FluxCD 2.0: GitOps Toolkit Reaches General Availability

Introduction

FluxCD 2.0 — GitOps Toolkit Reaches General Availability — was released on August 10, 2021.

GitOps and platform tooling pay off (or fall apart) when you scale to many apps, many environments, and many clusters.

In this release: FluxCD 2.0 GA delivers production-ready modular GitOps controllers with multi-tenancy, security enhancements, and enterprise-grade reliability.

Modular Controllers Production Ready

• Source Controller manages Git repositories, Helm charts, and OCI artifacts with webhook support, commit signing verification, and drift detection.
• Kustomize Controller applies environment-specific overlays with health checks, dependency management, and automated pruning.
• Helm Controller reconciles Helm releases declaratively with rollback capabilities, test hooks, and configuration drift detection.
• Image Automation Controller watches container registries, automatically updates Git manifests with new image tags, and creates pull requests for review.

Security & Multi-Tenancy

1. Namespace isolation enables teams to run independent GitOps pipelines without cluster-admin privileges.
2. RBAC integration provides fine-grained access control for Git repositories, Helm charts, and Kubernetes resources.
3. Secret management integrates with external secret operators (Sealed Secrets, External Secrets) for secure credential handling.
4. Admission webhooks validate GitRepository and Kustomization resources before reconciliation, preventing misconfigurations.

Enterprise Features

• Multi-cluster management through GitRepository and Kustomization resources enables centralized configuration management across fleets.
• Notification Controller integrates with Slack, Microsoft Teams, Discord, and PagerDuty for real-time alerts on reconciliation status.
• Health checks support custom CRD health assessment, enabling integration with Argo Rollouts, Flagger, and other progressive delivery tools.
• Metrics & observability expose Prometheus metrics for reconciliation duration, success rates, and resource counts.

Migration from Flux v1

• Flux v1 deprecation timeline provides clear migration path with maintenance support during transition.
• flux migrate command automates conversion of Flux v1 HelmRelease resources to Flux v2 HelmRelease format.
• Bootstrap improvements simplify installation with automatic Git repository setup, deploy key generation, and controller deployment.
• Documentation includes comprehensive migration guides, best practices, and troubleshooting resources.

Getting Started

flux bootstrap github \
  --owner=myorg \
  --repository=platform-config \
  --branch=main \
  --path=clusters/production \
  --personal

Define a Kustomization:

apiVersion: kustomize.toolkit.fluxcd.io/v1beta1
kind: Kustomization
metadata:
  name: apps-production
  namespace: flux-system
spec:
  interval: 10m
  path: ./apps/production
  prune: true
  wait: true
  sourceRef:
    kind: GitRepository
    name: platform-config
  healthChecks:
    - apiVersion: apps/v1
      kind: Deployment
      name: frontend
      namespace: production

Summary

FluxCD 2.0 GA empowers platform teams to manage Kubernetes fleets declaratively from Git, with the confidence that comes from production-proven reliability and security.