Hacking on @fluxcd
Stefan Prodan stefanprodan
Hacking on @fluxcd
Highlights
- Pro
- 143 discussions answered
Block or Report
Block or report stefanprodan
Report abuse
Contact GitHub support about this user’s behavior. Learn more about reporting abuse.
Report abusePinned
-
fluxcd/flagger Public
Progressive delivery Kubernetes operator (Canary, A/B Testing and Blue/Green deployments)
-
fluxcd/flux2 Public
Open and extensible continuous delivery solution for Kubernetes. Powered by GitOps Toolkit.
-
-
-
kustomizer Public
An experimental package manager for distributing Kubernetes configuration as OCI artifacts.
4,613 contributions in the last year
Less
More
Activity overview
Contribution activity
January 2022
Created 289 commits in 20 repositories
Created a pull request in fluxcd/kustomize-controller that received 8 comments
Revoke kubectl managed fields ownership
This PR enforces Flux ownership of Kubernetes objects' fields that were applied on the cluster outside of the declared desired state. In addition, …
+88
−9
•
8
comments
Opened 81 other pull requests in 15 repositories
stefanprodan/kustomizer
13
merged
- docs: Add cosign usage examples
- chore: Update dependencies
- ci: Publish SBOM as spdx.json
- install: Fix checksums download URL
- install: Verify checksums signature with cosign
- ci: Sign the release checksums with cosgin
- docs: Add container images to the installation guide
- ci: Push multi-arch image to GHCR
- ci: Use GitHub release notes generation API
- Integrate with cosign to sign and verify artifacts
- Publish SBOM in SPDX format
- Override changes made with kubectl
- Update fluxcd/pkg/ssa to v0.8.0
fluxcd/flux2
1
open
11
merged
- Adapt diff test to match Kubernetes 1.23.3 API response
- Set minimum supported version to Kubernetes 1.20.6
- Run the CLI as non-root
- Update kubectl to 1.23.1 in flux-cli container image
- ci: Fix release notes generator
- Sign the release artifacts checksums and images
- Fix Azure e2e tests and GoReleaser buildx directive
- Publish Flux Software Bill of Materials (SBOM)
- Improve the bootstrap e2e test workflow
- Update dependencies
- Update Git providers
- Update toolkit components and packages
fluxcd/pkg
12
merged
- runtime: Add flag to disable cross-namespace refs
- ssa: Refactor server-side apply helpers
- ssa: Add read function that validates resources
- ssa: Add exclusion list to diff options
- Remove SBOM action
- Add action to generate SBOM for container images
- Exclude the status subresouce from the applied resource
- Remove the deprecated git pkg from main
- Update containerd v1.5.9 to fix CVE-2021-43816
- Update golang.org/x/crypto to fix CVE-2020-29652
- Take ownership of kubectl managed fields
- Workaround for HPA dry-run metrics duplication
fluxcd/kustomize-controller
1
open
8
merged
- Allow setting a default service account for impersonation
- Allow disabling cross-namespace references
- Fix preflight validation
- Publish SBOM and sign release artifacts
- Release v0.19.1
- Update fluxcd/pkg/ssa to exclude the status field from apply
- Release v0.19.0
- Fix HPA diff (upstream bug)
- Restore runc and image-spec patches
fluxcd/source-controller
8
merged
fluxcd/notification-controller
7
merged
fluxcd/source-watcher
4
merged
fluxcd/helm-controller
1
open
2
merged
fluxcd/image-automation-controller
3
merged
fluxcd/image-reflector-controller
2
merged
fluxcd/flagger
2
merged
stefanprodan/gitops-istio
1
open
1
merged
fluxcd/go-git-providers
1
open
1
merged
fluxcd/website
1
open
fluxcd/terraform-provider-flux
1
merged
Reviewed 141 pull requests in 22 repositories
fluxcd/source-controller
17 pull requests
- Release v0.21.1
- Pin target image to alpine:3.15
- Statically build using musl toolchain and target alpine
- Update dev docs
- Fix the missing protocol for the first port in manager config
- Update git2go to v31.7.6
- Add Permissions to github Workflows
- Publish SBOM and sign release artifacts
- docs: Add git proxy support docs
- e2e: Set timeout to fix intermittent errors
- security: Drop capabilities, set userid and enable seccomp
- Fix makefile envtest and controller-gen usage
- helm: remove temp file name from index cache err
- Statically build source-controller
- Update file close operation to not use defer and add test case for CopyFromPath
- Add support for using an OCI image as source
- Update Go to v1.17
fluxcd/flux2
16 pull requests
- Add pkg-config to arm runners
-
Fix output usage for
flux get <sources|images> - Upgrade go-git-providers to v0.5.3
- [security] Enable pod security warnings for flux-system
- Preview local changes with flux build/diff kustomization
- [RFC-0002] Access control for cross-namespace source refs
-
Shorten Git SHA commit in
flux getcommands output - Publish Flux Software Bill of Materials (SBOM)
- Update kustomize-controller to v0.19.1
- Simplify arguments of flux trace command
- Fix makefile envtest setup and usage
- Update go-git-provider to fix GitLab bootstrap regression bug
- Add optional bindir input to Flux GitHub Action
- Use provided SSH hostname to sync with SSH
- Update golang.org/x/crypto to latest main
- [RFC-0003] Flux Multi-Tenancy Mode
fluxcd/pkg
16 pull requests
- ssa: Add tests for metadata drift detection
- Add runtime/acl package - (runtime/0.12.x)
- Replaces kubectl field managers with the resource manager owner in ssa apply
- Add a github action for sops
- Export the Action type in pkg/kustomize
- runtime/events: Handle empty webhook address and log event in debug mode
- Kustomize module for generation and var substitution
- Add tar.WithMaxUntarSize
- Add checksum verification for syft installer script
- Add action to generate SBOM for container images
- Fix fuzzer build and improve fuzz tests on pull requests
- Fix makefile envtest and controller-gen usage
- Refactor Fuzz implementation
- Update golang.org/x/crypto to latest main
- Preserve value difference when masking secret data
- Export IsImmutableError, and some clean-up
fluxcd/kustomize-controller
14 pull requests
- Allow setting a default service account for impersonation
- Revoke kubectl managed fields ownership
- Fix the missing protocol for the first port in manager config
- Add Permissions to github Workflows
- SOPS: Add support for HashiCorp Vault token-based authentication
- Drop capabilities, enable seccomp and enforce runAsNonRoot
- Update development documentation
- Refactor Fuzz implementation
- Docs - Add var substitution operator escape syntax
- Use patch instead of update when adding finalizers
- Use go install instead of go get in Makefile
- Add condition to checkDependencies when SourceRef is the same
- Update Go to v1.17 and controller-runtime to v0.11
- Fix typo in API spec docs
fluxcd/notification-controller
13 pull requests
- Allow disabling cross-namespace event sources
- Pass headers to generic provider through secretRef
- Fix(Provider/Matrix): Load CA from CertSecretRef
- Fix the missing protocol for the first port in manager config
- drop capabilities, enable seccomp and enforce runAsNonRoot
- Replace cifuzz with custom smoke test
- Update development documentation
- Add documentation for gitea
- Fix makefile envtest and controller-gen usage
- Add fuzz testing for notifiers
- Add timestamp as label for alertmanager
- Update docs for telegram
- Feature: Add option to pass additional headers via secretRef to the generic notification provider
fluxcd/image-automation-controller
12 pull requests
- Statically build using musl toolchain and target alpine
- Allow disabling cross-namespace references
- Update kyaml to v0.13.0
- Retire squaremo as a maintainer
- Add support for cross-namespace sourceRef in ImageUpdateAutomation
- Update dev docs
- Set default observedGeneration to -1
- Drop capabilities, enable seccomp and enforce runAsNonRoot
- Fix makefile envtest and controller-gen usage
- Fix Indentation of Makefile
- Update Go to v1.17
- Log the error when removing the working dir fails
fluxcd/image-reflector-controller
11 pull requests
- Allow disabling cross-namespace references to image repositories
- Clarify ECR Auto-login note, fix CanonicalImageName typos
- Publish SBOM and sign release artifacts
- Move squaremo to retired maintainers
- Get credentials from GCP/Azure when needed
- Drop capabilities, enable seccomp and enforce runAsNonRoot
- Refactor Fuzz implementation
- Fix scheme validation check when using host:port
- Fix makefile envtest and controller-gen usage
- Update Go to v1.17
- Add various instructions on development documentation
fluxcd/helm-controller
10 pull requests
- Allow disabling cross-namespace references
- Update Helm to patched 3.8.0
- Update helm to 3.7.2
- Fix the missing protocol for the first port in manager config
- security: Drop capabilities, set userid and enable seccomp
- Refactor Fuzz implementation
- Update development documentation
- Use patch instead of update when adding finalizers
- Use go install instead of go get in Makefile
- Update Go to v1.17
fluxcd/website
6 pull requests
fluxcd/go-git-providers
4 pull requests
fluxcd/flagger
4 pull requests
fluxcd/source-watcher
4 pull requests
fluxcd/community
3 pull requests
fluxcd/flux2-multi-tenancy
2 pull requests
fluxcd/terraform-provider-flux
2 pull requests
fluxcd-community/helm-charts
1 pull request
stefanprodan/kube-tools
1 pull request
fluxcd/.github
1 pull request
fluxcd/golang-with-libgit2
1 pull request
servicemeshinterface/smi-spec
1 pull request
google/oss-fuzz
1 pull request
weaveworks/weave-gitops
1 pull request
Created an issue in fluxcd/flux2 that received 3 comments
Prepare Flux v0.26.0 release
This is an overarching issue for tracking the Flux v0.26.0 release preparation. Catalog and sign artifacts #2302 #2303 fluxcd.io (document the …
17 of 21 tasks
Opened 4 other issues in 1 repository
Answered 20 discussions in 1 repository
fluxcd/flux2
fluxcd/flux2
- OOM of Image automation controller
- Order of resources to be applied
- Send Notification 'Generic' Providers Alerts to Elastic
- moving HR's from one Kustomization to another
- Why are all containers defined in the gotk-component.yaml called "manager"?
- Getting kustomization dry run errors after upgrade of image controllers to v1beta1
- Why is my CRD update not reflected?
- OpenAPI adoption for toolkit's major components
- HelmRelease not ready and HelmChart downloads
- Factor CLI abstractions out into module, for use by e.g., webUI
- Source-controller using mTLS (mutual authentication)
- Adding kube-scoring / preprocessing to helmreleases
- Best practice for directory structure of GitOps repository
- Upgrading to 0.18+: are file based patches in kustomize overlays still OK?
- kustomize-controller is treating our plain manifests as patches rather than applying them?
- Flux2, SSA, and GitOps
- It is possible to configure fluxCD monitor and pull manifest files changes to from AWS S3 instead of Git repository
- SOPS encrypted secret in flux-system namespace
- Postbuild substitution with multilines
- Deploy HelmRelease from a local helm chart path
25
contributions
in private repositories
Jan 5 – Jan 21