gitops-reverser: v0.29.2

0.29.2 (2026-07-05)

Performance Improvements

• build: cache Go build + module dirs in Dockerfile builder (#194) (55ed662)

gitops-reverser: v0.29.0

0.29.0 (2026-06-30)

⚠ BREAKING CHANGES

• bumping crd versions and last edits
• validating webhook is required (even is audit has been configured).

Features

• --author-attribution={true|false} is now allowing you to enable or disable the need for kube-api configuration (at the cost of loosing the real author). (7860294)
• bumping crd versions and last edits (4fcffa3)
• CommitRequest can be attributed by validating webhook handler since it's an internal command (58dd37a)
• let's get all testing to Kubernetes 1.36 (905ff29)
• manifestanalyzer,git: refuse unsupported GitTarget folder content in the writer (6264d5d)
• refuse weird files in GitTarget path, but do allow .gittargetignore (1bf3820)
• reworking metrics to new architecture (b502afe)
• validating webhook is required (even is audit has been configured). (96ec390)
• watch-first ingestion (28389c9)
• watch: diff watch-derived vs audit-derived desired sets (Phase 1 payoff) (c8ba472)
• watch: parallel watch-state stream behind --watch-state-stream (097230b)
• watch: surface a refused GitTarget folder as a Blocked stream (5bdc43d)

Bug Fixes

• Allow GitTarget to respond quickly to changes in the tracked GitFolder (591d310)
• e2e: gate cluster readiness on healthy API discovery (5b81718)
• green CI — guard anonymous-access nil deref and skip audit webhook TLS for committer-only e2e (1e23e16)
• wainting for the right status to return (cc701d6)

Documentation

• adding skills and working on status design (e55b63a)
• created new plan, and hopefully found why the tests are so flaky (9e610e6)
• designing gittargetignore (19ffc7e)
• final review on architecture.md (046b538)
• moving architecture along with the rewrite (6e1193a)

Installation

Quick Install (Single YAML)

kubectl apply -f https://github.com/ConfigButler/gitops-reverser/releases/download/gitops-reverser-v0.29.0/install.yaml

Helm Chart

helm install gitops-reverser oci://ghcr.io/configbutler/charts/gitops-reverser --version 0.29.0

Docker Images

This release is available as a Docker image:

docker pull ghcr.io/configbutler/gitops-reverser:0.29.0
docker pull ghcr.io/configbutler/gitops-reverser:latest

Platforms: linux/amd64, linux/arm64

gitops-reverser: v0.28.0

0.28.0 (2026-06-24)

⚠ BREAKING CHANGES

• api: the configbutler.ai API group is now served only at v1alpha2; v1alpha1 manifests and clients must be updated to v1alpha2.
• providerRef no longer accepts a Flux GitRepository (group/kind enum values removed), and the per-Secret insecure_ignore_host_key key is replaced by the --insecure-allow-missing-known-hosts controller flag. See docs/UPGRADING.md for migration steps.

Features

• /readyz now waits for healthy audit ingress and valid pingable Reds connection (c10a4da)
• api: rename API group version v1alpha1 -> v1alpha2 (a7c4dcd)
• commitrequest: controller-driven, audit-attributed finalize (C-B2) (cc426d8)
• commitrequest: eager message attach (stage 4) (d5113a1)
• commitrequest: resolve-on-push with the pushed SHA (stage 5) (c9093d3)
• commitrequest: the Rejected outcome with a structured reason (stage 6) (d800fb4)
• demand driven audit ingestion (only for types that we need) (dbfce5e)
• immutable gittargets and gitdestinations (167a800)
• prevent nested gittargets (c407fa4)
• read Flux/Argo credential Secrets; drop Flux GitRepository providerRef (fc7a765)
• rename snapshotTemplate to reconcileTemplate, and default now includes type and last resourceVersion (e26676d)
• require value for GitTarget.Path, since hooking up GitTarget to repo root must be deliberate (39e02a6)
• status: two-axis GitTarget status (Ready + Synced/phase), serviceability roll-up (cea0b35)
• stream: /scale rides the parent type's stream (DEC-A, stages C-A1+C-A2) (4741e66)
• support flexible manifest placement / editting (d43d268)
• support for subresources (working kubectl scale deployment) (0f34d50)
• typeset,watch: M12 first slices — type lifecycle events + per-type reconcile/sweep (e3f0bd8)
• typeset: registry owns discovery grace; catalog shrunk to a per-scan normalizer (6d0dba4)
• watch: CommitRequest watermark barrier primitive (C-B1) (781bfd6)

Bug Fixes

• controller: retry Declare on the settle cadence instead of stalling 10m (b4cafce)
• git: push a window closed by a no-op resync (stage 3) (103ad36)
• heal: drain a deferred heal when an atomic finalizes the window; fix drifted comments (23c881b)
• heal: restore periodic checkpoint healing via a deferred-until-idle heal resync (9a06fe8)
• materialization: retry a failed Declare-time initial backfill (af6c5b8)
• prevent PrepareBranch call for cold cases (f760c36)
• watch: only backfill-reconcile a type on its first TypeSynced (8f2ad84)

Documentation

• adding designs with use cases (31b7857)
• and simpler (c27f7ab)
• capture contextual-namespace + SOPS single-file decisions, add folder fixtures (1bd8af7)
• cleaning and moving to finished (bb79343)
• continue designing for this approach (27ba3db)
• desiging the next phase (c2d3ce8)
• fighting over abstractions, and what the exact value is of certain parts (f9227fc)
• getting all design docs together so that we can cleanup (17339c0)
• getting audit ingestion (63de7d8)
• getting better (7bd1f32)
• getting docs in line and reporting on current findings (76929d8)
• getting more details in the plan (135820b)
• getting the plan ready for execution (6eb3787)
• let clean it up a little bit for now (026443a)
• Let's just commit it then (401d194)
• materialization: correct the stale watch-first sync comment; scope Slice D (c3e6122)
• planning the implementation (d6e174b)
• reconcile residual-flake findings across the stream design docs (90a1e7e)
• the plan is ambitious now I would say (24457fb)
• typeset-grace: pin the exact typeset surface, consumers, and per-stage interface delta (8e45ff8)
• working on refining the design of this new pipeline (7b15e2d)
• working on vision docs (394d8bf)

Installation

Quick Install (Single YAML)

kubectl apply -f https://github.com/ConfigButler/gitops-reverser/releases/download/gitops-reverser-v0.28.0/install.yaml

Helm Chart

helm install gitops-reverser oci://ghcr.io/configbutler/charts/gitops-reverser --version 0.28.0

Docker Images

This release is available as a Docker image:

docker pull ghcr.io/configbutler/gitops-reverser:0.28.0
docker pull ghcr.io/configbutler/gitops-reverser:latest

Platforms: linux/amd64, linux/arm64

gitops-reverser: v0.27.1

0.27.1 (2026-06-02)

Bug Fixes

• readds support for wildcards (8e1b3ab)

Installation

Quick Install (Single YAML)

kubectl apply -f https://github.com/ConfigButler/gitops-reverser/releases/download/gitops-reverser-v0.27.1/install.yaml

Helm Chart

helm install gitops-reverser oci://ghcr.io/configbutler/charts/gitops-reverser --version 0.27.1

Docker Images

This release is available as a Docker image:

docker pull ghcr.io/configbutler/gitops-reverser:0.27.1
docker pull ghcr.io/configbutler/gitops-reverser:latest

Platforms: linux/amd64, linux/arm64

gitops-reverser: v0.27.0

0.27.0 (2026-06-02)

Features

• count loc (f819e9a)

Bug Fixes

• improve and test GitTarget isolation behaviour (0787b1b)
• prevent race in creating gitea org (ddbcbb3)
• race condition in HelmRelease causing unstable e2e tests (03b95ab)
• upgrade to latest a apiservice-audit-proxy should resolve our non 0 shallow events, also included tests to verify that we don't misread deletecollection events as shallow (903d792)

Documentation

• initial docs (also some findings from preps for Cozysummit) (fbbfcec)
• Phase 2.5 status + Monday resume plan (3-agent CI green once; stability TBD) (b285ac5)
• record Phase 2.5 implementation status and measured impact (dba83ac)

Installation

Quick Install (Single YAML)

kubectl apply -f https://github.com/ConfigButler/gitops-reverser/releases/download/gitops-reverser-v0.27.0/install.yaml

Helm Chart

helm install gitops-reverser oci://ghcr.io/configbutler/charts/gitops-reverser --version 0.27.0

Docker Images

This release is available as a Docker image:

docker pull ghcr.io/configbutler/gitops-reverser:0.27.0
docker pull ghcr.io/configbutler/gitops-reverser:latest

Platforms: linux/amd64, linux/arm64

gitops-reverser: v0.26.3

0.26.3 (2026-05-25)

Bug Fixes

• showing spec.message at commitrequests (54225eb)

Installation

Quick Install (Single YAML)

kubectl apply -f https://github.com/ConfigButler/gitops-reverser/releases/download/gitops-reverser-v0.26.3/install.yaml

Helm Chart

helm install gitops-reverser oci://ghcr.io/configbutler/charts/gitops-reverser --version 0.26.3

Docker Images

This release is available as a Docker image:

docker pull ghcr.io/configbutler/gitops-reverser:0.26.3
docker pull ghcr.io/configbutler/gitops-reverser:latest

Platforms: linux/amd64, linux/arm64

gitops-reverser: v0.26.2

0.26.2 (2026-05-25)

Bug Fixes

• allow generated names with a commit request (#155) (ff27eba)

Installation

Quick Install (Single YAML)

kubectl apply -f https://github.com/ConfigButler/gitops-reverser/releases/download/gitops-reverser-v0.26.2/install.yaml

Helm Chart

helm install gitops-reverser oci://ghcr.io/configbutler/charts/gitops-reverser --version 0.26.2

Docker Images

This release is available as a Docker image:

docker pull ghcr.io/configbutler/gitops-reverser:0.26.2
docker pull ghcr.io/configbutler/gitops-reverser:latest

Platforms: linux/amd64, linux/arm64

gitops-reverser: v0.26.1

0.26.1 (2026-05-23)

Bug Fixes

• ignore subresource audit events (that was hard to debug!) and replaced debug dump mechanism (#153) (23a2d65)

Installation

Quick Install (Single YAML)

kubectl apply -f https://github.com/ConfigButler/gitops-reverser/releases/download/gitops-reverser-v0.26.1/install.yaml

Helm Chart

helm install gitops-reverser oci://ghcr.io/configbutler/charts/gitops-reverser --version 0.26.1

Docker Images

This release is available as a Docker image:

docker pull ghcr.io/configbutler/gitops-reverser:0.26.1
docker pull ghcr.io/configbutler/gitops-reverser:latest

Platforms: linux/amd64, linux/arm64

gitops-reverser: v0.26.0

0.26.0 (2026-05-22)

Features

• metrics overhaul as a step into more observability (1a7cd19)
• support --additionalSensitiveResources (in addition to v1/secrets) (3ae1ebd)

Bug Fixes

• audit messages that indicate conflict (409) can't end up in Git anymore (should never happen given that they also don't end up in etcd). (ec47c52)
• central APIResourceCatalog so that we have one abstraction/cache to which things the current apiserver is serving. (3d6cb62)
• gate audit body joins by rule relevance (605964a)
• reconicle fail on restart and wildcard (26511a9)
• timing issues when adding a new WatchRule in e2e: simplifying the ingestion resolves this (a688620)

Documentation

• planning and designing for new features (856beee)

Installation

Quick Install (Single YAML)

kubectl apply -f https://github.com/ConfigButler/gitops-reverser/releases/download/gitops-reverser-v0.26.0/install.yaml

Helm Chart

helm install gitops-reverser oci://ghcr.io/configbutler/charts/gitops-reverser --version 0.26.0

Docker Images

This release is available as a Docker image:

docker pull ghcr.io/configbutler/gitops-reverser:0.26.0
docker pull ghcr.io/configbutler/gitops-reverser:latest

Platforms: linux/amd64, linux/arm64

gitops-reverser: v0.25.0

0.25.0 (2026-05-21)

Features

• support "offical_first" for situations where the offical kube-api audit events arrives slightly before the additional body event. (380dc1e)
• support claim based commit author attribution (06eaf8c)

Bug Fixes

• better reconcile (f3dcf56)
• watch for changes in dependent resources (8c9aeb8), closes #145

Documentation

• getting more whys into the architecture document (5762a4a)

Installation

Quick Install (Single YAML)

kubectl apply -f https://github.com/ConfigButler/gitops-reverser/releases/download/gitops-reverser-v0.25.0/install.yaml

Helm Chart

helm install gitops-reverser oci://ghcr.io/configbutler/charts/gitops-reverser --version 0.25.0

Docker Images

This release is available as a Docker image:

docker pull ghcr.io/configbutler/gitops-reverser:0.25.0
docker pull ghcr.io/configbutler/gitops-reverser:latest

Platforms: linux/amd64, linux/arm64