Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.
The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC.
To verify the images and their provenance (SLSA level 3), please see the security documentation.
This minor release promotes the Bucket API to GA, and comes with new features,
improvements and bug fixes.
Bucket
The Bucket API has been promoted from v1beta2 to v1 (GA).
The v1 API is backwards compatible with v1beta2.
Bucket API now supports proxy through the field .spec.proxySecretRef and custom TLS client certificate and CA through the field .spec.certSecretRef.
Bucket API now also supports specifying a custom STS configuration through the field .spec.sts. This is currently only supported for the providers generic and aws. When specifying a custom STS configuration one must specify which STS provider to use. For the generic bucket provider we support the ldap STS provider, and for the aws bucket provider we support the aws STS provider. For the aws STS provider, one may use the default main STS endpoint, or the regional STS endpoints, or even an interface endpoint.
OCIRepository
OCIRepository API now supports proxy through the field .spec.proxySecretRef.
Warning: Proxy is not supported for cosign keyless verification.
GitRepository
GitRepository API now supports OIDC authentication for Azure DevOps repositories through the field .spec.provider using the value azure. See the docs for details here.
In addition, the Kubernetes dependencies have been updated to v1.31.1, Helm has
been updated to v3.16.1 and various other controller dependencies have been
updated to their latest version. The controller is now built with Go 1.23.
Fixes:
helm: Use the default transport pool to preserve proxy settings
#1490
Fix incorrect use of format strings with the conditions package.
#1529
Fix HelmChart local dependency resolution for name-based path
#1539
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
Bumps the flux-deps group with 1 update: github.com/fluxcd/source-controller/api.
Updates
github.com/fluxcd/source-controller/api
from 1.3.0 to 1.4.0Release notes
Sourced from github.com/fluxcd/source-controller/api's releases.
Changelog
Sourced from github.com/fluxcd/source-controller/api's changelog.
... (truncated)
Commits
e6e2b15
Merge pull request #1620 from fluxcd/release-v1.4.0e920838
Release v1.4.0c796f52
Add changelog entry for v1.4.003889fe
Merge pull request #1618 from fluxcd/dependabot/go_modules/go-deps-a9e873101f32bc10c
build(deps): bump the go-deps group across 1 directory with 3 updatesccdd523
Merge pull request #1614 from fluxcd/k8s-1.31.11e6ddbc
Update dependencies to Kubernetes 1.31.1852394e
Merge pull request #1591 from dipti-pai/git-azure-oidc-auth48417bd
Enable Azure OIDC for Azure DevOps Respository93253c7
Merge pull request #1610 from fluxcd/helm-3.16.0Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show