Flux Roadmap

Milestones

The Flux project roadmap is divided into milestones representing minor releases, each with a set of goals and tasks. The milestones marked as provisional are subject to change based on the project’s priorities and the community’s feedback.

Please note that the Flux maintainers prioritize fixes to defects affecting GA APIs and security issues over new features. Depending on the volume of incoming issues and the complexity of the fixes, the roadmap may be adjusted and new features may be postponed to the next milestone.

v2.5 (Q1 2025)

Status: Completed on 2025-02-20 (v2.5.0 changelog)

The primary goal of this milestone is to integrate GitHub App for Git repositories authentication and to extend Flux functionality with Common Expression Language(CEL) support.

• Git integrations

  • Support for GitHub App auth in source-controller
  • Support for GitHub App auth in image-automation-controller
  • Generate GitHub App secrets with the Flux CLI

• Kustomize integrations

  • Fine-grained control of garbage collection with .spec.deletionPolicy
  • Enable decryption of secrets generated by Kustomize components
  • Enable decryption of Kustomize patches
  • Custom Health Checks using CEL

• Alerting integrations

  • Custom Event Metadata from Annotations
  • Support Git commit status updates for OCIRepository

• Webhook integrations

  • Implement Receiver resource filtering with CEL

• Troubleshoot helpers

  • Implement flux debug helmrelease --show-values
  • Implement flux debug kustomization --show-vars

• Conformance testing

  • End-to-end testing for Kubernetes 1.32
  • End-to-end testing for GitHub App auth

• EOL and Deprecations

  • End support for Flux v2.2.x
  • End support for Kubernetes v1.29.x

v2.6 (Q2 2025)

Status: In Progress

The primary goal of this milestone is to make a generally available release for the Flux OCI Artifacts APIs and add support for object-level workload identity authentication for container registries.

• OCI artifacts integrations

  • Promote the OCIRepository API to v1
  • Promote to stable the Flux CLI commands:
    • flux push artifact
    • flux tag artifact
    • flux get artifact
    • flux diff artifact
    • flux list artifacts
  • Cache registry credentials for cloud providers
  • Introduce object-level workload identity for OCIRepository

• Image automation

  • Introduce object-level workload identity for ImageRepository
  • Add support for updating OCI digests

• Git integrations

  • Add support for sparse checkout in GitRepository
  • Add support for Git HTTP/S mutual TLS
  • Implement caching for GitHub Application auth tokens

• Kustomize integrations

  • Introduce object-level workload identity for KMS decryption
  • Implement WaitForTermination deletion policy

• Alerting integrations

  • Add support for GitHub App auth to Provider API
  • Customise the ID of the Git commit status with CEL expressions
  • Add support for workload identity auth for Azure Event Hub to Provider API

• Conformance testing

  • End-to-end testing for Kubernetes 1.33

• EOL and Deprecations

  • End support for Flux v2.3.x
  • End support for Kubernetes v1.30.x
  • Deprecate APIs in group source.toolkit.fluxcd.io/v1beta2

v2.7 (Q3 2025)

Status: Provisional

The primary goal of this milestone is to make a generally available release for the Flux image automation APIs, and make Flux server-side apply compatible with Kubernetes Vertical Pod Autoscaler (VPA).

• Image automation

  • Promote the ImageUpdateAutomation API to v1
  • Promote the ImageRepository API to v1
  • Promote the ImagePolicy API to v1

• Kustomize integrations

  • Extend ssa.Apply with field ignore rules

• Conformance testing

  • End-to-end testing for Kubernetes 1.34

• EOL and Deprecations

  • End support for Flux v2.4.x
  • End support for Kubernetes v1.31.x
  • Deprecate APIs in group image.toolkit.fluxcd.io/v1beta2
  • Remove deprecated APIs in group helm.toolkit.fluxcd.io/v2beta1
  • Remove deprecated APIs in group image.toolkit.fluxcd.io/v1beta1
  • Remove deprecated APIs in group source.toolkit.fluxcd.io/v1beta1
  • Remove deprecated APIs in group kustomize.toolkit.fluxcd.io/v1beta1
  • Remove the autologin deprecated flags from image-reflector-controller

Request for comments

The RFC process provides a consistent and controlled path for substantial changes to enter Flux.

To keep track of the Flux project’s current direction and future plans, please see the following RFCs:

• RFC-0001 Memorandum on the authorization model
• RFC-0002 Flux OCI support for Helm
• RFC-0003 Flux OCI support for Kubernetes manifests
• RFC-0004 Block insecure HTTP connections across Flux
• RFC-0005 Artifact Revision format and introduction of Digest
• RFC-0006 Flux CDEvents Receiver
• RFC-0007 Passwordless authentication for Git repositories
• RFC-0008 Custom Event Metadata from Annotations
• RFC-0009 Custom Health Checks for Kustomization using Common Expression Language(CEL)
• RFC-0010 Multi-Tenant Workload Identity
• RFC External Artifact API
• RFC Flux Bootstrap for OCI-compliant Container Registries