Tom Huang

Wondering about this too. Has anyone manually set it to 0 and experienced significant impact? Or could CloudWatch be configured to store those events permanently?

In my case, I had the wrong RBAC permissions used by the HelmRelease and it got stuck in `install retries exhausted`. After fixing the RBAC, it doesn't try to install...

This is an interesting one. I will leave this open and get some community feedback.

I think I can put together a quick PR to customize runner pod's metadata. We should probably put more thoughts into customizing the `spec` section since there are some required...

We can reuse a lot of the code from image automation controller for committing and pushing: https://github.com/fluxcd/image-automation-controller/blob/cd9eaffefc3072df552790e8e1649762e0ef9922/controllers/imageupdateautomation_controller.go#L368-L392

This will require the controller image to have cli/tools installed to run. TerraformRunner can help with this by allowing users to customize their runner image (feature?).

I am doing some research on how this is implemented in kustomize-controller. Looks like it's using [github.com/fluxcd/pkg/runtime/metrics](https://pkg.go.dev/github.com/fluxcd/pkg/runtime/metrics) which is already used in various places to record readiness and suspension. The...

I would like this feature as well.

An alternative method until the PR is merged is using Kyverno to add labels: https://kyverno.io/policies/other/add_labels/add_labels/

The policy looks something like this: ``` apiVersion: kyverno.io/v1 kind: ClusterPolicy metadata: name: add-keycloak-client-secret-kubed-annotations-example spec: rules: - name: add-annotations match: any: - resources: kinds: - Secret namespaces: - keycloak names:...