Release Misogynetes v0.2.0 · tym83/misogynetes

Misogynetes, a punishment for misogynists, now works for every client, not only through the kubectl misogyn wrapper.

Highlights

Server mode as an admission webhook (#6): she shares her grievances (pods in trouble in the namespace) as admission warnings in namespaces labelled misogynetes.dev/mode=warn, and refuses changes while there are fresh grievances only in namespaces labelled misogynetes.dev/mode=enforce (misogynetes.dev/break-glass=<reason> lets a change through). system: identities, kube-system, other service accounts unless opted in, leases, events and Secrets are never touched; failurePolicy: Ignore.
Helm chart oci://ghcr.io/tym83/charts/misogynetes and image ghcr.io/tym83/misogynetes-webhook:v0.2.0 (linux amd64/arm64), TLS via cert-manager or generated once.
krew plugin: kubectl krew install --manifest-url=https://github.com/tym83/misogynetes/releases/download/v0.2.0/misogyn.yaml

delete parsing: grievances drop for whatever kubectl says it deleted (selectors, files, -o name), including ReplicaSets, Jobs and pods owned by a deleted workload; --cascade=orphan keeps them (#5).
Deleted objects are no longer brought up; recovery counts a pod as sorted out one minute after its last restart (was ten); one "we need to talk" line per talk; only a real terminal counts as a terminal, so 2>/dev/null gets plain kubectl (#4).
e2e on kind for the chart (generated TLS and cert-manager) and a release dry run in CI (#7).

The comment at the top of the released misogyn.yaml still calls its checksums placeholders and shows a v0.1.0 install URL; the checksums themselves are filled in and correct.

Full Changelog: v0.1.0...v0.2.0