v0.1.2

• The kube-request-access has a new flag --always-allowed-user-name. This flag allows a certain user, or list of users, to always run exec commands in a cluster.
• Fixed the k3s image version used for the development setup

Changelog

• bdf92e6 Add flag to always allow usernames
• f6601a1 Fix k3s image version referenced in dev setup
• 879b99b Merge pull request #18 from spreadshirt/feat/always-allow-usernames
• 188d9ea Merge pull request #19 from spreadshirt/fix-k3s-version

v0.1.1

kubectl request exec now selects the "default container" correctly to match kubectl execs behavior

Changelog

• 2277e54 Merge pull request #16 from spreadshirt/update-kubectl-request-readme
• f21c143 Merge pull request #17 from spreadshirt/fix-default-container
• db5802b Select the default container if one exists
• 160ba58 Update kubectl-request readme example for renamed command

v0.1.0

This contains a breaking change for the kubectl plugin: It's now named kubectl-request, which should make for a nicer flow and also matches the project name better now.

Changelog

• 3d12088 Fix scripts/create-user to regenerate the CSRs properly
• 3d8e796 Merge pull request #15 from spreadshirt/rename-kubectl-plugin
• de73292 Regenerate demo using asciinema-rec_script
• a0926f3 Rename kubectl plugin to kubectl-request

v0.0.7

This release adds a few usage improvements to the kubectl-access plugin. The docs should also be more helpful now!

Changelog

• 1c1fcf6 Add asciinema demo (and script for said demo)
• bbcdbe3 Add basic architecture diagram
• b4fdd49 Display a human-friendly summary of the request in request grant
• 84c6ba2 Fix panic when --context was not set manually
• ce2b5c5 Fix typo in access grant crd
• 188900c Merge pull request #12 from spreadshirt/fix-shortcut-typo
• 2f94920 Merge pull request #13 from spreadshirt/check-for-updates
• a78c03d Merge pull request #14 from spreadshirt/request-summary
• 960458c Merge pull request #9 from spreadshirt/docs
• a27e1d3 Notify users about available updates
• c0cb787 Print version using --version flag
• ae3e8d8 Silence "ManagedFields" when previewing an accessrequest
• f7ad2f3 Write a first draft of more useful docs

v0.0.6

Small bugfix release, see changelog below.

Changelog

• 2507149 Fix cleanup deleting requests early
• 383863b Fix file name of kubectl-access release archives
• ba5cf33 Merge pull request #10 from spreadshirt/fix-cleanup
• 99910a0 Merge pull request #11 from spreadshirt/fix-goreleaser-issues
• fad8ad5 Only release draft versions on tag pushes

v0.0.5

Another test release with improvements coming from the internal review. Most notably (from #6):

• admins can request access on behalf of others
• it is now possible to allow multiple groups to always have access
• log rejected attempts
• remove expired grants in the background

Changelog

• b9e11f1 Add missing AuditExec calls for rejected execs
• 467b209 Allow admins to create access requests on behalf of users
• 3d77d75 Check if examples/* Docker images can build in CI
• 5d3430d Delete unused and expired objects in the background
• 247586f Extend scripts/create user to be used outside the example setup
• 029e46b Fix and speed up docker builds
• 72edec4 Merge pull request #6 from spreadshirt/improvements-from-internal-review
• a2e343f Merge pull request #7 from spreadshirt/build-kubectl-access
• 30196fc Refactor "is always allowed" check to its own function
• b2334b0 Regenerate local dev certs and make them valid for a year
• 135496f Release kubectl-access binaries using goreleaser
• 0818225 Replace custom keyValuesValue with builtin StringToString variant
• 7950e68 Support allowing multiple groups to always have access