fluxcd
/
source-controller
mirror of https://github.com/fluxcd/source-controller.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
source-controller/CHANGELOG.md

1848 lines
67 KiB
Markdown
Raw Blame History

# Changelog
All notable changes to this project are documented in this file.
## 0.25.11
**Release date:** 2022-07-27
This prerelease comes with an improvement in the Helm OCI Chart to use an exact
version when provided. This makes it possible to work with registries that don't
support listing tags.
Improvements:
- Don't fetch tags when exact version is specified in HelmChart
[#846](https://github.com/fluxcd/source-controller/pull/846)
## 0.25.10
**Release date:** 2022-07-13
This prerelease fixes SIGSEGV when resolving charts dependencies.
It also brings CI improvements and update dependencies to patch upstream CVEs.
Fixes:
- Fix SIGSEGV when resolving charts dependencies
[#827](https://github.com/fluxcd/source-controller/pull/827)
- Fix Panic when no artifact in source
[#832](https://github.com/fluxcd/source-controller/pull/832)
Improvements:
- Update go-yaml to v3.0.1
[#804](https://github.com/fluxcd/source-controller/pull/804)
- build: provenance and tampering checks for libgit2
[#823](https://github.com/fluxcd/source-controller/pull/823)
- Decrease fs perms to 0o700
[#818](https://github.com/fluxcd/source-controller/pull/818)
- build: run darwin tests on macos 10.15, 11 and 12
[#817](https://github.com/fluxcd/source-controller/pull/817)
- Minor comment updates
[#812](https://github.com/fluxcd/source-controller/pull/812)
- Split GitHub workflows
[#811](https://github.com/fluxcd/source-controller/pull/811)
- docs: Add password-protected SSH keys information
[#801](https://github.com/fluxcd/source-controller/pull/801)
- Bump Helm to v3.9.1
[#833](https://github.com/fluxcd/source-controller/pull/833)
- Update libgit2 to v1.3.2
[#834](https://github.com/fluxcd/source-controller/pull/834)
## 0.25.9
**Release date:** 2022-06-29
This prerelease fixes an authentication issue for Helm OCI where the credentials
were cached instead of being discarded after each reconciliation.
Fixes:
- helm-oci: disable cache in oci registry client
[#799](https://github.com/fluxcd/source-controller/pull/799)
- helm-oci: remove the trailing slash in `spec.url`
[#799](https://github.com/fluxcd/source-controller/pull/799)
## 0.25.8
**Release date:** 2022-06-24
This prerelease fixes an authentication issue when using libgit2 managed
transport to checkout repos on BitBucket server.
Fixes:
- set request auth if both username and password are non empty
[#794](https://github.com/fluxcd/source-controller/pull/794)
Improvements:
- libgit2/managed/http: test for incomplete creds
[#796](https://github.com/fluxcd/source-controller/pull/796)
## 0.25.7
**Release date:** 2022-06-22
This prerelease comes with an improvement in the SSH managed transport error
messages related to known hosts check and removes a deadlock in the SSH smart
subtransport.
Fixes:
- libgit2: remove deadlock
[#785](https://github.com/fluxcd/source-controller/pull/785)
Improvements:
- libgit2: improve known_hosts error messages
[#783](https://github.com/fluxcd/source-controller/pull/783)
## 0.25.6
**Release date:** 2022-06-14
This prerelease fixes an issue with leaked SSH connections on
managed transport and adds some general build and libgit2
improvements.
Fixes:
- libgit2: dispose connections in SubTransport.Close
[#775](https://github.com/fluxcd/source-controller/pull/775)
Improvements:
- build: enable -race for go test
[#615](https://github.com/fluxcd/source-controller/pull/615)
- libgit2: refactor tests to use managed and unmanaged transport cleanly
[#777](https://github.com/fluxcd/source-controller/pull/777)
- libgit2: add contextual logging to subtransports
[#778](https://github.com/fluxcd/source-controller/pull/778)
- libgit2: fix managed transport enabled flag update
[#781](https://github.com/fluxcd/source-controller/pull/781)
## 0.25.5
**Release date:** 2022-06-08
This prerelease fixes a regression for SSH host key verification
and fixes semver sorting for Helm OCI charts.
In addition, the controller dependencies where update to Kubernetes v1.24.1.
Fixes:
- helm: Fix sorting semver from OCI repository tags
[#769](https://github.com/fluxcd/source-controller/pull/769)
- libgit2: Fix SSH host key verification regression
[#771](https://github.com/fluxcd/source-controller/pull/771)
Improvements:
- libgit2: Improve HTTP redirection observability
[#772](https://github.com/fluxcd/source-controller/pull/772)
- Update dependencies
[#773](https://github.com/fluxcd/source-controller/pull/773)
## 0.25.4
**Release date:** 2022-06-07
This prerelease fixes a regression when accessing Gitlab via HTTPS
when the URL does not have the '.git' suffix. Plus some small
documentation fixes and dependency updates.
Fixes:
- Update link to v1beta2 in the API spec
[#764](https://github.com/fluxcd/source-controller/pull/764)
- libgit2: fix gitlab redirection for HTTP
[#765](https://github.com/fluxcd/source-controller/pull/765)
Improvements:
- Update dependencies
[#766](https://github.com/fluxcd/source-controller/pull/766)
## 0.25.3
**Release date:** 2022-06-06
This prerelease fixes a regression in HelmRepository index caching.
Fixes:
- Fix repository cache regression
[#761](https://github.com/fluxcd/source-controller/pull/761)
## 0.25.2
**Release date:** 2022-06-03
This prerelease fixes a bug which prevented the use of the `OptimizedGitClones`
feature when using tags to checkout a Git repository, and adds docs on how to
access Azure Blob using managed identities and aad-pod-identity.
Improvements:
- Add docs on managed identity for Azure Blob
[#752](https://github.com/fluxcd/source-controller/pull/752)
Fixes:
- libgit2: return CheckoutTag with LastRevision
[#755](https://github.com/fluxcd/source-controller/pull/755)
- Log on new artifact and failure recovery
[#759](https://github.com/fluxcd/source-controller/pull/759)
## 0.25.1
**Release date:** 2022-06-02
This prerelease fixes some race conditions in the libgit2 managed ssh smart
subtransport.
Fixes:
- libgit2/managed: fix race issues in ssh transport
[#753](https://github.com/fluxcd/source-controller/pull/753)
## 0.25.0
**Release date:** 2022-06-01
This prerelease adds support for Helm OCI. Users can specify `.spec.type` of
a `HelmRepository` to use an OCI repository instead of an HTTP/S Helm repository.
Please note that this currently has a couple of limitations (which will be addressed in a future release):
* Chart dependencies from OCI repositories are not supported. [#722](https://github.com/fluxcd/source-controller/issues/722)
* Custom CA certificates are not supported. [#723](https://github.com/fluxcd/source-controller/issues/723)
An example of OCI `HelmRepository` can be found [here](https://github.com/fluxcd/source-controller/blob/api/v0.25.0/docs/spec/v1beta2/helmrepositories.md#helm-oci-repository).
A new flag `--feature-gate` has been added to disable/enable new experimental
features. It works in a similar manner to [Kubernetes feature gates](https://kubernetes.io/docs/reference/command-line-tools-reference/feature-gates/).
The libgit2 managed transport feature has been enabled by default. Furthermore,
a few changes have been made to make the feature more stable and enable quicker
clones. Users that want to opt out and use the unmanaged transports may do so
by passing the flag `--feature-gate=GitManagedTransport=false`, but please note
that we encourage users not to do so.
GitRepository reconciliation has been made more efficient by adding support for
no-op clones, when checking out repositories using branches or tags.
This feature is also enabled by default, and users can opt out
by passing the flag `--feature-gate=OptimizedGitClones=false`.
Please note that this feature is only active when the managed transport feature
is enabled. Disabling managed transports, quietly disables optimzed Git clones.
Improvements:
- Optimise clone operations
[#665](https://github.com/fluxcd/source-controller/pull/665)
- [RFC 0002] Flux OCI support for Helm
[#690](https://github.com/fluxcd/source-controller/pull/690)
- Add Git test coverage for supported algorithms
[#708](https://github.com/fluxcd/source-controller/pull/708)
- Add new flag --ssh-hostkey-algos
[#711](https://github.com/fluxcd/source-controller/pull/711)
- libgit2: Disable connection caching
[#713](https://github.com/fluxcd/source-controller/pull/713)
- Update dependencies
[#717](https://github.com/fluxcd/source-controller/pull/717)
- libgit2: enable managed transport by default
[#718](https://github.com/fluxcd/source-controller/pull/718)
- libgit2: Add support for hashed known_hosts
[#720](https://github.com/fluxcd/source-controller/pull/720)
- Remove dependency on libgit2 credentials callback
[#727](https://github.com/fluxcd/source-controller/pull/727)
- Update Alpine to v3.16
[#731](https://github.com/fluxcd/source-controller/pull/731)
- Update dependencies
[#739](https://github.com/fluxcd/source-controller/pull/739)
- libgit2: enforce context timeout
[#740](https://github.com/fluxcd/source-controller/pull/740)
- libgit2: Pass ctx to all the transport opts
[#743](https://github.com/fluxcd/source-controller/pull/743)
Fixes:
- Ensure git status is checked at the correct time
[#575](https://github.com/fluxcd/source-controller/pull/575)
- libgit2: recover from git2go panic
[#707](https://github.com/fluxcd/source-controller/pull/707)
- Remove minio region
[#715](https://github.com/fluxcd/source-controller/pull/715)
- GitRepositoryReconciler no-op clone improvements
[#724](https://github.com/fluxcd/source-controller/pull/724)
- Support dockerconfigjson with OCI HelmRepositories
[#725](https://github.com/fluxcd/source-controller/pull/725)
- log when the OCI temp credentials file can't be deleted
[#726](https://github.com/fluxcd/source-controller/pull/726)
- Helm reconcilers conditions and test improvements
[#728](https://github.com/fluxcd/source-controller/pull/728)
- reconcile: Set observed gen only when conditions exist
[#729](https://github.com/fluxcd/source-controller/pull/729)
- helmrepo: Fix test flake in type update test
[#730](https://github.com/fluxcd/source-controller/pull/730)
- Fix tests failing in Ubuntu
[#732](https://github.com/fluxcd/source-controller/pull/732)
- tests: ignore proxy settings when running tests
[#734](https://github.com/fluxcd/source-controller/pull/734)
- gitrepo: gitCheckout() return typed errors only
[#736](https://github.com/fluxcd/source-controller/pull/736)
- gitrepo: set conditions in gitCheckout
[#741](https://github.com/fluxcd/source-controller/pull/741)
- libgit2: Enable tests
[#744](https://github.com/fluxcd/source-controller/pull/744)
- OCI HelmRepo: handle status conditions in-line
[#748](https://github.com/fluxcd/source-controller/pull/748)
- registry: repo URL and dockerconfig URL mismatch
[#749](https://github.com/fluxcd/source-controller/pull/749)
- libgit2: fix checkout logic for CheckoutBranch
[#750](https://github.com/fluxcd/source-controller/pull/750)
## 0.24.4
**Release date:** 2022-05-03
This prerelease comes with dependency updates, and improvements around edge-case
handling of reconcile result calculations ensuring an object is always requeued
when its Status Conditions equal `Ready=False` and `Stalled!=True`.
Improvements:
- summarize: Consider obj status condition in result
[#703](https://github.com/fluxcd/source-controller/pull/703)
- Update dependencies
[#705](https://github.com/fluxcd/source-controller/pull/705)
Fixes:
- docs: Remove all traces of "identity.pub" from docs
[#699](https://github.com/fluxcd/source-controller/pull/699)
- test: use `T.TempDir` to create temporary test directory
[#701](https://github.com/fluxcd/source-controller/pull/701)
- Switch to gen-crd-api-reference-docs from master
[#702](https://github.com/fluxcd/source-controller/pull/702)
## 0.24.3
**Release date:** 2022-04-28
This prerelease prevents `Reconciling` and `ArtifactOutdated` conditions from
being set on a `HelmRepository` when the checksum of a cached repository index
changes.
Fixes:
- helmrepo: same revision different checksum scenario
[#691](https://github.com/fluxcd/source-controller/pull/691)
## 0.24.2
**Release date:** 2022-04-26
This prerelease improves the memory consumption while reconciling a
`HelmRepository`, by only validating the YAML of a fetched index when the
checksum of the retrieved file differs from the current Artifact.
Fixes:
- helm: optimise repository index loading
[#685](https://github.com/fluxcd/source-controller/pull/685)
- tests: Fix flakiness of git related tests
[#686](https://github.com/fluxcd/source-controller/pull/686)
## 0.24.1
**Release date:** 2022-04-22
This prerelease fixes a regression bug where the controller would panic in
further to be identified edge-case scenarios in which a `HelmRepository`
Artifact would not have a size.
Fixes:
- Fix panic when HelmRepository's artifact size is nil
[#683](https://github.com/fluxcd/source-controller/pull/683)
## 0.24.0
**Release date:** 2022-04-19
This prerelease enables the Helm chart dependency manager to make use of the
opt-in memory cache introduced in `v0.23.0`, revises the file permissions set
by the controller, and updates various dependencies.
:warning: **Breaking change:** From this release on, the `RUNTIME_NAMESPACE`
environment variable is no longer taken into account to configure the
advertised HTTP/S address of the storage. Instead, [variable
substitution](https://kubernetes.io/docs/tasks/inject-data-application/define-interdependent-environment-variables/#define-an-environment-dependent-variable-for-a-container)
must be used, as described in [the changelog entry for `v0.5.2`](#052).
Improvements:
- Change all file permissions to octal format
[#653](https://github.com/fluxcd/source-controller/pull/653)
- Enable dependency manager to use in-memory cache
[#667](https://github.com/fluxcd/source-controller/pull/667)
- Update libgit2 image to v1.3.1
[#671](https://github.com/fluxcd/source-controller/pull/671)
- Remove hostname hyphen split block
[#672](https://github.com/fluxcd/source-controller/pull/672)
- Update dependencies
[#675](https://github.com/fluxcd/source-controller/pull/675)
[#676](https://github.com/fluxcd/source-controller/pull/676)
[#677](https://github.com/fluxcd/source-controller/pull/677)
## 0.23.0
**Release date:** 2022-04-12
This prerelease introduces new retention options for Garbage Collection,
a new opt-in in-memory cache for `HelmRepository` index files, improves
notifications following reconciling failures, brings ways to configure
Key Exchange Algorithms, plus some extra housekeeping awesomeness.
Garbage Collection is enabled by default, and now its retention options
are configurable with the flags: `--artifact-retention-ttl` (default: `60s`)
and `--artifact-retention-records` (default: `2`). They define the minimum
time to live and the maximum amount of artifacts to survive a collection.
A new notification is now emitted to identify recovery from failures. It
is triggered when a failed reconciliation is followed by a successful one, and
the notification message is the same that's sent in usual successful source
reconciliation message about the stored artifact.
The opt-in in-memory cache for `HelmRepository` addresses issues where the
index file is loaded and unmarshalled in concurrent reconciliation resulting
in a heavy memory footprint. It can be configured using the flags:
`--helm-cache-max-size`, `--helm-cache-ttl`, `--helm-cache-purge-interval`.
The Key Exchange Algorithms used when establishing SSH connections are
based on the defaults configured upstream in `go-git` and `golang.org/x/crypto`.
Now this can be overriden with the flag `--ssh-kex-algos`. Note this applies
to the `go-git` gitImplementation or the `libgit2` gitImplementation but
_only_ when Managed Transport is being used.
Managed Transport for `libgit2` now introduces self-healing capabilities,
to recover from failure when long-running connections become stale.
The exponental back-off retry can be configured with the new flags:
`--min-retry-delay` (default: `750ms`) and `--max-retry-delay`
(default: `15min`). Previously the defaults were set to `5ms` and `1000s`,
which in some cases impaired the controller's ability to self-heal
(e.g. retrying failing SSH connections).
Introduction of a secure directory loader which improves the handling
of Helm charts paths.
Improvements:
- update toolkit.fluxcd.io docs links
[#651](https://github.com/fluxcd/source-controller/pull/651)
- Add optional in-memory cache of HelmRepository index files
[#626](https://github.com/fluxcd/source-controller/pull/626)
- Add flag to allow configuration of SSH kex algos
[#655](https://github.com/fluxcd/source-controller/pull/655)
- Garbage collect with provided retention options
[#638](https://github.com/fluxcd/source-controller/pull/638)
- Avoid event logging GC failure
[#659](https://github.com/fluxcd/source-controller/pull/659)
- Add notify() in all the reconcilers
[#624](https://github.com/fluxcd/source-controller/pull/624)
- Remove leftover timeout in reconcilers
[#660](https://github.com/fluxcd/source-controller/pull/660)
- libgit2: managed transport improvements
[#658](https://github.com/fluxcd/source-controller/pull/658)
- helm: introduce customized chart loaders
[#663](https://github.com/fluxcd/source-controller/pull/663)
- Add flags to configure exponential back-off retry
[#664](https://github.com/fluxcd/source-controller/pull/664)
## 0.22.5
**Release date:** 2022-03-30
This prerelease improves the Status API of the Source objects to
reflect more accurate Status Condition information.
In addition, it also fixes a bug in `go-git` implementation due to which cloning
public Git repository failed without any credentials since version `0.17.0`, and
some general stability improvements in the libgit2 experimental managed
transport.
Improvements:
- Align fuzzing deps
[#644](https://github.com/fluxcd/source-controller/pull/644)
- Separate positive polarity conditions for ArtifactInStorage
[#646](https://github.com/fluxcd/source-controller/pull/646)
- Removes empty credentials from Basic Auth
[#648](https://github.com/fluxcd/source-controller/pull/648)
- libgit2: fix access to nil t.stdin and improve observability
[#649](https://github.com/fluxcd/source-controller/pull/649)
## 0.22.4
**Release date:** 2022-03-28
This prerelease improves on the experimental managed transport overall
stability. Changes of note:
- SSH connections now being reused across git operations.
- Leaked HTTP connections are now fixed.
- The long-standing SSH intermittent errors are addressed by the cached connections.
Fixes:
- Various fixes for managed transport
[#637](https://github.com/fluxcd/source-controller/pull/637)
## 0.22.3
**Release date:** 2022-03-25
This prerelease fixes a regression bug introduced in `v0.22.0`, which would
cause a `GitRepository` to end up in a `Stalled` state if an include did not
have an Artifact available.
Fixes:
- gitrepo: Do not stall when no included artifact
[#639](https://github.com/fluxcd/source-controller/pull/639)
- Fix dpanic issue when logging odd number of args
[#641](https://github.com/fluxcd/source-controller/pull/641)
## 0.22.2
**Release date:** 2022-03-23
This prerelease ensures (Kubernetes) Event annotations are prefixed with the
FQDN of the Source API Group. For example, `revision` is now
`source.toolkit.fluxcd.io/revision`.
This to facilitate improvements to the notification-controller, where
annotations prefixed with the FQDN of the Group of the Involved Object will be
transformed into "fields".
Fixes:
- Prefix event annotations with API Group FQDN
[#632](https://github.com/fluxcd/source-controller/pull/632)
## 0.22.1
**Release date:** 2022-03-23
This prerelease fixes a regression in which `.sourceignore` rules for a
`GitRepository` would not be matched correctly.
Fixes:
- fix: configure domain for .sourceignore rules
[#629](https://github.com/fluxcd/source-controller/pull/629)
## 0.22.0
**Release date:** 2022-03-17
This prerelease comes with new reconcilers which make use of `fluxcd/pkg`
utilities for common runtime operations, and graduates the API to `v1beta2`.
:warning: **It is required** to update the source-controller Custom Resource
Definitions on your cluster and/or in Git.
### Breaking changes
- `Bucket` resources do now take the provided etag for object storage items
into account during the calculation of the revision. As a result, items will
no longer be downloaded on every reconcile if none of them have changed.
- `HelmChart` resources do now advertise the observed chart name
(`.status.observedChartName`) and Source (reference) Artifact revision
(`.status.observedSourceArtifactRevision`) in the Status. The information is
used to more efficiently react to source revision and/or chart changes.
### Features and Improvements
#### API specifications in a user-friendly format
[The new specifications for the `v1beta2` API](https://github.com/fluxcd/source-controller/tree/v0.22.0/docs/spec/v1beta2)
have been written in a new format with the aim to be more valuable to a user.
Featuring separate sections with examples, and information on how to write
and work with them.
#### Artifact now advertises size
The size (in bytes) of a tarball Artifact is now advertised in the Size
(`.size`) field of the Artifact. This can be utilized by users to e.g. quickly
see if `.sourceignore` rules have an effect, or be displayed in a UI.
#### Azure Blob Storage support for `Bucket` resources
The `.spec.provider` of a `Bucket` resource can now be set to `azure` to
instruct the controller to use the
[Azure Blob Storage SDK](https://github.com/Azure/azure-sdk-for-go/tree/main/sdk/storage/azblob#readme)
while fetching objects. This allows for authenticating using Service
Principals, Managed Identities and Shared Keys.
For more information, see the
[Bucket spec about the Azure provider](https://github.com/fluxcd/source-controller/blob/v0.22.0/docs/spec/v1beta2/buckets.md#azure).
#### Enhanced Kubernetes Conditions
Source API resources will now advertise more explicit Condition types (more
about the types in "API changes"), provide `Reconciling` and `Stalled`
Conditions where applicable for
[better integration with `kstatus`](https://github.com/kubernetes-sigs/cli-utils/blob/master/pkg/kstatus/README.md#conditions),
and record the Observed Generation on the Condition.
For a detailed overview per Source type, refer to the spec:
- [GitRepository](https://github.com/fluxcd/source-controller/blob/v0.22.0/docs/spec/v1beta2/gitrepositories.md#conditions)
- [HelmRepository](https://github.com/fluxcd/source-controller/blob/v0.22.0/docs/spec/v1beta2/helmrepositories.md#conditions)
- [HelmChart](https://github.com/fluxcd/source-controller/blob/v0.22.0/docs/spec/v1beta2/helmcharts.md#conditions)
- [Bucket](https://github.com/fluxcd/source-controller/blob/v0.22.0/docs/spec/v1beta2/buckets.md#conditions)
#### Enhanced Kubernetes Events (and notifications)
The Kubernetes Events the controller emits have been reworked to provide a
proper reason, and more informative messages.
Users making use of the notification-controller will notice this as well, as
this same information is used to compose notifications.
#### Experimental managed transport for `libgit2` Git implementation
The `libgit2` Git implementation supports a new experimental transport to
improve reliability, adding timeout enforcement for Git network operations.
Opt-in by setting the environment variable `EXPERIMENTAL_GIT_TRANSPORT` to
`true` in the controller's Deployment. This will result in the low-level
transport being handled by the controller, instead of `libgit2`. It may result
in an increased number of timeout messages in the logs, however it will remove
the ability of Git operations to make the controllers hang indefinitely.
#### Reuse of HTTP/S transport for Helm repository index and chart downloads
The Helm dependency has been updated to `v3.8.1`, with a patch applied from
https://github.com/helm/helm/pull/10568. Using this patch, the HTTP transports
are now managed by the controller, to prevent the clogging of thousands of open
TCP connections on some instances.
#### Update of `libgit2` Git implementation to `v1.3.x`
The `libgit2` Git implementation has been updated to `v1.3.x`, allowing us to
provide better error signals for authentication, certificate and transport
failures. Effectively, this means that instead of a `unable to clone: User`
error string, a descriptive one is now given.
In addition, `NO_PROXY` settings are now properly taken into account.
#### Preparation of support for `rsa-ssh2-256/512`
The dependency on `golang.org/x/crypto` has been updated to
`v0.0.0-20220315160706-3147a52a75dd`, as preparation of support for
`rsa-ssh2-256/512`. This should theoretically work out of the box for
`known_hosts` entries and `go-git` Git provider credentials, but has not been
widely tested.
### API changes
The `source.toolkit.fluxcd.io/v1beta2` API is backwards compatible with `v1beta1`.
- Introduction of `Reconciling` and `Stalled` Condition types for [better
integration with `kstatus`](https://github.com/kubernetes-sigs/cli-utils/blob/master/pkg/kstatus/README.md#conditions).
- Introduction of new Condition types to provide better signals and failure
indications:
* `ArtifactOutdated`: indicates the current Artifact of the Source is outdated.
* `SourceVerified`: indicates the integrity of the Source has been verified.
* `FetchFailed`: indicates a transient or persistent fetch failure of the
upstream Source.
* `BuildFailed`: indicates a transient or persistent build failure of a
Source's Artifact.
* `StorageOperationFailed`: indicates a transient or persistent failure
related to storage.
* `IncludeUnavailable`: indicates an include is not available. For example,
because it does not exist, or does not have an Artifact.
- Introduction of a Size (in bytes) field (`.status.artifact.size`) in the
Artifact object.
- Introduction of `ObservedChartName` (`.status.observedChartName`) and
`ObservedSourceArtifactRevision` (`.status.observedSourceArtifactRevision`)
fields in the `HelmChart` Status.
- Introduction of `azure` provider implementation for `Bucket`.
Updating the manifests in Git to `v1beta2` can be done at any time after the
source-controller upgrade.
### Full list of changes
- Upgrade to golang-with-libgit2:1.1.1.6 and use static libraries for in
development
[#562](https://github.com/fluxcd/source-controller/pull/562)
- Initial fuzzing tests
[#572](https://github.com/fluxcd/source-controller/pull/572)
- Validate libgit2 args are set correctly
[#574](https://github.com/fluxcd/source-controller/pull/574)
- Download libgit2 libraries for fuzzing
[#572](https://github.com/fluxcd/source-controller/pull/577)
- Upgrade libgit2 to 1.3.0 and git2go to v33
[#573](https://github.com/fluxcd/source-controller/pull/573)
- pkg/git: Include commit message and URL in checkout error
[#579](https://github.com/fluxcd/source-controller/pull/579)
- Add support for multiple fuzz sanitizers
[#580](https://github.com/fluxcd/source-controller/pull/580)
- Upgrade controller-runtime to v0.11.1 and docker/distribution to v2.8.0
[#583](https://github.com/fluxcd/source-controller/pull/583)
- Move to `v1beta2` API and rewrite reconcilers
[#586](https://github.com/fluxcd/source-controller/pull/586)
- git/libgit2: set CheckoutForce on branch strategy
[#589](https://github.com/fluxcd/source-controller/pull/589)
- Reuse transport for Helm downloads
[#590](https://github.com/fluxcd/source-controller/pull/590)
- Update object API version in the sample configs
[#591](https://github.com/fluxcd/source-controller/pull/591)
- api: Move Status in CRD printcolumn to the end
[#592](https://github.com/fluxcd/source-controller/pull/592)
- Update github.com/sosedoff/gitkit to v0.3.0 (CVE fix)
[#594](https://github.com/fluxcd/source-controller/pull/594)
- Remove redundant reconciling condition in reconcileArtifact
[#595](https://github.com/fluxcd/source-controller/pull/595)
- Implement Size field on archived artifacts
[#597](https://github.com/fluxcd/source-controller/pull/597)
- Add native Azure Blob support
[#598](https://github.com/fluxcd/source-controller/pull/598)
- Experimental managed transport for libgit2 operations
[#606](https://github.com/fluxcd/source-controller/pull/606)
- Update Helm to patched v3.8.1
[#609](https://github.com/fluxcd/source-controller/pull/609)
- Add new condition StorageOperationFailedCondition
[#612](https://github.com/fluxcd/source-controller/pull/612)
- Prioritize StorageOperationFailedCondition
[#613](https://github.com/fluxcd/source-controller/pull/613)
- Update dependencies
[#600](https://github.com/fluxcd/source-controller/pull/600)
[#616](https://github.com/fluxcd/source-controller/pull/616)
- api/v1beta2: add note on Condition polarity
[#622](https://github.com/fluxcd/source-controller/pull/622)
## 0.21.2
**Release date:** 2022-02-07
This prerelease changes the default timeout of `GitRepositories` and `Buckets` from `20s` to `60s`.
When using the `libgit2` Git implementation, increasing the timeout helps avoid
`Error waiting on socket` intermittent SSH cloning failures.
Improvements:
- Increase default timeout to 60s
[#570](https://github.com/fluxcd/source-controller/pull/570)
## 0.21.1
**Release date:** 2022-01-27
This prerelease comes with a bug fix to ensure the `libgit2` Git implementation
respects hostnames with and without port while matching against `known_hosts`.
Fixes:
- Fix host mismatch in libgit2
[#561](https://github.com/fluxcd/source-controller/pull/561)
## 0.21.0
**Release date:** 2022-01-26
This prerelease comes with changes to the base image used to build and
run the controller, replacing Debian Unstable (Sid) with Alpine 3.15.
The controller is now statically built and includes libgit2 along with
its main dependencies.
The controller container images are signed with
[Cosign and GitHub OIDC](https://github.com/sigstore/cosign/blob/22007e56aee419ae361c9f021869a30e9ae7be03/KEYLESS.md),
and a Software Bill of Materials in [SPDX format](https://spdx.dev) has been published on the release page.
Starting with this version, the controller deployment conforms to the
Kubernetes [restricted pod security standard](https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted):
- all Linux capabilities were dropped
- the root filesystem was set to read-only
- the seccomp profile was set to the runtime default
- run as non-root was enabled
- the filesystem group was set to 1337
- the user and group ID was set to 65534
**Breaking changes**:
- The use of new seccomp API requires Kubernetes 1.19.
- The controller container is now executed under 65534:65534 (userid:groupid).
This change may break deployments that hard-coded the user ID of 'controller' in their PodSecurityPolicy.
Improvements:
- Statically build using musl toolchain and target alpine
[#558](https://github.com/fluxcd/source-controller/pull/558)
- Publish SBOM and sign release artifacts
[#550](https://github.com/fluxcd/source-controller/pull/550)
- security: Drop capabilities, set userid and enable seccomp
[#521](https://github.com/fluxcd/source-controller/pull/521)
- docs: Add git proxy support docs
[#547](https://github.com/fluxcd/source-controller/pull/547)
- libgit2: Configured libgit2 clone ProxyOptions
[#524](https://github.com/fluxcd/source-controller/pull/524)
- storage: include directories in artifact tarball
[#543](https://github.com/fluxcd/source-controller/pull/543)
- Add Permissions to GitHub Workflows
[#551](https://github.com/fluxcd/source-controller/pull/551)
- Update git2go to v31.7.6
[#554](https://github.com/fluxcd/source-controller/pull/554)
- Update dev docs
[#555](https://github.com/fluxcd/source-controller/pull/555)
Fixes:
- e2e: Set timeout to fix intermittent errors
[#549](https://github.com/fluxcd/source-controller/pull/549)
- git/libgit2: Fix failing tests when the default branch is not "master"
[#545](https://github.com/fluxcd/source-controller/pull/545)
- Remove temp file name from Helm index cache err
[#540](https://github.com/fluxcd/source-controller/pull/540)
- Fix makefile envtest and controller-gen usage
[#539](https://github.com/fluxcd/source-controller/pull/539)
- Update file close operation to not use defer and add test case for CopyFromPath
[#538](https://github.com/fluxcd/source-controller/pull/538)
- Fix the missing protocol for the first port in manager config
[#556](https://github.com/fluxcd/source-controller/pull/556)
## 0.20.1
**Release date:** 2022-01-07
This prerelease comes with an update for `github.com/containerd/containerd` to `v1.5.9`
to please static security analysers and fix any warnings for CVE-2021-43816.
Improvements:
- Log the error when tmp cleanup fails
[#533](https://github.com/fluxcd/source-controller/pull/533)
- Update containerd to v1.5.9 (fix CVE-2021-43816)
[#532](https://github.com/fluxcd/source-controller/pull/532)
## 0.20.0
**Release date:** 2022-01-05
This prerelease comes with an update to the Kubernetes and controller-runtime dependencies
to align them with the Kubernetes 1.23 release, including an update of Helm to `v3.7.2`.
In addition, the controller is now built with Go 1.17, and
`github.com/containerd/containerd` was updated to `v1.5.8` to please
static security analysers and fix any warnings for GHSA-5j5w-g665-5m35.
Improvements:
- Update Go to v1.17
[#473](https://github.com/fluxcd/source-controller/pull/473)
- Update build dependencies
[#520](https://github.com/fluxcd/source-controller/pull/520)
- Update containerd to v1.5.8 (fix GHSA-5j5w-g665-5m35)
[#529](https://github.com/fluxcd/source-controller/pull/529)
## 0.19.2
**Release date:** 2021-12-09
This prerelease ensures the API resources are not prematurely marked as `Ready`
by tools like `kstatus`, while the controller has not observed a newly created
resource yet, by defaulting the `ObservedGeneration` in the status of the
resource to `-1`.
In addition, it changes the faulty `URL` column for `Bucket` resources to
`Endpoint`, and updates `github.com/opencontainers/runc` to `v1.0.3` to please
static security analysers and fix any warnings for CVE-2021-43784.
Improvements:
- crds: set default observedGeneration to -1
[#517](https://github.com/fluxcd/source-controller/pull/517)
- Update github.com/opencontainers/runc to v1.0.3 (fix CVE-2021-43784)
[#518](https://github.com/fluxcd/source-controller/pull/518)
Fixes:
- Change bucket JSONPath from URL to endpoint
[#514](https://github.com/fluxcd/source-controller/pull/514)
## 0.19.1
**Release date:** 2021-12-03
This prerelease changes the length of the SHA hex added to the SemVer metadata
of a `HelmChart`, when `ReconcileStrategy` is set to `Revision`, to a short SHA
hex of the first 12 characters. This is to prevent situations in which the
SemVer would exceed the length limit of 63 characters when utilized in a Helm
chart as a label value.
Concrete example: `1.2.3+a4303ff0f6fb560ea032f9981c6bd7c7f146d083.1` becomes
`1.2.3+a4303ff0f6fb.1`
:warning: There have been additional user reports about charts complaining
about a `+` character in the label:
```
metadata.labels: Invalid value: "1.2.3+a4303ff0f6fb560ea032f9981c6bd7c7f146d083.1": a valid label must be an empty string or consist of alphanumeric characters, '-', '_' or '.', and must start and end with an alphanumeric character (e.g. 'MyValue', or 'my_value', or '12345', regex used for validation is '(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])?')
```
Given the [Helm chart best practices mention to replace this character with a
`_`](https://helm.sh/docs/chart_best_practices/conventions/#version-numbers),
we encourage you to patch this in your (upstream) chart.
Pseudo example using [template functions](https://helm.sh/docs/chart_template_guide/function_list/):
```yaml
{{- replace "+" "_" .Chart.Version | trunc 63 }}
```
Fixes:
- controllers: use short SHA in chart SemVer meta
[#507](https://github.com/fluxcd/source-controller/pull/507)
## 0.19.0
**Release date:** 2021-11-23
For this prerelease we focused on improving the logic around Helm resources,
with as goal to be more efficient, and increase code and testing quality.
It contains **breaking behavioral changes** to `HelmRepository` and
`HelmChart` resources:
- Helm repository index files and/or charts **must** not exceed the new declared
runtime default limits to [avoid out-of-memory crashes](https://github.com/fluxcd/source-controller/issues/470),
overwriting the default configuration is possible.
| Type | Default max size **(in MiB)** | Option flag to overwrite |
|---|---|---|
| Helm repository index | 50MiB | `--helm-index-max-size=<bytes>` |
| Helm chart | 10MiB | `--helm-chart-max-size=<bytes>` |
| Singe file from Helm chart | 5MiB | `--helm-chart-file-max-size=<bytes>` |
- Using `ValuesFiles` in a `HelmChart` will now append a `.<Generation>` to the SemVer
metadata of the packaged chart and the revision of the Artifact. For example,
`v1.2.3+.5` for a `HelmChart` resource with generation `5`. This ensures consumers
of the chart are able to notice changes to the merged values without the underlying
chart source (revision) changing.
While an optional ACL field has been added to the API resources, there is no
implementation at time of release.
Improvements:
- helm: factor out logic from controller into package
[#485](https://github.com/fluxcd/source-controller/pull/485)
- Add ACL option field to Source API
[#495](https://github.com/fluxcd/source-controller/pull/495)
- Update various dependencies to mitigate CVE warning
[#493](https://github.com/fluxcd/source-controller/pull/493)
- Update controller-runtime to v0.10.2
[#497](https://github.com/fluxcd/source-controller/pull/497)
- Update github.com/minio/minio-go to `v7.0.15`
[#498](https://github.com/fluxcd/source-controller/pull/498)
- internal/helm: LoadChartMetadataFromArchive improvements
[#502](https://github.com/fluxcd/source-controller/pull/502)
- internal/helm: validate loaded chart metadata obj
[#503](https://github.com/fluxcd/source-controller/pull/503)
Fixes:
- tests: ensure proper garbage collection
[#489](https://github.com/fluxcd/source-controller/pull/489)
- controllers: Fix helmchart values file merge test
[#494](https://github.com/fluxcd/source-controller/pull/494)
- Update test shield link
[#496](https://github.com/fluxcd/source-controller/pull/496)
- controllers: absolute local path for cached chart
[#500](https://github.com/fluxcd/source-controller/pull/500)
- Various small fixes across the code base
[#501](https://github.com/fluxcd/source-controller/pull/501)
## 0.18.0
**Release date:** 2021-11-12
This prerelease changes the format of the artifact checksum from `SHA1` to `SHA256`
to mitigate chosen-prefix and length extension attacks.
Improvements:
* storage: change Artifact checksum to SHA256
[#487](https://github.com/fluxcd/source-controller/pull/487)
## 0.17.2
**Release date:** 2021-11-04
This prerelease comes with a bug fix to ensure the `libgit2` Git implementation
respects the operation `timeout` specified in `GitRepositorySpec`.
Fixes:
* libgit2: ensure context timeout cancels transfer
[#477](https://github.com/fluxcd/source-controller/pull/477)
## 0.17.1
**Release date:** 2021-10-30
This prerelease fixes a pointer error that was returned in v0.17.0 during
the import of public keys to verify a commit.
Fixes:
* Fix pointer error during public key import
[#479](https://github.com/fluxcd/source-controller/pull/479)
## 0.17.0
**Release date:** 2021-10-28
For this prerelease we focused on further improving the Git implementations, partly
to increase stability and test coverage, partly to ensure they are prepared to be
moved out into a separate module. With this work, it is now possible to define just
a Git commit as a reference, which will result in an `Artifact` with a `Revision`
format of `HEAD/<commit SHA>`.
For the `go-git` implementation, defining the branch and a commit reference will
result in a more efficient shallow clone, and using this information when it is
available to you is therefore encouraged.
Improvements:
* git: refactor authentication, checkout and verification
[#462](https://github.com/fluxcd/source-controller/pull/462)
Fixes:
* libgit2: handle EOF in parseKnownHosts()
[#475](https://github.com/fluxcd/source-controller/pull/475)
## 0.16.1
**Release date:** 2021-10-22
This prerelease adds support for GCP storage authentication using the
`GOOGLE_APPLICATION_CREDENTIALS` environment variable available in the container,
or by defining a `secretRef` with a `serviceaccount` JSON data blob. See
[#434](https://github.com/fluxcd/source-controller/pull/434) for more information.
In addition, several bug fixes and improvements have been made to the `libgit2`
Git implementation, ensuring the checkout logic is more rigorously tested.
During this work, it was discovered that both Git implementation had a minor bug
resulting in `v` prefixed tags with metadata added to it (e.g. `v0.1.0+build-1`
and `v0.1.0+build-2`) were not properly sorted by their commit timestamp, which
has been addressed as well.
Improvements:
* Add GCP storage authentication
[#434](https://github.com/fluxcd/source-controller/pull/434)
Fixes:
* libgit2: correctly resolve (annotated) tags
[#457](https://github.com/fluxcd/source-controller/pull/457)
* libgit2: add remaining checkout strategy tests
[#458](https://github.com/fluxcd/source-controller/pull/458)
* git: ensure original tag is used for TS lookup
[#459](https://github.com/fluxcd/source-controller/pull/459)
## 0.16.0
**Release date:** 2021-10-08
This prerelease improves the configuration of the `libgit2` C library, solving
most issues around private key formats (e.g. PKCS#8 and ED25519) by ensuring
it is linked against OpenSSL and LibSSH2.
In addition, the `HelmChart` resource does now allow setting a `ReconcileStrategy`
to define when a new artifact for a chart should be created for charts from
`Bucket` and `GitRepository` sources. By setting this to `Revision`, you no
longer have to bump the version in the `Chart.yaml` file, but a new chart will
automatically be made available when the revision of the Source changes.
Fixes:
* Update containerd and runc to fix CVEs
[#446](https://github.com/fluxcd/source-controller/pull/446)
Improvements:
* Add reconcile strategy for HelmCharts
[#308](https://github.com/fluxcd/source-controller/pull/308)
* Update github.com/libgit2/git2go to v31.6.1
[#437](https://github.com/fluxcd/source-controller/pull/437)
## 0.15.4
**Release date:** 2021-08-05
This prerelease comes with a series of bug fixes, and updates the Kubernetes
dependencies to `v1.21.3` and Helm to `v3.6.3`.
Fixes:
* Fix tag checkout with libgit2
[#394](https://github.com/fluxcd/source-controller/pull/394)
* Take relative paths in account for Bucket revision
[#403](https://github.com/fluxcd/source-controller/pull/403)
* Ensure rel path never traverses outside Storage
[#417](https://github.com/fluxcd/source-controller/pull/417)
* Use same SemVer logic in both Git implementations
[#417](https://github.com/fluxcd/source-controller/pull/417)
* storage: strip env specific data during archive
[#417](https://github.com/fluxcd/source-controller/pull/417)
Improvements:
* e2e: Update Kubernetes to v1.21
[#396](https://github.com/fluxcd/source-controller/pull/396)
* Update Helm to v3.6.3
[#400](https://github.com/fluxcd/source-controller/pull/400)
* Add setup-envtest in Makefile
[#404](https://github.com/fluxcd/source-controller/pull/404)
* Use ObjectKeyFromObject instead of ObjectKey
[#405](https://github.com/fluxcd/source-controller/pull/405)
* Drop deprecated `io/ioutil`
[#409](https://github.com/fluxcd/source-controller/pull/409)
* Update dependencies
[#416](https://github.com/fluxcd/source-controller/pull/416)
## 0.15.3
**Release date:** 2021-06-29
This prerelease comes with a bug fix to the Git tag checkout when using `libgit2`.
Fixes:
* Fix tag checkout with libgit2
[#394](https://github.com/fluxcd/source-controller/pull/394)
## 0.15.2
**Release date:** 2021-06-22
This prerelease updates the build constraints for `libgit2`, ensuring
the underlying `libssh2-1-dev` dependency is linked against
`libssl-dev` instead of `libgcrypt` so that PKCS* private keys can
be used without any issues.
Fixes:
* Use libgit2 from "unstable" / "sid"
[#391](https://github.com/fluxcd/source-controller/pull/391)
## 0.15.1
**Release date:** 2021-06-18
This prerelease updates the Helm dependency to `v3.6.1`, this update
is a security update and ensures credentials are only passed to the
defined URL in a `HelmRelease`.
**Note:** there have been reports from the Helm user community that
this new behavior may cause issues with Helm repository providers
like Artifactory. If this happens to be a problem for you, the
behavior can be disabled by setting `PassCredentials` in the
`HelmRepositorySpec`.
For more details, see:
https://github.com/helm/helm/security/advisories/GHSA-56hp-xqp3-w2jf
Improvements:
* Update Helm to v3.6.1
[#388](https://github.com/fluxcd/source-controller/pull/388)
## 0.15.0
**Release date:** 2021-06-17
This prerelease comes with changes to the base image used to build
the controller, replacing Alpine with Debian slim. This change
allows the controller to run on ARM64, previously broken in v0.14.0.
Improvements:
* Use Debian instead of Alpine for multi-arch builds
[#386](https://github.com/fluxcd/source-controller/pull/386)
* Panic on non-nil AddToScheme errors in main init
[#387](https://github.com/fluxcd/source-controller/pull/387)
## 0.14.0
**Release date:** 2021-06-09
This prerelease comes with an update to the Kubernetes and controller-runtime
dependencies to align them with the Kubernetes 1.21 release, including an update
of Helm to `v3.6.0`.
After a failed ARMv7 build during the initial release attempt of this version,
`binutils-gold` has been introduced to the `builder` image [to allow `gccgo` to
build using the Gold linker](https://golang.org/doc/install/gccgo#Gold).
Improvements:
* Update K8s, controller-runtime and fluxcd/pkg deps
[#374](https://github.com/fluxcd/source-controller/pull/374)
* Add nightly builds workflow
[#376](https://github.com/fluxcd/source-controller/pull/376)
Fixes:
* Reinstate Git cloning timeout
[#372](https://github.com/fluxcd/source-controller/pull/372)
* Use `binutils-gold` in builder image
[#377](https://github.com/fluxcd/source-controller/pull/377)
* Use `github.repository` property for image name
[#378](https://github.com/fluxcd/source-controller/pull/378)
## 0.13.2
**Release date:** 2021-06-02
This prerelease comes with an update to the `go-git` implementation
dependency, bumping the version to `v5.4.2`. This should resolve any
issues with `object not found` and `empty git-upload-pack given`
errors that were thrown for some Git repositories since `0.13.0`.
Fixes:
* Update go-git to v5.4.2
[#370](https://github.com/fluxcd/source-controller/pull/370)
## 0.13.1
**Release date:** 2021-05-28
This prerelease comes with a bug fix to the `GitRepository` include feature.
Fixes:
* Fix GitRepository include for nested paths
[#367](https://github.com/fluxcd/source-controller/pull/367)
## 0.13.0
**Release date:** 2021-05-26
This prerelease comes with support for including the contents of a Git repository into another.
The [include feature](https://github.com/fluxcd/source-controller/blob/api/v0.13.0/docs/spec/v1beta1/gitrepositories.md#including-gitrepository)
has multiple benefits over regular Git submodules:
* Including a `GitRepository` allows you to use different authentication methods for different repositories.
* A change in the included repository will trigger an update of the including repository.
* Multiple `GitRepositories` could include the same repository, which decreases the amount of cloning done compared to using submodules.
Features:
* Add include property to GitRepositories
[#348](https://github.com/fluxcd/source-controller/pull/348)
Improvements:
* Update Git packages
[#365](https://github.com/fluxcd/source-controller/pull/365)
## 0.12.2
**Release date:** 2021-05-10
This prerelease comes with a bug fix to `Bucket` source ignore
handling.
Fixes:
* Split bucket item key by `/` to satisfy matcher
[#356](https://github.com/fluxcd/source-controller/pull/356)
## 0.12.1
**Release date:** 2021-04-23
This prerelease comes with a bug fix to source ignore handling.
Fixes:
* Configure ignore domain for GitRepository rules
[#351](https://github.com/fluxcd/source-controller/pull/351)
## 0.12.0
**Release date:** 2021-04-21
This prerelease comes with support for SSH keys with a passphrase.
The `.sourceignore` files are now loaded by traversing through the directory tree,
instead of just looking at the root.
The HelmChart `ValueFile` string field has been deprecated in favour of
`ValuesFiles` string array.
Features:
* Support SSH private key with password
[#338](https://github.com/fluxcd/source-controller/pull/338)
[#339](https://github.com/fluxcd/source-controller/pull/339)
* Add `ValuesFiles` to HelmChart spec
[#305](https://github.com/fluxcd/source-controller/pull/305)
Improvements:
* Check ignore matches before Bucket item downloads
[#337](https://github.com/fluxcd/source-controller/pull/337)
* Add short name for Git and Helm repositories
[#334](https://github.com/fluxcd/source-controller/pull/334)
* Update Helm to v3.5.4
[#340](https://github.com/fluxcd/source-controller/pull/340)
Fixes:
* Write chart data on identical values overwrite
[#345](https://github.com/fluxcd/source-controller/pull/345)
* Fix HelmChart values tests
[#332](https://github.com/fluxcd/source-controller/pull/332)
## 0.11.0
**Release date:** 2021-03-31
This prerelease comes with support for
[Git submodules](https://github.com/fluxcd/source-controller/blob/api/v0.11.0/docs/spec/v1beta1/gitrepositories.md#git-submodules)
and [self-signed TLS certs](https://github.com/fluxcd/source-controller/blob/api/v0.11.0/docs/spec/v1beta1/gitrepositories.md#https-self-signed-certificates)
when using `gitProvider: go-git`.
Features:
* Add support for Git submodules with go-git
[#327](https://github.com/fluxcd/source-controller/pull/327)
* Enable self-signed certs for go-git
[#324](https://github.com/fluxcd/source-controller/pull/324)
Improvements:
* Add well-known CI configs to exclusion list
[#329](https://github.com/fluxcd/source-controller/pull/329)
## 0.10.0
**Release date:** 2021-03-26
This is the tenth MINOR prerelease.
This prerelease comes with a breaking change to the leader election ID
from `305740c0.fluxcd.io` to `source-controller-leader-election`
to be more descriptive. This change should not have an impact on most
installations, as the default replica count is `1`. If you are running
a setup with multiple replicas, it is however advised to scale down
before upgrading.
The suspended status of resources is now recorded to a
`gotk_suspend_status` Prometheus gauge metric.
Improvements:
* Record suspend metrics in controllers
[#311](https://github.com/fluxcd/source-controller/pull/311)
* Set leader election deadline to 30s
[#318](https://github.com/fluxcd/notification-controller/pull/318)
* Change leader election ID to be more descriptive
[#319](https://github.com/fluxcd/notification-controller/pull/319)
## 0.9.1
**Release date:** 2021-03-15
This prerelease comes with improvements to Git clone errors and
patch updates to dependencies.
Improvements:
* Tidy git clone errors
[#304](https://github.com/fluxcd/source-controller/pull/304)
* Update dependencies
[#307](https://github.com/fluxcd/source-controller/pull/307)
## 0.9.0
**Release date:** 2021-02-23
This is the ninth MINOR prerelease.
Due to changes in Helm [v3.5.2](https://github.com/helm/helm/releases/tag/v3.5.2),
charts not versioned using **strict semver** are no longer compatible with
source-controller. When using charts from Git, make sure that the `version`
field is set in `Chart.yaml`.
Improvements:
* Update dependencies
[#299](https://github.com/fluxcd/source-controller/pull/299)
* Refactor release workflow
[#300](https://github.com/fluxcd/source-controller/pull/300)
## 0.8.1
**Release date:** 2021-02-18
This prerelease fixes a bug where only one dependency of a Helm
chart would be included.
Fixes:
* Copy loop iterator var for use by goroutine
[#294](https://github.com/fluxcd/source-controller/pull/294)
## 0.8.0
**Release date:** 2021-02-12
This is the eight MINOR prerelease.
The `libgit2` Git implementation now has support for Certificate Authority
validation for Git over HTTPS, as well as various bug fixes around working
with SSH host key fingerprints.
Alpine has been updated to `3.13`, making it possible to move away from `edge`
for `libgit2` and `musl` dependencies.
`pprof` endpoints have been enabled on the metrics server, making it easier to
collect runtime information to for example debug performance issues.
Features:
* Add custom CA validation for Git over HTTPS
[#283](https://github.com/fluxcd/source-controller/pull/283)
Improvements:
* Rename Git packages to implementations
[#270](https://github.com/fluxcd/source-controller/pull/270)
* Enable pprof endpoints on metrics server
[#282](https://github.com/fluxcd/source-controller/pull/282)
* Add fsGroup to pod security context
[#285](https://github.com/fluxcd/source-controller/pull/285)
* Use musl and libit2 packages from v3.13 branch
[#289](https://github.com/fluxcd/source-controller/pull/289)
Fixes:
* Fix chart with custom valuesFile (0bytes tgz)
[#286](https://github.com/fluxcd/source-controller/pull/286)
* libgit2: use provided host to validate public key
[#288](https://github.com/fluxcd/source-controller/pull/288)
* libgit2: check hostkey type when validating hostkey
[#290](https://github.com/fluxcd/source-controller/pull/290)
## 0.7.4
**Release date:** 2021-02-03
This prerelease fixes a bug where the controller tried to update dependencies
for Helm charts even when dependencies were already present.
## 0.7.3
**Release date:** 2021-02-02
This prerelease changes the strategy of the controller's deployment to Recreate
to prevent a deadlock during upgrades and to ensure safe usage of backing
persistent (RW) volumes.
## 0.7.2
**Release date:** 2021-02-01
This prerelease ensures the file server of the controller only starts for the
elected leader, and improves the visibility of chart name validation errors.
## 0.7.1
**Release date:** 2021-01-25
This prerelease changes the recorded revision for a `HelmRepository` resource
to a SHA1 checksum, this to improve the detection of changes for repositories
that do not correctly update their advertised generation timestamp.
## 0.7.0
**Release date:** 2021-01-21
This is the seventh MINOR prerelease.
Two new argument flags are introduced to support configuring the QPS
(`--kube-api-qps`) and burst (`--kube-api-burst`) while communicating
with the Kubernetes API server.
The `LocalObjectReference` from the Kubernetes core has been replaced
with our own, making `Name` a required field. The impact of this should
be limited to direct API consumers only, as the field was already
required by controller logic.
Overwrite of chart values has been patched to correctly read the data
from the defined YAML file.
## 0.6.3
**Release date:** 2021-01-19
This prereleases comes with bug fixes to the `HelmChart` indexes,
watches, and the overwrite of chart values.
## 0.6.2
**Release date:** 2021-01-16
This prerelease comes with updates to Kubernetes and Helm dependencies.
The Kubernetes packages were updated to v1.20.2 and Helm to v3.5.0.
## 0.6.1
**Release date:** 2021-01-14
This prerelease fixes a regression bug introduced in `v0.6.0` that caused
reconciliation request annotations to be ignored in certain scenarios.
## 0.6.0
**Release date:** 2021-01-12
This is the sixth MINOR prerelease, upgrading the `controller-runtime`
dependencies to `v0.7.0`.
The container image for ARMv7 and ARM64 that used to be published
separately as `source-controller:*-arm64` has been merged with the
AMD64 image.
## 0.5.6
**Release date:** 2020-12-18
This prerelease fixes a regression bug that made it impossible to
reference to a `HelmChart.ValuesFile` in a path relative to the
root of the `Bucket` or `GitRepository` source.
## 0.5.5
**Release date:** 2020-12-16
This prerelease adds safe guards for user defined relative paths,
ensuring they never traverse outside working directories.
Other notable changes:
* ListObjects V1 fallback for GCS S3 endpoints, ensuring generic
`Bucket` resources connecting to GCS are able to list object
* HelmChart controller panic regression bug fix, introduced in
`v0.5.0`
## 0.5.4
**Release date:** 2020-12-12
This prerelease fixes a bug in the build process that caused the
ARMv7 image to fail due to `libgit2` requiring `musl>=1.2.0`.
## 0.5.3
**Release date:** 2020-12-11
This prerelease fixes a regression bug causing the commit hash for the
`go-git` implementation to not be forwarded, introduced by the support
for multiple Git implementations.
## 0.5.2
**Release date:** 2020-12-11
This prerelease adds the option to configure the advertised storage
address using the `--storage-adv-addr` flag.
The default deployment manifest uses this to configure the FQDN of
the service (`source-controller.$(RUNTIME_NAMESPACE).svc.cluster.local.`),
but omitting the flag will result in a fallback to the previous behavior
for backwards compatibility.
## 0.5.1
**Release date:** 2020-12-09
This prerelease fixes a bug in the build process that caused the
ARMv7 build to fail due to `libgit2` requiring `musl>=1.2.0`.
## 0.5.0
**Release date:** 2020-12-09
This is the fifth MINOR prerelease, adding a new Git implementation
(`libgit2`) to allow for communication with Git servers that just
support the Git v2 protocol, like Azure Devops.
The new Git implementation can be enabled by configuring the
`GitImplementation` in a `GitRepository` to `libgit2` (default:
`go-git`). Note that this implementation does not support shallow
cloning, and it is therefore advised to only resort to this option
if a connection fails with the default configuration.
Other notable changes in this release:
* Bug fix to respect the configured SSH user in `GitRepository` URLs
* Chart name validation for charts from a `HelmRepository` resource
* Kubernetes dependency upgrades to `v1.19.4`
* Helm upgrade to `v3.4.2`
## 0.4.1
**Release date:** 2020-11-26
This prerelease fixes a bug in the listing of HelmChart resources
for GitRepository changes.
## 0.4.0
**Release date:** 2020-11-26
This is the fourth MINOR prerelease, adding support for suspension
of resources using `.spec.suspend`, and watchers for the upstream
sources of `HelmChart` resources to detect revision changes faster.
## 0.3.0
**Release date:** 2020-11-19
This prerelease comes with a fix to garbage collection.
The status sub-resource has a new field called `LastHandledReconcileAt`
that can be used to track the reconciliation progress.
This version comes with a breaking change to the API package:
the status condition type is imported from Kubernetes API machinery 1.19.
## 0.2.2
**Release date:** 2020-11-12
This prerelease comes with improvements to status reporting.
The Kubernetes packages have been updated to v1.19.
## 0.2.1
**Release date:** 2020-10-30
This prerelease comes with a fix for a regression bug (introduced in
`v0.2.0`) where dependency entries in the `Chart.yaml` file during the
(re)packaging of the Helm chart artifact would have their names
overwritten with the alias if defined.
## 0.2.0
**Release date:** 2020-10-29
This is the second MINOR prerelease, it comes with breaking changes:
* Due to a change of semver library to exclude pre-releases from `1.0.x`
ranges, support for more complex ranges like
`>=1.0.0 <2.0.0 || >=3.0.0 !3.0.1-beta.1` has been dropped.
* The histogram metric `gotk_reconcile_duration` was renamed to `gotk_reconcile_duration_seconds`
Other notable changes:
* Ambiguous semver matches are now sorted by the timestamp of the source
system to use the most recent match.
* Added support for downloading dependencies for Helm charts from
`GitRepository` and `Bucket` sources.
* Added support for creating artifacts for packaged Helm charts (`.tgz`)
from `GitRepository` and `Bucket` sources.
* The annotation `fluxcd.io/reconcileAt` was renamed to `reconcile.fluxcd.io/requestedAt`,
the former will be removed in a next release but is backwards
compatible for now.
## 0.1.1
**Release date:** 2020-10-13
This prerelease comes with Prometheus instrumentation for the controller's resources.
For each kind, the controller exposes a gauge metric to track the `Ready` condition status,
and a histogram with the reconciliation duration in seconds:
* `gotk_reconcile_condition{kind, name, namespace, status, type="Ready"}`
* `gotk_reconcile_duration{kind, name, namespace}`
## 0.1.0
**Release date:** 2020-09-30
This is the first MINOR prerelease, it promotes the
`source.toolkit.fluxcd.io` API to `v1beta1` and removes support for
`v1alpha1`.
Going forward, changes to the API will be accompanied by a conversion
mechanism. With this release the API becomes more stable, but while in
beta phase there are no guarantees about backwards compatibility
between beta releases.
## 0.0.18
**Release date:** 2020-09-23
This prerelease fixes a reconciliation bug that prevented
resources recovering from transient errors.
Container images for ARMv7 and ARMv8 are published to
`ghcr.io/fluxcd/source-controller-arm64`.
The Helm package was updated to v3.3.4.
## 0.0.17
**Release date:** 2020-09-18
This prerelease comes with support for S3 compatible storage sources
defined as [buckets](https://github.com/fluxcd/source-controller/blob/main/docs/spec/v1alpha1/buckets.md).
The Helm package was updated to v3.3.2.
## 0.0.16
**Release date:** 2020-09-12
This prerelease comes with the option to watch for resources
in the runtime namespace of the controller or at cluster level.
## 0.0.15
**Release date:** 2020-09-11
This prerelease adds support for overwriting the default values of a
`HelmChart` by defining a `ValuesFile`, adds a `Checksum` field to the
`Artifact` object, and comes with several improvements to the storage
and handling of artifacts.
## 0.0.14
**Release date:** 2020-09-04
This prerelease comes with Helm v3.3.1.
Container images for linux/amd64 and linux/arm64 are published to GHCR.
## 0.0.13
**Release date:** 2020-09-01
This prerelease fixes a bug in the packaging of `HelmChart` artifacts
build from `GitRepository` sources, and improves the logic of the
`Storage.ArtifactExist` method to not follow symlinks and only return
`true` for regular files.
## 0.0.12
**Release date:** 2020-08-31
This prerelease adds support for `HelmChart` artifacts build from
`GitRepository` sources, and includes several (breaking) changes
to the API:
* The `Name` field in the `HelmChartSpec` has been renamed to `Chart`,
and may now contain the path a chart is available at in a referred
Source.
* The `HelmRepositoryRef` field in the `HelmChartSpec` has been renamed
to `SourceRef`, and may now contain a reference to `HelmRepository`
and `GitRepository` resources.
* The `Kind` field in the `SourceRef` object is now mandatory.
Other notable changes: the `HelmChart` `Version` field now supports the
same ranges as the `GitRepository` SemVer checkout strategy, support for
relative URLs in `HelmRepository` indexes, and several other bug fixes.
## 0.0.11
**Release date:** 2020-08-21
This prerelease only included a version change of
`github.com/fluxcd/source-controller/api` to publish `go.mod`
changes.
## 0.0.10
**Release date:** 2020-08-18
This prerelease comes with a bug fix to the Git semver checkout.
## 0.0.9
**Release date:** 2020-08-17
This prerelease upgrades the `github.com/fluxcd/pkg/*` dependencies
to dedicated versioned modules.
## 0.0.8
**Release date:** 2020-08-12
This prerelease comes with improvements to Helm repository
index fetching. The Helm getter was upgraded to v3.3.0,
and it's possible to configure the timeout of index downloads.
## 0.0.7
**Release date:** 2020-07-31
This prerelease comes with a breaking change, the
CRDs group has been renamed to `source.toolkit.fluxcd.io`.
## 0.0.6
**Release date:** 2020-07-20
This prerelease drops support for Kubernetes <1.16.
The CRDs have been updated to `apiextensions.k8s.io/v1`.
## 0.0.5
**Release date:** 2020-07-13
This prerelease comes with improvements to logging.
The default logging format is JSON and the timestamp format is ISO8601.
Introduce `fluxcd.io/reconcileA` annotation for on-demand reconciliation
of source objects.
## 0.0.4
**Release date:** 2020-07-10
This prerelease comes with fixes to the testing framework.
## 0.0.3
**Release date:** 2020-07-09
This prerelease adds support for
[ignore patterns](docs/spec/v1alpha1/gitrepositories.md#excluding-files)
to be specified on `GitRepository` objects.
## 0.0.2
**Release date:** 2020-07-03
This prerelease comes with Kubernetes events dispatching.
The reconciliation events can be forwarded to notification controller
and alerting can be configured for Slack, MS Teams, Discord and Rocket chat
using the [notification.fluxcd.io API](https://github.com/fluxcd/notification-controller/tree/main/docs/spec).
## 0.0.1
**Release date:** 2020-06-24
This is the first prerelease ready for public testing. To get started
testing, see the [GitOps Toolkit guide](https://fluxcd.io/docs/get-started/).
## 0.0.1-beta.2
**Release date:** 2020-06-10
This beta release comes with improvements to the
[artifacts archiving](https://github.com/fluxcd/source-controller/pull/59).
## 0.0.1-beta.1
**Release date:** 2020-05-29
This is the first beta release of source controller. This release adds
support for [excluding files](https://github.com/fluxcd/source-controller/pull/55)
when packaging artifacts from Git repositories.
## 0.0.1-alpha.6
**Release date:** 2020-05-06
This alpha release comes with [improvements](https://github.com/fluxcd/source-controller/pull/52)
to the `GitRepository` reconciler. Starting with this version, the controller
watches for sources only in the namespace where it's deployed.
## 0.0.1-alpha.5
**Release date:** 2020-04-30
This alpha release contains several bug fixes
[#47](https://github.com/fluxcd/source-controller/pull/47)
[#49](https://github.com/fluxcd/source-controller/pull/49)
[#50](https://github.com/fluxcd/source-controller/pull/50).
After a successful synchronization, the controller reports the revision in the
status ready condition.
## 0.0.1-alpha.4
**Release date:** 2020-04-28
This alpha release comes with [integrity checks](https://github.com/fluxcd/source-controller/pull/45)
for artifacts produced from Git repositories.
## 0.0.1-alpha.3
**Release date:** 2020-04-27
This alpha release contains a [bug fix](https://github.com/fluxcd/source-controller/pull/42)
for `GitRepositories` status reporting and allows
[waiting for sources on-demand sync](https://github.com/fluxcd/source-controller/pull/43).
## 0.0.1-alpha.2
**Release date:** 2020-04-24
This is the second alpha release of source controller.
It introduces a timeout field to the [`GitRepositoriesSpec`](docs/spec/v1alpha1/gitrepositories.md)
and [`SyncAt` annotation to the common spec](docs/spec/v1alpha1/common.md#source-synchronization).
Furthermore, it allows configuring the amount of concurrent reconciliation
operations per reconciler using the newly introduced `--concurrent` flag
(defaults to `2`), and introduces a `--log-json` flag to enable JSON logging.
Liveness and readiness probes have been added to the deployment manifest, and
the security has been strengthened by running the controller as a non-root user
by default and adding a container security context.
Tests have been added to ensure correct behaviour of the `HelmChartReconciler`
and `HelmRepositoryReconciler`.
## 0.0.1-alpha.1
**Release date:** 2020-04-16
This is the first alpha release of source controller.
The controller is an implementation of the
[source.fluxcd.io/v1alpha1](https://github.com/fluxcd/source-controller/tree/v0.0.1-alpha.1/docs/spec/v1alpha1) API
based on the specifications described in the
[Source Controller Proposal](https://github.com/fluxcd/source-controller/tree/v0.0.1-alpha.1/docs/spec).
Reference in New Issue View Git Blame Copy Permalink