CVE fixes, controller reliability, Helm update
flux2
GitOpsOpen and extensible continuous delivery solution for Kubernetes. Powered by GitOps Toolkit.
Features
- Keeps Kubernetes clusters in sync with Git repositories and OCI artifacts
- Automates configuration updates when new code is deployed
- Supports multi-tenancy and arbitrary number of Git sources
- Integrates with Prometheus and other core Kubernetes ecosystem components
Recent releases
View all 19 releases →- GCR Receiver secret now requires audience field for tighter verification
- MigrateAPIVersion feature gate for migrating API versions in managed field entries
- go-git v5.18.0 update bringing Git operation performance improvements
Full changelog
Highlights
Flux v2.8.6 is a patch release that includes bug fixes and improvements across helm-controller, image-automation-controller, kustomize-controller, notification-controller, and source-controller. Users are encouraged to upgrade for the best experience.
ℹ️ Please follow the Upgrade Procedure for Flux v2.7+ for a smooth upgrade from Flux v2.6 to the latest version.
Fixes:
- Fix a post-renderer conflict between overlapping hooks and templates (helm-controller)
- Ignore force replace when server-side apply is enabled (helm-controller)
- Fix a regression where generic providers would not forward commit status events (notification-controller)
- Require the
audiencefield on the GCR Receiver secret for tighter verification — will become mandatory in Flux v2.9 (notification-controller)
Improvements:
- Introduce the
MigrateAPIVersionfeature gate for migrating the API version of resources in managed field entries (kustomize-controller) - Update go-git to v5.18.0 bringing performance improvements for Git operations (source-controller, image-automation-controller)
Components changelog
- helm-controller v1.5.4
- image-automation-controller v1.1.2
- kustomize-controller v1.8.4
- notification-controller v1.8.4
- source-controller v1.8.3
CLI changelog
- Update toolkit components by @fluxcdbot in https://github.com/fluxcd/flux2/pull/5857
Full Changelog: https://github.com/fluxcd/flux2/compare/v2.8.5...v2.8.6
Fixed race condition causing Kustomizations to get stuck in cache.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.