flux

Best Practices

• Use GitRepository with a specific branch or tag ref, not HEAD in production
• Set reconciliation intervals appropriate to change frequency (1m for critical, 10m for stable)
• Enable prune on Kustomization to remove deleted resources automatically
• Configure health checks in Kustomization to gate dependent deployments
• Use dependsOn in HelmRelease and Kustomization for ordering across resources
• Store sensitive values in Kubernetes Secrets and reference via valuesFrom
• Use ImagePolicy with semver range to auto-update container images
• Configure Alert and Provider for deployment status notifications
• Set suspend: true on Kustomization when manual gating is needed
• Use sourceRef consistently and avoid mixing Git sources per namespace
• Apply retention policies for HelmRelease history (maxHistory)
• Use OCI-based HelmRepository for registries that support it

Documentation Sources