---
title: "Flux Roadmap"
linkTitle: "Roadmap"
description: "Flux and the GitOps Toolkit roadmap."
weight: 90
type: page
---

# Flux Roadmap

{{% alert color="info" title="Production readiness" %}}
The Flux latest [beta and stable APIs](/flux/components/)
(including their reconcilers) are well tested and safe to use in production environments.
The beta APIs will be replaced in time with stable versions.

To learn more about Flux supported versions and release cadence,
please see the [Flux release process](/flux/releases/).
{{% /alert %}}

## Milestones

The Flux project roadmap is divided into milestones representing minor releases,
each with a set of goals and tasks. The milestones marked as **provisional** are
subject to change based on the project's priorities and the community's feedback.

Please note that the Flux maintainers prioritize fixes to defects affecting GA APIs
and security issues over new features. Depending on the volume of incoming issues and
the complexity of the fixes, the roadmap may be adjusted and new features
may be postponed to the next milestone.

### v2.8 (Q1 2026)

**Status**: Completed - [Flux v2.8 GA](https://fluxcd.io/blog/2026/02/flux-v2.8.0/)

The primary goal of this milestone is to add support for Helm v4 to helm-controller,
and to reduce the mean time to recovery (MTTR) for app deployments.

- **OCI integrations**
  - [x] [Add support for verification with cosign v3](https://github.com/fluxcd/source-controller/issues/1923)

- **Helm integrations**
  - [x] [Add support for Helm v4 to helm-controller](https://github.com/fluxcd/helm-controller/issues/1300)
  - [x] [Add support for server-side apply](https://github.com/fluxcd/helm-controller/issues/1381)
  - [x] [Reduce the mean time to recovery (MTTR) in case of failed deployments](https://github.com/fluxcd/helm-controller/pull/1392)
  - [x] [Add support for custom health checks via CEL expressions](https://github.com/fluxcd/helm-controller/issues/1382)
  - [x] [Keep track of managed objects in `.status.inventory`](https://github.com/fluxcd/helm-controller/issues/1352)

- **Kustomize integrations**
  - [x] [Reduce the mean time to recovery (MTTR) in case of failed deployments](https://github.com/fluxcd/kustomize-controller/pull/1536)
  - [x] [Introduce custom SSA stage](https://github.com/fluxcd/kustomize-controller/pull/1571)

- **Git integrations**
  - [x] [Support looking up GitHub App installation ID from repository owner](https://github.com/fluxcd/pkg/issues/1065)

- **Alerting integrations**
  - [x] [Support ArtifactGenerator notifications](https://github.com/fluxcd/source-watcher/issues/307)
  - [x] [Introduce `githubpullrequestcomment` notification provider](https://github.com/fluxcd/notification-controller/pull/1230)
  - [x] [Introduce `gitlabmergerequestcomment` notification provider](https://github.com/fluxcd/notification-controller/pull/1231)
  - [x] [Introduce `giteapullrequestcomment` notification provider](https://github.com/fluxcd/notification-controller/pull/1234)

- **Source extensions**
  - [x] [Allow ExternalArtifact as a source in ArtifactGenerator](https://github.com/fluxcd/source-watcher/issues/259)
  - [x] [Allow HelmChart as a source in ArtifactGenerator](https://github.com/fluxcd/source-watcher/issues/260)
  - [x] [Implement tarball extraction in ArtifactGenerator](https://github.com/fluxcd/source-watcher/issues/301)

- **Conformance testing**
  - [x] End-to-end testing for Kubernetes 1.35

- **EOL and Deprecations**
  - End support for Flux v2.5.x
  - End support for Kubernetes v1.32.x
  - Remove deprecated APIs in the group `source.toolkit.fluxcd.io/v1beta2`
  - Remove deprecated APIs in the group `kustomize.toolkit.fluxcd.io/v1beta2`
  - Remove deprecated APIs in the group `helm.toolkit.fluxcd.io/v2beta2`

### v2.9 (Q2 2026)

**Status**: In Progress

The primary goal of this milestone is to add support for Flux CLI plugins,
extend Flux server-side apply with field ignore rules and enhance the secrets
decryption.

- **Helm integrations**
  - [x] [Allow empty kind in CEL health checks](https://github.com/fluxcd/flux2/issues/5858)
  - [x] [Add support for Helm post-render strategies](https://github.com/fluxcd/helm-controller/issues/1469) (**⚠️ breaking change**: default post-render strategy changed from `nohooks` to `combined`)
  - [x] [Add literal mode to `valuesFrom`](https://github.com/fluxcd/pkg/pull/1218) (mirror `helm --set-literal` semantics)

- **Kustomize integrations**
  - [x] [Add support for secrets decryption using Age post-quantum cipher](https://github.com/fluxcd/kustomize-controller/pull/1601)
  - [x] [Add `.spec.buildMetadata` optional field to Kustomization API](https://github.com/fluxcd/kustomize-controller/pull/1632)
  - [x] [Extend Server-Side Apply with field ignore rules](https://github.com/fluxcd/pkg/issues/696)
  - [x] [Allow empty kind in CEL health checks](https://github.com/fluxcd/flux2/issues/5858)
  - [x] [Add Kubernetes workload identity auth for OpenBao and Vault](https://github.com/fluxcd/kustomize-controller/pull/1659)

- **Git integrations**
  - [x] [Support Git commit signature verification using SSH keys](https://github.com/fluxcd/pkg/pull/1141)
  - [x] [Support Git commit signing with SSH keys in image-automation-controller](https://github.com/fluxcd/image-automation-controller/pull/1035)
  - [x] [Support Git commit signing with SSH keys in bootstrap](https://github.com/fluxcd/flux2/pull/5920)
  - [x] [Support AWS CodeCommit using Workload Identity auth](https://github.com/fluxcd/source-controller/issues/1978)

- **OCI integrations**
  - [x] [Add support for custom Sigstore trusted root](https://github.com/fluxcd/source-controller/pull/2003)

- **Source extensions**
  - [x] [SDK for facilitating the development of 3rd party controllers based on the `ExternalArtifact` API](https://github.com/fluxcd/flux2/issues/5504)
  - [x] [Add `commonMetadata` to ArtifactGenerator API](https://github.com/fluxcd/source-watcher/pull/333)

- **Image reflector controller**
  - [x] [Add alternative storage backend](https://github.com/fluxcd/image-reflector-controller/pull/895)

- **Webhook integrations**
  - [x] Require `email` and `audience` fields in the Secret referenced by GCR `Receivers` for OIDC ID token claim validation (**⚠️ breaking change**, see [CVE-2026-40109](https://github.com/fluxcd/notification-controller/security/advisories/GHSA-h9cx-xjg6-5v2w))
  - [x] [Support OIDC for generic Receiver (secret-less, secure Receiver)](https://github.com/fluxcd/notification-controller/issues/1305)
  - [x] [Add resource-level filter for Receiver](https://github.com/fluxcd/notification-controller/pull/1314)

- **CLI plugins**
  - [x] [Implement the Flux CLI Plugin System RFC](https://github.com/fluxcd/flux2/pull/5795)
  - [x] [Introduce the Flux Mirror Plugin](https://github.com/fluxcd/flux-mirror)
  - [x] [Introduce the Flux Schema Plugin](https://github.com/fluxcd/flux-schema)

- **CLI integrations**
  - [x] [Support namespace from kubeconfig](https://github.com/fluxcd/flux2/pull/5831)
  - [x] [Add `flux create secret receiver` command](https://github.com/fluxcd/flux2/pull/5835)
  - [x] [Add `--resolve-symlinks` flag to `flux build` and `flux push` artifact commands](https://github.com/fluxcd/flux2/issues/5055)
  - [x] [Add `--show-source` to `flux get ks` and `flux get hr` commands](https://github.com/fluxcd/flux2/pull/5828)
  - [x] [Add `--in-memory-build` to `flux build ks` and `flux diff ks` commands](https://github.com/fluxcd/flux2/pull/5794)
  - [x] [Add `flux trigger receiver` command](https://github.com/fluxcd/flux2/pull/5908)
  - [x] [Add support for AWS CodeCommit to `flux bootstrap git` command](https://github.com/fluxcd/flux2/pull/5868)

- **Conformance testing**
  - [x] End-to-end testing for Kubernetes 1.36

- **EOL and Deprecations**
  - End support for Flux v2.6.x
  - End support for Kubernetes v1.33.x
  - Remove deprecated APIs in the group `image.toolkit.fluxcd.io/v1beta2`
  - Remove deprecated APIs in the group `notification.toolkit.fluxcd.io/v1beta2`

### v2.10 (mid Q4 2026)

**Status**: Provisional

The primary goals of this milestone are making a generally available release for
the Flux Alerting APIs and integrating Flux with SPIFFE.

- **Alerting integrations**
  - [ ] Promote the `Event` API to `v1`
  - [ ] Promote the `Alert` API to `v1`
  - [ ] Promote the `Provider` API to `v1`
  - [ ] [Remove support for deprecated fields in Provider API v1](https://github.com/fluxcd/notification-controller/issues/1144)
  - [ ] [[RFC-0011] OTEL: Parent-Child Trace/Span Integration](https://github.com/fluxcd/flux2/issues/5510)
  - [ ] [Implement Kubernetes Event API v1](https://github.com/fluxcd/flux2/issues/5761)
  - [ ] [Custom Event Metadata from Object](https://github.com/fluxcd/flux2/issues/5946)
  - [ ] [Support templating for alerts](https://github.com/fluxcd/notification-controller/issues/1328)

- **SPIFFE integrations**
  - [ ] [Support JWT-SVID for exchanging credentials with OpenBao/Vault (SOPS), AWS, Azure and GCP](https://github.com/fluxcd/flux2/pull/5702)
  - [ ] [Support X509-SVID for exchanging credentials with AWS and GCP (Azure does not support it)](https://github.com/fluxcd/flux2/pull/5702)
  - [ ] [Support JWT-SVID for remote clusters and OCI registries that support OIDC](https://github.com/fluxcd/flux2/pull/5702)
  - [ ] [Support SPIFFE PKI for TLS and mTLS](https://github.com/fluxcd/flux2/pull/5702)

- **OCI integrations**
  - [ ] [Introduce support for ServiceAccount token in OCIRepository](https://github.com/fluxcd/source-controller/pull/1962)
  - [ ] Introduce support for ServiceAccount token in ImageRepository

- **Kustomize integrations**
  - [ ] [Extend DependencyReference to support arbitrary Kubernetes resource dependencies](https://github.com/fluxcd/kustomize-controller/pull/1653)

- **Helm integrations**
  - [ ] [Extend DependencyReference to support arbitrary Kubernetes resource dependencies](https://github.com/fluxcd/helm-controller/pull/1480)

- **CLI integrations**
  - [ ] Integrate `flux push artifact` and family with OIDC from CI platforms
  - [ ] Build external artifacts locally with `flux build ag`

- **Conformance testing**
  - [ ] End-to-end testing for Kubernetes 1.37

- **EOL and Deprecations**
  - End support for Flux v2.7.x
  - End support for Kubernetes v1.34.x
  - Deprecate APIs in the group `notification.toolkit.fluxcd.io/v1beta3`

## Request for comments

The [RFC process](https://github.com/fluxcd/flux2/tree/main/rfcs)
provides a consistent and controlled path for substantial changes to enter Flux.

To keep track of the Flux project's current direction and future plans, please see the following RFCs:

- [x] [RFC-0001](https://github.com/fluxcd/flux2/tree/main/rfcs/0001-authorization) Memorandum on the authorization model
- [x] [RFC-0002](https://github.com/fluxcd/flux2/tree/main/rfcs/0002-helm-oci) Flux OCI support for Helm
- [x] [RFC-0003](https://github.com/fluxcd/flux2/tree/main/rfcs/0003-kubernetes-oci) Flux OCI support for Kubernetes manifests
- [x] [RFC-0004](https://github.com/fluxcd/flux2/tree/main/rfcs/0004-insecure-http) Block insecure HTTP connections across Flux
- [x] [RFC-0005](https://github.com/fluxcd/flux2/tree/main/rfcs/0005-artifact-revision-and-digest) Artifact `Revision` format and introduction of `Digest`
- [x] [RFC-0006](https://github.com/fluxcd/flux2/tree/main/rfcs/0006-cdevents) Flux CDEvents Receiver
- [x] [RFC-0007](https://github.com/fluxcd/flux2/tree/main/rfcs/0007-git-repo-passwordless-auth) Passwordless authentication for Git repositories
- [x] [RFC-0008](https://github.com/fluxcd/flux2/tree/main/rfcs/0008-custom-event-metadata-from-annotations) Custom Event Metadata from Annotations
- [x] [RFC-0009](https://github.com/fluxcd/flux2/tree/main/rfcs/0009-custom-health-checks) Custom Health Checks for Kustomization using Common Expression Language(CEL)
- [x] [RFC-0010](https://github.com/fluxcd/flux2/tree/main/rfcs/0010-multi-tenant-workload-identity) Multi-Tenant Workload Identity
- [x] [RFC-0011](https://github.com/fluxcd/flux2/tree/main/rfcs/0011-opentelemetry-tracing) OpenTelemetry Tracing
- [x] [RFC-0012](https://github.com/fluxcd/flux2/blob/main/rfcs/0012-external-artifact/) External Artifact API
- [x] [RFC-0013](https://github.com/fluxcd/flux2/blob/main/rfcs/0013-cli-plugin-system/) Flux CLI Plugin System
- [ ] [RFC-XXXX](https://github.com/fluxcd/flux2/pull/5702) Vendor-Agnostic Short-Lived Credentials
- [ ] [RFC-XXXX](https://github.com/fluxcd/flux2/issues/5879) Advanced Dependency Management