fluxcd · stefanprodan · Sep 25, 2025 · Sep 25, 2025 · Sep 25, 2025 · Sep 25, 2025
diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
@@ -29,7 +29,7 @@ jobs:
       - name: Create cluster
         run: make up
         env:
-          KIND_NODE_IMAGE: ghcr.io/fluxcd/kindest/node:v1.33.0-amd64
+          KIND_NODE_IMAGE: ghcr.io/fluxcd/kindest/node:v1.34.1-amd64
       - name: Push modules
         run: make timoni-push
       - name: Install Flux

diff --git a/RESULTS.md b/RESULTS.md
@@ -18,6 +18,28 @@ registry at the same time.
 - Helm repository (oci://ghcr.io/stefanprodan/charts/podinfo)
 - App manifests (Deployment scaled to zero, Service Account, Service, Ingress)
 
+## Flux v2.7.0
+
+| Objects | Type          | Flux component       | Duration | Max Memory |
+|---------|---------------|----------------------|----------|------------|
+| 100     | OCIRepository | source-controller    | 24s      | 38Mi       |
+| 100     | Kustomization | kustomize-controller | 26s      | 32Mi       |
+| 100     | HelmChart     | source-controller    | 24s      | 40Mi       |
+| 100     | HelmRelease   | helm-controller      | 27s      | 190Mi      |
+| 500     | OCIRepository | source-controller    | 43s      | 65Mi       |
+| 500     | Kustomization | kustomize-controller | 2m5s     | 130Mi      |
+| 500     | HelmChart     | source-controller    | 48s      | 68Mi       |
+| 500     | HelmRelease   | helm-controller      | 2m9s     | 255Mi      |
+| 1000    | OCIRepository | source-controller    | 1m25s    | 67Mi       |
+| 1000    | Kustomization | kustomize-controller | 4m14s    | 195Mi      |
+| 1000    | HelmChart     | source-controller    | 1m20s    | 110Mi      |
+| 1000    | HelmRelease   | helm-controller      | 4m35s    | 330Mi      |
+
+### Observations
+
+Compared to Flux v2.6 & Kubernetes 1.33, in Flux 2.7 & Kubernetes 1.34 there is
+substantial improvement in the reconciliation speed of HelmRelease objects when the
+number of releases is 1000 or more.
 
 ## Flux v2.6.0
 

diff --git a/manifests/bases/helm-controller/kustomization.yaml b/manifests/bases/helm-controller/kustomization.yaml
@@ -1,8 +1,8 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
-- https://github.com/fluxcd/helm-controller/releases/download/v1.3.0/helm-controller.crds.yaml
-- https://github.com/fluxcd/helm-controller/releases/download/v1.3.0/helm-controller.deployment.yaml
+- https://github.com/fluxcd/helm-controller/releases/download/v1.4.0/helm-controller.crds.yaml
+- https://github.com/fluxcd/helm-controller/releases/download/v1.4.0/helm-controller.deployment.yaml
 - account.yaml
 transformers:
 - labels.yaml

diff --git a/manifests/bases/helm-controller/labels.yaml b/manifests/bases/helm-controller/labels.yaml
@@ -8,3 +8,6 @@ labels:
 fieldSpecs:
   - path: metadata/labels
     create: true
+  - kind: Deployment
+    path: spec/template/metadata/labels
+    create: true
diff --git a/manifests/bases/helm-controller/patch.yaml b/manifests/bases/helm-controller/patch.yaml
@@ -7,14 +7,6 @@
 - op: add
   path: /spec/template/spec/priorityClassName
   value: system-cluster-critical
-- op: add
-  path: /spec/template/spec/containers/0/env/-
-  value:
-    name: GOMAXPROCS
-    valueFrom:
-      resourceFieldRef:
-        containerName: manager
-        resource: limits.cpu
 - op: add
   path: /spec/template/spec/containers/0/env/-
   value:

diff --git a/manifests/bases/image-automation-controller/kustomization.yaml b/manifests/bases/image-automation-controller/kustomization.yaml
@@ -1,8 +1,8 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
-- https://github.com/fluxcd/image-automation-controller/releases/download/v0.41.0/image-automation-controller.crds.yaml
-- https://github.com/fluxcd/image-automation-controller/releases/download/v0.41.0/image-automation-controller.deployment.yaml
+- https://github.com/fluxcd/image-automation-controller/releases/download/v1.0.0/image-automation-controller.crds.yaml
+- https://github.com/fluxcd/image-automation-controller/releases/download/v1.0.0/image-automation-controller.deployment.yaml
 - account.yaml
 transformers:
 - labels.yaml

diff --git a/manifests/bases/image-automation-controller/labels.yaml b/manifests/bases/image-automation-controller/labels.yaml
@@ -8,3 +8,6 @@ labels:
 fieldSpecs:
   - path: metadata/labels
     create: true
+  - kind: Deployment
+    path: spec/template/metadata/labels
+    create: true
diff --git a/manifests/bases/image-automation-controller/patch.yaml b/manifests/bases/image-automation-controller/patch.yaml
@@ -4,14 +4,6 @@
 - op: add
   path: /spec/template/spec/serviceAccountName
   value: image-automation-controller
-- op: add
-  path: /spec/template/spec/containers/0/env/-
-  value:
-    name: GOMAXPROCS
-    valueFrom:
-      resourceFieldRef:
-        containerName: manager
-        resource: limits.cpu
 - op: add
   path: /spec/template/spec/containers/0/env/-
   value:

diff --git a/manifests/bases/image-reflector-controller/kustomization.yaml b/manifests/bases/image-reflector-controller/kustomization.yaml
@@ -1,8 +1,8 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
-- https://github.com/fluxcd/image-reflector-controller/releases/download/v0.35.0/image-reflector-controller.crds.yaml
-- https://github.com/fluxcd/image-reflector-controller/releases/download/v0.35.0/image-reflector-controller.deployment.yaml
+- https://github.com/fluxcd/image-reflector-controller/releases/download/v1.0.1/image-reflector-controller.crds.yaml
+- https://github.com/fluxcd/image-reflector-controller/releases/download/v1.0.1/image-reflector-controller.deployment.yaml
 - account.yaml
 transformers:
 - labels.yaml

diff --git a/manifests/bases/image-reflector-controller/labels.yaml b/manifests/bases/image-reflector-controller/labels.yaml
@@ -8,3 +8,6 @@ labels:
 fieldSpecs:
   - path: metadata/labels
     create: true
+  - kind: Deployment
+    path: spec/template/metadata/labels
+    create: true
diff --git a/manifests/bases/image-reflector-controller/patch.yaml b/manifests/bases/image-reflector-controller/patch.yaml
@@ -4,14 +4,6 @@
 - op: add
   path: /spec/template/spec/serviceAccountName
   value: image-reflector-controller
-- op: add
-  path: /spec/template/spec/containers/0/env/-
-  value:
-    name: GOMAXPROCS
-    valueFrom:
-      resourceFieldRef:
-        containerName: manager
-        resource: limits.cpu
 - op: add
   path: /spec/template/spec/containers/0/env/-
   value:

diff --git a/manifests/bases/kustomize-controller/kustomization.yaml b/manifests/bases/kustomize-controller/kustomization.yaml
@@ -1,8 +1,8 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
-- https://github.com/fluxcd/kustomize-controller/releases/download/v1.6.0/kustomize-controller.crds.yaml
-- https://github.com/fluxcd/kustomize-controller/releases/download/v1.6.0/kustomize-controller.deployment.yaml
+- https://github.com/fluxcd/kustomize-controller/releases/download/v1.7.0/kustomize-controller.crds.yaml
+- https://github.com/fluxcd/kustomize-controller/releases/download/v1.7.0/kustomize-controller.deployment.yaml
 - account.yaml
 transformers:
 - labels.yaml

diff --git a/manifests/bases/kustomize-controller/labels.yaml b/manifests/bases/kustomize-controller/labels.yaml
@@ -8,3 +8,6 @@ labels:
 fieldSpecs:
   - path: metadata/labels
     create: true
+  - kind: Deployment
+    path: spec/template/metadata/labels
+    create: true
diff --git a/manifests/bases/kustomize-controller/patch.yaml b/manifests/bases/kustomize-controller/patch.yaml
@@ -7,14 +7,6 @@
 - op: add
   path: /spec/template/spec/priorityClassName
   value: system-cluster-critical
-- op: add
-  path: /spec/template/spec/containers/0/env/-
-  value:
-    name: GOMAXPROCS
-    valueFrom:
-      resourceFieldRef:
-        containerName: manager
-        resource: limits.cpu
 - op: add
   path: /spec/template/spec/containers/0/env/-
   value:

diff --git a/manifests/bases/notification-controller/kustomization.yaml b/manifests/bases/notification-controller/kustomization.yaml
@@ -1,8 +1,8 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
-- https://github.com/fluxcd/notification-controller/releases/download/v1.6.0/notification-controller.crds.yaml
-- https://github.com/fluxcd/notification-controller/releases/download/v1.6.0/notification-controller.deployment.yaml
+- https://github.com/fluxcd/notification-controller/releases/download/v1.7.1/notification-controller.crds.yaml
+- https://github.com/fluxcd/notification-controller/releases/download/v1.7.1/notification-controller.deployment.yaml
 - account.yaml
 transformers:
 - labels.yaml

diff --git a/manifests/bases/notification-controller/labels.yaml b/manifests/bases/notification-controller/labels.yaml
@@ -8,3 +8,6 @@ labels:
 fieldSpecs:
   - path: metadata/labels
     create: true
+  - kind: Deployment
+    path: spec/template/metadata/labels
+    create: true
diff --git a/manifests/bases/notification-controller/patch.yaml b/manifests/bases/notification-controller/patch.yaml
@@ -1,14 +1,6 @@
 - op: add
   path: /spec/template/spec/serviceAccountName
   value: notification-controller
-- op: add
-  path: /spec/template/spec/containers/0/env/-
-  value:
-    name: GOMAXPROCS
-    valueFrom:
-      resourceFieldRef:
-        containerName: manager
-        resource: limits.cpu
 - op: add
   path: /spec/template/spec/containers/0/env/-
   value:

diff --git a/manifests/bases/source-controller/kustomization.yaml b/manifests/bases/source-controller/kustomization.yaml
@@ -1,8 +1,8 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
-- https://github.com/fluxcd/source-controller/releases/download/v1.6.0/source-controller.crds.yaml
-- https://github.com/fluxcd/source-controller/releases/download/v1.6.0/source-controller.deployment.yaml
+- https://github.com/fluxcd/source-controller/releases/download/v1.7.0/source-controller.crds.yaml
+- https://github.com/fluxcd/source-controller/releases/download/v1.7.0/source-controller.deployment.yaml
 - account.yaml
 transformers:
 - labels.yaml

diff --git a/manifests/bases/source-controller/labels.yaml b/manifests/bases/source-controller/labels.yaml
@@ -8,3 +8,6 @@ labels:
 fieldSpecs:
   - path: metadata/labels
     create: true
+  - kind: Deployment
+    path: spec/template/metadata/labels
+    create: true
diff --git a/manifests/bases/source-controller/patch.yaml b/manifests/bases/source-controller/patch.yaml
@@ -7,14 +7,6 @@
 - op: add
   path: /spec/template/spec/priorityClassName
   value: system-cluster-critical
-- op: add
-  path: /spec/template/spec/containers/0/env/-
-  value:
-    name: GOMAXPROCS
-    valueFrom:
-      resourceFieldRef:
-        containerName: manager
-        resource: limits.cpu
 - op: add
   path: /spec/template/spec/containers/0/env/-
   value:

diff --git a/manifests/bases/source-watcher/account.yaml b/manifests/bases/source-watcher/account.yaml
@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: source-watcher
diff --git a/manifests/bases/source-watcher/kustomization.yaml b/manifests/bases/source-watcher/kustomization.yaml
@@ -0,0 +1,15 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+- https://github.com/fluxcd/source-watcher/releases/download/v2.0.0/source-watcher.crds.yaml
+- https://github.com/fluxcd/source-watcher/releases/download/v2.0.0/source-watcher.deployment.yaml
+- account.yaml
+transformers:
+- labels.yaml
+patches:
+- target:
+    group: apps
+    version: v1
+    kind: Deployment
+    name: source-watcher
+  path: patch.yaml
diff --git a/manifests/bases/source-watcher/labels.yaml b/manifests/bases/source-watcher/labels.yaml
@@ -0,0 +1,13 @@
+apiVersion: builtin
+kind: LabelTransformer
+metadata:
+  name: labels
+labels:
+  app.kubernetes.io/component: source-watcher
+  app.kubernetes.io/part-of: flux
+fieldSpecs:
+  - path: metadata/labels
+    create: true
+  - kind: Deployment
+    path: spec/template/metadata/labels
+    create: true
diff --git a/manifests/bases/source-watcher/patch.yaml b/manifests/bases/source-watcher/patch.yaml
@@ -0,0 +1,17 @@
+- op: add
+  path: /spec/template/spec/containers/0/args/0
+  value: --events-addr=http://notification-controller.flux-system.svc.cluster.local./
+- op: add
+  path: /spec/template/spec/serviceAccountName
+  value: source-watcher
+- op: add
+  path: /spec/template/spec/priorityClassName
+  value: system-cluster-critical
+- op: add
+  path: /spec/template/spec/containers/0/env/-
+  value:
+    name: GOMEMLIMIT
+    valueFrom:
+      resourceFieldRef:
+        containerName: manager
+        resource: limits.memory
diff --git a/manifests/install/kustomization.yaml b/manifests/install/kustomization.yaml
@@ -9,6 +9,7 @@ resources:
   - ../bases/helm-controller
   - ../bases/image-reflector-controller
   - ../bases/image-automation-controller
+  - ../bases/source-watcher
   - ../rbac
   - ../policies
 transformers:
@@ -26,6 +27,8 @@ images:
     newName: ghcr.io/fluxcd/image-reflector-controller
   - name: fluxcd/image-automation-controller
     newName: ghcr.io/fluxcd/image-automation-controller
+  - name: fluxcd/source-watcher
+    newName: ghcr.io/fluxcd/source-watcher
 patches:
   - patch: |
       - op: add
@@ -91,3 +94,10 @@ patches:
     target:
       kind: Deployment
       name: kustomize-controller
+  - patch: |
+      - op: add
+        path: /spec/template/spec/containers/0/args/-
+        value: --feature-gates=ExternalArtifact=true
+    target:
+      kind: Deployment
+      name: "(kustomize-controller|helm-controller)"
diff --git a/manifests/rbac/controller.yaml b/manifests/rbac/controller.yaml
@@ -18,6 +18,9 @@ rules:
 - apiGroups: ['image.toolkit.fluxcd.io']
   resources: ['*']
   verbs: ['*']
+- apiGroups: ['source.extensions.fluxcd.io']
+  resources: ['*']
+  verbs: ['*']
 - apiGroups:
   - ""
   resources:
@@ -109,3 +112,6 @@ subjects:
   - kind: ServiceAccount
     name: image-automation-controller
     namespace: flux-system
+  - kind: ServiceAccount
+    name: source-watcher
+    namespace: flux-system