v0.3.1

The v0.3.1 release is a patch release which includes some bug fixes and makes
the ability for BPF enabled applications to receive their maps via bpfd's
custom CSI plugin default.

This enablement means that most applications can now access their maps WITHOUT
being run as root.

Warning

The CSI feature still requires a privileged application on distributions which
enable SELinux by default (i.e Red Hat Openshift). Therefore we've shipped a set of
deployment configs specifically for openshift in this release, see the additional
go-<example>-counter-install-ocp-v0.3.1.yaml artifacts included in the release
payload. Stay tuned to #829 for
updates.

The new yaml syntax that should be used by BPF enabled applications resembles
the following:

apiVersion: apps/v1
kind: DaemonSet
metadata:
  name: <APP_NAME>
  ...
spec:
  ...
  template:
    ...
    spec:
     ...
          volumeMounts:
            - name: bpf-maps
              mountPath: /bpf-maps
      volumes:
        - name: bpf-maps
          csi:
            driver: csi.bpfd.dev
            volumeAttributes:
              csi.bpfd.dev/program: <*Program_Name>
              csi.bpfd.dev/maps: <BPF Map Names>

Additionally, this release removes all dependencies involved with deploying bpfd
with TLS, which means that cert-manager dependencies are completely removed from
the operator, therefore simplifying the deployment considerably.

Lastly, the bpfd user and user group was removed which will only effect users
that run bpfd via a systemd service and try to use bpfctl without root
privileges. This helped reduce internal complexity and allows us to focus instead
on finetuning the permissions of the bpfd process itself, see the linux
capabilities guide for more information.

What's Changed (excluding dependency bumps)

• release: automate release yamls by @astoycos in #775
• bpf: returns an error when adding a tc program to existence clsact qdisc by @navarrothiago in #761
• workspace-ified the netlink dependencies by @anfredette in #783
• Don't try and pin .data maps by @astoycos in #794
• .github: Add actions to dependabot by @dave-tucker in #803
• Fix Procceedon bug (Issue #791) by @anfredette in #792
• Add script to delete bpfd qdiscs on all interfaces by @anfredette in #780
• Fix BPF Licensing by @dave-tucker in #796
• Fix example bytecode image builds add test coverage by @astoycos in #810
• Relicense userspace to Apache 2.0 only by @dave-tucker in #795
• bpfd: Use tc dispatcher from container image by @dave-tucker in #817
• bpfd: Unify the "run as root" and "run as bpfd user" codepaths by @Billy99 in #777
• bpfd, bpfctl, operator: Remove support for TCP/TLS by @dave-tucker in #819
• bpfd-operator: Make the CSI deployment default for bpfd-operator by @Billy99 in #811
• ci: Add YAML formatter by @dave-tucker in #802
• Fix some panics + add testing and fix for map sharing by @astoycos in #820
• bpfd: mount default bpffs on kind by @astoycos in #823
• bpfd: Remove unused file by @dave-tucker in #824
• Document valid kernel versions by @Billy99 in #827
• Update documentation on new YAML Linter by @Billy99 in #830

Full Changelog: v0.3.0...v0.3.1