15.md (18874B)
1 # PR #15 chore(deps): update dependency fluxcd/flux2 to v2.6.4 - autoclosed 2 3 - **Status:** closed 4 - **Author:** @renovate[bot] 5 - **Created:** 2025-05-29T13:26:01Z 6 - **Branch:** renovate/fluxcd-flux2-2.x → main 7 - **Closed:** 2025-07-09T19:53:11Z 8 - **Diff:** [15.diff](./15.diff) 9 10 --- 11 12 This PR contains the following updates: 13 14 | Package | Update | Change | 15 |---|---|---| 16 | [fluxcd/flux2](https://redirect.github.com/fluxcd/flux2) | minor | `v2.5.1` -> `v2.6.4` | 17 18 --- 19 20 ### Release Notes 21 22 <details> 23 <summary>fluxcd/flux2 (fluxcd/flux2)</summary> 24 25 ### [`v2.6.4`](https://redirect.github.com/fluxcd/flux2/compare/v2.6.3...v2.6.4) 26 27 [Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.6.3...v2.6.4) 28 29 ### [`v2.6.3`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.6.3) 30 31 [Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.6.2...v2.6.3) 32 33 #### Highlights 34 35 Flux v2.6.3 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience. 36 37 Fixes: 38 39 - Fix for `rsa-sha2-512` and `rsa-sha2-256` algorithms not being prioritized for `ssh-rsa` host keys in source-controller, image-automation-controller and Flux CLI bootstrap. 40 41 #### Components changelog 42 43 - source-controller [v1.6.2](https://redirect.github.com/fluxcd/source-controller/blob/v1.6.2/CHANGELOG.md) 44 - image-automation-controller [v0.41.2](https://redirect.github.com/fluxcd/image-automation-controller/blob/v0.41.2/CHANGELOG.md) 45 46 #### CLI changed 47 48 - \[release/v2.6.x] Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [https://github.com/fluxcd/flux2/pull/5427](https://redirect.github.com/fluxcd/flux2/pull/5427) 49 50 **Full Changelog**: https://github.com/fluxcd/flux2/compare/v2.6.2...v2.6.3 51 52 ### [`v2.6.2`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.6.2) 53 54 [Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.6.1...v2.6.2) 55 56 #### Highlights 57 58 Flux v2.6.2 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience. 59 60 Fixes: 61 62 - Fix authentication for `flux push artifact --provider=azure` on Azure DevOps runners. 63 - Fix OIDC authentication for [Amazon ECR Public](https://fluxcd.io/flux/integrations/aws/#for-amazon-public-elastic-container-registry) in source-controller and image-reflector-controller. 64 - Fix `knownhosts key mismatch` regression bug in the Flux CLI, source-controller and image-automation-controller. 65 66 #### Components changelog 67 68 - source-controller [v1.6.1](https://redirect.github.com/fluxcd/source-controller/blob/v1.6.1/CHANGELOG.md) 69 - image-reflector-controller [v0.35.2](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v0.35.2/CHANGELOG.md) 70 - image-automation-controller [v0.41.1](https://redirect.github.com/fluxcd/image-automation-controller/blob/v0.41.1/CHANGELOG.md) 71 72 #### CLI changelog 73 74 - \[release/v2.6.x] fix: Allow Azure CLI calls in `flux push artifact --provider azure` on DevOps runners by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [https://github.com/fluxcd/flux2/pull/5396](https://redirect.github.com/fluxcd/flux2/pull/5396) 75 - \[release/v2.6.x] Fix `knownhosts key mismatch` regression bug by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [https://github.com/fluxcd/flux2/pull/5405](https://redirect.github.com/fluxcd/flux2/pull/5405) 76 - \[release/v2.6.x] Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [https://github.com/fluxcd/flux2/pull/5410](https://redirect.github.com/fluxcd/flux2/pull/5410) 77 78 **Full Changelog**: https://github.com/fluxcd/flux2/compare/v2.6.1...v2.6.2 79 80 ### [`v2.6.1`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.6.1) 81 82 [Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.6.0...v2.6.1) 83 84 #### Highlights 85 86 Flux v2.6.1 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience. 87 88 Fixes: 89 90 - Fix a bug introduced in image-reflector-controller v0.35.0 that was causing spurious error events for policies during image repository reconciliation. 91 - Fix excessive logging in image-reflector-controller after a restart when the image tags cache is empty. 92 93 #### Components changelog 94 95 - image-reflector-controller [v0.35.1](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v0.35.1/CHANGELOG.md) 96 97 #### CLI changelog 98 99 - \[release/v2.6.x] Update image-reflector-controller to v0.35.1 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [https://github.com/fluxcd/flux2/pull/5382](https://redirect.github.com/fluxcd/flux2/pull/5382) 100 - \[release/v2.6.x] Add digest pinning to image automation testing by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [https://github.com/fluxcd/flux2/pull/5384](https://redirect.github.com/fluxcd/flux2/pull/5384) 101 102 **Full Changelog**: https://github.com/fluxcd/flux2/compare/v2.6.0...v2.6.1 103 104 ### [`v2.6.0`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.6.0) 105 106 [Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.5.1...v2.6.0) 107 108 #### Highlights 109 110 Flux v2.6.0 is a feature release. Users are encouraged to upgrade for the best experience. 111 112 For a compressive overview of new features and API changes included in this release, please refer to the [Announcing Flux 2.6 GA blog post](https://fluxcd.io/blog/2025/05/flux-v2.6.0/). 113 114 Overview of the new features: 115 116 - General availability release for the Flux OCI Artifacts APIs and `flux artifact` commands 117 - Support for OCI digests pinning (ImagePolicy, ImageUpdateAutomation) 118 - Object-level workload identity authentication (OCIRepository, ImageRepository, Kustomization, Alert Provider) 119 - Cache registry credentials for cloud providers (OCIRepository, ImageRepository) 120 - Git HTTP/S Mutual TLS authentication (GitRepository, ImageUpdateAutomation) 121 - Support for sparse checkout (GitRepository) 122 - Support for GitHub App authentication (Alert Provider) 123 - Support for managed Identity authentication to Azure Event Hub (Alert Provider) 124 - Customize the ID of the Git commit status with CEL expressions (Alert Provider) 125 - `WaitForTermination` deletion policy (Kustomization) 126 - `DisableChartDigestTracking` feature gate (HelmRelease) 127 128 ❤️ Big thanks to all the Flux contributors that helped us with this release! 129 130 ##### Kubernetes compatibility 131 132 This release is compatible with the following Kubernetes versions: 133 134 | Kubernetes version | Minimum required | 135 |--------------------|------------------| 136 | `v1.31` | `>= 1.31.0` | 137 | `v1.32` | `>= 1.32.0` | 138 | `v1.33` | `>= 1.33.0` | 139 140 > \[!NOTE] 141 > Note that the Flux project offers support only for the latest three minor versions of Kubernetes. 142 > Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors such as 143 > [ControlPlane](https://control-plane.io/enterprise-for-flux-cd/) that provide enterprise support for Flux. 144 145 ##### OpenShift compatibility 146 147 Flux can be installed on Red Hat OpenShift cluster directly from OperatorHub using [Flux Operator](https://operatorhub.io/operator/flux-operator). 148 The operator allows the configuration of Flux multi-tenancy lockdown, network policies, persistent storage, sharding, vertical scaling and the synchronization of the cluster state from Git repositories, OCI artifacts, and S3-compatible storage. 149 150 #### Upgrade procedure 151 152 Upgrade Flux from `v2.5.0` to `v2.6.0` by following the [upgrade guide](https://fluxcd.io/flux/installation/upgrade/). 153 154 To upgrade the APIs, make sure the new CRDs and controllers are deployed, and then change the manifests in Git: 155 156 1. Set `apiVersion: source.toolkit.fluxcd.io/v1` in the YAML files that contain `OCIRepository` definitions. 157 2. Add an annotation `api.fluxcd.io/upgrade: "v2.6.0"` to the `OCIRepository` resources. (this is not required if Flux Operator is used for upgrade) 158 3. Commit, push, and reconcile the API version changes. 159 160 Bumping the APIs version in manifests can be done gradually. 161 It is advised to not delay this procedure as the deprecated versions will be removed after 6 months. 162 163 #### Components changelog 164 165 - source-controller [v1.6.0](https://redirect.github.com/fluxcd/source-controller/blob/v1.6.0/CHANGELOG.md) 166 - kustomize-controller [v1.6.0](https://redirect.github.com/fluxcd/kustomize-controller/blob/v1.6.0/CHANGELOG.md) 167 - notification-controller [v1.6.0](https://redirect.github.com/fluxcd/notification-controller/blob/v1.6.0/CHANGELOG.md) 168 - helm-controller [v1.3.0](https://redirect.github.com/fluxcd/helm-controller/blob/v1.3.0/CHANGELOG.md) 169 - image-reflector-controller [v0.35.0](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v0.35.0/CHANGELOG.md) 170 - image-automation-controller [v0.41.0](https://redirect.github.com/fluxcd/image-automation-controller/blob/v0.41.0/CHANGELOG.md) 171 172 ##### New Documentation 173 174 - [OCIRepository v1 specification](https://fluxcd.io/flux/components/source/ocirepositories/) 175 - [AWS integrations](https://fluxcd.io/flux/integrations/aws/) 176 - [Azure integrations](https://fluxcd.io/flux/integrations/azure/) 177 - [GCP integrations](https://fluxcd.io/flux/integrations/gcp/) 178 179 #### What's Changed 180 181 - fix: correct name on github app secret by [@​NotAwar](https://redirect.github.com/NotAwar) in [https://github.com/fluxcd/flux2/pull/5202](https://redirect.github.com/fluxcd/flux2/pull/5202) 182 - Update RFC 0008 and RFC 0009 milestones by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [https://github.com/fluxcd/flux2/pull/5141](https://redirect.github.com/fluxcd/flux2/pull/5141) 183 - Update kustomize-controller to v1.5.1 by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [https://github.com/fluxcd/flux2/pull/5214](https://redirect.github.com/fluxcd/flux2/pull/5214) 184 - Update backport labels for 2.5 by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [https://github.com/fluxcd/flux2/pull/5215](https://redirect.github.com/fluxcd/flux2/pull/5215) 185 - Fix command debug hr not taking targetPath into account by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [https://github.com/fluxcd/flux2/pull/5227](https://redirect.github.com/fluxcd/flux2/pull/5227) 186 - Remove redundant space. by [@​laiminhtrung1997](https://redirect.github.com/laiminhtrung1997) in [https://github.com/fluxcd/flux2/pull/5038](https://redirect.github.com/fluxcd/flux2/pull/5038) 187 - ci: switch to goreleaser changelog generation by [@​y-eight](https://redirect.github.com/y-eight) in [https://github.com/fluxcd/flux2/pull/5284](https://redirect.github.com/fluxcd/flux2/pull/5284) 188 - change: use the default ephemeral GITHUB\_TOKEN instead of the static one by [@​piontec](https://redirect.github.com/piontec) in [https://github.com/fluxcd/flux2/pull/5282](https://redirect.github.com/fluxcd/flux2/pull/5282) 189 - add: OSSF scorecard configuration file - ignore false-positive by [@​piontec](https://redirect.github.com/piontec) in [https://github.com/fluxcd/flux2/pull/5287](https://redirect.github.com/fluxcd/flux2/pull/5287) 190 - build(deps): bump helm.sh/helm/v3 from 3.17.0 to 3.17.3 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/fluxcd/flux2/pull/5295](https://redirect.github.com/fluxcd/flux2/pull/5295) 191 - Allow to pull/push artifacts to insecure registries without TLS by [@​mottetm](https://redirect.github.com/mottetm) in [https://github.com/fluxcd/flux2/pull/5299](https://redirect.github.com/fluxcd/flux2/pull/5299) 192 - \[RFC-0010] Multi-Tenant Workload Identity by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [https://github.com/fluxcd/flux2/pull/5209](https://redirect.github.com/fluxcd/flux2/pull/5209) 193 - flux diff: Reset target struct before decoding by [@​maboehm](https://redirect.github.com/maboehm) in [https://github.com/fluxcd/flux2/pull/5302](https://redirect.github.com/fluxcd/flux2/pull/5302) 194 - fix: allow recursive dry-run over local sources by [@​niveau0](https://redirect.github.com/niveau0) in [https://github.com/fluxcd/flux2/pull/5219](https://redirect.github.com/fluxcd/flux2/pull/5219) 195 - Run conformance tests for Kubernetes 1.33.0 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [https://github.com/fluxcd/flux2/pull/5318](https://redirect.github.com/fluxcd/flux2/pull/5318) 196 - Update to Kubernetes 1.33.0 and Go 1.24.0 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [https://github.com/fluxcd/flux2/pull/5323](https://redirect.github.com/fluxcd/flux2/pull/5323) 197 - \[RFC-0010] Remove EKS Pod Identity from the proposal by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [https://github.com/fluxcd/flux2/pull/5309](https://redirect.github.com/fluxcd/flux2/pull/5309) 198 - \[RFC-0010] Add RBAC for creating service account tokens by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [https://github.com/fluxcd/flux2/pull/5332](https://redirect.github.com/fluxcd/flux2/pull/5332) 199 - Upgrade fluxcd/pkg auth, oci, git and git/gogit by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [https://github.com/fluxcd/flux2/pull/5333](https://redirect.github.com/fluxcd/flux2/pull/5333) 200 - Fix exit code handling in get command by [@​dgunzy](https://redirect.github.com/dgunzy) in [https://github.com/fluxcd/flux2/pull/5338](https://redirect.github.com/fluxcd/flux2/pull/5338) 201 - build(deps): bump the ci group across 1 directory with 18 updates by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/fluxcd/flux2/pull/5325](https://redirect.github.com/fluxcd/flux2/pull/5325) 202 - Fix `flux trace` for HRs from `OCIRepository`s by [@​makkes](https://redirect.github.com/makkes) in [https://github.com/fluxcd/flux2/pull/5349](https://redirect.github.com/fluxcd/flux2/pull/5349) 203 - Fix e2e workflow by [@​makkes](https://redirect.github.com/makkes) in [https://github.com/fluxcd/flux2/pull/5351](https://redirect.github.com/fluxcd/flux2/pull/5351) 204 - \[RFC-0010] Update RFC to include opt-in feature gate by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [https://github.com/fluxcd/flux2/pull/5354](https://redirect.github.com/fluxcd/flux2/pull/5354) 205 - \[RFC-0010] Update RFC feature gate behavior by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [https://github.com/fluxcd/flux2/pull/5355](https://redirect.github.com/fluxcd/flux2/pull/5355) 206 - Upgrade fluxcd/pkg packages by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [https://github.com/fluxcd/flux2/pull/5356](https://redirect.github.com/fluxcd/flux2/pull/5356) 207 - Upgrade fluxcd/pkg packages by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [https://github.com/fluxcd/flux2/pull/5357](https://redirect.github.com/fluxcd/flux2/pull/5357) 208 - Set Kubernetes 1.31 as min supported version by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [https://github.com/fluxcd/flux2/pull/5364](https://redirect.github.com/fluxcd/flux2/pull/5364) 209 - Update dependencies by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [https://github.com/fluxcd/flux2/pull/5366](https://redirect.github.com/fluxcd/flux2/pull/5366) 210 - Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [https://github.com/fluxcd/flux2/pull/5368](https://redirect.github.com/fluxcd/flux2/pull/5368) 211 - Promote artifact commands to stable by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [https://github.com/fluxcd/flux2/pull/5369](https://redirect.github.com/fluxcd/flux2/pull/5369) 212 - Add --interval and --reflect-digest flags to flux create image policy by [@​matheuscscp](https://redirect.github.com/matheuscscp) in [https://github.com/fluxcd/flux2/pull/5345](https://redirect.github.com/fluxcd/flux2/pull/5345) 213 - Update CLI to OCIRepository v1 (GA) by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [https://github.com/fluxcd/flux2/pull/5371](https://redirect.github.com/fluxcd/flux2/pull/5371) 214 - Update dependabot config by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [https://github.com/fluxcd/flux2/pull/5373](https://redirect.github.com/fluxcd/flux2/pull/5373) 215 - Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [https://github.com/fluxcd/flux2/pull/5370](https://redirect.github.com/fluxcd/flux2/pull/5370) 216 217 #### New Contributors 218 219 - [@​NotAwar](https://redirect.github.com/NotAwar) made their first contribution in [https://github.com/fluxcd/flux2/pull/5202](https://redirect.github.com/fluxcd/flux2/pull/5202) 220 - [@​laiminhtrung1997](https://redirect.github.com/laiminhtrung1997) made their first contribution in [https://github.com/fluxcd/flux2/pull/5038](https://redirect.github.com/fluxcd/flux2/pull/5038) 221 - [@​y-eight](https://redirect.github.com/y-eight) made their first contribution in [https://github.com/fluxcd/flux2/pull/5284](https://redirect.github.com/fluxcd/flux2/pull/5284) 222 - [@​piontec](https://redirect.github.com/piontec) made their first contribution in [https://github.com/fluxcd/flux2/pull/5282](https://redirect.github.com/fluxcd/flux2/pull/5282) 223 - [@​mottetm](https://redirect.github.com/mottetm) made their first contribution in [https://github.com/fluxcd/flux2/pull/5299](https://redirect.github.com/fluxcd/flux2/pull/5299) 224 - [@​maboehm](https://redirect.github.com/maboehm) made their first contribution in [https://github.com/fluxcd/flux2/pull/5302](https://redirect.github.com/fluxcd/flux2/pull/5302) 225 - [@​niveau0](https://redirect.github.com/niveau0) made their first contribution in [https://github.com/fluxcd/flux2/pull/5219](https://redirect.github.com/fluxcd/flux2/pull/5219) 226 - [@​dgunzy](https://redirect.github.com/dgunzy) made their first contribution in [https://github.com/fluxcd/flux2/pull/5338](https://redirect.github.com/fluxcd/flux2/pull/5338) 227 228 **Full Changelog**: https://github.com/fluxcd/flux2/compare/v2.5.0...v2.6.0 229 230 </details> 231 232 --- 233 234 ### Configuration 235 236 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 237 238 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. 239 240 ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 241 242 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. 243 244 --- 245 246 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box 247 248 --- 249 250 This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/MTRNord/cluster). 251 <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MC4zMy42IiwidXBkYXRlZEluVmVyIjoiNDEuMTcuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==--> 252 253