feat(github-release): update flux group ( v2.4.0 → v2.6.2 ) (minor)

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
fluxcd/flux2	Kustomization	minor	v2.4.0 -> v2.6.2
ghcr.io/fluxcd/flux-manifests		minor	v2.4.0 -> v2.6.2

---

Release Notes

fluxcd/flux2 (fluxcd/flux2)

v2.6.2

Compare Source

v2.6.1

Compare Source

Highlights

Flux v2.6.1 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.

Fixes:

• Fix a bug introduced in image-reflector-controller v0.35.0 that was causing spurious error events for policies during image repository reconciliation.
• Fix excessive logging in image-reflector-controller after a restart when the image tags cache is empty.

Components changelog

• image-reflector-controller v0.35.1

What's Changed

• [release/v2.6.x] Update image-reflector-controller to v0.35.1 by @​fluxcdbot in https://github.com/fluxcd/flux2/pull/5382
• [release/v2.6.x] Add digest pinning to image automation testing by @​fluxcdbot in https://github.com/fluxcd/flux2/pull/5384

Full Changelog: fluxcd/flux2@v2.6.0...v2.6.1

v2.6.0

Compare Source

Highlights

Flux v2.6.0 is a feature release. Users are encouraged to upgrade for the best experience.

For a compressive overview of new features and API changes included in this release, please refer to the Announcing Flux 2.6 GA blog post.

Overview of the new features:

• General availability release for the Flux OCI Artifacts APIs and flux artifact commands
• Support for OCI digests pinning (ImagePolicy, ImageUpdateAutomation)
• Object-level workload identity authentication (OCIRepository, ImageRepository, Kustomization, Alert Provider)
• Cache registry credentials for cloud providers (OCIRepository, ImageRepository)
• Git HTTP/S Mutual TLS authentication (GitRepository, ImageUpdateAutomation)
• Support for sparse checkout (GitRepository)
• Support for GitHub App authentication (Alert Provider)
• Support for managed Identity authentication to Azure Event Hub (Alert Provider)
• Customize the ID of the Git commit status with CEL expressions (Alert Provider)
• WaitForTermination deletion policy (Kustomization)
• DisableChartDigestTracking feature gate (HelmRelease)

❤️ Big thanks to all the Flux contributors that helped us with this release!

Kubernetes compatibility

This release is compatible with the following Kubernetes versions:

Kubernetes version	Minimum required
v1.31	>= 1.31.0
v1.32	>= 1.32.0
v1.33	>= 1.33.0

[!NOTE]
Note that the Flux project offers support only for the latest three minor versions of Kubernetes.
Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors such as
ControlPlane that provide enterprise support for Flux.

OpenShift compatibility

Flux can be installed on Red Hat OpenShift cluster directly from OperatorHub using Flux Operator.
The operator allows the configuration of Flux multi-tenancy lockdown, network policies, persistent storage, sharding, vertical scaling and the synchronization of the cluster state from Git repositories, OCI artifacts, and S3-compatible storage.

Upgrade procedure

Upgrade Flux from v2.5.0 to v2.6.0 by following the upgrade guide.

To upgrade the APIs, make sure the new CRDs and controllers are deployed, and then change the manifests in Git:

1. Set apiVersion: source.toolkit.fluxcd.io/v1 in the YAML files that contain OCIRepository definitions.
2. Add an annotation api.fluxcd.io/upgrade: "v2.6.0" to the OCIRepository resources. (this is not required if Flux Operator is used for upgrade)
3. Commit, push, and reconcile the API version changes.

Bumping the APIs version in manifests can be done gradually.
It is advised to not delay this procedure as the deprecated versions will be removed after 6 months.

Components changelog

• source-controller v1.6.0
• kustomize-controller v1.6.0
• notification-controller v1.6.0
• helm-controller v1.3.0
• image-reflector-controller v0.35.0
• image-automation-controller v0.41.0

New Documentation

• OCIRepository v1 specification
• AWS integrations
• Azure integrations
• GCP integrations

What's Changed

• fix: correct name on github app secret by @​NotAwar in https://github.com/fluxcd/flux2/pull/5202
• Update RFC 0008 and RFC 0009 milestones by @​matheuscscp in https://github.com/fluxcd/flux2/pull/5141
• Update kustomize-controller to v1.5.1 by @​fluxcdbot in https://github.com/fluxcd/flux2/pull/5214
• Update backport labels for 2.5 by @​matheuscscp in https://github.com/fluxcd/flux2/pull/5215
• Fix command debug hr not taking targetPath into account by @​matheuscscp in https://github.com/fluxcd/flux2/pull/5227
• Remove redundant space. by @​laiminhtrung1997 in https://github.com/fluxcd/flux2/pull/5038
• ci: switch to goreleaser changelog generation by @​y-eight in https://github.com/fluxcd/flux2/pull/5284
• change: use the default ephemeral GITHUB_TOKEN instead of the static one by @​piontec in https://github.com/fluxcd/flux2/pull/5282
• add: OSSF scorecard configuration file - ignore false-positive by @​piontec in https://github.com/fluxcd/flux2/pull/5287
• build(deps): bump helm.sh/helm/v3 from 3.17.0 to 3.17.3 by @​dependabot in https://github.com/fluxcd/flux2/pull/5295
• Allow to pull/push artifacts to insecure registries without TLS by @​mottetm in https://github.com/fluxcd/flux2/pull/5299
• [RFC-0010] Multi-Tenant Workload Identity by @​matheuscscp in https://github.com/fluxcd/flux2/pull/5209
• flux diff: Reset target struct before decoding by @​maboehm in https://github.com/fluxcd/flux2/pull/5302
• fix: allow recursive dry-run over local sources by @​niveau0 in https://github.com/fluxcd/flux2/pull/5219
• Run conformance tests for Kubernetes 1.33.0 by @​stefanprodan in https://github.com/fluxcd/flux2/pull/5318
• Update to Kubernetes 1.33.0 and Go 1.24.0 by @​stefanprodan in https://github.com/fluxcd/flux2/pull/5323
• [RFC-0010] Remove EKS Pod Identity from the proposal by @​matheuscscp in https://github.com/fluxcd/flux2/pull/5309
• [RFC-0010] Add RBAC for creating service account tokens by @​matheuscscp in https://github.com/fluxcd/flux2/pull/5332
• Upgrade fluxcd/pkg auth, oci, git and git/gogit by @​matheuscscp in https://github.com/fluxcd/flux2/pull/5333
• Fix exit code handling in get command by @​dgunzy in https://github.com/fluxcd/flux2/pull/5338
• build(deps): bump the ci group across 1 directory with 18 updates by @​dependabot in https://github.com/fluxcd/flux2/pull/5325
• Fix flux trace for HRs from OCIRepositorys by @​makkes in https://github.com/fluxcd/flux2/pull/5349
• Fix e2e workflow by @​makkes in https://github.com/fluxcd/flux2/pull/5351
• [RFC-0010] Update RFC to include opt-in feature gate by @​matheuscscp in https://github.com/fluxcd/flux2/pull/5354
• [RFC-0010] Update RFC feature gate behavior by @​matheuscscp in https://github.com/fluxcd/flux2/pull/5355
• Upgrade fluxcd/pkg packages by @​matheuscscp in https://github.com/fluxcd/flux2/pull/5356
• Upgrade fluxcd/pkg packages by @​matheuscscp in https://github.com/fluxcd/flux2/pull/5357
• Set Kubernetes 1.31 as min supported version by @​stefanprodan in https://github.com/fluxcd/flux2/pull/5364
• Update dependencies by @​matheuscscp in https://github.com/fluxcd/flux2/pull/5366
• Update toolkit components by @​fluxcdbot in https://github.com/fluxcd/flux2/pull/5368
• Promote artifact commands to stable by @​matheuscscp in https://github.com/fluxcd/flux2/pull/5369
• Add --interval and --reflect-digest flags to flux create image policy by @​matheuscscp in https://github.com/fluxcd/flux2/pull/5345
• Update CLI to OCIRepository v1 (GA) by @​stefanprodan in https://github.com/fluxcd/flux2/pull/5371
• Update dependabot config by @​stefanprodan in https://github.com/fluxcd/flux2/pull/5373
• Update toolkit components by @​fluxcdbot in https://github.com/fluxcd/flux2/pull/5370

New Contributors

• @​NotAwar made their first contribution in https://github.com/fluxcd/flux2/pull/5202
• @​laiminhtrung1997 made their first contribution in https://github.com/fluxcd/flux2/pull/5038
• @​y-eight made their first contribution in https://github.com/fluxcd/flux2/pull/5284
• @​piontec made their first contribution in https://github.com/fluxcd/flux2/pull/5282
• @​mottetm made their first contribution in https://github.com/fluxcd/flux2/pull/5299
• @​maboehm made their first contribution in https://github.com/fluxcd/flux2/pull/5302
• @​niveau0 made their first contribution in https://github.com/fluxcd/flux2/pull/5219
• @​dgunzy made their first contribution in https://github.com/fluxcd/flux2/pull/5338

Full Changelog: fluxcd/flux2@v2.5.0...v2.6.0

v2.5.1

Compare Source

Highlights

Flux v2.5.1 is a patch release which comes with various fixes. Users are encouraged to upgrade for the best experience.

Fixes:

• Fix a bug introduced in kustomize-controller v1.5.0 that was causing spurious logging for deprecated API versions and health check failures.
• Sanitize the kustomize-controller logs when encountering errors during SOPS decryption.

Components changelog

• kustomize-controller v1.5.1

CLI Changelog

• PR #​5215 - @​matheuscscp - Update backport labels for 2.5
• PR #​5214 - @​fluxcdbot - Update kustomize-controller to v1.5.1

v2.5.0

Compare Source

Highlights

Flux v2.5.0 is a feature release. Users are encouraged to upgrade for the best experience.

For a compressive overview of new features and API changes included in this release,
please refer to the Announcing Flux 2.5 GA blog post.

Overview of the new features:

• Support for GitHub App authentication (GitRepository and ImageUpdateAutomation API)
• Custom Health Checks using CEL (Kustomization API)
• Fine-grained control of garbage collection (Kustomization API)
• Enable decryption of secrets generated by Kustomize components (Kustomization API)
• Support for custom event metadata from annotations (Alert API)
• Git commit status updates for Flux Kustomizations with OCIRepository sources (Alert API)
• Resource filtering using CEL for webhook receivers (Receiver API)
• Debug commands for Flux Kustomizations and HelmReleases (Flux CLI)

❤️ Big thanks to all the Flux contributors that helped us with this release!

Kubernetes compatibility

This release is compatible with the following Kubernetes versions:

Kubernetes version	Minimum required
v1.30	>= 1.30.0
v1.31	>= 1.31.0
v1.32	>= 1.32.0

[!NOTE]
Note that the Flux project offers support only for the latest three minor versions of Kubernetes.
Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors such as
ControlPlane that provide enterprise support for Flux.

OpenShift compatibility

Flux can be installed on Red Hat OpenShift cluster directly from OperatorHub using
Flux Operator.
The operator allows the configuration of Flux multi-tenancy lockdown, network policies,
persistent storage, sharding, vertical scaling and the synchronization
of the cluster state from Git repositories, OCI artifacts and S3-compatible storage.

Upgrade procedure

Upgrade Flux from v2.4.0 to v2.5.0 by following the upgrade guide.

There are no new API versions in this release, so no changes are required in the YAML manifests containing Flux resources.

Components changelog

• source-controller v1.5.0
• kustomize-controller v1.5.0
• notification-controller v1.5.0
• helm-controller v1.2.0
• image-reflector-controller v0.34.0
• image-automation-controller v0.40.0

CLI Changelog

• PR #​5204 - @​stefanprodan - Update kubectl in flux-cli image
• PR #​5203 - @​stefanprodan - Update flux-cli image
• PR #​5200 - @​stefanprodan - Update Kubernetes min supported version to 1.30
• PR #​5199 - @​matheuscscp - Update integration tests dependencies for Flux 2.5
• PR #​5195 - @​fluxcdbot - Update toolkit components
• PR #​5192 - @​fluxcdbot - Update toolkit components
• PR #​5190 - @​dependabot[bot] - build(deps): bump github.com/distribution/distribution/v3 from 3.0.0-rc.2 to 3.0.0-rc.3
• PR #​5188 - @​matheuscscp - Upgrade pkg/runtime
• PR #​5187 - @​stefanprodan - Update conformance test suite
• PR #​5181 - @​dependabot[bot] - build(deps): bump the ci group across 1 directory with 13 updates
• PR #​5176 - @​YvanGuidoin - fix: align flux diff skipping with kustomize-controller
• PR #​5175 - @​stefanprodan - Update dependencies
• PR #​5151 - @​stefanprodan - [RFC-0009] Custom Health Checks using CEL expressions
• PR #​5146 - @​sjorsholtrop-ritense - Improve "flux resume" error message on non-existent object
• PR #​5142 - @​matheuscscp - Fix create command always using imageRepositoryType
• PR #​5137 - @​scottrigby - Add OpenShift 4.16 & 4.17 to conformance testing
• PR #​5117 - @​stefanprodan - Implement flux debug kustomization command
• PR #​5114 - @​stefanprodan - Update dependencies to Kubernetes 1.32.0 and Go 1.23.0
• PR #​5111 - @​stefanprodan - Run conformance tests for Kubernetes 1.32.0
• PR #​5107 - @​darkowlzz - workflows: Use setup-terraform to install latest
• PR #​5106 - @​stefanprodan - Implement flux debug helmrelease command
• PR #​5105 - @​stefanprodan - Update fluxcd/pkg dependencies
• PR #​5104 - @​dependabot[bot] - build(deps): bump the ci group across 1 directory with 11 updates
• PR #​5103 - @​dipti-pai - [RFC-007] Flux cli support for GitHub app authentication
• PR #​5099 - @​bkreitch - fix misplaced quotes
• PR #​5073 - @​mloskot - docs: Mention Flux upgrade guide in release notes
• PR #​5071 - @​milas - fix: skip remote Kustomizations on recursive diff
• PR #​5068 - @​h3nryc0ding - fix(cli): confusing error message for missing kind
• PR #​5060 - @​jdewinne - Use replicated-actions in conformance tests

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.