diff --git a/cluster/base/flux-system/gotk-components.yaml b/cluster/base/flux-system/gotk-components.yaml
index 19d4394..2db9961 100644
--- a/cluster/base/flux-system/gotk-components.yaml
+++ b/cluster/base/flux-system/gotk-components.yaml
@@ -1,6 +1,6 @@
 ---
 # This manifest was generated by flux. DO NOT EDIT.
-# Flux Version: v0.22.1
+# Flux Version: v0.23.0
 # Components: source-controller,kustomize-controller,helm-controller,notification-controller,image-reflector-controller,image-automation-controller
 apiVersion: v1
 kind: Namespace
@@ -8,7 +8,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.22.1
+    app.kubernetes.io/version: v0.23.0
   name: flux-system
 ---
 apiVersion: apiextensions.k8s.io/v1
@@ -20,7 +20,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.22.1
+    app.kubernetes.io/version: v0.23.0
   name: alerts.notification.toolkit.fluxcd.io
 spec:
   group: notification.toolkit.fluxcd.io
@@ -232,7 +232,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.22.1
+    app.kubernetes.io/version: v0.23.0
   name: buckets.source.toolkit.fluxcd.io
 spec:
   group: source.toolkit.fluxcd.io
@@ -337,7 +337,7 @@ spec:
                   Bucket sync.
                 properties:
                   checksum:
-                    description: Checksum is the SHA1 checksum of the artifact.
+                    description: Checksum is the SHA256 checksum of the artifact.
                     type: string
                   lastUpdateTime:
                     description: LastUpdateTime is the timestamp corresponding to
@@ -463,7 +463,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.22.1
+    app.kubernetes.io/version: v0.23.0
   name: gitrepositories.source.toolkit.fluxcd.io
 spec:
   group: source.toolkit.fluxcd.io
@@ -637,7 +637,7 @@ spec:
                   repository sync.
                 properties:
                   checksum:
-                    description: Checksum is the SHA1 checksum of the artifact.
+                    description: Checksum is the SHA256 checksum of the artifact.
                     type: string
                   lastUpdateTime:
                     description: LastUpdateTime is the timestamp corresponding to
@@ -736,7 +736,7 @@ spec:
                   description: Artifact represents the output of a source synchronisation.
                   properties:
                     checksum:
-                      description: Checksum is the SHA1 checksum of the artifact.
+                      description: Checksum is the SHA256 checksum of the artifact.
                       type: string
                     lastUpdateTime:
                       description: LastUpdateTime is the timestamp corresponding to
@@ -793,7 +793,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.22.1
+    app.kubernetes.io/version: v0.23.0
   name: helmcharts.source.toolkit.fluxcd.io
 spec:
   group: source.toolkit.fluxcd.io
@@ -923,7 +923,7 @@ spec:
                   chart sync.
                 properties:
                   checksum:
-                    description: Checksum is the SHA1 checksum of the artifact.
+                    description: Checksum is the SHA256 checksum of the artifact.
                     type: string
                   lastUpdateTime:
                     description: LastUpdateTime is the timestamp corresponding to
@@ -1048,7 +1048,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.22.1
+    app.kubernetes.io/version: v0.23.0
   name: helmreleases.helm.toolkit.fluxcd.io
 spec:
   group: helm.toolkit.fluxcd.io
@@ -1808,7 +1808,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.22.1
+    app.kubernetes.io/version: v0.23.0
   name: helmrepositories.source.toolkit.fluxcd.io
 spec:
   group: source.toolkit.fluxcd.io
@@ -1901,7 +1901,7 @@ spec:
                   repository sync.
                 properties:
                   checksum:
-                    description: Checksum is the SHA1 checksum of the artifact.
+                    description: Checksum is the SHA256 checksum of the artifact.
                     type: string
                   lastUpdateTime:
                     description: LastUpdateTime is the timestamp corresponding to
@@ -2026,7 +2026,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.22.1
+    app.kubernetes.io/version: v0.23.0
   name: imagepolicies.image.toolkit.fluxcd.io
 spec:
   group: image.toolkit.fluxcd.io
@@ -2615,7 +2615,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.22.1
+    app.kubernetes.io/version: v0.23.0
   name: imagerepositories.image.toolkit.fluxcd.io
 spec:
   group: image.toolkit.fluxcd.io
@@ -3173,7 +3173,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.22.1
+    app.kubernetes.io/version: v0.23.0
   name: imageupdateautomations.image.toolkit.fluxcd.io
 spec:
   group: image.toolkit.fluxcd.io
@@ -3973,7 +3973,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.22.1
+    app.kubernetes.io/version: v0.23.0
   name: kustomizations.kustomize.toolkit.fluxcd.io
 spec:
   group: kustomize.toolkit.fluxcd.io
@@ -5048,7 +5048,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.22.1
+    app.kubernetes.io/version: v0.23.0
   name: providers.notification.toolkit.fluxcd.io
 spec:
   group: notification.toolkit.fluxcd.io
@@ -5248,7 +5248,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.22.1
+    app.kubernetes.io/version: v0.23.0
   name: receivers.notification.toolkit.fluxcd.io
 spec:
   group: notification.toolkit.fluxcd.io
@@ -5465,7 +5465,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.22.1
+    app.kubernetes.io/version: v0.23.0
   name: helm-controller
   namespace: flux-system
 ---
@@ -5475,7 +5475,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.22.1
+    app.kubernetes.io/version: v0.23.0
   name: image-automation-controller
   namespace: flux-system
 ---
@@ -5485,7 +5485,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.22.1
+    app.kubernetes.io/version: v0.23.0
   name: image-reflector-controller
   namespace: flux-system
 ---
@@ -5495,7 +5495,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.22.1
+    app.kubernetes.io/version: v0.23.0
   name: kustomize-controller
   namespace: flux-system
 ---
@@ -5505,7 +5505,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.22.1
+    app.kubernetes.io/version: v0.23.0
   name: notification-controller
   namespace: flux-system
 ---
@@ -5515,7 +5515,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.22.1
+    app.kubernetes.io/version: v0.23.0
   name: source-controller
   namespace: flux-system
 ---
@@ -5525,7 +5525,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.22.1
+    app.kubernetes.io/version: v0.23.0
   name: crd-controller-flux-system
 rules:
 - apiGroups:
@@ -5606,7 +5606,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.22.1
+    app.kubernetes.io/version: v0.23.0
   name: cluster-reconciler-flux-system
 roleRef:
   apiGroup: rbac.authorization.k8s.io
@@ -5626,7 +5626,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.22.1
+    app.kubernetes.io/version: v0.23.0
   name: crd-controller-flux-system
 roleRef:
   apiGroup: rbac.authorization.k8s.io
@@ -5658,7 +5658,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.22.1
+    app.kubernetes.io/version: v0.23.0
     control-plane: controller
   name: notification-controller
   namespace: flux-system
@@ -5678,7 +5678,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.22.1
+    app.kubernetes.io/version: v0.23.0
     control-plane: controller
   name: source-controller
   namespace: flux-system
@@ -5698,7 +5698,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.22.1
+    app.kubernetes.io/version: v0.23.0
     control-plane: controller
   name: webhook-receiver
   namespace: flux-system
@@ -5718,7 +5718,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.22.1
+    app.kubernetes.io/version: v0.23.0
     control-plane: controller
   name: helm-controller
   namespace: flux-system
@@ -5747,7 +5747,7 @@ spec:
           valueFrom:
             fieldRef:
               fieldPath: metadata.namespace
-        image: ghcr.io/fluxcd/helm-controller:v0.12.2
+        image: ghcr.io/fluxcd/helm-controller:v0.13.0
         imagePullPolicy: IfNotPresent
         livenessProbe:
           httpGet:
@@ -5791,7 +5791,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.22.1
+    app.kubernetes.io/version: v0.23.0
     control-plane: controller
   name: image-automation-controller
   namespace: flux-system
@@ -5866,7 +5866,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.22.1
+    app.kubernetes.io/version: v0.23.0
     control-plane: controller
   name: image-reflector-controller
   namespace: flux-system
@@ -5895,7 +5895,7 @@ spec:
           valueFrom:
             fieldRef:
               fieldPath: metadata.namespace
-        image: ghcr.io/fluxcd/image-reflector-controller:v0.13.1
+        image: ghcr.io/fluxcd/image-reflector-controller:v0.13.2
         imagePullPolicy: IfNotPresent
         livenessProbe:
           httpGet:
@@ -5945,7 +5945,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.22.1
+    app.kubernetes.io/version: v0.23.0
     control-plane: controller
   name: kustomize-controller
   namespace: flux-system
@@ -5974,7 +5974,7 @@ spec:
           valueFrom:
             fieldRef:
               fieldPath: metadata.namespace
-        image: ghcr.io/fluxcd/kustomize-controller:v0.17.0
+        image: ghcr.io/fluxcd/kustomize-controller:v0.18.0
         imagePullPolicy: IfNotPresent
         livenessProbe:
           httpGet:
@@ -6020,7 +6020,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.22.1
+    app.kubernetes.io/version: v0.23.0
     control-plane: controller
   name: notification-controller
   namespace: flux-system
@@ -6096,7 +6096,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.22.1
+    app.kubernetes.io/version: v0.23.0
     control-plane: controller
   name: source-controller
   namespace: flux-system
@@ -6129,7 +6129,7 @@ spec:
           valueFrom:
             fieldRef:
               fieldPath: metadata.namespace
-        image: ghcr.io/fluxcd/source-controller:v0.17.2
+        image: ghcr.io/fluxcd/source-controller:v0.18.0
         imagePullPolicy: IfNotPresent
         livenessProbe:
           httpGet:
@@ -6180,7 +6180,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.22.1
+    app.kubernetes.io/version: v0.23.0
   name: allow-egress
   namespace: flux-system
 spec:
@@ -6200,7 +6200,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.22.1
+    app.kubernetes.io/version: v0.23.0
   name: allow-scraping
   namespace: flux-system
 spec:
@@ -6220,7 +6220,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.22.1
+    app.kubernetes.io/version: v0.23.0
   name: allow-webhooks
   namespace: flux-system
 spec: