chore(deps): update dependency fluxcd/flux2 to v2.2.0 #56

Merged
renovator merged 1 commits from renovate/crds-catalog into main 2023-12-12 16:32:39 +00:00
Member

This PR contains the following updates:

Package Update Change
fluxcd/flux2 minor v2.1.2 -> v2.2.0

Release Notes

fluxcd/flux2 (fluxcd/flux2)

v2.2.0

Compare Source

Highlights

Flux v2.2.0 is a feature release. Users are encouraged to upgrade for the best experience.

The Flux CLI and controllers have been updated to Kustomize v5.3.0 and Kubernetes v1.28.4.

Flux helm-controller's reconciliation model underwent a significant overhaul, addressing persistent issues such as the automatic recovery of releases stuck in a pending state. In addition, it improves the observability of the release status, and it introduces the ability to enable drift detection on a per-object basis. For more details on the helm-controller improvements, please see the Announcing Flux 2.2 GA blog post.

The Flux CLI can now be used to force or reset the reconciliation state of a HelmRelease v2beta2 object using flux reconcile hr --force and flux reconcile hr --reset.

Flux CLI comes with support for bootstrapping Gitea repositories and adds guardrails to flux install and flux bootstrap to protect users from destructive operations. The flux version and flux check commands now print the Flux distribution version deployed on the cluster.

The Flux alerting capabilities have been extended with NATS and Bitbucket Server & Data Center support.

Starting with this release, Flux minor versions are benchmark to measure the Mean Time To Production (MTTP). The results for this version can be found at
github.com/fluxcd/flux-benchmark.

❤️ Big thanks to all the Flux contributors that helped us with this release!

Kubernetes compatibility

This release is compatible with the following Kubernetes versions:

Kubernetes version Minimum required
v1.26 >= 1.26.0
v1.27 >= 1.27.1
v1.28 >= 1.28.0

Note that Flux may work on older versions of Kubernetes e.g. 1.25, but we don't recommend running end-of-life versions in production nor do we offer support for these versions.

API changes
HelmRelease v2beta2

The HelmRelease kind was promoted from v2beta1 to v2beta2.

The v2beta2 API is backwards compatible with v2beta1, the v2beta1 API is deprecated and will be removed in a future release.

Deprecated fields:

  • The .patchesStrategicMerge and .patchesJson6902 Kustomize post-rendering fields have been deprecated in favor of .patches.
  • The .status.lastAppliedRevision and .status.lastReleaseRevision fields have been deprecated in favor of .status.history.
  • The .status.lastAttemptedValuesChecksum has been deprecated in favor of .status.lastAttemptedConfigDigest.

New fields:

  • Drift detection and correction is now enabled on a per-release basis using the .spec.driftDetection.mode field.
  • Ignoring specific fields during drift detection and correction is now supported using the .spec.driftDetection.ignore
  • Helm tests can now be selectively run using the .spec.test.filters field.
  • A history of metadata from Helm releases up to the previous successful release is now available in the .status.history field. This includes any Helm test results when enabled.
  • The .status.lastHandledForceAt and .status.lastHandledResetAt fields have been introduced to track the last time a force upgrade or reset was handled.
Alert and Provider v1beta3

The Alert and Provider kinds were promoted from v1beta2 to v1beta3.

The v1beta3 API is backwards compatible with v1beta2, the .status field was removed making the resources static objects. Any errors encountered while sending notifications are now recorded as Kubernetes Events associated with the Alert objects.

Bucket v1beta2

A new field, .spec.prefix, has been added to the Bucket API, which enables server-side filtering of files if the object's .spec.provider is set to generic, aws or gcp.

OCIRepository and HelmChart v1beta2

Two new fields, .spec.verify.matchOIDCIdentity.issuer and .spec.verify.matchOIDCIdentity.subject have been added to the HelmChart and OCIRepository APIs. If the image has been keylessly signed via Cosign, these fields can be used to verify the OIDC issuer of the Fulcio certificate and the
OIDC identity's subject respectively.

HelmRepository and ImageRepository v1beta2

A new boolean field, .spec.insecure, has been introduced to the
HelmRepository and ImageRepository APIs, which allows connecting to a non-TLS HTTP container registry. For HelmRepositories it is only considered if the object's .spec.type is set to oci.

From this release onwards, HelmRepository objects of type OCI are treated as static objects, i.e. they have an empty status.

Upgrade procedure

Upgrade Flux from v2.x to v2.2.0 either by rerunning bootstrap or by using the Flux GitHub Action.

To upgrade the APIs, make sure the new CRDs and controllers are deployed, and then change the manifests in Git:

  1. Set apiVersion: helm.toolkit.fluxcd.io/v2beta2 in the YAML files that contain HelmRelease definitions.
  2. Set apiVersion: notification.toolkit.fluxcd.io/v1beta3 in the YAML files that contain Alert and Provider definitions.
  3. Commit, push and reconcile the API version changes.

Bumping the APIs version in manifests can be done gradually. It is advised to not delay this procedure as the deprecated versions will be removed after 6 months.

New Documentation
Components changelog
CLI Changelog

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [fluxcd/flux2](https://github.com/fluxcd/flux2) | minor | `v2.1.2` -> `v2.2.0` | --- ### Release Notes <details> <summary>fluxcd/flux2 (fluxcd/flux2)</summary> ### [`v2.2.0`](https://github.com/fluxcd/flux2/releases/tag/v2.2.0) [Compare Source](https://github.com/fluxcd/flux2/compare/v2.1.2...v2.2.0) ##### Highlights Flux v2.2.0 is a feature release. Users are encouraged to upgrade for the best experience. The Flux CLI and controllers have been updated to Kustomize v5.3.0 and Kubernetes v1.28.4. Flux helm-controller's reconciliation model underwent a significant overhaul, addressing persistent issues such as the automatic recovery of releases stuck in a pending state. In addition, it improves the observability of the release status, and it introduces the ability to enable drift detection on a per-object basis. For more details on the helm-controller improvements, please see the [Announcing Flux 2.2 GA blog post](https://fluxcd.io/blog/2023/12/flux-v2.2.0/). The Flux CLI can now be used to force or reset the reconciliation state of a `HelmRelease` v2beta2 object using `flux reconcile hr --force` and `flux reconcile hr --reset`. Flux CLI comes with support for bootstrapping [Gitea](https://fluxcd.io/flux/installation/bootstrap/gitea/) repositories and adds guardrails to `flux install` and `flux bootstrap` to protect users from destructive operations. The `flux version` and `flux check` commands now print the Flux distribution version deployed on the cluster. The Flux alerting capabilities have been extended with [NATS](https://fluxcd.io/flux/components/notification/provider/#nats) and [Bitbucket Server & Data Center](https://fluxcd.io/flux/components/notification/provider/#bitbucket-serverdata-center) support. Starting with this release, Flux minor versions are benchmark to measure the Mean Time To Production (MTTP). The results for this version can be found at [github.com/fluxcd/flux-benchmark](https://github.com/fluxcd/flux-benchmark/blob/main/RESULTS.md#flux-v220). :heart: Big thanks to all the Flux contributors that helped us with this release! ##### Kubernetes compatibility This release is compatible with the following Kubernetes versions: | Kubernetes version | Minimum required | |--------------------|------------------| | `v1.26` | `>= 1.26.0` | | `v1.27` | `>= 1.27.1` | | `v1.28` | `>= 1.28.0` | Note that Flux may work on older versions of Kubernetes e.g. 1.25, but we don't recommend running end-of-life versions in production nor do we offer support for these versions. ##### API changes ##### HelmRelease v2beta2 The [HelmRelease](https://fluxcd.io/flux/components/helm/helmreleases/) kind was promoted from v2beta1 to v2beta2. The v2beta2 API is backwards compatible with v2beta1, the v2beta1 API is deprecated and will be removed in a future release. Deprecated fields: - The `.patchesStrategicMerge` and `.patchesJson6902` Kustomize post-rendering fields have been deprecated in favor of `.patches`. - The `.status.lastAppliedRevision` and `.status.lastReleaseRevision` fields have been deprecated in favor of `.status.history`. - The `.status.lastAttemptedValuesChecksum` has been deprecated in favor of `.status.lastAttemptedConfigDigest`. New fields: - Drift detection and correction is now enabled on a per-release basis using the `.spec.driftDetection.mode` field. - Ignoring specific fields during drift detection and correction is now supported using the `.spec.driftDetection.ignore` - Helm tests can now be selectively run using the `.spec.test.filters` field. - A history of metadata from Helm releases up to the previous successful release is now available in the `.status.history` field. This includes any Helm test results when enabled. - The `.status.lastHandledForceAt` and `.status.lastHandledResetAt` fields have been introduced to track the last time a force upgrade or reset was handled. ##### Alert and Provider v1beta3 The [Alert](https://fluxcd.io/flux/components/notification/alerts/) and [Provider](https://fluxcd.io/flux/components/notification/providers/) kinds were promoted from v1beta2 to v1beta3. The v1beta3 API is backwards compatible with v1beta2, the `.status` field was removed making the resources static objects. Any errors encountered while sending notifications are now recorded as Kubernetes Events associated with the Alert objects. ##### Bucket v1beta2 A new field, `.spec.prefix`, has been added to the [Bucket](https://fluxcd.io/flux/components/source/buckets/) API, which enables server-side filtering of files if the object's `.spec.provider` is set to `generic`, `aws` or `gcp`. ##### OCIRepository and HelmChart v1beta2 Two new fields, `.spec.verify.matchOIDCIdentity.issuer` and `.spec.verify.matchOIDCIdentity.subject` have been added to the [HelmChart](https://fluxcd.io/flux/components/source/helmcharts/) and [OCIRepository](https://fluxcd.io/flux/components/source/ocirepositories/) APIs. If the image has been keylessly signed via Cosign, these fields can be used to verify the OIDC issuer of the Fulcio certificate and the OIDC identity's subject respectively. ##### HelmRepository and ImageRepository v1beta2 A new boolean field, `.spec.insecure`, has been introduced to the [HelmRepository](https://fluxcd.io/flux/components/source/helmrepositories/) and [ImageRepository](https://fluxcd.io/flux/components/image/imagerepositories/) APIs, which allows connecting to a non-TLS HTTP container registry. For HelmRepositories it is only considered if the object's `.spec.type` is set to `oci`. From this release onwards, HelmRepository objects of type OCI are treated as static objects, i.e. they have an empty status. ##### Upgrade procedure Upgrade Flux from `v2.x` to `v2.2.0` either by [rerunning bootstrap](https://fluxcd.io/flux/installation/#bootstrap-upgrade) or by using the [Flux GitHub Action](https://github.com/fluxcd/flux2/tree/main/action). To upgrade the APIs, make sure the new CRDs and controllers are deployed, and then change the manifests in Git: 1. Set `apiVersion: helm.toolkit.fluxcd.io/v2beta2` in the YAML files that contain `HelmRelease` definitions. 2. Set `apiVersion: notification.toolkit.fluxcd.io/v1beta3` in the YAML files that contain `Alert` and `Provider` definitions. 3. Commit, push and reconcile the API version changes. Bumping the APIs version in manifests can be done gradually. It is advised to not delay this procedure as the deprecated versions will be removed after 6 months. ##### New Documentation - [HelmRelease v2beta2 specification](https://fluxcd.io/flux/components/helm/helmreleases/) - [Enable in-memory kustomize builds guide](https://fluxcd.io/flux/installation/configuration/vertical-scaling/#enable-in-memory-kustomize-builds) ##### Components changelog - source-controller [v1.2.2](https://github.com/fluxcd/source-controller/blob/v1.2.2/CHANGELOG.md) - kustomize-controller [v1.2.0](https://github.com/fluxcd/kustomize-controller/blob/v1.2.0/CHANGELOG.md) - notification-controller [v1.2.2](https://github.com/fluxcd/notification-controller/blob/v1.2.2/CHANGELOG.md) - helm-controller [v0.37.0](https://github.com/fluxcd/helm-controller/blob/v0.37.0/CHANGELOG.md) - image-reflector-controller [v0.31.1](https://github.com/fluxcd/image-reflector-controller/blob/v0.31.1/CHANGELOG.md) - image-automation-controller [v0.37.0](https://github.com/fluxcd/image-automation-controller/blob/v0.37.0/CHANGELOG.md) ##### CLI Changelog - PR [#&#8203;4467](https://github.com/fluxcd/flux2/issues/4467) - [@&#8203;stefanprodan](https://github.com/stefanprodan) - Drop support for Kubernetes EOL versions - PR [#&#8203;4465](https://github.com/fluxcd/flux2/issues/4465) - [@&#8203;stefanprodan](https://github.com/stefanprodan) - build: Update alpine and kubectl in flux-cli image - PR [#&#8203;4464](https://github.com/fluxcd/flux2/issues/4464) - [@&#8203;souleb](https://github.com/souleb) - Update go-git-providers to v0.19.2 - PR [#&#8203;4463](https://github.com/fluxcd/flux2/issues/4463) - [@&#8203;stefanprodan](https://github.com/stefanprodan) - Update Git dependencies - PR [#&#8203;4461](https://github.com/fluxcd/flux2/issues/4461) - [@&#8203;fluxcdbot](https://github.com/fluxcdbot) - Update toolkit components - PR [#&#8203;4455](https://github.com/fluxcd/flux2/issues/4455) - [@&#8203;chewong](https://github.com/chewong) - Fix typos in flux bootstrap documentation - PR [#&#8203;4454](https://github.com/fluxcd/flux2/issues/4454) - [@&#8203;fluxcdbot](https://github.com/fluxcdbot) - Update toolkit components - PR [#&#8203;4437](https://github.com/fluxcd/flux2/issues/4437) - [@&#8203;stefanprodan](https://github.com/stefanprodan) - Add force and reset flags to `flux reconcile hr` - PR [#&#8203;4433](https://github.com/fluxcd/flux2/issues/4433) - [@&#8203;darkowlzz](https://github.com/darkowlzz) - Update Helm OCI RFC - static HelmRepository design - PR [#&#8203;4424](https://github.com/fluxcd/flux2/issues/4424) - [@&#8203;somtochiama](https://github.com/somtochiama) - Show distribution name in flux check and flux version - PR [#&#8203;4422](https://github.com/fluxcd/flux2/issues/4422) - [@&#8203;somtochiama](https://github.com/somtochiama) - bootstrap: More details for `context deadline exceeded` error - PR [#&#8203;4416](https://github.com/fluxcd/flux2/issues/4416) - [@&#8203;stefanprodan](https://github.com/stefanprodan) - Update dependencies to Kubernetes v1.28 - PR [#&#8203;4409](https://github.com/fluxcd/flux2/issues/4409) - [@&#8203;somtochiama](https://github.com/somtochiama) - Make events cmd work well with lowercased and only kind selector - PR [#&#8203;4404](https://github.com/fluxcd/flux2/issues/4404) - [@&#8203;VinGarcia](https://github.com/VinGarcia) - Fix flux install command so it returns an error when unexpected arguments are passed - PR [#&#8203;4402](https://github.com/fluxcd/flux2/issues/4402) - [@&#8203;mclarke47](https://github.com/mclarke47) - fix build_artifact.go typo - PR [#&#8203;4388](https://github.com/fluxcd/flux2/issues/4388) - [@&#8203;stefanprodan](https://github.com/stefanprodan) - \[RFC-0003] OIDC identity matching for keyless verification - PR [#&#8203;4382](https://github.com/fluxcd/flux2/issues/4382) - [@&#8203;darkowlzz](https://github.com/darkowlzz) - tests/int: Set exit code 1 on tf destroy fail - PR [#&#8203;4380](https://github.com/fluxcd/flux2/issues/4380) - [@&#8203;hiddeco](https://github.com/hiddeco) - Tweak permissions on created files - PR [#&#8203;4355](https://github.com/fluxcd/flux2/issues/4355) - [@&#8203;somtochiama](https://github.com/somtochiama) - Confirm before overriding installation by another manager - PR [#&#8203;4345](https://github.com/fluxcd/flux2/issues/4345) - [@&#8203;somtochiama](https://github.com/somtochiama) - Prevent `flux install` from overriding bootrapped cluster - PR [#&#8203;4332](https://github.com/fluxcd/flux2/issues/4332) - [@&#8203;matheuscscp](https://github.com/matheuscscp) - Add CLI flags for OCIRepository signature verification - PR [#&#8203;4329](https://github.com/fluxcd/flux2/issues/4329) - [@&#8203;hiddeco](https://github.com/hiddeco) - Address various issues throughout code base - PR [#&#8203;4324](https://github.com/fluxcd/flux2/issues/4324) - [@&#8203;somtochiama](https://github.com/somtochiama) - bootstrap: Fix error msg when the Git token doesn't match the repo owner - PR [#&#8203;4323](https://github.com/fluxcd/flux2/issues/4323) - [@&#8203;stefanprodan](https://github.com/stefanprodan) - e2e: Update Go dependencies - PR [#&#8203;4317](https://github.com/fluxcd/flux2/issues/4317) - [@&#8203;Jaykul](https://github.com/Jaykul) - Correct "sync" to "component" in log lines - PR [#&#8203;4313](https://github.com/fluxcd/flux2/issues/4313) - [@&#8203;fluxcdbot](https://github.com/fluxcdbot) - Update toolkit components - PR [#&#8203;4311](https://github.com/fluxcd/flux2/issues/4311) - [@&#8203;darkowlzz](https://github.com/darkowlzz) - Check readiness of Flux kinds using kstatus - PR [#&#8203;4298](https://github.com/fluxcd/flux2/issues/4298) - [@&#8203;darkowlzz](https://github.com/darkowlzz) - Add support for HelmRepo OCI and NC v1beta3 static objects - PR [#&#8203;4296](https://github.com/fluxcd/flux2/issues/4296) - [@&#8203;Skarlso](https://github.com/Skarlso) - fix: only wait for changeset if the result is not empty - PR [#&#8203;4285](https://github.com/fluxcd/flux2/issues/4285) - [@&#8203;matheuscscp](https://github.com/matheuscscp) - Add badge for SLSA Level 3 - PR [#&#8203;4284](https://github.com/fluxcd/flux2/issues/4284) - [@&#8203;errordeveloper](https://github.com/errordeveloper) - Make `flux pull` work for OCI artifacts produced by other tools - PR [#&#8203;4270](https://github.com/fluxcd/flux2/issues/4270) - [@&#8203;Azhovan](https://github.com/Azhovan) - feat: add bootstrap gitea command - PR [#&#8203;4255](https://github.com/fluxcd/flux2/issues/4255) - [@&#8203;hiddeco](https://github.com/hiddeco) - tests/azure: update controller dependencies - PR [#&#8203;4251](https://github.com/fluxcd/flux2/issues/4251) - [@&#8203;fluxcdbot](https://github.com/fluxcdbot) - Update toolkit components - PR [#&#8203;4238](https://github.com/fluxcd/flux2/issues/4238) - [@&#8203;makkes](https://github.com/makkes) - Upgrade github.com/fluxcd/pkg/{git,git/gogit} - PR [#&#8203;4233](https://github.com/fluxcd/flux2/issues/4233) - [@&#8203;sonbui00](https://github.com/sonbui00) - chore: remove support armv6h for aur package - PR [#&#8203;4228](https://github.com/fluxcd/flux2/issues/4228) - [@&#8203;sonbui00](https://github.com/sonbui00) - Improve AUR package templates - PR [#&#8203;4226](https://github.com/fluxcd/flux2/issues/4226) - [@&#8203;somtochiama](https://github.com/somtochiama) - Update description of kubeconfig specific flag - PR [#&#8203;4198](https://github.com/fluxcd/flux2/issues/4198) - [@&#8203;makkes](https://github.com/makkes) - Add 2.1.x backport label - PR [#&#8203;4197](https://github.com/fluxcd/flux2/issues/4197) - [@&#8203;stefanprodan](https://github.com/stefanprodan) - Fix links to fluxcd.io </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy43Ny4xIiwidXBkYXRlZEluVmVyIjoiMzcuNzcuMSIsInRhcmdldEJyYW5jaCI6Im1haW4ifQ==-->
renovator added 1 commit 2023-12-12 16:02:32 +00:00
chore(deps): update dependency fluxcd/flux2 to v2.2.0
All checks were successful
continuous-integration/drone/pr Build is passing
continuous-integration/drone/push Build is passing
b7009bbf1f
renovator merged commit b7009bbf1f into main 2023-12-12 16:32:39 +00:00
Sign in to join this conversation.
No reviewers
No Label
No Milestone
No Assignees
1 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: infra/crds-catalog#56
No description provided.