Skip to content

Releases: PlatformRelay/MKurator

MKurator 0.12.2

Choose a tag to compare

@github-actions github-actions released this 10 Jul 15:58
036782a

0.12.2 - 2026-07-10

Breaking Changes

  • crds: Add generated+augmented Queue reference page (DOC-7 pilot) (#91) 848747c

  • ci: Phase C e2e pyramid and CI filters 9c9fe52

  • e2e: Phase C PR labels and main Helm pass d1eff5d

  • e2e: Phase C pyramid trim and CI labels 72c186c

  • e2e: Parallel MQ lanes and single deploy 9aaaa55

Bug Fixes

  • validation: Satisfy lint for v1beta1 admission 94b49b6

  • e2e: Serialize suite teardown on process 1 (#57) 7ae8c9e

  • task: Prefer valid kind kubeconfig path 66cf2db

  • e2e: Use USERMAP mcaUser drift for observe-only spec 1056bc9

  • auth: USERMAP drift polish and validation breadth (AUTH-3b) 4a3ed71

  • api: Guard Queue description CEL with has() (#23) 4b9f3e8

  • ci: Use gitleaks CLI for org repo secret scan bd23f0d

  • api: Keep MQObject interface out of api package 20559e9

  • controller: Classify events via typed wrap errors 403f8d9

  • controller: Observe-only auth skips SET when missing fdb8d55

  • controller: Requeue workloads after finalizer add 1f0962e

  • controller: Stabilize QMC Ready under secret watch 09ec4f1

  • controller: Preserve QMC Ready on transient ping 9df6b39

  • mqrest: Identity-keyed cache with replace-on-rotation 2d99fbc

  • validation: Harden CHLAUTH/AUTHREC MQSC fields 43f6974

  • controller: Deletion before connection chain (ADR-0022) c483ac0

  • controller: Reliability fixes for wave 1 (#7-10) 83cd131

  • controller: Release without Secret; stop QMC hot loop 5e24f03

  • ci: Stop release tags from failing GitHub Pages deploy c894ae2

  • test: Stabilize Helm e2e metrics and raise coverage floor 0f2449e

  • mqrest: Treat AUTHREC NONE as not found 2c1aee8

  • ci: Expose CODECOV_TOKEN on test job env 011f545

  • ci: Skip Codecov without invalid secrets if 48b89a4

  • ci: Unblock verify, codecov, and e2e CI 75866b3

  • test: Bound kubectl in MQ e2e cleanup d298d20

  • test: Define kurator-system namespace in helpers e8e69d4

  • test: Prevent e2e AfterSuite undeploy hang 0930ebc

  • ci: Use git-cliff-action content for release notes 9fad692

  • test: Make AfterEach kubectl delete non-blocking e3a926d

  • test: Stabilize parallel MQ e2e lanes ad324a0

  • test: Avoid corrupt merged coverage.out dc7add6

  • rbac: Allow events.k8s.io for controller be9f9db

  • test: Let Helm e2e own kurator-system namespace b0685b1

  • deps: Update kubernetes packages c1376e1

  • deps: Update go dependencies 31386bc

  • helm: Add auth CR RBAC and verify in helm:lint c9c8688

  • ci: Repair Renovate workflow permissions and token 22cd170

  • ci: Drop invalid workflows permission from Renovate job 9e4fe1e

  • ci: Configure Renovate repository target and token 3d598b6

  • ci: Migrate renovate config for v43 1208bb1

  • ci: Flock mutex for e2e and integration suites f0b4227

  • e2e: Drop deprecated ginkgo.progress flag 8185002

  • mqrest: Treat empty AUTHREC authorities as not found 15b8c4d

  • auth: Unblock ChannelAuthRule delete and e2e waits 718dff1

  • ci: Skip generated files in format:check diff 4c2053a

  • auth: Parse DISPLAY text and correct SET AUTHREC MQSC 8b1075d

  • samples: Unify deploy:samples for kind e9d6849

  • e2e: Deploy operator via task deploy ff1091e

  • task: Propagate KURATOR_E2E_MQ into test:e2e task env 0df9a9a

  • e2e: Race-safe subprocess output and webhook assertion 867a201

  • task: Resolve kustomize path with go tool -n e40a0a0

  • samples: Let kustomization set namespace on Helm samples 64f82b9

  • ci: Bump Go 1.26.4 and sync verify artifacts adb9b87

  • ci: Align CRDs with go tool controller-gen 9c56489

  • makefile: Use go tool kustomize for deploy targets 87250df

  • e2e: Wait for webhook cert and rollout before MQ tests 4456aec

  • config: Fix webhook kustomize for e2e make deploy 9307cb9

  • webhook: Fix unit test race under -race 86e1f8c

  • makefile: Apply CRDs from bases on make install f740052

  • test: Pass QueueSpec to GetQueue in MQ e2e [6bf3...

Read more

MKurator 0.12.1

Choose a tag to compare

@github-actions github-actions released this 08 Jul 23:35

0.12.1 - 2026-07-08


Container image

ghcr.io/conduit-ops/mkurator:0.12.1

Multi-arch (linux/amd64, linux/arm64), distroless nonroot base.

OCI attestations (SBOM + SLSA provenance) are attached in GHCR. Verify the signature:

cosign verify \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity-regexp '^https://github.com/conduit-ops/MKurator/.+' \
  ghcr.io/conduit-ops/mkurator@sha256:64c0e3bf7506a90b002b15fa67c192804f4d27343a11838e4113625ecd54cb82

Install (Kustomize)

kubectl apply -f install-crds.yaml
kubectl apply -f install.yaml

Install (Helm — OCI)

helm upgrade --install mkurator oci://ghcr.io/conduit-ops/mkurator \
  --version 0.12.1 \
  --namespace mkurator-system \
  --create-namespace \
  --set image.repository=ghcr.io/conduit-ops/mkurator \
  --set image.tag=0.12.1

Install (Helm — GitHub Release tarball)

helm upgrade --install mkurator mkurator-0.12.1.tgz \
  --namespace mkurator-system \
  --create-namespace \
  --set image.repository=ghcr.io/conduit-ops/mkurator \
  --set image.tag=0.12.1

Verify checksums with sha256sum -c checksums.txt.

MKurator 0.12.0

Choose a tag to compare

@github-actions github-actions released this 08 Jul 22:26

0.12.0 - 2026-07-08

Bug Fixes

  • validation: Satisfy lint for v1beta1 admission 2fd2371

Features

  • webhook: Add v1beta1 validating admission 077d607

  • samples: Default sample CRs to v1beta1 (8d-4) 402457c

  • webhook: Conversion webhook for v1beta1 hub (8d-2) 37b5fc4

  • api: Scaffold v1beta1 types and multi-version CRDs (8d-1) (#71) (#71, )037b0f3

Refactoring

  • webhook: Split v1beta1 envtest suite 6c6f050

Container image

ghcr.io/conduit-ops/mkurator:0.12.0

Multi-arch (linux/amd64, linux/arm64), distroless nonroot base.

OCI attestations (SBOM + SLSA provenance) are attached in GHCR. Verify the signature:

cosign verify \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity-regexp '^https://github.com/conduit-ops/MKurator/.+' \
  ghcr.io/conduit-ops/mkurator@sha256:35619561c0dc095c259ac744a27f2d9ee2e775f265ccd31381fe7f9e18bd062f

Install (Kustomize)

kubectl apply -f install-crds.yaml
kubectl apply -f install.yaml

Install (Helm — OCI)

helm upgrade --install mkurator oci://ghcr.io/conduit-ops/mkurator \
  --version 0.12.0 \
  --namespace mkurator-system \
  --create-namespace \
  --set image.repository=ghcr.io/conduit-ops/mkurator \
  --set image.tag=0.12.0

Install (Helm — GitHub Release tarball)

helm upgrade --install mkurator mkurator-0.12.0.tgz \
  --namespace mkurator-system \
  --create-namespace \
  --set image.repository=ghcr.io/conduit-ops/mkurator \
  --set image.tag=0.12.0

Verify checksums with sha256sum -c checksums.txt.

MKurator 0.11.1

Choose a tag to compare

@github-actions github-actions released this 18 Jun 04:18

0.11.1 - 2026-06-18

Features

  • mqrest: Probe all QLOCAL define-only candidates (#69) (#69, )a26127d

Container image

ghcr.io/conduit-ops/mkurator:0.11.1

Multi-arch (linux/amd64, linux/arm64), distroless nonroot base.

OCI attestations (SBOM + SLSA provenance) are attached in GHCR. Verify the signature:

cosign verify \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity-regexp '^https://github.com/conduit-ops/MKurator/.+' \
  ghcr.io/conduit-ops/mkurator@sha256:914c972078c5ec7b3cadd716832ac45ed6fadd7be51429dc3bb819ffb4a70740

Install (Kustomize)

kubectl apply -f install-crds.yaml
kubectl apply -f install.yaml

Install (Helm — OCI)

helm upgrade --install mkurator oci://ghcr.io/conduit-ops/mkurator \
  --version 0.11.1 \
  --namespace mkurator-system \
  --create-namespace \
  --set image.repository=ghcr.io/conduit-ops/mkurator \
  --set image.tag=0.11.1

Install (Helm — GitHub Release tarball)

helm upgrade --install mkurator mkurator-0.11.1.tgz \
  --namespace mkurator-system \
  --create-namespace \
  --set image.repository=ghcr.io/conduit-ops/mkurator \
  --set image.tag=0.11.1

Verify checksums with sha256sum -c checksums.txt.

MKurator 0.11.0

Choose a tag to compare

@github-actions github-actions released this 18 Jun 03:25

0.11.0 - 2026-06-18

Features

  • auth: AUTHREC channel/namelist profile parity (AUTH-9) 5edc84f

  • channel: Add RCVR receiver channel type (AUTH-8b) d63c95a

  • channel: Add SDR sender channel type (AUTH-8a) (#63) (#63, )50c7bcb

  • mqrest: Wire share DISPLAY probe into queue drift (Day 27 MQ-3) (#62) (#62, )fa61d3f


Container image

ghcr.io/conduit-ops/mkurator:0.11.0

Multi-arch (linux/amd64, linux/arm64), distroless nonroot base.

OCI attestations (SBOM + SLSA provenance) are attached in GHCR. Verify the signature:

cosign verify \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity-regexp '^https://github.com/conduit-ops/MKurator/.+' \
  ghcr.io/conduit-ops/mkurator@sha256:86698e1a925c8f1c17cbd87b31a288a242771afcf2385a9ed408b49566037424

Install (Kustomize)

kubectl apply -f install-crds.yaml
kubectl apply -f install.yaml

Install (Helm — OCI)

helm upgrade --install mkurator oci://ghcr.io/conduit-ops/mkurator \
  --version 0.11.0 \
  --namespace mkurator-system \
  --create-namespace \
  --set image.repository=ghcr.io/conduit-ops/mkurator \
  --set image.tag=0.11.0

Install (Helm — GitHub Release tarball)

helm upgrade --install mkurator mkurator-0.11.0.tgz \
  --namespace mkurator-system \
  --create-namespace \
  --set image.repository=ghcr.io/conduit-ops/mkurator \
  --set image.tag=0.11.0

Verify checksums with sha256sum -c checksums.txt.

MKurator 0.10.0

Choose a tag to compare

@github-actions github-actions released this 18 Jun 00:57

0.10.0 - 2026-06-18

Features

  • mqrest: DISPLAY capability probe spike (Day 22 MQ-1) (#58) (#58, )7bc65f3

Container image

ghcr.io/conduit-ops/mkurator:0.10.0

Multi-arch (linux/amd64, linux/arm64), distroless nonroot base.

OCI attestations (SBOM + SLSA provenance) are attached in GHCR. Verify the signature:

cosign verify \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity-regexp '^https://github.com/conduit-ops/MKurator/.+' \
  ghcr.io/conduit-ops/mkurator@sha256:b4e637a396e5e9c99424381d6a36b03498bf88a0bd2b78a14436b13bb49d0a4d

Install (Kustomize)

kubectl apply -f install-crds.yaml
kubectl apply -f install.yaml

Install (Helm — OCI)

helm upgrade --install mkurator oci://ghcr.io/conduit-ops/mkurator \
  --version 0.10.0 \
  --namespace mkurator-system \
  --create-namespace \
  --set image.repository=ghcr.io/conduit-ops/mkurator \
  --set image.tag=0.10.0

Install (Helm — GitHub Release tarball)

helm upgrade --install mkurator mkurator-0.10.0.tgz \
  --namespace mkurator-system \
  --create-namespace \
  --set image.repository=ghcr.io/conduit-ops/mkurator \
  --set image.tag=0.10.0

Verify checksums with sha256sum -c checksums.txt.

MKurator 0.9.6

Choose a tag to compare

@github-actions github-actions released this 17 Jun 22:57

0.9.6 - 2026-06-17

Bug Fixes

  • e2e: Serialize suite teardown on process 1 (#57) (#57, )bea6b20

  • task: Prefer valid kind kubeconfig path 0e9ce20

Refactoring

  • mqrest: Table-drive CHLAUTH auth unit tests 086996b

Merge

  • Bring dependabot go minor patch fixes (#51, )10c45b3

  • Bring task and docs fixes from chore/tst-4-blockaddr-default-samples e39dd25

  • Bring kubeconfig task fix from chore/tst-4-blockaddr-default-samples c42194f


Container image

ghcr.io/conduit-ops/mkurator:0.9.6

Multi-arch (linux/amd64, linux/arm64), distroless nonroot base.

OCI attestations (SBOM + SLSA provenance) are attached in GHCR. Verify the signature:

cosign verify \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity-regexp '^https://github.com/conduit-ops/MKurator/.+' \
  ghcr.io/conduit-ops/mkurator@sha256:d6401026d889eea6865287207272c0444a07a862647dfb6a58590d34aa62e9a5

Install (Kustomize)

kubectl apply -f install-crds.yaml
kubectl apply -f install.yaml

Install (Helm — OCI)

helm upgrade --install mkurator oci://ghcr.io/conduit-ops/mkurator \
  --version 0.9.6 \
  --namespace mkurator-system \
  --create-namespace \
  --set image.repository=ghcr.io/conduit-ops/mkurator \
  --set image.tag=0.9.6

Install (Helm — GitHub Release tarball)

helm upgrade --install mkurator mkurator-0.9.6.tgz \
  --namespace mkurator-system \
  --create-namespace \
  --set image.repository=ghcr.io/conduit-ops/mkurator \
  --set image.tag=0.9.6

Verify checksums with sha256sum -c checksums.txt.

MKurator 0.9.5

Choose a tag to compare

@github-actions github-actions released this 14 Jun 12:08

0.9.5 - 2026-06-14

Bug Fixes

  • e2e: Use USERMAP mcaUser drift for observe-only spec 36e042c

Container image

ghcr.io/conduit-ops/mkurator:0.9.5

Multi-arch (linux/amd64, linux/arm64), distroless nonroot base.

OCI attestations (SBOM + SLSA provenance) are attached in GHCR. Verify the signature:

cosign verify \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity-regexp '^https://github.com/conduit-ops/MKurator/.+' \
  ghcr.io/conduit-ops/mkurator@sha256:7c5373b7ad459e4ba3bba3560297b3e70a6a941d5cb9f3e47a53fc2c29d87b1e

Install (Kustomize)

kubectl apply -f install-crds.yaml
kubectl apply -f install.yaml

Install (Helm — OCI)

helm upgrade --install mkurator oci://ghcr.io/conduit-ops/mkurator \
  --version 0.9.5 \
  --namespace mkurator-system \
  --create-namespace \
  --set image.repository=ghcr.io/conduit-ops/mkurator \
  --set image.tag=0.9.5

Install (Helm — GitHub Release tarball)

helm upgrade --install mkurator mkurator-0.9.5.tgz \
  --namespace mkurator-system \
  --create-namespace \
  --set image.repository=ghcr.io/conduit-ops/mkurator \
  --set image.tag=0.9.5

Verify checksums with sha256sum -c checksums.txt.

MKurator 0.9.4

Choose a tag to compare

@github-actions github-actions released this 14 Jun 11:36

0.9.4 - 2026-06-14

Bug Fixes

  • auth: USERMAP drift polish and validation breadth (AUTH-3b) 1a064fb

Features

  • auth: QMGRMAP CHLAUTH remoteQueueManager field d113d4f

  • channelauth: SSLPEERMAP CHLAUTH CRD and mqrest 68ea774

  • channelauthrule: USERMAP CHLAUTH CRD and mqrest SET 8f09d62


Container image

ghcr.io/conduit-ops/mkurator:0.9.4

Multi-arch (linux/amd64, linux/arm64), distroless nonroot base.

OCI attestations (SBOM + SLSA provenance) are attached in GHCR. Verify the signature:

cosign verify \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity-regexp '^https://github.com/conduit-ops/MKurator/.+' \
  ghcr.io/conduit-ops/mkurator@sha256:ca7331eaf139a7f77d8fdcd5401ee0e32537849f74910e03bfc52e21ccbd1129

Install (Kustomize)

kubectl apply -f install-crds.yaml
kubectl apply -f install.yaml

Install (Helm — OCI)

helm upgrade --install mkurator oci://ghcr.io/conduit-ops/mkurator \
  --version 0.9.4 \
  --namespace mkurator-system \
  --create-namespace \
  --set image.repository=ghcr.io/conduit-ops/mkurator \
  --set image.tag=0.9.4

Install (Helm — GitHub Release tarball)

helm upgrade --install mkurator mkurator-0.9.4.tgz \
  --namespace mkurator-system \
  --create-namespace \
  --set image.repository=ghcr.io/conduit-ops/mkurator \
  --set image.tag=0.9.4

Verify checksums with sha256sum -c checksums.txt.

MKurator 0.9.3

Choose a tag to compare

@github-actions github-actions released this 14 Jun 07:18

0.9.3 - 2026-06-14

Features

  • topic: Add publishScope and subscribeScope typed fields (#39) (#39, )aef117d

  • topic: Add defPersistence typed field (#38) (#38, )64e61b1


Container image

ghcr.io/conduit-ops/mkurator:0.9.3

Multi-arch (linux/amd64, linux/arm64), distroless nonroot base.

OCI attestations (SBOM + SLSA provenance) are attached in GHCR. Verify the signature:

cosign verify \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity-regexp '^https://github.com/conduit-ops/MKurator/.+' \
  ghcr.io/conduit-ops/mkurator@sha256:31c11d975a499d8e0fb3ca40eeab04cb9a1a3cb2eed7c5dfcbd739d91a46556e

Install (Kustomize)

kubectl apply -f install-crds.yaml
kubectl apply -f install.yaml

Install (Helm — OCI)

helm upgrade --install mkurator oci://ghcr.io/conduit-ops/mkurator \
  --version 0.9.3 \
  --namespace mkurator-system \
  --create-namespace \
  --set image.repository=ghcr.io/conduit-ops/mkurator \
  --set image.tag=0.9.3

Install (Helm — GitHub Release tarball)

helm upgrade --install mkurator mkurator-0.9.3.tgz \
  --namespace mkurator-system \
  --create-namespace \
  --set image.repository=ghcr.io/conduit-ops/mkurator \
  --set image.tag=0.9.3

Verify checksums with sha256sum -c checksums.txt.