kustomize-controller

kustomize-controller copied to clipboard

Drop potentially unexpected privilege escalation from RBAC docs

1

In the docs there is an example for the usage of RBAC with flux. The example permissions aren't just broad, but broader than what's recommended as a general best practice,...

SISheogorath

Have Kustomize inject dynamic values via ConfigMap

1

After building many K8 clusters via **Kustomize/Flux**, I feel there are ways we can reduce the number of `overlays` for a given cluster or application. If a base manifest can...

tahirraza

client-side throttling

5

### Error message: Throttling logs for `kustomize-controller`: ``` kubectl logs -n flux-system -f deployments/kustomize-controller | grep 'Waited for' I1107 10:10:55.887548 7 request.go:682] Waited for 1.044697004s due to client-side throttling, not...

mateusz-lubanski-sinch

kustomize-controller hangs frequently

22

We use flux in 5 clusters, and in just one of them (the newest, smallest one) the kustomize controller keeps hanging so bad I have to kill the pod. I...

annaken

Hello, I would like to add extra env variables in daemonset (`aws-node`), but I would like to check if result manifest will be same as I expect. I have possibility...

ktaborski

Bumps the go-deps group with 1 update: [golang.org/x/net](https://github.com/golang/net). Updates `golang.org/x/net` from 0.24.0 to 0.25.0 Commits d27919b go.mod: update golang.org/x dependencies e0324fc http2: use net.ErrClosed b20cd59 quic: initiate key rotation earlier...

dependabot[bot]

Critical vulnerability CVE-2024-32002

2

`kustomize-controller:v1.3.0 ` has `CVE-2024-32002` critical vulnerability. https://security.alpinelinux.org/vuln/CVE-2024-32002

BurakCetin3129

Hi! **Kustomize Controller version: v1.2.2** I've been trying to integrate SOPS to Kustomize Controller. The secret provider of our choice is Hashicorp Vault. I have been following the documentation specified...

seidigapbar

kustomize controller unable to decrypt kms encoded yaml file data

1

i am using S3 as source and before pushing the data to S3 i am encrypting the data with kms key. i have added a irsa role to decrypt the...

Satcomproj

Constant rewriting of the CRD

4

Hello! Using Flux, I deployed the [external-secrets operator](https://github.com/external-secrets/external-secrets) and its CRD. The fact is that the external-secrets operator stores the `caBundle` directly in the CRD and therefore Flux constantly overwrites...

tropnikovvl