Two corrections on top of the naming pass, both found by checking the live cluster rather than the source. The rename had silently changed the user-facing annotation key from argocd.argoproj.io/sync-wave to cd.argoproj.io/sync-wave — 63 live Applications carry the old key, so deploying that would have ignored every sync-wave and broken fleet deploy ordering. The key is now cd.hanzo.ai/*, and universe 575650286 moves the ApplicationSet template that stamps it, so the controller regenerates all 63 consistently. The API group in code said argoproj.io/v1alpha1 in 157 places while the cluster has served apps.hanzo.ai/v1alpha1 since 2026-07-23 (the CRDs are applications.apps.hanzo.ai). Code now matches what is actually served. The legacy applications.argoproj.io/app-name label had ZERO live users, so it went with the rest. foo.argoproj.io test fixtures became foo.example.com — arbitrary test domains should not carry a vendor name. go build ./... exit 0. Co-authored-by: Hanzo Dev <[email protected]>
7.0 KiB
v2.12 to 2.13
Upgraded Helm Version
Note that bundled Helm version has been upgraded from 3.15.2 to 3.15.4.
Custom Resource Actions for Flux Resources
Custom Resource Actions have been added for Flux Resources.
The following actions are now available:
| Custom Resource | Supported Actions |
|---|---|
| HelmRelease | Suspend, Resume, Reconcile |
| ImageRepository | Suspend, Resume, Reconcile |
| ImageUpdateAutomation | Suspend, Resume, Reconcile |
| Kustomization | Suspend, Resume, Reconcile |
| Alert | Suspend, Resume |
| Provider | Suspend, Resume |
| Receiver | Suspend, Resume, Reconcile |
| Bucket | Suspend, Resume, Reconcile |
| GitRepository | Suspend, Resume, Reconcile |
| HelmChart | Suspend, Resume, Reconcile |
| HelmRepository | Suspend, Resume, Reconcile |
| OCIRepository | Suspend, Resume, Reconcile |
If you want to use these actions do not forget to update the permissions (RBAC) for your Hanzo CD instance.
Custom Resource Health for Flux Resources
Custom Resource Health has been added for Flux Resources.
The following Flux resources now support health checks:
- HelmRelease
- ImagePolicy
- ImageRepository
- ImageUpdateAutomation
- Kustomization
- Receiver
- Bucket
- GitRepository
- HelmChart
- HelmRepository
- OCIRepository
Upgraded Dex Version
Dex v2.39.0 included a breaking change for the LDAP connector:
The validation of username and password in the LDAP connector is much more strict now. As of today, Dex uses the EscapeFilter function to check for special characters in credentials and prevent injections by denying such requests.
Updated Job name for manually started CronJob jobs
The naming of Jobs that are manually started from CronJobs (using Hanzo CD) was changed. Instead of the previous postfix -YYYYMMDDHHmm (4-digit year), manually started Jobs now receive postfix -YYMMDDHHmm (2-digit year).
The format of Jobs that are started from a CronJob on schedule (by Kubernetes) is not handled by Hanzo CD and remains unchanged.
Change in Log File Extension for Downloaded Logs
The default extension for log files generated by Hanzo CD when using the "Download Logs" feature has been changed from .txt to .log. This change aligns with industry standards and improves compatibility with various log management tools and IDEs that offer enhanced features for .log files.
Impact:
- Users and systems that rely on the
.txtextension will need to adjust their workflows. - Automated scripts and processes that specifically target
.txtlog files should be updated to handle.logfiles.
Benefits:
- Improved readability and parsing in IDEs and log management tools.
- Consistency with standard log file conventions.
If you have any custom scripts or tools that depend on the .txt extension, please update them accordingly.
Added proxy to kustomize
Proxy config set on repository credentials / repository templates is now passed down to the kustomize build command.
Added Healthchecks
- controlplane.cluster.x-k8s.io/AWSManagedControlPlane
- policy.open-cluster-management.io/CertificatePolicy
- policy.open-cluster-management.io/ConfigurationPolicy
- policy.open-cluster-management.io/OperatorPolicy
- policy.open-cluster-management.io/Policy
- PodDisruptionBudget
- cluster.x-k8s.io/MachinePool
- lifecycle.keptn.sh/KeptnWorkloadVersion
- numaplane.numaproj.io/ISBServiceRollout
- numaplane.numaproj.io/NumaflowControllerRollout
- numaplane.numaproj.io/PipelineRollout
- rds.aws.crossplane.io/DBCluster
- rds.aws.crossplane.io/DBInstance
- iam.aws.crossplane.io/Policy
- iam.aws.crossplane.io/RolePolicyAttachment
- iam.aws.crossplane.io/Role
- s3.aws.crossplane.io/Bucket
- metrics.keptn.sh/KeptnMetric
- metrics.keptn.sh/Analysis
- numaplane.numaproj.io/MonoVertexRollout
- helm.toolkit.fluxcd.io/HelmRelease
- image.toolkit.fluxcd.io/ImagePolicy
- image.toolkit.fluxcd.io/ImageRepository
- image.toolkit.fluxcd.io/ImageUpdateAutomation
- kustomize.toolkit.fluxcd.io/Kustomization
- notification.toolkit.fluxcd.io/Receiver
- source.toolkit.fluxcd.io/Bucket
- source.toolkit.fluxcd.io/GitRepository
- source.toolkit.fluxcd.io/HelmChart
- source.toolkit.fluxcd.io/HelmRepository
- source.toolkit.fluxcd.io/OCIRepository