Skip to content

Releases: sighupio/module-auth

Release list

Release v0.7.0

Release v0.7.0 Latest
Latest

Choose a tag to compare

View all tags
@SIGHUP-C-3PO SIGHUP-C-3PO released this 07 Jul 10:04
v0.7.0
This tag was signed with the committer’s verified signature.
stefanoghinelli Stefano Ghinelli
GPG key ID: 9F49021A3394567B
Verified
Learn about vigilant mode.
c3b9177
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Auth Module Release v0.7.0

Welcome to the latest release of the Auth module for the SIGHUP Distribution.

This release updates the packages versions of Dex and Pomerium to the latest available in upstream. It also upgrades Gangplank.

Included packages

Package Current Version Previous Version
dex v2.45.1 v2.44.0
gangplank v1.2.1 v1.1.1
pomerium v0.32.7 v0.31.1

Compatibility

This release adds support for Kubernetes 1.35.x while maintaining compatibility with versions 1.29.x through 1.34.x.

Notable change

In Dex, starting from this version, the ContinueOnConnectorFailure flag is enabled by default, so Dex will stay up even if a connector fails to initialize, but authentications will fail silently. Previously, a connector initialization failure would cause Dex to crash. To disable it, use the following environment variable: DEX_CONTINUE_ON_CONNECTOR_FAILURE=false.

Update Guide 🦮

Process

To upgrade this module from v0.6.1 to v0.7.0, you need to download this new version, then apply the kustomize project.

kustomize build | kubectl apply -f -
Assets 5
Loading

Preview v0.7.0-rc.1

Preview v0.7.0-rc.1 Pre-release
Pre-release

Choose a tag to compare

View all tags
@SIGHUP-C-3PO SIGHUP-C-3PO released this 07 Jul 09:18
v0.7.0-rc.1
This tag was signed with the committer’s verified signature.
stefanoghinelli Stefano Ghinelli
GPG key ID: 9F49021A3394567B
Verified
Learn about vigilant mode.
3ca363c
This commit was signed with the committer’s verified signature.
stefanoghinelli Stefano Ghinelli
GPG key ID: 9F49021A3394567B
Verified
Learn about vigilant mode.

Auth Module Release v0.7.0

Welcome to the latest release of the Auth module for the SIGHUP Distribution.

This release updates the packages versions of Dex and Pomerium to the latest available in upstream. It also upgrades Gangplank.

Included packages

Package Current Version Previous Version
dex v2.45.1 v2.44.0
gangplank v1.2.1 v1.1.1
pomerium v0.32.7 v0.31.1

Compatibility

This release adds support for Kubernetes 1.35.x while maintaining compatibility with versions 1.29.x through 1.34.x.

Notable change

In Dex, starting from this version, the ContinueOnConnectorFailure flag is enabled by default, so Dex will stay up even if a connector fails to initialize, but authentications will fail silently. Previously, a connector initialization failure would cause Dex to crash. To disable it, use the following environment variable: DEX_CONTINUE_ON_CONNECTOR_FAILURE=false.

Update Guide 🦮

Process

To upgrade this module from v0.6.1 to v0.7.0, you need to download this new version, then apply the kustomize project.

kustomize build | kubectl apply -f -
Loading

Preview v0.7.0-rc.0

Preview v0.7.0-rc.0 Pre-release
Pre-release

Choose a tag to compare

View all tags
@SIGHUP-C-3PO SIGHUP-C-3PO released this 20 May 12:23
v0.7.0-rc.0
This tag was signed with the committer’s verified signature.
stefanoghinelli Stefano Ghinelli
GPG key ID: 9F49021A3394567B
Verified
Learn about vigilant mode.
e017fcb
This commit was signed with the committer’s verified signature.
stefanoghinelli Stefano Ghinelli
GPG key ID: 9F49021A3394567B
Verified
Learn about vigilant mode.

Auth Module Release v0.7.0

Welcome to the latest release of the Auth module for the SIGHUP Distribution.

This release updates the packages versions of Dex and Pomerium to the latest available in upstream. It also upgrades Gangplank.

Included packages

Package Current Version Previous Version
dex v2.45.1 v2.44.0
gangplank v1.2.0 v1.1.1
pomerium v0.32.7 v0.31.1

Compatibility

This release adds support for Kubernetes 1.35.x while maintaining compatibility with versions 1.29.x through 1.34.x.

Notable change

In Dex, starting from this version, the ContinueOnConnectorFailure flag is enabled by default, so Dex will stay up even if a connector fails to initialize, but authentications will fail silently. Previously, a connector initialization failure would cause Dex to crash. To disable it, use the following environment variable: DEX_CONTINUE_ON_CONNECTOR_FAILURE=false.

Update Guide 🦮

Process

To upgrade this module from v0.6.1 to v0.7.0, you need to download this new version, then apply the kustomize project.

kustomize build | kubectl apply -f -
Loading

Release v0.6.1

Release v0.6.1

Choose a tag to compare

View all tags
@SIGHUP-C-3PO SIGHUP-C-3PO released this 19 Feb 16:08
v0.6.1
This tag was signed with the committer’s verified signature.
stefanoghinelli Stefano Ghinelli
GPG key ID: 9F49021A3394567B
Verified
Learn about vigilant mode.
cf24d8d
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Auth Module Release v0.6.1

Welcome to the latest release of the Auth module for the SIGHUP Distribution.

This release updates Pomerium and particularly includes an update to Envoy v1.35.6, to address the following CVEs in Envoy and its dependencies:

Included packages

Package Current Version Previous Version
dex v2.44.0 No update
gangplank v1.1.1 No update
pomerium v0.31.1 v0.30.5

Compatibility

This release adds support for Kubernetes 1.34.x while maintaining compatibility with versions 1.29.x through 1.34.x.

Update Guide 🦮

Process

To upgrade this module from v0.6.0 to v0.6.1, you need to download this new version, then apply the kustomize project. No breaking changes or configuration updates are required.

kustomize build | kubectl apply -f -
Loading

Preview v0.6.1-rc.0

Preview v0.6.1-rc.0 Pre-release
Pre-release

Choose a tag to compare

View all tags
@SIGHUP-C-3PO SIGHUP-C-3PO released this 04 Dec 15:55
v0.6.1-rc.0
This tag was signed with the committer’s verified signature.
stefanoghinelli Stefano Ghinelli
GPG key ID: 9F49021A3394567B
Verified
Learn about vigilant mode.
cf24d8d
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Auth Module Release v0.6.1

Welcome to the latest release of the Auth module for the SIGHUP Distribution.

This release updates Pomerium and particularly includes an update to Envoy v1.35.6, to address the following CVEs in Envoy and its dependencies:

Included packages

Package Current Version Previous Version
dex v2.44.0 No update
gangplank v1.1.1 No update
pomerium v0.31.1 v0.30.5

Compatibility

This release adds support for Kubernetes 1.34.x while maintaining compatibility with versions 1.29.x through 1.34.x.

Update Guide 🦮

Process

To upgrade this module from v0.6.0 to v0.6.1, you need to download this new version, then apply the kustomize project. No breaking changes or configuration updates are required.

kustomize build | kubectl apply -f -
Loading

Release v0.6.0

Release v0.6.0

Choose a tag to compare

View all tags
@SIGHUP-C-3PO SIGHUP-C-3PO released this 01 Oct 10:39
v0.6.0
This tag was signed with the committer’s verified signature.
stefanoghinelli Stefano Ghinelli
GPG key ID: 9F49021A3394567B
Verified
Learn about vigilant mode.
92a7b2d
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Auth Module Release v0.6.0

Welcome to the latest release of the Auth module for the SIGHUP Distribution.

This release updates both Pomerium and Dex to their latest versions available upstream, bringing enhanced security features, improved functionality, and better reliability.

Included packages

Package Current Version Previous Version
dex v2.44.0 v2.42.0
gangplank v1.1.1 v1.1.1
pomerium v0.30.5 v0.28.0

Compatibility

This release adds support for Kubernetes 1.33.x while maintaining compatibility with previous versions (1.29.x - 1.32.x).

Update Guide 🦮

Process

To upgrade this module from v0.5.1 to v0.6.0, you need to download this new version, then apply the kustomize project. No breaking changes or configuration updates are required.

kustomize build | kubectl apply -f -

Pomerium

Please pay attention, Pomerium v0.29.0 includes potentially breaking changes that depend on the target environment.

Basically, Pomerium v0.29.0 replaces all existing tracing methods with a new OpenTelemetry-based system:

  • Enable seamless request tracing across multiple services with the new OTEL-based tracing system. Users can now easily configure and understand traces, with improved visibility into the flow of requests, even at low sample rates. All previously supported tracing methods are removed.

For more technical details check the upstream release notes.

Notes

  • Pomerium v0.29.0 has breaking changes that don't impact the module directly
  • Existing policy and configuration files remain fully compatible
  • All current features continue to work as expected
Loading

Preview v0.6.0-rc.0

Preview v0.6.0-rc.0 Pre-release
Pre-release

Choose a tag to compare

View all tags
@SIGHUP-C-3PO SIGHUP-C-3PO released this 10 Sep 08:28
v0.6.0-rc.0
This tag was signed with the committer’s verified signature.
stefanoghinelli Stefano Ghinelli
GPG key ID: 9F49021A3394567B
Verified
Learn about vigilant mode.
92a7b2d
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Auth Module Release v0.6.0

Welcome to the latest release of the Auth module for the SIGHUP Distribution.

This release updates both Pomerium and Dex to their latest versions available upstream, bringing enhanced security features, improved functionality, and better reliability.

Included packages

Package Current Version Previous Version
dex v2.44.0 v2.42.0
gangplank v1.1.1 v1.1.1
pomerium v0.30.5 v0.28.0

Compatibility

This release adds support for Kubernetes 1.33.x while maintaining compatibility with previous versions (1.29.x - 1.32.x).

Update Guide 🦮

Process

To upgrade this module from v0.5.1 to v0.6.0, you need to download this new version, then apply the kustomize project. No breaking changes or configuration updates are required.

kustomize build | kubectl apply -f -

Pomerium

Please pay attention, Pomerium v0.29.0 includes potentially breaking changes that depend on the target environment.

Basically, Pomerium v0.29.0 replaces all existing tracing methods with a new OpenTelemetry-based system:

  • Enable seamless request tracing across multiple services with the new OTEL-based tracing system. Users can now easily configure and understand traces, with improved visibility into the flow of requests, even at low sample rates. All previously supported tracing methods are removed.

For more technical details check the upstream release notes.

Notes

  • Pomerium v0.29.0 has breaking changes that don't impact the module directly
  • Existing policy and configuration files remain fully compatible
  • All current features continue to work as expected
Loading

Release v0.5.1

Release v0.5.1

Choose a tag to compare

View all tags
@SIGHUP-C-3PO SIGHUP-C-3PO released this 19 May 08:28
v0.5.1
9468c1b
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Auth Module Release v0.5.1

Welcome to the latest release of the Auth module for the SIGHUP Distribution.

This release updates the package versions of Gangplank to the latest available.

Included packages

Package Current Version Previous Version
dex v2.42.0 No update
gangplank v1.1.1 v1.1.0
pomerium v0.28.0 No update

Bug fixes 🐞

  • [#42] Fix OIDC refresh-token flows: Gangplank can now include the Identity Provider's TLS certificate in the generated kubeconfig.
    This fixes broken refresh-token flows when the IDP exposes a self-signed certificate.

    To use this feature, mount the IDP certificate inside the container and configure the parameter idpCaPath in the yaml configuration file or the GANGPLANK_CONFIG_IDP_CA_PATH environment variable.

Update Guide 🦮

Process

To upgrade this module from v0.5.0 to v0.5.1, you need to download this new version, then apply the kustomize project. No further action is required.

kustomize build | kubectl apply -f -
Loading

Preview v0.5.1-rc.0

Preview v0.5.1-rc.0 Pre-release
Pre-release

Choose a tag to compare

View all tags
@SIGHUP-C-3PO SIGHUP-C-3PO released this 14 May 07:16
v0.5.1-rc.0
02efb65

Auth Module Release v0.5.1

Welcome to the latest release of the Auth module for the SIGHUP Distribution.

This release updates the package versions of Gangplank to the latest available.

Included packages

Package Current Version Previous Version
dex v2.42.0 No update
gangplank v1.1.1 v1.1.0
pomerium v0.28.0 No update

Bug fixes 🐞

  • [#42] Fix OIDC refresh-token flows: Gangplank can now include the Identity Provider's TLS certificate in the generated kubeconfig.
    This fixes broken refresh-token flows when the IDP exposes a self-signed certificate.

    To use this feature, mount the IDP certificate inside the container and configure the parameter idpCaPath in the yaml configuration file or the GANGPLANK_CONFIG_IDP_CA_PATH environment variable.

Update Guide 🦮

Process

To upgrade this module from v0.5.0 to v0.5.1, you need to download this new version, then apply the kustomize project. No further action is required.

kustomize build | kubectl apply -f -
Loading

Release v0.5.0

Release v0.5.0

Choose a tag to compare

View all tags
@SIGHUP-C-3PO SIGHUP-C-3PO released this 31 Mar 07:49
v0.5.0
68c205c
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Auth Module Release v0.5.0

Welcome to the latest release of the Auth module for the SIGHUP Distribution.

This release updates the packages versions of dex and pomerium to the latest available in upstream.

Included packages

Package Current Version Previous Version
dex v2.42.0 v2.41.1
gangplank v1.1.0 v1.1.0
pomerium v0.28.0 v0.27.1

Update Guide 🦮

Process

To upgrade this module from v0.4.0 to v0.5.0, you need to download this new version, then apply the kustomize project. No further action is required.

kustomize build | kubectl apply -f -
Loading