Go modules · #2808 by repository stars

github.com/fluxcd/kustomize-controller

v1.9.4fluxcd/kustomize-controller ↗

Last release 27 days ago
01 Aug 2026
Ships on a steady schedule
a new release about every 1 weeks
Nearly every release is documented
notes for 60 of the last 60 stable releases
Nothing withdrawn
no release was ever pulled
6 years old
1344 releases · first in 2020

Release timeline

1344 releases since 2020

202120222023202420252026

20202026

Releases

v0.21.1-0.20220222155433-55ebe211ed6922 Feb 2022pre-release
Nothing published for this version
v0.21.1-0.20220218102252-22c4a1a3216118 Feb 2022pre-release
Nothing published for this version
v0.21.1-0.20220218092540-f1238527718f18 Feb 2022pre-release
Nothing published for this version
v0.21.1-0.20220218090810-3a7828e1deb418 Feb 2022pre-release
Nothing published for this version
v0.21.1-0.20220218090543-5080bb6fbbf418 Feb 2022pre-release
Nothing published for this version
v0.21.016 Feb 2022
Release notes3 sources agree
Release date: 2022-02-16

This prerelease comes with support for making the Kubernetes Secrets and ConfigMaps referenced in postBuild.substituteFrom optional. When substituteFrom.optional is set to true, the controller will ignore not found errors, and will substitute the variables with their default values.

Features:
- Tolerate absence of resources in post-build substitution #570
Open source →
v0.20.3-0.20220216115622-af84d6d0ab7816 Feb 2022pre-release
Nothing published for this version
v0.20.3-0.20220215152821-56661088370215 Feb 2022pre-release
Nothing published for this version
v0.20.3-0.20220215142745-af038d6df51615 Feb 2022pre-release
Nothing published for this version
v0.20.3-0.20220215142741-eba41686727515 Feb 2022pre-release
Nothing published for this version
v0.20.3-0.20220213211355-e665bccf89b813 Feb 2022pre-release
Nothing published for this version
v0.20.3-0.20220213211354-e437cb83c25a13 Feb 2022pre-release
Nothing published for this version
v0.20.210 Feb 2022
Release notes3 sources agree
Release date: 2022-02-10

This prerelease comes with an update to the sigs.k8s.io/kustomize/api package, bringing the controller on par with the Kustomize v4.5.2 release.

Kustomize v4.5.2 contains a regression bug fix for pseudo git HTTP URLs.

Improvements:
- Update controller to kustomize v4.5.2 #567
- Clarify spec.path in API docs #566
- Fix typo in API docs #564
Open source →
v0.20.2-0.20220210082515-2b70aa45369f10 Feb 2022pre-release
Nothing published for this version
v0.20.2-0.20220210081747-851f78f5c03c10 Feb 2022pre-release
Nothing published for this version
v0.20.2-0.20220210075819-f29ae5e833fc10 Feb 2022pre-release
Nothing published for this version
v0.20.2-0.20220210072749-e0488c9f5f2710 Feb 2022pre-release
Nothing published for this version
v0.20.2-0.20220209211719-3d95b875e1559 Feb 2022pre-release
Nothing published for this version
v0.20.2-0.20220208130902-110ee5b15b0b8 Feb 2022pre-release
Nothing published for this version
v0.20.2-0.20220208092501-d768b6cf76c28 Feb 2022pre-release
Nothing published for this version
v0.20.17 Feb 2022
Release notes3 sources agree
Release date: 2022-02-07

This prerelease comes with an update to the sigs.k8s.io/kustomize packages, bringing the controller on par with the Kustomize v4.5.1 release.

Improvements:
- Update controller to kustomize v4.5.1 #559
Fixes:
- Transfer ownership of the kubectl managed fields #562
Open source →
v0.20.1-0.20220207111949-e4dad227d4237 Feb 2022pre-release
Nothing published for this version
v0.20.1-0.20220207093539-5d90428b35cb7 Feb 2022pre-release
Nothing published for this version
v0.20.1-0.20220207085641-5ac991b6af0c7 Feb 2022pre-release
Nothing published for this version
v0.20.1-0.20220207083932-c7f97a05778f7 Feb 2022pre-release
Nothing published for this version
v0.20.1-0.20220203071333-7bcc52baf0f73 Feb 2022pre-release
Nothing published for this version
v0.20.01 Feb 2022
Release notes3 sources agree
Release date: 2022-02-01

This prerelease comes with security improvements for multi-tenant clusters:
- Platform admins can enforce impersonation across the cluster using the --default-service-account flag. When the flag is set, all Kustomizations, which don't have spec.serviceAccountName specified, use the service account name provided by --default-service-account=<SA Name> in the namespace of the object.
- Platform admins can disable cross-namespace references with the --no-cross-namespace-refs=true flag. When this flag is set, Kustomizations can only refer to sources (GitRepositories and Buckets) in the same namespace as the Kustomization object, preventing tenants from accessing another tenant's repositories.
The controller container images are signed with Cosign and GitHub OIDC, and a Software Bill of Materials in SPDX format has been published on the release page.

Starting with this version, the controller deployment conforms to the Kubernetes restricted pod security standard:
- all Linux capabilities were dropped
- the root filesystem was set to read-only
- the seccomp profile was set to the runtime default
- run as non-root was enabled
- the user and group ID was set to 65534
Breaking changes:
- The use of new seccomp API requires Kubernetes 1.19.
- The controller container is now executed under 65534:65534 (userid:groupid). This change may break deployments that hard-coded the user ID of 'controller' in their PodSecurityPolicy.
- When both spec.kubeConfig and spec.ServiceAccountName are specified, the controller will impersonate the service account on the target cluster, previously the controller ignored the service account.
Features:
- Allow setting a default service account for impersonation #550
- Allow disabling cross-namespace references #549
- SOPS: Add support for HashiCorp Vault token-based authentication #538
Improvements:
- Publish SBOM and sign release artifacts #541
- Drop capabilities, enable seccomp and enforce runAsNonRoot #539
- docs: Add var substitution operator escape syntax #537
- Update development documentation #540
- Refactor Fuzz implementation #536
Fixes:
- Revoke kubectl managed fields ownership #527
- Ensure object are finalized under impersonation #552
- Use patch instead of update when adding finalizers #535
- Fix preflight validation #544
- Fix the missing protocol for the first port in manager config #547
Open source →
v0.19.2-0.20220201080101-d188195def311 Feb 2022pre-release
Nothing published for this version
v0.19.2-0.20220131121506-ceefe5ae095331 Jan 2022pre-release
Nothing published for this version
v0.19.2-0.20220131112012-65aaa1d69a6831 Jan 2022pre-release
Nothing published for this version
v0.19.2-0.20220131104012-cd6fff02202431 Jan 2022pre-release
Nothing published for this version
v0.19.2-0.20220131100733-ea95f0c85cbb31 Jan 2022pre-release
Nothing published for this version
v0.19.2-0.20220131100155-8e74f2c10cde31 Jan 2022pre-release
Nothing published for this version
v0.19.2-0.20220131092954-f353ba44a7f931 Jan 2022pre-release
Nothing published for this version
v0.19.2-0.20220131092511-38541078fab331 Jan 2022pre-release
Nothing published for this version
v0.19.2-0.20220131092340-4b59d7705e8b31 Jan 2022pre-release
Nothing published for this version
v0.19.2-0.20220127162502-4d7cba91b08727 Jan 2022pre-release
Nothing published for this version
v0.19.2-0.20220127093628-09e6c29593e227 Jan 2022pre-release
Nothing published for this version
v0.19.2-0.20220126205010-518c8a021b3026 Jan 2022pre-release
Nothing published for this version
v0.19.2-0.20220125083730-d22f98448da425 Jan 2022pre-release
Nothing published for this version
v0.19.2-0.20220124223634-7a511efe384424 Jan 2022pre-release
Nothing published for this version
v0.19.2-0.20220121115322-0b018312e10721 Jan 2022pre-release
Nothing published for this version
v0.19.2-0.20220121110540-4ee01a2db06b21 Jan 2022pre-release
Nothing published for this version
v0.19.2-0.20220120163411-593ac59f293f20 Jan 2022pre-release
Nothing published for this version
v0.19.2-0.20220120153543-f1327dca09a620 Jan 2022pre-release
Nothing published for this version
v0.19.2-0.20220120141332-b6eeb141f2ee20 Jan 2022pre-release
Nothing published for this version
v0.19.2-0.20220120130408-be87d12e597120 Jan 2022pre-release
Nothing published for this version
v0.19.2-0.20220120085331-6658d78b1b7420 Jan 2022pre-release
Nothing published for this version
v0.19.2-0.20220120080231-12d9fabcc40420 Jan 2022pre-release
Nothing published for this version
v0.19.2-0.20220119205910-c579e714304319 Jan 2022pre-release
Nothing published for this version
v0.19.2-0.20220119122620-91e96a20695819 Jan 2022pre-release
Nothing published for this version
v0.19.2-0.20220119121132-76487334ff9119 Jan 2022pre-release
Nothing published for this version
v0.19.2-0.20220119072429-c0d5eeea2d6519 Jan 2022pre-release
Nothing published for this version
v0.19.2-0.20220117140514-c626836c415817 Jan 2022pre-release
Nothing published for this version
v0.19.2-0.20220117074727-0a6505fc594017 Jan 2022pre-release
Nothing published for this version
v0.19.2-0.20220114204610-6c343e15aefd14 Jan 2022pre-release
Nothing published for this version
v0.19.2-0.20220114153824-50c043eb4ffc14 Jan 2022pre-release
Nothing published for this version
v0.19.2-0.20220114145537-7f8441672e8e14 Jan 2022pre-release
Nothing published for this version
v0.19.2-0.20220114062426-b18584a6528b14 Jan 2022pre-release
Nothing published for this version
v0.19.113 Jan 2022
Release notes3 sources agree
Release date: 2022-01-13

This prerelease fixes a regression bug introduced in v0.19.0 that prevented StatefulSets from being reconciled on Kubernetes <= 1.21.

Fixes:
- Update fluxcd/pkg/ssa to exclude the status field from apply #533
Open source →