chore(deps): update docker.io/envoyproxy/gateway-helm docker tag to v1.9.2

[renovate]

This PR contains the following updates:

Package	Update	Change
docker.io/envoyproxy/gateway-helm (source)	patch	1.9.1 → 1.9.2

---

Release Notes

envoyproxy/gateway (docker.io/envoyproxy/gateway-helm)

v1.9.2

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

🔍 Rendered manifest diff — this PR vs main (desired state)

18 changed · 0 added · 0 removed

Rendered with kustomize build + helm template (source of truth = git), so Helm-expanded workloads are included. Shows what Flux will apply — not a diff against live cluster state (drift is alerted on separately), and not CRD-defaulted / webhook-mutated output. Secret values are redacted; per-render noise (webhook caBundles, checksum/* annotations, render timestamps) is normalized out.

🟡 changed — admissionregistration.k8s.io/v1/MutatingWebhookConfiguration/-/envoy-gateway-topology-injector.envoy-gateway-system

--- a/admissionregistration.k8s.io/v1/MutatingWebhookConfiguration/-/envoy-gateway-topology-injector.envoy-gateway-system
+++ b/admissionregistration.k8s.io/v1/MutatingWebhookConfiguration/-/envoy-gateway-topology-injector.envoy-gateway-system
@@ -9,8 +9,8 @@
     app.kubernetes.io/instance: envoy-gateway
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: gateway-helm
-    app.kubernetes.io/version: v1.9.1
-    helm.sh/chart: gateway-helm-1.9.1
+    app.kubernetes.io/version: v1.9.2
+    helm.sh/chart: gateway-helm-1.9.2
   name: envoy-gateway-topology-injector.envoy-gateway-system
 webhooks:
 - admissionReviewVersions:

🟡 changed — apps/v1/Deployment/envoy-gateway-system/envoy-gateway

--- a/apps/v1/Deployment/envoy-gateway-system/envoy-gateway
+++ b/apps/v1/Deployment/envoy-gateway-system/envoy-gateway
@@ -5,9 +5,9 @@
     app.kubernetes.io/instance: envoy-gateway
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: gateway-helm
-    app.kubernetes.io/version: v1.9.1
+    app.kubernetes.io/version: v1.9.2
     control-plane: envoy-gateway
-    helm.sh/chart: gateway-helm-1.9.1
+    helm.sh/chart: gateway-helm-1.9.2
   name: envoy-gateway
   namespace: envoy-gateway-system
 spec:
@@ -38,9 +38,16 @@
             fieldRef:
               apiVersion: v1
               fieldPath: metadata.namespace
+        - name: ENVOY_GATEWAY_SERVICE_ACCOUNT
+          valueFrom:
+            fieldRef:
+              apiVersion: v1
+              fieldPath: spec.serviceAccountName
+        - name: ENVOY_GATEWAY_FULLNAME
+          value: envoy-gateway-gateway-helm
         - name: KUBERNETES_CLUSTER_DOMAIN
           value: cluster.local
-        image: docker.io/envoyproxy/gateway:v1.9.1
+        image: docker.io/envoyproxy/gateway:v1.9.2
         imagePullPolicy: IfNotPresent
         livenessProbe:
           httpGet:

🟡 changed — batch/v1/Job/envoy-gateway-system/envoy-gateway-gateway-helm-certgen

--- a/batch/v1/Job/envoy-gateway-system/envoy-gateway-gateway-helm-certgen
+++ b/batch/v1/Job/envoy-gateway-system/envoy-gateway-gateway-helm-certgen
@@ -7,8 +7,8 @@
     app.kubernetes.io/instance: envoy-gateway
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: gateway-helm
-    app.kubernetes.io/version: v1.9.1
-    helm.sh/chart: gateway-helm-1.9.1
+    app.kubernetes.io/version: v1.9.2
+    helm.sh/chart: gateway-helm-1.9.2
   name: envoy-gateway-gateway-helm-certgen
   namespace: envoy-gateway-system
 spec:
@@ -33,7 +33,7 @@
               fieldPath: metadata.namespace
         - name: KUBERNETES_CLUSTER_DOMAIN
           value: cluster.local
-        image: docker.io/envoyproxy/gateway:v1.9.1
+        image: docker.io/envoyproxy/gateway:v1.9.2
         imagePullPolicy: IfNotPresent
         name: envoy-gateway-certgen
         securityContext:

🟡 changed — rbac.authorization.k8s.io/v1/ClusterRole/-/envoy-gateway-gateway-helm-certgen:envoy-gateway-system

--- a/rbac.authorization.k8s.io/v1/ClusterRole/-/envoy-gateway-gateway-helm-certgen:envoy-gateway-system
+++ b/rbac.authorization.k8s.io/v1/ClusterRole/-/envoy-gateway-gateway-helm-certgen:envoy-gateway-system
@@ -8,8 +8,8 @@
     app.kubernetes.io/instance: envoy-gateway
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: gateway-helm
-    app.kubernetes.io/version: v1.9.1
-    helm.sh/chart: gateway-helm-1.9.1
+    app.kubernetes.io/version: v1.9.2
+    helm.sh/chart: gateway-helm-1.9.2
   name: envoy-gateway-gateway-helm-certgen:envoy-gateway-system
 rules:
 - apiGroups:

🟡 changed — rbac.authorization.k8s.io/v1/ClusterRole/-/envoy-gateway-gateway-helm-envoy-gateway-role

--- a/rbac.authorization.k8s.io/v1/ClusterRole/-/envoy-gateway-gateway-helm-envoy-gateway-role
+++ b/rbac.authorization.k8s.io/v1/ClusterRole/-/envoy-gateway-gateway-helm-envoy-gateway-role
@@ -6,8 +6,8 @@
     app.kubernetes.io/instance: envoy-gateway
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: gateway-helm
-    app.kubernetes.io/version: v1.9.1
-    helm.sh/chart: gateway-helm-1.9.1
+    app.kubernetes.io/version: v1.9.2
+    helm.sh/chart: gateway-helm-1.9.2
   name: envoy-gateway-gateway-helm-envoy-gateway-role
 rules:
 - apiGroups:

🟡 changed — rbac.authorization.k8s.io/v1/ClusterRoleBinding/-/envoy-gateway-gateway-helm-certgen:envoy-gateway-system

--- a/rbac.authorization.k8s.io/v1/ClusterRoleBinding/-/envoy-gateway-gateway-helm-certgen:envoy-gateway-system
+++ b/rbac.authorization.k8s.io/v1/ClusterRoleBinding/-/envoy-gateway-gateway-helm-certgen:envoy-gateway-system
@@ -8,8 +8,8 @@
     app.kubernetes.io/instance: envoy-gateway
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: gateway-helm
-    app.kubernetes.io/version: v1.9.1
-    helm.sh/chart: gateway-helm-1.9.1
+    app.kubernetes.io/version: v1.9.2
+    helm.sh/chart: gateway-helm-1.9.2
   name: envoy-gateway-gateway-helm-certgen:envoy-gateway-system
 roleRef:
   apiGroup: rbac.authorization.k8s.io

🟡 changed — rbac.authorization.k8s.io/v1/ClusterRoleBinding/-/envoy-gateway-gateway-helm-envoy-gateway-rolebinding

--- a/rbac.authorization.k8s.io/v1/ClusterRoleBinding/-/envoy-gateway-gateway-helm-envoy-gateway-rolebinding
+++ b/rbac.authorization.k8s.io/v1/ClusterRoleBinding/-/envoy-gateway-gateway-helm-envoy-gateway-rolebinding
@@ -5,8 +5,8 @@
     app.kubernetes.io/instance: envoy-gateway
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: gateway-helm
-    app.kubernetes.io/version: v1.9.1
-    helm.sh/chart: gateway-helm-1.9.1
+    app.kubernetes.io/version: v1.9.2
+    helm.sh/chart: gateway-helm-1.9.2
   name: envoy-gateway-gateway-helm-envoy-gateway-rolebinding
 roleRef:
   apiGroup: rbac.authorization.k8s.io

🟡 changed — rbac.authorization.k8s.io/v1/Role/envoy-gateway-system/envoy-gateway-gateway-helm-certgen

--- a/rbac.authorization.k8s.io/v1/Role/envoy-gateway-system/envoy-gateway-gateway-helm-certgen
+++ b/rbac.authorization.k8s.io/v1/Role/envoy-gateway-system/envoy-gateway-gateway-helm-certgen
@@ -8,8 +8,8 @@
     app.kubernetes.io/instance: envoy-gateway
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: gateway-helm
-    app.kubernetes.io/version: v1.9.1
-    helm.sh/chart: gateway-helm-1.9.1
+    app.kubernetes.io/version: v1.9.2
+    helm.sh/chart: gateway-helm-1.9.2
   name: envoy-gateway-gateway-helm-certgen
   namespace: envoy-gateway-system
 rules:

🟡 changed — rbac.authorization.k8s.io/v1/Role/envoy-gateway-system/envoy-gateway-gateway-helm-infra-manager

--- a/rbac.authorization.k8s.io/v1/Role/envoy-gateway-system/envoy-gateway-gateway-helm-infra-manager
+++ b/rbac.authorization.k8s.io/v1/Role/envoy-gateway-system/envoy-gateway-gateway-helm-infra-manager
@@ -5,8 +5,8 @@
     app.kubernetes.io/instance: envoy-gateway
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: gateway-helm
-    app.kubernetes.io/version: v1.9.1
-    helm.sh/chart: gateway-helm-1.9.1
+    app.kubernetes.io/version: v1.9.2
+    helm.sh/chart: gateway-helm-1.9.2
   name: envoy-gateway-gateway-helm-infra-manager
   namespace: envoy-gateway-system
 rules:

🟡 changed — rbac.authorization.k8s.io/v1/Role/envoy-gateway-system/envoy-gateway-gateway-helm-leader-election-role

--- a/rbac.authorization.k8s.io/v1/Role/envoy-gateway-system/envoy-gateway-gateway-helm-leader-election-role
+++ b/rbac.authorization.k8s.io/v1/Role/envoy-gateway-system/envoy-gateway-gateway-helm-leader-election-role
@@ -5,8 +5,8 @@
     app.kubernetes.io/instance: envoy-gateway
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: gateway-helm
-    app.kubernetes.io/version: v1.9.1
-    helm.sh/chart: gateway-helm-1.9.1
+    app.kubernetes.io/version: v1.9.2
+    helm.sh/chart: gateway-helm-1.9.2
   name: envoy-gateway-gateway-helm-leader-election-role
   namespace: envoy-gateway-system
 rules:

🟡 changed — rbac.authorization.k8s.io/v1/RoleBinding/envoy-gateway-system/envoy-gateway-gateway-helm-certgen

--- a/rbac.authorization.k8s.io/v1/RoleBinding/envoy-gateway-system/envoy-gateway-gateway-helm-certgen
+++ b/rbac.authorization.k8s.io/v1/RoleBinding/envoy-gateway-system/envoy-gateway-gateway-helm-certgen
@@ -8,8 +8,8 @@
     app.kubernetes.io/instance: envoy-gateway
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: gateway-helm
-    app.kubernetes.io/version: v1.9.1
-    helm.sh/chart: gateway-helm-1.9.1
+    app.kubernetes.io/version: v1.9.2
+    helm.sh/chart: gateway-helm-1.9.2
   name: envoy-gateway-gateway-helm-certgen
   namespace: envoy-gateway-system
 roleRef:

🟡 changed — rbac.authorization.k8s.io/v1/RoleBinding/envoy-gateway-system/envoy-gateway-gateway-helm-infra-manager

--- a/rbac.authorization.k8s.io/v1/RoleBinding/envoy-gateway-system/envoy-gateway-gateway-helm-infra-manager
+++ b/rbac.authorization.k8s.io/v1/RoleBinding/envoy-gateway-system/envoy-gateway-gateway-helm-infra-manager
@@ -5,8 +5,8 @@
     app.kubernetes.io/instance: envoy-gateway
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: gateway-helm
-    app.kubernetes.io/version: v1.9.1
-    helm.sh/chart: gateway-helm-1.9.1
+    app.kubernetes.io/version: v1.9.2
+    helm.sh/chart: gateway-helm-1.9.2
   name: envoy-gateway-gateway-helm-infra-manager
   namespace: envoy-gateway-system
 roleRef:

🟡 changed — rbac.authorization.k8s.io/v1/RoleBinding/envoy-gateway-system/envoy-gateway-gateway-helm-leader-election-rolebinding

--- a/rbac.authorization.k8s.io/v1/RoleBinding/envoy-gateway-system/envoy-gateway-gateway-helm-leader-election-rolebinding
+++ b/rbac.authorization.k8s.io/v1/RoleBinding/envoy-gateway-system/envoy-gateway-gateway-helm-leader-election-rolebinding
@@ -5,8 +5,8 @@
     app.kubernetes.io/instance: envoy-gateway
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: gateway-helm
-    app.kubernetes.io/version: v1.9.1
-    helm.sh/chart: gateway-helm-1.9.1
+    app.kubernetes.io/version: v1.9.2
+    helm.sh/chart: gateway-helm-1.9.2
   name: envoy-gateway-gateway-helm-leader-election-rolebinding
   namespace: envoy-gateway-system
 roleRef:

🟡 changed — source.toolkit.fluxcd.io/v1/OCIRepository/envoy-gateway-system/envoy-gateway

--- a/source.toolkit.fluxcd.io/v1/OCIRepository/envoy-gateway-system/envoy-gateway
+++ b/source.toolkit.fluxcd.io/v1/OCIRepository/envoy-gateway-system/envoy-gateway
@@ -6,5 +6,5 @@
 spec:
   interval: 24h
   ref:
-    tag: 1.9.1
+    tag: 1.9.2
   url: oci://docker.io/envoyproxy/gateway-helm

🟡 changed — v1/ConfigMap/envoy-gateway-system/envoy-gateway-config

--- a/v1/ConfigMap/envoy-gateway-system/envoy-gateway-config
+++ b/v1/ConfigMap/envoy-gateway-system/envoy-gateway-config
@@ -1,13 +1,13 @@
 apiVersion: v1
 data:
-  envoy-gateway.yaml: "apiVersion: gateway.envoyproxy.io/v1alpha1\nkind: EnvoyGateway\nextensionApis:\n  enableBackend: true\n  enableEnvoyPatchPolicy: true\nextensionManager:\n  backendResources:\n  - group: inference.networking.k8s.io\n    kind: InferencePool\n    version: v1\n  hooks:\n    xdsTranslator:\n      post:\n      - Translation\n      - Cluster\n      - Route\n      translation:\n        cluster:\n          includeAll: true\n        listener:\n          includeAll: true\n        route:\n          includeAll: true\n        secret:\n          includeAll: true\n  service:\n    fqdn:\n      hostname: ai-gateway-controller.envoy-ai-gateway-system.svc.cluster.local\n      port: 1063\ngateway:\n  controllerName: gateway.envoyproxy.io/gatewayclass-controller\nlogging:\n  level:\n    default: info\nprovider:\n  kubernetes:\n    rateLimitDeployment:\n      container:\n        image: docker.io/envoyproxy/ratelimit:8fe6ea42\n      patch:\n        type: StrategicMerge\n        value:\n          spec:\n            template:\n              spec:\n                containers:\n                - imagePullPolicy: IfNotPresent\n                  name: envoy-ratelimit\n    shutdownManager:\n      image: docker.io/envoyproxy/gateway:v1.9.1\n  type: Kubernetes\n"
+  envoy-gateway.yaml: "apiVersion: gateway.envoyproxy.io/v1alpha1\nkind: EnvoyGateway\nextensionApis:\n  enableBackend: true\n  enableEnvoyPatchPolicy: true\nextensionManager:\n  backendResources:\n  - group: inference.networking.k8s.io\n    kind: InferencePool\n    version: v1\n  hooks:\n    xdsTranslator:\n      post:\n      - Translation\n      - Cluster\n      - Route\n      translation:\n        cluster:\n          includeAll: true\n        listener:\n          includeAll: true\n        route:\n          includeAll: true\n        secret:\n          includeAll: true\n  service:\n    fqdn:\n      hostname: ai-gateway-controller.envoy-ai-gateway-system.svc.cluster.local\n      port: 1063\ngateway:\n  controllerName: gateway.envoyproxy.io/gatewayclass-controller\nlogging:\n  level:\n    default: info\nprovider:\n  kubernetes:\n    rateLimitDeployment:\n      container:\n        image: docker.io/envoyproxy/ratelimit:0482748e\n      patch:\n        type: StrategicMerge\n        value:\n          spec:\n            template:\n              spec:\n                containers:\n                - imagePullPolicy: IfNotPresent\n                  name: envoy-ratelimit\n    shutdownManager:\n      image: docker.io/envoyproxy/gateway:v1.9.2\n  type: Kubernetes\n"
 kind: ConfigMap
 metadata:
   labels:
     app.kubernetes.io/instance: envoy-gateway
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: gateway-helm
-    app.kubernetes.io/version: v1.9.1
-    helm.sh/chart: gateway-helm-1.9.1
+    app.kubernetes.io/version: v1.9.2
+    helm.sh/chart: gateway-helm-1.9.2
   name: envoy-gateway-config
   namespace: envoy-gateway-system

🟡 changed — v1/Service/envoy-gateway-system/envoy-gateway

--- a/v1/Service/envoy-gateway-system/envoy-gateway
+++ b/v1/Service/envoy-gateway-system/envoy-gateway
@@ -5,9 +5,9 @@
     app.kubernetes.io/instance: envoy-gateway
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: gateway-helm
-    app.kubernetes.io/version: v1.9.1
+    app.kubernetes.io/version: v1.9.2
     control-plane: envoy-gateway
-    helm.sh/chart: gateway-helm-1.9.1
+    helm.sh/chart: gateway-helm-1.9.2
   name: envoy-gateway
   namespace: envoy-gateway-system
 spec:

🟡 changed — v1/ServiceAccount/envoy-gateway-system/envoy-gateway

--- a/v1/ServiceAccount/envoy-gateway-system/envoy-gateway
+++ b/v1/ServiceAccount/envoy-gateway-system/envoy-gateway
@@ -6,7 +6,7 @@
     app.kubernetes.io/instance: envoy-gateway
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: gateway-helm
-    app.kubernetes.io/version: v1.9.1
-    helm.sh/chart: gateway-helm-1.9.1
+    app.kubernetes.io/version: v1.9.2
+    helm.sh/chart: gateway-helm-1.9.2
   name: envoy-gateway
   namespace: envoy-gateway-system

🟡 changed — v1/ServiceAccount/envoy-gateway-system/envoy-gateway-gateway-helm-certgen

--- a/v1/ServiceAccount/envoy-gateway-system/envoy-gateway-gateway-helm-certgen
+++ b/v1/ServiceAccount/envoy-gateway-system/envoy-gateway-gateway-helm-certgen
@@ -9,7 +9,7 @@
     app.kubernetes.io/instance: envoy-gateway
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: gateway-helm
-    app.kubernetes.io/version: v1.9.1
-    helm.sh/chart: gateway-helm-1.9.1
+    app.kubernetes.io/version: v1.9.2
+    helm.sh/chart: gateway-helm-1.9.2
   name: envoy-gateway-gateway-helm-certgen
   namespace: envoy-gateway-system