Prepare for Flux v2.0.0

[stefanprodan]

After three months and five release candidates we are finally ready to release Flux 2.0.0 🎉 Big thanks to all the Flux users who have tested the release candidates and helped us polish the GitOps features of Flux and its GitOps related APIs.

The Flux v2.0.0 release comes with fixes to issues reported for 2.0.0-rc.5.

In addition, Flux v2.0.0 comes with enhancements to its build and release process by adopting the Supply Chain Levels for Software Artifacts (SLSA) provenance generators. Starting with v.2.0.0, Flux provisionally meets the SLSA Level 3 requirements. Flux users will be able to verify the provenance of Flux release artifacts ((binaries, container images, SBOMs, deploy manifests, source code) using the official SLSA verifier tool.

TODOs:

• Flux GA release spec and long term support pledge #3254
• Set minimum supported version to Kubernetes 1.24.0 #4020
• Generate SLSA3 provenance for all Flux components  #3994
• Flux assessment of SLSA Build Level 3 requirements website#1530
• Update Flux components to Go 1.20 in go.mod and oss-fuzz #4014
• Put backport automation in place accross repositories #4022
• Allow multiple arguments for "flux suspend/resume" #3755
• Enhance the Helm promotion workflow website#1538
• Add Kubernetes client auth exec config support terraform-provider-flux#506

Release checklist:

• source-controller v1.0.0
• source-watcher v1.0.0
• kustomize-controller v1.0.0
• notification-controller v1.0.0
• helm-controller: v0.35.0
• image-reflector-controller v0.29.0
• image-automation-controller v0.35.0
• flux2 v2.0.0
• terraform-provider-flux v1.0.0

Documentation:

• Publish Flux release change log to GitHub & Slack
• Publish Flux release specifications and long-term support pledge
• Publish assessment of SLSA Level 3 requirements

[SebTardif]

Any UI is expected to be compatible soon with Flux v2.0.0?

Recently, when trying the plug-in in VSCode failed. Should probably make sure the FAQ doesn't give the impression any GUI exist if the user is using Flux v2.

[makkes]

@SebTardif All UIs listed at https://fluxcd.io/ecosystem/#flux-uis--guis should work with the latest Flux version. If they don't, please submit issues in the respective places.

[juozasg]

@SebTardif All UIs listed at https://fluxcd.io/ecosystem/#flux-uis--guis should work with the latest Flux version. If they don't, please submit issues in the respective places.

Hi, I've been developing new features for the vscode extension using v2.0.0-rc.5. Haven't seen any problems. Can you provide more information please?

[salekseev]

https://github.com/fluxcd/flux2/pkgs/container/flux-manifests still does not have a v2.0.0 tag published.

[stefanprodan]

@salekseev yes our release workflow failed just before the OCI push, we'll do a patch release 2.0.1 tomorrow.

[stefanprodan]

@salekseev to unblock you, I have pushed the manifest image and signed it myself.