Flux 2

Highlights

Flux v0.36.0 comes with new features and improvements. Users are encouraged to upgrade for the best experience.

Features and improvements

• Verify OCI Helm charts signed by Cosign (including keyless) with HelmChart.spec.verify.
• Allow publishing a single YAML file to OCI with flux push artifact <URL> --path=deploy/install.yaml.
• Detect changes to local files before pushing to OCI with flux diff artifact <URL> --path=<local files>.
• New Alert Provider type named generic-hmac for authenticating the webhook requests coming from notification-controller.
• The Kustomization.status.conditions have been aligned with Kubernetes standard conditions and kstatus.
• The kustomize-controller memory usage was reduced by 90% when performing artifact operations.

New documentation

• Guide: How to deploy Flagger with Flux using signed Helm charts and OCI artifacts
• FAQ: Should I be using Kustomize remote bases?
• FAQ: Should I be using Kustomize Helm chart plugin?

Components changelog

• source-controller v0.31.0
• kustomize-controller v0.30.0
• helm-controller v0.26.0
• notification-controller v0.28.0
• image-reflector-controller v0.22.1
• image-automation-controller v0.26.1

CLI Changelog

• PR #3242 - @stefanprodan - Update dependencies
• PR #3237 - @phillebaba - Move bootstrap package from internal to pkg
• PR #3236 - @stefanprodan - ci: Refactor GitHub workflows
• PR #3232 - @eddie-knight - Additional workflow permissions tweaks
• PR #3231 - @eddie-knight - Adjusted workflow permissions
• PR #3229 - @stefanprodan - RFC-0002: Add Cosign verification for Helm OCI charts
• PR #3224 - @developer-guy - Add diff artifact command
• PR #3220 - @stefanprodan - Only run e2e tests for Dependabot PRs
• PR #3219 - @dependabot[bot] - Bump github/codeql-action from 1 to 2
• PR #3218 - @dependabot[bot] - Bump peter-evans/create-pull-request from 3 to 4
• PR #3217 - @dependabot[bot] - Bump hashicorp/setup-terraform from 1 to 2.0.2
• PR #3216 - @stefanprodan - Enable Dependabot for GitHub Actions
• PR #3214 - @eddie-knight - Added ArtifactHub badge
• PR #3213 - @stefanprodan - Add FOSSA license scanning badge
• PR #3198 - @phillebaba - Add nop logger
• PR #3197 - @phillebaba - Move uninstall code to pkg
• PR #3190 - @developer-guy - Accept a file path as input for flux build|push artifact
• PR #3187 - @fluxcdbot - Update toolkit components
• PR #3174 - @phillebaba - Update libgit2 version in Azure e2e tests
• PR #3162 - @somtochiama - Update golden file for get source oci
• PR #3161 - @stefanprodan - Update RFC-0003 implementation history