fluxcd/flux2 v2.0.0-rc.3 on GitHub

Highlights

This is the 3rd release candidate of Flux v2.0 GA. Users are advised to upgrade from v0.41 and older versions to v2.0.0-rc.3 as soon as possible.

Flux v2.0.0-rc.3 comes with security improvements, new features and fixes to issues reported for RC.2.

💡 For upgrading from v0.x, please see the procedure documented in RC.1.

⚠️ Note that Kubernetes 1.27.0 contains a regression bug that affects Flux, it is recommended to upgrade Kubernetes to 1.27.1 or newer.

Fix bootstrap on GKE (RC.2 regression due to insufficient quota for critical pods).
All controller base images have been updated to Alpine 3.18.
All components have been updated to patch CVE-2023-2253 and CVE-2023-1732 (note that Flux is not affected, these CVEs are for packages used in tests).
Verify artifacts integrity, issue warning events and remove tempered artifacts from storage forcing a re-download (source-controller).
Files with executable permissions are now archived with their mode set to 0o744, allowing CI system to run them (source-controller).
The Alert v1beta2 API has a new optional field .spec.eventMetadata that allows users to enrich the alerts with information about the cluster name, region, environment, etc. (notification-controller).
Improve the detection of values changes for HelmReleases by stable sorting them by key (helm-controller).

PR #3883 - @stefanprodan - e2e: Update dependencies
PR #3882 - @fluxcdbot - Update toolkit components
PR #3880 - @stefanprodan - Add OSSF Scorecard
PR #3879 - @stefanprodan - Add ResourceQuota for critical pods
PR #3877 - @dependabot[bot] - build(deps): bump github.com/docker/distribution from 2.8.1+incompatible to 2.8.2+incompatible
PR #3876 - @dependabot[bot] - build(deps): bump github.com/cloudflare/circl from 1.3.2 to 1.3.3 in /tests/azure
PR #3875 - @dependabot[bot] - build(deps): bump github.com/cloudflare/circl from 1.3.2 to 1.3.3
PR #3866 - @onedr0p - Update Alpine to 3.18