2.0.1

Changelog

ValidatingWebhookConfiguration v1beta1 fail for kubernetes 1.22 (#112)

2.0.0

Changelog

⚠️⚠️⚠️BREAKING CHANGES

• Dedicated section admissionController in values.yaml for configuring admission controller webhook
• Admission controller can be disabled via values.yaml
• Chart version synchronized with kube-mgmt version
• Version is maintained via git tags, no file modifications needed
• Release is created only on git tag push
• Better default watch namespaces (#95)
• By default only OPA is installed, mgmt and admission controller are disabled
• Simplify liveness / readiness check configuration
• RBAC installation simplified
• OPA is upgraded to 0.32.0
• By default json is used for log formatting
• kube-mgmt is compiled with golang 1.15.0

v0.12.1

Fix helm chart certificate generated to have it working with newer Go versions not supporting some deprecated X509 Certificate configs (#86).

v0.12

This release bumps the alpine base image to address a vulnerability (#84). This release also fixes synching of policies from all namespaces (#55).

v0.11

This release fixes the logging issue reported in #49. kube-mgmt will no longer log error messages about being unable to Status objects.

v0.10

This release updates kube-mgmt to perform all of the resync operations in one request as opposed to a DELETE followed by several PUTs. This method is more efficient, requires less locking in the OPA server, and makes the resync operation operate atomically.

v0.9

• Add support for replicating configmaps from multiple namespaces with --policies='*'
• Add support for loading data out of configmaps instead of just policies (see README)
• Refactor data replicator to reduce memory consumption and resolve panics (#43)

v0.8

• Add --opa-auth-token-file and --opa-auth-token file for specifying OPA authentication token via file and command line (respectively).
• Add --enable-policies=<true|false> flag to enable/disable policy loading.
• Add docs for securing kube-mgmt/OPA
• Add docs for enforcing admission policy over CRDs