feat(container): update flux operator ( 0.14.0 → 0.15.0 )

[ishioni-bot]

This PR contains the following updates:

Package	Update	Change
flux-instance (source)	minor	0.14.0 -> 0.15.0
flux-operator (source)	minor	0.14.0 -> 0.15.0

---

Release Notes

controlplaneio-fluxcd/flux-operator (flux-instance)

v0.15.0

Compare Source

What's Changed

• Enable multitenancy lockdown for the ResourceSet APIs on OpenShift by @​stefanprodan in https://github.com/controlplaneio-fluxcd/flux-operator/pull/171
• Add RBAC aggregations for ResourceSet APIs by @​stefanprodan in https://github.com/controlplaneio-fluxcd/flux-operator/pull/172
• Build with Go 1.24 and FIPS 140-3 mode enabled by @​stefanprodan in https://github.com/controlplaneio-fluxcd/flux-operator/pull/169
• Add GitHub App authentication for ResourceSetInputProvider API by @​matheuscscp in https://github.com/controlplaneio-fluxcd/flux-operator/pull/173
• Bump docker/build-push-action from 6.13.0 to 6.14.0 in the actions group by @​dependabot in https://github.com/controlplaneio-fluxcd/flux-operator/pull/174
• Enable leader election by default by @​stefanprodan in https://github.com/controlplaneio-fluxcd/flux-operator/pull/175
• Add Flux v2.5.0 distribution by @​stefanprodan in https://github.com/controlplaneio-fluxcd/flux-operator/pull/176
• Add ResourceSet guides to readme by @​stefanprodan in https://github.com/controlplaneio-fluxcd/flux-operator/pull/177
• Release v0.15.0 by @​stefanprodan in https://github.com/controlplaneio-fluxcd/flux-operator/pull/178

Full Changelog: controlplaneio-fluxcd/flux-operator@v0.14.0...v0.15.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[ishioni-bot]

--- HelmRelease: flux-system/flux-operator Deployment: flux-system/flux-operator

+++ HelmRelease: flux-system/flux-operator Deployment: flux-system/flux-operator

@@ -40,13 +40,13 @@

             drop:
             - ALL
           readOnlyRootFilesystem: true
           runAsNonRoot: true
           seccompProfile:
             type: RuntimeDefault
-        image: ghcr.io/controlplaneio-fluxcd/flux-operator:v0.14.0
+        image: ghcr.io/controlplaneio-fluxcd/flux-operator:v0.15.0
         imagePullPolicy: IfNotPresent
         ports:
         - name: http-metrics
           containerPort: 8080
           protocol: TCP
         - name: http
--- HelmRelease: flux-system/flux-operator ClusterRole: flux-system/flux-operator-edit

+++ HelmRelease: flux-system/flux-operator ClusterRole: flux-system/flux-operator-edit

@@ -0,0 +1,24 @@

+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: flux-operator-edit
+  labels:
+    rbac.authorization.k8s.io/aggregate-to-edit: 'true'
+    rbac.authorization.k8s.io/aggregate-to-admin: 'true'
+    app.kubernetes.io/name: flux-operator
+    app.kubernetes.io/instance: flux-operator
+    app.kubernetes.io/managed-by: Helm
+rules:
+- apiGroups:
+  - fluxcd.controlplane.io
+  resources:
+  - resourcesets
+  - resourcesetinputproviders
+  verbs:
+  - create
+  - delete
+  - deletecollection
+  - patch
+  - update
+
--- HelmRelease: flux-system/flux-operator ClusterRole: flux-system/flux-operator-view

+++ HelmRelease: flux-system/flux-operator ClusterRole: flux-system/flux-operator-view

@@ -0,0 +1,23 @@

+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: flux-operator-view
+  labels:
+    rbac.authorization.k8s.io/aggregate-to-admin: 'true'
+    rbac.authorization.k8s.io/aggregate-to-edit: 'true'
+    rbac.authorization.k8s.io/aggregate-to-view: 'true'
+    app.kubernetes.io/name: flux-operator
+    app.kubernetes.io/instance: flux-operator
+    app.kubernetes.io/managed-by: Helm
+rules:
+- apiGroups:
+  - fluxcd.controlplane.io
+  resources:
+  - resourcesets
+  - resourcesetinputproviders
+  verbs:
+  - get
+  - list
+  - watch
+

[ishioni-bot]

--- kubernetes/apps/flux-system/flux-operator/app Kustomization: flux-system/flux-operator HelmRelease: flux-system/flux-operator

+++ kubernetes/apps/flux-system/flux-operator/app Kustomization: flux-system/flux-operator HelmRelease: flux-system/flux-operator

@@ -13,13 +13,13 @@

     spec:
       chart: flux-operator
       sourceRef:
         kind: HelmRepository
         name: controlplaneio
         namespace: flux-system
-      version: 0.14.0
+      version: 0.15.0
   interval: 30m
   maxHistory: 3
   uninstall:
     keepHistory: false
   valuesFrom:
   - kind: ConfigMap
--- kubernetes/apps/flux-system/flux-operator/instance Kustomization: flux-system/flux-instance HelmRelease: flux-system/flux-instance

+++ kubernetes/apps/flux-system/flux-operator/instance Kustomization: flux-system/flux-instance HelmRelease: flux-system/flux-instance

@@ -13,13 +13,13 @@

     spec:
       chart: flux-instance
       sourceRef:
         kind: HelmRepository
         name: controlplaneio
         namespace: flux-system
-      version: 0.14.0
+      version: 0.15.0
   interval: 30m
   maxHistory: 3
   uninstall:
     keepHistory: false
   valuesFrom:
   - kind: ConfigMap

[ishioni-bot]

🦙 MegaLinter status: ⚠️ WARNING

Descriptor	Linter	Files	Fixed	Errors	Elapsed time
✅ COPYPASTE	jscpd	yes		no	1.01s
✅ REPOSITORY	git_diff	yes		no	0.03s
✅ REPOSITORY	secretlint	yes		no	2.22s
⚠️ YAML	prettier	3		1	0.41s
✅ YAML	yamllint	3		0	0.37s

See detailed report in MegaLinter reports
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff