Update dependency fluxcd/flux2 to v2.0.0-rc.3
This MR contains the following updates:
Package | Update | Change |
---|---|---|
fluxcd/flux2 | patch |
v2.0.0-rc.2 -> v2.0.0-rc.3
|
Release Notes
fluxcd/flux2
v2.0.0-rc.3
Highlights
This is the 3rd release candidate of Flux v2.0 GA. Users are advised to upgrade from v0.41
and older versions to v2.0.0-rc.3
as soon as possible.
Flux v2.0.0-rc.3 comes with security improvements, new features and fixes to issues reported for RC.2.
Fixes and improvements
- Fix bootstrap on GKE (RC.2 regression due to insufficient quota for critical pods).
- All controller base images have been updated to Alpine 3.18.
- All components have been updated to patch CVE-2023-2253 and CVE-2023-1732 (note that Flux is not affected, these CVEs are for packages used in tests).
- Verify artifacts integrity, issue warning events and remove tempered artifacts from storage forcing a re-download (source-controller).
- Files with executable permissions are now archived with their mode set to
0o744
, allowing CI system to run them (source-controller). - The
Alert
v1beta2 API has a new optional field.spec.eventMetadata
that allows users to enrich the alerts with information about the cluster name, region, environment, etc. (notification-controller). - Improve the detection of values changes for HelmReleases by stable sorting them by key (helm-controller).
Components changelog
- source-controller v1.0.0-rc.3
- kustomize-controller v1.0.0-rc.3
- notification-controller v1.0.0-rc.3
- helm-controller v0.33.0
- image-reflector-controller v0.27.2
- image-automation-controller v0.33.1
CLI Changelog
- MR #3883 - @stefanprodan - e2e: Update dependencies
- MR #3882 - @fluxcdbot - Update toolkit components
- MR #3880 - @stefanprodan - Add OSSF Scorecard
- MR #3879 - @stefanprodan - Add ResourceQuota for critical pods
- MR #3877 - @dependabot[bot] - build(deps): bump github.com/docker/distribution from 2.8.1+incompatible to 2.8.2+incompatible
- MR #3876 - @dependabot[bot] - build(deps): bump github.com/cloudflare/circl from 1.3.2 to 1.3.3 in /tests/azure
- MR #3875 - @dependabot[bot] - build(deps): bump github.com/cloudflare/circl from 1.3.2 to 1.3.3
- MR #3866 - @onedr0p - Update Alpine to 3.18
Configuration
-
If you want to rebase/retry this MR, check this box
This MR has been generated by Renovate Bot.