chore(deps): update dependency fluxcd/flux2 to v0.33.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
fluxcd/flux2		minor	v0.32.0 -> v0.33.0
fluxcd/flux2	Kustomization	minor	v0.32.0 -> v0.33.0

---

Release Notes

fluxcd/flux2

v0.33.0

Compare Source

Highlights

Flux v0.33.0 comes with new features and improvements. Users are encouraged to upgrade for the best experience.

Features and improvements

• HelmRepository.spec.provider Enable contextual login to container registries when pulling Helm charts from Amazon Elastic Container Registry, Azure Container Registry and Google Artifact Registry.
• OCIRepository.spec.layerSelector Select which layer contains the Kubernetes configs by specifying a matching OCI media type.
• Bucket.spec.secretRef Authenticate to Azure Blob storage using SAS tokens.
• Allow filtering OCI artifacts by semver and regex when listing artifact with flux list artifacts.
• Allow excluding local files and directories when building and publishing artifacts with flux push artifact.
• Mitigate denial-of-service on multi-tenant clusters by automatically recovering from panics encountered during reconciliation.
• Update controllers to Kubernetes v1.25.0, Kustomize v4.5.7 and Helm v3.9.4.

New documentation

• Secrets Management
• Contextual Authorization

Components changelog

• source-controller v0.27.0 v0.28.0
• kustomize-controller v0.27.1
• helm-controller v0.23.1
• notification-controller v0.25.2
• image-reflector-controller v0.20.1
• image-automation-controller v0.24.2

CLI Changelog

• PR #​3049 - @​stefanprodan - Update Kubernetes dependencies to v1.25.0
• PR #​3034 - @​snebel29 - Fix broken "edit this page" links in Flux CLI section
• PR #​3028 - @​snebel29 - Update tests/azure github.com/hashicorp/terraform-exec to v0.16.1
• PR #​3025 - @​stefanprodan - [RFC-0002] Add auth specification for Helm OCI
• PR #​3024 - @​stefanprodan - Add version validation to install commands
• PR #​3019 - @​somtochiama - Improve error message in get cmd
• PR #​3014 - @​stefanprodan - [RFC-0003] Select layer by OCI media type
• PR #​2999 - @​fluxcdbot - Update toolkit components
• PR #​2998 - @​somtochiama - Add --filter-semver and --filter-regex flags to list artifacts
• PR #​2997 - @​stefanprodan - Use ghcr.io in the static manifests
• PR #​2996 - @​stefanprodan - Update dependencies
• PR #​2995 - @​stefanprodan - Add --ignore-paths arg to flux build|push artifact
• PR #​2979 - @​stefanprodan - Status update for RFC-0002 and RFC-0003

---

Configuration

📅 Schedule: Branch creation - "on sunday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, click this checkbox.

---

This PR has been generated by Mend Renovate. View repository job log here.

[github-actions]

MegaLinter status: ✅ SUCCESS

Descriptor	Linter	Files	Fixed	Errors	Elapsed time
✅ COPYPASTE	jscpd	yes		no	1.1s
✅ KUBERNETES	kubeval	2		0	4.46s
✅ REPOSITORY	git_diff	yes		no	0.01s
✅ REPOSITORY	secretlint	yes		no	0.87s
✅ YAML	prettier	2		0	0.45s
✅ YAML	yamllint	2		0	0.11s

See errors details in artifact MegaLinter reports on CI Job page
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

MegaLinter is graciously provided by