chore(deps): update dependency victoriametrics/operator to v0.68.2

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
VictoriaMetrics/operator	Kustomization	minor	v0.67.0 → v0.68.2
victoriametrics/operator	Kustomization	minor	v0.67.0 → v0.68.2

---

Release Notes

VictoriaMetrics/operator (VictoriaMetrics/operator)

v0.68.2

Compare Source

• Dependency: vmoperator: Updated default versions for VL apps to v1.47.0.

• BUGFIX: vmoperator: perform statefulset pods deletion instead of eviction when maxUnavailable set to 100%, which is important for minimum downtime strategy. See #​1706.

• BUGFIX: vmoperator: VMPodScrape for VLAgent and VMAgent now uses the correct port; previously it used the wrong port and could cause scrape failures. See #​1887.

• BUGFIX: vmdistributed: updated VMAuth config consolidating all VMSelects into a single read and all VMClusters into a single write backend

• BUGFIX: vmdistributed: fix PVC being owned by StatefulSet and top-level object simultaenously. See #​1845.

• BUGFIX: vmoperator: remove unneeded finalizer from core K8s resources. See #​835.

• BUGFIX: vmdistributed: remove finalizers from VMServiceScrape and VMPodScrape objects, and keep finalizers on VMAgent, VMCluster, and VMAuth when DeletionTimestamp is not empty.

• BUGFIX: vmsingle and vmagent: previously, ingest-only mode could still mount scrape configuration secrets when relabeling or stream aggregation was configured, which caused unexpected secret mounts and RBAC-related failures; now these secrets are not mounted in ingest-only mode, so deployments start with the expected minimal permissions and avoid related runtime errors. See #​1828.

• BUGFIX: vmoperator: do not recreate STS if VCT size was increased and recreate in other cases.

• BUGFIX: vmoperator: wait for STS deletion in case of recreation without throwing an error.

v0.68.1

Compare Source

SECURITY: upgrade Go builder from Go1.25.5 to Go1.25.7. See the list of issues addressed in Go1.25.7.)

• BUGFIX: vmanomaly: fix configuration marshalling for Prophet model. Previously, using Prophet model would lead to panic during configuration marshalling.

v0.68.0

Compare Source

Release date: 23 February 2026

Update note 1: deprecated VMProbe's spec.targets.ingress. Use spec.targets.kubernetes slice instead. Please check example of VMProbe with Ingress discovery. This field will be removed in v0.71.0.

Update note 2: deprecated VMProbe's spec.targets.staticConfig. Use spec.targets.static instead. Please check example of VMProbe with static targets. This field will be removed in v0.71.0.

• Dependency: vmoperator: Updated default versions for VM apps to v1.136.0 version

• Dependency: vmoperator: Updated default versions for VL apps to v1.45.0.

• FEATURE: vmalertmanager: added namespace to --cluster.peer arguments explicitly when spec.clusterDomainName is omitted and added unit tests to test this.

• FEATURE: vmoperator: introduce VMDistributed CR, which helps to propagate changes to each zone without affecting global availability. Before distributed setup deployment was multistep manual action. See #​1515.

• FEATURE: vlagent: support ability to override default stream fields for vlagent in logs collection mode.

• FEATURE: vmoperator: added VM_*_EPHEMERAL_STORAGE_REQUEST and VM_*_EPHEMERAL_STORAGE_LIMIT global variables that allow to configure ephemeralStorage requests and limits. See #​1711.

• FEATURE: vmalertmanager: added tracing support. See #​1770.

• FEATURE: vmprobe: added spec.targets.kubernetes property, that allows to configure probe for ingress, pod and service roles. See #​1078 and #​1716.

• FEATURE: vmscrapeconfig: added nomad_sd_config support. See #​1809.

• FEATURE: vmoperator: support VPA for vmcluster, vtcluster, vlcluster and vmauth. See #​1795. Thanks to the @​dctrwatson for the pull request #​1803.

• BUGFIX: vmagent: previously the operator requested nodes/proxy RBAC permissions even though vmagent did not use them; now this permission is no longer required, reducing the default privilege footprint for users running vmagent. See #​1753.

• BUGFIX: vmalert: throw error if no notifiers found. See #​1757.

• BUGFIX: vlagent: previously the operator emitted quoted spec.k8sCollector.{msgField,timeField,ignoreFields,decolorizeFields} values, which caused vlagent to misparse these fields; now these fields are emitted unquoted so collector settings are applied correctly. See #​1749.

• BUGFIX: vmoperator: fixed conflicts for VMAlert, VMAlertmanager and VMAuth reconcilers, which are updating same objects concurrently with reconcilers for their child objects.

• BUGFIX: vmoperator: previously PVC downscaling always emitted a warning, which is not expected, while using PVC autoresizer; now warning during attempt to downsize PVC is only emitted if operator.victoriametrics.com/pvc-allow-volume-expansion: false is not set. See #​1747.

• BUGFIX: vmoperator: skip self scrape objects management if respective controller is disabled. See #​1718.

• BUGFIX: vmagent: support both prometheus-compatible endpointslice and old endpointslices roles.

• BUGFIX: vmanomaly: fix pod metrics port in the default VMPodScrape.

• BUGFIX: vmoperator: support Prometheus operator AlertmanagerConfig spec.muteTimeIntervals conversion to VMAlertmanagerConfig spec.timeIntervals. See #​1783.

• BUGFIX: vmoperator: previously StatefulSet/Deployment/DaemonSet rollouts could proceed in parallel, now pods are rolled out sequentially. See #​1693.

• BUGFIX: config-reloader: previously --only-init-config still kept the reloader running background watchers; now it exits after the initial config update so the pod terminates as expected. See #​1785.

• BUGFIX: vmoperator: previously, recreating a resource after deletion could hang and block updates; now resource recreation completes normally. See #​1707.

• BUGFIX: vmoperator: use global image registry unless image.repository is defined. See #​1813.

• BUGFIX: vmalertmanagerconfig: previously spec.route and spec.receivers were required; now both parameters are optional to align with prometheus operator. VMAlertmanager now can be used to set just the global inhibition rules. See #​1800.

• BUGFIX: vmoperator: use global image registry unless image.repository is defined. See #​1813.

• BUGFIX: vmagent: fixed RBAC, when ingestOnlyMode is enabled and relabel of stream aggregation configurations defined. See #​1828.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.