Announcing Flux 2.9 GA

The Flux project has officially announced the General Availability of Flux 2.9, marking a substantial upgrade to its GitOps capabilities. This release focuses on extending functionality, bolstering security, and improving the overall developer experience. A headline feature of Flux 2.9 is the introduction of the Flux CLI Plugin System. This new system allows for the independent development and versioning of plugins that extend the `flux` command-line interface. Two notable plugins, Mirror and Schema, are included. The Mirror plugin facilitates mirroring Helm charts, OCI artifacts, and container images between registries, supporting multi-architecture images, signature verification, and various authentication methods. The Schema plugin, on the other hand, validates Kubernetes manifests against JSON schemas and CEL rules, including built-in schemas for Kubernetes, OpenShift, and Gateway API. Security enhancements are prominent in this release. Flux 2.9 now supports SOPS decryption with the Age post-quantum cipher, preparing users for future cryptographic standards. Kubernetes Workload Identity authentication has been integrated for OpenBao and Vault, providing more secure secret management. Furthermore, Git integrations have been improved with support for commit signing and verification using SSH keys. Webhook Receivers can now be secured using OIDC, enabling secret-less integrations by verifying ID tokens, and AWS CodeCommit authentication is also supported via Workload Identity. The release also brings powerful additions to server-side apply, allowing for fine-grained control over field ignore rules. This is crucial for scenarios where certain fields are managed by other controllers, such as Horizontal Pod Autoscalers, preventing Flux from continuously reverting those fields. This feature makes it easier to combine GitOps with other Kubernetes ecosystem tools. Helm users will benefit from new post-render strategies, including support for chart hooks. The Flux Web UI has also seen improvements, with the latest release of Flux Operator extending it to include a dedicated workload dashboard and a comprehensive pod log viewer, offering enhanced monitoring and operational insights for deployments, StatefulSets, DaemonSets, and CronJobs.