v0.34.0

Highlights

Flux v0.34.0 comes with new features and improvements. Users are encouraged to upgrade for the best experience.

Breaking changes

The Flux controller logs have been aligned with the Kubernetes structured logging.
For more details on the new logging structure please see: fluxcd/flux2#3051.

Features and improvements

• OCIRepository.spec.insecure Allow pulling artifacts from an in-cluster Docker Registry over plain HTTP.
• Allow defining OCI sources for non-TLS container registries with flux create source oci --insecure.
• Enable contextual login when publishing OCI artifacts from a Cloud VM using flux push artifact --provider=aws|azure|gcp.
• Prioritise static credentials over OIDC providers when pulling OCI artifacts from container registries on multi-tenant cluster.
• Reconcile Kubernetes Class types (ClusterClass, GatewayClass, StorageClass, etc) in a dedicated stage before any other custom resources like Clusters, Gateways, Volumes, etc.
• When multiple SOPS providers are available, run the offline decryption methods first to avoid failures due to KMS unavailability.
• Add finalizers to the notification API to properly record the reconciliation metrics for deleted resources.
• Publish the Flux install manifests as OCI artifacts on GitHub and DockerHub container registries under fluxcd/flux-manifests.

Components Changelog

• source-controller v0.29.0
• kustomize-controller v0.28.0
• helm-controller v0.24.0
• notification-controller v0.26.0
• image-reflector-controller v0.21.0
• image-automation-controller v0.25.0

CLI Changelog

• PR #3097 - @stefanprodan - Add --insecure flag to flux create source oci
• PR #3091 - @fluxcdbot - Update toolkit components
• PR #3088 - @stefanprodan - Publish the install manifests to GHCR and DockerHub as OCI artifacts
• PR #3087 - @somtochiama - Remove finalizers for notification CRs on uninstall
• PR #3085 - @souleb - [bootstrap] Make sure we reconcile with the right reconciliation method
• PR #3082 - @stefanprodan - Remove finalizers for OCI repositories on uninstall
• PR #3079 - @adrien-f - Support autologin when pushing OCI artifacts
• PR #3073 - @acondrat - Filter out non-running pods in Prometheus
• PR #3063 - @somtochiama - Update flux logs to accomodate the new format
• PR #3053 - @dholbach - Revert "Fix broken "edit this page" links in Flux CLI section"
• PR #3052 - @dholbach - update to new doc links structure
• PR #3050 - @stefanprodan - Status update for RFC-0002 and RFC-0003

v0.33.0

Highlights

Flux v0.33.0 comes with new features and improvements. Users are encouraged to upgrade for the best experience.

Features and improvements

• HelmRepository.spec.provider Enable contextual login to container registries when pulling Helm charts from Amazon Elastic Container Registry, Azure Container Registry and Google Artifact Registry.
• OCIRepository.spec.layerSelector Select which layer contains the Kubernetes configs by specifying a matching OCI media type.
• Bucket.spec.secretRef Authenticate to Azure Blob storage using SAS tokens.
• Allow filtering OCI artifacts by semver and regex when listing artifact with flux list artifacts.
• Allow excluding local files and directories when building and publishing artifacts with flux push artifact.
• Mitigate denial-of-service on multi-tenant clusters by automatically recovering from panics encountered during reconciliation.
• Update controllers to Kubernetes v1.25.0, Kustomize v4.5.7 and Helm v3.9.4.

New documentation

• Secrets Management
• Contextual Authorization

Components changelog

• source-controller v0.27.0 v0.28.0
• kustomize-controller v0.27.1
• helm-controller v0.23.1
• notification-controller v0.25.2
• image-reflector-controller v0.20.1
• image-automation-controller v0.24.2

CLI Changelog

• PR #3049 - @stefanprodan - Update Kubernetes dependencies to v1.25.0
• PR #3034 - @snebel29 - Fix broken "edit this page" links in Flux CLI section
• PR #3028 - @snebel29 - Update tests/azure github.com/hashicorp/terraform-exec to v0.16.1
• PR #3025 - @stefanprodan - [RFC-0002] Add auth specification for Helm OCI
• PR #3024 - @stefanprodan - Add version validation to install commands
• PR #3019 - @somtochiama - Improve error message in get cmd
• PR #3014 - @stefanprodan - [RFC-0003] Select layer by OCI media type
• PR #2999 - @fluxcdbot - Update toolkit components
• PR #2998 - @somtochiama - Add --filter-semver and --filter-regex flags to list artifacts
• PR #2997 - @stefanprodan - Use ghcr.io in the static manifests
• PR #2996 - @stefanprodan - Update dependencies
• PR #2995 - @stefanprodan - Add --ignore-paths arg to flux build|push artifact
• PR #2979 - @stefanprodan - Status update for RFC-0002 and RFC-0003

v0.32.0

Highlights

Flux v0.32.0 comes with support for distributing Kubernetes manifests, Kustomize overlays and Terraform code as OCI artifacts.
For more information please see the Flux OCI documentation.

New features

• New Flux CLI commands flux push|pull|tag artifact for publishing OCI Artifacts to container registries.
• New source type OCIRepository for fetching OCI artifacts from container registries.
• Resolve Helm dependencies from OCI for charts defined in Git.

Components changelog

• source-controller v0.26.0 v0.26.1
• kustomize-controller v0.27.0
• notification-controller v0.25.0 v0.25.1
• image-reflector-controller v0.20.0
• image-automation-controller v0.24.1

CLI Changelog

• PR #2966 - @fluxcdbot - Update toolkit components
• PR #2964 - @pjbgf - Add validation to namespace flag
• PR #2955 - @somtochiama - fix log filter and add tests for flux logs
• PR #2951 - @stefanprodan - [RFC-0003] Add the provider field for OIDC auth
• PR #2940 - @hiddeco - AUR: further solve .SRCINFO issues
• PR #2937 - @hiddeco - AUR: ensure pkgname is bottom entry in .SRCINFO

v0.31.5

Highlights

Flux v0.31.5 is a patch release that comes with fixes. Users are encouraged to upgrade for the best experience.

Fixes

• Fix ImageRepository public repository scan for unconfigured provider registries

Improvements

• Improve Helm OCI Chart to work with registries that don't support listing tags

Component changelog

• source-controller v0.25.11
• image-reflector-controller v0.19.4

CLI Changelog

• PR #2932 - @fluxcdbot - Update toolkit components
• PR #2917 - @morancj - SRCINFO: fix path

v0.31.4

Highlights

Flux v0.31.4 is a patch release that comes with fixes. Users are encouraged to upgrade for the best experience.

Fixes

• Fix SIGSEGV when resolving charts dependencies.
• Fix Panic when no artifact in source.
• decryptor: recover from SOPS store panic.
• Fix spelling mistake in azure/exchanger.go.

Improvements

• Retry downloading artifacts on not found errors.

Components changelog

• source-controller v0.25.10
• kustomize-controller v0.26.3
• notification-controller v0.24.1
• helm-controller v0.22.2
• image-automation-controller v0.23.5
• image-reflector-controller v0.19.3

CLI Changelog

• PR #2905 - @fluxcdbot - Update toolkit components

v0.31.3

Highlights

Flux v0.31.3 is a patch release that comes with fixes. Users are encouraged to upgrade for the best experience.

Fixes

• Fix for Helm OCI authentication where the credentials were cached instead of being reloaded at each reconciliation
• Fix for health checking Kubernetes Jobs when impersonating a service account

Components changelog

• source-controller v0.25.9
• kustomize-controller v0.26.2

CLI Changelog

• PR #2881 - @fluxcdbot - Update toolkit components
• PR #2877 - @sympatheticmoose - Add the --branch arg to the basic auth example

v0.31.2

Highlights

Flux v0.31.2 is a patch release that comes with fixes and small improvements. Users are encouraged to upgrade for the best experience.

Fixes and improvements

• Fix SSH connection leaks when using libgit2 managed transport
• Improve the libgit2 error messages when the known hosts check fails
• Fix authentication for BitBucket server when using libgit2 managed transport
• Fix flux logs when running Flux inside a service mesh
• Fix flux reconcile source helm when using Helm OCI
• Accept multiple values for flux create hr --values-from
• List the Flux CRDs and assert their statuses when running flux check
• Add finalizers to ImageRepository, ImagePolicy and ImageUpdateAutomation resources to properly record the metrics for deleted resources

Components changelog

• source-controller v0.25.8 v0.25.7 v0.25.6
• image-reflector-controller v0.19.2
• image-automation-controller v0.23.4 v0.23.3

CLI Changelog

• PR #2867 - @stefanprodan - Remove image finalizers on uninstall
• PR #2862 - @bplasmeijer - Put the dashboard configmap in the right namespace for monitoring
• PR #2859 - @somtochiama - Return different success message for oci type - reconcile_source_helm
• PR #2844 - @hiddeco - logs: select manager container when multiple exist
• PR #2839 - @fluxcdbot - Update toolkit components
• PR #2829 - @somtochiama - Accept multiple values for flux create hr --values-from
• PR #2823 - @stefanprodan - Add CRDs to flux check command

v0.31.1

Highlights

Flux v0.31.1 is a patch release that comes with important fixes and documentation improvements. Users are encouraged to upgrade for the best experience.

Fixes

• Fix semver sorting for Helm OCI charts (source-controller)
• Fix service account impersonation when using target namespace (helm-controller)
• Validate that the image name does not contain tags (image-reflector-controller)
• Fix libgit2 SSH host key verification (source-controller & image-automation-controller)
• Fix authentication when using Gitlab via HTTP/S (source-controller & image-automation-controller)

Documentation improvements

• Explain how to generate image pull secrets from SOPS encrypted .dockerconfigjson files
• Document all controller flags and their defaults
  • source-controller options
  • kustomize-controller options
  • helm-controller options
  • notification-controller options
  • image-automation-controller options
  • image-reflector-controller options

Components changelog

• source-controller v0.25.5 v0.25.4
• kustomize-controller v0.26.1
• helm-controller v0.22.1
• image-reflector-controller v0.19.1
• image-automation-controller v0.23.2 v0.23.1

CLI Changelog

• PR #2820 - @stefanprodan - Update dependencies
• PR #2814 - @fluxcdbot - Update toolkit components
• PR #2811 - @stefanprodan - [RFC-0002] Update status and implementation history

v0.31.0

Highlights

Flux v0.31.0 comes with new features and improvements. Users are encouraged to upgrade for the best experience.

Breaking changes

Flux is no longer compatible with kubeconfigs using client.authentication.k8s.io/v1alpha1, this version was deprecated and removed in Kubernetes 1.24. Please follow these instructions on how to update kubeconfig to client.authentication.k8s.io/v1beta1.

New features

• Pull Helm charts from container registries by configuring Helm repositories with type: oci.
  For more information please see the Helm OCI documentation.
• Trigger GitHub Actions workflows from Flux by configuring alerting providers with type: githubdispatch.
  For more information please see the GitHub dispatch provider documentation.

New guides

• Promote Flux Helm Releases with GitHub Actions.
• Using Flux on GKE with Google Cloud Source Repositories.
• Monitoring Flux logs with Loki and Grafana.

New improvements and fixes

• Starting with this version, all Flux controllers conform to the Kubernetes API Priority and Fairness.
• Add support for configuring the authentication to AWS KMS, Azure Key Vault and Google Cloud KMS on multi-tenant clusters.
• The Git reconciliation has been made more efficient by adding support for no-op clones that should reduce the outbound traffic substantially.
• The libgit2 managed transport feature has been enabled by default to improve the Azure DevOps and AWS CodeCommit Git operations.
• Fix an issue where the token used for Helm operations would go stale if it was provided using a Bound Service Account Token Volume.
• Update the controllers and CLI dependencies to Kubernetes v1.24, Kustomize v4.5.5 and Helm v3.9.0.

Components changelog

• source-controller v0.25.0 v0.25.1 v0.25.3
• kustomize-controller v0.26.0
• helm-controller v0.22.0
• notification-controller v0.24.0
• image-reflector-controller v0.19.0
• image-automation-controller v0.23.0

CLI Changelog

• PR #2809 - @fluxcdbot - Update source-controller to v0.25.3
• PR #2807 - @stefanprodan - Update dependencies
• PR #2806 - @stefanprodan - monitoring: Add Grafana Loki HR and Flux logs dashboard
• PR #2802 - @stefanprodan - Add --kubeconfig-secret-ref to flux create ks|hr
• PR #2801 - @stefanprodan - e2e: Update ARM64 runners to Kubernetes 1.24
• PR #2796 - @fluxcdbot - Update toolkit components
• PR #2792 - @somtochiama - Handle multi-doc yaml for flux build
• PR #2787 - @vipulnewaskar7 - Add --allow-insecure-http to bootstrap git
• PR #2782 - @stefanprodan - Refactor Flux Prometheus monitoring stack
• PR #2781 - @makkes - Add OCI support to create source helm
• PR #2778 - @stefanprodan - Update go-git-providers to v0.6.0
• PR #2775 - @fluxcdbot - Update toolkit components
• PR #2773 - @stefanprodan - Update dependencies
• PR #2769 - @stefanprodan - Update Go to 1.18 in CI
• PR #2767 - @takirala - Add --ignore-paths flag to flux create source (git|bucket)
• PR #2764 - @hiddeco - Ensure proper FS root is set while bootstrapping
• PR #2748 - @makkes - fix e2e tests
• PR #2747 - @dholbach - Move MAINTAINERS to f/community
• PR #2727 - @cr1cr1 - grafana: display exported ns, slight resizing, default sorting by state

v0.30.2

Flux v0.30.2 is a patch release with further patches around working with the macOS file-system.

Note that v0.29.0 included breaking changes, and v0.30.0 new features.

CLI Changelog

• PR #2703 - @aryan9600 - Modify tmp dir generation to be absolute on all OSes
• PR #2701 - @stefanprodan - Grant service account read-only access to controllers