- notification-controller to v0.20.1
  https://github.com/fluxcd/notification-controller/blob/v0.20.1/CHANGELOG.md



Signed-off-by: GitHub <noreply@github.com>

This includes the full commit tree to solve both CVE-2020-29652 and
CVE-2021-43565:
https://github.com/golang/crypto/compare/8b5274cf687fd9316b4108863654cc57385531e8...5770296d904e90f15f38f77dfc2e43fdf5efc083



Signed-off-by: Hidde Beydals <hello@hidde.co>

Update toolkit components and packages

Signed-off-by: Aurel Canciu <aurelcanciu@gmail.com>

Signed-off-by: Aurel Canciu <aurelcanciu@gmail.com>

Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>

- helm-controller to v0.15.0
  https://github.com/fluxcd/helm-controller/blob/v0.15.0/CHANGELOG.md
- kustomize-controller to v0.19.0
  https://github.com/fluxcd/kustomize-controller/blob/v0.19.0/CHANGELOG.md
- source-controller to v0.20.1
  https://github.com/fluxcd/source-controller/blob/v0.20.1/CHANGELOG.md
- image-reflector-controller to v0.15.0
  https://github.com/fluxcd/image-reflector-controller/blob/v0.15.0/CHANGELOG.md
- image-automation-controller to v0.19.0
  https://github.com/fluxcd/image-automation-controller/blob/v0.19.0/CHANGELOG.md



Signed-off-by: GitHub <noreply@github.com>

Use k8s.io/cli-runtime for kubernetes flags

Signed-off-by: Jakob Schrettenbrunner <jakob.schrettenbrunner@telekom.de>

[RFC-0001] Memorandum on the authorization model

This gives a baseline for future changes, e.g., expanding where
namespace ACLs are used, switching access control to
untrusted-by-default.

The "Security considerations" section  was adapted from

    https://github.com/fluxcd/flux2/pull/2086



Signed-off-by: Michael Bridgen <michael@weave.works>

Add the Helm CLI to the GitHub ARM64 runners setup

Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>

Fix ./manifests/scripts/bundle.sh path resolution

The script now uses the path of the script file itself to determine the
manifests directory paths. This fixes an issue when building the AUR
packages where the check() phase would fail because the git repository
of the package would be used and this would generate invalid paths.

Signed-off-by: Aurel Canciu <aurelcanciu@gmail.com>

Update kube-prometheus-stack to 23.2.0

this release contains the prometheus operator in version 0.52.1

see https://github.com/fluxcd/flux2/issues/2192
https://github.com/fluxcd/flux2/pull/2193

 for issues

Signed-off-by: Johannes Graf <graf@synyx.de>

Update toolkit components

- helm-controller to v0.14.1
  https://github.com/fluxcd/helm-controller/blob/v0.14.1/CHANGELOG.md
- kustomize-controller to v0.18.2
  https://github.com/fluxcd/kustomize-controller/blob/v0.18.2/CHANGELOG.md
- source-controller to v0.19.2
  https://github.com/fluxcd/source-controller/blob/v0.19.2/CHANGELOG.md



Signed-off-by: GitHub <noreply@github.com>

This fixes a styling issue:

```
$ flux --help

Command line utility for assembling Kubernetes CD pipelines the GitOps
way.

Usage:
  flux [command]

...

Available Commands:
  ...
  suspend     Suspend resources
  trace       trace an in-cluster object throughout the GitOps delivery
pipeline
  uninstall   Uninstall Flux and its custom resource definitions
...
```

Signed-off-by: Hidde Beydals <hello@hidde.co>

e2e: Update Calico to v3.20

Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>

Removing Kubernetes API Request Duration Graph

Signed-off-by: Luke Mallon (Nalum) <luke.mallon@weave.works>

monitoring: Pin kube-prometheus-stack  to v19.3.0

Something in kube-prometheus-stack 20.0.0 has broken our example.
See https://github.com/fluxcd/flux2/pull/2193

 for more information.

Signed-off-by: Kingdon Barrett <kingdon@weave.works>

Run the ARM64 e2e tests on Equinix hardware

Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>

update Max email

Signed-off-by: Daniel Holbach <daniel@weave.works>

[RFC-0000] Introduce the Flux RFC template

Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>

Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>

Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>

The RFC template is heavily inspired by Rust RFCs and Kubernetes KEPs.

Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>

update Aurel's email

Signed-off-by: Daniel Holbach <daniel@weave.works>