-
Notifications
You must be signed in to change notification settings - Fork 2
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
feat(flux-group): update flux2 (minor) #2981
Conversation
--- kubernetes/kube-nas/flux Kustomization: flux-system/flux-sync ClusterRole: flux-system/crd-controller-flux-system
+++ kubernetes/kube-nas/flux Kustomization: flux-system/flux-sync ClusterRole: flux-system/crd-controller-flux-system
@@ -86,7 +86,11 @@
- list
- watch
- create
- update
- patch
- delete
+- nonResourceURLs:
+ - /livez/ping
+ verbs:
+ - head
--- kubernetes/kube-nas/flux Kustomization: flux-system/flux-sync Deployment: flux-system/source-controller
+++ kubernetes/kube-nas/flux Kustomization: flux-system/flux-sync Deployment: flux-system/source-controller
@@ -43,13 +43,23 @@
- name: RUNTIME_NAMESPACE
valueFrom:
fieldRef:
fieldPath: metadata.namespace
- name: TUF_ROOT
value: /tmp/.sigstore
- image: ghcr.io/fluxcd/source-controller:v1.2.4
+ - name: GOMAXPROCS
+ valueFrom:
+ resourceFieldRef:
+ containerName: manager
+ resource: limits.cpu
+ - name: GOMEMLIMIT
+ valueFrom:
+ resourceFieldRef:
+ containerName: manager
+ resource: limits.memory
+ image: ghcr.io/fluxcd/source-controller:v1.3.0
imagePullPolicy: IfNotPresent
livenessProbe:
httpGet:
path: /healthz
port: healthz
name: manager
--- kubernetes/kube-nas/flux Kustomization: flux-system/flux-sync Deployment: flux-system/kustomize-controller
+++ kubernetes/kube-nas/flux Kustomization: flux-system/flux-sync Deployment: flux-system/kustomize-controller
@@ -37,13 +37,23 @@
- --requeue-dependency=5s
env:
- name: RUNTIME_NAMESPACE
valueFrom:
fieldRef:
fieldPath: metadata.namespace
- image: ghcr.io/fluxcd/kustomize-controller:v1.2.2
+ - name: GOMAXPROCS
+ valueFrom:
+ resourceFieldRef:
+ containerName: manager
+ resource: limits.cpu
+ - name: GOMEMLIMIT
+ valueFrom:
+ resourceFieldRef:
+ containerName: manager
+ resource: limits.memory
+ image: ghcr.io/fluxcd/kustomize-controller:v1.3.0
imagePullPolicy: IfNotPresent
livenessProbe:
httpGet:
path: /healthz
port: healthz
name: manager
--- kubernetes/kube-nas/flux Kustomization: flux-system/flux-sync Deployment: flux-system/helm-controller
+++ kubernetes/kube-nas/flux Kustomization: flux-system/flux-sync Deployment: flux-system/helm-controller
@@ -41,13 +41,23 @@
- --oom-watch-interval=500ms
env:
- name: RUNTIME_NAMESPACE
valueFrom:
fieldRef:
fieldPath: metadata.namespace
- image: ghcr.io/fluxcd/helm-controller:v0.37.4
+ - name: GOMAXPROCS
+ valueFrom:
+ resourceFieldRef:
+ containerName: manager
+ resource: limits.cpu
+ - name: GOMEMLIMIT
+ valueFrom:
+ resourceFieldRef:
+ containerName: manager
+ resource: limits.memory
+ image: ghcr.io/fluxcd/helm-controller:v1.0.1
imagePullPolicy: IfNotPresent
livenessProbe:
httpGet:
path: /healthz
port: healthz
name: manager
--- kubernetes/kube-nas/flux Kustomization: flux-system/flux-sync Deployment: flux-system/notification-controller
+++ kubernetes/kube-nas/flux Kustomization: flux-system/flux-sync Deployment: flux-system/notification-controller
@@ -32,13 +32,23 @@
- --enable-leader-election
env:
- name: RUNTIME_NAMESPACE
valueFrom:
fieldRef:
fieldPath: metadata.namespace
- image: ghcr.io/fluxcd/notification-controller:v1.2.4
+ - name: GOMAXPROCS
+ valueFrom:
+ resourceFieldRef:
+ containerName: manager
+ resource: limits.cpu
+ - name: GOMEMLIMIT
+ valueFrom:
+ resourceFieldRef:
+ containerName: manager
+ resource: limits.memory
+ image: ghcr.io/fluxcd/notification-controller:v1.3.0
imagePullPolicy: IfNotPresent
livenessProbe:
httpGet:
path: /healthz
port: healthz
name: manager
--- kubernetes/kube-nas/flux Kustomization: flux-system/flux-sync OCIRepository: flux-system/flux-manifests
+++ kubernetes/kube-nas/flux Kustomization: flux-system/flux-sync OCIRepository: flux-system/flux-manifests
@@ -7,9 +7,9 @@
kustomize.toolkit.fluxcd.io/namespace: flux-system
name: flux-manifests
namespace: flux-system
spec:
interval: 24h
ref:
- tag: v2.2.3@sha256:187f6a409354d1a6156bb9ede0c81da13e1daccef421203575d23679ccc9b320
+ tag: v2.3.0@sha256:5870003e3c4fe4b946759f3fbf5a4a684b1bcc44ee8872f6764745cdde838e69
url: oci://ghcr.io/fluxcd/flux-manifests |
--- kubernetes/talos-flux/flux Kustomization: flux-system/flux-sync ClusterRole: flux-system/crd-controller-flux-system
+++ kubernetes/talos-flux/flux Kustomization: flux-system/flux-sync ClusterRole: flux-system/crd-controller-flux-system
@@ -86,7 +86,11 @@
- list
- watch
- create
- update
- patch
- delete
+- nonResourceURLs:
+ - /livez/ping
+ verbs:
+ - head
--- kubernetes/talos-flux/flux Kustomization: flux-system/flux-sync Deployment: flux-system/source-controller
+++ kubernetes/talos-flux/flux Kustomization: flux-system/flux-sync Deployment: flux-system/source-controller
@@ -43,13 +43,23 @@
- name: RUNTIME_NAMESPACE
valueFrom:
fieldRef:
fieldPath: metadata.namespace
- name: TUF_ROOT
value: /tmp/.sigstore
- image: ghcr.io/fluxcd/source-controller:v1.2.4
+ - name: GOMAXPROCS
+ valueFrom:
+ resourceFieldRef:
+ containerName: manager
+ resource: limits.cpu
+ - name: GOMEMLIMIT
+ valueFrom:
+ resourceFieldRef:
+ containerName: manager
+ resource: limits.memory
+ image: ghcr.io/fluxcd/source-controller:v1.3.0
imagePullPolicy: IfNotPresent
livenessProbe:
httpGet:
path: /healthz
port: healthz
name: manager
--- kubernetes/talos-flux/flux Kustomization: flux-system/flux-sync Deployment: flux-system/kustomize-controller
+++ kubernetes/talos-flux/flux Kustomization: flux-system/flux-sync Deployment: flux-system/kustomize-controller
@@ -37,13 +37,23 @@
- --requeue-dependency=5s
env:
- name: RUNTIME_NAMESPACE
valueFrom:
fieldRef:
fieldPath: metadata.namespace
- image: ghcr.io/fluxcd/kustomize-controller:v1.2.2
+ - name: GOMAXPROCS
+ valueFrom:
+ resourceFieldRef:
+ containerName: manager
+ resource: limits.cpu
+ - name: GOMEMLIMIT
+ valueFrom:
+ resourceFieldRef:
+ containerName: manager
+ resource: limits.memory
+ image: ghcr.io/fluxcd/kustomize-controller:v1.3.0
imagePullPolicy: IfNotPresent
livenessProbe:
httpGet:
path: /healthz
port: healthz
name: manager
--- kubernetes/talos-flux/flux Kustomization: flux-system/flux-sync Deployment: flux-system/helm-controller
+++ kubernetes/talos-flux/flux Kustomization: flux-system/flux-sync Deployment: flux-system/helm-controller
@@ -40,13 +40,23 @@
- --oom-watch-interval=500ms
env:
- name: RUNTIME_NAMESPACE
valueFrom:
fieldRef:
fieldPath: metadata.namespace
- image: ghcr.io/fluxcd/helm-controller:v0.37.4
+ - name: GOMAXPROCS
+ valueFrom:
+ resourceFieldRef:
+ containerName: manager
+ resource: limits.cpu
+ - name: GOMEMLIMIT
+ valueFrom:
+ resourceFieldRef:
+ containerName: manager
+ resource: limits.memory
+ image: ghcr.io/fluxcd/helm-controller:v1.0.1
imagePullPolicy: IfNotPresent
livenessProbe:
httpGet:
path: /healthz
port: healthz
name: manager
--- kubernetes/talos-flux/flux Kustomization: flux-system/flux-sync Deployment: flux-system/notification-controller
+++ kubernetes/talos-flux/flux Kustomization: flux-system/flux-sync Deployment: flux-system/notification-controller
@@ -32,13 +32,23 @@
- --enable-leader-election
env:
- name: RUNTIME_NAMESPACE
valueFrom:
fieldRef:
fieldPath: metadata.namespace
- image: ghcr.io/fluxcd/notification-controller:v1.2.4
+ - name: GOMAXPROCS
+ valueFrom:
+ resourceFieldRef:
+ containerName: manager
+ resource: limits.cpu
+ - name: GOMEMLIMIT
+ valueFrom:
+ resourceFieldRef:
+ containerName: manager
+ resource: limits.memory
+ image: ghcr.io/fluxcd/notification-controller:v1.3.0
imagePullPolicy: IfNotPresent
livenessProbe:
httpGet:
path: /healthz
port: healthz
name: manager
--- kubernetes/talos-flux/flux Kustomization: flux-system/flux-sync OCIRepository: flux-system/flux-manifests
+++ kubernetes/talos-flux/flux Kustomization: flux-system/flux-sync OCIRepository: flux-system/flux-manifests
@@ -7,10 +7,10 @@
kustomize.toolkit.fluxcd.io/namespace: flux-system
name: flux-manifests
namespace: flux-system
spec:
interval: 10m
ref:
- digest: sha256:187f6a409354d1a6156bb9ede0c81da13e1daccef421203575d23679ccc9b320
+ digest: sha256:5870003e3c4fe4b946759f3fbf5a4a684b1bcc44ee8872f6764745cdde838e69
tag: v2.2.1
url: oci://ghcr.io/fluxcd/flux-manifests |
🦙 MegaLinter status: ❌ ERROR
See detailed report in MegaLinter reports MegaLinter is graciously provided by OX Security |
3b7a222
to
95f6c7a
Compare
Quality Gate passedIssues Measures |
updates of api resources, test if this will work by enabling kubernetes API in renovate (anyway the yaml-language-server annotations need to be adjusted |
@tyriis can confirm should be grouped either with flux changes or separate to flux-api with automerge disabled. |
This PR contains the following updates:
v2.2.3
->v2.3.0
v2.2.3
->v2.3.0
187f6a4
->5870003
v2.2.3
->v2.3.0
Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
fluxcd/flux2 (fluxcd/flux2)
v2.3.0
Compare Source
Highlights
Flux v2.3.0 is a feature release. Users are encouraged to upgrade for the best experience.
For a compressive overview of new features and API changes included in this release, please refer to the Announcing Flux 2.3 GA blog post.
This release marks the General Availability (GA) of Flux Helm features and APIs, including helm-controller, the
HelmRelease
,HelmChart
, andHelmRepository
APIs.The
HelmRepository
v2 API comes with new features, such as the ability to reference Helm charts fromOCIRepository
sources, reuse existingHelmChart
resources, and verify the integrity of Helm chart artifacts signed with Notary Notation.❤️ Big thanks to all the Flux contributors that helped us with this release!
Kubernetes compatibility
This release is compatible with the following Kubernetes versions:
v1.28
>= 1.28.0
v1.29
>= 1.29.0
v1.30
>= 1.30.0
API changes
HelmRelease v2
The HelmRelease kind was promoted from v2beta2 to v2 (GA).
The v2 API is backwards compatible with v2beta2, with the exception of the deprecated fields which have been removed.
Removed fields:
.spec.chart.spec.valuesFile
replaced by.spec.chart.spec.valuesFiles
..spec.postRenderers.kustomize.patchesJson6902
replaced by.spec.postRenderers.kustomize.patches
..spec.postRenderers.kustomize.patchesStrategicMerge
replaced by.spec.postRenderers.kustomize.patches
..status.lastAppliedRevision
replaced by.status.history.chartVersion
.New fields:
.spec.chartRef
allows referencing chart artifacts fromOCIRepository
andHelmChart
objects..spec.chart.spec.ignoreMissingValuesFiles
allows ignoring missing values files instead of failing to reconcile.HelmChart v1
The HelmChart kind was promoted from v1beta2 to v1 (GA).
The v1 API is backwards compatible with v1beta2, with the exception of the deprecated fields which have been removed.
Removed fields:
.spec.valuesFile
replaced by.spec.chart.valuesFiles
.New fields:
.spec.ignoreMissingValuesFiles
allows ignoring missing values files instead of failing to reconcile..spec.verify.provider: notation
verify the signature of a Helm OCI artifacts using Notation trust policy and CA certificate.HelmRepository v1
The HelmRepository kind was promoted from v1beta2 to v1 (GA).
The v1 API is backwards compatible with v1beta2.
OCIRepository v1beta2
The OCIRepository kind gains new optional fields with no breaking changes.
New fields:
.spec.ref.semverFilter
allows filtering the tags based on regular expressions before applying the semver range..spec.verify.provider: notation
verify the signature of OCI artifacts using Notation trust policy and CA certificate.Kustomization v1
The Flux Kustomization kind gains new optional fields with no breaking changes.
New fields:
.spec.namePrefix
allows setting a name prefix for the generated resources..spec.nameSuffix
allows setting a name suffix for the generated resources.ImageUpdateAutomation v1beta2
The ImageUpdateAutomation kind was promoted from v1beta1 to v1beta2.
The v1beta2 API is backwards compatible with v1beta1.
Deprecated fields:
Updated
template data has been deprecated in favour ofChanged
that is designed to accommodate for all the types of updates made.New fields:
.spec.policySelector
allows filteringImagePolicy
based on labels.Receiver v1
The Receiver kind gains new optional fields with no breaking changes.
New fields:
.spec.type: cdevents
allows receiving, validating and filtering of CDEvents.Upgrade procedure
Upgrade Flux from
v2.x
tov2.3.0
either by rerunning bootstrap or by using the Flux GitHub Action.For more details, please refer to the upgrade guide from the Announcing Flux 2.3 GA blog post.
Components changelog
New Documentation
CLI Changelog
HelmRelease
API to v2 (GA)(create|delete|export) source chart
commands--reproducible
flag toflux push artifact
flux reconcile
andflux create
--ssh-hostkey-algos
flag to bootstrap commandGOMAXPROCS
andGOMEMLIMIT
to all Flux controllersflux envsubst
command--strict-substitute
flag toflux build ks
andflux diff ks
--registry-creds
flag to bootstrap and install commandsImageUpdateAutomation
API to v1beta2--force
flag descriptionflux check
should error on unrecognised argsflux stats
should error on unrecognised argsConfiguration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Renovate Bot.