u/stealthybox

hey friends, I wrote up a technique that we at the Flux project want to encourage folks to implement in their infra.
https://fluxcd.io/blog/2026/08/flux-mirror/

basically, bitnami's chart syncer became a non-option for a lot of people due to the license change ++ I've read my fair of load-bearing, hacky shell scripts for importing images into private registries. (also just people relying on public registries in prod)

we decided to implement Flux Mirror so you can somewhat declaratively import artifacts into your OCI own repos on a regular cadence.
it also supports migrating HTTP helm repos to OCI automatically.

notably, we implemented minimum age policies at import time based on signature timestamps.
we'd love feedback on these ideas or the UX of flux mirror itself

Hey friends, we have fresh guide about bootstrapping OpenBao as your KMS without any secrets.
Lots of Flux users use SOPS, and we also know there are a lot of folks using Vault and OpenBao.
We also show a sovereign key signing workflow that doesn't depend on any internet infra, and the demo has a reproducible repo. This is a really nice workload-identity use-case made possible with the tweaks we made to our SDK usage in Flux 2.9 :)

https://fluxcd.io/blog/2026/07/flux-openbao-secrets-signatures/