3.3.0

What's Changed

Highlights

Here are the highlights of the 3.3.0 release:

Community module management improvements

• Pull the latest community module templates (e.g., docker-registry) into the default namespace:

  kyma module pull docker-registry

• Install a community module from a pulled template (with a default CR):

  kyma module add default/docker-registry-0.10.0 --default-cr

• Remove an installed community module:

  kyma module delete default/docker-registry-0.10.0

• Note: Behavior changes for community modules — see Breaking Changes.

New “authorize” command group (alpha)

• Grant access for users, groups, subaccounts, and GitHub repositories to your Kyma cluster in one step.
• Discover options:

  kyma alpha authorize --help

Day 2 diagnostics (alpha)

• Module/component error logs:

  kyma alpha diagnose logs --help

• Istio mesh configuration analysis (programmatic equivalent of istioctl analyze):

  kyma alpha diagnose istio --help

New Features 🚀

• Added kyma alpha authorize command by @musztardem in #2655
• Revamp app push --mount flags by @Cortey in #2649
• Improved listing and removal of community modules by @musztardem in #2663
• Support the --context flag by @pPrecel in #2666
• Configure securityContext for the app push deployment by @pPrecel in #2662
• Return latest community module when flag --version is not specified by @MichalKalke in #2677
• Added diagnose logs command by @musztardem in #2667
• Diagnose istio by @anoipm in #2743
• Allow passing server and ca to kubeconfig generate by @halamix2 in #2708
• Implemented alpha authorize command for a single subject by @musztardem in #2712

Breaking Changes

• flags --origin and --community are no longer functional when managing community modules.
• Adding/deleting community modules require pointing to a module template (pulled earlier) as command argument in the format <namespace>/<module-template-name>

Documentation 📖

• Document more app push possibilities by @pPrecel in #2645
• Improve examples for the add and delete commands by @pPrecel in #2750
• Add examples for the the hana map command by @pPrecel in #2739
• Add examples for the add and delete commands by @pPrecel in #2737

Maintenance 🏗️

• Standarize extensions output by @pPrecel in #2672
• gomod(deps): bump the docker group with 2 updates by @dependabot[bot] in #2644
• gomod(deps): bump istio.io/client-go from 1.27.1 to 1.27.2 by @dependabot[bot] in #2647
• Build cli with FIPS enabled by @halamix2 in #2648
• Fix installing community modules from rawManifests by @musztardem in #2656
• Generate .ts sidebar file by @pPrecel in #2658
• Generate docs by @pPrecel in #2657
• gomod(deps): bump istio.io/client-go from 1.27.2 to 1.27.3 by @dependabot[bot] in #2659
• Migrate the _sidebar.md file by @pPrecel in #2664
• module list: return state of non-default CR by @halamix2 in #2665
• Move the format.go file by @pPrecel in #2669
• Use SERVICE_BINDING_ROOT env only on proper flag call by @Cortey in #2668
• Implement standard output package by @pPrecel in #2671
• fix: module list for community modules with multiple CRs by @halamix2 in #2673
• Use the out package in whole cli by @pPrecel in #2674
• Stop using the os.Stdout and the os.Stderr by @pPrecel in #2678
• Stop generating hidden flags by @pPrecel in #2679
• Improved RBAC validations for repository authorization by @musztardem in #2676
• Verify docs and code by @pPrecel in #2680
• Use semver lib to find latest release version by @MichalKalke in #2681
• Fix verify checkout by @pPrecel in #2683
• Fix verify permissions by @pPrecel in #2684
• Add no validation message on verify by @pPrecel in #2685
• Fix action negation by @pPrecel in #2686
• Improve verify action by @pPrecel in #2688
• gomod(deps): bump github.com/Masterminds/semver/v3 from 3.3.0 to 3.4.0 by @dependabot[bot] in #2690
• Prefix adjustments for OIDC and bindings generation by @musztardem in #2691
• Improve out message for the verify action by @pPrecel in #2692
• Fix action by @pPrecel in #2694
• Update action by @pPrecel in #2695
• Share reason between steps using file by @pPrecel in #2696
• Improve verify action message by @pPrecel in #2700
• Improve verify comment 2 by @pPrecel in #2701
• Allow verify action to continue on error by @pPrecel in #2702
• Add set to verify last step by @pPrecel in #2703
• Adds hint message when creating OIDC for clusterRole without required… by @musztardem in #2706
• Remove (optional) from pull description by @MichalKalke in #2705
• Fix installing default CR by @MichalKalke in #2707
• Show EventTime like Kubernetes age by @MichalKalke in #2711
• remove rubbish line by @halamix2 in #2715
• gomod(deps): bump github.com/jedib0t/go-pretty/v6 from 6.6.8 to 6.6.9 by @dependabot[bot] in #2710
• Fix for generating name for RBACs on OIDC trust generation by @musztardem in #2714
• Fix github OIDC trust test by @kwiatekus in #2716
• gomod(deps): bump github.com/opencontainers/selinux from 1.12.0 to 1.13.0 by @dependabot[bot] in #2717
• gomod(deps): bump github.com/jedib0t/go-pretty/v6 from 6.7.0 to 6.7.1 by @dependabot[bot] in #2722
• gomod(deps): bump istio.io/client-go from 1.27.3 to 1.28.0 by @dependabot[bot] in #2721
• gomod(deps): bump the docker group with 2 updates by @dependabot[bot] in #2720
• Migrate to new flag by @kwiatekus in #2719
• Improve hints while adding community module by @pPrecel in #2723
• Add a hint in a case where user misues a command by @Cortey in #2724
• Split module disabling logic into two separate funcs by @pPrecel in #2725
• Improved the dry-run flag for authorization commands by @musztardem in #2718
• gomod(deps): bump github.com/docker/cli from 28.5.2+incompatible to 29.0.2+incompatible in the docker group by @dependabot[bot] in #2727
• gomod(deps): bump github.com/jedib0t/go-pretty/v6 from 6.7.1 to 6.7.2 by @dependabot[bot] in #2728
• gomod(deps): bump the k8s-io group with 3 updates by @dependabot[bot] in #2726
• Support passing community module location using arguments by @pPrecel in #2735
• Support removing direct community module without passing the --community flag by @pPrecel in #2736
• Unify examples by @pPrecel in #2738
• Add debug log for action configuration by @pPrecel in #2741
• Improved help for diagnose logs command by @musztardem in #2729
• gomod(deps): bump golang.org/x/crypto from 0.41.0 to 0.45.0 by @dependabot[bot] in #2730
• gomod(deps): bump github.com/docker/cli from 29.0.2+incompatible to 29.0.3+incompatible in the docker group by @dependabot[bot] in #2746
• gomod(deps): bump github.com/jedib0t/go-pretty/v6 from 6.7.2 to 6.7.5 by @dependabot[bot] in #2747
• Check module availability before adding it to the Kyma CR by @pPrecel in #2752
• Mute dev-oriented logs by @pPrecel in #2755
• Refactor dockerfile package by @FilipRudy in #2757
• Added ServiceAccount namespace option for authorize cmd by @musztardem in #2753
• gomod(deps): bump github.com/google/go-containerregistry from 0.20.6 to 0.20.7 by @dependabot[bot] in #2761
• gomod(deps): bump github.com/docker/cli from 29.0.3+incompatible to 29.1.1+incompatible in the docker group by @dependabot[bot] in #2759
• gomod(deps): bump the k8s-io group with 3 updates by @dependabot[bot] in #2758
• gomod(deps): bump github.com/buildpacks/pack from 0.38.2 to 0.39.0 by @dependabot[bot] in #2760
• Improve module delete example by @pPrecel in #2764
• add filtering istio messages by level by @anoipm in #2756
• set default level for diagnose istio to warning by @anoipm in #2767
• Fix hints and messages by @grego952 in #2768
• Reorganize diagnose commands by @musztardem in #2766
• Fix label selector when resolving app URL (#2770) by @kwiatekus in #2771
• Include community module in e2e intergation scenario (#2772) by @kwiatekus in #2774
• Revert TF vars file name by @kwiatekus in #2775

Full Changelog: 3.2.0...3.3.0