v0.8.0

Azure support related :

• Validate PEM type SSH key-pair (used for external OpenID provider associated with the Workload Identity setup).

• Scale to / from zero support for node-groups.

• Deploying Velero to provisioned cluster.

• Deploying Sealed Secrets backuper CRONJob to provisioned cluster.

• High performance networking using Cilium.

  Not possible, since we need to have an BGP router to do cross subnet traffic routing.

Bug fixes :

• After doing clusterctl move, CAPZ and ASO weren't able to authenticate with Microsoft Entra. Fixed that.

• After doing clusterctl move, sealed secrets weren't getting updated (to being signed by the provisioned cluster's Sealed Secrets key) in KubeAid. Fixed that.

Developer experience and CI related :

• Added golangci-lint, trivy and renovate configuration files.

• Fix all lint errors.

• Write a Gitea Actions workflow file, to run lint tests for each PR.

• Update the Github release actions workflow file, to do vulnerability scanning using Trivy and upload the results as GitHub artifacts.

• Instead of directly fetching binaries like azwi and clusterawsadm, fetch the source repository and use buildGoModule to build the binary intead. This way, it's easier to support all the OS + CPU architecture combinations.

• Creating KubeAid Bootstrap Script overlay. So I can install the kubeaid-bootstrap-script binary along with its runtime dependencies, in KubeAid Agent, using KubeAid Agent's nix flake.

  Ditched the idea of building multi-arch container images using Nix.
  Not worth the time as of now.

**Related changes in KubeAid ** :

• added azure-workload-identity-webhook KubeAid chart

• consuming service account issuer keys from Kubernetes Secret

• removing root account password for each node

Signed-off-by: Archisman archisman@obmondo.com