Update all dependencies

This MR contains the following updates:

Package	Type	Update	Change
argoproj/argo-cd	ironbank-github	patch	v2.3.2 -> v2.3.3
fluxcd/flux2	ironbank-github	minor	v0.29.5 -> v0.30.2
istio/istio	ironbank-github	patch	1.13.2 -> 1.13.3

---

Release Notes

argoproj/argo-cd

v2.3.3

Compare Source

• fix: prevent excessive repo-server disk usage for large repos (#​8845) (#​8897)
• fix: Set QPS and burst rate for resource ops client (#​8915)

fluxcd/flux2

v0.30.2

Compare Source

Flux v0.30.2 is a patch release with further patches around working with the macOS file-system.

Note that v0.29.0 included breaking changes, and v0.30.0 new features.

CLI Changelog

• MR #​2703 - @​aryan9600 - Modify tmp dir generation to be absolute on all OSes
• MR #​2701 - @​stefanprodan - Grant service account read-only access to controllers

v0.30.1

Compare Source

Flux v0.30.1 is a patch release fixing a regression bug introduced in v0.30.0, which prevented macOS users from upgrading Flux using bootstrap due to FS security constraints.

Note that v0.29.0 included breaking changes, and v0.30.0 new features.

CLI Changelog

• MR #​2700 - @​stefanprodan - MacOS: fix bootstrap manifest generation

v0.30.0

Compare Source

Flux v0.30.0 comes with new features and improvements. Users are encouraged to upgrade for the best experience.

Note that v0.29.0 included breaking changes.

Features and improvements

Support for disabling remote bases in Kustomize overlays

This release adds support to the kustomize-controller for disallowing remote bases in Kustomize overlays using --no-remote-bases=true (default: false). When this flag is enabled on the controller, all resources must refer to local files included in the Source Artifact, meaning only the Flux Sources can affect the cluster-state. Users are advised to enable it on production systems for security and performance reasons.

Support for defining a KubeConfig Secret data key

Both Kustomization and HelmRelease resources do now accept a .spec.kubeConfig.SecretRef.key definition. When the value is specified, the KubeConfig JSON is retrieved from this data key in the referred Secret, instead of the defaults (value or value.yaml).

Support for defining a ServiceAccountName in ImageRepository objects

The ImageRepository object does now accept a .spec.serviceAccountName definition. When specified, the image pull secrets attached to the ServiceAccount are used to authenticate towards the registry.

Components Changelog

• kustomize-controller to v0.25.0
• helm-controller to v0.21.0
• image-reflector-controller to v0.18.0
• source-controller to v0.24.4
• notification-controller to v0.23.5
• image-automation-controller to v0.22.1

CLI Changelog

• MR #​2651 - @​hiddeco - kustomize: use FS from fluxcd/pkg
• MR #​2698 - @​hiddeco - Update dependencies
• MR #​2695 - @​fluxcdbot - Update toolkit components

istio/istio

v1.13.3

Compare Source

Artifacts Release Notes

---

Configuration

📅 Schedule: At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This MR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this MR, click this checkbox.

---

This MR has been generated by Renovate Bot.