diff --git a/cluster/base/flux-system/gotk-components.yaml b/cluster/base/flux-system/gotk-components.yaml
index 85900d72..bcb1c34f 100644
--- a/cluster/base/flux-system/gotk-components.yaml
+++ b/cluster/base/flux-system/gotk-components.yaml
@@ -1,5 +1,5 @@
 ---
-# Flux version: v0.15.1
+# Flux version: v0.15.2
 # Components: source-controller,kustomize-controller,helm-controller,notification-controller
 apiVersion: v1
 kind: Namespace
@@ -7,7 +7,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.15.1
+    app.kubernetes.io/version: v0.15.2
   name: flux-system
 ---
 apiVersion: apiextensions.k8s.io/v1
@@ -19,7 +19,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.15.1
+    app.kubernetes.io/version: v0.15.2
   name: alerts.notification.toolkit.fluxcd.io
 spec:
   group: notification.toolkit.fluxcd.io
@@ -229,7 +229,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.15.1
+    app.kubernetes.io/version: v0.15.2
   name: buckets.source.toolkit.fluxcd.io
 spec:
   group: source.toolkit.fluxcd.io
@@ -459,7 +459,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.15.1
+    app.kubernetes.io/version: v0.15.2
   name: gitrepositories.source.toolkit.fluxcd.io
 spec:
   group: source.toolkit.fluxcd.io
@@ -790,7 +790,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.15.1
+    app.kubernetes.io/version: v0.15.2
   name: helmcharts.source.toolkit.fluxcd.io
 spec:
   group: source.toolkit.fluxcd.io
@@ -1035,7 +1035,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.15.1
+    app.kubernetes.io/version: v0.15.2
   name: helmreleases.helm.toolkit.fluxcd.io
 spec:
   group: helm.toolkit.fluxcd.io
@@ -1783,7 +1783,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.15.1
+    app.kubernetes.io/version: v0.15.2
   name: helmrepositories.source.toolkit.fluxcd.io
 spec:
   group: source.toolkit.fluxcd.io
@@ -1832,6 +1832,14 @@ spec:
               interval:
                 description: The interval at which to check the upstream for updates.
                 type: string
+              passCredentials:
+                description: PassCredentials allows the credentials from the SecretRef
+                  to be passed on to a host that does not match the host as defined
+                  in URL. This may be required if the host of the advertised chart
+                  URLs in the index differ from the defined URL. Enabling this should
+                  be done with caution, as it can potentially result in credentials
+                  getting stolen in a MITM-attack.
+                type: boolean
               secretRef:
                 description: The name of the secret containing authentication credentials
                   for the Helm repository. For HTTP/S basic auth the secret must contain
@@ -1993,7 +2001,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.15.1
+    app.kubernetes.io/version: v0.15.2
   name: kustomizations.kustomize.toolkit.fluxcd.io
 spec:
   group: kustomize.toolkit.fluxcd.io
@@ -2541,7 +2549,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.15.1
+    app.kubernetes.io/version: v0.15.2
   name: providers.notification.toolkit.fluxcd.io
 spec:
   group: notification.toolkit.fluxcd.io
@@ -2730,7 +2738,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.15.1
+    app.kubernetes.io/version: v0.15.2
   name: receivers.notification.toolkit.fluxcd.io
 spec:
   group: notification.toolkit.fluxcd.io
@@ -2945,7 +2953,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.15.1
+    app.kubernetes.io/version: v0.15.2
   name: helm-controller
   namespace: flux-system
 ---
@@ -2955,7 +2963,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.15.1
+    app.kubernetes.io/version: v0.15.2
   name: kustomize-controller
   namespace: flux-system
 ---
@@ -2965,7 +2973,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.15.1
+    app.kubernetes.io/version: v0.15.2
   name: notification-controller
   namespace: flux-system
 ---
@@ -2975,7 +2983,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.15.1
+    app.kubernetes.io/version: v0.15.2
   name: source-controller
   namespace: flux-system
 ---
@@ -2985,7 +2993,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.15.1
+    app.kubernetes.io/version: v0.15.2
   name: crd-controller-flux-system
 rules:
 - apiGroups:
@@ -3065,7 +3073,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.15.1
+    app.kubernetes.io/version: v0.15.2
   name: cluster-reconciler-flux-system
 roleRef:
   apiGroup: rbac.authorization.k8s.io
@@ -3085,7 +3093,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.15.1
+    app.kubernetes.io/version: v0.15.2
   name: crd-controller-flux-system
 roleRef:
   apiGroup: rbac.authorization.k8s.io
@@ -3117,7 +3125,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.15.1
+    app.kubernetes.io/version: v0.15.2
     control-plane: controller
   name: notification-controller
   namespace: flux-system
@@ -3137,7 +3145,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.15.1
+    app.kubernetes.io/version: v0.15.2
     control-plane: controller
   name: source-controller
   namespace: flux-system
@@ -3157,7 +3165,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.15.1
+    app.kubernetes.io/version: v0.15.2
     control-plane: controller
   name: webhook-receiver
   namespace: flux-system
@@ -3177,7 +3185,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.15.1
+    app.kubernetes.io/version: v0.15.2
     control-plane: controller
   name: helm-controller
   namespace: flux-system
@@ -3206,7 +3214,7 @@ spec:
           valueFrom:
             fieldRef:
               fieldPath: metadata.namespace
-        image: ghcr.io/fluxcd/helm-controller:v0.11.0
+        image: ghcr.io/fluxcd/helm-controller:v0.11.1
         imagePullPolicy: IfNotPresent
         livenessProbe:
           httpGet:
@@ -3250,7 +3258,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.15.1
+    app.kubernetes.io/version: v0.15.2
     control-plane: controller
   name: kustomize-controller
   namespace: flux-system
@@ -3325,7 +3333,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.15.1
+    app.kubernetes.io/version: v0.15.2
     control-plane: controller
   name: notification-controller
   namespace: flux-system
@@ -3401,7 +3409,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.15.1
+    app.kubernetes.io/version: v0.15.2
     control-plane: controller
   name: source-controller
   namespace: flux-system
@@ -3434,7 +3442,7 @@ spec:
           valueFrom:
             fieldRef:
               fieldPath: metadata.namespace
-        image: ghcr.io/fluxcd/source-controller:v0.15.0
+        image: ghcr.io/fluxcd/source-controller:v0.15.1
         imagePullPolicy: IfNotPresent
         livenessProbe:
           httpGet: