Skip to content

Commit a5c642e

Browse files
matheuscscpmatheuscscp
authored
Merge pull request #2338 from fluxcd/rfc-0010
[RFC-0010] Complete implementation
2 parents a16fb47 + 0dde458 commit a5c642e

File tree

4 files changed

+28
-42
lines changed

4 files changed

+28
-42
lines changed

‎content/en/flux/integrations/aws.md‎

Lines changed: 0 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -761,10 +761,6 @@ patches:
761761
> but Flux also uses it to identify the IAM Role to assume in non-EKS clusters.
762762
> This is for providing users with a seamless experience.
763763

764-
At the moment, the S3 integration with the `Bucket` API **does not support**
765-
configuring authentication through OIDC Federation at the object level.
766-
Support for this integration will be introduced in Flux v2.7.
767-
768764
#### For IAM User Access Keys
769765

770766
Only the S3 and KMS integrations support configuring authentication

‎content/en/flux/integrations/azure.md‎

Lines changed: 0 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -589,11 +589,6 @@ patches:
589589
> annotations are defined by AKS, but Flux also uses them to identify the Managed Identity
590590
> to impersonate in non-AKS clusters. This is for providing users with a seamless experience.
591591

592-
At the moment, the ADO integrations with the `GitRepository`, `ImageUpdateAutomation` and
593-
`Provider` APIs and the ABS integration with the `Bucket` API **do not support** configuring
594-
authentication through Workload Identity Federation at the object level.
595-
Support for these integrations will be introduced in Flux v2.7.
596-
597592
#### For Application Certificates
598593

599594
Only the ABS and AKV integrations support configuring

‎content/en/flux/integrations/gcp.md‎

Lines changed: 0 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -585,11 +585,6 @@ metadata:
585585
> but Flux also uses it to identify the GCP Service Account to impersonate in
586586
> non-GKE clusters. This is for providing users with a seamless experience.
587587

588-
At the moment, the GCS integration with the `Bucket` API and the Pub/Sub
589-
integration with the `Provider` API **do not support** configuring
590-
authentication through Workload Identity Federation at the object level.
591-
Support for these integrations will be introduced in Flux v2.7.
592-
593588
#### For GCP Service Account Keys
594589

595590
All GCP integrations except for GAR and GKE support configuring

‎content/en/flux/security/contextual-authorization.md‎

Lines changed: 28 additions & 28 deletions
Original file line numberDiff line numberDiff line change
@@ -27,34 +27,34 @@ are context- and time-bound.
2727

2828
Below is a list of Flux features that support this functionality and their documentation:
2929

30-
| Status | Component | Feature | Provider | Ref |
31-
|-----------|-----------------------------|------------------------------------|----------|----------------|
32-
| Supported | Source Controller | Git Repository Authentication | Azure | [Guide][Azure] |
33-
| Supported | Source Controller | Bucket Repository Authentication | AWS | [Guide][AWS] |
34-
| Supported | Source Controller | Bucket Repository Authentication | Azure | [Guide][Azure] |
35-
| Supported | Source Controller | Bucket Repository Authentication | GCP | [Guide][GCP] |
36-
| Supported | Source Controller | OCI Repository Authentication | AWS | [Guide][AWS] |
37-
| Supported | Source Controller | OCI Repository Authentication | Azure | [Guide][Azure] |
38-
| Supported | Source Controller | OCI Repository Authentication | GCP | [Guide][GCP] |
39-
| Supported | Source Controller | Helm OCI Repository Authentication | AWS | [Guide][AWS] |
40-
| Supported | Source Controller | Helm OCI Repository Authentication | Azure | [Guide][Azure] |
41-
| Supported | Source Controller | Helm OCI Repository Authentication | GCP | [Guide][GCP] |
42-
| Supported | Image Reflector Controller | Image Repository Authentication | AWS | [Guide][AWS] |
43-
| Supported | Image Reflector Controller | Image Repository Authentication | Azure | [Guide][Azure] |
44-
| Supported | Image Reflector Controller | Image Repository Authentication | GCP | [Guide][GCP] |
45-
| Supported | Image Automation Controller | Git Repository Authentication | Azure | [Guide][Azure] |
46-
| Supported | Kustomize Controller | SOPS Integration with KMS | AWS | [Guide][AWS] |
47-
| Supported | Kustomize Controller | SOPS Integration with KMS | Azure | [Guide][Azure] |
48-
| Supported | Kustomize Controller | SOPS Integration with KMS | GCP | [Guide][GCP] |
49-
| Supported | Notification Controller | Azure DevOps Commit Status Updates | Azure | [Guide][Azure] |
50-
| Supported | Notification Controller | Azure Event Hubs | Azure | [Guide][Azure] |
51-
| Supported | Notification Controller | Google Cloud Pub/Sub | GCP | [Guide][GCP] |
52-
53-
## Roadmap
54-
55-
Support for context-based authorization should only increase over time.
56-
57-
For more information, please visit the tracking issue: https://github.com/fluxcd/flux2/issues/3003.
30+
| Status | Component | Feature | Provider | Ref |
31+
|-----------|-----------------------------|-------------------------------------|----------|----------------|
32+
| Supported | Source Controller | GitRepository Authentication | Azure | [Guide][Azure] |
33+
| Supported | Source Controller | Bucket Authentication | AWS | [Guide][AWS] |
34+
| Supported | Source Controller | Bucket Authentication | Azure | [Guide][Azure] |
35+
| Supported | Source Controller | Bucket Authentication | GCP | [Guide][GCP] |
36+
| Supported | Source Controller | OCIRepository Authentication | AWS | [Guide][AWS] |
37+
| Supported | Source Controller | OCIRepository Authentication | Azure | [Guide][Azure] |
38+
| Supported | Source Controller | OCIRepository Authentication | GCP | [Guide][GCP] |
39+
| Supported | Source Controller | `oci` HelmRepository Authentication | AWS | [Guide][AWS] |
40+
| Supported | Source Controller | `oci` HelmRepository Authentication | Azure | [Guide][Azure] |
41+
| Supported | Source Controller | `oci` HelmRepository Authentication | GCP | [Guide][GCP] |
42+
| Supported | Kustomize Controller | SOPS Integration with KMS | AWS | [Guide][AWS] |
43+
| Supported | Kustomize Controller | SOPS Integration with Key Vault | Azure | [Guide][Azure] |
44+
| Supported | Kustomize Controller | SOPS Integration with KMS | GCP | [Guide][GCP] |
45+
| Supported | Kustomize Controller | Remote EKS Cluster Authentication | AWS | [Guide][AWS] |
46+
| Supported | Kustomize Controller | Remote AKS Cluster Authentication | Azure | [Guide][Azure] |
47+
| Supported | Kustomize Controller | Remote GKE Cluster Authentication | GCP | [Guide][GCP] |
48+
| Supported | Helm Controller | Remote EKS Cluster Authentication | AWS | [Guide][AWS] |
49+
| Supported | Helm Controller | Remote AKS Cluster Authentication | Azure | [Guide][Azure] |
50+
| Supported | Helm Controller | Remote GKE Cluster Authentication | GCP | [Guide][GCP] |
51+
| Supported | Notification Controller | Azure DevOps Commit Status Updates | Azure | [Guide][Azure] |
52+
| Supported | Notification Controller | Azure Event Hubs | Azure | [Guide][Azure] |
53+
| Supported | Notification Controller | Google Cloud Pub/Sub | GCP | [Guide][GCP] |
54+
| Supported | Image Reflector Controller | ImageRepository Authentication | AWS | [Guide][AWS] |
55+
| Supported | Image Reflector Controller | ImageRepository Authentication | Azure | [Guide][Azure] |
56+
| Supported | Image Reflector Controller | ImageRepository Authentication | GCP | [Guide][GCP] |
57+
| Supported | Image Automation Controller | GitRepository Authentication | Azure | [Guide][Azure] |
5858

5959
[AWS]: /flux/integrations/aws.md
6060
[Azure]: /flux/integrations/azure.md

0 commit comments

Comments
 (0)