Flux Roadmap

Milestones

The Flux project roadmap is divided into milestones representing minor releases, each with a set of goals and tasks. The milestones marked as provisional are subject to change based on the project’s priorities and the community’s feedback.

Please note that the Flux maintainers prioritize fixes to defects affecting GA APIs and security issues over new features. Depending on the volume of incoming issues and the complexity of the fixes, the roadmap may be adjusted and new features may be postponed to the next milestone.

v2.5 (Q1 2025)

Status: Completed on 2025-02-20 (v2.5.0 changelog)

The primary goal of this milestone is to integrate GitHub App for Git repositories authentication and to extend Flux functionality with Common Expression Language(CEL) support.

• Git integrations

  • Support for GitHub App auth in source-controller
  • Support for GitHub App auth in image-automation-controller
  • Generate GitHub App secrets with the Flux CLI

• Kustomize integrations

  • Fine-grained control of garbage collection with .spec.deletionPolicy
  • Enable decryption of secrets generated by Kustomize components
  • Enable decryption of Kustomize patches
  • Custom Health Checks using CEL

• Alerting integrations

  • Custom Event Metadata from Annotations
  • Support Git commit status updates for OCIRepository

• Webhook integrations

  • Implement Receiver resource filtering with CEL

• Troubleshoot helpers

  • Implement flux debug helmrelease --show-values
  • Implement flux debug kustomization --show-vars

• Conformance testing

  • End-to-end testing for Kubernetes 1.32
  • End-to-end testing for GitHub App auth

• EOL and Deprecations

  • End support for Flux v2.2.x
  • End support for Kubernetes v1.29.x

v2.6 (Q2 2025)

Status: Completed on 2025-05-29 (v2.6.0 changelog)

The primary goal of this milestone is to make a generally available release for the Flux OCI Artifacts APIs and add support for object-level workload identity authentication for container registries.

• OCI artifacts integrations

  • Promote the OCIRepository API to v1
  • Promote to stable the Flux CLI commands:
    • flux build artifact
    • flux push artifact
    • flux pull artifact
    • flux tag artifact
    • flux diff artifact
    • flux list artifacts
  • Cache registry credentials for cloud providers
  • Introduce object-level workload identity for OCIRepository

• Image automation

  • Introduce object-level workload identity for ImageRepository
  • Add support for updating OCI digests

• Git integrations

  • Add support for sparse checkout in GitRepository
  • Add support for Git HTTP/S mutual TLS
  • Implement caching for GitHub Application auth tokens

• Kustomize integrations

  • Introduce object-level workload identity for KMS decryption
  • Implement WaitForTermination deletion policy

• Alerting integrations

  • Add support for GitHub App auth to Provider API
  • Customise the ID of the Git commit status with CEL expressions
  • Add support for workload identity auth for Azure Event Hub to Provider API

• Conformance testing

  • End-to-end testing for Kubernetes 1.33

• EOL and Deprecations

  • End support for Flux v2.3.x
  • End support for Kubernetes v1.30.x
  • Deprecate APIs in group source.toolkit.fluxcd.io/v1beta2

v2.7 (Q3 2025)

Status: Completed on 2025-09-30 (v2.7.0 changelog)

The primary goal of this milestone is to make a generally available release for the Flux image automation APIs, and make Flux watch for changes in ConfigMaps and Secrets referenced in Kustomizations and HelmReleases.

• Image automation

  • Promote the ImageUpdateAutomation API to v1
  • Promote the ImageRepository API to v1
  • Promote the ImagePolicy API to v1
  • Add support for Git sparse checkout
  • Support object-level workload identity auth for Azure DevOps

• Source extensions

  • Introduce the ExternalArtifact API to consume artifacts from external systems
  • Introduce the ArtifactGenerator API to compose and decompose Flux sources

• Kustomize integrations

  • Controller-level decryption for Age Keys
  • Transactional apply for ClusterRole and ClusterRoleBinding
  • Add support for remote cluster authentication using Workload Identity
  • Watch ConfigMaps and Secrets referenced in Kustomizations
  • Extend the readiness evaluation of dependencies with CEL expressions
  • Track reconciliation attempts over time in .status.history
  • Cancel Health Checks on new source revision

• Helm integrations

  • Extend HelmRelease post-renderer with CommonMetadata
  • Add support for remote cluster authentication using Workload Identity
  • Watch ConfigMaps and Secrets referenced in HelmReleases
  • Extend the readiness evaluation of dependencies with CEL expressions
  • Record the last Helm release action duration in status
  • Introduce RetryOnFailure lifecycle management strategy

• Alerting integrations

  • Add support for OpenTelemetry tracing to Provider API
  • Add mTLS support to Provider API
  • Extend Provider API with spec.proxySecretRef
  • Support HTTP/S proxy for Telegram
  • Support workload identity auth for Azure DevOps commit status updates
  • Support object-level workload identity auth for Google Pub/Sub

• Git integrations

  • Support mTLS for GitHub App transport in source-controller
  • Support mTLS for GitHub App transport in image-automation-controller
  • Support object-level workload identity auth for Azure DevOps

• Bucket integrations

  • Support object-level workload identity auth for Google Cloud Storage
  • Support object-level workload identity auth for AWS S3
  • Support object-level workload identity auth for Azure Blob Storage

• OCI integrations

  • Support workload identity auth for Azure private cloud

• Security enhancements

  • Multi-tenancy lockdown support with controller flags

• CLI improvements

  • Implement flux migrate command
  • Implement flux [reconcile|suspend|resume] image policy commands
  • Add --show-history to flux debug commands

• Conformance testing

  • End-to-end testing for Kubernetes 1.34

• EOL and Deprecations

  • End support for Flux v2.4.x
  • End support for Kubernetes v1.31.x
  • Deprecate APIs in group image.toolkit.fluxcd.io/v1beta2
  • Remove deprecated APIs in group source.toolkit.fluxcd.io/v1beta1
  • Remove deprecated APIs in group kustomize.toolkit.fluxcd.io/v1beta1
  • Remove deprecated APIs in group helm.toolkit.fluxcd.io/v2beta1
  • Remove deprecated APIs in group notification.toolkit.fluxcd.io/v1beta1
  • Remove deprecated APIs in group image.toolkit.fluxcd.io/v1beta1
  • Remove the autologin deprecated flags from image-reflector-controller
  • Remove deprecated template fields .Updated and .Changed.ImageResult in ImageUpdateAutomation

v2.8 (TBA)

Status: Provisional

The primary goal of this milestone is to add support for Helm v4 to helm-controller, and to extend Flux server-side apply with field ignore rules.

• OCI integrations

  • Add support for verification with cosign v3

• Helm integrations

  • Add support for Helm v4 to helm-controller

• Kustomize integrations

  • Extend Server-Side Apply with field ignore rules
  • Reduce the mean time to recovery (MTTR) in case of a failed deployment

• Source extensions

  • SDK for facilitating the development of 3rd party controllers based on the ExternalArtifact API
  • Allow ExternalArtifact as a source in ArtifactGenerator
  • Allow HelmChart as a source in ArtifactGenerator

• Conformance testing

  • End-to-end testing for Kubernetes 1.35

• EOL and Deprecations

  • End support for Flux v2.5.x
  • End support for Kubernetes v1.32.x
  • Remove deprecated APIs in group source.toolkit.fluxcd.io/v1beta2
  • Remove deprecated APIs in group kustomize.toolkit.fluxcd.io/v1beta2
  • Remove deprecated APIs in group helm.toolkit.fluxcd.io/v2beta2
  • Remove deprecated APIs in group notification.toolkit.fluxcd.io/v1beta2

Request for comments

The RFC process provides a consistent and controlled path for substantial changes to enter Flux.

To keep track of the Flux project’s current direction and future plans, please see the following RFCs:

• RFC-0001 Memorandum on the authorization model
• RFC-0002 Flux OCI support for Helm
• RFC-0003 Flux OCI support for Kubernetes manifests
• RFC-0004 Block insecure HTTP connections across Flux
• RFC-0005 Artifact Revision format and introduction of Digest
• RFC-0006 Flux CDEvents Receiver
• RFC-0007 Passwordless authentication for Git repositories
• RFC-0008 Custom Event Metadata from Annotations
• RFC-0009 Custom Health Checks for Kustomization using Common Expression Language(CEL)
• RFC-0010 Multi-Tenant Workload Identity
• RFC-0011 OpenTelemetry Tracing
• RFC-0012 External Artifact API