Highlights
Flux v2.9.1 is a patch release. The main fix, applied across all controllers, disables Flux variable substitution on the Flux CRDs by annotating them with kustomize.toolkit.fluxcd.io/substitute: disabled, so that Kustomizations with post-build substitution enabled no longer corrupt the CRD schemas when they contain ${...} sequences. Users are encouraged to upgrade for the best experience.
ℹ️ Please follow the Upgrade Procedure for Flux v2.7+ for a smooth upgrade from Flux v2.6 to the latest version.
Fixes:
- Disable Flux variable substitution on all Flux CRDs, preventing post-build substitution from corrupting CRD schemas that contain
${...}sequences (all controllers) - Update SOPS dependency to fix
.inifile decryption (kustomize-controller) - Fix a dry-run error where applying a resource with a strategic merge patch could fail with
<resource> is invalid(kustomize-controller) - Fix a breaking change in the in-memory Kustomization build (Flux CLI)
Improvements:
- Cache the registry authorization token during Notation verification, so it is fetched once per verification instead of once per request (source-controller)
- Update fluxcd/pkg dependencies
Components changelog
- source-controller v1.9.2
- kustomize-controller v1.9.2
- helm-controller v1.6.2
- notification-controller v1.9.2
- image-reflector-controller v1.2.2
- image-automation-controller v1.2.2
- source-watcher v2.2.2
CLI changelog
- [release/v2.9.x] Fix breaking change in-memory kustomization build by @fluxcdbot in #5971
- Update fluxcd/pkg dependencies by @fluxcdbot in #5977
- Update toolkit components by @fluxcdbot in #5979
Full Changelog: v2.9.0...v2.9.1