Skip to content

[pull] main from fluxcd:main#34

Open
pull[bot] wants to merge 758 commits into
FoxAndDuckSoftware:mainfrom
fluxcd:main
Open

[pull] main from fluxcd:main#34
pull[bot] wants to merge 758 commits into
FoxAndDuckSoftware:mainfrom
fluxcd:main

Conversation

@pull

@pull pull Bot commented Sep 18, 2023

Copy link
Copy Markdown

See Commits and Changes for more details.


Created by pull[bot]

Can you help keep this open source service alive? 💖 Please sponsor : )

@pull pull Bot added the ⤵️ pull label Sep 18, 2023
matheuscscp and others added 29 commits June 30, 2025 11:06
Signed-off-by: Matheus Pimenta <matheuscscp@gmail.com>
[RFC-0010] Introduce workload identity auth for remote clusters
Bumps the ci group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [korthout/backport-action](https://github.com/korthout/backport-action) | `3.2.0` | `3.2.1` |
| [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `3.10.0` | `3.11.1` |
| [docker/build-push-action](https://github.com/docker/build-push-action) | `6.17.0` | `6.18.0` |
| [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) | `3.8.2` | `3.9.1` |
| [anchore/sbom-action](https://github.com/anchore/sbom-action) | `0.20.0` | `0.20.1` |
| [github/codeql-action](https://github.com/github/codeql-action) | `3.28.18` | `3.29.0` |



Updates `korthout/backport-action` from 3.2.0 to 3.2.1
- [Release notes](https://github.com/korthout/backport-action/releases)
- [Commits](korthout/backport-action@436145e...0193454)

Updates `docker/setup-buildx-action` from 3.10.0 to 3.11.1
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](docker/setup-buildx-action@b5ca514...e468171)

Updates `docker/build-push-action` from 6.17.0 to 6.18.0
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](docker/build-push-action@1dc7386...2634353)

Updates `sigstore/cosign-installer` from 3.8.2 to 3.9.1
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](sigstore/cosign-installer@3454372...398d4b0)

Updates `anchore/sbom-action` from 0.20.0 to 0.20.1
- [Release notes](https://github.com/anchore/sbom-action/releases)
- [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md)
- [Commits](anchore/sbom-action@e11c554...9246b90)

Updates `github/codeql-action` from 3.28.18 to 3.29.0
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@ff0a06e...ce28f5b)

---
updated-dependencies:
- dependency-name: korthout/backport-action
  dependency-version: 3.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ci
- dependency-name: docker/setup-buildx-action
  dependency-version: 3.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci
- dependency-name: docker/build-push-action
  dependency-version: 6.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci
- dependency-name: sigstore/cosign-installer
  dependency-version: 3.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci
- dependency-name: anchore/sbom-action
  dependency-version: 0.20.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ci
- dependency-name: github/codeql-action
  dependency-version: 3.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci
...

Signed-off-by: dependabot[bot] <support@github.com>
…ef230b4

Bump the ci group across 1 directory with 6 updates
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
Signed-off-by: Matheus Pimenta <matheuscscp@gmail.com>
Introduce label selector for watching ConfigMaps and Secrets
…ller level

Signed-off-by: Matheus Pimenta <matheuscscp@gmail.com>
[RFC-0010] Support all Azure clouds for remote clusters at the controller level
Signed-off-by: Matheus Pimenta <matheuscscp@gmail.com>
Fix watch index conflict between HelmChart and OCIRepository kinds
Signed-off-by: Yves Mettier <ymettier@free.fr>
Fix continuous drift due to unstable hashing of values
Extend the readiness evaluation of dependencies with CEL expressions

Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
Extend the readiness evaluation of dependencies with CEL expressions
Signed-off-by: Matheus Pimenta <matheuscscp@gmail.com>
Fix requeue interval for SourceNotReady
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
Remove deprecated APIs in group `helm.toolkit.fluxcd.io/v2beta1`
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
Record the last Helm release action duration in status
Adds new controller flag to enforce ServiceAccount usage in
multi-tenant clusters where administrators need to lock down workload
identity access:

- --default-kubeconfig-service-account

This flag complements the existing --default-service-account flag to
provide multi-tenancy lockdown coverage for kubeconfig ServiceAccount
fields in the HelmRelease API.

Signed-off-by: cappyzawa <cappyzawa@gmail.com>
[RFC-0010] Add multi-tenancy lockdown for kubeconfig
MichaelMorrisEst and others added 30 commits June 15, 2026 16:08
Signed-off-by: MichaelMorris <michael.morris@est.tech>
Signed-off-by: MichaelMorris <michael.morris@est.tech>
Signed-off-by: MichaelMorris <michael.morris@est.tech>
Signed-off-by: MichaelMorris <michael.morris@est.tech>
Signed-off-by: MichaelMorris <michael.morris@est.tech>
The newly added tests to e2e depend on local helm charts being installed, which is done in "Bootstrap Tests Using Local Helm Chart". However a condition exists on that step and on the already existing test cases that depend on it because that step cannot be run on a PR from a fork as the fork branch wont exist in the base repo.
Therefore the same condition needs to be placed on the newly added tests that also depend on that step.

Signed-off-by: MichaelMorris <michael.morris@est.tech>
Signed-off-by: MichaelMorris <michael.morris@est.tech>
Support helm release upgrade on helm chart name change
Signed-off-by: Matheus Pimenta <matheuscscp@gmail.com>
Upgrade source-controller API to v1.9.0
Signed-off-by: Matheus Pimenta <matheuscscp@gmail.com>
Signed-off-by: Matheus Pimenta <matheuscscp@gmail.com>
Signed-off-by: Matheus Pimenta <matheuscscp@gmail.com>
Add backport:release/v1.6.x label
Add the standard Flux resource categories to the HelmRelease CRD so
users can list Flux resources with kubectl using category selectors:

  all              every resource in the cluster
  fluxcd           every Flux resource
  fluxcd-appliers  every Flux applier resource

Remove the +kubebuilder:resource marker from the older API version,
since it interferes with CRD generation, and regenerate the CRD.

Signed-off-by: José Siqueira <jose.siqueira.cerqueira@gmail.com>
Assisted-by: Claude/claude-opus-4-8
Add categories to the HelmRelease CRD
Signed-off-by: Matheus Pimenta <matheuscscp@gmail.com>
Signed-off-by: Matheus Pimenta <matheuscscp@gmail.com>
(cherry picked from commit bc8a9b7)
Signed-off-by: Matheus Pimenta <matheuscscp@gmail.com>
Disable variable substitution in CRDs
Signed-off-by: Matheus Pimenta <matheuscscp@gmail.com>
(cherry picked from commit 6104719)
Signed-off-by: iam-karan-suresh <karansuresh.info@gmail.com>
Signed-off-by: Matheus Pimenta <matheuscscp@gmail.com>
Signed-off-by: Matheus Pimenta <matheuscscp@gmail.com>
…jobs

ci: parallelize e2e job to speed it up
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.