● Covered by 1 source · 1 reportMedium impact1 neutral
Flux Introduces Mirror Plugin for Gitless GitOps and Artifact Mirroring
Key points
- Flux Mirror is a CLI plugin for Flux v2.9.
- Mirrors container images, Helm charts, and OCI artifacts.
- Supports declarative configuration for mirroring.
- Addresses external registry dependencies and supply chain control.
Flux Mirror Release
Flux has launched Flux Mirror, a new CLI plugin designed to mirror container images, Helm charts, and OCI artifacts between different registries. This plugin is integrated into the Flux v2.9 CLI system and allows for declarative configuration of mirroring operations. The introduction of Flux Mirror aligns with the Flux project's shift towards a "Gitless GitOps" model, where OCI registries become the primary source of truth for desired state, rather than Git repositories at runtime.
Addressing Supply Chain Challenges
Flux Mirror aims to resolve operational issues stemming from artifacts hosted in registries outside an organization's direct control. The announcement cited examples such as Docker Hub rate limiting and Broadcom's decision to freeze the free Bitnami catalog in 2025. These instances highlight how external registry policies can unexpectedly impact production architectures, emphasizing the need for organizations to control their artifact sources.
Core Functionality
The plugin's scope covers three main artifact categories: container images, Helm charts, and Flux's own desired state artifacts. It can copy container images byte-for-byte, including multi-architecture manifest lists. Helm charts from HTTP repositories can be mirrored into OCI registries, and Flux's desired state artifacts can also be relocated. A configuration file defines the mirroring process, specifying sources and destinations, allowing teams to manage registry content as declarative state within version control.
Enhanced Control and Security
Flux Mirror consolidates container images, Helm charts, and Flux OCI desired state artifacts into a single relocation workflow. It republishes HTTP-based Helm charts as deterministic OCI artifacts, enabling Flux to consume them without relying on upstream chart indices. The plugin also incorporates a selector pipeline using regular expressions, semantic version constraints, sorting, and top N limiting, ensuring that only necessary versions are mirrored. Additionally, Flux Mirror can verify Cosign signatures and identity information to confirm that each artifact was signed by an authorized entity before copying, enhancing supply chain security.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
Reporting from
Flux has released Flux Mirror, a CLI plugin for mirroring container images, Helm charts, and OCI artifacts between registries using a declarative configuration. This tool enables Kubernetes clusters to reconcile from self-operated registries, addressing supply chain vulnerabilities and external registry policy changes like Docker Hub rate limiting or Bitnami catalog freezes.