v2.0.0-rc.4

Highlights

This is the 4nd release candidate of Flux v2.0 GA. Users are advised to upgrade from older versions to v2.0.0-rc.4 as soon as possible.

Flux v2.0.0-rc.4 comes with support for Kustomize 5.0, Helm 3.12 and Cosign 2.0.

💡 For upgrading from v0.x, please see the procedure documented in RC.1.

⚠️ Note that Kustomize v5 contains breaking changes, please consult their changelog for more details.

⚠️ The GitOps Toolkit and the Flux controllers have been updated to controller-runtime v0.15 which contains breaking changes that could affect 3rd-party controllers that integrate with Flux.

Fixes and improvements

• Full support for Azure Workload Identity when connecting Flux to Azure Container Registry, Azure Blog Storage and Azure Key Vault.
• New command flux reconcile source chart for pulling Helm OCI charts on-demand from container registries (CLI).
• Retry OCI operations on network errors for flux push artifact (CLI).
• Support annotated Git tags with .spec.ref.name in GitRepository (source-controller).
• Fix pulling Helm OCI charts from ACR when using Azure OIDC (source-controller).
• Fix incorrect rate limiting for HelmRelease events (notification-controller).
• All components have been updated to patch vulnerabilities in Docker (CVE-2023-28840, CVE-2023-28841, CVE-2023-28842) and Sigstore (CVE-2023-30551).

Components changelog

• source-controller v1.0.0-rc.4
• kustomize-controller v1.0.0-rc.4
• notification-controller v1.0.0-rc.4
• helm-controller v0.34.0
• image-reflector-controller v0.28.0
• image-automation-controller v0.34.0

CLI Changelog

• PR #3929 - @stefanprodan - Update Git packages
• PR #3928 - @stefanprodan - Update kubectl to v1.27.2 in flux-cli image
• PR #3927 - @dependabot[bot] - build(deps): bump github/codeql-action from 2.3.3 to 2.3.5
• PR #3926 - @dependabot[bot] - build(deps): bump snyk/actions from 806182742461562b67788a64410098c9d9b96adb to b98d498629f1c368650224d6d212bf7dfa89e4bf
• PR #3924 - @hgranillo - Fix break lines in create helmrelease and source
• PR #3922 - @fluxcdbot - Update toolkit components
• PR #3918 - @somtochiama - Retry oci push operations
• PR #3910 - @stefanprodan - Update Kubernetes to v1.27 and Kustomize to v5.0
• PR #3903 - @dependabot[bot] - build(deps): bump sigstore/cosign-installer from 3.0.3 to 3.0.5
• PR #3902 - @dependabot[bot] - build(deps): bump actions/setup-go from 4.0.0 to 4.0.1
• PR #3901 - @dependabot[bot] - build(deps): bump helm/kind-action from 1.5.0 to 1.7.0