394 Commits

Author SHA1 Message Date
Stavros Kois
53ca726d21 chore(docs,tests): remove references to fixedMiddlewares and allowCors(middlewares) 2025-02-02 10:51:07 +02:00
TrueCharts Bot
76f9e390a4 chore(flux): update image traefik 30.4.2 → 30.4.3 (clustertool) (#31511)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [traefik](https://truecharts.org/charts/premium/traefik)
([source](https://redirect.github.com/traefik/traefik)) | patch |
`30.4.2` -> `30.4.3` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44Ni4xIiwidXBkYXRlZEluVmVyIjoiMzkuODYuMSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL3BhdGNoIl19-->
2025-02-02 02:41:28 +01:00
TrueCharts Bot
28a370c494 chore(flux): update image blocky 16.13.2 → 16.13.3 (clustertool) (#31510)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [blocky](https://truecharts.org/charts/premium/blocky)
([source](https://0xerr0r.github.io/blocky/)) | patch | `16.13.2` ->
`16.13.3` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44Ni4xIiwidXBkYXRlZEluVmVyIjoiMzkuODYuMSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL3BhdGNoIl19-->
2025-02-02 02:40:29 +01:00
TrueCharts-Bot
a01d128260 Commit daily changes
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2025-02-02 00:13:02 +00:00
TrueCharts Bot
e88a527b1e fix(deps): update module github.com/budimanjojo/talhelper/v3 v3.0.16 → v3.0.17 (clustertool) (#31481)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[github.com/budimanjojo/talhelper/v3](https://redirect.github.com/budimanjojo/talhelper)
| require | patch | `v3.0.16` -> `v3.0.17` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>budimanjojo/talhelper
(github.com/budimanjojo/talhelper/v3)</summary>

###
[`v3.0.17`](https://redirect.github.com/budimanjojo/talhelper/releases/tag/v3.0.17)

[Compare
Source](https://redirect.github.com/budimanjojo/talhelper/compare/v3.0.16...v3.0.17)

#### Changelog

-
[`eac464e`](eac464ee23)
chore(container): update ghcr.io/getsops/sops docker tag to v3.9.4
-
[`ad39890`](ad39890375)
chore(container): update ghcr.io/siderolabs/talosctl docker tag to
v1.9.3
-
[`f643420`](f643420744)
chore(container): update goreleaser/goreleaser docker tag to v2.6.0
-
[`ec24571`](ec24571283)
chore(container): update goreleaser/goreleaser docker tag to v2.6.1
-
[`f5978dd`](f5978dd44d)
chore(deps): update dependency siderolabs/talos to v1.9.3
-
[`7b4449e`](7b4449e198)
chore(github-action): update actions/setup-go action to v5.3.0
-
[`c9e90ec`](c9e90ec8af)
chore(github-action): update renovatebot/github-action action to
v41.0.10
-
[`0b04684`](0b04684857)
chore(github-action): update renovatebot/github-action action to
v41.0.11
-
[`5c191c8`](5c191c83c9)
chore(schema): update talos-extensions.yaml JSON schema
-
[`0814ce7`](0814ce7211)
chore(schema): update talos-extensions.yaml JSON schema
-
[`ff858c9`](ff858c9ad9)
chore(schema): update talos-extensions.yaml JSON schema
([#&#8203;817](https://redirect.github.com/budimanjojo/talhelper/issues/817))
-
[`0ae3a64`](0ae3a6477c)
feat: update Scoop for talhelper version v3.0.16
-
[`af0a1c1`](af0a1c1ca7)
feat: update flake
([#&#8203;811](https://redirect.github.com/budimanjojo/talhelper/issues/811))
-
[`af143bd`](af143bde7a)
fix(deps): update module github.com/budimanjojo/talhelper/v3 to v3.0.16
-
[`59f4a4d`](59f4a4defb)
fix(deps): update module github.com/evanphx/json-patch to
v5.9.11+incompatible
-
[`3691ca2`](3691ca21a5)
fix(deps): update module github.com/getsops/sops/v3 to v3.9.4
-
[`bc3c50b`](bc3c50b787)
fix(deps): update module github.com/siderolabs/image-factory to v0.6.6
-
[`1086bb4`](1086bb452b)
fix(deps): update module github.com/siderolabs/talos/pkg/machinery to
v1.10.0-alpha.1

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44Ni4xIiwidXBkYXRlZEluVmVyIjoiMzkuODYuMSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL3BhdGNoIl19-->
2025-02-01 12:19:10 +01:00
TrueCharts Bot
1a37390139 chore(flux): update image prometheus-operator 10.2.0 → 10.2.1 (clustertool) (#31475) 2025-02-01 12:19:02 +01:00
TrueCharts Bot
b2b7f4d87d fix(deps): update module github.com/siderolabs/talos/pkg/machinery v1.10.0-alpha.0.0.20241227120520-01bf8449b917 → v1.10.0-alpha.1 (clustertool) (#31449) 2025-02-01 03:30:39 +01:00
TrueCharts Bot
3b5ed5f84b chore(flux): update image prometheus-operator 10.1.4 → 10.2.0 (clustertool) (#31451)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[prometheus-operator](https://truecharts.org/charts/system/prometheus-operator)
([source](https://redirect.github.com/prometheus-operator)) | minor |
`10.1.4` -> `10.2.0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44Ni4xIiwidXBkYXRlZEluVmVyIjoiMzkuODYuMSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL21pbm9yIl19-->
2025-02-01 03:30:35 +01:00
TrueCharts Bot
6a5aff3366 chore(flux): update image snapshot-controller 3.7.1 → 3.7.2 (clustertool) (#31434)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[snapshot-controller](https://truecharts.org/charts/system/snapshot-controller)
([source](https://redirect.github.com/kubernetes-csi/external-snapshotter))
| patch | `3.7.1` -> `3.7.2` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44Ni4xIiwidXBkYXRlZEluVmVyIjoiMzkuODYuMSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL3BhdGNoIl19-->
2025-02-01 03:25:33 +01:00
Kjeld Schouten
567064dafa fix(clustertool): fix clustertool dependency references 2025-01-30 11:54:03 +01:00
Kjeld Schouten
be53f96af9 fix some clustertool dependency issues 2025-01-30 11:31:47 +01:00
TrueCharts Bot
9e96576d01 chore(flux): update helm release openebs 4.1.2 → 4.1.3 (clustertool) (#31366) 2025-01-29 15:50:28 +01:00
TrueCharts Bot
8dda6925a7 chore(flux): update image prometheus-operator 10.1.3 → 10.1.4 (clustertool) (#31368) 2025-01-29 15:50:13 +01:00
TrueCharts Bot
fd981e9e80 chore(deps): update ghcr.io/siderolabs/installer docker tag to v1.9.3 (clustertool) (#31342)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[ghcr.io/siderolabs/installer](https://redirect.github.com/siderolabs/talos)
| patch | `v1.9.2` -> `v1.9.3` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>siderolabs/talos (ghcr.io/siderolabs/installer)</summary>

###
[`v1.9.3`](https://redirect.github.com/siderolabs/talos/releases/tag/v1.9.3)

[Compare
Source](https://redirect.github.com/siderolabs/talos/compare/v1.9.2...v1.9.3)

##### [Talos
1.9.3](https://redirect.github.com/siderolabs/talos/releases/tag/v1.9.3)
(2025-01-28)

Welcome to the v1.9.3 release of Talos!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.

##### Component Updates

-   Linux: 6.12.11
-   Kubernetes: 1.23.1
-   etcd: 3.5.18

Talos is built with Go 1.23.5.

##### Contributors

-   Andrey Smirnov
-   Dmitriy Matrenichev
-   Noel Georgi

##### Changes

<details><summary>12 commits</summary>
<p>

-
[@&#8203;`d40df43`](https://redirect.github.com/siderolabs/talos/commit/d40df438a)
release(v1.9.3): prepare release
-
[@&#8203;`41dd593`](https://redirect.github.com/siderolabs/talos/commit/41dd59300)
test: bump timeout on rotate CA test
-
[@&#8203;`1abeaa3`](https://redirect.github.com/siderolabs/talos/commit/1abeaa33a)
feat: update Linux to 6.2.11
-
[@&#8203;`2894507`](https://redirect.github.com/siderolabs/talos/commit/2894507f5)
feat: update etcd to 3.5.18
-
[@&#8203;`e3bd08b`](https://redirect.github.com/siderolabs/talos/commit/e3bd08b0a)
fix: bring back disk UUID
-
[@&#8203;`8fadd04`](https://redirect.github.com/siderolabs/talos/commit/8fadd042d)
fix: disks with 4k sector size and systemd-boot
-
[@&#8203;`b854ea9`](https://redirect.github.com/siderolabs/talos/commit/b854ea97f)
fix: abort node watch on hostname change
-
[@&#8203;`5c7b3ec`](https://redirect.github.com/siderolabs/talos/commit/5c7b3ec80)
chore: update Go to 1.23.5
-
[@&#8203;`f72a155`](https://redirect.github.com/siderolabs/talos/commit/f72a155c8)
fix: ignore forbidden error when waiting for pod eviction
-
[@&#8203;`9587d86`](https://redirect.github.com/siderolabs/talos/commit/9587d86e0)
chore: clear cache after updating upstreams
-
[@&#8203;`885cb4c`](https://redirect.github.com/siderolabs/talos/commit/885cb4cb0)
fix: make etc binds read-only
-
[@&#8203;`508cc7b`](https://redirect.github.com/siderolabs/talos/commit/508cc7bd0)
feat: update Kubernetes to 1.32.1

</p>
</details>

##### Changes from siderolabs/pkgs
<details><summary>4 commits</summary>
<p>

-
[siderolabs/pkgs@`2250843`](https://redirect.github.com/siderolabs/pkgs/commit/2250843)
feat: update Linux to 6.12.11
-
[siderolabs/pkgs@`0f48ede`](https://redirect.github.com/siderolabs/pkgs/commit/0f48ede)
feat: bump NVIDIA driver versions
-
[siderolabs/pkgs@`164563f`](https://redirect.github.com/siderolabs/pkgs/commit/164563f)
feat: update Linux to 6.2.10
-
[siderolabs/pkgs@`17c292f`](https://redirect.github.com/siderolabs/pkgs/commit/17c292f)
feat: update Go to 1.23.5

</p>
</details>

##### Changes from siderolabs/tools
<details><summary>1 commit</summary>
<p>

-
[siderolabs/tools@`bf2085e`](https://redirect.github.com/siderolabs/tools/commit/bf2085e)
feat: update Go to 1.23.5

</p>
</details>

##### Dependency Changes

-   **github.com/containerd/containerd/v2**        v2.0.1 -> v2.0.2
- **github.com/containerd/platforms** v1.0.0-rc.0 -> v1.0.0-rc.1
-   **github.com/opencontainers/runc**             v1.2.3 -> v1.2.4
-   **github.com/siderolabs/go-blockdevice/v2**    v2.0.11 -> v2.0.13
- **github.com/siderolabs/pkgs** v1.9.0-21-gc1f06e5 ->
v1.9.0-25-g2250843
-   **github.com/siderolabs/talos/pkg/machinery**  v1.9.2 -> v1.9.3
- **github.com/siderolabs/tools** v1.9.0-1-geaad82f -> v1.9.0-2-gbf2085e
-   **go.etcd.io/etcd/api/v3**                     v3.5.17 -> v3.5.18
-   **go.etcd.io/etcd/client/pkg/v3**              v3.5.17 -> v3.5.18
-   **go.etcd.io/etcd/client/v3**                  v3.5.17 -> v3.5.18
-   **go.etcd.io/etcd/etcdutl/v3**                 v3.5.17 -> v3.5.18
-   **golang.org/x/net**                           v0.32.0 -> v0.34.0
-   **golang.org/x/sys**                           v0.28.0 -> v0.29.0
-   **golang.org/x/term**                          v0.27.0 -> v0.28.0
-   **k8s.io/api**                                 v0.32.0 -> v0.32.1
-   **k8s.io/apiserver**                           v0.32.0 -> v0.32.1
-   **k8s.io/client-go**                           v0.32.0 -> v0.32.1
-   **k8s.io/component-base**                      v0.32.0 -> v0.32.1
-   **k8s.io/kube-scheduler**                      v0.32.0 -> v0.32.1
-   **k8s.io/kubectl**                             v0.32.0 -> v0.32.1
-   **k8s.io/kubelet**                             v0.32.0 -> v0.32.1
-   **k8s.io/pod-security-admission**              v0.32.0 -> v0.32.1

Previous release can be found at
[v1.9.2](https://redirect.github.com/siderolabs/talos/releases/tag/v1.9.2)

##### Images

    ghcr.io/siderolabs/flannel:v0.26.1
    registry.k8s.io/coredns/coredns:v1.12.0
    gcr.io/etcd-development/etcd:v3.5.18
    registry.k8s.io/kube-apiserver:v1.32.1
    registry.k8s.io/kube-controller-manager:v1.32.1
    registry.k8s.io/kube-scheduler:v1.32.1
    registry.k8s.io/kube-proxy:v1.32.1
    ghcr.io/siderolabs/kubelet:v1.32.1
    ghcr.io/siderolabs/installer:v1.9.3
    registry.k8s.io/pause:3.10

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44Ni4xIiwidXBkYXRlZEluVmVyIjoiMzkuODYuMSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJyZW5vdmF0ZS9jb250YWluZXIiLCJzeXN0ZW0tdXBncmFkZSIsInR5cGUvcGF0Y2giXX0=-->
2025-01-29 15:10:22 +01:00
TrueCharts Bot
516fa1695b chore(flux): update image traefik 30.4.1 → 30.4.2 (clustertool) (#31346) 2025-01-29 02:55:06 +01:00
TrueCharts Bot
c37cc7c37c chore(flux): update image kubernetes-dashboard 1.13.1 → 1.13.2 (clustertool) (#31345) 2025-01-29 02:55:02 +01:00
TrueCharts Bot
8d29cfe322 chore(flux): update image blocky 16.13.1 → 16.13.2 (clustertool) (#31343) 2025-01-29 02:54:51 +01:00
TrueCharts Bot
8833c65f10 chore(flux): update image volsync 2.8.0 → 2.8.1 (clustertool) (#31308)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [volsync](https://truecharts.org/charts/system/volsync)
([source](https://redirect.github.com/backube/helm-charts)) | patch |
`2.8.0` -> `2.8.1` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44Ni4xIiwidXBkYXRlZEluVmVyIjoiMzkuODYuMSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL3BhdGNoIl19-->
2025-01-28 02:49:10 +01:00
TrueCharts Bot
658c7451a1 chore(flux): update image traefik-crds 3.5.0 → 3.5.1 (clustertool) (#31306)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [traefik-crds](https://truecharts.org/charts/system/traefik-crds)
([source](https://redirect.github.com/traefik/traefik)) | patch |
`3.5.0` -> `3.5.1` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44Ni4xIiwidXBkYXRlZEluVmVyIjoiMzkuODYuMSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL3BhdGNoIl19-->
2025-01-28 01:48:45 +00:00
TrueCharts Bot
8401e59886 chore(flux): update image spegel 3.1.0 → 3.1.1 (clustertool) (#31305)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [spegel](https://truecharts.org/charts/system/spegel)
([source](https://ghcr.io/spegel-org/spegel)) | patch | `3.1.0` ->
`3.1.1` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44Ni4xIiwidXBkYXRlZEluVmVyIjoiMzkuODYuMSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL3BhdGNoIl19-->
2025-01-28 02:48:41 +01:00
TrueCharts Bot
023921aefd chore(flux): update image kubernetes-reflector 6.5.0 → 6.5.1 (clustertool) (#31300) 2025-01-28 02:48:06 +01:00
TrueCharts Bot
6b43197241 chore(flux): update image snapshot-controller 3.7.0 → 3.7.1 (clustertool) (#31304) 2025-01-28 02:48:03 +01:00
TrueCharts Bot
c45546dbda chore(flux): update image metallb-config 8.5.0 → 8.5.1 (clustertool) (#31301) 2025-01-28 02:47:55 +01:00
TrueCharts Bot
44fa11ec9a chore(flux): update image prometheus-operator 10.1.2 → 10.1.3 (clustertool) (#31303) 2025-01-28 02:47:39 +01:00
TrueCharts Bot
728f1eafee chore(flux): update image kubernetes-dashboard 1.13.0 → 1.13.1 (clustertool) (#31299) 2025-01-28 02:47:10 +01:00
TrueCharts Bot
112a3378ce chore(flux): update image kubelet-csr-approver 1.4.0 → 1.4.1 (clustertool) (#31298) 2025-01-28 02:47:02 +01:00
TrueCharts Bot
59622377be chore(flux): update image clusterissuer 9.5.0 → 9.5.1 (clustertool) (#31296) 2025-01-28 02:46:19 +01:00
TrueCharts Bot
6d22a37cac chore(flux): update image blocky 16.13.0 → 16.13.1 (clustertool) (#31294) 2025-01-28 02:45:59 +01:00
TrueCharts Bot
8802a0b029 chore(flux): update image cert-manager 6.5.1 → 6.5.2 (clustertool) (#31295) 2025-01-28 02:45:49 +01:00
TrueCharts Bot
22530e32d3 chore(flux): update image prometheus-operator 9.4.0 → 10.1.2 (clustertool) (#31260)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[prometheus-operator](https://truecharts.org/charts/system/prometheus-operator)
([source](https://redirect.github.com/prometheus-operator)) | major |
`9.4.0` -> `10.1.2` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44Ni4xIiwidXBkYXRlZEluVmVyIjoiMzkuODYuMSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL21ham9yIl19-->
2025-01-27 11:35:22 +01:00
TrueCharts Bot
6459b5d8a0 chore(flux): update image spegel 2.2.2 → 3.1.0 (clustertool) (#31261)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [spegel](https://truecharts.org/charts/system/spegel)
([source](https://ghcr.io/spegel-org/spegel)) | major | `2.2.2` ->
`3.1.0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44Ni4xIiwidXBkYXRlZEluVmVyIjoiMzkuODYuMSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL21ham9yIl19-->
2025-01-27 11:06:44 +01:00
TrueCharts Bot
c5cabbfa36 chore(flux): update image blocky 16.12.0 → 16.13.0 (clustertool) (#31250)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [blocky](https://truecharts.org/charts/premium/blocky)
([source](https://0xerr0r.github.io/blocky/)) | minor | `16.12.0` ->
`16.13.0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44Ni4xIiwidXBkYXRlZEluVmVyIjoiMzkuODYuMSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL21pbm9yIl19-->
2025-01-27 03:03:54 +01:00
TrueCharts Bot
955bd964c2 chore(flux): update image metallb-config 8.4.1 → 8.5.0 (clustertool) (#31203) 2025-01-26 03:08:14 +01:00
TrueCharts Bot
093aa18446 chore(flux): update image volsync 2.7.0 → 2.8.0 (clustertool) (#31209) 2025-01-26 03:08:12 +01:00
TrueCharts Bot
b0eb46c429 chore(flux): update image snapshot-controller 3.6.0 → 3.7.0 (clustertool) (#31205) 2025-01-26 03:08:05 +01:00
TrueCharts Bot
d79b6d3c65 chore(flux): update image traefik-crds 3.4.0 → 3.5.0 (clustertool) (#31207) 2025-01-26 03:08:00 +01:00
TrueCharts Bot
3c4d944e13 chore(flux): update image traefik 30.3.2 → 30.4.1 (clustertool) (#31206) 2025-01-26 03:07:47 +01:00
TrueCharts Bot
c751abcd70 chore(flux): update image kubernetes-reflector 6.4.0 → 6.5.0 (clustertool) (#31202) 2025-01-26 03:07:35 +01:00
TrueCharts Bot
3b3ffd7ce4 chore(flux): update image kubelet-csr-approver 1.3.2 → 1.4.0 (clustertool) (#31200) 2025-01-26 03:07:32 +01:00
TrueCharts Bot
d5ceb5632c chore(flux): update image kubernetes-dashboard 1.12.1 → 1.13.0 (clustertool) (#31201) 2025-01-26 03:07:28 +01:00
TrueCharts Bot
442baf8839 chore(flux): update image blocky 16.11.0 → 16.12.0 (clustertool) (#31196) 2025-01-26 03:07:17 +01:00
TrueCharts Bot
f14b4056a1 chore(flux): update image cert-manager 6.4.2 → 6.5.1 (clustertool) (#31197) 2025-01-26 03:07:10 +01:00
TrueCharts Bot
a47b25ef3b chore(flux): update image clusterissuer 9.4.1 → 9.5.0 (clustertool) (#31198)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [clusterissuer](https://truecharts.org/charts/premium/clusterissuer)
([source](https://cert-manager.io/)) | minor | `9.4.1` -> `9.5.0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44Ni4xIiwidXBkYXRlZEluVmVyIjoiMzkuODYuMSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL21pbm9yIl19-->
2025-01-26 03:07:07 +01:00
TrueCharts Bot
1c8ffdc793 fix(deps): update module github.com/getsops/sops/v3 v3.9.3 → v3.9.4 (clustertool) (#31194)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [github.com/getsops/sops/v3](https://redirect.github.com/getsops/sops)
| replace | patch | `v3.9.3` -> `v3.9.4` |
| [github.com/getsops/sops/v3](https://redirect.github.com/getsops/sops)
| require | patch | `v3.9.3` -> `v3.9.4` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>getsops/sops (github.com/getsops/sops/v3)</summary>

###
[`v3.9.4`](https://redirect.github.com/getsops/sops/releases/tag/v3.9.4)

[Compare
Source](https://redirect.github.com/getsops/sops/compare/v3.9.3...v3.9.4)

##### Installation

To install `sops`, download one of the pre-built binaries provided for
your platform from the artifacts attached to this release.

For instance, if you are using Linux on an AMD64 architecture:

```shell

##### Download the binary
curl -LO https://github.com/getsops/sops/releases/download/v3.9.4/sops-v3.9.4.linux.amd64

##### Move the binary in to your PATH
mv sops-v3.9.4.linux.amd64 /usr/local/bin/sops

##### Make the binary executable
chmod +x /usr/local/bin/sops
```

##### Verify checksums file signature

The checksums file provided within the artifacts attached to this
release is signed using
[Cosign](https://docs.sigstore.dev/cosign/overview/) with GitHub OIDC.
To validate the signature of this file, run the following commands:

```shell

##### Download the checksums file, certificate and signature
curl -LO https://github.com/getsops/sops/releases/download/v3.9.4/sops-v3.9.4.checksums.txt
curl -LO https://github.com/getsops/sops/releases/download/v3.9.4/sops-v3.9.4.checksums.pem
curl -LO https://github.com/getsops/sops/releases/download/v3.9.4/sops-v3.9.4.checksums.sig

##### Verify the checksums file
cosign verify-blob sops-v3.9.4.checksums.txt \
  --certificate sops-v3.9.4.checksums.pem \
  --signature sops-v3.9.4.checksums.sig \
  --certificate-identity-regexp=https://github.com/getsops \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com
```

##### Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the
checksums file after having validated its signature:

```shell

##### Verify the binary using the checksums file
sha256sum -c sops-v3.9.4.checksums.txt --ignore-missing
```

##### Verify artifact provenance

The [SLSA provenance](https://slsa.dev/provenance/v0.2) of the binaries,
packages, and SBOMs can be found within the artifacts associated with
this release. It is presented through an [in-toto](https://in-toto.io/)
link metadata file named `sops-v3.9.4.intoto.jsonl`. To verify the
provenance of an artifact, you can utilize the
[`slsa-verifier`](https://redirect.github.com/slsa-framework/slsa-verifier#artifacts)
tool:

```shell

##### Download the metadata file
curl -LO  https://github.com/getsops/sops/releases/download/v3.9.4/sops-v3.9.4.intoto.jsonl

##### Verify the provenance of the artifact
slsa-verifier verify-artifact <artifact> \
  --provenance-path sops-v3.9.4.intoto.jsonl \
  --source-uri github.com/getsops/sops \
  --source-tag v3.9.4
```

##### Container Images

The `sops` binaries are also available as container images, based on
Debian (slim) and Alpine Linux. The Debian-based container images
include any dependencies which may be required to make use of certain
key services, such as GnuPG, AWS KMS, Azure Key Vault, and Google Cloud
KMS. The Alpine-based container images are smaller in size, but do not
include these dependencies.

These container images are available for the following architectures:
`linux/amd64` and `linux/arm64`.

##### GitHub Container Registry

-   `ghcr.io/getsops/sops:v3.9.4`
-   `ghcr.io/getsops/sops:v3.9.4-alpine`

##### Quay.io

-   `quay.io/getsops/sops:v3.9.4`
-   `quay.io/getsops/sops:v3.9.4-alpine`

##### Verify container image signature

The container images are signed using
[Cosign](https://docs.sigstore.dev/cosign/overview/) with GitHub OIDC.
To validate the signature of an image, run the following command:

```shell
cosign verify ghcr.io/getsops/sops:v3.9.4 \
  --certificate-identity-regexp=https://github.com/getsops \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com \
  -o text
```

##### Verify container image provenance

The container images include [SLSA
provenance](https://slsa.dev/provenance/v0.2) attestations. For more
information around the verification of this, please refer to the
[`slsa-verifier`
documentation](https://redirect.github.com/slsa-framework/slsa-verifier#containers).

##### Software Bill of Materials

The Software Bill of Materials (SBOM) for each binary is accessible
within the artifacts enclosed with this release. It is presented as an
[SPDX](https://spdx.dev/) JSON file, formatted as
`<binary>.spdx.sbom.json`.

##### What's Changed

- build(deps): Bump the go group with 5 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/getsops/sops/pull/1727](https://redirect.github.com/getsops/sops/pull/1727)
- build(deps): Bump tempfile from 3.14.0 to 3.15.0 in /functional-tests
in the rust group by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/getsops/sops/pull/1728](https://redirect.github.com/getsops/sops/pull/1728)
- build(deps): Bump the go group with 16 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/getsops/sops/pull/1732](https://redirect.github.com/getsops/sops/pull/1732)
- build(deps): Bump the ci group with 3 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/getsops/sops/pull/1730](https://redirect.github.com/getsops/sops/pull/1730)
- build(deps): Bump serde_json from 1.0.134 to 1.0.135 in
/functional-tests in the rust group by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/getsops/sops/pull/1731](https://redirect.github.com/getsops/sops/pull/1731)
- build(deps): Bump the go group with 12 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/getsops/sops/pull/1734](https://redirect.github.com/getsops/sops/pull/1734)
- build(deps): Bump serde_json from 1.0.135 to 1.0.137 in
/functional-tests in the rust group by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/getsops/sops/pull/1735](https://redirect.github.com/getsops/sops/pull/1735)
- Fix ToString for AWS KMS to include role, context, and profile by
[@&#8203;felixfontein](https://redirect.github.com/felixfontein) in
[https://github.com/getsops/sops/pull/1733](https://redirect.github.com/getsops/sops/pull/1733)
- build(deps): Bump the ci group with 3 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/getsops/sops/pull/1738](https://redirect.github.com/getsops/sops/pull/1738)
- build(deps): Bump the go group with 6 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/getsops/sops/pull/1739](https://redirect.github.com/getsops/sops/pull/1739)
- Release 3.9.4 by
[@&#8203;felixfontein](https://redirect.github.com/felixfontein) in
[https://github.com/getsops/sops/pull/1740](https://redirect.github.com/getsops/sops/pull/1740)

**Full Changelog**:
https://github.com/getsops/sops/compare/v3.9.3...v3.9.4

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44Ni4xIiwidXBkYXRlZEluVmVyIjoiMzkuODYuMSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL3BhdGNoIl19-->
2025-01-26 03:06:50 +01:00
TrueCharts Bot
4cd744dd52 chore(flux): update image cert-manager 6.4.1 → 6.4.2 (clustertool) (#31165) 2025-01-25 11:25:21 +01:00
TrueCharts Bot
30d7091d6c fix(deps): update module sigs.k8s.io/controller-runtime v0.19.5 → v0.20.1 (clustertool) (#31123)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[sigs.k8s.io/controller-runtime](https://redirect.github.com/kubernetes-sigs/controller-runtime)
| require | minor | `v0.19.5` -> `v0.20.1` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>kubernetes-sigs/controller-runtime
(sigs.k8s.io/controller-runtime)</summary>

###
[`v0.20.1`](https://redirect.github.com/kubernetes-sigs/controller-runtime/releases/tag/v0.20.1)

[Compare
Source](https://redirect.github.com/kubernetes-sigs/controller-runtime/compare/v0.20.0...v0.20.1)

#### What's Changed

- 🐛 Check to see if custom source implements fmt.Stringer when logging
by
[@&#8203;k8s-infra-cherrypick-robot](https://redirect.github.com/k8s-infra-cherrypick-robot)
in
[https://github.com/kubernetes-sigs/controller-runtime/pull/3077](https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3077)
- 🐛 cache: clone maps to prevent data race when concurrently creating
caches using the same options by
[@&#8203;k8s-infra-cherrypick-robot](https://redirect.github.com/k8s-infra-cherrypick-robot)
in
[https://github.com/kubernetes-sigs/controller-runtime/pull/3079](https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3079)
- 🐛 support WaitForSync in custom TypedSyncingSource by
[@&#8203;k8s-infra-cherrypick-robot](https://redirect.github.com/k8s-infra-cherrypick-robot)
in
[https://github.com/kubernetes-sigs/controller-runtime/pull/3086](https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3086)
- 🌱 Add debug logging for the state of the priority queue by
[@&#8203;k8s-infra-cherrypick-robot](https://redirect.github.com/k8s-infra-cherrypick-robot)
in
[https://github.com/kubernetes-sigs/controller-runtime/pull/3088](https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3088)
- 🐛 Priorityqueue: Yet another queue_depth metric fix by
[@&#8203;k8s-infra-cherrypick-robot](https://redirect.github.com/k8s-infra-cherrypick-robot)
in
[https://github.com/kubernetes-sigs/controller-runtime/pull/3089](https://redirect.github.com/kubernetes-sigs/controller-runtime/pull/3089)

**Full Changelog**:
https://github.com/kubernetes-sigs/controller-runtime/compare/v0.20.0...v0.20.1

###
[`v0.20.0`](https://redirect.github.com/kubernetes-sigs/controller-runtime/releases/tag/v0.20.0)

[Compare
Source](https://redirect.github.com/kubernetes-sigs/controller-runtime/compare/v0.19.5...v0.20.0)

#### Highlights

- Based on k8s.io/\* v1.32 libraries and minimum Go version is now v1.23
-   New experimental priority queue feature
- More details in
[#&#8203;3013](https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3013)
and
[#&#8203;2374](https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/2374)
    -   Can be enabled via manager.Options.Controller.UsePriorityQueue
- Please give it a try and provide feedback in
[#&#8203;2374](https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/2374)
-
[AggregatedDiscovery](https://redirect.github.com/kubernetes/enhancements/issues/3352)
is automatically used when available
([#&#8203;2901](https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/2901))
-   As usual, many improvements to the fake client

#### Changes since v0.19.0

#### ⚠️ Breaking Changes

- Bump to k8s.io/\* v1.32 libraries
([#&#8203;2971](https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/2971)
[#&#8203;2990](https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/2990)
[#&#8203;3001](https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3001)
[#&#8203;3007](https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3007)
[#&#8203;3029](https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3029)
[#&#8203;3043](https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3043))
- logging: Stop deduplicating API warnings by default
([#&#8203;2953](https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/2953))
- webhook: Stop deleting unknown fields in CustomDefaulter
([#&#8203;2982](https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/2982)
[#&#8203;3056](https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3056))
- webhook: Remove deprecated Defaulter and Validator
([#&#8203;2877](https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/2877)
[#&#8203;2945](https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/2945))
- cluster: Remove deprecated SyncPeriod option
([#&#8203;2970](https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/2970))

####  New Features

- cache: Add EnableWatchBookmarks option (defaults to true)
([#&#8203;3017](https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3017))
- cache: Export NewInformer option
([#&#8203;3061](https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3061))
- cert-watcher: Add polling
([#&#8203;3020](https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3020)
[#&#8203;3050](https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3050))
- controller: Add experimental priority queue (off per default)
([#&#8203;3013](https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3013)
[#&#8203;3014](https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3014)
[#&#8203;3060](https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3060)
[#&#8203;3066](https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3066))
- fake client: Allow adding indexes at runtime
([#&#8203;3021](https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3021))
- fake client: Add support for ServiceAccountToken subresource
([#&#8203;2969](https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/2969))
- restmapper: Use AggregatedDiscovery if available
([#&#8203;2901](https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/2901))
- util: Add HasOwnerReference func
([#&#8203;2882](https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/2882))
- webhook: Add custom path option
([#&#8203;2998](https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/2998))

#### 🐛 Bug Fixes

- controller: Error when source.Start() never returns
([#&#8203;2997](https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/2997)
[#&#8203;3006](https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3006)
[#&#8203;3008](https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3008))
- fake client: Don't return items on invalid selector
([#&#8203;3022](https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3022))
- fake client: Fix TOCTOU races
([#&#8203;2980](https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/2980))
- fake client: Preserve TypeMeta during Get call with PartialObjectMeta
([#&#8203;2949](https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/2949))
- fake client: Preserve TypeMeta during List call with UnstructuredList
([#&#8203;3074](https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3074))
- manager: Fix RenewDeadline typo in leader election
([#&#8203;3032](https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3032))
- manager: Use leader elector with client timeout
([#&#8203;3028](https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3028)
[#&#8203;3034](https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3034))

#### 🌱 Others

- cache: Switch to Go 1.23+ stdlib `maps`/`slices` packages
([#&#8203;3012](https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3012))
- controller: Log the syncing source when WaitForSync fails
([#&#8203;3016](https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3016))
- setup-envtest: drop support for GCS
([#&#8203;2915](https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/2915))
- Some fixes for typos
([#&#8203;3011](https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3011)
[#&#8203;3033](https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3033)
[#&#8203;2993](https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/2993))

#### 🌱 CI

- PR-verify: Verify PR titles with shell script
([#&#8203;2944](https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/2944)
[#&#8203;2961](https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/2961)
[#&#8203;2964](https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/2964)
[#&#8203;2973](https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/2973))
- Remove gosec linter
([#&#8203;3064](https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3064))
- Upgrade golangci-lint to v1.61.0
([#&#8203;2950](https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/2950))

📖 Additionally, there have been 7 contributions to our
documentation.
([#&#8203;2942](https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/2942),
[#&#8203;2985](https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/2985),
[#&#8203;2996](https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/2996),
[#&#8203;3002](https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3002),
[#&#8203;3039](https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3039),
[#&#8203;3062](https://redirect.github.com/kubernetes-sigs/controller-runtime/issues/3062))

#### Dependencies

##### Added

*Nothing has changed.*

##### Changed

-   cel.dev/expr: v0.15.0 → v0.18.0
- github.com/Azure/go-ansiterm: [d185dfc →
306776e](d185dfc...306776e)
- github.com/go-openapi/jsonpointer: [v0.19.6 →
v0.21.0](https://redirect.github.com/go-openapi/jsonpointer/compare/v0.19.6...v0.21.0)
- github.com/go-openapi/swag: [v0.22.4 →
v0.23.0](https://redirect.github.com/go-openapi/swag/compare/v0.22.4...v0.23.0)
- github.com/google/btree: [v1.0.1 →
v1.1.3](https://redirect.github.com/google/btree/compare/v1.0.1...v1.1.3)
- github.com/google/cel-go: [v0.20.1 →
v0.22.0](https://redirect.github.com/google/cel-go/compare/v0.20.1...v0.22.0)
- github.com/google/pprof: [4bfdf5a →
d1b30fe](4bfdf5a...d1b30fe)
- github.com/gregjones/httpcache: [9cad4c3 →
901d907](9cad4c3...901d907)
- github.com/jonboulle/clockwork: [v0.2.2 →
v0.4.0](https://redirect.github.com/jonboulle/clockwork/compare/v0.2.2...v0.4.0)
- github.com/moby/spdystream: [v0.4.0 →
v0.5.0](https://redirect.github.com/moby/spdystream/compare/v0.4.0...v0.5.0)
- github.com/onsi/ginkgo/v2: [v2.19.0 →
v2.21.0](https://redirect.github.com/onsi/ginkgo/compare/v2.19.0...v2.21.0)
- github.com/onsi/gomega: [v1.33.1 →
v1.35.1](https://redirect.github.com/onsi/gomega/compare/v1.33.1...v1.35.1)
- github.com/stoewer/go-strcase: [v1.2.0 →
v1.3.0](https://redirect.github.com/stoewer/go-strcase/compare/v1.2.0...v1.3.0)
- github.com/xiang90/probing: [43a291a →
a49e3df](43a291a...a49e3df)
-   go.etcd.io/bbolt: v1.3.9 → v1.3.11
-   go.etcd.io/etcd/api/v3: v3.5.14 → v3.5.16
-   go.etcd.io/etcd/client/pkg/v3: v3.5.14 → v3.5.16
-   go.etcd.io/etcd/client/v2: v2.305.13 → v2.305.16
-   go.etcd.io/etcd/client/v3: v3.5.14 → v3.5.16
-   go.etcd.io/etcd/pkg/v3: v3.5.13 → v3.5.16
-   go.etcd.io/etcd/raft/v3: v3.5.13 → v3.5.16
-   go.etcd.io/etcd/server/v3: v3.5.13 → v3.5.16
-   go.uber.org/zap: v1.26.0 → v1.27.0
-   golang.org/x/crypto: v0.24.0 → v0.28.0
- golang.org/x/exp:
[`f3d0a9c`](https://redirect.github.com/kubernetes-sigs/controller-runtime/commit/f3d0a9c)
→
[`8a7402a`](https://redirect.github.com/kubernetes-sigs/controller-runtime/commit/8a7402a)
-   golang.org/x/mod: v0.17.0 → v0.21.0
-   golang.org/x/net: v0.26.0 → v0.30.0
-   golang.org/x/oauth2: v0.21.0 → v0.23.0
-   golang.org/x/sync: v0.7.0 → v0.8.0
-   golang.org/x/sys: v0.21.0 → v0.26.0
- golang.org/x/telemetry:
[`f48c80b`](https://redirect.github.com/kubernetes-sigs/controller-runtime/commit/f48c80b)
→
[`bda5523`](https://redirect.github.com/kubernetes-sigs/controller-runtime/commit/bda5523)
-   golang.org/x/term: v0.21.0 → v0.25.0
-   golang.org/x/text: v0.16.0 → v0.19.0
-   golang.org/x/time: v0.3.0 → v0.7.0
- golang.org/x/tools:
[`e35e4cc`](https://redirect.github.com/kubernetes-sigs/controller-runtime/commit/e35e4cc)
→ v0.26.0
- golang.org/x/xerrors:
[`04be3eb`](https://redirect.github.com/kubernetes-sigs/controller-runtime/commit/04be3eb)
→
[`5ec99f8`](https://redirect.github.com/kubernetes-sigs/controller-runtime/commit/5ec99f8)
- google.golang.org/genproto/googleapis/api:
[`5315273`](https://redirect.github.com/kubernetes-sigs/controller-runtime/commit/5315273)
→
[`f6391c0`](https://redirect.github.com/kubernetes-sigs/controller-runtime/commit/f6391c0)
- google.golang.org/genproto/googleapis/rpc:
[`f6361c8`](https://redirect.github.com/kubernetes-sigs/controller-runtime/commit/f6361c8)
→
[`f6391c0`](https://redirect.github.com/kubernetes-sigs/controller-runtime/commit/f6391c0)
- google.golang.org/genproto:
[`b8732ec`](https://redirect.github.com/kubernetes-sigs/controller-runtime/commit/b8732ec)
→
[`ef43131`](https://redirect.github.com/kubernetes-sigs/controller-runtime/commit/ef43131)
-   google.golang.org/protobuf: v1.34.2 → v1.35.1
-   k8s.io/api: v0.31.0 → v0.32.0
-   k8s.io/apiextensions-apiserver: v0.31.0 → v0.32.0
-   k8s.io/apimachinery: v0.31.0 → v0.32.0
-   k8s.io/apiserver: v0.31.0 → v0.32.0
-   k8s.io/client-go: v0.31.0 → v0.32.0
-   k8s.io/code-generator: v0.31.0 → v0.32.0
-   k8s.io/component-base: v0.31.0 → v0.32.0
- k8s.io/gengo/v2:
[`51d4e06`](https://redirect.github.com/kubernetes-sigs/controller-runtime/commit/51d4e06)
→
[`2b36238`](https://redirect.github.com/kubernetes-sigs/controller-runtime/commit/2b36238)
-   k8s.io/kms: v0.31.0 → v0.32.0
- k8s.io/kube-openapi:
[`70dd376`](https://redirect.github.com/kubernetes-sigs/controller-runtime/commit/70dd376)
→
[`32ad38e`](https://redirect.github.com/kubernetes-sigs/controller-runtime/commit/32ad38e)
- k8s.io/utils:
[`18e509b`](https://redirect.github.com/kubernetes-sigs/controller-runtime/commit/18e509b)
→
[`3ea5e8c`](https://redirect.github.com/kubernetes-sigs/controller-runtime/commit/3ea5e8c)
- sigs.k8s.io/apiserver-network-proxy/konnectivity-client: v0.30.3 →
v0.31.0
- sigs.k8s.io/json:
[`bc3834c`](https://redirect.github.com/kubernetes-sigs/controller-runtime/commit/bc3834c)
→
[`9aa6b5e`](https://redirect.github.com/kubernetes-sigs/controller-runtime/commit/9aa6b5e)
-   sigs.k8s.io/structured-merge-diff/v4: v4.4.1 → v4.4.2

##### Removed

- github.com/golang/groupcache:
[41bb18b](https://redirect.github.com/golang/groupcache/tree/41bb18b)
- github.com/imdario/mergo:
[v0.3.6](https://redirect.github.com/imdario/mergo/tree/v0.3.6)

*Thanks to all our contributors!* 😊

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44Ni4xIiwidXBkYXRlZEluVmVyIjoiMzkuODYuMSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL21pbm9yIl19-->
2025-01-25 01:59:59 +00:00
TrueCharts Bot
0b265129fb chore(flux): update image prometheus-operator 9.3.0 → 9.4.0 (clustertool) (#31150) 2025-01-25 02:44:19 +01:00
TrueCharts Bot
a1dccc96cb chore(flux): update image blocky 16.10.1 → 16.11.0 (clustertool) (#31149)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [blocky](https://truecharts.org/charts/premium/blocky)
([source](https://0xerr0r.github.io/blocky/)) | minor | `16.10.1` ->
`16.11.0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44Ni4xIiwidXBkYXRlZEluVmVyIjoiMzkuODYuMSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL21pbm9yIl19-->
2025-01-25 02:44:05 +01:00
TrueCharts Bot
ff92b0ce2a chore(flux): update image traefik 30.3.1 → 30.3.2 (clustertool) (#31141) 2025-01-25 02:43:00 +01:00
TrueCharts Bot
5c95ff4072 chore(deps): update ghcr.io/siderolabs/installer docker tag to v1.9.2 (clustertool) (#30992)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[ghcr.io/siderolabs/installer](https://redirect.github.com/siderolabs/talos)
| patch | `v1.9.1` -> `v1.9.2` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>siderolabs/talos (ghcr.io/siderolabs/installer)</summary>

###
[`v1.9.2`](https://redirect.github.com/siderolabs/talos/releases/tag/v1.9.2)

[Compare
Source](https://redirect.github.com/siderolabs/talos/compare/v1.9.1...v1.9.2)

##### [Talos
1.9.2](https://redirect.github.com/siderolabs/talos/releases/tag/v1.9.2)
(2025-01-16)

Welcome to the v1.9.2 release of Talos!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.

##### auditd

Kernel parameter `talos.auditd.disabled=1` can be used to disable Talos
built-in `auditd` service.

##### kube-apiserver Authorization Config

When using `.cluster.apiServer.authorizationConfig` the user provided
order for the authorizers is honoured and `Node` and `RBAC` authorizers
are always added to the end if not explicitly specified.

Eg: If user provides only `Webhook` authorizer, the final order will be
`Webhook`, `Node`, `RBAC`.

To provide a specific order for `Node` or `RBAC` explicitly, user can
provide the authorizer in the order they want.

Eg:

```yaml
cluster:
  apiServer:
    authorizationConfig:
      - type: Node
        name: Node
      - type: Webhook
        name: Webhook
        webhook:
          connectionInfo:
            type: InClusterConfig
        ...
      - type: RBAC
        name: rbac
```

Usage of `authorization-mode` CLI argument will not support this form of
customization.

##### Component Updates

-   Linux: 6.12.9
-   runc: 1.2.4
-   containerd: 2.0.2

Talos is built with Go 1.23.4.

##### Contributors

-   Andrey Smirnov
-   Dmitry Sharshakov
-   L.J. Hanson
-   Noel Georgi
-   Skyler Mäntysaari
-   TomyLobo

##### Changes

<details><summary>18 commits</summary>
<p>

-
[@&#8203;`09758b3`](https://redirect.github.com/siderolabs/talos/commit/09758b3f6)
release(v1.9.2): prepare release
-
[@&#8203;`207f863`](https://redirect.github.com/siderolabs/talos/commit/207f86320)
feat: update containerd to 2.0.2
-
[@&#8203;`582064d`](https://redirect.github.com/siderolabs/talos/commit/582064d9c)
fix: add informer resync period for node status watcher
-
[@&#8203;`244fd6e`](https://redirect.github.com/siderolabs/talos/commit/244fd6e43)
feat: add a kernel parameter to disable built-in auditd
-
[@&#8203;`28327e0`](https://redirect.github.com/siderolabs/talos/commit/28327e001)
fix: kube-apiserver authorizers order
-
[@&#8203;`ff9aa80`](https://redirect.github.com/siderolabs/talos/commit/ff9aa806a)
fix: a couple of imager panics/crashes
-
[@&#8203;`44e2cc9`](https://redirect.github.com/siderolabs/talos/commit/44e2cc91a)
feat: update Linux to 6.12.9
-
[@&#8203;`9fd295b`](https://redirect.github.com/siderolabs/talos/commit/9fd295b5f)
fix: detect GPT before ZFS
-
[@&#8203;`7b59573`](https://redirect.github.com/siderolabs/talos/commit/7b59573de)
fix: extfs repair and resize
-
[@&#8203;`5f6bfe0`](https://redirect.github.com/siderolabs/talos/commit/5f6bfe02a)
fix: merge of VolumeConfig documents with sizes
-
[@&#8203;`0c05e1c`](https://redirect.github.com/siderolabs/talos/commit/0c05e1cd3)
feat: update Linux to 6.12.8
-
[@&#8203;`b61ab0a`](https://redirect.github.com/siderolabs/talos/commit/b61ab0a3d)
fix: partition alignment on disks with 4k sectors
-
[@&#8203;`c4a69d3`](https://redirect.github.com/siderolabs/talos/commit/c4a69d386)
fix: yet another dashboard panic
-
[@&#8203;`dec3c6e`](https://redirect.github.com/siderolabs/talos/commit/dec3c6e5b)
fix: disable NRI plugin in a different way
-
[@&#8203;`dfb54c8`](https://redirect.github.com/siderolabs/talos/commit/dfb54c872)
fix: request previous IP address in discovery
-
[@&#8203;`6b1fe3d`](https://redirect.github.com/siderolabs/talos/commit/6b1fe3df3)
fix: mount selinuxfs only when SELinux is enabled
-
[@&#8203;`5e893e1`](https://redirect.github.com/siderolabs/talos/commit/5e893e1f5)
fix: update field name for bus path disk selector
-
[@&#8203;`9219fc0`](https://redirect.github.com/siderolabs/talos/commit/9219fc017)
fix: exclude disks with empty transport for disk selector

</p>
</details>

##### Changes from siderolabs/pkgs
<details><summary>6 commits</summary>
<p>

-
[siderolabs/pkgs@`c1f06e5`](https://redirect.github.com/siderolabs/pkgs/commit/c1f06e5)
feat: update containerd to v2.0.2
-
[siderolabs/pkgs@`ef38c38`](https://redirect.github.com/siderolabs/pkgs/commit/ef38c38)
feat: update Linux to 6.12.9
-
[siderolabs/pkgs@`a7487d6`](https://redirect.github.com/siderolabs/pkgs/commit/a7487d6)
fix: adjust kernel options around ACPI/PCI/EFI
-
[siderolabs/pkgs@`376259a`](https://redirect.github.com/siderolabs/pkgs/commit/376259a)
feat: update Linux to 6.12.8
-
[siderolabs/pkgs@`8e435cd`](https://redirect.github.com/siderolabs/pkgs/commit/8e435cd)
fix: update config-arm64 to add Rasperry Pi watchdog support
-
[siderolabs/pkgs@`daabb47`](https://redirect.github.com/siderolabs/pkgs/commit/daabb47)
fix: dvb was missing I2C_MUX support and si2168 driver

</p>
</details>

##### Dependency Changes

-   **github.com/siderolabs/go-blockdevice/v2**    v2.0.9 -> v2.0.11
- **github.com/siderolabs/pkgs** v1.9.0-15-g45c4ba4 ->
v1.9.0-21-gc1f06e5
-   **github.com/siderolabs/talos/pkg/machinery**  v1.9.1 -> v1.9.2

Previous release can be found at
[v1.9.1](https://redirect.github.com/siderolabs/talos/releases/tag/v1.9.1)

##### Images

    ghcr.io/siderolabs/flannel:v0.26.1
    registry.k8s.io/coredns/coredns:v1.12.0
    gcr.io/etcd-development/etcd:v3.5.17
    registry.k8s.io/kube-apiserver:v1.32.0
    registry.k8s.io/kube-controller-manager:v1.32.0
    registry.k8s.io/kube-scheduler:v1.32.0
    registry.k8s.io/kube-proxy:v1.32.0
    ghcr.io/siderolabs/kubelet:v1.32.0
    ghcr.io/siderolabs/installer:v1.9.2
    registry.k8s.io/pause:3.10

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44Ni4xIiwidXBkYXRlZEluVmVyIjoiMzkuODYuMSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJyZW5vdmF0ZS9jb250YWluZXIiLCJzeXN0ZW0tdXBncmFkZSIsInR5cGUvcGF0Y2giXX0=-->
2025-01-24 17:24:36 +01:00