lumiere-bot[bot]

```diff --- kubernetes/kyak/apps/gpu-system/intel-device-plugin/app Kustomization: flux-system/intel-device-plugin HelmRelease: gpu-system/intel-device-plugin-operator +++ kubernetes/kyak/apps/gpu-system/intel-device-plugin/app Kustomization: flux-system/intel-device-plugin HelmRelease: gpu-system/intel-device-plugin-operator @@ -13,13 +13,13 @@ spec: chart: intel-device-plugins-operator sourceRef: kind: HelmRepository name: intel namespace: flux-system - version: 0.29.0...

```diff --- HelmRelease: gpu-system/intel-device-plugin-operator Deployment: gpu-system/inteldeviceplugins-controller-manager +++ HelmRelease: gpu-system/intel-device-plugin-operator Deployment: gpu-system/inteldeviceplugins-controller-manager @@ -20,13 +20,13 @@ - args: null env: - name: DEVICEPLUGIN_NAMESPACE valueFrom: fieldRef: fieldPath: metadata.namespace - image: intel/intel-deviceplugin-operator:0.29.0 +...

```diff --- kubernetes/kyak/apps/monitoring/thanos/app Kustomization: flux-system/thanos HelmRelease: monitoring/thanos +++ kubernetes/kyak/apps/monitoring/thanos/app Kustomization: flux-system/thanos HelmRelease: monitoring/thanos @@ -13,13 +13,13 @@ spec: chart: thanos sourceRef: kind: HelmRepository name: stevehipwell namespace: flux-system - version: 1.17.0...

```diff --- HelmRelease: monitoring/thanos Deployment: monitoring/thanos-query-frontend +++ HelmRelease: monitoring/thanos Deployment: monitoring/thanos-query-frontend @@ -26,15 +26,30 @@ annotations: configmap.reloader.stakater.com/reload: thanos-cache-configmap spec: serviceAccountName: thanos-query-frontend securityContext: fsGroup: 65534 + runAsGroup: 65532 + runAsNonRoot: true...

```diff --- kubernetes/sol/apps/kube-system/cilium/app Kustomization: flux-system/cilium HelmRelease: kube-system/cilium +++ kubernetes/sol/apps/kube-system/cilium/app Kustomization: flux-system/cilium HelmRelease: kube-system/cilium @@ -13,13 +13,13 @@ spec: chart: cilium sourceRef: kind: HelmRepository name: cilium namespace: flux-system - version: 1.15.4...

```diff --- HelmRelease: kube-system/cilium ConfigMap: kube-system/cilium-config +++ HelmRelease: kube-system/cilium ConfigMap: kube-system/cilium-config @@ -118,12 +118,15 @@ tofqdns-proxy-response-max-delay: 100ms agent-not-ready-taint-key: node.cilium.io/agent-not-ready mesh-auth-enabled: 'true' mesh-auth-queue-size: '1024' mesh-auth-rotated-identities-queue-size: '1024' mesh-auth-gc-interval: 5m0s + proxy-xff-num-trusted-hops-ingress: '0'...

```diff --- kubernetes/kyak/apps/monitoring/kromgo/app Kustomization: flux-system/kromgo HelmRelease: monitoring/kromgo +++ kubernetes/kyak/apps/monitoring/kromgo/app Kustomization: flux-system/kromgo HelmRelease: monitoring/kromgo @@ -13,13 +13,13 @@ spec: chart: app-template sourceRef: kind: HelmRepository name: bjw-s namespace: flux-system - version: 3.1.0...

```diff --- HelmRelease: auth/authelia ServiceMonitor: auth/authelia +++ HelmRelease: auth/authelia ServiceMonitor: auth/authelia @@ -5,12 +5,16 @@ name: authelia labels: app.kubernetes.io/instance: authelia app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: authelia spec: + jobLabel: authelia + namespaceSelector:...

```diff --- HelmRelease: system-upgrade/system-upgrade-controller Deployment: system-upgrade/system-upgrade-controller +++ HelmRelease: system-upgrade/system-upgrade-controller Deployment: system-upgrade/system-upgrade-controller @@ -74,13 +74,13 @@ value: '900' - name: SYSTEM_UPGRADE_JOB_BACKOFF_LIMIT value: '99' - name: SYSTEM_UPGRADE_JOB_IMAGE_PULL_POLICY value: IfNotPresent - name: SYSTEM_UPGRADE_JOB_KUBECTL_IMAGE...

```diff --- kubernetes/sol/apps/system-upgrade/system-upgrade-controller/app Kustomization: flux-system/system-upgrade-controller HelmRelease: system-upgrade/system-upgrade-controller +++ kubernetes/sol/apps/system-upgrade/system-upgrade-controller/app Kustomization: flux-system/system-upgrade-controller HelmRelease: system-upgrade/system-upgrade-controller @@ -41,13 +41,13 @@ fieldRef: fieldPath: metadata.namespace SYSTEM_UPGRADE_CONTROLLER_THREADS: 2 SYSTEM_UPGRADE_JOB_ACTIVE_DEADLINE_SECONDS: 900 SYSTEM_UPGRADE_JOB_BACKOFF_LIMIT: 99 SYSTEM_UPGRADE_JOB_IMAGE_PULL_POLICY: IfNotPresent - SYSTEM_UPGRADE_JOB_KUBECTL_IMAGE:...