -797,7 +800,7 @@
 spec:
 containers:
 - name: create
- image: registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.4.4@sha256:a9f03b34a3cbfbb26d103a14046ab2c5130a80c3d69d526ff8063d2b37b9fd3f
+ image: registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.5.0@sha256:aaafd456bda110628b2d4ca6296f38731a3aaf0bf7581efae824a41c770a8fc4
 imagePullPolicy: IfNotPresent
 args:
 - create
@@ -815,6 +818,7 @@
 drop:
 - ALL
 readOnlyRootFilesystem: true
+ runAsGroup: 65532
 runAsNonRoot: true
 runAsUser: 65532
 seccompProfile:
@@ -852,7 +856,7 @@
 spec:
 containers:
 - name: patch
- image: registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.4.4@sha256:a9f03b34a3cbfbb26d103a14046ab2c5130a80c3d69d526ff8063d2b37b9fd3f
+ image: registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.5.0@sha256:aaafd456bda110628b2d4ca6296f38731a3aaf0bf7581efae824a41c770a8fc4
 imagePullPolicy: IfNotPresent
 args:
 - patch
@@ -872,6 +876,7 @@
 drop:
 - ALL
 readOnlyRootFilesystem: true
+ runAsGroup: 65532
 runAsNonRoot: true
 runAsUser: 65532
 seccompProfile: