v0.7.24

Changelog

• b8112ff Merge pull request #835 from bergerx/worktree-bridge-cse_01LEH6geNvDfU2ruUXWPGgYV
• 7c03e26 Cut CHANGELOG [Unreleased] over to v0.7.24
• 41fe534 Merge pull request #831 from bergerx/fix/event-involving-object-ref
• 31d1a2d Merge branch 'master' into fix/event-involving-object-ref
• a687847 Merge pull request #829 from bergerx/surface-other-unhealthy-conditions-in-summaries
• 12affed Merge branch 'master' into fix/event-involving-object-ref
• 4a0bc27 Merge branch 'master' into surface-other-unhealthy-conditions-in-summaries
• c0e3bef Fix pod-on-bad-node-for-rs.regex, the 19th fixture missed by the ready-count heuristic
• 8f30fe8 Merge pull request #834 from bergerx/cap-vpa-burner-cpu-limit
• 089bfcb Cap the VPA e2e burner's CPU with a Limit, not just a Request
• 7e42c72 Regenerate the 18 e2e-artifacts fixtures affected by other_unhealthy_conditions/kstatus_if_abnormal
• e9ee264 Update vpa-standalone e2e fixture for dropped involving-object clause
• 7617e48 Drop redundant "involving Kind/name" from nested Events: listings
• 03f8897 Merge remote-tracking branch 'origin/master' into surface-other-unhealthy-conditions-in-summaries
• 59f1cbe Merge pull request #830 from bergerx/add-short-flag
• d5b5417 Update stale e2e regex fixtures for the new other_unhealthy_conditions/kstatus_if_abnormal output
• b3f4cb7 Add --short flag to print each resource's one-line health summary
• 2645e28 Always lead with the raw Ready condition, gate kstatus on non-Current
• d749511 Surface non-Ready unhealthy conditions in every ".summary"
• 189da37 Merge pull request #828 from bergerx/issue-826-formal-summary-templates
• 756468c Merge branch 'master' into issue-826-formal-summary-templates
• dce7a28 Formalize health-summary dispatch as a discoverable ".summary" convention
• 67f9246 Merge pull request #827 from ngxiaoen/fix/sprig-migrate-float64
• 2650bbd Migrate float64 template calls off deprecated sprig-compat signature (#688)
• 27b54f1 Merge pull request #825 from bergerx/issue-808-dedup-gatewayapi-routes
• dc7af50 Merge branch 'master' into issue-808-dedup-gatewayapi-routes
• f3a6a47 Merge pull request #824 from bergerx/issue-803-807-split-and-regroup-templates
• 83fab81 Dedup Gateway API route templates into gatewayapi_common.tmpl
• f629af2 Merge remote-tracking branch 'origin/master' into issue-803-807-split-and-regroup-templates
• a52249e Merge pull request #820 from bergerx/issue-810-resource-ref-funcmap
• fb76cd5 Convert resource_ref template partial to a typed Go funcMap function
• aa21414 Merge pull request #821 from bergerx/issue-805-rollout-partial
• 8d010cb Merge branch 'master' into issue-805-rollout-partial
• e6a39fb Merge pull request #819 from bergerx/issue-811-detector-registry
• bb87307 Merge branch 'master' into issue-811-detector-registry
• 8b8481c Merge pull request #818 from bergerx/issue-809-separate-template-trees
• 89e3c1b Merge branch 'master' into issue-809-separate-template-trees
• f0d5848 Merge pull request #816 from bergerx/issue-812-template-api-contract
• ea3d021 Merge branch 'master' into issue-812-template-api-contract
• 715a874 Merge pull request #815 from bergerx/issue-804-dedupe-matching-pod
• 7eb0a78 Merge branch 'master' into issue-804-dedupe-matching-pod
• f7c126c Merge pull request #814 from bergerx/issue-802-split-static-template-fns
• 0681e3d Split common.tmpl by domain tier (#803)
• a1fa5ad Regroup pkg/plugin/templates into per-ecosystem subdirectories (#807)
• 0addc54 Replace DefaultResource's hardcoded ecosystem calls with a Go-side detector registry
• cfc56d4 Extract shared rollout_ongoing_summary partial for workload rollouts
• bec6d98 Merge branch 'master' into issue-802-split-static-template-fns
• 08b46e7 Merge pull request #817 from ngxiaoen/fix/sprig-migrate-set
• c7950a8 Separate embedded and user-provided template trees (#809)
• 78a82a7 Migrate set template calls off deprecated sprig-compat signature (#688)
• fec53ea Fix internal-list contradiction for two promoted-to-stable helpers
• a8cd001 Document the stable template/funcMap extension surface (#812)
• 9242236 Extract shared list+filter skeleton from KubeGet*MatchingPod family
• d6e1151 Split template_functions_static.go into domain-focused files
• dbd1eda Merge pull request #813 from bergerx/issue-806-dynamic-template-fn-tests
• e100007 Add unit tests for pure helper functions in template_functions_dynamic.go
• 6736839 Merge pull request #801 from ngxiaoen/fix/sprig-migrate-append
• 335d39d Merge branch 'master' into fix/sprig-migrate-append
• fc2c40c Migrate append template calls off deprecated sprig-compat signature (#688)
• 572b3c0 Merge pull request #800 from bergerx/worktree-bridge-cse_01DcshvV4XrtxRQ4a66GaFtA
• 5b8be13 Fix stale e2e fixture for Namespace --deep Gatekeeper hint
• dfd039e Drop the "Template" label on the ConstraintTemplate ref line
• 9baada9 Point Gatekeeper Constraints at their generating ConstraintTemplate
• 3a83aae Replace hand-crafted constraint-generic-kind-fallback fixture with a real capture
• adf0aff Render Gatekeeper Constraint match/enforcement/audit for any ConstraintTemplate Kind
• 8345b07 Merge pull request #799 from ngxiaoen/fix/sprig-migrate-haskey
• ca40465 Merge branch 'master' into fix/sprig-migrate-haskey
• 998329f Merge pull request #798 from bergerx/worktree-bridge-cse_01FSYzTYqo9T1yitK9XrSUxN
• 928091c Migrate hasKey template calls off deprecated sprig-compat signature (#688)
• 9c9a2aa Add Gatekeeper constraint-match hint to Namespace.tmpl
• 1829592 Merge pull request #797 from bergerx/worktree-bridge-cse_01ARnd4RqueNs39au8C148Nh
• d6411f4 Retry helm repo add/update in e2e installers to survive transient CDN 403s
• e88051c Merge pull request #796 from bergerx/worktree-bridge-cse_013G44MqF4yYpZ77mSKnwesS
• f831d5c Clarify parallel-by-default and cluster-scoped isolation rules for e2e subtests
• 10b4905 Merge branch 'master' into worktree-bridge-cse_013G44MqF4yYpZ77mSKnwesS
• 13fd96e Document no-fabricated-status-fields policy for test artifacts
• 024045e Merge pull request #795 from bergerx/worktree-bridge-cse_01VHCU8vtfiwbVJh3SVcPzqH
• 48424cb Raise ci-test e2e step timeout above the test binary's own -timeout
• 939241f Merge branch 'master' into worktree-bridge-cse_01VHCU8vtfiwbVJh3SVcPzqH
• 5d8e366 Merge pull request #794 from bergerx/worktree-bridge-cse_01X6TwvAMVfSA14VPrx7ehBg
• 5697d47 Add Kyverno PolicyReport/ClusterPolicyReport template
• dd6099f Tighten e2e regex fixtures to pin deterministic field values
• 77ae87b Merge pull request #793 from ngxiaoen/fix/sprig-migrate-get
• 8ac64de Migrate get template calls off deprecated sprig-compat signature (#688)
• ac62e88 Merge pull request #792 from bergerx/worktree-bridge-cse_01UBDDzkxs7ZaKqiVLWr3tqW
• 76b24d7 Merge branch 'master' into worktree-bridge-cse_01UBDDzkxs7ZaKqiVLWr3tqW
• e5aea73 Merge pull request #776 from ngxiaoen/gatekeeper-constraint-template
• 689f103 Address review: nil-safe kinds, non-map labels, scoped enforcement text, audit-status gating, grouped violations
• 2fb8490 Add generic Gatekeeper Constraint template (K8sRequiredLabels)
• f226e1c Group-qualify template dispatch and KubeGet* lookups to fix Kind-name collisions
• de61c85 Merge pull request #791 from bergerx/worktree-bridge-cse_014TbHMkodgDwntYWTP3XPS9
• 46a2fc1 Wait for namespace deletion in e2e subtest cleanup instead of firing and forgetting it
• 9587731 Merge pull request #790 from bergerx/worktree-bridge-cse_014A3sLoQXTaE7NPQehn6H8T
• 3b65e9e Merge branch 'master' into worktree-bridge-cse_014A3sLoQXTaE7NPQehn6H8T
• 957ffdc Merge pull request #788 from bergerx/worktree-bridge-cse_01CDT9ESdnQP8QnwGh1fhavF
• a1bb0e2 Add Istio VirtualService/DestinationRule templates
• f1c5071 Stable-sort status.conditions by type instead of trusting API order
• 85a8ba7 Merge pull request #787 from bergerx/worktree-bridge-cse_01TfRa4mcJuQgJoJ9V645C5A
• 1adc8f5 Fix e2e flakiness exposed by running the Flux subtest in the parallel pool
• 016003f Merge pull request #786 from bergerx/worktree-bridge-cse_01EwwRFd1VKTtLM93jkJ32a6
• 51879fa Move the Flux e2e scenario into TestE2EParallel's pool
• 7921a93 Merge pull request #785 from bergerx/worktree-bridge-cse_01KZSQZnEpkTww26NsZBo3uE
• 819172e Serialize e2e dependency installs, and correct the docs about them
• 7be9a67 Merge pull request #783 from bergerx/worktree-bridge-cse_01VHVDkivAZM7DVgdiefxzn3
• 5992e97 Warn when a stuck rollout doesn't fit the namespace ResourceQuota
• 7501708 Merge pull request #782 from bergerx/worktree-bridge-cse_01C4RHYNwnbEBzVvBN32Teod
• 6681ea5 Re-render until the crasher's CrashLoopBackOff is actually on screen
• cb29765 Tolerate the Node overcommit lines in the node-metrics e2e fixture
• 96efd28 Merge branch 'master' into worktree-bridge-cse_01C4RHYNwnbEBzVvBN32Teod
• fd7f7b6 Merge pull request #781 from bergerx/worktree-bridge-cse_01BAyTHsiue6CotYgT3oPPzY
• b1b414f Let Flux write the status the Kustomization e2e test asserts on
• ac58e36 Merge branch 'master' into worktree-bridge-cse_01BAyTHsiue6CotYgT3oPPzY
• 1eabfd0 Name the certificate's namespace on cross-namespace certificateRefs
• 6937d87 Merge pull request #779 from bergerx/worktree-bridge-cse_01C4RHYNwnbEBzVvBN32Teod
• 0be239c Expect the StorageClass addon-manager line the PV fixture now renders
• 47e7675 Merge branch 'master' into worktree-bridge-cse_01C4RHYNwnbEBzVvBN32Teod
• c3941b2 Merge pull request #780 from bergerx/fix-wildcard-cert-hostname-match
• 8b15824 Match listener and route hostnames the way the Gateway API does
• a2fcc34 Cover a wildcard route hostname in the e2e suite too
• 89d46e4 Merge branch 'master' into fix-wildcard-cert-hostname-match
• 8cd3b6f Stop reporting a hostname mismatch for wildcard hosts
• ea1a53c Surface Flux per-object metadata and list a Kustomization's inventory
• ab734c4 Merge pull request #778 from bergerx/worktree-bridge-cse_01DTNiaWK4w2VMYAehrDPa1z
• 86ed038 Merge branch 'master' into worktree-bridge-cse_01DTNiaWK4w2VMYAehrDPa1z
• e232782 Flesh out the Flux HelmRelease and Kustomization templates
• a113dcd Merge pull request #777 from bergerx/security-checks-gitleaks-govulncheck
• f68b5fa Move security scans into make security-check, run at pre-push and daily
• 52605e7 Add gitleaks and govulncheck security scanning
• 300e74a Merge pull request #775 from bergerx/fix-ci-e2e-minikube-cpus
• c77d1f6 Give CI's minikube every runner CPU, and diagnose Crossplane wait timeouts
• 2df4fcd Merge pull request #772 from bergerx/worktree-bridge-cse_01GYJGGrKKtwF5gDy4iRYMDN
• fcff866 Trim runtime label from new node artifacts after rebase
• 6fcebea Identify a Node's cloud provider from .spec.providerID
• 88a96fe Merge pull request #773 from bergerx/worktree-bridge-cse_017mMNQ3ZRaomYP5n8aDoRC4
• a4917c4 Add Flux HelmRelease and Kustomization templates