feat(container): update flux operator group ( 0.14.0 → 0.15.0 ) (minor)

[renovate]

This PR contains the following updates:

Package	Update	Change
flux-instance (source)	minor	0.14.0 -> 0.15.0
flux-operator (source)	minor	0.14.0 -> 0.15.0

---

Release Notes

controlplaneio-fluxcd/flux-operator (flux-instance)

v0.15.0

Compare Source

What's Changed

• Enable multitenancy lockdown for the ResourceSet APIs on OpenShift by @​stefanprodan in https://github.com/controlplaneio-fluxcd/flux-operator/pull/171
• Add RBAC aggregations for ResourceSet APIs by @​stefanprodan in https://github.com/controlplaneio-fluxcd/flux-operator/pull/172
• Build with Go 1.24 and FIPS 140-3 mode enabled by @​stefanprodan in https://github.com/controlplaneio-fluxcd/flux-operator/pull/169
• Add GitHub App authentication for ResourceSetInputProvider API by @​matheuscscp in https://github.com/controlplaneio-fluxcd/flux-operator/pull/173
• Bump docker/build-push-action from 6.13.0 to 6.14.0 in the actions group by @​dependabot in https://github.com/controlplaneio-fluxcd/flux-operator/pull/174
• Enable leader election by default by @​stefanprodan in https://github.com/controlplaneio-fluxcd/flux-operator/pull/175
• Add Flux v2.5.0 distribution by @​stefanprodan in https://github.com/controlplaneio-fluxcd/flux-operator/pull/176
• Add ResourceSet guides to readme by @​stefanprodan in https://github.com/controlplaneio-fluxcd/flux-operator/pull/177
• Release v0.15.0 by @​stefanprodan in https://github.com/controlplaneio-fluxcd/flux-operator/pull/178

Full Changelog: controlplaneio-fluxcd/flux-operator@v0.14.0...v0.15.0

---

Configuration

📅 Schedule: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

--- kubernetes/apps/flux-system/flux-operator/app Kustomization: flux-system/flux-operator HelmRelease: flux-system/flux-operator

+++ kubernetes/apps/flux-system/flux-operator/app Kustomization: flux-system/flux-operator HelmRelease: flux-system/flux-operator

@@ -13,13 +13,13 @@

     spec:
       chart: flux-operator
       sourceRef:
         kind: HelmRepository
         name: controlplaneio
         namespace: flux-system
-      version: 0.14.0
+      version: 0.15.0
   install:
     remediation:
       retries: 3
   interval: 30m
   upgrade:
     cleanupOnFail: true
--- kubernetes/apps/flux-system/flux-operator/instance Kustomization: flux-system/flux-instance HelmRelease: flux-system/flux-instance

+++ kubernetes/apps/flux-system/flux-operator/instance Kustomization: flux-system/flux-instance HelmRelease: flux-system/flux-instance

@@ -13,13 +13,13 @@

     spec:
       chart: flux-instance
       sourceRef:
         kind: HelmRepository
         name: controlplaneio
         namespace: flux-system
-      version: 0.14.0
+      version: 0.15.0
   dependsOn:
   - name: flux-operator
     namespace: flux-system
   install:
     remediation:
       retries: 3

[github-actions]

--- HelmRelease: flux-system/flux-operator Deployment: flux-system/flux-operator

+++ HelmRelease: flux-system/flux-operator Deployment: flux-system/flux-operator

@@ -40,13 +40,13 @@

             drop:
             - ALL
           readOnlyRootFilesystem: true
           runAsNonRoot: true
           seccompProfile:
             type: RuntimeDefault
-        image: ghcr.io/controlplaneio-fluxcd/flux-operator:v0.14.0
+        image: ghcr.io/controlplaneio-fluxcd/flux-operator:v0.15.0
         imagePullPolicy: IfNotPresent
         ports:
         - name: http-metrics
           containerPort: 8080
           protocol: TCP
         - name: http
--- HelmRelease: flux-system/flux-operator ClusterRole: flux-system/flux-operator-edit

+++ HelmRelease: flux-system/flux-operator ClusterRole: flux-system/flux-operator-edit

@@ -0,0 +1,24 @@

+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: flux-operator-edit
+  labels:
+    rbac.authorization.k8s.io/aggregate-to-edit: 'true'
+    rbac.authorization.k8s.io/aggregate-to-admin: 'true'
+    app.kubernetes.io/name: flux-operator
+    app.kubernetes.io/instance: flux-operator
+    app.kubernetes.io/managed-by: Helm
+rules:
+- apiGroups:
+  - fluxcd.controlplane.io
+  resources:
+  - resourcesets
+  - resourcesetinputproviders
+  verbs:
+  - create
+  - delete
+  - deletecollection
+  - patch
+  - update
+
--- HelmRelease: flux-system/flux-operator ClusterRole: flux-system/flux-operator-view

+++ HelmRelease: flux-system/flux-operator ClusterRole: flux-system/flux-operator-view

@@ -0,0 +1,23 @@

+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: flux-operator-view
+  labels:
+    rbac.authorization.k8s.io/aggregate-to-admin: 'true'
+    rbac.authorization.k8s.io/aggregate-to-edit: 'true'
+    rbac.authorization.k8s.io/aggregate-to-view: 'true'
+    app.kubernetes.io/name: flux-operator
+    app.kubernetes.io/instance: flux-operator
+    app.kubernetes.io/managed-by: Helm
+rules:
+- apiGroups:
+  - fluxcd.controlplane.io
+  resources:
+  - resourcesets
+  - resourcesetinputproviders
+  verbs:
+  - get
+  - list
+  - watch
+