Merge branch 'main' into scripts-update

.github/workflows/spellcheck.yaml

@@ -12,6 +12,6 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Code Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
       - name: Spellcheck
-        uses: rojopolis/spellcheck-github-actions@0.38.0
+        uses: rojopolis/spellcheck-github-actions@cd079c0f6a24c326cb8a4fa5dc8bbf16227990bd # 0.40.0

.github/workflows/validate-manifests.yaml

@@ -14,6 +14,32 @@ on:  # yamllint disable-line rule:truthy
       - docs/*.md
 
 jobs:
+  lint-kustomize:
+    runs-on: ubuntu-latest
+    # env:
+    # KUSTOMIZE_URL: "https://github.com/kubernetes-sigs/kustomize/releases/download/kustomize/v5.0.0/kustomize_v5.0.0_linux_amd64.tar.gz"
+    # BIN_PATH: /usr/local/bin
+    steps:
+      # Kustomize now comes pre-installed on the "ubuntu-latest" image, no need for manual installation
+      #
+      # - name: Install Kustomize
+      #   run: |
+      #     echo "Downloading Kustomize from URL: ${KUSTOMIZE_URL} and saving into ${BIN_PATH}/"
+      #     sudo curl --location --no-buffer "${KUSTOMIZE_URL}" | tar -xvz -C "${BIN_PATH}/"
+      #     sudo chmod +x ${BIN_PATH}/kustomize
+      #
+      - name: Code Checkout
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
+
+      - name: Verify Kustomize CLI Installation
+        run: |
+          which kustomize
+          kustomize version
+
+      - name: Validate Manifests
+        run: |
+          [ -d ./bootstrap/base ] && touch bootstrap/base/sealed-secrets-secret.yaml
+          ./scripts/validate_manifests.sh
 
   lint-yaml:
     runs-on: ubuntu-latest