Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update dependency fluxcd/flux2 to v0.41.2 #8

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

renovate[bot]
Copy link

@renovate renovate bot commented Mar 15, 2022

This PR contains the following updates:

Package Update Change
fluxcd/flux2 minor v0.27.3 -> v0.41.2

Release Notes

fluxcd/flux2 (fluxcd/flux2)

v0.41.2

Compare Source

Flux v0.41.2 is a patch release which fixes a range of bugs found in the controllers. Please refer to the individual component changelogs for more information.

💡 For more information about other features introduced in v0.41.0, please refer to the changelog for this version.

Components Changelog
CLI Changelog

v0.41.1

Compare Source

Flux v0.41.1 is a patch release which extends the helm-controller's OOM watch feature introduced in v0.41.0 with support for automatic detection of cgroup v1 paths, and flags to configure alternative paths using --oom-watch-max-memory-path and --oom-watch-current-memory-path.

💡 For more information about other features introduced in v0.41.0, please refer to the changelog for this version.

Components changelog
CLI Changelog

v0.41.0

Compare Source

Flux v0.41.0 comes with new features and improvements. Users are encouraged to upgrade for the best experience.

Features and improvements
  • Experimental support of drift detection of Helm releases compared to cluster-state.
  • Improved handling of SIGTERM signals received by the helm-controller, which will now terminate running Helm install or upgrade actions, instead of potentially leaving them in a pending state.
  • Opt-in OOM watcher in helm-controller to handle graceful termination of the controller before it is forcefully killed by Kubernetes' OOM killer.
  • Kubernetes client and Custom Resource Definition life-cycle improvements to reduce the memory consumption of the helm-controller, with observed reductions up to 50%.
  • Opt-in allowance of DNS lookups during the rendering of Helm templates in the helm-controller via feature gate.
  • Optional disabling of the cache of the status poller used to determine the health of the resources applied by the kustomize-controller. This may improve memory usage on large scale clusters at the cost of more direct API calls.
  • Changes to the logging of all controllers to ensure Kubernetes components like the discovery client use the configured logging format.
  • New flux events command to display Kubernetes events for Flux resources, including the events of a referenced resource.
  • Custom annotations can now be set with flux push using --annotations.
New documentation
Components changelog
CLI Changelog

v0.40.2

Compare Source

Flux v0.40.2 is a patch release which includes an update of the notification-controller to prevent an issue with the default API version used for ImageRepositories when no specific version is configured on a Receiver. Users are encouraged to upgrade for the best experience.

⚠️ Note that v0.40.0 contained breaking changes, please refer to the changelog for more information.

Components changelog
CLI Changelog

v0.40.1

Compare Source

Flux v0.40.1 is a patch release which includes an update of the source-controller to prevent excessive memory usage while reconciling HelmRepository objects. Users are encouraged to upgrade for the best experience.

⚠️ Note that v0.40.0 contained breaking changes, please refer to the changelog for more information.

Components changelog
CLI Changelog

v0.40.0

Compare Source

Highlights

Flux v0.40.0 comes with new features and improvements. Users are encouraged to upgrade for the best experience.

Breaking changes

Image Automation

The image-reflector-controller autologin flags have been deprecated and are no longer used.
Please see the new API specification and migration instructions in the controller changelog.

Notifications

The source revision format reported by the Flux controllers has changed according to RFC-0005.
The events referring to Git repositories, will report the revision in the format <branch|tag>@&#8203;sha1:<commit> instead of <branch|tag>/<commit>.
For more details please see the source-controller changelog.

OCI artifacts

The OCI artifacts produced with flux push artifact have now custom media types:

  • artifact media type application/vnd.oci.image.manifest.v1+json
  • config media type application/vnd.cncf.flux.config.v1+json
  • content media type application/vnd.cncf.flux.content.v1.tar+gzip
Features and improvements
  • The GitRepository API has a new optional field .spec.ref.name for specifying a Git Reference.
    This allows Flux to reconcile resources from GitHub Pull Requests (refs/pull/<id>/head) and GitLab Merge Requests (refs/merge-requests/<id>/head).
  • The ImageRepository and ImagePolicy APIs have been promoted to v1beta2.
  • Allow specifying the cloud provider contextual login for container registries with ImageRepository.spec.provider.
  • Improve observability of ImageRepository by showing the latest scanned tags under .status.lastScanResult.latestTags.
  • Improve observability of ImagePolicy by reporting the current and previous image tag in status and events.
  • The Kubernetes builtin cluster roles: view, edit and admin have been extended to allow access to Flux custom resources.
  • Print a report of Flux custom resources and the amount of cumulative storage used for each source type with flux stats -A.
New Documentation
Components changelog
CLI Changelog

v0.39.0

Compare Source

Highlights

Flux v0.39.0 comes with new features and improvements. Users are encouraged to upgrade for the best experience.

Starting with this version, the Flux controllers come with SBOMs and SLSA Provenance Attestations embedded in their container images.

The Flux Terraform Provider has a new resource for bootstrapping Flux, without depending on third-party Terraform providers, that allows customising the controllers at install time. Users are encouraged to migrate to this new resources and provide feedback.

The Flux CLI is now included in Wolfi OS, the Linux (Un)distro designed for securing the software supply chain. The Chainguard team and Wolfi maintainers are shipping updates for the Flux package on a regular basis.

Features and improvements
  • Recreate immutable resources (e.g. Kubernetes Jobs) by annotating or labeling them with kustomize.toolkit.fluxcd.io/force: enabled.
  • Support for HTTPS bearer token authentication for Git repositories.
  • Improve memory usage by disabling the caching of Secret and ConfigMap resources in all controllers.
  • Better observability with progressive status updates for Sources (Git, OCI, Helm, S3 Buckets).
  • Allow extracting the OCI artifact SHA256 digest for Cosign with flux push artifact -o json.
  • Track CRDs managed by Flux, flux trace and flux tree will show which HelmRelease deployed which CRDs.
  • Allow the Flux GitHub Action to use a GitHub token when checking for updates to avoid rate limiting.
New documentation
Components changelog
CLI Changelog

v0.38.3

Compare Source

Highlights

Flux v0.38.3 is a patch release that comes with fixes and small improvements to the CLI.
Users are encouraged to upgrade for the best experience.

CLI Changelog

v0.38.2

Compare Source

Flux v0.38.2 is a patch release that comes with fixes for the Notification API v1beta1 to v1beta2 upgrade.
In addition, this release improves the handling of the graceful shutdown for helm-controller.
Users are encouraged to update Flux directly to v0.38.2 for the best experience.

Components changelog
CLI Changelog

v0.38.1

Compare Source

Flux v0.38.1 is a patch release that comes with fixes for the Notification API v1beta1 to v1beta2 upgrade.
Users are encouraged to update Flux directly to v0.38.1 for the best experience.

Changelog

v0.38.0

Compare Source

Highlights

Flux v0.38.0 comes with new features and improvements. Users are encouraged to upgrade for the best experience.

Notification API v1beta2

This release graduates the Notification APIs to v1beta2. After upgrading the controllers on your clusters, you need to update the notification Custom Resources in Git by replacing notification.toolkit.fluxcd.io/v1beta1 with notification.toolkit.fluxcd.io/v1beta2 in all YAML manifests.

Breaking changes
  • The Alert.spec.summary has a max length of 255 characters.
  • The Provider.spec.address and Provider.spec.proxy have a max length of 2048 characters.
  • The Receiver.status.url was deprecated in favour of Receiver.status.webhookPath.

For more details about v1beta2 please see the notification-controller chagelog and the API spec documentation.

Features and improvements
  • Support for defining Kustomize components with Kustomization.spec.components.
  • Support for piping multi-doc YAMLs when publishing OCI artifacts with kustomize build . | flux push artifact --path=-.
  • Support for Gitea commit status updates with Provider.spec.type set to gitea.
  • Improve the memory usage of helm-controller by disabling the caching of Secret and ConfigMap resources.
  • Update the Helm SDK to v3.10.3 (fix for Helm CVEs).
  • All code references to libgit2 were removed, and the GitRepository.spec.gitImplementation field is no longer being honored.
Documentation improvements

The official example repository was refactored. The new version comes with the following improvements:

  • Make the example compatible with ARM64 Kubernetes clusters.
  • Add Weave GitOps Helm release to showcase the Flux UI.
  • Replace the ingress-nginx Bitnami chart with the official one that contains multi-arch container images.
  • Add cert-manager Helm release to showcase how to install CRDs and custom resources using dependsOn.
  • Add Let's Encrypt ClusterIssuer to showcase how to patch resources in production with Flux Kustomization.
  • Add the flux-system overlay to showcase how to configure Flux at bootstrap time.
Components changelog
CLI Changelog

v0.37.0

Compare Source

Highlights

Flux v0.37.0 comes with new features and improvements. Users are encouraged to upgrade for the best experience.

Breaking changes
Deprecation of gitImplementation

The interpretation of the gitImplementation field of GitRepository by source-controller and image-automation-controller has been deprecated, and will effectively always use go-git. This now supports all Git servers, including Azure DevOps and AWS CodeCommit, which previously were only supported by libgit2.

To opt-out from this behaviour, and get the controller to honour the field .spec.gitImplementation, start the controller with: --feature-gates=ForceGoGitImplementation=false.

For more information on this change, refer to the controllers's respective changelogs listed below.

Automatic force-push of ImageUpdateAutomation

Starting from this version, ImageUpdateAutomation objects with a .spec.PushBranch specified will have the push branch refreshed automatically via force push. To opt-out from this behaviour, start the controller with: --feature-gates=GitForcePushBranch=false.

Features and improvements
  • Support for bootstrapping Azure DevOps and AWS CodeCommit repositories using flux bootstrap git.
  • Support cloning of Git v2 protocol (Azure DevOps and AWS CodeCommit) for go-git Git provider.
  • Support force-pushing ImageUpdateAutomation repositories.
  • Allow a dry-run of flux build kustomization with --dry-run and --kustomization-file ./path/to/local/my-app.yaml. Using these flags, variable substitutions from Secrets and ConfigMaps are skipped, and no connection to the cluster is made.
  • Use signed OCI Helm chart for kube-prometheus-stack.
New documentation

Components changelog

CLI Changelog

v0.36.0

Compare Source

Highlights

Flux v0.36.0 comes with new features and improvements. Users are encouraged to upgrade for the best experience.

Features and improvements
  • Verify OCI Helm charts signed by Cosign (including keyless) with HelmChart.spec.verify.
  • Allow publishing a single YAML file to OCI with flux push artifact <URL> --path=deploy/install.yaml.
  • Detect changes to local files before pushing to OCI with flux diff artifact <URL> --path=<local files>.
  • New Alert Provider type named generic-hmac for authenticating the webhook requests coming from notification-controller.
  • The Kustomization.status.conditions have been aligned with Kubernetes standard conditions and kstatus.
  • The kustomize-controller memory usage was reduced by 90% when performing artifact operations.
New documentation

Components changelog

CLI Changelog

v0.35.0

Compare Source

Highlights

Flux v0.35.0 comes with new features and improvements. Users are encouraged to upgrade for the best experience.

Breaking changes

Strict validation rules have been put in place for API fields which define a time duration, such as .spec.interval. Effectively, this means values without a time unit (e.g. ms, s, m, h) will now be rejected by the API server.

Features and improvements
  • Verify OCI artifacts signed by Cosign (including keyless) with OCIRepository.spec.verify.
  • Allow pulling Helm charts dependencies from HTTPS repositories with mixed self-signed TLS and public CAs.
  • Allow pulling Helm charts from OCI artifacts stored at the root of AWS ECR.
  • Allow running bootstrap for insecure HTTP Git servers with flux bootstrap git --allow-insecure-http --token-auth.
  • Improve health checking for global objects such as ClusterClass, GatewayClass, StorageClass, etc.
  • The controllers and the Flux CLI are now built with Go 1.19.

For more information on OCI and Cosign support please see the Flux documentation.

Components changelog

CLI Changelog

v0.34.0

Compare Source

Highlights

Flux v0.34.0 comes with new features and improvements. Users are encouraged to upgrade for the best experience.

Breaking changes

The Flux controller logs have been aligned with the Kubernetes structured logging.
For more details on the new logging structure please see: fluxcd/flux2#3051.

Features and improvements
  • OCIRepository.spec.insecure Allow pulling artifacts from an in-cluster Docker Registry over plain HTTP.
  • Allow defining OCI sources for non-TLS container registries with flux create source oci --insecure.
  • Enable contextual login when publishing OCI artifacts from a Cloud VM using flux push artifact --provider=aws|azure|gcp.
  • Prioritise static credentials over OIDC providers when pulling OCI artifacts from container registries on multi-tenant cluster.
  • Reconcile Kubernetes Class types (ClusterClass, GatewayClass, StorageClass, etc) in a dedicated stage before any other custom resources like Clusters, Gateways, Volumes, etc.
  • When multiple SOPS providers are available, run the offline decryption methods first to avoid failures due to KMS unavailability.
  • Add finalizers to the notification API to properly record the reconciliation metrics for deleted resources.
  • Publish the Flux install manifests as OCI artifacts on GitHub and DockerHub container registries under fluxcd/flux-manifests.

Components Changelog

CLI Changelog

v0.33.0

Compare Source

Highlights

Flux v0.33.0 comes with new features and improvements. Users are encouraged to upgrade for the best experience.

Features and improvements
  • HelmRepository.spec.provider Enable contextual login to container registries when pulling Helm charts from Amazon Elastic Container Registry, Azure Container Registry and Google Artifact Registry.
  • OCIRepository.spec.layerSelector Select which layer contains the Kubernetes configs by specifying a matching OCI media type.
  • Bucket.spec.secretRef Authenticate to Azure Blob storage using SAS tokens.
  • Allow filtering OCI artifacts by semver and regex when listing artifact with flux list artifacts.
  • Allow excluding local files and directories when building and publishing artifacts with flux push artifact.
  • Mitigate denial-of-service on multi-tenant clusters by automatically recovering from panics encountered during reconciliation.
  • Update controllers to Kubernetes v1.25.0, Kustomize v4.5.7 and Helm v3.9.4.
New documentation

Components changelog

CLI Changelog

  • PR [#​3049](https://

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot force-pushed the renovate/fluxcd-flux2-0.x branch from 57490a7 to b629245 Compare March 23, 2022 15:05
@renovate renovate bot changed the title chore(deps): update dependency fluxcd/flux2 to v0.27.4 chore(deps): update dependency fluxcd/flux2 to v0.28.0 Mar 23, 2022
@renovate renovate bot force-pushed the renovate/fluxcd-flux2-0.x branch from b629245 to 14e5dda Compare March 23, 2022 22:41
@renovate renovate bot changed the title chore(deps): update dependency fluxcd/flux2 to v0.28.0 chore(deps): update dependency fluxcd/flux2 to v0.28.1 Mar 23, 2022
@renovate renovate bot force-pushed the renovate/fluxcd-flux2-0.x branch from 14e5dda to a46af32 Compare March 24, 2022 09:30
@renovate renovate bot changed the title chore(deps): update dependency fluxcd/flux2 to v0.28.1 chore(deps): update dependency fluxcd/flux2 to v0.28.2 Mar 24, 2022
@renovate renovate bot force-pushed the renovate/fluxcd-flux2-0.x branch from a46af32 to 6452d6d Compare March 25, 2022 19:35
@renovate renovate bot changed the title chore(deps): update dependency fluxcd/flux2 to v0.28.2 chore(deps): update dependency fluxcd/flux2 to v0.28.3 Mar 25, 2022
@renovate renovate bot changed the title chore(deps): update dependency fluxcd/flux2 to v0.28.3 chore(deps): update dependency fluxcd/flux2 to v0.28.4 Mar 28, 2022
@renovate renovate bot force-pushed the renovate/fluxcd-flux2-0.x branch from 6452d6d to c7d5e78 Compare March 28, 2022 19:57
@renovate renovate bot changed the title chore(deps): update dependency fluxcd/flux2 to v0.28.4 chore(deps): update dependency fluxcd/flux2 to v0.28.5 Mar 30, 2022
@renovate renovate bot force-pushed the renovate/fluxcd-flux2-0.x branch from c7d5e78 to cfb75c6 Compare March 30, 2022 21:56
@renovate renovate bot force-pushed the renovate/fluxcd-flux2-0.x branch from cfb75c6 to 701815f Compare April 20, 2022 15:45
@renovate renovate bot changed the title chore(deps): update dependency fluxcd/flux2 to v0.28.5 chore(deps): update dependency fluxcd/flux2 to v0.29.0 Apr 20, 2022
@renovate renovate bot force-pushed the renovate/fluxcd-flux2-0.x branch from 701815f to 6ed62ce Compare April 20, 2022 21:09
@renovate renovate bot changed the title chore(deps): update dependency fluxcd/flux2 to v0.29.0 chore(deps): update dependency fluxcd/flux2 to v0.29.1 Apr 20, 2022
@renovate renovate bot force-pushed the renovate/fluxcd-flux2-0.x branch from 6ed62ce to c37a20c Compare April 21, 2022 13:43
@renovate renovate bot changed the title chore(deps): update dependency fluxcd/flux2 to v0.29.1 chore(deps): update dependency fluxcd/flux2 to v0.29.2 Apr 21, 2022
@renovate renovate bot force-pushed the renovate/fluxcd-flux2-0.x branch from c37a20c to e34c335 Compare April 22, 2022 12:54
@renovate renovate bot changed the title chore(deps): update dependency fluxcd/flux2 to v0.29.2 chore(deps): update dependency fluxcd/flux2 to v0.29.3 Apr 22, 2022
@renovate renovate bot changed the title chore(deps): update dependency fluxcd/flux2 to v0.29.3 chore(deps): update dependency fluxcd/flux2 to v0.29.4 Apr 26, 2022
@renovate renovate bot force-pushed the renovate/fluxcd-flux2-0.x branch 2 times, most recently from af64c5b to 7a764a4 Compare April 28, 2022 10:34
@renovate renovate bot changed the title chore(deps): update dependency fluxcd/flux2 to v0.29.4 chore(deps): update dependency fluxcd/flux2 to v0.29.5 Apr 28, 2022
@renovate renovate bot force-pushed the renovate/fluxcd-flux2-0.x branch from 7a764a4 to ba4581b Compare May 3, 2022 20:41
@renovate renovate bot changed the title chore(deps): update dependency fluxcd/flux2 to v0.29.5 chore(deps): update dependency fluxcd/flux2 to v0.30.0 May 3, 2022
@renovate renovate bot force-pushed the renovate/fluxcd-flux2-0.x branch from ba4581b to 4919a07 Compare May 4, 2022 10:36
@renovate renovate bot changed the title chore(deps): update dependency fluxcd/flux2 to v0.30.0 chore(deps): update dependency fluxcd/flux2 to v0.30.2 May 4, 2022
@renovate renovate bot force-pushed the renovate/fluxcd-flux2-0.x branch from 4919a07 to e0acad4 Compare June 18, 2022 16:54
@renovate renovate bot changed the title chore(deps): update dependency fluxcd/flux2 to v0.30.2 chore(deps): update dependency fluxcd/flux2 to v0.31.1 Jun 18, 2022
@renovate renovate bot changed the title chore(deps): update dependency fluxcd/flux2 to v0.31.1 chore(deps): update dependency fluxcd/flux2 to v0.34.0 Sep 25, 2022
@renovate renovate bot force-pushed the renovate/fluxcd-flux2-0.x branch from 55302e0 to 5d89fd7 Compare March 16, 2023 19:56
@renovate renovate bot changed the title chore(deps): update dependency fluxcd/flux2 to v0.34.0 chore(deps): update dependency fluxcd/flux2 to v0.41.1 Mar 16, 2023
@guardrails
Copy link

guardrails bot commented Mar 16, 2023

All previously detected findings have been fixed. Good job! 👍🎉

We will keep this comment up-to-date as you go along and notify you of any security issues that we identify.


👉 Go to the dashboard for detailed results.

📥 Happy? Share your feedback with us.

@renovate renovate bot force-pushed the renovate/fluxcd-flux2-0.x branch from 5d89fd7 to 87e6906 Compare March 24, 2023 22:16
@renovate renovate bot changed the title chore(deps): update dependency fluxcd/flux2 to v0.41.1 chore(deps): update dependency fluxcd/flux2 to v0.41.2 Mar 24, 2023
@renovate
Copy link
Author

renovate bot commented Mar 24, 2023

⚠ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: cluster/base/flux-system/gotk-components.yaml
Command failed: docker pull docker.io/containerbase/sidecar
Error response from daemon: toomanyrequests: You have reached your pull rate limit. You may increase the limit by authenticating and upgrading: https://www.docker.com/increase-rate-limit

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants