v0.8.0

• feat: arm routes through an EnvoyExtensionPolicy when their SecurityPolicy slot is taken (#17)
• docs: project website on GitHub Pages (#16)

Install by digest

helm install mm oci://ghcr.io/prosperity-solutions/charts/maintenance-manager@sha256:7e6ca8f083222f2c8f661f9f45d462abd064b064745aa09df45484d8a221f6f7 \
  -n maintenance-manager --create-namespace --set editor.password=<at least 12 characters>

Verify

gh attestation verify oci://ghcr.io/prosperity-solutions/maintenance-manager@sha256:dd2aedde131e911796639c72c83d7e6398aa6c46d652f11b695b3a9a70d5fb4a \
  --repo prosperity-solutions/maintenance-manager \
  --signer-workflow prosperity-solutions/maintenance-manager/.github/workflows/ci.yml \
  --source-ref refs/heads/main --deny-self-hosted-runners
gh attestation verify oci://ghcr.io/prosperity-solutions/charts/maintenance-manager@sha256:7e6ca8f083222f2c8f661f9f45d462abd064b064745aa09df45484d8a221f6f7 \
  --repo prosperity-solutions/maintenance-manager \
  --signer-workflow prosperity-solutions/maintenance-manager/.github/workflows/ci.yml \
  --source-ref refs/heads/main --deny-self-hosted-runners

Image sha256:dd2aedde131e911796639c72c83d7e6398aa6c46d652f11b695b3a9a70d5fb4a, chart sha256:7e6ca8f083222f2c8f661f9f45d462abd064b064745aa09df45484d8a221f6f7.

v0.7.0

• feat: metrics, pprof flag, NetworkPolicy option, operator docs (#15)

Install by digest

helm install mm oci://ghcr.io/prosperity-solutions/charts/maintenance-manager@sha256:0d53770acc50920afcd8c20ba2ad4d8bdcafa1f9e25c36710b831de5b08d081a \
  -n maintenance-manager --create-namespace --set editor.password=<at least 12 characters>

Verify

gh attestation verify oci://ghcr.io/prosperity-solutions/maintenance-manager@sha256:e02ce4778e32f168743c4fe699a64a265926e05108eefd24bb8f660f92c32414 \
  --repo prosperity-solutions/maintenance-manager \
  --signer-workflow prosperity-solutions/maintenance-manager/.github/workflows/ci.yml \
  --source-ref refs/heads/main --deny-self-hosted-runners
gh attestation verify oci://ghcr.io/prosperity-solutions/charts/maintenance-manager@sha256:0d53770acc50920afcd8c20ba2ad4d8bdcafa1f9e25c36710b831de5b08d081a \
  --repo prosperity-solutions/maintenance-manager \
  --signer-workflow prosperity-solutions/maintenance-manager/.github/workflows/ci.yml \
  --source-ref refs/heads/main --deny-self-hosted-runners

Image sha256:e02ce4778e32f168743c4fe699a64a265926e05108eefd24bb8f660f92c32414, chart sha256:0d53770acc50920afcd8c20ba2ad4d8bdcafa1f9e25c36710b831de5b08d081a.

v0.6.0

• feat(client): banner and block overlay for apps, from the status endpoint (#14)
• feat(editor): dashboard, forms for services, pages and windows (#13)

v0.5.0

• fix(render)!: limit page templates to a safe subset (#12)

v0.4.1

• fix(deps): bump grpc and sigstore-go in the tools module (#11)

v0.4.0

• feat: the controller arms routes with one SecurityPolicy per namespace (#10)

v0.3.0

• feat: maintenance windows decide every request (#9)

v0.2.0

• feat: block a route by route metadata and run e2e on kind (#5)

v0.1.1

• fix(release): allow the attestation bundle host in verify (#6)

v0.1.0

• fix(release): make prefetch.sh executable and test script modes (#4)
• fix(release): retry module fetches and the first GHCR push (#3)
• feat: walking skeleton with CRDs, chart and an always-OK authz (#2)
• chore: bootstrap