Flux (GitOps) extension release notes

The Flux (GitOps) extension is updated on an ongoing basis. This article provides information about the most recent releases of the extension.

The most recent version of the Flux (GitOps) extension and the two previous versions (N-2) are supported. We generally recommend that you use the most recent version of the extension.

When a new version of the microsoft.flux extension is released, it can take several days for the new version to become available in all regions.

Deprecation and removal notice: Changes to microsoft.flux extension

The following Flux APIs have been removed in upstream Flux versions 2,7, 2.8 and 2.9:

• Deprecated APIs in group source.toolkit.fluxcd.io/v1beta1 and source.toolkit.fluxcd.io/v1beta2
• Deprecated APIs in group kustomize.toolkit.fluxcd.io/v1beta1 and kustomize.toolkit.fluxcd.io/v1beta2
• Deprecated APIs in group helm.toolkit.fluxcd.io/v2beta1 and helm.toolkit.fluxcd.io/v2beta2
• Deprecated APIs in group notification.toolkit.fluxcd.io/v1beta1 and notification.toolkit.fluxcd.io/v1beta2
• Deprecated APIs in group image.toolkit.fluxcd.io/v1beta1 and image.toolkit.fluxcd.io/v1beta2

For more information, see https://github.com/fluxcd/flux2/issues/5572.

Required action: To ensure continued compatibility and avoid disruptions, update your sources to remove references to deprecated APIs as soon as possible. If your clusters are running 1.20.4 or lower, upgrade them to an interim version (1.21.0 - 1.22.2) first, and then upgrade to version 1.23.0.

Migrate all your resources to the Flux stable APIs in your sources (Git repositories, OCI repositories, buckets, blob storage) by replacing the API version in the manifests:

• Kustomization to kustomize.toolkit.fluxcd.io/v1
• HelmRelease to helm.toolkit.fluxcd.io/v2
• Bucket to source.toolkit.fluxcd.io/v1
• GitRepository to source.toolkit.fluxcd.io/v1
• HelmChart to source.toolkit.fluxcd.io/v1
• HelmRepository to source.toolkit.fluxcd.io/v1
• OCIRepository to source.toolkit.fluxcd.io/v1
• Receiver to notification.toolkit.fluxcd.io/v1
• Alert to notification.toolkit.fluxcd.io/v1beta3
• Provider to notification.toolkit.fluxcd.io/v1beta3
• ImageRepository to image.toolkit.fluxcd.io/v1
• ImagePolicy to image.toolkit.fluxcd.io/v1
• ImageUpdateAutomation to image.toolkit.fluxcd.io/v1

Note that the ImageUpdateAutomation commit template should use the fields .Changed.FileChanges, .Changed.Objects and .Changed.Changes instead of the deprecated .Updated and .Changed.ImageResult fields.

Once the manifests are updated in the sources, Flux will reconcile the new API versions.

August 2026 - microsoft.flux version 1.25.0

Flux version: Release v2.8.8

• source-controller: v1.8.5-3
• kustomize-controller: v1.8.5-2
• helm-controller: v1.5.5-2
• notification-controller: v1.8.4-3
• image-automation-controller: v1.1.4-2
• image-reflector-controller: v1.1.2-2

Changes in this version include:

• Updated the Flux extension to upstream Flux v2.8.8. This update moves the helm-controller from Helm v3 to Helm v4, which changes some default behaviors, including the use of server-side apply and kstatus-based health checks. For more information, see Helm v4 support in the upstream Flux v2.8.0 release notes. To restore the Helm v3 default behavior, enable the useHelm3Defaults setting as described in Restore Helm v3 default behavior.
• Added a generic feature-gates passthrough to the azure-k8s-flux chart, allowing opt-in configuration of upstream Flux controller feature gates.
• Added support for configuring --override-manager on helm-controller.
• Hardened the Flux extension chart by adding type guards (quote, int) to interpolated values in the controller templates.
• Addressed security vulnerabilities in fluxconfig-agent, fluxconfig-controller, fluent-bit-mdm, source-controller, kustomize-controller, notification-controller, image-automation-controller, image-reflector-controller, and helm-controller by updating the Go packages and base images.

August 2026 - microsoft.flux version 1.24.1

Flux version: Release v2.7.5

• source-controller: v1.7.4-23
• kustomize-controller: v1.7.3-17
• helm-controller: v1.4.5-16
• notification-controller: v1.7.5-15
• image-automation-controller: v1.0.4-16
• image-reflector-controller: v1.0.4-13

Changes in this version include:

• Set image v1 APIs as storage version.
• Add notation to fluxconfig CRD.
• Addressed security vulnerabilities in fluxconfig-agent, fluxconfig-controller, fluent-bit-mdm, source-controller, kustomize-controller, notification-controller, image-automation-controller, image-reflector-controller, and helm-controller by updating the Go packages and base images.

July 2026 - microsoft.flux version 1.24.0

Flux version: Release v2.7.5

• source-controller: v1.7.4-20
• kustomize-controller: v1.7.3-15
• helm-controller: v1.4.5-15
• notification-controller: v1.7.5-13
• image-automation-controller: v1.0.4-15
• image-reflector-controller: v1.0.4-12

Changes in this version include:

• Enable ORAS notation client caching in source-controller version 1.7.4.
• Extension config enhancement to specify field managers disallowed to perform changes on managed resources using override-manager in kustomize-controller.
• Restore 2.7 CRDs for rolling forward clusters that have deprecated or removed Flux API usage.
• Addressed security vulnerabilities in fluxconfig-agent, fluxconfig-controller, fluent-bit-mdm, source-controller, kustomize-controller, notification-controller, image-automation-controller, image-reflector-controller, and helm-controller by updating the Go packages and base images.

July 2026 - microsoft.flux version 1.23.3

Flux version: Release v2.7.5

• source-controller: v1.7.4-16
• kustomize-controller: v1.7.3-13
• helm-controller: v1.4.5-13
• notification-controller: v1.7.5-11
• image-automation-controller: v1.0.4-13
• image-reflector-controller: v1.0.4-10

Changes in this version include:

• Addressed security vulnerabilities in fluxconfig-agent, fluxconfig-controller, fluent-bit-mdm, source-controller, kustomize-controller, notification-controller, image-automation-controller, image-reflector-controller, and helm-controller by updating the Go packages and base images.

June 2026 - microsoft.flux version 1.23.1

Flux version: Release v2.7.5

• source-controller: v1.7.4-13
• kustomize-controller: v1.7.3-12
• helm-controller: v1.4.5-11
• notification-controller: v1.7.5-10
• image-automation-controller: v1.0.4-12
• image-reflector-controller: v1.0.4-9

Changes in this version include:

• Addressed security vulnerabilities in fluxconfig-agent, fluxconfig-controller, fluent-bit-mdm, source-controller, kustomize-controller, notification-controller, image-automation-controller, image-reflector-controller, and helm-controller by updating the Go packages and base images.

June 2026 - microsoft.flux version 1.23.0

Flux version: Release v2.7.5

• source-controller: v1.7.4-10
• kustomize-controller: v1.7.3-9
• helm-controller: v1.4.5-8
• notification-controller: v1.7.5-7
• image-automation-controller: v1.0.4-9
• image-reflector-controller: v1.0.4-6

Changes in this version include:

• Flux extension updates to v2.7.5 with new CRDs and controllers. A number of API versions have been removed. For more information, see the API removal notice.
• Allow configuring Flux controllers' Helm cache, index, and jitter interval percentage.
• Addressed security vulnerabilities in fluxconfig-agent, fluxconfig-controller, fluent-bit-mdm, source-controller kustomize-controller, notification-controller, image-automation-controller, image-reflector-controller and helm-controller by updating the Go packages and base images.

May 2026 - microsoft.flux version 1.22.2

Flux version: Release v2.6.4

• source-controller: v1.6.4-19
• kustomize-controller: v1.6.1-20
• helm-controller: v1.3.2-11
• notification-controller: v1.6.0-16
• image-automation-controller: v0.41.2-19
• image-reflector-controller: v0.35.2-15

Changes in this version include:

• Addressed security vulnerabilities in fluxconfig-agent, fluxconfig-controller, fluent-bit-mdm, source-controller kustomize-controller, notification-controller, image-automation-controller, image-reflector-controller and helm-controller by updating the Go packages and base images.

May 2026 - microsoft.flux version 1.22.1

Flux version: Release v2.6.4

• source-controller: v1.6.4-14
• kustomize-controller: v1.6.1-15
• helm-controller: v1.3.2-8
• notification-controller: v1.6.0-13
• image-automation-controller: v0.41.2-14
• image-reflector-controller: v0.35.2-12

Changes in this version include:

• Addressed security vulnerabilities in fluxconfig-agent, fluxconfig-controller, fluent-bit-mdm, source-controller kustomize-controller, notification-controller, image-automation-controller, image-reflector-controller and helm-controller by updating the Go packages and base images.
• Made Flux extension pods compliant with pod security standards.
• Implemented design improvements for WaitForReconciliation logic in fluxconfig-agent and fluxconfig-controller to address bugs where provisioning state would get stuck in Failed state.
• Added support for cosign verification in source-controller.

April 2026 - microsoft.flux version 1.21.1

Flux version: Release v2.6.4

• source-controller: v1.6.4-13
• kustomize-controller: v1.6.1-15
• helm-controller: v1.3.2-8
• notification-controller: v1.6.0-12
• image-automation-controller: v0.41.2-14
• image-reflector-controller: v0.35.2-12

Changes in this version include:

• Addressed security vulnerabilities in fluxconfig-agent, fluxconfig-controller, fluent-bit-mdm, source-controller kustomize-controller, notification-controller, image-automation-controller, image-reflector-controller and helm-controller by updating the Go packages and base images.

April 2026 - microsoft.flux version 1.21.0

Flux version: Release v2.6.4

• source-controller: v1.6.4-8
• kustomize-controller: v1.6.1-11
• helm-controller: v1.3.2-6
• notification-controller: v1.6.0-10
• image-automation-controller: v0.41.2-11
• image-reflector-controller: v0.35.2-10

Changes in this version include:

• Addressed security vulnerabilities in fluxconfig-agent, fluxconfig-controller, fluent-bit-mdm, source-controller kustomize-controller, notification-controller, image-automation-controller, image-reflector-controller and helm-controller by updating the Go packages and base images.
• Migrated CRs in etcd storage for Flux CRDs that have deprecated API versions.
• Optimized logging to reduce logging footprint in fluxconfig-agent and fluxconfig-controller.

March 2026 - microsoft.flux version 1.20.4

Flux version: Release v2.6.4

• source-controller: v1.6.4-7
• kustomize-controller: v1.6.1-10
• helm-controller: v1.3.2-5
• notification-controller: v1.6.0-9
• image-automation-controller: v0.41.2-10
• image-reflector-controller: v0.35.2-9

Changes in this version include:

• Addressed security vulnerabilities in fluxconfig-agent, fluxconfig-controller, fluent-bit-mdm, source-controller kustomize-controller, notification-controller, image-automation-controller, image-reflector-controller and helm-controller by updating the Go packages and base images.
• Workload identity support for notification controller.
• Ensure workload identity tenant ID and client ID settings areR correctly reflected in Flux controller deployments when updated.
• Compliance with deployment safeguards for AKS automatic.
• Object-level workload identity support for Flux controllers.

February 2026 - microsoft.flux version 1.19.5

Flux version: Release v2.6.4

• source-controller: v1.6.4
• kustomize-controller: v1.6.1
• helm-controller: v1.3.2
• notification-controller: v1.6.0
• image-automation-controller: v0.41.2
• image-reflector-controller: v0.35.2

Changes in this version include:

• Addressed security vulnerabilities in fluxconfig-agent, fluxconfig-controller, fluent-bit-mdm, source-controller, and helm-controller by updating the Go packages and base images.

Related content

• Learn more about the Flux (GitOps) extension.
• Get started with the Flux (GitOps) extension by using our tutorial.