chore(deps): update dependency fluxcd/flux2 to v0.35.0

This PR contains the following updates:

Package	Type	Update	Change
fluxcd/flux2		minor	`v0.32.0` -> `v0.35.0`
fluxcd/flux2	Kustomization	minor	`v0.32.0` -> `v0.35.0`

⚠ Dependency Lookup Warnings ⚠

Warnings were logged while processing this repo. Please check the Dependency Dashboard for more information.

Release Notes

fluxcd/flux2

### [`v0.35.0`](https://togithub.com/fluxcd/flux2/releases/tag/v0.35.0) [Compare Source](https://togithub.com/fluxcd/flux2/compare/v0.34.0...v0.35.0) #### Highlights Flux v0.35.0 comes with new features and improvements. Users are encouraged to upgrade for the best experience. ##### Breaking changes Strict validation rules have been put in place for API fields which define a time duration, such as `.spec.interval`. Effectively, this means values without a time unit (e.g. `ms`, `s`, `m`, `h`) will now be rejected by the API server. ##### Features and improvements - Verify OCI artifacts signed by Cosign (including keyless) with [OCIRepository.spec.verify](https://fluxcd.io/docs/components/source/ocirepositories/#verification). - Allow pulling Helm charts dependencies from HTTPS repositories with mixed self-signed TLS and public CAs. - Allow pulling Helm charts from OCI artifacts stored at the root of AWS ECR. - Allow running bootstrap for insecure HTTP Git servers with `flux bootstrap git --allow-insecure-http --token-auth`. - Improve health checking for global objects such as ClusterClass, GatewayClass, StorageClass, etc. - The controllers and the Flux CLI are now built with Go 1.19. For more information on OCI and Cosign support please see the [Flux documentation](https://fluxcd.io/docs/cheatsheets/oci-artifacts/#signing-and-verification). #### Components changelog - source-controller [v0.30.0](https://togithub.com/fluxcd/source-controller/blob/v0.30.0/CHANGELOG.md) - kustomize-controller [v0.29.0](https://togithub.com/fluxcd/kustomize-controller/blob/v0.29.0/CHANGELOG.md) - helm-controller [v0.25.0](https://togithub.com/fluxcd/helm-controller/blob/v0.25.0/CHANGELOG.md) - notification-controller [v0.27.0](https://togithub.com/fluxcd/notification-controller/blob/v0.27.0/CHANGELOG.md) - image-reflector-controller [v0.22.0](https://togithub.com/fluxcd/image-reflector-controller/blob/v0.22.0/CHANGELOG.md) - image-automation-controller [v0.26.0](https://togithub.com/fluxcd/image-automation-controller/blob/v0.26.0/CHANGELOG.md) #### CLI Changelog - PR [#3154](https://togithub.com/fluxcd/flux2/issues/3154) - [@stefanprodan](https://togithub.com/stefanprodan) - \[RFC-0003] Add Cosign keyless specification - PR [#3153](https://togithub.com/fluxcd/flux2/issues/3153) - [@stefanprodan](https://togithub.com/stefanprodan) - Build with Go 1.19 - PR [#3149](https://togithub.com/fluxcd/flux2/issues/3149) - [@fluxcdbot](https://togithub.com/fluxcdbot) - Update toolkit components - PR [#3145](https://togithub.com/fluxcd/flux2/issues/3145) - [@stefanprodan](https://togithub.com/stefanprodan) - Add component label for controllers and their CRDs - PR [#3117](https://togithub.com/fluxcd/flux2/issues/3117) - [@carlosonunez-vmw](https://togithub.com/carlosonunez-vmw) - Maintain original scheme when using --token-auth - PR [#3098](https://togithub.com/fluxcd/flux2/issues/3098) - [@Santosh1176](https://togithub.com/Santosh1176) - \[Grafana] Use `container_memory_working_set_bytes` to report memory consumption ### [`v0.34.0`](https://togithub.com/fluxcd/flux2/releases/tag/v0.34.0) [Compare Source](https://togithub.com/fluxcd/flux2/compare/v0.33.0...v0.34.0) ##### Highlights Flux v0.34.0 comes with new features and improvements. Users are encouraged to upgrade for the best experience. ##### Breaking changes The Flux controller logs have been aligned with the Kubernetes structured logging. For more details on the new logging structure please see: [fluxcd/flux2#3051](https://togithub.com/fluxcd/flux2/issues/3051). ##### Features and improvements - [OCIRepository.spec.insecure](https://fluxcd.io/docs/components/source/ocirepositories/#insecure) Allow pulling artifacts from an in-cluster Docker Registry over plain HTTP. - Allow defining OCI sources for non-TLS container registries with `flux create source oci --insecure`. - Enable contextual login when publishing OCI artifacts from a Cloud VM using `flux push artifact --provider=aws|azure|gcp`. - Prioritise static credentials over OIDC providers when pulling OCI artifacts from container registries on multi-tenant cluster. - Reconcile Kubernetes Class types (ClusterClass, GatewayClass, StorageClass, etc) in a dedicated stage before any other custom resources like Clusters, Gateways, Volumes, etc. - When multiple SOPS providers are available, run the offline decryption methods first to avoid failures due to KMS unavailability. - Add finalizers to the notification API to properly record the reconciliation metrics for deleted resources. - Publish the Flux install manifests as OCI artifacts on GitHub and DockerHub container registries under `fluxcd/flux-manifests`. ##### Components Changelog - source-controller [v0.29.0](https://togithub.com/fluxcd/source-controller/blob/v0.27.0/CHANGELOG.md) - kustomize-controller [v0.28.0](https://togithub.com/fluxcd/kustomize-controller/blob/v0.28.0/CHANGELOG.md) - helm-controller [v0.24.0](https://togithub.com/fluxcd/helm-controller/blob/v0.24.0/CHANGELOG.md) - notification-controller [v0.26.0](https://togithub.com/fluxcd/notification-controller/blob/v0.26.0/CHANGELOG.md) - image-reflector-controller [v0.21.0](https://togithub.com/fluxcd/image-reflector-controller/blob/v0.21.0/CHANGELOG.md) - image-automation-controller [v0.25.0](https://togithub.com/fluxcd/image-automation-controller/blob/v0.25.0/CHANGELOG.md) ##### CLI Changelog - PR [#3097](https://togithub.com/fluxcd/flux2/issues/3097) - [@stefanprodan](https://togithub.com/stefanprodan) - Add `--insecure` flag to `flux create source oci` - PR [#3091](https://togithub.com/fluxcd/flux2/issues/3091) - [@fluxcdbot](https://togithub.com/fluxcdbot) - Update toolkit components - PR [#3088](https://togithub.com/fluxcd/flux2/issues/3088) - [@stefanprodan](https://togithub.com/stefanprodan) - Publish the install manifests to GHCR and DockerHub as OCI artifacts - PR [#3087](https://togithub.com/fluxcd/flux2/issues/3087) - [@somtochiama](https://togithub.com/somtochiama) - Remove finalizers for notification CRs on uninstall - PR [#3085](https://togithub.com/fluxcd/flux2/issues/3085) - [@souleb](https://togithub.com/souleb) - \[bootstrap] Make sure we reconcile with the right reconciliation method - PR [#3082](https://togithub.com/fluxcd/flux2/issues/3082) - [@stefanprodan](https://togithub.com/stefanprodan) - Remove finalizers for OCI repositories on uninstall - PR [#3079](https://togithub.com/fluxcd/flux2/issues/3079) - [@adrien-f](https://togithub.com/adrien-f) - Support autologin when pushing OCI artifacts - PR [#3073](https://togithub.com/fluxcd/flux2/issues/3073) - [@acondrat](https://togithub.com/acondrat) - Filter out non-running pods in Prometheus - PR [#3063](https://togithub.com/fluxcd/flux2/issues/3063) - [@somtochiama](https://togithub.com/somtochiama) - Update `flux logs` to accomodate the new format - PR [#3053](https://togithub.com/fluxcd/flux2/issues/3053) - [@dholbach](https://togithub.com/dholbach) - Revert "Fix broken "edit this page" links in Flux CLI section" - PR [#3052](https://togithub.com/fluxcd/flux2/issues/3052) - [@dholbach](https://togithub.com/dholbach) - update to new doc links structure - PR [#3050](https://togithub.com/fluxcd/flux2/issues/3050) - [@stefanprodan](https://togithub.com/stefanprodan) - Status update for RFC-0002 and RFC-0003 ### [`v0.33.0`](https://togithub.com/fluxcd/flux2/releases/tag/v0.33.0) [Compare Source](https://togithub.com/fluxcd/flux2/compare/v0.32.0...v0.33.0) ##### Highlights Flux v0.33.0 comes with new features and improvements. Users are encouraged to upgrade for the best experience. ##### Features and improvements - [HelmRepository.spec.provider](https://fluxcd.io/docs/components/source/helmrepositories/#provider) Enable contextual login to container registries when pulling Helm charts from Amazon Elastic Container Registry, Azure Container Registry and Google Artifact Registry. - [OCIRepository.spec.layerSelector](https://fluxcd.io/docs/components/source/ocirepositories/#layer-selector) Select which layer contains the Kubernetes configs by specifying a matching OCI media type. - [Bucket.spec.secretRef](https://fluxcd.io/docs/components/source/buckets/#azure-blob-sas-token-example) Authenticate to Azure Blob storage using SAS tokens. - Allow filtering OCI artifacts by semver and regex when listing artifact with `flux list artifacts`. - Allow excluding local files and directories when building and publishing artifacts with `flux push artifact`. - Mitigate denial-of-service on multi-tenant clusters by automatically recovering from panics encountered during reconciliation. - Update controllers to Kubernetes v1.25.0, Kustomize v4.5.7 and Helm v3.9.4. ##### New documentation - [Secrets Management](https://fluxcd.io/docs/security/secrets-management/) - [Contextual Authorization](https://fluxcd.io/docs/security/contextual-authorization/) ##### Components changelog - source-controller [v0.27.0](https://togithub.com/fluxcd/source-controller/blob/v0.27.0/CHANGELOG.md) [v0.28.0](https://togithub.com/fluxcd/source-controller/blob/v0.28.0/CHANGELOG.md) - kustomize-controller [v0.27.1](https://togithub.com/fluxcd/kustomize-controller/blob/v0.27.1/CHANGELOG.md) - helm-controller [v0.23.1](https://togithub.com/fluxcd/helm-controller/blob/v0.23.1/CHANGELOG.md) - notification-controller [v0.25.2](https://togithub.com/fluxcd/notification-controller/blob/v0.25.2/CHANGELOG.md) - image-reflector-controller [v0.20.1](https://togithub.com/fluxcd/image-reflector-controller/blob/v0.20.1/CHANGELOG.md) - image-automation-controller [v0.24.2](https://togithub.com/fluxcd/image-automation-controller/blob/v0.24.2/CHANGELOG.md) ##### CLI Changelog - PR [#3049](https://togithub.com/fluxcd/flux2/issues/3049) - [@stefanprodan](https://togithub.com/stefanprodan) - Update Kubernetes dependencies to v1.25.0 - PR [#3034](https://togithub.com/fluxcd/flux2/issues/3034) - [@snebel29](https://togithub.com/snebel29) - Fix broken "edit this page" links in Flux CLI section - PR [#3028](https://togithub.com/fluxcd/flux2/issues/3028) - [@snebel29](https://togithub.com/snebel29) - Update tests/azure github.com/hashicorp/terraform-exec to v0.16.1 - PR [#3025](https://togithub.com/fluxcd/flux2/issues/3025) - [@stefanprodan](https://togithub.com/stefanprodan) - \[RFC-0002] Add auth specification for Helm OCI - PR [#3024](https://togithub.com/fluxcd/flux2/issues/3024) - [@stefanprodan](https://togithub.com/stefanprodan) - Add version validation to install commands - PR [#3019](https://togithub.com/fluxcd/flux2/issues/3019) - [@somtochiama](https://togithub.com/somtochiama) - Improve error message in get cmd - PR [#3014](https://togithub.com/fluxcd/flux2/issues/3014) - [@stefanprodan](https://togithub.com/stefanprodan) - \[RFC-0003] Select layer by OCI media type - PR [#2999](https://togithub.com/fluxcd/flux2/issues/2999) - [@fluxcdbot](https://togithub.com/fluxcdbot) - Update toolkit components - PR [#2998](https://togithub.com/fluxcd/flux2/issues/2998) - [@somtochiama](https://togithub.com/somtochiama) - Add `--filter-semver` and `--filter-regex` flags to `list artifacts` - PR [#2997](https://togithub.com/fluxcd/flux2/issues/2997) - [@stefanprodan](https://togithub.com/stefanprodan) - Use ghcr.io in the static manifests - PR [#2996](https://togithub.com/fluxcd/flux2/issues/2996) - [@stefanprodan](https://togithub.com/stefanprodan) - Update dependencies - PR [#2995](https://togithub.com/fluxcd/flux2/issues/2995) - [@stefanprodan](https://togithub.com/stefanprodan) - Add `--ignore-paths` arg to `flux build|push artifact` - PR [#2979](https://togithub.com/fluxcd/flux2/issues/2979) - [@stefanprodan](https://togithub.com/stefanprodan) - Status update for RFC-0002 and RFC-0003

Configuration

📅 Schedule: Branch creation - "on sunday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

[ ] If you want to rebase/retry this PR, click this checkbox.

This PR has been generated by Mend Renovate. View repository job log here.

Descriptor	Linter	Files	Errors	Elapsed time
✅ COPYPASTE	jscpd	yes	no	0.96s
✅ KUBERNETES	kubeval	2	0	0.54s
✅ REPOSITORY	git_diff	yes	no	0.01s
✅ REPOSITORY	secretlint	yes	no	0.97s
✅ YAML	prettier	2	0	0.45s
✅ YAML	yamllint	2	0	0.11s

simplerick0 / com.ackhax.cluster