Sourced from github.com/fluxcd/flux2/v2's releases.
v2.4.0
Highlights
Flux v2.4.0 is a feature release. Users are encouraged to upgrade for the best experience.
For a comprehensive overview of new features and API changes included in this release, please refer to the Announcing Flux 2.4 GA blog post.
This release marks the General Availability (GA) of Flux Bucket API. The
Bucket
v1 API comes with new features including: proxy support, mTLS and custom STS configuration for AWS S3 and MinIO LDAP authentication.The
GitRepository
v1 API gains support for OIDC authentication. Starting with this version, you can authenticate against Azure DevOps repositories using AKS Workload Identity.The
OCIRepository
v1beta2 API gains support for proxy configuration thus allowing dedicated HTTP/S Proxy authentication on multi-tenant Kubernetes clusters.The
HelmRelease
v2 API gains support for disabling JSON schema validation of the Helm release values during installation and upgrade. And allows adopting existing Kubernetes resources during Helm release installation.The Flux controllers are now built with Go 1.23 and their dependencies have been updated to Kubernetes 1.31, Helm 3.16, SOPS 3.9 Cosign 2.4 and Notation 1.2.
❤️ Big thanks to all the Flux contributors that helped us with this release!
Kubernetes compatibility
This release is compatible with the following Kubernetes versions:
Kubernetes version Minimum required v1.29
>= 1.29.0
v1.30
>= 1.30.0
v1.31
>= 1.31.0
[!NOTE] Note that the Flux project offers support only for the latest three minor versions of Kubernetes. Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors such as ControlPlane that provide enterprise support for Flux.
OpenShift compatibility
Flux can be installed on Red Hat OpenShift cluster directly from OperatorHub using Flux Operator. The operator allows the configuration of Flux multi-tenancy lockdown, network policies, persistent storage, sharding, vertical scaling and the synchronization of the cluster state from Git repositories, OCI artifacts and S3-compatible storage.
API changes
Bucket v1
The Bucket kind was promoted from v1beta2 to v1 (GA).
The v1 API is backwards compatible with v1beta2.
New fields:
.spec.proxySecretRef
allows configuring HTTP/S Proxy authentication for the S3-compatible storage service.
... (truncated)
5350425
Merge pull request #5014
from fluxcd/k8s-v0.31.16611a4f
Update Kubernetes dependencies to v1.31.1297b15b
Merge pull request #5005
from fluxcd/update-components56a3d08
Update toolkit componentscf26cf2
Merge pull request #5011
from fluxcd/remove-deprecated-tls-flagsa3dbf31
Remove TLS deprecated flags from flux create secret
3e4524b
Merge pull request #5010
from fluxcd/create-secret-proxy8470f23
Add flux create secret proxy
commande17f3f0
Merge pull request #5009
from fluxcd/proxy-secret-refe0b8464
Add --proxy-secret-ref
to flux create source
commandsSourced from github.com/fluxcd/helm-controller/api's releases.
v1.1.0
Changelog
Container images
docker.io/fluxcd/helm-controller:v1.1.0
ghcr.io/fluxcd/helm-controller:v1.1.0
Supported architectures:
linux/amd64
,linux/arm64
andlinux/arm/v7
.The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.
Sourced from github.com/fluxcd/helm-controller/api's changelog.
1.1.0
Release date: 2024-09-26
This minor release comes with various bug fixes and improvements.
The chart values schema validation can now be disabled for install and upgrade actions by setting
disableSchemaValidation
under.spec.install
and.spec.upgrade
of aHelmRelease
object.HelmReleases that result in failure during uninstall will now be retried until the uninstall succeeds without any error. See handling failed uninstall docs for various remediations based on the cause of the failure.
helm-controller in sharded deployment configuration now supports cross-shard dependency check. This allows a HelmRelease to depend on other HelmReleases managed by different controller shards.
In addition, the Kubernetes dependencies have been updated to v1.31.1, Helm has been updated to v3.16.1 and various other controller dependencies have been updated to their latest version. The controller is now built with Go 1.23.
Fixes:
- fix: remove digest check to never ignore helm uninstall errors #1024
- Allow overwriting inline values with targetPath #1060
- Fix incorrect use of format strings with the conditions package #1025
- Re-enable logging json patch on StatusDrifted #1010
- Ignore 'v' version prefix in OCI artifact and Helm chart #990
- doc: fix HelmRelease default value for .spec.upgrade.crds #986
Improvements:
... (truncated)
44247e2
Merge pull request #1074
from fluxcd/release-v1.1.0d1a931a
Release v1.1.0037bc86
Add changelog entry for v1.1.0b0010b0
Merge pull request #1070
from fluxcd/deps-api-reader72ec296
Allow cross-shard dependency checkc71258e
Merge pull request #1073
from fluxcd/update-sce3ab7ce
Update source-controller to v1.4.12e3efaf
Merge pull request #1072
from fluxcd/dependabot/github_actions/ci-74c3fc3a142932347
Bump the ci group across 1 directory with 2 updates18d2406
Merge pull request #1071
from fluxcd/deps-updateSourced from github.com/fluxcd/image-automation-controller/api's releases.
v0.39.0
Changelog
Container images
docker.io/fluxcd/image-automation-controller:v0.39.0
ghcr.io/fluxcd/image-automation-controller:v0.39.0
Supported architectures:
linux/amd64
,linux/arm64
andlinux/arm/v7
.The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.
Sourced from github.com/fluxcd/image-automation-controller/api's changelog.
0.39.0
Release date: 2024-09-26
This prerelease comes with support for OIDC authentication for Azure DevOps Repositories using the
.spec.provider
field by setting it toazure
on theGitRepository
object associated withImageUpdateAutomation
object.In addition, the Kubernetes dependencies have been updated to v1.31.1 and various other controller dependencies have been updated to their latest version. The controller is now built with Go 1.23.
Fixes:
- Fix incorrect use of format strings with the conditions package. #711
- Fix RBAC role generation for IAC #745
Improvements:
... (truncated)
474e4c3
Merge pull request #759
from fluxcd/api-update-scd2b33d1
Update source-controller to v1.4.1 in apia7cebe3
Merge pull request #758
from fluxcd/release-v0.39.01a7d0fe
Release v0.39.0e16d086
Merge pull request #757
from fluxcd/update-sca9af390
Update source-controller to v1.4.15755a87
Merge pull request #747
from dipti-pai/iac-azure-oidc87bff0e
Update dependenciesb24fb41
Enable Azure OIDC for Azure DevOps Repository in IAC7203b19
Merge pull request #755
from fluxcd/dependabot/github_actions/ci-a5204272ddSourced from github.com/fluxcd/image-reflector-controller/api's releases.
v0.33.0
Changelog
Container images
docker.io/fluxcd/image-reflector-controller:v0.33.0
ghcr.io/fluxcd/image-reflector-controller:v0.33.0
Supported architectures:
linux/amd64
,linux/arm64
andlinux/arm/v7
.The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.
Sourced from github.com/fluxcd/image-reflector-controller/api's changelog.
0.33.0
Release date: 2024-09-26
This prerelease comes with support for using proxy for communications with the container registry using the new
.spec.proxySecretRef
field onImageRepository
objects.In addition, the Kubernetes dependencies have been updated to v1.31.1 and various other controller dependencies have been updated to their latest version. The controller is now built with Go 1.23.
Fixes:
- Fix incorrect use of format strings with the conditions package #598
Improvements:
3a0a071
Merge pull request #641
from fluxcd/release-v0.33.0f89ff04
Release v0.33.002b6beb
Merge pull request #640
from fluxcd/dependabot/github_actions/ci-c42c8e27493609dfd
Bump the ci group across 1 directory with 3 updatesa2f5058
Merge pull request #639
from fluxcd/deps-update816e16e
Update fluxcd/pkg deps and k8s deps to 1.31.10a5b0b9
Merge pull request #633
from fluxcd/controller-gen-v0.16.10f1f46f
Update controller-gen to v0.16.15f8ca00
Merge pull request #627
from matheuscscp/imagerepo-proxyb283a55
Add proxy support for ImageRepository APISourced from github.com/fluxcd/kustomize-controller/api's releases.
v1.4.0
Changelog
Container images
docker.io/fluxcd/kustomize-controller:v1.4.0
ghcr.io/fluxcd/kustomize-controller:v1.4.0
Supported architectures:
linux/amd64
,linux/arm64
andlinux/arm/v7
.The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.
Sourced from github.com/fluxcd/kustomize-controller/api's changelog.
1.4.0
Release date: 2024-09-27
This minor release comes with various bug fixes and improvements.
kustomize-controller in sharded deployment configuration now supports cross-shard dependency check. This allows a Kustomization to depend on other Kustomizations managed by different controller shards.
In addition, the Kubernetes dependencies have been updated to v1.31.1 and various other controller dependencies have been updated to their latest version. The controller is now built with Go 1.23.
Fixes:
- Fix incorrect use of format strings with the conditions package. #1198
Improvements:
527ec3e
Merge pull request #1254
from fluxcd/release-v1.4.0cecc445
Release v1.4.002ab2eb
Add changelog entry for v1.4.072ae7db
Merge pull request #1253
from fluxcd/update-bucketv13d87349
Update Bucket API to v11d1a06b
Merge pull request #1251
from fluxcd/update-sc8e39f7b
Update source-controller to v1.4.10d28f0f
Merge pull request #1248
from fluxcd/deps-api-reader1899e6c
Merge pull request #1250
from fluxcd/dependabot/github_actions/ci-74c3fc3a140add02b
Merge pull request #1249
from fluxcd/deps-updateSourced from github.com/fluxcd/notification-controller/api's releases.
v1.4.0
Changelog
Container images
docker.io/fluxcd/notification-controller:v1.4.0
ghcr.io/fluxcd/notification-controller:v1.4.0
Supported architectures:
linux/amd64
,linux/arm64
andlinux/arm/v7
.The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.
Sourced from github.com/fluxcd/notification-controller/api's changelog.
1.4.0
Release date: 2024-09-27
This minor release comes with various bug fixes and improvements.
MS Teams Provider has been updated to support MS Adaptive Card payloads. This allows users to migrate from the deprecated Office 365 Connector for Incoming Webhooks to the new Microsoft Teams Incoming Webhooks with Workflows. See the Provider API documentation for more information. After getting the URL for the new Incoming Webhook Workflow, update the secret used by the
msteams
Provider object with the new URL.In addition, the Kubernetes dependencies have been updated to v1.31.1 and various other controller dependencies have been updated to their latest version. The controller is now built with Go 1.23.
Fixes:
- telegram notifier should escape with metadata key #829
- docs: use stringData for secret of GitHub PAT #873
- Fix incorrect use of format strings with the conditions package. #879
Improvements:
2525f2c
Merge pull request #935
from fluxcd/release-v1.4.052a4049
Release v1.4.06fcfb63
Add changelog entry for v1.4.0c43e6a9
Merge pull request #934
from fluxcd/go-github-v64b2ab2c2
Update go-github to v633acbe68
Merge pull request #933
from fluxcd/dependabot/github_actions/ci-74c3fc3a144997635
build(deps): bump the ci group across 1 directory with 2 updatesb4a9933
Merge pull request #932
from fluxcd/dependabot/go_modules/go-deps-d2f960fbdc519248f
Bump Go to 1.23.005be0bd
Fix CDEvents examplec8165af
Merge pull request #809 from
fluxcd/k8s-1.31.118924bf
Update controller-gen to v0.16.1735a85b
Update dependencies62475f1
Merge pull request #789 from
dipti-pai/pkg-azure-git-wi-auth1686996
Support Azure OIDC authenticationa2a7a01
Merge pull request #808 from
matheuscscp/oci-auth-proxy8b5c43a
Add proxy support for oci/auth logind467d6e
Merge pull request #807 from
fluxcd/dependabot/github_actions/ci-6f7028051ea6b58a7
build(deps): bump the ci group with 2 updatesf0eb8aa
Merge pull request #806 from
fluxcd/dependabot/github_actions/ci-fc48fdf5417fe9789
Merge pull request #810 from
fluxcd/up-int-depsf674386
Update internal dependenciesc8165af
Merge pull request #809 from
fluxcd/k8s-1.31.118924bf
Update controller-gen to v0.16.1735a85b
Update dependencies62475f1
Merge pull request #789 from
dipti-pai/pkg-azure-git-wi-auth1686996
Support Azure OIDC authenticationa2a7a01
Merge pull request #808 from
matheuscscp/oci-auth-proxy8b5c43a
Add proxy support for oci/auth logind467d6e
Merge pull request #807 from
fluxcd/dependabot/github_actions/ci-6f7028051e7fe9789
Merge pull request #810 from
fluxcd/up-int-depsf674386
Update internal dependenciesc8165af
Merge pull request #809 from
fluxcd/k8s-1.31.118924bf
Update controller-gen to v0.16.1735a85b
Update dependencies62475f1
Merge pull request #789 from
dipti-pai/pkg-azure-git-wi-auth1686996
Support Azure OIDC authenticationa2a7a01
Merge pull request #808 from
matheuscscp/oci-auth-proxy8b5c43a
Add proxy support for oci/auth logind467d6e
Merge pull request #807 from
fluxcd/dependabot/github_actions/ci-6f7028051e17398b5
Merge pull request #314 from
somtochiama/sourceignorefb3355b
check for . path4d3acc8
Merge pull request #313 from
fluxcd/oci-ignore82fe1ed
Update sourceignore version for OCI4cc38cb
Merge pull request #312 from
somtochiama/sourceignoree36c917
increase timeout for failing patch9de2992
run tidy4e42496
Move sourceignore its own dird26e2ae
remove log71cbd21
Move sourceignore package and add ignore functionality to oci
build/pushSourced from github.com/fluxcd/source-controller/api's releases.
v1.4.1
Changelog
Container images
docker.io/fluxcd/source-controller:v1.4.1
ghcr.io/fluxcd/source-controller:v1.4.1
Supported architectures:
linux/amd64
,linux/arm64
andlinux/arm/v7
.The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.
v1.4.0
Changelog
Container images
docker.io/fluxcd/source-controller:v1.4.0
ghcr.io/fluxcd/source-controller:v1.4.0
Supported architectures:
linux/amd64
,linux/arm64
andlinux/arm/v7
.The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.
Sourced from github.com/fluxcd/source-controller/api's changelog.
1.4.1
Release date: 2024-09-26
This patch release comes with a fix to the
GitRepository
API to keep it backwards compatible by removing the default value for.spec.provider
field when not set in the API. The controller will internally consider an empty value for the provider as thegeneric
provider.Fix:
- GitRepo: Remove provider default value from API #1626
1.4.0
Release date: 2024-09-25
This minor release promotes the Bucket API to GA, and comes with new features, improvements and bug fixes.
Bucket
The
Bucket
API has been promoted fromv1beta2
tov1
(GA). Thev1
API is backwards compatible withv1beta2
.Bucket API now supports proxy through the field
.spec.proxySecretRef
and custom TLS client certificate and CA through the field.spec.certSecretRef
.Bucket API now also supports specifying a custom STS configuration through the field
.spec.sts
. This is currently only supported for the providersgeneric
andaws
. When specifying a custom STS configuration one must specify which STS provider to use. For thegeneric
bucket provider we support theldap
STS provider, and for theaws
bucket provider we support theaws
STS provider. For theaws
STS provider, one may use the default main STS endpoint, or the regional STS endpoints, or even an interface endpoint.OCIRepository
OCIRepository API now supports proxy through the field
.spec.proxySecretRef
.Warning: Proxy is not supported for cosign keyless verification.
GitRepository
GitRepository API now supports OIDC authentication for Azure DevOps repositories through the field
.spec.provider
using the valueazure
. See the docs for details here.In addition, the Kubernetes dependencies have been updated to v1.31.1, Helm has been updated to v3.16.1 and various other controller dependencies have been updated to their latest version. The controller is now built with Go 1.23.
Fixes:
... (truncated)
50035c6
Merge pull request #1628
from fluxcd/release-v1.4.1c2b6b39
Release v1.4.1a2658ba
Add changelog entry for v1.4.1a485ed4
Merge pull request #1627
from fluxcd/backport-1626-to-release/v1.4.x0e4f558
GitRepo: Remove provider default value from APIe6e2b15
Merge pull request #1620
from fluxcd/release-v1.4.0e920838
Release v1.4.0c796f52
Add changelog entry for v1.4.003889fe
Merge pull request #1618
from fluxcd/dependabot/go_modules/go-deps-a9e873101f32bc10c
build(deps): bump the go-deps group across 1 directory with 3
updatesSourced from github.com/open-component-model/git-controller's releases.
v0.12.1
Release 0.12.1
- fix: add the right version in the image overlay for the deployment (#145)
- chore: remove personal information (#139)
v0.12.0
Release 0.12.0
- chore(deps): bump the go_modules group group with 3 updates (#135)
- chore: update ocm to 0.8.0 and the controller to 0.19.0 (#134)
- fix: correct position for security context (#133)
- remove second trigger and just keep pull_request_target (#128)
- Create codeql.yml (#125)
- chore(deps): bump the ci group with 2 updates (#108)
- chore(deps): bump github.com/containerd/containerd from 1.7.0 to 1.7.11 (#107)
- chore(deps): bump github.com/go-git/go-git/v5 from 5.6.0 to 5.11.0 (#110)
- chore(deps): bump github.com/cloudflare/circl from 1.3.3 to 1.3.7 (#112)
v0.11.1
Release 0.11.1
v0.11.0
Release 0.11.0
- dep: update ocm-controller to v0.18.1 (#96)
- chore(deps): bump github.com/go-jose/go-jose/v3 from 3.0.0 to 3.0.1 (#87)
- Skip Report generation on scheduled run + non PR runs (#92)
- chore(deps): bump the ci group with 3 updates (#88)
- Create dependabot.yml (#82)
- feat: applying lint and fixing the lint issues (#86)
- Add Reports to Mend Scans (#84)
- docs: update the README and add relevant information (#85)
v0.10.1
Release 0.10.1
- fix: removing reconciliation status (#83)
v0.10.0
Release 0.10.0
... (truncated)
bed5237
fix: add the right version in the image overlay for the deployment (#145)7727ccc
chore: remove personal information (#139)c254731
chore: release docs for version v0.12.0 (#136)315dad2
chore(deps): bump the go_modules group group with 3 updates (#135)fbc6352
chore: update ocm to 0.8.0 and the controller to 0.19.0 (#134)7e773db
fix: correct position for security context (#133)55dc985
remove second trigger and just keep pull_request_target (#128)2132847
Merge pull request #125
from open-component-model/morri-son-patch-232f73fc
Update .github/workflows/codeql.yml1bef3ce
Create codeql.ymlSourced from github.com/open-component-model/replication-controller's releases.
v0.13.1
Release 0.13.1
- fix: add the right version in the image overlay for the deployment (#140)
- fix: remove any more personal data (#137)
- chore: remove personal information (#134)
v0.13.0
Release 0.13.0