Commit Graph

1423 Commits

Author SHA1 Message Date
Matheus Pimenta e761a39044
Merge pull request #1188 from fluxcd/release-v1.7.2
Release v1.7.2
2025-10-06 09:13:17 +01:00
Matheus Pimenta 64a8f689ea
Release v1.7.2
Signed-off-by: Matheus Pimenta <matheuscscp@gmail.com>
2025-10-06 08:57:40 +01:00
Matheus Pimenta a21e959a24
Add changelog entry for v1.7.2
Signed-off-by: Matheus Pimenta <matheuscscp@gmail.com>
2025-10-06 08:56:55 +01:00
Stefan Prodan cdce50cd49
Merge pull request #1187 from fluxcd/backport-1186-to-release/v1.7.x
[release/v1.7.x] receiver: Update default API versions to GA
2025-10-02 22:58:39 +03:00
Stefan Prodan ed816fbc9e receiver: Update default API versions to GA
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
(cherry picked from commit c5e11470bd)
2025-10-02 19:18:34 +00:00
Matheus Pimenta dcaa79351e
Merge pull request #1184 from fluxcd/release-v1.7.1
Release v1.7.1
2025-09-24 19:29:15 +01:00
Matheus Pimenta ba4822250d
Release v1.7.1
Signed-off-by: Matheus Pimenta <matheuscscp@gmail.com>
2025-09-24 19:06:25 +01:00
Matheus Pimenta 786f49366a
Add changelog entry for v1.7.1
Signed-off-by: Matheus Pimenta <matheuscscp@gmail.com>
2025-09-24 19:05:38 +01:00
Matheus Pimenta cd7f0d989a
Merge pull request #1183 from fluxcd/backport-fix-release-v1.7.x
[release/v1.7.x] Fix release workflow
2025-09-24 18:52:03 +01:00
Matheus Pimenta b9fc804fff
Fix release workflow
Signed-off-by: Matheus Pimenta <matheuscscp@gmail.com>
2025-09-24 18:43:35 +01:00
Matheus Pimenta a0a2f73784
Merge pull request #1178 from fluxcd/release-v1.7.0
Release v1.7.0
2025-09-24 15:10:20 +01:00
Matheus Pimenta b65ec673fa
Release v1.7.0
Signed-off-by: Matheus Pimenta <matheuscscp@gmail.com>
2025-09-24 15:03:50 +01:00
Matheus Pimenta 49bd794ff4
Add changelog entry for v1.7.0
Signed-off-by: Matheus Pimenta <matheuscscp@gmail.com>
2025-09-24 15:03:43 +01:00
Stefan Prodan cf354c6004
Merge pull request #1177 from fluxcd/dependabot/github_actions/ci-e1f752511b
build(deps): bump fluxcd/gha-workflows from 0.3.0 to 0.4.0 in the ci group
2025-09-24 12:56:37 +03:00
dependabot[bot] ec6f6e57ee
build(deps): bump fluxcd/gha-workflows in the ci group
Bumps the ci group with 1 update: [fluxcd/gha-workflows](https://github.com/fluxcd/gha-workflows).


Updates `fluxcd/gha-workflows` from 0.3.0 to 0.4.0
- [Release notes](https://github.com/fluxcd/gha-workflows/releases)
- [Commits](https://github.com/fluxcd/gha-workflows/compare/v0.3.0...v0.4.0)

---
updated-dependencies:
- dependency-name: fluxcd/gha-workflows
  dependency-version: 0.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-09-24 09:42:21 +00:00
Stefan Prodan 9087341bf3
Merge pull request #1174 from fluxcd/fluxcd/gha-workflows
ci: Refactor CI with `fluxcd/gha-workflows`
2025-09-22 16:57:08 +02:00
Stefan Prodan 49aa7e21c8
ci: Refactor CI with `fluxcd/gha-workflows`
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2025-09-22 17:45:01 +03:00
Stefan Prodan af8ca9e324
Merge pull request #1173 from fluxcd/update-deps
Update dependencies
2025-09-22 16:40:22 +02:00
Stefan Prodan 6f26f2ba73
Update dependencies
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2025-09-22 17:30:10 +03:00
Matheus Pimenta 4b94f17f5c
Merge pull request #1171 from dipti-pai/update-azeventhub-docs
Provider Azure Event Hub - Remove JWT auth from docs
2025-09-05 19:40:06 +01:00
Dipti Pai 3ee0e7a8cd Provider Azure Event Hub - Remove JWT auth from docs
Signed-off-by: Dipti Pai <diptipai89@outlook.com>
2025-09-05 11:21:23 -07:00
Stefan Prodan a7cac5f0fe
Merge pull request #1149 from adri1197/otel
[RFC-0011] - OTEL integration based on alerts
2025-09-05 13:44:41 +03:00
Adrian Fernandez De La Torre a332f9c326 Setup OTEL provider type
Signed-off-by: Adrian Fernandez De La Torre <adri1197@gmail.com>
2025-09-05 11:02:14 +02:00
Matheus Pimenta ba75c8ff57
Merge pull request #1169 from fluxcd/zulip
Introduce zulip alert provider
2025-09-04 19:31:42 +01:00
Matheus Pimenta de328fa438
Introduce zulip alert provider
Signed-off-by: Matheus Pimenta <matheuscscp@gmail.com>
2025-09-04 19:08:06 +01:00
Stefan Prodan 6c1ef1b8ca
Merge pull request #1168 from fluxcd/fix-docs-github-dispatch
docs: Fix GitHub dispatch example
2025-09-03 10:57:22 +03:00
Stefan Prodan b8f0c5ab23
docs: Fix GitHub dispatch example
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2025-09-03 10:09:30 +03:00
Stefan Prodan 6554603785
Merge pull request #1166 from fluxcd/dependabot/github_actions/ci-1dcc4b39f8
build(deps): bump the ci group across 1 directory with 11 updates
2025-09-01 09:46:33 +03:00
dependabot[bot] a82830ca95
build(deps): bump the ci group across 1 directory with 11 updates
Bumps the ci group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `4.2.2` | `5.0.0` |
| [korthout/backport-action](https://github.com/korthout/backport-action) | `3.2.0` | `3.3.0` |
| [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `3.10.0` | `3.11.1` |
| [actions/cache](https://github.com/actions/cache) | `4.2.3` | `4.2.4` |
| [docker/login-action](https://github.com/docker/login-action) | `3.4.0` | `3.5.0` |
| [docker/metadata-action](https://github.com/docker/metadata-action) | `5.7.0` | `5.8.0` |
| [docker/build-push-action](https://github.com/docker/build-push-action) | `6.17.0` | `6.18.0` |
| [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) | `3.8.2` | `3.9.2` |
| [anchore/sbom-action](https://github.com/anchore/sbom-action) | `0.20.0` | `0.20.5` |
| [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) | `6.3.0` | `6.4.0` |
| [github/codeql-action](https://github.com/github/codeql-action) | `3.28.18` | `3.29.11` |



Updates `actions/checkout` from 4.2.2 to 5.0.0
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](11bd71901b...08c6903cd8)

Updates `korthout/backport-action` from 3.2.0 to 3.3.0
- [Release notes](https://github.com/korthout/backport-action/releases)
- [Commits](436145e922...ca4972adce)

Updates `docker/setup-buildx-action` from 3.10.0 to 3.11.1
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](b5ca514318...e468171a9d)

Updates `actions/cache` from 4.2.3 to 4.2.4
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](5a3ec84eff...0400d5f644)

Updates `docker/login-action` from 3.4.0 to 3.5.0
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](74a5d14239...184bdaa072)

Updates `docker/metadata-action` from 5.7.0 to 5.8.0
- [Release notes](https://github.com/docker/metadata-action/releases)
- [Commits](902fa8ec7d...c1e51972af)

Updates `docker/build-push-action` from 6.17.0 to 6.18.0
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](1dc7386353...263435318d)

Updates `sigstore/cosign-installer` from 3.8.2 to 3.9.2
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](3454372f43...d58896d6a1)

Updates `anchore/sbom-action` from 0.20.0 to 0.20.5
- [Release notes](https://github.com/anchore/sbom-action/releases)
- [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md)
- [Commits](e11c554f70...da167eac91)

Updates `goreleaser/goreleaser-action` from 6.3.0 to 6.4.0
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases)
- [Commits](9c156ee8a1...e435ccd777)

Updates `github/codeql-action` from 3.28.18 to 3.29.11
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](ff0a06e83c...3c3833e0f8)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ci
- dependency-name: korthout/backport-action
  dependency-version: 3.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci
- dependency-name: docker/setup-buildx-action
  dependency-version: 3.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci
- dependency-name: actions/cache
  dependency-version: 4.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ci
- dependency-name: docker/login-action
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci
- dependency-name: docker/metadata-action
  dependency-version: 5.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci
- dependency-name: docker/build-push-action
  dependency-version: 6.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci
- dependency-name: sigstore/cosign-installer
  dependency-version: 3.9.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci
- dependency-name: anchore/sbom-action
  dependency-version: 0.20.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ci
- dependency-name: goreleaser/goreleaser-action
  dependency-version: 6.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci
- dependency-name: github/codeql-action
  dependency-version: 3.29.11
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-09-01 06:39:00 +00:00
Stefan Prodan c57a7bf042
Merge pull request #1164 from fluxcd/k8s-1.34
Update to Kubernetes v1.34.0 and Go 1.25.0
2025-08-31 15:57:04 +03:00
Stefan Prodan e2151f5632
Migrate tests to Gomega
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2025-08-31 13:50:53 +03:00
Stefan Prodan a6983bc29c
Build with Go 1.25
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2025-08-31 12:37:54 +03:00
Stefan Prodan 1a486f6aca
Regenerate CRDs with controller-gen v0.19
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2025-08-31 12:36:42 +03:00
Stefan Prodan 805e0678f1
Update dependencies to Kubernetes v1.34.0
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2025-08-31 12:33:42 +03:00
Matheus Pimenta d7cba67d48
Merge pull request #1160 from abhijith-darshan/feat/gh_app_tls
Add support for mTLS to GitHub App transport
2025-08-18 10:16:40 +01:00
abhijith-darshan 4eae0d34da
Add support for mTLS to GitHub App transport
This commit ensures that if GitHub app secret data contains ca.crt then a TLS config with user provided custom ca is used in the underlying HTTP transports. The ca.crt in GitHub App secretRef is ignored if certSecretRef is also provided.

Signed-off-by: abhijith-darshan <abhijith.darshan@hotmail.com>

(chore): keep Makefile in sync with other controllers

Signed-off-by: abhijith-darshan <abhijith.darshan@hotmail.com>

(chore): use proper func naming format

Signed-off-by: abhijith-darshan <abhijith.darshan@hotmail.com>

(chore): revert Makefile changes

Signed-off-by: abhijith-darshan <abhijith.darshan@hotmail.com>

(chore): add get secret helper

This commit creates a getSecret helper func which can be used to resolve secret. createNotifier re-uses this helper func to extract and pass secrets down to other methods

Signed-off-by: abhijith-darshan <abhijith.darshan@hotmail.com>

(chore): adds tls test cases

Signed-off-by: abhijith-darshan <abhijith.darshan@hotmail.com>

(chore): remove debug logs

Signed-off-by: abhijith-darshan <abhijith.darshan@hotmail.com>

(chore): adds documentation

Signed-off-by: abhijith-darshan <abhijith.darshan@hotmail.com>

(chore): update docs with mTLS info

Signed-off-by: abhijith-darshan <abhijith.darshan@hotmail.com>
2025-08-18 11:03:43 +02:00
Matheus Pimenta c2a0355a85
Merge pull request #1161 from cappyzawa/feat/default-service-account-flag
[RFC-0010] Add default-service-account for lockdown
2025-08-17 17:54:24 +01:00
cappyzawa 10a6172536
[RFC-0010] Add default-service-account for lockdown
Add --default-service-account flag for multi-tenant workload identity
lockdown support. This flag sets the default service account name to
be used when .spec.serviceAccountName is not specified in resources.

Signed-off-by: cappyzawa <cappyzawa@gmail.com>
2025-08-18 01:44:25 +09:00
Matheus Pimenta 5bd63a94e4
Merge pull request #1158 from cappyzawa/remove-tlsconfig-servername-pinning
Remove TLS ServerName pinning in TLS config creation
2025-08-14 19:12:31 +01:00
cappyzawa 5be0d2b66c
Remove TLS ServerName pinning in TLS config creation
Updates pkg/runtime dependency to v0.80.0 which removes the need for
the insecure parameter in TLSConfigFromSecretRef. This change removes
the forced ServerName pinning behavior that was causing TLS verification
issues, allowing for more flexible certificate validation.

The TLS config creation now relies on the standard Go TLS verification
process without forcing specific ServerName values, improving
compatibility with various certificate configurations.

Signed-off-by: cappyzawa <cappyzawa@gmail.com>
2025-08-15 02:44:18 +09:00
Stefan Prodan 81c25cf90e
Merge pull request #1157 from fluxcd/remove-v1beta1-api
Remove deprecated APIs in group `notification.toolkit.fluxcd.io/v1beta1`
2025-08-11 17:54:48 +03:00
Stefan Prodan 660e7d2aea
Remove deprecated APIs in group `notification.toolkit.fluxcd.io/v1beta1`
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2025-08-08 15:11:48 +03:00
Matheus Pimenta 4d1c5032d1
Merge pull request #1154 from cappyzawa/feat/google-pubsub-workload-identity
[RFC-0010] Add object-level workload identity support to Google Pub/Sub notifier
2025-08-02 23:42:24 +01:00
cappyzawa 039cd81a6f
docs: enhance workload identity documentation for providers
Add comprehensive workload identity documentation for both Google Pub/Sub and Azure DevOps providers.
Include controller-level and object-level authentication patterns with feature gate requirements
and setup instructions for multi-tenant environments.

Signed-off-by: cappyzawa <cappyzawa@gmail.com>
2025-08-03 07:35:37 +09:00
cappyzawa 43b3104555
Add object-level workload identity support to Google Pub/Sub notifier
Add support for object-level GCP workload identity authentication to enable
individual Providers to authenticate using their own ServiceAccount without
needing to manage JSON credentials. This extends beyond the existing
controller-level workload identity that is automatically handled by
Google libraries.

The implementation maintains backward compatibility by prioritizing
JSON credentials when both authentication methods are available.
Proxy support is also added following the Azure DevOps pattern
for consistency across notifiers.

This change is part of the broader effort to support multi-tenant
workload identity across Flux controllers (RFC-0010).

Signed-off-by: cappyzawa <cappyzawa@gmail.com>
2025-08-03 07:35:37 +09:00
Matheus Pimenta eddaf14754
Merge pull request #1150 from cappyzawa/docs/mtls-documentation-unification
docs: improve mTLS documentation structure and visibility
2025-07-29 15:45:53 +01:00
cappyzawa c2d0f5ec98
docs: improve mTLS documentation structure and visibility
Reorganize Certificate secret reference section to prioritize mutual TLS
authentication discovery and reduce user friction. The previous structure
buried mTLS information within generic certificate documentation, causing
users to miss this important security feature.

Move provider compatibility validation before configuration examples to
prevent wasted effort with unsupported providers. Create dedicated sections
for mTLS and CA-only authentication with complete examples and clear
explanations of field requirements.

Signed-off-by: cappyzawa <cappyzawa@gmail.com>
2025-07-29 23:28:34 +09:00
Matheus Pimenta 4cc3f62a26
Merge pull request #1152 from fluxcd/am-basic-auth
Introduce proper basic auth support for Alertmanager Provider
2025-07-28 11:43:38 +01:00
Matheus Pimenta 3e69e745a3
Introduce proper basic auth support for Alertmanager Provider
Signed-off-by: Matheus Pimenta <matheuscscp@gmail.com>
2025-07-28 11:32:41 +01:00
Matheus Pimenta 5d49b42544
Merge pull request #1151 from fluxcd/watch-label
Introduce label selector for watching Secrets referenced in Receivers
2025-07-27 23:11:38 +01:00