Skip to content

v0.5.0

Choose a tag to compare

View all tags
@alexconrey alexconrey released this 13 Aug 16:37
· 20 commits to main since this release
v0.5.0
bebf16e

What's Changed

New AWS services

  • SQS: sqs.deckwatch.io/* annotations — provision queues with FIFO support, inject SQS_QUEUE_URL and SQS_QUEUE_ARN
  • ECR: ecr.deckwatch.io/* annotations — provision private container registries, inject ECR_REGISTRY and ECR_REPOSITORY
  • Secrets Manager: secretsmanager.deckwatch.io/* annotations — manage secrets, inject SECRET_ARN and optionally the secret value

Bug fixes

  • IRSA trust policy: replaced invalid EKS-service trust with correct OIDC Federated trust scoped to workload ServiceAccount; OIDC_PROVIDER_ARN config key
  • Backup idempotency: ListBackupPlans check before CreateBackupPlan prevents duplicate plans on each reconcile
  • Signing: x-amz-content-sha256 in canonical request and all HTTP requests (GovCloud requirement)

Carries all v0.4.0 improvements

  • GovCloud IAM/S3 endpoint fixes, CURRENT_TIMESTAMP clock, deployment_annotations, deprovision() with final snapshot
Assets 3
Loading