131.diff (19136B)
1 diff --git a/clusters/talos_cluster/flux-system/gotk-components.yaml b/clusters/talos_cluster/flux-system/gotk-components.yaml 2 index d3806713..0b8942f5 100644 3 --- a/clusters/talos_cluster/flux-system/gotk-components.yaml 4 +++ b/clusters/talos_cluster/flux-system/gotk-components.yaml 5 @@ -1,6 +1,6 @@ 6 --- 7 # This manifest was generated by flux. DO NOT EDIT. 8 -# Flux Version: v2.8.3 9 +# Flux Version: v2.8.8 10 # Components: source-controller,kustomize-controller,helm-controller,notification-controller,image-reflector-controller,image-automation-controller 11 apiVersion: v1 12 kind: Namespace 13 @@ -8,7 +8,7 @@ metadata: 14 labels: 15 app.kubernetes.io/instance: flux-system 16 app.kubernetes.io/part-of: flux 17 - app.kubernetes.io/version: v2.8.3 18 + app.kubernetes.io/version: v2.8.8 19 pod-security.kubernetes.io/warn: restricted 20 pod-security.kubernetes.io/warn-version: latest 21 name: flux-system 22 @@ -19,7 +19,7 @@ metadata: 23 labels: 24 app.kubernetes.io/instance: flux-system 25 app.kubernetes.io/part-of: flux 26 - app.kubernetes.io/version: v2.8.3 27 + app.kubernetes.io/version: v2.8.8 28 name: allow-egress 29 namespace: flux-system 30 spec: 31 @@ -39,7 +39,7 @@ metadata: 32 labels: 33 app.kubernetes.io/instance: flux-system 34 app.kubernetes.io/part-of: flux 35 - app.kubernetes.io/version: v2.8.3 36 + app.kubernetes.io/version: v2.8.8 37 name: allow-scraping 38 namespace: flux-system 39 spec: 40 @@ -59,7 +59,7 @@ metadata: 41 labels: 42 app.kubernetes.io/instance: flux-system 43 app.kubernetes.io/part-of: flux 44 - app.kubernetes.io/version: v2.8.3 45 + app.kubernetes.io/version: v2.8.8 46 name: allow-webhooks 47 namespace: flux-system 48 spec: 49 @@ -78,7 +78,7 @@ metadata: 50 labels: 51 app.kubernetes.io/instance: flux-system 52 app.kubernetes.io/part-of: flux 53 - app.kubernetes.io/version: v2.8.3 54 + app.kubernetes.io/version: v2.8.8 55 name: critical-pods-flux-system 56 namespace: flux-system 57 spec: 58 @@ -98,7 +98,7 @@ metadata: 59 labels: 60 app.kubernetes.io/instance: flux-system 61 app.kubernetes.io/part-of: flux 62 - app.kubernetes.io/version: v2.8.3 63 + app.kubernetes.io/version: v2.8.8 64 name: crd-controller-flux-system 65 rules: 66 - apiGroups: 67 @@ -204,7 +204,7 @@ metadata: 68 labels: 69 app.kubernetes.io/instance: flux-system 70 app.kubernetes.io/part-of: flux 71 - app.kubernetes.io/version: v2.8.3 72 + app.kubernetes.io/version: v2.8.8 73 rbac.authorization.k8s.io/aggregate-to-admin: "true" 74 rbac.authorization.k8s.io/aggregate-to-edit: "true" 75 name: flux-edit-flux-system 76 @@ -231,7 +231,7 @@ metadata: 77 labels: 78 app.kubernetes.io/instance: flux-system 79 app.kubernetes.io/part-of: flux 80 - app.kubernetes.io/version: v2.8.3 81 + app.kubernetes.io/version: v2.8.8 82 rbac.authorization.k8s.io/aggregate-to-admin: "true" 83 rbac.authorization.k8s.io/aggregate-to-edit: "true" 84 rbac.authorization.k8s.io/aggregate-to-view: "true" 85 @@ -257,7 +257,7 @@ metadata: 86 labels: 87 app.kubernetes.io/instance: flux-system 88 app.kubernetes.io/part-of: flux 89 - app.kubernetes.io/version: v2.8.3 90 + app.kubernetes.io/version: v2.8.8 91 name: cluster-reconciler-flux-system 92 roleRef: 93 apiGroup: rbac.authorization.k8s.io 94 @@ -277,7 +277,7 @@ metadata: 95 labels: 96 app.kubernetes.io/instance: flux-system 97 app.kubernetes.io/part-of: flux 98 - app.kubernetes.io/version: v2.8.3 99 + app.kubernetes.io/version: v2.8.8 100 name: crd-controller-flux-system 101 roleRef: 102 apiGroup: rbac.authorization.k8s.io 103 @@ -315,7 +315,7 @@ metadata: 104 app.kubernetes.io/component: source-controller 105 app.kubernetes.io/instance: flux-system 106 app.kubernetes.io/part-of: flux 107 - app.kubernetes.io/version: v2.8.3 108 + app.kubernetes.io/version: v2.8.8 109 name: buckets.source.toolkit.fluxcd.io 110 spec: 111 group: source.toolkit.fluxcd.io 112 @@ -702,7 +702,7 @@ metadata: 113 app.kubernetes.io/component: source-controller 114 app.kubernetes.io/instance: flux-system 115 app.kubernetes.io/part-of: flux 116 - app.kubernetes.io/version: v2.8.3 117 + app.kubernetes.io/version: v2.8.8 118 name: externalartifacts.source.toolkit.fluxcd.io 119 spec: 120 group: source.toolkit.fluxcd.io 121 @@ -898,7 +898,7 @@ metadata: 122 app.kubernetes.io/component: source-controller 123 app.kubernetes.io/instance: flux-system 124 app.kubernetes.io/part-of: flux 125 - app.kubernetes.io/version: v2.8.3 126 + app.kubernetes.io/version: v2.8.8 127 name: gitrepositories.source.toolkit.fluxcd.io 128 spec: 129 group: source.toolkit.fluxcd.io 130 @@ -1385,7 +1385,7 @@ metadata: 131 app.kubernetes.io/component: source-controller 132 app.kubernetes.io/instance: flux-system 133 app.kubernetes.io/part-of: flux 134 - app.kubernetes.io/version: v2.8.3 135 + app.kubernetes.io/version: v2.8.8 136 name: helmcharts.source.toolkit.fluxcd.io 137 spec: 138 group: source.toolkit.fluxcd.io 139 @@ -1744,7 +1744,7 @@ metadata: 140 app.kubernetes.io/component: source-controller 141 app.kubernetes.io/instance: flux-system 142 app.kubernetes.io/part-of: flux 143 - app.kubernetes.io/version: v2.8.3 144 + app.kubernetes.io/version: v2.8.8 145 name: helmrepositories.source.toolkit.fluxcd.io 146 spec: 147 group: source.toolkit.fluxcd.io 148 @@ -2070,7 +2070,7 @@ metadata: 149 app.kubernetes.io/component: source-controller 150 app.kubernetes.io/instance: flux-system 151 app.kubernetes.io/part-of: flux 152 - app.kubernetes.io/version: v2.8.3 153 + app.kubernetes.io/version: v2.8.8 154 name: ocirepositories.source.toolkit.fluxcd.io 155 spec: 156 group: source.toolkit.fluxcd.io 157 @@ -2484,7 +2484,7 @@ metadata: 158 app.kubernetes.io/component: source-controller 159 app.kubernetes.io/instance: flux-system 160 app.kubernetes.io/part-of: flux 161 - app.kubernetes.io/version: v2.8.3 162 + app.kubernetes.io/version: v2.8.8 163 name: source-controller 164 namespace: flux-system 165 --- 166 @@ -2495,7 +2495,7 @@ metadata: 167 app.kubernetes.io/component: source-controller 168 app.kubernetes.io/instance: flux-system 169 app.kubernetes.io/part-of: flux 170 - app.kubernetes.io/version: v2.8.3 171 + app.kubernetes.io/version: v2.8.8 172 control-plane: controller 173 name: source-controller 174 namespace: flux-system 175 @@ -2516,7 +2516,7 @@ metadata: 176 app.kubernetes.io/component: source-controller 177 app.kubernetes.io/instance: flux-system 178 app.kubernetes.io/part-of: flux 179 - app.kubernetes.io/version: v2.8.3 180 + app.kubernetes.io/version: v2.8.8 181 control-plane: controller 182 name: source-controller 183 namespace: flux-system 184 @@ -2537,7 +2537,7 @@ spec: 185 app.kubernetes.io/component: source-controller 186 app.kubernetes.io/instance: flux-system 187 app.kubernetes.io/part-of: flux 188 - app.kubernetes.io/version: v2.8.3 189 + app.kubernetes.io/version: v2.8.8 190 spec: 191 containers: 192 - args: 193 @@ -2560,7 +2560,7 @@ spec: 194 resourceFieldRef: 195 containerName: manager 196 resource: limits.memory 197 - image: ghcr.io/fluxcd/source-controller:v1.8.1 198 + image: ghcr.io/fluxcd/source-controller:v1.8.5 199 imagePullPolicy: IfNotPresent 200 livenessProbe: 201 httpGet: 202 @@ -2624,7 +2624,7 @@ metadata: 203 app.kubernetes.io/component: kustomize-controller 204 app.kubernetes.io/instance: flux-system 205 app.kubernetes.io/part-of: flux 206 - app.kubernetes.io/version: v2.8.3 207 + app.kubernetes.io/version: v2.8.8 208 name: kustomizations.kustomize.toolkit.fluxcd.io 209 spec: 210 group: kustomize.toolkit.fluxcd.io 211 @@ -3338,7 +3338,7 @@ metadata: 212 app.kubernetes.io/component: kustomize-controller 213 app.kubernetes.io/instance: flux-system 214 app.kubernetes.io/part-of: flux 215 - app.kubernetes.io/version: v2.8.3 216 + app.kubernetes.io/version: v2.8.8 217 name: kustomize-controller 218 namespace: flux-system 219 --- 220 @@ -3349,7 +3349,7 @@ metadata: 221 app.kubernetes.io/component: kustomize-controller 222 app.kubernetes.io/instance: flux-system 223 app.kubernetes.io/part-of: flux 224 - app.kubernetes.io/version: v2.8.3 225 + app.kubernetes.io/version: v2.8.8 226 control-plane: controller 227 name: kustomize-controller 228 namespace: flux-system 229 @@ -3368,7 +3368,7 @@ spec: 230 app.kubernetes.io/component: kustomize-controller 231 app.kubernetes.io/instance: flux-system 232 app.kubernetes.io/part-of: flux 233 - app.kubernetes.io/version: v2.8.3 234 + app.kubernetes.io/version: v2.8.8 235 spec: 236 containers: 237 - args: 238 @@ -3387,7 +3387,7 @@ spec: 239 resourceFieldRef: 240 containerName: manager 241 resource: limits.memory 242 - image: ghcr.io/fluxcd/kustomize-controller:v1.8.2 243 + image: ghcr.io/fluxcd/kustomize-controller:v1.8.5 244 imagePullPolicy: IfNotPresent 245 livenessProbe: 246 httpGet: 247 @@ -3444,7 +3444,7 @@ metadata: 248 app.kubernetes.io/component: helm-controller 249 app.kubernetes.io/instance: flux-system 250 app.kubernetes.io/part-of: flux 251 - app.kubernetes.io/version: v2.8.3 252 + app.kubernetes.io/version: v2.8.8 253 name: helmreleases.helm.toolkit.fluxcd.io 254 spec: 255 group: helm.toolkit.fluxcd.io 256 @@ -4197,8 +4197,11 @@ spec: 257 rollback has been performed. 258 type: boolean 259 force: 260 - description: Force forces resource updates through a replacement 261 - strategy. 262 + description: |- 263 + Force forces resource updates through a replacement strategy 264 + that avoids 3-way merge conflicts on client-side apply. 265 + This field is ignored for server-side apply (which always 266 + forces conflicts with other field managers). 267 type: boolean 268 recreate: 269 description: |- 270 @@ -4402,8 +4405,11 @@ spec: 271 upgrade has been performed. 272 type: boolean 273 force: 274 - description: Force forces resource updates through a replacement 275 - strategy. 276 + description: |- 277 + Force forces resource updates through a replacement strategy 278 + that avoids 3-way merge conflicts on client-side apply. 279 + This field is ignored for server-side apply (which always 280 + forces conflicts with other field managers). 281 type: boolean 282 preserveValues: 283 description: |- 284 @@ -4888,7 +4894,7 @@ metadata: 285 app.kubernetes.io/component: helm-controller 286 app.kubernetes.io/instance: flux-system 287 app.kubernetes.io/part-of: flux 288 - app.kubernetes.io/version: v2.8.3 289 + app.kubernetes.io/version: v2.8.8 290 name: helm-controller 291 namespace: flux-system 292 --- 293 @@ -4899,7 +4905,7 @@ metadata: 294 app.kubernetes.io/component: helm-controller 295 app.kubernetes.io/instance: flux-system 296 app.kubernetes.io/part-of: flux 297 - app.kubernetes.io/version: v2.8.3 298 + app.kubernetes.io/version: v2.8.8 299 control-plane: controller 300 name: helm-controller 301 namespace: flux-system 302 @@ -4918,7 +4924,7 @@ spec: 303 app.kubernetes.io/component: helm-controller 304 app.kubernetes.io/instance: flux-system 305 app.kubernetes.io/part-of: flux 306 - app.kubernetes.io/version: v2.8.3 307 + app.kubernetes.io/version: v2.8.8 308 spec: 309 containers: 310 - args: 311 @@ -4937,7 +4943,7 @@ spec: 312 resourceFieldRef: 313 containerName: manager 314 resource: limits.memory 315 - image: ghcr.io/fluxcd/helm-controller:v1.5.3 316 + image: ghcr.io/fluxcd/helm-controller:v1.5.5 317 imagePullPolicy: IfNotPresent 318 livenessProbe: 319 httpGet: 320 @@ -4994,7 +5000,7 @@ metadata: 321 app.kubernetes.io/component: notification-controller 322 app.kubernetes.io/instance: flux-system 323 app.kubernetes.io/part-of: flux 324 - app.kubernetes.io/version: v2.8.3 325 + app.kubernetes.io/version: v2.8.8 326 name: alerts.notification.toolkit.fluxcd.io 327 spec: 328 group: notification.toolkit.fluxcd.io 329 @@ -5388,7 +5394,7 @@ metadata: 330 app.kubernetes.io/component: notification-controller 331 app.kubernetes.io/instance: flux-system 332 app.kubernetes.io/part-of: flux 333 - app.kubernetes.io/version: v2.8.3 334 + app.kubernetes.io/version: v2.8.8 335 name: providers.notification.toolkit.fluxcd.io 336 spec: 337 group: notification.toolkit.fluxcd.io 338 @@ -5803,7 +5809,7 @@ metadata: 339 app.kubernetes.io/component: notification-controller 340 app.kubernetes.io/instance: flux-system 341 app.kubernetes.io/part-of: flux 342 - app.kubernetes.io/version: v2.8.3 343 + app.kubernetes.io/version: v2.8.8 344 name: receivers.notification.toolkit.fluxcd.io 345 spec: 346 group: notification.toolkit.fluxcd.io 347 @@ -5927,7 +5933,10 @@ spec: 348 secretRef: 349 description: |- 350 SecretRef specifies the Secret containing the token used 351 - to validate the payload authenticity. 352 + to validate the payload authenticity. The Secret must contain a 'token' 353 + key. For GCR receivers, the Secret must also contain an 'email' key 354 + with the IAM service account email configured on the Pub/Sub push 355 + subscription, and an 'audience' key with the expected OIDC token audience. 356 properties: 357 name: 358 description: Name of the referent. 359 @@ -6284,7 +6293,7 @@ metadata: 360 app.kubernetes.io/component: notification-controller 361 app.kubernetes.io/instance: flux-system 362 app.kubernetes.io/part-of: flux 363 - app.kubernetes.io/version: v2.8.3 364 + app.kubernetes.io/version: v2.8.8 365 name: notification-controller 366 namespace: flux-system 367 --- 368 @@ -6295,7 +6304,7 @@ metadata: 369 app.kubernetes.io/component: notification-controller 370 app.kubernetes.io/instance: flux-system 371 app.kubernetes.io/part-of: flux 372 - app.kubernetes.io/version: v2.8.3 373 + app.kubernetes.io/version: v2.8.8 374 control-plane: controller 375 name: notification-controller 376 namespace: flux-system 377 @@ -6316,7 +6325,7 @@ metadata: 378 app.kubernetes.io/component: notification-controller 379 app.kubernetes.io/instance: flux-system 380 app.kubernetes.io/part-of: flux 381 - app.kubernetes.io/version: v2.8.3 382 + app.kubernetes.io/version: v2.8.8 383 control-plane: controller 384 name: webhook-receiver 385 namespace: flux-system 386 @@ -6337,7 +6346,7 @@ metadata: 387 app.kubernetes.io/component: notification-controller 388 app.kubernetes.io/instance: flux-system 389 app.kubernetes.io/part-of: flux 390 - app.kubernetes.io/version: v2.8.3 391 + app.kubernetes.io/version: v2.8.8 392 control-plane: controller 393 name: notification-controller 394 namespace: flux-system 395 @@ -6356,7 +6365,7 @@ spec: 396 app.kubernetes.io/component: notification-controller 397 app.kubernetes.io/instance: flux-system 398 app.kubernetes.io/part-of: flux 399 - app.kubernetes.io/version: v2.8.3 400 + app.kubernetes.io/version: v2.8.8 401 spec: 402 containers: 403 - args: 404 @@ -6374,7 +6383,7 @@ spec: 405 resourceFieldRef: 406 containerName: manager 407 resource: limits.memory 408 - image: ghcr.io/fluxcd/notification-controller:v1.8.2 409 + image: ghcr.io/fluxcd/notification-controller:v1.8.4 410 imagePullPolicy: IfNotPresent 411 livenessProbe: 412 httpGet: 413 @@ -6436,7 +6445,7 @@ metadata: 414 app.kubernetes.io/component: image-reflector-controller 415 app.kubernetes.io/instance: flux-system 416 app.kubernetes.io/part-of: flux 417 - app.kubernetes.io/version: v2.8.3 418 + app.kubernetes.io/version: v2.8.8 419 name: imagepolicies.image.toolkit.fluxcd.io 420 spec: 421 group: image.toolkit.fluxcd.io 422 @@ -7028,7 +7037,7 @@ metadata: 423 app.kubernetes.io/component: image-reflector-controller 424 app.kubernetes.io/instance: flux-system 425 app.kubernetes.io/part-of: flux 426 - app.kubernetes.io/version: v2.8.3 427 + app.kubernetes.io/version: v2.8.8 428 name: imagerepositories.image.toolkit.fluxcd.io 429 spec: 430 group: image.toolkit.fluxcd.io 431 @@ -7638,7 +7647,7 @@ metadata: 432 app.kubernetes.io/component: image-reflector-controller 433 app.kubernetes.io/instance: flux-system 434 app.kubernetes.io/part-of: flux 435 - app.kubernetes.io/version: v2.8.3 436 + app.kubernetes.io/version: v2.8.8 437 name: image-reflector-controller 438 namespace: flux-system 439 --- 440 @@ -7649,7 +7658,7 @@ metadata: 441 app.kubernetes.io/component: image-reflector-controller 442 app.kubernetes.io/instance: flux-system 443 app.kubernetes.io/part-of: flux 444 - app.kubernetes.io/version: v2.8.3 445 + app.kubernetes.io/version: v2.8.8 446 control-plane: controller 447 name: image-reflector-controller 448 namespace: flux-system 449 @@ -7668,7 +7677,7 @@ spec: 450 app.kubernetes.io/component: image-reflector-controller 451 app.kubernetes.io/instance: flux-system 452 app.kubernetes.io/part-of: flux 453 - app.kubernetes.io/version: v2.8.3 454 + app.kubernetes.io/version: v2.8.8 455 spec: 456 containers: 457 - args: 458 @@ -7687,7 +7696,7 @@ spec: 459 resourceFieldRef: 460 containerName: manager 461 resource: limits.memory 462 - image: ghcr.io/fluxcd/image-reflector-controller:v1.1.1 463 + image: ghcr.io/fluxcd/image-reflector-controller:v1.1.2 464 imagePullPolicy: IfNotPresent 465 livenessProbe: 466 httpGet: 467 @@ -7747,7 +7756,7 @@ metadata: 468 app.kubernetes.io/component: image-automation-controller 469 app.kubernetes.io/instance: flux-system 470 app.kubernetes.io/part-of: flux 471 - app.kubernetes.io/version: v2.8.3 472 + app.kubernetes.io/version: v2.8.8 473 name: imageupdateautomations.image.toolkit.fluxcd.io 474 spec: 475 group: image.toolkit.fluxcd.io 476 @@ -8576,7 +8585,7 @@ metadata: 477 app.kubernetes.io/component: image-automation-controller 478 app.kubernetes.io/instance: flux-system 479 app.kubernetes.io/part-of: flux 480 - app.kubernetes.io/version: v2.8.3 481 + app.kubernetes.io/version: v2.8.8 482 name: image-automation-controller 483 namespace: flux-system 484 --- 485 @@ -8587,7 +8596,7 @@ metadata: 486 app.kubernetes.io/component: image-automation-controller 487 app.kubernetes.io/instance: flux-system 488 app.kubernetes.io/part-of: flux 489 - app.kubernetes.io/version: v2.8.3 490 + app.kubernetes.io/version: v2.8.8 491 control-plane: controller 492 name: image-automation-controller 493 namespace: flux-system 494 @@ -8606,7 +8615,7 @@ spec: 495 app.kubernetes.io/component: image-automation-controller 496 app.kubernetes.io/instance: flux-system 497 app.kubernetes.io/part-of: flux 498 - app.kubernetes.io/version: v2.8.3 499 + app.kubernetes.io/version: v2.8.8 500 spec: 501 containers: 502 - args: 503 @@ -8625,7 +8634,7 @@ spec: 504 resourceFieldRef: 505 containerName: manager 506 resource: limits.memory 507 - image: ghcr.io/fluxcd/image-automation-controller:v1.1.1 508 + image: ghcr.io/fluxcd/image-automation-controller:v1.1.4 509 imagePullPolicy: IfNotPresent 510 livenessProbe: 511 httpGet: