v0.34.0

Highlights

Flux v0.34.0 comes with new features and improvements. Users are encouraged to upgrade for the best experience.

Breaking changes

The Flux controller logs have been aligned with the Kubernetes structured logging.
For more details on the new logging structure please see: fluxcd/flux2#3051.

Features and improvements

• OCIRepository.spec.insecure Allow pulling artifacts from an in-cluster Docker Registry over plain HTTP.
• Allow defining OCI sources for non-TLS container registries with flux create source oci --insecure.
• Enable contextual login when publishing OCI artifacts from a Cloud VM using flux push artifact --provider=aws|azure|gcp.
• Prioritise static credentials over OIDC providers when pulling OCI artifacts from container registries on multi-tenant cluster.
• Reconcile Kubernetes Class types (ClusterClass, GatewayClass, StorageClass, etc) in a dedicated stage before any other custom resources like Clusters, Gateways, Volumes, etc.
• When multiple SOPS providers are available, run the offline decryption methods first to avoid failures due to KMS unavailability.
• Add finalizers to the notification API to properly record the reconciliation metrics for deleted resources.
• Publish the Flux install manifests as OCI artifacts on GitHub and DockerHub container registries under fluxcd/flux-manifests.

Components Changelog

• source-controller v0.29.0
• kustomize-controller v0.28.0
• helm-controller v0.24.0
• notification-controller v0.26.0
• image-reflector-controller v0.21.0
• image-automation-controller v0.25.0

CLI Changelog

• PR #3097 - @stefanprodan - Add --insecure flag to flux create source oci
• PR #3091 - @fluxcdbot - Update toolkit components
• PR #3088 - @stefanprodan - Publish the install manifests to GHCR and DockerHub as OCI artifacts
• PR #3087 - @somtochiama - Remove finalizers for notification CRs on uninstall
• PR #3085 - @souleb - [bootstrap] Make sure we reconcile with the right reconciliation method
• PR #3082 - @stefanprodan - Remove finalizers for OCI repositories on uninstall
• PR #3079 - @adrien-f - Support autologin when pushing OCI artifacts
• PR #3073 - @acondrat - Filter out non-running pods in Prometheus
• PR #3063 - @somtochiama - Update flux logs to accomodate the new format
• PR #3053 - @dholbach - Revert "Fix broken "edit this page" links in Flux CLI section"
• PR #3052 - @dholbach - update to new doc links structure
• PR #3050 - @stefanprodan - Status update for RFC-0002 and RFC-0003