1.15.0

• Add support for allowing fields not specified by the user to be externally-managed (i.e. changeable outside of Config Connector). This feature can be enabled for a resource by enabling K8s server-side apply for the resource, which will be the default for all K8s resources starting in K8s 1.18. More detailed docs about the feature coming soon.
• Operator improvement: add support for cluster-mode set-ups, which allows users to use one Google Service Account for all namespaces in their cluster. This is very similar to the traditional "Workload Identity" installation set-up.
• Fix ContainerCluster validation issue (Issue #242).
• Fix OOM issue for the cnrm-resource-stats-recorder pod (Issue #239).
• Add support for projectViewer prefix for members in IAMPolicy and IAMPolicyMember (Issue #234).
• Reduce spec.revisionHistoryLimit for the cnrm-stats-recorder and cnrm-webhook-manager Deployments from 10 (the default) to 1.
• Fix docs for SecretManagerSecret.

1.14.0

• Added support for SecretManagerSecret

1.13.1

• support --server-dry-run for resource CRDs
• deprecate BigtableInstance's spec.deletionProtection field
• fix a bug for BigtableInstance resource that causes constant reconciliation
• other miscellaneous fixes and improvements

1.13.0

• Fix an issue where IAMPolicy's could not contain the Cloud Storage roles of projectEditor or projectOwner.
• Add an option, iam-format, to config-connector to control IAM output, options are policy, policymember, or none.
• ComputeForwardingRule's target field now supports referencing a ComputeTargetSSLProxy and ComputeTargetTCPProxy.
• DataFlowJob's serviceAccountEmail, network, subnetwork, machineType, and ipConfiguration fields now support updates.
• Fix an issue where config-connector would error on a Project resource.

1.12.1

• You can use config-connector tool to export Google Cloud resources into Config Connector: documentation
• Miscellaneous bug fixes

1.12.0

• Added ability to update streaming DataflowJobs by updating its spec (e.g. spec.templateGcsPath). Note that not all fields can be updated, and batch DataflowJobs don't support updates.
• Added IAMPolicy to the output of config-connector

1.11.1

• Miscellaneous bug fixes and improvement

1.11.0

• Added support for SQLSSLCert (#91)
• Fixed support for autoscaling and manually resizing node pools with ContainerNodePool (#165)
• Supported acquisition of backends added to Compute Backend Services out-of-band of Config Connector (#68)

1.10.0

• Added support for BigQueryJob
• Miscellaneous bug fixes and improvement

1.9.2

• Bug fixes and reliability improvements
• Increasing resource limits and requests for CNRM pods
• improving handling of scenarios when version field on ContainerNodePool is updated externally