fix(container): update kubernetes group ( v1.32.1 → v1.32.2 ) (patch)

[renovate]

This PR contains the following updates:

Package	Update	Change
ghcr.io/siderolabs/kubelet	patch	v1.32.1 -> v1.32.2
registry.k8s.io/kubectl	patch	v1.32.1 -> v1.32.2

---

Release Notes

siderolabs/kubelet (ghcr.io/siderolabs/kubelet)

v1.32.2

Compare Source

---

Configuration

📅 Schedule: Branch creation - "* 0-4,22-23 * * 1-5,* * * * 0,6" in timezone America/Los_Angeles, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

--- kubernetes/apps/kyverno/kyverno/app Kustomization: flux-system/kyverno HelmRelease: kyverno/kyverno

+++ kubernetes/apps/kyverno/kyverno/app Kustomization: flux-system/kyverno HelmRelease: kyverno/kyverno

@@ -52,8 +52,8 @@

         limits:
           memory: 256Mi
       serviceMonitor:
         enabled: true
   valuesFrom:
   - kind: ConfigMap
-    name: kyverno-helm-values-b2fc8mfc8k
+    name: kyverno-helm-values-5gt2bkdg6m
 
--- kubernetes/apps/kyverno/kyverno/app Kustomization: flux-system/kyverno ConfigMap: kyverno/kyverno-helm-values-b2fc8mfc8k

+++ kubernetes/apps/kyverno/kyverno/app Kustomization: flux-system/kyverno ConfigMap: kyverno/kyverno-helm-values-b2fc8mfc8k

@@ -1,38 +0,0 @@

----
-apiVersion: v1
-data:
-  values.yaml: |
-    ---
-    fullnameOverride: kyverno
-    global:
-      image:
-        registry: ghcr.io
-      tolerations:
-        - key: node-role.kubernetes.io/control-plane
-          operator: Exists
-          effect: NoSchedule
-    webhooksCleanup:
-      image:
-        registry: registry.k8s.io
-        repository: kubectl
-        tag: v1.32.1
-    policyReportsCleanup:
-      image:
-        registry: registry.k8s.io
-        repository: kubectl
-        tag: v1.32.1
-    features:
-      backgroundScan:
-        skipResourceFilters: false
-      policyExceptions:
-        enabled: true
-        namespace: kyverno
-kind: ConfigMap
-metadata:
-  labels:
-    app.kubernetes.io/name: kyverno
-    kustomize.toolkit.fluxcd.io/name: kyverno
-    kustomize.toolkit.fluxcd.io/namespace: flux-system
-  name: kyverno-helm-values-b2fc8mfc8k
-  namespace: kyverno
-
--- kubernetes/apps/kyverno/kyverno/app Kustomization: flux-system/kyverno ConfigMap: kyverno/kyverno-helm-values-5gt2bkdg6m

+++ kubernetes/apps/kyverno/kyverno/app Kustomization: flux-system/kyverno ConfigMap: kyverno/kyverno-helm-values-5gt2bkdg6m

@@ -0,0 +1,38 @@

+---
+apiVersion: v1
+data:
+  values.yaml: |
+    ---
+    fullnameOverride: kyverno
+    global:
+      image:
+        registry: ghcr.io
+      tolerations:
+        - key: node-role.kubernetes.io/control-plane
+          operator: Exists
+          effect: NoSchedule
+    webhooksCleanup:
+      image:
+        registry: registry.k8s.io
+        repository: kubectl
+        tag: v1.32.2
+    policyReportsCleanup:
+      image:
+        registry: registry.k8s.io
+        repository: kubectl
+        tag: v1.32.2
+    features:
+      backgroundScan:
+        skipResourceFilters: false
+      policyExceptions:
+        enabled: true
+        namespace: kyverno
+kind: ConfigMap
+metadata:
+  labels:
+    app.kubernetes.io/name: kyverno
+    kustomize.toolkit.fluxcd.io/name: kyverno
+    kustomize.toolkit.fluxcd.io/namespace: flux-system
+  name: kyverno-helm-values-5gt2bkdg6m
+  namespace: kyverno
+
--- kubernetes/apps Kustomization: flux-system/cluster-apps Kustomization: flux-system/system-upgrade-controller-plans

+++ kubernetes/apps Kustomization: flux-system/cluster-apps Kustomization: flux-system/system-upgrade-controller-plans

@@ -18,13 +18,13 @@

   dependsOn:
   - name: system-upgrade-controller
   interval: 30m
   path: ./kubernetes/apps/talos-admin/system-upgrade-controller/plans
   postBuild:
     substitute:
-      KUBERNETES_VERSION: v1.32.1
+      KUBERNETES_VERSION: v1.32.2
       TALOS_VERSION: v1.9.9003
     substituteFrom:
     - kind: ConfigMap
       name: cluster-settings
     - kind: Secret
       name: cluster-secrets
--- kubernetes/apps/talos-admin/system-upgrade-controller/app Kustomization: flux-system/system-upgrade-controller HelmRelease: talos-admin/system-upgrade-controller

+++ kubernetes/apps/talos-admin/system-upgrade-controller/app Kustomization: flux-system/system-upgrade-controller HelmRelease: talos-admin/system-upgrade-controller

@@ -37,13 +37,13 @@

                   fieldRef:
                     fieldPath: metadata.namespace
               SYSTEM_UPGRADE_CONTROLLER_THREADS: '2'
               SYSTEM_UPGRADE_JOB_ACTIVE_DEADLINE_SECONDS: '900'
               SYSTEM_UPGRADE_JOB_BACKOFF_LIMIT: '10'
               SYSTEM_UPGRADE_JOB_IMAGE_PULL_POLICY: Always
-              SYSTEM_UPGRADE_JOB_KUBECTL_IMAGE: registry.k8s.io/kubectl:v1.32.1
+              SYSTEM_UPGRADE_JOB_KUBECTL_IMAGE: registry.k8s.io/kubectl:v1.32.2
               SYSTEM_UPGRADE_JOB_POD_REPLACEMENT_POLICY: Failed
               SYSTEM_UPGRADE_JOB_PRIVILEGED: 'true'
               SYSTEM_UPGRADE_JOB_TTL_SECONDS_AFTER_FINISH: '900'
               SYSTEM_UPGRADE_PLAN_POLLING_INTERVAL: 15m
             image:
               repository: docker.io/rancher/system-upgrade-controller
--- kubernetes/apps/talos-admin/system-upgrade-controller/plans Kustomization: flux-system/system-upgrade-controller-plans Plan: talos-admin/kubernetes

+++ kubernetes/apps/talos-admin/system-upgrade-controller/plans Kustomization: flux-system/system-upgrade-controller-plans Plan: talos-admin/kubernetes

@@ -47,8 +47,8 @@

     envs:
     - name: NODE_IP
       valueFrom:
         fieldRef:
           fieldPath: status.hostIP
     image: ghcr.io/jfroy/siderolabs/talosctl:v1.9.9003
-  version: v1.32.1
+  version: v1.32.2
 

[github-actions]

--- HelmRelease: talos-admin/system-upgrade-controller Deployment: talos-admin/system-upgrade-controller

+++ HelmRelease: talos-admin/system-upgrade-controller Deployment: talos-admin/system-upgrade-controller

@@ -68,13 +68,13 @@

           value: '900'
         - name: SYSTEM_UPGRADE_JOB_BACKOFF_LIMIT
           value: '10'
         - name: SYSTEM_UPGRADE_JOB_IMAGE_PULL_POLICY
           value: Always
         - name: SYSTEM_UPGRADE_JOB_KUBECTL_IMAGE
-          value: registry.k8s.io/kubectl:v1.32.1
+          value: registry.k8s.io/kubectl:v1.32.2
         - name: SYSTEM_UPGRADE_JOB_POD_REPLACEMENT_POLICY
           value: Failed
         - name: SYSTEM_UPGRADE_JOB_PRIVILEGED
           value: 'true'
         - name: SYSTEM_UPGRADE_JOB_TTL_SECONDS_AFTER_FINISH
           value: '900'
--- HelmRelease: kyverno/kyverno Job: kyverno/kyverno-remove-configmap

+++ HelmRelease: kyverno/kyverno Job: kyverno/kyverno-remove-configmap

@@ -19,13 +19,13 @@

     metadata: null
     spec:
       serviceAccount: kyverno-remove-configmap
       restartPolicy: Never
       containers:
       - name: kubectl
-        image: registry.k8s.io/kubectl:v1.32.1
+        image: registry.k8s.io/kubectl:v1.32.2
         imagePullPolicy: null
         command:
         - /bin/bash
         - -c
         - |-
           set -euo pipefail
--- HelmRelease: kyverno/kyverno Job: kyverno/kyverno-clean-reports

+++ HelmRelease: kyverno/kyverno Job: kyverno/kyverno-clean-reports

@@ -18,13 +18,13 @@

     metadata: null
     spec:
       serviceAccount: kyverno-admission-controller
       restartPolicy: Never
       containers:
       - name: kubectl
-        image: registry.k8s.io/kubectl:v1.32.1
+        image: registry.k8s.io/kubectl:v1.32.2
         imagePullPolicy: null
         command:
         - /bin/bash
         - -c
         - |
           set -euo pipefail
--- HelmRelease: kyverno/kyverno Job: kyverno/kyverno-scale-to-zero

+++ HelmRelease: kyverno/kyverno Job: kyverno/kyverno-scale-to-zero

@@ -19,13 +19,13 @@

     metadata: null
     spec:
       serviceAccount: kyverno-admission-controller
       restartPolicy: Never
       containers:
       - name: kubectl
-        image: registry.k8s.io/kubectl:v1.32.1
+        image: registry.k8s.io/kubectl:v1.32.2
         imagePullPolicy: null
         command:
         - /bin/bash
         - -c
         - |-
           set -euo pipefail