[Epic] PKOv2 GA

[EronWright]

The PKOv2 project (epic, project board) delivered a whole-new architecture for the Operator, culminating in a "2.0" project launch for KubeCon Salt Lake City 2024 (November). Here's the announcement blog post.

This ticket tracks potential follow-ups from the effort. Candidate issues:

Engineering:

• Dogfooding for v2 #685
• E2E improvements #701
• Add artifacthub-repo.yml support for OCI artifact #582
• CI: linting #737
• CI: re-enable the chatops for "acceptance tests" #738
• CI: Fix the chart-lint-and-test to build the image first #739

Security issues:

• Use audience-scoped access token #715

Functional gaps:

• Stack stalls when deleted using foreground cascading delete #753
• Support for pulumi.com/reconciliation-request #672
• Make source be optional #730
• Option to retain or delete the workspace after successful sync #694
• Garbage collection for Update objects #733
• Add single-namespace deployment mode #690
• Add support for OIDC login to Pulumi Cloud #697
• Some stack outputs cannot be saved to Secret #743
• Named workspace templates #797

Operability:

• Report status changes to the operator log #732
• Operator keeps writing log files #425
• Report status when stack is locked #736
• Don't discard the workspace pod when authz is misconfigured #740

Documentation updates:

• Update the PKO doc page for PKOv2 #735
• Update the top-level examples #696

While not in scope of 2.0 GA, here's some API changes to consider (in future) for Stack/v2alpha1:

• Remove reconcileRequest in favor of a spec element
• use Stalled condition for prerequisites
• use Duration for resyncFrequencySeconds