test new Flux release

for fluxcd/flux#3616,
fluxcd/flux#3615

* add a bunch of excludes to helmrelease for flux v1
* kustomize resource is not relevant for flux v1

The old kustomize should not be used as it is unsafe

* flux should not scan for kindest images either
* fixup index.docker.io

Signed-off-by: Kingdon Barrett <[email protected]>

infrastructure/flux-legacy/helmrelease.yaml

@@ -18,6 +18,8 @@ spec:
   interval: 10m0s
   timeout: 1m0s
   values:
+    image:
+      tag: 1.25.2
     git:
       url: [email protected]:kingdonb/tailscale-k8s.git
       branch: main
@@ -26,3 +28,5 @@ spec:
       options:
         - name: ndots
           value: "1"
+    registry:
+      excludeImage: cr.l5d.io/linkerd/*,docker.l5d.io/buoyantio/*,ghcr.io/fluxcd/*,ghcr.io/linuxserver/*,index.docker.io/kingdonb/*,index.docker.io/jenkins/*,index.docker.io/library/*,index.docker.io/okteto/*,index.docker.io/weaveworks/*,index.docker.io/grafana/*,index.docker.io/datawire/*,index.docker.io/hephy/*,index.docker.io/fluxcd/*,index.docker.io/prom/*,index.docker.io/buoyantio/*,index.docker.io/kiwigrid/*,index.docker.io/rancher/*,k8s.gcr.io/metrics-server/*,k8s.gcr.io/ingress-nginx/*,k8s.gcr.io/kube-state-metrics/*,k8s.gcr.io/coredns/*,k8s.gcr.io/kube-proxy,quay.io/keycloak/*,quay.io/jetstack/*,quay.io/metallb/*,quay.io/kiwigrid/*,quay.io/prometheus/*,quay.io/prometheus-operator/*,127.0.0.1:5555/*,index.docker.io/kindest/*

legacy/tailscale/kustomization.yaml

@@ -1,8 +1,8 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-namespace: tailscale
-resources:
-- role.yaml
-- rolebinding.yaml
-- sa.yaml
-- subnet-router.yaml
+# apiVersion: kustomize.config.k8s.io/v1beta1
+# kind: Kustomization
+# namespace: tailscale
+# resources:
+# - role.yaml
+# - rolebinding.yaml
+# - sa.yaml
+# - subnet-router.yaml