From 247f0dc344235c176f6f4f900c6ed42b553532f9 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]" <github-actions[bot]@users.noreply.github.com>
Date: Fri, 2 Oct 2026 03:28:58 +0000
Subject: [PATCH] Release kubemirror 0.10.9

---
 charts/kubemirror/Chart.yaml                |   4 +-
 charts/kubemirror/README.md                 |  83 ++++++++++++++++++++
 charts/kubemirror/templates/deployment.yaml |   4 +-
 charts/kubemirror/values.yaml               |   7 +-
 charts/packages/kubemirror-0.10.9.tgz       | Bin 0 -> 5371 bytes
 index.yaml                                  |  24 +++++-
 6 files changed, 113 insertions(+), 9 deletions(-)
 create mode 100644 charts/kubemirror/README.md
 create mode 100644 charts/packages/kubemirror-0.10.9.tgz

diff --git a/charts/kubemirror/Chart.yaml b/charts/kubemirror/Chart.yaml
index 6550b8a..99f851b 100644
--- a/charts/kubemirror/Chart.yaml
+++ b/charts/kubemirror/Chart.yaml
@@ -2,8 +2,8 @@ apiVersion: v2
 name: kubemirror
 description: Kubernetes controller for mirroring resources across namespaces
 type: application
-version: 0.9.22
-appVersion: "0.9.22"
+version: 0.10.9
+appVersion: "0.10.9"
 keywords:
   - kubernetes
   - controller
diff --git a/charts/kubemirror/README.md b/charts/kubemirror/README.md
new file mode 100644
index 0000000..cd54edc
--- /dev/null
+++ b/charts/kubemirror/README.md
@@ -0,0 +1,83 @@
+# kubemirror Helm chart
+
+Deploys the [kubemirror](https://github.com/lukaszraczylo/kubemirror) controller,
+which mirrors Kubernetes resources (Secrets, ConfigMaps, and other types) across
+namespaces.
+
+- Chart version: `0.1.0`
+- App version: `0.1.0`
+- Image: `ghcr.io/lukaszraczylo/kubemirror`
+
+## Install
+
+```bash
+helm install kubemirror ./charts/kubemirror -n kubemirror --create-namespace
+```
+
+With a values override:
+
+```bash
+helm install kubemirror ./charts/kubemirror -n kubemirror --create-namespace \
+  -f my-values.yaml
+```
+
+## Uninstall
+
+```bash
+helm uninstall kubemirror -n kubemirror
+```
+
+## What it creates
+
+A single-replica `Deployment`, a `ServiceAccount`, a cluster-scoped `ClusterRole`
++ `ClusterRoleBinding` (the controller watches resources across all namespaces),
+and a `Service` exposing the metrics (`8080`) and health (`8081`) ports. The
+container runs as non-root (uid `65532`) with a read-only root filesystem and all
+Linux capabilities dropped.
+
+## Values
+
+Defaults are taken from [`values.yaml`](values.yaml).
+
+| Key | Default | Description |
+| --- | --- | --- |
+| `replicaCount` | `1` | Number of controller replicas. |
+| `image.repository` | `ghcr.io/lukaszraczylo/kubemirror` | Controller image. |
+| `image.tag` | `"0.1.0"` | Image tag (falls back to chart `appVersion` if empty). |
+| `image.pullPolicy` | `IfNotPresent` | Image pull policy. |
+| `serviceAccount.create` | `true` | Create a ServiceAccount. |
+| `serviceAccount.name` | `""` | Override the generated ServiceAccount name. |
+| `controller.metricsBindAddress` | `":8080"` | `--metrics-bind-address`. |
+| `controller.healthProbeBindAddress` | `":8081"` | `--health-probe-bind-address`. |
+| `controller.leaderElect` | `true` | Enable leader election (`--leader-elect`). |
+| `controller.leaderElectionID` | `"kubemirror-controller-leader"` | Lease name (`--leader-election-id`). |
+| `controller.resourceTypes` | `[]` | Resource types to mirror (`--resource-types`). Empty enables auto-discovery. |
+| `controller.discoveryInterval` | `"5m"` | Auto-discovery interval (`--discovery-interval`). |
+| `controller.resyncPeriod` | `"1h"` | Cache resync period, safety net only (`--resync-period`). |
+| `controller.maxTargets` | `100` | Max target namespaces per resource (`--max-targets`). |
+| `controller.workerThreads` | `5` | Concurrent reconcile workers (`--worker-threads`). |
+| `controller.rateLimitQPS` | `50.0` | API QPS limit (`--rate-limit-qps`). |
+| `controller.rateLimitBurst` | `100` | API burst limit (`--rate-limit-burst`). |
+| `controller.verifySourceFreshness` | `false` | Verify cache against a direct API read (`--verify-source-freshness`). |
+| `controller.lazyWatcherInit` | `false` | Only watch resource types actually in use (`--lazy-watcher-init`). Lowers memory; recommended for production. |
+| `controller.watcherScanInterval` | `"5m"` | Scan interval for new types in lazy mode (`--watcher-scan-interval`). |
+| `controller.excludedNamespaces` | `""` | Comma-separated namespaces never mirrored to (`--excluded-namespaces`). |
+| `controller.includedNamespaces` | `""` | Comma-separated namespace patterns to include (`--included-namespaces`). |
+| `service.type` | `ClusterIP` | Service type. |
+| `service.metricsPort` | `8080` | Metrics port. |
+| `service.healthPort` | `8081` | Health-probe port. |
+| `resources.requests` | `100m` CPU / `128Mi` | Container requests. |
+| `resources.limits` | `500m` CPU / `512Mi` | Container limits. |
+| `nodeSelector` / `tolerations` / `affinity` | `{}` / `[]` / `{}` | Standard scheduling controls. |
+| `priorityClassName` | `""` | Pod priority class. |
+
+> **Memory tip:** setting `controller.resourceTypes` to the exact types you mirror
+> (e.g. `["Secret.v1", "ConfigMap.v1"]`), or enabling `controller.lazyWatcherInit`,
+> avoids creating watchers for unused resource types and cuts memory use
+> substantially versus full auto-discovery.
+
+## Usage
+
+After install, mark a source resource for mirroring and opt a target namespace
+in. See the [project README](../../README.md) and [examples](../../examples/) for
+the full annotation/label reference and worked scenarios.
diff --git a/charts/kubemirror/templates/deployment.yaml b/charts/kubemirror/templates/deployment.yaml
index b0f897f..704dc08 100644
--- a/charts/kubemirror/templates/deployment.yaml
+++ b/charts/kubemirror/templates/deployment.yaml
@@ -43,9 +43,7 @@ spec:
             - --worker-threads={{ .Values.controller.workerThreads }}
             - --rate-limit-qps={{ .Values.controller.rateLimitQPS }}
             - --rate-limit-burst={{ .Values.controller.rateLimitBurst }}
-            {{- if .Values.controller.verifySourceFreshness }}
-            - --verify-source-freshness=true
-            {{- end }}
+            - --verify-source-freshness={{ .Values.controller.verifySourceFreshness }}
             {{- if .Values.controller.lazyWatcherInit }}
             - --lazy-watcher-init=true
             {{- end }}
diff --git a/charts/kubemirror/values.yaml b/charts/kubemirror/values.yaml
index dd98715..f84db2a 100644
--- a/charts/kubemirror/values.yaml
+++ b/charts/kubemirror/values.yaml
@@ -3,7 +3,7 @@ replicaCount: 1
 image:
   repository: ghcr.io/lukaszraczylo/kubemirror
   pullPolicy: IfNotPresent
-  tag: "0.9.22"
+  tag: "0.10.9"
 
 imagePullSecrets: []
 nameOverride: ""
@@ -54,10 +54,11 @@ controller:
   # How often to rediscover available resources in the cluster
   discoveryInterval: "5m"
 
-  # Cache resync period - how often to refresh all cached resources
+  # Cache resync period - safety net for missed watch events; mirror drift
+  # is repaired event-driven, so this can stay long
   # Higher values reduce memory churn and API load
   # Default: 10m (was 30s in earlier versions)
-  resyncPeriod: "10m"
+  resyncPeriod: "1h"
 
   # Resource limits
   maxTargets: 100
diff --git a/charts/packages/kubemirror-0.10.9.tgz b/charts/packages/kubemirror-0.10.9.tgz
new file mode 100644
index 0000000000000000000000000000000000000000..4b5695c14873bf9af080f74eb4aaea4f1c0fcb3c
GIT binary patch
literal 5371
zcmV<X6a?!ZiwG0|00000|0w_~VMtOiV@ORlOnEsqVl!4SWK%V1T2nbTPgYhoO;>Dc
zVQyr3R8em|NM&qo0PH;dbKAJF_cQ;B9i=y8rzR~qv7M@OH_zv|t*7~L<McY6yi5g=
zD+x6T@BmP@F3$h{1`F_0l;wOhH+^ILV2dQMy8srui`@mTiYaDXDXI2P7fhLG#j^Cf
zuUm%0;qd6`Q~Ey~4!i${N2BBKMu!K7$43VTPmV|54M$I&91p*P;a8@kw-nki_1*A`
zadkWQUs71ke@3Ob6k}K(1T4?1$6+)YMt=wr)Uo2Zp?7~Rrl<rO)DTNyluT1pFp~-#
z6LB#Ig<2LWMhz@hQfm+_L!Gl2b+C{bj$vU;uE+cPb8Z&JG>T=mpB7h4|EgI0>nfG|
zHCF~#xVn}q(c>V5s|tG%Ht+|b#~y^BF;-~&_ZgpOEZ0HCxG;<hR0IYy#?vu4l>g&#
zS}Fn{TF3B$KEWIJDR3_vMEMR{V4u<#v&wM{EYDLOGdrNcvNPD<eEu8jf63AU^?yJB
zY+3(@$D>hq{U041J*@w4Q4|t0p2|X)F^qzMXKaq+06<|bH8)bN#xP&RD&lf8X9MI#
znqJ71$Ez`%&t6G$p-`hR0f1riF$^4s4?Kp8B26#dS{=i?_q4=bFHtF;;1~vjU{<8*
z+RH$rTJjiA;+O~y0AhvA;24Z5FaTgeNJDE&kKx0|YDL?|xlB$PpDoc!W@r{zXxlp-
zD`pqyz``1=ea@vaV;DReJ{$IYWM(mj!G4BD@mM=-mlzj{o7Jfl25*R5RfrS)N{Tm9
znu=(8`FD+K3`d8DPYwcrnf|kqMP9$q7{@ZpFO;0|lqLwk$&)vQFg(NOIAcX>>=><K
zWoas}FBD($6z6!RW0o=}&}S^wL;|wpwMbW%u0Qb<^-3Ge+7x!lj#<v8JmrR?b_69#
z=I$3j2q!OI1VJsP?T1J3(hU$Wk-!33Y8HSZ$t4#?2LOKje&QlINfL!xk6|z_$J{lz
zP;!dvHAaJgFuXvPpaM)WCK(Hm(wj5;q9VTWj!SX=d<=t{pTnB!&{g!X-+0|dL$AR|
zs20E@IJ;q4o}y*wf#dCHIU4N2;FMI+OP2fRb1}DcN6S$p&|FJ(#l<|jdS*Gvet*f6
zB*kl{Fj|gSnlIQWGK%4hU)dV(3ETM$Fw4zq4_IMjm~b7-C8`x%^E8DS7m1yAPam76
zSSw~X5oa%7zxgM;J--;kWsWhQt*rLO8x|YiJ%veO^>~JvR4bUS;CL858-5Q<-9bta
zPi2-#;o6R&8i74%_Mdpo(ec(*eD~gs?Mb^ETo_bKmcot{=?V&s30yBww3`FhZWwk6
z#$V($$eBT5r$%834cL<Lv^@yG1(*dwoEF-koxuwCxko*Q!C~fS{*=WFYP}LM<fynz
zAOy{3XjUN5cq2#?nasosz$FT!|LA7`62)hRKyf>=IpYcwS1C*sU!vFpEx|0fhL{P^
zhOHo#V(vP|=L=NebhMwCa$e#^p#&|clZ$gmB}=G@7YJh*4KvueW*VLhsn^I<$}KQw
zeCS;_Co2(OP`}177%jRCpYn{m70PbjGBqc`JsJ)J0L#Fr-Y%>R(PKFD(|K_YiW%RM
zQ$OtU3;X!Di_0+_4x?f7<xhpu#sO^%`Anf+2-Mor%V(wK<QXn!%G#n-^O~ClBwS%^
z9Cl=h<%0x`eZ|F0stlE{oiaDF7s^dk!-Ca@r3eW#45ozvmLwYR#wbQ$W4o+~6CEI~
zT?0Q}vCJ|Q2_{~+I>wONK!SNHR~aGOA*2OMt(~g5HYnni1;yeRb7NW6P78H;bxBk3
zr*a@lsqLg4`*r0Q4i#|04QDC;mBt8m-khDje);n3)$_CGL`JS;QjoxN%f(83uR(P+
zKANhkj-*>K11z=_rz=>nWpgEEOkH8p-Uc`pR4ikL$JD4JO$yEC2q9oJkM@AiU?mF&
z_+a?7XTf?x?1Wf>K=2RzOPYC4MMc)0UrWAwBt;I&p|ai8#xjVUS%h9U5oMY!xtQy*
z1@37-9)^Dyeh;x@IN~Z~^R*FguRAyWJB3CCGB+WoQBT>gtA98m&ILEE$@K3*TLDlD
zK-(nrgohR*WHLeOQIFW8#tq3v^CIxNcS;48@(PtM^@^PdmL$N|o7F0B54dr<W{Q4^
zSy0?8NU(BUb)Y>ehjyFgF<!<@^a<Nn<&F_%JT>U~32)-GNHD3sYO?D9xaj>*T8q~3
zaHi6!8<F#i+S0fntIir2wS7^(8U;bcO%{lgfzH5*^TJB7VMb4mr^j$OI(W%Roc>av
zZq*%i>y8edz2re4WP+DutVl&BYhYxGs<dIPc4V`eo%NOboGUKLzDt?buS)CoGwuJz
z{?A~Rr*^6Azk2=l>@qSp=IiV+w(S27o;)3P_J4=Nqr->&-?u1l7ff8yg11t_%0!l?
zRtJ9g0Fm<uS{8$kAEO}nr!1^uNReq$dv<G;P|Y{)Wuxv}X-#Y;Ad?D#O=V$7DEa1l
zVAN`CSNrc^foWz{s3~+GFbKukYbP8&eyrQi(U86SsQ`k%7E^rbOf=gid2Kg4!VZD8
zs7SzBTesF@-k!U|&E>l9>oIQ$gH*L4yhrktq~wc}pUz%5>+RL6*KbeWp1*!|IWCp^
z6jRu-(uAx<J4aTip$aum8q#ss3YvN?M-8XeJ_@TxlWJe<th4q;ctcZb6E^n48)_Lc
z2Sd@6zSYBMulji~2!hwjTJkVpX*#HNiT!0KuLj{%x@8#JyN0fwhSZJ-jm{?!W0BF6
z5G<?KDh{A+LX3Qgo|Lu)QO(j;ye%^8vHqFkb<<Uv%DMJzZvn+7rB`>cD1<4nJdbMc
zXT;^c?ZOWqK9stzxqFT5w*f@N-lq$UuS#Xt!JJEF!kJXpOeJ?xpqKIf23)0|#^DP+
zA_DcZb0~T(95oa!eEc}xT7yW93zd?Ob-cfy%9y1Ksm=Dbr61<oJ5>M6O0WL^*8<ZV
zm5xmQHC(}4^#7C5)1$8bKR$Z$p#Q%``S4-?ad38%Tm56DtzF7?OGNtzQvbo@{f{4m
z4<ABEaK=TSqzUT^*2Zrc4&^#+`f}kGj4DJ7M^ES{&n}DEjNiZ@9Ds*~A|d%j1fJ3!
z4p@c3N}Uz_Qm~ZII3`v;66tqSTg$4FVm_+~>^huFLN<QCPbcgK(Et7&4ej`c`;Ssh
zqg5b`3+;h)4ID>j>*XgBmn$yJ3<lrp@OwSzz;a0MKWF_vTQf<l<(SQKp7%rn)6UN~
zUDXWeRPWsrOBL%`?e?ZQ(C)Vna>6Yr%u}o72EQM`;9rAJXHDnyBqH^lM7k=DN^7!4
zda+N0k70vu_1%gb;@&FS?;Kxv;8BBXd|ywhn6CY{Zb?)z$lBy@G`WRe3Td#@_jM>4
z6Ksx2I9-ifcEqLA&%I+;ZhP-DdfkqOy;Qhh&vvtDy(MjZM2zFU9mGaH?utxrjR122
zDr;UA8n<+;8Pa;SNj$ZyMb4`Q9l^V^#X{TN1Wq*j*^mn*;DP@!xEFx6wf|ddxref;
z^xA*kaj0a9Un3o0oB!u<*v<brI(o?e`8K7Q|D&cXj#yz9Qh9&2k4f$?N5K^rN##I&
zBU21AG%R6;jjJI0y|#$t0=F{U`9?|1^)yN=g?0;qiv)#%r?$B&Qs<3*1kbBrVd#QA
zERIp@(wlH{aSn4Oi@X!jXh$vIlB-%n%gNG;Zjvu(Lp&k?2!Z9CqV*K{eN6G$I?CC4
zxkNS9b%cD5ruv<7T|bb2+<9vLRHSLAV;f_-Z<>7|6~V=P4~jhTzpSy9V2bt$N}r1N
zUs=d&owMVEO$P=!#3+`s<_B{zB87lAdCFsMY$X?zx#ng;(C+q8InE#|@9;=9l03d_
z_?;519%-2B$DHP%e4<gqPIy9>j7I~qV@KUiW9dAs-E-@7u8~<`YNX43Cd+g(AZ$;i
zR0$W|MZHE<Prc2Al8N*=M1JY`pSgf-*kW@ZZ}+a|I+!c-GMMryli+~egJ~R<zqJ_u
z?6OV&Pq|3An17KOur>epu%rJEh6e}75BmRGl+V}yKRM3$&CCFq;v1Y%cAH<)cl00t
zST|rkjb2?$|BbN=>4qNKWor{e9k~-^-(JrT2GnwYeG6JetG@dD_pbjsQRS;-18-UX
z$4?Iqy7vF!@FD;Ao0R7IXL+vcrT)BPg5PS1>l|aBiJbD7>2Wiv)J$A<xJnO^!<JdS
z{Gx$=GXd*9w3?732fJJw9(H3qY+>zSYK_gvf3hsCXl^GUH?TY_Wk7qxK9}eUTseXz
zAPTCM)O7Q(YZ}%vw0k?%Pk+Pf<6f-Gyw4MllmgvNY`$x#JK5Kp$!(3wT6Rrcw<qz&
zGUOe7_kMdicTy4?`X$sjzXDZp+4nGLFgm@8>TLW@?9_cWY!0{G$U@8UJLqD$Xe8{f
z!K<_R>(00iWf>F6xbe#NsC^WmEKJRHw`N#Ih(l{xhRkJf|Ii?y9+zl68N5x61L%^r
z!d%HI-Un)b5_uPL$Nk!9-^d*ABgcIXX?d<eY;i|_8!ko2lMS?Yv)227W$Y$&Sr8k?
zwMyabYwyx|L*w#!H-Kp6{Psan%wR|fbKx)fCMeB(;4MI=h0<ml7|I~-1LX2(L$}Qf
ztCZpm@OrauKY>Bo8J@ip-p%Oz!5>Sw7rT@Vb<9LqW?62UsP#<C`}br$<Fb#OvQ{JM
zW&<(X;ce*kW)jzPKl?~5Yi%cSJG@UOv3+2nkIj9Bki2e|uzyP~V6Zp%WN>$IP3897
z#xiT?AU4pv5^?BGLTp->jY9=(7`aqtO*c5bSZ3}(t5lk_m9N_@xspc4G9AO)(~Dln
zPVjF9Jh~^~lrPZ=2GS($zATK%|BPnbg+zzM_8lF+c0UsS9vXd$`EyL!>Jnoq5<P~|
zVXKathU)7<dvFZTP!^{8+-^H#JS`MjS*{l{O~&w~@!bk|{#o6$EmvRG%R4(c`kI~W
zH~?Mgu`6qDcWq9N4%*DU(N5g}Q*Sg>n~)8v%zI}4tXPZ}8%ATzqHQLa*Wg-d=U-yq
zui-1R)$1x%{`yzN(@2wVj8Y?a{`0W?);scVTYCLJWlrT+Itsqc|9gD&bS?kyA^!Vq
zO6&fI()HurnxE_U32PPpRs28h>`qV4FC9ptHQcZ#`t1m(ckYvOOj3k)N6sSXz*#c}
zdaa9%=;{+j{n*-2I>_1{uFvrdJ?%=kyVk!?V)|k+ux<Sx4!ilk$4{O-#DBg?xmT8%
z%eC7qD9ZT9z2(Inj=nFF7(G@(r$-G}t!uF6yWL<cG~oY#%5Q6||2JnR&tINJS@N}U
z+`axs!{MmA{tu2vPaoF*w<yhw9QX^SnM=A30vG<#l-2sKuJeB96D~a3Z8*92g6jp3
z7gf?x<0h$kPqpI%4vi}#v`bo&W`W9OCGGlzrJ!}-E(CIVLzT@u8AhXMI0-^H$@9L~
z=g!wY*><_jBnTcof^&B?G6*J<$&~2@rEr%ACYys8xukC0fB>Or)(Ar<S8HdK1sVkZ
zuyTu)cRa}Q;+y{rO8DOZAe=$A3L6(cIYJ&ig1-yi+u=g=;BVooK>TCD3~*B(zz>2G
z&|J(@41MelCUuN)vIh(%ZGA%Td@f3;W0_+DlSTl468ygP>@yN3uwyzoYvcpf>qj=*
zXAXDw0?TSO9TUKtTw0=O8I)(+b|%k;&xVuT<{dWlZZz3-mS_ZT7Z_BoB~XRXz%&Rc
zLM5evoq{JYp}T!1yG~&-a<zn%Nk(;M)ipeX$j-$JE{dDhy*qT}PL4@LL+*5*UAz<s
z(v*#7*cA$xDVf2$Nn@@j?{^wcyHOC_!e4O(x8+%V`c+;22Dia2gkcD+zrig`nxWVU
z+`?pJ|Gp}+DJqb&=1i2K+{m@;#<r;S*7XRtRy>p-9gHSC!{!8NKudjKf74nA!{)Fv
zV`-{k%Hk_9(jPII)c4*^tU2UvlxYF2BVq)*dBs(Yz*d5sYWc>!1{Fats-Pd$*`_x0
z_qVsq>iS0As*Va-_MD?Y#SA7LNbX>i19xX|%>j0oEz$4(VBKULR)0vXhBqqVZH(3R
z0Byv&S_5`QxuX68r#i`TXVQ+NO?K}DN#Qd`;hpzB*(xvSz&jmr=wflvx;|VjH$5SG
z_ul^7bcGawZbt$v*fYzD;PPX;w=S(CU31;L9v)`YkBv7hP5Pn(8#+~a^d0EYf<X6N
zkF?jk9myrgPC9XeJ`{Cu(#ewH(EfkPZu~yEc}P6RMq0Op-iUqn!EQw@3H+g#CUK#Z
zHS-n5Qp7w(f2)xuu<ej&@4z%7nGWzUBEnBD&f#wtm+tNmHv+B5=$*hQp4l7*3ymV7
z{qX2hAH?2>CIP0~XY8+^sfxeTh|QVR^T5{bQ?eL0L{ocLTss!pMoHHXxy!OTchgii
z4RJyD1<<nV#!M}~7xLOplDkvok2HP$`lZf=M?K829vN+|mdn;9Jmn=ijy^8v9v^oP
z4{=CeNVac4)<d8Td44LhjD;F=<^*|z)den5)pryaNoadQuYE|@gPQk23OO?dl^`Ki
z?!ztCo@i=?wdtE9B-NceG^YN1oc-Eq&~U_2JF>Ct%J){6HLN;KYG+#6f-H}}G?YxU
zS!Mo3<@G$}(#j@qdhvJIhY4NEQ(73_c=MIlpt$RR{AzE&pi6+-FkDp+p&5Fa*anTD
z1wEJX5(53<BfYcAW8Xd9!lhv%VJZO~FEA<S!WKW>C6cvdrN)e3$fQbUg4kBDje;NH
z@ne4lmf`vM@ng_vD7F3$y=EjCAI)n6SF$LtMf?$VFq%g&x$8#6_mkZ{kjg2!F1oG&
z*$aLIwv;^4b>@F{r<Yx%g`gwEU4bGJhzrxWeGG#iK^IePm@u4Vjol*_n$DJY6|LJ7
zX*S0oIGGu&uFBb?6E48OW2?}%??k38Y;NUgSBV8&L~x1DgnO4O`EM(3oiFD7P897&
zQSF&=TaI_=FPbdBm(TmV7Hwc5xlUBRt$lZ}M&S$<irAgHCaq?92nADI>gd1NkM&R<
Z%0qc559QO!{{;X5|Nk3?ltutz005qQSTq0t

literal 0
HcmV?d00001

diff --git a/index.yaml b/index.yaml
index eaf12c0..8b2d874 100644
--- a/index.yaml
+++ b/index.yaml
@@ -5304,6 +5304,28 @@ entries:
     - https://github.com/lukaszraczylo/helm-charts/releases/download/kube-images-sync-0.1.5/kube-images-sync-0.1.5.tgz
     version: 0.1.5
   kubemirror:
+  - apiVersion: v2
+    appVersion: 0.10.9
+    created: "2026-10-02T03:28:58.862053405Z"
+    description: Kubernetes controller for mirroring resources across namespaces
+    digest: 330ccfb3dbfec1f25e2413368ad39394a860eddeeb61ccb80f7b30b7cfad4019
+    home: https://github.com/lukaszraczylo/kubemirror
+    keywords:
+    - kubernetes
+    - controller
+    - mirror
+    - secrets
+    - configmaps
+    maintainers:
+    - email: lukasz@raczylo.com
+      name: Lukasz Raczylo
+    name: kubemirror
+    sources:
+    - https://github.com/lukaszraczylo/kubemirror
+    type: application
+    urls:
+    - https://github.com/lukaszraczylo/helm-charts/releases/download/kubemirror-0.10.9/kubemirror-0.10.9.tgz
+    version: 0.10.9
   - apiVersion: v2
     appVersion: 0.9.22
     created: "2026-06-11T04:55:10.159104138Z"
@@ -5986,4 +6008,4 @@ entries:
     urls:
     - https://github.com/lukaszraczylo/helm-charts/releases/download/kubemirror-0.2.8/kubemirror-0.2.8.tgz
     version: 0.2.8
-generated: "2026-10-02T03:14:57.94666578Z"
+generated: "2026-10-02T03:28:58.861515958Z"