This gives a baseline for future changes, e.g., expanding where
namespace ACLs are used, switching access control to
untrusted-by-default.

The "Security considerations" section  was adapted from

    https://github.com/fluxcd/flux2/pull/2086



Signed-off-by: Michael Bridgen <michael@weave.works>

Add the Helm CLI to the GitHub ARM64 runners setup

Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>

Fix ./manifests/scripts/bundle.sh path resolution

The script now uses the path of the script file itself to determine the
manifests directory paths. This fixes an issue when building the AUR
packages where the check() phase would fail because the git repository
of the package would be used and this would generate invalid paths.

Signed-off-by: Aurel Canciu <aurelcanciu@gmail.com>

Update kube-prometheus-stack to 23.2.0

this release contains the prometheus operator in version 0.52.1

see https://github.com/fluxcd/flux2/issues/2192
https://github.com/fluxcd/flux2/pull/2193

 for issues

Signed-off-by: Johannes Graf <graf@synyx.de>

Update toolkit components

- helm-controller to v0.14.1
  https://github.com/fluxcd/helm-controller/blob/v0.14.1/CHANGELOG.md
- kustomize-controller to v0.18.2
  https://github.com/fluxcd/kustomize-controller/blob/v0.18.2/CHANGELOG.md
- source-controller to v0.19.2
  https://github.com/fluxcd/source-controller/blob/v0.19.2/CHANGELOG.md



Signed-off-by: GitHub <noreply@github.com>

This fixes a styling issue:

```
$ flux --help

Command line utility for assembling Kubernetes CD pipelines the GitOps
way.

Usage:
  flux [command]

...

Available Commands:
  ...
  suspend     Suspend resources
  trace       trace an in-cluster object throughout the GitOps delivery
pipeline
  uninstall   Uninstall Flux and its custom resource definitions
...
```

Signed-off-by: Hidde Beydals <hello@hidde.co>

e2e: Update Calico to v3.20

Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>

Removing Kubernetes API Request Duration Graph

Signed-off-by: Luke Mallon (Nalum) <luke.mallon@weave.works>

monitoring: Pin kube-prometheus-stack  to v19.3.0

Something in kube-prometheus-stack 20.0.0 has broken our example.
See https://github.com/fluxcd/flux2/pull/2193

 for more information.

Signed-off-by: Kingdon Barrett <kingdon@weave.works>

Run the ARM64 e2e tests on Equinix hardware

Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>

update Max email

Signed-off-by: Daniel Holbach <daniel@weave.works>

[RFC-0000] Introduce the Flux RFC template

Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>

Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>

Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>

The RFC template is heavily inspired by Rust RFCs and Kubernetes KEPs.

Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>

update Aurel's email

Signed-off-by: Daniel Holbach <daniel@weave.works>

Pinned to commit before https://github.com/fluxcd/pkg/pull/189

 due to
introduction faulty behavior.

Signed-off-by: Hidde Beydals <hello@hidde.co>

This reverts commit 75a18b45, reversing
changes made to e72214e2.

Signed-off-by: Hidde Beydals <hello@hidde.co>

- helm-controller to v0.14.0
- kustomize-controller to v0.18.1
- source-controller to v0.19.0
- notification-controller to v0.19.0
- image-reflector-controller to v0.14.0
- image-automation-controller to v0.18.0

Signed-off-by: Hidde Beydals <hello@hidde.co>

- helm-controller to v0.14.0
  https://github.com/fluxcd/helm-controller/blob/v0.14.0/CHANGELOG.md
- kustomize-controller to v0.18.1
  https://github.com/fluxcd/kustomize-controller/blob/v0.18.1/CHANGELOG.md
- source-controller to v0.19.0
  https://github.com/fluxcd/source-controller/blob/v0.19.0/CHANGELOG.md
- notification-controller to v0.19.0
  https://github.com/fluxcd/notification-controller/blob/v0.19.0/CHANGELOG.md
- image-reflector-controller to v0.14.0
  https://github.com/fluxcd/image-reflector-controller/blob/v0.14.0/CHANGELOG.md
- image-automation-controller to v0.18.0
  https://github.com/fluxcd/image-automation-controller/blob/v0.18.0/CHANGELOG.md



Signed-off-by: GitHub <noreply@github.com>

Fix GitHub bootstrap when using custom TLS CA

Signed-off-by: Somtochi Onyekwere <somtochionyekwere@gmail.com>

bootstrap: Add support for self-signed TLS certs by supplying a custom CA 

Signed-off-by: Somtochi Onyekwere <somtochionyekwere@gmail.com>

Signed-off-by: Somtochi Onyekwere <somtochionyekwere@gmail.com>