Stefan Prodan

> the liveness probe on the controller should still pass the checks, right? Not if the CNI is failing, kubelet can't reach the port. There is nothing special about the...

@fcuello-fudo if Flux runs into rate limits there must be error logs, if you can post those would be helpful. We use the Kubernetes `PriorityAndFairness` flow control to make our...

See https://registry.terraform.io/providers/fluxcd/flux/latest/docs/resources/bootstrap_git#embedded_manifests

The import function can't use the embedded manifests, because those manifests are for the latest version, while the cluster is on an older version.

IMO `OCIRepository` is meant as a replacement for `GitRepository`, the content of an OCI artifact pushed by Flux is in no way limited to Kubernetes manifests, it can have anything...

@dex4er we'll discuss this feature request at the next public dev meeting and we'll get back to you afterwords.

My proposal is to use OCIRepository to fetch Helm charts from a container registry, which is very diffrent to this proposal, where an OCI artifact has many chart sources that...

This can now be achieved with Flux 2.7 using [source-watcher ](https://github.com/fluxcd/source-watcher): Example: ```yaml apiVersion: source.extensions.fluxcd.io/v1beta1 kind: ArtifactGenerator metadata: name: podinfo namespace: apps spec: sources: - alias: monorepo kind: OCIRepository name:...

I suggest moving the secret values out of the HelmRelease into a Kubernetes Secret that's encrypted with SOPS. Then in the HelmRelease you would use `valuesFrom`. This is the recommend...

A `1m` interval for ImageUpdateAutomation means the controller needs to run a Git remote-ls every minute, then Git clone, checkout, etc. The `spec.ignore` does not help with IUA because Git...