Kluctl v2.25.0 comes with new features, improvements and fixes.

Breaking changes

Removal of the sealed-secrets integration

v2.25.0 finally removes the deprecated (and hidden) sealed-secrets integration. If you still use it, please switch to either SOPS or external-secrets.

New Features and Improvements

System Python support

Kluctl can now optionally use the system provided Python distribution instead of the embedded distribution. This can be enabled via the --use-system-python or via the KLUCTL_USE_SYSTEM_PYTHON=1 environment variable. This is mostly useful for maintainers of distributed packages, e.g. NixOS.

load_base64 function

You can now use load_base64 to load binary files and auto-convert these into their base64 representation.

Path prefix for the webui

The Webui can now be run under a non-root prefix, e.g. https://example.com/kluctl-webui/ instead of only https://example.com/. Use --path-prefix in the kluctl webui run command to set the path prefix. Also read the installation instructions for the Kluctl Webui.

Other new features

• kluctl helm-update will now also show the old version along updated versions.

Bugfixes and improvements

• The docker image now contains the gpg and gpg-agent packages so that SOPS with GPG is working properly.
• A few unnecessary warnings that happened while gathering orphan objects are now hidden.
• The batch.kubernetes.io/controller-uid labels inside Jobs are now ignored in diffs.
• Kluctl will not fail anymore when the local Git repo has no commits

Changelog

For a detailed list of changes, see the release comparison: https://github.com/kluctl/kluctl/compare/v2.24.0...v2.25.0