helm: Upgrade rollout-operator to 0.37.1 (#13357)

Upgrades the rollout-operator chart dependency to 0.37.1.

This includes a fix from
grafana/helm-charts#3989 where
server-tls.self-signed-cert.dns-name was always set to
`rollout-operator.NAMESPACE.svc` instead of using the full release name
(e.g., `mimir-rollout-operator.NAMESPACE.svc`). This broke the rollout
operator and prevented upgrading statefulsets.

related to #13338

(cherry picked from commit 16aa2be)

Author: dimitarvdimitrov

operations/helm/charts/mimir-distributed/CHANGELOG.md

@@ -30,6 +30,12 @@ Entries should include a reference to the Pull Request that introduced the chang
 ## main / unreleased
 
 * [ENHANCEMENT] Add Support to customize gossip ring k8s service annotations. #12718
+* [ENHANCEMENT] Ruler querier and query-frontend: Add support for newly-introduced querier ring, which is used when performing query planning in query-frontends and distributing portions of the plan to queriers for execution. #13017
+* [ENHANCEMENT] Upgrade rollout-operator chart to [0.37.0](https://github.com/grafana/helm-charts/blob/main/charts/rollout-operator/README.md#upgrade-of-grafana-rollout-operator). Note required actions for upgrading the rollout-operator chart. #13245
+
+## 6.0.2
+
+* [BUGFIX] Upgrade rollout-operator chart to 0.37.1, which fixes server-tls.self-signed-cert.dns-name to use the full release name instead of always being set to `rollout-operator.NAMESPACE.svc`. If upgrading from 6.0.0 or 6.0.1, delete the `certificate` secret created by the rollout-operator pod and recreate the rollout-operator pod. #13357
 
 ## 6.0.1
 

operations/helm/charts/mimir-distributed/Chart.lock

@@ -7,6 +7,6 @@ dependencies:
   version: 0.5.1
 - name: rollout-operator
   repository: https://grafana.github.io/helm-charts
-  version: 0.35.1
-digest: sha256:be57914d6e106c013ad7c0ac32e288e20cfd5cf4d3738831aa9f17686f87f965
-generated: "2025-10-15T01:28:08.08339376Z"
+  version: 0.37.1
+digest: sha256:c7b1dcfcaaad1d66bc947aaa60cff86f8cafd25ceeea63bf00bf0218370bc12d
+generated: "2025-11-05T11:54:34.829903+01:00"

operations/helm/charts/mimir-distributed/Chart.yaml

@@ -20,5 +20,5 @@ dependencies:
   - name: rollout-operator
     alias: rollout_operator
     repository: https://grafana.github.io/helm-charts
-    version: 0.35.1
+    version: 0.37.1
     condition: rollout_operator.enabled

operations/helm/charts/mimir-distributed/README.md

@@ -26,7 +26,7 @@ Kubernetes: `^1.29.0-0`
 |------------|------|---------|
 | https://charts.min.io/ | minio(minio) | 5.4.0 |
 | https://grafana.github.io/helm-charts | grafana-agent-operator(grafana-agent-operator) | 0.5.1 |
-| https://grafana.github.io/helm-charts | rollout_operator(rollout-operator) | 0.35.1 |
+| https://grafana.github.io/helm-charts | rollout_operator(rollout-operator) | 0.37.1 |
 
 # Contributing and releasing
 

operations/helm/tests/classic-architecture-values-generated/mimir-distributed/charts/rollout_operator/templates/deployment.yaml

@@ -6,10 +6,10 @@ metadata:
   name: classic-architecture-values-rollout-operator
   namespace: "citestns"
   labels:
-    helm.sh/chart: rollout-operator-0.35.1
+    helm.sh/chart: rollout-operator-0.37.1
     app.kubernetes.io/name: rollout-operator
     app.kubernetes.io/instance: classic-architecture-values
-    app.kubernetes.io/version: "v0.31.1"
+    app.kubernetes.io/version: "v0.32.0"
     app.kubernetes.io/managed-by: Helm
 spec:
   replicas: 1
@@ -46,12 +46,13 @@ spec:
               drop:
               - ALL
             readOnlyRootFilesystem: true
-          image: "grafana/rollout-operator:v0.31.1"
+          image: grafana/rollout-operator:v0.32.0
           imagePullPolicy: IfNotPresent
           args:
           - -kubernetes.namespace=citestns
           - -server-tls.enabled=true
           - -server-tls.self-signed-cert.secret-name=certificate
+          - -server-tls.self-signed-cert.dns-name=classic-architecture-values-rollout-operator.citestns.svc
           ports:
             - name: http-metrics
               containerPort: 8001

operations/helm/tests/classic-architecture-values-generated/mimir-distributed/charts/rollout_operator/templates/no-downscale-webhook.yaml

@@ -7,10 +7,10 @@ metadata:
   labels:
     grafana.com/inject-rollout-operator-ca: "true"
     grafana.com/namespace: "citestns"
-    helm.sh/chart: rollout-operator-0.35.1
+    helm.sh/chart: rollout-operator-0.37.1
     app.kubernetes.io/name: rollout-operator
     app.kubernetes.io/instance: classic-architecture-values
-    app.kubernetes.io/version: "v0.31.1"
+    app.kubernetes.io/version: "v0.32.0"
     app.kubernetes.io/managed-by: Helm
 webhooks:
   - name: no-downscale-citestns.grafana.com

operations/helm/tests/classic-architecture-values-generated/mimir-distributed/charts/rollout_operator/templates/pod-eviction-webhook.yaml

@@ -7,10 +7,10 @@ metadata:
   labels:
     grafana.com/inject-rollout-operator-ca: "true"
     grafana.com/namespace: "citestns"
-    helm.sh/chart: rollout-operator-0.35.1
+    helm.sh/chart: rollout-operator-0.37.1
     app.kubernetes.io/name: rollout-operator
     app.kubernetes.io/instance: classic-architecture-values
-    app.kubernetes.io/version: "v0.31.1"
+    app.kubernetes.io/version: "v0.32.0"
     app.kubernetes.io/managed-by: Helm
 webhooks:
   - name: pod-eviction-citestns.grafana.com

operations/helm/tests/classic-architecture-values-generated/mimir-distributed/charts/rollout_operator/templates/prepare-downscale-webhook.yaml

@@ -7,10 +7,10 @@ metadata:
   labels:
     grafana.com/inject-rollout-operator-ca: "true"
     grafana.com/namespace: "citestns"
-    helm.sh/chart: rollout-operator-0.35.1
+    helm.sh/chart: rollout-operator-0.37.1
     app.kubernetes.io/name: rollout-operator
     app.kubernetes.io/instance: classic-architecture-values
-    app.kubernetes.io/version: "v0.31.1"
+    app.kubernetes.io/version: "v0.32.0"
     app.kubernetes.io/managed-by: Helm
 webhooks:
   - name: prepare-downscale-citestns.grafana.com

operations/helm/tests/classic-architecture-values-generated/mimir-distributed/charts/rollout_operator/templates/role.yaml

@@ -6,10 +6,10 @@ metadata:
   name: classic-architecture-values-rollout-operator
   namespace: "citestns"
   labels:
-    helm.sh/chart: rollout-operator-0.35.1
+    helm.sh/chart: rollout-operator-0.37.1
     app.kubernetes.io/name: rollout-operator
     app.kubernetes.io/instance: classic-architecture-values
-    app.kubernetes.io/version: "v0.31.1"
+    app.kubernetes.io/version: "v0.32.0"
     app.kubernetes.io/managed-by: Helm
 rules:
 - apiGroups:

operations/helm/tests/classic-architecture-values-generated/mimir-distributed/charts/rollout_operator/templates/rolebinding.yaml

@@ -6,10 +6,10 @@ metadata:
   name: classic-architecture-values-rollout-operator
   namespace: "citestns"
   labels:
-    helm.sh/chart: rollout-operator-0.35.1
+    helm.sh/chart: rollout-operator-0.37.1
     app.kubernetes.io/name: rollout-operator
     app.kubernetes.io/instance: classic-architecture-values
-    app.kubernetes.io/version: "v0.31.1"
+    app.kubernetes.io/version: "v0.32.0"
     app.kubernetes.io/managed-by: Helm
 roleRef:
   apiGroup: rbac.authorization.k8s.io