v0.4.0-alpha.10

Changelog

• a6082ff Merge pull request #263 from cooktheryan/image_sha_patch
• db5d38c update of sha
• 76f712a Merge pull request #261 from cooktheryan/fix/openshift-scc-ubi-images
• 6f474bb fix: OpenShift SCC compatibility — UBI images and hardened SecurityContext
• a39d271 Merge pull request #238 from Alan-Cha/spiffe-keycloak-consolidation
• 76e648f Merge branch 'main' into spiffe-keycloak-consolidation
• 7c40841 Merge pull request #254 from huang195/feat/combined-sidecar
• f9b2d87 fix: Address PR review — harden entrypoint and pin Go image
• 18c21b7 feat: Add combined AuthBridge sidecar mode
• 493d57a Merge pull request #253 from huang195/fix/demo-realm-to-kagenti
• 934caf1 chore: add test-jwt-rotation.sh to .gitignore
• 4f6b1f4 fix: missed doc refs and add teardown safety for kagenti realm
• 14a0033 fix: change default Keycloak realm from "demo" to "kagenti"
• 6ad6baa refactor: improve go-processor config handling
• aaa65aa test: fix exchangeToken test calls after signature change
• ad56660 fix: add missing /shared volume mount to test deployment
• be956a1 Consolidate keycloak-webhook-config into authbrid ge-config
• 8fddaf8 Respond to comments
• 96fb4e7 Revert UID changes
• a9d0a9e Remove extraneous file
• 7e631f1 Address Go CI error
• 1c801e3 Update LOCAL_TESTING_GUIDE
• d1c723e Client registration gets KEYCLAOK_URL and KEYCLOAK_REALM
• de05f53 Update verification script
• ba3ae0f Change demo realm to Kagenti realm
• d1cba85 docs: Emphasize using build script and add troubleshooting
• 44033b4 Add fsGroup to allow shared volume access
• 2a9ce48 Enable SPIRE in Keycloak
• 5991d42 Add federated auth testing docs
• 345e09e Add federated auth testing scripts
• 7d133f0 Merge pull request #244 from kagenti/dependabot/github_actions/actions/upload-artifact-7.0.0
• 33315d7 Merge pull request #245 from kagenti/dependabot/github_actions/rojopolis/spellcheck-github-actions-0.60.0
• 4e44c79 Merge pull request #246 from kagenti/dependabot/github_actions/github/codeql-action-4.33.0
• bbaf1d8 Merge pull request #247 from kagenti/dependabot/pip/AuthBridge/client-registration/pyjwt-2.12.1
• 631f468 Merge pull request #251 from mrsabath/fix/demo-users-admin-role
• 3d00af3 Merge pull request #243 from mrsabath/docs/weather-demo-cleanup
• e37f8ff docs: Use more specific example prompt in github-issue demo
• 9343d1a docs: Add missing comma in port exclusion sentence
• 2c50c61 fix: Handle KeycloakGetError when admin role is missing
• eb88701 fix: Assign admin realm role to demo users in github-issue setup
• bdc5138 Merge pull request #231 from pavelanni/feat/actor-token-exchange
• cf47969 Merge pull request #217 from cwiklik/feat/webhook-config-resolution
• 5e030dd Merge remote-tracking branch 'upstream/main' into feat/webhook-config-resolution
• 288e86b fix: default ACTOR_TOKEN_ENABLED to false (opt-in)
• 8b5ea19 docs: Align design doc with authbridge-config consolidation
• 274d0a1 fix: Read all config from authbridge-config ConfigMap in resolved path
• 64145dd fix: Address second review findings from pdettori
• f0a6d1c fix: Clean up self-review findings for config resolution pipeline
• 220dd6f fix: Address PR review findings for config resolution pipeline
• 177f5f7 fix: Address PR review findings from pdettori
• c3a051b fix: Address self-review findings on config resolution pipeline
• 4071789 feat: Add per-workload config resolution pipeline for webhook
• 33601d5 fix: address PR review feedback on actor token and client registration
• 529c589 docs: Clean up GitHub Issue Agent demo guide
• 24e7261 build(deps): Bump pyjwt in /AuthBridge/client-registration
• e7bdaa7 build(deps): Bump github/codeql-action from 4.32.6 to 4.33.0
• 7806408 build(deps): Bump rojopolis/spellcheck-github-actions
• 0c05a68 build(deps): Bump actions/upload-artifact from 4.6.2 to 7.0.0
• 09e97e8 docs: Clean up weather agent demo guide
• 6da6aaa fix: handle 409 conflict in client registration for SPIFFE IDs
• 8738046 fix: add docker.io prefix for Podman compatibility
• 2dc09ee feat: add RFC 8693 actor token support for act claim chaining