FluxCD v2 - v2.0.0-rc.4

Security

Highlights

This is the 4nd release candidate of Flux v2.0 GA. Users are advised to upgrade from older versions to v2.0.0-rc.4 as soon as possible.

Flux v2.0.0-rc.4 comes with support for Kustomize 5.0, Helm 3.12 and Cosign 2.0.

:bulb: For upgrading from v0.x, please see the procedure documented in RC.1.

⚠️ Note that Kustomize v5 contains breaking changes, please consult their changelog for more details.

⚠️ The GitOps Toolkit and the Flux controllers have been updated to controller-runtime v0.15 which contains breaking changes that could affect 3rd-party controllers that integrate with Flux.

Fixes and improvements

  • Full support for Azure Workload Identity when connecting Flux to Azure Container Registry, Azure Blog Storage and Azure Key Vault.
  • New command flux reconcile source chart for pulling Helm OCI charts on-demand from container registries (CLI).
  • Retry OCI operations on network errors for flux push artifact (CLI).
  • Support annotated Git tags with .spec.ref.name in GitRepository (source-controller).
  • Fix pulling Helm OCI charts from ACR when using Azure OIDC (source-controller).
  • Fix incorrect rate limiting for HelmRelease events (notification-controller).
  • All components have been updated to patch vulnerabilities in Docker (CVE-2023-28840, CVE-2023-28841, CVE-2023-28842) and Sigstore (CVE-2023-30551).

Components changelog

CLI Changelog

  • PR #3929 - @stefanprodan - Update Git packages
  • PR #3928 - @stefanprodan - Update kubectl to v1.27.2 in flux-cli image
  • PR #3927 - @dependabot[bot] - build(deps): bump github/codeql-action from 2.3.3 to 2.3.5
  • PR #3926 - @dependabot[bot] - build(deps): bump snyk/actions from 806182742461562b67788a64410098c9d9b96adb to b98d498629f1c368650224d6d212bf7dfa89e4bf
  • PR #3924 - @hgranillo - Fix break lines in create helmrelease and source
  • PR #3922 - @fluxcdbot - Update toolkit components
  • PR #3918 - @somtochiama - Retry oci push operations
  • PR #3910 - @stefanprodan - Update Kubernetes to v1.27 and Kustomize to v5.0
  • PR #3903 - @dependabot[bot] - build(deps): bump sigstore/cosign-installer from 3.0.3 to 3.0.5
  • PR #3902 - @dependabot[bot] - build(deps): bump actions/setup-go from 4.0.0 to 4.0.1
  • PR #3901 - @dependabot[bot] - build(deps): bump helm/kind-action from 1.5.0 to 1.7.0

Details

date
May 29, 2023, 11:54 a.m.
name
v2.0.0-rc.4
type
Pre-release
official page
https://github.com/fluxcd/flux2/releases/tag/v2.0.0-rc.4
👇
Register or login to:
  • 🔍View and search all FluxCD v2 releases.
  • 🛠️Create and share lists to track your tools.
  • 🚨Setup notifications for major, security, feature or patch updates.
  • 🚀Much more coming soon!
Continue with GitHub
Continue with Google
or