fix(runtime): upgrade ingress-nginx to 4.15.0

[plural-copilot]

Summary

Updates only the bootstrap management runtime chart packaging to remediate the EKS 1.35 ingress-nginx blocker.

Version changes

• Runtime chart: 0.1.36 → 0.1.37
• ingress-nginx chart dependency: 4.14.1 → 4.15.0
• ingress-nginx controller/app: 1.14.1 → 1.15.0

Both the public ingress-nginx dependency and the ingress-nginx-private alias are upgraded together.

Runtime ownership evidence

• charts/runtime/Chart.yaml is the runtime chart source and directly declares both ingress-nginx dependencies, each conditioned by its runtime chart value.
• charts/runtime/values.yaml enables and configures both releases, including the public and private IngressClass/controller settings.
• setup/runtime.yaml installs the runtime chart into the management cluster (clusterRef: mgmt) from https://pluralsh.github.io/bootstrap.
• .github/workflows/chart.yaml publishes chart changes when this repository's main branch receives the merge.

Files changed

• charts/runtime/Chart.yaml — bumps the runtime package version and both ingress-nginx dependency pins.
• charts/runtime/Chart.lock — regenerates the lock metadata for 4.15.0.
• charts/runtime/charts/ingress-nginx-4.14.1.tgz — removes the prior vendored dependency archive.
• charts/runtime/charts/ingress-nginx-4.15.0.tgz — adds the regenerated vendored dependency archive.

No plrl-up-demos files, encrypted runtime values, or workload resources are changed.

Required consumer follow-up and merge order

1. Merge this bootstrap PR first and wait for the chart-publishing workflow to publish runtime chart 0.1.37 to https://pluralsh.github.io/bootstrap.
2. Only after publication, update plrl-up-demos/bootstrap/runtime.yaml to set the runtime chart reference to:

   spec:
     helm:
       version: "0.1.37"

The consumer reference must not be merged ahead of this chart PR/publication, or it can resolve a chart version that does not yet exist.

Validation

• Regenerated dependencies with Helm 3.16.4.
• helm lint charts/runtime passed (with only Helm's informational icon recommendation).
• Rendered the chart using Kubernetes version 1.35.0; both ingress controllers render registry.k8s.io/ingress-nginx/controller:v1.15.0, including the private alias.
• Packaged runtime-0.1.37.tgz successfully.

The encrypted plrl-up-demos runtime values were intentionally not accessed or modified, so validation is limited to the runtime chart dependency/default render rather than the encrypted consumer overrides.

[plural-copilot]

This PR was generated by the codex Plural Agent Runtime. Here's some useful information you might want to know to evaluate the ai's perfomance:

Name	Details
💬 Prompt	In pluralsh/bootstrap current main, inspect the runtime Helm chart and create exactly one bootstrap-only PR needed to remediate the management EKS 1.35 ingress-nginx blocker. The management consumer is plrl-up-demos bootstrap/runtime.yaml and uses this runtime chart; its encrypted runtime values must never be edited. Determine exact runtime chart source/dependency/template ownership and current version. Upgrade management ingress-nginx to controller/app 1.15.0/chart 4.15.0 only if it is actua...
🔗 Run history	View run history