Skip to content

kollect 0.19.0

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 31 Aug 15:25
· 84 commits to main since this release
v0.19.0
400c340

0.19.0 - 2026-08-26

Bug Fixes

  • test: Stop the fence walker desyncing, and discover quoted fences (#330)10b5ab8

  • docs: Correct the last prose instance of the bare-string sink ref 34b2f8f

  • docs: Stop the scope examples from depicting a ceiling they do not impose 79a7ddc

  • test: Skip gitignored build artefacts under docs/ 6fa8b91

  • docs: Correct the examples the CRD schemas reject bbc441d

  • docs: Document the per-family sink allowlists, not the removed sinkRefs 6ddabcf

  • test: Wait for the NATS server-ready log before connecting (#329)4c2ce3d

  • samples: Make the advanced and team-operator overlays apply again 4d69f94

  • dev: Select envtest assets by host OS/arch (#326)59f6bb4

  • ci: Assert the release workflow installs operator-sdk on code, not comments (#325)62622b4

  • ci: Point the owned[] drift message in both directions e66feab

  • ci: Anchor the dist_* wiring gate to the lint job's steps fbf6a9a

  • deps: Satisfy the cel-go v0.31 Program interface and tidy go.sum (#322)e60f126

  • artifacthub: Delist the charts that pin a nonexistent :latest image 5f460d5

  • olm: Reject a bundle digest that is not a runnable image b39af74

  • olm: Give every owned CRD an alm-examples entry (#311)8a6eb3b

  • dist: Stop Artifact Hub indexing image tags as charts f105676

  • olm: Correct installModes and make OperatorHub submission portable 6f1f1b9

  • webhook: Validate spec-derived GVKs when the profile is missing (#308)3cac404

  • webhook: Keep KollectScope checks when the profile is missing (#307)d233432

  • olm: Sync CSV clusterPermissions with the kollectclusterscopes grant (#306)aa12fde

  • controller: Re-reconcile cluster targets on KollectClusterScope writes f52ed87

  • controller: Grant the manager RBAC to read KollectClusterScope 6606a65

  • webhook: Enforce cluster-scope when the profile is missing (#304)bd3ed9e

  • sink: Redact kafka SASL construction errors (#303)f98ddbe

Features

  • olm: Validate the bundle locally with the modern validator set (#312)3a21a0f

  • docs: Add Artifact Hub and OperatorHub.io badges (#309)e71faaf

  • dist: Activate the Artifact Hub listing 7de7443

Container image (operator)

ghcr.io/platformrelay/kollect:v0.19.0

Multi-arch (linux/amd64, linux/arm64), Debian bookworm-slim nonroot base (includes git and openssh-client for spec.git.engine: cli).

OCI attestations (SBOM + SLSA provenance) are attached in GHCR and on the repository
Attestations page. Verify the signature:

cosign verify \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity-regexp '^https://github.com/PlatformRelay/Kollect/.+' \
  ghcr.io/platformrelay/kollect@sha256:03ba8bc09f1398194d629e8b8ff9efd2017eee0e17b1c3f147ef779fd897a3ff

Container image (kollect-pipeline)

One-shot CI/CD collection CLI (ADR-0801) — collect inventory from a kubeconfig without installing
the operator. See the pipeline CLI guide.

ghcr.io/platformrelay/kollect-pipeline:0.19.0

Multi-arch (linux/amd64, linux/arm64), distroless static nonroot base. The git snapshot sink
uses the pure-Go go-git engine over HTTPS; git.engine: cli and file:// remotes are not supported
in this minimal image.

cosign verify \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity-regexp '^https://github.com/PlatformRelay/Kollect/.+' \
  ghcr.io/platformrelay/kollect-pipeline@sha256:402f96fef99e1f123d124982566674c4fadbe958a0840c5fb569d088883563eb

Install (Kustomize)

kubectl apply -f install-crds.yaml
kubectl apply -f install.yaml

Install (Helm — OCI)

helm upgrade --install kollect oci://ghcr.io/platformrelay/kollect \
  --version 0.19.0 \
  --namespace kollect-system \
  --create-namespace \
  --set image.repository=ghcr.io/platformrelay/kollect \
  --set image.tag=v0.19.0

Install (Helm — GitHub Release tarball)

helm upgrade --install kollect kollect-0.19.0.tgz \
  --namespace kollect-system \
  --create-namespace \
  --set image.repository=ghcr.io/platformrelay/kollect \
  --set image.tag=v0.19.0

Verify checksums with sha256sum -c checksums.txt. Each release asset includes a
<file>.sigstore.json Sigstore bundle; release-provenance.intoto.jsonl attests all assets.
See docs/RELEASE.md.

Assets 15
Loading