Merge pull request #2411 from fluxcd/gate-watch-config

Add feature gate for disabling config watchers

Author: matheuscscp

content/en/flux/components/helm/options.md

@@ -55,6 +55,7 @@ please see the [bootstrap customization guide](/flux/installation/configuration/
 | `AllowDNSLookups`             | `false`       | Allows the controller to perform DNS lookups when rendering Helm templates. This is disabled by default, as it can be a security risk.                                                                                                        |
 | `CacheSecretsAndConfigMaps`   | `false`       | Configures the caching of Secrets and ConfigMaps by the controller-runtime client. When enabled, it will cache both object types, resulting in increased memory usage and cluster-wide RBAC permissions (list and watch).                     |
 | `DisableChartDigestTracking`  | `false`       | Disables the tracking of digest changes for Helm OCI charts. When set to `true`, the controller will not append the OCI digest to the chart version in `Chart.yaml`.                                                                          |
+| `DisableConfigWatchers`       | `false`       | Disables the watchers for ConfigMaps and Secrets.                                                                                                                                                                                             |
 | `ExternalArtifact`            | `true`        | Enables support for the [ExternalArtifact](https://github.com/fluxcd/source-controller/blob/main/docs/spec/v1/externalartifacts.md) source type.                                                                                              |
 | `ObjectLevelWorkloadIdentity` | `false`       | Enables the use of object-level workload identity for the controller.                                                                                                                                                                         |
 | `OOMWatch`                    | `false`       | Enables the OOM watcher, which will gracefully shut down the controller when the memory usage exceeds the configured limit. This is disabled by default.                                                                                      |

content/en/flux/components/kustomize/options.md

@@ -52,6 +52,7 @@ please see the [bootstrap customization guide](/flux/installation/configuration/
 | `AdditiveCELDependencyCheck`     | `false`       | Run both the built-in health checks and the CEL expression `readyExpr` when `readyExpr` is configured on a Kustomization.                                                                                                                                               |
 | `CacheSecretsAndConfigMaps`      | `false`       | Configures the caching of Secrets and ConfigMaps by the controller-runtime client. When enabled, it will cache both object types, resulting in increased memory usage and cluster-wide RBAC permissions (list and watch).                                               |
 | `CancelHealthCheckOnNewRevision` | `false`       | Cancels ongoing health checks when a new revision is detected.                                                                                                                                                                                                          |
+| `DisableConfigWatchers`          | `false`       | Disables the watchers for ConfigMaps and Secrets.                                                                                                                                                                                                                       |
 | `DisableFailFastBehavior`        | `false`       | Controls whether the fail-fast behavior when waiting for resources to become ready should be disabled.                                                                                                                                                                  |
 | `DisableStatusPollerCache`       | `true`        | Disables the cache of the status poller, which is used to determine the health of the resources applied by the controller. This may have a positive impact on memory usage on large clusters with many objects, at the cost of an increased number of direct API calls. |
 | `ExternalArtifact`               | `true`        | Enables support for the [ExternalArtifact](https://github.com/fluxcd/source-controller/blob/main/docs/spec/v1/externalartifacts.md) source type.                                                                                                                        |

content/en/flux/components/notification/options.md

@@ -38,4 +38,5 @@ please see the [bootstrap customization guide](/flux/installation/configuration/
 | Name                          | Default Value | Description                                                                                                                                                                                                               |
 |-------------------------------|---------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
 | `CacheSecretsAndConfigMaps`   | `false`       | Configures the caching of Secrets and ConfigMaps by the controller-runtime client. When enabled, it will cache both object types, resulting in increased memory usage and cluster-wide RBAC permissions (list and watch). |
+| `DisableConfigWatchers`       | `false`       | Disables the watchers for ConfigMaps and Secrets.                                                                                                                                                                         |
 | `ObjectLevelWorkloadIdentity` | `false`       | Enables the use of object-level workload identity for the controller.                                                                                                                                                     |