Skip to content

v0.7.2 - Kubernetes-Native RBAC, Helm & Operator Management

Choose a tag to compare

View all tags
@greencapk8s greencapk8s released this 08 Jul 00:50
· 91 commits to main since this release
v0.7.2
f07fec7
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Release notes:

Kubernetes-Native RBAC, Helm & Operator Management for GreenCap K8s

Overview

This release replaces GreenCap's internal permission system with native Kubernetes RBAC and adds full lifecycle management for Helm releases and Operators
(OLM), alongside a more accessible cluster registration flow and a consolidated async execution model across the platform.

What's New

  • Kubernetes RBAC Authorization: internal permission system replaced by native Kubernetes RBAC — every user is backed by a ServiceAccount +
    ClusterRoleBinding, so access control lives in the cluster itself, not in GreenCap's database
  • Security Hardening: fail-closed authorization for users without a provisioned ServiceAccount, plus a fix for authentication context not propagating
    into virtual threads (affected all async data loading — dashboards, namespaces, deploy wizards, topology, logs)
  • Helm Management: list Helm Releases with full details (Notes/Values/Manifest), install/upgrade/uninstall via Helm CLI, manage chart Repositories per
    cluster, and a new "Deploy from Helm" wizard
  • Kubernetes Operators (OLM): browse the Operator catalog and install/uninstall Operators directly from a new Developer Experience section in the
    sidebar
  • Cluster Registration via Token + URL: register a cluster using just the API server URL and a bearer token — no kubeconfig file required, ideal for
    managed clusters (GKE/EKS/AKS)
  • PersistentVolume Delete: remove PVs directly from the UI, with a guard preventing deletion of volumes still Bound to a claim
  • YAML Editor Upgrade: manifests and Helm values are now edited with a CodeMirror 6 editor — syntax highlighting, line numbers, and dark/light theme
    sync
  • AsyncTasks: a single, consolidated entry point for asynchronous execution across the app, replacing per-view schedulers and threads

Benefits

  1. Simpler Security Model: no separate permission system to maintain — Kubernetes RBAC is the single source of truth for authorization
  2. Faster Onboarding for Managed Clusters: Token + URL registration removes the friction of locating and uploading a kubeconfig file
  3. Full Helm & Operator Lifecycle in One Place: no need to leave GreenCap to manage Helm releases or cluster Operators
  4. More Reliable Async Behavior: authentication context now propagates correctly across all background loading, closing a class of silent failures
  5. Better Editing Experience: a real code editor for YAML instead of plain text areas
Assets 2
Loading