v0.14.0

What's Changed

• SA does not create secret automatically in OCP 4.15 with IBM vmware by @xiangjingli in #392
• bump go lib to 1.21 by @xiangjingli in #393
• move codeCov token to action secrets for better security by @xiangjingli in #394
• Upgrade kustomize by @dhaiducek in #395
• Customize app addon namespace by @xiangjingli in #396
• watch application-manager SA secrets in the customized app addon NS by @xiangjingli in #397
• spoke token controller unit test fix along with app addon ns customiz… by @xiangjingli in #398
• no token found in the application-manager SA secret for OCP V4.16 wit… by @xiangjingli in #399
• return error if the appsub packageOverrides for kustomization is malf… by @xiangjingli in #401
• Add some more comments and descriptions for HelmRelease CR fields by @mikeshng in #402
• Update descriptions for subscrptionstatus and subscriptionreport CRDs by @philipwu08 in #400
• App lifecyle CRD api description updates by @xiangjingli in #403
• performance enhacement on 3500 scale test env by @xiangjingli in #404

Full Changelog: v0.13.0...v0.14.0

multicloud-operators-subscription v0.14.0

• See the CHANGELOG for more details.
• The released image is quay.io/open-cluster-management/multicloud-operators-subscription:v0.14.0

v0.13.0

What's Changed

• Add dockerfile for rhtap by @philipwu08 in #371
• Fix midstream e2e by @philipwu08 in #372
• Ensure all containers run with r/o root fs and other std securityContext settings by @joeg-pro in #373
• stop synchronizing resources list if any kustomization folder fails by @xiangjingli in #375
• Bump policy generator to v1.12.4 by @dhaiducek in #377
• refactor ansible integration by @xiangjingli in #376
• Remove Helm subscription package version pattern check because it does not follow Semver guidelines by @mikeshng in #379
• Report kustomization error is subscription status by @philipwu08 in #378
• Add last update time to the overall appsub status by @philipwu08 in #380
• Fix lookup for appsubstatus for local-cluster by @philipwu08 in #381
• Update PolicyGenerator to v1.13.0 by @dhaiducek in #383
• cve fix: upgrade go-git and other dep libs; Lower MaxConcurrentReconc… by @xiangjingli in #382
• enable readOnlyRootFilesystem on subscription addon pod by @xiangjingli in #384
• upgrade addon-framework version by @haoqing0110 in #385
• Don't call helm Get to pick up the latest version when there is only … by @xiangjingli in #386
• Enable Helm for the policy generator by @dhaiducek in #387
• Deprecation, gosec, and spelling fixes by @dhaiducek in #389
• Add helm CLI to image by @dhaiducek in #388
• fix helm copy typo in Dockerfile.prow by @xiangjingli in #390
• the cluster-admin should be respected for the propagated appsub by @xiangjingli in #391

New Contributors

• @joeg-pro made their first contribution in #373
• @haoqing0110 made their first contribution in #385

Full Changelog: v0.12.0...v0.13.0

multicloud-operators-subscription v0.13.0

• See the CHANGELOG for more details.
• The released image is quay.io/open-cluster-management/multicloud-operators-subscription:v0.13.0

v0.12.0

What's Changed

• Add PR template by @mikeshng in #341
• update e2e to use ocm repo by @mikeshng in #342
• Update clusterrole to support managedserviceaccounts for gitopscluster controller by @philipwu08 in #343
• avoid delete appsub addon CRDs when the regional hub is detached by @xiangjingli in #344
• Add sec scan and code cov by @mikeshng in #345
• fix code cov by @mikeshng in #346
• Update gitopsclusters CRD by @lennysgarage in #347
• fix code cov by @mikeshng in #348
• Update helm chart used by README by @lennysgarage in #350
• Update remote git and helm example to use placement by @lennysgarage in #351
• Increase mem limit for gitopscluster controller by @philipwu08 in #352
• Update e2e and ansible examples to use placement by @lennysgarage in #353
• update troubleshooting items and how to patch along with the new 2.8 release by @xiangjingli in #354
• Update build parameters by @lennysgarage in #355
• Remove static from build by @lennysgarage in #356
• Update TLS settings by @lennysgarage in #358
• when placement reference is invalid then it should error. by @mikeshng in #359
• Correct logging of commit IDs by @philipwu08 in #357
• Update policy generator build by @dhaiducek in #360
• upgrade client go to v0.27.4 by @xiangjingli in #362
• set subscription-admin cluster role to be the managedclusterset admin by @xiangjingli in #363
• Enhance proxy support for application addon by @philipwu08 in #365
• Upgrade placement with placementStrategy API by @yanmxa in #364
• Update GitOpsCluster CRD by @mikeshng in #366
• Update CSV for gitopscluster by @mikeshng in #367
• Add additional permissions for subscription admin role by @philipwu08 in #368
• switch to save self signed certs to /tmp by @xiangjingli in #369

New Contributors

• @yanmxa made their first contribution in #364

Full Changelog: v0.11.0...v0.12.0

multicloud-operators-subscription v0.12.0

• See the CHANGELOG for more details.
• The released image is quay.io/open-cluster-management/multicloud-operators-subscription:v0.12.0

v0.11.0

What's Changed

• Skip deletion of subscribe resource if it's failed and has no apiversion by @philipwu08 in #311
• Add multiclusterapplicationsetreport crd & update gitopscluster crd by @lennysgarage in #312
• Update csv for single deployment with 3 controllers by @lennysgarage in #314
• Update git repo doc by @lennysgarage in #315
• Update csv to include applicationsets api by @lennysgarage in #316
• update csv for argocd pull propagation controller by @mikeshng in #317
• update CSV for propgation controller by @mikeshng in #318
• Set leader election & sync interval flags in csv by @lennysgarage in #319
• Upgrade go to 1.20 by @lennysgarage in #320
• ACM-4383 Security Vulnerabilities by @lennysgarage in #321
• ACM-3262 Unable to make SSH connection to a bitbucket repo on a non-standard ssh port by @lennysgarage in #322
• Add instructions for connecting to GitHub via SSH by @lennysgarage in #324
• Update ArgoCD pull model propagation controller limit setting by @mikeshng in #325
• declare seccompProfile to avoid appsub pod failure in crun enabled OC… by @xiangjingli in #326
• Bump Policy Generator to v1.12.0 by @dhaiducek in #329
• ACM-4489 disable caching of secrets & service accounts by @lennysgarage in #327
• Update leader election settings by @lennysgarage in #330
• Up multicluster-integrations-aggregation controller memory to 1Gi by @lennysgarage in #331
• Add app field to appsetreport by @lennysgarage in #332
• Bump generator to v1.12.1 by @dhaiducek in #333
• ACM-5225 Enforce server side TLSv1.3 by @lennysgarage in #334
• Prevent push triggered ci workflows from running on forks by @TomerFi in #336
• Declare seccompProfile to avoid PodSecurity warnings by @lennysgarage in #337
• Ensure subscription CRDs are applied before starting controller by @lennysgarage in #338
• Backport ACM-5451 test coverage by @lennysgarage in #339
• Revert "Declare seccompProfile to avoid PodSecurity warnings (#337)" by @eemurphy in #340

New Contributors

• @eemurphy made their first contribution in #340

Full Changelog: v0.10.0...v0.11.0

multicloud-operators-subscription v0.11.0

• See the CHANGELOG for more details.
• The released image is quay.io/open-cluster-management/multicloud-operators-subscription:v0.11.0

v0.10.0

What's Changed

• feat: added propagation_time histrogram metrics for hub clusters by @TomerFi in #269
• test: added unit tests for the hub propagation by @TomerFi in #272
• subscription csv bundle format issue by @xiangjingli in #274
• feat: added local_deployment latency metrics by @TomerFi in #273
• set up subscription tls volume as emptyDir by default by @xiangjingli in #275
• fix: report failed propagation for failures in preliminary operations by @TomerFi in #277
• Fix Git subscription for Helm charts with no git path subscription annotation defined or the git path is the current repo by @mikeshng in #276
• Add AnsibleJob JobTags and SkipTags support by @mikeshng in #278
• Add e2e tests for Ansible job_tags and skip_tags by @mikeshng in #279
• Display default values in advanced-cluster-management csv by @lennysgarage in #281
• Support node selector and tolerations by @philipwu08 in #280
• support to customize memory limits in application manager by @xiangjingli in #282
• Enforce server side TLSv1.2 by @lennysgarage in #284
• chore: added olm servicemonitor manifests for the metrics services by @TomerFi in #283
• chore: added missing olm manifest for a servicemonitor for the mc metrics by @TomerFi in #285
• test: added e2e test for a failed git pull metric scenario by @TomerFi in #286
• chore: standalone propagation should report successful propagation for consistency by @TomerFi in #287
• fix: removed servicemonitor from olm required crd to avoid deployment failures by @TomerFi in #289
• docs: small docs fix after previous work by @TomerFi in #288
• Fix sshKey typo in error message by @lennysgarage in #290
• chore: removed servicemonitors and rbac olm manifests relates to metrics collecting by @TomerFi in #291
• Update PolicyGenerator to v1.10.0 by @JustinKuli in #293
• Add a cleanup go routine that runs every hour to check to see if ther… by @mikeshng in #294
• Fix sonar scan by @mikeshng in #295
• disable concurrent reconcile to avoid OOM issue in the 3K managed clu… by @xiangjingli in #296
• Add Hub subscription time calculation to show the time status in mess… by @mikeshng in #297
• increase placementrule memory limit to 1.5G for 3K clusters case by @xiangjingli in #298
• fix: subscriber should report failed deployment for failing to verify… by @TomerFi in #299
• Add clustermanagementaddon for app LC by @philipwu08 in #300
• Bump helm from v3.9.4 to v3.10.3 by @lennysgarage in #301
• add liveness probe to managed cluster subscription controller by @xiangjingli in #302
• Get addon image from MCH configmap without use of env variables by @philipwu08 in #303
• check if appsubstatus resouce lit empty to avoid panic error by @xiangjingli in #304
• ACM-2536: Placement rule not matching by @chenz4027 in #305
• remove dulplicate livenessProbe and readinessProbe by @xiangjingli in #306
• Enhance SubscriptionStatus orphans cleanup by implementing increasing… by @mikeshng in #308
• Upgrade COMPONENT_VERSION for 2.8 by @lennysgarage in #309
• Update imagebuilder by @mikeshng in #310

New Contributors

• @JustinKuli made their first contribution in #293

Full Changelog: v0.9.0...v0.10.0

multicloud-operators-subscription v0.10.0

• See the CHANGELOG for more details.
• The released image is quay.io/open-cluster-management/multicloud-operators-subscription:v0.10.0

v0.9.0

What's Changed

• kube 1.24 service account token secret changes by @rokej in #222
• do not watch appmgr SA token secret by @rokej in #227
• Do not run the pre delete hook addon job if it's on the hub cluster by @mikeshng in #224
• Helm subscription: only watch resources when the spec.watch... is enabled by @mikeshng in #230
• Remove unused funcs, GetChannelGeneration & GetChannelNamespaceType by @lennysgarage in #231
• Fix APIVersion in generateResourceList by @chenz4027 in #232
• Add permission to delete placementdecisions for app SA by @philipwu08 in #236
• Upgrade go dependencies by @lennysgarage in #235
• fix appsubreport not generating for local-cluster when the pod dealing with HelmRelease is the standalone pod by @mikeshng in #237
• Fix Helm subscription not handling local-cluster failed HelmRelease properly by @mikeshng in #239
• Add default controller leader election setting values by @lennysgarage in #242
• fix inaccurate test case by @TomerFi in #243
• Upgrade helm to v3.9.4 by @lennysgarage in #246
• Fix cannot update AppsubClusterStatus by @clyang82 in #248
• Prevent push triggered CI workflows from running on synced forks by @TomerFi in #249
• Add documents for develop locally by @chenz4027 in #251
• Remove the unsupported cluster versions in upgrade environment by @lennysgarage in #250
• Fix unsupported cluster version test coverage by @lennysgarage in #253
• Change lease-duration to leader-election-lease-duration by @lennysgarage in #254
• don't skip namespace kind resources by @xiangjingli in #255
• Add AnsibleJob Workflow invoke example. by @mikeshng in #256
• Add AnsibleJob Workflow Template invoke support by @mikeshng in #257
• test: fix flaky test suite wrap ups by @TomerFi in #258
• Include metrics service resources for subscription deployments by @TomerFi in #259
• Add git_pull_time metric by @TomerFi in #261
• restart the application manager controller if there is a hub kubeconf… by @xiangjingli in #262
• chore: set git sub metric test example source to own repo by @TomerFi in #264
• update go to 1.19 by @lennysgarage in #266
• patch CVE-2022-32149 by @lennysgarage in #267
• Fix delete issue by @chenz4027 in #268

New Contributors

• @clyang82 made their first contribution in #248

Full Changelog: v0.8.0...v0.9.0

multicloud-operators-subscription v0.9.0

• See the CHANGELOG for more details.
• The released image is quay.io/open-cluster-management/multicloud-operators-subscription:v0.9.0

v0.8.0

What's Changed

• Use mch image manifest configmap for appsub addon image by @philipwu08 in #143
• Fix manual sync by @rokej in #149
• cve fix by @xiangjingli in #151
• cve fix by @xiangjingli in #152
• placement rule controller performance enhacement by @xiangjingli in #153
• Add doc on how to use the getLastUpdateTime.sh script by @philipwu08 in #155
• Fix getLastUpdateTime.sh for local-cluster by @philipwu08 in #156
• don't include namespace for cluster scoped resources by @xiangjingli in #157
• Fix PackageOverride performing a merge instead of complete replace for HelmRelease spec by @mikeshng in #158
• Fix local-cluster appsubreport not getting created for helm local appsub by @mikeshng in #160
• Fix Helm appsub delete not removing appsubstatus. by @mikeshng in #161
• update clusteradm install Available Commands by @panguicai008 in #162
• fix clusteradm addon enable command unknown flag: --names and --clusters by @panguicai008 in #163
• fix Dependabot alerts and code scaning alerts by @xiangjingli in #164
• Add an e2e test case files for testing resource name. E2e test not enable yet until fix is implemented by @mikeshng in #165
• Remove invalid resource name DNS validation by @mikeshng in #166
• Ensure appsubstatus exist after a subscription reconcile for Helm subscriptions by @mikeshng in #167
• always update token secret on reconcile by @rokej in #168
• Update the Policy Generator version to v1.7.0 (#731) by @mprahl in #169
• Fix Git subscription for Helm charts not deleting older HelmRelease by @mikeshng in #171
• add updated column in subscription status by @rokej in #172
• Always update cluster appsubreport by @mikeshng in #173
• don't evaluate user managed clusters permission by creating SelfSubje… by @xiangjingli in #174
• fix typo in addon CRD by @rokej in #175
• fix CRD by @rokej in #176
• fix CRD by @rokej in #177
• Ignore package delete error if it is deleted already by @philipwu08 in #178
• add current namespace scoped feature back by @rokej in #179
• fix allow, deny, secondary channel by @rokej in #180
• validate managed cluster get role via checking all multiple cluster roles bound to the user by @xiangjingli in #181
• fix isLocalCluster check by @mikeshng in #182
• update doc - how to override images on managed cluster since 2.5 by @xiangjingli in #183
• update the topic about how to report subscription status by @xiangjingli in #184
• Add test case to validate k8s label by @lennysgarage in #185
• add topic to trouble shooting doc - create ManagedClusterView by @xiangjingli in #186
• Add tests for Gitrepo utils by @lennysgarage in #188
• add multicluster subscription operator csv by @xiangjingli in #192
• Migrate Ginkgo to v2 by @lennysgarage in #189
• Remove unused functions to improve code coverage by @lennysgarage in #194
• New service account for some application pods by @philipwu08 in #195
• Add missing rules for multicluster-applications SA by @philipwu08 in #196
• Update rules requires for app webhook by @philipwu08 in #197
• Git missing gitops status rule by @philipwu08 in #199
• Avoid deleting manifestwork which contains the same label but belongs… by @xiangjingli in #200
• Remove hardcoded user uid from dockerfile by @philipwu08 in #201
• Revert removal of user uid from dockerfile by @philipwu08 in #203
• add unit test for object store subscriber by @xiangjingli in #202
• Add unit tests for synchronizer by @lennysgarage in #204
• Update OWNERS by @lennysgarage in #198
• Pick annotation change by @chenz4027 in #205
• Add ability to enable Helm chart resources recreate and modification revert. by @mikeshng in #208
• Add unit test for do-not-delete by @chenz4027 in #210
• Misc updates for build changes by @mikeshng in #211
• fix SSH known hosts issue by @rokej in #212
• patch CVE-2022-31030 by @lennysgarage in #214
• Update the Policy Generator version to v1.8.0 by @mprahl in #216
• update go to 1.18 by @lennysgarage in #209

New Contributors

• @panguicai008 made their first contribution in #162
• @lennysgarage made their first contribution in #185
• @chenz4027 made their first contribution in #205

Full Changelog: v0.7.0...v0.8.0

multicloud-operators-subscription v0.8.0

• See the CHANGELOG for more details.
• The released image is quay.io/open-cluster-management/multicloud-operators-subscription:v0.8.0

v0.7.0

What's Changed

• fix git default branch by @rokej in #71
• Update channel version and remove redunant file by @mikeshng in #72
• Update dependencies by @mikeshng in #73
• Include kind in appsubStatus and appsubReport structs by @philipwu08 in #74
• Use updated e2e tests by @philipwu08 in #75
• Run Git channel dryruns even if commit didn't change by @philipwu08 in #76
• add app labels to subscription by @rokej in #77
• Cleanup deployables for old subscriptions by @philipwu08 in #78
• Remove DNS check for Helm subscription by @mikeshng in #79
• appstatus deployed on the local-cluster should have the same appsub name by @xiangjingli in #80
• Update dependencies to use the most recent Go libs by @philipwu08 in #82
• set default value for helmrelease chart directory by @mikeshng in #83
• Cleanup Go lib dependencies by @philipwu08 in #84
• check other cluster role bindings for subscription admin by @rokej in #86
• Use ManifestWork delete policy to keep the managed cluster appsub namespace by @mikeshng in #87
• code refactoring by @rokej in #89
• Remove cleanup of deployables by @philipwu08 in #88
• Allow appsub controllers to be able to run outside of cluster by @xiangjingli in #90
• Add agent-install-all flag to subscription addon by @ivan-cai in #91
• Only detect if the placementDecsion API is ready on the hub cluster by @xiangjingli in #94
• fix memory leak from helm chart dry runs by @rokej in #95
• Show error when Helm subscription failed to find any matching Helm chart. for deployment. by @mikeshng in #96
• Skip getting PlacementRule in PlacementDecision sync. by @mikeshng in #93
• Build related updates by @mikeshng in #99
• Support installation of app mgr addon on managed clusters by @philipwu08 in #100
• add mergeAndOwn option by @rokej in #101
• fix mergeAndOwn and error status report by @rokej in #102
• handle channel and secret namespace changes between hub and managed by @rokej in #103
• fix minor misplacement by @vMaroon in #98
• Update the Policy Generator to v1.5.0 by @mprahl in #104
• Create ClusterManagementAddon CR for application-manager by @philipwu08 in #105
• Simplify Ansible integration example by @mikeshng in #107
• Add ansiblejob e2e test. by @mikeshng in #108
• placement API upgrade to v1beta1 by @rokej in #109
• Use agent image from env var OPERAND_IMAGE_MULTICLUSTER_OPERATORS_SUB… by @philipwu08 in #110
• upgrade addon-framework to the latest version by @zhiweiyin318 in #111
• Use git-core package instead of git in Docker image by @philipwu08 in #112
• Add Ansible post hook only example by @mikeshng in #113
• not install addon CRDs in hub cluster by @zhiweiyin318 in #115
• fix the pre-delete job no namespace filed by @zhiweiyin318 in #117
• Fix Ansible posthook not creating AnsibleJob CR by @mikeshng in #114
• use manualSelector for job in addon by @zhiweiyin318 in #119
• Add e2e helm repo for future e2e tests by @mikeshng in #120
• Create one ManagedClusterView per app on the first failing cluster by @xiangjingli in #121
• Perform dry-run Helm operations before action operations by @mikeshng in #122
• fix sonarcloud warning - Implicit memory aliasing in for loop by @xiangjingli in #123
• Fix e2e: after applying changes, not waiting enough by @mikeshng in #128
• Update the Policy Generator to v1.6.0 by @ChunxiAlexLuo in #127
• update doc according to latest code by @jichenjc in #124
• nit: fix log (error => info) by @jichenjc in #126
• return true if both allowed is false and denied is false in SubjectAc… by @xiangjingli in #132
• Add appsub status reference to subcription CRD by @philipwu08 in #133
• include helmrelease in appsubstatus by @mikeshng in #136
• Add placement rule status controller by @mikeshng in #135
• update doc to align with latest code by @jichenjc in #137
• Fix cluster override not handling ownerref properly by @mikeshng in #138
• show version in the status as well by @mikeshng in #139
• Evaluate user access to managed cluster by selfSubjectAccess with Imp… by @xiangjingli in #140
• cve fix by @xiangjingli in #141
• Update lastUpdateTime for appsub on reconcile by @philipwu08 in #142
• Hub cluster helm dry run should not fail subscription propgation by @mikeshng in #146
• fix git clone error status by @rokej in #145
• ServiceAccount type subscription-admin role binding by @rokej in #147
• subscription addon support v1beta1 CSR (update addon-framework to v0.3.0) by @ivan-cai in #148

New Contributors

• @philipwu08 made their first contribution in https://github.com/open-cluster-management-io/multicloud-operators-subscripti...

v0.6.0

What's Changed

• do not set ownerref if resource is deployed into different namespace by @rokej in #38
• Fix Helm subscription resource list population when charts contains CR(s) that the Hub cluster doesn't have CRD by @mikeshng in #39
• Update securitymd to refer to the OCM community security md file by @mikeshng in #40
• fix skip ssl by @rokej in #41
• Update go version to 1.17 by @mikeshng in #42
• PlacementRule controller generate PlacementDecisions by @mikeshng in #44
• Fix Helm subscription error not being reported in status by @mikeshng in #47
• Use a better semver library to handle version parsing to deal with version that starts with a character v by @mikeshng in #49
• fix SSH host key scan by @rokej in #50
• Add a warning message when helm subscription fails to find a matching helm chart to deploy by @mikeshng in #51
• Fix subscription spec changes not triggering Helm appsub updates by @mikeshng in #54
• Use PlacementDecision to determine app placement instead of PlacementRule by @mikeshng in #55
• Adopt FOSSA scan. by @mikeshng in #56
• Don't watch placement decision api until it is installed; skip updati… by @xiangjingli in #58
• fix git annotation change by @rokej in #59
• add Git mTLS connection support by @rokej in #62
• Fix fossa scan by @mikeshng in #61
• Remove legacy auto gen file that is no longer in use by @dhaiducek in #60
• Update PROW test Git repo URL. by @mikeshng in #64
• Update the Policy Generator GitHub URLs to use the stolostron org by @mprahl in #65
• Fix bindata for addon deployment by @mikeshng in #66
• cve fix by @xiangjingli in #67
• Add new e2e framework for kubectl related testing. Add placement API tests by @mikeshng in #68
• Update build related files by @mikeshng in #69
• Update changelog for v.0.6.0 by @mikeshng in #70

New Contributors

• @dhaiducek made their first contribution in #60
• @mprahl made their first contribution in #65

Full Changelog: v0.5.0...v0.6.0

multicloud-operators-subscription v0.6.0

• See the CHANGELOG for more details.
• The released image is quay.io/open-cluster-management/multicloud-operators-subscription:v0.6.0

v0.5.0

multicloud-operators-subscription v0.5.0

• See the CHANGELOG for more details.
• The released image is quay.io/open-cluster-management/multicloud-operators-subscription:v0.5.0