diff --git a/CHANGELOG.md b/CHANGELOG.md index 7133c47..4f5460e 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -4,6 +4,10 @@ All notable changes to this project will be documented in this file. ## Unreleased +## 0.16.0 - 2022-10-24 + +- 91: Implement cascading ModRules through execution tiers + ## 0.15.3 - 2022-09-20 - 93: FIX: CronJob in version "v1" cannot be handled as a CronJob: strict decoding error when deploying to Kubernetes 1.25.0 diff --git a/README.md b/README.md index a99cc09..efe9228 100644 --- a/README.md +++ b/README.md @@ -25,13 +25,13 @@ Use KubeMod to: * [Match section](#match-section) * [Patch section](#patch-section) * [Miscellaneous](#miscellaneous) + * [Execution tiers](#execution-tiers) * [Namespaced and cluster-wide resources](#namespaced-and-cluster-wide-resources) * [Target resources](#target-resources) * [Note on idempotency](#note-on-idempotency) * [Debugging ModRules](#debugging-modrules) * [KubeMod's version of JSONPath](#kubemods-version-of-jsonpath) * [Declarative kubectl apply](#declarative-kubectl-apply) - * [Gotchas](#gotchas) --- @@ -47,7 +47,7 @@ Run the following commands to deploy KubeMod. # Make KubeMod ignore Kubernetes' system namespace. kubectl label namespace kube-system admission.kubemod.io/ignore=true --overwrite # Deploy KubeMod. -kubectl apply -f https://raw.githubusercontent.com/kubemod/kubemod/v0.15.3/bundle.yaml +kubectl apply -f https://raw.githubusercontent.com/kubemod/kubemod/v0.16.0/bundle.yaml ``` By default KubeMod allows you to target a limited set of high-level resource types, such as deployments and services. @@ -64,7 +64,7 @@ kubectl delete job kubemod-crt-job -n kubemod-system # Make KubeMod ignore Kubernetes' system namespace. kubectl label namespace kube-system admission.kubemod.io/ignore=true --overwrite # Upgrade KubeMod operator. -kubectl apply -f https://raw.githubusercontent.com/kubemod/kubemod/v0.15.3/bundle.yaml +kubectl apply -f https://raw.githubusercontent.com/kubemod/kubemod/v0.16.0/bundle.yaml ``` ### Uninstall @@ -72,7 +72,7 @@ kubectl apply -f https://raw.githubusercontent.com/kubemod/kubemod/v0.15.3/bundl To uninstall KubeMod and all its resources, run: ```bash -kubectl delete -f https://raw.githubusercontent.com/kubemod/kubemod/v0.15.3/bundle.yaml +kubectl delete -f https://raw.githubusercontent.com/kubemod/kubemod/v0.16.0/bundle.yaml ``` **Note**: Uninstalling KubeMod will also remove all your ModRules deployed to all Kubernetes namespaces. diff --git a/bundle.yaml b/bundle.yaml index fd0ea20..6a908d7 100644 --- a/bundle.yaml +++ b/bundle.yaml @@ -39,7 +39,7 @@ spec: description: ModRuleSpec defines the desired state of ModRule properties: executionTier: - description: ExecutionTier controls when this ModRule will be executed as it relates to the other ModRules loaded in the system. ModRules are matched and executed in tiers, starting with the lowest tier. ModRules in the lowest tier are executed first. Then the results of the execution is passed to the ModRules in the next tier. This cascading execution continues until the highest tier of ModRules has been executed. ModRules in the same tier are executed in indeterminate order. + description: ExecutionTier is a value between -32767 and 32766. ExecutionTier controls when this ModRule will be executed as it relates to the other ModRules loaded in the system. ModRules are matched and executed in tiers, starting with the lowest tier. The results of executing all ModRules in a tier are passed as input to the ModRules in the next tier. This cascading execution continues until the highest tier of ModRules has been executed. ModRules in the same tier are executed in indeterminate order. type: integer match: description: Match is a list of match items which consist of select queries and expected match values or regular expressions. When all match items for an object are positive, the rule is in effect. @@ -297,7 +297,7 @@ spec: - /kubemod - -operator - -webapp - image: kubemod/kubemod:latest + image: kubemod/kubemod:v0.16.0 livenessProbe: httpGet: path: /healthz diff --git a/config/manager/kustomization.yaml b/config/manager/kustomization.yaml index 82b0a00..e9275d4 100644 --- a/config/manager/kustomization.yaml +++ b/config/manager/kustomization.yaml @@ -5,4 +5,4 @@ kind: Kustomization images: - name: controller newName: kubemod/kubemod - newTag: latest + newTag: v0.16.0