github.com/fluxcd/source-controller

Release date: 2021-08-05

This prerelease comes with a series of bug fixes, and updates the Kubernetes dependencies to v1.21.3 and Helm to v3.6.3.

Fixes:

• Fix tag checkout with libgit2 #394
• Take relative paths in account for Bucket revision #403
• Ensure rel path never traverses outside Storage #417
• Use same SemVer logic in both Git implementations #417
• storage: strip env specific data during archive #417

Improvements:

• e2e: Update Kubernetes to v1.21 #396
• Update Helm to v3.6.3 #400
• Add setup-envtest in Makefile #404
• Use ObjectKeyFromObject instead of ObjectKey #405
• Drop deprecated io/ioutil #409
• Update dependencies #416

Release date: 2021-06-29

This prerelease comes with a bug fix to the Git tag checkout when using libgit2.

Fixes:

• Fix tag checkout with libgit2 #394

Release date: 2021-06-22

This prerelease updates the build constraints for libgit2, ensuring the underlying libssh2-1-dev dependency is linked against libssl-dev instead of libgcrypt so that PKCS* private keys can be used without any issues.

Fixes:

• Use libgit2 from "unstable" / "sid" #391

Release date: 2021-06-18

This prerelease updates the Helm dependency to v3.6.1, this update is a security update and ensures credentials are only passed to the defined URL in a HelmRelease.

Note: there have been reports from the Helm user community that this new behavior may cause issues with Helm repository providers like Artifactory. If this happens to be a problem for you, the behavior can be disabled by setting PassCredentials in the HelmRepositorySpec.

For more details, see: https://github.com/helm/helm/security/advisories/GHSA-56hp-xqp3-w2jf

Improvements:

• Update Helm to v3.6.1 #388

Release date: 2021-06-17

This prerelease comes with changes to the base image used to build the controller, replacing Alpine with Debian slim. This change allows the controller to run on ARM64, previously broken in v0.14.0.

Improvements:

• Use Debian instead of Alpine for multi-arch builds #386
• Panic on non-nil AddToScheme errors in main init #387

Release date: 2021-06-09

This prerelease comes with an update to the Kubernetes and controller-runtime dependencies to align them with the Kubernetes 1.21 release, including an update of Helm to v3.6.0.

After a failed ARMv7 build during the initial release attempt of this version, binutils-gold has been introduced to the builder image to allow gccgo to build using the Gold linker.

Improvements:

• Update K8s, controller-runtime and fluxcd/pkg deps #374
• Add nightly builds workflow #376

Fixes:

• Reinstate Git cloning timeout #372
• Use binutils-gold in builder image #377
• Use github.repository property for image name #378

Release date: 2021-06-02

This prerelease comes with an update to the go-git implementation dependency, bumping the version to v5.4.2. This should resolve any issues with object not found and empty git-upload-pack given errors that were thrown for some Git repositories since 0.13.0.

Fixes:

• Update go-git to v5.4.2 #370

Release date: 2021-05-28

This prerelease comes with a bug fix to the GitRepository include feature.

Fixes:

• Fix GitRepository include for nested paths #367

Release date: 2021-05-26

This prerelease comes with support for including the contents of a Git repository into another.

The include feature has multiple benefits over regular Git submodules:

• Including a GitRepository allows you to use different authentication methods for different repositories.
• A change in the included repository will trigger an update of the including repository.
• Multiple GitRepositories could include the same repository, which decreases the amount of cloning done compared to using submodules.

Features:

• Add include property to GitRepositories #348

Improvements:

• Update Git packages #365

Release date: 2021-05-10

This prerelease comes with a bug fix to Bucket source ignore handling.

Fixes:

• Split bucket item key by / to satisfy matcher #356

Release date: 2021-04-23

This prerelease comes with a bug fix to source ignore handling.

Fixes:

• Configure ignore domain for GitRepository rules #351

Release date: 2021-04-21

This prerelease comes with support for SSH keys with a passphrase.

The .sourceignore files are now loaded by traversing through the directory tree, instead of just looking at the root.

The HelmChart ValueFile string field has been deprecated in favour of ValuesFiles string array.

Features:

• Support SSH private key with password #338 #339
• Add ValuesFiles to HelmChart spec #305

Improvements:

• Check ignore matches before Bucket item downloads #337
• Add short name for Git and Helm repositories #334
• Update Helm to v3.5.4 #340

Fixes:

• Write chart data on identical values overwrite #345
• Fix HelmChart values tests #332

Release date: 2021-03-31

This prerelease comes with support for Git submodules and self-signed TLS certs when using gitProvider: go-git.

Features:

• Add support for Git submodules with go-git #327
• Enable self-signed certs for go-git #324

Improvements:

• Add well-known CI configs to exclusion list #329

Release date: 2021-03-26

This is the tenth MINOR prerelease.

This prerelease comes with a breaking change to the leader election ID from 305740c0.fluxcd.io to source-controller-leader-election to be more descriptive. This change should not have an impact on most installations, as the default replica count is 1. If you are running a setup with multiple replicas, it is however advised to scale down before upgrading.

The suspended status of resources is now recorded to a gotk_suspend_status Prometheus gauge metric.

Improvements:

• Record suspend metrics in controllers #311
• Set leader election deadline to 30s #318
• Change leader election ID to be more descriptive #319

Release date: 2021-03-15

This prerelease comes with improvements to Git clone errors and patch updates to dependencies.

Improvements:

• Tidy git clone errors #304
• Update dependencies #307

Release date: 2021-02-23

This is the ninth MINOR prerelease.

Due to changes in Helm v3.5.2, charts not versioned using strict semver are no longer compatible with source-controller. When using charts from Git, make sure that the version field is set in Chart.yaml.

Improvements:

• Update dependencies #299
• Refactor release workflow #300

Release date: 2021-02-18

This prerelease fixes a bug where only one dependency of a Helm chart would be included.

Fixes:

• Copy loop iterator var for use by goroutine #294

Release date: 2021-02-12

This is the eight MINOR prerelease.

The libgit2 Git implementation now has support for Certificate Authority validation for Git over HTTPS, as well as various bug fixes around working with SSH host key fingerprints.

Alpine has been updated to 3.13, making it possible to move away from edge for libgit2 and musl dependencies.

pprof endpoints have been enabled on the metrics server, making it easier to collect runtime information to for example debug performance issues.

Features:

• Add custom CA validation for Git over HTTPS #283

Improvements:

• Rename Git packages to implementations #270
• Enable pprof endpoints on metrics server #282
• Add fsGroup to pod security context #285
• Use musl and libit2 packages from v3.13 branch #289

Fixes:

• Fix chart with custom valuesFile (0bytes tgz) #286
• libgit2: use provided host to validate public key #288
• libgit2: check hostkey type when validating hostkey #290

Release date: 2021-02-03

This prerelease fixes a bug where the controller tried to update dependencies for Helm charts even when dependencies were already present.

Release date: 2021-02-02

This prerelease changes the strategy of the controller's deployment to Recreate to prevent a deadlock during upgrades and to ensure safe usage of backing persistent (RW) volumes.

Release date: 2021-02-01

This prerelease ensures the file server of the controller only starts for the elected leader, and improves the visibility of chart name validation errors.

Release date: 2021-01-25

This prerelease changes the recorded revision for a HelmRepository resource to a SHA1 checksum, this to improve the detection of changes for repositories that do not correctly update their advertised generation timestamp.

Release date: 2021-01-21

This is the seventh MINOR prerelease.

Two new argument flags are introduced to support configuring the QPS (--kube-api-qps) and burst (--kube-api-burst) while communicating with the Kubernetes API server.

The LocalObjectReference from the Kubernetes core has been replaced with our own, making Name a required field. The impact of this should be limited to direct API consumers only, as the field was already required by controller logic.

Overwrite of chart values has been patched to correctly read the data from the defined YAML file.

Release date: 2021-01-19

This prereleases comes with bug fixes to the HelmChart indexes, watches, and the overwrite of chart values.

Release date: 2021-01-16

This prerelease comes with updates to Kubernetes and Helm dependencies. The Kubernetes packages were updated to v1.20.2 and Helm to v3.5.0.

Release date: 2021-01-14

This prerelease fixes a regression bug introduced in v0.6.0 that caused reconciliation request annotations to be ignored in certain scenarios.

Release date: 2021-01-12

This is the sixth MINOR prerelease, upgrading the controller-runtime dependencies to v0.7.0.

The container image for ARMv7 and ARM64 that used to be published separately as source-controller:*-arm64 has been merged with the AMD64 image.

Release date: 2020-12-18

This prerelease fixes a regression bug that made it impossible to reference to a HelmChart.ValuesFile in a path relative to the root of the Bucket or GitRepository source.

Release date: 2020-12-16

This prerelease adds safe guards for user defined relative paths, ensuring they never traverse outside working directories.

Other notable changes:

• ListObjects V1 fallback for GCS S3 endpoints, ensuring generic Bucket resources connecting to GCS are able to list object
• HelmChart controller panic regression bug fix, introduced in v0.5.0

Release date: 2020-12-12

This prerelease fixes a bug in the build process that caused the ARMv7 image to fail due to libgit2 requiring musl>=1.2.0.

Release date: 2020-12-11

This prerelease fixes a regression bug causing the commit hash for the go-git implementation to not be forwarded, introduced by the support for multiple Git implementations.

Release date: 2020-12-11

This prerelease adds the option to configure the advertised storage address using the --storage-adv-addr flag.

The default deployment manifest uses this to configure the FQDN of the service (source-controller.$(RUNTIME_NAMESPACE).svc.cluster.local.), but omitting the flag will result in a fallback to the previous behavior for backwards compatibility.

Release date: 2020-12-09

This prerelease fixes a bug in the build process that caused the ARMv7 build to fail due to libgit2 requiring musl>=1.2.0.

Release date: 2020-12-09

This is the fifth MINOR prerelease, adding a new Git implementation (libgit2) to allow for communication with Git servers that just support the Git v2 protocol, like Azure Devops.

The new Git implementation can be enabled by configuring the GitImplementation in a GitRepository to libgit2 (default: go-git). Note that this implementation does not support shallow cloning, and it is therefore advised to only resort to this option if a connection fails with the default configuration.

Other notable changes in this release:

• Bug fix to respect the configured SSH user in GitRepository URLs
• Chart name validation for charts from a HelmRepository resource
• Kubernetes dependency upgrades to v1.19.4
• Helm upgrade to v3.4.2

Release date: 2020-11-26

This prerelease fixes a bug in the listing of HelmChart resources for GitRepository changes.

Release date: 2020-11-26

This is the fourth MINOR prerelease, adding support for suspension of resources using .spec.suspend, and watchers for the upstream sources of HelmChart resources to detect revision changes faster.

Release date: 2020-11-19

This prerelease comes with a fix to garbage collection. The status sub-resource has a new field called LastHandledReconcileAt that can be used to track the reconciliation progress.

This version comes with a breaking change to the API package: the status condition type is imported from Kubernetes API machinery 1.19.