github.com/fluxcd/kustomize-controller

Release date: 2021-10-19

This prerelease comes with support for SOPS encrypted .env files used in kustomize secret generator.

Improvements:

• SOPS: Decrypt dotenv files used in kustomize secret generator #463
• SOPS: Document dotenv secret generator #469

Fixes:

• Fix cluster scope detection of applied objects #465

Release date: 2021-10-13

This prerelease comes with improvements to drift detection of Kubernetes custom resources.

Improvements:

• Improve drift detection #459

Release date: 2021-10-12

This prerelease comes with fixes to HPA and Service objects validation.

Fixes:

• Fix Service and HPA v2beta1 validation #455

Release date: 2021-10-11

This prerelease comes with fixes for drift detection in Secrets and ConfigMaps.

Fixes:

• Fix drift detection in Secrets and ConfigMaps #451

Release date: 2021-10-10

This prerelease comes with fixes for server-side apply upstream bugs affecting Kubernetes < 1.22.

Fixes:

• Fix SSA upstream bugs for Kubernetes < 1.22 #448

Release date: 2021-10-08

This prerelease comes with fixes to backwards compatibility with Flux CLI 0.17 and older.

Fixes:

• Fix inventory panic for v1beta1 objects #445

Release date: 2021-10-08

This prerelease comes with a new reconciler based on Kubernetes server-side apply and graduates the API to v1beta2.

The controller dependencies has been updated to match kustomize v4.4.0 which restores the usage of YAML anchors.

Breaking changes

• Namespaced objects must contain metadata.namespace, defaulting to the default namespace is no longer supported. Setting a namespace for all objects reconciled by a Kustomization can be done with spec.targetNamespace.

• The logs, events and alerts that report Kubernetes namespaced object changes are now using the Kind/Namespace/Name format instead of Kind/Name.

• The minimum required version of Kubernetes has changed to:

  Kubernetes version	Minimum required
  v1.16	>= 1.16.11
  v1.17	>= 1.17.7
  v1.18	>= 1.18.4
  v1.19 and later	>= 1.19.0

Features and Improvements

• Being able to validate and reconcile sources that contain both CRDs and CRs.
• Being able to wait for all the applied resources to become ready without requiring users to fill-in the health check list.
• Improve performance (CPU, memory, network, FD usage) and reduce the number of calls to Kubernetes API by replacing kubectl execs with a specialized applier written in Go.
• Detect and report drift between the desired state (git, s3, etc) and cluster state reliably.
• Improve the overall observably of the reconciliation process by reporting in real-time the garbage collection and health assessment actions.
• Reconcile empty sources including pruning of all the resources previously applied.
• Mask secrets data in logs, events and alerts.

API changes

The kustomize.toolkit.fluxcd.io/v1beta2 API is backwards compatible with v1beta1.

Additions, deprecations and removals:

• .spec.patchesStrategicMerge deprecated in favour of .spec.patches
• .spec.patchesJson6902 deprecated in favour of .spec.patches
• .spec.validation deprecated and no longer used (server-side validation is implicit)
• .spec.wait added (when enabled, will wait for all the reconciled resources to become ready)
• .status.snapshot replaced by .status.inventory

Updating the manifests in Git to v1beta2 can be done at any time after the kustomize-controller upgrade. All users are encouraged to update the manifests as the deprecated fields will be removed when the next API version will be released.