Flux vs Prometheus
Side-by-side trajectory, velocity, and editorial themes.
Flux 2.9 turns the mature GitOps engine into an extensible, plugin-driven platform.
Flux, the CNCF GitOps controller, is a decade-old project shipping steady minor GAs. The feed mixes those releases with community and case-study blog posts (a 10-year retrospective, a Morgan Stanley scaling story, a Terraform bootstrap guide). On the product side, the 2.7–2.9 line has moved from GA-ing image update automation to Helm v4 support and now a first-class CLI plugin system.
Flux is investing in extensibility and keyless, quantum-resistant security: a plugin architecture that lets capabilities ship independently of the core CLI, post-quantum SOPS decryption, Workload Identity across more backends, and finer server-side apply control. The arc is toward a composable GitOps toolkit that large regulated fleets can extend without forking.
Expect the plugin catalog to grow beyond the initial Mirror and Schema plugins and the post-quantum and Workload Identity work to expand to more providers, with field-ignore and post-render controls becoming defaults as they stabilize.
Prometheus ships 3.13 LTS while hardening the 3.5 line against a steady drip of CVEs
Prometheus is running two supported tracks at once: the long-lived 3.5 LTS, which now takes near-monthly security-only patches, and the new 3.13 LTS, which lands a large batch of PromQL, service-discovery, and TSDB work. The bulk of recent releases are security maintenance and incremental engine improvements rather than new user-facing surface.
The center of gravity is experimental PromQL (start-timestamp-aware rate/increase, smoothed/anchored rate over native histograms, new scalar and search functions) and native-histogram maturation across TSDB and scrape. Alongside that runs a disciplined security cadence — sanitize-html bumps, credential-forwarding fixes on redirects, snappy-decode limits — backported across both LTS lines.
Expect 3.13.x to stabilize out of RC and continue the native-histogram and start-timestamp buildout behind feature flags, with the 3.5 LTS line receiving security-only patches as new CVEs surface.
See more alternatives to Flux →
See more alternatives to Prometheus →