Flux Image Reflect Quick Fix - ImageRepository Configuration

Flux ImageRepository scans container registries for image versions and updates policies. Misconfigured scan intervals or tag filters cause missed or excessive image updates. This guide covers the fix.

Quick Fix

Wrong

apiVersion: image.toolkit.fluxcd.io/v1beta2
kind: ImageRepository
metadata:
  name: app-image
spec:
  interval: 1m
  image: ghcr.io/org/my-app

The issue: interval: 1m is too frequent and may hit registry rate limits. No exclusion or filter for tags, so Flux scans all tags including build artifacts.

Right

apiVersion: image.toolkit.fluxcd.io/v1beta2
kind: ImageRepository
metadata:
  name: app-image
spec:
  interval: 10m
  image: ghcr.io/org/my-app
  secretRef:
    name: registry-auth
  exclusion:
  - '^.*-rc.*$'
  - '^.*-beta.*$'

# Expected output after applying the fix
# ImageRepository scanning ghcr.io/org/my-app every 10m
# Excludes release candidates and beta tags
# Tag list updated in image policy
# Status: True (Ready)

Prevention

• Set interval to 10m or higher to avoid rate limits
• Use exclusion regex patterns to filter out unwanted tags
• Use filter patterns with semver for production image policies
• Configure secretRef for private registry authentication
• Monitor scan status with kubectl get imagerepository

DodaTech Tools

Doda Browser's image scanner shows available tags and scan history. DodaZIP archives image repository configurations. Durga Antivirus Pro validates image sources.

FAQ