fix(container): update registry.k8s.io/kubectl ( v1.32.1 → v1.32.2 )

[renovate]

This PR contains the following updates:

Package	Update	Change
registry.k8s.io/kubectl	patch	v1.32.1 -> v1.32.2

---

Configuration

📅 Schedule: Branch creation - "on monday,on wednesday,on friday" in timezone Europe/Berlin, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

kustomization changes in kubernetes/main

--- kubernetes/main/apps/monitoring/kube-web-view/app Kustomization: monitoring/kube-web-view HelmRelease: monitoring/kube-web-view

+++ kubernetes/main/apps/monitoring/kube-web-view/app Kustomization: monitoring/kube-web-view HelmRelease: monitoring/kube-web-view

@@ -71,21 +71,21 @@

           proxy-main:
             args:
             - proxy
             - --port=8001
             image:
               repository: registry.k8s.io/kubectl
-              tag: v1.32.1
+              tag: v1.32.2
           proxy-storage:
             args:
             - proxy
             - --port=8002
             - --kubeconfig=/kubeconfig
             image:
               repository: registry.k8s.io/kubectl
-              tag: v1.32.1
+              tag: v1.32.2
         serviceAccount:
           name: kube-web-view
         strategy: RollingUpdate
     ingress:
       app:
         annotations:
--- kubernetes/main/apps/system-upgrade/system-upgrade-controller/app Kustomization: system-upgrade/system-upgrade-controller HelmRelease: system-upgrade/system-upgrade-controller

+++ kubernetes/main/apps/system-upgrade/system-upgrade-controller/app Kustomization: system-upgrade/system-upgrade-controller HelmRelease: system-upgrade/system-upgrade-controller

@@ -42,13 +42,13 @@

                   fieldRef:
                     fieldPath: metadata.namespace
               SYSTEM_UPGRADE_CONTROLLER_THREADS: 2
               SYSTEM_UPGRADE_JOB_ACTIVE_DEADLINE_SECONDS: 900
               SYSTEM_UPGRADE_JOB_BACKOFF_LIMIT: 99
               SYSTEM_UPGRADE_JOB_IMAGE_PULL_POLICY: IfNotPresent
-              SYSTEM_UPGRADE_JOB_KUBECTL_IMAGE: registry.k8s.io/kubectl:v1.32.1
+              SYSTEM_UPGRADE_JOB_KUBECTL_IMAGE: registry.k8s.io/kubectl:v1.32.2
               SYSTEM_UPGRADE_JOB_PRIVILEGED: true
               SYSTEM_UPGRADE_JOB_TTL_SECONDS_AFTER_FINISH: 900
               SYSTEM_UPGRADE_PLAN_POLLING_INTERVAL: 15m
             image:
               repository: docker.io/rancher/system-upgrade-controller
               tag: v0.14.2@sha256:3cdbfdd90f814702cefb832fc4bdb09ea93865a4d06c6bafd019d1dc6a9f34c9
--- kubernetes/main/apps/external-secrets/external-secrets/app Kustomization: external-secrets/external-secrets HelmRelease: external-secrets/external-secrets

+++ kubernetes/main/apps/external-secrets/external-secrets/app Kustomization: external-secrets/external-secrets HelmRelease: external-secrets/external-secrets

@@ -13,13 +13,13 @@

     spec:
       chart: external-secrets
       sourceRef:
         kind: HelmRepository
         name: external-secrets
         namespace: flux-system
-      version: 0.14.2
+      version: 0.14.1
   install:
     remediation:
       retries: 3
   interval: 2h
   upgrade:
     cleanupOnFail: true

[github-actions]

helmrelease changes in kubernetes/main

--- HelmRelease: monitoring/kube-web-view Deployment: monitoring/kube-web-view

+++ HelmRelease: monitoring/kube-web-view Deployment: monitoring/kube-web-view

@@ -64,19 +64,19 @@

           requests:
             cpu: 5m
             memory: 100Mi
       - args:
         - proxy
         - --port=8001
-        image: registry.k8s.io/kubectl:v1.32.1
+        image: registry.k8s.io/kubectl:v1.32.2
         name: proxy-main
       - args:
         - proxy
         - --port=8002
         - --kubeconfig=/kubeconfig
-        image: registry.k8s.io/kubectl:v1.32.1
+        image: registry.k8s.io/kubectl:v1.32.2
         name: proxy-storage
         volumeMounts:
         - mountPath: /kubeconfig
           name: storage-auth
           subPath: kubeconfig
       volumes:
--- HelmRelease: system-upgrade/system-upgrade-controller Deployment: system-upgrade/system-upgrade-controller

+++ HelmRelease: system-upgrade/system-upgrade-controller Deployment: system-upgrade/system-upgrade-controller

@@ -71,13 +71,13 @@

           value: '900'
         - name: SYSTEM_UPGRADE_JOB_BACKOFF_LIMIT
           value: '99'
         - name: SYSTEM_UPGRADE_JOB_IMAGE_PULL_POLICY
           value: IfNotPresent
         - name: SYSTEM_UPGRADE_JOB_KUBECTL_IMAGE
-          value: registry.k8s.io/kubectl:v1.32.1
+          value: registry.k8s.io/kubectl:v1.32.2
         - name: SYSTEM_UPGRADE_JOB_PRIVILEGED
           value: 'true'
         - name: SYSTEM_UPGRADE_JOB_TTL_SECONDS_AFTER_FINISH
           value: '900'
         - name: SYSTEM_UPGRADE_PLAN_POLLING_INTERVAL
           value: 15m
--- HelmRelease: external-secrets/external-secrets Deployment: external-secrets/external-secrets-cert-controller

+++ HelmRelease: external-secrets/external-secrets Deployment: external-secrets/external-secrets-cert-controller

@@ -34,13 +34,13 @@

             - ALL
           readOnlyRootFilesystem: true
           runAsNonRoot: true
           runAsUser: 1000
           seccompProfile:
             type: RuntimeDefault
-        image: ghcr.io/external-secrets/external-secrets:v0.14.2
+        image: ghcr.io/external-secrets/external-secrets:v0.14.1
         imagePullPolicy: IfNotPresent
         args:
         - certcontroller
         - --crd-requeue-interval=5m
         - --service-name=external-secrets-webhook
         - --service-namespace=external-secrets
--- HelmRelease: external-secrets/external-secrets Deployment: external-secrets/external-secrets

+++ HelmRelease: external-secrets/external-secrets Deployment: external-secrets/external-secrets

@@ -34,13 +34,13 @@

             - ALL
           readOnlyRootFilesystem: true
           runAsNonRoot: true
           runAsUser: 1000
           seccompProfile:
             type: RuntimeDefault
-        image: ghcr.io/external-secrets/external-secrets:v0.14.2
+        image: ghcr.io/external-secrets/external-secrets:v0.14.1
         imagePullPolicy: IfNotPresent
         args:
         - --enable-leader-election=true
         - --concurrent=1
         - --metrics-addr=:8080
         - --loglevel=info
--- HelmRelease: external-secrets/external-secrets Deployment: external-secrets/external-secrets-webhook

+++ HelmRelease: external-secrets/external-secrets Deployment: external-secrets/external-secrets-webhook

@@ -34,13 +34,13 @@

             - ALL
           readOnlyRootFilesystem: true
           runAsNonRoot: true
           runAsUser: 1000
           seccompProfile:
             type: RuntimeDefault
-        image: ghcr.io/external-secrets/external-secrets:v0.14.2
+        image: ghcr.io/external-secrets/external-secrets:v0.14.1
         imagePullPolicy: IfNotPresent
         args:
         - webhook
         - --port=10250
         - --dns-name=external-secrets-webhook.external-secrets.svc
         - --cert-dir=/tmp/certs