flux2

Highlights

Flux v2.9.1 is a patch release. The main fix, applied across all controllers, disables Flux variable substitution on the Flux CRDs by annotating them with kustomize.toolkit.fluxcd.io/substitute: disabled, so that Kustomizations with post-build substitution enabled no longer corrupt the CRD schemas when they contain ${...} sequences. Users are encouraged to upgrade for the best experience.

ℹ️ Please follow the Upgrade Procedure for Flux v2.7+ for a smooth upgrade from Flux v2.6 to the latest version.

Fixes:

• Disable Flux variable substitution on all Flux CRDs, preventing post-build substitution from corrupting CRD schemas that contain ${...} sequences (all controllers)
• Update SOPS dependency to fix .ini file decryption (kustomize-controller)
• Fix a dry-run error where applying a resource with a strategic merge patch could fail with <resource> is invalid (kustomize-controller)
• Fix a breaking change in the in-memory Kustomization build (Flux CLI)

Improvements:

• Cache the registry authorization token during Notation verification, so it is fetched once per verification instead of once per request (source-controller)
• Update fluxcd/pkg dependencies

Components changelog

• source-controller v1.9.2
• kustomize-controller v1.9.2
• helm-controller v1.6.2
• notification-controller v1.9.2
• image-reflector-controller v1.2.2
• image-automation-controller v1.2.2
• source-watcher v2.2.2

CLI changelog

• [release/v2.9.x] Fix breaking change in-memory kustomization build by @fluxcdbot in https://github.com/fluxcd/flux2/pull/5971
• Update fluxcd/pkg dependencies by @fluxcdbot in https://github.com/fluxcd/flux2/pull/5977
• Update toolkit components by @fluxcdbot in https://github.com/fluxcd/flux2/pull/5979

Full Changelog: https://github.com/fluxcd/flux2/compare/v2.9.0...v2.9.1