Flux v2.9.0 released on 30-06-2026
Flux v2.9.0 is out now. It introduces the RFC‑0013 CLI plugin system (flux plugin) with Mirror and Schema plugins, plugin installation alongside Flux setups (including digest pinning), and a set of CLI UX, controller and security improvements across Kustomization, HelmRelease and source/image tooling.
See the Flux announcement and the full changelog on GitHub for full details: Flux v2.9.0 blog post and Full changelog.
What’s in this release
- RFC‑0013 CLI plugin system (flux plugin) with Mirror and Schema plugins, plus plugin install support during Flux setup and digest pinning.
- Kustomize-controller: server‑side‑apply DriftIgnoreRules for fine‑grained drift control, SOPS decryption with the Age cipher, and Kubernetes Workload Identity authentication for OpenBao and Vault secrets.
- Security and signing: Git commit signing and verification with SSH keys, AWS CodeCommit authentication using Workload Identity, and a custom Sigstore trusted root option for keyless verification in air‑gapped environments.
Upgrade notes
- The APIs image.toolkit.fluxcd.io/v1beta2 and notification.toolkit.fluxcd.io/v1beta2 are EOL and have been removed from the CRDs — follow the Flux v2.7+ upgrade procedure.
- Flux v2.9.0 is compatible with Kubernetes v1.34–v1.36 (the latest three minor releases); check cluster compatibility before upgrading.
Please share comments about your upgrade or the new plugins on the Flux GitHub discussions or issue tracker — feedback from users helps shape subsequent fixes and improvements.
