From 98254d065d8818c643e8b956f0483d8a2210e7cf Mon Sep 17 00:00:00 2001
From: Philip Haupt <“der.mad.mob@gmail.com”>
Date: Sun, 22 Feb 2026 19:51:48 +0100
Subject: [PATCH] loki update

---
 grafana-loki/main.yaml              | 62 +++++++++++++++--------------
 grafana-loki/src/kustomization.yaml |  2 +-
 2 files changed, 34 insertions(+), 30 deletions(-)

diff --git a/grafana-loki/main.yaml b/grafana-loki/main.yaml
index 5af3c41..7bc2d69 100644
--- a/grafana-loki/main.yaml
+++ b/grafana-loki/main.yaml
@@ -6,7 +6,7 @@ metadata:
     app.kubernetes.io/instance: loki
     app.kubernetes.io/name: loki
     app.kubernetes.io/version: 3.5.7
-    helm.sh/chart: loki-6.46.0
+    helm.sh/chart: loki-6.53.0
   name: loki
   namespace: grafana-loki
 ---
@@ -19,7 +19,7 @@ metadata:
     app.kubernetes.io/instance: loki
     app.kubernetes.io/name: loki
     app.kubernetes.io/version: 3.5.7
-    helm.sh/chart: loki-6.46.0
+    helm.sh/chart: loki-6.53.0
   name: loki-canary
   namespace: grafana-loki
 ---
@@ -30,7 +30,7 @@ metadata:
     app.kubernetes.io/instance: loki
     app.kubernetes.io/name: loki
     app.kubernetes.io/version: 3.5.7
-    helm.sh/chart: loki-6.46.0
+    helm.sh/chart: loki-6.53.0
   name: loki-clusterrole
 rules:
 - apiGroups:
@@ -50,7 +50,7 @@ metadata:
     app.kubernetes.io/instance: loki
     app.kubernetes.io/name: loki
     app.kubernetes.io/version: 3.5.7
-    helm.sh/chart: loki-6.46.0
+    helm.sh/chart: loki-6.53.0
   name: loki-clusterrolebinding
 roleRef:
   apiGroup: rbac.authorization.k8s.io
@@ -189,7 +189,7 @@ metadata:
     app.kubernetes.io/instance: loki
     app.kubernetes.io/name: loki
     app.kubernetes.io/version: 3.5.7
-    helm.sh/chart: loki-6.46.0
+    helm.sh/chart: loki-6.53.0
   name: loki
   namespace: grafana-loki
 ---
@@ -261,7 +261,7 @@ metadata:
     app.kubernetes.io/instance: loki
     app.kubernetes.io/name: loki
     app.kubernetes.io/version: 3.5.7
-    helm.sh/chart: loki-6.46.0
+    helm.sh/chart: loki-6.53.0
   name: loki-gateway
   namespace: grafana-loki
 ---
@@ -275,7 +275,7 @@ metadata:
     app.kubernetes.io/instance: loki
     app.kubernetes.io/name: loki
     app.kubernetes.io/version: 3.5.7
-    helm.sh/chart: loki-6.46.0
+    helm.sh/chart: loki-6.53.0
   name: loki-runtime
   namespace: grafana-loki
 ---
@@ -287,7 +287,7 @@ metadata:
     app.kubernetes.io/instance: loki
     app.kubernetes.io/name: loki
     app.kubernetes.io/version: 3.5.7
-    helm.sh/chart: loki-6.46.0
+    helm.sh/chart: loki-6.53.0
   name: loki-backend
   namespace: grafana-loki
 spec:
@@ -343,7 +343,7 @@ metadata:
     app.kubernetes.io/instance: loki
     app.kubernetes.io/name: loki
     app.kubernetes.io/version: 3.5.7
-    helm.sh/chart: loki-6.46.0
+    helm.sh/chart: loki-6.53.0
   name: loki-canary
   namespace: grafana-loki
 spec:
@@ -366,7 +366,7 @@ metadata:
     app.kubernetes.io/instance: loki
     app.kubernetes.io/name: loki
     app.kubernetes.io/version: 3.5.7
-    helm.sh/chart: loki-6.46.0
+    helm.sh/chart: loki-6.53.0
   name: loki-chunks-cache
   namespace: grafana-loki
 spec:
@@ -392,7 +392,7 @@ metadata:
     app.kubernetes.io/instance: loki
     app.kubernetes.io/name: loki
     app.kubernetes.io/version: 3.5.7
-    helm.sh/chart: loki-6.46.0
+    helm.sh/chart: loki-6.53.0
     prometheus.io/service-monitor: "false"
   name: loki-gateway
   namespace: grafana-loki
@@ -415,7 +415,7 @@ metadata:
     app.kubernetes.io/instance: loki
     app.kubernetes.io/name: loki
     app.kubernetes.io/version: 3.5.7
-    helm.sh/chart: loki-6.46.0
+    helm.sh/chart: loki-6.53.0
   name: loki-memberlist
   namespace: grafana-loki
 spec:
@@ -467,7 +467,7 @@ metadata:
     app.kubernetes.io/instance: loki
     app.kubernetes.io/name: loki
     app.kubernetes.io/version: 3.5.7
-    helm.sh/chart: loki-6.46.0
+    helm.sh/chart: loki-6.53.0
   name: loki-read
   namespace: grafana-loki
 spec:
@@ -523,7 +523,7 @@ metadata:
     app.kubernetes.io/instance: loki
     app.kubernetes.io/name: loki
     app.kubernetes.io/version: 3.5.7
-    helm.sh/chart: loki-6.46.0
+    helm.sh/chart: loki-6.53.0
   name: loki-results-cache
   namespace: grafana-loki
 spec:
@@ -549,7 +549,7 @@ metadata:
     app.kubernetes.io/instance: loki
     app.kubernetes.io/name: loki
     app.kubernetes.io/version: 3.5.7
-    helm.sh/chart: loki-6.46.0
+    helm.sh/chart: loki-6.53.0
   name: loki-write
   namespace: grafana-loki
 spec:
@@ -605,7 +605,7 @@ metadata:
     app.kubernetes.io/instance: loki
     app.kubernetes.io/name: loki
     app.kubernetes.io/version: 3.5.7
-    helm.sh/chart: loki-6.46.0
+    helm.sh/chart: loki-6.53.0
   name: loki-gateway
   namespace: grafana-loki
 spec:
@@ -690,7 +690,7 @@ metadata:
     app.kubernetes.io/name: loki
     app.kubernetes.io/part-of: memberlist
     app.kubernetes.io/version: 3.5.7
-    helm.sh/chart: loki-6.46.0
+    helm.sh/chart: loki-6.53.0
   name: loki-read
   namespace: grafana-loki
 spec:
@@ -783,6 +783,7 @@ spec:
           name: data
       securityContext:
         fsGroup: 10001
+        fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 10001
         runAsNonRoot: true
         runAsUser: 10001
@@ -812,7 +813,7 @@ metadata:
     app.kubernetes.io/name: loki
     app.kubernetes.io/part-of: memberlist
     app.kubernetes.io/version: 3.5.7
-    helm.sh/chart: loki-6.46.0
+    helm.sh/chart: loki-6.53.0
   name: loki-backend
   namespace: grafana-loki
 spec:
@@ -839,7 +840,7 @@ spec:
         app.kubernetes.io/name: loki
         app.kubernetes.io/part-of: memberlist
         app.kubernetes.io/version: 3.5.7
-        helm.sh/chart: loki-6.46.0
+        helm.sh/chart: loki-6.53.0
     spec:
       affinity:
         podAntiAffinity:
@@ -937,6 +938,7 @@ spec:
           name: sc-rules-volume
       securityContext:
         fsGroup: 10001
+        fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 10001
         runAsNonRoot: true
         runAsUser: 10001
@@ -980,7 +982,7 @@ metadata:
     app.kubernetes.io/instance: loki
     app.kubernetes.io/name: loki
     app.kubernetes.io/version: 3.5.7
-    helm.sh/chart: loki-6.46.0
+    helm.sh/chart: loki-6.53.0
     name: memcached-chunks-cache
   name: loki-chunks-cache
   namespace: grafana-loki
@@ -1112,7 +1114,7 @@ metadata:
     app.kubernetes.io/instance: loki
     app.kubernetes.io/name: loki
     app.kubernetes.io/version: 3.5.7
-    helm.sh/chart: loki-6.46.0
+    helm.sh/chart: loki-6.53.0
     name: memcached-results-cache
   name: loki-results-cache
   namespace: grafana-loki
@@ -1245,7 +1247,7 @@ metadata:
     app.kubernetes.io/name: loki
     app.kubernetes.io/part-of: memberlist
     app.kubernetes.io/version: 3.5.7
-    helm.sh/chart: loki-6.46.0
+    helm.sh/chart: loki-6.53.0
   name: loki-write
   namespace: grafana-loki
 spec:
@@ -1268,7 +1270,7 @@ spec:
         app.kubernetes.io/name: loki
         app.kubernetes.io/part-of: memberlist
         app.kubernetes.io/version: 3.5.7
-        helm.sh/chart: loki-6.46.0
+        helm.sh/chart: loki-6.53.0
     spec:
       affinity:
         podAntiAffinity:
@@ -1335,6 +1337,7 @@ spec:
       enableServiceLinks: true
       securityContext:
         fsGroup: 10001
+        fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 10001
         runAsNonRoot: true
         runAsUser: 10001
@@ -1374,7 +1377,7 @@ metadata:
     app.kubernetes.io/instance: loki
     app.kubernetes.io/name: loki
     app.kubernetes.io/version: 3.5.7
-    helm.sh/chart: loki-6.46.0
+    helm.sh/chart: loki-6.53.0
   name: loki-backend
   namespace: grafana-loki
 spec:
@@ -1393,7 +1396,7 @@ metadata:
     app.kubernetes.io/instance: loki
     app.kubernetes.io/name: loki
     app.kubernetes.io/version: 3.5.7
-    helm.sh/chart: loki-6.46.0
+    helm.sh/chart: loki-6.53.0
   name: loki-read
   namespace: grafana-loki
 spec:
@@ -1412,7 +1415,7 @@ metadata:
     app.kubernetes.io/instance: loki
     app.kubernetes.io/name: loki
     app.kubernetes.io/version: 3.5.7
-    helm.sh/chart: loki-6.46.0
+    helm.sh/chart: loki-6.53.0
   name: loki-write
   namespace: grafana-loki
 spec:
@@ -1431,7 +1434,7 @@ metadata:
     app.kubernetes.io/instance: loki
     app.kubernetes.io/name: loki
     app.kubernetes.io/version: 3.5.7
-    helm.sh/chart: loki-6.46.0
+    helm.sh/chart: loki-6.53.0
   name: loki-canary
   namespace: grafana-loki
 spec:
@@ -1461,7 +1464,7 @@ spec:
           valueFrom:
             fieldRef:
               fieldPath: metadata.name
-        image: docker.io/grafana/loki-canary:3.5.7
+        image: docker.io/grafana/loki-canary:3.6.5
         imagePullPolicy: IfNotPresent
         name: loki-canary
         ports:
@@ -1483,6 +1486,7 @@ spec:
         volumeMounts: null
       securityContext:
         fsGroup: 10001
+        fsGroupChangePolicy: OnRootMismatch
         runAsGroup: 10001
         runAsNonRoot: true
         runAsUser: 10001
@@ -1503,7 +1507,7 @@ metadata:
     app.kubernetes.io/instance: loki
     app.kubernetes.io/name: loki
     app.kubernetes.io/version: 3.5.7
-    helm.sh/chart: loki-6.46.0
+    helm.sh/chart: loki-6.53.0
   name: loki-helm-test
   namespace: grafana-loki
 spec:
diff --git a/grafana-loki/src/kustomization.yaml b/grafana-loki/src/kustomization.yaml
index 1a7e3c3..be8f43b 100644
--- a/grafana-loki/src/kustomization.yaml
+++ b/grafana-loki/src/kustomization.yaml
@@ -5,7 +5,7 @@ kind: Kustomization
 helmCharts:
   - name: loki
     repo: https://grafana.github.io/helm-charts
-    version: 6.46.0
+    version: 6.53.0
     releaseName: loki
     includeCRDs: true
     namespace: grafana-loki