feat(github-release)!: Update fluxcd/flux2 to v2.0.1 - autoclosed

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
fluxcd/flux2	Kustomization	major	v0.41.2 -> v2.0.1

---

Release Notes

fluxcd/flux2 (fluxcd/flux2)

v2.0.1

Compare Source

Highlights

Flux v2.0.1 is a patch release which comes with various fixes. Users are encouraged to upgrade for the best experience.

💡 For upgrading from Flux v0.x, please see the procedure documented in 2.0.0.

Fixes

• Fix AWS auth for cross-region ECR repositories (source-controller, image-reflector-controller).
• Prevent spurious alerts for skipped resources (kustomize-controller).
• List removed resources for flux diff ks --kustomization-file (flux CLI).
• Fix SLSA provenance generation for the Flux CLI binaries.

Components changelog

• source-controller v1.0.1
• kustomize-controller v1.0.1
• image-reflector-controller v0.29.1

CLI Changelog

• PR #​4068 - @​stefanprodan - Update dependencies
• PR #​4065 - @​hiddeco - action: support openssl and sha256sum
• PR #​4062 - @​souleb - diff: Take into account the server-side inventory for local Flux Kustomizations
• PR #​4061 - @​hiddeco - action: re-allow configuration of non-default token
• PR #​4057 - @​fluxcdbot - Update toolkit components
• PR #​4052 - @​stefanprodan - docs: Link to the Flux GitHub Action documentation
• PR #​4051 - @​hiddeco - action: use $RUNNER_TOOL_CACHE, support MacOS and Windows, validate checksum
• PR #​4046 - @​stefanprodan - ci: backport: set write permissions
• PR #​4043 - @​stefanprodan - ci: release: extract the image tag from GITHUB_REF
• PR #​4041 - @​hiddeco - ci: release: disable interpretation backslash esc

New Documentation

• Flux GitHub Action
• SLSA provenance verification

v2.0.0

Compare Source

Highlights

This is the first General Availability (GA) release of Flux v2.

Flux v2.0.0 comes with the promotion of the GitOps related APIs to v1 and adds horizontal scaling & sharding capabilities to Flux controllers. The Git bootstrap capabilities provided by the Flux CLI and by Flux Terraform Provider are now considered stable and production ready.

Starting with this version, the build, release and provenance portions of the Flux project supply chain provisionally meet SLSA Build Level 3.

Flux GA is fully integrated with Kubernetes Workload Identity for AWS, Azure and Google Cloud to facilitate passwordless authentication to OCI sources (container images, OCI artifacts, Helm charts).

The Flux alerting capabilities have been extended with PagerDuty and Google Pub/Sub support. The improved Alert v1beta2 API provides better control over events filtering and allows users to enrich the alerts with custom metadata.

Supported versions

Starting with this version, the Flux CLI and the GA components (source-controller, kustomize-controller and notification-controller) follow the release cadence and support pledge documented in the Flux release specification.

Kubernetes compatibility

This release is compatible with the following Kubernetes versions:

Kubernetes version	Minimum required
v1.24	>= 1.24.0
v1.25	>= 1.25.0
v1.26	>= 1.26.0
v1.27	>= 1.27.1

Note that Flux may work on older versions of Kubernetes e.g. 1.19, but we don't recommend running end-of-life versions in production nor do we offer support for these versions.

Flux ecosystem support

The following (open-source) extensions & integrations are compatible with this Flux release, starting from the specified minimum version or higher.

Type	Project	Version
Flux Web UI	weave-gitops	0.26.0
Terraform integration	tf-controller	0.15.0

API changes

GitRepository v1

The GitRepository kind was promoted from v1beta2 to v1 (GA) and deprecated fields were removed.

The v1 API is backwards compatible with v1beta2, except for the following:

• the deprecated field .spec.gitImplementation was removed
• the unused field .spec.accessFrom was removed
• the deprecated field .status.contentConfigChecksum was removed
• the deprecated field .status.artifact.checksum was removed
• the .status.url was removed (replaced by .status.artifact.url)

Kustomization v1

The Kustomization kind was promoted from v1beta2 to v1 (GA) and deprecated fields were removed.

A new optional field .spec.commonMetadata was added to the API for setting labels and/or annotations to all resources part of a Kustomization.

The v1 API is backwards compatible with v1beta2, except for the following:

• the deprecated field .spec.validation was removed
• the deprecated field .spec.patchesStrategicMerge was removed (replaced by .spec.patches)
• the deprecated field .spec.patchesJson6902 was removed (replaced by .spec.patches)

Receiver v1

The Receiver kind was promoted from v1beta2 to v1 (GA) and deprecated fields were removed.

The v1 API is backwards compatible with v1beta2, except for the following:

• the deprecated field .status.url was removed (replaced by .status.webhookPath)

Upgrade procedure

Upgrade Flux from v0.x to v2.0.0 either by rerunning bootstrap or by using the Flux GitHub Action.

To upgrade the APIs from v1beta2, make sure the new CRDs and controllers are deployed, and then change the manifests in Git:

1. Remove the deprecated fields from the GitRepository and Kustomization definitions.
2. Commit, push and reconcile the fields removal changes.
3. Set apiVersion: source.toolkit.fluxcd.io/v1 in the YAML files that contain GitRepository definitions.
4. Set apiVersion: kustomize.toolkit.fluxcd.io/v1 in the YAML files that contain Flux Kustomization definitions.
5. Set apiVersion: notification.toolkit.fluxcd.io/v1 in the YAML files that contain Receiver definitions.
6. Commit, push and reconcile the API version changes.

Bumping the APIs version in manifests can be done gradually. It is advised to not delay this procedure as the beta versions will be removed after 6 months.

New Documentation

• Release cadence and support
• SLSA Assessment
• Controller sharding and horizontal scaling
• GitRepository v1 specification
• Kustomization v1 specification
• Receiver v1 specification

❤️ Big thanks to all the Flux contributors that helped us reach this milestone!
👏 And a special shoutout to the Flux community who supported us over the years!

Components changelog

• source-controller v1.0.0
• kustomize-controller v1.0.0
• notification-controller v1.0.0
• helm-controller v0.35.0
• image-reflector-controller v0.29.0
• image-automation-controller v0.35.0

CLI Changelog

• PR #​4035 - @​stefanprodan - Update dependencies
• PR #​4033 - @​stefanprodan - docs: link to releases spec from website
• PR #​4031 - @​stefanprodan - Run conformance tests for Kubernetes v1.27.3
• PR #​4029 - @​stefanprodan - Run e2e tests on release branches
• PR #​4028 - @​makkes - Annotate errors from go-git-providers
• PR #​4027 - @​hiddeco - Update go-git to unreleased v5.8.0
• PR #​4023 - @​stefanprodan - Add backport GitHub Action workflow
• PR #​4020 - @​stefanprodan - Set minimum supported version to Kubernetes 1.24.0
• PR #​4018 - @​stefanprodan - docs: Fix the flux push example for ECR
• PR #​4015 - @​stefanprodan - Align go.mod version with Kubernetes (Go 1.20)
• PR #​4008 - @​stefanprodan - Add SLSA3 generators to release workflow
• PR #​4006 - @​fluxcdbot - Update toolkit components
• PR #​4002 - @​makkes - Don't log errors with missing CRDs for "get * all" commands
• PR #​3990 - @​aryan9600 - RFC-0004: add section about proxy
• PR #​3976 - @​darklore - Use equivalent and shorter way to generate shell completions
• PR #​3955 - @​somtochiama - Fix 'patchesJson6902' is deprecated' warning
• PR #​3945 - @​makkes - Make flux logs more lenient

---

Configuration

📅 Schedule: Branch creation - "on saturday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.