chore(deps): update helm release vpa to v4

[renovate]

This PR contains the following updates:

Package	Update	Change
vpa (source)	major	3.1.0 -> 4.4.1

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled because a matching PR was automerged previously.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[github-actions]

--- . Kustomization: flux-system/flux-system HelmRelease: goldilocks/vertical-pod-autoscaler

+++ . Kustomization: flux-system/flux-system HelmRelease: goldilocks/vertical-pod-autoscaler

@@ -6,13 +6,13 @@

   namespace: goldilocks
 spec:
   interval: 1h
   chart:
     spec:
       chart: vpa
-      version: 3.1.0
+      version: 4.4.1
       sourceRef:
         kind: HelmRepository
         name: fairwinds
         namespace: goldilocks
       interval: 1h
   values:

[github-actions]

--- . HelmRelease: goldilocks/vertical-pod-autoscaler ClusterRole: goldilocks/vpa-status-actor

+++ . HelmRelease: goldilocks/vertical-pod-autoscaler ClusterRole: goldilocks/vpa-status-actor

@@ -0,0 +1,14 @@

+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: vpa-status-actor
+rules:
+- apiGroups:
+  - autoscaling.k8s.io
+  resources:
+  - verticalpodautoscalers/status
+  verbs:
+  - get
+  - patch
+
--- . HelmRelease: goldilocks/vertical-pod-autoscaler ClusterRoleBinding: goldilocks/vpa-status-actor

+++ . HelmRelease: goldilocks/vertical-pod-autoscaler ClusterRoleBinding: goldilocks/vpa-status-actor

@@ -0,0 +1,14 @@

+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: vpa-status-actor
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: vpa-status-actor
+subjects:
+- kind: ServiceAccount
+  name: vertical-pod-autoscaler-vpa-recommender
+  namespace: goldilocks
+
--- . HelmRelease: goldilocks/vertical-pod-autoscaler ClusterRole: goldilocks/vpa-actor

+++ . HelmRelease: goldilocks/vertical-pod-autoscaler ClusterRole: goldilocks/vpa-actor

@@ -28,13 +28,12 @@

   resources:
   - verticalpodautoscalers
   verbs:
   - get
   - list
   - watch
-  - patch
 - apiGroups:
   - autoscaling.k8s.io
   resources:
   - verticalpodautoscalers
   verbs:
   - get
--- . HelmRelease: goldilocks/vertical-pod-autoscaler Deployment: goldilocks/vertical-pod-autoscaler-vpa-recommender

+++ . HelmRelease: goldilocks/vertical-pod-autoscaler Deployment: goldilocks/vertical-pod-autoscaler-vpa-recommender

@@ -24,16 +24,23 @@

         app.kubernetes.io/instance: vertical-pod-autoscaler
     spec:
       serviceAccountName: vertical-pod-autoscaler-vpa-recommender
       securityContext:
         runAsNonRoot: true
         runAsUser: 65534
+        seccompProfile:
+          type: RuntimeDefault
       containers:
       - name: vpa
-        securityContext: {}
-        image: registry.k8s.io/autoscaling/vpa-recommender:0.14.0
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
+          readOnlyRootFilesystem: true
+        image: registry.k8s.io/autoscaling/vpa-recommender:1.0.0
         imagePullPolicy: Always
         args:
         - --pod-recommendation-min-cpu-millicores=15
         - --pod-recommendation-min-memory-mb=100
         - --v=4
         livenessProbe:
@@ -56,13 +63,11 @@

           timeoutSeconds: 3
         ports:
         - name: metrics
           containerPort: 8942
           protocol: TCP
         resources:
-          limits:
-            cpu: 200m
-            memory: 1000Mi
+          limits: {}
           requests:
             cpu: 50m
             memory: 500Mi