Releases: PlatformRelay/MKurator
Release list
MKurator 0.12.2
0.12.2 - 2026-07-10
Breaking Changes
-
crds: Add generated+augmented Queue reference page (DOC-7 pilot) (#91) 848747c
-
ci: Phase C e2e pyramid and CI filters 9c9fe52
-
e2e: Phase C PR labels and main Helm pass d1eff5d
-
e2e: Phase C pyramid trim and CI labels 72c186c
-
e2e: Parallel MQ lanes and single deploy 9aaaa55
Bug Fixes
-
validation: Satisfy lint for v1beta1 admission 94b49b6
-
task: Prefer valid kind kubeconfig path 66cf2db
-
e2e: Use USERMAP mcaUser drift for observe-only spec 1056bc9
-
auth: USERMAP drift polish and validation breadth (AUTH-3b) 4a3ed71
-
ci: Use gitleaks CLI for org repo secret scan bd23f0d
-
api: Keep MQObject interface out of api package 20559e9
-
controller: Classify events via typed wrap errors 403f8d9
-
controller: Observe-only auth skips SET when missing fdb8d55
-
controller: Requeue workloads after finalizer add 1f0962e
-
controller: Stabilize QMC Ready under secret watch 09ec4f1
-
controller: Preserve QMC Ready on transient ping 9df6b39
-
mqrest: Identity-keyed cache with replace-on-rotation 2d99fbc
-
validation: Harden CHLAUTH/AUTHREC MQSC fields 43f6974
-
controller: Deletion before connection chain (ADR-0022) c483ac0
-
controller: Release without Secret; stop QMC hot loop 5e24f03
-
ci: Stop release tags from failing GitHub Pages deploy c894ae2
-
test: Stabilize Helm e2e metrics and raise coverage floor 0f2449e
-
mqrest: Treat AUTHREC NONE as not found 2c1aee8
-
ci: Expose CODECOV_TOKEN on test job env 011f545
-
ci: Skip Codecov without invalid secrets if 48b89a4
-
ci: Unblock verify, codecov, and e2e CI 75866b3
-
test: Bound kubectl in MQ e2e cleanup d298d20
-
test: Define kurator-system namespace in helpers e8e69d4
-
test: Prevent e2e AfterSuite undeploy hang 0930ebc
-
ci: Use git-cliff-action content for release notes 9fad692
-
test: Make AfterEach kubectl delete non-blocking e3a926d
-
test: Stabilize parallel MQ e2e lanes ad324a0
-
test: Avoid corrupt merged coverage.out dc7add6
-
rbac: Allow events.k8s.io for controller be9f9db
-
test: Let Helm e2e own kurator-system namespace b0685b1
-
deps: Update kubernetes packages c1376e1
-
deps: Update go dependencies 31386bc
-
helm: Add auth CR RBAC and verify in helm:lint c9c8688
-
ci: Repair Renovate workflow permissions and token 22cd170
-
ci: Drop invalid workflows permission from Renovate job 9e4fe1e
-
ci: Configure Renovate repository target and token 3d598b6
-
ci: Migrate renovate config for v43 1208bb1
-
ci: Flock mutex for e2e and integration suites f0b4227
-
e2e: Drop deprecated ginkgo.progress flag 8185002
-
mqrest: Treat empty AUTHREC authorities as not found 15b8c4d
-
auth: Unblock ChannelAuthRule delete and e2e waits 718dff1
-
ci: Skip generated files in format:check diff 4c2053a
-
auth: Parse DISPLAY text and correct SET AUTHREC MQSC 8b1075d
-
samples: Unify deploy:samples for kind e9d6849
-
e2e: Deploy operator via task deploy ff1091e
-
task: Propagate KURATOR_E2E_MQ into test:e2e task env 0df9a9a
-
e2e: Race-safe subprocess output and webhook assertion 867a201
-
task: Resolve kustomize path with go tool -n e40a0a0
-
samples: Let kustomization set namespace on Helm samples 64f82b9
-
ci: Bump Go 1.26.4 and sync verify artifacts adb9b87
-
ci: Align CRDs with go tool controller-gen 9c56489
-
makefile: Use go tool kustomize for deploy targets 87250df
-
e2e: Wait for webhook cert and rollout before MQ tests 4456aec
-
config: Fix webhook kustomize for e2e make deploy 9307cb9
-
webhook: Fix unit test race under -race 86e1f8c
-
makefile: Apply CRDs from bases on make install f740052
-
test: Pass QueueSpec to GetQueue in MQ e2e [6bf3...
MKurator 0.12.1
0.12.1 - 2026-07-08
Container image
ghcr.io/conduit-ops/mkurator:0.12.1
Multi-arch (linux/amd64, linux/arm64), distroless nonroot base.
OCI attestations (SBOM + SLSA provenance) are attached in GHCR. Verify the signature:
cosign verify \
--certificate-oidc-issuer https://token.actions.githubusercontent.com \
--certificate-identity-regexp '^https://github.com/conduit-ops/MKurator/.+' \
ghcr.io/conduit-ops/mkurator@sha256:64c0e3bf7506a90b002b15fa67c192804f4d27343a11838e4113625ecd54cb82Install (Kustomize)
kubectl apply -f install-crds.yaml
kubectl apply -f install.yamlInstall (Helm — OCI)
helm upgrade --install mkurator oci://ghcr.io/conduit-ops/mkurator \
--version 0.12.1 \
--namespace mkurator-system \
--create-namespace \
--set image.repository=ghcr.io/conduit-ops/mkurator \
--set image.tag=0.12.1Install (Helm — GitHub Release tarball)
helm upgrade --install mkurator mkurator-0.12.1.tgz \
--namespace mkurator-system \
--create-namespace \
--set image.repository=ghcr.io/conduit-ops/mkurator \
--set image.tag=0.12.1Verify checksums with sha256sum -c checksums.txt.
MKurator 0.12.0
0.12.0 - 2026-07-08
Bug Fixes
- validation: Satisfy lint for v1beta1 admission 2fd2371
Features
-
webhook: Add v1beta1 validating admission 077d607
-
samples: Default sample CRs to v1beta1 (8d-4) 402457c
-
webhook: Conversion webhook for v1beta1 hub (8d-2) 37b5fc4
-
api: Scaffold v1beta1 types and multi-version CRDs (8d-1) (#71) (#71, )037b0f3
Refactoring
- webhook: Split v1beta1 envtest suite 6c6f050
Container image
ghcr.io/conduit-ops/mkurator:0.12.0
Multi-arch (linux/amd64, linux/arm64), distroless nonroot base.
OCI attestations (SBOM + SLSA provenance) are attached in GHCR. Verify the signature:
cosign verify \
--certificate-oidc-issuer https://token.actions.githubusercontent.com \
--certificate-identity-regexp '^https://github.com/conduit-ops/MKurator/.+' \
ghcr.io/conduit-ops/mkurator@sha256:35619561c0dc095c259ac744a27f2d9ee2e775f265ccd31381fe7f9e18bd062fInstall (Kustomize)
kubectl apply -f install-crds.yaml
kubectl apply -f install.yamlInstall (Helm — OCI)
helm upgrade --install mkurator oci://ghcr.io/conduit-ops/mkurator \
--version 0.12.0 \
--namespace mkurator-system \
--create-namespace \
--set image.repository=ghcr.io/conduit-ops/mkurator \
--set image.tag=0.12.0Install (Helm — GitHub Release tarball)
helm upgrade --install mkurator mkurator-0.12.0.tgz \
--namespace mkurator-system \
--create-namespace \
--set image.repository=ghcr.io/conduit-ops/mkurator \
--set image.tag=0.12.0Verify checksums with sha256sum -c checksums.txt.
MKurator 0.11.1
0.11.1 - 2026-06-18
Features
Container image
ghcr.io/conduit-ops/mkurator:0.11.1
Multi-arch (linux/amd64, linux/arm64), distroless nonroot base.
OCI attestations (SBOM + SLSA provenance) are attached in GHCR. Verify the signature:
cosign verify \
--certificate-oidc-issuer https://token.actions.githubusercontent.com \
--certificate-identity-regexp '^https://github.com/conduit-ops/MKurator/.+' \
ghcr.io/conduit-ops/mkurator@sha256:914c972078c5ec7b3cadd716832ac45ed6fadd7be51429dc3bb819ffb4a70740Install (Kustomize)
kubectl apply -f install-crds.yaml
kubectl apply -f install.yamlInstall (Helm — OCI)
helm upgrade --install mkurator oci://ghcr.io/conduit-ops/mkurator \
--version 0.11.1 \
--namespace mkurator-system \
--create-namespace \
--set image.repository=ghcr.io/conduit-ops/mkurator \
--set image.tag=0.11.1Install (Helm — GitHub Release tarball)
helm upgrade --install mkurator mkurator-0.11.1.tgz \
--namespace mkurator-system \
--create-namespace \
--set image.repository=ghcr.io/conduit-ops/mkurator \
--set image.tag=0.11.1Verify checksums with sha256sum -c checksums.txt.
MKurator 0.11.0
0.11.0 - 2026-06-18
Features
-
auth: AUTHREC channel/namelist profile parity (AUTH-9) 5edc84f
-
channel: Add RCVR receiver channel type (AUTH-8b) d63c95a
-
channel: Add SDR sender channel type (AUTH-8a) (#63) (#63, )50c7bcb
-
mqrest: Wire share DISPLAY probe into queue drift (Day 27 MQ-3) (#62) (#62, )fa61d3f
Container image
ghcr.io/conduit-ops/mkurator:0.11.0
Multi-arch (linux/amd64, linux/arm64), distroless nonroot base.
OCI attestations (SBOM + SLSA provenance) are attached in GHCR. Verify the signature:
cosign verify \
--certificate-oidc-issuer https://token.actions.githubusercontent.com \
--certificate-identity-regexp '^https://github.com/conduit-ops/MKurator/.+' \
ghcr.io/conduit-ops/mkurator@sha256:86698e1a925c8f1c17cbd87b31a288a242771afcf2385a9ed408b49566037424Install (Kustomize)
kubectl apply -f install-crds.yaml
kubectl apply -f install.yamlInstall (Helm — OCI)
helm upgrade --install mkurator oci://ghcr.io/conduit-ops/mkurator \
--version 0.11.0 \
--namespace mkurator-system \
--create-namespace \
--set image.repository=ghcr.io/conduit-ops/mkurator \
--set image.tag=0.11.0Install (Helm — GitHub Release tarball)
helm upgrade --install mkurator mkurator-0.11.0.tgz \
--namespace mkurator-system \
--create-namespace \
--set image.repository=ghcr.io/conduit-ops/mkurator \
--set image.tag=0.11.0Verify checksums with sha256sum -c checksums.txt.
MKurator 0.10.0
0.10.0 - 2026-06-18
Features
Container image
ghcr.io/conduit-ops/mkurator:0.10.0
Multi-arch (linux/amd64, linux/arm64), distroless nonroot base.
OCI attestations (SBOM + SLSA provenance) are attached in GHCR. Verify the signature:
cosign verify \
--certificate-oidc-issuer https://token.actions.githubusercontent.com \
--certificate-identity-regexp '^https://github.com/conduit-ops/MKurator/.+' \
ghcr.io/conduit-ops/mkurator@sha256:b4e637a396e5e9c99424381d6a36b03498bf88a0bd2b78a14436b13bb49d0a4dInstall (Kustomize)
kubectl apply -f install-crds.yaml
kubectl apply -f install.yamlInstall (Helm — OCI)
helm upgrade --install mkurator oci://ghcr.io/conduit-ops/mkurator \
--version 0.10.0 \
--namespace mkurator-system \
--create-namespace \
--set image.repository=ghcr.io/conduit-ops/mkurator \
--set image.tag=0.10.0Install (Helm — GitHub Release tarball)
helm upgrade --install mkurator mkurator-0.10.0.tgz \
--namespace mkurator-system \
--create-namespace \
--set image.repository=ghcr.io/conduit-ops/mkurator \
--set image.tag=0.10.0Verify checksums with sha256sum -c checksums.txt.
MKurator 0.9.6
0.9.6 - 2026-06-17
Bug Fixes
-
e2e: Serialize suite teardown on process 1 (#57) (#57, )bea6b20
-
task: Prefer valid kind kubeconfig path 0e9ce20
Refactoring
- mqrest: Table-drive CHLAUTH auth unit tests 086996b
Merge
-
Bring task and docs fixes from chore/tst-4-blockaddr-default-samples e39dd25
-
Bring kubeconfig task fix from chore/tst-4-blockaddr-default-samples c42194f
Container image
ghcr.io/conduit-ops/mkurator:0.9.6
Multi-arch (linux/amd64, linux/arm64), distroless nonroot base.
OCI attestations (SBOM + SLSA provenance) are attached in GHCR. Verify the signature:
cosign verify \
--certificate-oidc-issuer https://token.actions.githubusercontent.com \
--certificate-identity-regexp '^https://github.com/conduit-ops/MKurator/.+' \
ghcr.io/conduit-ops/mkurator@sha256:d6401026d889eea6865287207272c0444a07a862647dfb6a58590d34aa62e9a5Install (Kustomize)
kubectl apply -f install-crds.yaml
kubectl apply -f install.yamlInstall (Helm — OCI)
helm upgrade --install mkurator oci://ghcr.io/conduit-ops/mkurator \
--version 0.9.6 \
--namespace mkurator-system \
--create-namespace \
--set image.repository=ghcr.io/conduit-ops/mkurator \
--set image.tag=0.9.6Install (Helm — GitHub Release tarball)
helm upgrade --install mkurator mkurator-0.9.6.tgz \
--namespace mkurator-system \
--create-namespace \
--set image.repository=ghcr.io/conduit-ops/mkurator \
--set image.tag=0.9.6Verify checksums with sha256sum -c checksums.txt.
MKurator 0.9.5
0.9.5 - 2026-06-14
Bug Fixes
- e2e: Use USERMAP mcaUser drift for observe-only spec 36e042c
Container image
ghcr.io/conduit-ops/mkurator:0.9.5
Multi-arch (linux/amd64, linux/arm64), distroless nonroot base.
OCI attestations (SBOM + SLSA provenance) are attached in GHCR. Verify the signature:
cosign verify \
--certificate-oidc-issuer https://token.actions.githubusercontent.com \
--certificate-identity-regexp '^https://github.com/conduit-ops/MKurator/.+' \
ghcr.io/conduit-ops/mkurator@sha256:7c5373b7ad459e4ba3bba3560297b3e70a6a941d5cb9f3e47a53fc2c29d87b1eInstall (Kustomize)
kubectl apply -f install-crds.yaml
kubectl apply -f install.yamlInstall (Helm — OCI)
helm upgrade --install mkurator oci://ghcr.io/conduit-ops/mkurator \
--version 0.9.5 \
--namespace mkurator-system \
--create-namespace \
--set image.repository=ghcr.io/conduit-ops/mkurator \
--set image.tag=0.9.5Install (Helm — GitHub Release tarball)
helm upgrade --install mkurator mkurator-0.9.5.tgz \
--namespace mkurator-system \
--create-namespace \
--set image.repository=ghcr.io/conduit-ops/mkurator \
--set image.tag=0.9.5Verify checksums with sha256sum -c checksums.txt.
MKurator 0.9.4
0.9.4 - 2026-06-14
Bug Fixes
- auth: USERMAP drift polish and validation breadth (AUTH-3b) 1a064fb
Features
-
auth: QMGRMAP CHLAUTH remoteQueueManager field d113d4f
-
channelauth: SSLPEERMAP CHLAUTH CRD and mqrest 68ea774
-
channelauthrule: USERMAP CHLAUTH CRD and mqrest SET 8f09d62
Container image
ghcr.io/conduit-ops/mkurator:0.9.4
Multi-arch (linux/amd64, linux/arm64), distroless nonroot base.
OCI attestations (SBOM + SLSA provenance) are attached in GHCR. Verify the signature:
cosign verify \
--certificate-oidc-issuer https://token.actions.githubusercontent.com \
--certificate-identity-regexp '^https://github.com/conduit-ops/MKurator/.+' \
ghcr.io/conduit-ops/mkurator@sha256:ca7331eaf139a7f77d8fdcd5401ee0e32537849f74910e03bfc52e21ccbd1129Install (Kustomize)
kubectl apply -f install-crds.yaml
kubectl apply -f install.yamlInstall (Helm — OCI)
helm upgrade --install mkurator oci://ghcr.io/conduit-ops/mkurator \
--version 0.9.4 \
--namespace mkurator-system \
--create-namespace \
--set image.repository=ghcr.io/conduit-ops/mkurator \
--set image.tag=0.9.4Install (Helm — GitHub Release tarball)
helm upgrade --install mkurator mkurator-0.9.4.tgz \
--namespace mkurator-system \
--create-namespace \
--set image.repository=ghcr.io/conduit-ops/mkurator \
--set image.tag=0.9.4Verify checksums with sha256sum -c checksums.txt.
MKurator 0.9.3
0.9.3 - 2026-06-14
Features
Container image
ghcr.io/conduit-ops/mkurator:0.9.3
Multi-arch (linux/amd64, linux/arm64), distroless nonroot base.
OCI attestations (SBOM + SLSA provenance) are attached in GHCR. Verify the signature:
cosign verify \
--certificate-oidc-issuer https://token.actions.githubusercontent.com \
--certificate-identity-regexp '^https://github.com/conduit-ops/MKurator/.+' \
ghcr.io/conduit-ops/mkurator@sha256:31c11d975a499d8e0fb3ca40eeab04cb9a1a3cb2eed7c5dfcbd739d91a46556eInstall (Kustomize)
kubectl apply -f install-crds.yaml
kubectl apply -f install.yamlInstall (Helm — OCI)
helm upgrade --install mkurator oci://ghcr.io/conduit-ops/mkurator \
--version 0.9.3 \
--namespace mkurator-system \
--create-namespace \
--set image.repository=ghcr.io/conduit-ops/mkurator \
--set image.tag=0.9.3Install (Helm — GitHub Release tarball)
helm upgrade --install mkurator mkurator-0.9.3.tgz \
--namespace mkurator-system \
--create-namespace \
--set image.repository=ghcr.io/conduit-ops/mkurator \
--set image.tag=0.9.3Verify checksums with sha256sum -c checksums.txt.