Flux 2.6.0 promotes the OCIRepository API to v1 (GA) and comes with new features, bug fixes and performance improvements.

📅 Target dates: 27-29 May

🚀 Roadmap milestone: https://fluxcd.io/roadmap/#v26-q2-2025

Highlights

• General availability release for the Flux OCI Artifacts APIs and flux artifact commands
• Object-level workload identity authentication (OCIRepository, ImageRepository, Kustomization, Alert Provider)
• Git HTTP/S Mutual TLS authentication (GitRepository, ImageUpdateAutomation)
• Support for sparse checkout (GitRepository)
• WaitForTermination deletion policy (Kustomization)
• Support for GitHub App authentication (Alert Provider)
• Support for managed Identity authentication to Azure Event Hub (Alert Provider)
• Customise the ID of the Git commit status with CEL expressions (Alert Provider)
• Support for OCI digests pinning (ImagePolicy, ImageUpdateAutomation)
• Cache registry credentials for cloud providers (OCIRepository, ImageRepository)

Dependencies updates

• Go 1.24
• Kubernetes 1.33
• Controller Runtime 0.21.0
• Helm 3.17.3
• Cosign 2.5.0
• Notation 1.3.2
• SOPS 3.10.2

Release checklist

• source-controller v1.6.0
• kustomize-controller v1.6.0
• notification-controller v1.6.0
• helm-controller v1.3.0
• image-reflector-controller v0.35.0
• image-automation-controller v0.41.0
• flux-benchmark v2.6.0
• flux2 v2.6.0
• terraform-provider-flux v1.6.0

Conformance testing

Documentation

• Update API docs
• Publish Flux release change log to GitHub & Slack
• Publish v2.6 website