chore(deps): update agent skills (plugins/gitops-kubernetes/skills/gitops-knowledge)

.claude-plugin/marketplace.json

@@ -15,7 +15,7 @@
     {
       "name": "gitops-kubernetes",
       "description": "Flux CD debugging, knowledge, and tenant onboarding — skills plus the Flux MCP server and a read-only Flux troubleshooter agent for live-cluster debugging",
-      "version": "1.0.4",
+      "version": "1.0.5",
       "source": "./plugins/gitops-kubernetes"
     },
     {

.github/plugin/marketplace.json

@@ -15,7 +15,7 @@
     {
       "name": "gitops-kubernetes",
       "description": "Flux CD debugging, knowledge, and tenant onboarding — skills plus the Flux MCP server and a read-only Flux troubleshooter agent for live-cluster debugging",
-      "version": "1.0.4",
+      "version": "1.0.5",
       "source": "./plugins/gitops-kubernetes"
     },
     {

plugins/gitops-kubernetes/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "gitops-kubernetes",
   "description": "Flux CD debugging, knowledge, and tenant onboarding — skills plus the Flux MCP server and a read-only Flux troubleshooter agent for live-cluster debugging",
-  "version": "1.0.4",
+  "version": "1.0.5",
   "author": {
     "name": "devantler-tech",
     "url": "https://github.com/devantler-tech"

plugins/gitops-kubernetes/CHANGELOG.md

@@ -1,5 +1,9 @@
 # Changelog — `gitops-kubernetes`
 
+## 1.0.5 — 2026-10-27
+
+**Changed** — sync `gitops-knowledge` from `https://github.com/fluxcd/agent-skills` at `refs/tags/v0.4.0`.
+
 ## 1.0.4 — 2026-10-27
 
 **Changed** — sync `gitops-cluster-debug` from `https://github.com/fluxcd/agent-skills` at `refs/tags/v0.4.0`.

plugins/gitops-kubernetes/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "gitops-kubernetes",
   "description": "Flux CD debugging, knowledge, and tenant onboarding — skills plus the Flux MCP server and a read-only Flux troubleshooter agent for live-cluster debugging",
-  "version": "1.0.4",
+  "version": "1.0.5",
   "author": {
     "name": "devantler-tech",
     "url": "https://github.com/devantler-tech"

plugins/gitops-kubernetes/skills/gitops-knowledge/SKILL.md

@@ -4,9 +4,9 @@ description: |
 license: Apache-2.0
 metadata:
     github-path: skills/gitops-knowledge
-    github-ref: refs/tags/v0.3.0
+    github-ref: refs/tags/v0.4.0
     github-repo: https://github.com/fluxcd/agent-skills
-    github-tree-sha: d2ac2832df36d71727c39e1740db43760180d215
+    github-tree-sha: 51871054237119b83bedda9df029a69b0a647d1e
 name: gitops-knowledge
 ---
 # Flux CD Knowledge Base
@@ -58,7 +58,7 @@ The field index for each CRD is `assets/schemas/<kind>-<group>-<version>.fields.
 | ArtifactGenerator | source.extensions.fluxcd.io/v1beta1 | source-watcher | `references/sources.md` |
 | Kustomization | kustomize.toolkit.fluxcd.io/v1 | kustomize-controller | `references/kustomization.md` |
 | HelmRelease | helm.toolkit.fluxcd.io/v2 | helm-controller | `references/helmrelease.md` |
-| Provider, Alert | notification.toolkit.fluxcd.io/v1beta3 | notification-controller | `references/notifications.md` |
+| Provider, Alert | notification.toolkit.fluxcd.io/v1 | notification-controller | `references/notifications.md` |
 | Receiver | notification.toolkit.fluxcd.io/v1 | notification-controller | `references/notifications.md` |
 | ImageRepository, ImagePolicy | image.toolkit.fluxcd.io/v1 | image-reflector-controller | `references/image-automation.md` |
 | ImageUpdateAutomation | image.toolkit.fluxcd.io/v1 | image-automation-controller | `references/image-automation.md` |
@@ -68,7 +68,7 @@ The field index for each CRD is `assets/schemas/<kind>-<group>-<version>.fields.
 | Repository structure, monorepo vs multi-repo, OCI-based fleet management | `references/repo-patterns.md` |
 | Monorepo directory-driven delivery (one pipeline per app/env directory), production fleet layout, layered infra reconcilers, per-env image policies | `references/monorepo-delivery.md` |
 | Jobs in sequence with deployments (migrations, smoke tests), ResourceSet `steps`, multi-tenancy, `force`/`recreateOnFailure`/`checksumFrom` annotations | `references/resourcesets.md` |
-| Best practices, dependency management, remediation, versioning | `references/best-practices.md` |
+| Best practices, dependency management, remediation, versioning, SPIFFE mTLS, object identity | `references/best-practices.md` |
 | Gitless GitOps, Flux OCI artifacts, `flux push artifact`, registry-based delivery | `references/gitless-gitops.md` |
 | Gitless image automation (ResourceSet + OCIArtifactTag) | `references/gitless-image-automation.md` |
 | Flux CLI and plugins: `flux schema` discover/validate/extract, local rendering with `flux build` and `flux operator build`, overlay debugging | `references/flux-cli.md` |
@@ -197,7 +197,8 @@ spec:
 ```
 
 For HTTPS Helm repositories use `HelmRepository` + `HelmRelease` with `spec.chart.spec`
-(`chart`, `version: "3.x"`, `sourceRef`) instead of `chartRef` — see `references/helmrelease.md`.
+(`chart`, `version: "3.x"`, `sourceRef`) instead of `chartRef`. For an OCI chart owned by one HelmRelease,
+2.10+ also allows `spec.chart.kind: OCIRepository` — see `references/helmrelease.md`.
 
 ### 3. FluxInstance with OCI Sync (Gitless GitOps)
 
@@ -252,7 +253,7 @@ and the `reconcileEvery` annotation — load `references/resourcesets.md`.
 
 ### 6. Notifications
 
-`Provider` + `Alert` (`v1beta3`) for outgoing notifications, `Receiver` (`v1`) for incoming
+`Provider` + `Alert` (`v1`) for outgoing notifications, `Receiver` (`v1`) for incoming
 webhooks. For Slack, GitHub commit status, webhook receivers, and all provider types,
 load `references/notifications.md`.
 
@@ -263,7 +264,7 @@ load `references/notifications.md`.
 - Go templates `{{ }}` are only used in ImageUpdateAutomation `.spec.git.commit.messageTemplate`
 
 **Mutual exclusivity:**
-- HelmRelease: `spec.chart.spec` and `spec.chartRef` are mutually exclusive
+- HelmRelease: `spec.chart` and `spec.chartRef` are mutually exclusive
 - FluxInstance: only one per cluster, must be named `flux`
 
 **HelmRelease strategy fields:**

plugins/gitops-kubernetes/skills/gitops-knowledge/assets/schemas/alert-notification-v1.fields.txt

@@ -0,0 +1,19 @@
+# schema source: Flux v2.10.0 https://github.com/fluxcd/flux2
+apiVersion <string> enum=notification.toolkit.fluxcd.io/v1
+kind <string> enum=Alert
+metadata.name <string> (required)
+metadata.namespace <string> (required)
+spec <object>	# AlertSpec defines an alerting rule for events involving a list of objects.
+spec.eventMetadata <map[string]string>	# EventMetadata adds metadata to events. Sources, from lowest to highest precedence: `event.toolkit.fluxcd.io/` annotations on the involved object, Alert `.spec.eventMetadata`, and controller-defined `<controller group>.toolkit.fluxcd.io/` event metadata. Higher precedence wins; conflicts produce an info log and a Warning Event. See the Alert API docs (Event metadata section).
+spec.eventSeverity <string> enum=info|error default="info"	# EventSeverity specifies how to filter events based on severity. If set to 'info' no events will be filtered.
+spec.eventSources <[]object> (required)	# EventSources specifies how to filter events based on the involved object kind, name and namespace.
+spec.eventSources[].apiVersion <string>	# API version of the referent
+spec.eventSources[].kind <string> (required) enum=Bucket|GitRepository|Kustomization|HelmRelease|HelmChart|HelmRepository|ImageRepository|ImagePolicy|ImageUpdateAutomation|OCIRepository|ArtifactGenerator|ExternalArtifact|FluxInstance|ResourceSet|ResourceSetInputProvider	# Kind of the referent
+spec.eventSources[].matchLabels <map[string]string>	# MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed. MatchLabels requires the name to be set to `*`.
+spec.eventSources[].name <string> (required) min=1 max=253	# Name of the referent If multiple resources are targeted `*` may be set.
+spec.eventSources[].namespace <string> min=1 max=253	# Namespace of the referent
+spec.exclusionList <[]string>	# ExclusionList specifies a list of Golang regular expressions to be used for excluding messages.
+spec.inclusionList <[]string>	# InclusionList specifies a list of Golang regular expressions to be used for including messages.
+spec.providerRef <object> (required)	# ProviderRef specifies which Provider this Alert should use.
+spec.providerRef.name <string> (required)	# Name of the referent.
+spec.suspend <boolean>	# Suspend tells the controller to suspend subsequent events handling for this Alert.

plugins/gitops-kubernetes/skills/gitops-knowledge/assets/schemas/alert-notification-v1beta3.fields.txt

@@ -1,5 +1,5 @@
-# schema source: Flux v2.9.4 https://github.com/fluxcd/flux2
-apiVersion <string> enum=notification.toolkit.fluxcd.io/v1beta3
+# schema source: Flux v2.10.0 https://github.com/fluxcd/flux2
+apiVersion <string> enum=notification.toolkit.fluxcd.io/v1beta3 (deprecated)	# v1beta3 Alert is deprecated, upgrade to v1
 kind <string> enum=Alert
 metadata.name <string> (required)
 metadata.namespace <string> (required)