rwaltr / dotfiles

7 stars 0 forks source link

feat!: update fluxcd/flux2 to v2.0.0 #353

Open teletraan-x[bot] opened 1 year ago

teletraan-x[bot] commented 1 year ago

This PR contains the following updates:

Package Update Change
fluxcd/flux2 major v0.38.2 -> v2.0.0

Release Notes

fluxcd/flux2 ### [`v2.0.0`](https://togithub.com/fluxcd/flux2/releases/tag/v2.0.0) [Compare Source](https://togithub.com/fluxcd/flux2/compare/v0.41.2...v2.0.0) #### Highlights This is the first General Availability (GA) release of Flux v2. Flux v2.0.0 comes with the promotion of the [GitOps related APIs to v1](#api-changes) and adds [horizontal scaling & sharding capabilities](https://fluxcd.io/flux/cheatsheets/sharding/) to Flux controllers. The Git bootstrap capabilities provided by the [Flux CLI](https://fluxcd.io/flux/installation/#bootstrap) and by [Flux Terraform Provider](https://fluxcd.io/flux/installation/#bootstrap-with-terraform) are now considered stable and production ready. Starting with this version, the build, release and provenance portions of the Flux project supply chain [provisionally meet SLSA Build Level 3](https://fluxcd.io/flux/security/slsa-assessment/). Flux GA is fully integrated with Kubernetes Workload Identity for AWS, Azure and Google Cloud to facilitate [passwordless authentication](https://fluxcd.io/flux/security/contextual-authorization) to OCI sources (container images, OCI artifacts, Helm charts). The Flux alerting capabilities have been extended with [PagerDuty](https://fluxcd.io/flux/components/notification/provider/#pagerduity) and [Google Pub/Sub](https://fluxcd.io/flux/components/notification/provider/#google-pubsub) support. The improved Alert v1beta2 API provides better control over [events filtering](https://fluxcd.io/flux/components/notification/alert/#event-inclusion) and allows users to enrich the alerts with [custom metadata](https://fluxcd.io/flux/components/notification/alert/#event-metadata). #### Supported versions Starting with this version, the Flux CLI and the GA components (source-controller, kustomize-controller and notification-controller) follow the release cadence and support pledge documented in the [Flux release specification](https://fluxcd.io/flux/releases/). ##### Kubernetes compatibility This release is compatible with the following Kubernetes versions: | Kubernetes version | Minimum required | |--------------------|------------------| | `v1.24` | `>= 1.24.0` | | `v1.25` | `>= 1.25.0` | | `v1.26` | `>= 1.26.0` | | `v1.27` | `>= 1.27.1` | Note that Flux may work on older versions of Kubernetes e.g. 1.19, but we don't recommend running end-of-life versions in production nor do we offer support for these versions. ##### Flux ecosystem support The following (open-source) extensions & integrations are compatible with this Flux release, starting from the specified minimum version or higher. | Type | Project | Version | |-------------|---------------------------------------------------------------------|-------------| | Flux Web UI | [weave-gitops](https://togithub.com/weaveworks/weave-gitops) | `0.26.0` | | Terraform integration | [tf-controller](https://togithub.com/weaveworks/tf-controller) | `0.15.0` | #### API changes ##### GitRepository v1 The [GitRepository](https://fluxcd.io/flux/components/source/gitrepositories/) kind was promoted from v1beta2 to v1 (GA) and deprecated fields were removed. The v1 API is backwards compatible with v1beta2, except for the following: - the deprecated field `.spec.gitImplementation` was removed - the unused field `.spec.accessFrom` was removed - the deprecated field `.status.contentConfigChecksum` was removed - the deprecated field `.status.artifact.checksum` was removed - the `.status.url` was removed (replaced by `.status.artifact.url`) ##### Kustomization v1 The [Kustomization](https://fluxcd.io/flux/components/kustomize/kustomization/) kind was promoted from v1beta2 to v1 (GA) and deprecated fields were removed. A new optional field `.spec.commonMetadata` was added to the API for setting labels and/or annotations to all resources part of a Kustomization. The v1 API is backwards compatible with v1beta2, except for the following: - the deprecated field `.spec.validation` was removed - the deprecated field `.spec.patchesStrategicMerge` was removed (replaced by `.spec.patches`) - the deprecated field ` .spec.patchesJson6902 ` was removed (replaced by `.spec.patches`) ##### Receiver v1 The [Receiver](https://fluxcd.io/flux/components/notification/receiver/) kind was promoted from v1beta2 to v1 (GA) and deprecated fields were removed. The v1 API is backwards compatible with v1beta2, except for the following: - the deprecated field `.status.url` was removed (replaced by `.status.webhookPath`) #### Upgrade procedure Upgrade Flux from `v0.x` to `v2.0.0` either by [rerunning bootstrap](https://fluxcd.io/flux/installation/#bootstrap-upgrade) or by using the [Flux GitHub Action](https://togithub.com/fluxcd/flux2/tree/main/action). To upgrade the APIs from v1beta2, make sure the new CRDs and controllers are deployed, and then change the manifests in Git: 1. Remove the deprecated fields from the `GitRepository` and `Kustomization` definitions. 2. Commit, push and reconcile the fields removal changes. 3. Set `apiVersion: source.toolkit.fluxcd.io/v1` in the YAML files that contain `GitRepository` definitions. 4. Set `apiVersion: kustomize.toolkit.fluxcd.io/v1` in the YAML files that contain Flux `Kustomization` definitions. 5. Set `apiVersion: notification.toolkit.fluxcd.io/v1` in the YAML files that contain `Receiver` definitions. 6. Commit, push and reconcile the API version changes. Bumping the APIs version in manifests can be done gradually. It is advised to not delay this procedure as the beta versions will be removed after 6 months. ##### New Documentation - [Release cadence and support](ttps://fluxcd.io/flux/releases/) - [SLSA Assessment](https://fluxcd.io/flux/security/slsa-assessment/) - [Controller sharding and horizontal scaling](https://fluxcd.io/flux/cheatsheets/sharding/) - [GitRepository v1 specification](https://fluxcd.io/flux/components/source/gitrepositories/) - [Kustomization v1 specification](https://fluxcd.io/flux/components/kustomize/kustomization/) - [Receiver v1 specification](https://fluxcd.io/flux/components/notification/receiver/) :heart: Big thanks to all the Flux contributors that helped us reach this milestone! :clap: And a special shoutout to the Flux community who supported us over the years! #### Components changelog - source-controller [v1.0.0](https://togithub.com/fluxcd/source-controller/blob/v1.0.0/CHANGELOG.md) - kustomize-controller [v1.0.0](https://togithub.com/fluxcd/kustomize-controller/blob/v1.0.0/CHANGELOG.md) - notification-controller [v1.0.0](https://togithub.com/fluxcd/notification-controller/blob/v1.0.0/CHANGELOG.md) - helm-controller [v0.35.0](https://togithub.com/fluxcd/helm-controller/blob/v0.35.0/CHANGELOG.md) - image-reflector-controller [v0.29.0](https://togithub.com/fluxcd/image-reflector-controller/blob/v0.29.0/CHANGELOG.md) - image-automation-controller [v0.35.0](https://togithub.com/fluxcd/image-automation-controller/blob/v0.35.0/CHANGELOG.md) #### CLI Changelog - PR [#​4035](https://togithub.com/fluxcd/flux2/issues/4035) - [@​stefanprodan](https://togithub.com/stefanprodan) - Update dependencies - PR [#​4033](https://togithub.com/fluxcd/flux2/issues/4033) - [@​stefanprodan](https://togithub.com/stefanprodan) - docs: link to releases spec from website - PR [#​4031](https://togithub.com/fluxcd/flux2/issues/4031) - [@​stefanprodan](https://togithub.com/stefanprodan) - Run conformance tests for Kubernetes v1.27.3 - PR [#​4029](https://togithub.com/fluxcd/flux2/issues/4029) - [@​stefanprodan](https://togithub.com/stefanprodan) - Run e2e tests on release branches - PR [#​4028](https://togithub.com/fluxcd/flux2/issues/4028) - [@​makkes](https://togithub.com/makkes) - Annotate errors from go-git-providers - PR [#​4027](https://togithub.com/fluxcd/flux2/issues/4027) - [@​hiddeco](https://togithub.com/hiddeco) - Update go-git to unreleased v5.8.0 - PR [#​4023](https://togithub.com/fluxcd/flux2/issues/4023) - [@​stefanprodan](https://togithub.com/stefanprodan) - Add backport GitHub Action workflow - PR [#​4020](https://togithub.com/fluxcd/flux2/issues/4020) - [@​stefanprodan](https://togithub.com/stefanprodan) - Set minimum supported version to Kubernetes 1.24.0 - PR [#​4018](https://togithub.com/fluxcd/flux2/issues/4018) - [@​stefanprodan](https://togithub.com/stefanprodan) - docs: Fix the `flux push` example for ECR - PR [#​4015](https://togithub.com/fluxcd/flux2/issues/4015) - [@​stefanprodan](https://togithub.com/stefanprodan) - Align `go.mod` version with Kubernetes (Go 1.20) - PR [#​4008](https://togithub.com/fluxcd/flux2/issues/4008) - [@​stefanprodan](https://togithub.com/stefanprodan) - Add SLSA3 generators to release workflow - PR [#​4006](https://togithub.com/fluxcd/flux2/issues/4006) - [@​fluxcdbot](https://togithub.com/fluxcdbot) - Update toolkit components - PR [#​4002](https://togithub.com/fluxcd/flux2/issues/4002) - [@​makkes](https://togithub.com/makkes) - Don't log errors with missing CRDs for "get \* all" commands - PR [#​3990](https://togithub.com/fluxcd/flux2/issues/3990) - [@​aryan9600](https://togithub.com/aryan9600) - RFC-0004: add section about proxy - PR [#​3976](https://togithub.com/fluxcd/flux2/issues/3976) - [@​darklore](https://togithub.com/darklore) - Use equivalent and shorter way to generate shell completions - PR [#​3955](https://togithub.com/fluxcd/flux2/issues/3955) - [@​somtochiama](https://togithub.com/somtochiama) - Fix 'patchesJson6902' is deprecated' warning - PR [#​3945](https://togithub.com/fluxcd/flux2/issues/3945) - [@​makkes](https://togithub.com/makkes) - Make `flux logs` more lenient ### [`v0.41.2`](https://togithub.com/fluxcd/flux2/releases/tag/v0.41.2) [Compare Source](https://togithub.com/fluxcd/flux2/compare/v0.41.1...v0.41.2) Flux v0.41.2 is a patch release which fixes a range of bugs found in the controllers. Please refer to the individual component changelogs for more information. :bulb: For more information about other features introduced in v0.41.0, please refer to [the changelog for this version](https://togithub.com/fluxcd/flux2/releases/tag/v0.41.0). ##### Components Changelog - source-controller [v0.36.1](https://togithub.com/fluxcd/source-controller/blob/v0.36.1/CHANGELOG.md) - kustomize-controller [v0.35.1](https://togithub.com/fluxcd/kustomize-controller/blob/v0.35.1/CHANGELOG.md) - helm-controller [v0.31.2](https://togithub.com/fluxcd/helm-controller/blob/v0.31.2/CHANGELOG.md) - image-reflector-controller [v0.26.1](https://togithub.com/fluxcd/image-reflector-controller/blob/v0.26.1/CHANGELOG.md) ##### CLI Changelog - PR [#​3710](https://togithub.com/fluxcd/flux2/issues/3710) - [@​hiddeco](https://togithub.com/hiddeco) - tests/azure: update toolkit components - PR [#​3707](https://togithub.com/fluxcd/flux2/issues/3707) - [@​fluxcdbot](https://togithub.com/fluxcdbot) - Update toolkit components - PR [#​3706](https://togithub.com/fluxcd/flux2/issues/3706) - [@​hiddeco](https://togithub.com/hiddeco) - build: update `actions/setup-go` in workflows - PR [#​3704](https://togithub.com/fluxcd/flux2/issues/3704) - [@​dependabot](https://togithub.com/dependabot)\[bot] - build(deps): bump peter-evans/create-pull-request from 4.2.3 to 4.2.4 - PR [#​3703](https://togithub.com/fluxcd/flux2/issues/3703) - [@​dependabot](https://togithub.com/dependabot)\[bot] - build(deps): bump github/codeql-action from 2.2.6 to 2.2.7 - PR [#​3701](https://togithub.com/fluxcd/flux2/issues/3701) - [@​dependabot](https://togithub.com/dependabot)\[bot] - build(deps): bump actions/checkout from 3.3.0 to 3.4.0 - PR [#​3685](https://togithub.com/fluxcd/flux2/issues/3685) - [@​dependabot](https://togithub.com/dependabot)\[bot] - build(deps): bump actions/cache from 3.2.6 to 3.3.0 - PR [#​3684](https://togithub.com/fluxcd/flux2/issues/3684) - [@​dependabot](https://togithub.com/dependabot)\[bot] - build(deps): bump github/codeql-action from 2.2.5 to 2.2.6 - PR [#​3683](https://togithub.com/fluxcd/flux2/issues/3683) - [@​dependabot](https://togithub.com/dependabot)\[bot] - build(deps): bump docker/setup-buildx-action from 2.4.1 to 2.5.0 ### [`v0.41.1`](https://togithub.com/fluxcd/flux2/releases/tag/v0.41.1) [Compare Source](https://togithub.com/fluxcd/flux2/compare/v0.41.0...v0.41.1) Flux v0.41.1 is a patch release which extends the helm-controller's OOM watch feature introduced in v0.41.0 with support for automatic detection of cgroup v1 paths, and flags to configure alternative paths using `--oom-watch-max-memory-path` and `--oom-watch-current-memory-path`. :bulb: For more information about other features introduced in v0.41.0, please refer to [the changelog for this version](https://togithub.com/fluxcd/flux2/releases/tag/v0.41.0). #### Components changelog - helm-controller [v0.31.1](https://togithub.com/fluxcd/helm-controller/blob/v0.31.1/CHANGELOG.md) #### CLI Changelog - PR [#​3680](https://togithub.com/fluxcd/flux2/issues/3680) - [@​fluxcdbot](https://togithub.com/fluxcdbot) - Update toolkit components - PR [#​3676](https://togithub.com/fluxcd/flux2/issues/3676) - [@​stefanprodan](https://togithub.com/stefanprodan) - Disable drift detection for kube-prometheus-stack webhooks ### [`v0.41.0`](https://togithub.com/fluxcd/flux2/releases/tag/v0.41.0) [Compare Source](https://togithub.com/fluxcd/flux2/compare/v0.40.2...v0.41.0) Flux v0.41.0 comes with new features and improvements. Users are encouraged to upgrade for the best experience. #### Features and improvements - Experimental support of drift detection of Helm releases compared to cluster-state. - Improved handling of `SIGTERM` signals received by the helm-controller, which will now terminate running Helm install or upgrade actions, instead of potentially leaving them in a pending state. - Opt-in OOM watcher in helm-controller to handle graceful termination of the controller before it is forcefully killed by Kubernetes' OOM killer. - Kubernetes client and Custom Resource Definition life-cycle improvements to reduce the memory consumption of the helm-controller, with observed reductions up to 50%. - Opt-in allowance of DNS lookups during the rendering of Helm templates in the helm-controller via feature gate. - Optional disabling of the cache of the status poller used to determine the health of the resources applied by the kustomize-controller. This may improve memory usage on large scale clusters at the cost of more direct API calls. - Changes to the logging of all controllers to ensure Kubernetes components like the discovery client use the configured logging format. - New `flux events` command to display Kubernetes events for Flux resources, including the events of a referenced resource. - Custom annotations can now be set with `flux push` using `--annotations`. #### New documentation - Cheatsheet: [Enable Helm drift detection](https://fluxcd.io/flux/cheatsheets/bootstrap/#enable-helm-drift-detection) - Cheatsheet: [Enable Helm near OOM detection](https://fluxcd.io/flux/cheatsheets/bootstrap/#enable-helm-near-oom-detection) - Cheatsheet: [Allow Helm DNS lookups](https://fluxcd.io/flux/cheatsheets/bootstrap/#allow-helm-dns-lookups) - Controller: [New helm-controller feature gates and options](https://fluxcd.io/flux/components/helm/options/#feature-gates) - Controller: [New kustomize-controller feature gate](https://fluxcd.io/flux/components/kustomize/options/#feature-gates) - Spec: [HelmRelease drift detection](https://fluxcd.io/flux/components/helm/helmreleases/#drift-detection) #### Components changelog - source-controller [v0.36.0](https://togithub.com/fluxcd/source-controller/blob/v0.36.0/CHANGELOG.md) - kustomize-controller [v0.35.0](https://togithub.com/fluxcd/kustomize-controller/blob/v0.35.0/CHANGELOG.md) - helm-controller [v0.31.0](https://togithub.com/fluxcd/helm-controller/blob/v0.31.0/CHANGELOG.md) - notification-controller [v0.33.0](https://togithub.com/fluxcd/notification-controller/blob/v0.33.0/CHANGELOG.md) - image-reflector-controller [v0.26.0](https://togithub.com/fluxcd/image-reflector-controller/blob/v0.26.0/CHANGELOG.md) - image-automation-controller [v0.31.0](https://togithub.com/fluxcd/image-automation-controller/blob/v0.31.0/CHANGELOG.md) #### CLI Changelog - PR [#​3628](https://togithub.com/fluxcd/flux2/issues/3628) - [@​somtochiama](https://togithub.com/somtochiama) - Add `flux events` command - PR [#​3674](https://togithub.com/fluxcd/flux2/issues/3674) - [@​hiddeco](https://togithub.com/hiddeco) - Update dependencies - PR [#​3673](https://togithub.com/fluxcd/flux2/issues/3673) - [@​stefanprodan](https://togithub.com/stefanprodan) - ci: Use latest available images of kindest/node - PR [#​3672](https://togithub.com/fluxcd/flux2/issues/3672) - [@​hiddeco](https://togithub.com/hiddeco) - tests/azure: update dependencies - PR [#​3670](https://togithub.com/fluxcd/flux2/issues/3670) - [@​hiddeco](https://togithub.com/hiddeco) - Update Go to 1.20 - PR [#​3669](https://togithub.com/fluxcd/flux2/issues/3669) - [@​hiddeco](https://togithub.com/hiddeco) - Update GitHub Action workflows - PR [#​3667](https://togithub.com/fluxcd/flux2/issues/3667) - [@​hiddeco](https://togithub.com/hiddeco) - Update helm-controller to v0.31.0 - PR [#​3666](https://togithub.com/fluxcd/flux2/issues/3666) - [@​fluxcdbot](https://togithub.com/fluxcdbot) - Update toolkit components - PR [#​3653](https://togithub.com/fluxcd/flux2/issues/3653) - [@​stefanprodan](https://togithub.com/stefanprodan) - Allow custom annotations to be set when pushing OCI artifacts ### [`v0.40.2`](https://togithub.com/fluxcd/flux2/releases/tag/v0.40.2) [Compare Source](https://togithub.com/fluxcd/flux2/compare/v0.40.1...v0.40.2) Flux v0.40.2 is a patch release which includes an update of the notification-controller to prevent an issue with the default API version used for ImageRepositories when no specific version is configured on a Receiver. Users are encouraged to upgrade for the best experience. :warning: Note that v0.40.0 contained breaking changes, please refer to [the changelog](https://togithub.com/fluxcd/flux2/releases/tag/v0.40.0) for more information. #### Components changelog - notification-controller [v0.32.1](https://togithub.com/fluxcd/notification-controller/blob/v0.32.1/CHANGELOG.md) #### CLI Changelog - PR [#​3645](https://togithub.com/fluxcd/flux2/issues/3645) - [@​hiddeco](https://togithub.com/hiddeco) - Update dependencies - PR [#​3644](https://togithub.com/fluxcd/flux2/issues/3644) - [@​fluxcdbot](https://togithub.com/fluxcdbot) - Update toolkit components - PR [#​3638](https://togithub.com/fluxcd/flux2/issues/3638) - [@​dependabot](https://togithub.com/dependabot)\[bot] - build(deps): bump actions/cache from 3.2.5 to 3.2.6 - PR [#​3637](https://togithub.com/fluxcd/flux2/issues/3637) - [@​dependabot](https://togithub.com/dependabot)\[bot] - build(deps): bump github/codeql-action from 2.2.4 to 2.2.5 ### [`v0.40.1`](https://togithub.com/fluxcd/flux2/releases/tag/v0.40.1) [Compare Source](https://togithub.com/fluxcd/flux2/compare/v0.40.0...v0.40.1) Flux v0.40.1 is a patch release which includes an update of the source-controller to prevent excessive memory usage while reconciling HelmRepository objects. Users are encouraged to upgrade for the best experience. :warning: Note that v0.40.0 contained breaking changes, please refer to [the changelog](https://togithub.com/fluxcd/flux2/releases/tag/v0.40.0) for more information. ##### Components changelog - source-controller [v0.35.2](https://togithub.com/fluxcd/source-controller/blob/v0.35.2/CHANGELOG.md) ##### CLI Changelog - PR [#​3626](https://togithub.com/fluxcd/flux2/issues/3626) - [@​hiddeco](https://togithub.com/hiddeco) - Update dependencies - PR [#​3624](https://togithub.com/fluxcd/flux2/issues/3624) - [@​fluxcdbot](https://togithub.com/fluxcdbot) - Update toolkit components - PR [#​3615](https://togithub.com/fluxcd/flux2/issues/3615) - [@​stefanprodan](https://togithub.com/stefanprodan) - Update implementation history of RFC-0003 and RFC-0005 ### [`v0.40.0`](https://togithub.com/fluxcd/flux2/releases/tag/v0.40.0) [Compare Source](https://togithub.com/fluxcd/flux2/compare/v0.39.0...v0.40.0) #### Highlights Flux v0.40.0 comes with new features and improvements. Users are encouraged to upgrade for the best experience. ##### Breaking changes **Image Automation** The image-reflector-controller autologin flags have been deprecated and are no longer used. Please see the new API specification and migration instructions in the controller [changelog](https://togithub.com/fluxcd/image-reflector-controller/blob/main/CHANGELOG.md#​0250). **Notifications** The source revision format reported by the Flux controllers has changed according to [RFC-0005](https://togithub.com/fluxcd/flux2/tree/main/rfcs/0005-artifact-revision-and-digest). The events referring to Git repositories, will report the revision in the format `@​sha1:` instead of `/`. For more details please see the source-controller [changelog](https://togithub.com/fluxcd/source-controller/blob/main/CHANGELOG.md#​0350). **OCI artifacts** The OCI artifacts produced with `flux push artifact` have now custom media types: - artifact media type `application/vnd.oci.image.manifest.v1+json` - config media type `application/vnd.cncf.flux.config.v1+json` - content media type `application/vnd.cncf.flux.content.v1.tar+gzip` ##### Features and improvements - The `GitRepository` API has a new optional field `.spec.ref.name` for specifying a [Git Reference](https://git-scm.com/book/en/v2/Git-Internals-Git-References). This allows Flux to reconcile resources from GitHub Pull Requests (`refs/pull//head`) and GitLab Merge Requests (`refs/merge-requests//head`). - The `ImageRepository` and `ImagePolicy` APIs have been promoted to `v1beta2`. - Allow specifying the cloud provider contextual login for container registries with `ImageRepository.spec.provider`. - Improve observability of `ImageRepository` by showing the latest scanned tags under `.status.lastScanResult.latestTags`. - Improve observability of `ImagePolicy` by reporting the current and previous image tag in status and events. - The Kubernetes builtin cluster roles: `view`, `edit` and `admin` have been extended to allow access to Flux custom resources. - Print a report of Flux custom resources and the amount of cumulative storage used for each source type with `flux stats -A`. ##### New Documentation - API: [ImageRepository v1beta2](https://fluxcd.io/flux/components/image/imagerepositories/) - API: [ImagePolicy v1beta2](https://fluxcd.io/flux/components/image/imagepolicies/) - Security: [Aggregated cluster roles](https://fluxcd.io/flux/security/#controller-permissions) - Bootstrap: [Disable Kubernetes cluster role aggregations](https://fluxcd.io/flux/cheatsheets/bootstrap/#disable-kubernetes-cluster-role-aggregations) - Blog: [How Flux and Pulumi give each other superpowers](https://fluxcd.io/blog/2023/02/flux-pulumi-superpowers/) #### Components changelog - source-controller [v0.35.1](https://togithub.com/fluxcd/source-controller/blob/v0.35.1/CHANGELOG.md) [v0.35.0](https://togithub.com/fluxcd/source-controller/blob/v0.35.0/CHANGELOG.md) - kustomize-controller [v0.34.0](https://togithub.com/fluxcd/kustomize-controller/blob/v0.34.0/CHANGELOG.md) - helm-controller [v0.30.0](https://togithub.com/fluxcd/helm-controller/blob/v0.30.0/CHANGELOG.md) - notification-controller [v0.32.0](https://togithub.com/fluxcd/notification-controller/blob/v0.32.0/CHANGELOG.md) - image-reflector-controller [v0.25.0](https://togithub.com/fluxcd/image-reflector-controller/blob/v0.25.0/CHANGELOG.md) - image-automation-controller [v0.30.0](https://togithub.com/fluxcd/image-automation-controller/blob/v0.30.0/CHANGELOG.md) #### CLI Changelog - PR [#​3612](https://togithub.com/fluxcd/flux2/issues/3612) - [@​dependabot](https://togithub.com/dependabot)\[bot] - build(deps): bump fossa-contrib/fossa-action from 1.2.0 to 2.0.0 - PR [#​3610](https://togithub.com/fluxcd/flux2/issues/3610) - [@​hiddeco](https://togithub.com/hiddeco) - Update dependencies - PR [#​3606](https://togithub.com/fluxcd/flux2/issues/3606) - [@​hiddeco](https://togithub.com/hiddeco) - build: further solve issue release workflow - PR [#​3605](https://togithub.com/fluxcd/flux2/issues/3605) - [@​hiddeco](https://togithub.com/hiddeco) - build: ensure newlines work with $GITHUB_OUTPUT - PR [#​3604](https://togithub.com/fluxcd/flux2/issues/3604) - [@​hiddeco](https://togithub.com/hiddeco) - build: convert ::set-output to $GITHUB_OUTPUT - PR [#​3603](https://togithub.com/fluxcd/flux2/issues/3603) - [@​stefanprodan](https://togithub.com/stefanprodan) - Remove deprecated flags - PR [#​3602](https://togithub.com/fluxcd/flux2/issues/3602) - [@​hiddeco](https://togithub.com/hiddeco) - Update source-controller to v0.35.1 - PR [#​3601](https://togithub.com/fluxcd/flux2/issues/3601) - [@​stefanprodan](https://togithub.com/stefanprodan) - ci: Fix Snyk Go build VCS stamping error - PR [#​3598](https://togithub.com/fluxcd/flux2/issues/3598) - [@​fluxcdbot](https://togithub.com/fluxcdbot) - Update toolkit components - PR [#​3592](https://togithub.com/fluxcd/flux2/issues/3592) - [@​hiddeco](https://togithub.com/hiddeco) - tests: only provide template values when used - PR [#​3587](https://togithub.com/fluxcd/flux2/issues/3587) - [@​hiddeco](https://togithub.com/hiddeco) - Support shortening of revision with digest - PR [#​3585](https://togithub.com/fluxcd/flux2/issues/3585) - [@​darkowlzz](https://togithub.com/darkowlzz) - Update image-reflector API to v1beta2 - PR [#​3584](https://togithub.com/fluxcd/flux2/issues/3584) - [@​dependabot](https://togithub.com/dependabot)\[bot] - build(deps): bump docker/setup-buildx-action from 2.4.0 to 2.4.1 - PR [#​3583](https://togithub.com/fluxcd/flux2/issues/3583) - [@​dependabot](https://togithub.com/dependabot)\[bot] - build(deps): bump snyk/actions from [`e25b2e6`](https://togithub.com/fluxcd/flux2/commit/e25b2e6f5658d1bb7a6671b113260f13134cc3af) to [`8061827`](https://togithub.com/fluxcd/flux2/commit/806182742461562b67788a64410098c9d9b96adb) - PR [#​3582](https://togithub.com/fluxcd/flux2/issues/3582) - [@​dependabot](https://togithub.com/dependabot)\[bot] - build(deps): bump actions/cache from 3.2.4 to 3.2.5 - PR [#​3581](https://togithub.com/fluxcd/flux2/issues/3581) - [@​dependabot](https://togithub.com/dependabot)\[bot] - build(deps): bump github/codeql-action from 2.2.1 to 2.2.4 - PR [#​3578](https://togithub.com/fluxcd/flux2/issues/3578) - [@​stefanprodan](https://togithub.com/stefanprodan) - Add `flux stats` command to print the reconcilers status - PR [#​3575](https://togithub.com/fluxcd/flux2/issues/3575) - [@​stefanprodan](https://togithub.com/stefanprodan) - RFC-0003: Introduce Flux OCI media type - PR [#​3566](https://togithub.com/fluxcd/flux2/issues/3566) - [@​stefanprodan](https://togithub.com/stefanprodan) - rbac: Add view and edit aggregated cluster roles - PR [#​3563](https://togithub.com/fluxcd/flux2/issues/3563) - [@​dependabot](https://togithub.com/dependabot)\[bot] - build(deps): bump actions/cache from 3.2.3 to 3.2.4 - PR [#​3562](https://togithub.com/fluxcd/flux2/issues/3562) - [@​dependabot](https://togithub.com/dependabot)\[bot] - build(deps): bump goreleaser/goreleaser-action from 4.1.1 to 4.2.0 - PR [#​3560](https://togithub.com/fluxcd/flux2/issues/3560) - [@​stefanprodan](https://togithub.com/stefanprodan) - docs: Add permissions to update workflow ### [`v0.39.0`](https://togithub.com/fluxcd/flux2/releases/tag/v0.39.0) [Compare Source](https://togithub.com/fluxcd/flux2/compare/v0.38.3...v0.39.0) #### Highlights Flux v0.39.0 comes with new features and improvements. Users are encouraged to upgrade for the best experience. Starting with this version, the Flux controllers come with [SBOMs and SLSA Provenance Attestations](https://fluxcd.io/flux/security/) embedded in their container images. The [Flux Terraform Provider](https://togithub.com/fluxcd/terraform-provider-flux) has a new resource for bootstrapping Flux, without depending on third-party Terraform providers, that allows customising the controllers at install time. Users are encouraged to migrate to this new resources and provide feedback. The Flux CLI is now included in [Wolfi OS](https://togithub.com/wolfi-dev/os), the Linux (Un)distro designed for securing the software supply chain. The Chainguard team and Wolfi maintainers are shipping updates for the Flux package on a regular basis. ##### Features and improvements - Recreate immutable resources (e.g. Kubernetes Jobs) by annotating or labeling them with `kustomize.toolkit.fluxcd.io/force: enabled`. - Support for HTTPS bearer token authentication for Git repositories. - Improve memory usage by disabling the caching of Secret and ConfigMap resources in all controllers. - Better observability with progressive status updates for Sources (Git, OCI, Helm, S3 Buckets). - Allow extracting the OCI artifact SHA256 digest for Cosign with `flux push artifact -o json`. - Track CRDs managed by Flux, `flux trace` and `flux tree` will show which HelmRelease deployed which CRDs. - Allow the Flux GitHub Action to use a GitHub token when checking for updates to avoid rate limiting. ##### New documentation - Security: [Software Bill of Materials](https://fluxcd.io/flux/security/#software-bill-of-materials) - Security: [SLSA Provenance Attestations](https://fluxcd.io/flux/security/#slsa-provenance-attestations) - Security: [Scanning Flux images for CVEs](https://fluxcd.io/flux/security/#scanning-for-cves) #### Components changelog - source-controller [v0.34.0](https://togithub.com/fluxcd/source-controller/blob/v0.34.0/CHANGELOG.md) - kustomize-controller [v0.33.0](https://togithub.com/fluxcd/kustomize-controller/blob/v0.33.0/CHANGELOG.md) - helm-controller [v0.29.0](https://togithub.com/fluxcd/helm-controller/blob/v0.29.0/CHANGELOG.md) - notification-controller [v0.31.0](https://togithub.com/fluxcd/notification-controller/blob/v0.31.0/CHANGELOG.md) - image-reflector-controller [v0.24.0](https://togithub.com/fluxcd/image-reflector-controller/blob/v0.24.0/CHANGELOG.md) - image-automation-controller [v0.29.0](https://togithub.com/fluxcd/image-automation-controller/blob/v0.29.0/CHANGELOG.md) #### CLI Changelog - PR [#​3550](https://togithub.com/fluxcd/flux2/issues/3550) - [@​stefanprodan](https://togithub.com/stefanprodan) - flux tree: Set CRDs GroupKind in output - PR [#​3549](https://togithub.com/fluxcd/flux2/issues/3549) - [@​stefanprodan](https://togithub.com/stefanprodan) - flux tree: Track CRDs managed by HelmReleases - PR [#​3545](https://togithub.com/fluxcd/flux2/issues/3545) - [@​fluxcdbot](https://togithub.com/fluxcdbot) - Update toolkit components - PR [#​3542](https://togithub.com/fluxcd/flux2/issues/3542) - [@​stefanprodan](https://togithub.com/stefanprodan) - flux tree: Add namespaces to objects reconciled from HRs - PR [#​3540](https://togithub.com/fluxcd/flux2/issues/3540) - [@​stefanprodan](https://togithub.com/stefanprodan) - Add json/yaml output to flux push artifact - PR [#​3537](https://togithub.com/fluxcd/flux2/issues/3537) - [@​stefanprodan](https://togithub.com/stefanprodan) - Update dependencies to Kubernetes v1.26.1 - PR [#​3532](https://togithub.com/fluxcd/flux2/issues/3532) - [@​stefanprodan](https://togithub.com/stefanprodan) - Update Alpine to v3.17 and kubectl to v1.26.1 in flux-cli image - PR [#​3531](https://togithub.com/fluxcd/flux2/issues/3531) - [@​makkes](https://togithub.com/makkes) - fix misleading messaging when using `-A` flag - PR [#​3529](https://togithub.com/fluxcd/flux2/issues/3529) - [@​dependabot](https://togithub.com/dependabot)\[bot] - build(deps): bump docker/setup-buildx-action from 2.2.1 to 2.4.0 - PR [#​3526](https://togithub.com/fluxcd/flux2/issues/3526) - [@​dependabot](https://togithub.com/dependabot)\[bot] - Bump anchore/sbom-action from 0.13.1 to 0.13.3 - PR [#​3525](https://togithub.com/fluxcd/flux2/issues/3525) - [@​dependabot](https://togithub.com/dependabot)\[bot] - Bump github/codeql-action from 2.1.38 to 2.2.1 - PR [#​3524](https://togithub.com/fluxcd/flux2/issues/3524) - [@​dependabot](https://togithub.com/dependabot)\[bot] - Bump goreleaser/goreleaser-action from 4.1.0 to 4.1.1 - PR [#​3517](https://togithub.com/fluxcd/flux2/issues/3517) - [@​jooooel](https://togithub.com/jooooel) - Fix broken GitHub Action and handle case where VERSION is provided as an input - PR [#​3507](https://togithub.com/fluxcd/flux2/issues/3507) - [@​thezanke](https://togithub.com/thezanke) - Update prometheus-community helm repo due to the suspension of OCI builds - PR [#​3501](https://togithub.com/fluxcd/flux2/issues/3501) - [@​kingdonb](https://togithub.com/kingdonb) - Add GITHUB_TOKEN to Flux GitHub Action - PR [#​3488](https://togithub.com/fluxcd/flux2/issues/3488) - [@​dependabot](https://togithub.com/dependabot)\[bot] - Bump snyk/actions from [`1cc9026`](https://togithub.com/fluxcd/flux2/commit/1cc9026f51d822442cb4b872d8d7ead8cc69a018) to [`e25b2e6`](https://togithub.com/fluxcd/flux2/commit/e25b2e6f5658d1bb7a6671b113260f13134cc3af) - PR [#​3487](https://togithub.com/fluxcd/flux2/issues/3487) - [@​dependabot](https://togithub.com/dependabot)\[bot] - Bump actions/cache from 3.2.2 to 3.2.3 - PR [#​3486](https://togithub.com/fluxcd/flux2/issues/3486) - [@​dependabot](https://togithub.com/dependabot)\[bot] - Bump github/codeql-action from 2.1.37 to 2.1.38 - PR [#​3477](https://togithub.com/fluxcd/flux2/issues/3477) - [@​raffis](https://togithub.com/raffis) - fix(install-script): support $GITHUB_TOKEN ### [`v0.38.3`](https://togithub.com/fluxcd/flux2/releases/tag/v0.38.3) [Compare Source](https://togithub.com/fluxcd/flux2/compare/v0.38.2...v0.38.3) #### Highlights Flux v0.38.3 is a patch release that comes with fixes and small improvements to the CLI. Users are encouraged to upgrade for the best experience. #### CLI Changelog - PR [#​3476](https://togithub.com/fluxcd/flux2/issues/3476) - [@​aryan9600](https://togithub.com/aryan9600) - Update git/gogit to v0.4.1 - PR [#​3469](https://togithub.com/fluxcd/flux2/issues/3469) - [@​dependabot](https://togithub.com/dependabot)\[bot] - Bump actions/checkout from 3.2.0 to 3.3.0 - PR [#​3465](https://togithub.com/fluxcd/flux2/issues/3465) - [@​kingdonb](https://togithub.com/kingdonb) - Fix [fluxcd/website#​1347](https://togithub.com/fluxcd/website/issues/1347) - PR [#​3457](https://togithub.com/fluxcd/flux2/issues/3457) - [@​dependabot](https://togithub.com/dependabot)\[bot] - Bump actions/cache from 3.0.11 to 3.2.2 - PR [#​3441](https://togithub.com/fluxcd/flux2/issues/3441) - [@​stefanprodan](https://togithub.com/stefanprodan) - check: Show the latest stored version of CRDs

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

â™» Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.



This PR has been generated by Renovate Bot.